@qt4798/pi-web 0.9.17-beta.1 → 0.9.17-beta.3

package/.next/trace-build

@@ -1 +1 @@
-[{"name":"run-webpack","duration":33076860,"timestamp":338145833029,"id":14,"parentId":1,"tags":{},"startTime":1786012165606,"traceId":"93938e70089a0830"},{"name":"run-typescript","duration":5505452,"timestamp":338178911267,"id":883,"parentId":1,"tags":{},"startTime":1786012198682,"traceId":"93938e70089a0830"},{"name":"static-check","duration":1217383,"timestamp":338184428492,"id":886,"parentId":1,"tags":{},"startTime":1786012204199,"traceId":"93938e70089a0830"},{"name":"static-generation","duration":1622781,"timestamp":338185967891,"id":1032,"parentId":1,"tags":{},"startTime":1786012205738,"traceId":"93938e70089a0830"},{"name":"collect-build-traces","duration":14356217,"timestamp":338185647191,"id":1029,"parentId":1,"tags":{},"startTime":1786012205418,"traceId":"93938e70089a0830"},{"name":"telemetry-flush","duration":12,"timestamp":338200014926,"id":1041,"parentId":1,"tags":{},"startTime":1786012219784,"traceId":"93938e70089a0830"},{"name":"next-build","duration":54466965,"timestamp":338145547975,"id":1,"tags":{"buildMode":"default","version":"16.2.12","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1786012165321,"traceId":"93938e70089a0830"}]
+[{"name":"run-webpack","duration":89174945,"timestamp":400130066892,"id":14,"parentId":1,"tags":{},"startTime":1786074151025,"traceId":"93144e710d7dc818"},{"name":"run-typescript","duration":16338980,"timestamp":400219244807,"id":926,"parentId":1,"tags":{},"startTime":1786074240205,"traceId":"93144e710d7dc818"},{"name":"static-check","duration":4724559,"timestamp":400235612204,"id":929,"parentId":1,"tags":{},"startTime":1786074256572,"traceId":"93144e710d7dc818"},{"name":"static-generation","duration":4626174,"timestamp":400241391475,"id":1077,"parentId":1,"tags":{},"startTime":1786074262352,"traceId":"93144e710d7dc818"},{"name":"collect-build-traces","duration":36861527,"timestamp":400240343225,"id":1074,"parentId":1,"tags":{},"startTime":1786074261303,"traceId":"93144e710d7dc818"},{"name":"telemetry-flush","duration":36,"timestamp":400277216062,"id":1086,"parentId":1,"tags":{},"startTime":1786074298177,"traceId":"93144e710d7dc818"},{"name":"next-build","duration":147687381,"timestamp":400129528723,"id":1,"tags":{"buildMode":"default","version":"16.2.12","bundler":"webpack","has-custom-webpack-config":"false","use-build-worker":"true"},"startTime":1786074150487,"traceId":"93144e710d7dc818"}]

