@pi-harness/pi-harness 0.1.29 → 0.1.31

package/apps/web/profile/cordis.yml

@@ -26,231 +26,10 @@
           - bash
           - edit
           - write
-    - id: agent-teams
-      name: "@pi-harness/plugin-agent-teams"
-      config: {}
-    - id: modlens
-      name: "@pi-harness/plugin-modlens"
-      config: {}
-    - id: git-time-capsule
-      name: "@pi-harness/plugin-git-time-capsule"
-      config: {}
-    - id: dependency-checker
-      name: "@pi-harness/plugin-dependency-checker"
-      config: {}
-    - id: at-file
-      name: "@pi-harness/plugin-at-file"
-      config: {}
-    - id: test-harness
-      name: "@pi-harness/plugin-test-harness"
-      config: {}
-    - id: session-insights
-      name: "@pi-harness/plugin-session-insights"
-      config: {}
-    - id: readme-gen
-      name: "@pi-harness/plugin-readme-gen"
-      config: {}
-    - id: i18n-pair
-      name: "@pi-harness/plugin-i18n-pair"
-      config: {}
-    - id: cleaner
-      name: "@pi-harness/plugin-cleaner"
-      config: {}
-    - id: sql-lens
-      name: "@pi-harness/plugin-sql-lens"
-      config: {}
-    - id: docker-sandbox
-      name: "@pi-harness/plugin-docker-sandbox"
-      config: {}
-    - id: mcp-client
-      name: "@pi-harness/plugin-mcp-client"
-      config: {}
-    - id: mcp-panel
-      name: "@pi-harness/plugin-mcp-panel"
-      config: {}
-    - id: browser-fetch
-      name: "@pi-harness/plugin-browser-fetch"
-      config: {}
-    - id: web-research
-      name: "@pi-harness/plugin-web-research"
-      config: {}
-    - id: browser-session
-      name: "@pi-harness/plugin-browser-session"
-      config: {}
-    - id: yaml-validator
-      name: "@pi-harness/plugin-yaml-validator"
-      config: {}
-    - id: mock-server
-      name: "@pi-harness/plugin-mock-server"
-      config: {}
-    - id: cli-notifier
-      name: "@pi-harness/plugin-cli-notifier"
-      config: {}
-    - id: obsidian-sync
-      name: "@pi-harness/plugin-obsidian-sync"
-      config: {}
-    - id: context-doctor
-      name: "@pi-harness/plugin-context-doctor"
-      config: {}
-    - id: history-compressor
-      name: "@pi-harness/plugin-history-compressor"
-      config: {}
-    - id: reviewer-bot
-      name: "@pi-harness/plugin-reviewer-bot"
-      config: {}
-    - id: auto-mode
-      name: "@pi-harness/plugin-auto-mode"
-      config: {}
-    - id: plan-execute
-      name: "@pi-harness/plugin-plan-execute"
-      config: {}
-    - id: plugin-finder
-      name: "@pi-harness/plugin-plugin-finder"
-      config: {}
-    - id: memory
-      name: "@pi-harness/plugin-memory"
-      config: {}
-    - id: graph-memory
-      name: "@pi-harness/plugin-graph-memory"
-      config: {}
-    - id: taskboard
-      name: "@pi-harness/plugin-taskboard"
-      config: {}
-    - id: synapse
-      name: "@pi-harness/plugin-synapse"
-      config: {}
-    - id: hol-guard
-      name: "@pi-harness/plugin-hol-guard"
-      config: {}
-    - id: plugin-radar
-      name: "@pi-harness/plugin-plugin-radar"
-      config: {}
-    - id: plugin-stars
-      name: "@pi-harness/plugin-plugin-stars"
-      config: {}
-    - id: plugin-check
-      name: "@pi-harness/plugin-plugin-check"
-      config: {}
-    - id: annotation
-      name: "@pi-harness/plugin-annotation"
-      config: {}
-    - id: cost-meter
-      name: "@pi-harness/plugin-cost-meter"
-      config:
-        dailyBudget: 0
-    - id: undo-savepoint
