agentic-factory-bridge 1.0.1 → 1.0.5

package/bin/cli.js

@@ -126,7 +126,7 @@ async function setup() {
   console.log('');
   console.log('  Next steps:');
   console.log('    1. Run: agentic-factory-bridge start');
-  console.log('    2. Open https://atos-agentic-factory.onrender.com');
+  console.log('    2. Open https://atos-agentic-factory-qzwe.onrender.com');
   console.log('    3. Click "Refresh detection" on the OpenCode page');
   console.log('');
 }
@@ -202,7 +202,7 @@ async function status() {
 function checkCommand(cmd) {
   return new Promise((resolve) => {
     const check = process.platform === 'win32' ? 'where' : 'which';
-    const proc = spawn(check, [cmd], { stdio: ['pipe', 'pipe', 'pipe'], shell: false });
+    const proc = spawn(check, [cmd], { stdio: ['pipe', 'pipe', 'pipe'], shell: true });
     proc.on('close', (code) => resolve(code === 0));
     proc.on('error', () => resolve(false));
   });
@@ -213,7 +213,7 @@ function runCommand(cmd, args, timeout) {
     const proc = spawn(cmd, args, {
       stdio: ['pipe', 'pipe', 'pipe'],
       timeout,
-      shell: false,
+      shell: true,
     });
     let stdout = '';
     let stderr = '';

package/bridge.js

@@ -31,7 +31,6 @@
 const express = require('express');
 const cors = require('cors');
 const crypto = require('crypto');
-const { v4: uuidv4 } = require('uuid');
 const { spawn } = require('child_process');
 const http = require('http');
 const https = require('https');
@@ -51,7 +50,7 @@ const OPENCODE_PATH = process.env.OPENCODE_PATH || 'opencode';
 const BRIDGE_SECRET = process.env.BRIDGE_SECRET || crypto.randomBytes(32).toString('hex');
 const CORS_ORIGIN =
   process.env.BRIDGE_CORS_ORIGIN ||
-  'http://localhost:4200,https://atos-agentic-factory.onrender.com';
+  'http://localhost:4200,https://atos-agentic-factory.onrender.com,https://atos-agentic-factory-qzwe.onrender.com';
 
 // Rate limiting configuration
 const RATE_LIMITS = {
@@ -298,6 +297,15 @@ function runOpenCode(prompt, model) {
 const app = express();
 
 const allowedOrigins = CORS_ORIGIN.split(',').map((o) => o.trim());
+
+// Private Network Access (Chrome 94+) — handle preflight BEFORE cors middleware
+app.use((req, res, next) => {
+  if (req.method === 'OPTIONS' && req.headers['access-control-request-private-network']) {
+    res.set('Access-Control-Allow-Private-Network', 'true');
+  }
+  next();
+});
+
 app.use(
   cors({
     origin: (origin, callback) => {
@@ -309,7 +317,7 @@ app.use(
   }),
 );
 
-// Private Network Access (Chrome 94+) — required for HTTPS pages to reach localhost
+// Private Network Access — also set on regular responses
 app.use((_req, res, next) => {
   res.set('Access-Control-Allow-Private-Network', 'true');
   next();
@@ -503,7 +511,7 @@ function checkCommandExists(command) {
         const versionProc = spawn(command, ['--version'], {
           stdio: ['pipe', 'pipe', 'pipe'],
           timeout: 10000,
-          shell: false,
+          shell: true,
         });
         let versionOut = '';
         versionProc.stdout.on('data', (d) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agentic-factory-bridge",
-  "version": "1.0.1",
+  "version": "1.0.5",
   "description": "Local bridge for Atos Agentic Factory — connects the marketplace to OpenCode CLI on your machine",
   "main": "bridge.js",
   "bin": {
@@ -21,8 +21,7 @@
   "license": "MIT",
   "dependencies": {
     "express": "^4.21.0",
-    "cors": "^2.8.5",
-    "uuid": "^9.0.0"
+    "cors": "^2.8.5"
   },
   "engines": {
     "node": ">=18.0.0"