pi-web-ui 0.96.1 → 0.98.0

package/dist/server/terminals.js

@@ -1889,7 +1889,9 @@ lang, options) {
             }),
             execute: async (_id, p) => {
                 const lang = getLang();
-                const info = terminals.create(p.terminalId, p.cwd ?? cwd, p.cols ?? 120, p.rows ?? 40, cwd, p.terminalId);
+                const safeCols = Math.max(2, Math.min(500, Math.floor(p.cols ?? 120)));
+                const safeRows = Math.max(2, Math.min(200, Math.floor(p.rows ?? 40)));
+                const info = terminals.create(p.terminalId, p.cwd ?? cwd, safeCols, safeRows, cwd, p.terminalId);
                 const infoJson = JSON.stringify(info);
                 if (!info)
                     throw new Error(pick(lang, `创建终端失败：${p.terminalId}`, `Failed to create terminal: ${p.terminalId}`, "terminals.create.failed", { "p.terminalId": p.terminalId }));
@@ -1977,10 +1979,12 @@ lang, options) {
             }),
             execute: async (_id, p, signal) => {
                 const lang = getLang();
-                const cursor = p.cursor ?? 0;
-                if (p.waitMs)
-                    await terminals.waitForOutput(p.terminalId, cursor, p.waitMs, signal);
-                const read = terminals.read(p.terminalId, cursor, p.maxBytes ?? 20000);
+                const cursor = Math.max(0, Math.floor(p.cursor ?? 0));
+                const waitMs = p.waitMs !== undefined ? Math.max(0, Math.min(120_000, Math.floor(p.waitMs))) : undefined;
+                const maxBytes = Math.max(1, Math.min(100_000, Math.floor(p.maxBytes ?? 20000)));
+                if (waitMs)
+                    await terminals.waitForOutput(p.terminalId, cursor, waitMs, signal);
+                const read = terminals.read(p.terminalId, cursor, maxBytes);
                 if (!read)
                     throw new Error(pick(lang, `终端不存在：${p.terminalId}`, `Terminal not found: ${p.terminalId}`, "terminals.read.not.found", { "p.terminalId": p.terminalId }));
                 return result(JSON.stringify(read), read);
@@ -2019,7 +2023,8 @@ lang, options) {
                     return result(JSON.stringify({ applicable: false, reason: why }), { applicable: false });
                 }
                 const cursor = p.cursor ?? terminals.endCursor(p.terminalId) ?? 0;
-                const wait = await terminals.waitForCompletion(p.terminalId, p.maxWaitMs ?? 300_000, signal, cursor);
+                const maxWait = Math.max(100, Math.min(600_000, Math.floor(p.maxWaitMs ?? 300_000)));
+                const wait = await terminals.waitForCompletion(p.terminalId, maxWait, signal, cursor);
                 const read = terminals.read(p.terminalId, cursor, 20_000);
                 const outputTail = read?.data ? stripAnsi(read.data).slice(-4000) : "";
                 return result(JSON.stringify({ ...wait, outputTail }), {

package/dist/server/text-quote.js

@@ -0,0 +1,59 @@
+/** 校验引用元数据，保留原文的换行和缩进。 */
+export function readTextQuote(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const q = value;
+    if (typeof q.text !== "string" ||
+        !q.text.trim() ||
+        typeof q.messageId !== "string" ||
+        !q.messageId ||
+        typeof q.role !== "string" ||
+        !q.role)
+        return null;
+    return {
+        text: q.text,
+        messageId: q.messageId,
+        role: q.role,
+        ...(typeof q.sessionId === "string" && q.sessionId ? { sessionId: q.sessionId } : {}),
+    };
+}
+/** JSON 字符串保留原文边界，引用中的换行不参与外层标记解析。 */
+export function formatTextQuote(quote) {
+    return `<quoted-text>\n${JSON.stringify(quote)}\n</quoted-text>`;
+}
+export function parseTextQuote(text) {
+    const match = /^<quoted-text>\n([^\n]*)\n<\/quoted-text>$/.exec(text);
+    if (!match)
+        return null;
+    try {
+        return readTextQuote(JSON.parse(match[1]));
+    }
+    catch {
+        return null;
+    }
+}
+export function formatQuotedPrompt(text, quotes) {
+    return [text, ...quotes.map(formatTextQuote)].join("\n\n");
+}
+/** 排队项把引用与提问一起保存；展示时只拆分末尾的完整引用块。 */
+export function splitQuotedPrompt(value) {
+    let text = value;
+    const quotes = [];
+    while (true) {
+        const match = /(?:^|\n\n)(<quoted-text>\n[^\n]*\n<\/quoted-text>)$/.exec(text);
+        const quote = match ? parseTextQuote(match[1]) : null;
+        if (!match || !quote)
+            break;
+        quotes.unshift(quote);
+        text = text.slice(0, match.index);
+    }
+    return { text, quotes };
+}
+export function messageTextWithQuotes(message) {
+    const text = message.content
+        .map((block) => (block.type === "text" && typeof block.text === "string" ? block.text : ""))
+        .join("\n");
+    const values = message.details?.quotes;
+    const quotes = Array.isArray(values) ? values.map(readTextQuote).filter((q) => q !== null) : [];
+    return formatQuotedPrompt(text, quotes);
+}

