@cjhyy/code-shell-server 0.9.34 → 0.9.35

package/dist/links/service.d.ts

@@ -16,6 +16,8 @@ export interface LinkServiceOptions {
     now?: () => number;
     /** Trusted Host configuration; never accepted from a browser request. */
     remoteLink?: () => RemoteLinkConfiguration | undefined;
+    /** Trusted Host opt-in: reuse a uniquely identified user connection after remote OAuth. */
+    reuseRemoteConnection?: boolean;
     /** Test seams. Production delegates to Core's fixed provider and CLI executors. */
     validateToken?: typeof validateLocalLinkToken;
     cliStatus?: typeof getCliLinkStatus;

package/dist/links/service.js

@@ -1164,8 +1164,27 @@ export function createLinkService(options = {}) {
             };
             await change(guarded, () => {
                 assertPending();
-                swap(job.prepared, credential, {
-                    retireExpected: !!job.prepared.expected,
+                let prepared = job.prepared;
+                if (options.reuseRemoteConnection &&
+                    !prepared.expected &&
+                    prepared.input.connectionId === undefined) {
+                    // Identity comes from authenticated metadata, never a browser-supplied connection ID.
+                    const current = records();
+                    const matches = current.credentials.filter((entry) => !current.projectIds.has(entry.id) &&
+                        isRemoteLinkCredential(entry) &&
+                        entry.meta?.linkProvider === credential.meta?.linkProvider &&
+                        entry.meta?.linkRemoteIssuer === credential.meta?.linkRemoteIssuer &&
+                        entry.meta?.linkRemoteConnectionId === credential.meta?.linkRemoteConnectionId);
+                    if (matches.length > 1)
+                        throw new LinkServiceError(409, "conflict");
+                    if (matches.length === 1) {
+                        const expected = matches[0];
+                        prepared = { ...prepared, id: expected.id, expected };
+                        credential = { ...credential, id: expected.id, label: expected.label };
+                    }
+                }
+                swap(prepared, credential, {
+                    retireExpected: !!prepared.expected,
                     adopt: staged,
                     now: now(),
                 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-server",
-  "version": "0.9.34",
+  "version": "0.9.35",
   "description": "CodeShell server transport layer — mobile remote HTTP/WS host, pairing, passcode gate, tunnel, rooms, uploads, and session/attachment services. Electron-free; precursor of the auth gateway.",
   "type": "module",
   "main": "./dist/index.js",
@@ -60,13 +60,13 @@
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""
   },
   "dependencies": {
-    "@cjhyy/code-shell-capability-coding": "0.9.34",
-    "@cjhyy/code-shell-core": "0.9.34",
-    "@cjhyy/code-shell-web": "0.9.34",
+    "@cjhyy/code-shell-capability-coding": "0.9.35",
+    "@cjhyy/code-shell-core": "0.9.35",
+    "@cjhyy/code-shell-web": "0.9.35",
     "@modelcontextprotocol/sdk": "^1.31.0",
     "@types/ws": "^8.18.1",
     "ws": "^8.21.0",
-    "@cjhyy/code-shell-link": "0.9.34"
+    "@cjhyy/code-shell-link": "0.9.35"
   },
   "engines": {
     "node": ">=20.10"