@qt4798/pi-web 0.18.12 → 0.18.14

package/.next/types/app/api/tasks/[id]/[action]/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/[id]/[action]/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/[id]/[action]/route.ts
 import * as entry from '../../../../../../../app/api/tasks/[id]/[action]/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/[id]/changed-files/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/[id]/changed-files/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/[id]/changed-files/route.ts
 import * as entry from '../../../../../../../app/api/tasks/[id]/changed-files/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/[id]/diff/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/[id]/diff/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/[id]/diff/route.ts
 import * as entry from '../../../../../../../app/api/tasks/[id]/diff/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/[id]/events/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/[id]/events/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/[id]/events/route.ts
 import * as entry from '../../../../../../../app/api/tasks/[id]/events/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/[id]/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/[id]/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/[id]/route.ts
 import * as entry from '../../../../../../app/api/tasks/[id]/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/batch/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/batch/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/batch/route.ts
 import * as entry from '../../../../../../app/api/tasks/batch/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/events/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/events/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/events/route.ts
 import * as entry from '../../../../../../app/api/tasks/events/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/route.ts
 import * as entry from '../../../../../app/api/tasks/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/settings/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/settings/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/settings/route.ts
 import * as entry from '../../../../../../app/api/tasks/settings/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tasks/templates/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tasks/templates/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tasks/templates/route.ts
 import * as entry from '../../../../../../app/api/tasks/templates/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/terminal/[id]/events/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/terminal/[id]/events/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/terminal/[id]/events/route.ts
 import * as entry from '../../../../../../../app/api/terminal/[id]/events/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/terminal/[id]/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/terminal/[id]/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/terminal/[id]/route.ts
 import * as entry from '../../../../../../app/api/terminal/[id]/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/terminal/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/terminal/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/terminal/route.ts
 import * as entry from '../../../../../app/api/terminal/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/themes/[name]/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/themes/[name]/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/themes/[name]/route.ts
 import * as entry from '../../../../../../app/api/themes/[name]/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/themes/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/themes/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/themes/route.ts
 import * as entry from '../../../../../app/api/themes/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tools/extension-tools/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tools/extension-tools/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tools/extension-tools/route.ts
 import * as entry from '../../../../../../app/api/tools/extension-tools/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/tools/settings/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/tools/settings/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/tools/settings/route.ts
 import * as entry from '../../../../../../app/api/tools/settings/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/usage/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/usage/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/usage/route.ts
 import * as entry from '../../../../../app/api/usage/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/vision-config/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/vision-config/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/vision-config/route.ts
 import * as entry from '../../../../../app/api/vision-config/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/web-auth/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/web-auth/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/web-auth/route.ts
 import * as entry from '../../../../../app/api/web-auth/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/api/worktrees/route.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/worktrees/route.ts
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/api/worktrees/route.ts
 import * as entry from '../../../../../app/api/worktrees/route.js'
 import type { NextRequest } from 'next/server.js'
 

package/.next/types/app/layout.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/layout.tsx
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/layout.tsx
 import * as entry from '../../../app/layout.js'
 import type { ResolvingMetadata, ResolvingViewport } from 'next/dist/lib/metadata/types/metadata-interface.js'
 

package/.next/types/app/login/page.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/login/page.tsx
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/login/page.tsx
 import * as entry from '../../../../app/login/page.js'
 import type { ResolvingMetadata, ResolvingViewport } from 'next/dist/lib/metadata/types/metadata-interface.js'
 

package/.next/types/app/page.ts

@@ -1,4 +1,4 @@
-// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/page.tsx
+// File: /Users/qingtang/.pi-desktop/scratch/d4c3397a-8e9a-4118-9f12-a90626fac237/release-build/app/page.tsx
 import * as entry from '../../../app/page.js'
 import type { ResolvingMetadata, ResolvingViewport } from 'next/dist/lib/metadata/types/metadata-interface.js'
 

package/bin/fix-pi-agent-undici.js

@@ -73,8 +73,10 @@ function applyUndiciFix(rootDir = path.join(__dirname, ".."), opts = {}) {
   if (!fs.existsSync(topUndici)) return;
 
   try {
-    const nestedVersion = require(path.join(nestedUndici, "package.json")).version;
-    const topVersion = require(path.join(topUndici, "package.json")).version;
+    // Read the manifests as data (never require() a path built from config —
+    // requiring would execute module code from an externally-resolved location).
+    const nestedVersion = JSON.parse(fs.readFileSync(path.join(nestedUndici, "package.json"), "utf8")).version;
+    const topVersion = JSON.parse(fs.readFileSync(path.join(topUndici, "package.json"), "utf8")).version;
     // Already a real dir with the correct version → nothing to do.
     if (!nestedIsSymlink && nestedVersion === topVersion) return;
 

