spi-agent-gui 0.1.5 → 0.2.1

package/CHANGELOG.md

@@ -4,6 +4,18 @@
 
 - macOS Apple Silicon/Intel candidates remain separate from public Linux releases. Developer ID signing and notarization are not configured.
 
+## 0.2.1
+
+- Configurable single-use pairing code lifetime: default 1 hour, up to 60 days (1440 hours), with host-side validation and an explicit expiry display. Codes remain in-memory and are invalidated on quit, remote-access disable, cancellation or replacement; paired devices are unaffected.
+- Fix macOS packaging of rebuilt websocket native addons before signing. Apple Silicon and Intel manual downloads require native build and installed-ZIP verification; ad-hoc signed, not Developer ID signed or notarized. Existing public assets remain unchanged.
+
+## 0.2.0
+
+- Remote access: open a window on one sPi desktop that drives another sPi host behind NAT/firewalls, relayed through Microsoft Dev Tunnels and end-to-end encrypted by sPi with Noise. One-time pairing codes, pinned keys, device revocation, reconnect with resync and automatic tunnel recreation. Requires the GitHub CLI signed in to the same account on both computers; local use never needs it. A paired device has full control of the host's sPi. Linux keyring required; macOS/Windows unverified.
+- AI naming works on reasoning models that reject `reasoning: none`; failures show allowlisted categories only.
+- Healthy sessions no longer show the connection banner; stale unresponsive state clears on real Pi progress; model and connection errors are shown once and separately.
+- Linux x64/arm64 only. Save important drafts and fully quit the previous window before reopening.
+
 ## 0.1.5
 
 - Passive RPC diagnostics only on send failure, blocked busy submissions or manual checks; no periodic/focus/network-restoration polling. Retain exited tabs and recover saved history/drafts/outboxes without replaying unconfirmed work.

package/README.md

@@ -8,7 +8,9 @@ Runtime downloads show percentage, received/total MiB and average speed every 10
 
 If sessions cannot start because desktop PATH differs from your terminal, sPi detects compatible Node from PATH, Pi-managed runtime or login shell. Settings → Node.js runtime also accepts an optional absolute Node executable path, checked before private saving; clear it for automatic lookup. It applies to new/reopened sessions without restarting existing ones or changing Pi/shell configuration.
 
-Desktop 0.1.5 adds passive send-triggered RPC checks and explicit recovery, terminal visibility and clipboard context menus, manual/current-model AI session names, confirmed history trash and restored window placement/maximization. AI names are suggestions to review before saving; they incur a normal model request but run no tools and do not add chat entries. Recovery keeps the outbox paused and never blindly replays work. Save important drafts and fully quit the old GUI before reopening; installation does not hot-update a running window. [Feature details](https://github.com/DiamondGo/spi/blob/main/docs/desktop-interactions.md).
+Desktop 0.2.0 adds optional end-to-end encrypted remote access: a window on one computer can drive sPi on another, relayed through Microsoft Dev Tunnels. It requires the GitHub CLI (`gh`) signed in to the same GitHub account on both computers; local use never needs `gh`. A paired device has full control of the host's sPi, including terminals. [Remote access](https://github.com/DiamondGo/spi/blob/main/docs/remote-access.md).
+
+Desktop 0.1.5 added passive send-triggered RPC checks and explicit recovery, terminal visibility and clipboard context menus, manual/current-model AI session names, confirmed history trash and restored window placement/maximization. AI names are suggestions to review before saving; they incur a normal model request but run no tools and do not add chat entries. Recovery keeps the outbox paused and never blindly replays work. Save important drafts and fully quit the old GUI before reopening; installation does not hot-update a running window. [Feature details](https://github.com/DiamondGo/spi/blob/main/docs/desktop-interactions.md).
 
 `spi --help`, `spi doctor`, `spi update`, `spi rollback`, `spi uninstall`. Use `--bin-dir` if Pi's PATH directory is not writable or another spi command exists. No shell profile is edited. User preferences and Pi sessions survive uninstall. `pi remove` removes this package, not the independently installed desktop runtime.
 

package/dist/spi.cjs

@@ -11,7 +11,7 @@ var __commonJS = (cb, mod) => function __require() {
 var define_SPI_RELEASE_default;
 var init_define_SPI_RELEASE = __esm({
   "<define:__SPI_RELEASE__>"() {
-    define_SPI_RELEASE_default = { version: "0.1.5", repository: "DiamondGo/spi", packageName: "spi-agent-gui" };
+    define_SPI_RELEASE_default = { version: "0.2.1", repository: "DiamondGo/spi", packageName: "spi-agent-gui" };
   }
 });
 
@@ -4871,7 +4871,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "spi",
-      version: "0.1.5",
+      version: "0.2.1",
       description: "sPi - Simple Pi Agent GUI",
       private: true,
       license: "UNLICENSED",
@@ -4902,13 +4902,17 @@ var require_package = __commonJS({
         "test:sessions": "node scripts/sessions.test.cjs",
         "test:session-health": "node scripts/session-health.test.cjs",
         "test:workspace-actions": "node scripts/workspace-actions.test.cjs",
+        "test:ai-naming": "node scripts/ai-naming.test.cjs",
         "test:session-actions-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --session-actions",
         "test:session-health-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --session-health",
         "test:terminal": "node scripts/terminal.test.cjs",
+        "test:remote": "node scripts/remote.test.cjs",
+        "test:remote-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --remote",
+        "test:remote-live": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --remote --live",
         "test:terminal-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --terminal",
         "test:settings": "node scripts/settings.test.cjs",
         "test:settings-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --settings",
-        "test:yolo": "node scripts/yolo.test.cjs && node scripts/session-bridge.test.cjs",
+        "test:yolo": "node scripts/yolo.test.cjs && node scripts/session-bridge.test.cjs && node scripts/ai-naming.test.cjs",
         "test:extension-ui": "node scripts/extension-ui.test.cjs",
         "test:workspace-ui": "node scripts/workspace-ui.test.cjs",
         "test:runtime-env-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --runtime-env",
@@ -4919,6 +4923,14 @@ var require_package = __commonJS({
         "test:advanced": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --advanced"
       },
       dependencies: {
+        "@microsoft/dev-tunnels-connections": "1.3.62",
+        "@microsoft/dev-tunnels-contracts": "1.3.62",
+        "@microsoft/dev-tunnels-management": "1.3.62",
+        "@microsoft/dev-tunnels-ssh": "3.12.42",
+        "@microsoft/dev-tunnels-ssh-tcp": "3.12.42",
+        "@noble/ciphers": "2.4.0",
+        "@noble/curves": "2.4.0",
+        "@noble/hashes": "2.4.0",
         "@xterm/addon-fit": "^0.11.0",
         "@xterm/xterm": "^6.0.0",
         "node-pty": "^1.1.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spi-agent-gui",
-  "version": "0.1.5",
+  "version": "0.2.1",
   "description": "sPi - Simple Pi Agent GUI installer and Pi launcher",
   "type": "module",
   "license": "UNLICENSED",