@pi-harness/pi-harness 0.1.30 → 0.1.31

package/packages/api-gateway/test/index.test.ts

@@ -10,7 +10,7 @@ import timerPlugin from "@deepseek-ai/cordis-plugin-timer";
 import { SessionManager } from "@earendil-works/pi-coding-agent";
 import { afterEach, describe, expect, test, vi } from "vitest";
 import webServerPlugin from "@pi-harness/host-webserver";
-import { PiPluginUiRegistry, PiToolRegistry } from "@pi-harness/core";
+import { PiPluginUiRegistry, PiToolRegistry, PiToolRegistryLeasedError } from "@pi-harness/core";
 import type { MarketplacePlugin } from "../src/marketplace.js";
 import apiPlugin from "../src/index.js";
 import type * as FsPromises from "node:fs/promises";
@@ -2190,12 +2190,167 @@ describe("API gateway plugin", () => {
     }
 
     expect(response.status).toBe(200);
-    await expect(response.json()).resolves.toMatchObject({ installed: true, plugin: { id: "skill-guard" } });
+    await expect(response.json()).resolves.toMatchObject({ installed: true, restartRequired: false, plugin: { id: "skill-guard" } });
     expect((await readFile(npmLog, "utf8")).trim()).toMatch(/^install --save-exact --package-lock=false @pi-harness\/plugin-skill-guard@\d/u);
     expect(created).toEqual([expect.objectContaining({ name: "@pi-harness/plugin-skill-guard" })]);
     await expect(readFile(configPath, "utf8")).resolves.toContain('name: "@pi-harness/plugin-skill-guard"');
   });
 
