@openspecui/server 7.0.1 → 9.0.0

package/dist/{api-B4zHqR-f.mjs → api-C_H23KUr.mjs}

@@ -2,9 +2,9 @@ import m, { createRequire } from "node:module";
 import a from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import se, { writeSync } from "node:fs";
+import Ht from "node:crypto";
 import o from "node:os";
 import p from "node:net";
-import Ht from "node:crypto";
 import { inspect } from "node:util";
 import { MessageChannel } from "node:worker_threads";
 import { createRequire as createRequire$1 } from "module";

package/dist/index.mjs

@@ -1,12 +1,13 @@
 import { a as resolveCt2ModelDownloadPlanFromRepositoryFiles } from "./src-Dh_UAz5C.mjs";
 import { t as resolveGgufModelDownloadPlanFromRepositoryFiles } from "./src-CZfiVL_-.mjs";
-import { AI_TOOLS, ActiveRootMutationSchema, ActiveRootRevisionSchema, AgentDeliveryPolicyUpdateSchema, BatchTranslateInputSchema, CliExecutor, CliProjectionCommandError, CliProjectionNoticeSchema, CodeEditorThemeSchema, ConfigManager, CustomSoundHashSchema, DASHBOARD_METRIC_KEYS, DashboardConfigSchema, DashboardGitSnapshotSchema, DashboardSummaryInvalidationSchema, DashboardSummaryProjectionStateSchema, DashboardTrendsProjectionSchema, DocumentTranslationConfigUpdateSchema, EnvironmentDefaultStoreUpdateSchema, EnvironmentGlobalConfigValueSchema, EnvironmentGlobalFileProjectionDataSchema, EnvironmentGlobalFileProjectionStateSchema, EnvironmentGlobalProjectionDataSchema, EnvironmentGlobalProjectionStateSchema, GitConfigSchema, GlobalSettingsManager, LocalModelAssetStateSchema, LocalModelLifecycleFileStateSchema, LocalModelLifecycleGroupStateSchema, LocalModelProfileManifestSchema, MarkdownParser, NotificationPublishInputSchema, NotificationSettingsSchema, OPENSPECUI_DOCUMENT_HOOK_VERSION, OPENSPECUI_WORKFLOW_HOOK_VERSION, OPSX_ARTIFACT_INPUT_ACTIONS, OPSX_CHANGE_INPUT_ACTIONS, OPSX_COMMAND_CAPABLE_WORKFLOWS, OPSX_CORE_PROFILE_WORKFLOWS, OPSX_TEXT_INPUT_ACTIONS, OpenSpecAdapter, OpenSpecDataHomeObserver, OpenSpecUIGlobalSettingsUpdateSchema, OpenSpecWatcher, OpsxConfigSchema, OpsxKernel, OwnedSpecIdentitySchema, PINNED_AGENT_GENERATOR_VERSION, PlanningCliProjectionDataSchema, PlanningCliProjectionSelectorSchema, PlanningCliProjectionStateSchema, ProjectBindingUpdateSchema, ProjectWatcher, PtyClientMessageSchema, RUNTIME_INVALIDATION_FACETS, ReactiveContext, ReactiveObservationEnvironment, ReactiveState, RuntimeInvalidationIndex, RuntimeRootInvalidationRegistry, ServiceTranslationEngineIdSchema, SpecIdentitySchema, StoreDoctorResultSchema, StoreListResultSchema, StoreMutationLifecycleEventSchema, StoreMutationStartResponseSchema, TRANSLATION_ENGINE_MANIFESTS, TerminalConfigSchema, TerminalControlParser, TerminalRendererEngineSchema, TranslationCacheReadInputSchema, TranslationCacheWriteInputSchema, TranslationEngineIdSchema, TranslationEngineLifecycleStatusSchema, acquireWatcher, applyAgentDeliveryPolicy, buildBackendHealthPayload, buildLocalDownloadPlanFromRepositoryFiles, buildRuntimePackageInstallCommand, checkLocalDirectionalModelLanguagePair, classifyStoreCliResult, clearCache, compareAndWriteAtomicPhysicalReactiveFile, computeEnvUri, constantTimeEqual, createCleanCliEnv, createPhysicalReactiveDirectory, createToolInitStateProjection, createTranslationEngineLifecycleStatus, detectRuntimePackageManager, getAllTools, getAvailableTools, getConfiguredTools, getDefaultCliCommandString, getDetectedProjectTools, getExternalCodexCommandObservationRoot, getManagedLocalTranslationEngineManifest, getOpsxEntityRootRelativePath, getRootContextCliSelector, getToolInitStates, getTranslationEngineLifecycleMessage, getWatcherRuntimeStatus, inferFileMime, inferFilePreviewKind, inspectActiveRootOfficialConfig, inspectEnvironmentDefaultStore, inspectProjectBinding, isDirectionalManagedLocalTranslationEngineId, isManagedLocalTranslationEngineId, isTerminalMutationStatus, isTranslationEngineDependencyReady, isTranslationEngineRuntimeReady, loadOpenSpecAgentCommandContents, normalizeAgentDeliveryPolicy, normalizeBatchTranslationError, parseCliCommandResult, parseOpsxEntityMetadata, parseOpsxSchemaDetail, patchActiveRootOfficialFields, reactiveReadFile, reactiveStat, removePhysicalReactivePath, requireCanonicalOpenSpecEntityId, requireCanonicalOpenSpecSpecId, requireOpenSpecEntityRelativePath, resolveOpenSpecDataScope, resolveRootContext, resolveRuntimePackageInstallStrategy, resolveTerminalShellDefaults, runPhysicalReactivePathMutation, selectLocalDownloadGroup, shouldShowTranslationEngineInstallGate, sniffGlobalCli, subscribeWatcherRuntimeStatus, terminalNotificationEventToPublishInput, toCliProjectionCommandEvidence, toCliProjectionFailure, toCliProjectionNotice, toStoreFeatureResult, toggleMarkdownTask, updateProjectBindingContent, updateReactiveFileCache, validateActiveRootRawYaml, writePhysicalReactiveFile } from "@openspecui/core";
+import { ActiveRootMutationSchema, ActiveRootRevisionSchema, AgentDeliveryPolicyUpdateSchema, BatchTranslateInputSchema, CliExecutor, CliProjectionCommandError, CliProjectionNoticeSchema, CodeEditorThemeSchema, ConfigManager, CustomSoundHashSchema, DASHBOARD_METRIC_KEYS, DashboardConfigSchema, DashboardGitSnapshotSchema, DashboardSummaryInvalidationSchema, DashboardSummaryProjectionStateSchema, DashboardTrendsProjectionSchema, DocumentTranslationConfigUpdateSchema, EnvironmentDefaultStoreUpdateSchema, EnvironmentGlobalConfigValueSchema, EnvironmentGlobalFileProjectionDataSchema, EnvironmentGlobalFileProjectionStateSchema, EnvironmentGlobalProjectionDataSchema, EnvironmentGlobalProjectionStateSchema, GitConfigSchema, GlobalSettingsManager, LocalModelAssetStateSchema, LocalModelLifecycleFileStateSchema, LocalModelLifecycleGroupStateSchema, LocalModelProfileManifestSchema, MarkdownParser, NotificationPublishInputSchema, NotificationSettingsSchema, OPENSPECUI_DOCUMENT_HOOK_VERSION, OPENSPECUI_WORKFLOW_HOOK_VERSION, OPSX_ARTIFACT_INPUT_ACTIONS, OPSX_CHANGE_INPUT_ACTIONS, OPSX_COMMAND_CAPABLE_WORKFLOWS, OPSX_CORE_PROFILE_WORKFLOWS, OPSX_TEXT_INPUT_ACTIONS, OpenSpecAdapter, OpenSpecDataHomeObserver, OpenSpecUIGlobalSettingsUpdateSchema, OpenSpecWatcher, OpsxConfigSchema