palmier 0.5.3 → 0.5.5

package/README.md

@@ -53,6 +53,7 @@ All `palmier` commands should be run from a dedicated Palmier root directory (e.
 | `palmier serve` | Run the persistent RPC handler (default command) |
 | `palmier restart` | Restart the palmier serve daemon |
 | `palmier run <task-id>` | Execute a specific task |
+| `palmier uninstall` | Stop daemon and remove all scheduled tasks |
 
 ## Setup
 
@@ -84,13 +85,15 @@ palmier clients revoke-all
 ```
 
 The `init` command:
-- Detects installed agent CLIs (Claude Code, Gemini CLI, Codex CLI, GitHub Copilot) and caches the result
+- Detects installed agent CLIs (Claude Code, Gemini CLI, Codex CLI, GitHub Copilot, Qwen Code, Kimi Code, OpenClaw) and caches the result
 - Configures access modes (HTTP port, LAN access)
-- Shows a summary and asks for confirmation before making changes
+- Shows a summary (including any existing scheduled tasks to recover) and asks for confirmation
 - Registers with the Palmier server, saves configuration to `~/.config/palmier/host.json`
-- Installs a background daemon (systemd user service on Linux, Registry Run key on Windows)
+- Installs a background daemon (systemd user service on Linux, Task Scheduler on Windows)
 - Auto-enters pair mode to connect your first device
 
+The daemon automatically recovers existing tasks by reinstalling their system timers on startup.
+
 Agents are re-detected on every daemon start. Run `palmier restart` after installing or removing a CLI.
 
 ### Verifying the Service
@@ -125,7 +128,7 @@ palmier restart
 
 ## How It Works
 
-- The host runs as a **background daemon** (systemd user service on Linux, Registry Run key on Windows), staying alive via `palmier serve`.
+- The host runs as a **background daemon** (systemd user service on Linux, Task Scheduler on Windows), staying alive via `palmier serve`.
 - **Device access** — localhost is always trusted (no pairing needed). LAN and server mode devices communicate via direct HTTP or NATS respectively, and must pair via OTP to get a client token.
 - **Tasks** are stored locally as Markdown files in a `tasks/` directory. Each task has a name, prompt, execution plan, and optional schedules (cron schedules or one-time dates).
 - **Plan generation** is automatic — when you create or update a task, the host invokes your chosen agent CLI to generate an execution plan and name.
@@ -139,43 +142,30 @@ To fully remove Palmier from a machine:
 
 1. **Unpair your device** in the PWA (via the host menu).
 
-2. **Stop and remove the daemon:**
+2. **Stop the daemon and remove all scheduled tasks:**
 
-   **Linux:**
    ```bash
-   systemctl --user stop palmier.service
-   systemctl --user disable palmier.service
-   rm ~/.config/systemd/user/palmier.service
+   palmier uninstall
    ```
 
-   **Windows (PowerShell):**
-   ```powershell
-   # Kill the daemon process
-   Get-Content "$env:USERPROFILE\.config\palmier\daemon.pid" | ForEach-Object { Stop-Process -Id $_ -Force -ErrorAction SilentlyContinue }
-   # Remove the Registry Run key
-   Remove-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Run" -Name "PalmierDaemon" -ErrorAction SilentlyContinue
+3. **Uninstall the package:**
+
+   ```bash
+   npm uninstall -g palmier
    ```
 
-3. **Remove any task timers:**
+4. **(Optional) Remove configuration and task data:**
 
    **Linux:**
    ```bash
-   systemctl --user stop palmier-task-*.timer palmier-task-*.service 2>/dev/null
-   systemctl --user disable palmier-task-*.timer 2>/dev/null
-   rm -f ~/.config/systemd/user/palmier-task-*.timer ~/.config/systemd/user/palmier-task-*.service
-   systemctl --user daemon-reload
+   rm -rf ~/.config/palmier
+   rm -rf ~/palmier   # or wherever your Palmier root directory is
    ```
 
    **Windows (PowerShell):**
    ```powershell
-   schtasks /delete /tn "PalmierTask-*" /f 2>$null
-   ```
-
-4. **Remove configuration and task data:**
-
-   ```bash
-   rm -rf ~/.config/palmier
-   rm -rf tasks/   # from your Palmier root directory
+   Remove-Item -Recurse -Force "$env:USERPROFILE\.config\palmier"
+   Remove-Item -Recurse -Force "$env:USERPROFILE\palmier"   # or wherever your Palmier root directory is
    ```
 
 ## Disclaimer

package/dist/commands/init.js

@@ -4,6 +4,7 @@ import { detectAgents } from "../agents/agent.js";
 import { getPlatform } from "../platform/index.js";
 import { pairCommand } from "./pair.js";
 import { detectLanIp } from "../transports/http-transport.js";
+import { listTasks } from "../task.js";
 const bold = (s) => `\x1b[1m${s}\x1b[0m`;
 const dim = (s) => `\x1b[2m${s}\x1b[0m`;
 const green = (s) => `\x1b[32m${s}\x1b[0m`;
@@ -51,6 +52,15 @@ export async function initCommand() {
             console.log(`                  Accessible from other devices on your local network. Pairing required.\n`);
         }
         console.log(`  ${dim("Agents:")}         ${agents.map((a) => a.label).join(", ")}\n`);
+        // Check for existing tasks to recover
+        const existingTasks = listTasks(process.cwd());
+        if (existingTasks.length > 0) {
+            console.log(`  ${dim("Recover tasks:")}  ${existingTasks.length} existing task(s) found:`);
+            for (const t of existingTasks) {
+                console.log(`                  - ${t.frontmatter.name || t.frontmatter.user_prompt.slice(0, 50)}`);
+            }
+            console.log();
+        }
         const confirm = await ask("Proceed? (Y/n): ");
         if (confirm.trim().toLowerCase() === "n") {
             console.log("\nSetup cancelled.");
@@ -96,6 +106,8 @@ export async function initCommand() {
         saveConfig(config);
         console.log(`Config saved to ${dim("~/.config/palmier/host.json")}`);
         getPlatform().installDaemon(config);
+        // Task recovery happens in the daemon (palmier serve) on startup,
+        // since the daemon runs elevated and can create S4U scheduled tasks.