package/dist/server/text-sniff.js

@@ -187,21 +187,27 @@ export function looksLikeText(buf) {
     }
     return control / Math.max(text.length, 1) < 0.02;
 }
-/** Decode bytes: strict UTF-8 first, falling back to GBK (Windows legacy
- *  Chinese files), then latin1 as a last resort — so previews and inline
- *  attachments never show mojibake for GBK/GB2312 encoded files. */
+/** Decode bytes: strict UTF-8 first (retrying with up to 3 truncated tail
+ *  bytes removed for excerpt/preview buffers cut mid-character), falling back
+ *  to GBK (Windows legacy Chinese files), then latin1 as a last resort — so
+ *  previews and inline attachments never show mojibake for GBK/GB2312 files
+ *  nor for truncated UTF-8 files (issue #392). */
 export function decodeText(buf) {
-    try {
-        return new TextDecoder("utf-8", { fatal: true }).decode(buf);
-    }
-    catch {
+    for (let cut = 0; cut < 4; cut++) {
+        const slice = cut === 0 ? buf : buf.subarray(0, Math.max(0, buf.length - cut));
         try {
-            return new TextDecoder("gbk").decode(buf);
+            return new TextDecoder("utf-8", { fatal: true }).decode(slice);
         }
         catch {
-            return buf.toString("latin1");
+            // Tail byte might be cut mid-character; try trimming up to 3 bytes.
         }
     }
+    try {
+        return new TextDecoder("gbk").decode(buf);
+    }
+    catch {
+        return buf.toString("latin1");
+    }
 }
 /** Sniff an image MIME type from magic bytes (extension is only a hint).
  *  Returns null when the bytes don't look like a known raster format —

