kenaz 0.3.22 → 0.3.23

package/core/.specialist/tools/failure-detector.js

@@ -328,7 +328,7 @@ function captureGitCommitSnapshot(taskId) {
   try {
     const logOutput = execFileSync(
       'git', ['log', branch, '--not', 'main', '--oneline'],
-      { cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
+      { windowsHide: true, cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
     ).toString().trim();
     snapshot.logOk = true;
     snapshot.commitLines = logOutput ? logOutput.split('\n').filter(Boolean) : [];
@@ -339,7 +339,7 @@ function captureGitCommitSnapshot(taskId) {
   try {
     snapshot.numstatOutput = execFileSync(
       'git', ['log', branch, '--not', 'main', '--numstat', '--format='],
-      { cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
+      { windowsHide: true, cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
     ).toString().trim();
   } catch {
     // No numstat — non-fatal, mirrors original tolerance for this failure
@@ -446,7 +446,7 @@ function detectGitCommitPattern(taskId, guard, taskData, postCompleteResult) {
     try {
       logOutput = execFileSync(
         'git', ['log', branch, '--not', 'main', '--oneline'],
-        { cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
+        { windowsHide: true, cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
       ).toString().trim();
     } catch {
       return { result: null, reason: 'git_log_failed' };
@@ -463,7 +463,7 @@ function detectGitCommitPattern(taskId, guard, taskData, postCompleteResult) {
     try {
       numstatOutput = execFileSync(
         'git', ['log', branch, '--not', 'main', '--numstat', '--format='],
-        { cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
+        { windowsHide: true, cwd: PROJECT_DIR, stdio: ['ignore', 'pipe', 'ignore'], timeout: 10000 }
       ).toString().trim();
     } catch {
       // No numstat — still evaluate revert/signature above

package/core/.specialist/tools/handoff-doc.js

@@ -24,7 +24,7 @@ function stamp(d) {
 }
 
 function git(projectPath, args) {
-  try { return execFileSync('git', args, { cwd: projectPath, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return ''; }
+  try { return execFileSync('git', args, { windowsHide: true, cwd: projectPath, encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] }).trim(); } catch { return ''; }
 }
 
 function template({ topic, session, projectPath, now }) {

package/core/.specialist/tools/lessons.js

@@ -258,13 +258,13 @@ function rm(id, o = {}) {
   return l;
 }
 
-/** Project lessons for the dispatch prompt: facts (paths overlap scope_paths) and checks; bounded, most-fired first. */
+/** Project lessons for the dispatch prompt: facts and checks whose paths overlap scope_paths (no paths = every card); bounded, most-fired first. */
 function dispatchLessons(projectPath, scopePaths = [], { home, now } = {}) {
   const norm = (s) => String(s).replace(/\\/g, '/').toLowerCase();
   const scope = scopePaths.map(norm);
   const overlaps = (l) => !l.paths.length || l.paths.some((p) => scope.some((s) => s.includes(norm(p)) || norm(p).includes(s)));
   const pick = listLayer('project', { projectPath, home, now })
-    .filter((l) => !l.triggers.length && ((l.type === 'fact' && overlaps(l)) || l.type === 'check'));
+    .filter((l) => !l.triggers.length && (l.type === 'fact' || l.type === 'check') && overlaps(l));
   const out = { facts: [], checks: [] };
   let bytes = 0, lines = 0;
   for (const l of pick) {

package/core/CLAUDE.md

@@ -61,7 +61,7 @@ harness 預設「每條記憶都在 MEMORY.md 加一行」；本專案改為三
 KenazAI 是一個 Claude Code 多 Agent 協作系統，包含：
 - **kenaz-server**：Rust 後端（`dashboard/src-tauri/`，npm `@kenazai/server-*`）；Dashboard 桌面版已於 2026-10-11 退役（TASK_2396）
 - **Specialist 系統**：AI Agent 調度引擎（`.specialist/`）
-- **Formation 系統**：多 Agent 協作調度，支援 unit/solo/squad/legion 陣型（`.formation/`）
+- **Formation 工具**：subagent worktree 派工與合併工具（`.formation/tools/`）；unit/solo/squad/legion 與 `kenaz_dispatch` 已退役，只剩 subagent 派工
 
 技術棧：Rust（kenaz-server）、Node.js（kenaz CLI、hooks、工具）、SQLite
 
@@ -72,7 +72,7 @@ KenazAI 是一個 Claude Code 多 Agent 協作系統，包含：
 | Specialist | 定位 | 指令 |
 |-----------|------|------|
 | **Ansuz** ᚨ | 產品全生命週期引擎（需求→架構→任務→執行） | `/Ansuz` |
-| **Amelia** | Agent Center 調度者（多 Agent 協作） | `/Amelia` |
+| **Amelia** | 多 Agent 協作調度者 | `/Amelia` |
 
