@petercjl/tuda 0.1.0 → 0.1.1

package/capabilities.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "name": "@petercjl/tuda",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "kind": "cli-skill",
   "skills": [
     "using-tuda"
@@ -438,6 +438,15 @@
       "activation": "next-connection",
       "compatibility": "same-minor-for-0.x-same-major-for-1.x",
       "failure": "keep-active"
+    },
+    "sharedDesktopSession": {
+      "contract": 1,
+      "authScope": "connection",
+      "preservesDesktopSession": true,
+      "transport": "private-file-pkce-with-connection-secret",
+      "sessionPersistence": "memory-only",
+      "space": "enterprise",
+      "source": "codex-own"
     }
   }
 }

package/dist/board-plugin.js

@@ -17039,6 +17039,7 @@ var StdioServerTransport = class {
 };
 
 // src/board-plugin.ts
+import { randomBytes, createHash as createHash2 } from "node:crypto";
 import { readFile as readFile3, stat } from "node:fs/promises";
 import path4 from "node:path";
 
@@ -17361,6 +17362,8 @@ var userData = process.env.TUDA_USER_DATA_PATH || defaultUserDataPath();
 var fixedSpace = process.env.TUDA_SPACE || process.env.TUDA_PLUGIN_SPACE;
 if (fixedSpace && !["personal", "enterprise"].includes(fixedSpace)) throw new Error("INVALID_SPACE");
 var authenticatedInstance;
+var authenticatedGrant;
+var connectionSecret = process.env.TUDA_AUTH_HANDOFF_FILE ? randomBytes(32).toString("hex") : void 0;
 async function local(route, payload) {
   let info;
   try {
@@ -17371,33 +17374,36 @@ async function local(route, payload) {
   if (!Number.isInteger(info.port) || info.port < 1 || info.port > 65535 || typeof info.token !== "string" || !/^[A-Za-z0-9_-]{20,100}$/.test(info.token)) throw new Error("INVALID_LOCAL_BRIDGE");
   const response = await fetch(`http://127.0.0.1:${info.port}${route}`, {
     method: "POST",
-    headers: { authorization: `Bearer ${info.token}`, "content-type": "application/json" },
+    headers: { authorization: `Bearer ${info.token}`, "content-type": "application/json", ...connectionSecret ? { "x-tuda-plugin-session": connectionSecret } : {} },
     body: JSON.stringify(payload),
     signal: AbortSignal.timeout(6e4)
   });
   const result = await response.json();
-  if (!response.ok) throw new Error(route === "/board-plugin/auth" ? "AUTH_HANDOFF_FAILED" : result.error || "BOARD_PLUGIN_FAILED");
+  if (!response.ok) throw new Error(result.error || (route === "/board-plugin/auth" ? "AUTH_HANDOFF_FAILED" : "BOARD_PLUGIN_FAILED"));
   return result.result;
 }
 async function ready() {
   await connect({ userDataPath: userData, appRoot: process.env.TUDA_APP_PATH, noLaunch: process.env.TUDA_NO_LAUNCH === "1", startupTimeoutMs: Number(process.env.TUDA_STARTUP_TIMEOUT_MS ?? 12e4) });
   const instanceId = await desktopInstance(userData);
-  if (authenticatedInstance !== instanceId && process.env.TUDA_AUTH_HANDOFF_FILE) {
+  if (process.env.TUDA_AUTH_HANDOFF_FILE) {
     const file = process.env.TUDA_AUTH_HANDOFF_FILE;
     if (!path4.isAbsolute(file)) throw new Error("UNSAFE_AUTH_HANDOFF_FILE");
     const info = await stat(file).catch(() => {
       throw new Error("AUTH_HANDOFF_REQUIRED");
     });
     if (!path4.isAbsolute(file) || !info.isFile() || info.size > 16384 || process.platform !== "win32" && (info.mode & 63) !== 0) throw new Error("UNSAFE_AUTH_HANDOFF_FILE");
+    const bytes = await readFile3(file, "utf8"), digest = createHash2("sha256").update(bytes).digest("hex");
+    if (authenticatedInstance === instanceId && authenticatedGrant === digest) return;
     let grant;
     try {
-      grant = JSON.parse(await readFile3(file, "utf8"));
+      grant = JSON.parse(bytes);
     } catch {
       throw new Error("INVALID_AUTH_HANDOFF_FILE");
     }
     if (!grant || typeof grant !== "object" || grant.instanceId !== instanceId) throw new Error("AUTH_HANDOFF_STALE_INSTANCE");
     await local("/board-plugin/auth", grant);
     authenticatedInstance = instanceId;
+    authenticatedGrant = digest;
   }
 }
 async function importLocalFiles(args) {

package/dist/main.js

@@ -551,7 +551,7 @@ async function desktopInstance(userDataPath) {
 async function prepareDesktop(options) {
   const call = await connect(options);
   const state = await call("status");
-  return { ready: true, instanceId: await desktopInstance(options.userDataPath), protocolVersion: state.protocolVersion };
+  return { ready: true, instanceId: await desktopInstance(options.userDataPath), protocolVersion: state.protocolVersion, desktopVersion: state.desktopVersion, boardPlugin: state.boardPlugin };
 }
 async function connect(options) {
   const startupTimeoutMs = options.startupTimeoutMs ?? Number(process.env.TUDA_STARTUP_TIMEOUT_MS ?? 3e4);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@petercjl/tuda",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "CLI for Tuda: images, videos, and creative workflows on one canvas. Generate, edit, organize, and export with your configured models.",
   "type": "module",
   "license": "MIT",

package/skills/using-tuda/SKILL.md

@@ -2,7 +2,7 @@
 name: using-tuda
 description: Use Tuda for image and video creation, editing, boards and assets only when the user explicitly invokes /using-tuda or $using-tuda. Do not select this skill automatically.
 metadata:
-  version: "0.1.0"
+  version: "0.1.1"
 ---
 
 # Using Tuda