+  // A plugin registers its tools while it activates, and pi-runtime takes the tool registry when it activates, so an installed entry only works if it sits ahead of the runtime inside the runtime's own group.
+  test("installs a marketplace plugin into the runtime's group ahead of the runtime", async () => {
+    const directory = await mkdtemp(join(tmpdir(), "pi-harness-api-plugin-placement-"));
+    temporaryDirectories.push(directory);
+    const shimDirectory = join(directory, "bin");
+    await mkdir(shimDirectory);
+    await writeFile(join(directory, "package.json"), '{ "name": "harness" }\n', "utf8");
+    const configPath = join(directory, "profile.yml");
+    await writeFile(
+      configPath,
+      '- id: agent\n  name: cordis:group\n  group: true\n  config:\n    - id: tools\n      name: "@pi-harness/core/plugins/tools"\n      config: {}\n    - id: runtime\n      name: "@pi-harness/core/plugins/runtime"\n      config: {}\n',
+      "utf8",
+    );
+    await writeFile(join(shimDirectory, "npm"), "#!/bin/sh\nexit 0\n", { mode: 0o755 });
+    const context = new Context();
+    contexts.push(context);
+    await context.plugin(webServerPlugin, { host: "127.0.0.1", port: 0 });
+    const session = { sessionId: "marketplace-placement-session", sessionFile: undefined, messages: [], isStreaming: false, subscribe: () => () => {} };
+    context.provide("piRuntime", { session, prompt: () => Promise.resolve(), abort: () => Promise.resolve(), dispose: () => Promise.resolve() } as never);
+    context.provide("piModels", { model: { provider: "test", id: "model" } } as never);
+    context.provide("piHarnessLaunch", { cwd: directory, agentDir: directory, configPath, args: [], requestExit() {} });
+    const runtimeOptions = { id: "runtime", name: "@pi-harness/core/plugins/runtime", config: {} };
+    const runtimeGroup = { data: [{ id: "tools", name: "@pi-harness/core/plugins/tools", config: {} }, runtimeOptions] };
+    const loaderEntries = [
+      // The loader addresses a nested group by its qualified id, while the profile file names the same entry by its own id.
+      { id: "profile:agent", options: { id: "agent", name: "cordis:group" }, subgroup: runtimeGroup },
+      { id: "profile:runtime", options: runtimeOptions, parent: runtimeGroup },
+    ];
+    const created: Array<[unknown, unknown, unknown]> = [];
+    context.reflect.provide("loader", {
+      entries: () => loaderEntries,
+      create: (options: unknown, parent: unknown, position: unknown) => {
+        created.push([options, parent, position]);
+        return Promise.resolve("marketplace-entry");
+      },
+      resolve: () => ({ fiber: { await: () => Promise.resolve() } }),
+      remove: () => Promise.resolve(),
+    });
+    await context.plugin(apiPlugin);
+
+    const originalPath = process.env.PATH ?? "";
+    process.env.PATH = `${shimDirectory}:${originalPath}`;
+    let response: Response;
+    try {
+      response = await fetch(context.webServer.url + "/api/marketplace/install", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ id: "skill-guard" }),
+      });
+    } finally {
+      process.env.PATH = originalPath;
+    }
+
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({ installed: true, restartRequired: false });
+    expect(created).toEqual([[expect.objectContaining({ id: "marketplace-skill-guard", name: "@pi-harness/plugin-skill-guard" }), "profile:agent", 1]]);
+    await expect(readFile(configPath, "utf8")).resolves.toBe(
+      '- id: agent\n  name: cordis:group\n  group: true\n  config:\n    - id: tools\n      name: "@pi-harness/core/plugins/tools"\n      config: {}\n    - id: marketplace-skill-guard\n      name: "@pi-harness/plugin-skill-guard"\n      config: {}\n    - id: runtime\n      name: "@pi-harness/core/plugins/runtime"\n      config: {}\n',
+    );
+  });
+
+  // The runtime snapshots the tool set when it takes the registry, so a plugin that contributes tools cannot join a harness that is already running. Rolling the install back would leave the user unable to install it at all, so the package and the profile row stay and the console asks for a restart.
+  test("keeps an installed plugin in place when the runtime already leased the tool registry", async () => {
+    const directory = await mkdtemp(join(tmpdir(), "pi-harness-api-plugin-leased-"));
+    temporaryDirectories.push(directory);
+    const shimDirectory = join(directory, "bin");
+    await mkdir(shimDirectory);
+    await writeFile(join(directory, "package.json"), '{ "name": "harness", "dependencies": {} }\n', "utf8");
+    const configPath = join(directory, "profile.yml");
+    await writeFile(configPath, '- id: runtime\n  name: "@pi-harness/core/plugins/runtime"\n  config: {}\n', "utf8");
+    await writeFile(join(shimDirectory, "npm"), "#!/bin/sh\nexit 0\n", { mode: 0o755 });
+    const context = new Context();
+    contexts.push(context);
+    await context.plugin(webServerPlugin, { host: "127.0.0.1", port: 0 });
+    const session = { sessionId: "marketplace-leased-session", sessionFile: undefined, messages: [], isStreaming: false, subscribe: () => () => {} };
+    context.provide("piRuntime", { session, prompt: () => Promise.resolve(), abort: () => Promise.resolve(), dispose: () => Promise.resolve() } as never);
+    context.provide("piModels", { model: { provider: "test", id: "model" } } as never);
+    context.provide("piHarnessLaunch", { cwd: directory, agentDir: directory, configPath, args: [], requestExit() {} });
+    const removed: string[] = [];
+    context.reflect.provide("loader", {
+      entries: () => [],
+      create: () => Promise.resolve("marketplace-entry"),
+      // The loader wraps an activation failure in its own error chain, which is what the gateway has to see through.
+      resolve: () => ({
+        fiber: {
+          await: () => Promise.reject(new Error("failed to apply loader entry", { cause: new PiToolRegistryLeasedError("skill_scan") })),
+        },
+      }),
+      remove: (id: string) => {
+        removed.push(id);
+        return Promise.resolve();
+      },
+    });
+    await context.plugin(apiPlugin);
+
+    const originalPath = process.env.PATH ?? "";
+    process.env.PATH = `${shimDirectory}:${originalPath}`;
+    let response: Response;
+    try {
+      response = await fetch(context.webServer.url + "/api/marketplace/install", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ id: "skill-guard" }),
+      });
+    } finally {
+      process.env.PATH = originalPath;
+    }
+
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({ installed: true, restartRequired: true, plugin: { id: "skill-guard" } });
+    expect(removed).toEqual(["marketplace-entry"]);
+    await expect(readFile(configPath, "utf8")).resolves.toContain('name: "@pi-harness/plugin-skill-guard"');
+    await expect(readFile(join(directory, "package.json"), "utf8")).resolves.toBe('{ "name": "harness", "dependencies": {} }\n');
+  });
+
+  // Reverting the profile here would leave a plugin that can be switched off but never on again, so the change stays and the plugin comes back on the next start.
+  test("keeps a re-enabled plugin enabled in the profile when the runtime already leased the tool registry", async () => {
+    const context = new Context();
+    contexts.push(context);
+    const directory = await mkdtemp(join(tmpdir(), "pi-harness-api-plugin-toggle-leased-"));
+    temporaryDirectories.push(directory);
+    const configPath = join(directory, "profile.yml");
+    const loaderEntry = {
+      id: "profile:marketplace-skill-guard",
+      options: { id: "marketplace-skill-guard", name: "@pi-harness/plugin-skill-guard", config: {} },
+      update: () => Promise.reject(new Error("failed to apply loader entry", { cause: new PiToolRegistryLeasedError("skill_scan") })),
+    };
+    await writeFile(
+      configPath,
+      '- id: marketplace-skill-guard\n  name: "@pi-harness/plugin-skill-guard"\n  disabled: true\n  config: {}\n- id: runtime\n  name: "@pi-harness/core/plugins/runtime"\n  config: {}\n',
+      "utf8",
+    );
+    await context.plugin(webServerPlugin, { host: "127.0.0.1", port: 0 });
+    const session = { sessionId: "plugin-toggle-leased-session", sessionFile: undefined, messages: [], isStreaming: false, subscribe: () => () => {} };
+    context.provide("piRuntime", { session, prompt: () => Promise.resolve(), abort: () => Promise.resolve(), dispose: () => Promise.resolve() } as never);
+    context.provide("piModels", { model: { provider: "test", id: "model" }, runtime: { getModels: () => [], getModel: () => undefined } } as never);
+    context.provide("piHarnessLaunch", { cwd: directory, agentDir: directory, configPath, args: [], requestExit() {} });
+    context.reflect.provide("loader", {
+      *entries() {
+        yield loaderEntry;
+      },
+    });
+    await context.plugin(apiPlugin);
+
+    const response = await fetch(context.webServer.url + "/api/plugins/toggle", {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ id: "marketplace-skill-guard", enabled: true }),
+    });
+
+    expect(response.status).toBe(200);
+    await expect(response.json()).resolves.toMatchObject({ restartRequired: true, plugin: { id: "marketplace-skill-guard" } });
+    await expect(readFile(configPath, "utf8")).resolves.not.toContain("disabled: true");
+  });
+
   test("locks marketplace installation before reading a request body", async () => {
     const cwd = await mkdtemp(join(tmpdir(), "pi-harness-api-plugin-install-lock-"));
     temporaryDirectories.push(cwd);

