pi-web-ui 0.68.0 → 0.68.2

package/dist/server/index.js

@@ -16,7 +16,7 @@
  *   all share one conversation list per project.
  *   PI_CODING_AGENT_DIR  pi config dir (auth/models/skills) — passed to the SDK
  */
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import { stat } from "node:fs/promises";
 import { createServer } from "node:http";
 import { createConnection } from "node:net";
@@ -36,7 +36,8 @@ import { startControlServer } from "./control-socket.js";
 import { scheduleUploadCleanup } from "./uploads.js";
 import { ensureWindowsBash, windowsBashDir } from "./ensure-bash.js";
 import { listThemes, resolveThemeFile } from "./themes.js";
-import { PluginManager, resolvePluginClientFile } from "./plugins.js";
+import { installPack, isKnownPack, listPacks, readPackFile, removePack } from "./locales.js";
+import { PluginManager, resolvePluginClientFile, } from "./plugins.js";
 import { McpBridge } from "./mcp-bridge.js";
 /** 从 CLI 参数中取 flag 值：支持 --flag value 与 --flag=value 两种写法。
  *  让 `node dist/server/index.js --host 0.0.0.0 --port 9000` 这类直接启动也能生效，
@@ -76,6 +77,19 @@ const ALLOW_ORIGINS = (process.env.PI_WEB_ALLOW_ORIGINS ?? "")
  *  Authorization: Bearer / X-PI-Token 头、?token= 查询参数或 pi_web_token cookie
  *  任一匹配即可；供 0.0.0.0 / 反代等暴露场景兜底，未设置则行为不变。 */
 const AUTH_TOKEN = process.env.PI_WEB_TOKEN?.trim() ?? "";
+/** 语言包下载根（语言包仓库的 raw 文件地址；版本 tag 优先、main 兜底，见 locales.ts）。 */
+const LOCALE_BASE_URL = process.env.PI_WEB_LOCALE_BASE_URL?.trim() || "https://raw.githubusercontent.com/xing-shuyin/pi-web-ui";
+/** 本包版本 —— 下载语言包时优先取同版本 tag，保证 key 对齐。 */
+const APP_VERSION = (() => {
+    try {
+        // 注意：此处不能用下面的 pkgRoot 常量（TDZ）——直接调函数声明（已提升）。
+        const pkg = JSON.parse(readFileSync(join(resolvePkgRoot(), "package.json"), "utf8"));
+        return pkg.version ?? "";
+    }
+    catch {
+        return "";
+    }
+})();
 // Root of the SDK default per-project session dirs — chat transcripts live in
 // <SESSION_DIR_ROOT>/--<cwd>--/, shared with the pi CLI/TUI (getAgentDir
 // honors PI_CODING_AGENT_DIR).
@@ -252,6 +266,51 @@ const USER_THEMES_DIR = join(DATA_DIR, "themes");
 app.get("/api/themes", (_req, res) => {
     res.json({ themes: listThemes(BUILTIN_THEMES_DIR, USER_THEMES_DIR) });
 });
+// 语言包：核心只随包发布中英，其余按需下载到 <dataDir>/locales/<code>.json。
+// 手工放进去的同名 JSON 也会被识别（离线安装）。PI_WEB_TOKEN 鉴权自动覆盖。
+app.get("/api/locales", (_req, res) => {
+    res.json({ packs: listPacks(DATA_DIR) });
+});
+app.get("/api/locales/:code", (req, res) => {
+    const code = String(req.params.code ?? "");
+    if (!isKnownPack(code)) {
+        res.status(404).end("unknown locale");
+        return;
+    }
+    const pack = readPackFile(DATA_DIR, code);
+    if (!pack) {
+        res.status(404).end("locale not installed");
+        return;
+    }
+    res.setHeader("Cache-Control", "no-cache");
+    res.json(pack);
+});
+app.post("/api/locales/:code/install", async (req, res) => {
+    const code = String(req.params.code ?? "");
+    if (!isKnownPack(code)) {
+        res.status(400).json({ error: `unknown locale: ${code}` });
+        return;
+    }
+    try {
+        const meta = await installPack(DATA_DIR, code, { baseUrl: LOCALE_BASE_URL, version: APP_VERSION });
+        res.json({ ok: true, ...meta });
+    }
+    catch (e) {
+        res.status(502).json({ error: e instanceof Error ? e.message : String(e) });
+    }
+});
+app.delete("/api/locales/:code", (req, res) => {
+    const code = String(req.params.code ?? "");
+    if (!isKnownPack(code)) {
+        res.status(404).end("unknown locale");
+        return;
+    }
+    if (!removePack(DATA_DIR, code)) {
+        res.status(404).end("locale not installed");
+        return;
+    }
+    res.json({ ok: true });
+});
 // Serve a theme's full CSS file so the frontend can swap the whole stylesheet.
 // Registered before the SPA catch-all below (otherwise it'd return index.html).
 app.get("/themes/:id.css", (req, res) => {
@@ -447,6 +506,12 @@ void mcpBridge.load().then(() => {
 });
 // 插件扩展点：SDK 工具执行事件（bash/读文件等 start+end）转发给已注册的插件。
 service.onToolEvent = (ev) => pluginMgr.emitToolEvent(ev);
+service.onRunEvent = (ev) => pluginMgr.emitRunEvent(ev);
+// 插件扩展点：对话切换通知（轨迹视图切会话后即重拉；dsh 引擎暂无）。
+service.onConversationChanged = () => pluginMgr.emitConversationChanged();
+// 插件扩展点：当前打开对话的快照（轨迹视图直接显示打开对话的时间线；
+// dsh 引擎无此方法时回退 null，插件显示空态）。
+pluginMgr.conversationProvider = () => service.readConversationForPlugins?.() ?? null;
 // 插件扩展点：插件注册的 AI 工具（registerAgentTool）+ MCP 桥工具 → 会话创建时
 // 带上 + 变化时动态注入/移除已有会话。
 service.pluginToolsProvider = () => [...pluginMgr.getAgentTools(), ...mcpBridge.getTools()];
@@ -820,6 +885,7 @@ wss.on("connection", (ws) => {
                     terminalBash: msg.terminalBash,
                     terminalBashIdleMs: msg.terminalBashIdleMs,
                     editSoftEnabled: msg.editSoftEnabled,
+                    questionnaireEnabled: msg.questionnaireEnabled,
                     thinkingWrap: msg.thinkingWrap,
                     toolsWrap: msg.toolsWrap,
                     visionBridgeEnabled: msg.visionBridgeEnabled,

