@reason-machines/cli-linux-arm64-musl 0.2.381 → 0.2.383

package/bin/vm-hands/{vm-hands-entry-lite-anmv8hp7.js → vm-hands-entry-lite-mn64e4pt.js}

@@ -1,5 +1,5 @@
 // @bun
-import{$g as S,Gg as w,Hg as m,Ig as q,Jg as B,Kg as L,Lg as W,Mg as F,Og as Q,Qg as j,Rg as k,Sg as J,Tg as z,Ug as Z,Wg as K,Xg as $,Zg as _,_g as G,bh as M,eh as X}from"./vm-hands-entry-lite-za55dtte.js";import{Ci as h}from"./vm-hands-entry-lite-4m40gwkf.js";import{nj as y,oj as p,pj as x,qj as b}from"./vm-hands-entry-lite-9cgm6g8t.js";var s=["cgroup_membership_read_failed","cgroup_v2_membership_absent","cgroup_scope_invalid","cgroup_root_unavailable","cgroup_directory_unavailable","cgroup_limit_read_failed","cgroup_events_read_failed","cgroup_current_read_failed","cgroup_stat_read_failed","boot_id_read_failed","boot_id_invalid","guest_meminfo_read_failed","guest_vmstat_read_failed","memory_counter_invalid","memory_field_missing","memory_capacity_invalid"];var o=String.raw`(function(fs, path) {
+import{Tg as H}from"./vm-hands-entry-lite-2e18tm6w.js";import{$g as Q,Vg as m,Wg as q,Xg as L,Yg as B,Zg as W,_g as F,bh as j,dh as k,eh as z,fh as Z,gh as J,hh as K,jh as $,kh as G,mh as M,nh as s,oh as X,qh as _,th as S}from"./vm-hands-entry-lite-ammr3xbc.js";import{Ri as y}from"./vm-hands-entry-lite-sex82vb1.js";import{Cj as p,Dj as x,Ej as b,Fj as w}from"./vm-hands-entry-lite-pk3q774c.js";import{Dk as Y}from"./vm-hands-entry-lite-f5230h6t.js";var o=["cgroup_membership_read_failed","cgroup_v2_membership_absent","cgroup_scope_invalid","cgroup_root_unavailable","cgroup_directory_unavailable","cgroup_limit_read_failed","cgroup_events_read_failed","cgroup_current_read_failed","cgroup_stat_read_failed","boot_id_read_failed","boot_id_invalid","guest_meminfo_read_failed","guest_vmstat_read_failed","memory_counter_invalid","memory_field_missing","memory_capacity_invalid"];var c=String.raw`(function(fs, path) {
   const fail = (message, reasonCode) => { throw Object.assign(Error(message), {reasonCode}); };
   const read = (p, reasonCode, trim=true) => { try { const text=fs.readFileSync(p, "utf8"); return trim?text.trim():text; }
     catch { fail("memory_read", reasonCode); } };
@@ -64,7 +64,7 @@ import{$g as S,Gg as w,Hg as m,Ig as q,Jg as B,Kg as L,Lg as W,Mg as F,Og as Q,Q
   if(!Number.isSafeInteger(limitBytes)||limitBytes<=0||!Number.isSafeInteger(available)||available>limitBytes) fail("memory_capacity", "memory_capacity_invalid");
   return {bootId,oomKills:field(read("/proc/vmstat", "guest_vmstat_read_failed"),"oom_kill"),currentBytes:limitBytes-available,
     limitBytes,inactiveFileBytes:0,capacitySource:"guest",memoryScope:"/proc"};
-})`;var c=String.raw`import os,sys,json,stat,fcntl,time,ctypes
+})`;var u=String.raw`import os,sys,json,stat,fcntl,time,ctypes
 v=json.load(sys.stdin)
 root=v['root']; paths=list(dict.fromkeys([v['source'],v['snapshot']]))
 marker=('# reason-job-env-owner:'+v['runId']+'\n').encode()
@@ -309,7 +309,7 @@ function fileOperation(request) {
   });
   return { promise, cancel() {} };
 }
-`;var u="a3e39eb55160acfc116fa9871ccc594c68be7a642d2331b24baa707c8f601ec0";import{createHash as tt}from"crypto";var pt=Object.freeze({"api.ara.so":"api.reasonmachines.com","api.reasonmachines.ai":"api.reasonmachines.com","api-staging.ara.so":"staging-api.reasonmachines.com","staging-api.reasonmachines.ai":"staging-api.reasonmachines.com"});var a=Object.freeze({trailingSlashPattern:/\/+$/.source,keyPrefix:"http.",keySuffix:"/.extraheader",valuePrefix:"Authorization: Bearer "});var d=Object.freeze({tokenEnv:"ARA_GIT_BROKER_TOKEN",reasonTokenEnv:"REASON_GIT_BROKER_TOKEN",urlEnv:"ARA_GIT_BROKER_URL",keyPrefix:"credential.",keySuffix:"/.helper",value:'!f(){ printf "username=%s\\npassword=%s\\n" "ara-run" "${REASON_GIT_BROKER_TOKEN:-$ARA_GIT_BROKER_TOKEN}"; };f'});var r=/^[A-Za-z_][A-Za-z0-9_]*$/;var O=new Set(["ARA_INFERENCE_TOKEN","AI_GATEWAY_API_KEY","CLOUD_AGENT_AI_GATEWAY_API_KEY","INFERENCE_V2_GATEWAY_API_KEY","VERCEL_AI_GATEWAY_API_KEY","INFERENCE_V2_CONCENTRATE_API_KEY","INFERENCE_V2_OPENAI_API_KEY","INFERENCE_V2_ANTHROPIC_API_KEY","INFERENCE_V2_FINGERPRINT_SECRET","OPENAI_API_KEY","OPENROUTER_API_KEY","ANTHROPIC_API_KEY","CODEX_ACCESS_TOKEN","GITHUB_COPILOT_API_KEY","AZURE_OPENAI_API_KEY","AZURE_OPENAI_CLIENT_SECRET"]),I=new Set(["ARA_OPERATOR_KEY","BL_API_KEY","BLAXEL_API_KEY","NSC_TOKEN","NSC_TOKEN_FILE","NAMESPACE_API_KEY","NAMESPACE_ACCESS_TOKEN","NAMESPACE_TOKEN","NAMESPACE_TOKEN_JSON","NAMESPACE_SANDBOX_TOKEN_JSON","ARA_LOCAL_QA_NAMESPACE_WORKLOAD_TOKEN_FILE","NAMESPACE_SANDBOX_USE_LOCAL_USER_TOKEN","COMPUTE_SERVICE_TOKEN"]),T=["INFISICAL_","NSC_"],A=new Set(["ARA_JOB_ENV","ARA_DELIVERY_BASE_SHA","WORK_ROOT","REPO_DIR","ARA_CONTROL_DIR","ARA_PRESERVE_WORKSPACE","ARA_PINNED_CHECKOUT_REUSE","FOLLOWUP_BRANCH","REPO_URL","TOKENLESS_URL","REPOSITORY_IDENTITY_URL","DEFAULT_BRANCH","BRANCH","BRANCH_GENERATED","BASE_REF","REPO_EMPTY","REPO_WRITABLE","ARA_DELIVERY_BASE_BRANCH","ARA_SERVER_GIT_PUBLICATION","ARA_EMPTY_REPOSITORY_COMMIT","REASON_MODEL","REASON_DELIVERY_BASE_BRANCH","REASON_DELIVERY_BASE_SHA","REASON_EMPTY_REPOSITORY_COMMIT","REASON_SCRATCH_SESSION_ID","REASON_SERVER_GIT_PUBLICATION","REASON_ALLOW_INSTALL_SCRIPTS","SCM_TOKEN","SCM_TOKEN_USER","REASON_OIDC_TOKEN_URL","REASON_OIDC_REQUEST_TOKEN","AWS_CONTAINER_CREDENTIALS_FULL_URI","AWS_CONTAINER_AUTHORIZATION_TOKEN","AWS_CONTAINER_CREDENTIALS_RELATIVE_URI","AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE","BASH_ENV","ENV","BASHOPTS","SHELLOPTS","PS4","IFS","CDPATH","GLOBIGNORE","PROMPT_COMMAND","PATH","HOME","TMPDIR","TMP","TEMP","XDG_CONFIG_HOME","GIT_DIR","GIT_WORK_TREE","GIT_INDEX_FILE","GIT_OBJECT_DIRECTORY","GIT_COMMON_DIR","GIT_NAMESPACE","GIT_CEILING_DIRECTORIES","GIT_DISCOVERY_ACROSS_FILESYSTEM","GIT_SHALLOW_FILE","GIT_ALLOW_PROTOCOL","GIT_PROTOCOL_FROM_USER","GIT_REPLACE_REF_BASE","NODE_OPTIONS","NODE_PATH","NODE_REPL_EXTERNAL_MODULES","CLASSPATH","PYTHONPATH","PYTHONSTARTUP","PYTHONHOME","RUBYOPT","RUBYLIB","PERL5LIB","PERL5OPT","JAVA_TOOL_OPTIONS","_JAVA_OPTIONS","JDK_JAVA_OPTIONS","GEM_PATH","GEM_HOME","GIT_SSH","GIT_SSH_COMMAND","GIT_EXEC_PATH","GIT_TEMPLATE_DIR","GIT_ALTERNATE_OBJECT_DIRECTORIES","GIT_PROXY_COMMAND","GIT_EXTERNAL_DIFF","GIT_PAGER","GIT_EDITOR","GIT_ASKPASS","SSH_ASKPASS","PAGER","EDITOR","TAR_OPTIONS","CURL_HOME","WGETRC","APT_CONFIG","PERLLIB","GIT_GRAFT_FILE","POSIXLY_CORRECT"]),D=["GIT_TRACE","CONTEXT_REPO_","ARA_CHECKPOINT_BOOTSTRAP_","_","ARA_HANDS_","ARA_DEVICE_","ARA_GIT_BROKER_","REASON_HANDS_","REASON_DEVICE_","REASON_GIT_BROKER_","LD_","DYLD_","GIT_CONFIG","BASH_FUNC_"];var n="^(?!