@agentteams/runner 0.0.106 → 0.0.108

package/dist/windows-launcher.js

@@ -0,0 +1,114 @@
+import { createHash } from 'node:crypto';
+import { promises as fs } from 'node:fs';
+import { homedir, platform, arch, release } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+// Matches both installed launchers and the `<target>.<pid>.tmp` staging files an
+// interrupted install can leave behind.
+const INSTALLED_LAUNCHER_PATTERN = /^agentrunner-launcher-.+\.exe(\.\d+\.tmp)?$/u;
+// `keepFileName` is the launcher the caller just verified; every other copy is a
+// superseded version. Uninstall passes nothing so the directory is emptied.
+export const cleanupInstalledWindowsLaunchers = async (deps = {}) => {
+    const installDir = join(deps.homeDir ?? homedir(), '.agentteams', 'bin');
+    let entries;
+    try {
+        entries = await (deps.readdir ?? fs.readdir)(installDir);
+    }
+    catch {
+        return;
+    }
+    await Promise.all(entries
+        .filter((entry) => INSTALLED_LAUNCHER_PATTERN.test(entry) && entry !== deps.keepFileName)
+        .map(async (entry) => {
+        try {
+            await (deps.unlink ?? fs.unlink)(join(installDir, entry));
+        }
+        catch {
+            // A launcher still referenced by a live process remains for the next cleanup.
+        }
+    }));
+};
+const sha256 = (value) => createHash('sha256').update(value).digest('hex');
+const assertSupportedWindows = (os, cpu, osRelease) => {
+    if (os !== 'win32') {
+        throw new Error('The native AgentRunner launcher can only be installed on Windows.');
+    }
+    if (cpu === 'x64') {
+        return;
+    }
+    const windowsBuild = Number.parseInt(osRelease.split('.')[2] ?? '0', 10);
+    if (cpu === 'arm64' && windowsBuild >= 22_000) {
+        return;
+    }
+    throw new Error(`Unsupported Windows architecture '${cpu}' (${osRelease}). ` +
+        'Use Windows x64 or Windows 11 ARM64 with x64 emulation.');
+};
+const parseManifest = (raw, packageVersion) => {
+    const value = JSON.parse(raw);
+    if (value.schemaVersion !== 1 ||
+        value.platform !== 'win32' ||
+        value.arch !== 'x64' ||
+        value.fileName !== 'agentrunner-launcher.exe' ||
+        value.version !== packageVersion ||
+        !/^[a-f0-9]{64}$/u.test(value.sha256 ?? '')) {
+        throw new Error('The packaged Windows launcher manifest is invalid or does not match the Runner version.');
+    }
+    return value;
+};
+export const installWindowsLauncher = async (deps = {}) => {
+    assertSupportedWindows(deps.platform ?? platform(), deps.arch ?? arch(), deps.release ?? release());
+    const readFile = deps.readFile ?? fs.readFile;
+    const packageRoot = deps.packageRoot ?? dirname(dirname(fileURLToPath(import.meta.url)));
+    const nativeDir = join(packageRoot, 'native', 'bin', 'win32-x64');
+    const packageJson = JSON.parse(await readFile(join(packageRoot, 'package.json'), 'utf8'));
+    if (!packageJson.version) {
+        throw new Error('Cannot determine the installed AgentRunner package version.');
+    }
+    const manifest = parseManifest(await readFile(join(nativeDir, 'manifest.json'), 'utf8'), packageJson.version);
+    const sourcePath = join(nativeDir, manifest.fileName);
+    const sourceBytes = await readFile(sourcePath);
+    if (sha256(sourceBytes) !== manifest.sha256) {
+        throw new Error('The packaged Windows launcher failed SHA-256 verification. Reinstall @agentteams/runner.');
+    }
+    const installDir = join(deps.homeDir ?? homedir(), '.agentteams', 'bin');
+    const targetFileName = `agentrunner-launcher-${manifest.version}-${manifest.sha256.slice(0, 12)}.exe`;
+    const targetPath = join(installDir, targetFileName);
+    // Every upgrade installs under a new content-addressed name, so prune the
+    // superseded copies here — uninstall is far too late to be the only sweep.
+    const pruneSupersededLaunchers = async () => {
+        await cleanupInstalledWindowsLaunchers({ ...deps, keepFileName: targetFileName });
+    };
+    await (deps.mkdir ?? fs.mkdir)(installDir, { recursive: true });
+    try {
+        const existingBytes = await readFile(targetPath);
+        if (sha256(existingBytes) === manifest.sha256) {
+            await pruneSupersededLaunchers();
+            return targetPath;
+        }
+        throw new Error(`Existing immutable launcher has unexpected contents: ${targetPath}`);
+    }
+    catch (error) {
+        if (error.code !== 'ENOENT') {
+            throw error;
+        }
+    }
+    const temporaryPath = `${targetPath}.${process.pid}.tmp`;
+    await (deps.copyFile ?? fs.copyFile)(sourcePath, temporaryPath);
+    const copiedBytes = await readFile(temporaryPath);
+    if (sha256(copiedBytes) !== manifest.sha256) {
+        await (deps.unlink ?? fs.unlink)(temporaryPath).catch(() => undefined);
+        throw new Error('The installed Windows launcher failed SHA-256 verification.');
+    }
+    try {
+        await (deps.rename ?? fs.rename)(temporaryPath, targetPath);
+    }
+    catch (error) {
+        await (deps.unlink ?? fs.unlink)(temporaryPath).catch(() => undefined);
+        if (error.code !== 'EEXIST') {
+            throw error;
+        }
+    }
+    await pruneSupersededLaunchers();
+    return targetPath;
+};
+//# sourceMappingURL=windows-launcher.js.map

