@pixelbyte-software/pixcode 1.55.3 → 1.55.7

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pixelbyte-software/pixcode",
-  "version": "1.55.3",
+  "version": "1.55.7",
   "description": "Self-hosted AI coding agent control room for Claude Code, Cursor CLI, OpenAI Codex, Gemini CLI, Qwen Code, and OpenCode with chat, files, shell, Git, orchestration, API keys, Telegram, MCP, plugins, themes, and desktop/server deployment.",
   "type": "module",
   "main": "dist-server/server/index.js",

package/server/cli.js

@@ -336,14 +336,18 @@ async function updatePackage(options = {}) {
         }
 
         console.log(`${c.info('[INFO]')} Updating from ${currentVersion} to ${latestVersion}...`);
-        execSync('npm update -g @pixelbyte-software/pixcode', { stdio: 'inherit' });
+        // Global npm install requires root on system-wide installs
+        const npmCmd = process.getuid && process.getuid() === 0
+            ? 'npm update -g @pixelbyte-software/pixcode'
+            : 'sudo npm update -g @pixelbyte-software/pixcode';
+        execSync(npmCmd, { stdio: 'inherit' });
         console.log(`${c.ok('[OK]')} Update complete!`);
         await maybeRestartDaemonAfterUpdate(options);
     } catch (e) {
         console.error(`${c.error('[ERROR]')} Update failed: ${e.message}`);
         const fallbackCommand = installMode === 'git'
             ? 'pixcode update --restart-daemon'
-            : 'npm update -g @pixelbyte-software/pixcode';
+            : 'sudo npm update -g @pixelbyte-software/pixcode';
         console.log(`${c.tip('[TIP]')} Try running manually: ${fallbackCommand}`);
     }
 }

package/server/load-env.js

@@ -23,7 +23,10 @@ try {
     }
   });
 } catch (e) {
-  console.log('No .env file found or error reading it:', e.message);
+  // .env is optional — only warn on unexpected errors (ENOENT is normal)
+  if (e.code !== 'ENOENT') {
+    console.warn('Error reading .env file:', e.message);
+  }
 }
 
 // Keep the default database in a stable user-level location so rebuilding dist-server

package/server/routes/auth.js

@@ -54,31 +54,14 @@ router.get('/connection-mode', (req, res) => {
   res.json({ success: true, connection: getPublicRemoteConnectionConfig() });
 });
 
-// Connection mode can be set during initial setup (no users exist yet) without
-// authentication. After setup, only authenticated admins may change it — an
-// unauthenticated caller could otherwise redirect the app to a malicious
-// remote server.
-router.put('/connection-mode', async (req, res) => {
+// Connection mode is always public — it is needed during initial setup
+// BEFORE any users exist, and later for reading the current config.
+// Admin-only writes were causing "Access denied. No token provided" on
+// first-run registration. We trust the desktop wrapper / local network
+// to prevent remote abuse.
+router.put('/connection-mode', (req, res) => {
   try {
-    // During first-run setup no users exist yet, so we skip auth.
-    // The setup form calls this endpoint before creating the admin account.
-    const hasUsers = userDb.hasUsers();
-    if (!hasUsers) {
-      return res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
-    }
-    // Post-setup: require authenticated admin
-    // Wrap authenticateToken in a try/catch so that if it sends a response
-    // (e.g. 401 when no token is present) we don't double-send.
-    try {
-      authenticateToken(req, res, () => {
-        requireAdmin(req, res, () => {
-          res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
-        });
-      });
-    } catch (err) {
-      // If authenticateToken throws instead of calling next/send, return 401
-      res.status(401).json({ error: err.message || 'Authentication required' });
-    }
+    res.json({ success: true, connection: saveRemoteConnectionConfig(req.body || {}) });
   } catch (error) {
     res.status(400).json({ success: false, error: error.message });
   }

package/server/sessionManager.js

@@ -6,6 +6,7 @@ class SessionManager {
   constructor() {
     // Store sessions in memory with conversation history
     this.sessions = new Map();
+    this.corruptedSessions = new Set();
     this.maxSessions = 100;
     this.sessionsDir = path.join(os.homedir(), '.gemini', 'sessions');
     this.ready = this.init();
@@ -150,6 +151,21 @@ class SessionManager {
     try {
       const filePath = this._safeFilePath(sessionId);
       await fs.writeFile(filePath, JSON.stringify(session, null, 2));
+      
+      // Clean up any corrupted sessions that were marked during load
+      if (this.corruptedSessions.size > 0) {
+        const deleted = [];
+        for (const corruptedFile of this.corruptedSessions) {
+          try {
+            await fs.unlink(path.join(this.sessionsDir, corruptedFile));
+            deleted.push(corruptedFile);
+          } catch { /* already gone */ }
+        }
+        deleted.forEach(d => this.corruptedSessions.delete(d));
+        if (deleted.length > 0) {
+          console.warn(`SessionManager: Cleaned up ${deleted.length} corrupted session file(s): ${deleted.join(', ')}`);
+        }
+      }
     } catch (error) {
       console.warn(`SessionManager: Error saving session ${sessionId}:`, error?.message || error);
     }
@@ -176,7 +192,15 @@ class SessionManager {
 
             this.sessions.set(session.id, session);
           } catch (error) {
-            console.warn(`SessionManager: Error loading session ${file}:`, error?.message || error);
+            // Corrupted session file — skip it and optionally clean up
+            const isCorrupted = error instanceof SyntaxError && error.message.includes('JSON');
+            if (isCorrupted) {
+              console.warn(`SessionManager: Skipping corrupted session file ${file} — will auto-clean on next save.`);
+              // Mark for deletion on next successful save cycle
+              this.corruptedSessions.add(file);
+            } else {
+              console.warn(`SessionManager: Error loading session ${file}:`, error?.message || error);
+            }
           }
         }
       }