@evandu/super-pi 0.1.152 → 0.1.154

package/dist/server/http-server.js

@@ -314,7 +314,7 @@ export function createHttpServer(options) {
             // the endpoint that can spend it is exactly the one an agent's own turn can reach, and the
             // management half (`/api/feishu/config`) stays behind the ordinary token AND the local-address
             // predicate.
-            if (requestPath !== "/api/conversation/usage" && requestPath !== "/api/memory/tool" && requestPath !== "/api/knowledge/tool" && requestPath !== "/api/documents/tool" && requestPath !== "/api/web/tool" && requestPath !== "/api/feishu/tool" && requestPath !== "/api/todos" && requestPath !== "/api/scheduled-tasks" && requestPath !== "/api/question" && (requestPath !== "/api/tools" || request.method !== "POST") && !requestPath.startsWith("/tools/") && !isAuthorized(request, accessToken)) {
+            if (requestPath !== "/api/conversation/usage" && requestPath !== "/api/memory/tool" && requestPath !== "/api/knowledge/tool" && requestPath !== "/api/documents/tool" && requestPath !== "/api/web/tool" && requestPath !== "/api/feishu/tool" && requestPath !== "/api/todos" && requestPath !== "/api/scheduled-tasks" && requestPath !== "/api/projects/tool" && requestPath !== "/api/question" && (requestPath !== "/api/tools" || request.method !== "POST") && !requestPath.startsWith("/tools/") && !isAuthorized(request, accessToken)) {
                 response.writeHead(401, { "www-authenticate": "Bearer" }).end("Authentication required");
                 return;
             }
@@ -1176,6 +1176,10 @@ export function createHttpServer(options) {
                 };
                 try {
                     const body = JSON.parse(raw);
+                    if (body.conversationId && context.projectService?.projectForSession?.(body.conversationId)) {
+                        json(403, { error: "项目分工必须使用 project 派发，以遵守资源准入限制" });
+                        return;
+                    }
                     const result = await runService.dispatchTask(body);
                     json(result.status, result.body);
                 }
@@ -1302,7 +1306,12 @@ export function createHttpServer(options) {
                     response.writeHead(status, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify(body));
                 };
                 try {
-                    const result = await runService.runWorkflow(JSON.parse(raw));
+                    const body = JSON.parse(raw);
+                    if (body.conversationId && context.projectService?.projectForSession?.(body.conversationId)) {
+                        json(403, { error: "项目分工必须使用 project 派发，以遵守资源准入限制" });
+                        return;
+                    }
+                    const result = await runService.runWorkflow(body);
                     json(result.status, result.body);
                 }
                 catch (error) {
@@ -1457,6 +1466,180 @@ export function createHttpServer(options) {
                 }
                 return;
             }
+            if (url.pathname === "/api/projects" || url.pathname.startsWith("/api/projects/")) {
+                if (!isLocalOrPrivateAddress(remote)) {
+                    json(403, { error: "项目控制面板只允许本机或私网访问" });
+                    return;
+                }
+                const service = context.projectService;
+                if (!service) {
+                    json(503, { error: "项目服务未就绪" });
+                    return;
+                }
+                const parts = url.pathname.slice("/api/projects".length).split("/").filter(Boolean).map((part) => decodeURIComponent(part));
+                const projectId = parts[0];
+                const subresource = parts[1];
+                const asked = request.method === "GET" ? { text: "{}", tooLarge: false } : await readRequestText(request, MAX_FILE_BYTES * 2);
+                if (asked.tooLarge) {
+                    json(413, { error: "请求体过大", code: "too_large" });
+                    return;
+                }
+                try {
+                    const body = JSON.parse(asked.text);
+                    const callerConversationId = typeof body.conversationId === "string" ? body.conversationId.trim() : "";
+                    if (subresource === undefined && projectId === "tool") {
+                        const verdict = runService.verifyPrimaryCapability(callerConversationId, body.capability);
+                        if (!verdict.ok) {
+                            json(403, { error: verdict.message });
+                            return;
+                        }
+                        const caller = store.conversation(callerConversationId);
+                        if (!caller || !body.workspaceId || caller.workspaceId !== body.workspaceId) {
+                            json(403, { error: "workspaceId 与调用会话不一致或缺失" });
+                            return;
+                        }
+                        const result = await service.tool(body, caller.workspaceId, callerConversationId);
+                        broadcaster.broadcastState();
+                        json(200, { result });
+                        return;
+                    }
+                    if (!isAuthorized(request, accessToken)) {
+                        json(401, { error: "需要管理访问凭据" });
+                        return;
+                    }
+                    if (callerConversationId) {
+                        const verdict = runService.verifyPrimaryCapability(callerConversationId, body.capability);
+                        if (!verdict.ok) {
+                            json(403, { error: verdict.message });
+                            return;
+                        }
+                    }
+                    const callerWorkspaceId = callerConversationId ? store.conversation(callerConversationId)?.workspaceId : undefined;
+                    const explicitWorkspaceId = url.searchParams.get("workspaceId")?.trim() || (typeof body.workspaceId === "string" ? body.workspaceId.trim() : undefined);
+                    if (callerWorkspaceId && explicitWorkspaceId && callerWorkspaceId !== explicitWorkspaceId) {
+                        json(403, { error: "workspaceId 与调用会话不一致" });
+                        return;
+                    }
+                    if (callerConversationId || body.capability || request.headers["x-super-pi-capability"]) {
