@dmsdc-ai/aigentry-telepty 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -2,6 +2,30 @@
 
 All notable changes to `@dmsdc-ai/aigentry-telepty` are documented here.
 
+## [0.4.1] - 2026-05-17
+
+### Fixed
+
+- **#25** — Windows PATHEXT resolution for `telepty allow`. npm-global CLIs
+  (`claude`, `codex`, `gemini`) now spawn correctly with bare names on
+  Windows. Previously `telepty allow … claude` failed with
+  `Cannot create process, error code: 2` (ERROR_FILE_NOT_FOUND) because
+  node-pty's `CreateProcessW` does not walk `%PATHEXT%` the way `cmd.exe`
+  does, so the npm-global `claude.cmd` shim was unreachable from the bare
+  name. New: `src/win-resolve-executable.js` resolver (Windows-only branch
+  walks `PATH` × `PATHEXT`; POSIX no-op) + 14 unit tests. macOS/Linux
+  behavior unchanged.
+
+### Notes
+
+- **Snyk SAST scan on changed files** — `src/win-resolve-executable.js`
+  + `test/win-resolve-executable.test.js` = **0 findings** (At-Inception
+  clean). `cli.js` shows **5 pre-existing findings** (2 Medium Command
+  Injection at `execSync` L469 + `pty.spawn` L1075, 3 Low Path Traversal
+  at L2287/L2289/L2598) verified identical fingerprint vs HEAD~1 — out
+  of #25 surgical scope. Tracked in **dmsdc-ai/aigentry-telepty#26** for
+  follow-up PR.
+
 ## [0.4.0] — 2026-05-15
 
 ### Added — Phase 1 sidecar supervisor spike (M1–M5)

package/cli.js

@@ -17,6 +17,7 @@ const { getRuntimeInfo } = require('./runtime-info');
 const { formatHostLabel, groupSessionsByHost, pickSessionTarget } = require('./session-routing');
 const { buildSharedContextPrompt, createSharedContextDescriptor, ensureSharedContextFile } = require('./shared-context');
 const { runInteractiveSkillInstaller } = require('./skill-installer');
+const { resolveWindowsExecutable } = require('./src/win-resolve-executable');
 const crossMachine = require('./cross-machine');
 const { parseHostSpec, buildDaemonUrl, buildDaemonWsUrl } = require('./host-spec');
 const { FileMailbox } = require('./src/mailbox/index');
@@ -1068,7 +1069,10 @@ async function main() {
     }
 
     function spawnChild() {
-      child = pty.spawn(command, cmdArgs, {
+      // Windows: walk %PATHEXT% so bare names (`claude`, `codex`, `gemini`)
+      // resolve to their npm-global `.cmd`/`.ps1` shims. POSIX: no-op. (#25)
+      const resolvedCommand = resolveWindowsExecutable(command, process.env);
+      child = pty.spawn(resolvedCommand, cmdArgs, {
         name: 'xterm-256color',
         cols: process.stdout.columns || 80,
         rows: process.stdout.rows || 30,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dmsdc-ai/aigentry-telepty",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "main": "daemon.js",
   "bin": {
     "aigentry-telepty": "install.js",
@@ -33,9 +33,9 @@
     "CHANGELOG.md"
   ],
   "scripts": {
-    "test": "node --test test/auth.test.js test/daemon.test.js test/daemon-singleton.test.js test/cli.test.js test/skill-installer.test.js test/interactive-terminal.test.js test/runtime-info.test.js test/session-routing.test.js test/session-state.test.js test/mailbox-lock.test.js test/report-enforcement.test.js test/enforce-report.test.js test/submit-gate.test.js test/prompt-symbol-registry.test.js test/inject-submit-flags.test.js test/host-spec.test.js test/cross-host-inject.test.js test/init.test.js && git diff --exit-code tests/snippet-protocol/v1/",
-    "test:watch": "node --test --watch test/auth.test.js test/daemon.test.js test/daemon-singleton.test.js test/cli.test.js test/skill-installer.test.js test/interactive-terminal.test.js test/runtime-info.test.js test/session-routing.test.js test/session-state.test.js test/mailbox-lock.test.js test/report-enforcement.test.js test/enforce-report.test.js test/submit-gate.test.js test/prompt-symbol-registry.test.js test/inject-submit-flags.test.js test/host-spec.test.js test/cross-host-inject.test.js test/init.test.js",
-    "test:ci": "node --test --test-reporter=spec test/auth.test.js test/daemon.test.js test/daemon-singleton.test.js test/cli.test.js test/skill-installer.test.js test/interactive-terminal.test.js test/runtime-info.test.js test/session-routing.test.js test/session-state.test.js test/mailbox-lock.test.js test/report-enforcement.test.js test/enforce-report.test.js test/submit-gate.test.js test/prompt-symbol-registry.test.js test/inject-submit-flags.test.js test/host-spec.test.js test/cross-host-inject.test.js test/init.test.js && git diff --exit-code tests/snippet-protocol/v1/",
+    "test": "node --test test/auth.test.js test/daemon.test.js test/daemon-singleton.test.js test/cli.test.js test/skill-installer.test.js test/interactive-terminal.test.js test/runtime-info.test.js test/session-routing.test.js test/session-state.test.js test/mailbox-lock.test.js test/report-enforcement.test.js test/enforce-report.test.js test/submit-gate.test.js test/prompt-symbol-registry.test.js test/inject-submit-flags.test.js test/host-spec.test.js test/cross-host-inject.test.js test/init.test.js test/win-resolve-executable.test.js && git diff --exit-code tests/snippet-protocol/v1/",
+    "test:watch": "node --test --watch test/auth.test.js test/daemon.test.js test/daemon-singleton.test.js test/cli.test.js test/skill-installer.test.js test/interactive-terminal.test.js test/runtime-info.test.js test/session-routing.test.js test/session-state.test.js test/mailbox-lock.test.js test/report-enforcement.test.js test/enforce-report.test.js test/submit-gate.test.js test/prompt-symbol-registry.test.js test/inject-submit-flags.test.js test/host-spec.test.js test/cross-host-inject.test.js test/init.test.js test/win-resolve-executable.test.js",
+    "test:ci": "node --test --test-reporter=spec test/auth.test.js test/daemon.test.js test/daemon-singleton.test.js test/cli.test.js test/skill-installer.test.js test/interactive-terminal.test.js test/runtime-info.test.js test/session-routing.test.js test/session-state.test.js test/mailbox-lock.test.js test/report-enforcement.test.js test/enforce-report.test.js test/submit-gate.test.js test/prompt-symbol-registry.test.js test/inject-submit-flags.test.js test/host-spec.test.js test/cross-host-inject.test.js test/init.test.js test/win-resolve-executable.test.js && git diff --exit-code tests/snippet-protocol/v1/",
     "regen-fixtures": "node scripts/regen-snippet-fixtures.js"
   },
   "keywords": [

