summrise-agent 1.2.458 → 1.2.460

package/bin/summrise.js

@@ -2027,7 +2027,11 @@ const commands = {
         // The register script is WRITTEN here (a machine that never ran setup still gets a working
         // task, from the same builder setup uses) but NOT run: desktop-start.ps1 runs it only when
         // the task is genuinely missing.
-        const r = (0, child_process_1.spawnSync)("powershell", ["-NoProfile", "-ExecutionPolicy", "Bypass", "-File", start], { encoding: "utf8", shell: true });
+        // ONE STRING, NOT an args array. With `shell: true` Node concatenates the arguments and warns
+        // about it (DEP0190: "the arguments are not escaped, only concatenated") — a warning the
+        // operator saw on the device the first time this command worked. The path is double-quoted,
+        // which is what -File accepts at the cmd layer; nothing here needs an argument list.
+        const r = (0, child_process_1.spawnSync)(`powershell -NoProfile -ExecutionPolicy Bypass -File "${start}"`, { encoding: "utf8", shell: true });
         const out = String(r.stdout || "").trim();
         if (out.endsWith("already-running")) {
             console.log("desktop: the Summrise shell is ALREADY RUNNING (look for the window, or the tray icon)");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "summrise-agent",
-  "version": "1.2.458",
+  "version": "1.2.460",
   "description": "Summrise Agent — Windows device MCP server (terminal/SSH/serial) + panel. Self-hosted npm distribution.",
   "//build": "唯一构建路径：在本目录执行 npm run build。它是自包含的：经 npm exec 按需拉取 typescript@5，无需预装任何 node_modules（干净检出可跑；旧脚本引用 ../summrise-desktop-electron/node_modules/.bin/tsc，干净检出必 ENOENT）。必须用 npm exec --package … -- tsc 的形式：npx 会吃掉传给 tsc 的 -p/--outDir 等参数（round-435：npx 写法从未真正跑通过）。先编 electron TS（--noCheck 纯 emit，与 release.yml 一致）同步两处 src/*.js，再编 src/summrise.ts 到 bin/summrise.js 并校验 round-298 标记（弱 oracle，只证某次构建发生，新鲜性由 publish-release.sh 的 tsc 重编 + cmp 门保证）。",
   "bin": {