@ericrisco/rsc 3.0.5 → 3.0.6

package/manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "3.0.5",
+  "version": "3.0.6",
   "counts": {
     "skills": 270,
     "agents": 33,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ericrisco/rsc",
-  "version": "3.0.5",
+  "version": "3.0.6",
   "description": "A guided harness builder that turns your goal into a minimal, verified AI-agent setup using strict best practices.",
   "type": "module",
   "bin": {

package/targets/auto-update.mjs

@@ -11,7 +11,7 @@
 //     `node .rsc/auto-update.mjs` on its first turn, and to relay what it prints.
 import { readFileSync, existsSync, writeFileSync, openSync } from 'node:fs';
 import { spawn } from 'node:child_process';
-import { join, resolve } from 'node:path';
+import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 // Update check: compare the installed version (.rsc/.version, written at install)
@@ -86,12 +86,21 @@ function launchUpdate(root, version, env) {
   const targets = declaredTargets(root);
   const args = [...base.slice(1), 'sync', ...(targets.length ? ['--target', targets.join(',')] : [])];
   const log = openSync(logFile(root), 'w');
-  const child = spawn(base[0], args, {
+  // #293 — on Windows npx is npx.cmd, which Node only starts through a shell, and a shell is one more
+  // console that can flash. So npx runs as what it is, a script of the npm that ships with Node,
+  // started by node itself. Only when that script cannot be found (a runtime that is not Node, e.g.
+  // OpenCode's Bun) does it fall back to the shell — still hidden.
+  const npxCli = !env.RSC_AUTO_UPDATE_CMD && process.platform === 'win32' && !process.versions.bun
+    ? [join(dirname(process.execPath), 'node_modules', 'npm', 'bin', 'npx-cli.js')].find((p) => existsSync(p))
+    : null;
+  const [command, argv] = npxCli ? [process.execPath, [npxCli, ...args]] : [base[0], args];
+  const viaShell = !npxCli && process.platform === 'win32';
+  const child = spawn(command, argv, {
     cwd: root,
     detached: true,
     stdio: ['ignore', log, log],
     windowsHide: true,
-    shell: process.platform === 'win32', // npx is npx.cmd there; every argument was validated above
+    shell: viaShell, // fallback only (see above); every argument was validated above
     env: { ...env, RSC_NO_UPDATE_CHECK: '1', RSC_AUTO_UPDATE_TO: version },
   });
   child.on('error', () => {});

package/targets/branch-guard.mjs

@@ -45,7 +45,7 @@ export function effectiveDir(command, base) {
 }
 
 const gitAt = (dir) => (...args) => {
-  const r = spawnSync('git', ['-C', dir, ...args], { encoding: 'utf8' });
+  const r = spawnSync('git', ['-C', dir, ...args], { windowsHide: true, encoding: 'utf8' });
   return r.status === 0 ? (r.stdout || '').trim() : null;
 };
 

package/targets/git-permissions.js

@@ -41,7 +41,7 @@ const FILES = Object.freeze({
 });
 
 const git = (cwd, args) => {
-  try { return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
+  try { return execFileSync('git', args, { windowsHide: true, cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
 };
 const rel = (cwd, path) => relative(cwd, path).split(sep).join('/');
 

package/targets/knowledge-sync.mjs

@@ -65,6 +65,7 @@ export const isKnowledge = (path) => KNOWLEDGE.some((k) => path.startsWith(k)) &
 function run(root, args, { timeout = LOCAL_TIMEOUT_MS, input, env } = {}) {
   try {
     const out = execFileSync('git', args, {
+      windowsHide: true,
       cwd: root, encoding: 'utf8', timeout, input, maxBuffer: 16 * 1024 * 1024,
       stdio: ['pipe', 'pipe', 'pipe'],
       env: { ...process.env, GIT_TERMINAL_PROMPT: '0', LC_ALL: 'C', ...env },

package/targets/knowledge-wiring.js

@@ -33,7 +33,7 @@ const EVENTS = Object.freeze({
 export const KNOWLEDGE_TARGETS = Object.freeze(Object.keys(CONFIG));
 
 const git = (cwd, args) => {
-  try { return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
+  try { return execFileSync('git', args, { windowsHide: true, cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
 };
 const rel = (cwd, path) => relative(cwd, path).split(sep).join('/');
 const tracked = (cwd, path) => Boolean(git(cwd, ['ls-files', '--', rel(cwd, path)]));

package/targets/memory.js

@@ -35,7 +35,7 @@ export function memoryEnabledForProject(cwd = process.cwd()) {
 }
 
 function git(cwd, args) {
-  try { return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
+  try { return execFileSync('git', args, { windowsHide: true, cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
 }
 
 function rel(cwd, path) {

package/targets/sello.mjs

@@ -103,7 +103,7 @@ export function isEnabled(root) {
 // The CLI can run from any subdirectory; the guard always runs from the project
 // root. Both must compute the same candidate, so both resolve to the git toplevel.
 export function resolveRoot(root) {
-  const r = spawnSync('git', ['-C', root, 'rev-parse', '--show-toplevel'], { encoding: 'utf8' });
+  const r = spawnSync('git', ['-C', root, 'rev-parse', '--show-toplevel'], { windowsHide: true, encoding: 'utf8' });
   return r.status === 0 ? (r.stdout || '').trim() || root : root;
 }
 
