@murmurv2/cli 2.11.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 alexfrmn
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,53 @@
+# Murmur CLI
+
+Install once, join with a private invitation file, and connect an AI client to
+Murmur's encrypted messaging mesh. The executable is `murmur`.
+
+The public npm release is pending. After `@murmurv2/cli@2.11.0` is published,
+use the command below. Until publication is confirmed, use a GitHub release
+asset; older public registry packages do not contain the current fixes.
+Maintainers rehearsing a release use only their coordinator-approved registry.
+
+```sh
+npm install --global @murmurv2/cli@2.11.0
+murmur version --json
+```
+
+Node.js **22.13.0 or newer** is required. No Git, TypeScript, Go, native compiler,
+install lifecycle scripts or helper download is needed on the receiving machine.
+The tarball includes the CLI, daemon, MCP entry, and prebuilt Windows x64 service
+helper. It does not include a desktop application. On Windows PowerShell use
+`npm.cmd` and `murmur.cmd` if execution policy blocks the PowerShell shims.
+
+Run the following with the same absolute profile path on each line:
+
+```sh
+murmur join --agent-id YOUR-AGENT --invite-file /private/invite.txt --reply-out /private/reply.txt --data-dir /absolute/profile
+murmur service install --data-dir /absolute/profile
+murmur service start --data-dir /absolute/profile
+murmur clients detect --data-dir /absolute/profile
+murmur clients configure --client codex-cli --data-dir /absolute/profile
+murmur doctor --peer HOST-AGENT --data-dir /absolute/profile --json
+```
+
+The invitation host must import your reply file and reload its own peer
+configuration before the roundtrip check can succeed. Keep the invitation and
+reply outside the profile, in an existing private directory. Do not paste them
+into chat or edit `agent-config.json` manually.
+
+Choose an installed client reported by `clients detect`; configuration preserves
+unrelated settings and refuses conflicting Murmur entries. Reload that client,
+then require a returned `murmur_request` response. A daemon ACK alone is not an
+agent reply or proof that an LLM woke up.
+
+On Windows, run **service mutations only** from an elevated terminal. The CLI and
+AI client normally run without elevation. The Windows service is x64-only in
+this release. On Linux the service uses user systemd; on macOS it uses launchd.
+Commands do not silently restart an existing daemon or replace an occupied profile.
+
+For an isolated install, add `--prefix /absolute/npm-prefix` to the npm command
+and use its generated `bin/murmur` (Windows: `murmur.cmd` in the prefix). Keep that
+prefix in place while its service and client configuration refer to it.
+
+[`docs/setup-onboarding.md`](https://github.com/alexfrmn/murmur/blob/main/docs/setup-onboarding.md)
+documents the shared commands and their evidence limits.

package/bin/murmur-npm.mjs

@@ -0,0 +1,6 @@
+#!/usr/bin/env node
+// The npm payload keeps the same root-relative layout as release archives.
+// Source checkouts and native bundles continue to use the ordinary CLI entry.
+import { existsSync } from 'node:fs';
+const packed = new URL('../runtime/packages/setup/bin/murmur.mjs', import.meta.url);
+await import(existsSync(packed) ? packed.href : './murmur.mjs');

package/package.json

@@ -0,0 +1,42 @@
+{
+  "name": "@murmurv2/cli",
+  "version": "2.11.0",
+  "type": "module",
+  "main": "runtime/packages/setup/dist/src/index.js",
+  "types": "runtime/packages/setup/dist/src/index.d.ts",
+  "bin": {
+    "murmur": "bin/murmur-npm.mjs"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "prepack": "npm run build --prefix ../.. && node ../../scripts/prepare-cli-package.mjs"
+  },
+  "dependencies": {
+    "@iarna/toml": "^2.2.5",
+    "@murmurv2/broker-nats": "^0.3.4",
+    "@murmurv2/core": "^0.6.3",
+    "@murmurv2/mcp-server": "^0.2.2",
+    "@murmurv2/security": "^0.1.1",
+    "nats": "^2.28.2",
+    "ws": "^8.21.0"
+  },
+  "engines": {
+    "node": ">=22.13.0"
+  },
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/alexfrmn/murmur.git",
+    "directory": "packages/setup"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "description": "Murmur CLI — invite-based setup, background service, client configuration and diagnostics.",
+  "files": [
+    "bin/murmur-npm.mjs",
+    "runtime",
+    "LICENSE"
+  ],
+  "homepage": "https://murmurconnect.com"
+}

