@songsid/agend 2.3.5-alpha.5 → 2.3.5-beta.1

package/templates/runtime-assets/runtime-pane-job.ps1

@@ -1,116 +0,0 @@
-param(
-  [Parameter(Mandatory=$true)][string]$NodePath,
-  [Parameter(Mandatory=$true)][string]$WorkerPath,
-  [Parameter(Mandatory=$true)][string]$StateDirectory,
-  [Parameter(Mandatory=$true)][string]$LaunchId,
-  [Parameter(Mandatory=$true)][string]$PaneId,
-  [Parameter(Mandatory=$true)][string]$AgentId,
-  [Parameter(Mandatory=$true)][int]$OwnerPid,
-  [Parameter(Mandatory=$true)][int]$ReceiptPid
-)
-$ErrorActionPreference = 'Stop'
-# Built-in Windows APIs only. The helper receives no stdin until its process HANDLE is assigned to the job.
-# https://learn.microsoft.com/windows/win32/procthread/job-objects
-Add-Type -ReferencedAssemblies System.Web.Extensions -TypeDefinition @'
-using System;
-using System.IO;
-using System.Text;
-using System.Diagnostics;
-using System.Threading;
-using System.Threading.Tasks;
-using System.Collections.Generic;
-using System.Runtime.InteropServices;
-using System.Web.Script.Serialization;
-public static class AgendPaneJob {
-  [StructLayout(LayoutKind.Sequential)] struct Limits {
-    public long ProcessTime,JobTime; public uint Flags; public UIntPtr MinWorking,MaxWorking;
-    public uint ProcessLimit; public UIntPtr Affinity; public uint Priority,Scheduling;
-  }
-  [StructLayout(LayoutKind.Sequential)] struct Io { public ulong A,B,C,D,E,F; }
-  [StructLayout(LayoutKind.Sequential)] struct Extended { public Limits Basic; public Io Io; public UIntPtr ProcessMemory,JobMemory,PeakProcess,PeakJob; }
-  [StructLayout(LayoutKind.Sequential)] struct Accounting { public long A,B,C,D; public uint Faults,Total,Active,Terminated; }
-  [DllImport("kernel32.dll",CharSet=CharSet.Unicode,SetLastError=true)] static extern IntPtr CreateJobObject(IntPtr security,string name);
-  [DllImport("kernel32.dll",SetLastError=true)] static extern bool SetInformationJobObject(IntPtr job,int kind,ref Extended value,uint size);
-  [DllImport("kernel32.dll",SetLastError=true)] static extern bool QueryInformationJobObject(IntPtr job,int kind,ref Accounting value,uint size,IntPtr length);
-  [DllImport("kernel32.dll",SetLastError=true)] static extern bool AssignProcessToJobObject(IntPtr job,IntPtr process);
-  [DllImport("kernel32.dll",SetLastError=true)] static extern bool TerminateJobObject(IntPtr job,uint code);
-  [DllImport("kernel32.dll")] static extern bool CloseHandle(IntPtr handle);
-  static string Quote(string value) {
-    var result=new StringBuilder("\"");int slashes=0;
-    foreach(char c in value) { if(c=='\\'){slashes++;continue;} if(c=='\"')result.Append('\\',slashes*2+1);else result.Append('\\',slashes);result.Append(c);slashes=0; }
-    result.Append('\\',slashes*2);return result.Append('"').ToString();
-  }
-  static void Check(bool ok) { if(!ok)throw new System.ComponentModel.Win32Exception(Marshal.GetLastWin32Error()); }
-  static uint Active(IntPtr job) { var value=new Accounting();Check(QueryInformationJobObject(job,1,ref value,(uint)Marshal.SizeOf(value),IntPtr.Zero));return value.Active; }
-  static void Receipt(string directory,string launch,string pane,string agent,int receiptPid,long code) {
-    Guid parsed; if(!Guid.TryParse(launch,out parsed)||!Guid.TryParse(pane,out parsed)||!Guid.TryParse(agent,out parsed))throw new InvalidOperationException();
-    var json=new JavaScriptSerializer().Serialize(new {version=1,launchId=launch,paneId=pane,agentId=agent,pid=receiptPid,code=code});
-    string exits=Path.Combine(directory,"exits");Directory.CreateDirectory(exits);
-    string file=Path.Combine(exits,launch+".json"),temp=file+"."+Guid.NewGuid().ToString("N")+".tmp";
-    byte[] bytes=new UTF8Encoding(false).GetBytes(json);
-    using(var stream=new FileStream(temp,FileMode.CreateNew,FileAccess.Write,FileShare.None)){stream.Write(bytes,0,bytes.Length);stream.Flush(true);}
