@floless/app 0.6.2 → 0.6.3

package/dist/floless-server.cjs

@@ -51148,7 +51148,7 @@ function nodeExe() {
   }
   if (!isSea3) return _nodeExe = process.execPath;
   try {
-    const out = (0, import_node_child_process.execFileSync)(process.platform === "win32" ? "where" : "which", ["node"], { encoding: "utf8" });
+    const out = (0, import_node_child_process.execFileSync)(process.platform === "win32" ? "where" : "which", ["node"], { encoding: "utf8", windowsHide: true, timeout: 5e3 });
     _nodeExe = out.split(/\r?\n/).map((s) => s.trim()).find(Boolean) ?? "node";
   } catch {
     _nodeExe = "node";
@@ -51171,7 +51171,7 @@ function resolveInvoker() {
     return { head: [nodeExe(), (0, import_node_path3.join)(envDir, "scripts/bin/aware.js")], shell: false, pkgDir: envDir };
   }
   try {
-    const root = (0, import_node_child_process.execFileSync)("npm", ["root", "-g"], { encoding: "utf8", shell: process.platform === "win32" }).trim();
+    const root = (0, import_node_child_process.execFileSync)("npm", ["root", "-g"], { encoding: "utf8", shell: process.platform === "win32", windowsHide: true, timeout: 1e4 }).trim();
     const pkgDir = (0, import_node_path3.join)(root, "@aware-aeco", "cli");
     const bin = (0, import_node_path3.join)(pkgDir, "scripts/bin/aware.js");
     if ((0, import_node_fs4.existsSync)(bin)) return { head: [nodeExe(), bin], shell: false, pkgDir };
@@ -51345,7 +51345,7 @@ var runChain = Promise.resolve();
 function killTree(child) {
   if (process.platform === "win32" && child.pid) {
     try {
-      (0, import_node_child_process.execFileSync)("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore" });
+      (0, import_node_child_process.execFileSync)("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true, timeout: 5e3 });
       return;
     } catch {
     }
@@ -52161,8 +52161,12 @@ function browserCommand(url, platform = process.platform) {
   if (platform === "win32") {
     return {
       cmd: "cmd",
+      // NO `detached`: Node #21825 makes it defeat `windowsHide` for cmd.exe (a CUI child),
+      // flashing a console window on sign-in. windowsHide alone hides it; `start` still hands
+      // the URL to the browser via ShellExecute, which outlives this process. windowsVerbatimArguments
+      // keeps `&` literal inside the quoted url (the desktop-session footgun documented above).
       args: ["/c", "start", '""', `"${url}"`],
-      opts: { windowsHide: true, detached: true, windowsVerbatimArguments: true }
+      opts: { windowsHide: true, windowsVerbatimArguments: true }
     };
   }
   return { cmd: platform === "darwin" ? "open" : "xdg-open", args: [url], opts: { detached: true } };
@@ -52254,7 +52258,7 @@ function appVersion() {
   return resolveVersion({
     isSea: isSea2(),
     sqVersionXml: readSqVersionXml(),
-    define: true ? "0.6.2" : void 0,
+    define: true ? "0.6.3" : void 0,
     pkgVersion: readPkgVersion()
   });
 }
@@ -52264,7 +52268,7 @@ function resolveChannel(s) {
   return "dev";
 }
 function appChannel() {
-  return resolveChannel({ isSea: isSea2(), define: true ? "0.6.2" : void 0 });
+  return resolveChannel({ isSea: isSea2(), define: true ? "0.6.3" : void 0 });
 }
 
 // bake.ts
@@ -53830,7 +53834,7 @@ function startServerDetached() {
   child.unref();
 }
 function openBrowser2(url) {
-  if (isWin2) (0, import_node_child_process5.spawn)("cmd", ["/c", "start", "", url], { windowsHide: true, detached: true }).unref();
+  if (isWin2) (0, import_node_child_process5.spawn)("cmd", ["/c", "start", "", url], { windowsHide: true }).unref();
   else (0, import_node_child_process5.spawn)(process.platform === "darwin" ? "open" : "xdg-open", [url], { detached: true }).unref();
 }
 function stopServer() {
@@ -56137,7 +56141,7 @@ async function startServer() {
   const isWin3 = process.platform === "win32";
   const has = (cmd) => {
     try {
-      (0, import_node_child_process6.execFileSync)(isWin3 ? "where" : "which", [cmd], { stdio: "ignore" });
+      (0, import_node_child_process6.execFileSync)(isWin3 ? "where" : "which", [cmd], { stdio: "ignore", windowsHide: true, timeout: 5e3 });
       return true;
     } catch {
       return false;

package/launch.mjs

@@ -123,7 +123,11 @@ function startServerDetached() {
 }
 
 function openBrowser(url) {
-  if (isWin) spawn('cmd', ['/c', 'start', '', url], { windowsHide: true, detached: true }).unref();
+  // NO `detached` on Windows: Node #21825 makes `detached` defeat `windowsHide` for a CUI
+  // child (cmd.exe), flashing a console window. Without it, windowsHide hides cmd; `start`
+  // hands the URL to the browser via ShellExecute (independent of cmd's tree), so the browser
+  // still survives this launcher exiting. unref() keeps it from holding the event loop.
+  if (isWin) spawn('cmd', ['/c', 'start', '', url], { windowsHide: true }).unref();
   else spawn(process.platform === 'darwin' ? 'open' : 'xdg-open', [url], { detached: true }).unref();
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@floless/app",
-  "version": "0.6.2",
+  "version": "0.6.3",
   "type": "module",
   "description": "Thin localhost host for floless.app — serves web/ and shells the aware CLI. No engine, no LLM.",
   "bin": {