@supermux/core 0.15.1 → 0.16.1

package/dist/context/agents.js

@@ -9,12 +9,12 @@
  * into place, and the links made here (a plugin, a skills folder) are new: making one never
  * follows one.
  */
-import { lstatSync, readFileSync, readdirSync, readlinkSync, rmSync, symlinkSync } from "node:fs";
+import { lstatSync, readFileSync, readdirSync, readlinkSync, rmSync } from "node:fs";
 import { basename, join } from "node:path";
 import { mappedPluginDrops, mappedPluginServers, readPlugin, writeSkillsPlugin } from "./plugins.js";
 import { reloadOnlyUpdates } from "./update.js";
 import { writeAntigravityMcpConfig, writeAntigravityPlugins } from "../environment/antigravity.js";
-import { assertRealDirectory, realDirectoryIn, writePrivateFile } from "../private-files.js";
+import { assertRealDirectory, linkDirectory, realDirectoryIn, writePrivateFile } from "../private-files.js";
 const dropped = (context, kind, item) => context.dropped.some(drop => drop.kind === kind && drop.item === item);
 /** What a launch context applies: its items minus the ones the core dropped. */
 export const appliedContext = (context) => applied(context);
@@ -42,7 +42,7 @@ function pluginFolder(context, skills, plugins, manifests) {
     const entries = [];
     plugins.forEach((path, index) => {
         const link = join(folder, `${String(index + 1).padStart(2, "0")}-${basename(path)}`);
-        symlinkSync(path, link);
+        linkDirectory(path, link);
         entries.push(link);
     });
     skills.forEach((root, index) => {
@@ -96,7 +96,7 @@ export function editPluginFolder(directory, changes, manifests) {
                 rmSync(path, { recursive: true, force: true });
                 undo.push(() => {
                     if (entry.kind === "plugins")
-                        symlinkSync(entry.path, path);
+                        linkDirectory(entry.path, path);
                     else
                         writeSkillsPlugin(path, entry.name, entry.path, manifests);
                 });
@@ -104,8 +104,9 @@ export function editPluginFolder(directory, changes, manifests) {
         }
         else if (change.kind === "plugins") {
             const path = join(folder, `${String(++pluginIndex).padStart(2, "0")}-${basename(change.item)}`);
-            symlinkSync(change.item, path);
-            undo.push(() => rmSync(path, { force: true }));
+            linkDirectory(change.item, path);
+            // recursive: Bun on Windows refuses a plain rm of a junction (EFAULT); it still only removes the link.
+            undo.push(() => rmSync(path, { recursive: true, force: true }));
         }
         else {
             const name = `supermux-skills-${++skillsIndex}`;

package/dist/context/plugins.js

@@ -1,6 +1,6 @@
-import { existsSync, readFileSync, readdirSync, statSync, symlinkSync } from "node:fs";
+import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
 import { basename, dirname, join } from "node:path";
-import { assertRealDirectory, realDirectoryIn, writePrivateFile } from "../private-files.js";
+import { assertRealDirectory, linkDirectory, realDirectoryIn, writePrivateFile } from "../private-files.js";
 import { MCP_SERVER_NAME } from "./index.js";
 function isDirectory(path) {
     try {
@@ -127,6 +127,6 @@ export function writeSkillsPlugin(dir, name, skillsRoot, manifests) {
             ...(manifest === ".cursor-plugin" ? { skills: "./skills/" } : {}),
         }, null, 2) + "\n", () => assertRealDirectory(folder));
     }
-    symlinkSync(skillsRoot, join(wrapper, "skills"));
+    linkDirectory(skillsRoot, join(wrapper, "skills"));
     return wrapper;
 }

package/dist/keeper/client.js

@@ -1,9 +1,9 @@
 import { spawn } from 'node:child_process';
 import { randomBytes } from 'node:crypto';
-import { lstatSync, mkdirSync, realpathSync } from 'node:fs';
+import { lstatSync, mkdirSync, readdirSync, realpathSync } from 'node:fs';
 import { lstat, rm, unlink } from 'node:fs/promises';
 import { createConnection } from 'node:net';
-import { dirname, join, resolve } from 'node:path';
+import { basename, dirname, join, resolve } from 'node:path';
 import { CoreError } from '../errors.js';
 import { assertNoLinksIn, assertRealDirectory, present, readPrivateFile, realDirectoryIn, writePrivateFile } from '../private-files.js';
 import { CORE_SUBCOMMANDS, selfEntry } from '../self-entry.js';
@@ -114,6 +114,8 @@ function mine(info) {
  * reboot emptied it, say) and listen there, to be sent a session's token.
  */
 function trustedSocket(dir, path) {
+    if (process.platform === 'win32')
+        return listedSocket(path);
     try {
         const socket = lstatSync(path);
         if (!socket.isSocket() || !mine(socket))
@@ -127,12 +129,29 @@ function trustedSocket(dir, path) {
         return false;
     }
 }
+/**
+ * Windows: an AF_UNIX socket file is listed in its folder but cannot be stat'ed (EACCES), and a uid or
+ * mode would mean nothing there; its folders (the keeper's, the user's own temp dir) are the user's.
+ */
+function listedSocket(path) {
+    try {
+        return readdirSync(dirname(path)).includes(basename(path));
+    }
+    catch {
+        return false;
+    }
+}
 /** The socket a new keeper of `dir` listens on: the first candidate whose directory this user can make private. */
 function newSocketPath(dir) {
     return privateSocketPath(keeperSocketPaths(dir), join(dir, 'keeper.sock'));
 }
 /** Deletes the socket a keeper left at `path` when it is this user's; anything else there stays (the path comes from a status file). */
 async function removeSocket(path) {
+    if (process.platform === 'win32') {
+        if (listedSocket(path))
+            await unlink(path).catch(() => { });
+        return;
+    }
     try {
         const info = await lstat(path);
         if (info.isSocket() && mine(info))
@@ -421,6 +440,7 @@ async function connectLocked(options) {
         const child = spawn(entry.command, entry.args, {
             detached: true,
             stdio: 'ignore',
+            windowsHide: true,
             cwd: entry.cwd,
             env: {
                 ...process.env,

