livedesk 0.1.447 → 0.1.449

package/bin/livedesk.js

@@ -1422,30 +1422,163 @@ async function collectWindowsPortRecords(ports) {
   return records;
 }
 
-async function stopWindowsProcessesOnPorts(ports) {
-  const records = await collectWindowsPortRecords(ports);
-  const stoppedPids = new Set();
-  for (const record of records) {
+async function terminateExactWindowsPortOwners(records) {
+  const roots = [];
+  const seenRoots = new Set();
+  for (const record of Array.isArray(records) ? records : []) {
     const pid = Number(record?.Pid || 0);
-    if (record?.KnownLiveDesk !== true || stoppedPids.has(pid)) continue;
-    const details = await getProcessDetails(pid);
-    if (!details
-        || String(details.startOrder || '') !== String(record?.CreationUtcTicks || '')
-        || !isKnownLiveDeskProcess(details.processName, details.commandLine)) {
+    const startOrder = String(record?.CreationUtcTicks || '').trim();
+    if (record?.KnownLiveDesk !== true
+        || !Number.isInteger(pid)
+        || pid <= 1
+        || !/^\d+$/.test(startOrder)
+        || seenRoots.has(`${pid}:${startOrder}`)) {
       continue;
     }
-    await terminateExactWindowsProcessTree(details, {
-      label: `verified LiveDesk port owner pid=${pid}`
-    });
-    stoppedPids.add(pid);
-    for (const matching of records.filter(candidate => Number(candidate?.Pid) === pid)) {
-      matching.Action = 'stopped';
-      matching.KillAttempted = true;
+    seenRoots.add(`${pid}:${startOrder}`);
+    roots.push({ pid, startOrder });
+  }
+  if (roots.length === 0) return;
+
+  const encodedRoots = Buffer.from(JSON.stringify(roots), 'utf8').toString('base64');
+  const script = [
+    '$ErrorActionPreference = "Stop";',
+    `$rootsJson = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String("${encodedRoots}"));`,
+    '$requestedRoots = @(ConvertFrom-Json -InputObject $rootsJson);',
+    '$validatedRoots = [System.Collections.Generic.List[object]]::new();',
+    'foreach ($item in $requestedRoots) {',
+    '  $targetPid = [int]$item.pid;',
+    '  $expectedStartTicks = [string]$item.startOrder;',
+    '  $proc = Get-CimInstance Win32_Process -Filter "ProcessId = $targetPid" -Property ProcessId,ParentProcessId,Name,CommandLine,CreationDate -ErrorAction SilentlyContinue | Select-Object -First 1;',
+    '  if (-not $proc) { continue };',
+    '  $actualStartTicks = if ($proc.CreationDate) { [string]$proc.CreationDate.ToUniversalTime().Ticks } else { "" };',
+    '  $processName = [string]$proc.Name;',
+    '  $commandLine = [string]$proc.CommandLine;',
+    '  $isNodeProcess = $processName -match "(?i)^node(?:\\.exe)?$";',
+    '  $hasKnownLiveDeskHubPath = $commandLine -match "(?i)(?:packages[\\\\/](?:livedesk[\\\\/])?hub|node_modules[\\\\/]@?livedesk[\\\\/]hub)[\\\\/]src[\\\\/]server\\.js";',
+    '  $hasUnifiedLauncherPath = $commandLine -match "(?i)(?:node_modules[\\\\/]livedesk|packages[\\\\/]livedesk)[\\\\/]bin[\\\\/]livedesk\\.js";',
+    '  $hasLegacyClientPath = $commandLine -match "(?i)(?:node_modules[\\\\/]@livedesk[\\\\/]client|packages[\\\\/]client|packages[\\\\/]livedesk[\\\\/]client)[\\\\/]bin[\\\\/]livedesk-client\\.js";',
+    '  if ($actualStartTicks -ne $expectedStartTicks -or -not $isNodeProcess -or -not ($hasKnownLiveDeskHubPath -or $hasUnifiedLauncherPath -or $hasLegacyClientPath)) { continue };',
+    '  $validatedRoots.Add([pscustomobject]@{ ProcessId = [int]$proc.ProcessId; ParentProcessId = [int]$proc.ParentProcessId; CreationUtcTicks = $actualStartTicks; Depth = 0 });',
+    '}',
+    'if ($validatedRoots.Count -eq 0) { exit 0 };',
+    '$snapshot = @(Get-CimInstance Win32_Process -Property ProcessId,ParentProcessId,CreationDate | ForEach-Object {',
+    '  $ticks = if ($_.CreationDate) { [string]$_.CreationDate.ToUniversalTime().Ticks } else { "" };',
+    '  if ($ticks) { [pscustomobject]@{ ProcessId = [int]$_.ProcessId; ParentProcessId = [int]$_.ParentProcessId; CreationUtcTicks = $ticks } }',
+    '});',
+    '$targets = @{};',
+    'foreach ($root in $validatedRoots) {',
+    '  $currentRoot = @($snapshot | Where-Object { [int]$_.ProcessId -eq [int]$root.ProcessId }) | Select-Object -First 1;',
+    '  if (-not $currentRoot -or [string]$currentRoot.CreationUtcTicks -ne [string]$root.CreationUtcTicks) { continue };',
+    '  $queue = [System.Collections.Generic.Queue[object]]::new();',
+    '  $queue.Enqueue([pscustomobject]@{ Record = $currentRoot; Depth = 0 });',
+    '  $seen = [System.Collections.Generic.HashSet[int]]::new();',
+    '  while ($queue.Count -gt 0) {',
+    '    $current = $queue.Dequeue();',
+    '    $currentRecord = $current.Record;',
+    '    $currentPid = [int]$currentRecord.ProcessId;',
+    '    if (-not $seen.Add($currentPid)) { continue };',
+    '    $key = "$currentPid`:$([string]$currentRecord.CreationUtcTicks)";',
+    '    $targets[$key] = [pscustomobject]@{ ProcessId = $currentPid; CreationUtcTicks = [string]$currentRecord.CreationUtcTicks; Depth = [int]$current.Depth };',
+    '    foreach ($child in @($snapshot | Where-Object { [int]$_.ParentProcessId -eq $currentPid })) {',
+    '      try { if ([System.Numerics.BigInteger]::Parse([string]$child.CreationUtcTicks) -lt [System.Numerics.BigInteger]::Parse([string]$currentRecord.CreationUtcTicks)) { continue } } catch { continue };',
