@evandu/super-pi 0.1.153 → 0.1.154

package/dist/server/http-server.js

@@ -314,7 +314,7 @@ export function createHttpServer(options) {
             // the endpoint that can spend it is exactly the one an agent's own turn can reach, and the
             // management half (`/api/feishu/config`) stays behind the ordinary token AND the local-address
             // predicate.
-            if (requestPath !== "/api/conversation/usage" && requestPath !== "/api/memory/tool" && requestPath !== "/api/knowledge/tool" && requestPath !== "/api/documents/tool" && requestPath !== "/api/web/tool" && requestPath !== "/api/feishu/tool" && requestPath !== "/api/todos" && requestPath !== "/api/scheduled-tasks" && requestPath !== "/api/question" && (requestPath !== "/api/tools" || request.method !== "POST") && !requestPath.startsWith("/tools/") && !isAuthorized(request, accessToken)) {
+            if (requestPath !== "/api/conversation/usage" && requestPath !== "/api/memory/tool" && requestPath !== "/api/knowledge/tool" && requestPath !== "/api/documents/tool" && requestPath !== "/api/web/tool" && requestPath !== "/api/feishu/tool" && requestPath !== "/api/todos" && requestPath !== "/api/scheduled-tasks" && requestPath !== "/api/projects/tool" && requestPath !== "/api/question" && (requestPath !== "/api/tools" || request.method !== "POST") && !requestPath.startsWith("/tools/") && !isAuthorized(request, accessToken)) {
                 response.writeHead(401, { "www-authenticate": "Bearer" }).end("Authentication required");
                 return;
             }
@@ -1176,6 +1176,10 @@ export function createHttpServer(options) {
                 };
                 try {
                     const body = JSON.parse(raw);
+                    if (body.conversationId && context.projectService?.projectForSession?.(body.conversationId)) {
+                        json(403, { error: "项目分工必须使用 project 派发，以遵守资源准入限制" });
+                        return;
+                    }
                     const result = await runService.dispatchTask(body);
                     json(result.status, result.body);
                 }
@@ -1302,7 +1306,12 @@ export function createHttpServer(options) {
                     response.writeHead(status, { "content-type": "application/json; charset=utf-8" }).end(JSON.stringify(body));
                 };
                 try {
-                    const result = await runService.runWorkflow(JSON.parse(raw));
+                    const body = JSON.parse(raw);
+                    if (body.conversationId && context.projectService?.projectForSession?.(body.conversationId)) {
+                        json(403, { error: "项目分工必须使用 project 派发，以遵守资源准入限制" });
+                        return;
+                    }
+                    const result = await runService.runWorkflow(body);
                     json(result.status, result.body);
                 }
                 catch (error) {
@@ -1457,6 +1466,180 @@ export function createHttpServer(options) {
                 }
                 return;
             }
+            if (url.pathname === "/api/projects" || url.pathname.startsWith("/api/projects/")) {
+                if (!isLocalOrPrivateAddress(remote)) {
+                    json(403, { error: "项目控制面板只允许本机或私网访问" });
+                    return;
+                }
+                const service = context.projectService;
+                if (!service) {
+                    json(503, { error: "项目服务未就绪" });
+                    return;
+                }
+                const parts = url.pathname.slice("/api/projects".length).split("/").filter(Boolean).map((part) => decodeURIComponent(part));
+                const projectId = parts[0];
+                const subresource = parts[1];
+                const asked = request.method === "GET" ? { text: "{}", tooLarge: false } : await readRequestText(request, MAX_FILE_BYTES * 2);
+                if (asked.tooLarge) {
+                    json(413, { error: "请求体过大", code: "too_large" });
+                    return;
+                }
+                try {
+                    const body = JSON.parse(asked.text);
+                    const callerConversationId = typeof body.conversationId === "string" ? body.conversationId.trim() : "";
+                    if (subresource === undefined && projectId === "tool") {
+                        const verdict = runService.verifyPrimaryCapability(callerConversationId, body.capability);
+                        if (!verdict.ok) {
+                            json(403, { error: verdict.message });
+                            return;
+                        }
+                        const caller = store.conversation(callerConversationId);
+                        if (!caller || !body.workspaceId || caller.workspaceId !== body.workspaceId) {
+                            json(403, { error: "workspaceId 与调用会话不一致或缺失" });
+                            return;
+                        }
+                        const result = await service.tool(body, caller.workspaceId, callerConversationId);
+                        broadcaster.broadcastState();
+                        json(200, { result });
+                        return;
+                    }
+                    if (!isAuthorized(request, accessToken)) {
+                        json(401, { error: "需要管理访问凭据" });
+                        return;
+                    }
+                    if (callerConversationId) {
+                        const verdict = runService.verifyPrimaryCapability(callerConversationId, body.capability);
+                        if (!verdict.ok) {
+                            json(403, { error: verdict.message });
+                            return;
+                        }
+                    }
+                    const callerWorkspaceId = callerConversationId ? store.conversation(callerConversationId)?.workspaceId : undefined;
+                    const explicitWorkspaceId = url.searchParams.get("workspaceId")?.trim() || (typeof body.workspaceId === "string" ? body.workspaceId.trim() : undefined);
+                    if (callerWorkspaceId && explicitWorkspaceId && callerWorkspaceId !== explicitWorkspaceId) {
+                        json(403, { error: "workspaceId 与调用会话不一致" });
+                        return;
+                    }
+                    if (callerConversationId || body.capability || request.headers["x-super-pi-capability"]) {
+                        json(403, { error: "Agent 必须使用 /api/projects/tool，管理操作仅由 Boss 发起" });
+                        return;
