@ran-sh/dsh-crew 0.5.1 → 0.5.3

package/src/config-readiness.mjs

@@ -1,31 +1,71 @@
 import { buildReadinessMatrix, READINESS_REASON_CODES } from './readiness-matrix.mjs';
 
-function warningCodes(catalogBody) {
+function warningCodes(catalogBody) {
   const hints = Array.isArray(catalogBody?.health?.hints) ? catalogBody.health.hints : [];
   return [...new Set(hints
     .filter((hint) => hint?.level === 'warning' && typeof hint?.code === 'string' && hint.code.trim())
     .map((hint) => hint.code.trim()))];
-}
+}
+
+function verifiedHubJob(job) {
+  return job?.status === 'done'
+    && job?.task_status === 'success'
+    && job?.delivery_complete === true
+    && job?.workspace_evidence_ok === true;
+}
+
+export function buildHubExecutionRows(hubJobs = []) {
+  const jobs = Array.isArray(hubJobs) ? hubJobs : [];
+  const workerPassed = jobs.some((job) => job?.role === 'worker' && verifiedHubJob(job));
+  const reviewerPassed = jobs.some((job) => job?.role === 'reviewer'
+    && verifiedHubJob(job)
+    && job?.review_verdict === 'approve');
+  return [
+    workerPassed
+      ? { id: 'model_execution', status: 'PASS', reason_code: 'REAL_EXECUTION_PASSED', evidence_source: 'hub-jobs' }
+      : { id: 'model_execution', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE', evidence_source: 'none' },
+    reviewerPassed
+      ? { id: 'reviewer_pipeline', status: 'PASS', reason_code: 'REAL_REVIEW_PASSED', evidence_source: 'hub-jobs' }
+      : { id: 'reviewer_pipeline', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE', evidence_source: 'none' },
+  ];
+}
 
 /**
  * Enrich the conservative runtime matrix with evidence the config report has
  * already collected. This function performs no I/O and never reads provider
  * configuration, credentials, quotas, pricing, or hidden catalog expectations.
  */
-export function buildConfigReadinessMatrix({
-  platform = process.platform,
-  hubCompatibility = null,
-  workerProviderMode = null,
-  providerCatalogChecked = false,
-  providerCatalogBody = null,
-} = {}) {
+export function buildConfigReadinessMatrix({
+  platform = process.platform,
+  hubCompatibility = null,
+  workerProviderMode = null,
+  providerCatalogChecked = false,
+  providerCatalogBody = null,
+  hubJobsChecked = false,
+  hubJobsBody = null,
+} = {}) {
   const warnings = warningCodes(providerCatalogBody);
   const catalogResponseOk = !!providerCatalogBody
     && typeof providerCatalogBody === 'object'
     && providerCatalogBody.ok !== false;
   const catalogOk = providerCatalogChecked && catalogResponseOk && warnings.length === 0;
 
-  const evidence = {};
+  const evidence = {};
+  const hubJobs = hubCompatibility?.compatible === true
+    && hubJobsChecked
+    && hubJobsBody?.ok !== false
+    && Array.isArray(hubJobsBody?.jobs)
+    ? hubJobsBody.jobs
+    : [];
+  for (const row of buildHubExecutionRows(hubJobs)) {
+    if (row.status === 'PASS') {
+      evidence[row.id] = {
+        status: row.status,
+        reason_code: row.reason_code,
+        evidence_source: row.evidence_source,
+      };
+    }
+  }
   if (
     workerProviderMode !== 'deepseek-official'
     && hubCompatibility?.compatible === true