+    '      $queue.Enqueue([pscustomobject]@{ Record = $child; Depth = [int]$current.Depth + 1 });',
+    '    }',
+    '  }',
+    '}',
+    '$failures = [System.Collections.Generic.List[string]]::new();',
+    '$exitTicks = @{};',
+    '$orderedTargets = @($targets.Values | Sort-Object @{ Expression = { -[int]$_.Depth } });',
+    'foreach ($targetRecord in $orderedTargets) {',
+    '  $targetPid = [int]$targetRecord.ProcessId;',
+    '  $expectedStartTicks = [string]$targetRecord.CreationUtcTicks;',
+    '  $targetKey = "$targetPid`:$expectedStartTicks";',
+    '  try {',
+    '    $current = Get-CimInstance Win32_Process -Filter "ProcessId = $targetPid" -Property ProcessId,CreationDate -ErrorAction SilentlyContinue | Select-Object -First 1;',
+    '    if (-not $current) { continue };',
+    '    $currentStartTicks = if ($current.CreationDate) { [string]$current.CreationDate.ToUniversalTime().Ticks } else { "" };',
+    '    if ($currentStartTicks -ne $expectedStartTicks) { continue };',
+    '    Stop-Process -Id $targetPid -Force -ErrorAction Stop;',
+    '    $exitTicks[$targetKey] = [string][DateTime]::UtcNow.Ticks;',
+    '  } catch {',
+    '    $failures.Add("pid=$targetPid $($_.Exception.Message)");',
+    '  }',
+    '}',
+    'Start-Sleep -Milliseconds 75;',
+    '$lateSnapshot = @(Get-CimInstance Win32_Process -Property ProcessId,ParentProcessId,CreationDate | ForEach-Object {',
+    '  $ticks = if ($_.CreationDate) { [string]$_.CreationDate.ToUniversalTime().Ticks } else { "" };',
+    '  if ($ticks) { [pscustomobject]@{ ProcessId = [int]$_.ProcessId; ParentProcessId = [int]$_.ParentProcessId; CreationUtcTicks = $ticks } }',
+    '});',
+    '$lateTargets = @{};',
+    '$lateQueue = [System.Collections.Generic.Queue[object]]::new();',
+    'foreach ($tracked in $targets.Values) {',
+    '  $trackedKey = "$([int]$tracked.ProcessId)`:$([string]$tracked.CreationUtcTicks)";',
+    '  if (-not $exitTicks.ContainsKey($trackedKey)) { $exitTicks[$trackedKey] = [string][DateTime]::UtcNow.Ticks };',
+    '  $lateQueue.Enqueue([pscustomobject]@{ Record = $tracked; Depth = [int]$tracked.Depth; ExitTicks = [string]$exitTicks[$trackedKey] });',
+    '}',
+    '$lateSeen = [System.Collections.Generic.HashSet[string]]::new();',
+    'while ($lateQueue.Count -gt 0) {',
+    '  $parent = $lateQueue.Dequeue();',
+    '  $parentRecord = $parent.Record;',
+    '  $parentKey = "$([int]$parentRecord.ProcessId)`:$([string]$parentRecord.CreationUtcTicks)";',
+    '  if (-not $lateSeen.Add($parentKey)) { continue };',
+    '  foreach ($child in @($lateSnapshot | Where-Object { [int]$_.ParentProcessId -eq [int]$parentRecord.ProcessId })) {',
+    '    try {',
+    '      $childStart = [System.Numerics.BigInteger]::Parse([string]$child.CreationUtcTicks);',
+    '      if ($childStart -lt [System.Numerics.BigInteger]::Parse([string]$parentRecord.CreationUtcTicks)) { continue };',
+    '      if ($parent.ExitTicks -and $childStart -gt [System.Numerics.BigInteger]::Parse([string]$parent.ExitTicks)) { continue };',
+    '    } catch { continue };',
+    '    $childKey = "$([int]$child.ProcessId)`:$([string]$child.CreationUtcTicks)";',
+    '    $childDepth = [int]$parent.Depth + 1;',
+    '    $lateTargets[$childKey] = [pscustomobject]@{ ProcessId = [int]$child.ProcessId; CreationUtcTicks = [string]$child.CreationUtcTicks; Depth = $childDepth };',
+    '    $lateQueue.Enqueue([pscustomobject]@{ Record = $child; Depth = $childDepth; ExitTicks = "" });',
+    '  }',
+    '}',
+    '$orderedLateTargets = @($lateTargets.Values | Sort-Object @{ Expression = { -[int]$_.Depth } });',
+    'foreach ($targetRecord in $orderedLateTargets) {',
+    '  $targetPid = [int]$targetRecord.ProcessId;',
+    '  $expectedStartTicks = [string]$targetRecord.CreationUtcTicks;',
+    '  try {',
+    '    $current = Get-CimInstance Win32_Process -Filter "ProcessId = $targetPid" -Property ProcessId,CreationDate -ErrorAction SilentlyContinue | Select-Object -First 1;',
+    '    if (-not $current) { continue };',
+    '    $currentStartTicks = if ($current.CreationDate) { [string]$current.CreationDate.ToUniversalTime().Ticks } else { "" };',
+    '    if ($currentStartTicks -ne $expectedStartTicks) { continue };',
+    '    Stop-Process -Id $targetPid -Force -ErrorAction Stop;',
+    '  } catch {',
+    '    $failures.Add("late pid=$targetPid $($_.Exception.Message)");',
+    '  }',
+    '}',
+    'if ($failures.Count -gt 0) { [Console]::Error.WriteLine(($failures -join "; ")); exit 1 };',
+    'exit 0;'
+  ].join(' ');
+  const result = await runQuiet(
+    'powershell.exe',
+    ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script],
+    { timeout: 15000, killSignal: 'SIGKILL', maxBuffer: 4 * 1024 * 1024 }
+  );
+  if (!result.ok) {
+    throw new Error(
+      `Could not stop exact LiveDesk Windows port owner tree: `
+      + `${result.stderr || result.error?.message || 'PowerShell failed'}`
+    );
+  }
+}
+
+async function stopWindowsProcessesOnPorts(ports) {
+  const records = await collectWindowsPortRecords(ports);
+  const killable = records.filter(record => record?.KnownLiveDesk === true);
+  if (killable.length > 0) {
+    await terminateExactWindowsPortOwners(killable);
+    for (const record of killable) {
+      record.Action = 'stopped';
+      record.KillAttempted = true;
     }
   }
 