package/dist/windows-launcher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-launcher.js","sourceRoot":"","sources":["../src/windows-launcher.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAyBzC,iFAAiF;AACjF,wCAAwC;AACxC,MAAM,0BAA0B,GAAG,8CAA8C,CAAC;AAElF,iFAAiF;AACjF,4EAA4E;AAC5E,MAAM,CAAC,MAAM,gCAAgC,GAAG,KAAK,EACnD,OAAwD,EAAE,EAC3C,EAAE;IACjB,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACzE,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,UAAU,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IACD,MAAM,OAAO,CAAC,GAAG,CACf,OAAO;SACJ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,0BAA0B,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,YAAY,CAAC;SACxF,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACnB,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5D,CAAC;QAAC,MAAM,CAAC;YACP,8EAA8E;QAChF,CAAC;IACH,CAAC,CAAC,CACL,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAE3F,MAAM,sBAAsB,GAAG,CAAC,EAAU,EAAE,GAAW,EAAE,SAAiB,EAAQ,EAAE;IAClF,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;QAClB,OAAO;IACT,CAAC;IACD,MAAM,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,GAAG,KAAK,OAAO,IAAI,YAAY,IAAI,MAAM,EAAE,CAAC;QAC9C,OAAO;IACT,CAAC;IACD,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,MAAM,SAAS,KAAK;QAC1D,yDAAyD,CAC5D,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,cAAsB,EAA2B,EAAE;IACrF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAqC,CAAC;IAClE,IACE,KAAK,CAAC,aAAa,KAAK,CAAC;QACzB,KAAK,CAAC,QAAQ,KAAK,OAAO;QAC1B,KAAK,CAAC,IAAI,KAAK,KAAK;QACpB,KAAK,CAAC,QAAQ,KAAK,0BAA0B;QAC7C,KAAK,CAAC,OAAO,KAAK,cAAc;QAChC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC,EAC3C,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,yFAAyF,CAAC,CAAC;IAC7G,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EAAE,OAA4B,EAAE,EAAmB,EAAE;IAC9F,sBAAsB,CAAC,IAAI,CAAC,QAAQ,IAAI,QAAQ,EAAE,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,CAAC,CAAC;IACpG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,CAAC;IAClE,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;IAClH,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,MAAM,QAAQ,GAAG,aAAa,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,EAAE,MAAM,CAAC,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC;IAC9G,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;IAC/C,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0FAA0F,CAAC,CAAC;IAC9G,CAAC;IAED,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACzE,MAAM,cAAc,GAAG,wBAAwB,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;IACtG,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;IACpD,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,wBAAwB,GAAG,KAAK,IAAmB,EAAE;QACzD,MAAM,gCAAgC,CAAC,EAAE,GAAG,IAAI,EAAE,YAAY,EAAE,cAAc,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IACF,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjD,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YAC9C,MAAM,wBAAwB,EAAE,CAAC;YACjC,OAAO,UAAU,CAAC;QACpB,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,wDAAwD,UAAU,EAAE,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,UAAU,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACzD,MAAM,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;IAChE,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,MAAM,CAAC,WAAW,CAAC,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,UAAU,CAAC,CAAC;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACvE,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,MAAM,wBAAwB,EAAE,CAAC;IACjC,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC"}

