windows: 改用隐藏 VBS 启动器，避免登录后弹出终端

README.md

@@ -106,7 +106,7 @@ codex-threadripper install-service
 - `bucket switch <provider>`：把全部历史切到指定 provider 可见桶；首行有 padding 时只做原地 patch
 - `bucket prepare`：给 rollout 首行补足 JSON 空白 padding，让后续 provider 桶切换保持快速
 - `watch`：持续监听 `config.toml` 的变化，同时定时收敛新增的线程记录
-- `print-service-config`：打印当前平台的后台服务配置内容（launchd plist / systemd unit / Windows 启动脚本）
+- `print-service-config`：打印当前平台的后台服务配置内容（launchd plist / systemd unit / Windows 隐藏 VBS 启动器）
 - `install-service`：把后台服务装到系统里并立即启动
 - `uninstall-service`：停止并卸载后台服务
 
@@ -131,7 +131,7 @@ codex-threadripper install-service
 - `status`、`sync`、`watch` 在任何能访问 Codex SQLite 状态库和 rollout JSONL 的环境下都能用
 - macOS 后台服务使用 `launchd`
 - Linux 后台服务使用 `systemd --user`（没有 systemd 时会退回到独立的后台进程）
-- Windows 后台服务使用启动文件夹里的批处理脚本
+- Windows 后台服务使用启动文件夹里的隐藏 VBS 启动器，登录后不会弹出控制台窗口
 - 发布的二进制覆盖 Apple Silicon macOS、Intel macOS、Linux x64、Linux ARM64、Windows x64
 - CLI 界面同时支持简体中文和英文，根据系统语言自动切换
 
@@ -221,7 +221,7 @@ codex-threadripper install-service
 - `bucket switch <provider>`: move all history into the requested provider visibility bucket; prepared first lines are patched in place
 - `bucket prepare`: reserve JSON whitespace padding in rollout first lines so future provider bucket switches stay fast
 - `watch`: keep watching `config.toml` for provider changes and periodically reconcile any newly added thread rows
-- `print-service-config`: print the platform-specific service config (launchd plist, systemd unit, or Windows startup script) without installing it
+- `print-service-config`: print the platform-specific service config (launchd plist, systemd unit, or Windows hidden VBS launcher) without installing it
 - `install-service`: write the service config and start the service
 - `uninstall-service`: stop and remove the service
 
@@ -246,7 +246,7 @@ These legacy command names still work:
 - `status`, `sync`, and `watch` work anywhere you can access Codex's SQLite state DB and rollout JSONL files
 - macOS uses `launchd`
 - Linux uses `systemd --user`, falling back to a detached process when systemd isn't available
-- Windows uses a startup folder script
+- Windows uses a hidden VBS launcher in the Startup folder, so no console window appears on login
 - Prebuilt binaries are available for Apple Silicon macOS, Intel macOS, Linux x64, Linux ARM64, and Windows x64
 - The CLI detects your system language and switches between Simplified Chinese and English automatically
 

src/service.rs

@@ -60,7 +60,12 @@ pub fn current_service_status() -> Result<ServiceStatus> {
     let manager = current_manager();
     let codex_home = current_codex_home()?;
     let config_path = service_config_path(manager)?;
-    let installed = config_path.exists();
+    let installed = match manager {
+        ServiceManager::WindowsStartup => {
+            config_path.exists() || legacy_windows_startup_cmd_path()?.exists()
+        }
+        _ => config_path.exists(),
+    };
     let running = service_running(manager, &codex_home)?;
     Ok(ServiceStatus {
         manager,
@@ -123,7 +128,7 @@ pub fn render_service_config(
         ServiceManager::SystemdUser => {
             build_systemd_bundle(exe_path, codex_home, provider_override, poll_interval)
         }
-        ServiceManager::WindowsStartup => Ok(build_windows_startup_script(
+        ServiceManager::WindowsStartup => Ok(build_windows_startup_vbs(
             exe_path,
             codex_home,
             provider_override,
@@ -297,8 +302,13 @@ fn install_windows_startup(
     })?;
     std::fs::create_dir_all(config_dir)?;
 
