@suveren/gateway 0.13.1 → 0.14.0

package/dist/ui/index.html

@@ -14,7 +14,7 @@
     <meta name="apple-mobile-web-app-title" content="Suveren" />
     <meta name="theme-color" content="#111111" />
     <title>Suveren</title>
-    <script type="module" crossorigin src="/assets/index-CmLqzgqA.js"></script>
+    <script type="module" crossorigin src="/assets/index-Cg6VaGKb.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-y1OFeYnS.css">
   </head>
   <body>

package/lib/autostart-templates.mjs

@@ -146,8 +146,14 @@ WantedBy=default.target
  * carry paths containing spaces.
  *
  * LogonType=InteractiveToken keeps it in the user's own session with no stored
- * password and no admin rights. Hidden + no execution time limit stop it
- * flashing a console window or being killed after the default 72 hours.
+ * password and no admin rights. No execution time limit stops it being killed
+ * after the default 72 hours. `<Hidden>` only hides the task in the Task
+ * Scheduler UI — it does NOT hide the console window: a console program
+ * (node.exe, or the installer's launcher.cmd) started by an InteractiveToken
+ * task gets a visible console for the gateway's whole lifetime (seen on a real
+ * Windows 11 VM; closing it stops the gateway). So the action always runs
+ * through `conhost.exe --headless`, Windows' own console host without a
+ * window; the real command and its arguments follow it.
  *
  * `userId` is what makes it unprivileged, and leaving it out is not a cosmetic
  * omission: a LogonTrigger with no UserId means "at ANY user's logon", which
@@ -167,9 +173,8 @@ WantedBy=default.target
  * into offline+managed mode too. Routing the scheduled task through the
  * launcher instead keeps that env scoped to just this one process tree: the
  * launcher sets it for its own child (server.js) only. Omitted (the npm/dev
- * CLI's `service install`, which has no launcher), this renders BYTE-
- * IDENTICAL XML to before — this is additive, not a behaviour change for
- * any install that isn't the managed Windows one.
+ * CLI's `service install`, which has no launcher), the default node.exe
+ * action is used. Either way it is wrapped in conhost.exe --headless.
  */
 export function buildWindowsTaskXml({ nodePath, serverEntry, author, dataDir, userId, command, args: argsOverride }) {
   // Task Scheduler requires \Command to be the executable and \Arguments the
@@ -177,8 +182,11 @@ export function buildWindowsTaskXml({ nodePath, serverEntry, author, dataDir, us
   // Task Scheduler XML carries no environment block, so the marker that this
   // was a service start has to ride in the arguments (or, for a launcher
   // command, is the launcher's own job to pass through).
-  const resolvedCommand = command ?? nodePath;
-  const args = argsOverride ?? `"${serverEntry}" --autostart`;
+  const realCommand = command ?? nodePath;
+  const realArgs = argsOverride ?? `"${serverEntry}" --autostart`;
+  // No visible console window (see above): conhost.exe --headless "<real command>" <args>.
+  const resolvedCommand = '%SystemRoot%\\System32\\conhost.exe';
+  const args = `--headless "${realCommand}" ${realArgs}`;
   const envNote = dataDir ? `Suveren data directory: ${dataDir}` : 'Suveren gateway';
 
   // Element order is fixed by the Task Scheduler XSD, and schtasks rejects the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@suveren/gateway",
-  "version": "0.13.1",
+  "version": "0.14.0",
   "description": "Suveren gateway — local agent gateway built in compliance with the Human Agency Protocol (HAP). Runs the UI, control plane, and MCP server in one Node process.",
   "type": "module",
   "main": "server.js",

package/server.js

@@ -95,7 +95,7 @@ if (savedCaFile && !process.env.SUVEREN_CA_REEXEC_DONE) {
   const child = spawn(
     process.execPath,
     [THIS_FILE, ...process.argv.slice(2)],
-    { env: { ...process.env, NODE_EXTRA_CA_CERTS: effectiveCaFile, SUVEREN_CA_REEXEC_DONE: '1' }, stdio: 'inherit' },
+    { env: { ...process.env, NODE_EXTRA_CA_CERTS: effectiveCaFile, SUVEREN_CA_REEXEC_DONE: '1' }, stdio: 'inherit', windowsHide: true },
   );
   child.on('exit', (code, signal) => {
     if (combinedDirToClean) {
@@ -206,13 +206,16 @@ const env = {
 const cp = spawn(
   process.execPath,
   [join(__dirname, 'dist', 'control-plane', 'index.mjs')],
-  { env, stdio: 'inherit' },
+  // windowsHide: on Windows 11 ARM (x64 emulation) these children otherwise got
+  // their own visible console windows even under a hidden parent — seen in CI
+  // and in a real ARM VM. No effect on macOS/Linux; output still goes to stdio.
+  { env, stdio: 'inherit', windowsHide: true },
 );
 
 const mcp = spawn(
   process.execPath,
   [join(__dirname, 'dist', 'mcp-server', 'http.mjs')],
-  { env, stdio: 'inherit' },
+  { env, stdio: 'inherit', windowsHide: true },
 );
 
 const children = [