Fix PowerShell script for Windows Ansible limitations

- Fix syntax issues: remove emoji chars, add winget acceptance flags
- Address core issue: Ansible doesn't run natively on Windows
- Convert PowerShell script to intelligent WSL wrapper
- Auto-detect WSL environment and use appropriate approach
- Provide clear error messages and WSL installation guidance
- Update documentation to reflect WSL requirement
- Maintain backward compatibility for existing WSL users

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

CLAUDE.md

@@ -98,6 +98,7 @@ select = ["E", "W", "F", "I", "B", "C4", "UP"]
 - Use approved verbs (Get-, Set-, New-, etc.)
 - Avoid positional parameters in functions
 - Use proper error handling with try/catch
+- **Note**: Algo's PowerShell script is a WSL wrapper since Ansible doesn't run natively on Windows
 
 #### Ansible (ansible-lint)
 - Many warnings are suppressed in `.ansible-lint`

README.md

@@ -55,7 +55,7 @@ The easiest way to get an Algo server running is to run it on your local system
     .\algo.ps1
     ```
     
-    The first time you run the script, it will automatically install the required Python environment (Python 3.11+). On subsequent runs, it starts immediately and works on all platforms (macOS, Linux, Windows). There are several optional features available, none of which are required for a fully functional VPN server. These optional features are described in the [deployment documentation](docs/deploy-from-ansible.md).
+    The first time you run the script, it will automatically install the required Python environment (Python 3.11+). On subsequent runs, it starts immediately and works on all platforms (macOS, Linux, Windows via WSL). The Windows PowerShell script automatically uses WSL when needed, since Ansible requires a Unix-like environment. There are several optional features available, none of which are required for a fully functional VPN server. These optional features are described in the [deployment documentation](docs/deploy-from-ansible.md).
 
 That's it! You can now set up clients to connect to your VPN. Proceed to [Configure the VPN Clients](#configure-the-vpn-clients) below.
 

algo.ps1

@@ -4,7 +4,50 @@ param(
     [string[]]$Arguments
 )
 
-# Function to install uv via package managers
+# Check if we're running in WSL
+function Test-WSL {
+    return $env:WSL_DISTRO_NAME -or $env:WSLENV -or (Get-Command wsl -ErrorAction SilentlyContinue)
+}
+
+# Function to run Algo in WSL
+function Invoke-AlgoInWSL {
+    param($Arguments)
+    
+    Write-Host "NOTICE: Ansible requires a Unix-like environment."
+    Write-Host "Attempting to run Algo via Windows Subsystem for Linux (WSL)..."
+    Write-Host ""
+    
+    if (-not (Get-Command wsl -ErrorAction SilentlyContinue)) {
+        Write-Host "ERROR: WSL is not installed or not available." -ForegroundColor Red
+        Write-Host ""
+        Write-Host "To use Algo on Windows, you need WSL. Please:"
+        Write-Host "1. Install WSL: Run 'wsl --install -d Ubuntu-22.04' in PowerShell as Administrator"
+        Write-Host "2. Restart your computer when prompted"
+        Write-Host "3. Set up Ubuntu and try running this script again"
+        Write-Host ""
+        Write-Host "Alternatively, see: https://github.com/trailofbits/algo/blob/master/docs/deploy-from-windows.md"
+        exit 1
+    }
+    
+    # Check if a default WSL distribution is set
+    $wslList = wsl -l -v 2>$null
+    if ($LASTEXITCODE -ne 0) {
+        Write-Host "ERROR: No WSL distributions found." -ForegroundColor Red
+        Write-Host "Please install a Linux distribution: wsl --install -d Ubuntu-22.04"
+        exit 1
+    }
+    
+    Write-Host "Running Algo in WSL..."
+    if ($Arguments.Count -gt 0 -and $Arguments[0] -eq "update-users") {
+        $remainingArgs = $Arguments[1..($Arguments.Count-1)] -join " "
+        wsl bash -c "cd /mnt/c/$(pwd | Split-Path -Leaf) && ./algo update-users $remainingArgs"
+    } else {
+        $allArgs = $Arguments -join " "
+        wsl bash -c "cd /mnt/c/$(pwd | Split-Path -Leaf) && ./algo $allArgs"
+    }
+}
+
+# Function to install uv via package managers (for WSL scenarios)
 function Install-UvViaPackageManager {
     Write-Host "Attempting to install uv via system package manager..."
     