-    let script =
-        build_windows_startup_script(exe_path, codex_home, provider_override, poll_interval);
+    let legacy_cmd_path = legacy_windows_startup_cmd_path()?;
+    if legacy_cmd_path.exists() {
+        std::fs::remove_file(&legacy_cmd_path)
+            .with_context(|| format!("failed to remove {}", legacy_cmd_path.display()))?;
+    }
+
+    let script = build_windows_startup_vbs(exe_path, codex_home, provider_override, poll_interval);
     std::fs::write(&config_path, script)
         .with_context(|| format!("failed to write {}", config_path.display()))?;
 
@@ -316,6 +326,13 @@ fn uninstall_windows_startup(config_path: &Path) -> Result<()> {
         std::fs::remove_file(config_path)
             .with_context(|| format!("failed to remove {}", config_path.display()))?;
     }
+
+    let legacy_cmd_path = legacy_windows_startup_cmd_path()?;
+    if legacy_cmd_path.exists() {
+        std::fs::remove_file(&legacy_cmd_path)
+            .with_context(|| format!("failed to remove {}", legacy_cmd_path.display()))?;
+    }
+
     Ok(())
 }
 
@@ -341,11 +358,15 @@ fn service_config_path(manager: ServiceManager) -> Result<PathBuf> {
             .join(".config/systemd/user")
             .join(format!("{SERVICE_LABEL}.service"))),
         ServiceManager::WindowsStartup => {
-            Ok(windows_startup_dir()?.join(format!("{SERVICE_LABEL}.cmd")))
+            Ok(windows_startup_dir()?.join(format!("{SERVICE_LABEL}.vbs")))
         }
     }
 }
 
+fn legacy_windows_startup_cmd_path() -> Result<PathBuf> {
+    Ok(windows_startup_dir()?.join(format!("{SERVICE_LABEL}.cmd")))
+}
+
 fn linux_runner_script_path() -> Result<PathBuf> {
     Ok(home_dir()?.join(".local/share/codex-threadripper/run-watch.sh"))
 }
@@ -393,21 +414,26 @@ fn build_linux_runner_script(
     )
 }
 
-fn build_windows_startup_script(
+fn build_windows_startup_vbs(
     exe_path: &Path,
     codex_home: &Path,
     provider_override: Option<&str>,
     poll_interval: Duration,
 ) -> String {
-    format!(
-        "@echo off\r\nstart \"\" /B {}\r\n",
+    let command = format!(
+        "cmd.exe /c {}",
         watch_command_line(
             exe_path,
             codex_home,
             provider_override,
             poll_interval,
             ShellFlavor::Cmd
-        )
+        ),
+    );
+
+    format!(
+        "Set shell = CreateObject(\"WScript.Shell\")\r\nshell.Run {}, 0, False\r\n",
+        vbs_quote(&command)
     )
 }
 
@@ -980,6 +1006,10 @@ fn windows_quote(input: &str) -> String {
     format!("\"{escaped}\"")
 }
 
+fn vbs_quote(input: &str) -> String {
+    format!("\"{}\"", input.replace('"', "\"\""))
+}
+
 fn xml_escape(input: &str) -> String {
     input
         .replace('&', "&amp;")
@@ -1019,7 +1049,10 @@ enum ProcessStatus {
 
 #[cfg(test)]
 mod tests {
+    use super::build_windows_startup_vbs;
     use super::windows_quote;
+    use std::path::Path;
+    use std::time::Duration;
 
     #[test]
     fn windows_quote_escapes_shell_metacharacters() {
@@ -1033,4 +1066,19 @@ mod tests {
         );
         assert_eq!(windows_quote(r"C:\tmp\a&b\x.exe"), r#""C:\tmp\a^&b\x.exe""#);
     }
+
+    #[test]
+    fn windows_startup_vbs_hides_console_window() {
+        let script = build_windows_startup_vbs(
+            Path::new(r"C:\Program Files\codex-threadripper\codex-threadripper.exe"),
+            Path::new(r"C:\Users\admin\.codex"),
+            Some("my"),
+            Duration::from_millis(1500),
+        );
+
+        assert!(script.contains(r#"CreateObject("WScript.Shell")"#));
+        assert!(script.contains("shell.Run"));
+        assert!(script.contains(", 0, False"));
+        assert!(script.contains("watch --poll-interval-ms 1500"));
+    }
 }