(?:"+[...O,...I,...A].join("|")+")$)(?!(?:"+[...T,...D].join("|")+"))"+r.source.slice(1),mt=new RegExp(n);var v=["HOME","PWD","OLDPWD","TMPDIR","TMP","TEMP","SHELL","USER","LOGNAME","SCM_TOKEN","SCM_TOKEN_USER","GH_TOKEN","GITHUB_TOKEN","GH_ENTERPRISE_TOKEN","GITHUB_ENTERPRISE_TOKEN","GITLAB_TOKEN"],N=["ARA_HANDS_","ARA_DEVICE_","ARA_GIT_BROKER_","REASON_HANDS_","REASON_DEVICE_","REASON_GIT_BROKER_","BUN_"],U="^(?!(?:"+v.join("|")+")$)(?!(?:"+N.join("|")+"))"+n.slice(1),E="ARA_DELIVERY_BASE_SHA|WORK_ROOT|FOLLOWUP_BRANCH|ARA_PRESERVE_WORKSPACE|ARA_PINNED_CHECKOUT_REUSE|CONTEXT_REPO_[A-Z0-9_]+|REPO_URL|TOKENLESS_URL|REPOSITORY_IDENTITY_URL|DEFAULT_BRANCH|BRANCH|BRANCH_GENERATED|BASE_REF|REPO_EMPTY|REPO_WRITABLE|ARA_DELIVERY_BASE_BRANCH|ARA_SERVER_GIT_PUBLICATION|ARA_EMPTY_REPOSITORY_COMMIT|REASON_MODEL|REASON_DELIVERY_BASE_BRANCH|REASON_DELIVERY_BASE_SHA|REASON_EMPTY_REPOSITORY_COMMIT|REASON_SCRATCH_SESSION_ID|REASON_SERVER_GIT_PUBLICATION|REASON_ALLOW_INSTALL_SCRIPTS",i="^(?:"+E+"|"+U.slice(1,-1)+")$",R=new RegExp(i);function Wt(t){return R.test(t)}var f=Object.freeze({tokenPath:"/identity/token",awsPath:"/identity/aws",tokenPattern:/^[A-Za-z0-9_.~-]+$/.source}),l=Object.freeze({variables:256,valueBytes:130816,snapshotBytes:1048576}),Ft=Object.freeze({valueChars:16384,snapshotBytes:65536});var g=["set -g history-limit 50000","set -g status off","set -g window-size smallest","set -gq fill-character ' '","set -g escape-time 10","set -g prefix None","set -g prefix2 None","set -g terminal-overrides ',*:smcup@:rmcup@'"];var et=2,rt="ara-hands-worker.cjs",Y=["/usr/local/go/bin","/opt/node/bin","/usr/local/bin","/usr/sbin","/usr/bin","/sbin","/bin","/usr/local/cargo/bin"],nt=Y.join(":"),it=["/opt/homebrew/bin",...Y].join(":"),st='(platform, linuxPath, macosPath) => platform === "darwin" ? macosPath : linuxPath';function Ht(t,H,P){return t==="darwin"?P:H}var ot=String.raw`(function(anchor, pid, native) {
+`;var a="a3e39eb55160acfc116fa9871ccc594c68be7a642d2331b24baa707c8f601ec0";import{createHash as rt}from"crypto";var bt=Object.freeze({"api.ara.so":"api.reasonmachines.com","api.reasonmachines.ai":"api.reasonmachines.com","api-staging.ara.so":"staging-api.reasonmachines.com","staging-api.reasonmachines.ai":"staging-api.reasonmachines.com"});var d=Object.freeze({trailingSlashPattern:/\/+$/.source,keyPrefix:"http.",keySuffix:"/.extraheader",valuePrefix:"Authorization: Bearer "});var f=Object.freeze({tokenEnv:"ARA_GIT_BROKER_TOKEN",reasonTokenEnv:"REASON_GIT_BROKER_TOKEN",urlEnv:"ARA_GIT_BROKER_URL",keyPrefix:"credential.",keySuffix:"/.helper",value:'!f(){ printf "username=%s\\npassword=%s\\n" "ara-run" "${REASON_GIT_BROKER_TOKEN:-$ARA_GIT_BROKER_TOKEN}"; };f'});var r=/^[A-Za-z_][A-Za-z0-9_]*$/;var T=new Set(["ARA_INFERENCE_TOKEN","AI_GATEWAY_API_KEY","CLOUD_AGENT_AI_GATEWAY_API_KEY","INFERENCE_V2_GATEWAY_API_KEY","VERCEL_AI_GATEWAY_API_KEY","INFERENCE_V2_CONCENTRATE_API_KEY","INFERENCE_V2_OPENAI_API_KEY","INFERENCE_V2_ANTHROPIC_API_KEY","INFERENCE_V2_FINGERPRINT_SECRET","OPENAI_API_KEY","OPENROUTER_API_KEY","ANTHROPIC_API_KEY","CODEX_ACCESS_TOKEN","GITHUB_COPILOT_API_KEY","AZURE_OPENAI_API_KEY","AZURE_OPENAI_CLIENT_SECRET"]),A=new Set(["ARA_OPERATOR_KEY","BL_API_KEY","BLAXEL_API_KEY","NSC_TOKEN","NSC_TOKEN_FILE","NAMESPACE_API_KEY","NAMESPACE_ACCESS_TOKEN","NAMESPACE_TOKEN","NAMESPACE_TOKEN_JSON","NAMESPACE_SANDBOX_TOKEN_JSON","ARA_LOCAL_QA_NAMESPACE_WORKLOAD_TOKEN_FILE","NAMESPACE_SANDBOX_USE_LOCAL_USER_TOKEN","COMPUTE_SERVICE_TOKEN"]),D=["INFISICAL_","NSC_"],v=new Set(["ARA_JOB_ENV","ARA_DELIVERY_BASE_SHA","WORK_ROOT","REPO_DIR","ARA_CONTROL_DIR","ARA_PRESERVE_WORKSPACE","ARA_PINNED_CHECKOUT_REUSE","FOLLOWUP_BRANCH","REPO_URL","TOKENLESS_URL","REPOSITORY_IDENTITY_URL","DEFAULT_BRANCH","BRANCH","BRANCH_GENERATED","BASE_REF","REPO_EMPTY","REPO_WRITABLE","ARA_DELIVERY_BASE_BRANCH","ARA_SERVER_GIT_PUBLICATION","ARA_EMPTY_REPOSITORY_COMMIT","REASON_MODEL","REASON_DELIVERY_BASE_BRANCH","REASON_DELIVERY_BASE_SHA","REASON_EMPTY_REPOSITORY_COMMIT","REASON_SCRATCH_SESSION_ID","REASON_SERVER_GIT_PUBLICATION","REASON_ALLOW_INSTALL_SCRIPTS","SCM_TOKEN","SCM_TOKEN_USER","REASON_OIDC_TOKEN_URL","REASON_OIDC_REQUEST_TOKEN","AWS_CONTAINER_CREDENTIALS_FULL_URI","AWS_CONTAINER_AUTHORIZATION_TOKEN","AWS_CONTAINER_CREDENTIALS_RELATIVE_URI","AWS_CONTAINER_AUTHORIZATION_TOKEN_FILE","BASH_ENV","ENV","BASHOPTS","SHELLOPTS","PS4","IFS","CDPATH","GLOBIGNORE","PROMPT_COMMAND","PATH","HOME","TMPDIR","TMP","TEMP","XDG_CONFIG_HOME","GIT_DIR","GIT_WORK_TREE","GIT_INDEX_FILE","GIT_OBJECT_DIRECTORY","GIT_COMMON_DIR","GIT_NAMESPACE","GIT_CEILING_DIRECTORIES","GIT_DISCOVERY_ACROSS_FILESYSTEM","GIT_SHALLOW_FILE","GIT_ALLOW_PROTOCOL","GIT_PROTOCOL_FROM_USER","GIT_REPLACE_REF_BASE","NODE_OPTIONS","NODE_PATH","NODE_REPL_EXTERNAL_MODULES","CLASSPATH","PYTHONPATH","PYTHONSTARTUP","PYTHONHOME","RUBYOPT","RUBYLIB","PERL5LIB","PERL5OPT","JAVA_TOOL_OPTIONS","_JAVA_OPTIONS","JDK_JAVA_OPTIONS","GEM_PATH","GEM_HOME","GIT_SSH","GIT_SSH_COMMAND","GIT_EXEC_PATH","GIT_TEMPLATE_DIR","GIT_ALTERNATE_OBJECT_DIRECTORIES","GIT_PROXY_COMMAND","GIT_EXTERNAL_DIFF","GIT_PAGER","GIT_EDITOR","GIT_ASKPASS","SSH_ASKPASS","PAGER","EDITOR","TAR_OPTIONS","CURL_HOME","WGETRC","APT_CONFIG","PERLLIB","GIT_GRAFT_FILE","POSIXLY_CORRECT"]),N=["GIT_TRACE","CONTEXT_REPO_","ARA_CHECKPOINT_BOOTSTRAP_","_","ARA_HANDS_","ARA_DEVICE_","ARA_GIT_BROKER_","REASON_HANDS_","REASON_DEVICE_","REASON_GIT_BROKER_","LD_","DYLD_","GIT_CONFIG","BASH_FUNC_"];var n="^(?!(?:"+[...T,...A,...v].join("|")+")$)(?!