@jamiexiongr/panda-hub 0.1.12 → 0.1.13

package/dist/{chunk-KQOH5MV7.mjs → chunk-6JQUAIUY.mjs}

@@ -5,7 +5,7 @@ import {
   resolveTailscalePublicationMode,
   resolveTailscaleServePort,
   startPandaSessionService
-} from "./chunk-ABDBJQSF.mjs";
+} from "./chunk-CHS6ZMEF.mjs";
 
 // release/panda-hub/src/index.ts
 import fs from "fs";
@@ -15,7 +15,7 @@ import { fileURLToPath } from "url";
 // release/panda-hub/package.json
 var package_default = {
   name: "@jamiexiongr/panda-hub",
-  version: "0.1.12",
+  version: "0.1.13",
   type: "module",
   private: false,
   description: "Panda hub runtime",

package/dist/{chunk-ABDBJQSF.mjs → chunk-CHS6ZMEF.mjs}

@@ -30870,6 +30870,55 @@ import os5 from "os";
 import path8 from "path";
 import { createHash as createHash4, randomUUID as randomUUID2 } from "crypto";
 import { spawn as spawn3, spawnSync as spawnSync2 } from "child_process";
+var MANAGED_ENV_PASSTHROUGH_KEYS = [
+  "ALLUSERSPROFILE",
+  "APPDATA",
+  "COMPUTERNAME",
+  "ComSpec",
+  "HOME",
+  "HOMEDRIVE",
+  "HOMEPATH",
+  "LOCALAPPDATA",
+  "NUMBER_OF_PROCESSORS",
+  "OS",
+  "PATH",
+  "PATHEXT",
+  "PROCESSOR_ARCHITECTURE",
+  "PROCESSOR_IDENTIFIER",
+  "PROCESSOR_LEVEL",
+  "PROCESSOR_REVISION",
+  "ProgramData",
+  "ProgramFiles",
+  "ProgramFiles(x86)",
+  "ProgramW6432",
+  "PUBLIC",
+  "SYSTEMDRIVE",
+  "SystemDrive",
+  "SYSTEMROOT",
+  "SystemRoot",
+  "TEMP",
+  "TMP",
+  "USERDOMAIN",
+  "USERDOMAIN_ROAMINGPROFILE",
+  "USERNAME",
+  "USERPROFILE",
+  "WINDIR"
+];
+var MANAGED_ENV_STRIP_PREFIXES = [
+  "npm_config_",
+  "NPM_CONFIG_",
+  "TSX_",
+  "VSCODE_",
+  "ELECTRON_"
+];
+var MANAGED_ENV_STRIP_KEYS = /* @__PURE__ */ new Set([
+  "NODE_OPTIONS",
+  "NODE_INSPECT_RESUME_ON_START",
+  "npm_config_userconfig",
+  "NPM_CONFIG_USERCONFIG",
+  "npm_config_registry",
+  "NPM_CONFIG_REGISTRY"
+]);
 var DEV_MANAGER_RELATIVE_ROOT = path8.join("state", "panda", "dev-manager");
 var CONFIG_FILE_NAME = "config.json";
 var CREDENTIALS_FILE_NAME = "credentials.json";
@@ -31289,6 +31338,48 @@ var resolveManagedCommand = async (input) => {
     runtimeNodeVersion: execution.runtime_node_version
   };
 };
+var buildIsolatedManagedEnv = (baseEnv, overrides) => {
+  const nextEnv = {};
+  for (const key of MANAGED_ENV_PASSTHROUGH_KEYS) {
+    const value = baseEnv[key];
+    if (typeof value === "string" && value.length > 0) {
+      nextEnv[key] = value;
+    }
+  }
+  for (const [key, value] of Object.entries(baseEnv)) {
+    if (!key || MANAGED_ENV_STRIP_KEYS.has(key)) {
+      continue;
+    }
+    if (MANAGED_ENV_STRIP_PREFIXES.some((prefix) => key.startsWith(prefix))) {
+      continue;
+    }
+    if (key in nextEnv) {
+      continue;
+    }
+    if (typeof value === "string" && value.length > 0) {
+      nextEnv[key] = value;
+    }
+  }
+  nextEnv.NODE_OPTIONS = "";
+  nextEnv.NODE_INSPECT_RESUME_ON_START = "";
+  nextEnv.ELECTRON_RUN_AS_NODE = "";
+  nextEnv.VSCODE_INSPECTOR_OPTIONS = "";
+  for (const [key, value] of Object.entries(overrides ?? {})) {
+    nextEnv[key] = value ?? "";
+  }
+  return nextEnv;
+};
+var createTempNpmPublishUserConfig = async (token) => {
+  const filePath = path8.join(
+    os5.tmpdir(),
+    `panda-dev-manager-${process.pid}-${Date.now()}.npmrc`
+  );
+  const content = `//registry.npmjs.org/:_authToken=${token}
+registry=${NPM_REGISTRY_URL}
+`;
+  await fs7.writeFile(filePath, content, "utf8");
+  return filePath;
+};
 var readStoredConfig = async (codexHome) => {
   const storedConfig = await readJsonFile(resolveConfigPath(codexHome));
   const parsedConfig = devManagerConfigSchema.safeParse(storedConfig);
@@ -32140,25 +32231,33 @@ var createDevManager = ({
   };
   const runNpmPublish = async () => {
     const { config, credentials } = await readStoredConfig(codexHome);
+    const npmToken = credentials.npm_token;
     await validateRepoPath(config.repo_path);
     if (!config.repo_path) {
       throw new Error("\u8BF7\u5148\u914D\u7F6E\u5F00\u53D1\u7248\u4EE3\u7801\u8DEF\u5F84\u3002");
     }
-    if (!credentials.npm_token) {
+    if (!npmToken) {
       throw new Error("\u8BF7\u5148\u5728\u8BBE\u7F6E\u9875\u4FDD\u5B58 npm \u4EE4\u724C\u3002");
     }
     return runManagedJob("npm-publish", "\u53D1\u5E03 npm \u6B63\u5F0F\u5305", async (job) => {
       await job.append("info", "\u51C6\u5907\u6267\u884C release-publish \u811A\u672C\u3002");
-      const command = await resolveManagedCommand({
-        projectPath: config.repo_path,
-        command: "node ./scripts/release-publish.mjs",
-        nodeVersion: config.nvm_version,
-        env: {
-          NODE_AUTH_TOKEN: credentials.npm_token
-        }
-      });
-      await runCommandWithLogs(command, job, "npm \u53D1\u5E03");
-      await job.succeed("npm \u53D1\u5E03\u5B8C\u6210\u3002");
+      const userConfigPath = await createTempNpmPublishUserConfig(npmToken);
+      try {
+        const command = await resolveManagedCommand({
+          projectPath: config.repo_path,
+          command: "node ./scripts/release-publish.mjs",
+          nodeVersion: config.nvm_version
+        });
+        command.env = buildIsolatedManagedEnv(command.env, {
+          NODE_AUTH_TOKEN: npmToken,
+          NPM_CONFIG_USERCONFIG: userConfigPath,
+          PANDA_NPM_PUBLISH_USERCONFIG: userConfigPath
+        });
+        await runCommandWithLogs(command, job, "npm \u53D1\u5E03");
+        await job.succeed("npm \u53D1\u5E03\u5B8C\u6210\u3002");
+      } finally {
+        await fs7.rm(userConfigPath, { force: true }).catch(() => void 0);
+      }
     });
   };
   const runApkBuild = async () => {
@@ -33837,7 +33936,7 @@ var startPandaSessionService = async ({
     return nextOverlayEntries;
   };
   const readTimelineFromRollout = async (sessionId) => {
-    const { readCodexTimeline } = await import("./src-YQZMKGKR.mjs");
+    const { readCodexTimeline } = await import("./src-N4432F53.mjs");
     return readCodexTimeline(sessionId, {
       codexHome,
       sessionFiles: discoveredSessionFiles
@@ -35305,7 +35404,7 @@ var startPandaSessionService = async ({
         lastSnapshotRefreshAt = Date.now();
         return snapshot;
       }
-      const { discoverLocalCodexData } = await import("./src-YQZMKGKR.mjs");
+      const { discoverLocalCodexData } = await import("./src-N4432F53.mjs");
       const discovery = await discoverLocalCodexData({
         agentId: localAgentId,
         agentName: localAgentName,

