pi-web-ui 0.97.0 → 0.98.0

package/dist/server/serialize.js

@@ -1,6 +1,7 @@
-const TEXT_CAP = 200_000;
-const TOOL_OUTPUT_CAP = 100_000;
-const ARGS_CAP = 20_000;
+import { splitQuotedPrompt } from "./text-quote.js";
+export const TEXT_CAP = 200_000;
+export const TOOL_OUTPUT_CAP = 100_000;
+export const ARGS_CAP = 20_000;
 /**
  * toolResult 里单张图片进快照的上限（dataUrl 字符数 ≈ 1.5MB 二进制）。
  * 视口/元素截图随便过；超大整页截图回落成占位文本（模型侧不受影响 —— 图它
@@ -17,10 +18,11 @@ const TOOL_RESULT_IMAGE_MAX = 8;
  * 前端还得写容错）；工具作者应自己封顶（见 present-files-tool.ts 的摘录预算）。
  */
 const TOOL_DETAILS_CAP = 64_000;
-function truncate(s, cap) {
-    if (s.length <= cap)
-        return { text: s, truncated: false };
-    return { text: `${s.slice(0, cap)}\n\n… [truncated]`, truncated: true };
+export function truncate(s, cap) {
+    const str = typeof s === "string" ? s : String(s ?? "");
+    if (str.length <= cap)
+        return { text: str, truncated: false };
+    return { text: `${str.slice(0, cap)}\n\n… [truncated]`, truncated: true };
 }
 /**
  * SDK/工具的图片块 → 前端可直接 <img> 的 UiImageBlock。
@@ -204,13 +206,24 @@ export function serializeMessage(m, seq) {
     }
     const id = uiMessageId(m, seq);
     switch (m.role) {
-        case "user":
+        case "user": {
+            const quotes = [];
+            const raw = typeof m.content === "string" ? [{ type: "text", text: m.content }] : m.content;
+            const content = raw.map((block) => {
+                if (block.type !== "text")
+                    return block;
+                const parsed = splitQuotedPrompt(block.text);
+                quotes.push(...parsed.quotes);
+                return { ...block, text: parsed.text };
+            });
             return {
                 id,
                 role: "user",
-                content: serializeUserContent(m.content),
+                content: serializeUserContent(content),
+                ...(quotes.length ? { details: { quotes } } : {}),
                 timestamp: m.timestamp,
             };
+        }
         case "assistant":
             return {
                 id,

package/dist/server/slash-commands.js

@@ -38,6 +38,13 @@ export const NATIVE_COMMANDS = [
         argumentHint: "<路径>",
         argumentHintEn: "<path>",
     },
+    {
+        name: "plan",
+        description: "开启或关闭计划模式（/plan [on|off]）",
+        descriptionEn: "Toggle plan mode (/plan [on|off])",
+        argumentHint: "[on|off]",
+        argumentHintEn: "[on|off]",
+    },
     {
         name: "thinking",
         description: "设置思考强度",
@@ -249,6 +256,15 @@ export class SlashCommandsService {
                     await this.host.setCwd(args);
                 }
                 return true;
+            case "plan": {
+                const trimmed = args.trim().toLowerCase();
+                const current = this.host.getPlanMode ? this.host.getPlanMode() : false;
+                const next = trimmed === "on" ? true : trimmed === "off" ? false : !current;
+                if (this.host.setPlanMode) {
+                    await this.host.setPlanMode(next);
+                }
+                return true;
+            }
             case "thinking": {
                 const ALIAS = {
                     off: "off",

