@node9/proxy 2.2.1 → 2.3.0

package/dist/cli.js

@@ -21561,6 +21561,75 @@ function uninstallSystemd() {
 function isSystemdInstalled() {
   return import_fs43.default.existsSync(SYSTEMD_UNIT);
 }
+function windowsLauncherVbs(nodePath, scriptPath) {
+  for (const p of [nodePath, scriptPath]) {
+    if (p.includes('"')) throw new Error(`Illegal quote in path: ${p}`);
+  }
+  return [
+    "' Auto-generated by node9 \u2014 starts the approval daemon with no console window.",
+    "' Recreated on every `node9 daemon install`; safe to delete (uninstall does).",
+    'Set sh = CreateObject("Wscript.Shell")',
+    'sh.Environment("PROCESS")("NODE9_AUTO_STARTED") = "1"',
+    `sh.Run """${nodePath}"" ""${scriptPath}"" daemon", 0, False`,
+    ""
+  ].join("\r\n");
+}
+function schtasksCreateArgs(launcherPath) {
+  return [
+    "/Create",
+    "/TN",
+    SCHTASKS_TASK,
+    "/TR",
+    `wscript.exe //B "${launcherPath}"`,
+    "/SC",
+    "ONLOGON",
+    "/F"
+  ];
+}
+function installSchtasks(binaryPath) {
+  const launcher = WIN_LAUNCHER();
+  const dir = import_path42.default.dirname(launcher);
+  if (!import_fs43.default.existsSync(dir)) import_fs43.default.mkdirSync(dir, { recursive: true });
+  import_fs43.default.writeFileSync(launcher, windowsLauncherVbs(process.execPath, binaryPath), "utf-8");
+  const create = (0, import_child_process3.spawnSync)("schtasks", schtasksCreateArgs(launcher), {
+    encoding: "utf8",
+    timeout: 1e4
+  });
+  if (create.status !== 0) {
+    throw new Error(
+      `schtasks /Create failed: ${create.stderr || create.stdout || "unknown error"}`
+    );
+  }
+  (0, import_child_process3.spawnSync)("schtasks", ["/Run", "/TN", SCHTASKS_TASK], { encoding: "utf8", timeout: 1e4 });
+}
+function uninstallSchtasks() {
+  (0, import_child_process3.spawnSync)("schtasks", ["/Delete", "/TN", SCHTASKS_TASK, "/F"], {
+    encoding: "utf8",
+    timeout: 1e4
+  });
+  const launcher = WIN_LAUNCHER();
+  if (import_fs43.default.existsSync(launcher)) {
+    try {
+      import_fs43.default.unlinkSync(launcher);
+    } catch {
+    }
+  }
+}
+function isSchtasksInstalled() {
+  const r = (0, import_child_process3.spawnSync)("schtasks", ["/Query", "/TN", SCHTASKS_TASK], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  return r.status === 0;
+}
+function isSchtasksEnabled() {
+  const r = (0, import_child_process3.spawnSync)("schtasks", ["/Query", "/TN", SCHTASKS_TASK, "/XML"], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  if (r.status !== 0) return false;
+  return !/<Enabled>\s*false\s*<\/Enabled>/i.test(r.stdout ?? "");
+}
 function stopRunningDaemon() {
   const pidFile = import_path42.default.join(import_os39.default.homedir(), ".node9", "daemon.pid");
   if (!import_fs43.default.existsSync(pidFile)) return;
@@ -21572,15 +21641,15 @@ function stopRunningDaemon() {
       try {
         process.kill(pid, "SIGTERM");
         const deadline = Date.now() + 3e3;
-        const pollStop = (0, import_child_process3.spawnSync)(
-          "sh",
-          ["-c", `while kill -0 ${pid} 2>/dev/null; do sleep 0.1; done`],
-          {
-            timeout: 3100
+        const sleeper = new Int32Array(new SharedArrayBuffer(4));
+        while (Date.now() < deadline) {
+          try {
+            process.kill(pid, 0);
+          } catch {
+            break;
           }
-        );
-        void pollStop;
-        void deadline;
+          Atomics.wait(sleeper, 0, 0, 100);
+        }
       } catch {
       }
     }
@@ -21618,6 +21687,11 @@ function installDaemonService() {
       installSystemd(binary);
       return { ok: true, platform: "systemd", alreadyInstalled };
     }
+    if (process.platform === "win32") {