-    for(int attempt=0;;attempt++){
-      try{File.Move(temp,file);break;}
-      catch(IOException){if(attempt>=4)throw;Thread.Sleep(10*(attempt+1));}
-      catch(UnauthorizedAccessException){if(attempt>=4)throw;Thread.Sleep(10*(attempt+1));}
-    }
-  }
-  public static int Run(string node,string worker,string directory,string launch,string pane,string agent,int ownerPid,int receiptPid) {
-    IntPtr job=IntPtr.Zero;Process child=null,owner=null;bool assigned=false;string phase="create";
-    var clock=Stopwatch.StartNew();long closeAt=-1,cliCode=1;
-    var output=new StreamWriter(Console.OpenStandardOutput(),new UTF8Encoding(false)){AutoFlush=true};
-    var outputLock=new object();bool outputOpen=true;
-    Action<string> write=line=>{lock(outputLock){if(!outputOpen)return;try{output.WriteLine(line);}catch(IOException){outputOpen=false;}catch(ObjectDisposedException){outputOpen=false;}}};
-    try {
-      owner=Process.GetProcessById(ownerPid);var ownerHandle=owner.Handle;
-      if(owner.HasExited)throw new InvalidOperationException();
-      job=CreateJobObject(IntPtr.Zero,null);Check(job!=IntPtr.Zero);
-      var limits=new Extended();limits.Basic.Flags=0x2000; // KILL_ON_JOB_CLOSE; breakaway is deliberately not enabled.
-      Check(SetInformationJobObject(job,9,ref limits,(uint)Marshal.SizeOf(limits)));
-      phase="start-helper";
-      var start=new ProcessStartInfo(node,Quote(worker)){UseShellExecute=false,CreateNoWindow=true,RedirectStandardInput=true,RedirectStandardOutput=true,RedirectStandardError=true,
-        StandardOutputEncoding=new UTF8Encoding(false),StandardErrorEncoding=new UTF8Encoding(false)};
-      child=Process.Start(start);
-      phase="assign";Check(AssignProcessToJobObject(job,child.Handle));assigned=true;
-      // No provider can launch before this assignment: runtime-pane-worker waits for its first stdin command.
-      var inputWriter=new StreamWriter(child.StandardInput.BaseStream,new UTF8Encoding(false)){AutoFlush=true};
-      var input=Task.Factory.StartNew(()=>{
-        try { using(var reader=new StreamReader(Console.OpenStandardInput(),new UTF8Encoding(false))){string line;
-          while((line=reader.ReadLine())!=null){
-            if(line.Length>256*1024)break;
-            try {var value=new JavaScriptSerializer().Deserialize<Dictionary<string,object>>(line);if(value.ContainsKey("type")&&(string)value["type"]=="close")Interlocked.CompareExchange(ref closeAt,clock.ElapsedMilliseconds,-1);}catch{}
-            inputWriter.WriteLine(line);
-          }
-        }}catch{}finally{Interlocked.CompareExchange(ref closeAt,clock.ElapsedMilliseconds,-1);try{inputWriter.Close();}catch{}}
-      },TaskCreationOptions.LongRunning);
-      var stdout=Task.Factory.StartNew(()=>{string line;while((line=child.StandardOutput.ReadLine())!=null){
-        try {var value=new JavaScriptSerializer().Deserialize<Dictionary<string,object>>(line);
-          string type=value.ContainsKey("type")?value["type"] as string:null;
-          if(type=="tree.exit")continue; // Only this job owner can attest whole-tree exit.
-          if(type=="exit"&&value.ContainsKey("code"))cliCode=Convert.ToInt64(value["code"]);
-        }catch{}write(line);
-      }},TaskCreationOptions.LongRunning);
-      var stderr=Task.Factory.StartNew(()=>{child.StandardError.ReadToEnd();},TaskCreationOptions.LongRunning);
-      phase="running";
-      while(!child.WaitForExit(50)){long requested=Interlocked.Read(ref closeAt);if(owner.HasExited||(requested>=0&&clock.ElapsedMilliseconds-requested>=5000)){Check(TerminateJobObject(job,1));break;}}
-      phase="helper-exit";if(!child.WaitForExit(10000))throw new TimeoutException();
-      if(!stdout.Wait(10000))throw new TimeoutException();stderr.Wait(1000);
-      child.Dispose();child=null;
-      // A CLI may have left a background descendant. Retire only members of this exact owned job.
