@songsid/agend 2.3.1 → 2.3.2-beta.10

package/templates/windows-shortcuts.ps1

@@ -3,179 +3,194 @@
 # （tests/windows-shortcuts-cli-1853.test.ts 檢查）：改的時候兩邊一起改。
 
 $WSL_COMMAND_FN = @'
+function Invoke-BoundedWsl {
+param([string[]]$Arguments, [int]$TimeoutSeconds = 30)
+$sep = [array]::IndexOf($Arguments, '--')
+if ($sep -ge 0 -and $Arguments.Length -gt ($sep + 1) -and $Arguments[$sep + 1] -eq 'bash') {
+$Arguments = @($Arguments[0..$sep]) + @('timeout', '--signal=TERM', '--kill-after=2s', [string]([Math]::Max(1, $TimeoutSeconds - 5))) + @($Arguments[($sep + 1)..($Arguments.Length - 1)])
+}
+$p = New-Object Diagnostics.Process
+$p.StartInfo.FileName = 'wsl.exe'
+$p.StartInfo.Arguments = (@($Arguments | ForEach-Object { if ($_ -match '[\s"]') { '"' + ($_ -replace '"', '\"') + '"' } else { $_ } }) -join ' ')
+$p.StartInfo.UseShellExecute = $false; $p.StartInfo.CreateNoWindow = $true
+$p.StartInfo.StandardOutputEncoding = [Text.Encoding]::UTF8; $p.StartInfo.StandardErrorEncoding = [Text.Encoding]::UTF8
+$p.StartInfo.RedirectStandardOutput = $true; $p.StartInfo.RedirectStandardError = $true; $p.StartInfo.RedirectStandardInput = $true
+try {
+$null = $p.Start(); $p.StandardInput.Close()
+$out = $p.StandardOutput.ReadToEndAsync(); $err = $p.StandardError.ReadToEndAsync()
+if (-not $p.WaitForExit($TimeoutSeconds * 1000)) {
+$p.Kill(); $null = $p.WaitForExit(10000)
+return @{Code=124;Text='WSL timed out; check it before retrying.'}
+}
+if (-not $out.Wait(1000) -or -not $err.Wait(1000)) { return @{Code=1;Text='WSL output did not close.'} }
+$text = $out.Result + $err.Result
+if ($text.Length -gt 1MB) { return @{Code=1;Text='WSL output exceeded its limit.'} }
+return @{Code=$p.ExitCode;Text=$text}
+} catch { return @{Code=-1;Text=[string]$_} }
+finally { $p.Dispose() }
+}
 function Get-WslAgendCommand([string]$command) {
-    return ('export PATH=$HOME/.local/bin:$PATH; source $HOME/.nvm/nvm.sh 2>/dev/null; ' + $command)
+  return ('export PATH=$HOME/.local/bin:$PATH; source $HOME/.nvm/nvm.sh 2>/dev/null; ' + $command)
 }
-# 放進 PowerShell 文字裡的值（Linux、使用者名稱）一律用這個轉成字面字串：名稱裡的單引號（例如 o'neil）不會讓產生的
-# 腳本或貼上的指令壞掉（#2260 審查）。印給人看的指令，名稱沒有特殊字元時維持原樣、不加引號。
 function ConvertTo-PsLiteral([string]$value) { return ("'" + ($value -replace "'", "''") + "'") }
 function ConvertTo-PsArgument([string]$value) { if ($value -match '^[\w.-]+$') { return $value } else { return (ConvertTo-PsLiteral $value) } }
 function Get-AgendStartHint([string]$distro, [string]$user) {
-    return ("wsl -d {0} -u {1} -- bash -lc '{2}'" -f (ConvertTo-PsArgument $distro), (ConvertTo-PsArgument $user), (Get-WslAgendCommand 'agend start'))
+  return ("wsl -d {0} -u {1} -- bash -lc '{2}'" -f (ConvertTo-PsArgument $distro), (ConvertTo-PsArgument $user), (Get-WslAgendCommand 'agend start'))
 }
 '@
 . ([scriptblock]::Create($WSL_COMMAND_FN))
