clideck 1.26.3 → 1.27.1

package/README.md

@@ -26,7 +26,7 @@ npx clideck
 
 Open [http://localhost:4000](http://localhost:4000). Click **+**, pick an agent and optionally a project and role, start working.
 
-New users get 3 built-in demo roles (Programmer, Reviewer, Product Manager) and 3 starter prompts in the prompt library to get going quickly.
+New users get 3 built-in roles (Programmer, Reviewer, Product Manager) and 3 starter prompts in the prompt library.
 
 Or install globally:
 
@@ -38,7 +38,7 @@ clideck
 ## What You Get
 
 - **Roles** — define reusable agent identities (Programmer, Reviewer, PM) and assign them when creating sessions. Instructions are injected into the agent automatically.
-- **Autopilot** — project-level workflow routing. Watches your role-assigned agents, waits for them to finish, forwards output to the next specialist. Fingerprints each output, tracks handoff history, and guards against repeat loops. Works with any LLM provider (Anthropic, OpenAI, Google, Groq, xAI, Mistral, and more). Notifies you when work is complete or blocked.
+- **Autopilot** — project-level workflow routing. Watches your role-assigned agents, waits for them to finish, forwards output to the next specialist. Fingerprints each output, tracks handoff history, and guards against repeat loops. Supports 8 LLM providers (Anthropic, OpenAI, Google, Groq, xAI, Mistral, OpenRouter, Cerebras). Notifies you when work is complete or blocked.
 - **Mobile access** — check on your agents from your phone with a QR scan. E2E encrypted.
 - **Live working/idle status** — see which agent is thinking and which is waiting for you, without checking each terminal
 - **Session resume** — close clideck, reopen it tomorrow, pick up where you left off

package/agent-presets.json

@@ -10,7 +10,11 @@
     "resumeCommand": "claude --resume {{sessionId}}",
     "sessionIdPattern": "Session ID:\\s+([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})",
     "outputMarker": "\u23fa",
-    "telemetryConfigPath": "Built-in (no configuration needed)",
+    "telemetryConfigPath": "~/.claude/settings.json",
+    "telemetrySetup": "Required for working/idle status, Autopilot, notifications, and mobile remote.\n\nCliDeck will add start/stop hooks to ~/.claude/settings.json. Claude will ask for one-time approval on next launch.",
+    "telemetryAutoSetup": {
+      "label": "Patch Claude"
+    },
     "telemetryEnv": {
       "CLAUDE_CODE_ENABLE_TELEMETRY": "1",
       "OTEL_LOGS_EXPORTER": "otlp",

package/bin/notify-helper.js

@@ -0,0 +1,18 @@
+#!/usr/bin/env node
+// Tiny helper for Codex notify hook.
+// Usage: node notify-helper.js <port> <json-payload>
+// Codex appends the JSON payload as the last argv argument.
+// Port is passed as the first argument by the notify config.
+
+const port = parseInt(process.argv[2], 10);
+const payload = process.argv[process.argv.length - 1];
+if (!port || !payload || payload === String(port)) process.exit(0);
+
+const http = require('http');
+const req = http.request({
+  hostname: 'localhost', port, path: '/hook/codex/stop',
+  method: 'POST', headers: { 'Content-Type': 'application/json' },
+  timeout: 2000,
+});
+req.on('error', () => {});
+req.end(payload);