package/runtime/npm-runtime-manifest.json

@@ -0,0 +1,299 @@
+{
+  "schema": "murmur.npm-cli/1",
+  "sourceCommit": "91279e5249e265cfe54dcd0904d9ae92fbb18ec5",
+  "sourceDirty": false,
+  "declaredVersion": "2.11.0",
+  "sourceLockSha256": "4317a76743610366f9b5846993c7c201bc2c0c4fcabfda2d5448e7ff921a9647",
+  "windowsHelper": {
+    "component": "windows-service",
+    "platform": "windows",
+    "arch": "amd64",
+    "version": "2.11.0",
+    "sourceCommit": "91279e5249e265cfe54dcd0904d9ae92fbb18ec5",
+    "sha256": "877f76eb7791c5a83b1a33dce0eaa7aa497eabdee2f877d750d695355cac76ab",
+    "size": 3128320,
+    "nativeVersionExecuted": false
+  },
+  "files": {
+    "package.json": {
+      "sha256": "7670e3b33c8ef783813b1b8860726f9dd2ba2bcdc7c49da05f2780d89fdc0d6b",
+      "size": 83
+    },
+    "packages/setup/package.json": {
+      "sha256": "ac61a66e834fcbad44a2fbed34dc2f7573309f1245bdd8e83dd9540803758df2",
+      "size": 132
+    },
+    "packages/setup/dist/src/appdata.d.ts": {
+      "sha256": "1e0cfde6b9b1ba6e9d6ba96dc197a8a429c299d2c8a159260b1d2982aa550253",
+      "size": 691
+    },
+    "packages/setup/dist/src/appdata.js": {
+      "sha256": "1c1627aa1724a56dc6631d728b56f7715de80d9f8b730cf69e7d0afbdf5b5ddc",
+      "size": 2678
+    },
+    "packages/setup/dist/src/cli.d.ts": {
+      "sha256": "6da2fbea536a227db1e8b1d7646d4554cd6e071b05240d5489203eaf007c72e2",
+      "size": 418
+    },
+    "packages/setup/dist/src/cli.js": {
+      "sha256": "13ab60762776c1750da857762f3957a08340e41c651cab6274f3a678b0480d31",
+      "size": 8745
+    },
+    "packages/setup/dist/src/clients.d.ts": {
+      "sha256": "74291be39ef9cffab6d483e38d955cdc0100e9d5ba0d734d77cad8d2f1fc01fb",
+      "size": 4380
+    },
+    "packages/setup/dist/src/clients.js": {
+      "sha256": "1098fe951626980c0c5717d8a211d282db5d6c4acfd09a055b8ebd2d1b9362ab",
+      "size": 13670
+    },
+    "packages/setup/dist/src/commands.d.ts": {
+      "sha256": "63f0a5e9834ca75bced2079cb4c4f0e087c1c7cd14ad958aeda5234bcd80337e",
+      "size": 1316
+    },
+    "packages/setup/dist/src/commands.js": {
+      "sha256": "eef7c76c21383b2dba733ce4967afa964c547a263333a380606b05eb197fb04f",
+      "size": 5731
+    },
+    "packages/setup/dist/src/config.d.ts": {
+      "sha256": "b244629bb9a19d4a48b813c817733d998efea543e8daec99e282010d4e784499",
+      "size": 1346
+    },
+    "packages/setup/dist/src/config.js": {
+      "sha256": "9ad91d6d9408f72166ed363eacac4496b1e831ccdda10cd28375f6e21521ef4e",
+      "size": 3212
+    },
+    "packages/setup/dist/src/doctor.d.ts": {
+      "sha256": "115b7cf132e4101fe4964173787902d9585f586ee83aa9ae1694161bd646804f",
+      "size": 827
+    },
+    "packages/setup/dist/src/doctor.js": {
+      "sha256": "9e240e1f0796ce5e3a6e64dbcc41c56a9febd285c2276f88bb15dde6d68c201e",
+      "size": 11225
+    },
+    "packages/setup/dist/src/file-identity.d.ts": {
+      "sha256": "1f5845364d263c80167ed533e46a02751a008d3993a6894aae50a13f646e6767",
+      "size": 290
+    },
+    "packages/setup/dist/src/file-identity.js": {
+      "sha256": "1c1f7fd4866339e03536681866a700f49faa0622c961f4e89ae97639d0374da8",
+      "size": 621
+    },
+    "packages/setup/dist/src/index.d.ts": {
+      "sha256": "8d863cf184dd6837b7d6544a202f6b2a19787b37e82bac379decc8a07268a7a0",
+      "size": 236
+    },
+    "packages/setup/dist/src/index.js": {
+      "sha256": "8d863cf184dd6837b7d6544a202f6b2a19787b37e82bac379decc8a07268a7a0",
+      "size": 236
+    },
+    "packages/setup/dist/src/onboarding.d.ts": {
+      "sha256": "b76892619695c2bd9298248d4e7557dce832a688aca0106c02939c4ae0352277",
+      "size": 1141
+    },
+    "packages/setup/dist/src/onboarding.js": {
+      "sha256": "caaec0a7f9e8f685185b096bccf1741ae93e7f64983602833ef4e1ccbff70544",
+      "size": 14985
+    },
+    "packages/setup/dist/src/outbox-attention.d.ts": {
+      "sha256": "a96effdd0e47701836fb93ab0c24a30d78f29fc0f3e7193406067535532ff962",