-
 $DASHBOARD_OPENER_FN = @'
 function Get-DashboardSignIn([string]$text) {
-    $url = [regex]::Match($text, 'Sign-in page:\s*(https?://\S+)')
-    $code = [regex]::Match($text, 'Code:\s*([A-Z2-7]{4}-?[A-Z2-7]{4})\b')
-    if (-not $url.Success -or -not $code.Success) { return $null }
-    return @{ Url = $url.Groups[1].Value; Code = $code.Groups[1].Value }
-}
-function Invoke-OpenDashboard([string]$distro, [string]$user = 'root', [switch]$Wait) {
-    # agend web --code 失敗時（AgEnD 沒在跑、沒有 token、連不上）會寫到 stderr 並以 1 結束。Windows PowerShell 5.1 會把重導的
-    # stderr 變成錯誤紀錄，在 ErrorActionPreference=Stop 下直接中止（#2242 審查）：取得輸出的這段改用 Continue、每一筆都轉成文字，
-    # 結束碼不是 0、啟動不了 wsl，都走下面「打不開」的說明。原本的設定在 finally 還原。
-    $text = ''; $exit = 1
-    $prevEAP = $ErrorActionPreference
-    try {
-        $ErrorActionPreference = 'Continue'
-        $text = ((& wsl.exe -d $distro -u $user -- bash -lc (Get-WslAgendCommand 'agend web --code') 2>&1) | ForEach-Object { "$_" } | Out-String)
-        $exit = $LASTEXITCODE
-    } catch {
-        $text = "$_"; $exit = 1
-    } finally {
-        $ErrorActionPreference = $prevEAP
-    }
-    $signIn = if ($exit -eq 0) { Get-DashboardSignIn $text } else { $null }
-    if (-not $signIn) {
-        Write-Host "  [!!] 現在打不開 AgEnD 儀表板：AgEnD 可能還沒啟動。" -ForegroundColor Yellow
-        Write-Host ("  稍等一下再試一次；或在 PowerShell 執行：" + (Get-AgendStartHint $distro $user))
-        if ($Wait) { Read-Host "按 Enter 關閉" }
-        return $false
-    }
-    $copied = $false; try { Set-Clipboard -Value $signIn.Code; $copied = $true } catch { }
-    $opened = $false; try { Start-Process $signIn.Url; $opened = $true } catch { }
-    $spaced = ($signIn.Code.ToCharArray() | ForEach-Object { [string]$_ }) -join ' '
-    Write-Host ""
-    Write-Host ("  ┌──────────────────────────────────────┐") -ForegroundColor Green
-    Write-Host ("  │   儀表板登入碼：  " + $spaced + "    │") -ForegroundColor Green
-    Write-Host ("  └──────────────────────────────────────┘") -ForegroundColor Green
-    if ($opened) { Write-Host "  [OK] 登入頁已在瀏覽器打開。" -ForegroundColor Green } else { Write-Host ("  請自己在瀏覽器打開：" + $signIn.Url) }
-    if ($copied) { Write-Host "  [OK] 登入碼已複製：在登入頁的輸入框按 Ctrl+V。這組登入碼只能用一次，幾分鐘內有效。" -ForegroundColor Green }
-    else { Write-Host "  在登入頁輸入上面的登入碼。這組登入碼只能用一次，幾分鐘內有效。" }
-    if ($Wait) { Read-Host "按 Enter 關閉" }
-    return $true
+  $url = [regex]::Match($text, 'Sign-in page:\s*(https?://\S+)')
+  $code = [regex]::Match($text, 'Code:\s*([A-Z2-7]{4}-?[A-Z2-7]{4})\b')
+  if (-not $url.Success -or -not $code.Success) { return $null }
+  return @{ Url = $url.Groups[1].Value; Code = $code.Groups[1].Value }
+}
+function Invoke-OpenDashboard([string]$distro, [string]$user = 'root', [switch]$Wait, [string]$BackendSignins = '') {
+  $command = 'agend web --code'
+  if ($BackendSignins) {