package/handlers.js

@@ -77,11 +77,18 @@ function detectTelemetryConfig(c) {
     if (!preset) continue;
     let detected = false;
     if (preset.presetId === 'claude-code') {
-      detected = true;
+      try {
+        const s = JSON.parse(readFileSync(join(home, '.claude', 'settings.json'), 'utf8'));
+        const hooks = s.hooks || {};
+        const has = (arr, path) => arr?.some(h => h.hooks?.some(x => x.url?.includes('/hook/claude/' + path)));
+        detected = has(hooks.UserPromptSubmit, 'start') && has(hooks.Stop, 'stop') && has(hooks.StopFailure, 'stop')
+                && has(hooks.PreToolUse, 'menu')
+                && hooks.Notification?.some(h => h.matcher === 'idle_prompt' && h.hooks?.some(x => x.url?.includes('/hook/claude/idle')));
+      } catch {}
     } else if (preset.presetId === 'codex') {
       try {
         const content = readFileSync(join(home, '.codex', 'config.toml'), 'utf8');
-        detected = content.includes('[otel]') && content.includes(`localhost:${port}`);
+        detected = content.includes('[otel]') && content.includes(`localhost:${port}`) && content.includes('notify-helper');
       } catch {}
     } else if (preset.presetId === 'gemini-cli') {
       try {
@@ -139,7 +146,17 @@ function onConnection(ws) {
         sessions.broadcast({ type: 'screen.updated', id: msg.id });
         const sess = sessions.getSessions().get(msg.id);
         if (sess) {
-          const choices = require('./transcript').detectMenu(msg.lines, sess.presetId);
+          let choices = require('./transcript').detectMenu(msg.lines, sess.presetId);
+          // Codex: only trust menu detection if last OTEL event was response.completed
+          if (choices && sess.presetId === 'codex') {
+            const last = require('./telemetry-receiver').getLastEvent(msg.id);
+            if (!last.startsWith('codex.sse_event:response.completed')) {
+              console.log(`[codex] menu rejected — lastEvent=${last} session=${msg.id.slice(0,8)}`);
+              choices = null;
+            } else {
+              console.log(`[codex] menu accepted session=${msg.id.slice(0,8)}`);
+            }
+          }
           // Auto-approve: send Enter immediately when menu detected
           if (choices && plugins.shouldAutoApproveMenu(msg.id)) {
             sessions.input({ id: msg.id, data: '\r' });
@@ -150,6 +167,7 @@ function onConnection(ws) {
             sessions.broadcast({ type: 'session.menu', id: msg.id, choices: choices || [] });
             if (choices) {
               plugins.notifyMenu(msg.id, choices);
+              if (sess.presetId === 'codex') require('./telemetry-receiver').cancelCodexMenuPoll(msg.id);
               sessions.broadcast({ type: 'session.status', id: msg.id, working: false, source: 'menu' });
             }
           }
@@ -187,19 +205,13 @@ function onConnection(ws) {
       case 'telemetry.autosetup': {
         const preset = presets.find(p => p.presetId === msg.presetId);
         if (!preset?.telemetryAutoSetup) break;
-        // Only allow if caller has a live session using this preset's command
-        const liveSessions = sessions.list();
-        const hasLive = liveSessions.some(s => {
-          const cmd = cfg.commands.find(c => c.id === s.commandId);
-          return cmd && binName(cmd.command) === binName(preset.command);
-        });
-        if (!hasLive) break;
         const result = applyTelemetryConfig(preset);
-        // Persist telemetry state in config
         for (const cmd of cfg.commands) {
           if (binName(cmd.command) === binName(preset.command)) {
             cmd.telemetryEnabled = result.success;
             cmd.telemetryStatus = result.success ? { ok: true } : { ok: false, error: result.message };
+            // Enable the agent when setup succeeds, disable if it fails
+            if (result.success) cmd.enabled = true;
           }
         }
         config.save(cfg);
@@ -297,6 +309,18 @@ function onConnection(ws) {
         sessions.broadcast({ type: 'plugins', list: plugins.getInfo() });
         break;
 
