agent-sin 0.1.5 → 0.1.9

package/CHANGELOG.md

@@ -15,6 +15,38 @@ See the [compatibility policy](https://agent.shingoirie.com/versioning) for deta
 
 ---
 
+## [0.1.9] — 2026-05-14
+
+### Fixed
+
+- The `.env` permission warning ("permissions 666 ... are too open; recommend: chmod 600") no longer fires on Windows. POSIX-style mode bits are not meaningful on Windows (every file reports 0o666), so the check is skipped there.
+
+---
+
+## [0.1.8] — 2026-05-14
+
+### Fixed
+
+- Update notification on `agent-sin start` / `agent-sin chat` was being emitted *before* the ascii startup banner, so on small terminals it scrolled out of view. The notification now renders *after* the startup banner, with a blank line of separation, so it is always visible at the bottom of the welcome area.
+
+---
+
+## [0.1.7] — 2026-05-14
+
+### Fixed
+
+- `agent-sin import` now rewrites absolute paths inside the restored `config.toml` (and legacy `config.yaml`) so the imported workspace points at the current machine's `~/.agent-sin` instead of the source machine's. Previously, restoring a backup on a different user account failed with `EACCES: permission denied, mkdir '/Users/<source>'`.
+
+---
+
+## [0.1.6] — 2026-05-14
+
+### Fixed
+
+- On Windows, launching the Codex CLI (and Claude Code CLI) failed with `spawn codex ENOENT` because Node's `spawn` cannot resolve the `.cmd` shim that npm-installed CLIs use on Windows. Both the one-shot CLI bridge and the long-running `codex app-server` now enable `shell: true` only on `win32`, so the shim is found correctly. POSIX paths still use direct exec.
+
+---
+
 ## [0.1.5] — 2026-05-14
 
 ### Changed

package/dist/cli/index.js

@@ -373,16 +373,10 @@ async function cmdRun(args) {
 async function cmdChat(args) {
     const config = await loadConfig();
     scheduleUpdateCheck(config.workspace);
-    // Interactive CLI: always check the registry on startup so the user sees
-    // any new release immediately, not on the next session.
-    const startupBanner = await consumeUpdateBanner(config.workspace, { force: true });
-    if (startupBanner) {
-        console.log(startupBanner);
-    }
     const history = [];
     if (args.length > 0) {
         const lines = await handleChatMessage(config, args.join(" "), history);
-        const banner = await consumeUpdateBanner(config.workspace);
+        const banner = await consumeUpdateBanner(config.workspace, { force: true });
         if (banner) {
             console.log(banner);
         }
@@ -391,6 +385,9 @@ async function cmdChat(args) {
         }
         return 0;
     }
+    // For the interactive session, always hit the registry on startup. Render the
+    // banner *after* the ascii banner so it stays visible on small terminals.
+    const startupUpdateBanner = await consumeUpdateBanner(config.workspace, { force: true });
     await warnIfSchedulesNeedService(config);
     const intentRuntime = {
         pending: null,
@@ -420,6 +417,10 @@ async function cmdChat(args) {
         console.log(l("agent-sin chat. /help / /reset / /exit  (Tab completion)", "agent-sin chat. /help / /reset / /exit  (Tabで補完)"));
         console.log(l("mode: chat  |  build/edit mode is suggested automatically when useful", "mode: chat  |  必要に応じてビルド/編集モードに自動で切替提案します"));
     }
+    if (startupUpdateBanner) {
+        console.log("");
+        console.log(uiActive() ? formatChatLine(startupUpdateBanner) : startupUpdateBanner);
+    }
     while (true) {
         let raw;
         const frameTop = renderInputFrameTop();

package/dist/core/ai-provider.js

@@ -643,7 +643,14 @@ function splitExtraArgs(value) {
 }
 async function spawnCli(bin, args, modelId, provider, onProgress, cwd) {
     return new Promise((resolve, reject) => {
-        const child = spawn(bin, args, { stdio: ["ignore", "pipe", "pipe"], cwd });
+        // Windows wraps CLI tools as .cmd / .bat shims (codex.cmd, claude.cmd).
+        // Node's spawn cannot exec those without going through a shell, so we
+        // enable shell only on win32. Posix paths keep direct exec for safety.
+        const child = spawn(bin, args, {
+            stdio: ["ignore", "pipe", "pipe"],
+            cwd,
+            shell: process.platform === "win32",
+        });
         const stdout = [];
         const stderr = [];
         let stderrLine = "";