 文檔：`.specialist/Ansuz/SYSTEM_DOC.md`、`.specialist/Amelia/README.md`
 
@@ -128,7 +128,7 @@ node .collaboration/core/task-api.js move TASK_XXX active  # 移動狀態
 | 規則庫 | `.rule/` | 最高優先級規則，見 `INDEX.yaml` |
 | 失敗學習 | `.failure/` | 已知失敗模式，Agent 執行前應檢查 |
 | Rust 測試 | `npm run test:rust -- <filter>` | 主目錄直接可跑；用共用短路徑 target，不和其他建置搶 `target/` 鎖。勿直接 `cargo test` |
-| Formation | `.formation/` | 多 Agent 調度，見 `README.md` |
+| Formation | `.formation/` | subagent 派工與合併工具，見 `README.md` |
 | Skills | `.claude/skills/` | Agent 行為定義（40+ skills） |
 | 外部 Skills | `.agents/skills/` | `vercel-react-best-practices`、`supabase-postgres-best-practices` |
 
@@ -137,7 +137,7 @@ node .collaboration/core/task-api.js move TASK_XXX active  # 移動狀態
 KenazAI 支援管理子專案。Core 擁有系統檔，子專案只存 `.kenaz/`（tasks + logs + project.yaml）。
 
 子專案工作時：讀取 `.kenaz/project.yaml` 的 `core_path` 確定系統檔來源。
-task-api 和 Formation dispatch 都支援 `--project-path` 參數。
+task-api 和 `.formation/tools/dispatch.js` 都支援 `--project-path` 參數。
 
 文檔：`.system/collaboration/README.md`
 
@@ -155,7 +155,7 @@ DB:     postgresql://postgres:postgres@127.0.0.1:54322/postgres
 .rule/              # 規則庫（最高優先級）
 .specialist/        # Specialist 系統（Ansuz、Amelia）
 .collaboration/     # 任務系統
-.formation/         # Formation 調度
+.formation/         # subagent 派工與合併工具
 .failure/           # 失敗學習系統
 .memory/            # （歷史）舊記憶資料，記憶系統已移除
 .claude/            # Skills、Commands、Hooks

package/core/KENAZ_CORE_VERSION

@@ -1 +1 @@
-0.3.22
+0.3.23

package/core/dashboard/scripts/install-kenaz-cli.js

@@ -22,6 +22,8 @@ const MIN_CLI = [2, 1, 287];
 const SEP = process.platform === 'win32' ? ';' : ':';
 const TASK_NAME = 'KenazServer';
 const LABEL = 'ai.kenaz.server';
+const BATTERY_PS = '$s = New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit ([TimeSpan]::Zero); Set-ScheduledTask -TaskName ' + TASK_NAME + ' -Settings $s';
+const linuxUser = () => { try { return os.userInfo().username; } catch (_) { return process.env.USER || ''; } };
 
 const norm = (e) => {
   const s = String(e).trim().replace(/\\/g, '/').replace(/\/+$/, '');
@@ -136,8 +138,8 @@ function retireDashboardHooks(file, dry) {
 
 function claudeVersion() {
   const r = process.platform === 'win32' // one string with shell (.cmd shim): args + shell:true is deprecated (DEP0190)
-    ? spawnSync('claude --version', { encoding: 'utf8', shell: true, timeout: 15000 })
-    : spawnSync('claude', ['--version'], { encoding: 'utf8', timeout: 15000 });
+    ? spawnSync('claude --version', { windowsHide: true, encoding: 'utf8', shell: true, timeout: 15000 })
+    : spawnSync('claude', ['--version'], { windowsHide: true, encoding: 'utf8', timeout: 15000 });
   return r.status === 0 ? parseVersion(r.stdout) : null;
 }
 
@@ -208,7 +210,7 @@ function servicePlan(home, bin, core, platform = process.platform, caps = { syst
   const p = path.join(home, '.config', 'systemd', 'user', 'kenaz-server.service');
   return { kind: 'systemd', files: [[p, systemdUnit(bin, core)]], unit: p };
 }
-const sh = (cmd, args, opts) => spawnSync(cmd, args, { encoding: 'utf8', ...(opts || {}) });
+const sh = (cmd, args, opts) => spawnSync(cmd, args, { windowsHide: true, encoding: 'utf8', ...(opts || {}) });
 