   const probes = await Promise.all(ports.map(port => waitForPortBindable(port)));
-  const finalRecords = await collectWindowsPortRecords(ports);
+  const finalRecords = probes.every(probe => probe.ok)
+    ? []
+    : await collectWindowsPortRecords(ports);
   const portStates = ports.map((port, index) => {
     const busy = finalRecords.some(record => Number(record?.Port) === Number(port));
     return {

package/bootstrap/legacy-client-update.js

@@ -47,9 +47,6 @@ const PRESERVED_SINGLE_FLAGS = new Set([
   '--no-audio',
   '--tasks',
   '--no-tasks',
-  '--ai',
-  '--no-ai',
-  '--fake-ai',
   '--fake-thumbnail',
   '--trace-frames'
 ]);
@@ -57,7 +54,6 @@ const PRESERVED_VALUE_FLAGS = new Set([
   '--name',
   '--heartbeat',
   '--files-dir',
-  '--ai-model',
   '--transport'
 ]);
 const JOINED_VALUE_FLAGS = new Set(['--name', '--files-dir']);
@@ -71,9 +67,7 @@ const SETTING_GROUPS = new Map([
   ['--audio', 'audio'],
   ['--no-audio', 'audio'],
   ['--tasks', 'tasks'],
-  ['--no-tasks', 'tasks'],
-  ['--ai', 'ai'],
-  ['--no-ai', 'ai']
+  ['--no-tasks', 'tasks']
 ]);
 
 function cleanVersion(value) {

package/client/README.md

@@ -62,9 +62,9 @@ System Settings path when access is missing; after granting access, restart the
 client. When file transfer is enabled by the Hub, received files are saved
 to `Desktop/LiveDeskFiles` unless the Hub sets another destination folder.
 
-By default, the launcher uses the packaged C# RemoteFast engine when supported.
-It falls back to the Node engine for AI assist or when a compatible RemoteFast
-runtime is unavailable. Windows, macOS, and Linux all try RemoteFast first so
+By default, the launcher uses the packaged C# RemoteFast engine when supported.
+It falls back to the Node engine only when a compatible RemoteFast runtime is
+unavailable. Windows, macOS, and Linux all try RemoteFast first so
 the Hub can request the Mode 3 hardware video path when it is available.
 RemoteFast is shipped as a platform-specific self-contained .NET executable,
 so client computers do not need a separate .NET installation.

