kenaz 0.3.2 → 0.3.5

package/core/plugins/kenaz/hooks/hooks.json

@@ -12,10 +12,7 @@
     ],
     "PostToolUse": [
       { "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" }] },
-      { "matcher": "TaskCreate|TaskUpdate", "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" task-bridge" }] },
-      { "matcher": "Bash", "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" snapshot-commit" }] },
-      { "matcher": "AskUserQuestion", "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" snapshot-question" }] },
-      { "matcher": "mcp__kenaz-dashboard__synapse_inscribe", "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" snapshot-decision" }] }
+      { "matcher": "TaskCreate|TaskUpdate", "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" task-bridge" }] }
     ],
     "PostToolUseFailure": [{ "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" }] }],
     "Notification": [{ "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" }] }],
@@ -24,7 +21,6 @@
     "SessionEnd": [{ "hooks": [{ "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" }] }],
     "Stop": [{ "hooks": [
       { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" flow-post" },
-      { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" lease-release" },
       { "type": "command", "command": "node \"${CLAUDE_PLUGIN_ROOT}/hooks/kenaz-hook.js\" session-stop" }
     ] }]
   }

package/core/plugins/kenaz/hooks/kenaz-hook.js

@@ -27,14 +27,10 @@ const HOOKS = {
   'session-start':  { kind: 'session-start', minMode: 'assist', backend: true },
   'guidance':       { kind: 'guidance', minMode: 'full' },
   'prompt-runner':  { kind: 'script', file: '_run-user-prompt.js', minMode: 'full' },
-  'lease-release':  { kind: 'script', file: 'lease-release.js', minMode: 'full' },
   'session-stop':   { kind: 'core-script', rel: '.specialist/tools/session.js', args: ['stop'], minMode: 'full' },
   'synapse-first':  { kind: 'script', file: 'synapse-first-investigation.js', minMode: 'full' },
   'memory-guard':   { kind: 'script', file: 'memory-guard.js', call: 'main', minMode: 'full' },
   'task-bridge':    { kind: 'script', file: 'task-bridge.js', minMode: 'assist' },
-  'snapshot-commit':   { kind: 'script', file: 'handoff-snapshot-on-commit.js', minMode: 'assist' },
-  'snapshot-question': { kind: 'script', file: 'handoff-snapshot-on-question.js', minMode: 'assist' },
-  'snapshot-decision': { kind: 'script', file: 'handoff-snapshot-on-decision.js', minMode: 'assist' },
 };
 
 function readStdin() {

package/core/plugins/kenaz/scripts/kenaz-mode.js

@@ -26,7 +26,17 @@ if (MODES.includes(arg)) {
   // TASK_2367: first-run guide. Optional steps are offered, never forced; the user (or the
   // assistant relaying this output) runs them. Backend probe tells whether they can work now.
   const port = process.env.KENAZ_HTTP_PORT || process.env.KENAZ_BACKEND_PORT || '18080';
-  fetch('http://127.0.0.1:' + port + '/api/health', { signal: AbortSignal.timeout(2000) })
+  // TASK_2395: register the project in ~/.kenaz/projects.json (idempotent, written by the server's
+  // single registry writer) so peer routing by to_project finds it. Server down = skipped; the
+  // first turn of a session retries.
+  const registered = fetch('http://127.0.0.1:' + port + '/api/projects/register', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json' },
+    body: JSON.stringify({ projectPath: dir }),
+    signal: AbortSignal.timeout(2000),
+  }).then((r) => r.json(), () => null).then((j) => !!(j && j.success), () => false);
+  registered
+    .then(() => fetch('http://127.0.0.1:' + port + '/api/health', { signal: AbortSignal.timeout(2000) }))
     .then((r) => r.ok, () => false)
     .then((up) => {
       // Codex runs shell commands in a sandbox without network (it sets CODEX_SANDBOX_NETWORK_DISABLED=1),

package/core/plugins/kenaz/scripts/kenaz.test.js

@@ -27,7 +27,7 @@ test('full prints guidance (control for off)', () => {
 
 test('off: zero output from every hook, exit 0', () => {
   const dir = proj();
-  for (const n of ['guidance', 'prompt-runner', 'memory-guard', 'synapse-first', 'flow-post', 'session-start', 'lease-release']) {
+  for (const n of ['guidance', 'prompt-runner', 'memory-guard', 'synapse-first', 'flow-post', 'session-start']) {
     const r = hook(n, dir, { KENAZ_MODE: 'off' });
     assert.strictEqual(r.status, 0, n);
     assert.strictEqual(r.stdout + r.stderr, '', n);

package/core/plugins/kenaz/scripts/sync.js

@@ -19,11 +19,15 @@ const SKILLS = [
 const COMMANDS = ['Amelia', 'Ansuz', 'architect', 'incident', 'review', 'security', 'spec', 'strategy', '產品', '設計', '評估'];
 
