@botconnector/bccli 0.5.2 → 0.5.3

package/bccli-bootstrap.cjs

@@ -0,0 +1,61 @@
+#!/usr/bin/env node
+'use strict'
+
+// This small launcher runs before importing the coding engine. npm's Windows
+// shims use the system Node; on affected releases we may select a known-safe
+// owner-installed Node without changing the system-wide PATH.
+const { spawn, spawnSync } = require('node:child_process')
+const { existsSync } = require('node:fs')
+const { join, resolve } = require('node:path')
+const { pathToFileURL } = require('node:url')
+
+function unsafeWindowsNode(version, platform = process.platform) {
+  const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(String(version))
+  if (!m) return true
+  const [major, minor, patch] = m.slice(1).map(Number)
+  return platform === 'win32' && major === 24 && (minor < 22 || (minor === 22 && patch < 1))
+}
+function safeRuntime(version) {
+  const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(String(version))
+  if (!m) return false
+  const [major, minor, patch] = m.slice(1).map(Number)
+  return (major === 22 && (minor > 23 || (minor === 23 && patch >= 4))) ||
+    (major === 24 && (minor > 22 || (minor === 22 && patch >= 1)))
+}
+function selectRuntime({ platform = process.platform, nodeVersion = process.version,
+  execPath = process.execPath, env = process.env,
+  probe = (path) => {
+    const result = spawnSync(path, ['--version'], { encoding: 'utf8', timeout: 5000, windowsHide: true })
+    return result.status === 0 ? result.stdout.trim() : ''
+  },
+  exists = existsSync } = {}) {
+  if (!unsafeWindowsNode(nodeVersion, platform)) return execPath
+  const candidates = [
+    env.BCCLI_NODE_EXECUTABLE,
+    env.LOCALAPPDATA && join(env.LOCALAPPDATA, 'BotConnector', 'BCCLI-Preview', 'runtime', 'node.exe'),
+  ].filter(Boolean)
+  for (const candidate of candidates) {
+    const path = resolve(candidate)
+    if (path === resolve(execPath) || !exists(path)) continue
+    if (safeRuntime(probe(path))) return path
+  }
+  throw Error('BCCLI requires Node.js 24.22.1+ or 22.23.4+ on Windows. Set BCCLI_NODE_EXECUTABLE to an installed compatible node.exe, or update Node.js. No coding request was sent.')
+}
+async function main() {
+  const exe = selectRuntime()
+  const entry = join(__dirname, 'cli.mjs')
+  if (exe === process.execPath) {
+    await import(pathToFileURL(entry).href)
+    return
+  }
+  const child = spawn(exe, [entry, ...process.argv.slice(2)], {
+    stdio: 'inherit', cwd: process.cwd(), env: process.env, windowsHide: false, shell: false,
+  })
+  child.once('error', (error) => { console.error('BCCLI runtime launch failed: ' + error.message); process.exitCode = 1 })
+  child.once('exit', (code, signal) => { process.exitCode = code ?? (signal ? 130 : 1) })
+}
+if (require.main === module) main().catch((error) => {
+  console.error(error.message)
+  process.exitCode = 1
+})
+module.exports = { unsafeWindowsNode, safeRuntime, selectRuntime }

package/branding.mjs

@@ -33,7 +33,7 @@ const SOURCE_HASHES = Object.freeze({
   'chunks/chunk-B3ZFUGTC.js': 'f3f57aafbaeab56ca58f5d3173751d30e5fef815aeaf8dc9b46e6ea9e85eb528',
   'chunks/chunk-GGVWG4SI.js': '945c7f4e9b3697003c165b7bc5d007c9b87140d1fad7be084d7b253d8d2b476c',
 })
-const BRAND_REVISION = 'bccli-new-20261031-safe-core-tools-v14-atomic-patch'
+const BRAND_REVISION = 'bccli-20261031-win-bootstrap-session-v15'
 // Deliberately not Qwen's blue→purple→rose gradient. BotConnector-facing
 // coding CLI uses a distinct teal→green→amber palette in dark/light themes.
 export const BCCLI_COLORS = Object.freeze(['#00AFA0', '#22C55E', '#EAB308'])
@@ -249,6 +249,12 @@ export function patchUiChunk(file, text) {
       'customBannerTitle?customBannerTitle:">_ BCCLI | BotConnector"',
       'Ink banner title',
     )
+    if (result.includes('const versionLabel=formatVersionLabel(version);')) {
+      result = replaceOnce(result,
+        'const versionLabel=formatVersionLabel(version);',
+        'const versionLabel="engine "+formatVersionLabel(version);',
+        'Clarify upstream engine version in BCCLI banner')
+    }
     result = replaceOnce(result,
       'Add a QWEN.md file to give Qwen Code persistent project context.',
       'Use /help to explore BCCLI tools and commands.',

