@geminixiang/mikan 1.0.0-beta.3 → 1.0.0-beta.30

package/dist/web/admin/portal.js

@@ -1,13 +1,16 @@
-import { existsSync, readdirSync, readFileSync, rmSync, statSync } from "fs";
+import { existsSync, readdirSync, readFileSync, statSync } from "fs";
 import { basename, join, resolve as pathResolve, sep as pathSep } from "path";
-import { MikanModels, SessionStore } from "../../harness/index.js";
-import { loadConversationAutoReplyConfig, loadGlobalSettings, resolveConversationSettings, saveConversationAutoReplyConfig, updateConversationSettings, updateGlobalSettings, } from "../../config.js";
+import { MikanModels, parseFrontmatter, SessionStore } from "../../harness/index.js";
+import { loadConversationAutoReplyConfig, loadGlobalSettings, resolveConversationSettings, saveConversationAutoReplyConfig, } from "../../config.js";
+import { applyConversationSettings, applyGlobalSettings } from "../../settings-mutation.js";
+import { effectiveStateDir } from "../../cli/arg-grammar.js";
+import { addPackage, inspectConversationPackages, refreshPackage, removePackage, } from "../../packages/index.js";
 import { escapeHtml } from "../../utils/html.js";
 import { readRawBody } from "../../utils/http-body.js";
-import { renderPortalShell } from "../../portal-shell.js";
+import { renderPortalShell } from "../portal-shell.js";
 import { resolveExistingSessionFile } from "../session-view/service.js";
 import { PRODUCT_NAME } from "../../platform-messages.js";
-import { resolveActorVaultKey } from "../../vault/routing.js";
+import { credentialAuthorizationKey } from "../../sandbox/identity.js";
 import { sharedVaultKey } from "../../vault/index.js";
 import { modelKey, resolveAdminModelAccessStatuses } from "./provider-models.js";
 // ── Handler ────────────────────────────────────────────────────────────────────
@@ -87,8 +90,12 @@ async function routeApiRequest(req, res, url, services) {
             serveSkillFile(res, url, services, token);
             return;
         }
+        if (url.pathname === "/admin/api/packages") {
+            await servePackagesList(res, url, services, token);
+            return;
+        }
         if (url.pathname === "/admin/api/events") {
-            serveEventsList(res, services);
+            await serveEventsList(res, services);
             return;
         }
         if (url.pathname === "/admin/api/events/file") {
@@ -96,7 +103,7 @@ async function routeApiRequest(req, res, url, services) {
             return;
         }
         if (url.pathname === "/admin/api/conversations/events") {
-            serveConversationEventsList(res, url, services, token);
+            await serveConversationEventsList(res, url, services, token);
             return;
         }
         jsonRes(res, 404, { error: "Not found" });
@@ -140,19 +147,23 @@ async function routeApiRequest(req, res, url, services) {
         return;
     }
     if (url.pathname === "/admin/api/conversations/events/delete") {
-        serveConversationEventDelete(res, body, services, token);
+        await serveConversationEventDelete(res, body, services, token);
+        return;
+    }
+    if (url.pathname === "/admin/api/packages/mutate") {
+        servePackageMutation(res, body, services, token);
         return;
     }
     if (url.pathname === "/admin/api/settings/model") {
-        serveGlobalModelUpdate(res, body);
+        serveGlobalModelUpdate(res, body, services);
         return;
     }
     if (url.pathname === "/admin/api/settings/sandbox") {
-        serveGlobalSandboxUpdate(res, body);
+        serveGlobalSandboxUpdate(res, body, services);
         return;
     }
     if (url.pathname === "/admin/api/settings/slack") {
-        serveGlobalSlackUpdate(res, body);
+        serveGlobalSlackUpdate(res, body, services);
         return;
     }
     jsonRes(res, 404, { error: "Not found" });
@@ -193,7 +204,7 @@ const SETTINGS_FILES = new Set(["settings.json", "auto-reply", "auto-reply.disab
 function listConversationDirs(workingDir) {
     if (!existsSync(workingDir))
         return [];
-    const skip = new Set(["vaults", "skills", "events", "node_modules", ".git"]);
+    const skip = new Set(["vaults", "skills", "events", "agents", "node_modules", ".git"]);
     return readdirSync(workingDir, { withFileTypes: true })
         .filter((entry) => entry.isDirectory() && !entry.name.startsWith(".") && !skip.has(entry.name))
