pi-web-ui 0.64.7 → 0.65.0

package/README.md

@@ -280,6 +280,14 @@ Example — install the webmail plugin:
 pi-web-ui install https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/webmail
 ```
 
+You can also install from inside the UI: **设置 → 界面插件 → 插件市场** lists
+maintainable plugins (the same set, shipped in `plugins/catalog.json`) with
+full **安装 / 更新 / 卸载** controls (updates keep `config.json`), and lets you
+drop any third-party plugin into the list via **添加插件** (paste `owner/repo`
+or an `owner/repo/subdir` source) — your additions are stored in
+`<dataDir>/plugin-catalog.json`. A plugin author can contribute to the built-in
+list with a one-line PR to `plugins/catalog.json`.
+
 Each plugin's directory in the repo has its own `README.md` with full feature
 lists, configuration and per-plugin caveats.
 

package/dist/server/index.js

@@ -437,7 +437,7 @@ const service = ENGINE === "dsh"
     join(DATA_DIR, "client-state.json"));
 // Optional UI plugins (<dataDir>/plugins/<id>/): scanned on every client
 // attach so freshly dropped plugins appear without a server restart.
-const pluginMgr = new PluginManager(DATA_DIR, CWD);
+const pluginMgr = new PluginManager(DATA_DIR, CWD, join(pkgRoot, "plugins", "catalog.json"));
 // MCP 工具桥：读取 <dataDir>/mcp.json 启动外部 MCP 服务器（stdio），把它们的
 // 工具并入与插件工具相同的 customTools 管线；单服务器失败不炸进程。
 const mcpBridge = new McpBridge(DATA_DIR, (...a) => console.log("[mcp]", ...a));
@@ -849,6 +849,26 @@ wss.on("connection", (ws) => {
             case "plugins_reload":
                 void pluginMgr.reload().then(() => pluginMgr.pushToAll());
                 break;
+            case "plugin_catalog_add": {
+                const r = pluginMgr.addCatalogEntry(msg.entry ?? {});
+                if (r.error) {
+                    cs?.emitNotice("error", `添加到插件列表失败：${r.error}`, `Failed to add to plugin list: ${r.error}`);
+                }
+                else {
+                    cs?.emitNotice("info", "已添加到插件列表", "Added to the plugin list");
+                }
+                break;
+            }
+            case "plugin_catalog_remove": {
+                const r = pluginMgr.removeCatalogEntry(msg.id);
+                if (r.error) {
+                    cs?.emitNotice("error", `从插件列表移除失败：${r.error}`, `Failed to remove from plugin list: ${r.error}`);
+                }
+                else {
+                    cs?.emitNotice("info", "已从插件列表移除", "Removed from the plugin list");
+                }
+                break;
+            }
             case "dsh_patches_list":
                 void cs.listDshPatches?.();
                 break;
@@ -900,21 +920,38 @@ wss.on("connection", (ws) => {
                     protocolVersion: PROTOCOL_VERSION,
                     engine: ENGINE,
                 });
-                cs.flushSnapshot();
                 // Plugin catalog: re-scan + activate new dirs on every attach so
                 // freshly dropped plugins show up without a server restart.
                 pluginMgr
                     .ensureLoaded()
                     .then((plugins) => {
+                    if (closed)
+                        return;
                     send({ type: "plugins", plugins, epoch: pluginMgr.epoch });
+                    // 插件市场列表（可一键安装的清单）随附推一次。
+                    send({
+                        type: "plugin_catalog",
+                        entries: pluginMgr.catalog(),
+                        epoch: pluginMgr.catalogEpochValue,
+                    });
                     // 让各插件向新接入的客户端推送自身初始状态（onAttach 钩子）——
                     // 插件不要依赖客户端挂载后自己拉（见 plugins.ts onAttach 注释）。
                     pluginMgr.notifyAttach(cid);
                     // 插件命令可能在本客户端 attach 过程中才注册（首载竞态）——
                     // 重推一次目录，保证选择器完整。
                     service.applyPluginCommandCatalog();
+                    // 插件清单【先于】快照推送：前端渲染历史消息前就拿到 renderer
+                    // 注册表（plugin-fence.ts），`` ```lang `` 围栏才能立即命中插件；
+                    // 否则消息先落成普通代码块，清单后到也不会重渲。
+                    cs.flushSnapshot();
                 })
-                    .catch(() => { });
+                    .catch(() => {
+                    if (closed)
+                        return;
+                    // ensureLoaded 失败（如磁盘读错）不能卡死快照——前端 30s 无消息
+                    // 会重连，重连又失败会陷入循环。至少把状态推下去。
+                    cs.flushSnapshot();
+                });
                 // Replay anything that arrived while the session was starting.