 // Core-relative references become plugin-relative / core-resolved.
+// In a user's project (npm install) the core lives in ~/.kenaz/core, not the project folder, so a
+// command's `node .specialist/...` / `.formation/...` / `.collaboration/...` runs through core-resolve,
+// and a core doc it tells the model to read gets a path under the plugin's core (plugin root/../..).
 function rewrite(text) {
   return text
     .replace(/\.claude\/skills\//g, '${CLAUDE_PLUGIN_ROOT}/skills/')
-    .replace(/node \.specialist\/tools\/(session|ansuz-boot-fast)\.js/g,
-      'node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .specialist/tools/$1.js');
+    .replace(/node \.(specialist|formation|collaboration)\/([\w./-]+\.js)/g,
+      'node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .$1/$2')
+    .replace(/`\.specialist\/([\w./-]+\.(?:md|yaml))`/g, '`${CLAUDE_PLUGIN_ROOT}/../../.specialist/$1`');
 }
 
 function copyDir(src, dst) {

package/core/plugins/kenaz/scripts/ygg.js

@@ -77,6 +77,7 @@ function renderStatus(s) {
   const L = [
     'Yggdrasil room:   ' + s.room,
     'Node name:        ' + s.node_name,
+    ...(s.registered ? ['Registered:       ' + s.registered] : []),
     'Key:              ' + s.key + ' (source: ' + s.key_source + ')',
     'Collaboration:    ' + (s.enabled && s.active_in_project ? 'active in this project'
       : 'not active in this project - run "ygg join <key>" (adds room "' + s.room + '" to collaboration_projects; presence is only sent for activated rooms)'),
@@ -92,13 +93,24 @@ function renderStatus(s) {
   return L.join('\n');
 }
 
+// The poller and presence only know projects in ~/.kenaz/projects.json. A server-only machine has
+// no Dashboard to register them, so before 0.3.4 a joined project never showed up in its room, with
+// no error anywhere (field report). Registering is idempotent; status says when it had to.
+async function ensureRegistered(dir) {
+  try {
+    const r = await call('POST', '/api/projects/register', { projectPath: dir });
+    return r && r.success ? (r.created ? 'registered now (it was missing: this machine could not be seen in the room or get mail for it)' : 'yes') : 'NO: ' + ((r && r.error) || 'unknown');
+  } catch (e) { return 'NO: ' + e.message + ' (kenaz-server too old? run npx kenaz@latest install)'; }
+}
+
 async function status(dir) {
+  const registered = await ensureRegistered(dir);
   const cfg = await getConfig(dir);
   if (cfg.error) throw new Error(cfg.error);
   const relay = await relayNodes(cfg);
   let peer = null;
   try { peer = await call('GET', '/api/peer/status?projectPath=' + encodeURIComponent(dir)); } catch (e) { /* unknown */ }
-  return buildStatus(cfg, relay, peer);
+  return Object.assign(buildStatus(cfg, relay, peer), { registered });
 }
 
 function withCollab(cfg, on) {

package/core/plugins/kenaz/skills/product_manager/SKILL.md

@@ -381,7 +381,7 @@ Scope 路徑: ✓ 合理
 
 ```bash
 # 使用 Task API 建立任務
-node .collaboration/core/task-api.js create --title "任務名稱" --priority P1
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create --title "任務名稱" --priority P1
 
 # 或直接建立 YAML 文件到 .collaboration/tasks/backlog/
 ```
@@ -390,7 +390,7 @@ node .collaboration/core/task-api.js create --title "任務名稱" --priority P1
 
 ```bash
 # 驗證任務文件格式
-node .collaboration/core/task-api.js list
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js list
 
 # 檢查必填欄位
 # id, title, description, priority, status, role, tags, source, acceptance_criteria
@@ -415,7 +415,7 @@ node .collaboration/core/task-api.js list
 ls .collaboration/tasks/backlog/TASK_113_*.yaml
 
 # 使用 Task API 驗證
-node .collaboration/core/task-api.js list
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js list
 
 # 檢查必填欄位
 # id, title, description, priority, status, role, tags, source, acceptance_criteria
@@ -457,7 +457,7 @@ node .collaboration/core/task-api.js list
 **驗證任務**（必須執行）:
 ```bash
 # 使用 Task API 驗證（新系統）
-node .collaboration/core/task-api.js list
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js list
 ```
 
 #### 8.4 批量更新 PROGRESS.md
@@ -688,7 +688,7 @@ metadata:
 
