@livx.cc/agentx 0.99.78 → 0.99.80

package/dist/cli.js

@@ -403,6 +403,68 @@ var init_redact = __esm({
   }
 });
 
+// src/hostPath.ts
+function toVfsPath(p, platform2 = currentPlatform()) {
+  if (!isWinPaths(platform2) || typeof p !== "string") return p;
+  let s = p.replace(/\\/g, "/");
+  s = s.replace(/^\/\/\?\/UNC\//i, "//").replace(/^\/\/\?\//, "");
+  const drive = /^([A-Za-z]):(?=\/|$)/.exec(s);
+  if (drive) return `/${drive[1].toLowerCase()}${s.slice(2) || "/"}`.replace(/\/+$/, "") || "/";
+  if (/^\/\/[^/]/.test(s)) return `/unc/${s.slice(2)}`;
+  return s;
+}
+function toHostPath(vpath, platform2 = currentPlatform()) {
+  if (!isWinPaths(platform2)) return vpath;
+  const segs = vpath.split("/").filter(Boolean);
+  if (segs.length >= 1 && /^[A-Za-z]$/.test(segs[0])) return `${segs[0].toUpperCase()}:\\${segs.slice(1).join("\\")}`;
+  if (segs.length >= 3 && segs[0].toLowerCase() === "unc") return `\\\\${segs.slice(1).join("\\")}`;
+  return null;
+}
+function withHostPaths(fs, platform2 = currentPlatform()) {
+  if (!isWinPaths(platform2)) return fs;
+  const PATH_ARGS = {
+    readFile: 1,
+    writeFile: 1,
+    deleteFile: 1,
+    readDir: 1,
+    createDir: 1,
+    exists: 1,
+    stat: 1,
+    isDirectory: 1,
+    isFile: 1,
+    setCwd: 1,
+    resolvePath: 2,
+    readFileBytes: 1,
+    realPath: 1,
+    canonicalPath: 1
+  };
+  return new Proxy(fs, {
+    get(target, prop, receiver) {
+      const v = Reflect.get(target, prop, receiver);
+      const n = typeof prop === "string" ? PATH_ARGS[prop] : void 0;
+      if (typeof v !== "function" || prop === "constructor") return v;
+      if (!n) return v.bind(target);
+      return (...args) => v.apply(target, args.map((a, i) => i < n && typeof a === "string" ? toVfsPath(a, platform2) : a));
+    }
+  });
+}
+function winSegmentProblem(seg) {
+  if (seg.includes(":")) return "alternate data stream / drive-relative name";
+  if (/[. ]$/.test(seg) && seg !== "." && seg !== "..") return "trailing dot or space";
+  if (WIN_DEVICE.test(seg)) return "reserved device name";
+  if (/[<>"|?*\x00-\x1f]/.test(seg)) return "invalid character";
+  return null;
+}
+var currentPlatform, isWinPaths, WIN_DEVICE;
+var init_hostPath = __esm({
+  "src/hostPath.ts"() {
+    "use strict";
+    currentPlatform = () => typeof process !== "undefined" && process.platform || "browser";
+    isWinPaths = (platform2 = currentPlatform()) => platform2 === "win32";
+    WIN_DEVICE = /^(con|prn|aux|nul|com[0-9¹²³]|lpt[0-9¹²³]|conin\$|conout\$)(\..*)?$/i;
+  }
+});
+
 // src/tools.structured.ts
 function ckAbort(signal) {
   if (signal?.aborted) throw new Error("aborted");
@@ -445,7 +507,7 @@ async function walkFiles(fs, dir, signal, out = [], st, depth = 0) {
 }
 function scanRoots(fs, path, opts) {
   const asked = path == null ? [] : (Array.isArray(path) ? path : [path]).map((p) => String(p)).filter(Boolean);
-  const roots = (asked.length ? asked : opts?.roots?.length ? opts.roots : [fsCwd(fs)]).map((r) => r.length > 1 && r.endsWith("/") ? r.slice(0, -1) : r);
+  const roots = (asked.length ? asked : opts?.roots?.length ? opts.roots : [fsCwd(fs)]).map((r) => toVfsPath(r)).map((r) => r.length > 1 && r.endsWith("/") ? r.slice(0, -1) : r);
   return [...new Set(roots)].filter((r, _i, all) => !all.some((other) => other !== r && r.startsWith(`${other}/`)));
 }
 function scanNote(states) {
@@ -674,6 +736,7 @@ function parentDir(abs) {
   return i <= 0 ? "/" : abs.slice(0, i);
 }
 async function mkdirp(fs, dir) {
+  dir = toVfsPath(dir);
   if (dir === "/" || await fs.exists(dir)) return;
   await mkdirp(fs, parentDir(dir));
   if (!await fs.exists(dir)) await fs.createDir(dir);
@@ -734,6 +797,7 @@ var init_tools_structured = __esm({
   "src/tools.structured.ts"() {
     "use strict";
     init_redact();
+    init_hostPath();
     DEFAULT_SKIP_DIRS = ["node_modules", ".git", "dist", ".tmp"];
     DEFAULT_MAX_DEPTH = 24;
     SCAN_PARAMS = {
@@ -2014,7 +2078,7 @@ __export(worktree_exports, {
 });
 import { spawnSync } from "child_process";
 import { symlinkSync, mkdirSync, statSync as statSync4, readFileSync as readFileSync3, rmSync } from "fs";
-import { join as join2 } from "path";
+import { join as join2, resolve as resolve2 } from "path";
 function validateWorktreeSlug(slug2) {
   if (!slug2) throw new Error("worktree slug must not be empty");
   if (slug2.length > MAX_SLUG_LENGTH) throw new Error(`worktree slug must be \u2264${MAX_SLUG_LENGTH} chars (got ${slug2.length})`);
@@ -2045,7 +2109,7 @@ function git(args, cwd) {
 }
 function findGitRoot(from) {
   const r = git(["rev-parse", "--show-toplevel"], from);
-  return r.ok ? r.stdout : null;
+  return r.ok ? process.platform === "win32" ? resolve2(r.stdout) : r.stdout : null;
 }
 function readWorktreeHead(worktreePath) {
   try {
@@ -2099,7 +2163,7 @@ function symlinkDirs(repoRoot, worktreePath, dirs) {
       continue;
     }
     try {
-      symlinkSync(src, dst, "dir");
+      symlinkSync(src, dst, process.platform === "win32" ? "junction" : "dir");
     } catch (e) {
       if (e?.code !== "EEXIST") console.error(`[worktree] symlink ${dir}: ${e?.message ?? e}`);
     }
@@ -2178,20 +2242,58 @@ var NodeDiskFilesystem;
 var init_NodeDiskFilesystem = __esm({
   "src/NodeDiskFilesystem.ts"() {
     "use strict";
+    init_hostPath();
     NodeDiskFilesystem = class _NodeDiskFilesystem {
       constructor(baseDir, opts = {}) {
         this.baseDir = baseDir;
         this.opts = { denySymlinks: true, ...opts };
+        this.drives = this.win && (baseDir === "/" || baseDir === "\\");
       }
       baseDir;
       cwd = "/";
       opts;
+      win = isWinPaths();
+      /** Windows + baseDir '/': the VFS root is the machine (drives as first segment), not a directory. */
+      drives;
       /** Ensure the root dir exists. */
       async init() {
+        if (this.drives) return;
         await fsp.mkdir(this.baseDir, { recursive: true });
       }
       real(vpath) {
-        return np.join(this.baseDir, "." + vpath);
+        if (!this.win) return np.join(this.baseDir, "." + vpath);
+        for (const seg of vpath.split("/")) {
+          const why = seg && winSegmentProblem(seg);
+          if (why) throw new Error(`File not found: ${vpath} (${why})`);
+        }
+        if (!this.drives) return np.join(this.baseDir, "." + vpath);
+        const host = toHostPath(vpath);
+        if (!host) throw new Error(`File not found: ${vpath}`);
+        return host;
+      }
+      /** Windows machine root ('/' when baseDir is '/'): a synthetic directory listing the drives. */
+      isDriveRoot(vpath) {
+        return this.drives && vpath === "/";
+      }
+      /** Windows: refuse an 8.3 short name (`ENV~1` opens `.env`) — the only alias that needs the disk to
+       *  detect. Only segments that look like one (`~<digit>`) cost a lookup: the OS's long name for that
+       *  component must be the name that was asked for. */
+      assertLongNames(real) {
+        if (!this.win || !/~\d/.test(real)) return;
+        const root = np.parse(real).root;
+        const parts = real.slice(root.length).split(/[\\/]/).filter(Boolean);
+        let cur = root;
+        for (const part of parts) {
+          cur = np.join(cur, part);
+          if (!/~\d/.test(part)) continue;
+          let long;
+          try {
+            long = np.basename(realpathSync2.native(cur));
+          } catch {
+            return;
+          }
+          if (long.toLowerCase() !== part.toLowerCase()) throw new Error("File not found: short (8.3) name not permitted");
+        }
       }
       // Verified non-symlink DIRECTORY components, with a short TTL: tree walks (Glob/Grep) hit the same
       // parents thousands of times; re-lstat'ing each per op is the dominant syscall cost. The 1s window
@@ -2201,11 +2303,13 @@ var init_NodeDiskFilesystem = __esm({
       static VERIFY_TTL_MS = 1e3;
       /** Throw if any existing component of `real` is a symlink (escape vector). */
       async assertNoSymlink(real) {
+        this.assertLongNames(real);
         if (!this.opts.denySymlinks) return;
-        const rel = np.relative(this.baseDir, real);
-        if (rel === "" || rel.startsWith("..")) return;
+        const base = this.drives ? np.parse(real).root : this.baseDir;
+        const rel = np.relative(base, real);
+        if (rel === "" || rel.startsWith("..") || np.isAbsolute(rel)) return;
         const parts = rel.split(np.sep);
-        let cur = this.baseDir;
+        let cur = base;
         const now4 = Date.now();
         for (let i = 0; i < parts.length; i++) {
           cur = np.join(cur, parts[i]);
@@ -2225,13 +2329,13 @@ var init_NodeDiskFilesystem = __esm({
         }
       }
       resolvePath(path, cwd) {
-        return PathResolver.resolve(path, cwd || this.cwd);
+        return PathResolver.resolve(toVfsPath(path), toVfsPath(cwd || this.cwd));
       }
       getCwd() {
         return this.cwd;
       }
       setCwd(path) {
-        this.cwd = PathResolver.normalize(path);
+        this.cwd = PathResolver.normalize(toVfsPath(path));
       }
       async readFile(path) {
         const r = this.real(this.resolvePath(path));
@@ -2305,8 +2409,10 @@ var init_NodeDiskFilesystem = __esm({
         }
       }
       async readDir(path) {
-        const r = this.real(this.resolvePath(path));
+        const v = this.resolvePath(path);
+        if (this.isDriveRoot(v)) return this.listDrives();
         try {
+          const r = this.real(v);
           await this.assertNoSymlink(r);
           return await fsp.readdir(r);
         } catch {
@@ -2326,8 +2432,10 @@ var init_NodeDiskFilesystem = __esm({
         await fsp.mkdir(r);
       }
       async exists(path) {
-        const r = this.real(this.resolvePath(path));
+        const v = this.resolvePath(path);
+        if (this.isDriveRoot(v)) return true;
         try {
+          const r = this.real(v);
           await this.assertNoSymlink(r);
           await fsp.stat(r);
           return true;
@@ -2337,8 +2445,10 @@ var init_NodeDiskFilesystem = __esm({
       }
       async stat(path) {
         let s;
-        const r = this.real(this.resolvePath(path));
+        const v = this.resolvePath(path);
+        if (this.isDriveRoot(v)) return { created: /* @__PURE__ */ new Date(0), modified: /* @__PURE__ */ new Date(0), size: 0, permissions: "drwxr-xr-x", isExecutable: false };
         try {
+          const r = this.real(v);
           await this.assertNoSymlink(r);
           s = await fsp.stat(r);
         } catch {
@@ -2353,8 +2463,10 @@ var init_NodeDiskFilesystem = __esm({
         };
       }
       async isDirectory(path) {
-        const r = this.real(this.resolvePath(path));
+        const v = this.resolvePath(path);
+        if (this.isDriveRoot(v)) return true;
         try {
+          const r = this.real(v);
           await this.assertNoSymlink(r);
           return (await fsp.stat(r)).isDirectory();
         } catch {
@@ -2362,14 +2474,20 @@ var init_NodeDiskFilesystem = __esm({
         }
       }
       async isFile(path) {
-        const r = this.real(this.resolvePath(path));
         try {
+          const r = this.real(this.resolvePath(path));
           await this.assertNoSymlink(r);
           return (await fsp.stat(r)).isFile();
         } catch {
           return false;
         }
       }
+      /** Windows machine root: the drive letters that are mounted (`/c`, `/d`, …). */
+      async listDrives() {
+        const letters = "abcdefghijklmnopqrstuvwxyz".split("");
+        const up = await Promise.all(letters.map((l) => fsp.stat(`${l.toUpperCase()}:\\`).then(() => true, () => false)));
+        return letters.filter((_, i) => up[i]);
+      }
     };
   }
 });
@@ -2386,6 +2504,7 @@ var init_JailedFilesystem = __esm({
   "src/JailedFilesystem.ts"() {
     "use strict";
     init_tools_structured();
+    init_hostPath();
     JailedFilesystem = class {
       constructor(inner, options) {
         this.inner = inner;
@@ -2399,8 +2518,10 @@ var init_JailedFilesystem = __esm({
       denyRe;
       roRe;
       confineRe;
+      /** Resolved VFS path — host-path syntax (Windows `C:\…`, backslashes) is normalized FIRST, so the
+       *  deny/readonly/confine globs always match the path that is actually opened. */
       abs(path) {
-        return this.inner.resolvePath(path, this.inner.getCwd());
+        return this.inner.resolvePath(toVfsPath(path), this.inner.getCwd());
       }
       /** Throw if reading `path` is not permitted (denied or out of confinement). */
       guardRead(op, path) {
@@ -2485,7 +2606,7 @@ var init_JailedFilesystem = __esm({
         return entries.filter((name) => this.visible(abs === "/" ? `/${name}` : `${abs}/${name}`));
       }
       resolvePath(path, cwd) {
-        return this.inner.resolvePath(path, cwd ?? this.inner.getCwd());
+        return this.inner.resolvePath(toVfsPath(path), cwd ?? this.inner.getCwd());
       }
       getCwd() {
         return this.inner.getCwd();
@@ -2551,6 +2672,159 @@ var init_JailedFilesystem = __esm({
   }
 });
 
