@awak-app/simy-cli 0.6.1 → 0.6.2

package/README.md

@@ -104,6 +104,10 @@ Detached daemon and desktop-host diagnostics are saved to
 (`SIMY_HOME` defaults to `~/.simy`). Each log is limited to 1 MiB plus two
 backups; credentials, Cookie headers and URL queries are redacted. Installer
 handoff diagnostics remain in `~/.simy/installer/desktop-update.log`.
+The macOS window also saves the latest nonzero background-host exit in
+`$SIMY_HOME/logs/desktop-host-exit.log`, including its timestamp, exit status and
+up to 16 KiB of stderr. Credential-bearing lines are omitted; each abnormal exit
+replaces the previous record. This includes failures before JavaScript starts.
 `simy --version` or `simy -v` prints the package version without starting work.
 
 Closing the window keeps the agent running. Open the app again or choose
@@ -188,6 +192,16 @@ checks the bundled CLI in ChatGPT and Codex apps in system and user Applications
 Claude discovery likewise falls back to a compatible native or Desktop bundle
 when an older PATH installation cannot meet its version requirement.
 
+On macOS and Linux, the desktop host reads the user's interactive login-shell
+PATH once at startup, so providers installed through nvm, Volta or custom prefixes
+can be found from GUI launches, including Finder or the Dock on macOS. Shell paths
+take priority; existing launcher paths remain available. If the five-second shell
+probe cannot read PATH, startup uses the launcher PATH. Windows keeps its existing PATH.
+
+Installed Codex and Claude hooks use an absolute Node runtime path. When available,
+the SIMY installer's `current` link or Homebrew's `opt` link replaces a versioned
+runtime path, allowing hooks to follow updates without relying on the provider's PATH.
+
 Use `simy delivery activity --watch` for a read-only local snapshot every minute,
 or add `--json` for one JSON object per sample. It separates execution, waits,
 stops, failures and repeated attempts without new verified outcomes, with task

