@pi-harness/pi-harness 0.1.32 → 0.1.34

package/packages/api-gateway/dist/marketplace-entries/official/test-harness.json

@@ -3,18 +3,18 @@
   "packageName": "@pi-harness/plugin-test-harness",
   "version": "0.1.29",
   "name": "Test Harness",
-  "description": "Run five fixed npm script names from a trusted workspace, reporting real status with a sanitized 12 KiB UTF-8-safe untrusted output tail, a bounded configurable timeout, and cancellable process-tree cleanup.",
+  "description": "运行工作区里五个固定名字的 npm 脚本，返回真实状态和清理过的 12 KiB 输出尾部；超时可配置，取消时清理整棵进程树。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": {
-    "id": "testing",
-    "label": "测试与质量"
+    "id": "developer",
+    "label": "开发工具"
   },
   "capabilities": ["runs-commands"],
-  "hooks": ["project verification tool", "workspace npm scripts", "plugin UI"],
+  "hooks": ["项目验证工具", "工作区 npm 脚本", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-test-harness",
     "config": {

package/packages/api-gateway/dist/marketplace-entries/official/theme-studio.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-theme-studio",
   "version": "0.1.29",
   "name": "Theme Studio",
-  "description": "Apply bounded Light, Midnight, Paper, and High Contrast presets to the Pi Harness web surface.",
+  "description": "为 Pi Harness 控制台切换浅色、午夜、纸张和高对比四套主题。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "界面增强"
   },
   "capabilities": ["read-only", "session-data"],
-  "hooks": ["session lifecycle", "React root tokens", "plugin UI"],
+  "hooks": ["会话生命周期", "React 根变量", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-theme-studio",
     "config": {

package/packages/api-gateway/dist/marketplace-entries/official/token-guard.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-token-guard",
   "version": "0.1.29",
   "name": "Token Guard",
-  "description": "Use descriptor-safe monitoring to issue at most one abort request per run when a context percentage or billed run-token budget is reached, with bounded errors and a cached normalized panel.",
+  "description": "上下文占比或计费 token 超过预算时，一次运行最多发出一次中止请求，并提供缓存的面板视图。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "可观测性"
   },
   "capabilities": ["read-only", "session-data"],
-  "hooks": ["Pi session lifecycle", "active runtime abort", "session usage and statistics", "plugin UI"],
+  "hooks": ["Pi 会话生命周期", "当前运行中止", "会话用量与统计", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-token-guard",
     "config": {

package/packages/api-gateway/dist/marketplace-entries/official/turn-rewind.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-turn-rewind",
   "version": "0.1.29",
   "name": "Turn Rewind",
-  "description": "Scans a bounded current branch for user turns, supports queued serialized cancellable rewinds after the agent settles, and navigates the native session tree while preserving abandoned branches.",
+  "description": "扫描当前分支上的用户轮次，等 agent 空闲后按队列串行回退，并在原生会话树里导航，保留被放弃的分支。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "工作流"
   },
   "capabilities": ["read-only", "session-data"],
-  "hooks": ["session rewind tool", "active session tree", "agent settled lifecycle", "plugin UI"],
+  "hooks": ["会话回退工具", "当前会话树", "agent 空闲生命周期", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-turn-rewind",
     "config": {}

package/packages/api-gateway/dist/marketplace-entries/official/undo-savepoint.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-undo-savepoint",
   "version": "0.1.29",
   "name": "Undo Savepoints",
-  "description": "Create inspectable savepoints before agent changes so the workspace can be restored safely.",
+  "description": "在 agent 改动前建立可查看的存档点，之后可以安全还原工作区。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "工作流"
   },
   "capabilities": ["reads-files", "writes-files"],
-  "hooks": ["tool execution", "plugin UI"],
+  "hooks": ["工具调用", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-undo-savepoint",
     "config": {}

package/packages/api-gateway/dist/marketplace-entries/official/vision-toolkit.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-vision-toolkit",
   "version": "0.1.29",
   "name": "Vision Toolkit",
-  "description": "Catalog signature-verified PNG, JPEG, GIF, and WebP metadata with bounded header reads, cancellable workspace traversal, explicit partial results, and a local-only normalized panel.",
+  "description": "读取 PNG、JPEG、GIF、WebP 的签名与元数据并建立目录，只读文件头，遍历可取消，结果仅在本机面板展示。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "视觉与多模态"
   },
   "capabilities": ["read-only", "reads-files"],
-  "hooks": ["image metadata tools", "workspace access", "plugin UI"],
+  "hooks": ["图像元数据工具", "工作区访问", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-vision-toolkit",
     "config": {}