                 const queued = pending;
                 pending = [];

package/dist/server/plugin-catalog.js

@@ -0,0 +1,159 @@
+/**
+ * 插件市场 / 插件列表 —— 可一键安装的插件清单。
+ *
+ * 两层来源（合并后经协议 plugin_catalog 推给前端）：
+ *   - builtin : <pkgRoot>/plugins/catalog.json（随包发布，官方维护列表；
+ *               插件作者把新插件加进来 = 往这个文件加一条 + PR）
+ *   - custom  : <dataDir>/plugin-catalog.json（用户在设置面板「添加到列表」，
+ *               任何第三方插件都能随时填进列表；仅 custom 条目可经 UI 移除）
+ *
+ * 条目结构见 protocol.UiPluginCatalogEntry。`id` 是安装落盘目录名
+ * （<dataDir>/plugins/<id>）；安装固定用 `pi-web-ui install <source>
+ * --name <id>` 保证目录名 == 列表 id，前端据此判断已装/未装。
+ *
+ * 设计上服务端不做网络探测（不拉 manifest）：名称/简介/图标由条目本身携带
+ * （作者填），id 由来源推导或作者显式指定 —— 保持离线可用、可单测。
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { dirname } from "node:path";
+/** 合法插件 id（与 server/plugins.ts 的 ID_RE 一致，防路径穿越）。 */
+const ID_RE = /^[A-Za-z0-9_-]+$/;
+/** source 校验：owner/repo 或 owner/repo/子路径[#ref]。宽松校验，实际解析
+ *  交给 CLI（pi-web-ui install）。只接受远程 GitHub 源，拒绝本地路径。 */
+function isValidSource(source) {
+    if (!source || source.length > 300)
+        return false;
+    if (source.startsWith("/") || /^[A-Za-z]:[\\/]/.test(source))
+        return false;
+    if (/^https?:\/\//.test(source))
+        return true; // 完整 URL（install 也支持）
+    const spec = source.split("#")[0].replace(/\/+$/, "");
+    const segs = spec.split("/").filter(Boolean);
+    if (segs.length < 2)
+        return false;
+    for (const s of segs)
+        if (s === "." || s === "..")
+            return false;
+    return true;
+}
+/** 推导默认 id：与 CLI（bin/pi-web-ui.mjs）的规则对齐 —— 子路径末段 > 仓库名
+ *  > 来源末段；非法字符替换为 -，两端去 -；空则 "plugin"。显式 raw（含合法
+ *  id 校验）优先。返回的 id 不保证通过 ID_RE（Cyrillic 等），调用方再校验。 */
+export function deriveCatalogId(raw, source) {
+    if (raw && ID_RE.test(raw))
+        return raw;
+    const spec = source.split("#")[0].replace(/\/+$/, "");
+    const segs = spec.split("/").filter(Boolean);
+    const last = segs.length >= 2 ? segs[segs.length - 1] : (segs[0] ?? "plugin");
+    const cleaned = last.replace(/[^A-Za-z0-9_-]/g, "-").replace(/^-+|-+$/g, "");
+    return cleaned || "plugin";
+}
+function readJsonSafe(path, fallback) {
+    try {
+        return JSON.parse(readFileSync(path, "utf8"));
+    }
+    catch {
+        return fallback;
+    }
+}
+function atomicWrite(path, data) {
+    mkdirSync(dirname(path), { recursive: true });
+    const tmp = `${path}.tmp-${process.pid}`;
+    writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n");
+    renameSync(tmp, path);
+}
+/** 把任意对象规范化为合法条目；非法则返回 null。 */
+function toEntry(raw, builtin) {
+    const source = typeof raw.source === "string" ? raw.source.trim() : "";
+    if (!isValidSource(source))
+        return null;
+    const id = deriveCatalogId(typeof raw.id === "string" ? raw.id.trim() : undefined, source);
+    if (!ID_RE.test(id))
+        return null;
+    const name = typeof raw.name === "string" && raw.name.trim() ? raw.name.trim() : id;
+    const description = typeof raw.description === "string" && raw.description.trim() ? raw.description.trim() : undefined;
+    const descriptionEn = typeof raw.descriptionEn === "string" && raw.descriptionEn.trim() ? raw.descriptionEn.trim() : undefined;
