@datasynx/agentic-ai-cartography 0.7.0 → 0.8.1

package/dist/index.js

@@ -527,7 +527,7 @@ var NodeSchema = z.object({
   name: z.string(),
   discoveredVia: z.string(),
   confidence: z.number().min(0).max(1).default(0.5),
-  metadata: z.record(z.unknown()).default({}),
+  metadata: z.record(z.string(), z.unknown()).default({}),
   tags: z.array(z.string()).default([]),
   domain: z.string().optional().describe('Business domain, e.g. "Marketing", "Finance"'),
   subDomain: z.string().optional().describe('Sub-domain, e.g. "Forecast client orders"'),
@@ -562,7 +562,7 @@ var DataAssetSchema = z.object({
   domain: z.string(),
   subDomain: z.string().optional(),
   qualityScore: z.number().min(0).max(100).optional(),
-  metadata: z.record(z.unknown()).default({}),
+  metadata: z.record(z.string(), z.unknown()).default({}),
   position: z.object({ q: z.number(), r: z.number() })
 });
 var ClusterSchema = z.object({
@@ -628,9 +628,154 @@ function defaultConfig(overrides = {}) {
 }
 
 // src/bookmarks.ts
-import { homedir, tmpdir } from "os";
-import { existsSync, readFileSync, readdirSync, copyFileSync, statSync } from "fs";
+import { tmpdir } from "os";
+import { existsSync as existsSync2, readFileSync, readdirSync, copyFileSync, statSync } from "fs";
+import { join as join2 } from "path";
+
+// src/platform.ts
+import { homedir } from "os";
 import { join } from "path";
+import { execSync } from "child_process";
+import { existsSync } from "fs";
+var PLATFORM = process.platform;
+var IS_WIN = PLATFORM === "win32";
+var IS_MAC = PLATFORM === "darwin";
+var IS_LINUX = PLATFORM === "linux";
+var HOME = homedir();
+function platformShell() {
+  if (!IS_WIN) return "/bin/sh";
+  try {
+    execSync("pwsh -Version", { stdio: "pipe", timeout: 3e3 });
+    return "pwsh";
+  } catch {
+    return "powershell.exe";
+  }
+}
+var _shell;
+function getShell() {
+  if (!_shell) _shell = platformShell();
+  return _shell;
+}
+function run(cmd, opts = {}) {
+  try {
+    return execSync(cmd, {
+      stdio: "pipe",
+      timeout: opts.timeout ?? 1e4,
+      shell: getShell(),
+      env: opts.env
+    }).toString().trim();
+  } catch {
+    return "";
+  }
+}
+function commandExists(cmd) {
+  if (IS_WIN) {
+    const r = run(`Get-Command ${cmd} -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Source`, { timeout: 5e3 });
+    return r;
+  }
+  return run(`which ${cmd} 2>/dev/null`);
+}
+function userDataDir() {
+  if (IS_WIN) return process.env.APPDATA ?? join(HOME, "AppData", "Roaming");
+  if (IS_MAC) return join(HOME, "Library", "Application Support");
+  return process.env.XDG_DATA_HOME ?? join(HOME, ".local", "share");
+}
+function browserBasePaths() {
+  if (IS_WIN) {
+    const local = process.env.LOCALAPPDATA ?? join(HOME, "AppData", "Local");
+    return {
+      chrome: join(local, "Google", "Chrome", "User Data"),
+      chromium: join(local, "Chromium", "User Data"),
+      edge: join(local, "Microsoft", "Edge", "User Data"),
+      brave: join(local, "BraveSoftware", "Brave-Browser", "User Data"),
+      vivaldi: join(local, "Vivaldi", "User Data"),
+      opera: join(userDataDir(), "Opera Software", "Opera Stable")
+    };
+  }
+  if (IS_MAC) {
+    const lib = join(HOME, "Library", "Application Support");
+    return {
+      chrome: join(lib, "Google", "Chrome"),
+      chromium: join(lib, "Chromium"),
+      edge: join(lib, "Microsoft Edge"),
+      brave: join(lib, "BraveSoftware", "Brave-Browser"),
+      vivaldi: join(lib, "Vivaldi"),
+      opera: join(lib, "com.operasoftware.Opera")
+    };
+  }
+  return {
+    chrome: join(HOME, ".config", "google-chrome"),
+    chromium: join(HOME, ".config", "chromium"),
+    edge: join(HOME, ".config", "microsoft-edge"),
+    brave: join(HOME, ".config", "BraveSoftware", "Brave-Browser"),
+    vivaldi: join(HOME, ".config", "vivaldi"),
+    opera: join(HOME, ".config", "opera")
+  };
+}
+function firefoxBaseDirs() {
+  if (IS_WIN) {
+    const roaming = process.env.APPDATA ?? join(HOME, "AppData", "Roaming");
+    return [join(roaming, "Mozilla", "Firefox", "Profiles")];
+  }
+  if (IS_MAC) {
+    return [join(HOME, "Library", "Application Support", "Firefox", "Profiles")];
+  }
+  return [
+    join(HOME, ".mozilla", "firefox"),
+    join(HOME, "snap", "firefox", "common", ".mozilla", "firefox"),
+    join(HOME, ".var", "app", "org.mozilla.firefox", ".mozilla", "firefox")
+  ];
+}
+function dbScanDirs() {
+  const dirs = [];
+  if (IS_WIN) {
+    const local = process.env.LOCALAPPDATA ?? join(HOME, "AppData", "Local");
+    const roaming = process.env.APPDATA ?? join(HOME, "AppData", "Roaming");
+    dirs.push(local, roaming);
+    const pd = join(HOME, "AppData", "Local", "Programs");
+    if (existsSync(pd)) dirs.push(pd);
+  } else if (IS_MAC) {
+    dirs.push(join(HOME, "Library", "Application Support"));
+    if (existsSync("/var/lib")) dirs.push("/var/lib");
+  } else {
+    const configDir = join(HOME, ".config");
+    const dataDir = join(HOME, ".local", "share");
+    if (existsSync(configDir)) dirs.push(configDir);
+    if (existsSync(dataDir)) dirs.push(dataDir);
+    if (existsSync("/var/lib")) dirs.push("/var/lib");
+  }
+  return dirs.filter((d) => existsSync(d));
+}
+function findFiles(dirs, patterns, maxDepth, limit) {
+  if (dirs.length === 0) return "";
+  if (IS_WIN) {
+    const includes = patterns.map((p) => `'${p}'`).join(",");
+    const pathList = dirs.map((d) => `'${d}'`).join(",");
+    return run(
+      `Get-ChildItem -Path ${pathList} -Recurse -Depth ${maxDepth} -Include ${includes} -ErrorAction SilentlyContinue | Select-Object -First ${limit} -ExpandProperty FullName`,
+      { timeout: 15e3 }
+    );
+  }
