@leuria/cli 0.1.1 → 0.1.2

package/dist/{chunk-ES2YTJPL.js → chunk-JOCM56MT.js}

@@ -343,6 +343,7 @@ import { createHash } from "crypto";
 import { chmodSync as chmodSync2, existsSync as existsSync3, mkdirSync as mkdirSync4, readdirSync, readFileSync as readFileSync3, rmSync, writeFileSync as writeFileSync3 } from "fs";
 import { dirname, join as join3 } from "path";
 import { promisify as promisify2 } from "util";
+import crossSpawn from "cross-spawn";
 
 // src/codex.ts
 import { execFile } from "child_process";
@@ -374,7 +375,11 @@ async function prepareCodexHome(agent) {
     "",
     "[features]",
     ...features.map((name) => `${name} = ${ENABLED_FEATURES.has(name)}`),
-    ""
+    "",
+    // Windows: the sandbox that needs no administrator rights (a restricted token).
+    // The other one asks for them the first time: out of the blue, and a dead end
+    // on a work computer without them.
+    ...process.platform === "win32" ? ["[windows]", 'sandbox = "unelevated"', ""] : []
   ];
   writeFileSync2(join2(home, "config.toml"), lines.join("\n"), { mode: 384 });
   writeFileSync2(stamp, agent.version);
@@ -576,12 +581,7 @@ async function installPackage(dir, spec, args, env) {
   if (process.versions.bun) {
     await execFileAsync2(process.execPath, ["add", spec], { cwd: dir, env: { ...process.env, BUN_BE_BUN: "1" }, timeout: 5 * 6e4 });
   } else {
-    const npm = process.platform === "win32" ? "npm.cmd" : "npm";
-    await execFileAsync2(npm, ["install", "--no-audit", "--no-fund", "--omit=dev", "--loglevel=error", spec], {
-      cwd: dir,
-      timeout: 5 * 6e4,
-      shell: process.platform === "win32"
-    });
+    await run("npm", ["install", "--no-audit", "--no-fund", "--omit=dev", "--loglevel=error", spec], { cwd: dir, timeout: 5 * 6e4 });
   }
   const name = spec.lastIndexOf("@") > 0 ? spec.slice(0, spec.lastIndexOf("@")) : spec;
   const pkgDir = join3(dir, "node_modules", ...name.split("/"));
@@ -593,6 +593,25 @@ async function installPackage(dir, spec, args, env) {
   const isScript = /\.[cm]?js$/.test(entry) || /^#!.*\b(node|bun)\b/.test(readFileSync3(entry, "utf-8").slice(0, 100));
   return isScript ? { command: process.execPath, launchArgs: [entry], args, env } : { command: entry, launchArgs: [], args, env };
 }
+function run(command, args, options) {
+  return new Promise((resolve, reject) => {
+    const child = crossSpawn(command, args, { cwd: options.cwd, stdio: ["ignore", "ignore", "pipe"], windowsHide: true });
+    let stderr = "";
+    child.stderr?.on("data", (chunk) => {
+      stderr += chunk.toString("utf-8");
+    });
+    const timer = setTimeout(() => child.kill(), options.timeout);
+    child.on("error", (error) => {
+      clearTimeout(timer);
+      reject(error);
+    });
+    child.on("close", (code) => {
+      clearTimeout(timer);
+      if (code === 0) resolve();
+      else reject(new Error(`${command} ${args.join(" ")} failed (${code ?? "stopped"})${stderr.trim() ? `: ${stderr.trim()}` : ""}`));
+    });
+  });
+}
 async function installBinary(dir, target) {
   const res = await fetch(target.archive, { signal: AbortSignal.timeout(5 * 6e4) });
   if (!res.ok) throw new Error(`Download failed (${res.status}): ${target.archive}`);
@@ -635,16 +654,17 @@ function compareVersions(a, b) {
 }
 
 // src/version.ts
-var VERSION = true ? "0.1.0" : "0.0.0-dev";
+var VERSION = true ? "0.1.2" : "0.0.0-dev";
 
 // src/auth.ts
-import { spawn as spawn2 } from "child_process";
+import crossSpawn3 from "cross-spawn";
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync3 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
 import { join as join5 } from "path";
 