package/packages/api-gateway/dist/marketplace-entries/official/web-research.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-web-research",
   "version": "0.1.29",
   "name": "Web Research",
-  "description": "Search the public web through a configurable provider and return bounded, cited source evidence.",
+  "description": "通过可配置的搜索服务检索公网，返回带出处、有上限的证据。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "网页与研究"
   },
   "capabilities": ["network-access"],
-  "hooks": ["network request", "plugin UI"],
+  "hooks": ["网络请求", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-web-research",
     "config": {}

package/packages/api-gateway/dist/marketplace-entries/official/workspace-navigator.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-workspace-navigator",
   "version": "0.1.29",
   "name": "Workspace Navigator",
-  "description": "Show a bounded workspace tree and read-only Git status for a high-signal coding sidebar.",
+  "description": "显示有上限的工作区目录树和只读 Git 状态，作为写代码时的侧边栏。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "开发工具"
   },
   "capabilities": ["reads-files", "runs-commands"],
-  "hooks": ["workspace files", "bounded scan", "read-only Git", "plugin UI"],
+  "hooks": ["工作区文件", "受限扫描", "只读 Git", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-workspace-navigator",
     "config": {}

package/packages/api-gateway/dist/marketplace-entries/official/workspace-search.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-workspace-search",
   "version": "0.1.29",
   "name": "Workspace Search",
-  "description": "Search bounded text files in the active workspace with ignored directories and binary content excluded.",
+  "description": "在当前工作区的文本文件里搜索，自动跳过忽略目录和二进制内容。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "上下文管理"
   },
   "capabilities": ["read-only", "reads-files"],
-  "hooks": ["workspace files", "plugin UI"],
+  "hooks": ["工作区文件", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-workspace-search",
     "config": {}

package/packages/api-gateway/dist/marketplace-entries/official/yaml-validator.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-yaml-validator",
   "version": "0.1.29",
   "name": "YAML Validator",
-  "description": "Validate workspace-contained UTF-8 multi-document YAML through bounded, cancellable reads and line-aware diagnostics.",
+  "description": "校验工作区内的 UTF-8 多文档 YAML，读取受限可取消，报错带行号。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "开发工具"
   },
   "capabilities": ["read-only", "reads-files"],
-  "hooks": ["YAML validation tool", "workspace files", "plugin UI"],
+  "hooks": ["YAML 校验工具", "工作区文件", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-yaml-validator",
     "config": {}

package/packages/api-gateway/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pi-harness/api-gateway",
-  "version": "0.1.32",
+  "version": "0.1.34",
   "private": true,
   "description": "Cordis HTTP API routes for the Pi Harness browser client",
   "homepage": "https://github.com/pi-harness/pi-harness#readme",

package/packages/api-gateway/src/index.ts

@@ -43,6 +43,10 @@ const IMPORT_CONTENT_LIMIT_BYTES = 10 * 1024 * 1024;
 const IMPORT_BODY_LIMIT_BYTES = 16 * 1024 * 1024;
 // Retained trajectory events are replayed to every SSE client and returned by /api/session, so the array must stay bounded.
 const MAX_RETAINED_EVENTS = 2000;
+// Tool calls that opened but never closed. Far above any real concurrency, so the cap only ever trims a run the runtime abandoned.
+const MAX_PENDING_TOOL_CALLS = 256;
+/** A session event with the two fields the gateway owns: when it arrived, and for a tool call how long it took. */
+type StampedSessionEvent = AgentSessionEvent & { readonly receivedAt: number; readonly durationMs?: number };
 const GIT_TIMEOUT_MS = 15_000;
 const PROCESS_FAILURE_TEXT_LIMIT = 400;
 const PROCESS_TIMEOUT_MS = 120_000;
@@ -334,6 +338,42 @@ function pluginSummary(entry: LoaderEntrySummary) {
   };
 }
 