+      "size": 1606
+    },
+    "packages/setup/dist/src/outbox-attention.js": {
+      "sha256": "db70b6eed2338efe0c2875dbca9c0306cce3c940f0f7f09f3dff7c528ca377af",
+      "size": 5113
+    },
+    "packages/setup/dist/src/paths.d.ts": {
+      "sha256": "5c9ce9ac87f5fa90124fa071cc6a5d2176d045fc41de58deb53a0e3ef5d85504",
+      "size": 295
+    },
+    "packages/setup/dist/src/paths.js": {
+      "sha256": "967414a7d6b846af2d7122641e42d81d2f570d166c39d91f1c1a4a288400fb42",
+      "size": 2507
+    },
+    "packages/setup/dist/src/platform/darwin.d.ts": {
+      "sha256": "5980cc87fb445e076e91faed33976353a6e130949621364ee042a5647241785c",
+      "size": 591
+    },
+    "packages/setup/dist/src/platform/darwin.js": {
+      "sha256": "b361a9481c12aa5952dd9c18f30cf612f2126bef87993e6808acf38e56ae7422",
+      "size": 12996
+    },
+    "packages/setup/dist/src/platform/linux.d.ts": {
+      "sha256": "989d39cc9d5c73c9dae7dc926344fa2c6dde5e80f0a8d7657d5ce1f774da9b44",
+      "size": 375
+    },
+    "packages/setup/dist/src/platform/linux.js": {
+      "sha256": "ab86ab63919d8df3c5c8ccd3bec1d34b4926d847911c56ecf5f8acbcc6404e26",
+      "size": 9042
+    },
+    "packages/setup/dist/src/platform/windows.d.ts": {
+      "sha256": "9f2cb7a20c26f936c9878ca5d525edd7486142392452db47c49e5676e98e2808",
+      "size": 1123
+    },
+    "packages/setup/dist/src/platform/windows.js": {
+      "sha256": "1a6db62bf38dd56fe78a115e30dc003aef892453265add5e338f8b32beedb87c",
+      "size": 10787
+    },
+    "packages/setup/dist/src/private-file.d.ts": {
+      "sha256": "dd574a6f2135aa13064a45b452275aada896402243a4d147f7c417afe8199c4a",
+      "size": 443
+    },
+    "packages/setup/dist/src/private-file.js": {
+      "sha256": "ccd60c99d56aba56d6b9f691d99c5bc51086303557e70495e45602298ada22b6",
+      "size": 5499
+    },
+    "packages/setup/dist/src/reply-test.d.ts": {
+      "sha256": "aaa1e6357f33d0a6144e1d00dacfdf16363fa235cb376e7c3d4700f3d4d7fd33",
+      "size": 813
+    },
+    "packages/setup/dist/src/reply-test.js": {
+      "sha256": "9e477cb83b3d45e7f526b7381fb9a263a240981cf6846d22e88e791bc8e18f46",
+      "size": 5030
+    },
+    "packages/setup/dist/src/state.d.ts": {
+      "sha256": "868f415e920d37db4b714f8c5f771fafe3e46f84437f2a5b7d803c7be0e82841",
+      "size": 239
+    },
+    "packages/setup/dist/src/state.js": {
+      "sha256": "33d38685ece13a625d1bdb7118173fc358a778b3159a0525818a91f3ca89f62f",
+      "size": 632
+    },
+    "packages/setup/dist/src/status-line.d.ts": {
+      "sha256": "3836cac32982321f19c88bd9652ed0b1a1cf2cd47d67196faf612555b3543916",
+      "size": 244
+    },
+    "packages/setup/dist/src/status-line.js": {
+      "sha256": "14d7c3981e42b3db248d248ccd683b8dff51f8c07ed5a2f7712fe94769bfe607",
+      "size": 984
+    },
+    "packages/setup/dist/src/status.d.ts": {
+      "sha256": "426841217d3f9f6248a63d65fb708af3aa38cd481bad1390a68d1ec1a3910124",
+      "size": 4244
+    },
+    "packages/setup/dist/src/status.js": {
+      "sha256": "ddc80da3c1843cf84137b2543805c6c4cdf3316efe44870e6151476c1ca6d27c",
+      "size": 13155
+    },
+    "packages/setup/dist/src/types.d.ts": {
+      "sha256": "2d9d05df2818b22a2be5050288cfe9837f2669814218cbeca1be64b19a079463",
+      "size": 1506
+    },
+    "packages/setup/dist/src/types.js": {
+      "sha256": "8e609bb71c20b858c77f0e9f90bb1319db8477b13f9f965f1a1e18524bf50881",
+      "size": 11
+    },
+    "packages/setup/dist/src/updates.d.ts": {
+      "sha256": "10b685e6d83f4f4a6123abc2000f9f67ca08573b3bc25cbf22c67cce812d4ea9",
+      "size": 1606
+    },
+    "packages/setup/dist/src/updates.js": {
+      "sha256": "7c005f543068a0e33027857376efd712938142840f79fb5995f1200d8defb3fd",
+      "size": 12731
+    },
+    "packages/setup/dist/src/verdict.d.ts": {
+      "sha256": "1945fb3a7054345b6f5166dd80708ab9466cde70772d62200a48d7a43f9c13b6",
+      "size": 505