 ```bash
 # 使用 Task API 建立任務（新系統）
-node .collaboration/core/task-api.js create --title "任務名稱" --priority P1
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create --title "任務名稱" --priority P1
 
 # 或直接建立 YAML 文件到 .collaboration/tasks/backlog/
 ```
@@ -766,9 +766,9 @@ node .collaboration/core/task-api.js create --title "任務名稱" --priority P1
 
 ```bash
 # 使用 Task API 建立任務
-node .collaboration/core/task-api.js create --title "實作撤銷機制" --priority P1
-node .collaboration/core/task-api.js create --title "新增 Undo/Redo UI" --priority P2
-node .collaboration/core/task-api.js create --title "整合快捷鍵" --priority P2
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create --title "實作撤銷機制" --priority P1
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create --title "新增 Undo/Redo UI" --priority P2
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create --title "整合快捷鍵" --priority P2
 ```
 
 **Stage 8: Pipeline Integration**
@@ -1055,16 +1055,16 @@ Dev Agent 會按照優先級執行這些任務。
 
 ```bash
 # 列出所有任務
-node .collaboration/core/task-api.js list
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js list
 
 # 建立新任務
-node .collaboration/core/task-api.js create --title "新功能" --priority P1
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js create --title "新功能" --priority P1
 
 # 認領任務
-node .collaboration/core/task-api.js claim TASK_XXX
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js claim TASK_XXX
 
