fix(cli): 0.7.1 — Windows sym ask exit-crash + sym groups dns-sd ENOENT

Found by COO's cross-machine Windows test of 0.7.0 (install + daemon
lifecycle + cross-machine mesh all passed; these were the only 2 bugs):

- sym ask: broadcast socket closed with .end() left a named-pipe handle
  mid-close; process.exit then tripped a libuv UV_HANDLE_CLOSING assertion
  on Windows (0xC0000409). Now socket.destroy() + clear the timer so the
  handle is fully gone before exit.
- sym groups: spawn dns-sd ENOENT on Windows (no Apple Bonjour) now degrades
  gracefully — node still meshes via bonjour-service; sym join works directly.
  Also fixed a timer-ordering (TDZ) bug in the discovery path.

Full suite 168/168; sym ask/groups exit cleanly.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: sym-bot

CHANGELOG.md

@@ -2,6 +2,15 @@
 
 > **Note:** Versions 0.3.26 – 0.3.55 were released as git tags without changelog entries. Changelog resumes at 0.3.56 below.
 
+## 0.7.1
+
+### Fixed (Windows — found by COO's cross-machine test on a real Windows box)
+
+- **`sym ask` crashed on exit on Windows** with a libuv assertion (`!(handle->flags & UV_HANDLE_CLOSING)`, `win/async.c`, exit `0xC0000409`). The best-effort broadcast socket was closed with `socket.end()`, which leaves the named-pipe handle mid-close; when the command then `process.exit`s, Windows aborts. Now `socket.destroy()` tears the handle down fully (and the timeout is cleared) before exit. Mac/Linux unaffected either way.
+- **`sym groups` errored with `spawn dns-sd ENOENT` on Windows** (Apple Bonjour's `dns-sd` isn't installed). It now degrades gracefully — a clear message that LAN group *enumeration* needs the tool, while noting the node still meshes via the bundled pure-JS `bonjour-service` and you can `sym join <name>` directly. Also fixed a timer-ordering bug in the discovery path.
+
+*(Cross-machine mesh, install, and daemon lifecycle all PASSED on Windows in 0.7.0 — these two were the only issues.)*
+
 ## 0.7.0
 
 ### Added

bin/sym.js

@@ -219,19 +219,34 @@ function cmdGroups() {
   const platform = process.platform;
   const cmd = (platform === 'linux') ? 'avahi-browse' : 'dns-sd';
   const argv = (platform === 'linux') ? ['-t', '-a', '-p'] : ['-B', '_services._dns-sd._udp', 'local.'];
+  // Graceful when the browse tool is absent (e.g. Windows without Apple
+  // Bonjour's dns-sd — the node itself still discovers peers via the
+  // bundled pure-JS bonjour-service, so meshing works; only this LAN-wide
+  // group *enumeration* needs the CLI tool).
+  const unavailable = (e) => {
+    if (e && e.code === 'ENOENT') {
+      console.log(`Live group discovery isn't available here — '${cmd}' isn't installed.`);
+      if (platform === 'win32') console.log('(Windows: LAN group discovery needs Apple Bonjour. Your node still meshes fine.)');
+      else if (platform === 'linux') console.log('(Install avahi-utils for discovery: sudo apt install avahi-utils)');
+    } else {
+      console.error(`group discovery failed: ${(e && e.message) || e}`);
+    }
+    console.log(`Your group: ${readGroup()}  (${groupServiceType(readGroup())})  ·  switch with: sym join <name>`);
+  };
+
   let child;
   try { child = spawn(cmd, argv, { stdio: ['ignore', 'pipe', 'pipe'] }); }
-  catch (e) {
-    console.error(`Could not run discovery ('${cmd}'): ${e.message}` +
-      (platform === 'linux' ? '\nInstall avahi-utils: sudo apt install avahi-utils' : ''));
-    return;
-  }
+  catch (e) { return unavailable(e); }
+  let errored = false;
+  let timer = null;
+  child.on('error', (e) => { errored = true; if (timer) clearTimeout(timer); unavailable(e); });
+  if (!child.stdout) return;   // ENOENT path on some platforms leaves no stream
   const out = [];
   child.stdout.on('data', (c) => out.push(c));
-  child.on('error', (e) => console.error(`discovery failed: ${e.message}`));
-  const timer = setTimeout(() => { try { child.kill('SIGTERM'); } catch {} }, 2200);
+  timer = setTimeout(() => { try { child.kill('SIGTERM'); } catch {} }, 2200);
   child.on('close', () => {
     clearTimeout(timer);
+    if (errored) return;   // already reported via the error handler
     const text = Buffer.concat(out).toString('utf8');
     const typeRe = /_([a-z0-9][a-z0-9-]+)\._tcp/gi;
     const seen = new Set();
@@ -647,7 +662,18 @@ function broadcastQuestion(question) {
   return new Promise((resolve) => {
     if (!isDaemonRunning()) return resolve(false);
     let settled = false;
-    const finish = (v) => { if (!settled) { settled = true; try { socket.end(); } catch {} resolve(v); } };
+    let timer = null;
+    // socket.destroy() (not .end()) — fully tears down the handle synchronously
+    // so no named-pipe handle is left mid-close when `sym ask` later exits.
+    // On Windows, exiting with a half-closed handle trips a libuv assertion
+    // (UV_HANDLE_CLOSING, win/async.c) and aborts with 0xC0000409.
+    const finish = (v) => {
+      if (settled) return;
+      settled = true;
+      if (timer) clearTimeout(timer);
+      try { socket.removeAllListeners('data'); socket.destroy(); } catch {}
+      resolve(v);
+    };
     const socket = net.createConnection(SOCKET_PATH, () => {
       socket.write(JSON.stringify({ type: 'register', name: 'sym-cli' }) + '\n');
     });
@@ -669,7 +695,7 @@ function broadcastQuestion(question) {
       }
     });
     socket.on('error', () => finish(false));
-    setTimeout(() => finish(false), 2000);
+    timer = setTimeout(() => finish(false), 2000);
   });
 }
 

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "@sym-bot/sym",
-  "version": "0.7.0",
+  "version": "0.7.1",
   "description": "Infrastructure and protocol for multi-agent collective intelligence",
   "main": "lib/node.js",
   "bin": {