aurix-ai 2.7.7 → 2.7.8

package/bin/aurix.js

@@ -19,23 +19,55 @@ try {
   runtime = 'bun';
 } catch {}
 
+// Use shell: false with an absolute path to the Node binary. shell: true
+// triggers DEP0190 (args concatenated without escaping). process.execPath
+// points at the real node.exe even when launched through a .cmd shim on
+// Windows, so spawn() works without shell: true.
+let runtimeBin = process.execPath;
+if (runtime === 'bun') {
+  try {
+    runtimeBin = execSync('bun -e "process.stdout.write(process.execPath)"', { encoding: 'utf8' }).trim() || 'bun';
+  } catch {
+    runtimeBin = 'bun';
+  }
+}
+
 const nodeArgs = [];
-if (runtime === 'node') {
-  // node:ffi is still experimental in Node 22.5+ / 24.x. Without this flag,
-  // OpenTUI's backend loader falls back to an "FFI unavailable" stub and the
-  // whole TUI refuses to start (this is what bit us on Windows).
-  // Don't double-inject if the user (or a parent process) already passed it.
-  const execArgv = process.execArgv || [];
-  const hasFlag = execArgv.some(a =>
-    a === '--experimental-ffi' || a.startsWith('--experimental-ffi=')
-  );
-  if (!hasFlag) nodeArgs.push('--experimental-ffi');
+let selfRelaunch = false;
+
+if (runtime === 'node' && !process.env.AURIX_RELAUNCHED) {
+  // OpenTUI's backend does `require("node:ffi")` which is experimental in
+  // Node 22.5+. Probe whether it already works without a flag, and only
+  // inject --experimental-ffi if it actually fails AND the flag is valid
+  // on this Node build. If neither works, launch without the flag and let
+  // the in-process fallback render a diagnostic message.
+  let needsFlag = false;
+  try {
+    execSync(`"${runtimeBin}" -e "require(\\"node:ffi\\")"`, { stdio: 'ignore' });
+  } catch {
+    needsFlag = true;
+  }
+
+  if (needsFlag) {
+    let flagWorks = false;
+    try {
+      execSync(`"${runtimeBin}" --experimental-ffi -e "0"`, { stdio: 'ignore' });
+      flagWorks = true;
+    } catch {}
+
+    if (flagWorks) {
+      nodeArgs.push('--experimental-ffi');
+      selfRelaunch = true;
+    }
+  }
 }
 
-const child = spawn(runtime, [...nodeArgs, dist, ...process.argv.slice(2)], {
+const env = { ...process.env, AURIX_HOME: join(__dirname, '..') };
+if (selfRelaunch) env.AURIX_RELAUNCHED = '1';
+
+const child = spawn(runtimeBin, [...nodeArgs, dist, ...process.argv.slice(2)], {
   stdio: 'inherit',
-  env: { ...process.env, AURIX_HOME: join(__dirname, '..') },
-  shell: process.platform === 'win32',
+  env,
 });
 
 child.on('close', (code) => process.exit(code ?? 0));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "aurix-ai",
-  "version": "2.7.7",
+  "version": "2.7.8",
   "description": "Open-source terminal AI agent for coding, deep research, automation, and multi-platform task execution.",
   "type": "module",
   "main": "dist/index.js",