package/dist/core/secrets.js

@@ -34,15 +34,20 @@ export async function loadDotenv(workspace = defaultWorkspace()) {
         return { loaded: false, path: file, vars_set: 0 };
     }
     let permissionWarning;
-    try {
-        const info = await stat(file);
-        const mode = info.mode & 0o777;
-        if ((mode & 0o077) !== 0) {
-            permissionWarning = `permissions ${mode.toString(8).padStart(3, "0")} on ${file} are too open; recommend: chmod 600 ${file}`;
+    // POSIX-style mode bits do not have meaningful semantics on Windows, where
+    // every file reports 0o666 by default. Skip the check there to avoid a
+    // false-positive warning on every CLI start.
+    if (process.platform !== "win32") {
+        try {
+            const info = await stat(file);
+            const mode = info.mode & 0o777;
+            if ((mode & 0o077) !== 0) {
+                permissionWarning = `permissions ${mode.toString(8).padStart(3, "0")} on ${file} are too open; recommend: chmod 600 ${file}`;
+            }
+        }
+        catch {
+            // Ignore stat failures; the file was readable above.
         }
-    }
-    catch {
-        // Ignore stat failures; the file was readable above.
     }
     let varsSet = 0;
     for (const line of raw.split(/\r?\n/)) {

package/dist/core/transfer.js

@@ -1,8 +1,9 @@
 import { spawn } from "node:child_process";
-import { copyFile, lstat, mkdir, mkdtemp, readdir, rename, rm, stat } from "node:fs/promises";
+import { copyFile, lstat, mkdir, mkdtemp, readdir, readFile, rename, rm, stat, writeFile } from "node:fs/promises";
 import os from "node:os";
 import path from "node:path";
-import { defaultWorkspace } from "./config.js";
+import { configPath, defaultWorkspace, legacyConfigPath, normalizeConfig, parseTomlConfigWithLegacy, writeConfig, } from "./config.js";
+import YAML from "yaml";
 import { l } from "./i18n.js";
 const DEFAULT_INCLUDE = [
     ".env",
@@ -90,12 +91,58 @@ export async function importWorkspace(options) {
         }
         await mkdir(workspace, { recursive: true });
         await copySafeTree(tempRoot, workspace);
+        // Backups carry the absolute paths of the source machine. Rewrite them so
+        // the imported workspace points at this machine's locations.
+        await rewriteImportedConfigPaths(workspace);
         return { workspace, archivePath, entries, backupPath, dryRun: false };
     }
     finally {
         await rm(tempRoot, { recursive: true, force: true });
     }
 }
+async function rewriteImportedConfigPaths(workspace) {
+    const tomlFile = configPath(workspace);
+    if (await pathExists(tomlFile)) {
+        try {
+            const raw = await readFile(tomlFile, "utf8");
+            const parsed = parseTomlConfigWithLegacy(raw);
+            const rewritten = normalizeConfig({
+                ...parsed.config,
+                workspace,
+                notes_dir: path.join(workspace, "notes"),
+                skills_dir: path.join(workspace, "skills"),
+                memory_dir: path.join(workspace, "memory"),
+                index_dir: path.join(workspace, "index"),
+                logs_dir: path.join(workspace, "logs"),
+            });
+            await writeConfig(tomlFile, rewritten);
+        }
+        catch {
+            // Silently skip when the imported config.toml cannot be parsed; the
+            // user can still manually edit it.
+        }
+    }
+    const yamlFile = legacyConfigPath(workspace);
+    if (await pathExists(yamlFile)) {
+        try {
+            const raw = await readFile(yamlFile, "utf8");
+            const parsed = YAML.parse(raw) || {};
+            const rewritten = {
+                ...parsed,
+                workspace,
+                notes_dir: path.join(workspace, "notes"),
+                skills_dir: path.join(workspace, "skills"),
+                memory_dir: path.join(workspace, "memory"),
+                index_dir: path.join(workspace, "index"),
+                logs_dir: path.join(workspace, "logs"),
+            };
+            await writeFile(yamlFile, YAML.stringify(rewritten), "utf8");
+        }
+        catch {
+            // ignore - legacy yaml is best-effort
+        }
+    }
+}
 async function backupExistingWorkspace(workspace) {
     const ts = formatTimestamp(new Date());
     const backupPath = `${workspace}.bak-${ts}`;

package/dist/runtimes/codex-app-server.js

@@ -104,8 +104,11 @@ export class CodexAppServerSession {
         await this.starting;
     }
     async start() {
+        // Windows wraps the codex CLI as a .cmd shim; Node's spawn cannot exec
+        // those without a shell, so we enable shell only on win32.
         const child = spawn(this.options.bin, this.options.args, {
             stdio: ["pipe", "pipe", "pipe"],
+            shell: process.platform === "win32",
         });
         this.child = child;
         this.exitReason = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-sin",
-  "version": "0.1.5",
+  "version": "0.1.9",
   "description": "Program Skill-first personal AI agent OS CLI.",
   "type": "module",
   "license": "MIT",