Function safeSpawn

src/shared/processes.ts:11–26

(workingDirectory: string | undefined, binPath: string, args: string[], env: Record<string, string | undefined> | undefined)

const simpleCommandRegex = new RegExp("^[\\w\\-.]+$");

export function safeSpawn(workingDirectory: string | undefined, binPath: string, args: string[], env: Record<string, string | undefined> | undefined): SpawnedProcess {
	const customEnv = Object.assign({}, process.env, env);

	// On Windows we need to use shell-execute for running `.bat` files.
	// Try to limit when we use this, because terminating a shell might not terminate
	// the spawned process, so not using shell-execute may improve reliability of
	// terminating processes.
	if (isWin && binPath.endsWith(".bat")) {
		const quotedArgs = args.map(quoteAndEscapeArg);
		// Putting quotes around something like "git" will cause it to fail, so don't do it if binPath is just a single identifier.
		binPath = simpleCommandRegex.test(binPath) ? binPath : `"${binPath}"`;
		return child_process.spawn(binPath, quotedArgs, { cwd: workingDirectory, env: customEnv, shell: true }) satisfies SpawnedProcess;
	}

	return child_process.spawn(binPath, args, { cwd: workingDirectory, env: customEnv }) satisfies SpawnedProcess;
}

function quoteAndEscapeArg(arg: string) {
	// Spawning processes on Windows with funny symbols in the path requires quoting. However if you quote an