(?:"+[...D,...N].join("|")+"))"+r.source.slice(1),Lt=new RegExp(n);var U=["HOME","PWD","OLDPWD","TMPDIR","TMP","TEMP","SHELL","USER","LOGNAME","SCM_TOKEN","SCM_TOKEN_USER","GH_TOKEN","GITHUB_TOKEN","GH_ENTERPRISE_TOKEN","GITHUB_ENTERPRISE_TOKEN","GITLAB_TOKEN"],R=["ARA_HANDS_","ARA_DEVICE_","ARA_GIT_BROKER_","REASON_HANDS_","REASON_DEVICE_","REASON_GIT_BROKER_","BUN_"],E="^(?!(?:"+U.join("|")+")$)(?!(?:"+R.join("|")+"))"+n.slice(1),tt="ARA_DELIVERY_BASE_SHA|WORK_ROOT|FOLLOWUP_BRANCH|ARA_PRESERVE_WORKSPACE|ARA_PINNED_CHECKOUT_REUSE|CONTEXT_REPO_[A-Z0-9_]+|REPO_URL|TOKENLESS_URL|REPOSITORY_IDENTITY_URL|DEFAULT_BRANCH|BRANCH|BRANCH_GENERATED|BASE_REF|REPO_EMPTY|REPO_WRITABLE|ARA_DELIVERY_BASE_BRANCH|ARA_SERVER_GIT_PUBLICATION|ARA_EMPTY_REPOSITORY_COMMIT|REASON_MODEL|REASON_DELIVERY_BASE_BRANCH|REASON_DELIVERY_BASE_SHA|REASON_EMPTY_REPOSITORY_COMMIT|REASON_SCRATCH_SESSION_ID|REASON_SERVER_GIT_PUBLICATION|REASON_ALLOW_INSTALL_SCRIPTS",i="^(?:"+tt+"|"+E.slice(1,-1)+")$",et=new RegExp(i);function Qt(t){return et.test(t)}var l=Object.freeze({tokenPath:"/identity/token",awsPath:"/identity/aws",tokenPattern:/^[A-Za-z0-9_.~-]+$/.source}),g=Object.freeze({variables:256,valueBytes:130816,snapshotBytes:1048576}),jt=Object.freeze({valueChars:16384,snapshotBytes:65536});var h=["set -g history-limit 50000","set -g status off","set -g window-size smallest","set -gq fill-character ' '","set -g escape-time 10","set -g prefix None","set -g prefix2 None","set -g terminal-overrides ',*:smcup@:rmcup@'"];var nt=2,it="ara-hands-worker.cjs",P=["/usr/local/go/bin","/opt/node/bin","/usr/local/bin","/usr/sbin","/usr/bin","/sbin","/bin","/usr/local/cargo/bin"],st=P.join(":"),ot=["/opt/homebrew/bin",...P].join(":"),ct='(platform, linuxPath, macosPath) => platform === "darwin" ? macosPath : linuxPath';function It(t,V,C){return t==="darwin"?C:V}var ut=String.raw`(function(anchor, pid, native) {
   const token = native.identity(pid);
   const session = native.session(pid);
   if (!native.same(anchor)) throw new Error("pty_session_identity_lost");
@@ -317,7 +317,7 @@ function fileOperation(request) {
   if (session.id !== anchor[5]) throw new Error("pty_member_session_changed");
   if (!token) return { retry: true, token: null };
   return { retry: false, token };
-})`,ct=String.raw`(function(native) {
+})`,at=String.raw`(function(native) {
   let probe;
   try {
     try {
@@ -327,7 +327,7 @@ function fileOperation(request) {
       native.signal(probe);
     } finally { if (probe) native.release(probe); }
   } catch (error) { native.close(); throw error; }
-})`,ut=String.raw`(function(bootstrap) {
+})`,dt=String.raw`(function(bootstrap) {
   const { dlopen, ptr } = require("bun:ffi");
   const api = dlopen("libc.so.6", {
     prctl: { args: ["i32", "u64", "u64", "u64", "u64"], returns: "i32" },
@@ -348,7 +348,7 @@ function fileOperation(request) {
   require("node:fs").writeSync(3, "subreaper\n");
   api.execve(ptr(args[0]), ptr(argv), ptr(envp));
   throw new Error("pty_exec_failed");
-})`,at=String.raw`
+})`,ft=String.raw`
 "use strict";
 const crypto = require("node:crypto");
 const fs = require("node:fs");
@@ -356,43 +356,110 @@ const net = require("node:net");
 const path = require("node:path");
 const { spawn, spawnSync } = require("node:child_process");
 const { StringDecoder } = require("node:string_decoder");
-const GIT_BROKER_HTTP_HEADER_POLICY = ${JSON.stringify(a)};
-const GIT_BROKER_CREDENTIAL_HELPER_POLICY = ${JSON.stringify(d)};
+const GIT_BROKER_HTTP_HEADER_POLICY = ${JSON.stringify(d)};
+const GIT_BROKER_CREDENTIAL_HELPER_POLICY = ${JSON.stringify(f)};
 const DEVICE_ENVIRONMENT_NAME_RE = new RegExp(${JSON.stringify(i)});
-const DEVICE_CLOUD_ACCESS_POLICY = ${JSON.stringify(f)};
-const DEVICE_ENVIRONMENT_LIMITS = ${JSON.stringify(l)};
+const DEVICE_CLOUD_ACCESS_POLICY = ${JSON.stringify(l)};
+const DEVICE_ENVIRONMENT_LIMITS = ${JSON.stringify(g)};
 
-const VERSION = ${q};
-const WORKER_VERSION = ${et};
-const WORKER_ENTRYPOINT = ${JSON.stringify(rt)};
-const GUEST_MEMORY_UNAVAILABLE_REASONS = ${JSON.stringify(s)};
-const sampleGuestMemory = ${o};
-const inspectMacPtyMember = ${ot};
-const probeLinuxPtyLibrary = ${ct};
-const LINUX_PTY_EXEC_SOURCE = ${JSON.stringify(ut)};
-const CLOSE_CODES = ${JSON.stringify(M)};
+const VERSION = ${L};
+const WORKER_VERSION = ${nt};
+const WORKER_ENTRYPOINT = ${JSON.stringify(it)};
+const GUEST_MEMORY_UNAVAILABLE_REASONS = ${JSON.stringify(o)};
+const sampleGuestMemory = ${c};
+const inspectMacPtyMember = ${ut};
+const probeLinuxPtyLibrary = ${at};
+const windowsPtyApi = ${H};
+const LINUX_PTY_EXEC_SOURCE = ${JSON.stringify(dt)};
+const CLOSE_CODES = ${JSON.stringify(_)};
 const SHA256_RE = /^[0-9a-f]{64}$/;
 const MAX_FRAME_BYTES = ${B};
-const MAX_INPUT_CHARS = ${L};
-const MAX_STRUCTURED_INPUT_CHARS = ${W};
-const MAX_OUTPUT_CHARS = ${F};
-const WORKSPACE_BEFORE_MAX_OUTPUT_CHARS = ${X};
-const MAX_ERROR_CHARS = ${Q};
+const MAX_INPUT_CHARS = ${W};
+const MAX_STRUCTURED_INPUT_CHARS = ${F};
+const MAX_OUTPUT_CHARS = ${Q};
+const WORKSPACE_BEFORE_MAX_OUTPUT_CHARS = ${S};
+const MAX_ERROR_CHARS = ${j};
 const MAX_LEDGER_IDS = 16384;
 const MAX_CACHED_RESULTS = 256;
-const MAX_JOB_INPUT_CHARS = ${j};
-const MAX_JOB_OUTPUT_CHARS = ${k};
-const MAX_JOB_OUTPUT_CHUNKS = ${J};
-const MAX_JOBS = ${z};
+const MAX_JOB_INPUT_CHARS = ${k};
+const MAX_JOB_OUTPUT_CHARS = ${z};
+const MAX_JOB_OUTPUT_CHUNKS = ${Z};
+const MAX_JOBS = ${J};
 const MAX_JOB_RECORD_BYTES = 262144;
 const MAX_JOB_JOURNAL_BYTES = MAX_JOBS * MAX_JOB_RECORD_BYTES;
-const MAX_JOB_CONTROL_FRAME_BYTES = ${Z};
-const MAX_PTY_INPUT_BYTES = ${K};
-const MAX_PTY_OUTPUT_BYTES = ${$};
-const MAX_PTY_DIMENSION = ${_};
+const MAX_JOB_CONTROL_FRAME_BYTES = ${K};
+const MAX_PTY_INPUT_BYTES = ${$};
+const MAX_PTY_OUTPUT_BYTES = ${G};
+const MAX_PTY_DIMENSION = ${M};
 const ID_RE = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,199}$/;
 const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
-const FIXED_BASH = "/bin/bash";
+const WINDOWS = process.platform === "win32";
+// Each Bash leader's tree on Windows, children that outlive it included (shared/windows-job-object.ts).