+// src/platform.ts
+import { spawnSync as spawnSync2, execFile } from "child_process";
+import { statSync as statSync5 } from "fs";
+import * as np2 from "path";
+function specFor(bin) {
+  const name = np2.basename(bin).toLowerCase().replace(/\.exe$/, "");
+  if (name === "powershell" || name === "pwsh") {
+    const pre = "$ProgressPreference='SilentlyContinue';[Console]::OutputEncoding=[Text.Encoding]::UTF8;$OutputEncoding=[Text.Encoding]::UTF8;";
+    return {
+      bin,
+      kind: "powershell",
+      label: name === "pwsh" ? "PowerShell (pwsh)" : "Windows PowerShell",
+      args: (c) => ["-NoLogo", "-NoProfile", "-NonInteractive", "-ExecutionPolicy", "Bypass", "-EncodedCommand", Buffer.from(pre + c, "utf16le").toString("base64")]
+    };
+  }
+  if (name === "cmd") return { bin, kind: "cmd", label: "cmd.exe", args: (c) => ["/d", "/s", "/c", `"${c}"`], spawnOptions: { windowsVerbatimArguments: true } };
+  return { bin, kind: "sh", label: /bash/.test(name) && /git/i.test(bin) ? "Git Bash" : name, args: (c) => ["-c", c] };
+}
+function findGitBash(env = process.env) {
+  const roots = [];
+  const git2 = findOnPath("git", env);
+  if (git2) {
+    const dir = np2.dirname(git2);
+    const up = (p, n) => {
+      for (let i = 0; i < n; i++) p = np2.dirname(p);
+      return p;
+    };
+    roots.push(/[\\/](mingw(32|64)|ucrt64|clang(32|64|arm64))[\\/]bin$/i.test(dir) ? up(dir, 2) : up(dir, 1));
+  }
+  for (const base of [env.ProgramFiles, env["ProgramFiles(x86)"], env.ProgramW6432, env.LOCALAPPDATA && np2.join(env.LOCALAPPDATA, "Programs")])
+    if (base) roots.push(np2.join(base, "Git"));
+  for (const r of roots) {
+    const b = np2.join(r, "bin", "bash.exe");
+    if (isFile(b)) return b;
+  }
+  return void 0;
+}
+function defaultShell() {
+  if (!IS_WIN) return POSIX_SH;
+  if (_shell) return _shell;
+  const override = process.env.AGENTX_SHELL;
+  if (override && (isFile(override) || findOnPath(override))) return _shell = specFor(isFile(override) ? override : findOnPath(override));
+  const bash = findGitBash();
+  if (bash) return _shell = specFor(bash);
+  const sysRoot = process.env.SystemRoot || "C:\\Windows";
+  const ps = np2.join(sysRoot, "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+  if (isFile(ps)) return _shell = specFor(ps);
+  return _shell = specFor(process.env.ComSpec || "cmd.exe");
+}
+function shellFor(shell) {
+  if (!IS_WIN) return shell ? { ...POSIX_SH, bin: shell } : POSIX_SH;
+  return shell && isFile(shell) ? specFor(shell) : defaultShell();
+}
+function shellOption() {
+  if (!IS_WIN) return true;
+  const s = defaultShell();
+  return s.kind === "cmd" ? true : s.bin;
+}
+function killTree(pid, signal) {
+  if (!pid) return false;
+  if (!IS_WIN) {
+    try {
+      process.kill(-pid, signal);
+      return true;
+    } catch {
+      return false;
+    }
+  }
+  try {
+    const r = spawnSync2("taskkill", ["/PID", String(pid), "/T", "/F"], { windowsHide: true, stdio: "ignore", timeout: 1e4 });
+    return r.status === 0;
+  } catch {
+    return false;
+  }
+}
+async function winTreeCpuSeconds(root) {
+  const script = 'Get-CimInstance Win32_Process | ForEach-Object { "$($_.ProcessId) $($_.ParentProcessId) $([uint64]$_.UserModeTime + [uint64]$_.KernelModeTime)" }';
+  const out = await new Promise((res, rej) => execFile(
+    "powershell.exe",
+    ["-NoProfile", "-NonInteractive", "-Command", script],
+    { timeout: 15e3, windowsHide: true },
+    (e, so) => e ? rej(e) : res(String(so))
+  ));
+  const rows = out.split(/\r?\n/).map((l) => l.trim().split(/\s+/)).filter((r) => r.length === 3).map(([pid, ppid, ticks]) => ({ pid: Number(pid), ppid: Number(ppid), sec: Number(ticks) / 1e7 }));
+  const inTree = new Set(rows.filter((r) => r.pid === root).map((r) => r.pid));
+  for (let grew = true; grew; ) {
+    grew = false;
+    for (const r of rows) if (!inTree.has(r.pid) && inTree.has(r.ppid) && r.pid !== r.ppid) {
+      inTree.add(r.pid);
+      grew = true;
+    }
+  }
+  let total;
+  for (const r of rows) if (inTree.has(r.pid) && Number.isFinite(r.sec)) total = (total ?? 0) + r.sec;
+  return total;
+}
+function findOnPath(cmd, env = process.env) {
+  const exts = IS_WIN && !/\.[^\\/.]+$/.test(cmd) ? (env.PATHEXT || ".COM;.EXE;.BAT;.CMD").split(";").filter(Boolean) : [""];
+  const cands = (base) => exts.map((e) => base + e);
+  if (/[\\/]/.test(cmd)) return cands(cmd).find(isFile);
+  const PATH = env.PATH ?? env.Path ?? "";
+  for (const dir of PATH.split(np2.delimiter)) {
+    if (!dir) continue;
+    for (const p of cands(np2.join(dir, cmd))) if (isFile(p)) return p;
+  }
+  return void 0;
+}
+function hasCommand(cmd) {
+  if (!IS_WIN) return spawnSync2("which", [cmd]).status === 0;
+  return !!findOnPath(cmd);
+}
+function cmdArg(arg, shim) {
+  let a = arg.replace(/(\\*)"/g, '$1$1\\"').replace(/(\\*)$/, "$1$1");
+  a = `"${a}"`.replace(CMD_META, "^$1");
+  return shim ? a.replace(CMD_META, "^$1") : a;
+}
+function resolveSpawn(command, args = [], env = process.env) {
+  if (!IS_WIN) return { command, args };
+  const found = findOnPath(command, env);
+  if (!found || !/\.(cmd|bat)$/i.test(found)) return { command: found ?? command, args };
+  const shim = /node_modules[\\/]\.bin[\\/][^\\/]+\.cmd$/i.test(found);
+  const line = [found.replace(CMD_META, "^$1"), ...args.map((a) => cmdArg(a, shim))].join(" ");
+  return { command: env.ComSpec || "cmd.exe", args: ["/d", "/s", "/c", `"${line}"`], windowsVerbatimArguments: true };
+}
+function plainEnv(env, omit = []) {
+  const out = {};
+  const drop = new Set(IS_WIN ? omit.map((k) => k.toUpperCase()) : omit);
+  for (const [k, v] of Object.entries(env)) {
+    if (v === void 0 || drop.has(IS_WIN ? k.toUpperCase() : k)) continue;
+    out[IS_WIN && k.toUpperCase() === "PATH" ? "PATH" : k] = v;
+  }
+  return out;
+}
+var IS_WIN, POSIX_SH, isFile, _shell, DETACH_OPTIONS, CMD_META, pathTail, DEFAULT_EDITOR;
+var init_platform = __esm({
+  "src/platform.ts"() {
+    "use strict";
+    IS_WIN = process.platform === "win32";
+    POSIX_SH = { bin: "/bin/sh", args: (c) => ["-c", c], label: "/bin/sh", kind: "sh" };
+    isFile = (p) => {
+      try {
+        return statSync5(p).isFile();
+      } catch {
+        return false;
+      }
+    };
+    DETACH_OPTIONS = IS_WIN ? { windowsHide: true } : { detached: true };
+    CMD_META = /([()\][%!^"`<>&|;, *?])/g;
+    pathTail = (p) => p.split(IS_WIN ? /[\\/]/ : "/").pop();
+    DEFAULT_EDITOR = IS_WIN ? "notepad" : "vi";
+  }
+});
+
 // src/shell.sandbox.ts
 function writable(cwd, o, tmpDir) {
   const set = /* @__PURE__ */ new Set([cwd, "/tmp", "/private/tmp", "/private/var/folders", "/dev", ...tmpDir ? [tmpDir] : [], ...o.writePaths]);
@@ -2612,19 +2886,14 @@ __export(tools_shell_exports, {
   makeShellJobTools: () => makeShellJobTools,
   parsePsTime: () => parsePsTime,
   psGroupCpuSeconds: () => psGroupCpuSeconds,
-  sumTreeCpu: () => sumTreeCpu
+  sumTreeCpu: () => sumTreeCpu,
+  windowsShellNote: () => windowsShellNote
 });
 function killGroup(proc, signal) {
-  if (!proc?.pid) return false;
-  try {
-    process.kill(-proc.pid, signal);
-    return true;
-  } catch {
-    return false;
-  }
+  return killTree(proc?.pid, signal);
 }
 async function spawnArgvFor(command, cwd, osSandbox) {
-  if (!osSandbox) return { bin: "/bin/sh", args: ["-c", command] };
+  if (!osSandbox) return shellArgv(defaultShell(), command);
   const opts = osSandbox === true ? {} : osSandbox;
   const wrapper = await findSandboxWrapper();
   const wrapped = wrapper ? sandboxArgv(command, cwd, opts, process.platform, process.env.TMPDIR) : null;
@@ -2652,9 +2921,17 @@ function parsePsTime(t) {
   return Number(m[1] ?? 0) * 86400 + Number(m[2] ?? 0) * 3600 + Number(m[3]) * 60 + Number(m[4]);
 }
 async function psGroupCpuSeconds(pgid) {
+  if (IS_WIN) {
+    try {
+      return await winTreeCpuSeconds(pgid);
+    } catch (e) {
+      log24.debug(`cpu probe failed for ${pgid}: ${e}`);
+      return void 0;
+    }
+  }
   try {
-    const { execFile: execFile4 } = await import("child_process");
-    const out = await new Promise((res, rej) => execFile4("ps", ["-A", "-o", "pid=,ppid=,pgid=,time="], { timeout: 5e3, env: { ...process.env, LC_ALL: "C" } }, (e, so) => e ? rej(e) : res(String(so))));
+    const { execFile: execFile5 } = await import("child_process");
+    const out = await new Promise((res, rej) => execFile5("ps", ["-A", "-o", "pid=,ppid=,pgid=,time="], { timeout: 5e3, env: { ...process.env, LC_ALL: "C" } }, (e, so) => e ? rej(e) : res(String(so))));
     return sumTreeCpu(out, pgid);
   } catch (e) {
     log24.debug(`ps cpu probe failed for group ${pgid}: ${e}`);
@@ -2705,7 +2982,7 @@ function makeRealShellTool(options) {
       return { ...this, description: rebound.description, run: rebound.run, withCwd: rebound.withCwd };
     },
     get description() {
-      return "Run a shell command via /bin/sh in the working directory. Executes any installed binary \u2014 ls, cat, grep, git, bun, node, curl, scripts, etc. Returns combined stdout+stderr; non-zero exits are prefixed `[exit N]`. Runs non-interactively with no terminal (stdin is /dev/null): commands that prompt for input fail fast rather than hang \u2014 for privileged actions use a non-interactive flag (e.g. `sudo -n`), or ask the user to run the command themselves. " + (options.registry?.adopt ? `A command still running after ${defaultTimeoutMs}ms is NOT killed \u2014 it is handed to a background job and you get its id, so you can keep checking on it (\`[still running]\`). Pass \`timeoutMs\` (max ${maxTimeoutMs}) to wait longer in the foreground, and always bound network commands yourself (e.g. \`curl -m 10\`). ` : `Each command is killed after ${defaultTimeoutMs}ms (result \`[exit 124]\` with whatever output it produced) \u2014 pass \`timeoutMs\` (max ${maxTimeoutMs}) for a legitimately slower command, and always bound network commands yourself (e.g. \`curl -m 10\`). `) + backgroundDoc();
+      return `Run a shell command via ${shellFor(options.shell).label} in the working directory. ` + windowsShellNote(shellFor(options.shell)) + "Executes any installed binary \u2014 ls, cat, grep, git, bun, node, curl, scripts, etc. Returns combined stdout+stderr; non-zero exits are prefixed `[exit N]`. Runs non-interactively with no terminal (stdin is /dev/null): commands that prompt for input fail fast rather than hang \u2014 for privileged actions use a non-interactive flag (e.g. `sudo -n`), or ask the user to run the command themselves. " + (options.registry?.adopt ? `A command still running after ${defaultTimeoutMs}ms is NOT killed \u2014 it is handed to a background job and you get its id, so you can keep checking on it (\`[still running]\`). Pass \`timeoutMs\` (max ${maxTimeoutMs}) to wait longer in the foreground, and always bound network commands yourself (e.g. \`curl -m 10\`). ` : `Each command is killed after ${defaultTimeoutMs}ms (result \`[exit 124]\` with whatever output it produced) \u2014 pass \`timeoutMs\` (max ${maxTimeoutMs}) for a legitimately slower command, and always bound network commands yourself (e.g. \`curl -m 10\`). `) + backgroundDoc();
     },
     // Declared so transports above the agent loop can size their own deadline with headroom (see AgentTool.maxDurationMs).
     maxDurationMs: maxTimeoutMs,
@@ -2729,7 +3006,7 @@ function makeRealShellTool(options) {
         return `Started background job ${id}. Poll output with ShellOutput({id:"${id}"}), check ShellStatus({id:"${id}"}), stop with ShellKill({id:"${id}"}).`;
       }
       const spawn4 = options.spawn ?? await nodeSpawn();
-      let argv = { bin: options.shell || "/bin/sh", args: ["-c", cmd] };
+      let argv = shellArgv(shellFor(options.shell), cmd);
       if (options.osSandbox) {
         try {
           argv = await spawnArgvFor(cmd, options.cwd, options.osSandbox);
@@ -2764,22 +3041,23 @@ function makeRealShellTool(options) {
         }
       };
       try {
-        return await new Promise((resolve5) => {
+        return await new Promise((resolve6) => {
           let out = "";
           let settled = false;
           const finish = (s) => {
             if (settled) return;
             settled = true;
-            resolve5(s);
+            resolve6(s);
           };
           let proc;
           try {
-            proc = spawn4(argv.bin, argv.args, { cwd: options.cwd, env: childEnv(options), signal: ctl.signal, ...DETACHED });
+            if (IS_WIN) ctl.signal.addEventListener("abort", () => killGroup(proc, "SIGKILL"), { once: true });
+            proc = spawn4(argv.bin, argv.args, { cwd: options.cwd, env: childEnv(options), signal: ctl.signal, ...DETACHED, ...argv.spawnOptions });
           } catch (e) {
             return finish(`[exit 1] failed to spawn shell: ${e?.message ?? e}`);
           }
           if (ctl.signal.aborted) killGroup(proc, "SIGKILL");
-          else ctl.signal.addEventListener("abort", () => killGroup(proc, "SIGKILL"), { once: true });
+          else if (!IS_WIN) ctl.signal.addEventListener("abort", () => killGroup(proc, "SIGKILL"), { once: true });
           const registry = options.registry;
           if (registry?.adopt) {
             onDeadline = () => {
@@ -2824,6 +3102,12 @@ function makeRealShellTool(options) {
     }
   };
 }
+function windowsShellNote(sh) {
+  if (!IS_WIN) return "";
+  if (sh.kind === "sh") return "This is Windows: the shell is bash (POSIX syntax); drive paths are written /c/Users/\u2026 or C:/Users/\u2026, and Windows programs (.exe/.cmd) run directly. ";
+  if (sh.kind === "powershell") return "This is Windows and the shell is PowerShell \u2014 use PowerShell syntax (`;` not `&&`, `$env:VAR`, Get-ChildItem/Select-String), not bash. ";
+  return "This is Windows and the shell is cmd.exe \u2014 use cmd syntax (`&&`, `%VAR%`, dir/type/findstr), not bash. ";
+}
 function handoffFor(timeoutMs, id, body, notifies) {
   const head = `[still running] exceeded ${timeoutMs}ms, so it was handed to background job ${id} \u2014 NOT killed, it is still going (it is only stopped if it goes silent with no CPU activity for a long time, and then you are told why). Check on it with ShellOutput({id:"${id}"}) / ShellStatus({id:"${id}"}), stop it with ShellKill({id:"${id}"}). ` + (notifies ? "Its completion will be reported to you, so you may continue with other work meanwhile." : "Nothing will tell you when it finishes \u2014 poll it yourself before you rely on its result.");
   return body ? `${head}
@@ -2878,7 +3162,7 @@ ${clean2(out) || "(no output yet)"}`;
     }
   ];
 }
-var log24, clean2, DETACHED, SECRET_ENV_RE, _spawn, ShellJobRegistry, shellStatus, NO_JOB2;
+var log24, clean2, DETACHED, shellArgv, SECRET_ENV_RE, _spawn, ShellJobRegistry, shellStatus, NO_JOB2;
 var init_tools_shell = __esm({
   "src/tools.shell.ts"() {
     "use strict";
@@ -2887,9 +3171,11 @@ var init_tools_shell = __esm({
     init_logging();
     init_shell_sandbox();
     init_tools_jobs();
+    init_platform();
     log24 = forComponent("shell");
     clean2 = (s) => truncateOutput(redactSecrets(s.replace(/\n+$/, "")));
-    DETACHED = { stdio: ["ignore", "pipe", "pipe"], detached: true };
+    DETACHED = { stdio: ["ignore", "pipe", "pipe"], ...DETACH_OPTIONS };
+    shellArgv = (sh, command) => ({ bin: sh.bin, args: sh.args(command), ...sh.spawnOptions ? { spawnOptions: sh.spawnOptions } : {} });
     SECRET_ENV_RE = /(_API_KEY|_TOKEN|_SECRET|_PASSWORD|_PRIVATE_KEY|^AWS_|^GITHUB_TOKEN$|^OPENAI_|^ANTHROPIC_|^GOOGLE_|^GEMINI_|^GROQ_|^NPM_TOKEN$)/i;
     ShellJobRegistry = class {
       constructor(cfg) {
@@ -2904,8 +3190,8 @@ var init_tools_shell = __esm({
         const h = this.track(command, { idleMs: 0 });
         try {
           const spawn4 = this.cfg.spawn ?? await nodeSpawn();
-          const argv = this.cfg.osSandbox ? await spawnArgvFor(command, this.cfg.cwd, this.cfg.osSandbox) : { bin: "/bin/sh", args: ["-c", command] };
-          this.attach(h, spawn4(argv.bin, argv.args, { cwd: this.cfg.cwd, env: childEnv(this.cfg), ...DETACHED }));
+          const argv = this.cfg.osSandbox ? await spawnArgvFor(command, this.cfg.cwd, this.cfg.osSandbox) : shellArgv(defaultShell(), command);
+          this.attach(h, spawn4(argv.bin, argv.args, { cwd: this.cfg.cwd, env: childEnv(this.cfg), ...DETACHED, ...argv.spawnOptions }));
         } catch (e) {
           h.chunk(`failed to spawn: ${e?.message ?? e}`);
           h.finish("error", void 0, e?.message ?? String(e));
@@ -3035,9 +3321,9 @@ var init_tools_shell = __esm({
 
