@pi-harness/pi-harness 0.1.2 → 0.1.4

package/packages/core/dist/plugins/runtime.js

@@ -1,14 +1,32 @@
 import z from "@deepseek-ai/schemastery";
 import { createAgentSessionFromServices, createAgentSessionRuntime } from "@earendil-works/pi-coding-agent";
 import { PiRuntime } from "../runtime.js";
+import { assertKnownConfigKeys } from "../config.js";
 export const Config = z.object({
     thinkingLevel: z.union(["off", "minimal", "low", "medium", "high", "xhigh", "max"]).default("medium"),
 });
+// Cordis disposes the outgoing fiber and applies the replacement concurrently, so an HMR reload
+// would otherwise build a second AgentSession over the same SessionManager while the first is still
+// streaming, interleaving both runs into one JSONL transcript. Each manager therefore has at most
+// one runtime under construction or teardown at a time.
+const sessionManagerGate = new WeakMap();
+function enterSessionManagerGate(manager) {
+    const ready = sessionManagerGate.get(manager) ?? Promise.resolve();
+    let release;
+    const held = new Promise((resolve) => {
+        release = resolve;
+    });
+    sessionManagerGate.set(manager, ready.then(() => held, () => held));
+    return { ready, release };
+}
 export default {
     name: "pi-runtime",
     inject: ["piModels", "piResources", "piSession", "piTools"],
     Config,
     async apply(context, config) {
+        assertKnownConfigKeys("pi-runtime", config, ["thinkingLevel"]);
+        const gate = enterSessionManagerGate(context.piSession.manager);
+        await gate.ready;
         const tools = context.piTools.acquire();
         context.effect(() => () => tools.release());
         const requestedTools = [...tools.names, ...tools.customTools.map((tool) => tool.name)];
@@ -23,6 +41,10 @@ export default {
                 tools: requestedTools,
                 customTools: tools.customTools,
             });
+            if (result.extensionsResult.errors.length > 0) {
+                result.session.dispose();
+                throw new Error(`Pi extensions failed to load:\n${result.extensionsResult.errors.map((failure) => `${failure.path}: ${failure.error}`).join("\n")}`);
+            }
             return { ...result, services, diagnostics: services.diagnostics };
         };
         const sessionRuntime = await createAgentSessionRuntime(createRuntime, {
@@ -32,10 +54,6 @@ export default {
         });
         const runtime = new PiRuntime(sessionRuntime);
         const bindSession = async (session) => {
-            const activeTools = new Set(session.getAllTools().map((tool) => tool.name));
-            const missingTools = requestedTools.filter((name) => !activeTools.has(name));
-            if (missingTools.length > 0)
-                throw new Error(`Pi tools are not registered: ${missingTools.join(", ")}`);
             await session.bindExtensions({
                 mode: "print",
                 abortHandler: () => {
@@ -45,24 +63,55 @@ export default {
                     context.emit("pi/extension-error", error);
                 },
             });
+            // Reconciled after binding so a tool an extension registers from session_start is visible here.
+            const registeredTools = session.getAllTools().map((tool) => tool.name);
+            const missingTools = requestedTools.filter((name) => !registeredTools.includes(name));
+            if (missingTools.length > 0)
+                throw new Error(`Pi tools are not registered: ${missingTools.join(", ")}`);
+            // Pi treats the tool list as an allowlist, so anything an extension contributed but the
+            // profile did not name is dropped. Report it rather than letting the tool vanish silently.
+            const activeTools = new Set(session.getActiveToolNames());
+            const droppedTools = registeredTools.filter((name) => !activeTools.has(name));
+            if (droppedTools.length > 0)
+                context.emit("pi/extension-error", { extensionPath: "pi-tools", event: "session_start", error: `Pi tools registered by extensions are not enabled because the profile does not list them: ${droppedTools.join(", ")}; add them to the pi-tools names option to enable them` });
         };
-        context.provide("piRuntime", runtime);
         let unsubscribe;
         const rebindSession = async (session) => {
             unsubscribe?.();
             await bindSession(session);
             unsubscribe = session.subscribe((event) => {
-                context.emit("pi/session-event", event);
+                // A throwing listener must not unwind back into Pi's event dispatch and kill the run.
+                try {
+                    context.emit("pi/session-event", event);
+                }
+                catch (error) {
+                    context.emit("pi/extension-error", { extensionPath: "pi/session-event", event: event.type, error: error instanceof Error ? error.message : String(error) });
+                }
             });
         };
-        sessionRuntime.setRebindSession(rebindSession);
-        await rebindSession(sessionRuntime.session);
-        context.effect(() => {
-            return async () => {
-                unsubscribe?.();
-                await runtime.dispose();
-            };
-        });
+        try {
+            context.effect(() => {
+                return async () => {
+                    unsubscribe?.();
+                    try {
+                        await runtime.dispose();
+                    }
+                    finally {
+                        // Released only once teardown has finished, so a replacement fiber cannot build a
+                        // second session over this SessionManager while this one is still writing to it.
+                        gate.release();
+                    }
+                };
+            });
+            context.provide("piRuntime", runtime);
+            sessionRuntime.setRebindSession(rebindSession);
+            await rebindSession(sessionRuntime.session);
+        }
+        catch (error) {
+            await runtime.dispose();
+            gate.release();
+            throw error;
+        }
     },
 };
 //# sourceMappingURL=runtime.js.map