+const windowsJobs = WINDOWS ? ${Y}(require) : null;
+/** Windows has no POSIX owner or mode bits: the user's own profile folders are
+ * private by their ACLs, and the worker runs as that ordinary user. */
+function ownedPrivately(stat, mask = 0o077) {
+  return WINDOWS || (stat.uid === process.getuid() && (stat.mode & mask) === 0);
+}
+/** Windows cannot open (or fsync) a directory; its renames are durable by NTFS journaling. */
+function syncDirectory(directory) {
+  if (WINDOWS) return;
+  const directoryFd = fs.openSync(directory, fs.constants.O_RDONLY);
+  try { fs.fsyncSync(directoryFd); } finally { fs.closeSync(directoryFd); }
+}
+/** Path containment; Windows paths compare case-insensitively. */
+function pathWithin(candidate, root) {
+  const [child, parent] = WINDOWS ? [candidate.toLowerCase(), root.toLowerCase()] : [candidate, root];
+  return child === parent || child.startsWith(parent + path.sep);
+}
+/** Git Bash's form of a Windows path (C:\Users\me is /c/Users/me): every path
+ * this worker sends or sets as a shell coordinate, since the server and its
+ * scripts speak POSIX. Unchanged off Windows. */
+function posixPath(value) {
+  if (!WINDOWS) return value;
+  const drive = /^([A-Za-z]):(?:[\\/](.*))?$/.exec(value);
+  if (!drive) return value.replace(/\\/g, "/");
+  return "/" + drive[1].toLowerCase() + (drive[2] ? "/" + drive[2].replace(/\\/g, "/") : "");
+}
+/** A path from the server or the model as Node opens it on Windows: /c/Users/me,
+ * C:/Users/me and C:\Users\me name the same file, and /tmp is the shell's
+ * TEMP (Git Bash mounts it there). Relative paths are unchanged. */
+function nativePath(value) {
+  if (!WINDOWS || typeof value !== "string") return value;
+  const temporary = /^\/tmp(?:\/(.*))?$/.exec(value);
+  if (temporary) return nativePath(path.join(config.executionEnvironment?.temporaryDirectory ?? config.workRoot, temporary[1] || ""));
+  const drive = /^\/([A-Za-z])(?:\/(.*))?$/.exec(value);
+  if (drive) return drive[1].toUpperCase() + ":\\" + (drive[2] || "").replace(/\//g, "\\");
+  return /^[A-Za-z]:\//.test(value) ? value.replace(/\//g, "\\") : value;
+}
+/** The request with its file path as nativePath gives it (Windows only); the
+ * journal and every result keep the request as the server sent it. */
+function nativePathRequest(request) {
+  const input = request.input;
+  if (!WINDOWS) return request;
+  if (["read", "edit", "write"].includes(request.tool) && typeof input.path === "string") {
+    return { ...request, input: { ...input, path: nativePath(input.path) } };
+  }
+  if (request.tool === "pi_tool" && input.tool !== "bash" && typeof input.args.path === "string") {
+    return { ...request, input: { ...input, args: { ...input.args, path: nativePath(input.args.path) } } };
+  }
+  return request;
+}
+const filesystemRoot = (value) => path.parse(value).root === value;
+// A Windows managed job's control endpoint is a named pipe of its own.
+const validWindowsPipe = (value) => WINDOWS && typeof value === "string" && /^\\\\\.\\pipe\\reason-[A-Za-z0-9._-]{1,200}$/.test(value);
+// Windows programs need these system coordinates (Winsock, crypto, profile
+// folders); a composed environment carries them from the worker's own.
+const WINDOWS_SYSTEM_VARIABLES = ["SystemRoot", "SystemDrive", "windir", "ComSpec", "PATHEXT", "USERPROFILE", "USERNAME",
+  "USERDOMAIN", "COMPUTERNAME", "APPDATA", "LOCALAPPDATA", "ProgramData", "ProgramFiles", "ProgramFiles(x86)", "ProgramW6432",
+  "CommonProgramFiles", "CommonProgramFiles(x86)", "CommonProgramW6432", "NUMBER_OF_PROCESSORS", "PROCESSOR_ARCHITECTURE", "OS", "PSModulePath"];
+function windowsSystemVariables() {
+  if (!WINDOWS) return {};
+  return Object.fromEntries(WINDOWS_SYSTEM_VARIABLES.flatMap((name) => {
+    const value = process.env[name];
+    return typeof value === "string" && value.length <= 32768 && !value.includes("\0") ? [[name, value]] : [];
+  }));
+}
 /** A Reason cloud machine's memory ceiling, which guestd records on every
  * start (/run/sc/memory-max-mib), or 0 elsewhere. Read per command: a resize
  * changes it. */
@@ -425,10 +492,11 @@ function jobsUserPrefix(model) {
   return user ? ["/usr/bin/setpriv", "--reuid=" + user.uid, "--regid=" + gid, "--clear-groups", "--no-new-privs", "--",
     "/usr/bin/env", "HOME=" + user.home, "USER=" + user.username, "LOGNAME=" + user.username] : [];
 }
-const FIXED_CLOUD_CHILD_PATH = ${JSON.stringify(nt)};
-const FIXED_MACOS_CLOUD_CHILD_PATH = ${JSON.stringify(it)};
-const selectCloudChildPath = ${st};
+const FIXED_CLOUD_CHILD_PATH = ${JSON.stringify(st)};
+const FIXED_MACOS_CLOUD_CHILD_PATH = ${JSON.stringify(ot)};
+const selectCloudChildPath = ${ct};
 const config = JSON.parse(fs.readFileSync(process.argv[2], "utf8"));
+const FIXED_BASH = WINDOWS ? config.bashExecutable : "/bin/bash";
 const allowedTools = config.allowedTools === undefined
   ? ["bash", "repl", "read", "edit", "write"]
   : config.allowedTools;
@@ -455,7 +523,7 @@ function validEnvironmentConfiguration() {
     || (baseline.variables !== undefined && !validHostVariables(baseline.variables))
     || ![baseline.home, baseline.temporaryDirectory].every(value => validPath(value) && value.length <= 32768 && !/[\r\n]/.test(value))
     || typeof baseline.path !== "string" || baseline.path.length > 32768
-    || !baseline.path.split(":").every(value => validPath(value) && !/[\r\n]/.test(value)))) return false;
+    || !baseline.path.split(path.delimiter).every(value => validPath(value) && !/[\r\n]/.test(value)))) return false;
   if (config.environmentSnapshotPath === undefined) return config.environmentExpectedBinding === undefined;
   const authority = config.environmentExpectedBinding;
   if (!validPath(config.environmentSnapshotPath) || path.basename(config.environmentSnapshotPath) !== "environment.json"
@@ -492,7 +560,7 @@ const validPrivateJob = config.transport === "local_job_ipc" && config.url === "
   && config.workRoot === config.workspaceAliasPath && config.environmentSnapshotPath === undefined
   && config.jobEnvSourcePath === undefined && config.spawnPolicy === undefined && config.managedPty === undefined
   && hasOnlyKeys(config.directShell, ["mode", "executable", "jobId"]) && UUID_RE.test(config.directShell.jobId)
-  && validPath(config.directShell.executable) && ["bash", "zsh"].includes(path.basename(config.directShell.executable))
+  && validPath(config.directShell.executable) && ["bash", "zsh"].includes(path.basename(config.directShell.executable, WINDOWS ? ".exe" : undefined))
   && (config.directShell.mode === "host" ? config.bashCommandPrefix === undefined
     : config.directShell.mode === "confined" && process.platform === "darwin"
       && config.bashCommandPrefix?.length === 3 && config.bashCommandPrefix[0] === "/usr/bin/sandbox-exec"
@@ -509,12 +577,12 @@ function validJobEnvSourcePath() {
   if (config.jobEnvSourcePath === undefined || config.jobEnvSourcePath === path.join(config.workRoot, "job.env")) return true;
   // A cloud workspace's job.env is in its Session's root-only control
   // directory (shared/device-workspace.ts), derived from the root alone.
