patchwork-os 0.2.0-beta.1 → 0.2.0-beta.10.canary.95

package/dist/winShim.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"winShim.js","sourceRoot":"","sources":["../src/winShim.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,aAAa,CAAC,MAAc;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAChD,wEAAwE;IACxE,6EAA6E;IAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACjE,OAAO,GAAG,MAAM,MAAM,CAAC;AACzB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC;IACnD,yDAAyD;IACzD,KAAK;IACL,KAAK;IACL,MAAM;IACN,MAAM;IACN,6DAA6D;IAC7D,KAAK;IACL,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,OAAO;IACP,UAAU;IACV,sDAAsD;IACtD,QAAQ;IACR,mBAAmB;IACnB,QAAQ;IACR,aAAa;IACb,yEAAyE;IACzE,MAAM;IACN,eAAe;IACf,QAAQ;IACR,UAAU;CACX,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAChD,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,MAAM,CAAC;IACjE,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAChD,OAAO,GAAG,MAAM,MAAM,CAAC;AACzB,CAAC"}

package/dist/wireHaltPushDispatch.d.ts

@@ -0,0 +1,38 @@
+/**
+ * Subscribe to ActivityLog and dispatch a Web Push notification
+ * whenever a recipe run completes with status=error.
+ *
+ * Lives outside the recipe runner so the runner stays push-agnostic
+ * (`yamlRunner.ts` already emits `recipe_done` lifecycle events —
+ * we just listen). Pushes are fire-and-forget; runner is never
+ * blocked or affected by a relay outage.
+ *
+ * Reads `pushServiceUrl` / `pushServiceToken` from a getter callback
+ * (not a captured value) so config edits through `/settings` take
+ * effect immediately without a bridge restart.
+ *
+ * Dedup: a run that is retried / resumed can emit `recipe_done` more
+ * than once. A short-window per-runSeq guard collapses those into a
+ * single push so a flapping run can't spam every subscribed device.
+ */
+import type { ActivityLog } from "./activityLog.js";
+interface WireHaltPushDispatchDeps {
+    activityLog: ActivityLog;
+    /** Called per event — returns the current push relay config or null
+     *  if push isn't configured. Reading from a getter rather than a
+     *  captured value picks up runtime config changes. */
+    getPushConfig: () => {
+        url: string;
+        token: string;
+    } | null;
+    logger?: {
+        warn?: (msg: string) => void;
+    };
+    /** Override the dedup window. Default 60_000 ms. Tests pass a small
+     *  value; production never sets it. */
+    dedupWindowMs?: number;
+    /** Injectable clock for deterministic tests. Default `Date.now`. */
+    now?: () => number;
+}
+export declare function wireHaltPushDispatch(deps: WireHaltPushDispatchDeps): () => void;
+export {};

