@pixelbyte-software/pixcode 1.53.28 → 1.54.1

package/server/routes/git.js

@@ -887,7 +887,7 @@ router.post('/initial-commit', async (req, res) => {
       });
     }
 
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -918,7 +918,7 @@ router.post('/commit', async (req, res) => {
     res.json({ success: true, output: stdout });
   } catch (error) {
     console.error('Git commit error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -965,7 +965,7 @@ router.post('/revert-local-commit', async (req, res) => {
     });
   } catch (error) {
     console.error('Git revert local commit error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -1031,7 +1031,7 @@ router.post('/checkout', async (req, res) => {
     res.json({ success: true, output: stdout });
   } catch (error) {
     console.error('Git checkout error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -1053,7 +1053,7 @@ router.post('/create-branch', async (req, res) => {
     res.json({ success: true, output: stdout });
   } catch (error) {
     console.error('Git create branch error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -1079,7 +1079,7 @@ router.post('/delete-branch', async (req, res) => {
     res.json({ success: true, output: stdout });
   } catch (error) {
     console.error('Git delete branch error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -1234,7 +1234,7 @@ router.post('/generate-commit-message', async (req, res) => {
     res.json({ message });
   } catch (error) {
     console.error('Generate commit message error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -1764,7 +1764,7 @@ router.post('/discard', async (req, res) => {
     res.json({ success: true, message: `Changes discarded for ${repositoryRelativeFilePath}` });
   } catch (error) {
     console.error('Git discard error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 
@@ -1815,7 +1815,7 @@ router.post('/delete-untracked', async (req, res) => {
     }
   } catch (error) {
     console.error('Git delete untracked error:', error);
-    res.status(500).json({ error: error.message });
+    res.status(500).json({ error: "Internal server error" });
   }
 });
 

package/server/routes/live-view.js

@@ -298,7 +298,7 @@ router.post('/:projectName/restart', requireLiveViewProjectAccess('useShell'), a
       environment: attachEnvironmentRuntimeState(state.environment, urls, tunnel),
     });
   } catch (error) {
-    res.status(500).json({ error: error.message || 'Failed to restart Live View' });
+    res.status(500).json({ error: 'Failed to restart Live View' });
   }
 });
 
@@ -315,7 +315,7 @@ router.post('/:projectName/stop', requireLiveViewProjectAccess('useShell'), asyn
       environment: attachEnvironmentRuntimeState(null, urls, tunnel),
     });
   } catch (error) {
-    res.status(500).json({ error: error.message || 'Failed to stop Live View' });
+    res.status(500).json({ error: 'Failed to stop Live View' });
   }
 });
 

package/server/routes/plugins.js

@@ -317,7 +317,7 @@ router.get('/marketplace', (req, res) => {
       categories: ['popular', 'skills', 'plugin', 'workflow', 'new'],
     });
   } catch (err) {
-    res.status(500).json({ error: 'Failed to read marketplace', details: err.message });
+    res.status(500).json({ error: 'Failed to read marketplace' });
   }
 });
 
@@ -358,7 +358,7 @@ router.get('/marketplace/search', async (req, res) => {
     res.json({ entries });
   } catch (err) {
     const status = err?.name === 'AbortError' ? 504 : 502;
-    res.status(status).json({ error: 'GitHub search failed', details: err.message });
+    res.status(status).json({ error: 'GitHub search failed' });
   } finally {
     clearTimeout(timeout);
   }
@@ -378,7 +378,7 @@ router.post('/marketplace/sources', (req, res) => {
     writeMarketplaceSources(sources.slice(0, 200));
     res.json({ success: true, source, installedSources: readMarketplaceSources() });
   } catch (err) {
-    res.status(400).json({ error: 'Failed to add source', details: err.message });
+    res.status(400).json({ error: 'Failed to add source' });
   }
 });
 
@@ -391,7 +391,7 @@ router.delete('/marketplace/sources/:id', (req, res) => {
     writeMarketplaceSources(next);
     res.json({ success: true, installedSources: next });
   } catch (err) {
-    res.status(400).json({ error: 'Failed to remove source', details: err.message });
+    res.status(400).json({ error: 'Failed to remove source' });
   }
 });
 
