Intercept the WSL OpenBao browser launch.

OpenBao opens the login with cmd.exe /c start, so the xdg-open launcher
never ran. The attended PATH now supplies cmd.exe for that one allowlisted
URL and opens it in the empty Playwright Chromium profile.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd

scripts/operator-browser/xdg-open

@@ -78,6 +78,20 @@ def launch_argv(browser, profile_dir, url):
     ]
 
 
+def classify_cmd(argv):
+    """Classify OpenBao's WSL launch, `cmd.exe /c start <url>`.
+
+    hashicorp/cap replaces each & with ^& before calling the Windows
+    default browser. Other cmd.exe uses are left for the real binary.
+    """
+    if list(argv[:2]) != ["/c", "start"] or len(argv) != 3:
+        return "delegate", ""
+    url = str(argv[2]).replace("^&", "&")
+    if allowed(url):
+        return "open", url
+    return "reject", ""
+
+
 def stamp(result):
     path = Path("/home/worsch/.local/state/railiance/receipts/operator-browser-last.txt")
     try:
@@ -88,11 +102,7 @@ def stamp(result):
         return
 
 
-def main():
-    stamp("called")
-    if len(sys.argv) != 2 or not allowed(sys.argv[1]):
-        stamp("rejected")
-        return 1
+def open_url(url):
     if not os.environ.get("DISPLAY") and not os.environ.get("WAYLAND_DISPLAY"):
         stamp("no-display")
         return 1
@@ -102,7 +112,7 @@ def main():
         return 1
     profile = Path(tempfile.mkdtemp(prefix="operator-browser-"))
     os.chmod(profile, 0o700)
-    command = launch_argv(browser, str(profile), sys.argv[1])
+    command = launch_argv(browser, str(profile), url)
     try:
         subprocess.Popen(
             command,
@@ -118,5 +128,13 @@ def main():
     return 0
 
 
+def main():
+    stamp("called")
+    if len(sys.argv) != 2 or not allowed(sys.argv[1]):
+        stamp("rejected")
+        return 1
+    return open_url(sys.argv[1])
+
+
 if __name__ == "__main__":
     raise SystemExit(main())