@krtclcdy/tersio 2.25.7 → 2.25.8

package/dist/cli/common.js

@@ -1,6 +1,6 @@
 // cli/common.ts — shared foundation: CLI flags, paths, exec, file/config helpers.
 import { execFile } from 'node:child_process';
-import { promises as fs } from 'node:fs';
+import { existsSync, promises as fs } from 'node:fs';
 import path from 'node:path';
 import { promisify } from 'node:util';
 import { createRequire } from 'node:module';
@@ -14,6 +14,10 @@ const OMP_AGENT_DIR = path.join(HOME, '.omp', 'agent');
 const OMP_PLUGINS_DIR = path.join(HOME, '.omp', 'plugins');
 const BUN_BIN_DIR = path.join(HOME, '.bun', 'bin');
 const OMP_BIN = IS_WINDOWS ? 'omp.cmd' : 'omp';
+// npm and bun are `.cmd` shims on Windows, and CreateProcess spawns neither a bare name nor a shim,
+// so the spawn name itself carries the extension the way `omp.cmd` does.
+const NPM_BIN = IS_WINDOWS ? 'npm.cmd' : 'npm';
+const BUN_BIN = IS_WINDOWS ? 'bun.cmd' : 'bun';
 const PACKAGE_NAME = '@krtclcdy/tersio';
 const PACKAGE_BIN = 'tersio';
 const { version: PACKAGE_VERSION } = createRequire(import.meta.url)(path.join(findPackageRoot(path.dirname(fileURLToPath(import.meta.url))), 'package.json'));
@@ -112,8 +116,26 @@ function debug(...a) {
         console.log('  [debug]', ...a);
 }
 const execFileP = promisify(execFile);
+/** Windows has no real `omp`, `npm`, or `pgrep`: `.cmd` shims throw EINVAL when spawned, so a bare name wraps through cmd.exe only when a `<name>.cmd` really sits on PATH. */
+export function shimCommand(cmd, args) {
+    if (!IS_WINDOWS)
+        return { cmd, args };
+    if (/\.(?:cmd|bat)$/i.test(cmd)) {
+        return { cmd: process.env.ComSpec || 'cmd.exe', args: ['/d', '/s', '/c', cmd, ...args] };
+    }
+    if (hasCmdShim(cmd)) {
+        return { cmd: process.env.ComSpec || 'cmd.exe', args: ['/d', '/s', '/c', cmd, ...args] };
+    }
+    return { cmd, args };
+}
+function hasCmdShim(cmd) {
+    if (cmd.includes('/') || cmd.includes('\\'))
+        return false;
+    return (process.env.PATH || '').split(path.delimiter).some((dir) => dir && existsSync(path.join(dir, `${cmd}.cmd`)));
+}
 async function execP(cmd, args, opts = {}) {
-    return execFileP(cmd, args, {
+    const shim = shimCommand(cmd, args);
+    return execFileP(shim.cmd, shim.args, {
         timeout: opts.timeout || 120000,
         encoding: 'utf8',
         ...opts,
@@ -316,4 +338,4 @@ function relTime(ageMs) {
     const weeks = Math.floor(days / 7);
     return `${weeks} week${weeks === 1 ? '' : 's'} ago`;
 }
-export { IS_WINDOWS, RTK_BINARY_NAME, HOME, OMP_AGENT_DIR, OMP_PLUGINS_DIR, BUN_BIN_DIR, OMP_BIN, PACKAGE_NAME, PACKAGE_BIN, PACKAGE_VERSION, CAVEMAN_DEFAULTS, PONYTAIL_DEFAULTS, PSTACK_DEFAULTS, RTK_DEFAULTS, DIAG_SCHEDULES, COMBO_PRESET_MODES, COMBO_DEFAULTS, parseEnum, flagValue, COMMANDS, commandArg, command, settingArg, unknownCommand, install, reinstall, update, showVersion, showHelp, applyUpdate, args, dryRun, yes, verbose, doctor, fix, uninstall, usage, dashboard, reset, settings, allowUnverified, dashboardPort, dashboardOpen, dashboardExport, currency, currencyGiven, removePonytail, keepPonytail, removeRtk, comboDefaultFlag, cavemanDefaultFlag, ponytailDefaultFlag, pstackDefaultFlag, rtkDefaultFlag, diagScheduleFlag, profileFlagsGiven, subagentMarkerFlags, subagentMarkersGiven, debug, execFileP, execP, writeIfChanged, normalizeExtensionsKey, writeConfigLines, ensureExtensionInConfig, removeExtensionFromConfig, readPonytailConfig, parseJsonObject, parsePonytailConfig, patchPonytailConfig, ensurePonytailConfigValue, readPluginsPackage, relTime, bundledPonytailSpec, ponytailOverride, };
+export { IS_WINDOWS, RTK_BINARY_NAME, HOME, OMP_AGENT_DIR, OMP_PLUGINS_DIR, BUN_BIN_DIR, OMP_BIN, NPM_BIN, BUN_BIN, PACKAGE_NAME, PACKAGE_BIN, PACKAGE_VERSION, CAVEMAN_DEFAULTS, PONYTAIL_DEFAULTS, PSTACK_DEFAULTS, RTK_DEFAULTS, DIAG_SCHEDULES, COMBO_PRESET_MODES, COMBO_DEFAULTS, parseEnum, flagValue, COMMANDS, commandArg, command, settingArg, unknownCommand, install, reinstall, update, showVersion, showHelp, applyUpdate, args, dryRun, yes, verbose, doctor, fix, uninstall, usage, dashboard, reset, settings, allowUnverified, dashboardPort, dashboardOpen, dashboardExport, currency, currencyGiven, removePonytail, keepPonytail, removeRtk, comboDefaultFlag, cavemanDefaultFlag, ponytailDefaultFlag, pstackDefaultFlag, rtkDefaultFlag, diagScheduleFlag, profileFlagsGiven, subagentMarkerFlags, subagentMarkersGiven, debug, execFileP, execP, writeIfChanged, normalizeExtensionsKey, writeConfigLines, ensureExtensionInConfig, removeExtensionFromConfig, readPonytailConfig, parseJsonObject, parsePonytailConfig, patchPonytailConfig, ensurePonytailConfigValue, readPluginsPackage, relTime, bundledPonytailSpec, ponytailOverride, };