package/client/bin/livedesk-client-node.js

@@ -19,15 +19,13 @@ const AGENT_VERSION = (() => {
 const PRODUCT_VERSION = String(process.env.LIVEDESK_NPM_LAUNCHER_VERSION || AGENT_VERSION).trim() || AGENT_VERSION;
 const DEFAULT_MANAGER = '127.0.0.1:5197';
 const DEFAULT_HEARTBEAT_MS = 5000;
-const DEFAULT_RECONNECT_MS = 5000;
-const EXIT_INVALID_PAIR_TOKEN = 23;
-const EXIT_CLIENT_UPDATE = 42;
-const DEFAULT_AI_MODEL = 'gpt-5.4-mini';
-const DEFAULT_LIVE_FPS = 30;
-const MAX_LIVE_FPS = 30;
-const MAX_FRAME_BASE64_CHARS = 3 * 1024 * 1024;
-const MAX_AI_OUTPUT_CHARS = 6000;
-const MAX_FILE_TRANSFER_FILES = 24;
+const DEFAULT_RECONNECT_MS = 5000;
+const EXIT_INVALID_PAIR_TOKEN = 23;
+const EXIT_CLIENT_UPDATE = 42;
+const DEFAULT_LIVE_FPS = 30;
+const MAX_LIVE_FPS = 30;
+const MAX_FRAME_BASE64_CHARS = 3 * 1024 * 1024;
+const MAX_FILE_TRANSFER_FILES = 24;
 const MAX_FILE_TRANSFER_BYTES = 24 * 1024 * 1024;
 const MAX_AGENT_OUTPUT_CHARS = 32000;
 const launchedProcessRegistry = new Map();
@@ -281,14 +279,10 @@ Options:
   --no-thumbnail         Disable thumbnail capture capability.
   --live                 Enable focused live screen streaming. Default on.
   --no-live              Disable focused live screen streaming.
-  --tasks                Enable safe remote task inbox. Default on.
-  --no-tasks             Disable remote task dispatch capability.
-  --files-dir <path>     Default folder for received files. Default: ~/Desktop/LiveDeskFiles.
-  --ai                   Enable OpenAI-backed remote AI assist tasks.
-  --no-ai                Disable OpenAI-backed remote AI assist tasks.
-  --ai-model <model>     OpenAI model for AI assist. Default: ${DEFAULT_AI_MODEL}
-  --fake-ai              Use deterministic AI assist responses for smoke tests.
-  --fake-thumbnail       Use generated thumbnail frames for smoke tests.
+  --tasks                Enable safe remote task inbox. Default on.
+  --no-tasks             Disable remote task dispatch capability.
+  --files-dir <path>     Default folder for received files. Default: ~/Desktop/LiveDeskFiles.
+  --fake-thumbnail       Use generated thumbnail frames for smoke tests.
   --exit-on-disconnect   Exit after Hub disconnect. Useful for tests.
   --exit-on-invalid-pair Exit when the Hub rejects the pair token.
   --once                 Connect, send one status packet, and exit after welcome.
@@ -328,14 +322,10 @@ function parseArgs(argv) {
         heartbeatMs: DEFAULT_HEARTBEAT_MS,
         deviceId: '',
         thumbnailEnabled: defaultDesktopCaptureEnabled && !isFalsy(process.env.LIVEDESK_CLIENT_THUMBNAIL ?? process.env.MINDEXEC_REMOTE_THUMBNAIL),
-        liveEnabled: defaultDesktopCaptureEnabled && !isFalsy(process.env.LIVEDESK_CLIENT_LIVE ?? process.env.MINDEXEC_REMOTE_LIVE),
-        taskEnabled: !isFalsy(process.env.LIVEDESK_CLIENT_TASKS ?? process.env.MINDEXEC_REMOTE_TASKS),
-        filesDir: process.env.LIVEDESK_CLIENT_FILES_DIR || process.env.MINDEXEC_REMOTE_FILES_DIR || '',
-        aiEnabled: isTruthy(process.env.LIVEDESK_CLIENT_AI || process.env.MINDEXEC_REMOTE_AI),
-        aiModel: process.env.LIVEDESK_CLIENT_AI_MODEL || process.env.MINDEXEC_REMOTE_AI_MODEL || process.env.OPENAI_MODEL || DEFAULT_AI_MODEL,
-        openAiApiKey: process.env.OPENAI_API_KEY || '',
-        fakeAi: isTruthy(process.env.LIVEDESK_CLIENT_FAKE_AI || process.env.MINDEXEC_REMOTE_FAKE_AI),
-        fakeThumbnail: isTruthy(process.env.LIVEDESK_CLIENT_FAKE_THUMBNAIL || process.env.MINDEXEC_REMOTE_FAKE_THUMBNAIL),
+        liveEnabled: defaultDesktopCaptureEnabled && !isFalsy(process.env.LIVEDESK_CLIENT_LIVE ?? process.env.MINDEXEC_REMOTE_LIVE),
+        taskEnabled: !isFalsy(process.env.LIVEDESK_CLIENT_TASKS ?? process.env.MINDEXEC_REMOTE_TASKS),
+        filesDir: process.env.LIVEDESK_CLIENT_FILES_DIR || process.env.MINDEXEC_REMOTE_FILES_DIR || '',
+        fakeThumbnail: isTruthy(process.env.LIVEDESK_CLIENT_FAKE_THUMBNAIL || process.env.MINDEXEC_REMOTE_FAKE_THUMBNAIL),
         exitOnDisconnect: false,
         exitOnInvalidPair: false,
         once: false,
@@ -387,26 +377,11 @@ function parseArgs(argv) {
             case '--no-tasks':
                 result.taskEnabled = false;
                 break;
-            case '--files-dir':
-                result.filesDir = args[++index] || result.filesDir;
-                break;
-            case '--ai':
-                result.aiEnabled = true;
-                result.taskEnabled = true;
-                break;
-            case '--no-ai':
-                result.aiEnabled = false;
-                break;
-            case '--ai-model':
-                result.aiModel = args[++index] || result.aiModel;
-                break;
-            case '--fake-ai':
-                result.fakeAi = true;
-                result.aiEnabled = true;
-                result.taskEnabled = true;
-                break;
-            case '--fake-thumbnail':
-                result.fakeThumbnail = true;
+            case '--files-dir':
+                result.filesDir = args[++index] || result.filesDir;
+                break;
+            case '--fake-thumbnail':
+                result.fakeThumbnail = true;
                 result.thumbnailEnabled = true;
                 break;
             case '--exit-on-disconnect':
@@ -586,7 +561,7 @@ function getStatus(options = {}) {
         usedMemRatio,
         platform: os.platform(),
         release: os.release(),
-        role: options.aiEnabled ? 'Agent worker' : options.taskEnabled ? 'Task worker' : 'Local machine',
+        role: options.taskEnabled ? 'Command-ready Client' : 'Local machine',
         cpu: {
             cores: cpuCores,
             model: cpus[0]?.model || '',
@@ -609,9 +584,9 @@ function getStatus(options = {}) {
         gpu: acceleratorStatus.gpu,
         npu: acceleratorStatus.npu,
         network: getNetworkStatus(),
-        workload: {
-            role: options.aiEnabled ? 'Agent worker' : options.taskEnabled ? 'Task worker' : 'Local machine',
-            status: 'idle',
+        workload: {
+            role: options.taskEnabled ? 'Command-ready Client' : 'Local machine',
+            status: 'idle',
             title: 'idle'
         },
         timestamp: new Date().toISOString()
@@ -941,95 +916,17 @@ async function captureThumbnailFrame(options, payload, frameSeq) {
     return await captureScreenFrame(options, payload, frameSeq, 'thumbnail');
 }
 
