fix(desktop): handle quoted paths with spaces in extension commands

[Abhijay007]

closes #6417

PR Description

This PR fixes a bug where extension commands with quoted paths containing spaces were not parsed correctly. The fix replaces simple string splitting with the shell-quote library to properly handle shell quoting.

Type of Change

• Bug fix

AI Assistance

• This PR was created or reviewed with AI assistance

Testing

Screenshots/Demos (for UX changes)

Before:

After:

[Copilot]

Pull request overview

This PR fixes a bug where extension commands with quoted paths containing spaces were not parsed correctly. The fix replaces simple string splitting with the shell-quote library to properly handle shell quoting.

Changes:

• Updated splitCmdAndArgs to use shell-quote.parse() for proper shell-style parsing of commands
• Updated combineCmdAndArgs to use shell-quote.quote() to properly escape arguments
• Added shell-quote and @types/shell-quote dependencies

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated 1 comment.

File	Description
ui/desktop/src/components/settings/extensions/utils.ts	Replaces naive string splitting with shell-quote library for proper handling of quoted paths with spaces
ui/desktop/package.json	Adds shell-quote runtime dependency and type definitions
ui/desktop/package-lock.json	Locks shell-quote dependencies and adjusts peer dependency markers

Files not reviewed (1)

• ui/desktop/package-lock.json: Language not supported

Comments suppressed due to low confidence (1)

ui/desktop/src/components/settings/extensions/utils.ts:186

• Tests should be added to verify the fix for the actual bug - handling quoted paths with spaces (e.g., 'python "/path/with spaces/script.py"' should split into cmd='python' and args=['/path/with spaces/script.py'], and vice versa for combineCmdAndArgs).

export function splitCmdAndArgs(str: string): { cmd: string; args: string[] } {
  const trimmed = str.trim();
  if (!trimmed) {
    return { cmd: '', args: [] };
  }

  const parsed = parseShellQuote(trimmed);
  const words = parsed.filter((item): item is string => typeof item === 'string').map(String);

  const cmd = words[0] || '';
  const args = words.slice(1);

  return {
    cmd,
    args,
  };

[Copilot]

Pull request overview

Copilot reviewed 1 out of 2 changed files in this pull request and generated 3 comments.

Files not reviewed (1)

• ui/desktop/package-lock.json: Language not supported

[Copilot]

Copilot encountered an error and was unable to review this pull request. You can try again by re-requesting a review.