 # 完成任務
-node .collaboration/core/task-api.js complete TASK_XXX
+node "${CLAUDE_PLUGIN_ROOT}/hooks/core-resolve.js" .collaboration/core/task-api.js complete TASK_XXX
 ```
 
 **詳細文檔**：`.collaboration/README.md`

package/lib/cli.js

@@ -55,7 +55,10 @@ function platformServer() {
 }
 
 function onPath(cmd) {
-  return spawnSync(cmd, ['--version'], { encoding: 'utf8', shell: process.platform === 'win32', timeout: 15000 }).status === 0;
+  const r = process.platform === 'win32' // one string with shell (.cmd shims); args + shell:true is deprecated (DEP0190)
+    ? spawnSync(cmd + ' --version', { encoding: 'utf8', shell: true, timeout: 15000 })
+    : spawnSync(cmd, ['--version'], { encoding: 'utf8', timeout: 15000 });
+  return r.status === 0;
 }
 
 /** setup-codex.js from the installed core (dry-run and doctor-before-install: from the package). */
@@ -76,6 +79,29 @@ function prepareCodexHome(p, flags) {
 
 function nodeOk() { return Number(process.versions.node.split('.')[0]) >= MIN_NODE; }
 
+const samePath = (a, b) => {
+  const n = (x) => path.resolve(String(x || '')).replace(/\\/g, '/');
+  return process.platform === 'win32' ? n(a).toLowerCase() === n(b).toLowerCase() : n(a) === n(b);
+};
+
+/** Stop the kenaz-server running from exactly binPath (never by name). Returns the PIDs stopped. */
+function stopOwnServer(binPath, adapter) {
+  if (!binPath || !adapter || typeof adapter.procs !== 'function') return [];
+  const pids = adapter.procs().filter((pr) => pr.exe && samePath(pr.exe, binPath)).map((pr) => pr.pid);
+  for (const pid of pids) { try { (adapter.kill || process.kill)(pid); } catch (_) { /* already gone */ } }
+  return pids;
+}
+
+/** Windows keeps an exe locked for a moment after its process exits: retry the copy briefly. */
+function retryBusy(fn, tries = 10) {
+  for (let i = 1; ; i++) {
+    try { return fn(); } catch (e) {
+      if (i >= tries || !['EBUSY', 'EPERM', 'EPIPE', 'EACCES', 'ETXTBSY'].includes(e.code)) throw e;
+      Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 500);
+    }
+  }
+}
+
 function install(p, flags, out, deps = {}) {
   const dry = !!flags['dry-run'];
   const tag = dry ? '[dry-run] ' : '';
@@ -96,11 +122,22 @@ function install(p, flags, out, deps = {}) {
     else { out(`server: no @kenazai/server-${process.platform}-${process.arch} package installed (npm install it, or pass --server-bin)`); rc = 1; }
   }
   if (!dry) {
+    if (srv) {
+      // Reinstall/upgrade: the kenaz-server this install manages may be running from p.bin. Windows
+      // locks a running exe (field report: "EPIPE ... being used by another process" on
+      // `npx kenaz@latest install`) and Linux refuses to overwrite one (ETXTBSY). Stop exactly that
+      // binary (exe path match, by PID); the service step below starts the new one.
+      const stopped = stopOwnServer(binPath, deps.dashboard || dash.realAdapter(p.home));
+      if (stopped.length) log(`server: stopped the running kenaz-server (PID ${stopped.join(', ')}) to replace it`);
+    }
     fs.rmSync(p.core, { recursive: true, force: true });
     fs.cpSync(srcCore, p.core, { recursive: true });
     if (srv) {
       fs.mkdirSync(p.bin, { recursive: true });
-      fs.cpSync(srv.dir, p.bin, { recursive: true });
+      // Unix: unlink first. A running binary can be unlinked (its process keeps the old inode) but not
+      // overwritten (ETXTBSY), so this works even when the running server was not found above.
+      if (process.platform !== 'win32') fs.rmSync(binPath, { force: true });
+      retryBusy(() => fs.cpSync(srv.dir, p.bin, { recursive: true }));
       fs.chmodSync(binPath, 0o755);
     }
     fs.writeFileSync(p.meta, JSON.stringify({ version: PKG.version, server: srv ? srv.version : null, serverBin: binPath, installedAt: new Date().toISOString() }, null, 2));
@@ -163,9 +200,9 @@ function status(p, flags, out) {
   return 0;
 }
 
-function probe(port) {
+function probe(port, urlPath = '/api/health') {
   return new Promise((resolve) => {
-    const req = http.get({ host: '127.0.0.1', port, path: '/api/health', timeout: 2500 }, (res) => {