         .map((entry) => entry.name)
@@ -465,8 +476,8 @@ function serveConversationState(res, url, services, token) {
         globalProvider: globalConfig.provider,
         globalModel: globalConfig.model,
         globalThinkingLevel: globalConfig.thinkingLevel,
-        sandboxImageWorkspaceMount: conversationConfig.sandboxImageWorkspaceMount ?? null,
-        globalSandboxImageWorkspaceMount: globalConfig.sandboxImageWorkspaceMount ?? null,
+        sandboxImageWorkspaceMount: conversationConfig.sandbox?.image?.workspaceMount ?? null,
+        globalSandboxImageWorkspaceMount: globalConfig.sandbox?.image?.workspaceMount ?? null,
         autoReplyEnabled: autoReply.enabled,
         autoReplyRules: autoReply.rules,
         slack: {
@@ -482,12 +493,12 @@ function serveGlobalSettings(res) {
             provider: config.provider,
             model: config.model,
             thinkingLevel: config.thinkingLevel,
-            sandboxCpus: config.sandboxCpus ?? null,
-            sandboxMemory: config.sandboxMemory ?? null,
-            sandboxBoostCpus: config.sandboxBoostCpus ?? null,
-            sandboxBoostMemory: config.sandboxBoostMemory ?? null,
-            sandboxImageWorkspaceMount: config.sandboxImageWorkspaceMount ?? null,
-            defaultSharedVault: config.defaultSharedVault ?? null,
+            sandboxCpus: config.sandbox?.cpus ?? null,
+            sandboxMemory: config.sandbox?.memory ?? null,
+            sandboxBoostCpus: config.sandbox?.boost?.cpus ?? null,
+            sandboxBoostMemory: config.sandbox?.boost?.memory ?? null,
+            sandboxImageWorkspaceMount: config.sandbox?.image?.workspaceMount ?? null,
+            defaultSharedVault: config.sandbox?.defaultSharedVault ?? null,
             slack: {
                 replyMode: config.slack?.replyMode ?? "top-level",
             },
@@ -518,7 +529,7 @@ async function serveModelsList(res) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-const VALID_THINKING_LEVELS = new Set(["off", "minimal", "low", "medium", "high", "xhigh"]);
+const VALID_THINKING_LEVELS = new Set(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
 function serveConversationModelUpdate(res, body, services, token) {
     const provider = typeof body.provider === "string" ? body.provider.trim() : "";
     const model = typeof body.model === "string" ? body.model.trim() : "";
@@ -537,18 +548,19 @@ function serveConversationModelUpdate(res, body, services, token) {
     const workingDir = requireAdminWorkingDir(res, services);
     if (!workingDir)
         return;
-    const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, {
+        const result = applyConversationSettings(services.runtime, workingDir, scope.conversationId, {
             provider,
             model,
             ...(thinkingLevel ? { thinkingLevel } : {}),
         });
-        let runtimeSwitched = null;
-        if (services.runtime) {
-            runtimeSwitched = services.runtime.switchConversationModel(scope.conversationId, provider, model);
+        if (!result.ok) {
+            jsonRes(res, 409, {
+                error: "Conversation has a running job; retry after it finishes (or /stop it).",
+            });
+            return;
         }
-        jsonRes(res, 200, { ok: true, runtimeSwitched });
+        jsonRes(res, 200, { ok: true, runtimeSwitched: result.runtimeSwitched });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
@@ -568,9 +580,10 @@ function serveConversationSandboxUpdate(res, body, services, token) {
     const workingDir = requireAdminWorkingDir(res, services);
     if (!workingDir)
         return;
-    const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, { sandboxImageWorkspaceMount: workspaceMount });
+        applyConversationSettings(services.runtime, workingDir, scope.conversationId, {
+            sandbox: { image: { workspaceMount } },
+        });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -591,9 +604,10 @@ function serveConversationSlackUpdate(res, body, services, token) {
     const workingDir = requireAdminWorkingDir(res, services);
     if (!workingDir)
         return;
-    const dir = join(workingDir, scope.conversationId);
     try {
-        updateConversationSettings(dir, { slack: { replyMode } });
+        applyConversationSettings(services.runtime, workingDir, scope.conversationId, {
