@auroraflow/code 0.0.12 → 0.0.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@auroraflow/code",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "type": "module",
   "description": "Aurora launcher and sidecar for official Codex and Claude Code clients.",
   "repository": {

package/packages/clients/src/index.js

@@ -211,10 +211,11 @@ function tomlString(value) {
 }
 
 async function spawnAndExit(command, args, env) {
-  const child = spawn(command, args, {
+  const spec = windowsCommandSpec(command, args);
+  const child = spawn(spec.command, spec.args, {
     stdio: "inherit",
     env,
-    shell: process.platform === "win32" && command.endsWith(".cmd")
+    shell: spec.shell
   });
   child.on("error", error => {
     console.error(`Failed to start ${command}: ${error.message}`);
@@ -225,11 +226,12 @@ async function spawnAndExit(command, args, env) {
 
 function spawnAndWait(command, args, env) {
   return new Promise((resolve, reject) => {
-    const child = spawn(command, args, {
+    const spec = windowsCommandSpec(command, args);
+    const child = spawn(spec.command, spec.args, {
       cwd: packageRoot,
       stdio: "inherit",
       env,
-      shell: process.platform === "win32"
+      shell: spec.shell
     });
     child.on("error", reject);
     child.on("exit", code => {
@@ -240,8 +242,34 @@ function spawnAndWait(command, args, env) {
 }
 
 function spawnSyncCompat(command, args) {
-  return spawnSync(command, args, {
+  const spec = windowsCommandSpec(command, args);
+  return spawnSync(spec.command, spec.args, {
     encoding: "utf8",
-    shell: process.platform === "win32" && command.endsWith(".cmd")
+    shell: spec.shell
   });
 }
+
+function windowsCommandSpec(command, args) {
+  if (process.platform !== "win32" || !command.toLowerCase().endsWith(".cmd")) {
+    return { command, args, shell: false };
+  }
+  // Windows npm global bins are .cmd shims, commonly under "C:\Program Files".
+  // Running that path through shell=true without quoting makes cmd.exe split at
+  // the space and try to execute "C:\Program". Invoke cmd.exe explicitly with
+  // one quoted command line so paths with spaces survive.
+  return {
+    command: process.env.ComSpec || "cmd.exe",
+    args: ["/d", "/s", "/c", windowsCmdLine([command, ...args])],
+    shell: false
+  };
+}
+
+function windowsCmdLine(parts) {
+  return parts.map(windowsCmdQuote).join(" ");
+}
+
+function windowsCmdQuote(value) {
+  const text = String(value);
+  if (/^[A-Za-z0-9_./:=+-]+$/.test(text)) return text;
+  return `"${text.replace(/"/g, '""')}"`;
+}