package/src/hub/index.mjs

@@ -20,7 +20,7 @@ import { buildDirectSelectionTrace, resolveWorkerModel, resolveModel } from '../
 import { readHarnessModelCatalog } from '../model-catalog.mjs';
 import { appendDeliveryInstructions, parseDeliveryReport, formatDeliveryMetadata } from '../delivery.mjs';
 import { captureWorkspaceBaseline, captureWorkspaceDiff, NOT_A_GIT_REPOSITORY } from '../workspace-audit.mjs';
-import { buildOutcome, JOB_PHASES } from '../workflow.mjs';
+import { applyWorkspaceEvidence, buildOutcome, JOB_PHASES } from '../workflow.mjs';
 import { boundedMachineCodeFromError } from '../structured-error-code.mjs';
 import { createCanonicalJobEvent, projectWorkflowView } from '../job-contracts.mjs';
 import { getHubRuntimeIdentity } from '../runtime-identity.mjs';
@@ -29,6 +29,7 @@ import { addContextReferences, buildWorkspaceTask, isSafeBranchName, loadWorkspa
 import { buildExtensionContract } from '../extension-contract.mjs';
 import { cleanupIsolatedWorkspace, createIsolatedWorkspace } from '../workspace-isolation.mjs';
 import { assessWorkspaceReadiness } from '../workspace-readiness.mjs';
+import { buildHubExecutionRows } from '../config-readiness.mjs';
 
 // policy.mjs is pure (no @deepseek-ai imports, no ctx access), so importing it
 // here is safe for the profile-realm discipline: it never pulls in package
@@ -119,7 +120,20 @@ export function hubCanonicalEvents(job = {}) {
   }));
 }
 
-// ---------- job registry ----------
+// ---------- job registry ----------
+
+export function applyHubWorkspaceEvidence({ outcome, workspaceDiff, allowNoChanges = false, isolation = 'shared', role = 'worker' } = {}) {
+  const changes = workspaceDiff?.changes ?? {};
+  const hasChanges = ['modified', 'deleted', 'renamed', 'untracked']
+    .some((key) => Array.isArray(changes[key]) && changes[key].length > 0);
+  const evidenceAvailable = workspaceDiff?.kind === 'git' && workspaceDiff.dirtyBaseline !== true;
+  return applyWorkspaceEvidence(outcome, {
+    evidenceAvailable,
+    hasChanges,
+    allowNoChanges: allowNoChanges === true && isolation === 'worktree',
+    requireNoChangeAuthorization: role === 'worker',
+  });
+}
 
 // Exported for the unit tests (test/hub-windows.test.mjs); instantiation
 // needs only a duck-typed ctx, so spawn()'s path guard is testable without a
@@ -145,6 +159,10 @@ export class WorkerRegistry {  constructor(ctx) {
       startedAt: job.startedAt, endedAt: job.endedAt,
       isolation: job.isolation ?? 'shared', workspace_branch: job.workspace_branch ?? null,
       delivery_complete: !!job.delivery_complete,
+      allow_no_changes: job.allow_no_changes === true,
+      task_status: job.outcome?.task_status ?? null,
+      workspace_evidence_ok: job.outcome?.workspace_evidence_ok ?? null,
+      review_verdict: job.review?.verdict ?? null,
       workspace_diff_available: !!job.workspaceDiff && job.workspaceDiff.kind === 'git',
       workspace_retained: job.workspace_retained === true,
       cleanup_warning: job.cleanup_warning ?? null,
@@ -182,7 +200,7 @@ export class WorkerRegistry {  constructor(ctx) {
    * `role` (worker | reviewer) records who does the work; `tier` remains the
    * legacy model-class slot. Reviewer-role jobs always use the pro slot.
    */
-  async spawn({ task, tier = 'flash', role, attempt = 0, effort = 'max', cwd, source = 'api', preset, delivery = 'coding', client_job_id, requested_isolation, workspace_branch, timeout_seconds, profile_id, workspace_context }) {
+  async spawn({ task, tier = 'flash', role, attempt = 0, effort = 'max', cwd, source = 'api', preset, delivery = 'coding', client_job_id, requested_isolation, workspace_branch, timeout_seconds, profile_id, workspace_context, allow_no_changes }) {
     // role is only honored when the caller explicitly names it; a legacy
     // tier-only spawn (role === undefined) keeps the exact v0.1 resolution.
     const hasRole = role === 'worker' || role === 'reviewer';
@@ -291,6 +309,7 @@ export class WorkerRegistry {  constructor(ctx) {
       effort, reasoning_effort: selection.reasoningEffort,
       task, source, cwd: executionCwd, requested_cwd: cwd,
       isolation: isolatedWorkspace ? 'worktree' : 'shared',
+      allow_no_changes: allow_no_changes === true,
       workspace_branch: workspace_branch ?? null, isolatedWorkspace,
       profile_id: profile_id ?? null, workspace_context: workspace_context ?? null,
       prompt: workerPrompt, delivery: delivery === 'review' ? 'review' : 'coding',
@@ -451,6 +470,13 @@ export class WorkerRegistry {  constructor(ctx) {
         job.workspaceDiff = job.baseline.kind === 'git'
           ? await captureWorkspaceDiff({ cwd: executionCwd, baseline: job.baseline }).catch(() => ({ kind: 'no-git', reason: NOT_A_GIT_REPOSITORY, error: 'workspace diff failed' }))
           : job.baseline;
+        job.outcome = applyHubWorkspaceEvidence({
+          outcome: job.outcome,
+          workspaceDiff: job.workspaceDiff,
+          allowNoChanges: job.allow_no_changes,
+          isolation: job.isolation,
+          role: job.role,
+        });
         if (job.role === 'reviewer' && job.review && job.workspaceDiff?.kind === 'git') {
           const changes = job.workspaceDiff.changes ?? {};
           const mutated = ['modified', 'deleted', 'renamed', 'untracked'].some((key) => Array.isArray(changes[key]) && changes[key].length > 0);
@@ -609,6 +635,9 @@ export function resolveHubSpawnPayload(payload, getConfig = () => ({}), dependen
     if (raw.constraints?.allow_fallback !== undefined && typeof raw.constraints.allow_fallback !== 'boolean') {
       return { ok: false, code: 'JOB_CONSTRAINTS_INVALID', error: 'allow_fallback must be boolean' };
     }
+    if (raw.constraints?.allow_no_changes !== undefined && typeof raw.constraints.allow_no_changes !== 'boolean') {
+      return { ok: false, code: 'JOB_CONSTRAINTS_INVALID', error: 'allow_no_changes must be boolean' };
+    }
     const profileRegistry = dependencies.profileRegistry ?? loadRoleProfiles();
     const workspaceRegistry = dependencies.workspaceRegistry ?? loadWorkspaceContexts();
