@chendesheng/comm100-auto-login 0.0.1 → 0.0.3

package/README.md

@@ -43,10 +43,19 @@ comm100-accounts setup
 Setup registers a [Chrome native messaging host](https://developer.chrome.com/docs/extensions/develop/concepts/native-messaging)
 for this extension and profile. It uses one temporary LevelDB snapshot to discover the profile's
 connection ID; it never opens Chrome's original database. The launcher uses this installation's
-absolute Node.js path, so Chrome does not need Node on its PATH. Setup currently supports Chrome on
-macOS and Linux. Chrome must be running, with the extension enabled, for subsequent CLI commands.
-
-All normal reads and writes go through the extension service worker over a private local socket.
+absolute Node.js path, so Chrome does not need Node on its PATH. Setup supports Chrome on Windows,
+macOS, and Linux. Chrome must be running, with the extension enabled, for subsequent CLI commands.
+
+On Windows, setup installs the launcher and configuration in `%LOCALAPPDATA%\comm100-accounts`
+and registers the native host under
+`HKCU\Software\Google\Chrome\NativeMessagingHosts\com.comm100.accounts` for the current user;
+administrator access is not required. Communication uses a Windows named pipe. The same install,
+`extension-path`, and `setup` commands work in PowerShell and Command Prompt. If PowerShell blocks
+npm's script launcher, use `npm.cmd` and `comm100-accounts.cmd`. After a Node.js installation moves,
+run setup again so the launcher uses its new path.
+
+All normal reads and writes go through the extension service worker over local IPC (a Windows
+named pipe or a Unix socket).
 Accounts and JWTs share the extension's `chrome.storage.local` state; no database snapshots are
 made for `list`, `login`, or `tokens`, and there is no separate JWT cache file. Bridge configuration
 contains only profile/connection metadata, not credentials or tokens.

package/extension/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": 3,
   "name": "Comm100 Auto Login",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "Silently signs in to Comm100 test dashboards with saved credentials, preferring the most recently used account.",
   "minimum_chrome_version": "116",
   "permissions": [

package/package.json

@@ -1,18 +1,28 @@
 {
   "name": "@chendesheng/comm100-auto-login",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "type": "module",
   "description": "Comm100 auto-login extension and account CLI. The extension has no runtime dependencies; the CLI uses classic-level.",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/chendesheng/Comm100Login.git"
   },
-  "publishConfig": { "access": "public" },
-  "files": ["bin/", "src/cli/", "src/shared/", "extension/", "scripts/postinstall.mjs"],
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "bin/",
+    "src/cli/",
+    "src/shared/",
+    "extension/",
+    "scripts/postinstall.mjs"
+  ],
   "bin": {
     "comm100-accounts": "bin/comm100-accounts.mjs"
   },
-  "engines": { "node": ">=22" },
+  "engines": {
+    "node": ">=22"
+  },
   "scripts": {
     "build:extension": "node scripts/build-extension.mjs",
     "prepack": "npm run build:extension",

package/src/cli/accounts.mjs

@@ -91,7 +91,8 @@ export async function readChromeState(source) {
     let db;
     try {
       const snapshot = join(temporary, 'db');
-      await cp(source, snapshot, { recursive: true });
+      // Chrome holds LOCK exclusively on Windows. The snapshot creates its own lock.
+      await cp(source, snapshot, { recursive: true, filter: (path) => basename(path) !== 'LOCK' });
       db = new ClassicLevel(snapshot, { keyEncoding: 'utf8', valueEncoding: 'json', createIfMissing: false });
       const raw = await db.get('comm100AutoLogin');
       if (!raw || !Array.isArray(raw.accounts)) throw new Error('The database has no Comm100 account list.');

package/src/cli/bridge.mjs

@@ -35,12 +35,12 @@ export function messageReader(onMessage, onError) {
 }
 
 export function socketDirectory() {
-  if (platform() === 'win32') throw new Error('The native CLI bridge currently supports macOS and Linux.');
   return `/tmp/comm100-accounts-${process.getuid()}`;
 }
 
-export function socketPath(bridgeId) {
+export function socketPath(bridgeId, os = platform()) {
   if (!/^[a-f0-9-]{36}$/i.test(bridgeId || '')) throw new Error('Reload the updated extension, then run comm100-accounts setup.');
+  if (os === 'win32') return `\\\\.\\pipe\\comm100-accounts-${bridgeId}`;
   return join(socketDirectory(), `${bridgeId}.sock`);
 }
 