@@ -404,7 +404,7 @@ router.get('/', (req, res) => {
     }));
     res.json({ plugins });
   } catch (err) {
-    res.status(500).json({ error: 'Failed to scan plugins', details: err.message });
+    res.status(500).json({ error: 'Failed to scan plugins' });
   }
 });
 
@@ -421,7 +421,7 @@ router.get('/:name/manifest', (req, res) => {
     }
     res.json(plugin);
   } catch (err) {
-    res.status(500).json({ error: 'Failed to read plugin manifest', details: err.message });
+    res.status(500).json({ error: 'Failed to read plugin manifest' });
   }
 });
 
@@ -512,7 +512,7 @@ router.put('/:name/enable', async (req, res) => {
 
     res.json({ success: true, name: req.params.name, enabled });
   } catch (err) {
-    res.status(500).json({ error: 'Failed to update plugin', details: err.message });
+    res.status(500).json({ error: 'Failed to update plugin' });
   }
 });
 
@@ -545,7 +545,7 @@ router.post('/install', async (req, res) => {
 
     res.json({ success: true, plugin: manifest });
   } catch (err) {
-    res.status(400).json({ error: 'Failed to install plugin', details: err.message });
+    res.status(400).json({ error: 'Failed to install plugin' });
   }
 });
 
@@ -579,7 +579,7 @@ router.post('/:name/update', async (req, res) => {
 
     res.json({ success: true, plugin: manifest });
   } catch (err) {
-    res.status(400).json({ error: 'Failed to update plugin', details: err.message });
+    res.status(400).json({ error: 'Failed to update plugin' });
   }
 });
 
@@ -610,7 +610,7 @@ router.all(/^\/([a-zA-Z0-9_-]+)\/rpc\/(.*)$/, async (req, res) => {
     try {
       port = await startPluginServer(pluginName, pluginDir, plugin.server);
     } catch (err) {
-      return res.status(503).json({ error: 'Plugin server failed to start', details: err.message });
+      return res.status(503).json({ error: 'Plugin server failed to start' });
     }
   }
 
@@ -646,7 +646,7 @@ router.all(/^\/([a-zA-Z0-9_-]+)\/rpc\/(.*)$/, async (req, res) => {
 
   proxyReq.on('error', (err) => {
     if (!res.headersSent) {
-      res.status(502).json({ error: 'Plugin server error', details: err.message });
+      res.status(502).json({ error: 'Plugin server error' });
     } else {
       res.end();
     }
@@ -683,7 +683,7 @@ router.delete('/:name', async (req, res) => {
     await uninstallPlugin(pluginName);
     res.json({ success: true, name: pluginName });
   } catch (err) {
-    res.status(400).json({ error: 'Failed to uninstall plugin', details: err.message });
+    res.status(400).json({ error: 'Failed to uninstall plugin' });
   }
 });
 

package/server/routes/projects.js

@@ -326,7 +326,7 @@ router.get('/:projectName/dir-status', requireAdmin, async (req, res) => {
     }
   } catch (error) {
     console.error(`[projects] dir-status ${projectName}:`, error);
-    res.status(500).json({ error: error.message || 'Failed to check project directory' });
+    res.status(500).json({ error: 'Failed to check project directory' });
   }
 });
 
@@ -410,7 +410,7 @@ router.post('/quick-start', requireAdmin, async (req, res) => {
     res.json({ success: true, project, suggestedName: name, reused: false });
   } catch (error) {
     console.error('[projects] quick-start failed:', error);
-    res.status(500).json({ error: error.message || 'Failed to quick-start project' });
+    res.status(500).json({ error: 'Failed to quick-start project' });
   }
 });
 

package/server/routes/qwen.js

@@ -20,7 +20,7 @@ router.delete('/sessions/:sessionId', async (req, res) => {
         res.json({ success: true });
     } catch (error) {
         console.error(`Error deleting Qwen session ${req.params.sessionId}:`, error);
-        res.status(500).json({ success: false, error: error.message });
+        res.status(500).json({ success: false, error: "Internal server error" });
     }
 });
 

package/server/routes/remote.js

@@ -42,7 +42,7 @@ router.get('/control-room', async (_req, res) => {
       controlRoom: await buildControlRoomSnapshot(),
     });
   } catch (error) {
-    res.status(500).json({ success: false, error: error.message });
+    res.status(500).json({ success: false, error: "Internal server error" });
   }
 });
 

