@rexvane/piweb 0.3.15 → 0.3.16

package/.next/types/app/api/tests/route.ts

@@ -0,0 +1,353 @@
+// File: /home/runner/work/PiWeb/PiWeb/src/app/api/tests/route.ts
+import * as entry from '../../../../../src/app/api/tests/route.js'
+import type { NextRequest } from 'next/server.js'
+
+import type { InstantConfigForTypeCheckInternal, Prefetch } from 'next/dist/build/segment-config/app/app-segment-config.js'
+
+type TEntry = typeof import('../../../../../src/app/api/tests/route.js')
+
+type SegmentParams<T extends Object = any> = T extends Record<string, any>
+  ? { [K in keyof T]: T[K] extends string ? string | string[] | undefined : never }
+  : T
+
+// Check that the entry is a valid entry
+checkFields<Diff<{
+  GET?: Function
+  HEAD?: Function
+  OPTIONS?: Function
+  POST?: Function
+  PUT?: Function
+  DELETE?: Function
+  PATCH?: Function
+  config?: {}
+  generateStaticParams?: Function
+  instant?: InstantConfigForTypeCheckInternal
+  prefetch?: Prefetch
+  unstable_dynamicStaleTime?: number
+  revalidate?: RevalidateRange<TEntry> | false
+  dynamic?: 'auto' | 'force-dynamic' | 'error' | 'force-static'
+  dynamicParams?: boolean
+  fetchCache?: 'auto' | 'force-no-store' | 'only-no-store' | 'default-no-store' | 'default-cache' | 'only-cache' | 'force-cache'
+  /** @deprecated The `preferredRegion` config is deprecated. Remove this export. */
+  preferredRegion?: 'auto' | 'global' | 'home' | string | string[]
+  runtime?: 'nodejs' | 'experimental-edge' | 'edge'
+  maxDuration?: number
+  
+}, TEntry, ''>>()
+
+type RouteContext = { params: Promise<SegmentParams> }
+// Check the prop type of the entry function
+if ('GET' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'GET'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'GET'>>
+      },
+      'GET'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'GET'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'GET'>>
+      },
+      'GET'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'GET',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'GET',
+        __return_type__: ReturnType<MaybeField<TEntry, 'GET'>>
+      },
+      'GET'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('HEAD' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'HEAD'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'HEAD'>>
+      },
+      'HEAD'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'HEAD'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'HEAD'>>
+      },
+      'HEAD'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'HEAD',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'HEAD',
+        __return_type__: ReturnType<MaybeField<TEntry, 'HEAD'>>
+      },
+      'HEAD'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('OPTIONS' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'OPTIONS'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'OPTIONS'>>
+      },
+      'OPTIONS'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'OPTIONS'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'OPTIONS'>>
+      },
+      'OPTIONS'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'OPTIONS',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'OPTIONS',
+        __return_type__: ReturnType<MaybeField<TEntry, 'OPTIONS'>>
+      },
+      'OPTIONS'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('POST' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'POST'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'POST'>>
+      },
+      'POST'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'POST'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'POST'>>
+      },
+      'POST'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'POST',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'POST',
+        __return_type__: ReturnType<MaybeField<TEntry, 'POST'>>
+      },