+    const icon = typeof raw.icon === "string" && raw.icon.trim() ? raw.icon.trim() : undefined;
+    const homepage = typeof raw.homepage === "string" && raw.homepage.trim() ? raw.homepage.trim() : undefined;
+    return {
+        id,
+        name,
+        source,
+        builtin,
+        ...(description ? { description } : {}),
+        ...(descriptionEn ? { descriptionEn } : {}),
+        ...(icon ? { icon } : {}),
+        ...(homepage ? { homepage } : {}),
+    };
+}
+/** 读合并后的目录：builtin 在前，custom 在后（同 id 时 custom 覆盖 builtin）。 */
+export function readCatalog(builtinPath, customPath) {
+    const out = [];
+    const seen = new Set();
+    if (existsSync(builtinPath)) {
+        const raw = readJsonSafe(builtinPath, []);
+        if (Array.isArray(raw)) {
+            for (const it of raw) {
+                const e = it && typeof it === "object" ? toEntry(it, true) : null;
+                if (e && !seen.has(e.id)) {
+                    seen.add(e.id);
+                    out.push(e);
+                }
+            }
+        }
+    }
+    const rawCustom = readJsonSafe(customPath, {});
+    const list = rawCustom && typeof rawCustom === "object" && Array.isArray(rawCustom.entries)
+        ? rawCustom.entries
+        : [];
+    for (const it of list) {
+        const e = it && typeof it === "object" ? toEntry(it, false) : null;
+        if (!e)
+            continue;
+        const idx = out.findIndex((x) => x.id === e.id);
+        if (idx >= 0)
+            out[idx] = e;
+        else
+            out.push(e);
+        seen.add(e.id);
+    }
+    return out;
+}
+/** 把用户填的条目追加进 custom 文件（同 id 覆盖旧条目）；返回规范化后的条目。
+ *  非法来源/条目抛 Error。 */
+export function addCustomEntry(customPath, input) {
+    const source = String(input?.source ?? "").trim();
+    if (!isValidSource(source)) {
+        throw new Error("来源需为 owner/repo 或 owner/repo/子目录（不支持本地路径）");
+    }
+    const id = deriveCatalogId(typeof input?.id === "string" ? input.id.trim() : undefined, source);
+    if (!ID_RE.test(id))
+        throw new Error(`非法 id "${id}"（仅限字母数字-_）`);
+    const raw = readJsonSafe(customPath, {});
+    const entries = Array.isArray(raw.entries) ? raw.entries : [];
+    const next = entries.filter((x) => !(x && typeof x === "object" && x.id === id));
+    next.push({
+        id,
+        source,
+        ...(typeof input?.name === "string" && input.name.trim() ? { name: input.name.trim() } : {}),
+        ...(typeof input?.description === "string" && input.description.trim()
+            ? { description: input.description.trim() }
+            : {}),
+        ...(typeof input?.icon === "string" && input.icon.trim() ? { icon: input.icon.trim() } : {}),
+    });
+    atomicWrite(customPath, { entries: next });
+    return toEntry(next[next.length - 1], false);
+}
+/** 移除用户添加的条目（builtin 由文件自身控制，不可经此删除）；返回是否删掉。 */
+export function removeCustomEntry(customPath, id) {
+    if (!ID_RE.test(id))
+        return false;
+    const raw = readJsonSafe(customPath, {});
+    if (!Array.isArray(raw.entries))
+        return false;
+    const next = raw.entries.filter((x) => !(x && typeof x === "object" && x.id === id));