, OpsxKernel, OwnedSpecIdentitySchema, PlanningCliProjectionDataSchema, PlanningCliProjectionSelectorSchema, PlanningCliProjectionStateSchema, ProjectBindingUpdateSchema, ProjectWatcher, PtyClientMessageSchema, RUNTIME_INVALIDATION_FACETS, ReactiveContext, ReactiveObservationEnvironment, ReactiveState, RuntimeInvalidationIndex, RuntimeRootInvalidationRegistry, ServiceTranslationEngineIdSchema, SpecIdentitySchema, StoreDoctorResultSchema, StoreListResultSchema, StoreMutationLifecycleEventSchema, StoreMutationStartResponseSchema, TRANSLATION_ENGINE_MANIFESTS, TerminalConfigSchema, TerminalControlParser, TerminalRendererEngineSchema, TranslationCacheReadInputSchema, TranslationCacheWriteInputSchema, TranslationEngineIdSchema, TranslationEngineLifecycleStatusSchema, acquireWatcher, applyAgentDeliveryPolicy, buildBackendHealthPayload, buildLocalDownloadPlanFromRepositoryFiles, buildRuntimePackageInstallCommand, checkLocalDirectionalModelLanguagePair, classifyStoreCliResult, clearCache, compareAndWriteAtomicPhysicalReactiveFile, computeEnvUri, constantTimeEqual, createCleanCliEnv, createPhysicalReactiveDirectory, createToolInitStateProjection, createTranslationEngineLifecycleStatus, detectRuntimePackageManager, getAllTools, getAvailableTools, getConfiguredTools, getDefaultCliCommandString, getDetectedProjectTools, getExternalAgentSkillsObservationRoots, getExternalCodexCommandObservationRoot, getManagedLocalTranslationEngineManifest, getOpsxEntityRootRelativePath, getRootContextCliSelector, getToolInitStates, getTranslationEngineLifecycleMessage, getWatcherRuntimeStatus, inferFileMime, inferFilePreviewKind, inspectActiveRootOfficialConfig, inspectEnvironmentDefaultStore, inspectProjectBinding, isDirectionalManagedLocalTranslationEngineId, isManagedLocalTranslationEngineId, isTerminalMutationStatus, isTranslationEngineDependencyReady, isTranslationEngineRuntimeReady, loadOpenSpecAgentCommandContents, normalizeAgentDeliveryPolicy, normalizeBatchTranslationError, parseCliCommandResult, parseOpsxEntityMetadata, parseOpsxSchemaDetail, patchActiveRootOfficialFields, reactiveReadFile, reactiveStat, removePhysicalReactivePath, replaceFileAtomically, requireCanonicalOpenSpecEntityId, requireCanonicalOpenSpecSpecId, requireOpenSpecEntityRelativePath, resolveCommandInvocation, resolveOpenSpecDataScope, resolveRootContext, resolveRuntimePackageInstallStrategy, resolveTerminalShellDefaults, runPhysicalReactivePathMutation, selectAgentDeliveryRegistry, selectLocalDownloadGroup, shouldShowTranslationEngineInstallGate, sniffGlobalCli, spawnSafe, subscribeWatcherRuntimeStatus, terminalNotificationEventToPublishInput, terminateChildProcessTree, toCliProjectionCommandEvidence, toCliProjectionFailure, toCliProjectionNotice, toStoreFeatureResult, toggleMarkdownTask, updateProjectBindingContent, updateReactiveFileCache, validateActiveRootRawYaml, writePhysicalReactiveFile } from "@openspecui/core";
 import { basename, dirname, extname, isAbsolute, join, matchesGlob, relative, resolve, sep } from "node:path";
-import { access, copyFile, lstat, mkdir, open, readFile, readlink, realpath, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
+import { access, copyFile, link, lstat, mkdir, open, readFile, readlink, realpath, rename, rm, stat, symlink, unlink, writeFile } from "node:fs/promises";
 import { fileURLToPath, pathToFileURL } from "node:url";
 import { downloadFile, fileDownloadInfo, listFiles, modelInfo } from "@huggingface/hub";
 import { observable } from "@trpc/server/observable";
 import { existsSync, readFileSync, realpathSync, statSync, write, writeFileSync } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
 import { freemem, homedir, hostname, platform, totalmem } from "node:os";
 import { z } from "zod";
 import { Agent, EnvHttpProxyAgent, setGlobalDispatcher } from "undici";
@@ -20,7 +21,6 @@ import { cors } from "hono/cors";
 import { WebSocketServer } from "ws";
 import { Buffer as Buffer$1 } from "node:buffer";
 import { CustomSoundHashSchema as CustomSoundHashSchema$1, CustomSoundIdSchema, CustomSoundMetadataFileSchema, customHashFromSoundId, soundIdFromCustomHash } from "@openspecui/core/sounds";
-import { createHash, randomUUID } from "node:crypto";
 import { execFile, spawn } from "node:child_process";
 import { promisify } from "node:util";
 import { NotificationGroupKeySchema, NotificationPublishInputSchema as NotificationPublishInputSchema$1, getNotificationGroupKey } from "@openspecui/core/notifications";
@@ -33,6 +33,7 @@ import { NodeWorkerSearchProvider } from "@openspecui/search/node";
 import * as pty from "@lydell/node-pty";
 import { EventEmitter as EventEmitter$1 } from "events";
 import { HostedCliProjectionNoticeSchema, HostedRootContextProjectionStateSchema, HostedRootContextResolvedStateSchema, HostedStoreContentChangesProjectionStateSchema, HostedStoreContentSpecsProjectionStateSchema, HostedStoreDoctorEnvelopeSchema, HostedStoreDoctorProjectionStateSchema, HostedStoreListEnvelopeSchema, HostedStoreListProjectionStateSchema } from "@openspecui/core/hosted-contract";
+import { deriveOpenSpecCliCapabilities, parseOpenSpecCliVersion } from "@openspecui/core/openspec-compat";
 import { StoreContentChangeListSchema, StoreContentSpecListSchema } from "@openspecui/core/store-content-projection";
 import { OTLPTraceExporter } from "@opentelemetry/exporter-trace-otlp-http";
 import { NodeSDK } from "@opentelemetry/sdk-node";
@@ -502,7 +503,7 @@ var ProjectHookRuntime = class {
 	}
 	async loadFresh() {
 		if (!await pathExists$1(this.hooksPath)) return {};
-		const { tsImport } = await import("./api-B4zHqR-f.mjs");
+		const { tsImport } = await import("./api-C_H23KUr.mjs");
 		return normalizeHooksModule(await tsImport(`${pathToFileURL(this.hooksPath).href}?t=${Date.now()}`, { parentURL: pathToFileURL(this.hooksPath).href }));
 	}
 };
@@ -524,6 +525,14 @@ function buildHuggingFaceApiBaseUrl(endpoint) {
 
 //#endregion
 //#region src/local-model-asset-store.ts
+/**
+* Orthogonal intents (updated 2026-08-05 Asia/Shanghai):
+* 1. Persist normalized local-model lifecycle state through complete JSON replacements.