+                        json(403, { error: "Agent 必须使用 /api/projects/tool，管理操作仅由 Boss 发起" });
+                        return;
+                    }
+                    const requestedWorkspaceId = callerWorkspaceId ?? explicitWorkspaceId;
+                    if (request.method === "GET") {
+                        if (!requestedWorkspaceId) {
+                            json(400, { error: "workspaceId 不能为空" });
+                            return;
+                        }
+                        if (!projectId) {
+                            json(200, { projects: service.list(requestedWorkspaceId) });
+                            return;
+                        }
+                        const project = service.get(projectId, requestedWorkspaceId);
+                        if (!subresource) {
+                            json(200, { project });
+                            return;
+                        }
+                        if (subresource === "tasks") {
+                            json(200, { tasks: project.tasks });
+                            return;
+                        }
+                        if (subresource === "reports") {
+                            json(200, { reports: project.reports });
+                            return;
+                        }
+                        if (subresource === "escalations") {
+                            json(200, { escalations: project.escalations });
+                            return;
+                        }
+                        json(404, { error: "未知的项目资源" });
+                        return;
+                    }
+                    if (request.method !== "POST" && request.method !== "PATCH") {
+                        json(405, { error: "项目接口只支持 GET、POST、PATCH" });
+                        return;
+                    }
+                    if (!projectId && request.method === "POST") {
+                        const project = await service.create({ ...body, workspaceId: requestedWorkspaceId });
+                        broadcaster.broadcastState();
+                        json(201, { project });
+                        return;
+                    }
+                    if (!projectId) {
+                        json(400, { error: "缺少项目 id" });
+                        return;
+                    }
+                    const workspaceId = requestedWorkspaceId;
+                    if (!workspaceId) {
+                        json(400, { error: "workspaceId 不能为空" });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "start") {
+                        const project = await service.start(projectId, workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { project });
+                        return;
+                    }
+                    if (request.method === "PATCH" && subresource === "budget") {
+                        const project = await service.updateBudget(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { project });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "tasks" && parts[2] && parts[3] === "dispatch") {
+                        const task = await service.dispatchTask(projectId, parts[2], workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { task });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "tasks" && parts[2] && parts[3] === "review") {
+                        const task = await service.requestReview(projectId, parts[2], workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { task });
+                        return;
+                    }
+                    if (request.method === "PATCH" && !subresource) {
+                        const project = await service.updateStatus(projectId, body.status, workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { project });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "tasks") {
+                        const task = await service.addTask(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(201, { task });
+                        return;
+                    }
+                    if (request.method === "PATCH" && subresource === "tasks" && parts[2]) {
+                        const task = await service.updateTask(projectId, parts[2], { ...body, workspaceId });
+                        broadcaster.broadcastState();
+                        json(200, { task });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "reports") {
+                        const report = await service.addReport(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(201, { report });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "escalations") {
+                        const escalation = await service.addEscalation(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(201, { escalation });
+                        return;
+                    }
+                    if (request.method === "PATCH" && subresource === "escalations" && parts[2]) {
+                        const escalation = await service.resolveEscalation(projectId, parts[2], body.decision, body.status ?? "resolved", workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { escalation });
+                        return;
+                    }
+                    json(404, { error: "未知的项目操作" });
+                }
+                catch (error) {
+                    json(400, { error: error instanceof Error ? error.message : "project request failed" });
+                }
+                return;
+            }
             if (url.pathname === "/api/orchestrator") {
                 if (request.method !== "POST" || !isLocalOrPrivateAddress(remote)) {
                     response.writeHead(403, { "content-type": "text/plain; charset=utf-8" }).end("Orchestrator requires a loopback or private network POST");
@@ -1484,6 +1667,10 @@ export function createHttpServer(options) {
                         return;
                     }
                     const action = (body.action || "").trim();
+                    if ((action === "spawn" || action === "dispatch") && context.projectService?.projectForSession?.(callerConversationId)) {
+                        json(403, { error: "项目分工必须使用 project 派发，以遵守资源准入限制" });
+                        return;
+                    }
                     if (action === "spawn") {
                         // Capability auth above proves who is calling. The target workspace is a separate, explicit
                         // choice: a parentConversationId records a tree edge and never selects that target.