         console.log("\nStarting pairing...");
         rl.close();
         await pairCommand();

package/dist/commands/serve.js

@@ -5,7 +5,7 @@ import { connectNats } from "../nats-client.js";
 import { createRpcHandler } from "../rpc-handler.js";
 import { startNatsTransport } from "../transports/nats-transport.js";
 import { startHttpTransport } from "../transports/http-transport.js";
-import { getTaskDir, readTaskStatus, writeTaskStatus, parseTaskFile, appendRunMessage } from "../task.js";
+import { getTaskDir, readTaskStatus, writeTaskStatus, parseTaskFile, appendRunMessage, listTasks } from "../task.js";
 import { publishHostEvent } from "../events.js";
 import { getPlatform } from "../platform/index.js";
 import { detectAgents } from "../agents/agent.js";
@@ -92,6 +92,17 @@ export async function serveCommand() {
     }
     // Reconcile any tasks stuck from before daemon started
     await checkStaleTasks(config, nc);
+    // Ensure all tasks have their scheduler entries (recovery after init/reinstall)
+    const platform = getPlatform();
+    const allTasks = listTasks(config.projectRoot);
+    for (const task of allTasks) {
+        try {
+            platform.installTaskTimer(config, task);
+        }
+        catch (err) {
+            console.error(`Warning: failed to install timer for task ${task.frontmatter.id}: ${err}`);
+        }
+    }
     // Poll for crashed tasks every 30 seconds
     setInterval(() => {
         checkStaleTasks(config, nc).catch((err) => {

package/dist/commands/uninstall.d.ts

@@ -0,0 +1,2 @@
+export declare function uninstallCommand(): Promise<void>;
+//# sourceMappingURL=uninstall.d.ts.map

package/dist/commands/uninstall.js

@@ -0,0 +1,8 @@
+import { getPlatform } from "../platform/index.js";
+export async function uninstallCommand() {
+    const platform = getPlatform();
+    platform.uninstallDaemon();
+    console.log("\nTo uninstall the package: npm uninstall -g palmier");
+    console.log("To also remove configuration and task data, see https://github.com/caihongxu/palmier#uninstalling");
+}
+//# sourceMappingURL=uninstall.js.map

package/dist/index.js

@@ -11,6 +11,7 @@ import { serveCommand } from "./commands/serve.js";
 import { pairCommand } from "./commands/pair.js";
 import { restartCommand } from "./commands/restart.js";
 import { clientsListCommand, clientsRevokeCommand, clientsRevokeAllCommand } from "./commands/clients.js";
+import { uninstallCommand } from "./commands/uninstall.js";
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const pkg = JSON.parse(readFileSync(join(__dirname, "../package.json"), "utf-8"));
 const program = new Command();
@@ -75,6 +76,12 @@ clientsCmd
     .action(async () => {
     await clientsRevokeAllCommand();
 });
+program
+    .command("uninstall")
+    .description("Stop the daemon and remove all scheduled tasks")
+    .action(async () => {
+    await uninstallCommand();
+});
 // No subcommand → default to serve
 if (process.argv.length <= 2) {
     process.argv.push("serve");

package/dist/platform/linux.d.ts

@@ -14,6 +14,7 @@ import type { HostConfig, ParsedTask } from "../types.js";
 export declare function cronToOnCalendar(cron: string): string;
 export declare class LinuxPlatform implements PlatformService {
     installDaemon(config: HostConfig): void;
+    uninstallDaemon(): void;
     restartDaemon(): Promise<void>;
     installTaskTimer(config: HostConfig, task: ParsedTask): void;
     removeTaskTimer(taskId: string): void;

package/dist/platform/linux.js

@@ -103,6 +103,44 @@ WantedBy=default.target
         }
         console.log("\nHost initialization complete!");
     }
+    uninstallDaemon() {
+        try {
+            execSync("systemctl --user stop palmier.service 2>/dev/null", { stdio: "pipe" });
+            execSync("systemctl --user disable palmier.service 2>/dev/null", { stdio: "pipe" });
+        }
+        catch { /* service may not exist */ }
+        // Remove daemon service file
+        const servicePath = path.join(UNIT_DIR, "palmier.service");
+        try {
+            fs.unlinkSync(servicePath);
+        }
+        catch { /* ignore */ }
+        // Remove all task timers and services
+        try {
+            const files = fs.readdirSync(UNIT_DIR).filter((f) => f.startsWith("palmier-task-"));
+            for (const f of files) {
+                const unit = f.replace(/\.(timer|service)$/, "");
+                try {
+                    execSync(`systemctl --user stop ${f} 2>/dev/null`, { stdio: "pipe" });
+                }
+                catch { /* ignore */ }
+                try {
+                    execSync(`systemctl --user disable ${f} 2>/dev/null`, { stdio: "pipe" });
+                }
+                catch { /* ignore */ }
+                try {
+                    fs.unlinkSync(path.join(UNIT_DIR, f));
+                }
+                catch { /* ignore */ }
+            }
+        }
+        catch { /* ignore */ }
+        try {
+            execSync("systemctl --user daemon-reload", { stdio: "pipe" });
+        }
+        catch { /* ignore */ }
+        console.log("Palmier daemon and tasks uninstalled.");
+    }
     async restartDaemon() {
         // If called from a user's terminal, save the current PATH for future use.
