dsh-cliworker-now 0.7.6 → 0.7.7

package/lib/types/host/windows-account-terminal.js

@@ -0,0 +1,208 @@
+import { mkdtemp, readFile, writeFile, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { setTimeout as delay } from 'node:timers/promises';
+import { ProcessCleanupUnconfirmedError } from "./process.js";
+/** A fixed diagnostic; never derived from PowerShell or native output. */
+export class WindowsAccountTerminalError extends Error {
+    constructor() {
+        super('Windows 账号终端托管不可用，请检查 PowerShell 后重试');
+    }
+}
+/** ConPTY publishes pid=0 during async allocation in the pinned Windows SDK.
+ * Attach a waiting bootstrap to a lifecycle-only Job before allowing the CLI to
+ * spawn. The separate owner is itself held by the Host's ordinary subprocess
+ * Job, so closing/crashing the Host also closes the account process range.
+ */
+export async function spawnAccountTerminal(backend, spec, options = {}) {
+    if ((options.platform ?? process.platform) !== 'win32')
+        return backend.spawnTerminal(spec);
+    spec.signal?.throwIfAborted();
+    const directory = await mkdtemp(join(tmpdir(), 'cwn-account-job-'));
+    const windows = process.env.SystemRoot ?? 'C:\\Windows';
+    let terminal;
+    const owner = await (async () => {
+        try {
+            return backend.spawn({
+                argv: [
+                    join(windows, 'System32/WindowsPowerShell/v1.0/powershell.exe'),
+                    '-NoLogo',
+                    '-NoProfile',
+                    '-NonInteractive',
+                    '-File',
+                    fileURLToPath(new URL('./windows-account-owner.ps1', import.meta.url)),
+                    '-HostProcessId',
+                    String(process.pid),
+                    '-Directory',
+                    directory,
+                ],
+                cwd: spec.cwd,
+                stdio: { stdin: 'ignore', stdout: 'pipe', stderr: 'pipe' },
+                graceMs: 1000,
+            });
+        }
+        catch (error) {
+            await rm(directory, { recursive: true, force: true });
+            throw error;
+        }
+    })();
+    void owner.done.catch(() => undefined);
+    owner.stdout?.resume();
+    owner.stderr?.resume();
+    let cleanup;
+    const exists = async (name) => {
+        try {
+            return (await readFile(join(directory, name), 'utf8')).trim() === name;
+        }
+        catch {
+            return false;
+        }
+    };
+    const terminate = () => (cleanup ??= (async () => {
+        let stage = 'receipt';
+        try {
+            // Cancellation before the handshake must still let the owner adopt the
+            // bootstrap/console, while preventing it from launching the native CLI.
+            await writeFile(join(directory, 'cancel'), 'cancel', { mode: 0o600 });
+            const adoptedUntil = Date.now() + (options.cleanupMs ?? 9000);
+            while (!(await exists('ready'))) {
+                if (Date.now() >= adoptedUntil)
+                    throw new ProcessCleanupUnconfirmedError();
+                await delay(25);
+            }
+            // Dispose ConPTY while the bootstrap is still alive. With the pinned
+            // node-pty provider, killing the Job first bypasses its worker disposal.
+            // Native exit receipts keep the bootstrap alive for this same reason.
+            const disposal = terminal?.terminate().then(() => true, () => false);
+            if (disposal)
+                await Promise.race([disposal, delay(options.terminalExitMs ?? 2500)]);
+            await writeFile(join(directory, 'stop'), 'stop', { mode: 0o600 });
+            const deadline = Date.now() + (options.cleanupMs ?? 9000);
+            while (!(await exists('closed'))) {
+                if (Date.now() >= deadline)
+                    throw new ProcessCleanupUnconfirmedError();
+                await delay(25);
+            }
+            // The receipt follows ActiveProcesses == 0, not just the root's exit.
+            stage = 'terminal';
+            if (disposal && !(await Promise.race([disposal, delay(options.terminalExitMs ?? 2500, false)])))
+                throw new ProcessCleanupUnconfirmedError();
+            stage = 'owner';
+            if (!(await owner.waitForExit()))
+                throw new ProcessCleanupUnconfirmedError();
+            await owner.done;
+            stage = 'directory';
+            await rm(directory, { recursive: true, force: true });
+        }
+        catch {
+            cleanup = undefined;
+            throw Object.assign(new ProcessCleanupUnconfirmedError(), { stage });
+        }
+    })());
+    try {
+        // Compile/validate the fixed owner before allocating any ConPTY resources.