+/** The state a marketplace plugin is in between the install that wrote it and the restart that loads it. It is not a loader state because the loader has no entry for it at all. */
+const RESTART_REQUIRED_STATE = "restart-required";
+
+// The install writes the entry as two adjacent lines, so this reads back exactly what `marketplaceProfileEntry` writes rather than parsing the profile as YAML, which the `!!js` tags in it would need a schema for.
+const MARKETPLACE_PROFILE_ENTRY_PATTERN = /^[ \t]*- id: (marketplace-\S+)[ \t]*\r?\n[ \t]*name: "([^"]+)"/gmu;
+
+/** The loader holds what is running; the profile file holds what is installed. The two differ for a plugin that contributes tools, which cannot join a harness that is already running: the install leaves its package and its profile entry in place and the plugin arrives on the next start. Reading only the loader makes that plugin indistinguishable from one that was never installed, which is why the console answered an install that had just succeeded with "nothing is installed" and then could not uninstall what it had hidden. */
+async function readMarketplaceProfileEntries(configPath: string): Promise<readonly { readonly id: string; readonly packageName: string }[]> {
+  const source = await readFile(configPath, "utf8").catch(() => undefined);
+  if (source === undefined) return [];
+  const entries: { id: string; packageName: string }[] = [];
+  for (const match of source.matchAll(MARKETPLACE_PROFILE_ENTRY_PATTERN)) entries.push({ id: match[1] ?? "", packageName: match[2] ?? "" });
+  return entries;
+}
+
+/** The installed plugins the loader does not have, described the same way a loaded one is so the console can list them side by side instead of leaving the user to guess what happened to the install. */
+async function restartPendingSummaries(services: ApiServices): Promise<readonly ReturnType<typeof pluginSummary>[]> {
+  const configPath = services.launch.configPath;
+  if (configPath === undefined || services.loader === undefined) return [];
+  const loaded = new Set([...services.loader.entries()].map((entry) => entry.options.id));
+  const entries = await readMarketplaceProfileEntries(configPath);
+  return entries
+    .filter((entry) => !loaded.has(entry.id))
+    .map((entry) => {
+      const plugin = MARKETPLACE_PLUGINS.find((item) => item.packageName === entry.packageName);
+      return {
+        id: entry.id,
+        name: entry.packageName,
+        enabled: true,
+        state: RESTART_REQUIRED_STATE,
+        removable: true,
+        category: plugin?.category,
+      };
+    });
+}
+
 function pluginLoaded(services: ApiServices, packageName: string): boolean {
   return services.loader !== undefined && [...services.loader.entries()].some((entry) => entry.options.name === packageName && !entry.disabled);
 }
@@ -777,9 +817,31 @@ export default {
     };
     const disposePluginPanels = registerPluginPanels(context, services);
     let busy = false;
-    const events: AgentSessionEvent[] = [];
+    const events: StampedSessionEvent[] = [];
     const eventClients = new Set<ServerResponse>();
-    const handleEvent = (event: AgentSessionEvent) => {
+    // Pi puts a wall-clock on a message payload and nowhere else, so a tool call has no time of its own and nothing downstream can recover when the harness saw it. The gateway is the one place that sees every event as it happens, so it stamps each one on arrival, and pairs a tool call's two events to record how long the call took.
+    // The stamp is written onto the event rather than onto a copy: a copy would give every event a new identity, and the serializer's cycle detection reads identity, so a self-referential event would serialize one level deeper on every hop.
+    const toolCallStartedAt = new Map<string, number>();
+    const stampEvent = (event: AgentSessionEvent): StampedSessionEvent => {
+      const receivedAt = Date.now();
+      const toolCallId = (event as { readonly toolCallId?: unknown }).toolCallId;
+      if (typeof toolCallId === "string" && event.type === "tool_execution_start") {
+        // A call whose end never arrives would otherwise keep its entry forever; the oldest is dropped rather than letting a stalled run grow the map without bound.
+        if (toolCallStartedAt.size >= MAX_PENDING_TOOL_CALLS) {