@@ -211,7 +211,7 @@ export function lensesRequired(tier, cfg = null) {
 // name matches no file on disk, so the file would hash as deleted and any later
 // mutation of it would sail through the gate. -z gives raw NUL-separated paths.
 function git(root, ...args) {
-  const r = spawnSync('git', ['-C', root, '-c', 'core.quotePath=false', ...args], {
+  const r = spawnSync('git', ['-C', root, '-c', 'core.quotePath=false', ...args], { windowsHide: true,
     encoding: 'utf8', maxBuffer: 64 * 1024 * 1024,
   });
   return r.status === 0 ? (r.stdout || '') : null;

package/targets/session-memory-core.mjs

@@ -48,7 +48,7 @@ function cleanId(value, prefix = 'session') {
 
 function git(cwd, args) {
   try {
-    return { ok: true, out: execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 2 * 1024 * 1024 }).trim() };
+    return { ok: true, out: execFileSync('git', args, { windowsHide: true, cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], maxBuffer: 2 * 1024 * 1024 }).trim() };
   } catch {
     return { ok: false, out: '' };
   }

package/targets/ship-guard.mjs

@@ -67,7 +67,7 @@ const MERGE = /\bgit\s+merge\b/;
 if (!TRUNK.test(command) && !MERGE.test(command)) allow();
 
 const git = (...args) => {
-  const r = spawnSync('git', ['-C', root, ...args], { encoding: 'utf8' });
+  const r = spawnSync('git', ['-C', root, ...args], { windowsHide: true, encoding: 'utf8' });
   return r.status === 0 ? (r.stdout || '').trim() : null;
 };
 

package/targets/team-safe-start.mjs

@@ -16,7 +16,7 @@ import { existsSync, mkdirSync, realpathSync, writeFileSync } from 'node:fs';
 import { basename, join, sep } from 'node:path';
 
 const git = (root, args) => {
-  try { return execFileSync('git', args, { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 8000 }).trim(); }
+  try { return execFileSync('git', args, { windowsHide: true, cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], timeout: 8000 }).trim(); }
   catch { return null; }
 };
 const ok = (root, args) => git(root, args) !== null;

package/targets/trunk-policy.mjs

@@ -28,7 +28,7 @@ const TEAM_COMMITS = 50;
 
 function git(root, args) {
   try {
-    return execFileSync('git', args, { cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 4000 }).trim();
+    return execFileSync('git', args, { windowsHide: true, cwd: root, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'], timeout: 4000 }).trim();
   } catch { return null; }
 }
 

package/targets/update-wiring.js

@@ -30,7 +30,7 @@ const EVENT = Object.freeze({ codex: 'SessionStart', gemini: 'SessionStart', cur
 export const UPDATE_HOOK_TARGETS = Object.freeze(['claude', ...Object.keys(CONFIG)].sort());
 
 const git = (cwd, args) => {
-  try { return execFileSync('git', args, { cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
+  try { return execFileSync('git', args, { windowsHide: true, cwd, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return null; }
 };
 const rel = (cwd, path) => relative(cwd, path).split(sep).join('/');
 const tracked = (cwd, path) => Boolean(git(cwd, ['ls-files', '--', rel(cwd, path)]));

package/targets/worktree-reaper.mjs

@@ -72,7 +72,7 @@ function git(cwd, args) {
   // 64 MiB, because node's 1 MiB default kills git mid-write on any worktree with a few thousand
   // stray files and hands back a truncated-but-successful-looking result. Measured: in the 1.0-1.15 MB
   // band the same unchanged worktree flipped between verdicts across runs.
-  const r = spawnSync('git', ['-C', cwd, ...args], { encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
+  const r = spawnSync('git', ['-C', cwd, ...args], { windowsHide: true, encoding: 'utf8', maxBuffer: 64 * 1024 * 1024 });
   // `raw` matters for porcelain output: its leading space is a status code, not padding, and
   // trimming it shifted every path by one character — so the message naming the file about to be
   // lost named a file that does not exist. A refusal has to be true to be actionable (P6).