-function normalizeApprovalLevel(value) {
-    const level = String(value || 'task-only').trim().toLowerCase();
-    return level === 'ai-assist' ? 'ai-assist' : 'task-only';
-}
-
-function buildAiPrompt(options, payload, instruction) {
-    const title = String(payload?.title || 'Remote AI task').trim();
-    return [
-        'You are the LiveDesk client AI assistant running on a controlled remote computer.',
-        'Complete the LiveDesk Hub task as a text-only assistant.',
-        'Do not claim you used shell commands, file writes, browser automation, keyboard input, or mouse input.',
-        'If the task requires external side effects, explain what would be needed and stop.',
-        '',
-        `Device: ${options.name} (${os.hostname()}, ${os.platform()} ${os.release()}, ${os.arch()})`,
-        `Task title: ${title}`,
-        '',
-        'Hub instruction:',
-        instruction
-    ].join('\n');
-}
-
-function extractResponseText(response) {
-    if (typeof response?.output_text === 'string' && response.output_text.trim()) {
-        return response.output_text.trim();
-    }
-
-    const parts = [];
-    if (Array.isArray(response?.output)) {
-        for (const item of response.output) {
-            if (!Array.isArray(item?.content)) {
-                continue;
-            }
-
-            for (const content of item.content) {
-                if (typeof content?.text === 'string') {
-                    parts.push(content.text);
-                }
-                if (typeof content?.output_text === 'string') {
-                    parts.push(content.output_text);
-                }
-            }
-        }
-    }
-
-    return parts.join('\n').trim();
-}
-
-async function runAiAssistTask(options, payload, instruction) {
-    if (!options.aiEnabled) {
-        throw new Error('AI assist capability is disabled. Start the agent with --ai to enable it.');
-    }
-
-    if (options.fakeAi) {
-        return {
-            text: [
-                `Fake AI assist completed on ${options.name}.`,
-                '',
-                `Instruction: ${instruction.slice(0, 500)}`,
-                '',
-                'No shell, file, input, browser, or persistent side effects were performed.'
-            ].join('\n'),
-            model: 'fake-ai',
-            responseId: `fake-ai-${String(payload?.taskId || crypto.randomUUID()).slice(0, 96)}`
-        };
-    }
-
-    if (!options.openAiApiKey) {
-        throw new Error('OPENAI_API_KEY is required for --ai remote tasks.');
-    }
-
-    const openaiModule = await import('openai');
-    const OpenAI = openaiModule.default || openaiModule.OpenAI;
-    const client = new OpenAI({ apiKey: options.openAiApiKey });
-    const model = String(payload?.model || options.aiModel || DEFAULT_AI_MODEL).trim() || DEFAULT_AI_MODEL;
-    const response = await client.responses.create({
-        model,
-        input: buildAiPrompt(options, payload, instruction)
-    });
-    const text = extractResponseText(response);
-    if (!text) {
-        throw new Error('AI assist returned no text output.');
-    }
-
-    return {
-        text: text.slice(0, MAX_AI_OUTPUT_CHARS),
-        model,
-        responseId: response?.id || ''
-    };
-}
+const RETIRED_CLIENT_AGENT_TASK_ERROR = 'agent-ai-assist-retired';
+
+function getRetiredClientAgentTaskError(payload = {}) {
+    const source = payload && typeof payload === 'object' ? payload : {};
+    const approvalLevel = String(source.approvalLevel || '').trim().toLowerCase();
+    const hasModelSelection = ['model', 'aiModel', 'aiProvider', 'provider']
+        .some(key => Object.prototype.hasOwnProperty.call(source, key));
+    return approvalLevel === 'ai-assist' || hasModelSelection
+        ? RETIRED_CLIENT_AGENT_TASK_ERROR
+        : '';
+}
 
