@piagent/platform 1.12.1 → 1.13.0

package/packages/piagent-webui/dist/client/index.html

@@ -7,7 +7,7 @@
     <meta name="csp-nonce" content="__PIAGENT_CSP_NONCE__" />
     <meta name="piagent-webui-mode" content="__PIAGENT_WEBUI_MODE__" />
     <title>Piagent WebUI</title>
-    <script type="module" crossorigin src="/assets/index-DFKHLVYk.js"></script>
+    <script type="module" crossorigin src="/assets/index-DWL_wVw7.js"></script>
     <link rel="stylesheet" crossorigin href="/assets/index-Z91z6SlN.css">
   </head>
   <body>

package/packages/piagent-webui/extension/piagent-webui.ts

@@ -3,7 +3,7 @@ import { createHash, randomBytes } from "node:crypto";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 
 import type { ExtensionAPI, ExtensionContext } from "@earendil-works/pi-coding-agent";
 
@@ -31,6 +31,7 @@ import { SourceMutationController } from "./source-mutation-controller.ts";
 import { SourceRevertController } from "./source-revert-controller.ts";
 import { SourceOpenController } from "./source-open-controller.ts";
 import { VSCodeHandoff } from "./vscode-handoff.ts";
+import { browserCommand } from "../../piagent-core/runtime/host/browser-opener.mjs";
 import { TerminalSessionAdapter } from "./terminal-session-adapter.ts";
 import { isGatewayRuntimeContext } from "../ownership/gateway-runtime-context.ts";
 
@@ -124,9 +125,9 @@ function removeControlDirectory(directory: string): void {
 }
 
 function openLocalUrl(url: string): boolean {
-  const command = process.platform === "darwin" ? "open" : process.platform === "linux" ? "xdg-open" : null;
-  if (!command) return false;
-  try { const child = spawn(command, [url], { detached: true, stdio: "ignore" }); child.unref(); return true; }
+  const opener = browserCommand(url);
+  if (!opener) return false;
+  try { const child = spawn(opener.command, opener.args, { detached: true, stdio: "ignore", ...opener.options }); child.unref(); return true; }
   catch { return false; }
 }
 
@@ -342,7 +343,7 @@ export default function piagentWebUiExtension(pi: ExtensionAPI): void {
     fs.chmodSync(socketDirectory, 0o700);
     const socket = path.join(socketDirectory, "control.sock");
     const controlToken = randomBytes(32).toString("base64url");
-    const loader = path.join(PLATFORM_ROOT, "scripts", "register-typescript-loader.mjs");
+    const loader = pathToFileURL(path.join(PLATFORM_ROOT, "scripts", "register-typescript-loader.mjs")).href;
     const main = path.join(PACKAGE_ROOT, "server", "sidecar-main.ts");
     const child = spawn(process.execPath, ["--disable-warning=ExperimentalWarning", "--import", loader, main], {
       cwd: ctx.cwd, env: { PATH: process.env.PATH ?? "", TMPDIR: process.env.TMPDIR ?? os.tmpdir(), NO_COLOR: "1" },

package/packages/piagent-webui/gateway/control-socket.ts

@@ -1,5 +1,6 @@
 import fs from "node:fs";
 import net from "node:net";
+import path from "node:path";
 