package/dist/wireHaltPushDispatch.js

@@ -0,0 +1,71 @@
+/**
+ * Subscribe to ActivityLog and dispatch a Web Push notification
+ * whenever a recipe run completes with status=error.
+ *
+ * Lives outside the recipe runner so the runner stays push-agnostic
+ * (`yamlRunner.ts` already emits `recipe_done` lifecycle events —
+ * we just listen). Pushes are fire-and-forget; runner is never
+ * blocked or affected by a relay outage.
+ *
+ * Reads `pushServiceUrl` / `pushServiceToken` from a getter callback
+ * (not a captured value) so config edits through `/settings` take
+ * effect immediately without a bridge restart.
+ *
+ * Dedup: a run that is retried / resumed can emit `recipe_done` more
+ * than once. A short-window per-runSeq guard collapses those into a
+ * single push so a flapping run can't spam every subscribed device.
+ */
+import { dispatchHaltPushNotification } from "./haltPushDispatch.js";
+const DEFAULT_DEDUP_WINDOW_MS = 60_000;
+export function wireHaltPushDispatch(deps) {
+    const dedupWindowMs = deps.dedupWindowMs ?? DEFAULT_DEDUP_WINDOW_MS;
+    const now = deps.now ?? Date.now;
+    // runSeq → last-dispatched epoch ms. Pruned opportunistically on
+    // each event so the Map can't grow unbounded on a long-lived bridge.
+    const lastDispatched = new Map();
+    function prune(cutoff) {
+        for (const [seq, at] of lastDispatched) {
+            if (at < cutoff)
+                lastDispatched.delete(seq);
+        }
+    }
+    return deps.activityLog.subscribe((kind, entry) => {
+        if (kind !== "lifecycle")
+            return;
+        const lifecycle = entry;
+        if (lifecycle.event !== "recipe_done")
+            return;
+        const md = lifecycle.metadata ?? {};
+        if (md.status !== "error")
+            return;
+        const cfg = deps.getPushConfig();
+        if (!cfg)
+            return;
+        const recipeName = typeof md.recipeName === "string" ? md.recipeName : "recipe";
+        const runSeq = typeof md.runSeq === "number" ? md.runSeq : 0;
+        const errorMessage = typeof md.errorMessage === "string" ? md.errorMessage : undefined;
+        // Dedup: skip if this runSeq fired a push within the window.
+        // runSeq 0 is the "unknown" sentinel — never dedup it, since two
+        // genuinely distinct unknown-seq runs would otherwise collide.
+        const at = now();
+        prune(at - dedupWindowMs);
+        if (runSeq !== 0) {
+            const last = lastDispatched.get(runSeq);
+            if (last !== undefined && at - last < dedupWindowMs)
+                return;
+            lastDispatched.set(runSeq, at);
+        }
+        // Best-effort: dispatchHaltPushNotification swallows errors, but
+        // a synchronously-thrown URL parse error would still surface here.
+        dispatchHaltPushNotification(cfg.url, cfg.token, {
+            recipeName,
+            runSeq,
+            status: "error",
+            errorMessage,
+            occurredAt: at,
+        }).catch((err) => {
+            deps.logger?.warn?.(`[halt-push] unexpected dispatcher error: ${err instanceof Error ? err.message : String(err)}`);
+        });
+    });
+}
+//# sourceMappingURL=wireHaltPushDispatch.js.map

package/dist/wireHaltPushDispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wireHaltPushDispatch.js","sourceRoot":"","sources":["../src/wireHaltPushDispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAAE,4BAA4B,EAAE,MAAM,uBAAuB,CAAC;AAgBrE,MAAM,uBAAuB,GAAG,MAAM,CAAC;AAEvC,MAAM,UAAU,oBAAoB,CAClC,IAA8B;IAE9B,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,uBAAuB,CAAC;IACpE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,iEAAiE;IACjE,qEAAqE;IACrE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEjD,SAAS,KAAK,CAAC,MAAc;QAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,cAAc,EAAE,CAAC;YACvC,IAAI,EAAE,GAAG,MAAM;gBAAE,cAAc,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QAChD,IAAI,IAAI,KAAK,WAAW;YAAE,OAAO;QACjC,MAAM,SAAS,GAAG,KAGjB,CAAC;QACF,IAAI,SAAS,CAAC,KAAK,KAAK,aAAa;YAAE,OAAO;QAC9C,MAAM,EAAE,GAAG,SAAS,CAAC,QAAQ,IAAI,EAAE,CAAC;QACpC,IAAI,EAAE,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO;QAElC,MAAM,GAAG,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACjC,IAAI,CAAC,GAAG;YAAE,OAAO;QAEjB,MAAM,UAAU,GACd,OAAO,EAAE,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/D,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,MAAM,YAAY,GAChB,OAAO,EAAE,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;QAEpE,6DAA6D;QAC7D,iEAAiE;QACjE,+DAA+D;QAC/D,MAAM,EAAE,GAAG,GAAG,EAAE,CAAC;QACjB,KAAK,CAAC,EAAE,GAAG,aAAa,CAAC,CAAC;QAC1B,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxC,IAAI,IAAI,KAAK,SAAS,IAAI,EAAE,GAAG,IAAI,GAAG,aAAa;gBAAE,OAAO;YAC5D,cAAc,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACjC,CAAC;QAED,iEAAiE;QACjE,mEAAmE;QACnE,4BAA4B,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE;YAC/C,UAAU;YACV,MAAM;YACN,MAAM,EAAE,OAAO;YACf,YAAY;YACZ,UAAU,EAAE,EAAE;SACf,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;YACf,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,4CAA4C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/F,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/writeFileAtomic.d.ts

