@pi-harness/pi-harness 0.1.30 → 0.1.32

package/packages/api-gateway/src/index.ts

@@ -6,7 +6,7 @@ import { tmpdir } from "node:os";
 import type { Context } from "@deepseek-ai/cordis";
 import { SessionManager, type AgentSessionEvent, type ExtensionUIContext } from "@earendil-works/pi-coding-agent";
 import type Loader from "@deepseek-ai/cordis-plugin-loader";
-import { atomicWriteFile } from "@pi-harness/core";
+import { atomicWriteFile, isPiToolRegistryLeasedError } from "@pi-harness/core";
 import type { PiPluginUiRegistry, PiRuntimeService, PiModelsService, PiHarnessLaunch } from "@pi-harness/core";
 import type { WebServer } from "@pi-harness/host-webserver";
 import {
@@ -32,7 +32,10 @@ interface ApiServices {
   readonly pluginUi: PiPluginUiRegistry | undefined;
 }
 
-const loadMarketplaceStatistics = createMarketplaceStatisticsLoader();
+// The first paint waits for every console endpoint to answer, so the catalogue is sorted from whatever npm statistics are already cached and the misses are warmed in the background instead of held on to.
+const { readCached: readCachedMarketplaceStatistics } = createMarketplaceStatisticsLoader();
+
+const RUNTIME_ENTRY_NAME = "@pi-harness/core/plugins/runtime";
 
 const DEFAULT_BODY_LIMIT_BYTES = 64 * 1024;
 const IMPORT_CONTENT_LIMIT_BYTES = 10 * 1024 * 1024;
@@ -41,6 +44,8 @@ const IMPORT_BODY_LIMIT_BYTES = 16 * 1024 * 1024;
 // Retained trajectory events are replayed to every SSE client and returned by /api/session, so the array must stay bounded.
 const MAX_RETAINED_EVENTS = 2000;
 const GIT_TIMEOUT_MS = 15_000;
+const PROCESS_FAILURE_TEXT_LIMIT = 400;
+const PROCESS_TIMEOUT_MS = 120_000;
 // Mutating commands run user hooks (pre-commit, lint-staged, test suites) and may stage large trees; killing them part-way leaves index.lock and a half-finished operation behind, so they get a far more generous bound than read-only queries.
 const GIT_MUTATION_TIMEOUT_MS = 120_000;
 
@@ -93,10 +98,14 @@ function jsonSafe(value: unknown, seen = new WeakSet<object>()): unknown {
   }
 }
 
+// A plugin that contributes tools only joins on the next start, so the console remembers what it installed until then. That memory is about one particular process, and the console cannot tell a restart from a reconnect on its own, so the identity of this process rides along with the status it already polls.
+const PROCESS_STARTED_AT = new Date(Date.now() - Math.round(process.uptime() * 1000)).toISOString();
+
 function createStatus(services: ApiServices, events: readonly AgentSessionEvent[]) {
   const activeModel = services.runtime.session.model ?? services.models.model;
   const cwd = activeCwd(services);
   return {
+    processStartedAt: PROCESS_STARTED_AT,
     status: services.runtime.session.isStreaming ? "running" : "ready",
     model: activeModel.provider + "/" + activeModel.id,
     messages: services.runtime.session.messages.length,
@@ -468,11 +477,28 @@ function registerPluginPanels(context: Context, services: ApiServices): () => vo
   return () => disposers.reverse().forEach((dispose) => dispose());
 }
 
