neko-harness 0.4.6 → 0.4.7

package/dist/neko.js

@@ -80,7 +80,7 @@ function updateAction(input) {
     return "install";
   return "none";
 }
-var RUNNING_VERSION = "0.4.6", APPLICATION_PROTOCOL = 8, ApplicationProtocolError;
+var RUNNING_VERSION = "0.4.7", APPLICATION_PROTOCOL = 8, ApplicationProtocolError;
 var init_application_version = __esm(() => {
   ApplicationProtocolError = class ApplicationProtocolError extends Error {
     constructor() {
@@ -90,8 +90,35 @@ var init_application_version = __esm(() => {
   };
 });
 
+// packages/core/src/rename-with-retry.ts
+import { rename } from "fs/promises";
+async function renameWithRetry(from, to, deps = {}) {
+  const doRename = deps.rename ?? rename;
+  const sleep = deps.sleep ?? ((ms) => new Promise((resolve) => setTimeout(resolve, ms)));
+  let delay = FIRST_DELAY_MS;
+  let waited = 0;
+  for (;; ) {
+    try {
+      await doRename(from, to);
+      return;
+    } catch (error) {
+      const code = error.code;
+      if (typeof code !== "string" || !TRANSIENT.has(code) || waited >= MAX_TOTAL_MS)
+        throw error;
+      const step = Math.min(delay, MAX_TOTAL_MS - waited);
+      await sleep(step);
+      waited += step;
+      delay *= 2;
+    }
+  }
+}
+var TRANSIENT, FIRST_DELAY_MS = 10, MAX_TOTAL_MS = 1000;
+var init_rename_with_retry = __esm(() => {
+  TRANSIENT = new Set(["EPERM", "EBUSY", "EACCES"]);
+});
+
 // packages/core/src/application-updates.ts
-import { mkdir, readFile, rename, rm, writeFile } from "fs/promises";
+import { mkdir, readFile, rm, writeFile } from "fs/promises";
 import { homedir } from "os";
 import { dirname, join } from "path";
 import { fileURLToPath } from "url";
@@ -220,7 +247,7 @@ class UpdateChecker {
       try {
         await mkdir(dirname(this.#cachePath), { recursive: true });
         await writeFile(temporary, JSON.stringify({ latestVersion: value.version, checkedAt: now }), { mode: 384 });
-        await rename(temporary, this.#cachePath);
+        await renameWithRetry(temporary, this.#cachePath);
       } catch {} finally {
         await rm(temporary, { force: true }).catch(() => {});
       }
@@ -238,6 +265,7 @@ class UpdateChecker {
 var INSTALL_MANIFEST;
 var init_application_updates = __esm(() => {
   init_application_version();
+  init_rename_with_retry();
   INSTALL_MANIFEST = stableVersion(RUNNING_VERSION) ? fileURLToPath(new URL("../package.json", import.meta.url)) : undefined;
 });
 
@@ -665,6 +693,16 @@ function validate(config, source) {
       throw new Error(`neko config: ${source}: "skills.marketUrl" must be a string.`);
     }
   }
+  const shell = config.shell;
+  if (shell !== undefined) {
+    if (typeof shell !== "object" || shell === null || Array.isArray(shell)) {
+      throw new Error(`neko config: ${source}: "shell" must be an object.`);
+    }
+    const { path } = shell;
+    if (path !== undefined && typeof path !== "string") {
+      throw new Error(`neko config: ${source}: "shell.path" must be a string.`);
+    }
+  }
   const webSearch = config.webSearch;
   if (webSearch !== undefined) {
     if (typeof webSearch !== "object" || webSearch === null || Array.isArray(webSearch)) {
@@ -759,15 +797,17 @@ var init_credential_providers = __esm(() => {
 });
 
