cli4ai 1.2.1 → 1.2.3

package/dist/commands/add.js

@@ -4,8 +4,11 @@
 import { existsSync, symlinkSync, mkdirSync, cpSync, rmSync, readdirSync, unlinkSync, lstatSync } from 'fs';
 import { resolve, dirname, join, normalize } from 'path';
 import { createInterface } from 'readline';
-import { tmpdir } from 'os';
+import { tmpdir, platform } from 'os';
 import { spawnSync } from 'child_process';
+// Windows compatibility: use shell: true on Windows to handle .cmd wrappers
+// This is safe because package names are validated with strict regex patterns
+const isWindows = platform() === 'win32';
 import { output, outputError, log } from '../lib/cli.js';
 import { loadManifest, tryLoadManifest } from '../core/manifest.js';
 import { ensureCli4aiHome, ensureLocalDir, PACKAGES_DIR, LOCAL_PACKAGES_DIR, loadConfig } from '../core/config.js';
@@ -101,7 +104,8 @@ async function downloadFromNpm(packageName, targetDir) {
         const packResult = spawnSync('npm', ['pack', packageName, `--pack-destination=${tmpDir}`], {
             stdio: 'pipe',
             cwd: tmpDir,
-            encoding: 'utf-8'
+            encoding: 'utf-8',
+            shell: isWindows // Required on Windows to find npm.cmd
         });
         if (packResult.error) {
             throw new Error(`npm not found or failed to execute: ${packResult.error.message}`);
@@ -120,7 +124,8 @@ async function downloadFromNpm(packageName, targetDir) {
         const tarPath = join(tmpDir, tarball);
         const extractResult = spawnSync('tar', ['-xzf', tarPath, '-C', tmpDir], {
             stdio: 'pipe',
-            encoding: 'utf-8'
+            encoding: 'utf-8',
+            shell: isWindows // Required on Windows
         });
         if (extractResult.status !== 0) {
             throw new Error(`Failed to extract package: ${extractResult.stderr || 'tar extraction failed'}`);
@@ -161,7 +166,8 @@ async function downloadFromNpm(packageName, targetDir) {
  */
 function checkCliTool(name) {
     try {
-        const result = spawnSync('which', [name], { stdio: 'pipe' });
+        const cmd = isWindows ? 'where' : 'which';
+        const result = spawnSync(cmd, [name], { stdio: 'pipe' });
         return result.status === 0;
     }
     catch {
@@ -178,7 +184,8 @@ async function installNpmDependencies(pkgPath, dependencies) {
     log(`Installing npm dependencies: ${deps.join(', ')}`);
     const result = spawnSync('npm', ['install', ...deps], {
         cwd: pkgPath,
-        stdio: 'inherit'
+        stdio: 'inherit',
+        shell: isWindows // Required on Windows to find npm.cmd
     });
     if (result.status !== 0) {
         throw new Error(`Failed to install dependencies (exit code: ${result.status})`);

package/dist/commands/browse.js

@@ -2,8 +2,11 @@
  * cli4ai browse - Interactive package browser
  */
 import { spawnSync } from 'child_process';
+import { platform } from 'os';
 import { log, outputError } from '../lib/cli.js';
 import { getNpmGlobalPackages, getGlobalPackages, getLocalPackages } from '../core/config.js';
+// Windows compatibility
+const isWindows = platform() === 'win32';
 // ANSI codes
 const RESET = '\x1B[0m';
 const BOLD = '\x1B[1m';
@@ -328,7 +331,7 @@ async function installPackages(packages, scope) {
             if (scopeFlag)
                 addArgs.push(scopeFlag);
             addArgs.push('-y');
-            const result = spawnSync('cli4ai', addArgs, { stdio: 'pipe' });
+            const result = spawnSync('cli4ai', addArgs, { stdio: 'pipe', shell: isWindows });
             clearInterval(spinner);
             if (result.status === 0) {
                 process.stderr.write(`\r  ${GREEN}✓${RESET} ${BOLD}${shortName}${RESET} installed                    \n`);