 // cli/cli.ts
 import { createInterface } from "readline/promises";
-import { existsSync as existsSync9, readFileSync as readFileSync10, appendFileSync, mkdirSync as mkdirSync12, writeFileSync as writeFileSync9, readdirSync as readdirSync4, statSync as statSync7, unlinkSync as unlinkSync5 } from "fs";
+import { existsSync as existsSync9, readFileSync as readFileSync10, appendFileSync, mkdirSync as mkdirSync12, writeFileSync as writeFileSync9, readdirSync as readdirSync4, statSync as statSync8, unlinkSync as unlinkSync5 } from "fs";
 import { homedir as homedir10 } from "os";
-import { spawnSync as spawnSync6 } from "child_process";
+import { spawnSync as spawnSync7 } from "child_process";
 
 // cli/clipboard.ts
 import { execFileSync } from "child_process";
@@ -3068,6 +3354,15 @@ function grabClipboardImage(dir, id, run = execFileSync, platform2 = process.pla
     }
     return null;
   }
+  if (platform2 === "win32") {
+    const ps = "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $i = [Windows.Forms.Clipboard]::GetImage(); if (-not $i) { exit 1 }; $i.Save($env:AGENTX_CLIP_OUT, [Drawing.Imaging.ImageFormat]::Png)";
+    try {
+      run("powershell.exe", ["-NoProfile", "-NonInteractive", "-STA", "-Command", ps], { ...SILENT, env: { ...process.env, AGENTX_CLIP_OUT: png }, windowsHide: true });
+      if (nonEmpty(png)) return { path: png, mime: "image/png" };
+    } catch {
+    }
+    return null;
+  }
   if (platform2 !== "darwin") return null;
   const osa = (klass, out) => `set d to (the clipboard as \xABclass ${klass}\xBB)
 set f to open for access POSIX file ${q(out)} with write permission
@@ -3092,10 +3387,13 @@ close access f`;
   return null;
 }
 function copyTextToClipboard(text, platform2 = process.platform) {
-  const candidates = platform2 === "darwin" ? [["pbcopy", []]] : platform2 === "linux" ? [["wl-copy", []], ["xclip", ["-selection", "clipboard"]]] : [];
+  const candidates = platform2 === "darwin" ? [["pbcopy", []]] : platform2 === "linux" ? [["wl-copy", []], ["xclip", ["-selection", "clipboard"]]] : (
+    // Windows: Set-Clipboard reading stdin as UTF-8 (clip.exe would decode it with the OEM code page).
+    platform2 === "win32" ? [["powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", "[Console]::InputEncoding = [Text.Encoding]::UTF8; Set-Clipboard -Value ([Console]::In.ReadToEnd())"]]] : []
+  );
   for (const [cmd, args] of candidates) {
     try {
-      execFileSync(cmd, args, { input: text, stdio: ["pipe", "ignore", "ignore"] });
+      execFileSync(cmd, args, { input: text, stdio: ["pipe", "ignore", "ignore"], ...platform2 === "win32" ? { windowsHide: true } : {} });
       return true;
     } catch {
     }
@@ -3104,7 +3402,7 @@ function copyTextToClipboard(text, platform2 = process.platform) {
 }
 
 // cli/cli.ts
-import { join as join14, resolve as resolve4, basename as basename2, extname, dirname as dirname5 } from "path";
+import { join as join15, resolve as resolve5, basename as basename4, extname, dirname as dirname6 } from "path";
 import { AIClient, DecideClient, listModels, listProviders, getProviderFromModel, getModelInfo, resolveModel, isModelSupported, disposeCursorSessions, disposeClaudeCodeSessions } from "ai.libx.js";
 
 // src/ccBridge.ts
@@ -4340,6 +4638,10 @@ var AgentOptions = class {
   model = "anthropic/claude-sonnet-4-6";
   systemPrompt = "You are a coding agent operating on a virtual filesystem. Use the `bash` tool to explore (ls, grep, find, cat) and the `Read`/`Edit` tools to view and modify files. Always Read a file before Editing it \u2014 and before overwriting it with `Write` or a whole-file `ApplyEdits`: Write replaces the ENTIRE file, so blindly writing over an existing one destroys its unseen contents. If a file already exists, Read it first, then merge your changes (or Edit the specific part). When multiple tool calls are independent (e.g. several Reads or Greps with no dependency between them), issue them together in a single turn rather than one at a time. When the task is complete, reply with a short summary and make no further tool calls.\nRecovery: every turn's file changes are checkpointed. If the user asks to undo/revert/recover edits (including a file you overwrote), tell them to run `/rewind` (or `/undo` for the last turn) to restore the working tree \u2014 checkpoints cover files you edited even in .gitignored dirs. You cannot run `/rewind` yourself; surface it as the recovery path.\nWhen working with a knowledge base or document workspace: use `RepoMap` with scope \"docs\" to see all document headings and summaries (orient first); use `MemorySearch` to find memories by content when you don't know the exact slug; use `Recall` with multiple slugs to batch-load related facts in one call. Prefer targeted loads over reading everything \u2014 orient \u2192 search \u2192 load \u2192 act.";
   tools = defaultTools();
+  /** claude-code/* only: which agentx tools reach it as the in-process `agentx` MCP server (ccBridge.ts). 'memory' =
+   *  the ones Claude Code has no native twin for (CC_BRIDGED); 'all' = every tool this agent has — for an agent whose
+   *  tools ARE its job (the duplex reflex: Act/Think/Hold…), run with Claude Code's own tools off (providerOptions.tools: []). */
+  ccBridge = "memory";
   maxSteps = 25;
   // --- automatic kill-switches (always on; protect the API budget against runaway loops/abuse) ---
   /** Hard ceiling on accumulated tokens (prompt+completion) across the run; cache READS count at 0.1×
@@ -4935,8 +5237,9 @@ var Agent = class _Agent {
       };
       const cursorPo = isCursorWithTools ? { toolTimeoutMs: effectiveToolTimeoutMs, toolExecutor: hostExec } : void 0;
       const claudeSteerPo = o.model.startsWith("claude-code/") ? { steer: () => this.drainPendingSteers() } : void 0;
-      if (claudeSteerPo && o.providerOptions?.claudeCodeSession && this.activeTools.some((t) => CC_BRIDGED.has(t.name))) {
-        this.ccServer ??= ccToolServer("agentx", () => this.activeTools.filter((t) => CC_BRIDGED.has(t.name)), (n, a) => this.ccExec(n, a));
+      const bridged = (t) => o.ccBridge === "all" || CC_BRIDGED.has(t.name);
+      if (claudeSteerPo && o.providerOptions?.claudeCodeSession && this.activeTools.some(bridged)) {
+        this.ccServer ??= ccToolServer("agentx", () => this.activeTools.filter(bridged), (n, a) => this.ccExec(n, a));
         claudeSteerPo.mcpServers = { ...o.providerOptions?.mcpServers, agentx: this.ccServer };
       }
       if (this.ccServer) this.ccExec = hostExec;
@@ -9331,6 +9634,10 @@ function describeCall(call) {
   const hint = v ? ` (${String(v).replace(/\s+/g, " ").trim().slice(0, 48)})` : "";
   return `${call.name}${hint}`;
 }
+function refusedCall(e) {
+  const code = Number(e?.statusCode ?? e?.status);
+  return code === 401 || code === 403 || /API key|unauthori[sz]ed|authentication|invalid x-api-key|permission denied/i.test(String(e?.message ?? e ?? ""));
+}
 var DuplexAgentOptions = class {
   /** Any ai.libx.js AIClient — shared by all tiers (routed by model). */
   ai;
@@ -9620,12 +9927,26 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
       timeoutMs: 3e4,
       failEmptyTurns: false,
       // a silent reflex turn after a dispatch is legitimate — the voice layer repairs it
+      ...this.claudeCodeReflex(),
       ...o.reflexOptions,
       tools,
       // Composed AFTER the spread so the dispatch guard can't be dropped by reflexOptions.
       hooks: composeHooks(this.dispatchGuard(), o.reflexOptions?.hooks)
     });
   }
+  /** A claude-code/* reflex (the keyless stand-in when the fast model's provider has no key): Claude Code runs its own
+   *  tool loop and takes no host tool schemas, so the reflex's tools (Act/Think/Hold…) reach it through the in-process
+   *  `agentx` MCP bridge (ccBridge 'all', which needs a warm session), with Claude Code's OWN tools off (`tools: []`) and
+   *  no other MCP server — the reflex only talks and routes; real work still goes through Act and its policy. */
+  claudeCodeReflex() {
+    const o = this.options;
+    if (!o.reflexModel.startsWith("claude-code/")) return {};
+    const po = o.providerOptionsFor?.(o.reflexModel) ?? {};
+    return {
+      ccBridge: "all",
+      providerOptions: { ...po, claudeCodeSession: po.claudeCodeSession ?? crypto.randomUUID(), tools: [], mcpServers: {}, strictMcpConfig: true }
+    };
+  }
   /** Resolve memory tools + inject index into voice system prompt (once). */
   async initMemory() {
     if (!this.memoryReady) return;
@@ -9790,7 +10111,8 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
     await this.drainReflex();
     this.scrubLeakFromTranscript();
     this.scrubHeldText();
-    if (this.silentTurn) await this.ackIfSilent(fallback);
+    if (this.silentTurn && res?.finishReason === "error" && refusedCall(res.error)) this.emitHost({ kind: "text_delta", message: fallback ?? _DuplexAgent.FALLBACK_ERROR });
+    else if (this.silentTurn) await this.ackIfSilent(fallback);
   }
   /** Remove complete stage-direction parentheticals from the UNFORWARDED reflex text (STAGE_DIRECTION_RE).
    *  Only the unforwarded region is touched — already-spoken audio can't be unsent, and splicing before
@@ -9896,6 +10218,7 @@ ${nowLine()}. Anchor every relative or time-sensitive reference \u2014 "today",
    *  hosts/tests key on it. */
   static FALLBACK_ACKS = ["Okay, on it.", "On it.", "Alright, working on it."];
   static FALLBACK_RETRY = ["Sorry, could you say that again?", "Hm, I missed that \u2014 could you say that again?"];
+  static FALLBACK_ERROR = "Sorry, I couldn't answer that \u2014 something went wrong on my side.";
   static FALLBACK_OWN = ["Sorry, I lost my train of thought there \u2014 give me that one more time?", "Hm, I got tangled up \u2014 ask me that once more?"];
   lastFallback = "";
   /** One user turn: the voice agent streams the reply (and may Act/Think). Serialized with re-voice turns.
@@ -10554,14 +10877,14 @@ Another agent just implemented the above. Independently check the CURRENT state
    *  '[task <id> asks] …' and resolves with the user's answer via AnswerTask — or '' on timeout/
    *  task settle (callers map '' to deny / best-judgment). Workers never block forever. */
   parkQuestion(askId, question) {
-    return new Promise((resolve5) => {
+    return new Promise((resolve6) => {
       let settled = false;
       const finish = (answer) => {
         if (settled) return;
         settled = true;
         clearTimeout(timer);
         this.pendingAsks.delete(askId);
-        resolve5(answer);
+        resolve6(answer);
       };
       const timer = setTimeout(() => {
         this.notify("task_ask_timeout", `task ${askId}: question timed out \u2014 proceeding without an answer`);
@@ -11308,11 +11631,11 @@ function buildMcpCatalog(servers) {
   }
   return { specs, routes };
 }
-function searchOverCatalog(servers, specs, routes, resolve5, options) {
+function searchOverCatalog(servers, specs, routes, resolve6, options) {
   const tools = specs.length ? makeMcpToolSearch(specs, (name, args, o) => {
     const r = routes.get(name);
     if (!r) throw new Error(`unknown MCP tool '${name}' \u2014 use ToolSearch to find valid names`);
-    return resolve5(r.server, r.rawName, args ?? {}, o);
+    return resolve6(r.server, r.rawName, args ?? {}, o);
   }, options) : [];
   return { tools, serverNames: servers, toolCount: specs.length };
 }
@@ -11330,6 +11653,7 @@ import { MemFilesystem as MemFilesystem3, IndexedDbFilesystem, CommandExecutor a
 
 // src/mcp.client.ts
 init_logging();
+init_platform();
 import { spawn } from "child_process";
 import { createHash } from "crypto";
 var log23 = forComponent("mcp");
@@ -11357,7 +11681,9 @@ var StdioTransport = class {
   pending = /* @__PURE__ */ new Map();
   async start() {
     const { command, args = [], env, cwd } = this.spec;
-    const proc = spawn(command, args, { stdio: ["pipe", "pipe", "pipe"], env: { ...process.env, ...env }, cwd });
+    const childEnv2 = { ...process.env, ...env };
+    const sp = resolveSpawn(command, args, childEnv2);
+    const proc = spawn(sp.command, sp.args, { stdio: ["pipe", "pipe", "pipe"], env: childEnv2, cwd, ...IS_WIN ? { windowsHide: true, windowsVerbatimArguments: sp.windowsVerbatimArguments } : {} });
     this.proc = proc;
     proc.stdout.setEncoding("utf8");
     proc.stdout.on("data", (chunk) => this.onData(chunk));
@@ -11414,7 +11740,7 @@ var StdioTransport = class {
     const id = this.nextId++;
     const timeoutMs = deadlineFor(method, this.spec, opts);
     const { signal, onProgress } = opts;
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       if (signal?.aborted) return reject(abortError(signal));
       const timer = timeoutMs > 0 ? setTimeout(() => {
         this.pending.delete(id);
@@ -11429,7 +11755,7 @@ var StdioTransport = class {
       };
       const done = () => signal?.removeEventListener("abort", onAbort);
       signal?.addEventListener("abort", onAbort, { once: true });
-      this.pending.set(id, { resolve: resolve5, reject, timer, onProgress, done });
+      this.pending.set(id, { resolve: resolve6, reject, timer, onProgress, done });
       try {
         this.write({ jsonrpc: "2.0", id, method, params: onProgress ? withProgressToken(params, id) : params });
       } catch (e) {
@@ -11450,7 +11776,7 @@ var StdioTransport = class {
     } catch (e) {
       log23.debug("stdin end failed", e);
     }
-    this.proc?.kill();
+    if (!(IS_WIN && killTree(this.proc?.pid, "SIGTERM"))) this.proc?.kill();
   }
 };
 var McpAuthError = class extends Error {
@@ -11613,12 +11939,12 @@ function buildTransport(cfg) {
 }
 function withTimeout(p, ms, label) {
   if (!ms || ms <= 0) return p;
-  return new Promise((resolve5, reject) => {
+  return new Promise((resolve6, reject) => {
     const timer = setTimeout(() => reject(new Error(`MCP "${label}" mount exceeded ${ms}ms`)), ms);
     timer.unref?.();
     p.then((v) => {
       clearTimeout(timer);
-      resolve5(v);
+      resolve6(v);
     }, (e) => {
       clearTimeout(timer);
       reject(e);
@@ -11739,7 +12065,7 @@ var defaultPool = new McpPool();
 import { createServer } from "http";
 import { randomBytes as randomBytes2, createHash as createHash2 } from "crypto";
 import { readFileSync as readFileSync4, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, existsSync } from "fs";
-import { dirname as dirname2 } from "path";
+import { dirname as dirname3 } from "path";
 var McpOAuthOptions = class {
   /** Where to persist tokens. Mode 0600. */
   storePath = ".agent/mcp-auth.json";
@@ -11772,7 +12098,7 @@ var McpOAuth = class {
     }
   }
   save(store) {
-    mkdirSync3(dirname2(this.options.storePath), { recursive: true });
+    mkdirSync3(dirname3(this.options.storePath), { recursive: true });
     writeFileSync3(this.options.storePath, JSON.stringify(store, null, 2), { mode: 384 });
   }
   // -- ATTENDED: one-time authorization ----------------------------------------
@@ -11864,7 +12190,7 @@ var McpOAuth = class {
   }
   /** Start a one-route loopback server, open the browser, and resolve with the returned auth code. */
   captureCode(authEndpoint, clientId, challenge, state) {
-    return new Promise((resolve5, reject) => {
+    return new Promise((resolve6, reject) => {
       const server = createServer((req, res) => {
         const url = new URL(req.url ?? "/", "http://127.0.0.1");
         if (url.pathname !== "/callback") {
@@ -11878,7 +12204,7 @@ var McpOAuth = class {
         clearTimeout(timer);
         if (gotState !== state) return reject(new Error("OAuth state mismatch (possible CSRF) \u2014 aborting"));
         if (!code) return reject(new Error(`authorization failed: ${url.searchParams.get("error") ?? "no code"}`));
-        resolve5({ code, redirectUri });
+        resolve6({ code, redirectUri });
       });
       let redirectUri = "";
       const timer = setTimeout(() => {
@@ -11923,26 +12249,33 @@ function b64url(buf) {
   return buf.toString("base64").replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
 }
 function defaultOpenBrowser(url) {
-  const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
-  const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-  import("child_process").then(({ spawn: spawn4 }) => spawn4(cmd, args, { stdio: "ignore", detached: true }).unref());
+  const win = process.platform === "win32";
+  const cmd = process.platform === "darwin" ? "open" : win ? "rundll32.exe" : "xdg-open";
+  const args = win ? ["url.dll,FileProtocolHandler", url] : [url];
+  import("child_process").then(({ spawn: spawn4 }) => spawn4(cmd, args, { stdio: "ignore", ...win ? { windowsHide: true } : { detached: true } }).unref());
 }
 
