mcp-pacemaker 1.3.1

package/SECURITY.md

@@ -0,0 +1,110 @@
+# Security Policy
+
+## Supported versions
+
+Install the newest patch in the selected maintained line. Compatibility fixtures for older
+releases preserve their historical behavior; they do not make those releases supported.
+
+| Version | Supported |
+| ------- | --------- |
+| Newest 2.x patch | Current security and compatibility maintenance |
+| Newest 1.3.x patch, starting with 1.3.1 | Legacy security and compatibility fixes through March 31, 2027 |
+| 1.0.x-1.2.x, 1.3.0, and superseded patches | No |
+
+The legacy line does not receive 2.x batching or new features. Its `legacy` npm channel is an
+explicit opt-in, not the default for new users. After the legacy support window, migrate to
+the current line. Node 20 compatibility is not a promise to fix vulnerabilities in an
+end-of-life Node runtime; use a maintained Node release.
+
+## Reporting a vulnerability
+
+Please report security issues privately through
+[GitHub Security Advisories](https://github.com/girishkvs/mcp-pacemaker/security/advisories/new).
+Do not open a public issue for a vulnerability.
+
+Include the version, your platform, what an attacker can achieve, and steps to reproduce.
+You can expect an acknowledgement within 7 days and an assessment within 30.
+
+## Threat model
+
+The bridge is a local service holding long-lived credentials for the MCP servers it manages,
+so a few properties matter more than usual:
+
+- **It binds to `127.0.0.1` by default.** Passing `--host 0.0.0.0` exposes every configured
+  server, and the credentials injected on their behalf, to anything that can reach the port.
+  Do not do this on an untrusted network.
+- **There is no user authentication on the proxy path.** Any local process that can open the
+  port can use the bridged servers. Treat access to the port as equivalent to access to every
+  credential the bridge holds.
+- **Administrative endpoints require a nonce.** `/admin/*` is guarded by a random nonce written
+  to `~/.mcp-pacemaker/admin.nonce` on startup, readable only by the user running the bridge.
+  This covers `/admin/reload`, which re-reads `servers.json` — see the note below on why that
+  file is a trusted input.
+- **Pooling controls are opt-in configuration writes.** The dashboard's Enable/Disable/Undo
+  buttons and the equivalent CLI actions require the admin nonce. Browser writes also require
+  a matching Origin when provided. Only `sharing` and `minWarm` can be changed; commands,
+  environment and auth settings are not accepted. Requests are bounded to 4 KiB.
+  Edits require a content revision, preserve unrelated JSON, keep a backup and replace the file
+  atomically. Undo restores the previous bytes only while that revision is still current.
+  These checks detect stale clients and observed editor changes; a non-cooperating external
+  writer can still race the final filesystem check/rename because portable filesystem CAS
+  is unavailable. Do not edit the file concurrently with an admin action.
+- **Timeout is not proof of rollback.** Pooling operations have a nine-second budget and
+  shared cancellation before file-replacement ownership. Once replacement has started, it
+  can finish after cancellation or timeout. Uncertain and late-committed outcomes are reported
+  explicitly; saved state is reloaded, including after worker failure with config watching off.
+  Reconciliation failures are logged, not treated as success. Operations are never replayed,
+  and a failed worker refuses subsequent writes until the bridge restarts.
+- **Config backups and Undo contain config data.** `servers.json.bak` has the previous config
+  and is protected like the source file, including its Windows DACL. Temporary files are given
+  the same permissions before data is written. Bounded in-memory Undo records can include
+  credential-bearing configuration; they are not returned to the browser or written elsewhere.
+- **Windows timestamp changes are not permission changes by themselves.** Automatic writes
