@matt82198/aesop 0.3.1 → 0.3.2

package/CHANGELOG.md

@@ -5,6 +5,16 @@ All notable changes to Aesop are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+**Version scheme**: Stable releases are `0.x.y`; `0.x.0-beta.N` / `-rc.N` are pre-releases; `0.1.0-wave.N` were internal wave-milestone previews.
+
+## [0.3.2] - 2026-07-23
+
+### Fixed
+- **Windows daemons no longer flash a console window**: ad-hoc Scheduled Tasks launched `bash.exe` with Interactive logon, popping a visible console every watchdog interval (5 min). New `daemons/install-tasks.ps1` registers the watchdog/monitor tasks through a hidden `wscript` launcher (`daemons/run-hidden.vbs`) — same cadence, zero window flash.
+
+### Added
+- `daemons/install-tasks.ps1` — idempotent Windows task installer (install/uninstall/dry-run, configurable commands + intervals); shipped in the npm package.
+
 ## [0.3.1] - 2026-07-22 - Waves 28-31
 
 ### Added
@@ -373,6 +383,6 @@ This is the first public release of Aesop, a clean-room source-available impleme
 - Legacy TUI interface (bash + jq)
 - Configuration framework and examples
 - Comprehensive documentation and guides
-- MIT License (© 2026 Matt Culliton)
+- PolyForm Strict License 1.0.0 (source-available, © 2026 Matt Culliton)
 
 Aesop is production-ready and implements the complete cardinal rules for cost-optimized, durable multi-agent coordination.

package/README.md

@@ -48,7 +48,7 @@ python tools/health_score.py
 ```
 Outputs a scorecard of system readiness; --json for parsing.
 
-**Self-healing daemon** — Runs every 150s: backs up work, scans secrets, detects drift:
+**Self-monitoring daemon** — Runs every 150s: backs up work, scans secrets, detects drift:
 ```bash
 npx @matt82198/aesop watch
 ```
@@ -60,6 +60,10 @@ python tools/secret_scan.py --staged   # Blocks push if leak detected
 ```
 Exits with failure on file-read errors (not silently passing). CI validates every merge.
 
+**Parallel test battery** — Run all four test harnesses concurrently with isolated logs and enforced timeouts (`tools/test_battery.py` — ~5.4 min vs ~10 serial).
+
+**Windows CI green** — Full parity support on Windows-latest GitHub Actions: promoted to a required check after 6 consecutive green main runs.
+
 ## Proof Numbers
 
 Aesop builds itself. These numbers are live from git, verified by anyone who clones.
@@ -82,16 +86,19 @@ Aesop is built entirely by its own `/buildsystem` wave cycle—running parallel
 
 | Metric | Value |
 | --- | --- |
-| Merged PRs | 223 <!-- metrics-verified: self_stats.py (git log) --> |
-| Total Commits | 880 <!-- metrics-verified: self_stats.py (git log) --> |
-| Project Age | 10 days <!-- metrics-verified: self_stats.py (git log) --> |
+| Merged PRs | 244 <!-- metrics-verified: self_stats.py (git log) --> |
+| Total Commits | 1065 <!-- metrics-verified: self_stats.py (git log) --> |
+| Project Age | 11 days <!-- metrics-verified: self_stats.py (git log) --> |
 | Waves | 30 <!-- metrics-verified: self_stats.py (git log) --> |
-| Insertions + Deletions | 161,064 <!-- metrics-verified: self_stats.py (git log) --> |
-| Files Tracked | 500 <!-- metrics-verified: self_stats.py (git log) --> |
-| Distinct Co-authors | 9 <!-- metrics-verified: self_stats.py (git log) --> |
+| Insertions + Deletions | 185,174 <!-- metrics-verified: self_stats.py (git log) --> |
+| Files Tracked | 541 <!-- metrics-verified: self_stats.py (git log) --> |
+| Distinct Co-authors | 11 <!-- metrics-verified: self_stats.py (git log) --> |
 