+      const alreadyInstalled = isSchtasksInstalled();
+      installSchtasks(binary);
+      return { ok: true, platform: "schtasks", alreadyInstalled };
+    }
     return {
       ok: false,
       reason: `Automatic service install is not supported on ${process.platform}. Start the daemon manually with: node9 daemon start`
@@ -21639,6 +21713,10 @@ function uninstallDaemonService() {
       uninstallSystemd();
       return { ok: true, platform: "systemd", alreadyInstalled: false };
     }
+    if (process.platform === "win32") {
+      uninstallSchtasks();
+      return { ok: true, platform: "schtasks", alreadyInstalled: false };
+    }
     return {
       ok: false,
       reason: `Service management not supported on ${process.platform}.`
@@ -21653,11 +21731,14 @@ function uninstallDaemonService() {
 function isDaemonServiceInstalled() {
   if (process.platform === "darwin") return isLaunchdInstalled();
   if (process.platform === "linux") return isSystemdInstalled();
+  if (process.platform === "win32") return isSchtasksInstalled();
   return false;
 }
 function autostartRepairDecision(opts) {
   if (!opts.autoStartDaemon) return "skip";
-  if (process.platform !== "linux" && process.platform !== "darwin") return "unsupported";
+  if (process.platform !== "linux" && process.platform !== "darwin" && process.platform !== "win32") {
+    return "unsupported";
+  }
   if (!opts.installed) return "skip";
   return opts.enabled ? "ok" : "repair";
 }
@@ -21670,6 +21751,13 @@ function enableDaemonServiceQuiet() {
       });
       return r.status === 0;
     }
+    if (process.platform === "win32") {
+      const r = (0, import_child_process3.spawnSync)("schtasks", ["/Change", "/TN", SCHTASKS_TASK, "/ENABLE"], {
+        encoding: "utf8",
+        timeout: 5e3
+      });
+      return r.status === 0;
+    }
     return process.platform === "darwin";
   } catch {
     return false;
@@ -21684,10 +21772,13 @@ function ensureAutostartHealthy(autoStartDaemon) {
   if (decision === "repair") return enableDaemonServiceQuiet() ? "repaired" : "skipped";
   return decision === "ok" ? "ok" : decision === "unsupported" ? "unsupported" : "skipped";
 }
+function autostartInstallHint() {
+  return process.platform === "linux" ? "Run: systemctl --user enable --now node9-daemon   (or: node9 daemon install)" : "Run: node9 daemon install";
+}
 function autostartAdvice(opts) {
-  const installable = process.platform === "linux" || process.platform === "darwin";
+  const installable = process.platform === "linux" || process.platform === "darwin" || process.platform === "win32";
   if (!opts.cloudEnabled || !installable) return null;
-  const installHint = process.platform === "linux" ? "Run: systemctl --user enable --now node9-daemon   (or: node9 daemon install)" : "Run: node9 daemon install";
+  const installHint = autostartInstallHint();
   if (opts.installed && !opts.enabled) {
     return {
       level: "warn",
@@ -21720,11 +21811,14 @@ function isDaemonServiceEnabled() {
       });
       return r.status === 0;
     }
+    if (process.platform === "win32") {
+      return isSchtasksEnabled();
+    }
   } catch {
   }
   return false;
 }
-var import_fs43, import_path42, import_os39, import_child_process3, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
+var import_fs43, import_path42, import_os39, import_child_process3, LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT, SCHTASKS_TASK, WIN_LAUNCHER;
 var init_service = __esm({
   "src/daemon/service.ts"() {
     "use strict";
@@ -21736,6 +21830,8 @@ var init_service = __esm({
     LAUNCHD_PLIST = import_path42.default.join(import_os39.default.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