package/src/win-resolve-executable.js

@@ -0,0 +1,87 @@
+// src/win-resolve-executable.js — Windows PATHEXT-aware executable resolver
+//
+// Fixes #25: `telepty allow ... <bare-command>` on Windows fails with
+// `ERROR_FILE_NOT_FOUND` because node-pty's `CreateProcessW` does not walk
+// `%PATHEXT%` the way cmd.exe shell does. npm-global CLIs install as
+// `<cmd>.cmd` / `<cmd>.ps1`, so the bare name `claude` resolves to nothing.
+//
+// On POSIX this resolver is a no-op (execve handles PATH lookup natively).
+//
+// Exports:
+//   resolveWindowsExecutable(command, env = process.env, opts = {})
+//     → resolved absolute path on Windows when bare command is found via
+//       PATH × PATHEXT walk, the original `command` on POSIX, or throws.
+//
+// Constraints honored:
+//   - Constitution §1 lightweight: ≤80 lines, fs + path + process only.
+//   - Constitution §2 cross-platform: POSIX behavior unchanged.
+//   - Constitution §17 무의존: no new dependencies.
+
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const DEFAULT_PATHEXT = '.COM;.EXE;.BAT;.CMD;.VBS;.JS';
+
+function resolveWindowsExecutable(command, env, opts) {
+  if (typeof command !== 'string' || command.length === 0) {
+    throw new Error('telepty: resolveWindowsExecutable requires a non-empty command');
+  }
+  const e = env || process.env;
+  const o = opts || {};
+  const platform = o.platform || process.platform;
+  const existsSync = o.existsSync || fs.existsSync;
+
+  if (platform !== 'win32') return command;
+
+  // Always use win32 path semantics in the Windows branch so behavior is
+  // identical when the resolver runs on a Windows host AND when tests mock
+  // `platform: 'win32'` on a POSIX host.
+  const p = path.win32;
+
+  // Already extension-bearing absolute path → trust if it exists.
+  if (p.isAbsolute(command)) {
+    return existsSync(command) ? command : tryWithExt(command, e, existsSync, command);
+  }
+
+  // Contains a separator → resolve relative to cwd, then try with extensions.
+  if (command.includes('\\') || command.includes('/')) {
+    const abs = p.resolve(command);
+    return existsSync(abs) ? abs : tryWithExt(abs, e, existsSync, command);
+  }
+
+  // Bare name → walk PATH × PATHEXT.
+  const exts = parseExts(e.PATHEXT || DEFAULT_PATHEXT);
+  const dirs = (e.PATH || '').split(';').filter(Boolean);
+  for (const dir of dirs) {
+    for (const ext of exts) {
+      const candidate = p.join(dir, command + ext);
+      if (existsSync(candidate)) return candidate;
+    }
+  }
+  throw new Error(
+    `telepty: cannot find executable "${command}" on PATH (Windows PATHEXT walk failed)`
+  );
+}
+
+function tryWithExt(absPath, env, existsSync, originalCommand) {
+  const exts = parseExts(env.PATHEXT || DEFAULT_PATHEXT);
+  for (const ext of exts) {
+    if (ext === '') continue;
+    const candidate = absPath + ext;
+    if (existsSync(candidate)) return candidate;
+  }
+  throw new Error(
+    `telepty: cannot find executable "${originalCommand}" (Windows PATHEXT walk failed)`
+  );
+}
+
+function parseExts(pathext) {
+  // Always include empty string first so an already-extension-bearing command
+  // matches before the PATHEXT-suffixed candidates.
+  const list = pathext.split(';').map((s) => s.trim()).filter(Boolean);
+  return ['', ...list];
+}
+
+module.exports = { resolveWindowsExecutable };