package/dist/server/subagent-templates.js

@@ -19,8 +19,8 @@
  * systemPromptEn 为英文（en 用，缺失回落中文）；调用方用 pickTemplateDescription/
  * pickTemplatePrompt 按语言选用。
  */
-import { mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
+import { readFileSync } from "node:fs";
+import { writeJsonAtomicSync } from "./atomic-file.js";
 /**
  * 思考强度取值：与 SDK 的 THINKING_LEVEL_OPTIONS（前端 ModelThinking 的 THINKING_VALUES）
  * 一致。SDK 未从包根导出该常量，这里照抄一份作输入校验（写错的值一律当未配置）。
@@ -608,10 +608,7 @@ export class SubagentTemplatesStore {
     }
     persist() {
         try {
-            mkdirSync(dirname(this.filePath), { recursive: true });
-            const tmp = `${this.filePath}.${process.pid}.tmp`;
-            writeFileSync(tmp, JSON.stringify(this.templates, null, 2) + "\n");
-            renameSync(tmp, this.filePath);
+            writeJsonAtomicSync(this.filePath, this.templates);
         }
         catch {
             // best effort
@@ -644,10 +641,7 @@ export class SubagentTemplatesStore {
     saveSeeded(names) {
         this.seededNames = names;
         try {
-            mkdirSync(dirname(this.seededPath()), { recursive: true });
-            const tmp = `${this.seededPath()}.tmp`;
-            writeFileSync(tmp, JSON.stringify([...names].sort(), null, 2));
-            renameSync(tmp, this.seededPath());
+            writeJsonAtomicSync(this.seededPath(), [...names].sort());
         }
         catch {
             // best effort

package/dist/server/subagents.js

@@ -31,14 +31,22 @@ import { pick } from "./i18n.js";
 /**
  * subagent_wait_all 的最长阻塞时间：必须短暂低于工具看门狗（默认 20 分钟，
  * PI_WEB_TOOL_TIMEOUT_MS 可调），否则看门狗会先中止整个会话而不是让 wait
- * 干净地超时返回。取 0.8×看门狗并以 60s 封顶、5s 兜底：看门狗调小（如 <75s）
- * 时 60s 下限会反超看门狗造成本末倒置，此时随看门狗缩短，但不低于 5s。
+ * 干净地超时返回。取 0.8×看门狗（默认 ~16min，支持 PI_WEB_SUBAGENT_WAIT_CAP_SECONDS 覆盖），
+ * 兜底不低于 5s。
  */
-const WAIT_CAP_MS = (() => {
-    const v = Number(process.env.PI_WEB_TOOL_TIMEOUT_MS);
-    const watchdog = Number.isFinite(v) && v > 0 ? v : 20 * 60_000;
-    return Math.max(Math.min(60_000, Math.floor(watchdog * 0.8)), 5_000);
-})();
+export function computeWaitCapMs(watchdogMs) {
+    const customSecs = Number(process.env.PI_WEB_SUBAGENT_WAIT_CAP_SECONDS);
+    if (Number.isFinite(customSecs) && customSecs > 0) {
+        return Math.max(Math.floor(customSecs * 1000), 5_000);
+    }
+    const envWatchdog = Number(process.env.PI_WEB_TOOL_TIMEOUT_MS);
+    const watchdog = typeof watchdogMs === "number" && Number.isFinite(watchdogMs) && watchdogMs > 0
+        ? watchdogMs
+        : Number.isFinite(envWatchdog) && envWatchdog > 0
+            ? envWatchdog
+            : 20 * 60_000;
+    return Math.max(Math.floor(watchdog * 0.8), 5_000);
+}
 /** 子代理是否已到终态（运行结束、被中止或出错）。wait 工具据此判断
  * 是否可以取结果；streaming=false 即可（error/canceled 都在快照里带标记）。 */
 export function isSubagentTerminal(r) {
@@ -93,8 +101,8 @@ export function makeSubagentTool(host, lang, selfConvId) {
         details,
     });
     const currentWaitCapMs = typeof host.getWatchdogTimeoutMs === "function"
-        ? Math.max(Math.min(60_000, Math.floor(host.getWatchdogTimeoutMs() * 0.8)), 5_000)
-        : WAIT_CAP_MS;
+        ? computeWaitCapMs(host.getWatchdogTimeoutMs())
+        : computeWaitCapMs();
     const capSeconds = Math.floor(currentWaitCapMs / 1000);
     return defineTool({
         name: SUBAGENT_TOOL_NAME,
@@ -361,7 +369,10 @@ export function makeSubagentTool(host, lang, selfConvId) {
                         }
                         const allDone = Array.from(wanted).every((id) => {
                             const r = host.getSubagent(id);
-                            return isSubagentTerminal(r);
+                            // #488：getSubagent 返回 undefined = 已被移出（强行关闭/收尾清理）
+                            // ——视为终态，与下方报告段「已移出或不存在」口径一致；否则等待
+                            // 集合含被移出子代理时 allDone 恒 false，必然白等满 timeoutMs。
+                            return r === undefined || isSubagentTerminal(r);
                         });
                         if (allDone)
                             break;
@@ -534,5 +545,5 @@ function promptRemaining(remaining, lang = "en") {
     if (remaining.length === 0)
         return "";
     const pendingIds = remaining.map(shortId).join(", ");
-    return pick(lang, `\n未完成：${pendingIds}。可再次调用 subagent_wait_all（或 subagent_steer 补充指令 / subagent_stop 中止）。`, `\nPending: ${pendingIds}. You may call subagent_wait_all again (or subagent_steer to add instructions / subagent_stop to abort).`, "subagents.wait.pending", { pendingIds: pendingIds });
+    return pick(lang, `\n未完成：${pendingIds}。可再次调用 subagent（action="wait_all"）继续等待耗时任务，或使用 steer 补充指令 / stop 中止。`, `\nPending: ${pendingIds}. You may call subagent (action="wait_all") again to continue waiting for long tasks, or use steer to add instructions / stop to abort.`, "subagents.wait.pending", { pendingIds: pendingIds });
 }

