@claw-link/gateway-host 0.4.3 → 0.4.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claw-link/gateway-host",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "description": "ClawLink Host Gateway — a secure, outbound-only worker that bridges a local agent CLI (OpenClaw, Hermes, Claude, Codex, Cursor) to your ClawLink agents. No inbound ports; authenticated per-agent by a Host Token.",
   "homepage": "https://claw-link.co",
   "bin": {

package/src/adapters/base.js

@@ -121,7 +121,16 @@ async function* spawnStreaming({ binary, argv, cwd, env, timeoutMs = 600000, std
   const isWin = process.platform === 'win32';
   const useShell = isWin && !/\.(exe|com)$/i.test(String(binary));
 
-  const child = spawn(binary, argv, {
+  // Windows shell:true builds `cmd /s /c "<binary> <args>"` and does NOT quote the binary, so a
+  // path WITH SPACES (e.g. C:\Program Files\…\codex.cmd) is split at the first space → cmd tries to
+  // run "C:\Program" ("'C:\Program' is not recognized…"). Quote the binary so it survives cmd's /s
+  // quote-stripping. Safe: the binary is the operator-configured PATH (trusted — not untrusted
+  // prompt text), and Node still applies its hardened escaping to the (untrusted) args.
+  const cmd = (useShell && /\s/.test(String(binary)) && !/^".*"$/.test(String(binary).trim()))
+    ? `"${binary}"`
+    : binary;
+
+  const child = spawn(cmd, argv, {
     cwd: cwd || undefined,
     // Enriched PATH so a CLI in ~/.local/bin etc. resolves under a service's minimal env.
     env: enrichedEnv(env),