pi-web-ui 0.87.0 → 0.87.2

package/CHANGELOG.md

@@ -8,7 +8,28 @@
 每个版本的内容按"实际合入该版本发布的提交"归档（以 `package.json` 的 version 变更提交为准），
 而不是按提交日期聚类——连续快速发布的 patch 版本以此为准最准确。
 
-## [Unreleased]
+## [0.87.2] — 2026-09-16
+
+### Fixed
+
+- **关机/重启不再永久挂起**（#172）—— `disposeAll()` 卡在僵死会话/PTY/挂起句柄时进程以前永远退不出，第二次 Ctrl+C 还被吞掉。现在关机有 5 秒看门狗兜底（超时强制退出，未完成不等待）；关机中再收到信号立即按信号退出（130/143）而不是吞掉；先 `terminate` 全部 WS 半开连接 + `closeAllConnections` 再 `close`，死掉的浏览器页/发不完 body 的半开请求不再拖住退出。回归：`tests/shutdown-test.mjs`（win32 下跨进程 SIGINT 到不了 handler，直接 SKIP；ubuntu CI 正常跑），已进冒烟清单。
+- **没动过的空 shell 不再钉住对话** —— 点开终端 tab 自动建的那个空 shell（一次都没敲过键盘/没跑过命令/agent 没碰过）以前算“还有存活终端”，切对话/✕ 关对话时被拦截或赖在运行列表里。现在 `TerminalManager` 新增 `countBlockingLive()`（只统计存活**且用过**的 PTY：`inputChecked` 成功输入与 `noteAgentActivity` 置位，`runCommand`/ai-bash 天生即用过），pi 与 DSH 两端的对话保留（`displaceActive`/`listed`）、关闭拦截、空闲回收、项目切换回收统一切到该口径；空 shell 切走/✕ 时随对话一起释放（`removeConversation` 里 `killAll`）。回归：`terminal-smoke-test` 新增 pristine/ai-bash 口径断言。
+
+## [0.87.1] — 2026-09-16
+
+### Added
+
+- **重启服务不再杀死进行中的对话，回来自动续上**（#171）—— 以前升级/手工重启会把在跑的 run 静默杀死，用户得去历史对话里手动找回。现在关停与 `restart_service` 都会先把仍在 streaming 的会话记下来（含 session 文件）；重连后首次 attach 自动逐个重开并发送一句「继续」，从持久化上下文接着跑；恢复完视图回到原来停的那条，后台续跑的不抢焦点。没有 session 文件的才回落为黄色提醒。pi 引擎独有（DSH 暂无此记录）。
+
+- **语音输入本地模型新增 `small` 档** —— 2.44 亿参数（约 500MB 下载），中文同音字明显少于 base；代价是 CPU 转写比 base 慢 3~4 倍。设置 → 界面插件 → 语音输入 → 本地模型，切换后点 🎤 按提示安装即可（之前下的 base/tiny 留着不碍事）。
+
+### Fixed
+
+- **`npm start` 带进来的环境变量不再污染子进程**（#169）—— `npm start` 会把 `npm_config_*` / `npm_package_*` / `npm_lifecycle_*` 导出给所有子进程，服务端拉起的 shell、`pi update` 等会继承到 `npm_config_allow_scripts`，npm 在项目级安装里直接拒绝（EALLOWSCRIPTS）。现在服务端启动时一次性 scrub，unit 文件不用动，所有 spawn 路径一次修好。
+- **组件更新面板把“有更新的”排前面**（#170）—— 以前按 manifest 顺序列，可用的更新常被埋在一堆“已是最新”下面。现在服务端统一排序：pi-web-ui 与 pi-core 置顶（状态无关），然后有更新的、已最新的，最后是出错的；各客户端看到同一顺序。
+- **语音输入“识别成功了还弹服务端录音”** —— 点「改用服务端录音」（或自动降级）时 `abort()` 激起的 `onend` 把已识别的半截文字又收尾一次：字进了输入框，录音浮层也弹了出来。现在切服务端途中立旗吞掉多余事件；自动降级时有字优先收尾（挂起的切换自动取消）、没字才进录音。
+- **语音输入服务端转写永远为空** —— 录音分片收尾误用了声道平均的 `downmix`，把整段录音按时间“平均”成 128 个采样的糊发给 Whisper，只能回空。改成按时间轴拼接；模型本身没问题（之前 `ready:true` 是真的）。
+- **dark-teal 主题的分体发送按钮阴影补上**（#168，社区）—— `.split-send` 漏进了发送/停止按钮的阴影规则，hover 光晕一并补齐。
 
