@openspecui/server 7.0.0 → 7.0.2

package/dist/{api-B4zHqR-f.mjs → api-C_H23KUr.mjs}

@@ -2,9 +2,9 @@ import m, { createRequire } from "node:module";
 import a from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import se, { writeSync } from "node:fs";
+import Ht from "node:crypto";
 import o from "node:os";
 import p from "node:net";
-import Ht from "node:crypto";
 import { inspect } from "node:util";
 import { MessageChannel } from "node:worker_threads";
 import { createRequire as createRequire$1 } from "module";

package/dist/index.mjs

@@ -1,12 +1,13 @@
 import { a as resolveCt2ModelDownloadPlanFromRepositoryFiles } from "./src-Dh_UAz5C.mjs";
 import { t as resolveGgufModelDownloadPlanFromRepositoryFiles } from "./src-CZfiVL_-.mjs";
-import { AI_TOOLS, ActiveRootMutationSchema, ActiveRootRevisionSchema, AgentDeliveryPolicyUpdateSchema, BatchTranslateInputSchema, CliExecutor, CliProjectionCommandError, CliProjectionNoticeSchema, CodeEditorThemeSchema, ConfigManager, CustomSoundHashSchema, DASHBOARD_METRIC_KEYS, DashboardConfigSchema, DashboardGitSnapshotSchema, DashboardSummaryInvalidationSchema, DashboardSummaryProjectionStateSchema, DashboardTrendsProjectionSchema, DocumentTranslationConfigUpdateSchema, EnvironmentDefaultStoreUpdateSchema, EnvironmentGlobalConfigValueSchema, EnvironmentGlobalFileProjectionDataSchema, EnvironmentGlobalFileProjectionStateSchema, EnvironmentGlobalProjectionDataSchema, EnvironmentGlobalProjectionStateSchema, GitConfigSchema, GlobalSettingsManager, LocalModelAssetStateSchema, LocalModelLifecycleFileStateSchema, LocalModelLifecycleGroupStateSchema, LocalModelProfileManifestSchema, MarkdownParser, NotificationPublishInputSchema, NotificationSettingsSchema, OPENSPECUI_DOCUMENT_HOOK_VERSION, OPENSPECUI_WORKFLOW_HOOK_VERSION, OPSX_ARTIFACT_INPUT_ACTIONS, OPSX_CHANGE_INPUT_ACTIONS, OPSX_COMMAND_CAPABLE_WORKFLOWS, OPSX_CORE_PROFILE_WORKFLOWS, OPSX_TEXT_INPUT_ACTIONS, OpenSpecAdapter, OpenSpecDataHomeObserver, OpenSpecUIGlobalSettingsUpdateSchema, OpenSpecWatcher, OpsxConfigSchema, OpsxKernel, OwnedSpecIdentitySchema, PINNED_AGENT_GENERATOR_VERSION, PlanningCliProjectionDataSchema, PlanningCliProjectionSelectorSchema, PlanningCliProjectionStateSchema, ProjectBindingUpdateSchema, ProjectWatcher, PtyClientMessageSchema, RUNTIME_INVALIDATION_FACETS, ReactiveContext, ReactiveObservationEnvironment, ReactiveState, RuntimeInvalidationIndex, RuntimeRootInvalidationRegistry, ServiceTranslationEngineIdSchema, SpecIdentitySchema, StoreDoctorResultSchema, StoreListResultSchema, StoreMutationLifecycleEventSchema, StoreMutationStartResponseSchema, TRANSLATION_ENGINE_MANIFESTS, TerminalConfigSchema, TerminalControlParser, TerminalRendererEngineSchema, TranslationCacheReadInputSchema, TranslationCacheWriteInputSchema, TranslationEngineIdSchema, TranslationEngineLifecycleStatusSchema, acquireWatcher, applyAgentDeliveryPolicy, buildBackendHealthPayload, buildLocalDownloadPlanFromRepositoryFiles, buildRuntimePackageInstallCommand, checkLocalDirectionalModelLanguagePair, classifyStoreCliResult, clearCache, compareAndWriteAtomicPhysicalReactiveFile, computeEnvUri, constantTimeEqual, createCleanCliEnv, createPhysicalReactiveDirectory, createToolInitStateProjection, createTranslationEngineLifecycleStatus, detectRuntimePackageManager, getAllTools, getAvailableTools, getConfiguredTools, getDefaultCliCommandString, getDetectedProjectTools, getExternalCodexCommandObservationRoot, getManagedLocalTranslationEngineManifest, getOpsxEntityRootRelativePath, getRootContextCliSelector, getToolInitStates, getTranslationEngineLifecycleMessage, getWatcherRuntimeStatus, inferFileMime, inferFilePreviewKind, inspectActiveRootOfficialConfig, inspectEnvironmentDefaultStore, inspectProjectBinding, isDirectionalManagedLocalTranslationEngineId, isManagedLocalTranslationEngineId, isTerminalMutationStatus, isTranslationEngineDependencyReady, isTranslationEngineRuntimeReady, loadOpenSpecAgentCommandContents, normalizeAgentDeliveryPolicy, normalizeBatchTranslationError, parseCliCommandResult, parseOpsxEntityMetadata, parseOpsxSchemaDetail, patchActiveRootOfficialFields, reactiveReadFile, reactiveStat, removePhysicalReactivePath, requireCanonicalOpenSpecEntityId, requireCanonicalOpenSpecSpecId, requireOpenSpecEntityRelativePath, resolveOpenSpecDataScope, resolveRootContext, resolveRuntimePackageInstallStrategy, resolveTerminalShellDefaults, runPhysicalReactivePathMutation, selectLocalDownloadGroup, shouldShowTranslationEngineInstallGate, sniffGlobalCli, subscribeWatcherRuntimeStatus, terminalNotificationEventToPublishInput, toCliProjectionCommandEvidence, toCliProjectionFailure, toCliProjectionNotice, toStoreFeatureResult, toggleMarkdownTask, updateProjectBindingContent, updateReactiveFileCache, validateActiveRootRawYaml, writePhysicalReactiveFile } from "@openspecui/core";
+import { AI_TOOLS, ActiveRootMutationSchema, ActiveRootRevisionSchema, AgentDeliveryPolicyUpdateSchema, BatchTranslateInputSchema, CliExecutor, CliProjectionCommandError, CliProjectionNoticeSchema, CodeEditorThemeSchema, ConfigManager, CustomSoundHashSchema, DASHBOARD_METRIC_KEYS, DashboardConfigSchema, DashboardGitSnapshotSchema, DashboardSummaryInvalidationSchema, DashboardSummaryProjectionStateSchema, DashboardTrendsProjectionSchema, DocumentTranslationConfigUpdateSchema, EnvironmentDefaultStoreUpdateSchema, EnvironmentGlobalConfigValueSchema, EnvironmentGlobalFileProjectionDataSchema, EnvironmentGlobalFileProjectionStateSchema, EnvironmentGlobalProjectionDataSchema, EnvironmentGlobalProjectionStateSchema, GitConfigSchema, GlobalSettingsManager, LocalModelAssetStateSchema, LocalModelLifecycleFileStateSchema, LocalModelLifecycleGroupStateSchema, LocalModelProfileManifestSchema, MarkdownParser, NotificationPublishInputSchema, NotificationSettingsSchema, OPENSPECUI_DOCUMENT_HOOK_VERSION, OPENSPECUI_WORKFLOW_HOOK_VERSION, OPSX_ARTIFACT_INPUT_ACTIONS, OPSX_CHANGE_INPUT_ACTIONS, OPSX_COMMAND_CAPABLE_WORKFLOWS, OPSX_CORE_PROFILE_WORKFLOWS, OPSX_TEXT_INPUT_ACTIONS, OpenSpecAdapter, OpenSpecDataHomeObserver, OpenSpecUIGlobalSettingsUpdateSchema, OpenSpecWatcher, OpsxConfigSchema, OpsxKernel, OwnedSpecIdentitySchema, PINNED_AGENT_GENERATOR_VERSION, PlanningCliProjectionDataSchema, PlanningCliProjectionSelectorSchema, PlanningCliProjectionStateSchema, ProjectBindingUpdateSchema, ProjectWatcher, PtyClientMessageSchema, RUNTIME_INVALIDATION_FACETS, ReactiveContext, ReactiveObservationEnvironment, ReactiveState, RuntimeInvalidationIndex, RuntimeRootInvalidationRegistry, ServiceTranslationEngineIdSchema, SpecIdentitySchema, StoreDoctorResultSchema, StoreListResultSchema, StoreMutationLifecycleEventSchema, StoreMutationStartResponseSchema, TRANSLATION_ENGINE_MANIFESTS, TerminalConfigSchema, TerminalControlParser, TerminalRendererEngineSchema, TranslationCacheReadInputSchema, TranslationCacheWriteInputSchema, TranslationEngineIdSchema, TranslationEngineLifecycleStatusSchema, acquireWatcher, applyAgentDeliveryPolicy, buildBackendHealthPayload, buildLocalDownloadPlanFromRepositoryFiles, buildRuntimePackageInstallCommand, checkLocalDirectionalModelLanguagePair, classifyStoreCliResult, clearCache, compareAndWriteAtomicPhysicalReactiveFile, computeEnvUri, constantTimeEqual, createCleanCliEnv, createPhysicalReactiveDirectory, createToolInitStateProjection, createTranslationEngineLifecycleStatus, detectRuntimePackageManager, getAllTools, getAvailableTools, getConfiguredTools, getDefaultCliCommandString, getDetectedProjectTools, getExternalCodexCommandObservationRoot, getManagedLocalTranslationEngineManifest, getOpsxEntityRootRelativePath, getRootContextCliSelector, getToolInitStates, getTranslationEngineLifecycleMessage, getWatcherRuntimeStatus, inferFileMime, inferFilePreviewKind, inspectActiveRootOfficialConfig, inspectEnvironmentDefaultStore, inspectProjectBinding, isDirectionalManagedLocalTranslationEngineId, isManagedLocalTranslationEngineId, isTerminalMutationStatus, isTranslationEngineDependencyReady, isTranslationEngineRuntimeReady, loadOpenSpecAgentCommandContents, normalizeAgentDeliveryPolicy, normalizeBatchTranslationError, parseCliCommandResult, parseOpsxEntityMetadata, parseOpsxSchemaDetail, patchActiveRootOfficialFields, reactiveReadFile, reactiveStat, removePhysicalReactivePath, replaceFileAtomically, requireCanonicalOpenSpecEntityId, requireCanonicalOpenSpecSpecId, requireOpenSpecEntityRelativePath, resolveCommandInvocation, resolveOpenSpecDataScope, resolveRootContext, resolveRuntimePackageInstallStrategy, resolveTerminalShellDefaults, runPhysicalReactivePathMutation, selectLocalDownloadGroup, shouldShowTranslationEngineInstallGate, sniffGlobalCli, spawnSafe, subscribeWatcherRuntimeStatus, terminalNotificationEventToPublishInput, terminateChildProcessTree, toCliProjectionCommandEvidence, toCliProjectionFailure, toCliProjectionNotice, toStoreFeatureResult, toggleMarkdownTask, updateProjectBindingContent, updateReactiveFileCache, validateActiveRootRawYaml, writePhysicalReactiveFile } from "@openspecui/core";
 import { basename, dirname, extname, isAbsolute, join, matchesGlob, relative, resolve, sep } from "node:path";
-import { access, copyFile, lstat, mkdir, open, readFile, readlink, realpath, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { access, copyFile, link, lstat, mkdir, open, readFile, readlink, realpath, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { downloadFile, fileDownloadInfo, listFiles, modelInfo } from "@huggingface/hub";
 import { observable } from "@trpc/server/observable";
 import { existsSync, readFileSync, realpathSync, statSync, write, writeFileSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
 import { freemem, homedir, hostname, platform, totalmem } from "node:os";
 import { z } from "zod";
 import { Agent, EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
@@ -20,7 +21,6 @@ import { cors } from "hono/cors";
 import { WebSocketServer } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { CustomSoundHashSchema as CustomSoundHashSchema$1, CustomSoundIdSchema, CustomSoundMetadataFileSchema, customHashFromSoundId, soundIdFromCustomHash } from "@openspecui/core/sounds";
-import { createHash, randomUUID } from "node:crypto";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import { NotificationGroupKeySchema, NotificationPublishInputSchema as NotificationPublishInputSchema$1, getNotificationGroupKey } from "@openspecui/core/notifications";
@@ -502,7 +502,7 @@ var ProjectHookRuntime = class {
 	}
 	async loadFresh() {
 		if (!await pathExists$1(this.hooksPath)) return {};
-		const { tsImport } = await import("./api-B4zHqR-f.mjs");
+		const { tsImport } = await import("./api-C_H23KUr.mjs");
 		return normalizeHooksModule(await tsImport(`${pathToFileURL(this.hooksPath).href}?t=${Date.now()}`, { parentURL: pathToFileURL(this.hooksPath).href }));
 	}
 };
@@ -524,6 +524,14 @@ function buildHuggingFaceApiBaseUrl(endpoint) {
 
 //#endregion
 //#region src/local-model-asset-store.ts
+/**
+* Orthogonal intents (updated 2026-08-05 Asia/Shanghai):
+* 1. Persist normalized local-model lifecycle state through complete JSON replacements.
+* 2. Survive transient Windows target locks without exposing partial metadata.
+* 3. Retire reactive caches only after the replacement commits.
+*
+* Original request (2026-08-05): Continue the Windows adaptation and fix equivalent failures together.