+                    }
+                    const requestedWorkspaceId = callerWorkspaceId ?? explicitWorkspaceId;
+                    if (request.method === "GET") {
+                        if (!requestedWorkspaceId) {
+                            json(400, { error: "workspaceId 不能为空" });
+                            return;
+                        }
+                        if (!projectId) {
+                            json(200, { projects: service.list(requestedWorkspaceId) });
+                            return;
+                        }
+                        const project = service.get(projectId, requestedWorkspaceId);
+                        if (!subresource) {
+                            json(200, { project });
+                            return;
+                        }
+                        if (subresource === "tasks") {
+                            json(200, { tasks: project.tasks });
+                            return;
+                        }
+                        if (subresource === "reports") {
+                            json(200, { reports: project.reports });
+                            return;
+                        }
+                        if (subresource === "escalations") {
+                            json(200, { escalations: project.escalations });
+                            return;
+                        }
+                        json(404, { error: "未知的项目资源" });
+                        return;
+                    }
+                    if (request.method !== "POST" && request.method !== "PATCH") {
+                        json(405, { error: "项目接口只支持 GET、POST、PATCH" });
+                        return;
+                    }
+                    if (!projectId && request.method === "POST") {
+                        const project = await service.create({ ...body, workspaceId: requestedWorkspaceId });
+                        broadcaster.broadcastState();
+                        json(201, { project });
+                        return;
+                    }
+                    if (!projectId) {
+                        json(400, { error: "缺少项目 id" });
+                        return;
+                    }
+                    const workspaceId = requestedWorkspaceId;
+                    if (!workspaceId) {
+                        json(400, { error: "workspaceId 不能为空" });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "start") {
+                        const project = await service.start(projectId, workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { project });
+                        return;
+                    }
+                    if (request.method === "PATCH" && subresource === "budget") {
+                        const project = await service.updateBudget(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { project });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "tasks" && parts[2] && parts[3] === "dispatch") {
+                        const task = await service.dispatchTask(projectId, parts[2], workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { task });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "tasks" && parts[2] && parts[3] === "review") {
+                        const task = await service.requestReview(projectId, parts[2], workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { task });
+                        return;
+                    }
+                    if (request.method === "PATCH" && !subresource) {
+                        const project = await service.updateStatus(projectId, body.status, workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { project });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "tasks") {
+                        const task = await service.addTask(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(201, { task });
+                        return;
+                    }
+                    if (request.method === "PATCH" && subresource === "tasks" && parts[2]) {
+                        const task = await service.updateTask(projectId, parts[2], { ...body, workspaceId });
+                        broadcaster.broadcastState();
+                        json(200, { task });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "reports") {
+                        const report = await service.addReport(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(201, { report });
+                        return;
+                    }
+                    if (request.method === "POST" && subresource === "escalations") {
+                        const escalation = await service.addEscalation(projectId, body, workspaceId);
+                        broadcaster.broadcastState();
+                        json(201, { escalation });
+                        return;
+                    }
+                    if (request.method === "PATCH" && subresource === "escalations" && parts[2]) {
+                        const escalation = await service.resolveEscalation(projectId, parts[2], body.decision, body.status ?? "resolved", workspaceId);
+                        broadcaster.broadcastState();
+                        json(200, { escalation });
+                        return;
+                    }
+                    json(404, { error: "未知的项目操作" });
+                }
+                catch (error) {
+                    json(400, { error: error instanceof Error ? error.message : "project request failed" });
+                }
+                return;
+            }
             if (url.pathname === "/api/orchestrator") {
                 if (request.method !== "POST" || !isLocalOrPrivateAddress(remote)) {
                     response.writeHead(403, { "content-type": "text/plain; charset=utf-8" }).end("Orchestrator requires a loopback or private network POST");
@@ -1484,6 +1667,10 @@ export function createHttpServer(options) {
                         return;
                     }
                     const action = (body.action || "").trim();
+                    if ((action === "spawn" || action === "dispatch") && context.projectService?.projectForSession?.(callerConversationId)) {
+                        json(403, { error: "项目分工必须使用 project 派发，以遵守资源准入限制" });
+                        return;
+                    }
                     if (action === "spawn") {
                         // Capability auth above proves who is calling. The target workspace is a separate, explicit
                         // choice: a parentConversationId records a tree edge and never selects that target.