+  const nameArgs = patterns.map((p) => `-name "${p}"`).join(" -o ");
+  const findCmds = dirs.map((d) => `find "${d}" -maxdepth ${maxDepth} \\( ${nameArgs} \\) 2>/dev/null`).join("; ");
+  return run(`{ ${findCmds}; } | head -${limit}`, { timeout: 15e3 });
+}
+function scanWindowsPrograms() {
+  if (!IS_WIN) return "";
+  return run(
+    `$paths = @('HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKLM:\\Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*','HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\*'); Get-ItemProperty $paths -ErrorAction SilentlyContinue | Where-Object { $_.DisplayName } | Select-Object -Property DisplayName, Publisher, DisplayVersion | Sort-Object DisplayName | Format-Table -AutoSize | Out-String -Width 300`,
+    { timeout: 2e4 }
+  );
+}
+function scanWindowsDbServices() {
+  if (!IS_WIN) return "";
+  return run(
+    `Get-Service | Where-Object { $_.Name -match 'postgres|mysql|mariadb|mongo|redis|MSSQL|elastic|clickhouse|cassandra' } | Select-Object Name, DisplayName, Status, StartType | Format-Table -AutoSize`,
+    { timeout: 1e4 }
+  );
+}
+
+// src/bookmarks.ts
 function extractHost(rawUrl, source) {
   try {
     const u = new URL(rawUrl);
@@ -654,7 +799,7 @@ function walkChrome(node, source, out) {
   }
 }
 function readChromeLike(filePath, source) {
-  if (!existsSync(filePath)) return [];
+  if (!existsSync2(filePath)) return [];
   try {
     const raw = JSON.parse(readFileSync(filePath, "utf8"));
     const out = [];
@@ -667,9 +812,9 @@ function readChromeLike(filePath, source) {
   }
 }
 async function readFirefoxBookmarks(profileDir) {
-  const src = join(profileDir, "places.sqlite");
-  if (!existsSync(src)) return [];
-  const tmp = join(tmpdir(), `cartograph_ff_bm_${Date.now()}.sqlite`);
+  const src = join2(profileDir, "places.sqlite");
+  if (!existsSync2(src)) return [];
+  const tmp = join2(tmpdir(), `cartograph_ff_bm_${Date.now()}.sqlite`);
   try {
     copyFileSync(src, tmp);
     const { default: Database2 } = await import("better-sqlite3");
@@ -693,9 +838,9 @@ async function readFirefoxBookmarks(profileDir) {
   }
 }
 async function readFirefoxHistory(profileDir) {
-  const src = join(profileDir, "places.sqlite");
-  if (!existsSync(src)) return [];
-  const tmp = join(tmpdir(), `cartograph_ff_hist_${Date.now()}.sqlite`);
+  const src = join2(profileDir, "places.sqlite");
+  if (!existsSync2(src)) return [];
+  const tmp = join2(tmpdir(), `cartograph_ff_hist_${Date.now()}.sqlite`);
   try {
     copyFileSync(src, tmp);
     const { default: Database2 } = await import("better-sqlite3");
@@ -724,8 +869,8 @@ async function readFirefoxHistory(profileDir) {
   }
 }
 async function readChromiumHistory(historyPath, source) {
-  if (!existsSync(historyPath)) return [];
-  const tmp = join(tmpdir(), `cartograph_ch_hist_${Date.now()}.sqlite`);
+  if (!existsSync2(historyPath)) return [];
+  const tmp = join2(tmpdir(), `cartograph_ch_hist_${Date.now()}.sqlite`);
   try {
     copyFileSync(historyPath, tmp);
     const { default: Database2 } = await import("better-sqlite3");
@@ -753,18 +898,17 @@ async function readChromiumHistory(historyPath, source) {
     }
   }
 }
-var HOME = homedir();
-var IS_MAC = process.platform === "darwin";
+var IS_LINUX2 = !IS_MAC && !IS_WIN;
 function chromeLikePaths(base) {
   const paths = [];
-  const defaultPath = join(base, "Default", "Bookmarks");
-  if (existsSync(defaultPath)) paths.push(defaultPath);
-  if (existsSync(base)) {
+  const defaultPath = join2(base, "Default", "Bookmarks");
+  if (existsSync2(defaultPath)) paths.push(defaultPath);
+  if (existsSync2(base)) {
     try {
       for (const entry of readdirSync(base)) {
         if (entry.startsWith("Profile ")) {
-          const p = join(base, entry, "Bookmarks");
-          if (existsSync(p)) paths.push(p);
+          const p = join2(base, entry, "Bookmarks");
+          if (existsSync2(p)) paths.push(p);
         }
       }
     } catch {
@@ -774,14 +918,14 @@ function chromeLikePaths(base) {
 }
 function chromeLikeHistoryPaths(base) {
   const paths = [];
-  const defaultPath = join(base, "Default", "History");
-  if (existsSync(defaultPath)) paths.push(defaultPath);
-  if (existsSync(base)) {
+  const defaultPath = join2(base, "Default", "History");
+  if (existsSync2(defaultPath)) paths.push(defaultPath);
+  if (existsSync2(base)) {
     try {
       for (const entry of readdirSync(base)) {
         if (entry.startsWith("Profile ")) {
-          const p = join(base, entry, "History");
-          if (existsSync(p)) paths.push(p);
+          const p = join2(base, entry, "History");
+          if (existsSync2(p)) paths.push(p);
         }
       }
     } catch {
@@ -789,29 +933,28 @@ function chromeLikeHistoryPaths(base) {
   }
   return paths;
 }
-var CHROME_BASE = IS_MAC ? `${HOME}/Library/Application Support/Google/Chrome` : `${HOME}/.config/google-chrome`;
-var CHROMIUM_BASE = IS_MAC ? `${HOME}/Library/Application Support/Chromium` : `${HOME}/.config/chromium`;
-var CHROMIUM_SNAP_BASE = `${HOME}/snap/chromium/common/chromium`;
-var CHROMIUM_FLATPAK_BASE = `${HOME}/.var/app/org.chromium.Chromium/config/chromium`;
-var CHROME_FLATPAK_BASE = `${HOME}/.var/app/com.google.Chrome/config/google-chrome`;
-var BRAVE_FLATPAK_BASE = `${HOME}/.var/app/com.brave.Browser/config/BraveSoftware/Brave-Browser`;
-var EDGE_FLATPAK_BASE = `${HOME}/.var/app/com.microsoft.Edge/config/microsoft-edge`;
-var FIREFOX_SNAP_BASE = `${HOME}/snap/firefox/common/.mozilla/firefox`;
-var FIREFOX_FLATPAK_BASE = `${HOME}/.var/app/org.mozilla.firefox/.mozilla/firefox`;
-var EDGE_BASE = IS_MAC ? `${HOME}/Library/Application Support/Microsoft Edge` : `${HOME}/.config/microsoft-edge`;
