@volter/tabnode 0.5.27 → 0.5.28

package/dist/assets/{runtime-worker-DPvtXRd8.js → runtime-worker-C6ulimZ4.js}

@@ -29572,7 +29572,7 @@ Parser.acorn = {
 function parse3(input, options) {
   return Parser.parse(input, options);
 }
-class Script {
+let Script$1 = class Script {
   constructor(code2, _options22) {
     __publicField(this, "code");
     this.code = code2;
@@ -29635,7 +29635,7 @@ class Script {
   createCachedData() {
     return Buffer.from("");
   }
-}
+};
 function createContext(contextObject, _options22) {
   return contextObject || {};
 }
@@ -29646,7 +29646,7 @@ function runInThisContext(code, _options) {
   return eval(code);
 }
 function runInNewContext(code2, contextObject, _options22) {
-  const script = new Script(code2);
+  const script = new Script$1(code2);
   return script.runInNewContext(contextObject);
 }
 function runInContext(code2, context2, _options22) {
@@ -29684,7 +29684,7 @@ class SyntheticModule extends Module {
   }
 }
 var vm$1 = {
-  Script,
+  Script: Script$1,
   createContext,
   isContext,
   runInThisContext,
@@ -29698,7 +29698,7 @@ var vm$1 = {
 var vmShim = /* @__PURE__ */ Object.freeze({
   __proto__: null,
   Module,
-  Script,
+  Script: Script$1,
   SourceTextModule,
   SyntheticModule,
   compileFunction,
@@ -74706,7 +74706,24 @@ function readPackageJson(cwd) {
   }
 }
 async function handleNpmRun(args, ctx) {
-  const scriptName = args[0];
+  let scriptName;
+  let silent = false;
+  let ifPresent = false;
+  const passed = [];
+  for (let index2 = 0; index2 < args.length; index2++) {
+    const arg = args[index2];
+    if (arg === "--") {
+      if (scriptName !== void 0) passed.push(...args.slice(index2 + 1));
+      break;
+    }
+    if (arg.startsWith("-") && arg !== "-") {
+      if (arg === "--silent" || arg === "-s" || arg === "--quiet" || arg === "-q" || arg === "--loglevel=silent") silent = true;
+      else if (arg === "--if-present") ifPresent = true;
+      continue;
+    }
+    if (scriptName === void 0) scriptName = arg;
+    else passed.push(arg);
+  }
   if (!scriptName) {
     return listScripts(ctx);
   }
@@ -74716,6 +74733,7 @@ async function handleNpmRun(args, ctx) {
   const scripts = pkgJson.scripts || {};
   const scriptCommand = scripts[scriptName];
   if (!scriptCommand) {
+    if (ifPresent) return { stdout: "", stderr: "", exitCode: 0 };
     const available = Object.keys(scripts);
     let msg2 = `npm ERR! Missing script: "${scriptName}"
 `;
@@ -74748,7 +74766,7 @@ async function handleNpmRun(args, ctx) {
   const label = `${pkgJson.name || ""}@${pkgJson.version || ""}`;
   const preScript = scripts[`pre${scriptName}`];
   if (preScript) {
-    allStderr += `
+    if (!silent) allStderr += `
 > ${label} pre${scriptName}
 > ${preScript}
 
@@ -74760,12 +74778,13 @@ async function handleNpmRun(args, ctx) {
       return { stdout: allStdout, stderr: allStderr, exitCode: preResult.exitCode };
     }
   }
-  allStderr += `
+  const command = passed.length > 0 ? `${scriptCommand} ${passed.map((arg) => /^[\w@%+=:,./-]+$/.test(arg) ? arg : `'${arg.replace(/'/g, `'\\''`)}'`).join(" ")}` : scriptCommand;
+  if (!silent) allStderr += `
 > ${label} ${scriptName}
-> ${scriptCommand}
+> ${command}
 
