@cjhyy/code-shell-server 0.9.50 → 0.9.51

package/dist/index.panels.d.ts

@@ -1,7 +1,7 @@
 export { createPanelHttp } from "./panels/http.js";
 export * from "./panels/automations.js";
 export * from "./panels/hub-automations.js";
-export { createPanelManagement, PanelManagementError } from "./panels/management.js";
+export { createPanelManagement, createPanelSnapshotReads, PanelManagementError, type PanelSnapshotReads, } from "./panels/management.js";
 export { createPanelRuntime, panelWebCompatibility } from "./panels/runtime.js";
 export { createHubPanelBinding } from "./panels/hub-binding.js";
 export * from "./panels/project-scope.js";

package/dist/index.panels.js

@@ -1,7 +1,7 @@
 export { createPanelHttp } from "./panels/http.js";
 export * from "./panels/automations.js";
 export * from "./panels/hub-automations.js";
-export { createPanelManagement, PanelManagementError } from "./panels/management.js";
+export { createPanelManagement, createPanelSnapshotReads, PanelManagementError, } from "./panels/management.js";
 export { createPanelRuntime, panelWebCompatibility } from "./panels/runtime.js";
 export { createHubPanelBinding } from "./panels/hub-binding.js";
 export * from "./panels/project-scope.js";

package/dist/panels/http.d.ts

@@ -17,7 +17,7 @@ export declare function createPanelHttp(options: PanelManagementHttpOptions & {
     authorizePanelDirectory?: PanelDirectoryAuthorizer;
 }): {
     service: {
-        snapshot: (appId?: string) => Promise<import("./types.js").PanelSnapshot>;
+        snapshot: (appId?: string, reads?: import("./management.js").PanelSnapshotReads) => Promise<import("./types.js").PanelSnapshot>;
         packageHistory(context: import("./types.js").PanelOperationContext, id: unknown, expected: unknown): Promise<import("./types.js").PanelPackageHistory>;
         previewRestore(context: import("./types.js").PanelOperationContext, id: unknown, digest: unknown, expected: unknown): Promise<import("./types.js").PanelPackageRestoreReview>;
         cancelRestore(context: import("./types.js").PanelOperationContext, token: unknown): Promise<{

package/dist/panels/management-http.d.ts

@@ -8,7 +8,7 @@ export interface PanelManagementHttpOptions extends PanelManagementOptions {
 /** Call only after the host's same-origin authentication boundary. */
 export declare function createPanelManagementHttp(options: PanelManagementHttpOptions): {
     service: {
-        snapshot: (appId?: string) => Promise<import("./types.js").PanelSnapshot>;
+        snapshot: (appId?: string, reads?: import("./management.js").PanelSnapshotReads) => Promise<import("./types.js").PanelSnapshot>;
         packageHistory(context: PanelOperationContext, id: unknown, expected: unknown): Promise<import("./types.js").PanelPackageHistory>;
         previewRestore(context: PanelOperationContext, id: unknown, digest: unknown, expected: unknown): Promise<import("./types.js").PanelPackageRestoreReview>;
         cancelRestore(context: PanelOperationContext, token: unknown): Promise<{

package/dist/panels/management.d.ts

@@ -1,5 +1,5 @@
 import { type PanelExecutionScope } from "./execution-gate.js";
-import { type PanelAppPreview, type PanelAppSourceInput } from "@cjhyy/code-shell-core";
+import { type PanelAppInspectionReads, type PanelAppPreview, type PanelAppSourceInput } from "@cjhyy/code-shell-core";
 import type { PanelCompatibility, PanelDiscovery, PanelOperationContext, PanelReview, PanelProjectReview, PanelSnapshot, PanelPackageHistory, PanelPackageRestoreReview } from "./types.js";
 export declare class PanelManagementError extends Error {
     readonly status: number;
@@ -28,8 +28,17 @@ export interface PanelManagementOptions {
         repo: string;
     }, ref: string) => Promise<string>;
 }
+/**
+ * Verified reads shared by the snapshots of one multi-project request, so the
+ * same package is not re-verified once per project. Create one per request.
+ */
+export interface PanelSnapshotReads {
+    inspection: PanelAppInspectionReads;
+    digests: Map<string, Promise<string>>;
+}
+export declare function createPanelSnapshotReads(): PanelSnapshotReads;
 export declare function createPanelManagement(options: PanelManagementOptions): {
-    snapshot: (appId?: string) => Promise<PanelSnapshot>;
+    snapshot: (appId?: string, reads?: PanelSnapshotReads) => Promise<PanelSnapshot>;
     packageHistory(context: PanelOperationContext, id: unknown, expected: unknown): Promise<PanelPackageHistory>;
     previewRestore(context: PanelOperationContext, id: unknown, digest: unknown, expected: unknown): Promise<PanelPackageRestoreReview>;
     cancelRestore(context: PanelOperationContext, token: unknown): Promise<{