+// npm ends every failure with the path to a debug log inside its own cache, which the reader of this console has no reason to open and no easy way to reach.
+const PROCESS_FAILURE_NOISE = /^npm (error|ERR!) A complete log of this run can be found in:/u;
+
+// npm reports a failure over many lines and the whole text is shown to someone who never typed the command, so the lines are joined up to a character budget and the command itself stays on the cause for diagnostics. Node's own message is never used as the fallback: it reads `Command failed: <the whole command line>`, which is exactly what this is removing.
+function processFailureText(executable: string, stderr: string, error: ExecFileException): string {
+  const text = stderr
+    .split(/\r?\n/u)
+    .map((line) => line.trim())
+    .filter((line) => line !== "" && !PROCESS_FAILURE_NOISE.test(line))
+    .join(" ");
+  if (text === "")
+    return error.killed === true
+      ? `${executable} was stopped after ${PROCESS_TIMEOUT_MS / 1000}s`
+      : `${executable} exited with code ${error.code ?? "unknown"} and reported nothing`;
+  return text.length <= PROCESS_FAILURE_TEXT_LIMIT ? text : text.slice(0, PROCESS_FAILURE_TEXT_LIMIT) + "…";
+}
+
 function runProcess(executable: string, args: readonly string[], cwd: string): Promise<{ stdout: string; stderr: string }> {
   return new Promise((resolveProcess, rejectProcess) => {
-    execFile(executable, [...args], { cwd, timeout: 120_000, maxBuffer: 2 * 1024 * 1024 }, (error, stdout, stderr) => {
+    execFile(executable, [...args], { cwd, timeout: PROCESS_TIMEOUT_MS, maxBuffer: 2 * 1024 * 1024 }, (error, stdout, stderr) => {
       if (error) {
-        rejectProcess(new Error(`${executable} ${args.join(" ")} failed: ${stderr || error.message}`, { cause: error }));
+        rejectProcess(new Error(processFailureText(executable, stderr, error), { cause: { command: `${executable} ${args.join(" ")}`, error } }));
         return;
       }
       resolveProcess({ stdout, stderr });
@@ -480,14 +506,24 @@ function runProcess(executable: string, args: readonly string[], cwd: string): P
   });
 }
 
-async function appendMarketplaceProfile(configPath: string, plugin: MarketplacePlugin): Promise<string> {
+// A plugin registers its tools before pi-runtime acquires the tool registry, so an installed entry has to sit in the runtime's own group ahead of the runtime. Appended at the end of the profile it would load after the runtime and fail on every subsequent start.
+function marketplaceProfileEntry(plugin: MarketplacePlugin, indent: string): string {
+  const child = `${indent}  `;
+  const group = plugin.profile.group === true ? `\n${child}group: true` : "";
+  return `${indent}- id: marketplace-${plugin.id}\n${child}name: ${JSON.stringify(plugin.packageName)}${group}\n${child}config: ${JSON.stringify(plugin.profile.config)}\n`;
+}
+
+async function appendMarketplaceProfile(configPath: string, plugin: MarketplacePlugin, beforeEntryId?: string): Promise<string> {
   const source = await readFile(configPath, "utf8");
   if (source.includes(`name: ${JSON.stringify(plugin.packageName)}`)) return source;
-  const entryId = `marketplace-${plugin.id}`;
-  const config = JSON.stringify(plugin.profile.config);
-  const group = plugin.profile.group === true ? "\n  group: true" : "";
-  const entry = `\n- id: ${entryId}\n  name: ${JSON.stringify(plugin.packageName)}${group}\n  config: ${config}\n`;
-  await writeFile(configPath, source.replace(/\s*$/, "") + entry, "utf8");
+  const anchor =
+    beforeEntryId === undefined ? null : source.match(new RegExp(`^([ \\t]*)- id: ${beforeEntryId.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&")}[ \\t]*$`, "mu"));
+  if (anchor === null) {
+    await writeFile(configPath, `${source.replace(/\s*$/u, "")}\n${marketplaceProfileEntry(plugin, "")}`, "utf8");
+    return source;
+  }
+  const start = anchor.index ?? 0;
+  await writeFile(configPath, source.slice(0, start) + marketplaceProfileEntry(plugin, anchor[1] ?? "") + source.slice(start), "utf8");
   return source;
 }
 
@@ -683,6 +719,17 @@ async function marketplaceInstallDirectory(configPath: string, fallback: string)
   return fallback;
 }
 
