@ljwei-stak/dsh-model-route-bot 0.66.3 → 0.67.0

package/remote-computer-agent/dist/native-peer.ps1

@@ -2,6 +2,46 @@ param([ValidateSet('server','client','supervise','probe','protect')][string]$Mod
 $ErrorActionPreference = 'Stop'
 [Console]::InputEncoding = [System.Text.UTF8Encoding]::new($false, $true)
 [Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+$compilerPhase = $true
+try {
+  # Host-allocated compilation storage is separate from the CLI's private
+  # profile/TEMP. The root hint is not a peer credential or an execution grant.
+  $compilerRoot = $env:DSH_NATIVE_COMPILER_ROOT
+  $compilerScratch = $env:DSH_NATIVE_COMPILER_SCRATCH
+  if ([string]::IsNullOrEmpty($compilerRoot) -or [string]::IsNullOrEmpty($compilerScratch) -or
+      $compilerRoot.Length -gt 140 -or $compilerScratch.Length -gt 160 -or
+      -not [System.IO.Path]::IsPathRooted($compilerRoot) -or -not [System.IO.Path]::IsPathRooted($compilerScratch) -or
+      [System.IO.Path]::GetFileName($compilerRoot) -notmatch '^dshc-[a-f0-9]{16}$' -or
+      [System.IO.Path]::GetFileName($compilerScratch) -notmatch '^c-[A-Za-z0-9]{6}$' -or
+      -not [string]::Equals([System.IO.Path]::GetDirectoryName($compilerScratch), $compilerRoot, [System.StringComparison]::OrdinalIgnoreCase)) { throw 'COMPILER_STORAGE_INVALID' }
+  $ownerSid = [System.Security.Principal.WindowsIdentity]::GetCurrent().User
+  foreach ($compilerPath in @($compilerRoot, $compilerScratch)) {
+    $directory = [System.IO.DirectoryInfo]::new($compilerPath)
+    if (-not $directory.Exists -or ($directory.Attributes -band [System.IO.FileAttributes]::ReparsePoint) -ne 0) { throw 'COMPILER_STORAGE_INVALID' }
+    $security = [System.Security.AccessControl.DirectorySecurity]::new()
+    $security.SetAccessRuleProtection($true, $false)
+    $security.SetOwner($ownerSid)
+    $security.AddAccessRule([System.Security.AccessControl.FileSystemAccessRule]::new($ownerSid, 'FullControl', 'ContainerInherit,ObjectInherit', 'None', 'Allow'))
+    $directory.SetAccessControl($security)
+    $actual = $directory.GetAccessControl()
+    $rules = @($actual.GetAccessRules($true, $true, [System.Security.Principal.SecurityIdentifier]))
+    if (-not $actual.AreAccessRulesProtected -or $rules.Count -ne 1 -or $rules[0].IdentityReference.Value -ne $ownerSid.Value -or
+        $rules[0].AccessControlType -ne [System.Security.AccessControl.AccessControlType]::Allow -or
+        $rules[0].FileSystemRights -ne [System.Security.AccessControl.FileSystemRights]::FullControl) { throw 'COMPILER_ACL_UNCONFIRMED' }
+  }
+  if ([System.IO.File]::ReadAllText([System.IO.Path]::Combine($compilerRoot, '.dsh-root')) -ne ('dsh-native-compiler-v1:' + [System.IO.Path]::GetFileName($compilerRoot) + "`n") -or
+      [System.IO.File]::ReadAllText([System.IO.Path]::Combine($compilerScratch, '.dsh-owner')) -notmatch '^[a-f0-9]{32}$') { throw 'COMPILER_STORAGE_INVALID' }
+  $compilerParameters = [System.CodeDom.Compiler.CompilerParameters]::new()
+  $compilerParameters.GenerateInMemory = $true
+  $compilerParameters.GenerateExecutable = $false
+  $compilerParameters.TempFiles = [System.CodeDom.Compiler.TempFileCollection]::new($compilerScratch, $false)
+  [void]$compilerParameters.ReferencedAssemblies.Add('System.dll')
+  [void]$compilerParameters.ReferencedAssemblies.Add('System.Core.dll')
+  $privateTemps = @{ TEMP = $env:TEMP; TMP = $env:TMP; TMPDIR = $env:TMPDIR }
+  try {
+    # csc's Win32 resource generator also uses the process TEMP; change it only
+    # for compilation, then restore it before admitting any CLI process.