-var BRAVE_BASE = IS_MAC ? `${HOME}/Library/Application Support/BraveSoftware/Brave-Browser` : `${HOME}/.config/BraveSoftware/Brave-Browser`;
-var VIVALDI_BASE = IS_MAC ? `${HOME}/Library/Application Support/Vivaldi` : `${HOME}/.config/vivaldi`;
-var OPERA_BASE = IS_MAC ? `${HOME}/Library/Application Support/com.operasoftware.Opera` : `${HOME}/.config/opera`;
+var BROWSER_BASES = browserBasePaths();
+var CHROME_BASE = BROWSER_BASES.chrome;
+var CHROMIUM_BASE = BROWSER_BASES.chromium;
+var EDGE_BASE = BROWSER_BASES.edge;
+var BRAVE_BASE = BROWSER_BASES.brave;
+var VIVALDI_BASE = BROWSER_BASES.vivaldi;
+var OPERA_BASE = BROWSER_BASES.opera;
+var CHROMIUM_SNAP_BASE = join2(HOME, "snap", "chromium", "common", "chromium");
+var CHROMIUM_FLATPAK_BASE = join2(HOME, ".var", "app", "org.chromium.Chromium", "config", "chromium");
+var CHROME_FLATPAK_BASE = join2(HOME, ".var", "app", "com.google.Chrome", "config", "google-chrome");
+var BRAVE_FLATPAK_BASE = join2(HOME, ".var", "app", "com.brave.Browser", "config", "BraveSoftware", "Brave-Browser");
+var EDGE_FLATPAK_BASE = join2(HOME, ".var", "app", "com.microsoft.Edge", "config", "microsoft-edge");
 function firefoxProfileDirs() {
-  const bases = IS_MAC ? [`${HOME}/Library/Application Support/Firefox/Profiles`] : [`${HOME}/.mozilla/firefox`, FIREFOX_SNAP_BASE, FIREFOX_FLATPAK_BASE];
+  const bases = firefoxBaseDirs();
   const dirs = [];
   for (const base of bases) {
-    if (!existsSync(base)) continue;
+    if (!existsSync2(base)) continue;
     try {
       for (const d of readdirSync(base)) {
-        const full = join(base, d);
+        const full = join2(base, d);
         try {
-          if (statSync(full).isDirectory() && existsSync(join(full, "places.sqlite"))) {
+          if (statSync(full).isDirectory() && existsSync2(join2(full, "places.sqlite"))) {
             dirs.push(full);
           }
         } catch {
@@ -830,7 +973,7 @@ async function scanAllBookmarks() {
   for (const p of chromeLikePaths(BRAVE_BASE)) all.push(...readChromeLike(p, "brave"));
   for (const p of chromeLikePaths(VIVALDI_BASE)) all.push(...readChromeLike(p, "vivaldi"));
   for (const p of chromeLikePaths(OPERA_BASE)) all.push(...readChromeLike(p, "opera"));
-  if (!IS_MAC) {
+  if (IS_LINUX2) {
     for (const p of chromeLikePaths(CHROMIUM_SNAP_BASE)) all.push(...readChromeLike(p, "chromium-snap"));
     for (const p of chromeLikePaths(CHROMIUM_FLATPAK_BASE)) all.push(...readChromeLike(p, "chromium-flatpak"));
     for (const p of chromeLikePaths(CHROME_FLATPAK_BASE)) all.push(...readChromeLike(p, "chrome-flatpak"));
@@ -855,7 +998,7 @@ async function scanAllHistory() {
   for (const p of chromeLikeHistoryPaths(BRAVE_BASE)) all.push(...await readChromiumHistory(p, "brave"));
   for (const p of chromeLikeHistoryPaths(VIVALDI_BASE)) all.push(...await readChromiumHistory(p, "vivaldi"));
   for (const p of chromeLikeHistoryPaths(OPERA_BASE)) all.push(...await readChromiumHistory(p, "opera"));
-  if (!IS_MAC) {
+  if (IS_LINUX2) {
     for (const p of chromeLikeHistoryPaths(CHROMIUM_SNAP_BASE)) all.push(...await readChromiumHistory(p, "chromium-snap"));
     for (const p of chromeLikeHistoryPaths(CHROMIUM_FLATPAK_BASE)) all.push(...await readChromiumHistory(p, "chromium-flatpak"));
     for (const p of chromeLikeHistoryPaths(CHROME_FLATPAK_BASE)) all.push(...await readChromiumHistory(p, "chrome-flatpak"));
@@ -887,8 +1030,7 @@ function stripSensitive(target) {
   }
 }
 async function createCartographyTools(db, sessionId, opts = {}) {
-  const sdk = await import("@anthropic-ai/claude-code");
-  const { tool, createSdkMcpServer } = sdk;
+  const { tool, createSdkMcpServer } = await import("@anthropic-ai/claude-agent-sdk");
   const tools = [
     tool("save_node", "Save an infrastructure node to the catalog", {
       id: z2.string(),
@@ -896,7 +1038,7 @@ async function createCartographyTools(db, sessionId, opts = {}) {
       name: z2.string(),
       discoveredVia: z2.string(),
       confidence: z2.number().min(0).max(1),
-      metadata: z2.record(z2.unknown()).optional(),
+      metadata: z2.record(z2.string(), z2.unknown()).optional(),
       tags: z2.array(z2.string()).optional(),
       domain: z2.string().optional().describe('Business domain, e.g. "Marketing", "Finance"'),
       subDomain: z2.string().optional().describe('Sub-domain, e.g. "Forecast client orders"'),
@@ -1007,33 +1149,71 @@ async function createCartographyTools(db, sessionId, opts = {}) {
     tool("scan_local_databases", "Scan for local database files and running DB servers \u2014 PostgreSQL databases, MySQL, SQLite files from installed apps", {
       deep: z2.boolean().default(false).optional().describe("Also search home directory recursively for SQLite/DB files (slower)")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
-      const { homedir: homedir2 } = await import("os");
-      const { existsSync: existsSync3 } = await import("fs");
       const deep = args["deep"] ?? false;
-      const HOME2 = homedir2();
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 1e4, shell: "/bin/sh" }).toString().trim();
-        } catch {
-          return "";
-        }
-      };
       const results = {};
-      results["POSTGRES_DATABASES"] = run(`psql -lqt 2>/dev/null | grep -v "template0\\|template1" | awk '{print $1}' | grep -v "^$\\|^|"`) || "(psql not running or not available)";
-      results["POSTGRES_CLUSTERS"] = run("pg_lsclusters 2>/dev/null") || "(pg_lsclusters not available)";
-      results["MYSQL_DATABASES"] = run('mysql --connect-timeout=3 -e "SHOW DATABASES;" 2>/dev/null') || "(mysql not running or requires auth)";