+*/
 const LocalModelAssetIndexSchema = LocalModelAssetStateSchema.array();
 var LocalModelAssetStore = class {
 	constructor(options) {
@@ -549,9 +557,13 @@ var LocalModelAssetStore = class {
 		const normalized = LocalModelAssetIndexSchema.parse([...states].sort((left, right) => left.modelId.localeCompare(right.modelId)));
 		const serialized = JSON.stringify(normalized, null, 2);
 		await mkdir(dirname(this.options.indexPath), { recursive: true });
-		const tempPath = `${this.options.indexPath}.${process.pid}.${Date.now()}.tmp`;
-		await writeFile(tempPath, `${serialized}\n`, "utf8");
-		await rename(tempPath, this.options.indexPath);
+		const tempPath = `${this.options.indexPath}.${process.pid}.${randomUUID()}.tmp`;
+		try {
+			await writeFile(tempPath, `${serialized}\n`, "utf8");
+			await replaceFileAtomically(tempPath, this.options.indexPath);
+		} finally {
+			await rm(tempPath, { force: true }).catch(() => void 0);
+		}
 		clearCache();
 	}
 	async upsert(state) {
@@ -759,6 +771,14 @@ function getTransformersFileCacheModelPath(cacheDir, modelId) {
 
 //#endregion
 //#region src/local-model-profile-manifest-store.ts
+/**
+* Orthogonal intents (updated 2026-08-05 Asia/Shanghai):
+* 1. Persist normalized local-model profile manifests through complete JSON replacements.
+* 2. Survive transient Windows target locks without exposing partial metadata.
+* 3. Retire reactive caches only after the replacement commits.
+*
+* Original request (2026-08-05): Continue the Windows adaptation and fix equivalent failures together.
+*/
 const LocalModelProfileManifestIndexSchema = z.object({
 	version: z.literal(1).default(1),
 	manifests: z.array(LocalModelProfileManifestSchema).default([])
@@ -786,9 +806,13 @@ var LocalModelProfileManifestStore = class {
 		});
 		const serialized = JSON.stringify(normalized, null, 2);
 		await mkdir(dirname(this.options.manifestPath), { recursive: true });
-		const tempPath = `${this.options.manifestPath}.${process.pid}.${Date.now()}.tmp`;
-		await writeFile(tempPath, `${serialized}\n`, "utf8");
-		await rename(tempPath, this.options.manifestPath);
+		const tempPath = `${this.options.manifestPath}.${process.pid}.${randomUUID()}.tmp`;
+		try {
+			await writeFile(tempPath, `${serialized}\n`, "utf8");
+			await replaceFileAtomically(tempPath, this.options.manifestPath);
+		} finally {
+			await rm(tempPath, { force: true }).catch(() => void 0);
+		}
 		clearCache();
 	}
 	async upsert(manifest) {
@@ -1390,6 +1414,16 @@ function isRecord$2(value) {
 
 //#endregion
 //#region src/local-model-asset-service.ts
+/**
+* Orthogonal intents (updated 2026-08-09 Asia/Shanghai):
+* 1. Resolve local translation model catalogs and versioned profile manifests.
+* 2. Own resumable download, pause, cancellation, retry, progress, and bounded Windows finalization.
+* 3. Materialize downloaded profiles and platform-appropriate Hugging Face cache pointers.
+* 4. Preserve selected-group authority while background work settles.
+* 5. Publish typed lifecycle snapshots and bounded diagnostics.
+*
+* Original request (2026-08-04): "Adapt macOS-first development and runtime paths to Windows."
+*/
 const DEFAULT_NETWORK_RETRY_LIMIT$2 = Number.POSITIVE_INFINITY;
 const DEFAULT_NETWORK_RETRY_DELAY_MS$2 = 500;
 const DEFAULT_NETWORK_RETRY_DELAY_MAX_MS$2 = 5e3;
@@ -2742,10 +2776,10 @@ async function streamDownloadToIncompleteFile(input) {
 	}
 	return true;
 }
+/** Commit one complete model file without deleting the previous target before replacement succeeds. */
 async function finalizeDownloadedFile$1(input) {
 	await mkdir(dirname(input.targetPath), { recursive: true });
-	await rm(input.targetPath, { force: true });
-	await rename(input.incompletePath, input.targetPath);
+	await replaceFileAtomically(input.incompletePath, input.targetPath);
 }
 async function mirrorDownloadedFileToHubCache(input) {
 	await mkdir(dirname(input.cachePaths.blobPath), { recursive: true });
@@ -2753,7 +2787,8 @@ async function mirrorDownloadedFileToHubCache(input) {
 	await rm(input.cachePaths.blobPath, { force: true });
 	await copyFile(input.targetPath, input.cachePaths.blobPath);
 	await unlink(input.cachePaths.pointerPath).catch(() => void 0);
-	await symlink(input.cachePaths.blobPath, input.cachePaths.pointerPath);
+	if (process.platform === "win32") await link(input.cachePaths.blobPath, input.cachePaths.pointerPath);
+	else await symlink(input.cachePaths.blobPath, input.cachePaths.pointerPath);
 }
 function getHubCacheFilePaths(input) {
 	const repoPath = getHubCacheRepoPath(input.cacheDir, input.modelId);
@@ -6504,7 +6539,10 @@ var EnvironmentGlobalProjectionService = class {
 * 2. Distinguish a valid non-repository path from an identity-command failure.