package/packages/core/dist/plugins/runtime.js.map

@@ -1 +1 @@
-{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/plugins/runtime.ts"],"names":[],"mappings":"AACA,OAAO,CAAC,MAAM,0BAA0B,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,yBAAyB,EAA4D,MAAM,iCAAiC,CAAC;AACtK,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAM1C,MAAM,CAAC,MAAM,MAAM,GAA2B,CAAC,CAAC,MAAM,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACtG,CAAC,CAAC;AAEH,eAAe;IACb,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC;IAC3D,MAAM;IACN,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,MAA2B;QACvD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,MAAM,aAAa,GAAqC,KAAK,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,EAAE;YAC3G,MAAM,QAAQ,GAAG,GAAG,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACrH,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;gBAClD,QAAQ;gBACR,cAAc;gBACd,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;gBACjE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ;gBAC/C,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YACH,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QACpE,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,aAAa,EAAE;YACpE,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG;YAC5B,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ;YACtC,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;SAC1C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,KAAK,EAAE,OAAqB,EAAiB,EAAE;YACjE,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5E,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC7E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxG,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,IAAI,EAAE,OAAO;gBACb,YAAY,EAAE,GAAG,EAAE;oBACjB,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;gBAC5C,CAAC;aACF,CAAC,CAAC;QACL,CAAC,CAAC;QACF,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QACtC,IAAI,WAAqC,CAAC;QAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,OAAqB,EAAiB,EAAE;YACnE,WAAW,EAAE,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC3B,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;YAC1C,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,cAAc,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC5C,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;YAClB,OAAO,KAAK,IAAI,EAAE;gBAChB,WAAW,EAAE,EAAE,CAAC;gBAChB,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YAC1B,CAAC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}
+{"version":3,"file":"runtime.js","sourceRoot":"","sources":["../../src/plugins/runtime.ts"],"names":[],"mappings":"AACA,OAAO,CAAC,MAAM,0BAA0B,CAAC;AACzC,OAAO,EAAE,8BAA8B,EAAE,yBAAyB,EAAiF,MAAM,iCAAiC,CAAC;AAC3L,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAC1C,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAMrD,MAAM,CAAC,MAAM,MAAM,GAA2B,CAAC,CAAC,MAAM,CAAC;IACrD,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACtG,CAAC,CAAC;AAEH,gGAAgG;AAChG,oGAAoG;AACpG,kGAAkG;AAClG,wDAAwD;AACxD,MAAM,kBAAkB,GAAG,IAAI,OAAO,EAAiC,CAAC;AAExE,SAAS,uBAAuB,CAAC,OAAuB;IACtD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;IACnE,IAAI,OAAoB,CAAC;IACzB,MAAM,IAAI,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;QACzC,OAAO,GAAG,OAAO,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACpE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAC5B,CAAC;AAED,eAAe;IACb,IAAI,EAAE,YAAY;IAClB,MAAM,EAAE,CAAC,UAAU,EAAE,aAAa,EAAE,WAAW,EAAE,SAAS,CAAC;IAC3D,MAAM;IACN,KAAK,CAAC,KAAK,CAAC,OAAgB,EAAE,MAA2B;QACvD,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;QAC/D,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAChE,MAAM,IAAI,CAAC,KAAK,CAAC;QACjB,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACxC,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvF,MAAM,aAAa,GAAqC,KAAK,EAAE,EAAE,GAAG,EAAE,cAAc,EAAE,iBAAiB,EAAE,EAAE,EAAE;YAC3G,MAAM,QAAQ,GAAG,GAAG,KAAK,