-      results["MONGODB_DATABASES"] = run(`mongosh --quiet --eval "db.adminCommand({listDatabases:1}).databases.map(d=>d.name).join('\\n')" 2>/dev/null`) || "(mongosh not available)";
-      results["REDIS_INFO"] = run("redis-cli info server 2>/dev/null | head -5") || "(redis-cli not available)";
-      const appDirs = [`${HOME2}/.config`, `${HOME2}/.local/share`, `${HOME2}/Library/Application Support`, "/var/lib"].filter((d) => existsSync3(d));
+      results["PLATFORM"] = `${PLATFORM} (${IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux"})`;
+      if (IS_WIN) {
+        results["DB_SERVICES"] = scanWindowsDbServices() || "(no database services found)";
+      }
+      if (commandExists("psql")) {
+        if (IS_WIN) {
+          results["POSTGRES_DATABASES"] = run("psql -lqt", { timeout: 1e4 }) || "(psql found but not running or requires auth)";
+        } else {
+          results["POSTGRES_DATABASES"] = run(`psql -lqt 2>/dev/null | grep -v "template0\\|template1" | awk '{print $1}' | grep -v "^$\\|^|"`) || "(psql not running or not available)";
+          results["POSTGRES_CLUSTERS"] = run("pg_lsclusters 2>/dev/null") || "(pg_lsclusters not available)";
+        }
+      } else {
+        results["POSTGRES_DATABASES"] = "(psql not installed)";
+      }
+      if (commandExists("mysql")) {
+        if (IS_WIN) {
+          results["MYSQL_DATABASES"] = run('mysql --connect-timeout=3 -e "SHOW DATABASES;"', { timeout: 1e4 }) || "(mysql not running or requires auth)";
+        } else {
+          results["MYSQL_DATABASES"] = run('mysql --connect-timeout=3 -e "SHOW DATABASES;" 2>/dev/null') || "(mysql not running or requires auth)";
+        }
+      } else {
+        results["MYSQL_DATABASES"] = "(mysql not installed)";
+      }
+      if (commandExists("mongosh")) {
+        if (IS_WIN) {
+          results["MONGODB_DATABASES"] = run(`mongosh --quiet --eval "db.adminCommand({listDatabases:1}).databases.map(d=>d.name).join('\\n')"`, { timeout: 1e4 }) || "(mongosh not available)";
+        } else {
+          results["MONGODB_DATABASES"] = run(`mongosh --quiet --eval "db.adminCommand({listDatabases:1}).databases.map(d=>d.name).join('\\n')" 2>/dev/null`) || "(mongosh not available)";
+        }
+      } else {
+        results["MONGODB_DATABASES"] = "(mongosh not installed)";
+      }
+      if (commandExists("redis-cli")) {
+        if (IS_WIN) {
+          results["REDIS_INFO"] = run("redis-cli info server", { timeout: 1e4 }).split("\n").slice(0, 5).join("\n") || "(redis-cli not available)";
+        } else {
+          results["REDIS_INFO"] = run("redis-cli info server 2>/dev/null | head -5") || "(redis-cli not available)";
+        }
+      } else {
+        results["REDIS_INFO"] = "(redis-cli not installed)";
+      }
+      const appDirs = dbScanDirs();
       if (appDirs.length > 0) {
-        const findCmds = appDirs.map((d) => `find "${d}" -maxdepth 4 \\( -name "*.sqlite" -o -name "*.sqlite3" -o -name "*.db" \\) 2>/dev/null`).join("; ");
-        results["SQLITE_APP_FILES"] = run(`{ ${findCmds}; } | head -80`) || "(none found)";
+        results["SQLITE_APP_FILES"] = findFiles(appDirs, ["*.sqlite", "*.sqlite3", "*.db"], 4, 80) || "(none found)";
       }
       if (deep) {
-        results["SQLITE_DEEP_SCAN"] = run(`find "${HOME2}" -maxdepth 6 \\( -name "*.sqlite" -o -name "*.sqlite3" -o -name "*.db" \\) -not -path "*/node_modules/*" -not -path "*/.git/*" 2>/dev/null | head -100`) || "(none found)";
+        if (IS_WIN) {
+          results["SQLITE_DEEP_SCAN"] = run(
+            `Get-ChildItem -Path '${HOME}' -Recurse -Depth 6 -Include '*.sqlite','*.sqlite3','*.db' -ErrorAction SilentlyContinue | Where-Object { $_.FullName -notmatch 'node_modules|\\.git' } | Select-Object -First 100 -ExpandProperty FullName`,
+            { timeout: 3e4 }
+          ) || "(none found)";
+        } else {
+          results["SQLITE_DEEP_SCAN"] = run(`find "${HOME}" -maxdepth 6 \\( -name "*.sqlite" -o -name "*.sqlite3" -o -name "*.db" \\) -not -path "*/node_modules/*" -not -path "*/.git/*" 2>/dev/null | head -100`) || "(none found)";
+        }
+      }
+      if (IS_WIN) {
+        results["DB_CONFIG_FILES"] = run(
+          `Get-ChildItem -Path '${HOME}' -Recurse -Depth 4 -Include '.env','.env.local','database.yml','database.json','docker-compose.yml' -ErrorAction SilentlyContinue | Select-Object -First 20 -ExpandProperty FullName`,
+          { timeout: 15e3 }
+        ) || "(none found)";
+      } else {
+        results["DB_CONFIG_FILES"] = run(`find "${HOME}" -maxdepth 4 \\( -name ".env" -o -name ".env.local" -o -name "database.yml" -o -name "database.json" -o -name "docker-compose.yml" \\) 2>/dev/null | head -20`) || "(none found)";
       }
-      results["DB_CONFIG_FILES"] = run(`find "${HOME2}" -maxdepth 4 \\( -name ".env" -o -name ".env.local" -o -name "database.yml" -o -name "database.json" -o -name "docker-compose.yml" \\) 2>/dev/null | head -20`) || "(none found)";
       const out = Object.entries(results).map(([k, v]) => `=== ${k} ===
 ${v}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
@@ -1041,17 +1221,23 @@ ${v}`).join("\n\n");
     tool("scan_k8s_resources", "Scan Kubernetes cluster via kubectl \u2014 100% readonly (get, describe)", {
       namespace: z2.string().optional().describe("Filter by namespace \u2014 empty = all namespaces")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const ns = args["namespace"];
       const nsFlag = ns ? `-n ${ns}` : "--all-namespaces";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 15e3, shell: "/bin/sh" }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
+      const runK = (cmd) => {
+        const r = run(cmd, { timeout: 15e3 });
+        return r || `(error or not available)`;
       };
-      const sections = [
