@bybrawe/opencode-loop 0.6.8 → 0.6.9

package/CHANGELOG.md

@@ -4,6 +4,15 @@
 
 No unreleased changes yet.
 
+## 0.6.9 - 2026-10-27
+
+- Fix #174: add opt-in `--until-checklist-complete` paired with `--progress-file TASK.md` so a host-verified Markdown checklist can stop Loop without an extra model iteration. The default plain idle Loop remains intentionally unlimited.
+- Validate task files strictly (project-scoped regular file, bounded size, symlink and control-plane protection); ignore Markdown code fences, block quotes and commented checkbox examples. Missing/unsafe/unreadable/no-task files pause visibly rather than report completion.
+- If `--verify` is configured, require successful host verification of the **exact SHA-256 checklist file contents**, never accepting a stale test success after the file changes.
+- Preserve V1 and V2 semantics, update native help/status to clarify host-owned `/loop-stop` and `/loop-clear`, add regression tests and synchronize all shipped bundles.
+- Clarify OpenCode 2 native package support and Windows Desktop GUI limitations; enhance two-server Desktop diagnostics already on main. Do not claim Windows GUI slash discovery is fixed.
+- Keep dedicated Goal 1.3.49 separately installed and validated on real OpenCode 2 stable and pinned hosts. Track expanded macOS/platform canaries separately under #177.
+
 ## 0.6.8 - 2026-10-13
 
 - Fix #172: fall back to exclusive `wx` lock claims where exFAT/FAT or other volumes reject `fs.link()`, including the reported `EISDIR` error.

package/README.md

@@ -1,6 +1,6 @@
 # OpenCode Loop
 
-## Native OpenCode 2 (0.6.8)
+## Native OpenCode 2 (0.6.9)
 
 The npm and V2 entrypoints use the official `@opencode/plugin` `Plugin.define()` contract. The installer now registers the exact `@bybrawe/opencode-loop` package in OpenCode's plural `plugins` configuration instead of copying a loose global plugin directory. OpenCode therefore resolves `@opencode/plugin` from Loop's own production dependency graph; explicit `--legacy-v1` remains a separate compatibility path.
 
@@ -17,7 +17,7 @@ Prompt/command timers, watch and stop conditions, verification, preflight/postru
 
 OpenCode Loop adds `/loop`, scheduled prompt/command/shell jobs, compact scheduling, verification/checkpoints, and the `opencode-loopd` background daemon.
 
-> **Current stable release: `0.6.8`.**
+> **Current native OpenCode 2 release: `0.6.9`.** The release workflow publishes this package only after all verified release gates pass. For a not-yet-published package, use the previously published `0.6.8` until the npm registry confirms `0.6.9`.
 
 ## Install or update
 
@@ -127,18 +127,34 @@ This is an **unlimited idle loop** by default. When the assistant finishes and t
 
 For very short continuation prompts such as `continue`, `keep going`, or `devam et`, Loop adds project-continuation guidance: treat the turn as continuation of the current repository/conversation, inspect relevant files/TODO/progress/git state as needed, find the next unfinished step, avoid redoing completed work, and verify meaningful changes when practical.
 
-For project work, a strong default is:
+For project work, a continuation loop with an explicit progress file is:
 
 ```text
 /loop --safe --ask-never --progress-file progress.md devam et
 ```
 
+**Important:** `--progress-file` supplies project context only; it is **not** a completion or stop condition. Checking every `- [ ]` task as `- [x]` in `progress.md` or `TASK.md` will **not automatically stop** an ordinary idle loop. This distinction is tracked in [#174](https://github.com/ByBrawe/opencode-loop/issues/174) following a [user report](https://www.reddit.com/r/opencode/comments/1vzchjo/i_need_help_with_opencode/). For unattended tasks that must stop, combine the progress file with a **host-observed** stop criterion such as `--max-runs`, `--max-runtime`, `--stop-file` or an explicit `--until` marker. For checklist-completion stop in **0.6.9 or newer**, add **`--until-checklist-complete`** explicitly alongside `--progress-file`; this option is absent from 0.6.8. Do not assume a progress file by itself implements a stop condition.
+
+The **user**, not an AI-generated chat response, must invoke `/loop-stop` or `/loop-clear` as a native control command. Asking the model to type `/loop-clear` in conversation does not reliably execute that command. Use `/loop-status` to inspect current jobs and `/loop-stop` or `/loop-clear` to stop them. See [#175](https://github.com/ByBrawe/opencode-loop/issues/175) for improvements to host-owned stop UX.
+
 Create a starter progress file first if needed:
 
 ```text
 /loop-init
 ```
 
+### Stop when a Markdown checklist is complete (0.6.9)
+
+OpenCode Loop 0.6.9 adds an **opt-in, host-checked** completion guard. It is **not part of 0.6.8**. Install 0.6.9 only after its npm release passes the verification gates:
+
+```text
+/loop --progress-file TASK.md --until-checklist-complete --verify "npm test" finish the tasks in TASK.md
+```
+
+On a safe idle/scheduling boundary, Loop reads `TASK.md` as a regular project file. If it has at least one Markdown checkbox and all actionable boxes are checked, Loop stops scheduling further turns. If `--verify` is configured, Loop also requires a previously observed successful host verification. Empty/missing/oversized/unsafe/symlink/control-plane files pause for review rather than being called finished; code-fenced and quoted checkbox examples do not count.
+
+**Without `--until-checklist-complete`, `--progress-file` only supplies context** and normal unlimited loops stay unlimited. The host/user controls `/loop-stop` and `/loop-clear` directly; having a model print those names is not an actual command invocation. Follow [#174](https://github.com/ByBrawe/opencode-loop/issues/174) and [#175](https://github.com/ByBrawe/opencode-loop/issues/175).
+
 ### Repeat every 5 minutes
 
 ```text
@@ -473,13 +489,9 @@ For unattended work, avoid permanently allowing every shell command. Grant routi
 @bybrawe/opencode-loop
 ```
 
-Stable package peer range:
-
-```text
-@opencode-ai/plugin >=1.4.0 <2
-```
+Native OpenCode 2 is the default supported package path for `0.6.9`. The production dependency is pinned to `@opencode/plugin@2.0.22`; the explicit legacy V1 compatibility path retains `@opencode-ai/plugin >=1.4.0 <2`. Do **not** mistake the legacy V1 peer range for the V2 runtime API version.
 