+      if ($BackendSignins -cnotmatch '^(kiro-cli|claude-code|codex|antigravity)(,(kiro-cli|claude-code|codex|antigravity)){0,3}\z') { throw 'Invalid backend selection' }
+      $command += ' --backend-signins ' + $BackendSignins
+  }
+  $text = ''; $exit = 1
+  $prevEAP = $ErrorActionPreference
+  try {
+      $ErrorActionPreference = 'Continue'
+      $r = Invoke-BoundedWsl -Arguments @('-d', $distro, '-u', $user, '--', 'bash', '-lc', (Get-WslAgendCommand $command))
+      $text = $r.Text; $exit = $r.Code
+  } catch {
+      $text = "$_"; $exit = 1
+  } finally {
+      $ErrorActionPreference = $prevEAP
+  }
+  $signIn = if ($exit -eq 0) { Get-DashboardSignIn $text } else { $null }
+  if (-not $signIn) {
+      Write-Host "  [!!] 現在打不開 AgEnD 儀表板：AgEnD 可能還沒啟動。" -ForegroundColor Yellow
+      Write-Host ("  稍等一下再試一次；或在 PowerShell 執行：" + (Get-AgendStartHint $distro $user))
+      if ($Wait) { Read-Host "按 Enter 關閉" }
+      return $false
+  }
+  $copied = $false; try { Set-Clipboard -Value $signIn.Code; $copied = $true } catch { }
+  $opened = $false; try { Start-Process $signIn.Url; $opened = $true } catch { }
+  $spaced = ($signIn.Code.ToCharArray() | ForEach-Object { [string]$_ }) -join ' '
+  Write-Host ""
+  Write-Host ("  ┌──────────────────────────────────────┐") -ForegroundColor Green
+  Write-Host ("  │   儀表板登入碼：  " + $spaced + "    │") -ForegroundColor Green
+  Write-Host ("  └──────────────────────────────────────┘") -ForegroundColor Green
+  if ($opened) { Write-Host "  [OK] 登入頁已在瀏覽器打開。" -ForegroundColor Green }
+  Write-Host ("  登入頁網址：" + $signIn.Url)
+  if ($copied) { Write-Host "  [OK] 登入碼已複製：在登入頁的輸入框按 Ctrl+V。這組登入碼只能用一次，幾分鐘內有效。" -ForegroundColor Green }
+  else { Write-Host "  在登入頁輸入上面的登入碼。這組登入碼只能用一次，幾分鐘內有效。" }
+  if ($Wait) { Read-Host "按 Enter 關閉" }
+  return $true
 }
 '@
 . ([scriptblock]::Create($DASHBOARD_OPENER_FN))
-
-# 「AgEnD 重新啟動」捷徑（#1853，使用者 2026-10-20 核准）：先問，預設不重啟；確定才在安裝時記下的 Linux 和使用者裡執行
-# agend restart，接著顯示 agend status，等你按 Enter。WSL 或 AgEnD 不在時直接說明；絕不執行 wsl --shutdown。
-# 這段函式的文字同時是捷徑執行的腳本（和儀表板捷徑一樣，安裝程式與捷徑共用同一份）。
 $RESTART_FN = @'
 function Invoke-AgendInWsl([string]$distro, [string]$user, [string]$command) {
-    # 在 WSL 裡以登入 shell 執行一個 agend 指令，回傳 @{ Code; Text }。Linux 的輸出是 UTF-8；stderr 不讓 5.1 中止（#2242）。
-    $prevEAP = $ErrorActionPreference; $prevEnc = [Console]::OutputEncoding
-    try {
-        $ErrorActionPreference = 'Continue'
-        try { [Console]::OutputEncoding = [Text.Encoding]::UTF8 } catch { }
-        $text = ((& wsl.exe -d $distro -u $user -- bash -lc (Get-WslAgendCommand $command) 2>&1) | ForEach-Object { "$_" } | Out-String)
-        return @{ Code = $LASTEXITCODE; Text = $text }
-    } catch {
-        return @{ Code = -1; Text = "$_" }
-    } finally {
-        $ErrorActionPreference = $prevEAP