package/dist/server/terminals.js

@@ -1889,7 +1889,9 @@ lang, options) {
             }),
             execute: async (_id, p) => {
                 const lang = getLang();
-                const info = terminals.create(p.terminalId, p.cwd ?? cwd, p.cols ?? 120, p.rows ?? 40, cwd, p.terminalId);
+                const safeCols = Math.max(2, Math.min(500, Math.floor(p.cols ?? 120)));
+                const safeRows = Math.max(2, Math.min(200, Math.floor(p.rows ?? 40)));
+                const info = terminals.create(p.terminalId, p.cwd ?? cwd, safeCols, safeRows, cwd, p.terminalId);
                 const infoJson = JSON.stringify(info);
                 if (!info)
                     throw new Error(pick(lang, `创建终端失败：${p.terminalId}`, `Failed to create terminal: ${p.terminalId}`, "terminals.create.failed", { "p.terminalId": p.terminalId }));
@@ -1977,10 +1979,12 @@ lang, options) {
             }),
             execute: async (_id, p, signal) => {
                 const lang = getLang();
-                const cursor = p.cursor ?? 0;
-                if (p.waitMs)
-                    await terminals.waitForOutput(p.terminalId, cursor, p.waitMs, signal);
-                const read = terminals.read(p.terminalId, cursor, p.maxBytes ?? 20000);
+                const cursor = Math.max(0, Math.floor(p.cursor ?? 0));
+                const waitMs = p.waitMs !== undefined ? Math.max(0, Math.min(120_000, Math.floor(p.waitMs))) : undefined;
+                const maxBytes = Math.max(1, Math.min(100_000, Math.floor(p.maxBytes ?? 20000)));
+                if (waitMs)
+                    await terminals.waitForOutput(p.terminalId, cursor, waitMs, signal);
+                const read = terminals.read(p.terminalId, cursor, maxBytes);
                 if (!read)
                     throw new Error(pick(lang, `终端不存在：${p.terminalId}`, `Terminal not found: ${p.terminalId}`, "terminals.read.not.found", { "p.terminalId": p.terminalId }));
                 return result(JSON.stringify(read), read);
@@ -2019,7 +2023,8 @@ lang, options) {
                     return result(JSON.stringify({ applicable: false, reason: why }), { applicable: false });
                 }
                 const cursor = p.cursor ?? terminals.endCursor(p.terminalId) ?? 0;
-                const wait = await terminals.waitForCompletion(p.terminalId, p.maxWaitMs ?? 300_000, signal, cursor);
+                const maxWait = Math.max(100, Math.min(600_000, Math.floor(p.maxWaitMs ?? 300_000)));
+                const wait = await terminals.waitForCompletion(p.terminalId, maxWait, signal, cursor);
                 const read = terminals.read(p.terminalId, cursor, 20_000);
                 const outputTail = read?.data ? stripAnsi(read.data).slice(-4000) : "";
                 return result(JSON.stringify({ ...wait, outputTail }), {

