dsh-agy-link 0.4.81 → 0.4.83

package/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Changelog
 
+## 0.4.83 (2026-10-29)
+
+### English
+
+- **Fix(media): a malformed `file://` percent-escape no longer throws out of the media route.**
+  - `resolveLocalMediaPath()` called `decodeURIComponent()` unguarded on the `file://` path. A double-encoded query (`?path=file%3A%2F%2F%2F%25E0...`) decodes to the literal `file:///%E0%A4%A`, whose inner decode throws `URIError: URI malformed` straight out of `handleMediaRequest()` (unhandled). Malformed escapes are now decoded via a safe helper that returns `null`, so the route answers `404` instead of throwing. Adds a regression test.
+
+### 中文
+
+- **修复(media)：畸形的 `file://` 百分号转义不再把异常抛出媒体路由。**
+  - `resolveLocalMediaPath()` 对 `file://` 路径直接 `decodeURIComponent()`，未做保护。经双重编码的查询（`?path=file%3A%2F%2F%2F%25E0...`）解析出字面量 `file:///%E0%A4%A`，其内部解码抛出 `URIError: URI malformed` 并从 `handleMediaRequest()` 直接逃逸。现在改用安全解码助手，畸形转义返回 `null`，路由回 `404` 而非抛异常。补充回归测试。
+
+**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.82...v0.4.83
+
+## 0.4.82 (2026-10-29)
+
+### English
+
+- **Fix(sessions): don't mis-purge live bindings whose session key contains `:`.**
+  - `cleanupStaleAccounts()` split the binding key on the FIRST `:`. A DSH session id can itself be composite and contain `:` (as several plugins produce), so `ns:sess:acc_valid` parsed its "account id" as `sess:acc_valid`, which is never in the valid set — the cleanup then **deleted a live binding**. It now splits on the LAST `:` and only treats the suffix as an account id when it matches the pool shape `acc_<...>`, so colon-containing session keys are never mistaken for accounts. Adds a regression test.
+
+### 中文
+
+- **修复(sessions)：不再误删会话键本身含 `:` 的有效绑定。**
+  - `cleanupStaleAccounts()` 之前按**第一个** `:` 切分绑定键。DSH 的会话 id 有可能本身是含 `:` 的复合键（部分插件如此），于是 `ns:sess:acc_valid` 被解析出的「账号 id」为 `sess:acc_valid`，永远不在有效集合里——清理逻辑因此**删掉了一个有效绑定**。现在改为按**最后一个** `:` 切分，且仅当后缀符合账号池形态 `acc_<...>` 时才当作账号 id，含 `:` 的会话键不会被误判为账号。补充回归测试。
+
+**Full Changelog**: https://github.com/amlyczz/dsh-agy-link/compare/v0.4.81...v0.4.82
+
 ## 0.4.81 (2026-10-29)
 
 ### English

package/dist/index.js

@@ -29503,10 +29503,10 @@ var SessionStore = class {
 	cleanupStaleAccounts(validAccountIds) {
 		let changed = false;
 		for (const key of Object.keys(this.data)) {
-			const colon = key.indexOf(":");
+			const colon = key.lastIndexOf(":");
 			if (colon >= 0) {
 				const accId = key.slice(colon + 1);
-				if (accId && !validAccountIds.has(accId)) {
+				if (/^acc_[A-Za-z0-9_]+$/.test(accId) && !validAccountIds.has(accId)) {
 					delete this.data[key];
 					this.dirty.delete(key);
 					this.removed.add(key);
@@ -35029,6 +35029,14 @@ const MIME_MAP = {
 	".json": "application/json; charset=utf-8"
 };
 const IS_WIN = process.platform === "win32";
+/** decodeURIComponent that returns null instead of throwing on malformed input. */
+function safeDecodeUri(s) {
+	try {
+		return decodeURIComponent(s);
+	} catch {
+		return null;
+	}
+}
 /**
 * Normalize and resolve a raw path or file:// URL into a system file path.
 * Converts WSL /mnt/X/ and /home/ paths on Windows where possible.
@@ -35037,10 +35045,14 @@ function resolveLocalMediaPath(rawPath, workspaceRoot) {
 	if (!rawPath || typeof rawPath !== "string") return null;
 	let p = rawPath.trim();
 	if (p.startsWith("file:///")) {
-		p = decodeURIComponent(p.slice(8));
+		const decoded = safeDecodeUri(p.slice(8));
+		if (decoded === null) return null;
+		p = decoded;
 		if (IS_WIN && !/^[A-Za-z]:/.test(p) && /^\/[A-Za-z]:/.test(p)) p = p.slice(1);
 	} else if (p.startsWith("file://")) {
-		p = decodeURIComponent(p.slice(7));
+		const decoded = safeDecodeUri(p.slice(7));
+		if (decoded === null) return null;
+		p = decoded;
 		if (IS_WIN && p.startsWith("wsl.localhost/")) p = "\\\\" + p.replace(/\//g, "\\");
 	}
 	if (IS_WIN) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-agy-link",
-  "version": "0.4.81",
+  "version": "0.4.83",
   "description": "Google Antigravity (agy CLI) models for DeepSeek Harness — stream Gemini/Claude/GPT-OSS subscriptions into DSH with thinking, tool activity, token usage and in-GUI Google OAuth login.",
   "type": "module",
   "license": "MIT",