@cjhyy/code-shell-server 0.8.12 → 0.8.20

package/dist/mobile-remote/trusted-device-store.js

@@ -38,8 +38,11 @@ export class TrustedDeviceStore {
             // Get-or-create by secretHash. A phone's secret is stable per browser
             // (persisted in localStorage as cs.deviceSecret), so re-scanning the QR
             // code must reuse its live row rather than accumulating duplicates.
-            const existing = devices.find((d) => d.secretHash === input.secretHash && !d.revokedAt);
+            const existing = devices.find((d) => secretHashEquals(d.secretHash, input.secretHash));
             if (existing) {
+                if (existing.revokedAt) {
+                    throw new Error("Trusted device was revoked; remove it before pairing again");
+                }
                 existing.name = name;
                 existing.lastSeenAt = Date.now();
                 return { result: this.toPublic(existing), changed: true };

package/dist/sessions-service.js

@@ -7,9 +7,13 @@ import * as fs from "node:fs/promises";
 import * as path from "node:path";
 const SAFE_ID = /^[A-Za-z0-9_.-]+$/;
 const QUICK_CHAT_SESSION_PREFIX = "qchat-";
+const PANEL_TASK_SESSION_PREFIX = "panel-task-";
 function isQuickChatSessionId(id) {
     return id.startsWith(QUICK_CHAT_SESSION_PREFIX);
 }
+function isInternalEphemeralSessionId(id) {
+    return isQuickChatSessionId(id) || id.startsWith(PANEL_TASK_SESSION_PREFIX);
+}
 export async function listSessions(baseDir = sessionsRoot()) {
     try {
         const entries = await fs.readdir(baseDir, { withFileTypes: true });
@@ -20,7 +24,7 @@ export async function listSessions(baseDir = sessionsRoot()) {
             if (!e.name.endsWith(".jsonl") && !e.name.endsWith(".json"))
                 continue;
             const id = e.name.replace(/\.jsonl?$/, "");
-            if (isQuickChatSessionId(id))
+            if (isInternalEphemeralSessionId(id))
                 continue;
             const full = path.join(baseDir, e.name);
             try {
@@ -162,7 +166,7 @@ export async function listDiskSessions(opts, baseDir = sessionsRoot()) {
             return { sessions: [], nextCursor: null };
         throw e;
     }
-    const candidates = entries.filter((e) => e.isDirectory() && SAFE_ID.test(e.name) && !isQuickChatSessionId(e.name));
+    const candidates = entries.filter((e) => e.isDirectory() && SAFE_ID.test(e.name) && !isInternalEphemeralSessionId(e.name));
     const stats = await Promise.all(candidates.map(async (e) => {
         try {
             return { id: e.name, mtime: (await fs.stat(path.join(baseDir, e.name))).mtimeMs };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-server",
-  "version": "0.8.12",
+  "version": "0.8.20",
   "description": "CodeShell server transport layer — mobile remote HTTP/WS host, pairing, passcode gate, tunnel, rooms, uploads, and session/attachment services. Electron-free; precursor of the auth gateway.",
   "type": "module",
   "main": "./dist/index.js",
@@ -39,9 +39,9 @@
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""
   },
   "dependencies": {
-    "@cjhyy/code-shell-capability-coding": "0.8.12",
-    "@cjhyy/code-shell-core": "0.8.12",
-    "@cjhyy/code-shell-web": "0.8.12",
+    "@cjhyy/code-shell-capability-coding": "0.8.20",
+    "@cjhyy/code-shell-core": "0.8.20",
+    "@cjhyy/code-shell-web": "0.8.20",
     "@types/ws": "^8.18.1",
     "ws": "^8.21.0"
   },