package/core.mjs

@@ -8,6 +8,7 @@ import { fileURLToPath } from 'node:url'
 import { startGatewayProxy } from './proxy.mjs'
 import { GATEWAY } from './gateway.mjs'
 import { listProviderDefinitions } from './providers.mjs'
+import { ensureIsolatedSessionSettings } from './session-settings.mjs'
 
 export { GATEWAY } from './gateway.mjs'
 export const DEFAULT_MODEL = 'ling-3.0-flash'
@@ -21,7 +22,7 @@ export function assertCandidateRuntimeSupported({ platform = process.platform, n
   if (!parts) throw Error('Cannot verify the Node.js version for BCCLI candidate.')
   const major = Number(parts[1]), minor = Number(parts[2]), patch = Number(parts[3])
   if (platform === 'win32' && major === 24 && (minor < 22 || (minor === 22 && patch < 1))) {
-    throw Error('Windows Node.js ' + nodeVersion + ' may crash after coding tools. Use Node.js 24.22.1 or newer, or Node.js 22.23.4. Existing public BCCLI is unaffected.')
+    throw Error('Windows Node.js ' + nodeVersion + ' may crash after coding tools. Use Node.js 24.22.1 or newer, or Node.js 22.23.4. No coding request was sent.')
   }
 }
 const MODEL_ID = /^[a-zA-Z0-9][a-zA-Z0-9._:/+-]{0,255}$/
@@ -266,8 +267,10 @@ export async function launchQwen({ key, model, prompt, mcpConfig, continueSessio
   const proxy = await proxyFactory({ key, endpoint: upstream, liveProvider: true, initialProvider: providerId, searchApiKey })
   try {
     const args = [entrypoint, ...qwenArguments(model, prompt, proxy.baseUrl, { mcpConfig, continueSession, resumeSession, projectDir: process.cwd() })]
+    const childEnv = childEnvironment(env, proxy.token, model, { endpoint: proxy.baseUrl, providerId, searchAvailable: Boolean(searchApiKey?.trim()) })
+    ensureIsolatedSessionSettings(childEnv.QWEN_HOME)
     const child = spawnImpl(process.execPath, args, {
-      cwd: process.cwd(), env: childEnvironment(env, proxy.token, model, { endpoint: proxy.baseUrl, providerId, searchAvailable: Boolean(searchApiKey?.trim()) }),
+      cwd: process.cwd(), env: childEnv,
       stdio: 'inherit', windowsHide: false, shell: false,
     })
     return await new Promise((resolve, reject) => {

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@botconnector/bccli",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "description": "BCCLI | Full coding engine and legacy SDK with verified Apache-2.0 bundled runtime",
   "type": "module",
   "bin": {
-    "bccli": "./cli.mjs"
+    "bccli": "./bccli-bootstrap.cjs"
   },
   "engines": {
     "node": ">=22"
@@ -36,6 +36,8 @@
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
     "cli.mjs",
+    "bccli-bootstrap.cjs",
+    "session-settings.mjs",
     "core.mjs",
     "proxy.mjs",
     "gateway.mjs",
@@ -79,8 +81,8 @@
   },
   "bccliRuntimeSource": {
     "repository": "https://github.com/farijarifriyanto-debug/bccli-runtime",
-    "commit": "bc4924b0613a759bbd46da414b506b68a2f444ff",
-    "release": "bccli-v0.5.2",
-    "originalSha256": "a801ea65e710dd5825d2867c0df9ed6e172417214bb64d77a9960e7dae1a3c5e"
+    "commit": "eb5e057b3f568e9def717cdc3d8a3b11ce82544f",
+    "release": "bccli-v0.5.3",
+    "originalSha256": "3a185b33af625ef9df3552e40a9390d4d271b0b977971433357b2f592b5553bc"
   }
 }

package/session-settings.mjs

@@ -0,0 +1,26 @@
+// A provider-scoped QWEN_HOME is intentionally separate from ~/.qwen.
+// The upstream engine warns when the isolated directory has no settings.json;
+// create only the minimal blank configuration, never migrate tokens or plugins.
+import { existsSync, lstatSync, mkdirSync, writeFileSync } from 'node:fs'
+import { dirname, join } from 'node:path'
+
+export function ensureIsolatedSessionSettings(home) {
+  if (typeof home !== 'string' || !home.trim()) throw Error('BCCLI session home missing.')
+  mkdirSync(home, { recursive: true, mode: 0o700 })
+  for (const dir of [dirname(home), home]) {
+    const info = lstatSync(dir)
+    if (!info.isDirectory() || info.isSymbolicLink()) throw Error('BCCLI session directory must not be a symlink.')
+  }
+  const file = join(home, 'settings.json')
+  if (existsSync(file)) {
+    if (!lstatSync(file).isFile()) throw Error('BCCLI session settings must be a regular file.')
+    return false
+  }
+  try {
+    writeFileSync(file, '{}\n', { flag: 'wx', mode: 0o600 })
+  } catch (error) {
+    if (error.code !== 'EEXIST' || !lstatSync(file).isFile()) throw error
+    return false
+  }
+  return true
+}