pi-web-ui 0.94.1 → 0.96.0

package/dist/server/ws-client-id.js

@@ -0,0 +1,29 @@
+/**
+ * WS hello 的 clientId 校验 —— 独立成模块是为了可单测
+ * （`server/index.ts` 起 WS + SDK，不适合在单测里 import）。
+ *
+ * 背景：hello.clientId 原样进入 service.attach → ClientSession → saveUpload
+ * （`<dataDir>/uploads/<clientId>/`，见 attachments.ts / dsh-agent-service.ts），
+ * 无校验时外部可传对象/数字/路径穿越串。合法客户端用 uuid（含连字符，在字符集
+ * 内）；服务端伪客户端是 `scheduler:`/`plugin:` 前缀（冒号在字符集内），但那些
+ * 不走 WS hello——收进字符集只是不挡未来的复用，不构成放行面。
+ */
+/** clientId 长度上限：uuid 36 字符的数倍余量，防超长串写盘/进日志。 */
+export const MAX_CLIENT_ID_LEN = 128;
+/** clientId 字符集：uuid（含 -）、伪客户端前缀（含 :）、下划线。 */
+const CLIENT_ID_RE = /^[A-Za-z0-9:_-]+$/;
+/**
+ * 校验 hello.clientId：必须是 string、1-128 字符、限定字符集。
+ * 合法原样返回；不合法（类型不对/空串/超长/含非法字符）返回 null，
+ * 调用方回退 randomUUID()——校验必须在 hello 入口统一做（服务端所有把
+ * clientId 落盘/当目录名的路径都从 attach 这一条链来）。
+ */
+export function validateClientId(input) {
+    if (typeof input !== "string")
+        return null;
+    if (input.length < 1 || input.length > MAX_CLIENT_ID_LEN)
+        return null;
+    if (!CLIENT_ID_RE.test(input))
+        return null;
+    return input;
+}

package/dist/server/ws-pending-queue.js

@@ -0,0 +1,60 @@
+/**
+ * attach 完成前暂存客户端命令的队列 —— 独立成模块是为了可单测
+ * （`server/index.ts` 起 WS + SDK，不适合在单测里 import）。
+ *
+ * 背景：hello 先回 ready（issue #295）后，attach/插件链就绪前收到的命令一律进
+ * pending 队列等重放；attach 挂死（坏挂载/家目录扫描数十秒）或失败保活时队列
+ * 原先无上限——失控/恶意连接可在此期间灌消息把内存顶爆。加上限后超限丢最旧并
+ * 计数（做法对齐 ws-unknown-types 的「上限 + 溢出计数 + 节流 warn」先例）。
+ */
+/** 队列上限：正常前端在 attach 窗口内只发 get_state 等零星几条，256 绰绰有余。 */
+export const MAX_PENDING_WS_MESSAGES = 256;
+/** 同一进程两次超限告警的最小间隔（防刷屏，对齐 ws-unknown-types 的节流思路）。 */
+export const PENDING_DROP_WARN_INTERVAL_MS = 60_000;
+let lastWarnAt = 0;
+/** 超限丢弃的节流告警：`PENDING_DROP_WARN_INTERVAL_MS` 内最多一条。log 注入便于单测。 */
+export function warnPendingDrop(totalDropped, log) {
+    const now = Date.now();
+    if (now - lastWarnAt < PENDING_DROP_WARN_INTERVAL_MS)
+        return;
+    lastWarnAt = now;
+    log(`[ws] attach 未完成，命令队列超限丢最旧（累计 ${totalDropped} 条）`);
+}
+/** 单测隔离用。 */
+export function resetPendingDropWarn() {
+    lastWarnAt = 0;
+}
+/** attach 前的命令暂存队列：超限丢最旧（shift），丢弃只计数，不阻断新消息入队。 */
+export class PendingCommandQueue {
+    cap;
+    items = [];
+    droppedTotal = 0;
+    constructor(cap = MAX_PENDING_WS_MESSAGES) {
+        this.cap = cap;
+    }
+    push(msg) {
+        if (this.items.length >= this.cap) {
+            this.items.shift();
+            this.droppedTotal++;
+            warnPendingDrop(this.droppedTotal, (line) => console.warn(line));
+        }
+        this.items.push(msg);
+    }
+    /** 取走全部并清空（attach 完成后的重放）。 */
+    drain() {
+        const out = this.items;
+        this.items = [];
+        return out;
+    }
+    /** attach 失败保活 / 连接关闭时清空（用户修好后重发的 get_state 会重新入队）。 */
+    clear() {
+        this.items = [];
+    }
+    /** 累计丢弃条数（排障用）。 */
+    get dropped() {
+        return this.droppedTotal;
+    }
+    get size() {
+        return this.items.length;
+    }
+}