+* 2. Survive transient Windows target locks without exposing partial metadata.
+* 3. Retire reactive caches only after the replacement commits.
+*
+* Original request (2026-08-05): Continue the Windows adaptation and fix equivalent failures together.
+*/
 const LocalModelAssetIndexSchema = LocalModelAssetStateSchema.array();
 var LocalModelAssetStore = class {
 	constructor(options) {
@@ -549,9 +558,13 @@ var LocalModelAssetStore = class {
 		const normalized = LocalModelAssetIndexSchema.parse([...states].sort((left, right) => left.modelId.localeCompare(right.modelId)));
 		const serialized = JSON.stringify(normalized, null, 2);
 		await mkdir(dirname(this.options.indexPath), { recursive: true });
-		const tempPath = `${this.options.indexPath}.${process.pid}.${Date.now()}.tmp`;
-		await writeFile(tempPath, `${serialized}\n`, "utf8");
-		await rename(tempPath, this.options.indexPath);
+		const tempPath = `${this.options.indexPath}.${process.pid}.${randomUUID()}.tmp`;
+		try {
+			await writeFile(tempPath, `${serialized}\n`, "utf8");
+			await replaceFileAtomically(tempPath, this.options.indexPath);
+		} finally {
+			await rm(tempPath, { force: true }).catch(() => void 0);
+		}
 		clearCache();
 	}
 	async upsert(state) {
@@ -759,6 +772,14 @@ function getTransformersFileCacheModelPath(cacheDir, modelId) {
 
 //#endregion
 //#region src/local-model-profile-manifest-store.ts
+/**
+* Orthogonal intents (updated 2026-08-05 Asia/Shanghai):
+* 1. Persist normalized local-model profile manifests through complete JSON replacements.
+* 2. Survive transient Windows target locks without exposing partial metadata.
+* 3. Retire reactive caches only after the replacement commits.
+*
+* Original request (2026-08-05): Continue the Windows adaptation and fix equivalent failures together.
+*/
 const LocalModelProfileManifestIndexSchema = z.object({
 	version: z.literal(1).default(1),
 	manifests: z.array(LocalModelProfileManifestSchema).default([])
@@ -786,9 +807,13 @@ var LocalModelProfileManifestStore = class {
 		});
 		const serialized = JSON.stringify(normalized, null, 2);
 		await mkdir(dirname(this.options.manifestPath), { recursive: true });
-		const tempPath = `${this.options.manifestPath}.${process.pid}.${Date.now()}.tmp`;
-		await writeFile(tempPath, `${serialized}\n`, "utf8");
-		await rename(tempPath, this.options.manifestPath);
+		const tempPath = `${this.options.manifestPath}.${process.pid}.${randomUUID()}.tmp`;
+		try {
+			await writeFile(tempPath, `${serialized}\n`, "utf8");
+			await replaceFileAtomically(tempPath, this.options.manifestPath);
+		} finally {
+			await rm(tempPath, { force: true }).catch(() => void 0);
+		}
 		clearCache();
 	}
 	async upsert(manifest) {
@@ -1390,6 +1415,16 @@ function isRecord$2(value) {
 
 //#endregion
 //#region src/local-model-asset-service.ts
+/**
+* Orthogonal intents (updated 2026-08-09 Asia/Shanghai):
+* 1. Resolve local translation model catalogs and versioned profile manifests.
+* 2. Own resumable download, pause, cancellation, retry, progress, and bounded Windows finalization.
+* 3. Materialize downloaded profiles and platform-appropriate Hugging Face cache pointers.
+* 4. Preserve selected-group authority while background work settles.
+* 5. Publish typed lifecycle snapshots and bounded diagnostics.
+*
+* Original request (2026-08-04): "Adapt macOS-first development and runtime paths to Windows."
+*/
 const DEFAULT_NETWORK_RETRY_LIMIT$2 = Number.POSITIVE_INFINITY;
 const DEFAULT_NETWORK_RETRY_DELAY_MS$2 = 500;
 const DEFAULT_NETWORK_RETRY_DELAY_MAX_MS$2 = 5e3;
@@ -2742,10 +2777,10 @@ async function streamDownloadToIncompleteFile(input) {
 	}
 	return true;
 }
+/** Commit one complete model file without deleting the previous target before replacement succeeds. */
 async function finalizeDownloadedFile$1(input) {
 	await mkdir(dirname(input.targetPath), { recursive: true });
-	await rm(input.targetPath, { force: true });
-	await rename(input.incompletePath, input.targetPath);
+	await replaceFileAtomically(input.incompletePath, input.targetPath);
 }
 async function mirrorDownloadedFileToHubCache(input) {
 	await mkdir(dirname(input.cachePaths.blobPath), { recursive: true });
@@ -2753,7 +2788,8 @@ async function mirrorDownloadedFileToHubCache(input) {
 	await rm(input.cachePaths.blobPath, { force: true });
 	await copyFile(input.targetPath, input.cachePaths.blobPath);
 	await unlink(input.cachePaths.pointerPath).catch(() => void 0);
-	await symlink(input.cachePaths.blobPath, input.cachePaths.pointerPath);
+	if (process.platform === "win32") await link(input.cachePaths.blobPath, input.cachePaths.pointerPath);
+	else await symlink(input.cachePaths.blobPath, input.cachePaths.pointerPath);
 }
 function getHubCacheFilePaths(input) {
 	const repoPath = getHubCacheRepoPath(input.cacheDir, input.modelId);
@@ -2948,13 +2984,15 @@ function resolveDefaultServerHostIdentity() {
 //#endregion
 //#region src/agent-delivery-projection-service.ts
 /**
-* Orthogonal intents (created 2026-08-01 Asia/Shanghai):
-* 1. Combine the complete OpenSpec 1.7 Agent registry with authoritative Environment delivery policy.
+* Orthogonal intents (updated 2026-08-15 Asia/Shanghai):
+* 1. Combine the complete OpenSpec 1.9 Agent registry with authoritative Environment delivery policy.
 * 2. Expose fresh one-shot physical projections through Core `getToolInitStates`.
 * 3. Retain reactive physical projections through Core `createToolInitStateProjection`.
 * 4. Rebind retained work when Environment policy changes and retire all work on dispose.
+* 5. Observe user-global skill roots (MiniMax Code) beside the project root and Codex prompt root.