+    $env:TEMP = $compilerScratch; $env:TMP = $compilerScratch; $env:TMPDIR = $compilerScratch
 # Only packaged source is compiled. No supplied command or script is evaluated.
 Add-Type -TypeDefinition @'
 using System;
@@ -286,8 +326,12 @@ public static class DshNativePeer {
     return result;
   }
 }
-'@
-try {
+'@ -CompilerParameters $compilerParameters
+  } finally {
+    foreach ($key in @('TEMP','TMP','TMPDIR')) { [System.Environment]::SetEnvironmentVariable($key, $privateTemps[$key], 'Process') }
+    [System.Environment]::SetEnvironmentVariable('DSH_NATIVE_COMPILER_SCRATCH', $null, 'Process')
+  }
+  $compilerPhase = $false
   if ($Mode -eq 'probe') {
     $result = [DshNativePeer]::ProbeJob()
     $response = @{ peer = 'windows-kernel-pid'; supervisor = 'windows-job'; available = ($result -eq 'OK') }
@@ -308,4 +352,8 @@ try {
   elseif ($Mode -eq 'server') { [DshNativePeer]::Server($spec.endpoint,[int]$spec.rootPid,[string]$spec.rootStart,[int]$spec.ttlMs) }
   elseif ($Mode -eq 'client') { [DshNativePeer]::Client($spec.endpoint,[int]$spec.serverPid,[string]$spec.serverStart,[int]$spec.ttlMs) }
   else { [DshNativePeer]::Supervise($spec.executable,[string[]]$spec.args,$spec.cwd,[int]$spec.ttlMs) }
-} catch { [Console]::Error.WriteLine('NATIVE_PEER_REFUSED: ' + $_.Exception.GetBaseException().Message); exit 2 }
+} catch {
+  $code = if ($compilerPhase) { 'NATIVE_COMPILER_FAILED' } else { $_.Exception.GetBaseException().Message }
+  if ($code -notmatch '^[A-Z][A-Z0-9_]{0,79}$') { $code = 'NATIVE_PEER_FAILED' }
+  [Console]::Error.WriteLine('NATIVE_PEER_REFUSED: ' + $code); exit 2
+}

package/remote-computer-agent/package-lock.json

@@ -1,15 +1,16 @@
 {
   "name": "@ljwei-stak/dsh-remote-computer-agent",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@ljwei-stak/dsh-remote-computer-agent",
-      "version": "0.1.1",
+      "version": "0.1.2",
       "dependencies": {
         "@modelcontextprotocol/server": "2.4.0",
         "better-sqlite3": "13.0.3",
+        "qrcode": "1.5.4",
         "ws": "8.22.1"
       },
       "bin": {
@@ -492,6 +493,30 @@
         "node": ">=20"
       }
     },
+    "node_modules/ansi-regex": {
+      "version": "5.0.1",
+      "resolved": "https://registry.npmjs.org/ansi-regex/-/ansi-regex-5.0.1.tgz",
+      "integrity": "sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/ansi-styles": {
+      "version": "4.3.0",
+      "resolved": "https://registry.npmjs.org/ansi-styles/-/ansi-styles-4.3.0.tgz",
+      "integrity": "sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==",
+      "license": "MIT",
+      "dependencies": {
+        "color-convert": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/ansi-styles?sponsor=1"
+      }
+    },
     "node_modules/better-sqlite3": {
       "version": "13.0.3",
       "resolved": "https://registry.npmjs.org/better-sqlite3/-/better-sqlite3-13.0.3.tgz",
@@ -504,6 +529,65 @@
         "node": ">=22"
       }
     },
+    "node_modules/camelcase": {
+      "version": "5.3.1",
+      "resolved": "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz",
+      "integrity": "sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/cliui": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/cliui/-/cliui-6.0.0.tgz",
+      "integrity": "sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==",
+      "license": "ISC",
+      "dependencies": {
+        "string-width": "^4.2.0",
+        "strip-ansi": "^6.0.0",
+        "wrap-ansi": "^6.2.0"
+      }
+    },
+    "node_modules/color-convert": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/color-convert/-/color-convert-2.0.1.tgz",
+      "integrity": "sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==",
+      "license": "MIT",
+      "dependencies": {
+        "color-name": "~1.1.4"
+      },
+      "engines": {
+        "node": ">=7.0.0"
+      }
+    },
+    "node_modules/color-name": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/color-name/-/color-name-1.1.4.tgz",
+      "integrity": "sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==",
+      "license": "MIT"
+    },
+    "node_modules/decamelize": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz",
+      "integrity": "sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/dijkstrajs": {
+      "version": "1.0.3",
+      "resolved": "https://registry.npmjs.org/dijkstrajs/-/dijkstrajs-1.0.3.tgz",
+      "integrity": "sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==",
+      "license": "MIT"
+    },
+    "node_modules/emoji-regex": {
+      "version": "8.0.0",