+            slack: { replyMode },
+        });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -688,7 +702,10 @@ function serveConversationLoginLink(res, body, services, token) {
     }
     else {
         try {
-            vaultId = resolveActorVaultKey(services.sandbox, token.platformUserId, scope.conversationId);
+            vaultId = credentialAuthorizationKey(services.sandbox, {
+                userId: token.platformUserId,
+                conversationId: scope.conversationId,
+            });
         }
         catch (err) {
             jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
@@ -704,7 +721,7 @@ function serveConversationLoginLink(res, body, services, token) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-function serveGlobalModelUpdate(res, body) {
+function serveGlobalModelUpdate(res, body, services) {
     const provider = typeof body.provider === "string" ? body.provider.trim() : "";
     const model = typeof body.model === "string" ? body.model.trim() : "";
     const thinkingLevel = typeof body.thinkingLevel === "string" && VALID_THINKING_LEVELS.has(body.thinkingLevel)
@@ -715,55 +732,57 @@ function serveGlobalModelUpdate(res, body) {
         return;
     }
     try {
-        updateGlobalSettings({
+        const result = applyGlobalSettings(services.runtime, {
             provider,
             model,
             ...(thinkingLevel ? { thinkingLevel } : {}),
         });
-        jsonRes(res, 200, { ok: true });
+        jsonRes(res, 200, { ok: true, staleConversations: result.staleConversations });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-function serveGlobalSlackUpdate(res, body) {
+function serveGlobalSlackUpdate(res, body, services) {
     const replyMode = body.replyMode;
     if (replyMode !== "top-level" && replyMode !== "thread") {
         jsonRes(res, 400, { error: "replyMode must be 'top-level' or 'thread'" });
         return;
     }
     try {
-        updateGlobalSettings({ slack: { replyMode } });
+        applyGlobalSettings(services.runtime, { slack: { replyMode } });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
         jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
     }
 }
-function serveGlobalSandboxUpdate(res, body) {
+function serveGlobalSandboxUpdate(res, body, services) {
     const cpus = typeof body.cpus === "string" ? body.cpus.trim() : "";
     const memory = typeof body.memory === "string" ? body.memory.trim() : "";
     const boostCpus = typeof body.boostCpus === "string" ? body.boostCpus.trim() : "";
     const boostMemory = typeof body.boostMemory === "string" ? body.boostMemory.trim() : "";
     const workspaceMount = body.workspaceMount;
     const validMount = workspaceMount === "private" || workspaceMount === "full";
-    const update = {};
-    if (cpus)
-        update.sandboxCpus = cpus;
-    if (memory)
-        update.sandboxMemory = memory;
-    if (boostCpus)
-        update.sandboxBoostCpus = boostCpus;
-    if (boostMemory)
-        update.sandboxBoostMemory = boostMemory;
-    if (validMount)
-        update.sandboxImageWorkspaceMount = workspaceMount;
+    const update = {
+        ...(cpus ? { cpus } : {}),
+        ...(memory ? { memory } : {}),
+        ...(boostCpus || boostMemory
+            ? {
+                boost: {
+                    ...(boostCpus ? { cpus: boostCpus } : {}),
+                    ...(boostMemory ? { memory: boostMemory } : {}),
+                },
+            }
+            : {}),
+        ...(validMount ? { image: { workspaceMount: workspaceMount } } : {}),
+    };
     if (Object.keys(update).length === 0) {
         jsonRes(res, 400, { error: "No valid sandbox fields provided" });
         return;
     }
     try {
-        updateGlobalSettings(update);
+        applyGlobalSettings(services.runtime, { sandbox: update });
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -994,7 +1013,12 @@ function serveWorkspaceFile(res, url, services, token) {
     }
     servePreviewFile(res, safe.absolute, { path: requestedPath }, "File not found");
 }
-function parseSkillFrontmatter(filePath) {
+/**
+ * Read skill metadata via the harness frontmatter parser (the owning module).
+ * The portal historically accepted frontmatter keys case-insensitively, so
+ * the lookup — not the parser — preserves that leniency.