-      name: "@pi-harness/plugin-undo-savepoint"
-      config: {}
-    - id: skill-catalog
-      name: "@pi-harness/plugin-skill-catalog"
-      config: {}
-    - id: canvas-draw
-      name: "@pi-harness/plugin-canvas-draw"
-      config: {}
-    - id: image-compressor
-      name: "@pi-harness/plugin-image-compressor"
-      config: {}
-    - id: workspace-search
-      name: "@pi-harness/plugin-workspace-search"
-      config: {}
-    - id: prompt-guard
-      name: "@pi-harness/plugin-prompt-guard"
-      config: {}
-    - id: code2skill
-      name: "@pi-harness/plugin-code2skill"
-      config: {}
-    - id: tab-manager
-      name: "@pi-harness/plugin-tab-manager"
-      config: {}
-    - id: genui
-      name: "@pi-harness/plugin-genui"
-      config: {}
-    - id: anchored-standard
-      name: "@pi-harness/plugin-anchored-standard"
-      config: {}
-    - id: telemetry-blocker
-      name: "@pi-harness/plugin-telemetry-blocker"
-      config: {}
-    - id: change-verifier
-      name: "@pi-harness/plugin-change-verifier"
-      config: {}
-    - id: context
-      name: "@pi-harness/plugin-context"
-      config: {}
     - id: runtime
       name: "@pi-harness/core/plugins/runtime"
       config:
         thinkingLevel: medium
-    - id: plugin-dev
-      name: "@pi-harness/plugin-plugin-dev"
-      config: {}
-    - id: openpets
-      name: "@pi-harness/plugin-openpets"
-      config: {}
-    - id: session-bridge
-      name: "@pi-harness/plugin-session-bridge"
-      config: {}
-    - id: skill-guard
-      name: "@pi-harness/plugin-skill-guard"
-      config: {}
-    - id: recall-unread
-      name: "@pi-harness/plugin-recall-unread"
-      config: {}
-    - id: turn-rewind
-      name: "@pi-harness/plugin-turn-rewind"
-      config: {}
-    - id: session-export
-      name: "@pi-harness/plugin-session-export"
-      config: {}
-    - id: session-search
-      name: "@pi-harness/plugin-session-search"
-      config: {}
-    - id: session-compare
-      name: "@pi-harness/plugin-session-compare"
-      config: {}
-    - id: secure-audit
-      name: "@pi-harness/plugin-secure-audit"
-      config: {}
-    - id: session-bookmarks
-      name: "@pi-harness/plugin-session-bookmarks"
-      config: {}
-    - id: llm-verifier
-      name: "@pi-harness/plugin-llm-verifier"
-      config: {}
-    - id: module-search
-      name: "@pi-harness/plugin-module-search"
-      config: {}
-    - id: workspace-navigator
-      name: "@pi-harness/plugin-workspace-navigator"
-      config: {}
-    - id: better-sidebar
-      name: "@pi-harness/plugin-better-sidebar"
-      config: {}
-    - id: archify
-      name: "@pi-harness/plugin-archify"
-      config: {}
-    - id: reverse-skill
-      name: "@pi-harness/plugin-reverse-skill"
-      config: {}
-    - id: colleague-skill
-      name: "@pi-harness/plugin-colleague-skill"
-      config: {}
-    - id: prompt-library
-      name: "@pi-harness/plugin-prompt-library"
-      config: {}
-    - id: token-guard
-      name: "@pi-harness/plugin-token-guard"
-      config:
-        maxPercent: 90
-    - id: fail-logger
-      name: "@pi-harness/plugin-fail-logger"
-      config: {}
-    - id: vision-toolkit
-      name: "@pi-harness/plugin-vision-toolkit"
-      config: {}
-    - id: runtime-doctor
-      name: "@pi-harness/plugin-runtime-doctor"
-      config: {}
     - id: webserver
       name: "@pi-harness/host-webserver"
       config:

package/apps/web/server-dist/bin.js

@@ -2,7 +2,7 @@
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { bootHarness, coreUpdateNotice, provideLaunchContext } from "@pi-harness/core";
+import { bootHarness, coreUpdateNotice, prepareHarnessProfile, provideLaunchContext } from "@pi-harness/core";
 import "@pi-harness/host-webserver";
 // An unhandled 'error' event on a stream throws, so an EPIPE from a reader that closed early (`pi-harness | head -1`) would kill the process before the signal handlers can run the graceful shutdown. Swallowing the event leaves the write silently dropped, which is what a closed pipe means.
 process.stdout.on("error", () => { });
@@ -41,7 +41,9 @@ const cwd = process.cwd();
 const configuredAgentDir = process.env.PI_AGENT_DIR?.trim();
 const agentDir = configuredAgentDir === undefined || configuredAgentDir.length === 0 ? join(homedir(), ".pi", "agent") : resolve(cwd, configuredAgentDir);
 const staticDir = fileURLToPath(new URL("../dist", import.meta.url));
-const profilePath = fileURLToPath(new URL("../profile/cordis.yml", import.meta.url));
+const builtinProfilePath = fileURLToPath(new URL("../profile/cordis.yml", import.meta.url));
+// The web console installs marketplace plugins with npm and then imports them, so the profile it edits and the node_modules it installs into live in a directory the user owns rather than inside the installed package, which npm replaces on every upgrade.
+const profilePath = await prepareHarnessProfile({ builtinProfilePath, profileName: "web", cwd });
 process.env.PI_HARNESS_WEB_DIST = staticDir;
 process.env.PI_HARNESS_HOST = host;
 process.env.PI_HARNESS_PORT = String(port);

