@cjhyy/code-shell-server 0.9.51 → 0.10.1

package/dist/panels/runtime.js

@@ -18,6 +18,7 @@ import { PanelTaskCookieHost } from "./task-cookie-host.js";
 import { taskCookieFromInput, taskCookieSelection, } from "./task-cookies.js";
 import { desktopPanelDirectoryBookmarks, hubPanelDirectoryBookmarks, } from "./directory-bookmarks.js";
 import { handlePanelProcessDirectory } from "./process-files.js";
+import { PanelDirectoryPicker, capturePanelWorkspaceDirectory, directoryPickerLifetime, } from "./directory-picker.js";
 import { PanelAppProcessService, panelExecutableDirectories, panelProcessInfo, } from "./process-service.js";
 import { PanelManagementError } from "./management.js";
 import { panelAutomationMethods } from "./automations.js";
@@ -305,7 +306,7 @@ function bridgeScript(id, origin) {
       const requestId = String(++next);
       const timer = setTimeout(() => {
         pending.delete(requestId); reject(new Error("Panel request timed out"));
-      }, ["tasks.start", "tasks.retry", "tasks.queue.set", "resources.recordAudio", "resources.recordVideo"].includes(method) ? 30 * 60 * 1000 : 60000);
+      }, ["tasks.start", "tasks.retry", "tasks.queue.set", "resources.recordAudio", "resources.recordVideo"].includes(method) ? 30 * 60 * 1000 : method === "filesystem.pickDirectory" ? 6 * 60 * 1000 : 60000);
       pending.set(requestId, { resolve, reject, timer });
       try {
         parent.postMessage({ type: "codeshell-panel:call", instanceId: id, requestId, method, params }, origin);
@@ -411,6 +412,14 @@ function injectBridge(html, source) {
     const offset = doctype?.[0].length ?? 0;
     return html.slice(0, offset) + script + html.slice(offset);
 }
+// CSP3 and Chromium resolve 'self' in a sandboxed document to its URL's origin,
+// but WebKit (every iOS browser) matches nothing, blocking all of a panel's own
+// scripts and styles. Spell that origin out so every engine enforces one policy.
+function resolveMetaPolicySelf(html, origin) {
+    return html.replace(/<meta\b[^>]*>/gi, (tag) => /\shttp-equiv\s*=\s*(["']?)content-security-policy\1/i.test(tag)
+        ? tag.replaceAll("'self'", origin)
+        : tag);
+}
 /** Owner-bound capability grants serve reviewed static bytes to an opaque-origin iframe. */
 export function createPanelRuntime(options) {
     const publicPathPrefix = options.publicPathPrefix ?? "";
@@ -556,6 +565,9 @@ export function createPanelRuntime(options) {
             holder: { kind: "process" },
         }),
         approvalScope: "guest",
+        // Match Desktop: installed process permission and the authorized project binding
+        // are consent. Every spawn still rechecks owner/revision, handles and fingerprints.