package/dist/server/tool-manager.js

@@ -25,8 +25,11 @@ export const TERMINAL_TOOL_NAMES = [
     "terminal_read",
     "terminal_wait",
 ];
-/** 第一方子代理工具（定义见 subagents.ts，逐个可关）。 */
-export const SUBAGENT_TOOL_NAMES = [
+/** 第一方子代理工具（定义见 subagents.ts，统一为单 action 工具）。 */
+export const SUBAGENT_TOOL_NAME = "subagent";
+export const SUBAGENT_TOOL_NAMES = [SUBAGENT_TOOL_NAME];
+/** 旧版 8 个独立子代理工具名（持久化配置迁移用）。 */
+export const LEGACY_SUBAGENT_TOOL_NAMES = [
     "subagent_spawn",
     "subagent_get_result",
     "subagent_steer",
@@ -251,7 +254,7 @@ export const AGENT_TOOL_CATALOG = [
     },
 ];
 /** SDK 核心内置工具名（可被门控显式禁用或被预设白名单过滤）。 */
-export const CORE_BUILTIN_TOOL_NAMES = ["bash", "read", "edit", "write"];
+export const CORE_BUILTIN_TOOL_NAMES = ["bash", "read", "edit", "write", "powershell", "ls", "grep", "find"];
 export function isCoreBuiltinTool(name) {
     return CORE_BUILTIN_TOOL_NAMES.includes(name);
 }
@@ -268,7 +271,11 @@ export function normalizeDisabledAgentTools(v) {
     const out = [];
     for (const x of v) {
         // 旧名迁移：markers_list → todo_list（改名前已关闭的用户保持关闭）。
-        const name = x === LEGACY_MARKERS_LIST_TOOL_NAME ? MARKERS_LIST_TOOL_NAME : x;
+        let name = x === LEGACY_MARKERS_LIST_TOOL_NAME ? MARKERS_LIST_TOOL_NAME : x;
+        // 旧版子代理工具迁移：任意旧 subagent_* 关闭均迁移为关闭 subagent 工具。
+        if (typeof name === "string" && LEGACY_SUBAGENT_TOOL_NAMES.includes(name)) {
+            name = SUBAGENT_TOOL_NAME;
+        }
         if (typeof name === "string" && (KNOWN_NAMES.has(name) || isCoreBuiltinTool(name)) && !out.includes(name)) {
             out.push(name);
         }
@@ -338,10 +345,19 @@ export function applyAgentToolsGating(session, disabled, preset) {
         const allNames = session.getAllTools().map((t) => t.name);
         const names = new Set(allNames);
         for (const t of AGENT_TOOL_CATALOG) {
-            if (off.has(t.name))
-                names.delete(t.name);
-            else
+            if (off.has(t.name)) {
+                // issue #481: 若第三方扩展注册了同名工具（如 nicobailon/pi-subagents 的 subagent），
+                // 关闭内置工具时允许扩展工具透传，不从活跃名单删除
+                const hasExtensionTool = Boolean(session?.extensionRunner
+                    ?.getAllRegisteredTools?.()
+                    ?.some((tool) => tool.definition?.name === t.name));
+                if (!hasExtensionTool) {
+                    names.delete(t.name);
+                }
+            }
+            else {
                 names.add(t.name);
+            }
         }
         for (const core of CORE_BUILTIN_TOOL_NAMES) {
             if (off.has(core))
@@ -363,7 +379,9 @@ export const PI_AGENT_PRESETS = [
         trust: "system",
         isDefault: true,
         name: "全功能",
+        nameEn: "Full access",
         description: "提供全部可用工具与扩展能力（默认）",
+        descriptionEn: "All available tools and extension capabilities (default)",
         order: 0,
     },
     {
@@ -371,7 +389,9 @@ export const PI_AGENT_PRESETS = [
         trust: "system",
         isDefault: false,
         name: "极简模式",
+        nameEn: "Minimal",
         description: "仅保留 bash 与 read；插件工具、技能名录与终端引导同步隐藏",
+        descriptionEn: "Keeps only bash and read; plugin tools, skill catalog and terminal guidance are hidden too",
         order: 1,
     },
