claude-bridge-cli 2.0.20 → 2.0.21

package/lib/bridge.js

@@ -842,8 +842,26 @@ function askClaude(config, { prompt, session_id, images, cwd, plan_mode, allow_t
       }
     } catch {}
 
+    // A newline in ANY argument truncates the command line there — cmd.exe's
+    // second parse ends the command at the line break, so every argument that
+    // FOLLOWS is silently discarded. The prompt was routed through @file for
+    // exactly this reason (see the note above), but the lesson was applied to
+    // one argument instead of to the rule. 2.0.18 added the first multi-line
+    // --append-system-prompt and re-opened the hole one argument over: the
+    // trailing --add-dir / --resume / --model were dropped, so on Windows
+    // every "resume" silently began a NEW session, on the default model, with
+    // no error to explain it. Newlines are not meaningful in any value we
+    // pass, so flatten them for cmd-shim spawns and close the whole class.
+    const flattenForCmd = (a) =>
+      typeof a === "string" ? a.replace(/\r\n|\r|\n/g, " ") : a;
+    const shellSafeArgs = isCmdShim ? args.map(flattenForCmd) : args;
+    if (isCmdShim && process.env.CLAUDE_BRIDGE_DEBUG) {
+      const n = args.filter((a, i) => a !== shellSafeArgs[i]).length;
+      if (n) console.error("[bridge] flattened newlines in %d arg(s) for cmd.exe", n);
+    }
+
     const bin = isCmdShim ? process.env.COMSPEC || "cmd.exe" : config.claudeBin;
-    const fullArgs = isCmdShim ? ["/c", config.claudeBin, ...args] : args;
+    const fullArgs = isCmdShim ? ["/c", config.claudeBin, ...shellSafeArgs] : args;
 
     // Opt-in spawn tracing (CLAUDE_BRIDGE_DEBUG=1). Nothing recorded WHAT the
     // bridge actually ran, so when a turn misbehaved there was no evidence to

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-bridge-cli",
-  "version": "2.0.20",
+  "version": "2.0.21",
   "description": "Use Claude Code from your browser. Runs a local server that connects your browser tools to the Claude CLI.",
   "main": "lib/bridge.js",
   "bin": {