+      case 'plugin.install': {
+        ws.send(JSON.stringify({ type: 'plugin.install.progress', pluginId: msg.pluginId }));
+        plugins.installPlugin(msg.pluginId, (err) => {
+          if (err) {
+            ws.send(JSON.stringify({ type: 'plugin.install.result', pluginId: msg.pluginId, success: false, error: err.message }));
+          } else {
+            sessions.broadcast({ type: 'plugins', list: plugins.getInfo() });
+            ws.send(JSON.stringify({ type: 'plugin.install.result', pluginId: msg.pluginId, success: true }));
+          }
+        });
+        break;
+      }
       case 'plugin.delete': {
         const result = plugins.removePlugin(msg.pluginId);
         if (result.success) {
@@ -378,15 +402,54 @@ function applyTelemetryConfig(preset) {
   const home = os.homedir();
 
   try {
+    if (preset.presetId === 'claude-code') {
+      const configPath = join(home, '.claude', 'settings.json');
+      let settings = {};
+      if (existsSync(configPath)) {
+        try { settings = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+      }
+      const hooks = settings.hooks || {};
+      const endpoint = `http://localhost:${port}/hook/claude`;
+      const clideckHook = (url) => ({ hooks: [{ type: 'http', url }] });
+      const hasClideck = (arr, path) => arr?.some(h => h.hooks?.some(x => x.url?.includes('/hook/claude/' + path)));
+      if (hasClideck(hooks.UserPromptSubmit, 'start') && hasClideck(hooks.Stop, 'stop') && hasClideck(hooks.StopFailure, 'stop') && hasClideck(hooks.PreToolUse, 'menu') && hooks.Notification?.some(h => h.matcher === 'idle_prompt' && h.hooks?.some(x => x.url?.includes('/hook/claude/idle')))) {
+        return { success: true, message: 'Already configured' };
+      }
+      if (!hasClideck(hooks.UserPromptSubmit, 'start')) hooks.UserPromptSubmit = [...(hooks.UserPromptSubmit || []), clideckHook(`${endpoint}/start`)];
+      if (!hasClideck(hooks.Stop, 'stop')) hooks.Stop = [...(hooks.Stop || []), clideckHook(`${endpoint}/stop`)];
+      if (!hasClideck(hooks.StopFailure, 'stop')) hooks.StopFailure = [...(hooks.StopFailure || []), clideckHook(`${endpoint}/stop`)];
+      if (!hasClideck(hooks.Notification, 'idle')) hooks.Notification = [...(hooks.Notification || []), { matcher: 'idle_prompt', ...clideckHook(`${endpoint}/idle`) }];
+      if (!hasClideck(hooks.PreToolUse, 'menu')) hooks.PreToolUse = [...(hooks.PreToolUse || []), clideckHook(`${endpoint}/menu`)];
+      settings.hooks = hooks;
+      mkdirSync(dirname(configPath), { recursive: true });
+      writeFileSync(configPath, JSON.stringify(settings, null, 2) + '\n');
+      return { success: true, message: 'Added hooks to ~/.claude/settings.json — Claude will ask for one-time approval' };
+    }
+
     if (preset.presetId === 'codex') {
       const configPath = join(home, '.codex', 'config.toml');
       let content = '';
       if (existsSync(configPath)) content = readFileSync(configPath, 'utf8');
-      if (content.includes('[otel]')) return { success: true, message: 'Already configured' };
-      const section = `\n[otel]\nexporter = { otlp-http = { endpoint = "http://localhost:${port}/v1/logs", protocol = "json" } }\n`;
+      const hasOtel = content.includes('[otel]');
+      const hasNotify = content.includes('notify-helper');
+      if (hasOtel && hasNotify) return { success: true, message: 'Already configured' };
+      if (!hasNotify) {
+        const helperPath = join(__dirname, 'bin', 'notify-helper.js').replace(/\\/g, '/');
+        const notifyLine = `notify = ["${process.execPath.replace(/\\/g, '/')}", "${helperPath}", "${port}"]\n`;
+        // Insert before the first [section] so it stays top-level
+        const firstSection = content.search(/^\[/m);
+        if (firstSection >= 0) {
+          content = content.slice(0, firstSection) + notifyLine + '\n' + content.slice(firstSection);
+        } else {
+          content = content + '\n' + notifyLine;
+        }
+      }
+      if (!hasOtel) {
+        content = content.trimEnd() + `\n\n[otel]\nexporter = { otlp-http = { endpoint = "http://localhost:${port}/v1/logs", protocol = "json" } }\n`;
+      }
       mkdirSync(dirname(configPath), { recursive: true });
-      writeFileSync(configPath, content.trimEnd() + '\n' + section);
-      return { success: true, message: 'Added [otel] section to ~/.codex/config.toml' };
+      writeFileSync(configPath, content);
+      return { success: true, message: 'Added otel + notify to ~/.codex/config.toml' };
     }
 