 // packages/core/src/credentials.ts
-import { chmod, mkdir as mkdir3, open, readFile as readFile3, rename as rename2, unlink } from "fs/promises";
+import { chmod, mkdir as mkdir3, open, readFile as readFile3, stat as stat2, unlink } from "fs/promises";
 import { homedir as homedir3 } from "os";
 import { dirname as dirname4, join as join4 } from "path";
 import { InMemoryCredentialStore } from "@earendil-works/pi-ai";
 
 class FileCredentialStore {
   path;
-  constructor(path = DEFAULT_CREDENTIALS_PATH) {
+  #renameDeps;
+  constructor(path = DEFAULT_CREDENTIALS_PATH, renameDeps = {}) {
     this.path = path;
+    this.#renameDeps = renameDeps;
   }
   async#read() {
     try {
@@ -797,6 +837,7 @@ class FileCredentialStore {
     await mkdir3(dirname4(this.path), { recursive: true, mode: 448 });
     const lockPath = `${this.path}.lock`;
     let lock;
+    let reclaimed = false;
     for (let attempt = 0;; attempt++) {
       try {
         lock = await open(lockPath, "wx", 384);
@@ -804,6 +845,16 @@ class FileCredentialStore {
       } catch (error) {
         if (error.code !== "EEXIST" || attempt >= 100)
           throw new Error("Credential storage is busy or unavailable.");
+        if (!reclaimed) {
+          const info = await stat2(lockPath).catch(() => {
+            return;
+          });
+          if (info && Date.now() - info.mtimeMs > STALE_LOCK_MS) {
+            reclaimed = true;
+            await unlink(lockPath).catch(() => {});
+            continue;
+          }
+        }
         await new Promise((resolve) => setTimeout(resolve, 25));
       }
     }
@@ -825,7 +876,7 @@ class FileCredentialStore {
       } finally {
         await file.close();
       }
-      await rename2(temporary, this.path);
+      await renameWithRetry(temporary, this.path, this.#renameDeps);
       return result;
     } catch (error) {
       if (callbackFailed)
@@ -851,8 +902,9 @@ class FileCredentialStore {
     });
   }
 }
-var DEFAULT_CREDENTIALS_PATH;
+var STALE_LOCK_MS = 30000, DEFAULT_CREDENTIALS_PATH;
 var init_credentials = __esm(() => {
+  init_rename_with_retry();
   init_credential_providers();
   DEFAULT_CREDENTIALS_PATH = join4(homedir3(), ".neko", "credentials.json");
 });
@@ -2897,7 +2949,7 @@ var init_agent_file_search = __esm(() => {
               complete = false;
               continue;
             }
-            const lines = new TextDecoder("utf-8", { fatal: true }).decode(data).split(/\r?\n/);
+            const lines = new TextDecoder("utf-8", { fatal: true }).decode(data).replace(/^\uFEFF/, "").split(/\r?\n/);
             for (let i = 0;i < lines.length; i++) {
               ctx.abortSignal?.throwIfAborted();
               const value = lines[i];
@@ -3287,8 +3339,11 @@ class JobManager {
                 outcome = { status: "failed", exitCode: null, reason: "timeout" };
               else if (result.error.code === "aborted")
                 outcome = { status: "stopped", exitCode: null, reason: "aborted" };
-              else
+              else {
+                entry.buffer.append(`${result.error.message}
+`);
                 outcome = { status: "failed", exitCode: null, reason: "spawn-error" };
+              }
             }
             if (this.#closing) {
               await new Promise((resolve) => {
@@ -3696,10 +3751,13 @@ var init_invoke = __esm(() => {
 
