rechrome 1.10.2 → 1.10.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rechrome",
-  "version": "1.10.2",
+  "version": "1.10.3",
   "repository": {
     "type": "git",
     "url": "https://github.com/snomiao/rechrome.git"

package/rech.js

@@ -120,7 +120,7 @@ export function parseUrl(raw: string) {
 export async function getOrCreateUrl(): Promise<string> {
   // Treat a URL without a bearer key as missing — it cannot authenticate
   try { if (process.env[ENV_KEY] && new URL(process.env[ENV_KEY]!).username) return process.env[ENV_KEY]!; } catch {}
-  const key = randomBytes(9).toString("base64url"); // 12 chars
+  const key = randomBytes(12).toString("base64url"); // 16 chars
   const url = `http://${key}@127.0.0.1:${DEFAULT_PORT}`;
   const newLine = `${ENV_KEY}=${url}`;
   // Write to ~/.env.local so it's not shadowed by project .env.local
@@ -362,7 +362,7 @@ async function callServe(
     process.exit(1);
   });
   if (res.status === 401) {
-    console.error(`[rech] rech-client -> rech-server[ok]\n  -x: token rejected (used: ${key.slice(0, 6)}...) -> playwright[unknown]`);
+    console.error(`[rech] rech-client -> rech-server[ok]\n  -x: bearer key rejected (used: ${key.slice(0, 4)}...) -> playwright[unknown]`);
     process.exit(1);
   }
   return res.json();
@@ -486,6 +486,17 @@ async function runOxmgr(args: string[]): Promise<number> {
 }
 
 async function daemonInstall(serveUrl: string): Promise<void> {
+  // Persist the URL to ~/.env.local before starting the daemon. The daemon's
+  // loadEnv() walks CWD→root reading .env.local files and unconditionally
+  // overwrites process.env.RECHROME_URL from whichever file it finds first.
+  // Without this write, oxmgr's --env RECHROME_URL=... gets clobbered by a
+  // stale ~/.env.local entry — the daemon then listens on a different bearer
+  // key than the one daemonInstall was called with, and every client request
+  // is rejected with "bearer key rejected".
+  const envRaw = await file(globalEnvFile).text().catch(() => "");
+  const filtered = envRaw.trimEnd().split("\n").filter(l => !l.startsWith(`${ENV_KEY}=`));
+  await Bun.write(globalEnvFile, [...filtered, `${ENV_KEY}=${serveUrl}`, ""].join("\n"));
+
   const home = process.env.HOME!;
   const bunBin = Bun.which("bun") ?? process.execPath;
   const rechScript = import.meta.filename;
@@ -682,7 +693,7 @@ async function setup(opts: { profile?: string } = {}): Promise<void> {
 
   // Build RECHROME_URL and show it before asking where to save
   const rechUrl = new URL(url);
-  if (!rechUrl.username) rechUrl.username = randomBytes(9).toString("base64url");
+  if (!rechUrl.username) rechUrl.username = randomBytes(12).toString("base64url");
   rechUrl.searchParams.set("extension_id", extId);
   rechUrl.searchParams.set("token", token);
   rechUrl.searchParams.set("profile", profileEmail);

package/rech.ts

@@ -120,7 +120,7 @@ export function parseUrl(raw: string) {
 export async function getOrCreateUrl(): Promise<string> {
   // Treat a URL without a bearer key as missing — it cannot authenticate
   try { if (process.env[ENV_KEY] && new URL(process.env[ENV_KEY]!).username) return process.env[ENV_KEY]!; } catch {}
-  const key = randomBytes(9).toString("base64url"); // 12 chars
+  const key = randomBytes(12).toString("base64url"); // 16 chars
   const url = `http://${key}@127.0.0.1:${DEFAULT_PORT}`;
   const newLine = `${ENV_KEY}=${url}`;
   // Write to ~/.env.local so it's not shadowed by project .env.local
@@ -362,7 +362,7 @@ async function callServe(
     process.exit(1);
   });
   if (res.status === 401) {
-    console.error(`[rech] rech-client -> rech-server[ok]\n  -x: token rejected (used: ${key.slice(0, 6)}...) -> playwright[unknown]`);
+    console.error(`[rech] rech-client -> rech-server[ok]\n  -x: bearer key rejected (used: ${key.slice(0, 4)}...) -> playwright[unknown]`);
     process.exit(1);
   }
   return res.json();
@@ -486,6 +486,17 @@ async function runOxmgr(args: string[]): Promise<number> {
 }
 
 async function daemonInstall(serveUrl: string): Promise<void> {
+  // Persist the URL to ~/.env.local before starting the daemon. The daemon's
+  // loadEnv() walks CWD→root reading .env.local files and unconditionally
+  // overwrites process.env.RECHROME_URL from whichever file it finds first.
+  // Without this write, oxmgr's --env RECHROME_URL=... gets clobbered by a
+  // stale ~/.env.local entry — the daemon then listens on a different bearer
+  // key than the one daemonInstall was called with, and every client request
+  // is rejected with "bearer key rejected".
+  const envRaw = await file(globalEnvFile).text().catch(() => "");
+  const filtered = envRaw.trimEnd().split("\n").filter(l => !l.startsWith(`${ENV_KEY}=`));
+  await Bun.write(globalEnvFile, [...filtered, `${ENV_KEY}=${serveUrl}`, ""].join("\n"));
+
   const home = process.env.HOME!;
   const bunBin = Bun.which("bun") ?? process.execPath;
   const rechScript = import.meta.filename;
@@ -682,7 +693,7 @@ async function setup(opts: { profile?: string } = {}): Promise<void> {
 
   // Build RECHROME_URL and show it before asking where to save
   const rechUrl = new URL(url);
-  if (!rechUrl.username) rechUrl.username = randomBytes(9).toString("base64url");
+  if (!rechUrl.username) rechUrl.username = randomBytes(12).toString("base64url");
   rechUrl.searchParams.set("extension_id", extId);
   rechUrl.searchParams.set("token", token);
   rechUrl.searchParams.set("profile", profileEmail);