package/.next/types/app/api/modes/route.ts

@@ -0,0 +1,351 @@
+// File: /Volumes/1T 原装/项目研发/pi-web-QT/app/api/modes/route.ts
+import * as entry from '../../../../../app/api/modes/route.js'
+import type { NextRequest } from 'next/server.js'
+
+import type { InstantConfigForTypeCheckInternal } from 'next/dist/build/segment-config/app/app-segment-config.js'
+
+type TEntry = typeof import('../../../../../app/api/modes/route.js')
+
+type SegmentParams<T extends Object = any> = T extends Record<string, any>
+  ? { [K in keyof T]: T[K] extends string ? string | string[] | undefined : never }
+  : T
+
+// Check that the entry is a valid entry
+checkFields<Diff<{
+  GET?: Function
+  HEAD?: Function
+  OPTIONS?: Function
+  POST?: Function
+  PUT?: Function
+  DELETE?: Function
+  PATCH?: Function
+  config?: {}
+  generateStaticParams?: Function
+  unstable_instant?: InstantConfigForTypeCheckInternal
+  unstable_dynamicStaleTime?: number
+  revalidate?: RevalidateRange<TEntry> | false
+  dynamic?: 'auto' | 'force-dynamic' | 'error' | 'force-static'
+  dynamicParams?: boolean
+  fetchCache?: 'auto' | 'force-no-store' | 'only-no-store' | 'default-no-store' | 'default-cache' | 'only-cache' | 'force-cache'
+  preferredRegion?: 'auto' | 'global' | 'home' | string | string[]
+  runtime?: 'nodejs' | 'experimental-edge' | 'edge'
+  maxDuration?: number
+  
+}, TEntry, ''>>()
+
+type RouteContext = { params: Promise<SegmentParams> }
+// Check the prop type of the entry function
+if ('GET' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'GET'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'GET'>>
+      },
+      'GET'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'GET'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'GET'>>
+      },
+      'GET'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'GET',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'GET',
+        __return_type__: ReturnType<MaybeField<TEntry, 'GET'>>
+      },
+      'GET'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('HEAD' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'HEAD'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'HEAD'>>
+      },
+      'HEAD'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'HEAD'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'HEAD'>>
+      },
+      'HEAD'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'HEAD',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'HEAD',
+        __return_type__: ReturnType<MaybeField<TEntry, 'HEAD'>>
+      },
+      'HEAD'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('OPTIONS' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'OPTIONS'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'OPTIONS'>>
+      },
+      'OPTIONS'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'OPTIONS'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'OPTIONS'>>
+      },
+      'OPTIONS'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'OPTIONS',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'OPTIONS',
+        __return_type__: ReturnType<MaybeField<TEntry, 'OPTIONS'>>
+      },
+      'OPTIONS'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('POST' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'POST'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'POST'>>
+      },
+      'POST'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'POST'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'POST'>>
+      },
+      'POST'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'POST',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'POST',
+        __return_type__: ReturnType<MaybeField<TEntry, 'POST'>>
+      },
+      'POST'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('PUT' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'PUT'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'PUT'>>
+      },
+      'PUT'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'PUT'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'PUT'>>
+      },
+      'PUT'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'PUT',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'PUT',
+        __return_type__: ReturnType<MaybeField<TEntry, 'PUT'>>
+      },
+      'PUT'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('DELETE' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'DELETE'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'DELETE'>>
+      },
+      'DELETE'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'DELETE'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'DELETE'>>
+      },
+      'DELETE'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'DELETE',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'DELETE',
+        __return_type__: ReturnType<MaybeField<TEntry, 'DELETE'>>
+      },
+      'DELETE'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('PATCH' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'PATCH'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'PATCH'>>
+      },
+      'PATCH'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'PATCH'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'PATCH'>>
+      },
+      'PATCH'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'PATCH',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'PATCH',
+        __return_type__: ReturnType<MaybeField<TEntry, 'PATCH'>>
+      },
+      'PATCH'
+    >
+  >()
+}
+
+// Check the arguments and return type of the generateStaticParams function
+if ('generateStaticParams' in entry) {
+  checkFields<Diff<{ params: SegmentParams }, FirstArg<MaybeField<TEntry, 'generateStaticParams'>>, 'generateStaticParams'>>()
+  checkFields<Diff<{ __tag__: 'generateStaticParams', __return_type__: any[] | Promise<any[]> }, { __tag__: 'generateStaticParams', __return_type__: ReturnType<MaybeField<TEntry, 'generateStaticParams'>> }>>()
+}
+
+export interface PageProps {
+  params?: Promise<SegmentParams>
+  searchParams?: Promise<any>
+}
+export interface LayoutProps {
+  children?: React.ReactNode
+
+  params?: Promise<SegmentParams>
+}
+
+// =============
+// Utility types
+type RevalidateRange<T> = T extends { revalidate: any } ? NonNegative<T['revalidate']> : never
+
+// If T is unknown or any, it will be an empty {} type. Otherwise, it will be the same as Omit<T, keyof Base>.
+type OmitWithTag<T, K extends keyof any, _M> = Omit<T, K>
+type Diff<Base, T extends Base, Message extends string = ''> = 0 extends (1 & T) ? {} : OmitWithTag<T, keyof Base, Message>
+
+type FirstArg<T extends Function> = T extends (...args: [infer T, any]) => any ? unknown extends T ? any : T : never
+type SecondArg<T extends Function> = T extends (...args: [any, infer T]) => any ? unknown extends T ? any : T : never
+type MaybeField<T, K extends string> = T extends { [k in K]: infer G } ? G extends Function ? G : never : never
+
+type ParamCheck<T> = {
+  __tag__: string
+  __param_position__: string
+  __param_type__: T
+}
+
+function checkFields<_ extends { [k in keyof any]: never }>() {}
+
+// https://github.com/sindresorhus/type-fest
+type Numeric = number | bigint
+type Zero = 0 | 0n
+type Negative<T extends Numeric> = T extends Zero ? never : `${T}` extends `-${string}` ? T : never
+type NonNegative<T extends Numeric> = T extends Zero ? T : Negative<T> extends never ? T : '__invalid_negative_number__'

