@qt4798/pi-web 0.10.1 → 0.10.5

package/.next/trace-build

@@ -1 +1 @@
-[{"name":"run-webpack","duration":45958046,"timestamp":175198281571,"id":14,"parentId":1,"tags":{},"startTime":1786801512491,"traceId":"b3c3522543460ad8"},{"name":"run-typescript","duration":7866202,"timestamp":175244241296,"id":1011,"parentId":1,"tags":{},"startTime":1786801558451,"traceId":"b3c3522543460ad8"},{"name":"static-check","duration":2116191,"timestamp":175252123327,"id":1014,"parentId":1,"tags":{},"startTime":1786801566333,"traceId":"b3c3522543460ad8"},{"name":"static-generation","duration":2288300,"timestamp":175254966990,"id":1192,"parentId":1,"tags":{},"startTime":1786801569177,"traceId":"b3c3522543460ad8"},{"name":"collect-build-traces","duration":18774821,"timestamp":175254243355,"id":1189,"parentId":1,"tags":{},"startTime":1786801568453,"traceId":"b3c3522543460ad8"},{"name":"telemetry-flush","duration":17,"timestamp":175273028017,"id":1201,"parentId":1,"tags":{},"startTime":1786801587238,"traceId":"b3c3522543460ad8"},{"name":"next-build","duration":75101309,"timestamp":175197926730,"id":1,"tags":{"buildMode":"default","version":"16.2.12","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1786801512136,"traceId":"b3c3522543460ad8"}]
+[{"name":"run-webpack","duration":57803718,"timestamp":601173715570,"id":14,"parentId":1,"tags":{},"startTime":1787227488514,"traceId":"c4e8cdc81c758c63"},{"name":"run-typescript","duration":6646529,"timestamp":601231520535,"id":996,"parentId":1,"tags":{},"startTime":1787227546317,"traceId":"c4e8cdc81c758c63"},{"name":"static-check","duration":1254069,"timestamp":601238187460,"id":999,"parentId":1,"tags":{},"startTime":1787227552983,"traceId":"c4e8cdc81c758c63"},{"name":"static-generation","duration":1941657,"timestamp":601239800716,"id":1177,"parentId":1,"tags":{},"startTime":1787227554597,"traceId":"c4e8cdc81c758c63"},{"name":"collect-build-traces","duration":17784999,"timestamp":601239443458,"id":1174,"parentId":1,"tags":{},"startTime":1787227554239,"traceId":"c4e8cdc81c758c63"},{"name":"output-standalone","duration":2229931,"timestamp":601257234824,"id":1185,"parentId":1,"tags":{},"startTime":1787227572030,"traceId":"c4e8cdc81c758c63"},{"name":"telemetry-flush","duration":14,"timestamp":601259466326,"id":1188,"parentId":1,"tags":{},"startTime":1787227574262,"traceId":"c4e8cdc81c758c63"},{"name":"next-build","duration":86277123,"timestamp":601173189221,"id":1,"tags":{"buildMode":"default","version":"16.2.12","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1787227487987,"traceId":"c4e8cdc81c758c63"}]

package/bin/fix-pi-agent-undici.js

@@ -4,7 +4,17 @@
 // that pins undici to 8.5.0, which has 7+ known CVEs. npm overrides cannot
 // penetrate shrinkwrap. This script:
 //   1. Removes the shrinkwrap (so future reinstalls respect overrides)
-//   2. Symlinks the nested undici to the top-level undici@^8.10.0
+//   2. Replaces the nested undici with the top-level undici@^8.10.0
+//
+// Two modes:
+//   - applyUndiciFix (runtime, dev/CLI): replaces the nested undici with a
+//     **symlink** to the top-level undici. The dir is writable here, and a
+//     symlink keeps future reinstalls pointing at the fixed version.
+//   - solidifyUndiciFix (build time, packaging): replaces the nested undici
+//     (whether a real dir or a symlink) with a **physical copy** of the fixed
+//     version so the standalone output (`.next/standalone`) is fully
+//     self-contained with no symlinks — the installed, read-only bundle never
+//     needs to write anything at runtime and survives NSIS/macOS bundle copying.
 //
 // Note: npm audit will still report undici CVEs because the lockfile
 // references the old version. This is a cosmetic false positive — the
@@ -19,7 +29,16 @@
 const fs = require("fs");
 const path = require("path");
 