@@ -0,0 +1,23 @@
+export type WriteFileAtomicData = string | NodeJS.ArrayBufferView;
+export interface WriteFileAtomicOptions {
+    /** Mode for the final file. Default: 0o644. */
+    mode?: number;
+    /** Encoding when `data` is a string. Default: utf-8. */
+    encoding?: BufferEncoding;
+    /**
+     * Optional cancellation signal — async variant only. Aborts the
+     * underlying `fs.promises.writeFile`; if abort fires after the
+     * write completes but before the rename, the target is left
+     * unchanged and the temp file is cleaned up.
+     */
+    signal?: AbortSignal;
+}
+/**
+ * Synchronous atomic write. Throws on failure. Best-effort temp cleanup.
+ */
+export declare function writeFileAtomicSync(target: string, data: WriteFileAtomicData, opts?: WriteFileAtomicOptions): void;
+/**
+ * Async atomic write. Returns a Promise; rejects on failure. Best-effort
+ * temp cleanup. Uses `fs.promises` end-to-end.
+ */
+export declare function writeFileAtomic(target: string, data: WriteFileAtomicData, opts?: WriteFileAtomicOptions): Promise<void>;

package/dist/writeFileAtomic.js

@@ -0,0 +1,121 @@
+import crypto from "node:crypto";
+import fs from "node:fs";
+/**
+ * Atomic file-write helpers — write to a sibling temp file, then `rename`
+ * into the target path. A crash mid-write leaves only the orphan temp
+ * file; the target is either the old content or the new content, never
+ * truncated.
+ *
+ * Why a shared helper?
+ * The recipe-runner / approval / token-storage paths already use this
+ * shape ad-hoc (see runLog.ts, decisionTraceLog.ts, activationMetrics.ts,
+ * connectors/tokenStorage.ts). The user-source-file edit tools
+ * (`editText`, `replaceBlock`, `searchAndReplace`, `transaction`,
+ * `refactorExtractFunction`, `fileOperations` overwrite) were doing
+ * direct `writeFile`/`writeFileSync` — a crash mid-write corrupts the
+ * user's code. Audit 2026-05-17.
+ *
+ * Temp-name shape: `${target}.tmp.${pid}.${rand}` — pid + 12 random hex
+ * chars so concurrent writes to the same target don't collide on their
+ * temp files (the rename is single-threaded at the kernel level; the
+ * collision risk is the temp file, not the final state).
+ *
+ * Cleanup on failure: if `writeFile` succeeds but `rename` fails, we
+ * best-effort `unlink` the temp file before re-throwing. If `writeFile`
+ * itself fails the temp file may not exist; we ignore unlink errors in
+ * both cases.
+ *
+ * NOT a `fsync` guarantee: Node's `writeFile`/`writeFileSync` does not
+ * fsync the file before close, and `rename`/`renameSync` does not fsync
+ * the parent dir. On `ext4` data=ordered and `apfs` this is fine in
+ * practice — the rename can't make the new contents visible until the
+ * data write hits the journal. On power-loss this guarantee weakens;
+ * accept that as a separate hardening pass.
+ */
+function tempPathFor(target) {
+    const rand = crypto.randomBytes(6).toString("hex");
+    return `${target}.tmp.${process.pid}.${rand}`;
+}
+/**
+ * Synchronous atomic write. Throws on failure. Best-effort temp cleanup.
+ */
+export function writeFileAtomicSync(target, data, opts = {}) {
+    const tmp = tempPathFor(target);
+    const mode = opts.mode ?? 0o644;
+    try {
+        if (typeof data === "string") {
+            fs.writeFileSync(tmp, data, { mode, encoding: opts.encoding ?? "utf-8" });
+        }
+        else {
+            fs.writeFileSync(tmp, data, { mode });
+        }
+        try {
+            fs.renameSync(tmp, target);
+        }
+        catch (renameErr) {
+            // On Windows, renameSync throws EEXIST when the target already exists
+            // (unlike POSIX which atomically replaces). Unlink the target and retry.
+            if (process.platform === "win32" &&
+                renameErr.code === "EEXIST") {
+                fs.unlinkSync(target);
+                fs.renameSync(tmp, target);
+            }
+            else {
+                throw renameErr;
+            }
+        }
+    }
+    catch (err) {
+        try {
+            fs.unlinkSync(tmp);
+        }
+        catch {
+            // already gone or never created
+        }
+        throw err;
+    }
+}
+/**
+ * Async atomic write. Returns a Promise; rejects on failure. Best-effort
+ * temp cleanup. Uses `fs.promises` end-to-end.
+ */
+export async function writeFileAtomic(target, data, opts = {}) {
+    const tmp = tempPathFor(target);
+    const mode = opts.mode ?? 0o644;
+    try {
+        if (typeof data === "string") {
+            await fs.promises.writeFile(tmp, data, {
+                mode,
+                encoding: opts.encoding ?? "utf-8",
+                signal: opts.signal,
+            });
+        }
+        else {
+            await fs.promises.writeFile(tmp, data, { mode, signal: opts.signal });
+        }
+        try {
+            await fs.promises.rename(tmp, target);
+        }
+        catch (renameErr) {
+            // Windows: rename throws EEXIST when target exists (unlike POSIX atomic replace).
+            if (process.platform === "win32" &&
+                renameErr.code === "EEXIST") {
+                await fs.promises.unlink(target);
+                await fs.promises.rename(tmp, target);
+            }
+            else {
+                throw renameErr;
+            }
+        }
+    }
+    catch (err) {
+        try {
+            await fs.promises.unlink(tmp);
+        }
+        catch {
+            // already gone or never created
+        }
+        throw err;
+    }
+}
+//# sourceMappingURL=writeFileAtomic.js.map