+  capture native non-audit security sections, audit policy and file attributes. A changed
+  timestamp is accepted only when that verified state, content and file identity still match.
+  Unreadable audit policy is refused before staging; security that cannot be preserved on both
+  replacement and backup files is also refused. No automatic elevation or security-policy
+  changes are performed. The built-in audit-read API uses only rights assigned to the account.
+  Inspection uses the bundled own-source .NET Framework helper, with no runtime compilation,
+  download or PowerShell fallback. Build metadata checks source/binary consistency; it is not
+  code signing or protection against replacement of the entire package.
+- **Shared mode is not a user-security boundary.** It is opt-in for stateless tools with one
+  common credential context. Only a tools capability derived from the real upstream is exposed;
+  unsupported client capabilities and protocol methods fail explicitly. IDs, progress,
+  cancellation and cursors are scoped to virtual sessions, but a tool implementation can still
+  keep hidden process-global state. The operator must confirm that sharing that state is safe.
+  Do not enable it for separate users, accounts, workspaces or conversations. Dispatched work
+  is never replayed automatically, and deleting one session does not prove its tool stopped.
+- **The bridge reloads `servers.json` when it changes.** A running bridge watches its config and
+  applies edits without a restart, so anything that can write that file can change what the
+  bridge runs, at the moment it writes — not only at the next start. The file is already a
+  trusted input for the reason below; watching it widens *when* that trust is exercised. Set
+  `MCP_CONFIG_WATCH=0` to require an explicit `mcp-pacemaker reload` instead.
+- **Health probing makes requests you did not.** With `MCP_HEALTH_INTERVAL_MS` set, the bridge
+  periodically sends an `initialize` to each HTTP server, carrying that server's configured
+  credential. It is off by default for exactly that reason. stdio servers are never probed.
+- **Tokens live in memory only.** Credentials obtained from an auth command are cached in the
+  process and never written to disk. The dashboard shows time-to-expiry, never the value.
+- **Session initialization metadata is written to disk.** To re-establish a session after a
+  restart, `~/.mcp-pacemaker/sessions.json` records session ids and the `initialize` parameters
+  the client sent (protocol version, declared capabilities, client name and any extra fields).
+  Business requests and tool results are not recorded there. Treat it as sensitive because
+  client-defined initialization fields can contain additional data. Delete it to drop all resumable sessions, or
+  run with `MCP_RESUME=0` to never write it. Records past `MCP_RESUME_TTL_MS` (24h by default)
+  are refused and pruned, so the file does not accumulate indefinitely.
+- **The log records activity, not content.** `~/.mcp-pacemaker/bridge.log` holds the same lines
+  the dashboard shows: server names, session ids, pids, timings and errors. It does not contain
+  credentials, request bodies or tool results, though a server's own stderr is included and an
+  error message a server chooses to print could carry anything. It is rolled at
+  `MCP_LOG_MAX_BYTES`; set that to `0` to disable the file entirely.
+- **Auth commands run in a shell.** `servers.json` is a trusted input: anything in an `auth`
+  command executes with your privileges. Do not load a `servers.json` you did not write.
+- **Client configs are rewritten in place.** `install` backs each file up to `<file>.bak`
+  before writing, and `plan` shows the exact change first.
+
+## Out of scope
+
+- Vulnerabilities in the MCP servers the bridge launches or proxies to.
+- Consequences of deliberately binding to a non-loopback address.
+- Anything requiring an attacker to already have write access to your `servers.json` or your
+  host's MCP configuration.

