patchwork-os 0.2.0-beta.1 → 0.2.0-beta.10.canary.100

package/dist/winShim.js

@@ -0,0 +1,94 @@
+import path from "node:path";
+/**
+ * Resolve a binary name to its `.cmd` shim on Windows when needed.
+ *
+ * npm-installed binaries on Windows are `.cmd` files in `node_modules/.bin/`
+ * (or under `%APPDATA%\npm` for `-g` installs). Node's `child_process.spawn`
+ * with `shell:false` does NOT auto-resolve `.cmd` shims — only `.exe` via
+ * `PATHEXT`. Calling `spawn("claude", …)` on Windows therefore ENOENTs even
+ * though `claude --version` works fine in any terminal.
+ *
+ * This helper appends `.cmd` to bare binary names on win32, leaving:
+ *   - absolute / relative paths (anything with a separator) alone
+ *   - names that already have an extension alone
+ *   - non-Windows platforms untouched
+ *
+ * This was the fix pattern established in PR #525 for the Claude subprocess
+ * driver; centralising it here keeps the four other spawn sites consistent.
+ *
+ * Also used when *writing* an MCP stdio config that another process will
+ * spawn — that spawning process inherits the same shell:false limitation,
+ * so the config must record the `.cmd` form on Windows.
+ */
+export function ensureCmdShim(binary) {
+    if (process.platform !== "win32")
+        return binary;
+    // Use path.win32 explicitly so the check behaves identically when tests
+    // mock process.platform on a POSIX host (where path.sep would still be '/').
+    if (path.win32.extname(binary))
+        return binary;
+    if (binary.includes("\\") || binary.includes("/"))
+        return binary;
+    return `${binary}.cmd`;
+}
+/**
+ * Binaries that ship as `.cmd` shims on Windows when npm-installed (or via
+ * the standard VS Code / Cursor / Windsurf installers for the editor CLIs).
+ *
+ * Conservative by design — only names that are dependably `.cmd` on Windows
+ * across the common install paths. Anything ambiguous (`rg`, `fd`, `jq`,
+ * `python`, `node`) is omitted so we don't break `spawn("git")` style
+ * callers — Windows' PATHEXT auto-resolves `.exe` for those.
+ *
+ * Add to this set only after confirming the binary really is a `.cmd` shim
+ * in every realistic install path; a wrong inclusion turns working `.exe`
+ * spawns into ENOENT.
+ */
+const KNOWN_CMD_SHIMS = new Set([
+    // Package managers — always `.cmd` from any install path
+    "npm",
+    "npx",
+    "yarn",
+    "pnpm",
+    // npm-installed dev tools — bin entries land as `.cmd` shims
+    "tsc",
+    "eslint",
+    "biome",
+    "prettier",
+    "ruff",
+    "black",
+    "ts-prune",
+    // Patchwork OS / Claude orchestration — npm-installed
+    "claude",
+    "claude-ide-bridge",
+    "gemini",
+    "code-server",
+    // VS Code-family editor CLIs — `.cmd` shims from the official installers
+    "code",
+    "code-insiders",
+    "cursor",
+    "windsurf",
+]);
+/**
+ * Conservative variant of `ensureCmdShim`: only appends `.cmd` when the
+ * binary is in {@link KNOWN_CMD_SHIMS}. Use this from generic helpers like
+ * `execSafe` that receive arbitrary binary names from many call sites —
+ * blindly wrapping every bare name would turn working `spawn("git")` into
+ * broken `spawn("git.cmd")`.
+ *
+ * Same boilerplate as `ensureCmdShim` (no-op on non-Win, leaves explicit
+ * paths and pre-extended names alone). Differs only in the final wrap
+ * decision.
+ */
+export function ensureCmdShimIfKnown(binary) {
+    if (process.platform !== "win32")
+        return binary;
+    if (path.win32.extname(binary))
+        return binary;
+    if (binary.includes("\\") || binary.includes("/"))
+        return binary;
+    if (!KNOWN_CMD_SHIMS.has(binary))
+        return binary;
+    return `${binary}.cmd`;
+}
+//# sourceMappingURL=winShim.js.map

