pi-web-ui 0.97.0 → 0.98.0

package/dist/server/plugin-grants.js

@@ -36,8 +36,9 @@
  * 与尾部分隔符（Windows 文件系统不区分大小写），但**存储保持用户写入时的形式**
  * （不 lowerCase），否则设置面板里 `C:\Users\Foo` 会显示成 `c:\users\foo`。
  */
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { dirname, isAbsolute, resolve, sep } from "node:path";
+import { readFileSync } from "node:fs";
+import { isAbsolute, resolve, sep } from "node:path";
+import { writeJsonAtomicSync } from "./atomic-file.js";
 /** 合法插件 id（与 server/plugins.ts 的 ID_RE 一致，防路径穿越）。 */
 const ID_RE = /^[A-Za-z0-9_-]+$/;
 /** 去掉尾部分隔符（保留根：「C:\」/「/」不能退化）。 */
@@ -93,13 +94,9 @@ function isSameOrInside(targetKey, ancestorKey) {
     const prefix = ancestorKey.endsWith(sep) ? ancestorKey : ancestorKey + sep;
     return targetKey.startsWith(prefix);
 }
-/** 原子写：临时文件 + rename（同 server/plugin-catalog.ts 的写法；本文件不 import
- *  它，避免为一个 3 行函数制造模块耦合）。 */
+/** 原子写：临时文件 + rename。 */
 function atomicWriteJson(filePath, data) {
-    mkdirSync(dirname(filePath), { recursive: true });
-    const tmp = `${filePath}.tmp-${process.pid}`;
-    writeFileSync(tmp, JSON.stringify(data, null, 2) + "\n");
-    renameSync(tmp, filePath);
+    writeJsonAtomicSync(filePath, data);
 }
 /** 读文件并净化为内存表：任何异常（不存在 / 权限 / JSON 坏 / 形状不对）→ 空表。
  *  条目逐个过 normalizeGrantPath（顺手兼容手工写入的相对路径、重复项、坏 id）。 */

package/dist/server/plugin-permissions.js

@@ -13,8 +13,9 @@
  * - 内存 session 授权（仅本次运行，进程结束即失）。
  * 读坏/形状不对当空表，且不在读路径回写；只有真正变更的写才落盘（tmp+rename 原子写）。
  */
-import { readFileSync, writeFileSync, renameSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { writeJsonAtomicSync } from "./atomic-file.js";
 /** 主机匹配（与 manifest netAllowlist 同口径）：全等或点号后缀。纯函数，单测覆盖。 */
 export function permissionHostMatches(hostname, entry) {
     const h = String(hostname ?? "").toLowerCase();
@@ -63,10 +64,7 @@ export class PluginPermissionStore {
     }
     write(grants) {
         try {
-            mkdirSync(dirname(this.file()), { recursive: true });
-            const tmp = `${this.file()}.tmp-${process.pid}`;
-            writeFileSync(tmp, JSON.stringify({ v: 1, grants }));
-            renameSync(tmp, this.file());
+            writeJsonAtomicSync(this.file(), { v: 1, grants });
         }
         catch (err) {
             console.error(`[plugin-permissions] persist failed (${this.file()}):`, err);

package/dist/server/plugin-schedule.js

@@ -10,8 +10,9 @@
  *    上次触发 lastRun；fn 回调永远由插件代码在 activate 里重给（重启后重建）。
  *    坏文件当空表（不回写，避免一次磁盘抖动清空全部定时）。
  */
-import { readFileSync, writeFileSync, renameSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+import { writeJsonAtomicSync } from "./atomic-file.js";
 const MONTH_NAMES = {
     jan: 1,
     feb: 2,
@@ -224,11 +225,7 @@ export function loadScheduleRecords(pluginDir) {
 /** 写持久记录（tmp+rename 原子写；失败只记日志，内存态本次会话仍生效）。 */
 export function saveScheduleRecords(pluginDir, records) {
     try {
-        mkdirSync(pluginDir, { recursive: true });
-        const file = scheduleFile(pluginDir);
-        const tmp = `${file}.tmp-${process.pid}`;
-        writeFileSync(tmp, JSON.stringify({ v: 1, schedules: records }));
-        renameSync(tmp, file);
+        writeJsonAtomicSync(scheduleFile(pluginDir), { v: 1, schedules: records });
     }
     catch (err) {
         console.error(`[plugin-schedule] persist failed (${pluginDir}):`, err);