+    },
+    "packages/setup/dist/src/verdict.js": {
+      "sha256": "3b3265b31dc366745a42a48ac56655d838586197bba9774a0b47c90c02a9099b",
+      "size": 7929
+    },
+    "packages/setup/bin/murmur.mjs": {
+      "sha256": "6761c1030f648455e3b99499cd1fa7a356b091700dbbcb2392623315243c5bb5",
+      "size": 1408
+    },
+    "packages/mcp-server/package.json": {
+      "sha256": "89c47db7851f89caec72da4f215ebc21cf1e294aeef3b45d2583562d846ab035",
+      "size": 33
+    },
+    "packages/mcp-server/dist/src/index.js": {
+      "sha256": "506403a79cff2f69ba25b04c4cb7a66477c7ab3c7e38e5399a9bfb98a0ea4c41",
+      "size": 31
+    },
+    "scripts/murmur-daemon.mjs": {
+      "sha256": "e3f7a2dfcb842ea4a908fd0e10ab6c5f066ea3034af51991c3326a1bcf808be6",
+      "size": 22863
+    },
+    "scripts/murmur-shell-send.mjs": {
+      "sha256": "5e0ae14f59b634f89751c0487edbf7b9f03f95b0a38e55d5619d392bd2343eee",
+      "size": 5105
+    },
+    "scripts/runtime-capability.mjs": {
+      "sha256": "1ee5358161a678c763df9f84bd05068c4938e5166a3f59b1535b54dcb5621d9c",
+      "size": 1816
+    },
+    "scripts/notify-router.mjs": {
+      "sha256": "bd6a2277293f5ee05d4ee71cbd96cea06dafbcbae578ae94d5e3492ed0f1cac5",
+      "size": 10755
+    },
+    "scripts/codex-app-server-wake.mjs": {
+      "sha256": "8b3d975498f5904d42a18bc345a943a4707d9b147f5ae81fd050645796e97c26",
+      "size": 26600
+    },
+    "scripts/murmur-jetstream-advisory.mjs": {
+      "sha256": "4232c92418d46bd4c6bc4785641dd226f58a79e35211e51a469a8d469065e0a7",
+      "size": 326
+    },
+    "scripts/wake-monitor.mjs": {
+      "sha256": "416dd71e7e93b6827d9e603438804856cd38e7b575d9842ee33442a856a07cef",
+      "size": 31907
+    },
+    "scripts/lease.mjs": {
+      "sha256": "c380ec90c0b5cef4d010df4d59793f86f0dc319c82039997c3d8884a9e92f56e",
+      "size": 9613
+    },
+    "scripts/secure-state.mjs": {
+      "sha256": "31d7001f38f9f0294726c811e7847fad8a637986565c3eabc4c57ca0666a4a32",
+      "size": 3280
+    },
+    "scripts/daemon-observation.mjs": {
+      "sha256": "cef36ccf407d3c45c11ad796c709f05176faedc2af7adfdd0f618d306a03f459",
+      "size": 2349
+    },
+    "scripts/ack-security.mjs": {
+      "sha256": "bb769e874b6d4144b074596ba4c99dac4b6987b1e0e2967ffcf5fa73962e41a1",
+      "size": 1265
+    },
+    "scripts/doctor-protocol.mjs": {
+      "sha256": "e373b1ff7801bde10c016cb5d24fefdec39382127008a5c359c804338bd5dc13",
+      "size": 5282
+    },
+    "scripts/wake-drain-claude.mjs": {
+      "sha256": "9f5d95c4242b56cd01b09e2198bb3dc4cbd819d8acf1bf664016f364279ca046",
+      "size": 22815
+    },
+    "plugins/claude-code/.claude-plugin/plugin.json": {
+      "sha256": "39743b9ea55f475c767dba430e1014fcfa19648e95ddcf0da9b0128f1744ec88",
+      "size": 1133
+    },
+    "plugins/claude-code/.mcp.json": {
+      "sha256": "a865cd60e7bd1eaf8b025dc8e5fb7ae8d7425ca8996058ef1eed54f4bed9fe13",
+      "size": 204
+    },
+    "plugins/claude-code/scripts/statusline.mjs": {
+      "sha256": "2d56e8f40ecb472cc8bbf066437d490ead8bc8c102a14259e0252f6fcf83b4a0",
+      "size": 9050
+    },
+    "plugins/claude-code/scripts/configure-statusline.mjs": {
+      "sha256": "7d611f947ee005db1f039ea7892960536aabc1ffa9f59364b83663a27c4fabdb",
+      "size": 6971
+    },
+    "plugins/claude-code/skills/status/SKILL.md": {
+      "sha256": "fd85f335c85f2e86a6ee0f6d15c88b2e9a7c8e2939f4259f3d8905ea38714039",
+      "size": 601
+    },
+    "plugins/claude-code/skills/inbox/SKILL.md": {
+      "sha256": "053f63072a7423a163f69acfac08a2bd6bcdf3aa2f01990f8e694e6e30a8dca1",
+      "size": 526
+    },
+    "plugins/claude-code/skills/mark-read/SKILL.md": {
+      "sha256": "a9117d5186527ee563eed9a46bc942a467211ae75eb08c5265fe6ded5b6aca8c",
+      "size": 705
+    },
+    "bin/murmur-svc.exe": {
+      "sha256": "877f76eb7791c5a83b1a33dce0eaa7aa497eabdee2f877d750d695355cac76ab",
+      "size": 3128320
+    }
+  }
+}