     SYSTEMD_UNIT_DIR = import_path42.default.join(import_os39.default.homedir(), ".config", "systemd", "user");
     SYSTEMD_UNIT = import_path42.default.join(SYSTEMD_UNIT_DIR, "node9-daemon.service");
+    SCHTASKS_TASK = "Node9Daemon";
+    WIN_LAUNCHER = () => import_path42.default.join(import_os39.default.homedir(), ".node9", "daemon-launcher.vbs");
   }
 });
 
@@ -48029,6 +48125,20 @@ function buildReviewMessage(blockedByLabel, ruleDescription, reason) {
   return `Node9 flagged this for your review: ${why}. Approve to proceed, or deny to cancel.`;
 }
 
+// src/utils/platform-shell.ts
+function locatorCommand() {
+  return process.platform === "win32" ? "where" : "which";
+}
+function shellInvocation(command) {
+  if (process.platform === "win32") {
+    return {
+      file: process.env.ComSpec || "cmd.exe",
+      args: ["/d", "/s", "/c", command]
+    };
+  }
+  return { file: "/bin/bash", args: ["-c", command] };
+}
+
 // src/proxy/index.ts
 function sanitize(value) {
   return value.replace(/[\x00-\x1F\x7F]/g, "");
@@ -48040,14 +48150,16 @@ async function runProxy(targetCommand) {
   let executable = cmd;
   let useShell = false;
   try {
-    const { stdout } = await (0, import_execa.execa)("which", [cmd]);
-    if (stdout) executable = stdout.trim();
+    const { stdout } = await (0, import_execa.execa)(locatorCommand(), [cmd]);
+    const first = stdout.split(/\r?\n/)[0]?.trim();
+    if (first) executable = first;
   } catch {
     useShell = true;
   }
   console.error(import_chalk8.default.green(`\u{1F680} Node9 Proxy Active: Monitoring [${targetCommand}]`));
   const spawnEnv = { ...process.env, FORCE_COLOR: "1" };
-  const child = useShell ? (0, import_child_process4.spawn)("/bin/bash", ["-c", targetCommand], {
+  const shell = shellInvocation(targetCommand);
+  const child = useShell ? (0, import_child_process4.spawn)(shell.file, shell.args, {
     stdio: ["pipe", "pipe", "inherit"],
     shell: false,
     env: spawnEnv
@@ -48111,6 +48223,17 @@ async function runProxy(targetCommand) {
     child.stdin.write(line + "\n");
   });
   child.stdout.pipe(process.stdout);
+  child.on("error", (err2) => {
+    const what = useShell ? shell.file : executable;
+    console.error(
+      import_chalk8.default.red(
+        err2.code === "ENOENT" ? `
+\u274C Node9 could not run "${targetCommand}": ${what} was not found on this machine.` : `
+\u274C Node9 could not run "${targetCommand}": ${err2.message}`
+      )
+    );
+    process.exit(127);
+  });
   child.on("exit", (code) => process.exit(code || 0));
 }
 
@@ -48256,7 +48379,7 @@ async function onboardMachine(apiKey, opts = {}) {
       push.ok ? { name: "register", ok: true, detail: "machine visible in the dashboard" } : { name: "register", ok: false, detail: push.reason }
     );
     const healed = ensureAutostartHealthy(!!getConfig().settings.autoStartDaemon);
-    const detail = healed === "repaired" ? "autostart re-enabled (survives reboot)" : isDaemonRunning() ? "running" : healed === "unsupported" ? "no background service on this platform: starts on agent activity" : "starts on agent activity";
+    const detail = healed === "repaired" ? "autostart re-enabled (survives reboot)" : isDaemonRunning() ? "running" : healed === "unsupported" ? "no background service on this platform: starts on agent activity" : "starts on agent activity (make it survive reboots: node9 daemon install)";
     steps.push({ name: "daemon", ok: true, detail });
   }
   const required = ["credentials", "policy-sync", "register"];
@@ -50232,8 +50355,10 @@ function registerDoctorCommand(program2, version2) {
 `));
     section("Binary");
     try {