-The repository contains experimental OpenCode 2 work, but the stable package does not claim full OpenCode 2 parity.
+Automated release gates cover native V2 packages, Windows/Linux regressions and real OpenCode 2 host command registration/coexistence with the separately installed Goal plugin. **Windows Desktop GUI slash-command discovery is not yet proven equivalent to CLI TUI**; see [#169](https://github.com/ByBrawe/opencode-loop/issues/169) and the [diagnostic guide](docs/OPENCODE2-DESKTOP-WINDOWS.md). Platform gaps are tracked in [#177](https://github.com/ByBrawe/opencode-loop/issues/177).
 
 See [docs/SCHEDULING.md](./docs/SCHEDULING.md) for the scheduling contract and [CHANGELOG.md](./CHANGELOG.md) for release history.
 

package/examples/OPENCODE2-0.6.9.md

@@ -0,0 +1,34 @@
+# OpenCode Loop 0.6.9
+
+## Native OpenCode 2 checklist completion guard (#174)
+
+Loop now supports **opt-in host-verified checklist completion** for user-owned project Markdown files. This addresses the real user report in which all tasks in TASK.md were checked but an intentionally unlimited idle Loop kept running.
+
+Example:
+
+~~~text
+/loop --progress-file TASK.md --until-checklist-complete --verify "npm test" finish remaining project work
+~~~
+
+The **--until-checklist-complete** flag is explicit: an ordinary **--progress-file** is context only and does **not** change the existing unlimited Loop continuation contract. At a safe scheduling boundary, the host reads the Markdown file and requires at least one task checkbox with **zero unchecked tasks**. It ignores fenced code/quoted/commented examples. Missing, unsafe, symlinked, outside-project, control-plane, empty/unreadable or oversized paths never authorize completion; Loop pauses visibly instead.
+
+When **--verify** is present, completion requires the host's successful verification recorded for the **exact SHA-256 content** of the checklist file. If TASK.md changes after a successful verification, the old result cannot stop the updated task. This is a file-content consistency check, **not** independent semantic evidence that untested work was correct.
+
+Both native V2 and explicit V1 compatibility runtimes use the guard. Deterministic parser/filesystem, safe idle prompt suppression, stale-verification, bundle parity and Loop+Goal coexistence tests are required release gates.
+
+## Native stop controls and OpenCode 2 diagnostics
+
+Invoke /loop-stop or /loop-clear as a **real user slash command**. An AI assistant merely printing /loop-clear does not invoke the host command. /loop-status shows the opt-in checklist state and actionable stop information for active jobs.
+
+Read-only Windows Desktop diagnostics can compare the CLI backend and an explicit localhost Desktop backend across two workspace directories, but the original Desktop GUI command discovery issue [#169](https://github.com/ByBrawe/opencode-loop/issues/169) is **not** claimed fixed until field replay.
+
+## Package installation and verification
+
+~~~text
+npx -y @bybrawe/opencode-loop@0.6.9
+npx -y @bybrawe/opencode-goal@1.3.49
+~~~
+
+Install packages separately; Loop never silently installs or updates dedicated Goal. Fully quit and restart OpenCode, verify /loop-doctor, /loop-status, /goal status, and a short bounded Loop run in the intended project directory. Only rely on the new flag after 0.6.9 is present in the npm registry and the full published-package consumer workflow has succeeded. If publication fails, do not treat the GitHub source commit as an npm release.
+
+This release does **not** claim all Windows Desktop/WSL/ARM64 GUI scenarios are solved.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bybrawe/opencode-loop",
-  "version": "0.6.8",
+  "version": "0.6.9",
   "description": "Idle-safe /loop scheduling and background automation for OpenCode, with optional legacy Loop Goal compatibility and a separately installable OpenCode Goal companion.",
   "type": "module",
   "main": "src/plugin.js",
@@ -24,8 +24,8 @@
     "build:plugin": "bun build src/source/v1.js --outfile=src/index.js --target=bun --format=esm --external=@opencode-ai/plugin/tool && bun build src/source/server.js --outfile=src/server.js --target=bun --format=esm --external=@opencode-ai/plugin/tool && bun build src/source/native.js --outfile=src/native.js --target=bun --format=esm",
     "build:plugin:npm": "npm run build:plugin",
     "prepack": "node --check src/plugin.js && node --check src/v2.js && node --check src/index.js && node --check src/server.js && node --check src/native.js",
-    "check": "node --check src/source/v1.js && node --check src/source/core/args.js && node --check src/source/core/continuation.js && node --check src/source/core/schedule-syntax.js && node --check src/source/core/state.js && node --check src/source/core/jobs.js && node --check src/source/core/process.js && node --check src/source/opencode/sdk.js && node --check src/source/opencode/session-context.js && node --check src/source/opencode/command-router.js && node --check src/source/opencode/goal-commands.js && node --check src/source/opencode/loop-commands.js && node --check src/source/opencode/loop-registration.js && node --check src/source/runtime/session-activity.js && node --check src/source/runtime/session-status.js && node --check src/source/runtime/schedule-policy.js && node --check src/source/runtime/scheduler-diagnostics.js && node --check src/source/runtime/companion-goal.js && node --check src/source/runtime/loop-diagnostics.js && node --check src/source/runtime/compaction.js && node --check src/source/runtime/action-dispatch.js && node --check src/source/runtime/network-recovery.js && node --check src/source/runtime/empty-turn.js && node --check src/source/runtime/terminal-guard.js && node --check src/source/runtime/run-finalization.js && node --check src/source/runtime/run-admission.js && node --check src/source/runtime/executor.js && node --check src/source/runtime/scheduler.js && node --check src/source/runtime/goal-prompt.js && node --check src/source/runtime/goal-report.js && node --check src/source/runtime/goal-evidence.js && node --check src/source/runtime/goal-runtime.js && node --check src/source/runtime/goal-policy.js && node --check src/source/runtime/goal-steering.js && node --check src/source/runtime/job-workspace.js && node --check src/source/opencode2/prompt-runtime.js && node --check src/source/opencode2/diagnostics.js && node --check src/source/opencode2/logging.js && node --check src/source/server.js && node --check src/source/legacy-v1.js && node --check src/index.js && node --check src/server.js && node --check scripts/install-node.mjs && node --check scripts/install-with-goals.mjs && node --check scripts/loopd.mjs && node --check scripts/pulse-check.mjs && node --check scripts/state-process-test.mjs && node --check scripts/state-exfat-lock-test.mjs && node --check scripts/state-integrity-test.mjs && node --check scripts/install-test.mjs && node --check scripts/desktop-command-diagnostics.mjs && node --check scripts/desktop-command-diagnostics-test.mjs && node --check scripts/goal-companion-test.mjs && node --check scripts/loopd-test.mjs && node --check scripts/smoke-test.mjs && node --check scripts/host-adapter-contract-test.mjs && node --check scripts/server-entry-test.mjs && node --check scripts/command-router-test.mjs && node --check scripts/goal-command-handlers-test.mjs && node --check scripts/loop-command-handlers-test.mjs && node --check scripts/loop-registration-test.mjs && node --check scripts/schedule-syntax-test.mjs && node --check scripts/schedule-policy-test.mjs && node --check scripts/session-activity-test.mjs && node --check scripts/session-status-test.mjs && node --check scripts/session-status-idle-recovery-test.mjs && node --check scripts/session-error-recovery-test.mjs && node --check scripts/empty-turn-recovery-test.mjs && node --check scripts/network-recovery-test.mjs && node --check scripts/compaction-runtime-test.mjs && node --check scripts/executor-runtime-test.mjs && node --check scripts/scheduler-runtime-test.mjs && node --check scripts/goal-runtime-test.mjs && node --check scripts/goal-policy-test.mjs && node --check scripts/goal-steering-test.mjs && node --check scripts/job-workspace-test.mjs && node --check scripts/v2-prompt-runtime-test.mjs && node --check scripts/v2-prompt-interval-test.mjs && node --check scripts/v2-command-runtime-test.mjs && node --check scripts/v2-command-adapter-test.mjs && node --check scripts/v2-diagnostics-test.mjs && node --check scripts/v2-logging-test.mjs && node --check scripts/comprehensive-watchdog.mjs && node --check scripts/comprehensive-test.mjs && node --check scripts/host-goal-bootstrap.mjs && node --check scripts/host-goal-bootstrap-test.mjs && node --check scripts/host-loop-canary.mjs && node --check scripts/host-goal-steering-canary.mjs && node --check scripts/publish-workflow-test.mjs && node --check scripts/goal-compaction-safety-test.mjs && node --check src/source/native.js && node --check src/source/opencode2/native-plugin.js && node --check src/source/opencode2/native-runtime.js && node --check src/source/opencode2/native-policy.js && node --check src/native.js && node --check scripts/native-entry-test.mjs && node --check scripts/package-native-smoke.mjs && node --check src/v1.js && node --check scripts/native-cli-io-test.mjs && node --check scripts/native-lifecycle-test.mjs && node --check scripts/native-plugin-lifetime-test.mjs && node --check src/source/core/progress.js && node --check scripts/native-presets-test.mjs && node --check scripts/control-plane-until-test.mjs && node --check src/source/opencode2/session-location.js && node --check scripts/native-session-location-test.mjs && node --check src/plugin.js && node --check src/v2.js",
-    "test": "node --test scripts/native-session-location-test.mjs && node --test scripts/control-plane-until-test.mjs && node --test scripts/native-presets-test.mjs && node --test scripts/native-plugin-lifetime-test.mjs && node --test scripts/native-cli-io-test.mjs scripts/native-lifecycle-test.mjs && node scripts/native-entry-test.mjs && node scripts/native-coexistence-test.mjs && node scripts/native-shell-test.mjs && node scripts/native-install-test.mjs && node scripts/native-v2-test.mjs && node scripts/goal-compaction-safety-test.mjs && node scripts/publish-workflow-test.mjs && node scripts/server-entry-test.mjs && node scripts/command-router-test.mjs && node scripts/goal-command-handlers-test.mjs && node scripts/loop-command-handlers-test.mjs && node scripts/loop-registration-test.mjs && node scripts/schedule-syntax-test.mjs && node scripts/schedule-policy-test.mjs && node scripts/session-activity-test.mjs && node scripts/session-status-test.mjs && node scripts/session-status-idle-recovery-test.mjs && node scripts/session-error-recovery-test.mjs && node scripts/empty-turn-recovery-test.mjs && node scripts/network-recovery-test.mjs && node scripts/compaction-runtime-test.mjs && node scripts/action-dispatch-test.mjs && node scripts/run-finalization-test.mjs && node scripts/run-admission-test.mjs && node scripts/executor-runtime-test.mjs && node scripts/scheduler-runtime-test.mjs && node scripts/goal-runtime-test.mjs && node scripts/goal-policy-test.mjs && node scripts/goal-steering-test.mjs && node scripts/job-workspace-test.mjs && node scripts/v2-prompt-runtime-test.mjs && node scripts/v2-prompt-interval-test.mjs && node scripts/v2-command-runtime-test.mjs && node scripts/v2-command-adapter-test.mjs && node scripts/v2-diagnostics-test.mjs && node scripts/v2-logging-test.mjs && node scripts/state-process-test.mjs && node scripts/state-exfat-lock-test.mjs && node scripts/state-integrity-test.mjs && node scripts/install-test.mjs && node --test scripts/desktop-command-diagnostics-test.mjs && node scripts/goal-companion-test.mjs && node scripts/loopd-test.mjs && node scripts/smoke-test.mjs && node --test scripts/host-goal-bootstrap-test.mjs && node scripts/host-adapter-contract-test.mjs && node scripts/comprehensive-watchdog.mjs",
+    "check": "node --check src/source/v1.js && node --check src/source/core/args.js && node --check src/source/core/continuation.js && node --check src/source/core/schedule-syntax.js && node --check src/source/core/state.js && node --check src/source/core/jobs.js && node --check src/source/core/process.js && node --check src/source/opencode/sdk.js && node --check src/source/opencode/session-context.js && node --check src/source/opencode/command-router.js && node --check src/source/opencode/goal-commands.js && node --check src/source/opencode/loop-commands.js && node --check src/source/opencode/loop-registration.js && node --check src/source/runtime/session-activity.js && node --check src/source/runtime/session-status.js && node --check src/source/runtime/schedule-policy.js && node --check src/source/runtime/scheduler-diagnostics.js && node --check src/source/runtime/companion-goal.js && node --check src/source/runtime/loop-diagnostics.js && node --check src/source/runtime/compaction.js && node --check src/source/runtime/action-dispatch.js && node --check src/source/runtime/network-recovery.js && node --check src/source/runtime/empty-turn.js && node --check src/source/runtime/terminal-guard.js && node --check