package/dist/server/plugin-updater.js

@@ -8,13 +8,29 @@
  *   <dataDir>/plugin-backups/<id>-<ts>/  覆盖安装前的旧版本快照（保留最近 N 份）
  */
 import { existsSync, mkdirSync, readdirSync, readFileSync, rmSync, cpSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
+import { join, resolve, dirname } from "node:path";
+import { fileURLToPath } from "node:url";
 import { execFile } from "node:child_process";
 import { pick } from "./i18n.js";
 import { parseInstallSpec, manifestCandidateUrls } from "./plugin-install-spec.js";
 const PLUGIN_ID_RE = /^[A-Za-z0-9_-]+$/;
 /** 保留的备份份数（超出删除最旧的）。 */
 export const BACKUP_KEEP = 3;
+const here = dirname(fileURLToPath(import.meta.url));
+/**
+ * 解析宿主随包根目录（优先环境变量 PI_WEB_PKG_ROOT，次之向上查找包含 package.json 的祖先目录）。
+ */
+export function resolveDefaultPkgRoot() {
+    if (process.env.PI_WEB_PKG_ROOT && existsSync(process.env.PI_WEB_PKG_ROOT)) {
+        return process.env.PI_WEB_PKG_ROOT;
+    }
+    const candidates = [resolve(here, ".."), resolve(here, "..", ".."), resolve(here, "..", "..", "..")];
+    for (const c of candidates) {
+        if (existsSync(join(c, "package.json")))
+            return c;
+    }
+    return undefined;
+}
 /** 默认执行器：execFile 直跑 git（不经 shell），15s 超时。 */
 export const execGit = (cmd, args) => new Promise((resolve) => {
     execFile(cmd, args, { timeout: 15_000, encoding: "utf8" }, (err, stdout, stderr) => {
@@ -151,25 +167,98 @@ export async function resolveRemoteSha(spec, exec = execGit) {
     const sha = res.stdout.match(/^([0-9a-f]{40,64})\s+HEAD/m)?.[1] ?? null;
     return sha ? sha.slice(0, 12) : null;
 }
-/** 简易数字 semver 比较：>0 代表 a 比 b 新。 */
+/**
+ * 语义化版本（SemVer）比较器：
+ * - 剥离前缀 `v` / `V` 及首尾空白；
+ * - 剥离 `+` 后的构建元数据（build metadata 在优先级比较中被忽略）；
+ * - 分离主要数字版本与预发布标识（prerelease，如 -beta.1）；
+ * - 支持任意段数的数字比对；
+ * - 符合 SemVer 规范：正式版 > 预发布版（例如 1.0.0 > 1.0.0-beta.1）；
+ * - 返回值：>0 代表 a 比 b 新；<0 代表 a 比 b 旧；0 代表版本一致。
+ */
 export function compareVersions(a, b) {
-    const pa = a.split(".").map((n) => parseInt(n, 10) || 0);
-    const pb = b.split(".").map((n) => parseInt(n, 10) || 0);
-    for (let i = 0; i < 3; i++) {
-        const x = pa[i] ?? 0;
-        const y = pb[i] ?? 0;
+    const clean = (s) => String(s ?? "")
+        .trim()
+        .replace(/^[vV]/, "")
+        .split("+")[0]
+        .trim();
+    const cleanA = clean(a);
+    const cleanB = clean(b);
+    if (cleanA === cleanB)
+        return 0;
+    if (!cleanA && !cleanB)
+        return 0;
+    if (!cleanA)
+        return -1;
+    if (!cleanB)
+        return 1;
+    // 拆分主版本段与 prerelease 段
+    const dashA = cleanA.indexOf("-");
+    const mainAStr = dashA >= 0 ? cleanA.slice(0, dashA) : cleanA;
+    const preA = dashA >= 0 ? cleanA.slice(dashA + 1) : null;
+    const dashB = cleanB.indexOf("-");
+    const mainBStr = dashB >= 0 ? cleanB.slice(0, dashB) : cleanB;
+    const preB = dashB >= 0 ? cleanB.slice(dashB + 1) : null;
+    // 比较主版本数字段
+    const segsA = mainAStr.split(".").map((n) => parseInt(n, 10) || 0);
+    const segsB = mainBStr.split(".").map((n) => parseInt(n, 10) || 0);
+    const maxLen = Math.max(segsA.length, segsB.length);
+    for (let i = 0; i < maxLen; i++) {
+        const x = segsA[i] ?? 0;
+        const y = segsB[i] ?? 0;
         if (x !== y)
             return x - y;
     }
+    // 主版本数字段全相同时，比较 prerelease（正式版高于任何 prerelease 版）
+    if (preA === null && preB !== null)
+        return 1;
+    if (preA !== null && preB === null)
+        return -1;
+    if (preA !== null && preB !== null) {
+        const partsA = preA.split(".");
+        const partsB = preB.split(".");
+        const maxPreLen = Math.max(partsA.length, partsB.length);
+        for (let i = 0; i < maxPreLen; i++) {
+            const pa = partsA[i];
+            const pb = partsB[i];
+            if (pa === undefined)
+                return -1;
