@procedures/shell 0.54.1 → 0.55.1

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @procedures/shell
 
+## 0.55.1
+
+### Patch Changes
+
+- @procedures/client@0.55.1
+
+## 0.55.0
+
+### Patch Changes
+
+- 2918e97: Two security fixes:
+  
+  - `@procedures/shell`: on Windows, a program name with no folder starts only from a folder of `PATH`, never from the working folder of the call. Before, a call such as "run `git` in this cloned repository" started a `git.exe` from the top folder of the repository. When no folder of `PATH` has the program, the start fails with `ENOENT`, as for a missing program, and the error names the program as before. `taskkill` starts by its full path in the system folder, and `shell.which` gives a match from `PATH` only.
+  - `@procedures/fs`: under a root, a link to a missing target is resolved against the real folder of the link. Before, the check resolved a relative target against the text of the path. When an earlier part of the path was a link to a folder, the check said "inside the root" for a write that went outside it. A `..` in a relative target follows the rule of the system: POSIX goes up from the real folder of the name before it, and Windows removes that name as text. The archive procedures and the other users of `@procedures/fs/root` get the same fix.
+- Updated dependencies [fd9c6d4]
+  - @procedures/client@0.55.0
+
 ## 0.54.1
 
 ### Patch Changes

package/dist/command/program.d.ts

@@ -0,0 +1,72 @@
+/**
+ * The file of a program: the one place that answers which file a command starts.
+ *
+ * On Windows, Node (libuv) looks for a program name with no folder first in the working folder of
+ * the child, and only then in the folders of `PATH`. So "run `git` in this cloned repository"
+ * started a `git.exe` from the top folder of the repository. The helpers give `spawn` the
+ * absolute path from `startFile()`, which searches only the folders of `PATH`. The functions take
+ * the operating system, the environment and the file test as inputs, so each system tests them.
+ */
+/** The options of `programPath`. Each one has a default from the host, so the tests can set it. */
+export interface ProgramPathOptions {
+    /** The operating system (default: `process.platform`). */
+    platform?: NodeJS.Platform | undefined;
+    /** The environment of the host, for a child environment with no `PATH` (default: `process.env`). */
+    hostEnv?: Readonly<Record<string, string | undefined>> | undefined;
+    /** The function that tells if a path is a file (default: `fs.statSync`). */
+    isFile?: ((path: string) => boolean) | undefined;
+}
+/**
+ * The value of `PATH` in an environment that Node gives to a child on Windows. The names of the
+ * variables have no fixed case there. Node keeps the first name in sorted order (`PATH` before
+ * `Path`), and leaves out a variable with no value.
+ */
+export declare function windowsPathValue(env: Readonly<Record<string, string | undefined>>): string | undefined;
+/**
+ * The folders of a `PATH` value on Windows, in order, as libuv reads them: a `;` separates two
+ * folders, and quotes around a folder are not part of it. The list leaves out an empty folder and
+ * a folder that is not fully qualified, because both lead to the working folder.
+ */
+export declare function windowsPathFolders(value: string): string[];
+/**
+ * This function gives the file that `command` starts, for `spawn`:
+ * - On POSIX, and for a command with a folder part, it gives `command`. The system finds it as before.
+ * - On Windows, for a name with no folder, it gives the absolute path of the first match in the
+ *   folders of the `PATH` of `env`, the environment of the child. It never looks in the working
+ *   folder. It tries the names that libuv tries: the exact name when it has an extension, then
+ *   the name with `.com`, then the name with `.exe`.
+ * - It gives `undefined` when no folder of `PATH` has the program.
+ *
+ * When `env` has no `PATH`, libuv uses the `PATH` of the host. This function does the same.
+ */
+export declare function programPath(command: string, env: Readonly<Record<string, string | undefined>>, options?: ProgramPathOptions): string | undefined;
+/**
+ * This function gives the file that `startChild` gives to `spawn`. It is the result of
+ * `programPath()` when there is one. When no folder of `PATH` has the program, it gives a fully
+ * qualified path that does not exist, in the system folder. So the start fails with ENOENT, as for
+ * a missing program, and the system does not look in the working folder.
+ */
+export declare function startFile(command: string, env: Readonly<Record<string, string | undefined>>, options?: ProgramPathOptions): string;
+/**
+ * When `file` is not `command`, this function changes each start error of `child` to name
+ * `command`, as Node names it for a start by name: the `message` (`spawn git ENOENT`), the
+ * `stack`, the `syscall` and the `path`. So the error of a call is the same as before the lookup.
+ * A child with no other listener of `error` still throws the error, as Node does.
+ */
+export declare function nameStartErrors(child: NodeJS.EventEmitter, command: string, file: string): void;
+/**
+ * The program and the arguments of `shell.which` for a command. On Windows, `where name` gives a
+ * match in the working folder first. `where $PATH:name` looks only in the folders of `PATH`, as a
+ * start of a program by its name does. A command with a folder part goes to `where` as it is.
+ */
+export declare function whichCall(command: string, platform?: NodeJS.Platform): {
+    program: string;
+    args: string[];
+};
+/**
+ * The path of a program of the system folder of Windows, for example `taskkill.exe`. The folder
+ * comes from `SystemRoot`, then `windir`, then `C:\Windows`. A value that is not fully qualified
+ * is not used.
+ */
+export declare function systemProgram(name: string, env?: Readonly<Record<string, string | undefined>>): string;
+//# sourceMappingURL=program.d.ts.map