     if (!profileRegistry.ok) return { ok: false, code: 'PROFILE_FILE_INVALID', error: 'role profile registry is invalid' };
@@ -647,6 +676,7 @@ export function resolveHubSpawnPayload(payload, getConfig = () => ({}), dependen
       workspace_branch: raw.workspace?.branch ?? withRefs.context?.default_branch ?? null,
       timeout_seconds: raw.constraints?.timeout_seconds ?? profile.timeout_seconds,
       allow_fallback: raw.constraints?.allow_fallback ?? profile.fallback,
+      allow_no_changes: raw.constraints?.allow_no_changes === true,
       routing: profile.routing,
       review_strictness: profile.review_strictness,
       profile_id: resolvedProfile.profile_id,
@@ -852,12 +882,7 @@ export async function apply(ctx) {
           ? { status: 'UNAVAILABLE', reason_code: 'WORKSPACE_CONTEXT_NOT_FOUND' }
           : await assessWorkspaceReadiness({ cwd: requestedContext?.repo_root ?? null });
         const liveJobs = typeof hub.list === 'function' ? hub.list() : [];
-        const modelExecution = liveJobs.some((job) => job?.role === 'worker' && job?.status === 'done')
-          ? { id: 'model_execution', status: 'PASS', reason_code: 'REAL_EXECUTION_PASSED' }
-          : { id: 'model_execution', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE' };
-        const reviewerExecution = liveJobs.some((job) => job?.role === 'reviewer' && job?.status === 'done')
-          ? { id: 'reviewer_pipeline', status: 'PASS', reason_code: 'REAL_REVIEW_PASSED' }
-          : { id: 'reviewer_pipeline', status: 'NOT_RUN', reason_code: 'NO_EXECUTION_EVIDENCE' };
+        const [modelExecution, reviewerExecution] = buildHubExecutionRows(liveJobs);
         const contract = buildExtensionContract({
           config,
           readinessMatrix: { rows: [
@@ -1033,8 +1058,8 @@ export async function apply(ctx) {
           // Cache-busted import: the installer must always run the code
           // currently on disk, not whatever this process first loaded —
           // a stale cached copy once re-broke user settings after a fix.
-          const { installClaudeCode, installCodex, installHudSegment, uninstallClaudeCode, uninstallCodex } =
-            await import(`../install/install.mjs?t=${Date.now()}`);
+          const { installClaudeCode, installCodex, installHudSegment, uninstallClaudeCode, uninstallCodex, installZCode, uninstallZCode } =
+            await import(`../install/install.mjs?t=${Date.now()}`);
           if (target === 'claude') {
             const base = await installClaudeCode({ statusline: !!statusline });
             const hud = installHudSegment({});
@@ -1043,10 +1068,12 @@ export async function apply(ctx) {
               actions: [...base.actions, ...hud.actions.map((a) => `hud: ${a}`)],
             });
           }
-          if (target === 'codex') return sendJson(res, 200, installCodex({}));
-          if (target === 'claude-uninstall') return sendJson(res, 200, uninstallClaudeCode({}));
-          if (target === 'codex-uninstall') return sendJson(res, 200, uninstallCodex({}));
-          return sendJson(res, 400, { ok: false, error: 'target must be claude | codex | claude-uninstall | codex-uninstall' });
+          if (target === 'codex') return sendJson(res, 200, installCodex({}));
+          if (target === 'zcode') return sendJson(res, 200, installZCode({}));
+          if (target === 'claude-uninstall') return sendJson(res, 200, uninstallClaudeCode({}));
+          if (target === 'codex-uninstall') return sendJson(res, 200, uninstallCodex({}));
+          if (target === 'zcode-uninstall') return sendJson(res, 200, uninstallZCode({}));
+          return sendJson(res, 400, { ok: false, error: 'target must be claude | codex | zcode | claude-uninstall | codex-uninstall | zcode-uninstall' });
         } catch (err) {
           return sendJson(res, 500, { ok: false, error: err?.message ?? String(err) });
         }