-        try { [Console]::OutputEncoding = $prevEnc } catch { }
-    }
+  $prevEAP = $ErrorActionPreference; $prevEnc = [Console]::OutputEncoding
+  try {
+      $ErrorActionPreference = 'Continue'
+      try { [Console]::OutputEncoding = [Text.Encoding]::UTF8 } catch { }
+      $limit = if ($command -match '^agend (restart|start)( |$)') { 360 } else { 30 }
+      return (Invoke-BoundedWsl -TimeoutSeconds $limit -Arguments @('-d', $distro, '-u', $user, '--', 'bash', '-lc', (Get-WslAgendCommand $command)))
+  } catch {
+      return @{ Code = -1; Text = "$_" }
+  } finally {
+      $ErrorActionPreference = $prevEAP
+      try { [Console]::OutputEncoding = $prevEnc } catch { }
+  }
 }
 function Invoke-RestartAgend([string]$distro, [string]$user, [switch]$Wait, [int]$SettleSeconds = 3) {
-    Write-Host ""
-    $answer = Read-Host "  確定要重啟 AgEnD 嗎？所有 agent 會重新啟動，正在進行的工作會中斷。(y/N)"
-    # 只有一個 y 才算同意（y/N、yes 都不算）；[string]：沒有輸入時 Read-Host 回傳 $null，而 $null -notmatch '…' 不是 $true。
-    if (([string]$answer) -notmatch '^\s*[yY]\s*$') {
-        Write-Host "  沒有重啟。"
-        if ($Wait) { $null = Read-Host "按 Enter 關閉" }
-        return 'cancelled'
-    }
-    $r = Invoke-AgendInWsl $distro $user 'agend restart'
-    $result = 'restarted'
-    if ($r.Code -eq 0) {
-        Write-Host "  [OK] AgEnD 正在重新啟動。" -ForegroundColor Green
-    } else {
-        $result = 'failed'
-        if ($r.Code -eq -1) { Write-Host "  [!!] 找不到 WSL（wsl.exe），所以沒有重啟。" -ForegroundColor Yellow }
-        elseif ($r.Text -match 'Fleet not running') { Write-Host ("  [!!] AgEnD 沒有在執行，所以沒有可以重啟的。要啟動它：" + (Get-AgendStartHint $distro $user)) -ForegroundColor Yellow }
-        elseif ($r.Text -match 'command not found|agend: not found|no such file') { Write-Host ("  [!!] 在 {0} 裡找不到 AgEnD（agend 指令），所以沒有重啟。" -f $distro) -ForegroundColor Yellow }
-        else { Write-Host ("  [!!] 沒有重啟成功：{0} 不存在、WSL 沒有啟動，或 AgEnD 回報了錯誤。" -f $distro) -ForegroundColor Yellow }
-        if ($r.Text.Trim()) { Write-Host ("  " + ($r.Text.Trim() -replace "`r?`n", "`n  ")) }
-    }
-    if ($result -eq 'restarted') {
-        Start-Sleep -Seconds $SettleSeconds
-        Write-Host ""
-        $s = Invoke-AgendInWsl $distro $user 'agend status'
-        if ($s.Text.Trim()) { Write-Host ("  " + ($s.Text.Trim() -replace "`r?`n", "`n  ")) }
-    }
-    if ($Wait) { $null = Read-Host "按 Enter 關閉" }
-    return $result
+  Write-Host ""
+  $answer = Read-Host "  確定要重啟 AgEnD 嗎？所有 agent 會重新啟動，正在進行的工作會中斷。(y/N)"
+  if (([string]$answer) -notmatch '^\s*[yY]\s*$') {
+      Write-Host "  沒有重啟。"
+      if ($Wait) { $null = Read-Host "按 Enter 關閉" }
+      return 'cancelled'
+  }
+  $r = Invoke-AgendInWsl $distro $user 'agend restart'
+  $result = 'restarted'
+  if ($r.Code -eq 0) {
+      Write-Host "  [OK] AgEnD 正在重新啟動。" -ForegroundColor Green
+  } else {
+      $result = 'failed'
