@awak-app/simy-cli 0.5.20 → 0.5.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.5.20",
+  "version": "0.5.21",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.5.20";
+export const CLI_VERSION = "0.5.21";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/desktop-host.js

@@ -1,3 +1,4 @@
+import { createWindowsDesktopUpdater } from "./windows-desktop-updater.js";
 import { spawn, execFile } from "node:child_process";
 import { promisify } from "node:util";
 import { createInterface } from "node:readline";
@@ -70,7 +71,7 @@ export async function startDesktopHost({ input = process.stdin, output = process
     if (!candidate) {
       await (dependencies.assertNoLegacyDaemon || assertNoLegacyCliDaemon)(webOrigin);
     }
-    updater = await (dependencies.createUpdater || createCliAutoUpdater)({
+    updater = await (dependencies.createUpdater || (process.platform === "win32" ? (() => createWindowsDesktopUpdater({ version: packageInfo.version, disabled: env.SIMY_AUTO_UPDATE === "0" })) : createCliAutoUpdater))({
       daemon: true, interactive: true, webOrigin,
       disabled: env.SIMY_AUTO_UPDATE === "0",
       dependencies: { packageInfo, logger() {} },
@@ -194,6 +195,13 @@ function validCandidateStatus(status, version, webOrigin) {
 async function openCodexLogin(root) {
   const codex = await inspectBackendExecutable("codex");
   if (!codex.available || !codex.executable) throw new Error("Codex is not installed.");
+  if (process.platform === "win32") {
+    const child = spawn(join(process.env.SystemRoot || "C:\\Windows", "System32/WindowsPowerShell/v1.0/powershell.exe"),
+      ["-NoProfile", "-NoExit", "-Command", "& $env:SIMY_CODEX_LOGIN login"],
+      { detached: true, stdio: "ignore", windowsHide: false, env: { ...process.env, SIMY_CODEX_LOGIN: codex.executable } });
+    await new Promise((resolve, reject) => { child.once("spawn", resolve); child.once("error", reject); });
+    child.unref(); return;
+  }
   const directory = await mkdtemp(join(root, "codex-login-"));
   const script = join(directory, "Sign in to Codex.command");
   const quote = (s) => `'${s.replaceAll("'", "'\\''")}'`;

package/src/desktop-process-lock.js

@@ -1,5 +1,6 @@
 import { mkdir, readFile, realpath, rm, writeFile, stat } from "node:fs/promises";
-import { basename, dirname, join } from "node:path";
+import { dirname, join } from "node:path";
+import { windowsProcessStart, windowsUserProcesses } from "./windows-processes.js";
 import { randomBytes } from "node:crypto";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
@@ -161,8 +162,8 @@ export async function stopConfirmedCliConflicts(webOrigin, approved, { force = f
 
 export function parseLegacyAgentArguments(args) {
   const argv = Array.isArray(args) ? args : recoverProcessArguments(args);
-  if (argv.length < 2 || !["node", "nodejs"].includes(basename(argv[0]))) return null;
-  const entryIndex = argv.findIndex((value, index) => index > 0 && /(?:^|\/)src\/index\.js$/.test(value));
+  if (argv.length < 2 || !["node", "nodejs", "node.exe", "nodejs.exe"].includes(argv[0].replaceAll("\\", "/").split("/").at(-1).toLowerCase())) return null;
+  const entryIndex = argv.findIndex((value, index) => index > 0 && /(?:^|\/)src\/index\.js$/.test(value.replaceAll("\\", "/")));
   if (entryIndex < 1) return null;
   const agentArgs = argv.slice(entryIndex + 1);
   if (agentArgs.includes("--help") || agentArgs.includes("-h")) return null;
@@ -224,6 +225,7 @@ export async function validateDesktopSupervisor(root, nonce) {
 }
 
 async function processStart(pid) {
+  if (process.platform === "win32") return windowsProcessStart(pid);
   const { stdout } = await promisify(execFile)("/bin/ps", ["-p", String(pid), "-o", "lstart="], { timeout: 2_000 });
   return stdout.trim();
 }
@@ -233,6 +235,7 @@ function processAlive(pid) {
 }
 