 ## [0.87.0] — 2026-09-16
 
@@ -17,6 +38,13 @@
 - **插件市场支持「从目录同步」**（issue #165）—— 设置面板插件市场头部新增同步入口：填一个目录文档 URL（http(s)）或本地绝对路径，一键同步可安装列表（走服务端现成的 `plugin_catalog_sync` 通道：同校验、同原子写盘；可选同步后安装全部条目 / 整体替换，逐条安装结果就地回显）。成功同步过的 URL 记在浏览器 localStorage（最近 8 个），一点即重同步。第三方仓库从此不需要再为同步专门发一个占位插件。
 - **`install --catalog <url>` 与 `PI_WEB_PLUGIN_CATALOG_URL`**（issue #165）—— headless/预置场景：CLI 从目录文档同步列表并逐条安装/更新（已安装默认跳过，`--force` 更新，`--replace` 整体替换，单条失败不中断整批；`--build` / `--no-build` 对逐条同样生效）；服务端启动时若配了该环境变量则自动同步一次并安装，失败只告警不阻断启动。
 
+- **插件特权 DOM 授权 + 宿主 API v7**（#159）—— 插件 bundle 与主应用同源，JS 层面拦不住它碰 `document`，真正的门禁只能放在 bundle 下发处：manifest `permissions` 含 `dom` 族的插件 bundle 默认 403，需用户在设置面板逐个授权（`<dataDir>/plugin-dom.json`，整机全局，授权后 epoch+1 让浏览器重拉）；只挂载锚点范围 DOM 的 `dom:anchor` 免用户授权。`apiVersion` 高于宿主则拒绝激活并提示升级 pi-web-ui。
+- **输入框 `@` 提及文件/目录**（#159）—— `@` 后直接搜工作区文件，点选即追加附件 chip（inline/reference/lines）；`a@b` 这类邮箱不误触，中文无空格书写（`请看@文件`）也能触发。
+- **右栏文件树右键操作** —— 文件/文件夹右键可新建文件/文件夹、重命名、复制/剪切/粘贴、创建副本、删除、上传文件，行尾按钮可复制名称/路径；文件夹右键「以项目打开」切换项目。右栏 `?` 帮助条同步写明全部手势。
+- **内置服务商 OAuth 登录**（#159）—— 模型配置按服务商认证能力切换 OAuth 与 API Key 两套入口：设备验证码、交互提示、取消、重连恢复与登出，凭据隔离存放。
+- **改 `mcp.json` 保存即生效**（#158）—— `fs.watch` 盯配置（防抖 300ms + 指纹比对，不支持时回落轮询）：规格等价的服务器沿用原实例（改一个不连带重启其它），新增/变更的先启动成功才换入，坏配置只提示一次、不断掉在跑的工具；工具表变更实时推给已有会话与新建会话。另修 `protocolVersion` 解析（握手与热加载指纹口径一致）。
+- **右栏直达用户目录与桌面** —— 文件树面包屑新增 🏠（用户主目录）与 🖥️（桌面，Linux 读 XDG user-dirs，中文环境认 `~/桌面`）；旧服务不提供时按钮自动隐藏。
+
 - **DSH 引擎复刻 dsh-web 四模式 Agent 预设** —— standard（全功能）/ PTC（`run_code` 组合面）/ minimal（单持久 shell）/ cordis（组合创作），与官方同名录同语义：新对话下拉选择、空白会话可切换、首轮发言后锁定、默认预设在设置面板配置、自建预设（`$DSH_HOME/.agent-presets`）照常上架。自定义系统提示词改走独立 host section（standard/ptc/cordis 下发，minimal 按官方语义压住）。已知限制：自建组合里写裸包名的无法挂载（launcher 式 boot 的 baseUrl 所限）；问卷/技能目录钩子改挂 agent scope（旧 host 写法在新版运行时已失效）。
 
