@geminilight/mindos 0.6.52 → 0.6.54

package/app/lib/i18n/modules/ai-chat.ts

@@ -30,6 +30,10 @@ export const aiChatEn = {
     errorNoResponse: 'AI returned no content. Possible causes: model does not support streaming, proxy compatibility issue, or request exceeds context limit.',
     reconnecting: (attempt: number, max: number) => `Connection lost. Reconnecting (${attempt}/${max})...`,
     reconnectFailed: 'Connection failed after multiple attempts.',
+    proxyCompatMode: 'Using compatibility mode (non-streaming)...',
+    proxyCompatFailed: (err: string) => `Compatibility mode failed: ${err}. Please check your Base URL, API key, and model name.`,
+    proxyCompatDetecting: 'Detecting proxy compatibility, switching to non-streaming mode...',
+    proxyCompatAlsoFailed: (err: string) => `Compatibility mode also failed: ${err}. Please check your Base URL, API key, and model name.`,
     retry: 'Retry',
     suggestions: [
       'Summarize this document',
@@ -79,6 +83,23 @@ export const aiChatEn = {
     empty: 'No content changes yet.',
     open: 'Open',
     unchangedLines: (n: number) => `... ${n} unchanged lines ...`,
+    operations: {
+      save_file: 'Save file',
+      append_to_file: 'Append to file',
+      insert_lines: 'Insert lines',
+      update_lines: 'Update lines',
+      insert_after_heading: 'Insert after heading',
+      update_section: 'Update section',
+      create_file: 'Create file',
+      delete_file: 'Delete file',
+      rename_file: 'Rename file',
+      move_file: 'Move file',
+      create_space: 'Create space',
+      rename_space: 'Rename space',
+      append_csv: 'Append to CSV',
+      import_file: 'Import file',
+      legacy_agent_diff_import: 'Import from Agent Diff',
+    },
     relativeTime: {
       justNow: 'just now',
       minutesAgo: (n: number) => `${n}m ago`,
@@ -148,6 +169,10 @@ export const aiChatZh = {
     errorNoResponse: 'AI 未返回有效内容。可能原因：模型不支持流式输出、中转站兼容性问题、或请求超出上下文限制。',
     reconnecting: (attempt: number, max: number) => `连接中断，正在重连 (${attempt}/${max})...`,
     reconnectFailed: '多次重连失败，请检查网络后重试。',
+    proxyCompatMode: '正在以兼容模式调用...',
+    proxyCompatFailed: (err: string) => `兼容模式失败：${err}。请检查 Base URL、API Key 和模型名称。`,
+    proxyCompatDetecting: '正在检测接口兼容性，切换到兼容模式重试...',
+    proxyCompatAlsoFailed: (err: string) => `兼容模式也失败了：${err}。请检查 Base URL、API Key 和模型名称。`,
     retry: '重试',
     suggestions: [
       '总结这篇文档',
@@ -197,6 +222,23 @@ export const aiChatZh = {
     empty: '暂无内容变更。',
     open: '打开',
     unchangedLines: (n: number) => `... ${n} 行未变更 ...`,
+    operations: {
+      save_file: '保存文件',
+      append_to_file: '追加到文件',
+      insert_lines: '插入行',
+      update_lines: '更新行',
+      insert_after_heading: '标题后插入',
+      update_section: '更新章节',
+      create_file: '创建文件',
+      delete_file: '删除文件',
+      rename_file: '重命名文件',
+      move_file: '移动文件',
+      create_space: '创建空间',
+      rename_space: '重命名空间',
+      append_csv: '追加到 CSV',
+      import_file: '导入文件',
+      legacy_agent_diff_import: '从 Agent Diff 导入',
+    },
     relativeTime: {
       justNow: '刚刚',
       minutesAgo: (n: number) => `${n} 分钟前`,