 <!-- STATS:END -->
 
+*Wave: one complete build cycle (intake → dispatch → verify → ship) run by the orchestration engine.*
+
+
 
 
 
@@ -101,7 +108,7 @@ Aesop is built entirely by its own `/buildsystem` wave cycle—running parallel
 
 ## Why Haiku-First Works
 
-The benchmark proves it: across 39 judgment tasks (code review, severity calibration, root-cause analysis, refactor equivalence, security spots), Haiku scored **39/39** vs Opus **38/39** at ~1/3 the per-token cost. See [`bench/results/2026-07-17-judgment-v3-haiku-sonnet-opus.md`](./bench/results/2026-07-17-judgment-v3-haiku-sonnet-opus.md). Honest caveat: curated set (N=39), not real-transcript sampled; the benchmark found no task where Opus beats Haiku, proving sufficiency for this workload, not parity at the reasoning frontier.
+The benchmark proves it: across 39 judgment tasks (code review, severity calibration, root-cause analysis, refactor equivalence, security spots), Haiku scored **39/39** vs Opus **38/39** at ~1/3 the per-token cost. See [`bench/results/2026-07-17-judgment-v3-haiku-sonnet-opus.md`](./bench/results/2026-07-17-judgment-v3-haiku-sonnet-opus.md). **Curated set, N=39** — Haiku 39/39 vs Opus 38/39; proves sufficiency for this workload, not frontier parity.
 
 ## Learn More
 
@@ -111,7 +118,7 @@ The benchmark proves it: across 39 judgment tasks (code review, severity calibra
 - **[docs/DISPATCH-MODEL.md](./docs/DISPATCH-MODEL.md)** — Cost analysis and scaling  
 - **[docs/CARDINAL-RULES.md](./docs/CARDINAL-RULES.md)** — 10 foundational principles  
 - **[docs/autonomous-swe.md](./docs/autonomous-swe.md)** — What "autonomous" means (and doesn't), evidence for all claims, honest limits  
-- **[RELEASE-NOTES.md](./RELEASE-NOTES.md)** — Version 0.3.0: non-Claude core proof (Codex wave), refinement-loop convergence, Windows-green CI
+- **[RELEASE-NOTES.md](./RELEASE-NOTES.md)** — Version 0.3.1 (the 0.3.0 milestone): non-Claude core proof (Codex wave), refinement-loop convergence, Windows-green CI
 