package/dist/windows-launcher.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/windows-launcher.test.js

@@ -0,0 +1,150 @@
+import assert from 'node:assert/strict';
+import { createHash } from 'node:crypto';
+import { join } from 'node:path';
+import test from 'node:test';
+import { cleanupInstalledWindowsLaunchers, installWindowsLauncher } from './windows-launcher.js';
+const hash = (value) => createHash('sha256').update(value).digest('hex');
+test('installWindowsLauncher validates and installs a content-addressed immutable launcher', async () => {
+    const binary = Buffer.from('native launcher');
+    const packageRoot = join('test-root', 'pkg');
+    const files = new Map();
+    files.set(join(packageRoot, 'package.json'), Buffer.from(JSON.stringify({ version: '1.2.3' })));
+    files.set(join(packageRoot, 'native', 'bin', 'win32-x64', 'manifest.json'), Buffer.from(JSON.stringify({
+        schemaVersion: 1,
+        version: '1.2.3',
+        platform: 'win32',
+        arch: 'x64',
+        fileName: 'agentrunner-launcher.exe',
+        sha256: hash(binary),
+    })));
+    files.set(join(packageRoot, 'native', 'bin', 'win32-x64', 'agentrunner-launcher.exe'), binary);
+    const copied = [];
+    const result = await installWindowsLauncher({
+        packageRoot,
+        homeDir: join('test-root', 'home'),
+        platform: 'win32',
+        arch: 'x64',
+        release: '10.0.26100',
+        readFile: (async (path) => {
+            const value = files.get(path);
+            if (!value) {
+                const error = new Error('missing');
+                error.code = 'ENOENT';
+                throw error;
+            }
+            return value;
+        }),
+        mkdir: async () => undefined,
+        copyFile: async (source, destination) => {
+            copied.push(String(destination));
+            files.set(String(destination), files.get(String(source)));
+        },
+        rename: async (source, destination) => {
+            files.set(String(destination), files.get(String(source)));
+            files.delete(String(source));
+        },
+    });
+    assert.match(result, /agentrunner-launcher-1\.2\.3-[a-f0-9]{12}\.exe$/u);
+    assert.equal(copied.length, 1);
+});
+test('installWindowsLauncher prunes superseded launchers and interrupted temp files', async () => {
+    const binary = Buffer.from('native launcher');
+    const packageRoot = join('test-root', 'pkg');
+    const homeDir = join('test-root', 'home');
+    const installDir = join(homeDir, '.agentteams', 'bin');
+    const digest = hash(binary);
+    const targetFileName = `agentrunner-launcher-1.2.3-${digest.slice(0, 12)}.exe`;
+    const files = new Map();
+    files.set(join(packageRoot, 'package.json'), Buffer.from(JSON.stringify({ version: '1.2.3' })));
+    files.set(join(packageRoot, 'native', 'bin', 'win32-x64', 'manifest.json'), Buffer.from(JSON.stringify({
+        schemaVersion: 1,
+        version: '1.2.3',
+        platform: 'win32',
+        arch: 'x64',
+        fileName: 'agentrunner-launcher.exe',
+        sha256: digest,
+    })));
+    files.set(join(packageRoot, 'native', 'bin', 'win32-x64', 'agentrunner-launcher.exe'), binary);