package/extensions/webui.ts

@@ -17,8 +17,9 @@
  *   - 每个 pi 会话管理一个子进程；session_shutdown 时清理，避免孤儿进程。
  */
 
-import { spawn } from "node:child_process";
+import { spawn, execSync } from "node:child_process";
 import { existsSync } from "node:fs";
+import { homedir } from "node:os";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import net from "node:net";
@@ -27,7 +28,63 @@ import type { ExtensionAPI, ExtensionCommandContext } from "@earendil-works/pi-c
 // 本文件位于 <pkg>/extensions/webui.ts → 包根在上一级
 const PKG_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 const SERVER_ENTRY = join(PKG_ROOT, "dist", "server", "index.js");
-const NODE = process.execPath;
+
+/**
+ * 解析真实的 node 可执行路径。
+ *
+ * pi 0.87+ 的 TUI 版本是 Bun 打包的二进制（pi.exe），此时 process.execPath 指向
+ * pi.exe 而非 node。用 pi.exe 去 spawn(index.js) 会静默失败（pi.exe 不能当
+ * node 执行脚本）。此函数在 Bun 环境或 execPath 非 node 时，从 PATH 和常见安装
+ * 位置回退查找真实 node。
+ */
+function resolveNode(): string {
+	const base = process.execPath.toLowerCase();
+	// 普通 node 直接返回（未被 Bun 接管）
+	if (!(process as any).isBun && /(^|[/\\])(node|nodejs)(\.exe)?$/.test(base)) {
+		return process.execPath;
+	}
+
+	const candidates: string[] = [];
+	// 1. 从 PATH 里找（跨平台：Windows 用 where，其余用 which）
+	try {
+		const cmd = process.platform === "win32" ? "where node" : "which node";
+		const out = execSync(cmd, { windowsHide: true }).toString().trim();
+		for (const line of out.split(/\r?\n/)) {
+			const p = line.trim();
+			// 过滤掉 pi 自身
+			if (p && !/pi[/\\]pi(\.exe)?$/i.test(p)) candidates.push(p);
+		}
+	} catch {
+		/* node 不在 PATH */
+	}
+
+	// 2. 常见安装位置兜底（Windows 为主，也兼顾 Unix）
+	const home = homedir();
+	const extra: string[] = [];
+	if (process.env.PNPM_HOME) extra.push(join(process.env.PNPM_HOME, "node.exe"));
+	for (const rel of [
+		"scoop/apps/nodejs/current/node.exe",
+		"AppData/Roaming/nvm/current/node.exe",
+		".nvm/versions/node/current/bin/node",
+		".local/share/pnpm/node.exe",
+		".local/bin/node",
+	]) {
+		extra.push(join(home, ...rel.split("/")));
+	}
+	for (const c of extra) {
+		if (existsSync(c) && !/pi[/\\]pi(\.exe)?$/i.test(c)) candidates.push(c);
+	}
+
+	if (candidates.length > 0) return candidates[0];
+
+	console.warn(
+		"[webui] 未找到真实 node（当前 process.execPath 指向非 node 进程，疑似 Bun 环境）。" +
+			"将退回 process.execPath，子进程可能无法启动。请确保 node 在 PATH 中。",
+	);
+	return process.execPath;
+}
+
+const NODE = resolveNode();
 