package/dist/server/index.js

@@ -26,6 +26,7 @@ import { ConversationService } from "./application/conversation-service.js";
 import { ScheduledTaskService } from "./application/scheduled-task-service.js";
 import { SessionLedger } from "./session-ledger.js";
 import { SessionOrchestratorService } from "./application/session-orchestrator-service.js";
+import { ProjectService } from "./application/project-service.js";
 import { WorkspaceService } from "./application/workspace-service.js";
 import { CommandHandler } from "./command-handler.js";
 import { TerminalService, terminalDisabledReason } from "./terminal.js";
@@ -291,6 +292,7 @@ runService.setExecService(execService);
 const scheduledTaskService = new ScheduledTaskService(store, runService, conversationService, broadcaster);
 const sessionLedger = new SessionLedger();
 const sessionOrchestratorService = new SessionOrchestratorService(store, conversationService, runService, sessionLedger, broadcaster);
+const projectService = new ProjectService(store, sessionOrchestratorService);
 void sessionOrchestratorService.restoreWatchdogs().catch((error) => {
     console.warn("Super Pi: restoring watchdogs failed:", error instanceof Error ? error.message : String(error));
 });
@@ -315,6 +317,7 @@ const serverContext = {
     scheduledTaskService,
     sessionLedger,
     sessionOrchestratorService,
+    projectService,
     execService,
     toolRegistry,
     toolRunner,

