@henlii/pidance 0.1.0

package/bin/pidance-auth-gate.js

@@ -0,0 +1,44 @@
+"use strict";
+
+// 启动认证门禁纯逻辑（CLI 门禁用；与 lib/request-guard.ts 的 isLoopbackHost 语义保持一致）：
+// 监听非回环地址且未设置认证密码 → 拒绝启动（fail-closed，发布阻断 P0）。
+// 密码来源：PIDANCE_PASSWORD 优先（产品名），兼容回退旧变量 PI_WEB_PASSWORD。
+
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const { isIP } = require("net");
+
+/** host 是否为回环（localhost / *.localhost / IPv4 127.x / IPv6 ::1）。 */
+function isLoopbackHost(host) {
+  if (typeof host !== "string" || host.length === 0) return false; // 未指定 → Next 默认绑定 0.0.0.0
+  let hostname = host.toLowerCase().replace(/\.$/, "");
+  if (hostname.startsWith("[") && hostname.endsWith("]")) hostname = hostname.slice(1, -1);
+  if (hostname === "localhost" || hostname.endsWith(".localhost")) return true;
+  const ip = isIP(hostname);
+  if (ip === 4) return hostname.startsWith("127.");
+  if (ip === 6) return hostname === "::1" || hostname === "0:0:0:0:0:0:0:1";
+  return false;
+}
+
+/** 解析认证密码：PIDANCE_PASSWORD 优先（产品名，空/缺失时回退），兼容旧变量 PI_WEB_PASSWORD。 */
+function resolvePassword(env) {
+  const p =
+    env && env.PIDANCE_PASSWORD && env.PIDANCE_PASSWORD.length > 0
+      ? env.PIDANCE_PASSWORD
+      : env && env.PI_WEB_PASSWORD;
+  return typeof p === "string" && p.length > 0 ? p : null;
+}
+
+/** 是否需要强制认证：非回环监听地址 + 未设置密码。 */
+function shouldRequireAuth(host, password) {
+  const hasPassword = typeof password === "string" && password.length > 0;
+  return !isLoopbackHost(host) && !hasPassword;
+}
+
+/** 人类可读的监听地址描述（拒绝启动报错用）。 */
+function describeHost(host) {
+  return typeof host === "string" && host.length > 0
+    ? host
+    : "0.0.0.0（Next 默认绑定所有网卡）";
+}
+
+module.exports = { isLoopbackHost, resolvePassword, shouldRequireAuth, describeHost };

package/bin/pidance-options.js

@@ -0,0 +1,34 @@
+"use strict";
+
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const { parseArgs } = require("util");
+
+const TRUE_VALUES = new Set(["1", "true", "yes", "on"]);
+
+function isEnabled(value) {
+  return typeof value === "string" && TRUE_VALUES.has(value.trim().toLowerCase());
+}
+
+function parseLaunchOptions(args = process.argv.slice(2), env = process.env) {
+  const { values: cliArgs } = parseArgs({
+    args,
+    options: {
+      port:      { type: "string", short: "p" },
+      hostname:  { type: "string", short: "H" },
+      "no-open": { type: "boolean" },
+    },
+    strict: false,
+  });
+
+  return {
+    // Pidance 产品默认 31415；30141 留给上游 pi-web，避免同机抢端口。
+    port: cliArgs.port ?? env.PORT ?? "31415",
+    hostname: cliArgs.hostname ?? env.HOSTNAME ?? null,
+    // PIDANCE_NO_OPEN 为产品正式变量。
+    openBrowser:
+      !cliArgs["no-open"] &&
+      !isEnabled(env.PIDANCE_NO_OPEN),
+  };
+}
+
+module.exports = { parseLaunchOptions };