package/bin/memory-watchdog.js

@@ -36,7 +36,6 @@ function resolveConfig(env) {
   if (!Number.isFinite(port) || port <= 0) return null;
   return {
     port,
-    hostname: env.PI_WEB_HOSTNAME || "127.0.0.1",
     restartMb: parsePositiveInt(rawRestart, DEFAULT_RESTART_MB, 1),
     checkMinutes: parsePositiveInt(env.PI_WEB_RSS_CHECK_MINUTES, DEFAULT_CHECK_MINUTES, 1),
   };
@@ -52,7 +51,17 @@ function basicAuthHeaders(env) {
 }
 
 async function isServerIdle(config, env) {
-  const res = await fetch(`http://${config.hostname}:${config.port}/api/agent/running`, {
+  // Literal loopback origin: the watchdog self-checks THIS process, which
+  // always answers on 127.0.0.1 regardless of the LAN bind address (-H), so
+  // the probe target is never derived from the environment. Only the port is
+  // injected, as a validated numeric URL component.
+  const probeUrl = new URL("/api/agent/running", "http://127.0.0.1");
+  const port = Number.isFinite(config.port) && config.port >= 1024 && config.port <= 65535
+    ? config.port
+    : 0;
+  if (!port) return null;
+  probeUrl.port = String(port);
+  const res = await fetch(probeUrl, {
     headers: basicAuthHeaders(env),
     signal: AbortSignal.timeout(RUNNING_CHECK_TIMEOUT_MS),
   });

package/bin/pi-web.js

@@ -182,7 +182,9 @@ child.stdout.on("data", (chunk) => {
     if (isWindows) {
       // `start` is a cmd.exe built-in, so invoke cmd directly. The empty
       // title argument is required by `start` before the target URL.
-      opener = spawn(process.env.ComSpec || "cmd.exe", ["/c", "start", "", url], {
+      // Literal "cmd.exe" (not %ComSpec%): the system shell is a fixed
+      // program, never taken from the environment.
+      opener = spawn("cmd.exe", ["/c", "start", "", url], {
         stdio: "ignore",
         detached: true,
       });

package/bin/with-memory-limit.js

@@ -6,64 +6,45 @@ const { spawnSync } = require("child_process");
 /** Keep the V8 heap from ballooning during local runs. Next.js dev auto-sets
  *  --max-old-space-size to 50% of physical RAM (12GB on a 24GB machine)
  *  unless the user already capped it. A 3GB cap makes GC engage earlier and
- *  bounds RSS growth for both dev and production start.
- */
-const MEMORY_LIMIT_MB = 3072;
-const SEMI_SPACE_MB = 128;
-
-/**
- * Merge a heap cap into an existing NODE_OPTIONS value. If the user already
- * set --max-old-space-size explicitly, theirs wins (we only add the semi-space
- * hint); otherwise we append both flags so V8 and Next.js see a hard cap.
+ *  bounds RSS growth for both dev and production start. Also consumed by
+ *  bin/pi-web.js to seed NODE_OPTIONS before spawning the server.
  */
 function mergedNodeOptions(existing) {
   const base = existing ?? "";
   const hasHeapLimit = /(^|\s)--max-old-space-size=\d+/.test(base);
-  const flags = hasHeapLimit ? [] : [`--max-old-space-size=${MEMORY_LIMIT_MB}`, `--max-semi-space-size=${SEMI_SPACE_MB}`];
+  const flags = hasHeapLimit ? [] : [`--max-old-space-size=3072`, `--max-semi-space-size=128`];
   return [...flags, base].filter(Boolean).join(" ");
 }
 
-module.exports = { mergedNodeOptions, MEMORY_LIMIT_MB, SEMI_SPACE_MB };
+module.exports = { mergedNodeOptions };
+
+// CLI: with-memory-limit <task> — runs a fixed Next.js task with the capped
+// heap. Each task is a fully literal spawn (constant program, constant argv,
+// relative to the package root that npm scripts guarantee as cwd), so nothing
+// from the command line or environment ever reaches a spawn. The heap cap
+// rides as literal V8 flags in argv, which take precedence over any inherited
+// NODE_OPTIONS for this process tree.
 
