Add Windows guest control and ConPTY

[sjmiller609]

summary

• cross-compile the guest agent as a Windows LocalSystem service
• listen through the virtio-win VioSock provider while retaining the existing gRPC protocol
• add SYSTEM and active-desktop execution sessions
• add ConPTY terminal allocation and initial terminal sizing
• support Windows file copy, stat, readiness, and graceful shutdown
• bind command trees to kill-on-close Job Objects and terminate them synchronously
• promote Windows instances to Running when guest-agent readiness is proven
• move guest-service protocol and lifecycle rationale into lib/system/README.md

targeted tests

• guest, guest-agent, and Windows readiness unit tests
• Windows guest-agent cross-compilation

The dedicated Windows guest-control KVM gate and full Linux, Darwin, and install suites pass. Runtime terminal resize and additional signal-parity work are intentionally deferred.

---

Note

High Risk
Touches guest exec protocol, Windows process/token handling, vsock transport, and instance readiness, so bugs can affect command isolation, desktop session access, and when Windows VMs become Running.

Overview
Windows guests now run the existing gRPC guest-agent over virtio-win VioSock as a LocalSystem service (hypeman-guest-agent.exe), instead of skipping the agent.

Exec gains an explicit session (system vs desktop). SYSTEM uses ConPTY for TTY; desktop launches into the active interactive session on winsta0\default and rejects ConPTY. Commands start suspended, join a kill-on-close Job Object, then resume so timeouts and RPC close kill the whole tree. Copy/stat/shutdown work on Windows; network reconfigure is unimplemented.

Host-side, Windows instances no longer force SkipGuestAgent. They become Running when a guest-agent probe succeeds (using cmd.exe instead of /bin/true). CI builds the Windows agent and adds a QEMU guest-control integration gate.

^{Reviewed by Cursor Bugbot for commit a0a4c9a. Bugbot is set up for automated code reviews on this repo. Configure here.}

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	github.com/​aymanbagabas/​go-pty@​v0.2.2

View full report

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit a0a4c9a. Configure here.}

[cursor]

Desktop station check removed

Medium Severity

The desktop-session integration check now only asserts that a DESKTOP exec can echo output. It no longer verifies the process lands on WinSta0\Default, which is the defining property of desktop sessions for UI visibility. A regression that obtains a user token but fails to bind the interactive desktop would still pass this gate.

^{Reviewed by Cursor Bugbot for commit a0a4c9a. Configure here.}