 *
 * Original request (2026-08-01): "新增 Agent delivery projection service 及 checked tests。"
+* Original request (2026-08-15): "v9的适配需要同时适配 1.8和1.9。"
 */
 /** Raised when the CLI-owned Environment projection cannot provide an executable Agent policy. */
 var AgentDeliveryPolicyUnavailableError = class extends Error {
@@ -2999,8 +3037,8 @@ function cloneCleanup(cleanup) {
 		replacementLabel: cleanup.replacementLabel
 	};
 }
-function cloneRegistry() {
-	return AI_TOOLS.map((tool) => ({
+function cloneRegistry(registry) {
+	return registry.map((tool) => ({
 		name: tool.name,
 		value: tool.value,
 		available: tool.available,
@@ -3011,6 +3049,9 @@ function cloneRegistry() {
 		...tool.detectionPaths ? { detectionPaths: [...tool.detectionPaths] } : {},
 		...tool.setupNote !== void 0 ? { setupNote: tool.setupNote } : {},
 		...tool.aliases ? { aliases: [...tool.aliases] } : {},
+		...tool.legacySkillsDirs ? { legacySkillsDirs: [...tool.legacySkillsDirs] } : {},
+		...tool.globalSkillsDir !== void 0 && tool.globalSkillsDir !== null ? { globalSkillsDir: tool.globalSkillsDir } : {},
+		...tool.requiresIdeRestart !== void 0 ? { requiresIdeRestart: tool.requiresIdeRestart } : {},
 		...tool.cleanup ? { cleanup: cloneCleanup(tool.cleanup) } : {},
 		...tool.migrations ? { migrations: tool.migrations.map((migration) => ({ ...migration })) } : {}
 	}));
@@ -3032,13 +3073,13 @@ function policyFingerprint(policy) {
 async function resolveGeneratorEvidence(cliExecutor, cliCommandAuthority, workflows) {
 	const availability = await cliExecutor.checkAvailability();
 	return {
-		version: availability.available && availability.version ? availability.version : PINNED_AGENT_GENERATOR_VERSION,
+		version: availability.available && availability.version ? availability.version : null,
 		commandContents: availability.available ? await loadOpenSpecAgentCommandContents(await cliCommandAuthority.getCliCommand(), workflows) : null
 	};
 }
-function createProjection(policy, states) {
+function createProjection(policy, states, generatorEvidence) {
 	return {
-		registry: cloneRegistry(),
+		registry: cloneRegistry(selectAgentDeliveryRegistry(generatorEvidence.version)),
 		policy: {
 			profile: policy.profile,
 			delivery: policy.delivery,
@@ -3112,7 +3153,7 @@ var RetainedAgentDeliveryProjection = class {
 		});
 	}
 	startPhysicalProjection(policy, generatorEvidence, force) {
-		const fingerprint = `${policyFingerprint(policy)}:${generatorEvidence.version}`;
+		const fingerprint = `${policyFingerprint(policy)}:${generatorEvidence.version ?? "no-cli"}`;
 		if (!force && this.physicalController && fingerprint === this.currentPolicyFingerprint) return;
 		this.stopPhysicalProjection();
 		this.currentPolicyFingerprint = fingerprint;
@@ -3122,8 +3163,10 @@ var RetainedAgentDeliveryProjection = class {
 		const context = new ReactiveContext();
 		const projectToolInitStates = createToolInitStateProjection(this.options.projectDir, {
 			...policy,
-			generatorVersion: generatorEvidence.version,
-			commandContents: generatorEvidence.commandContents
+			generatorVersion: generatorEvidence.version ?? void 0,
+			commandContents: generatorEvidence.commandContents?.catalog ?? null,
+			unavailableCommandTools: generatorEvidence.commandContents?.unavailableTools ?? null,
+			registry: selectAgentDeliveryRegistry(generatorEvidence.version)
 		});
 		(async () => {
 			try {
@@ -3131,7 +3174,7 @@ var RetainedAgentDeliveryProjection = class {
 					if (this.disposed || controller.signal.aborted || generation !== this.physicalGeneration) return;
 					this.listener({
 						type: "snapshot",
-						projection: createProjection(policy, states)
+						projection: createProjection(policy, states, generatorEvidence)
 					});
 				}
 			} catch (cause) {
@@ -3168,11 +3211,13 @@ var AgentDeliveryProjectionService = class {
 		const generatorEvidence = await resolveGeneratorEvidence(this.options.cliExecutor, this.options.cliCommandAuthority, policy.workflows);
 		const states = await getToolInitStates(this.options.projectDir, {
 			...policy,
-			generatorVersion: generatorEvidence.version,
-			commandContents: generatorEvidence.commandContents
+			generatorVersion: generatorEvidence.version ?? void 0,
+			commandContents: generatorEvidence.commandContents?.catalog ?? null,
+			unavailableCommandTools: generatorEvidence.commandContents?.unavailableTools ?? null,
+			registry: selectAgentDeliveryRegistry(generatorEvidence.version)
 		});
 		this.assertActive();
-		return createProjection(policy, states);
+		return createProjection(policy, states, generatorEvidence);
 	}
 	/** Retain Environment policy and physical Agent artifact observation until unsubscribed. */
 	subscribe(listener) {
@@ -3214,6 +3259,7 @@ var AgentDeliveryProjectionService = class {
 			try {
 				releases.push(await this.options.observationEnvironment.acquireRoot(this.options.projectDir));
 				releases.push(await this.options.observationEnvironment.acquireRoot(getExternalCodexCommandObservationRoot()));
+				for (const globalSkillsRoot of getExternalAgentSkillsObservationRoots()) releases.push(await this.options.observationEnvironment.acquireRoot(globalSkillsRoot));
 				if (this.disposed) {
 					await Promise.all(releases.map((release) => release()));
 					return;
@@ -4081,13 +4127,26 @@ var ChangesProjectionService = class {
 			load: async (context) => {
 				context.reportStage("root-ready");
 				const ids = await this.options.adapter.listChanges();
+				const cliEntries = await this.options.adapter.readCliChangeListEntries?.() ?? /* @__PURE__ */ new Map();
 				const rows = [];
 				const errors = [];
 				const total = ids.length;
 				for (const [index, id] of ids.entries()) {
 					if (context.signal.aborted) throw new DOMException("Change projection was cancelled.", "AbortError");
 					try {
-						const row = await this.options.adapter.readChangeMeta(id);
+						const meta = await this.options.adapter.readChangeMeta(id);
+						const entry = cliEntries.get(id);
+						const row = entry ? {
+							...meta,
+							cliTaskSummary: {
+								completedTasks: entry.completedTasks,
+								totalTasks: entry.totalTasks,
+								status: entry.status
+							}
+						} : {
+							...meta,
+							cliTaskSummary: meta.cliTaskSummary ?? null
+						};
 						rows.push(row);
 						context.emitBatch({
 							rows: [row],
@@ -6504,7 +6563,10 @@ var EnvironmentGlobalProjectionService = class {
 * 2. Distinguish a valid non-repository path from an identity-command failure.
 * 3. Canonicalize repository paths for binding identity and stale-intent checks.
 * 4. Propagate cooperative cancellation into Git subprocess ownership.
+* 5. Hide the Git subprocess console window (`windowsHide`) so Git executed by a console-less
+*    Windows daemon never flashes a cmd window.
 *
+* Original request (2026-08-14): "在Windows平台上，执行命令总是会弹出cmd窗口，这个可否统一隐藏，你先调查一下原因"
 * Original request (2026-07-19): "代码已经提交，开始review。如果有问题，那么可更新change。"
 * Derived requirement (2026-07-19): Checkpoint 6.11 preserves objective Planning Git failures.
 * Original request (2026-07-31): "Code Git Snapshot，它非常慢，有时候甚至要十几秒"
@@ -6521,7 +6583,8 @@ async function defaultRunGit(cwd, args, signal) {
 			cwd,
 			encoding: "utf8",
 			maxBuffer: 8 * 1024 * 1024,
-			signal
+			signal,
+			windowsHide: true
 		});
 		return {
 			ok: true,
@@ -9076,7 +9139,10 @@ async function buildDashboardGitSnapshot(options) {
 * 2. Preserve backend-issued Code binding provenance and observable Git task lifecycle.
 * 3. Trigger explicit Git snapshot invalidation through a reactive stamp without broad Dashboard reloads.
 * 4. Propagate Projection Work cancellation into the Git subprocess tree.
+* 5. Hide Git identity-probe subprocess console windows (`windowsHide`) under the console-less
+*    Windows daemon.