package/apps/web/server-dist/bin.js.map

@@ -1 +1 @@
-{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/server/bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AACvF,OAAO,4BAA4B,CAAC;AAMpC,kSAAkS;AAClS,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAErC,6LAA6L;AAC7L,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,WAAW,CAAC;AAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/F,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB,CAAC,CAAC;AAC5E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM;IAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AACpI,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG;IACzE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;AACpH,qLAAqL;AACrL,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;KAC9D,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;KAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,uOAAuO;AACvO,MAAM,cAAc,GAAG,CAAC,KAAa,EAAW,EAAE;IAChD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;AAC9J,CAAC,CAAC;AACF,MAAM,kBAAkB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,IAAI,kBAAkB,KAAK,SAAS;IAClC,MAAM,IAAI,KAAK,CAAC,0FAA0F,GAAG,kBAAkB,CAAC,CAAC;AACnI,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC1B,gQAAgQ;AAChQ,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;AAC5D,MAAM,QAAQ,GAAG,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AAC1J,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrF,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,SAAS,CAAC;AAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;AACnC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;AAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG,EAAE,CAAC;IACxD,KAAK,gBAAgB,EAAE,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC,EACD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC;AACD,MAAM,OAAO,GAAqB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACzH,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;AAC3C,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,WAAqC,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAChD,WAAW,GAAG,OAAO,CAAC;AACxB,CAAC,CAAC,CAAC;AACH,IAAI,OAA4D,CAAC;AACjE,MAAM,WAAW,GAAG,CAAC,MAAsB,EAAU,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtH,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAU,EAAE;IACpD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7E,OAAO,GAAG,OAAO,mNAAmN,CAAC;AACvO,CAAC,CAAC;AACF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAsB,EAAiB,EAAE;IAC/D,IAAI,YAAY;QAAE,OAAO;IACzB,YAAY,GAAG,IAAI,CAAC;IACpB,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAoC,CAAC;QACzC,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC,CAAC;YACF,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC,CAAC;SACH,CAAC,CAAC;QACH,2GAA2G;QAC3G,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;IACH,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,WAAW,EAAE,EAAE,CAAC;AAClB,CAAC,CAAC;AACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;IAC7B,2aAA2a;IAC3a,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC;IACH,OAAO,GAAG,MAAM,WAAW,CAAC;QAC1B,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,OAAO,CAAC,OAAO;YACb,oBAAoB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,KAAI,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAI,OAAO,CAAC,OAAoE,CAAC,SAAS,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,WAAW,CAAC;AACpB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}
+{"version":3,"file":"bin.js","sourceRoot":"","sources":["../src/server/bin.ts"],"names":[],"mappings":";AAEA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAC9G,OAAO,4BAA4B,CAAC;AAMpC,kSAAkS;AAClS,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACrC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AAErC,6LAA6L;AAC7L,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,WAAW,CAAC;AAC3D,MAAM,IAAI,GAAG,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC/F,MAAM,uBAAuB,GAAG,IAAI,CAAC;AACrC,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,uBAAuB,CAAC,CAAC;AAC5E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM;IAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;AACpI,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;AAC1E,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,KAAK,GAAG;IACzE,MAAM,IAAI,KAAK,CAAC,gGAAgG,CAAC,CAAC;AACpH,qLAAqL;AACrL,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,EAAE,CAAC;KAC9D,KAAK,CAAC,GAAG,CAAC;KACV,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;KAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;AACvC,uOAAuO;AACvO,MAAM,cAAc,GAAG,CAAC,KAAa,EAAW,EAAE;IAChD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACzG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,CAAC;AAC9J,CAAC,CAAC;AACF,MAAM,kBAAkB,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;AAChF,IAAI,kBAAkB,KAAK,SAAS;IAClC,MAAM,IAAI,KAAK,CAAC,0FAA0F,GAAG,kBAAkB,CAAC,CAAC;AACnI,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;AAC1B,gQAAgQ;AAChQ,MAAM,kBAAkB,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,IAAI,EAAE,CAAC;AAC5D,MAAM,QAAQ,GAAG,kBAAkB,KAAK,SAAS,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AAC1J,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,MAAM,kBAAkB,GAAG,aAAa,CAAC,IAAI,GAAG,CAAC,uBAAuB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAC5F,8PAA8P;AAC9P,MAAM,WAAW,GAAG,MAAM,qBAAqB,CAAC,EAAE,kBAAkB,EAAE,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;AACjG,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,SAAS,CAAC;AAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;AACnC,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;AAC3C,OAAO,CAAC,GAAG,CAAC,wBAAwB,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,IAAI,OAAO,CAAC,GAAG,CAAC,+BAA+B,KAAK,GAAG,EAAE,CAAC;IACxD,KAAK,gBAAgB,EAAE,CAAC,IAAI,CAC1B,CAAC,MAAM,EAAE,EAAE;QACT,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACzD,CAAC,EACD,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;AACJ,CAAC;AACD,MAAM,OAAO,GAAqB,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AACzH,MAAM,YAAY,GAAG,IAAI,eAAe,EAAE,CAAC;AAC3C,IAAI,YAAY,GAAG,KAAK,CAAC;AACzB,IAAI,WAAqC,CAAC;AAC1C,MAAM,WAAW,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;IAChD,WAAW,GAAG,OAAO,CAAC;AACxB,CAAC,CAAC,CAAC;AACH,IAAI,OAA4D,CAAC;AACjE,MAAM,WAAW,GAAG,CAAC,MAAsB,EAAU,EAAE,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACtH,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAAU,EAAE;IACpD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,IAAI,CAAC,yCAAyC,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IAC7E,OAAO,GAAG,OAAO,mNAAmN,CAAC;AACvO,CAAC,CAAC;AACF,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAsB,EAAiB,EAAE;IAC/D,IAAI,YAAY;QAAE,OAAO;IACzB,YAAY,GAAG,IAAI,CAAC;IACpB,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,QAAoC,CAAC;QACzC,MAAM,OAAO,CAAC,IAAI,CAAC;YACjB,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1B,QAAQ,GAAG,IAAI,CAAC;YAClB,CAAC,CAAC;YACF,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE;gBAC5B,QAAQ,GAAG,UAAU,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACxC,CAAC,CAAC;SACH,CAAC,CAAC;QACH,2GAA2G;QAC3G,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;YAC5D,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;IACH,CAAC;IACD,OAAO,CAAC,QAAQ,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IACvC,WAAW,EAAE,EAAE,CAAC;AAClB,CAAC,CAAC;AACF,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;IAC7B,2aAA2a;IAC3a,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,GAAG,EAAE;QACtB,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YAClC,OAAO;QACT,CAAC;QACD,KAAK,QAAQ,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;AACL,CAAC;AACD,IAAI,CAAC;IACH,OAAO,GAAG,MAAM,WAAW,CAAC;QAC1B,UAAU,EAAE,WAAW;QACvB,MAAM,EAAE,YAAY,CAAC,MAAM;QAC3B,OAAO,CAAC,OAAO;YACb,oBAAoB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,KAAI,CAAC,EAAE,CAAC,CAAC;QACxG,CAAC;KACF,CAAC,CAAC;IACH,MAAM,SAAS,GAAI,OAAO,CAAC,OAAoE,CAAC,SAAS,CAAC;IAC1G,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,GAAG,SAAS,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACxE,MAAM,WAAW,CAAC;AACpB,CAAC;AAAC,OAAO,KAAK,EAAE,CAAC;IACf,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACrB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,kBAAkB,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC;IACzD,CAAC;AACH,CAAC"}