 ## Contributing
 

package/daemons/install-tasks.ps1

@@ -0,0 +1,193 @@
+param(
+    [string]$BashExe = 'C:\Program Files\Git\bin\bash.exe',
+    [string]$WatchdogCommand = '',
+    [string]$MonitorCommand = '',
+    [int]$WatchdogIntervalMinutes = 5,
+    [int]$MonitorIntervalMinutes = 20,
+    [string]$TaskPrefix = 'Aesop',
+    [switch]$Uninstall,
+    [switch]$DryRun
+)
+
+# Enable strict error handling
+$ErrorActionPreference = 'Stop'
+
+function ConvertTo-PosixPath {
+    param([string]$WindowsPath)
+    # Convert C:\foo\bar to /c/foo/bar
+    # Rejects UNC paths (\\server\share) — error out instead of mangling
+    if ($WindowsPath -match '^\\\\') {
+        Write-Error "UNC paths are unsupported (got: $WindowsPath). Pass -WatchdogCommand explicitly with a valid path."
+        exit 1
+    }
+    $posixPath = $WindowsPath -replace '\\', '/'
+    $posixPath = $posixPath -replace '^([A-Za-z]):', '/$1'
+    return $posixPath
+}
+
+function Get-WorktreeRoot {
+    # Derive worktree root from $PSScriptRoot (daemons/)
+    # $PSScriptRoot is C:\...\aesop\daemons
+    # Parent is C:\...\aesop
+    $daemonsDir = $PSScriptRoot
+    $aesopRoot = Split-Path -Parent $daemonsDir
+    return $aesopRoot
+}
+
+function Register-DaemonTask {
+    param(
+        [string]$TaskName,
+        [string]$Command,
+        [int]$IntervalMinutes,
+        [string]$RunHiddenVbs,
+        [string]$BashExe
+    )
+
+    # Build the action: wscript.exe //B //Nologo "path\to\run-hidden.vbs" "<bash>" -lc "<command>"
+    $action = New-ScheduledTaskAction `
+        -Execute 'wscript.exe' `
+        -Argument "//B //Nologo ""$RunHiddenVbs"" ""$BashExe"" -lc ""$Command"""
+
+    # Build the trigger: Once, starting in 1 minute, repeating every N minutes for 10 years
+    $startTime = (Get-Date).AddMinutes(1)
+    $trigger = New-ScheduledTaskTrigger `
+        -Once `
+        -At $startTime `
+        -RepetitionInterval (New-TimeSpan -Minutes $IntervalMinutes) `
+        -RepetitionDuration (New-TimeSpan -Days 3650)
+
+    # Build the settings: Hidden, IgnoreNew for multiple instances, 1-hour timeout
+    $settings = New-ScheduledTaskSettingsSet `
+        -Hidden `
+        -MultipleInstances IgnoreNew `
+        -ExecutionTimeLimit (New-TimeSpan -Hours 1) `
+        -StartWhenAvailable
+
+    if ($DryRun) {
+        # Print DryRun output
+        Write-Host "DRYRUN: $TaskName -> wscript.exe //B //Nologo ""$RunHiddenVbs"" ""$BashExe"" -lc ""$Command"" (interval=$IntervalMinutes`m, Hidden=True)"
+    }
+    else {
+        # Register the task (force overwrite if exists)
+        try {
+            Register-ScheduledTask `
+                -TaskName $TaskName `
+                -Action $action `
+                -Trigger $trigger `
+                -Settings $settings `
+                -Force `
+                -ErrorAction Stop | Out-Null
+            Write-Host "Registered task: $TaskName (interval=$IntervalMinutes minutes)"
+        }
+        catch {
+            Write-Error "Failed to register task $TaskName : $_"
+            exit 1
+        }
+    }
+}
+
+function Unregister-DaemonTask {
+    param([string]$TaskName)
+
+    try {
+        $task = Get-ScheduledTask -TaskName $TaskName -ErrorAction SilentlyContinue
+        if ($task) {
+            Unregister-ScheduledTask -TaskName $TaskName -Confirm:$false -ErrorAction Stop
+            Write-Host "Unregistered task: $TaskName"
+            return $true
+        }
+        else {
+            Write-Host "Task not found: $TaskName (already unregistered or never existed)"
+            return $true
+        }
+    }
+    catch {
+        Write-Error "Failed to unregister $TaskName : $_"
+        return $false
+    }
+}
+
+function Main {
+    # Resolve paths
+    $aesopRoot = Get-WorktreeRoot
+    $runHiddenVbs = Join-Path $PSScriptRoot 'run-hidden.vbs'
+
+    # VALIDATION: Check for double quotes in commands (contract violation)
+    # This check runs early and always, before any operations
+    if ($WatchdogCommand -like '*"*') {
+        Write-Error "WatchdogCommand contains double quotes, which are not allowed (vbs launcher contract violation)."
+        exit 1
+    }
+    if ($MonitorCommand -like '*"*') {
+        Write-Error "MonitorCommand contains double quotes, which are not allowed (vbs launcher contract violation)."
+        exit 1
+    }
+
+    # PATH VALIDATION: Only enforce file existence checks if not in DryRun mode
+    # In DryRun, downgrade to warnings so preview works on machines without Git Bash
+    if (-not $DryRun) {
+        if (-not (Test-Path $runHiddenVbs)) {
+            Write-Error "run-hidden.vbs not found at: $runHiddenVbs"
+            exit 1
+        }
+        if (-not (Test-Path $BashExe)) {
+            Write-Error "bash.exe not found at: $BashExe"
+            exit 1
+        }
+    }
+    else {
+        if (-not (Test-Path $runHiddenVbs)) {
+            Write-Warning "run-hidden.vbs not found at: $runHiddenVbs (DryRun mode)"
+        }
+        if (-not (Test-Path $BashExe)) {
+            Write-Warning "bash.exe not found at: $BashExe (DryRun mode)"
+        }
+    }
+
+    # Handle Uninstall mode
+    if ($Uninstall) {
+        $watchdog_ok = Unregister-DaemonTask -TaskName "${TaskPrefix}WatchdogDaemon"
+        $monitor_ok = Unregister-DaemonTask -TaskName "${TaskPrefix}RefinementMonitor"
+        if (-not $watchdog_ok -or -not $monitor_ok) {
+            exit 1
+        }
+        exit 0
+    }
+
+    # Derive default commands if not provided
+    if (-not $WatchdogCommand) {
+        $posixRoot = ConvertTo-PosixPath $aesopRoot
+
+        # P2: Detect apostrophe in derived path (breaks bash syntax if not escaped)
+        if ($posixRoot -like "*'*") {
+            Write-Error "Repository path contains apostrophe, which would break the derived command: $posixRoot`nPass -WatchdogCommand explicitly."
+            exit 1
+        }
+
+        $WatchdogCommand = "bash '$posixRoot/daemons/run-watchdog.sh' --once >> '$posixRoot/state/cron-watchdog.log' 2>&1"
+    }
+
+    # Register watchdog task
+    $watchdogTaskName = "${TaskPrefix}WatchdogDaemon"
+    Register-DaemonTask `
+        -TaskName $watchdogTaskName `
+        -Command $WatchdogCommand `
+        -IntervalMinutes $WatchdogIntervalMinutes `
+        -RunHiddenVbs $runHiddenVbs `
+        -BashExe $BashExe
+
+    # Register monitor task if command provided
+    if ($MonitorCommand) {
+        $monitorTaskName = "${TaskPrefix}RefinementMonitor"
+        Register-DaemonTask `
+            -TaskName $monitorTaskName `
+            -Command $MonitorCommand `
+            -IntervalMinutes $MonitorIntervalMinutes `
+            -RunHiddenVbs $runHiddenVbs `
+            -BashExe $BashExe
+    }
+
+    exit 0
+}
+
+Main