package/THIRD_PARTY_NOTICES.txt

@@ -0,0 +1,366 @@
+MCP Pacemaker - third-party notices
+
+Dashboard entries come from retained Rollup modules and observed generated CSS.
+Runtime supplements bind upstream license text to reviewed installed producer versions.
+ui/dist/third-party-manifest.json records module and artifact hashes.
+The project itself remains under its separate MIT LICENSE.
+This inventory is technical attribution evidence, not a legal compliance certification.
+
+CLI dependencies are installed separately by npm, not copied into this UI bundle.
+Attribution supplied by those packages remains in their installed package directories.
+This UI inventory does not audit every separately resolved CLI dependency.
+Those dependencies are not represented as bundled UI code in this notice.
+
+Bundled dashboard code
+
+==============================================================================
+lucide-react@0.462.0
+Declared license: ISC
+
+--- LICENSE ---
+ISC License
+
+Copyright (c) for portions of Lucide are held by Cole Bemis 2013-2022 as part of Feather (MIT). All other copyright (c) for Lucide are held by Lucide Contributors 2022.
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+--- upstream/feather-LICENSE.txt ---
+Source: https://raw.githubusercontent.com/feathericons/feather/1b002399e8758fb2bccea4d07312dc9e0f43dcb8/LICENSE
+Lucide's LICENSE identifies Feather MIT portions. Its bundled terminal icon retains the polyline and line in this upstream revision; this is a license source, not a claim that the Feather npm package is installed.
+
+The MIT License (MIT)
+
+Copyright (c) 2013-2023 Cole Bemis
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- Notices retained from contributing source files ---
+/**
+ * @license lucide-react v0.462.0 - ISC
+ *
+ * This source code is licensed under the ISC license.
+ * See the LICENSE file in the root directory of this source tree.
+ */
+
+==============================================================================
+react@18.3.1
+Declared license: MIT
+
+--- LICENSE ---
+MIT License
+
+Copyright (c) Facebook, Inc. and its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- Notices retained from contributing source files ---
+/**
+ * @license React
+ * react-jsx-runtime.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+/**
+ * @license React
+ * react.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+==============================================================================
+react-dom@18.3.1
+Declared license: MIT
+
+--- LICENSE ---
+MIT License
+
+Copyright (c) Facebook, Inc. and its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- Notices retained from contributing source files ---
+/**
+ * @license React
+ * react-dom.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+==============================================================================
+scheduler@0.23.2
+Declared license: MIT
+
+--- LICENSE ---
+MIT License
+
+Copyright (c) Facebook, Inc. and its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- Notices retained from contributing source files ---
+/**
+ * @license React
+ * scheduler.production.min.js
+ *
+ * Copyright (c) Facebook, Inc. and its affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */
+
+==============================================================================
+tailwindcss@3.4.19
+Declared license: MIT
+
+--- LICENSE ---
+MIT License
+
+Copyright (c) Tailwind Labs, Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- lib/css/LICENSE ---
+MIT License
+
+Copyright (c) Nicolas Gallagher
+Copyright (c) Jonathan Neal
+Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)
+Copyright (c) Adam Wathan
+Copyright (c) Jonathan Reinink
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+==============================================================================
+vite@7.3.6
+Declared license: MIT
+
+--- LICENSE.md: # Vite core license ---
+# Vite core license
+Vite is released under the MIT license:
+
+MIT License
+
+Copyright (c) 2019-present, VoidZero Inc. and Vite contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- LICENSE.md: ## @rollup/plugin-alias, @rollup/plugin-commonjs, @rollup/plugin-dynamic-import-vars, @rollup/pluginutils ---
+## @rollup/plugin-alias, @rollup/plugin-commonjs, @rollup/plugin-dynamic-import-vars, @rollup/pluginutils
+License: MIT
+By: Johannes Stein
+Repository: https://github.com/rollup/plugins
+
+License: MIT
+By: Rich Harris
+Repository: https://github.com/rollup/plugins
+
+License: MIT
+By: LarsDenBakker
+Repository: https://github.com/rollup/plugins
+
+License: MIT
+By: Rich Harris
+Repository: https://github.com/rollup/plugins
+
+> The MIT License (MIT)
+> 
+> Copyright (c) 2019 RollupJS Plugin Contributors (https://github.com/rollup/plugins/graphs/contributors)
+> 
+> Permission is hereby granted, free of charge, to any person obtaining a copy
+> of this software and associated documentation files (the "Software"), to deal
+> in the Software without restriction, including without limitation the rights
+> to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+> copies of the Software, and to permit persons to whom the Software is
+> furnished to do so, subject to the following conditions:
+> 
+> The above copyright notice and this permission notice shall be included in
+> all copies or substantial portions of the Software.
+> 
+> THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+> IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+> FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+> AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+> LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+> OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+> THE SOFTWARE.
+
+---------------------------------------
+
+Separately installed runtime supplements (not UI-bundled)
+
+==============================================================================
+yoga-layout@3.2.1
+Declared license: MIT
+
+--- upstream/yoga-LICENSE.txt ---
+Source: https://raw.githubusercontent.com/facebook/yoga/042f5013152eb81c1552dec945b88f7b95ca350f/LICENSE
+Supplement for the separately npm-installed runtime package, whose published source refers to this upstream LICENSE. This package is not bundled into the dashboard.
+
+MIT License
+
+Copyright (c) Facebook, Inc. and its affiliates.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.
+
+--- Notices retained from contributing source files ---
+/**
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ *
+ * @format
+ */
+/**
+ * Copyright (c) Meta Platforms, Inc. and affiliates.
+ *
+ * This source code is licensed under the MIT license found in the
+ * LICENSE file in the root directory of this source tree.
+ */

