@massu/core 2.1.0 → 2.2.0

package/CHANGELOG.md

@@ -10,6 +10,25 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 > redistributed under the **Apache License 2.0**. Full license + NOTICE:
 > `packages/core/assets/embedder/MODEL-LICENSE`.
 
+## [2.2.0] - 2026-07-22
+
+### Added
+
+- **Windows Node bootstrap — CR-70 Layer 2 auto-recovery now covers Windows.** `2.1.0` shipped
+  the self-bootstrapping launcher that re-execs massu under a compatible installed Node when the
+  running Node is below the floor — but discovery was Unix-only (a slash-rooted allowlist, a POSIX
+  ownership gate). On Windows it degraded to a correct-but-manual winget/nodejs.org remedy. `2.2.0`
+  extends the SAME chokepoint, floor SoT, and re-exec to Windows: discovery now enumerates the
+  Windows install layouts (nvm-windows, fnm, volta, scoop, the MSI / winget / Chocolatey
+  `C:\Program Files\nodejs`, and `%LOCALAPPDATA%\Programs\nodejs`) from their env pointers only —
+  never `%PATH%` / `where.exe` — with a strict absolute-path allowlist-root containment trust gate
+  (the `getuid` analogue). A Windows customer with a compatible Node already installed now gets the
+  identical zero-onus auto-fix on `npm i -g @massu/core@2.2.0`; otherwise the already-shipped
+  correct Windows loud remedy. The POSIX path is byte-for-byte unchanged (regression-guarded). A
+  real `windows-latest` CI leg (`Windows Bootstrap Gate`) proves re-exec fidelity, installer
+  symmetry, and the doctor canary at runtime on Windows. No new Canonical Rule — Windows parity of
+  CR-70, folded into `canonical-rules-detail.md#cr-70`.
+
 ## [2.1.0] - 2026-07-22
 
 ### Added

package/dist/cli.js

@@ -6376,7 +6376,7 @@ import {
   fsyncSync as fsyncSync3,
   closeSync as closeSync3,
   existsSync as existsSync14,
-  realpathSync,
+  realpathSync as realpathSync2,
   unlinkSync as unlinkSync2,
   accessSync as accessSync2,
   statSync as statSync5,
@@ -6423,8 +6423,8 @@ function isContainedIn(rootDir, candidate, opts = {}) {
   let realRoot;
   let realProbe;
   try {
-    realRoot = realpathSync(root);
-    realProbe = realpathSync(probe);
+    realRoot = realpathSync2(root);
+    realProbe = realpathSync2(probe);
   } catch {
     return true;
   }
@@ -38300,13 +38300,14 @@ import { fileURLToPath as fileURLToPath7 } from "url";
 