src/source/runtime/run-finalization.js && node --check src/source/runtime/run-admission.js && node --check src/source/runtime/executor.js && node --check src/source/runtime/scheduler.js && node --check src/source/runtime/goal-prompt.js && node --check src/source/runtime/goal-report.js && node --check src/source/runtime/goal-evidence.js && node --check src/source/runtime/goal-runtime.js && node --check src/source/runtime/goal-policy.js && node --check src/source/runtime/goal-steering.js && node --check src/source/runtime/job-workspace.js && node --check src/source/opencode2/prompt-runtime.js && node --check src/source/opencode2/diagnostics.js && node --check src/source/opencode2/logging.js && node --check src/source/server.js && node --check src/source/legacy-v1.js && node --check src/index.js && node --check src/server.js && node --check scripts/install-node.mjs && node --check scripts/install-with-goals.mjs && node --check scripts/loopd.mjs && node --check scripts/pulse-check.mjs && node --check scripts/state-process-test.mjs && node --check scripts/state-exfat-lock-test.mjs && node --check scripts/state-integrity-test.mjs && node --check scripts/install-test.mjs && node --check scripts/desktop-command-diagnostics.mjs && node --check scripts/desktop-command-diagnostics-test.mjs && node --check scripts/goal-companion-test.mjs && node --check scripts/loopd-test.mjs && node --check scripts/smoke-test.mjs && node --check scripts/host-adapter-contract-test.mjs && node --check scripts/server-entry-test.mjs && node --check scripts/command-router-test.mjs && node --check scripts/goal-command-handlers-test.mjs && node --check scripts/loop-command-handlers-test.mjs && node --check scripts/loop-registration-test.mjs && node --check scripts/schedule-syntax-test.mjs && node --check scripts/schedule-policy-test.mjs && node --check scripts/session-activity-test.mjs && node --check scripts/session-status-test.mjs && node --check scripts/session-status-idle-recovery-test.mjs && node --check scripts/session-error-recovery-test.mjs && node --check scripts/empty-turn-recovery-test.mjs && node --check scripts/network-recovery-test.mjs && node --check scripts/compaction-runtime-test.mjs && node --check scripts/executor-runtime-test.mjs && node --check scripts/scheduler-runtime-test.mjs && node --check scripts/goal-runtime-test.mjs && node --check scripts/goal-policy-test.mjs && node --check scripts/goal-steering-test.mjs && node --check scripts/job-workspace-test.mjs && node --check scripts/v2-prompt-runtime-test.mjs && node --check scripts/v2-prompt-interval-test.mjs && node --check scripts/v2-command-runtime-test.mjs && node --check scripts/v2-command-adapter-test.mjs && node --check scripts/v2-diagnostics-test.mjs && node --check scripts/v2-logging-test.mjs && node --check scripts/comprehensive-watchdog.mjs && node --check scripts/comprehensive-test.mjs && node --check scripts/host-goal-bootstrap.mjs && node --check scripts/host-goal-bootstrap-test.mjs && node --check scripts/host-loop-canary.mjs && node --check scripts/host-goal-steering-canary.mjs && node --check scripts/publish-workflow-test.mjs && node --check scripts/goal-compaction-safety-test.mjs && node --check src/source/native.js && node --check src/source/opencode2/native-plugin.js && node --check src/source/opencode2/native-runtime.js && node --check src/source/opencode2/native-policy.js && node --check src/source/runtime/checklist-completion.js && node --check scripts/checklist-completion-test.mjs && node --check src/native.js && node --check scripts/native-entry-test.mjs && node --check scripts/package-native-smoke.mjs && node --check src/v1.js && node --check scripts/native-cli-io-test.mjs && node --check scripts/native-lifecycle-test.mjs && node --check scripts/native-plugin-lifetime-test.mjs && node --check src/source/core/progress.js && node --check scripts/native-presets-test.mjs && node --check scripts/control-plane-until-test.mjs && node --check src/source/opencode2/session-location.js && node --check scripts/native-session-location-test.mjs && node --check src/plugin.js && node --check src/v2.js",
+    "test": "node --test scripts/native-session-location-test.mjs && node --test scripts/control-plane-until-test.mjs && node --test scripts/native-presets-test.mjs && node --test scripts/native-plugin-lifetime-test.mjs && node --test scripts/native-cli-io-test.mjs scripts/native-lifecycle-test.mjs && node scripts/native-entry-test.mjs && node scripts/native-coexistence-test.mjs && node scripts/native-shell-test.mjs && node scripts/native-install-test.mjs && node scripts/checklist-completion-test.mjs && node scripts/native-v2-test.mjs && node scripts/goal-compaction-safety-test.mjs && node scripts/publish-workflow-test.mjs && node scripts/server-entry-test.mjs && node scripts/command-router-test.mjs && node scripts/goal-command-handlers-test.mjs && node scripts/loop-command-handlers-test.mjs && node scripts/loop-registration-test.mjs && node scripts/schedule-syntax-test.mjs && node scripts/schedule-policy-test.mjs && node scripts/session-activity-test.mjs && node scripts/session-status-test.mjs && node scripts/session-status-idle-recovery-test.mjs && node scripts/session-error-recovery-test.mjs && node scripts/empty-turn-recovery-test.mjs && node scripts/network-recovery-test.mjs && node scripts/compaction-runtime-test.mjs && node scripts/action-dispatch-test.mjs && node scripts/run-finalization-test.mjs && node scripts/run-admission-test.mjs && node scripts/executor-runtime-test.mjs && node scripts/scheduler-runtime-test.mjs && node scripts/goal-runtime-test.mjs && node scripts/goal-policy-test.mjs && node scripts/goal-steering-test.mjs && node scripts/job-workspace-test.mjs && node scripts/v2-prompt-runtime-test.mjs && node scripts/v2-prompt-interval-test.mjs && node scripts/v2-command-runtime-test.mjs && node scripts/v2-command-adapter-test.mjs && node scripts/v2-diagnostics-test.mjs && node scripts/v2-logging-test.mjs && node scripts/state-process-test.mjs && node scripts/state-exfat-lock-test.mjs && node scripts/state-integrity-test.mjs && node scripts/install-test.mjs && node --test scripts/desktop-command-diagnostics-test.mjs && node scripts/goal-companion-test.mjs && node scripts/loopd-test.mjs && node scripts/smoke-test.mjs && node --test scripts/host-goal-bootstrap-test.mjs && node scripts/host-adapter-contract-test.mjs && node scripts/comprehensive-watchdog.mjs",
     "canary:host": "node scripts/host-loop-canary.mjs && node scripts/host-goal-steering-canary.mjs",
     "install:global": "node scripts/install-with-goals.mjs",
     "pack:zip": "node scripts/make-zip.mjs",