package/packages/api-gateway/test/packed-package.test.ts

@@ -73,10 +73,13 @@ const bin = { "pi-harness": "./apps/web/server-dist/bin.js", pih: "./packages/cl
 write(join(harnessRoot, "package.json"), JSON.stringify({ name: "@pi-harness/pi-harness", version: "9.9.9", bin, dependencies: { "@earendil-works/pi-coding-agent": "0.84.4" } }));
 write(join(agentRoot, "package.json"), JSON.stringify({ name: "@earendil-works/pi-coding-agent", version: "0.84.4", dependencies: {} }));
 write(join(agentRoot, "dist", "cli", "args.js"), "");
-write(join(harnessRoot, "apps", "web", "profile", "cordis.yml"), "- id: modlens\\n  name: \\"@pi-harness/plugin-modlens\\"\\n");
+const profileEntries = ["- id: webserver\\n  name: \\"@pi-harness/host-webserver\\"\\n"];
+if (process.env.PACKED_PACKAGE_FIXTURE_BUNDLED_PLUGIN === "1") profileEntries.push("- id: modlens\\n  name: \\"@pi-harness/plugin-modlens\\"\\n");
+write(join(harnessRoot, "apps", "web", "profile", "cordis.yml"), profileEntries.join(""));
 const shippedDependencies = process.env.PACKED_PACKAGE_FIXTURE_SHIPPED_DEP === "1" ? { "@pi-harness/client-web": "9.9.9" } : undefined;
 write(join(harnessRoot, "apps", "web", "package.json"), JSON.stringify({ name: "@pi-harness/web", private: true, dependencies: shippedDependencies }));
-if (process.env.PACKED_PACKAGE_FIXTURE_PROFILE_PLUGIN !== "0") write(join(harnessRoot, "node_modules", "@pi-harness", "plugin-modlens", "dist", "index.js"), "export default {};\\n");
+if (process.env.PACKED_PACKAGE_FIXTURE_PROFILE_ENTRY !== "0") write(join(harnessRoot, "node_modules", "@pi-harness", "host-webserver", "dist", "index.js"), "export default {};\\n");
+if (process.env.PACKED_PACKAGE_FIXTURE_BUNDLED_PLUGIN === "1") write(join(harnessRoot, "node_modules", "@pi-harness", "plugin-modlens", "dist", "index.js"), "export default {};\\n");
 write(join(harnessRoot, "node_modules", "@pi-harness", "core", "dist", "index.js"), process.env.PACKED_PACKAGE_FIXTURE_CORE);
 write(join(harnessRoot, "node_modules", "@pi-harness", "core", "dist", "plugin-resolve.js"), process.env.PACKED_PACKAGE_FIXTURE_RESOLVE);
 if (process.env.PACKED_PACKAGE_FIXTURE_BINS === "1") for (const target of Object.values(bin)) write(join(harnessRoot, target), "");
@@ -94,8 +97,9 @@ const runSmokeTest = async (
   fakeNpm: string,
   bins: boolean,
   marketplace = true,
-  profilePlugin = true,
+  profileEntry = true,
   shippedDependency = false,
+  bundledPlugin = false,
 ): ReturnType<typeof execFileAsync> =>
   execFileAsync(process.execPath, [resolve(repositoryRoot, "scripts/test-packed-package.mjs")], {
     env: {
@@ -105,8 +109,9 @@ const runSmokeTest = async (
       PACKED_PACKAGE_FIXTURE_CORE: fakeCoreSource,
       PACKED_PACKAGE_FIXTURE_RESOLVE: fakeResolveSource,
       PACKED_PACKAGE_FIXTURE_MARKETPLACE: marketplace ? "1" : "0",
-      PACKED_PACKAGE_FIXTURE_PROFILE_PLUGIN: profilePlugin ? "1" : "0",
+      PACKED_PACKAGE_FIXTURE_PROFILE_ENTRY: profileEntry ? "1" : "0",
       PACKED_PACKAGE_FIXTURE_SHIPPED_DEP: shippedDependency ? "1" : "0",
+      PACKED_PACKAGE_FIXTURE_BUNDLED_PLUGIN: bundledPlugin ? "1" : "0",
     },
   });
 
