dsh-remote 0.8.39 → 0.8.41

package/lib/paths.js

@@ -203,8 +203,16 @@ export function relPathUnder(root, p) {
 }
 
 export function truncate(s, max) {
-  if (s.length <= max) return s
-  return s.slice(0, max) + `\n…[truncated: ${s.length - max} more chars]`
+  // A missing/NaN cap is a CONFIG BUG (measured: a bare `new SshPool({...})`
+  // with no maxOutputChars turned EVERY exec result into a 29-char truncation
+  // marker — `'x'.length <= undefined` is false, so the "cap" branch always ran
+  // and `s.length - undefined` printed NaN — silently destroying every remote
+  // output, including the web-attach startup token). A bad cap must disable
+  // truncation, not destroy the string.
+  const limit = Number(max)
+  if (!Number.isFinite(limit) || limit <= 0) return s
+  if (s.length <= limit) return s
+  return s.slice(0, limit) + `\n…[truncated: ${s.length - limit} more chars]`
 }
 
 /** 32-bit string hash rendered in base36 (short, collision-safe enough). */

package/lib/web-attach.js

@@ -301,12 +301,24 @@ export class WebAttach {
       // Both failure shapes carry the same diagnostics: the process either died
       // (its output is the whole story) or is still booting after the deadline.
       if (launchFailed(out)) {
+        // The remote process is already gone — nothing to clean up.
         throw new Error('web-attach: the remote DSH exited during startup.'
           + explainLaunchFailure(tail || out)
           + ` ${tail || 'no output'}`)
       }
       const parsed = parseWebStart(out)
       if (!parsed) {
+        // A timed-out launch may STILL be booting: the deadline expiring is not
+        // evidence the process died. Kill it before throwing, or every retry
+        // leaks another remote server (measured: three leftover `dsh --port 0`
+        // processes after three failed attaches). A PID of 0 means the launcher
+        // could not report one — nothing to target.
+        if (this.remotePid > 0) {
+          try {
+            await exec(buildStopCommand(this.remotePid, logPath), { timeoutMs: 20000 })
+            this.remotePid = 0
+          } catch { /* the process may already be gone; a leftover is worse than a failed kill attempt only if it repeats, and the next attach replaces this session */ }
+        }
         throw new Error(
           `web-attach: the remote DSH did not report a startup token within ${waitSeconds}s.`
           + ` Check that \`${command}\` exists on the remote and can boot a web profile.`

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-remote",
-  "version": "0.8.39",
-  "description": "Remote-work assistant for DeepSeek Harness: connect SSH (password/key/agent/keyboard-interactive/proxy jump), pick a remote workspace, operate on it with 25 rw_* tools (incl. rw_edit/rw_stat/rw_mkdir/rw_remove/rw_move/rw_forward), conflict-aware mirror sync, workspace backup/restore, port forwarding, optional side-bar remote file editing, audit log, keychain passwords.",
+  "version": "0.8.41",
+  "description": "Remote-work assistant for DeepSeek Harness: connect SSH (password/key/agent/keyboard-interactive/proxy jump), pick a remote workspace, operate on it with 22 rw_* tools (incl. rw_edit/rw_stat/rw_mkdir/rw_remove/rw_move/rw_forward), conflict-aware mirror sync, one-click remote dsh deploy + web UI attach, port forwarding, optional side-bar remote file editing, audit log, keychain passwords.",
   "license": "MIT",
   "author": "flymysql <flyphp@outlook.com>",
   "readme": "README.md",