package/scripts/checklist-completion-test.mjs

@@ -0,0 +1,104 @@
+import assert from "node:assert/strict"
+import { mkdtemp, mkdir, writeFile, symlink, rm } from "node:fs/promises"
+import os from "node:os"
+import path from "node:path"
+import { parseLoopArgs } from "../src/source/core/args.js"
+import { summarizeTaskChecklist, inspectTaskChecklist } from "../src/source/runtime/checklist-completion.js"
+import { formatOpenCode2LoopStatus } from "../src/source/opencode2/status.js"
+import { createNativeJobPolicy } from "../src/source/opencode2/native-policy.js"
+
+let checks = 0
+function expectSummary(input, status, total, pending) {
+  const got = summarizeTaskChecklist(input)
+  assert.deepEqual([got.status, got.total, got.pending], [status, total, pending])
+  checks++
+}
+const ticks = String.fromCharCode(96).repeat(3)
+expectSummary("- [ ] first\n- [x] second", "pending", 2, 1)
+expectSummary("- [X] first\r\n  * [x] second\r\n    + [x] third", "complete", 3, 0)
+expectSummary("\uFEFF- [x] already finished\n", "complete", 1, 0)
+expectSummary("- [ ]", "pending", 1, 1)
+expectSummary("- [x]\n- [ ] TODO", "pending", 2, 1)
+expectSummary(ticks + "md\n- [ ] fake\n" + ticks + "\n- [x] real", "complete", 1, 0)
+expectSummary("~~~~\n- [ ] fake\n~~~~\n- [x] real", "complete", 1, 0)
+expectSummary("> - [ ] fake\n- [x] real", "complete", 1, 0)
+expectSummary("<!--\n- [ ] fake\n-->\n- [x] real", "complete", 1, 0)
+expectSummary("<!-- - [ ] fake -->\n- [x] real", "complete", 1, 0)
+expectSummary("No Markdown task boxes here.", "unavailable", 0, 0)
+expectSummary(ticks + "\n- [x] fake\n" + ticks, "unavailable", 0, 0)
+expectSummary("## [x] Not a task\n- [other] Nope", "unavailable", 0, 0)
+
+const args = parseLoopArgs("0s --progress-file TASK.md --until-checklist-complete task")
+assert.equal(args.ok, true)
+assert.equal(args.job.untilChecklistComplete, true)
+assert.equal(args.job.progressFile, "TASK.md")
+assert.equal(parseLoopArgs("0s --until-checklist-complete task").ok, false)
+assert.equal(parseLoopArgs("0s --progress-file TASK.md task").job.untilChecklistComplete, false)
+checks += 5
+assert.equal(formatOpenCode2LoopStatus({ jobs: [] }).text, "OpenCode loop status:\nNo active loop jobs.")
+checks++
+
+const root = await mkdtemp(path.join(os.tmpdir(), "loop-checklist-"))
+try {
+  await writeFile(path.join(root, "TASK.md"), "- [ ] one\n- [x] two\n")
+  let state = await inspectTaskChecklist(root, "TASK.md")
+  assert.deepEqual([state.status, state.total, state.pending], ["pending", 2, 1])
+  checks++
+  await writeFile(path.join(root, "TASK.md"), "- [X] one\n- [x] two\n")
+  state = await inspectTaskChecklist(root, "TASK.md")
+  assert.equal(state.status, "complete")
+  assert.match(state.digest, /^[0-9a-f]{64}$/)
+  checks++
+  const verifiedHash = state.digest
+  const policy = createNativeJobPolicy()
+  const job = { id: "verify", untilChecklistComplete: true, progressFile: "TASK.md",
+    verifyCommand: "npm test", lastVerifyCode: 0, lastVerifyAt: 10, lastVerifyChecklistDigest: verifiedHash }
+  await writeFile(path.join(root, "TASK.md"), "- [X] one\n- [x] two\n- [x] three\n")
+  assert.equal(await policy.checkStop({ directory: root }, job), true,
+    "stale digest must not complete a modified checklist")
+  assert.equal(job.enabled, undefined)
+  assert.equal(job.paused, undefined)
+  checks++
+  job.lastVerifyChecklistDigest = (await inspectTaskChecklist(root, "TASK.md")).digest
+  assert.equal(await policy.checkStop({ directory: root }, job), false)
+  assert.equal(job.paused, true)
+  assert.equal(job.pauseReason, "checklist-complete")
+  checks++
+  await mkdir(path.join(root, "plans"))
+  await writeFile(path.join(root, "plans", "tasks.md"), " - [x] done\n")
+  assert.equal((await inspectTaskChecklist(root, "plans/tasks.md")).status, "complete")
+  checks++
+
+  const bad = [
+    ["missing.md", "file-missing"],
+    ["../escape.md", "outside-project"],
+    ["/tmp/not-a-project-task.md", "absolute-path"],
+    [".opencode/goals/goal.md", "control-plane-path"],
+    [".git/TASK.md", "control-plane-path"],
+    ["node_modules/TASK.md", "control-plane-path"],
+    ["plans", "not-regular-file"],
+  ]
+  for (const [file, reason] of bad) {
+    const result = await inspectTaskChecklist(root, file)
+    assert.equal(result.status, "unavailable", file)
+    assert.equal(result.reason, reason, file)
+    checks++
+  }
+  await writeFile(path.join(root, "empty.md"), "Just prose\n")
+  assert.equal((await inspectTaskChecklist(root, "empty.md")).reason, "no-task-checkboxes")
+  checks++
+  await writeFile(path.join(root, "huge.md"), "x".repeat(256_001))
+  assert.equal((await inspectTaskChecklist(root, "huge.md")).reason, "file-too-large")
+  checks++
+  try {
+    await symlink(path.join(root, "TASK.md"), path.join(root, "linked.md"))
+    assert.equal((await inspectTaskChecklist(root, "linked.md")).reason, "symlink-path")
+    checks++
+  } catch (error) {
+    if (!["EPERM", "EACCES", "ENOTSUP", "EOPNOTSUPP"].includes(error?.code)) throw error
+  }
+} finally {
+  await rm(root, { force: true, recursive: true })
+}
+
+console.log("checklist completion regression tests passed: " + checks)