package/dist/server/persistence/app-state-repository.d.ts

@@ -10,7 +10,7 @@ export type StateTransaction = {
     run: SubagentRun;
 } | {
     kind: "collections.replace";
-    values: Partial<Pick<AppState, "workflows" | "backgroundTasks" | "scheduledTasks">>;
+    values: Partial<Pick<AppState, "workflows" | "backgroundTasks" | "scheduledTasks" | "projects">>;
 }
 /**
  * Removes one collection row entirely.
@@ -22,7 +22,7 @@ export type StateTransaction = {
  */
  | {
     kind: "collections.remove";
-    name: "workflows" | "backgroundTasks" | "scheduledTasks";
+    name: "workflows" | "backgroundTasks" | "scheduledTasks" | "projects";
 } | {
     kind: "conversation.metadata";
     conversationId: string;

package/dist/server/runtime.js

@@ -24,7 +24,7 @@ import { LengthExceededError } from "./turn-failure.js";
 // paths recognise a delivery identically. Re-exported because they were part of this module's surface.
 export { describeDeliveredUserMessage, describePiQueue } from "./pi-session-events.js";
 import { createPiSession, createSdkCatalog, piSdkAvailable, resolveTranscriptFile, superPiExtensionPaths } from "./pi-session.js";
-import { TASK_CONVERSATION_ENV, PARENT_CONVERSATION_ENV, TASK_DEPTH_ENV, TASK_ENDPOINT_ENV, TASK_EXEC_ENDPOINT_ENV, TASK_ROSTER_ENV, TASK_TOOL_NAME, TODO_ENDPOINT_ENV, TODO_TOOL_NAME, SCHEDULED_TASK_ENDPOINT_ENV, SCHEDULED_TASK_TOOL_NAME, WORKFLOW_ENDPOINT_ENV, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, ORCHESTRATOR_ENDPOINT_ENV, ORCHESTRATOR_WORKSPACE_ENV, SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME, rosterPayload, } from "./task-tool.js";
+import { TASK_CONVERSATION_ENV, PARENT_CONVERSATION_ENV, TASK_DEPTH_ENV, TASK_ENDPOINT_ENV, TASK_EXEC_ENDPOINT_ENV, TASK_ROSTER_ENV, TASK_TOOL_NAME, TODO_ENDPOINT_ENV, TODO_TOOL_NAME, PROJECT_TOOL_NAME, PROJECT_ENDPOINT_ENV, SCHEDULED_TASK_ENDPOINT_ENV, SCHEDULED_TASK_TOOL_NAME, WORKFLOW_ENDPOINT_ENV, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, ORCHESTRATOR_ENDPOINT_ENV, ORCHESTRATOR_WORKSPACE_ENV, SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME, rosterPayload, } from "./task-tool.js";
 import { BLOCKING_UI_METHODS, EXTENSION_UI_METHODS, } from "./types.js";
 import { loadConversationImages } from "./upload.js";
 import { describeToolCall, describeToolCallArgs, describeToolCallInProgress, extractPartialResultText, extractToolResultText, readQuestionCall } from "./tool-calls.js";
@@ -711,6 +711,7 @@ export class PiRpcRuntime {
             [PARENT_CONVERSATION_ENV]: parentConversationId ?? "",
             [TASK_DEPTH_ENV]: "0",
             [TODO_ENDPOINT_ENV]: this.options.todoEndpoint ?? "",
+            [PROJECT_ENDPOINT_ENV]: this.options.orchestratorEndpoint?.replace(/\/api\/orchestrator$/, "/api/projects/tool") ?? "",
             [SCHEDULED_TASK_ENDPOINT_ENV]: this.options.scheduledTaskEndpoint ?? "",
             [WORKFLOW_ENDPOINT_ENV]: this.options.workflowEndpoint ?? "",
             [ORCHESTRATOR_ENDPOINT_ENV]: this.options.orchestratorEndpoint ?? "",
@@ -1259,6 +1260,8 @@ export class PiRpcRuntime {
         // loaded-but-undeclared tool - broken with no error to explain it.
         if (process.env.SUPER_PI_FEISHU_ENDPOINT)
             names.push(FEISHU_READ_TOOL_NAME, FEISHU_WRITE_TOOL_NAME);
+        if (this.options.orchestratorEndpoint)
+            names.push(PROJECT_TOOL_NAME);