package/bin/pidance.js

@@ -0,0 +1,95 @@
+#!/usr/bin/env node
+"use strict";
+
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const { spawn } = require("child_process");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const path = require("path");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const fs = require("fs");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const { parseLaunchOptions } = require("./pidance-options");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const { shouldRequireAuth, resolvePassword, describeHost } = require("./pidance-auth-gate");
+
+const pkgDir = path.join(__dirname, "..");
+const nextDir = path.join(pkgDir, ".next");
+
+// Resolve next's CLI entry directly to avoid relying on .bin symlinks (which
+// may not exist when installed via npx).
+let nextBin;
+try {
+  nextBin = require.resolve("next/dist/bin/next", { paths: [pkgDir] });
+} catch {
+  // Fallback: locate next package root and derive the bin path manually.
+  try {
+    const nextPkg = require.resolve("next/package.json", { paths: [pkgDir] });
+    nextBin = path.join(path.dirname(nextPkg), "dist", "bin", "next");
+  } catch {
+    nextBin = path.join(pkgDir, "node_modules", "next", "dist", "bin", "next");
+  }
+}
+
+const { port, hostname, openBrowser } = parseLaunchOptions();
+
+// 启动认证门禁（fail-closed，P0）：非回环监听地址（0.0.0.0 / :: / 局域网 IP / 非回环主机名）
+// 且未设置认证密码时拒绝启动，防止局域网/公网匿名调用 Agent API（创建会话/发 prompt/调工具）。
+// 仅本机使用：--hostname 127.0.0.1（或 localhost）可省略密码。
+if (shouldRequireAuth(hostname, resolvePassword(process.env))) {
+  console.error(
+    "[pidance] 拒绝启动：监听地址 " +
+      describeHost(hostname) +
+      " 非本机回环地址，且未设置认证密码。",
+  );
+  console.error(
+    "非本机访问必须设置密码后再启动，例如：PIDANCE_PASSWORD=<密码> pidance --hostname 0.0.0.0" +
+      "（兼容旧变量 PI_WEB_PASSWORD）。",
+  );
+  console.error(
+    "仅本机访问可省略密码并使用回环地址：pidance --hostname 127.0.0.1（或 localhost）。",
+  );
+  process.exit(1);
+}
+
+if (!fs.existsSync(nextDir)) {
+  console.error("Build artifacts not found. Please report this issue.");
+  process.exit(1);
+}
+
+const nextArgs = ["start", "-p", port];
+if (hostname) nextArgs.push("-H", hostname);
+
+// Always run next's JS entry with node directly — avoids .bin symlink issues
+// and path-with-spaces problems on Windows when shell: true is used.
+const child = spawn(process.execPath, [nextBin, ...nextArgs], {
+  cwd: pkgDir,
+  stdio: ["inherit", "pipe", "inherit"],
+  env: { ...process.env },
+});
+
+let browserOpened = false;
+const url = `http://${hostname ?? "localhost"}:${port}`;
+
+child.stdout.on("data", (chunk) => {
+  const text = chunk.toString();
+  process.stdout.write(text);
+  if (openBrowser && !browserOpened && text.includes("Ready")) {
+    browserOpened = true;
+    const isWindows = process.platform === "win32";
+    const isMac = process.platform === "darwin";
+    const openCmd = isWindows ? "start" : isMac ? "open" : "xdg-open";
+    const opener = spawn(openCmd, [url], {
+      shell: isWindows,
+      stdio: "ignore",
+      detached: true,
+    });
+
+    opener.on("error", (error) => {
+      console.warn(`Could not open browser automatically: ${error.message}`);
+    });
+
+    opener.unref();
+  }
+});
+
+child.on("exit", (code) => process.exit(code ?? 0));

package/package.json

@@ -0,0 +1,92 @@
+{
+  "name": "@henlii/pidance",
+  "version": "0.1.0",
+  "description": "Pidance：面向 Pi coding agent 的开源 Web 客户端",
+  "homepage": "https://github.com/henlii/pidance#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/henlii/pidance.git"
+  },
+  "bugs": {
+    "url": "https://github.com/henlii/pidance/issues"
+  },
+  "license": "MIT",
+  "engines": {
+    "node": ">=20.9.0"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
+  "bin": {
+    "pidance": "bin/pidance.js"
+  },
+  "files": [
+    "bin",
+    "!bin/*.test.mjs",
+    "public",
+    ".next",
+    "!.next/cache",
+    "!.next/dev",
+    "!.next/diagnostics",
+    "!.next/types",
+    "!.next/trace",
+    "!.next/trace-build",
+    "!.next/_events_*",
+    "!.next/**/*.js.map",
+    "!.next/**/*.nft.json",
+    "!.next/required-server-files.js",
+    "!.next/images-manifest.json",
+    "!.next/export-marker.json",
+    "!.next/react-loadable-manifest.json",
+    "!.next/server/next-font-manifest.js"
+  ],
+  "scripts": {
+    "dev": "next dev -p 31415",
+    "build": "next build --webpack",
+    "start": "next start -p 31415",
+    "lint": "eslint .",
+    "typecheck": "tsc --noEmit",
+    "test": "node --test lib/*.test.mjs lib/pi-runtime/*.test.mjs components/*.test.mjs hooks/*.test.mjs bin/*.test.mjs",
+    "verify:render-bridge": "node scripts/verify-subagent-render-bridge.mjs",
+    "test:browser": "node --test scripts/browser-regression.test.mjs",
+    "check": "npm run typecheck && npm run lint && npm run test",
+    "release:audit": "node scripts/audit-release-package.mjs --pre",
+    "release:audit:tgz": "node scripts/audit-release-package.mjs --tgz",
+    "release:check": "npm run check && npm run build && npm run release:audit"
+  },
+  "dependencies": {
+    "lucide-react": "^0.562.0",
+    "next": "16.2.11",
+    "react": "^19.2.4",
+    "react-dom": "^19.2.4",
+    "undici": "8.5.0"
+  },
+  "optionalDependencies": {
+    "@earendil-works/pi-coding-agent": "0.81.1"
+  },
+  "devDependencies": {
+    "@lobehub/icons": "^5.6.0",
+    "@tailwindcss/postcss": "^4.2.2",
+    "@types/node": "^25",
+    "@types/react": "^19",
+    "@types/react-dom": "^19",
+    "@types/react-syntax-highlighter": "^15.5.13",
+    "eslint": "^9",
+    "eslint-config-next": "16.2.11",
+    "jiti": "^2.7.0",
+    "katex": "^0.16.47",
+    "mammoth": "^1.12.0",
+    "mermaid": "^11.16.0",
+    "postcss": "^8.5.22",
+    "react-markdown": "^10.1.0",
+    "react-syntax-highlighter": "^16.1.1",
+    "rehype-katex": "^7.0.1",
+    "rehype-raw": "^7.0.0",
+    "rehype-sanitize": "^6.0.0",
+    "remark-gfm": "^4.0.1",
+    "remark-math": "^6.0.0",
+    "tailwindcss": "^4.2.2",
+    "typescript": "^5"
+  }
+}

