kiro-spec-engine 1.45.6 → 1.45.7

package/CHANGELOG.md

@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.45.7] - 2026-02-13
+
+### Fixed
+- **Windows CMD 8191 character limit**: `AgentSpawner.spawn()` now writes bootstrap prompt to temp file and spawns via PowerShell on Windows, bypassing cmd.exe's 8191 character command line limit (fixes `The command line is too long` error when bootstrap prompt exceeds 8K characters)
+
 ## [1.45.6] - 2026-02-13
 
 ### Fixed

package/lib/orchestrator/agent-spawner.js

@@ -83,12 +83,41 @@ class AgentSpawner extends EventEmitter {
     const { command, prependArgs } = this._resolveCodexCommand(config);
 
     // Spawn the child process (Req 1.1, 1.2)
-    const needsShell = process.platform === 'win32' || command === 'npx';
+    //
+    // On Windows we must use a shell to execute .cmd/.ps1 wrappers, but
+    // cmd.exe has an 8191-character command-line limit which the bootstrap
+    // prompt easily exceeds.  To avoid this we write the prompt to a temp
+    // file and pass the file path to codex via a shell read expression.
+    //
+    // Strategy per platform:
+    //   Windows → write prompt to temp file, spawn via cmd.exe with
+    //             `type <file>` piped through a FOR /F or via PowerShell.
+    //             Simplest: use stdin pipe (stdio[0] = 'pipe') so the
+    //             prompt never appears on the command line at all.
+    //   Others  → pass prompt directly as argument (no length issue).
+    const isWindows = process.platform === 'win32';
+    const needsShell = isWindows || command === 'npx';
+
+    // On Windows, remove the prompt from args and pipe it via stdin instead,
+    // completely bypassing the cmd.exe 8191-char command-line limit.
+    let useStdinPrompt = false;
+    let stdinPrompt = null;
     const finalArgs = [...prependArgs, ...args];
 
+    if (isWindows) {
+      // Remove the prompt (last element of args portion) from command line
+      // and deliver it via stdin to avoid cmd.exe length limit.
+      stdinPrompt = finalArgs.pop(); // remove prompt
+      // If the prompt was quoted by the escaping below, unwrap it
+      if (stdinPrompt.startsWith('"') && stdinPrompt.endsWith('"')) {
+        stdinPrompt = stdinPrompt.slice(1, -1).replace(/\\"/g, '"');
+      }
+      useStdinPrompt = true;
+    }
+
     // When shell: true, Node.js concatenates args into a single string without
-    // escaping. Arguments containing spaces (e.g. the prompt) must be quoted so
-    // the shell does not split them into separate tokens.
+    // escaping. Arguments containing spaces must be quoted so the shell does
+    // not split them into separate tokens.
     if (needsShell) {
       for (let i = 0; i < finalArgs.length; i++) {
         if (/\s/.test(finalArgs[i])) {
@@ -98,12 +127,45 @@ class AgentSpawner extends EventEmitter {
     }
 
     const env = { ...process.env, [apiKeyEnvVar]: apiKey };
-    const child = spawn(command, finalArgs, {
+
+    // When using stdin for the prompt, write it to a temp file and pass
+    // the file path as the last argument using a short placeholder.
+    // Codex exec reads the prompt from argv, so we use a temp-file approach:
+    // write prompt → pass file path via shell read.
+    let promptTmpFile = null;
+    if (useStdinPrompt) {
+      promptTmpFile = path.join(os.tmpdir(), `kse-prompt-${agentId}-${Date.now()}.txt`);
+      fs.writeFileSync(promptTmpFile, stdinPrompt, 'utf-8');
+    }
+
+    // Build the final spawn arguments
+    let spawnCommand = command;
+    let spawnArgs = finalArgs;
+    let spawnShell = needsShell;
+
+    if (promptTmpFile) {
+      // On Windows, use PowerShell to read the temp file as the last argument.
+      // PowerShell does not have the 8191-char limit of cmd.exe.
+      // We construct: powershell -NoProfile -Command "& <command> <args> (Get-Content -Raw '<tmpfile>')"
+      const cmdParts = [command, ...finalArgs].map(a => {
+        if (a.startsWith('"') && a.endsWith('"')) return a;
+        return /\s/.test(a) ? `"${a}"` : a;
+      });
+      const psPromptExpr = `(Get-Content -Raw '${promptTmpFile.replace(/'/g, "''")}')`;
+      cmdParts.push(psPromptExpr);
+
+      const psCommand = `& ${cmdParts.join(' ')}`;
+      spawnCommand = 'powershell.exe';
+      spawnArgs = ['-NoProfile', '-Command', psCommand];
+      spawnShell = false; // spawning powershell.exe directly
+    }
+
+    const child = spawn(spawnCommand, spawnArgs, {
       cwd: this._workspaceRoot,
       env,
       stdio: ['ignore', 'pipe', 'pipe'],
       windowsHide: true,
-      shell: needsShell,
+      shell: spawnShell,
     });
 
     const now = new Date().toISOString();
@@ -120,6 +182,7 @@ class AgentSpawner extends EventEmitter {
       retryCount: 0,
       stderr: '',
       events: [],
+      _promptTmpFile: promptTmpFile,
     };
 
     this._agents.set(agentId, agent);
@@ -231,6 +294,9 @@ class AgentSpawner extends EventEmitter {
    */
   _setupCloseHandler(agent) {
     agent.process.on('close', async (code) => {
+      // Clean up prompt temp file if used
+      this._cleanupPromptTmpFile(agent);
+
       // Clear timeout timer if still pending
       if (agent._timeoutTimer) {
         clearTimeout(agent._timeoutTimer);
@@ -274,6 +340,9 @@ class AgentSpawner extends EventEmitter {
 
     // Handle spawn errors (e.g. command not found)
     agent.process.on('error', async (err) => {
+      // Clean up prompt temp file if used
+      this._cleanupPromptTmpFile(agent);
+
       if (agent._timeoutTimer) {
         clearTimeout(agent._timeoutTimer);
         agent._timeoutTimer = null;
@@ -311,6 +380,9 @@ class AgentSpawner extends EventEmitter {
     agent._timeoutTimer = setTimeout(async () => {
       if (agent.status !== 'running') return;
 
+      // Clean up prompt temp file if used
+      this._cleanupPromptTmpFile(agent);
+
       agent.status = 'timeout';
       agent.completedAt = new Date().toISOString();
 
@@ -399,6 +471,23 @@ class AgentSpawner extends EventEmitter {
     }
   }
 
+  /**
+   * Remove the temporary prompt file created for Windows spawns.
+   * Silently ignores errors (file may already be gone).
+   * @param {object} agent
+   * @private
+   */
+  _cleanupPromptTmpFile(agent) {
+    if (agent._promptTmpFile) {
+      try {
+        fs.unlinkSync(agent._promptTmpFile);
+      } catch (_err) {
+        // Ignore — file may already be deleted
+      }
+      agent._promptTmpFile = null;
+    }
+  }
+
   /**
    * Read API key from Codex CLI's native auth file (~/.codex/auth.json).
    * Returns the key string or null if not found.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kiro-spec-engine",
-  "version": "1.45.6",
+  "version": "1.45.7",
   "description": "kiro-spec-engine (kse) - A CLI tool and npm package for spec-driven development with AI coding assistants. NOT the Kiro IDE desktop application.",
   "main": "index.js",
   "bin": {