ninja-terminals 2.4.4 → 2.4.6

package/cli.js

@@ -225,6 +225,14 @@ process.env.HTTP_PORT          = String(port);
 process.env.DEFAULT_TERMINALS  = String(terminals);
 process.env.DEFAULT_CWD        = cwd;
 
+// Single browser-open path: server.js opens the tab in its listen callback
+// (knows the actual selected port, uses 127.0.0.1). Enable it by default for
+// CLI launches; opt out with --no-open. This replaces cli.js's own opener,
+// which previously fired a second, redundant tab.
+if (!hasFlag('--no-open') && !process.env.NINJA_OPEN_BROWSER) {
+  process.env.NINJA_OPEN_BROWSER = '1';
+}
+
 // Auth env vars
 if (token) {
   process.env.NINJA_AUTH_TOKEN = token;
@@ -233,33 +241,9 @@ if (offline) {
   process.env.NINJA_OFFLINE = '1';
 }
 
-// ── Auto-open browser ────────────────────────────────────────
-
-function openBrowser(url) {
-  const { spawn } = require('child_process');
-  const platform = process.platform;
-  let cmd, cmdArgs;
-
-  if (platform === 'darwin') {
-    cmd = 'open';
-    cmdArgs = [url];
-  } else if (platform === 'win32') {
-    cmd = 'cmd';
-    cmdArgs = ['/c', 'start', url];
-  } else {
-    cmd = 'xdg-open';
-    cmdArgs = [url];
-  }
-
-  spawn(cmd, cmdArgs, { stdio: 'ignore', detached: true }).unref();
-}
-
-// Delay browser open until after the server listen callback fires.
-// server.js calls server.listen() synchronously on require, so we
-// schedule the open after the current tick stack clears.
-setTimeout(() => {
-  openBrowser(`http://localhost:${port}`);
-}, 1500);
+// Browser auto-open is handled by server.js's listen callback (single path,
+// gated by NINJA_OPEN_BROWSER which we set above). cli.js no longer opens its
+// own tab — that produced a duplicate.
 
 // ── Start the server ─────────────────────────────────────────
 

package/lib/runtime-session.js

@@ -18,17 +18,29 @@ function ensureSessionDir() {
   fs.mkdirSync(SESSION_DIR, { recursive: true, mode: 0o700 });
 }
 
-function isPortAvailable(port, host = '127.0.0.1') {
+// Probe a single host: 'free' (bindable), 'inuse' (EADDRINUSE), or
+// 'unavailable' (stack absent / other error — don't treat as a collision).
+function probePort(port, host) {
   return new Promise((resolve) => {
     const server = net.createServer();
-    server.once('error', () => resolve(false));
-    server.once('listening', () => {
-      server.close(() => resolve(true));
-    });
+    server.once('error', (err) => resolve(err.code === 'EADDRINUSE' ? 'inuse' : 'unavailable'));
+    server.once('listening', () => server.close(() => resolve('free')));
     server.listen(port, host);
   });
 }
 
+// A port is available only if it's NOT in use on EITHER IP stack. A listener
+// on IPv6 wildcard (e.g. *:3300, common with other local MCP servers) leaves
+// IPv4 127.0.0.1 genuinely free, so an IPv4-only check would miss it and the
+// browser (which resolves localhost -> IPv6 first) would hit the wrong server.
+async function isPortAvailable(port) {
+  const [v4, v6] = await Promise.all([
+    probePort(port, '127.0.0.1'),
+    probePort(port, '::1'),
+  ]);
+  return v4 !== 'inuse' && v6 !== 'inuse';
+}
+
 async function findAvailablePort(preferredPort, host = '127.0.0.1', maxAttempts = 50) {
   const start = Number.parseInt(preferredPort, 10);
   if (!Number.isInteger(start) || start < 1 || start > 65535) {
@@ -36,7 +48,7 @@ async function findAvailablePort(preferredPort, host = '127.0.0.1', maxAttempts
   }
 
   for (let port = start; port < start + maxAttempts && port <= 65535; port++) {
-    if (await isPortAvailable(port, host)) return port;
+    if (await isPortAvailable(port)) return port;
   }
 
   throw new Error(`No available port found from ${start} to ${Math.min(start + maxAttempts - 1, 65535)}`);
@@ -47,7 +59,7 @@ function writeRuntimeSession(session) {
   const payload = {
     version: 1,
     pid: process.pid,
-    host: 'localhost',
+    host: '127.0.0.1',
     createdAt: new Date().toISOString(),
     ...session,
   };
@@ -90,7 +102,7 @@ function readAuthToken() {
   }
 }
 
-function requestJson({ host = 'localhost', port, path: reqPath, token, method = 'GET', body = null, timeoutMs = 3000 }) {
+function requestJson({ host = '127.0.0.1', port, path: reqPath, token, method = 'GET', body = null, timeoutMs = 3000 }) {
   return new Promise((resolve, reject) => {
     const payload = body ? JSON.stringify(body) : null;
     const headers = {};
@@ -134,7 +146,7 @@ async function healthCheckSession(session, timeoutMs = 3000) {
   if (!session || !session.port) return { ok: false, error: 'No runtime session port' };
   try {
     const res = await requestJson({
-      host: session.host || 'localhost',
+      host: session.host || '127.0.0.1',
       port: session.port,
       path: '/health',
       timeoutMs,

package/mcp-server.js

@@ -668,8 +668,8 @@ mcpServer.setRequestHandler(CallToolRequestSchema, async (request) => {
               label: terminal.label,
               status: terminal.status,
               cwd: terminal.cwd,
-              webUrl: `http://localhost:${HTTP_PORT}`,
-              wsUrl: `ws://localhost:${HTTP_PORT}/ws/${terminal.id}`,
+              webUrl: `http://127.0.0.1:${HTTP_PORT}`,
+              wsUrl: `ws://127.0.0.1:${HTTP_PORT}/ws/${terminal.id}`,
             }, null, 2),
           }],
         };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ninja-terminals",
-  "version": "2.4.4",
+  "version": "2.4.6",
   "description": "MCP server for multi-terminal Claude Code orchestration with DAG task management, parallel execution, and self-improvement",
   "main": "server.js",
   "bin": {

package/server.js

@@ -1311,7 +1311,7 @@ async function startServer() {
   }
 
   server.listen(selectedPort, BIND_HOST, () => {
-    const url = `http://localhost:${selectedPort}`;
+    const url = `http://127.0.0.1:${selectedPort}`;
     console.log(`[bind] Listening on ${BIND_HOST}:${selectedPort}`);
     const fleetConfig = FLEET_MODES[FLEET_MODE] || FLEET_MODES.claude;
     const terminalCount = DEFAULT_TERMINALS > 0 ? Math.min(DEFAULT_TERMINALS, fleetConfig.length) : fleetConfig.length;