+        const ownerUntil = Date.now() + (options.handshakeMs ?? 15_000);
+        while (!(await exists('owner-ready'))) {
+            spec.signal?.throwIfAborted();
+            if (Date.now() >= ownerUntil)
+                throw new Error('Windows account owner handshake timed out');
+            await Promise.race([
+                delay(25),
+                owner.done.then(() => {
+                    throw new Error('Windows account owner ended');
+                }),
+            ]);
+        }
+        spec.signal?.throwIfAborted();
+        terminal = await backend.spawnTerminal({
+            ...spec,
+            signal: undefined,
+            argv: [
+                join(windows, 'System32/WindowsPowerShell/v1.0/powershell.exe'),
+                '-NoLogo',
+                '-NoProfile',
+                '-NonInteractive',
+                '-File',
+                fileURLToPath(new URL('./windows-account-bootstrap.ps1', import.meta.url)),
+                '-Directory',
+                directory,
+                '-RuntimePath',
+                process.execPath,
+                '-LaunchPath',
+                fileURLToPath(new URL('./windows-account-launch.mjs', import.meta.url)),
+                '-ArgumentsBase64',
+                Buffer.from(JSON.stringify(spec.argv), 'utf8').toString('base64'),
+            ],
+            env: { ...spec.env, ELECTRON_RUN_AS_NODE: '1' },
+        });
+        void terminal.done.catch(() => undefined);
+        const until = Date.now() + (options.handshakeMs ?? 15_000);
+        while (!(await exists('ready'))) {
+            spec.signal?.throwIfAborted();
+            if (Date.now() >= until)
+                throw new Error('Windows account terminal handshake timed out');
+            await Promise.race([
+                delay(25),
+                owner.done.then(() => {
+                    throw new Error('Windows account owner ended');
+                }),
+            ]);
+        }
+        const current = terminal;
+        const done = (async () => {
+            for (;;) {
+                try {
+                    const receipt = JSON.parse(await readFile(join(directory, 'exit'), 'utf8'));
+                    if (Number.isInteger(receipt.exitCode))
+                        return { exitCode: receipt.exitCode, signal: null };
+                }
+                catch {
+                    /* An interrupted bootstrap retains the SDK outcome. */
+                }
+                const outcome = await Promise.race([current.done, delay(50, undefined)]);
+                if (outcome)
+                    return outcome;
+            }
+        })();
+        void done.catch(() => undefined);
+        return {
+            pid: Number(await readFile(join(directory, 'pid'), 'utf8')),
+            output: current.output,
+            done,
+            write: (data) => current.write(data),
+            resize: (cols, rows) => current.resize(cols, rows),
+            inspectForeground: () => current.inspectForeground(),
+            inspectActivity: () => current.inspectActivity(),
+            signalForeground: (signal) => current.signalForeground(signal),
+            terminate,
+        };
+    }
+    catch (error) {
+        if (terminal) {
+            // A cancellation can precede ready: the bootstrap keeps waiting until
+            // the owner adopts its console/Job, then observes stop without running
+            // the CLI. Require the same empty-range receipt as a normal close.
+            try {
+                await terminate();
+            }
+            catch (failure) {
+                owner.terminate();
+                await terminal.terminate().catch(() => undefined);
+                throw failure;
+            }
+        }
+        else {
+            // No terminal was allocated; only the ordinary managed owner exists.
+            await writeFile(join(directory, 'stop'), 'stop', { mode: 0o600 });
+            owner.terminate();
+            if (!(await owner.waitForExit()))
+                throw new ProcessCleanupUnconfirmedError();
+            await rm(directory, { recursive: true, force: true });
+        }
+        if (spec.signal?.aborted)
+            throw error;
+        throw new WindowsAccountTerminalError();
+    }
+}
+//# sourceMappingURL=windows-account-terminal.js.map

package/lib/types/host/windows-account-terminal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-account-terminal.js","sourceRoot":"","sources":["../../../src/host/windows-account-terminal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAA;AACnE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAA;AACxC,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAA;AAE1D,OAAO,EAAE,8BAA8B,EAAuB,MAAM,cAAc,CAAA;AAElF,0EAA0E;AAC1E,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD;QACE,KAAK,CAAC,sCAAsC,CAAC,CAAA;IAC/C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAuB,EACvB,IAAiC,EACjC,UAKI,EAAE;IAEN,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,OAAO;QAAE,OAAO,OAAO,CAAC,aAAc,CAAC,IAAI,CAAC,CAAA;IAC3F,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;IAC7B,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAA;IACnE,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,aAAa,CAAA;IACvD,IAAI,QAA8C,CAAA;IAClD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,OAAO,CAAC,KAAK,CAAC;gBACnB,IAAI,EAAE;oBACJ,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC;oBAC/D,SAAS;oBACT,YAAY;oBACZ,iBAAiB;oBACjB,OAAO;oBACP,aAAa,CAAC,IAAI,GAAG,CAAC,6BAA6B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;oBACtE,gBAAgB;oBAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC;oBACnB,YAAY;oBACZ,SAAS;iBACV;gBACD,