-// CLI: with-memory-limit <cmd> [args...] — runs cmd with the capped heap.
-// Child processes spawned by cmd inherit NODE_OPTIONS, so next dev / next
-// start and their next-server children all see the same limit.
 if (require.main === module) {
-  const [cmd, ...args] = process.argv.slice(2);
-  if (!cmd) {
-    console.error("usage: node bin/with-memory-limit.js <cmd> [args...]");
-    process.exit(1);
-  }
-  const env = { ...process.env, NODE_OPTIONS: mergedNodeOptions(process.env.NODE_OPTIONS) };
+  const [taskName] = process.argv.slice(2);
   let result;
-  if (process.platform === "win32") {
-    // spawnSync cannot execute npm's extensionless .bin shims on Windows
-    // (ENOENT), and .cmd shims need cmd.exe (EINVAL since the Node CVE fix).
-    // Prefer the .cmd/.bat sibling and run it through %ComSpec%.
-    const fs = require("fs");
-    let target = cmd;
-    if (!/\.(exe|cmd|bat)$/i.test(target)) {
-      for (const ext of [".cmd", ".bat"]) {
-        if (fs.existsSync(target + ext)) {
-          target += ext;
-          break;
-        }
-      }
-    }
-    if (/\.(cmd|bat)$/i.test(target)) {
-      // cmd.exe parses `/` as a switch character, so hand it a native path.
-      const native = require("path").win32.normalize(target);
-      const quote = (a) => (/["&<>^|()%!?\s]/.test(a) ? `"${a}"` : a);
-      const line = [native, ...args].map(quote).join(" ");
-      result = spawnSync(process.env.ComSpec || "cmd.exe", ["/d", "/s", "/c", line], {
-        stdio: "inherit",
-        env,
-      });
-    } else {
-      result = spawnSync(target, args, { stdio: "inherit", env });
-    }
+  if (taskName === "nextDev") {
+    result = spawnSync("node", [
+      "--max-old-space-size=3072",
+      "--max-semi-space-size=128",
+      "node_modules/next/dist/bin/next",
+      "dev", "-H", "127.0.0.1", "-p", "0", "--turbopack",
+    ], { stdio: "inherit" });
+  } else if (taskName === "nextStart") {
+    result = spawnSync("node", [
+      "--max-old-space-size=3072",
+      "--max-semi-space-size=128",
+      "node_modules/next/dist/bin/next",
+      "start", "-H", "127.0.0.1", "-p", "0",
+    ], { stdio: "inherit" });
   } else {
-    result = spawnSync(cmd, args, { stdio: "inherit", env });
+    console.error("usage: node bin/with-memory-limit.js nextDev|nextStart");
+    process.exit(1);
   }
   if (result.error) {
     console.error(`with-memory-limit: ${result.error.message}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qt4798/pi-web",
-  "version": "0.18.12",
+  "version": "0.18.14",
   "description": "Web workspace for the pi coding agent",
   "homepage": "https://github.com/t479842598/pi-web-QT#readme",
   "repository": {
@@ -30,14 +30,14 @@
     "package.json"
   ],
   "scripts": {
-    "dev": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 127.0.0.1 -p 0 --turbopack",
+    "dev": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js nextDev",
     "dev:lan": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 0.0.0.0 -p 0 --turbopack",
     "postinstall": "node bin/prepare-terminal.js",
     "theme:css": "node scripts/generate-theme-css.mjs",
     "prebuild": "node scripts/generate-theme-css.mjs",
     "build": "env -u TURBOPACK -u __NEXT_PRIVATE_STANDALONE_CONFIG next build --webpack",
     "bundle:backend": "node scripts/bundle-backend.mjs",
-    "start": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next start -H 127.0.0.1 -p 0",
+    "start": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js nextStart",
     "start:lan": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next start -H 0.0.0.0 -p 0",
     "lint": "eslint .",
     "release": "npm version patch --no-git-tag-version && npm run build && npm publish --access public",

