witbitz-code 1.6.6__tar.gz → 1.6.8__tar.gz

{witbitz_code-1.6.6/src/witbitz_code.egg-info → witbitz_code-1.6.8}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.6.6
+Version: 1.6.8
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT
@@ -50,7 +50,7 @@ witbitz-code setup
 ```
 
 `setup` walks five steps and skips whatever is already done: it installs OpenCode if it is missing (it asks first), pairs
-this computer (scan the QR code in Spaces → Settings → Back up & recovery → Add a device), which gives the computer **its
+this computer (scan the QR code in Spaces → Settings → Privacy & security → Add a device), which gives the computer **its
 own keys from your Spaces account**, offers to install the tools the agent uses for audio, video, PDFs and scans (ffmpeg,
 Poppler, Tesseract, … — with winget, Homebrew or one `sudo apt-get` line; it shows what it will run and asks once), then
 starts `serve` in the window. Then open Code in Spaces. Leave it running (Ctrl-C

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/README.md

@@ -24,7 +24,7 @@ witbitz-code setup
 ```
 
 `setup` walks five steps and skips whatever is already done: it installs OpenCode if it is missing (it asks first), pairs
-this computer (scan the QR code in Spaces → Settings → Back up & recovery → Add a device), which gives the computer **its
+this computer (scan the QR code in Spaces → Settings → Privacy & security → Add a device), which gives the computer **its
 own keys from your Spaces account**, offers to install the tools the agent uses for audio, video, PDFs and scans (ffmpeg,
 Poppler, Tesseract, … — with winget, Homebrew or one `sudo apt-get` line; it shows what it will run and asks once), then
 starts `serve` in the window. Then open Code in Spaces. Leave it running (Ctrl-C

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "witbitz-code"
-version = "1.6.6"
+version = "1.6.8"
 description = "Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay."
 readme = "README.md"
 requires-python = ">=3.10"

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/__init__.py

@@ -4,4 +4,4 @@ The Python implementation of tools/witbitz-code.mjs (docs/opencode-relay.md phas
 vectors and cross-implementation tests.
 """
 
-__version__ = "1.6.6"
+__version__ = "1.6.8"

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/cli.py

@@ -40,7 +40,7 @@ HELP = f"""witbitz-code {__version__} — reach OpenCode on this computer from t
                                the same in a page in your browser: status, pair / unpair / pair again, start and stop,
                                start when I log in (Windows and WSL); it serves while it runs. --background (Windows):
                                no window — the page's Quit stops it
-  pair [--name <name>]         show a QR code; scan it in Spaces (Settings → Back up & recovery → Add a device)
+  pair [--name <name>]         show a QR code; scan it in Spaces (Settings → Privacy & security → Add a device)
   serve [--port <n>] [--no-opencode]
                                start OpenCode on 127.0.0.1 with your account's keys, and the connector
   status                       list this computer's pairings and their coding keys

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/link.py

@@ -1,7 +1,7 @@
 """Make this computer an ADDED DEVICE of a Spaces account by device-link — tools/rc-link.mjs.
 
-It shows a QR carrying an ephemeral PUBLIC key (no secret); a signed-in phone or desktop scans it (Settings → Back up &
-recovery → Add a device) and seals the account to that key; this process opens the reply. The reply is relayed
+It shows a QR carrying an ephemeral PUBLIC key (no secret); a signed-in phone or desktop scans it (Settings → Privacy & security →
+Add a device) and seals the account to that key; this process opens the reply. The reply is relayed
 content-blind through /api/link between two public keys the server cannot combine.
 