+ */
+function readSkillMeta(filePath) {
     let text;
     try {
         text = readFileSync(filePath, "utf-8");
@@ -1002,31 +1026,18 @@ function parseSkillFrontmatter(filePath) {
     catch {
         return {};
     }
-    if (!text.startsWith("---"))
-        return {};
-    const end = text.indexOf("\n---", 3);
-    if (end < 0)
-        return {};
-    const block = text.slice(3, end);
+    const { values } = parseFrontmatter(text);
     const out = {};
-    for (const line of block.split("\n")) {
-        const colon = line.indexOf(":");
-        if (colon < 0)
-            continue;
-        const key = line.slice(0, colon).trim().toLowerCase();
-        let value = line.slice(colon + 1).trim();
-        if ((value.startsWith('"') && value.endsWith('"')) ||
-            (value.startsWith("'") && value.endsWith("'"))) {
-            value = value.slice(1, -1);
-        }
-        if (key === "name")
+    for (const [key, value] of Object.entries(values)) {
+        const normalized = key.toLowerCase();
+        if (normalized === "name")
             out.name = value;
-        if (key === "description")
+        if (normalized === "description")
             out.description = value;
     }
     return out;
 }
-function readSkillsFromDir(skillsDir, source) {
+export function readSkillsFromDir(skillsDir, source) {
     if (!existsSync(skillsDir))
         return [];
     const out = [];
@@ -1043,7 +1054,7 @@ function readSkillsFromDir(skillsDir, source) {
         const skillMd = join(skillsDir, entry.name, "SKILL.md");
         if (!existsSync(skillMd))
             continue;
-        const meta = parseSkillFrontmatter(skillMd);
+        const meta = readSkillMeta(skillMd);
         out.push({
             name: meta.name ?? entry.name,
             description: meta.description ?? "",
@@ -1054,6 +1065,80 @@ function readSkillsFromDir(skillsDir, source) {
     }
     return out.toSorted((a, b) => a.name.localeCompare(b.name));
 }
+/** Inventory of both scopes' declared packages for the selected conversation. */
+async function servePackagesList(res, url, services, token) {
+    const scope = resolveConversationFromQuery(url, token);
+    if (scope.error) {
+        jsonRes(res, 403, { error: scope.error });
+        return;
+    }
+    const workingDir = requireAdminWorkingDir(res, services);
+    if (!workingDir)
+        return;
+    try {
+        const inventory = await inspectConversationPackages({
+            conversationId: scope.conversationId,
+            stateDir: effectiveStateDir(),
+            conversationDir: join(workingDir, scope.conversationId),
+        });
+        jsonRes(res, 200, { conversationId: scope.conversationId, ...inventory });
+    }
+    catch (err) {
+        jsonRes(res, 500, { error: err instanceof Error ? err.message : String(err) });
+    }
+}
+/**
+ * Add / remove / refresh, in one route because they share validation and all
+ * three answer with the freshly re-read inventory: the panel never has to
+ * guess what the write did.
+ */
+function servePackageMutation(res, body, services, token) {
+    const action = body.action;
+    if (action !== "add" && action !== "remove" && action !== "refresh") {
+        jsonRes(res, 400, { error: "action must be 'add', 'remove', or 'refresh'" });
+        return;
+    }
+    const packageScope = body.scope === "global" ? "global" : "conversation";
+    const source = typeof body.source === "string" ? body.source.trim() : "";
+    if (!source) {
+        jsonRes(res, 400, { error: "source is required" });
+        return;
+    }
+    const scope = resolveTargetConversation(body, token);
+    if (scope.error) {
+        jsonRes(res, 403, { error: scope.error });
+        return;
+    }
+    const workingDir = requireAdminWorkingDir(res, services);
+    if (!workingDir)
+        return;
+    const context = {
+        conversationId: scope.conversationId,
+        stateDir: effectiveStateDir(),
+        conversationDir: join(workingDir, scope.conversationId),
+        workingDir,
+        runtime: services.runtime,
+    };
+    try {
+        if (action === "add") {
+            const result = addPackage(packageScope, source, context);
+            jsonRes(res, 200, { ok: true, source: result.source, dir: result.dir });
+            return;
+        }
+        if (action === "refresh") {
+            const result = refreshPackage(packageScope, source, context);
+            jsonRes(res, 200, { ok: true, source: result.source, dir: result.dir });
+            return;
+        }
+        const removed = removePackage(packageScope, source, context);
+        jsonRes(res, removed ? 200 : 404, removed ? { ok: true } : { error: "Not declared here." });
+    }
+    catch (err) {
+        // Fetch/validation failures are the admin's problem to fix, not a server
+        // fault: report them as a bad request with git's own message.
+        jsonRes(res, 400, { error: err instanceof Error ? err.message : String(err) });
+    }
+}
 function serveSkillsList(res, url, services, token) {
     const scope = resolveConversationFromQuery(url, token);
     if (scope.error) {
@@ -1104,75 +1189,53 @@ function serveSkillFile(res, url, services, token) {
 }
 // ── Events ─────────────────────────────────────────────────────────────────────
 const EVENTS_FILE_MAX_BYTES = 64 * 1024;
-function listAllEvents(workingDir) {
-    const dir = join(workingDir, "events");
-    if (!existsSync(dir))
-        return [];
-    let entries;
-    try {
-        entries = readdirSync(dir, { withFileTypes: true });
-    }
-    catch {
-        return [];
-    }
-    return entries
-        .filter((e) => e.isFile() && e.name.endsWith(".json"))
-        .map((e) => {
-        const filePath = join(dir, e.name);
-        let stats;
-        try {
-            stats = statSync(filePath);
-        }
-        catch {
-            return null;
-        }
-        let parsed = null;
-        try {
-            parsed = JSON.parse(readFileSync(filePath, "utf-8"));
-        }
-        catch {
-            // Keep entry; just omit parsed fields.