 const MAX_MESSAGE_BYTES = 4_096;
 // The folder list grows with every project the company runtime has seen.
@@ -60,7 +61,8 @@ export async function startGatewayControlSocket(options: {
   socketPath: string;
   handle(request: GatewayControlRequest): Promise<GatewayControlResponse> | GatewayControlResponse;
 }): Promise<{ close(): Promise<void> }> {
-  await removeStaleSocket(options.socketPath);
+  const windows = process.platform === "win32";
+  if (!windows) await removeStaleSocket(options.socketPath);
   const server = net.createServer((socket) => {
     socket.setEncoding("utf8");
     let body = "", finished = false;
@@ -79,7 +81,7 @@ export async function startGatewayControlSocket(options: {
           const register = parsed?.action === "project.register";
           if (!parsed || !["health", "issue-launch-url", "stop", "project.paths", "project.register"].includes(String(parsed.action))
             || Object.keys(parsed).some((key) => key !== "action" && !(register && key === "cwd"))
-            || register && (typeof parsed.cwd !== "string" || !parsed.cwd.startsWith("/") || parsed.cwd.length > 4096)) throw new Error("invalid");
+            || register && (typeof parsed.cwd !== "string" || !path.isAbsolute(parsed.cwd) || parsed.cwd.length > 4096)) throw new Error("invalid");
           request = parsed as GatewayControlRequest;
         } catch { socket.end(`${JSON.stringify({ ok: false, error: "invalid-request" })}\n`); return; }
         try { socket.end(`${JSON.stringify(await options.handle(request))}\n`); }
@@ -88,6 +90,16 @@ export async function startGatewayControlSocket(options: {
     });
     socket.once("error", () => { socket.destroy(); });
   });
+  // A Windows pipe is not a file: there is no stale one to remove and nothing
+  // to link. Its name stays taken while a Gateway listens on it.
+  if (windows) {
+    await new Promise<void>((resolve, reject) => {
+      server.once("error", (error: NodeJS.ErrnoException) => reject(error.code === "EADDRINUSE" ? new Error("gateway-already-running") : error));
+      server.listen(options.socketPath, resolve);
+    });
+    let closed: Promise<void> | null = null;
+    return { close: () => closed ??= new Promise<void>((resolve, reject) => server.close((error) => error ? reject(error) : resolve())) };
+  }
   // Closing a server removes the path it was bound to, whoever holds that path
   // by then: a Gateway that exited after another had taken the path removed the
   // running Gateway's socket, which could no longer be stopped or asked for a

package/packages/piagent-webui/gateway/managed-launch.ts

@@ -6,7 +6,7 @@ import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { requestGatewayControl } from "./control-socket.ts";
 import { gatewayProfileState } from "./profile-state.ts";
-import { storedSlot } from "../../piagent-core/managed/store.mjs";
+import { agentWatchDataDirectory, interopEnvironment, storedSlot } from "../../piagent-core/managed/store.mjs";
 
 // The personal dashboard shows company sessions but never runs them: it starts
 // the pinned managed entrypoint (its own process and Gateway, `--serve`) the
@@ -15,7 +15,7 @@ import { storedSlot } from "../../piagent-core/managed/store.mjs";
 export type ManagedLaunchStatus = { schemaVersion: 1; version: "piagent-managed-launch-status-v1"; available: boolean; model: "agent-watch-auto" };
 type Binding = { file: string; profile: string; node: string; entrypoint: string; broker: string; brokerSha256: string };
 
-const CLEAN_ENV = { PATH: "/usr/bin:/bin", LANG: "en_US.UTF-8", TERM: "xterm-256color" };
+const CLEAN_ENV = { PATH: "/usr/bin:/bin", LANG: "en_US.UTF-8", TERM: "xterm-256color", ...interopEnvironment() };
 const READY = /^Agent Watch Auto: ready$/m;
 const sha256 = (file: string) => createHash("sha256").update(fs.readFileSync(file)).digest("hex");
 const HEX64 = /^[a-f0-9]{64}$/;
@@ -51,7 +51,7 @@ export function managedLaunchStatus(agentDir = DEFAULT_AGENT_DIR): ManagedLaunch
 // A key's slot points at its member's conversation store once it has been
 // launched (store.mjs); until then the slot's own folder is asked.
 function controlSocket(home: string, profile: string): string {
-  const root = path.join(home, "Library/Application Support/AgentWatch/ManagedSessions");
+  const root = path.join(agentWatchDataDirectory(home), "ManagedSessions");
   return gatewayProfileState(path.join(root, storedSlot(root, profile) ?? profile)).controlSocket;
 }
 
@@ -66,7 +66,9 @@ async function running(socket: string): Promise<{ packageVersion?: unknown } | "
 
 // Same foreground step as Agent Watch: macOS may ask once to let this build of
 // the broker read its Keychain item. Nothing secret comes back. Exit 67 means
-// the imported key is no longer connected in Agent Watch.
+// the imported key is no longer connected in Agent Watch. From WSL the broker is
+// Agent Watch for Windows, whose key has no prompt: any other failure means the
+// key cannot be read on this computer.
 async function authorize(pinned: Binding): Promise<void> {
   if (fs.realpathSync(pinned.broker) !== pinned.broker || sha256(pinned.broker) !== pinned.brokerSha256) throw new Error("managed-launch-binding-changed");
   const code = await new Promise<number | null>((resolve) => {
@@ -75,7 +77,7 @@ async function authorize(pinned: Binding): Promise<void> {
     child.once("exit", (exit) => resolve(exit));
   });
   if (code === 67) throw new Error("managed-profile-disconnected");
-  if (code !== 0) throw new Error("managed-keychain-approval-required");
+  if (code !== 0) throw new Error(process.platform === "linux" ? "managed-key-unavailable" : "managed-keychain-approval-required");
 }
 
