@pixelbyte-software/pixcode 1.55.2 → 1.55.6

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pixelbyte-software/pixcode",
-  "version": "1.55.2",
+  "version": "1.55.6",
   "description": "Self-hosted AI coding agent control room for Claude Code, Cursor CLI, OpenAI Codex, Gemini CLI, Qwen Code, and OpenCode with chat, files, shell, Git, orchestration, API keys, Telegram, MCP, plugins, themes, and desktop/server deployment.",
   "type": "module",
   "main": "dist-server/server/index.js",

package/server/cli.js

@@ -336,14 +336,18 @@ async function updatePackage(options = {}) {
         }
 
         console.log(`${c.info('[INFO]')} Updating from ${currentVersion} to ${latestVersion}...`);
-        execSync('npm update -g @pixelbyte-software/pixcode', { stdio: 'inherit' });
+        // Global npm install requires root on system-wide installs
+        const npmCmd = process.getuid && process.getuid() === 0
+            ? 'npm update -g @pixelbyte-software/pixcode'
+            : 'sudo npm update -g @pixelbyte-software/pixcode';
+        execSync(npmCmd, { stdio: 'inherit' });
         console.log(`${c.ok('[OK]')} Update complete!`);
         await maybeRestartDaemonAfterUpdate(options);
     } catch (e) {
         console.error(`${c.error('[ERROR]')} Update failed: ${e.message}`);
         const fallbackCommand = installMode === 'git'
             ? 'pixcode update --restart-daemon'
-            : 'npm update -g @pixelbyte-software/pixcode';
+            : 'sudo npm update -g @pixelbyte-software/pixcode';
         console.log(`${c.tip('[TIP]')} Try running manually: ${fallbackCommand}`);
     }
 }

package/server/load-env.js

@@ -23,7 +23,10 @@ try {
     }
   });
 } catch (e) {
-  console.log('No .env file found or error reading it:', e.message);
+  // .env is optional — only warn on unexpected errors (ENOENT is normal)
+  if (e.code !== 'ENOENT') {
+    console.warn('Error reading .env file:', e.message);
+  }
 }
 
 // Keep the default database in a stable user-level location so rebuilding dist-server

package/server/routes/auth.js

@@ -36,7 +36,7 @@ function publicUser(user) {
 // Check auth status and setup requirements
 router.get('/status', async (req, res) => {
   try {
-    const hasUsers = await userDb.hasUsers();
+    const hasUsers = userDb.hasUsers();
     res.json({ 
       needsSetup: !hasUsers,
       isAuthenticated: false // Will be overridden by frontend if token exists
@@ -62,16 +62,23 @@ router.put('/connection-mode', async (req, res) => {
   try {
     // During first-run setup no users exist yet, so we skip auth.
     // The setup form calls this endpoint before creating the admin account.
-    const hasUsers = await userDb.hasUsers();
+    const hasUsers = userDb.hasUsers();
     if (!hasUsers) {
       return res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
     }
     // Post-setup: require authenticated admin
-    authenticateToken(req, res, () => {
-      requireAdmin(req, res, () => {
-        res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
+    // Wrap authenticateToken in a try/catch so that if it sends a response
+    // (e.g. 401 when no token is present) we don't double-send.
+    try {
+      authenticateToken(req, res, () => {
+        requireAdmin(req, res, () => {
+          res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
+        });
       });
-    });
+    } catch (err) {
+      // If authenticateToken throws instead of calling next/send, return 401
+      res.status(401).json({ error: err.message || 'Authentication required' });
+    }
   } catch (error) {
     res.status(400).json({ success: false, error: error.message });
   }

package/server/sessionManager.js

@@ -6,6 +6,7 @@ class SessionManager {
   constructor() {
     // Store sessions in memory with conversation history
     this.sessions = new Map();
+    this.corruptedSessions = new Set();
     this.maxSessions = 100;
     this.sessionsDir = path.join(os.homedir(), '.gemini', 'sessions');
     this.ready = this.init();
@@ -150,6 +151,21 @@ class SessionManager {
     try {
       const filePath = this._safeFilePath(sessionId);
       await fs.writeFile(filePath, JSON.stringify(session, null, 2));
+      
+      // Clean up any corrupted sessions that were marked during load
+      if (this.corruptedSessions.size > 0) {
+        const deleted = [];
+        for (const corruptedFile of this.corruptedSessions) {
+          try {
+            await fs.unlink(path.join(this.sessionsDir, corruptedFile));
+            deleted.push(corruptedFile);
+          } catch { /* already gone */ }
+        }
+        deleted.forEach(d => this.corruptedSessions.delete(d));
+        if (deleted.length > 0) {
+          console.warn(`SessionManager: Cleaned up ${deleted.length} corrupted session file(s): ${deleted.join(', ')}`);
+        }
+      }
     } catch (error) {
       console.warn(`SessionManager: Error saving session ${sessionId}:`, error?.message || error);
     }
@@ -176,7 +192,15 @@ class SessionManager {
 
             this.sessions.set(session.id, session);
           } catch (error) {
-            console.warn(`SessionManager: Error loading session ${file}:`, error?.message || error);
+            // Corrupted session file — skip it and optionally clean up
+            const isCorrupted = error instanceof SyntaxError && error.message.includes('JSON');
+            if (isCorrupted) {
+              console.warn(`SessionManager: Skipping corrupted session file ${file} — will auto-clean on next save.`);
+              // Mark for deletion on next successful save cycle
+              this.corruptedSessions.add(file);
+            } else {
+              console.warn(`SessionManager: Error loading session ${file}:`, error?.message || error);
+            }
           }
         }
       }