 Unlike rc-link.mjs this never writes the account to disk: the pairing flow needs it only long enough to publish the

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/mkdir.py

@@ -12,9 +12,10 @@ import ntpath
 import os
 import posixpath
 import re
+import unicodedata
 
 MKDIR_ROUTE = "/witbitz/mkdir"
-_CLEAN = re.compile(r"^[A-Za-z0-9_ ()-][A-Za-z0-9._ ()-]*$")
+_PUNCT = set("._ ()-")
 _WIN_ABS = re.compile(r"^[A-Za-z]:[\\/]")
 
 
@@ -22,12 +23,21 @@ def _error(st: int, message: str) -> tuple[int, str]:
     return st, json.dumps({"error": message}, ensure_ascii=False, separators=(",", ":"))
 
 
+def _ok_char(ch: str) -> bool:
+    # letters, digits and combining marks of ANY script (Hebrew, Arabic, …) plus . _ space ( ) - — ⇄ code-mkdir.mjs. A control
+    # or an invisible direction mark (category C*) is not a letter, so it stays out.
+    return ch in _PUNCT or unicodedata.category(ch)[0] in ("L", "N", "M")
+
+
 def _clean(n: object) -> bool:
-    s = str(n or "") if isinstance(n, str) else ""
-    return bool(s) and len(s) <= 120 and bool(_CLEAN.match(s)) and ".." not in s and not re.search(r"[/\\\0]", s) and not re.search(r"[^ -~]", s)
+    s = unicodedata.normalize("NFC", n) if isinstance(n, str) else ""
+    return (bool(s) and len(s) <= 120 and s[0] != "." and all(_ok_char(c) for c in s)
+            and ".." not in s and not re.search(r"[/\\\0]", s))
 
 
 def mkdir_in(*, root: object, rel: object, name: object) -> tuple[int, str]:
+    if isinstance(name, str):
+        name = unicodedata.normalize("NFC", name)  # one spelling of a name, whatever keyboard typed it
     if not _clean(name):
         return _error(400, "a folder name: no /, . or .., and not hidden")
     win = isinstance(root, str) and bool(_WIN_ABS.match(root))

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/pair.py

@@ -112,7 +112,7 @@ async def _publish_entry(call: net.ApiCall, e: dict, out: Callable, err: Callabl
 async def _link_by_qr(link_fn: LinkFn | None, out: Callable, err: Callable) -> dict | None:
     """The QR ritual: show the Add-a-device QR and wait for a signed-in device to seal the account to this computer. The
     account stays in memory; an expired or failed scan changes nothing."""
-    out("witbitz-code: on your phone open Spaces → Settings → Back up & recovery → Add a device, and scan the QR below "
+    out("witbitz-code: on your phone open Spaces → Settings → Privacy & security → Add a device, and scan the QR below "
         "with the account to pair.\n")
     account = await (link_fn() if link_fn else link.link_node())
     if not account:

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/ui_static/index.html

@@ -33,7 +33,7 @@
   <section class="card" id="pairCard" hidden>
     <h2>Pair with your Spaces account</h2>
     <ol class="steps">
-      <li>On your phone, open <b>Spaces → Settings → Back up &amp; recovery → Add a device</b>.</li>
+      <li>On your phone, open <b>Spaces → Settings → Privacy &amp; security → Add a device</b>.</li>
       <li>Scan this code with the account that should reach this computer.</li>
     </ol>
     <div class="qr-wrap"><img id="qr" alt="Pairing code — scan it in Spaces" width="260" height="260"></div>

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/src/witbitz_code/wizard.py

@@ -173,7 +173,7 @@ async def run_setup(d: Deps) -> dict:
         d.say(f"   {named(gone)} was removed from your Witbitz account, so this computer pairs again.")
         mine = []
     if not mine:
-        d.say("   On your phone, open Spaces → Settings → Back up & recovery → Add a device, and scan the code below.\n")
+        d.say("   On your phone, open Spaces → Settings → Privacy & security → Add a device, and scan the code below.\n")
         await d.pair(port)
         everything = d.all_pairings()
         mine = on(everything, port)