-  const cloud = new RegExp(${JSON.stringify(b.source)}).exec(config.workRoot);
+  const cloud = new RegExp(${JSON.stringify(w.source)}).exec(config.workRoot);
   if (process.platform === "linux" && cloud) {
     const workspaceId = cloud[3];
-    const owner = (new RegExp(${JSON.stringify(p.source)}).exec(workspaceId) || [])[1]
-      ?? (new RegExp(${JSON.stringify(x.source)}).exec(workspaceId) || [])[1] ?? workspaceId;
-    return config.jobEnvSourcePath === ${JSON.stringify(y)} + "/" + owner + "/job.env";
+    const owner = (new RegExp(${JSON.stringify(x.source)}).exec(workspaceId) || [])[1]
+      ?? (new RegExp(${JSON.stringify(b.source)}).exec(workspaceId) || [])[1] ?? workspaceId;
+    return config.jobEnvSourcePath === ${JSON.stringify(p)} + "/" + owner + "/job.env";
   }
   // Personal Cloud controls are root-owned and outside the writable grant.
   // Admit only the same canonical session, never a caller-selected private path.
@@ -544,11 +612,13 @@ if (
   (config.terminalCleanupRunId !== undefined && (!UUID_RE.test(config.terminalCleanupRunId) || config.terminalCleanupRunId !== config.browserRunId)) ||
   (config.terminalDaemonNonce !== undefined && (!UUID_RE.test(config.terminalDaemonNonce) || !config.terminalCleanupRunId)) ||
   (config.browserRunId !== undefined && (typeof config.browserRunId !== "string" || !UUID_RE.test(config.browserRunId))) ||
-  config.workRoot === "/" || config.workspaceAliasPath === "/" ||
+  filesystemRoot(config.workRoot) || filesystemRoot(config.workspaceAliasPath) ||
   (config.workRoot !== config.workspaceAliasPath && (
-    config.workRoot.startsWith(config.workspaceAliasPath + "/") ||
-    config.workspaceAliasPath.startsWith(config.workRoot + "/")
+    pathWithin(config.workRoot, config.workspaceAliasPath) ||
+    pathWithin(config.workspaceAliasPath, config.workRoot)
   )) ||
+  (WINDOWS ? !validPath(config.bashExecutable) || path.basename(config.bashExecutable).toLowerCase() !== "bash.exe"
+    : config.bashExecutable !== undefined) ||
   typeof config.launchId !== "string" || !/^[a-f0-9-]{36}$/.test(config.launchId) ||
   !Number.isSafeInteger(config.expiresAtMs) || config.expiresAtMs <= Date.now() ||
   !validTimeout(config.bashTimeoutMs) || !validTimeout(config.replTimeoutMs) ||
@@ -580,8 +650,8 @@ if (
     config.bashCommandPrefix !== undefined || config.jobEnvSourcePath !== undefined
   )) ||
   (config.jobControlSocketPath !== undefined && (
-    !config.managedJobs || !validPath(config.jobControlSocketPath) ||
-    path.basename(config.jobControlSocketPath) !== "control.sock" || Buffer.byteLength(config.jobControlSocketPath) > 100
+    !config.managedJobs || (WINDOWS ? !validWindowsPipe(config.jobControlSocketPath) : !validPath(config.jobControlSocketPath) ||
+    path.basename(config.jobControlSocketPath) !== "control.sock" || Buffer.byteLength(config.jobControlSocketPath) > 100)
   )) ||
   !Array.isArray(allowedTools) || allowedTools.length < 1 || allowedTools.length > 5 ||
   new Set(allowedTools).size !== allowedTools.length ||
@@ -752,7 +822,7 @@ function failure(id, exitCode, error, stdout, stderr, responseGeneration = targe
     exitCode: Number.isSafeInteger(exitCode) && exitCode > 0 && exitCode <= 255 ? exitCode : 1,
     stdout: clip(stdout || "", MAX_OUTPUT_CHARS),
     stderr: clip(stderr || "", MAX_OUTPUT_CHARS),
-    cwd: config.repoPath,
+    cwd: posixPath(config.repoPath),
     error: clip(error, MAX_ERROR_CHARS),
   };
 }
@@ -765,7 +835,7 @@ function success(id, stdout, stderr, responseGeneration = targetGeneration) {
     exitCode: 0,
     stdout: clip(stdout || "", MAX_OUTPUT_CHARS),
     stderr: clip(stderr || "", MAX_OUTPUT_CHARS),
-    cwd: config.repoPath,
+    cwd: posixPath(config.repoPath),
   };
 }
 // The code alone names the reason: Bun's WebSocket client drops close text.
@@ -906,7 +976,7 @@ function privateJournalRead(name, maxBytes = MAX_JOB_RECORD_BYTES) {
   const fd = fs.openSync(path.join(journalDirectory, name), fs.constants.O_RDONLY | fs.constants.O_NOFOLLOW);
   try {
     const stat = fs.fstatSync(fd);
-    if (!stat.isFile() || stat.uid !== process.getuid() || (stat.mode & 0o077) !== 0 || stat.size > maxBytes) {
+    if (!stat.isFile() || !ownedPrivately(stat) || stat.size > maxBytes) {
       throw new Error("invalid_job_journal");
     }
     return { value: JSON.parse(fs.readFileSync(fd, "utf8")), bytes: stat.size };
@@ -927,8 +997,7 @@ function privateJournalWrite(name, encoded, maxBytes = MAX_JOB_RECORD_BYTES, dur
   try { fs.writeFileSync(fd, encoded); if (durable) fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
   fs.renameSync(temp, target);
   if (!durable) return bytes;
-  const directoryFd = fs.openSync(path.dirname(target), fs.constants.O_RDONLY);
-  try { fs.fsyncSync(directoryFd); } finally { fs.closeSync(directoryFd); }
+  syncDirectory(path.dirname(target));
   return bytes;
 }
 function journalScope(generation, fenceId) {
@@ -958,10 +1027,10 @@ function initializeJobs() {
 // (shared/local-protected-paths.ts) that the file tools and every confinement
 // refuse. A home-folder worker keeps it in ~/.config/reason, so its Session may
 // work in the home folder itself, as a Mac's home grant does.