-        }
-        const meta = parsed && typeof parsed === "object" ? parsed : {};
-        // events.ts accepts `channelId` as a legacy alias for `conversationId`.
-        const conversationId = typeof meta.conversationId === "string"
-            ? meta.conversationId
-            : typeof meta.channelId === "string"
-                ? meta.channelId
-                : null;
+/**
+ * List events through the owning store, whose payloads are validated by the
+ * event-format module (files that fail validation stay visible with a null
+ * payload so operators can delete them).
+ */
+export async function listAllEvents(store) {
+    const entries = await store.list();
+    return entries.map((entry) => {
+        const payload = entry.payload;
         return {
-            name: e.name,
-            size: stats.size,
-            mtimeMs: stats.mtimeMs,
-            type: typeof meta.type === "string" ? meta.type : null,
-            platform: typeof meta.platform === "string" ? meta.platform : null,
-            conversationId,
-            text: typeof meta.text === "string" ? meta.text : null,
-            at: typeof meta.at === "string" ? meta.at : null,
-            schedule: typeof meta.schedule === "string" ? meta.schedule : null,
-            timezone: typeof meta.timezone === "string" ? meta.timezone : null,
+            name: entry.filename,
+            size: entry.size,
+            mtimeMs: entry.mtimeMs,
+            type: payload?.type ?? null,
+            platform: payload?.platform ?? null,
+            conversationId: payload?.conversationId ?? null,
+            text: payload?.text ?? null,
+            at: payload?.type === "one-shot" ? payload.at : null,
+            schedule: payload?.type === "periodic" ? payload.schedule : null,
+            timezone: payload?.type === "periodic" ? payload.timezone : null,
         };
-    })
-        .filter((e) => e !== null)
-        .toSorted((a, b) => a.name.localeCompare(b.name));
+    });
 }
-function serveEventsList(res, services) {
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+function requireAdminEventStore(res, services) {
+    if (!services.eventStore) {
+        jsonRes(res, 503, { error: "Working directory not available" });
+        return null;
+    }
+    return services.eventStore;
+}
+async function serveEventsList(res, services) {
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    jsonRes(res, 200, { events: listAllEvents(workingDir) });
+    jsonRes(res, 200, { events: await listAllEvents(store) });
 }
 /** Per-conversation listing — filter all events by conversationId match. */
-function serveConversationEventsList(res, url, services, token) {
+async function serveConversationEventsList(res, url, services, token) {
     const scope = resolveConversationFromQuery(url, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    const events = listAllEvents(workingDir).filter((e) => e.conversationId === scope.conversationId);
+    const events = (await listAllEvents(store)).filter((e) => e.conversationId === scope.conversationId);
     jsonRes(res, 200, { conversationId: scope.conversationId, events });
 }
 function serveEventsFile(res, url, services) {
@@ -1212,7 +1275,7 @@ function serveEventsFile(res, url, services) {
     jsonRes(res, 200, { name, content: raw });
 }
 /** Delete a single event file scoped to the caller's conversation. */
-function serveConversationEventDelete(res, body, services, token) {
+async function serveConversationEventDelete(res, body, services, token) {
     const scope = resolveTargetConversation(body, token);
     if (scope.error) {
         jsonRes(res, 403, { error: scope.error });
@@ -1223,38 +1286,24 @@ function serveConversationEventDelete(res, body, services, token) {
         jsonRes(res, 400, { error: "Invalid name" });
         return;
     }
-    const workingDir = requireAdminWorkingDir(res, services);
-    if (!workingDir)
+    const store = requireAdminEventStore(res, services);
+    if (!store)
         return;
-    const filePath = join(workingDir, "events", name);
-    let raw;
+    let payload;
     try {
-        raw = readFileSync(filePath, "utf-8");
+        payload = (await store.read(name)).payload;
     }
     catch {
         jsonRes(res, 404, { error: "Event not found" });
         return;
     }
-    let parsed = {};
-    try {
-        const j = JSON.parse(raw);
-        if (j && typeof j === "object")
-            parsed = j;
-    }
-    catch {
-        // Malformed events cannot be associated with a conversation below.
