Function runHeadlessTask

src/workspaces/headless-task.ts:149–270

(args: HeadlessTaskArgs)

}

export async function runHeadlessTask(args: HeadlessTaskArgs): Promise<HeadlessTaskResult> {
  const { command, cwd, env, timeoutMs, logger } = args;
  const [argv0] = command;
  if (!argv0) throw new Error('headless: empty command');

  const start = Date.now();
  let exitCode: number | null = null;
  let signal: NodeJS.Signals | null = null;
  let killed = false;
  let agentSessionId: string | null = null;
  const outSink = makeTailSink(OUTPUT_TAIL_BYTES);
  const errSink = makeTailSink(OUTPUT_TAIL_BYTES);
  const scanner = args.extractSessionId
    ? makeSessionIdScanner(args.extractSessionId, (id) => {
        agentSessionId = id;
        logger.info('headless.session_id_captured', { agentSessionId: id });
        args.onSessionId?.(id);
      })
    : null;
  // win32: resolve the bare CLI name against PATH × PATHEXT. Native-exe agents
  // (claude.exe, codex.exe) resolve to a direct path and run headless fine. But
  // npm-shim agents (opencode, pi → a `.cmd`) would have to run through cmd.exe,
  // and the headless PROMPT is the trailing arg — routing it through cmd.exe
  // re-parses shell metacharacters (CVE-2024-27980 territory), a real injection
  // surface. So shim agents stay headless-unsupported on Windows; we fail with a
  // clear, recorded reason instead of a silent ENOENT. (Interactive launch of
  // the same agents works — see win-command.ts / persistent-session.ts.)
  const resolved = resolveLaunchCommand(command, { env });
  if (resolved.viaShell) {
    logger.error('headless.win32_shim_unsupported', { command: argv0 });
    return {
      command,
      cwd,
      exitCode: -1,
      signal: null,
      killed: false,
      durationMs: Date.now() - start,
      stdoutTail: '',
      stderrTail:
        `win32: "${argv0}" is an npm .cmd shim; headless dispatch is unsupported ` +
        `on Windows (routing the task prompt through cmd.exe is a shell-injection ` +
        `surface). Native-exe agents (claude, codex) run headless; run shim agents ` +
        `(opencode, pi) interactively instead.`,
      agentSessionId: null,
    };
  }
  const [spawnFile, ...spawnArgs] = resolved.argv;
  if (!spawnFile) throw new Error('headless: empty command after resolution');
  const outFile = args.stdoutFile ? await openLogStream(args.stdoutFile, logger, 'stdout') : null;
  const errFile = args.stderrFile ? await openLogStream(args.stderrFile, logger, 'stderr') : null;
  const child = spawn(spawnFile, spawnArgs, {
    cwd,
    env: env as NodeJS.ProcessEnv,
    stdio: ['ignore', 'pipe', 'pipe'],
  });
  child.stdout?.on('data', (d: Buffer) => {
    outSink.push(d);
    scanner?.push(d);