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;YACrH,MAAM,MAAM,GAAG,MAAM,8BAA8B,CAAC;gBAClD,QAAQ;gBACR,cAAc;gBACd,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;gBACjE,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,KAAK;gBAC7B,aAAa,EAAE,MAAM,CAAC,aAAa,IAAI,QAAQ;gBAC/C,KAAK,EAAE,cAAc;gBACrB,WAAW,EAAE,KAAK,CAAC,WAAW;aAC/B,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC9C,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;gBACzB,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvJ,CAAC;YACD,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC;QACpE,CAAC,CAAC;QACF,MAAM,cAAc,GAAG,MAAM,yBAAyB,CAAC,aAAa,EAAE;YACpE,GAAG,EAAE,OAAO,CAAC,WAAW,CAAC,GAAG;YAC5B,QAAQ,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ;YACtC,cAAc,EAAE,OAAO,CAAC,SAAS,CAAC,OAAO;SAC1C,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,SAAS,CAAC,cAAc,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,KAAK,EAAE,OAAqB,EAAiB,EAAE;YACjE,MAAM,OAAO,CAAC,cAAc,CAAC;gBAC3B,IAAI,EAAE,OAAO;gBACb,YAAY,EAAE,GAAG,EAAE;oBACjB,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;gBACvB,CAAC;gBACD,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBACjB,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAC;gBAC5C,CAAC;aACF,CAAC,CAAC;YACH,gGAAgG;YAChG,MAAM,eAAe,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YACtF,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxG,wFAAwF;YACxF,2FAA2F;YAC3F,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;YAC1D,MAAM,YAAY,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9E,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;gBAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,6FAA6F,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,wDAAwD,EAAE,CAAC,CAAC;QAC9S,CAAC,CAAC;QACF,IAAI,WAAqC,CAAC;QAC1C,MAAM,aAAa,GAAG,KAAK,EAAE,OAAqB,EAAiB,EAAE;YACnE,WAAW,EAAE,EAAE,CAAC;YAChB,MAAM,WAAW,CAAC,OAAO,CAAC,CAAC;YAC3B,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,EAAE;gBACxC,sFAAsF;gBACtF,IAAI,CAAC;oBACH,OAAO,CAAC,IAAI,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;gBAC1C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,aAAa,EAAE,kBAAkB,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;gBAC9J,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QACF,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE;gBAClB,OAAO,KAAK,IAAI,EAAE;oBAChB,WAAW,EAAE,EAAE,CAAC;oBAChB,IAAI,CAAC;wBACH,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;oBAC1B,CAAC;4BAAS,CAAC;wBACT,kFAAkF;wBAClF,iFAAiF;wBACjF,IAAI,CAAC,OAAO,EAAE,CAAC;oBACjB,CAAC;gBACH,CAAC,CAAC;YACJ,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;YACtC,cAAc,CAAC,gBAAgB,CAAC,aAAa,CAAC,CAAC;YAC/C,MAAM,aAAa,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;QAC9C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,OAAO,EAAE,CAAC;YACf,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/secure-audit.d.ts

@@ -0,0 +1,31 @@
+import type { Context } from "@deepseek-ai/cordis";
+export type AuditSeverity = "critical" | "high" | "medium";
+export type AuditFindingKind = "credential" | "private-key" | "shell-pipeline" | "destructive-command";
+export interface AuditFinding {
+    path: string;
+    line: number;
+    severity: AuditSeverity;
+    kind: AuditFindingKind;
+    message: string;
+}
+export interface AuditSummary {
+    root: string;
+    scanned: number;
+    skipped: number;
+    total: number;
+    critical: number;
+    high: number;
+    medium: number;
+    changed: boolean;
+    findings: AuditFinding[];
+}
+export declare function auditText(path: string, source: string): AuditFinding[];
+export declare function summarizeAudit(findings: readonly AuditFinding[], root?: string, scanned?: number, skipped?: number): AuditSummary;
+export declare function auditWorkspace(root: string, requested?: string): Promise<AuditSummary>;
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=secure-audit.d.ts.map