 // crontab -l: null = no crontab binary; '' = binary present, no crontab yet. All through the injected `run`.
 function readCron(run) {
@@ -303,8 +305,13 @@ function serviceInstall(plan, dry, log, run = sh, uid) {
     log('schtasks /Create /TN ' + TASK_NAME + ' /SC ONLOGON /TR ' + tr + ' /F  (fallback: ' + plan.fallbackFile + ')');
     if (dry) return;
     const r = sh('schtasks', ['/Create', '/TN', TASK_NAME, '/SC', 'ONLOGON', '/TR', tr, '/F']);
-    if (r.status === 0) sh('schtasks', ['/Run', '/TN', TASK_NAME]);
-    else { // ONLOGON tasks can need elevation: a Startup-folder launcher is the per-user equivalent
+    if (r.status === 0) {
+      // Task Scheduler defaults refuse to start on battery and stop the task when going on battery:
+      // a laptop unplugged at logon never got the server (TASK_2468). Re-running install fixes an old task.
+      const b = sh('powershell.exe', ['-NoProfile', '-NonInteractive', '-Command', BATTERY_PS]);
+      if (b.status !== 0) log('WARNING: could not set the task to run on battery (exit ' + b.status + '); on a laptop the server may not start unplugged. Run in PowerShell: ' + BATTERY_PS);
+      sh('schtasks', ['/Run', '/TN', TASK_NAME]);
+    } else { // ONLOGON tasks can need elevation: a Startup-folder launcher is the per-user equivalent
       fs.mkdirSync(path.dirname(plan.fallbackFile), { recursive: true });
       fs.copyFileSync(plan.files[0][0], plan.fallbackFile);
       sh('wscript.exe', [plan.files[0][0]]);
@@ -326,6 +333,10 @@ function serviceInstall(plan, dry, log, run = sh, uid) {
   } else {
     log('systemctl --user enable --now kenaz-server');
     if (!dry) { sh('systemctl', ['--user', 'daemon-reload']); sh('systemctl', ['--user', 'enable', '--now', 'kenaz-server']); }
+    // Without linger the user service starts only at login (headless boxes: never). Best effort.
+    const u = linuxUser();
+    log('loginctl enable-linger ' + u);
+    if (!dry && sh('loginctl', ['enable-linger', u]).status !== 0) log('WARNING: could not enable linger; the server starts at boot only after you log in. Run: loginctl enable-linger ' + u + ' (may need sudo)');
     serviceRestart(plan, dry, log, sh, uid);
   }
 }
@@ -365,7 +376,11 @@ function detectServiceMode(home, core, run = sh, platform = process.platform) {
     return fs.existsSync(p) ? { mode: 'launchd', detail: p } : { mode: 'manual', detail: 'no launchd agent; run `kenaz install`' };
   }
   const unit = servicePlan(home, '', core, 'linux').unit;
-  if (fs.existsSync(unit) && probeLinux(run).systemd) return { mode: 'systemd', detail: unit };
+  if (fs.existsSync(unit) && probeLinux(run).systemd) {
+    const u = linuxUser();
+    const off = /Linger=no/.test(run('loginctl', ['show-user', u, '-p', 'Linger']).stdout || '');
+    return off ? { mode: 'systemd', detail: unit + '; linger is off, the server starts only after login: run loginctl enable-linger ' + u, warn: true } : { mode: 'systemd', detail: unit };
+  }
   const c = readCron(run);
   if (c && c.includes(CRON_MARK)) return { mode: 'cron', detail: '@reboot crontab entry (no systemd user session)' };
   return { mode: 'manual', detail: 'no systemd unit or cron entry; run `kenaz install`' };

package/core/dev/scripts/check-file-size.js

@@ -103,7 +103,7 @@ function countLines(text) {
 }
 
 function git(args, cwd) {
-  const result = spawnSync('git', args, { cwd, encoding: 'utf8' });
+  const result = spawnSync('git', args, { windowsHide: true, cwd, encoding: 'utf8' });
   return result;
 }
 

package/core/dev/scripts/ci-feedback.js

@@ -40,7 +40,7 @@ const TASK_API = path.join(ROOT, '.collaboration', 'core', 'task-api.js');
 // ─────────────────────────────────────────
 
 function runTaskApi(...args) {
-  const result = spawnSync('node', [TASK_API, ...args], {
+  const result = spawnSync('node', [TASK_API, ...args], { windowsHide: true,
     encoding: 'utf8',
     timeout: 15000,
     cwd: ROOT,

package/core/dev/scripts/gc-agent-worktrees.js

@@ -72,11 +72,11 @@ const DRY_RUN = !process.argv.includes('--apply');
 // ─── Git helpers (GEN-008: dynamic root, never hardcoded) ────────────────────
 
 function gitRoot() {
-  return execSync('git rev-parse --show-toplevel', { encoding: 'utf8' }).trim();
+  return execSync('git rev-parse --show-toplevel', { windowsHide: true, encoding: 'utf8' }).trim();
 }
 
 function currentBranch() {
-  return execSync('git rev-parse --abbrev-ref HEAD', { encoding: 'utf8' }).trim();
+  return execSync('git rev-parse --abbrev-ref HEAD', { windowsHide: true, encoding: 'utf8' }).trim();
 }
 
