From e6857e245e65241307bf51353aab55717156e902 Mon Sep 17 00:00:00 2001
From: Ajax Davis <thomasalwyndavis@gmail.com>
Date: Thu, 15 Jan 2026 03:57:40 +1000
Subject: [PATCH] fix: wrap shell operators in sh -c for sprites-exec v0.1.5

Commands containing shell operators (&&, ||, |, ;, >, etc.) were being
parsed incorrectly, causing errors like "The update command takes no
arguments". Now detects shell operators and wraps the entire command
in `sh -c "..."` for proper execution.
---
 .../tools/official/sprites-exec/package.json  |  2 +-
 .../tools/official/sprites-exec/src/index.ts  | 46 +++++++++++++++++++
 2 files changed, 47 insertions(+), 1 deletion(-)

diff --git a/packages/tools/official/sprites-exec/package.json b/packages/tools/official/sprites-exec/package.json
index ccc204c..e895623 100644
--- a/packages/tools/official/sprites-exec/package.json
+++ b/packages/tools/official/sprites-exec/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@tpmjs/tools-sprites-exec",
-  "version": "0.1.4",
+  "version": "0.1.5",
   "description": "Execute a command inside a sprite and return the output with exit code",
   "type": "module",
   "keywords": [
diff --git a/packages/tools/official/sprites-exec/src/index.ts b/packages/tools/official/sprites-exec/src/index.ts
index 2550790..6f4f7a4 100644
--- a/packages/tools/official/sprites-exec/src/index.ts
+++ b/packages/tools/official/sprites-exec/src/index.ts
@@ -40,11 +40,57 @@ function getSpritesToken(): string {
   return token;
 }
 
+/**
+ * Shell operators that require wrapping the command in sh -c
+ */
+const SHELL_OPERATORS = ['&&', '||', '|', ';', '>', '>>', '<', '<<', '2>', '2>>', '&>', '$(', '`'];
+
+/**
+ * Check if a command string contains shell operators that need sh -c wrapping
+ */
+function needsShellWrapper(cmdString: string): boolean {
+  // Check for shell operators outside of quotes
+  let inSingleQuote = false;
+  let inDoubleQuote = false;
+
+  for (let i = 0; i < cmdString.length; i++) {
+    const char = cmdString[i];
+
+    if (char === "'" && !inDoubleQuote) {
+      inSingleQuote = !inSingleQuote;
+      continue;
+    }
+
+    if (char === '"' && !inSingleQuote) {
+      inDoubleQuote = !inDoubleQuote;
+      continue;
+    }
+
+    // Only check for operators when not inside quotes
+    if (!inSingleQuote && !inDoubleQuote) {
+      for (const op of SHELL_OPERATORS) {
+        if (cmdString.slice(i, i + op.length) === op) {
+          return true;
+        }
+      }
+    }
+  }
+
+  return false;
+}
+
 /**
  * Parse a command string into command and arguments.
  * Handles quoted strings and escapes.
+ * If the command contains shell operators (&&, ||, |, ;, etc.),
+ * wraps it in sh -c to execute properly.
  */
 function parseCommand(cmdString: string): string[] {
+  // If command contains shell operators, wrap in sh -c
+  if (needsShellWrapper(cmdString)) {
+    return ['sh', '-c', cmdString];
+  }
+
   const args: string[] = [];
   let current = '';
   let inSingleQuote = false;