+      'POST'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('PUT' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'PUT'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'PUT'>>
+      },
+      'PUT'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'PUT'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'PUT'>>
+      },
+      'PUT'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'PUT',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'PUT',
+        __return_type__: ReturnType<MaybeField<TEntry, 'PUT'>>
+      },
+      'PUT'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('DELETE' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'DELETE'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'DELETE'>>
+      },
+      'DELETE'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'DELETE'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'DELETE'>>
+      },
+      'DELETE'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'DELETE',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'DELETE',
+        __return_type__: ReturnType<MaybeField<TEntry, 'DELETE'>>
+      },
+      'DELETE'
+    >
+  >()
+}
+// Check the prop type of the entry function
+if ('PATCH' in entry) {
+  checkFields<
+    Diff<
+      ParamCheck<Request | NextRequest>,
+      {
+        __tag__: 'PATCH'
+        __param_position__: 'first'
+        __param_type__: FirstArg<MaybeField<TEntry, 'PATCH'>>
+      },
+      'PATCH'
+    >
+  >()
+  checkFields<
+    Diff<
+      ParamCheck<RouteContext>,
+      {
+        __tag__: 'PATCH'
+        __param_position__: 'second'
+        __param_type__: SecondArg<MaybeField<TEntry, 'PATCH'>>
+      },
+      'PATCH'
+    >
+  >()
+  
+  checkFields<
+    Diff<
+      {
+        __tag__: 'PATCH',
+        __return_type__: Response | void | never | Promise<Response | void | never>
+      },
+      {
+        __tag__: 'PATCH',
+        __return_type__: ReturnType<MaybeField<TEntry, 'PATCH'>>
+      },
+      'PATCH'
+    >
+  >()
+}
+
+// Check the arguments and return type of the generateStaticParams function
+if ('generateStaticParams' in entry) {
+  checkFields<Diff<{ params: SegmentParams }, FirstArg<MaybeField<TEntry, 'generateStaticParams'>>, 'generateStaticParams'>>()
+  checkFields<Diff<{ __tag__: 'generateStaticParams', __return_type__: any[] | Promise<any[]> }, { __tag__: 'generateStaticParams', __return_type__: ReturnType<MaybeField<TEntry, 'generateStaticParams'>> }>>()
+}
+
+export interface PageProps {
+  params?: Promise<SegmentParams>
+  searchParams?: Promise<any>
+}
+export interface LayoutProps {
+  children?: React.ReactNode
+
+  params?: Promise<SegmentParams>
+}
+
+// =============
+// Utility types
+type RevalidateRange<T> = T extends { revalidate: any } ? NonNegative<T['revalidate']> : never
+
+// If T is unknown or any, it will be an empty {} type. Otherwise, it will be the same as Omit<T, keyof Base>.
+type OmitWithTag<T, K extends keyof any, _M> = Omit<T, K>
+type Diff<Base, T extends Base, Message extends string = ''> = 0 extends (1 & T) ? {} : OmitWithTag<T, keyof Base, Message>
+
+type FirstArg<T extends Function> = T extends (...args: [infer T, any]) => any ? unknown extends T ? any : T : never
+type SecondArg<T extends Function> = T extends (...args: [any, infer T]) => any ? unknown extends T ? any : T : never
+type MaybeField<T, K extends string> = T extends { [k in K]: infer G } ? G extends Function ? G : never : never
+
+type ParamCheck<T> = {
+  __tag__: string
+  __param_position__: string
+  __param_type__: T
+}
+
+function checkFields<_ extends { [k in keyof any]: never }>() {}
+
+// https://github.com/sindresorhus/type-fest
+type Numeric = number | bigint
+type Zero = 0 | 0n
+type Negative<T extends Numeric> = T extends Zero ? never : `${T}` extends `-${string}` ? T : never
+type NonNegative<T extends Numeric> = T extends Zero ? T : Negative<T> extends never ? T : '__invalid_negative_number__'