         // If called from the daemon (auto-update), read the saved PATH instead.

package/dist/platform/platform.d.ts

@@ -8,6 +8,8 @@ export interface PlatformService {
     installDaemon(config: HostConfig): void;
     /** Restart the `palmier serve` daemon. */
     restartDaemon(): Promise<void>;
+    /** Stop the daemon and remove all scheduled tasks/timers. */
+    uninstallDaemon(): void;
     /** Install a scheduled trigger (timer) for a task. */
     installTaskTimer(config: HostConfig, task: ParsedTask): void;
     /** Remove a task's scheduled trigger and service files. */

package/dist/platform/windows.d.ts

@@ -16,11 +16,12 @@ export declare function triggerToXml(trigger: {
 /**
  * Build a complete Task Scheduler XML definition.
  */
-export declare function buildTaskXml(tr: string, triggers: string[]): string;
+export declare function buildTaskXml(tr: string, triggers: string[], foreground?: boolean): string;
 export declare class WindowsPlatform implements PlatformService {
     installDaemon(config: HostConfig): void;
+    uninstallDaemon(): void;
     restartDaemon(): Promise<void>;
-    /** Create or update the Task Scheduler entry for the daemon. */
+    /** Create or update the Task Scheduler entry for the daemon (requires elevation for S4U). */
     private ensureDaemonTask;
     /** Start the daemon via Task Scheduler (runs outside any session's job object). */
     private startDaemonTask;

package/dist/platform/windows.js

@@ -5,8 +5,6 @@ import { CONFIG_DIR, loadConfig } from "../config.js";
 import { getTaskDir, readTaskStatus } from "../task.js";
 const TASK_PREFIX = "\\Palmier\\PalmierTask-";
 const DAEMON_TASK_NAME = "PalmierDaemon";
-const DAEMON_PID_FILE = path.join(CONFIG_DIR, "daemon.pid");
-const DAEMON_VBS_FILE = path.join(CONFIG_DIR, "daemon.vbs");
 const DOW_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday"];
 /**
  * Convert a cron expression or "once" trigger to Task Scheduler XML trigger elements.
@@ -48,13 +46,19 @@ export function triggerToXml(trigger) {
 /**
  * Build a complete Task Scheduler XML definition.
  */
-export function buildTaskXml(tr, triggers) {
+export function buildTaskXml(tr, triggers, foreground) {
     const [command, ...argParts] = tr.match(/"[^"]*"|[^\s]+/g) ?? [];
     const commandStr = command?.replace(/"/g, "") ?? "";
     const argsStr = argParts.map((a) => a.replace(/"/g, "")).join(" ");
     return [
         `<?xml version="1.0" encoding="UTF-16"?>`,
         `<Task version="1.3" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">`,
+        `  <Principals>`,
+        `    <Principal>`,
+        `      <LogonType>${foreground ? "InteractiveToken" : "S4U"}</LogonType>`,
+        `      <RunLevel>LeastPrivilege</RunLevel>`,
+        `    </Principal>`,
+        `  </Principals>`,
         `  <Settings>`,
         `    <MultipleInstancesPolicy>StopExisting</MultipleInstancesPolicy>`,
         `    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>`,
@@ -77,75 +81,72 @@ function schtasksTaskName(taskId) {
 export class WindowsPlatform {
     installDaemon(config) {
         const script = process.argv[1] || "palmier";
-        // Create the Task Scheduler entry for the daemon
+        // Create the Task Scheduler entry for the daemon (BootTrigger starts it at system boot)
         this.ensureDaemonTask(script);
-        // Registry Run key triggers the Task Scheduler entry on logon,
-        // so the daemon always runs outside any session's job object.
-        const regValue = `schtasks /run /tn "\\Palmier\\${DAEMON_TASK_NAME}"`;
-        try {
-            execFileSync("reg", [
-                "add", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
-                "/v", DAEMON_TASK_NAME, "/t", "REG_SZ", "/d", regValue, "/f",
-            ], { encoding: "utf-8", stdio: "pipe" });
-            console.log(`Registry Run key "${DAEMON_TASK_NAME}" installed (runs at logon).`);
-        }
-        catch (err) {
-            console.error(`Warning: failed to install registry run entry: ${err}`);
-            console.error("You may need to start palmier serve manually.");
-        }
         // Start the daemon now
         this.startDaemonTask();
         console.log("\nHost initialization complete!");
     }
-    async restartDaemon() {
-        const oldPid = fs.existsSync(DAEMON_PID_FILE)
-            ? fs.readFileSync(DAEMON_PID_FILE, "utf-8").trim()
-            : null;
-        if (oldPid && oldPid === String(process.pid)) {
-            // We ARE the old daemon (auto-update) — spawn replacement then exit.