 // packages/core/src/prompt/prompt.ts
 import { defineExtension as defineExtension5, section } from "@earendil-works/pi-durable";
-var KEYS, PREAMBLE = "You are an expert coding assistant operating inside neko, a coding agent harness. You help users by reading files, executing commands, editing code, and writing new files.", TOOL_GUIDELINES, GENERIC_RULES, buildRules = (toolNames) => {
+var KEYS, PREAMBLE = "You are an expert coding assistant operating inside neko, a coding agent harness. You help users by reading files, executing commands, editing code, and writing new files.", TOOL_GUIDELINES, GENERIC_RULES, WINDOWS_SHELL_RULE = "On Windows, commands run in Git Bash (not PowerShell, cmd or WSL); write paths with forward slashes, e.g. D:/code or /d/code.", toolRules = (name, platform) => {
+  const rules = TOOL_GUIDELINES[name] ?? [];
+  return platform === "win32" && (name === "bash" || name === "job") ? [...rules, WINDOWS_SHELL_RULE] : rules;
+}, buildRules = (toolNames, platform) => {
   const rules = [];
   const seen = new Set;
-  for (const rule of [...toolNames.flatMap((name) => TOOL_GUIDELINES[name] ?? []), ...GENERIC_RULES]) {
+  for (const rule of [...toolNames.flatMap((name) => toolRules(name, platform)), ...GENERIC_RULES]) {
     if (seen.has(rule))
       continue;
     seen.add(rule);
@@ -3714,7 +3772,7 @@ ${content}
 </project_instructions>`)
 ].join(`
 
-`), createNekoPrompt = (loadResources) => {
+`), createNekoPrompt = (loadResources, platform = process.platform) => {
   const built = new WeakMap;
   const build = async (input, context) => {
     const cwd = input.agent.cwd;
@@ -3722,7 +3780,7 @@ ${content}
     const resources = cwd ? await loadResources(input.conversationId, cwd) : { contextFiles: [], skills: [] };
     const sections = {
       preamble: role ? ROLE_PROMPTS[role] + SUBAGENT_DELIVERY : PREAMBLE,
-      rules: buildRules(input.agent.tools.map((tool) => tool.name)),
+      rules: buildRules(input.agent.tools.map((tool) => tool.name), platform),
       project_context: renderProjectContext(resources.contextFiles),
       skills: formatSkillsForPrompt(resources.skills) || undefined,
       cwd: cwd?.replace(/\\/g, "/")
@@ -3801,7 +3859,7 @@ var userAgentsFile = (home) => join6(home, ".agents", "AGENTS.md"), userSkillsDi
   const contextFiles = [];
   for (const path of [userAgentsFile(home), workspaceAgentsFile(workspace)]) {
     try {
-      const content = await readFile5(path, "utf8");
+      const content = (await readFile5(path, "utf8")).replace(/^\uFEFF/, "");
       if (Buffer.byteLength(content, "utf8") > 64 * 1024)
         report({
           path,
@@ -5271,11 +5329,153 @@ var init_tavily = __esm(() => {
   init_http();
 });
 