+            if (pb === undefined)
+                return 1;
+            if (pa === pb)
+                continue;
+            const isNumA = /^\d+$/.test(pa);
+            const isNumB = /^\d+$/.test(pb);
+            if (isNumA && isNumB) {
+                const diff = parseInt(pa, 10) - parseInt(pb, 10);
+                if (diff !== 0)
+                    return diff;
+            }
+            else if (isNumA && !isNumB) {
+                return -1; // 数字标识优先级低于非数字标识
+            }
+            else if (!isNumA && isNumB) {
+                return 1;
+            }
+            else {
+                return pa.localeCompare(pb);
+            }
+        }
+    }
     return 0;
 }
 /** 判断某个插件是否属于随包维护的内置插件（官方插件）。 */
 export function isBuiltinPlugin(id, source, builtinCatalogPath) {
     if (source && /xing-shuyin\/pi-web-ui\/plugins\//i.test(source))
         return true;
-    if (builtinCatalogPath && existsSync(builtinCatalogPath)) {
+    const catPath = builtinCatalogPath ??
+        (() => {
+            const pkgRoot = resolveDefaultPkgRoot();
+            return pkgRoot ? join(pkgRoot, "plugins", "catalog.json") : undefined;
+        })();
+    if (catPath && existsSync(catPath)) {
         try {
-            const raw = JSON.parse(readFileSync(builtinCatalogPath, "utf8"));
+            const raw = JSON.parse(readFileSync(catPath, "utf8"));
             if (Array.isArray(raw)) {
                 return raw.some((e) => e?.id === id);
             }
@@ -180,9 +269,23 @@ export function isBuiltinPlugin(id, source, builtinCatalogPath) {
     }
     return false;
 }
-/** 探测远端 manifest 中的版本号（通过 raw.githubusercontent.com 或注入的 fetcher）。 */
+/** 探测远端或本地源 manifest 中的版本号（本地路径 / raw.githubusercontent.com / 注入的 fetcher）。 */
 async function fetchRemoteVersion(source, fetcher) {
     const spec = parseInstallSpec(source);
+    if (spec.kind === "path" && spec.normalized) {
+        const manifestFile = join(spec.normalized, "manifest.json");
+        if (existsSync(manifestFile)) {
+            try {
+                const data = JSON.parse(readFileSync(manifestFile, "utf8"));
+                if (typeof data?.version === "string" && data.version.trim()) {
+                    return data.version.trim();
+                }
+            }
+            catch {
+                /* ignore */
+            }
+        }
+    }
     const urls = manifestCandidateUrls(spec);
     if (urls.length === 0)
         return null;
@@ -212,6 +315,8 @@ export async function checkPluginUpdates(dataDir, exec = execGit,
 /** error 字段文案语言（默认英文）；调用方可传 () => getLang() 实现跟随。 */
 lang, opts) {
     const l = lang?.() ?? "en";
+    const effectivePkgRoot = opts?.pkgRoot ?? resolveDefaultPkgRoot();
+    const effectiveCatalogPath = opts?.builtinCatalogPath ?? (effectivePkgRoot ? join(effectivePkgRoot, "plugins", "catalog.json") : undefined);
     const pluginsDir = join(dataDir, "plugins");
     let names = [];
     try {
@@ -235,23 +340,27 @@ lang, opts) {
                 localSha = readFileSync(join(dir, ".pi-git-sha"), "utf8").trim() || null;
             }
             catch {
-                localSha = null; // 无 sha 记录 → 保守认为可更新（不知道装了哪个版本）
+                localSha = null; // 无 sha 记录
             }
             let name;
             let version;
             try {
                 const m = JSON.parse(readFileSync(join(dir, "manifest.json"), "utf8"));
                 name = m.name;
-                version = m.version;
+                if (typeof m.version === "string" && m.version.trim()) {
+                    version = m.version.trim();
+                }
             }
             catch {
                 /* 坏 manifest：仍报告 */
             }
-            const builtin = isBuiltinPlugin(n, source, opts?.builtinCatalogPath);
+            const parsedSpec = parseInstallSpec(source);