+          const oldest = toolCallStartedAt.keys().next().value;
+          if (oldest !== undefined) toolCallStartedAt.delete(oldest);
+        }
+        toolCallStartedAt.set(toolCallId, receivedAt);
+      }
+      if (typeof toolCallId === "string" && event.type === "tool_execution_end") {
+        const startedAt = toolCallStartedAt.get(toolCallId);
+        toolCallStartedAt.delete(toolCallId);
+        if (startedAt !== undefined) return Object.assign(event, { receivedAt, durationMs: receivedAt - startedAt });
+      }
+      return Object.assign(event, { receivedAt });
+    };
+    const handleEvent = (rawEvent: AgentSessionEvent) => {
+      const event = stampEvent(rawEvent);
       // Streaming deltas reach clients live over SSE and each one carries the whole partial message, so only durable events are retained for snapshots.
       if (event.type !== "message_update") {
         events.push(event);
@@ -1098,8 +1160,10 @@ export default {
     });
     const disposePlugins = services.webServer.register({
       path: "/api/plugins",
-      handler(_request, response) {
-        const items = services.loader ? [...services.loader.entries()].map(pluginSummary) : [];
+      async handler(_request, response) {
+        const loaded = services.loader ? [...services.loader.entries()].map(pluginSummary) : [];
+        // The pending entries follow the loaded ones so a list that was stable before an install stays in the same order after it.
+        const items = [...loaded, ...(await restartPendingSummaries(services))];
         sendJson(response, 200, jsonSafe({ items }));
       },
     });
@@ -1193,6 +1257,11 @@ export default {
             sendJson(response, 409, { error: "Plugin is already installed", plugin });
             return;
           }
+          // A plugin already waiting for a restart is installed even though the loader has no entry for it, so installing it again would re-run npm and report a fresh restart for work that is already done.
+          if ((await readMarketplaceProfileEntries(configPath)).some((entry) => entry.packageName === plugin.packageName)) {
+            sendJson(response, 200, { plugin, installed: true, restartRequired: true });
+            return;
+          }
           const installDirectory = await marketplaceInstallDirectory(configPath, services.launch.cwd);
           const packageJsonPath = join(installDirectory, "package.json");
           const packageLockPath = join(installDirectory, "package-lock.json");
@@ -1322,7 +1391,23 @@ export default {
           }
           const entry = [...loader.entries()].find((item) => item.id === payload.id || item.options.id === payload.id);
           if (entry === undefined) {
-            sendJson(response, 404, { error: "Installed plugin was not found" });
+            // A plugin waiting for a restart has no loader entry to remove, only the profile entry and the package the install left behind. Refusing here left the user unable to undo an install until they restarted the very process they installed it to avoid restarting.
+            const pending = (await readMarketplaceProfileEntries(configPath)).find((item) => item.id === payload.id);
+            const pendingPlugin = pending === undefined ? undefined : MARKETPLACE_PLUGINS.find((item) => item.packageName === pending.packageName);
+            if (pending === undefined || pendingPlugin === undefined) {
+              sendJson(response, 404, { error: "Installed plugin was not found" });
+              return;
+            }
+            const pendingProfileBefore = await readFile(configPath, "utf8");
+            const pendingInstallDirectory = await marketplaceInstallDirectory(configPath, services.launch.cwd);
+            try {
+              await updateMarketplaceProfile(configPath, pending.id, { remove: true });
+              await runProcess("npm", ["uninstall", "--package-lock=false", marketplaceNpmPackageName(pendingPlugin.packageName)], pendingInstallDirectory);
+              sendJson(response, 200, { uninstalled: true, id: payload.id });
+            } catch (error) {
+              await writeFile(configPath, pendingProfileBefore, "utf8").catch(() => {});
+              sendJson(response, 502, { error: errorText(error) });
+            }
             return;
           }
           const plugin = marketplacePluginForEntry(entry);