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,KAAK,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;gBAC1D,OAAO,EAAE,IAAI;aACd,CAAC,CAAA;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YACrD,MAAM,KAAK,CAAA;QACb,CAAC;IACH,CAAC,CAAC,EAAE,CAAA;IACJ,KAAK,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;IACtC,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;IACtB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,CAAA;IACtB,IAAI,OAAkC,CAAA;IACtC,MAAM,MAAM,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;QACpC,IAAI,CAAC;YACH,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,IAAI,CAAA;QACxE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAA;QACd,CAAC;IACH,CAAC,CAAA;IACD,MAAM,SAAS,GAAG,GAAkB,EAAE,CACpC,CAAC,OAAO,KAAK,CAAC,KAAK,IAAI,EAAE;QACvB,IAAI,KAAK,GAAG,SAAS,CAAA;QACrB,IAAI,CAAC;YACH,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACrE,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;YAC7D,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;gBAChC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,YAAY;oBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;gBAC1E,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;YACjB,CAAC;YACD,qEAAqE;YACrE,yEAAyE;YACzE,sEAAsE;YACtE,MAAM,QAAQ,GAAG,QAAQ,EAAE,SAAS,EAAE,CAAC,IAAI,CACzC,GAAG,EAAE,CAAC,IAAI,EACV,GAAG,EAAE,CAAC,KAAK,CACZ,CAAA;YACD,IAAI,QAAQ;gBAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,CAAC,CAAC,CAAC,CAAA;YACnF,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,CAAA;YACzD,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;gBACjC,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;oBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;gBACtE,MAAM,KAAK,CAAC,EAAE,CAAC,CAAA;YACjB,CAAC;YACD,sEAAsE;YACtE,KAAK,GAAG,UAAU,CAAA;YAClB,IAAI,QAAQ,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,cAAc,IAAI,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;gBAC7F,MAAM,IAAI,8BAA8B,EAAE,CAAA;YAC5C,KAAK,GAAG,OAAO,CAAA;YACf,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;YAC5E,MAAM,KAAK,CAAC,IAAI,CAAA;YAChB,KAAK,GAAG,WAAW,CAAA;YACnB,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,GAAG,SAAS,CAAA;YACnB,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,8BAA8B,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;QACtE,CAAC;IACH,CAAC,CAAC,EAAE,CAAC,CAAA;IACP,IAAI,CAAC;QACH,2EAA2E;QAC3E,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,CAAA;QAC/D,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAA;YAC1F,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,CAAC,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;gBAChD,CAAC,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;QAC7B,QAAQ,GAAG,MAAM,OAAO,CAAC,aAAc,CAAC;YACtC,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE;gBACJ,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC;gBAC/D,SAAS;gBACT,YAAY;gBACZ,iBAAiB;gBACjB,OAAO;gBACP,aAAa,CAAC,IAAI,GAAG,CAAC,iCAAiC,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAC1E,YAAY;gBACZ,SAAS;gBACT,cAAc;gBACd,OAAO,CAAC,QAAQ;gBAChB,aAAa;gBACb,aAAa,CAAC,IAAI,GAAG,CAAC,8BAA8B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBACvE,kBAAkB;gBAClB,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;aAClE;YACD,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,oBAAoB,EAAE,GAAG,EAAE;SAChD,CAAC,CAAA;QACF,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,CAAA;QAC1D,OAAO,CAAC,CAAC,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YAChC,IAAI,CAAC,MAAM,EAAE,cAAc,EAAE,CAAA;YAC7B,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,KAAK;gBAAE,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAA;YACxF,MAAM,OAAO,CAAC,IAAI,CAAC;gBACjB,KAAK,CAAC,EAAE,CAAC;gBACT,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;oBACnB,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;gBAChD,CAAC,CAAC;aACH,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAA;QACxB,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,EAAE;YACvB,SAAS,CAAC;gBACR,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;oBAC3E,IAAI,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC;wBAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,CAAA;gBAC7F,CAAC;gBAAC,MAAM,CAAC;oBACP,uDAAuD;gBACzD,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAA;gBACxE,IAAI,OAAO;oBAAE,OAAO,OAAO,CAAA;YAC7B,CAAC;QACH,CAAC,CAAC,EAAE,CAAA;QACJ,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAChC,OAAO;YACL,GAAG,EAAE,MAAM,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,CAAC;YAC3D,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,IAAI;YACJ,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;YACpC,MAAM,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC;YAClD,iBAAiB,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,EAAE;YACpD,eAAe,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,EAAE;YAChD,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,gBAAgB,CAAC,MAAM,CAAC;YAC9D,SAAS;SACV,CAAA;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,EAAE,CAAC;YACb,sEAAsE;YACtE,uEAAuE;YACvE,mEAAmE;YACnE,IAAI,CAAC;gBACH,MAAM,SAAS,EAAE,CAAA;YACnB,CAAC;YAAC,OAAO,OAAO,EAAE,CAAC;gBACjB,KAAK,CAAC,SAAS,EAAE,CAAA;gBACjB,MAAM,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACjD,MAAM,OAAO,CAAA;YACf,CAAC;QACH,CAAC;aAAM,CAAC;YACN,qEAAqE;YACrE,MAAM,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;YACjE,KAAK,CAAC,SAAS,EAAE,CAAA;YACjB,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,WAAW,EAAE,CAAC;gBAAE,MAAM,IAAI,8BAA8B,EAAE,CAAA;YAC5E,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;YAAE,MAAM,KAAK,CAAA;QACrC,MAAM,IAAI,2BAA2B,EAAE,CAAA;IACzC,CAAC;AACH,CAAC"}

package/lib/types/host/windows-agy-account.ps1

@@ -0,0 +1,81 @@
+# Read only Antigravity's own native Windows credential. Never emit its blob.