+// Where an installed plugin belongs in the running loader: inside the group that owns pi-runtime, immediately ahead of it. A profile without a runtime entry (the stdio CLI profile does have one, a hand-written profile may not) places the entry at the end of the root instead.
+function runtimePlacement(loader: Loader): { groupEntryId: string | null; position: number; beforeEntryId: string } | undefined {
+  const entries = [...loader.entries()];
+  const runtime = entries.find((entry) => entry.options.name === RUNTIME_ENTRY_NAME);
+  if (runtime === undefined) return undefined;
+  const group = entries.find((entry) => entry.subgroup === runtime.parent);
+  const position = runtime.parent.data.indexOf(runtime.options);
+  // The loader addresses a nested group by its qualified id (`profile:agent`), while the profile file names the entry by its own id.
+  return { groupEntryId: group?.id ?? null, position: position < 0 ? Infinity : position, beforeEntryId: runtime.options.id };
+}
+
 function pickDirectory(): Promise<string> {
   return new Promise((resolvePath, reject) => {
     execFile(
@@ -1073,7 +1120,7 @@ export default {
     });
     const disposeMarketplace = services.webServer.register({
       path: "/api/marketplace",
-      async handler(request, response) {
+      handler(request, response) {
         if (request.method !== "GET") {
           sendJson(response, 405, { error: "Method not allowed" });
           return;
@@ -1100,10 +1147,10 @@ export default {
           return;
         }
         const filtered = searchMarketplace(query, capability, category);
+        const cached = readCachedMarketplaceStatistics(MARKETPLACE_PLUGINS);
+        // Recommendation is only applied once the whole catalogue has been looked up. Scoring a half-warm cache would reorder the grid under the reader's cursor on every poll as the background lookups land, which costs more than the few seconds the first sort is delayed.
         const items =
-          sort === "recommended"
-            ? sortMarketplaceByRecommendation(attachMarketplaceStatistics(filtered, await loadMarketplaceStatistics(MARKETPLACE_PLUGINS)))
-            : filtered;
+          sort === "recommended" && cached.ready ? sortMarketplaceByRecommendation(attachMarketplaceStatistics(filtered, cached.statistics)) : filtered;
         sendJson(response, 200, {
           ...paginateMarketplace(items, page, pageSize),
           capabilities: MARKETPLACE_CAPABILITIES,
@@ -1151,24 +1198,34 @@ export default {
           const packageLockPath = join(installDirectory, "package-lock.json");
           const packageJsonBefore = await readFile(packageJsonPath, "utf8").catch(() => undefined);
           const packageLockBefore = await readFile(packageLockPath, "utf8").catch(() => undefined);
+          const placement = runtimePlacement(loader);
           let profileBefore: string | undefined;
           let entryId: string | undefined;
           try {
             const specifier = `${marketplaceNpmPackageName(plugin.packageName)}@${plugin.version}`;
             await runProcess("npm", ["install", "--save-exact", "--package-lock=false", specifier], installDirectory);
-            profileBefore = await appendMarketplaceProfile(configPath, plugin);
-            entryId = await loader.create({
-              id: `marketplace-${plugin.id}`,
-              name: plugin.packageName,
-              ...(plugin.profile.group === true ? { group: true } : {}),
-              config: plugin.profile.config,
-            } as never);
+            profileBefore = await appendMarketplaceProfile(configPath, plugin, placement?.beforeEntryId);
+            entryId = await loader.create(
+              {
+                id: `marketplace-${plugin.id}`,
+                name: plugin.packageName,
+                ...(plugin.profile.group === true ? { group: true } : {}),
+                config: plugin.profile.config,
+              } as never,
+              placement?.groupEntryId ?? null,
+              placement?.position ?? Infinity,
+            );
             const entry = loader.resolve(entryId);
             if (entry.fiber === undefined) throw new Error(`Plugin ${plugin.packageName} did not create a runtime fiber`);
             await entry.fiber.await();
-            sendJson(response, 200, { plugin, installed: true });
+            sendJson(response, 200, { plugin, installed: true, restartRequired: false });
           } catch (error) {
             if (entryId !== undefined) await loader.remove(entryId).catch(() => {});
+            // The runtime holds the tool registry for its whole life and snapshots the tool set when it takes it, so a plugin that contributes tools cannot join a harness that is already running. The package and its profile entry stay in place and the plugin arrives on the next start; rolling the install back would leave the user unable to install it at all.
+            if (isPiToolRegistryLeasedError(error)) {
+              sendJson(response, 200, { plugin, installed: true, restartRequired: true });
+              return;
+            }
             if (profileBefore !== undefined) await writeFile(configPath, profileBefore, "utf8").catch(() => {});
             // A manifest npm created for this install is removed rather than left behind; restoring is only possible when one existed before.
             if (packageJsonBefore === undefined) await unlink(packageJsonPath).catch(() => {});
@@ -1222,8 +1279,13 @@ export default {
           const before = await updateMarketplaceProfile(configPath, profileEntryId, { disabled: !payload.enabled });
           try {
             await entry.update({ disabled: !payload.enabled });
-            sendJson(response, 200, { plugin: pluginSummary(entry) });
+            sendJson(response, 200, { plugin: pluginSummary(entry), restartRequired: false });
           } catch (error) {
+            // Re-enabling a plugin that contributes tools cannot take effect in a harness the runtime already leased, so the profile keeps the change and the plugin comes back on the next start. Reverting it would leave a plugin that can be switched off but never on again.
+            if (isPiToolRegistryLeasedError(error)) {
+              sendJson(response, 200, { plugin: pluginSummary(entry), restartRequired: true });
+              return;
+            }
             await writeFile(configPath, before, "utf8").catch(() => {});
             sendJson(response, 502, { error: errorText(error) });
           }