package/dist/cli/dashboard.js

@@ -457,8 +457,13 @@ function readBody(req) {
     });
 }
 function openBrowser(url) {
-    const cmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
-    spawn(cmd, [url], { detached: true, stdio: 'ignore' }).unref();
+    // `start` is a cmd builtin, not an executable: spawning it by name fails with ENOENT.
+    const [cmd, args] = process.platform === 'darwin'
+        ? ['open', [url]]
+        : process.platform === 'win32'
+            ? [process.env.ComSpec || 'cmd.exe', ['/d', '/s', '/c', 'start', '', url]]
+            : ['xdg-open', [url]];
+    spawn(cmd, args, { detached: true, stdio: 'ignore' }).unref();
 }
 // Replacers throughout: session data holds `$'` (shell quoting) and `</script>`, which String.replace would mangle.
 function escapeInline(json) {

package/dist/cli/doctor-fix.js

@@ -2,7 +2,7 @@ import { existsSync, promises as fs } from 'node:fs';
 import { spawnSync } from 'node:child_process';
 import os from 'node:os';
 import path from 'node:path';
-import { BUN_BIN_DIR, HOME, OMP_AGENT_DIR, OMP_PLUGINS_DIR, PACKAGE_NAME, PACKAGE_VERSION, RTK_BINARY_NAME, removeExtensionFromConfig, dryRun, verbose, debug, bundledPonytailSpec, execP, ponytailOverride, readPluginsPackage, } from './common.js';
+import { BUN_BIN_DIR, HOME, NPM_BIN, OMP_AGENT_DIR, OMP_PLUGINS_DIR, PACKAGE_NAME, PACKAGE_VERSION, RTK_BINARY_NAME, removeExtensionFromConfig, dryRun, verbose, debug, bundledPonytailSpec, execP, ponytailOverride, readPluginsPackage, shimCommand, } from './common.js';
 import { execNetwork, sayTagged } from './interactive.js';
 import { wireRtkOmp, wireRtkOpencode, wireRtkPi, ensureRtkInConfig } from './rtk-wiring.js';
 import { RTK_RELEASE_API, fetchJson, findFile, httpsGet, httpsDownload, parseChecksum, readTextIfExists, resolveHostBinary, rtkPlatformSpec, sha256File, } from '../extensions/shared/utils.js';
@@ -14,18 +14,20 @@ export function serviceOrphanPids() {
     const bin = resolveHostBinary('opencode', path.join(HOME, '.opencode', 'bin'));
     if (!bin)
         return [];
+    const shim = shimCommand(bin, ['service', 'status']);
     let status = '';
     try {
-        status = spawnSync(bin, ['service', 'status'], { encoding: 'utf8' }).stdout.trim().toLowerCase();
+        status = spawnSync(shim.cmd, shim.args, { encoding: 'utf8' }).stdout.trim().toLowerCase();
     }
     catch {
         return [];
     }
     if (serviceRunning(status))
         return [];
+    const grepShim = shimCommand('pgrep', ['-f', 'opencode serve --service']);
     let out = '';
     try {
-        out = spawnSync('pgrep', ['-f', 'opencode serve --service'], { encoding: 'utf8' }).stdout ?? '';
+        out = spawnSync(grepShim.cmd, grepShim.args, { encoding: 'utf8' }).stdout ?? '';
     }
     catch {
         return [];
@@ -38,9 +40,10 @@ export function serviceState() {
     const bin = resolveHostBinary('opencode', path.join(HOME, '.opencode', 'bin'));
     if (!bin)
         return null;
+    const shim = shimCommand(bin, ['service', 'status']);
     let status = '';
     try {
-        status = spawnSync(bin, ['service', 'status'], { encoding: 'utf8' }).stdout.trim().toLowerCase();
+        status = spawnSync(shim.cmd, shim.args, { encoding: 'utf8' }).stdout.trim().toLowerCase();
     }
     catch {
         return null;
@@ -49,7 +52,8 @@ export function serviceState() {
         return null;
     let live = false;
     try {
-        const out = spawnSync('pgrep', ['-f', 'opencode serve --service'], { encoding: 'utf8' }).stdout ?? '';
+        const grepShim = shimCommand('pgrep', ['-f', 'opencode serve --service']);
+        const out = spawnSync(grepShim.cmd, grepShim.args, { encoding: 'utf8' }).stdout ?? '';
         live = out.split(/[\s,]+/).some((line) => /^\d+$/.test(line.trim()));
     }
     catch {
@@ -365,7 +369,7 @@ async function fixPonytail(pluginsDir) {
         return;
     }
     await fs.writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
-    await execNetwork('Restoring bundled Ponytail', 'npm', ['install', '--no-audit', '--no-fund'], { cwd: pluginsDir, timeout: 180000 }).catch((e) => {
+    await execNetwork('Restoring bundled Ponytail', NPM_BIN, ['install', '--no-audit', '--no-fund'], { cwd: pluginsDir, timeout: 180000 }).catch((e) => {
         throw new Error(`bundled ponytail restore failed: ${e.message}`);
     });
 }
@@ -405,7 +409,8 @@ async function fixOpencodeService() {
         sayTagged('  [warn] opencode not found on PATH; start it with `opencode service start`');
         return;
     }
-    await execNetwork('Starting the OpenCode service', bin, ['service', 'start'], { timeout: 60000 }).catch((e) => {
+    const shim = shimCommand(bin, ['service', 'start']);
+    await execNetwork('Starting the OpenCode service', shim.cmd, shim.args, { timeout: 60000 }).catch((e) => {
         throw new Error(`service start failed: ${shortError(e)}`);
     });
 }