 // The control socket of a running company Gateway, without launching one.
@@ -117,7 +119,7 @@ async function start(agentDir: string, home: string, timeoutMs: number): Promise
   await authorize(pinned);
   // Startup failures are reported on stderr as `Agent Watch: managed-…`; the
   // log is private and removed once the process is ready or has exited.
-  const directory = path.join(home, "Library/Application Support/AgentWatch/ManagedLaunch");
+  const directory = path.join(agentWatchDataDirectory(home), "ManagedLaunch");
   fs.mkdirSync(directory, { recursive: true, mode: 0o700 }); fs.chmodSync(directory, 0o700);
   const log = path.join(directory, `launch-${process.pid}-${Date.now()}.log`);
   const fd = fs.openSync(log, "wx", 0o600);

package/packages/piagent-webui/gateway/native-project-picker.ts

@@ -1,9 +1,22 @@
-import { execFile } from "node:child_process";
+import { execFile, execFileSync } from "node:child_process";
 import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 
-type PickerSpec = { executable: string; args: string[] };
+// `wsl`: the picker is Windows' own, run from WSL; its paths are converted.
+type PickerSpec = { executable: string; args: string[]; wsl?: boolean };
+
+// Windows' folder dialog, through PowerShell (also from WSL, where Windows
+// programs run as they are). It prints the chosen folder; cancel exits 1.
+const WINDOWS_PICKER = [
+  "[Console]::OutputEncoding = [System.Text.Encoding]::UTF8",
+  "Add-Type -AssemblyName System.Windows.Forms",
+  "$dialog = New-Object System.Windows.Forms.FolderBrowserDialog",
+  "$dialog.Description = 'Choose a project folder for Piagent'",
+  "if ($dialog.ShowDialog() -eq [System.Windows.Forms.DialogResult]::OK) { [Console]::Out.WriteLine($dialog.SelectedPath); exit 0 } else { exit 1 }"
+].join("; ");
+const windowsPicker = (executable: string, wsl = false): PickerSpec =>
+  ({ executable, args: ["-NoProfile", "-NonInteractive", "-STA", "-Command", WINDOWS_PICKER], ...(wsl ? { wsl } : {}) });
 type PickerEnvironment = Readonly<Record<string, string | undefined>>;
 
 function executableOnPath(name: string, environment: PickerEnvironment): string | null {
@@ -32,6 +45,14 @@ export function resolveNativeProjectPicker(options: { platform?: NodeJS.Platform
     ].join("\n");
     return { executable: "/usr/bin/osascript", args: ["-e", script] };
   }
+  if (platform === "win32") {
+    const executable = path.win32.join(environment.SystemRoot ?? "C:\\Windows", "System32", "WindowsPowerShell", "v1.0", "powershell.exe");
+    return fs.existsSync(executable) ? windowsPicker(executable) : null;
+  }
+  if (platform === "linux" && environment.WSL_DISTRO_NAME) {
+    const executable = executableOnPath("powershell.exe", environment);
+    if (executable) return windowsPicker(executable, true);
+  }
   if (platform !== "linux" || !(environment.DISPLAY || environment.WAYLAND_DISPLAY)) return null;
   for (const name of ["zenity", "qarma"]) {
     const executable = executableOnPath(name, environment);
@@ -71,7 +92,11 @@ export function pickNativeProjectFolders(): Promise<string[]> {
           ? (error as unknown as { code: number }).code : null;
         reject(new Error(exitCode === 1 ? "project-import-cancelled" : "project-import-picker-failed")); return;
       }
-      const selected = selectedFolders(stdout);
+      let selected = selectedFolders(stdout.replace(/\r/g, ""));
+      // C:\Users\me\shop, as seen from WSL: /mnt/c/Users/me/shop.
+      if (picker.wsl) selected = selected.flatMap((folder) => {
+        try { return [execFileSync("wslpath", ["-u", folder], { encoding: "utf8", timeout: 5000 }).trim()]; } catch { return []; }
+      });
       if (!selected.length) { reject(new Error("project-import-cancelled")); return; }
       resolve(selected);
     });

package/packages/piagent-webui/gateway/path-suggestions.ts

@@ -24,12 +24,18 @@ const either = (value: string) => value.normalize("NFC") === value.normalize("NF
   : `(?:${escape(value.normalize("NFC"))}|${escape(value.normalize("NFD"))})`;
 const inside = (file: string, root: string) => file === root || file.startsWith(root + path.sep);
 