+    if (next.length === raw.entries.length)
+        return false;
+    atomicWrite(customPath, { entries: next });
+    return true;
+}

package/dist/server/plugins.js

@@ -21,6 +21,7 @@ import { existsSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { join, resolve, sep } from "node:path";
 import { pathToFileURL } from "node:url";
 import { PluginStorage, PluginSecrets, ensurePluginDeps, WorkspaceFS } from "./plugin-facilities.js";
+import { readCatalog, addCustomEntry, removeCustomEntry } from "./plugin-catalog.js";
 import { createHash } from "node:crypto";
 /** 合法插件 id：字母/数字/下划线/连字符，防路径穿越（同 themes.ts 的做法）。 */
 const ID_RE = /^[A-Za-z0-9_-]+$/;
@@ -127,6 +128,7 @@ function saveSettingsValues(dir, schema, values) {
 }
 export class PluginManager {
     dataDir;
+    builtinCatalogPath;
     loaded = new Map();
     /** 已 import 过但无入口/失败的目录——避免重复 import 与重复报错。 */
     attempted = new Set();
@@ -146,10 +148,15 @@ export class PluginManager {
     onBgTasksChanged = undefined;
     /** 服务端重载纪元：每次 reload() +1，前端用作 import 缓存击穿参数。 */
     epochCounter = 0;
+    /** 插件市场列表纪元：每次 add/remove +1，前端据此重渲。 */
+    catalogEpoch = 0;
     /** 当前全局工作区（host.cwd 的背后存储）——随 notifyCwd 更新。 */
     cwdValue;
-    constructor(dataDir, cwd) {
+    constructor(dataDir, cwd, 
+    /** 随包发布的默认插件列表（<pkgRoot>/plugins/catalog.json）。缺省 = 无内置列表。 */
+    builtinCatalogPath) {
         this.dataDir = dataDir;
+        this.builtinCatalogPath = builtinCatalogPath;
         this.cwdValue = resolve(cwd);
     }
     /** index.ts 在客户端 set_cwd 成功后调用：更新全局工作区并扇出给
@@ -259,6 +266,49 @@ export class PluginManager {
     get epoch() {
         return this.epochCounter;
     }
+    /** 用户自定义插件列表文件（<dataDir>/plugin-catalog.json）。 */
+    get customCatalogPath() {
+        return join(this.dataDir, "plugin-catalog.json");
+    }
+    /** 合并后的插件市场列表（builtin + 用户自定义，同 id 用户覆盖）。 */
+    catalog() {
+        return this.builtinCatalogPath ? readCatalog(this.builtinCatalogPath, this.customCatalogPath) : [];
+    }
+    /** 插件市场列表纪元（随 plugin_catalog 消息下发）。 */
+    get catalogEpochValue() {
+        return this.catalogEpoch;
+    }
+    /** 把插件市场列表推给所有 socket。 */
+    async pushCatalog() {
+        this.deliverAll({ type: "plugin_catalog", entries: this.catalog(), epoch: this.catalogEpoch });
+    }
+    /** 往用户自定义列表加一条（同 id 覆盖）；返回错误信息或 null（成功）。
+     *  成功后 epoch+1 并重推列表。 */
+    addCatalogEntry(input) {
+        try {
+            addCustomEntry(this.customCatalogPath, input);
+            this.catalogEpoch += 1;
+            void this.pushCatalog();
+            return {};
+        }
+        catch (err) {
+            return { error: err.message };
+        }
+    }
+    /** 移除一条用户自定义条目（builtin 不可经此删除）；返回错误信息或 null。 */
+    removeCatalogEntry(id) {
+        try {
+            const ok = removeCustomEntry(this.customCatalogPath, id);
+            if (!ok)
+                return { error: "未找到该条目，或它是内置条目（不可移除）" };
+            this.catalogEpoch += 1;
+            void this.pushCatalog();
+            return {};
+        }
+        catch (err) {
+            return { error: err.message };
+        }
+    }
     addSender(send, cid) {