package/packages/core/dist/plugins/secure-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-audit.d.ts","sourceRoot":"","sources":["../../src/plugins/secure-audit.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AASnD,MAAM,MAAM,aAAa,GAAG,UAAU,GAAG,MAAM,GAAG,QAAQ,CAAC;AAC3D,MAAM,MAAM,gBAAgB,GAAG,YAAY,GAAG,aAAa,GAAG,gBAAgB,GAAG,qBAAqB,CAAC;AAEvG,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,aAAa,CAAC;IACxB,IAAI,EAAE,gBAAgB,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,YAAY,EAAE,CAAC;CAC1B;AAYD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,YAAY,EAAE,CAYtE;AAED,wBAAgB,cAAc,CAAC,QAAQ,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,SAAM,EAAE,OAAO,SAAI,EAAE,OAAO,SAAI,GAAG,YAAY,CAKpH;AAgBD,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,SAAM,GAAG,OAAO,CAAC,YAAY,CAAC,CA0BzF;;;;mBASgB,OAAO;;AAHxB,wBAkCE"}

package/packages/core/dist/plugins/secure-audit.js

@@ -0,0 +1,121 @@
+import { readdir, readFile, stat } from "node:fs/promises";
+import { basename, join, relative, resolve } from "node:path";
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+import { resolveExistingWorkspacePath } from "../workspace-path.js";
+const maxFiles = 500;
+const maxFileBytes = 512 * 1024;
+const ignoredDirectories = new Set([".git", ".pi", "node_modules", "dist", "build", "coverage"]);
+const credentialPattern = /\b(?:sk-[A-Za-z0-9_-]{10,}|gh[pousr]_[A-Za-z0-9]{10,}|xox[baprs]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{12,})\b/iu;
+const privateKeyPattern = /-----BEGIN (?:RSA|EC|OPENSSH|DSA|PGP )?PRIVATE KEY-----/u;
+const assignmentPattern = /^\s*(?:password|secret|api[_-]?key|token)\s*[:=]\s*["']?[^\s"']{8,}/iu;
+const shellPipelinePattern = /\b(?:curl|wget)\b[^\n|]{0,240}\|\s*(?:sh|bash|zsh)\b/iu;
+const destructiveCommandPattern = /\brm\s+-rf(?:\s|$)/iu;
+function finding(path, line, severity, kind, message) {
+    return { path, line, severity, kind, message };
+}
+export function auditText(path, source) {
+    const findings = [];
+    source.split("\n").forEach((lineText, index) => {
+        const line = index + 1;
+        if (privateKeyPattern.test(lineText))
+            findings.push(finding(path, line, "critical", "private-key", "Private key material is present in source text."));
+        else if (credentialPattern.test(lineText) || assignmentPattern.test(lineText))
+            findings.push(finding(path, line, "critical", "credential", "A credential-like value is present in source text."));
+        if (shellPipelinePattern.test(lineText))
+            findings.push(finding(path, line, "high", "shell-pipeline", "A remote script is piped directly into a shell."));
+        if (destructiveCommandPattern.test(lineText))
+            findings.push(finding(path, line, "high", "destructive-command", "A recursive force delete command is present."));
+    });
+    return findings;
+}
+export function summarizeAudit(findings, root = ".", scanned = 0, skipped = 0) {
+    const critical = findings.filter((item) => item.severity === "critical").length;
+    const high = findings.filter((item) => item.severity === "high").length;
+    const medium = findings.filter((item) => item.severity === "medium").length;
+    return { root, scanned, skipped, total: findings.length, critical, high, medium, changed: findings.length > 0, findings: [...findings] };
+}
+async function workspaceFiles(root, current, files) {