         if (this.options.orchestratorEndpoint)
             names.push(SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME);
         return names;
@@ -1479,7 +1482,7 @@ export class PiRpcRuntime {
         // allowlist and naming a tool Pi has not registered would change the spawn line for every other
         // mode. The prompt asks for a bare JSON array and nothing else; if the model spends a turn on a
         // tool call anyway the reranker times out and falls back to the lexical order.
-        const agentArgs = memoryReview ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates", "--tools", "memory,skill_manage,session_search"] : knowledgeRerank ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates"] : await agentSpawnArgs(this.agents.promptDir, agent, { extraAllowedTools: [...(extensionArgs.length ? [TASK_TOOL_NAME, TODO_TOOL_NAME, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, SCHEDULED_TASK_TOOL_NAME, "question", "tool_register", ...(this.options.orchestratorEndpoint ? [SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME] : [])] : []), ...(memoryEnabled ? ["memory", "skill_manage", "session_search"] : []), ...(knowledgeEnabled ? [KNOWLEDGE_TOOL_NAME, KNOWLEDGE_IMPORT_TOOL_NAME] : []), ...(documentsEnabled ? [DOCUMENT_READ_TOOL_NAME, DOCUMENT_WRITE_TOOL_NAME] : []), ...(webEnabled ? [WEB_SEARCH_TOOL_NAME, WEB_FETCH_TOOL_NAME] : []), ...(feishuEnabled ? [FEISHU_READ_TOOL_NAME, FEISHU_WRITE_TOOL_NAME] : [])] });
+        const agentArgs = memoryReview ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates", "--tools", "memory,skill_manage,session_search"] : knowledgeRerank ? ["--no-extensions", "--no-skills", "--no-mcp", "--no-context-files", "--no-prompt-templates"] : await agentSpawnArgs(this.agents.promptDir, agent, { extraAllowedTools: [...(extensionArgs.length ? [TASK_TOOL_NAME, TODO_TOOL_NAME, PROJECT_TOOL_NAME, WORKFLOW_TOOL_NAME, RUN_ASYNC_TOOL_NAME, SCHEDULED_TASK_TOOL_NAME, "question", "tool_register", ...(this.options.orchestratorEndpoint ? [SESSION_SPAWN_TOOL_NAME, SESSION_STATUS_TOOL_NAME, SESSION_DISPATCH_TOOL_NAME, SESSION_STOP_TOOL_NAME, SESSION_REPORT_TOOL_NAME, SESSION_STOP_SUBTREE_TOOL_NAME] : [])] : []), ...(memoryEnabled ? ["memory", "skill_manage", "session_search"] : []), ...(knowledgeEnabled ? [KNOWLEDGE_TOOL_NAME, KNOWLEDGE_IMPORT_TOOL_NAME] : []), ...(documentsEnabled ? [DOCUMENT_READ_TOOL_NAME, DOCUMENT_WRITE_TOOL_NAME] : []), ...(webEnabled ? [WEB_SEARCH_TOOL_NAME, WEB_FETCH_TOOL_NAME] : []), ...(feishuEnabled ? [FEISHU_READ_TOOL_NAME, FEISHU_WRITE_TOOL_NAME] : [])] });
         // Refused here, with the reason, rather than handed to the spawn: an ENOENT from `spawn` reads as
         // "the app is broken" and hides the one fact that matters, which is where it looked for Pi.
         if (!this.pi.found)

package/dist/server/server-context.d.ts

@@ -73,6 +73,7 @@ export interface ServerContext {
     scheduledTaskService?: import("./application/scheduled-task-service.js").ScheduledTaskService;
     sessionLedger?: import("./session-ledger.js").SessionLedger;
     sessionOrchestratorService?: import("./application/session-orchestrator-service.js").SessionOrchestratorService;
+    projectService?: import("./application/project-service.js").ProjectService;
     execService: ExecService;
     toolRegistry: ToolRegistry;
     toolRunner: ToolRunner;