-      phase="tree-exit";if(Active(job)>0)Check(TerminateJobObject(job,1));
-      long deadline=clock.ElapsedMilliseconds+10000;while(Active(job)!=0){if(clock.ElapsedMilliseconds>deadline)throw new TimeoutException();Thread.Sleep(20);}
-      phase="receipt";Receipt(directory,launch,pane,agent,receiptPid,cliCode);
-      write(new JavaScriptSerializer().Serialize(new {type="tree.exit",code=cliCode}));
-      return 0;
-    } catch(Exception error) {
-      int code=error is System.ComponentModel.Win32Exception?((System.ComponentModel.Win32Exception)error).NativeErrorCode:0;
-      try{string exits=Path.Combine(directory,"exits");Directory.CreateDirectory(exits);File.WriteAllText(Path.Combine(exits,launch+".error.json"),new JavaScriptSerializer().Serialize(new {launchId=launch,paneId=pane,agentId=agent,stage=phase,code=code}),new UTF8Encoding(false));}catch{}
-      Console.Error.WriteLine("Windows pane ownership helper failed at "+phase+" (win32 "+code+"); process outcome is unconfirmed.");
-      // A direct child handle is safe even if job assignment failed. No discovered PID is ever signalled.
-      if(child!=null&&!assigned){try{child.Kill();child.WaitForExit(10000);}catch{}}
-      return 1;
-    } finally { if(job!=IntPtr.Zero)CloseHandle(job);if(child!=null)child.Dispose();if(owner!=null)owner.Dispose(); }
-  }
-}
-'@
-exit [AgendPaneJob]::Run($NodePath,$WorkerPath,$StateDirectory,$LaunchId,$PaneId,$AgentId,$OwnerPid,$ReceiptPid)

package/templates/runtime-assets/runtime-pane-private.ps1

@@ -1,14 +0,0 @@
-param([Parameter(Mandatory=$true)][string]$Directory)
-$ErrorActionPreference = 'Stop'
-$entry = Get-Item -LiteralPath $Directory -Force
-if (-not $entry.PSIsContainer -or ($entry.Attributes -band [IO.FileAttributes]::ReparsePoint)) { throw 'Pane profile must be a real directory' }
-$user = [Security.Principal.WindowsIdentity]::GetCurrent().User
-$acl = New-Object Security.AccessControl.DirectorySecurity
-$ownedDirectory = [IO.DirectoryInfo]::new($Directory)
-if ($ownedDirectory.GetAccessControl([Security.AccessControl.AccessControlSections]::Owner).GetOwner([Security.Principal.SecurityIdentifier]).Value -ne $user.Value) { throw 'Pane profile has a different owner' }
-$acl.SetAccessRuleProtection($true,$false)
-foreach ($sid in @($user, [Security.Principal.SecurityIdentifier]::new('S-1-5-18'))) {
-  $rule = [Security.AccessControl.FileSystemAccessRule]::new($sid,'FullControl','ContainerInherit,ObjectInherit','None','Allow')
-  $acl.AddAccessRule($rule)
-}
-$ownedDirectory.SetAccessControl($acl)

package/templates/runtime-assets/xterm-LICENSE

@@ -1,21 +0,0 @@
-Copyright (c) 2017-2019, The xterm.js authors (https://github.com/xtermjs/xterm.js)
-Copyright (c) 2014-2016, SourceLair Private Company (https://www.sourcelair.com)
-Copyright (c) 2012-2013, Christopher Jeffrey (https://github.com/chjj/)
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-THE SOFTWARE.

package/templates/runtime-install/install.ps1

@@ -1,270 +0,0 @@
-# AgEnD Runtime for Windows: installs the runner that lets this PC work for an AgEnD fleet.
-#
-# Do not type this file's address by hand. The AgEnD page (Settings -> Runtime -> Connect a computer) shows the command to
-# copy, with your fleet's address and THIS file's SHA-256 filled in. The command downloads this file, checks the hash shown on
-# the page and only then runs it, so what runs is exactly what the page vouches for, whatever the TLS trust decision was.