+      "resolved": "https://registry.npmjs.org/emoji-regex/-/emoji-regex-8.0.0.tgz",
+      "integrity": "sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==",
+      "license": "MIT"
+    },
     "node_modules/esbuild": {
       "version": "0.28.2",
       "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.28.2.tgz",
@@ -546,6 +630,49 @@
         "@esbuild/win32-x64": "0.28.2"
       }
     },
+    "node_modules/find-up": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/find-up/-/find-up-4.1.0.tgz",
+      "integrity": "sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==",
+      "license": "MIT",
+      "dependencies": {
+        "locate-path": "^5.0.0",
+        "path-exists": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/get-caller-file": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz",
+      "integrity": "sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==",
+      "license": "ISC",
+      "engines": {
+        "node": "6.* || 8.* || >= 10.*"
+      }
+    },
+    "node_modules/is-fullwidth-code-point": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-3.0.0.tgz",
+      "integrity": "sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/locate-path": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/locate-path/-/locate-path-5.0.0.tgz",
+      "integrity": "sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==",
+      "license": "MIT",
+      "dependencies": {
+        "p-locate": "^4.1.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/node-addon-api": {
       "version": "8.9.2",
       "resolved": "https://registry.npmjs.org/node-addon-api/-/node-addon-api-8.9.2.tgz",
@@ -555,6 +682,51 @@
         "node": "^18 || ^20 || >= 21"
       }
     },
+    "node_modules/p-limit": {
+      "version": "2.3.0",
+      "resolved": "https://registry.npmjs.org/p-limit/-/p-limit-2.3.0.tgz",
+      "integrity": "sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==",
+      "license": "MIT",
+      "dependencies": {
+        "p-try": "^2.0.0"
+      },
+      "engines": {
+        "node": ">=6"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
+    "node_modules/p-locate": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/p-locate/-/p-locate-4.1.0.tgz",
+      "integrity": "sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==",
+      "license": "MIT",
+      "dependencies": {
+        "p-limit": "^2.2.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/p-try": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz",
+      "integrity": "sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/path-exists": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/path-exists/-/path-exists-4.0.0.tgz",
+      "integrity": "sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/playwright": {
       "version": "1.64.1",
       "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.1.tgz",
@@ -584,6 +756,99 @@
         "node": ">=20"
       }
     },
+    "node_modules/pngjs": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/pngjs/-/pngjs-5.0.0.tgz",
+      "integrity": "sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/qrcode": {
+      "version": "1.5.4",
+      "resolved": "https://registry.npmjs.org/qrcode/-/qrcode-1.5.4.tgz",
+      "integrity": "sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==",
+      "license": "MIT",
+      "dependencies": {
+        "dijkstrajs": "^1.0.1",
+        "pngjs": "^5.0.0",
+        "yargs": "^15.3.1"
+      },
+      "bin": {
+        "qrcode": "bin/qrcode"
+      },
+      "engines": {
+        "node": ">=10.13.0"
+      }
+    },
+    "node_modules/require-directory": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz",
+      "integrity": "sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/require-main-filename": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz",
+      "integrity": "sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==",
+      "license": "ISC"
+    },
+    "node_modules/set-blocking": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz",
+      "integrity": "sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==",
+      "license": "ISC"
+    },
+    "node_modules/string-width": {
+      "version": "4.2.3",
+      "resolved": "https://registry.npmjs.org/string-width/-/string-width-4.2.3.tgz",
+      "integrity": "sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==",
+      "license": "MIT",
+      "dependencies": {
+        "emoji-regex": "^8.0.0",
+        "is-fullwidth-code-point": "^3.0.0",
+        "strip-ansi": "^6.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/strip-ansi": {