     {
@@ -379,7 +399,9 @@ export const PI_AGENT_PRESETS = [
         trust: "system",
         isDefault: false,
         name: "代码开发",
+        nameEn: "Code development",
         description: "专注于代码读写与执行（bash, read, edit, write, edit_soft）；插件工具与技能名录同步隐藏",
+        descriptionEn: "Focused on reading, writing and running code (bash, read, edit, write, edit_soft); plugin tools and skill catalog are hidden too",
         order: 2,
     },
     {
@@ -387,7 +409,9 @@ export const PI_AGENT_PRESETS = [
         trust: "system",
         isDefault: false,
         name: "只读分析",
+        nameEn: "Read-only analysis",
         description: "仅保留只读工具，禁止写操作；插件工具同步隐藏（读写未知，保守处理）",
+        descriptionEn: "Keeps only read-only tools and forbids writes; plugin tools are hidden too (read/write unknown, handled conservatively)",
         order: 3,
     },
     {
@@ -395,7 +419,9 @@ export const PI_AGENT_PRESETS = [
         trust: "system",
         isDefault: false,
         name: "纯对话",
+        nameEn: "Chat only",
         description: "无工具问答模式，模型不调用任何工具；插件工具与技能名录同步隐藏",
+        descriptionEn: "No-tools Q&A: the model never calls a tool; plugin tools and skill catalog are hidden too",
         order: 4,
     },
 ];
@@ -404,19 +430,45 @@ export const PI_PERMISSION_OPTIONS = [
     {
         value: "read-only",
         name: "只读模式",
+        nameEn: "Read Only",
         description: "禁止所有文件修改（write/edit/edit_soft）及任何非只读操作",
+        descriptionEn: "Forbids all file modification (write/edit/edit_soft) and any non-read-only operation",
     },
     {
         value: "workspace-write-never",
         name: "工作区内修改",
+        nameEn: "Workspace Write",
         description: "仅允许在当前工作区目录下修改文件，工作区外写操作一律拒绝",
+        descriptionEn: "Only files under the current workspace may be modified; writes outside it are always denied",
     },
     {
         value: "danger-full-access",
         name: "完全权限",
+        nameEn: "Full access",
         description: "允许修改任意目录文件及执行全量操作（需要二次确认）",
+        descriptionEn: "Allows modifying files anywhere and running any operation (needs a second confirmation)",
     },
 ];
+/**
+ * 预设/权限文案随界面语言落定：中文界面用服务端默认文案，其它语言用
+ * nameEn ?? name（与审批规则的 labelEn/reasonEn、插件的 label/labelEn 同一约定；
+ * 其它语言包同理回落英文）。服务端 notice 的 textEn 也走这里，否则英文界面会看到
+ * `Switched to preset "全功能"`。
+ *
+ * lang 是 ServerLang（resolveServerLang 的产物）：只有 "zh" 算中文。
+ * 本文件保持零依赖，故直接比字符串而不 import server/i18n.js。
+ */
+export function localizedName(item, lang, fallback = "") {
+    if (!item)
+        return fallback;
+    return lang === "zh" ? (item.name ?? item.nameEn ?? fallback) : (item.nameEn ?? item.name ?? fallback);
+}
+/** localizedName 的描述版本（description 两边都可缺省 → undefined）。 */
+export function localizedDescription(item, lang) {
+    if (!item)
+        return undefined;
+    return lang === "zh" ? (item.description ?? item.descriptionEn) : (item.descriptionEn ?? item.description);
+}
 /** 按预设过滤活跃工具名。 */
 export function filterToolsByPreset(tools, preset) {
     const all = Array.from(tools);
@@ -437,6 +489,7 @@ export function filterToolsByPreset(tools, preset) {
             "edit",
             "edit_soft",
             "bash",
+            "powershell",
             "terminal_create",
             "terminal_input",
             "terminal_close",