@@ -130,11 +135,18 @@ describe("packed package smoke test", () => {
     await expect(runSmokeTest(fakeNpm, false)).rejects.toThrow(/missing the pi-harness entrypoint \.\/apps\/web\/server-dist\/bin\.js/u);
   });
 
-  it("rejects an install whose shipped profile enables a plugin the tarball never brings in", async () => {
+  it("rejects an install whose shipped profile enables an entry the tarball never brings in", async () => {
     // The 0.1.29 launcher shipped a profile naming 45 packages it did not depend on, so a clean install failed to boot on the first entry the loader could not import.
     const fakeNpm = await createFakeNpm();
 
-    await expect(runSmokeTest(fakeNpm, true, true, false)).rejects.toThrow(/enables 1 plugin\(s\) the install does not contain: @pi-harness\/plugin-modlens/u);
+    await expect(runSmokeTest(fakeNpm, true, true, false)).rejects.toThrow(/enables 1 entr\(ies\) the install does not contain: @pi-harness\/host-webserver/u);
+  });
+
+  it("rejects an install whose shipped profile bundles a pluggable plugin", async () => {
+    // Official plugins are installed from the plugin center like community ones, so a profile entry for one would hand every fresh install a plugin the user never asked for.
+    const fakeNpm = await createFakeNpm();
+
+    await expect(runSmokeTest(fakeNpm, true, true, true, false, true)).rejects.toThrow(/enables 1 pluggable plugin\(s\): @pi-harness\/plugin-modlens/u);
   });
 
   it("rejects an install whose shipped workspace depends on a package npm can never fetch", async () => {

package/packages/api-gateway/test/release-contract.test.ts

@@ -98,8 +98,8 @@ describe("release contract", () => {
     expect(core.files).not.toContain("profiles");
   });
 