package/dist/server/locales.js

@@ -0,0 +1,156 @@
+/**
+ * locales — downloadable language packs.
+ *
+ * Core ships zh/en only (see web/src/i18n.tsx). Every other language lives in
+ * `locales/<code>.json` in the git repo (NOT in the npm `files` whitelist, so
+ * packs never ship with the package) with shape:
+ *   { code, nativeName, version, strings: Record<string,string> }
+ *
+ * On demand the server downloads a pack from PI_WEB_LOCALE_BASE_URL
+ * (default: GitHub raw — version tag first, `main` as fallback) into
+ * <dataDir>/locales/<code>.json and serves it to the browser. Missing keys
+ * fall back to English client-side, so version skew between app and pack is
+ * tolerable. Manually dropped <dataDir>/locales/*.json files work too
+ * (offline installs) — the list is read from disk.
+ */
+import { existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+/** Packs available for download (alphabetical by code). */
+export const LOCALE_PACKS = [
+    { code: "de", nativeName: "Deutsch" },
+    { code: "es", nativeName: "Español" },
+    { code: "fr", nativeName: "Français" },
+    { code: "it", nativeName: "Italiano" },
+    { code: "ja", nativeName: "日本語" },
+    { code: "ko", nativeName: "한국어" },
+    { code: "pt", nativeName: "Português" },
+    { code: "ru", nativeName: "Русский" },
+];
+export function isKnownPack(code) {
+    return LOCALE_PACKS.some((p) => p.code === code);
+}
+export function packMeta(code) {
+    return LOCALE_PACKS.find((p) => p.code === code) ?? null;
+}
+export function packPath(dataDir, code) {
+    return join(dataDir, "locales", `${code}.json`);
+}
+/** Downloaded packs must look like this (extra fields ignored). */
+export function validatePack(data, code) {
+    if (!data || typeof data !== "object")
+        return { ok: false, error: "not an object" };
+    const d = data;
+    if (d["code"] !== code)
+        return { ok: false, error: `code mismatch (want ${code})` };
+    if (typeof d["nativeName"] !== "string" || !d["nativeName"].trim()) {
+        return { ok: false, error: "missing nativeName" };
+    }
+    if (!d["strings"] || typeof d["strings"] !== "object")
+        return { ok: false, error: "missing strings" };
+    const strings = {};
+    for (const [k, v] of Object.entries(d["strings"])) {
+        if (typeof v !== "string")
+            return { ok: false, error: `non-string value for ${k}` };
+        strings[k] = v;
+    }
+    if (Object.keys(strings).length === 0)
+        return { ok: false, error: "empty strings" };
+    return {
+        ok: true,
+        pack: {
+            code,
+            nativeName: d["nativeName"].trim(),
+            version: typeof d["version"] === "string" ? d["version"] : "unknown",
+            strings,
+        },
+    };
+}
+/** Read an installed pack (null when missing / corrupt — corrupt files are ignored, not deleted). */
+export function readPackFile(dataDir, code) {
+    if (!isKnownPack(code))
+        return null;
+    const file = packPath(dataDir, code);
+    if (!existsSync(file))
+        return null;
+    try {
+        const data = JSON.parse(readFileSync(file, "utf8"));
+        const v = validatePack(data, code);
+        return v.ok ? v.pack : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function listPacks(dataDir) {
+    return LOCALE_PACKS.map((meta) => {
+        const installed = readPackFile(dataDir, meta.code);
+        return { ...meta, installed: installed !== null, version: installed?.version ?? null };
+    });
+}
+export function removePack(dataDir, code) {
+    if (!isKnownPack(code))
+        return false;
+    const file = packPath(dataDir, code);
+    if (!existsSync(file))
+        return false;
+    rmSync(file);
+    return true;
+}
+const MAX_PACK_BYTES = 4 * 1024 * 1024;
+/**
+ * Download a pack and persist it under <dataDir>/locales/<code>.json
+ * (atomic write via tmp + rename). Throws on network / validation errors.
+ */
+export async function installPack(dataDir, code, opts = {}) {
+    const meta = packMeta(code);
+    if (!meta)
+        throw new Error(`unknown locale: ${code}`);
+    const base = (opts.baseUrl ?? "https://raw.githubusercontent.com/xing-shuyin/pi-web-ui").replace(/\/+$/, "");
+    const urls = opts.version
+        ? [`${base}/v${opts.version}/locales/${code}.json`, `${base}/main/locales/${code}.json`]
+        : [`${base}/main/locales/${code}.json`];
+    const fetchFn = opts.fetchFn ?? fetch;
+    const timeoutMs = opts.timeoutMs ?? 30000;
+    let lastError = "";
+    for (const url of urls) {
+        const ctrl = new AbortController();
+        const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+        try {
+            const res = await fetchFn(url, { signal: ctrl.signal });
+            if (!res.ok) {
+                lastError = `HTTP ${res.status} for ${url}`;
+                continue;
+            }
+            const text = await res.text();
+            if (text.length > MAX_PACK_BYTES)
+                throw new Error(`pack too large (${text.length} bytes)`);
+            let data;
+            try {
+                data = JSON.parse(text);
+            }
+            catch {
+                throw new Error(`invalid JSON from ${url}`);
+            }
+            const v = validatePack(data, code);
+            if (!v.ok)
+                throw new Error(`invalid pack ${code}: ${v.error}`);
+            mkdirSync(join(dataDir, "locales"), { recursive: true });
+            const file = packPath(dataDir, code);
+            const tmp = `${file}.${process.pid}.tmp`;
+            writeFileSync(tmp, JSON.stringify(v.pack));
+            renameSync(tmp, file);
+            return { code, nativeName: v.pack.nativeName, version: v.pack.version };
+        }
+        catch (e) {
+            lastError = e instanceof Error ? e.message : String(e);
+            // A validation error means the URL answered with wrong content —
+            // don't silently retry the fallback for it, surface it directly.
+            if (lastError.startsWith("invalid "))
+                throw e;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    throw new Error(lastError || `download failed for ${code}`);
+}