+$ErrorActionPreference = 'Stop'
+[Console]::OutputEncoding = [System.Text.UTF8Encoding]::new($false)
+try {
+  Add-Type @'
+using System;
+using System.Runtime.InteropServices;
+using System.Text;
+public static class CwnAgyCredential {
+  [StructLayout(LayoutKind.Sequential, CharSet=CharSet.Unicode)] struct Credential {
+    public uint Flags, Type;
+    public string TargetName, Comment;
+    public System.Runtime.InteropServices.ComTypes.FILETIME LastWritten;
+    public uint CredentialBlobSize;
+    public IntPtr CredentialBlob;
+    public uint Persist, AttributeCount;
+    public IntPtr Attributes;
+    public string TargetAlias, UserName;
+  }
+  [DllImport("advapi32.dll", CharSet=CharSet.Unicode, SetLastError=true)]
+  static extern bool CredRead(string target, uint type, uint flags, out IntPtr value);
+  [DllImport("advapi32.dll")] static extern void CredFree(IntPtr value);
+  public static string Read() {
+    IntPtr value;
+    if (!CredRead("gemini:antigravity", 1, 0, out value)) {
+      if (Marshal.GetLastWin32Error() == 1168) return null;
+      throw new Exception("Credential store unavailable");
+    }
+    byte[] bytes = null;
+    try {
+      var credential = (Credential)Marshal.PtrToStructure(value, typeof(Credential));
+      if (credential.CredentialBlobSize > 65536) throw new Exception("Invalid credential");
+      bytes = new byte[credential.CredentialBlobSize];
+      Marshal.Copy(credential.CredentialBlob, bytes, 0, bytes.Length);
+      return bytes.Length > 1 && bytes[1] == 0
+        ? new UnicodeEncoding(false, false, true).GetString(bytes)
+        : new UTF8Encoding(false, true).GetString(bytes);
+    } finally {
+      if (bytes != null) Array.Clear(bytes, 0, bytes.Length);
+      CredFree(value);
+    }
+  }
+}
+'@
+  $raw = [CwnAgyCredential]::Read()
+  if ($null -eq $raw) { @{ state = 'unconfigured' } | ConvertTo-Json -Compress; exit 0 }
+  $account = $raw | ConvertFrom-Json
+  $raw = $null
+  if ($account.auth_method -ne 'consumer' -or -not $account.token) {
+    @{ state = 'unknown' } | ConvertTo-Json -Compress; exit 0
+  }
+  $active = $false
+  if ($account.token.access_token -is [string] -and $account.token.access_token.Trim()) {
+    try { $active = [DateTimeOffset]::Parse($account.token.expiry) -gt [DateTimeOffset]::UtcNow } catch {}
+  }
+  $refreshable = $account.token.refresh_token -is [string] -and $account.token.refresh_token.Trim().Length -gt 0
+  if (-not $active -and -not $refreshable) {
+    @{ state = 'unauthenticated' } | ConvertTo-Json -Compress; exit 0
+  }
+  $result = @{ state = 'authenticated' }
+  if ($account.id_token -is [string] -and $account.id_token.Length -le 32768 -and $account.id_token -match '^[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+$') {
+    $encoded = $account.id_token.Split('.')[1].Replace('-','+').Replace('_','/')
+    $encoded = $encoded.PadRight($encoded.Length + ((4 - $encoded.Length % 4) % 4), '=')
+    $bytes = [Convert]::FromBase64String($encoded)
+    try { $claims = [Text.Encoding]::UTF8.GetString($bytes) | ConvertFrom-Json }
+    finally { [Array]::Clear($bytes, 0, $bytes.Length) }
+    if ($claims.iss -in @('accounts.google.com', 'https://accounts.google.com') -and $claims.sub -is [string] -and $claims.sub -match '^[A-Za-z0-9_-]{6,128}$') {
+      $hash = [Security.Cryptography.SHA256]::Create()
+      $principal = [Text.Encoding]::UTF8.GetBytes('google:' + $claims.sub)
+      try { $result.principalHash = ([BitConverter]::ToString($hash.ComputeHash($principal))).Replace('-','').ToLowerInvariant() }
+      finally { [Array]::Clear($principal, 0, $principal.Length); $hash.Dispose() }
+      if ($claims.email -is [string] -and $claims.email.Length -le 254 -and $claims.email -match '^[^\s<>@]+@[^\s<>@]+\.[^\s<>@]+$') { $result.email = $claims.email }
+    }
+  }
+  $account = $null; $claims = $null
+  $result | ConvertTo-Json -Compress
+} catch {
+  # Neither exception strings nor credential fragments cross the process boundary.