+            const isSubpath = Boolean(parsedSpec.subpath);
+            const builtin = isBuiltinPlugin(n, source, effectiveCatalogPath);
             let latestVersion = null;
-            // 本地开发模式下，如果宿主包自带 plugins/<id>/manifest.json，可直接读本地最新版本号
-            if (opts?.pkgRoot) {
-                const localPkgManifest = join(opts.pkgRoot, "plugins", n, "manifest.json");
+            // 随包或本地开发模式：若宿主包自带 plugins/<id>/manifest.json，可直接读随包最新版本号
+            if (effectivePkgRoot) {
+                const localPkgManifest = join(effectivePkgRoot, "plugins", n, "manifest.json");
                 if (existsSync(localPkgManifest)) {
                     try {
                         const rawPkg = JSON.parse(readFileSync(localPkgManifest, "utf8"));
@@ -264,15 +373,18 @@ lang, opts) {
                     }
                 }
             }
-            // 若本地未取到最新版本号，则尝试通过 fetcher 探测远端 manifest.json
-            if (!latestVersion) {
-                try {
-                    latestVersion = await fetchRemoteVersion(source, opts?.fetcher);
-                }
-                catch {
-                    latestVersion = null;
+            // 尝试通过 fetcher 探测远端 manifest.json，若拿到了更高版本则采用更高者
+            try {
+                const remoteVer = await fetchRemoteVersion(source, opts?.fetcher);
+                if (remoteVer) {
+                    if (!latestVersion || compareVersions(remoteVer, latestVersion) > 0) {
+                        latestVersion = remoteVer;
+                    }
                 }
             }
+            catch {
+                /* ignore */
+            }
             let remoteSha = null;
             let error;
             try {
@@ -282,27 +394,28 @@ lang, opts) {
                 error = err instanceof Error ? err.message : String(err);
                 remoteSha = null;
             }
-            if (!remoteSha && !latestVersion && !error)
-                error = pick(l, "无法检查（非 git 源或 git 不可用）", "Cannot check (non-git source or git unavailable)", "pluginupdate.cannot.check");
             let updatable = false;
             if (latestVersion && version) {
-                const cmp = compareVersions(latestVersion, version);
-                if (cmp > 0) {
-                    updatable = true;
-                }
-                else if (cmp === 0 && remoteSha && localSha) {
-                    updatable = localSha !== remoteSha;
-                }
-                else if (cmp === 0 && remoteSha && !localSha) {
-                    updatable = true;
-                }
-            }
-            else if (remoteSha) {
-                updatable = !localSha || localSha !== remoteSha;
+                // 两端都有版本号：版本号是唯一权威事实源。
+                // 严格大于才判定为有更新（cmp > 0）。
+                // 相同或更低（cmp <= 0）坚决判定为无更新，彻底避免主仓库无关 commit 触发的假阳性误报。
+                updatable = compareVersions(latestVersion, version) > 0;
             }
             else if (latestVersion && !version) {
+                // 远端有版本号但本地无版本号：视为可更新
                 updatable = true;
             }
+            else if (!isSubpath && remoteSha) {
+                // 仅在未能获取最新版本号且为独立仓库源（非子目录）时，才回退到基于 git commit SHA 比对
+                updatable = !localSha || localSha !== remoteSha;
+            }
+            if (!updatable && !latestVersion && !remoteSha && !error) {
+                error = pick(l, "无法检查（非 git 源或 git 不可用）", "Cannot check (non-git source or git unavailable)", "pluginupdate.cannot.check");
+            }
+            else if (!updatable && isSubpath && !latestVersion && !error) {
+                // 子目录源插件未能获取远端清单时，不凭仓库根 SHA 误报，而是提示未能获取清单
+                error = pick(l, "无法检查（未能获取远端插件清单）", "Cannot check (failed to fetch remote plugin manifest)", "pluginupdate.subpath.manifest.failed");
+            }
             out.push({
                 id: n,
                 name,