package/dist/server/text-quote.js

@@ -0,0 +1,59 @@
+/** 校验引用元数据，保留原文的换行和缩进。 */
+export function readTextQuote(value) {
+    if (!value || typeof value !== "object")
+        return null;
+    const q = value;
+    if (typeof q.text !== "string" ||
+        !q.text.trim() ||
+        typeof q.messageId !== "string" ||
+        !q.messageId ||
+        typeof q.role !== "string" ||
+        !q.role)
+        return null;
+    return {
+        text: q.text,
+        messageId: q.messageId,
+        role: q.role,
+        ...(typeof q.sessionId === "string" && q.sessionId ? { sessionId: q.sessionId } : {}),
+    };
+}
+/** JSON 字符串保留原文边界，引用中的换行不参与外层标记解析。 */
+export function formatTextQuote(quote) {
+    return `<quoted-text>\n${JSON.stringify(quote)}\n</quoted-text>`;
+}
+export function parseTextQuote(text) {
+    const match = /^<quoted-text>\n([^\n]*)\n<\/quoted-text>$/.exec(text);
+    if (!match)
+        return null;
+    try {
+        return readTextQuote(JSON.parse(match[1]));
+    }
+    catch {
+        return null;
+    }
+}
+export function formatQuotedPrompt(text, quotes) {
+    return [text, ...quotes.map(formatTextQuote)].join("\n\n");
+}
+/** 排队项把引用与提问一起保存；展示时只拆分末尾的完整引用块。 */
+export function splitQuotedPrompt(value) {
+    let text = value;
+    const quotes = [];
+    while (true) {
+        const match = /(?:^|\n\n)(<quoted-text>\n[^\n]*\n<\/quoted-text>)$/.exec(text);
+        const quote = match ? parseTextQuote(match[1]) : null;
+        if (!match || !quote)
+            break;
+        quotes.unshift(quote);
+        text = text.slice(0, match.index);
+    }
+    return { text, quotes };
+}
+export function messageTextWithQuotes(message) {
+    const text = message.content
+        .map((block) => (block.type === "text" && typeof block.text === "string" ? block.text : ""))
+        .join("\n");
+    const values = message.details?.quotes;
+    const quotes = Array.isArray(values) ? values.map(readTextQuote).filter((q) => q !== null) : [];
+    return formatQuotedPrompt(text, quotes);
+}

package/dist/server/tool-manager.js

@@ -345,10 +345,19 @@ export function applyAgentToolsGating(session, disabled, preset) {
         const allNames = session.getAllTools().map((t) => t.name);
         const names = new Set(allNames);
         for (const t of AGENT_TOOL_CATALOG) {
-            if (off.has(t.name))
-                names.delete(t.name);
-            else
+            if (off.has(t.name)) {
+                // issue #481: 若第三方扩展注册了同名工具（如 nicobailon/pi-subagents 的 subagent），
+                // 关闭内置工具时允许扩展工具透传，不从活跃名单删除
+                const hasExtensionTool = Boolean(session?.extensionRunner
+                    ?.getAllRegisteredTools?.()
+                    ?.some((tool) => tool.definition?.name === t.name));
+                if (!hasExtensionTool) {
+                    names.delete(t.name);
+                }
+            }
+            else {
                 names.add(t.name);
+            }
         }
         for (const core of CORE_BUILTIN_TOOL_NAMES) {
             if (off.has(core))