package/dist/server/plugins.js

@@ -457,6 +457,50 @@ export class PluginManager {
             }
         }
     }
+    /** index.ts 注入：读取当前打开对话的快照（轨迹类插件经 host.getActiveConversation 调用）。 */
+    conversationProvider = undefined;
+    /** 当前打开对话的快照（无提供者/暂无对话时返回 null）。 */
+    getActiveConversation() {
+        try {
+            return this.conversationProvider?.() ?? null;
+        }
+        catch (err) {
+            console.error("[plugins] conversationProvider failed:", err);
+            return null;
+        }
+    }
+    /** agent-service 调：当前打开对话变了（切历史会话/切 running 对话/新对话）——
+     *  轨迹类插件靠它重拉时间线（异常隔离）。 */
+    emitConversationChanged() {
+        for (const p of this.loaded.values()) {
+            if (p.convChangeHandlers.size === 0)
+                continue;
+            for (const h of p.convChangeHandlers) {
+                try {
+                    h();
+                }
+                catch (err) {
+                    console.error(`[plugin:${p.info.id}] conversation-changed handler failed:`, err);
+                }
+            }
+        }
+    }
+    /** agent-service 调：把运行轨迹事件扇出给所有插件（异常隔离，
+     *  与 emitToolEvent 同级；订阅者崩了只记日志，不影响主流程）。 */
+    emitRunEvent(ev) {
+        for (const p of this.loaded.values()) {
+            if (p.runHandlers.size === 0)
+                continue;
+            for (const h of p.runHandlers) {
+                try {
+                    h(ev);
+                }
+                catch (err) {
+                    console.error(`[plugin:${p.info.id}] run-event handler failed:`, err);
+                }
+            }
+        }
+    }
     /** 当前全部插件注册的 AI 工具（扁平化，按插件 id 稳定排序）。 */
     getAgentTools() {
         const out = [];
@@ -697,6 +741,8 @@ export class PluginManager {
         const handlers = new Set();
         this.messageHandlers.set(info.id, handlers);
         const toolHandlers = new Set();
+        const runHandlers = new Set();
+        const convChangeHandlers = new Set();
         const attachHandlers = new Set();
         const cwdHandlers = new Set();
         const httpRoutes = new Map();
@@ -717,6 +763,8 @@ export class PluginManager {
             this.loaded.set(info.id, {
                 info: { ...info, error: msg },
                 toolHandlers,
+                runHandlers,
+                convChangeHandlers,
                 attachHandlers,
                 cwdHandlers,
                 httpRoutes,
@@ -732,6 +780,8 @@ export class PluginManager {
         const p = {
             info,
             toolHandlers,
+            runHandlers,
+            convChangeHandlers,
             attachHandlers,
             cwdHandlers,
             commandUnsubscribers: unregisterCommands,
@@ -774,6 +824,15 @@ export class PluginManager {
                 toolHandlers.add(h);
                 return () => toolHandlers.delete(h);
             },
+            onRunEvent: (h) => {
+                runHandlers.add(h);
+                return () => runHandlers.delete(h);
+            },
+            onConversationChanged: (h) => {
+                convChangeHandlers.add(h);
+                return () => convChangeHandlers.delete(h);
+            },
+            getActiveConversation: () => self.getActiveConversation(),
             onAttach: (h) => {
                 attachHandlers.add(h);
                 return () => attachHandlers.delete(h);
@@ -893,6 +952,8 @@ export class PluginManager {
                 info: { ...info },
                 deactivate: typeof ret === "function" ? ret : undefined,
                 toolHandlers,
+                runHandlers,
+                convChangeHandlers,
                 attachHandlers,
                 cwdHandlers,
                 agentToolUnsubscribers: unregisterTools,
@@ -911,6 +972,8 @@ export class PluginManager {
             this.loaded.set(info.id, {
                 info: { ...info, error: err.message },
                 toolHandlers,
+                runHandlers,
+                convChangeHandlers,
                 attachHandlers,
                 cwdHandlers,
                 httpRoutes,