-            this.startDaemonTask();
-            process.exit(0);
+    uninstallDaemon() {
+        const tn = `\\Palmier\\${DAEMON_TASK_NAME}`;
+        // Stop the daemon via Task Scheduler
+        try {
+            execFileSync("schtasks", ["/end", "/tn", tn], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
         }
-        // Kill old daemon by PID
-        if (oldPid) {
-            try {
-                execFileSync("taskkill", ["/pid", oldPid, "/f", "/t"], { windowsHide: true, stdio: "pipe" });
-            }
-            catch {
-                // Process may have already exited
-            }
+        catch { /* task may not be running */ }
+        // Remove daemon scheduled task (elevated — S4U task requires elevation to delete)
+        try {
+            execFileSync("powershell", [
+                "-Command", `Start-Process -Verb RunAs -Wait -FilePath schtasks -ArgumentList '/delete /tn "${tn}" /f'`,
+            ], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+            console.log("Daemon task removed.");
         }
-        // Also kill any stale palmier serve processes (e.g. leftover from a previous daemon)
+        catch { /* task may not exist */ }
+        // Remove all Palmier task timers
         try {
-            const out = execFileSync("wmic", ["process", "where", `CommandLine like '%palmier%serve%' and ProcessId != '${process.pid}'`, "get", "ProcessId"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+            const out = execFileSync("schtasks", ["/query", "/fo", "CSV", "/nh"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
             for (const line of out.split("\n")) {
-                const pid = line.trim();
-                if (pid && /^\d+$/.test(pid)) {
+                const match = line.match(/"(\\Palmier\\PalmierTask-[^"]+)"/);
+                if (match) {
                     try {
-                        execFileSync("taskkill", ["/pid", pid, "/f", "/t"], { windowsHide: true, stdio: "pipe" });
+                        execFileSync("schtasks", ["/end", "/tn", match[1]], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
                     }
-                    catch { }
+                    catch { /* ignore */ }
+                    try {
+                        execFileSync("schtasks", ["/delete", "/tn", match[1], "/f"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+                    }
+                    catch { /* ignore */ }
                 }
             }
+            console.log("Task timers removed.");
         }
-        catch {
-            // wmic may not be available on all Windows versions
+        catch { /* ignore */ }
+        console.log("Palmier daemon and tasks uninstalled.");
+    }
+    async restartDaemon() {
+        const tn = `\\Palmier\\${DAEMON_TASK_NAME}`;
+        // Stop the daemon via Task Scheduler
+        try {
+            execFileSync("schtasks", ["/end", "/tn", tn], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
         }
+        catch { /* task may not be running */ }
+        // Start it again
         this.startDaemonTask();
     }
-    /** Create or update the Task Scheduler entry for the daemon. */
+    /** Create or update the Task Scheduler entry for the daemon (requires elevation for S4U). */
     ensureDaemonTask(script) {
-        const vbs = `CreateObject("WScript.Shell").Run """${process.execPath}"" ""${script}"" serve", 0, False`;
-        fs.writeFileSync(DAEMON_VBS_FILE, vbs, "utf-8");
-        const wscript = `${process.env.SYSTEMROOT || "C:\\Windows"}\\System32\\wscript.exe`;
         const tn = `\\Palmier\\${DAEMON_TASK_NAME}`;
-        const tr = `"${wscript}" "${DAEMON_VBS_FILE}"`;
-        const xml = buildTaskXml(tr, [`<TimeTrigger><StartBoundary>2000-01-01T00:00:00</StartBoundary></TimeTrigger>`]);
+        const tr = `"${process.execPath}" "${script}" serve`;
+        const xml = buildTaskXml(tr, [`<BootTrigger><Enabled>true</Enabled></BootTrigger>`]);
         const xmlPath = path.join(CONFIG_DIR, "daemon-task.xml");
         try {
             const bom = Buffer.from([0xFF, 0xFE]);
             fs.writeFileSync(xmlPath, Buffer.concat([bom, Buffer.from(xml, "utf16le")]));
-            execFileSync("schtasks", ["/create", "/tn", tn, "/xml", xmlPath, "/f"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+            // S4U LogonType requires elevation — spawn schtasks via RunAs
+            const args = `/create /tn "${tn}" /xml "${xmlPath}" /f`;
+            execFileSync("powershell", [
+                "-Command", `Start-Process -Verb RunAs -Wait -FilePath schtasks -ArgumentList '${args}'`,
+            ], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
         }
         catch (err) {
             const e = err;
@@ -174,12 +175,7 @@ export class WindowsPlatform {
         const taskId = task.frontmatter.id;
         const tn = schtasksTaskName(taskId);
         const script = process.argv[1] || "palmier";
-        // Write a VBS launcher so the task runs without a visible console window
-        const vbsPath = path.join(CONFIG_DIR, `task-${taskId}.vbs`);
-        const vbs = `CreateObject("WScript.Shell").Run """${process.execPath}"" ""${script}"" run ${taskId}", 0, True`;
-        fs.writeFileSync(vbsPath, vbs, "utf-8");
-        const wscript = `${process.env.SYSTEMROOT || "C:\\Windows"}\\System32\\wscript.exe`;
-        const tr = `"${wscript}" "${vbsPath}"`;
+        const tr = `"${process.execPath}" "${script}" run ${taskId}`;
         // Build trigger XML elements
         const triggerElements = [];
         if (task.frontmatter.triggers_enabled) {
@@ -198,7 +194,9 @@ export class WindowsPlatform {
         }
         // Write XML and register via schtasks — gives us full control over
         // settings like MultipleInstancesPolicy that schtasks flags don't expose.
-        const xml = buildTaskXml(tr, triggerElements);
+        // S4U LogonType ensures no console window (unless foreground_mode is set).
+        // Works without elevation because the daemon (which calls this) runs elevated.