package/scripts/comprehensive-test.mjs

@@ -559,7 +559,15 @@ async function testStopsPreflightAndGoalLifecycle() {
     await h.command("loop", "5m --no-now --stop-file STOP continue")
     await fs.writeFile(path.join(h.directory, "STOP"), "stop", "utf8")
     await h.command("loop-now")
-    assert.equal((await h.readState()).jobs.length, 0)
+    // /loop-now dispatches through a 250ms idle-safe timer, not the
+    // synchronous command response. Busy Windows runners can take longer
+    // than the harness's 400ms delay to process the persisted stop-file.
+    const removed = await waitForValue(async () => {
+      const state = await h.readState()
+      return state.jobs.length === 0 ? state : undefined
+    }, 4_000, 20)
+    assert.ok(removed, "--stop-file must remove the job at the next safe scheduler boundary")
+    assert.equal(h.actionTexts().length, 0, "--stop-file must suppress prompts, not just hide a persisted job")
   } finally {
     await h.cleanup()
   }

package/scripts/desktop-command-diagnostics-test.mjs

@@ -19,7 +19,7 @@ test("Windows Desktop native catalog probe checks both commands but never return
   const server = createServer((req, res) => {
     calls.push({ url: req.url, directory: req.headers["x-opencode-directory"], auth: req.headers.authorization })
     res.setHeader("Content-Type", "application/json")
-    if (req.url === "/api/info") return res.end(JSON.stringify({ pid: process.pid, version: "2.0.22" }))
+    if (req.url === "/api/info") return res.end(JSON.stringify({ pid: process.pid, version: "2.0.29" }))
     if (req.url === "/api/command") {
       const native = req.headers["x-opencode-directory"] === desktopWorkspace
         ? [{ name: "init" }] : [{ name: "loop" }, { name: "goal" }, { name: "loop-help" }]
@@ -39,10 +39,13 @@ test("Windows Desktop native catalog probe checks both commands but never return
     await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve))
     const url = "http://127.0.0.1:" + server.address().port
     await writeFile(path.join(state, "service.json"), JSON.stringify({
-      url, pid: process.pid, version: "2.0.22", password,
+      url, pid: process.pid, version: "2.0.29", password,
     }))
     const result = await diagnose({ home, workspace, env: {} })
     assert.equal(result.service.status, "ready")
+    assert.equal(result.service.actualVersion, "2.0.29")
+    assert.equal(result.service.registeredVersion, "2.0.29")
+    assert.equal(result.service.versionMismatch, undefined)
     assert.deepEqual(result.service.commands, { loop: true, goal: true, count: 3 })
     assert.deepEqual(result.config.pins.loop, ["@bybrawe/opencode-loop@0.6.6"])
     assert.deepEqual(result.config.pins.goal, ["@bybrawe/opencode-goal@1.3.47"])
@@ -62,6 +65,16 @@ test("Windows Desktop native catalog probe checks both commands but never return
     assert.ok(!JSON.stringify(compared).includes(password), "comparison never exposes credentials")
     const same = await diagnose({ home, workspace, compareWorkspace: workspace, env: {} })
     assert.equal(same.comparison, undefined, "identical workspace needs no redundant catalog probe")
+    await writeFile(path.join(state, "service.json"), JSON.stringify({
+      url, pid: process.pid, version: "2.0.22", password,
+    }))
+    const versionMismatch = await diagnose({ home, workspace, env: {} })
+    assert.equal(versionMismatch.service.status, "ready", "version mismatch is diagnostic, not proof of bad commands")
+    assert.equal(versionMismatch.service.actualVersion, "2.0.29")
+    assert.equal(versionMismatch.service.registeredVersion, "2.0.22")
+    assert.equal(versionMismatch.service.versionMismatch, true)
+    assert.deepEqual(versionMismatch.service.commands, { loop: true, goal: true, count: 3 })
+    assert.ok(!JSON.stringify(versionMismatch).includes(password), "do not leak authentication on version mismatch")
     const bad = await diagnose({
       home, workspace, env: {}, server: "https://example.com", fetchImpl: () => { throw new Error("must not contact remote") },
     })
@@ -90,3 +103,85 @@ test("installer desktop diagnosis is read-only and does not invoke Loop or Goal
     assert.ok(!result.stdout.includes("Installed/updated"), "installer must not run in diagnosis mode")
   } finally { await rm(home, { recursive: true, force: true }) }
 })
+
+
+test("secondary localhost backend comparison detects missing native commands without leaking registration authentication", async () => {
+  const home = await mkdtemp(path.join(tmpdir(), "loop-desktop-second-backend-"))
+  const workspace = path.join(home, "my project")
+  const desktopWorkspace = path.join(home, "parent shown in Desktop")
+  const state = path.join(home, ".local", "state", "opencode")
+  const primaryCalls = [], desktopCalls = []
+  const localSecret = "primary-service-password-not-for-desktop"
+  const externalSecret = "explicit-desktop-probe-password"
+  const reply = (res, payload) => {
+    res.setHeader("Content-Type", "application/json")
+    res.end(JSON.stringify(payload))
+  }
+  const primary = createServer((req, res) => {
+    primaryCalls.push({ directory: req.headers["x-opencode-directory"], auth: req.headers.authorization })
+    if (req.url === "/api/info") return reply(res, { pid: process.pid, version: "2.0.29" })
+    if (req.url === "/api/command") return reply(res, req.headers["x-opencode-directory"] === desktopWorkspace ? [{ name: "init" }] : [{ name: "loop" }, { name: "goal" }])
+    res.writeHead(404).end("{}")
+  })
+  const desktop = createServer((req, res) => {
+    desktopCalls.push({ directory: req.headers["x-opencode-directory"], auth: req.headers.authorization })
+    if (req.url === "/api/info") return reply(res, { pid: process.pid + 99, version: "2.0.30" })
+    if (req.url === "/api/command") return reply(res, req.headers["x-opencode-directory"] === desktopWorkspace ? [{ name: "goal" }] : [{ name: "init" }])
+    res.writeHead(404).end("{}")
+  })
+  try {
+    await mkdir(state, { recursive: true })
+    await mkdir(workspace, { recursive: true })
+    await mkdir(desktopWorkspace, { recursive: true })
+    await Promise.all([primary, desktop].map(s => new Promise(resolve => s.listen(0, "127.0.0.1", resolve))))
+    const primaryURL = "http://127.0.0.1:" + primary.address().port
+    const desktopURL = "http://127.0.0.1:" + desktop.address().port
+    await writeFile(path.join(state, "service.json"), JSON.stringify({
+      url: primaryURL, pid: process.pid, version: "2.0.29", password: localSecret,
+    }))
+
+    const result = await diagnose({ home, workspace, compareWorkspace: desktopWorkspace, env: {}, compareServer: desktopURL })
+    assert.equal(result.service.status, "ready")
+    assert.deepEqual(result.service.commands, { loop: true, goal: true, count: 2 })
+    assert.equal(result.serverComparison.status, "ready")
+    assert.equal(result.serverComparison.actualVersion, "2.0.30")
+    assert.deepEqual(result.serverComparison.commands, { loop: false, goal: false, count: 1 })
+    assert.equal(result.serverComparison.matchesPrimary, false)
+    assert.deepEqual(result.comparison.commands, { loop: false, goal: false, count: 1 })
+    assert.deepEqual(result.serverComparison.comparison.commands, { loop: false, goal: true, count: 1 })
+    assert.equal(result.serverComparison.comparison.matchesPrimary, false)
+    assert.ok(primaryCalls.some(call => call.directory === desktopWorkspace))
+    assert.ok(desktopCalls.some(call => call.directory === desktopWorkspace))
+    assert.ok(primaryCalls.every(call => call.auth === "Basic " + Buffer.from("opencode:" + localSecret).toString("base64")))
+    assert.ok(desktopCalls.every(call => call.auth === undefined), "never forward service.json password to another localhost server")
+    assert.ok(desktopCalls.every(call => [workspace, desktopWorkspace].includes(call.directory)), "both servers must receive only the two selected project directories")
+    assert.ok(!JSON.stringify(result).includes(localSecret))
+    assert.ok(!JSON.stringify(result).includes(externalSecret))
+
+    const before = desktopCalls.length
+    const authorized = await diagnose({
+      home, workspace, env: { OPENCODE_PASSWORD: externalSecret }, compareServer: desktopURL,
+    })
+    assert.equal(authorized.serverComparison.status, "ready")
+    assert.ok(desktopCalls.slice(before).every(call =>
+      call.auth === "Basic " + Buffer.from("opencode:" + externalSecret).toString("base64")))
+    assert.ok(!JSON.stringify(authorized).includes(externalSecret))
+
+    const remoteCalls = desktopCalls.length
+    const rejected = await diagnose({
+      home, workspace, env: {}, compareServer: "https://not-local.example.com",
+    })
+    assert.equal(rejected.serverComparison.status, "refused-nonlocal-or-invalid-url")
+    assert.equal(desktopCalls.length, remoteCalls, "refused remote target must not be fetched")
+    const withoutRegistration = await diagnose({
+      home, workspace, env: {}, serviceFile: path.join(home, "missing-service.json"),
+      compareServer: desktopURL,
+    })
+    assert.equal(withoutRegistration.service.status, "registration-not-found")
+    assert.equal(withoutRegistration.serverComparison.status, "ready", "compare even if primary registration is missing")
+    assert.equal(withoutRegistration.serverComparison.matchesPrimary, undefined)
+  } finally {
+    await Promise.all([primary, desktop].map(s => new Promise(resolve => s.close(resolve))))
+    await rm(home, { recursive: true, force: true })
+  }
+})