package/apps/web/src/server/bin.ts

@@ -3,7 +3,7 @@
 import { homedir } from "node:os";
 import { join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { bootHarness, coreUpdateNotice, provideLaunchContext } from "@pi-harness/core";
+import { bootHarness, coreUpdateNotice, prepareHarnessProfile, provideLaunchContext } from "@pi-harness/core";
 import "@pi-harness/host-webserver";
 import type { WebServer } from "@pi-harness/host-webserver";
 
@@ -46,7 +46,9 @@ const cwd = process.cwd();
 const configuredAgentDir = process.env.PI_AGENT_DIR?.trim();
 const agentDir = configuredAgentDir === undefined || configuredAgentDir.length === 0 ? join(homedir(), ".pi", "agent") : resolve(cwd, configuredAgentDir);
 const staticDir = fileURLToPath(new URL("../dist", import.meta.url));
-const profilePath = fileURLToPath(new URL("../profile/cordis.yml", import.meta.url));
+const builtinProfilePath = fileURLToPath(new URL("../profile/cordis.yml", import.meta.url));
+// The web console installs marketplace plugins with npm and then imports them, so the profile it edits and the node_modules it installs into live in a directory the user owns rather than inside the installed package, which npm replaces on every upgrade.
+const profilePath = await prepareHarnessProfile({ builtinProfilePath, profileName: "web", cwd });
 process.env.PI_HARNESS_WEB_DIST = staticDir;
 process.env.PI_HARNESS_HOST = host;
 process.env.PI_HARNESS_PORT = String(port);

package/apps/web/src/style.css

@@ -2041,6 +2041,9 @@ button:disabled {
 .plugin-action-error {
   @apply [margin:10px_0_0_37px] [color:var(--color-red)] [font-size:11px];
 }
+.plugin-action-notice {
+  @apply [margin:10px_0_0_37px] [color:#8a5a00] [font-size:11px];
+}
 .plugin-confirm-backdrop {
   @apply [position:fixed] [inset:0] [z-index:60] [display:grid] [place-items:center] [padding:24px] [background:rgba(15,_23,_42,_0.32)] [backdrop-filter:blur(6px)];
 }

