@yagni-app/code 0.3.0 → 0.3.1

package/dist/login.d.ts

@@ -34,8 +34,10 @@ type OpenRunner = (cmd: string, args: string[]) => Promise<void>;
  *
  *   macOS:   open <url>
  *   Linux:   xdg-open <url>
- *   Windows: cmd /c start "" <url>   (the empty "" is start's window-title slot;
- *            without it `start` swallows the URL as the title and opens nothing)
+ *   Windows: rundll32 url.dll,FileProtocolHandler <url>   (opens the default
+ *            browser without going through cmd.exe — `cmd /c start <url>`
+ *            re-parses its arguments as a shell line, so a hostile URL with
+ *            `&`/`^` metacharacters could execute commands)
  */
 export declare function resolveOpenCommand(url: string, platform?: NodeJS.Platform): {
     cmd: string;

package/dist/login.js

@@ -31,14 +31,17 @@ function isTimeoutError(err) {
  *
  *   macOS:   open <url>
  *   Linux:   xdg-open <url>
- *   Windows: cmd /c start "" <url>   (the empty "" is start's window-title slot;
- *            without it `start` swallows the URL as the title and opens nothing)
+ *   Windows: rundll32 url.dll,FileProtocolHandler <url>   (opens the default
+ *            browser without going through cmd.exe — `cmd /c start <url>`
+ *            re-parses its arguments as a shell line, so a hostile URL with
+ *            `&`/`^` metacharacters could execute commands)
  */
 export function resolveOpenCommand(url, platform = process.platform) {
     if (platform === "darwin")
         return { cmd: "open", args: [url] };
-    if (platform === "win32")
-        return { cmd: "cmd", args: ["/c", "start", "", url] };
+    if (platform === "win32") {
+        return { cmd: "rundll32", args: ["url.dll,FileProtocolHandler", url] };
+    }
     return { cmd: "xdg-open", args: [url] };
 }
 const spawnRunner = (cmd, args) => new Promise((resolve, reject) => {
@@ -50,6 +53,18 @@ const spawnRunner = (cmd, args) => new Promise((resolve, reject) => {
  * URL is still printed for manual copy. `runner` is injectable for tests.
  */
 export const realOpenUrl = (url, runner = spawnRunner) => {
+    // Only ever hand http(s) URLs to the OS opener — refuse file:, javascript:,
+    // or custom schemes a compromised server response could try to smuggle in.
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        return Promise.resolve();
+    }
+    if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+        return Promise.resolve();
+    }
     const { cmd, args } = resolveOpenCommand(url);
     return runner(cmd, args).catch(() => {
         // Silently fail — the user can still copy the URL manually.

package/dist/token.d.ts

@@ -0,0 +1,25 @@
+/**
+ * `yagni token` — print the active environment's API token to stdout.
+ *
+ * This is the credential feed for `yagni connect claude-code`: Claude Code's
+ * `apiKeyHelper` runs this command (re-running on 401 and on a TTL), so the
+ * contract is strict — stdout carries the TOKEN AND NOTHING ELSE (Claude Code
+ * v2.1.227+ rejects helpers that print banners), and every notice goes to
+ * stderr. Riding the same refresh-at-launch client as the launcher means a
+ * token that enters the 7-day rotation window is rotated and persisted here
+ * too, so a Claude Code session keeps working without the user ever running
+ * `yagni` itself.
+ */
+import { maybeRefreshAtLaunch } from "./refresh.js";
+import type { Credentials } from "./credentials.js";
+import { type Profile } from "./profiles.js";
+export interface TokenCommandDeps {
+    readProfile?: () => Promise<Profile>;
+    refresh?: typeof maybeRefreshAtLaunch;
+    persist?: (name: string, creds: Credentials) => Promise<void>;
+    now?: () => number;
+    stdout?: (text: string) => void;
+    stderr?: (text: string) => void;
+}
+export declare function tokenCommand(deps?: TokenCommandDeps): Promise<number>;
+//# sourceMappingURL=token.d.ts.map

package/dist/token.js

@@ -0,0 +1,45 @@
+/**
+ * `yagni token` — print the active environment's API token to stdout.
+ *
+ * This is the credential feed for `yagni connect claude-code`: Claude Code's
+ * `apiKeyHelper` runs this command (re-running on 401 and on a TTL), so the
+ * contract is strict — stdout carries the TOKEN AND NOTHING ELSE (Claude Code
+ * v2.1.227+ rejects helpers that print banners), and every notice goes to
+ * stderr. Riding the same refresh-at-launch client as the launcher means a
+ * token that enters the 7-day rotation window is rotated and persisted here
+ * too, so a Claude Code session keeps working without the user ever running
+ * `yagni` itself.
+ */
+import { classifyTokenExpiry } from "./launch.js";
+import { maybeRefreshAtLaunch } from "./refresh.js";
+import { credentialsFromProfile, persistProfileTokenRotation, readActiveProfile, } from "./profiles.js";
+export async function tokenCommand(deps = {}) {
+    const readProfile = deps.readProfile ?? readActiveProfile;
+    const refresh = deps.refresh ?? maybeRefreshAtLaunch;
+    const persist = deps.persist ?? persistProfileTokenRotation;
+    const stdout = deps.stdout ?? ((t) => process.stdout.write(t));
+    const stderr = deps.stderr ?? ((t) => process.stderr.write(t));
+    const profile = await readProfile();
+    let creds = credentialsFromProfile(profile);
+    if (!creds?.token) {
+        stderr(`Not logged in to environment "${profile.name}" (${profile.baseUrl}). Run \`yagni login\` first.\n`);
+        return 1;
+    }
+    const outcome = await refresh(creds, {
+        persist: (c) => persist(profile.name, c),
+        ...(deps.now ? { now: deps.now } : {}),
+    });
+    for (const warning of outcome.warnings)
+        stderr(`${warning}\n`);
+    creds = outcome.creds;
+    // An expired token would send the consumer into a silent 401 loop — fail
+    // loudly instead so Claude Code surfaces a helper error the user can act on.
+    const nowMs = deps.now ? deps.now() : Date.now();
+    if (classifyTokenExpiry(creds.expiresAt, nowMs).kind === "expired") {
+        stderr("Your YAGNI Code session has expired. Run `yagni login` to re-authenticate.\n");
+        return 1;
+    }
+    stdout(`${creds.token}\n`);
+    return 0;
+}
+//# sourceMappingURL=token.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yagni-app/code",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "YAGNI Code: a terminal coding agent that already knows your company. One YAGNI login routes the model and grounds the agent in your team's context.",
   "license": "SEE LICENSE IN LICENSE.md",
   "author": "YAGNI, Inc. <jack@yagni.app> (https://yagni.app)",
@@ -36,7 +36,8 @@
   "dependencies": {
     "@earendil-works/pi-coding-agent": "0.84.1",
     "@earendil-works/pi-tui": "0.84.1",
+    "smol-toml": "^1.8.0",
     "typebox": "^1.3.11"
   },
-  "yagniSourceSha": "7542705a2c99f19849bf98bbd5c2e712f5f47fd3"
+  "yagniSourceSha": "27482c0e8f72e0f171de23bd39e774d9661c0bc6"
 }