 async function listSameUserProcesses() {
+  if (process.platform === "win32") return windowsUserProcesses();
   const uid = process.getuid?.();
   if (!Number.isSafeInteger(uid)) return [];
   const { stdout } = await promisify(execFile)("/bin/ps", ["-ww", "-axo", "pid=,uid=,command="], {

package/src/windows-bootstrap.js

@@ -1,5 +1,6 @@
 import { fileURLToPath } from 'node:url';
 import path from 'node:path';
+import { existsSync } from 'node:fs';
 import { spawn } from 'node:child_process';
 import { maintainWindowsUpdate, selectedWindowsRoot } from './windows-update.js';
 const installation = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '../..');
@@ -18,8 +19,11 @@ try {
 if (updating) {
   if (!process.exitCode) console.log(`SIMY Windows installation ready: ${root}`);
 } else {
-  const child = spawn(path.join(root, 'runtime/node.exe'), [path.join(root, 'cli/src/index.js'), ...argv], {
-    stdio: 'inherit', env: { ...process.env, SIMY_AUTO_UPDATE: '0' },
+  const desktop = argv[0] === '--desktop';
+  if (desktop && !existsSync(path.join(root, 'simy-desktop.exe'))) root = installation;
+  const child = spawn(path.join(root, desktop ? 'simy-desktop.exe' : 'runtime/node.exe'),
+    desktop ? ['--selected'] : [path.join(root, 'cli/src/index.js'), ...argv], {
+    stdio: 'inherit', env: { ...process.env, ...(desktop ? {} : { SIMY_AUTO_UPDATE: '0' }) },
   });
   // Windows console signals are already delivered to both processes.
   process.on('SIGINT', () => {});

package/src/windows-desktop-updater.js

@@ -0,0 +1,39 @@
+import { EventEmitter } from 'node:events';
+import { WINDOWS_MANIFEST_URL, validateWindowsRelease, compareWindowsVersions } from './windows-update.js';
+import { openAuthorizationUrl } from './browser.js';
+
+// Windows selects verified immutable releases at startup. Never replace a live
+// desktop/agent during a task; the UI offers the installer for immediate upgrades.
+export function createWindowsDesktopUpdater({ version, fetchImpl = fetch, open = openAuthorizationUrl, disabled = false }) {
+  const events = new EventEmitter();
+  let timer, initial, release;
+  let state = { state: disabled ? 'disabled' : 'idle', current_version: version, automatic: false, install_mode: 'windows_installer',
+    message: 'Updates are applied when SIMY starts. Check now to download the latest installer.' };
+  const update = values => { state = { ...state, ...values }; events.emit('change'); };
+  let pending;
+  events.snapshot = () => structuredClone(state);
+  events.start = () => {
+    if (disabled || timer) return;
+    initial = setTimeout(() => void events.checkNow(), 15000); initial.unref?.();
+    timer = setInterval(() => void events.checkNow(), 3600000); timer.unref?.();
+  };
+  events.stop = () => { clearTimeout(initial); clearInterval(timer); timer = null; };
+  events.checkNow = () => pending ||= (async () => {
+    update({ state: 'checking', message: 'Checking for updates…' });
+    try {
+      const response = await fetchImpl(WINDOWS_MANIFEST_URL, { signal: AbortSignal.timeout(15000), redirect: 'error' });
+      if (!response.ok) throw new Error('Update service unavailable');
+      release = validateWindowsRelease(await response.json());
+      const newer = compareWindowsVersions(release.version, version) > 0;
+      update({ state: newer ? 'update_available' : 'up_to_date', target_version: newer ? release.version : null,
+        message: newer ? `SIMY ${release.version} is available. Install it after your tasks finish.` : 'SIMY is up to date.',
+        action: newer ? { url: release.artifacts[0].url } : null });
+    } catch { update({ state: 'failed', message: 'Could not check for updates. Try again.', action: null }); }
+    return events.snapshot();
+  })().finally(() => { pending = null; });
+  events.performAction = async () => { if (state.action?.url) await open(state.action.url); else await events.checkNow(); };
+  events.maybeApply = events.performAction;
+  events.beginWork = () => () => {};
+  events.acceptsNewWork = () => true;
+  return events;
+}