package/dist/server/store.d.ts

@@ -2,7 +2,7 @@ import type { AppStateRepository } from "./persistence/app-state-repository.js";
 import { defaultJsonStatePath } from "./persistence/json-state-repository.js";
 import type { ScheduledTask } from "./scheduled-tasks.js";
 import type { WorkflowRun } from "./workflow.js";
-import type { AppState, Conversation, Message, MessageDelivery, MessageImage, ModelSelection, SubagentRun, SubagentRunUpdate, TodoItem, ToolCallQuestion, ToolCallArg, ToolCallBlock, ToolResultSummary, Workspace } from "./types.js";
+import type { AppState, Conversation, Message, MessageDelivery, MessageImage, ModelSelection, Project, SubagentRun, SubagentRunUpdate, TodoItem, ToolCallQuestion, ToolCallArg, ToolCallBlock, ToolResultSummary, Workspace } from "./types.js";
 import type { TurnUsageReadout } from "./conversation-usage.js";
 /** Mints the id a forked conversation will have, BEFORE its Pi transcript exists.
  *
@@ -145,6 +145,10 @@ export declare class Store {
      * `nextRunAt` and then hands the whole task back to the store, which owns the real one.
      */
     scheduledTasks(): ScheduledTask[];
+    projects(): Project[];
+    project(projectId: string): Project | undefined;
+    setProject(project: Project): Promise<Project>;
+    removeProject(projectId: string): Promise<void>;
     /** Small detached rows used when refreshing each conversation's scoped model catalog. */
     catalogConversationTargets(): Array<Pick<Conversation, "id" | "archivedAt" | "model">>;
     /** Clone only one workspace's transcripts, never unrelated workspaces or app state. */