package/dist/winShim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"winShim.js","sourceRoot":"","sources":["../src/winShim.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAChD,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACjE,OAAO,GAAG,MAAM,MAAM,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,yDAAyD;IACzD,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,6DAA6D;IAC7D,KAAK;IACL,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,OAAO;IACP,UAAU;IACV,sDAAsD;IACtD,QAAQ;IACR,mBAAmB;IACnB,QAAQ;IACR,aAAa;IACb,yEAAyE;IACzE,MAAM;IACN,eAAe;IACf,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,GAAG,MAAM,MAAM,CAAC;AACzB,CAAC"}

package/dist/wireHaltPushDispatch.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Subscribe to ActivityLog and dispatch a Web Push notification
+ * whenever a recipe run completes with status=error.
+ *
+ * Lives outside the recipe runner so the runner stays push-agnostic
+ * (`yamlRunner.ts` already emits `recipe_done` lifecycle events —
+ * we just listen). Pushes are fire-and-forget; runner is never
+ * blocked or affected by a relay outage.
+ *
+ * Reads `pushServiceUrl` / `pushServiceToken` from a getter callback
+ * (not a captured value) so config edits through `/settings` take
+ * effect immediately without a bridge restart.
+ *
+ * Dedup: a run that is retried / resumed can emit `recipe_done` more
+ * than once. A short-window per-runSeq guard collapses those into a
+ * single push so a flapping run can't spam every subscribed device.
+ */
+import type { ActivityLog } from "./activityLog.js";
+interface WireHaltPushDispatchDeps {
+    activityLog: ActivityLog;
+    /** Called per event — returns the current push relay config or null
+     *  if push isn't configured. Reading from a getter rather than a
+     *  captured value picks up runtime config changes. */
+    getPushConfig: () => {
+        url: string;
+        token: string;
+    } | null;
+    logger?: {
+        warn?: (msg: string) => void;
+    };
+    /** Override the dedup window. Default 60_000 ms. Tests pass a small
+     *  value; production never sets it. */
+    dedupWindowMs?: number;
+    /** Injectable clock for deterministic tests. Default `Date.now`. */
+    now?: () => number;
+}
+export declare function wireHaltPushDispatch(deps: WireHaltPushDispatchDeps): () => void;
+export {};