package/server/routes/webhooks.js

@@ -56,7 +56,7 @@ router.post('/test', async (req, res) => {
     });
     res.json({ success: true, result });
   } catch (error) {
-    res.status(500).json({ success: false, error: error.message });
+    res.status(500).json({ success: false, error: "Internal server error" });
   }
 });
 

package/server/services/startup-update.js

@@ -1,5 +1,6 @@
 import fs from 'node:fs';
 import path from 'node:path';
+import crypto from 'node:crypto';
 import { spawn, spawnSync } from 'node:child_process';
 import { Readable } from 'node:stream';
 
@@ -68,10 +69,14 @@ async function readLatestPackageMetadata() {
   const latestVersion = metadata?.['dist-tags']?.latest;
   const latestEntry = latestVersion ? metadata?.versions?.[latestVersion] : null;
   const tarballUrl = latestEntry?.dist?.tarball;
+  const integrity = latestEntry?.dist?.integrity;
   if (!latestVersion || !tarballUrl) {
     throw new Error('Registry response missing latest version or tarball URL.');
   }
-  return { latestVersion, tarballUrl };
+  if (!integrity) {
+    console.warn('[startup-update] Registry response missing integrity hash — proceeding without verification.');
+  }
+  return { latestVersion, tarballUrl, integrity };
 }
 
 async function installNpmGlobal(latestVersion, color) {
@@ -119,7 +124,7 @@ function readPackageVersion(appRoot) {
   }
 }
 
-async function extractRuntimeTarball({ runtimeDir, tarballUrl, latestVersion, currentVersion, color }) {
+async function extractRuntimeTarball({ runtimeDir, tarballUrl, latestVersion, currentVersion, color, integrity }) {
   color?.info && console.log(`${color.info('[INFO]')} Updating runtime ${currentVersion} -> ${latestVersion} before opening the port...`);
 
   const tarballRes = await fetch(tarballUrl);
@@ -127,6 +132,27 @@ async function extractRuntimeTarball({ runtimeDir, tarballUrl, latestVersion, cu
     throw new Error(`Tarball fetch failed: HTTP ${tarballRes.status}`);
   }
 
+  // Download tarball to a buffer first so we can verify integrity before extracting.
+  const tarballBuffer = Buffer.from(await tarballRes.arrayBuffer());
+
+  // Verify integrity hash (SRI format: "sha512-<base64>") if provided by the registry.
+  if (integrity && typeof integrity === 'string') {
+    const match = integrity.match(/^(sha512)-(.+)$/);
+    if (match) {
+      const algo = match[1];
+      const expectedHash = match[2];
+      const actualHash = crypto.createHash(algo).update(tarballBuffer).digest('base64');
+      if (actualHash !== expectedHash) {
+        throw new Error(`Integrity verification failed: expected ${algo}-${expectedHash.slice(0, 16)}..., got ${algo}-${actualHash.slice(0, 16)}...`);
+      }
+      color?.info && console.log(`${color.info('[INFO]')} Tarball integrity verified (${algo}).`);
+    } else {
+      console.warn('[startup-update] Unrecognized integrity format — skipping verification.');
+    }
+  } else {
+    console.warn('[startup-update] No integrity hash available — tarball extracted without verification.');
+  }
+
   const stagingDir = path.join(runtimeDir, '.staging');
   const backupDir = path.join(runtimeDir, '.previous');
   fs.rmSync(stagingDir, { recursive: true, force: true });
@@ -137,9 +163,7 @@ async function extractRuntimeTarball({ runtimeDir, tarballUrl, latestVersion, cu
   if (!tarExtract) throw new Error('tar extractor not available');
 
   await new Promise((resolve, reject) => {
-    const nodeStream = typeof Readable.fromWeb === 'function' && tarballRes.body?.getReader
-      ? Readable.fromWeb(tarballRes.body)
-      : tarballRes.body;
+    const nodeStream = Readable.from(tarballBuffer);
     const extractor = tarExtract({ cwd: stagingDir, strip: 1 });
     nodeStream.pipe(extractor);
     extractor.on('finish', resolve);
@@ -199,7 +223,7 @@ export async function runStartupAutoUpdate({
       return await updateGitCheckout(appRoot, color);
     }
 