package/packages/api-gateway/src/marketplace-entries/official/agent-teams.json

@@ -3,18 +3,18 @@
   "packageName": "@pi-harness/plugin-agent-teams",
   "version": "0.1.29",
   "name": "Agent Team Board",
-  "description": "Maintain a bounded, session-local collaboration ledger of named roles, dependency-aware tasks, and mailbox notes without spawning agents or sending external messages.",
+  "description": "在当前会话内维护一份角色、任务依赖与留言板，不会额外启动 agent，也不会对外发消息。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": {
-    "id": "collaboration",
-    "label": "会话协作"
+    "id": "workflow",
+    "label": "工作流"
   },
   "capabilities": ["read-only", "session-data"],
-  "hooks": ["session lifecycle", "plugin UI"],
+  "hooks": ["会话生命周期", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-agent-teams",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/anchored-standard.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-anchored-standard",
   "version": "0.1.29",
   "name": "Anchored Standard",
-  "description": "Audit agent trajectories against an explicit tool-call allowlist and flag activity outside the anchored run.",
+  "description": "按显式的工具白名单审计 agent 的执行轨迹，标出越界的调用。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "安全"
   },
   "capabilities": ["read-only"],
-  "hooks": ["session events", "plugin UI"],
+  "hooks": ["会话事件", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-anchored-standard",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/annotation.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-annotation",
   "version": "0.1.29",
   "name": "Annotations",
-  "description": "Capture bounded selections and notes from the conversation for later agent context.",
+  "description": "把对话里选中的片段和批注存下来，作为后续对话的上下文。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "上下文管理"
   },
   "capabilities": ["read-only"],
-  "hooks": ["plugin UI"],
+  "hooks": ["插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-annotation",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/archify.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-archify",
   "version": "0.1.29",
   "name": "Architecture Map",
-  "description": "Build a bounded, read-only architecture map from workspace components and package dependencies.",
+  "description": "从工作区的模块和依赖清单生成一张只读的架构图。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "开发工具"
   },
   "capabilities": ["reads-files", "runs-commands"],
-  "hooks": ["workspace files", "package manifest", "plugin UI"],
+  "hooks": ["工作区文件", "依赖清单", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-archify",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/at-file.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-at-file",
   "version": "0.1.29",
   "name": "@file Context",
-  "description": "Attach a bounded 256 KiB strict UTF-8 workspace file using canonical workspace path confinement and no-follow regular-file reads, framing it as offline, read-only, untrusted model context with closing-tag neutralization and cancellable sequential execution.",
+  "description": "把工作区里的单个文件（上限 256 KiB、严格 UTF-8）作为只读上下文附给模型，路径限定在工作区内且不跟随符号链接。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "上下文管理"
   },
   "capabilities": ["read-only", "reads-files"],
-  "hooks": ["file context tool", "workspace file read", "plugin UI"],
+  "hooks": ["文件上下文工具", "工作区文件读取", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-at-file",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/auto-mode.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-auto-mode",
   "version": "0.1.29",
   "name": "Auto Mode",
-  "description": "Execute argv commands under a safe policy that blocks shell wrappers and requires confirmation for risky operations.",
+  "description": "在受控策略下执行 argv 命令：拒绝 shell 包装，危险操作要求确认。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "安全"
   },
   "capabilities": ["reads-files", "runs-commands"],
-  "hooks": ["argv execution", "plugin UI"],
+  "hooks": ["argv 执行", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-auto-mode",
     "config": {

package/packages/api-gateway/src/marketplace-entries/official/better-sidebar.json

@@ -3,18 +3,18 @@
   "packageName": "@pi-harness/plugin-better-sidebar",
   "version": "0.1.29",
   "name": "Better Sidebar",
-  "description": "Show a compact workspace, Git, and session overview beside the conversation without modifying files.",
+  "description": "在对话旁边显示工作区、Git 与会话概览，只读不改文件。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": {
-    "id": "developer",
-    "label": "开发工具"
+    "id": "interface",
+    "label": "界面增强"
   },
   "capabilities": ["session-data", "reads-files", "runs-commands"],
-  "hooks": ["workspace scan", "read-only Git", "session manager", "plugin UI"],
+  "hooks": ["工作区扫描", "只读 Git", "会话管理器", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-better-sidebar",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/browser-fetch.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-browser-fetch",
   "version": "0.1.29",
   "name": "Browser Fetch",
-  "description": "Fetch public HTTP and HTTPS pages as bounded text with descriptor-safe inputs, DNS pinning, per-redirect private-network validation, textual MIME enforcement, cancellation, a whole-request timeout, and validated fail-closed panel reporting.",
+  "description": "抓取公网 HTTP/HTTPS 页面并转成有上限的文本，固定 DNS、拦截内网地址、只接受文本类型，可取消且有整体超时。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "网页与研究"
   },
   "capabilities": ["network-access"],
-  "hooks": ["network request", "plugin UI"],
+  "hooks": ["网络请求", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-browser-fetch",
     "config": {