package/dist/server/prompt-composer.js

@@ -31,6 +31,25 @@ export const PROMPT_TOKENS = [
     "skills", // 技能段 <available_skills>
     "cwd", // Current working directory 行
 ];
+/** 只读来源（设置面板只读展示、不提供覆盖输入）：这些 token 的内容由系统/环境
+ *  在每次 run 时动态生成（工具集、项目文件、技能、工作目录、开关状态），用户无法
+ *  在设置里预设其内容。反之 soul / guidelines / append 是用户内容层，可编辑。
+ *  注意：只读是「设置面板 UI」层面；服务端 override 机制（renderPromptTemplate）
+ *  仍保留，以兼容旧配置与编程调用。 */
+export const READONLY_PROMPT_SOURCES = [
+    "tools", // 工具列表（运行时时按已注册工具动态生成）
+    "pi_docs", // Pi 文档指引（指向已安装 pi 包路径，由安装位置决定）
+    "persona", // Windows persona（仅 win32，平台固定）
+    "terminal", // 终端工具使用引导（随「终端工具」开关）
+    "markers", // 内置标记工具引导（随 markers 开关）
+    "context", // 项目上下文（AGENTS.md / CLAUDE.md 收集结果）
+    "skills", // 技能段（来自环境/技能文件）
+    "cwd", // 当前工作目录
+];
+/** 仅当 token 是只读来源时返回 true（设置面板用于判断是否展示覆盖输入框）。 */
+export function isReadonlyPromptSource(token) {
+    return READONLY_PROMPT_SOURCES.includes(token);
+}
 /** 默认模板：全部 token 按自然顺序以空行连接 —— 无覆盖、不改动时渲染结果 ≈
  *  SDK 默认拼装的完整提示词。 */
 export const DEFAULT_PROMPT_TEMPLATE = PROMPT_TOKENS.map((t) => `{{${t}}}`).join("\n\n");
@@ -147,6 +166,21 @@ function buildToolsText(inputs) {
         "In addition to the tools above, you may have access to other custom tools depending on the project.",
     ].join("\n\n");
 }
+/** 工具 schema 只读文本（设置面板「查看当前完整提示词」里展示发给模型的完整
+ *  工具定义：name + description + parameters JSON Schema）。 */
+export function buildToolsSchemaText(tools) {
+    if (tools.length === 0)
+        return "";
+    return tools
+        .map((t) => {
+        const lines = [`## ${t.name}`];
+        if (t.description && t.description.trim())
+            lines.push(t.description.trim());
+        lines.push("", "Parameters (JSON Schema):", JSON.stringify(t.parameters ?? {}, null, 2));
+        return lines.join("\n");
+    })
+        .join("\n\n");
+}
 /** 计算每个 token 的自动内容（无覆盖时的展开值）。 */
 export function resolveSectionTexts(inputs) {
     const cwd = inputs.cwd.replace(/\\/g, "/");

package/dist/server/serialize.js

@@ -59,6 +59,30 @@ function serializeAssistantContent(content) {
         return { type: "unknown", ...b };
     });
 }
+/**
+ * Hide transient LLM failures while an auto-retry is pending.
+ *
+ * The SDK finalizes the failed assistant message (message_end, then agent_end
+ * with willRetry) BEFORE it slices the message out of state and backs off, so
+ * a snapshot taken in between would paint a red error that vanishes one frame
+ * later. While `retryActive` the trailing stopReason=error assistant messages
+ * are intermediate state: dropped here (retry success → the user never sees
+ * them; exhaustion → auto_retry_end clears the flag and the message renders
+ * red permanently). Non-trailing content is never touched.
+ */
+export function stripTransientRetryErrors(messages, retryActive) {
+    if (!retryActive)
+        return messages;
+    let end = messages.length;
+    while (end > 0) {
+        const m = messages[end - 1];
+        if (m.role === "assistant" && m.stopReason === "error")
+            end -= 1;
+        else
+            break;
+    }
+    return end === messages.length ? messages : messages.slice(0, end);
+}
 export function serializeMessage(m, seq) {
     switch (m.role) {
         case "user":