 // cli/core.ts
 import { randomUUID } from "crypto";
-import { execFile as execFile2 } from "child_process";
-import { resolve as resolve2, basename, join as join5 } from "path";
+import { execFile as execFile3 } from "child_process";
+import { resolve as resolve3, basename as basename3, join as join6 } from "path";
 import { existsSync as existsSync3, mkdirSync as mkdirSync4 } from "fs";
 import { platform, arch, release, userInfo, homedir as homedir2, tmpdir } from "os";
 init_tools_shell();
 
 // src/tools.notify.ts
 init_logging();
-import { execFile } from "child_process";
+import { execFile as execFile2 } from "child_process";
 var log25 = forComponent("notify");
+var WIN_TOAST = [
+  "[Windows.UI.Notifications.ToastNotificationManager, Windows.UI.Notifications, ContentType = WindowsRuntime] | Out-Null",
+  "$t = [Windows.UI.Notifications.ToastNotificationManager]::GetTemplateContent([Windows.UI.Notifications.ToastTemplateType]::ToastText02)",
+  '$n = $t.GetElementsByTagName("text"); $n.Item(0).AppendChild($t.CreateTextNode($env:AGENTX_NOTIFY_TITLE)) | Out-Null; $n.Item(1).AppendChild($t.CreateTextNode($env:AGENTX_NOTIFY_BODY)) | Out-Null',
+  '[Windows.UI.Notifications.ToastNotificationManager]::CreateToastNotifier("{1AC14E77-02E7-4E5D-B744-2EB1AE5198B7}\\WindowsPowerShell\\v1.0\\powershell.exe").Show([Windows.UI.Notifications.ToastNotification]::new($t))'
+].join("; ");
 function makeNotifyTool(opts = {}) {
   const platform2 = opts.platform ?? process.platform;
-  const run = opts.exec ?? execFile;
+  const run = opts.exec ?? execFile2;
   return {
     name: "PushNotification",
     description: "Show an OS desktop notification to the user (out-of-band alert \u2014 e.g. a long task finished, input is needed). Use sparingly: only for events the user would want to be interrupted for.",
@@ -11958,14 +12291,15 @@ function makeNotifyTool(opts = {}) {
       const msg = String(message ?? "").slice(0, 256);
       const head = String(title ?? "agentx").slice(0, 64);
       if (!msg) return "Error: empty message";
-      const argv = platform2 === "darwin" ? ["osascript", ["-e", `display notification ${JSON.stringify(msg)} with title ${JSON.stringify(head)}`]] : platform2 === "linux" ? ["notify-send", [head, msg]] : null;
+      const argv = platform2 === "darwin" ? ["osascript", ["-e", `display notification ${JSON.stringify(msg)} with title ${JSON.stringify(head)}`]] : platform2 === "linux" ? ["notify-send", [head, msg]] : platform2 === "win32" ? ["powershell.exe", ["-NoProfile", "-NonInteractive", "-Command", WIN_TOAST]] : null;
       if (!argv) return `Notifications unavailable on ${platform2}.`;
-      return new Promise((resolve5) => {
-        run(argv[0], argv[1], { timeout: 5e3 }, (e) => {
+      const extra = platform2 === "win32" ? { windowsHide: true, env: { ...process.env, AGENTX_NOTIFY_TITLE: head, AGENTX_NOTIFY_BODY: msg } } : {};
+      return new Promise((resolve6) => {
+        run(argv[0], argv[1], { timeout: 5e3, ...extra }, (e) => {
           if (e) {
             log25.debug("notification failed", e);
-            resolve5(`Notification failed: ${e.message}`);
-          } else resolve5("Notification shown.");
+            resolve6(`Notification failed: ${e.message}`);
+          } else resolve6("Notification shown.");
         });
       });
     }
@@ -12013,13 +12347,15 @@ function readJsonFile(path, fallback) {
 }
 
 // cli/core.ts
+init_hostPath();
+init_platform();
 var DEFAULT_TOOLS = ["bash", "Read", "Edit", "Write", "Grep", "Glob", "MultiEdit", "ApplyEdits", "RepoMap", "TodoWrite"];
 function autoWebTools() {
   return ["WebFetch", "WebSearch"];
 }
 function pdfTextViaPoppler(path) {
   return new Promise((res, rej) => {
-    execFile2("pdftotext", [path, "-"], { maxBuffer: 32 * 1024 * 1024, timeout: 3e4 }, (e, stdout) => {
+    execFile3("pdftotext", [path, "-"], { maxBuffer: 32 * 1024 * 1024, timeout: 3e4 }, (e, stdout) => {
       if (e) rej(new Error(/ENOENT/.test(String(e.code ?? e.message)) ? "pdftotext not installed (brew/apt install poppler)" : e.message));
       else res(stdout);
     });
@@ -12083,7 +12419,7 @@ function toClaudeCodeMcp(servers) {
 function claudeCodeProviderOptions(model, cwd, mcpServers) {
   if (!(model ?? "").startsWith("claude-code/")) return void 0;
   const env = (() => {
-    const base = process.env.AGENTX_CC_USE_API_KEY ? process.env : (({ ANTHROPIC_API_KEY, ANTHROPIC_AUTH_TOKEN, ...rest }) => rest)(process.env);
+    const base = plainEnv(process.env, process.env.AGENTX_CC_USE_API_KEY ? [] : ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN"]);
     return { ENABLE_CLAUDEAI_MCP_SERVERS: "false", ...base };
   })();
   const warm = process.env.AGENTX_CC_WARM === "0" ? {} : { claudeCodeSession: randomUUID() };
@@ -12097,7 +12433,7 @@ async function buildAgent(o) {
     throw new Error(
       "buildAgent: explicit `sandbox` required \u2014 false = disk (the REAL filesystem, full reach like Claude Code; secrets still hidden) or true = sandbox (an in-memory copy of cwd; the real disk is never modified). This forces a conscious sandboxing decision."
     );
-  const cwd = resolve2(o.cwd ?? process.cwd());
+  const cwd = resolve3(o.cwd ?? process.cwd());
   const disk = new NodeDiskFilesystem("/", { denySymlinks: false });
   await disk.init();
   const jailedDisk = new JailedFilesystem(disk);
@@ -12111,21 +12447,22 @@ async function buildAgent(o) {
       `${isCursor ? "cursor" : "claude-code"}/* models cannot run in --sandbox/--boddb: the delegated agent runs its own real-disk tools and bypasses the VFS jail. Use disk mode (default).`
     );
   let fs = jailedDisk;
+  const vcwd = toVfsPath(cwd);
   if (o.sandbox) {
-    const mem = new MemFilesystem3();
-    await mkdirp(mem, cwd);
-    await hydrate(jailedDisk, mem, cwd);
-    mem.setCwd(cwd);
+    const mem = withHostPaths(new MemFilesystem3());
+    await mkdirp(mem, vcwd);
+    await hydrate(jailedDisk, mem, vcwd);
+    mem.setCwd(vcwd);
     fs = mem;
   } else if (o.boddb) {
-    const root = resolve2(o.boddb);
+    const root = resolve3(o.boddb);
     mkdirSync4(root, { recursive: true });
-    const db = new BodDB2({ path: join5(root, "meta.db"), sweepInterval: 0, vfs: { storageRoot: join5(root, "files") } });
-    const bod = new BodDbFilesystem(db);
+    const db = new BodDB2({ path: join6(root, "meta.db"), sweepInterval: 0, vfs: { storageRoot: join6(root, "files") } });
+    const bod = withHostPaths(new BodDbFilesystem(db));
     const firstRun = (await bod.readDir("/").catch(() => [])).length === 0;
-    await mkdirp(bod, cwd);
-    if (o.seed && firstRun) await hydrate(jailedDisk, bod, cwd);
-    bod.setCwd(cwd);
+    await mkdirp(bod, vcwd);
+    if (o.seed && firstRun) await hydrate(jailedDisk, bod, vcwd);
+    bod.setCwd(vcwd);
     fs = bod;
   }
   let mountNote = "";
@@ -12134,8 +12471,8 @@ async function buildAgent(o) {
     const mounts = [];
     const notes = [];
     for (const d of o.addDirs) {
-      const abs = resolve2(d);
-      let name = basename(abs) || "dir", prefix = `/${name}`, n = 2;
+      const abs = resolve3(d);
+      let name = basename3(abs) || "dir", prefix = `/${name}`, n = 2;
       while (used.has(prefix)) prefix = `/${name}-${n++}`;
       used.add(prefix);
       const md = new NodeDiskFilesystem(abs);
@@ -12187,7 +12524,7 @@ Reference files in them by their mount path (the left side).`;
     });
     realShell = [makeRealShellTool({ cwd, registry: jobs, osSandbox: o.osSandbox, jobsSurviveRun: o.singleRun !== true }), ...makeShellJobTools(jobs)];
   }
-  const scratchDir = o.scratch ? o.scratchDir ?? (virtual ? `${cwd}/.agent/scratch` : `${tmpdir()}/agentx-scratch-${process.pid}`) : void 0;
+  const scratchDir = o.scratch ? o.scratchDir ?? (virtual ? `${vcwd}/.agent/scratch` : toVfsPath(`${tmpdir()}/agentx-scratch-${process.pid}`)) : void 0;
   const scratch = scratchDir ? new Scratch(fs, { dir: scratchDir }) : void 0;
   return agentRef.agent = new Agent({
     ai: o.ai,
@@ -12212,12 +12549,13 @@ Reference files in them by their mount path (the left side).`;
       const envNote = `Current date: ${now4.toLocaleDateString("en-CA")} ${now4.toLocaleTimeString("en-GB", { hour: "2-digit", minute: "2-digit" })} (${Intl.DateTimeFormat().resolvedOptions().timeZone})
 Platform: ${platformNames[platform()] ?? platform()} ${arch()} (${release()})
 User: ${userInfo().username}
-Shell: ${process.env.SHELL ?? "unknown"}`;
+Shell: ${process.env.SHELL ?? (isWinPaths() ? defaultShell().label : "unknown")}`;
       const cwdNote = o.boddb ? `Working directory: ${cwd}
 DATABASE WORKSPACE: your files live in a database (bod-db), not on the real disk \u2014 the real disk is never modified and nothing outside this tree exists. Use paths relative to the working directory, or absolute paths under it.` : o.sandbox ? `Working directory: ${cwd}
 SANDBOX: you operate on an in-memory COPY of this directory \u2014 the real disk is never modified and nothing outside it exists. Use paths relative to the working directory, or absolute paths under it.` : `Working directory: ${cwd}
-The filesystem root '/' is the real machine root \u2014 you have full filesystem access, like a normal shell. Use paths relative to the working directory, or absolute paths. Secret files (.env, .ssh, keys, .git) are hidden for safety.`;
-      const shellNote = useRealShell && !virtual ? "The `Shell` tool runs /bin/sh \u2014 you can run any installed binary (git, bun, node, curl, etc). Use `Shell` for all shell commands." : void 0;
+The filesystem root '/' is the real machine root \u2014 you have full filesystem access, like a normal shell. Use paths relative to the working directory, or absolute paths. Secret files (.env, .ssh, keys, .git) are hidden for safety.` + (isWinPaths() ? `
+Windows paths: file tools accept ${cwd} style paths and the same path written ${vcwd} (drive letter as the first segment); tool results list paths in the ${vcwd.split("/").slice(0, 2).join("/")}/\u2026 form. '/' itself lists the drives.` : "");
+      const shellNote = useRealShell && !virtual ? `The \`Shell\` tool runs ${defaultShell().label} \u2014 you can run any installed binary (git, bun, node, curl, etc). Use \`Shell\` for all shell commands.` : void 0;
       const toneNote = "Be concise. Do not use emojis unless the user asks. Do not explain what you are about to do \u2014 just do it.";
       const mcpNote = (() => {
         const names = new Set(Object.keys(o.mcpServers ?? {}));
@@ -12300,10 +12638,11 @@ var trunc = (s, n) => (s == null ? "" : String(s).length > n ? String(s).slice(0
 