-function applyUndiciFix(rootDir = path.join(__dirname, "..")) {
+/**
+ * Apply the undici fix under `rootDir`.
+ * @param {string} [rootDir] package root (contains node_modules/)
+ * @param {{copy?: boolean, topUndici?: string}} [opts]
+ *   - copy: when true, copy the fixed undici into place instead of symlinking
+ *   - topUndici: explicit path to the fixed undici directory (defaults to
+ *     <rootDir>/node_modules/undici)
+ */
+function applyUndiciFix(rootDir = path.join(__dirname, ".."), opts = {}) {
+  const copy = opts.copy === true;
   const agentDir = path.join(
     rootDir,
     "node_modules",
@@ -30,7 +49,7 @@ function applyUndiciFix(rootDir = path.join(__dirname, "..")) {
 
   const shrinkwrap = path.join(agentDir, "npm-shrinkwrap.json");
   const nestedUndici = path.join(agentDir, "node_modules", "undici");
-  const topUndici = path.join(rootDir, "node_modules", "undici");
+  const topUndici = opts.topUndici || path.join(rootDir, "node_modules", "undici");
 
   // 1. Remove shrinkwrap
   if (fs.existsSync(shrinkwrap)) {
@@ -38,39 +57,65 @@ function applyUndiciFix(rootDir = path.join(__dirname, "..")) {
     fs.rmSync(shrinkwrap);
   }
 
-  // 2. Replace nested undici@8.5.0 with symlink to top-level undici@^8.10.0
-  if (
-    fs.existsSync(topUndici) &&
-    fs.existsSync(nestedUndici) &&
-    // Only replace if it's a real directory, not already a symlink
-    fs.lstatSync(nestedUndici).isDirectory() &&
-    !fs.lstatSync(nestedUndici).isSymbolicLink()
-  ) {
-    try {
-      const nestedVersion = require(path.join(nestedUndici, "package.json")).version;
-      const topVersion = require(path.join(topUndici, "package.json")).version;
+  // 2. Inspect the nested undici (may be a real dir or an existing symlink)
+  let nestedIsSymlink = false;
+  let nestedIsDir = false;
+  try {
+    const st = fs.lstatSync(nestedUndici);
+    nestedIsSymlink = st.isSymbolicLink();
+    nestedIsDir = st.isDirectory();
+  } catch {
+    return; // nested undici missing — nothing to replace
+  }
+  if (!nestedIsSymlink && !nestedIsDir) return;
+  // Runtime symlink mode is idempotent: an existing symlink means already fixed.
+  if (nestedIsSymlink && !copy) return;
+  if (!fs.existsSync(topUndici)) return;
+
+  try {
+    const nestedVersion = require(path.join(nestedUndici, "package.json")).version;
+    const topVersion = require(path.join(topUndici, "package.json")).version;
+    // Already a real dir with the correct version → nothing to do.
+    if (!nestedIsSymlink && nestedVersion === topVersion) return;
 
-      if (nestedVersion !== topVersion) {
-        console.log(
-          `[pi-web] Replacing pi-coding-agent's undici@${nestedVersion} ` +
-            `→ symlink to undici@${topVersion}`,
-        );
-        fs.rmSync(nestedUndici, { recursive: true, force: true });
+    fs.rmSync(nestedUndici, { recursive: true, force: true });
 