 `;
-  const mainResult = await ctx.exec(scriptCommand, { cwd: ctx.cwd, env: npmEnv });
+  const mainResult = await ctx.exec(command, { cwd: ctx.cwd, env: npmEnv, ...typeof ctx.stdin === "string" ? { stdin: ctx.stdin } : {} });
   allStdout += mainResult.stdout;
   allStderr += mainResult.stderr;
   if (mainResult.exitCode !== 0) {
@@ -74773,7 +74792,7 @@ async function handleNpmRun(args, ctx) {
   }
   const postScript = scripts[`post${scriptName}`];
   if (postScript) {
-    allStderr += `
+    if (!silent) allStderr += `
 > ${label} post${scriptName}
 > ${postScript}
 
@@ -78279,6 +78298,22 @@ function __substrateGuestConstructor(Constructor, process2) {
     return __substrateFunctionScope(__substrateGuestGlobal(process2), String(compiled));
   } });
 }
+const __substrateScriptScope = Function("__substrateScriptGlobals", "__substrateScriptSource", "with (__substrateScriptGlobals) { return eval(__substrateScriptSource); }");
+const __substrateGuestVms = /* @__PURE__ */ new WeakMap();
+function __substrateGuestVm(process2) {
+  let vm2 = __substrateGuestVms.get(process2);
+  if (vm2) return vm2;
+  const run = (code2) => __substrateScriptScope(__substrateGuestGlobal(process2), String(code2));
+  class Script2 extends Script$1 {
+    runInThisContext(_options3) {
+      return run(this.code);
+    }
+  }
+  vm2 = { ...vmShim, Script: Script2, runInThisContext: (code2, _options3) => run(code2), default: void 0 };
+  vm2.default = vm2;
+  __substrateGuestVms.set(process2, vm2);
+  return vm2;
+}
 function __substrateModuleTypes(code2, resolvedPath, format2, process2) {
   const typescript = format2 === void 0 ? /[.](?:ts|mts|cts)$/u.test(resolvedPath) && !resolvedPath.endsWith(".d.ts") : format2 === "typescript" || format2 === "commonjs-typescript" || format2 === "module-typescript";
   if (!typescript) return code2;
@@ -78512,7 +78547,7 @@ function __substratePrepareBody(rawCode, resolvedPath, format2, process2) {
     const lowered = transformEsmToCjs(code2, resolvedPath);
     code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
   } else {
-    code2 = transformDynamicImportsRegex(code2);
+    code2 = __substrateRewriteDynamicImportsInScript(code2);
   }
   return code2;
 }
@@ -78659,6 +78694,17 @@ async function __substrateImportChain(hooks, id2, parentURL, moduleRequire) {
   }));
   return doors.__loadFromURL(resolved.url, loaded2.format ?? resolved.format, loaded2.source ?? void 0);
 }
+function createImportMeta(moduleRequire, url2, dirname2, filename) {
+  const resolve2 = (specifier, parent) => {
+    const id2 = typeof specifier === "string" ? specifier : String(specifier);
+    const base = parent === void 0 ? url2 : String(parent);
+    if (id2.startsWith("./") || id2.startsWith("../") || id2.startsWith("/")) return new URL(id2, base).href;
+    if (/^[a-zA-Z][a-zA-Z\d+.-]*:/.test(id2)) return id2.startsWith("node:") ? id2 : new URL(id2).href;
+    if (Object.prototype.hasOwnProperty.call(builtinModules, id2)) return `node:${id2}`;
+    return "file://" + moduleRequire.resolve(id2);
+  };
+  return { url: url2, dirname: dirname2, filename, resolve: resolve2 };
+}
 function createDynamicImport(moduleRequire, process2, parentURL) {
   return async (specifier) => {
     var _a3;
@@ -79627,7 +79673,7 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
         dirname2,
         process2,
         consoleWrapper,
-        { url: importMetaUrl, dirname: dirname2, filename: resolvedPath },
+        createImportMeta(moduleRequire, importMetaUrl, dirname2, resolvedPath),
         dynamicImport,
         __substrateGuestGlobal,
         __substrateGuestConstructor
@@ -79730,6 +79776,9 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     if (id2 === "module") {
       return __substrateModule();
     }
+    if (id2 === "vm") {
+      return __substrateGuestVm(process2);
+    }
     if (id2 === "wasi") {
       return __substrateGuestWasi(fsShim, process2);
     }
@@ -79952,7 +80001,7 @@ class Runtime {
       const lowered = transformEsmToCjs(code2, filename);
       code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
     } else {
-      code2 = transformDynamicImportsRegex(code2);
+      code2 = __substrateRewriteDynamicImportsInScript(code2);
     }
     try {
       const importMetaUrl = "file://" + filename;
@@ -79983,7 +80032,7 @@ class Runtime {
         dirname$1,
         this.process,
         consoleWrapper,
-        { url: importMetaUrl, dirname: dirname$1, filename },
+        createImportMeta(require2, importMetaUrl, dirname$1, filename),
         dynamicImport,
         __substrateGuestGlobal,
         __substrateGuestConstructor