 - **未发送的输入框草稿跨刷新/切换自动恢复**（issue #166，单中心文件方案）—— 以前刷新页面、切会话再回来，输入框里没发出去的字全丢。现在打字时前端每 2s 防抖 + 失焦/切会话即时把草稿存到服务端 `<dataDir>/composer-drafts.json`（按 sessionId 键入，每会话只留最新一条；`localStorage` 同步镜像一层，兜住崩溃和关闭页面的最后一击），切会话/`newChat`/刷新重连时的全量快照把草稿带回来（本地没动过才恢复，绝不覆盖正在打的字）。发送成功、会话删除即清，30 天未更新兜底清扫。增量快照不带草稿（无 60ms 热帧开销），不进 LLM 上下文、不污染历史搜索，pi 引擎独有（DSH 暂无）。
@@ -892,7 +920,10 @@ when?, children?}`，也收 `topbar` / `settings` 这类简写别名）；宿主
 - 0.35.1（2026-08-27）：编辑重问保留附件（#18）+ 全窗口拖放（#19）。
 - 0.29.0（2026-08-23）：全局搜索弹窗（Ctrl+K）+ 消息列表惰性窗口化。
 
-[Unreleased]: https://github.com/xing-shuyin/pi-web-ui/compare/v0.86.2...main
+[Unreleased]: https://github.com/xing-shuyin/pi-web-ui/compare/v0.87.1...main
+[0.87.2]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.87.2
+[0.87.1]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.87.1
+[0.87.0]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.87.0
 [0.86.2]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.86.2
 [0.86.1]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.86.1
 [0.86.0]: https://github.com/xing-shuyin/pi-web-ui/releases/tag/v0.86.0