package/.next/types/routes.d.ts

@@ -2,7 +2,7 @@
 // Do not edit this file manually
 
 type AppRoutes = "/"
-type AppRouteHandlerRoutes = "/api/agent/[id]" | "/api/agent/[id]/bash-output" | "/api/agent/[id]/events" | "/api/agent/new" | "/api/agent/running" | "/api/auth/all-providers" | "/api/auth/api-key/[provider]" | "/api/auth/login/[provider]" | "/api/auth/logout/[provider]" | "/api/auth/providers" | "/api/backup/export" | "/api/backup/import" | "/api/cwd/browse" | "/api/cwd/validate" | "/api/default-cwd" | "/api/features" | "/api/file-index" | "/api/files/[...path]" | "/api/git/diff" | "/api/git/push" | "/api/git/stash" | "/api/git/status" | "/api/home" | "/api/import/discover" | "/api/import/execute" | "/api/import/status" | "/api/models" | "/api/models-config" | "/api/models-config/builtin" | "/api/models-config/catalog" | "/api/models-config/discover" | "/api/models-config/test" | "/api/plugins" | "/api/project-trust" | "/api/proxy" | "/api/proxy/test" | "/api/sessions" | "/api/sessions/[id]" | "/api/sessions/[id]/auto-name" | "/api/sessions/[id]/context" | "/api/sessions/[id]/entries/[entryId]/thinking" | "/api/sessions/[id]/export" | "/api/sessions/[id]/queue-recovery" | "/api/sessions/[id]/state" | "/api/settings/title-model" | "/api/skills" | "/api/skills/check" | "/api/skills/install" | "/api/skills/search" | "/api/skills/update" | "/api/tasks" | "/api/tasks/[id]" | "/api/tasks/[id]/[action]" | "/api/tasks/[id]/changed-files" | "/api/tasks/[id]/diff" | "/api/tasks/[id]/events" | "/api/tasks/batch" | "/api/tasks/events" | "/api/tasks/settings" | "/api/tasks/templates" | "/api/themes" | "/api/themes/[name]" | "/api/usage" | "/api/worktrees"
+type AppRouteHandlerRoutes = "/api/agent/[id]" | "/api/agent/[id]/bash-output" | "/api/agent/[id]/events" | "/api/agent/new" | "/api/agent/running" | "/api/auth/all-providers" | "/api/auth/api-key/[provider]" | "/api/auth/login/[provider]" | "/api/auth/logout/[provider]" | "/api/auth/providers" | "/api/backup/export" | "/api/backup/import" | "/api/cwd/browse" | "/api/cwd/validate" | "/api/default-cwd" | "/api/features" | "/api/file-index" | "/api/files/[...path]" | "/api/git/diff" | "/api/git/push" | "/api/git/stash" | "/api/git/status" | "/api/home" | "/api/import/discover" | "/api/import/execute" | "/api/import/status" | "/api/models" | "/api/models-config" | "/api/models-config/builtin" | "/api/models-config/catalog" | "/api/models-config/discover" | "/api/models-config/test" | "/api/modes" | "/api/plugins" | "/api/project-trust" | "/api/proxy" | "/api/proxy/test" | "/api/sessions" | "/api/sessions/[id]" | "/api/sessions/[id]/auto-name" | "/api/sessions/[id]/context" | "/api/sessions/[id]/entries/[entryId]/thinking" | "/api/sessions/[id]/export" | "/api/sessions/[id]/queue-recovery" | "/api/sessions/[id]/state" | "/api/settings/title-model" | "/api/skills" | "/api/skills/check" | "/api/skills/install" | "/api/skills/search" | "/api/skills/update" | "/api/tasks" | "/api/tasks/[id]" | "/api/tasks/[id]/[action]" | "/api/tasks/[id]/changed-files" | "/api/tasks/[id]/diff" | "/api/tasks/[id]/events" | "/api/tasks/batch" | "/api/tasks/events" | "/api/tasks/settings" | "/api/tasks/templates" | "/api/themes" | "/api/themes/[name]" | "/api/usage" | "/api/worktrees"
 type PageRoutes = never
 type LayoutRoutes = "/"
 type RedirectRoutes = never
@@ -44,6 +44,7 @@ interface ParamMap {
   "/api/models-config/catalog": {}
   "/api/models-config/discover": {}
   "/api/models-config/test": {}
+  "/api/modes": {}
   "/api/plugins": {}
   "/api/project-trust": {}
   "/api/proxy": {}

