mio-agent-runtime 0.3.11 → 0.3.12

package/observe/observer.js

@@ -604,17 +604,37 @@ function findOpencodeBin() {
     const resolved = path.resolve(c)
     if (fs.existsSync(resolved)) return resolved
   }
+  // Resolve from PATH so the SQL is never passed through cmd.exe, where
+  // '>' in the query is interpreted as output redirection and creates
+  // stray files (e.g. "WHERE p.rowid > 0" -> a file named "0").
+  try {
+    const finder = process.platform === 'win32' ? 'where' : 'which'
+    const res = spawnSync(finder, ['opencode'], { encoding: 'utf8', windowsHide: true, timeout: 15000 })
+    if (res.status === 0 && res.stdout) {
+      const lines = res.stdout
+        .split(/\r?\n/)
+        .map((s) => s.trim())
+        .filter(Boolean)
+      const preferred =
+        process.platform === 'win32'
+          ? lines.filter((p) => /\.(exe|cmd|bat)$/i.test(p))
+          : lines
+      const first = (preferred.length > 0 ? preferred : lines).find((p) => fs.existsSync(p))
+      if (first) return first
+    }
+  } catch (_) {}
   return null
 }
 
 function runOpencodeQuery(sql) {
   const bin = findOpencodeBin()
+  // Never shell the SQL through cmd.exe: '>' in the query would be parsed
+  // as output redirection, creating files named after the redirect target.
+  if (!bin) return null
   const args = ['db', sql, '--format', 'json']
   let res
   try {
-    res = bin
-      ? spawnSync(bin, args, { encoding: 'utf8', timeout: 90000, windowsHide: true, maxBuffer: 256 * 1024 * 1024 })
-      : spawnSync('opencode', args, { encoding: 'utf8', timeout: 90000, shell: true, windowsHide: true, maxBuffer: 256 * 1024 * 1024 })
+    res = spawnSync(bin, args, { encoding: 'utf8', timeout: 90000, windowsHide: true, maxBuffer: 256 * 1024 * 1024 })
   } catch (_) {
     return null
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mio-agent-runtime",
-  "version": "0.3.11",
+  "version": "0.3.12",
   "description": "Mio Agent Runtime installer and MCP intelligence layer",
   "license": "MIT",
   "type": "commonjs",