package/app/lib/i18n/modules/knowledge.ts

@@ -52,6 +52,10 @@ export const knowledgeEn = {
     showMore: 'Show more',
     showLess: 'Show less',
     viewAll: 'View all',
+    wikiTagline: 'Your knowledge spaces, organized.',
+    sortRecent: 'Recent',
+    sortName: 'A-Z',
+    sortCount: 'File Count',
     createToActivate: 'Create {file} to activate',
     shortcuts: {
       searchFiles: 'Search files',
@@ -95,6 +99,8 @@ export const knowledgeEn = {
     organizing: 'Organizing...',
     viewAll: 'View all',
     more: (n: number) => `${n} more`,
+    viewAllFiles: (n: number) => `View all ${n} files in Inbox`,
+    viewAllHistory: (n: number) => `View all ${n} records →`,
     agingHint: '7+ days',
     savedToast: (n: number) => `${n} file${n === 1 ? '' : 's'} saved to Capture`,
     savedWithSkipped: (saved: number, skipped: number) =>
@@ -324,8 +330,17 @@ export const knowledgeEn = {
   importHistory: {
     title: 'Import History',
     clearAll: 'Clear history',
+    clearConfirm: 'Clear all history? This cannot be undone.',
     emptyTitle: 'No import history yet',
     emptyDesc: 'AI organize results will appear here',
+    back: '← Back',
+    sourceLabel: 'Source',
+    changesCount: (ok: number, total: number) => `${ok}/${total} changes`,
+    recordCount: (n: number) => `${n} record${n !== 1 ? 's' : ''}`,
+    today: 'Today',
+    yesterday: 'Yesterday',
+    older: 'Older',
+    processedArchive: 'Processed files are archived in Inbox/.processed/',
   },
   dirView: {
     gridView: 'Grid view',
@@ -415,6 +430,10 @@ export const knowledgeZh = {
     showMore: '查看更多',
     showLess: '收起',
     viewAll: '查看全部',
+    wikiTagline: '你的知识空间，井然有序。',
+    sortRecent: '最近',
+    sortName: '字母序',
+    sortCount: '文件数',
     createToActivate: '创建 {file} 以启用',
     shortcuts: {
       searchFiles: '搜索文件',
@@ -458,6 +477,8 @@ export const knowledgeZh = {
     organizing: '整理中...',
     viewAll: '查看全部',
     more: (n: number) => `还有 ${n} 个`,
+    viewAllFiles: (n: number) => `查看 Inbox 中全部 ${n} 个文件`,
+    viewAllHistory: (n: number) => `查看全部 ${n} 条记录 →`,
     agingHint: '7天+',
     savedToast: (n: number) => `${n} 个文件已保存到暂存台`,
     savedWithSkipped: (saved: number, skipped: number) =>
@@ -687,8 +708,17 @@ export const knowledgeZh = {
   importHistory: {
     title: '导入历史',
     clearAll: '清空历史',
+    clearConfirm: '清空所有历史记录？此操作不可撤销。',
     emptyTitle: '暂无导入记录',
     emptyDesc: 'AI 整理的结果会出现在这里',
+    back: '← 返回',
+    sourceLabel: '来源',
+    changesCount: (ok: number, total: number) => `${ok}/${total} 处变更`,
+    recordCount: (n: number) => `${n} 条记录`,
+    today: '今天',
+    yesterday: '昨天',
+    older: '更早',
+    processedArchive: '已处理的文件归档在 Inbox/.processed/ 中',
   },
   dirView: {
     gridView: '网格视图',

package/app/lib/i18n/modules/navigation.ts

@@ -2,7 +2,7 @@
 
 export const navigationEn = {
   sidebar: {
-    files: 'Spaces',
+    files: 'Wiki',
     search: 'Search',
     searchTitle: 'Search',
     askTitle: 'MindOS Agent',
@@ -26,6 +26,7 @@ export const navigationEn = {
     newFile: 'New file',
     newSpace: 'New Space',
     more: 'More',
+    capture: 'Capture',
     showHiddenFiles: 'Show hidden files',
     sync: {
       synced: 'Synced',
@@ -80,7 +81,7 @@ export const navigationEn = {
 