+    // The target already exists and verifies, so this exercises the early return —
+    // the path an unchanged runner takes on every single restart.
+    files.set(join(installDir, targetFileName), binary);
+    const unlinked = [];
+    const result = await installWindowsLauncher({
+        packageRoot,
+        homeDir,
+        platform: 'win32',
+        arch: 'x64',
+        release: '10.0.26100',
+        readFile: (async (path) => {
+            const value = files.get(path);
+            if (!value) {
+                const error = new Error('missing');
+                error.code = 'ENOENT';
+                throw error;
+            }
+            return value;
+        }),
+        mkdir: async () => undefined,
+        readdir: (async () => [
+            targetFileName,
+            'agentrunner-launcher-1.2.2-0123456789ab.exe',
+            `${targetFileName}.4242.tmp`,
+            'daemon.json',
+        ]),
+        unlink: (async (path) => {
+            unlinked.push(String(path));
+        }),
+    });
+    assert.equal(result, join(installDir, targetFileName));
+    assert.deepEqual(unlinked.sort(), [
+        join(installDir, `${targetFileName}.4242.tmp`),
+        join(installDir, 'agentrunner-launcher-1.2.2-0123456789ab.exe'),
+    ].sort());
+});
+test('cleanupInstalledWindowsLaunchers removes every launcher and temp file but leaves unrelated files', async () => {
+    const homeDir = join('test-root', 'home');
+    const installDir = join(homeDir, '.agentteams', 'bin');
+    const unlinked = [];
+    await cleanupInstalledWindowsLaunchers({
+        homeDir,
+        readdir: (async () => [
+            'agentrunner-launcher-1.2.3-0123456789ab.exe',
+            'agentrunner-launcher-1.2.3-0123456789ab.exe.777.tmp',
+            'daemon.json',
+            'agentrunner.log',
+        ]),
+        unlink: (async (path) => {
+            unlinked.push(String(path));
+        }),
+    });
+    assert.deepEqual(unlinked.sort(), [
+        join(installDir, 'agentrunner-launcher-1.2.3-0123456789ab.exe'),
+        join(installDir, 'agentrunner-launcher-1.2.3-0123456789ab.exe.777.tmp'),
+    ]);
+});
+test('installWindowsLauncher fails closed on hash mismatch and unsupported architecture', async () => {
+    const readFile = (async (path) => {
+        if (path.endsWith('package.json'))
+            return Buffer.from(JSON.stringify({ version: '1.2.3' }));
+        if (path.endsWith('manifest.json')) {
+            return Buffer.from(JSON.stringify({
+                schemaVersion: 1,
+                version: '1.2.3',
+                platform: 'win32',
+                arch: 'x64',
+                fileName: 'agentrunner-launcher.exe',
+                sha256: '0'.repeat(64),
+            }));
+        }
+        return Buffer.from('tampered');
+    });
+    await assert.rejects(installWindowsLauncher({ packageRoot: 'C:\\pkg', platform: 'win32', arch: 'x64', readFile }), /SHA-256/u);
+    await assert.rejects(installWindowsLauncher({
+        packageRoot: 'C:\\pkg',
+        platform: 'win32',
+        arch: 'arm64',
+        release: '10.0.19045',
+        readFile,
+    }), /Unsupported Windows architecture/u);
+});
+//# sourceMappingURL=windows-launcher.test.js.map