+    if (files.length >= maxFiles)
+        return;
+    const entries = await readdir(current, { withFileTypes: true });
+    for (const entry of entries) {
+        if (files.length >= maxFiles)
+            return;
+        const fullPath = join(current, entry.name);
+        if (entry.isDirectory()) {
+            if (!ignoredDirectories.has(entry.name))
+                await workspaceFiles(root, fullPath, files);
+        }
+        else if (entry.isFile()) {
+            files.push(relative(root, fullPath));
+        }
+    }
+}
+export async function auditWorkspace(root, requested = ".") {
+    const resolved = await resolveExistingWorkspacePath(root, requested, "Audit path must stay inside the current workspace");
+    root = resolved.root;
+    const target = resolved.target;
+    const metadata = await stat(target);
+    const files = [];
+    if (metadata.isFile())
+        files.push(relative(root, target));
+    else if (metadata.isDirectory())
+        await workspaceFiles(root, target, files);
+    else
+        throw new Error("Audit target must be a file or directory");
+    const findings = [];
+    let skipped = 0;
+    for (const file of files) {
+        const fullPath = resolve(root, file);
+        const fileMetadata = await stat(fullPath);
+        if (fileMetadata.size > maxFileBytes) {
+            skipped += 1;
+            continue;
+        }
+        const source = await readFile(fullPath, "utf8");
+        if (source.includes("\u0000")) {
+            skipped += 1;
+            continue;
+        }
+        findings.push(...auditText(file || basename(fullPath), source));
+    }
+    return summarizeAudit(findings, relative(root, target) || ".", files.length, skipped);
+}
+function emptySummary() {
+    return summarizeAudit([], ".");
+}
+export default {
+    name: "pi-secure-audit",
+    inject: ["piHarnessLaunch", "piPluginUi", "piTools"],
+    apply(context) {
+        let latest;
+        const unregister = context.piTools.register(defineTool({
+            name: "security_audit",
+            label: "Security audit",
+            description: "Read-only scan of workspace text files for exposed credentials and dangerous shell commands; findings are value-redacted.",
+            promptSnippet: "audit the workspace for secrets and dangerous commands",
+            parameters: Type.Object({ path: Type.Optional(Type.String({ description: "Workspace-relative file or directory to scan" })) }),
+            async execute(_toolCallId, params) {
+                latest = await auditWorkspace(context.piHarnessLaunch.cwd, params.path ?? ".");
+                return {
+                    content: [{ type: "text", text: `${latest.total} findings across ${latest.scanned} files (${latest.critical} critical, ${latest.high} high).` }],
+                    details: latest,
+                };
+            },
+        }));
+        const disposePanel = context.piPluginUi.register({
+            id: "secure-audit-panel",
+            pluginId: "@pi-harness/core/plugins/secure-audit",
+            title: "Secure Audit",
+            description: "只读扫描工作区中的凭据泄露和危险命令，结果不会显示敏感值。",
+            icon: "⌕",
+            read: () => latest ?? emptySummary(),
+        });
+        context.effect(() => () => {
+            unregister();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=secure-audit.js.map