package/dist/server/tool-overrides.js

@@ -57,3 +57,27 @@ export function installToolOverrides(session, specs) {
     session._refreshToolRegistry();
     return [...names];
 }
+/**
+ * 同步 subagent 工具与第三方扩展的同名工具共存（issue #481）：
+ * 当第三方扩展注册了同名 subagent 时，若用户在设置中关闭/禁用了内置 subagent，
+ * 则自动从 session._customTools 中移除内置 subagent，让扩展的同名工具透传生效；
+ * 重新启用时则重新注入内置 subagent。
+ */
+export function syncSubagentOverride(session, subagentDisabled, builtinSubagentTool) {
+    if (!Array.isArray(session._customTools) || typeof session._refreshToolRegistry !== "function")
+        return;
+    const hasExtensionTool = Boolean(extensionToolDefinition(session, "subagent"));
+    if (!hasExtensionTool)
+        return;
+    const idx = session._customTools.findIndex((t) => t.name === "subagent");
+    if (subagentDisabled) {
+        if (idx !== -1) {
+            session._customTools = session._customTools.filter((t) => t.name !== "subagent");
+            session._refreshToolRegistry();
+        }
+    }
+    else if (idx === -1 && builtinSubagentTool) {
+        session._customTools = [builtinSubagentTool(), ...session._customTools];
+        session._refreshToolRegistry();
+    }
+}

package/dist/server/update-check.js

@@ -375,29 +375,43 @@ function piCliOnPath() {
     }
     return null;
 }
+/** Read a pi-core package.json's version, or null when absent, not ours, or
+ *  unreadable. Shared by both resolution strategies below. */
+function readPiCoreVersionAt(pkgPath) {
+    if (!existsSync(pkgPath))
+        return null;
+    try {
+        const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
+        if (pkg.name === PI_CORE_PACKAGE && pkg.version)
+            return pkg.version;
+    }
+    catch {
+        /* unreadable package.json */
+    }
+    return null;
+}
 /**
- * Read the pi core version from disk: resolve the `pi` bin (typically a
- * symlink into <global>/node_modules/<pkg>/dist/bundle/cli.js) and walk up to
- * its package.json. FORK-FREE by design — see the note on defaultProbePiCore.
+ * <binDir>/node_modules/<pkg>/package.json — the concrete layout a global npm
+ * install always uses. This is the FIRST candidate because it is the only one
+ * that works on Windows: npm's cmd-shim writes a regular `pi` shell script
+ * (not a symlink into the package), so the realpath walk below would start
+ * from <prefix> itself and never see the package one level down (issue #533).
  */
-function readPiCoreVersionFromDisk() {
-    const bin = piCliOnPath();
-    if (!bin)
-        return null;
+function versionFromSiblingNodeModules(bin) {
+    return readPiCoreVersionAt(join(dirname(bin), "node_modules", ...PI_CORE_PACKAGE.split("/"), "package.json"));
+}
+/**
+ * POSIX: `pi` is a symlink into <prefix>/node_modules/<pkg>/dist/bundle/cli.js
+ * — realpath it and walk up (≤8 levels) until a package.json names our
+ * package. Functionally unchanged from the original probe.
+ */
+function versionFromSymlinkWalk(bin) {
     try {
         let dir = dirname(realpathSync(bin));
         for (let i = 0; i < 8; i++) {
-            const pkgPath = join(dir, "package.json");
-            if (existsSync(pkgPath)) {
-                try {
-                    const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-                    if (pkg.name === PI_CORE_PACKAGE && pkg.version)
-                        return pkg.version;
-                }
-                catch {
-                    /* unreadable package.json — keep walking */
-                }
-            }
+            const version = readPiCoreVersionAt(join(dir, "package.json"));
+            if (version)
+                return version;
             const parent = dirname(dir);
             if (parent === dir)
                 break;
@@ -409,6 +423,17 @@ function readPiCoreVersionFromDisk() {
     }
     return null;
 }
+/**
+ * Read the pi core version from disk: resolve the `pi` bin on PATH, then try
+ * the concrete global-npm layout first (Windows) and the POSIX symlink walk
+ * second. Exported for unit tests — defaultProbePiCore memoizes its result.
+ */
+export function readPiCoreVersionFromDisk() {
+    const bin = piCliOnPath();
+    if (!bin)
+        return null;
+    return versionFromSiblingNodeModules(bin) ?? versionFromSymlinkWalk(bin);
+}
 /**
  * Default pi core probe: run the globally installed `pi --version`, memoized
  * machine-wide for PI_PROBE_TTL_MS so repeated collectTargets calls never
@@ -485,13 +510,16 @@ export function isHostProvidedPackage(name) {
 export function collectTargets(agentDir, webuiVersion, probePiCore = defaultProbePiCore, opts) {
     const targets = [{ name: "pi-web-ui", version: webuiVersion, kind: "webui" }];
     const coreVersion = probePiCore() ?? readVendoredPiCore(agentDir);
-    if (coreVersion) {
-        targets.push({
-            name: PI_CORE_PACKAGE,
-            version: coreVersion,
-            kind: "pi-core",
-        });
-    }
+    // issue #533: keep the pi-core row even when the version is undetectable
+    // (e.g. unreadable global install) instead of silently dropping it — an
+    // honest "could not detect" row beats a missing one. checkAll resolves the
+    // key into the item's localized `error`.
+    targets.push({
+        name: PI_CORE_PACKAGE,
+        version: coreVersion ?? "unknown",
+        kind: "pi-core",
+        ...(coreVersion ? {} : { error: "pluginupdate.piCore.unknown" }),
+    });
     targets.push(...listInstalledPackages(agentDir).filter((pkg) => !isHostProvidedPackage(pkg.name)));
     targets.push(...listGitExtensions(agentDir, opts?.projectCwd));
     return targets;
@@ -636,6 +664,22 @@ gitCheck = defaultCheckGitExtension) {
         while (cursor < targets.length) {
             const i = cursor++;
             const t = targets[i];
+            if (t.error) {
+                // Pre-flagged target (issue #533, e.g. undetectable pi-core
+                // version): `error` carries an i18n key resolved here so
+                // collectTargets stays language-free. No registry lookup.
+                results[i] = {
+                    name: t.name,
+                    kind: t.kind,
+                    current: t.version,
+                    latest: null,
+                    latestPublishedAt: null,
+                    upToDate: false,
+                    ...(t.source ? { source: t.source } : {}),
+                    error: pick(l, "无法检测已安装的引擎版本（可能未装全局 pi，或安装方式不标准），可手动检查。", "Could not detect the installed engine version (no global pi, or a non-standard install); check manually.", t.error),
+                };
+                continue;
+            }
             if (t.kind === "git-extension") {
                 try {
                     if (!t.installDir)