package/.next/types/validator.ts

@@ -344,6 +344,15 @@ type RouteHandlerConfig<Route extends AppRouteHandlerRoutes = AppRouteHandlerRou
   type __Unused = __Check
 }
 
+// Validate ../../app/api/modes/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/modes">> = Specific
+  const handler = {} as typeof import("../../app/api/modes/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
 // Validate ../../app/api/plugins/route.ts
 {
   type __IsExpected<Specific extends RouteHandlerConfig<"/api/plugins">> = Specific

package/README.en.md

@@ -65,7 +65,27 @@ The board's own **Task settings** button configures per-project execution (separ
 - The engine is a single server process (exclusive lock); interrupted tasks are recovered on restart (marked failed/interrupted, retryable).
 - Beta: desktop only; the mobile UI does not show the board.
 
-## Latest changes (2026-08-06 · v0.9.17-beta.1)
+## Latest changes (2026-08-07 · v0.9.17-beta.3)
+
+- **Zero install-time warnings**: provider icons are now inlined components, so `@lobehub/icons` is gone and npm no longer auto-installs the `@lobehub/ui` / `antd` / `@emoji-mart/react` chain — no more `ERESOLVE overriding peer dependency` and `deprecated intersection-observer` warnings during install (see "npm 11 install notes").
+- **undici fix now runs at runtime**: the `postinstall` hook is gone; `pi-web` applies the undici CVE fix at startup and `dev`/`start` scripts apply it before launching, so installing no longer requires approving install scripts.
+- **Title generation no longer times out (524)**: generating a title while the session is still running waits at most 10s for idle then snapshots the current conversation; the model call timeout is tightened to 80s, keeping the total comfortably under the Cloudflare 100s gateway timeout.
+- **Default mode is now Normal**: new chats default to Normal task mode instead of inheriting Plan.
+- **Task board toggle takes effect immediately**: turning the task board on/off in Settings > Features syncs the toolbar entry and board view without a page refresh.
+- **settings.json concurrency protection**: the modes, features, and title-model modules now share one file lock (proper-lockfile + atomic writes), so concurrent saves can no longer overwrite each other and drop config.
+- **Default mode settings UI**: Settings > Features can now set the default task mode (Normal / Plan / Goal), token profile (Lite / Balanced / Delivery, default Balanced) and tool approval (Ask / Auto / Yolo); already-open chats apply the changes immediately and new chats inherit them.
+- **SPA navigation robustness**: switching projects via the address bar (`?session=` ↔ `?cwd=`) is honored without a full reload; a brand-new project folder with no sessions yet stays in the project list; created sessions appear in the sidebar promptly.
+
+## Previous changes (2026-08-06 · v0.9.17-beta.2)
+
+- **Chat mode system** (ported from Reasonix): the composer toolbar gains three mode controls — task mode (Normal / Plan / Goal), token profile (Lite / Balanced / Delivery) and tool approval (Ask / Auto / Yolo). Plan mode produces a read-only plan then shows a confirm card (Execute / Suggest / Exit); Goal mode auto-continues with a turn budget and stall detection; Lite narrows the toolset to save tokens; Delivery injects a verify-first instruction.