package/packages/core/dist/plugins/secure-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secure-audit.js","sourceRoot":"","sources":["../../src/plugins/secure-audit.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE9D,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAwB,MAAM,iCAAiC,CAAC;AACnF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sBAAsB,CAAC;AAEpE,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,YAAY,GAAG,GAAG,GAAG,IAAI,CAAC;AAChC,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC;AAyBjG,MAAM,iBAAiB,GAAG,2GAA2G,CAAC;AACtI,MAAM,iBAAiB,GAAG,0DAA0D,CAAC;AACrF,MAAM,iBAAiB,GAAG,uEAAuE,CAAC;AAClG,MAAM,oBAAoB,GAAG,wDAAwD,CAAC;AACtF,MAAM,yBAAyB,GAAG,sBAAsB,CAAC;AAEzD,SAAS,OAAO,CAAC,IAAY,EAAE,IAAY,EAAE,QAAuB,EAAE,IAAsB,EAAE,OAAe;IAC3G,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAc;IACpD,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC7C,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;QACvB,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,aAAa,EAAE,iDAAiD,CAAC,CAAC,CAAC;aAClJ,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC3E,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,UAAU,EAAE,YAAY,EAAE,oDAAoD,CAAC,CAAC,CAAC;QACrH,IAAI,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,iDAAiD,CAAC,CAAC,CAAC;QACzJ,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC1C,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,qBAAqB,EAAE,8CAA8C,CAAC,CAAC,CAAC;IACtH,CAAC,CAAC,CAAC;IACH,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,QAAiC,EAAE,IAAI,GAAG,GAAG,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC;IACpG,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,UAAU,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,MAAM,CAAC;IACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,MAAM,CAAC;IAC5E,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,CAAC;AAC3I,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,OAAe,EAAE,KAAe;IAC1E,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;QAAE,OAAO;IACrC,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,MAAM,IAAI,QAAQ;YAAE,OAAO;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YACxB,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,MAAM,cAAc,CAAC,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvF,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,SAAS,GAAG,GAAG;IAChE,MAAM,QAAQ,GAAG,MAAM,4BAA4B,CAAC,IAAI,EAAE,SAAS,EAAE,mDAAmD,CAAC,CAAC;IAC1H,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IACrB,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,QAAQ,CAAC,MAAM,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;SACrD,IAAI,QAAQ,CAAC,WAAW,EAAE;QAAE,MAAM,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;;QACtE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAmB,EAAE,CAAC;IACpC,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,YAAY,CAAC,IAAI,GAAG,YAAY,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9B,OAAO,IAAI,CAAC,CAAC;YACb,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAClE,CAAC;IACD,OAAO,cAAc,CAAC,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AACxF,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;AACjC,CAAC;AAED,eAAe;IACb,IAAI,EAAE,iBAAiB;IACvB,MAAM,EAAE,CAAC,iBAAiB,EAAE,YAAY,EAAE,SAAS,CAAC;IACpD,KAAK,CAAC,OAAgB;QACpB,IAAI,MAAgC,CAAC;QACrC,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CACzC,UAAU,CAAC;YACT,IAAI,EAAE,gBAAgB;YACtB,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,2HAA2H;YACxI,aAAa,EAAE,wDAAwD;YACvE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,8CAA8C,EAAE,CAAC,CAAC,EAAE,CAAC;YAC9H,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,MAAM;gBAC/B,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC;gBAC/E,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,KAAK,oBAAoB,MAAM,CAAC,OAAO,WAAW,MAAM,CAAC,QAAQ,cAAc,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;oBAChJ,OAAO,EAAE,MAAM;iBAChB,CAAC;YACJ,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,EAAE,EAAE,oBAAoB;YACxB,QAAQ,EAAE,uCAAuC;YACjD,KAAK,EAAE,cAAc;YACrB,WAAW,EAAE,+BAA+B;YAC5C,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,IAAI,YAAY,EAAE;SACrC,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACxB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/session-bookmarks.d.ts

@@ -0,0 +1,15 @@
+import type { Context } from "@deepseek-ai/cordis";
+export type SessionBookmark = {
+    id: string;
+    entryId: string;
+    label: string;
+};
+export declare function normalizeBookmarkLabel(value: string): string;
+export declare function listSessionBookmarks(entries: readonly unknown[]): SessionBookmark[];
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=session-bookmarks.d.ts.map

package/packages/core/dist/plugins/session-bookmarks.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bookmarks.d.ts","sourceRoot":"","sources":["../../src/plugins/session-bookmarks.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAMnD,MAAM,MAAM,eAAe,GAAG;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7E,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI5D;AAMD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,SAAS,OAAO,EAAE,GAAG,eAAe,EAAE,CASnF;;;;mBAKgB,OAAO;;AAHxB,wBA2DE"}