package/.next/server/chunks/7915.js

@@ -1,2 +0,0 @@
-exports.id=7915,exports.ids=[7915],exports.modules={8102:(a,b,c)=>{"use strict";c.d(b,{$:()=>g});var d=c(55511),e=c(29021),f=c(33873);function g(a,b){let c=(0,f.dirname)(a),g=(0,f.join)(c,`.${(0,f.basename)(a)}-${(0,d.randomUUID)()}.tmp`),h=!1;try{(0,e.writeFileSync)(g,b,{encoding:"utf8",flag:"wx",mode:384,flush:!0}),(0,e.renameSync)(g,a)}catch(a){throw h=!0,a}finally{try{(0,e.unlinkSync)(g)}catch(a){if("ENOENT"!==a.code&&!h)throw a}}}},39006:a=>{"use strict";a.exports=JSON.parse('{"name":"@qt4798/pi-web","version":"0.18.12","description":"Web workspace for the pi coding agent","homepage":"https://github.com/t479842598/pi-web-QT#readme","repository":{"type":"git","url":"git+https://github.com/t479842598/pi-web-QT.git"},"bugs":{"url":"https://github.com/t479842598/pi-web-QT/issues"},"license":"MIT","engines":{"node":">=22.19.0"},"bin":{"pi-web":"bin/pi-web.js"},"files":["bin",".next","!.next/cache","!.next/dev","!.next/standalone","!.next/**/*.js.map","lib/theme","public","next.config.ts","package.json"],"scripts":{"dev":"node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 127.0.0.1 -p 0 --turbopack","dev:lan":"node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 0.0.0.0 -p 0 --turbopack","postinstall":"node bin/prepare-terminal.js","theme:css":"node scripts/generate-theme-css.mjs","prebuild":"node scripts/generate-theme-css.mjs","build":"env -u TURBOPACK -u __NEXT_PRIVATE_STANDALONE_CONFIG next build --webpack","bundle:backend":"node scripts/bundle-backend.mjs","start":"node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next start -H 127.0.0.1 -p 0","start:lan":"node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next start -H 0.0.0.0 -p 0","lint":"eslint .","release":"npm version patch --no-git-tag-version && npm run build && npm publish --access public","test":"node --experimental-strip-types --test $(find app components hooks lib -name \'*.test.mjs\' -print)","test:e2e":"node e2e/run.mjs","test:terminal":"node e2e/terminal.mjs"},"dependencies":{"@earendil-works/pi-agent-core":"0.87.1","@earendil-works/pi-ai":"0.87.1","@earendil-works/pi-coding-agent":"0.87.1","@earendil-works/pi-tui":"0.87.1","@fontsource/ia-writer-quattro":"^5.3.0","@fontsource/lilex":"^5.3.0","@phosphor-icons/react":"^2.1.10","@radix-ui/react-dialog":"^1.1.23","@tanstack/react-virtual":"^3.14.9","@tauri-apps/api":"^2.11.1","@xterm/addon-fit":"0.11.0","@xterm/xterm":"6.0.0","adm-zip":"^0.6.0","ansi_up":"^6.0.6","cmdk":"^1.1.1","js-yaml":"^5.2.3","katex":"^0.16.47","lucide-react":"^1.37.0","mammoth":"^1.12.0","mermaid":"^11.16.1","next":"16.3.6","node-pty":"1.2.0-beta.15","proper-lockfile":"4.1.2","qrcode":"^1.5.4","react":"^19.2.4","react-dom":"^19.2.4","react-markdown":"^10.1.0","react-syntax-highlighter":"^16.1.1","rehype-katex":"^7.0.1","rehype-raw":"^7.0.0","rehype-sanitize":"^6.0.0","remark-frontmatter":"^5.0.0","remark-gfm":"^4.0.1","remark-math":"^6.0.0","semver":"7.8.5","undici":"^8.11.0"},"overrides":{"undici":"^8.11.0","@earendil-works/pi-coding-agent":{"undici":"^8.11.0"},"intersection-observer":"npm:noop2@2.0.0","node-domexception":"npm:@profoundlogic/node-domexception@1.0.2"},"allowScripts":{"@google/genai@1.52.0":true,"protobufjs@7.6.5":true,"sharp@0.34.5":true,"unrs-resolver@1.12.2":true},"devDependencies":{"@resvg/resvg-js":"^2.6.2","@tailwindcss/postcss":"^4.2.2","@types/js-yaml":"^4.0.9","@types/node":"^25","@types/proper-lockfile":"4.1.4","@types/qrcode":"^1.5.6","@types/react":"^19","@types/react-dom":"^19","@types/react-syntax-highlighter":"^15.5.13","@types/semver":"7.8.0","eslint":"^9.39.5","eslint-config-next":"16.3.5","jiti":"^2.7.0","lightningcss":"^1.33.0","playwright":"^1.63.0","postcss":"^8","tailwindcss":"^4.2.2","to-ico":"^1.1.5","typescript":"^5.9.3"}}')},50593:(a,b,c)=>{"use strict";function d(a){return/^[a-zA-Z]:[\\/]/.test(a)||a.startsWith("\\\\")?a.replace(/\\/g,"/"):a}c.d(b,{A0:()=>d})},66544:(a,b,c)=>{"use strict";c.d(b,{E2:()=>l,EN:()=>k});var d=c(77030);function e(a){return(a.startsWith("[")&&a.endsWith("]")?a.slice(1,-1):a).toLowerCase().replace(/\.