 /**
@@ -84,7 +84,7 @@ function currentBranch() {
  * Uses exit code of `git merge-base --is-ancestor <commit> HEAD`.
  */
 function isAncestorOfHead(tipCommit) {
-  const result = spawnSync('git', ['merge-base', '--is-ancestor', tipCommit, 'HEAD'], {
+  const result = spawnSync('git', ['merge-base', '--is-ancestor', tipCommit, 'HEAD'], { windowsHide: true,
     encoding: 'utf8',
   });
   return result.status === 0;
@@ -95,7 +95,7 @@ function isAncestorOfHead(tipCommit) {
  * Each entry: { path, head, branch, locked, lockReason }
  */
 function listWorktrees() {
-  const raw = execSync('git worktree list --porcelain', { encoding: 'utf8' });
+  const raw = execSync('git worktree list --porcelain', { windowsHide: true, encoding: 'utf8' });
   const entries = [];
   let current = null;
 
@@ -199,7 +199,7 @@ function listUntrackedAgentDirs(root, trackedPaths) {
 function listDanglingAgentBranches(trackedBranches) {
   let raw = '';
   try {
-    raw = execSync('git branch --list "worktree-agent-*" --format="%(refname:short)"', { encoding: 'utf8' });
+    raw = execSync('git branch --list "worktree-agent-*" --format="%(refname:short)"', { windowsHide: true, encoding: 'utf8' });
   } catch {
     return [];
   }
@@ -209,7 +209,7 @@ function listDanglingAgentBranches(trackedBranches) {
     const b = line.trim();
     if (!b || trackedSet.has(b)) continue;
     let tip = '';
-    try { tip = execSync(`git rev-parse "${b}"`, { encoding: 'utf8' }).trim(); } catch { /* ignore */ }
+    try { tip = execSync(`git rev-parse "${b}"`, { windowsHide: true, encoding: 'utf8' }).trim(); } catch { /* ignore */ }
     out.push({ branch: b, tip, integrated: tip ? isAncestorOfHead(tip) : false });
   }
   return out;
@@ -354,7 +354,7 @@ function main() {
     // Unlock if locked (harness may have left lock even after pid is gone)
     if (wt.locked) {
       try {
-        execSync(`git worktree unlock "${wt.path}"`, { encoding: 'utf8' });
+        execSync(`git worktree unlock "${wt.path}"`, { windowsHide: true, encoding: 'utf8' });
       } catch {
         // unlock may fail if git disagrees — proceed, remove --force handles it
       }
@@ -374,7 +374,7 @@ function main() {
 
     // Remove worktree (--force bypasses remaining lock metadata)
     try {
-      execSync(`git worktree remove --force "${wt.path}"`, { encoding: 'utf8' });
+      execSync(`git worktree remove --force "${wt.path}"`, { windowsHide: true, encoding: 'utf8' });
     } catch (err) {
       console.log(` FAILED (worktree remove): ${err.message.trim()}`);
       failedCount++;
@@ -384,7 +384,7 @@ function main() {
     // Delete the branch (best-effort; branch may already be deleted or missing)
     if (wt.branch) {
       try {
-        execSync(`git branch -D "${wt.branch}"`, { encoding: 'utf8' });
+        execSync(`git branch -D "${wt.branch}"`, { windowsHide: true, encoding: 'utf8' });
       } catch {
         // Branch may already be deleted — not an error
       }
@@ -396,7 +396,7 @@ function main() {
 
   // Prune stale worktree admin dirs (idempotent, always safe)
   try {
-    execSync('git worktree prune', { encoding: 'utf8' });
+    execSync('git worktree prune', { windowsHide: true, encoding: 'utf8' });
     console.log('\n  git worktree prune  done');
   } catch (err) {
     console.log(`\n  git worktree prune  FAILED (non-fatal): ${err.message.trim()}`);
@@ -419,7 +419,7 @@ function main() {
   for (const b of danglingBranches) {
     if (!b.integrated) continue; // keep not-in-HEAD branches for salvage
     try {
-      execSync(`git branch -D "${b.branch}"`, { encoding: 'utf8' });
+      execSync(`git branch -D "${b.branch}"`, { windowsHide: true, encoding: 'utf8' });
       danglingDeleted++;
     } catch { /* already gone — not an error */ }
   }

package/core/dev/scripts/kenaz-session.js

@@ -218,7 +218,7 @@ function parseCliArgs(argv) {
 function resolveExecutableWindows(whereFn) {
   whereFn = whereFn || function runWhere() {
     try {
-      return cp.execSync('where claude', { encoding: 'utf8' });
+      return cp.execSync('where claude', { windowsHide: true, encoding: 'utf8' });
     } catch (e) {
       return '';
     }
@@ -263,13 +263,13 @@ function escapeCmdExe(exe) {
 
 function launch(exec, cwd, argv) {
   if (exec.useShell) {
-    return cp.spawn(escapeCmdExe(exec.command), argv.map(escapeCmdArg), {
+    return cp.spawn(escapeCmdExe(exec.command), argv.map(escapeCmdArg), { windowsHide: true,
       cwd,
       stdio: 'inherit',
       shell: true,
     });
   }
-  return cp.spawn(exec.command, argv, { cwd, stdio: 'inherit', shell: false });
+  return cp.spawn(exec.command, argv, { windowsHide: true, cwd, stdio: 'inherit', shell: false });
 }
 