 * 3. Canonicalize repository paths for binding identity and stale-intent checks.
 * 4. Propagate cooperative cancellation into Git subprocess ownership.
+* 5. Hide the Git subprocess console window (`windowsHide`) so Git executed by a console-less
+*    Windows daemon never flashes a cmd window.
 *
+* Original request (2026-08-14): "在Windows平台上，执行命令总是会弹出cmd窗口，这个可否统一隐藏，你先调查一下原因"
 * Original request (2026-07-19): "代码已经提交，开始review。如果有问题，那么可更新change。"
 * Derived requirement (2026-07-19): Checkpoint 6.11 preserves objective Planning Git failures.
 * Original request (2026-07-31): "Code Git Snapshot，它非常慢，有时候甚至要十几秒"
@@ -6521,7 +6559,8 @@ async function defaultRunGit(cwd, args, signal) {
 			cwd,
 			encoding: "utf8",
 			maxBuffer: 8 * 1024 * 1024,
-			signal
+			signal,
+			windowsHide: true
 		});
 		return {
 			ok: true,
@@ -9076,7 +9115,10 @@ async function buildDashboardGitSnapshot(options) {
 * 2. Preserve backend-issued Code binding provenance and observable Git task lifecycle.
 * 3. Trigger explicit Git snapshot invalidation through a reactive stamp without broad Dashboard reloads.
 * 4. Propagate Projection Work cancellation into the Git subprocess tree.
+* 5. Hide Git identity-probe subprocess console windows (`windowsHide`) under the console-less
+*    Windows daemon.
 *
+* Original request (2026-08-14): "在Windows平台上，执行命令总是会弹出cmd窗口，这个可否统一隐藏，你先调查一下原因"
 * Original request (2026-07-23): "现在页面数据的加载数据非常慢（比如dashboard页面、changes页面都要等待非常久，页面刷新后，似乎后台没有缓存一样，也要加载很久。"
 * Derived requirement (2026-07-25): P4.3 settles a cached refresh stamp before Dashboard Git refresh returns.
 * Original request (2026-07-31): "Code Git Snapshot，它非常慢，有时候甚至要十几秒"
@@ -9127,7 +9169,8 @@ async function resolveGitMetadataDir(projectDir) {
 		const { stdout } = await execFileAsync$1("git", ["rev-parse", "--git-dir"], {
 			cwd: projectDir,
 			maxBuffer: 1024 * 1024,
-			encoding: "utf8"
+			encoding: "utf8",
+			windowsHide: true
 		});
 		const gitDirRaw = stdout.trim();
 		if (!gitDirRaw) return null;
@@ -9667,12 +9710,13 @@ function resolveEntityEntryPath(input) {
 //#endregion
 //#region src/file-preview-service.ts
 /**
-* Orthogonal intents (updated 2026-07-16 Asia/Shanghai):
+* Orthogonal intents (updated 2026-08-04 Asia/Shanghai):
 * 1. Prepare source-bound preview sessions for supported entity files.
-* 2. Serve preview documents and bundled assets with confined path resolution.
+* 2. Serve preview documents and bundled assets with platform-neutral confined path resolution.
 * 3. Retire every preview session when its owning Planning root is replaced.
 *
 * Original request (2026-07-16): "A -> B 后必须清退 A 的 preview。"
+* Original request (2026-08-04): "Make pnpm openspecui start and equivalent package scripts work on Windows."