 // cli/voice.ts
 init_logging();
-import { spawn as spawn2, spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync6, statSync as statSync5 } from "fs";
+init_platform();
+import { spawn as spawn2, spawnSync as spawnSync3 } from "child_process";
+import { existsSync as existsSync4, mkdirSync as mkdirSync5, readFileSync as readFileSync6, statSync as statSync6 } from "fs";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname3, join as join6 } from "path";
+import { dirname as dirname4, join as join7 } from "path";
 import { fileURLToPath } from "url";
 var log27 = forComponent("VoiceIO");
 var now3 = () => performance.now();
@@ -12346,10 +12685,10 @@ var Player = class {
     this.proc = null;
   }
 };
-var nativeDir = () => join6(dirname3(fileURLToPath(import.meta.url)), "native");
+var nativeDir = () => join7(dirname4(fileURLToPath(import.meta.url)), "native");
 function detectFfmpegMic() {
   if (process.env.MIC_DEVICE) return process.env.MIC_DEVICE;
-  const r = spawnSync2("ffmpeg", ["-f", "avfoundation", "-list_devices", "true", "-i", ""], { encoding: "utf8" });
+  const r = spawnSync3("ffmpeg", ["-f", "avfoundation", "-list_devices", "true", "-i", ""], { encoding: "utf8" });
   if (r.error?.code === "ENOENT") throw new Error("ffmpeg not installed \u2014 run `brew install ffmpeg` to enable voice");
   if (r.error) throw new Error(`ffmpeg failed to run (${r.error.message}) \u2014 likely a wrong-arch binary; run \`brew reinstall ffmpeg\``);
   const out = r.stderr ?? "";
@@ -12360,13 +12699,24 @@ function detectFfmpegMic() {
   log27.debug(`ffmpeg mic: [${mic.idx}] ${mic.name}`);
   return `:${mic.idx}`;
 }
+function detectDshowMic() {
+  const env = process.env.MIC_DEVICE;
+  if (env) return env.startsWith("audio=") ? env : `audio=${env}`;
+  const r = spawnSync3("ffmpeg", ["-hide_banner", "-list_devices", "true", "-f", "dshow", "-i", "dummy"], { encoding: "utf8", windowsHide: true });
+  if (r.error?.code === "ENOENT") throw new Error("ffmpeg not installed \u2014 install it (e.g. `winget install ffmpeg`) and put it on PATH to enable voice");
+  const devices = [...(r.stderr ?? "").matchAll(/"([^"]+)"\s*\(audio\)/g)].map((m) => m[1]);
+  const mic = devices.find((d) => !/stereo mix|loopback|virtual|cable|teams/i.test(d)) ?? devices[0];
+  if (!mic) throw new Error("no audio input device found (set MIC_DEVICE to the DirectShow device name)");
+  log27.debug(`ffmpeg dshow mic: ${mic}`);
+  return `audio=${mic}`;
+}
 function detectedInputDevice() {
   if (process.platform !== "darwin") return null;
   let name = "";
-  if (spawnSync2("which", ["SwitchAudioSource"]).status === 0) {
-    name = (spawnSync2("SwitchAudioSource", ["-c", "-t", "input"], { encoding: "utf8" }).stdout || "").trim();
+  if (spawnSync3("which", ["SwitchAudioSource"]).status === 0) {
+    name = (spawnSync3("SwitchAudioSource", ["-c", "-t", "input"], { encoding: "utf8" }).stdout || "").trim();
   } else {
-    const out = spawnSync2("system_profiler", ["SPAudioDataType"], { encoding: "utf8" }).stdout || "";
+    const out = spawnSync3("system_profiler", ["SPAudioDataType"], { encoding: "utf8" }).stdout || "";
     let last = "";
     for (const ln of out.split("\n")) {
       const hdr = ln.match(/^\s{6,}(\S.*?):\s*$/);
@@ -12385,21 +12735,21 @@ function detectedInputDevice() {
 }
 function resolveAecBinary() {
   if (process.env.MIC_AEC === "0" || process.platform !== "darwin") return null;
-  const src = join6(nativeDir(), "mic-aec.swift");
-  const plist = join6(nativeDir(), "Info.plist");
+  const src = join7(nativeDir(), "mic-aec.swift");
+  const plist = join7(nativeDir(), "Info.plist");
   if (!existsSync4(src)) return null;
-  const cacheDir = join6(homedir3(), ".agent", "cache");
-  const bin = join6(cacheDir, "mic-aec");
-  if (existsSync4(bin) && statSync5(bin).mtimeMs >= statSync5(src).mtimeMs) return bin;
-  if (spawnSync2("which", ["swiftc"]).status !== 0) return null;
+  const cacheDir = join7(homedir3(), ".agent", "cache");
+  const bin = join7(cacheDir, "mic-aec");
+  if (existsSync4(bin) && statSync6(bin).mtimeMs >= statSync6(src).mtimeMs) return bin;
+  if (spawnSync3("which", ["swiftc"]).status !== 0) return null;
   mkdirSync5(cacheDir, { recursive: true });
   log27.info("compiling AEC mic helper (first run)\u2026");
-  const build = spawnSync2("swiftc", ["-O", "-o", bin, src, "-Xlinker", "-sectcreate", "-Xlinker", "__TEXT", "-Xlinker", "__info_plist", "-Xlinker", plist], { encoding: "utf8" });
+  const build = spawnSync3("swiftc", ["-O", "-o", bin, src, "-Xlinker", "-sectcreate", "-Xlinker", "__TEXT", "-Xlinker", "__info_plist", "-Xlinker", plist], { encoding: "utf8" });
   if (build.status !== 0) {
     log27.warn(`AEC build failed: ${build.stderr?.slice(0, 400)}`);
     return null;
   }
-  const sign = spawnSync2("codesign", ["-fs", "-", bin], { encoding: "utf8" });
+  const sign = spawnSync3("codesign", ["-fs", "-", bin], { encoding: "utf8" });
   if (sign.status !== 0) {
     log27.warn(`codesign failed: ${sign.stderr?.slice(0, 200)}`);
     return null;
@@ -12409,14 +12759,14 @@ function resolveAecBinary() {
 function openMicSettings() {
   if (process.platform !== "darwin") return;
   try {
-    spawnSync2("open", ["x-apple.systempreferences:com.apple.preference.security?Privacy_Microphone"]);
+    spawnSync3("open", ["x-apple.systempreferences:com.apple.preference.security?Privacy_Microphone"]);
   } catch {
   }
 }
 function micPermissionStatus() {
   const bin = resolveAecBinary();
   if (!bin) return null;
-  const r = spawnSync2(bin, ["--check-mic"], { encoding: "utf8" });
+  const r = spawnSync3(bin, ["--check-mic"], { encoding: "utf8" });
   const out = (r.stdout ?? "").trim();
   if (out === "authorized") return "authorized";
   if (out === "denied" || out === "restricted") return "denied";
@@ -12426,7 +12776,7 @@ function micPermissionStatus() {
 function aecUnavailableHint() {
   if (process.env.MIC_AEC === "0" || process.platform !== "darwin") return null;
   if (resolveAecBinary()) return null;
-  if (spawnSync2("which", ["swiftc"]).status !== 0) return "install Xcode CLI tools (`xcode-select --install`) for echo cancellation";
+  if (spawnSync3("which", ["swiftc"]).status !== 0) return "install Xcode CLI tools (`xcode-select --install`) for echo cancellation";
   return null;
 }
 var NodeMicSource = class {
@@ -12442,12 +12792,13 @@ var NodeMicSource = class {
     if (this.bin) {
       this.proc = spawn2(this.bin, [], { stdio: ["ignore", "pipe", "ignore"] });
     } else {
-      if (spawnSync2("which", ["ffmpeg"]).status !== 0) throw new Error("voice I/O unavailable: no AEC helper and no ffmpeg on PATH");
+      if (!hasCommand("ffmpeg")) throw new Error("voice I/O unavailable: no AEC helper and no ffmpeg on PATH");
       log27.info("mic: raw capture (no AEC) \u2014 echo handled heuristically; headphones recommended");
+      const input = process.platform === "win32" ? ["-f", "dshow", "-i", detectDshowMic()] : ["-f", "avfoundation", "-i", detectFfmpegMic()];
       this.proc = spawn2(
         "ffmpeg",
-        ["-loglevel", "error", "-f", "avfoundation", "-i", detectFfmpegMic(), "-ar", String(STT_SAMPLE_RATE), "-ac", "1", "-f", "s16le", "-"],
-        { stdio: ["ignore", "pipe", "pipe"] }
+        ["-loglevel", "error", ...input, "-ar", String(STT_SAMPLE_RATE), "-ac", "1", "-f", "s16le", "-"],
+        { stdio: ["ignore", "pipe", "pipe"], ...process.platform === "win32" ? { windowsHide: true } : {} }
       );
       this.proc.stderr.on("data", (d) => log27.warn(`ffmpeg: ${String(d).trim()}`));
     }
@@ -12834,7 +13185,7 @@ function fakeVoiceParts(uttFile) {
 // src/voice/diagSink.ts
 init_logging();
 import { appendFile, mkdirSync as mkdirSync6 } from "fs";
-import { dirname as dirname4 } from "path";
+import { dirname as dirname5 } from "path";
 var log28 = forComponent("VoiceDiag");
 var JsonlDiagSink = class {
   constructor(path) {
@@ -12859,7 +13210,7 @@ var JsonlDiagSink = class {
     if (this.writing || this.disabled || !this.queue.length) return;
     if (!this.dirReady) {
       try {
-        mkdirSync6(dirname4(this.path), { recursive: true });
+        mkdirSync6(dirname5(this.path), { recursive: true });
         this.dirReady = true;
       } catch (e) {
         return this.disable(e);
@@ -12891,13 +13242,13 @@ var JsonlDiagSink = class {
 // cli/config.ts
 import { homedir as homedir5 } from "os";
 import { existsSync as existsSync5, readFileSync as readFileSync7 } from "fs";
-import { join as join8 } from "path";
+import { join as join9 } from "path";
 import { pathToFileURL } from "url";
 
 // cli/permissions.ts
 import { writeFileSync as writeFileSync4, mkdirSync as mkdirSync7 } from "fs";
 import { homedir as homedir4 } from "os";
-import { join as join7 } from "path";
+import { join as join8 } from "path";
 var RULE_RE = /^(\w[\w*-]*)(?:\((.+)\))?$/;
 function parseOne(raw, decision) {
   const m = RULE_RE.exec(raw.trim());
@@ -12919,13 +13270,13 @@ function parsePermRules(perms, explicit = false) {
 function describeRule(r) {
   return `${r.decision.padEnd(5)} ${r.tool ?? "*"}${r.pathGlob ? `(${r.pathGlob})` : ""}`;
 }
-var PERM_FILE = (cwd) => join7(cwd, ".agent", "permissions.json");
+var PERM_FILE = (cwd) => join8(cwd, ".agent", "permissions.json");
 function loadPersistedRules(cwd) {
   const j = readJsonFile(PERM_FILE(cwd), null);
   return j ? { allow: j.allow ?? [], ask: j.ask ?? [], deny: j.deny ?? [] } : {};
 }
 function loadClaudeSettings(cwd, home = homedir4()) {
-  const files = [join7(home, ".claude", "settings.json"), join7(cwd, ".claude", "settings.json"), join7(cwd, ".claude", "settings.local.json")];
+  const files = [join8(home, ".claude", "settings.json"), join8(cwd, ".claude", "settings.json"), join8(cwd, ".claude", "settings.local.json")];
   let out = {};
   for (const p of files) {
     const perms = readJsonFile(p, null)?.permissions;
@@ -12938,7 +13289,7 @@ function persistRule(cwd, decision, ruleStr) {
   const list = cur[decision] ??= [];
   if (!list.includes(ruleStr)) list.push(ruleStr);
   try {
-    mkdirSync7(join7(cwd, ".agent"), { recursive: true });
+    mkdirSync7(join8(cwd, ".agent"), { recursive: true });
     writeFileSync4(PERM_FILE(cwd), JSON.stringify(cur, null, 2) + "\n");
   } catch {
   }
@@ -12952,7 +13303,7 @@ function mergePerms(a, b) {
   }
   return Object.keys(out).length ? out : void 0;
 }
-var TRUST_FILE = join7(homedir4(), ".agent", "trusted.json");
+var TRUST_FILE = join8(homedir4(), ".agent", "trusted.json");
 function isTrusted(cwd, file = TRUST_FILE) {
   const list = readJsonFile(file, []);
   return Array.isArray(list) && list.includes(cwd);
@@ -12962,7 +13313,7 @@ function trustDir(cwd, file = TRUST_FILE) {
   if (!Array.isArray(list)) list = [];
   if (!list.includes(cwd)) list.push(cwd);
   try {
-    mkdirSync7(join7(file, ".."), { recursive: true });
+    mkdirSync7(join8(file, ".."), { recursive: true });
     writeFileSync4(file, JSON.stringify(list, null, 2) + "\n");
   } catch {
   }
@@ -12972,7 +13323,7 @@ function trustDir(cwd, file = TRUST_FILE) {
 var FILES = ["config.ts", "config.js", "config.mjs", "config.json"];
 async function loadFrom(dir) {
   for (const f of FILES) {
-    const p = join8(dir, ".agent", f);
+    const p = join9(dir, ".agent", f);
     if (!existsSync5(p)) continue;
     try {
       const mod = await import(pathToFileURL(p).href, f.endsWith(".json") ? { with: { type: "json" } } : void 0);
@@ -12985,7 +13336,7 @@ async function loadFrom(dir) {
   return {};
 }
 function loadSettings(dir) {
-  const p = join8(dir, ".agent", "settings.json");
+  const p = join9(dir, ".agent", "settings.json");
   if (!existsSync5(p)) return {};
   try {
     const raw = JSON.parse(readFileSync7(p, "utf8"));
@@ -13032,7 +13383,8 @@ function applyOverlay(cfg, file) {
 }
 
 // cli/hooks-config.ts
-import { spawnSync as spawnSync3 } from "child_process";
+import { spawnSync as spawnSync4 } from "child_process";
+init_platform();
 var log29 = forComponent("hooks");
 var escapeRegex = (s) => s.replace(/[.+^${}()|[\]\\]/g, "\\$&");
 function ruleMatches(rule, toolName) {
@@ -13042,8 +13394,10 @@ function ruleMatches(rule, toolName) {
 }
 function runCmd(rule, env) {
   try {
-    const r = spawnSync3(rule.command, {
-      shell: true,
+    const r = spawnSync4(rule.command, {
+      shell: shellOption(),
+      // /bin/sh; Windows: Git Bash when installed (hooks are written in sh)
+      windowsHide: true,
       encoding: "utf8",
       timeout: rule.timeoutMs ?? 1e4,
       env: { ...process.env, ...env }
@@ -13154,26 +13508,45 @@ function formatDiff(ops, opts = {}) {
 }
 
 // cli/session.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync5, readdirSync, renameSync, symlinkSync as symlinkSync2, unlinkSync, readlinkSync, statSync as statSync6 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync5, readdirSync, renameSync, symlinkSync as symlinkSync2, unlinkSync, readlinkSync, statSync as statSync7 } from "fs";
 import { homedir as homedir6 } from "os";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
+init_platform();
 var log30 = forComponent("session");
-var globalDir = () => join9(homedir6(), ".agent", "sessions");
+var globalDir = () => join10(homedir6(), ".agent", "sessions");
+function indexLink(target, link2) {
+  try {
+    symlinkSync2(target, link2);
+  } catch (e) {
+    if (!IS_WIN) throw e;
+    writeFileSync5(link2, JSON.stringify({ agentxSessionLink: target }));
+  }
+}
+function readIndexLink(link2) {
+  try {
+    return readlinkSync(link2);
+  } catch (e) {
+    if (!IS_WIN) throw e;
+    const target = JSON.parse(readFileSync8(link2, "utf8")).agentxSessionLink;
+    if (typeof target !== "string") throw e;
+    return target;
+  }
+}
 var SessionStore = class {
   dir;
   constructor(cwd) {
-    this.dir = join9(cwd, ".agent", "sessions");
+    this.dir = join10(cwd, ".agent", "sessions");
   }
   /** Sortable, human-readable id: `YYYYMMDD-HHMMSS-<folder>`. */
   newId(now4 = Date.now(), cwd) {
     const d = new Date(now4);
     const p = (n, w = 2) => String(n).padStart(w, "0");
-    const slug2 = (cwd ?? process.cwd()).split("/").pop()?.replace(/[^A-Za-z0-9_-]/g, "") || "session";
+    const slug2 = pathTail(cwd ?? process.cwd())?.replace(/[^A-Za-z0-9_-]/g, "") || "session";
     let id = `${d.getFullYear()}${p(d.getMonth() + 1)}${p(d.getDate())}-${p(d.getHours())}${p(d.getMinutes())}${p(d.getSeconds())}-${slug2}`;
-    if (existsSync6(this.dir) && existsSync6(join9(this.dir, `${id}.json`))) {
+    if (existsSync6(this.dir) && existsSync6(join10(this.dir, `${id}.json`))) {
       for (let i = 2; i <= 99; i++) {
         const c = `${id}-${i}`;
-        if (!existsSync6(join9(this.dir, `${c}.json`))) {
+        if (!existsSync6(join10(this.dir, `${c}.json`))) {
           id = c;
           break;
         }
@@ -13188,15 +13561,15 @@ var SessionStore = class {
   save(data) {
     if (!this.safeId(data.meta.id)) throw new Error(`unsafe session id: ${data.meta.id}`);
     if (!existsSync6(this.dir)) mkdirSync8(this.dir, { recursive: true });
-    const path = join9(this.dir, `${data.meta.id}.json`);
+    const path = join10(this.dir, `${data.meta.id}.json`);
     const tmp = `${path}.${process.pid}.tmp`;
     writeFileSync5(tmp, JSON.stringify(data));
     renameSync(tmp, path);
     try {
       const gd = globalDir();
       if (!existsSync6(gd)) mkdirSync8(gd, { recursive: true });
-      const link2 = join9(gd, `${data.meta.id}.json`);
-      if (!existsSync6(link2)) symlinkSync2(path, link2);
+      const link2 = join10(gd, `${data.meta.id}.json`);
+      if (!existsSync6(link2)) indexLink(path, link2);
     } catch {
     }
   }
@@ -13205,7 +13578,7 @@ var SessionStore = class {
       log30.debug(`rejecting unsafe session id: ${id}`);
       return void 0;
     }
-    const path = join9(this.dir, `${id}.json`);
+    const path = join10(this.dir, `${id}.json`);
     if (!existsSync6(path)) return void 0;
     try {
       return JSON.parse(readFileSync8(path, "utf8"));
@@ -13221,7 +13594,7 @@ var SessionStore = class {
     for (const f of readdirSync(this.dir)) {
       if (!f.endsWith(".json")) continue;
       try {
-        metas.push(JSON.parse(readFileSync8(join9(this.dir, f), "utf8")).meta);
+        metas.push(JSON.parse(readFileSync8(join10(this.dir, f), "utf8")).meta);
       } catch (e) {
         log30.debug(`skipping unreadable session file ${f}`, e);
       }
@@ -13236,7 +13609,7 @@ var SessionStore = class {
     for (const f of readdirSync(this.dir)) {
       if (!f.endsWith(".json")) continue;
       try {
-        const st = statSync6(join9(this.dir, f));
+        const st = statSync7(join10(this.dir, f));
         out.push({ id: f.slice(0, -5), mtime: st.mtimeMs, size: st.size });
       } catch {
       }
@@ -13255,10 +13628,10 @@ var SessionStore = class {
 function globalSessionLoad(idOrPrefix) {
   const gd = globalDir();
   if (!existsSync6(gd)) return void 0;
-  const exact = join9(gd, `${idOrPrefix}.json`);
+  const exact = join10(gd, `${idOrPrefix}.json`);
   if (existsSync6(exact)) {
     try {
-      const target = readlinkSync(exact);
+      const target = readIndexLink(exact);
       return JSON.parse(readFileSync8(target, "utf8"));
     } catch {
       return void 0;
@@ -13269,7 +13642,7 @@ function globalSessionLoad(idOrPrefix) {
       if (!f.endsWith(".json")) continue;
       const base = f.slice(0, -5);
       if (base.includes(idOrPrefix) || base.endsWith(idOrPrefix)) {
-        const target = readlinkSync(join9(gd, f));
+        const target = readIndexLink(join10(gd, f));
         return JSON.parse(readFileSync8(target, "utf8"));
       }
     }
@@ -13284,10 +13657,10 @@ function globalSessionList() {
   for (const f of readdirSync(gd)) {
     if (!f.endsWith(".json")) continue;
     try {
-      const target = readlinkSync(join9(gd, f));
+      const target = readIndexLink(join10(gd, f));
       if (!existsSync6(target)) {
         try {
-          unlinkSync(join9(gd, f));
+          unlinkSync(join10(gd, f));
         } catch {
         }
         continue;
@@ -13457,17 +13830,17 @@ ${formatDiff(ops)}`);
 };
 