package/dist/server/store.js

@@ -612,7 +612,8 @@ export class Store {
             // un-normalised shape rather than the one the store is actually running on.
             const defaulted = ["workspaces", "conversations", "subagentRuns"].filter((key) => !Array.isArray(state[key])).length > 0
                 || !Array.isArray(state.backgroundTasks)
-                || (state.scheduledTasks !== undefined && !Array.isArray(state.scheduledTasks));
+                || (state.scheduledTasks !== undefined && !Array.isArray(state.scheduledTasks))
+                || (state.projects !== undefined && !Array.isArray(state.projects));
             if (!Array.isArray(state.backgroundTasks))
                 state.backgroundTasks = [];
             // A scheduled-task list that is not a list is not a list of tasks. The key is dropped rather than
@@ -620,6 +621,8 @@ export class Store {
             // fresh install reads - instead of crashing the panel on every poll.
             if (state.scheduledTasks !== undefined && !Array.isArray(state.scheduledTasks))
                 delete state.scheduledTasks;
+            if (state.projects !== undefined && !Array.isArray(state.projects))
+                delete state.projects;
             // Every sweep runs before the store is constructed, so a single persist below publishes them together.
             // Reconciling them in separate writes would put a file on disk in which one kind of orphan was fixed
             // and the other was not - a half-repaired state that still needs a second restart to finish.
@@ -767,6 +770,28 @@ export class Store {
     scheduledTasks() {
         return this.state.scheduledTasks ? [...this.state.scheduledTasks] : [];
     }
+    projects() { return structuredClone(this.state.projects ?? []); }
+    project(projectId) { const project = this.state.projects?.find((item) => item.id === projectId); return project ? structuredClone(project) : undefined; }
+    async setProject(project) {
+        if (!this.state.projects)
+            this.state.projects = [];
+        const stored = structuredClone(project);
+        const index = this.state.projects.findIndex((item) => item.id === stored.id);
+        if (index < 0)
+            this.state.projects.unshift(stored);
+        else
+            this.state.projects[index] = stored;
+        await this.persistCollections("projects");
+        return structuredClone(stored);
+    }
+    async removeProject(projectId) {
+        if (!this.state.projects)
+            return;
+        this.state.projects = this.state.projects.filter((item) => item.id !== projectId);
+        if (!this.state.projects.length)
+            delete this.state.projects;
+        await this.persistCollections("projects");
+    }
     /** Small detached rows used when refreshing each conversation's scoped model catalog. */
     catalogConversationTargets() {
         return this.state.conversations.map(({ id, archivedAt, model }) => ({
@@ -1030,13 +1055,14 @@ export class Store {
      * sidebar renders `state.workspaces` and never has to know that a closed workspace exists.
      */
     clientState(scope) {
+        const { projects: _projects, ...publicState } = this.state;
         const closed = new Set(this.state.workspaces.filter((item) => item.closedAt).map((item) => item.id));
         const workspaces = this.state.workspaces.filter((item) => !closed.has(item.id));
         const visible = this.state.conversations.filter((item) => !closed.has(item.workspaceId));
         // Legacy sockets still receive complete visible transcripts. Project before cloning so a closed
         // workspace's retained history is never copied just to discard it afterwards.
         if (scope === undefined)
-            return structuredClone({ ...this.state, workspaces, conversations: visible, serverTimeZone: serverTimeZone() });
+            return structuredClone({ ...publicState, workspaces, conversations: visible, serverTimeZone: serverTimeZone() });
         // A focused socket keeps every sidebar row, but owns only the selected transcript. An empty scope
         // deliberately loads none; a missing/closed selection must not expose retained workspace history.
         const selectedId = visible.find((item) => item.id === scope.conversationId)?.id;
@@ -1047,7 +1073,7 @@ export class Store {
             hasPendingQuestion: messages.some((message) => message.toolCalls?.some((call) => call.question?.status === "pending")),
         }));
         return structuredClone({
-            ...this.state,
+            ...publicState,
             workspaces,
             conversations,
             // THE CLOCK THE SERVER SCHEDULES BY, NAMED. The scheduled-task panel renders 「每天 09:00」 and

package/dist/server/task-tool.d.ts

@@ -162,6 +162,8 @@ export declare function parentDeniedTools(parent: AgentDefinition | undefined):
  * `todowrite` and not `todo`, and there is nothing to gain from renaming a tool whose description has
  * already been written to explain that name.
  */
+export declare const PROJECT_TOOL_NAME = "project";
+export declare const PROJECT_ENDPOINT_ENV = "SUPER_PI_PROJECT_ENDPOINT";
 export declare const TODO_TOOL_NAME = "todowrite";
 /**
  * The endpoint the `todowrite` extension dials. A FIFTH name in the same wire as the four above, written

package/dist/server/task-tool.js

@@ -219,6 +219,8 @@ export function parentDeniedTools(parent) {
  * `todowrite` and not `todo`, and there is nothing to gain from renaming a tool whose description has
  * already been written to explain that name.
  */
+export const PROJECT_TOOL_NAME = "project";
+export const PROJECT_ENDPOINT_ENV = "SUPER_PI_PROJECT_ENDPOINT";
 export const TODO_TOOL_NAME = "todowrite";
 /**
  * The endpoint the `todowrite` extension dials. A FIFTH name in the same wire as the four above, written