package/packages/api-gateway/src/marketplace-entries/official/browser-session.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-browser-session",
   "version": "0.1.29",
   "name": "Browser Session",
-  "description": "Control a loopback-only Chrome DevTools session with descriptor-safe commands, bounded discovery, cancellable operations, screenshot metadata protection, and validated fail-closed panel previews.",
+  "description": "通过 Chrome DevTools 协议控制一个仅限本机回环的浏览器会话，命令受限、可取消，截图元数据会被清理。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "网页与研究"
   },
   "capabilities": ["network-access"],
-  "hooks": ["browser session tools", "Chrome DevTools Protocol", "plugin UI"],
+  "hooks": ["浏览器会话工具", "Chrome DevTools 协议", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-browser-session",
     "config": {

package/packages/api-gateway/src/marketplace-entries/official/canvas-draw.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-canvas-draw",
   "version": "0.1.29",
   "name": "Canvas Draw",
-  "description": "Generate validated, bounded Mermaid flowchart source from structured nodes and edges in the workspace UI.",
+  "description": "在面板里用结构化的节点和连线生成经过校验的 Mermaid 流程图源码。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "视觉与多模态"
   },
   "capabilities": ["read-only"],
-  "hooks": ["plugin UI"],
+  "hooks": ["插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-canvas-draw",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/change-verifier.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-change-verifier",
   "version": "0.1.29",
   "name": "Change Verifier",
-  "description": "Combine project tests and Git change review into one explicit verification gate before handoff.",
+  "description": "交接前把项目测试和 Git 变更评审合成一道显式的验收关卡。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "工作流"
   },
   "capabilities": ["read-only"],
-  "hooks": ["project scripts", "Git diff", "plugin UI"],
+  "hooks": ["项目脚本", "Git 变更", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-change-verifier",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/cleaner.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-cleaner",
   "version": "0.1.29",
   "name": "Cleaner",
-  "description": "Strict descriptor-safe configuration and parameters, display-safe bounded Pi Harness Git capsule inventory, removal with explicit confirmation and retention controls, symlink and replacement defenses, cancellable serialization, and a fail-closed normalized panel.",
+  "description": "列出 Pi Harness 的 Git 胶囊目录并按保留策略清理，删除需要显式确认，防符号链接与文件替换，可取消。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "开发工具"
   },
   "capabilities": ["reads-files", "writes-files"],
-  "hooks": ["capsule cleanup tool", "agent capsule directory", "plugin UI"],
+  "hooks": ["胶囊清理工具", "agent 胶囊目录", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-cleaner",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/cli-notifier.json

@@ -3,7 +3,7 @@
   "packageName": "@pi-harness/plugin-cli-notifier",
   "version": "0.1.29",
   "name": "CLI Notifier",
-  "description": "Send local desktop notifications when an agent turn completes, fails, or is aborted, and when context compaction fails.",
+  "description": "agent 轮次结束、失败、被中断，或上下文压缩失败时，发一条本机桌面通知。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
@@ -14,7 +14,7 @@
     "label": "工作流"
   },
   "capabilities": ["runs-commands"],
-  "hooks": ["agent end", "compaction error", "plugin UI"],
+  "hooks": ["运行结束", "压缩失败", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-cli-notifier",
     "config": {}

package/packages/api-gateway/src/marketplace-entries/official/code2skill.json

@@ -3,18 +3,18 @@
   "packageName": "@pi-harness/plugin-code2skill",
   "version": "0.1.29",
   "name": "Code2Skill",
-  "description": "Package selected workspace source files into a bounded local Pi skill with a generated SKILL.md manifest and preserved references.",
+  "description": "把选中的工作区源码打包成一个本地 Pi skill，自动生成 SKILL.md 并保留引用。",
   "author": "Pi Harness",
   "repository": "https://github.com/pi-harness/pi-harness",
   "license": "MIT",
   "source": "official",
   "status": "verified",
   "category": {
-    "id": "tools",
-    "label": "工具"
+    "id": "developer",
+    "label": "开发工具"
   },
   "capabilities": ["reads-files", "writes-files"],
-  "hooks": ["workspace files", "plugin UI"],
+  "hooks": ["工作区文件", "插件面板"],
   "profile": {
     "name": "@pi-harness/plugin-code2skill",
     "config": {}