package/public/brand/pidance-banner.svg

@@ -0,0 +1,45 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1280 640" font-family="DejaVu Sans, system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif">
+  <!-- Pidance README 横幅：左图标 + 字标 + 一句话说明 -->
+  <defs>
+    <linearGradient id="bg" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0" stop-color="#191C40"/>
+      <stop offset="1" stop-color="#10122A"/>
+    </linearGradient>
+    <linearGradient id="tile" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0" stop-color="#20234E"/>
+      <stop offset="1" stop-color="#12142F"/>
+    </linearGradient>
+    <linearGradient id="trail" gradientUnits="userSpaceOnUse" x1="352" y1="332" x2="404" y2="386">
+      <stop offset="0" stop-color="#5B8CFF"/>
+      <stop offset="1" stop-color="#2FE6C8"/>
+    </linearGradient>
+    <radialGradient id="glow" cx="0.85" cy="0.08" r="0.9">
+      <stop offset="0" stop-color="#5B8CFF" stop-opacity="0.13"/>
+      <stop offset="1" stop-color="#5B8CFF" stop-opacity="0"/>
+    </radialGradient>
+    <pattern id="dots" width="36" height="36" patternUnits="userSpaceOnUse">
+      <circle cx="1.4" cy="1.4" r="1.4" fill="#ffffff" fill-opacity="0.035"/>
+    </pattern>
+  </defs>
+  <rect width="1280" height="640" fill="url(#bg)"/>
+  <rect width="1280" height="640" fill="url(#dots)"/>
+  <rect width="1280" height="640" fill="url(#glow)"/>
+  <!-- 图标（210px，含深靛蓝圆角底） -->
+  <g transform="translate(150 215) scale(0.41015625)">
+    <rect width="512" height="512" rx="116" fill="url(#tile)"/>
+    <rect x="0.75" y="0.75" width="510.5" height="510.5" rx="115.25" fill="none" stroke="#ffffff" stroke-opacity="0.08" stroke-width="3"/>
+    <g transform="rotate(-7 256 283)">
+      <g fill="#F2F5FF">
+        <rect x="118" y="196" width="276" height="54" rx="27"/>
+        <rect x="176" y="226" width="54" height="170" rx="27"/>
+        <rect x="282" y="170" width="54" height="148" rx="27"/>
+      </g>
+      <path d="M352 332 A64 64 0 0 1 391 372" fill="none" stroke="url(#trail)" stroke-width="20" stroke-linecap="round"/>
+      <circle cx="403" cy="388" r="10.5" fill="#2FE6C8"/>
+    </g>
+  </g>
+  <!-- 字标与说明 -->
+  <text x="428" y="322" font-size="88" font-weight="bold" fill="#F4F6FF" letter-spacing="1">Pidance</text>
+  <text x="430" y="387" font-size="30" fill="#9AA3C4">An open-source client for Pi coding agent</text>
+  <rect x="0.75" y="0.75" width="1278.5" height="638.5" fill="none" stroke="#ffffff" stroke-opacity="0.05" stroke-width="1.5"/>
+</svg>