package/dist/windows-launcher.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-launcher.test.js","sourceRoot":"","sources":["../src/windows-launcher.test.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,oBAAoB,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gCAAgC,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEjG,MAAM,IAAI,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAEzF,IAAI,CAAC,sFAAsF,EAAE,KAAK,IAAI,EAAE;IACtG,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,KAAK,CAAC,GAAG,CACP,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,CAAC,EAChE,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;KACrB,CAAC,CACH,CACF,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,WAAW;QACX,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC;QAClC,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,CAA0B,CAAC;gBAC5D,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAA+C;QAChD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;YACtC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC;YACjC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAE,CAAC,CAAC;QAC7D,CAAC;QACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE;YACpC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAE,CAAC,CAAC;YAC3D,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;QAC/B,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,kDAAkD,CAAC,CAAC;IACzE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;AACjC,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,+EAA+E,EAAE,KAAK,IAAI,EAAE;IAC/F,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9C,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC;IAC7C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,MAAM,cAAc,GAAG,8BAA8B,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC;IAC/E,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;IAChG,KAAK,CAAC,GAAG,CACP,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,eAAe,CAAC,EAChE,MAAM,CAAC,IAAI,CACT,IAAI,CAAC,SAAS,CAAC;QACb,aAAa,EAAE,CAAC;QAChB,OAAO,EAAE,OAAO;QAChB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;QACX,QAAQ,EAAE,0BAA0B;QACpC,MAAM,EAAE,MAAM;KACf,CAAC,CACH,CACF,CAAC;IACF,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,0BAA0B,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/F,+EAA+E;IAC/E,8DAA8D;IAC9D,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC;QAC1C,WAAW;QACX,OAAO;QACP,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,YAAY;QACrB,QAAQ,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YAChC,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC9B,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,SAAS,CAA0B,CAAC;gBAC5D,KAAK,CAAC,IAAI,GAAG,QAAQ,CAAC;gBACtB,MAAM,KAAK,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC,CAA+C;QAChD,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,SAAS;QAC5B,OAAO,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACpB,cAAc;YACd,6CAA6C;YAC7C,GAAG,cAAc,WAAW;YAC5B,aAAa;SACd,CAAyD;QAC1D,MAAM,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YAC9B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC,CAA6C;KAC/C,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IACvD,MAAM,CAAC,SAAS,CACd,QAAQ,CAAC,IAAI,EAAE,EACf;QACE,IAAI,CAAC,UAAU,EAAE,GAAG,cAAc,WAAW,CAAC;QAC9C,IAAI,CAAC,UAAU,EAAE,6CAA6C,CAAC;KAChE,CAAC,IAAI,EAAE,CACT,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,kGAAkG,EAAE,KAAK,IAAI,EAAE;IAClH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,MAAM,gCAAgC,CAAC;QACrC,OAAO;QACP,OAAO,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC;YACpB,6CAA6C;YAC7C,qDAAqD;YACrD,aAAa;YACb,iBAAiB;SAClB,CAAyD;QAC1D,MAAM,EAAE,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;YAC9B,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,CAAC,CAA6C;KAC/C,CAAC,CAAC;IAEH,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE;QAChC,IAAI,CAAC,UAAU,EAAE,6CAA6C,CAAC;QAC/D,IAAI,CAAC,UAAU,EAAE,qDAAqD,CAAC;KACxE,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAI,CAAC,mFAAmF,EAAE,KAAK,IAAI,EAAE;IACnG,MAAM,QAAQ,GAAG,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;QACvC,IAAI,IAAI,CAAC,QAAQ,CAAC,cAAc,CAAC;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;YACnC,OAAO,MAAM,CAAC,IAAI,CAChB,IAAI,CAAC,SAAS,CAAC;gBACb,aAAa,EAAE,CAAC;gBAChB,OAAO,EAAE,OAAO;gBAChB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,KAAK;gBACX,QAAQ,EAAE,0BAA0B;gBACpC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;aACvB,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACjC,CAAC,CAA+C,CAAC;IAEjD,MAAM,MAAM,CAAC,OAAO,CAClB,sBAAsB,CAAC,EAAE,WAAW,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAC5F,UAAU,CACX,CAAC;IACF,MAAM,MAAM,CAAC,OAAO,CAClB,sBAAsB,CAAC;QACrB,WAAW,EAAE,SAAS;QACtB,QAAQ,EAAE,OAAO;QACjB,IAAI,EAAE,OAAO;QACb,OAAO,EAAE,YAAY;QACrB,QAAQ;KACT,CAAC,EACF,mCAAmC,CACpC,CAAC;AACJ,CAAC,CAAC,CAAC"}