 *
+* Original request (2026-08-14): "在Windows平台上，执行命令总是会弹出cmd窗口，这个可否统一隐藏，你先调查一下原因"
 * Original request (2026-07-23): "现在页面数据的加载数据非常慢（比如dashboard页面、changes页面都要等待非常久，页面刷新后，似乎后台没有缓存一样，也要加载很久。"
 * Derived requirement (2026-07-25): P4.3 settles a cached refresh stamp before Dashboard Git refresh returns.
 * Original request (2026-07-31): "Code Git Snapshot，它非常慢，有时候甚至要十几秒"
@@ -9127,7 +9193,8 @@ async function resolveGitMetadataDir(projectDir) {
 		const { stdout } = await execFileAsync$1("git", ["rev-parse", "--git-dir"], {
 			cwd: projectDir,
 			maxBuffer: 1024 * 1024,
-			encoding: "utf8"
+			encoding: "utf8",
+			windowsHide: true
 		});
 		const gitDirRaw = stdout.trim();
 		if (!gitDirRaw) return null;
@@ -9297,17 +9364,26 @@ function selectRecentDashboardArchives(items, limit = DASHBOARD_RECENT_LIST_LIMI
 //#region src/dashboard-summary.ts
 /** Read the objective files behind Dashboard Summary without invoking Git or workflow commands. */
 async function loadDashboardPlanningFacts(ctx) {
-	const [specMetas, changeMetas, archiveMetas] = await Promise.all([
+	const [specMetas, changeMetas, archiveMetas, cliEntries] = await Promise.all([
 		ctx.adapter.listSpecsWithMeta(),
 		ctx.adapter.listChangesWithMeta(),
-		ctx.adapter.listArchivedChangesWithMeta()
+		ctx.adapter.listArchivedChangesWithMeta(),
+		ctx.readCliChangeListEntries?.().catch(() => /* @__PURE__ */ new Map()) ?? Promise.resolve(/* @__PURE__ */ new Map())
 	]);
-	const allActiveChanges = changeMetas.map((changeMeta) => ({
-		id: changeMeta.id,
-		name: changeMeta.name ?? changeMeta.id,
-		trackedTaskProgress: changeMeta.trackedTaskProgress,
-		updatedAt: changeMeta.updatedAt
-	}));
+	const allActiveChanges = changeMetas.map((changeMeta) => {
+		const entry = cliEntries.get(changeMeta.id);
+		return {
+			id: changeMeta.id,
+			name: changeMeta.name ?? changeMeta.id,
+			trackedTaskProgress: changeMeta.trackedTaskProgress,
+			cliTaskSummary: entry ? {
+				completedTasks: entry.completedTasks,
+				totalTasks: entry.totalTasks,
+				status: entry.status
+			} : changeMeta.cliTaskSummary,
+			updatedAt: changeMeta.updatedAt
+		};
+	});
 	return {
 		specMetas,
 		archiveMetas,
@@ -9667,12 +9743,13 @@ function resolveEntityEntryPath(input) {
 //#endregion
 //#region src/file-preview-service.ts
 /**
-* Orthogonal intents (updated 2026-07-16 Asia/Shanghai):
+* Orthogonal intents (updated 2026-08-04 Asia/Shanghai):
 * 1. Prepare source-bound preview sessions for supported entity files.
-* 2. Serve preview documents and bundled assets with confined path resolution.
+* 2. Serve preview documents and bundled assets with platform-neutral confined path resolution.
 * 3. Retire every preview session when its owning Planning root is replaced.
 *
 * Original request (2026-07-16): "A -> B 后必须清退 A 的 preview。"
+* Original request (2026-08-04): "Make pnpm openspecui start and equivalent package scripts work on Windows."
 */
 const PREVIEW_ENTRY_FILE_BY_KIND = {
 	image: "image-preview.html",
@@ -9696,6 +9773,10 @@ function toHash(input) {
 function stripLeadingSlash(path) {
 	return path.replace(/^\/+/, "");
 }
+function isPathInsideRoot(rootPath, candidatePath) {
+	const relativePath$1 = relative(rootPath, candidatePath);
+	return relativePath$1 === "" || relativePath$1 !== ".." && !relativePath$1.startsWith(`..${sep}`) && !isAbsolute(relativePath$1);
+}
 function inferPreviewAssetContentType(path) {
 	switch (extname(path).toLowerCase()) {
 		case ".html": return "text/html";
@@ -9773,7 +9854,7 @@ var FilePreviewService = class {
 		const normalized = stripLeadingSlash(requestPath);
 		if (session.previewKind === "html") {
 			const absolutePath$1 = resolve(session.directoryPath, normalized);
-			if (!absolutePath$1.startsWith(session.directoryPath + "/")) return null;
+			if (!isPathInsideRoot(session.directoryPath, absolutePath$1)) return null;
 			if (!existsSync(absolutePath$1) || !statSync(absolutePath$1).isFile()) return null;
 			return {
 				content: readFileSync(absolutePath$1),
@@ -9783,7 +9864,7 @@ var FilePreviewService = class {
 		if (normalized.startsWith("resource/")) {
 			const resourcePath = normalized.slice(9);
 			const absolutePath$1 = resolve(session.directoryPath, resourcePath);
-			if (!absolutePath$1.startsWith(session.directoryPath + "/")) return null;
+			if (!isPathInsideRoot(session.directoryPath, absolutePath$1)) return null;
 			if (!existsSync(absolutePath$1) || !statSync(absolutePath$1).isFile()) return null;
 			return {
 				content: readFileSync(absolutePath$1),
@@ -9793,7 +9874,7 @@ var FilePreviewService = class {
 		const assetName = normalized || session.entryFileName;
 		if (!assetName) return null;
 		const absolutePath = resolve(this.previewAssetsDir, assetName);
-		if (!absolutePath.startsWith(resolve(this.previewAssetsDir) + "/")) return null;
+		if (!isPathInsideRoot(this.previewAssetsDir, absolutePath)) return null;
 		if (!existsSync(absolutePath) || !statSync(absolutePath).isFile()) return null;
 		if (isRewritablePreviewAsset(assetName)) {
 			const rewritten = rewritePreviewAssetPaths(readFileSync(absolutePath, "utf8"), hash);
@@ -10833,6 +10914,18 @@ var PlanningRootUnavailableError = class extends Error {
 	}
 };
 /** Serialized deep owner for one replaceable Planning-root service record. */
+/** Read CLI Change-list task facts once per call; failures degrade to an empty index. */
+function readCliChangeListEntriesFor(service) {
+	return async () => {
+		try {
+			const data = await service.getCurrent({ kind: "opsx-change-list" });
+			if (data.kind !== "opsx-change-list") return /* @__PURE__ */ new Map();
+			return new Map(data.entries.map((entry) => [entry.name, entry]));
+		} catch {
+			return /* @__PURE__ */ new Map();
+		}
+	};
+}
 var PlanningRootServiceManager = class {
 	activeRecord = null;
 	currentRootContextSnapshot = null;
@@ -10908,7 +11001,10 @@ var PlanningRootServiceManager = class {
 			},
 			codeGitBindingToken: this.options.codeBinding.bindingToken,
 			loaders: {
-				loadSummary: () => loadDashboardSummary({ adapter }),
+				loadSummary: () => loadDashboardSummary({
+					adapter,
+					readCliChangeListEntries: readCliChangeListEntriesFor(planningCliProjectionService)
+				}),
 				loadTrends: () => loadDashboardTrends({
 					adapter,
 					configManager: this.options.configManager
@@ -10919,16 +11015,6 @@ var PlanningRootServiceManager = class {
 				}, "projection-work", signal)
 			}
 		});
-		const changesProjectionService = new ChangesProjectionService({
-			workOwner: this.changesProjectionWorkOwner,
-			root: {
-				path: projectDir,
-				source: planningRoot.source,
-				storeSelector: rootCliSelector.store ?? null,
-				generation: gitBindingToken
-			},
-			adapter
-		});
 		const planningCliProjectionService = new PlanningCliProjectionService({
 			rootContext: rootContextValue,
 			gitBindingToken,
@@ -10939,6 +11025,28 @@ var PlanningRootServiceManager = class {
 			storeObservation: this.options.storeObservation,
 			workOwner: this.planningCliProjectionWorkOwner
 		});
+		const changesProjectionService = new ChangesProjectionService({
+			workOwner: this.changesProjectionWorkOwner,
+			root: {
+				path: projectDir,
+				source: planningRoot.source,
+				storeSelector: rootCliSelector.store ?? null,
+				generation: gitBindingToken
+			},
+			adapter: {
+				listChanges: () => adapter.listChanges(),
+				readChangeMeta: (id) => adapter.readChangeMeta(id),
+				readCliChangeListEntries: async () => {
+					try {
+						const data = await planningCliProjectionService.getCurrent({ kind: "opsx-change-list" });
+						if (data.kind !== "opsx-change-list") return /* @__PURE__ */ new Map();
+						return new Map(data.entries.map((entry) => [entry.name, entry]));
+					} catch {
+						return /* @__PURE__ */ new Map();
+					}
+				}
+			}
+		});
 		const filePreviewService = new FilePreviewService(projectDir, this.options.previewAssetsDir);
 		const schemaMutationService = new SchemaMutationService({
 			planningRoot: projectDir,
@@ -11828,11 +11936,12 @@ var PtyInputWriter = class {
 //#endregion
 //#region src/pty-manager.ts
 /**
-* Orthogonal intents (updated 2026-07-22 Asia/Shanghai):
+* Orthogonal intents (updated 2026-08-09 Asia/Shanghai):
 * 1. Own PTY session process, ordered input, buffer, title, and lifecycle state.