 export const navigationZh = {
   sidebar: {
-    files: '空间',
+    files: '知识库',
     search: '搜索',
     searchTitle: '搜索',
     askTitle: 'MindOS Agent',
@@ -104,6 +105,7 @@ export const navigationZh = {
     newFile: '新建文件',
     newSpace: '新建空间',
     more: '更多',
+    capture: '暂存台',
     showHiddenFiles: '显示隐藏文件',
     sync: {
       synced: '已同步',

package/app/lib/i18n/modules/panels.ts

@@ -88,8 +88,15 @@ export const panelsEn = {
       a2aDelegationFailed: 'Failed',
       a2aDelegationPending: 'Pending',
       // ACP / Network tab
-      acpSectionTitle: 'ACP Agents',
-      acpSectionDesc: (n: number) => `${n} agent${n !== 1 ? 's' : ''} available`,
+      acpSectionTitle: 'Installed Agents',
+      acpSectionDesc: (n: number) => `${n} agent${n !== 1 ? 's' : ''} detected`,
+      acpNoInstalled: 'No coding agents detected. Install one to delegate tasks directly from MindOS.',
+      acpAvailableTitle: 'Available in Registry',
+      acpAvailableDesc: (n: number) => `${n} more agent${n !== 1 ? 's' : ''} available`,
+      acpShowAvailable: 'Show',
+      acpHideAvailable: 'Hide',
+      acpCopyCmd: 'Copy',
+      acpCopied: 'Copied',
       acpTransportNpx: 'npx',
       acpTransportBinary: 'binary',
       acpTransportUvx: 'uvx',
@@ -380,6 +387,8 @@ export const panelsEn = {
       reconnectAllRunning: 'Reconnecting...',
       reconnectAllDone: (ok: number, failed: number) => `Done: ${ok} reconnected${failed > 0 ? `, ${failed} failed` : ''}.`,
       serverTransport: (t: string) => `Transport: ${t}`,
+      mcpDisabledMessage: 'MCP mode is not enabled.',
+      mcpDisabledHint: 'Enable it in Settings → Connections to use MCP agents.',
     },
     skills: {
       title: 'Skills',
@@ -715,8 +724,15 @@ export const panelsZh = {
       a2aDelegationFailed: '失败',
       a2aDelegationPending: '进行中',
       // ACP / Network tab
-      acpSectionTitle: 'ACP 智能体',
-      acpSectionDesc: (n: number) => `${n} 个智能体可用`,
+      acpSectionTitle: '已安装智能体',
+      acpSectionDesc: (n: number) => `已检测到 ${n} 个智能体`,
+      acpNoInstalled: '未检测到编程智能体。安装一个即可在 MindOS 中直接委派任务。',
+      acpAvailableTitle: '注册表中可用',
+      acpAvailableDesc: (n: number) => `还有 ${n} 个智能体可安装`,
+      acpShowAvailable: '展开',
+      acpHideAvailable: '收起',
+      acpCopyCmd: '复制',
+      acpCopied: '已复制',
       acpTransportNpx: 'npx',
       acpTransportBinary: '二进制',
       acpTransportUvx: 'uvx',
@@ -1007,6 +1023,8 @@ export const panelsZh = {
       reconnectAllRunning: '正在重连...',
       reconnectAllDone: (ok: number, failed: number) => `完成：${ok} 已重连${failed > 0 ? `，${failed} 失败` : ''}。`,
       serverTransport: (t: string) => `传输：${t}`,
+      mcpDisabledMessage: 'MCP 模式未启用。',
+      mcpDisabledHint: '请在设置 → 连接中启用，以使用 MCP 智能体。',
     },
     skills: {
       title: '技能',