+        const xml = buildTaskXml(tr, triggerElements, task.frontmatter.foreground_mode);
         const xmlPath = path.join(CONFIG_DIR, `task-${taskId}.xml`);
         try {
             // schtasks /xml requires UTF-16LE with BOM
@@ -227,10 +225,6 @@ export class WindowsPlatform {
         catch {
             // Task might not exist — that's fine
         }
-        try {
-            fs.unlinkSync(path.join(CONFIG_DIR, `task-${taskId}.vbs`));
-        }
-        catch { /* ignore */ }
     }
     async startTask(taskId) {
         const tn = schtasksTaskName(taskId);

package/dist/rpc-handler.js

@@ -151,6 +151,7 @@ export function createRpcHandler(config, nc) {
                     tasks: tasks.map((task) => flattenTask(task)),
                     agents: config.agents ?? [],
                     version: currentVersion,
+                    host_platform: process.platform,
                 };
             }
             case "task.create": {
@@ -184,6 +185,7 @@ export function createRpcHandler(config, nc) {
                         triggers_enabled: params.triggers_enabled ?? true,
                         requires_confirmation: params.requires_confirmation ?? true,
                         ...(params.yolo_mode ? { yolo_mode: true } : {}),
+                        ...(params.foreground_mode ? { foreground_mode: true } : {}),
                         ...(params.command ? { command: params.command } : {}),
                     },
                     body,
@@ -217,6 +219,8 @@ export function createRpcHandler(config, nc) {
                     if (params.yolo_mode)
                         delete existing.frontmatter.permissions;
                 }
+                if (params.foreground_mode !== undefined)
+                    existing.frontmatter.foreground_mode = params.foreground_mode || undefined;
                 if (params.command !== undefined) {
                     if (params.command) {
                         existing.frontmatter.command = params.command;
@@ -268,6 +272,7 @@ export function createRpcHandler(config, nc) {
                         triggers_enabled: false,
                         requires_confirmation: params.requires_confirmation ?? false,
                         ...(params.yolo_mode ? { yolo_mode: true } : {}),
+                        ...(params.foreground_mode ? { foreground_mode: true } : {}),
                         ...(params.command ? { command: params.command } : {}),
                     },
                     body: "",

package/dist/types.d.ts

@@ -20,6 +20,7 @@ export interface TaskFrontmatter {
     triggers_enabled: boolean;
     requires_confirmation: boolean;
     yolo_mode?: boolean;
+    foreground_mode?: boolean;
     permissions?: RequiredPermission[];
     command?: string;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "palmier",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "description": "Palmier host CLI - provisions, executes tasks, and serves NATS RPC",
   "license": "Apache-2.0",
   "author": "Hongxu Cai",

package/src/commands/init.ts

@@ -4,6 +4,7 @@ import { detectAgents } from "../agents/agent.js";
 import { getPlatform } from "../platform/index.js";
 import { pairCommand } from "./pair.js";
 import { detectLanIp } from "../transports/http-transport.js";
+import { listTasks } from "../task.js";
 import type { HostConfig } from "../types.js";
 
 type AskFn = (q: string) => Promise<string>;
@@ -63,6 +64,16 @@ export async function initCommand(): Promise<void> {
     }
     console.log(`  ${dim("Agents:")}         ${agents.map((a) => a.label).join(", ")}\n`);
 
+    // Check for existing tasks to recover
+    const existingTasks = listTasks(process.cwd());
+    if (existingTasks.length > 0) {
+      console.log(`  ${dim("Recover tasks:")}  ${existingTasks.length} existing task(s) found:`);
+      for (const t of existingTasks) {
+        console.log(`                  - ${t.frontmatter.name || t.frontmatter.user_prompt.slice(0, 50)}`);
+      }
+      console.log();
+    }
+
     const confirm = await ask("Proceed? (Y/n): ");
     if (confirm.trim().toLowerCase() === "n") {
       console.log("\nSetup cancelled.");
@@ -111,6 +122,9 @@ export async function initCommand(): Promise<void> {
 
     getPlatform().installDaemon(config);
 
+    // Task recovery happens in the daemon (palmier serve) on startup,
+    // since the daemon runs elevated and can create S4U scheduled tasks.
+
     console.log("\nStarting pairing...");
     rl.close();
     await pairCommand();

package/src/commands/serve.ts

@@ -5,7 +5,7 @@ import { connectNats } from "../nats-client.js";
 import { createRpcHandler } from "../rpc-handler.js";
 import { startNatsTransport } from "../transports/nats-transport.js";
 import { startHttpTransport } from "../transports/http-transport.js";
-import { getTaskDir, readTaskStatus, writeTaskStatus, parseTaskFile, appendRunMessage } from "../task.js";
+import { getTaskDir, readTaskStatus, writeTaskStatus, parseTaskFile, appendRunMessage, listTasks } from "../task.js";
 import { publishHostEvent } from "../events.js";
 import { getPlatform } from "../platform/index.js";
 import { detectAgents } from "../agents/agent.js";
@@ -106,6 +106,17 @@ export async function serveCommand(): Promise<void> {
   // Reconcile any tasks stuck from before daemon started
   await checkStaleTasks(config, nc);
 
+  // Ensure all tasks have their scheduler entries (recovery after init/reinstall)
+  const platform = getPlatform();
+  const allTasks = listTasks(config.projectRoot);
+  for (const task of allTasks) {