 // ---- main ----

package/core/dev/scripts/peer-identity-e2e.js

@@ -59,12 +59,12 @@ function start(name, exe, args, env, cwd) {
 }
 async function stop(p) {
   if (!p || p.exited) return;
-  if (process.platform === 'win32') spawnSync('taskkill', ['/PID', String(p.pid), '/T', '/F'], { stdio: 'ignore' }); // our PID only
+  if (process.platform === 'win32') spawnSync('taskkill', ['/PID', String(p.pid), '/T', '/F'], { windowsHide: true, stdio: 'ignore' }); // our PID only
   else p.child.kill('SIGKILL');
   await until(`${p.name} exit`, () => p.exited, 15000, 100).catch(() => {});
 }
 function sh(cmd, args, env) {
-  const r = spawnSync(cmd, args, { env: { ...process.env, ...env }, encoding: 'utf8' });
+  const r = spawnSync(cmd, args, { windowsHide: true, env: { ...process.env, ...env }, encoding: 'utf8' });
   return { code: r.status, out: `${r.stdout || ''}${r.stderr || ''}`.trim() };
 }
 function sqlite(file, readOnly = true) {
@@ -398,5 +398,5 @@ async function main() {
   return bad ? 1 : 0;
 }
 
-process.on('SIGINT', () => { for (const p of procs) if (!p.exited) { if (process.platform === 'win32') spawnSync('taskkill', ['/PID', String(p.pid), '/T', '/F'], { stdio: 'ignore' }); else p.child.kill('SIGKILL'); } process.exit(130); });
+process.on('SIGINT', () => { for (const p of procs) if (!p.exited) { if (process.platform === 'win32') spawnSync('taskkill', ['/PID', String(p.pid), '/T', '/F'], { windowsHide: true, stdio: 'ignore' }); else p.child.kill('SIGKILL'); } process.exit(130); });
 main().then((c) => process.exit(c), (e) => { console.error(e); process.exit(1); });

package/core/dev/scripts/run-rust-tests.js

@@ -142,7 +142,7 @@ function main() {
   const build = spawnSync(
     'cargo',
     ['test', '--lib', '--no-run', '--message-format=json'],
-    { cwd: crateDir, encoding: 'utf8', shell: false, maxBuffer: 256 * 1024 * 1024, env }
+    { windowsHide: true, cwd: crateDir, encoding: 'utf8', shell: false, maxBuffer: 256 * 1024 * 1024, env }
   );
   if (build.status !== 0) {
     const compilerErrors = renderCompilerErrors(build.stdout);
@@ -180,7 +180,7 @@ function main() {
   }
 
   // 3. Run the artifact directly.
-  const run = spawnSync(testExe, exeArgs, { stdio: 'inherit' });
+  const run = spawnSync(testExe, exeArgs, { windowsHide: true, stdio: 'inherit' });
   process.exit(run.status ?? 1);
 }
 

package/core/dev/scripts/skill-routing-replay.js

@@ -36,7 +36,7 @@ function evaluate(streamText, expected) {
 }
 
 function copyRepo(dest) {
-  const files = execFileSync('git', ['ls-files', '-z'], { cwd: REPO, encoding: 'utf8', maxBuffer: 1 << 28 }).split('\0').filter(Boolean);
+  const files = execFileSync('git', ['ls-files', '-z'], { windowsHide: true, cwd: REPO, encoding: 'utf8', maxBuffer: 1 << 28 }).split('\0').filter(Boolean);
   for (const f of files) {
     const from = path.join(REPO, f);
     if (!fs.existsSync(from)) continue;
@@ -49,11 +49,11 @@ function runScenario(sc, opts) {
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), 'skill-replay-'));
   try {
     copyRepo(dir);
-    execFileSync('git', ['init', '-q'], { cwd: dir });
+    execFileSync('git', ['init', '-q'], { windowsHide: true, cwd: dir });
     const prompt = (sc.prefix === undefined ? '/Ansuz ' : sc.prefix) + sc.message;
     // Prompt goes on stdin: with shell:true (needed on Windows) argv is concatenated unquoted, which split the message.
     const r = spawnSync('claude', ['-p', '--output-format', 'stream-json', '--verbose', '--max-turns', String(opts.maxTurns)],
-      { cwd: dir, input: prompt, encoding: 'utf8', maxBuffer: 1 << 28, timeout: opts.timeoutMs, shell: process.platform === 'win32' });
+      { windowsHide: true, cwd: dir, input: prompt, encoding: 'utf8', maxBuffer: 1 << 28, timeout: opts.timeoutMs, shell: process.platform === 'win32' });
     const ev = evaluate(r.stdout || '', sc.expected);
     return { id: sc.id, expected: sc.expected, hit: ev.hit, calls: ev.calls, exit: r.status, error: r.error && r.error.message };
   } finally {