+      if ($r.Code -eq -1) { Write-Host "  [!!] 找不到 WSL（wsl.exe），所以沒有重啟。" -ForegroundColor Yellow }
+      elseif ($r.Text -match 'Fleet not running') { Write-Host ("  [!!] AgEnD 沒有在執行，所以沒有可以重啟的。要啟動它：" + (Get-AgendStartHint $distro $user)) -ForegroundColor Yellow }
+      elseif ($r.Text -match 'command not found|agend: not found|no such file') { Write-Host ("  [!!] 在 {0} 裡找不到 AgEnD（agend 指令），所以沒有重啟。" -f $distro) -ForegroundColor Yellow }
+      else { Write-Host ("  [!!] 沒有重啟成功：{0} 不存在、WSL 沒有啟動，或 AgEnD 回報了錯誤。" -f $distro) -ForegroundColor Yellow }
+      if ($r.Text.Trim()) { Write-Host ("  " + ($r.Text.Trim() -replace "`r?`n", "`n  ")) }
+  }
+  if ($result -eq 'restarted') {
+      Start-Sleep -Seconds $SettleSeconds
+      Write-Host ""
+      $s = Invoke-AgendInWsl $distro $user 'agend status'
+      if ($s.Text.Trim()) { Write-Host ("  " + ($s.Text.Trim() -replace "`r?`n", "`n  ")) }
+  }
+  if ($Wait) { $null = Read-Host "按 Enter 關閉" }
+  return $result
 }
 '@
 . ([scriptblock]::Create($RESTART_FN))
-
-# 捷徑執行的腳本：共用的函式加上一行呼叫（UTF-8 有 BOM：Windows PowerShell 5.1 才會正確顯示中文）。Linux 與使用者是安裝時記下的。
-# 捷徑腳本印出的第一行：它要打開的 Linux 和使用者，指錯了一眼就看得出來。
 function Get-ShortcutTargetLine([string]$distro, [string]$user) {
-    return ('Write-Host ("AgEnD（Linux：{0}，使用者：{1}）" -f ' + (ConvertTo-PsLiteral $distro) + ', ' + (ConvertTo-PsLiteral $user) + ')')
+  return ('Write-Host ("AgEnD（Linux：{0}，使用者：{1}）" -f ' + (ConvertTo-PsLiteral $distro) + ', ' + (ConvertTo-PsLiteral $user) + ')')
 }
 function Get-DashboardOpenerScript([string]$distro, [string]$user) {
-    return ("# AgEnD 儀表板（AgEnD 安裝程式建立）`n" + (Get-ShortcutTargetLine $distro $user) + "`n" + $WSL_COMMAND_FN + "`n" + $DASHBOARD_OPENER_FN + "`n" + ("Invoke-OpenDashboard {0} {1} -Wait | Out-Null" -f (ConvertTo-PsLiteral $distro), (ConvertTo-PsLiteral $user)) + "`n")
+  return ("# AgEnD 儀表板（AgEnD 安裝程式建立）`n" + (Get-ShortcutTargetLine $distro $user) + "`n" + $WSL_COMMAND_FN + "`n" + $DASHBOARD_OPENER_FN + "`n" + ("Invoke-OpenDashboard {0} {1} -Wait | Out-Null" -f (ConvertTo-PsLiteral $distro), (ConvertTo-PsLiteral $user)) + "`n")
 }
 function Get-RestartScript([string]$distro, [string]$user) {
-    return ("# AgEnD 重新啟動（AgEnD 安裝程式建立）`n" + (Get-ShortcutTargetLine $distro $user) + "`n" + $WSL_COMMAND_FN + "`n" + $RESTART_FN + "`n" + ("Invoke-RestartAgend {0} {1} -Wait | Out-Null" -f (ConvertTo-PsLiteral $distro), (ConvertTo-PsLiteral $user)) + "`n")
+  return ("# AgEnD 重新啟動（AgEnD 安裝程式建立）`n" + (Get-ShortcutTargetLine $distro $user) + "`n" + $WSL_COMMAND_FN + "`n" + $RESTART_FN + "`n" + ("Invoke-RestartAgend {0} {1} -Wait | Out-Null" -f (ConvertTo-PsLiteral $distro), (ConvertTo-PsLiteral $user)) + "`n")
 }
-# 安裝時記下的 Linux 與使用者（%LOCALAPPDATA%\AgEnD\install.json）：捷徑、重新執行安裝指令時的快速路徑都讀它。
 function Get-AgendShortcutDir { return (Join-Path $env:LOCALAPPDATA 'AgEnD') }