     if (preset.presetId === 'gemini-cli') {
@@ -431,14 +494,31 @@ function removeTelemetryConfig(preset) {
   const home = os.homedir();
 
   try {
+    if (preset.presetId === 'claude-code') {
+      const configPath = join(home, '.claude', 'settings.json');
+      if (!existsSync(configPath)) return { success: true, message: 'No config file to clean' };
+      let settings = {};
+      try { settings = JSON.parse(readFileSync(configPath, 'utf8')); } catch {}
+      if (!settings.hooks) return { success: true, message: 'No hooks to remove' };
+      for (const event of ['UserPromptSubmit', 'Stop', 'StopFailure', 'Notification', 'PreToolUse']) {
+        const arr = settings.hooks[event];
+        if (!arr) continue;
+        settings.hooks[event] = arr.filter(h => !h.hooks?.some(x => x.url?.includes('/hook/claude/')));
+        if (!settings.hooks[event].length) delete settings.hooks[event];
+      }
+      if (!Object.keys(settings.hooks).length) delete settings.hooks;
+      writeFileSync(configPath, JSON.stringify(settings, null, 2) + '\n');
+      return { success: true, message: 'Removed CliDeck hooks from ~/.claude/settings.json' };
+    }
+
     if (preset.presetId === 'codex') {
       const configPath = join(home, '.codex', 'config.toml');
       if (!existsSync(configPath)) return { success: true, message: 'No config file to clean' };
       let content = readFileSync(configPath, 'utf8');
-      // Remove [otel] section and everything until the next section or EOF
       content = content.replace(/\n?\[otel\][^\[]*/, '');
+      content = content.replace(/\n?notify\s*=\s*\[.*?notify-helper.*?\]\s*/g, '');
       writeFileSync(configPath, content.trimEnd() + '\n');
-      return { success: true, message: 'Removed [otel] section from ~/.codex/config.toml' };
+      return { success: true, message: 'Removed otel + notify from ~/.codex/config.toml' };
     }
 
     if (preset.presetId === 'gemini-cli') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "clideck",
-  "version": "1.26.3",
+  "version": "1.27.1",
   "description": "One screen for all your AI coding agents — run, monitor, and manage multiple CLI agents from a single browser tab",
   "main": "server.js",
   "bin": {
@@ -33,7 +33,6 @@
   },
   "homepage": "https://clideck.dev/",
   "dependencies": {
-    "@mariozechner/pi-ai": "^0.62.0",
     "@xterm/addon-fit": "^0.11.0",
     "@xterm/xterm": "^6.0.0",
     "node-pty": "^1.1.0",

package/plugin-loader.js

@@ -1,5 +1,8 @@
 const { readdirSync, readFileSync, existsSync, mkdirSync, cpSync, rmSync } = require('fs');
 const { join, sep } = require('path');
+const { execFile: _execFile } = require('child_process');
+// Windows needs shell:true for npm (it's npm.cmd, not a binary)
+const npmExec = (args, opts, cb) => _execFile('npm', args, { ...opts, shell: process.platform === 'win32' }, cb);
 const { DATA_DIR } = require('./paths');
 const transcript = require('./transcript');
 
@@ -8,6 +11,7 @@ mkdirSync(PLUGINS_DIR, { recursive: true });
 