 /** 每个会话的服务器子进程 + 元数据 */
 interface RunningServer {
@@ -161,6 +218,7 @@ export default function (pi: ExtensionAPI): void {
 			const env = {
 				...process.env,
 				PORT: String(port),
+				PI_WEB_PORT: String(port), // server/index.js 读取 PI_WEB_PORT
 				PI_WEB_CWD: cwd,
 				...(process.env.PI_WEB_DATA_DIR ? {} : { PI_WEB_DATA_DIR: join(cwd, ".pi-web") }),
 			};

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-web-ui",
-	"version": "0.94.1",
+	"version": "0.96.0",
 	"description": "Just open your browser to get all your work done — browser cockpit for AI coding agents (chat, code, files, terminal, Git in one tab)",
 	"license": "MIT",
 	"author": {
@@ -67,12 +67,13 @@
 		"test": "vitest run",
 		"test:unit": "vitest run",
 		"test:smoke": "node tests/run-smoke.mjs",
+		"test:smoke:core": "node tests/run-smoke.mjs --core",
 		"check:protocol": "node scripts/check-protocol-sync.mjs",
 		"i18n:diff": "node scripts/i18n-diff.mjs",
 		"release:notes": "node scripts/release-notes.mjs",
 		"changelog:i18n": "node scripts/release-notes.mjs --unreleased",
 		"test:freeze": "node tests/freeze-test.mjs",
-		"start": "node dist/server/index.js",
+		"start": "node --import ./dist/server/resolve-global-sdk.js dist/server/index.js",
 		"build:desktop": "tsc -p desktop/tsconfig.json",
 		"desktop:dev": "npm run build:desktop && electron dist/desktop/main.js",
 		"desktop:dist": "npm run build && npm run build:desktop && electron-builder -c desktop/electron-builder.yml",
@@ -84,7 +85,7 @@
 	"dependencies": {
 		"@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.1-rc.2",
 		"@deepseek-ai/dsh-sdk-protocol": "^0.1.1-rc.2",
-		"@earendil-works/pi-coding-agent": ">=0.85.1 <0.87.0",
+		"@earendil-works/pi-coding-agent": ">=0.85.1",
 		"@xterm/addon-fit": "^0.11.0",
 		"@xterm/xterm": "^6.0.0",
 		"compression": "^1.8.2",
@@ -101,6 +102,7 @@
 		"rehype-highlight": "^7.0.2",
 		"rehype-katex": "^7.0.1",
 		"rehype-raw": "^7.0.0",
+		"rehype-sanitize": "^6.0.0",
 		"remark-breaks": "^4.0.0",
 		"remark-gfm": "^4.0.1",
 		"remark-math": "^6.0.0",

package/plugin-sdk/README.md

@@ -125,4 +125,29 @@ describe("my-plugin", () => {
 | `schedule` 持久版（`{id, persistent, catchUp, label}`，落盘+补跑+进后台面板）                    | ✅                    | —                               |
 | `host.requestPermission`（动态授权：net 补主机 / llm 限模型，用户逐条确认可记住）                | ✅（基础族须已声明）  | 确认框 + 设置面板「已授权能力」 |
 
+## 反激活与清理：`host.effect(label, dispose)`
+
+宿主的每个注册面（`ui.register` / `registerAgentTool` / `registerCommand` / `route` /
+`registerProxy` / `fs.watch` / `schedule` / `registerBackgroundTask` / `events.on` /
+`onStats` / `onStreaming` / `onSettingsChanged` …）都返回注销函数，**并且**已经在宿主内部
+登记进该插件的 effect 栈：反激活（禁用、卸载、`plugins_reload`）时**逆序回卷**，插件忘了
+调用返回的注销函数也不会留下孤儿订阅/定时器/路由。
+
+你自己建的东西（`setInterval` / `addEventListener` / WebSocket / 自建缓存）挂在
+`host.effect` 上同样享受这条保障：
+
+```js
+export default definePlugin({
+	async activate(host) {
+		const timer = setInterval(() => host.log("info", "tick"), 60_000);
+		host.effect("my-timer", () => clearInterval(timer));
+		// 也可以两者都写（幂等：dispose 写成本身幂等即可）
+		const off = host.effect("my-ws", () => ws.close());
+	},
+});
+```
+
+清理抛错只记一条诊断、不阻断其它清理；`host.effect` 返回的注销函数与反激活都会调
+`dispose`，所以 `dispose` 请写成**幂等**的。
+
 完整契约见 `docs/architecture-plugins.md`。