 // cli/gitCheckpoints.ts
-import { execFile as execFile3 } from "child_process";
+import { execFile as execFile4 } from "child_process";
 import { promisify } from "util";
 import { writeFileSync as writeFileSync6, mkdirSync as mkdirSync9 } from "fs";
 import { homedir as homedir7 } from "os";
-import { join as join10, resolve as resolve3, sep as sep3, parse as parsePath } from "path";
+import { join as join11, resolve as resolve4, sep as sep3, parse as parsePath } from "path";
 var log31 = forComponent("checkpoints");
-var exec = promisify(execFile3);
+var exec = promisify(execFile4);
 var DEFAULT_EXCLUDE = [".agent/", ".git/", "node_modules/", "dist/", "build/", ".next/", "target/", ".venv/", "__pycache__/", "*.log"];
 function isBroadRoot(p) {
-  const abs = resolve3(p);
-  return abs === resolve3(homedir7()) || abs === parsePath(abs).root;
+  const abs = resolve4(p);
+  return abs === resolve4(homedir7()) || abs === parsePath(abs).root;
 }
 var ShadowRepo = class {
   // undefined = unprobed; false = git/this root unusable
@@ -13504,8 +13877,8 @@ var ShadowRepo = class {
       mkdirSync9(this.gitDir, { recursive: true });
       const valid = await this.run("rev-parse", "--git-dir").then(() => true, () => false);
       if (!valid) await this.run("init", "-q");
-      mkdirSync9(join10(this.gitDir, "info"), { recursive: true });
-      writeFileSync6(join10(this.gitDir, "info", "exclude"), this.exclude.join("\n") + "\n");
+      mkdirSync9(join11(this.gitDir, "info"), { recursive: true });
+      writeFileSync6(join11(this.gitDir, "info", "exclude"), this.exclude.join("\n") + "\n");
       this.ready = true;
     } catch (e) {
       log31.debug(`git checkpoints unavailable for ${this.workTree}`, e);
@@ -13614,13 +13987,13 @@ var GitCheckpoints = class {
   }
   /** cwd + any add-dir mounts that live OUTSIDE cwd (in-cwd mounts are already covered by the cwd root). */
   roots() {
-    const cwd = resolve3(this.options.workTree);
+    const cwd = resolve4(this.options.workTree);
     const out = [{ workTree: cwd, gitDir: this.options.gitDir }];
     for (const d of this.options.addDirs ?? []) {
-      const abs = resolve3(d);
+      const abs = resolve4(d);
       if (abs === cwd || abs.startsWith(cwd + sep3)) continue;
       if (cwd.startsWith(abs + sep3)) continue;
-      out.push({ workTree: abs, gitDir: join10(abs, ".agent", "checkpoints.git") });
+      out.push({ workTree: abs, gitDir: join11(abs, ".agent", "checkpoints.git") });
     }
     return out;
   }
@@ -13707,7 +14080,7 @@ var GitCheckpoints = class {
       preToolUse: async (call) => {
         if (!this.snapshotted || !this.repos.length) return;
         for (const rel of mutatedPaths(call)) {
-          const abs = resolve3(this.options.workTree, rel);
+          const abs = resolve4(this.options.workTree, rel);
           if (this.forced.has(abs)) continue;
           this.forced.add(abs);
           const i = this.repoIndexFor(abs);
@@ -13763,7 +14136,7 @@ var GitCheckpointsOptions = class {
   /** Real working tree to snapshot (the launch cwd). */
   workTree = process.cwd();
   /** Isolated git dir for the cwd shadow repo (kept out of the user's real .git). */
-  gitDir = join10(process.cwd(), ".agent", "checkpoints.git");
+  gitDir = join11(process.cwd(), ".agent", "checkpoints.git");
   /** Extra mounted dirs (`--add-dir`); those outside cwd each get their own shadow repo. */
   addDirs = [];
   /** Conversation id → per-session restore-point ref. */
@@ -13836,10 +14209,10 @@ function completePath(listDir, ref) {
 
 // cli/lineEditor.ts
 import { emitKeypressEvents } from "readline";
-import { spawnSync as spawnSync4 } from "child_process";
+import { spawnSync as spawnSync5 } from "child_process";
 import { writeFileSync as writeFileSync7, readFileSync as readFileSync9, unlinkSync as unlinkSync2 } from "fs";
 import { tmpdir as tmpdir2 } from "os";
-import { join as join11 } from "path";
+import { join as join12 } from "path";
 
 // cli/bidi.ts
 var RTL_RE = /[\u0590-\u05ff\u0600-\u06ff\u0750-\u077f\u08a0-\u08ff\ufb1d-\ufdff\ufe70-\ufeff]/;
@@ -14336,6 +14709,7 @@ function releaseKeyInput() {
 }
 
 // cli/lineEditor.ts
+init_platform();
 var cpWidth = (cp) => {
   if (cp === 8205 || cp === 65039 || cp >= 768 && cp <= 879) return 0;
   return cp >= 4352 && (cp <= 4447 || cp === 9001 || cp === 9002 || cp >= 11904 && cp <= 42191 && cp !== 12351 || cp >= 44032 && cp <= 55203 || cp >= 63744 && cp <= 64255 || cp >= 65072 && cp <= 65103 || cp >= 65280 && cp <= 65376 || cp >= 65504 && cp <= 65510 || cp >= 126976 && cp <= 129791 || cp >= 131072 && cp <= 262141) ? 2 : 1;
@@ -15024,14 +15398,15 @@ function createLineEditor(out, input = keyInput) {
     curRow = cursorRow;
   }
   function externalEdit(s) {
-    const spec = process.env.VISUAL || process.env.EDITOR || "vi";
+    const spec = process.env.VISUAL || process.env.EDITOR || DEFAULT_EDITOR;
     const [cmd, ...cargs] = spec.split(" ").filter(Boolean);
-    const file = join11(tmpdir2(), `agentx-edit-${process.pid}-${Date.now()}.md`);
+    const file = join12(tmpdir2(), `agentx-edit-${process.pid}-${Date.now()}.md`);
     try {
       writeFileSync7(file, s.buf);
       process.stdin.setRawMode(false);
       out.write("\x1B[?2004l");
-      const r = spawnSync4(cmd, [...cargs, file], { stdio: "inherit" });
+      const sp = resolveSpawn(cmd, [...cargs, file]);
+      const r = spawnSync5(sp.command, sp.args, { stdio: "inherit", ...sp.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {} });
       if (r.status === 0) {
         const text = readFileSync9(file, "utf8").replace(/\n$/, "");
         s.reset();
@@ -15069,10 +15444,10 @@ function createLineEditor(out, input = keyInput) {
       render(s, promptOf(), maxVisible, opts.status);
     };
     process.on("SIGWINCH", onResize);
-    return new Promise((resolve5) => {
+    return new Promise((resolve6) => {
       activeAbort = () => {
         finish();
-        resolve5(null);
+        resolve6(null);
       };
       const redraw = () => render(s, promptOf(), maxVisible, opts.status);
       let lastStatus = opts.status?.() ?? "";
@@ -15152,20 +15527,20 @@ function createLineEditor(out, input = keyInput) {
         if (action === "submit") {
           finish();
           opts.onSubmit?.();
-          return resolve5(s.expand());
+          return resolve6(s.expand());
         }
         if (action === "eof") {
           finish();
-          return resolve5(null);
+          return resolve6(null);
         }
         if (action === "rewind") {
           finish();
-          return resolve5(REWIND);
+          return resolve6(REWIND);
         }
         if (action === "cancel") {
           if (s.buf.length === 0) {
             finish();
-            return resolve5(null);
+            return resolve6(null);
           }
           s.reset();
           s.refresh();
@@ -15307,7 +15682,7 @@ function selectMenu(stream, opts) {
     out.write(dim2(`  ${filterHint}\u2191/\u2193 select \xB7 ${back}\u23CE choose \xB7 esc cancel${more}`));
     prevLines++;
   };
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const wasRaw = !!keyInput.isRaw;
     menusOpen++;
     emitKeypressEvents(keyInput);
@@ -15326,7 +15701,7 @@ function selectMenu(stream, opts) {
         } catch {
         }
       }
-      resolve5(val);
+      resolve6(val);
     };
     const drillIn = () => {
       const it = items[sel];
@@ -15447,19 +15822,19 @@ function windowAround(count, sel, max) {
 var plainBuf = "";
 var plainEnded = false;
 function readPlainLine() {
-  return new Promise((resolve5) => {
+  return new Promise((resolve6) => {
     const emit = () => {
       const nl = plainBuf.indexOf("\n");
       if (nl >= 0) {
         const line = plainBuf.slice(0, nl);
         plainBuf = plainBuf.slice(nl + 1);
-        resolve5(line);
+        resolve6(line);
         return true;
       }
       if (plainEnded) {
         const rest = plainBuf;
         plainBuf = "";
-        resolve5(rest.length ? rest : null);
+        resolve6(rest.length ? rest : null);
         return true;
       }
       return false;
@@ -15485,11 +15860,15 @@ function readPlainLine() {
   });
 }
 