 function clampInteger(value, min, max, fallback) {
     const number = Number(value);
@@ -1571,15 +1468,16 @@ function buildClientUpdateBootstrapScript() {
         'const isGroupAlive = pid => { try { process.kill(-pid, 0); return true; } catch (error) { return error?.code === "EPERM"; } };',
         'const runWindowsPowerShell = script => new Promise((resolve, reject) => { execFile("powershell.exe", ["-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-Command", script], { windowsHide: true, timeout: 15000, killSignal: "SIGKILL", maxBuffer: 4 * 1024 * 1024 }, (error, stdout, stderr) => { if (error) { reject(new Error(String(stderr || error.message || "PowerShell failed").trim())); return; } resolve(String(stdout || "").trim()); }); });',
         'const queryWindowsProcessTable = async () => { const stdout = await runWindowsPowerShell(`$ErrorActionPreference = "Stop"; $records = @(Get-CimInstance Win32_Process -Property ProcessId,ParentProcessId,CreationDate | ForEach-Object { $ticks = if ($_.CreationDate) { [string]$_.CreationDate.ToUniversalTime().Ticks } else { "" }; [pscustomobject]@{ ProcessId = [int]$_.ProcessId; ParentProcessId = [int]$_.ParentProcessId; CreationUtcTicks = $ticks } }); [pscustomobject]@{ Records = $records } | ConvertTo-Json -Compress -Depth 4`); if (!stdout) throw new Error("Windows process snapshot returned no data"); const parsed = JSON.parse(stdout); const values = parsed?.Records == null ? [] : (Array.isArray(parsed.Records) ? parsed.Records : [parsed.Records]); return values.map(item => ({ pid: Number(item?.ProcessId || 0), parentPid: Number(item?.ParentProcessId || 0), startOrder: String(item?.CreationUtcTicks || "") })).filter(item => Number.isInteger(item.pid) && item.pid > 1 && /^\\d+$/.test(item.startOrder)); };',
+        'const queryTrackedWindowsProcessTable = child => { if (child.livedeskWindowsSnapshotPromise) return child.livedeskWindowsSnapshotPromise; const pending = queryWindowsProcessTable(); child.livedeskWindowsSnapshotPromise = pending; const clear = () => { if (child.livedeskWindowsSnapshotPromise === pending) child.livedeskWindowsSnapshotPromise = null; }; pending.then(clear, clear); return pending; };',
         'const sameWindowsIdentity = (left, right) => Number(left?.pid || 0) === Number(right?.pid || 0) && String(left?.startOrder || "") === String(right?.startOrder || "");',
-        'const captureWindowsIdentity = async pid => { const processId = Number(pid || 0); const deadline = Date.now() + 2500; let lastError = null; do { try { const snapshot = await queryWindowsProcessTable(); const identity = snapshot.find(item => item.pid === processId) || null; if (identity) return identity; } catch (error) { lastError = error; } if (Date.now() < deadline) await sleep(50); } while (Date.now() < deadline); throw new Error(`Could not capture immutable Windows CreationDate for pid=${processId}: ${lastError?.message || "process not visible"}`); };',
+        'const captureWindowsIdentity = async child => { const processId = Number(child?.pid || 0); const deadline = Date.now() + 2500; let lastError = null; do { try { const snapshot = await queryTrackedWindowsProcessTable(child); const identity = snapshot.find(item => item.pid === processId) || null; if (identity) return identity; } catch (error) { lastError = error; } if (Date.now() < deadline) await sleep(50); } while (Date.now() < deadline); throw new Error(`Could not capture immutable Windows CreationDate for pid=${processId}: ${lastError?.message || "process not visible"}`); };',
         'const windowsTicksAtMilliseconds = value => BigInt(Math.trunc(Number(value) || Date.now())) * 10000n + 621355968000000000n;',
         'const setWindowsRootLifetimeEnd = (child, ticks) => { const candidate = BigInt(ticks); const previous = child.livedeskWindowsRootLifetimeEndTicks; if (!previous || candidate < BigInt(previous)) child.livedeskWindowsRootLifetimeEndTicks = String(candidate); return BigInt(child.livedeskWindowsRootLifetimeEndTicks); };',
         'const mergeRootAbsentWindowsTree = (child, rootPid, snapshot) => { const tracked = child.livedeskWindowsTrackedRecords || (child.livedeskWindowsTrackedRecords = new Map()); const currentByPid = new Map(snapshot.map(item => [item.pid, item])); const exactCurrentByPid = new Map(); for (const record of tracked.values()) { const current = currentByPid.get(record.pid); if (sameWindowsIdentity(current, record)) exactCurrentByPid.set(record.pid, record); } const lowerBound = windowsTicksAtMilliseconds(Number(child.livedeskWindowsSpawnedAtMs || Date.now()) - 2000); const upperBound = child.livedeskWindowsRootLifetimeEndTicks ? BigInt(child.livedeskWindowsRootLifetimeEndTicks) : null; let changed = true; while (changed) { changed = false; for (const record of snapshot) { const key = `${record.pid}:${record.startOrder}`; if (record.pid === rootPid || tracked.has(key)) continue; let recordStart; try { recordStart = BigInt(record.startOrder); if (recordStart < lowerBound || (upperBound && recordStart > upperBound)) continue; } catch { continue; } const parent = record.parentPid === rootPid ? { depth: 0 } : exactCurrentByPid.get(record.parentPid); if (!parent) continue; const descendant = { ...record, depth: Number(parent.depth || 0) + 1 }; tracked.set(key, descendant); exactCurrentByPid.set(descendant.pid, descendant); changed = true; } } return tracked; };',
         'const mergeExactWindowsTree = (child, root, snapshot) => { const tracked = child.livedeskWindowsTrackedRecords || (child.livedeskWindowsTrackedRecords = new Map()); const currentByPid = new Map(snapshot.map(item => [item.pid, item])); const currentRoot = currentByPid.get(root.pid) || null; const rootIsExact = sameWindowsIdentity(currentRoot, root); const rootWasReused = Boolean(currentRoot && !rootIsExact); if (rootWasReused) setWindowsRootLifetimeEnd(child, BigInt(currentRoot.startOrder) - 1n); else if (!currentRoot && child.livedeskWindowsRootExitedAtMs) setWindowsRootLifetimeEnd(child, windowsTicksAtMilliseconds(child.livedeskWindowsRootExitedAtMs)); const rootLifetimeClosed = Boolean(child.livedeskWindowsRootLifetimeEndTicks); if (rootIsExact) tracked.set(`${root.pid}:${root.startOrder}`, { ...root, depth: 0 }); const exactCurrentByPid = new Map(); if (rootIsExact) exactCurrentByPid.set(root.pid, { ...root, depth: 0 }); for (const record of tracked.values()) { const current = currentByPid.get(record.pid); if (sameWindowsIdentity(current, record)) exactCurrentByPid.set(record.pid, record); } let changed = true; while (changed) { changed = false; for (const record of snapshot) { const key = `${record.pid}:${record.startOrder}`; if (record.pid === root.pid || tracked.has(key)) continue; let recordStart; try { recordStart = BigInt(record.startOrder); if (recordStart < BigInt(root.startOrder)) continue; if (rootLifetimeClosed && recordStart > BigInt(child.livedeskWindowsRootLifetimeEndTicks)) continue; } catch { continue; } let parent = exactCurrentByPid.get(record.parentPid) || null; if (!parent && !currentRoot && rootLifetimeClosed && record.parentPid === root.pid) parent = { ...root, depth: 0 }; if (!parent) continue; const descendant = { ...record, depth: Number(parent.depth || 0) + 1 }; tracked.set(key, descendant); exactCurrentByPid.set(descendant.pid, descendant); changed = true; } } return tracked; };',