+        allowAuthorizedProcessWithoutPrompt: true,
         resolvePackageEntry: async (owner, name) => {
             const taskScope = toolOwners.get(owner.guestId);
             if (taskScope) {
@@ -582,13 +594,7 @@ export function createPanelRuntime(options) {
             const grant = byGuest.get(owner.guestId);
             return !!grant && (await authorized(grant));
         },
-        confirmExecution: async (input) => {
-            if (toolOwners.has(input.guestId))
-                return true;
-            const grant = byGuest.get(input.guestId);
-            return (!!grant &&
-                (await confirm(grant, `允许 ${input.appTitle} 运行 ${input.executable}？`, `程序将在服务端运行，可使用当前运行用户的文件与网络权限。\n程序：${input.executablePath}`)));
-        },
+        confirmExecution: async () => true,
     });
     const resources = new PanelResourceService({
         rootDirectory: join(options.dataDir, "panel-app-media"),
@@ -911,6 +917,52 @@ export function createPanelRuntime(options) {
         });
         return result && (await authorized(grant));
     }
+    async function pickDirectory(grant) {
+        if (!(await authorized(grant)))
+            error(410, "面板授权已失效。");
+        if ([...grant.confirmations.values()].some((item) => item.picker && item.result === undefined))
+            error(409, "请先完成当前目录选择。");
+        for (const [id, item] of grant.confirmations) {
+            if (item.result !== undefined)
+                grant.confirmations.delete(id);
+        }
+        if (grant.confirmations.size >= 64)
+            error(429, "待确认操作过多。");
+        const picker = new PanelDirectoryPicker(options.cwd, now);
+        const requestId = randomBytes(18).toString("base64url");
+        const pending = { picker };
+        const allowed = await new Promise((done) => {
+            const timer = setTimeout(() => pending.finish(false), directoryPickerLifetime);
+            timer.unref();
+            pending.finish = (value) => {
+                if (pending.result !== undefined)
+                    return;
+                pending.result = value;
+                clearTimeout(timer);
+                picker.close();
+                done(value);
+            };
+            grant.confirmations.set(requestId, pending);
+            emit(grant, "host.confirm", {
+                requestId,
+                title: options.host === "desktop" ? "选择电脑上的目录" : "选择服务器上的目录",
+                body: "仅可选择当前项目内的目录，确认后授予此面板使用。",
+                expiresAt: picker.expiresAt,
+                directoryPicker: {
+                    kind: "workspace-directory",
+                    rootPath: picker.rootPath,
+                    rootToken: picker.rootToken,
+                    initialToken: picker.initialToken,
+                },
+            });
+        });
+        if (!(await authorized(grant)))
+            error(410, "面板授权已失效。");
+        if (!allowed)
+            return undefined;
+        pending.selection.assertCurrent();
+        return pending.selection;
+    }
     function taskScope(grant) {
         return {
             instanceId: grant.id,
@@ -1166,12 +1218,19 @@ export function createPanelRuntime(options) {
                             consentTimeoutMs: 50000,
                         },
                     }),
-                    ...(app.permissions.includes("resources")
+                    ...(app.permissions.includes("resources") || app.permissions.includes("process")
                         ? {
                             methodLimits: {
-                                "resources.recordAudio": { timeoutMs: 30 * 60 * 1000 },
-                                "resources.recordVideo": { timeoutMs: 30 * 60 * 1000 },
+                                ...(app.permissions.includes("resources")
+                                    ? {
+                                        "resources.recordAudio": { timeoutMs: 30 * 60 * 1000 },
+                                        "resources.recordVideo": { timeoutMs: 30 * 60 * 1000 },
+                                    }
+                                    : {}),
                                 ...(app.permissions.includes("process")
+                                    ? { "filesystem.pickDirectory": { timeoutMs: 6 * 60_000 } }
+                                    : {}),
+                                ...(app.permissions.includes("process") && app.permissions.includes("resources")
                                     ? {
                                         "tasks.start": {
                                             maxParamsBytes: toolJobLimits.maxInputBytes,
@@ -1306,6 +1365,7 @@ export function createPanelRuntime(options) {
                 instanceId: id,
                 src: ASSETS + asset + "/" + app.entry.split("/").map(encodeURIComponent).join("/"),
                 expiresAt: grant.expiresAt,
+                serverTime: now(),
                 context,
                 limitations: panel.compatibility.reasons,
             };
@@ -1541,9 +1601,8 @@ export function createPanelRuntime(options) {
         if (method.startsWith("agent.task.")) {
             if (!agentTasks)
                 error(501, "当前宿主未提供独立面板任务。");
-            if (method === "agent.task.start" &&
-                !(await confirm(grant, `启动 ${grant.app.title.default} 的 AI 任务？`, String(params?.prompt ?? "").slice(0, 8000))))
-                error(403, "你取消了面板 AI 任务。");
+            // Match Desktop: the installed app's agent.task permission and live project
+            // binding authorize task creation. Worker tool approvals stay independent.
