@remcp/remcp 0.2.216 → 0.2.218

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remcp/remcp",
-  "version": "0.2.216",
+  "version": "0.2.218",
   "description": "ReMCP device client: pair a computer with ReMCP and run the outbound-only agent that hosts the local MCP runtime.",
   "type": "module",
   "license": "MIT",
@@ -18,7 +18,7 @@
     "README.md"
   ],
   "scripts": {
-    "check": "node --check bin/remcp.mjs && node --check src/agent-deploy-reconnect.mjs && node --check src/agent-network-probe-client.mjs && node --check src/agent-relay-connection.mjs && node --check src/agent-responder.mjs && node --check src/agent-runtime-capabilities.mjs && node --check src/agent-update-monitor.mjs && node --check src/agent-update.mjs && node --check src/agent-utilities.mjs && node --check src/agent.mjs && node --check src/cli.mjs && node --check src/cli/config.mjs && node --check src/cli/connect.mjs && node --check src/cli/doctor.mjs && node --check src/cli/env.mjs && node --check src/cli/installation-audit.mjs && node --check src/cli/mac-native-temperature.mjs && node --check src/cli/npm-global.mjs && node --check src/cli/pairing-qr.mjs && node --check src/cli/service-inventory.mjs && node --check src/cli/service-macos.mjs && node --check src/cli/service-paths.mjs && node --check src/cli/service.mjs && node --check src/cli/shell.mjs && node --check src/cli/update.mjs && node --check src/cli/windows-supervisor.mjs && node --check src/cli/windows-task-restart.mjs && node --check src/cli/windows-user-supervisor.mjs && node --check src/fetch-update-manifest.mjs && node --check src/fs-access.mjs && node --check src/npm.mjs && node --check src/runtime.mjs && node --check src/version.mjs",
+    "check": "node --check bin/remcp.mjs && node --check src/agent-deploy-reconnect.mjs && node --check src/agent-network-probe-client.mjs && node --check src/agent-relay-connection.mjs && node --check src/agent-responder.mjs && node --check src/agent-runtime-capabilities.mjs && node --check src/agent-update-monitor.mjs && node --check src/agent-update.mjs && node --check src/agent-utilities.mjs && node --check src/agent.mjs && node --check src/cli.mjs && node --check src/cli/config.mjs && node --check src/cli/connect.mjs && node --check src/cli/doctor.mjs && node --check src/cli/env.mjs && node --check src/cli/installation-audit.mjs && node --check src/cli/mac-native-temperature.mjs && node --check src/cli/npm-global.mjs && node --check src/cli/pairing-qr.mjs && node --check src/cli/service-inventory.mjs && node --check src/cli/service-macos.mjs && node --check src/cli/service-paths.mjs && node --check src/cli/service.mjs && node --check src/cli/shell.mjs && node --check src/cli/update.mjs && node --check src/cli/windows-supervisor.mjs && node --check src/cli/windows-task-restart.mjs && node --check src/cli/windows-update-lock.mjs && node --check src/cli/windows-user-supervisor.mjs && node --check src/fetch-update-manifest.mjs && node --check src/fs-access.mjs && node --check src/npm.mjs && node --check src/runtime.mjs && node --check src/version.mjs",
     "test": "node --test test/*.test.mjs"
   },
   "dependencies": {

package/src/cli/npm-global.mjs

@@ -6,6 +6,7 @@ import { PACKAGE_NAME } from '../version.mjs';
 import { home, npm } from './env.mjs';
 import { buildVettedMacTemperatureAddon } from './mac-native-temperature.mjs';
 import { output, run } from './shell.mjs';
+import { withWindowsUpdateLock } from './windows-update-lock.mjs';
 
 export function servicePlatform() {
   return process.env.NODE_ENV === 'test' && process.env.REMCP_TEST_PLATFORM ? process.env.REMCP_TEST_PLATFORM : process.platform;
@@ -53,8 +54,10 @@ function npmGlobalInstallArgs(specs, { preferOnline = false } = {}) {
 }
 