 // src/lib/node-bootstrap.ts
 init_node_floor();
-import { existsSync, readdirSync, statSync } from "fs";
+import { existsSync, readdirSync, statSync, realpathSync } from "fs";
 import { spawnSync, execFileSync } from "child_process";
 import { homedir } from "os";
-import { isAbsolute, resolve } from "path";
+import { isAbsolute, resolve, win32 as pathWin32 } from "path";
 var REEXEC_SENTINEL_ENV = "MASSU_BOOTSTRAP_REEXEC";
 var OPT_OUT_ENV = "MASSU_NO_NODE_BOOTSTRAP";
-function allowlistPatterns(env) {
+function allowlistPatterns(env, platform = process.platform) {
+  if (platform === "win32") return windowsAllowlistPatterns(env);
   const patterns = [];
   const rawHome = env.HOME || homedir();
   const home = rawHome && isAbsolute(rawHome) ? rawHome : null;
@@ -38326,6 +38327,44 @@ function allowlistPatterns(env) {
   );
   return patterns;
 }
+function winManagerDirs(env) {
+  const abs = (d2) => d2 && pathWin32.isAbsolute(d2) ? d2 : null;
+  const appdata = abs(env.APPDATA);
+  const localappdata = abs(env.LOCALAPPDATA);
+  return {
+    userprofile: abs(env.USERPROFILE),
+    nvmHome: abs(env.NVM_HOME),
+    nvmSymlink: abs(env.NVM_SYMLINK),
+    fnmDir: abs(env.FNM_DIR) ?? (appdata ? `${appdata}\\fnm` : null),
+    voltaHome: abs(env.VOLTA_HOME) ?? (localappdata ? `${localappdata}\\Volta` : null),
+    localappdata
+  };
+}
+function windowsAllowlistRoots(env) {
+  const d2 = winManagerDirs(env);
+  const roots = [];
+  for (const r2 of [d2.userprofile, d2.nvmHome, d2.nvmSymlink, d2.fnmDir, d2.voltaHome, d2.localappdata]) {
+    if (r2) roots.push(r2);
+  }
+  roots.push("C:\\Program Files\\nodejs", "C:\\Program Files (x86)\\nodejs");
+  return roots;
+}
+function windowsAllowlistPatterns(env) {
+  const d2 = winManagerDirs(env);
+  const patterns = [];
+  const add = (dir, suffix) => {
+    if (dir) patterns.push(`${dir}\\${suffix}`);
+  };
+  add(d2.nvmHome, "v*\\node.exe");
+  add(d2.nvmSymlink, "node.exe");
+  add(d2.fnmDir, "node-versions\\v*\\installation\\node.exe");
+  add(d2.voltaHome, "tools\\image\\node\\*\\node.exe");
+  add(d2.userprofile, "scoop\\apps\\nodejs\\current\\node.exe");
+  add(d2.userprofile, "scoop\\apps\\nodejs-lts\\current\\node.exe");
+  add(d2.localappdata, "Programs\\nodejs\\node.exe");
+  patterns.push("C:\\Program Files\\nodejs\\node.exe", "C:\\Program Files (x86)\\nodejs\\node.exe");
+  return patterns;
+}
 function isOwnershipTrusted(candidate) {
   const getuid = process.getuid;
   if (typeof getuid !== "function") return true;
@@ -38336,8 +38375,22 @@ function isOwnershipTrusted(candidate) {
     return false;
   }
 }
+function isWindowsTrusted(candidate, env) {
+  let resolved;
+  try {
+    resolved = pathWin32.resolve(realpathSync(candidate));
+  } catch {
+    resolved = pathWin32.resolve(candidate);
+  }
+  const target = resolved.toLowerCase();
+  for (const root of windowsAllowlistRoots(env)) {
+    const base = pathWin32.resolve(root).toLowerCase();
+    if (target === base || target.startsWith(base + pathWin32.sep)) return true;
+  }
+  return false;
+}
 function expandSingleStarGlob(pattern) {
-  const parts = pattern.split("/");
+  const parts = pattern.split(/[\\/]/);
   const starIdx = parts.findIndex((p19) => p19.includes("*"));
   if (starIdx === -1) {
     return existsSync(pattern) ? [pattern] : [];
@@ -38371,16 +38424,23 @@ function probeNodeVersion(candidate) {
     return null;
   }
 }
-function discoverCompatibleNode(env = process.env) {
+function isAcceptedCandidatePath(candidate, platform = process.platform) {
+  if (platform === "win32") {
+    return pathWin32.isAbsolute(candidate) && (/^[A-Za-z]:[\\/]/.test(candidate) || candidate.startsWith("\\\\"));
+  }
+  return candidate.startsWith("/");
+}
+function discoverCompatibleNode(env = process.env, platform = process.platform) {
   const seen = /* @__PURE__ */ new Set();
   let best = null;
-  for (const pattern of allowlistPatterns(env)) {
+  for (const pattern of allowlistPatterns(env, platform)) {
     for (const candidate of expandSingleStarGlob(pattern)) {
-      if (!candidate.startsWith("/")) continue;
+      if (!isAcceptedCandidatePath(candidate, platform)) continue;
       if (seen.has(candidate)) continue;
       seen.add(candidate);
       if (!existsSync(candidate)) continue;
-      if (!isOwnershipTrusted(candidate)) continue;
+      const trusted = platform === "win32" ? isWindowsTrusted(candidate, env) : isOwnershipTrusted(candidate);
+      if (!trusted) continue;
       const v3 = probeNodeVersion(candidate);
       if (!v3) continue;
       if (!checkNodeVersion(`v${v3}`).ok) continue;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "2.1.0",
+  "version": "2.2.0",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
   "main": "./dist/cli.js",