-    }
-    const eventConvId = typeof parsed.conversationId === "string"
-        ? parsed.conversationId
-        : typeof parsed.channelId === "string"
-            ? parsed.channelId
-            : null;
-    if (eventConvId !== scope.conversationId) {
+    // The store normalizes the legacy `channelId` alias into `conversationId`.
+    if (payload?.conversationId !== scope.conversationId) {
         jsonRes(res, 403, { error: "Event does not belong to this conversation." });
         return;
     }
     try {
-        rmSync(filePath, { force: true });
+        await store.delete(name);
         jsonRes(res, 200, { ok: true });
     }
     catch (err) {
@@ -1330,6 +1379,25 @@ function renderAdminPage(token) {
         </div>
       </section>
 
+      <section class="card sect" id="sect-packages" data-section="packages">
+        <header class="sect-head">
+          <div>
+            <p class="eyebrow">Extensions</p>
+            <h2 class="card-title">此對話的 extension 套件</h2>
+          </div>
+          <button class="refresh-btn" onclick="loadPackages()">↻</button>
+        </header>
+        <div class="pkg-add">
+          <input id="pkg-conv-url" class="pkg-input" type="text" spellcheck="false"
+            placeholder="github:owner/repo 或 https://github.com/owner/repo.git" />
+          <input id="pkg-conv-ref" class="pkg-input pkg-input-ref" type="text" spellcheck="false"
+            placeholder="tag / branch / commit（可留空）" />
+          <button class="primary-action-btn" onclick="addPackage('conversation')">Add</button>
+        </div>
+        <div id="pkg-conv-msg" class="pkg-msg" style="display:none"></div>
+        <div id="pkg-conv-content"><div class="loading-msg">Loading…</div></div>
+      </section>
+
       <section class="card sect" id="sect-vault" data-section="vault">
         <header class="sect-head">
           <div>
@@ -1407,6 +1475,25 @@ function renderAdminPage(token) {
         <div id="global-settings-content"><div class="loading-msg">Loading…</div></div>
       </section>
 
+      <section class="card sect">
+        <header class="sect-head">
+          <div>
+            <p class="eyebrow">Global Extensions</p>
+            <h2 class="card-title">所有對話都會載入的 extension 套件</h2>
+          </div>
+          <button class="refresh-btn" onclick="loadPackages()">↻</button>
+        </header>
+        <div class="pkg-add">
+          <input id="pkg-global-url" class="pkg-input" type="text" spellcheck="false"
+            placeholder="github:owner/repo 或 https://github.com/owner/repo.git" />
+          <input id="pkg-global-ref" class="pkg-input pkg-input-ref" type="text" spellcheck="false"
+            placeholder="tag / branch / commit（可留空）" />
+          <button class="primary-action-btn" onclick="addPackage('global')">Add</button>
+        </div>
+        <div id="pkg-global-msg" class="pkg-msg" style="display:none"></div>
+        <div id="pkg-global-content"><div class="loading-msg">Loading…</div></div>
+      </section>
+
       <section class="card sect">
         <header class="sect-head">
           <div>
@@ -1558,6 +1645,7 @@ function renderAdminPage(token) {
       loadSettings();
       loadWorkspace();
       loadSkills();
+      loadPackages();
       loadConversationEvents();
       openLogin(true);
       openSessionView(true);
@@ -1578,7 +1666,7 @@ function renderAdminPage(token) {
     }
 
     function renderSettings(data) {
-      const thinking = ['off','minimal','low','medium','high','xhigh'];
+      const thinking = ['off','minimal','low','medium','high','xhigh','max'];
       const thinkingOpts = thinking.map((t) =>
         '<option value="' + t + '"' + (data.thinkingLevel === t ? ' selected' : '') + '>' + t + '</option>'
       ).join('');
@@ -1647,9 +1735,7 @@ function renderAdminPage(token) {
           conversationId: activeConversationId, provider, model, thinkingLevel,
         });
         result.style.display = 'block'; result.className = 'inline-result ok';
-        result.textContent = data.runtimeSwitched === false
-          ? 'Saved — running session pinned; new model applies on next start.'