+- **Tool-call approval (real interception)**: in Ask mode, write-class tool calls are suspended before execution and a shelf card appears above the composer — allow, deny, or deny with a reason; parallel batches resolve one by one; 120s timeout auto-denies. Rules (deny > ask > allow) support `ToolName` / `ToolName(glob)` / `Bash(command:*)` and persist to `~/.pi/agent/settings.json`.
+- **Yolo red ring**: picking Yolo tints the composer border red as an "unrestricted" warning.
+- **Long-paste folding**: pasting >2000 chars / 20 lines collapses into a `[Pasted text #N · X lines]` card (preview / remove) so the composer stays fast; the full text is expanded when sending.
+- **Title-failure bubble + model picker**: failed title generation shows a floating bubble next to the session row with retry and a provider-grouped model picker.
+- **Fixes**: Markdown hydration errors (rehypeRaw removed), mode-instruction blocks no longer leak into user bubbles, batch title 500 / UI stall, model-picker duplicate keys and grouping, Windows import path mapping, idempotent approval resolves, and the mobile title bar (branch icon only + tap title for full text).
+
+## Previous changes (2026-08-06 · v0.9.17-beta.1)
 
 - **Fix 500 when generating titles for imported sessions** — auto-naming Reasonix-imported sessions no longer fails with `Cannot read properties of undefined (reading 'length')`. The import converter could emit text blocks missing the `text` field; both the importer and the title pipeline now handle this, including previously imported files.
 - **Faster title generation** — very long sessions (thousands of tool messages) now use only the most recent portion of the conversation, avoiding timeouts; falls back to the full transcript when the tail has no user message.
@@ -91,6 +111,31 @@ The board's own **Task settings** button configures per-project execution (separ
 - The mobile composer is now 52px high. It keeps a 16px input font to prevent iOS Safari zoom, while tighter line height and letter spacing make the text read smaller.
 - Production serving no longer relies on Turbopack development chunks, and quoteable Markdown table rows render with valid table DOM.
 
+## npm 11 install notes
+
+Since **v0.9.17-beta.3** the `ERESOLVE overriding peer dependency` and `deprecated intersection-observer` warnings are gone: provider icons are inlined (no more `@lobehub/icons`, so npm no longer auto-installs the `@lobehub/ui` / `antd` / `@emoji-mart/react` chain). Two **informational** warnings may remain — both harmless:
+
+- `deprecated node-domexception`: pulled in transitively by `@google/genai` → `google-auth-library` → `fetch-blob`. It is a polyfill for older Node versions; Node ≥ 18 ships `DOMException` natively, so it is unused at runtime. It cannot be removed from the package side until the upstream fix lands.
+
+- `allow-scripts`: npm ≥ 11.16's install-script approval notice (`@google/genai` / `protobufjs` / `sharp` etc. transitive lifecycle scripts). Current versions only warn (scripts still run); future versions may block by default. To clear the notice in your project:
+
+  ```bash
+  npm approve-scripts --allow-scripts-pending   # view pending list first
+  npm approve-scripts @google/genai protobufjs sharp   # approve and write to your package.json
+  ```
+
+  Or declare in your project `package.json`:
+
+  ```json
+  "allowScripts": {
+    "@google/genai@1.52.0": true,
+    "protobufjs@7.6.5": true,
+    "sharp@0.34.5": true
+  }
+  ```
+
+  Note this field matches `package@exact-version`; update it after version bumps.
+
 ## Requirements
 