package/dist/index.mjs

@@ -29720,7 +29720,7 @@ Parser.acorn = {
 function parse3(input, options) {
   return Parser.parse(input, options);
 }
-class Script {
+let Script$1 = class Script {
   constructor(code2, _options2) {
     __publicField(this, "code");
     this.code = code2;
@@ -29783,7 +29783,7 @@ class Script {
   createCachedData() {
     return Buffer.from("");
   }
-}
+};
 function createContext(contextObject, _options2) {
   return contextObject || {};
 }
@@ -29794,7 +29794,7 @@ function runInThisContext(code, _options) {
   return eval(code);
 }
 function runInNewContext(code2, contextObject, _options2) {
-  const script = new Script(code2);
+  const script = new Script$1(code2);
   return script.runInNewContext(contextObject);
 }
 function runInContext(code2, context2, _options2) {
@@ -29832,7 +29832,7 @@ class SyntheticModule extends Module {
   }
 }
 const vm = {
-  Script,
+  Script: Script$1,
   createContext,
   isContext,
   runInThisContext,
@@ -29846,7 +29846,7 @@ const vm = {
 const vmShim = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.defineProperty({
   __proto__: null,
   Module,
-  Script,
+  Script: Script$1,
   SourceTextModule,
   SyntheticModule,
   compileFunction,
@@ -34343,7 +34343,24 @@ function readPackageJson(cwd) {
   }
 }
 async function handleNpmRun(args, ctx) {
-  const scriptName = args[0];
+  let scriptName;
+  let silent = false;
+  let ifPresent = false;
+  const passed = [];
+  for (let index2 = 0; index2 < args.length; index2++) {
+    const arg = args[index2];
+    if (arg === "--") {
+      if (scriptName !== void 0) passed.push(...args.slice(index2 + 1));
+      break;
+    }
+    if (arg.startsWith("-") && arg !== "-") {
+      if (arg === "--silent" || arg === "-s" || arg === "--quiet" || arg === "-q" || arg === "--loglevel=silent") silent = true;
+      else if (arg === "--if-present") ifPresent = true;
+      continue;
+    }
+    if (scriptName === void 0) scriptName = arg;
+    else passed.push(arg);
+  }
   if (!scriptName) {
     return listScripts(ctx);
   }
@@ -34353,6 +34370,7 @@ async function handleNpmRun(args, ctx) {
   const scripts = pkgJson.scripts || {};
   const scriptCommand = scripts[scriptName];
   if (!scriptCommand) {
+    if (ifPresent) return { stdout: "", stderr: "", exitCode: 0 };
     const available = Object.keys(scripts);
     let msg2 = `npm ERR! Missing script: "${scriptName}"
 `;
@@ -34385,7 +34403,7 @@ async function handleNpmRun(args, ctx) {
   const label = `${pkgJson.name || ""}@${pkgJson.version || ""}`;
   const preScript = scripts[`pre${scriptName}`];
   if (preScript) {
-    allStderr += `
+    if (!silent) allStderr += `
 > ${label} pre${scriptName}
 > ${preScript}
 
@@ -34397,12 +34415,13 @@ async function handleNpmRun(args, ctx) {
       return { stdout: allStdout, stderr: allStderr, exitCode: preResult.exitCode };
     }
   }
-  allStderr += `
+  const command = passed.length > 0 ? `${scriptCommand} ${passed.map((arg) => /^[\w@%+=:,./-]+$/.test(arg) ? arg : `'${arg.replace(/'/g, `'\\''`)}'`).join(" ")}` : scriptCommand;
+  if (!silent) allStderr += `
 > ${label} ${scriptName}
-> ${scriptCommand}
+> ${command}
 