package/dist/server/agent-service.js

@@ -24,7 +24,7 @@ import { fileURLToPath } from "node:url";
 import { createAgentSessionFromServices, createAgentSessionRuntime, createAgentSessionServices, createBashToolDefinition, createLocalBashOperations, getAgentDir, SessionManager, VERSION, } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
 import { BgServerTracker } from "./bg-servers.js";
-import { checkAll as checkAllUpdates, collectTargets, compareVersions as compareSemver, resolveNpmRegistry, } from "./update-check.js";
+import { checkAll as checkAllUpdates, collectTargets, compareVersions as compareSemver, resolveNpmRegistry, sortUpdateItems, } from "./update-check.js";
 import { hasActiveSubagentRun, hasPendingWaitSubscription, shouldRetainActive } from "./wait-subscription-scan.js";
 import { removeFirstOccurrence } from "./queue-utils.js";
 import { syncPluginToolsIntoSession } from "./plugins.js";
@@ -1800,26 +1800,78 @@ export class ClientSession {
         };
     }
     /** Summaries of conversations currently streaming — captured at shutdown
-     *  so the next attach can tell the user their run was interrupted. */
+     *  so the next attach can reopen them and continue their runs. */
     streamingSummaries() {
         const out = [];
         for (const conv of this.convs.values()) {
-            if (conv.session.isStreaming)
-                out.push({ title: conv.title, cwd: conv.cwd });
+            if (!conv.session.isStreaming)
+                continue;
+            let sessionFile;
+            try {
+                sessionFile = conv.session.sessionFile ?? undefined;
+            }
+            catch {
+                sessionFile = undefined;
+            }
+            out.push({ title: conv.title, cwd: conv.cwd, sessionFile });
         }
         return out;
     }
-    /** Tell the user about runs lost to the last server restart (once). */
-    notifyInterrupted(list) {
+    /** Reopen sessions interrupted by the last restart and continue them.
+     *
+     *  For each record WITH a session file: reopen it (listed, keeps running
+     *  when displaced) and send a short Continue prompt so the run resumes
+     *  from the persisted context. Records WITHOUT a file fall back to the
+     *  warning notice. The conversation active before the resume is restored
+     *  at the end, so the user lands where they were and clicks whichever
+     *  resumed run they want — nothing steals the view.
+     *
+     *  Called once on the first attach after a restart (fire-and-forget from
+     *  the attach path — each step is internally guarded and never throws). */
+    async resumeInterrupted(list) {
         if (!list || list.length === 0)
             return;
-        const names = list.map((r) => `「${r.title}」（${r.cwd}）`).join("、");
-        this.pendingNotices.push({
-            type: "notice",
-            level: "warning",
-            text: `上次服务重启时有 ${list.length} 个进行中的对话被中断：${names}。可在历史对话中恢复继续。`,
-            textEn: `${list.length} running conversation(s) were interrupted by the last restart: ${names}. Resume them from History.`,
-        });
+        const resumable = list.filter((r) => r.sessionFile);
+        const orphaned = list.filter((r) => !r.sessionFile);
+        if (orphaned.length > 0) {
+            const names = orphaned.map((r) => `「${r.title}」（${r.cwd}）`).join("、");
+            this.emit({
+                type: "notice",
+                level: "warning",
+                text: `上次服务重启时有 ${orphaned.length} 个进行中的对话被中断且无法自动恢复：${names}。可在历史对话中手动恢复继续。`,
+                textEn: `${orphaned.length} running conversation(s) were interrupted by the last restart and could not be resumed automatically: ${names}. Resume them manually from History.`,
+            });
+        }
+        if (resumable.length === 0)
+            return;
+        const continueText = this.getLang() === "zh" ? "继续" : "Continue";
+        const restoreId = this.activeId;
+        for (const r of resumable) {
+            try {
+                this.emit({
+                    type: "notice",
+                    level: "info",
+                    text: `上次服务重启中断了「${r.title}」，正在自动恢复并继续。`,
+                    textEn: `Restart interrupted "${r.title}" — reopening it and continuing automatically.`,
+                });
+                await this.switchSession(r.sessionFile);
+                await this.prompt(continueText);
+            }
+            catch {
+                // switchSession/prompt already surface failures as notices;
+                // one bad session must not block the rest.
+            }
+        }
+        // Hand the view back: the user lands where they were, resumed runs
+        // keep going in the background list.
+        try {
+            if (restoreId && this.convs.has(restoreId) && restoreId !== this.activeId) {
+                await this.switchConversation(restoreId);
+            }
+        }
+        catch {
+            /* staying on the last resumed session is a fine fallback */
+        }
     }
     /** Add a socket to this client's broadcast set; flushes buffered startup notices. */
     attachSink(send) {
@@ -3220,7 +3272,7 @@ export class ClientSession {
         }
         try {