package/runtime/package.json

@@ -0,0 +1 @@
+{"name":"murmur","private":true,"version":"2.11.0","engines":{"node":">=22.13.0"}}

package/runtime/packages/mcp-server/dist/src/index.js

@@ -0,0 +1 @@
+import "@murmurv2/mcp-server";

package/runtime/packages/mcp-server/package.json

@@ -0,0 +1 @@
+{"type":"module","private":true}

package/runtime/packages/setup/bin/murmur.mjs

@@ -0,0 +1,26 @@
+#!/usr/bin/env node
+import { checkRuntime } from '../../../scripts/runtime-capability.mjs';
+// Murmur requires node:sqlite (checked below); Node's ExperimentalWarning for it on every command
+// only tells a new user that something is wrong. Other warnings pass through unchanged.
+const emitWarning = process.emitWarning;
+process.emitWarning = function (warning, ...rest) {
+  const type = typeof rest[0] === 'string' ? rest[0] : rest[0]?.type ?? warning?.name;
+  if (type === 'ExperimentalWarning' && /SQLite/.test(String(warning?.message ?? warning))) return;
+  return emitWarning.call(this, warning, ...rest);
+};
+try { await checkRuntime(); }
+catch (error) { process.stderr.write(error.message + '\n'); process.exit(1); }
+// Dynamic imports let the capability check run before the engine imports SQLite.
+const { main, isRawCliOutput } = await import('../dist/src/cli.js');
+const { safeError } = await import('../dist/src/config.js');
+const lineMode = process.argv[2] === 'status' && process.argv.includes('--line');
+try {
+  const result = await main(process.argv.slice(2));
+  if (isRawCliOutput(result)) {
+    if (result.text) process.stdout.write(result.text + '\n');
+  } else process.stdout.write(JSON.stringify(result) + '\n');
+} catch (error) {
+  if (lineMode) process.stdout.write('Murmur: unknown (status.command-failed)\n');
+  process.stderr.write(safeError(error) + '\n');
+  process.exitCode = 1;
+}