-# The server address is the one the command put in $agend (the reviewed address, never the Host that happened to serve this
-# file); nothing here is looked up from the network, and nothing here is a secret. This file is the same bytes for everyone
-# and for every request.
-#
-# It is run by the page's command (`iex` of the downloaded text), so it is kept safe for that: ASCII only (Windows
-# PowerShell 5.1 may decode a download as the wrong code page), no param block, and no `exit` (under iex it would close the
-# window). Windows PowerShell 5.1 and PowerShell 7 both run it. It needs no administrator rights and never changes your
-# execution policy. Under Constrained Language Mode or AppLocker the page's command stops before this script is ever run (it cannot compute the hash there): use the ZIP from the same page instead.
-#
-# What it does, in order:
-#   1. Checks that Node.js 22.14 or newer is installed (it never installs software for you).
-#   2. Downloads the Runtime archive from $agend, checks its SHA-256 against the value pinned inside this script and, if it
-#      does not match, stops before anything is unpacked.
-#   3. Unpacks it into %LOCALAPPDATA%\agend-runtime\<version>+<build>, NEXT TO any version already there (the folder names the build,
-#      the first 8 characters of the archive's SHA-256, because one version number can cover more than one build). An existing folder
-#      is never deleted or replaced: it may be the Runtime that is running right now.
-#   4. Points agend-runtime at the new version: bin\agend-runtime.cmd never changes, and bin\current.txt (the version it
-#      starts) is swapped in with an atomic file replace. A Runtime that is already running keeps running its own version.
-#   5. Adds the bin folder to YOUR user PATH (not the system PATH).
-#   6. Prints the command that connects this PC. It does NOT connect and does NOT pair: pairing still needs the one-time
-#      code from AgEnD Settings, which you type in the terminal, and your approval in AgEnD.
-#
-# Optional, set in the same PowerShell window before running it:
-#   $env:AGEND_RUNTIME_NO_PATH = '1'              leave PATH alone (the final message then shows the full path to run)
-#   $env:AGEND_RUNTIME_INSTALL_DIR = 'D:\agend'   install somewhere other than %LOCALAPPDATA%\agend-runtime
-# If it fails it says why, leaves what was installed before untouched, and sets $LASTEXITCODE to 1.
-& {
-    $ErrorActionPreference = 'Stop'
-
-    # Pinned by the AgEnD server that serves this file: the version and the SHA-256 of the one archive it serves.
-    $pinnedVersion = '@@AGEND_RUNTIME_VERSION@@'
-    $pinnedSha256 = '@@AGEND_RUNTIME_SHA256@@'
-    $maxArchiveBytes = 16MB
-
-    function Write-Step([string]$text) { Write-Host ('AgEnD Runtime: ' + $text) }
-    function Write-Problem([string]$text) { Write-Host ('AgEnD Runtime: ' + $text) -ForegroundColor Red }
-
-    # Only an origin: https, or http for this computer itself (an SSH-forwarded port). No path, credentials, query or fragment.
-    function Resolve-AgendOrigin($value) {
-        if (-not ($value -is [string]) -or $value.Length -eq 0 -or $value.Length -gt 2048 -or $value -match '[\s\x00-\x1f\x7f]') { return '' }
-        $uri = $null
-        if (-not [Uri]::TryCreate($value, [UriKind]::Absolute, [ref]$uri)) { return '' }
-        $local = $uri.Host -in 'localhost', '127.0.0.1', '[::1]', '::1'
-        if (-not ($uri.Scheme -eq 'https' -or ($uri.Scheme -eq 'http' -and $local))) { return '' }
-        if ($uri.UserInfo -ne '' -or $uri.Query -ne '' -or $uri.Fragment -ne '' -or $uri.AbsolutePath -ne '/') { return '' }
-        return $uri.GetLeftPart([UriPartial]::Authority)
-    }
-    # Node.js satisfying the Runtime's engines: ^22.14.0 || ^23.6.0 || >=24.
