depository-deploy 1.2.4 → 1.3.0

package/install/templates/web.config

@@ -99,17 +99,5 @@
     <!-- ── Error handling ────────────────────────────────────── -->
     <httpErrors existingResponse="PassThrough" />
 
-    <!-- ── Authentication — override server-level defaults ──── -->
-    <!-- Explicitly allow anonymous and disable all challenge-based  -->
-    <!-- auth so IIS never pops a browser credential dialog.        -->
-    <security>
-      <authentication>
-        <anonymousAuthentication enabled="true" />
-        <windowsAuthentication   enabled="false" />
-        <basicAuthentication     enabled="false" />
-        <digestAuthentication    enabled="false" />
-      </authentication>
-    </security>
-
   </system.webServer>
 </configuration>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "depository-deploy",
-  "version": "1.2.4",
+  "version": "1.3.0",
   "description": "Depository document management system – deployment wizard and installers",
   "license": "UNLICENSED",
   "publishConfig": {
@@ -25,9 +25,9 @@
     "scripts/publish.mjs"
   ],
   "optionalDependencies": {
-    "depository-deploy-linux": "1.2.4",
-    "depository-deploy-macos": "1.2.4",
-    "depository-deploy-windows": "1.2.4"
+    "depository-deploy-linux": "1.3.0",
+    "depository-deploy-macos": "1.3.0",
+    "depository-deploy-windows": "1.3.0"
   },
   "scripts": {
     "start": "node wizard-server.mjs"

package/wizard-server.mjs

@@ -347,13 +347,14 @@ const server = createServer((req, res) => {
       for (const sub of job.subs) sendSSE(sub, 'line', { text });
     }
 
-    const cmd = ['npm', ['install', '-g', `${PKG_NAME}@latest`]];
+    const npmBin = os.platform() === 'win32' ? 'npm.cmd' : 'npm';
+    const npmArgs = ['install', '-g', `${PKG_NAME}@latest`];
 
     pushLine(`Updating ${PKG_NAME} → latest...`);
-    pushLine(`Running: ${cmd[0]} ${cmd[1].join(' ')}`);
+    pushLine(`Running: npm ${npmArgs.join(' ')}`);
 
-    const proc = spawn(cmd[0], cmd[1], {
-      cwd: __dirname, shell: true, stdio: 'pipe',
+    const proc = spawn(npmBin, npmArgs, {
+      cwd: __dirname, shell: false, stdio: 'pipe',
     });
 
     proc.stdout.on('data', d => d.toString().split(/\r?\n/).forEach(pushLine));