+  @{ state = 'unavailable' } | ConvertTo-Json -Compress
+  exit 1
+}

package/lib/types/host/windows-cli-installation.d.ts

@@ -0,0 +1,31 @@
+export declare class WindowsCliInstallationError extends Error {
+    readonly installed: boolean;
+    readonly code = "CLI_INSTALLATION_UNAVAILABLE";
+    constructor(message: string, installed?: boolean);
+}
+type WindowsEnvironment = {
+    home?: string;
+    env?: NodeJS.ProcessEnv;
+};
+/** Fixed installer locations only; never scan arbitrary drives or select a venv by recency. */
+export declare function windowsCliCandidates(cli: 'codex' | 'hermes', options?: WindowsEnvironment): string[];
+/** A residue is not a runnable installation and is not evidence of an account. */
+export declare function hasWindowsHermesInstallDirectory(options?: WindowsEnvironment): boolean;
+/** Validate an automatically discovered npm shim against Codex's own package, not just its name. */
+export declare function validateWindowsCodexNpmEntry(path: string): string;
+export declare function presentWindowsCliCandidate(cli: 'codex' | 'hermes', options?: WindowsEnvironment): string | undefined;
+/** Query current-user registered packages, never guess the newest WindowsApps directory. */
+export declare const CODEX_APPX_QUERY = "$ErrorActionPreference='Stop'; [Console]::OutputEncoding=[Text.UTF8Encoding]::new($false); $p=@(Get-AppxPackage -Name 'OpenAI.Codex'); if($p.Count -eq 0){'null';exit 0}; if($p.Count -ne 1){throw 'Ambiguous Codex package'}; $v=$p[0]; [ordered]@{name=$v.Name;family=$v.PackageFamilyName;fullName=$v.PackageFullName;publisher=$v.Publisher;signature=[string]$v.SignatureKind;status=[string]$v.Status;location=$v.InstallLocation}|ConvertTo-Json -Compress";
+export interface CodexAppxRecord {
+    name: string;
+    family: string;
+    fullName: string;
+    publisher: string;
+    signature: string;
+    status: string;
+    location: string;
+}
+/** Exported separately for synthetic identity/relocation tests; no process or account access. */
+export declare function codexAppxExecutable(raw: string, validateFile?: (path: string) => string): string | undefined;
+export declare function findWindowsCodexAppx(capture: (argv: string[], cwd: string) => Promise<string>, signal: AbortSignal, env?: NodeJS.ProcessEnv): Promise<string | undefined>;
+export {};

package/lib/types/host/windows-cli-installation.js

@@ -0,0 +1,157 @@
+import { closeSync, existsSync, fstatSync, lstatSync, openSync, readFileSync, readSync, realpathSync, statSync, } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, isAbsolute, join, resolve, win32 } from 'node:path';
+import { resolveNativeEntry } from './native-launch.mjs';
+export class WindowsCliInstallationError extends Error {
+    installed;
+    code = 'CLI_INSTALLATION_UNAVAILABLE';
+    constructor(message, installed = false) {
+        super(message);
+        this.installed = installed;
+        this.name = 'WindowsCliInstallationError';
+    }
+}
+const unavailableCodex = () => new WindowsCliInstallationError('Codex Windows 应用包入口无法确认，请检查安装', true);
+function directory(env, name, fallback) {
+    const value = env[name]?.trim() || fallback;
+    if (!isAbsolute(value))
+        throw new WindowsCliInstallationError('Windows CLI 安装目录配置无效');
+    return value;
+}
+/** Fixed installer locations only; never scan arbitrary drives or select a venv by recency. */
+export function windowsCliCandidates(cli, options = {}) {
+    const env = options.env ?? process.env, home = options.home ?? homedir();
+    if (cli === 'codex') {
+        const npm = join(directory(env, 'APPDATA', join(home, 'AppData', 'Roaming')), 'npm');
+        return [join(npm, 'codex.cmd')];
+    }
+    const root = join(directory(env, 'LOCALAPPDATA', join(home, 'AppData', 'Local')), 'hermes');
+    return [
+        join(root, 'bin', 'hermes.exe'),
+        join(root, 'bin', 'hermes.cmd'),
+        join(root, 'hermes-agent', 'venv', 'Scripts', 'hermes.exe'),
+    ];
+}
+/** A residue is not a runnable installation and is not evidence of an account. */
+export function hasWindowsHermesInstallDirectory(options = {}) {
+    const env = options.env ?? process.env, home = options.home ?? homedir();
+    return existsSync(join(directory(env, 'LOCALAPPDATA', join(home, 'AppData', 'Local')), 'hermes'));
+}
+function nativePe(path) {
+    const canonical = realpathSync(path), fd = openSync(canonical, 'r');
+    try {
+        const info = fstatSync(fd), head = Buffer.alloc(64), signature = Buffer.alloc(4);
+        if (!info.isFile() || readSync(fd, head, 0, 64, 0) !== 64 || head.toString('ascii', 0, 2) !== 'MZ')
+            throw new Error('Not a native PE file');
+        const offset = head.readUInt32LE(0x3c);
+        if (offset < 64 ||
+            offset + 4 > info.size ||
+            readSync(fd, signature, 0, 4, offset) !== 4 ||
+            signature.toString('hex') !== '50450000')
+            throw new Error('Invalid PE signature');
+        return canonical;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Validate an automatically discovered npm shim against Codex's own package, not just its name. */
+export function validateWindowsCodexNpmEntry(path) {
+    try {
+        const root = join(dirname(path), 'node_modules', '@openai', 'codex');
+        const manifestPath = join(root, 'package.json');
+        if (statSync(manifestPath).size > 128 * 1024)
+            throw new Error('Oversized package metadata');
+        const data = JSON.parse(readFileSync(manifestPath, 'utf8'));
+        const bin = typeof data.bin === 'string' ? data.bin : data.bin?.codex;
+        if (data.name !== '@openai/codex' ||
+            typeof bin !== 'string' ||
+            isAbsolute(bin) ||
+            bin.split(/[\\/]/).includes('..'))
