@rectify-so/bridge 0.1.0 → 0.1.2

package/README.md

@@ -1,4 +1,4 @@
-# rectify-bridge
+# @rectify-so/bridge
 
 Connect your locally-installed agent CLIs — **Claude Code**, **Codex**, and **OpenClaw** — to the [Rectify](https://rectify.so) AgentPulse dashboard.
 
@@ -9,7 +9,7 @@ The bridge runs on your machine, reads your local session data, and opens a secu
 In the Rectify dashboard, add a Claude Code / Codex / OpenClaw connection. You'll be given a one-line command:
 
 ```bash
-npx rectify-bridge connect <token>
+npx @rectify-so/bridge connect <token>
 ```
 
 Run it on the machine where the CLI is installed and **keep the window open**. The dashboard updates automatically once connected. Press `Ctrl+C` to disconnect.
@@ -17,7 +17,7 @@ Run it on the machine where the CLI is installed and **keep the window open**. T
 ### Options
 
 ```
-npx rectify-bridge connect <token> [--api <url>]
+npx @rectify-so/bridge connect <token> [--api <url>]
 
   --api <url>   Override the Rectify API base URL (default: https://api.rectify.so)
   -h, --help    Show help

package/dist/index.js

@@ -37,7 +37,7 @@ function printHelp() {
 Rectify Bridge — connect your local agent CLIs to the Rectify dashboard.
 
 Usage:
-  npx rectify-bridge connect <token> [--api <url>]
+  npx @rectify-so/bridge connect <token> [--api <url>]
 
 Commands:
   connect <token>    Connect using the setup token shown in the Rectify dashboard.
@@ -61,7 +61,7 @@ async function main() {
         process.exit(1);
     }
     if (!token) {
-        warn('Missing setup token. Usage: npx rectify-bridge connect <token>');
+        warn('Missing setup token. Usage: npx @rectify-so/bridge connect <token>');
         process.exit(1);
     }
     const api = new ApiClient(apiBase, token);

package/dist/tunnel.js

@@ -49,7 +49,6 @@ export class Tunnel {
             '-o', 'ServerAliveCountMax=3',
             '-o', 'ExitOnForwardFailure=yes',
             '-o', 'StrictHostKeyChecking=no',
-            '-o', 'UserKnownHostsFile=/dev/null',
             `${tunnelUser}@${tunnelHost}`,
         ];
         log(`Opening tunnel: remote ${tunnelHost}:${remotePort} → localhost:${localTarget}`);

package/dist/util.js

@@ -1,4 +1,4 @@
-import { spawn } from 'node:child_process';
+import spawn from 'cross-spawn';
 export function log(...args) {
     const ts = new Date().toISOString().slice(11, 19);
     console.log(`[${ts}]`, ...args);
@@ -11,7 +11,9 @@ const IS_WIN = process.platform === 'win32';
 export function run(command, args, options = {}) {
     const timeoutMs = options.timeoutMs ?? 120000;
     return new Promise((resolve, reject) => {
-        const child = spawn(command, args, { shell: IS_WIN });
+        // cross-spawn safely runs Windows .cmd/.bat shims WITHOUT a shell, so
+        // arguments (including user chat prompts) can never be interpreted as shell commands.
+        const child = spawn(command, args, { shell: false });
         let stdout = '';
         let stderr = '';
         let settled = false;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rectify-so/bridge",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Rectify AgentPulse local bridge — securely connects locally-installed agent CLIs (Claude Code, Codex) and OpenClaw gateways to the Rectify dashboard over a reverse SSH tunnel.",
   "type": "module",
   "bin": {
@@ -28,7 +28,11 @@
     "tunnel"
   ],
   "license": "MIT",
+  "dependencies": {
+    "cross-spawn": "^7.0.6"
+  },
   "devDependencies": {
+    "@types/cross-spawn": "^6.0.6",
     "@types/node": "^20.11.0",
     "typescript": "^5.4.0"
   }