 * 2. Spawn each session at an explicitly resolved launch-project or planning-root cwd and retain its immutable Root generation.
 * 3. Preserve the inherited backend environment, including XDG_DATA_HOME, across cwd targets.
 * 4. List and close server-owned sessions for reconnect and teardown.
+* 5. Resolve Windows Agent launchers to native argv while retaining the requested display command.
 *
 * Original request (2026-07-16): "3.8 Terminal exposes explicit launch-project cwd and planning-root cwd while preserving inherited XDG_DATA_HOME"
 * Owner-reported defect (2026-07-21): Pre-created Agent terminals are absent from Compose Send.
@@ -11919,7 +12028,11 @@ var PtySession = class extends EventEmitter$1 {
 		this.rootGeneration = opts.rootGeneration;
 		this.maxBufferLines = opts.scrollback ?? DEFAULT_SCROLLBACK;
 		this.maxBufferBytes = opts.maxBufferBytes ?? DEFAULT_MAX_BUFFER_BYTES;
-		this.process = pty.spawn(this.command, this.args, {
+		const invocation = resolveCommandInvocation(this.command, this.args, {
+			cwd: opts.cwd,
+			env: process.env
+		});
+		this.process = pty.spawn(invocation.command, invocation.args, {
 			name: "xterm-256color",
 			cols: opts.cols ?? 80,
 			rows: opts.rows ?? 24,
@@ -14650,7 +14763,16 @@ const changeProjectionDataSchema = z.object({
 			remaining: z.number().int().nonnegative()
 		}),
 		createdAt: z.number(),
-		updatedAt: z.number()
+		updatedAt: z.number(),
+		cliTaskSummary: z.object({
+			completedTasks: z.number().int().nonnegative(),
+			totalTasks: z.number().int().nonnegative(),
+			status: z.enum([
+				"no-tasks",
+				"complete",
+				"in-progress"
+			])
+		}).nullable()
 	})),
 	errors: z.array(changeProjectionRowErrorSchema)
 });
@@ -15292,12 +15414,31 @@ const specRouter = router({
 /**
 * Change router - change proposal operations
 */
+/**
+* Join the CLI-owned Change-list task facts onto adapter ChangeMeta rows. The CLI entry is
+* the task-count authority (`openspec list` reports the same checkbox semantics as Apply);
+* rows the CLI did not list keep a null summary rather than a UI-side recomputation.
+*/
+async function listChangesWithCliTaskSummary(ctx, adapter) {
+	const [rows, cliList] = await Promise.all([adapter.listChangesWithMeta(), runPlanningRootRead(ctx, ({ planningCliProjectionService }) => planningCliProjectionService.getCurrent({ kind: "opsx-change-list" })).then((data) => data.kind === "opsx-change-list" ? new Map(data.entries.map((entry) => [entry.name, entry])) : /* @__PURE__ */ new Map(), () => /* @__PURE__ */ new Map())]);
+	return rows.map((row) => {
+		const entry = cliList.get(row.id);
+		return entry ? {
+			...row,
+			cliTaskSummary: {
+				completedTasks: entry.completedTasks,
+				totalTasks: entry.totalTasks,
+				status: entry.status
+			}
+		} : row;
+	});
+}
 const changeRouter = router({
 	list: publicProcedure.query(async ({ ctx }) => {
 		return runPlanningRootRead(ctx, ({ adapter }) => adapter.listChanges());
 	}),
 	listWithMeta: publicProcedure.query(async ({ ctx }) => {
-		return runPlanningRootRead(ctx, ({ adapter }) => adapter.listChangesWithMeta());
+		return runPlanningRootRead(ctx, ({ adapter }) => listChangesWithCliTaskSummary(ctx, adapter));
 	}),
 	listArchived: publicProcedure.query(async ({ ctx }) => {
 		return runPlanningRootRead(ctx, ({ adapter }) => adapter.listArchivedChanges());
@@ -15342,7 +15483,7 @@ const changeRouter = router({
 		return { success: true };
 	}),
 	subscribe: publicProcedure.subscription(({ ctx }) => {
-		return createPlanningRootSubscription(ctx, ({ adapter }) => adapter.listChangesWithMeta());
+		return createPlanningRootSubscription(ctx, ({ adapter }) => listChangesWithCliTaskSummary(ctx, adapter));
 	}),
 	subscribeBatches: publicProcedure.subscription(({ ctx }) => createPlanningRootProjectionWorkSubscription(ctx, (services, listener) => services.changesProjectionService.subscribe(listener), (event) => changeProjectionEventSchema().parse(event))),
 	subscribeFiles: publicProcedure.input(z.object({ id: z.string() })).subscription(({ ctx, input }) => {
@@ -15620,32 +15761,45 @@ const cliRouter = router({
 	subscribeConfiguredTools: publicProcedure.subscription(({ ctx }) => {
 		return createReactiveSubscription(() => getConfiguredTools(ctx.projectDir));
 	}),
-	validate: publicProcedure.input(z.discriminatedUnion("kind", [z.object({
-		kind: z.literal("item"),
-		id: z.string().min(1),
-		type: z.enum(["spec", "change"]).optional(),
-		strict: z.boolean().optional()
-	}), z.object({
-		kind: z.literal("scope"),
-		scope: z.enum([
-			"all",
-			"changes",
-			"specs"
-		]),
-		strict: z.boolean().optional()
-	})])).mutation(async ({ ctx, input }) => {
-		return runPlanningRoot(ctx, ({ rootContext }) => ctx.cliExecutor.contracts.validate({
-			target: input.kind === "item" ? {
-				kind: "item",
-				id: input.id,
-				type: input.type
-			} : {
-				kind: "scope",
-				scope: input.scope
-			},
-			strict: input.strict,
-			...getRootContextCliSelector(rootContext)
-		}));
+	validate: publicProcedure.input(z.discriminatedUnion("kind", [
+		z.object({
+			kind: z.literal("item"),
+			id: z.string().min(1),
+			type: z.enum(["spec", "change"]).optional(),
+			strict: z.boolean().optional()
+		}),
+		z.object({
+			kind: z.literal("scope"),
+			scope: z.enum([
+				"all",
+				"changes",
+				"specs"
+			]),
+			strict: z.boolean().optional()
+		}),
+		z.object({ kind: z.literal("archived") })
+	])).mutation(async ({ ctx, input }) => {
+		return runPlanningRoot(ctx, ({ rootContext }) => {
+			if (input.kind === "archived") {
+				const cli = rootContext.cli;
+				if (!deriveOpenSpecCliCapabilities(cli.available ? parseOpenSpecCliVersion(cli.version) : null).archivedValidation) throw new TRPCError({
+					code: "PRECONDITION_FAILED",
+					message: "Archived task validation requires the detected OpenSpec CLI to declare the 1.9 archived-validation capability."