package/dist/server/settings-service.js

@@ -193,6 +193,7 @@ export class SettingsService {
                 terminalBash: this.settings.terminalBash,
                 terminalBashIdleMs: this.settings.terminalBashIdleMs,
                 editSoftEnabled: this.settings.editSoftEnabled,
+                questionnaireEnabled: this.settings.questionnaireEnabled,
                 thinkingWrap: this.settings.thinkingWrap,
                 toolsWrap: this.settings.toolsWrap,
                 visionBridgeEnabled: this.settings.visionBridgeEnabled,
@@ -206,6 +207,8 @@ export class SettingsService {
                 effectiveSystemPrompt: promptSnap.full,
                 // 每个来源未覆盖时的默认（自动）内容（「各来源」行预览用）。
                 promptSourceDefaults: promptSnap.texts,
+                // 发给模型的工具 schema（name/description/parameters）—— 只读预览。
+                toolsSchema: promptSnap.toolsSchema,
                 visionBridgeDefaultPrompt: SYSTEM_PROMPT,
                 visionModels: this.collectVisionModels(),
                 disabledSkills: [...this.settings.disabledSkills],
@@ -320,6 +323,10 @@ export class SettingsService {
         if (partial.editSoftEnabled !== undefined) {
             this.settings.editSoftEnabled = partial.editSoftEnabled;
         }
+        // 问卷开关：运行时无需重载（bridge 处实时读取）。
+        if (partial.questionnaireEnabled !== undefined) {
+            this.settings.questionnaireEnabled = partial.questionnaireEnabled;
+        }
         if (partial.thinkingWrap !== undefined) {
             this.settings.thinkingWrap = partial.thinkingWrap;
         }
@@ -425,6 +432,8 @@ export class SettingsService {
             terminalBash: p.terminalBash ?? this.settings.terminalBash,
             terminalBashIdleMs: p.terminalBashIdleMs ?? this.settings.terminalBashIdleMs,
             editSoftEnabled: p.editSoftEnabled ?? this.settings.editSoftEnabled,
+            // 问卷开关不进预设——保留当前值。
+            questionnaireEnabled: this.settings.questionnaireEnabled,
             reviewPrompt: p.reviewPrompt ?? this.settings.reviewPrompt,
             reviewDisabledSkills: [...(p.reviewDisabledSkills ?? this.settings.reviewDisabledSkills)],
             // 纯 UI 偏好不进预设——保留当前值。

package/dist/server/update-check.js

@@ -7,9 +7,8 @@
  * (and an injected pi-core probe); ClientSession only wires it to the wire
  * protocol.
  */
-import { spawn } from "node:child_process";
-import { readdirSync, readFileSync } from "node:fs";
-import { join } from "node:path";
+import { readdirSync, readFileSync, realpathSync, existsSync } from "node:fs";
+import { delimiter, dirname, join } from "node:path";
 const PI_CORE_PACKAGE = "@earendil-works/pi-coding-agent";
 const REGISTRY = "https://registry.npmjs.org";
 const FETCH_TIMEOUT_MS = 8_000;
@@ -157,67 +156,67 @@ function readLocalPackage(dir) {
 /** How long a pi probe result stays hot (mirrors ClientSession.piCliProbe). */
 const PI_PROBE_TTL_MS = 10_000;
 let piCoreProbe = null;
-let piCoreProbePending = false;
-function refreshPiCoreProbe() {
-    if (piCoreProbePending)
-        return;
-    piCoreProbePending = true;
-    let proc;
+/** Locate the pi CLI on PATH without spawning anything. */
+function piCliOnPath() {
+    const dirs = (process.env.PATH ?? "").split(delimiter);
+    for (const dir of dirs) {
+        if (!dir)
+            continue;
+        const candidate = join(dir, "pi");
+        if (existsSync(candidate))
+            return candidate;
+    }
+    return null;