-    const { latestVersion, tarballUrl } = await readLatestPackageMetadata();
+    const { latestVersion, tarballUrl, integrity } = await readLatestPackageMetadata();
     if (compareVersions(latestVersion, currentVersion) <= 0) {
       return { updated: false, latestVersion };
     }
@@ -211,6 +235,7 @@ export async function runStartupAutoUpdate({
         latestVersion,
         currentVersion,
         color,
+        integrity,
       });
       return { updated: true, version: latestVersion, restartMode: 'exit42' };
     }

package/server/services/telegram/bot.js

@@ -1,4 +1,5 @@
 import { EventEmitter } from 'node:events';
+import crypto from 'node:crypto';
 
 import { telegramConfigDb, telegramLinksDb } from '../../database/db.js';
 
@@ -43,10 +44,11 @@ export const telegramEvents = new EventEmitter();
 const now = () => Date.now();
 
 const generate6DigitCode = () => {
-  // Zero-padded random 6-digit code. Using rand instead of crypto is fine
-  // here: the code is short-lived (10min), single-use, and verified against
-  // a per-user row — brute-force requires both the code AND a live pairing.
-  const n = Math.floor(Math.random() * 1_000_000);
+  // Zero-padded random 6-digit code. Using crypto.randomInt prevents
+  // modulo bias and ensures uniform distribution across the 000000–999999
+  // range. The code is short-lived (10min), single-use, and verified
+  // against a per-user row.
+  const n = crypto.randomInt(0, 1_000_000);
   return n.toString().padStart(6, '0');
 };
 