+            throw new Error('Mismatched package identity');
+        const entry = resolveNativeEntry(path, 'win32');
+        if (realpathSync(entry) !== realpathSync(resolve(root, bin)))
+            throw new Error('Mismatched package entry');
+        return path;
+    }
+    catch {
+        throw new WindowsCliInstallationError('Codex npm 安装入口无法确认，请检查安装', true);
+    }
+}
+export function presentWindowsCliCandidate(cli, options = {}) {
+    for (const path of windowsCliCandidates(cli, options)) {
+        try {
+            lstatSync(path);
+        }
+        catch (error) {
+            if (['ENOENT', 'ENOTDIR'].includes(error.code ?? ''))
+                continue;
+            throw new WindowsCliInstallationError('Windows CLI 安装入口无法读取，请检查安装', true);
+        }
+        if (cli === 'codex')
+            return validateWindowsCodexNpmEntry(path);
+        try {
+            const entry = resolveNativeEntry(path, 'win32');
+            if (/\.exe$/i.test(entry))
+                nativePe(entry);
+            else if (entry !== path || !/\.cmd$/i.test(entry))
+                throw new Error('Unsupported Hermes entry');
+            // Fixed Python cmd launchers are statically checked by resolveNativeEntry;
+            // the existing Hermes verifier preserves the installer's own interpreter.
+            return path;
+        }
+        catch {
+            throw new WindowsCliInstallationError('Hermes Windows 安装入口无法确认，请检查安装', true);
+        }
+    }
+    return undefined;
+}
+const codexFamily = 'OpenAI.Codex_2p2nqsd0c76g0';
+const codexPublisher = 'CN=50BDFD77-8903-4850-9FFE-6E8522F64D5B';
+/** Query current-user registered packages, never guess the newest WindowsApps directory. */
+export const CODEX_APPX_QUERY = `$ErrorActionPreference='Stop'; [Console]::OutputEncoding=[Text.UTF8Encoding]::new($false); $p=@(Get-AppxPackage -Name 'OpenAI.Codex'); if($p.Count -eq 0){'null';exit 0}; if($p.Count -ne 1){throw 'Ambiguous Codex package'}; $v=$p[0]; [ordered]@{name=$v.Name;family=$v.PackageFamilyName;fullName=$v.PackageFullName;publisher=$v.Publisher;signature=[string]$v.SignatureKind;status=[string]$v.Status;location=$v.InstallLocation}|ConvertTo-Json -Compress`;
+/** Exported separately for synthetic identity/relocation tests; no process or account access. */
+export function codexAppxExecutable(raw, validateFile = nativePe) {
+    try {
+        const value = JSON.parse(raw.trim());
+        if (value === null)
+            return undefined;
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            throw new Error('Invalid package record');
+        const p = value;
+        if (p.name !== 'OpenAI.Codex' ||
+            p.family !== codexFamily ||
+            p.publisher !== codexPublisher ||
+            p.signature !== 'Store' ||
+            p.status !== 'Ok' ||
+            typeof p.fullName !== 'string' ||
+            !/^OpenAI\.Codex_\d+(?:\.\d+){3}_(?:x64|arm64|x86)__2p2nqsd0c76g0$/.test(p.fullName) ||
+            typeof p.location !== 'string' ||
+            !win32.isAbsolute(p.location) ||
+            p.location.includes('\0') ||
+            p.location.startsWith('\\\\') ||
+            win32.basename(p.location).toLowerCase() !== p.fullName.toLowerCase())
+            throw new Error('Unverified package identity');
+        const candidate = win32.join(p.location, 'app', 'resources', 'codex.exe');
+        const canonical = validateFile(candidate);
+        // A registered package's CLI must stay in that package; never follow a swapped link elsewhere.