         const s = { cid, send };
         this.senders.add(s);
@@ -614,6 +664,12 @@ export class PluginManager {
                     // 声明式设置 schema + 当前存值（⚙ 面板自动渲染表单用）
                     settingsSchema: parseSettingsSchema(m.settings),
                     settingsValues: storedSettingsValues(dir, parseSettingsSchema(m.settings)),
+                    // 可渲染的 fenced-code 语言（manifest "renderers"）——前端据此按需加载
+                    renderers: Array.isArray(m.renderers)
+                        ? m.renderers.filter((r) => typeof r === "string" && r.length > 0).slice(0, 32)
+                        : undefined,
+                    // 是否有独立视图 tab（manifest "view"，缺省 true）；纯 renderer 插件写 false
+                    view: typeof m.view === "boolean" ? m.view : true,
                     // 安装来源（pi-web-ui install 写入的 .pi-source.json）——
                     // 设置面板据此显示「更新」按钮；手工拷入的插件没有此文件。
                     source: await readFile(join(dir, ".pi-source.json"), "utf8")

package/package.json

@@ -1,110 +1,113 @@
 {
-  "name": "pi-web-ui",
-  "version": "0.64.7",
-  "description": "Web chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable",
-  "license": "MIT",
-  "author": {
-    "name": "xingshuyin",
-    "email": "xingshuyin@users.noreply.github.com"
-  },
-  "type": "module",
-  "bin": {
-    "pi-web-ui": "bin/pi-web-ui.mjs"
-  },
-  "main": "bin/pi-web-ui.mjs",
-  "files": [
-    "bin/",
-    "dist/",
-    "web/dist/",
-    "web/public/",
-    "themes/",
-    "deploy/",
-    "extensions/",
-    "README.md",
-    "LICENSE"
-  ],
-  "keywords": [
-    "pi",
-    "pi-package",
-    "coding-agent",
-    "ai",
-    "chat",
-    "web-ui",
-    "terminal",
-    "llm"
-  ],
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/xing-shuyin/pi-web-ui.git"
-  },
-  "pi": {
-    "extensions": [
-      "./extensions"
-    ]
-  },
-  "engines": {
-    "node": ">=22.19.0"
-  },
-  "scripts": {
-    "prepublishOnly": "npm run build",
-    "dev": "concurrently -k -n server,web -c blue,green \"npm:dev:server\" \"npm:dev:web\"",
-    "dev:server": "cross-env PI_WEB_PORT=8788 PI_WEB_ALLOW_ORIGINS=http://localhost:5173,http://127.0.0.1:5173 node --watch --import tsx server/index.ts",
-    "dev:web": "vite --config web/vite.config.ts",
-    "build": "npm run build:web && npm run build:server && npm run build:dsh-runtime",
-    "build:web": "vite build --config web/vite.config.ts",
-    "build:server": "tsc -p tsconfig.server.json",
-    "build:dsh-runtime": "node scripts/copy-dsh-runtime.mjs",
-    "typecheck": "tsc -p tsconfig.server.json --noEmit && tsc -p web/tsconfig.json --noEmit && tsc -p tsconfig.tests.json --noEmit",
-    "test": "vitest run",
-    "test:unit": "vitest run",
-    "test:smoke": "node tests/run-smoke.mjs",
-    "check:protocol": "node scripts/check-protocol-sync.mjs",
-    "test:freeze": "node tests/freeze-test.mjs",
-    "start": "node dist/server/index.js",
-    "format": "prettier --write server/ web/src/ extensions/ scripts/ bin/ tests/*.mjs tests/unit/ *.mjs",
-    "format:check": "prettier --check server/ web/src/ extensions/ scripts/ bin/ tests/*.mjs tests/unit/ *.mjs",
