Feat/extmgr ux hardening

CHANGELOG.md

@@ -49,6 +49,8 @@
 
 ### Fixed
 
+- Remote npm browsing fetches only the visible result page instead of crawling the full `pi-package` catalog, honors `Retry-After` on HTTP 429 responses, and reports exhausted rate limits inside the UI.
+- Remote refresh bypasses both runtime and persistent search caches, community search stays scoped to `pi-package`, and author labels prefer usernames over fallback email addresses.
 - Unified manager interactions keep staged changes, filters, and selection when returning from details, action menus, and stay-in-manager prompts.
 - Disabled local extensions deduplicate correctly, manifest entrypoints only resolve real files, and npm author selection now prefers maintainer usernames before fallback emails.
 - Metadata cache freshness no longer refreshes inherited stale fields.

README.md

@@ -47,7 +47,8 @@ version manager, or install project-local with `pi install npm:pi-extmgr -l`.
 - **Unified manager UI**
   - Local extensions (`~/.pi/agent/extensions`, `.pi/extensions`) and installed packages in one list
   - Grouped sections for local extensions vs installed packages
-  - Compact rows with selected-item details below the list, so large extension sets stay scannable
+  - Responsive master/detail layout on wide terminals, with a compact stacked fallback on narrow terminals
+  - Focused primary filters and contextual one-line controls; secondary actions remain available through the command palette and help
   - Built-in search and filter shortcuts for large extension sets
   - Scope indicators (global/project), status indicators, update badges, and package sizes when known
 - **Package extension configuration panel**
@@ -59,25 +60,32 @@ version manager, or install project-local with `pi install npm:pi-extmgr -l`.
   - Unsaved-change guard when leaving (save/discard/stay)
 - **Package management**
   - Install, update, remove from UI and command line
-  - Quick actions (`A`, `u`, `X`) and bulk update (`U`)
+  - Quick actions (`A`, `u`, `X`) and coordinated bulk package actions (`B`)
 - **Remote discovery and install**
-  - npm search/browse with pagination, inline browse search, and keyboard page navigation
+  - npm search/browse with server-side pagination, inline browse search, keyboard page navigation, and rate-limit-aware retries
+  - Weekly npm downloads in browse rows/details plus popularity sorting (`o` cycles sort modes)
   - Path- and git-like queries are handled explicitly instead of surfacing unrelated npm results
   - Install by source (`npm:`, `git:`, `https://`, `ssh://`, `git@...`, local path)
   - Supports direct GitHub `.ts` installs and standalone local install for self-contained packages
+  - Search results render immediately; weekly download metrics hydrate in the background and update the visible rows
   - Long-running discovery/detail screens now show dedicated loading UI, and cancellable reads can be aborted with `Esc`
-- **Auto-update**
+- **Scheduled update checks**
   - Interactive wizard (`t` in manager, or `/extensions auto-update`)
   - Persistent schedule restored on startup and session switch
   - Background checks + status bar updates for installed npm + git packages
+- **Task-oriented workspaces**
+  - Installed: local extensions, packages, updates, and staged changes
+  - Discover: community npm search, package inspection, downloads, and popularity sorting
+  - Profiles: inline current-vs-target diffs (scope, version, ref, filters, checksum); applying always passes through the review screen
+  - Health: runtime conflicts, compatibility, reload state, recoverable trash, conflict remediation, and a conservative “fix all safe issues” action (never removes packages)
 - **Operational visibility**
   - Session history (`/extensions history`)
   - Cache controls (`/extensions clear-cache` clears persistent + runtime extmgr caches)
-  - Status line summary (`pkg count • auto-update • known updates`)
-  - History now records local extension deletions and auto-update configuration changes
+  - Status line summary (`pkg count • scheduled update checks • known updates`)
+  - History now records local extension deletions and scheduled update checks configuration changes
 - **Interactive + non-interactive support**
   - Works in TUI and non-UI modes
-  - Non-interactive commands for list/install/remove/update/auto-update
+  - Non-interactive commands for list/install/remove/update/scheduled update checks (checks discover updates; package updates remain explicit)
 