@@ -50,7 +50,9 @@ export function chromeDataDirectory() {
   return join(process.env.XDG_CONFIG_HOME || join(homedir(), '.config'), 'google-chrome');
 }
 
-export const bridgeConfigDirectory = () => join(process.env.XDG_CONFIG_HOME || join(homedir(), '.config'), 'comm100-accounts');
+export const bridgeConfigDirectory = () => join(platform() === 'win32'
+  ? process.env.LOCALAPPDATA || join(homedir(), 'AppData/Local')
+  : process.env.XDG_CONFIG_HOME || join(homedir(), '.config'), 'comm100-accounts');
 export const bridgeConfigFile = () => join(bridgeConfigDirectory(), 'bridge.json');
 
 export async function readBridgeConfig(filename = bridgeConfigFile()) {

package/src/cli/native-host.mjs

@@ -1,10 +1,12 @@
 import { createConnection, createServer } from 'node:net';
 import { chmod, lstat, mkdir, rm } from 'node:fs/promises';
 import { randomUUID } from 'node:crypto';
+import { platform } from 'node:os';
 import { encodeMessage, messageReader, socketDirectory, socketPath } from './bridge.mjs';
 
 /** Chrome owns stdio; the local socket carries CLI requests to that same native port. */
 export async function startNativeHost({ input = process.stdin, output = process.stdout } = {}) {
+  const windows = platform() === 'win32';
   const clients = new Set();
   const pending = new Map();
   let server, path, closed = false;
@@ -14,24 +16,24 @@ export async function startNativeHost({ input = process.stdin, output = process.
     closed = true;
     for (const socket of clients) socket.destroy();
     if (server?.listening) await new Promise((done) => server.close(done));
-    if (path) await rm(path, { force: true });
+    if (path && !windows) await rm(path, { force: true });
   }
   async function listen(bridgeId) {
-    const directory = socketDirectory();
-    await mkdir(directory, { recursive: true, mode: 0o700 });
-    const details = await lstat(directory);
-    if (!details.isDirectory() || details.uid !== process.getuid()) throw new Error('Invalid CLI bridge socket directory.');
-    await chmod(directory, 0o700);
     const target = socketPath(bridgeId);
-    // Remove only an abandoned socket. Never displace a live Chrome/profile connection.
-    try {
+    if (!windows) {
+      const directory = socketDirectory();
+      await mkdir(directory, { recursive: true, mode: 0o700 });
+      const details = await lstat(directory);
+      if (!details.isDirectory() || details.uid !== process.getuid()) throw new Error('Invalid CLI bridge socket directory.');
+      await chmod(directory, 0o700);
+      // Remove only an abandoned socket. Never displace a live Chrome/profile connection.
       await new Promise((accept, reject) => {
         const probe = createConnection(target);
         probe.on('connect', () => { probe.destroy(); reject(new Error('CLI bridge is already connected for this profile.')); });
         probe.on('error', (error) => ['ENOENT', 'ECONNREFUSED'].includes(error.code) ? accept() : reject(error));
       });
       await rm(target, { force: true });
-    } catch (error) { throw error; }
+    }
     if (closed) return;
     server = createServer((socket) => {
       clients.add(socket);
@@ -49,11 +51,13 @@ export async function startNativeHost({ input = process.stdin, output = process.
     });
     await new Promise((accept, reject) => {
       server.once('error', reject);
-      server.listen(target, accept);
+      // Keep libuv's default access restrictions; never grant access to all users.
+      // Windows owns named-pipe lifetime and prevents a second server binding it.
+      server.listen({ path: target, readableAll: false, writableAll: false }, accept);
     });
     path = target;
-    if (closed) { await rm(path, { force: true }); server.close(); return; }
-    await chmod(path, 0o600);
+    if (closed) { if (!windows) await rm(path, { force: true }); server.close(); return; }
+    if (!windows) await chmod(path, 0o600);
     send({ type: 'listening' });
   }
   let initializing = false;

package/src/cli/setup.mjs

@@ -2,15 +2,31 @@ import { chmod, mkdir, rename, writeFile } from 'node:fs/promises';
 import { basename, dirname, join } from 'node:path';
 import { platform } from 'node:os';
 import { fileURLToPath } from 'node:url';
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
 import { bridgeConfigDirectory, chromeDataDirectory, NATIVE_HOST, readBridgeConfig, socketPath } from './bridge.mjs';
 
 const shellQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
+const execute = promisify(execFile);
 