package/dist/server/plugins.js

@@ -275,6 +275,8 @@ export const UI_SLOTS = new Set([
     "goalbar.actions",
     "notice.actions",
     "modal.dialog",
+    "sidebar.left",
+    "sidebar.right",
 ]);
 /** manifest 里可以写更自然的简写（作者少踩坑）：解析时映射到完整 slot 名。 */
 export const UI_SLOT_ALIASES = {
@@ -285,6 +287,11 @@ export const UI_SLOT_ALIASES = {
     rightpanel: "rightpanel.tabs",
     settings: "settings.pages",
     modal: "modal.dialog",
+    sidebar: "sidebar.left",
+    "sidebar.left": "sidebar.left",
+    "sidebar.right": "sidebar.right",
+    leftbar: "sidebar.left",
+    rightbar: "sidebar.right",
 };
 /** 合法的条目种类（缺省 action；settings.pages 缺省 page）。 */
 export const UI_KINDS = new Set([
@@ -1473,7 +1480,11 @@ export class PluginManager {
             params: freezeParams(req.params),
             conversationId: req.conversationId,
         };
-        for (const p of this.loaded.values()) {
+        // #489：对 this.loaded 取快照再迭代——下面的 withGuardTimeout 是 await 点，
+        // 期间插件 reload/uninstall 会原地 clear 同一个 Map（实例不变），Map 迭代器
+        // 立即 done → 剩余插件的 pre 守卫一次都不被求值 → fail-open 直接放行。
+        const loadedSnapshot = [...this.loaded.values()];
+        for (const p of loadedSnapshot) {
             for (const h of p.preGuards ?? []) {
                 let raw;
                 try {
@@ -1510,7 +1521,10 @@ export class PluginManager {
             result: req.result,
             conversationId: req.conversationId,
         };
-        for (const p of this.loaded.values()) {
+        // #489：同 evaluateToolPre——await 点期间 reload 原地 clear Map 会让迭代器
+        // 提前终止，取快照迭代保证本轮请求遍历的是发起时的插件集合。
+        const postLoadedSnapshot = [...this.loaded.values()];
+        for (const p of postLoadedSnapshot) {
             for (const h of p.postGuards ?? []) {
                 let raw;
                 try {