             return agentTasks.call(taskScope(grant), method, params);
         }
         if (method.startsWith("process.") || method.startsWith("filesystem.")) {
@@ -1583,16 +1642,30 @@ export function createPanelRuntime(options) {
             if (method === "filesystem.restoreDirectory") {
                 await options.authorizePanelDirectory?.(grant.app, options.bindingCwd ?? options.cwd, options.cwd);
                 const saved = directoryBookmarks.restore(grant.app.id, options.bindingCwd ?? options.cwd, params?.bookmark);
-                if (!options.authorizePanelDirectory &&
-                    saved !== (await realpath(options.cwd)) &&
-                    saved !== (await realpath(join(options.cwd, "downloads"))))
-                    throw new PanelBridgeError("PERMISSION_DENIED", "Saved server directory is unavailable");
-                const restored = await processes.grantDirectory(owner, saved);
+                const workspaceSelection = !options.authorizePanelDirectory
+                    ? capturePanelWorkspaceDirectory(options.cwd, saved)
+                    : undefined;
+                const restored = await processes.grantDirectory(owner, saved, workspaceSelection);
                 await options.authorizePanelDirectory?.(grant.app, options.bindingCwd ?? options.cwd, options.cwd);
                 directoryBookmarks.restore(grant.app.id, options.bindingCwd ?? options.cwd, params?.bookmark);
+                workspaceSelection?.assertCurrent();
                 return { ...restored, bookmark: params.bookmark };
             }
-            const name = method === "filesystem.pickDirectory" ? "downloads" : params?.name;
+            if (method === "filesystem.pickDirectory") {
+                const selection = await pickDirectory(grant);
+                if (!selection)
+                    return { cancelled: true };
+                selection.assertCurrent();
+                const selected = await processes.grantDirectory(owner, selection.path, selection);
+                selection.assertCurrent();
+                if (!(await authorized(grant)))
+                    error(410, "面板授权已失效。");
+                selection.assertCurrent();
+                const bookmark = directoryBookmarks.remember(grant.app.id, options.bindingCwd ?? options.cwd, selected.path);
+                processes.directoryPath(owner, selected.handle);
+                return { ...selected, bookmark };
+            }
+            const name = params?.name;
             const directory = name === "project"
                 ? options.cwd
                 : name === "downloads"
@@ -1604,16 +1677,13 @@ export function createPanelRuntime(options) {
                             : undefined;
             if (!directory)
                 error(400, "不支持这个服务端目录。");
-            if (method === "filesystem.pickDirectory" &&
-                !(await confirm(grant, "使用服务端下载目录？", directory)))
-                return { cancelled: true };
             await options.authorizePanelDirectory?.(grant.app, options.bindingCwd ?? options.cwd, options.cwd);
             if (name !== "project")
                 await mkdir(directory, { recursive: true, mode: 0o700 });
             if (!(await authorized(grant)))
                 error(410, "面板授权已失效。");
             const selected = await processes.grantDirectory(owner, directory);
-            if (method !== "filesystem.pickDirectory" && !["downloads", "project"].includes(String(name)))
+            if (!["downloads", "project"].includes(String(name)))
                 return selected;
             const bookmark = directoryBookmarks.remember(grant.app.id, options.bindingCwd ?? options.cwd, selected.path);
             if (!(await authorized(grant)))
@@ -1780,7 +1850,7 @@ export function createPanelRuntime(options) {
                 }
                 const directoryMatch = /^\/api\/v1\/panels\/runtime\/([\w-]+)\/directory\/([a-f0-9-]{36})$/.exec(url.pathname);
                 const resourceMatch = /^\/api\/v1\/panels\/runtime\/([\w-]+)\/resources\/((?:asset|external)-[a-f0-9]{64})$/.exec(url.pathname);
-                const match = /^\/api\/v1\/panels\/runtime\/([\w-]+)(?:\/(call|renew|events|confirm|tool-results))?$/.exec(url.pathname) ??
+                const match = /^\/api\/v1\/panels\/runtime\/([\w-]+)(?:\/(call|renew|events|confirm|directory-picker|tool-results))?$/.exec(url.pathname) ??
                     directoryMatch ??