+      "version": "6.0.1",
+      "resolved": "https://registry.npmjs.org/strip-ansi/-/strip-ansi-6.0.1.tgz",
+      "integrity": "sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==",
+      "license": "MIT",
+      "dependencies": {
+        "ansi-regex": "^5.0.1"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/which-module": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/which-module/-/which-module-2.0.1.tgz",
+      "integrity": "sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==",
+      "license": "ISC"
+    },
+    "node_modules/wrap-ansi": {
+      "version": "6.2.0",
+      "resolved": "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-6.2.0.tgz",
+      "integrity": "sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==",
+      "license": "MIT",
+      "dependencies": {
+        "ansi-styles": "^4.0.0",
+        "string-width": "^4.1.0",
+        "strip-ansi": "^6.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/ws": {
       "version": "8.22.1",
       "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.1.tgz",
@@ -605,6 +870,47 @@
         }
       }
     },
+    "node_modules/y18n": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/y18n/-/y18n-4.0.3.tgz",
+      "integrity": "sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==",
+      "license": "ISC"
+    },
+    "node_modules/yargs": {
+      "version": "15.4.1",
+      "resolved": "https://registry.npmjs.org/yargs/-/yargs-15.4.1.tgz",
+      "integrity": "sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==",
+      "license": "MIT",
+      "dependencies": {
+        "cliui": "^6.0.0",
+        "decamelize": "^1.2.0",
+        "find-up": "^4.1.0",
+        "get-caller-file": "^2.0.1",
+        "require-directory": "^2.1.1",
+        "require-main-filename": "^2.0.0",
+        "set-blocking": "^2.0.0",
+        "string-width": "^4.2.0",
+        "which-module": "^2.0.0",
+        "y18n": "^4.0.0",
+        "yargs-parser": "^18.1.2"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/yargs-parser": {
+      "version": "18.1.3",
+      "resolved": "https://registry.npmjs.org/yargs-parser/-/yargs-parser-18.1.3.tgz",
+      "integrity": "sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==",
+      "license": "ISC",
+      "dependencies": {
+        "camelcase": "^5.0.0",
+        "decamelize": "^1.2.0"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/zod": {
       "version": "4.6.7",
       "resolved": "https://registry.npmjs.org/zod/-/zod-4.6.7.tgz",

package/remote-computer-agent/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ljwei-stak/dsh-remote-computer-agent",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "private": true,
   "type": "module",
   "bin": {
@@ -16,6 +16,7 @@
   "dependencies": {
     "@modelcontextprotocol/server": "2.4.0",
     "better-sqlite3": "13.0.3",
+    "qrcode": "1.5.4",
     "ws": "8.22.1"
   },
   "optionalDependencies": {

package/remote-computer-agent/pair-device.ps1

@@ -0,0 +1,20 @@
+# Regenerates an unredeemed invitation without rewriting tasks, roots or permissions.
+[CmdletBinding()]
+param([switch]$OpenPage,[switch]$ResetPairing)
+$ErrorActionPreference = 'Stop'
+try {
+  $launch = Get-Content -Raw -LiteralPath (Join-Path $PSScriptRoot 'launch.json') | ConvertFrom-Json
+  $connection = Get-Content -Raw -LiteralPath (Join-Path $PSScriptRoot 'connection.json') | ConvertFrom-Json
+  if ($connection.pairingMode -ne 'secure') { throw 'This installation uses compatibility pairing.' }
+  if ($ResetPairing) {
+    & $launch.node $launch.cli revoke $launch.config $connection.clientId | Out-Null
+    if ($LASTEXITCODE -ne 0) { throw 'The old pairing could not be revoked; no new invitation was created.' }
+    Write-Host 'The previous pairing was revoked. Its connections and grants are no longer valid.'
+  }
+  $page = Join-Path $PSScriptRoot 'private/pairing.html'
+  $lines = @(& $launch.node $launch.cli invite-page $launch.config $connection.clientId $connection.ceilingFile $connection.endpoint $page)
+  if ($LASTEXITCODE -ne 0) { throw 'Check paired devices on this computer. To revoke a pairing whose credential the Host lost, run: pair-device.cmd -ResetPairing. This disconnects the previous pairing.' }
+  $result = ($lines -join "`n") | ConvertFrom-Json
+  Write-Host ('Pairing page: ' + $result.pageFile)
+  if ($OpenPage) { Start-Process -FilePath $result.pageFile -WindowStyle Normal }
+} catch { Write-Error $_.Exception.Message; exit 1 }

package/remote-computer-agent/setup.ps1