package/dist/writeFileAtomic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeFileAtomic.js","sourceRoot":"","sources":["../src/writeFileAtomic.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,SAAS,CAAC;AAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,IAAI,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACnD,OAAO,GAAG,MAAM,QAAQ,OAAO,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;AAChD,CAAC;AAkBD;;GAEG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAc,EACd,IAAyB,EACzB,OAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO,EAAE,CAAC,CAAC;QAC5E,CAAC;aAAM,CAAC;YACN,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QAC7B,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,sEAAsE;YACtE,yEAAyE;YACzE,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC3B,SAAmC,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;gBACD,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;gBACtB,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YAC7B,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,IAAyB,EACzB,OAA+B,EAAE;IAEjC,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE;gBACrC,IAAI;gBACJ,QAAQ,EAAE,IAAI,CAAC,QAAQ,IAAI,OAAO;gBAClC,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACxE,CAAC;QACD,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,kFAAkF;YAClF,IACE,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAC3B,SAAmC,CAAC,IAAI,KAAK,QAAQ,EACtD,CAAC;gBACD,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACjC,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;YACxC,CAAC;iBAAM,CAAC;gBACN,MAAM,SAAS,CAAC;YAClB,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,gCAAgC;QAClC,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "patchwork-os",
-  "version": "0.2.0-beta.1",
+  "version": "0.2.0-beta.10.canary.95",
   "description": "Your personal AI runtime, local-first. Patchwork OS gives any AI model a consistent set of tools, YAML recipes, a delegation policy with approval queue, and a durable trace memory — all on your machine, all under your policy.",
   "type": "module",
   "main": "dist/index.js",
@@ -47,7 +47,10 @@
     "anthropic",
     "ollama",
     "local-first",
-    "coding-assistant"
+    "coding-assistant",
+    "smithery",
+    "model-context-protocol",
+    "developer-tools"
   ],
   "repository": {
     "type": "git",
@@ -62,14 +65,19 @@
     "!dist/__tests__",
     "!dist/**/__tests__",
     "scripts/start-all.sh",
+    "scripts/start-all.mjs",
+    "scripts/start-all.ps1",
     "scripts/start-orchestrator.sh",
+    "scripts/start-orchestrator.ps1",
     "scripts/start-remote.sh",
+    "scripts/start-remote.mjs",
     "scripts/install-extension.sh",
     "scripts/gen-mcp-config.sh",
     "scripts/mcp-stdio-shim.cjs",
     "scripts/postinstall.mjs",
     "scripts/start-vps.sh",
     "scripts/gen-claude-desktop-config.sh",
