@bakapiano/ccsm 0.18.0 → 0.18.2

package/lib/tunnel.js

@@ -67,7 +67,12 @@ function findBinary(provider) {
   // PATH lookup via where.exe — works regardless of how the CLI got
   // installed (winget, choco, manual, in-tree).
   try {
-    const out = execFileSync('where.exe', [p.binary], { stdio: ['ignore', 'pipe', 'ignore'] })
+    // windowsHide: true stops each execFileSync from briefly flashing
+    // a black conhost window. The Remote page polls /api/tunnel/status
+    // every 2.5s and probe() (when its 30s cache is cold) fires 4-6
+    // execs back-to-back — without this flag the screen popcorns with
+    // little windows every cache cycle.
+    const out = execFileSync('where.exe', [p.binary], { stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true })
       .toString().trim().split(/\r?\n/)[0];
     if (out && fs.existsSync(out)) return out;
   } catch { /* not on PATH */ }
@@ -94,7 +99,7 @@ function findBinary(provider) {
 
 function getVersion(provider, exe) {
   try {
-    const out = execFileSync(exe, ['--version'], { stdio: ['ignore', 'pipe', 'pipe'] })
+    const out = execFileSync(exe, ['--version'], { stdio: ['ignore', 'pipe', 'pipe'], windowsHide: true })
       .toString().trim().split(/\r?\n/)[0];
     return out || null;
   } catch { return null; }
@@ -102,7 +107,7 @@ function getVersion(provider, exe) {
 
 function checkDevtunnelLogin(exe) {
   try {
-    const out = execFileSync(exe, ['user', 'show'], { stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000 })
+    const out = execFileSync(exe, ['user', 'show'], { stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000, windowsHide: true })
       .toString().trim();
     // "Logged in as <email> using <provider>." vs "Not logged in"
     const m = out.match(/Logged in as (\S+)/);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bakapiano/ccsm",
-  "version": "0.18.0",
+  "version": "0.18.2",
   "description": "Claude Code Session Manager — Windows web UI to manage many concurrent claude sessions: live list, snapshot/restore, focus existing window, new session in an isolated workspace with repo clones",
   "license": "MIT",
   "main": "server.js",

package/server.js

@@ -66,7 +66,7 @@ app.use((req, res, next) => {
   if (origin && ALLOWED_ORIGINS.has(origin)) {
     res.setHeader('Access-Control-Allow-Origin', origin);
     res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
-    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
+    res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization, X-Device-Id');
     res.setHeader('Vary', 'Origin');
   }
   if (req.method === 'OPTIONS') return res.sendStatus(204);