@qt4798/pi-web 0.18.14 → 0.18.16

package/.next/types/routes.d.ts

@@ -2,7 +2,7 @@
 // Do not edit this file manually
 
 type AppRoutes = "/" | "/login"
-type AppRouteHandlerRoutes = "/api/agent/[id]" | "/api/agent/[id]/bash-output" | "/api/agent/[id]/events" | "/api/agent/[id]/lease" | "/api/agent/new" | "/api/agent/running" | "/api/agent/running/events" | "/api/app-update" | "/api/auth/api-key/[provider]" | "/api/auth/combined" | "/api/auth/login/[provider]" | "/api/auth/logout/[provider]" | "/api/auth/providers" | "/api/backup/export" | "/api/backup/import" | "/api/cwd/browse" | "/api/cwd/validate" | "/api/default-cwd" | "/api/events" | "/api/features" | "/api/file-index" | "/api/files/[...path]" | "/api/git/diff" | "/api/git/push" | "/api/git/stash" | "/api/git/status" | "/api/home" | "/api/import/discover" | "/api/import/execute" | "/api/import/status" | "/api/logs" | "/api/mcp" | "/api/mcp/restart" | "/api/models" | "/api/models-config" | "/api/models-config/builtin" | "/api/models-config/catalog" | "/api/models-config/discover" | "/api/models-config/test" | "/api/models/enabled" | "/api/models/refresh" | "/api/modes" | "/api/plugins" | "/api/plugins/check" | "/api/project-aliases" | "/api/project-trust" | "/api/projects/visibility" | "/api/provider-usage/query" | "/api/proxy" | "/api/proxy/test" | "/api/sessions" | "/api/sessions/[id]" | "/api/sessions/[id]/auto-name" | "/api/sessions/[id]/context" | "/api/sessions/[id]/details" | "/api/sessions/[id]/entries/[entryId]/thinking" | "/api/sessions/[id]/entries/[entryId]/tool-result-image" | "/api/sessions/[id]/export" | "/api/sessions/[id]/queue-recovery" | "/api/sessions/[id]/state" | "/api/sessions/search" | "/api/settings/title-model" | "/api/skills" | "/api/skills/check" | "/api/skills/install" | "/api/skills/search" | "/api/skills/update" | "/api/snippets" | "/api/snippets/[id]" | "/api/subagents/[id]" | "/api/subagents/profiles" | "/api/subagents/settings" | "/api/tasks" | "/api/tasks/[id]" | "/api/tasks/[id]/[action]" | "/api/tasks/[id]/changed-files" | "/api/tasks/[id]/diff" | "/api/tasks/[id]/events" | "/api/tasks/batch" | "/api/tasks/events" | "/api/tasks/settings" | "/api/tasks/templates" | "/api/terminal" | "/api/terminal/[id]" | "/api/terminal/[id]/events" | "/api/themes" | "/api/themes/[name]" | "/api/tools/extension-tools" | "/api/tools/settings" | "/api/usage" | "/api/vision-config" | "/api/web-auth" | "/api/worktrees"
+type AppRouteHandlerRoutes = "/api/agent/[id]" | "/api/agent/[id]/bash-output" | "/api/agent/[id]/events" | "/api/agent/[id]/lease" | "/api/agent/new" | "/api/agent/running" | "/api/agent/running/events" | "/api/app-update" | "/api/auth/api-key/[provider]" | "/api/auth/combined" | "/api/auth/login/[provider]" | "/api/auth/logout/[provider]" | "/api/auth/providers" | "/api/backup/export" | "/api/backup/import" | "/api/cwd/browse" | "/api/cwd/validate" | "/api/default-cwd" | "/api/events" | "/api/features" | "/api/file-index" | "/api/files/[...path]" | "/api/git/diff" | "/api/git/push" | "/api/git/stash" | "/api/git/status" | "/api/home" | "/api/import/discover" | "/api/import/execute" | "/api/import/status" | "/api/logs" | "/api/mcp" | "/api/mcp/restart" | "/api/models" | "/api/models-config" | "/api/models-config/builtin" | "/api/models-config/catalog" | "/api/models-config/discover" | "/api/models-config/import" | "/api/models-config/test" | "/api/models/enabled" | "/api/models/refresh" | "/api/modes" | "/api/plugins" | "/api/plugins/check" | "/api/project-aliases" | "/api/project-trust" | "/api/projects/visibility" | "/api/provider-usage/query" | "/api/proxy" | "/api/proxy/test" | "/api/sessions" | "/api/sessions/[id]" | "/api/sessions/[id]/auto-name" | "/api/sessions/[id]/context" | "/api/sessions/[id]/details" | "/api/sessions/[id]/entries/[entryId]/thinking" | "/api/sessions/[id]/entries/[entryId]/tool-result-image" | "/api/sessions/[id]/export" | "/api/sessions/[id]/queue-recovery" | "/api/sessions/[id]/state" | "/api/sessions/search" | "/api/settings/appearance" | "/api/settings/title-model" | "/api/skills" | "/api/skills/check" | "/api/skills/install" | "/api/skills/search" | "/api/skills/update" | "/api/snippets" | "/api/snippets/[id]" | "/api/subagents/[id]" | "/api/subagents/profiles" | "/api/subagents/settings" | "/api/tasks" | "/api/tasks/[id]" | "/api/tasks/[id]/[action]" | "/api/tasks/[id]/changed-files" | "/api/tasks/[id]/diff" | "/api/tasks/[id]/events" | "/api/tasks/batch" | "/api/tasks/events" | "/api/tasks/settings" | "/api/tasks/templates" | "/api/terminal" | "/api/terminal/[id]" | "/api/terminal/[id]/events" | "/api/themes" | "/api/themes/[name]" | "/api/tools/extension-tools" | "/api/tools/settings" | "/api/usage" | "/api/vision-config" | "/api/web-auth" | "/api/worktrees"
 type PageRoutes = never
 type LayoutRoutes = "/"
 type RedirectRoutes = never
@@ -50,6 +50,7 @@ interface ParamMap {
   "/api/models-config/builtin": {}
   "/api/models-config/catalog": {}
   "/api/models-config/discover": {}
+  "/api/models-config/import": {}
   "/api/models-config/test": {}
   "/api/models/enabled": {}
   "/api/models/refresh": {}
@@ -73,6 +74,7 @@ interface ParamMap {
   "/api/sessions/[id]/queue-recovery": { "id": string; }
   "/api/sessions/[id]/state": { "id": string; }
   "/api/sessions/search": {}
+  "/api/settings/appearance": {}
   "/api/settings/title-model": {}
   "/api/skills": {}
   "/api/skills/check": {}