$/,"")}function f(a){if(!a||/[\s/@\\]/.test(a))return null;try{let b=new URL(`http://${a}`);if(b.username||b.password||"/"!==b.pathname||b.search||b.hash)return null;return e(b.hostname)}catch{return null}}function g(a){if(!a||/[\s/@\\]/.test(a))return null;try{let b=new URL(`http://${a}`);if(b.username||b.password||"/"!==b.pathname||b.search||b.hash)return null;let c=e(b.hostname);return b.port?`${c}:${b.port}`:c}catch{return null}}function h(){return[process.env.PI_WEB_HOSTNAME,...process.env.PI_WEB_ALLOWED_HOSTS?.split(",")??[]].filter(a=>!!a?.trim())}function i(a){try{return new URL(a).origin}catch{return null}}let j=new Set(["POST","PUT","PATCH","DELETE"]);function k(a,b=h()){if(!function(a,b=h()){let c=a.headers.get("host"),g=c?f(c):null;return!!g&&(!!("localhost"===g||g.endsWith(".localhost")||(0,d.isIP)(g))||b.some(a=>{let b;return((b=a?.trim())?(0,d.isIP)(b)?e(b):f(b):null)===g}))}(a,b))return!1;if(function(a){if("GET"!==a.method||"navigate"!==a.headers.get("sec-fetch-mode")||"document"!==a.headers.get("sec-fetch-dest")||"?1"!==a.headers.get("sec-fetch-user"))return!1;try{return/^\/api\/sessions\/[^/]+\/export$/.test(new URL(a.url).pathname)}catch{return!1}}(a))return!0;if(!(a.headers.has("origin")||a.headers.has("sec-fetch-site"))){if(j.has((a.method??"GET").toUpperCase())){let b=a.headers.get("host"),c=b?f(b):null;return null!==c&&!!("localhost"===c||c.endsWith(".localhost")||/^127\./.test(c)||"::1"===c||"[::1]"===c)}return!0}return function(a){let b,c,d;if("cross-site"===a.headers.get("sec-fetch-site"))return!1;let e=a.headers.get("origin");if(!e)return!0;let f=(b=new URL(a.url),(c=a.headers.get("host"))?i(`${b.protocol}//${c}`):null);if(null!==f&&(i(e)===f||function(a,b,c){let d,e;try{d=new URL(a),e=new URL(b)}catch{return!1}if(d.protocol!==e.protocol||d.hostname.toLowerCase()!==e.hostname.toLowerCase())return!1;if(!d.port)return"same-origin"===c;let f=e.port||("https:"===e.protocol?"443":"80");return d.port===f}(e,f,a.headers.get("sec-fetch-site"))))return!0;if("same-origin"!==a.headers.get("sec-fetch-site")||!a.headers.get("x-forwarded-proto"))return!1;let h=a.headers.get("host");if(!h)return!1;try{d=new URL(e).host}catch{return!1}let j=g(d);return null!==j&&j===g(h)}(a)}function l(a){let b=a.headers.get("content-type")?.split(";",1)[0]?.trim().toLowerCase();return"application/json"===b||!!(b?.startsWith("application/")&&b.endsWith("+json"))}},78335:()=>{},89628:(a,b,c)=>{"use strict";c.a(a,async(a,d)=>{try{c.d(b,{DT:()=>y,dH:()=>A,g3:()=>z,jE:()=>v,lz:()=>B,uj:()=>t});var e=c(26106),f=c.n(e),g=c(29021),h=c(21820),i=c(33873),j=c(75430),k=c(50593),l=c(8102),m=a([j]);j=(m.then?(await m)():m)[0];let D="pi-backup",E="${agentDir}",F="${home}";function n(a){if(!(0,g.existsSync)(a))return null;try{let b=JSON.parse((0,g.readFileSync)(a,"utf8"));return null!==b&&"object"==typeof b?b:null}catch{return null}}function o(a){let b=[],c=[""];for(;c.length>0;){let d,e=c.pop(),f=(0,i.join)(a,e);try{d=(0,g.readdirSync)(f)}catch{continue}for(let a of d){let d;if("node_modules"===a||".git"===a)continue;let h=e?`${e}/${a}`:a,j=(0,i.join)(f,a);try{d=(0,g.statSync)(j)}catch{continue}d.isDirectory()?c.push(h):d.isFile()&&b.push(h)}}return b}function p(a){let b=(0,k.A0)((0,j.getAgentDir)()),c=(0,k.A0)((0,h.homedir)());return r(a,a=>{let d=(0,k.A0)(a);return d===b?E:d===c?F:d.startsWith(b+"/")?E+d.slice(b.length):d.startsWith(c+"/")?F+d.slice(c.length):a})}function q(a){let b=(0,j.getAgentDir)(),c=(0,h.homedir)();return r(a,a=>a===E?b:a===F?c:a.startsWith(E+"/")?(0,i.join)(b,...a.slice(E.length+1).split("/")):a.startsWith(F+"/")?(0,i.join)(c,...a.slice(F.length+1).split("/")):a)}function r(a,b){if("string"==typeof a)return b(a);if(Array.isArray(a))return a.map(a=>r(a,b));if(null!