package/dist/cli/doctor.js

@@ -2,13 +2,13 @@
 import { execFileSync } from 'node:child_process';
 import { existsSync, readdirSync, readFileSync, statSync, promises as fs } from 'node:fs';
 import path from 'node:path';
-import { HOME, OMP_AGENT_DIR, OMP_PLUGINS_DIR, PACKAGE_NAME, PACKAGE_VERSION, args, dryRun, fix, yes, BUN_BIN_DIR, OMP_BIN, execP, parseJsonObject, relTime, } from './common.js';
+import { HOME, OMP_AGENT_DIR, OMP_PLUGINS_DIR, PACKAGE_NAME, PACKAGE_VERSION, args, dryRun, fix, yes, BUN_BIN_DIR, OMP_BIN, execP, parseJsonObject, relTime, shimCommand, } from './common.js';
 import { detectHosts, hostExtensionsDir, ompPackageDir, piPonytailPackageDir } from './hosts.js';
 import { GENERATED_TREE_FILES } from './manifest.js';
 import { askInteractiveChoice, askInteractiveConfirm, runInteractivePhase } from './interactive.js';
 import { usageDbPath } from '../extensions/shared/usage-store.js';
 import { pricesCachePath } from '../extensions/shared/pricing.js';
-import { findHoistedPackage, fetchJson, piAgentDir, readTextIfExists, resolveHostBinary, resolveRtkBinary, ruleBodyProblem } from '../extensions/shared/utils.js';
+import { findHoistedPackage, fetchJson, piAgentDir, readTextIfExists, resolveHostBinary, resolveRtkBinary, rtkPlatformSpec, ruleBodyProblem, tersioHome } from '../extensions/shared/utils.js';
 import { sqliteScript, statsDbPath } from '../extensions/shared/agent-stats.js';
 import { OMP_SUBAGENT_MARKER } from '../extensions/shared/session-state.js';
 import { PI_PONYTAIL_FILES, PONYTAIL_BUNDLE_FILES, TREE_FILES, TREE_PSTACK_FILES, isObsoleteTreeFile, treeFileText, treeFilesFor } from './manifest.js';
@@ -201,6 +201,18 @@ async function runDoctor(recheck = false) {
     function unused(label, detail) {
         console.log(`  —  ${label}: not installed ${detail}`);
     }
+    // A Windows failure names its cause here: several rows below silently degrade when the
+    // platform has no rtk build, and a wrong home would move every one of them.
+    section('Platform');
+    const rtkSpec = rtkPlatformSpec();
+    check('Platform', rtkSpec !== null, `${process.platform}/${process.arch}${rtkSpec ? ` · node ${process.version} · rtk ${rtkSpec.triple}` : ''}`);
+    if (rtkSpec === null) {
+        // Windows on ARM today: rtk publishes no build, so the RTK rows read as not installed.
+        console.log(`      rtk publishes no build for ${process.platform}/${process.arch}; every RTK row below reads as missing`);
+    }
+    // Windows resolves data through the profile, so name the resolved home and data dir.
+    check('Home', HOME !== '', HOME);
+    check('Data', true, path.join(tersioHome(), 'usage.db'));
     section('Hosts');
     for (const host of hosts) {
         // pi can hold a working tree while reading as not installed; use the tree as ground truth.
@@ -420,7 +432,8 @@ function subagentMarkerStatus(ompBin) {
         return null;
     let haystack;
     try {
-        haystack = execFileSync(ompBin, ['--version'], { encoding: 'utf8', timeout: 5000, stdio: ['ignore', 'pipe', 'pipe'] })
+        const shim = shimCommand(ompBin, ['--version']);
+        haystack = execFileSync(shim.cmd, shim.args, { encoding: 'utf8', timeout: 5000, stdio: ['ignore', 'pipe', 'pipe'] })
             + readFileSync(ompBin, 'utf8');
     }
     catch {