package/public/brand/pidance-icon.svg

@@ -0,0 +1,32 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512">
+  <!-- Pidance 品牌主图标：深靛蓝圆角底 + 起舞的 π 标记 -->
+  <!-- 设计：π 整体 -7° 倾斜，右侧核心竖笔上提（顶端探出横梁、足底离地），
+       左足点地，足下青绿渐变轨迹弧线 + 节拍圆点，形成单足舞步的节奏感 -->
+  <defs>
+    <linearGradient id="tile" x1="0" y1="0" x2="0" y2="1">
+      <stop offset="0" stop-color="#20234E"/>
+      <stop offset="1" stop-color="#12142F"/>
+    </linearGradient>
+    <linearGradient id="trail" gradientUnits="userSpaceOnUse" x1="352" y1="332" x2="404" y2="386">
+      <stop offset="0" stop-color="#5B8CFF"/>
+      <stop offset="1" stop-color="#2FE6C8"/>
+    </linearGradient>
+    <radialGradient id="glow" cx="0.74" cy="0.2" r="0.75">
+      <stop offset="0" stop-color="#5B8CFF" stop-opacity="0.16"/>
+      <stop offset="1" stop-color="#5B8CFF" stop-opacity="0"/>
+    </radialGradient>
+  </defs>
+  <rect width="512" height="512" rx="116" fill="url(#tile)"/>
+  <rect width="512" height="512" rx="116" fill="url(#glow)"/>
+  <rect x="0.75" y="0.75" width="510.5" height="510.5" rx="115.25" fill="none" stroke="#ffffff" stroke-opacity="0.07" stroke-width="1.5"/>
+  <!-- 起舞的 π：横梁与双腿，右腿（核心竖笔）整体上提 -->
+  <g transform="rotate(-7 256 283)">
+    <g fill="#F2F5FF">
+      <rect x="118" y="196" width="276" height="54" rx="27"/>
+      <rect x="176" y="226" width="54" height="170" rx="27"/>
+      <rect x="282" y="170" width="54" height="148" rx="27"/>
+    </g>
+    <path d="M352 332 A64 64 0 0 1 391 372" fill="none" stroke="url(#trail)" stroke-width="20" stroke-linecap="round"/>
+    <circle cx="403" cy="388" r="10.5" fill="#2FE6C8"/>
+  </g>
+</svg>

package/public/brand/pidance-mark-dark.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512">
+  <!-- Pidance 标记（深色版）：透明底，用于浅色背景 -->
+  <defs>
+    <linearGradient id="trail" gradientUnits="userSpaceOnUse" x1="352" y1="332" x2="404" y2="386">
+      <stop offset="0" stop-color="#3B66F5"/>
+      <stop offset="1" stop-color="#0DAE93"/>
+    </linearGradient>
+  </defs>
+  <g transform="rotate(-7 256 283)">
+    <g fill="#20245E">
+      <rect x="118" y="196" width="276" height="54" rx="27"/>
+      <rect x="176" y="226" width="54" height="170" rx="27"/>
+      <rect x="282" y="170" width="54" height="148" rx="27"/>
+    </g>
+    <path d="M352 332 A64 64 0 0 1 391 372" fill="none" stroke="url(#trail)" stroke-width="20" stroke-linecap="round"/>
+    <circle cx="403" cy="388" r="10.5" fill="#0DAE93"/>
+  </g>
+</svg>

package/public/brand/pidance-mark-light.svg

@@ -0,0 +1,18 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512">
+  <!-- Pidance 标记（浅色版）：透明底，用于深色背景 -->
+  <defs>
+    <linearGradient id="trail" gradientUnits="userSpaceOnUse" x1="352" y1="332" x2="404" y2="386">
+      <stop offset="0" stop-color="#5B8CFF"/>
+      <stop offset="1" stop-color="#2FE6C8"/>
+    </linearGradient>
+  </defs>
+  <g transform="rotate(-7 256 283)">
+    <g fill="#F2F5FF">
+      <rect x="118" y="196" width="276" height="54" rx="27"/>
+      <rect x="176" y="226" width="54" height="170" rx="27"/>
+      <rect x="282" y="170" width="54" height="148" rx="27"/>
+    </g>
+    <path d="M352 332 A64 64 0 0 1 391 372" fill="none" stroke="url(#trail)" stroke-width="20" stroke-linecap="round"/>
+    <circle cx="403" cy="388" r="10.5" fill="#2FE6C8"/>
+  </g>
+</svg>