Continue WIN32 fixes

Author: jdalton

package-lock.json

@@ -105,7 +105,7 @@
     "@socketregistry/is-interactive": "1.0.5",
     "@socketregistry/packageurl-js": "1.0.6",
     "@socketsecurity/config": "2.1.3",
-    "@socketsecurity/registry": "1.0.156",
+    "@socketsecurity/registry": "1.0.157",
     "@socketsecurity/sdk": "1.4.29",
     "@types/blessed": "0.1.25",
     "@types/cmd-shim": "5.0.2",

package.json

@@ -1,11 +1,14 @@
 import { spawn } from '@socketsecurity/registry/lib/spawn'
 
+import constants from '../../constants.mts'
 import { getNpmBinPath } from '../../shadow/npm/paths.mts'
 
 export async function runRawNpm(
   argv: string[] | readonly string[]
 ): Promise<void> {
   const spawnPromise = spawn(getNpmBinPath(), argv as string[], {
+    // Lazily access constants.WIN32.
+    shell: constants.WIN32,
     stdio: 'inherit'
   })
   // See https://nodejs.org/api/all.html#all_child_process_event-exit.

src/commands/raw-npm/run-raw-npm.mts

@@ -1,11 +1,14 @@
 import { spawn } from '@socketsecurity/registry/lib/spawn'
 
+import constants from '../../constants.mts'
 import { getNpxBinPath } from '../../shadow/npm/paths.mts'
 
 export async function runRawNpx(
   argv: string[] | readonly string[]
 ): Promise<void> {
   const spawnPromise = spawn(getNpxBinPath(), argv as string[], {
+    // Lazily access constants.WIN32.
+    shell: constants.WIN32,
     stdio: 'inherit'
   })
   // See https://nodejs.org/api/all.html#all_child_process_event-exit.

src/commands/raw-npx/run-raw-npx.mts

@@ -38,6 +38,8 @@ export function runAgentInstall(
   const skipNodeHardenFlags =
     agent === PNPM && pkgEnvDetails.agentVersion.major < 11
   return spawn(agentExecPath, ['install', ...args], {
+    // Lazily access constants.WIN32.
+    shell: constants.WIN32,
     spinner,
     stdio: 'inherit',
     ...spawnOptions,

src/utils/agent.mts

@@ -3,7 +3,8 @@ import {
   isAuditFlag,
   isFundFlag,
   isLoglevelFlag,
-  isProgressFlag
+  isProgressFlag,
+  realExecPathSync
 } from '@socketsecurity/registry/lib/npm'
 import { isObject } from '@socketsecurity/registry/lib/objects'
 import { spawn } from '@socketsecurity/registry/lib/spawn'
@@ -76,7 +77,7 @@ export function safeNpmInstall(options?: SafeNpmInstallOptions) {
       '--require',
       // Lazily access constants.distShadowNpmInjectPath.
       constants.distShadowNpmInjectPath,
-      agentExecPath,
+      realExecPathSync(agentExecPath),
       'install',
       // Avoid code paths for 'audit' and 'fund'.
       '--no-audit',