 */
 const PREVIEW_ENTRY_FILE_BY_KIND = {
 	image: "image-preview.html",
@@ -9696,6 +9740,10 @@ function toHash(input) {
 function stripLeadingSlash(path) {
 	return path.replace(/^\/+/, "");
 }
+function isPathInsideRoot(rootPath, candidatePath) {
+	const relativePath$1 = relative(rootPath, candidatePath);
+	return relativePath$1 === "" || relativePath$1 !== ".." && !relativePath$1.startsWith(`..${sep}`) && !isAbsolute(relativePath$1);
+}
 function inferPreviewAssetContentType(path) {
 	switch (extname(path).toLowerCase()) {
 		case ".html": return "text/html";
@@ -9773,7 +9821,7 @@ var FilePreviewService = class {
 		const normalized = stripLeadingSlash(requestPath);
 		if (session.previewKind === "html") {
 			const absolutePath$1 = resolve(session.directoryPath, normalized);
-			if (!absolutePath$1.startsWith(session.directoryPath + "/")) return null;
+			if (!isPathInsideRoot(session.directoryPath, absolutePath$1)) return null;
 			if (!existsSync(absolutePath$1) || !statSync(absolutePath$1).isFile()) return null;
 			return {
 				content: readFileSync(absolutePath$1),
@@ -9783,7 +9831,7 @@ var FilePreviewService = class {
 		if (normalized.startsWith("resource/")) {
 			const resourcePath = normalized.slice(9);
 			const absolutePath$1 = resolve(session.directoryPath, resourcePath);
-			if (!absolutePath$1.startsWith(session.directoryPath + "/")) return null;
+			if (!isPathInsideRoot(session.directoryPath, absolutePath$1)) return null;
 			if (!existsSync(absolutePath$1) || !statSync(absolutePath$1).isFile()) return null;
 			return {
 				content: readFileSync(absolutePath$1),
@@ -9793,7 +9841,7 @@ var FilePreviewService = class {
 		const assetName = normalized || session.entryFileName;
 		if (!assetName) return null;
 		const absolutePath = resolve(this.previewAssetsDir, assetName);
-		if (!absolutePath.startsWith(resolve(this.previewAssetsDir) + "/")) return null;
+		if (!isPathInsideRoot(this.previewAssetsDir, absolutePath)) return null;
 		if (!existsSync(absolutePath) || !statSync(absolutePath).isFile()) return null;
 		if (isRewritablePreviewAsset(assetName)) {
 			const rewritten = rewritePreviewAssetPaths(readFileSync(absolutePath, "utf8"), hash);
@@ -11828,11 +11876,12 @@ var PtyInputWriter = class {
 //#endregion
 //#region src/pty-manager.ts
 /**
-* Orthogonal intents (updated 2026-07-22 Asia/Shanghai):
+* Orthogonal intents (updated 2026-08-09 Asia/Shanghai):
 * 1. Own PTY session process, ordered input, buffer, title, and lifecycle state.
 * 2. Spawn each session at an explicitly resolved launch-project or planning-root cwd and retain its immutable Root generation.
 * 3. Preserve the inherited backend environment, including XDG_DATA_HOME, across cwd targets.
 * 4. List and close server-owned sessions for reconnect and teardown.
+* 5. Resolve Windows Agent launchers to native argv while retaining the requested display command.
 *
 * Original request (2026-07-16): "3.8 Terminal exposes explicit launch-project cwd and planning-root cwd while preserving inherited XDG_DATA_HOME"
 * Owner-reported defect (2026-07-21): Pre-created Agent terminals are absent from Compose Send.
@@ -11919,7 +11968,11 @@ var PtySession = class extends EventEmitter$1 {
 		this.rootGeneration = opts.rootGeneration;
 		this.maxBufferLines = opts.scrollback ?? DEFAULT_SCROLLBACK;
 		this.maxBufferBytes = opts.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES;
-		this.process = pty.spawn(this.command, this.args, {
+		const invocation = resolveCommandInvocation(this.command, this.args, {
+			cwd: opts.cwd,
+			env: process.env
+		});
+		this.process = pty.spawn(invocation.command, invocation.args, {
 			name: "xterm-256color",
 			cols: opts.cols ?? 80,
 			rows: opts.rows ?? 24,
@@ -17774,10 +17827,12 @@ var TranslationCacheService = class {
 //#endregion
 //#region src/runtime-package-host.ts
 /**
-* Orthogonal intents (updated 2026-07-31 Asia/Shanghai):
+* Original request (2026-08-04): "The project was developed on macOS and now needs Windows adaptation."
+* Orthogonal intents (updated 2026-08-08 Asia/Shanghai):
 * 1. Resolve the physical host manifest that owns on-demand runtime installation.
 * 2. Read declared runtime ranges without treating optional peers as install-time dependencies.
 * 3. Normalize legacy on-demand optional dependency records after package-manager installation.
+* 4. Execute the npm dependency probe through Core's shell-independent Windows-safe spawn owner.
 *
 * Original request (2026-07-31): "这个依赖好像会导致安装的时候仍然会被强制装上去，可能要改成 peerDependencies 会更好"
 */
@@ -17814,7 +17869,7 @@ function readRuntimeHostPackageDependencyRequest(input) {
 	return `${input.packageName}@${range}`;
 }
 async function readRuntimeHostPackageDependencyTree(input) {
-	const child = spawn("npm", [
+	const started = spawnSafe("npm", [
 		"list",
 		"--json",
 		"--omit=dev",
@@ -17822,9 +17877,10 @@ async function readRuntimeHostPackageDependencyTree(input) {
 		...input.packageNames
 	], {
 		cwd: input.runtimeHost.packageDir,
-		shell: false,
 		env: createCleanCliEnv()
 	});
+	if (!started.ok) throw new Error(`Unable to start npm list: ${started.error.message}`);
+	const { child } = started;
 	const stdoutChunks = [];
 	const stderrChunks = [];
 	const exitCode = await new Promise((resolve$1, reject) => {
@@ -18066,6 +18122,17 @@ function buildRuntimeConfig(engineId, profile) {
 
 //#endregion
 //#region src/translation-engine-service.ts
+/**
+* Orthogonal intents (updated 2026-08-09 Asia/Shanghai):
+* 1. Project translation-engine inventory, selection, lifecycle, and immutable settings snapshots.