package/extensions/webui.ts

@@ -215,14 +215,28 @@ export default function (pi: ExtensionAPI): void {
 			const cwd = opts.cwd ?? ctx.cwd;
 			const url = `http://localhost:${port}`;
 
+			// 探测并向子进程显式透传宿主 Pi SDK 路径（issue #482）
+			let hostSdkDir: string | undefined;
+			try {
+				const resolved = import.meta.resolve?.("@earendil-works/pi-coding-agent");
+				if (resolved) {
+					let p = resolved.startsWith("file:") ? fileURLToPath(resolved) : resolved;
+					if (p.endsWith("index.js") || p.endsWith("index.mjs")) p = dirname(p);
+					if (existsSync(join(p, "package.json"))) hostSdkDir = p;
+				}
+			} catch {}
+
 			const env = {
 				...process.env,
 				PORT: String(port),
 				PI_WEB_PORT: String(port), // server/index.js 读取 PI_WEB_PORT
 				PI_WEB_CWD: cwd,
+				...(hostSdkDir ? { PI_WEB_SDK_DIR: hostSdkDir } : {}),
 				...(process.env.PI_WEB_DATA_DIR ? {} : { PI_WEB_DATA_DIR: join(cwd, ".pi-web") }),
 			};
-			const proc = spawn(NODE, [SERVER_ENTRY], {
+			const hookPath = join(PKG_ROOT, "dist", "server", "resolve-global-sdk.js");
+			const nodeArgs = existsSync(hookPath) ? ["--import", hookPath, SERVER_ENTRY] : [SERVER_ENTRY];
+			const proc = spawn(NODE, nodeArgs, {
 				cwd,
 				env,
 				stdio: "ignore",