package/dist/server/index.js

@@ -26,6 +26,7 @@ import { ConversationService } from "./application/conversation-service.js";
 import { ScheduledTaskService } from "./application/scheduled-task-service.js";
 import { SessionLedger } from "./session-ledger.js";
 import { SessionOrchestratorService } from "./application/session-orchestrator-service.js";
+import { ProjectService } from "./application/project-service.js";
 import { WorkspaceService } from "./application/workspace-service.js";
 import { CommandHandler } from "./command-handler.js";
 import { TerminalService, terminalDisabledReason } from "./terminal.js";
@@ -291,6 +292,7 @@ runService.setExecService(execService);
 const scheduledTaskService = new ScheduledTaskService(store, runService, conversationService, broadcaster);
 const sessionLedger = new SessionLedger();
 const sessionOrchestratorService = new SessionOrchestratorService(store, conversationService, runService, sessionLedger, broadcaster);
+const projectService = new ProjectService(store, sessionOrchestratorService);
 void sessionOrchestratorService.restoreWatchdogs().catch((error) => {
     console.warn("Super Pi: restoring watchdogs failed:", error instanceof Error ? error.message : String(error));
 });
@@ -315,6 +317,7 @@ const serverContext = {
     scheduledTaskService,
     sessionLedger,
     sessionOrchestratorService,
+    projectService,
     execService,
     toolRegistry,
     toolRunner,

package/dist/server/persistence/app-state-repository.d.ts

@@ -10,7 +10,7 @@ export type StateTransaction = {
     run: SubagentRun;
 } | {
     kind: "collections.replace";
-    values: Partial<Pick<AppState, "workflows" | "backgroundTasks" | "scheduledTasks">>;
+    values: Partial<Pick<AppState, "workflows" | "backgroundTasks" | "scheduledTasks" | "projects">>;
 }
 /**
  * Removes one collection row entirely.
@@ -22,7 +22,7 @@ export type StateTransaction = {
  */
  | {
     kind: "collections.remove";
-    name: "workflows" | "backgroundTasks" | "scheduledTasks";
+    name: "workflows" | "backgroundTasks" | "scheduledTasks" | "projects";
 } | {
     kind: "conversation.metadata";
     conversationId: string;