+// packages/core/src/windows-shell.ts
+import { spawnSync } from "child_process";
+import { statSync as statSync2 } from "fs";
+import { win32 } from "path";
+function isWslBashPath(path) {
+  const normalized = path.replace(/\//g, "\\").toLowerCase();
+  return /^[a-z]:\\windows\\(?:system32|sysnative)\\bash\.exe$/.test(normalized) || /\\microsoft\\windowsapps\\(?:[^\\]+\\)*bash\.exe$/.test(normalized);
+}
+function envValue(env, name) {
+  const wanted = name.toLowerCase();
+  for (const [key, value] of Object.entries(env))
+    if (key.toLowerCase() === wanted && value)
+      return value;
+  return;
+}
+function bashBesideGit(gitExe) {
+  const dir = win32.dirname(gitExe);
+  const parent = win32.dirname(dir);
+  const name = win32.basename(dir).toLowerCase();
+  if (name === "cmd")
+    return win32.join(parent, "bin", "bash.exe");
+  if (name === "bin") {
+    const root = win32.basename(parent).toLowerCase() === "mingw64" ? win32.dirname(parent) : parent;
+    return win32.join(root, "bin", "bash.exe");
+  }
+  return;
+}
+function configProblem(path, kind) {
+  if (isWslBashPath(path))
+    return "it is WSL's bash, which is not supported (commands must run in Git Bash)";
+  if (kind === "missing")
+    return "the file does not exist";
+  if (kind === "directory")
+    return "it is a directory, not bash.exe";
+  return;
+}
+function resolveWindowsShell(deps, configPath) {
+  if (configPath !== undefined && configPath !== "") {
+    const problem = configProblem(configPath, deps.kind(configPath));
+    if (problem !== undefined) {
+      return {
+        kind: "missing",
+        reason: "invalid_config",
+        detail: `shell.path "${configPath}" is invalid: ${problem}.`,
+        searched: [configPath]
+      };
+    }
+    return { kind: "found", path: configPath, source: "config" };
+  }
+  const searched = [];
+  const check = (path) => {
+    if (!searched.includes(path))
+      searched.push(path);
+    return !isWslBashPath(path) && deps.kind(path) === "file";
+  };
+  const roots = [
+    envValue(deps.env, "ProgramFiles"),
+    envValue(deps.env, "ProgramFiles(x86)"),
+    (() => {
+      const local = envValue(deps.env, "LOCALAPPDATA");
+      return local === undefined ? undefined : win32.join(local, "Programs");
+    })()
+  ];
+  for (const root of roots) {
+    if (root === undefined)
+      continue;
+    const candidate = win32.join(root, "Git", "bin", "bash.exe");
+    if (check(candidate))
+      return { kind: "found", path: candidate, source: "auto" };
+  }
+  for (const gitExe of deps.where("git.exe")) {
+    const candidate = bashBesideGit(gitExe);
+    if (candidate !== undefined && check(candidate))
+      return { kind: "found", path: candidate, source: "auto" };
+  }
+  for (const candidate of deps.where("bash.exe")) {
+    if (check(candidate))
+      return { kind: "found", path: candidate, source: "auto" };
+  }
+  return { kind: "missing", reason: "not_found", detail: "No Git Bash was found.", searched };
+}
+function summarizeWindowsShell(status) {
+  return status.kind === "found" ? { status: "ready", path: status.path, source: status.source } : { status: "missing", reason: status.reason, detail: status.detail };
+}
+function windowsShellMessage(status) {
+  const lines = status.reason === "invalid_config" ? [
+    `Cannot run shell commands: ${status.detail}`,
+    "Fix shell.path in neko.config.json, or remove it to auto-detect Git Bash."
+  ] : [
+    "Cannot run shell commands: Git Bash was not found. neko runs commands in Git for Windows' bash, not PowerShell, cmd or WSL.",
+    "Install Git for Windows (https://git-scm.com/download/win), or set shell.path in neko.config.json to its bash.exe."
+  ];
+  if (status.searched.length > 0)
+    lines.push("Checked:", ...status.searched.map((path) => `  ${path}`));
+  lines.push("File tools (read, write, edit) still work.");
+  return lines.join(`
+`);
+}
+function systemWindowsShellDeps() {
+  return {
+    env: process.env,
+    kind(path) {
+      try {
+        return statSync2(path).isDirectory() ? "directory" : "file";
+      } catch {
+        return "missing";
+      }
+    },
+    where(program) {
+      const result = spawnSync("where", [program], { encoding: "utf8", timeout: 5000, windowsHide: true });
+      if (result.status !== 0 || typeof result.stdout !== "string")
+        return [];
+      return result.stdout.split(/\r?\n/).map((line) => line.trim()).filter((line) => line !== "");
+    }
+  };
+}
+function createWindowsShellResolver(options) {
+  const deps = options?.deps ?? systemWindowsShellDeps();
+  const now = options?.now ?? Date.now;
+  let cached;
+  return {