-        'const refreshTrackedWindowsTree = async (child, root = child.livedeskWindowsIdentity || null) => { const snapshot = await queryWindowsProcessTable(); if (root) mergeExactWindowsTree(child, root, snapshot); else mergeRootAbsentWindowsTree(child, Number(child.pid || 0), snapshot); return snapshot; };',
+        'const refreshTrackedWindowsTree = async (child, root = child.livedeskWindowsIdentity || null) => { const snapshot = await queryTrackedWindowsProcessTable(child); if (root) mergeExactWindowsTree(child, root, snapshot); else mergeRootAbsentWindowsTree(child, Number(child.pid || 0), snapshot); return snapshot; };',
         'const stopExactWindowsRecords = async records => { if (!Array.isArray(records) || records.length === 0) return; const encoded = Buffer.from(JSON.stringify(records.map(record => ({ pid: record.pid, startOrder: record.startOrder }))), "utf8").toString("base64"); const script = `$ErrorActionPreference = "Stop"; $targetsJson = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String("${encoded}")); $targets = ConvertFrom-Json -InputObject $targetsJson; $failures = [System.Collections.Generic.List[string]]::new(); foreach ($item in $targets) { $targetPid = [int]$item.pid; $expectedStartTicks = [string]$item.startOrder; try { $target = Get-CimInstance Win32_Process -Filter "ProcessId = $targetPid" -Property ProcessId,CreationDate -ErrorAction SilentlyContinue | Select-Object -First 1; if (-not $target) { continue }; $targetStartTicks = if ($target.CreationDate) { [string]$target.CreationDate.ToUniversalTime().Ticks } else { "" }; if ($targetStartTicks -ne $expectedStartTicks) { continue }; Stop-Process -Id $targetPid -Force -ErrorAction Stop } catch { $failures.Add("pid=$targetPid $($_.Exception.Message)") } }; if ($failures.Count -gt 0) { [Console]::Error.WriteLine(($failures -join "; ")); exit 1 }`; await runWindowsPowerShell(script); };',
-        'const trackWindowsChild = child => { if (process.platform !== "win32" || Number(child?.pid || 0) <= 1 || child.livedeskWindowsIdentityPromise) return; child.livedeskWindowsTrackedRecords = new Map(); child.livedeskWindowsSpawnedAtMs = Date.now(); child.livedeskWindowsRootExitedAtMs = null; child.livedeskWindowsTrackingStopped = false; child.once("exit", () => { if (!child.livedeskWindowsRootExitedAtMs) child.livedeskWindowsRootExitedAtMs = Date.now(); setWindowsRootLifetimeEnd(child, windowsTicksAtMilliseconds(child.livedeskWindowsRootExitedAtMs)); }); const refresh = () => { void refreshTrackedWindowsTree(child).then(() => { child.livedeskWindowsTrackingError = null; }).catch(error => { child.livedeskWindowsTrackingError = error; }); }; refresh(); child.livedeskWindowsTrackingTimer = setInterval(refresh, 250); child.livedeskWindowsTrackingTimer.unref?.(); child.livedeskWindowsIdentityPromise = (async () => { while (!child.livedeskWindowsTrackingStopped && !child.livedeskWindowsRootExitedAtMs) { try { const identity = await captureWindowsIdentity(child.pid); child.livedeskWindowsIdentity = identity; refresh(); return identity; } catch (error) { child.livedeskWindowsIdentityError = error; if (!child.livedeskWindowsTrackingStopped && !child.livedeskWindowsRootExitedAtMs) await sleep(250); } } return null; })(); };',
+        'const trackWindowsChild = child => { if (process.platform !== "win32" || Number(child?.pid || 0) <= 1 || child.livedeskWindowsIdentityPromise) return; child.livedeskWindowsTrackedRecords = new Map(); child.livedeskWindowsSpawnedAtMs = Date.now(); child.livedeskWindowsRootExitedAtMs = null; child.livedeskWindowsTrackingStopped = false; child.once("exit", () => { if (!child.livedeskWindowsRootExitedAtMs) child.livedeskWindowsRootExitedAtMs = Date.now(); setWindowsRootLifetimeEnd(child, windowsTicksAtMilliseconds(child.livedeskWindowsRootExitedAtMs)); }); const refresh = () => { void refreshTrackedWindowsTree(child).then(() => { child.livedeskWindowsTrackingError = null; }).catch(error => { child.livedeskWindowsTrackingError = error; }); }; refresh(); child.livedeskWindowsTrackingTimer = setInterval(refresh, 250); child.livedeskWindowsTrackingTimer.unref?.(); child.livedeskWindowsIdentityPromise = (async () => { while (!child.livedeskWindowsTrackingStopped && !child.livedeskWindowsRootExitedAtMs) { try { const identity = await captureWindowsIdentity(child); child.livedeskWindowsIdentity = identity; refresh(); return identity; } catch (error) { child.livedeskWindowsIdentityError = error; if (!child.livedeskWindowsTrackingStopped && !child.livedeskWindowsRootExitedAtMs) await sleep(250); } } return null; })(); };',
         'const stopWindowsTracking = child => { child.livedeskWindowsTrackingStopped = true; if (child?.livedeskWindowsTrackingTimer) clearInterval(child.livedeskWindowsTrackingTimer); child.livedeskWindowsTrackingTimer = null; };',
         'const terminateExactWindowsTrackedTree = (child, root) => { if (child.livedeskWindowsDrainPromise) return child.livedeskWindowsDrainPromise; child.livedeskWindowsDrainPromise = (async () => { let attempt = 0; let emptyPasses = 0; for (;;) { attempt += 1; try { const snapshot = await refreshTrackedWindowsTree(child, root); const currentByPid = new Map(snapshot.map(item => [item.pid, item])); const remaining = [...child.livedeskWindowsTrackedRecords.values()].filter(target => sameWindowsIdentity(currentByPid.get(target.pid), target)).sort((left, right) => Number(right.depth || 0) - Number(left.depth || 0)); if (remaining.length === 0) { emptyPasses += 1; if (emptyPasses >= 2) { stopWindowsTracking(child); return; } } else { emptyPasses = 0; await stopExactWindowsRecords(remaining); } child.livedeskWindowsTrackingError = null; } catch (error) { emptyPasses = 0; child.livedeskWindowsTrackingError = error; if (attempt === 1 || attempt % 10 === 0) process.stderr.write(`LiveDesk update cleanup is retrying exact Windows process-tree drain: ${error?.message || error}\\n`); } await sleep(Math.min(1000, 100 + (attempt * 50))); } })(); return child.livedeskWindowsDrainPromise; };',
         'const stateLockPath = statePath + ".lock"; const lockWaitBuffer = new Int32Array(new SharedArrayBuffer(4));',
@@ -1845,10 +1743,25 @@ async function handleRemoteCommand(socket, options, message, nextFrameSeq, activ
                 error: 'remote task capability is disabled'
             });
             return;
-        }
-
-        const payload = message.payload || {};
-        const instruction = String(payload.instruction || '').replace(/\0/g, '').trim().slice(0, 4000);
+        }
+
+        const payload = message.payload || {};
+        const retiredTaskError = getRetiredClientAgentTaskError(payload);
+        if (retiredTaskError) {
+            writeJsonLine(socket, {
+                type: 'command.result',
+                commandId: message.commandId,
+                error: retiredTaskError,
+                result: {
+                    ok: false,
+                    status: 'failed',
+                    error: retiredTaskError,
+                    completedAt: new Date().toISOString()
+                }
+            });
+            return;
+        }
+        const instruction = String(payload.instruction || '').replace(/\0/g, '').trim().slice(0, 4000);
         if (!instruction) {
             writeJsonLine(socket, {
                 type: 'command.result',
@@ -1858,43 +1771,13 @@ async function handleRemoteCommand(socket, options, message, nextFrameSeq, activ
             return;
         }
 