@@ -88,7 +88,7 @@ try {
     # Snapshot only installer-owned files, never the running SQLite database.
     $privateDir = Join-Path $InstallRoot 'private'; PrivateDirectory $privateDir
     $backupDir = Join-Path $privateDir ('backup-' + (Get-Date -Format 'yyyyMMdd-HHmmss') + '-' + [Guid]::NewGuid().ToString('N').Substring(0,6)); PrivateDirectory $backupDir
-    foreach ($relative in @('config.json','launch.json','connection.json','private/pairing.private.json','private/native.secret','private/ceiling.json')) {
+    foreach ($relative in @('config.json','launch.json','connection.json','private/pairing.private.json','private/pairing.html','private/pairing.html.private.json','private/native.secret','private/ceiling.json')) {
       $source = Join-Path $InstallRoot $relative
       if (Test-Path -LiteralPath $source -PathType Leaf) { $target = Join-Path $backupDir ($relative.Replace('/','-')); Copy-Item -LiteralPath $source -Destination $target; PrivateAcl $target }
     }
@@ -112,17 +112,20 @@ try {
   if (!$HelperPath) { foreach ($candidate in @((Join-Path $PackageRoot 'helpers/dsh-desktop-helper.exe'),(Join-Path $PackageRoot 'dsh-desktop-helper.exe'))) { if (Test-Path -LiteralPath $candidate -PathType Leaf) { $HelperPath=$candidate; break } } }
   if (!$HelperPath -or !(Test-Path -LiteralPath $HelperPath -PathType Leaf)) { throw 'The interactive desktop helper is missing from the package.' }
   $HelperPath = [IO.Path]::GetFullPath($HelperPath)
-  $workspace = [IO.Path]::GetFullPath((Answer 'workspace' 'Workspace directory for this cloud computer' (Join-Path $env:USERPROFILE 'DSH-Workspace')))
-  $bindAddress = [string](Answer 'bindAddress' 'Private VPN IP to listen on, or 127.0.0.1 for local use' '127.0.0.1')
+  $pairingMode = [string](Answer 'pairingMode' 'Pairing mode: secure for a short invitation, or legacy for an existing Host' 'secure')
+  if ($pairingMode -notin @('secure','legacy')) { throw 'Choose secure or legacy pairing.' }
+  $securePairing = $pairingMode -eq 'secure'
+  $workspace = [IO.Path]::GetFullPath((Answer 'workspace' 'Shared workspace directory on this computer' (Join-Path $env:USERPROFILE 'DSH-Workspace')))
+  $bindAddress = [string](Answer 'bindAddress' 'One local IP to listen on, or 127.0.0.1 for local use' '127.0.0.1')
   $parsedAddress = $null; if (![Net.IPAddress]::TryParse($bindAddress, [ref]$parsedAddress) -or $bindAddress -in @('0.0.0.0','::')) { throw 'Supply one concrete local/private VPN IP address.' }
   $loopbackBind = [Net.IPAddress]::IsLoopback($parsedAddress)
-  $protectedTunnel = if ($loopbackBind) { $false } else { YesNo 'protectedTunnel' 'This address is on your configured private WireGuard/Tailscale network. Confirm y/n' }
-  if (!$loopbackBind -and !$protectedTunnel) { throw 'Configure a private VPN or HTTPS reverse proxy before exposing this Agent.' }
+  $protectedTunnel = if ($loopbackBind -or $securePairing) { $false } else { YesNo 'protectedTunnel' 'This address is on your configured private WireGuard/Tailscale network. Confirm y/n' }
+  if (!$loopbackBind -and !$protectedTunnel -and !$securePairing) { throw 'Configure a private VPN or HTTPS reverse proxy before exposing this Agent.' }
   $port = [int](Answer 'port' 'Agent port' 9701); if ($port -lt 1 -or $port -gt 65535) { throw 'Invalid port.' }
   $displayHost = if ($bindAddress.Contains(':')) { "[$bindAddress]" } else { $bindAddress }
   $endpoint = [string](Answer 'endpoint' 'Agent URL reachable from your Host computer' ("http://{0}:{1}" -f $displayHost,$port))
   $endpointUri = $null; if (![Uri]::TryCreate($endpoint, [UriKind]::Absolute, [ref]$endpointUri) -or $endpointUri.Scheme -notin @('http','https') -or $endpointUri.UserInfo -or $endpointUri.Query -or $endpointUri.Fragment -or $endpointUri.AbsolutePath -ne '/') { throw 'Supply an http(s) Agent base URL without credentials, query or path.' }
-  if ($endpointUri.Scheme -eq 'http' -and !$endpointUri.IsLoopback -and !$protectedTunnel) { throw 'HTTP remote endpoints require your explicitly confirmed private VPN.' }
+  if ($endpointUri.Scheme -eq 'http' -and !$endpointUri.IsLoopback -and !$protectedTunnel -and !$securePairing) { throw 'HTTP remote endpoints require your explicitly confirmed private VPN.' }