-      const locator = process.platform === "win32" ? "where node9" : "which node9";
-      const found = (0, import_child_process8.execSync)(locator, { encoding: "utf-8", timeout: 3e3 }).split(/\r?\n/)[0].trim();
+      const found = (0, import_child_process8.execSync)(`${locatorCommand()} node9`, {
+        encoding: "utf-8",
+        timeout: 3e3
+      }).split(/\r?\n/)[0].trim();
       pass(`node9 found at ${found}`);
     } catch {
       warn("node9 not found in $PATH \u2014 hooks may not find it", "Run: npm install -g node9-ai");
@@ -50360,7 +50485,9 @@ function registerDoctorCommand(program2, version2) {
         const fails = health.consecutiveFailures > 0 ? ` (${health.consecutiveFailures} consecutive failure${health.consecutiveFailures === 1 ? "" : "s"}${health.lastError ? `: ${health.lastError}` : ""})` : "";
         warn(
           `Cloud policy is STALE \u2014 ${when}${fails}. The cached policy is still enforced, but changes from the dashboard are not reaching this machine.`,
-          "Run: node9 policy sync   (and ensure the daemon autostarts: systemctl --user enable --now node9-daemon)"
+          // Platform-aware: this hint hardcoded systemctl and told a Windows
+          // founder to run a Linux command (QA 2026-08-28).
+          `Run: node9 policy sync   (then keep it fresh across reboots \u2014 ${autostartInstallHint()})`
         );
       } else if (health.lastCheckedAt) {
         pass(`Cloud policy fresh \u2014 last synced ${agoLabel(health.lastCheckedAt)}`);
@@ -52102,7 +52229,7 @@ function registerInitCommand(program2) {
         await setupAgent(agent);
         console.log("");
       }
-      if ((process.platform === "darwin" || process.platform === "linux") && process.stdout.isTTY) {
+      if ((process.platform === "darwin" || process.platform === "linux" || process.platform === "win32") && process.stdout.isTTY) {
         const alreadyInstalled = isDaemonServiceInstalled();
         if (!alreadyInstalled) {
           const { confirm: confirm4 } = await import("@inquirer/prompts");

package/dist/cli.mjs

@@ -21558,6 +21558,75 @@ function uninstallSystemd() {
 function isSystemdInstalled() {
   return fs44.existsSync(SYSTEMD_UNIT);
 }
+function windowsLauncherVbs(nodePath, scriptPath) {
+  for (const p of [nodePath, scriptPath]) {
+    if (p.includes('"')) throw new Error(`Illegal quote in path: ${p}`);
+  }
+  return [
+    "' Auto-generated by node9 \u2014 starts the approval daemon with no console window.",
+    "' Recreated on every `node9 daemon install`; safe to delete (uninstall does).",
+    'Set sh = CreateObject("Wscript.Shell")',
+    'sh.Environment("PROCESS")("NODE9_AUTO_STARTED") = "1"',
+    `sh.Run """${nodePath}"" ""${scriptPath}"" daemon", 0, False`,
+    ""
+  ].join("\r\n");
+}
+function schtasksCreateArgs(launcherPath) {
+  return [
+    "/Create",
+    "/TN",
+    SCHTASKS_TASK,
+    "/TR",
+    `wscript.exe //B "${launcherPath}"`,
+    "/SC",
+    "ONLOGON",
+    "/F"
+  ];
+}
+function installSchtasks(binaryPath) {
+  const launcher = WIN_LAUNCHER();
+  const dir = path43.dirname(launcher);
+  if (!fs44.existsSync(dir)) fs44.mkdirSync(dir, { recursive: true });
+  fs44.writeFileSync(launcher, windowsLauncherVbs(process.execPath, binaryPath), "utf-8");
+  const create = spawnSync2("schtasks", schtasksCreateArgs(launcher), {
+    encoding: "utf8",
+    timeout: 1e4
+  });
+  if (create.status !== 0) {
+    throw new Error(
+      `schtasks /Create failed: ${create.stderr || create.stdout || "unknown error"}`
+    );
+  }
+  spawnSync2("schtasks", ["/Run", "/TN", SCHTASKS_TASK], { encoding: "utf8", timeout: 1e4 });
+}
+function uninstallSchtasks() {