package/dist/wireHaltPushDispatch.js

@@ -0,0 +1,71 @@
+/**
+ * Subscribe to ActivityLog and dispatch a Web Push notification
+ * whenever a recipe run completes with status=error.
+ *
+ * Lives outside the recipe runner so the runner stays push-agnostic
+ * (`yamlRunner.ts` already emits `recipe_done` lifecycle events —
+ * we just listen). Pushes are fire-and-forget; runner is never
+ * blocked or affected by a relay outage.
+ *
+ * Reads `pushServiceUrl` / `pushServiceToken` from a getter callback
+ * (not a captured value) so config edits through `/settings` take
+ * effect immediately without a bridge restart.
+ *
+ * Dedup: a run that is retried / resumed can emit `recipe_done` more
+ * than once. A short-window per-runSeq guard collapses those into a
+ * single push so a flapping run can't spam every subscribed device.
+ */
+import { dispatchHaltPushNotification } from "./haltPushDispatch.js";
+const DEFAULT_DEDUP_WINDOW_MS = 60_000;
+export function wireHaltPushDispatch(deps) {
+    const dedupWindowMs = deps.dedupWindowMs ?? DEFAULT_DEDUP_WINDOW_MS;
+    const now = deps.now ?? Date.now;
+    // runSeq → last-dispatched epoch ms. Pruned opportunistically on
+    // each event so the Map can't grow unbounded on a long-lived bridge.
+    const lastDispatched = new Map();
+    function prune(cutoff) {
+        for (const [seq, at] of lastDispatched) {
+            if (at < cutoff)
+                lastDispatched.delete(seq);
+        }
+    }
+    return deps.activityLog.subscribe((kind, entry) => {
+        if (kind !== "lifecycle")
+            return;
+        const lifecycle = entry;
+        if (lifecycle.event !== "recipe_done")
+            return;
+        const md = lifecycle.metadata ?? {};
+        if (md.status !== "error")
+            return;
+        const cfg = deps.getPushConfig();
+        if (!cfg)
+            return;
+        const recipeName = typeof md.recipeName === "string" ? md.recipeName : "recipe";
+        const runSeq = typeof md.runSeq === "number" ? md.runSeq : 0;
+        const errorMessage = typeof md.errorMessage === "string" ? md.errorMessage : undefined;
+        // Dedup: skip if this runSeq fired a push within the window.
+        // runSeq 0 is the "unknown" sentinel — never dedup it, since two
+        // genuinely distinct unknown-seq runs would otherwise collide.
+        const at = now();
+        prune(at - dedupWindowMs);
+        if (runSeq !== 0) {
+            const last = lastDispatched.get(runSeq);
+            if (last !== undefined && at - last < dedupWindowMs)
+                return;
+            lastDispatched.set(runSeq, at);
+        }
+        // Best-effort: dispatchHaltPushNotification swallows errors, but
+        // a synchronously-thrown URL parse error would still surface here.
+        dispatchHaltPushNotification(cfg.url, cfg.token, {
+            recipeName,
+            runSeq,
+            status: "error",
+            errorMessage,
+            occurredAt: at,
+        }).catch((err) => {
+            deps.logger?.warn?.(`[halt-push] unexpected dispatcher error: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    });
+}
+//# sourceMappingURL=wireHaltPushDispatch.js.map

package/dist/wireHaltPushDispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wireHaltPushDispatch.js","sourceRoot":"","sources":["../src/wireHaltPushDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAgBrE,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,MAAM,UAAU,oBAAoB,CAClC,IAA8B;IAE9B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,iEAAiE;IACjE,qEAAqE;IACrE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,SAAS,KAAK,CAAC,MAAc;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC;YACvC,IAAI,EAAE,GAAG,MAAM;gBAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAChD,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO;QACjC,MAAM,SAAS,GAAG,KAGjB,CAAC;QACF,IAAI,SAAS,CAAC,KAAK,KAAK,aAAa;YAAE,OAAO;QAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO;QAElC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,UAAU,GACd,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,YAAY,GAChB,OAAO,EAAE,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpE,6DAA6D;QAC7D,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,aAAa;gBAAE,OAAO;YAC5D,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,iEAAiE;QACjE,mEAAmE;QACnE,4BAA4B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE;YAC/C,UAAU;YACV,MAAM;YACN,MAAM,EAAE,OAAO;YACf,YAAY;YACZ,UAAU,EAAE,EAAE;SACf,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/writeFileAtomic.d.ts

@@ -0,0 +1,23 @@
+export type WriteFileAtomicData = string | NodeJS.ArrayBufferView;
+export interface WriteFileAtomicOptions {
+    /** Mode for the final file. Default: 0o644. */
+    mode?: number;
+    /** Encoding when `data` is a string. Default: utf-8. */
+    encoding?: BufferEncoding;
+    /**
+     * Optional cancellation signal — async variant only. Aborts the
+     * underlying `fs.promises.writeFile`; if abort fires after the
+     * write completes but before the rename, the target is left
+     * unchanged and the temp file is cleaned up.
+     */
+    signal?: AbortSignal;
+}
+/**
+ * Synchronous atomic write. Throws on failure. Best-effort temp cleanup.
+ */
+export declare function writeFileAtomicSync(target: string, data: WriteFileAtomicData, opts?: WriteFileAtomicOptions): void;
+/**
+ * Async atomic write. Returns a Promise; rejects on failure. Best-effort
+ * temp cleanup. Uses `fs.promises` end-to-end.
+ */
+export declare function writeFileAtomic(target: string, data: WriteFileAtomicData, opts?: WriteFileAtomicOptions): Promise<void>;