 function Read-InstallRecord {
-    try {
-        $r = Get-Content -Raw -LiteralPath (Join-Path (Get-AgendShortcutDir) 'install.json') -ErrorAction Stop | ConvertFrom-Json
-        if ($r.distro -and $r.user) { return @{ Distro = [string]$r.distro; User = [string]$r.user } }
-    } catch { }
-    return $null
-}
-# install.json 已經指向另一個 Linux 或使用者時回傳那筆紀錄（例如 AgEnD 專用的 Linux 和原本的 Ubuntu），否則 $null。
-# 捷徑絕不悄悄改指向：agend shortcuts 遇到這種情況會先問。
+  try {
+      $r = Get-Content -Raw -LiteralPath (Join-Path (Get-AgendShortcutDir) 'install.json') -ErrorAction Stop | ConvertFrom-Json
+      if ($r.distro -and $r.user) { return @{ Distro = [string]$r.distro; User = [string]$r.user } }
+  } catch { }
+  return $null
+}
 function Get-InstallRecordConflict([string]$distro, [string]$user) {
-    $record = Read-InstallRecord
-    # WSL 的名稱不分大小寫；Linux 的使用者名稱分（Han 和 han 是兩個人，#2279 審查）。
-    if ($record -and ($record.Distro -ne $distro -or $record.User -cne $user)) { return $record }
-    return $null
+  $record = Read-InstallRecord
+  if ($record -and ($record.Distro -ne $distro -or $record.User -cne $user)) { return $record }
+  return $null
 }
-# 真正寫入前再讀一次：詢問時看到的是 $seen（$null：當時沒有衝突）。現在沒有衝突，或衝突的還是同一個，才可以寫；
-# 在等回答的時候被別的安裝程式或終端機改掉了，就不寫（#2279 審查）。
 function Test-InstallRecordAsSeen($seen, [string]$distro, [string]$user) {
-    $now = Get-InstallRecordConflict $distro $user
-    if ($null -eq $now) { return $true }
-    return ($null -ne $seen -and $now.Distro -eq $seen.Distro -and $now.User -ceq $seen.User)
+  $now = Get-InstallRecordConflict $distro $user
+  if ($null -eq $now) { return $true }
+  return ($null -ne $seen -and $now.Distro -eq $seen.Distro -and $now.User -ceq $seen.User)
+}
+function Get-ShortcutCommand([string]$file) {
+  $ps = Join-Path $env:SystemRoot 'System32\WindowsPowerShell\v1.0\powershell.exe'
+  $a = '-NoProfile -ExecutionPolicy Bypass -File "{0}"' -f $file
+  $wt = $null; if ($env:AGEND_INSTALL_TERMINAL -ne 'conhost') { $wt = Get-Command wt.exe -CommandType Application -ErrorAction SilentlyContinue | Select-Object -First 1 }
+  if ($wt) { return @{ Target = $wt.Source; Arguments = '-w new "{0}" {1}' -f $ps, ($a -replace ';', '\;') } }
+  return @{ Target = $ps; Arguments = $a }
 }
-# 一個桌面捷徑：腳本寫在 %LOCALAPPDATA%\AgEnD，捷徑以 Windows PowerShell 執行它（-ExecutionPolicy Bypass 只對那個行程）。
 function New-AgendShortcut([string]$name, [string]$scriptName, [string]$scriptText, [string]$description) {
-    $dir = Get-AgendShortcutDir
-    New-Item -ItemType Directory -Path $dir -Force | Out-Null
-    $file = Join-Path $dir $scriptName
-    [IO.File]::WriteAllText($file, $scriptText, (New-Object System.Text.UTF8Encoding $true))
-    $lnk = Join-Path ([Environment]::GetFolderPath('Desktop')) ($name + '.lnk')
-    $shell = New-Object -ComObject WScript.Shell
-    $sc = $shell.CreateShortcut($lnk)