+				});
+			}
+			return ctx.cliExecutor.contracts.validate({
+				target: input.kind === "item" ? {
+					kind: "item",
+					id: input.id,
+					type: input.type
+				} : input.kind === "scope" ? {
+					kind: "scope",
+					scope: input.scope
+				} : { kind: "archived" },
+				strict: input.kind === "archived" ? void 0 : input.strict,
+				...getRootContextCliSelector(rootContext)
+			});
+		});
 	}),
 	validateStream: publicProcedure.input(z.object({
 		type: z.enum(["spec", "change"]).optional(),
@@ -15699,7 +15853,7 @@ const cliRouter = router({
 	})
 });
 /** Config-owned Agent registry, policy, physical inventory, and CLI mutation boundary. */
-const agentIntegrationToolIdSchema = z.string().min(1).refine((toolId) => getAvailableTools().some((tool) => tool.value === toolId), "Agent tool must be an available OpenSpec 1.7 registry id.");
+const agentIntegrationToolIdSchema = z.string().min(1).refine((toolId) => getAvailableTools().some((tool) => tool.value === toolId), "Agent tool must be an available OpenSpec 1.9 registry id.");
 const agentIntegrationsRouter = router({
 	get: publicProcedure.query(({ ctx }) => ctx.agentDeliveryProjectionService.getCurrent()),
 	refresh: publicProcedure.query(({ ctx }) => ctx.agentDeliveryProjectionService.refresh()),
@@ -15727,6 +15881,14 @@ const agentIntegrationsRouter = router({
 	})).subscription(({ ctx, input }) => {
 		return createCliStreamObservable(async (onEvent) => {
 			const projection = await ctx.agentDeliveryProjectionService.getCurrent();
+			if (Array.isArray(input.tools)) {
+				const offered = new Set(projection.registry.map((tool) => tool.value));
+				const unavailable = input.tools.filter((toolId) => !offered.has(toolId));
+				if (unavailable.length > 0) throw new TRPCError({
+					code: "PRECONDITION_FAILED",
+					message: `Agent tool(s) unavailable on the admitted OpenSpec CLI line: ${unavailable.join(", ")}.`
+				});
+			}
 			return streamOpenSpecCliMutation(ctx, ["init"], (mutationEvent) => ctx.cliExecutor.initStream({
 				tools: input.tools,
 				profile: projection.policy.profile,
@@ -17774,10 +17936,12 @@ var TranslationCacheService = class {
 //#endregion
 //#region src/runtime-package-host.ts
 /**
-* Orthogonal intents (updated 2026-07-31 Asia/Shanghai):
+* Original request (2026-08-04): "The project was developed on macOS and now needs Windows adaptation."
+* Orthogonal intents (updated 2026-08-08 Asia/Shanghai):
 * 1. Resolve the physical host manifest that owns on-demand runtime installation.
 * 2. Read declared runtime ranges without treating optional peers as install-time dependencies.
 * 3. Normalize legacy on-demand optional dependency records after package-manager installation.
+* 4. Execute the npm dependency probe through Core's shell-independent Windows-safe spawn owner.
 *
 * Original request (2026-07-31): "这个依赖好像会导致安装的时候仍然会被强制装上去，可能要改成 peerDependencies 会更好"
 */
@@ -17814,7 +17978,7 @@ function readRuntimeHostPackageDependencyRequest(input) {
 	return `${input.packageName}@${range}`;
 }
 async function readRuntimeHostPackageDependencyTree(input) {
-	const child = spawn("npm", [
+	const started = spawnSafe("npm", [
 		"list",
 		"--json",
 		"--omit=dev",
@@ -17822,9 +17986,10 @@ async function readRuntimeHostPackageDependencyTree(input) {
 		...input.packageNames
 	], {
 		cwd: input.runtimeHost.packageDir,
-		shell: false,
 		env: createCleanCliEnv()
 	});
+	if (!started.ok) throw new Error(`Unable to start npm list: ${started.error.message}`);
+	const { child } = started;
 	const stdoutChunks = [];
 	const stderrChunks = [];
 	const exitCode = await new Promise((resolve$1, reject) => {
@@ -18066,6 +18231,17 @@ function buildRuntimeConfig(engineId, profile) {
 
 //#endregion
 //#region src/translation-engine-service.ts
+/**
+* Orthogonal intents (updated 2026-08-09 Asia/Shanghai):
+* 1. Project translation-engine inventory, selection, lifecycle, and immutable settings snapshots.
+* 2. Install and cancel managed local runtime dependencies through observable, bounded process settlement.
+* 3. Own local model search, download plans, persisted asset readiness, and profile validation.
+* 4. Execute browser, OpenAI, and managed-local batch translation with cache-aware events.
+* 5. Preserve CT2/llama runtime policy, directional language constraints, and resource limits.
+*
+* Original request (2026-05-22): "Server provides engine registry, installation sessions, installation logs, selection, and translation."
+* Original request (2026-08-04): "Make pnpm openspecui start and equivalent package scripts work on Windows."