+}
+/**
+ * Read the pi core version from disk: resolve the `pi` bin (typically a
+ * symlink into <global>/node_modules/<pkg>/dist/bundle/cli.js) and walk up to
+ * its package.json. FORK-FREE by design — see the note on defaultProbePiCore.
+ */
+function readPiCoreVersionFromDisk() {
+    const bin = piCliOnPath();
+    if (!bin)
+        return null;
     try {
-        proc = spawn("pi", ["--version"], {
-            stdio: ["ignore", "pipe", "pipe"],
-            // Windows: `pi` resolves to a pi.cmd shim — spawn can only
-            // exec those through a shell (else ENOENT).
-            shell: process.platform === "win32",
-        });
+        let dir = dirname(realpathSync(bin));
+        for (let i = 0; i < 8; i++) {
+            const pkgPath = join(dir, "package.json");
+            if (existsSync(pkgPath)) {
+                try {
+                    const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+                    if (pkg.name === PI_CORE_PACKAGE && pkg.version)
+                        return pkg.version;
+                }
+                catch {
+                    /* unreadable package.json — keep walking */
+                }
+            }
+            const parent = dirname(dir);
+            if (parent === dir)
+                break;
+            dir = parent;
+        }
     }
     catch {
-        piCoreProbe = { at: Date.now(), version: null };
-        piCoreProbePending = false;
-        return;
+        /* ignore */
     }
-    let out = "";
-    const finish = (version) => {
-        piCoreProbe = { at: Date.now(), version };
-        piCoreProbePending = false;
-    };
-    const timer = setTimeout(() => {
-        try {
-            proc.kill();
-        }
-        catch {
-            /* already exited */
-        }
-        finish(null);
-    }, 5000);
-    proc.stdout?.on("data", (d) => (out += d.toString()));
-    proc.on("error", () => {
-        clearTimeout(timer);
-        finish(null);
-    });
-    proc.on("close", (code) => {
-        clearTimeout(timer);
-        finish(code === 0 ? parsePiVersionOutput(out) : null);
-    });
+    return null;
 }
 /**
  * Default pi core probe: run the globally installed `pi --version`, memoized
  * machine-wide for PI_PROBE_TTL_MS so repeated collectTargets calls never
- * re-probe. Serves the last known value and refreshes ASYNCHRONOUSLY in the
- * background — never blocks the event loop. (It previously used spawnSync
- * here, which can deadlock the whole server on Android/Termux: fork() in a
- * multi-threaded process occasionally leaves the forked child stuck between
- * fork and exec while the main thread sits in spawnSync's pipe_read. Mirrors
- * ClientSession.isPiCliInstalled(); Windows resolves `pi` to a pi.cmd shim
- * that only execs through a shell.)
+ * re-probe. Reads the version from disk (pi bin → realpath → package.json)
+ * instead of spawning `pi --version`. FORK-FREE by design — see the note on
+ * defaultProbePiCore.
  */
 export function defaultProbePiCore() {
     const now = Date.now();
     const cached = piCoreProbe;
     if (cached && now - cached.at < PI_PROBE_TTL_MS)
         return cached.version;
-    refreshPiCoreProbe();
-    return cached?.version ?? null;
+    const version = readPiCoreVersionFromDisk();
+    piCoreProbe = { at: now, version };
+    return version;
 }
 /**
  * Fallback when the CLI probe yields nothing: the version of the vendored pi