package/.next/types/routes.d.ts

@@ -2,7 +2,7 @@
 // Do not edit this file manually
 
 type AppRoutes = "/" | "/login"
-type AppRouteHandlerRoutes = "/api/agent/[id]" | "/api/agent/[id]/events" | "/api/agent/[id]/tree" | "/api/agent/new" | "/api/config" | "/api/files" | "/api/git" | "/api/growth" | "/api/health" | "/api/models" | "/api/pi-settings" | "/api/plugins" | "/api/prompts" | "/api/security" | "/api/sessions" | "/api/sessions/[id]" | "/api/sessions/[id]/export" | "/api/sessions/import" | "/api/skills" | "/api/update" | "/api/version" | "/api/web-auth" | "/api/workspaces"
+type AppRouteHandlerRoutes = "/api/agent/[id]" | "/api/agent/[id]/events" | "/api/agent/[id]/tree" | "/api/agent/new" | "/api/config" | "/api/files" | "/api/git" | "/api/growth" | "/api/health" | "/api/models" | "/api/pi-settings" | "/api/plugins" | "/api/prompts" | "/api/security" | "/api/sessions" | "/api/sessions/[id]" | "/api/sessions/[id]/export" | "/api/sessions/import" | "/api/skills" | "/api/swarm" | "/api/swarm/[id]" | "/api/tests" | "/api/update" | "/api/version" | "/api/web-auth" | "/api/workspaces"
 type PageRoutes = never
 type LayoutRoutes = "/"
 type RedirectRoutes = never
@@ -31,6 +31,9 @@ interface ParamMap {
   "/api/sessions/[id]/export": { "id": string; }
   "/api/sessions/import": {}
   "/api/skills": {}
+  "/api/swarm": {}
+  "/api/swarm/[id]": { "id": string; }
+  "/api/tests": {}
   "/api/update": {}
   "/api/version": {}
   "/api/web-auth": {}

package/.next/types/validator.ts

@@ -236,6 +236,33 @@ type RouteHandlerConfig<Route extends AppRouteHandlerRoutes = AppRouteHandlerRou
   type __Unused = __Check
 }
 
+// Validate ../../src/app/api/swarm/[id]/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/swarm/[id]">> = Specific
+  const handler = {} as typeof import("../../src/app/api/swarm/[id]/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
+// Validate ../../src/app/api/swarm/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/swarm">> = Specific
+  const handler = {} as typeof import("../../src/app/api/swarm/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
+// Validate ../../src/app/api/tests/route.ts
+{
+  type __IsExpected<Specific extends RouteHandlerConfig<"/api/tests">> = Specific
+  const handler = {} as typeof import("../../src/app/api/tests/route.js")
+  type __Check = __IsExpected<typeof handler>
+  // @ts-ignore
+  type __Unused = __Check
+}
+
 // Validate ../../src/app/api/update/route.ts
 {
   type __IsExpected<Specific extends RouteHandlerConfig<"/api/update">> = Specific

package/README.md

@@ -20,6 +20,16 @@
 
 PiWeb and pi are two separate programs, and PiWeb is not another build of pi: it is a web shell that drives the pi already installed on your machine through the official SDK, leaving pi itself untouched. The two **share one set of state** — the same agent directory (`~/.pi/agent`) holds your settings, models and credentials, sessions, skills and packages — so a conversation started in the pi CLI shows up in the browser right away, and the other way round. Updating is **two separate things**: the pi engine and PiWeb each carry their own version and their own update entry point (the two "Check for updates" rows in Settings), and upgrading one leaves the other alone. What runs underneath is native pi; plugin compatibility in the browser, interactive plugins especially, is not finished yet — for now plugins can be managed rather than fully driven from the page.
 
+## Workflows and Delegation
+
+Use the **+** button in the composer's lower-left corner to choose **Agent / Plan / Goal** per session. Agent uses the existing tool preset. Plan uses read-only tools and stops for explicit approval; "Execute plan" temporarily restores the current tool preset for that run, then returns to read-only planning. Goal retains the first prompt as the objective and asks the agent to verify progress on later turns; it does not start unlimited follow-up turns automatically. Workflow state is stored as a custom entry in the native pi session.
+
+Plan's tool restriction is not a sandbox for locally installed, trusted pi extensions. Approval is tied to the latest proposed plan and is rejected if the conversation changes after that plan.
+
+Click a sent user message to edit and resend it in place, even without changing its text. PiWeb reruns the conversation from that message and keeps the previous branch in the native session history rather than adding a new message at the bottom.
+
+With the standard or full tool preset, `piweb_delegate` can run up to three independent research tasks in parallel. Each temporary subagent uses the current model and read-only file tools. It cannot run commands, edit files, or delegate again. Reports return to the parent; these are not independent Worker sessions. The explicit read-only preset does not automatically enable delegation.
+
 ## Features
 