-    function Test-NodeVersion([string]$text) {
-        $m = [regex]::Match($text, '\Av?(\d+)\.(\d+)\.(\d+)')
-        if (-not $m.Success) { return $false }
-        $major = [int]$m.Groups[1].Value; $minor = [int]$m.Groups[2].Value
-        return ($major -ge 24) -or ($major -eq 23 -and $minor -ge 6) -or ($major -eq 22 -and $minor -ge 14)
-    }
-    # One bounded download: no redirect is followed, and neither the wait nor the size can run on.
-    function Save-AgendArchive([string]$Uri, [string]$OutFile, [long]$MaxBytes) {
-        $request = [Net.HttpWebRequest]::Create($Uri)
-        $request.AllowAutoRedirect = $false; $request.Timeout = 120000; $request.ReadWriteTimeout = 60000; $request.UserAgent = 'agend-runtime-install'
-        $response = $null; $bodyStream = $null; $output = $null; $done = $false
-        try {
-            $response = $request.GetResponse()
-            if ([int]$response.StatusCode -ne 200) { throw ('The AgEnD server answered ' + [int]$response.StatusCode + ' for the Runtime archive.') }
-            if ($response.ContentLength -gt $MaxBytes) { throw 'The Runtime archive is larger than expected; refusing to download it.' }
-            $bodyStream = $response.GetResponseStream()
-            $output = [IO.File]::Open($OutFile, [IO.FileMode]::Create, [IO.FileAccess]::Write, [IO.FileShare]::None)
-            $buffer = New-Object byte[] 65536; $total = 0
-            while (($count = $bodyStream.Read($buffer, 0, $buffer.Length)) -gt 0) {
-                $total += $count
-                if ($total -gt $MaxBytes) { throw 'The Runtime archive is larger than expected; stopped downloading it.' }
-                $output.Write($buffer, 0, $count)
-            }
-            $done = $true
-        } finally {
-            if ($output) { $output.Dispose() }; if ($bodyStream) { $bodyStream.Dispose() }; if ($response) { $response.Close() }
-            if (-not $done) { Remove-Item -LiteralPath $OutFile -Force -ErrorAction SilentlyContinue }
-        }
-    }
-    # .NET directly, not Get-FileHash: a PowerShell started from another one can inherit a module path that hides that cmdlet.
-    function Get-AgendSha256([string]$Path) {
-        $stream = [IO.File]::OpenRead($Path)
-        try {
-            $sha = [Security.Cryptography.SHA256]::Create()
-            try { return ([BitConverter]::ToString($sha.ComputeHash($stream)) -replace '-', '').ToLowerInvariant() } finally { $sha.Dispose() }
-        } finally { $stream.Dispose() }
-    }
-    # Writes a small file by writing a sibling and swapping it in, so a reader (a shim that is starting right now) sees the old or the
-    # new content, never half of it. Nothing happens when the file already says this.
-    function Set-AgendFile([string]$Path, [string]$Text) {
-        if ((Test-Path -LiteralPath $Path) -and ([IO.File]::ReadAllText($Path) -ceq $Text)) { return }
-        $new = $Path + '.new'
-        [IO.File]::WriteAllText($new, $Text, [Text.Encoding]::ASCII)
-        try {
-            # [NullString]::Value, not $null: PowerShell turns $null into an empty string for a string parameter, and Replace refuses that.
-            if (Test-Path -LiteralPath $Path) { [IO.File]::Replace($new, $Path, [NullString]::Value) } else { [IO.File]::Move($new, $Path) }
-        } catch {
-            Remove-Item -LiteralPath $new -Force -ErrorAction SilentlyContinue
-            throw ('Could not update ' + $Path + ' (' + $_.Exception.Message + '). Close any agend-runtime window that is starting, then run the install command again.')
-        }
-    }
-    # Adds a folder to the USER PATH in the registry, keeping its value kind: [Environment]::SetEnvironmentVariable would turn a
-    # REG_EXPAND_SZ PATH into plain REG_SZ and stop its %VARIABLES% entries expanding, and setx truncates at 1024 characters, so
-    # neither is used. An entry already there (written out or with %VARIABLES%) is not added again.