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@awak-app/simy-cli",
-  "version": "0.6.1",
+  "version": "0.6.2",
   "description": "Local SIMY executor for non-coding Local Tasks and Agentic Loop runs.",
   "type": "module",
   "bin": {
@@ -43,7 +43,7 @@
     "check:workflow-observation-sender": "node --check ./src/workflow-observation-sender.js",
     "check:sqm": "node --check ./src/sqm/canonical.js && node --check ./src/sqm/validation.js && node --check ./src/sqm/reliability.js && node --check ./src/sqm/repository.js && node --check ./src/sqm/checkers.js && node --check ./src/sqm/bundle-store.js && node --check ./src/sqm/proof.js && node --check ./src/sqm/evidence-client.js && node --check ./src/sqm/session.js && node --check ./src/sqm/index.js && node --check ./src/sqm/command.js && node --check ./src/sqm/agent-skill.js && node --check ./src/sqm/workflow-onboarding.js && node --check ./src/sqm/workflow-update.js && node --check ./src/sqm/history-store.js && node --check ./src/sqm/review-worker.js && node --check ./scripts/sqm-complete-loop-e2e.js && node --check ./scripts/sqm-local-review-e2e.js",
     "check:real-provider-syntax": "node --check ./scripts/real-codex-probe.js && node --check ./scripts/real-claude-probe.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/claude-parity-runtime-e2e.js && node --check ./scripts/claude-plugin-runtime-e2e.js",
-    "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js",
+    "check:syntax": "node --check ./src/purpose-local-proof.js && node --check ./src/device-signing-identity.js && node --check ./src/index.js && node --check ./src/install-update.js && node --check ./src/agent.js && node --check ./src/connection-discovery.js && node --check ./src/codex-plugins/simy/hooks/connection-reminder.mjs && node --check ./src/codex-plugins/simy/hooks/dev-work.mjs && node --check ./src/dev-work-events.js && node --check ./src/browser.js && node --check ./src/web-api.js && node --check ./src/durable-local-task-worker.js && node --check ./src/durable-local-task-steps-contract.js && node --check ./src/bounded-local-task-subtasks-contract.js && node --check ./src/bounded-local-task-subtask-pool.js && node --check ./src/local-task-artifact-contract.js && node --check ./src/execution-capability-contract.js && node --check ./src/shutdown.js && node --check ./src/run-registry.js && node --check ./src/direct-executor.js && node --check ./src/execution-guardrail.js && node --check ./src/backend-executable.js && node --check ./src/login-shell-path.js && node --check ./src/hook-runtime.js && node --check ./src/provider-stream.js && node --check ./src/console/index.js && node --check ./src/console/app.js && node --check ./src/console/commands.js && node --check ./src/local-attachments.js && node --check ./src/repository-inventory.js && node --check ./src/session-store.js && node --check ./src/web-origin.js && node --check ./src/workspace-context.js && node --check ./src/orchestrator/index.js && node --check ./src/orchestrator/shared.js && node --check ./src/orchestrator/recovery.js && node --check ./src/orchestrator/risk.js && node --check ./src/orchestrator/contract.js && node --check ./src/orchestrator/completion-contract.js && node --check ./src/orchestrator/pr-preparation.js && node --check ./src/orchestrator/minimum-completion.js && node --check ./src/orchestrator/delivery/scripts/check-minimum-completion.mjs && node --check ./src/orchestrator/instruction.js && node --check ./src/orchestrator/problem-solving.js && node --check ./src/orchestrator/budget.js && node --check ./src/orchestrator/execution-io.js && node --check ./src/orchestrator/presentation.js && node --check ./src/orchestrator/result.js && node --check ./src/orchestrator/retry.js && node --check ./src/orchestrator/evidence.js && node --check ./src/orchestrator/independent-audit.js && node --check ./src/orchestrator/audit.js && node --check ./src/orchestrator/loop.js && node --check ./src/runner.js && node --check ./src/coding-run-store.js && node --check ./scripts/fixtures/completion-contract-fixture.js && node --check ./scripts/fixtures/fake-coding-backend.js && node --check ./scripts/e2e-terminal-evidence.js && node --check ./scripts/audit-gate-e2e.js && node --check ./scripts/completion-contract-e2e.js && node --check ./scripts/retry-circuit-e2e.js && node --check ./scripts/follow-up-charter-e2e.js && node --check ./scripts/task-routing-e2e.js && node --check ./scripts/executor-version-preflight-e2e.js && node --check ./scripts/blocked-recovery-e2e.js && node --check ./scripts/process-localization-e2e.js && node --check ./scripts/hypothesis-retries-e2e.js && node --check ./scripts/budget-enforcement-e2e.js && node --check ./scripts/local-task-default-workspace-e2e.js && node --check ./scripts/local-task-idempotency-e2e.js && node --check ./scripts/console-e2e-fixture.js && node --check ./scripts/console-e2e.js && node --check ./scripts/console-recovery-e2e-fixture.js && node --check ./scripts/console-recovery-e2e.js && node --check ./scripts/real-provider-console-fixture.js && node --check ./scripts/real-provider-console-e2e.js && node --check ./scripts/fullstack-cli-smoke.js && node --check ./scripts/check-package-contents.js && node --check ./src/codex-plugins/simy/hooks/delivery-loop.mjs && node --check ./src/delivery-hooks/command.js && node --check ./src/delivery-hooks/desktop.js && node --check ./src/delivery-hooks/supervisor.js && node --check ./src/session-supervision/automatic-continuation.js",
     "check:package": "node ./scripts/check-package-contents.js",
     "build:macos-installer:dev": "bash packaging/build-macos-arm64.sh --unsigned-dev",
     "build:macos-installer": "bash packaging/build-macos-arm64.sh --production",

package/src/cli-contract.js

@@ -13,7 +13,7 @@ import {
 } from "./durable-local-task-steps-contract.js";
 import { buildExecutionCapabilityContract } from "./execution-capability-contract.js";
 