 ## Usage
 
@@ -91,24 +99,27 @@ Open the manager:
 
 | Key           | Action                                                |
 | ------------- | ----------------------------------------------------- |
+| `Tab` / `Shift+Tab` | Next / previous workspace: Installed / Discover / Profiles / Health |
 | `↑↓`          | Navigate                                              |
 | `PageUp/Down` | Jump through longer lists                             |
 | `Home/End`    | Jump to top or bottom                                 |
 | `Space`       | Toggle selected local extension on/off                |
 | `S`           | Save local extension changes                          |
 | `Enter` / `A` | Actions on selected item                              |
 | `/` / `Ctrl+F`| Search visible items                                  |
-| `Tab` / `Shift+Tab` | Cycle filters                                  |
-| `1-5`         | Filters: All / Local / Packages / Updates / Disabled  |
+| `1-7`         | Filter: All / Local / Packages / Updates / Disabled / Favorites / Recent |
 | `c`           | Configure selected package extensions                 |
 | `u`           | Update selected package directly                      |
 | `V`           | View full details for selected item                   |
 | `X`           | Remove selected item (package/local extension)        |
 | `i`           | Quick install by source                               |
 | `f`           | Remote package search                                 |
+| `B`           | Bulk actions for selected packages                    |
+| `W` / `L` / `D` | Save / load / delete manager views                  |
+| `*`           | Toggle favorite for selected item                     |
 | `U`           | Update all packages                                   |
-| `t`           | Auto-update wizard                                    |
-| `P` / `M`     | Quick actions palette                                 |
+| `t`           | Scheduled update checks wizard                                    |
+| `P` / `M`     | Workspace screens and actions                         |
 | `R`           | Browse remote packages                                |
 | `?` / `H`     | Help                                                  |
 | `Esc`         | Clear search or exit                                  |
@@ -128,6 +139,12 @@ Open the manager:
 /extensions uninstall [source]   # Alias: remove
 /extensions update [source]      # Update one package (or all when omitted)
 /extensions auto-update [every]  # No arg opens wizard in UI; accepts 1d, 1w, 1mo, never, etc.
+/extensions doctor                # Inspect ownership and package compatibility
+/extensions profile list           # List named profiles
+/extensions profile save <name>   # Save the current package profile
+/extensions profile apply <name|path> # Safely apply a profile
+/extensions profile delete <name> # Delete a named profile
+/extensions trash <list|restore|purge> # Manage local extension trash
 /extensions history [options]    # View change history (supports filters)
 /extensions clear-cache          # Clear persistent + runtime extmgr caches
 ```
@@ -190,13 +207,16 @@ Examples:
 - **Package extension config**: Select a package and press `c` (or Enter/A → Configure) to enable/disable individual package entrypoints.
   - After saving package extension config, run /reload to apply changes.
 - **Two install modes**:
-  - **Managed** (npm): Auto-updates with `pi update`, stored in pi's package cache, supports Pi package manifest/convention loading
+  - **Managed** (npm): uses explicit `pi update` updates, stored in pi's package cache, supports Pi package manifest/convention loading
   - **Local** (standalone): Copies to `~/.pi/agent/extensions/{package}/`, so it only accepts runnable standalone layouts (manifest-declared/root entrypoints), requires `tar` on `PATH`, and rejects packages whose runtime `dependencies` are not already bundled with the package contents
-- **Auto-update schedule is persistent**: `/extensions auto-update 1d` stays active across future Pi sessions and is restored when switching sessions.
-- **Auto-update/update badges cover npm + git packages**: extmgr now uses pi's package manager APIs for structured update detection instead of parsing `pi list` output.
+- **Scheduled update-check schedule is persistent**: `/extensions auto-update 1d` stays active across future Pi sessions and is restored when switching sessions.
+- **Scheduled update-check badges cover npm + git packages**: extmgr now uses pi's package manager APIs for structured update detection instead of parsing `pi list` output.
 - **Settings/cache writes are hardened**: extmgr serializes writes and uses safe file replacement to reduce JSON corruption issues.
 - **Invalid JSON is handled safely**: malformed `auto-update.json` / metadata cache files are backed up and reset; invalid `.pi/settings.json` is not overwritten during package-extension toggles.
-- **Reload is built-in**: When extmgr asks to reload, it calls `ctx.reload()` directly.
+- **Reload is built-in**: When extmgr asks to reload, it calls `ctx.reload()` directly. Successful mutations persist a versioned reload-required marker; cancellation and failure do not. The marker survives reopening the manager and clears after a successful reload.
+- **Saved manager state**: Views, favorites, recent items, and bulk selections are stored atomically in `~/.pi/agent/.extmgr-cache/views-<project>.json`. Named profiles are stored in `profiles.json`; project policies load from `.pi/extmgr-policy.json`.
+- **Trash lifecycle**: Local removals move to `~/.pi/agent/.extmgr-trash/` with persistent records. Undo refuses to overwrite a replacement file, and expired or missing records are cleaned up.
+- **Metadata safety**: Missing compatibility, provenance, checksum, or target-version metadata is reported as `unknown`, never `safe`. Target-version previews, exact target badges, and update-policy/maintenance-window enforcement are intentionally deferred because Pi does not expose structured target metadata.
 
 ## License