package/dist/server/prompt-composer.js

@@ -55,9 +55,6 @@ export function isReadonlyPromptSource(token) {
  *  SDK 默认拼装的完整提示词。 */
 export const DEFAULT_PROMPT_TEMPLATE = PROMPT_TOKENS.map((t) => `{{${t}}}`).join("\n\n");
 const TOKEN_RE = /\{\{\s*([A-Za-z_][A-Za-z0-9_]*)\s*\}\}/g;
-export function isKnownToken(name) {
-    return PROMPT_TOKENS.includes(name);
-}
 /** 模板里出现的全部 token（含未知名，供 UI 提示）。 */
 export function collectTemplateTokens(template) {
     const out = [];
@@ -258,3 +255,15 @@ export function estimatePromptTokens(text) {
     const cjk = text.match(CJK_RE)?.length ?? 0;
     return Math.ceil(cjk + (text.length - cjk) / 4);
 }
+/** 把「早前扩展改过的提示词」拆成 SDK 原始提示词 + 扩展的首尾增补。
+ *  before_agent_start 是链式的：我们是最后一个 handler，返回 systemPrompt 等于
+ *  forceSystemPrompt 整体替换，会把别的扩展（如注入 <invoked_skill> 的）写进去的
+ *  内容一起丢掉。只要原始提示词还原样嵌在里面（纯前置/后置增补），就能把增补摘出来
+ *  重新套回我们的渲染结果上。摘不出来（中间插入 / 被整体替换）时返回 pre/post 为空、
+ *  core 为当前文本 —— 调用方退回今天的行为，绝不把整段提示词翻倍。 */
+export function splitExtensionWrap(baseline, current) {
+    const at = baseline ? current.indexOf(baseline) : -1;
+    if (at === -1)
+        return { pre: "", core: current, post: "" };
+    return { pre: current.slice(0, at), core: baseline, post: current.slice(at + baseline.length) };
+}

package/dist/server/protocol-version.js

@@ -8,4 +8,4 @@
  * its own copy in web/src/protocol-version.ts; scripts/check-protocol-sync.mjs
  * verifies the two never drift.
  */
-export const PROTOCOL_VERSION = 21;
+export const PROTOCOL_VERSION = 22;

package/dist/server/resolve-global-sdk.js

@@ -26,6 +26,7 @@
  * 或前台启动时在 import 服务入口之前先 import 它）。
  */
 import { registerHooks } from "node:module";
+import { dirname } from "node:path";
 import { pathToFileURL } from "node:url";
 import { compareVersions, sdkCopies } from "./sdk-origin.js";
 const PKG = "@earendil-works/pi-coding-agent";
@@ -40,6 +41,13 @@ export function pickGlobalSdk(copies, mode) {
     if (BUNDLED_MODES.has((mode ?? "global").trim().toLowerCase()))
         return null;
     const bundled = copies[0];
+    // 显式透传的宿主 SDK 路径（如 extensions/webui.ts 宿主传递，issue #482）：若不降级优先选用
+    if (process.env.PI_WEB_SDK_DIR) {
+        const hostCopy = copies.find((c) => dirname(c.path) === process.env.PI_WEB_SDK_DIR);
+        if (hostCopy && (!bundled || compareVersions(hostCopy.version, bundled.version) >= 0)) {
+            return hostCopy;
+        }
+    }
     // 只考虑祖先链上**严格更新**的副本，多份取版本最高的（旧的/同版本的都不折腾）。
     let best = null;
     for (const copy of copies.slice(1)) {

package/dist/server/schedule-agent-tool.js

@@ -20,7 +20,7 @@ import { defineTool } from "@earendil-works/pi-coding-agent";
 import { Type } from "typebox";
 import { pick } from "./i18n.js";
 import { SCHEDULE_CANCEL_TOOL_NAME, SCHEDULE_LIST_TOOL_NAME, SCHEDULE_TASK_TOOL_NAME } from "./tool-manager.js";
-import { computeNextFire, describeIntervalMs, SCHEDULER_MIN_INTERVAL_MS, } from "./scheduler-tasks.js";
+import { computeNextFire, describeIntervalMs, SCHEDULER_MIN_INTERVAL_MS, SchedulerValidationError, } from "./scheduler-tasks.js";
 import { parseCronSpec } from "./plugin-schedule.js";
 /** 用户写法 → 调度规格。纯函数，可单测。
  *  收：5 字段 cron（"0 * * * *"）、相对时间（"in 30m" / "in 1h" / "in 2d"）、
@@ -180,6 +180,10 @@ export function makeScheduleTools(host, ownerConversationId, lang) {
                 });
             }
             catch (err) {
+                const L = getLang();
+                if (err instanceof SchedulerValidationError) {
+                    return text(L === "zh" ? err.messageZh : err.messageEn);
+                }
                 return text(String(err?.message ?? err));
             }
             const L = getLang();