package/app/lib/i18n/modules/settings.ts

@@ -193,6 +193,19 @@ export const settingsEn = {
       comingSoon: 'Plugin marketplace coming soon.',
     },
     mcp: {
+      // Connection Mode Card
+      modeCardTitle: 'Connection Mode',
+      modeCardDesc: 'Choose how agents connect to MindOS.',
+      cliLabel: 'CLI',
+      cliModeDesc: 'Claude Code, Gemini CLI, Codex, etc.',
+      mcpLabel: 'MCP',
+      mcpModeDesc: 'Claude Desktop, Cursor, Windsurf, etc.',
+      alwaysOn: 'Always On',
+      mcpRunning: 'Running',
+      mcpStopped: 'Stopped',
+      mcpEnabledHint: 'MCP mode enabled. Disable to simplify the interface if you only use CLI agents.',
+      mcpDisabledHint: 'Enable MCP to connect Desktop clients like Claude Desktop or Cursor.',
+      // Rest of existing MCP section...
       serverTitle: 'MindOS MCP Server',
       status: 'Status',
       running: 'Running',
@@ -637,6 +650,19 @@ export const settingsZh = {
       comingSoon: '插件市场即将上线。',
     },
     mcp: {
+      // 连接模式卡片
+      modeCardTitle: '连接模式',
+      modeCardDesc: '选择 Agent 如何连接到 MindOS。',
+      cliLabel: 'CLI',
+      cliModeDesc: 'Claude Code、Gemini CLI、Codex 等。',
+      mcpLabel: 'MCP',
+      mcpModeDesc: 'Claude Desktop、Cursor、Windsurf 等。',
+      alwaysOn: '始终开启',
+      mcpRunning: '运行中',
+      mcpStopped: '已停止',
+      mcpEnabledHint: 'MCP 模式已启用。若仅使用 CLI Agent，可禁用此项以简化界面。',
+      mcpDisabledHint: '启用 MCP 以连接 Claude Desktop 或 Cursor 等桌面客户端。',
+      // 其余 MCP 配置...
       serverTitle: 'MindOS MCP 服务',
       status: '状态',
       running: '运行中',

package/app/lib/organize-history.ts

@@ -12,6 +12,8 @@ export interface OrganizeHistoryFile {
   undone?: boolean;
 }
 
+export type OrganizeSource = 'upload' | 'drag-drop' | 'inbox-organize' | 'import-modal' | 'plugin' | 'web-clipper';
+
 export interface OrganizeHistoryEntry {
   id: string;
   /** Unix ms */
@@ -20,6 +22,10 @@ export interface OrganizeHistoryEntry {
   sourceFiles: string[];
   files: OrganizeHistoryFile[];
   status: 'completed' | 'partial' | 'undone';
+  /** How the files were ingested */
+  source?: OrganizeSource;
+  /** Processing time in milliseconds */
+  durationMs?: number;
 }
 
 const STORAGE_KEY = 'mindos:organize-history';

package/app/lib/renderers/index.ts

@@ -4,17 +4,21 @@
  */
 import { registerRenderer } from './registry';
 import { manifest as agentInspector } from '@/components/renderers/agent-inspector/manifest';
+import { manifest as audio } from '@/components/renderers/audio/manifest';
 import { manifest as backlinks } from '@/components/renderers/backlinks/manifest';
 import { manifest as config } from '@/components/renderers/config/manifest';
 import { manifest as csv } from '@/components/renderers/csv/manifest';
+import { manifest as image } from '@/components/renderers/image/manifest';
+import { manifest as pdf } from '@/components/renderers/pdf/manifest';
 import { manifest as summary } from '@/components/renderers/summary/manifest';
 import { manifest as timeline } from '@/components/renderers/timeline/manifest';
 import { manifest as todo } from '@/components/renderers/todo/manifest';
+import { manifest as video } from '@/components/renderers/video/manifest';
 import { manifest as workflowYaml } from '@/components/renderers/workflow-yaml/manifest';
 import { manifest as graph } from '@/components/renderers/graph/manifest';
 