package/dist/server/tool-overrides.js

@@ -57,3 +57,27 @@ export function installToolOverrides(session, specs) {
     session._refreshToolRegistry();
     return [...names];
 }
+/**
+ * 同步 subagent 工具与第三方扩展的同名工具共存（issue #481）：
+ * 当第三方扩展注册了同名 subagent 时，若用户在设置中关闭/禁用了内置 subagent，
+ * 则自动从 session._customTools 中移除内置 subagent，让扩展的同名工具透传生效；
+ * 重新启用时则重新注入内置 subagent。
+ */
+export function syncSubagentOverride(session, subagentDisabled, builtinSubagentTool) {
+    if (!Array.isArray(session._customTools) || typeof session._refreshToolRegistry !== "function")
+        return;
+    const hasExtensionTool = Boolean(extensionToolDefinition(session, "subagent"));
+    if (!hasExtensionTool)
+        return;
+    const idx = session._customTools.findIndex((t) => t.name === "subagent");
+    if (subagentDisabled) {
+        if (idx !== -1) {
+            session._customTools = session._customTools.filter((t) => t.name !== "subagent");
+            session._refreshToolRegistry();
+        }
+    }
+    else if (idx === -1 && builtinSubagentTool) {
+        session._customTools = [builtinSubagentTool(), ...session._customTools];
+        session._refreshToolRegistry();
+    }
+}