 ### Real-Time Streaming Chat

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@rexvane/piweb",
-	"version": "0.3.15",
+	"version": "0.3.16",
 	"license": "MIT",
 	"type": "module",
 	"description": "Modern web UI for the pi coding agent, driven by the official pi SDK without modifying pi",
@@ -52,8 +52,8 @@
 	},
 	"dependencies": {
 		"@automann/maple-mono-cn": "^7.9.2",
-		"@earendil-works/pi-ai": "0.85.1",
-		"@earendil-works/pi-coding-agent": "0.85.1",
+		"@earendil-works/pi-ai": "0.87.1",
+		"@earendil-works/pi-coding-agent": "0.87.1",
 		"@lobehub/icons-static-svg": "^1.95.0",
 		"@tailwindcss/postcss": "^4.2.2",
 		"@types/node": "^26",
@@ -71,6 +71,7 @@
 		"rehype-highlight": "^7.0.2",
 		"remark-gfm": "^4.0.1",
 		"tailwindcss": "^4.2.2",
+		"typebox": "1.3.27",
 		"typescript": "^7"
 	},
 	"optionalDependencies": {

package/scripts/pick-folder.ps1

@@ -82,6 +82,10 @@ public class PiFolderPicker {
     }
   }
 
+  public static bool ShouldRetryWithoutOwner(int hr, IntPtr hwnd) {
+    return hr == unchecked((int)0x80070578) && hwnd != IntPtr.Zero;
+  }
+
   public static string Pick(string title) {
     try {
       EnableDpiAwareness();
@@ -90,8 +94,13 @@ public class PiFolderPicker {
       dlg.GetOptions(out options);
       dlg.SetOptions(options | FOS_PICKFOLDERS | FOS_FORCEFILESYSTEM);
       if (!string.IsNullOrEmpty(title)) dlg.SetTitle(title);
-      dlg.SetOkButtonLabel(OkLabel);
-      int hr = dlg.Show(GetForegroundWindow());
+      IntPtr hwnd = GetForegroundWindow();
+      int hr = dlg.Show(hwnd);
+      if (hr == unchecked((int)0x800704C7)) return "";
+      // Retry only an invalid owner handle, never a user cancellation or arbitrary failure.
+      if (ShouldRetryWithoutOwner(hr, hwnd)) {
+        hr = dlg.Show(IntPtr.Zero);
+      }
       if (hr != 0) return "";
       IShellItem item;
       dlg.GetResult(out item);

package/scripts/release.mjs

@@ -2,8 +2,7 @@ import fs from "node:fs/promises";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import { randomUUID } from "node:crypto";
-import { createRequire } from "node:module";
-import { pathToFileURL, fileURLToPath } from "node:url";
+import { fileURLToPath } from "node:url";
 import { assertInstallation, assertLocalPath, readProductionBuild, resolveBuildOutput, RELEASES_DIR, RELEASE_MANIFEST } from "./build-output.mjs";
 import { runCommand } from "./process-runner.mjs";
 import { isMainModule } from "./entrypoint.mjs";
@@ -77,21 +76,6 @@ async function writeReleaseTypeConfig(root, buildDir) {
 	});
 }
 
-/** Run in a fresh process, after install/pull, so cached config/Next modules cannot lie. */
-export async function verifyReleaseConfig(root = process.cwd(), env = process.env) {
-	const installation = assertInstallation(root);
-	const buildDir = resolveBuildOutput(installation, env.PIWEB_BUILD_DIR);
-	if (!buildDir.startsWith(`${RELEASES_DIR}/`)) throw new Error("release requires an isolated build output");
-	const require = createRequire(path.join(installation, "package.json"));
-	const module = await import(pathToFileURL(require.resolve("next/dist/server/config.js")).href);
-	const loadConfig = typeof module.default === "function" ? module.default : module.default.default;
-	const { PHASE_PRODUCTION_BUILD } = require("next/constants");
-	const config = await loadConfig(PHASE_PRODUCTION_BUILD, installation, { silent: true });
-	if (config.distDir !== buildDir || config.typescript?.tsconfigPath !== CONFIG_PATH || config.typescript?.ignoreBuildErrors) {
-		throw new Error("Next config does not honor the isolated release directory/typecheck; refusing to build over the serving output");
-	}
-}
-
 export const PI_PACKAGE = "@earendil-works/pi-coding-agent";
 const PI_AI_PACKAGE = "@earendil-works/pi-ai";
 