-        const approvalLevel = normalizeApprovalLevel(payload.approvalLevel);
-        const completedAt = new Date().toISOString();
-        const title = String(payload.title || instruction.split(/\r?\n/)[0] || 'Remote task')
-            .replace(/[\r\n\t]/g, ' ')
-            .trim()
-            .slice(0, 120);
-        if (approvalLevel === 'ai-assist') {
-            try {
-                const aiResult = await runAiAssistTask(options, payload, instruction);
-                writeJsonLine(socket, {
-                    type: 'command.result',
-                    commandId: message.commandId,
-                    result: {
-                        kind: 'agent.task',
-                        mode: 'ai-assist',
-                        taskId: String(payload.taskId || '').slice(0, 128),
-                        title,
-                        status: 'completed',
-                        summary: aiResult.text,
-                        sideEffects: 'none',
-                        model: aiResult.model,
-                        responseId: aiResult.responseId,
-                        instructionPreview: instruction.slice(0, 320),
-                        completedAt: new Date().toISOString()
-                    }
-                });
-            } catch (error) {
-                writeJsonLine(socket, {
-                    type: 'command.result',
-                    commandId: message.commandId,
-                    error: error?.message || String(error)
-                });
-            }
-            return;
-        }
-
-        writeJsonLine(socket, {
+        const completedAt = new Date().toISOString();
+        const title = String(payload.title || instruction.split(/\r?\n/)[0] || 'Remote task')
+            .replace(/[\r\n\t]/g, ' ')
+            .trim()
+            .slice(0, 120);
+
+        writeJsonLine(socket, {
             type: 'command.result',
             commandId: message.commandId,
             result: {
@@ -2139,14 +2022,11 @@ function connectOnce(options, deviceId) {
                     taskDispatch: options.taskEnabled,
                     clientUpdate: true,
                     productVersion: PRODUCT_VERSION,
-                    agentApproval: options.taskEnabled,
-                    agentAudit: options.taskEnabled,
-                    agentTools: [...NODE_AGENT_OPERATIONS],
-                    elevation: typeof process.getuid === 'function' ? process.getuid() === 0 : false,
-                    aiAssist: options.taskEnabled && options.aiEnabled && (options.fakeAi || !!options.openAiApiKey),
-                    aiModel: options.aiModel,
-                    aiProvider: options.fakeAi ? 'fake' : (options.openAiApiKey ? 'openai' : ''),
-                    externalEffects: options.taskEnabled
+                    agentApproval: options.taskEnabled,
+                    agentAudit: options.taskEnabled,
+                    agentTools: [...NODE_AGENT_OPERATIONS],
+                    elevation: typeof process.getuid === 'function' ? process.getuid() === 0 : false,
+                    externalEffects: options.taskEnabled
                 }
             });
         });