package/dist/server/update-check.js

@@ -375,29 +375,43 @@ function piCliOnPath() {
     }
     return null;
 }
+/** Read a pi-core package.json's version, or null when absent, not ours, or
+ *  unreadable. Shared by both resolution strategies below. */
+function readPiCoreVersionAt(pkgPath) {
+    if (!existsSync(pkgPath))
+        return null;
+    try {
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        if (pkg.name === PI_CORE_PACKAGE && pkg.version)
+            return pkg.version;
+    }
+    catch {
+        /* unreadable package.json */
+    }
+    return null;
+}
 /**
- * Read the pi core version from disk: resolve the `pi` bin (typically a
- * symlink into <global>/node_modules/<pkg>/dist/bundle/cli.js) and walk up to
- * its package.json. FORK-FREE by design — see the note on defaultProbePiCore.
+ * <binDir>/node_modules/<pkg>/package.json — the concrete layout a global npm
+ * install always uses. This is the FIRST candidate because it is the only one
+ * that works on Windows: npm's cmd-shim writes a regular `pi` shell script
+ * (not a symlink into the package), so the realpath walk below would start
+ * from <prefix> itself and never see the package one level down (issue #533).
  */
-function readPiCoreVersionFromDisk() {
-    const bin = piCliOnPath();
-    if (!bin)
-        return null;
+function versionFromSiblingNodeModules(bin) {
+    return readPiCoreVersionAt(join(dirname(bin), "node_modules", ...PI_CORE_PACKAGE.split("/"), "package.json"));
+}
+/**
+ * POSIX: `pi` is a symlink into <prefix>/node_modules/<pkg>/dist/bundle/cli.js
+ * — realpath it and walk up (≤8 levels) until a package.json names our
+ * package. Functionally unchanged from the original probe.
+ */
+function versionFromSymlinkWalk(bin) {
     try {
         let dir = dirname(realpathSync(bin));
         for (let i = 0; i < 8; i++) {
-            const pkgPath = join(dir, "package.json");
-            if (existsSync(pkgPath)) {
-                try {
-                    const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-                    if (pkg.name === PI_CORE_PACKAGE && pkg.version)
-                        return pkg.version;
-                }
-                catch {
-                    /* unreadable package.json — keep walking */
-                }
-            }
+            const version = readPiCoreVersionAt(join(dir, "package.json"));
+            if (version)
+                return version;
             const parent = dirname(dir);
             if (parent === dir)
                 break;
@@ -409,6 +423,17 @@ function readPiCoreVersionFromDisk() {
     }
     return null;
 }
+/**
+ * Read the pi core version from disk: resolve the `pi` bin on PATH, then try
+ * the concrete global-npm layout first (Windows) and the POSIX symlink walk
+ * second. Exported for unit tests — defaultProbePiCore memoizes its result.
+ */
+export function readPiCoreVersionFromDisk() {
+    const bin = piCliOnPath();
+    if (!bin)
+        return null;
+    return versionFromSiblingNodeModules(bin) ?? versionFromSymlinkWalk(bin);
+}
 /**
  * Default pi core probe: run the globally installed `pi --version`, memoized
  * machine-wide for PI_PROBE_TTL_MS so repeated collectTargets calls never
@@ -466,25 +491,36 @@ function readVendoredPiCore(agentDir) {
         return null;
     }
 }
+/**
+ * 宿主 SDK 及其 peer/内部包（@earendil-works/* / @mariozechner/*）：
+ * 属于宿主引擎随核心一同分发或由别名提供的 SDK 内部构件，非用户安装的独立扩展组件；
+ * 既不应在组件列表重复展示，也不能被 `pi update npm:<name>` 更新（会报 No matching package found，issue #393）。
+ */
+export function isHostProvidedPackage(name) {
+    return name === PI_CORE_PACKAGE || name.startsWith("@earendil-works/") || name.startsWith("@mariozechner/");
+}
 /**
  * Build the full local target list: webui + the pi core + installed packages
  * + git-source extensions (issue #178) from global and project settings.
  * The pi core version comes from the CLI probe (injectable for tests), falling
  * back to the vendored copy under <agentDir>/npm/node_modules. Packages
- * listing the core directly are filtered out so the pi-core row wins — never
- * two rows for the same package.
+ * listing the core directly or host-provided SDK peers are filtered out so the
+ * pi-core row wins and host peers are not listed as updatable (issue #393).
  */
 export function collectTargets(agentDir, webuiVersion, probePiCore = defaultProbePiCore, opts) {
     const targets = [{ name: "pi-web-ui", version: webuiVersion, kind: "webui" }];
     const coreVersion = probePiCore() ?? readVendoredPiCore(agentDir);
-    if (coreVersion) {
-        targets.push({
-            name: PI_CORE_PACKAGE,
-            version: coreVersion,
-            kind: "pi-core",
-        });
-    }
-    targets.push(...listInstalledPackages(agentDir).filter((pkg) => pkg.name !== PI_CORE_PACKAGE));
+    // issue #533: keep the pi-core row even when the version is undetectable
+    // (e.g. unreadable global install) instead of silently dropping it — an
+    // honest "could not detect" row beats a missing one. checkAll resolves the
+    // key into the item's localized `error`.
+    targets.push({
+        name: PI_CORE_PACKAGE,
+        version: coreVersion ?? "unknown",
+        kind: "pi-core",
+        ...(coreVersion ? {} : { error: "pluginupdate.piCore.unknown" }),
+    });
+    targets.push(...listInstalledPackages(agentDir).filter((pkg) => !isHostProvidedPackage(pkg.name)));
     targets.push(...listGitExtensions(agentDir, opts?.projectCwd));
     return targets;
 }
@@ -628,6 +664,22 @@ gitCheck = defaultCheckGitExtension) {
         while (cursor < targets.length) {
             const i = cursor++;
             const t = targets[i];
+            if (t.error) {
+                // Pre-flagged target (issue #533, e.g. undetectable pi-core
+                // version): `error` carries an i18n key resolved here so
+                // collectTargets stays language-free. No registry lookup.
+                results[i] = {
+                    name: t.name,
+                    kind: t.kind,
+                    current: t.version,
+                    latest: null,
+                    latestPublishedAt: null,
+                    upToDate: false,
+                    ...(t.source ? { source: t.source } : {}),
+                    error: pick(l, "无法检测已安装的引擎版本（可能未装全局 pi，或安装方式不标准），可手动检查。", "Could not detect the installed engine version (no global pi, or a non-standard install); check manually.", t.error),
+                };
+                continue;
+            }
             if (t.kind === "git-extension") {
                 try {
                     if (!t.installDir)