-export const CLI_VERSION = "0.6.1";
+export const CLI_VERSION = "0.6.2";
 export const CLI_API_CONTRACT_VERSION = 10;
 
 export function withCliContract(

package/src/desktop-host.js

@@ -23,7 +23,8 @@ import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 import { chmod, mkdtemp, rm, writeFile } from "node:fs/promises";
 import { startAgent } from "./agent.js";
-import { createRuntimeDiagnostics } from "./runtime-diagnostics.js";
+import { createRuntimeDiagnostics, captureRuntimeOutput } from "./runtime-diagnostics.js";
+import { applyLoginShellPath } from "./login-shell-path.js";
 import { createCliAutoUpdater, readCliPackageInfo } from "./auto-update.js";
 import { createAgentShutdown } from "./shutdown.js";
 import { resolveWebOrigin } from "./web-origin.js";
@@ -735,7 +736,7 @@ export async function openProviderLogin(provider, root, {
   const directory = await mkdtemp(join(root, `${provider}-login-`));
   const script = join(directory, `Sign in to ${label}.command`);
   const quote = (s) => `'${s.replaceAll("'", "'\\''")}'`;
-  await writeFile(script, `#!/bin/bash\nexport PATH="/opt/homebrew/bin:/usr/local/bin:$HOME/.local/bin:$PATH"\n${quote(executable.executable)} ${args.join(" ")}\nresult=$?\nrm -f -- ${quote(script)}\nrmdir -- ${quote(directory)}\nexit "$result"\n`, { mode: 0o700 });
+  await writeFile(script, `#!/bin/bash\nexport PATH=${quote(env.PATH || "/usr/bin:/bin")}\n${quote(executable.executable)} ${args.join(" ")}\nresult=$?\nrm -f -- ${quote(script)}\nrmdir -- ${quote(directory)}\nexit "$result"\n`, { mode: 0o700 });
   await chmod(script, 0o700);
   try { await execFileImpl("/usr/bin/open", ["-a", "Terminal", script], { timeout: 10_000 }); }
   catch (error) { await rm(directory, { recursive: true, force: true }); throw error; }
@@ -750,8 +751,12 @@ if (isDesktopHostEntry()) {
   let host;
   const stop = () => { void host?.close().finally(() => process.exit(0)); };
   process.once("SIGTERM", stop); process.once("SIGINT", stop);
-  startDesktopHost().then((value) => { host = value; }).catch((error) => {
-    createRuntimeDiagnostics(process.env.SIMY_HOME?.trim() || join(homedir(), ".simy"), { name: "desktop-host" }).write(`startup failed: ${error?.stack || error}`);
+  const diagnostics = createRuntimeDiagnostics(process.env.SIMY_HOME?.trim() || join(homedir(), ".simy"), { name: "desktop-host" });
+  // stdout is the native JSONL channel; stderr is the only unstructured output
+  // and the native window does not display it, so keep it for support.
+  captureRuntimeOutput(diagnostics, { stderr: process.stderr });
+  applyLoginShellPath({ diagnostics }).catch(() => {}).then(() => startDesktopHost()).then((value) => { host = value; }).catch((error) => {
+    diagnostics.write(`startup failed: ${error?.stack || error}`);
     const conflict = error?.code === PROCESS_CONFLICT_CODE;
     process.stdout.write(`${JSON.stringify({
       type: "error",