package/dist/commands/info.js

@@ -3,7 +3,10 @@
  */
 import { resolve } from 'path';
 import { spawnSync } from 'child_process';
+import { platform } from 'os';
 import { output, outputError, log } from '../lib/cli.js';
+// Windows compatibility
+const isWindows = platform() === 'win32';
 import { findPackage, loadConfig } from '../core/config.js';
 import { loadManifest, tryLoadManifest } from '../core/manifest.js';
 import { remotePackageInfo, RemoteConnectionError, RemoteApiError } from '../core/remote-client.js';
@@ -65,7 +68,8 @@ export async function infoCommand(packageName, options) {
         const result = spawnSync('npm', ['view', scopedName, '--json'], {
             encoding: 'utf-8',
             timeout: 10000,
-            stdio: ['pipe', 'pipe', 'pipe']
+            stdio: ['pipe', 'pipe', 'pipe'],
+            shell: isWindows // Required on Windows to find npm.cmd
         });
         if (result.status === 0 && result.stdout) {
             const pkg = JSON.parse(result.stdout);

package/dist/commands/search.js

@@ -4,7 +4,10 @@
 import { readdirSync, existsSync } from 'fs';
 import { resolve } from 'path';
 import { spawnSync } from 'child_process';
+import { platform } from 'os';
 import { output, outputError, log } from '../lib/cli.js';
+// Windows compatibility
+const isWindows = platform() === 'win32';
 import { loadConfig, getGlobalPackages, getLocalPackages } from '../core/config.js';
 import { tryLoadManifest } from '../core/manifest.js';
 import { remoteListPackages, RemoteConnectionError, RemoteApiError } from '../core/remote-client.js';
@@ -97,7 +100,8 @@ export async function searchCommand(query, options) {
             const searchResult = spawnSync('npm', ['search', `@cli4ai/${query}`, '--json'], {
                 encoding: 'utf-8',
                 timeout: 10000,
-                stdio: ['pipe', 'pipe', 'pipe']
+                stdio: ['pipe', 'pipe', 'pipe'],
+                shell: isWindows // Required on Windows to find npm.cmd
             });
             let npmResults = searchResult.stdout || '';
             // Fallback to searching @cli4ai if specific query fails
@@ -105,7 +109,8 @@ export async function searchCommand(query, options) {
                 const fallbackResult = spawnSync('npm', ['search', '@cli4ai', '--json'], {
                     encoding: 'utf-8',
                     timeout: 10000,
-                    stdio: ['pipe', 'pipe', 'pipe']
+                    stdio: ['pipe', 'pipe', 'pipe'],
+                    shell: isWindows // Required on Windows to find npm.cmd
                 });
                 npmResults = fallbackResult.stdout || '[]';
             }

package/dist/core/config.js

@@ -2,7 +2,7 @@
  * Global cli4ai configuration (~/.cli4ai/)
  */
 import { readFileSync, writeFileSync, mkdirSync, existsSync, readdirSync, lstatSync, realpathSync, openSync, closeSync, unlinkSync, renameSync } from 'fs';
-import { resolve, join, normalize } from 'path';
+import { resolve, join, normalize, sep } from 'path';
 import { homedir } from 'os';
 import { outputError, log } from '../lib/cli.js';
 // ═══════════════════════════════════════════════════════════════════════════
@@ -36,7 +36,7 @@ function validateSymlinkTarget(symlinkPath) {
         // Check if the real path is within a safe prefix
         const isSafe = SAFE_SYMLINK_PREFIXES.some(prefix => {
             const normalizedPrefix = normalize(prefix);
-            return normalizedRealPath.startsWith(normalizedPrefix + '/') ||
+            return normalizedRealPath.startsWith(normalizedPrefix + sep) ||
                 normalizedRealPath === normalizedPrefix;
         });
         if (!isSafe) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli4ai",
-  "version": "1.2.1",
+  "version": "1.2.3",
   "description": "The package manager for AI CLI tools - cli4ai.com",
   "type": "module",
   "bin": {