+      const sections = IS_WIN ? [
+        ["CONTEXT", "kubectl config current-context"],
+        ["NODES", "kubectl get nodes -o wide"],
+        ["NAMESPACES", "kubectl get namespaces"],
+        ["SERVICES", `kubectl get services ${nsFlag}`],
+        ["DEPLOYMENTS", `kubectl get deployments ${nsFlag}`],
+        ["STATEFULSETS", `kubectl get statefulsets ${nsFlag}`],
+        ["INGRESSES", `kubectl get ingress ${nsFlag}`],
+        ["PODS_RUNNING", `kubectl get pods ${nsFlag} --field-selector=status.phase=Running`],
+        ["CONFIGMAPS_SYSTEM", "kubectl get configmaps -n kube-system"]
+      ] : [
         ["CONTEXT", 'kubectl config current-context 2>/dev/null || echo "(no context set)"'],
         ["NODES", "kubectl get nodes -o wide"],
         ["NAMESPACES", "kubectl get namespaces"],
@@ -1063,128 +1249,101 @@ ${v}`).join("\n\n");
         ["CONFIGMAPS_SYSTEM", "kubectl get configmaps -n kube-system 2>/dev/null | head -30"]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runK(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_aws_resources", "Scan AWS infrastructure via AWS CLI \u2014 100% readonly (describe, list)", {
       region: z2.string().optional().describe("AWS Region \u2014 default: AWS_DEFAULT_REGION or profile"),
       profile: z2.string().optional().describe("AWS CLI profile")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const region = args["region"];
       const profile = args["profile"];
       const env = { ...process.env };
       if (region) env["AWS_DEFAULT_REGION"] = region;
       const pf = profile ? `--profile ${profile}` : "";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh", env }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
-      };
+      const runAws = (cmd) => run(cmd, { timeout: 2e4, env }) || "(error or not available)";
       const sections = [
         ["IDENTITY", `aws sts get-caller-identity ${pf} --output json`],
-        ["EC2", `aws ec2 describe-instances ${pf} --query 'Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name,PublicIpAddress,PrivateIpAddress,Tags[?Key==\`Name\`].Value|[0]]' --output table`],
-        ["RDS", `aws rds describe-db-instances ${pf} --query 'DBInstances[*].[DBInstanceIdentifier,Engine,DBInstanceStatus,Endpoint.Address,Endpoint.Port]' --output table`],
-        ["ELB_V2", `aws elbv2 describe-load-balancers ${pf} --query 'LoadBalancers[*].[LoadBalancerName,DNSName,Type,State.Code]' --output table`],
+        ["EC2", `aws ec2 describe-instances ${pf} --query "Reservations[*].Instances[*].[InstanceId,InstanceType,State.Name,PublicIpAddress,PrivateIpAddress]" --output table`],
+        ["RDS", `aws rds describe-db-instances ${pf} --query "DBInstances[*].[DBInstanceIdentifier,Engine,DBInstanceStatus,Endpoint.Address,Endpoint.Port]" --output table`],
+        ["ELB_V2", `aws elbv2 describe-load-balancers ${pf} --query "LoadBalancers[*].[LoadBalancerName,DNSName,Type,State.Code]" --output table`],
         ["EKS", `aws eks list-clusters ${pf} --output json`],
-        ["ELASTICACHE", `aws elasticache describe-cache-clusters ${pf} --query 'CacheClusters[*].[CacheClusterId,Engine,CacheClusterStatus]' --output table 2>/dev/null || echo "(not available)"`],
-        ["S3", `aws s3 ls ${pf} 2>/dev/null || echo "(not available)"`],
-        ["VPC", `aws ec2 describe-vpcs ${pf} --query 'Vpcs[*].[VpcId,CidrBlock,IsDefault,Tags[?Key==\`Name\`].Value|[0]]' --output table`]
+        ["ELASTICACHE", `aws elasticache describe-cache-clusters ${pf} --query "CacheClusters[*].[CacheClusterId,Engine,CacheClusterStatus]" --output table`],
+        ["S3", `aws s3 ls ${pf}`],
+        ["VPC", `aws ec2 describe-vpcs ${pf} --query "Vpcs[*].[VpcId,CidrBlock,IsDefault]" --output table`]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runAws(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_gcp_resources", "Scan Google Cloud Platform via gcloud CLI \u2014 100% readonly (list, describe)", {
       project: z2.string().optional().describe("GCP Project ID \u2014 default: current gcloud project")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const project = args["project"];
       const pf = project ? `--project ${project}` : "";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh" }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
-      };
+      const runGcp = (cmd) => run(cmd, { timeout: 2e4 }) || "(error or not available)";
       const sections = [
-        ["IDENTITY", `gcloud config list account --format='value(core.account)' 2>/dev/null; gcloud config get-value project 2>/dev/null`],
-        ["COMPUTE_INSTANCES", `gcloud compute instances list ${pf} 2>/dev/null || echo "(error)"`],
-        ["SQL_INSTANCES", `gcloud sql instances list ${pf} 2>/dev/null || echo "(error)"`],
-        ["GKE_CLUSTERS", `gcloud container clusters list ${pf} 2>/dev/null || echo "(error)"`],
-        ["CLOUD_RUN", `gcloud run services list ${pf} --platform managed 2>/dev/null || echo "(error)"`],
-        ["CLOUD_FUNCTIONS", `gcloud functions list ${pf} 2>/dev/null || echo "(error)"`],
-        ["REDIS", `gcloud redis instances list ${pf} --regions=- 2>/dev/null || echo "(error)"`],
-        ["PUBSUB", `gcloud pubsub topics list ${pf} 2>/dev/null || echo "(error)"`],
-        ["SPANNER", `gcloud spanner instances list ${pf} 2>/dev/null || echo "(error)"`]
+        ["IDENTITY", `gcloud config list account --format="value(core.account)"`],
+        ["COMPUTE_INSTANCES", `gcloud compute instances list ${pf}`],
+        ["SQL_INSTANCES", `gcloud sql instances list ${pf}`],
+        ["GKE_CLUSTERS", `gcloud container clusters list ${pf}`],
+        ["CLOUD_RUN", `gcloud run services list ${pf} --platform managed`],