package/plugin-sdk/index.d.ts

@@ -5,16 +5,7 @@
  */
 
 export type PluginPermissionFamily =
-	| "fs"
-	| "fs:read"
-	| "fs:write"
-	| "ui"
-	| "tools"
-	| "http"
-	| "chat"
-	| "net"
-	| "dom"
-	| "dom:anchor";
+	"fs" | "fs:read" | "fs:write" | "ui" | "tools" | "http" | "chat" | "net" | "dom" | "dom:anchor";
 
 export interface WsEntry {
 	name: string;
@@ -35,17 +26,7 @@ export interface UiSelectOption {
 }
 
 export type UiItemKind =
-	| "view"
-	| "action"
-	| "badge"
-	| "menu"
-	| "page"
-	| "organizer"
-	| "divider"
-	| "toggle"
-	| "input"
-	| "progress"
-	| "select";
+	"view" | "action" | "badge" | "menu" | "page" | "organizer" | "divider" | "toggle" | "input" | "progress" | "select";
 
 export interface UiContribution {
 	id: string;
@@ -152,13 +133,7 @@ export interface PluginHostUi {
 /** host.llm.complete：孤立无工具的一次性补全（不建对话、不进历史）。
  *  需要 manifest.permissions 含 "llm"（花用户自己的模型额度）。 */
 export interface PluginHostLlm {
-	complete(req: {
-		prompt: string;
-		system?: string;
-		model?: string;
-		maxChars?: number;
-		timeoutMs?: number;
-	}): Promise<{
+	complete(req: { prompt: string; system?: string; model?: string; maxChars?: number; timeoutMs?: number }): Promise<{
 		ok: boolean;
 		text?: string;
 		model?: string;
@@ -167,6 +142,19 @@ export interface PluginHostLlm {
 	}>;
 }
 