package/dist/keeper/keeper.js

@@ -254,6 +254,8 @@ async function main() {
         env: agentEnv,
         stdio: ['pipe', 'pipe', 'pipe'],
         shell: false,
+        // Windows: the keeper has no console, so a console agent (claude.exe) would get a visible one of its own.
+        windowsHide: true,
     });
     if (!captureStderr)
         agent.stderr?.resume();

package/dist/private-files.d.ts

@@ -6,6 +6,11 @@ export declare function realDirectoryIn(parent: string, name: string): string;
 export declare function realStateDirectory(path: string): string;
 /** Refuses a link, or anything of another user, among the entries of `dir`. */
 export declare function assertNoLinksIn(dir: string): void;
+/**
+ * A new link at `path` to directory `target`. On Windows a junction: a symbolic link there needs
+ * Developer Mode or an elevated process (EPERM otherwise), a junction needs neither.
+ */
+export declare function linkDirectory(target: string, path: string, platform?: NodeJS.Platform): void;
 /** Whether `path` names anything (a link included), without following it. */
 export declare function present(path: string): boolean;
 /** A new 0600 file of this user's at `path`, open with `flags`: never an existing file, never through a link. */

package/dist/private-files.js

@@ -6,7 +6,7 @@
  * (O_CREAT | O_EXCL, 0600) and renamed into place, so an existing name is never opened for writing.
  */
 import { randomBytes } from "node:crypto";
-import { closeSync, constants, fchmodSync, fstatSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, realpathSync, renameSync, unlinkSync, writeSync } from "node:fs";
+import { closeSync, constants, fchmodSync, fstatSync, lstatSync, mkdirSync, openSync, readdirSync, readFileSync, realpathSync, renameSync, symlinkSync, unlinkSync, writeSync } from "node:fs";
 import { join } from "node:path";
 import { CoreError } from "./errors.js";
 /** Windows has no O_NOFOLLOW (nor keepers): there the lstat checks remain. */
@@ -64,6 +64,9 @@ export function assertNoLinksIn(dir) {
         catch (error) {
             if (code(error) === "ENOENT")
                 continue;
+            // A Windows AF_UNIX socket (a keeper's) cannot be stat'ed; a link or junction can.
+            if (code(error) === "EACCES" && process.platform === "win32")
+                continue;
             throw error;
         }
         if (info.isSymbolicLink())
@@ -72,6 +75,13 @@ export function assertNoLinksIn(dir) {
             throw refuse(path, "it belongs to another user");
     }
 }
+/**
+ * A new link at `path` to directory `target`. On Windows a junction: a symbolic link there needs
+ * Developer Mode or an elevated process (EPERM otherwise), a junction needs neither.
+ */
+export function linkDirectory(target, path, platform = process.platform) {
+    symlinkSync(target, path, platform === "win32" ? "junction" : "dir");
+}
 /** Whether `path` names anything (a link included), without following it. */
 export function present(path) {
     try {

package/dist/version.d.ts

@@ -2,4 +2,4 @@
  * The version of this package, announced to agents as the `clientInfo` version of their handshake.
  * Keep it equal to `version` in package.json: tests/alias.test.ts fails when they differ.
  */
-export declare const LIBRARY_VERSION = "0.15.1";
+export declare const LIBRARY_VERSION = "0.16.1";

package/dist/version.js

@@ -2,4 +2,4 @@
  * The version of this package, announced to agents as the `clientInfo` version of their handshake.
  * Keep it equal to `version` in package.json: tests/alias.test.ts fails when they differ.
  */
-export const LIBRARY_VERSION = "0.15.1";
+export const LIBRARY_VERSION = "0.16.1";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@supermux/core",
-  "version": "0.15.1",
+  "version": "0.16.1",
   "type": "module",
   "description": "Build your own app on Claude Code, Codex, Cursor, OpenCode, Grok Build and Antigravity: one TypeScript API for sessions, events and permission prompts.",
   "keywords": [