             const targets = collectTargets(this.agentDir, ClientSession.currentAppVersion());
-            const items = await checkAllUpdates(targets, undefined, () => this.getLang(), resolveNpmRegistry(this.agentDir));
+            const items = sortUpdateItems(await checkAllUpdates(targets, undefined, () => this.getLang(), resolveNpmRegistry(this.agentDir)));
             this.updatesAllCache = { at: Date.now(), items };
             this.emit({ type: "update_status_all", items });
         }
@@ -4597,7 +4649,9 @@ export class ClientSession {
                 wizardRunning: conv.wizardRunning,
                 streaming: conv.session.isStreaming,
                 compacting: conv.session.isCompacting,
-                openTerminals: conv.terminals.countLive(),
+                // 只看“用过”的存活终端：没动过的空 shell（点开终端 tab 自动建的
+                // 那个）不保留对话，切走即随对话释放（见 countBlockingLive）。
+                openTerminals: conv.terminals.countBlockingLive(),
                 listed: conv.listed,
                 promptedSinceActive: conv.promptedSinceActive,
                 hasActiveSubagentRun: () => hasActiveSubagentRun({ sessionId: conv.session.sessionFile }),
@@ -5032,7 +5086,8 @@ export class ClientSession {
             reviewing: conv.goal.reviewing,
             wizardRunning: conv.wizardRunning,
             streaming: false,
-            openTerminals: conv.terminals.countLive(),
+            // 与 displaceActive 同口径：只看“用过”的存活终端。
+            openTerminals: conv.terminals.countBlockingLive(),
             listed: false,
             promptedSinceActive: false,
             hasActiveSubagentRun: () => hasActiveSubagentRun({ sessionId: conv.session.sessionFile }),
@@ -5103,7 +5158,7 @@ export class ClientSession {
             });
             return;
         }
-        if (conv.terminals.countLive() > 0) {
+        if (conv.terminals.countBlockingLive() > 0) {
             this.emit({
                 type: "notice",
                 level: "warning",
@@ -5112,6 +5167,8 @@ export class ClientSession {
             });
             return;
         }
+        // 没动过的空 shell（点开终端 tab 自动建的那个）不拦截：随对话一起释放
+        // （removeConversation 里 killAll）。
         if (shouldRetainActive({
             reviewing: conv.goal.reviewing,
             wizardRunning: conv.wizardRunning,
@@ -5364,7 +5421,8 @@ export class ClientSession {
             reviewing: conv.goal.reviewing,
             wizardRunning: conv.wizardRunning,
             streaming: false,
-            openTerminals: conv.terminals.countLive(),
+            // 与 displaceActive 同口径：只看“用过”的存活终端。
+            openTerminals: conv.terminals.countBlockingLive(),
             listed: false,
             promptedSinceActive: false,
             hasActiveSubagentRun: () => hasActiveSubagentRun({ sessionId: conv.session.sessionFile }),
@@ -6452,10 +6510,11 @@ export class AgentService {
                 }
             }
         }
-        // First attach after a restart: report runs that were interrupted when
-        // the previous process shut down (consumed once, then cleared). Queue
-        // BEFORE attachSink so the notice rides the initial pending-notice flush.
-        cs.notifyInterrupted(this.stateStore.takeInterrupted(clientId));
+        // First attach after a restart: reopen sessions that were streaming
+        // when the previous process shut down and continue them (consumed
+        // once, then cleared). Fire-and-forget AFTER attachSink + hooks:
+        // resume emits directly to sinks and needs the owner guards.
+        // Progress arrives over the socket as usual.
         cs.attachSink(send);
         // Forward hooks (set once by index.ts) to every session.
         cs.onQuit = this.onQuit;
@@ -6479,6 +6538,7 @@ export class AgentService {
         // notifyCwd 幂等去重；此后 set_cwd 成功时由 cs.onCwdChanged 继续驱动。
         cs.onCwdChanged = (abs, roots) => this.onClientCwdChanged?.(abs, roots);
         this.onClientCwdChanged?.(cs.cwd, cs.workspaceRoots);
+        void cs.resumeInterrupted(this.stateStore.takeInterrupted(clientId));
         return cs;
     }
     /** 插件 AI 工具集合变化（注册/注销）时由 index.ts 触发：推送到所有客户端的全部会话。 */
@@ -6541,7 +6601,11 @@ export class AgentService {
         }
         return fallback;
     }
-    async disposeAll() {
+    /** Snapshot still-streaming conversations for post-restart resume.
+     *  Called during graceful shutdown AND from the restart_service handler
+     *  (which exits without shutdown under systemd — without this, the
+     *  interrupted-run record would silently never be written there). */
+    recordInterruptedRuns() {
         // Record still-streaming conversations BEFORE tearing anything down, so
         // the next attach can tell the user what was lost (SIGTERM / update).
         // eslint-disable-next-line unicorn/no-useless-spread -- snapshot: handlers may unsubscribe mid-emit
@@ -6556,6 +6620,9 @@ export class AgentService {
                 // best effort — never block shutdown on bookkeeping
             }
         }
+    }
+    async disposeAll() {
+        this.recordInterruptedRuns();
         const all = [...this.clients.values()];
         this.clients.clear();
         await Promise.all(all.map((cs) => cs.dispose()));