   $managed = YesNo 'hostManagedBots' 'Allow this trusted Host to manage all of its team Bots (recommended for automatic Bot setup)? Explicit y enables it'
   $botIds = @(); if (!$managed) { $botIds = @(([string](Answer 'botIds' 'Allowed Bot IDs, separated by commas' '')).Split(',') | ForEach-Object { $_.Trim() } | Where-Object { $_ }); if (!$botIds.Count) { throw 'At least one fixed Bot ID is required when team management is disabled.' } }
   $clientId = [string](Answer 'clientId' 'Name for this paired Host' 'desktop-host')
@@ -137,7 +140,7 @@ try {
   if (!(Test-Path -LiteralPath $workspace)) { New-Item -ItemType Directory -Path $workspace -Force | Out-Null }
   $nativeSecret=Join-Path $privateDir 'native.secret'; $bytes=New-Object byte[] 32; $rng=[Security.Cryptography.RandomNumberGenerator]::Create(); try { $rng.GetBytes($bytes) } finally { $rng.Dispose() }; PrivateText $nativeSecret ([Convert]::ToBase64String($bytes).TrimEnd('=').Replace('+','-').Replace('/','_'))
   $powershellExe=Join-Path $env:SystemRoot 'System32/WindowsPowerShell/v1.0/powershell.exe'
-  $config=@{dataDir=(Join-Path $privateDir 'data');roots=@{project=$workspace};isolation='application';network=@{mode=$(if($loopbackBind){'loopback'}else{'wireguard'});host=$bindAddress;port=$port;allowedHosts=@(@($endpointUri.Authority,("{0}:{1}" -f $displayHost,$port))|Select-Object -Unique)};desktop=@{pipeName="dsh-desktop-$installationId";secretFile=$nativeSecret};browserOrigins=@();executables=@{}}
+  $config=@{dataDir=(Join-Path $privateDir 'data');roots=@{project=$workspace};isolation='application';network=@{mode=$(if($securePairing){'e2e'}elseif($loopbackBind){'loopback'}else{'wireguard'});host=$bindAddress;port=$port;allowedHosts=@(@($endpointUri.Authority,("{0}:{1}" -f $displayHost,$port))|Select-Object -Unique)};desktop=@{pipeName="dsh-desktop-$installationId";secretFile=$nativeSecret};browserOrigins=@();executables=@{}}
   if ($protectedTunnel) { $config.network.protectedTunnel=$true }
   if ($browserOrigin) { $config.browserOrigins=@($browserOrigin) }
   $jobHelper=Join-Path (Split-Path -Parent $HelperPath) 'dsh-process-job.exe'
@@ -146,16 +149,27 @@ try {
   $toolNames=@('machine_ping','fs_list','fs_read','fs_write','operation_status','operation_cancel','artifact_stat','artifact_read','worktree_create','worktree_diff','worktree_integrate','browser_open','browser_snapshot','browser_click','browser_type','browser_script','browser_upload','browser_download','browser_close','desktop_screenshot','desktop_click','desktop_type','desktop_key','desktop_scroll')
   if ($allowCommands) { $toolNames += 'shell_exec' }
   $ceilingFile=Join-Path $privateDir 'ceiling.json'; PrivateJson $ceilingFile @{botIds=$botIds;hostManagedBots=$managed;roots=@('project');tools=$toolNames}
-  # Capture CLI pairing output in memory. A pairing token is never printed.
-  $pairLines=@(& $NodePath $cliFile pair $configFile $clientId $ceilingFile);if($LASTEXITCODE -ne 0){throw 'Local pairing failed; check the complete package and private configuration.'}
-  $paired=($pairLines -join "`n")|ConvertFrom-Json
-  if ($paired.token -notmatch '^[A-Za-z0-9_-]{43}$' -or !$paired.machineId) { throw 'Invalid local pairing receipt.' }
-  $pairFile=Join-Path $privateDir 'pairing.private.json'
-  $pairExport=@{schemaVersion=1;agentApiMajor=1;machineId=$paired.machineId;clientId=$paired.clientId;secretRef=$paired.secretRef;token=$paired.token;endpoint=$endpoint.TrimEnd('/');protectedTunnel=$protectedTunnel;hostManagedBots=$managed;botIds=$botIds;rootIds=@('project');tools=$toolNames}
-  PrivateJson $pairFile $pairExport
-  PrivateJson (Join-Path $InstallRoot 'connection.json') @{schemaVersion=1;machineId=$paired.machineId;clientId=$clientId;endpoint=$pairExport.endpoint;protectedTunnel=$protectedTunnel;hostManagedBots=$managed;botIds=$botIds;rootIds=@('project');tools=$toolNames;pairingFile=$pairFile}
+  if ($securePairing) {
+    $identityLines=@(& $NodePath $cliFile identity $configFile);if($LASTEXITCODE -ne 0){throw 'Cannot initialize the device identity.'}
+    $paired=($identityLines -join "`n")|ConvertFrom-Json
+    $pairFile=Join-Path $privateDir 'pairing.html.private.json'
+  } else {
+    # Compatibility path: a long-term pairing token is never printed.