package/server/setup-wizard.js

@@ -0,0 +1,263 @@
+import fs from 'fs';
+import os from 'os';
+import path from 'path';
+import net from 'node:net';
+import readline from 'readline';
+import { spawn } from 'node:child_process';
+
+import { c } from './utils/colors.js';
+
+const PIXCODE_DIR = path.join(os.homedir(), '.pixcode');
+const SETUP_MARKER = path.join(PIXCODE_DIR, '.setup-complete');
+const DEFAULT_PORT = 3001;
+
+function isFirstRun() {
+    return !fs.existsSync(SETUP_MARKER);
+}
+
+function markSetupComplete(config) {
+    try {
+        fs.mkdirSync(PIXCODE_DIR, { recursive: true });
+        fs.writeFileSync(SETUP_MARKER, JSON.stringify({
+            completedAt: new Date().toISOString(),
+            ...config,
+        }, null, 2));
+    } catch {
+        // Non-fatal — setup can complete without persistence
+    }
+}
+
+function readSetupConfig() {
+    try {
+        return JSON.parse(fs.readFileSync(SETUP_MARKER, 'utf8'));
+    } catch {
+        return null;
+    }
+}
+
+function isPortAvailable(port) {
+    return new Promise((resolve) => {
+        const tester = net.createServer();
+        tester.once('error', () => resolve(false));
+        tester.once('listening', () => {
+            tester.close(() => resolve(true));
+        });
+        tester.listen(Number(port), '0.0.0.0');
+    });
+}
+
+async function findAvailablePort(startPort, maxAttempts = 10) {
+    for (let port = startPort; port < startPort + maxAttempts; port++) {
+        if (await isPortAvailable(port)) return port;
+    }
+    return null;
+}
+
+function isPortOpen(port, timeoutMs = 800) {
+    return new Promise((resolve) => {
+        const socket = net.createConnection({ host: '127.0.0.1', port: Number(port) });
+        let settled = false;
+        const done = (value) => {
+            if (settled) return;
+            settled = true;
+            socket.destroy();
+            resolve(value);
+        };
+        socket.setTimeout(timeoutMs);
+        socket.once('connect', () => done(true));
+        socket.once('timeout', () => done(false));
+        socket.once('error', () => done(false));
+    });
+}
+
+async function waitForServerReady(port, timeoutMs = 30000) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (await isPortOpen(port)) return true;
+        await new Promise(resolve => setTimeout(resolve, 500));
+    }
+    return false;
+}
+
+function ask(question) {
+    return new Promise((resolve) => {
+        if (!process.stdin.isTTY || !process.stdout.isTTY) {
+            resolve(null);
+            return;
+        }
+        const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+        rl.question(question, (answer) => {
+            rl.close();
+            resolve(answer?.trim() || '');
+        });
+    });
+}
+
+async function askSelect(question, options) {
+    while (true) {
+        const answer = await ask(question);
+        if (answer === null) return null;
+        const lower = answer.toLowerCase();
+        for (const opt of options) {
+            if (lower === opt.key || lower === String(opt.key)) return opt;
+            if (opt.aliases?.some(a => lower === a)) return opt;
+        }
+        console.log(`${c.warn('  Invalid choice. Please try again.')}`);
+    }
+}
+
+function openBrowser(url) {
+    const platform = process.platform;
+    // Use spawn with an argument array instead of exec with a shell string
+    // to prevent command injection through the url value.
+    let bin;
+    let args;
+    if (platform === 'darwin') {
+        bin = 'open';
+        args = [url];
+    } else if (platform === 'win32') {
+        bin = 'cmd';
+        args = ['/c', 'start', '', url];
+    } else {
+        bin = 'xdg-open';
+        args = [url];
+    }
+    try {
+        spawn(bin, args, { stdio: 'ignore', timeout: 3000, detached: true, shell: false }).unref();
+        return true;
+    } catch {
+        return false;
+    }
+}
+
+function printBanner() {
+    console.log('');
+    console.log(c.dim('  ╔═══════════════════════════════════════════════════════════════╗'));
+    console.log(c.dim('  ║') + c.bright('         Pixcode Setup Wizard                ') + c.dim('║'));
+    console.log(c.dim('  ╠═══════════════════════════════════════════════════════════════╣'));
+    console.log(c.dim('  ║') + c.info('  Self-hosted AI coding agent control room      ') + c.dim('║'));
+    console.log(c.dim('  ║') + c.dim('  Claude Code, Cursor, Codex, Gemini, Qwen...    ') + c.dim('║'));
+    console.log(c.dim('  ╚═══════════════════════════════════════════════════════════════╝'));
+    console.log('');
+}
+
+function printReady(port) {
+    const url = `http://localhost:${port}`;
+    console.log('');
+    console.log(c.dim('  ╔═══════════════════════════════════════════════════════════════╗'));
+    console.log(c.dim('  ║') + c.bright('  Pixcode is Ready!                          ') + c.dim('║'));
+    console.log(c.dim('  ╠═══════════════════════════════════════════════════════════════╣'));
+    console.log(c.dim('  ║') + `  Open ${c.bright(url)} in your browser      ` + c.dim('║'));
+    console.log(c.dim('  ╚═══════════════════════════════════════════════════════════════╝'));
+    console.log('');
+    console.log(`  ${c.info('[INFO]')} Web UI:      ${c.bright(url)}`);
+    console.log(`  ${c.info('[INFO]')} Health:      ${c.dim(url + '/health')}`);