package/dist/server/wait-subscription-scan.js

@@ -239,12 +239,16 @@ export function hasPendingWaitSubscription(options) {
 /**
  * 纯函数版置换决策：true = 保留（不得 dispose），false = 调用方可释放。
  * Pure decision core of displaceActive(): true = retain, false = may dispose.
- * 顺序与 displaceActive 保持一致：review/wizard → streaming → terminals →
+ * 顺序与 displaceActive 保持一致：pin → review/wizard → streaming → terminals →
  * active subagent run → pending wake → listed+continued（「打开后继续过」的会话也保留）。
  */
 export function shouldRetainActive(input) {
+    if (input.pinned)
+        return true;
     if (input.reviewing || input.wizardRunning)
         return true;
+    if (input.promptInFlight)
+        return true;
     if (input.streaming || input.compacting)
         return true;
     if (input.openTerminals > 0)

package/extensions/webui.ts

@@ -215,14 +215,28 @@ export default function (pi: ExtensionAPI): void {
 			const cwd = opts.cwd ?? ctx.cwd;
 			const url = `http://localhost:${port}`;
 
+			// 探测并向子进程显式透传宿主 Pi SDK 路径（issue #482）
+			let hostSdkDir: string | undefined;
+			try {
+				const resolved = import.meta.resolve?.("@earendil-works/pi-coding-agent");
+				if (resolved) {
+					let p = resolved.startsWith("file:") ? fileURLToPath(resolved) : resolved;
+					if (p.endsWith("index.js") || p.endsWith("index.mjs")) p = dirname(p);
+					if (existsSync(join(p, "package.json"))) hostSdkDir = p;
+				}
+			} catch {}
+
 			const env = {
 				...process.env,
 				PORT: String(port),
 				PI_WEB_PORT: String(port), // server/index.js 读取 PI_WEB_PORT
 				PI_WEB_CWD: cwd,
+				...(hostSdkDir ? { PI_WEB_SDK_DIR: hostSdkDir } : {}),
 				...(process.env.PI_WEB_DATA_DIR ? {} : { PI_WEB_DATA_DIR: join(cwd, ".pi-web") }),
 			};
-			const proc = spawn(NODE, [SERVER_ENTRY], {
+			const hookPath = join(PKG_ROOT, "dist", "server", "resolve-global-sdk.js");
+			const nodeArgs = existsSync(hookPath) ? ["--import", hookPath, SERVER_ENTRY] : [SERVER_ENTRY];
+			const proc = spawn(NODE, nodeArgs, {
 				cwd,
 				env,
 				stdio: "ignore",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-web-ui",
-	"version": "0.96.1",
+	"version": "0.98.0",
 	"description": "Just open your browser to get all your work done — browser cockpit for AI coding agents (chat, code, files, terminal, Git in one tab)",
 	"license": "MIT",
 	"author": {
@@ -79,39 +79,35 @@
 		"desktop:dist": "npm run build && npm run build:desktop && electron-builder -c desktop/electron-builder.yml",
 		"format": "prettier --write server/ web/src/ extensions/ scripts/ bin/ desktop/ tests/*.mjs tests/unit/ *.mjs",
 		"format:check": "prettier --check server/ web/src/ extensions/ scripts/ bin/ desktop/ tests/*.mjs tests/unit/ *.mjs",
-		"lint": "oxlint server/ web/src/ extensions/ scripts/ desktop/",
-		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/ desktop/"
+		"lint": "oxlint server/ web/src/ extensions/ scripts/ bin/ desktop/",
+		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/ bin/ desktop/"
 	},
 	"dependencies": {
-		"@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.1-rc.2",
-		"@deepseek-ai/dsh-sdk-protocol": "^0.1.1-rc.2",
+		"@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.5-rc.3",
+		"@deepseek-ai/dsh-sdk-protocol": "^0.1.5-rc.3",
 		"@earendil-works/pi-coding-agent": ">=0.85.1",
-		"@xterm/addon-fit": "^0.11.0",
-		"@xterm/xterm": "^6.0.0",
 		"compression": "^1.8.2",
 		"electron-updater": "^6.8.9",
 		"express": "^5.2.1",
-		"highlight.js": "^11.12.0",
-		"html-to-image": "^1.11.13",
-		"katex": "^0.18.7",
 		"node-pty": "^1.1.0",
-		"react": "^19.3.0",
-		"react-dom": "^19.3.0",
-		"react-icons": "^5.7.0",
-		"react-markdown": "^10.1.0",
-		"rehype-highlight": "^7.0.2",
-		"rehype-katex": "^7.0.1",
-		"rehype-raw": "^7.0.0",
-		"rehype-sanitize": "^6.0.0",
-		"remark-breaks": "^4.0.0",
-		"remark-gfm": "^4.0.1",
-		"remark-math": "^6.0.0",
 		"tar": "^7.5.22",
 		"typebox": "^1.3.34",
 		"undici": "^8.9.0",
 		"ws": "^8.21.3",
 		"yauzl": "^3.4.0"
 	},
+	"peerDependencies": {
+		"@earendil-works/pi-coding-agent": "*",
+		"typebox": "*"
+	},
+	"peerDependenciesMeta": {
+		"@earendil-works/pi-coding-agent": {
+			"optional": true
+		},
+		"typebox": {
+			"optional": true
+		}
+	},
 	"devDependencies": {
 		"@types/compression": "^1.8.1",
 		"@types/express": "^5.0.6",
@@ -121,16 +117,32 @@
 		"@types/ws": "^8.18.1",
 		"@types/yauzl": "^3.4.0",
 		"@vitejs/plugin-react": "^6.1.1",
+		"@xterm/addon-fit": "^0.11.0",
+		"@xterm/xterm": "^6.0.0",
 		"concurrently": "^10.0.5",
 		"cross-env": "^10.1.0",
 		"electron": "^44.4.2",
 		"electron-builder": "^26.15.3",
 		"esbuild": "^0.28.2",
+		"highlight.js": "^11.12.0",
+		"html-to-image": "^1.11.13",
 		"jsdom": "^30.1.0",
+		"katex": "^0.18.7",
 		"mermaid": "^12.0.0",
 		"oxlint": "^1.83.0",
 		"playwright-core": "^1.63.0",
 		"prettier": "^3.9.8",
+		"react": "^19.3.0",
+		"react-dom": "^19.3.0",
+		"react-icons": "^5.7.0",
+		"react-markdown": "^10.1.0",
+		"rehype-highlight": "^7.0.2",
+		"rehype-katex": "^7.0.1",
+		"rehype-raw": "^7.0.0",
+		"rehype-sanitize": "^6.0.0",
+		"remark-breaks": "^4.0.0",
+		"remark-gfm": "^4.0.1",
+		"remark-math": "^6.0.0",
 		"tsx": "^4.23.13",
 		"typescript": "^7.0.2",
 		"vis-timeline": "^8.5.4",