 const manifests = [
-  agentInspector, backlinks, config, csv, summary, timeline, todo, workflowYaml, graph,
+  agentInspector, audio, backlinks, config, csv, image, pdf, summary, timeline, todo, video, workflowYaml, graph,
 ];
 
 for (const m of manifests) {

package/app/lib/settings.ts

@@ -51,6 +51,13 @@ export interface ServerSettings {
   guideState?: GuideState;
   /** Per-agent ACP overrides (command, args, env, enabled). Keyed by agent ID. */
   acpAgents?: Record<string, import('./acp/agent-descriptors').AcpAgentOverride>;
+  /** Proxy compatibility cache: keyed by baseUrl, value is detected mode. */
+  baseUrlCompat?: Record<string, 'streaming' | 'non-streaming'>;
+  /** User's connection mode preference: CLI always on, MCP is optional */
+  connectionMode?: {
+    cli: boolean;   // Always true (CLI is mandatory)
+    mcp: boolean;   // User's explicit choice during onboarding
+  };
 }
 
 const DEFAULTS: ServerSettings = {
@@ -162,6 +169,26 @@ function parseGuideState(raw: unknown): GuideState | undefined {
   };
 }
 
+/** Infer connectionMode from old config.
+ *  Old configs don't have connectionMode — both CLI and MCP were always available.
+ *  So we default to { cli: true, mcp: true } for existing users to avoid breaking change. */
+function inferConnectionMode(parsed: Record<string, unknown>): { cli: boolean; mcp: boolean } {
+  // If already has explicit connectionMode, return it
+  if (parsed.connectionMode && typeof parsed.connectionMode === 'object') {
+    const obj = parsed.connectionMode as Record<string, unknown>;
+    if (typeof obj.cli === 'boolean' && typeof obj.mcp === 'boolean') {
+      return { cli: obj.cli, mcp: obj.mcp };
+    }
+  }
+  // Old config without connectionMode: default to both enabled (backwards-compat)
+  // Only fresh installs (setupPending=true or missing config) get mcp: false
+  const isNewInstall = parsed.setupPending === true || !parsed.mindRoot;
+  return {
+    cli: true,
+    mcp: !isNewInstall, // Existing users keep MCP, new users start with CLI-only
+  };
+}
+
 export function readSettings(): ServerSettings {
   try {
     const raw = fs.readFileSync(SETTINGS_PATH, 'utf-8');
@@ -179,6 +206,16 @@ export function readSettings(): ServerSettings {
       setupPending: parsed.setupPending === true ? true : undefined,
       disabledSkills: Array.isArray(parsed.disabledSkills) ? parsed.disabledSkills as string[] : undefined,
       guideState: parseGuideState(parsed.guideState),
+      baseUrlCompat: (() => {
+        const raw = parsed.baseUrlCompat;
+        if (!raw || typeof raw !== 'object') return undefined;
+        const result: Record<string, 'streaming' | 'non-streaming'> = {};
+        for (const [k, v] of Object.entries(raw)) {
+          if (v === 'streaming' || v === 'non-streaming') result[k] = v;
+        }
+        return Object.keys(result).length > 0 ? result : undefined;
+      })(),
+      connectionMode: inferConnectionMode(parsed),
     };
   } catch {
     // Config file missing or corrupt → force setup wizard
@@ -186,6 +223,7 @@ export function readSettings(): ServerSettings {
       ...DEFAULTS,
       ai: { ...DEFAULTS.ai, providers: { ...DEFAULTS.ai.providers } },
       setupPending: true,
+      connectionMode: { cli: true, mcp: false },
     };
   }
 }
@@ -206,6 +244,8 @@ export function writeSettings(settings: ServerSettings): void {
   if (settings.disabledSkills !== undefined) merged.disabledSkills = settings.disabledSkills;
   if (settings.guideState !== undefined) merged.guideState = settings.guideState;
   if (settings.acpAgents !== undefined) merged.acpAgents = settings.acpAgents;
+  if (settings.baseUrlCompat !== undefined) merged.baseUrlCompat = settings.baseUrlCompat;
+  if (settings.connectionMode !== undefined) merged.connectionMode = settings.connectionMode;
   // setupPending: false/undefined → remove the field (cleanup); true → set it
   if ('setupPending' in settings) {
     if (settings.setupPending) merged.setupPending = true;
@@ -287,3 +327,23 @@ export function effectiveSopRoot(): string {
   const s = readSettings();
   return s.mindRoot || process.env.MIND_ROOT || path.join(os.homedir(), 'MindOS', 'mind');
 }
+
+/** Read the baseUrl → compat mode cache from config. Never throws. */
+export function readBaseUrlCompat(): Record<string, 'streaming' | 'non-streaming'> {
+  try {
+    const s = readSettings();
+    return s.baseUrlCompat ?? {};
+  } catch {
+    return {};
+  }
+}
+
+/** Persist a baseUrl compatibility detection result. Thread-safe via merge-write. */
+export function writeBaseUrlCompat(baseUrl: string, mode: 'streaming' | 'non-streaming'): void {
+  const s = readSettings();
+  const updated: Record<string, 'streaming' | 'non-streaming'> = {
+    ...(s.baseUrlCompat ?? {}),
+    [baseUrl]: mode,
+  };
+  writeSettings({ ...s, baseUrlCompat: updated });
+}