{witbitz_code-1.6.6 → witbitz_code-1.6.8/src/witbitz_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: witbitz-code
-Version: 1.6.6
+Version: 1.6.8
 Summary: Reach OpenCode on this computer from the Witbitz Spaces Code section, through an end-to-end sealed relay.
 Author: Witbitz
 License-Expression: MIT
@@ -50,7 +50,7 @@ witbitz-code setup
 ```
 
 `setup` walks five steps and skips whatever is already done: it installs OpenCode if it is missing (it asks first), pairs
-this computer (scan the QR code in Spaces → Settings → Back up & recovery → Add a device), which gives the computer **its
+this computer (scan the QR code in Spaces → Settings → Privacy & security → Add a device), which gives the computer **its
 own keys from your Spaces account**, offers to install the tools the agent uses for audio, video, PDFs and scans (ffmpeg,
 Poppler, Tesseract, … — with winget, Homebrew or one `sudo apt-get` line; it shows what it will run and asks once), then
 starts `serve` in the window. Then open Code in Spaces. Leave it running (Ctrl-C

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/tests/test_dirs.py

@@ -52,9 +52,19 @@ def test_the_javascript_lists_the_same():
 
 
 def test_new_folder_names_are_one_clean_leaf_on_both_kinds_of_root(tmp_path):
-    for bad in ["..", ".x", "a/b", "a\\b", "\\x", "", "a\x00b", "é"]:
+    for bad in ["..", ".x", "a/b", "a\\b", "\\x", "", "a\x00b", "a\u202eb"]:  # "é" is a letter now (any script, 2026-10-11)
         assert mkdir.mkdir_in(root=str(tmp_path), rel=".", name=bad)[0] == 400, bad
     assert mkdir.mkdir_in(root="relative", rel=".", name="x")[0] == 400
     assert mkdir.mkdir_in(root="C:\\Users\\nobody-here", rel=".", name="x")[0] == 404, "a Windows root is a root (not on this computer)"
     assert mkdir.mkdir_in(root=str(tmp_path), rel="..", name="x")[0] == 403, "never above the root"
     assert mkdir.mkdir_in(root=str(tmp_path), rel=".", name="ok one")[0] == 200 and (tmp_path / "ok one").is_dir()
+
+
+def test_mkdir_any_script_name_is_made(tmp_path):
+    # the owner, 2026-10-11: "making a directory in hebrew does not work" (it was ASCII only) — ⇄ tools/code-mkdir.test.mjs
+    for name in ["ערך 3", "עבודה (2)", "Ünïcode", "مشروع", "项目-1"]:
+        assert mkdir.mkdir_in(root=str(tmp_path), rel=".", name=name)[0] == 200, name
+    for bad in ["x\u202eexe", "a\u200fb", "a\u2066b"]:
+        assert mkdir.mkdir_in(root=str(tmp_path), rel=".", name=bad)[0] == 400, repr(bad)
+    assert mkdir.mkdir_in(root=str(tmp_path), rel=".", name="U\u0308ber")[0] == 200
+    assert "\u00dcber" in [p.name for p in tmp_path.iterdir()], "stored composed (NFC)"

{witbitz_code-1.6.6 → witbitz_code-1.6.8}/tests/test_wslstart.py

@@ -53,7 +53,8 @@ def test_the_windows_login_start_runs_pythonw_in_the_background_when_it_is_there
     assert launcher_only["args"] == "--no-browser" and launcher_only["target"].endswith("Witbitz Code.cmd'")
 
 
-def test_wsl_runs_headless_held_by_a_hidden_wsl_exe():
+def test_wsl_runs_headless_held_by_a_hidden_wsl_exe(monkeypatch):
+    monkeypatch.setenv("WSL_DISTRO_NAME", "UbuntuD")  # the runner is plain Linux: the entry is named by the distro
     from witbitz_code import wslstart as ws
     seen = []
     ok, why = ws.launch_background(ps=lambda script: seen.append(script) or (0, "ok"), which=lambda n: "/home/a/.local/bin/witbitz-code",