@timurproko/a1 0.2.3-dev.656 → 0.2.3-dev.659

package/dist/foundation/release/update-recovery.d.ts

@@ -80,3 +80,4 @@ export declare function removeUpdateRecoveryCapsule(dataDir: string, transaction
 export declare function inspectUpdateLauncherSet(capsule: UpdateRecoveryCapsule, platform?: NodeJS.Platform): Promise<"target" | "recovery" | "unavailable">;
 /** Remove terminal recovery capsules only after no canonical launcher references them. */
 export declare function cleanupUpdateRecoveryCapsules(dataDir: string): Promise<void>;
+export declare function resolveNpmCli(globalRoot: string, environment: NodeJS.ProcessEnv, platform?: NodeJS.Platform, nodeExecutable?: string): Promise<string>;

package/dist/foundation/release/update-recovery.js

@@ -119,7 +119,7 @@ export async function prepareUpdateRecoveryCapsule(options) {
         const prefix = npmPrefixForGlobalRoot(canonicalGlobal, platform);
         const launcherRoot = platform === "win32" ? prefix : resolve(prefix, "bin");
         const npmCliRoot = await realpath(options.npmCliRoot ?? canonicalGlobal);
-        const npmCli = await resolveNpmCli(npmCliRoot, options.environment ?? process.env);
+        const npmCli = await resolveNpmCli(npmCliRoot, options.environment ?? process.env, platform);
         const capsule = {
             schema: UPDATE_RECOVERY_SCHEMA,
             launchContract: PRIVATE_LAUNCH_CONTRACT,
@@ -299,15 +299,61 @@ async function spawnRecoveryWorker(entry, manifestPath, environment) {
     });
     child.unref();
 }
-async function resolveNpmCli(globalRoot, environment) {
-    const candidates = [environment.npm_execpath, resolve(globalRoot, "npm", "bin", "npm-cli.js")].filter((value) => typeof value === "string" && value.length > 0);
+export async function resolveNpmCli(globalRoot, environment, platform = process.platform, nodeExecutable = process.execPath) {
+    const candidates = [environment.npm_execpath, resolve(globalRoot, "npm", "bin", "npm-cli.js")]
+        .filter((value) => typeof value === "string" && value.length > 0);
     for (const candidate of candidates) {
-        const canonical = await realpath(candidate).catch(() => null);
-        if (canonical && await lstat(canonical).then(metadata => metadata.isFile()).catch(() => false))
+        const canonical = await canonicalRegularFile(candidate);
+        if (canonical)
             return canonical;
     }
+    if (platform === "win32") {
+        const commandCandidate = await windowsNpmCliFromPath(environment);
+        const bundledCandidates = [commandCandidate, resolve(dirname(nodeExecutable), "node_modules", "npm", "bin", "npm-cli.js")]
+            .filter((value) => value !== null);
+        for (const candidate of bundledCandidates) {
+            const canonical = await canonicalRegularFile(candidate);
+            if (canonical)
+                return canonical;
+        }
+    }
     throw new Error("could not resolve npm's JavaScript entry for protected package replacement");
 }
+async function windowsNpmCliFromPath(environment) {
+    const pathValue = windowsEnvironmentValue(environment, "PATH");
+    if (!pathValue)
+        return null;
+    const pathExtValue = windowsEnvironmentValue(environment, "PATHEXT") ?? ".COM;.EXE;.BAT;.CMD";
+    const extensions = pathExtValue.split(";")
+        .map(extension => extension.trim())
+        .filter(extension => /^\.[a-z0-9]+$/i.test(extension));
+    if (extensions.length === 0)
+        return null;
+    for (const rawDirectory of pathValue.split(";")) {
+        const directory = unquoteWindowsPathEntry(rawDirectory.trim());
+        if (!directory)
+            continue;
+        for (const extension of extensions) {
+            const command = resolve(directory, `npm${extension}`);
+            if (await canonicalRegularFile(command))
+                return resolve(directory, "node_modules", "npm", "bin", "npm-cli.js");
+        }
+    }
+    return null;
+}
+function windowsEnvironmentValue(environment, name) {
+    const key = Object.keys(environment).find(candidate => candidate.toLowerCase() === name.toLowerCase());
+    return key ? environment[key] : undefined;
+}
+function unquoteWindowsPathEntry(value) {
+    return value.length >= 2 && value.startsWith('"') && value.endsWith('"') ? value.slice(1, -1) : value;
+}
+async function canonicalRegularFile(path) {
+    const canonical = await realpath(path).catch(() => null);
+    if (!canonical)
+        return null;
+    return await lstat(canonical).then(metadata => metadata.isFile() ? canonical : null).catch(() => null);
+}
 async function readLiveRecoveryOwner(path, transactionId) {
     const owner = await readJson(path).catch(() => null);
     const metadata = await lstat(path).catch(() => null);

package/dist/native/darwin-arm64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "darwin",
   "architecture": "arm64",
   "capability": "supported",
-  "builtAt": "2026-10-01T17:37:48.184Z",
+  "builtAt": "2026-10-02T08:32:06.748Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "d3979187180449cb181eb92c187d1c8d0bfc4b2ba442e2e0a7c32704ea7e9589",

package/dist/native/linux-x64/manifest.json

@@ -5,7 +5,7 @@
   "platform": "linux",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-01T17:37:29.402Z",
+  "builtAt": "2026-10-02T08:31:49.423Z",
   "artifact": {
     "filename": "process-guardian",
     "sha256": "a316d11a4aabe5aa88a360169206a87a11fe4b355e836b77cd8a7950279ab415",

package/dist/native/win32-x64/manifest.json

@@ -5,10 +5,10 @@
   "platform": "win32",
   "architecture": "x64",
   "capability": "supported",
-  "builtAt": "2026-10-01T17:38:27.007Z",
+  "builtAt": "2026-10-02T08:32:39.100Z",
   "artifact": {
     "filename": "process-guardian.exe",
-    "sha256": "1770b5ffebe513d555ba4fac8bac4a06f944ee7f7e596c2796d3560e5ccecaf0",
+    "sha256": "f301a691bb9b2103d149f08126d60aab44bf130cb4bf5a9a1d8b82f4965b9d62",
     "size": 177152
   },
   "provenance": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@timurproko/a1",
-  "version": "0.2.3-dev.656",
+  "version": "0.2.3-dev.659",
   "description": "Standalone terminal workspace for supervised native and managed agents",
   "type": "module",
   "privateLaunchContract": "neutral-launch-v1",