+* 2. Install and cancel managed local runtime dependencies through observable, bounded process settlement.
+* 3. Own local model search, download plans, persisted asset readiness, and profile validation.
+* 4. Execute browser, OpenAI, and managed-local batch translation with cache-aware events.
+* 5. Preserve CT2/llama runtime policy, directional language constraints, and resource limits.
+*
+* Original request (2026-05-22): "Server provides engine registry, installation sessions, installation logs, selection, and translation."
+* Original request (2026-08-04): "Make pnpm openspecui start and equivalent package scripts work on Windows."
+*/
 const __dirname$2 = dirname(fileURLToPath(import.meta.url));
 var TranslationEngineService = class {
 	projectDir;
@@ -18796,55 +18863,82 @@ async function installManagedLocalRuntime(engineId, input) {
 	input.onLifecycle?.(finalLifecycle);
 	return finalLifecycle;
 }
+/** Run one package-manager installation with bounded cross-platform tree cancellation. */
 async function runRuntimeInstallCommand(input) {
-	let child;
-	try {
-		child = spawn(input.command.cmd, input.command.args, {
-			cwd: input.cwd,
-			shell: false,
-			env: createCleanCliEnv()
-		});
-	} catch (error) {
-		return error instanceof Error ? error.message : String(error);
-	}
-	const abort = () => {
-		try {
-			child.kill();
-		} catch {}
-	};
-	input.signal?.addEventListener("abort", abort, { once: true });
-	try {
-		await new Promise((resolve$1, reject) => {
-			child.stdout?.on("data", (data) => {
-				input.onLog?.({
-					stream: "stdout",
-					text: data.toString()
-				});
-			});
-			child.stderr?.on("data", (data) => {
-				input.onLog?.({
-					stream: "stderr",
-					text: data.toString()
-				});
-			});
-			child.on("error", (error) => {
-				reject(error);
+	if (input.signal?.aborted) return "Translation runtime installation cancelled.";
+	const started = spawnSafe(input.command.cmd, input.command.args, {
+		cwd: input.cwd,
+		shell: false,
+		env: createCleanCliEnv()
+	});
+	if (!started.ok) return started.error.message;
+	const { child } = started;
+	const completion = new Promise((resolve$1) => {
+		child.stdout?.on("data", (data) => {
+			input.onLog?.({
+				stream: "stdout",
+				text: data.toString()
 			});
-			child.on("close", (exitCode) => {
-				if (exitCode === 0) {
-					resolve$1();
-					return;
-				}
-				reject(/* @__PURE__ */ new Error(`${input.command.displayCommand} exited with code ${exitCode ?? "unknown"}.`));
+		});
+		child.stderr?.on("data", (data) => {
+			input.onLog?.({
+				stream: "stderr",
+				text: data.toString()
 			});
 		});
-		return null;
-	} catch (error) {
-		return error instanceof Error ? error.message : String(error);
+		child.once("error", (error) => resolve$1(error.message));
+		child.once("close", (exitCode) => {
+			resolve$1(exitCode === 0 ? null : `${input.command.displayCommand} exited with code ${exitCode ?? "unknown"}.`);
+		});
+	});
+	let requestAbort = null;
+	const abortRequested = new Promise((resolve$1) => {
+		requestAbort = resolve$1;
+	});
+	const abort = () => requestAbort?.();
+	input.signal?.addEventListener("abort", abort, { once: true });
+	try {
+		const outcome = await Promise.race([completion.then((result) => ({
+			kind: "complete",
+			result
+		})), abortRequested.then(() => ({ kind: "abort" }))]);
+		if (outcome.kind === "complete") return outcome.result;
+		return settleRuntimeInstallCancellation(child, completion, input.terminationTimeoutMs ?? 5e3);
 	} finally {
 		input.signal?.removeEventListener("abort", abort);
 	}
 }
+async function settleRuntimeInstallCancellation(child, completion, timeoutMs) {
+	const failures = [];
+	const terminate = async (signal) => {
+		let timer = null;
+		try {
+			await Promise.race([terminateChildProcessTree(child, signal), new Promise((_resolve, reject) => {
+				timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`Timed out requesting ${signal} for runtime installation.`)), timeoutMs);
+			})]);
+		} catch (error) {
+			failures.push(error);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
+	};
+	const waitForCompletion = async () => {
+		let timer = null;
+		try {
+			return await Promise.race([completion.then(() => true), new Promise((resolve$1) => {
+				timer = setTimeout(() => resolve$1(false), timeoutMs);
+			})]);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
+	};
+	await terminate("SIGTERM");
+	if (await waitForCompletion()) return "Translation runtime installation cancelled.";
+	await terminate("SIGKILL");
+	if (await waitForCompletion()) return "Translation runtime installation cancelled.";
+	const failureText = failures.map((error) => error instanceof Error ? error.message : String(error)).join(" ");
+	return `Translation runtime installation cancellation did not settle.${failureText ? ` ${failureText}` : ""}`;
+}
 function getManagedLocalRuntimeSpec(engineId) {
 	if (engineId === "local") return {
 		packageNames: ["@huggingface/transformers", "onnxruntime-node"],
@@ -18957,7 +19051,9 @@ function readCurrentRuntimeMemory() {
 * 2. Execute translation engines in isolated worker-thread or process hosts.