+// fd where it is commonly installed, then on PATH (Debian and Ubuntu name it
+// fdfind; Windows adds .exe).
 export function findFd(home = os.homedir()): string | null {
-  for (const candidate of ["/opt/homebrew/bin/fd", "/usr/local/bin/fd", path.join(home, ".pi/agent/bin/fd")]) {
+  const names = process.platform === "win32" ? ["fd.exe"] : ["fd", "fdfind"];
+  const onPath = String(process.env.PATH ?? "").split(path.delimiter).filter(Boolean).flatMap((dir) => names.map((name) => path.join(dir, name)));
+  for (const candidate of ["/opt/homebrew/bin/fd", "/usr/local/bin/fd", path.join(home, ".pi/agent/bin", names[0]), ...onPath]) {
     try { fs.accessSync(candidate, fs.constants.X_OK); return candidate; } catch { /* next */ }
   }
   return null;
 }
+// macOS: the system's git, always there; elsewhere git from PATH.
+const GIT = process.platform === "darwin" ? "/usr/bin/git" : "git";
 
 // Higher is better: the name itself, then its start, then anywhere in it,
 // then anywhere in the path; a folder before a file with the same score.
@@ -59,7 +65,7 @@ async function listed(folder: string, signal?: AbortSignal): Promise<Entry[]> {
     }
   } catch { /* unreadable */ }
   if (!entries.length) return entries;
-  const ignored = new Set((await run("/usr/bin/git", ["-C", folder, "check-ignore", "-z", "--stdin"], signal, entries.map((entry) => `${entry.path}\0`).join("")))
+  const ignored = new Set((await run(GIT, ["-C", folder, "check-ignore", "-z", "--stdin"], signal, entries.map((entry) => `${entry.path}\0`).join("")))
     .split("\0").filter(Boolean));
   return ignored.size ? entries.filter((entry) => !ignored.has(entry.path)) : entries;
 }
@@ -75,7 +81,7 @@ async function searched(folder: string, query: string, options: { fd: string | n
       .map((line) => ({ path: line.replace(/^\.\//, "").replace(/\/$/, ""), directory: line.endsWith("/") }));
   }
   if (!options.atRoot) return [];
-  const files = (await run("/usr/bin/git", ["-C", folder, "ls-files", "--cached", "--others", "--exclude-standard", "-z"], options.signal))
+  const files = (await run(GIT, ["-C", folder, "ls-files", "--cached", "--others", "--exclude-standard", "-z"], options.signal))
     .split("\0").filter(Boolean).slice(0, 50_000);
   const folders = new Set<string>();
   for (const file of files) for (let dir = path.posix.dirname(file); dir !== "."; dir = path.posix.dirname(dir)) folders.add(dir);

package/packages/piagent-webui/gateway/pi-host.ts

@@ -29,8 +29,12 @@ export function installedPiHostRoot(): string {
     // The operator installation is normally global.
   }
   try {
-    const executable = execFileSync("which", ["pi"], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] }).trim();
-    const found = packageRootFrom(fs.realpathSync(executable));
+    const windows = process.platform === "win32";
+    const executable = execFileSync(windows ? "where" : "which", ["pi"], { encoding: "utf8", timeout: 2_000, stdio: ["ignore", "pipe", "ignore"] }).trim().split(/\r?\n/)[0];
+    // npm on Windows puts the pi.cmd shim in the global prefix and the package
+    // in node_modules beside it.
+    const found = packageRootFrom(fs.realpathSync(executable))
+      ?? (windows ? packageRootFrom(path.join(path.dirname(executable), "node_modules", "@earendil-works", "pi-coding-agent", "package.json")) : null);
     if (found) return found;
   } catch {
     // A launcher with a short PATH (Agent Watch, launchd) cannot see `pi`.
@@ -42,8 +46,12 @@ export function installedPiHostRoot(): string {
     const agentDir = process.env.PI_CODING_AGENT_DIR || path.join(home, ".pi", "agent");
     recorded = JSON.parse(fs.readFileSync(path.join(agentDir, "piagent-runtime.json"), "utf8")).pi_sdk_root ?? null;
   } catch { /* no record yet */ }
+  // npm's default Windows prefixes (%APPDATA%\npm, or beside node.exe) have no lib folder.
+  const appData = process.env.APPDATA ?? path.join(home, "AppData", "Roaming");
+  const windowsHosts = process.platform !== "win32" ? []
+    : [path.join(appData, "npm"), path.dirname(process.execPath)].map((prefix) => path.join(prefix, "node_modules", "@earendil-works", "pi-coding-agent"));
   for (const candidate of [recorded, path.join(home, ".pi", "npm-global", hostPackage), path.join(home, ".local", hostPackage),
-    path.join("/opt/homebrew", hostPackage), path.join("/usr/local", hostPackage)]) {
+    path.join("/opt/homebrew", hostPackage), path.join("/usr/local", hostPackage), ...windowsHosts]) {
     if (!candidate) continue;
     const found = packageRootFrom(path.join(candidate, "package.json"));
     if (found) return found;