package/dist/server/dsh/dsh-agent-service.js

@@ -399,7 +399,8 @@ export class DshClientSession {
                 continue;
             if (conv.isStreaming)
                 continue;
-            if (conv.terminals.list().length > 0)
+            // 只看“用过”的存活终端：没动过的空 shell 不阻止空闲回收。
+            if (conv.terminals.countBlockingLive() > 0)
                 continue;
             const idle = now - conv.lastEventAt;
             const limit = conv.listed ? DshClientSession.CONV_RECLAIM_LISTED_IDLE_MS : DshClientSession.CONV_RECLAIM_IDLE_MS;
@@ -1402,7 +1403,7 @@ export class DshClientSession {
         }
         // 旧对话保留（listed 生命周期简化：不主动移除）。
         const prevModel = this.model;
-        active.listed = active.isStreaming || active.terminals.list().length > 0 || active.promptedSinceActive;
+        active.listed = active.isStreaming || active.terminals.countBlockingLive() > 0 || active.promptedSinceActive;
         const conv = this.addConversation(`chat-${randomUUID().slice(0, 12)}`, this.cwd, false, preset);
         this.activeId = conv.id;
         this.model = prevModel;
@@ -1417,7 +1418,8 @@ export class DshClientSession {
         if (!this.convs.has(id) || id === this.activeId)
             return;
         const prev = this.conv;
-        prev.listed = prev.isStreaming || prev.terminals.list().length > 0 || prev.promptedSinceActive;
+        // 只看“用过”的存活终端：没动过的空 shell 不钉住 listed（与 pi 的 displaceActive 同口径）。
+        prev.listed = prev.isStreaming || prev.terminals.countBlockingLive() > 0 || prev.promptedSinceActive;
         this.activeId = id;
         // 后台列表可能属于另一项目 → 切会话同时切工作区（与 pi 一致：文件树/
         // 会话历史/最近项目跟着走）。DSH 单 runtime 换 cwd → 异步重启。
@@ -2112,7 +2114,7 @@ export class DshClientSession {
             });
             return;
         }
-        if (conv.terminals.list().length > 0 && !force) {
+        if (conv.terminals.countBlockingLive() > 0 && !force) {
             this.emit({
                 type: "notice",
                 level: "warning",
@@ -2121,6 +2123,7 @@ export class DshClientSession {
             });
             return;
         }
+        // 没动过的空 shell（点开终端 tab 自动建的那个）不拦截：随对话一起释放。
         // force + active：先让出 active（切到其他对话或新建），再移除。
         if (id === this.activeId) {
             const other = [...this.convs.values()].find((c) => c.id !== id);
@@ -2188,7 +2191,8 @@ export class DshClientSession {
                 }
             }
             const prev = this.conv;
-            prev.listed = prev.isStreaming || prev.terminals.list().length > 0 || prev.promptedSinceActive;
+            // 只看“用过”的存活终端：没动过的空 shell 不钉住 listed（与 pi 的 displaceActive 同口径）。
+            prev.listed = prev.isStreaming || prev.terminals.countBlockingLive() > 0 || prev.promptedSinceActive;
             const conv = this.addConversation(sessionId, this.cwd, true);
             conv.fromDisk = true; // 磁盘回放 → prompt 时 fork
             this.activeId = conv.id;
@@ -3855,7 +3859,8 @@ export class DshClientSession {
             })
                 .join("\n");
             const prev = this.conv;
-            prev.listed = prev.isStreaming || prev.terminals.list().length > 0 || prev.promptedSinceActive;
+            // 只看“用过”的存活终端：没动过的空 shell 不钉住 listed（与 pi 的 displaceActive 同口径）。
+            prev.listed = prev.isStreaming || prev.terminals.countBlockingLive() > 0 || prev.promptedSinceActive;
             this.activeId = fresh.id;
             // 编辑后的提问本身在 prompt 里；历史作为附加上下文（首条 prompt）。
             const headText = contextNote.trim()
@@ -3933,7 +3938,10 @@ export class DshClientSession {
             // （与 pi 的 displaceActive 语义一致）；空白的直接弃（不列）。
             const prev = this.conv;
             prev.listed =
-                prev.isStreaming || prev.terminals.list().length > 0 || prev.promptedSinceActive || prev.messages.length > 0;
+                prev.isStreaming ||
+                    prev.terminals.countBlockingLive() > 0 ||
+                    prev.promptedSinceActive ||
+                    prev.messages.length > 0;
             // 新项目 → 新会话。
             this.activeId = this.addConversation(`web-${randomUUID().slice(0, 12)}`, abs, false).id;
             // 旧项目非活跃 conversation 回收（pi 的 displaceActive 语义：切走后
@@ -3948,7 +3956,8 @@ export class DshClientSession {
                     continue;
                 if (c.isStreaming)
                     continue;
-                if (c.terminals.list().length > 0)
+                // 只看“用过”的存活终端：没动过的空 shell 不阻止项目切换时的旧会话回收。
+                if (c.terminals.countBlockingLive() > 0)
                     continue;
                 this.removeConversation(id);
             }
@@ -4228,4 +4237,8 @@ export class DshAgentService {
         }
         this.clients.clear();
     }
+    /** dsh engine keeps no interrupted-run record — resume is pi-only. */
+    recordInterruptedRuns() {
+        /* no-op */
+    }
 }