package/dist/writeFileAtomic.js

@@ -0,0 +1,121 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+/**
+ * Atomic file-write helpers — write to a sibling temp file, then `rename`
+ * into the target path. A crash mid-write leaves only the orphan temp
+ * file; the target is either the old content or the new content, never
+ * truncated.
+ *
+ * Why a shared helper?
+ * The recipe-runner / approval / token-storage paths already use this
+ * shape ad-hoc (see runLog.ts, decisionTraceLog.ts, activationMetrics.ts,
+ * connectors/tokenStorage.ts). The user-source-file edit tools
+ * (`editText`, `replaceBlock`, `searchAndReplace`, `transaction`,
+ * `refactorExtractFunction`, `fileOperations` overwrite) were doing
+ * direct `writeFile`/`writeFileSync` — a crash mid-write corrupts the
+ * user's code. Audit 2026-05-17.
+ *
+ * Temp-name shape: `${target}.tmp.${pid}.${rand}` — pid + 12 random hex
+ * chars so concurrent writes to the same target don't collide on their
+ * temp files (the rename is single-threaded at the kernel level; the
+ * collision risk is the temp file, not the final state).
+ *
+ * Cleanup on failure: if `writeFile` succeeds but `rename` fails, we
+ * best-effort `unlink` the temp file before re-throwing. If `writeFile`
+ * itself fails the temp file may not exist; we ignore unlink errors in
+ * both cases.
+ *
+ * NOT a `fsync` guarantee: Node's `writeFile`/`writeFileSync` does not
+ * fsync the file before close, and `rename`/`renameSync` does not fsync
+ * the parent dir. On `ext4` data=ordered and `apfs` this is fine in
+ * practice — the rename can't make the new contents visible until the
+ * data write hits the journal. On power-loss this guarantee weakens;
+ * accept that as a separate hardening pass.
+ */
+function tempPathFor(target) {
+    const rand = crypto.randomBytes(6).toString("hex");
+    return `${target}.tmp.${process.pid}.${rand}`;
+}
+/**
+ * Synchronous atomic write. Throws on failure. Best-effort temp cleanup.
+ */
+export function writeFileAtomicSync(target, data, opts = {}) {
+    const tmp = tempPathFor(target);
+    const mode = opts.mode ?? 0o644;
+    try {
+        if (typeof data === "string") {
+            fs.writeFileSync(tmp, data, { mode, encoding: opts.encoding ?? "utf-8" });
+        }
+        else {
+            fs.writeFileSync(tmp, data, { mode });
+        }
+        try {
+            fs.renameSync(tmp, target);
+        }
+        catch (renameErr) {
+            // On Windows, renameSync throws EEXIST when the target already exists
+            // (unlike POSIX which atomically replaces). Unlink the target and retry.
+            if (process.platform === "win32" &&
+                renameErr.code === "EEXIST") {
+                fs.unlinkSync(target);
+                fs.renameSync(tmp, target);
+            }
+            else {
+                throw renameErr;
+            }
+        }
+    }
+    catch (err) {
+        try {
+            fs.unlinkSync(tmp);
+        }
+        catch {
+            // already gone or never created
+        }
+        throw err;
+    }
+}
+/**
+ * Async atomic write. Returns a Promise; rejects on failure. Best-effort
+ * temp cleanup. Uses `fs.promises` end-to-end.
+ */
+export async function writeFileAtomic(target, data, opts = {}) {
+    const tmp = tempPathFor(target);
+    const mode = opts.mode ?? 0o644;
+    try {
+        if (typeof data === "string") {
+            await fs.promises.writeFile(tmp, data, {
+                mode,
+                encoding: opts.encoding ?? "utf-8",
+                signal: opts.signal,
+            });
+        }
+        else {
+            await fs.promises.writeFile(tmp, data, { mode, signal: opts.signal });
+        }
+        try {
+            await fs.promises.rename(tmp, target);
+        }
+        catch (renameErr) {
+            // Windows: rename throws EEXIST when target exists (unlike POSIX atomic replace).
+            if (process.platform === "win32" &&
+                renameErr.code === "EEXIST") {
+                await fs.promises.unlink(target);
+                await fs.promises.rename(tmp, target);
+            }
+            else {
+                throw renameErr;
+            }
+        }
+    }
+    catch (err) {
+        try {
+            await fs.promises.unlink(tmp);
+        }
+        catch {
+            // already gone or never created
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=writeFileAtomic.js.map