+    "scripts/smoke/run-all.mjs",
     "templates",
     "deploy",
     "LICENSE",
@@ -80,10 +88,12 @@
   },
   "scripts": {
     "build": "node -e \"require('fs').rmSync('dist',{recursive:true,force:true})\" && tsc && (node scripts/postinstall.mjs || true)",
+    "install:global": "node scripts/install-global.mjs",
     "dev": "tsx src/index.ts",
     "start": "node dist/index.js",
     "test": "vitest run",
-    "test:smoke": "bash scripts/smoke/run-all.sh",
+    "test:smoke": "node scripts/smoke/run-all.mjs",
+    "test:smoke:bash": "bash scripts/smoke/run-all.sh",
     "test:smoke:dashboard": "node scripts/smoke/dashboard-walk.mjs",
     "schema:generate": "node scripts/generate-schemas.mjs",
     "schema:check": "node scripts/audit-schema-changes.mjs",
@@ -97,25 +107,31 @@
     "typecheck:tests": "tsc --noEmit -p tsconfig.tests.json",
     "typecheck:tests:core": "tsc --noEmit -p tsconfig.tests.core.json",
     "postinstall": "node scripts/postinstall.mjs || true",
-    "prepublishOnly": "npm run build && node dist/index.js --help | grep -q issuer-url && node scripts/publish-schemas.mjs",
+    "prepublishOnly": "npm run build && node -e \"const h=require('child_process').execFileSync('node',['dist/index.js','--workspace','.','--help'],{encoding:'utf8'});if(!h.includes('issuer-url'))process.exit(1)\" && node scripts/publish-schemas.mjs",
     "smoke": "node smoke-test-v2.mjs",
     "remote": "bash scripts/start-remote.sh",
+    "remote:node": "node scripts/start-remote.mjs",
     "vps": "bash scripts/start-vps.sh",
     "vps:stop": "bash scripts/start-vps.sh --stop",
     "start-all": "bash scripts/start-all.sh",
+    "start-all:node": "node scripts/start-all.mjs",
+    "start-all:win": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/start-all.ps1",
     "start-orchestrator": "bash scripts/start-orchestrator.sh",
-    "start:automation": "claude-ide-bridge --workspace . --automation --automation-policy automation-policy.json --claude-driver subprocess --full",
+    "start-orchestrator:win": "powershell -NoProfile -ExecutionPolicy Bypass -File scripts/start-orchestrator.ps1",
+    "start:bridge": "node dist/index.js --workspace .",
+    "start:automation": "claude-ide-bridge --workspace . --automation --automation-policy automation-policy.json --driver subprocess --full",
     "prepare": "husky"
   },
   "dependencies": {
     "@opentelemetry/api": "^1.9.0",
     "@opentelemetry/exporter-trace-otlp-http": "^0.213.0",
-    "@opentelemetry/sdk-node": "^0.213.0",
+    "@opentelemetry/resources": "^2.6.0",
+    "@opentelemetry/sdk-trace-node": "^2.7.1",
     "@opentelemetry/semantic-conventions": "^1.40.0",
     "ajv": "^8.18.0",
     "ipaddr.js": "^2.3.0",
     "minimatch": "^10.0.0",
-    "node-cron": "^3.0.3",
+    "node-cron": "^4.2.1",
     "undici": "^6.25.0",
     "ws": "^8.18.0",
     "yaml": "^2.8.3"