package/dist/server/types.d.ts

@@ -898,6 +898,108 @@ export type TerminalShell = {
     file: string;
     args: string[];
 };
+export type ProjectStatus = "planning" | "active" | "blocked" | "awaiting_approval" | "awaiting_review" | "completed" | "failed" | "cancelled";
+export type ProjectTaskStatus = "pending" | "ready" | "in_progress" | "blocked" | "awaiting_review" | "completed" | "failed" | "cancelled";
+export type ProjectRisk = "low" | "medium" | "high";
+export type ProjectTask = {
+    parentTaskId?: string;
+    role?: "leader" | "executor";
+    id: string;
+    projectId: string;
+    title: string;
+    objective: string;
+    status: ProjectTaskStatus;
+    ownerConversationId?: string;
+    accountableConversationId?: string;
+    reviewerConversationId?: string;
+    dependencies: string[];
+    deliverables: string[];
+    acceptanceCriteria: string[];
+    priority: "low" | "medium" | "high" | "urgent";
+    dueAt?: string;
+    blockedReason?: string;
+    output?: string;
+    evidenceRefs?: string[];
+    review?: {
+        verdict: "accepted" | "changes_requested";
+        summary: string;
+        evidenceRefs: string[];
+        reviewerConversationId?: string;
+        createdAt: string;
+    };
+    createdAt: string;
+    updatedAt: string;
+};
+export type ProjectReport = {
+    id: string;
+    projectId: string;
+    taskId?: string;
+    authorConversationId?: string;
+    kind: "progress" | "blocked" | "delivery" | "decision_request" | "review";
+    progress: string;
+    variance?: string;
+    nextStep?: string;
+    risks?: string[];
+    decisionNeeded?: string;
+    evidenceRefs?: string[];
+    createdAt: string;
+};
+export type ProjectEscalation = {
+    id: string;
+    projectId: string;
+    taskId?: string;
+    reason: string;
+    severity: ProjectRisk;
+    status: "open" | "resolved" | "dismissed";
+    requestedByConversationId?: string;
+    decision?: string;
+    createdAt: string;
+    resolvedAt?: string;
+};
+export type ProjectEvent = {
+    id: string;
+    kind: string;
+    summary: string;
+    taskId?: string;
+    actorConversationId?: string;
+    createdAt: string;
+};
+export type Project = {
+    id: string;
+    workspaceId: string;
+    title: string;
+    objective: string;
+    deliverables: string[];
+    acceptanceCriteria: string[];
+    constraints: string[];
+    risk: ProjectRisk;
+    status: ProjectStatus;
+    ownerConversationId?: string;
+    budget?: {
+        maxTokens?: number;
+        maxConcurrent?: number;
+    };
+    events?: ProjectEvent[];
+    resources?: {
+        tokens: number;
+        usageKnown: boolean;
+        activeWorkers: number;
+        sessions: {
+            id: string;
+            title: string;
+            role: string;
+            status: RunStatus;
+            tokens: number;
+            contextPercent?: number | null;
+        }[];
+    };
+    tasks: ProjectTask[];
+    reports: ProjectReport[];
+    escalations: ProjectEscalation[];
+    createdAt: string;
+    updatedAt: string;
+    closedAt?: string;
+};
 export type AppState = {
     modelFilterRules?: ModelFilterRule[];
     defaultModel?: ModelSelection;
@@ -909,6 +1011,7 @@ export type AppState = {
     todosByConversation?: Record<string, TodoItem[]>;
     workflows?: WorkflowRun[];
     scheduledTasks?: ScheduledTask[];
+    projects?: Project[];
     customAgentDirs?: string[]; /**
      * Which conversations the reader has collapsed in the sidebar's session tree, by conversation id.
      * Server-side so the tree looks the same after a restart and on another machine - the sidebar is a

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@evandu/super-pi",
-  "version": "0.1.153",
+  "version": "0.1.154",
   "description": "Web control plane and companion for Pi",
   "license": "MIT",
   "type": "module",
@@ -83,6 +83,8 @@
     "scripts/session-result-callback.test.mjs",
     "scripts/session-result-callback-e2e.test.mjs",
     "scripts/session-orchestrator-tools.test.mjs",
+    "scripts/project-service.test.mjs",
+    "scripts/project-api-scope.test.mjs",
     "scripts/session-tree-collapse.test.mjs",
     "scripts/archive-cascade.test.mjs",
     "scripts/workspace-cwd.test.mjs",