package/daemons/run-hidden.vbs

@@ -0,0 +1,39 @@
+' run-hidden.vbs — VBScript launcher for Windows Scheduled Tasks
+'
+' Purpose: Execute a command with a hidden console window (window style 0) and
+' propagate its exit code.
+'
+' Usage:
+'   wscript.exe //B //Nologo run-hidden.vbs <bash-exe> -lc "<command>"
+'
+' The script rebuilds a quoted command line from WScript.Arguments and runs it
+' via WScript.Shell.Run with window style 0 (hidden). CRITICAL: The task
+' instance lives as long as the child process (shell.Run waits), so that
+' - MultipleInstances IgnoreNew can prevent concurrent runs
+' - ExecutionTimeLimit can kill hung processes
+' - LastTaskResult reflects the actual child exit code (not always 0)
+'
+' By contract, arguments never contain double quotes.
+
+Dim shell, cmd, i, arg
+Dim windowStyle, rc
+
+Set shell = CreateObject("WScript.Shell")
+
+' Build command line from arguments
+cmd = ""
+For i = 0 To WScript.Arguments.Count - 1
+    arg = WScript.Arguments(i)
+    If i > 0 Then cmd = cmd & " "
+    ' Arguments never contain quotes by contract; wrap in quotes for safety
+    cmd = cmd & """" & arg & """"
+Next
+
+' Window style 0 = hidden; wait for process exit (True = wait)
+windowStyle = 0
+
+' Execute the command and wait for it to complete, capturing exit code
+rc = shell.Run(cmd, windowStyle, True)
+
+' Exit with the child process's exit code
+WScript.Quit rc

package/docs/INSTALL.md

@@ -283,6 +283,50 @@ To bypass during testing: `git push --no-verify` (not recommended for production
 