-    "lint": "oxlint server/ web/src/ extensions/ scripts/",
-    "lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/"
-  },
-  "dependencies": {
-    "@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.1-rc.2",
-    "@deepseek-ai/dsh-sdk-protocol": "^0.1.1-rc.2",
-    "@earendil-works/pi-coding-agent": "^0.84.4",
-    "@xterm/addon-fit": "^0.11.0",
-    "@xterm/xterm": "^6.0.0",
-    "compression": "^1.8.1",
-    "express": "^4.21.2",
-    "highlight.js": "^11.10.0",
-    "mermaid": "^11.17.2",
-    "node-pty": "^1.1.0",
-    "react": "^18.3.1",
-    "react-dom": "^18.3.1",
-    "react-icons": "^5.7.0",
-    "react-markdown": "^9.0.1",
-    "rehype-highlight": "^7.0.1",
-    "remark-gfm": "^4.0.0",
-    "typebox": "^1.3.14",
-    "ws": "^8.18.0"
-  },
-  "devDependencies": {
-    "@types/compression": "^1.8.1",
-    "@types/express": "^4.17.21",
-    "@types/node": "^22.10.0",
-    "@types/react": "^18.3.12",
-    "@types/react-dom": "^18.3.1",
-    "@types/ws": "^8.5.13",
-    "@vitejs/plugin-react": "^4.3.4",
-    "concurrently": "^9.1.0",
-    "cross-env": "^10.1.0",
-    "oxlint": "^1.81.0",
-    "playwright-core": "^1.62.1",
-    "prettier": "^3.9.6",
-    "tsx": "^4.19.2",
-    "typescript": "^5.7.2",
-    "vite": "^6.0.3",
-    "vitest": "^4.1.11"
-  },
-  "allowScripts": {
-    "node-pty@1.1.0": true
-  }
+	"name": "pi-web-ui",
+	"version": "0.65.0",
+	"description": "Web chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable",
+	"license": "MIT",
+	"author": {
+		"name": "xingshuyin",
+		"email": "xingshuyin@users.noreply.github.com"
+	},
+	"type": "module",
+	"bin": {
+		"pi-web-ui": "bin/pi-web-ui.mjs"
+	},
+	"main": "bin/pi-web-ui.mjs",
+	"files": [
+		"bin/",
+		"dist/",
+		"web/dist/",
+		"web/public/",
+		"themes/",
+		"deploy/",
+		"extensions/",
+		"plugins/catalog.json",
+		"README.md",
+		"LICENSE"
+	],
+	"keywords": [
+		"pi",
+		"pi-package",
+		"coding-agent",
+		"ai",
+		"chat",
+		"web-ui",
+		"terminal",
+		"llm"
+	],
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/xing-shuyin/pi-web-ui.git"
+	},
+	"pi": {
+		"extensions": [
+			"./extensions"
+		]
+	},
+	"engines": {
+		"node": ">=22.19.0"
+	},
+	"scripts": {
+		"prepublishOnly": "npm run build",
+		"dev": "concurrently -k -n server,web -c blue,green \"npm:dev:server\" \"npm:dev:web\"",
+		"dev:server": "cross-env PI_WEB_PORT=8788 PI_WEB_ALLOW_ORIGINS=http://localhost:5173,http://127.0.0.1:5173 node --watch --import tsx server/index.ts",
+		"dev:web": "vite --config web/vite.config.ts",
+		"build": "npm run build:web && npm run build:server && npm run build:dsh-runtime && npm run build:mermaid-vendor",
+		"build:web": "vite build --config web/vite.config.ts",
+		"build:server": "tsc -p tsconfig.server.json",
+		"build:dsh-runtime": "node scripts/copy-dsh-runtime.mjs",
+		"build:mermaid-vendor": "node scripts/build-mermaid-vendor.mjs",
+		"typecheck": "tsc -p tsconfig.server.json --noEmit && tsc -p web/tsconfig.json --noEmit && tsc -p tsconfig.tests.json --noEmit",
+		"test": "vitest run",
+		"test:unit": "vitest run",
+		"test:smoke": "node tests/run-smoke.mjs",
+		"check:protocol": "node scripts/check-protocol-sync.mjs",