package/scripts/dashboard-update-job.mjs

@@ -13,7 +13,7 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 
 const RELEASE = /^(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})\.(0|[1-9]\d{0,8})$/;
 const packageRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
@@ -70,7 +70,8 @@ try {
 fs.writeSync(log, "\nRestarting the dashboard on the new release\n");
 // Like the \`piagent\` command, with the package's TypeScript loader: an npm
 // install sits under node_modules, where Node does not strip types itself.
-const loader = path.join(packageRoot, "scripts", "register-typescript-loader.mjs");
+// --import takes a URL: a Windows path (C:\...) reads as a URL scheme.
+const loader = pathToFileURL(path.join(packageRoot, "scripts", "register-typescript-loader.mjs")).href;
 const restart = spawnSync(process.execPath, ["--disable-warning=ExperimentalWarning", "--import", loader, dashboard, "restart", "--json"],
   { stdio: ["ignore", "ignore", log], env, timeout: 3 * 60 * 1000 });
 finish("succeeded", { installed, ...(bindingChanged ? { bindingChanged } : {}), ...(restart.status === 0 ? {} : { reason: "dashboard-restart-failed" }) });

package/scripts/piagent-cli.mjs

@@ -3,7 +3,7 @@ import { spawn } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 
 const scriptByCommand = {
   "piagent-setup": "scripts/setup.sh",
@@ -140,7 +140,7 @@ const sourceRoot = invokedAs === "piagent-benchmark" ? benchmarkSourceRoot() : p
 const target = path.join(sourceRoot, script);
 const runner = target.endsWith(".mjs") ? process.execPath : "bash";
 const runnerArgs = target.endsWith(".mjs")
-  ? ["--disable-warning=ExperimentalWarning", "--import", path.join(sourceRoot, "scripts", "register-typescript-loader.mjs"), target]
+  ? ["--disable-warning=ExperimentalWarning", "--import", pathToFileURL(path.join(sourceRoot, "scripts", "register-typescript-loader.mjs")).href, target]
   : [target];
 const child = spawn(runner, [...runnerArgs, ...forwardedArgs], {
   cwd: process.cwd(),

package/scripts/piagent-dashboard.mjs

@@ -3,9 +3,10 @@ import { spawn, spawnSync } from "node:child_process";
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
-import { fileURLToPath } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 
 import { requestGatewayControl } from "../packages/piagent-webui/gateway/control-socket.ts";
+import { browserCommand } from "../packages/piagent-core/runtime/host/browser-opener.mjs";
 import { installedPiHostRoot } from "../packages/piagent-webui/gateway/pi-host.ts";
 import { gatewayProfileState, profileRef, readGatewayDescriptor, readOrCreateCatalogKey,
   removeGatewayDescriptor } from "../packages/piagent-webui/gateway/profile-state.ts";
@@ -32,11 +33,10 @@ function output(value) {
 
 function openBrowser(url) {
   if (noOpen) return;
-  const opener = process.platform === "darwin" ? ["open", [url]]
-    : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]]
-      : ["xdg-open", [url]];
-  const result = spawnSync(opener[0], opener[1], { stdio: "ignore" });
-  if (result.status !== 0) process.stderr.write(`Dashboard is ready at ${url}\n`);
+  const opener = browserCommand(url);
+  const result = opener ? spawnSync(opener.command, opener.args, { stdio: "ignore", ...opener.options }) : null;
+  // explorer.exe (WSL) exits 1 even when it opened the page.
+  if (!result || result.error || (result.status !== 0 && !/explorer\.exe$/.test(opener.command))) process.stderr.write(`Dashboard is ready at ${url}\n`);
 }
 