 - Node.js **22.19.0 or newer**

package/README.md

@@ -87,7 +87,27 @@
 - 引擎由服务器进程持有（单实例锁），重启后自动恢复中断的任务（标记为失败/中断，可重试）。
 - Beta 阶段：仅在桌面端显示入口；移动端不可用。
 
-## 最新更新（2026-08-06 · v0.9.17-beta.1）
+## 最新更新（2026-08-07 · v0.9.17-beta.3）
+
+- **生成标题不再超时（524）**：会话运行中点「生成标题」最多等待空闲 10 秒后直接用当前对话快照生成，模型调用超时收紧到 80 秒，总时长稳在 Cloudflare 100 秒网关超时内。
+- **默认任务模式改为常规**：新对话默认不再继承「计划」。
+- **任务看板开关实时生效**：设置-功能里关闭/打开任务看板立即同步顶部入口与看板视图，无需刷新页面。
+- **settings.json 并发写保护**：模式、功能开关、标题模型共用同一文件锁（proper-lockfile + 原子写），并发保存不再互相覆盖丢配置。
+- **设置-功能页新增模式默认项**：可配置默认任务模式（常规 / 计划 / 目标）、默认运行档位（轻量 / 均衡 / 交付，默认均衡）、默认工具权限（批准 / 自动 / Yolo），已打开的对话立即生效、新对话自动继承。
+- **SPA 导航修复**：地址栏 `?session=` ↔ `?cwd=` 切换项目无需整页刷新；全新项目（尚无会话）仍保留在项目列表；新会话创建后立即出现在侧栏。
+- **安装提示清零**：供应商图标改为内置组件，移除 `@lobehub/icons` 依赖，不再被 npm 自动安装 `@lobehub/ui` / `antd` / `@emoji-mart/react` 整条链——安装时不再出现 `ERESOLVE overriding peer dependency` 与 `deprecated intersection-observer` 警告（详情见「安装提示（npm 11）」）。
+- **undici 修复改为运行时执行**：移除 `postinstall` 钩子，`pi-web` 启动与 dev/start 脚本执行前自动应用 undici CVE 修复，安装不再要求审批安装脚本。
+
+## 历史更新（2026-08-06 · v0.9.17-beta.2）
+
+- **对话框模式系统**（移植自 Reasonix）：输入框工具栏新增三组模式控件——任务模式（常规 / 计划 / 目标）、运行档位（轻量 / 均衡 / 交付）、工具权限（批准 / 自动 / Yolo）。计划模式只读产出计划后弹出确认卡（开始执行 / 提出建议 / 退出）；目标模式输入目标后自动持续推进，带轮次预算与无进展检测；轻量档位收窄工具集省 token，交付档位强制验收指令。
+- **工具调用审批（真拦截）**：权限为「批准」时，agent 的写类工具调用在真正执行前挂起，输入框上方弹出审批卡，可允许 / 拒绝 / 附理由拒绝；规则（deny > ask > allow）支持 `ToolName` / `ToolName(glob)` / `Bash(command:*)`，持久化到 settings.json。
+- **Yolo 红色警示**：选择 Yolo 时输入框外圈变红，直观提醒高权限模式。
+- **长粘贴自动折叠**：粘贴大段代码自动折叠为 `[已粘贴文本 #N · X 行]` 占位卡（可预览 / 删除），发送时自动展开，输入框不再卡顿。
+- **标题失败气泡 + 换模型弹窗**：生成标题失败在会话行右侧弹出原因气泡，可重试或换模型（按 provider 分组的模型选择弹窗）。
+- **修复**：Markdown 渲染 hydration 错误（移除 rehypeRaw）、消息气泡不再显示注入的模式提示词、批量生成主题 500 与页面卡死、模型选择弹窗 key 冲突与分组、Windows 导入路径适配、审批请求幂等、移动端标题栏（git 分支只显图标 + 点击标题看全文）。
+
+## 历史更新（2026-08-06 · v0.9.17-beta.1）
 