 `;
-  const mainResult = await ctx.exec(scriptCommand, { cwd: ctx.cwd, env: npmEnv });
+  const mainResult = await ctx.exec(command, { cwd: ctx.cwd, env: npmEnv, ...typeof ctx.stdin === "string" ? { stdin: ctx.stdin } : {} });
   allStdout += mainResult.stdout;
   allStderr += mainResult.stderr;
   if (mainResult.exitCode !== 0) {
@@ -34410,7 +34429,7 @@ async function handleNpmRun(args, ctx) {
   }
   const postScript = scripts[`post${scriptName}`];
   if (postScript) {
-    allStderr += `
+    if (!silent) allStderr += `
 > ${label} post${scriptName}
 > ${postScript}
 
@@ -37937,6 +37956,22 @@ function __substrateGuestConstructor(Constructor, process2) {
     return __substrateFunctionScope(__substrateGuestGlobal(process2), String(compiled));
   } });
 }
+const __substrateScriptScope = Function("__substrateScriptGlobals", "__substrateScriptSource", "with (__substrateScriptGlobals) { return eval(__substrateScriptSource); }");
+const __substrateGuestVms = /* @__PURE__ */ new WeakMap();
+function __substrateGuestVm(process2) {
+  let vm2 = __substrateGuestVms.get(process2);
+  if (vm2) return vm2;
+  const run = (code2) => __substrateScriptScope(__substrateGuestGlobal(process2), String(code2));
+  class Script2 extends Script$1 {
+    runInThisContext(_options2) {
+      return run(this.code);
+    }
+  }
+  vm2 = { ...vmShim, Script: Script2, runInThisContext: (code2, _options2) => run(code2), default: void 0 };
+  vm2.default = vm2;
+  __substrateGuestVms.set(process2, vm2);
+  return vm2;
+}
 function __substrateModuleTypes(code2, resolvedPath, format2, process2) {
   const typescript = format2 === void 0 ? /[.](?:ts|mts|cts)$/u.test(resolvedPath) && !resolvedPath.endsWith(".d.ts") : format2 === "typescript" || format2 === "commonjs-typescript" || format2 === "module-typescript";
   if (!typescript) return code2;
@@ -38170,7 +38205,7 @@ function __substratePrepareBody(rawCode, resolvedPath, format2, process2) {
     const lowered = transformEsmToCjs(code2, resolvedPath);
     code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
   } else {
-    code2 = transformDynamicImportsRegex(code2);
+    code2 = __substrateRewriteDynamicImportsInScript(code2);
   }
   return code2;
 }
@@ -38320,6 +38355,17 @@ async function __substrateImportChain(hooks, id, parentURL, moduleRequire) {
   }));
   return doors.__loadFromURL(resolved.url, loaded2.format ?? resolved.format, loaded2.source ?? void 0);
 }
+function createImportMeta(moduleRequire, url2, dirname2, filename) {
+  const resolve2 = (specifier, parent) => {
+    const id = typeof specifier === "string" ? specifier : String(specifier);
+    const base = parent === void 0 ? url2 : String(parent);
+    if (id.startsWith("./") || id.startsWith("../") || id.startsWith("/")) return new URL(id, base).href;
+    if (/^[a-zA-Z][a-zA-Z\d+.-]*:/.test(id)) return id.startsWith("node:") ? id : new URL(id).href;
+    if (Object.prototype.hasOwnProperty.call(builtinModules, id)) return `node:${id}`;
+    return "file://" + moduleRequire.resolve(id);
+  };
+  return { url: url2, dirname: dirname2, filename, resolve: resolve2 };
+}
 function createDynamicImport(moduleRequire, process2, parentURL) {
   return async (specifier) => {
     var _a2;
@@ -39288,7 +39334,7 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
         dirname2,
         process2,
         consoleWrapper,
-        { url: importMetaUrl, dirname: dirname2, filename: resolvedPath },
+        createImportMeta(moduleRequire, importMetaUrl, dirname2, resolvedPath),
         dynamicImport,
         __substrateGuestGlobal,
         __substrateGuestConstructor
@@ -39391,6 +39437,9 @@ function createRequire(vfs2, fsShim, process2, currentDir, moduleCache, options,
     if (id === "module") {
       return __substrateModule();
     }
+    if (id === "vm") {
+      return __substrateGuestVm(process2);
+    }
     if (id === "wasi") {
       return __substrateGuestWasi(fsShim, process2);
     }
@@ -39613,7 +39662,7 @@ class Runtime {
       const lowered = transformEsmToCjs(code2, filename);
       code2 = lowered === code2 ? code2 : `${__substrateModuleMarker}"use strict";${lowered}`;
     } else {
-      code2 = transformDynamicImportsRegex(code2);
+      code2 = __substrateRewriteDynamicImportsInScript(code2);
     }
     try {
       const importMetaUrl = "file://" + filename;
@@ -39644,7 +39693,7 @@ class Runtime {
         dirname$1,
         this.process,
         consoleWrapper,
-        { url: importMetaUrl, dirname: dirname$1, filename },
+        createImportMeta(require2, importMetaUrl, dirname$1, filename),
         dynamicImport,
         __substrateGuestGlobal,
         __substrateGuestConstructor
@@ -40120,7 +40169,7 @@ class WorkerRuntime {
     this.worker = new Worker(
       new URL(
         /* @vite-ignore */
-        "/assets/runtime-worker-DPvtXRd8.js",
+        "/assets/runtime-worker-C6ulimZ4.js",
         import.meta.url
       ),
       { type: "module" }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@volter/tabnode",
-  "version": "0.5.27",
+  "version": "0.5.28",
   "description": "Node's own library, in a browser tab.",
   "type": "module",
   "license": "MIT",