package/packages/api-gateway/src/marketplace-entries/official/agent-teams.json

@@ -13,7 +13,7 @@
     "id": "collaboration",
     "label": "会话协作"
   },
-  "capabilities": ["collaboration ledger", "tasks", "mailbox notes", "dependency graph", "cycle detection"],
+  "capabilities": ["read-only", "session-data"],
   "hooks": ["session lifecycle", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-agent-teams",

package/packages/api-gateway/src/marketplace-entries/official/anchored-standard.json

@@ -13,7 +13,7 @@
     "id": "security",
     "label": "安全"
   },
-  "capabilities": ["trajectory audit", "tool allowlist", "run anchoring"],
+  "capabilities": ["read-only"],
   "hooks": ["session events", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-anchored-standard",

package/packages/api-gateway/src/marketplace-entries/official/annotation.json

@@ -13,7 +13,7 @@
     "id": "context",
     "label": "上下文管理"
   },
-  "capabilities": ["annotations", "context"],
+  "capabilities": ["read-only"],
   "hooks": ["plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-annotation",

package/packages/api-gateway/src/marketplace-entries/official/archify.json

@@ -13,7 +13,7 @@
     "id": "developer",
     "label": "开发工具"
   },
-  "capabilities": ["architecture map", "workspace scan", "dependency map", "Mermaid"],
+  "capabilities": ["reads-files", "runs-commands"],
   "hooks": ["workspace files", "package manifest", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-archify",

package/packages/api-gateway/src/marketplace-entries/official/at-file.json

@@ -13,15 +13,7 @@
     "id": "context",
     "label": "上下文管理"
   },
-  "capabilities": [
-    "256 KiB strict UTF-8 text attachments",
-    "canonical workspace path confinement",
-    "no-follow regular-file reads",
-    "untrusted context framing",
-    "closing-tag neutralization",
-    "cancellable sequential execution",
-    "descriptor-safe normalized panel"
-  ],
+  "capabilities": ["read-only", "reads-files"],
   "hooks": ["file context tool", "workspace file read", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-at-file",

package/packages/api-gateway/src/marketplace-entries/official/auto-mode.json

@@ -13,7 +13,7 @@
     "id": "security",
     "label": "安全"
   },
-  "capabilities": ["command policy", "confirmation gate", "safe execution"],
+  "capabilities": ["reads-files", "runs-commands"],
   "hooks": ["argv execution", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-auto-mode",

package/packages/api-gateway/src/marketplace-entries/official/better-sidebar.json

@@ -13,7 +13,7 @@
     "id": "developer",
     "label": "开发工具"
   },
-  "capabilities": ["workspace overview", "Git status", "session context", "sidebar UI"],
+  "capabilities": ["session-data", "reads-files", "runs-commands"],
   "hooks": ["workspace scan", "read-only Git", "session manager", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-better-sidebar",

package/packages/api-gateway/src/marketplace-entries/official/browser-fetch.json

@@ -13,14 +13,7 @@
     "id": "web",
     "label": "网页与研究"
   },
-  "capabilities": [
-    "bounded textual HTTP fetch",
-    "DNS rebinding protection",
-    "per-hop SSRF validation",
-    "cancellable request lifecycle",
-    "bounded browser preview",
-    "validated fail-closed panel reporting"
-  ],
+  "capabilities": ["network-access"],
   "hooks": ["network request", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-browser-fetch",

package/packages/api-gateway/src/marketplace-entries/official/browser-session.json