package/dist/cli/install.js

@@ -3,7 +3,7 @@ import { existsSync, promises as fs } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { BUN_BIN_DIR, COMBO_PRESET_MODES, HOME, IS_WINDOWS, OMP_AGENT_DIR, OMP_PLUGINS_DIR, OMP_BIN, PACKAGE_NAME, PACKAGE_VERSION, RTK_BINARY_NAME, args, allowUnverified, applyUpdate, bundledPonytailSpec, cavemanDefaultFlag, comboDefaultFlag, command, dryRun, ponytailDefaultFlag, pstackDefaultFlag, profileFlagsGiven, rtkDefaultFlag, verbose, yes, dashboardExport, dashboardPort, currency, debug, ensurePonytailConfigValue, execP, parseJsonObject, readPluginsPackage, writeIfChanged, } from './common.js';
+import { BUN_BIN_DIR, BUN_BIN, COMBO_PRESET_MODES, HOME, IS_WINDOWS, NPM_BIN, OMP_AGENT_DIR, OMP_PLUGINS_DIR, OMP_BIN, PACKAGE_NAME, PACKAGE_VERSION, RTK_BINARY_NAME, args, allowUnverified, applyUpdate, bundledPonytailSpec, cavemanDefaultFlag, comboDefaultFlag, command, dryRun, ponytailDefaultFlag, pstackDefaultFlag, profileFlagsGiven, rtkDefaultFlag, verbose, yes, dashboardExport, dashboardPort, currency, debug, ensurePonytailConfigValue, execP, parseJsonObject, readPluginsPackage, writeIfChanged, } from './common.js';
 import { askInteractiveChoice, askInteractiveConfirm, closeRL, execNetwork, tty, withInteractiveSpinner, withInteractiveTask, sayTagged } from './interactive.js';
 import { printWelcome } from './banner.js';
 import { checkForUpdate, runLatestUpdate } from './update.js';
@@ -80,11 +80,11 @@ async function stepPonytail(pluginsDir, options) {
     else {
         // Reinstall only when the self-plugin step did not materialize it.
         try {
-            await execNetwork('Installing bundled Ponytail', 'npm', ['install', '--no-audit', '--no-fund'], { cwd: pluginsDir, timeout: 180000 });
+            await execNetwork('Installing bundled Ponytail', NPM_BIN, ['install', '--no-audit', '--no-fund'], { cwd: pluginsDir, timeout: 180000 });
         }
         catch {
             try {
-                await execNetwork('Installing bundled Ponytail', 'bun', ['install'], { cwd: pluginsDir, timeout: 180000 });
+                await execNetwork('Installing bundled Ponytail', BUN_BIN, ['install'], { cwd: pluginsDir, timeout: 180000 });
             }
             catch (e) {
                 sayTagged(`  [fail] Could not install bundled ponytail: ${e.message}`);
@@ -136,11 +136,11 @@ async function stepSelfPlugin(pluginsDir, options) {
     await fs.mkdir(pluginsDir, { recursive: true });
     await fs.writeFile(pkgPath, JSON.stringify(pkg, null, 2) + '\n', 'utf8');
     try {
-        await execNetwork('Installing Tersio plugin dependencies', 'npm', ['install', '--no-audit', '--no-fund'], { cwd: pluginsDir, timeout: 180000 });
+        await execNetwork('Installing Tersio plugin dependencies', NPM_BIN, ['install', '--no-audit', '--no-fund'], { cwd: pluginsDir, timeout: 180000 });
     }
     catch {
         try {
-            await execNetwork('Installing Tersio plugin dependencies', 'bun', ['install'], { cwd: pluginsDir, timeout: 180000 });
+            await execNetwork('Installing Tersio plugin dependencies', BUN_BIN, ['install'], { cwd: pluginsDir, timeout: 180000 });
         }
         catch (e) {
             sayTagged(`  [fail] Could not install ${PACKAGE_NAME} into plugins dir: ${e.message}`);

