@simonyea/holysheep-cli 2.1.2 → 2.1.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@simonyea/holysheep-cli",
-  "version": "2.1.2",
+  "version": "2.1.3",
   "description": "Claude Code/Cursor/Cline API relay for China — ¥1=$1, WeChat/Alipay payment, no credit card, no VPN. One command setup for all AI coding tools.",
   "scripts": {
     "test": "node tests/droid.test.js && node tests/workspace-store.test.js",

package/src/commands/webui.js

@@ -324,13 +324,28 @@ async function startAionUiMode(opts) {
     return startLegacyMode(opts)
   }
 
-  // 2. Resolve bun — and auto-install if missing (opt-out via env)
+  // 2. Resolve bun — and auto-install if missing (opt-out via env, TTY-gated)
   let bunPath = resolveBunPath()
   const autoBunDisabled = process.env.HOLYSHEEP_WEBUI_NO_AUTOFETCH_BUN === '1'
   if (!bunPath && !autoBunDisabled) {
-    console.log(chalk.cyan('▶ bun runtime not installed — installing automatically (one-time)'))
-    console.log(chalk.gray('  (disable with HOLYSHEEP_WEBUI_NO_AUTOFETCH_BUN=1; takes ~30s; source: bun.sh official installer)'))
-    bunPath = autoInstallBun((m) => console.log(chalk.gray(`  ${m}`)))
+    // TTY guard: auto-install pipes a remote script into a shell. In CI,
+    // Docker builds, or other non-interactive environments the user can't
+    // cancel and didn't knowingly opt in. Skip auto-install there and fall
+    // through to the existing manual-install guidance + legacy fallback.
+    if (!process.stdout.isTTY) {
+      console.log(chalk.yellow('  bun missing and not running in a TTY — skipping auto-install (safety).'))
+      console.log(chalk.gray('  In CI / Docker / non-interactive shells, install bun explicitly first:'))
+      console.log(chalk.cyan(`    ${describeBunInstall()}`))
+      console.log(chalk.gray('  Or opt out of this safety with HOLYSHEEP_WEBUI_FORCE_AUTOFETCH_BUN=1.'))
+      if (process.env.HOLYSHEEP_WEBUI_FORCE_AUTOFETCH_BUN === '1') {
+        console.log(chalk.cyan('▶ HOLYSHEEP_WEBUI_FORCE_AUTOFETCH_BUN=1 set — attempting auto-install anyway'))
+        bunPath = autoInstallBun((m) => console.log(chalk.gray(`  ${m}`)))
+      }
+    } else {
+      console.log(chalk.cyan('▶ bun runtime not installed — installing automatically (one-time)'))
+      console.log(chalk.gray('  (disable with HOLYSHEEP_WEBUI_NO_AUTOFETCH_BUN=1; takes ~30s; source: bun.sh official installer)'))
+      bunPath = autoInstallBun((m) => console.log(chalk.gray(`  ${m}`)))
+    }
   }
   if (!bunPath) {
     console.log(chalk.red('✗ bun is required to run the AionUi server'))