+		"test:freeze": "node tests/freeze-test.mjs",
+		"start": "node dist/server/index.js",
+		"format": "prettier --write server/ web/src/ extensions/ scripts/ bin/ tests/*.mjs tests/unit/ *.mjs",
+		"format:check": "prettier --check server/ web/src/ extensions/ scripts/ bin/ tests/*.mjs tests/unit/ *.mjs",
+		"lint": "oxlint server/ web/src/ extensions/ scripts/",
+		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/"
+	},
+	"dependencies": {
+		"@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.1-rc.2",
+		"@deepseek-ai/dsh-sdk-protocol": "^0.1.1-rc.2",
+		"@earendil-works/pi-coding-agent": "^0.84.4",
+		"@xterm/addon-fit": "^0.11.0",
+		"@xterm/xterm": "^6.0.0",
+		"compression": "^1.8.1",
+		"express": "^4.21.2",
+		"highlight.js": "^11.10.0",
+		"node-pty": "^1.1.0",
+		"react": "^18.3.1",
+		"react-dom": "^18.3.1",
+		"react-icons": "^5.7.0",
+		"react-markdown": "^9.0.1",
+		"rehype-highlight": "^7.0.1",
+		"remark-gfm": "^4.0.0",
+		"typebox": "^1.3.14",
+		"ws": "^8.18.0"
+	},
+	"devDependencies": {
+		"@types/compression": "^1.8.1",
+		"@types/express": "^4.17.21",
+		"@types/node": "^22.10.0",
+		"@types/react": "^18.3.12",
+		"@types/react-dom": "^18.3.1",
+		"@types/ws": "^8.5.13",
+		"@vitejs/plugin-react": "^4.3.4",
+		"concurrently": "^9.1.0",
+		"cross-env": "^10.1.0",
+		"esbuild": "^0.25.12",
+		"mermaid": "^11.17.2",
+		"oxlint": "^1.81.0",
+		"playwright-core": "^1.62.1",
+		"prettier": "^3.9.6",
+		"tsx": "^4.19.2",
+		"typescript": "^5.7.2",
+		"vite": "^6.0.3",
+		"vitest": "^4.1.11"
+	},
+	"allowScripts": {
+		"node-pty@1.1.0": true
+	}
 }

package/plugins/catalog.json

@@ -0,0 +1,38 @@
+[
+	{
+		"id": "webmail",
+		"name": "webmail",
+		"icon": "📬",
+		"description": "网页邮箱：IMAP 收件 + SMTP 发信 + 新邮件通知，可开放给 AI 直接管理邮件。",
+		"descriptionEn": "Web mail: IMAP inbox + SMTP send + new-mail notifications, optionally let the AI manage mail.",
+		"source": "xing-shuyin/pi-web-ui/plugins/webmail",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/webmail"
+	},
+	{
+		"id": "db-client",
+		"name": "db-client",
+		"icon": "🗄️",
+		"description": "数据库连接管理：MySQL / PostgreSQL / SQLite / SQL Server / MongoDB / Redis 的库表浏览、SQL 查询与数据编辑。",
+		"descriptionEn": "Database client: browse schemas, run SQL and edit data across MySQL / PostgreSQL / SQLite / SQL Server / MongoDB / Redis.",
+		"source": "xing-shuyin/pi-web-ui/plugins/db-client",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/db-client"
+	},
+	{
+		"id": "vscode-editor",
+		"name": "vscode-editor",
+		"icon": "📝",
+		"description": "类 VSCode 工作台：多根文件树 + CodeMirror 编辑器 + 底部终端 + Remote-SSH + SFTP 同步。",
+		"descriptionEn": "VSCode-like workbench: multi-root file tree, CodeMirror editor, integrated terminal, Remote-SSH and SFTP sync.",
+		"source": "xing-shuyin/pi-web-ui/plugins/vscode-editor",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/vscode-editor"
+	},
+	{
+		"id": "mermaid",
+		"name": "mermaid",
+		"icon": "📊",
+		"description": "把对话里的 ```mermaid 围栏渲染成 SVG 图表（fenced-code 渲染插件，本地引擎离线优先）。",
+		"descriptionEn": "Renders ```mermaid fences in messages to SVG diagrams (fenced-code renderer plugin, offline-first local engine).",