package/dist/command/program.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/command/program.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAKH,mGAAmG;AACnG,MAAM,WAAW,kBAAkB;IACjC,0DAA0D;IAC1D,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,GAAG,SAAS,CAAC;IACvC,oGAAoG;IACpG,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,SAAS,CAAC;IACnE,4EAA4E;IAC5E,MAAM,CAAC,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,SAAS,CAAC;CAClD;AAeD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,GAAG,MAAM,GAAG,SAAS,CAGtG;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAiB1D;AAOD;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACjD,OAAO,GAAE,kBAAuB,GAC/B,MAAM,GAAG,SAAS,CAgBpB;AAQD;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC,EACjD,OAAO,GAAE,kBAAuB,GAC/B,MAAM,CAGR;AAUD;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAa/F;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAG5H;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,GAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAe,GAAG,MAAM,CAGnH"}

package/dist/command/program.js

@@ -0,0 +1,152 @@
+/**
+ * The file of a program: the one place that answers which file a command starts.
+ *
+ * On Windows, Node (libuv) looks for a program name with no folder first in the working folder of
+ * the child, and only then in the folders of `PATH`. So "run `git` in this cloned repository"
+ * started a `git.exe` from the top folder of the repository. The helpers give `spawn` the
+ * absolute path from `startFile()`, which searches only the folders of `PATH`. The functions take
+ * the operating system, the environment and the file test as inputs, so each system tests them.
+ */
+import { statSync } from "node:fs";
+import { win32 } from "node:path";
+function isFile(path) {
+    try {
+        return statSync(path).isFile();
+    }
+    catch {
+        return false;
+    }
+}
+/** True for a path with a drive and a separator (`C:\x`), or a UNC path (`\\server\share`). */
+function fullyQualified(path) {
+    return /^(?:[a-zA-Z]:[\\/]|[\\/]{2}[^\\/])/.test(path);
+}
+/**
+ * The value of `PATH` in an environment that Node gives to a child on Windows. The names of the
+ * variables have no fixed case there. Node keeps the first name in sorted order (`PATH` before
+ * `Path`), and leaves out a variable with no value.
+ */
+export function windowsPathValue(env) {
+    const key = Object.keys(env).sort().find((name) => name.toUpperCase() === "PATH");
+    return key === undefined ? undefined : env[key];
+}
+/**
+ * The folders of a `PATH` value on Windows, in order, as libuv reads them: a `;` separates two
+ * folders, and quotes around a folder are not part of it. The list leaves out an empty folder and
+ * a folder that is not fully qualified, because both lead to the working folder.
+ */
+export function windowsPathFolders(value) {
+    const folders = [];
+    let start = 0;
+    while (start <= value.length) {
+        const quote = value[start];
+        let from = start;
+        if (quote === '"' || quote === "'") {
+            const end = value.indexOf(quote, start + 1);
+            from = end === -1 ? value.length : end;
+        }
+        const semicolon = value.indexOf(";", from);
+        const end = semicolon === -1 ? value.length : semicolon;
+        const folder = value.slice(start, end).replace(/^["']/, "").replace(/["']$/, "");
+        if (fullyQualified(folder))
+            folders.push(folder);
+        start = end + 1;
+    }
+    return folders;
+}
+/** True when a command has a folder part, for example `.\x`, `bin/x` or `C:x`. */
+function hasFolder(command) {
+    return /[\\/:]/.test(command);
+}
+/**
+ * This function gives the file that `command` starts, for `spawn`:
+ * - On POSIX, and for a command with a folder part, it gives `command`. The system finds it as before.
+ * - On Windows, for a name with no folder, it gives the absolute path of the first match in the
+ *   folders of the `PATH` of `env`, the environment of the child. It never looks in the working
+ *   folder. It tries the names that libuv tries: the exact name when it has an extension, then
+ *   the name with `.com`, then the name with `.exe`.
+ * - It gives `undefined` when no folder of `PATH` has the program.
+ *
+ * When `env` has no `PATH`, libuv uses the `PATH` of the host. This function does the same.
+ */
+export function programPath(command, env, options = {}) {
+    if ((options.platform ?? process.platform) !== "win32")
+        return command;
+    // An empty name stays as it is: spawn gives its own error for it
+    if (command === "" || hasFolder(command))
+        return command;
+    if (command === ".")
+        return undefined;
+    const dot = command.indexOf(".");
+    const names = [...(dot !== -1 && dot < command.length - 1 ? [command] : []), `${command}.com`, `${command}.exe`];
+    const value = windowsPathValue(env) ?? windowsPathValue(options.hostEnv ?? process.env) ?? "";
+    const test = options.isFile ?? isFile;
+    for (const folder of windowsPathFolders(value)) {
+        for (const name of names) {
+            const path = win32.join(folder, name);
+            if (test(path))
+                return path;
+        }
+    }
+    return undefined;
+}
+/**
+ * A folder name that no file system of Windows allows: NTFS refuses `<` and `>` in a name. A path
+ * through it does not exist, so a start of it fails with ENOENT and searches no other folder.
+ */
+const NO_FOLDER = "<not in PATH>";
+/**
+ * This function gives the file that `startChild` gives to `spawn`. It is the result of
+ * `programPath()` when there is one. When no folder of `PATH` has the program, it gives a fully
+ * qualified path that does not exist, in the system folder. So the start fails with ENOENT, as for
+ * a missing program, and the system does not look in the working folder.
+ */
+export function startFile(command, env, options = {}) {
+    // No join: a join would remove a name such as `..`, and the path would be a folder that exists
+    return programPath(command, env, options) ?? `${systemProgram(NO_FOLDER, options.hostEnv ?? process.env)}\\${command}`;
+}
+/**
+ * When `file` is not `command`, this function changes each start error of `child` to name
+ * `command`, as Node names it for a start by name: the `message` (`spawn git ENOENT`), the
+ * `stack`, the `syscall` and the `path`. So the error of a call is the same as before the lookup.
+ * A child with no other listener of `error` still throws the error, as Node does.
+ */
+export function nameStartErrors(child, command, file) {
+    if (file === command)
+        return;
+    const fileCall = `spawn ${file}`;
+    const commandCall = `spawn ${command}`;
+    child.prependListener("error", (error) => {
+        if (error.syscall === fileCall) {
+            error.syscall = commandCall;
+            if (error.path === file)
+                error.path = command;
+            if (error.message.startsWith(fileCall))
+                error.message = commandCall + error.message.slice(fileCall.length);
+            if (error.stack !== undefined)
+                error.stack = error.stack.replace(fileCall, commandCall);
+        }
+        if (child.listenerCount("error") === 1)
+            throw error;
+    });
+}
+/**
+ * The program and the arguments of `shell.which` for a command. On Windows, `where name` gives a
+ * match in the working folder first. `where $PATH:name` looks only in the folders of `PATH`, as a
+ * start of a program by its name does. A command with a folder part goes to `where` as it is.
+ */
+export function whichCall(command, platform = process.platform) {
+    if (platform !== "win32")
+        return { program: "which", args: [command] };
+    return { program: "where", args: [hasFolder(command) ? command : `$PATH:${command}`] };
+}
+/**
+ * The path of a program of the system folder of Windows, for example `taskkill.exe`. The folder
+ * comes from `SystemRoot`, then `windir`, then `C:\Windows`. A value that is not fully qualified
+ * is not used.
+ */
+export function systemProgram(name, env = process.env) {
+    const root = [env["SystemRoot"], env["windir"]].find((value) => value !== undefined && fullyQualified(value));
+    return win32.join(root ?? "C:\\Windows", "System32", name);
+}
+//# sourceMappingURL=program.js.map

