lark-remote 0.1.13 → 0.2.1

package/dist/update/install.js

@@ -1,6 +1,53 @@
-import { execFile, execFileSync } from 'node:child_process';
 import fs from 'node:fs';
 import { getLogger } from '../logger/index.js';
+import { resolveExecutable } from '../platform/command.js';
+import { currentPlatform, isWin32 } from '../platform/select.js';
+import { spawnProcess, spawnProcessSync } from '../platform/spawn.js';
+/**
+ * execFile 回调风格适配 cross-spawn（platform/spawn.ts）。
+ *
+ * npm/pnpm 在 Windows 是 .cmd 垫片，execFile 不经 shell 无法执行——Node 自
+ * CVE-2024-27980 收紧后对无 shell 启动 .cmd 直接抛错，win32 上 /update 会
+ * 永远失败。执行统一走 spawnProcess（cross-spawn 处理 PATHEXT + .cmd 经
+ * cmd.exe 受控执行），错误/退出码语义对齐 execFile：
+ * - 非 0 退出 → err.message 为 execFile 同款 "Command failed: ..." 形态
+ *   （含 stderr 首段，EACCES 提示逻辑依赖它）；
+ * - 'error' 事件（ENOENT 等）→ 原样回调。
+ */
+function execViaSpawnProcess(file, args, options, callback) {
+    const proc = spawnProcess(file, args, {
+        timeout: options.timeout,
+        stdio: ['ignore', 'pipe', 'pipe'],
+        windowsHide: true,
+    });
+    let stdout = '';
+    let stderr = '';
+    let settled = false;
+    const finish = (error) => {
+        if (settled)
+            return;
+        settled = true;
+        callback(error, stdout, stderr);
+    };
+    proc.stdout?.setEncoding('utf8');
+    proc.stdout?.on('data', (chunk) => {
+        stdout += chunk;
+    });
+    proc.stderr?.setEncoding('utf8');
+    proc.stderr?.on('data', (chunk) => {
+        stderr += chunk;
+    });
+    proc.on('error', (err) => finish(err));
+    proc.on('close', (code, signal) => {
+        if (code === 0) {
+            finish(null);
+            return;
+        }
+        const detail = stderr.trim() || stdout.trim();
+        const how = signal ? ` terminated with ${signal}` : ` with exit code ${code ?? 'unknown'}`;
+        finish(new Error(`Command failed: ${file} ${args.join(' ')}${how}${detail ? `\n${detail}` : ''}`));
+    });
+}
 /**
  * Infer the installing package manager from the real path of the running
  * script (e.g. `.../node_modules/lark-remote/dist/index.js`).
@@ -54,15 +101,16 @@ export function detectPackageManager(scriptPath) {
         if (inferred)
             return inferred;
     }
-    // 3. which availability fallback
+    // 3. availability fallback: 纯 Node PATH 解析（win32 PATHEXT），不再依赖外部 which
+    //    （Windows 无 which）；win32 再用 where.exe 兜底罕见的解析失败场景（v2 §4.3）
     const candidates = ['npm', 'bun', 'pnpm'];
     for (const cmd of candidates) {
-        try {
-            execFileSync('which', [cmd], { stdio: 'pipe', timeout: 3000 });
+        if (resolveExecutable(cmd))
             return cmd;
-        }
-        catch {
-            // Not found, try next
+        if (isWin32(currentPlatform)) {
+            const res = spawnProcessSync('where.exe', [cmd], { stdio: 'pipe', timeout: 3000 });
+            if (!res.error && res.status === 0)
+                return cmd;
         }
     }
     return null;
@@ -82,7 +130,8 @@ function getInstallCommand(pm) {
  * Run the global install command to upgrade lark-remote to the latest version.
  *
  * @param opts.packageManager - Override detected package manager
- * @param opts.execFn - Override execFile for testing
+ * @param opts.execFn - Override exec for testing; default routes through
+ *   platform/spawn.ts (cross-spawn, win32 .cmd shim safe)
  */
 export function runInstallLatest(opts) {
     // If packageManager is explicitly null, skip detection and fail immediately.
@@ -104,7 +153,7 @@ export function runInstallLatest(opts) {
         });
     }
     const { cmd, args } = getInstallCommand(pm);
-    const execFn = opts?.execFn ?? ((...args) => execFile(...args));
+    const execFn = opts?.execFn ?? execViaSpawnProcess;
     const logger = getLogger();
     logger.info(`[update] running: ${cmd} ${args.join(' ')}`);
     return new Promise((resolve) => {