-    function Add-UserPathEntry([string]$Folder) {
-        $key = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey('Environment', $true)
-        try {
-            $raw = [string]$key.GetValue('Path', '', [Microsoft.Win32.RegistryValueOptions]::DoNotExpandEnvironmentNames)
-            $kind = [Microsoft.Win32.RegistryValueKind]::ExpandString
-            if ($key.GetValueNames() -contains 'Path') { $kind = $key.GetValueKind('Path') }
-            $want = $Folder.TrimEnd('\')
-            foreach ($entry in $raw.Split(';')) {
-                $e = $entry.Trim().TrimEnd('\')
-                if ($e -ieq $want -or [Environment]::ExpandEnvironmentVariables($e).TrimEnd('\') -ieq $want) { return $false }
-            }
-            $next = $Folder
-            if ($raw.Trim().Length -gt 0) { $next = $raw.TrimEnd(';') + ';' + $Folder }
-            $key.SetValue('Path', $next, $kind)
-        } finally { $key.Close() }
-        # Tell running programs the environment changed: setting and clearing a throwaway user variable makes Windows broadcast it. The PATH is
-        # already written, so a failure here is only a warning (open terminals learn of it later), never "install failed".
-        try {
-            [Environment]::SetEnvironmentVariable('AGEND_RUNTIME_ENV_REFRESH', '1', 'User')
-            [Environment]::SetEnvironmentVariable('AGEND_RUNTIME_ENV_REFRESH', $null, 'User')
-        } catch {
-            try { [Environment]::SetEnvironmentVariable('AGEND_RUNTIME_ENV_REFRESH', $null, 'User') } catch { }
-            Write-Host ('AgEnD Runtime: warning: your PATH was updated, but running programs could not be told (' + $_.Exception.Message + '). Open a new terminal to see the change.') -ForegroundColor Yellow
-        }
-        return $true
-    }
-    # The shim never changes from one version to the next, so replacing a version cannot disturb a batch file that is running.
-    # It starts the version named in current.txt, next to it; that one small file is what an install swaps.
-    # `setlocal DisableDelayedExpansion` comes before any line that expands a path or an argument: with cmd /V:ON (or the DelayedExpansion registry setting)
-    # an unmatched `!` in the install folder, which an accepted AGEND_RUNTIME_INSTALL_DIR can hold, would otherwise be eaten out of %~dp0 and the shim would
-    # look in another folder and report an incomplete install. (Changed once for that reason: see the change notice below.)
-    # DO NOT CHANGE $shimText unless a bug in it makes installs unusable. cmd.exe reads a batch file as it runs it, a piece at a time, not all at
-    # once, so rewriting the agend-runtime.cmd of a Runtime that is running (Set-AgendFile does that whenever this text differs from what is on
-    # disk) can make that Runtime's window misbehave when it ends. The text names no version for exactly that reason. If it must change, update the
-    # pinned hash in tests/runtime-install-script.test.ts in the same commit, and say in the docs and the changelog that running Runtimes should be
-    # stopped before the install command is run again.
-    $shimText = ('@echo off', 'setlocal DisableDelayedExpansion', 'set "AGEND_RT_VERSION="', 'if not exist "%~dp0current.txt" goto :agend_rt_missing', 'set /p AGEND_RT_VERSION=<"%~dp0current.txt"', 'if not defined AGEND_RT_VERSION goto :agend_rt_missing',
-        'if not exist "%~dp0..\%AGEND_RT_VERSION%\dist\runtime-cli.js" goto :agend_rt_missing', 'node.exe "%~dp0..\%AGEND_RT_VERSION%\dist\runtime-cli.js" %*',
-        'exit /b %errorlevel%', ':agend_rt_missing', 'echo AgEnD Runtime is not installed correctly. Run the install command shown in AgEnD Settings - Runtime - Connect a computer again.>&2',
-        'exit /b 1', '') -join "`r`n"
-
-    $tmp = $null
-    try {
-        try { [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor 3072 } catch { }
-
-        $origin = Resolve-AgendOrigin $agend
-        if ($origin -eq '') {
-            Write-Problem 'This installer needs $agend set to your AgEnD address (https, or http only for this computer).'
-            Write-Host 'Do not run this file by hand: copy the install command from AgEnD (Settings -> Runtime -> Connect a computer -> Windows (PowerShell)).'
-            Write-Host 'It sets $agend to your address and checks this installer''s SHA-256 against the one the page shows before it runs anything.'