package/dist/server/index.js

@@ -45,6 +45,20 @@ import { PluginInstaller } from "./plugin-installer.js";
 import { syncPluginCatalog } from "./plugin-catalog-sync.js";
 import { McpBridge } from "./mcp-bridge.js";
 import { createMcpHotReload } from "./mcp-hot-reload.js";
+/** Strip npm-injected env (`npm start` exports `npm_config_*` / `npm_package_*` /
+ *  `npm_lifecycle_*` into every child). Anything this server spawns — shells,
+ *  `pi update` — would otherwise inherit `npm_config_allow_scripts`, which npm
+ *  maps to its env config layer and rejects in project-scoped installs
+ *  (EALLOWSCRIPTS). The unit keeps `npm ci && npm run build && npm start`;
+ *  this is the single scrub point so no wrapper is needed. */
+for (const k of Object.keys(process.env)) {
+    if (k === "npm_config_allow_scripts" ||
+        k.startsWith("npm_config_") ||
+        k.startsWith("npm_package_") ||
+        k.startsWith("npm_lifecycle_")) {
+        delete process.env[k];
+    }
+}
 /** 从 CLI 参数中取 flag 值：支持 --flag value 与 --flag=value 两种写法。
  *  让 `node dist/server/index.js --host 0.0.0.0 --port 9000` 这类直接启动也能生效，
  *  而不只是经由 bin/pi-web-ui.mjs 的 env 转发。bin 仍是主入口，此处仅作兜底。 */
@@ -1209,9 +1223,18 @@ wss.on("connection", (ws) => {
                 send({
                     type: "notice",
                     level: "info",
-                    text: "正在重启服务…页面会在服务恢复后自动重连。",
-                    textEn: "Restarting the service… this page reconnects once it is back.",
+                    text: "正在重启服务…页面会在服务恢复后自动重连，进行中的对话会自动恢复并继续。",
+                    textEn: "Restarting the service… this page reconnects once it is back; running conversations resume automatically.",
                 });
+                // Record streaming runs BEFORE exiting: under systemd this path
+                // exits via process.exit without shutdown(), so without this the
+                // post-restart resume would find nothing to continue.
+                try {
+                    service.recordInterruptedRuns();
+                }
+                catch {
+                    /* best effort — never block the restart on bookkeeping */
+                }
                 // Let the notice (and this socket's backlog) flush before we go down.
                 setTimeout(() => void scheduleQuit(), 400);
                 break;
@@ -1732,22 +1755,66 @@ if (BOOT_CATALOG_URL) {
 // Local control socket (status / quiesce / unquiesce) — same data dir the
 // CLI uses, so `pi-web-ui server status|quiesce|unquiesce` just works.
 const stopControl = startControlServer({ service, dataDir: DATA_DIR, port: PORT });
+/**
+ * Graceful shutdown budget (issue #172): disposeAll() can hang forever on a
+ * stuck session runtime / PTY / pending handle, and the process would then
+ * sit forever with no way out. The watchdog guarantees the process is gone
+ * within this long no matter what — unref'd so a clean shutdown never
+ * waits on it.
+ */
+const SHUTDOWN_FORCE_EXIT_MS = 5000;
 let shuttingDown = false;
-async function shutdown() {
-    if (shuttingDown)
-        return;
+/**
+ * SIGINT / SIGTERM handler. A second signal while a shutdown is already
+ * running exits immediately (130 = killed by SIGINT, 143 = SIGTERM) instead
+ * of being swallowed by the shuttingDown guard — previously a hung first
+ * shutdown made Ctrl+C look completely dead (issue #172).
+ */
+async function shutdown(signal = "SIGINT") {
+    if (shuttingDown) {
+        console.log("\n再次收到中断信号，强制退出…");
+        process.exit(signal === "SIGTERM" ? 143 : 130);
+    }
     shuttingDown = true;
     console.log("\nshutting down…");
-    clearInterval(heartbeatTimer);
-    stopControl();
-    pluginMgr.dispose();
-    pluginInstaller.dispose();
-    mcpHotReload.dispose();
-    mcpBridge.dispose();
-    await service.disposeAll();
-    wss.close();
-    httpServer.close();
-    process.exit(0);
+    const forceExitTimer = setTimeout(() => {
+        console.error("shutdown 超时仍未完成，强制退出…");
+        process.exit(1);
+    }, SHUTDOWN_FORCE_EXIT_MS);
+    forceExitTimer.unref();
+    let code = 0;
+    try {
+        clearInterval(heartbeatTimer);
+        stopControl();
+        pluginMgr.dispose();
+        pluginInstaller.dispose();
+        mcpHotReload.dispose();
+        mcpBridge.dispose();
+        await service.disposeAll();
+        // Don't let dead browsers hold the exit open: half-open WebSocket /
+        // keep-alive HTTP connections (e.g. test clients killed without
+        // closing) would otherwise keep close() from ever finishing — drop
+        // them first so shutdown stays prompt.
+        for (const ws of wss.clients) {
+            try {
+                ws.terminate();
+            }
+            catch {
+                /* already gone */
+            }
+        }
+        wss.close();
+        httpServer.closeAllConnections();
+        httpServer.close();
+    }
+    catch (err) {
+        code = 1;
+        console.error("shutdown 释放资源时出错:", err);
+    }
+    finally {
+        clearTimeout(forceExitTimer);
+        process.exit(code);
+    }
 }
-process.on("SIGINT", () => void shutdown());
-process.on("SIGTERM", () => void shutdown());
+process.on("SIGINT", () => void shutdown("SIGINT"));
+process.on("SIGTERM", () => void shutdown("SIGTERM"));