-export async function installBridge(database, state, { configDirectory = bridgeConfigDirectory(), chromeDirectory = chromeDataDirectory() } = {}) {
-  if (platform() === 'win32') throw new Error('Native CLI bridge setup currently supports macOS and Linux.');
+export function windowsLauncher(node, script) {
+  const quote = (value) => {
+    if (/["\r\n\0]/.test(value)) throw new Error('Invalid native host launcher path.');
+    return `"${value.replaceAll('%', '%%')}"`;
+  };
+  // stdout must contain only binary native-messaging frames. Disable expansion of !
+  // in paths, escape literal %, and use UTF-8 for non-ASCII installation directories.
+  return `@echo off\r\nsetlocal DisableDelayedExpansion\r\nchcp 65001 >nul\r\n${quote(node)} ${quote(script)}\r\n`;
+}
+
+export async function installBridge(database, state, {
+  configDirectory = bridgeConfigDirectory(), chromeDirectory = chromeDataDirectory(),
+  os = platform(), runCommand = execute
+} = {}) {
+  const windows = os === 'win32';
   const extensionId = basename(database);
   if (!/^[a-p]{32}$/.test(extensionId)) throw new Error('--db must identify the installed Chrome extension directory for setup.');
-  socketPath(state.cliBridgeId); // Validate before writing any setup files.
+  socketPath(state.cliBridgeId, os); // Validate before writing any setup files.
   const configFile = join(configDirectory, 'bridge.json');
   const config = await readBridgeConfig(configFile);
   const profilePath = dirname(dirname(database));
@@ -18,17 +34,30 @@ export async function installBridge(database, state, { configDirectory = bridgeC
   connections.push({ profilePath, database, extensionId, bridgeId: state.cliBridgeId });
   const directory = configDirectory;
   await mkdir(directory, { recursive: true, mode: 0o700 });
-  const launcher = join(directory, 'native-host');
+  const launcher = join(directory, windows ? 'native-host.bat' : 'native-host');
   const script = fileURLToPath(new URL('../../bin/comm100-accounts-host.mjs', import.meta.url));
-  await writeFile(launcher, `#!/bin/sh\nexec ${shellQuote(process.execPath)} ${shellQuote(script)} "$@"\n`, { mode: 0o700 });
-  await chmod(launcher, 0o700);
-  const manifestDirectory = join(chromeDirectory, 'NativeMessagingHosts');
+  await writeFile(launcher, windows ? windowsLauncher(process.execPath, script)
+    : `#!/bin/sh\nexec ${shellQuote(process.execPath)} ${shellQuote(script)} "$@"\n`, { mode: 0o700 });
+  if (!windows) await chmod(launcher, 0o700);
+  const manifestDirectory = windows ? directory : join(chromeDirectory, 'NativeMessagingHosts');
   await mkdir(manifestDirectory, { recursive: true });
   const manifest = {
     name: NATIVE_HOST, description: 'Comm100 account CLI bridge', path: launcher, type: 'stdio',
     allowed_origins: [...new Set(connections.map((entry) => `chrome-extension://${entry.extensionId}/`))]
   };
-  await writeFile(join(manifestDirectory, `${NATIVE_HOST}.json`), JSON.stringify(manifest, null, 2) + '\n');
+  const manifestPath = join(manifestDirectory, `${NATIVE_HOST}.json`);
+  await writeFile(manifestPath, JSON.stringify(manifest, null, 2) + '\n');
+  if (windows) {
+    // Chrome checks the 32-bit registry view first, even on 64-bit Windows.
+    // HKCU needs no administrator privileges; execFile avoids shell interpolation.
+    const registry = join(process.env.SystemRoot || 'C:\\Windows', 'System32', 'reg.exe');
+    try {
+      await runCommand(registry, ['ADD', `HKCU\\Software\\Google\\Chrome\\NativeMessagingHosts\\${NATIVE_HOST}`,
+        '/ve', '/t', 'REG_SZ', '/d', manifestPath, '/f', '/reg:32'], { windowsHide: true });
+    } catch (error) {
+      throw new Error('Cannot register the Chrome native host for this Windows user. Run comm100-accounts setup again.', { cause: error });
+    }
+  }
   const temporary = `${configFile}.${process.pid}.tmp`;
   await writeFile(temporary, JSON.stringify({ connections }, null, 2) + '\n', { mode: 0o600 });
   await rename(temporary, configFile);