fix(shell): preserve pathname expansion in scripts

Co-authored-by: GPT-5 Codex <codex@openai.com>

Author: RSS1102

CHANGELOG.md

@@ -1,5 +1,6 @@
 # Changelog
 
+- **Fixed** `vp run` now preserves shell pathname expansion in package scripts, so unquoted patterns such as `packages/*/src` expand before they are passed to the underlying command ([#573](https://github.com/voidzero-dev/vite-task/issues/573)).
 - **Fixed** `vp run` no longer hangs or fails when a task leaves a process running behind it, such as a dev server or a background helper, or when one of a task's processes is killed. The run finishes as soon as the task itself does, and the files the task used are still recorded ([#544](https://github.com/voidzero-dev/vite-task/issues/544), [#675](https://github.com/voidzero-dev/vite-task/pull/675)).
 - **Fixed** A task that reads or writes an unusually large number of files now runs to the end instead of being killed partway through. Vite+ reports the run as not cached, because it could not record every file the task used ([#533](https://github.com/voidzero-dev/vite-task/issues/533), [#675](https://github.com/voidzero-dev/vite-task/pull/675)).
 - **Fixed** Vite+ diagnostics now display individual paths and working directories without Rust debug formatting such as quoted paths or escaped Windows backslashes ([#534](https://github.com/voidzero-dev/vite-task/pull/534)).

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/package.json

@@ -0,0 +1,13 @@
+{
+  "name": "package-script-glob",
+  "private": true,
+  "scripts": {
+    "unquoted-glob": "vtt print packages/*/src",
+    "and-glob": "vtt print before && vtt print packages/*/src",
+    "quoted-glob": "vtt print \"packages/*/src\"",
+    "nested-vt-glob": "vt run print-paths prefix packages/*/src",
+    "nested-vt-glob-fails": "vt run fail-with-code packages/*/src",
+    "print-paths": "vtt print",
+    "fail-with-code": "vtt exit 23"
+  }
+}

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/packages/a/src/input.txt

@@ -0,0 +1 @@
+a

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/packages/b/src/input.txt

@@ -0,0 +1 @@
+b

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/snapshots.toml

@@ -0,0 +1,86 @@
+[[e2e]]
+name = "unquoted_glob_expands_on_unix"
+cfg = "unix"
+comment = """
+Unquoted pathname patterns in package scripts are executed by the platform shell, matching package-manager script semantics on Unix.
+"""
+steps = [["vt", "run", "unquoted-glob"]]
+
+[[e2e]]
+name = "unquoted_glob_uses_cmd_semantics_on_windows"
+cfg = "windows"
+comment = """
+Unquoted pathname patterns in package scripts are executed by `cmd.exe` on Windows. Like package-manager scripts, `cmd.exe` leaves the pattern literal.
+"""
+steps = [["vt", "run", "unquoted-glob"]]
+
+[[e2e]]
+name = "unquoted_glob_preserves_extra_args_on_unix"
+cfg = "unix"
+comment = """
+Extra arguments passed to `vt run` are shell-escaped and appended after the package script. Shell operators inside one argument must remain literal after Unix shell expansion.
+"""
+steps = [["vt", "run", "unquoted-glob", "tail && vtt exit 31"]]
+
+[[e2e]]
+name = "unquoted_glob_preserves_extra_args_on_windows"
+cfg = "windows"
+comment = """
+Extra arguments passed to `vt run` are escaped for `cmd.exe` and appended after the package script. Shell operators inside one argument must remain literal.
+"""
+steps = [["vt", "run", "unquoted-glob", "tail && vtt exit 31"]]
+
+[[e2e]]
+name = "and_list_with_glob_uses_one_shell_on_unix"
+cfg = "unix"
+comment = """
+If any command in an `&&` list needs pathname expansion, the complete list is kept intact for the Unix shell so ordering and short-circuit semantics are preserved.
+"""
+steps = [["vt", "run", "and-glob"]]
+
+[[e2e]]
+name = "and_list_with_glob_uses_one_shell_on_windows"
+cfg = "windows"
+comment = """
+If any command in an `&&` list needs shell semantics, the complete list is kept intact for `cmd.exe`, which preserves ordering and leaves the pathname pattern literal.
+"""
+steps = [["vt", "run", "and-glob"]]
+
+[[e2e]]
+name = "quoted_glob_stays_literal"
+comment = """
+Quoted pathname patterns remain literal instead of being expanded.
+"""
+steps = [["vt", "run", "quoted-glob"]]
+
+[[e2e]]
+name = "nested_vt_receives_expanded_glob_on_unix"
+cfg = "unix"
+comment = """
+An unquoted pathname pattern in a package script that invokes nested `vt run` is expanded by the shell before the new `vt` process starts. This verifies PATH lookup and preserves both preceding extra arguments and expanded paths.
+"""
+steps = [["vt", "run", "nested-vt-glob"]]
+
+[[e2e]]
+name = "nested_vt_receives_literal_glob_on_windows"
+cfg = "windows"
+comment = """
+On Windows, `cmd.exe` starts nested `vt run` through PATH and forwards the pattern literally, matching package-manager script semantics while preserving the preceding extra argument.
+"""
+steps = [["vt", "run", "nested-vt-glob"]]
+
+[[e2e]]
+name = "nested_vt_propagates_exit_code_on_unix"
+cfg = "unix"
+comment = """
+The shell fallback used for an unquoted pathname pattern preserves a nested `vt run` failure exit code after Unix shell expansion.
+"""
+steps = [["vt", "run", "nested-vt-glob-fails"]]
+
+[[e2e]]
+name = "nested_vt_propagates_exit_code_on_windows"
+cfg = "windows"
+comment = """
+The shell fallback used for an unquoted pathname pattern preserves a nested `vt run` failure exit code with `cmd.exe` semantics.
+"""
+steps = [["vt", "run", "nested-vt-glob-fails"]]