package/dist/server/runtime.js

@@ -24,7 +24,7 @@ import { LengthExceededError } from "./turn-failure.js";
 // paths recognise a delivery identically. Re-exported because they were part of this module's surface.
 export { describeDeliveredUserMessage, describePiQueue } from "./pi-session-events.js";
 import { createPiSession, createSdkCatalog, piSdkAvailable, resolveTranscriptFile, superPiExtensionPaths } from "./pi-session.js";
-import { TASK_CONVERSATION_ENV, PARENT_CONVERSATION_ENV, TASK_DEPTH_ENV, TASK_ENDPOINT_ENV, TASK_EXEC_ENDPOINT_ENV, TASK_ROSTER_ENV, TASK_TOOL_NAME, TODO_ENDPOINT_ENV, TODO_TOOL_NAME, SCHEDULED_TASK_ENDPOINT_ENV, SCHEDULED_TASK_TOOL_NAME, WORKFLOW_ENDPOINT_ENV, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, ORCHESTRATOR_ENDPOINT_ENV, ORCHESTRATOR_WORKSPACE_ENV, SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME, rosterPayload, } from "./task-tool.js";
+import { TASK_CONVERSATION_ENV, PARENT_CONVERSATION_ENV, TASK_DEPTH_ENV, TASK_ENDPOINT_ENV, TASK_EXEC_ENDPOINT_ENV, TASK_ROSTER_ENV, TASK_TOOL_NAME, TODO_ENDPOINT_ENV, TODO_TOOL_NAME, PROJECT_TOOL_NAME, PROJECT_ENDPOINT_ENV, SCHEDULED_TASK_ENDPOINT_ENV, SCHEDULED_TASK_TOOL_NAME, WORKFLOW_ENDPOINT_ENV, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, ORCHESTRATOR_ENDPOINT_ENV, ORCHESTRATOR_WORKSPACE_ENV, SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME, rosterPayload, } from "./task-tool.js";
 import { BLOCKING_UI_METHODS, EXTENSION_UI_METHODS, } from "./types.js";
 import { loadConversationImages } from "./upload.js";
 import { describeToolCall, describeToolCallArgs, describeToolCallInProgress, extractPartialResultText, extractToolResultText, readQuestionCall } from "./tool-calls.js";
@@ -711,6 +711,7 @@ export class PiRpcRuntime {
             [PARENT_CONVERSATION_ENV]: parentConversationId ?? "",
             [TASK_DEPTH_ENV]: "0",
             [TODO_ENDPOINT_ENV]: this.options.todoEndpoint ?? "",
+            [PROJECT_ENDPOINT_ENV]: this.options.orchestratorEndpoint?.replace(/\/api\/orchestrator$/, "/api/projects/tool") ?? "",
             [SCHEDULED_TASK_ENDPOINT_ENV]: this.options.scheduledTaskEndpoint ?? "",
             [WORKFLOW_ENDPOINT_ENV]: this.options.workflowEndpoint ?? "",
             [ORCHESTRATOR_ENDPOINT_ENV]: this.options.orchestratorEndpoint ?? "",
@@ -1259,6 +1260,8 @@ export class PiRpcRuntime {
         // loaded-but-undeclared tool - broken with no error to explain it.
         if (process.env.SUPER_PI_FEISHU_ENDPOINT)
             names.push(FEISHU_READ_TOOL_NAME, FEISHU_WRITE_TOOL_NAME);
+        if (this.options.orchestratorEndpoint)
+            names.push(PROJECT_TOOL_NAME);
         if (this.options.orchestratorEndpoint)
             names.push(SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME);
         return names;
@@ -1479,7 +1482,7 @@ export class PiRpcRuntime {
         // allowlist and naming a tool Pi has not registered would change the spawn line for every other
         // mode. The prompt asks for a bare JSON array and nothing else; if the model spends a turn on a
         // tool call anyway the reranker times out and falls back to the lexical order.
-        const agentArgs = memoryReview ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates", "--tools", "memory,skill_manage,session_search"] : knowledgeRerank ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates"] : await agentSpawnArgs(this.agents.promptDir, agent, { extraAllowedTools: [...(extensionArgs.length ? [TASK_TOOL_NAME, TODO_TOOL_NAME, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, SCHEDULED_TASK_TOOL_NAME, "question", "tool_register", ...(this.options.orchestratorEndpoint ? [SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME] : [])] : []), ...(memoryEnabled ? ["memory", "skill_manage", "session_search"] : []), ...(knowledgeEnabled ? [KNOWLEDGE_TOOL_NAME, KNOWLEDGE_IMPORT_TOOL_NAME] : []), ...(documentsEnabled ? [DOCUMENT_READ_TOOL_NAME, DOCUMENT_WRITE_TOOL_NAME] : []), ...(webEnabled ? [WEB_SEARCH_TOOL_NAME, WEB_FETCH_TOOL_NAME] : []), ...(feishuEnabled ? [FEISHU_READ_TOOL_NAME, FEISHU_WRITE_TOOL_NAME] : [])] });
+        const agentArgs = memoryReview ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates", "--tools", "memory,skill_manage,session_search"] : knowledgeRerank ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates"] : await agentSpawnArgs(this.agents.promptDir, agent, { extraAllowedTools: [...(extensionArgs.length ? [TASK_TOOL_NAME, TODO_TOOL_NAME, PROJECT_TOOL_NAME, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, SCHEDULED_TASK_TOOL_NAME, "question", "tool_register", ...(this.options.orchestratorEndpoint ? [SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME] : [])] : []), ...(memoryEnabled ? ["memory", "skill_manage", "session_search"] : []), ...(knowledgeEnabled ? [KNOWLEDGE_TOOL_NAME, KNOWLEDGE_IMPORT_TOOL_NAME] : []), ...(documentsEnabled ? [DOCUMENT_READ_TOOL_NAME, DOCUMENT_WRITE_TOOL_NAME] : []), ...(webEnabled ? [WEB_SEARCH_TOOL_NAME, WEB_FETCH_TOOL_NAME] : []), ...(feishuEnabled ? [FEISHU_READ_TOOL_NAME, FEISHU_WRITE_TOOL_NAME] : [])] });
         // Refused here, with the reason, rather than handed to the spawn: an ENOENT from `spawn` reads as
         // "the app is broken" and hides the one fact that matters, which is where it looked for Pi.
         if (!this.pi.found)

