openyida 2026.7.18-1 → 2026.7.18

package/lib/auth/oauth-loopback.js

@@ -11,26 +11,19 @@ function randomToken(bytes = 24) {
   return crypto.randomBytes(bytes).toString('base64url');
 }
 
-function resolveBrowserLauncher(url, platform = process.platform) {
-  if (platform === 'darwin') {
-    return { command: 'open', args: [url] };
-  }
-  if (platform === 'win32') {
-    // rundll32 hands the URL to the default browser as a single argument.
-    // Going through `cmd /c start` would let cmd.exe treat the `&` in the
-    // OAuth URL as command separators and truncate the query string after
-    // redirect_uri, dropping client_id/state and breaking login.
-    return { command: 'rundll32', args: ['url.dll,FileProtocolHandler', url] };
-  }
-  return { command: 'xdg-open', args: [url] };
-}
-
 function openBrowser(url) {
   if (process.env.OPENYIDA_NO_BROWSER === '1') {
     return false;
   }
 
-  const { command, args } = resolveBrowserLauncher(url);
+  let command = 'xdg-open';
+  let args = [url];
+  if (process.platform === 'darwin') {
+    command = 'open';
+  } else if (process.platform === 'win32') {
+    command = 'cmd';
+    args = ['/c', 'start', '', url];
+  }
 
   try {
     const child = spawn(command, args, {
@@ -159,6 +152,5 @@ function runDingtalkLoopback(options = {}) {
 module.exports = {
   runDingtalkLoopback,
   buildDingtalkOAuthUrl,
-  resolveBrowserLauncher,
   CALLBACK_PATH,
 };

package/lib/bridge/bridge.js

@@ -6,7 +6,6 @@ const path = require('path');
 const { spawn } = require('child_process');
 
 const { parseOpenOption } = require('../core/browser-handoff');
-const { resolveBrowserLauncher } = require('../auth/oauth-loopback');
 const { banner, label, success, hint, fail } = require('../core/chalk');
 
 const DEFAULT_HOST = '127.0.0.1';
@@ -1129,11 +1128,19 @@ async function startBridgeServer(options = {}) {
 }
 
 function openExternalUrl(url) {
-  // Reuse the shared launcher so the URL is passed as a single argument.
-  // On Windows this avoids `cmd /c start` splitting the URL on `&`, which
-  // would drop the bridge params carried in the URL hash
-  // (oy_bridge_url / oy_bridge_token) and break bridge pairing.
-  const { command, args } = resolveBrowserLauncher(url);
+  const platform = process.platform;
+  let command;
+  let args;
+  if (platform === 'darwin') {
+    command = 'open';
+    args = [url];
+  } else if (platform === 'win32') {
+    command = 'cmd';
+    args = ['/c', 'start', '', url];
+  } else {
+    command = 'xdg-open';
+    args = [url];
+  }
 
   const child = spawn(command, args, {
     detached: true,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openyida",
-  "version": "2026.7.18-1",
+  "version": "2026.7.18",
   "description": "OpenYida CLI - 宜搭低代码 AI 开发工具（安装即用，零配置）",
   "bin": {
     "openyida": "bin/yida.js",