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/snapshots/and_list_with_glob_uses_one_shell_on_unix.md

@@ -0,0 +1,11 @@
+# and_list_with_glob_uses_one_shell_on_unix
+
+If any command in an `&&` list needs pathname expansion, the complete list is kept intact for the Unix shell so ordering and short-circuit semantics are preserved.
+
+## `vt run and-glob`
+
+```
+$ vtt print before && vtt print packages/*/src ⊘ cache disabled
+before
+packages/a/src packages/b/src
+```

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/snapshots/and_list_with_glob_uses_one_shell_on_windows.md

@@ -0,0 +1,11 @@
+# and_list_with_glob_uses_one_shell_on_windows
+
+If any command in an `&&` list needs shell semantics, the complete list is kept intact for `cmd.exe`, which preserves ordering and leaves the pathname pattern literal.
+
+## `vt run and-glob`
+
+```
+$ vtt print before && vtt print packages/*/src ⊘ cache disabled
+before
+packages/*/src
+```

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/snapshots/nested_vt_propagates_exit_code_on_unix.md

@@ -0,0 +1,12 @@
+# nested_vt_propagates_exit_code_on_unix
+
+The shell fallback used for an unquoted pathname pattern preserves a nested `vt run` failure exit code after Unix shell expansion.
+
+## `vt run nested-vt-glob-fails`
+
+**Exit code:** 23
+
+```
+$ vt run fail-with-code packages/*/src ⊘ cache disabled
+$ vtt exit 23 packages/a/src packages/b/src ⊘ cache disabled
+```

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/snapshots/nested_vt_propagates_exit_code_on_windows.md

@@ -0,0 +1,12 @@
+# nested_vt_propagates_exit_code_on_windows
+
+The shell fallback used for an unquoted pathname pattern preserves a nested `vt run` failure exit code with `cmd.exe` semantics.
+
+## `vt run nested-vt-glob-fails`
+
+**Exit code:** 23
+
+```
+$ vt run fail-with-code packages/*/src ⊘ cache disabled
+$ vtt exit 23 packages/*/src ⊘ cache disabled
+```

crates/vt_bin/tests/e2e_snapshots/fixtures/package_script_glob/snapshots/nested_vt_receives_expanded_glob_on_unix.md

@@ -0,0 +1,11 @@
+# nested_vt_receives_expanded_glob_on_unix
+
+An unquoted pathname pattern in a package script that invokes nested `vt run` is expanded by the shell before the new `vt` process starts. This verifies PATH lookup and preserves both preceding extra arguments and expanded paths.
+
+## `vt run nested-vt-glob`
+
+```
+$ vt run print-paths prefix packages/*/src ⊘ cache disabled
+$ vtt print prefix packages/a/src packages/b/src ⊘ cache disabled
+prefix packages/a/src packages/b/src
+```