+/** 工具拦截守卫看到的 pre 请求（只对 bash/read 生效，全量见 server/plugin-tool-guard.ts）。 */
+export interface ToolGuardPreRequest {
+	toolName: "bash" | "read";
+	params: unknown;
+	conversationId?: string;
+}
+
+/** 工具 pre 决策：allow 放行 / deny 拒绝 / ask 待确认（暂按拒绝执行）。 */
+export type ToolGuardPreDecision =
+	| { decision: "allow" }
+	| { decision: "deny"; reason?: string; reasonEn?: string }
+	| { decision: "ask"; reason?: string; reasonEn?: string };
+
 /** 插件服务端入口拿到的宿主接口（精简：全量见 server/plugins.ts PluginHost）。 */
 export interface PluginHost {
 	broadcast(payload: unknown): void;
@@ -175,6 +163,12 @@ export interface PluginHost {
 	sendTo(clientId: string, payload: unknown): void;
 	onAttach(handler: (clientId: string) => void): () => void;
 	onToolEvent(handler: (ev: unknown) => void): () => void;
+	/** 注册工具 pre 拦截守卫（只对 bash/read 生效；要 "tools" 能力）。 */
+	onToolPre(
+		handler: (req: ToolGuardPreRequest) => ToolGuardPreDecision | void | Promise<ToolGuardPreDecision | void>,
+	): () => void;
+	/** 注册工具 post 编辑守卫（只对 bash/read 生效；要 "tools" 能力）。 */
+	onToolPost(handler: (req: unknown) => unknown): () => void;
 	onRunEvent(handler: (ev: unknown) => void): () => void;
 	getActiveConversation(): unknown;
 	onConversationChanged(handler: () => void): () => void;
@@ -219,6 +213,11 @@ export interface PluginHost {
 	 *  200 条，单条截断 500 字符，不落盘）；error 级同时走 console.error。
 	 *  用户在设置面板“界面插件”页点某插件的“日志”按需查看（级别过滤 + 清空）。 */
 	log(level?: "debug" | "info" | "warn" | "error", ...args: unknown[]): void;
+	/** 登记一条**自建**的可逆副作用（自建 setInterval / event 监听 / WebSocket…）：
+	 *  返回的注销函数与插件反激活**都会**调 dispose。宿主自己的每个注册面已在内部
+	 *  走同一个 effect 栈，这里只用于「宿主管不到的那些」—— 挂进来就不怕漏注销
+	 *  （热重载后定时器叠加、监听器堆积都是这个漏法的症状）。dispose 请写成幂等的。 */
+	effect(label: string, dispose: () => void): () => void;
 	/** 无头调用：把外部通道文本投给 agent（要 "chat" 能力；宿主未接 chatProvider
 	 *  时 reject（由 chatWait 包成 {ok:false}，插件侧用 chatWait 更省心）。 */
 	chat(req: { text: string; accountId?: string }): Promise<{
@@ -259,12 +258,7 @@ export interface PluginHost {
 		}>;
 	};
 	/** 常驻后台任务（顶栏「后台任务」面板；返回 update/unregister）。 */
-	registerBackgroundTask(task: {
-		id: string;
-		label: string;
-		stop?: () => void;
-		status?: string;
-	}): {
+	registerBackgroundTask(task: { id: string; label: string; stop?: () => void; status?: string }): {
 		update(next: Partial<{ label: string; status: string; stop: () => void }>): void;
 		unregister(): void;
 	};
@@ -340,10 +334,9 @@ export declare function defineView(view: PluginViewModule): PluginViewModule;
 export declare function defineRenderer(
 	renderers: Record<string, (code: string, ctx: PluginViewContext) => HTMLElement | null>,
 ): Pick<PluginViewModule, "renderers">;
-export declare function actionHandler(map: Record<string, (value?: string) => void>): (
-	itemId: string,
-	value?: string,
-) => void;
+export declare function actionHandler(
+	map: Record<string, (value?: string) => void>,
+): (itemId: string, value?: string) => void;
 export declare function onUiAction(action: string, handler: (itemId: string, value?: string) => void): () => void;
 export declare function getSetting<T>(host: PluginHost, key: string, fallback: T): T;
 export declare function selectOptions(list: Array<string | UiSelectOption>): UiSelectOption[];