package/src/install/install-legacy.mjs

@@ -6,11 +6,14 @@ import { readFileSync, writeFileSync, mkdirSync, copyFileSync, existsSync, readd
 import { dirname, join, resolve, relative } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { homedir } from 'node:os';
-import { normalizeModelPriority } from '../model-routing.mjs';
+import { normalizeModelPriority } from '../model-routing.mjs';
+import { zcodeStatus } from './zcode.mjs';
 
 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '..', '..');
 const MARKETPLACE_NAME = 'dsh-crew';
-const PLUGIN_KEY = `dsh-crew@${MARKETPLACE_NAME}`;
+const PLUGIN_KEY = `dsh-crew@${MARKETPLACE_NAME}`;
+const POLICY_START = '<!-- DSH CREW MANAGED POLICY:START -->';
+const POLICY_END = '<!-- DSH CREW MANAGED POLICY:END -->';
 // dsh_worker_config is included so the session commands (/dsh-crew:config,
 // /dsh-config) and any orchestrator policy lookup run without an extra
 // authorization prompt.
@@ -33,6 +36,50 @@ function readText(file) {
   try { return readFileSync(file, 'utf8'); } catch { return null; }
 }
 
+function managedPolicyBlock(root) {
+  const policy = readText(join(root, 'codex', 'AGENTS.md'))?.trim();
+  if (!policy) return null;
+  return `${POLICY_START}\n${policy}\n${POLICY_END}`;
+}
+
+function installGlobalCodexPolicy({ home, root }) {
+  const file = join(home, '.codex', 'AGENTS.md');
+  const block = managedPolicyBlock(root);
+  if (!block) return { ok: false, action: 'global policy template missing' };
+  mkdirSync(dirname(file), { recursive: true });
+  const current = readText(file) ?? '';
+  const managed = new RegExp(`${POLICY_START.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}[\\s\\S]*?${POLICY_END.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`, 'm');
+  const template = readText(join(root, 'codex', 'AGENTS.md'))?.trim() ?? '';
+  let next;
+  if (managed.test(current)) next = current.replace(managed, block);
+  else if (current.trim() === template) next = `${block}\n`;
+  else next = `${current.trimEnd()}${current.trim() ? '\n\n' : ''}${block}\n`;
+  if (next !== current) {
+    backup(file);
+    writeFileSync(file, next);
+  }
+  return { ok: true, action: `global policy: ${file}` };
+}
+
+function globalCodexPolicyReady({ home, root = ROOT }) {
+  const block = managedPolicyBlock(root);
+  const text = readText(join(home, '.codex', 'AGENTS.md'));
+  return !!block && typeof text === 'string' && text.includes(block);
+}
+
+function uninstallGlobalCodexPolicy({ home }) {
+  const file = join(home, '.codex', 'AGENTS.md');
+  const current = readText(file);
+  if (typeof current !== 'string') return null;
+  const managed = new RegExp(`(?:\\r?\\n){0,2}${POLICY_START.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}[\\s\\S]*?${POLICY_END.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}(?:\\r?\\n)?`, 'm');
+  if (!managed.test(current)) return null;
+  const next = current.replace(managed, '').trimEnd();
+  backup(file);
+  if (next.trim()) writeFileSync(file, `${next}\n`);
+  else rmSync(file);
+  return `codex global policy: removed managed block`;
+}
+
 function tomlSection(text, name) {
   if (typeof text !== 'string') return null;
   const escaped = name.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
@@ -256,7 +303,7 @@ export function writeGlobalConfig(patch) {
 }
 
 /** What is currently installed where — drives the settings-page buttons. */
-export function installStatus({ home = homedir() } = {}) {
+export function installStatus({ home = homedir(), root } = {}) {
   const settings = readJson(join(home, '.claude', 'settings.json'), {});
   const enabled = settings.enabledPlugins;
   const claudeInstalled = !!(enabled && !Array.isArray(enabled) && enabled[PLUGIN_KEY]);
@@ -282,6 +329,7 @@ export function installStatus({ home = homedir() } = {}) {
     status_prompt: !!readText(join(codexRoot, 'prompts', 'dsh-status.md'))?.trim(),
     mcp: !!mcpTarget,
     target_alignment: !!workerTarget && workerTarget === reviewerTarget && workerTarget === mcpTarget,
+    global_policy: globalCodexPolicyReady({ home }),
   };
   const codexInstalled = Object.values(components).some(Boolean)
     || existsSync(join(codexRoot, 'agents', 'ds-flash.toml'))
@@ -296,10 +344,11 @@ export function installStatus({ home = homedir() } = {}) {
       missing: claudeMissing,
     },
     codex: { installed: codexInstalled, ready: missing.length === 0, components, missing },
+    zcode: zcodeStatus({ home, ...(root ? { root } : {}) }),
   };
 }
 
-export function uninstallCodex({ home = homedir() } = {}) {
+export function uninstallCodex({ home = homedir() } = {}) {
   const actions = [];
   // Both the v0.2 roles (ds-worker / ds-reviewer) and the deprecated v0.1
   // aliases (ds-flash / ds-pro) are dsh-crew managed; uninstall removes only
@@ -308,10 +357,12 @@ export function uninstallCodex({ home = homedir() } = {}) {
     const p = join(home, '.codex', 'agents', f);
     if (existsSync(p)) { backup(p); rmSync(p); actions.push(`removed: ${p} (backup kept)`); }
   }
-  for (const f of ['dsh-config.md', 'dsh-status.md']) {
+  for (const f of ['dsh-config.md', 'dsh-status.md']) {
     const p = join(home, '.codex', 'prompts', f);
     if (existsSync(p)) { rmSync(p); actions.push(`removed: ${p}`); }
-  }
+  }
+  const policyAction = uninstallGlobalCodexPolicy({ home });
+  if (policyAction) actions.push(policyAction);
   // Remove only the dsh-crew entry from [mcp_servers], keeping any other
   // MCP servers the user configured.
   const configFile = join(home, '.codex', 'config.toml');
@@ -428,7 +479,7 @@ export async function installClaudeCode({ home = homedir(), statusline = false,
   return { ok: true, actions };
 }
 
