@remcp/remcp 0.2.213 → 0.2.214

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/remcp",
-  "version": "0.2.213",
+  "version": "0.2.214",
   "description": "ReMCP device client: pair a computer with ReMCP and run the outbound-only agent that hosts the local MCP runtime.",
   "type": "module",
   "license": "MIT",

package/src/cli/env.mjs

@@ -17,6 +17,7 @@ export const macServiceFile = path.join(home, 'Library', 'LaunchAgents', `${macS
 export const macLogFile = path.join(home, 'Library', 'Logs', 'remcp-agent.log');
 export const windowsTaskName = 'ReMCP Agent';
 export const windowsServiceLauncherFile = path.join(configDir, 'remcp-agent.cmd');
+export const windowsTaskScriptFile = path.join(configDir, 'remcp-agent.vbs');
 // Task Scheduler may refuse to create a task for a standard Windows account.
 // This per-user Startup folder runs without administrator privileges.
 export const windowsStartupScriptFile = path.join(

package/src/cli/service.mjs

@@ -15,9 +15,9 @@ export { macLaunchDomain, ensureMacCliCommand, installMacService } from './servi
 import { PACKAGE_NAME, VERSION } from '../version.mjs';
 
 import { saveConfig } from './config.mjs';
-import { configDir, home, linuxServiceFile, linuxServiceLauncherFile, macServiceFile, macServiceLabel, windowsServiceLauncherFile, windowsStartupScriptFile, windowsTaskName } from './env.mjs';
+import { configDir, home, linuxServiceFile, linuxServiceLauncherFile, macServiceFile, macServiceLabel, windowsServiceLauncherFile, windowsTaskScriptFile, windowsStartupScriptFile, windowsTaskName } from './env.mjs';
 import { run } from './shell.mjs';
-import { windowsServiceLauncherText, windowsTaskReliabilityCommand, windowsTaskAbsenceCommand, windowsBatchUnsafeProfile, windowsStartupScriptText, windowsStartupScriptInstalled } from './windows-supervisor.mjs';
+import { windowsServiceLauncherText, windowsTaskReliabilityCommand, windowsTaskAbsenceCommand, windowsBatchUnsafeProfile, windowsTaskScriptText, windowsTaskScriptInstalled, windowsStartupScriptText, windowsStartupScriptInstalled } from './windows-supervisor.mjs';
 import { ensureWindowsSupervisorKey, windowsSupervisorCommand } from './windows-user-supervisor.mjs';
 import { scheduleWindowsTaskRestart } from './windows-task-restart.mjs';
 
@@ -79,6 +79,20 @@ export function writeWindowsServiceLauncher(cliPath = globalCliPath(), nodePath
   return windowsServiceLauncherFile;
 }
 