+        ["CLOUD_FUNCTIONS", `gcloud functions list ${pf}`],
+        ["REDIS", `gcloud redis instances list ${pf} --regions=-`],
+        ["PUBSUB", `gcloud pubsub topics list ${pf}`],
+        ["SPANNER", `gcloud spanner instances list ${pf}`]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runGcp(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_azure_resources", "Scan Azure infrastructure via az CLI \u2014 100% readonly (list, show)", {
       subscription: z2.string().optional().describe("Azure Subscription ID"),
       resourceGroup: z2.string().optional().describe("Filter by resource group")
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const sub = args["subscription"];
       const rg = args["resourceGroup"];
       const sf = sub ? `--subscription ${sub}` : "";
       const rf = rg ? `--resource-group ${rg}` : "";
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 2e4, shell: "/bin/sh" }).toString().trim();
-        } catch (e) {
-          return `(error: ${e instanceof Error ? e.message.split("\n")[0] : String(e)})`;
-        }
-      };
+      const runAz = (cmd) => run(cmd, { timeout: 2e4 }) || "(error or not available)";
       const sections = [
-        ["IDENTITY", `az account show --output json ${sf} 2>/dev/null || echo "(not logged in \u2014 az login)"`],
-        ["VMS", `az vm list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["AKS", `az aks list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["SQL_SERVERS", `az sql server list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["POSTGRES", `az postgres server list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["REDIS", `az redis list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["WEBAPPS", `az webapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["CONTAINER_APPS", `az containerapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`],
-        ["FUNCTIONS", `az functionapp list ${sf} ${rf} --output table 2>/dev/null || echo "(error)"`]
+        ["IDENTITY", `az account show --output json ${sf}`],
+        ["VMS", `az vm list ${sf} ${rf} --output table`],
+        ["AKS", `az aks list ${sf} ${rf} --output table`],
+        ["SQL_SERVERS", `az sql server list ${sf} ${rf} --output table`],
+        ["POSTGRES", `az postgres server list ${sf} ${rf} --output table`],
+        ["REDIS", `az redis list ${sf} ${rf} --output table`],
+        ["WEBAPPS", `az webapp list ${sf} ${rf} --output table`],
+        ["CONTAINER_APPS", `az containerapp list ${sf} ${rf} --output table`],
+        ["FUNCTIONS", `az functionapp list ${sf} ${rf} --output table`]
       ];
       const out = sections.map(([l, c]) => `=== ${l} ===
-${run(c)}`).join("\n\n");
+${runAz(c)}`).join("\n\n");
       return { content: [{ type: "text", text: out }] };
     }),
     tool("scan_installed_apps", "Scan all installed apps and tools \u2014 IDEs, office, dev tools, business apps, databases", {
       searchHint: z2.string().optional().describe('Optional search term to find specific tools (e.g. "hubspot windsurf cursor")')
     }, async (args) => {
-      const { execSync: execSync2 } = await import("child_process");
       const hint = args["searchHint"];
-      const run = (cmd) => {
-        try {
-          return execSync2(cmd, { stdio: "pipe", timeout: 15e3, shell: "/bin/sh" }).toString().trim();
-        } catch {
-          return "";
-        }
-      };
-      const platform = process.platform;
       const results = {};
-      if (platform === "darwin") {
+      results["PLATFORM"] = `${PLATFORM} (${IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux"})`;
+      if (IS_MAC) {
         results["APPLICATIONS"] = run("ls /Applications/ 2>/dev/null | head -200") || "(empty)";
         results["USER_APPLICATIONS"] = run("ls ~/Applications/ 2>/dev/null | head -100") || "(empty)";
         results["BREW_CASKS"] = run("brew list --cask 2>/dev/null | head -100") || "(brew not installed)";
         results["BREW_FORMULAE"] = run("brew list --formula 2>/dev/null | head -150") || "(brew not installed)";
         results["SPOTLIGHT_APPS"] = run(`mdfind "kMDItemKind == 'Application'" 2>/dev/null | grep -v "^/System" | grep -v "^/Library/Apple" | head -100`) || "(Spotlight not available)";
-      } else if (platform === "linux") {
+      } else if (IS_LINUX) {
         results["DPKG"] = run("dpkg --list 2>/dev/null | awk '{print $2}' | head -200") || "(dpkg not available)";
         results["SNAP"] = run("snap list 2>/dev/null | head -50") || "(snap not available)";
         results["FLATPAK"] = run("flatpak list 2>/dev/null | head -50") || "(flatpak not available)";
         results["DESKTOP_FILES"] = run("ls /usr/share/applications/*.desktop ~/.local/share/applications/*.desktop 2>/dev/null | xargs -I{} basename {} .desktop 2>/dev/null | head -100") || "(no .desktop files)";
         results["RPM"] = run("rpm -qa 2>/dev/null | head -200") || "(rpm not available)";
-      } else if (platform === "win32") {
-        results["WINGET"] = run("winget list 2>/dev/null | head -100") || "(winget not available)";
-        results["PROGRAMS_x64"] = run('reg query "HKLM\\Software\\Microsoft\\Windows\\CurrentVersion\\Uninstall" /s /v DisplayName 2>/dev/null | findstr DisplayName | head -100') || "(not available)";
+      } else if (IS_WIN) {
+        results["WINGET"] = run("winget list --accept-source-agreements", { timeout: 2e4 }) || "(winget not available)";
+        results["INSTALLED_PROGRAMS"] = scanWindowsPrograms() || "(registry scan failed)";
+        results["CHOCO"] = run("choco list --local-only", { timeout: 15e3 }) || "(chocolatey not installed)";
+        results["SCOOP"] = run("scoop list", { timeout: 15e3 }) || "(scoop not installed)";