package/scripts/postinstall.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+
 /**
  * postinstall.mjs — wire up optional local binaries into node_modules/.bin
  * so that probeAll() can discover them via the standard local-bin lookup.
@@ -7,8 +8,10 @@
  *   @vscode/ripgrep  →  node_modules/.bin/rg
  */
 
+import { execFileSync } from "node:child_process";
 import {
   chmodSync,
+  copyFileSync,
   existsSync,
   mkdirSync,
   symlinkSync,
@@ -49,8 +52,19 @@ function linkBin(pkgName, binaryName, linkName = binaryName) {
     if (existsSync(dest)) {
       unlinkSync(dest);
     }
-    symlinkSync(src, dest);
-    console.log(`  linked ${linkName} → ${path.relative(root, src)}`);
+    try {
+      symlinkSync(src, dest);
+      console.log(`  linked ${linkName} → ${path.relative(root, src)}`);
+    } catch (err) {
+      // Windows non-admin users can't create symlinks without Developer Mode.
+      // Fall back to a copy so the binary is still discoverable.
+      if (process.platform === "win32") {
+        copyFileSync(src, dest);
+        console.log(`  copied ${linkName} → ${path.relative(root, src)}`);
+      } else {
+        throw err;
+      }
+    }
   } catch {
     // Package not installed — silently skip
   }
@@ -65,4 +79,30 @@ try {
 
 console.log("[postinstall] Linking optional local binaries...");
 linkBin("@vscode/ripgrep", "rg");
+
+// Auto-install dashboard dependencies on first global install
+const dashboardDir = fileURLToPath(new URL("../dashboard", import.meta.url));
+if (
+  existsSync(dashboardDir) &&
+  !existsSync(path.join(dashboardDir, "node_modules"))
+) {
+  console.log(
+    "[postinstall] Installing dashboard dependencies (first-time setup)...",
+  );
+  try {
+    // Use execFileSync instead of execSync to avoid shell invocation
+    const npmCmd = process.platform === "win32" ? "npm.cmd" : "npm";
+    execFileSync(npmCmd, ["install", "--prefer-offline"], {
+      cwd: dashboardDir,
+      stdio: "inherit",
+    });
+    console.log("[postinstall] Dashboard dependencies installed.");
+  } catch {
+    console.warn(
+      "[postinstall] Warning: could not install dashboard dependencies automatically.",
+    );
+    console.warn(`  Run manually: cd ${dashboardDir} && npm install`);
+  }
+}
+
 console.log("[postinstall] Done.");