package/app/lib/stores/walkthrough-store.ts

@@ -21,7 +21,20 @@ export interface WalkthroughStoreState {
 
 /* ── Helpers ── */
 
+const LS_KEY = 'mindos_walkthrough_done';
+
+/**
+ * Persist walkthrough state to server AND localStorage.
+ * localStorage acts as a safety net: even if the server persist fails
+ * (e.g. during update restart, network blip), the completion state
+ * survives page reload and prevents the "stuck overlay" bug.
+ */
 function persistStep(step: number, dismissed: boolean) {
+  // Local safety net — instant, survives server outage
+  if (step >= walkthroughSteps.length || dismissed) {
+    try { localStorage.setItem(LS_KEY, '1'); } catch {}
+  }
+  // Server persist — fire-and-forget (localStorage is the safety net)
   fetch('/api/setup', {
     method: 'PATCH',
     headers: { 'Content-Type': 'application/json' },
@@ -31,6 +44,11 @@ function persistStep(step: number, dismissed: boolean) {
   }).catch((err) => { console.warn('[walkthrough-store] persist failed:', err); });
 }
 
+/** Check if walkthrough was completed/dismissed (fast, sync, local) */
+function isLocallyDone(): boolean {
+  try { return localStorage.getItem(LS_KEY) === '1'; } catch { return false; }
+}
+
 /* ── Store ── */
 
 export const useWalkthroughStore = create<WalkthroughStoreState>((set, get) => {
@@ -84,12 +102,26 @@ export const useWalkthroughStore = create<WalkthroughStoreState>((set, get) => {
       // Only auto-start on desktop
       if (window.innerWidth < 768) return () => {};
 
+      // Fast local check: if walkthrough was completed/dismissed, never reactivate.
+      // This prevents the "stuck overlay" bug where server persist failed during
+      // update restart but localStorage recorded the completion.
+      if (isLocallyDone()) return () => {};
+
       fetch('/api/setup')
         .then(r => r.json())
         .then(data => {
           const gs = data.guideState;
           if (!gs) return;
-          if (gs.walkthroughDismissed) return;
+          if (gs.walkthroughDismissed) {
+            try { localStorage.setItem(LS_KEY, '1'); } catch {} // sync local
+            return;
+          }
+
+          // If server says completed (step >= totalSteps), mark locally done
+          if (typeof gs.walkthroughStep === 'number' && gs.walkthroughStep >= totalSteps) {
+            try { localStorage.setItem(LS_KEY, '1'); } catch {};
+            return;
+          }
 
           if (gs.active && !gs.dismissed && gs.walkthroughStep === undefined) {
             if (isWelcome) {