-const PROTECTED_STATE_DIRECTORIES = ${JSON.stringify(h)};
+const PROTECTED_STATE_DIRECTORIES = ${JSON.stringify(y)};
 function stateOverlapsWorkspace(state, root) {
-  if (state === root || root.startsWith(state + path.sep)) return true;
-  if (!state.startsWith(root + path.sep)) return false;
+  if (pathWithin(root, state)) return true;
+  if (!pathWithin(state, root)) return false;
   const segments = state.slice(root.length + 1).toLowerCase().split(path.sep);
   return !PROTECTED_STATE_DIRECTORIES.some((sequence) => segments.some((_, start) =>
     sequence.every((part, offset) => segments[start + offset] === part)));
@@ -971,7 +1040,7 @@ function prepareJournalDirectory() {
   const candidate = config.managedJobs.journalDirectory;
   try { initializeJobs(); } catch (error) { if (error.code !== "EEXIST") throw error; }
   const stat = fs.lstatSync(candidate);
-  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== process.getuid() || (stat.mode & 0o077) !== 0) throw new Error("invalid_job_journal");
+  if (!stat.isDirectory() || stat.isSymbolicLink() || !ownedPrivately(stat)) throw new Error("invalid_job_journal");
   journalDirectory = fs.realpathSync(candidate);
   for (const root of [config.repoPath, config.workRoot]) {
     const canonical = fs.realpathSync(root);
@@ -991,8 +1060,7 @@ function acquireJournalOwnership() {
     executorLaunchId: config.launchId, workerArtifactSha256: config.workerArtifactSha256,
     pid: process.pid, createdAtMs: Date.now() }));
   fs.fsyncSync(fd);
-  const directoryFd = fs.openSync(journalDirectory, fs.constants.O_RDONLY);
-  try { fs.fsyncSync(directoryFd); } finally { fs.closeSync(directoryFd); }
+  syncDirectory(journalDirectory);
 }
 function releaseJournalOwnership() {
   if (!journalOwnership) return;
@@ -1002,8 +1070,7 @@ function releaseJournalOwnership() {
   fs.unlinkSync(owned.path);
   fs.closeSync(owned.fd);
   journalOwnership = null;
-  const directoryFd = fs.openSync(journalDirectory, fs.constants.O_RDONLY);
-  try { fs.fsyncSync(directoryFd); } finally { fs.closeSync(directoryFd); }
+  syncDirectory(journalDirectory);
 }
 function loadJobs() {
   if (!config.managedJobs) return;
@@ -1084,7 +1151,7 @@ function loadJobs() {
   for (const name of fs.readdirSync(journalDirectory)) {
     if (!/^[0-9a-f]{64}\.job\.json\.tmp$/.test(name)) continue;
     const stat = fs.lstatSync(path.join(journalDirectory, name));
-    if (!stat.isFile() || stat.uid !== process.getuid() || (stat.mode & 0o077) !== 0 || stat.size > MAX_JOB_RECORD_BYTES) throw new Error("invalid_job_journal");
+    if (!stat.isFile() || !ownedPrivately(stat) || stat.size > MAX_JOB_RECORD_BYTES) throw new Error("invalid_job_journal");
     journalDebrisBytes += stat.size;
     reservedBytes += stat.size;
     if (reservedBytes > MAX_JOB_JOURNAL_BYTES) throw new Error("job_journal_full");
@@ -1305,7 +1372,7 @@ async function handleTerminalCleanup(target, claim, raw) {
     let child, timer, killTimer;
     const finish = ok => { clearTimeout(timer); clearTimeout(killTimer); if (!ok) cleanupUnconfirmed = true; resolve(ok); };
     try {
-      child = spawn("/usr/bin/python3", ["-I", "-c", ${JSON.stringify(c)}],
+      child = spawn("/usr/bin/python3", ["-I", "-c", ${JSON.stringify(u)}],
         { stdio: ["pipe", "ignore", "ignore"], env: { PATH: "/usr/bin:/bin" }, detached: true });
       let timedOut = false;
       timer = setTimeout(() => { timedOut = true; try { process.kill(-child.pid, "SIGTERM"); } catch { cleanupUnconfirmed = true; }
@@ -1468,21 +1535,24 @@ async function handleJob(claim, raw, sendReply, isCurrent, fromControl = false)
 function startJobControl() {
   if (!config.jobControlSocketPath) return Promise.resolve();
   return new Promise((resolve, reject) => {
-    const directory = path.dirname(config.jobControlSocketPath);
-    const stat = fs.lstatSync(directory);
-    if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== process.getuid()
-      || (stat.mode & 0o777) !== 0o700 || fs.realpathSync(directory) !== directory
-      || path.join(directory, "control.sock") !== config.jobControlSocketPath) throw new Error("invalid_job_control_directory");
-    for (const root of [config.repoPath, config.workRoot]) {
-      const canonical = fs.realpathSync(root);
-      if (directory === canonical || directory.startsWith(canonical + path.sep) || canonical.startsWith(directory + path.sep)) {
-        throw new Error("job_control_overlaps_workspace");
+    // A Windows named pipe has no directory; a second server on the same name fails to listen.
+    if (!WINDOWS) {
+      const directory = path.dirname(config.jobControlSocketPath);
+      const stat = fs.lstatSync(directory);
+      if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== process.getuid()
+        || (stat.mode & 0o777) !== 0o700 || fs.realpathSync(directory) !== directory
+        || path.join(directory, "control.sock") !== config.jobControlSocketPath) throw new Error("invalid_job_control_directory");
+      for (const root of [config.repoPath, config.workRoot]) {
+        const canonical = fs.realpathSync(root);
+        if (pathWithin(directory, canonical) || pathWithin(canonical, directory)) {
+          throw new Error("job_control_overlaps_workspace");
+        }
       }
+      // lstat also rejects dangling symlinks; never unlink or adopt an existing
+      // endpoint. An exclusive per-launch directory is composition-owned.
+      try { fs.lstatSync(config.jobControlSocketPath); throw new Error("job_control_path_exists"); }
+      catch (error) { if (error.code !== "ENOENT") throw error; }
     }
-    // lstat also rejects dangling symlinks; never unlink or adopt an existing
-    // endpoint. An exclusive per-launch directory is composition-owned.
-    try { fs.lstatSync(config.jobControlSocketPath); throw new Error("job_control_path_exists"); }
-    catch (error) { if (error.code !== "ENOENT") throw error; }
     // Bind before connecting the relay so a duplicate/stale socket cannot leave
     // a second serving worker. Single framed request per connection, bounded
     // clients/body/time; the existing job handler owns all mutations.
@@ -1517,7 +1587,7 @@ function startJobControl() {
     server.maxConnections = 16;
     server.once("error", reject);
     server.listen(config.jobControlSocketPath, () => {
-      try { fs.chmodSync(config.jobControlSocketPath, 0o600); }
+      try { if (!WINDOWS) fs.chmodSync(config.jobControlSocketPath, 0o600); }
       catch (error) { server.close(); reject(error); return; }
       jobControlServer = server;
       resolve();
@@ -1556,9 +1626,17 @@ async function handleRequestCancel(target, claim, raw) {
       id: request.id, targetId: request.targetId, status });
   }
 }
+// Windows has no process groups: a command's tree is its leader's Job Object,
+// gone once the job has no process left. Without one, it is the leader and what
+// taskkill /T finds under it, and the tree counts as gone with its leader.
 function processGroupAbsent(pgid) {
+  const active = windowsJobs ? windowsJobs.active(pgid) : null;
+  if (active !== null) {
+    if (active === 0) windowsJobs.release(pgid);
+    return active === 0;
+  }
   try {
-    process.kill(-pgid, 0);
+    process.kill(WINDOWS ? pgid : -pgid, 0);
     if (process.platform === "linux") {
       try {
         const entries = fs.readdirSync("/proc");
@@ -1612,6 +1690,14 @@ async function killGroup(child) {
   if (!child || !Number.isSafeInteger(child.pid)) return;
   const pgid = child.pid;
   if (processGroupAbsent(pgid)) return;
+  if (WINDOWS) {
+    if (!(windowsJobs && windowsJobs.terminate(pgid))) try {
+      spawnSync(path.join(process.env.SystemRoot || "C:\\Windows", "System32", "taskkill.exe"), ["/PID", String(pgid), "/T", "/F"],
+        { stdio: "ignore", timeout: 10_000, windowsHide: true });
+    } catch (error) { void error; }
+    if (await waitForProcessGroupAbsent(pgid, 2_000)) return;
+    throw new Error("process_group_cleanup_unconfirmed");
+  }
   try { process.kill(-pgid, "SIGTERM"); } catch (error) {
     if (error && error.code !== "ESRCH") throw error;
   }
@@ -1956,7 +2042,7 @@ function readPrivateEnvironment() {
   const parent = path.dirname(candidate);
   if (fs.realpathSync(parent) !== parent) throw new Error("environment_unavailable");
   const directory = fs.lstatSync(parent);
-  if (!directory.isDirectory() || directory.uid !== process.getuid() || (directory.mode & 0o7777) !== 0o700) throw new Error("environment_unavailable");
+  if (!directory.isDirectory() || !(WINDOWS || (directory.uid === process.getuid() && (directory.mode & 0o7777) === 0o700))) throw new Error("environment_unavailable");
   for (const root of [config.workRoot, config.repoPath]) {
     const canonical = fs.realpathSync(root);
     if (stateOverlapsWorkspace(parent, canonical)) throw new Error("environment_unavailable");
@@ -1969,8 +2055,8 @@ function readPrivateEnvironment() {
   catch (error) { if (error && error.code === "ENOENT") throw new Error("environment_unavailable"); throw error; }
   try {
     const before = fs.fstatSync(fd);
-    if (!before.isFile() || before.uid !== process.getuid() || before.nlink !== 1
-      || ![0o600, 0o400].includes(before.mode & 0o7777) || before.size < 1 || before.size > DEVICE_ENVIRONMENT_LIMITS.snapshotBytes) throw new Error("environment_unavailable");
+    if (!before.isFile() || before.nlink !== 1
+      || !(WINDOWS || (before.uid === process.getuid() && [0o600, 0o400].includes(before.mode & 0o7777))) || before.size < 1 || before.size > DEVICE_ENVIRONMENT_LIMITS.snapshotBytes) throw new Error("environment_unavailable");
     const bytes = Buffer.alloc(before.size + 1);
     let length = 0;
     while (length < bytes.length) {
@@ -2002,7 +2088,7 @@ function validateEnvironmentSnapshot(snapshot) {
     if (name.length > 128 || !DEVICE_ENVIRONMENT_NAME_RE.test(name) || typeof value !== "string" || Buffer.byteLength(value, "utf8") > DEVICE_ENVIRONMENT_LIMITS.valueBytes || value.includes("\0")) throw new Error("environment_unavailable");
   }
   if (snapshot.github_auth !== undefined && (snapshot.github_auth !== "local_gh" || snapshot.git !== null
-    || !["darwin", "linux"].includes(process.platform) || !config.executionEnvironment || config.environmentExpectedBinding.binding.kind !== "workspace_source")) {
+    || !["darwin", "linux", "win32"].includes(process.platform) || !config.executionEnvironment || config.environmentExpectedBinding.binding.kind !== "workspace_source")) {
     throw new Error("environment_unavailable");
   }
   if (snapshot.git !== null) {
@@ -2075,7 +2161,7 @@ function environmentForSpawn(piShell = false, confined = false) {
   const deviceRoot = fs.realpathSync(config.deviceRootPath || config.workRoot);
   const workspace = fs.realpathSync(config.workRoot);
   const repo = fs.realpathSync(config.repoPath);
-  const within = (candidate, root) => candidate === root || candidate.startsWith(root + path.sep);
+  const within = pathWithin;
   if (!within(workspace, deviceRoot) || !within(repo, workspace)) throw new Error("environment_unavailable");
   let pool;
   if (config.workspacePoolPath !== undefined) {
@@ -2090,14 +2176,16 @@ function environmentForSpawn(piShell = false, confined = false) {
   const baseline = config.executionEnvironment;
   const temporaryDirectory = baseline?.temporaryDirectory ?? config.workRoot;
   const hostVariables = piShell ? baseline?.variables : undefined;
-  const env = { ...hostVariables, ...snapshot.variables, PATH: baseline?.path ?? "/opt/homebrew/bin:" + FIXED_CLOUD_CHILD_PATH,
-    HOME: baseline?.home ?? config.workRoot, PWD: config.repoPath, TMPDIR: temporaryDirectory, TMP: temporaryDirectory, TEMP: temporaryDirectory,
+  const env = { ...hostVariables, ...snapshot.variables, ...windowsSystemVariables(),
+    PATH: baseline?.path ?? (WINDOWS ? process.env.PATH : "/opt/homebrew/bin:" + FIXED_CLOUD_CHILD_PATH),
+    HOME: baseline?.home ?? config.workRoot, PWD: posixPath(config.repoPath), TMPDIR: temporaryDirectory, TMP: temporaryDirectory, TEMP: temporaryDirectory,
     SHELL: FIXED_BASH, BASH_ENV: "/dev/null", ENV: "/dev/null",
     // Each coordinate under its Reason name and the Ara name every server
-    // script and Session shell before the rename reads.