package/dist/writeFileAtomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeFileAtomic.js","sourceRoot":"","sources":["../src/writeFileAtomic.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;AAChD,CAAC;AAkBD;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,IAAyB,EACzB,OAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,sEAAsE;YACtE,yEAAyE;YACzE,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC3B,SAAmC,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;gBACD,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACtB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,IAAyB,EACzB,OAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;gBACrC,IAAI;gBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;gBAClC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,kFAAkF;YAClF,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC3B,SAAmC,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;gBACD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwork-os",
-  "version": "0.2.0-beta.1",
+  "version": "0.2.0-beta.10.canary.100",
   "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",
@@ -47,7 +47,10 @@
     "anthropic",
     "ollama",
     "local-first",
-    "coding-assistant"
+    "coding-assistant",
+    "smithery",
+    "model-context-protocol",
+    "developer-tools"
   ],
   "repository": {
     "type": "git",
@@ -62,14 +65,19 @@
     "!dist/__tests__",
     "!dist/**/__tests__",
     "scripts/start-all.sh",
+    "scripts/start-all.mjs",
+    "scripts/start-all.ps1",
     "scripts/start-orchestrator.sh",
+    "scripts/start-orchestrator.ps1",
     "scripts/start-remote.sh",
+    "scripts/start-remote.mjs",
     "scripts/install-extension.sh",
     "scripts/gen-mcp-config.sh",
     "scripts/mcp-stdio-shim.cjs",
     "scripts/postinstall.mjs",
     "scripts/start-vps.sh",
     "scripts/gen-claude-desktop-config.sh",
+    "scripts/smoke/run-all.mjs",
     "templates",
     "deploy",
     "LICENSE",
@@ -80,10 +88,12 @@
   },
   "scripts": {
     "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc && (node scripts/postinstall.mjs || true)",
+    "install:global": "node scripts/install-global.mjs",
     "dev": "tsx src/index.ts",
     "start": "node dist/index.js",
     "test": "vitest run",
-    "test:smoke": "bash scripts/smoke/run-all.sh",
+    "test:smoke": "node scripts/smoke/run-all.mjs",
+    "test:smoke:bash": "bash scripts/smoke/run-all.sh",
     "test:smoke:dashboard": "node scripts/smoke/dashboard-walk.mjs",
     "schema:generate": "node scripts/generate-schemas.mjs",
     "schema:check": "node scripts/audit-schema-changes.mjs",
@@ -97,25 +107,31 @@
     "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",
     "typecheck:tests:core": "tsc --noEmit -p tsconfig.tests.core.json",
     "postinstall": "node scripts/postinstall.mjs || true",
-    "prepublishOnly": "npm run build && node dist/index.js --help | grep -q issuer-url && node scripts/publish-schemas.mjs",
+    "prepublishOnly": "npm run build && node -e \"const h=require('child_process').execFileSync('node',['dist/index.js','--workspace','.','--help'],{encoding:'utf8'});if(!h.includes('issuer-url'))process.exit(1)\" && node scripts/publish-schemas.mjs",
     "smoke": "node smoke-test-v2.mjs",
     "remote": "bash scripts/start-remote.sh",
+    "remote:node": "node scripts/start-remote.mjs",
     "vps": "bash scripts/start-vps.sh",
     "vps:stop": "bash scripts/start-vps.sh --stop",
     "start-all": "bash scripts/start-all.sh",
+    "start-all:node": "node scripts/start-all.mjs",
+    "start-all:win": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/start-all.ps1",
     "start-orchestrator": "bash scripts/start-orchestrator.sh",
-    "start:automation": "claude-ide-bridge --workspace . --automation --automation-policy automation-policy.json --claude-driver subprocess --full",
+    "start-orchestrator:win": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/start-orchestrator.ps1",
+    "start:bridge": "node dist/index.js --workspace .",
+    "start:automation": "claude-ide-bridge --workspace . --automation --automation-policy automation-policy.json --driver subprocess --full",
     "prepare": "husky"
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.213.0",
-    "@opentelemetry/sdk-node": "^0.213.0",
+    "@opentelemetry/resources": "^2.6.0",
+    "@opentelemetry/sdk-trace-node": "^2.7.1",
     "@opentelemetry/semantic-conventions": "^1.40.0",
     "ajv": "^8.18.0",
     "ipaddr.js": "^2.3.0",
     "minimatch": "^10.0.0",
-    "node-cron": "^3.0.3",
+    "node-cron": "^4.2.1",
     "undici": "^6.25.0",
     "ws": "^8.18.0",
     "yaml": "^2.8.3"