                     resourceMatch;
                 const grant = match && grants.get(match[1]);
@@ -1839,7 +1909,7 @@ export function createPanelRuntime(options) {
                     if (!(await authorized(grant)))
                         error(410, "面板授权已失效。");
                     grant.expiresAt = now() + GRANT_TTL;
-                    json(response, 200, { expiresAt: grant.expiresAt });
+                    json(response, 200, { expiresAt: grant.expiresAt, serverTime: now() });
                 }
                 else if (request.method === "GET" && match[2] === "events") {
                     const after = Number(url.searchParams.get("after") ?? 0);
@@ -1848,17 +1918,63 @@ export function createPanelRuntime(options) {
                     grant.events = grant.events.filter((entry) => entry.id > after);
                     grant.eventBytes = grant.events.reduce((total, entry) => total + Buffer.byteLength(JSON.stringify(entry.payload) ?? "null"), 0);
                     const batch = grant.events.slice(0, 128);
-                    json(response, 200, { events: batch, cursor: batch.at(-1)?.id ?? after });
+                    json(response, 200, {
+                        events: batch,
+                        cursor: batch.at(-1)?.id ?? after,
+                        serverTime: now(),
+                    });
+                }
+                else if (request.method === "POST" && match[2] === "directory-picker") {
+                    if (request.headers.origin !== grant.origin)
+                        error(403, "目录选择仅供当前宿主页面使用。");
+                    const input = await body(request);
+                    if (Object.keys(input).some((key) => !["requestId", "directoryToken"].includes(key)))
+                        error(400, "目录选择参数无效。");
+                    const pending = typeof input.requestId === "string" && grant.confirmations.get(input.requestId);
+                    if (!pending || !pending.picker || pending.result !== undefined)
+                        error(409, "目录选择已失效，请重新发起。");
+                    const assertPending = async () => {
+                        if (!(await authorized(grant)))
+                            error(410, "面板授权已失效。");
+                        if (pending.result !== undefined || now() >= pending.picker.expiresAt) {
+                            pending.finish(false);
+                            error(409, "目录选择已失效，请重新发起。");
+                        }
+                    };
+                    await assertPending();
+                    const listing = await pending.picker.list(input.directoryToken, assertPending);
+                    await assertPending();
+                    pending.picker.assertListing(listing);
+                    json(response, 200, { requestId: input.requestId, ...listing });
                 }
                 else if (request.method === "POST" && match[2] === "confirm") {
                     const input = await body(request);
                     const pending = typeof input.requestId === "string" && grant.confirmations.get(input.requestId);
                     if (!pending ||
                         typeof input.allowed !== "boolean" ||
-                        Object.keys(input).some((key) => !["requestId", "allowed"].includes(key)))
+                        Object.keys(input).some((key) => !["requestId", "allowed", ...(pending?.picker ? ["directoryToken"] : [])].includes(key)) ||
+                        (input.allowed === false && input.directoryToken !== undefined))
                         error(400, "找不到这个待确认操作。");
                     if (!(await authorized(grant)))
                         error(410, "面板授权已失效。");
+                    if (pending.picker) {
+                        if (request.headers.origin !== grant.origin)
+                            error(403, "目录选择仅供当前宿主页面使用。");
+                        if (input.allowed) {
+                            if (pending.result === undefined) {
+                                if (now() >= pending.picker.expiresAt) {
+                                    pending.finish(false);
+                                    error(409, "目录选择已失效，请重新发起。");
+                                }
+                                pending.selection = pending.picker.select(input.directoryToken);
+                                pending.directoryToken = input.directoryToken;
+                            }
+                            else if (pending.result !== true ||
+                                input.directoryToken !== pending.directoryToken) {
+                                error(409, "目录选择已失效，请重新发起。");
+                            }
+                        }
+                    }
                     pending.finish(input.allowed);
                     json(response, 200, { accepted: true, allowed: pending.result });
                 }
@@ -1984,12 +2100,14 @@ export function createPanelRuntime(options) {
                 // including when the public site is behind HTTPS termination.
                 const source = publicPathPrefix + ASSETS + grant.asset + "/";
                 if (extname(path).toLowerCase() === ".html") {
-                    bytes = Buffer.from(injectBridge(bytes.toString("utf8"), source));
                     const resourceOrigin = grant.origin;
+                    bytes = Buffer.from(resolveMetaPolicySelf(injectBridge(bytes.toString("utf8"), source), resourceOrigin));
                     const assetSource = resourceOrigin + source;
                     // Panels export their own generated files (for example JSON backups).
                     // Download permission does not grant origin access, network fetches or popups.