package/plugin-sdk/index.mjs

@@ -211,18 +211,20 @@ export function createMockHost(overrides) {
 	// 订阅类：存 handler + 返回注销函数（调用本身由外层统一记进 calls）。
 	// handler 缺省取首参；fs.watch(path, handler) / events.on(topic, handler) /
 	// shortcuts.register(key, handler) 这类回调在第二参，用 sub(method, 1)。
-	const sub = (method, argIndex = 0) => (...args) => {
-		const handler = args[argIndex];
-		if (typeof handler === "function") handlersOf(method).push(handler);
-		let done = false;
-		return () => {
-			if (done) return;
-			done = true;
-			const arr = handlersOf(method);
-			const i = arr.indexOf(handler);
-			if (i >= 0) arr.splice(i, 1);
+	const sub =
+		(method, argIndex = 0) =>
+		(...args) => {
+			const handler = args[argIndex];
+			if (typeof handler === "function") handlersOf(method).push(handler);
+			let done = false;
+			return () => {
+				if (done) return;
+				done = true;
+				const arr = handlersOf(method);
+				const i = arr.indexOf(handler);
+				if (i >= 0) arr.splice(i, 1);
+			};
 		};
-	};
 	const logImpl = (levelOrArg, ...args) => {
 		const levels = ["debug", "info", "warn", "error"];
 		const level = levels.includes(levelOrArg) ? levelOrArg : "info";
@@ -243,12 +245,16 @@ export function createMockHost(overrides) {
 			try {
 				console.error("[mock-host]", text);
 			} catch {
-			/* 打印失败不影响单测 */
+				/* 打印失败不影响单测 */
 			}
 		}
 	};
 	const statImpl = (p) => ({
-		name: String(p ?? "").split(/[\\/]/).filter(Boolean).pop() ?? "",
+		name:
+			String(p ?? "")
+				.split(/[\\/]/)
+				.filter(Boolean)
+				.pop() ?? "",
 		type: "file",
 		size: 0,
 		mtime: 0,
@@ -264,6 +270,7 @@ export function createMockHost(overrides) {
 	const routeStore = [];
 	const proxyStore = [];
 	const scheduleStore = [];
+	const effectStore = [];
 	// 注册类：存定义体 + 返回只摘除本次注册的注销函数（与宿主同语义）。
 	const remember = (store, entry) => {
 		if (entry !== undefined) store.push(entry);
@@ -283,6 +290,8 @@ export function createMockHost(overrides) {
 		sendTo: noop,
 		onAttach: sub("onAttach"),
 		onToolEvent: sub("onToolEvent"),
+		onToolPre: sub("onToolPre"),
+		onToolPost: sub("onToolPost"),
 		onRunEvent: sub("onRunEvent"),
 		getActiveConversation: () => null,
 		chat: async () => okFalse("chatProvider（无头调用未接入）"),
@@ -313,8 +322,7 @@ export function createMockHost(overrides) {
 				const list = Array.isArray(items) ? items : [items];
 				const added = [];
 				for (const raw of list.slice(0, 32)) {
-					const id =
-						raw && typeof raw.id === "string" && raw.id ? raw.id : `mock-${++uiAutoId}`;
+					const id = raw && typeof raw.id === "string" && raw.id ? raw.id : `mock-${++uiAutoId}`;
 					uiItems.set(id, isPlainObject(raw) ? { ...raw, id } : { id });
 					added.push(id);
 				}
@@ -421,6 +429,12 @@ export function createMockHost(overrides) {
 			on: sub("events.on", 1),
 		},
 		log: logImpl,
+		// effect 栈：mock 里只记调用 + 返回可撤函数（真实宿主在反激活时逆序回卷）。
+		// 单测里测试 dispose 真跑的写法：拿到 off() 后调它，或断言 host.calls 里有 effect。
+		effect: (label, dispose) => {
+			const entry = { label, dispose };
+			return remember(effectStore, entry);
+		},
 		// 浏览器桥兼容（client 侧逻辑单测也能用同一个 mock）：无注入回退语义。
 		dialogs: {
 			select: async () => ({ ok: false }),
@@ -527,10 +541,12 @@ export function createMockHost(overrides) {
 		}
 	}
 	// 记录层：所有 host 方法（mock/reset 除外）先记 calls 再委托。
-	const record = (method, fn) => (...args) => {
-		calls.push({ method, args, seq: calls.length });
-		return fn(...args);
-	};
+	const record =
+		(method, fn) =>
+		(...args) => {
+			calls.push({ method, args, seq: calls.length });
+			return fn(...args);
+		};
 	for (const [key, value] of Object.entries(host)) {
 		if (key === "calls" || key === "logs" || key === "mock" || key === "reset") continue;
 		if (typeof value === "function") {