 * 3. Enforce cancellation and process memory limits while preserving batch evidence.
 * 4. Route worker-thread payloads by an explicit translation protocol kind.
+* 5. Hide the process-host bootstrap console window (`windowsHide`) under a console-less Windows daemon.
 *
+* Original request (2026-08-14): "在Windows平台上，执行命令总是会弹出cmd窗口，这个可否统一隐藏，你先调查一下原因"
 * Original request (2026-07-24): "Production worker kinds must not claim each other's payloads."
 */
 const execFileAsync = promisify(execFile);
@@ -19253,7 +19349,8 @@ function createManagedLocalTranslationProcess(input) {
 			"inherit",
 			"inherit",
 			"ipc"
-		]
+		],
+		windowsHide: true
 	});
 }
 function resolveProcessEntryUrl() {
@@ -19410,11 +19507,11 @@ if (!isMainThread) {
 //#endregion
 //#region src/server.ts
 /**
-* Orthogonal intents (updated 2026-08-01 Asia/Shanghai):
+* Orthogonal intents (updated 2026-08-04 Asia/Shanghai):
 * 1. Bootstrap HTTP/tRPC, WebSocket, PTY, and launch-project runtime services.
 * 2. Delegate planning-root, Store, Environment Global, Agent, and Root Context projection ownership.
 * 3. Host notifications, sound, preview-resource, translation, and telemetry boundaries.
-* 4. Admit dynamic loopback App origins and perform deterministic runtime teardown.
+* 4. Admit dynamic loopback App origins and await deterministic native-handle teardown.
 * 5. Bridge settled machine-global config changes into Root Context replacement.
 *
 * Original request (2026-07-15): "你先负责后端（内核）的开发。"
@@ -19936,7 +20033,7 @@ async function createWebSocketServer(server, httpServer, config) {
 					() => ptyManager.closeAll(),
 					() => closeWebSocketServer(ptyWss),
 					() => closeWebSocketServer(wss),
-					() => server.watcher?.stop()
+					() => server.watcher?.close()
 				]);
 				await settleCleanupPhase(failures, [() => server.storeObservationFallback.dispose()]);
 				await settleCleanupPhase(failures, [() => server.storeMutationService.dispose()]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/server",
-  "version": "7.0.0",
+  "version": "7.0.2",
   "type": "module",
   "main": "dist/index.mjs",
   "exports": {
@@ -25,7 +25,7 @@
     "typecheck:nested-spec-tests": "tsc -p tsconfig.nested-spec-tests.json --noEmit",
     "typecheck:project-initialization-tests": "tsc -p tsconfig.project-initialization-tests.json --noEmit",
     "typecheck:default-store-tests": "tsc -p tsconfig.default-store-tests.json --noEmit",
-    "dev": "NODE_OPTIONS=\"${NODE_OPTIONS:+$NODE_OPTIONS }--conditions=development\" tsx watch --include '../core/dist/**' --include '../search/dist/**' src/standalone.ts",
+    "dev": "tsx watch --conditions=development --include '../core/dist/**' --include '../search/dist/**' src/standalone.ts",
     "test": "vitest run",
     "test:watch": "vitest"
   },
@@ -33,8 +33,8 @@
     "@hono/node-server": "^1.14.1",
     "@huggingface/hub": "^2.12.0",
     "@lydell/node-pty": "^1.1.0",
-    "@openspecui/core": "7.0.0",
-    "@openspecui/search": "7.0.0",
+    "@openspecui/core": "7.0.2",
+    "@openspecui/search": "7.0.2",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
     "@opentelemetry/sdk-node": "^0.221.0",