package/dist/server/server-context.d.ts

@@ -73,6 +73,7 @@ export interface ServerContext {
     scheduledTaskService?: import("./application/scheduled-task-service.js").ScheduledTaskService;
     sessionLedger?: import("./session-ledger.js").SessionLedger;
     sessionOrchestratorService?: import("./application/session-orchestrator-service.js").SessionOrchestratorService;
+    projectService?: import("./application/project-service.js").ProjectService;
     execService: ExecService;
     toolRegistry: ToolRegistry;
     toolRunner: ToolRunner;

package/dist/server/store.d.ts

@@ -2,7 +2,7 @@ import type { AppStateRepository } from "./persistence/app-state-repository.js";
 import { defaultJsonStatePath } from "./persistence/json-state-repository.js";
 import type { ScheduledTask } from "./scheduled-tasks.js";
 import type { WorkflowRun } from "./workflow.js";
-import type { AppState, Conversation, Message, MessageDelivery, MessageImage, ModelSelection, SubagentRun, SubagentRunUpdate, TodoItem, ToolCallQuestion, ToolCallArg, ToolCallBlock, ToolResultSummary, Workspace } from "./types.js";
+import type { AppState, Conversation, Message, MessageDelivery, MessageImage, ModelSelection, Project, SubagentRun, SubagentRunUpdate, TodoItem, ToolCallQuestion, ToolCallArg, ToolCallBlock, ToolResultSummary, Workspace } from "./types.js";
 import type { TurnUsageReadout } from "./conversation-usage.js";
 /** Mints the id a forked conversation will have, BEFORE its Pi transcript exists.
  *
@@ -145,6 +145,10 @@ export declare class Store {
      * `nextRunAt` and then hands the whole task back to the store, which owns the real one.
      */
     scheduledTasks(): ScheduledTask[];
+    projects(): Project[];
+    project(projectId: string): Project | undefined;
+    setProject(project: Project): Promise<Project>;
+    removeProject(projectId: string): Promise<void>;
     /** Small detached rows used when refreshing each conversation's scoped model catalog. */
     catalogConversationTargets(): Array<Pick<Conversation, "id" | "archivedAt" | "model">>;
     /** Clone only one workspace's transcripts, never unrelated workspaces or app state. */