-    $sc.TargetPath = Join-Path $env:SystemRoot 'System32\WindowsPowerShell\v1.0\powershell.exe'
-    $sc.Arguments = ('-NoProfile -ExecutionPolicy Bypass -File "{0}"' -f $file)
-    $sc.Description = $description
-    $sc.Save()
-    return $lnk
-}
-# 建立（或更新）兩個桌面捷徑、記下 Linux 與使用者。兩個各自建立，一個失敗不會擋住另一個；回傳建立好的捷徑路徑，
-# 呼叫端用 Write-ShortcutResult 分清楚兩個都好、只好一個、都沒好（#2252 審查）。兩個都好才在 WSL 裡留記號（agend update
-# 之後的提示就不會再出現）。不是 Windows 時回傳空陣列。
+  $dir = Get-AgendShortcutDir
+  New-Item -ItemType Directory -Path $dir -Force | Out-Null
+  $file = Join-Path $dir $scriptName
+  [IO.File]::WriteAllText($file, $scriptText, (New-Object System.Text.UTF8Encoding $true))
+  $lnk = Join-Path ([Environment]::GetFolderPath('Desktop')) ($name + '.lnk')
+  $shell = New-Object -ComObject WScript.Shell
+  $sc = $shell.CreateShortcut($lnk)
+  $cmd = Get-ShortcutCommand $file
+  $sc.TargetPath = $cmd.Target
+  $sc.Arguments = $cmd.Arguments
+  $sc.Description = $description
+  $sc.Save()
+  return $lnk
+}
 function Install-AgendShortcuts([string]$distro, [string]$user) {
-    if (-not $script:OnWindows) { return @() }
-    $made = @()
-    try { $made += New-AgendShortcut 'AgEnD 儀表板' 'open-dashboard.ps1' (Get-DashboardOpenerScript $distro $user) 'AgEnD 網頁儀表板（自動帶入登入碼）' } catch { }
-    try { $made += New-AgendShortcut 'AgEnD 重新啟動' 'restart-agend.ps1' (Get-RestartScript $distro $user) '重新啟動 AgEnD（會先詢問）' } catch { }
-    try {
-        New-Item -ItemType Directory -Path (Get-AgendShortcutDir) -Force | Out-Null
-        $record = @{ distro = $distro; user = $user } | ConvertTo-Json -Compress
-        [IO.File]::WriteAllText((Join-Path (Get-AgendShortcutDir) 'install.json'), $record, (New-Object System.Text.UTF8Encoding $false))
-        if ($made.Count -eq 2) { $null = Invoke-AgendInWsl $distro $user 'set -f; IFS=; d=${AGEND_HOME:-$HOME/.agend}; umask 077; mkdir -p -m 700 -- $d && date -u +%FT%TZ > $d/windows-shortcuts' }
-    } catch { }
+  if (-not $script:OnWindows) { return @() }
+  $made = @()
+  try { $made += New-AgendShortcut 'AgEnD 儀表板' 'open-dashboard.ps1' (Get-DashboardOpenerScript $distro $user) 'AgEnD 網頁儀表板（自動帶入登入碼）' } catch { }
+  try { $made += New-AgendShortcut 'AgEnD 重新啟動' 'restart-agend.ps1' (Get-RestartScript $distro $user) '重新啟動 AgEnD（會先詢問）' } catch { }
+  try {
+      New-Item -ItemType Directory -Path (Get-AgendShortcutDir) -Force | Out-Null
+      $record = @{ distro = $distro; user = $user } | ConvertTo-Json -Compress
+      [IO.File]::WriteAllText((Join-Path (Get-AgendShortcutDir) 'install.json'), $record, (New-Object System.Text.UTF8Encoding $false))
+      if ($made.Count -eq 2) { $null = Invoke-AgendInWsl $distro $user 'set -f; IFS=; d=${AGEND_HOME:-$HOME/.agend}; umask 077; mkdir -p -m 700 -- $d && date -u +%FT%TZ > $d/windows-shortcuts' }
+  } catch { }
     return $made
 }