                     // The embedding iframe must enable the same permission.
+                    // Forms need submission events and method=dialog for local UI. The
+                    // enforcing form-action policy still blocks every form navigation.
                     response.setHeader("Content-Security-Policy", "default-src 'none'; script-src " +
                         assetSource +
                         " 'wasm-unsafe-eval'; style-src " +
@@ -2002,7 +2120,7 @@ export function createPanelRuntime(options) {
                         assetSource +
                         " data:; connect-src " +
                         assetSource +
-                        "; object-src 'none'; frame-src 'none'; base-uri 'none'; form-action 'none'; sandbox allow-scripts allow-downloads; frame-ancestors " +
+                        "; object-src 'none'; frame-src 'none'; base-uri 'none'; form-action 'none'; sandbox allow-scripts allow-downloads allow-forms; frame-ancestors " +
                         resourceOrigin);
                     response.setHeader("Permissions-Policy", "camera=(), microphone=(), geolocation=(), display-capture=()");
                 }

package/dist/panels/tool-jobs-storage.d.ts

@@ -5,9 +5,13 @@ export declare class ToolJobStorage {
     private root;
     private identity;
     private nonce;
+    private ownerClaimFile;
     private readonly directories;
     constructor(configuredRoot: string);
     initialize(): Promise<void>;
+    private assertDeadOwner;
+    private acquireOwnerClaim;
+    private releaseOwnerClaim;
     directory(id?: string, work?: boolean, create?: boolean): Promise<string>;
     read(path: string, limit: number): Promise<unknown>;
     write(id: string, value: unknown, limit: number): Promise<void>;

package/dist/panels/tool-jobs-storage.js

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
 import { constants } from "node:fs";
-import { lstat, mkdir, open, realpath, rename, rm } from "node:fs/promises";
+import { lstat, mkdir, open, realpath, readdir, rename, rm, rmdir, unlink } from "node:fs/promises";
 import { dirname, isAbsolute, join } from "node:path";
 export function toolJobJson(value, limit) {
     let text;
@@ -20,6 +20,7 @@ export class ToolJobStorage {
     root = "";
     identity = "";
     nonce = "";
+    ownerClaimFile = "";
     directories = new Map();
     constructor(configuredRoot) {
         this.configuredRoot = configuredRoot;
@@ -33,43 +34,114 @@ export class ToolJobStorage {
             throw new Error("invalid tool job root");
         this.root = await realpath(this.configuredRoot);
         this.identity = `${initial.dev}:${initial.ino}`;
-        const lockPath = join(this.root, "owner.lock");
-        const create = () => open(lockPath, "wx", 0o600);
-        let lock;
+        this.nonce = randomUUID();
         try {
-            lock = await create();
+            await this.acquireOwnerClaim();
+            // Keep the previous file format as an interoperability barrier for older
+            // Hosts. All current Hosts hold the atomic directory claim before touching it.
+            const lockPath = join(this.root, "owner.lock");
+            try {
+                const current = (await this.read(lockPath, 1024));
+                this.assertDeadOwner(current.pid);
+                await rm(lockPath);
+            }
+            catch (error) {
+                if (error.code !== "ENOENT")
+                    throw error;
+            }
+            const lock = await open(lockPath, "wx", 0o600);
+            try {
+                await lock.writeFile(JSON.stringify({ pid: process.pid, nonce: this.nonce }));
+                await lock.sync();
+            }
+            finally {
+                await lock.close();
+            }
         }
         catch (error) {
-            if (error.code !== "EEXIST")
-                throw error;
-            const current = (await this.read(lockPath, 1024));
-            let alive = false;
-            if (Number.isSafeInteger(current.pid) && Number(current.pid) > 1) {
-                try {
-                    process.kill(Number(current.pid), 0);
-                    alive = true;
+            await this.releaseOwnerClaim();
+            this.nonce = "";
+            throw error;
+        }
+    }
+    assertDeadOwner(pid) {
+        if (!Number.isSafeInteger(pid) || Number(pid) <= 1) {
+            throw new Error("invalid tool job ownership lock");
+        }
