@runeya/runeya 2.0.29 → 2.0.31

package/index.js

@@ -201,7 +201,7 @@ function listenWithRetry(server, port, host, wss, maxRetries = 20, delay = 500)
   });
 }
 async function main() {
-  const { createLocalServer, pullEnv, PullEnvError } = await import("./src-W64XJTN5.js");
+  const { createLocalServer, pullEnv, PullEnvError } = await import("./src-I5LYBYA2.js");
   if (isPullEnv) {
     if (!serviceArg) {
       console.error("Error: --service (-s) is required with --pull-env");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@runeya/runeya",
-  "version": "2.0.29",
+  "version": "2.0.31",
   "type": "module",
   "bin": {
     "runeya": "./index.js"

package/{src-W64XJTN5.js → src-I5LYBYA2.js}

@@ -10817,7 +10817,8 @@ var KanbanQueueService = class extends EventEmitter4 {
     try {
       const model = item.model || (item.runner === "codex" ? "" : "claude-opus-4-6");
       const starter = item.runner === "codex" ? startCodexSession : startClaudeCodeSession;
-      const { done } = await starter(runItem.conversationId, cardContent, { model });
+      const jwt = await signJwt();
+      const { done } = await starter(runItem.conversationId, cardContent, { model, jwt });
       await done;
     } finally {
       this.finishItem(runItem.id);
@@ -10948,6 +10949,13 @@ function normalize(value) {
   return value.normalize("NFD").replace(new RegExp("\\p{Diacritic}", "gu"), "").toLowerCase();
 }
 var ATTACHMENT_ID_REGEX = /^[A-Za-z0-9_-]{1,128}$/;
+function safeDecode(value) {
+  try {
+    return decodeURIComponent(value);
+  } catch {
+    return "";
+  }
+}
 var MAX_ATTACHMENT_BYTES = 55 * 1024 * 1024;
 function attachmentCacheDir() {
   return join16(tmpdir(), "runeya-kanban-attachments");
@@ -11110,7 +11118,8 @@ var kanbanRouter = router({
     }
     const contentType = res.headers.get("content-type") ?? "application/octet-stream";
     const disposition = res.headers.get("content-disposition") ?? "";
-    const name = /filename="([^"]*)"/.exec(disposition)?.[1] || id;
+    const encoded = /filename\*=UTF-8''([^;]+)/i.exec(disposition)?.[1];
+    const name = (encoded ? safeDecode(encoded) : "") || /filename="([^"]*)"/.exec(disposition)?.[1] || id;
     const path = await storeAttachment(id, name, body);
     return { path, name, contentType, size: body.length };
   })
@@ -14227,4 +14236,4 @@ export {
   createLocalServer,
   pullEnv
 };
-//# sourceMappingURL=src-W64XJTN5.js.map
+//# sourceMappingURL=src-I5LYBYA2.js.map