package/src/hook-runtime.js

@@ -0,0 +1,29 @@
+import { existsSync } from "node:fs";
+
+// Version-specific runtimes are replaced by the stable alias that follows
+// upgrades: the installer's `current` release link and Homebrew's `opt` link.
+const STABLE_RUNTIME_ALIASES = [
+  [/^(.*)\/installer\/releases\/[^/]+\/[^/]+\.app\/(Contents\/Resources\/runtime\/bin\/node)$/, "$1/installer/current/$2"],
+  [/^(.*)\/Cellar\/([^/]+)\/[^/]+\/(bin\/node)$/, "$1/opt/$2/$3"],
+];
+
+// Provider hooks are persisted into Codex/Claude configuration and run long
+// after this process exits, often from GUI apps without the user's shell PATH.
+// They must therefore name an absolute runtime that survives SIMY and Node updates.
+export function stableHookRuntime({ execPath = process.execPath, fileExists = existsSync } = {}) {
+  for (const [pattern, replacement] of STABLE_RUNTIME_ALIASES) {
+    if (!pattern.test(execPath)) continue;
+    const alias = execPath.replace(pattern, replacement);
+    if (fileExists(alias)) return alias;
+  }
+  return execPath;
+}
+
+export function hookRuntimeCommand(command, { platform = process.platform, ...options } = {}) {
+  if (typeof command !== "string" || !command.startsWith("node ")) return command;
+  return `${quoteRuntime(stableHookRuntime(options), platform)} ${command.slice("node ".length)}`;
+}
+
+function quoteRuntime(value, platform) {
+  return platform === "win32" ? `"${value.replaceAll('"', '""')}"` : `'${value.replaceAll("'", "'\\''")}'`;
+}

package/src/login-shell-path.js

@@ -0,0 +1,67 @@
+import { execFile } from "node:child_process";
+import { existsSync } from "node:fs";
+import path from "node:path";
+
+const START = "__SIMY_LOGIN_PATH_START__";
+const END = "__SIMY_LOGIN_PATH_END__";
+
+// Apps opened from Finder or the Dock inherit launchd's minimal PATH, not the
+// user's shell profile. Provider CLIs installed through nvm, volta, fnm, asdf,
+// pnpm or custom prefixes are therefore invisible unless we ask the user's own
+// login shell once. A slow or broken profile must never prevent startup.
+export async function resolveLoginShellPath({
+  platform = process.platform,
+  env = process.env,
+  execFileImpl = execFile,
+  fileExists = existsSync,
+  timeoutMs = 5_000,
+} = {}) {
+  if (platform === "win32") return null;
+  const shell = loginShell({ platform, env, fileExists });
+  if (!shell) return null;
+  const output = await new Promise((resolve) => {
+    // Read the exported environment rather than expanding $PATH in the shell:
+    // fish expands a quoted $PATH with spaces, but exports it colon-separated.
+    const child = execFileImpl(shell, ["-l", "-i", "-c", `echo ${START}; /usr/bin/env; echo ${END}`], {
+      env: { ...env, TERM: "dumb", DISABLE_AUTO_UPDATE: "true" },
+      timeout: timeoutMs,
+      killSignal: "SIGKILL",
+      maxBuffer: 1024 * 1024,
+    }, (_error, stdout) => resolve(String(stdout || "")));
+    child?.stdin?.end();
+  });
+  const start = output.lastIndexOf(START);
+  const end = output.indexOf(END, start);
+  if (start < 0 || end < 0) return null;
+  const line = output.slice(start + START.length, end).split(/\r?\n/).find((item) => item.startsWith("PATH="));
+  return line?.slice("PATH=".length) || null;
+}
+
+// Login-shell entries take priority, matching what the user sees in Terminal.
+// Existing entries (including the launcher's fallback directories) are kept.
+export function mergePathEntries(...values) {
+  const entries = [];
+  for (const value of values) {
+    for (const entry of String(value || "").split(path.delimiter)) {
+      if (path.isAbsolute(entry) && !entries.includes(entry)) entries.push(entry);
+    }
+  }
+  return entries.join(path.delimiter);
+}
+
+export async function applyLoginShellPath({ env = process.env, platform = process.platform, diagnostics, ...options } = {}) {
+  if (platform === "win32") return false;
+  const loginPath = await resolveLoginShellPath({ env, platform, ...options });
+  if (!loginPath) {
+    diagnostics?.write("login shell PATH unavailable; using launcher PATH");
+    return false;
+  }
+  env.PATH = mergePathEntries(loginPath, env.PATH);
+  diagnostics?.write(`login shell PATH applied (${env.PATH.split(path.delimiter).length} entries)`);
+  return true;
+}
+
+function loginShell({ platform, env, fileExists }) {
+  const candidates = [env.SHELL, platform === "darwin" ? "/bin/zsh" : null, "/bin/sh"];
+  return candidates.find((candidate) => candidate && path.isAbsolute(candidate) && fileExists(candidate)) || null;
+}