package/src/runtime.ts

@@ -117,6 +117,29 @@ function __substrateGuestConstructor(Constructor: unknown, process: Process): un
     return __substrateFunctionScope(__substrateGuestGlobal(process), String(compiled));
   } });
 }
+/**
+ * `vm.runInThisContext` runs its script in the calling process's global scope,
+ * as Node's does. The shim evaluated it in the host's, so a script saw the
+ * worker's own timers: jiti evaluates every module it loads this way, and
+ * pi-mcp-adapter's `setInterval(...).unref()` threw "unref is not a function"
+ * because the browser's `setInterval` returns a number. The script runs inside
+ * the process's guest global, as a guest `Function` does
+ * (`__substrateGuestConstructor`).
+ */
+const __substrateScriptScope = Function("__substrateScriptGlobals", "__substrateScriptSource", "with (__substrateScriptGlobals) { return eval(__substrateScriptSource); }");
+const __substrateGuestVms = new WeakMap<Process, unknown>();
+function __substrateGuestVm(process: Process): unknown {
+  let vm = __substrateGuestVms.get(process);
+  if (vm) return vm;
+  const run = (code: string): unknown => __substrateScriptScope(__substrateGuestGlobal(process), String(code));
+  class Script extends vmShim.Script {
+    override runInThisContext(_options?: object): unknown { return run((this as unknown as { code: string }).code); }
+  }
+  vm = { ...vmShim, Script, runInThisContext: (code: string, _options?: object) => run(code), default: undefined };
+  (vm as { default: unknown }).default = vm;
+  __substrateGuestVms.set(process, vm);
+  return vm;
+}
 /**
  * A `.ts`, `.mts` or `.cts` file runs with its types stripped, as Node runs
  * one since 22.18, before the module's imports are read -- the entry a `node`
@@ -456,8 +479,12 @@ function __substratePrepareBody(rawCode: string, resolvedPath: string, format: s
     // A `.cjs` module skips the ESM transform, and with it the rewrite of
     // `import(...)` to the engine's dynamic import, so its
     // `import("fs/promises")` reached the browser's own import and failed on
-    // the bare specifier. The dynamic-import rewrite applies to `.cjs` too.
-    code = transformDynamicImportsRegex(code);
+    // the bare specifier. The dynamic-import rewrite applies to `.cjs` too,
+    // from the syntax tree as for every other CommonJS module: the text
+    // rewrite also renamed a method called `import`, and jiti's
+    // `async import(e,t){...}` became `__dynamicImport`, so `jiti.import` was
+    // undefined and every Pi extension failed to load.
+    code = __substrateRewriteDynamicImportsInScript(code);
   }
 
   return code;
@@ -726,6 +753,27 @@ async function __substrateImportChain(
   return doors.__loadFromURL(resolved.url, loaded.format ?? resolved.format, loaded.source ?? void 0);
 }
 