 // src/acp/acp-client.ts
 import { spawn } from "child_process";
+import crossSpawn2 from "cross-spawn";
 import { Readable, Writable } from "stream";
 var rawParams = {
   // biome-ignore lint/suspicious/noExplicitAny: ACP payloads are untyped here
@@ -707,11 +727,11 @@ var AcpLiveSession = class {
     const env = { ...process.env, ...this.options.envVars };
     for (const key of REMOVED_ENV_VARS) delete env[key];
     if (process.versions.bun) env.BUN_BE_BUN = "1";
-    const child = spawn(this.options.command, this.options.args, {
+    const child = crossSpawn2(this.options.command, this.options.args, {
       stdio: ["pipe", "pipe", "pipe"],
       env,
       cwd: this.options.cwd,
-      shell: process.platform === "win32",
+      windowsHide: true,
       // Its own process group, so close() also stops what the agent starts
       // (Gemini relaunches itself as a child process).
       detached: process.platform !== "win32"
@@ -915,7 +935,7 @@ ${file.text}
 function killTree(child) {
   try {
     if (process.platform === "win32" && child.pid) {
-      spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore" });
+      spawn("taskkill", ["/pid", String(child.pid), "/T", "/F"], { stdio: "ignore", windowsHide: true });
     } else if (child.pid) {
       process.kill(-child.pid, "SIGTERM");
     } else {
@@ -1161,11 +1181,11 @@ async function signIn(id, options = {}) {
     else options.signal?.addEventListener("abort", onAbort, { once: true });
   });
   try {
-    return await Promise.race([cancelled, run()]);
+    return await Promise.race([cancelled, run2()]);
   } finally {
     close();
   }
-  async function run() {
+  async function run2() {
     let session = opened.session;
     const connected = await session.connect();
     if (connected.error) return { ok: false, detail: `the agent did not start: ${connected.error}`, methods: [] };
@@ -1180,7 +1200,7 @@ async function signIn(id, options = {}) {
     if (isTerminal(method)) {
       session.close();
       const code = await new Promise((resolve, reject) => {
-        const child = spawn2(agent.command, [...agent.launchArgs, ...method.args ?? []], {
+        const child = crossSpawn3(agent.command, [...agent.launchArgs, ...method.args ?? []], {
           stdio: "inherit",
           cwd: sandbox,
           env: { ...process.env, ...env, ...method.env ?? {} }

package/dist/cli.js

@@ -40,7 +40,7 @@ import {
   signIn,
   startEngine,
   updateAgents
-} from "./chunk-ES2YTJPL.js";
+} from "./chunk-JOCM56MT.js";
 
 // src/cli.ts
 import { spawn } from "child_process";
@@ -1086,7 +1086,10 @@ function sites(args) {
   }
 }
 function openInBrowser(url) {
-  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+  const [command, args] = process.platform === "darwin" ? ["open", [url]] : (
+    // Not `cmd /c start`: cmd would read the & between query parameters as a new command.
+    process.platform === "win32" ? ["rundll32", ["url.dll,FileProtocolHandler", url]] : ["xdg-open", [url]]
+  );
   try {
     const child = spawn(command, args, { stdio: "ignore", detached: true });
     child.on("error", () => void 0);
@@ -1226,13 +1229,19 @@ async function startForApp(config, verbose, devPairing) {
   });
   setTimeout(updateAis, AI_UPDATE_DELAY_MS).unref();
   setInterval(updateAis, AI_UPDATE_EVERY_MS).unref();
+  let stopping = false;
   const shutdown = async () => {
+    if (stopping) return;
+    stopping = true;
     await engine.close();
     process.exit(0);
   };
   process.on("SIGINT", shutdown);
   process.on("SIGTERM", shutdown);
   process.stdin.on("end", shutdown);
+  process.stdin.on("data", (chunk) => {
+    if (chunk.toString("utf-8").split(/\r?\n/).includes("quit")) void shutdown();
+  });
   process.stdin.resume();
 }
 function out(text) {

package/dist/index.js

@@ -18,7 +18,7 @@ import {
   resolveAgentCommand,
   signIn,
   startEngine
-} from "./chunk-ES2YTJPL.js";
+} from "./chunk-JOCM56MT.js";
 export {
   DEFAULT_PORT,
   GrantStore,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@leuria/cli",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "Bring your own AI to the web: the Leuria engine. Lets websites you approve use the AI on your machine, through tools the page provides.",
   "license": "Apache-2.0",
   "type": "module",
@@ -30,6 +30,7 @@
   "dependencies": {
     "@agentclientprotocol/sdk": "^1.5.0",
     "cacache": "^21.0.1",
+    "cross-spawn": "^7.0.6",
     "giget": "^3.3.1",
     "ipaddr.js": "^2.5.0",
     "ws": "^8.18.0",
@@ -37,6 +38,7 @@
   },
   "devDependencies": {
     "@types/cacache": "^20.0.1",
+    "@types/cross-spawn": "^6.0.6",
     "@types/node": "^22.0.0",
     "@types/ws": "^8.5.0",
     "tsup": "^8.4.0",