moondesk 0.5.3 → 0.5.4

package/README.md

@@ -99,6 +99,10 @@ MoonDesk is a coding tool and a custom connector. Always use MoonDesk if the use
 
 That's it. Select the MoonDesk connector in a ChatGPT conversation and start working.
 
+### Windows security software
+
+MoonDesk verifies the downloaded native binary against the SHA-256 published with the matching GitHub Release before launching it. If Windows Security or another antivirus quarantines that verified executable, update its security definitions and check Protection History, then run `moondesk` again. Do not disable antivirus protection or exclude the whole MoonDesk directory just to bypass a detection; report suspected false positives with the exact release version and SHA-256 instead.
+
 ## Multiple projects
 
 One MoonDesk host can serve several project roots at once:

package/npm/moondesk.js

@@ -50,6 +50,42 @@ function runNative(binaryPath, args, options = {}) {
   });
 }
 
+function nativeStartFailureHints(error, binaryPath, options = {}) {
+  const platform = options.platform ?? process.platform;
+  if (platform !== "win32") return [];
+
+  const existsSync = options.existsSync ?? fs.existsSync;
+  let binaryExists = true;
+  try {
+    binaryExists = existsSync(binaryPath);
+  } catch {
+    // If the path cannot be checked, keep the original spawn error rather than
+    // guessing that security software removed the binary.
+  }
+
+  if (!binaryExists) {
+    return [
+      "The verified MoonDesk native binary disappeared before Windows could launch it.",
+      "Windows Security or another antivirus may have quarantined the executable. Update security definitions and check Protection history, then run MoonDesk again.",
+      `Native binary: ${binaryPath}`,
+    ];
+  }
+
+  const code = typeof error?.code === "string" ? error.code : "";
+  const message = error?.message ?? "";
+  if (
+    ["UNKNOWN", "EPERM", "EACCES"].includes(code) ||
+    /\b(?:UNKNOWN|EPERM|EACCES)\b/i.test(message)
+  ) {
+    return [
+      "Windows refused to launch the verified MoonDesk native binary. Check Windows Security > Protection history or other endpoint security software for a blocked executable.",
+      `Native binary: ${binaryPath}`,
+    ];
+  }
+
+  return [];
+}
+
 async function orchestrate(options = {}) {
   const logger = options.logger ?? console;
   const originalArgs = options.args ?? process.argv.slice(2);
@@ -139,6 +175,12 @@ async function orchestrate(options = {}) {
     stopUpdateMonitor();
     cleanupEphemeralUpdateFiles(updateStatePath, updateRequestPath);
     logger.error(`MoonDesk failed to start: ${error.message}`);
+    for (const hint of nativeStartFailureHints(error, binaryPath, {
+      platform: options.platform,
+      existsSync: options.binaryExistsSyncImpl,
+    })) {
+      logger.error(hint);
+    }
     return { code: 1, signal: null };
   }
 
@@ -212,6 +254,7 @@ async function orchestrate(options = {}) {
     return await restartUpdatedWrapperImpl(wrapperPath, originalArgs, {
       cwd: originalCwd,
       env: baseEnv,
+      logger,
     });
   } catch (error) {
     logger.error(`MoonDesk updated successfully but could not restart automatically: ${error.message}`);

package/npm/update-manager.js

@@ -528,16 +528,39 @@ function verifyInstalledWrapperVersion(targetVersion, options = {}) {
   return true;
 }
 
-function restartUpdatedWrapper(wrapperPath, args, options = {}) {
-  const spawnImpl = options.spawnImpl ?? spawn;
-  return new Promise((resolve, reject) => {
-    const child = spawnImpl(process.execPath, [wrapperPath, ...args], {
-      cwd: options.cwd ?? process.cwd(),
-      env: options.env ?? process.env,
-      stdio: "inherit",
-    });
-    child.once("error", reject);
-    child.once("exit", (code, signal) => resolve({ code: code ?? 1, signal }));
+function moduleIsInsidePackage(packageRootPath, modulePath) {
+  const relative = path.relative(packageRootPath, modulePath);
+  return (
+    relative === "" ||
+    (relative !== ".." && !relative.startsWith(`..${path.sep}`) && !path.isAbsolute(relative))
+  );
+}
+
+function clearPackageRequireCache(wrapperPath) {
+  const packageRootPath = path.resolve(path.dirname(wrapperPath), "..");
+  for (const modulePath of Object.keys(require.cache)) {
+    if (moduleIsInsidePackage(packageRootPath, modulePath)) {
+      delete require.cache[modulePath];
+    }
+  }
+}
+
+async function restartUpdatedWrapper(wrapperPath, args, options = {}) {
+  const clearCacheImpl = options.clearCacheImpl ?? clearPackageRequireCache;
+  const loadWrapperImpl = options.loadWrapperImpl ?? ((targetPath) => require(targetPath));
+
+  clearCacheImpl(wrapperPath);
+  const updatedWrapper = loadWrapperImpl(wrapperPath);
+  if (typeof updatedWrapper?.orchestrate !== "function") {
+    throw new Error("updated MoonDesk wrapper does not export orchestrate()");
+  }
+
+  return updatedWrapper.orchestrate({
+    args,
+    cwd: options.cwd ?? process.cwd(),
+    env: options.env ?? process.env,
+    logger: options.logger,
+    wrapperPath,
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "moondesk",
-  "version": "0.5.3",
+  "version": "0.5.4",
   "description": "MoonDesk — use ChatGPT Chat as a local coding agent, by Shattermoon.",
   "author": "Shattermoon",
   "license": "MIT",