@cjhyy/code-shell-server 0.9.15 → 0.9.17

package/dist/panels/process-service.d.ts

@@ -20,8 +20,9 @@ export interface PanelAppProcessServiceOptions {
     /** Rechecked after asynchronous work and immediately before admitting a process. */
     isOwnerAuthorized?(owner: PanelProcessOwner): boolean | Promise<boolean>;
     /**
-     * Desktop defaults to app-version approvals. Web uses guest to isolate each
-     * authenticated instance; guest approvals never use the app-wide durable hooks.
+     * Desktop delegates durable approval lifetime to its Host hooks. Web uses guest
+     * to isolate each authenticated instance; guest approvals never use the
+     * app-wide durable hooks.
      */
     approvalScope?: "app" | "guest";
     confirmExecution(input: {
@@ -33,6 +34,8 @@ export interface PanelAppProcessServiceOptions {
     }): Promise<boolean>;
     isExecutionApproved?(scope: PanelProcessApprovalScope): Promise<boolean>;
     rememberExecutionApproval?(scope: PanelProcessApprovalScope): Promise<void>;
+    /** Desktop can use installed-app process permission and trusted-project binding as consent. */
+    allowAuthorizedProcessWithoutPrompt?: boolean;
     /** Resolve a declared entry in this app revision; return a canonical, reviewed file. */
     resolvePackageEntry?(owner: PanelProcessOwner, name: string): Promise<{
         path: string;

package/dist/panels/process-service.js

@@ -426,7 +426,10 @@ export class PanelAppProcessService {
             const guestScoped = this.options.approvalScope === "guest";
             const approvalKey = (guestScoped ? `${owner.guestId}\0${epoch}\0` : "") +
                 `${scope.appId}\0${scope.revision}\0${scope.executablePath}\0${scope.executableFingerprint}`;
-            let approved = this.approvedExecutables.has(approvalKey);
+            // Desktop already checks installed-app process permission and a trusted,
+            // bound project in authorize(). Web keeps its per-guest confirmation path.
+            let approved = this.options.allowAuthorizedProcessWithoutPrompt === true ||
+                this.approvedExecutables.has(approvalKey);
             if (!approved && !guestScoped && this.options.isExecutionApproved) {
                 approved = await this.options.isExecutionApproved(scope).catch(() => false);
                 await this.authorize(owner, epoch);
@@ -475,7 +478,8 @@ export class PanelAppProcessService {
                     this.directoryPath(owner, grant.directoryHandle) !== grant.path)
                     throw new Error("sealed directory argument was replaced");
             }
-            this.approvedExecutables.add(approvalKey);
+            if (!this.options.allowAuthorizedProcessWithoutPrompt)
+                this.approvedExecutables.add(approvalKey);
             const processId = randomUUID();
             const child = spawn(executable.path, args, {
                 cwd,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-server",
-  "version": "0.9.15",
+  "version": "0.9.17",
   "description": "CodeShell server transport layer — mobile remote HTTP/WS host, pairing, passcode gate, tunnel, rooms, uploads, and session/attachment services. Electron-free; precursor of the auth gateway.",
   "type": "module",
   "main": "./dist/index.js",
@@ -51,13 +51,13 @@
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""
   },
   "dependencies": {
-    "@cjhyy/code-shell-capability-coding": "0.9.15",
-    "@cjhyy/code-shell-core": "0.9.15",
-    "@cjhyy/code-shell-web": "0.9.15",
+    "@cjhyy/code-shell-capability-coding": "0.9.17",
+    "@cjhyy/code-shell-core": "0.9.17",
+    "@cjhyy/code-shell-web": "0.9.17",
     "@modelcontextprotocol/sdk": "^1.12.1",
     "@types/ws": "^8.18.1",
     "ws": "^8.21.0",
-    "@cjhyy/code-shell-link": "0.9.15"
+    "@cjhyy/code-shell-link": "0.9.17"
   },
   "engines": {
     "node": ">=20.10"