agegr/pi-web v0.8.5 on GitHub

中文

基于 v0.8.4..v0.8.5 的提交整理。

新增可选的 PI_WEB_PASSWORD HTTP Basic Auth，用户名固定为 pi，覆盖网页和所有 API 端点，并完善非 loopback 监听时的安全提示（48e8300）。
新增桌面端侧边栏和右侧文件面板的拖拽调整、双击复位与 localStorage 宽度持久化（9d1721f, #266）。
新增俄文 README，并在各语言文档中补充语言入口（fdc28d5, #313）。

让 enabledModels 支持与 Pi TUI 一致的 glob、模糊匹配和 :thinkingLevel 固定规则；启动会原子应用模型范围，并展示无匹配规则警告（faccb23, #310）。
按认证能力列出 Anthropic、GitHub Copilot 等双认证提供商；切换认证方式后同步刷新列表，并以原子、类型安全的方式删除凭据（0b0d04c, #311）。
模型配置改为安全的原子写入，避免并发或中断导致配置损坏（ac81a96, #295）。

Prepared from commits in v0.8.4..v0.8.5.

Added optional PI_WEB_PASSWORD HTTP Basic Auth with the fixed username pi, covering the web UI and every API endpoint, with clearer security warnings for non-loopback listeners (48e8300).
Added draggable desktop sizing for the sidebar and right file panel, including double-click reset and localStorage persistence (9d1721f, #266).
Added a Russian README and linked it from the language bars in the existing documentation (fdc28d5, #313).

Made enabledModels follow the same glob, fuzzy-match, and :thinkingLevel pin rules as the Pi TUI; session startup now applies the scope atomically and unmatched rules surface as warnings (faccb23, #310).
Listed dual-auth providers such as Anthropic and GitHub Copilot by capability, synchronized both provider lists after auth changes, and made credential deletion atomic and credential-type aware (0b0d04c, #311).
Made model configuration writes secure and atomic to prevent corruption during concurrent or interrupted updates (ac81a96, #295).

Replaced cross-window running-state SSE with lightweight visible-tab polling and limited per-session SSE to active runs, reducing persistent connections while retaining terminal-state reconciliation (125e55d).