package/dist/cli/profile.js

@@ -62,11 +62,12 @@ async function storedProfile() {
     return storedProfileSync();
 }
 function legacyOmpLockPath() {
-    const configHome = process.env.XDG_CONFIG_HOME || path.join(os.homedir(), '.config');
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const configHome = process.env.XDG_CONFIG_HOME || path.join(home, '.config');
     return [
-        path.join(os.homedir(), '.omp', 'plugins', 'omp-plugins.lock.json'),
+        path.join(home, '.omp', 'plugins', 'omp-plugins.lock.json'),
         path.join(configHome, 'omp', 'plugins', 'omp-plugins.lock.json'),
-    ].find((p) => existsSync(p)) ?? path.join(os.homedir(), '.omp', 'plugins', 'omp-plugins.lock.json');
+    ].find((p) => existsSync(p)) ?? path.join(home, '.omp', 'plugins', 'omp-plugins.lock.json');
 }
 function parseStored(raw) {
     if (!raw)
@@ -83,6 +84,29 @@ function parseStored(raw) {
         return null;
     }
 }
+// Upstream Ponytail's pi extension reads its own config for the session default, so the saved default
+// is mirrored there. Without it a headless pi session starts at upstream's default and never injects.
+function ponytailConfigFile() {
+    const base = (process.env.XDG_CONFIG_HOME || '').trim() || path.join(os.homedir(), '.config');
+    return path.join(base, 'ponytail', 'config.json');
+}
+async function mirrorPonytailDefault(mode, options) {
+    const file = ponytailConfigFile();
+    if (options.dryRun) {
+        if (verbose && !options.quiet)
+            console.log(`  [dry-run] would write the Ponytail default to ${file}`);
+        return;
+    }
+    try {
+        const existing = JSON.parse(readTextIfExistsSync(file) ?? '{}');
+        if (existing.defaultMode === mode)
+            return;
+        await fs.mkdir(path.dirname(file), { recursive: true });
+        await fs.writeFile(file, `${JSON.stringify({ ...existing, defaultMode: mode }, null, 2)}\n`, 'utf8');
+        console.log(`  [write] Ponytail default in ${file}`);
+    }
+    catch { /* upstream's config is best-effort; its own default stands */ }
+}
 // Persist profile where every host reads it. `omp plugin config get` no longer reports it; `tersio settings` does.
 async function writePluginSettings(profile, options) {
     const file = tersioSettingsFile();
@@ -106,6 +130,7 @@ async function writePluginSettings(profile, options) {
     await fs.mkdir(path.dirname(file), { recursive: true });
     await fs.writeFile(file, `${JSON.stringify(values, null, 2)}\n`, 'utf8');
     console.log(`  [write] Session defaults in ${file}`);
+    await mirrorPonytailDefault(profile.ponytailDefault, options);
 }
 function formatProfile(profile) {
     return `combo=${profile.comboDefault} (caveman=${profile.cavemanDefault} · rtk=${profile.rtkDefault ? 'on' : 'off'} · ponytail=${profile.ponytailDefault} · pstack=${profile.pstackDefault}) · currency=${profile.currency}`;

package/dist/cli/rtk-wiring.js

@@ -3,6 +3,7 @@ import { existsSync, promises as fs } from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { execFile } from 'node:child_process';
+import { shimCommand } from '../extensions/shared/utils.js';
 function debugWire(options, msg) {
     if (!options.quiet)
         console.log(`  ${msg}`);
@@ -14,17 +15,19 @@ function shortWiringError(e) {
     return why.slice(0, 200);
 }
 function execFileP(cmd, args, timeout) {
-    return new Promise((resolve, reject) => {
-        execFile(cmd, args, { timeout, encoding: 'utf8' }, (err, stdout, stderr) => {
-            if (err) {
-                err.stderr = String(stderr || '');
-                reject(err);
-            }
-            else {
-                resolve({ stdout: String(stdout), stderr: String(stderr) });
-            }
-        });
+    const { promise, resolve, reject } = Promise.withResolvers();
+    // A `.cmd` shim cannot be spawned directly on Windows, so it runs through the shell.
+    const shim = shimCommand(cmd, args);
+    execFile(shim.cmd, shim.args, { timeout, encoding: 'utf8' }, (err, stdout, stderr) => {
+        if (err) {
+            err.stderr = String(stderr || '');
+            reject(err);
+        }
+        else {
+            resolve({ stdout: String(stdout), stderr: String(stderr) });
+        }
     });
+    return promise;
 }
 async function runWire(rtkBin, spec, options) {
     if (!options.dryRun)

package/dist/cli/usage.js

@@ -215,6 +215,11 @@ function printReport(report) {
         ['Tokens', `${fmt(t.input)} in · ${fmt(t.output)} out · ${fmt(t.cacheRead)} cache read · ${fmt(t.cacheWrite)} cache write`],
         ['Cost', `${formatCurrency(report.usd, report.currency)}${report.priced ? '' : ' (includes default pricing)'} · ~${formatCurrency(report.savedUsd, report.currency)} cache-saved (est.) · ~${report.co2g.toFixed(1)}g CO2 (est.)${costNote}`],
         ['RTK adoption', `${fmt(a.rtkCalls)}/${fmt(a.eligibleCalls)} eligible Bash calls use RTK (${a.adoptionPct.toFixed(1)}%) · ${fmt(a.missedCalls)} missed · recall ${report.rtkRecall.available ? `${report.rtkRecall.mode} (${report.rtkRecall.entries})` : 'unavailable'}`],
+        // A blended number hides a quiet host, so each host reporting bash calls gets its own row.
+        ...Object.entries(a.byHost)
+            .filter(([, c]) => c.bashCalls > 0)
+            .sort((x, y) => y[1].eligibleCalls - x[1].eligibleCalls)
+            .map(([name, c]) => [`RTK — ${name}`, `${fmt(c.rtkCalls)}/${fmt(c.eligibleCalls)} eligible calls (${c.adoptionPct.toFixed(1)}%) · ${fmt(c.missedCalls)} missed · ${fmt(c.bashCalls)} bash calls`]),
     ], [false, false], 118))
         console.log(l);
     if (measuredCount > 0) {