@@ -13,14 +13,7 @@
     "id": "web",
     "label": "网页与研究"
   },
-  "capabilities": [
-    "loopback-only CDP endpoint",
-    "bounded tab discovery",
-    "navigation read click and screenshot tools",
-    "cancellable request lifecycle",
-    "bounded panel previews",
-    "validated fail-closed panel reporting"
-  ],
+  "capabilities": ["network-access"],
   "hooks": ["browser session tools", "Chrome DevTools Protocol", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-browser-session",

package/packages/api-gateway/src/marketplace-entries/official/canvas-draw.json

@@ -11,9 +11,9 @@
   "status": "verified",
   "category": {
     "id": "multimodal",
-    "label": "多模态"
+    "label": "视觉与多模态"
   },
-  "capabilities": ["Mermaid flowchart", "nodes and edges", "visual planning"],
+  "capabilities": ["read-only"],
   "hooks": ["plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-canvas-draw",

package/packages/api-gateway/src/marketplace-entries/official/change-verifier.json

@@ -13,7 +13,7 @@
     "id": "workflow",
     "label": "工作流"
   },
-  "capabilities": ["verification gate", "test orchestration", "change review"],
+  "capabilities": ["read-only"],
   "hooks": ["project scripts", "Git diff", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-change-verifier",

package/packages/api-gateway/src/marketplace-entries/official/cleaner.json

@@ -13,15 +13,7 @@
     "id": "developer",
     "label": "开发工具"
   },
-  "capabilities": [
-    "strict configuration and parameters",
-    "bounded capsule inventory",
-    "display-safe capsule filtering",
-    "confirmed retention cleanup",
-    "symlink and replacement defenses",
-    "cancellable serialized cleanup",
-    "fail-closed normalized panel"
-  ],
+  "capabilities": ["reads-files", "writes-files"],
   "hooks": ["capsule cleanup tool", "agent capsule directory", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-cleaner",

package/packages/api-gateway/src/marketplace-entries/official/cli-notifier.json

@@ -13,7 +13,7 @@
     "id": "workflow",
     "label": "工作流"
   },
-  "capabilities": ["desktop notification", "completion notice", "failure and abort notice"],
+  "capabilities": ["runs-commands"],
   "hooks": ["agent end", "compaction error", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-cli-notifier",

package/packages/api-gateway/src/marketplace-entries/official/code2skill.json

@@ -13,7 +13,7 @@
     "id": "tools",
     "label": "工具"
   },
-  "capabilities": ["bounded skill packaging", "source file preservation", "SKILL.md generation"],
+  "capabilities": ["reads-files", "writes-files"],
   "hooks": ["workspace files", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-code2skill",

package/packages/api-gateway/src/marketplace-entries/official/colleague-skill.json

@@ -13,7 +13,7 @@
     "id": "workflow",
     "label": "工作流"
   },
-  "capabilities": ["role handoff", "acceptance criteria", "durable session context"],
+  "capabilities": ["read-only", "session-data"],
   "hooks": ["session storage", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-colleague-skill",

package/packages/api-gateway/src/marketplace-entries/official/context-doctor.json