package/dist/server/store.js

@@ -612,7 +612,8 @@ export class Store {
             // un-normalised shape rather than the one the store is actually running on.
             const defaulted = ["workspaces", "conversations", "subagentRuns"].filter((key) => !Array.isArray(state[key])).length > 0
                 || !Array.isArray(state.backgroundTasks)
-                || (state.scheduledTasks !== undefined && !Array.isArray(state.scheduledTasks));
+                || (state.scheduledTasks !== undefined && !Array.isArray(state.scheduledTasks))
+                || (state.projects !== undefined && !Array.isArray(state.projects));
             if (!Array.isArray(state.backgroundTasks))
                 state.backgroundTasks = [];
             // A scheduled-task list that is not a list is not a list of tasks. The key is dropped rather than
@@ -620,6 +621,8 @@ export class Store {
             // fresh install reads - instead of crashing the panel on every poll.
             if (state.scheduledTasks !== undefined && !Array.isArray(state.scheduledTasks))
                 delete state.scheduledTasks;
+            if (state.projects !== undefined && !Array.isArray(state.projects))
+                delete state.projects;
             // Every sweep runs before the store is constructed, so a single persist below publishes them together.
             // Reconciling them in separate writes would put a file on disk in which one kind of orphan was fixed
             // and the other was not - a half-repaired state that still needs a second restart to finish.
@@ -767,6 +770,28 @@ export class Store {
     scheduledTasks() {
         return this.state.scheduledTasks ? [...this.state.scheduledTasks] : [];
     }
+    projects() { return structuredClone(this.state.projects ?? []); }
+    project(projectId) { const project = this.state.projects?.find((item) => item.id === projectId); return project ? structuredClone(project) : undefined; }
+    async setProject(project) {
+        if (!this.state.projects)
+            this.state.projects = [];
+        const stored = structuredClone(project);
+        const index = this.state.projects.findIndex((item) => item.id === stored.id);
+        if (index < 0)
+            this.state.projects.unshift(stored);
+        else
+            this.state.projects[index] = stored;
+        await this.persistCollections("projects");
+        return structuredClone(stored);
+    }
+    async removeProject(projectId) {
+        if (!this.state.projects)
+            return;
+        this.state.projects = this.state.projects.filter((item) => item.id !== projectId);
+        if (!this.state.projects.length)
+            delete this.state.projects;
+        await this.persistCollections("projects");
+    }
     /** Small detached rows used when refreshing each conversation's scoped model catalog. */
     catalogConversationTargets() {
         return this.state.conversations.map(({ id, archivedAt, model }) => ({
@@ -1030,13 +1055,14 @@ export class Store {
      * sidebar renders `state.workspaces` and never has to know that a closed workspace exists.
      */
     clientState(scope) {
+        const { projects: _projects, ...publicState } = this.state;
         const closed = new Set(this.state.workspaces.filter((item) => item.closedAt).map((item) => item.id));
         const workspaces = this.state.workspaces.filter((item) => !closed.has(item.id));
         const visible = this.state.conversations.filter((item) => !closed.has(item.workspaceId));
         // Legacy sockets still receive complete visible transcripts. Project before cloning so a closed
         // workspace's retained history is never copied just to discard it afterwards.
         if (scope === undefined)
-            return structuredClone({ ...this.state, workspaces, conversations: visible, serverTimeZone: serverTimeZone() });
+            return structuredClone({ ...publicState, workspaces, conversations: visible, serverTimeZone: serverTimeZone() });
         // A focused socket keeps every sidebar row, but owns only the selected transcript. An empty scope
         // deliberately loads none; a missing/closed selection must not expose retained workspace history.
         const selectedId = visible.find((item) => item.id === scope.conversationId)?.id;
@@ -1047,7 +1073,7 @@ export class Store {
             hasPendingQuestion: messages.some((message) => message.toolCalls?.some((call) => call.question?.status === "pending")),
         }));
         return structuredClone({
-            ...this.state,
+            ...publicState,
             workspaces,
             conversations,
             // THE CLOCK THE SERVER SCHEDULES BY, NAMED. The scheduled-task panel renders 「每天 09:00」 and