package/dist/extensions/caveman/index.js

@@ -5,12 +5,9 @@ import { dirname, join } from 'node:path';
 import { injectPromptText, onHostEvent, setExtensionLabel } from '../shared/host.js';
 import { announceStatus, formatCavemanStatus } from '../shared/status.js';
 import { readCavemanDefault } from '../shared/plugin-settings.js';
-const CAVERN_DIR = dirname(fileURLToPath(import.meta.url));
-// `rule.md`, `rule-ultra.md`, and `rule-megacave.md` track upstream's three registers: `rule.md` is bundled with
-// one host-adapted line, and the other two are fetched from upstream on install and updated in-session.
-// `lite`, `megacave-lite`, and `megacave-ultra` are our forks of upstream's rows at 84cc3c1, so they are
-// bundled rather than fetched. rule-ultra.md and rule-megacave.md are never edited here: the in-session
-// updater rewrites them from upstream and restores the backup when the write does not match.
+import { ruleDir } from '../shared/utils.js';
+const CAVERN_DIR = ruleDir('caveman', dirname(fileURLToPath(import.meta.url)));
+// `rule.md`, `rule-ultra.md`, and `rule-megacave.md` track upstream and are refetched; `lite`, `megacave-lite`, and `megacave-ultra` are our forks and ship bundled.
 const RULE_FILES = { lite: 'rule-lite.md', full: 'rule.md', ultra: 'rule-ultra.md', 'megacave-lite': 'rule-megacave-lite.md', 'megacave-full': 'rule-megacave.md', 'megacave-ultra': 'rule-megacave-ultra.md' };
 const DEFAULT_MODE = 'off';
 // A rule file is immutable for the process, so read each level once; reinstalling needs a restart.

package/dist/extensions/combo/index.js

@@ -191,12 +191,7 @@ export default function comboToggleExtension(pi) {
         if (!hasModeState(entries) && (ctx?.hasUI || OPENCODE))
             restoreConfiguredDefaults();
         else if (!hasModeState(entries)) {
-            // A headless root session (`host -p`) has no UI to publish the bridge, and Ponytail reads only
-            // the bridge, so it never loaded: a benchmark on omp measured Block 0 for every Ponytail level and
-            // for the Ponytail part of every Combo. Publish the saved modes only while the bridge is clear:
-            // once a parent or a toggle has published, the bridge carries that session's own choice and a
-            // subagent branch must keep inheriting it. All four go together, because Caveman, RTK, and pstack
-            // already restored their own levels and a disagreeing bridge resets them.
+            // A headless root session has no UI to publish the bridge, so Ponytail never loaded; publish the saved modes only while the bridge is clear, or a subagent branch stops inheriting.
             const shared = getSharedComboState();
             if (shared.caveman === 'off' && shared.rtk === 'off' && shared.ponytail === 'off' && shared.pstack === 'off') {
                 setSharedComboModes(savedModes());

package/dist/extensions/commands/index.js

@@ -32,8 +32,13 @@ async function openDashboard(pi, ctx) {
         const exported = await pi.exec?.('tersio', ['dashboard', '--export', file], { cwd: ctx?.cwd });
         if (!exported || exported.code !== 0)
             throw new Error((exported?.stderr || 'export failed').trim());
-        const openCmd = process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'start' : 'xdg-open';
-        await pi.exec?.(openCmd, [file], { cwd: ctx?.cwd });
+        // `start` is a cmd builtin, not an executable: spawning it by name fails with ENOENT.
+        const [openCmd, openArgs] = process.platform === 'darwin'
+            ? ['open', [file]]
+            : process.platform === 'win32'
+                ? [process.env.ComSpec || 'cmd.exe', ['/d', '/s', '/c', 'start', '', file]]
+                : ['xdg-open', [file]];
+        await pi.exec?.(openCmd, openArgs, { cwd: ctx?.cwd });
         ctx?.ui?.notify?.(`tersio dashboard: opened in your browser.`, 'info');
     }
     catch (e) {

package/dist/extensions/pstack/index.js

@@ -6,7 +6,8 @@ import { getSharedComboState, hasModeState, isOmpSubagentPrompt, lastCustomValue
 import { injectPromptText, onHostEvent, setExtensionLabel } from '../shared/host.js';
 import { announceStatus } from '../shared/status.js';
 import { readPstackDefault } from '../shared/plugin-settings.js';
-const PSTACK_DIR = dirname(fileURLToPath(import.meta.url));
+import { ruleDir } from '../shared/utils.js';
+const PSTACK_DIR = ruleDir('pstack', dirname(fileURLToPath(import.meta.url)));
 const RULE_FILE = 'rule.md';
 const DEFAULT_MODE = 'off';
 // The body is immutable for the process, so read it once; reinstalling needs a restart.