==a&&"object"==typeof a){let c={};for(let[d,e]of Object.entries(a))c[d]=r(e,b);return c}return a}function s(a,b,c){a.addFile(`${D}/${b}`,Buffer.isBuffer(c)?c:Buffer.from(c,"utf8"))}function t(a){let b=(0,j.getAgentDir)(),d=new(f()),e={formatVersion:1,createdAt:new Date().toISOString(),...function(){try{return{piWebVersion:c(39006).version??"unknown",piSdkVersion:"unknown"}}catch{return{piWebVersion:"unknown",piSdkVersion:"unknown"}}}(),sourcePlatform:process.platform,includeSecrets:a.includeSecrets,includeSessions:a.includeSessions,files:[],mcpBinScripts:[],localPackages:[],absolutePaths:[],warnings:[]};for(let c of["models.json","auth.json","settings.json","mcp.json","models-store.json","AGENTS.md","APPEND_SYSTEM.md"]){let f=(0,i.join)(b,c);if(!(0,g.existsSync)(f)||"auth.json"===c&&!a.includeSecrets)continue;let h=(0,g.readFileSync)(f,"utf8");if("models.json"!==c||a.includeSecrets){if("settings.json"===c||"mcp.json"===c||"models.json"===c){let a=n(f);a&&(h=JSON.stringify(p(a),null,2))}}else{let a=n(f);a&&(h=JSON.stringify(function(a){let b=a.providers??{},c={};for(let[a,d]of Object.entries(b))c[a]={...d},"string"==typeof c[a].apiKey&&(c[a].apiKey="");return{...a,providers:c}}(a),null,2))}s(d,c,String(h)),e.files.push(`${D}/${c}`)}let h=(0,i.join)(b,"skills");if((0,g.existsSync)(h))for(let a of o(h))d.addFile(`${D}/skills/${a}`,(0,g.readFileSync)((0,i.join)(h,a))),e.files.push(`${D}/skills/${a}`);let l=n((0,i.join)(b,"settings.json"));for(let a of l?.packages??[]){let b="string"==typeof a?a:a?.source;if(!b||b.startsWith("npm:"))continue;let c=(0,k.A0)(b);if((0,i.isAbsolute)(c)&&(0,g.existsSync)(c)){let a=(0,i.basename)(c);for(let b of o(c))d.addFile(`${D}/local-packages/${a}/${b}`,(0,g.readFileSync)((0,i.join)(c,b))),e.files.push(`${D}/local-packages/${a}/${b}`);e.localPackages.push(a)}else e.warnings.push(`Local package skipped (not found or not absolute): ${b}`)}let m=n((0,i.join)(b,"mcp.json")),q=new Set;if(m?.mcpServers)for(let a of Object.values(m.mcpServers))!function a(b,c){if("string"==typeof b){let a=`${E}/bin/`;if(b.startsWith(a)){let d=b.slice(a.length).split("/")[0];d&&c.add(d)}return}if(Array.isArray(b)){for(let d of b)a(d,c);return}if(null!==b&&"object"==typeof b)for(let d of Object.values(b))a(d,c)}(p(a),q);for(let a of q){let c=(0,i.join)(b,"bin",a);(0,g.existsSync)(c)&&(0,g.statSync)(c).isFile()?(d.addFile(`${D}/bin/${a}`,(0,g.readFileSync)(c)),e.files.push(`${D}/bin/${a}`),e.mcpBinScripts.push(a)):e.warnings.push(`MCP bin script referenced but missing: ${a}`)}if(a.includeSessions){let a=(0,i.join)(b,"sessions");if((0,g.existsSync)(a))for(let b of o(a))d.addFile(`${D}/sessions/${b}`,(0,g.readFileSync)((0,i.join)(a,b))),e.files.push(`${D}/sessions/${b}`)}return s(d,"manifest.json",JSON.stringify(e,null,2)),d.toBuffer()}let G=new Set(["npx","uvx","node","uv","npm","git","python3","python","bun","deno"]);function u(a){let b=a.toString("utf8",0,256).split(/\r?\n/,1)[0]??"";return b.startsWith("#!")?b:null}function v(a,b,c){let d=(0,j.getAgentDir)(),e=c??process.platform,f="win32"===e,g=[],h=[];for(let[c,j]of Object.entries(a)){let a,l=q(j),m="string"==typeof l.command?l.command:"",n=Array.isArray(l.args)?l.args.map(String):[],o={command:m,args:n};if(!m){h.push({name:c,original:o,adapted:null,action:"keep",platform:e});continue}let p=function(a,b){if(!a)return"manual";if((0,k.A0)(a).startsWith((0,k.A0)(b)+"/bin/"))return"restore-script";if(a.includes("/")||a.includes("\\")||a.includes(":"))return"keep-with-warning";let c=a.split(/[\s]/)[0];return G.has(c),"keep"}(m,d),r=null;if("restore-script"===p){let j=(0,i.basename)((0,k.A0)(m)),l=b.get(j);if(!l){r=null,a=`bin script ${j} missing from backup`,h.push({name:c,original:o,adapted:r,action:"manual",platform:e,reason:a,installPrompt:C({name:c,original:o,adapted:r,action:"manual",platform:e,reason:a})});continue}if(!w(j)){a=`bin