+/**
+ * A module's `import.meta`: `url`, `dirname`, `filename` and Node's synchronous
+ * `resolve` (Node 20.6+). Pi's extension loader resolves its own packages with
+ * `import.meta.resolve(specifier)`, and without it every Pi extension failed to
+ * load with "import_meta.resolve is not a function". A relative or URL specifier
+ * resolves against the module's URL, a builtin to `node:<name>`, and a bare one
+ * through the module's own resolver, the one `import()` uses here. Unlike Node,
+ * a relative specifier naming a missing file resolves instead of throwing.
+ */
+function createImportMeta(moduleRequire: RequireFunction, url: string, dirname: string, filename: string): Record<string, unknown> {
+  const resolve = (specifier: unknown, parent?: unknown): string => {
+    const id = typeof specifier === 'string' ? specifier : String(specifier);
+    const base = parent === undefined ? url : String(parent);
+    if (id.startsWith('./') || id.startsWith('../') || id.startsWith('/')) return new URL(id, base).href;
+    if (/^[a-zA-Z][a-zA-Z\d+.-]*:/.test(id)) return id.startsWith('node:') ? id : new URL(id).href;
+    if (Object.prototype.hasOwnProperty.call(builtinModules, id)) return `node:${id}`;
+    return 'file://' + moduleRequire.resolve(id);
+  };
+  return { url, dirname, filename, resolve };
+}
+
 function createDynamicImport(moduleRequire: RequireFunction, process: Process, parentURL?: string): (specifier: unknown) => Promise<unknown> {
   return async (specifier: unknown): Promise<unknown> => {
     try {
@@ -1962,7 +2010,7 @@ function createRequire(
         dirname,
         process,
         consoleWrapper,
-        { url: importMetaUrl, dirname, filename: resolvedPath },
+        createImportMeta(moduleRequire, importMetaUrl, dirname, resolvedPath),
         dynamicImport,
         __substrateGuestGlobal,
         __substrateGuestConstructor
@@ -2130,6 +2178,11 @@ function createRequire(
     if (id === 'module') {
       return __substrateModule();
     }
+    // Ahead of the per-process builtin table: node-lib's own modules require
+    // `vm` first and that table keeps the first answer for the process.
+    if (id === 'vm') {
+      return __substrateGuestVm(process);
+    }
     if (id === 'wasi') {
       return __substrateGuestWasi(fsShim, process);
     }
@@ -2445,8 +2498,12 @@ export class Runtime {
       // A `.cjs` module skips the ESM transform, and with it the rewrite of
       // `import(...)` to the engine's dynamic import, so its
       // `import("fs/promises")` reached the browser's own import and failed on
-      // the bare specifier. The dynamic-import rewrite applies to `.cjs` too.
-      code = transformDynamicImportsRegex(code);
+      // the bare specifier. The dynamic-import rewrite applies to `.cjs` too,
+      // from the syntax tree as for every other CommonJS module: the text
+      // rewrite also renamed a method called `import`, and jiti's
+      // `async import(e,t){...}` became `__dynamicImport`, so `jiti.import` was
+      // undefined and every Pi extension failed to load.
+      code = __substrateRewriteDynamicImportsInScript(code);
     }
 