package/dist/command/program.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"program.js","sourceRoot":"","sources":["../../src/command/program.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACnC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAYlC,SAAS,MAAM,CAAC,IAAY;IAC1B,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAiD;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,CAAC;IAClF,OAAO,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;YACnC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAC5C,IAAI,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC;QACzC,CAAC;QACD,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QACxD,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjF,IAAI,cAAc,CAAC,MAAM,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjD,KAAK,GAAG,GAAG,GAAG,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,OAAe,EACf,GAAiD,EACjD,OAAO,GAAuB,EAAE;IAEhC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC;IACvE,iEAAiE;IACjE,IAAI,OAAO,KAAK,EAAE,IAAI,SAAS,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACzD,IAAI,OAAO,KAAK,GAAG;QAAE,OAAO,SAAS,CAAC;IACtC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,OAAO,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,CAAC;IACjH,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,CAAC,IAAI,gBAAgB,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9F,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC;IACtC,KAAK,MAAM,MAAM,IAAI,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC9B,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,SAAS,GAAG,eAAe,CAAC;AAElC;;;;;GAKG;AACH,MAAM,UAAU,SAAS,CACvB,OAAe,EACf,GAAiD,EACjD,OAAO,GAAuB,EAAE;IAEhC,+FAA+F;IAC/F,OAAO,WAAW,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,OAAO,EAAE,CAAC;AACzH,CAAC;AAUD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAA0B,EAAE,OAAe,EAAE,IAAY;IACvF,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO;IAC7B,MAAM,QAAQ,GAAG,SAAS,IAAI,EAAE,CAAC;IACjC,MAAM,WAAW,GAAG,SAAS,OAAO,EAAE,CAAC;IACvC,KAAK,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,KAAiB,EAAE,EAAE;QACnD,IAAI,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,OAAO,GAAG,WAAW,CAAC;YAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI;gBAAE,KAAK,CAAC,IAAI,GAAG,OAAO,CAAC;YAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC;gBAAE,KAAK,CAAC,OAAO,GAAG,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC3G,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;gBAAE,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;QAC1F,CAAC;QACD,IAAI,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,OAAe,EAAE,QAAQ,GAAoB,OAAO,CAAC,QAAQ;IACrF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACvE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,EAAE,CAAC,EAAE,CAAC;AACzF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,GAAG,GAAiD,OAAO,CAAC,GAAG;IACzG,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAmB,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/H,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,aAAa,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;AAC7D,CAAC"}