+    const req = http.get({ host: '127.0.0.1', port, path: urlPath, timeout: 2500 }, (res) => {
       let body = ''; res.on('data', (d) => { body += d; }); res.on('end', () => resolve({ ok: res.statusCode < 500, detail: `HTTP ${res.statusCode} on :${port}`, body }));
     });
     req.on('timeout', () => { req.destroy(); resolve({ ok: false, detail: `no answer on 127.0.0.1:${port}` }); });
@@ -195,7 +232,11 @@ async function doctor(p, flags, out, deps = {}) {
     const o = d.portOwner;
     add(`port ${d.port} owner`, o && d.ownerIsDashboard ? 'FAIL' : 'ok', o ? `PID ${o.pid} ${o.exe || o.name}${d.ownerIsDashboard ? ' (Dashboard)' : ''}` : 'nobody listening');
   }
-  const upd = readJson(path.join(p.dir, 'update', 'status.json')); // TASK_2378, written by kenaz-server
+  // Ask the running server first: its answer carries its own version. The status file can still
+  // describe the previous binary right after an upgrade (field report: "[running 0.3.1]" on 0.3.3).
+  let upd = null;
+  if (r.ok) { const u = await probe(process.env.KENAZ_HTTP_PORT || '18080', '/api/update/status'); try { upd = JSON.parse(u.body); } catch (_) { /* older server */ } }
+  if (!upd || !upd.state) upd = readJson(path.join(p.dir, 'update', 'status.json')); // TASK_2378, written by kenaz-server
   if (!upd) add('self-update', 'skip', 'no status yet (kenaz-server has not run the updater)');
   else {
     const d = { disabled: `off: ${upd.reason}`, error: `last check failed: ${upd.last_error}`, staged: `${upd.staged_version} staged, applies when idle`,
@@ -248,4 +289,4 @@ function run(argv, out = console.log, deps = {}) {
   catch (e) { out('kenaz ' + cmd + ': ERROR ' + e.message); return 1; }
 }
 
-module.exports = { run, parseArgs, platformServer, paths };
+module.exports = { run, parseArgs, platformServer, paths, stopOwnServer, retryBusy };

package/lib/cli.test.js

@@ -57,3 +57,27 @@ test('kenaz ygg / init pass through to the core scripts with the remaining args'
   assert.match(calls[1][0].split(path.sep).join('/'), /plugins\/kenaz\/scripts\/kenaz-mode\.js$/);
   assert.deepStrictEqual(calls[1].slice(1), ['init']);
 });
+
+test('reinstall stops only the kenaz-server running from the managed path (exact exe match, by PID)', () => {
+  const { stopOwnServer } = require('./cli');
+  const killed = [];
+  const bin = path.join(os.tmpdir(), 'kh', '.kenaz', 'bin', process.platform === 'win32' ? 'kenaz-server.exe' : 'kenaz-server');
+  const adapter = {
+    procs: () => [
+      { pid: 11, exe: bin },
+      { pid: 12, exe: path.join(os.tmpdir(), 'other', 'kenaz-server.exe') }, // same name, different path: untouched
+      { pid: 13, exe: '' },
+    ],
+    kill: (pid) => killed.push(pid),
+  };
+  assert.deepStrictEqual(stopOwnServer(bin, adapter), [11]);
+  assert.deepStrictEqual(killed, [11]);
+});
+
+test('retryBusy retries a locked copy and then succeeds; other errors are thrown at once', () => {
+  const { retryBusy } = require('./cli');
+  let n = 0;
+  assert.strictEqual(retryBusy(() => { if (++n < 3) { const e = new Error('busy'); e.code = 'EBUSY'; throw e; } return 'ok'; }, 5), 'ok');
+  assert.strictEqual(n, 3);
+  assert.throws(() => retryBusy(() => { const e = new Error('nope'); e.code = 'ENOENT'; throw e; }, 5), /nope/);
+});

package/lib/dashboard.js

@@ -29,6 +29,16 @@ function realAdapter(home) {
         if (r.status !== 0) return [];
         try { const v = JSON.parse(r.stdout); return (Array.isArray(v) ? v : [v]).map((x) => ({ pid: x.ProcessId, name: x.Name || '', exe: x.ExecutablePath || '' })); } catch (_) { return []; }
       }
+      if (process.platform === 'linux') {
+        // /proc is always there; `ps` is not (node:22-slim has no procps, so a reinstall could not
+        // find the running kenaz-server and failed with ETXTBSY).
+        const out = [];
+        for (const d of fs.readdirSync('/proc')) {
+          if (!/^\d+$/.test(d)) continue;
+          try { const exe = fs.readlinkSync('/proc/' + d + '/exe'); out.push({ pid: Number(d), name: path.basename(exe), exe }); } catch (_) { /* gone or not ours */ }