script name rejected (unsafe): ${j}`;let b={name:c,original:o,adapted:null,action:"manual",platform:e,reason:a};h.push({...b,installPrompt:C(b)}),g.push(`${c}: ${a}`);continue}if(!x(l)){a="bin script content rejected (unrecognized shebang)";let b={name:c,original:o,adapted:null,action:"manual",platform:e,reason:a};h.push({...b,installPrompt:C(b)}),g.push(`${c}: ${a}`);continue}if(f){let b=u(l);if(b&&b.includes("node"))r={command:(0,i.join)(d,"bin",`${j}.cmd`),args:n},h.push({name:c,original:o,adapted:r,action:"generate-cmd",platform:e,reason:(0,i.join)(d,"bin",j)});else{a="bash/other shebang wrapper cannot run on Windows; reinstall or adjust manually";let b={name:c,original:o,adapted:null,action:"manual",platform:e,reason:a};h.push({...b,installPrompt:C(b)}),g.push(`${c}: ${a}`)}}else r={command:(0,i.join)(d,"bin",j),args:n},h.push({name:c,original:o,adapted:r,action:"restore-script",platform:e});continue}if("keep-with-warning"===p){r={command:m,args:n},a="absolute path outside agentDir/bin — verify it exists on this machine",h.push({name:c,original:o,adapted:r,action:"keep-with-warning",platform:e,reason:a}),g.push(`${c}: ${a}`);continue}r={command:m,args:n},h.push({name:c,original:o,adapted:r,action:"keep",platform:e})}return{servers:h,warnings:g}}function w(a){return/^[A-Za-z0-9][A-Za-z0-9._-]*$/.test(a)&&!a.includes("..")}function x(a){let b=u(a);if(!b)return!1;let c=b.slice(2).trim().split(/\s+/);if(0===c.length)return!1;let d=c[0],e=d.split("/").pop()??d;return!!["node","bash","sh","python3","python","zsh"].includes(e)||"env"===e&&c.length>1&&["node","bash","sh","python3","python"].includes(c[1].split("/").pop()??"")}function y(a){let b;try{b=new(f())(a)}catch(a){throw Error(`Not a valid zip archive: ${a instanceof Error?a.message:String(a)}`)}let c=b.getEntries(),d=(0,g.mkdtempSync)((0,i.join)((0,h.tmpdir)(),"pi-backup-")),e=(0,i.join)(d,D);(0,g.mkdirSync)(e,{recursive:!0});let j=0,k=0;for(let a of c){if(a.isDirectory)continue;let c=a.entryName.replace(/\\/g,"/");if(!c.startsWith(`${D}/`))throw(0,g.rmSync)(d,{recursive:!0,force:!0}),Error(`Unexpected entry outside ${D}/: ${c}`);let f=(0,i.resolve)(e,c.slice(D.length+1));if(!f.startsWith((0,i.resolve)(e)+i.sep))throw(0,g.rmSync)(d,{recursive:!0,force:!0}),Error(`Path traversal blocked: ${c}`);let h="number"==typeof a.header.size?a.header.size:0;if(j+=h,h>0x20000000||j>0x40000000)throw(0,g.rmSync)(d,{recursive:!0,force:!0}),Error(`Backup archive too large when extracted (entry: ${c})`);(0,g.mkdirSync)((0,i.dirname)(f),{recursive:!0}),b.extractEntryTo(a,(0,i.dirname)(f),!1,!0);let l=(0,g.statSync)(f).size;if(k+=l,l>0x20000000||k>0x40000000)throw(0,g.rmSync)(d,{recursive:!0,force:!0}),Error(`Backup archive too large when extracted (entry: ${c})`)}let l=(0,i.join)(e,"manifest.json");if(!(0,g.existsSync)(l))throw(0,g.rmSync)(d,{recursive:!0,force:!0}),Error("Backup manifest.json missing — not a pi-web backup");let m=n(l);if(!m||1!==m.formatVersion)throw(0,g.rmSync)(d,{recursive:!0,force:!0}),Error(`Unsupported backup format version: ${m?.formatVersion??"unknown"} (expected 1)`);let o=n((0,i.join)(e,"mcp.json"))?.mcpServers??{},p=new Map;for(let a of m.mcpBinScripts??[]){let b=(0,i.join)(e,"bin",a);(0,g.existsSync)(b)&&p.set(a,(0,g.readFileSync)(b))}let q=["core","skills","packages","mcp"];return m.includeSessions&&q.push("sessions"),{manifest:m,tempDir:d,servers:o,binScripts:p,categories:q}}function z(a){(0,g.rmSync)(a.tempDir,{recursive:!0,force:!0})}function A(a,b){let c=(0,j.getAgentDir)(),{manifest:d}=a,e={restored:[],needsRestart:[],manual:[],warnings:[]},f=new Set(b.categories),h=new Set(b.skippedMcpServers),m=b=>{let d=(0,i.join)(c,b),f=(0,i.join)(a.tempDir,D,b);(0,g.existsSync)(f)&&((0,g.mkdirSync)((0,i.dirname)(d),{recursive:!0}),(0,l.