@@ -150,7 +134,7 @@ export async function prepareRelease({ root = ROOT, env = process.env, run = run
 		signal?.throwIfAborted();
 		assertInstallation(installation);
 		await writeReleaseTypeConfig(installation, buildDir);
-		await run(process.execPath, [path.join(installation, "scripts", "release.mjs"), "--verify-config"], {
+		await run(process.execPath, [path.join(installation, "scripts", "verify-release-config.mjs")], {
 			cwd: installation, env: childEnv, timeoutMs: 60_000, signal,
 		});
 		await run("npm", ["run", "check"], { cwd: installation, env: childEnv, timeoutMs: 600_000, signal });
@@ -175,19 +159,15 @@ if (isMainModule(import.meta.url)) {
 	process.once("SIGINT", cancel);
 	process.once("SIGTERM", cancel);
 	try {
-		if (process.argv.length === 3 && process.argv[2] === "--verify-config") {
-			await verifyReleaseConfig();
-		} else {
-			const updatePi = process.argv.length === 3 && process.argv[2] === "--update-pi";
-			if (process.argv.length > 2 && !updatePi) throw new Error("Usage: node scripts/release.mjs [--update-pi]");
-			console.log("[piweb] Checking and building an isolated release; the existing server is not restarted.");
-			if (updatePi) console.log("[piweb] Pi dependency update: use a maintenance window with no active sessions; node_modules is shared.");
-			const release = await prepareRelease({
-				signal: controller.signal,
-				prepare: updatePi ? async (context) => { await installPiUpdate(context); } : undefined,
-			});
-			console.log(`[piweb] Release ready: ${release.buildDir} (${release.buildId}). Restart PiWeb manually when idle to use it.`);
-		}
+		const updatePi = process.argv.length === 3 && process.argv[2] === "--update-pi";
+		if (process.argv.length > 2 && !updatePi) throw new Error("Usage: node scripts/release.mjs [--update-pi]");
+		console.log("[piweb] Checking and building an isolated release; the existing server is not restarted.");
+		if (updatePi) console.log("[piweb] Pi dependency update: use a maintenance window with no active sessions; node_modules is shared.");
+		const release = await prepareRelease({
+			signal: controller.signal,
+			prepare: updatePi ? async (context) => { await installPiUpdate(context); } : undefined,
+		});
+		console.log(`[piweb] Release ready: ${release.buildDir} (${release.buildId}). Restart PiWeb manually when idle to use it.`);
 	} catch (error) {
 		console.error(`[piweb] Release failed: ${error instanceof Error ? error.message : error}`);
 		process.exitCode = 1;

package/scripts/run-test-file.mjs

@@ -0,0 +1,34 @@
+import fs from "node:fs/promises";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+
+const [cwd, selected, reportFile] = process.argv.slice(2);
+let runner;
+try {
+  if (!cwd || !selected || !reportFile) throw new Error("expected workspace, test file and report path");
+  const api = await import(pathToFileURL(path.join(cwd, "node_modules/vitest/dist/node.js")).href);
+  const options = { root: cwd, run: true, watch: false, reporters: ["json"], outputFile: reportFile };
+  runner = Number(api.version.split(".")[0]) >= 5
+    ? await api.createVitest(options)
+    : await api.createVitest("test", options);
+  if (typeof runner.globTestSpecifications !== "function" || typeof runner.runTestSpecifications !== "function") {
+    throw new Error("this Vitest version does not support exact test specifications");
+  }
+  const canonical = (file) => process.platform === "win32" ? file.toLowerCase() : file;
+  const target = canonical(await fs.realpath(selected));
+  const specs = await runner.globTestSpecifications();
+  const exact = [];
+  for (const spec of specs) {
+    if (canonical(await fs.realpath(spec.moduleId)) === target) exact.push(spec);
+  }
+  if (!exact.length) throw new Error("selected file is excluded by the workspace Vitest configuration");
+  // Discovery is read-only; only exact specifications are handed to the executor.
+  if (typeof runner.standalone === "function") await runner.standalone();
+  else await runner.init();
+  await runner.runTestSpecifications(exact);
+} catch (error) {
+  console.error(error instanceof Error ? error.message : String(error));
+  process.exitCode = 1;
+} finally {
+  await runner?.close();
+}