-export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
+export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
   const actions = [];
   const agentsDir = scope === 'project' ? join(process.cwd(), '.codex', 'agents') : join(home, '.codex', 'agents');
   mkdirSync(agentsDir, { recursive: true });
@@ -455,10 +506,13 @@ export function installCodex({ home = homedir(), scope, root = ROOT } = {}) {
     writeFileSync(join(promptsDir, f), readFileSync(join(promptsSrc, f), 'utf8'));
     actions.push(`prompt: ${join(promptsDir, f)}`);
   }
-  if (scope !== 'project') {
-    const act = writeGlobalCodexMcpServer(home, renderedPath);
-    actions.push(...act);
-  }
+  if (scope !== 'project') {
+    const act = writeGlobalCodexMcpServer(home, renderedPath);
+    actions.push(...act);
+    const policy = installGlobalCodexPolicy({ home, root });
+    if (!policy.ok) return { ok: false, actions: [...actions, policy.action] };
+    actions.push(policy.action);
+  }
   return { ok: true, actions };
 }
 

package/src/install/install.mjs

@@ -4,7 +4,9 @@
 // This module keeps all installer exports while replacing only global config
 // read/write semantics with schema-v3 canonical authority.
 
-export * from './install-legacy.mjs';
+export * from './install-legacy.mjs';
+export * from './windows-startup.mjs';
+export * from './zcode.mjs';
 
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, join } from 'node:path';

package/src/install/npx-lifecycle.mjs

@@ -549,14 +549,30 @@ async function activateRelease({ home, releaseDir, manifest, log, installer }) {
   }
   log(`✓ Harness plugin registered (dedicated dsh-crew profile → ${releaseDir})`);
 
-  const codex = installer.installCodex({ home, root: releaseDir });
+  const codex = installer.installCodex({ home, root: releaseDir });
   if (codex.ok === false) {
     log(`✗ Codex Desktop integration failed: ${(codex.actions ?? []).join('; ')}`);
     return false;
   }
-  log('✓ Codex Desktop integration');
-
-  const claude = await installer.installClaudeCode({ home, root: releaseDir });
+  log('✓ Codex Desktop integration');
+
+  if (installer.installZCode) {
+    const zcode = installer.installZCode({ home, root: releaseDir });
+    if (zcode.ok === false) {
+      log(`✗ ZCode integration failed (${zcode.code ?? 'unknown'})`);
+      return false;
+    }
+    log('✓ ZCode integration');
+  }
+
+  const startup = installer.installWindowsStartup?.({ home, root: releaseDir });
+  if (startup?.ok === false) {
+    log(`✗ Windows login startup failed (${startup.code ?? 'unknown'})`);
+    return false;
+  }
+  if (startup?.supported) log('✓ Windows login startup');
+
+  const claude = await installer.installClaudeCode({ home, root: releaseDir });
   if (claude.ok === false) {
     log(`✗ Claude Code integration failed`);
     return false;
@@ -944,11 +960,17 @@ export function npxStatus({
     } catch { dshPlugin = 'unknown'; }
   }
 
-  const st = installer.installStatus ? installer.installStatus({ home }) : realInstaller.installStatus({ home });
-  const codex = st?.codex?.installed ? 'installed' : 'not installed';
-  const claude = st?.claude?.installed ? 'installed' : 'not installed';
+  const st = installer.installStatus
+    ? installer.installStatus({ home, root: pointer?.path ?? runningPackageRoot() })
+    : realInstaller.installStatus({ home, root: pointer?.path ?? runningPackageRoot() });
+  const codex = st?.codex?.installed ? 'installed' : 'not installed';
+  const zcode = st?.zcode?.installed ? 'installed' : 'not installed';
+  const claude = st?.claude?.installed ? 'installed' : 'not installed';
   const official = officialWebIntegrationStatus({ home, releaseDir: pointer?.path });
-  const officialWeb = !official.enabled ? 'disabled' : official.healthy ? 'installed' : 'needs repair';
+  const officialWeb = !official.enabled ? 'disabled' : official.healthy ? 'installed' : 'needs repair';
+  const startupState = installer.windowsStartupStatus?.({ home });
+  const windowsStartup = !startupState?.supported ? 'not supported'
+    : startupState.ready ? 'installed' : startupState.installed ? 'needs repair' : 'not installed';
 
