@claw-link/gateway-host 0.4.3 → 0.4.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@claw-link/gateway-host",
-  "version": "0.4.3",
+  "version": "0.4.5",
   "description": "ClawLink Host Gateway — a secure, outbound-only worker that bridges a local agent CLI (OpenClaw, Hermes, Claude, Codex, Cursor) to your ClawLink agents. No inbound ports; authenticated per-agent by a Host Token.",
   "homepage": "https://claw-link.co",
   "bin": {

package/scripts/install.js

@@ -30,21 +30,35 @@ function execSafe(cmd) { try { return execSync(cmd, { stdio: ['ignore', 'pipe',
 // probe PATH, and if it's missing, do a quiet global install of the same version.
 function clhostOnPath() {
   const probe = process.platform === 'win32' ? 'where clhost' : 'command -v clhost';
-  return execSafe(probe) != null;
-}
+  const out = execSafe(probe);
+  if (!out) return false;
+  // `npx` puts a TEMPORARY clhost on PATH for THIS process only (under its cache, e.g. …/_npx/…) —
+  // it vanishes when npx exits, so it must NOT count as a persistent install. The old check reported
+  // "clhost is ready" during an `npx … install`, but the command was gone in the user's next shell.
+  const first = out.split(/\r?\n/).map((s) => s.trim()).filter(Boolean)[0] || '';
+  return !/[\\/]_npx[\\/]/i.test(first);
+}
+// 'ready'     — clhost is persistently on PATH (a prior global install).
+// 'installed' — we just ran the global install; it needs a NEW terminal because THIS process runs
+//               under npx, whose PATH shadows the freshly-installed global bin.
+// 'failed'    — the global install couldn't run (no permission / offline).
 function ensureGlobalCli() {
-  if (clhostOnPath()) return true;
+  if (clhostOnPath()) return 'ready';
   try { execSync(`npm install -g @claw-link/gateway-host@${VERSION}`, { stdio: 'ignore', timeout: 120000 }); }
-  catch { /* no permission / offline — reportCli() prints the manual fallback */ }
-  return clhostOnPath();
+  catch { return 'failed'; }
+  return clhostOnPath() ? 'ready' : 'installed';
 }
 function reportCli() {
-  if (ensureGlobalCli()) {
+  const r = ensureGlobalCli();
+  if (r === 'ready') {
     console.log('  ✓ The `clhost` command is ready — try:  clhost status');
+  } else if (r === 'installed') {
+    console.log('  ✓ Installed the `clhost` command globally — OPEN A NEW terminal, then:  clhost status');
+    console.log('    (this window runs under npx, so `clhost` only appears after you reopen the terminal)');
   } else {
-    console.log('  ℹ To get the short `clhost` command, install it once (you may need sudo):');
+    console.log('  ℹ To get the short `clhost` command, install it once (macOS/Linux may need sudo):');
     console.log('       npm i -g @claw-link/gateway-host');
-    console.log('     Until then, run commands as:  npx @claw-link/gateway-host <command>');
+    console.log('     Until then, run every command as:  npx @claw-link/gateway-host <command>');
   }
 }
 

package/src/adapters/base.js

@@ -121,7 +121,16 @@ async function* spawnStreaming({ binary, argv, cwd, env, timeoutMs = 600000, std
   const isWin = process.platform === 'win32';
   const useShell = isWin && !/\.(exe|com)$/i.test(String(binary));
 
-  const child = spawn(binary, argv, {
+  // Windows shell:true builds `cmd /s /c "<binary> <args>"` and does NOT quote the binary, so a
+  // path WITH SPACES (e.g. C:\Program Files\…\codex.cmd) is split at the first space → cmd tries to
+  // run "C:\Program" ("'C:\Program' is not recognized…"). Quote the binary so it survives cmd's /s
+  // quote-stripping. Safe: the binary is the operator-configured PATH (trusted — not untrusted
+  // prompt text), and Node still applies its hardened escaping to the (untrusted) args.
+  const cmd = (useShell && /\s/.test(String(binary)) && !/^".*"$/.test(String(binary).trim()))
+    ? `"${binary}"`
+    : binary;
+
+  const child = spawn(cmd, argv, {
     cwd: cwd || undefined,
     // Enriched PATH so a CLI in ~/.local/bin etc. resolves under a service's minimal env.
     env: enrichedEnv(env),