 - **修复导入会话生成标题 500**：Reasonix 导入的会话自动生成标题时不再报 `Cannot read properties of undefined (reading 'length')`。根因是导入转换产生缺失 `text` 字段的消息块，已在导入与标题生成两条链路同时修复，历史坏文件也兼容。
 - **标题生成提速**：超长会话（上千条工具消息）只取最近一段上下文生成标题，不再容易超时；尾部无用户消息时自动回退全量。
@@ -129,15 +149,28 @@
 
 ## 安装提示（npm 11）
 
-使用 npm ≥ 11 安装本包时可能出现两类提示，均为**提示性警告，不影响安装与运行**：
+自 **v0.9.17-beta.3 起**，`ERESOLVE overriding peer dependency` 与 `deprecated intersection-observer` 两类提示已消除：供应商图标改为内置（不再依赖 `@lobehub/icons`，从而不再被 npm 自动安装 `@lobehub/ui` / `antd` / `@emoji-mart/react` 整条链）。新装本包时仅剩以下两类**提示性警告，均不影响安装与运行**：
+
+- `deprecated node-domexception`：来自 `@google/genai` → `google-auth-library` 的传递依赖 `fetch-blob`。它只是旧版 Node 的 polyfill，Node ≥ 18 原生自带 `DOMException`，运行时完全用不到。上游未修复前无法从包侧移除。
+
+- `allow-scripts`：npm ≥ 11.16 新增的安装脚本审批提示（`@google/genai` / `protobufjs` / `sharp` 等传递依赖的 preinstall/postinstall/install 脚本）。当前版本**只提示、不拦截**（脚本照常执行），未来版本可能改为默认拦截。想消除提示可在你的项目执行：
+
+  ```bash
+  npm approve-scripts --allow-scripts-pending   # 先查看待审批清单
+  npm approve-scripts @google/genai protobufjs sharp   # 逐个批准并写入你的 package.json
+  ```
 
-- `ERESOLVE overriding peer dependency`：上游 `@lobehub/ui` 依赖的 `@emoji-mart/react@1.1.1` 的 peer 声明仅到 React 18，而本包使用 React 19。npm 会自动 override 并继续安装（实际兼容）。如需彻底消除，可在你的项目 `package.json` 添加：
+  或在项目 `package.json` 声明：
 
   ```json
-  "overrides": { "@emoji-mart/react": { "react": "$react" } }
+  "allowScripts": {
+    "@google/genai@1.52.0": true,
+    "protobufjs@7.6.5": true,
+    "sharp@0.34.5": true
+  }
   ```
 
-- `allow-scripts`：npm 11 新增的安装脚本审批提示（sharp / protobufjs / @google/genai 等）。本项目已在包内声明 `allowScripts`，若你的 npm 仍提示，可执行 `npm approve-scripts --all` 审批，或在安装命令加 `--allow-scripts=sharp,protobufjs,@google/genai`。
+  注意该字段按 `包名@精确版本` 匹配，版本升级后需同步更新。
 
 ## 历史更新（2026-08-03）
 

package/bin/fix-pi-agent-undici.js

@@ -9,54 +9,69 @@
 // Note: npm audit will still report undici CVEs because the lockfile
 // references the old version. This is a cosmetic false positive — the
 // code loaded at runtime is undici@^8.10.0.
+//
+// The fix used to run as a `postinstall` hook. It now runs lazily at
+// `pi-web` startup (bin/pi-web.js) and before the repo's dev/start scripts.
+// Moving it out of postinstall keeps `npm install` output quiet under
+// npm >= 11.16's allow-scripts policy and guarantees the fix applies even on
+// installs where lifecycle scripts are blocked or skipped.
 
 const fs = require("fs");
 const path = require("path");
 
