railiance-platform/scripts/operator-browser/cmd.exe
codex 8d4d285643
All checks were successful
CCR intake gate / gate (push) Successful in 15s
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 2s
Intercept the WSL OpenBao browser launch.
OpenBao opens the login with cmd.exe /c start, so the xdg-open launcher
never ran. The attended PATH now supplies cmd.exe for that one allowlisted
URL and opens it in the empty Playwright Chromium profile.

Assistant: grok
Assistant-Session: 01a198fa-fd27-7e41-a0a2-57355c3e4efd
2026-11-02 10:08:36 +01:00

31 lines
879 B
Python
Executable file

#!/usr/bin/env python3
"""Intercept OpenBao's WSL browser launch.
hashicorp/cap opens a WSL login with `cmd.exe /c start <url>`. That reaches
the Windows default browser. This command sits ahead of the real cmd.exe on
the attended-login PATH and opens the allowlisted URL in Playwright Chromium.
"""
import os
import runpy
import sys
from pathlib import Path
REAL_CMD = "/mnt/c/Windows/System32/cmd.exe"
launcher = runpy.run_path(str(Path(__file__).resolve().with_name("xdg-open")))
def main():
kind, url = launcher["classify_cmd"](sys.argv[1:])
if kind == "open":
launcher["stamp"]("called")
return launcher["open_url"](url)
if kind == "reject":
launcher["stamp"]("called")
launcher["stamp"]("rejected")
return 1
os.execv(REAL_CMD, [REAL_CMD, *sys.argv[1:]])
if __name__ == "__main__":
raise SystemExit(main())