package/.next/types/validator.ts

@@ -389,6 +389,15 @@ type RouteHandlerConfig<Route extends AppRouteHandlerRoutes = AppRouteHandlerRou
   type __Unused = __Check
 }
 
+// Validate ../../app/api/models-config/import/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/models-config/import">> = Specific
+  const handler = {} as typeof import("../../app/api/models-config/import/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
 // Validate ../../app/api/models-config/route.ts
 {
   type __IsExpected<Specific extends RouteHandlerConfig<"/api/models-config">> = Specific
@@ -614,6 +623,15 @@ type RouteHandlerConfig<Route extends AppRouteHandlerRoutes = AppRouteHandlerRou
   type __Unused = __Check
 }
 
+// Validate ../../app/api/settings/appearance/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/settings/appearance">> = Specific
+  const handler = {} as typeof import("../../app/api/settings/appearance/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
 // Validate ../../app/api/settings/title-model/route.ts
 {
   type __IsExpected<Specific extends RouteHandlerConfig<"/api/settings/title-model">> = Specific

package/bin/pi-web.js

@@ -13,6 +13,8 @@ const os = require("os");
 const { parseLaunchOptions, assessLanExposure } = require("./pi-web-options");
 // eslint-disable-next-line @typescript-eslint/no-require-imports
 const { wireChildProcessLifecycle } = require("./process-lifecycle");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const { rotatePreviewSecrets, getRotationWarning } = require("./rotate-preview-secrets");
 