 // Seed bundled plugins — copy if missing, update if bundled version is newer
 const BUNDLED_DIR = join(__dirname, 'plugins');
+const updatedBundled = new Set(); // plugins updated during seed — install state must be cleared
 if (existsSync(BUNDLED_DIR)) {
   for (const entry of readdirSync(BUNDLED_DIR, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
@@ -22,6 +26,7 @@ if (existsSync(BUNDLED_DIR)) {
         const installedManifest = JSON.parse(readFileSync(installedManifestFile, 'utf8'));
         if (bundledManifest.version !== installedManifest.version) {
           cpSync(join(BUNDLED_DIR, entry.name), target, { recursive: true });
+          if (bundledManifest.install) updatedBundled.add(bundledManifest.id || entry.name);
           console.log(`[plugin] updated ${entry.name} ${installedManifest.version} → ${bundledManifest.version}`);
         }
       } catch {}
@@ -30,6 +35,7 @@ if (existsSync(BUNDLED_DIR)) {
 }
 
 const plugins = new Map();
+const uninstalledPlugins = new Map(); // id → { manifest, dir }
 const inputHooks = [];
 const outputHooks = [];
 const statusHooks = [];
@@ -66,6 +72,57 @@ function removeHooks(pluginId) {
   }
 }
 
+// Check if a plugin with install: "npm" has been installed.
+// Config is the source of truth, but we self-correct if node_modules is missing.
+function isInstalled(dir, manifest) {
+  if (!manifest.install) return true; // no install step declared
+  const cfg = getConfigFn?.();
+  if (!cfg?.pluginInstalled?.[manifest.id]) return false;
+  // Self-correct: config says installed but files are gone
+  if (!existsSync(join(dir, 'node_modules'))) {
+    console.log(`[plugin] ${manifest.name}: node_modules missing, resetting install state`);
+    delete cfg.pluginInstalled[manifest.id];
+    saveConfigFn?.(cfg);
+    return false;
+  }
+  return true;
+}
+
+function readManifest(dir, name) {
+  let manifest = { id: name, name, version: '0.0.0' };
+  const manifestFile = existsSync(join(dir, 'clideck-plugin.json')) ? join(dir, 'clideck-plugin.json') : join(dir, 'termix-plugin.json');
+  if (existsSync(manifestFile)) {
+    try { manifest = { ...manifest, ...JSON.parse(readFileSync(manifestFile, 'utf8')) }; }
+    catch (e) { console.error(`[plugin:${name}] bad manifest: ${e.message}`); return null; }
+  }
+  if (manifest.settings != null) {
+    if (!Array.isArray(manifest.settings)) {
+      console.error(`[plugin:${name}] manifest.settings must be an array, ignoring`);
+      manifest.settings = [];
+    } else {
+      manifest.settings = manifest.settings.filter(s =>
+        s && typeof s === 'object' && typeof s.key === 'string' && s.key
+      );
+    }
+  }
+  return manifest;
+}
+
+function loadPlugin(manifest, dir) {
+  if (plugins.has(manifest.id)) return;
+  const state = { manifest, dir, shutdownFns: [], actions: [], dynamicOptions: {} };
+  plugins.set(manifest.id, state);
+  try {
+    const mod = require(join(dir, 'index.js'));
+    if (typeof mod.init === 'function') mod.init(buildApi(manifest.id, dir, state));
+    console.log(`[plugin] ${manifest.name} v${manifest.version}`);
+  } catch (e) {
+    console.error(`[plugin:${manifest.id}] init failed: ${e.message}`);
+    removeHooks(manifest.id);
+    plugins.delete(manifest.id);
+  }
+}
+
 function init(broadcast, getSessions, getConfig, saveConfig, sessionInput, createProgrammatic, closeSession) {
   broadcastFn = broadcast;
   sessionsFn = getSessions;
@@ -75,47 +132,40 @@ function init(broadcast, getSessions, getConfig, saveConfig, sessionInput, creat
   createSessionFn = createProgrammatic;
   closeSessionFn = closeSession;
 