package/apps/web/test/bin.test.ts

@@ -44,6 +44,7 @@ async function runLauncher(
   probe?: (consoleUrl: string) => Promise<void>,
 ): Promise<LauncherRun> {
   const agentDir = await makeTempDir("agent");
+  const harnessHome = await makeTempDir("home");
   const child = spawn(process.execPath, [BIN], {
     stdio: ["ignore", "pipe", "pipe"],
     ...(spawnCwd === undefined ? {} : { cwd: spawnCwd }),
@@ -51,6 +52,7 @@ async function runLauncher(
       ...process.env,
       PI_HARNESS_PORT: "0",
       PI_AGENT_DIR: agentDir,
+      PI_HARNESS_HOME: harnessHome,
       PI_HARNESS_PROVIDER: "anthropic",
       PI_HARNESS_MODEL: "claude-sonnet-4-5",
       ...extraEnv,
@@ -95,12 +97,14 @@ async function runLauncher(
 // Runs the built launcher until it exits on its own, for the startup guards that must abort before a console URL is ever printed.
 async function runLauncherToExit(extraEnv: Record<string, string>): Promise<LauncherExit> {
   const agentDir = await makeTempDir("guard");
+  const harnessHome = await makeTempDir("guard-home");
   const child = spawn(process.execPath, [BIN], {
     stdio: ["ignore", "pipe", "pipe"],
     env: {
       ...process.env,
       PI_HARNESS_PORT: "0",
       PI_AGENT_DIR: agentDir,
+      PI_HARNESS_HOME: harnessHome,
       PI_HARNESS_PROVIDER: "anthropic",
       PI_HARNESS_MODEL: "claude-sonnet-4-5",
       PI_HARNESS_DISABLE_UPDATE_CHECK: "1",
@@ -198,6 +202,7 @@ describe("web launcher", () => {
 
   test("keeps serving and shuts down gracefully when a closed stdout pipe breaks the console URL write", async () => {
     const agentDir = await makeTempDir("epipe");
+    const harnessHome = await makeTempDir("epipe-home");
     const port = await reserveLoopbackPort();
     const child = spawn(process.execPath, [BIN], {
       stdio: ["ignore", "pipe", "pipe"],
@@ -205,6 +210,7 @@ describe("web launcher", () => {
         ...process.env,
         PI_HARNESS_PORT: String(port),
         PI_AGENT_DIR: agentDir,
+        PI_HARNESS_HOME: harnessHome,
         PI_HARNESS_PROVIDER: "anthropic",
         PI_HARNESS_MODEL: "claude-sonnet-4-5",
         PI_HARNESS_DISABLE_UPDATE_CHECK: "1",

package/node_modules/@pi-harness/api-gateway/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;;;;mBA4sBlC,OAAO;;AAHxB,wBAg4CE"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;;;;mBAmuBlC,OAAO;;AAHxB,wBA+4CE"}