+        if (win32.normalize(canonical).toLowerCase() !== win32.normalize(candidate).toLowerCase())
+            throw new Error('Redirected package entry');
+        return canonical;
+    }
+    catch {
+        throw unavailableCodex();
+    }
+}
+export async function findWindowsCodexAppx(capture, signal, env = process.env) {
+    signal.throwIfAborted();
+    const windows = env.SystemRoot || env.WINDIR || 'C:\\Windows';
+    if (!win32.isAbsolute(windows))
+        throw new WindowsCliInstallationError('Windows 系统目录配置无效');
+    const command = win32.join(windows, 'System32', 'WindowsPowerShell', 'v1.0', 'powershell.exe');
+    const encoded = Buffer.from(CODEX_APPX_QUERY, 'utf16le').toString('base64');
+    const raw = await capture([command, '-NoLogo', '-NoProfile', '-NonInteractive', '-EncodedCommand', encoded], homedir());
+    signal.throwIfAborted();
+    return codexAppxExecutable(raw);
+}
+//# sourceMappingURL=windows-cli-installation.js.map

package/lib/types/host/windows-cli-installation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"windows-cli-installation.js","sourceRoot":"","sources":["../../../src/host/windows-cli-installation.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,UAAU,EACV,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,QAAQ,EACR,YAAY,EACZ,QAAQ,GACT,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAA;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAExD,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IAIzC;IAHF,IAAI,GAAG,8BAA8B,CAAA;IAC9C,YACE,OAAe,EACN,YAAY,KAAK;QAE1B,KAAK,CAAC,OAAO,CAAC,CAAA;QAFL,cAAS,GAAT,SAAS,CAAQ;QAG1B,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAA;IAC3C,CAAC;CACF;AAGD,MAAM,gBAAgB,GAAG,GAAG,EAAE,CAC5B,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;AAExE,SAAS,SAAS,CAAC,GAAsB,EAAE,IAAY,EAAE,QAAgB;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,QAAQ,CAAA;IAC3C,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,2BAA2B,CAAC,sBAAsB,CAAC,CAAA;IACrF,OAAO,KAAK,CAAA;AACd,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,oBAAoB,CAAC,GAAuB,EAAE,UAA8B,EAAE;IAC5F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACpF,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAA;IACjC,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAA;IAC3F,OAAO;QACL,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,CAAC;KAC5D,CAAA;AACH,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,gCAAgC,CAAC,UAA8B,EAAE;IAC/E,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EACpC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,OAAO,EAAE,CAAA;IAClC,OAAO,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAA;AACnG,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,SAAS,GAAG,YAAY,CAAC,IAAI,CAAC,EAClC,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,CAAA;IAC/B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,EACxB,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,EACvB,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI;YAChG,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAA;QACtC,IACE,MAAM,GAAG,EAAE;YACX,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI;YACtB,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;YAC3C,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,UAAU;YAExC,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,OAAO,SAAS,CAAA;IAClB,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,EAAE,CAAC,CAAA;IACf,CAAC;AACH,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,4BAA4B,CAAC,IAAY;IACvD,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,cAAc,EAAE,SAAS,EAAE,OAAO,CAAC,CAAA;QACpE,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAA;QAC/C,IAAI,QAAQ,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,GAAG,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAA;QAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAA;QAC3D,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAA;QACrE,IACE,IAAI,CAAC,IAAI,KAAK,eAAe;YAC7B,OAAO,GAAG,KAAK,QAAQ;YACvB,UAAU,CAAC,GAAG,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAEjC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;QAC/C,IAAI,YAAY,CAAC,KAAK,CAAC,KAAK,YAAY,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QACzG,OAAO,IAAI,CAAA;IACb,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,2BAA2B,CAAC,0BAA0B,EAAE,IAAI,CAAC,CAAA;IACzE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,GAAuB,EACvB,UAA8B,EAAE;IAEhC,KAAK,MAAM,IAAI,IAAI,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,CAAC;QACtD,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,CAAA;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAE,KAA+B,CAAC,IAAI,IAAI,EAAE,CAAC;gBAAE,SAAQ;YACzF,MAAM,IAAI,2BAA2B,CAAC,4BAA4B,EAAE,IAAI,CAAC,CAAA;QAC3E,CAAC;QACD,IAAI,GAAG,KAAK,OAAO;YAAE,OAAO,4BAA4B,CAAC,IAAI,CAAC,CAAA;QAC9D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YAC/C,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,QAAQ,CAAC,KAAK,CAAC,CAAA;iBACrC,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;YAC9F,2EAA2E;YAC3E,0EAA0E;YAC1E,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,2BAA2B,CAAC,+BAA+B,EAAE,IAAI,CAAC,CAAA;QAC9E,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,MAAM,WAAW,GAAG,4BAA4B,CAAA;AAChD,MAAM,cAAc,GAAG,yCAAyC,CAAA;AAEhE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,gBAAgB,GAAG,mcAAmc,CAAA;AAYne,iGAAiG;AACjG,MAAM,UAAU,mBAAmB,CACjC,GAAW,EACX,eAAyC,QAAQ;IAEjD,IAAI,CAAC;QACH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;QAC7C,IAAI,KAAK,KAAK,IAAI;YAAE,OAAO,SAAS,CAAA;QACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAA;QAC1G,MAAM,CAAC,GAAG,KAAwB,CAAA;QAClC,IACE,CAAC,CAAC,IAAI,KAAK,cAAc;YACzB,CAAC,CAAC,MAAM,KAAK,WAAW;YACxB,CAAC,CAAC,SAAS,KAAK,cAAc;YAC9B,CAAC,CAAC,SAAS,KAAK,OAAO;YACvB,CAAC,CAAC,MAAM,KAAK,IAAI;YACjB,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAC,kEAAkE,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC;YACpF,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ;YAC9B,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC7B,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC;YACzB,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAC7B,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE;YAErE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;QAChD,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,CAAC,CAAA;QACzE,MAAM,SAAS,GAAG,YAAY,CAAC,SAAS,CAAC,CAAA;QACzC,+FAA+F;QAC/F,IAAI,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE;YACvF,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;QAC7C,OAAO,SAAS,CAAA;IAClB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,gBAAgB,EAAE,CAAA;IAC1B,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,OAAyD,EACzD,MAAmB,EACnB,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,MAAM,IAAI,aAAa,CAAA;IAC7D,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,2BAA2B,CAAC,kBAAkB,CAAC,CAAA;IACzF,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,EAAE,gBAAgB,CAAC,CAAA;IAC9F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAA;IAC3E,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,OAAO,CAAC,EACjF,OAAO,EAAE,CACV,CAAA;IACD,MAAM,CAAC,cAAc,EAAE,CAAA;IACvB,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAA;AACjC,CAAC"}

package/lib/types/host/windows-hidden-launch.mjs

@@ -0,0 +1,49 @@
+// A GUI-subsystem Electron root avoids Windows Terminal's console delegation.