+		"source": "xing-shuyin/pi-web-ui/plugins/mermaid",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/mermaid"
+	}
+]

package/web/dist/assets/{TerminalPanel-DL8sTcRC.js → TerminalPanel-B_ACe6Lp.js}

@@ -1,4 +1,4 @@
-import{a as l,j as n}from"./markdown-BJJLXG-8.js";import{u as O,b as M,T as z,a as W,F as Y,c as H,d as Z,e as q,f as ee,g as ne,h as te,i as se,r as ae}from"./index-B-D8dBbi.js";import{D as re,o as ie}from"./xterm-D1D2FVe3.js";import"./react-ezqUM1Or.js";function le(t){let c=null;return{clean:t.replace(/\r?\n?\[pi-term-exit:(-?\d+)\]\r?\n?/g,(a,h)=>(c=Number(h),`\r
+import{a as l,j as n}from"./markdown-DRBrS2Nf.js";import{u as O,b as M,T as z,a as W,F as Y,c as H,d as Z,e as q,f as ee,g as ne,h as te,i as se,r as ae}from"./index-CaJbqnT7.js";import{D as re,o as ie}from"./xterm-D1D2FVe3.js";import"./react-C9ovnpIm.js";function le(t){let c=null;return{clean:t.replace(/\r?\n?\[pi-term-exit:(-?\d+)\]\r?\n?/g,(a,h)=>(c=Number(h),`\r
 `)).replace(/\r?\n?\x1b\[90m\[(?:进程已退出，退出码 |Process exited with code )-?\d+\]\x1b\[0m\r?\n?/g,`\r
 `),exitCode:c}}function ce({conversationId:t,terminalId:c,command:f,cwd:a,title:h,active:u,running:b,exitCode:y,send:j,register:T}){const k=l.useRef(null),N=l.useRef(null),{locale:o}=O(),w=l.useRef(o);w.current=o;const F=f?JSON.stringify(f):"";l.useEffect(()=>{const m=k.current;if(!m)return;const r=new re({theme:M(),fontFamily:'"SF Mono", "JetBrains Mono", ui-monospace, Menlo, Consolas, monospace',fontSize:13,cursorBlink:!0,scrollback:8e3}),g=new ie;r.loadAddon(g),r.open(m),N.current={term:r,fit:g},u&&r.focus();const C=()=>{r.options.theme=M()};window.addEventListener(z,C),r.attachCustomKeyEventHandler(d=>{var A;if(d.type!=="keydown")return!0;const D=(A=d.key)==null?void 0:A.toLowerCase();if((d.ctrlKey||d.metaKey)&&D==="v")return!1;if(d.ctrlKey&&!d.shiftKey&&!d.altKey&&D==="c"&&r.hasSelection()){const E=r.textarea;return E&&(E.value=r.getSelection(),E.select()),!1}return!0});const _=T(t,c,{write:d=>r.write(le(d).clean),dispose:()=>r.dispose()}),$=()=>{try{g.fit(),j({type:"terminal_resize",terminalId:c,conversationId:t,cols:r.cols,rows:r.rows})}catch{}},B=requestAnimationFrame(()=>{try{g.fit()}catch{}j(f?{type:"run_command",terminalId:c,conversationId:t,command:f,cols:r.cols,rows:r.rows}:{type:"terminal_create",terminalId:c,title:h,locale:w.current,conversationId:t,cwd:a,cols:r.cols,rows:r.rows})}),S=r.onData(d=>{j({type:"terminal_input",terminalId:c,conversationId:t,data:d})});let v=null;return typeof ResizeObserver<"u"&&(v=new ResizeObserver(()=>{m.offsetWidth>0&&m.offsetHeight>0&&$()}),v.observe(m)),()=>{cancelAnimationFrame(B),S.dispose(),window.removeEventListener(z,C),v==null||v.disconnect(),_(),r.dispose(),N.current=null}},[t,c,F,j,T]),l.useEffect(()=>{if(!u)return;const m=requestAnimationFrame(()=>{const r=N.current;if(r){try{r.fit.fit(),j({type:"terminal_resize",terminalId:c,conversationId:t,cols:r.term.cols,rows:r.term.rows})}catch{}r.term.focus()}});return()=>cancelAnimationFrame(m)},[u]);const{t:R}=O(),x=l.useRef(void 0);return l.useEffect(()=>{if(b===x.current||(x.current=b,b!==!1))return;const m=N.current;m&&m.term.write(`\r
 \x1B[90m${R("exitBanner",{code:y??""})}\x1B[0m\r