package/dist/command/spawn.d.ts

@@ -19,6 +19,10 @@ export interface SpawnOptions {
  * This function starts `command` with `shell: false` and `windowsHide`. On POSIX the child gets
  * its own process group, so `killTree` reaches its descendants. The child is recorded until it
  * ends, so the end of the host kills it.
+ *
+ * On Windows, a command with no folder starts from a folder of `PATH` only (`startFile`), never
+ * from the working folder. When no folder of `PATH` has it, the start fails with ENOENT, as for
+ * a missing program. The error names the command, as before.
  */
 export declare function startChild(command: string, options: SpawnOptions, stdin: "pipe" | "ignore"): ChildProcess;
 /** The text of an error that kept a program from starting, for example `spawn x ENOENT`. */

package/dist/command/spawn.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/command/spawn.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAG9D,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrC,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChD;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,CAYzG;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD"}
+{"version":3,"file":"spawn.d.ts","sourceRoot":"","sources":["../../src/command/spawn.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAS,KAAK,YAAY,EAAyC,MAAM,oBAAoB,CAAC;AAIrG,MAAM,WAAW,YAAY;IAC3B,+EAA+E;IAC/E,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IACrC,0EAA0E;IAC1E,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzB,mEAAmE;IACnE,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,SAAS,CAAC;IACrD;;;OAGG;IACH,wBAAwB,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CAChD;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,GAAG,QAAQ,GAAG,YAAY,CAmBzG;AAED,4FAA4F;AAC5F,wBAAgB,UAAU,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEjD"}

package/dist/command/spawn.js

@@ -2,22 +2,34 @@
  * Start a child process the one way the helpers allow: an argument list, no shell, no window.
  */
 import { spawn } from "node:child_process";
+import { nameStartErrors, startFile } from "./program.js";
 import { OWN_PROCESS_GROUP, track } from "./tree-kill.js";
 /**
  * This function starts `command` with `shell: false` and `windowsHide`. On POSIX the child gets
  * its own process group, so `killTree` reaches its descendants. The child is recorded until it
  * ends, so the end of the host kills it.
+ *
+ * On Windows, a command with no folder starts from a folder of `PATH` only (`startFile`), never
+ * from the working folder. When no folder of `PATH` has it, the start fails with ENOENT, as for
+ * a missing program. The error names the command, as before.
  */
 export function startChild(command, options, stdin) {
-    const child = spawn(command, [...(options.args ?? [])], {
+    const env = options.env ? { ...process.env, ...options.env } : process.env;
+    const file = startFile(command, env);
+    const spawnOptions = {
         cwd: options.cwd,
-        env: options.env ? { ...process.env, ...options.env } : process.env,
+        env,
         shell: false,
         windowsHide: true,
         detached: OWN_PROCESS_GROUP,
         stdio: [stdin, "pipe", "pipe"],
+        // The program gets the name of the call as its first argument, as before
+        argv0: command,
         ...(options.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}),
-    });
+    };
+    const args = [...(options.args ?? [])];
+    const child = spawn(file, args, spawnOptions);
+    nameStartErrors(child, command, file);
     track(child);
     return child;
 }

package/dist/command/spawn.js.map

@@ -1 +1 @@
-{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../src/command/spawn.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAAqB,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAgB1D;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAqB,EAAE,KAAwB;IACzF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE;QACtD,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG;QACnE,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9B,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}
+{"version":3,"file":"spawn.js","sourceRoot":"","sources":["../../src/command/spawn.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,KAAK,EAA4D,MAAM,oBAAoB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,iBAAiB,EAAE,KAAK,EAAE,MAAM,gBAAgB,CAAC;AAgB1D;;;;;;;;GAQG;AACH,MAAM,UAAU,UAAU,CAAC,OAAe,EAAE,OAAqB,EAAE,KAAwB;IACzF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC;IAC3E,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACrC,MAAM,YAAY,GAAqB;QACrC,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,GAAG;QACH,KAAK,EAAE,KAAK;QACZ,WAAW,EAAE,IAAI;QACjB,QAAQ,EAAE,iBAAiB;QAC3B,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC;QAC9B,yEAAyE;QACzE,KAAK,EAAE,OAAO;QACd,GAAG,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC,CAAC,EAAE,wBAAwB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChF,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9C,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACtC,KAAK,CAAC,KAAK,CAAC,CAAC;IACb,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,UAAU,CAAC,KAAc;IACvC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC"}

package/dist/command/tree-kill.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"tree-kill.d.ts","sourceRoot":"","sources":["../../src/command/tree-kill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAI5E;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAkB,CAAC;AAMnD,iGAAiG;AACjG,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,GAAE,MAAM,CAAC,OAAmB,GAAG,IAAI,CAgBtF;AAsCD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAOrD;AAgBD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAU/C"}
+{"version":3,"file":"tree-kill.d.ts","sourceRoot":"","sources":["../../src/command/tree-kill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAuB,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAW5E;;;GAGG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAkB,CAAC;AAMnD,iGAAiG;AACjG,wBAAgB,QAAQ,CAAC,KAAK,EAAE,YAAY,EAAE,MAAM,GAAE,MAAM,CAAC,OAAmB,GAAG,IAAI,CAgBtF;AAsCD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAOrD;AAgBD;;;GAGG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,YAAY,GAAG,IAAI,CAU/C"}