-    REASON_DEVICE_ROOT: deviceRoot, REASON_HANDS_WORKSPACE: workspace, REASON_HANDS_REPO: repo,
-    ARA_DEVICE_ROOT: deviceRoot, ARA_HANDS_WORKSPACE: workspace, ARA_HANDS_REPO: repo,
-    ...(pool === undefined ? {} : { REASON_HANDS_WORKSPACE_POOL: pool, ARA_HANDS_WORKSPACE_POOL: pool }),
+    // script and Session shell before the rename reads; in Git Bash's form on
+    // Windows, where those scripts compare them with $PWD and pwd -P.
+    REASON_DEVICE_ROOT: posixPath(deviceRoot), REASON_HANDS_WORKSPACE: posixPath(workspace), REASON_HANDS_REPO: posixPath(repo),
+    ARA_DEVICE_ROOT: posixPath(deviceRoot), ARA_HANDS_WORKSPACE: posixPath(workspace), ARA_HANDS_REPO: posixPath(repo),
+    ...(pool === undefined ? {} : { REASON_HANDS_WORKSPACE_POOL: posixPath(pool), ARA_HANDS_WORKSPACE_POOL: posixPath(pool) }),
     GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_SYSTEM: "/dev/null", GIT_CONFIG_GLOBAL: "/dev/null", GIT_TERMINAL_PROMPT: "0",
   };
   const pairs = [["credential.helper", ""], ["http.extraheader", ""]];
@@ -2226,11 +2314,95 @@ function prepareBashSpawn(argv, extraFileDescriptors, expiresAtMs, signal, onLos
 let nativePtyOwner = null;
 function ptySupported() {
   if (!config.managedPty || config.environmentSnapshotPath === undefined || config.spawnPolicy || config.bashCommandPrefix
-    || !["darwin", "linux"].includes(process.platform) || typeof Bun === "undefined" || typeof Bun.Terminal !== "function") return false;
+    || typeof Bun === "undefined") return false;
+  if (process.platform === "win32") return windowsPty().available();
+  if (!["darwin", "linux"].includes(process.platform) || typeof Bun.Terminal !== "function") return false;
   if (process.platform === "linux" && !["x64", "arm64"].includes(process.arch)) return false;
   try { platformPtyOwner(); return true; } catch { return false; }
 }
 function platformPtyOwner() { return process.platform === "linux" ? linuxPtyOwner() : macPtyOwner(); }
+let windowsPtyOwner = null;
+function windowsPty() { return windowsPtyOwner ||= windowsPtyApi(() => require("bun:ffi"), fs.existsSync); }
+/** Windows: a ConPTY whose shell and everything it starts share one job
+ * object (windows-pty-source.ts). The open process handle pins the shell's
+ * PID; teardown terminates the job and confirms it has no live process, the
+ * counterpart of the POSIX session sweep. */
+function windowsPtyOperation(request, managed) {
+  let pty = null, childEnvironment = null;
+  let done = false, cancelled = false, timedOut = false, cleanup = null, exitCode = null, timer = null;
+  const spawnGeneration = targetGeneration, spawnFence = targetFenceId;
+  let resolveResult, acknowledgeSpawn;
+  const promise = new Promise((resolve) => { resolveResult = resolve; });
+  const started = new Promise((resolve) => { acknowledgeSpawn = resolve; });
+  const finish = (error, code) => {
+    if (done) return;
+    done = true; acknowledgeSpawn(false);
+    clearTimeout(timer);
+    resolveResult(error ? failure(request.id, code, error, "", "") : success(request.id, "", ""));
+  };
+  function stopSession() {
+    if (cleanup) return cleanup;
+    cleanup = Promise.resolve().then(async () => {
+      if (!pty) { finish(timedOut ? "timeout" : "cancelled", timedOut ? 124 : 130); return; }
+      try {
+        if (pty.activeProcesses() > 0) pty.terminate();
+        for (const startedAt = Date.now(); pty.activeProcesses() > 0;) {
+          if (Date.now() - startedAt > ${s}) throw new Error("pty_cleanup_timeout");
+          await new Promise((resolve) => setTimeout(resolve, 20));
+        }
+        pty.close();
+        if (timedOut) finish("timeout", 124);
+        else if (cancelled) finish("cancelled", 130);
+        else finish(exitCode === 0 ? null : "command_failed", exitCode ?? 1);
+      } catch {
+        // Closing the job handle still ends its processes (KILL_ON_JOB_CLOSE), unconfirmed.
+        try { pty.close(); } catch { /* already closed */ }
+        finish("process_group_cleanup_unconfirmed", 1);
+      }
+    });
+    return cleanup;
+  }
+  function arm(deadline) {
+    clearTimeout(timer);
+    timer = setTimeout(() => { timedOut = true; void stopSession(); }, Math.max(1, deadline - Date.now()));
+  }
+  const canInput = () => done || cleanup || !pty ? "job_not_running" : null;
+  try {
+    childEnvironment = environmentForSpawn();
+    if (stopped || spawnGeneration !== targetGeneration || spawnFence !== targetFenceId
+      || !validJobLease(managed.leaseExpiresAtMs)) throw new Error("pty_spawn_expired");
+    const env = { ...childEnvironment.env, TERM: "xterm-256color" };
+    const shell = windowsPty().defaultShell(process.env);
+    pty = windowsPty().spawn({ file: shell, args: windowsPty().shellArgs(shell), cwd: config.repoPath, env,
+      cols: request.input.cols, rows: request.input.rows, onData: (bytes) => { if (!done) managed.onBytes(bytes); } });
+    consumedEnvironment = { revision: childEnvironment.snapshot.revision, hash: childEnvironment.hash };
+    managed.onEnvironment(childEnvironment.snapshot);
+    arm(managed.leaseExpiresAtMs);
+    void pty.exited.then((code) => { if (!done && !cleanup) { exitCode = code; void stopSession(); } });
+    acknowledgeSpawn(true);
+  } catch {
+    if (pty) { cancelled = true; void stopSession(); }
+    else finish("spawn_failed", 1);
+  }
+  return { promise, started, supportsCancellation: true, canInput,
+    settle: stopSession,
+    processIdentity() {
+      return pty && !done && !cleanup ? { pid: pty.pid, processGroupId: pty.pid, executorLaunchId: config.launchId } : null;
+    },
+    input(data) {
+      const error = canInput(); if (error) return error;
+      try { pty.write(data); return null; }
+      catch { cancelled = true; void stopSession(); return "job_not_running"; }
+    },
+    resize(cols, rows) {
+      const error = canInput(); if (error) return error;
+      try { pty.resize(cols, rows); return null; }
+      catch { cancelled = true; void stopSession(); return "job_not_running"; }
+    },
+    renew(deadline) { if (done || cleanup) return false; arm(deadline); return true; },
+    cancel() { cancelled = true; return stopSession(); },
+  };
+}
 /** Only live native process identities, never recovered PIDs. Darwin's audit
  * token includes the kernel PID version; stale versions cannot signal a reused
  * PID. Keep the trusted session leader alive until its interactive groups are
@@ -2479,7 +2651,7 @@ function linuxPtyOwner() {
 // user detaches from the shell (nohup, setsid, disown, or jobs left at exit)
 // are not swept. At most TERMINAL_HOST_LIMIT shells per scope.