+    $pairLines=@(& $NodePath $cliFile pair $configFile $clientId $ceilingFile);if($LASTEXITCODE -ne 0){throw 'Local pairing failed; check the complete package and private configuration.'}
+    $paired=($pairLines -join "`n")|ConvertFrom-Json
+    if ($paired.token -notmatch '^[A-Za-z0-9_-]{43}$' -or !$paired.machineId) { throw 'Invalid local pairing receipt.' }
+    $pairFile=Join-Path $privateDir 'pairing.private.json'
+    $pairExport=@{schemaVersion=1;agentApiMajor=1;machineId=$paired.machineId;clientId=$paired.clientId;secretRef=$paired.secretRef;token=$paired.token;endpoint=$endpoint.TrimEnd('/');protectedTunnel=$protectedTunnel;hostManagedBots=$managed;botIds=$botIds;rootIds=@('project');tools=$toolNames}
+    PrivateJson $pairFile $pairExport
+  }
+  PrivateJson (Join-Path $InstallRoot 'connection.json') @{schemaVersion=1;machineId=$paired.machineId;clientId=$clientId;endpoint=$endpoint.TrimEnd('/');protectedTunnel=$protectedTunnel;hostManagedBots=$managed;botIds=$botIds;rootIds=@('project');tools=$toolNames;pairingFile=$pairFile;pairingMode=$pairingMode;ceilingFile=$ceilingFile}
   PrivateJson (Join-Path $InstallRoot 'launch.json') @{node=$NodePath;cli=$cliFile;config=$configFile;packageRoot=$PackageRoot;stdout=(Join-Path $privateDir 'agent.stdout.log');stderr=(Join-Path $privateDir 'agent.stderr.log')}
   $launcher=Join-Path $InstallRoot 'launch-agent.ps1';Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'launch-agent.ps1') -Destination $launcher;PrivateAcl $launcher
+  if ($securePairing) {
+    $pairLauncher=Join-Path $InstallRoot 'pair-device.ps1';Copy-Item -LiteralPath (Join-Path $PSScriptRoot 'pair-device.ps1') -Destination $pairLauncher;PrivateAcl $pairLauncher
+    $pairCmd = @('@echo off', 'powershell.exe -NoLogo -NoProfile -ExecutionPolicy Bypass -File "%~dp0pair-device.ps1" -OpenPage %*', 'if errorlevel 1 pause') -join [Environment]::NewLine
+    PrivateText (Join-Path $InstallRoot 'pair-device.cmd') $pairCmd
+  }
   $agentXml=TaskXml $powershellExe ('-NoLogo -NoProfile -NonInteractive -WindowStyle Hidden -ExecutionPolicy Bypass -File "'+$launcher+'"') $InstallRoot
   $desktopXml=TaskXml $HelperPath ('--desktop-mode full --pipe '+$config.desktop.pipeName+' --secret-file "'+$nativeSecret+'"') (Split-Path -Parent $HelperPath)
   PrivateText (Join-Path $privateDir 'agent-task.xml') $agentXml;PrivateText (Join-Path $privateDir 'desktop-task.xml') $desktopXml
@@ -164,7 +178,15 @@ try {
   if (!$NoStart -and (YesNo 'startNow' 'Start the desktop helper and Agent now?' $true)) {
     foreach($taskName in @($desktopTask,$agentTask)){if($MockTaskRegistry){continue};Start-ScheduledTask -TaskName $taskName}
   }
+  if ($securePairing) {
+    $inviteLines=@(& $NodePath $cliFile invite-page $configFile $clientId $ceilingFile $endpoint (Join-Path $privateDir 'pairing.html'))
+    if ($LASTEXITCODE -ne 0) { throw 'Services were configured; invitation creation failed. Run pair-device.cmd to try again.' }
+    $inviteReceipt=($inviteLines -join "`n")|ConvertFrom-Json
+    PrivateAcl $inviteReceipt.pageFile;PrivateAcl $inviteReceipt.pairingFile
+    Write-Host ('Open the local pairing page: ' + $inviteReceipt.pageFile)
+    Write-Host 'This invitation lasts two minutes. Run pair-device.cmd to refresh an unredeemed invitation.'
+  }
   Write-Host "Configured user-owned cloud computer at $InstallRoot"
   Write-Host "Import this private pairing file in your Host app: $pairFile"
-  Write-Host 'The token stays in that protected file. Keep this Windows user signed in for full desktop access.'
+  Write-Host 'Keep this Windows user signed in for full desktop access.'