+    try {
+      platform.installTaskTimer(config, task);
+    } catch (err) {
+      console.error(`Warning: failed to install timer for task ${task.frontmatter.id}: ${err}`);
+    }
+  }
+
   // Poll for crashed tasks every 30 seconds
   setInterval(() => {
     checkStaleTasks(config, nc).catch((err) => {

package/src/commands/uninstall.ts

@@ -0,0 +1,9 @@
+import { getPlatform } from "../platform/index.js";
+
+export async function uninstallCommand(): Promise<void> {
+  const platform = getPlatform();
+  platform.uninstallDaemon();
+
+  console.log("\nTo uninstall the package: npm uninstall -g palmier");
+  console.log("To also remove configuration and task data, see https://github.com/caihongxu/palmier#uninstalling");
+}

package/src/index.ts

@@ -13,6 +13,7 @@ import { serveCommand } from "./commands/serve.js";
 import { pairCommand } from "./commands/pair.js";
 import { restartCommand } from "./commands/restart.js";
 import { clientsListCommand, clientsRevokeCommand, clientsRevokeAllCommand } from "./commands/clients.js";
+import { uninstallCommand } from "./commands/uninstall.js";
 
 const __dirname = dirname(fileURLToPath(import.meta.url));
 const pkg = JSON.parse(readFileSync(join(__dirname, "../package.json"), "utf-8"));
@@ -93,6 +94,13 @@ clientsCmd
     await clientsRevokeAllCommand();
   });
 
+program
+  .command("uninstall")
+  .description("Stop the daemon and remove all scheduled tasks")
+  .action(async () => {
+    await uninstallCommand();
+  });
+
 // No subcommand → default to serve
 if (process.argv.length <= 2) {
   process.argv.push("serve");

package/src/platform/linux.ts

@@ -121,6 +121,32 @@ WantedBy=default.target
     console.log("\nHost initialization complete!");
   }
 
+  uninstallDaemon(): void {
+    try {
+      execSync("systemctl --user stop palmier.service 2>/dev/null", { stdio: "pipe" });
+      execSync("systemctl --user disable palmier.service 2>/dev/null", { stdio: "pipe" });
+    } catch { /* service may not exist */ }
+
+    // Remove daemon service file
+    const servicePath = path.join(UNIT_DIR, "palmier.service");
+    try { fs.unlinkSync(servicePath); } catch { /* ignore */ }
+
+    // Remove all task timers and services
+    try {
+      const files = fs.readdirSync(UNIT_DIR).filter((f) => f.startsWith("palmier-task-"));
+      for (const f of files) {
+        const unit = f.replace(/\.(timer|service)$/, "");
+        try { execSync(`systemctl --user stop ${f} 2>/dev/null`, { stdio: "pipe" }); } catch { /* ignore */ }
+        try { execSync(`systemctl --user disable ${f} 2>/dev/null`, { stdio: "pipe" }); } catch { /* ignore */ }
+        try { fs.unlinkSync(path.join(UNIT_DIR, f)); } catch { /* ignore */ }
+      }
+    } catch { /* ignore */ }
+
+    try { execSync("systemctl --user daemon-reload", { stdio: "pipe" }); } catch { /* ignore */ }
+
+    console.log("Palmier daemon and tasks uninstalled.");
+  }
+
   async restartDaemon(): Promise<void> {
     // If called from a user's terminal, save the current PATH for future use.
     // If called from the daemon (auto-update), read the saved PATH instead.

package/src/platform/platform.ts

@@ -11,6 +11,9 @@ export interface PlatformService {
   /** Restart the `palmier serve` daemon. */
   restartDaemon(): Promise<void>;
 
+  /** Stop the daemon and remove all scheduled tasks/timers. */
+  uninstallDaemon(): void;
+
   /** Install a scheduled trigger (timer) for a task. */
   installTaskTimer(config: HostConfig, task: ParsedTask): void;
 

package/src/platform/windows.ts

@@ -9,8 +9,6 @@ import { getTaskDir, readTaskStatus } from "../task.js";
 
 const TASK_PREFIX = "\\Palmier\\PalmierTask-";
 const DAEMON_TASK_NAME = "PalmierDaemon";
-const DAEMON_PID_FILE = path.join(CONFIG_DIR, "daemon.pid");
-const DAEMON_VBS_FILE = path.join(CONFIG_DIR, "daemon.vbs");
 
 
 const DOW_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday", "Sunday"];
@@ -60,7 +58,7 @@ export function triggerToXml(trigger: { type: string; value: string }): string {
 /**
  * Build a complete Task Scheduler XML definition.
  */
-export function buildTaskXml(tr: string, triggers: string[]): string {
+export function buildTaskXml(tr: string, triggers: string[], foreground?: boolean): string {
   const [command, ...argParts] = tr.match(/"[^"]*"|[^\s]+/g) ?? [];
   const commandStr = command?.replace(/"/g, "") ?? "";
   const argsStr = argParts.map((a) => a.replace(/"/g, "")).join(" ");
@@ -68,6 +66,12 @@ export function buildTaskXml(tr: string, triggers: string[]): string {
   return [
     `<?xml version="1.0" encoding="UTF-16"?>`,
     `<Task version="1.3" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">`,
+    `  <Principals>`,
+    `    <Principal>`,
+    `      <LogonType>${foreground ? "InteractiveToken" : "S4U"}</LogonType>`,
+    `      <RunLevel>LeastPrivilege</RunLevel>`,
+    `    </Principal>`,
+    `  </Principals>`,
     `  <Settings>`,
     `    <MultipleInstancesPolicy>StopExisting</MultipleInstancesPolicy>`,
     `    <DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>`,
@@ -93,85 +97,80 @@ export class WindowsPlatform implements PlatformService {
   installDaemon(config: HostConfig): void {
     const script = process.argv[1] || "palmier";
 
-    // Create the Task Scheduler entry for the daemon
+    // Create the Task Scheduler entry for the daemon (BootTrigger starts it at system boot)
     this.ensureDaemonTask(script);
 
-    // Registry Run key triggers the Task Scheduler entry on logon,
-    // so the daemon always runs outside any session's job object.