-            $global:LASTEXITCODE = 1
-            return
-        }
-
-        $nodeText = ''
-        $node = Get-Command node -ErrorAction SilentlyContinue
-        if ($node) { try { $nodeText = ((& $node.Source -v) | Out-String).Trim() } catch { $nodeText = '' } }
-        if (-not (Test-NodeVersion $nodeText)) {
-            if ($nodeText) { Write-Problem ('Node.js ' + $nodeText + ' is too old. The AgEnD Runtime needs Node.js 22.14 or newer (22.14+, 23.6+ or 24+).') }
-            else { Write-Problem 'Node.js was not found. The AgEnD Runtime needs Node.js 22.14 or newer (22.14+, 23.6+ or 24+).' }
-            Write-Host 'This installer does not install software for you. Install Node.js yourself, open a new PowerShell window, set $agend and run the command again:'
-            Write-Host '  winget install OpenJS.NodeJS.LTS'
-            Write-Host 'or download it from https://nodejs.org/'
-            $global:LASTEXITCODE = 1
-            return
-        }
-
-        $root = [string]$env:AGEND_RUNTIME_INSTALL_DIR
-        if ($root -ne '') {
-            # A folder you chose: it must be a full path on a drive, never a relative, UNC or control-character path.
-            if ($root -notmatch '\A[A-Za-z]:[\\/]' -or $root -match '[\x00-\x1f\x7f]') { throw 'AGEND_RUNTIME_INSTALL_DIR must be a full path on a drive, for example D:\agend.' }
-        } else {
-            if (-not $env:LOCALAPPDATA) { throw 'LOCALAPPDATA is not set; set AGEND_RUNTIME_INSTALL_DIR to a folder for the Runtime.' }
-            $root = Join-Path $env:LOCALAPPDATA 'agend-runtime'
-        }
-        $root = [IO.Path]::GetFullPath($root).TrimEnd('\')
-        # The folder names the build as well as the version: one version number often covers more than one build, and a different build must land
-        # beside the old one, not on it. The same build finds its own folder again and only repoints agend-runtime.
-        $folder = $pinnedVersion + '+' + $pinnedSha256.Substring(0, 8)
-        $target = Join-Path $root $folder
-        $bin = Join-Path $root 'bin'
-        $marker = Join-Path $target '.agend-install-sha256'
-        $createdRoot = -not (Test-Path -LiteralPath $root)
-        $null = New-Item -ItemType Directory -Path $root -Force
-
-        # An existing folder is never deleted or replaced: it may be the Runtime that is running right now. A folder with this build's own name that does
-        # not hold this build can only be one that was changed by hand or left incomplete, and is left alone too.
-        $installed = $false
-        if (Test-Path -LiteralPath $target) {
-            $existing = ''
-            if (Test-Path -LiteralPath $marker) { $existing = ([IO.File]::ReadAllText($marker)).Trim() }
-            if ($existing -eq $pinnedSha256 -and (Test-Path -LiteralPath (Join-Path $target 'dist\runtime-cli.js'))) { $installed = $true }
-            else { throw ('The folder ' + $target + ' exists but does not hold this build (it was changed or is incomplete). It was left untouched because it may be running. Close any agend-runtime window, move that folder away yourself, and run the install command again.') }
-        }
-        if ($installed) {
-            Write-Step ('version ' + $pinnedVersion + ' (build ' + $pinnedSha256.Substring(0, 8) + ') is already installed in ' + $target + '.')
-        } else {
-            $tmp = Join-Path $root ('.install-' + [Guid]::NewGuid().ToString('N'))
-            $null = New-Item -ItemType Directory -Path $tmp
-            $archive = Join-Path $tmp 'runtime.zip'
-            Write-Step ('downloading version ' + $pinnedVersion + ' (build ' + $pinnedSha256.Substring(0, 8) + ') from ' + $origin)
-            Save-AgendArchive ($origin + '/runtime/v1/bundle/windows.zip') $archive $maxArchiveBytes
-            $actual = Get-AgendSha256 $archive
-            if ($actual -ne $pinnedSha256) {
-                throw ('The downloaded Runtime does not match the checksum pinned in this installer, so nothing was unpacked. Expected ' + $pinnedSha256 + ' but received ' + $actual + '. If AgEnD was just updated, reload the AgEnD page and copy the install command again.')
-            }
-            Write-Step 'checksum verified; unpacking.'