package/packages/core/dist/plugins/session-bookmarks.js

@@ -0,0 +1,87 @@
+import { Type } from "@earendil-works/pi-ai";
+import { defineTool } from "@earendil-works/pi-coding-agent";
+const maxLabelLength = 120;
+export function normalizeBookmarkLabel(value) {
+    const normalized = value.trim();
+    if (normalized.length < 1 || normalized.length > maxLabelLength)
+        throw new Error("Bookmark label must contain 1-120 characters");
+    return normalized;
+}
+function record(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value) ? value : undefined;
+}
+export function listSessionBookmarks(entries) {
+    const labels = new Map();
+    for (const entry of entries) {
+        const item = record(entry);
+        if (item?.type !== "label" || typeof item.targetId !== "string")
+            continue;
+        if (typeof item.label === "string" && item.label.trim() !== "")
+            labels.set(item.targetId, item.label.trim());
+        else
+            labels.delete(item.targetId);
+    }
+    return [...labels].map(([entryId, label]) => ({ id: entryId, entryId, label }));
+}
+export default {
+    name: "pi-session-bookmarks",
+    inject: ["piSession", "piPluginUi", "piTools"],
+    apply(context) {
+        const manager = context.piSession.manager;
+        const readBookmarks = () => listSessionBookmarks(manager.getEntries());
+        const unregister = context.piTools.register(defineTool({
+            name: "session_bookmarks",
+            label: "Session bookmarks",
+            description: "Add, list, or remove labels on entries in the current Pi session using native session history.",
+            promptSnippet: "bookmark an important point in the current session",
+            parameters: Type.Object({
+                action: Type.Union([Type.Literal("add"), Type.Literal("list"), Type.Literal("remove")]),
+                label: Type.Optional(Type.String({ description: "Bookmark label for add" })),
+                entryId: Type.Optional(Type.String({ description: "Native session entry id for add" })),
+                bookmarkId: Type.Optional(Type.String({ description: "Bookmark id for remove" })),
+            }),
+            execute(_toolCallId, params) {
+                return Promise.resolve().then(() => {
+                    if (params.action === "add") {
+                        const label = normalizeBookmarkLabel(params.label ?? "");
+                        const entryId = params.entryId?.trim();
+                        if (entryId === undefined || entryId === "")
+                            throw new Error("Bookmark entryId is required when adding a bookmark");
+                        manager.appendLabelChange(entryId, label);
+                        return { content: [{ type: "text", text: `Bookmark added: ${label}` }], details: { bookmarks: readBookmarks() } };
+                    }
+                    if (params.action === "remove") {
+                        const bookmarkId = params.bookmarkId?.trim();
+                        if (bookmarkId === undefined || bookmarkId === "")
+                            throw new Error("Bookmark bookmarkId is required when removing a bookmark");
+                        const bookmark = readBookmarks().find((item) => item.id === bookmarkId);
+                        if (bookmark === undefined)
+                            throw new Error("Bookmark was not found");
+                        manager.appendLabelChange(bookmark.entryId, undefined);
+                    }
+                    const bookmarks = readBookmarks();
+                    return {
+                        content: [{ type: "text", text: bookmarks.map((bookmark) => `${bookmark.id}: ${bookmark.label}`).join("\n") || "No bookmarks found." }],
+                        details: { bookmarks },
+                    };
+                });
+            },
+        }));
+        const disposePanel = context.piPluginUi.register({
+            id: "session-bookmarks-panel",
+            pluginId: "@pi-harness/core/plugins/session-bookmarks",
+            title: "Session Bookmarks",
+            description: "为重要会话节点添加原生持久化标签，不修改已有消息内容。",
+            icon: "☆",
+            read: () => {
+                const bookmarks = readBookmarks();
+                return { bookmarks, total: bookmarks.length };
+            },
+        });
+        context.effect(() => () => {
+            unregister();
+            disposePanel();
+        });
+    },
+};
+//# sourceMappingURL=session-bookmarks.js.map

