@lifeaitools/clauth 2.0.1 → 2.0.2

package/cli/supervisor-registry.js

@@ -167,7 +167,14 @@ function normalizeCommand(command, field) {
   const [cmd, ...args] = command;
   if (typeof cmd !== "string" || !cmd.trim()) throw new Error(`${field}[0] is required`);
   if (/[;&|<>]/.test(cmd)) throw new Error(`${field}[0] must be an executable path/name, not shell syntax`);
-  const normalizedArgs = args.map(String);
+  // Expand the same path tokens `cwd` already gets. Until now expandPathToken()
+  // was applied ONLY to cwd, so a manifest naming a root inside a command
+  // argument shipped the literal string to the shell — dev-center's
+  // "$LIFEAI_ENV/services/restart-dev-center.ps1" reached pwsh unexpanded and
+  // exited 64. Expanding here, AFTER the shell-syntax checks on cmd and BEFORE
+  // the per-arg checks below, keeps the injection guard authoritative over the
+  // final value rather than the pre-expansion one.
+  const normalizedArgs = args.map((a) => expandPathToken(String(a)) ?? String(a));
   // shell:true (Windows-only, see execute() in runSurfaceAction) hands each
   // arg to cmd.exe verbatim — a shell metacharacter in an arg is exactly as
   // exploitable as one in cmd[0]. A legitimate CLI arg for the pm2/node
@@ -192,13 +199,24 @@ export function shellQuote(value, useShell) {
 function expandPathToken(value) {
   if (!value) return null;
   const root = process.env.REGEN_ROOT || process.env.LIFEAI_REPO_ROOT || "C:/Dev/regen-root";
+  // LIFEAI_ENV is the environment-harness checkout. A manifest that drives a
+  // service through a harness script (dev-center calls
+  // $LIFEAI_ENV/services/restart-dev-center.ps1) had no way to name it, so the
+  // literal token reached the shell and pwsh answered
+  // "not recognized as the name of a script file" with exit 64 — a restart that
+  // fails while the service stays up, which reads as a flaky action rather than
+  // an unresolved path.
+  const envRoot = process.env.LIFEAI_ENV || "C:/Dev/lifeai-env";
   return String(value)
     .replace(/\$\{REGEN_ROOT\}/g, root)
     .replace(/\$REGEN_ROOT/g, root)
     .replace(/%REGEN_ROOT%/gi, root)
     .replace(/\$\{LIFEAI_REPO_ROOT\}/g, root)
     .replace(/\$LIFEAI_REPO_ROOT/g, root)
-    .replace(/%LIFEAI_REPO_ROOT%/gi, root);
+    .replace(/%LIFEAI_REPO_ROOT%/gi, root)
+    .replace(/\$\{LIFEAI_ENV\}/g, envRoot)
+    .replace(/\$LIFEAI_ENV/g, envRoot)
+    .replace(/%LIFEAI_ENV%/gi, envRoot);
 }
 
 function normalizeLifecycleOwner(owner) {