package/bin/commands/doctor.js

@@ -5,12 +5,13 @@
 
 import { execSync } from 'node:child_process';
 import { existsSync, readFileSync } from 'node:fs';
-import { resolve } from 'node:path';
+import { resolve, delimiter } from 'node:path';
 import { homedir } from 'node:os';
 import { CONFIG_PATH, ROOT } from '../lib/constants.js';
 import { bold, dim, cyan, green, red, yellow } from '../lib/colors.js';
 import { isPortInUse } from '../lib/port.js';
 import { EXIT } from '../lib/command.js';
+import { stripBom } from '../lib/jsonc.js';
 
 export const meta = {
   name: 'doctor',
@@ -45,7 +46,7 @@ export const run = async (_args, flags) => {
   }
   let config;
   try {
-    config = JSON.parse(readFileSync(CONFIG_PATH, 'utf-8'));
+    config = JSON.parse(stripBom(readFileSync(CONFIG_PATH, 'utf-8')));
     ok(`Config file found and valid JSON  ${dim(CONFIG_PATH)}`, 'config');
   } catch {
     err(`Config file exists but failed to parse  ${dim(CONFIG_PATH)}`, 'config');
@@ -58,7 +59,7 @@ export const run = async (_args, flags) => {
     if (!mindRoot) {
       err('Config missing required field: mindRoot');
       hasError = true;
-    } else if (!existsSync(mindRoot.replace(/^~/, homedir()))) {
+    } else if (!existsSync(mindRoot === '~' ? homedir() : mindRoot.replace(/^~[/\\]/, homedir() + '/'))) {
       warn(`mindRoot path does not exist: ${dim(mindRoot)}  (will be created on first start)`);
     } else {
       ok(`Knowledge base path exists  ${dim(mindRoot)}`);
@@ -100,14 +101,19 @@ export const run = async (_args, flags) => {
     ok(`npm ${npmVersion} reachable`);
   } catch {
     err('npm not found in PATH — app dependencies cannot be installed');
-    console.log(dim('     Node.js may be installed via nvm/fnm/volta and not visible to /bin/sh.'));
-    console.log(dim('     Fix: add your Node.js bin path to ~/.profile so non-interactive shells can find it.'));
+    if (process.platform === 'win32') {
+      console.log(dim('     Ensure Node.js is installed and its bin directory is in your system PATH.'));
+      console.log(dim('     Fix: reinstall Node.js from https://nodejs.org (the installer adds it to PATH).'));
+    } else {
+      console.log(dim('     Node.js may be installed via nvm/fnm/volta and not visible to /bin/sh.'));
+      console.log(dim('     Fix: add your Node.js bin path to ~/.profile so non-interactive shells can find it.'));
+    }
     hasError = true;
   }
 
   // 4c. ~/.mindos/bin in PATH (CLI shim)
   const mindosBin = resolve(homedir(), '.mindos', 'bin');
-  const pathDirs = (process.env.PATH || '').split(':');
+  const pathDirs = (process.env.PATH || '').split(delimiter);
   if (pathDirs.some(d => d === mindosBin || d === '$HOME/.mindos/bin' || d === '~/.mindos/bin')) {
     ok(`~/.mindos/bin is in PATH`);
   } else {

package/bin/commands/file.js

@@ -7,7 +7,7 @@
  */
 
 import { existsSync, readFileSync, writeFileSync, appendFileSync, unlinkSync, renameSync, mkdirSync, readdirSync, statSync, openSync, readSync, closeSync } from 'node:fs';
-import { resolve, basename, dirname, relative } from 'node:path';
+import { resolve, basename, dirname, relative, sep } from 'node:path';
 import { execFileSync } from 'node:child_process';
 import { bold, dim, cyan, green, red, yellow } from '../lib/colors.js';
 import { loadConfig } from '../lib/config.js';
@@ -28,9 +28,12 @@ function getMindRoot() {
 