package/packages/core/dist/plugins/session-bookmarks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bookmarks.js","sourceRoot":"","sources":["../../src/plugins/session-bookmarks.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAwB,MAAM,iCAAiC,CAAC;AAEnF,MAAM,cAAc,GAAG,GAAG,CAAC;AAI3B,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,IAAI,UAAU,CAAC,MAAM,GAAG,cAAc;QAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;IACjI,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/H,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAA2B;IAC9D,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ;YAAE,SAAS;QAC1E,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;;YACxG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;AAClF,CAAC;AAED,eAAe;IACb,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,CAAC,WAAW,EAAE,YAAY,EAAE,SAAS,CAAC;IAC9C,KAAK,CAAC,OAAgB;QACpB,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC;QAC1C,MAAM,aAAa,GAAG,GAAsB,EAAE,CAAC,oBAAoB,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;QAC1F,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CACzC,UAAU,CAAC;YACT,IAAI,EAAE,mBAAmB;YACzB,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,gGAAgG;YAC7G,aAAa,EAAE,oDAAoD;YACnE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC;gBACtB,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACvF,KAAK,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC5E,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,iCAAiC,EAAE,CAAC,CAAC;gBACvF,UAAU,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC,CAAC;aAClF,CAAC;YACF,OAAO,CAAC,WAAW,EAAE,MAAM;gBACzB,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;oBACjC,IAAI,MAAM,CAAC,MAAM,KAAK,KAAK,EAAE,CAAC;wBAC5B,MAAM,KAAK,GAAG,sBAAsB,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;wBACzD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC;wBACvC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE;4BAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;wBACpH,OAAO,CAAC,iBAAiB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAC1C,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,KAAK,EAAE,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC;oBACpH,CAAC;oBACD,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;wBAC/B,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;wBAC7C,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,EAAE;4BAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;wBAC/H,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;wBACxE,IAAI,QAAQ,KAAK,SAAS;4BAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;wBACtE,OAAO,CAAC,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;oBACzD,CAAC;oBACD,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;oBAClC,OAAO;wBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,GAAG,QAAQ,CAAC,EAAE,KAAK,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,qBAAqB,EAAE,CAAC;wBACvI,OAAO,EAAE,EAAE,SAAS,EAAE;qBACvB,CAAC;gBACJ,CAAC,CAAC,CAAC;YACL,CAAC;SACF,CAAC,CACH,CAAC;QACF,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;YAC/C,EAAE,EAAE,yBAAyB;YAC7B,QAAQ,EAAE,4CAA4C;YACtD,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,6BAA6B;YAC1C,IAAI,EAAE,GAAG;YACT,IAAI,EAAE,GAAG,EAAE;gBACT,MAAM,SAAS,GAAG,aAAa,EAAE,CAAC;gBAClC,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,CAAC,MAAM,EAAE,CAAC;YAChD,CAAC;SACF,CAAC,CAAC;QACH,OAAO,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE;YACxB,UAAU,EAAE,CAAC;YACb,YAAY,EAAE,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC"}

package/packages/core/dist/plugins/session-bridge.d.ts

@@ -0,0 +1,44 @@
+import type { Context } from "@deepseek-ai/cordis";
+declare const bridgeVersion: 1;
+export interface BridgeSource {
+    sessionId: string;
+    cwd: string;
+    model?: {
+        provider: string;
+        modelId: string;
+    };
+}
+export interface BridgeMessage {
+    role: "user" | "assistant" | "toolResult" | "system" | "other";
+    text: string;
+    hasImages: boolean;
+}
+export interface BridgePackage {
+    version: typeof bridgeVersion;
+    source: BridgeSource;
+    createdAt: string;
+    messageCount: number;
+    messages: BridgeMessage[];
+    unresolvedAttachments: string[];
+}
+export interface HandoffPreview {
+    goal: string;
+    currentState: string;
+    decisions: string[];
+    keyFiles: string[];
+    nextStep: string;
+}
+type MessageInput = {
+    role?: unknown;
+    content?: unknown;
+};
+export declare function buildHandoffPreview(packageValue: BridgePackage): HandoffPreview;
+export declare function buildBridgePackage(source: BridgeSource, input: readonly MessageInput[]): BridgePackage;
+export declare function parseBridgePackage(raw: string): BridgePackage;
+declare const _default: {
+    name: string;
+    inject: string[];
+    apply(context: Context): void;
+};
+export default _default;
+//# sourceMappingURL=session-bridge.d.ts.map

package/packages/core/dist/plugins/session-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-bridge.d.ts","sourceRoot":"","sources":["../../src/plugins/session-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD,QAAA,MAAM,aAAa,EAAG,CAAU,CAAC;AAOjC,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CAC/C;AAED,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,YAAY,GAAG,QAAQ,GAAG,OAAO,CAAC;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,OAAO,aAAa,CAAC;IAC9B,MAAM,EAAE,YAAY,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,aAAa,EAAE,CAAC;IAC1B,qBAAqB,EAAE,MAAM,EAAE,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,KAAK,YAAY,GAAG;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAC;AA8C1D,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,aAAa,GAAG,cAAc,CAW/E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,YAAY,EAAE,GAAG,aAAa,CAqBtG;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,aAAa,CAqD7D;;;;mBAwBgB,OAAO;;AAHxB,wBAsGE"}