-  test("the published launcher declares every plugin package its shipped profiles load", () => {
-    // Every plugin in a shipped profile is now an ordinary npm package, so the package a user installs has to pull each one like any other dependency.
+  test("the published launcher declares every package its shipped profiles load, and no plugin", () => {
+    // A profile entry is imported by its bare specifier, so the package a user installs has to pull the infrastructure each entry names. Pluggable plugins are the exception by design: they are ordinary npm packages installed from the plugin center, so bundling one would put it in every install whether the user wanted it or not.
     const root = readJson("package.json") as { name: string; dependencies: Record<string, string> };
     const required = new Map<string, string>();
     for (const file of sourceFiles(resolve(repositoryRoot, "packages/cli/profiles"), ".yml")) {
@@ -107,8 +107,12 @@ describe("release contract", () => {
         required.set(packageNameOf(match[1] ?? ""), relative(repositoryRoot, file));
     }
     const external = [...required].filter(([name]) => !name.includes(":"));
-    expect(external.filter(([name]) => name.startsWith("@pi-harness/plugin-")).length).toBeGreaterThan(0);
-    for (const [name, file] of external) expect(root.dependencies[name], `${name} (loaded by ${file}) is not declared by ${root.name}`).toBeDefined();
+    expect(external.length).toBeGreaterThan(0);
+    for (const [name, file] of external) {
+      expect(name.startsWith("@pi-harness/plugin-"), `${name} (loaded by ${file}) is a pluggable plugin, which a shipped profile must not enable`).toBe(false);
+      expect(root.dependencies[name], `${name} (loaded by ${file}) is not declared by ${root.name}`).toBeDefined();
+    }
+    expect(Object.keys(root.dependencies).filter((name) => name.startsWith("@pi-harness/plugin-"))).toEqual([]);
   });
 
   test("the plugin API declares every package its sources import as a peer", () => {

package/packages/bundle-web-app/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/web-app",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "private": true,
   "description": "Patchable Web application bundle for Pi Harness",
   "homepage": "https://github.com/pi-harness/pi-harness#readme",

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/cli",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "private": true,
   "description": "Plugin-first Pi Harness CLI",
   "homepage": "https://github.com/pi-harness/pi-harness#readme",

package/packages/cli/profiles/default/cordis.yml

@@ -26,97 +26,10 @@
           - bash
           - edit
           - write
-    - id: agent-teams
-      name: "@pi-harness/plugin-agent-teams"
-      config: {}
-    - id: modlens
-      name: "@pi-harness/plugin-modlens"
-      config: {}
-    - id: vision-toolkit
-      name: "@pi-harness/plugin-vision-toolkit"
-      config: {}
-    - id: git-time-capsule
-      name: "@pi-harness/plugin-git-time-capsule"
-      config: {}
-    - id: dependency-checker
-      name: "@pi-harness/plugin-dependency-checker"
-      config: {}
-    - id: at-file
-      name: "@pi-harness/plugin-at-file"
-      config: {}
-    - id: test-harness
-      name: "@pi-harness/plugin-test-harness"
-      config:
-        timeoutMs: 120000
-    - id: session-insights
-      name: "@pi-harness/plugin-session-insights"
-      config: {}
-    - id: readme-gen
-      name: "@pi-harness/plugin-readme-gen"
-      config: {}
-    - id: i18n-pair
-      name: "@pi-harness/plugin-i18n-pair"
-      config: {}
-    - id: cleaner
-      name: "@pi-harness/plugin-cleaner"
-      config: {}
-    - id: sql-lens
-      name: "@pi-harness/plugin-sql-lens"
-      config:
-        timeoutMs: 5000
-    - id: docker-sandbox
-      name: "@pi-harness/plugin-docker-sandbox"
-      config: {}
-    - id: mcp-client
-      name: "@pi-harness/plugin-mcp-client"
-      config: {}
-    - id: browser-fetch
-      name: "@pi-harness/plugin-browser-fetch"
-      config: {}
-    - id: browser-session
-      name: "@pi-harness/plugin-browser-session"
-      config: {}
-    - id: plugin-stars
-      name: "@pi-harness/plugin-plugin-stars"
-      config: {}
-    - id: yaml-validator
-      name: "@pi-harness/plugin-yaml-validator"
-      config: {}
-    - id: plugin-dev
-      name: "@pi-harness/plugin-plugin-dev"
-      config: {}
-    - id: openpets
-      name: "@pi-harness/plugin-openpets"
-      config: {}
-    - id: session-bridge
-      name: "@pi-harness/plugin-session-bridge"
-      config: {}
-    - id: skill-guard
-      name: "@pi-harness/plugin-skill-guard"
-      config: {}
-    - id: recall-unread
-      name: "@pi-harness/plugin-recall-unread"
-      config: {}
-    - id: turn-rewind
-      name: "@pi-harness/plugin-turn-rewind"
-      config: {}
-    - id: context-doctor
-      name: "@pi-harness/plugin-context-doctor"
-      config: {}
     - id: runtime
       name: "@pi-harness/core/plugins/runtime"
       config:
         thinkingLevel: medium
-    - id: context
-      name: "@pi-harness/plugin-context"
-      config: {}
-    - id: token-guard
-      name: "@pi-harness/plugin-token-guard"
-      config:
-        maxPercent: 90
-    - id: fail-logger
-      name: "@pi-harness/plugin-fail-logger"
-      config: {}
     - id: stdio
       name: "@pi-harness/core/plugins/stdio"
       config: {}