package/node_modules/@pi-harness/api-gateway/dist/index.js

@@ -3,10 +3,11 @@ import { mkdir, mkdtemp, readFile, realpath, rename, rm, stat, unlink, writeFile
 import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
 import { tmpdir } from "node:os";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
-import { atomicWriteFile } from "@pi-harness/core";
+import { atomicWriteFile, isPiToolRegistryLeasedError } from "@pi-harness/core";
 import { MARKETPLACE_CAPABILITIES, MARKETPLACE_CATEGORIES, MARKETPLACE_PLUGINS, attachMarketplaceStatistics, createMarketplaceStatisticsLoader, paginateMarketplace, searchMarketplace, marketplaceNpmPackageName, sortMarketplaceByRecommendation, } from "./marketplace.js";
 import { parseGitWorktrees } from "./workspaces.js";
 const loadMarketplaceStatistics = createMarketplaceStatisticsLoader();
+const RUNTIME_ENTRY_NAME = "@pi-harness/core/plugins/runtime";
 const DEFAULT_BODY_LIMIT_BYTES = 64 * 1024;
 const IMPORT_CONTENT_LIMIT_BYTES = 10 * 1024 * 1024;
 // The import body carries the JSONL content as a JSON string, so quotes and newlines are escaped; leave headroom above the content limit for that overhead.
@@ -434,15 +435,23 @@ function runProcess(executable, args, cwd) {
         });
     });
 }
-async function appendMarketplaceProfile(configPath, plugin) {
+// A plugin registers its tools before pi-runtime acquires the tool registry, so an installed entry has to sit in the runtime's own group ahead of the runtime. Appended at the end of the profile it would load after the runtime and fail on every subsequent start.
+function marketplaceProfileEntry(plugin, indent) {
+    const child = `${indent}  `;
+    const group = plugin.profile.group === true ? `\n${child}group: true` : "";
+    return `${indent}- id: marketplace-${plugin.id}\n${child}name: ${JSON.stringify(plugin.packageName)}${group}\n${child}config: ${JSON.stringify(plugin.profile.config)}\n`;
+}
+async function appendMarketplaceProfile(configPath, plugin, beforeEntryId) {
     const source = await readFile(configPath, "utf8");
     if (source.includes(`name: ${JSON.stringify(plugin.packageName)}`))
         return source;
-    const entryId = `marketplace-${plugin.id}`;
-    const config = JSON.stringify(plugin.profile.config);
-    const group = plugin.profile.group === true ? "\n  group: true" : "";
-    const entry = `\n- id: ${entryId}\n  name: ${JSON.stringify(plugin.packageName)}${group}\n  config: ${config}\n`;
-    await writeFile(configPath, source.replace(/\s*$/, "") + entry, "utf8");
+    const anchor = beforeEntryId === undefined ? null : source.match(new RegExp(`^([ \\t]*)- id: ${beforeEntryId.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&")}[ \\t]*$`, "mu"));
+    if (anchor === null) {
+        await writeFile(configPath, `${source.replace(/\s*$/u, "")}\n${marketplaceProfileEntry(plugin, "")}`, "utf8");
+        return source;
+    }
+    const start = anchor.index ?? 0;
+    await writeFile(configPath, source.slice(0, start) + marketplaceProfileEntry(plugin, anchor[1] ?? "") + source.slice(start), "utf8");
     return source;
 }
 async function updateMarketplaceProfile(configPath, entryId, update) {
@@ -590,7 +599,7 @@ async function isFile(path) {
         return false;
     }
 }
-// The loader resolves a bare plugin specifier from the profile file upwards (`createRequire(profilePath).resolve(name)`), never from the shell the harness was started in, so a marketplace package has to land in the package that owns the profile or it installs successfully and then fails to load.
+// The loader resolves a bare plugin specifier by walking node_modules from the profile file upwards, never from the shell the harness was started in, so a marketplace package has to land in the package that owns the profile or it installs successfully and then fails to load. Under a built-in profile that package is the harness home, which is why the launcher boots a copy there instead of the read-only one inside its own installation.
 async function marketplaceInstallDirectory(configPath, fallback) {
     let directory = dirname(resolve(configPath));
     let parent = dirname(directory);
@@ -602,6 +611,17 @@ async function marketplaceInstallDirectory(configPath, fallback) {
     }
     return fallback;
 }
+// Where an installed plugin belongs in the running loader: inside the group that owns pi-runtime, immediately ahead of it. A profile without a runtime entry (the stdio CLI profile does have one, a hand-written profile may not) places the entry at the end of the root instead.
+function runtimePlacement(loader) {
+    const entries = [...loader.entries()];
+    const runtime = entries.find((entry) => entry.options.name === RUNTIME_ENTRY_NAME);
+    if (runtime === undefined)
+        return undefined;
+    const group = entries.find((entry) => entry.subgroup === runtime.parent);