package/core/dev/scripts/task1961/selftest.js

@@ -120,7 +120,7 @@ async function testSlowServe() {
     KENAZ_FIXTURE_SLOW_PHASE_MS: '4000',
   });
   const spawnedAt = Date.now();
-  const child = spawn(process.execPath, [SLOW_SERVE], { env, stdio: ['ignore', 'pipe', 'pipe'] });
+  const child = spawn(process.execPath, [SLOW_SERVE], { windowsHide: true, env, stdio: ['ignore', 'pipe', 'pipe'] });
   spawnedPids.push(child.pid);
   let out = '';
   child.stdout.on('data', (d) => (out += d.toString()));
@@ -166,7 +166,7 @@ async function testSlowServe() {
 
 async function testNeverListens() {
   console.log('\n[selftest] never-listens.server.js');
-  const child = spawn(process.execPath, [NEVER_LISTENS], { stdio: ['ignore', 'pipe', 'pipe'] });
+  const child = spawn(process.execPath, [NEVER_LISTENS], { windowsHide: true, stdio: ['ignore', 'pipe', 'pipe'] });
   spawnedPids.push(child.pid);
   let exited = false;
   child.on('exit', () => {

package/core/dev/scripts/windows-hide-guard.test.js

@@ -0,0 +1,97 @@
+'use strict';
+// TASK_2474 guard: every child process Kenaz starts must be hidden on Windows.
+//  - Node: spawn/exec* calls in shipped JS must pass windowsHide (inline in the call, or on an options
+//    object defined in the same file). JS_ALLOW = intentionally visible terminals, with reasons.
+//  - Rust: Command::new in non-test Rust files outside common/process.rs must be hidden_command.
+const test = require('node:test');
+const assert = require('node:assert');
+const fs = require('node:fs');
+const path = require('node:path');
+
+const ROOT = path.resolve(__dirname, '..', '..');
+const JS_DIRS = ['.specialist/tools', '.formation', '.claude/hooks', 'plugins/kenaz/hooks', 'plugins/kenaz/scripts',
+  '.collaboration/core', 'packages/kenaz/lib', 'packages/kenaz/bin', 'dashboard/scripts', 'dev/scripts'];
+const RS_DIR = 'dashboard/src-tauri/src';
+
+// "relative/path.js:line" -> reason. Intentionally visible terminals only.
+const JS_ALLOW = {
+  'dev/scripts/task1961/selftest.js:132': 'false positive: "spawn (took ..." inside a template-string message, not a call',
+};
+// "relative/path.rs" -> reason (whole file may use raw Command::new outside #[cfg(test)]).
+const RS_ALLOW = {
+  'dashboard/src-tauri/src/common/process.rs': 'the hidden_command constructors themselves',
+};
+
+function walk(dir, exts, out = []) {
+  const abs = path.join(ROOT, dir);
+  if (!fs.existsSync(abs)) return out;
+  for (const e of fs.readdirSync(abs, { withFileTypes: true })) {
+    if (['node_modules', '.git', 'target', 'dist', 'fixtures'].includes(e.name)) continue;
+    const rel = dir + '/' + e.name;
+    if (e.isDirectory()) walk(rel, exts, out);
+    else if (exts.some((x) => e.name.endsWith(x)) && !/\.test\.[cm]?js$/.test(e.name)) out.push(rel);
+  }
+  return out;
+}
+
+// plugins/kenaz/hooks/core-resolve.js is generated (gitignored) from .claude/hooks/core-resolve.js
+const isGenerated = (rel) => rel === 'plugins/kenaz/hooks/core-resolve.js';
+
+function matchParen(src, open) {
+  let depth = 0, q = null;
+  for (let i = open; i < src.length; i++) {
+    const c = src[i];
+    if (q) { if (c === '\\') i++; else if (c === q) q = null; continue; }
+    if (c === '"' || c === "'" || c === '`') { q = c; continue; }
+    if (c === '(') depth++;
+    else if (c === ')' && --depth === 0) return i;
+  }
+  return src.length;
+}
+
+function scanJs(rel, src) {
+  if (!/child_process/.test(src)) return [];
+  const bad = [];
+  // blank block comments and whole-line // comments (offsets and line numbers preserved)
+  src = src.replace(/\/\*[\s\S]*?\*\//g, (c) => c.replace(/[^\n]/g, ' ')).replace(/^[ \t]*\/\/.*$/gm, (c) => ' '.repeat(c.length));
+  const re = /(?<![\w$.])(?:(?:cp|child_process|childProcess|proc)\.)?(spawn|spawnSync|exec|execSync|execFile|execFileSync)\s*\(/g;
+  let m;
+  while ((m = re.exec(src))) {
+    const open = m.index + m[0].length - 1;
+    const args = src.slice(open, matchParen(src, open) + 1);
+    if (/windowsHide/.test(args)) continue;
+    // options passed as a bare identifier: accept when that identifier is defined with windowsHide in the file
+    const last = args.slice(1, -1).split(',').pop().trim();
+    if (/^[A-Za-z_$][\w$]*$/.test(last) && new RegExp(`${last}\\s*=\\s*\\{[^;]*windowsHide`).test(src)) continue;
+    const line = src.slice(0, m.index).split('\n').length;
+    if (JS_ALLOW[`${rel}:${line}`]) continue;
+    bad.push(`${rel}:${line} ${m[1]}`);
+  }
+  return bad;
+}
+
+function scanRs(rel, src) {
+  if (RS_ALLOW[rel]) return [];
+  const cut = src.search(/#\[cfg\(test\)\]/);
+  const body = cut >= 0 ? src.slice(0, cut) : src;
+  const bad = [];
+  body.split('\n').forEach((ln, i) => {
+    if (/^\s*\/\//.test(ln)) return;
+    if (/Command::new\s*\(/.test(ln) && !/hidden_/.test(ln)) bad.push(`${rel}:${i + 1}`);
+  });
+  return bad;
+}
+
+test('Node: every child_process call passes windowsHide', () => {
+  const files = JS_DIRS.flatMap((d) => walk(d, ['.js', '.cjs', '.mjs'])).filter((f) => !isGenerated(f));
+  const bad = files.flatMap((f) => scanJs(f, fs.readFileSync(path.join(ROOT, f), 'utf8')));
+  console.log(`node violations: ${bad.length}`);
+  assert.deepStrictEqual(bad, []);
+});
+
+test('Rust: no raw Command::new in production code outside common/process.rs', () => {
+  const files = walk(RS_DIR, ['.rs']).filter((f) => !/(^|\/)tests?\.rs$|_tests?\.rs$|\/tests\//.test(f));
+  const bad = files.flatMap((f) => scanRs(f, fs.readFileSync(path.join(ROOT, f), 'utf8')));
+  console.log(`rust violations: ${bad.length}`);
+  assert.deepStrictEqual(bad, []);
+});

