@remcp/runtime 0.2.231 → 0.2.232

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/runtime",
-  "version": "0.2.231",
+  "version": "0.2.232",
   "description": "First-party ReMCP local device runtime: filesystem, terminal, computer-use, browser, diagnostics and document tools over MCP.",
   "type": "module",
   "license": "MIT",

package/src/tools/files-archive-actions.mjs

@@ -60,17 +60,17 @@ export async function createArchiveTool(args, extra = {}) {
      if (format === 'zip') {
        if (process.platform === 'win32') {
          if (!tools.tar) fail('Windows archive backend is unavailable: tar.exe is required');
-         const result = spawnSync(tools.tar, ['-a', '-c', '-f', staging, '--', ...archiveNames], { cwd: snapshotRoot, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024 });
+         const result = spawnSync(tools.tar, ['-a', '-c', '-f', staging, '--', ...archiveNames], { cwd: snapshotRoot, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
          if (result.status !== 0) fail(`tar.exe ZIP creation failed: ${(result.stderr || result.stdout || '').trim() || `exit ${result.status}`}`);
        } else {
          if (!tools.zip) fail('zip is not installed on this device; use format "tar.gz"');
-         const result = spawnSync(tools.zip, ['-r', '-q', '-y', staging, '--', ...archiveNames], { cwd: snapshotRoot, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024 });
+         const result = spawnSync(tools.zip, ['-r', '-q', '-y', staging, '--', ...archiveNames], { cwd: snapshotRoot, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
          if (result.status !== 0) fail(`zip failed: ${(result.stderr || result.stdout || '').trim() || `exit ${result.status}`}`);
        }
     } else if (format === 'tar' || format === 'tar.gz' || format === 'tgz') {
       if (!tools.tar) fail('tar is not installed on this device');
       const flags = format === 'tar' ? '-cf' : '-czf';
-       const result = spawnSync(tools.tar, [flags, staging, '--', ...archiveNames], { cwd: snapshotRoot, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024 });
+       const result = spawnSync(tools.tar, [flags, staging, '--', ...archiveNames], { cwd: snapshotRoot, encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (result.status !== 0) fail(`tar failed: ${(result.stderr || result.stdout || '').trim() || `exit ${result.status}`}`);
      } else {
        fail('format must be tar, tar.gz, or zip');
@@ -124,34 +124,34 @@ export async function extractArchiveTool(args) {
     if (existingDestination?.isSymbolicLink() || (existingDestination && !existingDestination.isDirectory())) fail('Archive destination is not a safe directory');
     if (format === 'zip' && process.platform !== 'win32') {
       if (!tools.unzip) fail('unzip is not installed on this device');
-      const listing = spawnSync(tools.unzip, ['-Z', '-1', archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024 });
+      const listing = spawnSync(tools.unzip, ['-Z', '-1', archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (listing.error || listing.status !== 0) fail(`Could not inspect ZIP archive: ${(listing.stderr || listing.error?.message || `exit ${listing.status}`).trim()}`);
       const names = String(listing.stdout || '').split(/\r?\n/).filter(Boolean);
       if (names.length > 100_000 || names.some(name => !safeArchiveEntry(name))) fail('ZIP archive contains an unsafe path or too many entries');
-      const details = spawnSync(tools.unzip, ['-Z', '-v', archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024 });
+      const details = spawnSync(tools.unzip, ['-Z', '-v', archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (details.error || details.status !== 0) fail(`Could not inspect ZIP sizes: ${(details.stderr || details.error?.message || `exit ${details.status}`).trim()}`);
       const detailText = String(details.stdout || '');
       if (/symbolic link|Unix file attributes \([^)]*\b12\d{4}/i.test(detailText)) fail('ZIP archive contains a symbolic link');
       const expandedBytes = archiveExpandedSize(detailText.split(/\r?\n/), /uncompressed size:\s*(\d+)\s*bytes/i, 'ZIP archive', names.length);
       assertArchiveExpandedSize(expandedBytes, 'ZIP archive');
-      const result = spawnSync(tools.unzip, ['-o', '-q', archiveSnapshot, '-d', staging], { encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024 });
+      const result = spawnSync(tools.unzip, ['-o', '-q', archiveSnapshot, '-d', staging], { encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (result.status !== 0) fail(`unzip failed: ${(result.stderr || result.stdout || '').trim() || `exit ${result.status}`}`);
     } else {
       if (!tools.tar) fail(process.platform === 'win32' ? 'Windows archive backend is unavailable: tar.exe is required' : 'tar is not installed on this device');
       const listFlags = format === 'tar.gz' ? '-tzf' : format === 'tar.bz2' ? '-tjf' : format === 'tar.xz' ? '-tJf' : '-tf';
-      const listing = spawnSync(tools.tar, [listFlags, archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024 });
+      const listing = spawnSync(tools.tar, [listFlags, archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (listing.error || listing.status !== 0) fail(`Could not inspect archive: ${(listing.stderr || listing.error?.message || `exit ${listing.status}`).trim()}`);
       const names = String(listing.stdout || '').split(/\r?\n/).filter(Boolean);
       if (names.length > 100_000 || names.some(name => !safeArchiveEntry(name))) fail('Archive contains an unsafe path or too many entries');
       const verboseFlags = format === 'tar.gz' ? '-tvzf' : format === 'tar.bz2' ? '-tvjf' : format === 'tar.xz' ? '-tvJf' : '-tvf';
-      const details = spawnSync(tools.tar, [verboseFlags, archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024 });
+      const details = spawnSync(tools.tar, [verboseFlags, archiveSnapshot], { encoding: 'utf8', timeout: 30_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (details.error || details.status !== 0) fail(`Could not inspect archive sizes: ${(details.stderr || details.error?.message || `exit ${details.status}`).trim()}`);
       const detailLines = String(details.stdout || '').split(/\r?\n/);
       if (detailLines.some(line => /^[bclph]/.test(line))) fail('Archive contains a link or special file; archive destination is unsafe');
       const expandedBytes = archiveTarExpandedSize(detailLines, 'archive', names.length);
       assertArchiveExpandedSize(expandedBytes, 'archive');
       const flags = format === 'tar.gz' ? '-xzf' : format === 'tar.bz2' ? '-xjf' : format === 'tar.xz' ? '-xJf' : '-xf';
-      const result = spawnSync(tools.tar, [flags, archiveSnapshot, '-C', staging], { encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024 });
+      const result = spawnSync(tools.tar, [flags, archiveSnapshot, '-C', staging], { encoding: 'utf8', timeout: 120_000, maxBuffer: 16 * 1024 * 1024, windowsHide:true });
       if (result.status !== 0) fail(`tar failed: ${(result.stderr || result.stdout || '').trim() || `exit ${result.status}`}`);
     }
     await assertExtractedTree(staging);