-          : 'Saved ✓';
+        result.textContent = 'Saved ✓';
       } catch (err) {
         result.style.display = 'block'; result.className = 'inline-result err';
         result.textContent = err.message;
@@ -1764,6 +1850,101 @@ function renderAdminPage(token) {
 
     // ── Skills ───────────────────────────────────────────────────────────────────
 
+    function packageMessage(scope, text, kind) {
+      const el = document.getElementById(scope === 'global' ? 'pkg-global-msg' : 'pkg-conv-msg');
+      if (!text) { el.style.display = 'none'; return; }
+      el.className = 'pkg-msg pkg-msg-' + kind;
+      el.textContent = text;
+      el.style.display = 'block';
+    }
+
+    function renderPackageList(container, rows, scope) {
+      if (rows.length === 0) {
+        container.innerHTML = '<div class="empty-state">尚未加入任何套件</div>';
+        return;
+      }
+      container.innerHTML = '<div class="pkg-list">' + rows.map((p) => {
+        const provides = []
+          .concat(p.extensions.map((s) => 'ext: ' + s))
+          .concat(p.skills.map((s) => 'skill: ' + s));
+        const status = p.error
+          ? '<span class="pkg-badge pkg-badge-err">' + escHtml(p.error) + '</span>'
+          : p.shadowed
+            ? '<span class="pkg-badge pkg-badge-warn">被此對話的同名套件覆蓋，不會載入</span>'
+            : '<span class="pkg-badge pkg-badge-ok">ready</span>';
+        return '<div class="pkg-row">' +
+          '<div class="pkg-row-main">' +
+            '<code class="pkg-source">' + escHtml(p.source) + '</code>' + status +
+          '</div>' +
+          (provides.length > 0
+            ? '<div class="pkg-provides">' + provides.map((t) => '<span class="pkg-chip">' + escHtml(t) + '</span>').join('') + '</div>'
+            : '<div class="pkg-provides pkg-provides-empty">此套件沒有提供 extension 或 skill</div>') +
+          '<div class="pkg-actions">' +
+            '<button class="pkg-btn" data-pkg-action="refresh" data-pkg-scope="' + scope + '" data-pkg-source="' + escAttr(p.source) + '">Update</button>' +
+            '<button class="pkg-btn pkg-btn-danger" data-pkg-action="remove" data-pkg-scope="' + scope + '" data-pkg-source="' + escAttr(p.source) + '">Remove</button>' +
+          '</div>' +
+        '</div>';
+      }).join('') + '</div>';
+    }
+
+    async function loadPackages() {
+      const convEl = document.getElementById('pkg-conv-content');
+      const globalEl = document.getElementById('pkg-global-content');
+      if (convEl) convEl.innerHTML = '<div class="loading-msg">Loading…</div>';
+      if (globalEl) globalEl.innerHTML = '<div class="loading-msg">Loading…</div>';
+      try {
+        const data = await apiGet('/admin/api/packages?conversationId=' + encodeURIComponent(activeConversationId));
+        if (convEl) renderPackageList(convEl, data.conversation, 'conversation');
+        if (globalEl) renderPackageList(globalEl, data.global, 'global');
+      } catch (err) {
+        if (convEl) convEl.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
+        if (globalEl) globalEl.innerHTML = '<div class="err-msg">' + escHtml(err.message) + '</div>';
+      }
+    }
+
+    async function mutatePackage(scope, action, source) {
+      packageMessage(scope, action === 'remove' ? '移除中…' : '取得中…', 'busy');
+      try {
+        const result = await apiPost('/admin/api/packages/mutate', {
+          action: action,
+          scope: scope,
+          source: source,
+          conversationId: activeConversationId,
+        });
+        packageMessage(
+          scope,
+          action === 'remove'
+            ? '已移除。對話輸入 /pi-new 生效。'
+            : '完成：' + result.source + '（對話輸入 /pi-new 生效）',
+          'ok',
+        );
+        await loadPackages();
+      } catch (err) {
+        // Fetch and validation failures land here, next to the input that
+        // caused them, rather than turning into a silently missing feature.
+        packageMessage(scope, err.message, 'err');
+      }
+    }
+
+    async function addPackage(scope) {
+      const urlEl = document.getElementById(scope === 'global' ? 'pkg-global-url' : 'pkg-conv-url');
+      const refEl = document.getElementById(scope === 'global' ? 'pkg-global-ref' : 'pkg-conv-ref');
+      const url = urlEl.value.trim();
+      const ref = refEl.value.trim();
+      if (!url) { packageMessage(scope, '請填入 git URL', 'err'); return; }
+      // Assembled here so nobody has to hand-write the @ref form, whose
+      // ambiguity with git@host:owner/repo is the one sharp edge in the syntax.