package/core/plugins/kenaz/guidance.md

@@ -2,5 +2,6 @@
 - Code navigation: kenaz_lsp_callers / kenaz_lsp_references / kenaz_lsp_definition / kenaz_lsp_symbols (always pass projectPath). Text search: Grep/Glob.
 - Collaboration: kenaz_peer_send / kenaz_peer_threads (other sessions, other machines, Codex), /kenaz ygg status|join.
 - Rooms: when the user pastes a room key or asks to join/create a room, run `kenaz ygg join <key>` / `kenaz ygg create` yourself (never ask them to type it), then relay the status block and any "restart Claude Code" note.
+- Reporting a Kenaz problem or idea: call kenaz_wish_create (scope kenaz) yourself; it uploads to the Kenaz mother (Alaya) automatically, no user step. Claude Code's SendFeedback tool and /feedback go to Anthropic, never to Kenaz.
 - Reply in the user's language. Commands: /Ansuz, /Amelia, /review, /security, /incident, /spec.
 - Switch: /kenaz off | assist | full (or env KENAZ_MODE). off disables every Kenaz hook.

package/core/plugins/kenaz/hooks/core-resolve.js

@@ -221,7 +221,7 @@ if (require.main === module) {
   if (!result) process.exit(0); // silent -- non-blocking hook
 
   try {
-    execFileSync("node", [result.resolved, ...result.args], { stdio: "inherit" });
+    execFileSync("node", [result.resolved, ...result.args], { stdio: "inherit", windowsHide: true });
   } catch {
     // Hook errors should not block
   }

package/core/plugins/kenaz/hooks/kenaz-hook.js

@@ -13,7 +13,8 @@ const fs = require('fs');
 const path = require('path');
 const net = require('net');
 const http = require('http');
-const { spawnSync } = require('child_process');
+const os = require('os');
+const { spawn, spawnSync } = require('child_process');
 const { resolveMode, allows, projectDir } = require('./mode');
 const { isSdkSession } = require('./sdk-gate');
 
@@ -49,6 +50,42 @@ function backendUp(cb) {
   s.on('error', () => done(false));
 }
 