package/dist/command/tree-kill.js

@@ -16,7 +16,13 @@
  * still runs at the exit.
  */
 import { execFile, spawnSync } from "node:child_process";
+import { systemProgram } from "./program.js";
 const WINDOWS = process.platform === "win32";
+/**
+ * The full path of `taskkill.exe` in the system folder. A bare name started a `taskkill.exe` of
+ * the working folder of the host first.
+ */
+const TASKKILL = WINDOWS ? systemProgram("taskkill.exe") : "taskkill";
 /**
  * True when a child must start with `detached: true`. On POSIX, `detached` puts the child in a
  * new process group, which `killTree` needs. On Windows, `detached` opens a new console.
@@ -31,7 +37,7 @@ export function killTree(child, signal = "SIGTERM") {
         return;
     const pid = child.pid;
     if (WINDOWS) {
-        execFile("taskkill", ["/T", "/F", "/PID", String(pid)], { windowsHide: true }, (error) => {
+        execFile(TASKKILL, ["/T", "/F", "/PID", String(pid)], { windowsHide: true }, (error) => {
             // taskkill fails when the process ended in the meantime, or when taskkill is missing
             if (error && running(child))
                 child.kill(signal);
@@ -53,7 +59,7 @@ function killTreeSync(child) {
     const pid = child.pid;
     try {
         if (WINDOWS) {
-            spawnSync("taskkill", ["/T", "/F", "/PID", String(pid)], { windowsHide: true, stdio: "ignore" });
+            spawnSync(TASKKILL, ["/T", "/F", "/PID", String(pid)], { windowsHide: true, stdio: "ignore" });
         }
         else {
             process.kill(-pid, "SIGKILL");

package/dist/command/tree-kill.js.map

@@ -1 +1 @@
-{"version":3,"file":"tree-kill.js","sourceRoot":"","sources":["../../src/command/tree-kill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAE5E,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAY,CAAC,OAAO,CAAC;AAEnD,SAAS,OAAO,CAAC,KAAmB;IAClC,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;AACzF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,QAAQ,CAAC,KAAmB,EAAE,MAAM,GAAmB,SAAS;IAC9E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;IACvB,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YACvF,qFAAqF;YACrF,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,mFAAmF;QACnF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,KAAmB;IACvC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACnG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAEhF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;AACrC,MAAM,OAAO,GAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC3E,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,SAAS,OAAO;IACd,KAAK,MAAM,KAAK,IAAI,IAAI;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;AACf,CAAC;AAED,SAAS,MAAM;IACb,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAsB;IAC7C,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO;IAC9C,+FAA+F;IAC/F,8DAA8D;IAC9D,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,IAAI;IACX,IAAI,MAAM;QAAE,OAAO;IACnB,MAAM,GAAG,IAAI,CAAC;IACd,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM;IACb,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,KAAmB;IACvC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"tree-kill.js","sourceRoot":"","sources":["../../src/command/tree-kill.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE7C,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;AAE7C;;;GAGG;AACH,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;AAEtE;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAY,CAAC,OAAO,CAAC;AAEnD,SAAS,OAAO,CAAC,KAAmB;IAClC,OAAO,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,CAAC;AACzF,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,QAAQ,CAAC,KAAmB,EAAE,MAAM,GAAmB,SAAS;IAC9E,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;IACvB,IAAI,OAAO,EAAE,CAAC;QACZ,QAAQ,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YACrF,qFAAqF;YACrF,IAAI,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAClD,CAAC,CAAC,CAAC;QACH,OAAO;IACT,CAAC;IACD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,mFAAmF;QACnF,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,0FAA0F;AAC1F,SAAS,YAAY,CAAC,KAAmB;IACvC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAC5B,MAAM,GAAG,GAAG,KAAK,CAAC,GAAI,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,OAAO,EAAE,CAAC;YACZ,SAAS,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjG,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;IACH,CAAC;AACH,CAAC;AAED,gFAAgF;AAChF,qEAAqE;AACrE,gFAAgF;AAEhF,MAAM,IAAI,GAAG,IAAI,GAAG,EAAgB,CAAC;AACrC,MAAM,OAAO,GAA8B,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC;AAC3E,IAAI,MAAM,GAAG,KAAK,CAAC;AAEnB,SAAS,OAAO;IACd,KAAK,MAAM,KAAK,IAAI,IAAI;QAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC9C,IAAI,CAAC,KAAK,EAAE,CAAC;AACf,CAAC;AAED,SAAS,MAAM;IACb,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,MAAsB;IAC7C,IAAI,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,OAAO;IAC9C,+FAA+F;IAC/F,8DAA8D;IAC9D,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,CAAC;IACT,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,SAAS,IAAI;IACX,IAAI,MAAM;QAAE,OAAO;IACnB,MAAM,GAAG,IAAI,CAAC;IACd,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,MAAM;IACb,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,MAAM,GAAG,KAAK,CAAC;IACf,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,KAAK,MAAM,MAAM,IAAI,OAAO;QAAE,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,KAAK,CAAC,KAAmB;IACvC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO;IAC5B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,EAAE,CAAC;IACP,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACnB,IAAI,IAAI,CAAC,IAAI,KAAK,CAAC;YAAE,MAAM,EAAE,CAAC;IAChC,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC9B,CAAC"}