 function processAlive(pid) {
@@ -170,7 +170,7 @@ async function ensureStarted() {
   writeGatewayErrorLog(state);
   const child = spawn(process.execPath, [
     "--disable-warning=ExperimentalWarning",
-    "--import", path.join(packageRoot, "scripts", "register-typescript-loader.mjs"),
+    "--import", pathToFileURL(path.join(packageRoot, "scripts", "register-typescript-loader.mjs")).href,
     fileURLToPath(import.meta.url),
     "serve",
     ...(agentDir ? ["--agent-dir", agentDir] : [])

package/scripts/piagent-studio.mjs

@@ -6,7 +6,7 @@ import { createHash } from 'node:crypto';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { ManagedBrokerClient } from '../packages/piagent-core/managed/broker-client.mjs';
 import { ManagedSession } from '../packages/piagent-core/managed/session.mjs';
-import { resolveStore, storedSlot } from '../packages/piagent-core/managed/store.mjs';
+import { agentWatchDataDirectory, interopEnvironment, resolveStore, storedSlot } from '../packages/piagent-core/managed/store.mjs';
 
 const digest = file => createHash('sha256').update(fs.readFileSync(file)).digest('hex');
 // Node's experimental-feature notices (type stripping, SQLite) are not
@@ -23,7 +23,7 @@ for (let i = 0; i < args.length; i++) {
 const home = os.homedir();
 // Do this before importing the SDK: it must not discover personal keys, Node
 // preload hooks, proxy overrides or provider endpoints from an ambient shell.
-const clean = { PATH: '/usr/bin:/bin', HOME: home, LANG: 'en_US.UTF-8', TERM: process.env.TERM || 'xterm-256color' };
+const clean = { PATH: '/usr/bin:/bin', HOME: home, LANG: 'en_US.UTF-8', TERM: process.env.TERM || 'xterm-256color', ...interopEnvironment() };
 for (const key of Object.keys(process.env)) delete process.env[key];
 Object.assign(process.env, clean);
 let broker, current, gateway, hold;
@@ -53,7 +53,7 @@ try {
   }
   // Conversations live in one store per member on this machine, whichever key
   // Agent Watch holds: a key's slot learns its member once, then points there.
-  const root = path.join(home, 'Library/Application Support/AgentWatch/ManagedSessions');
+  const root = path.join(agentWatchDataDirectory(home), 'ManagedSessions');
   let store = storedSlot(root, config.profile_id);
   if (!store) {
     const asked = new ManagedBrokerClient({ executable: config.broker, profileID: config.profile_id });
@@ -150,6 +150,6 @@ try {
   // Never print JSON payloads or startup objects that can contain role tokens.
   const code = error instanceof Error && /^managed-[a-z:_-]+$/.test(error.message) ? error.message : 'managed-launch-failed';
   const hint = code === 'managed-session-open-elsewhere' ? 'This conversation is running in the Piagent WebUI; continue it there, or start a new one here.'
-    : 'Refresh the Studio import or check Keychain access.';
+    : process.platform === 'linux' ? 'In Agent Watch for Windows, choose Connect Piagent in WSL again.' : 'Refresh the Studio import or check Keychain access.';
   process.stderr.write(`Agent Watch: ${code}. ${hint}\n`); process.exitCode = 1;
 } finally { await gateway?.close(); if (current) await current.dispose(); else await broker?.dispose(); hold?.release(); }

package/scripts/piagent-webui-launcher.mjs

@@ -4,6 +4,7 @@ import fs from "node:fs";
 import net from "node:net";
 import os from "node:os";
 import path from "node:path";
+import { browserCommand } from "../packages/piagent-core/runtime/host/browser-opener.mjs";
 
 const REF = /^[A-Za-z0-9][A-Za-z0-9._~-]{0,159}$/;
 
@@ -83,9 +84,9 @@ function requestLaunch(descriptor) {
 }
 
 function openUrl(url) {
-  const command = process.platform === "darwin" ? "open" : process.platform === "linux" ? "xdg-open" : null;
-  if (!command) return false;
-  const child = spawn(command, [url], { detached: true, stdio: "ignore" });
+  const opener = browserCommand(url);
+  if (!opener) return false;
+  const child = spawn(opener.command, opener.args, { detached: true, stdio: "ignore", ...opener.options });
   child.unref(); return true;
 }