package/src/sqm/agent-skill.js

@@ -3,6 +3,7 @@ import { cp, lstat, mkdir, readFile, readdir, rename, rm, writeFile } from "node
 import { homedir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { hookRuntimeCommand } from "../hook-runtime.js";
 
 import { inspectClaudePlugin, installClaudePlugin } from "./claude-plugin.js";
 
@@ -328,25 +329,14 @@ async function bundledPluginManifest({ overrides = new Map() } = {}) {
 async function installedPluginOverrides() {
   const relative = "hooks/hooks.json";
   const source = JSON.parse(await readFile(path.join(BUNDLED_CODEX_PLUGIN_ROOT, relative), "utf8"));
-  const commandPrefix = "node ";
-  const runtime = shellQuote(process.execPath);
   for (const groups of Object.values(source.hooks || {})) {
     for (const group of groups || []) {
-      for (const hook of group.hooks || []) {
-        if (typeof hook.command === "string" && hook.command.startsWith(commandPrefix)) {
-          hook.command = `${runtime} ${hook.command.slice(commandPrefix.length)}`;
-        }
-      }
+      for (const hook of group.hooks || []) hook.command = hookRuntimeCommand(hook.command);
     }
   }
   return new Map([[relative, `${JSON.stringify(source, null, 2)}\n`]]);
 }
 
-function shellQuote(value) {
-  if (process.platform === "win32") return `"${value.replaceAll('"', '""')}"`;
-  return `'${value.replaceAll("'", "'\\''")}'`;
-}
-
 async function directoryDigest(root, { missing = "throw", manifest, overrides = new Map() } = {}) {
   let rootStat;
   try {

package/src/sqm/claude-plugin.js

@@ -3,6 +3,7 @@ import { mkdir, readFile, readdir, rename, rm, lstat, writeFile } from "node:fs/
 import { homedir } from "node:os";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
+import { hookRuntimeCommand } from "../hook-runtime.js";
 
 const SOURCE = fileURLToPath(new URL("../codex-plugins/simy/", import.meta.url));
 export const CLAUDE_MARKETPLACE = "simy-local";
@@ -43,7 +44,7 @@ export async function claudePluginFiles() {
         } else if (event === "Notification") {
           hook.statusMessage = "SIMY Delivery Loop permission-notification tracking";
         }
-        hook.command = hook.command.replace(/^node /, `${quoteRuntime(process.execPath)} `)
+        hook.command = hookRuntimeCommand(hook.command)
           .replaceAll("process.env.PLUGIN_ROOT", "process.env.CLAUDE_PLUGIN_ROOT")
           .replaceAll("hook.main('codex')", "hook.main('claude')");
       }
@@ -136,6 +137,3 @@ function json(value) { return `${JSON.stringify(value, null, 2)}\n`; }
 async function optionalRead(file) {
   try { return await readFile(file, "utf8"); } catch (error) { if (error.code === "ENOENT") return null; throw error; }
 }
-function quoteRuntime(value) {
-  return process.platform === "win32" ? `"${value.replaceAll('"', '""')}"` : `'${value.replaceAll("'", "'\\''")}'`;
-}