package/plugins/catalog.json

@@ -109,6 +109,16 @@
 		"source": "xing-shuyin/pi-web-ui/plugins/notes",
 		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/notes"
 	},
+	{
+		"id": "desktop-use",
+		"name": "桌面控制",
+		"icon": "🖱️",
+		"iconSvg": "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><rect x=\"5\" y=\"2\" width=\"14\" height=\"20\" rx=\"7\"/><line x1=\"12\" y1=\"6\" x2=\"12\" y2=\"10\"/></svg>",
+		"description": "让 AI 操作 Windows 桌面：按元素名查控件坐标（UI Automation，无需截图）→ 点击 / 输入（含中文粘贴）/ 按键 / 聚焦窗口。输入库缺失时自动安装，卸载时连带删除。",
+		"descriptionEn": "Let the AI drive the Windows desktop: find controls by name via UI Automation (no screenshots) → click / type (CJK via paste) / hotkeys / focus windows. The input library auto-installs on activate and is removed with the plugin.",
+		"source": "xing-shuyin/pi-web-ui/plugins/desktop-use",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/desktop-use"
+	},
 	{
 		"id": "pi-web-multigit",
 		"name": "multi-git",
@@ -118,5 +128,35 @@
 		"descriptionEn": "Multi-repo Git overview: changes, diffs, history, branches, stashes, cross-repo search and a timeline for every repository in the workspace, plus a workspace-wide branch view, Fetch/Pull and an optional terminal.",
 		"source": "EinErste/pi-web-multigit",
 		"homepage": "https://github.com/EinErste/pi-web-multigit"
+	},
+	{
+		"id": "reconnect",
+		"name": "重连",
+		"icon": "🔄",
+		"iconSvg": "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8\"/><path d=\"M21 3v5h-5\"/><path d=\"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16\"/><path d=\"M3 21v-5h5\"/></svg>",
+		"description": "断连恢复：查看网页服务与重启守护状态，一键重新连接或重启网页服务（支持单服务/全服务重启，配套可选独立守护进程）。",
+		"descriptionEn": "Reconnection & service recovery: inspect web service and companion watchdog health, reconnect or restart services in one click (supports multi-service restarts with companion watchdog).",
+		"source": "xieweimo/pi-web-ui-reconnect-watchdog/reconnect-plugin",
+		"homepage": "https://github.com/xieweimo/pi-web-ui-reconnect-watchdog"
+	},
+	{
+		"id": "sol-savings",
+		"name": "SoL-Pi 状态",
+		"icon": "⚡",
+		"iconSvg": "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><polygon points=\"13 2 3 14 12 14 11 22 21 10 12 10 13 2\"/></svg>",
+		"description": "SoL-Pi 会话节省统计与规划底栏：实时追踪大工具输出打包（Observation Pack）节省的上下文 Token 与在线计划（Plan）进度，借鉴 pi-sol-plan-footer 在底栏显示。",
+		"descriptionEn": "SoL-Pi session savings and plan status in the footer bar: real-time tracking of context tokens saved by Observation Pack and active Plan progress, inspired by pi-sol-plan-footer.",
+		"source": "xing-shuyin/pi-web-ui/plugins/sol-savings",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/sol-savings"
+	},
+	{
+		"id": "session-migrate",
+		"name": "会话迁移",
+		"icon": "🔄",
+		"iconSvg": "<svg xmlns=\"http://www.w3.org/2000/svg\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M3 12a9 9 0 0 1 9-9 9.75 9.75 0 0 1 6.74 2.74L21 8\"/><path d=\"M21 3v5h-5\"/><path d=\"M21 12a9 9 0 0 1-9 9 9.75 9.75 0 0 1-6.74-2.74L3 16\"/><path d=\"M8 16H3v5\"/></svg>",
+		"description": "扫描 ~/.omp/agent/sessions 与 ~/.pi/agent/sessions 的历史会话，只读预览后一键导入 pi 会话库（issue 286 Phase 1）。",
+		"descriptionEn": "Scan ~/.omp/agent/sessions and ~/.pi/agent/sessions history, preview read-only, then import into the pi session store (issue 286 Phase 1).",
+		"source": "xing-shuyin/pi-web-ui/plugins/session-migrate",
+		"homepage": "https://github.com/xing-shuyin/pi-web-ui/tree/main/plugins/session-migrate"
 	}
 ]