 function resolvePath(root, filePath) {
   const resolved = resolve(root, filePath);
-  if (resolved !== root && !resolved.startsWith(root + '/')) {
-    console.error(red(`Access denied: path outside knowledge base`));
-    process.exit(EXIT.ERROR);
+  if (resolved !== root) {
+    const rel = relative(root, resolved);
+    if (rel === '..' || rel.startsWith(`..${sep}`) || rel.startsWith('../')) {
+      console.error(red(`Access denied: path outside knowledge base`));
+      process.exit(EXIT.ERROR);
+    }
   }
   return resolved;
 }

package/bin/commands/logs.js

@@ -1,9 +1,8 @@
 /**
- * mindos logs — Tail service logs
+ * mindos logs — Tail service logs (cross-platform, no external tools)
  */
 
-import { execSync } from 'node:child_process';
-import { existsSync } from 'node:fs';
+import { existsSync, readFileSync, statSync, watch as fsWatch, openSync, readSync, closeSync } from 'node:fs';
 import { LOG_PATH } from '../lib/constants.js';
 import { dim } from '../lib/colors.js';
 
@@ -17,6 +16,38 @@ export const meta = {
   ],
 };
 
+function tailLines(filePath, count) {
+  const content = readFileSync(filePath, 'utf-8');
+  const lines = content.split('\n');
+  return lines.slice(-count).join('\n');
+}
+
+function followFile(filePath) {
+  let size = statSync(filePath).size;
+
+  const readNew = () => {
+    let newSize;
+    try { newSize = statSync(filePath).size; } catch { return; }
+    if (newSize <= size) { size = newSize; return; }
+    const fd = openSync(filePath, 'r');
+    try {
+      const buf = Buffer.alloc(newSize - size);
+      readSync(fd, buf, 0, buf.length, size);
+      process.stdout.write(buf.toString('utf-8'));
+    } finally {
+      closeSync(fd);
+    }
+    size = newSize;
+  };
+
+  const watcher = fsWatch(filePath, { persistent: true }, readNew);
+  // Also poll as a fallback — fs.watch is unreliable on some network/VM mounts
+  const interval = setInterval(readNew, 1000);
+
+  process.on('SIGINT', () => { watcher.close(); clearInterval(interval); process.exit(0); });
+  process.on('SIGTERM', () => { watcher.close(); clearInterval(interval); process.exit(0); });
+}
+
 export const run = async (args, flags) => {
   const { ensureMindosDir } = await import('../lib/gateway.js');
   await ensureMindosDir();
@@ -28,5 +59,9 @@ export const run = async (args, flags) => {
   }
 
   const noFollow = flags['no-follow'] === true;
-  execSync(noFollow ? `tail -n 100 ${LOG_PATH}` : `tail -f ${LOG_PATH}`, { stdio: 'inherit' });
+  console.log(tailLines(LOG_PATH, 100));
+
+  if (!noFollow) {
+    followFile(LOG_PATH);
+  }
 };

package/bin/commands/onboard.js

@@ -21,5 +21,5 @@ export const meta = {
 
 export const run = (args, flags) => {
   const daemonFlag = flags['install-daemon'] ? ' --install-daemon' : '';
-  execInherited(`node ${resolve(ROOT, 'scripts/setup.js')}${daemonFlag}`);
+  execInherited(`node "${resolve(ROOT, 'scripts/setup.js')}"${daemonFlag}`);
 };

package/bin/commands/open.js

@@ -33,7 +33,12 @@ export const run = () => {
   }
 
   try {
-    execSync(`${cmd} ${url}`, { stdio: 'ignore' });
+    if (process.platform === 'win32') {
+      // Windows `start` treats the first quoted arg as a window title
+      execSync(`start "" "${url}"`, { stdio: 'ignore' });
+    } else {
+      execSync(`${cmd} ${url}`, { stdio: 'ignore' });
+    }
     console.log(`${green('✔')} Opening ${cyan(url)}`);
   } catch {
     console.log(dim(`Could not open browser automatically. Visit: ${cyan(url)}`));