+    console.log('');
+}
+
+export async function runSetupWizard(existingOptions = {}) {
+    if (!isFirstRun()) return null;
+
+    printBanner();
+
+    console.log(`  ${c.info('Welcome!')} Let's get Pixcode configured.\n`);
+
+    // Step 1: Port selection
+    let port = existingOptions.serverPort || process.env.SERVER_PORT || DEFAULT_PORT;
+    const portAvailable = await isPortAvailable(port);
+
+    if (!portAvailable) {
+        console.log(`  ${c.warn('[WARN]')} Port ${c.bright(String(port))} is already in use.`);
+        const altPort = await findAvailablePort(Number(port) + 1);
+        if (altPort) {
+            console.log(`  ${c.info('[INFO]')} Port ${c.bright(String(altPort))} is available.`);
+            const choice = await askSelect(
+                `  Use port ${altPort}? [Y/n] `,
+                [
+                    { key: 'y', label: 'yes', aliases: ['yes', '', 'e', 'evet'] },
+                    { key: 'n', label: 'no', aliases: ['no', 'n', 'h', 'hayir'] },
+                ],
+            );
+            if (choice?.key !== 'n') {
+                port = altPort;
+            } else {
+                const customPort = await ask(`  Enter a port number (or press Enter for ${altPort}): `);
+                if (customPort && /^\d+$/.test(customPort)) {
+                    port = Number(customPort);
+                } else {
+                    port = altPort;
+                }
+            }
+        } else {
+            const customPort = await ask(`  No free ports found near ${port}. Enter a port manually: `);
+            if (customPort && /^\d+$/.test(customPort)) {
+                port = Number(customPort);
+            }
+        }
+    } else {
+        console.log(`  ${c.ok('[OK]')}   Port ${c.bright(String(port))} is available.`);
+        const customPort = await ask(`  Press Enter to use port ${port}, or enter a different port: `);
+        if (customPort && /^\d+$/.test(customPort)) {
+            const newPort = Number(customPort);
+            if (await isPortAvailable(newPort)) {
+                port = newPort;
+                console.log(`  ${c.ok('[OK]')}   Port ${c.bright(String(port))} is available.`);
+            } else {
+                console.log(`  ${c.warn('[WARN]')} Port ${newPort} is in use. Keeping port ${port}.`);
+            }
+        }
+    }
+
+    process.env.SERVER_PORT = String(port);
+
+    // Step 2: Mode selection (Linux only)
+    let useDaemon = existingOptions.noDaemon ? false : (process.platform === 'linux');
+
+    if (process.platform === 'linux' && !existingOptions.noDaemon) {
+        console.log('');
+        const modeChoice = await askSelect(
+            `  ${c.info('Run mode:')} Keep running in background (daemon) or foreground?\n` +
+            `  ${c.dim('  [1]')} Daemon (recommended — survives terminal close)\n` +
+            `  ${c.dim('  [2]')} Foreground (stops when terminal closes)\n` +
+            `  Choose [1/2] (default 1): `,
+            [
+                { key: '1', label: 'daemon', aliases: ['d', 'daemon', ''] },
+                { key: '2', label: 'foreground', aliases: ['f', 'fg', 'foreground'] },
+            ],
+        );
+        useDaemon = modeChoice?.key !== '2';
+    }
+
+    // Step 3: Summary
+    console.log('');
+    console.log(`  ${c.info('[Setup]')} Configuration:`);
+    console.log(`          Port:  ${c.bright(String(port))}`);
+    if (process.platform === 'linux') {
+        console.log(`          Mode:  ${c.bright(useDaemon ? 'Daemon (background)' : 'Foreground')}`);
+    }
+    console.log('');
+
+    markSetupComplete({ port, mode: useDaemon ? 'daemon' : 'foreground' });
+
+    return { port, useDaemon };
+}
+
+export async function postStartupGuidance(port) {
+    const effectivePort = Number(port) || DEFAULT_PORT;
+    const url = `http://localhost:${effectivePort}`;
+
+    printReady(effectivePort);
+
+    // Try to open browser
+    const opened = openBrowser(url);
+    if (opened) {
+        console.log(`  ${c.ok('[OK]')}   Opening browser...`);
+    } else {
+        console.log(`  ${c.tip('[TIP]')}  Open ${c.bright(url)} in your browser to start using Pixcode.`);
+    }
+
+    console.log(`  ${c.dim('Tip: Run "pixcode status" to see full configuration.')}`);
+    console.log('');
+}
+
+export { isFirstRun, isPortAvailable, findAvailablePort, openBrowser, waitForServerReady, isPortOpen };

package/server/utils/plugin-loader.js

@@ -3,6 +3,8 @@ import path from 'path';
 import os from 'os';
 import { spawn } from 'child_process';
 
+import { securityLog } from './security-log.js';
+
 const PLUGINS_DIR = path.join(os.homedir(), '.pixcode', 'plugins');
 const PLUGINS_CONFIG_PATH = path.join(os.homedir(), '.pixcode', 'plugins.json');
 
@@ -290,6 +292,7 @@ export function installPluginFromGit(url) {
         cleanupTemp();
         return reject(new Error(`Failed to move plugin into place: ${err.message}`));
       }
+      securityLog('plugin_installed', { reason: manifest.name });
       resolve(manifest);
     };
 
@@ -303,6 +306,7 @@ export function installPluginFromGit(url) {
     gitProcess.on('close', (code) => {
       if (code !== 0) {
         cleanupTemp();
+        securityLog('plugin_install_failed', { reason: `git clone failed: exit code ${code}` });
         return reject(new Error(`git clone failed (exit code ${code}): ${stderr.trim()}`));
       }