package/src/tools/files-archive-safety.mjs

@@ -368,7 +368,7 @@ export async function moveArchiveFile(source, destination) {
 }
 
 export function archiveCommandProbe(name, versionArgs = ['--version']) {
-  const result = spawnSync(name, versionArgs, { encoding: 'utf8' });
+  const result = spawnSync(name, versionArgs, { encoding: 'utf8', windowsHide:true });
   return !result.error && result.status === 0 ? name : null;
 }
 

package/src/tools/files-screenshots.mjs

@@ -135,8 +135,8 @@ export async function takeScreenshotTool(args) {
       }
       if (!await pathExists(file)) {
         for (const candidate of SCREENSHOT_COMMANDS) {
-          if (spawnSync('which', [candidate.command], { encoding: 'utf8' }).status !== 0) continue;
-          const result = spawnSync(candidate.command, candidate.args(file), { encoding: 'utf8', timeout: 30000 });
+          if (spawnSync('which', [candidate.command], { encoding: 'utf8', windowsHide:true }).status !== 0) continue;
+          const result = spawnSync(candidate.command, candidate.args(file), { encoding: 'utf8', timeout: 30000, windowsHide:true });
           if (result.status === 0 && await pathExists(file)) break;
           attempts.push(`${candidate.command}: ${(result.stderr || '').trim() || ('exit ' + result.status)}`);
         }

package/src/tools/search.mjs

@@ -27,7 +27,7 @@ function ripgrep() {
   if (process.env.REMCP_RUNTIME_FORCE_FALLBACK === '1') return null;
   if (ripgrepPath !== undefined) return ripgrepPath;
   try {
-    const result = spawnSync('rg', ['--version'], { encoding: 'utf8' });
+    const result = spawnSync('rg', ['--version'], { encoding: 'utf8', windowsHide:true });
     ripgrepPath = !result.error && result.status === 0 ? 'rg' : null;
   } catch { ripgrepPath = null; }
   return ripgrepPath;
@@ -200,7 +200,7 @@ function runRipgrep(session, { target, pattern, searchType, filePattern, ignoreC
     if (contextLines) args.push('-C', String(contextLines));
     args.push('--', pattern, searchTarget);
   }
-  const child = spawn(ripgrep(), args, { stdio: ['ignore', 'pipe', 'pipe'] });
+  const child = spawn(ripgrep(), args, { stdio: ['ignore', 'pipe', 'pipe'], windowsHide:true });
   session.cancel = () => child.kill('SIGTERM');
   let buffer = '';
   let stderr = '';