 // Apply the undici CVE fix (formerly a postinstall hook). Running it here —
 // before the pi agent's undici can be loaded — keeps installs quiet under
@@ -134,6 +136,14 @@ if (!fs.existsSync(nextDir)) {
   process.exit(1);
 }
 
+// Replace the published preview-mode secrets with fresh random values so the
+// previewModeId baked into the npm tarball cannot be used to skip the proxy
+// (via the x-prerender-revalidate header). Must happen before `next start`.
+const rotation = rotatePreviewSecrets(nextDir);
+if (!rotation.ok) {
+  console.warn(getRotationWarning(rotation.reason));
+}
+
 const lanExposure = assessLanExposure(hostname);
 if (lanExposure === "warn-plaintext") {
   console.warn("Pi Web is exposed beyond loopback. HTTP Basic Auth does not encrypt credentials; use HTTPS or a trusted VPN.");

package/bin/rotate-preview-secrets.js

@@ -0,0 +1,105 @@
+"use strict";
+
+// The published npm tarball ships `.next/prerender-manifest.json`, whose
+// `preview` block holds the build's preview-mode secrets. One of them,
+// `previewModeId`, is the value Next compares against the `x-prerender-revalidate`
+// request header: when they match, Next treats the request as an on-demand
+// revalidation and skips middleware/proxy entirely (see next-server.js
+// `runMiddleware`). Because the value is baked into every published version, an
+// attacker who reads the tarball can send that header and bypass `proxy.ts` —
+// the central password gate and the Host/Origin/Fetch-Metadata checks.
+//
+// `next start` reads these secrets only from this file (there is no runtime env
+// override) and never regenerates them, so we rewrite the three preview secrets
+// with fresh random values before launching Next. That makes the published
+// values useless and unique per launch. Done at startup rather than in a
+// postinstall hook so it runs on the guaranteed launch path and cannot be
+// skipped with `--ignore-scripts`.
+
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const crypto = require("crypto");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const fs = require("fs");
+// eslint-disable-next-line @typescript-eslint/no-require-imports
+const path = require("path");
+
+const PRERENDER_MANIFEST = "prerender-manifest.json";
+
+function freshPreviewSecrets() {
+  return {
+    // Lengths mirror what Next generates at build time.
+    previewModeId: crypto.randomBytes(16).toString("hex"),
+    previewModeSigningKey: crypto.randomBytes(32).toString("hex"),
+    previewModeEncryptionKey: crypto.randomBytes(32).toString("hex"),
+  };
+}
+
+/**
+ * Rewrite the preview-mode secrets in `.next/prerender-manifest.json` with fresh
+ * random values. Never throws: returns a status the caller can surface so a
+ * read-only install (where the rewrite cannot happen) is visible rather than a
+ * silent bypass.
+ *
+ * @param {string} nextDir absolute path to the package's `.next` directory
+ * @returns {{ ok: boolean, reason?: string, error?: Error }}
+ */
+function rotatePreviewSecrets(nextDir) {
+  const manifestPath = path.join(nextDir, PRERENDER_MANIFEST);
+
+  let manifest;
+  try {
+    manifest = JSON.parse(fs.readFileSync(manifestPath, "utf8"));
+  } catch (error) {
+    if (error && error.code === "ENOENT") {
+      return { ok: false, reason: "missing" };
+    }
+    return { ok: false, reason: "unreadable", error };
+  }
+
+  if (!manifest || typeof manifest !== "object" || typeof manifest.preview !== "object") {
+    return { ok: false, reason: "unexpected-shape" };
+  }
+
+  manifest.preview = { ...manifest.preview, ...freshPreviewSecrets() };
+
+  // Write to a sibling temp file and rename so a concurrent `next start` never
+  // reads a half-written manifest.
+  const tempPath = path.join(nextDir, `${PRERENDER_MANIFEST}.${process.pid}.tmp`);
+  try {
+    fs.writeFileSync(tempPath, JSON.stringify(manifest));
+    fs.renameSync(tempPath, manifestPath);
+  } catch (error) {
+    try {
+      fs.rmSync(tempPath, { force: true });
+    } catch {
+      // Best effort: leaving a stray temp file is harmless.
+    }
+    return { ok: false, reason: "unwritable", error };
+  }
+
+  return { ok: true };
+}
+
+function getRotationWarning(reason) {
+  const detail =
+    reason === "unwritable"
+      ? "the install directory is not writable"
+      : reason === "missing"
+        ? "its prerender manifest is missing"
+        : reason === "unreadable"
+          ? "its prerender manifest could not be read"
+          : "its prerender manifest has an unexpected format";
+  return [
+    `Warning: could not rotate pi-web's preview-mode secrets because ${detail}.`,
+    "This instance keeps the published preview id, so a client that knows it can",
+    "bypass the proxy's authentication and Host/Origin checks via the",
+    "x-prerender-revalidate header. Run from a writable install, or restrict",
+    "network access to this instance.",
+  ].join("\n");
+}
+
+module.exports = {
+  PRERENDER_MANIFEST,
+  rotatePreviewSecrets,
+  getRotationWarning,
+};