       }
       const knownTools = [
         // IDEs & Editors
@@ -1247,7 +1406,6 @@ ${run(c)}`).join("\n\n");
         "php",
         "composer",
         "dotnet",
-        "dotnet-sdk",
         // Databases
         "psql",
         "mysql",
@@ -1288,6 +1446,8 @@ ${run(c)}`).join("\n\n");
         "brave",
         "opera",
         "edge",
+        // Windows-specific
+        ...IS_WIN ? ["pwsh", "powershell", "wsl", "winget", "choco", "scoop", "notepad++"] : [],
         // Monitoring / Analytics
         "datadog-agent",
         "newrelic-agent",
@@ -1302,21 +1462,35 @@ ${run(c)}`).join("\n\n");
       const found = [];
       const notFound = [];
       for (const t of knownTools) {
-        const r = run(`which ${t} 2>/dev/null`);
+        const r = commandExists(t);
         if (r) found.push(`${t}: ${r}`);
         else notFound.push(t);
       }
-      results["WHICH_FOUND"] = found.join("\n") || "(none found)";
-      results["WHICH_NOT_FOUND"] = notFound.join(", ");
+      results["TOOLS_FOUND"] = found.join("\n") || "(none found)";
+      results["TOOLS_NOT_FOUND"] = notFound.join(", ");
       if (hint) {
         const terms = hint.split(/[\s,]+/).filter(Boolean);
         const hintResults = [];
         for (const term of terms) {
           const safe = term.replace(/[^a-zA-Z0-9._-]/g, "");
           if (!safe) continue;
-          const r = run(`which ${safe} 2>/dev/null || find /Applications ~/Applications /usr/bin /usr/local/bin /opt/homebrew/bin ~/.local/bin 2>/dev/null -iname "*${safe}*" -maxdepth 3 2>/dev/null | head -5`);
-          if (r) hintResults.push(`${term}: ${r}`);
-          else hintResults.push(`${term}: (not found)`);
+          const cmdPath = commandExists(safe);
+          if (cmdPath) {
+            hintResults.push(`${term}: ${cmdPath}`);
+            continue;
+          }
+          let fallback = "";
+          if (IS_WIN) {
+            fallback = run(
+              `Get-ChildItem -Path 'C:\\Program Files','C:\\Program Files (x86)','${HOME}\\AppData\\Local\\Programs' -Recurse -Depth 3 -Filter '*${safe}*' -ErrorAction SilentlyContinue | Select-Object -First 5 -ExpandProperty FullName`,
+              { timeout: 1e4 }
+            );
+          } else if (IS_MAC) {
+            fallback = run(`mdfind -name "${safe}" 2>/dev/null | head -5`);
+          } else {
+            fallback = run(`find /usr/bin /usr/local/bin /opt/homebrew/bin ~/.local/bin /Applications ~/Applications 2>/dev/null -iname "*${safe}*" -maxdepth 3 2>/dev/null | head -5`);
+          }
+          hintResults.push(fallback ? `${term}: ${fallback}` : `${term}: (not found)`);
         }
         results["HINT_SEARCH"] = hintResults.join("\n");
       }
@@ -1355,9 +1529,9 @@ ${v}`).join("\n\n");
 }
 
 // src/safety.ts
-var BLOCKED_CMDS = /\b(rm|mv|cp|dd|mkfs|chmod|chown|chgrp|kill|killall|pkill|reboot|shutdown|poweroff|halt|systemctl\s+(start|stop|restart|enable|disable)|service\s+(start|stop|restart)|docker\s+(rm|rmi|stop|kill|exec|run|build|push)|kubectl\s+(delete|apply|edit|exec|run|create|patch)|apt|yum|dnf|pacman|pip\s+install|npm\s+(install|uninstall)|curl\s+.*-X\s*(POST|PUT|DELETE|PATCH)|wget\s+-O|tee\s)\b/i;
-var BLOCKED_REDIRECTS = />>|>[^>]/;
-var safetyHook = async (input) => {
+var BLOCKED_CMDS = /\b(rm|mv|cp|dd|mkfs|chmod|chown|chgrp|kill|killall|pkill|reboot|shutdown|poweroff|halt|systemctl\s+(start|stop|restart|enable|disable)|service\s+(start|stop|restart)|docker\s+(rm|rmi|stop|kill|exec|run|build|push)|kubectl\s+(delete|apply|edit|exec|run|create|patch)|apt|yum|dnf|pacman|pip\s+install|npm\s+(install|uninstall)|curl\s+.*-X\s*(POST|PUT|DELETE|PATCH)|wget\s+-O|tee\s|Remove-Item|Move-Item|Copy-Item|Stop-Process|Stop-Service|Restart-Service|Start-Service|Set-Service|Invoke-WebRequest\s+.*-Method\s+(POST|PUT|DELETE|PATCH)|del\s|rmdir\s|Format-Volume|Clear-Disk|Stop-Computer|Restart-Computer|Uninstall-Package|Install-Package|Install-Module)\b/i;
+var BLOCKED_REDIRECTS = />>|>[^>]|Out-File|Set-Content|Add-Content/;
+var safetyHook = async (input, _toolUseID, _options) => {
   if (!("tool_name" in input)) return {};
   if (input.tool_name !== "Bash") return {};
   const cmd = input.tool_input?.command ?? "";
@@ -1380,13 +1554,18 @@ var safetyHook = async (input) => {
 
 // src/agent.ts
 async function runDiscovery(config, db, sessionId, onEvent, onAskUser, hint) {
-  const { query } = await import("@anthropic-ai/claude-code");
+  const { query } = await import("@anthropic-ai/claude-agent-sdk");
   const tools = await createCartographyTools(db, sessionId, { onAskUser });
   const hintSection = hint ? `
 \u26A1 USER HINT (HIGH PRIORITY): The user wants to find these specific tools: "${hint}"
   \u2192 Run scan_installed_apps(searchHint: "${hint}") IMMEDIATELY and save found tools as saas_tool nodes!
 ` : "";
+  const platformName = IS_WIN ? "Windows" : IS_MAC ? "macOS" : "Linux";
+  const networkScanCmd = IS_WIN ? "Get-NetTCPConnection -State Listen (PowerShell) \u2192 identify all listening ports/processes" : IS_MAC ? "lsof -iTCP -sTCP:LISTEN -n -P && ps aux \u2192 identify all listening ports/processes" : "ss -tlnp && ps aux \u2192 identify all listening ports/processes";
+  const readOnlyTools = IS_WIN ? "Get-NetTCPConnection, Get-Process, Get-Service, Get-ChildItem, curl, docker inspect, kubectl get" : IS_MAC ? "lsof, ps, cat, head, curl -s, docker inspect, kubectl get" : "ss, ps, cat, head, curl -s, docker inspect, kubectl get";
+  const processCmd = IS_WIN ? "Get-Process" : "ps aux";
   const systemPrompt = `You are an infrastructure discovery agent. Map the complete system landscape \u2014 local services, SaaS tools, AND all installed apps/tools of the user.