+      await mutatePackage(scope, 'add', ref ? url + '@' + ref : url);
+      urlEl.value = '';
+      refEl.value = '';
+    }
+
+    document.addEventListener('click', (event) => {
+      const btn = event.target.closest('[data-pkg-action]');
+      if (!btn) return;
+      void mutatePackage(btn.dataset.pkgScope, btn.dataset.pkgAction, btn.dataset.pkgSource);
+    });
+
     async function loadSkills() {
       const container = document.getElementById('skills-content');
       const previewEl = document.getElementById('skills-preview');
@@ -2130,7 +2311,7 @@ function renderAdminPage(token) {
     }
 
     function renderGlobalSettings(data) {
-      const thinking = ['off','minimal','low','medium','high','xhigh'];
+      const thinking = ['off','minimal','low','medium','high','xhigh','max'];
       const thinkingOpts = thinking.map((t) =>
         '<option value="' + t + '"' + (data.thinkingLevel === t ? ' selected' : '') + '>' + t + '</option>'
       ).join('');
@@ -2251,6 +2432,7 @@ function renderAdminPage(token) {
       loadSettings();
       loadWorkspace();
       loadSkills();
+      loadPackages();
       loadConversationEvents();
     });
   `;
@@ -2433,6 +2615,54 @@ const adminViewStyles = `
   .skill-source-conversation { background: rgba(217,119,6,0.1); color: var(--accent); }
   .skill-desc { color: var(--muted); font-size: 0.82rem; margin-top: 4px; line-height: 1.5; }
 
+  /* ── Packages ───────────────────────────────────────────────────────── */
+
+  .pkg-add { display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 12px; }
+  .pkg-input {
+    flex: 1 1 240px; min-width: 0; padding: 8px 10px;
+    border: 1px solid var(--border); border-radius: 8px; background: var(--card);
+    font-family: 'JetBrains Mono', ui-monospace, monospace; font-size: 0.8rem; color: var(--text);
+  }
+  .pkg-input-ref { flex: 0 1 200px; }
+  .pkg-msg {
+    padding: 8px 12px; border-radius: 8px; margin-bottom: 12px;
+    font-size: 0.82rem; line-height: 1.5; word-break: break-word;
+  }
+  .pkg-msg-ok { background: rgba(22,163,74,0.1); color: #15803d; }
+  .pkg-msg-err { background: rgba(220,38,38,0.1); color: #b91c1c; }
+  .pkg-msg-busy { background: rgba(0,0,0,0.05); color: var(--muted); }
+  .pkg-list { display: flex; flex-direction: column; gap: 8px; }
+  .pkg-row {
+    padding: 10px 12px; border: 1px solid var(--border); border-radius: 10px;
+    background: rgba(0,0,0,0.02);
+  }
+  .pkg-row-main { display: flex; align-items: center; gap: 8px; flex-wrap: wrap; }
+  .pkg-source {
+    font-family: 'JetBrains Mono', ui-monospace, monospace;
+    font-size: 0.78rem; color: var(--text); word-break: break-all;
+  }
+  .pkg-badge {
+    padding: 1px 8px; border-radius: 999px; font-size: 0.7rem;
+    font-weight: 600; letter-spacing: 0.03em;
+  }
+  .pkg-badge-ok { background: rgba(22,163,74,0.1); color: #15803d; }
+  .pkg-badge-warn { background: rgba(217,119,6,0.12); color: var(--accent); }
+  .pkg-badge-err { background: rgba(220,38,38,0.1); color: #b91c1c; }
+  .pkg-provides { margin-top: 6px; display: flex; gap: 6px; flex-wrap: wrap; }
+  .pkg-provides-empty { color: var(--subtle); font-size: 0.78rem; }
+  .pkg-chip {
+    padding: 1px 8px; border-radius: 6px; background: rgba(59,130,246,0.1);
+    color: #1d4ed8; font-size: 0.72rem;
+    font-family: 'JetBrains Mono', ui-monospace, monospace;
+  }
+  .pkg-actions { margin-top: 8px; display: flex; gap: 8px; }
+  .pkg-btn {
+    padding: 4px 10px; border: 1px solid var(--border); border-radius: 7px;
+    background: var(--card); color: var(--text); font-size: 0.76rem; cursor: pointer;
+  }
+  .pkg-btn:hover { background: rgba(0,0,0,0.05); }
+  .pkg-btn-danger { color: #b91c1c; }
+
   /* ── Events ─────────────────────────────────────────────────────────── */
 
   .events-list { display: flex; flex-direction: column; gap: 8px; }