opencrater 0.2.1 → 0.2.3

package/cli.js

@@ -23,8 +23,29 @@ const fs = require("node:fs");
 const path = require("node:path");
 const os = require("node:os");
 
-const KEY = "ock_MUFntM66VEbx7e7fKoQr2a43VBx762rHkKw1G8vj";
-const PKG = "opencrater";
+// Default = the house channel. Publishers integrating OpenCrater into
+// their OWN package pass their credentials instead:
+//   npx opencrater on  --key ock_… --package my-tool
+//   npx opencrater off --package my-tool
+// so revenue attributes to them and `off` removes only their entries.
+// Flags are parsed up front; everything below reads KEY/PKG.
+let KEY = "ock_MUFntM66VEbx7e7fKoQr2a43VBx762rHkKw1G8vj";
+let PKG = "opencrater";
+{
+  const argv = process.argv;
+  for (let i = 2; i < argv.length; i++) {
+    if (argv[i] === "--key" && argv[i + 1]) KEY = argv[++i];
+    else if (argv[i] === "--package" && argv[i + 1]) PKG = argv[++i];
+  }
+  if (!/^ock_[A-Za-z0-9]{8,64}$/.test(KEY)) {
+    console.error("opencrater: --key must look like ock_…");
+    process.exit(1);
+  }
+  if (!/^[A-Za-z0-9@/_.-]{1,128}$/.test(PKG)) {
+    console.error("opencrater: --package must be 1-128 chars of [a-zA-Z0-9@/_.-]");
+    process.exit(1);
+  }
+}
 // EVERY host hook is registered as a trigger; the SDK + platform decide
 // which ones actually render (recommended session-edge hooks by default,
 // remotely tunable). Registering everything also feeds the recommendation
@@ -262,16 +283,28 @@ function showAgain() {
     return;
   }
   const { spawnSync, spawn } = require("node:child_process");
-  // our own terminal's device (we are running interactively)
-  const tty = spawnSync("tty", { stdio: ["inherit", "pipe", "ignore"], encoding: "utf8" })
-    .stdout?.trim();
+  const isWin = process.platform === "win32";
   // Replay: live ✕ (local), but never re-poll or re-record the original
   // impression — it was already dismissed once.
   const payload = { ...saved.payload, replay: true };
   delete payload.impressionId;
   const env = { ...process.env, OPENCRATER_PAINT: JSON.stringify(payload) };
-  if (tty && tty.startsWith("/dev/")) env.OPENCRATER_TTY = tty;
-  const child = spawn(process.execPath, [painter], { detached: true, stdio: "ignore", env });
+  // Unix: resolve our terminal device so the detached painter can open it.
+  // Windows: no `tty` command and no device path — the painter opens CONOUT$
+  // of the console it inherits, so we must NOT detach (detach = new/hidden
+  // console = nothing visible). Mirror the SDK's painterSpawnOptions.
+  if (!isWin) {
+    const tty = spawnSync("tty", { stdio: ["inherit", "pipe", "ignore"], encoding: "utf8" })
+      .stdout?.trim();
+    if (tty && tty.startsWith("/dev/")) env.OPENCRATER_TTY = tty;
+  }
+  const child = spawn(process.execPath, [painter], {
+    detached: !isWin,
+    stdio: "ignore",
+    env,
+    ...(isWin ? { windowsHide: true } : {}),
+  });
+  child.on("error", () => {});
   child.unref();
   console.log("opencrater: showing the last ad again.");
 }
@@ -326,13 +359,21 @@ if (cmd === "on" || cmd === "enable") {
     console.log("  overlay surface); message-level sponsorship is on the roadmap.");
   }
   // Pre-install the local hook runtime (background): hooks then run via
-  // plain node — no npx resolution latency, no cold-cache races.
+  // plain node — no npx resolution latency, no cold-cache races. Best-effort
+  // and non-fatal — hooks fall back to `npx -y` when the runtime is absent.
   try {
     const { spawn } = require("node:child_process");
-    spawn("npm", ["install", "--prefix",
+    // Windows: `npm` is `npm.cmd`, spawnable only through a shell — without
+    // shell:true this throws ENOENT as an async 'error' event that escapes
+    // try/catch and crashes the process. shell:true + an error handler keep
+    // it silent on every platform.
+    const isWin = process.platform === "win32";
+    const child = spawn("npm", ["install", "--prefix",
       path.join(os.homedir(), ".config", "opencrater", "runtime"),
       "@opencrater/sdk@latest", "--silent", "--no-audit", "--no-fund"],
-      { detached: true, stdio: "ignore" }).unref();
+      { detached: true, stdio: "ignore", shell: isWin, windowsHide: true });
+    child.on("error", () => {});
+    child.unref();
   } catch {}
   console.log("OpenCrater ads enabled for Claude Code + Codex.");
   console.log("All hooks registered as triggers; cards render only at session edges");
@@ -366,7 +407,8 @@ if (cmd === "on" || cmd === "enable") {
   console.log("Gemini CLI:", !hosts.gemini_cli ? "not installed" : gm.length ? "enabled (" + gm.length + " hooks)" : "detected — run: npx opencrater on");
   if (hosts.openclaw) console.log("OpenClaw:   detected — message-level sponsorship on the roadmap");
 } else {
-  console.log("Usage: npx opencrater <on|off|status|x|report|show>");
+  console.log("Usage: npx opencrater <on|off|status|x|report|show> [--key ock_… --package name]");
+  console.log("  --key/--package  publisher attribution (defaults to the OpenCrater house channel)");
   console.log("  x       dismiss the sponsor card currently on screen");
   console.log("  report  report the ad (never shows on this machine again)");
   console.log("  show    bring the last dismissed ad back");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "opencrater",
-  "version": "0.2.1",
+  "version": "0.2.3",
   "description": "OpenCrater — sponsor cards in Claude Code and Codex. Free, one command, opt out anytime.",
   "keywords": [
     "opencrater",