+        try {
+            process.kill(Number(pid), 0);
+        }
+        catch (error) {
+            if (error.code === "ESRCH")
+                return;
+        }
+        throw new Error("tool job storage is already owned by a running Host");
+    }
+    async acquireOwnerClaim() {
+        const destination = join(this.root, "owner.claim");
+        const temporary = join(this.root, `.owner-${this.nonce}`);
+        const marker = `${this.nonce}.json`;
+        await mkdir(temporary, { mode: 0o700 });
+        try {
+            const file = await open(join(temporary, marker), "wx", 0o600);
+            try {
+                await file.writeFile(JSON.stringify({ pid: process.pid, nonce: this.nonce }));
+                await file.sync();
+            }
+            finally {
+                await file.close();
+            }
+            try {
+                await rename(temporary, destination);
+            }
+            catch (error) {
+                if (!["EEXIST", "ENOTEMPTY", "EPERM"].includes(error.code ?? ""))
+                    throw error;
+                const directory = await lstat(destination);
+                if (!directory.isDirectory() || directory.isSymbolicLink())
+                    throw new Error("invalid tool job ownership claim", { cause: error });
+                const entries = await readdir(destination);
+                if (entries.length > 1 || entries.some((entry) => !/^[a-f0-9-]{36}\.json$/.test(entry))) {
+                    throw new Error("invalid tool job ownership claim", { cause: error });
                 }
-                catch (cause) {
-                    if (cause.code !== "ESRCH")
-                        alive = true;
+                if (entries[0]) {
+                    const stalePath = join(destination, entries[0]);
+                    try {
+                        const current = (await this.read(stalePath, 1024));
+                        this.assertDeadOwner(current.pid);
+                        // Delete only the observed owner's unique marker. A delayed
+                        // reclaimer cannot unlink a new owner's different marker.
+                        await unlink(stalePath);
+                    }
+                    catch (cause) {
+                        if (cause.code !== "ENOENT")
+                            throw cause;
+                    }
                 }
+                // Never move the existing claim: a replacement may already own it.
+                // Some platforms cannot replace even an empty destination directory.
+                // rmdir is safe here: it cannot remove a newly published nonempty claim.
+                await rmdir(destination).catch((cause) => {
+                    if (cause.code !== "ENOENT")
+                        throw cause;
+                });
+                await rename(temporary, destination);
             }
-            else
-                throw new Error("invalid tool job ownership lock", { cause: error });
-            if (alive)
-                throw new Error("tool job storage is already owned by a running Host", { cause: error });
-            await rm(lockPath);
-            lock = await create();
-        }
-        this.nonce = randomUUID();
-        try {
-            await lock.writeFile(JSON.stringify({ pid: process.pid, nonce: this.nonce }));
-            await lock.sync();
+            this.ownerClaimFile = join(destination, marker);
         }
         finally {
-            await lock.close();
+            await rm(temporary, { recursive: true, force: true });
         }
     }
+    async releaseOwnerClaim() {
+        if (!this.ownerClaimFile)
+            return;
+        await unlink(this.ownerClaimFile).catch((error) => {
+            if (error.code !== "ENOENT")
+                throw error;
+        });
+        this.ownerClaimFile = "";
+    }
     async directory(id, work = false, create = false) {
         const info = await lstat(this.root);
         if (!info.isDirectory() ||
@@ -186,12 +258,17 @@ export class ToolJobStorage {
     async close() {
         if (!this.nonce)
             return;
-        const path = join(await this.directory(), "owner.lock");
-        const lock = (await this.read(path, 1024));
-        if (lock.nonce === this.nonce)
-            await rm(path);
-        this.nonce = "";
-        this.directories.clear();
+        try {
+            const path = join(await this.directory(), "owner.lock");