package/dist/panels/management.js

@@ -3,7 +3,7 @@ import { panelPackageMutationMatches } from "./package-mutation.js";
 import { createHash, randomBytes } from "node:crypto";
 import { lstatSync, mkdirSync, statSync } from "node:fs";
 import { basename, extname, isAbsolute, join, resolve } from "node:path";
-import { SettingsManager, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, discoverGitPanelApps, installReviewedLocalPanelApp, invalidateSkillCache, listInstalledPanelApps, inspectProjectPanelApps, listRetainedPanelAppPackages, resolvePanelAppPackage, parsePanelAppPackagePins, currentPanelAppPackagePins, installedPanelAppUpdatedAt, retainInstalledPanelApp, userHome, panelAppsRoot, previewLocalPanelApp, resolveGitHubPanelAppCommit, resolvePanelAppBindingPolicy, uninstallPanelApp, } from "@cjhyy/code-shell-core";
+import { SettingsManager, PanelAppAlreadyInstalledError, PanelAppInstallError, PanelAppReviewChangedError, assertSafePanelAppId, discoverGitPanelApps, installReviewedLocalPanelApp, invalidateSkillCache, listInstalledPanelApps, inspectProjectPanelApps, listRetainedPanelAppPackages, resolvePanelAppPackage, parsePanelAppPackagePins, currentPanelAppPackagePins, installedPanelAppUpdatedAt, retainInstalledPanelApp, userHome, panelAppsRoot, previewLocalPanelApp, inspectInstalledPanelAppDigest, resolveGitHubPanelAppCommit, resolvePanelAppBindingPolicy, uninstallPanelApp, } from "@cjhyy/code-shell-core";
 import { mutateJsonFile } from "@cjhyy/code-shell-core/internal";
 import { parseGithubUrl } from "@cjhyy/code-shell-core/internal/skills";
 const REVIEW_TTL = 8 * 60_000;
@@ -151,6 +151,9 @@ function assertRevision(revision) {
     if (typeof revision !== "string" || !/^[a-f0-9]{64}$/.test(revision))
         invalid();
 }
+export function createPanelSnapshotReads() {
+    return { inspection: { packages: new Map() }, digests: new Map() };
+}
 export function createPanelManagement(options) {
     const now = options.now ?? Date.now;
     const workspace = resolve(options.bindingCwd ?? options.cwd);
@@ -206,12 +209,17 @@ export function createPanelManagement(options) {
     const listApps = () => options.projectPackages
         ? inspectProjectPanelApps(workspace).then((result) => result.apps)
         : listInstalledPanelApps();
-    async function inspectApp(app) {
+    async function inspectApp(app, reads) {
         const info = lstatSync(app.installPath);
         if (info.isSymbolicLink() || !info.isDirectory())
             throw new PanelManagementError(403, "unsafe_path", "面板安装目录不支持链接。");
-        const preview = await previewLocalPanelApp({ kind: "dir", path: app.installPath });
-        return { app, digest: preview.reviewToken };
+        // Same digest a dir preview reports, without re-hashing unchanged installed bytes.
+        let digest = reads?.digests.get(app.installPath);
+        if (!digest) {
+            digest = inspectInstalledPanelAppDigest(app.installPath);
+            reads?.digests.set(app.installPath, digest);
+        }
+        return { app, digest: await digest };
     }
     async function selectedApp(id) {
         const app = (await listApps()).find((item) => item.id === id);
@@ -240,12 +248,12 @@ export function createPanelManagement(options) {
             commit: SHA.test(parsed.source.ref ?? "") ? parsed.source.ref : "",
         };
     }
-    async function snapshot(appId) {
+    async function snapshot(appId, reads) {
         if (appId !== undefined)
             assertSafePanelAppId(appId);
         options.assertBinding?.();
         const inspected = options.projectPackages
-            ? await inspectProjectPanelApps(workspace, appId)
+            ? await inspectProjectPanelApps(workspace, appId, reads?.inspection)
             : undefined;
         const apps = inspected?.apps ?? (await listInstalledPanelApps(appId));
         options.assertBinding?.();
@@ -268,7 +276,7 @@ export function createPanelManagement(options) {
                 .digest("hex"),
         }));
         for (const listed of apps) {
-            const { app, digest } = await inspectApp(listed);
+            const { app, digest } = await inspectApp(listed, reads);
             const source = savedSource(app, saved);
             const { installPath: _path, source: _source, installedAt: _installedAt, lastUpdated: _lastUpdated, ...publicApp } = app;
             const support = compatibility(app);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cjhyy/code-shell-server",
-  "version": "0.9.50",
+  "version": "0.9.51",
   "description": "CodeShell server transport layer — mobile remote HTTP/WS host, pairing, passcode gate, tunnel, rooms, uploads, and session/attachment services. Electron-free; precursor of the auth gateway.",
   "type": "module",
   "main": "./dist/index.js",
@@ -62,14 +62,14 @@
     "clean": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\""
   },
   "dependencies": {
-    "@cjhyy/code-shell-capability-coding": "0.9.50",
-    "@cjhyy/code-shell-core": "0.9.50",
-    "@cjhyy/code-shell-web": "0.9.50",
+    "@cjhyy/code-shell-capability-coding": "0.9.51",
+    "@cjhyy/code-shell-core": "0.9.51",
+    "@cjhyy/code-shell-web": "0.9.51",
     "@modelcontextprotocol/sdk": "^1.31.0",
     "@types/ws": "^8.18.1",
     "ws": "^8.21.0",
-    "@cjhyy/code-shell-link": "0.9.50",
-    "@cjhyy/code-shell-host": "0.9.50"
+    "@cjhyy/code-shell-link": "0.9.51",
+    "@cjhyy/code-shell-host": "0.9.51"
   },
   "engines": {
     "node": ">=20.10"