limbo-ai 1.9.2 → 1.9.4

package/cli.js

@@ -20,6 +20,8 @@ const COMPOSE_FILE = path.join(LIMBO_DIR, 'docker-compose.yml');
 const GHCR_IMAGE = 'ghcr.io/tomasward1/limbo';
 const DEFAULT_TAG = require('./package.json').version;
 const PORT = 18789;
+// OpenClaw's OAuth callback server port — must be exposed when running auth inside Docker
+const OPENCLAW_AUTH_PORT = 1453;
 
 // OpenClaw compatibility snapshots from official docs:
 // - https://docs.openclaw.ai/providers/openai
@@ -811,13 +813,23 @@ function applyOpenClawConfig(cfg) {
   ok(t(cfg.language, 'configFlowDone'));
 }
 
-// Strip ANSI escape sequences so URL/text matching works on TTY output.
-const stripAnsi = (str) => str.replace(/\x1b\[[0-9;]*[A-Za-z]/g, '').replace(/\r/g, '');
+// Strip all ANSI/VT100 escape sequences from a string.
+// Uses standards-based ECMA-48 byte ranges:
+//   CSI: ESC [ <param bytes 0x30-0x3F>* <intermediate bytes 0x20-0x2F>* <final byte 0x40-0x7E>
+//   Two-char ESC: ESC <0x40-0x5F>  (e.g. ESC M, ESC =, ESC 7/8 save/restore cursor)
+//   OSC: ESC ] <any> BEL|ST
+// Covers private-mode sequences like \x1b[?25l (hide cursor) that the old [0-9;]* missed.
+const stripAnsi = (str) => str
+  .replace(/\x1b\[[0-?]*[ -/]*[@-~]/g, '')  // CSI sequences (all parameter byte combos)
+  .replace(/\x1b[@-Z\\-_]/g, '')             // two-char ESC sequences
+  .replace(/\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g, '') // OSC sequences
+  .replace(/\r/g, '');
 
 // Spawn OpenClaw auth with filtered output: extract OAuth URLs, suppress branding.
 // --tty is required so openclaw sees a TTY inside the container and runs the auth wizard.
 // We pipe stdout/stderr to filter content while the container gets a proper PTY allocation.
-function streamFilteredAuth(dockerArgs) {
+// onUrl: optional callback invoked with each unique URL as it appears (e.g. to auto-open browser).
+function streamFilteredAuth(dockerArgs, onUrl = null) {
   return new Promise((resolve) => {
     const proc = spawn('docker', dockerArgs, {
       cwd: LIMBO_DIR,
@@ -839,13 +851,25 @@ function streamFilteredAuth(dockerArgs) {
     const emitLine = (rawLine) => {
       const line = stripAnsi(rawLine);
       const urls = line.match(urlRe) || [];
-      // Whitelist-only: only emit URLs — everything else is branding or TUI chrome
-      for (const url of urls) {
-        if (!seenUrls.has(url)) {
-          seenUrls.add(url);
-          console.log(`\n  ${c.cyan}${c.bold}→  ${url}${c.reset}\n`);
+      if (urls.length > 0) {
+        for (const url of urls) {
+          if (!seenUrls.has(url)) {
+            seenUrls.add(url);
+            console.log(`\n  ${c.cyan}${c.bold}→  ${url}${c.reset}\n`);
+            if (onUrl) onUrl(url);
+          }
         }
+        return; // don't double-print the line containing the URL
       }
+      // Suppress OpenClaw branding
+      if (/openclaw/i.test(line)) return;
+      // Suppress TUI chrome: lines that are only spinner/decoration/box-drawing chars.
+      // OpenClaw's TUI writes animation frames separated by \r — after our \r-split, each
+      // frame becomes a short line (often a single char). We filter these out so they don't
+      // scatter across the terminal as individual console.log lines.
+      const tuiChrome = /^[\s\u2500-\u257f\u2580-\u259f\u25a0-\u25ff\u2600-\u26ff◇◆●○◈→←↑↓⠀-\u28ff]*$/u;
+      if (tuiChrome.test(line)) return;
+      if (line.trim()) console.log(`   ${line}`);
     };
 
     proc.stdout.on('data', handleData);
@@ -874,8 +898,16 @@ async function runSubscriptionAuthFlow(cfg) {
   let exitCode;
   if (cfg.providerFamily === 'openai') {
     // --tty allocates a PTY inside the container so openclaw's auth wizard runs correctly.
+    // -p exposes the OAuth callback port so the browser redirect reaches the in-container server.
     // We still pipe stdout/stderr to filter out branding and highlight the OAuth URL.
-    exitCode = await streamFilteredAuth(['compose', 'run', '--tty', '--rm', '--entrypoint', 'openclaw', 'limbo', ...authArgs]);
+    const opener = process.platform === 'darwin' ? 'open' : 'xdg-open';
+    exitCode = await streamFilteredAuth(
+      ['compose', 'run', '--tty', '--rm', '-p', `${OPENCLAW_AUTH_PORT}:${OPENCLAW_AUTH_PORT}`, '--entrypoint', 'openclaw', 'limbo', ...authArgs],
+      (url) => {
+        // Auto-open the browser so the user doesn't need to copy/paste the URL
+        try { spawnSync(opener, [url], { stdio: 'ignore', timeout: 3000 }); } catch {}
+      },
+    );
   } else {
     // Anthropic paste-token is interactive (user pastes a token); keep stdio inherited
     const authResult = runOpenClaw(authArgs);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "limbo-ai",
-  "version": "1.9.2",
+  "version": "1.9.4",
   "description": "Your personal AI memory agent — install and manage Limbo via npx",
   "type": "commonjs",
   "bin": {