package/scripts/desktop-command-diagnostics.mjs

@@ -33,6 +33,11 @@ function localUrl(raw) {
   return url.origin
 }
 
+// Service metadata is untrusted; reject multiline/control-character version labels.
+function safeVersion(value) {
+  return typeof value === "string" && /^[A-Za-z0-9][A-Za-z0-9.+_-]{0,39}$/.test(value) ? value : undefined
+}
+
 function presentPins(raw) {
   const result = {}
   for (const name of packageNames) {
@@ -71,6 +76,8 @@ async function request(fetchImpl, base, pathname, headers) {
     const response = await fetchImpl(base + pathname, {
       method: "GET",
       headers,
+      // Credentials and location headers must never follow a server redirect.
+      redirect: "error",
       signal: AbortSignal.timeout(5_000),
     })
     if (![200, 201].includes(response.status)) return { status: response.status }
@@ -87,7 +94,7 @@ async function catalog(fetchImpl, origin, headers) {
   return response
 }
 
-export async function diagnose({
+async function diagnoseOne({
   env = process.env, home = homedir(), workspace = process.cwd(),
   compareWorkspace, server, serviceFile, fetchImpl = fetch,
 } = {}) {
@@ -117,7 +124,7 @@ export async function diagnose({
     }
     url = info?.url
     password = info?.password
-    version = typeof info?.version === "string" ? info.version : undefined
+    version = safeVersion(info?.version)
     pid = Number.isInteger(info?.pid) ? info.pid : undefined
   }
   const origin = localUrl(url)
@@ -146,7 +153,9 @@ export async function diagnose({
       output.service.status = "stale-service-registration"
       return output
     }
-    if (typeof info.json.version === "string") output.service.actualVersion = info.json.version
+    if (safeVersion(info.json.version)) output.service.actualVersion = safeVersion(info.json.version)
+    if (version && output.service.actualVersion && version !== output.service.actualVersion)
+      output.service.versionMismatch = true
   }
   const list = await catalog(fetchImpl, origin, headers)
   if (list.error) {
@@ -183,27 +192,61 @@ export async function diagnose({
   return output
 }
 