package/dist/procedures/shell/which.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"which.d.ts","sourceRoot":"","sources":["../../../src/procedures/shell/which.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAExE,wBAAsB,UAAU,CAC9B,KAAK,EAAE,eAAe,EACtB,GAAG,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,GACzC,OAAO,CAAC,gBAAgB,CAAC,CAa3B"}
+{"version":3,"file":"which.d.ts","sourceRoot":"","sources":["../../../src/procedures/shell/which.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAExE,wBAAsB,UAAU,CAC9B,KAAK,EAAE,eAAe,EACtB,GAAG,CAAC,EAAE;IAAE,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;CAAE,GACzC,OAAO,CAAC,gBAAgB,CAAC,CAc3B"}

package/dist/procedures/shell/which.js

@@ -3,6 +3,7 @@
  *
  * Find the full path to a command.
  */
+import { whichCall } from "../../command/program.js";
 import { runCommand } from "../../command/run.js";
 export async function shellWhich(input, ctx) {
     // The name is one argument of where/which, with no shell. (Before, `where ${command}` ran in a
@@ -10,8 +11,9 @@ export async function shellWhich(input, ctx) {
     if (input.command.startsWith("-")) {
         return { path: null, found: false };
     }
-    const program = process.platform === "win32" ? "where" : "which";
-    const result = await runCommand(program, { args: [input.command], signal: ctx?.signal, timeout: 30_000 });
+    // On Windows, only the folders of PATH, as the start of a program by its name
+    const { program, args } = whichCall(input.command);
+    const result = await runCommand(program, { args, signal: ctx?.signal, timeout: 30_000 });
     if (!result.success) {
         return { path: null, found: false };
     }

package/dist/procedures/shell/which.js.map

@@ -1 +1 @@
-{"version":3,"file":"which.js","sourceRoot":"","sources":["../../../src/procedures/shell/which.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAsB,EACtB,GAA0C;IAE1C,+FAA+F;IAC/F,8EAA8E;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACjE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1G,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC"}
+{"version":3,"file":"which.js","sourceRoot":"","sources":["../../../src/procedures/shell/which.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAGlD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,KAAsB,EACtB,GAA0C;IAE1C,+FAA+F;IAC/F,8EAA8E;IAC9E,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,8EAA8E;IAC9E,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAClE,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;AAChF,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/package",
   "name": "@procedures/shell",
-  "version": "0.54.1",
+  "version": "0.55.1",
   "description": "Safe command execution for TypeScript: shell.run with argv and no shell, shell.stream line streaming with backpressure, process-tree kill, timeouts and output caps.",
   "keywords": [
     "shell",
@@ -72,13 +72,13 @@
   },
   "devDependencies": {
     "@mark1russell7/cue": "^2.1.1",
-    "@procedures/fs": "0.54.1",
+    "@procedures/fs": "0.55.1",
     "@types/node": "^22.0.0",
     "typescript": "^7.0.2",
     "vitest": "^5.0.3"
   },
   "dependencies": {
-    "@procedures/client": "0.54.1",
+    "@procedures/client": "0.55.1",
     "zod": "^4.6.5"
   },
   "client": {