package/dist/server/terminals.js

@@ -863,6 +863,10 @@ export class TerminalManager {
             idleTimer: null,
             watches: [],
             agentBash,
+            // 有命令的终端（runCommand）与 ai-bash 天生就是“用过”的；裸 shell
+            // 从 pristine 开始，第一次输入/agent 触碰时才置位（见 inputChecked /
+            // noteAgentActivity）。
+            used: agentBash || command !== undefined,
             locale,
         };
         this.terms.set(id, entry);
@@ -901,6 +905,7 @@ export class TerminalManager {
         if (!entry || entry.exited)
             return;
         entry.agentTouched = true;
+        entry.used = true;
         entry.lastActivityAt = Date.now();
         this.armIdleWatch(entry);
     }
@@ -1065,6 +1070,21 @@ export class TerminalManager {
                 n++;
         return n;
     }
+    /** Count of LIVE terminals that were actually used (typed into / ran a
+     *  command / touched by the agent / ai-bash). Pristine shells — e.g. the
+     *  one auto-created when the user opens the terminal tab but never types
+     *  anything — do NOT count: they hold no foreground work and no shell
+     *  state worth protecting, so they neither retain the conversation nor
+     *  block its dismissal (they are killed together with the conversation).
+     *  Retained-output history never counts either (same as countLive).
+     *  存活且“用过”的终端数——对话保留/关闭拦截只看这个口径。 */
+    countBlockingLive() {
+        let n = 0;
+        for (const entry of this.terms.values())
+            if (!entry.exited && entry.used)
+                n++;
+        return n;
+    }
     emitList() {
         this.emit({ type: "terminal_list", terminals: this.list() });
     }
@@ -1116,10 +1136,13 @@ export class TerminalManager {
         if (!entry || entry.exited)
             return pick(this.lang?.() ?? "en", "终端不存在或进程已退出", "Terminal not found or its process has exited", "terminals.not.found.exited");
         // 已武装的纪元里任何人（含用户手动敲键盘）写了输入都算新活动，重置倒计时。
+        // 成功的输入同时把终端标为“用过”（见 used）：动过的 shell 才参与对话保留/
+        // 关闭拦截，没动过的空 shell 不算。
         entry.lastActivityAt = Date.now();
         if (entry.idleTimer)
             this.armIdleWatch(entry);
         entry.pty.write(data);
+        entry.used = true;
         return null;
     }
     key(id, key, modifiers = {}) {

package/dist/server/update-check.js

@@ -407,3 +407,25 @@ registryConfig) {
     await Promise.all(Array.from({ length: Math.min(CONCURRENCY, targets.length) }, worker));
     return results;
 }
+/** Display order for the Component Updates panel: pi-web-ui and pi-core
+ *  pinned at the top regardless of state, then out-of-date packages, then
+ *  up-to-date ones, errors last. Stable within each bucket (Array.sort is
+ *  stable) so registry order survives ties. */
+export function sortUpdateItems(items) {
+    const kindRank = (k) => (k === "webui" ? 0 : k === "pi-core" ? 1 : 2);
+    return [...items].sort((a, b) => {
+        const ka = kindRank(a.kind);
+        const kb = kindRank(b.kind);
+        if (ka !== kb)
+            return ka - kb;
+        const ea = a.error ? 1 : 0;
+        const eb = b.error ? 1 : 0;
+        if (ea !== eb)
+            return ea - eb;
+        const sa = a.upToDate ? 1 : 0;
+        const sb = b.upToDate ? 1 : 0;
+        if (sa !== sb)
+            return sa - sb;
+        return 0;
+    });
+}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-web-ui",
-	"version": "0.87.0",
+	"version": "0.87.2",
 	"description": "Web chat interface for the pi coding agent, powered by the pi SDK (@earendil-works/pi-coding-agent) — one-command run, Docker/systemd/launchd deployable",
 	"license": "MIT",
 	"author": {

package/themes/dark-teal.css

@@ -218,11 +218,13 @@
 
 /* 输入框发送\停止按钮阴影 */
 .inputbox .btn.send,
-.inputbox .btn.stop {
+.inputbox .btn.stop,
+.inputbox .split-send {
     box-shadow: 0px 2px 14px #5dc7b040;
 }
 .inputbox .btn.send:hover:not(:disabled),
-.inputbox .btn.stop:hover:not(:disabled) {
+.inputbox .btn.stop:hover:not(:disabled),
+.inputbox .split-send:hover {
     box-shadow: 0 8px 22px #5dc7b040;
 }