+// TASK_2468: after a reboot nothing has started kenaz-server yet (the plugin MCP is a static http URL).
+// Start the installed binary detached, the way the installer does; never by process name, and only
+// called after the port probe failed (a second server is never started over an answering one).
+function startServer(dir) {
+  try {
+    const home = os.homedir();
+    const meta = JSON.parse(fs.readFileSync(path.join(home, '.kenaz', 'install.json'), 'utf8'));
+    const bin = meta && meta.serverBin;
+    if (!bin || !fs.existsSync(bin)) return false;
+    const vbs = path.join(home, '.kenaz', 'kenaz-server.vbs');
+    const core = coreDir(dir);
+    const env = Object.assign({}, process.env, core ? { KENAZ_SOURCE_DIR: core } : {});
+    const opts = { env, detached: true, stdio: 'ignore', windowsHide: true };
+    const viaNode = /\.js$/.test(bin); // a script (tests) runs under node; the real server is a binary
+    let child;
+    if (process.platform === 'win32') {
+      child = fs.existsSync(vbs) ? spawn('wscript.exe', [vbs], opts) : viaNode ? spawn(process.execPath, [bin], opts) : spawn(bin, [], opts);
+    } else {
+      const log = path.join(home, '.kenaz', 'kenaz-server.log');
+      const sq = (v) => "'" + String(v).replace(/'/g, "'\\''") + "'";
+      const cmd = 'if command -v setsid >/dev/null 2>&1; then S=setsid; else S=; fi; $S nohup ' +
+        (viaNode ? sq(process.execPath) + ' ' : '') + sq(bin) + ' >> ' + sq(log) + ' 2>&1 < /dev/null &';
+      child = spawn('sh', ['-c', cmd], opts);
+    }
+    child.on('error', () => {});
+    child.unref();
+    return true;
+  } catch (_) { return false; }
+}
+
+function waitForBackend(ms, cb) {
+  const end = Date.now() + ms;
+  const tick = () => backendUp((ok) => { if (ok || Date.now() >= end) return cb(ok); setTimeout(tick, 150); });
+  tick();
+}
+
 function post(body, cb) {
   const r = http.request({ hostname: HOST, port: PORT, path: '/api/rust/agent-flow/hook', method: 'POST',
     headers: { 'Content-Type': 'application/json', 'Content-Length': Buffer.byteLength(body) }, timeout: 3000 },
@@ -75,7 +112,7 @@ function run(spec, stdin, dir) {
   const stdio = ['pipe', 'inherit', 'ignore'];
   if (spec.kind === 'core-script') {
     const target = path.join(core, spec.rel);
-    if (fs.existsSync(target)) spawnSync(process.execPath, [target, ...(spec.args || [])], { cwd: dir, env, input: stdin, stdio, timeout: 10000 });
+    if (fs.existsSync(target)) spawnSync(process.execPath, [target, ...(spec.args || [])], { cwd: dir, env, input: stdin, stdio, timeout: 10000, windowsHide: true });
     return;
   }
   const file = path.join(core, '.claude', 'hooks', spec.file);
@@ -83,7 +120,7 @@ function run(spec, stdin, dir) {
   // Same shape as the core's own `node -e "chdir; require(hook)"` wrappers (require.main stays undefined).
   const code = 'process.chdir(process.env.CLAUDE_PROJECT_DIR);const m=require(process.argv[1]);' +
     (spec.call ? 'm[process.argv[2]]();' : '');
-  spawnSync(process.execPath, ['-e', code, file, spec.call || ''], { cwd: dir, env, input: stdin, stdio, timeout: 10000 });
+  spawnSync(process.execPath, ['-e', code, file, spec.call || ''], { cwd: dir, env, input: stdin, stdio, timeout: 10000, windowsHide: true });
 }
 
 function main() {
@@ -105,7 +142,18 @@ function main() {
     }
     run(spec, stdin, dir);
   };
-  if (spec.backend) backendUp((ok) => { if (ok) go(); }); else go();
+  if (!spec.backend) return go();
+  backendUp((ok) => {
+    if (ok) return go();
+    if (spec.kind !== 'session-start') return;
+    const finish = (up) => {
+      if (up) go();
+      process.stdout.write(up
+        ? 'kenaz-server was not running; the Kenaz hook started it on ' + HOST + ':' + PORT + '. If the kenaz MCP tools (kenaz-dashboard) show as failed, ask the user to run /mcp to reconnect them (they connected before the server was up).\n'
+        : 'kenaz-server is not running on ' + HOST + ':' + PORT + ', so the kenaz MCP tools are unavailable. Ask the user to run `! npx kenaz install` (registers the boot service and starts it), then /mcp to reconnect kenaz-dashboard.\n');
+    };
+    if (startServer(dir)) waitForBackend(3000, finish); else finish(false);
+  });
 }
 
 process.on('uncaughtException', () => process.exit(0));