+function writeWindowsTaskScript(launcherFile) {
+  if (fs.existsSync(windowsTaskScriptFile) && !windowsTaskScriptInstalled(windowsTaskScriptFile, windowsServiceLauncherFile)) {
+    throw new Error('The ReMCP scheduled task script is not owned by ReMCP; refusing to overwrite it');
+  }
+  const script = windowsTaskScriptText(launcherFile);
+  fs.mkdirSync(configDir, { recursive:true, mode:0o700 });
+  const temporary = `${windowsTaskScriptFile}.${process.pid}.${Date.now()}.tmp`;
+  try {
+    fs.writeFileSync(temporary, '\uFEFF' + script, { flag:'wx', encoding:'utf16le', mode:0o600 });
+    fs.renameSync(temporary, windowsTaskScriptFile);
+  } finally { try { fs.unlinkSync(temporary); } catch {} }
+  return windowsTaskScriptFile;
+}
+
 function installWindowsUserStartup(cliPath, nodePath) {
   const existed = fs.existsSync(windowsStartupScriptFile);
   if (existed && !windowsStartupScriptInstalled(windowsStartupScriptFile)) {
@@ -149,7 +163,10 @@ export function installWindowsService(cliPath = globalCliPath(), { nodePath = pr
     return;
   }
   const launcherFile = writeWindowsServiceLauncher(cliPath, nodePath);
-  const command = `"${launcherFile}"`;
+  const taskScript = writeWindowsTaskScript(launcherFile);
+  // WScript has no console; its hidden CMD child remains attached until it exits.
+  // /IT keeps desktop/UI automation in the signed-in user's session.
+  const command = `wscript.exe //B //Nologo "${taskScript}"`;
   // Current-user interactive tasks need /IT. /RL LIMITED avoids requiring elevation.
   // An organization may still disable creation of all tasks by standard users.
   const created = spawnSync('schtasks.exe',
@@ -411,6 +428,7 @@ export function uninstallPersistentService() {
     }
     spawnSync('schtasks.exe', ['/End', '/TN', windowsTaskName], { stdio: 'ignore' });
     spawnSync('schtasks.exe', ['/Delete', '/TN', windowsTaskName, '/F'], { stdio: 'ignore' });
+    try { if (windowsTaskScriptInstalled(windowsTaskScriptFile, windowsServiceLauncherFile)) fs.unlinkSync(windowsTaskScriptFile); } catch {}
     try { fs.unlinkSync(windowsServiceLauncherFile); } catch {}
   }
 }

package/src/cli/windows-supervisor.mjs

@@ -71,6 +71,44 @@ export function windowsServiceLauncherText(cliPath, nodePath, { localAppData = p
   ].join('\r\n');
 }
 
+export const WINDOWS_TASK_MARKER = "' ReMCP managed scheduled task (do not edit)";
+
+// WScript is a GUI subsystem executable: it starts the existing CMD supervisor
+// with SW_HIDE, while waiting for it so Task Scheduler still owns its lifetime.
+// A Task Scheduler "Hidden" setting only hides the task in its UI, not the console.
+export function windowsTaskScriptText(launcherPath) {
+  if (typeof launcherPath !== 'string' || !launcherPath ||
+      /["\0\r\n]/.test(launcherPath) ||
+      !(path.isAbsolute(launcherPath) || path.win32.isAbsolute(launcherPath))) {
+    throw new Error('Invalid ReMCP Windows task launcher');
+  }
+  return [
+    WINDOWS_TASK_MARKER,
+    'Set remcpShell = CreateObject("WScript.Shell")',
+    `remcpShell.Run Chr(34) & "${launcherPath}" & Chr(34), 0, True`,
+    '',
+  ].join('\r\n');
+}
+
+export function windowsTaskScriptInstalled(file, expectedLauncherPath = null) {
+  try {
+    const text = fs.readFileSync(file, 'utf16le');
+    const lines = text.replace(/^\uFEFF/, '').split('\r\n');
+    if (!text.startsWith('\uFEFF') || lines.length !== 4 ||
+        lines[0] !== WINDOWS_TASK_MARKER ||
+        lines[1] !== 'Set remcpShell = CreateObject("WScript.Shell")' ||
+        lines[3] !== '') return false;
+    const match = lines[2].match(/^remcpShell\.Run Chr\(34\) & "([^"]+)" & Chr\(34\), 0, True$/);
+    if (!match) return false;
+    const launcher = match[1];
+    const absolute = path.isAbsolute(launcher) || path.win32.isAbsolute(launcher);
+    const expected = expectedLauncherPath === null ||
+      path.win32.normalize(launcher).toLowerCase() === path.win32.normalize(expectedLauncherPath).toLowerCase();
+    return absolute && expected &&
+      path.posix.basename(launcher.replaceAll('\\', '/')) === 'remcp-agent.cmd';
+  } catch { return false; }
+}
+
 export const WINDOWS_STARTUP_MARKER = "' ReMCP managed user startup (do not edit)";
 
 // Start the existing private launcher in the interactive user's session without displaying