pi-webapp 0.1.7 → 0.1.9

package/README.md

@@ -66,6 +66,10 @@ For local Web plugin development with the sibling `pi-extensions` workspace, fol
 
 The source lives in `extension/`, `shared/`, and `web/src/`. The npm package contains only the bundled, minified JavaScript extension, built web assets, cover image, and the English and Chinese READMEs. No TypeScript source or source maps are published. Minification makes the shipped code harder to read; it does not encrypt JavaScript.
 
+## Error collection
+
+Frontend and extension Sentry error reporting is enabled by default with the built-in public DSN. Set `PI_WEB_SENTRY_DSN` in the Pi process environment to use another project, or `PI_WEB_SENTRY_ENABLED=false` to disable reporting. Collection is limited to sanitized stacks, semantic breadcrumbs and state summaries; conversations, source contents, attachments, credentials and session recordings are excluded. See [Sentry configuration](docs/sentry.md) for the default destination, separate destinations, limits and private source-map uploads.
+
 ## Publish
 
 CI resolves the published `@chengzhiyi/pi-web-protocol` version before `npm ci`.

package/README.zh-CN.md

@@ -66,6 +66,10 @@ npm run stop
 
 源代码位于 `extension/`、`shared/` 和 `web/src/`。npm 软件包仅包含打包并压缩后的 JavaScript 扩展、构建后的 Web 资源、封面图片，以及英文和中文 README；不会发布 TypeScript 源码或 source map。代码压缩会增加阅读发布版本代码的难度，但不会对 JavaScript 加密。
 
+## 错误采集
+
+前后端 Sentry 错误采集默认开启，使用内置公共 DSN，无需额外配置。在启动 Pi 的环境中设置 `PI_WEB_SENTRY_DSN` 可覆盖默认项目，使用 `PI_WEB_SENTRY_ENABLED=false` 关闭。默认只采集脱敏堆栈、操作轨迹和状态摘要，不采集对话、源码正文、附件内容或凭据，不启用界面录制。默认上报地址、独立前后端 DSN 和私有 sourcemap 上传步骤见 [Sentry 配置说明](docs/sentry.md)。
+
 ## 发布
 
 CI 会先从 npm 解析 `@chengzhiyi/pi-web-protocol` 的已发布版本，再运行 `npm ci`。

package/bin/npm-command.d.mts

@@ -0,0 +1,2 @@
+export function resolveNpmCli(options?: { execPath?: string; env?: NodeJS.ProcessEnv }): string;
+export function npmCommand(args: readonly string[]): { file: string; args: string[] };

package/bin/npm-command.mjs

@@ -0,0 +1,36 @@
+import { realpathSync, statSync } from "node:fs";
+import { basename, delimiter, dirname, join, resolve } from "node:path";
+
+function npmEntry(path) {
+  if (!path) return null;
+  try {
+    const real = realpathSync(path);
+    return basename(real) === "npm-cli.js" && statSync(real).isFile() ? real : null;
+  } catch { return null; }
+}
+
+/** Find npm's JavaScript entry point without relying on executable shell shims. */
+export function resolveNpmCli({ execPath = process.execPath, env = process.env } = {}) {
+  const inherited = npmEntry(env.npm_execpath);
+  if (inherited) return inherited;
+
+  const directories = new Set([dirname(execPath)]);
+  try { directories.add(dirname(realpathSync(execPath))); } catch { /* Try the original path. */ }
+  const searchPath = Object.entries(env).find(([key]) => key.toLowerCase() === "path")?.[1] ?? "";
+  for (const directory of searchPath.split(delimiter).filter(Boolean)) directories.add(resolve(directory));
+  for (const directory of directories) {
+    for (const candidate of [
+      join(directory, "node_modules", "npm", "bin", "npm-cli.js"),
+      join(directory, "..", "lib", "node_modules", "npm", "bin", "npm-cli.js"),
+      join(directory, "npm"),
+    ]) {
+      const cli = npmEntry(candidate);
+      if (cli) return cli;
+    }
+  }
+  throw new Error("找不到 npm 入口 npm-cli.js；请安装包含 npm 的 Node.js，或将 npm 所在目录加入 PATH 后重启服务。");
+}
+
+export function npmCommand(args) {
+  return { file: process.execPath, args: [resolveNpmCli(), ...args] };
+}

package/bin/pi-webapp.mjs

@@ -8,6 +8,7 @@ import { delimiter, dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import spawn from "cross-spawn";
 import { openWebPage } from "./open-web-page.mjs";
+import { npmCommand } from "./npm-command.mjs";
 
 const minimum = [0, 87, 1];
 const launcher = fileURLToPath(import.meta.url);
@@ -47,13 +48,15 @@ function probe(command) {
 
 function installPi() {
   console.error("未找到 Pi，正在通过 npm 安装 @earendil-works/pi-coding-agent …");
-  const result = spawn.sync("npm", ["install", "-g", "--ignore-scripts", "@earendil-works/pi-coding-agent"], { stdio: "inherit" });
+  const install = npmCommand(["install", "-g", "--ignore-scripts", "@earendil-works/pi-coding-agent"]);
+  const result = spawn.sync(install.file, install.args, { stdio: "inherit", windowsHide: true });
   if (result.error || result.status !== 0) {
     throw new Error(`Pi 安装失败。请手动运行 npm install -g --ignore-scripts @earendil-works/pi-coding-agent${result.error ? `（${result.error.message}）` : ""}`);
   }
   const inPath = probe("pi");
   if (inPath) return inPath;
-  const prefix = spawn.sync("npm", ["prefix", "-g"], { encoding: "utf8" });
+  const prefixCommand = npmCommand(["prefix", "-g"]);
+  const prefix = spawn.sync(prefixCommand.file, prefixCommand.args, { encoding: "utf8", windowsHide: true });
   if (prefix.status === 0) {
     const installed = process.platform === "win32" ? join(prefix.stdout.trim(), "pi.cmd") : join(prefix.stdout.trim(), "bin", "pi");
     if (existsSync(installed)) return probe(installed);