package/dist/update/version-check.d.ts

@@ -29,3 +29,8 @@ export declare function checkLatestVersion(opts?: {
     bypassCache?: boolean;
     registryUrl?: string;
 }): Promise<VersionCheckResult>;
+/**
+ * Format an update hint string for the startup notification.
+ * Returns null if no newer version is available.
+ */
+export declare function formatUpdateHint(current: string, latest: string): string | null;

package/dist/update/version-check.js

@@ -146,4 +146,13 @@ export async function checkLatestVersion(opts) {
     }
     return { current, latest };
 }
+/**
+ * Format an update hint string for the startup notification.
+ * Returns null if no newer version is available.
+ */
+export function formatUpdateHint(current, latest) {
+    if (!isNewer(current, latest))
+        return null;
+    return `📦 有新版本 ${latest} 可用（当前 ${current}），发送 /update 升级`;
+}
 //# sourceMappingURL=version-check.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lark-remote",
-  "version": "0.1.13",
+  "version": "0.2.1",
   "description": "Feishu (Lark) private-chat bridge to local coding agents — Claude Code / Codex / opencode / pi / kimi, with live-streaming CardKit 2.0 cards",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -25,8 +25,9 @@
   ],
   "scripts": {
     "dev": "bun src/index.ts",
-    "build": "rm -rf dist && tsc && chmod +x dist/index.js dist/cli.js",
-    "typecheck": "tsc --noEmit",
+    "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc && node -e \"if(process.platform!=='win32'){const fs=require('fs');for(const f of ['dist/index.js','dist/cli.js'])fs.chmodSync(f,0o755)}\"",
+    "typecheck": "tsc --noEmit && tsc -p tsconfig.test-infra.json",
+    "typecheck:test-infra": "tsc -p tsconfig.test-infra.json",
     "lint": "eslint src tests",
     "lint:fix": "eslint src tests --fix",
     "format": "prettier --write 'src/**/*.ts' 'tests/**/*.ts'",
@@ -42,6 +43,7 @@
     "test:config": "vitest run --project infra-config",
     "test:order": "vitest run --project infra-order",
     "test:misc": "vitest run --project infra-misc",
+    "test:platform": "vitest run --project infra-platform",
     "test:claude": "vitest run --project agent-claude",
     "test:codex": "vitest run --project agent-codex",
     "test:opencode": "vitest run --project agent-opencode",
@@ -57,7 +59,7 @@
     "test:pi-full": "vitest run --project agent-pi --project infra-runner --project infra-session",
     "test:kimi-full": "vitest run --project agent-kimi --project infra-runner --project infra-session",
     "test:live": "vitest run --project live",
-    "prepublishOnly": "tsc --noEmit && vitest run && rm -rf dist && tsc && chmod +x dist/index.js dist/cli.js",
+    "prepublishOnly": "npm run typecheck && vitest run && npm run build",
     "prepack": "node -e \"const fs=require('fs');if(!fs.existsSync('dist/cli.js')){console.error('dist/ missing — run bun run build first');process.exit(1)}\""
   },
   "publishConfig": {
@@ -94,15 +96,16 @@
     "@iarna/toml": "^2.2.5",
     "@larksuite/channel": "^0.3.0",
     "axios": "^1.18.0",
+    "cross-spawn": "^7.0.6",
     "form-data": "^4.0.6",
-    "qrcode-terminal": "^0.12.0",
+    "qrcode-generator": "^2.0.4",
     "yaml": "^2.9.0",
     "zod": "^4.4.3"
   },
   "devDependencies": {
     "@eslint/js": "^10.0.1",
+    "@types/cross-spawn": "^6.0.6",
     "@types/node": "^26.1.2",
-    "@types/qrcode-terminal": "^0.12.2",
     "@vitest/coverage-v8": "4.1.10",
     "eslint": "^10.7.0",
     "eslint-config-prettier": "^10.1.8",

package/dist/update/startup-hint.d.ts

@@ -1,5 +0,0 @@
-/**
- * Format an update hint string for the startup notification.
- * Returns null if no newer version is available.
- */
-export declare function formatUpdateHint(current: string, latest: string): string | null;

package/dist/update/startup-hint.js

@@ -1,11 +0,0 @@
-import { isNewer } from './version-check.js';
-/**
- * Format an update hint string for the startup notification.
- * Returns null if no newer version is available.
- */
-export function formatUpdateHint(current, latest) {
-    if (!isNewer(current, latest))
-        return null;
-    return `📦 有新版本 ${latest} 可用（当前 ${current}），发送 /update 升级`;
-}
-//# sourceMappingURL=startup-hint.js.map