+        }
+        return out;
+      }
       const r = sh('ps', ['-eo', 'pid=,args=']);
       return String(r.stdout || '').split('\n').map((l) => /^\s*(\d+)\s+(.+)$/.exec(l)).filter(Boolean)
         .map((m) => ({ pid: Number(m[1]), name: path.basename(m[2].split(' ')[0]), exe: m[2].split(' ')[0] }));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "kenaz",
-  "version": "0.3.2",
+  "version": "0.3.5",
   "description": "Install Kenaz (plugin, hooks, kenaz-server) for Claude Code and Codex: npx kenaz install",
   "bin": {
     "kenaz": "bin/kenaz.js"
@@ -20,11 +20,15 @@
     "test": "node --test lib/cli.test.js"
   },
   "optionalDependencies": {
-    "@kenazai/server-darwin-arm64": "0.3.2",
-    "@kenazai/server-darwin-x64": "0.3.2",
-    "@kenazai/server-linux-arm64": "0.3.2",
-    "@kenazai/server-linux-x64": "0.3.2",
-    "@kenazai/server-win32-x64": "0.3.2"
+    "@kenazai/server-darwin-arm64": "0.3.5",
+    "@kenazai/server-darwin-x64": "0.3.5",
+    "@kenazai/server-linux-arm64": "0.3.5",
+    "@kenazai/server-linux-x64": "0.3.5",
+    "@kenazai/server-win32-x64": "0.3.5"
   },
-  "license": "UNLICENSED"
+  "license": "UNLICENSED",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/xyz9516/KenazAI.git"
+  }
 }

package/vendor/install-kenaz-cli.js

@@ -111,7 +111,9 @@ function retireDashboardHooks(file, dry) {
 }
 
 function claudeVersion() {
-  const r = spawnSync('claude', ['--version'], { encoding: 'utf8', shell: process.platform === 'win32', timeout: 15000 });
+  const r = process.platform === 'win32' // one string with shell (.cmd shim): args + shell:true is deprecated (DEP0190)
+    ? spawnSync('claude --version', { encoding: 'utf8', shell: true, timeout: 15000 })
+    : spawnSync('claude', ['--version'], { encoding: 'utf8', timeout: 15000 });
   return r.status === 0 ? parseVersion(r.stdout) : null;
 }
 
@@ -125,14 +127,21 @@ function winVbs(bin, core) { // hidden window, env for task tools; server binds
   return 'Set sh = WScript.CreateObject("WScript.Shell")\r\nsh.Environment("Process")("KENAZ_SOURCE_DIR") = "' + core + '"\r\n' +
     'sh.Run """' + bin + '""", 0, False\r\n';
 }
-function launchdPlist(bin, core, log) {
+// launchd and systemd start the server with a bare PATH (/usr/bin:/bin...), so `node` from Homebrew,
+// nvm or /usr/local was not found and every MCP tool that runs a node script failed with
+// "No such file or directory" (field report, macOS 0.3.1). Put the node running this install first.
+function servicePath(nodeExe = process.execPath) {
+  return [path.dirname(nodeExe), '/opt/homebrew/bin', '/usr/local/bin', '/usr/bin', '/bin', '/usr/sbin', '/sbin']
+    .filter((d, i, a) => a.indexOf(d) === i).join(':');
+}
+function launchdPlist(bin, core, log, nodeExe) {
   return '<?xml version="1.0" encoding="UTF-8"?>\n<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">\n<plist version="1.0"><dict>\n' +
     '  <key>Label</key><string>' + LABEL + '</string>\n  <key>ProgramArguments</key><array><string>' + bin + '</string></array>\n' +
-    '  <key>EnvironmentVariables</key><dict><key>KENAZ_SOURCE_DIR</key><string>' + core + '</string></dict>\n' +
+    '  <key>EnvironmentVariables</key><dict><key>KENAZ_SOURCE_DIR</key><string>' + core + '</string><key>PATH</key><string>' + servicePath(nodeExe) + '</string></dict>\n' +
     '  <key>RunAtLoad</key><true/>\n  <key>KeepAlive</key><true/>\n  <key>StandardOutPath</key><string>' + log + '</string>\n  <key>StandardErrorPath</key><string>' + log + '</string>\n</dict></plist>\n';
 }
-function systemdUnit(bin, core) {
-  return '[Unit]\nDescription=Kenaz server (headless backend)\nAfter=network.target\n\n[Service]\nExecStart=' + bin + '\nEnvironment=KENAZ_SOURCE_DIR=' + core + '\nRestart=on-failure\n\n[Install]\nWantedBy=default.target\n';
+function systemdUnit(bin, core, nodeExe) {
+  return '[Unit]\nDescription=Kenaz server (headless backend)\nAfter=network.target\n\n[Service]\nExecStart=' + bin + '\nEnvironment=KENAZ_SOURCE_DIR=' + core + '\nEnvironment=PATH=' + servicePath(nodeExe) + '\nRestart=on-failure\n\n[Install]\nWantedBy=default.target\n';
 }
 