+  spawnSync2("schtasks", ["/Delete", "/TN", SCHTASKS_TASK, "/F"], {
+    encoding: "utf8",
+    timeout: 1e4
+  });
+  const launcher = WIN_LAUNCHER();
+  if (fs44.existsSync(launcher)) {
+    try {
+      fs44.unlinkSync(launcher);
+    } catch {
+    }
+  }
+}
+function isSchtasksInstalled() {
+  const r = spawnSync2("schtasks", ["/Query", "/TN", SCHTASKS_TASK], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  return r.status === 0;
+}
+function isSchtasksEnabled() {
+  const r = spawnSync2("schtasks", ["/Query", "/TN", SCHTASKS_TASK, "/XML"], {
+    encoding: "utf8",
+    timeout: 5e3
+  });
+  if (r.status !== 0) return false;
+  return !/<Enabled>\s*false\s*<\/Enabled>/i.test(r.stdout ?? "");
+}
 function stopRunningDaemon() {
   const pidFile = path43.join(os40.homedir(), ".node9", "daemon.pid");
   if (!fs44.existsSync(pidFile)) return;
@@ -21569,15 +21638,15 @@ function stopRunningDaemon() {
       try {
         process.kill(pid, "SIGTERM");
         const deadline = Date.now() + 3e3;
-        const pollStop = spawnSync2(
-          "sh",
-          ["-c", `while kill -0 ${pid} 2>/dev/null; do sleep 0.1; done`],
-          {
-            timeout: 3100
+        const sleeper = new Int32Array(new SharedArrayBuffer(4));
+        while (Date.now() < deadline) {
+          try {
+            process.kill(pid, 0);
+          } catch {
+            break;
           }
-        );
-        void pollStop;
-        void deadline;
+          Atomics.wait(sleeper, 0, 0, 100);
+        }
       } catch {
       }
     }
@@ -21615,6 +21684,11 @@ function installDaemonService() {
       installSystemd(binary);
       return { ok: true, platform: "systemd", alreadyInstalled };
     }
+    if (process.platform === "win32") {
+      const alreadyInstalled = isSchtasksInstalled();
+      installSchtasks(binary);
+      return { ok: true, platform: "schtasks", alreadyInstalled };
+    }
     return {
       ok: false,
       reason: `Automatic service install is not supported on ${process.platform}. Start the daemon manually with: node9 daemon start`
@@ -21636,6 +21710,10 @@ function uninstallDaemonService() {
       uninstallSystemd();
       return { ok: true, platform: "systemd", alreadyInstalled: false };
     }
+    if (process.platform === "win32") {
+      uninstallSchtasks();
+      return { ok: true, platform: "schtasks", alreadyInstalled: false };
+    }
     return {
       ok: false,
       reason: `Service management not supported on ${process.platform}.`
@@ -21650,11 +21728,14 @@ function uninstallDaemonService() {
 function isDaemonServiceInstalled() {
   if (process.platform === "darwin") return isLaunchdInstalled();
   if (process.platform === "linux") return isSystemdInstalled();
+  if (process.platform === "win32") return isSchtasksInstalled();
   return false;
 }
 function autostartRepairDecision(opts) {
   if (!opts.autoStartDaemon) return "skip";
-  if (process.platform !== "linux" && process.platform !== "darwin") return "unsupported";
+  if (process.platform !== "linux" && process.platform !== "darwin" && process.platform !== "win32") {
+    return "unsupported";
+  }
   if (!opts.installed) return "skip";
   return opts.enabled ? "ok" : "repair";
 }
@@ -21667,6 +21748,13 @@ function enableDaemonServiceQuiet() {
       });
       return r.status === 0;
     }
+    if (process.platform === "win32") {
+      const r = spawnSync2("schtasks", ["/Change", "/TN", SCHTASKS_TASK, "/ENABLE"], {
+        encoding: "utf8",
+        timeout: 5e3
+      });
+      return r.status === 0;
+    }
     return process.platform === "darwin";
   } catch {
     return false;
@@ -21681,10 +21769,13 @@ function ensureAutostartHealthy(autoStartDaemon) {