 ---
 
+## Windows: Register Daemons as Hidden Scheduled Tasks
+
+On Windows, the watchdog and refinement monitor daemons can run silently in the background without flashing a console window. Use the provided PowerShell installer:
+
+```powershell
+# Register watchdog daemon (every 5m)
+powershell -NoProfile -ExecutionPolicy Bypass -File daemons/install-tasks.ps1
+
+# Register both watchdog and monitor daemons (monitor script is external, customize path as needed)
+powershell -NoProfile -ExecutionPolicy Bypass -File daemons/install-tasks.ps1 `
+  -MonitorCommand "bash '/c/path/to/your/monitor/run-monitor.sh' --once"
+
+# Customize intervals and task names
+powershell -NoProfile -ExecutionPolicy Bypass -File daemons/install-tasks.ps1 `
+  -TaskPrefix MyFleet `
+  -WatchdogIntervalMinutes 10 `
+  -MonitorIntervalMinutes 30 `
+  -MonitorCommand "bash '/c/path/to/your/monitor/run-monitor.sh' --once"
+
+# Uninstall tasks
+powershell -NoProfile -ExecutionPolicy Bypass -File daemons/install-tasks.ps1 -Uninstall
+
+# Preview without registering (dry-run mode)
+powershell -NoProfile -ExecutionPolicy Bypass -File daemons/install-tasks.ps1 -DryRun
+```
+
+**How it works**: The installer creates Scheduled Tasks that launch `wscript.exe` with a hidden VBScript launcher (`daemons/run-hidden.vbs`). This avoids the console window that appears when bash.exe is run directly as a Scheduled Task action.
+
+**Parameters**:
+- `-TaskPrefix AesopMyFleet` — Task names: `AesopMyFleetWatchdogDaemon`, `AesopMyFleetRefinementMonitor` (default: `Aesop`)
+- `-WatchdogIntervalMinutes N` — Watchdog cycle interval in minutes (default: 5)
+- `-MonitorIntervalMinutes N` — Monitor cycle interval in minutes (default: 20)
+- `-WatchdogCommand "bash '...' ..."` — Custom watchdog command (default: `run-watchdog.sh --once >> state/cron-watchdog.log`)
+- `-MonitorCommand "bash '...' ..."` — Custom monitor command; omit to skip registering the monitor task (default: empty)
+- `-Uninstall` — Remove all registered tasks
+- `-DryRun` — Preview task configuration without registering
+
+**Constraints**:
+- Commands (`-WatchdogCommand`, `-MonitorCommand`) must NOT contain double quotes (vbs launcher contract)
+- UNC paths (e.g., `\\server\share`) are not supported; use local Windows or POSIX paths only
+- `-DryRun` mode works even if `bash.exe` or run-hidden.vbs is missing (validation downgraded to warnings for preview)
+
+---
+
 ## Next Steps
 
 1. **Read [PORTING.md](PORTING.md)** — Step-by-step guide for adopting Aesop on a foreign repo (10 common failure modes)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@matt82198/aesop",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Multi-agent orchestration for AI coding agents, designed to survive failure — a plain-file brain, git as the only durable layer, cheap subagent fleets, and guardrails enforced in code.",
   "bin": {
     "aesop": "bin/cli.js"
@@ -9,6 +9,8 @@
   "files": [
     "bin/*.js",
     "daemons/*.sh",
+    "daemons/*.ps1",
+    "daemons/*.vbs",
     "dash/*.mjs",
     "dash/*.sh",
     "monitor/collect-signals.mjs",