package/src/command/program.ts

@@ -0,0 +1,177 @@
+/**
+ * The file of a program: the one place that answers which file a command starts.
+ *
+ * On Windows, Node (libuv) looks for a program name with no folder first in the working folder of
+ * the child, and only then in the folders of `PATH`. So "run `git` in this cloned repository"
+ * started a `git.exe` from the top folder of the repository. The helpers give `spawn` the
+ * absolute path from `startFile()`, which searches only the folders of `PATH`. The functions take
+ * the operating system, the environment and the file test as inputs, so each system tests them.
+ */
+
+import { statSync } from "node:fs";
+import { win32 } from "node:path";
+
+/** The options of `programPath`. Each one has a default from the host, so the tests can set it. */
+export interface ProgramPathOptions {
+  /** The operating system (default: `process.platform`). */
+  platform?: NodeJS.Platform | undefined;
+  /** The environment of the host, for a child environment with no `PATH` (default: `process.env`). */
+  hostEnv?: Readonly<Record<string, string | undefined>> | undefined;
+  /** The function that tells if a path is a file (default: `fs.statSync`). */
+  isFile?: ((path: string) => boolean) | undefined;
+}
+
+function isFile(path: string): boolean {
+  try {
+    return statSync(path).isFile();
+  } catch {
+    return false;
+  }
+}
+
+/** True for a path with a drive and a separator (`C:\x`), or a UNC path (`\\server\share`). */
+function fullyQualified(path: string): boolean {
+  return /^(?:[a-zA-Z]:[\\/]|[\\/]{2}[^\\/])/.test(path);
+}
+
+/**
+ * The value of `PATH` in an environment that Node gives to a child on Windows. The names of the
+ * variables have no fixed case there. Node keeps the first name in sorted order (`PATH` before
+ * `Path`), and leaves out a variable with no value.
+ */
+export function windowsPathValue(env: Readonly<Record<string, string | undefined>>): string | undefined {
+  const key = Object.keys(env).sort().find((name) => name.toUpperCase() === "PATH");
+  return key === undefined ? undefined : env[key];
+}
+
+/**
+ * The folders of a `PATH` value on Windows, in order, as libuv reads them: a `;` separates two
+ * folders, and quotes around a folder are not part of it. The list leaves out an empty folder and
+ * a folder that is not fully qualified, because both lead to the working folder.
+ */
+export function windowsPathFolders(value: string): string[] {
+  const folders: string[] = [];
+  let start = 0;
+  while (start <= value.length) {
+    const quote = value[start];
+    let from = start;
+    if (quote === '"' || quote === "'") {
+      const end = value.indexOf(quote, start + 1);
+      from = end === -1 ? value.length : end;
+    }
+    const semicolon = value.indexOf(";", from);
+    const end = semicolon === -1 ? value.length : semicolon;
+    const folder = value.slice(start, end).replace(/^["']/, "").replace(/["']$/, "");
+    if (fullyQualified(folder)) folders.push(folder);
+    start = end + 1;
+  }
+  return folders;
+}
+
+/** True when a command has a folder part, for example `.\x`, `bin/x` or `C:x`. */
+function hasFolder(command: string): boolean {
+  return /[\\/:]/.test(command);
+}
+
+/**
+ * This function gives the file that `command` starts, for `spawn`:
+ * - On POSIX, and for a command with a folder part, it gives `command`. The system finds it as before.
+ * - On Windows, for a name with no folder, it gives the absolute path of the first match in the
+ *   folders of the `PATH` of `env`, the environment of the child. It never looks in the working
+ *   folder. It tries the names that libuv tries: the exact name when it has an extension, then
+ *   the name with `.com`, then the name with `.exe`.
+ * - It gives `undefined` when no folder of `PATH` has the program.
+ *
+ * When `env` has no `PATH`, libuv uses the `PATH` of the host. This function does the same.
+ */
+export function programPath(
+  command: string,
+  env: Readonly<Record<string, string | undefined>>,
+  options: ProgramPathOptions = {},
+): string | undefined {
+  if ((options.platform ?? process.platform) !== "win32") return command;
+  // An empty name stays as it is: spawn gives its own error for it
+  if (command === "" || hasFolder(command)) return command;
+  if (command === ".") return undefined;
+  const dot = command.indexOf(".");
+  const names = [...(dot !== -1 && dot < command.length - 1 ? [command] : []), `${command}.com`, `${command}.exe`];
+  const value = windowsPathValue(env) ?? windowsPathValue(options.hostEnv ?? process.env) ?? "";
+  const test = options.isFile ?? isFile;
+  for (const folder of windowsPathFolders(value)) {
+    for (const name of names) {
+      const path = win32.join(folder, name);
+      if (test(path)) return path;
+    }
+  }
+  return undefined;
+}
+
+/**
+ * A folder name that no file system of Windows allows: NTFS refuses `<` and `>` in a name. A path
+ * through it does not exist, so a start of it fails with ENOENT and searches no other folder.
+ */
+const NO_FOLDER = "<not in PATH>";
+
+/**
+ * This function gives the file that `startChild` gives to `spawn`. It is the result of
+ * `programPath()` when there is one. When no folder of `PATH` has the program, it gives a fully
+ * qualified path that does not exist, in the system folder. So the start fails with ENOENT, as for
+ * a missing program, and the system does not look in the working folder.
+ */
+export function startFile(
+  command: string,
+  env: Readonly<Record<string, string | undefined>>,
+  options: ProgramPathOptions = {},
+): string {
+  // No join: a join would remove a name such as `..`, and the path would be a folder that exists
+  return programPath(command, env, options) ?? `${systemProgram(NO_FOLDER, options.hostEnv ?? process.env)}\\${command}`;
+}
+
+/** The part of an error of Node that names the file of a start. */
+interface StartError {
+  message: string;
+  stack?: string | undefined;
+  syscall?: string | undefined;
+  path?: string | undefined;
+}
+
+/**
+ * When `file` is not `command`, this function changes each start error of `child` to name
+ * `command`, as Node names it for a start by name: the `message` (`spawn git ENOENT`), the
+ * `stack`, the `syscall` and the `path`. So the error of a call is the same as before the lookup.
+ * A child with no other listener of `error` still throws the error, as Node does.
+ */
+export function nameStartErrors(child: NodeJS.EventEmitter, command: string, file: string): void {
+  if (file === command) return;
+  const fileCall = `spawn ${file}`;
+  const commandCall = `spawn ${command}`;
+  child.prependListener("error", (error: StartError) => {
+    if (error.syscall === fileCall) {
+      error.syscall = commandCall;
+      if (error.path === file) error.path = command;
+      if (error.message.startsWith(fileCall)) error.message = commandCall + error.message.slice(fileCall.length);
+      if (error.stack !== undefined) error.stack = error.stack.replace(fileCall, commandCall);
+    }
+    if (child.listenerCount("error") === 1) throw error;
+  });
+}
+
+/**
+ * The program and the arguments of `shell.which` for a command. On Windows, `where name` gives a
+ * match in the working folder first. `where $PATH:name` looks only in the folders of `PATH`, as a
+ * start of a program by its name does. A command with a folder part goes to `where` as it is.
+ */
+export function whichCall(command: string, platform: NodeJS.Platform = process.platform): { program: string; args: string[] } {
+  if (platform !== "win32") return { program: "which", args: [command] };
+  return { program: "where", args: [hasFolder(command) ? command : `$PATH:${command}`] };
+}
+
+/**
+ * The path of a program of the system folder of Windows, for example `taskkill.exe`. The folder
+ * comes from `SystemRoot`, then `windir`, then `C:\Windows`. A value that is not fully qualified
+ * is not used.
+ */
+export function systemProgram(name: string, env: Readonly<Record<string, string | undefined>> = process.env): string {
+  const root = [env["SystemRoot"], env["windir"]].find((value): value is string => value !== undefined && fullyQualified(value));
+  return win32.join(root ?? "C:\\Windows", "System32", name);
+}