package/dist/server/scheduler-tasks.js

@@ -10,9 +10,10 @@
  * 定时策略：单个 10s ticker 检查到期任务（cron 下次触发 / 间隔毫秒），
  * running 集合防重叠；catchUp "once" 在启动时补跑一次漏掉的触发。
  */
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { nextCronFire, parseCronSpec } from "./plugin-schedule.js";
+import { writeJsonAtomicSync } from "./atomic-file.js";
 export const SCHEDULER_FILE = "scheduler-tasks.json";
 /** 持久间隔底线 60s（与 host.schedule 持久任务同口径，防 token 烧穿）。 */
 export const SCHEDULER_MIN_INTERVAL_MS = 60_000;
@@ -30,50 +31,72 @@ function randomTaskId() {
         s += abc[Math.floor(Math.random() * abc.length)];
     return `task-${s}`;
 }
-/** 归一化 + 校验用户输入；非法抛 Error（中文信息，直接面向 UI）。纯函数，可单测。 */
+export class SchedulerValidationError extends Error {
+    code;
+    messageZh;
+    messageEn;
+    constructor(code, messageZh, messageEn) {
+        super(messageZh);
+        this.code = code;
+        this.messageZh = messageZh;
+        this.messageEn = messageEn;
+        this.name = "SchedulerValidationError";
+    }
+}
+/** 归一化 + 校验用户输入；非法抛 SchedulerValidationError。纯函数，可单测。 */
 export function normalizeSchedulerInput(input, now = Date.now()) {
     const idRaw = String(input.id ?? "").trim();
     const id = idRaw || randomTaskId();
-    if (!SCHEDULER_ID_RE.test(id))
-        throw new Error("任务 id 非法（只收字母/数字/下划线/连字符，≤64 字）");
+    if (!SCHEDULER_ID_RE.test(id)) {
+        throw new SchedulerValidationError("invalid_id", "任务 id 非法（只收字母/数字/下划线/连字符，≤64 字）", "Invalid task id (letters/numbers/underscores/hyphens only, <= 64 chars)");
+    }
     const name = String(input.name ?? "")
         .trim()
         .slice(0, 80);
-    if (!name)
-        throw new Error("任务名称不能为空");
+    if (!name) {
+        throw new SchedulerValidationError("empty_name", "任务名称不能为空", "Task name cannot be empty");
+    }
     const description = String(input.description ?? "")
         .trim()
         .slice(0, 500);
     const cwd = String(input.cwd ?? "").trim();
-    if (!cwd)
-        throw new Error("执行目标项目（cwd）不能为空");
+    if (!cwd) {
+        throw new SchedulerValidationError("empty_cwd", "执行目标项目（cwd）不能为空", "Target project directory (cwd) cannot be empty");
+    }
     const kind = input.kind === "interval" ? "interval" : "cron";
     let spec;
     if (kind === "cron") {
         spec = String(input.spec ?? "")
             .trim()
             .replace(/\s+/g, " ");
-        if (!parseCronSpec(spec))
-            throw new Error("cron 表达式非法（要 5 字段：分 时 日 月 周，如 0 9 * * *）");
+        if (!parseCronSpec(spec)) {
+            throw new SchedulerValidationError("invalid_cron", "cron 表达式非法（要 5 字段：分 时 日 月 周，如 0 9 * * *）", "Invalid cron expression (requires 5 fields: min hour day month weekday, e.g. 0 9 * * *)");
+        }
     }
     else {
         const ms = Math.floor(Number(input.spec));
-        if (!Number.isFinite(ms) || ms <= 0)
-            throw new Error("间隔毫秒数非法");
-        if (ms < SCHEDULER_MIN_INTERVAL_MS)
-            throw new Error(`间隔太短（最短 ${SCHEDULER_MIN_INTERVAL_MS / 1000}s，防 token 烧穿）`);
-        if (ms > SCHEDULER_MAX_INTERVAL_MS)
-            throw new Error("间隔太长（最长 30 天）");
+        if (!Number.isFinite(ms) || ms <= 0) {
+            throw new SchedulerValidationError("invalid_interval", "间隔毫秒数非法", "Invalid interval milliseconds");
+        }
+        if (ms < SCHEDULER_MIN_INTERVAL_MS) {
+            throw new SchedulerValidationError("interval_too_short", `间隔太短（最短 ${SCHEDULER_MIN_INTERVAL_MS / 1000}s，防 token 烧穿）`, `Interval too short (minimum ${SCHEDULER_MIN_INTERVAL_MS / 1000}s)`);
+        }
+        if (ms > SCHEDULER_MAX_INTERVAL_MS) {
+            throw new SchedulerValidationError("interval_too_long", "间隔太长（最长 30 天）", "Interval too long (maximum 30 days)");
+        }
         spec = String(ms);
     }
     const prompt = String(input.prompt ?? "").trim();
-    if (!prompt)
-        throw new Error("触发指令（prompt）不能为空");
-    if (prompt.length > 8000)
-        throw new Error("触发指令超长（>8000 字），请裁剪后重试");
+    if (!prompt) {
+        throw new SchedulerValidationError("empty_prompt", "触发指令（prompt）不能为空", "Trigger instruction (prompt) cannot be empty");
+    }
+    if (prompt.length > 8000) {
+        throw new SchedulerValidationError("prompt_too_long", "触发指令超长（>8000 字），请裁剪后重试", "Trigger instruction too long (>8000 characters), please shorten and retry");
+    }
     const model = String(input.model ?? "").trim();
-    if (model && !model.includes("/"))
-        throw new Error("模型格式非法（应为 provider/id）");
+    if (model && !model.includes("/")) {
+        throw new SchedulerValidationError("invalid_model", "模型格式非法（应为 provider/id）", "Invalid model format (expected provider/id)");
+    }
     const thinkingLevel = String(input.thinkingLevel ?? "").trim();
     const catchUp = input.catchUp === "once" ? "once" : "skip";
     const conversationId = String(input.conversationId ?? "")
@@ -267,14 +290,10 @@ export class SchedulerStore {
     }
     save() {
         try {
-            mkdirSync(this.dataDir, { recursive: true });
-            const file = schedulerFile(this.dataDir);
-            const tmp = `${file}.tmp-${process.pid}`;
             const tasks = {};
             for (const [id, t] of this.tasks)
                 tasks[id] = t;
-            writeFileSync(tmp, JSON.stringify({ v: 1, tasks }));
-            renameSync(tmp, file);
+            writeJsonAtomicSync(schedulerFile(this.dataDir), { v: 1, tasks });
         }
         catch (err) {
             console.error("[scheduler] persist failed:", err);