package/native/bin/win32-x64/manifest.json

@@ -0,0 +1,8 @@
+{
+  "schemaVersion": 1,
+  "version": "0.0.108",
+  "platform": "win32",
+  "arch": "x64",
+  "fileName": "agentrunner-launcher.exe",
+  "sha256": "2ef268526b0a99a9006280b3893400af124074779d28760d8d91a3f003cea5e2"
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentteams/runner",
-  "version": "0.0.106",
+  "version": "0.0.108",
   "description": "AgentRunner - Background runner that polls and executes AI agent tasks",
   "type": "module",
   "main": "dist/index.js",
@@ -9,10 +9,13 @@
   },
   "files": [
     "dist/**/*",
+    "native/bin/**/*",
     "readme.md"
   ],
   "scripts": {
     "build": "node -e \"require('node:fs').rmSync('dist',{recursive:true,force:true})\" && tsc",
+    "build:native:win": "powershell -NoProfile -ExecutionPolicy Bypass -File native/win/build.ps1",
+    "test:native:win": "powershell -NoProfile -ExecutionPolicy Bypass -File native/win/smoke.ps1",
     "typecheck": "tsc --noEmit",
     "dev": "tsx watch src/index.ts",
     "test": "tsx --test \"src/**/*.test.ts\"",
@@ -22,7 +25,8 @@
     "format:check": "prettier --check .",
     "start": "node dist/index.js",
     "init": "node dist/index.js init",
-    "prepublishOnly": "npm run build"
+    "verify:native:win": "node native/win/verify-package.mjs .",
+    "prepublishOnly": "pnpm run build && pnpm run verify:native:win"
   },
   "publishConfig": {
     "access": "public"

package/readme.md

@@ -176,6 +176,26 @@ If a process is already running for the same `agentConfigId`, new triggers are `
 
 ### Windows recovery checks
 
+Windows Task Scheduler uses a signed or explicitly unsigned native GUI launcher
+instead of starting `powershell.exe` directly. The launcher is integrity-checked
+and installed under
+`%USERPROFILE%\.agentteams\bin\agentrunner-launcher-<version>-<sha12>.exe`.
+Legacy tasks migrate during restart — both `agentrunner restart` and a restart
+requested from the web UI (the path `agentrunner update` takes) re-register the
+task whenever the live definition still points at a console-bound action. The
+runner also checks the definition during startup and repairs it without
+restarting the current process. That startup repair takes effect the next time
+the runner starts. Use `agentrunner status` to see whether a legacy action is
+still pending, or run `agentrunner restart` to migrate and apply the native
+launcher immediately. The migration never deletes the previous registration
+first; a failed migration restores the prior task XML from an exported backup.
+
+Windows x64 and Windows 11 ARM64 (through x64 emulation) are supported. Windows
+10 ARM64 is not supported and fails closed instead of falling back to a visible
+PowerShell process. Because the scheduled task points at the content-addressed
+user copy, a running Runner does not lock the executable inside the npm package
+during a global update.
+
 The `AgentRunner` scheduled task ignores duplicate starts and retries failed exits up to three times at one-minute intervals. Inspect it and follow the append-only daemon log with:
 
 ```powershell
@@ -185,7 +205,7 @@ Get-Content "$env:USERPROFILE\.agentteams\agentrunner.log" -Wait
 
 For a release smoke test on a disposable Windows test machine:
 
-1. Run `agentrunner restart` and verify the scheduled task gets a new runner PID without opening a console window.
+1. Run `agentrunner restart`, query `schtasks /Query /TN "AgentRunner" /XML`, and verify the action points at `agentrunner-launcher-*.exe`, the task gets one new runner PID, and no console window appears.
 2. End the runner process unexpectedly and verify Task Scheduler starts it again after the configured delay.
 3. Disconnect and reconnect the network, or suspend and resume Windows. API requests that remain stalled are aborted after 30 seconds and retried; verify a later poll attempt or successful poll appears in the log.
 4. Run `agentrunner status`, then `agentrunner stop`. Verify the current task instance stops and does not immediately respawn.