+// cli/cli.ts
+init_platform();
+init_hostPath();
+
 // cli/osScheduler.ts
-import { spawnSync as spawnSync5 } from "child_process";
+import { spawnSync as spawnSync6 } from "child_process";
 import { writeFileSync as writeFileSync8, mkdirSync as mkdirSync10, readdirSync as readdirSync2, unlinkSync as unlinkSync3, chmodSync, existsSync as existsSync7 } from "fs";
 import { homedir as homedir8 } from "os";
-import { join as join12 } from "path";
+import { join as join13 } from "path";
 var log32 = forComponent("os-sched");
 var OsScheduler = class {
   options;
@@ -15497,13 +15876,13 @@ var OsScheduler = class {
     this.options = { ...new OsSchedulerOptions(), ...options };
   }
   get dir() {
-    return join12(this.options.home, ".agent", "sched");
+    return join13(this.options.home, ".agent", "sched");
   }
   label(id) {
     return `cc.livx.agentx.sched-${id}`;
   }
   plistPath(id) {
-    return join12(this.options.home, "Library", "LaunchAgents", `${this.label(id)}.plist`);
+    return join13(this.options.home, "Library", "LaunchAgents", `${this.label(id)}.plist`);
   }
   run(cmd, args, input) {
     return this.options.exec(cmd, args, input);
@@ -15519,11 +15898,11 @@ var OsScheduler = class {
     const script = this.writeScript(spec, oneOff);
     const mechanism = this.options.platform === "darwin" ? this.scheduleDarwin(spec, script) : this.scheduleLinux(spec, script, oneOff);
     const meta = { ...spec, created: Date.now(), mechanism };
-    writeFileSync8(join12(this.dir, `${spec.id}.json`), JSON.stringify(meta, null, 2));
+    writeFileSync8(join13(this.dir, `${spec.id}.json`), JSON.stringify(meta, null, 2));
     return mechanism;
   }
   cancel(id) {
-    const meta = readJsonFile(join12(this.dir, `${id}.json`), null);
+    const meta = readJsonFile(join13(this.dir, `${id}.json`), null);
     if (!meta) return false;
     try {
       if (this.options.platform === "darwin") {
@@ -15556,7 +15935,7 @@ var OsScheduler = class {
     }
     for (const f of [`${id}.json`, `${id}.sh`]) {
       try {
-        unlinkSync3(join12(this.dir, f));
+        unlinkSync3(join13(this.dir, f));
       } catch {
       }
     }
@@ -15564,19 +15943,19 @@ var OsScheduler = class {
   }
   list() {
     if (!existsSync7(this.dir)) return [];
-    return readdirSync2(this.dir).filter((f) => f.endsWith(".json")).map((f) => readJsonFile(join12(this.dir, f), null)).filter(Boolean);
+    return readdirSync2(this.dir).filter((f) => f.endsWith(".json")).map((f) => readJsonFile(join13(this.dir, f), null)).filter(Boolean);
   }
   /** The per-job runner script: cd to the project, headless-resume the session, log, notify. */
   writeScript(spec, oneOff) {
-    const p = join12(this.dir, `${spec.id}.sh`);
+    const p = join13(this.dir, `${spec.id}.sh`);
     const q2 = (s) => `'${s.replace(/'/g, `'\\''`)}'`;
-    const cleanup = oneOff ? this.options.platform === "darwin" ? `launchctl remove ${this.label(spec.id)} 2>/dev/null; rm -f ${q2(this.plistPath(spec.id))} ${q2(join12(this.dir, `${spec.id}.json`))} ${q2(p)}
-` : `rm -f ${q2(join12(this.dir, `${spec.id}.json`))} ${q2(p)}
+    const cleanup = oneOff ? this.options.platform === "darwin" ? `launchctl remove ${this.label(spec.id)} 2>/dev/null; rm -f ${q2(this.plistPath(spec.id))} ${q2(join13(this.dir, `${spec.id}.json`))} ${q2(p)}
+` : `rm -f ${q2(join13(this.dir, `${spec.id}.json`))} ${q2(p)}
 ` : "";
     writeFileSync8(p, `#!/bin/sh
 # agentx scheduled job ${spec.id}${spec.label ? ` \u2014 ${spec.label}` : ""}
 cd ${q2(spec.cwd)} || exit 1
-${this.options.agentx} -p ${q2(spec.prompt)} --resume ${q2(spec.sessionId)} --yes >> ${q2(join12(this.dir, `${spec.id}.log`))} 2>&1
+${this.options.agentx} -p ${q2(spec.prompt)} --resume ${q2(spec.sessionId)} --yes >> ${q2(join13(this.dir, `${spec.id}.log`))} 2>&1
 ${cleanup}`);
     chmodSync(p, 493);
     return p;
@@ -15613,7 +15992,7 @@ ${trigger}
 <key>RunAtLoad</key><false/>
 </dict></plist>
 `;
-    mkdirSync10(join12(this.options.home, "Library", "LaunchAgents"), { recursive: true });
+    mkdirSync10(join13(this.options.home, "Library", "LaunchAgents"), { recursive: true });
     writeFileSync8(this.plistPath(spec.id), plist);
     this.run("launchctl", ["load", this.plistPath(spec.id)]);
     return `launchd:${this.label(spec.id)}`;
@@ -15651,7 +16030,7 @@ var OsSchedulerOptions = class {
   /** Injectable executor for tests. Returns stdout+stderr merged — `at` reports "job N" on STDERR,
    *  and the job id is what atrm needs for cancel. Throws on non-zero exit. */
   exec = (cmd, args, input) => {
-    const r = spawnSync5(cmd, args, { input, encoding: "utf8" });
+    const r = spawnSync6(cmd, args, { input, encoding: "utf8" });
     if (r.error) throw r.error;
     if (r.status !== 0) throw new Error(`${cmd} exited ${r.status}: ${r.stderr || r.stdout}`);
     return `${r.stdout ?? ""}${r.stderr ?? ""}`;
@@ -15668,10 +16047,11 @@ import { createServer as createServer2, createConnection } from "net";
 import { spawn as spawn3 } from "child_process";
 import { existsSync as existsSync8, mkdirSync as mkdirSync11, unlinkSync as unlinkSync4, readdirSync as readdirSync3 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
+init_platform();
 var log33 = forComponent("remote-trigger");
-var TRIGGER_DIR = () => join13(homedir9(), ".agent", "triggers");
-var sockPath = (sessionId, dir = TRIGGER_DIR()) => join13(dir, `${sessionId}.sock`);
+var TRIGGER_DIR = () => join14(homedir9(), ".agent", "triggers");
+var sockPath = (sessionId, dir = TRIGGER_DIR()) => join14(dir, `${sessionId}.sock`);
 var TriggerServer = class {
   constructor(onTrigger) {
     this.onTrigger = onTrigger;
@@ -15764,6 +16144,15 @@ function triggerLive(sessionId, req, dir = TRIGGER_DIR(), timeoutMs = 3e3) {
     });
   });
 }
+function headlessArgv(opts, text, id) {
+  const script = `${opts.agentx} -p "$1" --resume "$2" --yes`;
+  if (!IS_WIN) return ["/bin/sh", ["-c", script, "sh", text, id]];
+  if (opts.agentxArgv?.length) {
+    const r = resolveSpawn(opts.agentxArgv[0], [...opts.agentxArgv.slice(1), "-p", text, "--resume", id, "--yes"]);
+    return [r.command, r.args];
+  }
+  return [defaultShell().bin, ["-c", script, "sh", text, id]];
+}
 function makeRemoteTriggerTool(opts) {
   const dir = opts.triggerDir ?? TRIGGER_DIR();
   const doSpawn = opts.spawnFn ?? spawn3;
@@ -15790,9 +16179,10 @@ function makeRemoteTriggerTool(opts) {
       if (live?.ok) return `Delivered to live session ${full} \u2014 it runs there; the user sees it in that terminal.`;
       if (!target.meta.cwd || !existsSync8(target.meta.cwd)) return `Error: session ${full} has no reachable cwd (${target.meta.cwd ?? "unknown"}).`;
       return new Promise((res) => {
-        const child = doSpawn("/bin/sh", ["-c", `${opts.agentx} -p "$1" --resume "$2" --yes`, "sh", text, full], {
+        const child = doSpawn(...headlessArgv(opts, text, full), {
           cwd: target.meta.cwd,
-          stdio: ["ignore", "pipe", "pipe"]
+          stdio: ["ignore", "pipe", "pipe"],
+          ...IS_WIN ? { windowsHide: true } : {}
         });
         let out = "", errOut = "";
         child.stdout?.on("data", (d) => {
@@ -15857,7 +16247,7 @@ async function checkForUpdate(current) {
   return `Update available: ${current} \u2192 ${latest}. Run \`bun add -g @livx.cc/agentx\` to update.`;
 }
 function installUpdate() {
-  const r = spawnSync6("bun", ["add", "-g", "@livx.cc/agentx"], { stdio: "inherit" });
+  const r = spawnSync7("bun", ["add", "-g", "@livx.cc/agentx"], { stdio: "inherit" });
   return (r.status ?? 1) === 0;
 }
 var typeaheadOnLine = false;
@@ -16157,11 +16547,11 @@ function loadEnvFile(file) {
   }
 }
 function loadInstallEnv() {
-  let dir = dirname5(import.meta.path);
-  for (let i = 0; i < 5 && !existsSync9(join14(dir, "package.json")); i++) dir = dirname5(dir);
+  let dir = dirname6(import.meta.path);
+  for (let i = 0; i < 5 && !existsSync9(join15(dir, "package.json")); i++) dir = dirname6(dir);
   for (const name of [".env", ".env.local"]) {
-    loadEnvFile(join14(dir, name));
-    loadEnvFile(join14(homedir10(), ".agent", name));
+    loadEnvFile(join15(dir, name));
+    loadEnvFile(join15(homedir10(), ".agent", name));
   }
 }
 async function loadBodifySecrets() {
@@ -16195,6 +16585,31 @@ function apiKeysFromEnv() {
   }
   return keys;
 }
+var KEYLESS_PROVIDERS = /* @__PURE__ */ new Set(["claude-code"]);
+function modelUsable(model, apiKeys) {
+  const p = model.split("/")[0];
+  return KEYLESS_PROVIDERS.has(p) || !!apiKeys[p];
+}
+function duplexModels(o) {
+  const dflt = new DuplexAgentOptions(), notes = [];
+  const cc = o.actModel.startsWith("claude-code/"), anthropic = !!o.apiKeys.anthropic;
+  const why = (m) => `no ${m.split("/")[0].toUpperCase()}_API_KEY`;
+  const asked = o.voiceModel ?? o.reflexModel;
+  let reflexModel = asked ? resolveModelOrNewest(asked) : void 0;
+  const reflex = reflexModel ?? dflt.reflexModel;
+  if (!modelUsable(reflex, o.apiKeys)) {
+    const to = anthropic ? "anthropic/claude-haiku-4-5" : cc ? "claude-code/haiku" : o.actModel.startsWith("cursor/") ? void 0 : o.actModel;
+    if (to) reflexModel = to;
+    notes.push(`voice model ${reflex} can't run here (${why(reflex)})${to ? ` \u2014 using ${to}` : ""}`);
+  }
+  let thinkModel = o.thinkModel === void 0 ? void 0 : o.thinkModel === false ? false : resolveModelOrNewest(String(o.thinkModel));
+  const think = thinkModel === void 0 ? dflt.thinkModel : thinkModel;
+  if (think !== false && !modelUsable(think, o.apiKeys)) {
+    thinkModel = cc ? "claude-code/opus" : o.actModel;
+    notes.push(`think model ${think} can't run here (${why(think)}) \u2014 using ${thinkModel}`);
+  }
+  return { ...reflexModel ? { reflexModel } : {}, ...thinkModel !== void 0 ? { thinkModel } : {}, notes };
+}
 function makeHost(format = "text", opts) {
   const streamJson = format === "stream-json";
   const cleanStdout = format === "json";
@@ -16803,7 +17218,7 @@ function optsFor(args, ai, cfg = {}, extraTools = []) {
     stream: args.stream,
     host: makeHost(args.outputFormat, { stream: true }),
     planMode: args.plan || cfg.planMode || false,
-    permissions: rules.length ? new PermissionPolicy({ rules, default: "allow", host: makeHost(), ask: makeAskResolver(resolve4(args.cwd ?? process.cwd())) }) : void 0,
+    permissions: rules.length ? new PermissionPolicy({ rules, default: "allow", host: makeHost(), ask: makeAskResolver(resolve5(args.cwd ?? process.cwd())) }) : void 0,
     subagents: args.subagents || cfg.subagents || false,
     maxSteps: args.maxSteps ?? cfg.maxSteps,
     reasoning: args.reasoning ?? cfg.reasoning,
@@ -16885,16 +17300,23 @@ var IMG_EXT = { ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg"
 function mentionRefs(line) {
   return [...line.matchAll(/(?:^|\s)@(?:"([^"]+)"|(\S+))/g)].map((m) => m[1] ?? m[2].replace(/[?!.,;:)\]}'">]+$/, "")).filter(Boolean);
 }
-var untilde = (p) => p.startsWith("~/") ? join14(homedir10(), p.slice(2)) : p;
+var untilde = (p) => p.startsWith("~/") || IS_WIN && p.startsWith("~\\") ? join15(homedir10(), p.slice(2)) : p;
+var PATH_LIKE = IS_WIN ? /^(\/|~[\\/]|\.\.?[\\/]|[A-Za-z]:[\\/]|\\\\)/ : /^(\/|~\/|\.\/|\.\.\/)/;
+var userPath = (cwd, p) => {
+  const t = untilde(p);
+  if (t !== p) return t;
+  const host = IS_WIN && p.startsWith("/") ? toHostPath(p) : null;
+  return host ? resolve5(host) : resolve5(cwd, p);
+};
 function readImageParts(cwd, line) {
   const refs = mentionRefs(line);
   const parts = [];
   for (const ref of refs) {
     const mime = IMG_EXT[extname(ref).toLowerCase()];
     if (!mime) continue;
-    const abs = ref.startsWith("~/") ? untilde(ref) : resolve4(cwd, ref);
+    const abs = userPath(cwd, ref);
     try {
-      statSync7(abs);
+      statSync8(abs);
     } catch {
       continue;
     }
@@ -16906,16 +17328,16 @@ function pastePathClassifier(cwd) {
   return (text) => {
     let t = text.trim();
     if (!t || t.includes("\n")) return null;
-    t = t.replace(/\\ /g, " ").replace(/^['"]|['"]$/g, "");
-    if (!/^(\/|~\/|\.\/|\.\.\/)/.test(t)) return null;
-    const abs = t.startsWith("~/") ? untilde(t) : resolve4(cwd, t);
+    t = (IS_WIN ? t : t.replace(/\\ /g, " ")).replace(/^['"]|['"]$/g, "");
+    if (!PATH_LIKE.test(t)) return null;
+    const abs = userPath(cwd, t);
     try {
-      if (!statSync7(abs).isFile()) return null;
+      if (!statSync8(abs).isFile()) return null;
     } catch {
       return null;
     }
     const isImg = !!IMG_EXT[extname(abs).toLowerCase()];
-    return { display: isImg ? "Image" : `File ${basename2(abs)}`, ref: /\s/.test(abs) ? `@"${abs}"` : "@" + abs };
+    return { display: isImg ? "Image" : `File ${basename4(abs)}`, ref: /\s/.test(abs) ? `@"${abs}"` : "@" + abs };
   };
 }
 var mcpMentionResolver;
@@ -17039,7 +17461,7 @@ async function runTurn(agent, store, session, task, cp, cwd = process.cwd(), sen
       store.save(session);
     } catch {
     }
-    return { ok: false };
+    return { ok: false, error: e };
   } finally {
     spinner.stop();
     spinner.turnStart = 0;
@@ -17090,7 +17512,7 @@ async function runTurn(agent, store, session, task, cp, cwd = process.cwd(), sen
   }
   return { ok, res };
 }
-var remintSessionImages = (data, store, cwd) => remintImageRefs(data.messages, [join14(store.dir, `${data.meta.id}.images`), cwd]);
+var remintSessionImages = (data, store, cwd) => remintImageRefs(data.messages, [join15(store.dir, `${data.meta.id}.images`), cwd]);
 function startSession(args, store, agent, cwd) {
   if (args.resume || args.cont) {
     const data = args.resume ? store.load(args.resume) ?? globalSessionLoad(args.resume) : store.latestData();
@@ -17137,24 +17559,24 @@ var AGENTS_MD_TEMPLATE = `# ${"${name}"}
 `;
 function initInstructions(cwd) {
   for (const f of ["AGENTS.md", "CLAUDE.md"]) {
-    if (existsSync9(join14(cwd, f))) {
+    if (existsSync9(join15(cwd, f))) {
       err(yellow(`  ${f} already exists \u2014 leaving it as-is
 `));
       return;
     }
   }
-  const path = join14(cwd, "AGENTS.md");
-  writeFileSync9(path, AGENTS_MD_TEMPLATE.replace("${name}", basename2(cwd)));
+  const path = join15(cwd, "AGENTS.md");
+  writeFileSync9(path, AGENTS_MD_TEMPLATE.replace("${name}", basename4(cwd)));
   err(green(`  created ${path}
 `) + dim("  edit it, then it auto-loads into every run.\n"));
 }
 function persistSetting(cwd, key, value) {
-  const path = join14(cwd, ".agent", "settings.json");
+  const path = join15(cwd, ".agent", "settings.json");
   try {
     const obj = existsSync9(path) ? JSON.parse(readFileSync10(path, "utf8")) : {};
     if (obj[key] === value) return;
     obj[key] = value;
-    mkdirSync12(dirname5(path), { recursive: true });
+    mkdirSync12(dirname6(path), { recursive: true });
     writeFileSync9(path, JSON.stringify(obj, null, 2) + "\n");
   } catch (e) {
     err(yellow(`  \u26A0 couldn't persist ${key} to ${path} \u2014 ${e?.message ?? e}
@@ -17187,7 +17609,7 @@ function installCancelGuards(mounted) {
   });
 }
 async function repl(args, ai, cfg, cwd) {
-  const oauth = new McpOAuth({ storePath: join14(cwd, ".agent", "mcp-auth.json") });
+  const oauth = new McpOAuth({ storePath: join15(cwd, ".agent", "mcp-auth.json") });
   const mounted = await mountMcp(cfg, oauth);
   let mcpToolNames = [];
   const initialMcpTools = mcpAgentTools(mounted);
@@ -17210,7 +17632,7 @@ async function repl(args, ai, cfg, cwd) {
     },
     tickMs: 15e3
   });
-  const agentxInvocation = () => process.argv[1] ? `${process.execPath} ${resolve4(process.argv[1])}` : "agentx";
+  const agentxInvocation = () => process.argv[1] ? `${process.execPath} ${resolve5(process.argv[1])}` : "agentx";