+// Compare a caller-supplied *local* Desktop backend with the regular service.
+// Do not forward the service.json password to a different server: diagnoseOne
+// authenticates explicit endpoints using only the caller's environment.
+export async function diagnose({ compareServer, ...options } = {}) {
+  const output = await diagnoseOne(options)
+  if (compareServer === undefined) return output
+
+  if (typeof compareServer !== "string" || !localUrl(compareServer)) {
+    output.serverComparison = { status: "refused-nonlocal-or-invalid-url" }
+    return output
+  }
+
+  const compared = await diagnoseOne({
+    ...options,
+    server: compareServer,
+    // Compare both project locations on BOTH backend connections.
+    // The second backend never receives the primary registration secret.
+  })
+  const service = compared.service
+  output.serverComparison = {
+    status: service.status,
+    ...(service.host ? { host: service.host } : {}),
+    ...(service.actualVersion ? { actualVersion: service.actualVersion } : {}),
+    ...(service.commands ? { commands: service.commands } : {}),
+    ...(compared.comparison ? { comparison: compared.comparison } : {}),
+    ...(service.commands && output.service.commands ? {
+      matchesPrimary: service.commands.loop === output.service.commands.loop
+        && service.commands.goal === output.service.commands.goal,
+    } : {}),
+  }
+  return output
+}
+
 export async function runDesktopDiagnosticCli(args = process.argv.slice(2), options = {}) {
-  let workspace = process.cwd(), compareWorkspace, server, json = false
+  let workspace = process.cwd(), compareWorkspace, server, compareServer, json = false
   for (let i = 0; i < args.length; i++) {
     const arg = args[i]
     if (arg === "--help" || arg === "-h") {
-      console.log("Usage: opencode-loop --desktop-diagnostics [--workspace PATH] [--compare-workspace PATH] [--server LOCAL_URL] [--json]")
+      console.log("Usage: opencode-loop --desktop-diagnostics [--workspace PATH] [--compare-workspace PATH] [--server LOCAL_URL] [--compare-server LOCAL_URL] [--json]")
       console.log("Read-only check of both native /loop and /goal registrations; never prints credentials.")
       return 0
     }
     if (arg === "--json") { json = true; continue }
-    if (arg === "--workspace" || arg === "--compare-workspace" || arg === "--server") {
+    if (arg === "--workspace" || arg === "--compare-workspace" || arg === "--server" || arg === "--compare-server") {
       if (!args[i + 1]) { console.error("Missing value for " + arg); return 2 }
       if (arg === "--workspace") workspace = args[++i]
       else if (arg === "--compare-workspace") compareWorkspace = args[++i]
+      else if (arg === "--compare-server") compareServer = args[++i]
       else server = args[++i]
       continue
     }
     console.error("Unknown Desktop diagnostic option: " + arg)
     return 2
   }
-  const result = await diagnose({ ...options, workspace, compareWorkspace, server })
+  const result = await diagnose({ ...options, workspace, compareWorkspace, server, compareServer })
   if (json) console.log(JSON.stringify(result, null, 2))
   else {
     console.log("OpenCode Desktop native command diagnosis (read-only)")
@@ -211,7 +254,10 @@ export async function runDesktopDiagnosticCli(args = process.argv.slice(2), opti
     console.log("Global config: " + result.config.directory)
     for (const kind of packageNames)
       console.log("Configured " + kind + " spec: " + (result.config.pins[kind].join(", ") || "not found (text scan)"))
-    console.log("Local service: " + result.service.status + (result.service.registeredVersion ? " (" + result.service.registeredVersion + ")" : ""))
+    console.log("Local service: " + result.service.status
+      + (result.service.actualVersion ? " (live " + result.service.actualVersion + ")" : result.service.registeredVersion ? " (registered " + result.service.registeredVersion + ")" : ""))
+    if (result.service.versionMismatch)
+      console.log("Version mismatch: service.json registration and live /api/info disagree; verify the service identity before diagnosing Desktop.")
     if (result.service.commands)
       console.log("Server /loop: " + result.service.commands.loop + " | /goal: " + result.service.commands.goal)
     if (result.comparison) {
@@ -222,9 +268,24 @@ export async function runDesktopDiagnosticCli(args = process.argv.slice(2), opti
         console.log("Same native command visibility across directories: " + result.comparison.matchesPrimary)
       }
     }
+    if (result.serverComparison) {
+      const compared = result.serverComparison
+      console.log("Compared local backend: " + compared.status
+        + (compared.actualVersion ? " (live " + compared.actualVersion + ")" : "")
+        + (compared.host ? " at " + compared.host : ""))
+      if (compared.commands)
+        console.log("Compared backend /loop: " + compared.commands.loop + " | /goal: " + compared.commands.goal)
+      if (compared.matchesPrimary !== undefined)
+        console.log("Same native command visibility across backends: " + compared.matchesPrimary)
+      if (compared.comparison) {
+        console.log("Compared backend second workspace catalog: " + compared.comparison.status)
+        if (compared.comparison.commands)
+          console.log("Compared backend second workspace /loop: " + compared.comparison.commands.loop + " | /goal: " + compared.comparison.commands.goal)
+      }
+    }
     if (!result.service.commands)
       console.log("No confirmed local server catalog. Desktop may use a different connection or service.")
-    console.log("This checks one local service and directory; it cannot prove which connection Desktop currently uses.")
+    console.log("These are local backend probes, not proof of the connection selected by the Desktop window.")
   }
   return 0
 }

package/scripts/loopd-test.mjs

@@ -76,7 +76,7 @@ try {
   let calls = await readLog(fakeOpenCode.log)
   let runCalls = calls.filter((item) => item.args[0] === "run")
   assert.equal(runCalls.length, 1)
-  assert.equal(path.resolve(runCalls[0].cwd), path.resolve(project))
+  assert.equal(await fs.realpath(runCalls[0].cwd), await fs.realpath(project), "daemon and selected project refer to the same physical directory")
   assert.deepEqual(runCalls[0].args, [
     "run", "--title", runCalls[0].args[2],
     "--model", "opencode/nemotron-3-ultra-free",

package/scripts/loopd.mjs

@@ -181,9 +181,11 @@ async function selectHost(project, options = {}) {
 async function listSessions(host, project, limit) {
   const argv = ["session", "list", "--format", "json", "-n", String(limit)]
   if (host.server) argv.push("--server", host.server)
+  // macOS aliases /var -> /private/var. OpenCode 2 needs the canonical
+  // project PWD to agree with process.cwd() and the native session location.
   const result = await run(host.binary, argv, project, {
     capture: true, timeoutMs: 15_000,
-    ...(host.major === 2 ? { env: { ...process.env, PWD: project } } : {}),
+    ...(host.major === 2 ? { env: { ...process.env, PWD: process.platform === "win32" ? project : fs.realpathSync.native(project) } } : {}),
   })
   if (result.code !== 0 || result.timedOut) throw new Error("OpenCode session list failed; refusing to guess a session")
   return projectSessions(result.stdout, project, host.major === 2)
@@ -286,7 +288,7 @@ async function daemon(options = {}) {
     // Keep native runs project-bound and non-interactive without changing V1.
     const result = await run(host.binary, runArgs, project, {
       timeoutMs, closeStdin: host.major === 2,
-      ...(host.major === 2 ? { env: { ...process.env, PWD: project } } : {}),
+      ...(host.major === 2 ? { env: { ...process.env, PWD: process.platform === "win32" ? project : fs.realpathSync.native(project) } } : {}),
     })
     const code = result.timedOut ? 124 : result.code
     const moreRunsRemain = maxRuns === 0 || count < maxRuns