pi-web-ui 0.79.0 → 0.80.0

package/CHANGELOG.md

@@ -8,6 +8,22 @@
 每个版本的内容按"实际合入该版本发布的提交"归档（以 `package.json` 的 version 变更提交为准），
 而不是按提交日期聚类——连续快速发布的 patch 版本以此为准最准确。
 
+## [Unreleased]
+
+暂无未发布内容。
+
+## [0.80.0] — 2026-09-12
+
+### Added
+
+- **桌面版（Electron 外壳）**：同一套服务端 + 前端装进一个原生窗口——主进程用随机空闲口起 `dist/server/index.js`（`ELECTRON_RUN_AS_NODE` 当纯 Node 用，不再额外捆一个 Node），`/api/health` 就绪后 `BrowserWindow` 直接加载该地址，因此前端 `appUrl("/ws")`、`server/protocol.ts` 全部零改动。可与网页版并存：不抢 `8787`（`PI_WEB_PORT` 被占用时自动退到随机空闲口）、独立数据目录（`<userData>/data`）、独立单实例锁；外链丢给系统浏览器，renderer 走 `contextIsolation + sandbox` 且无 Node。Windows 安装包（NSIS，可选安装目录）随每个 Release 由 CI 出包并附在 Release 页面（macOS dmg / Linux AppImage 已配好，CI 暂只出 Windows）；开发用 `npm run desktop:dev`，本地打包用 `npm run desktop:dist`。
+  - 当前**未签名**：首次运行 Windows 会提示「未知发布者」（进展见仓库 README 的 Code signing policy 一节）。
+
+### Changed
+
+- 桌面版图标复用网页版 PWA 图标（`web/public/icons/icon-1024.png`），网页版与桌面版换图标只改一处。
+- 仓库自检现在覆盖桌面壳：`npm run typecheck` / `format:check` / `lint` 都把 `desktop/` 纳入范围。
+
 ## [0.79.0] — 2026-09-11
 
 ### Added
@@ -466,6 +482,7 @@
 - 0.29.0（2026-08-23）：全局搜索弹窗（Ctrl+K）+ 消息列表惰性窗口化。
 
 [Unreleased]: https://github.com/xing-shuyin/pi-web-ui/compare/v0.79.0...main
+[0.80.0]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.80.0
 [0.79.0]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.79.0
 [0.78.0]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.78.0
 [0.77.0]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.77.0