package/dist/server/vision-bridge.js

@@ -35,15 +35,15 @@ export function findVisionModels(runtime) {
  * Exported so the settings panel can offer a custom prompt (append to this
  * default or replace it entirely).
  */
-export const SYSTEM_PROMPT = `You are a vision bridge for a text-only language model. You receive one or more images and must transcribe them into precise, structured text evidence so another model that cannot see images can answer questions about them accurately.
-
-Follow these rules:
-1. Transcribe ALL visible text verbatim, preserving wording, spelling, punctuation and line breaks. This is the most important part — the reader relies on your transcription, not on the image.
-2. Describe the layout in reading order: headers, paragraphs, lists, tables, buttons, panels — say what appears where.
-3. For tables/charts/diagrams: read axes, scales (note log scale), legend entries, series names, highlighted points and their coordinates, and any data values you can discern.
-4. Name entities: people, products, companies, colors, style, objects, actions.
-5. If part of the image is too blurry/low-resolution to read, say "（读不清）" or "unclear" for that part — NEVER invent or guess content you cannot see.
-6. If there are multiple images, address them in order (图 1 / Image 1, 图 2 / Image 2, ...).
+export const SYSTEM_PROMPT = `You are a vision bridge for a text-only language model. You receive one or more images and must transcribe them into precise, structured text evidence so another model that cannot see images can answer questions about them accurately.
+
+Follow these rules:
+1. Transcribe ALL visible text verbatim, preserving wording, spelling, punctuation and line breaks. This is the most important part — the reader relies on your transcription, not on the image.
+2. Describe the layout in reading order: headers, paragraphs, lists, tables, buttons, panels — say what appears where.
+3. For tables/charts/diagrams: read axes, scales (note log scale), legend entries, series names, highlighted points and their coordinates, and any data values you can discern.
+4. Name entities: people, products, companies, colors, style, objects, actions.
+5. If part of the image is too blurry/low-resolution to read, say "（读不清）" or "unclear" for that part — NEVER invent or guess content you cannot see.
+6. If there are multiple images, address them in order (图 1 / Image 1, 图 2 / Image 2, ...).
 7. Output only the transcript. No preamble, no commentary about the image itself.`;
 /**
  * Assemble the final vision-model system prompt from the settings-panel prefs.