   log(`DSH Crew launcher/candidate: ${candidateVersion ?? 'unknown'}`);
   log(`Installed DSH Crew payload: ${installedLine}`);
@@ -964,8 +986,10 @@ export function npxStatus({
   }
   log(`DSH plugin: ${dshPlugin} (dedicated dsh-crew profile on 3210)`);
   log(`Official 3080 UI bridge: ${officialWeb}`);
-  log(`Codex Desktop integration: ${codex}`);
-  log(`Claude Code integration: ${claude}`);
+  log(`Codex Desktop integration: ${codex}`);
+  log(`ZCode integration: ${zcode}`);
+  log(`Claude Code integration: ${claude}`);
+  log(`Windows login startup: ${windowsStartup}`);
 
   return {
     ok: true,
@@ -974,9 +998,11 @@ export function npxStatus({
     installedPath: pointer?.path ?? null,
     dshPlugin,
     officialWeb,
-    codex,
-    claude,
-  };
+    codex,
+    zcode,
+    claude,
+    windowsStartup,
+  };
 }
 
 export async function npxUninstall({
@@ -992,13 +1018,23 @@ export async function npxUninstall({
   const pointer = readCurrentPointer({ home });
   const name = pointer?.name ?? readManifest(runningPackageRoot())?.name;
 
-  const cx = installer.uninstallCodex({ home });
+  const cx = installer.uninstallCodex({ home });
   if (cx.ok !== false) log('✓ Codex Desktop integration removed');
-  else fail('Codex Desktop integration removal failed');
-
-  const cl = installer.uninstallClaudeCode ? await installer.uninstallClaudeCode({ home }) : realInstaller.uninstallClaudeCode({ home });
-  if (cl.ok !== false) log('✓ Claude Code integration removed');
-  else fail('Claude Code integration removal failed');
+  else fail('Codex Desktop integration removal failed');
+
+  if (installer.uninstallZCode) {
+    const zc = installer.uninstallZCode({ home });
+    if (zc.ok !== false) log('✓ ZCode integration removed');
+    else fail('ZCode integration removal failed');
+  }
+
+  const cl = installer.uninstallClaudeCode ? await installer.uninstallClaudeCode({ home }) : realInstaller.uninstallClaudeCode({ home });
+  if (cl.ok !== false) log('✓ Claude Code integration removed');
+  else fail('Claude Code integration removal failed');
+
+  const startup = installer.uninstallWindowsStartup?.({ home });
+  if (startup?.ok === false) fail('Windows login startup removal failed');
+  else if (startup?.supported) log('✓ Windows login startup removed');
 
   const official = removeOfficialWebIntegration({ home, preserveIntent: !purge, remember: !purge });
   if (!official.ok) fail(`official 3080 bridge removal failed (${official.code ?? 'unknown'})`);