package/autostart/windows/launcher.vbs

@@ -0,0 +1,11 @@
+' Launches the mcp-pacemaker supervisor hidden (no console window).
+' Invoked by the "McpPacemaker" scheduled task. Arg 0 = port (optional, default 8791).
+Dim shell, fso, here, root, ps1, port
+Set shell = CreateObject("WScript.Shell")
+Set fso = CreateObject("Scripting.FileSystemObject")
+here = fso.GetParentFolderName(WScript.ScriptFullName)                 ' autostart\windows
+root = fso.GetParentFolderName(fso.GetParentFolderName(here))          ' repo root
+ps1 = fso.BuildPath(root, "supervisor\supervise.ps1")
+port = "8791"
+If WScript.Arguments.Count > 0 Then port = WScript.Arguments(0)
+shell.Run "pwsh.exe -NoProfile -ExecutionPolicy Bypass -WindowStyle Hidden -File """ & ps1 & """ -Port " & port, 0, False

package/autostart/windows/register-task.ps1

@@ -0,0 +1,63 @@
+<#
+.SYNOPSIS  Registers the "McpPacemaker" per-user scheduled task (Windows), no admin required.
+.DESCRIPTION
+  Uses the Task Scheduler COM API (works even where the ScheduledTasks PS module reports
+  "Invalid namespace" and schtasks.exe /Create needs elevation). Starts the supervisor at
+  logon AND on workstation unlock (unlock covers sleep/wake, where logon never fires).
+.PARAMETER Port  Port to pass through to the supervisor (default 8791).
+.PARAMETER TaskName  Selected per-user task name (default McpPacemaker-<port>).
+.OUTPUTS
+  Registration result.
+.EXAMPLE
+  .\register-task.ps1 -Port 8791
+#>
+[CmdletBinding()]
+param([ValidateRange(1, 65535)][int]$Port = 8791, [string]$TaskName = "McpPacemaker-$Port")
+
+$ErrorActionPreference = 'Stop'
+try {
+  $installationRoot = (Resolve-Path -LiteralPath (Join-Path -Path $PSScriptRoot -ChildPath '..\..')).Path
+  if ($installationRoot -match '(^|[\\/])_npx([\\/]|$)') {
+    throw 'Cache-backed npx roots cannot host autostart. Install in a durable root first.'
+  }
+  $vbs  = Join-Path $PSScriptRoot 'launcher.vbs'
+  $user = "$env:USERDOMAIN\$env:USERNAME"
+
+  $svc = New-Object -ComObject Schedule.Service
+  $svc.Connect()
+  $folder = $svc.GetFolder('\')
+
+  $def = $svc.NewTask(0)
+  $def.RegistrationInfo.Description = "Starts the mcp-pacemaker bridge supervisor (port $Port) at logon and on workstation unlock."
+  $def.RegistrationInfo.Author = $user
+
+  $def.Settings.Enabled = $true
+  $def.Settings.StartWhenAvailable = $true
+  $def.Settings.DisallowStartIfOnBatteries = $false
+  $def.Settings.StopIfGoingOnBatteries = $false
+  $def.Settings.ExecutionTimeLimit = 'PT0S'
+  $def.Settings.RestartCount = 3
+  $def.Settings.RestartInterval = 'PT1M'
+  $def.Settings.MultipleInstances = 2            # IgnoreNew
+
+  $logon = $def.Triggers.Create(9)               # TASK_TRIGGER_LOGON
+  $logon.UserId = $user
+  $unlock = $def.Triggers.Create(11)             # TASK_TRIGGER_SESSION_STATE_CHANGE
+  $unlock.StateChange = 8                         # TASK_SESSION_UNLOCK
+  $unlock.UserId = $user
+
+  $action = $def.Actions.Create(0)               # TASK_ACTION_EXEC
+  $action.Path = 'wscript.exe'
+  $action.Arguments = "`"$vbs`" $Port"
+
+  $def.Principal.UserId = $user
+  $def.Principal.LogonType = 3                    # interactive token (no stored password)
+  $def.Principal.RunLevel = 0                     # least privilege (so user CLI auth context works)
+
+  $folder.RegisterTaskDefinition($TaskName, $def, 6, $user, $null, 3) | Out-Null
+  Write-Output "OK: registered '$TaskName' (logon + unlock; $user; port $Port)"
+}
+catch {
+  Write-Output "FAIL: $($_.Exception.Message)"
+  exit 1
+}