-    const regValue = `schtasks /run /tn "\\Palmier\\${DAEMON_TASK_NAME}"`;
-    try {
-      execFileSync("reg", [
-        "add", "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run",
-        "/v", DAEMON_TASK_NAME, "/t", "REG_SZ", "/d", regValue, "/f",
-      ], { encoding: "utf-8", stdio: "pipe" });
-      console.log(`Registry Run key "${DAEMON_TASK_NAME}" installed (runs at logon).`);
-    } catch (err) {
-      console.error(`Warning: failed to install registry run entry: ${err}`);
-      console.error("You may need to start palmier serve manually.");
-    }
-
     // Start the daemon now
     this.startDaemonTask();
 
     console.log("\nHost initialization complete!");
   }
 
-  async restartDaemon(): Promise<void> {
-    const oldPid = fs.existsSync(DAEMON_PID_FILE)
-      ? fs.readFileSync(DAEMON_PID_FILE, "utf-8").trim()
-      : null;
-
-    if (oldPid && oldPid === String(process.pid)) {
-      // We ARE the old daemon (auto-update) — spawn replacement then exit.
-      this.startDaemonTask();
-      process.exit(0);
-    }
+  uninstallDaemon(): void {
+    const tn = `\\Palmier\\${DAEMON_TASK_NAME}`;
 
-    // Kill old daemon by PID
-    if (oldPid) {
-      try {
-        execFileSync("taskkill", ["/pid", oldPid, "/f", "/t"], { windowsHide: true, stdio: "pipe" });
-      } catch {
-        // Process may have already exited
-      }
-    }
+    // Stop the daemon via Task Scheduler
+    try {
+      execFileSync("schtasks", ["/end", "/tn", tn], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+    } catch { /* task may not be running */ }
+
+    // Remove daemon scheduled task (elevated — S4U task requires elevation to delete)
+    try {
+      execFileSync("powershell", [
+        "-Command", `Start-Process -Verb RunAs -Wait -FilePath schtasks -ArgumentList '/delete /tn "${tn}" /f'`,
+      ], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+      console.log("Daemon task removed.");
+    } catch { /* task may not exist */ }
 
-    // Also kill any stale palmier serve processes (e.g. leftover from a previous daemon)
+    // Remove all Palmier task timers
     try {
-      const out = execFileSync("wmic", ["process", "where", `CommandLine like '%palmier%serve%' and ProcessId != '${process.pid}'`, "get", "ProcessId"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+      const out = execFileSync("schtasks", ["/query", "/fo", "CSV", "/nh"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
       for (const line of out.split("\n")) {
-        const pid = line.trim();
-        if (pid && /^\d+$/.test(pid)) {
-          try { execFileSync("taskkill", ["/pid", pid, "/f", "/t"], { windowsHide: true, stdio: "pipe" }); } catch {}
+        const match = line.match(/"(\\Palmier\\PalmierTask-[^"]+)"/);
+        if (match) {
+          try { execFileSync("schtasks", ["/end", "/tn", match[1]], { encoding: "utf-8", windowsHide: true, stdio: "pipe" }); } catch { /* ignore */ }
+          try { execFileSync("schtasks", ["/delete", "/tn", match[1], "/f"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" }); } catch { /* ignore */ }
         }
       }
-    } catch {
-      // wmic may not be available on all Windows versions
-    }
+      console.log("Task timers removed.");
+    } catch { /* ignore */ }
+
+    console.log("Palmier daemon and tasks uninstalled.");
+  }
 
+  async restartDaemon(): Promise<void> {
+    const tn = `\\Palmier\\${DAEMON_TASK_NAME}`;
+
+    // Stop the daemon via Task Scheduler
+    try {
+      execFileSync("schtasks", ["/end", "/tn", tn], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+    } catch { /* task may not be running */ }
+
+    // Start it again
     this.startDaemonTask();
   }
 
-  /** Create or update the Task Scheduler entry for the daemon. */
+  /** Create or update the Task Scheduler entry for the daemon (requires elevation for S4U). */
   private ensureDaemonTask(script: string): void {
-    const vbs = `CreateObject("WScript.Shell").Run """${process.execPath}"" ""${script}"" serve", 0, False`;
-    fs.writeFileSync(DAEMON_VBS_FILE, vbs, "utf-8");
-
-    const wscript = `${process.env.SYSTEMROOT || "C:\\Windows"}\\System32\\wscript.exe`;
     const tn = `\\Palmier\\${DAEMON_TASK_NAME}`;
-    const tr = `"${wscript}" "${DAEMON_VBS_FILE}"`;
-    const xml = buildTaskXml(tr, [`<TimeTrigger><StartBoundary>2000-01-01T00:00:00</StartBoundary></TimeTrigger>`]);
+    const tr = `"${process.execPath}" "${script}" serve`;
+    const xml = buildTaskXml(tr, [`<BootTrigger><Enabled>true</Enabled></BootTrigger>`]);
     const xmlPath = path.join(CONFIG_DIR, "daemon-task.xml");
     try {
       const bom = Buffer.from([0xFF, 0xFE]);
       fs.writeFileSync(xmlPath, Buffer.concat([bom, Buffer.from(xml, "utf16le")]));
-      execFileSync("schtasks", ["/create", "/tn", tn, "/xml", xmlPath, "/f"], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
+      // S4U LogonType requires elevation — spawn schtasks via RunAs
+      const args = `/create /tn "${tn}" /xml "${xmlPath}" /f`;
+      execFileSync("powershell", [
+        "-Command", `Start-Process -Verb RunAs -Wait -FilePath schtasks -ArgumentList '${args}'`,
+      ], { encoding: "utf-8", windowsHide: true, stdio: "pipe" });
     } catch (err: unknown) {
       const e = err as { stderr?: string };
       console.error(`Failed to create daemon task: ${e.stderr || err}`);
     } finally {
       try { fs.unlinkSync(xmlPath); } catch { /* ignore */ }
     }
+
   }
 
   /** Start the daemon via Task Scheduler (runs outside any session's job object). */
@@ -190,14 +189,7 @@ export class WindowsPlatform implements PlatformService {
     const taskId = task.frontmatter.id;
     const tn = schtasksTaskName(taskId);
     const script = process.argv[1] || "palmier";
-
-    // Write a VBS launcher so the task runs without a visible console window
-    const vbsPath = path.join(CONFIG_DIR, `task-${taskId}.vbs`);
-    const vbs = `CreateObject("WScript.Shell").Run """${process.execPath}"" ""${script}"" run ${taskId}", 0, True`;
-    fs.writeFileSync(vbsPath, vbs, "utf-8");
-
-    const wscript = `${process.env.SYSTEMROOT || "C:\\Windows"}\\System32\\wscript.exe`;
-    const tr = `"${wscript}" "${vbsPath}"`;
+    const tr = `"${process.execPath}" "${script}" run ${taskId}`;
 
     // Build trigger XML elements
     const triggerElements: string[] = [];
@@ -217,7 +209,9 @@ export class WindowsPlatform implements PlatformService {
 
     // Write XML and register via schtasks — gives us full control over
     // settings like MultipleInstancesPolicy that schtasks flags don't expose.