   if (decision === "repair") return enableDaemonServiceQuiet() ? "repaired" : "skipped";
   return decision === "ok" ? "ok" : decision === "unsupported" ? "unsupported" : "skipped";
 }
+function autostartInstallHint() {
+  return process.platform === "linux" ? "Run: systemctl --user enable --now node9-daemon   (or: node9 daemon install)" : "Run: node9 daemon install";
+}
 function autostartAdvice(opts) {
-  const installable = process.platform === "linux" || process.platform === "darwin";
+  const installable = process.platform === "linux" || process.platform === "darwin" || process.platform === "win32";
   if (!opts.cloudEnabled || !installable) return null;
-  const installHint = process.platform === "linux" ? "Run: systemctl --user enable --now node9-daemon   (or: node9 daemon install)" : "Run: node9 daemon install";
+  const installHint = autostartInstallHint();
   if (opts.installed && !opts.enabled) {
     return {
       level: "warn",
@@ -21717,11 +21808,14 @@ function isDaemonServiceEnabled() {
       });
       return r.status === 0;
     }
+    if (process.platform === "win32") {
+      return isSchtasksEnabled();
+    }
   } catch {
   }
   return false;
 }
-var LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT;
+var LAUNCHD_LABEL, LAUNCHD_PLIST, SYSTEMD_UNIT_DIR, SYSTEMD_UNIT, SCHTASKS_TASK, WIN_LAUNCHER;
 var init_service = __esm({
   "src/daemon/service.ts"() {
     "use strict";
@@ -21729,6 +21823,8 @@ var init_service = __esm({
     LAUNCHD_PLIST = path43.join(os40.homedir(), "Library", "LaunchAgents", `${LAUNCHD_LABEL}.plist`);
     SYSTEMD_UNIT_DIR = path43.join(os40.homedir(), ".config", "systemd", "user");
     SYSTEMD_UNIT = path43.join(SYSTEMD_UNIT_DIR, "node9-daemon.service");
+    SCHTASKS_TASK = "Node9Daemon";
+    WIN_LAUNCHER = () => path43.join(os40.homedir(), ".node9", "daemon-launcher.vbs");
   }
 });
 
@@ -48022,6 +48118,20 @@ function buildReviewMessage(blockedByLabel, ruleDescription, reason) {
   return `Node9 flagged this for your review: ${why}. Approve to proceed, or deny to cancel.`;
 }
 
+// src/utils/platform-shell.ts
+function locatorCommand() {
+  return process.platform === "win32" ? "where" : "which";
+}
+function shellInvocation(command) {
+  if (process.platform === "win32") {
+    return {
+      file: process.env.ComSpec || "cmd.exe",
+      args: ["/d", "/s", "/c", command]
+    };
+  }
+  return { file: "/bin/bash", args: ["-c", command] };
+}
+
 // src/proxy/index.ts
 function sanitize(value) {
   return value.replace(/[\x00-\x1F\x7F]/g, "");
@@ -48033,14 +48143,16 @@ async function runProxy(targetCommand) {
   let executable = cmd;
   let useShell = false;
   try {
-    const { stdout } = await execa("which", [cmd]);
-    if (stdout) executable = stdout.trim();
+    const { stdout } = await execa(locatorCommand(), [cmd]);
+    const first = stdout.split(/\r?\n/)[0]?.trim();
+    if (first) executable = first;
   } catch {
     useShell = true;
   }
   console.error(chalk8.green(`\u{1F680} Node9 Proxy Active: Monitoring [${targetCommand}]`));
   const spawnEnv = { ...process.env, FORCE_COLOR: "1" };
-  const child = useShell ? spawn2("/bin/bash", ["-c", targetCommand], {
+  const shell = shellInvocation(targetCommand);
+  const child = useShell ? spawn2(shell.file, shell.args, {
     stdio: ["pipe", "pipe", "inherit"],
     shell: false,
     env: spawnEnv
@@ -48104,6 +48216,17 @@ async function runProxy(targetCommand) {
     child.stdin.write(line + "\n");
   });
   child.stdout.pipe(process.stdout);
+  child.on("error", (err2) => {
+    const what = useShell ? shell.file : executable;
+    console.error(
+      chalk8.red(
+        err2.code === "ENOENT" ? `