package/dist/server/task-tool.d.ts

@@ -162,6 +162,8 @@ export declare function parentDeniedTools(parent: AgentDefinition | undefined):
  * `todowrite` and not `todo`, and there is nothing to gain from renaming a tool whose description has
  * already been written to explain that name.
  */
+export declare const PROJECT_TOOL_NAME = "project";
+export declare const PROJECT_ENDPOINT_ENV = "SUPER_PI_PROJECT_ENDPOINT";
 export declare const TODO_TOOL_NAME = "todowrite";
 /**
  * The endpoint the `todowrite` extension dials. A FIFTH name in the same wire as the four above, written

package/dist/server/task-tool.js

@@ -219,6 +219,8 @@ export function parentDeniedTools(parent) {
  * `todowrite` and not `todo`, and there is nothing to gain from renaming a tool whose description has
  * already been written to explain that name.
  */
+export const PROJECT_TOOL_NAME = "project";
+export const PROJECT_ENDPOINT_ENV = "SUPER_PI_PROJECT_ENDPOINT";
 export const TODO_TOOL_NAME = "todowrite";
 /**
  * The endpoint the `todowrite` extension dials. A FIFTH name in the same wire as the four above, written

package/dist/server/terminal.d.ts

@@ -29,8 +29,8 @@
  *      nothing else; this file resolves the id against the store and spawns in that workspace's path.
  *      A browser that asked for `C:\` or `/etc` gets its own workspace's directory instead, because
  *      there is no code path on which a client-supplied path reaches `spawn`.
- *   4. BOUNDED SESSIONS. `MAX_SESSIONS` shells, one per client tab, capped so a loop of reconnects
- *      cannot accumulate processes.
+ *   4. BOUNDED SESSIONS. `MAX_SESSIONS` live shells, capped so a loop of reconnects cannot accumulate
+ *      processes.
  *
  * What is NOT here is a per-command allowlist. A terminal that refuses `rm` or `curl` is not a terminal,
  * and pretending otherwise would be worse than the honest version: with (1) and (2) the operator has
@@ -89,8 +89,33 @@ export declare function terminalShellCandidates(env?: NodeJS.ProcessEnv): {
     args: string[];
     label: string;
 }[];
-/** One shell per browser tab, and a hard ceiling so reconnects cannot accumulate processes. */
-export declare const MAX_SESSIONS = 8;
+/**
+ * THE CEILING ON LIVE SHELLS.
+ *
+ * WHAT THIS COUNTS. Only the browser's terminal panel: `terminal.open` is the ONE place a shell is
+ * spawned, and it is a command the browser sends over its own WebSocket. An agent session, a
+ * sub-agent run, and the `exec` tool do NOT consume this budget - the exec tool spawns its own
+ * short-lived `shell -c` process through a different service.
+ *
+ * WHY THE COUNT ACCUMULATES. The client opens up to five terminals per session (`MAX_SLOTS` in
+ * TerminalPanel), and a shell is deliberately KEPT ALIVE across a session switch: the panel unmounts
+ * without closing it, so the work in that shell survives the switch. Every session in the tree is a
+ * conversation with its own panel - including a CHILD session the user can click into - and each of
+ * them can hold five shells, and all of them land in this one map. A tree multiplies: eight parents
+ * with four children each are forty sessions, and forty sessions at four terminals is a hundred and
+ * sixty shells.
+ *
+ * WHY 256. Every shell in this map was opened by the user on purpose, and what runs inside it is the
+ * user's own business - so this constant is NOT a memory governor and does not pretend to be one. Its
+ * whole job is to be generous enough never to stand in the way of real work, and loud enough that a
+ * client looping on `terminal.open` is stopped with a message instead of quietly filling the machine.
+ * (For the record, the platform's own overhead per shell is the shell: an idle Windows PowerShell is
+ * ~90MB and an idle bash ~8MB, so the cost of "many terminals" is the cost of the shells themselves.)
+ * Reconnect storms do not need this constant to be low: the socket-close cleanup already kills a
+ * connection's shells, and the 30-second heartbeat reaps the half-open connections that would
+ * otherwise leave them behind.
+ */
+export declare const MAX_SESSIONS = 256;
 /**
  * The terminal's wire protocol, as members of the EXISTING `ClientCommand` / `ServerEvent` unions rather
  * than a second transport.