     // Execute code
@@ -2492,7 +2549,7 @@ export class Runtime {
         dirname,
         this.process,
         consoleWrapper,
-        { url: importMetaUrl, dirname, filename },
+        createImportMeta(require, importMetaUrl, dirname, filename),
         dynamicImport,
         __substrateGuestGlobal,
         __substrateGuestConstructor

package/src/shims/child_process.ts

@@ -1143,7 +1143,26 @@ function readPackageJson(cwd: string): { pkgJson: PackageJson; error?: undefined
  * Handle `npm run [script]` — execute a script from package.json
  */
 async function handleNpmRun(args: string[], ctx: CommandContext): Promise<JustBashExecResult> {
-  const scriptName = args[0];
+  // npm's own options come before the script's name and are npm's
+  // (`npm run --silent vgai -- mcp .`, as a project's `.mcp.json` launches its
+  // server); what follows the name goes to the script, everything after `--`
+  // untouched. The name used to be `args[0]`, so `--silent` was looked up as a
+  // script, and the script's own arguments were dropped.
+  let scriptName: string | undefined;
+  let silent = false;
+  let ifPresent = false;
+  const passed: string[] = [];
+  for (let index = 0; index < args.length; index++) {
+    const arg = args[index]!;
+    if (arg === '--') { if (scriptName !== undefined) passed.push(...args.slice(index + 1)); break; }
+    if (arg.startsWith('-') && arg !== '-') {
+      if (arg === '--silent' || arg === '-s' || arg === '--quiet' || arg === '-q' || arg === '--loglevel=silent') silent = true;
+      else if (arg === '--if-present') ifPresent = true;
+      continue;
+    }
+    if (scriptName === undefined) scriptName = arg;
+    else passed.push(arg);
+  }
 
   // "npm run" with no script name: list available scripts
   if (!scriptName) {
@@ -1158,6 +1177,7 @@ async function handleNpmRun(args: string[], ctx: CommandContext): Promise<JustBa
   const scriptCommand = scripts[scriptName];
 
   if (!scriptCommand) {
+    if (ifPresent) return { stdout: '', stderr: '', exitCode: 0 };
     const available = Object.keys(scripts);
     let msg = `npm ERR! Missing script: "${scriptName}"\n`;
     if (available.length > 0) {
@@ -1193,7 +1213,7 @@ async function handleNpmRun(args: string[], ctx: CommandContext): Promise<JustBa
   // Run pre<script> if it exists
   const preScript = scripts[`pre${scriptName}`];
   if (preScript) {
-    allStderr += `\n> ${label} pre${scriptName}\n> ${preScript}\n\n`;
+    if (!silent) allStderr += `\n> ${label} pre${scriptName}\n> ${preScript}\n\n`;
     const preResult = await ctx.exec(preScript, { cwd: ctx.cwd, env: npmEnv });
     allStdout += preResult.stdout;
     allStderr += preResult.stderr;
@@ -1202,9 +1222,14 @@ async function handleNpmRun(args: string[], ctx: CommandContext): Promise<JustBa
     }
   }
 
-  // Run the main script
-  allStderr += `\n> ${label} ${scriptName}\n> ${scriptCommand}\n\n`;
-  const mainResult = await ctx.exec(scriptCommand, { cwd: ctx.cwd, env: npmEnv });
+  // Run the main script, with the arguments npm passes it, each quoted.
+  const command = passed.length > 0
+    ? `${scriptCommand} ${passed.map((arg) => /^[\w@%+=:,./-]+$/.test(arg) ? arg : `'${arg.replace(/'/g, `'\\''`)}'`).join(' ')}`
+    : scriptCommand;
+  if (!silent) allStderr += `\n> ${label} ${scriptName}\n> ${command}\n\n`;
+  // The script reads npm's standard input: a `.mcp.json` server launched as
+  // `npm run … -- serve` speaks JSON-RPC on it.
+  const mainResult = await ctx.exec(command, { cwd: ctx.cwd, env: npmEnv, ...(typeof ctx.stdin === 'string' ? { stdin: ctx.stdin } : {}) });
   allStdout += mainResult.stdout;
   allStderr += mainResult.stderr;
 
@@ -1215,7 +1240,7 @@ async function handleNpmRun(args: string[], ctx: CommandContext): Promise<JustBa
   // Run post<script> if it exists
   const postScript = scripts[`post${scriptName}`];
   if (postScript) {
-    allStderr += `\n> ${label} post${scriptName}\n> ${postScript}\n\n`;
+    if (!silent) allStderr += `\n> ${label} post${scriptName}\n> ${postScript}\n\n`;
     const postResult = await ctx.exec(postScript, { cwd: ctx.cwd, env: npmEnv });
     allStdout += postResult.stdout;
     allStderr += postResult.stderr;