-        const rel = path.relative(path.dirname(nestedUndici), topUndici);
-        fs.symlinkSync(
-          rel,
-          nestedUndici,
-          process.platform === "win32" ? "junction" : "dir",
-        );
-      }
-    } catch (err) {
-      console.warn("[pi-web] Symlink fix skipped:", err.message);
+    if (copy) {
+      fs.cpSync(topUndici, nestedUndici, { recursive: true });
+      console.log(
+        `[pi-web] Copied undici@${topVersion} into pi-coding-agent (solidified)`,
+      );
+    } else {
+      const rel = path.relative(path.dirname(nestedUndici), topUndici);
+      fs.symlinkSync(
+        rel,
+        nestedUndici,
+        process.platform === "win32" ? "junction" : "dir",
+      );
+      console.log(
+        `[pi-web] Replacing pi-coding-agent's undici@${nestedVersion} ` +
+          `→ symlink to undici@${topVersion}`,
+      );
     }
+  } catch (err) {
+    console.warn("[pi-web] undici fix skipped:", err.message);
   }
 }
 
-module.exports = { applyUndiciFix };
+/**
+ * Build-time solidification for packaging: physically copy the fixed undici
+ * into the standalone output so the read-only installed bundle needs no
+ * runtime writes and contains no symlinks.
+ * @param {string} [rootDir] standalone root (contains node_modules/)
+ * @param {string} [topUndiciDir] path to the fixed undici to copy in
+ */
+function solidifyUndiciFix(rootDir = path.join(__dirname, ".."), topUndiciDir) {
+  const source = topUndiciDir || path.join(rootDir, "node_modules", "undici");
+  if (!fs.existsSync(source)) return; // nothing to copy from
+  applyUndiciFix(rootDir, { copy: true, topUndici: source });
+}
+
+module.exports = { applyUndiciFix, solidifyUndiciFix };
 
 if (require.main === module) {
   applyUndiciFix();

package/bin/with-memory-limit.js

@@ -5,10 +5,10 @@ const { spawnSync } = require("child_process");
 
 /** Keep the V8 heap from ballooning during local runs. Next.js dev auto-sets
  *  --max-old-space-size to 50% of physical RAM (12GB on a 24GB machine)
- *  unless the user already capped it. A 4GB cap makes GC engage earlier and
+ *  unless the user already capped it. A 3GB cap makes GC engage earlier and
  *  bounds RSS growth for both dev and production start.
  */
-const MEMORY_LIMIT_MB = 4096;
+const MEMORY_LIMIT_MB = 3072;
 const SEMI_SPACE_MB = 128;
 
 /**

package/next.config.ts

@@ -13,6 +13,9 @@ try {
 } catch { /* package not found, use default */ }
 
 const nextConfig: NextConfig = {
+  // M1 内置打包：产出 .next/standalone（自包含 server.js + 最小 node_modules），
+  // 桌面壳随包拉起 node <standalone/server.js>，免本机 npm/CLI。
+  output: "standalone",
   allowedDevOrigins,
   devIndicators: false,
   // proxy.ts clones the request body for /api/*; the Next.js default of

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qt4798/pi-web",
-  "version": "0.10.1",
+  "version": "0.10.5",
   "description": "Web workspace for the pi coding agent",
   "homepage": "https://github.com/t479842598/pi-web-QT#readme",
   "repository": {
@@ -22,6 +22,7 @@
     ".next",
     "!.next/cache",
     "!.next/dev",
+    "!.next/standalone",
     "!.next/**/*.js.map",
     "lib/theme",
     "public",
@@ -31,7 +32,8 @@
   "scripts": {
     "dev": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 127.0.0.1 -p 0 --turbopack",
     "dev:lan": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 0.0.0.0 -p 0 --turbopack",
-    "build": "env -u TURBOPACK next build --webpack",
+    "build": "env -u TURBOPACK -u __NEXT_PRIVATE_STANDALONE_CONFIG next build --webpack",
+    "bundle:backend": "node scripts/bundle-backend.mjs",
     "start": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next start -H 127.0.0.1 -p 0",
     "start:lan": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next start -H 0.0.0.0 -p 0",
     "lint": "eslint .",