 export function npmGlobalInstall(...specs) {
-  assertSafeReMcpNpmPrefix(globalPrefix()); // Reject an unsafe prefix before npm writes anything.
-  run(npm.command, [...npm.args, ...npmGlobalInstallArgs(specs)]);
+  const prefix = assertSafeReMcpNpmPrefix(globalPrefix()); // Reject an unsafe prefix before npm writes anything.
+  const install = () => run(npm.command, [...npm.args, ...npmGlobalInstallArgs(specs)]);
+  if (servicePlatform() === 'win32') withWindowsUpdateLock(prefix, install);
+  else install();
   if (servicePlatform() === 'darwin' && specs.some(spec => /^@remcp\/runtime@[0-9]/.test(spec))) {
     try {
       buildVettedMacTemperatureAddon({
@@ -241,7 +244,7 @@ export function npmGlobalUpdate(packageNames, ...specs) {
     return;
   }
   if (platform === 'win32') {
-    transactionalWindowsGlobalInstall({ resolved:npm, prefix, packageNames, specs, preferOnline:true });
+    withWindowsUpdateLock(prefix, () => transactionalWindowsGlobalInstall({ resolved:npm, prefix, packageNames, specs, preferOnline:true }));
     return;
   }
   run(npm.command, [...npm.args, ...npmGlobalInstallArgs(specs, { preferOnline:true })]);
@@ -256,7 +259,7 @@ export function npmGlobalUpdateForNode(nodePath, packageNames, ...specs) {
     return;
   }
   if (platform === 'win32') {
-    transactionalWindowsGlobalInstall({ resolved, prefix, packageNames, specs, preferOnline:true });
+    withWindowsUpdateLock(prefix, () => transactionalWindowsGlobalInstall({ resolved, prefix, packageNames, specs, preferOnline:true }));
     return;
   }
   run(resolved.command, [...resolved.args, ...npmGlobalInstallArgs(specs, { preferOnline:true })]);

package/src/cli/windows-update-lock.mjs

@@ -0,0 +1,77 @@
+// Serializes writes to one Windows npm global prefix across manual and agent updates.
+// The lock exists outside the npm-managed package/shim trees and is held through rollback.
+import fs from 'node:fs';
+import path from 'node:path';
+import crypto from 'node:crypto';
+import process from 'node:process';
+
+const LOCK_NAME = '.remcp-update-lock';
+const OWNER_NAME = 'owner.json';
+
+function lockOwnerFile(directory) {
+  return path.join(directory, OWNER_NAME);
+}
+
+function ownerIsLive(directory) {
+  try {
+    const owner = JSON.parse(fs.readFileSync(lockOwnerFile(directory), 'utf8'));
+    if (!Number.isSafeInteger(owner.pid) || owner.pid <= 0) return true;
+    process.kill(owner.pid, 0);
+    return true;
+  } catch (error) {
+    // On Windows and Unix, only ESRCH is reliable evidence the owner has exited.
+    // Permission errors and damaged/incomplete owner metadata must fail closed.
+    return error?.code !== 'ESRCH';
+  }
+}
+
+function removeOwnedLock(directory, token) {
+  let owner;
+  try {
+    if (!fs.lstatSync(directory).isDirectory()) return;
+    owner = JSON.parse(fs.readFileSync(lockOwnerFile(directory), 'utf8'));
+  } catch { return; }
+  if (owner.token !== token || owner.pid !== process.pid) return;
+  try {
+    fs.unlinkSync(lockOwnerFile(directory));
+    fs.rmdirSync(directory);
+  } catch (error) {
+    // Never force-remove unexpected files created by another process.
+    if (error?.code !== 'ENOENT') console.error('ReMCP update lock cleanup failed:', error?.message);
+  }
+}
+
+export function withWindowsUpdateLock(prefix, operation) {
+  if (!path.isAbsolute(prefix)) throw new Error('Windows update lock requires an absolute npm prefix.');
+  if (typeof operation !== 'function') throw new TypeError('Windows update operation is required.');
+  fs.mkdirSync(prefix, { recursive:true });
+  const directory = path.join(prefix, LOCK_NAME);
+  try {
+    fs.mkdirSync(directory, { mode:0o700 });
+  } catch (error) {
+    if (error?.code !== 'EEXIST') throw error;
+    const stale = !ownerIsLive(directory);
+    throw new Error(stale
+      ? 'ReMCP previous Windows update exited without releasing its lock; repair the stale update lock before retrying.'
+      : 'ReMCP update already in progress for this Windows npm prefix; retry after it finishes.');
+  }
+
+  const token = crypto.randomUUID();
+  try {
+    fs.writeFileSync(lockOwnerFile(directory), JSON.stringify({
+      pid:process.pid, token, startedAt:Date.now(),
+    }), { flag:'wx', mode:0o600 });
+  } catch (error) {
+    try { fs.rmdirSync(directory); } catch {}
+    throw error;
+  }
+
+  const onExit = () => removeOwnedLock(directory, token);
+  process.once('exit', onExit);
+  try {
+    return operation();
+  } finally {
+    process.removeListener('exit', onExit);
+    removeOwnedLock(directory, token);
+  }
+}