package/dist/server/terminal.js

@@ -29,8 +29,8 @@
  *      nothing else; this file resolves the id against the store and spawns in that workspace's path.
  *      A browser that asked for `C:\` or `/etc` gets its own workspace's directory instead, because
  *      there is no code path on which a client-supplied path reaches `spawn`.
- *   4. BOUNDED SESSIONS. `MAX_SESSIONS` shells, one per client tab, capped so a loop of reconnects
- *      cannot accumulate processes.
+ *   4. BOUNDED SESSIONS. `MAX_SESSIONS` live shells, capped so a loop of reconnects cannot accumulate
+ *      processes.
  *
  * What is NOT here is a per-command allowlist. A terminal that refuses `rm` or `curl` is not a terminal,
  * and pretending otherwise would be worse than the honest version: with (1) and (2) the operator has
@@ -190,8 +190,33 @@ export function terminalShellCandidates(env = process.env) {
 // ---------------------------------------------------------------------------------------------
 // Bounds
 // ---------------------------------------------------------------------------------------------
-/** One shell per browser tab, and a hard ceiling so reconnects cannot accumulate processes. */
-export const MAX_SESSIONS = 8;
+/**
+ * THE CEILING ON LIVE SHELLS.
+ *
+ * WHAT THIS COUNTS. Only the browser's terminal panel: `terminal.open` is the ONE place a shell is
+ * spawned, and it is a command the browser sends over its own WebSocket. An agent session, a
+ * sub-agent run, and the `exec` tool do NOT consume this budget - the exec tool spawns its own
+ * short-lived `shell -c` process through a different service.
+ *
+ * WHY THE COUNT ACCUMULATES. The client opens up to five terminals per session (`MAX_SLOTS` in
+ * TerminalPanel), and a shell is deliberately KEPT ALIVE across a session switch: the panel unmounts
+ * without closing it, so the work in that shell survives the switch. Every session in the tree is a
+ * conversation with its own panel - including a CHILD session the user can click into - and each of
+ * them can hold five shells, and all of them land in this one map. A tree multiplies: eight parents
+ * with four children each are forty sessions, and forty sessions at four terminals is a hundred and
+ * sixty shells.
+ *
+ * WHY 256. Every shell in this map was opened by the user on purpose, and what runs inside it is the
+ * user's own business - so this constant is NOT a memory governor and does not pretend to be one. Its
+ * whole job is to be generous enough never to stand in the way of real work, and loud enough that a
+ * client looping on `terminal.open` is stopped with a message instead of quietly filling the machine.
+ * (For the record, the platform's own overhead per shell is the shell: an idle Windows PowerShell is
+ * ~90MB and an idle bash ~8MB, so the cost of "many terminals" is the cost of the shells themselves.)
+ * Reconnect storms do not need this constant to be low: the socket-close cleanup already kills a
+ * connection's shells, and the 30-second heartbeat reaps the half-open connections that would
+ * otherwise leave them behind.
+ */
+export const MAX_SESSIONS = 256;
 /** Below the client panel's own minimum, and small enough that a `ls` cannot stall the socket. */
 const MIN_COLS = 20;
 const MIN_ROWS = 5;
@@ -296,7 +321,15 @@ export class TerminalService {
             if (this.sessions.has(command.sessionId))
                 return;
             if (this.sessions.size >= MAX_SESSIONS) {
-                send({ type: "terminal.error", sessionId: command.sessionId, message: `终端会话已达上限（${MAX_SESSIONS} 个），请先关闭一个。` });
+                // The count is in the message because the shells eating the budget are usually the BACKGROUND
+                // ones of other sessions - a parent session's children included, each of which has its own
+                // panel with its own terminals. The user sees three terminals in this panel and a refusal,
+                // and has no way to guess that the sessions they left open still hold shells.
+                send({
+                    type: "terminal.error",
+                    sessionId: command.sessionId,
+                    message: `终端会话已达上限（服务器最多 ${MAX_SESSIONS} 个，当前已有 ${this.sessions.size} 个在运行）。切换会话后仍在后台运行的终端也计入其中（包括 session 树里的子会话），请到对应的会话里关闭一个再试。`,
+                });
                 return;
             }
             // The workspace id is the ONLY thing the browser supplies, and it is resolved here. A client that