package/src/windows-processes.js

@@ -0,0 +1,37 @@
+import { execFile } from 'node:child_process';
+import { promisify } from 'node:util';
+import path from 'node:path';
+const run = promisify(execFile);
+export async function windowsProcessStart(pid) {
+  if (!Number.isSafeInteger(pid) || pid <= 0) throw new Error('Invalid process');
+  const { stdout } = await powershell('(Get-Process -Id ([int]$env:SIMY_INSPECT_PID) -ErrorAction Stop).StartTime.ToUniversalTime().ToString("o")', { SIMY_INSPECT_PID: String(pid) });
+  return stdout.trim();
+}
+export async function windowsUserProcesses() {
+  const { stdout } = await powershell(`$ErrorActionPreference='Stop';$sid=[Security.Principal.WindowsIdentity]::GetCurrent().User.Value;$rows=@(Get-CimInstance Win32_Process -Filter "Name='node.exe' OR Name='nodejs.exe'" | ForEach-Object {$owner=Invoke-CimMethod -InputObject $_ -MethodName GetOwnerSid;if($owner.Sid -eq $sid){@{pid=$_.ProcessId;command=$_.CommandLine}}});ConvertTo-Json -InputObject $rows -Compress`);
+  return JSON.parse(stdout || '[]').map(row => ({ pid: Number(row.pid), args: splitWindowsArguments(row.command || '') }));
+}
+function powershell(script, env = {}) {
+  return run(path.join(process.env.SystemRoot || 'C:\\Windows', 'System32/WindowsPowerShell/v1.0/powershell.exe'),
+    ['-NoProfile', '-NonInteractive', '-Command', script], { timeout: 15000, windowsHide: true, maxBuffer: 2*1024*1024, env: { ...process.env, ...env } });
+}
+// CommandLineToArgvW backslash/quote rules; never shell-unescape Windows paths.
+export function splitWindowsArguments(command) {
+  const result = []; let i = 0;
+  while (i < command.length) {
+    while (/\s/.test(command[i] || '') && i < command.length) i++;
+    if (i === command.length) break;
+    let value = '', quoted = false;
+    while (i < command.length && (quoted || !/\s/.test(command[i]))) {
+      let slashes = 0;
+      while (command[i] === '\\') { slashes++; i++; }
+      if (command[i] === '"') {
+        value += '\\'.repeat(Math.floor(slashes / 2));
+        if (slashes % 2) value += '"'; else quoted = !quoted;
+        i++;
+      } else { value += '\\'.repeat(slashes); if (i < command.length) value += command[i++]; }
+    }
+    result.push(value);
+  }
+  return result;
+}

package/src/windows-update.js

@@ -83,7 +83,7 @@ async function verifyWindowsCandidate(candidate, marker) {
   if (marker?.signed) {
     if (!/^[A-Fa-f0-9]{40}$/.test(marker.thumbprint || '')) throw new Error('Missing trusted signer');
     // Paths are passed through environment values, never inserted into shell source.
-    await exec(powershell(), ['-NoProfile', '-NonInteractive', '-Command', "$ErrorActionPreference='Stop';foreach($file in @('simy.exe','runtime/node.exe')){$s=Get-AuthenticodeSignature (Join-Path $env:SIMY_CANDIDATE $file);if($s.Status -ne 'Valid'){throw 'Invalid signature'};if($file -eq 'simy.exe' -and $s.SignerCertificate.Thumbprint -ne $env:SIMY_SIGNER){throw 'Unexpected signer'}}"], { env: { ...process.env, SIMY_CANDIDATE: candidate, SIMY_SIGNER: marker.thumbprint }, timeout: 30_000, windowsHide: true });
+    await exec(powershell(), ['-NoProfile', '-NonInteractive', '-Command', "$ErrorActionPreference='Stop';foreach($file in @('simy.exe','simy-desktop.exe','runtime/node.exe')){$s=Get-AuthenticodeSignature (Join-Path $env:SIMY_CANDIDATE $file);if($s.Status -ne 'Valid'){throw 'Invalid signature'};if($file -ne 'runtime/node.exe' -and $s.SignerCertificate.Thumbprint -ne $env:SIMY_SIGNER){throw 'Unexpected signer'}}"], { env: { ...process.env, SIMY_CANDIDATE: candidate, SIMY_SIGNER: marker.thumbprint }, timeout: 30_000, windowsHide: true });
   }
   const probeHome = path.join(candidate, '.update-probe');
   try {