bosun 0.29.7 → 0.29.8

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bosun",
-  "version": "0.29.7",
+  "version": "0.29.8",
   "description": "AI-powered orchestrator supervisor — manages AI agent executors with failover, auto-restarts on failure, analyzes crashes with Codex SDK, creates PRs via Vibe-Kanban API, and sends Telegram notifications. Supports N executors with weighted distribution, multi-repo projects, and auto-setup.",
   "type": "module",
   "license": "Apache 2.0",

package/update-check.mjs

@@ -20,6 +20,7 @@ import { readFileSync, existsSync } from "node:fs";
 import { resolve, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createInterface } from "node:readline";
+import { get as httpsGet } from "node:https";
 import os from "node:os";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
@@ -57,11 +58,21 @@ function runNpmCommand(args, options = {}) {
       if (process.platform !== "win32") {
         return execFileSync(process.execPath, [candidate, ...args], safeOptions);
       }
+      // On Windows, .cmd/.bat files are batch scripts that must be interpreted
+      // by cmd.exe.  Without shell:true, execFileSync can fail with EINVAL on
+      // certain Node/nvm-for-windows configurations.
+      if (candidate.endsWith(".cmd") || candidate.endsWith(".bat")) {
+        return execFileSync(candidate, args, { ...safeOptions, shell: true });
+      }
       return execFileSync(candidate, args, safeOptions);
     }
   }
 
   const fallback = process.platform === "win32" ? "npm.cmd" : "npm";
+  // The fallback path also needs shell:true on Windows for .cmd resolution.
+  if (process.platform === "win32") {
+    return execFileSync(fallback, args, { ...safeOptions, shell: true });
+  }
   return execFileSync(fallback, args, safeOptions);
 }
 
@@ -103,18 +114,39 @@ async function writeCache(data) {
 // ── Registry query ───────────────────────────────────────────────────────────
 
 async function fetchLatestVersion() {
-  // Try native fetch (Node 18+), fall back to npm view
+  // Use node:https instead of fetch() to avoid the undici connection-pool
+  // handles that cause a libuv assertion crash on Windows:
+  //   Assertion failed: !(handle->flags & UV_HANDLE_CLOSING) [src\win\async.c:76]
+  // undici keeps internal uv_async_t handles alive after fetch() completes;
+  // calling process.exit() then tears them down mid-close.
   try {
-    const res = await fetch(`https://registry.npmjs.org/${PKG_NAME}/latest`, {
-      headers: { Accept: "application/json" },
-      signal: AbortSignal.timeout(10000),
+    const version = await new Promise((resolve, reject) => {
+      const req = httpsGet(
+        `https://registry.npmjs.org/${PKG_NAME}/latest`,
+        { headers: { Accept: "application/json" }, timeout: 10000 },
+        (res) => {
+          if (res.statusCode < 200 || res.statusCode >= 300) {
+            res.resume(); // drain
+            return resolve(null);
+          }
+          let body = "";
+          res.setEncoding("utf8");
+          res.on("data", (chunk) => { body += chunk; });
+          res.on("end", () => {
+            try {
+              resolve(JSON.parse(body).version || null);
+            } catch {
+              resolve(null);
+            }
+          });
+        },
+      );
+      req.on("error", () => resolve(null));
+      req.on("timeout", () => { req.destroy(); resolve(null); });
     });
-    if (res.ok) {
-      const data = await res.json();
-      return data.version || null;
-    }
+    if (version) return version;
   } catch {
-    // fetch failed, try npm view
+    // https.get failed, try npm view
   }
 
   try {