package/dist/extensions/rtk/filter.js

@@ -5,6 +5,8 @@ import { join } from 'node:path';
 import { resolveRtkBinary } from '../shared/utils.js';
 import { readRtkDefault } from '../shared/plugin-settings.js';
 import { getSharedComboState, lastCustomValue, sessionEntries } from '../shared/session-state.js';
+import { appendUsage } from '../shared/usage-ledger.js';
+import { isPiHost } from '../shared/host.js';
 /** Tool name to `rtk pipe --filter` name. Exported so the OpenCode host reuses one map. */
 export const FILTER_BY_TOOL = new Map([
     ['grep', 'grep'],
@@ -14,8 +16,13 @@ export const FILTER_BY_TOOL = new Map([
 /** Below this the rtk spawn costs more than the filter saves. */
 export const MIN_FILTER_BYTES = 1200;
 const FILTER_TIMEOUT_MS = 5000;
-/** Absolute, so a minimal PATH in the host cannot break the spawn. */
-const SHELL = '/bin/sh';
+// A shell that understands `<`, resolved per platform; separate flags, because Node quotes each argv element and cmd.exe rejects `"/d /s /c"`.
+/** The pipe's shell, and whether the whole command needs an extra quote pair: `cmd.exe /s` strips the outer one, so a quoted binary and redirect path must be wrapped. */
+export function filterShell() {
+    return process.platform === 'win32'
+        ? { shell: process.env.ComSpec || 'cmd.exe', flags: ['/d', '/s', '/c'], wrap: true }
+        : { shell: '/bin/sh', flags: ['-c'], wrap: false };
+}
 function modeOf(value) {
     if (value === true)
         return true;
@@ -46,8 +53,10 @@ export async function filterThroughRtk(exec, request) {
         dir = mkdtempSync(join(tmpdir(), 'tersio-rtk-'));
         const file = join(dir, 'in.txt');
         writeFileSync(file, text, 'utf8');
-        // `rtk pipe` reads stdin only and execFile has no stdin, so one redirect.
-        const result = await exec(SHELL, ['-c', `"${bin}" pipe -f ${filter} < "${file}"`], { signal, timeout: FILTER_TIMEOUT_MS });
+        // `rtk pipe` reads stdin only and execFile has no stdin, so one redirect through the platform shell.
+        const { shell, flags, wrap } = filterShell();
+        const line = `"${bin}" pipe -f ${filter} < "${file}"`;
+        const result = await exec(shell, [...flags, wrap ? `"${line}"` : line], { signal, timeout: FILTER_TIMEOUT_MS });
         if (result.code !== 0)
             return null;
         const out = result.stdout;
@@ -63,11 +72,43 @@ export async function filterThroughRtk(exec, request) {
             rmSync(dir, { recursive: true, force: true });
     }
 }
+/** Ask rtk for the rewritten command; null on any failure, so the original runs. */
+async function rewriteCommand(exec, bin, command, signal) {
+    try {
+        const result = await exec(bin, ['rewrite', command], { timeout: FILTER_TIMEOUT_MS, signal });
+        const out = result.stdout.trim();
+        return out || null;
+    }
+    catch {
+        return null;
+    }
+}
 export default function rtkFilterExtension(pi) {
     const bin = resolveRtkBinary();
     const exec = pi.exec;
     if (!bin || !exec)
         return;
+    // omp records the post-hook command in its transcript, so only pi leaves an audit row here:
+    // opencode rewrites in its own plugin hook, and an omp row would double-count the transcript.
+    const auditHost = isPiHost(pi) ? 'pi' : null;
+    // Registered synchronously, unlike the rtk-init hook, whose async version probe can miss the first call of a fast session.
+    pi.on('tool_call', async (event, ctx) => {
+        const call = (event ?? {});
+        const input = call.input;
+        if (call.toolName !== 'bash' || !input)
+            return;
+        const command = input.command;
+        if (typeof command !== 'string' || !command.trim() || command.startsWith('rtk '))
+            return;
+        if (!rtkActive(sessionEntries(ctx)))
+            return;
+        const rewritten = await rewriteCommand(exec, bin, command, ctx?.signal);
+        if (!rewritten || rewritten === command)
+            return;
+        input.command = rewritten;
+        if (auditHost)
+            appendUsage('rtk-audit', `${auditHost} ${command}`);
+    });
     pi.on('tool_result', async (event, ctx) => {
         const filter = FILTER_BY_TOOL.get(String(event?.toolName ?? '').toLowerCase());
         if (!filter || event?.isError)

package/dist/extensions/rtk/session.js

@@ -1,7 +1,7 @@
 import { getSharedComboState, hasModeState, isOmpSubagentPrompt, lastCustomValue, reconcileSharedComboEntries, sessionEntries, setSharedComboListener, setSharedComboMode, systemPromptIncludes } from '../shared/session-state.js';
 import { injectPromptText, onHostEvent, setExtensionLabel, stringArrayToolParams } from '../shared/host.js';
 import { readRtkDefault } from '../shared/plugin-settings.js';
-import { resolveRtkBinary } from '../shared/utils.js';
+import { resolveRtkBinary, shimCommand } from '../shared/utils.js';
 import { announceStatus } from '../shared/status.js';
 const DEFAULT_ENABLED = false;
 function asBoolean(value) {
@@ -87,7 +87,9 @@ export default function rtkSessionExtension(pi) {
             onUpdate?.({ content: [{ type: 'text', text: `${bin === null ? '' : 'rtk '}${argv.join(' ')}` }], details: { phase: 'start' } });
             try {
                 // A GUI-launched host may lack ~/.bun/bin on PATH, so prefer the resolved path.
-                const result = await pi.exec(bin ?? argv[0], argv, { signal, cwd });
+                // A `.cmd` shim cannot be spawned directly on Windows, so it runs through the shell.
+                const shim = shimCommand(bin ?? argv[0], argv);
+                const result = await pi.exec(shim.cmd, shim.args, { signal, cwd });
                 const text = [result.stdout, result.stderr].filter(Boolean).join('\n');
                 return {
                     isError: result.code !== 0,