@@ -12,7 +55,7 @@ function Install-UvViaPackageManager {
     if (Get-Command winget -ErrorAction SilentlyContinue) {
         Write-Host "Using winget..."
         try {
-            winget install --id=astral-sh.uv -e --silent
+            winget install --id=astral-sh.uv -e --silent --accept-source-agreements --accept-package-agreements
             return $true
         } catch {
             Write-Host "winget installation failed: $($_.Exception.Message)"
@@ -36,13 +79,13 @@ function Install-UvViaPackageManager {
 # Function to install uv via download (with user consent)
 function Install-UvViaDownload {
     Write-Host ""
-    Write-Host "⚠️  SECURITY NOTICE ⚠️"
-    Write-Host "uv is not available via system package managers on this system."
+    Write-Host "Security Notice: uv is not available via system package managers on this system."
     Write-Host "To continue, we need to download and execute an installation script from:"
     Write-Host "  https://astral.sh/uv/install.ps1 (Windows)"
     Write-Host ""
     Write-Host "For maximum security, you can install uv manually instead:"
-    Write-Host "  1. Visit: https://docs.astral.sh/uv/getting-started/installation/"
+    $installUrl = "https://docs.astral.sh/uv/getting-started/installation/"
+    Write-Host "  1. Visit: $installUrl"
     Write-Host "  2. Download the binary for your platform from GitHub releases"
     Write-Host "  3. Verify checksums and install manually"
     Write-Host "  4. Then run: .\algo.ps1"
@@ -72,42 +115,22 @@ function Update-PathEnvironment {
 
 # Main execution
 try {
-    # Check if uv is installed
-    if (-not (Get-Command uv -ErrorAction SilentlyContinue)) {
-        Write-Host "uv (Python package manager) not found. Installing..."
-        
-        # Try package managers first (most secure)
-        $packageInstalled = Install-UvViaPackageManager
-        
-        # Fall back to download if package managers failed
-        if (-not $packageInstalled) {
-            $downloadInstalled = Install-UvViaDownload
-            if (-not $downloadInstalled) {
-                throw "uv installation failed"
-            }
-        }
-        
-        # Refresh PATH to find uv
-        Update-PathEnvironment
-        
-        # Verify installation worked
-        if (-not (Get-Command uv -ErrorAction SilentlyContinue)) {
-            throw "uv installation failed. Please restart your terminal and try again."
-        }
-        
-        Write-Host "✓ uv installed successfully!"
+    # Check if we're in WSL already
+    if (Test-WSL) {
+        Write-Host "Running in WSL environment, using standard approach..."
+        # In WSL, we can use the normal Linux approach
+        & bash -c "./algo $($Arguments -join ' ')"
+        exit $LASTEXITCODE
     }
     
-    # Run the appropriate playbook
-    if ($Arguments.Count -gt 0 -and $Arguments[0] -eq "update-users") {
-        $remainingArgs = $Arguments[1..($Arguments.Count-1)]
-        & uv run ansible-playbook users.yml @remainingArgs -t update-users
-    } else {
-        & uv run ansible-playbook main.yml @Arguments
-    }
+    # We're on native Windows - Ansible won't work directly
+    # Try to use WSL instead
+    Invoke-AlgoInWSL $Arguments
     
 } catch {
     Write-Host "Error: $($_.Exception.Message)" -ForegroundColor Red
-    Write-Host "Or install manually from: https://docs.astral.sh/uv/getting-started/installation/"
+    $manualInstallUrl = "https://docs.astral.sh/uv/getting-started/installation/"
+    Write-Host "For manual installation: $manualInstallUrl"
+    Write-Host "For WSL setup: https://github.com/trailofbits/algo/blob/master/docs/deploy-from-windows.md"
     exit 1
 }

docs/deploy-from-windows.md

@@ -2,13 +2,13 @@
 
 You have three options to run Algo on Windows:
 
-1. **PowerShell Script** (Recommended) - Native Windows support
-2. **Windows Subsystem for Linux (WSL)** - Full Linux environment  
-3. **Git Bash/MSYS2** - Unix-like shell environment
+1. **PowerShell Script** (Recommended) - Automated WSL wrapper for easy use
+2. **Windows Subsystem for Linux (WSL)** - Direct Linux environment access
+3. **Git Bash/MSYS2** - Unix-like shell environment (limited compatibility)
 
 ## Option 1: PowerShell Script (Recommended)
 
-The easiest way to run Algo on Windows. Simply download the repository and run:
+The PowerShell script provides the easiest Windows experience by automatically using WSL when needed:
 
 ```powershell
 git clone https://github.com/trailofbits/algo
@@ -16,10 +16,14 @@ cd algo
 .\algo.ps1
 ```
 
-The script will automatically:
-- Install the Python package manager `uv` via winget or scoop
-- Set up the required Python environment
-- Run Algo with full functionality
+**How it works:**
+- Detects if you're already in WSL and uses the standard Unix approach
+- On native Windows, automatically runs Algo via WSL (since Ansible requires Unix)
+- Provides clear guidance if WSL isn't installed
+
+**Requirements:**
+- Windows Subsystem for Linux (WSL) with Ubuntu 22.04
+- If WSL isn't installed, the script will guide you through installation
 
 ## Option 2: Windows Subsystem for Linux (WSL)
 
@@ -95,6 +99,9 @@ cd algo
 - Familiar Unix-like environment
 
 **Cons**:
-- May have compatibility issues with some Ansible modules
+- **Limited compatibility**: Ansible may not work properly due to Windows/Unix differences
+- **Not officially supported**: May encounter unpredictable issues
 - Less robust than WSL or PowerShell options
 - Requires Git for Windows installation
+
+**Note**: This approach is not recommended due to Ansible's Unix requirements. Use WSL-based options instead.