 const TERMINAL_SHELL = "/bin/bash --noprofile --norc -i";
-const TERMINAL_TMUX_CONFIG = ${JSON.stringify([...g,"new-session -d -s main /bin/bash --noprofile --norc -i","set -g exit-empty on","run-shell -b -d 43200 -C kill-server",""].join(`
+const TERMINAL_TMUX_CONFIG = ${JSON.stringify([...h,"new-session -d -s main /bin/bash --noprofile --norc -i","set -g exit-empty on","run-shell -b -d 43200 -C kill-server",""].join(`
 `))};
 const TERMINAL_HOST_LIMIT = 4;
 const terminalViewers = new Map();
@@ -2587,6 +2759,7 @@ async function chooseTerminalProgram() {
   return oneShot;
 }
 function ptyOperation(request, managed, program = TERMINAL_SHELL) {
+  if (process.platform === "win32") return windowsPtyOperation(request, managed);
   const native = platformPtyOwner();
   let child = null, anchor = null, terminal = null, childEnvironment = null, device = null;
   let done = false, cancelled = false, timedOut = false, cleanup = null, exitCode = null;
@@ -2622,7 +2795,7 @@ function ptyOperation(request, managed, program = TERMINAL_SHELL) {
           const { members, empty } = native.session(anchor, device);
           try {
             if (empty && exitCode !== null && subreaper) break;
-            if (Date.now() - startedAt > ${G}) throw new Error("pty_cleanup_timeout");
+            if (Date.now() - startedAt > ${s}) throw new Error("pty_cleanup_timeout");
             for (const token of members) {
               if (!native.same(anchor)) throw new Error("pty_session_identity_lost");
               const id = native.identityKey(token);
@@ -2638,7 +2811,7 @@ function ptyOperation(request, managed, program = TERMINAL_SHELL) {
         controlReleased = true;
         let exitTimer;
         try { await Promise.race([child.exited, new Promise((_, reject) => {
-          exitTimer = setTimeout(() => reject(new Error("pty_anchor_exit_unconfirmed")), ${S});
+          exitTimer = setTimeout(() => reject(new Error("pty_anchor_exit_unconfirmed")), ${X});
         })]); } finally { clearTimeout(exitTimer); }
         if (timedOut) finish("timeout", 124);
         else if (cancelled) finish("cancelled", 130);
@@ -2899,7 +3072,9 @@ function bashOperation(request, onProgress, managed, piShell) {
         command[0], command.slice(1),
         {
           cwd: config.repoPath,
-          detached: true,
+          // Windows: no process group (taskkill /T stops the tree) and no console window.
+          detached: !WINDOWS,
+          windowsHide: true,
           env: validPrivateJob ? process.env : childEnvironment ? childEnvironment.env : {
             ...process.env,
             // A physical Device keeps the CLI-resolved host PATH (including
@@ -2923,6 +3098,7 @@ function bashOperation(request, onProgress, managed, piShell) {
       );
       // A new leader with this PID proves the retained group of that ID ended.
       if (Number.isSafeInteger(child.pid)) backgroundGroups.delete(child.pid);
+      if (windowsJobs && Number.isSafeInteger(child.pid)) windowsJobs.track(child.pid);
     } catch (error) {
       // The protocol error stays spawn_failed; a coded refusal such as
       // local_device_gh_confinement_unavailable or environment_unavailable is
@@ -3153,15 +3329,19 @@ function replOperation(request) {
 // timeout and the lease, and background processes retained until the worker
 // stops. One departure from stock: a command idle on a watcher's banner is
 // stopped (PI_WATCH_BANNER). PI_* variables are not set here.
-const PI_TOOLS_SHA256 = "${u}";
+const PI_TOOLS_SHA256 = "${a}";
 const piToolsSource = typeof araHandsPiToolsSource === "function" ? araHandsPiToolsSource : null;
 let piTools = null;
 function loadPiTools() {
   if (piTools) return piTools;
   const source = piToolsSource();
   if (digest(source) !== PI_TOOLS_SHA256) throw new Error("pi_tools_digest_mismatch");
+  // The bundle names itself file:///ara-hands-pi-tools.cjs, which Windows
+  // cannot turn into a path (no drive letter), so loading it would throw.
+  const body = process.platform === "win32"
+    ? source.replaceAll("file:///ara-hands-pi-tools.cjs", "file:///C:/ara-hands-pi-tools.cjs") : source;
   const module = { exports: {} };
-  new Function("module", "exports", "require", '"use strict";\n' + source)(module, module.exports, require);
+  new Function("module", "exports", "require", '"use strict";\n' + body)(module, module.exports, require);
   piTools = module.exports;
   return piTools;
 }
@@ -3182,10 +3362,10 @@ const PI_EXIT_STDIO_GRACE_MS = 100;
 // the token once under quoteDepth layers of single quoting, so the confined
 // script is byte-identical to what the Brain's confineBashPayload gives the
 // bash tool: srt/bwrap, the payload uid, the network allowlist and allowWrite.
-const PI_TOOL_CONFINEMENT_TOKEN = "${w}";
+const PI_TOOL_CONFINEMENT_TOKEN = "${m}";
 function validPiToolConfinement(value) {
   return hasOnlyKeys(value, ["template", "quoteDepth"]) && typeof value.template === "string"
-    && value.template.length <= ${m} && !value.template.includes("\0")
+    && value.template.length <= ${q} && !value.template.includes("\0")
     && value.template.split(PI_TOOL_CONFINEMENT_TOKEN).length === 2 && [1, 2, 3].includes(value.quoteDepth);
 }
 // The script T when this command is exactly this policy's confineBashPayload(T)
@@ -3423,8 +3603,7 @@ function prepareRequestJournal() {
   try { fs.mkdirSync(directory, { mode: 0o700 }); }
   catch (error) { if (error.code !== "EEXIST") throw error; }
   const stat = fs.lstatSync(directory);
-  if (!stat.isDirectory() || stat.isSymbolicLink() || stat.uid !== process.getuid()
-    || (stat.mode & 0o077) !== 0) throw new Error("invalid_request_journal");
+  if (!stat.isDirectory() || stat.isSymbolicLink() || !ownedPrivately(stat)) throw new Error("invalid_request_journal");
   // Stream the private directory: receipt count is not a lifetime call cap.
   // A crash may leave the fixed temp sibling; only the renamed final record
   // is authoritative, so it cannot authorize replay or a completed result.
@@ -3674,12 +3853,12 @@ async function handleRequest(target, connectionGeneration, claim, raw) {
   const startOperation = () => request.tool === "bash"
     ? bashOperation(request, progress)
     : request.tool === "pi_tool"
-      ? piToolOperation(request, request.input.tool === "bash" ? progress : null, claim.piToolsConfinement)
+      ? piToolOperation(nativePathRequest(request), request.input.tool === "bash" ? progress : null, claim.piToolsConfinement)
     : request.tool === "repl"
       ? replOperation(request)
       : (config.spawnPolicy || config.bashCommandPrefix) && request.tool !== "read"
-        ? payloadFileOperation(request)
-        : fileOperation(request);
+        ? payloadFileOperation(nativePathRequest(request))
+        : fileOperation(nativePathRequest(request));
   const operation = request.workspaceBefore !== undefined
     ? workspaceBeforeOperation(request, startOperation) : startOperation();
   // Every waiter observes the durable completion, never the raw child result.
@@ -3986,6 +4165,9 @@ function stop(reason) {
   return stoppingPromise;
 }
 process.once("SIGTERM", () => { void stop("SIGTERM"); });
+// Windows delivers no catchable SIGTERM to a child: its parent ends this
+// worker's stdin pipe instead (cli/local-hands-relay.ts signalHandsWorker).
+if (WINDOWS) { process.stdin.once("end", () => { void stop("SIGTERM"); }); process.stdin.once("error", () => { void stop("SIGTERM"); }); process.stdin.resume(); }
 process.once("SIGINT", () => { void stop("SIGINT"); });
 process.once("SIGHUP", () => { void stop("SIGHUP"); });
 setTimeout(() => { void stop("expired"); }, Math.max(1, config.expiresAtMs - Date.now())).unref();
@@ -3994,5 +4176,5 @@ void startJobControl().then(() => {
   try { loadJobs(); prepareRequestJournal(); } catch { process.exit(44); }
   if (validPrivateJob) markReady(); else connect();
 }, () => process.exit(45));
-`.trimStart(),Pt=tt("sha256").update(at,"utf8").digest("hex");
-export{r as Fc,Wt as Gc,f as Hc,l as Ic,et as Jc,rt as Kc,nt as Lc,it as Mc,Ht as Nc,ot as Oc,ct as Pc,at as Qc,Pt as Rc};
+`.trimStart(),Ot=rt("sha256").update(ft,"utf8").digest("hex");
+export{r as Nc,Qt as Oc,l as Pc,g as Qc,nt as Rc,it as Sc,st as Tc,ot as Uc,It as Vc,ut as Wc,at as Xc,ft as Yc,Ot as Zc};