@@ -13,14 +13,7 @@
     "id": "observability",
     "label": "可观测性"
   },
-  "capabilities": [
-    "descriptor-safe bounded context audit",
-    "pressure oversized uninspectable and tool-error diagnostics",
-    "confirmed settled-session compaction",
-    "dedicated compaction cancellation",
-    "single-flight bounded operation status",
-    "cached normalized panel"
-  ],
+  "capabilities": ["read-only", "session-data"],
   "hooks": ["context doctor tool", "session messages and usage", "Pi session lifecycle", "manual compaction", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-context-doctor",

package/packages/api-gateway/src/marketplace-entries/official/context.json

@@ -13,13 +13,7 @@
     "id": "context",
     "label": "上下文管理"
   },
-  "capabilities": [
-    "descriptor-safe bounded message composition",
-    "resilient context usage inspection",
-    "active-session lifecycle counters",
-    "cached session-aware panel",
-    "bounded normalized browser view"
-  ],
+  "capabilities": ["read-only", "session-data"],
   "hooks": ["context inspection tool", "active runtime session", "Pi session lifecycle", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-context",

package/packages/api-gateway/src/marketplace-entries/official/cordis-group.json

@@ -10,7 +10,7 @@
   "source": "official",
   "status": "verified",
   "category": { "id": "composition", "label": "组合编排" },
-  "capabilities": ["nested plugin composition", "transactional rollback", "lifecycle ownership"],
+  "capabilities": ["read-only"],
   "hooks": ["loader entry tree"],
   "profile": { "name": "@deepseek-ai/cordis-plugin-group", "group": true, "config": [] }
 }

package/packages/api-gateway/src/marketplace-entries/official/cordis-logger-console.json

@@ -10,7 +10,7 @@
   "source": "official",
   "status": "verified",
   "category": { "id": "observability", "label": "可观测性" },
-  "capabilities": ["bounded console logging", "per-logger severity filtering", "safe recent-log panel"],
+  "capabilities": ["read-only"],
   "hooks": ["Cordis logger exporter", "plugin UI"],
   "profile": { "name": "@deepseek-ai/cordis-plugin-logger-console", "config": { "levels": { "default": 2 }, "maxLength": 8192 } }
 }

package/packages/api-gateway/src/marketplace-entries/official/cordis-timer.json

@@ -10,7 +10,7 @@
   "source": "official",
   "status": "verified",
   "category": { "id": "runtime", "label": "运行时" },
-  "capabilities": ["scheduling", "lifecycle-owned cancellation", "async interval iteration", "throttle and debounce"],
+  "capabilities": ["read-only"],
   "hooks": ["Cordis timer service", "plugin UI"],
   "profile": { "name": "@deepseek-ai/cordis-plugin-timer", "config": {} }
 }

package/packages/api-gateway/src/marketplace-entries/official/cost-meter.json

@@ -13,7 +13,7 @@
     "id": "observability",
     "label": "可观测性"
   },
-  "capabilities": ["UTC daily cost ledger", "session cost snapshots", "daily budget monitoring", "bounded local persistence"],
+  "capabilities": ["session-data", "reads-files", "writes-files"],
   "hooks": ["agent end", "cost report tool", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-cost-meter",

package/packages/api-gateway/src/marketplace-entries/official/dependency-checker.json

@@ -11,17 +11,9 @@
   "status": "verified",
   "category": {
     "id": "developer",
-    "label": "开发效率"
+    "label": "开发工具"
   },
-  "capabilities": [
-    "2000-declaration local presence scan",
-    "4096-entry workspace-contained virtualenv scan",
-    "npm common-intersection conflict detection",
-    "bounded Python numeric constraint analysis",
-    "unresolved constraint and directive reporting",
-    "optional dependency reporting",
-    "descriptor-safe normalized panel"
-  ],
+  "capabilities": ["read-only", "reads-files"],
   "hooks": ["dependency check tool", "workspace manifest read", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-dependency-checker",

package/packages/api-gateway/src/marketplace-entries/official/docker-sandbox.json

@@ -13,15 +13,7 @@
     "id": "security",
     "label": "安全"
   },
-  "capabilities": [
-    "local-only image execution",
-    "no-network containers",
-    "read-only workspace by default",
-    "CPU memory and PID limits",
-    "sanitized bounded output",
-    "strict panel reporting",
-    "cancellation cleanup"
-  ],
+  "capabilities": ["reads-files", "writes-files", "runs-commands"],
   "hooks": ["sandbox execution tool", "Docker CLI", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-docker-sandbox",