 function servicePlan(home, bin, core, platform = process.platform) {
@@ -163,7 +172,9 @@ function serviceInstall(plan, dry, log) {
       fs.mkdirSync(path.dirname(plan.fallbackFile), { recursive: true });
       fs.copyFileSync(plan.files[0][0], plan.fallbackFile);
       sh('wscript.exe', [plan.files[0][0]]);
-      log('schtasks refused (' + (r.stderr || '').trim() + '); installed Startup-folder launcher instead');
+      // schtasks' stderr is in the console's OEM code page (garbled when echoed); the usual cause is
+      // missing admin rights for /SC ONLOGON. The Startup-folder launcher starts at logon the same way.
+      log('schtasks needs administrator rights here (exit ' + r.status + '); installed the Startup-folder launcher instead (also starts at logon)');
     }
   } else if (plan.kind === 'launchd') {
     log('launchctl load -w ' + plan.unit); if (!dry) sh('launchctl', ['load', '-w', plan.unit]);
@@ -259,7 +270,7 @@ function main(argv, out = console.log, getVersion = claudeVersion) { // getVersi
     else if (!bin) { out('service: skipped, kenaz-server binary not found (pass --server-bin)'); rc = 1; }
     else serviceInstall(plan, dry, log);
   }
-  if (cmd === 'install' && rc === 0) out('Next: cd <your project>; claude; /kenaz init; /Ansuz');
+  if (cmd === 'install' && rc === 0) out('Next: cd <your project>; claude; /kenaz:kenaz init; /kenaz:Ansuz   (Codex: run /hooks once to trust the kenaz hooks, then $kenaz status)');
   if (cmd === 'uninstall') out('Project .kenaz/ data was left untouched.');
   return rc;
 }

package/core/.formation/tools/broadcast.js

@@ -1,103 +0,0 @@
-'use strict';
-/**
- * Broadcast Layer
- *
- * Supabase/Yggdrasil broadcast helpers extracted from headless.js.
- * Lazy-loaded singletons — no hard dependency on supabase-client at require time.
- *
- * Exports: getSupabaseClient, getTaskSync, getCommitSync, syncCommit,
- *          broadcastStatus, broadcastStatusSync
- */
-
-const path = require('path');
-const { ROOT } = require('./utils');
-
-// ─────────────────────────────────────────
-// Yggdrasil: kenaz_status 廣播 + commit-sync（lazy loaded, graceful degradation）
-// ─────────────────────────────────────────
-let _supabaseClient = null;
-let _taskSync = null;
-let _commitSync = null;
-
-function getSupabaseClient(projectPath) {
-  if (_supabaseClient === undefined) return null;
-  if (!_supabaseClient) try { _supabaseClient = require('./supabase-client'); } catch { _supabaseClient = undefined; return null; }
-  return _supabaseClient.getClient(projectPath);
-}
-
-function getTaskSync() {
-  if (_taskSync === undefined) return null;
-  if (!_taskSync) try { _taskSync = require('./task-sync'); } catch { _taskSync = undefined; return null; }
-  return _taskSync;
-}
-
-function getCommitSync() {
-  if (_commitSync === undefined) return null;
-  if (!_commitSync) try { _commitSync = require('./commit-sync'); } catch { _commitSync = undefined; return null; }
-  return _commitSync;
-}
-
-/**
- * 同步 commit 到 kenaz_commits。
- * 回傳 Promise（await 時確保完成，或 fire-and-forget）。
- */
-function syncCommit(taskId, projectPath) {
-  try {
-    const cs = getCommitSync();
-    if (!cs) return Promise.resolve();
-    return cs.syncLatestCommit({ taskId, projectPath }).catch(() => {});
-  } catch { return Promise.resolve(); }
-}
-
-/**
- * 廣播 kenaz_status — 讓 Agent Monitor 和其他機器看到 dispatch agent。
- * 回傳 Promise — caller 可 await 確保完成。
- */
-function broadcastStatus(projectPath, updates) {
-  try {
-    const sb = getSupabaseClient(projectPath);
-    if (!sb) return Promise.resolve();
-    const { client, config } = sb;
-    const ts = getTaskSync();
-    const project = ts?.resolveProjectName?.(projectPath || ROOT) || path.basename(ROOT);
-    return client.from('kenaz_status').upsert({
-      node_name: config.node_name,
-      project,
-      ...updates,
-    }, { onConflict: 'node_name,project' }).then(() => {}).catch(() => {});
-  } catch { return Promise.resolve(); }
-}
-
-/**
- * 同步版 broadcastStatus — 用於 process exit 前確保送達。
- * 使用 synchronous HTTP（spawnSync + curl）避免 async 在退出時丟失。
- */