package/dist/extensions/server.js

@@ -11,7 +11,8 @@ import comboToggleExtension from './combo/index.js';
 import tersioCommandsExtension from './commands/index.js';
 import { getSharedComboState } from './shared/session-state.js';
 import { formatStatus } from './shared/status.js';
-import { resolveRtkBinary } from './shared/utils.js';
+import { resolveRtkBinary, shimCommand } from './shared/utils.js';
+import { appendUsage } from './shared/usage-ledger.js';
 // The npm name, so the plugin list reads the same as the OMP and pi installs.
 const plugin = {
     id: '@krtclcdy/tersio',
@@ -217,8 +218,12 @@ const plugin = {
             if (!rtkActive(sid === undefined ? undefined : sessionEntriesOf(sid)))
                 return;
             const rewritten = await rewriteCommand(input.command);
-            if (rewritten)
-                input.command = rewritten;
+            if (!rewritten || rewritten === input.command)
+                return;
+            const original = input.command;
+            input.command = rewritten;
+            // The transcript stores the pre-hook command, so the rewrite leaves its own row.
+            appendUsage('rtk-audit', `opencode ${original}`);
         });
         // Built-in grep and glob output never reaches the bash hook; mutate result.content in place.
         try {
@@ -253,16 +258,20 @@ const plugin = {
 };
 /** execFile with the promise shape `filterThroughRtk` expects. */
 function execRtk(cmd, args, opts) {
-    return new Promise((resolve) => {
-        execFile(cmd, args, { signal: opts?.signal, timeout: opts?.timeout }, (error, stdout) => {
-            const out = stdout ?? '';
-            if (!error)
-                return resolve({ stdout: out, code: 0 });
-            // A non-numeric code is a spawn failure (ENOENT, EACCES, killed) and must not read as success.
-            const raw = error.code;
-            resolve({ stdout: out, code: typeof raw === 'number' ? raw : 1 });
-        });
+    const { promise, resolve } = Promise.withResolvers();
+    // cmd.exe parses its own quoting, so the command string must reach it verbatim: Node's default escaping turns the inner quotes into `\"` and the redirect then fails.
+    const shim = shimCommand(cmd, args);
+    execFile(shim.cmd, shim.args, { signal: opts?.signal, timeout: opts?.timeout, windowsVerbatimArguments: process.platform === 'win32' }, (error, stdout) => {
+        const out = stdout ?? '';
+        if (!error) {
+            resolve({ stdout: out, code: 0 });
+            return;
+        }
+        // A non-numeric code is a spawn failure (ENOENT, EACCES, killed) and must not read as success.
+        const raw = error.code;
+        resolve({ stdout: out, code: typeof raw === 'number' ? raw : 1 });
     });
+    return promise;
 }
 /** `rtk rewrite` exit codes: 0 rewrite found, 1 no equivalent, 3 advisory; the code is the contract. */
 const RTK_REWRITE_FOUND = 0;
@@ -326,23 +335,29 @@ function rewriteCommand(command) {
     const bin = resolveRtkBinary();
     if (!bin)
         return Promise.resolve(null);
-    return new Promise((resolve) => {
-        execFile(bin, ['rewrite', command], { timeout: 5000 }, (error, stdout) => {
-            // A kill or timeout means untrustworthy output; pass the command through.
-            const err = error;
-            if (err && (err.killed || err.signal))
-                return resolve(null);
-            const code = typeof err?.code === 'number' ? err.code : RTK_REWRITE_FOUND;
-            // Exit 1 is the only "no equivalent" answer, so anything else with output rewrites.
-            if (code === 1)
-                return resolve(null);
-            const out = String(stdout).trim();
-            if (!out || out === command)
-                return resolve(null);
-            if (code !== RTK_REWRITE_FOUND && code !== RTK_REWRITE_ADVISORY)
-                return resolve(null);
-            resolve(out);
-        });
+    const { promise, resolve } = Promise.withResolvers();
+    // A `.cmd` shim cannot be spawned directly on Windows, so it runs through the shell.
+    const shim = shimCommand(bin, ['rewrite', command]);
+    execFile(shim.cmd, shim.args, { timeout: 5000 }, (error, stdout) => {
+        // A kill or timeout means untrustworthy output; pass the command through.
+        const err = error;
+        if (err && (err.killed || err.signal)) {
+            resolve(null);
+            return;
+        }
+        const code = typeof err?.code === 'number' ? err.code : RTK_REWRITE_FOUND;
+        // Exit 1 is the only "no equivalent" answer, so anything else with output rewrites.
+        if (code === 1) {
+            resolve(null);
+            return;
+        }
+        const out = String(stdout).trim();
+        if (!out || out === command || (code !== RTK_REWRITE_FOUND && code !== RTK_REWRITE_ADVISORY)) {
+            resolve(null);
+            return;
+        }
+        resolve(out);
     });
+    return promise;
 }
 export default plugin;