package/packages/cli/test/profiles/plugins/cordis.yml

@@ -0,0 +1,122 @@
+- id: agent
+  name: cordis:group
+  group: true
+  config:
+    - id: models
+      name: "@pi-harness/core/plugins/models"
+      config:
+        provider: deepseek
+        model: deepseek-v4-flash
+        refreshOnCreate: false
+    - id: resources
+      name: "@pi-harness/core/plugins/resources"
+      config: {}
+    - id: model
+      name: "@pi-harness/core/plugins/model"
+      config: {}
+    - id: session
+      name: "@pi-harness/core/plugins/session"
+      config:
+        storage: jsonl
+    - id: tools
+      name: "@pi-harness/core/plugins/tools"
+      config:
+        names:
+          - read
+          - bash
+          - edit
+          - write
+    - id: agent-teams
+      name: "@pi-harness/plugin-agent-teams"
+      config: {}
+    - id: modlens
+      name: "@pi-harness/plugin-modlens"
+      config: {}
+    - id: vision-toolkit
+      name: "@pi-harness/plugin-vision-toolkit"
+      config: {}
+    - id: git-time-capsule
+      name: "@pi-harness/plugin-git-time-capsule"
+      config: {}
+    - id: dependency-checker
+      name: "@pi-harness/plugin-dependency-checker"
+      config: {}
+    - id: at-file
+      name: "@pi-harness/plugin-at-file"
+      config: {}
+    - id: test-harness
+      name: "@pi-harness/plugin-test-harness"
+      config:
+        timeoutMs: 120000
+    - id: session-insights
+      name: "@pi-harness/plugin-session-insights"
+      config: {}
+    - id: readme-gen
+      name: "@pi-harness/plugin-readme-gen"
+      config: {}
+    - id: i18n-pair
+      name: "@pi-harness/plugin-i18n-pair"
+      config: {}
+    - id: cleaner
+      name: "@pi-harness/plugin-cleaner"
+      config: {}
+    - id: sql-lens
+      name: "@pi-harness/plugin-sql-lens"
+      config:
+        timeoutMs: 5000
+    - id: docker-sandbox
+      name: "@pi-harness/plugin-docker-sandbox"
+      config: {}
+    - id: mcp-client
+      name: "@pi-harness/plugin-mcp-client"
+      config: {}
+    - id: browser-fetch
+      name: "@pi-harness/plugin-browser-fetch"
+      config: {}
+    - id: browser-session
+      name: "@pi-harness/plugin-browser-session"
+      config: {}
+    - id: plugin-stars
+      name: "@pi-harness/plugin-plugin-stars"
+      config: {}
+    - id: yaml-validator
+      name: "@pi-harness/plugin-yaml-validator"
+      config: {}
+    - id: plugin-dev
+      name: "@pi-harness/plugin-plugin-dev"
+      config: {}
+    - id: openpets
+      name: "@pi-harness/plugin-openpets"
+      config: {}
+    - id: session-bridge
+      name: "@pi-harness/plugin-session-bridge"
+      config: {}
+    - id: skill-guard
+      name: "@pi-harness/plugin-skill-guard"
+      config: {}
+    - id: recall-unread
+      name: "@pi-harness/plugin-recall-unread"
+      config: {}
+    - id: turn-rewind
+      name: "@pi-harness/plugin-turn-rewind"
+      config: {}
+    - id: context-doctor
+      name: "@pi-harness/plugin-context-doctor"
+      config: {}
+    - id: runtime
+      name: "@pi-harness/core/plugins/runtime"
+      config:
+        thinkingLevel: medium
+    - id: context
+      name: "@pi-harness/plugin-context"
+      config: {}
+    - id: token-guard
+      name: "@pi-harness/plugin-token-guard"
+      config:
+        maxPercent: 90
+    - id: fail-logger
+      name: "@pi-harness/plugin-fail-logger"
+      config: {}
+    - id: stdio
+      name: "@pi-harness/core/plugins/stdio"
+      config: {}