+            const lock = (await this.read(path, 1024));
+            if (lock.nonce === this.nonce)
+                await rm(path);
+        }
+        finally {
+            await this.releaseOwnerClaim();
+            this.nonce = "";
+            this.directories.clear();
+        }
     }
     async remove(id) {
         const path = await this.directory(id);

package/dist/panels/types.d.ts

@@ -1,97 +1 @@
-import type { GitPanelAppDiscoveryCandidate, GitPanelAppDiscoveryIssue, PanelAppPreview } from "@cjhyy/code-shell-core";
-export interface PanelCompatibility {
-    supported: boolean;
-    reasons: string[];
-}
-export interface PanelGitSource {
-    kind: "git";
-    url: string;
-    /** The original branch/tag, retained separately from the pinned archive commit. */
-    ref: string;
-    subdir?: string;
-    commit: string;
-}
-export interface ManagedPanel extends Omit<PanelAppPreview, "reviewToken" | "alreadyInstalled" | "warnings" | "source"> {
-    packageDigest?: string;
-    revision: string;
-    bound: boolean;
-    enabled: boolean;
-    globalDisabled: boolean;
-    updatable: boolean;
-    source: {
-        kind: "git" | "local";
-        label: string;
-        url?: string;
-        ref?: string;
-        commit?: string;
-        subdir?: string;
-    };
-    compatibility: PanelCompatibility;
-}
-export interface PanelPackageIssue {
-    id: string;
-    revision: string;
-    code: "package_unavailable";
-    version?: string;
-    packageDigest?: string;
-    bound: boolean;
-    globalDisabled: boolean;
-}
-export interface PanelSnapshot {
-    panels: ManagedPanel[];
-    issues?: PanelPackageIssue[];
-    workspace: string;
-    hasProject: boolean;
-    canRestorePackages?: boolean;
-}
-export interface PanelDiscovery {
-    panels: GitPanelAppDiscoveryCandidate[];
-    issues: GitPanelAppDiscoveryIssue[];
-    source: PanelGitSource;
-}
-export interface PanelReview {
-    reviewToken: string;
-    expiresAt: number;
-    kind: "install" | "update";
-    preview: Omit<PanelAppPreview, "reviewToken">;
-    source: PanelGitSource;
-    expectedRevision: string | null;
-    compatibility: PanelCompatibility;
-    /** The installed package selected for this project, when its manifest is available. */
-    installedVersion?: string;
-    /** Reviewed permissions of that same installed package; an empty array is a known baseline. */
-    installedPermissions?: PanelAppPreview["permissions"];
-}
-/** Trusted native hosts may review local sources without exposing paths to Web routes. */
-export type PanelProjectReview = Omit<PanelReview, "source">;
-export interface PanelOperationContext {
-    ownerId: string;
-    authorize: () => boolean | Promise<boolean>;
-}
-export interface PanelPackageVersion {
-    version: string;
-    packageDigest: string;
-    permissions: PanelAppPreview["permissions"];
-    compatibility: PanelCompatibility;
-}
-export interface PanelPackageHistory {
-    appId: string;
-    title: PanelAppPreview["title"];
-    expectedRevision: string;
-    current: {
-        version: string;
-        packageDigest?: string;
-        unavailable?: boolean;
-    };
-    versions: PanelPackageVersion[];
-    unavailablePackages: number;
-}
-export interface PanelPackageRestoreReview extends PanelPackageVersion {
-    appId: string;
-    title: PanelAppPreview["title"];
-    current: PanelPackageHistory["current"];
-    addedPermissions: PanelAppPreview["permissions"];
-    expectedRevision: string;
-    reviewToken: string;
-    expiresAt: number;
-}
+export type { PanelCompatibility, PanelGitSource, ManagedPanel, PanelPackageIssue, PanelSnapshot, PanelDiscovery, PanelReview, PanelProjectReview, PanelOperationContext, PanelPackageVersion, PanelPackageHistory, PanelPackageRestoreReview, } from "@cjhyy/code-shell-web/panels";

package/dist/remote-relay/connector.d.ts

@@ -19,6 +19,14 @@ export interface DeviceRelayConnectorOptions {
     /** Additional trusted CA for private installations; TLS verification stays enabled. */
     ca?: ConnectionOptions["ca"];
     onState?: (state: DeviceRelayState) => void;
+    /**
+     * Opt-in: lets the directory mint a one-time phone pairing token for its
+     * owner. Omitted, the feature is neither advertised nor accepted.
+     */
+    issuePairing?: () => {
+        token: string;
+        expiresAt: number;
+    };
 }
 export interface DeviceRelayConnector {
     /** Idempotent while running. Callers must await close before restarting. */