-const root = path.join(__dirname, "..");
-const agentDir = path.join(
-  root,
-  "node_modules",
-  "@earendil-works",
-  "pi-coding-agent",
-);
-const shrinkwrap = path.join(agentDir, "npm-shrinkwrap.json");
-const nestedUndici = path.join(agentDir, "node_modules", "undici");
-const topUndici = path.join(root, "node_modules", "undici");
-
-// 1. Remove shrinkwrap
-if (fs.existsSync(shrinkwrap)) {
-  console.log("[pi-web] Removing pi-coding-agent shrinkwrap…");
-  fs.rmSync(shrinkwrap);
-}
+function applyUndiciFix(rootDir = path.join(__dirname, "..")) {
+  const agentDir = path.join(
+    rootDir,
+    "node_modules",
+    "@earendil-works",
+    "pi-coding-agent",
+  );
+  if (!fs.existsSync(agentDir)) return; // not installed here — nothing to fix
+
+  const shrinkwrap = path.join(agentDir, "npm-shrinkwrap.json");
+  const nestedUndici = path.join(agentDir, "node_modules", "undici");
+  const topUndici = path.join(rootDir, "node_modules", "undici");
+
+  // 1. Remove shrinkwrap
+  if (fs.existsSync(shrinkwrap)) {
+    console.log("[pi-web] Removing pi-coding-agent shrinkwrap…");
+    fs.rmSync(shrinkwrap);
+  }
 
-// 2. Replace nested undici@8.5.0 with symlink to top-level undici@^8.10.0
-if (
-  fs.existsSync(topUndici) &&
-  fs.existsSync(nestedUndici) &&
-  // Only replace if it's a real directory, not already a symlink
-  fs.lstatSync(nestedUndici).isDirectory() &&
-  !fs.lstatSync(nestedUndici).isSymbolicLink()
-) {
-  try {
-    const nestedVersion = require(path.join(nestedUndici, "package.json")).version;
-    const topVersion = require(path.join(topUndici, "package.json")).version;
-
-    if (nestedVersion !== topVersion) {
-      console.log(
-        `[pi-web] Replacing pi-coding-agent's undici@${nestedVersion} ` +
-          `→ symlink to undici@${topVersion}`,
-      );
-      fs.rmSync(nestedUndici, { recursive: true, force: true });
-
-      const rel = path.relative(path.dirname(nestedUndici), topUndici);
-      fs.symlinkSync(
-        rel,
-        nestedUndici,
-        process.platform === "win32" ? "junction" : "dir",
-      );
+  // 2. Replace nested undici@8.5.0 with symlink to top-level undici@^8.10.0
+  if (
+    fs.existsSync(topUndici) &&
+    fs.existsSync(nestedUndici) &&
+    // Only replace if it's a real directory, not already a symlink
+    fs.lstatSync(nestedUndici).isDirectory() &&
+    !fs.lstatSync(nestedUndici).isSymbolicLink()
+  ) {
+    try {
+      const nestedVersion = require(path.join(nestedUndici, "package.json")).version;
+      const topVersion = require(path.join(topUndici, "package.json")).version;
+
+      if (nestedVersion !== topVersion) {
+        console.log(
+          `[pi-web] Replacing pi-coding-agent's undici@${nestedVersion} ` +
+            `→ symlink to undici@${topVersion}`,
+        );
+        fs.rmSync(nestedUndici, { recursive: true, force: true });
+
+        const rel = path.relative(path.dirname(nestedUndici), topUndici);
+        fs.symlinkSync(
+          rel,
+          nestedUndici,
+          process.platform === "win32" ? "junction" : "dir",
+        );
+      }
+    } catch (err) {
+      console.warn("[pi-web] Symlink fix skipped:", err.message);
     }
-  } catch (err) {
-    console.warn("[pi-web] Symlink fix skipped:", err.message);
   }
 }
+
+module.exports = { applyUndiciFix };
+
+if (require.main === module) {
+  applyUndiciFix();
+}