+  // Clear install state for bundled plugins that were updated during seed
+  if (updatedBundled.size) {
+    const cfg = getConfig();
+    if (cfg?.pluginInstalled) {
+      for (const id of updatedBundled) {
+        if (cfg.pluginInstalled[id]) {
+          delete cfg.pluginInstalled[id];
+          console.log(`[plugin] cleared install state for updated ${id}`);
+        }
+      }
+      saveConfig(cfg);
+    }
+  }
+
   for (const entry of readdirSync(PLUGINS_DIR, { withFileTypes: true })) {
     if (!entry.isDirectory()) continue;
     const dir = join(PLUGINS_DIR, entry.name);
-    const entryFile = join(dir, 'index.js');
-    if (!existsSync(entryFile)) continue;
-
-    let manifest = { id: entry.name, name: entry.name, version: '0.0.0' };
-    const manifestFile = existsSync(join(dir, 'clideck-plugin.json')) ? join(dir, 'clideck-plugin.json') : join(dir, 'termix-plugin.json');
-    if (existsSync(manifestFile)) {
-      try { manifest = { ...manifest, ...JSON.parse(readFileSync(manifestFile, 'utf8')) }; }
-      catch (e) { console.error(`[plugin:${entry.name}] bad manifest: ${e.message}`); continue; }
-    }
-    // Validate settings shape
-    if (manifest.settings != null) {
-      if (!Array.isArray(manifest.settings)) {
-        console.error(`[plugin:${entry.name}] manifest.settings must be an array, ignoring`);
-        manifest.settings = [];
-      } else {
-        manifest.settings = manifest.settings.filter(s =>
-          s && typeof s === 'object' && typeof s.key === 'string' && s.key
-        );
-      }
-    }
+    if (!existsSync(join(dir, 'index.js'))) continue;
 
-    if (plugins.has(manifest.id)) {
+    const manifest = readManifest(dir, entry.name);
+    if (!manifest) continue;
+
+    if (plugins.has(manifest.id) || uninstalledPlugins.has(manifest.id)) {
       console.error(`[plugin:${manifest.id}] duplicate ID, skipping ${dir}`);
       continue;
     }
 
-    const state = { manifest, dir, shutdownFns: [], actions: [], dynamicOptions: {} };
-    plugins.set(manifest.id, state);
-
-    try {
-      const mod = require(entryFile);
-      if (typeof mod.init === 'function') mod.init(buildApi(manifest.id, dir, state));
-      console.log(`[plugin] ${manifest.name} v${manifest.version}`);
-    } catch (e) {
-      console.error(`[plugin:${manifest.id}] init failed: ${e.message}`);
-      removeHooks(manifest.id);
-      plugins.delete(manifest.id);
+    if (!isInstalled(dir, manifest)) {
+      uninstalledPlugins.set(manifest.id, { manifest, dir });
+      console.log(`[plugin] ${manifest.name} v${manifest.version} (not installed)`);
+      continue;
     }
+
+    loadPlugin(manifest, dir);
   }
 }
 
@@ -232,17 +282,19 @@ function buildApi(pluginId, pluginDir, state) {
     },
 
     resolve(specifier) {
-      // Resolve a package from the app's node_modules. Intended for bundled
-      // plugins that ship with CliDeck and can rely on app-level dependencies.
-      // Third-party plugins should bundle their own deps or be self-contained.
-      try { return require.resolve(specifier); } catch {}
+      // Resolve from plugin-local node_modules first, then app-level
       const parts = specifier.startsWith('@') ? specifier.split('/').slice(0, 2) : [specifier.split('/')[0]];
-      const pkgDir = join(__dirname, 'node_modules', ...parts);
-      const pkg = JSON.parse(readFileSync(join(pkgDir, 'package.json'), 'utf8'));
-      const entry = typeof pkg.exports === 'string' ? pkg.exports
-        : pkg.exports?.['.']?.import || pkg.exports?.['.']?.default || pkg.exports?.['.']
-        || pkg.module || pkg.main || 'index.js';
-      return join(pkgDir, entry);
+      for (const base of [join(pluginDir, 'node_modules'), join(__dirname, 'node_modules')]) {
+        const pkgDir = join(base, ...parts);
+        try {
+          const pkg = JSON.parse(readFileSync(join(pkgDir, 'package.json'), 'utf8'));
+          const entry = typeof pkg.exports === 'string' ? pkg.exports
+            : pkg.exports?.['.']?.import || pkg.exports?.['.']?.default || pkg.exports?.['.']
+            || pkg.module || pkg.main || 'index.js';
+          return join(pkgDir, entry);
+        } catch {}
+      }
+      return require.resolve(specifier);
     },
     onShutdown(fn) { state.shutdownFns.push(fn); },
     log(msg) { console.log(`[plugin:${pluginId}] ${msg}`); },
@@ -352,19 +404,37 @@ function handleMessage(msg) {
 