+    const position = runtime.parent.data.indexOf(runtime.options);
+    // The loader addresses a nested group by its qualified id (`profile:agent`), while the profile file names the entry by its own id.
+    return { groupEntryId: group?.id ?? null, position: position < 0 ? Infinity : position, beforeEntryId: runtime.options.id };
+}
 function pickDirectory() {
     return new Promise((resolvePath, reject) => {
         execFile("osascript", ["-e", 'POSIX path of (choose folder with prompt "选择 Pi 工作区")'], { timeout: 120_000, maxBuffer: 64 * 1024 }, (error, stdout, stderr) => {
@@ -1057,27 +1077,33 @@ export default {
                     const packageLockPath = join(installDirectory, "package-lock.json");
                     const packageJsonBefore = await readFile(packageJsonPath, "utf8").catch(() => undefined);
                     const packageLockBefore = await readFile(packageLockPath, "utf8").catch(() => undefined);
+                    const placement = runtimePlacement(loader);
                     let profileBefore;
                     let entryId;
                     try {
                         const specifier = `${marketplaceNpmPackageName(plugin.packageName)}@${plugin.version}`;
                         await runProcess("npm", ["install", "--save-exact", "--package-lock=false", specifier], installDirectory);
-                        profileBefore = await appendMarketplaceProfile(configPath, plugin);
+                        profileBefore = await appendMarketplaceProfile(configPath, plugin, placement?.beforeEntryId);
                         entryId = await loader.create({
                             id: `marketplace-${plugin.id}`,
                             name: plugin.packageName,
                             ...(plugin.profile.group === true ? { group: true } : {}),
                             config: plugin.profile.config,
-                        });
+                        }, placement?.groupEntryId ?? null, placement?.position ?? Infinity);
                         const entry = loader.resolve(entryId);
                         if (entry.fiber === undefined)
                             throw new Error(`Plugin ${plugin.packageName} did not create a runtime fiber`);
                         await entry.fiber.await();
-                        sendJson(response, 200, { plugin, installed: true });
+                        sendJson(response, 200, { plugin, installed: true, restartRequired: false });
                     }
                     catch (error) {
                         if (entryId !== undefined)
                             await loader.remove(entryId).catch(() => { });
+                        // The runtime holds the tool registry for its whole life and snapshots the tool set when it takes it, so a plugin that contributes tools cannot join a harness that is already running. The package and its profile entry stay in place and the plugin arrives on the next start; rolling the install back would leave the user unable to install it at all.
+                        if (isPiToolRegistryLeasedError(error)) {
+                            sendJson(response, 200, { plugin, installed: true, restartRequired: true });
+                            return;
+                        }
                         if (profileBefore !== undefined)
                             await writeFile(configPath, profileBefore, "utf8").catch(() => { });
                         // A manifest npm created for this install is removed rather than left behind; restoring is only possible when one existed before.
@@ -1138,9 +1164,14 @@ export default {
                     const before = await updateMarketplaceProfile(configPath, profileEntryId, { disabled: !payload.enabled });
                     try {
                         await entry.update({ disabled: !payload.enabled });
-                        sendJson(response, 200, { plugin: pluginSummary(entry) });
+                        sendJson(response, 200, { plugin: pluginSummary(entry), restartRequired: false });
                     }
                     catch (error) {
+                        // Re-enabling a plugin that contributes tools cannot take effect in a harness the runtime already leased, so the profile keeps the change and the plugin comes back on the next start. Reverting it would leave a plugin that can be switched off but never on again.
+                        if (isPiToolRegistryLeasedError(error)) {
+                            sendJson(response, 200, { plugin: pluginSummary(entry), restartRequired: true });
+                            return;
+                        }
                         await writeFile(configPath, before, "utf8").catch(() => { });
                         sendJson(response, 502, { error: errorText(error) });
                     }