+// The enclosing Harness Job still owns this root and every native descendant.
+import { Socket } from 'node:net'
+import { forwardNativeStdio, spawnNativeProcess } from './native-spawn.mjs'
+
+// Pinned Harness 0.2.0-rc.2 public control contract. This helper must remain
+// self-contained: an ordinary child does not use the Host's SDK module loader.
+const marker = process.env.DSH_SUBPROCESS_CONTROL
+delete process.env.DSH_SUBPROCESS_CONTROL
+if (marker !== 'pipe') throw new Error('Windows background control channel is unavailable')
+const control = new Socket({ fd: 7, readable: true, writable: true, allowHalfOpen: true })
+let child, sent = false
+function receipt(value) {
+  if (sent) return
+  sent = true
+  control.end(JSON.stringify(value) + '\n', () => control.destroy())
+}
+control.on('error', () => {
+  child?.kill('SIGTERM')
+  process.exitCode = 1
+})
+try {
+  const [encoded, executable, ...argv] = process.argv.slice(2)
+  const restore = JSON.parse(encoded)
+  if (!restore || !Object.hasOwn(restore, 'nodeEnv') ||
+      (restore.nodeEnv !== null && typeof restore.nodeEnv !== 'string') || !executable)
+    throw new Error('Invalid fixed bootstrap arguments')
+  if (restore.privateUmask === true) process.umask(0o077)
+  // ELECTRON_RUN_AS_NODE belongs only to this GUI bootstrap. Preserve the
+  // original target environment, including an explicit deletion of that value.
+  const env = { ...process.env }
+  for (const key of Object.keys(env))
+    if (key.toUpperCase() === 'ELECTRON_RUN_AS_NODE') delete env[key]
+  if (restore.nodeEnv !== null) env.ELECTRON_RUN_AS_NODE = restore.nodeEnv
+  child = spawnNativeProcess(executable, argv, { env, stdio: ['pipe', 'pipe', 'pipe'], detached: false })
+  forwardNativeStdio(child)
+  child.once('error', error => receipt({
+    kind: 'spawn-error',
+    code: ['ENOENT', 'EACCES', 'ENOEXEC', 'EINVAL'].includes(error.code) ? error.code : 'UNKNOWN',
+  }))
+  // A descendant may keep these pipes open after the native parent exits.
+  // Report its actual exit now; keep forwarding bytes until the pipes close.
+  // The Host's original Job remains responsible for the entire process range.
+  child.once('exit', (exitCode, signal) => receipt({ kind: 'exit', exitCode, signal }))
+  for (const signal of ['SIGTERM', 'SIGINT'])
+    process.on(signal, () => child.kill(signal))
+} catch {
+  receipt({ kind: 'spawn-error', code: 'UNKNOWN' })
+}

package/lib/types/host/windows-hidden-process.d.ts

@@ -0,0 +1,12 @@
+import type { SubprocessHandle, SubprocessSpawnSpec } from '@deepseek-ai/dsh-subprocess';
+import type { ProcessBackend } from './process.ts';
+export declare const isCurrentWindowsRuntime: (value: string) => boolean;
+/** Only console-subsystem targets need a GUI bootstrap. Existing Node helpers
+ * already use Electron's GUI executable; terminal allocation stays untouched. */
+export declare function needsWindowsHiddenLaunch(argv: readonly string[], platform: NodeJS.Platform, electron: boolean): boolean;
+/** Window presentation only: all byte streams, collection and process-range
+ * ownership remain the SDK's. Native exit facts travel over a private channel,
+ * never stdout/stderr and never the native CLI's credential/session protocol. */
+export declare function spawnWindowsHidden(backend: ProcessBackend, spec: SubprocessSpawnSpec, options?: {
+    privateUmask?: true;
+}): SubprocessHandle;