package/scripts/postinstall.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+
 /**
  * postinstall.mjs — wire up optional local binaries into node_modules/.bin
  * so that probeAll() can discover them via the standard local-bin lookup.
@@ -7,8 +8,10 @@
  *   @vscode/ripgrep  →  node_modules/.bin/rg
  */
 
+import { execFileSync } from "node:child_process";
 import {
   chmodSync,
+  copyFileSync,
   existsSync,
   mkdirSync,
   symlinkSync,
@@ -49,8 +52,19 @@ function linkBin(pkgName, binaryName, linkName = binaryName) {
     if (existsSync(dest)) {
       unlinkSync(dest);
     }
-    symlinkSync(src, dest);
-    console.log(`  linked ${linkName} → ${path.relative(root, src)}`);
+    try {
+      symlinkSync(src, dest);
+      console.log(`  linked ${linkName} → ${path.relative(root, src)}`);
+    } catch (err) {
+      // Windows non-admin users can't create symlinks without Developer Mode.
+      // Fall back to a copy so the binary is still discoverable.
+      if (process.platform === "win32") {
+        copyFileSync(src, dest);
+        console.log(`  copied ${linkName} → ${path.relative(root, src)}`);
+      } else {
+        throw err;
+      }
+    }
   } catch {
     // Package not installed — silently skip
   }
@@ -65,4 +79,30 @@ try {
 
 console.log("[postinstall] Linking optional local binaries...");
 linkBin("@vscode/ripgrep", "rg");
+
+// Auto-install dashboard dependencies on first global install
+const dashboardDir = fileURLToPath(new URL("../dashboard", import.meta.url));
+if (
+  existsSync(dashboardDir) &&
+  !existsSync(path.join(dashboardDir, "node_modules"))
+) {
+  console.log(
+    "[postinstall] Installing dashboard dependencies (first-time setup)...",
+  );
+  try {
+    // Use execFileSync instead of execSync to avoid shell invocation
+    const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";
+    execFileSync(npmCmd, ["install", "--prefer-offline"], {
+      cwd: dashboardDir,
+      stdio: "inherit",
+    });
+    console.log("[postinstall] Dashboard dependencies installed.");
+  } catch {
+    console.warn(
+      "[postinstall] Warning: could not install dashboard dependencies automatically.",
+    );
+    console.warn(`  Run manually: cd ${dashboardDir} && npm install`);
+  }
+}
+
 console.log("[postinstall] Done.");