package/scripts/verify-release-config.mjs

@@ -0,0 +1,24 @@
+import path from "node:path";
+import { createRequire } from "node:module";
+import { pathToFileURL } from "node:url";
+import { assertInstallation, resolveBuildOutput, RELEASES_DIR } from "./build-output.mjs";
+import { isMainModule } from "./entrypoint.mjs";
+
+/** Run in a fresh process after install/pull so cached Next config cannot be reused. */
+export async function verifyReleaseConfig(root = process.cwd(), env = process.env) {
+	const installation = assertInstallation(root);
+	const buildDir = resolveBuildOutput(installation, env.PIWEB_BUILD_DIR);
+	if (!buildDir.startsWith(`${RELEASES_DIR}/`)) throw new Error("release requires an isolated build output");
+	const requireFromInstall = createRequire(path.join(installation, "package.json"));
+	const module = await import(pathToFileURL(requireFromInstall.resolve("next/dist/server/config.js")).href);
+	const loadConfig = typeof module.default === "function" ? module.default : module.default.default;
+	const { PHASE_PRODUCTION_BUILD } = requireFromInstall("next/constants");
+	const config = await loadConfig(PHASE_PRODUCTION_BUILD, installation, { silent: true });
+	if (config.distDir !== buildDir || config.typescript?.tsconfigPath !== `${RELEASES_DIR}/tsconfig.json` || config.typescript?.ignoreBuildErrors) {
+		throw new Error("Next config does not honor the isolated release directory/typecheck; refusing to build over the serving output");
+	}
+}
+
+if (isMainModule(import.meta.url)) {
+	await verifyReleaseConfig();
+}

package/src/app/api/config/route.ts

@@ -9,7 +9,10 @@ export const dynamic = "force-dynamic";
 export async function GET() {
 	try {
 		const file = path.join(getAgentDir(), "settings.json");
-		const content = await fs.readFile(file, "utf8");
+		const content = await fs.readFile(file, "utf8").catch((error: NodeJS.ErrnoException) => {
+			if (error.code === "ENOENT") return "{}\n";
+			throw error;
+		});
 		return new Response(content, {
 			headers: {
 				"Content-Type": "application/json; charset=utf-8",

package/src/app/api/security/route.ts

@@ -1,17 +1,22 @@
 import { NextResponse } from "next/server";
 import type { ProjectTrust } from "@/lib/security-service";
 import { getSecurity, setProjectTrust } from "@/lib/security-service";
-import { reloadLoader, setProjectTrust as setProjectTrustDecision } from "@/lib/pi";
+import { reloadLoader, resolveProjectTrust, setProjectTrust as setProjectTrustDecision } from "@/lib/pi";
 import { reloadSessionsForCwd } from "@/lib/agent-manager";
 import { BoundaryError, resolveWorkspacePath } from "@/lib/path-security";
 
 export const dynamic = "force-dynamic";
 
-export async function GET() {
+export async function GET(req: Request) {
 	try {
+		const params = new URL(req.url).searchParams;
+		if (params.has("cwd")) {
+			const cwd = await resolveWorkspacePath(params.get("cwd"));
+			return NextResponse.json({ success: true, data: resolveProjectTrust(cwd) });
+		}
 		return NextResponse.json({ success: true, data: await getSecurity() });
 	} catch (err: any) {
-		return NextResponse.json({ success: false, error: String(err?.message ?? err) }, { status: 500 });
+		return NextResponse.json({ success: false, error: String(err?.message ?? err) }, { status: err instanceof BoundaryError ? 400 : 500 });
 	}
 }