package/runtime/packages/setup/dist/src/appdata.d.ts

@@ -0,0 +1,9 @@
+/**
+ * A process with MSIX package identity (e.g. an app installed from Microsoft Store) sees AppData
+ * virtualized: writes to %LOCALAPPDATA%\X land in %LOCALAPPDATA%\Packages\<pkg>\LocalCache\Local\X,
+ * while the LocalSystem service reads the real, empty %LOCALAPPDATA%\X. Detect it by filesystem
+ * identity, not by name: inside the package the profile and its LocalCache twin are one directory,
+ * outside it a leftover twin is a different one. A profile that does not exist yet is probed in its
+ * nearest existing ancestor with a temporary directory that is removed again.
+ */
+export declare function refuseVirtualizedAppData(dataDir: string, env?: NodeJS.ProcessEnv): Promise<void>;

package/runtime/packages/setup/dist/src/appdata.js

@@ -0,0 +1,53 @@
+import { mkdir, readdir, rmdir, stat } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import path from 'node:path';
+import { sameClientFileIdentity } from './file-identity.js';
+const paths = path.win32;
+const inside = (base, dir) => {
+    const relative = paths.relative(base, dir);
+    return relative && !relative.startsWith('..') && !paths.isAbsolute(relative) ? relative : null;
+};
+// BigInt: NTFS file IDs exceed 2^53. Compared with sameClientFileIdentity, because Node 22.13 on
+// Windows reports dev 0 for a plain path and the real volume serial through a junction.
+const identity = (dir) => stat(dir, { bigint: true }).catch(() => null);
+/**
+ * A process with MSIX package identity (e.g. an app installed from Microsoft Store) sees AppData
+ * virtualized: writes to %LOCALAPPDATA%\X land in %LOCALAPPDATA%\Packages\<pkg>\LocalCache\Local\X,
+ * while the LocalSystem service reads the real, empty %LOCALAPPDATA%\X. Detect it by filesystem
+ * identity, not by name: inside the package the profile and its LocalCache twin are one directory,
+ * outside it a leftover twin is a different one. A profile that does not exist yet is probed in its
+ * nearest existing ancestor with a temporary directory that is removed again.
+ */
+export async function refuseVirtualizedAppData(dataDir, env = process.env) {
+    if (process.platform !== 'win32' || !env.LOCALAPPDATA)
+        return;
+    const packages = paths.join(env.LOCALAPPDATA, 'Packages');
+    if (inside(packages, dataDir) !== null)
+        return;
+    const bases = [[env.LOCALAPPDATA, 'Local'], [env.APPDATA, 'Roaming']];
+    const base = bases.find(([root]) => root && inside(root, dataDir) !== null);
+    if (!base)
+        return;
+    // Climb to the nearest existing directory that is still inside the AppData root.
+    let probe = null, target = dataDir;
+    while (!(await identity(target)) && inside(base[0], paths.dirname(target)) !== null)
+        target = paths.dirname(target);
+    if (!(await identity(target))) {
+        target = paths.join(paths.dirname(target), `.murmur-appdata-probe-${randomUUID()}`);
+        await mkdir(target);
+        probe = target;
+    }
+    try {
+        const own = (await identity(target)), relative = inside(base[0], target);
+        const names = await readdir(packages).catch(() => []);
+        for (const name of names) {
+            const twin = await identity(paths.join(packages, name, 'LocalCache', base[1], relative));
+            if (twin && sameClientFileIdentity(twin, own))
+                throw new Error('profile.virtualized-appdata');
+        }
+    }
+    finally {
+        if (probe)
+            await rmdir(probe).catch(() => { });
+    }
+}

package/runtime/packages/setup/dist/src/cli.d.ts

@@ -0,0 +1,9 @@
+import type { PlatformAdapter } from './types.js';
+export declare function platformAdapter(): PlatformAdapter;
+export interface RawCliOutput {
+    kind: 'raw';
+    text: string;
+}
+export declare const rawCliOutput: (text: string) => RawCliOutput;
+export declare const isRawCliOutput: (value: unknown) => value is RawCliOutput;
+export declare function main(args: string[], adapter?: PlatformAdapter): Promise<unknown>;