package/next.config.ts

@@ -18,6 +18,11 @@ try {
   piVersion = (JSON.parse(readFileSync(piPkgPath, "utf8")) as { version: string }).version;
 } catch { /* package not found, use default */ }
 
+// mdast-util-gfm-autolink-literal (remark-gfm) ships a RegExp lookbehind that
+// Safari parses only from 16.4, which blanked `/` on iOS 16.2 (#753). The loader
+// swaps it for an equivalent built at runtime; both bundlers must run it.
+const gfmAutolinkEmailLoader = join(configDir, "lib/gfm-autolink-email-loader.cjs");
+
 const nextConfig: NextConfig = {
   // M1 内置打包：产出 .next/standalone（自包含 server.js + 最小 node_modules），
   // 桌面壳随包拉起 node <standalone/server.js>，免本机 npm/CLI。
@@ -33,6 +38,22 @@ const nextConfig: NextConfig = {
   // next/image is only used for the static logo, so the /_next/image optimizer
   // (and its sharp/libheif attack surface, see GHSA-2xp9-vwfh-vxw4) is not needed.
   images: { unoptimized: true },
+  // `next dev` runs Turbopack and `npm run build` runs webpack.
+  turbopack: {
+    rules: {
+      "**/mdast-util-gfm-autolink-literal/lib/index.js": { loaders: [gfmAutolinkEmailLoader] },
+    },
+  },
+  webpack(config) {
+    config.module.rules.push({
+      test: /[\\/]mdast-util-gfm-autolink-literal[\\/]lib[\\/]index\.js$/,
+      loader: gfmAutolinkEmailLoader,
+    });
+    return config;
+  },
+  // Node modules keep the syntax they ship unless listed here, and mermaid's
+  // lazy diagram chunks are full of class `static {}` blocks (#753).
+  transpilePackages: ["mermaid", "@mermaid-js/parser"],
   serverExternalPackages: [
     "@earendil-works/pi-agent-core",
     "@earendil-works/pi-coding-agent",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qt4798/pi-web",
-  "version": "0.18.14",
+  "version": "0.18.16",
   "description": "Web workspace for the pi coding agent",
   "homepage": "https://github.com/t479842598/pi-web-QT#readme",
   "repository": {
@@ -29,6 +29,13 @@
     "next.config.ts",
     "package.json"
   ],
+  "browserslist": [
+    "chrome 111",
+    "edge 111",
+    "firefox 111",
+    "safari 16.2",
+    "ios_saf 16.2"
+  ],
   "scripts": {
     "dev": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js nextDev",
     "dev:lan": "node bin/fix-pi-agent-undici.js && node bin/with-memory-limit.js node_modules/.bin/next dev -H 0.0.0.0 -p 0 --turbopack",
@@ -77,6 +84,7 @@
     "rehype-katex": "^7.0.1",
     "rehype-raw": "^7.0.0",
     "rehype-sanitize": "^6.0.0",
+    "remark-cjk-friendly": "^2.3.2",
     "remark-frontmatter": "^5.0.0",
     "remark-gfm": "^4.0.1",
     "remark-math": "^6.0.0",