 } catch { Write-Error ('Setup stopped: ' + $_.Exception.Message); exit 1 }

package/remote-computer-agent/src/cli.ts

@@ -5,9 +5,10 @@ import { Agent } from './agent.js'
 import { Store } from './store.js'
 import { serve } from './transport.js'
 import { fail } from './protocol.js'
+import { writePairingPage } from './pairing-page.js'
 const [command,configPath,...args]=process.argv.slice(2)
 try{
-  if(!configPath)fail('USAGE: dsh-remote-agent init|serve|pair|rotate|revoke <config.json> [clientId ceiling.json]')
+  if(!configPath)fail('USAGE: dsh-remote-agent init|serve|identity|devices|invite|invite-page|pair|rotate|revoke <config.json> [clientId ceiling.json endpoint page.html]')
   const file=resolve(configPath)
   if(command==='init'){
     const root=resolve(args[0]??'.');const config={dataDir:join(dirname(file),'data'),roots:{project:root},isolation:'application',network:{mode:'loopback',host:'127.0.0.1',port:9701},executables:{node:process.execPath},browserOrigins:[]}
@@ -15,11 +16,31 @@ try{
   }else{
     const config=JSON.parse(await readFile(file,'utf8'))
     if(command==='serve'){
+      let invitation:any
+      if(args.length){
+        if(args[0]!=='--invite'||args.length!==4)fail('USAGE: serve <config.json> --invite <clientId> <ceiling.json> <endpoint>')
+        const local=new Store(config.dataDir,undefined,{admin:true})
+        try{const ceiling=JSON.parse(await readFile(resolve(args[2]),'utf8'));for(const root of ceiling.roots??[])if(!config.roots[root])fail('UNKNOWN_ROOT');invitation=local.invite(args[1],ceiling,{endpoint:args[3]})}finally{local.close()}
+      }
       const agent=new Agent(config);let handle:any;try{handle=await serve(agent,config.network)}catch(e){await agent.close();throw e}
-      console.log(JSON.stringify({machineId:agent.store.machineId,listening:handle.address,protocols:handle.supportedMcpVersions}));let stopping=false
+      console.log(JSON.stringify({machineId:agent.store.machineId,listening:handle.address,protocols:handle.supportedMcpVersions}));if(invitation)console.log(JSON.stringify(invitation));let stopping=false
       const stop=async()=>{if(stopping)return;stopping=true;await handle.close();await agent.close()};process.once('SIGINT',()=>void stop());process.once('SIGTERM',()=>void stop())
     }else{
-      const store=new Store(config.dataDir,undefined,{admin:true});try{let result:any;if(command==='pair'){const ceiling=JSON.parse(await readFile(resolve(args[1]),'utf8'));for(const root of ceiling.roots??[])if(!config.roots[root])fail('UNKNOWN_ROOT');result=store.pair(args[0],ceiling)}else if(command==='rotate')result=store.rotate(args[0]);else if(command==='revoke'){store.revoke(args[0]);result={revoked:true}}else fail('UNKNOWN_COMMAND');console.log(JSON.stringify(result))}finally{store.close()}
+      const store=new Store(config.dataDir,undefined,{admin:true})
+      try{
+        let result:any
+        if(['pair','invite','invite-page'].includes(command)){
+          if(!args[0]||!args[1]||command==='invite-page'&&!args[3])fail('PAIRING_ARGUMENTS_REQUIRED')
+          const ceiling=JSON.parse(await readFile(resolve(args[1]),'utf8'));for(const root of ceiling.roots??[])if(!config.roots[root])fail('UNKNOWN_ROOT')
+          result=command==='pair'?store.pair(args[0],ceiling):store.invite(args[0],ceiling,{endpoint:args[2]})
+          if(command==='invite-page')result=await writePairingPage(result,args[3])
+        }else if(command==='identity')result={machineId:store.machineId,transport:store.pairing.identity()}
+        else if(command==='devices')result={machineId:store.machineId,devices:store.db.prepare('SELECT id,revision,revoked,ceiling FROM clients ORDER BY id').all().map((row:any)=>({clientId:row.id,revision:row.revision,revoked:!!row.revoked,ceiling:JSON.parse(row.ceiling)}))}
+        else if(command==='rotate')result=store.rotate(args[0])
+        else if(command==='revoke'){store.revoke(args[0]);result={revoked:true}}
+        else fail('UNKNOWN_COMMAND')
+        console.log(JSON.stringify(result))
+      }finally{store.close()}
     }
   }
 }catch(e:any){console.error(e.code??'AGENT_START_FAILED');process.exitCode=1}