@oh-my-pi/pi-ai 18.4.12 → 18.5.0

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 ## [Unreleased]
 
+## [18.5.0] - 2026-10-03
+
+### Fixed
+
+- Fixed AWS `credential_process` on Windows stripping backslashes from unquoted paths such as `C:\Users\me\helper.exe`; commands are now split with Windows command-line rules there, matching the AWS CLI.
+
 ## [18.4.12] - 2026-10-02
 
 ### Added

package/dist/types/providers/aws-credentials.d.ts

@@ -29,14 +29,10 @@ export interface CredentialResolveOptions {
     fetch?: FetchImpl;
 }
 export declare function resolveAwsCredentials(opts?: CredentialResolveOptions): Promise<ResolvedCredentials>;
-/** POSIX-shell-style tokenizer used by the AWS CLI for `credential_process`.
- *
- * Outside quotes a backslash escapes the next character. Inside single quotes
- * everything is literal (no escapes, cannot contain `'`). Inside double quotes
- * a backslash only escapes `$`, `` ` ``, `"`, and `\` — every other backslash
- * is preserved verbatim, which is what makes Windows paths like
- * `"C:\Program Files\tool\auth.exe"` survive tokenization. */
-export declare function tokenizeCredentialProcessCommand(cmd: string): string[];
+/** Split a `credential_process` command into argv the way botocore's
+ * `compat_shell_split` does: Windows command-line (CRT) rules on `win32`,
+ * POSIX shell rules everywhere else. */
+export declare function tokenizeCredentialProcessCommand(cmd: string, platform?: NodeJS.Platform): string[];
 /** Test/diagnostic helper — drops cached credentials. */
 export declare function clearAwsCredentialCache(): void;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@oh-my-pi/pi-ai",
-	"version": "18.4.12",
+	"version": "18.5.0",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"keywords": [
 		"ai",
@@ -155,11 +155,11 @@
 		"fmt": "oxfmt --no-error-on-unmatched-pattern 'src/**/*.{ts,tsx}' '{test,bench,examples,scripts}/**/*.ts' '*.ts'"
 	},
 	"dependencies": {
-		"@oh-my-pi/omptype": "18.4.12",
-		"@oh-my-pi/pi-catalog": "18.4.12",
-		"@oh-my-pi/pi-natives": "18.4.12",
-		"@oh-my-pi/pi-utils": "18.4.12",
-		"@oh-my-pi/pi-wire": "18.4.12"
+		"@oh-my-pi/omptype": "18.5.0",
+		"@oh-my-pi/pi-catalog": "18.5.0",
+		"@oh-my-pi/pi-natives": "18.5.0",
+		"@oh-my-pi/pi-utils": "18.5.0",
+		"@oh-my-pi/pi-wire": "18.5.0"
 	},
 	"devDependencies": {
 		"@types/bun": "^1.3.14"

package/src/providers/aws-credentials.ts

@@ -737,14 +737,74 @@ function isBatchScript(executable: string): boolean {
 	return lower.endsWith(".cmd") || lower.endsWith(".bat");
 }
 
+/** Split a `credential_process` command into argv the way botocore's
+ * `compat_shell_split` does: Windows command-line (CRT) rules on `win32`,
+ * POSIX shell rules everywhere else. */
+export function tokenizeCredentialProcessCommand(cmd: string, platform: NodeJS.Platform = process.platform): string[] {
+	return platform === "win32" ? tokenizeWindowsCommand(cmd) : tokenizePosixCommand(cmd);
+}
+
+/** Windows C-runtime argv rules (botocore `_windows_shell_split`): only space
+ * and tab delimit, only double quotes group, and backslashes are literal unless
+ * a run of them precedes a `"` — then each pair yields one backslash and an odd
+ * trailing backslash escapes the quote. Keeps `C:\path\tool.exe` intact. */
+function tokenizeWindowsCommand(cmd: string): string[] {
+	const tokens: string[] = [];
+	let current = "";
+	let hasToken = false;
+	let quoted = false;
+	let backslashes = 0;
+	for (const ch of cmd) {
+		if (ch === "\\") {
+			backslashes++;
+			continue;
+		}
+		if (ch === '"') {
+			current += "\\".repeat(backslashes >> 1);
+			hasToken = true;
+			const escaped = (backslashes & 1) === 1;
+			backslashes = 0;
+			if (escaped) current += '"';
+			else quoted = !quoted;
+			continue;
+		}
+		if (backslashes > 0) {
+			current += "\\".repeat(backslashes);
+			hasToken = true;
+			backslashes = 0;
+		}
+		if ((ch === " " || ch === "\t") && !quoted) {
+			if (hasToken) {
+				tokens.push(current);
+				current = "";
+				hasToken = false;
+			}
+			continue;
+		}
+		current += ch;
+		hasToken = true;
+	}
+	if (quoted) {
+		throw new AIError.AwsCredentialsError(
+			"AWS credential_process command has an unterminated quote.",
+			"credential-process",
+		);
+	}
+	if (backslashes > 0) {
+		current += "\\".repeat(backslashes);
+		hasToken = true;
+	}
+	if (hasToken) tokens.push(current);
+	return tokens;
+}
+
 /** POSIX-shell-style tokenizer used by the AWS CLI for `credential_process`.
  *
  * Outside quotes a backslash escapes the next character. Inside single quotes
  * everything is literal (no escapes, cannot contain `'`). Inside double quotes
  * a backslash only escapes `$`, `` ` ``, `"`, and `\` — every other backslash
- * is preserved verbatim, which is what makes Windows paths like
- * `"C:\Program Files\tool\auth.exe"` survive tokenization. */
-export function tokenizeCredentialProcessCommand(cmd: string): string[] {
+ * is preserved verbatim. */
+function tokenizePosixCommand(cmd: string): string[] {
 	const tokens: string[] = [];
 	let current = "";
 	let hasToken = false;