package/scripts/smoke/run-all.mjs

@@ -0,0 +1,213 @@
+#!/usr/bin/env node
+// Cross-platform smoke test runner — replaces run-all.sh.
+// Works on Windows (PowerShell/cmd), macOS, and Linux.
+import { execFileSync, spawn } from "node:child_process";
+import fs from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+
+const __dirname = path.dirname(fileURLToPath(import.meta.url));
+const BRIDGE = process.env.BRIDGE ?? "claude-ide-bridge";
+const PORT = 37210;
+const CAT2_PORT = 37211;
+
+// Security: shell metacharacters that could enable command injection.
+// On Windows `\` is the path separator (D:\…\bridge.cmd), not an injection
+// vector. Same fix PR #527 applied to scripts/start-all.mjs.
+const SHELL_METACHARACTERS =
+  process.platform === "win32"
+    ? /[;&|`$(){}[\]<>"'\n\r]/
+    : /[;&|`$(){}[\]<>"'\\\n\r]/;
+
+/**
+ * Validate that a binary path is safe to execute.
+ * Prevents command injection by checking for shell metacharacters.
+ * @throws Error if path contains dangerous characters
+ */
+function validateBinaryPath(binaryPath) {
+  if (!binaryPath || typeof binaryPath !== "string") {
+    throw new Error("Binary path is empty or invalid");
+  }
+  if (SHELL_METACHARACTERS.test(binaryPath)) {
+    throw new Error(
+      `Binary path contains shell metacharacters (potential injection): ${binaryPath}`,
+    );
+  }
+}
+
+// Validate BRIDGE path on startup
+try {
+  validateBinaryPath(BRIDGE);
+} catch (err) {
+  console.error(`ERROR: ${err.message}`);
+  process.exit(1);
+}
+
+const TMPWS = fs.mkdtempSync(path.join(os.tmpdir(), "patchwork-smoke-ws-"));
+const CLAUDE_CFG = fs.mkdtempSync(
+  path.join(os.tmpdir(), "patchwork-smoke-cfg-"),
+);
+fs.mkdirSync(path.join(CLAUDE_CFG, "ide"), { recursive: true });
+
+process.env.CLAUDE_CONFIG_DIR = CLAUDE_CFG;
+
+let bridgePid = null;
+let cat2Pid = null;
+let cat2Cfg = null;
+
+function cleanup() {
+  for (const pid of [bridgePid, cat2Pid]) {
+    if (pid == null) continue;
+    try {
+      process.kill(pid);
+    } catch {
+      /* already gone */
+    }
+  }
+  for (const dir of [TMPWS, CLAUDE_CFG, cat2Cfg]) {
+    if (!dir) continue;
+    try {
+      fs.rmSync(dir, { recursive: true, force: true });
+    } catch {
+      /* best-effort */
+    }
+  }
+}
+
+process.on("exit", cleanup);
+process.on("SIGINT", () => process.exit(1));
+process.on("SIGTERM", () => process.exit(1));
+
+// Windows GHA runners are noticeably slower at cold-starting node (signed-
+// binary scan, AV hooks). 10s causes recurring "lock file not written" flakes
+// on main. PR #538 doubled the bound in helpers.mjs for individual smoke
+// scripts; this harness was missed. Match the doubled budget here too.
+const DEFAULT_LOCK_TIMEOUT_MS = process.platform === "win32" ? 30_000 : 10_000;
+
+function waitForLock(cfgDir, port, timeoutMs = DEFAULT_LOCK_TIMEOUT_MS) {
+  const lockPath = path.join(cfgDir, "ide", `${port}.lock`);
+  const deadline = Date.now() + timeoutMs;
+  while (!fs.existsSync(lockPath)) {
+    if (Date.now() > deadline) return false;
+    // busy-wait in 100ms increments — same as the bash script
+    Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 100);
+  }
+  return true;
+}
+
+// Spawn bridge for the given port and config dir. Captures stderr so a
+// startup failure can be surfaced — `stdio: "ignore"` would swallow it
+// and leave the operator staring at "lock file not written after 10s".
+function startBridge(port, cfgDir, wsDir) {
+  // Security: BRIDGE path already validated on startup
+  const proc = spawn(BRIDGE, ["--port", String(port), "--workspace", wsDir], {
+    env: { ...process.env, CLAUDE_CONFIG_DIR: cfgDir },
+    stdio: ["ignore", "ignore", "pipe"],