package/src/install/windows-startup.mjs

@@ -0,0 +1,115 @@
+import {
+  copyFileSync,
+  existsSync,
+  mkdirSync,
+  readFileSync,
+  rmSync,
+  writeFileSync,
+} from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+
+export const WINDOWS_STARTUP_FILENAME = 'DSH Crew.vbs';
+export const WINDOWS_LAUNCHER_FILENAME = 'start-dsh-crew.cmd';
+export const WINDOWS_HELPER_FILENAME = 'start-dsh-crew.ps1';
+
+function defaultStartupDir({ home, env }) {
+  if (home === homedir() && env.APPDATA) {
+    return join(env.APPDATA, 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup');
+  }
+  return join(home, 'AppData', 'Roaming', 'Microsoft', 'Windows', 'Start Menu', 'Programs', 'Startup');
+}
+
+function paths({ home, startupDir, env }) {
+  const launcherFile = join(home, '.config', 'dsh-crew', 'launchers', WINDOWS_LAUNCHER_FILENAME);
+  const helperFile = join(home, '.config', 'dsh-crew', 'launchers', WINDOWS_HELPER_FILENAME);
+  const resolvedStartupDir = startupDir ?? defaultStartupDir({ home, env });
+  return {
+    launcherFile,
+    helperFile,
+    startupFile: join(resolvedStartupDir, WINDOWS_STARTUP_FILENAME),
+  };
+}
+
+function renderVbs(template, launcherFile) {
+  const escaped = launcherFile.replace(/"/g, '""');
+  return template.replace('__LAUNCHER__', escaped);
+}
+
+export function windowsStartupStatus({
+  home = homedir(),
+  startupDir,
+  platform = process.platform,
+  env = process.env,
+} = {}) {
+  if (platform !== 'win32') return { supported: false, installed: false, ready: false };
+  const resolved = paths({ home, startupDir, env });
+  const installed = existsSync(resolved.startupFile)
+    || existsSync(resolved.launcherFile)
+    || existsSync(resolved.helperFile);
+  let ready = existsSync(resolved.startupFile)
+    && existsSync(resolved.launcherFile)
+    && existsSync(resolved.helperFile);
+  if (ready) {
+    try {
+      const startup = readFileSync(resolved.startupFile, 'utf16le').replace(/^\uFEFF/, '');
+      const launcher = readFileSync(resolved.launcherFile, 'utf8');
+      const helper = readFileSync(resolved.helperFile, 'utf8');
+      ready = startup.includes(resolved.launcherFile)
+        && startup.includes('--watch')
+        && launcher.includes(WINDOWS_HELPER_FILENAME)
+        && helper.includes('DSH Crew managed Windows launcher')
+        && helper.includes('DSHCrewServiceSupervisor');
+    } catch { ready = false; }
+  }
+  return { supported: true, installed, ready, ...resolved };
+}
+
+export function installWindowsStartup({
+  home = homedir(),
+  root,
+  startupDir,
+  platform = process.platform,
+  env = process.env,
+} = {}) {
+  if (platform !== 'win32') return { ok: true, supported: false, changed: false };
+  if (!root) return { ok: false, supported: true, code: 'STARTUP_SOURCE_REQUIRED' };
+  const sourceLauncher = join(root, 'windows', WINDOWS_LAUNCHER_FILENAME);
+  const sourceHelper = join(root, 'windows', WINDOWS_HELPER_FILENAME);
+  const sourceVbs = join(root, 'windows', 'start-dsh-crew.vbs');
+  if (!existsSync(sourceLauncher) || !existsSync(sourceHelper) || !existsSync(sourceVbs)) {
+    return { ok: false, supported: true, code: 'STARTUP_ASSET_MISSING' };
+  }
+  const resolved = paths({ home, startupDir, env });
+  mkdirSync(dirname(resolved.launcherFile), { recursive: true });
+  mkdirSync(dirname(resolved.startupFile), { recursive: true });
+  const beforeLauncher = existsSync(resolved.launcherFile) ? readFileSync(resolved.launcherFile) : null;
+  const beforeHelper = existsSync(resolved.helperFile) ? readFileSync(resolved.helperFile) : null;
+  const beforeStartup = existsSync(resolved.startupFile) ? readFileSync(resolved.startupFile) : null;
+  copyFileSync(sourceLauncher, resolved.launcherFile);
+  copyFileSync(sourceHelper, resolved.helperFile);
+  const rendered = renderVbs(readFileSync(sourceVbs, 'utf8'), resolved.launcherFile);
+  writeFileSync(resolved.startupFile, `\uFEFF${rendered}`, 'utf16le');
+  const changed = !beforeLauncher?.equals(readFileSync(resolved.launcherFile))
+    || !beforeHelper?.equals(readFileSync(resolved.helperFile))
+    || !beforeStartup?.equals(readFileSync(resolved.startupFile));
+  return { ok: true, supported: true, changed, ...resolved };
+}
+
+export function uninstallWindowsStartup({
+  home = homedir(),
+  startupDir,
+  platform = process.platform,
+  env = process.env,
+} = {}) {
+  if (platform !== 'win32') return { ok: true, supported: false, removed: false };
+  const resolved = paths({ home, startupDir, env });
+  let removed = false;
+  for (const file of [resolved.startupFile, resolved.launcherFile, resolved.helperFile]) {
+    if (existsSync(file)) {
+      rmSync(file, { force: true });
+      removed = true;
+    }
+  }
+  return { ok: true, supported: true, removed, ...resolved };
+}