@zixt/host 0.0.71 → 0.0.73

package/dist/index.js

@@ -31,7 +31,7 @@ import { homedir } from "node:os";
 // package.json
 var package_default = {
   name: "@zixt/host",
-  version: "0.0.71",
+  version: "0.0.73",
   type: "module",
   exports: {
     ".": "./src/client.ts",
@@ -24557,6 +24557,9 @@ function versionsRoot() {
 function npmCommand(platform = process.platform) {
   return platform === "win32" ? "npm.cmd" : "npm";
 }
+function windowsInstallerCommandLine(command, args) {
+  return [command, ...args].map(quoteForCmd).join(" ");
+}
 function installedReleaseEntry(version2, root = versionsRoot()) {
   return join6(root, version2, "node_modules", PACKAGE_NAME, "dist", "index.js");
 }
@@ -24820,14 +24823,18 @@ process.stdin.on('data', (chunk) => {
   if (pending.length !== expectedBytes) return fail();
   let config;
   try { config = JSON.parse(pending.toString('utf8')); } catch { return fail(); }
-  if (!config || typeof config.command !== 'string' || !Array.isArray(config.args)) return fail();
+  if (!config || typeof config.commandLine !== 'string' || !config.commandLine) return fail();
   launched = true;
-  const target = spawn(config.command, config.args, {
+  const target = spawn(config.commandLine, {
     cwd: config.cwd,
     env: process.env,
     stdio: 'inherit',
     windowsHide: true,
-    shell: Boolean(config.shell),
+    // cmd.exe has to resolve npm.cmd, so the shell stays - but the whole line
+    // arrives pre-quoted as one string. Node's (command, args, shell) shape is
+    // deprecated (DEP0190) because the shell concatenates args unescaped: it
+    // printed a warning on every install and broke any prefix with a space.
+    shell: true,
   });
   target.once('error', () => report(null, null));
   target.once('exit', report);
@@ -24997,10 +25004,11 @@ async function installRelease(version2, options = {}) {
         }
         const release = Buffer.from(
           JSON.stringify({
-            command: installerCommand,
-            args: installerArguments(staging, version2),
-            cwd: root,
-            shell: true
+            commandLine: windowsInstallerCommandLine(
+              installerCommand,
+              installerArguments(staging, version2)
+            ),
+            cwd: root
           }),
           "utf8"
         );
@@ -26836,6 +26844,16 @@ function createPlaywrightBrowserAdapterFactory(dependencies = {}) {
       const playwright = await load();
       const context = await playwright.chromium.launchPersistentContext(profileDir, {
         headless: true,
+        // Without a channel, Playwright resolves `headless: true` to its
+        // `chromium_headless_shell` build — a stripped binary missing pieces
+        // a browser is expected to have (no `window.chrome`, no plugins, a
+        // single-entry `navigator.languages`). Google Accounts reads that
+        // shape as "this browser or app may not be secure" and refuses the
+        // sign-in outright, which made every site behind a Google login a
+        // dead end for the person watching the panel. `chromium` selects the
+        // full browser this adapter's capability probe already checks for
+        // (`executablePath()` resolves to it), so the two now agree.
+        channel: "chromium",
         viewport,
         // Headless Chromium announces itself in two ways that bot protection
         // reads as "not a person": `HeadlessChrome` in the user agent, and

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@zixt/host",
-  "version": "0.0.71",
+  "version": "0.0.73",
   "type": "module",
   "exports": {
     ".": "./src/client.ts",