云服务部-叶林立
879fc5d37f
把 12 份 UPSTREAM.md 来源记录全部翻译为中文，并把中文定为这份仓库自有 维护文档的强制语言。 - 翻译 hippo-memory-pi、pi-ask-user、pi-chrome、pi-compaction、 pi-extension-codex-fast-mode、pi-minimal-footer、pi-notify、 pi-permission-system/docs/auto-review、pi-ssh、pi-subagents 与 pi-tool-search 的来源记录。 - 在 AGENTS.md 增加纪律：每个自维护扩展目录必须保留中文 UPSTREAM.md， 内容涵盖官方仓库、tag/commit、导入版本、导入日期、许可证归属、本地 改动清单与同步上游时的约束。 - 明确边界：UPSTREAM.md 属于仓库自有的维护文档，因此使用中文；上游自带 的源码、测试、文档、README、CHANGELOG 与 LICENSE 一律保持原文，不翻 译、不改写，避免同步上游时产生无意义 diff 并破坏许可证原文完整性。 - 所有 40 位 commit、tag/版本号、仓库 URL 与许可证路径原样保留，仅翻译 叙述性文字。 验证：12 份文件均无残留英文正文；逐份复核了 commit、版本、URL 与 LICENSES/ 路径未发生改变。
pi-chrome
Let Pi use your existing signed-in Chrome profile after explicit authorization.
MIT · 0 runtime deps · loopback-only bridge (127.0.0.1:17318) · inspectable unpacked Chrome extension. Review extensions/chrome-profile-bridge/browser-extension/ before loading. Verify setup with /chrome doctor.
You: "Find my open GitHub PR tab, summarize review state, and screenshot failing CI."
Agent: chrome_tab(list) → chrome_snapshot(...) → ctx_execute_file(capture) → chrome_screenshot(...)
✓ 3 reviewers, 1 change requested, CI red on iOS. Saved → .pi/chrome-screenshots/ci.png
You: [keeps coding — agent never asked you to log in]
pi-chrome runs through a small Chrome extension inside the Chrome profile you already use — including sites where you're already signed in. Agents can inspect or control Chrome only after you run /chrome authorize in current Pi session.
Install
pi install npm:pi-chrome
In Pi:
/chrome onboard
This opens chrome://extensions and copies bundled extension path. In Chrome Extensions:
- Turn on Developer mode.
- Click Load unpacked.
- Open path field with Cmd+Shift+G on macOS or Ctrl+L on Windows/Linux.
- Paste copied path.
- Press Enter.
Reload Pi so installed package loads:
/reload
Check bridge:
/chrome doctor
You should see:
✓ Chrome is connected (...)
Authorize current session:
/chrome authorize
/chrome doctor
Second doctor run should show all checks passing.
What it can do
- Read and summarize pages you're already signed into.
- Click, type, fill forms, scroll, drag, tap, and upload files.
- Capture screenshots for bugs, PRs, and demos.
- Inspect console logs and captured
fetch/XMLHttpRequestresponses. - Manage tabs without taking over your active window.
Tool parameters and gotchas are documented inline in Pi.
Session-local snapshots and Context Mode
In this maintained build, chrome_snapshot, chrome_find, and actions with includeSnapshot=true keep the full structured page snapshot out of the normal tool result. They atomically save only the latest capture for each target under:
.pi/chrome-context/<session-hash>/<target-hash>/snapshot.json
The tool returns a workspace-relative path plus bounded metadata. Analyze that path immediately with ctx_execute_file and print only the uids, text, or state needed for the next browser action. Do not use read or cat on the capture, because that would put the raw page back into model context.
Captures are deliberately ephemeral: a successful page interaction invalidates the old target capture, and session shutdown, /chrome revoke, or authorization expiry removes the session files. chrome_find still returns up to 20 compact ranked matches for direct use while storing the full capture privately.
Safety model
Chrome control is locked by default. Authorize per Pi session:
/chrome authorize # 15 minutes
/chrome authorize 30m # custom duration
/chrome authorize indefinite
/chrome revoke # lock again
/chrome status
Safety properties:
- Extension runs in your real Chrome profile and has broad tab/scripting permissions. Install only from trusted package source.
- Pi side binds to
127.0.0.1:17318only; no default network exposure. - Bridge rejects browser-origin command requests, so ordinary web pages cannot drive it through CORS.
- Each Pi session gets its own automation target; user tabs/windows are not closed by cleanup.
/chrome revokecloses only calling session's automation target.
Security details: SECURITY.md. Architecture details: docs/ARCHITECTURE.md.
Commands
/chrome onboard # guided setup
/chrome doctor # connectivity + version + eval checks
/chrome status # connection + auth + background state
/chrome authorize [duration]
/chrome revoke
/chrome background on # default: don't steal focus
/chrome background off # foreground/watch mode
/chrome background status
If loaded extension is older than installed pi-chrome, /chrome doctor tells you to reload it from chrome://extensions.
Limits
pi-chrome works best on web-page workflows exposed through DOM, screenshots, tabs, network, console, and Chrome input. It is not full OS automation.
Current limits include native Chrome/OS surfaces, print/save dialogs, permission bubbles, password-manager prompts, cross-origin iframe DOM access, CAPTCHA/bot challenges, passkeys/security keys/biometrics, rich multitouch/pinch/stylus gestures, and arbitrary desktop apps.
For strict-CSP pages, use screenshots + coordinate input when snapshot/evaluate paths are blocked.
Docs
- Examples:
docs/EXAMPLES.md - FAQ:
docs/FAQ.md - Comparison:
docs/COMPARISON.md - Security:
SECURITY.md - Benchmark suite:
test-suite/README.md - Architecture:
docs/ARCHITECTURE.md
License
MIT. See LICENSE.