+\u274C Node9 could not run "${targetCommand}": ${what} was not found on this machine.` : `
+\u274C Node9 could not run "${targetCommand}": ${err2.message}`
+      )
+    );
+    process.exit(127);
+  });
   child.on("exit", (code) => process.exit(code || 0));
 }
 
@@ -48249,7 +48372,7 @@ async function onboardMachine(apiKey, opts = {}) {
       push.ok ? { name: "register", ok: true, detail: "machine visible in the dashboard" } : { name: "register", ok: false, detail: push.reason }
     );
     const healed = ensureAutostartHealthy(!!getConfig().settings.autoStartDaemon);
-    const detail = healed === "repaired" ? "autostart re-enabled (survives reboot)" : isDaemonRunning() ? "running" : healed === "unsupported" ? "no background service on this platform: starts on agent activity" : "starts on agent activity";
+    const detail = healed === "repaired" ? "autostart re-enabled (survives reboot)" : isDaemonRunning() ? "running" : healed === "unsupported" ? "no background service on this platform: starts on agent activity" : "starts on agent activity (make it survive reboots: node9 daemon install)";
     steps.push({ name: "daemon", ok: true, detail });
   }
   const required = ["credentials", "policy-sync", "register"];
@@ -50225,8 +50348,10 @@ function registerDoctorCommand(program2, version2) {
 `));
     section("Binary");
     try {
-      const locator = process.platform === "win32" ? "where node9" : "which node9";
-      const found = execSync(locator, { encoding: "utf-8", timeout: 3e3 }).split(/\r?\n/)[0].trim();
+      const found = execSync(`${locatorCommand()} node9`, {
+        encoding: "utf-8",
+        timeout: 3e3
+      }).split(/\r?\n/)[0].trim();
       pass(`node9 found at ${found}`);
     } catch {
       warn("node9 not found in $PATH \u2014 hooks may not find it", "Run: npm install -g node9-ai");
@@ -50353,7 +50478,9 @@ function registerDoctorCommand(program2, version2) {
         const fails = health.consecutiveFailures > 0 ? ` (${health.consecutiveFailures} consecutive failure${health.consecutiveFailures === 1 ? "" : "s"}${health.lastError ? `: ${health.lastError}` : ""})` : "";
         warn(
           `Cloud policy is STALE \u2014 ${when}${fails}. The cached policy is still enforced, but changes from the dashboard are not reaching this machine.`,
-          "Run: node9 policy sync   (and ensure the daemon autostarts: systemctl --user enable --now node9-daemon)"
+          // Platform-aware: this hint hardcoded systemctl and told a Windows
+          // founder to run a Linux command (QA 2026-08-28).
+          `Run: node9 policy sync   (then keep it fresh across reboots \u2014 ${autostartInstallHint()})`
         );
       } else if (health.lastCheckedAt) {
         pass(`Cloud policy fresh \u2014 last synced ${agoLabel(health.lastCheckedAt)}`);
@@ -52095,7 +52222,7 @@ function registerInitCommand(program2) {
         await setupAgent(agent);
         console.log("");
       }
-      if ((process.platform === "darwin" || process.platform === "linux") && process.stdout.isTTY) {
+      if ((process.platform === "darwin" || process.platform === "linux" || process.platform === "win32") && process.stdout.isTTY) {
         const alreadyInstalled = isDaemonServiceInstalled();
         if (!alreadyInstalled) {
           const { confirm: confirm4 } = await import("@inquirer/prompts");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node9/proxy",
-  "version": "2.2.1",
+  "version": "2.3.0",
   "description": "The Sudo Command for AI Agents. Execution Security for Claude Code, Codex, Gemini, Cursor, Opencode, Pi, and any MCP server.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",