-    const xml = buildTaskXml(tr, triggerElements);
+    // S4U LogonType ensures no console window (unless foreground_mode is set).
+    // Works without elevation because the daemon (which calls this) runs elevated.
+    const xml = buildTaskXml(tr, triggerElements, task.frontmatter.foreground_mode);
     const xmlPath = path.join(CONFIG_DIR, `task-${taskId}.xml`);
     try {
       // schtasks /xml requires UTF-16LE with BOM
@@ -232,6 +226,7 @@ export class WindowsPlatform implements PlatformService {
     } finally {
       try { fs.unlinkSync(xmlPath); } catch { /* ignore */ }
     }
+
   }
 
   removeTaskTimer(taskId: string): void {
@@ -241,7 +236,6 @@ export class WindowsPlatform implements PlatformService {
     } catch {
       // Task might not exist — that's fine
     }
-    try { fs.unlinkSync(path.join(CONFIG_DIR, `task-${taskId}.vbs`)); } catch { /* ignore */ }
   }
 
   async startTask(taskId: string): Promise<void> {

package/src/rpc-handler.ts

@@ -178,6 +178,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
           tasks: tasks.map((task) => flattenTask(task)),
           agents: config.agents ?? [],
           version: currentVersion,
+          host_platform: process.platform,
         };
       }
 
@@ -189,6 +190,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
           triggers_enabled?: boolean;
           requires_confirmation?: boolean;
           yolo_mode?: boolean;
+          foreground_mode?: boolean;
           command?: string;
         };
 
@@ -220,6 +222,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
             triggers_enabled: params.triggers_enabled ?? true,
             requires_confirmation: params.requires_confirmation ?? true,
             ...(params.yolo_mode ? { yolo_mode: true } : {}),
+            ...(params.foreground_mode ? { foreground_mode: true } : {}),
             ...(params.command ? { command: params.command } : {}),
           },
           body,
@@ -241,6 +244,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
           triggers_enabled?: boolean;
           requires_confirmation?: boolean;
           yolo_mode?: boolean;
+          foreground_mode?: boolean;
           command?: string;
         };
 
@@ -263,6 +267,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
           existing.frontmatter.yolo_mode = params.yolo_mode || undefined;
           if (params.yolo_mode) delete existing.frontmatter.permissions;
         }
+        if (params.foreground_mode !== undefined) existing.frontmatter.foreground_mode = params.foreground_mode || undefined;
         if (params.command !== undefined) {
           if (params.command) {
             existing.frontmatter.command = params.command;
@@ -310,6 +315,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
           agent: string;
           requires_confirmation?: boolean;
           yolo_mode?: boolean;
+          foreground_mode?: boolean;
           command?: string;
         };
 
@@ -326,6 +332,7 @@ export function createRpcHandler(config: HostConfig, nc?: NatsConnection) {
             triggers_enabled: false,
             requires_confirmation: params.requires_confirmation ?? false,
             ...(params.yolo_mode ? { yolo_mode: true } : {}),
+            ...(params.foreground_mode ? { foreground_mode: true } : {}),
             ...(params.command ? { command: params.command } : {}),
           },
           body: "",

package/src/types.ts

@@ -24,6 +24,7 @@ export interface TaskFrontmatter {
   triggers_enabled: boolean;
   requires_confirmation: boolean;
   yolo_mode?: boolean;
+  foreground_mode?: boolean;
   permissions?: RequiredPermission[];
   command?: string;
 }

package/test/windows-xml.test.ts

@@ -60,6 +60,8 @@ describe("buildTaskXml", () => {
     const xml = buildTaskXml(tr, triggers);
 
     assert.ok(xml.includes('<?xml version="1.0" encoding="UTF-16"?>'), "should have XML declaration");
+    assert.ok(xml.includes("<LogonType>S4U</LogonType>"), "should use S4U logon type");
+    assert.ok(xml.includes("<RunLevel>LeastPrivilege</RunLevel>"), "should use least privilege");
     assert.ok(xml.includes("<MultipleInstancesPolicy>StopExisting</MultipleInstancesPolicy>"), "should set StopExisting");
     assert.ok(xml.includes("<DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>"), "should allow on battery");
     assert.ok(xml.includes("<Command>C:\\Program Files\\nodejs\\node.exe</Command>"), "should extract command");