-function broadcastStatusSync(projectPath, updates) {
-  try {
-    const sb = getSupabaseClient(projectPath);
-    if (!sb) return;
-    const { config } = sb;
-    const ts = getTaskSync();
-    const project = ts?.resolveProjectName?.(projectPath || ROOT) || path.basename(ROOT);
-    const payload = { node_name: config.node_name, project, ...updates };
-    const url = `${config.supabase_url}/rest/v1/kenaz_status`;
-    const { spawnSync } = require('child_process');
-    spawnSync('curl', [
-      '-s', '-X', 'POST', url,
-      '-H', `apikey: ${config.supabase_anon_key}`,
-      '-H', `Authorization: Bearer ${config.supabase_anon_key}`,
-      '-H', 'Content-Type: application/json',
-      '-H', 'Prefer: resolution=merge-duplicates',
-      '-d', JSON.stringify(payload),
-    ], { timeout: 5000, stdio: 'ignore', windowsHide: true });
-  } catch { /* best-effort */ }
-}
-
-module.exports = {
-  getSupabaseClient,
-  getTaskSync,
-  getCommitSync,
-  syncCommit,
-  broadcastStatus,
-  broadcastStatusSync,
-};

package/core/.formation/tools/dispatch-dryrun.test.js

@@ -1,54 +0,0 @@
-// TASK_2274: formation-mode `--dry-run` must have NO side effects: no git init
-// of the target, no resource lock files, no claim adoption. Drives the real CLI
-// entry (dispatch.js -> dispatch()) against a temp project root.
-const test = require('node:test');
-const assert = require('node:assert/strict');
-const fs = require('fs');
-const os = require('os');
-const path = require('path');
-const { spawnSync } = require('child_process');
-
-const DISPATCH = path.join(__dirname, 'dispatch.js');
-
-function mkProject() {
-  const root = fs.mkdtempSync(path.join(os.tmpdir(), 't2274_'));
-  fs.mkdirSync(path.join(root, '.kenaz', 'tasks', 'backlog'), { recursive: true });
-  fs.mkdirSync(path.join(root, '.kenaz', 'tasks', 'active'), { recursive: true });
-  fs.writeFileSync(path.join(root, '.kenaz', 'tasks', 'backlog', 'TASK_9001_dryrun.yaml'), [
-    'id: TASK_9001', 'title: dry run probe', 'description: probe', 'status: backlog',
-    'priority: P2', 'scope_paths:', '  - src/x.js', 'resources:', '  - dryrun_res', ''].join('\n'));
-  return root;
-}
-function run(root, extra, envOver) {
-  const env = { ...process.env, ...(envOver || {}) }; delete env.CLAUDE_PROJECT_DIR;
-  return spawnSync(process.execPath, [DISPATCH, '--formation=unit', '--skill=do', '--task=TASK_9001',
-    '--project-path', root, ...extra], { encoding: 'utf8', env, windowsHide: true, timeout: 90000 });
-}
-const lockFile = (root) => path.join(root, '.kenaz', 'locks', 'resource_dryrun_res.lock');
-
-test('formation-mode --dry-run: no git init, no resource lock, reports intent', () => {
-  const root = mkProject();
-  try {
-    const r = run(root, ['--dry-run']);
-    const out = (r.stdout || '') + (r.stderr || '');
-    assert.equal(r.status, 0, out.slice(-500));
-    assert.ok(!fs.existsSync(path.join(root, '.git')), 'dry-run must not git init');
-    assert.ok(!fs.existsSync(lockFile(root)), 'dry-run must not acquire resource lock');
-    assert.match(out, /\[dry-run\] resource locks NOT acquired: dryrun_res/);
-    assert.match(out, /\[dry-run\] would git init/);
-  } finally { fs.rmSync(root, { recursive: true, force: true }); }
-});
-
-test('control: non-dry-run formation dispatch DOES git init and acquire the lock', () => {
-  const root = mkProject();
-  try {
-    // PATH = node + git dirs only and a fake HOME, so the real agent launch cannot
-    // find a claude binary (it fails after the lock/git steps we are asserting).
-    const gitDirs = spawnSync(process.platform === 'win32' ? 'where' : 'which', ['git'], { encoding: 'utf8' })
-      .stdout.split(/\r?\n/).filter(Boolean).map((p) => path.dirname(p));
-    const PATH = [path.dirname(process.execPath), ...gitDirs].join(path.delimiter);
-    run(root, [], { PATH, Path: PATH, USERPROFILE: root, HOME: root });
-    assert.ok(fs.existsSync(path.join(root, '.git')), 'control: git init expected');
-    assert.ok(fs.existsSync(lockFile(root)), 'control: lock expected');
-  } finally { fs.rmSync(root, { recursive: true, force: true }); }
-});