package/dist/server/sdk-origin.js

@@ -37,6 +37,33 @@ export function sdkCopies(fromFile = import.meta.url) {
             break;
         dir = parent;
     }
+    // 显式透传的宿主 SDK 路径（如 extensions/webui.ts 宿主传递，issue #482）
+    if (process.env.PI_WEB_SDK_DIR) {
+        const pj = join(process.env.PI_WEB_SDK_DIR, "package.json");
+        if (existsSync(pj) && !out.some((c) => c.path === pj)) {
+            try {
+                const version = JSON.parse(readFileSync(pj, "utf8")).version;
+                if (typeof version === "string" && version) {
+                    out.push({ path: pj, version });
+                }
+            }
+            catch { }
+        }
+    }
+    // 宿主 Pi Node 路径探测（~/.local/share/pi-node/current/...，issue #482）
+    const home = process.env.HOME || process.env.USERPROFILE;
+    if (home) {
+        const hostPj = join(home, ".local", "share", "pi-node", "current", "lib", "node_modules", PKG, "package.json");
+        if (existsSync(hostPj) && !out.some((c) => c.path === hostPj)) {
+            try {
+                const version = JSON.parse(readFileSync(hostPj, "utf8")).version;
+                if (typeof version === "string" && version) {
+                    out.push({ path: hostPj, version });
+                }
+            }
+            catch { }
+        }
+    }
     return out;
 }
 /** 点分版本号比较（够用即可：只比数字段，缺位当 0）。 */