$)(d,(0,g.readFileSync)(f,"utf8")),e.restored.push(b))};if(f.has("core"))for(let a of["models.json","auth.json","settings.json","mcp.json","models-store.json","AGENTS.md","APPEND_SYSTEM.md"])("auth.json"!==a||d.includeSecrets)&&(m(a),e.needsRestart.push(a));if(f.has("skills")){let b=(0,i.join)(a.tempDir,D,"skills");if((0,g.existsSync)(b)){for(let a of o(b)){let d=(0,i.join)(c,"skills",a);(0,g.mkdirSync)((0,i.dirname)(d),{recursive:!0}),(0,l.$)(d,(0,g.readFileSync)((0,i.join)(b,a),"utf8"))}e.restored.push("skills/")}}if(f.has("packages")){let b=(0,i.join)(c,"settings.json"),f=n(b)??{},h=f.packages??[],j=d.localPackages??[],m=(0,i.join)(a.tempDir,D,"local-packages");for(let a of j){if(!w(a)){e.warnings.push(`Local package ${a} not restored (unsafe name)`);continue}let b=(0,i.join)(m,a);if(!(0,g.existsSync)(b)){e.warnings.push(`Local package ${a} missing from backup`);continue}let d=(0,i.join)(c,"local-packages",a);for(let a of o(b)){let c=(0,i.join)(d,a);(0,g.mkdirSync)((0,i.dirname)(c),{recursive:!0}),(0,l.$)(c,(0,g.readFileSync)((0,i.join)(b,a),"utf8"))}e.restored.push(`local-packages/${a}`)}let p=!1,q=h.map(a=>{let b="string"==typeof a?a:a?.source;if("string"!=typeof b||b.startsWith("npm:"))return a;let d=(0,i.basename)((0,k.A0)(b));if(j.includes(d)){p=!0;let b=(0,i.join)(c,"local-packages",d);return"string"==typeof a?b:{...a,source:b}}return a});if(p){let a={...f,packages:q};(0,l.$)(b,JSON.stringify(a,null,2)),e.restored.push("settings.json (packages paths)"),e.needsRestart.push("settings.json (packages paths)")}for(let a of h.map(a=>"string"==typeof a?a:a?.source).filter(a=>"string"==typeof a&&a.startsWith("npm:")))e.restored.push(`npm package ${a} (queued for reinstall)`)}if(f.has("mcp")){let b=v(a.servers,a.binScripts);e.warnings.push(...b.warnings);let d=n((0,i.join)(c,"mcp.json"))??{},f={};for(let d of b.servers){if(h.has(d.name))continue;if("manual"===d.action){e.manual.push({server:d.name,message:d.reason??"cannot be adapted automatically"});continue}let b=a.servers[d.name]??{},j=q(b);if(f[d.name]={...j,command:d.adapted?.command??j.command,...d.adapted?{args:d.adapted.args}:{}},"restore-script"===d.action){let b=(0,i.basename)((0,k.A0)(String(d.adapted?.command??""))),f=a.binScripts.get(b);if(f&&w(b)&&x(f)){let a=(0,i.join)(c,"bin",b);(0,g.mkdirSync)((0,i.dirname)(a),{recursive:!0}),(0,l.$)(a,f.toString("utf8"));try{(0,g.chmodSync)(a,493)}catch{}e.restored.push(`bin/${b}`)}else e.warnings.push(`bin script ${b} not restored (unsafe name or content)`)}if("generate-cmd"===d.action){let b=(0,i.basename)((0,k.A0)(String(d.adapted?.command??""))).replace(/\.cmd$/,""),f=a.binScripts.get(b);if(f&&w(b)&&x(f)){let a=(0,i.join)(c,"bin",b);(0,g.mkdirSync)((0,i.dirname)(a),{recursive:!0}),(0,l.$)(a,f.toString("utf8"));let d=(0,i.join)(c,"bin",`${b}.cmd`),h=`%~dp0${b}`;(0,l.$)(d,`@node "${h}" %*\r
-`),e.restored.push(`bin/${b}`,`bin/${b}.cmd`)}else e.warnings.push(`bin script ${b} not restored (unsafe name or content)`)}}(0,l.$)((0,i.join)(c,"mcp.json"),JSON.stringify({...d,mcpServers:f},null,2)),e.restored.push("mcp.json"),e.needsRestart.push("mcp.json")}return{report:e,npmPackages:B(a)}}function B(a){let b=n((0,i.join)(a.tempDir,D,"settings.json"));return(b?.packages??[]).map(a=>"string"==typeof a?a:a?.source).filter(a=>"string"==typeof a&&a.startsWith("npm:"))}function C(a){let b=(0,j.getAgentDir)(),c="win32"===process.platform?"Windows":"darwin"===process.platform?"macOS":"Linux",d=JSON.stringify(a.original,null,2);return[`请在当前环境（${c}）安装 MCP server「${a.name}」。`,"\n## 原始配置（来自备份）\n```json",d,"```\n\n## 统一安装约定",`- 脚本类工具统一安装到 \`${(0,i.join)(b,"bin")}\`（Windows 上同时生成同名 \`.cmd\` 包装）。`,`- npm 类工具统一通过 \`npx <pkg>\` 运行，或安装到 \`${(0,i.join)(b,"npm")}\` 后引用。`,"- 依赖（node/npx/uv 等）统一从 PATH 解析，不要硬编码本机绝对路径。\n- 安装完成后，输出可直接写入 `~/.pi/agent/mcp.json` 的完整 server 配置片段（含 command/args/transport/lifecycle）。\n- 不要修改 mcp.json 中其它 server 的配置。\n\n安装过程中如遇障碍，请说明原因并给出替代方案。"].join("\n")}d()}catch(a){d(a)}})},96487:()=>{}};