+    // On Windows, npm global bins are .cmd wrappers that need shell:true
+    // Safe because BRIDGE path is validated for injection chars on startup
+    shell: process.platform === "win32",
+  });
+  proc.stderrBuf = "";
+  proc.stderr.on("data", (d) => {
+    proc.stderrBuf += d.toString();
+  });
+  return proc;
+}
+
+// ── Start main bridge ─────────────────────────────────────────────────────────
+console.log(`Starting bridge on port ${PORT}...`);
+const bridgeProc = startBridge(PORT, CLAUDE_CFG, TMPWS);
+bridgePid = bridgeProc.pid;
+
+if (!waitForLock(CLAUDE_CFG, PORT)) {
+  console.error(
+    `ERROR: bridge lock file not written after ${DEFAULT_LOCK_TIMEOUT_MS / 1000}s`,
+  );
+  console.error(
+    `Bridge stderr (last 4 KB):\n${(bridgeProc.stderrBuf || "(empty)").slice(-4096)}`,
+  );
+  process.exit(1);
+}
+// tiny extra buffer for WS listener to bind
+Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 200);
+
+const TOKEN = execFileSync(BRIDGE, ["print-token", "--port", String(PORT)], {
+  encoding: "utf-8",
+  shell: process.platform === "win32",
+}).trim();
+
+console.log(`Bridge ready. Token: ${TOKEN.slice(0, 8)}...\n`);
+
+// ── Start CAT-2 bridge (separate instance — CAT-2 kills the bridge it tests) ─
+cat2Cfg = fs.mkdtempSync(path.join(os.tmpdir(), "patchwork-smoke-cat2-"));
+fs.mkdirSync(path.join(cat2Cfg, "ide"), { recursive: true });
+
+const cat2Proc = startBridge(CAT2_PORT, cat2Cfg, TMPWS);
+cat2Pid = cat2Proc.pid;
+waitForLock(cat2Cfg, CAT2_PORT);
+Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 200);
+
+// ── Category runner ───────────────────────────────────────────────────────────
+let pass = 0;
+let fail = 0;
+const failures = [];
+
+function runCat(label, scriptFile, args = [], extraEnv = {}) {
+  try {
+    execFileSync(process.execPath, [scriptFile, ...args], {
+      env: { ...process.env, ...extraEnv },
+      stdio: "inherit",
+    });
+    console.log(`\x1b[32m[PASS]\x1b[0m ${label}`);
+    pass++;
+  } catch {
+    console.log(`\x1b[31m[FAIL]\x1b[0m ${label}`);
+    fail++;
+    failures.push(label);
+  }
+}
+
+const S = __dirname;
+const P = String(PORT);
+const T = TOKEN;
+
+runCat(
+  "CAT-2 (lockfile)",
+  path.join(S, "cat2-lockfile.mjs"),
+  [String(CAT2_PORT), String(cat2Pid)],
+  { CLAUDE_CONFIG_DIR: cat2Cfg },
+);
+fs.rmSync(cat2Cfg, { recursive: true, force: true });
+cat2Cfg = null;
+cat2Pid = null;
+
+runCat("CAT-3 (auth)", path.join(S, "cat3-auth.mjs"), [P, T]);
+runCat("CAT-4 (tools)", path.join(S, "cat4-tools.mjs"));
+runCat("CAT-5 (http)", path.join(S, "cat5-http.mjs"), [P, T]);
+runCat("CAT-6 (oauth)", path.join(S, "cat6-oauth.mjs"));
+runCat("CAT-7 (plugin)", path.join(S, "cat7-plugin.mjs"));
+runCat("CAT-8 (ratelimit)", path.join(S, "cat8-ratelimit.mjs"), [P, T]);
+
+// Give bridge 1s to reset after CAT-8 saturates the rate limiter
+Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 1000);
+
+runCat("CAT-9 (prompts/res)", path.join(S, "cat9-prompts-resources.mjs"), [
+  P,
+  T,
+]);
+runCat("CAT-10 (health)", path.join(S, "cat10-health.mjs"), [P, T]);
+runCat("CAT-11 (shutdown)", path.join(S, "cat11-shutdown.mjs"));
+runCat("CAT-12 (automation)", path.join(S, "cat12-automation.mjs"));
+
+// ── Summary ───────────────────────────────────────────────────────────────────
+const total = pass + fail;
+console.log("\n═══════════════════════════════════");
+if (fail === 0) {
+  console.log(`\x1b[32mALL PASS\x1b[0m (${pass}/${total} categories)`);
+} else {
+  console.log(`\x1b[31mFAILURES: ${fail}/${total} categories\x1b[0m`);
+  for (const c of failures) console.log(`  ✗ ${c}`);
+}
+console.log("═══════════════════════════════════");
+process.exit(fail > 0 ? 1 : 0);