   const osSched = new OsScheduler({ agentx: agentxInvocation() });
   const osBackend = osSched.available() ? {
     get sessionId() {
@@ -17233,7 +17655,7 @@ async function repl(args, ai, cfg, cwd) {
       scheduleQueue.push(req.prompt);
     }
   });
-  agent.options.tools = [...agent.options.tools ?? [], makeRemoteTriggerTool({ agentx: agentxInvocation(), selfId: () => session.meta.id })];
+  agent.options.tools = [...agent.options.tools ?? [], makeRemoteTriggerTool({ agentx: agentxInvocation(), agentxArgv: process.argv[1] ? [process.execPath, resolve5(process.argv[1])] : ["agentx"], selfId: () => session.meta.id })];
   const duplex = args.duplex;
   let dx;
   let voiceIO;
@@ -17438,6 +17860,9 @@ async function repl(args, ai, cfg, cwd) {
         return `Rewound ${n} task checkpoint(s): restored ${r.restored} file(s), deleted ${r.deleted}.`;
       }
     };
+    const { notes: tierNotes, ...tierModels } = duplexModels({ voiceModel: args.voiceModel, reflexModel: cfg.reflexModel, thinkModel: args.thinkModel ?? cfg.thinkModel, actModel: agent.options.model, apiKeys: { ...cfg.apiKeys, ...apiKeysFromEnv() } });
+    for (const n of tierNotes) err(yellow(`  \u26A0 ${n}
+`));
     dx = new DuplexAgent({
       ai,
       ...instinct ? { bargeIntent: (t) => instinct.bargeIntent(t) } : {},
@@ -17445,11 +17870,10 @@ async function repl(args, ai, cfg, cwd) {
       fs: agent.options.fs,
       memoryDir: agent.options.memoryDir,
       memoryUserDir: agent.options.memoryUserDir,
-      ...args.voiceModel ?? cfg.reflexModel ? { reflexModel: resolveModelOrNewest(args.voiceModel ?? cfg.reflexModel) } : {},
+      ...tierModels,
       actModel: agent.options.model,
       actOptions: workerOptions,
       providerOptionsFor: (m) => providerOptionsFor(m, cwd, cfg.mcpServers, mounted.map((x) => x.name)),
-      ...(args.thinkModel ?? cfg.thinkModel) !== void 0 ? { thinkModel: (args.thinkModel ?? cfg.thinkModel) === false ? false : resolveModelOrNewest(String(args.thinkModel ?? cfg.thinkModel)) } : {},
       host,
       ...args.voice ? { voiceStyle: "conversational", progressUpdates: true, askRelay: true, emotionTags: emotionsOn, spokenBudgetChars: 350 } : {},
       // voice: progress asides + worker questions relayed through the conversation; emotion tags taught only with a TTS that speaks them
@@ -17463,7 +17887,7 @@ async function repl(args, ai, cfg, cwd) {
       quickLook: {
         branch: () => {
           try {
-            const head = readFileSync10(join14(cwd, ".git", "HEAD"), "utf8").trim();
+            const head = readFileSync10(join15(cwd, ".git", "HEAD"), "utf8").trim();
             return head.startsWith("ref: refs/heads/") ? `branch: ${head.slice("ref: refs/heads/".length)}` : `detached HEAD at ${head.slice(0, 12)}`;
           } catch {
             return "not a git repository";
@@ -17597,7 +18021,7 @@ async function repl(args, ai, cfg, cwd) {
   const pendingImages = [];
   const bangContext = [];
   const grabClipboardAttachment = () => {
-    const dir = join14(store.dir, `${session.meta.id}.images`);
+    const dir = join15(store.dir, `${session.meta.id}.images`);
     try {
       mkdirSync12(dir, { recursive: true });
     } catch (e) {
@@ -17655,7 +18079,7 @@ async function repl(args, ai, cfg, cwd) {
     err(dim(`  \u23F0 ${scheduler.size} scheduled job(s) re-armed
 `));
   }
-  const checkpoints = args.vfs || args.boddb ? new CheckpointStack(agent.options.fs) : new GitCheckpoints({ workTree: cwd, gitDir: join14(cwd, ".agent", "checkpoints.git"), addDirs: args.addDirs, sessionId: session.meta.id });
+  const checkpoints = args.vfs || args.boddb ? new CheckpointStack(agent.options.fs) : new GitCheckpoints({ workTree: cwd, gitDir: join15(cwd, ".agent", "checkpoints.git"), addDirs: args.addDirs, sessionId: session.meta.id });
   const cpHooks = checkpoints.hooks?.();
   if (cpHooks) {
     agent.options.hooks = composeHooks(agent.options.hooks, cpHooks);
@@ -17707,11 +18131,11 @@ ${lines.join("\n")}
 Added entries are loadable now via the Skill/SlashCommand tools; removed ones are gone even if still listed in the system prompt.
 </system-reminder>`;
   };
-  const histPath = join14(cwd, ".agent", "history");
+  const histPath = join15(cwd, ".agent", "history");
   const history = existsSync9(histPath) ? readFileSync10(histPath, "utf8").split("\n").filter(Boolean).reverse().slice(0, 500) : [];
   const remember2 = (line) => {
     try {
-      mkdirSync12(join14(cwd, ".agent"), { recursive: true });
+      mkdirSync12(join15(cwd, ".agent"), { recursive: true });
       appendFileSync(histPath, line + "\n");
     } catch (e) {
       log34.debug("history write failed", e);
@@ -18014,8 +18438,8 @@ ${task}`;
           const wasRaw = process.stdin.isTTY && process.stdin.isRaw;
           if (wasRaw) process.stdin.setRawMode(false);
           try {
-            const { spawnSync: spawnSync7 } = await import("child_process");
-            const r = spawnSync7("less", ["-R"], { input: text, stdio: ["pipe", "inherit", "inherit"] });
+            const { spawnSync: spawnSync8 } = await import("child_process");
+            const r = spawnSync8("less", ["-R"], { input: text, stdio: ["pipe", "inherit", "inherit"] });
             if (r.error) err(text);
           } finally {
             if (wasRaw) process.stdin.setRawMode(true);
@@ -18035,8 +18459,7 @@ ${task}`;
         keys.length ? ok(`provider keys: ${keys.join(", ")}`) : bad("no provider keys set (ANTHROPIC_API_KEY / OPENAI_API_KEY / GOOGLE_API_KEY / GROQ_API_KEY)");
         process.env.BODIFY_API_KEY && process.env.BODIFY_APP_ID ? ok(`bodify secrets: ${process.env.BODIFY_APP_ID}`) : warn("bodify secrets: not configured (set BODIFY_API_KEY + BODIFY_APP_ID)");
         {
-          const { spawnSync: spawnSync7 } = await import("child_process");
-          const has = (cmd) => spawnSync7("which", [cmd]).status === 0;
+          const has = hasCommand;
           if (!VoiceIO.available()) warn("voice: keys missing (SONIOX_API_KEY / CARTESIA_API_KEY / CARTESIA_VOICE_ID) \u2014 voice disabled");
           else {
             ok("voice: keys present");
@@ -18463,12 +18886,13 @@ ${task}`;
             return;
           }
         }
-        const ed = process.env.VISUAL || process.env.EDITOR || "vi";
+        const ed = process.env.VISUAL || process.env.EDITOR || DEFAULT_EDITOR;
         const wasRaw = process.stdin.isTTY && process.stdin.isRaw;
         if (wasRaw) process.stdin.setRawMode(false);
         try {
-          const { spawnSync: spawnSync7 } = await import("child_process");
-          spawnSync7(ed, [idx], { stdio: "inherit" });
+          const { spawnSync: spawnSync8 } = await import("child_process");
+          const r = IS_WIN ? resolveSpawn(ed, [toHostPath(toVfsPath(idx)) ?? idx]) : { command: ed, args: [idx] };
+          spawnSync8(r.command, r.args, { stdio: "inherit", ...r.windowsVerbatimArguments ? { windowsVerbatimArguments: true } : {} });
         } finally {
           if (wasRaw) process.stdin.setRawMode(true);
         }
@@ -18818,10 +19242,10 @@ ${task}`;
           return;
         }
         const md = exportMarkdown(session.meta, shown);
-        const name = a[0] ? extname(a[0]) ? a[0] : a[0] + ".md" : join14(".agent", "exports", `${session.meta.id}.md`);
-        const path = resolve4(cwd, name);
+        const name = a[0] ? extname(a[0]) ? a[0] : a[0] + ".md" : join15(".agent", "exports", `${session.meta.id}.md`);
+        const path = resolve5(cwd, name);
         try {
-          mkdirSync12(dirname5(path), { recursive: true });
+          mkdirSync12(dirname6(path), { recursive: true });
           writeFileSync9(path, md);
           err(green(`  \u2713 exported \u2192 ${path}
 `) + dim(`  ${shown.length} message(s) \xB7 ${md.length} chars
@@ -18904,7 +19328,7 @@ ${task}`;
   });
   const listDir = (absDir) => {
     try {
-      return readdirSync4(join14(cwd, absDir.replace(/^\/+/, "")), { withFileTypes: true }).map((d) => ({ name: d.name, dir: d.isDirectory() }));
+      return readdirSync4(join15(cwd, absDir.replace(/^\/+/, "")), { withFileTypes: true }).map((d) => ({ name: d.name, dir: d.isDirectory() }));
     } catch (e) {
       log34.debug("completion readdir failed", absDir, e);
       return null;
@@ -19089,7 +19513,7 @@ ${out}
       return false;
     }
     const fakeVoice = process.env.AGENTX_VOICE_FAKE ? fakeVoiceParts(process.env.AGENTX_VOICE_FAKE) : null;
-    voiceDiag = new JsonlDiagSink(join14(store.dir, `${session.meta.id}.voice.jsonl`));
+    voiceDiag = new JsonlDiagSink(join15(store.dir, `${session.meta.id}.voice.jsonl`));
     voiceIO = new VoiceIO({
       ...fakeVoice ?? {},
       onDiag: (ev) => voiceDiag?.push(ev),
@@ -19490,9 +19914,17 @@ ${out}
   disposeClaudeCodeSessions();
   await closeMcp(mounted);
 }
+function duplexError(e, reflexModel) {
+  if (!e) return "";
+  const msg = String(e?.message ?? e).trim();
+  const key = msg.match(/API key is required for ([\w-]+)/i);
+  if (key) return `No API key for ${key[1]} (voice model ${reflexModel}) \u2014 set ${key[1].toUpperCase().replace(/-/g, "_")}_API_KEY in ~/.agent/.env, or choose another voice model (--voice-model).`;
+  const code = e?.statusCode;
+  return code && !msg.includes(String(code)) ? `${msg} (${code})` : msg;
+}
 async function duplexServe(args, ai, cfg, cwd) {
   const out = (o) => process.stdout.write(JSON.stringify(o) + "\n");
-  const mounted = await mountMcp(cfg, new McpOAuth({ storePath: join14(cwd, ".agent", "mcp-auth.json") }));
+  const mounted = await mountMcp(cfg, new McpOAuth({ storePath: join15(cwd, ".agent", "mcp-auth.json") }));
   installCancelGuards(mounted);
   const agent = await makeAgent(args, ai, cfg, mcpAgentTools(mounted, { quiet: true }), mounted.map((m) => m.name));
   const { host: _h, stream: _s, signal: _g, providerOptions: _po, ...wo } = agent.options;
@@ -19512,16 +19944,18 @@ async function duplexServe(args, ai, cfg, cwd) {
   };
   let persist = () => {
   };
+  const { notes, ...tierModels } = duplexModels({ voiceModel: args.voiceModel, reflexModel: cfg.reflexModel, thinkModel: args.thinkModel ?? cfg.thinkModel, actModel: agent.options.model, apiKeys: { ...cfg.apiKeys, ...apiKeysFromEnv() } });
+  for (const n of notes) err(yellow(`  \u26A0 ${n}
+`));
   const dx = new DuplexAgent({
     ai,
     fs: agent.options.fs,
     memoryDir: agent.options.memoryDir,
     memoryUserDir: agent.options.memoryUserDir,
-    ...args.voiceModel ?? cfg.reflexModel ? { reflexModel: resolveModelOrNewest(args.voiceModel ?? cfg.reflexModel) } : {},
+    ...tierModels,
     actModel: agent.options.model,
     actOptions: { ...wo, planMode: false },
     providerOptionsFor: (m) => providerOptionsFor(m, cwd, cfg.mcpServers, mounted.map((x) => x.name)),
-    ...(args.thinkModel ?? cfg.thinkModel) !== void 0 ? { thinkModel: (args.thinkModel ?? cfg.thinkModel) === false ? false : resolveModelOrNewest(String(args.thinkModel ?? cfg.thinkModel)) } : {},
     host,
     // --voice: the CLI voice register (progress asides, spoken budget). No emotion tags: the host's TTS may not speak them.
     ...args.voice ? { voiceStyle: "conversational", progressUpdates: true, spokenBudgetChars: 350 } : {},
@@ -19539,7 +19973,7 @@ async function duplexServe(args, ai, cfg, cwd) {
       log34.warn("duplex session save failed", e);
     }
   };
-  out({ type: "ready", sessionId: session.meta.id, reflexModel: dx.options.reflexModel, actModel: dx.options.actModel });
+  out({ type: "ready", sessionId: session.meta.id, reflexModel: dx.options.reflexModel, actModel: dx.options.actModel, ...notes.length ? { notes } : {} });
   const done = new Promise((resolveDone) => {
     const rl = createInterface({ input: process.stdin });
     rl.on("line", (line) => {
@@ -19559,7 +19993,10 @@ async function duplexServe(args, ai, cfg, cwd) {
         if (delivery || reply) dx.parkCutDelivery(delivery, !!reply, heard);
         const note = reply && reply.full.length - reply.heard.length > 40 ? interruptionNote(reply) : "";
         const id = m.id ? String(m.id) : void 0;
-        void runTurn(dx.voice, store, session, m.text + note, void 0, cwd, (c) => dx.send(c, { id, replaces: m.replaces ? String(m.replaces) : void 0, followUp: typeof m.followUp === "string" || m.followUp && typeof m.followUp === "object" ? m.followUp : void 0 })).then(({ res }) => out({ type: "turn_done", id, finishReason: res?.finishReason ?? "error" })).catch((e) => {
+        void runTurn(dx.voice, store, session, m.text + note, void 0, cwd, (c) => dx.send(c, { id, replaces: m.replaces ? String(m.replaces) : void 0, followUp: typeof m.followUp === "string" || m.followUp && typeof m.followUp === "object" ? m.followUp : void 0 })).then(({ res, error }) => {
+          const why = (res?.finishReason ?? "error") === "error" ? duplexError(res?.error ?? error, dx.options.reflexModel) : "";
+          out({ type: "turn_done", id, finishReason: res?.finishReason ?? "error", ...why ? { error: why } : {} });
+        }).catch((e) => {
           log34.error("duplex turn failed", e);
           out({ type: "turn_done", id, finishReason: "error", error: String(e?.message ?? e) });
         });
@@ -19614,7 +20051,7 @@ async function main() {
   let worktreeCleanup;
   if (args.worktree) {
     const { enterWorktree: enterWorktree2, exitWorktree: exitWorktree2 } = await Promise.resolve().then(() => (init_worktree(), worktree_exports));
-    const session = enterWorktree2(args.worktree, resolve4(args.cwd ?? process.cwd()));
+    const session = enterWorktree2(args.worktree, resolve5(args.cwd ?? process.cwd()));
     err(dim(`  \u2295 worktree: ${session.worktreePath} (branch ${session.branch})
 `));
     worktreeCleanup = () => {
@@ -19624,8 +20061,8 @@ async function main() {
 `));
     };
   }
-  const cwd = resolve4(args.cwd ?? process.cwd());
-  const cfg = await loadConfig(cwd, args.mcpConfig && resolve4(args.mcpConfig));
+  const cwd = resolve5(args.cwd ?? process.cwd());
+  const cfg = await loadConfig(cwd, args.mcpConfig && resolve5(args.mcpConfig));
   if (!args.autoRoute && !args.model && (cfg.model === "auto" || !cfg.model && await jevAvailable())) {
     args.autoRoute = true;
     args.model = autoModels().standard;
@@ -19657,7 +20094,8 @@ async function main() {
   loadInstallEnv();
   await loadBodifySecrets();
   const apiKeys = { ...cfg.apiKeys, ...apiKeysFromEnv() };
-  if (!Object.keys(apiKeys).length) {
+  const keyless = String(args.model ?? cfg.model ?? "").startsWith("claude-code/");
+  if (!Object.keys(apiKeys).length && !keyless) {
     console.error(red("No provider key found. Set ANTHROPIC_API_KEY (or OPENAI_API_KEY / GOOGLE_API_KEY / GROQ_API_KEY) in ~/.agent/.env, or set BODIFY_API_KEY + BODIFY_APP_ID to pull from Bodify."));
     process.exit(1);
   }
@@ -19674,7 +20112,7 @@ async function main() {
     }
   });
   if (args.task) {
-    const mounted = await mountMcp(cfg, new McpOAuth({ storePath: join14(cwd, ".agent", "mcp-auth.json") }));
+    const mounted = await mountMcp(cfg, new McpOAuth({ storePath: join15(cwd, ".agent", "mcp-auth.json") }));
     const agent = await makeAgent(args, ai, cfg, mcpAgentTools(mounted), mounted.map((m) => m.name));
     const store = new SessionStore(cwd);
     const session = startSession(args, store, agent, cwd);
@@ -19712,6 +20150,8 @@ export {
   cacheMultipliers,
   condenseReplay,
   costOf,
+  duplexError,
+  duplexModels,
   estimateTranscriptTokens,
   expandMentions,
   exportMarkdown,
@@ -19723,6 +20163,7 @@ export {
   makeHost,
   mcpMentionResolver,
   mentionRefs,
+  modelUsable,
   parseArgs,
   pastePathClassifier,
   readImageParts,