-            Add-Type -AssemblyName System.IO.Compression.FileSystem
-            $stage = Join-Path $tmp 'unpacked'
-            [IO.Compression.ZipFile]::ExtractToDirectory($archive, $stage)
-            $unpacked = Join-Path $stage 'agend-runtime'
-            if (-not (Test-Path -LiteralPath (Join-Path $unpacked 'dist\runtime-cli.js')) -or -not (Test-Path -LiteralPath (Join-Path $unpacked 'bundle-manifest.json'))) {
-                throw 'The Runtime archive does not contain the expected files, so nothing was installed.'
-            }
-            [IO.File]::WriteAllText((Join-Path $unpacked '.agend-install-sha256'), $pinnedSha256)
-            # A rename inside the install folder: the version folder appears whole or not at all, beside the versions already there.
-            Move-Item -LiteralPath $unpacked -Destination $target
-            Write-Step ('installed version ' + $pinnedVersion + ' (build ' + $pinnedSha256.Substring(0, 8) + ') in ' + $target + '.')
-        }
-
-        # Repoint agend-runtime. The shim file is written once and then left alone; current.txt is the atomic switch.
-        $null = New-Item -ItemType Directory -Path $bin -Force
-        $shim = Join-Path $bin 'agend-runtime.cmd'
-        $current = Join-Path $bin 'current.txt'
-        $was = ''
-        if (Test-Path -LiteralPath $current) { $was = ([IO.File]::ReadAllText($current)).Trim() }
-        Set-AgendFile $shim $shimText
-        Set-AgendFile $current $folder
-        if ($was -ne '' -and $was -ne $folder) {
-            Write-Step ('agend-runtime now starts ' + $folder + ' (it was ' + $was + '). A Runtime that is already running keeps its own version until you stop it with Ctrl+C and start it again with agend-runtime run.')
-        }
-        $others = @(Get-ChildItem -LiteralPath $root -Directory -ErrorAction SilentlyContinue | Where-Object { $_.Name -ne $folder -and $_.Name -match '\A\d+\.\d+\.\d+([-+][A-Za-z0-9.+-]+)?\z' } | ForEach-Object { $_.Name })
-        # Earlier folders are not removed here: one of them may be running. Cleaning them up comes with the update and uninstall commands (phase 2).
-        if ($others.Count -gt 0) { Write-Step ('earlier versions are kept where they are (' + ($others -join ', ') + '). This installer never removes a version; clearing old ones comes later, with the update and uninstall commands.') }
-
-        $onPath = $false
-        if ([string]$env:AGEND_RUNTIME_NO_PATH -eq '1') {
-            Write-Step 'AGEND_RUNTIME_NO_PATH is set; your PATH was not changed.'
-        } else {
-            if (Add-UserPathEntry $bin) { Write-Step ('added ' + $bin + ' to your user PATH.') } else { Write-Step ($bin + ' is already on your user PATH.') }
-            $sessionHas = $false
-            foreach ($entry in ([string]$env:Path).Split(';')) { if ($entry.Trim().TrimEnd('\') -ieq $bin) { $sessionHas = $true } }
-            if (-not $sessionHas) { $env:Path = ([string]$env:Path).TrimEnd(';') + ';' + $bin }
-            $onPath = $true
-        }
-
-        Write-Host ''
-        Write-Host 'AgEnD Runtime is installed. This computer is not connected yet and nothing has been paired.'
-        Write-Host 'Next, connect it. Open Settings -> Runtime -> Connect a computer in AgEnD for the one-time pairing code, then run:'
-        Write-Host ''
-        if ($onPath) { Write-Host ('  agend-runtime connect --server "' + $origin + '"') }
-        else { Write-Host ('  & "' + $shim + '" connect --server "' + $origin + '"') }
-        Write-Host ''
-        Write-Host 'Type the pairing code when asked, compare the fingerprint with the one AgEnD shows, then approve this computer in AgEnD.'
-    } catch {
-        Write-Problem ('install failed: ' + $_.Exception.Message)
-        $global:LASTEXITCODE = 1
-    } finally {
-        if ($tmp -and (Test-Path -LiteralPath $tmp)) { Remove-Item -LiteralPath $tmp -Recurse -Force -ErrorAction SilentlyContinue }
-        # A run that installed nothing leaves nothing: the install folder this run created is removed again, but only while it is still empty.
-        if ($createdRoot -and $root -and (Test-Path -LiteralPath $root) -and -not (Get-ChildItem -LiteralPath $root -Force | Select-Object -First 1)) { Remove-Item -LiteralPath $root -Force -ErrorAction SilentlyContinue }
-    }
-}