package/dist/cli.mjs

@@ -1,9 +1,9 @@
 import {
   startJamiexiongrHub
-} from "./chunk-KQOH5MV7.mjs";
+} from "./chunk-6JQUAIUY.mjs";
 import {
   resolveTailscalePublicationMode
-} from "./chunk-ABDBJQSF.mjs";
+} from "./chunk-CHS6ZMEF.mjs";
 import "./chunk-JY3C7BVD.mjs";
 
 // release/panda-hub/src/cli.ts

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import {
   startJamiexiongrHub
-} from "./chunk-KQOH5MV7.mjs";
-import "./chunk-ABDBJQSF.mjs";
+} from "./chunk-6JQUAIUY.mjs";
+import "./chunk-CHS6ZMEF.mjs";
 import "./chunk-JY3C7BVD.mjs";
 export {
   startJamiexiongrHub

package/dist/{src-YQZMKGKR.mjs → src-N4432F53.mjs}

@@ -42,7 +42,7 @@ import {
   writeCodexGlobalState,
   writePandaSessionPrefs,
   writePandaThreadPrefs
-} from "./chunk-ABDBJQSF.mjs";
+} from "./chunk-CHS6ZMEF.mjs";
 import "./chunk-JY3C7BVD.mjs";
 
 // packages/provider-codex/src/index.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jamiexiongr/panda-hub",
-  "version": "0.1.12",
+  "version": "0.1.13",
   "type": "module",
   "private": false,
   "description": "Panda hub runtime",