package/README.md

@@ -51,6 +51,8 @@ theme switching, and a full settings panel — tuned for daily development.
 - 🧩 [Plugins](#plugins)
 - 🎨 [Themes](#themes)
 - 🔒 [Security](#security)
+- 🪪 [Code signing policy](#code-signing-policy)
+- 🔐 [Privacy](#privacy)
 - 🌐 [Reverse proxy (nginx)](#reverse-proxy-nginx)
 - 🤝 [Contribute](#contribute)
 - 📄 [License](#license)
@@ -174,6 +176,24 @@ silences the warning):
 npm i -g --allow-scripts=node-pty,@google/genai,protobufjs pi-web-ui@latest
 ```
 
+### 🖥️ Desktop app (Windows installer)
+
+Prefer a window over a browser tab? Every release ships a Windows installer built
+from this repository by GitHub Actions:
+
+**[⬇ Download the latest installer](https://github.com/xing-shuyin/pi-web-ui/releases/latest)**
+— `pi-web-ui-desktop Setup <version>.exe`
+
+The desktop shell reuses this very server: it spawns `dist/server/index.js` on a
+random free loopback port and opens a window pointed at it (see
+[`desktop/README.md`](desktop/README.md)). The web version is untouched — no
+fight over port `8787`, separate data directory, both can run side by side.
+
+Currently Windows-only and **not code signed yet** — Windows SmartScreen will
+show an “unknown publisher” prompt the first time you run it (see the
+[code signing policy](#code-signing-policy)). Build it yourself with
+`npm run desktop:dist`.
+
 ### Termux (Android)
 
 pi-web-ui runs fine on Android via [Termux](https://termux.dev), but `node-pty`
@@ -471,6 +491,54 @@ Rules for merged themes: the file must be a single CSS file, set the `--term-*`
   management UI edits everything else and the server preserves the headers.
 
 
+## 🪪 Code signing policy
+
+Free code signing provided by [SignPath.io](https://signpath.io), certificate by
+[SignPath Foundation](https://signpath.org).
+
+Release binaries — the Windows installer `pi-web-ui-desktop Setup <version>.exe`
+attached to every [release](https://github.com/xing-shuyin/pi-web-ui/releases) —
+are built from the tagged commit by
+[`.github/workflows/desktop-release.yml`](.github/workflows/desktop-release.yml)
+and signed in that CI run, so a valid signature means the file is an automated
+build of the source code at that tag.
+
+### Team roles
+
+| Role | Who |
+| --- | --- |
+| **Authors / committers** (may push to `main`) | [@xing-shuyin](https://github.com/xing-shuyin) |
+| **Reviewers** (every non-committer change arrives as a PR and is reviewed before merge) | [@xing-shuyin](https://github.com/xing-shuyin) — community contributions are credited in the [contributors graph](https://github.com/xing-shuyin/pi-web-ui/graphs/contributors) |
+| **Approvers** (must approve each signing request) | [@xing-shuyin](https://github.com/xing-shuyin) |
+
+All team members use multi-factor authentication for both GitHub and SignPath.
+Our release artifacts contain no binaries we did not build ourselves, except
+upstream open-source components bundled by npm and electron-builder (see
+[License](#license)).
+
+**Privacy policy:** see [Privacy](#privacy) below.
+
+## 🔐 Privacy
+
+pi-web-ui runs entirely on your own machine and has **no telemetry, no analytics
+and no accounts of its own**. Conversations, attachments, settings and terminal
+history stay in your local data directory (`~/.pi-web/` by default, or
+`%APPDATA%\pi-web-ui\data` for the desktop app), and the HTTP server binds
+loopback unless you explicitly expose it.
+
+Network requests happen only in these cases:
+
+| When | To | What leaves your machine |
+| --- | --- | --- |
+| You send a message, or the agent calls a model | the model providers **you** configure (e.g. `api.openai.com`, `api.opencode.ai`, a local endpoint) | your prompt, the attached file contents and the conversation context |
+| Model catalog refresh (startup, then every 4 h) | `pi.dev` | nothing but the request itself |
+| You install or update a plugin, theme or language pack | `github.com` / `raw.githubusercontent.com` | nothing but the request itself |
+| You check for or install an update | `registry.npmjs.org` | nothing but the request itself |
+| Terminals on Windows, when neither Git Bash nor a `bash` on `PATH` exists | `frippery.org` | one download of `busybox64u.exe` into `<data dir>/bin/bash.exe`, reused offline afterwards |
+
+Reverse-proxy setups, the optional `PI_WEB_TOKEN` password and Docker port
+mappings are under your control — see [Security](#security).
+
 ## Reverse proxy (nginx)
 
 Serve pi-web-ui behind nginx on the same host (it binds loopback only, so a

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-web-ui",
-	"version": "0.79.0",
+	"version": "0.80.0",
 	"description": "Web chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable",
 	"license": "MIT",
 	"author": {
@@ -15,6 +15,7 @@
 	"files": [
 		"bin/",
 		"dist/",
+		"!dist/desktop",
 		"web/dist/",
 		"web/public/",
 		"themes/",
@@ -59,7 +60,7 @@
 		"build:dsh-runtime": "node scripts/copy-dsh-runtime.mjs",
 		"build:mermaid-vendor": "node scripts/build-mermaid-vendor.mjs",
 		"build:runtrace-vendor": "node scripts/build-runtrace-vendor.mjs",
-		"typecheck": "tsc -p tsconfig.server.json --noEmit && tsc -p web/tsconfig.json --noEmit && tsc -p tsconfig.tests.json --noEmit",
+		"typecheck": "tsc -p tsconfig.server.json --noEmit && tsc -p web/tsconfig.json --noEmit && tsc -p tsconfig.tests.json --noEmit && tsc -p desktop/tsconfig.json --noEmit",
 		"test": "vitest run",
 		"test:unit": "vitest run",
 		"test:smoke": "node tests/run-smoke.mjs",
@@ -69,10 +70,13 @@
 		"changelog:i18n": "node scripts/release-notes.mjs --unreleased",
 		"test:freeze": "node tests/freeze-test.mjs",
 		"start": "node dist/server/index.js",
-		"format": "prettier --write server/ web/src/ extensions/ scripts/ bin/ tests/*.mjs tests/unit/ *.mjs",
-		"format:check": "prettier --check server/ web/src/ extensions/ scripts/ bin/ tests/*.mjs tests/unit/ *.mjs",
-		"lint": "oxlint server/ web/src/ extensions/ scripts/",
-		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/"
+		"build:desktop": "tsc -p desktop/tsconfig.json",
+		"desktop:dev": "npm run build:desktop && electron dist/desktop/main.js",
+		"desktop:dist": "npm run build && npm run build:desktop && electron-builder -c desktop/electron-builder.yml",
+		"format": "prettier --write server/ web/src/ extensions/ scripts/ bin/ desktop/ tests/*.mjs tests/unit/ *.mjs",
+		"format:check": "prettier --check server/ web/src/ extensions/ scripts/ bin/ desktop/ tests/*.mjs tests/unit/ *.mjs",
+		"lint": "oxlint server/ web/src/ extensions/ scripts/ desktop/",
+		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/ desktop/"
 	},
 	"dependencies": {
 		"@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.1-rc.2",
@@ -109,6 +113,8 @@
 		"concurrently": "^9.1.0",
 		"cross-env": "^10.1.0",
 		"esbuild": "^0.25.12",
+		"electron": "^44.0.0",
+		"electron-builder": "^26.0.0",
 		"jsdom": "^26.1.0",
 		"mermaid": "^11.17.2",
 		"oxlint": "^1.81.0",