+PLATFORM: ${platformName} (${PLATFORM})
 ${hintSection}
 \u2501\u2501 MANDATORY SEQUENCE \u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501\u2501
 STEP 1 \u2014 Browser Bookmarks (ALWAYS FIRST):
@@ -1417,7 +1596,8 @@ STEP 4 \u2014 Local Databases & Infrastructure:
   \u2022 MongoDB running \u2192 save_node as database_server
   \u2022 Redis running \u2192 save_node as cache_server
   \u2022 SQLite files in app directories \u2192 save_node as database if clearly a business app DB
-  Then run: ss -tlnp && ps aux \u2192 identify all listening ports/processes
+  Then run: ${networkScanCmd}
+  Also run: ${processCmd} \u2192 identify running services
   Deepen each service: DB\u2192schemas, API\u2192endpoints, Queue\u2192topics
 
 STEP 5 \u2014 Cloud & Kubernetes (if CLI available):
@@ -1454,8 +1634,20 @@ PORT MAPPING: 5432=postgres, 3306=mysql, 27017=mongodb, 6379=redis,
 9092=kafka, 5672=rabbitmq, 80/443/8080/3000=web_service,
 9090=prometheus, 8500=consul, 8200=vault, 2379=etcd
 
+PLATFORM-SPECIFIC NOTES (${platformName}):
+${IS_WIN ? `\u2022 Use PowerShell commands: Get-NetTCPConnection, Get-Process, Get-Service, Get-ChildItem
+\u2022 Do NOT use Unix commands (ss, ps aux, find, which, head, grep) \u2014 they won't work on Windows
+\u2022 Use $env:LOCALAPPDATA, $env:APPDATA for app data paths
+\u2022 Registry scan for installed programs is handled by scan_installed_apps` : IS_MAC ? `\u2022 Use lsof -iTCP -sTCP:LISTEN -n -P for port scanning (ss is NOT available on macOS)
+\u2022 Use ps aux for process listing
+\u2022 Applications are in /Applications and ~/Applications
+\u2022 Homebrew (brew) for package management` : `\u2022 Use ss -tlnp for port scanning
+\u2022 Use ps aux for process listing
+\u2022 Check dpkg, snap, flatpak for installed packages
+\u2022 Check Snap/Flatpak browser variants for bookmarks`}
+
 RULES:
-\u2022 Read-only only (ss, ps, cat, head, curl -s, docker inspect, kubectl get)
+\u2022 Read-only only (${readOnlyTools})
 \u2022 Node IDs: "type:host:port" or "type:name" \u2014 no paths, no credentials
 \u2022 saas_tool IDs: "saas_tool:github.com", "saas_tool:vscode", "saas_tool:cursor"
 \u2022 Installed-app IDs: "saas_tool:<appname>" e.g. "saas_tool:slack", "saas_tool:docker-desktop"
@@ -1482,7 +1674,7 @@ Use ask_user when you need context from the user.`;
     options: {
       model: config.agentModel,
       maxTurns: config.maxTurns,
-      customSystemPrompt: systemPrompt,
+      systemPrompt,
       mcpServers: { cartography: tools },
       allowedTools: [
         "Bash",
@@ -1543,7 +1735,7 @@ Use ask_user when you need context from the user.`;
 
 // src/exporter.ts
 import { mkdirSync as mkdirSync2, writeFileSync } from "fs";
-import { join as join2 } from "path";
+import { join as join3 } from "path";
 
 // src/hex.ts
 function hexToPixel(q, r, size) {
@@ -3346,53 +3538,44 @@ function exportJGF(nodes, edges) {
 }
 function exportAll(db, sessionId, outputDir, formats = ["mermaid", "json", "yaml", "html", "map", "discovery", "sops"]) {
   mkdirSync2(outputDir, { recursive: true });
-  mkdirSync2(join2(outputDir, "sops"), { recursive: true });
-  mkdirSync2(join2(outputDir, "workflows"), { recursive: true });
+  mkdirSync2(join3(outputDir, "sops"), { recursive: true });
+  mkdirSync2(join3(outputDir, "workflows"), { recursive: true });
   const nodes = db.getNodes(sessionId);
   const edges = db.getEdges(sessionId);
-  const jgfPath = join2(outputDir, "cartography-graph.jgf.json");
+  const jgfPath = join3(outputDir, "cartography-graph.jgf.json");
   writeFileSync(jgfPath, exportJGF(nodes, edges));
-  process.stderr.write("\u2713 cartography-graph.jgf.json\n");
   if (formats.includes("mermaid")) {
-    writeFileSync(join2(outputDir, "topology.mermaid"), generateTopologyMermaid(nodes, edges));
-    writeFileSync(join2(outputDir, "dependencies.mermaid"), generateDependencyMermaid(nodes, edges));
-    process.stderr.write("\u2713 topology.mermaid, dependencies.mermaid\n");
+    writeFileSync(join3(outputDir, "topology.mermaid"), generateTopologyMermaid(nodes, edges));
+    writeFileSync(join3(outputDir, "dependencies.mermaid"), generateDependencyMermaid(nodes, edges));
   }
   if (formats.includes("json")) {
-    writeFileSync(join2(outputDir, "catalog.json"), exportJSON(db, sessionId));
-    process.stderr.write("\u2713 catalog.json\n");
+    writeFileSync(join3(outputDir, "catalog.json"), exportJSON(db, sessionId));
   }
   if (formats.includes("yaml")) {
-    writeFileSync(join2(outputDir, "catalog-info.yaml"), exportBackstageYAML(nodes, edges));
-    process.stderr.write("\u2713 catalog-info.yaml\n");
+    writeFileSync(join3(outputDir, "catalog-info.yaml"), exportBackstageYAML(nodes, edges));
   }
   if (formats.includes("html") || formats.includes("map") || formats.includes("discovery")) {
-    writeFileSync(join2(outputDir, "discovery.html"), exportDiscoveryApp(nodes, edges));
-    process.stderr.write("\u2713 discovery.html\n");
+    writeFileSync(join3(outputDir, "discovery.html"), exportDiscoveryApp(nodes, edges));
   }
   if (formats.includes("sops")) {
     const sops = db.getSOPs(sessionId);
     for (const sop of sops) {
       const filename = sop.title.toLowerCase().replace(/[^a-z0-9]+/g, "-") + ".md";
-      writeFileSync(join2(outputDir, "sops", filename), exportSOPMarkdown(sop));
+      writeFileSync(join3(outputDir, "sops", filename), exportSOPMarkdown(sop));
       const wfFilename = `workflow-${sop.workflowId.substring(0, 8)}.mermaid`;
-      writeFileSync(join2(outputDir, "workflows", wfFilename), generateWorkflowMermaid(sop));
-    }
-    if (sops.length > 0) {
-      process.stderr.write(`\u2713 ${sops.length} SOPs + workflow diagrams
-`);
+      writeFileSync(join3(outputDir, "workflows", wfFilename), generateWorkflowMermaid(sop));
     }
   }
 }
 
 // src/preflight.ts
-import { execSync } from "child_process";
-import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { join as join3 } from "path";
+import { execSync as execSync2 } from "child_process";
+import { existsSync as existsSync3, readFileSync as readFileSync2 } from "fs";
+import { join as join4 } from "path";
 function isOAuthLoggedIn() {
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "/tmp";
-  const credFile = join3(home, ".claude", ".credentials.json");
-  if (!existsSync2(credFile)) return false;
+  const credFile = join4(home, ".claude", ".credentials.json");
+  if (!existsSync3(credFile)) return false;
   try {
     const creds = JSON.parse(readFileSync2(credFile, "utf8"));
     const oauth = creds["claudeAiOauth"];
@@ -3403,7 +3586,7 @@ function isOAuthLoggedIn() {
 }
 function checkPrerequisites() {
   try {
-    execSync("claude --version", { stdio: "pipe" });
+    execSync2("claude --version", { stdio: "pipe" });
   } catch {
     process.stderr.write(
       "\n\u274C Claude CLI nicht gefunden.\n   Datasynx Cartography braucht die Claude CLI als Runtime-Dependency.\n\n   Installieren:\n     npm install -g @anthropic-ai/claude-code\n     # oder\n     curl -fsSL https://claude.ai/install.sh | bash\n\n   Danach: claude login\n\n"