 function getInfo() {
   const cfg = getConfigFn?.();
-  return [...plugins.values()].map(p => ({
+  const installed = [...plugins.values()].map(p => ({
     id: p.manifest.id,
     name: p.manifest.name,
     version: p.manifest.version,
     author: p.manifest.author || '',
     description: p.manifest.description || '',
+    icon: p.manifest.icon || '',
     settings: p.manifest.settings || [],
     settingValues: cfg?.pluginSettings?.[p.manifest.id] || {},
     dynamicOptions: p.dynamicOptions || {},
     actions: p.actions,
     hasClient: existsSync(join(p.dir, 'client.js')),
     bundled: BUNDLED_IDS.has(p.manifest.id),
+    installed: true,
+  }));
+  const pending = [...uninstalledPlugins.values()].map(u => ({
+    id: u.manifest.id,
+    name: u.manifest.name,
+    version: u.manifest.version,
+    author: u.manifest.author || '',
+    description: u.manifest.description || '',
+    icon: u.manifest.icon || '',
+    settings: [],
+    settingValues: {},
+    dynamicOptions: {},
+    actions: [],
+    hasClient: false,
+    bundled: BUNDLED_IDS.has(u.manifest.id),
+    installed: false,
   }));
+  return [...installed, ...pending];
 }
 
 function resolveFile(urlPath) {
@@ -413,6 +483,35 @@ const BUNDLED_IDS = new Set(
     : []
 );
 
+function installPlugin(pluginId, callback) {
+  const entry = uninstalledPlugins.get(pluginId);
+  if (!entry) return callback(new Error('Plugin not found or already installed'));
+  const { manifest, dir } = entry;
+  if (manifest.install !== 'npm') return callback(new Error(`Unknown install type: ${manifest.install}`));
+  console.log(`[plugin] installing ${manifest.name}...`);
+  npmExec(['install', '--production'], { cwd: dir, timeout: 120000 }, (err) => {
+    if (err) {
+      console.error(`[plugin:${pluginId}] install failed: ${err.message}`);
+      return callback(err);
+    }
+    uninstalledPlugins.delete(pluginId);
+    loadPlugin(manifest, dir);
+    // Only persist install state if plugin actually loaded
+    if (!plugins.has(pluginId)) {
+      uninstalledPlugins.set(pluginId, { manifest, dir });
+      return callback(new Error('Plugin installed but failed to load'));
+    }
+    const cfg = getConfigFn?.();
+    if (cfg) {
+      if (!cfg.pluginInstalled) cfg.pluginInstalled = {};
+      cfg.pluginInstalled[pluginId] = true;
+      saveConfigFn?.(cfg);
+    }
+    console.log(`[plugin] ${manifest.name} installed`);
+    callback(null);
+  });
+}
+
 function removePlugin(pluginId) {
   if (BUNDLED_IDS.has(pluginId)) return { success: false, message: 'Cannot remove a built-in plugin' };
   const state = plugins.get(pluginId);
@@ -427,6 +526,12 @@ function removePlugin(pluginId) {
   for (const fn of state.shutdownFns) { try { fn(); } catch {} }
   removeHooks(pluginId);
   plugins.delete(pluginId);
+  // Clear persisted install state
+  const cfg = getConfigFn?.();
+  if (cfg?.pluginInstalled?.[pluginId]) {
+    delete cfg.pluginInstalled[pluginId];
+    saveConfigFn?.(cfg);
+  }
   console.log(`[plugin] removed ${pluginId}`);
   return { success: true };
 }
@@ -435,6 +540,6 @@ module.exports = {
   PLUGINS_DIR, BUNDLED_IDS,
   init, shutdown,
   transformInput, notifyOutput, notifyStatus, notifyTranscript, notifyMenu, clearStatus, isWorking, shouldAutoApproveMenu,
-  handleMessage, updateSetting, getInfo, resolveFile, removePlugin,
+  handleMessage, updateSetting, getInfo, resolveFile, installPlugin, removePlugin,
   getPills, getPillLogs,
 };