+*/
 const __dirname$2 = dirname(fileURLToPath(import.meta.url));
 var TranslationEngineService = class {
 	projectDir;
@@ -18796,55 +18972,82 @@ async function installManagedLocalRuntime(engineId, input) {
 	input.onLifecycle?.(finalLifecycle);
 	return finalLifecycle;
 }
+/** Run one package-manager installation with bounded cross-platform tree cancellation. */
 async function runRuntimeInstallCommand(input) {
-	let child;
-	try {
-		child = spawn(input.command.cmd, input.command.args, {
-			cwd: input.cwd,
-			shell: false,
-			env: createCleanCliEnv()
-		});
-	} catch (error) {
-		return error instanceof Error ? error.message : String(error);
-	}
-	const abort = () => {
-		try {
-			child.kill();
-		} catch {}
-	};
-	input.signal?.addEventListener("abort", abort, { once: true });
-	try {
-		await new Promise((resolve$1, reject) => {
-			child.stdout?.on("data", (data) => {
-				input.onLog?.({
-					stream: "stdout",
-					text: data.toString()
-				});
-			});
-			child.stderr?.on("data", (data) => {
-				input.onLog?.({
-					stream: "stderr",
-					text: data.toString()
-				});
-			});
-			child.on("error", (error) => {
-				reject(error);
+	if (input.signal?.aborted) return "Translation runtime installation cancelled.";
+	const started = spawnSafe(input.command.cmd, input.command.args, {
+		cwd: input.cwd,
+		shell: false,
+		env: createCleanCliEnv()
+	});
+	if (!started.ok) return started.error.message;
+	const { child } = started;
+	const completion = new Promise((resolve$1) => {
+		child.stdout?.on("data", (data) => {
+			input.onLog?.({
+				stream: "stdout",
+				text: data.toString()
 			});
-			child.on("close", (exitCode) => {
-				if (exitCode === 0) {
-					resolve$1();
-					return;
-				}
-				reject(/* @__PURE__ */ new Error(`${input.command.displayCommand} exited with code ${exitCode ?? "unknown"}.`));
+		});
+		child.stderr?.on("data", (data) => {
+			input.onLog?.({
+				stream: "stderr",
+				text: data.toString()
 			});
 		});
-		return null;
-	} catch (error) {
-		return error instanceof Error ? error.message : String(error);
+		child.once("error", (error) => resolve$1(error.message));
+		child.once("close", (exitCode) => {
+			resolve$1(exitCode === 0 ? null : `${input.command.displayCommand} exited with code ${exitCode ?? "unknown"}.`);
+		});
+	});
+	let requestAbort = null;
+	const abortRequested = new Promise((resolve$1) => {
+		requestAbort = resolve$1;
+	});
+	const abort = () => requestAbort?.();
+	input.signal?.addEventListener("abort", abort, { once: true });
+	try {
+		const outcome = await Promise.race([completion.then((result) => ({
+			kind: "complete",
+			result
+		})), abortRequested.then(() => ({ kind: "abort" }))]);
+		if (outcome.kind === "complete") return outcome.result;
+		return settleRuntimeInstallCancellation(child, completion, input.terminationTimeoutMs ?? 5e3);
 	} finally {
 		input.signal?.removeEventListener("abort", abort);
 	}
 }
+async function settleRuntimeInstallCancellation(child, completion, timeoutMs) {
+	const failures = [];
+	const terminate = async (signal) => {
+		let timer = null;
+		try {
+			await Promise.race([terminateChildProcessTree(child, signal), new Promise((_resolve, reject) => {
+				timer = setTimeout(() => reject(/* @__PURE__ */ new Error(`Timed out requesting ${signal} for runtime installation.`)), timeoutMs);
+			})]);
+		} catch (error) {
+			failures.push(error);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
+	};
+	const waitForCompletion = async () => {
+		let timer = null;
+		try {
+			return await Promise.race([completion.then(() => true), new Promise((resolve$1) => {
+				timer = setTimeout(() => resolve$1(false), timeoutMs);
+			})]);
+		} finally {
+			if (timer) clearTimeout(timer);
+		}
+	};
+	await terminate("SIGTERM");
+	if (await waitForCompletion()) return "Translation runtime installation cancelled.";
+	await terminate("SIGKILL");
+	if (await waitForCompletion()) return "Translation runtime installation cancelled.";
+	const failureText = failures.map((error) => error instanceof Error ? error.message : String(error)).join(" ");
+	return `Translation runtime installation cancellation did not settle.${failureText ? ` ${failureText}` : ""}`;
+}
 function getManagedLocalRuntimeSpec(engineId) {
 	if (engineId === "local") return {
 		packageNames: ["@huggingface/transformers", "onnxruntime-node"],
@@ -18957,7 +19160,9 @@ function readCurrentRuntimeMemory() {
 * 2. Execute translation engines in isolated worker-thread or process hosts.
 * 3. Enforce cancellation and process memory limits while preserving batch evidence.
 * 4. Route worker-thread payloads by an explicit translation protocol kind.
+* 5. Hide the process-host bootstrap console window (`windowsHide`) under a console-less Windows daemon.
 *
+* Original request (2026-08-14): "在Windows平台上，执行命令总是会弹出cmd窗口，这个可否统一隐藏，你先调查一下原因"
 * Original request (2026-07-24): "Production worker kinds must not claim each other's payloads."
 */
 const execFileAsync = promisify(execFile);
@@ -19253,7 +19458,8 @@ function createManagedLocalTranslationProcess(input) {
 			"inherit",
 			"inherit",
 			"ipc"
-		]
+		],
+		windowsHide: true
 	});
 }
 function resolveProcessEntryUrl() {
@@ -19410,11 +19616,11 @@ if (!isMainThread) {
 //#endregion
 //#region src/server.ts
 /**
-* Orthogonal intents (updated 2026-08-01 Asia/Shanghai):
+* Orthogonal intents (updated 2026-08-04 Asia/Shanghai):
 * 1. Bootstrap HTTP/tRPC, WebSocket, PTY, and launch-project runtime services.
 * 2. Delegate planning-root, Store, Environment Global, Agent, and Root Context projection ownership.
 * 3. Host notifications, sound, preview-resource, translation, and telemetry boundaries.
-* 4. Admit dynamic loopback App origins and perform deterministic runtime teardown.
+* 4. Admit dynamic loopback App origins and await deterministic native-handle teardown.
 * 5. Bridge settled machine-global config changes into Root Context replacement.
 *
 * Original request (2026-07-15): "你先负责后端（内核）的开发。"
@@ -19936,7 +20142,7 @@ async function createWebSocketServer(server, httpServer, config) {
 					() => ptyManager.closeAll(),
 					() => closeWebSocketServer(ptyWss),
 					() => closeWebSocketServer(wss),
-					() => server.watcher?.stop()
+					() => server.watcher?.close()
 				]);
 				await settleCleanupPhase(failures, [() => server.storeObservationFallback.dispose()]);
 				await settleCleanupPhase(failures, [() => server.storeMutationService.dispose()]);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openspecui/server",
-  "version": "7.0.1",
+  "version": "9.0.0",
   "type": "module",
   "main": "dist/index.mjs",
   "exports": {
@@ -25,7 +25,7 @@
     "typecheck:nested-spec-tests": "tsc -p tsconfig.nested-spec-tests.json --noEmit",
     "typecheck:project-initialization-tests": "tsc -p tsconfig.project-initialization-tests.json --noEmit",
     "typecheck:default-store-tests": "tsc -p tsconfig.default-store-tests.json --noEmit",
-    "dev": "NODE_OPTIONS=\"${NODE_OPTIONS:+$NODE_OPTIONS }--conditions=development\" tsx watch --include '../core/dist/**' --include '../search/dist/**' src/standalone.ts",
+    "dev": "tsx watch --conditions=development --include '../core/dist/**' --include '../search/dist/**' src/standalone.ts",
     "test": "vitest run",
     "test:watch": "vitest"
   },
@@ -33,8 +33,8 @@
     "@hono/node-server": "^1.14.1",
     "@huggingface/hub": "^2.12.0",
     "@lydell/node-pty": "^1.1.0",
-    "@openspecui/core": "7.0.1",
-    "@openspecui/search": "7.0.1",
+    "@openspecui/core": "9.0.0",
+    "@openspecui/search": "9.0.0",
     "@opentelemetry/api": "^1.9.1",
     "@opentelemetry/exporter-trace-otlp-http": "^0.221.0",
     "@opentelemetry/sdk-node": "^0.221.0",