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pi-web-ui",
-	"version": "0.97.0",
+	"version": "0.98.0",
 	"description": "Just open your browser to get all your work done — browser cockpit for AI coding agents (chat, code, files, terminal, Git in one tab)",
 	"license": "MIT",
 	"author": {
@@ -79,39 +79,35 @@
 		"desktop:dist": "npm run build && npm run build:desktop && electron-builder -c desktop/electron-builder.yml",
 		"format": "prettier --write server/ web/src/ extensions/ scripts/ bin/ desktop/ tests/*.mjs tests/unit/ *.mjs",
 		"format:check": "prettier --check server/ web/src/ extensions/ scripts/ bin/ desktop/ tests/*.mjs tests/unit/ *.mjs",
-		"lint": "oxlint server/ web/src/ extensions/ scripts/ desktop/",
-		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/ desktop/"
+		"lint": "oxlint server/ web/src/ extensions/ scripts/ bin/ desktop/",
+		"lint:fix": "oxlint --fix server/ web/src/ extensions/ scripts/ bin/ desktop/"
 	},
 	"dependencies": {
 		"@deepseek-ai/dsh-sdk-jsonrpc-server": "^0.1.5-rc.3",
 		"@deepseek-ai/dsh-sdk-protocol": "^0.1.5-rc.3",
 		"@earendil-works/pi-coding-agent": ">=0.85.1",
-		"@xterm/addon-fit": "^0.11.0",
-		"@xterm/xterm": "^6.0.0",
 		"compression": "^1.8.2",
 		"electron-updater": "^6.8.9",
 		"express": "^5.2.1",
-		"highlight.js": "^11.12.0",
-		"html-to-image": "^1.11.13",
-		"katex": "^0.18.7",
 		"node-pty": "^1.1.0",
-		"react": "^19.3.0",
-		"react-dom": "^19.3.0",
-		"react-icons": "^5.7.0",
-		"react-markdown": "^10.1.0",
-		"rehype-highlight": "^7.0.2",
-		"rehype-katex": "^7.0.1",
-		"rehype-raw": "^7.0.0",
-		"rehype-sanitize": "^6.0.0",
-		"remark-breaks": "^4.0.0",
-		"remark-gfm": "^4.0.1",
-		"remark-math": "^6.0.0",
 		"tar": "^7.5.22",
 		"typebox": "^1.3.34",
 		"undici": "^8.9.0",
 		"ws": "^8.21.3",
 		"yauzl": "^3.4.0"
 	},
+	"peerDependencies": {
+		"@earendil-works/pi-coding-agent": "*",
+		"typebox": "*"
+	},
+	"peerDependenciesMeta": {
+		"@earendil-works/pi-coding-agent": {
+			"optional": true
+		},
+		"typebox": {
+			"optional": true
+		}
+	},
 	"devDependencies": {
 		"@types/compression": "^1.8.1",
 		"@types/express": "^5.0.6",
@@ -121,16 +117,32 @@
 		"@types/ws": "^8.18.1",
 		"@types/yauzl": "^3.4.0",
 		"@vitejs/plugin-react": "^6.1.1",
+		"@xterm/addon-fit": "^0.11.0",
+		"@xterm/xterm": "^6.0.0",
 		"concurrently": "^10.0.5",
 		"cross-env": "^10.1.0",
 		"electron": "^44.4.2",
 		"electron-builder": "^26.15.3",
 		"esbuild": "^0.28.2",
+		"highlight.js": "^11.12.0",
+		"html-to-image": "^1.11.13",
 		"jsdom": "^30.1.0",
+		"katex": "^0.18.7",
 		"mermaid": "^12.0.0",
 		"oxlint": "^1.83.0",
 		"playwright-core": "^1.63.0",
 		"prettier": "^3.9.8",
+		"react": "^19.3.0",
+		"react-dom": "^19.3.0",
+		"react-icons": "^5.7.0",
+		"react-markdown": "^10.1.0",
+		"rehype-highlight": "^7.0.2",
+		"rehype-katex": "^7.0.1",
+		"rehype-raw": "^7.0.0",
+		"rehype-sanitize": "^6.0.0",
+		"remark-breaks": "^4.0.0",
+		"remark-gfm": "^4.0.1",
+		"remark-math": "^6.0.0",
 		"tsx": "^4.23.13",
 		"typescript": "^7.0.2",
 		"vis-timeline": "^8.5.4",