package/src/command/spawn.ts

@@ -2,7 +2,8 @@
  * Start a child process the one way the helpers allow: an argument list, no shell, no window.
  */
 
-import { spawn, type ChildProcess } from "node:child_process";
+import { spawn, type ChildProcess, type SpawnOptions as NodeSpawnOptions } from "node:child_process";
+import { nameStartErrors, startFile } from "./program.js";
 import { OWN_PROCESS_GROUP, track } from "./tree-kill.js";
 
 export interface SpawnOptions {
@@ -23,17 +24,28 @@ export interface SpawnOptions {
  * This function starts `command` with `shell: false` and `windowsHide`. On POSIX the child gets
  * its own process group, so `killTree` reaches its descendants. The child is recorded until it
  * ends, so the end of the host kills it.
+ *
+ * On Windows, a command with no folder starts from a folder of `PATH` only (`startFile`), never
+ * from the working folder. When no folder of `PATH` has it, the start fails with ENOENT, as for
+ * a missing program. The error names the command, as before.
  */
 export function startChild(command: string, options: SpawnOptions, stdin: "pipe" | "ignore"): ChildProcess {
-  const child = spawn(command, [...(options.args ?? [])], {
+  const env = options.env ? { ...process.env, ...options.env } : process.env;
+  const file = startFile(command, env);
+  const spawnOptions: NodeSpawnOptions = {
     cwd: options.cwd,
-    env: options.env ? { ...process.env, ...options.env } : process.env,
+    env,
     shell: false,
     windowsHide: true,
     detached: OWN_PROCESS_GROUP,
     stdio: [stdin, "pipe", "pipe"],
+    // The program gets the name of the call as its first argument, as before
+    argv0: command,
     ...(options.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {}),
-  });
+  };
+  const args = [...(options.args ?? [])];
+  const child = spawn(file, args, spawnOptions);
+  nameStartErrors(child, command, file);
   track(child);
   return child;
 }

package/src/command/tree-kill.ts

@@ -17,9 +17,16 @@
  */
 
 import { execFile, spawnSync, type ChildProcess } from "node:child_process";
+import { systemProgram } from "./program.js";
 
 const WINDOWS = process.platform === "win32";
 
+/**
+ * The full path of `taskkill.exe` in the system folder. A bare name started a `taskkill.exe` of
+ * the working folder of the host first.
+ */
+const TASKKILL = WINDOWS ? systemProgram("taskkill.exe") : "taskkill";
+
 /**
  * True when a child must start with `detached: true`. On POSIX, `detached` puts the child in a
  * new process group, which `killTree` needs. On Windows, `detached` opens a new console.
@@ -35,7 +42,7 @@ export function killTree(child: ChildProcess, signal: NodeJS.Signals = "SIGTERM"
   if (!running(child)) return;
   const pid = child.pid!;
   if (WINDOWS) {
-    execFile("taskkill", ["/T", "/F", "/PID", String(pid)], { windowsHide: true }, (error) => {
+    execFile(TASKKILL, ["/T", "/F", "/PID", String(pid)], { windowsHide: true }, (error) => {
       // taskkill fails when the process ended in the meantime, or when taskkill is missing
       if (error && running(child)) child.kill(signal);
     });
@@ -55,7 +62,7 @@ function killTreeSync(child: ChildProcess): void {
   const pid = child.pid!;
   try {
     if (WINDOWS) {
-      spawnSync("taskkill", ["/T", "/F", "/PID", String(pid)], { windowsHide: true, stdio: "ignore" });
+      spawnSync(TASKKILL, ["/T", "/F", "/PID", String(pid)], { windowsHide: true, stdio: "ignore" });
     } else {
       process.kill(-pid, "SIGKILL");
     }

package/src/procedures/shell/which.ts

@@ -4,6 +4,7 @@
  * Find the full path to a command.
  */
 
+import { whichCall } from "../../command/program.js";
 import { runCommand } from "../../command/run.js";
 import type { ShellWhichInput, ShellWhichOutput } from "../../types.js";
 
@@ -16,8 +17,9 @@ export async function shellWhich(
   if (input.command.startsWith("-")) {
     return { path: null, found: false };
   }
-  const program = process.platform === "win32" ? "where" : "which";
-  const result = await runCommand(program, { args: [input.command], signal: ctx?.signal, timeout: 30_000 });
+  // On Windows, only the folders of PATH, as the start of a program by its name
+  const { program, args } = whichCall(input.command);
+  const result = await runCommand(program, { args, signal: ctx?.signal, timeout: 30_000 });
   if (!result.success) {
     return { path: null, found: false };
   }