package/plugins/autopilot/clideck-plugin.json

@@ -1,9 +1,11 @@
 {
   "id": "autopilot",
   "name": "Autopilot",
-  "version": "0.14.4",
+  "version": "0.15.0",
   "author": "CliDeck",
   "description": "Multi-agent orchestration — routes output between agents automatically",
+  "icon": "<svg class=\"w-4 h-4\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"12\" cy=\"12\" r=\"10\"/><path d=\"M12 6v6l4 2\"/></svg>",
+  "install": "npm",
   "settings": [
     {
       "key": "enabled",

package/plugins/autopilot/package.json

@@ -0,0 +1,7 @@
+{
+  "name": "clideck-plugin-autopilot",
+  "private": true,
+  "dependencies": {
+    "@mariozechner/pi-ai": ">=0.62.0"
+  }
+}

package/plugins/trim-clip/clideck-plugin.json

@@ -4,6 +4,7 @@
   "version": "1.2.0",
   "author": "CliDeck",
   "description": "Copy selected terminal text with trailing whitespace trimmed",
+  "icon": "<svg class=\"w-4 h-4\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><circle cx=\"6\" cy=\"6\" r=\"3\"/><circle cx=\"6\" cy=\"18\" r=\"3\"/><line x1=\"20\" y1=\"4\" x2=\"8.12\" y2=\"15.88\"/><line x1=\"14.47\" y1=\"14.48\" x2=\"20\" y2=\"20\"/><line x1=\"8.12\" y1=\"8.12\" x2=\"12\" y2=\"12\"/></svg>",
   "settings": [
     {
       "key": "enabled",

package/plugins/voice-input/clideck-plugin.json

@@ -4,6 +4,7 @@
   "version": "1.2.0",
   "author": "CliDeck",
   "description": "Dictate prompts with your voice using Whisper speech-to-text",
+  "icon": "<svg class=\"w-4 h-4\" fill=\"none\" viewBox=\"0 0 24 24\" stroke=\"currentColor\" stroke-width=\"1.5\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M12 1a3 3 0 0 0-3 3v8a3 3 0 0 0 6 0V4a3 3 0 0 0-3-3z\"/><path d=\"M19 10v2a7 7 0 0 1-14 0v-2\"/><line x1=\"12\" y1=\"19\" x2=\"12\" y2=\"23\"/><line x1=\"8\" y1=\"23\" x2=\"16\" y2=\"23\"/></svg>",
   "settings": [
     {
       "key": "enabled",

package/public/index.html

@@ -324,11 +324,9 @@
         <div class="mb-5">
           <label class="block text-xs text-slate-400 mb-1.5 ml-6">Minimum working time before notifying</label>
           <select id="cfg-notify-min-work" class="ml-6 px-3 py-1.5 text-sm bg-slate-800 border border-slate-600 rounded-md text-slate-200 outline-none focus:border-blue-500 transition-colors cursor-pointer">
-            <option value="5">5 seconds</option>
+            <option value="0">Always</option>
             <option value="10" selected>10 seconds</option>
-            <option value="20">20 seconds</option>
             <option value="30">30 seconds</option>
-            <option value="60">60 seconds</option>
           </select>
         </div>
         <div class="mt-6 px-4 py-3 rounded-lg bg-slate-800/50 border border-slate-700/40">