package/packages/api-gateway/src/marketplace-entries/official/fail-logger.json

@@ -13,14 +13,7 @@
     "id": "observability",
     "label": "可观测性"
   },
-  "capabilities": [
-    "bounded failure aggregation",
-    "descriptor-safe event inspection",
-    "abort-aware compaction diagnostics",
-    "occurrence counting",
-    "safe diagnostic summaries",
-    "capacity visibility"
-  ],
+  "capabilities": ["read-only"],
   "hooks": ["extension error", "agent end", "compaction end", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-fail-logger",

package/packages/api-gateway/src/marketplace-entries/official/genui.json

@@ -13,7 +13,7 @@
     "id": "interface",
     "label": "界面增强"
   },
-  "capabilities": ["bounded structured cards", "typed text badge and progress blocks", "decimal progress validation", "plain-text HTML handling"],
+  "capabilities": ["read-only"],
   "hooks": ["GenUI render tool", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-genui",

package/packages/api-gateway/src/marketplace-entries/official/git-time-capsule.json

@@ -13,14 +13,7 @@
     "id": "workflow",
     "label": "工作流"
   },
-  "capabilities": [
-    "byte-exact validated unstaged diff capture",
-    "exclusive no-clobber capsule publication",
-    "confirmed deterministic reverse apply",
-    "bounded 256-capsule inventory",
-    "cancellable serialized Git operations",
-    "descriptor-safe normalized panel"
-  ],
+  "capabilities": ["reads-files", "writes-files", "runs-commands"],
   "hooks": ["Git snapshot tool", "Git restore tool", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-git-time-capsule",

package/packages/api-gateway/src/marketplace-entries/official/graph-memory.json

@@ -13,7 +13,7 @@
     "id": "memory",
     "label": "记忆与上下文"
   },
-  "capabilities": ["bounded typed nodes", "validated directed relations", "ranked graph search", "atomic locked persistence"],
+  "capabilities": ["reads-files", "writes-files"],
   "hooks": ["graph memory tools", "local graph file", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-graph-memory",

package/packages/api-gateway/src/marketplace-entries/official/history-compressor.json

@@ -11,9 +11,9 @@
   "status": "verified",
   "category": {
     "id": "context",
-    "label": "上下文"
+    "label": "上下文管理"
   },
-  "capabilities": ["history compaction", "context budget", "automatic cleanup"],
+  "capabilities": ["read-only", "session-data"],
   "hooks": ["agent end", "context usage", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-history-compressor",

package/packages/api-gateway/src/marketplace-entries/official/hol-guard.json

@@ -11,9 +11,9 @@
   "status": "verified",
   "category": {
     "id": "security",
-    "label": "安全防护"
+    "label": "安全"
   },
-  "capabilities": ["command safety", "credential detection", "audit", "advisory"],
+  "capabilities": ["read-only"],
   "hooks": ["tool execution", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-hol-guard",

package/packages/api-gateway/src/marketplace-entries/official/i18n-pair.json

@@ -13,13 +13,7 @@
     "id": "workflow",
     "label": "工作流"
   },
-  "capabilities": [
-    "collision-safe locale key parity",
-    "strict bounded workspace-only JSON reads",
-    "no-follow symbolic-link safety",
-    "stable sequential cancellable inspection",
-    "validated bounded panel reporting"
-  ],
+  "capabilities": ["read-only", "reads-files"],
   "hooks": ["i18n check tool", "workspace locale files", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-i18n-pair",

package/packages/api-gateway/src/marketplace-entries/official/image-compressor.json

@@ -11,9 +11,9 @@
   "status": "verified",
   "category": {
     "id": "multimodal",
-    "label": "多模态"
+    "label": "视觉与多模态"
   },
-  "capabilities": ["image compression", "context hygiene", "asset safety"],
+  "capabilities": ["reads-files", "writes-files"],
   "hooks": ["workspace files", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-image-compressor",

package/packages/api-gateway/src/marketplace-entries/official/llm-verifier.json

@@ -13,7 +13,7 @@
     "id": "testing",
     "label": "测试与质量"
   },
-  "capabilities": ["model verification", "batch verification", "evidence review", "audit history", "release confidence"],
+  "capabilities": ["model-calls"],
   "hooks": ["model runtime", "structured verdict", "plugin UI"],
   "profile": {
     "name": "@pi-harness/plugin-llm-verifier",