+    status(call) {
+      if (cached !== undefined && call?.refresh !== true) {
+        if (cached.status.kind === "found") {
+          if (deps.kind(cached.status.path) === "file")
+            return cached.status;
+        } else if (now() - cached.at < WINDOWS_SHELL_RETRY_MS) {
+          return cached.status;
+        }
+      }
+      cached = { status: resolveWindowsShell(deps, options?.configPath), at: now() };
+      return cached.status;
+    }
+  };
+}
+var WINDOWS_SHELL_RETRY_MS = 30000;
+var init_windows_shell = () => {};
+
 // packages/core/src/workspace-files.ts
-import { open as open2, realpath as realpath3, stat as stat2 } from "fs/promises";
+import { open as open2, realpath as realpath3, stat as stat3 } from "fs/promises";
 import { basename as basename3, isAbsolute as isAbsolute3, relative as relative2, resolve as resolve4, sep as sep2 } from "path";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT2, withAbortSignal as withAbortSignal3 } from "@earendil-works/chord/context";
-import { getOrThrow as getOrThrow2 } from "@earendil-works/pi-durable/env";
+import {
+  ExecutionError,
+  err,
+  getOrThrow as getOrThrow2
+} from "@earendil-works/pi-durable/env";
 import { Connection, LocalExecutionEnv, localDaemon } from "@earendil-works/pi-env";
 function isProtectedPath(path) {
   const name = basename3(path).toLowerCase();
@@ -5313,8 +5513,10 @@ class WorkspaceFiles {
   #waiting = new Set;
   #timer;
   limits;
-  constructor(limits = FILE_CACHE_LIMITS) {
+  #shell;
+  constructor(limits = FILE_CACHE_LIMITS, shell) {
     this.limits = limits;
+    this.#shell = shell;
     this.#timer = setInterval(() => {
       for (const [key, item] of this.#cache)
         if (!item.waiters && Date.now() - item.used >= this.limits.idleMs)
@@ -5333,20 +5535,31 @@ class WorkspaceFiles {
       queued: this.#waiting.size
     };
   }
-  env(cwd) {
+  shellStatus(options) {
+    return this.#shell?.status(options);
+  }
+  #open() {
     if (this.#closed)
       throw new Error("File environment closed");
     this.#connection ??= new Connection({ command: [localDaemon()] });
-    return new LocalExecutionEnv({
-      connection: this.#connection,
+    return this.#connection;
+  }
+  env(cwd) {
+    const options = {
+      connection: this.#open(),
       cwd,
       ...process.platform === "win32" ? { shellEnv: { PYTHONIOENCODING: "utf-8", PYTHONUTF8: "1" } } : {}
-    });
+    };
+    const shell = this.#shell?.status();
+    if (shell === undefined)
+      return new LocalExecutionEnv(options);
+    if (shell.kind === "found")
+      return new LocalExecutionEnv({ ...options, shellPath: shell.path });
+    return new ShellUnavailableEnv(options, windowsShellMessage(shell));
   }
   async#ready() {
     if (!this.#starting) {
-      this.env(process.cwd());
-      const connection = this.#connection;
+      const connection = this.#open();
       let timer;
       const work = Promise.race([
         connection.info().then(() => connection.session()),
@@ -5423,7 +5636,7 @@ class WorkspaceFiles {
           { path: item.root, recursive: true, exclude: { names: [".git"] } }
         ];
         const git = resolve4(item.root, ".git");
-        if (await stat2(git).then(() => true, () => false))
+        if (await stat3(git).then(() => true, () => false))
           targets.push({ path: git, recursive: true, exclude: { names: ["objects", "logs", "refs"] } });
         const result = await env.watch(targets, (change) => {
           for (const user of current.users) {
@@ -5531,7 +5744,7 @@ class WorkspaceFiles {
     const slash = query.lastIndexOf("/"), prefix = slash < 0 ? "" : query.slice(0, slash + 1), needle = query.slice(slash + 1);
     root = await realpath3(root);
     const base = await workspaceTarget(root, prefix);
-    if (!(await stat2(base)).isDirectory())
+    if (!(await stat3(base)).isDirectory())
       throw new Error("Workspace directory is unavailable.");
     return this.#withListing(root, base, signal, async (listing) => {
       const pattern = new RegExp([...needle].map((c) => c.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")).join(".*"), /[A-Z]/.test(needle) ? "" : "i");
@@ -5561,7 +5774,7 @@ class WorkspaceFiles {
     const clean = dir === "" ? "" : relativeQuery(dir).replace(/\/+$/, "");
     root = await realpath3(root);
     const target = await workspaceTarget(root, clean);
-    if (!(await stat2(target)).isDirectory())
+    if (!(await stat3(target)).isDirectory())
       throw new Error("Not a directory.");
     const prefix = clean === "" ? "" : `${clean}/`;
     return this.#withListing(root, root, signal, async (listing) => {
@@ -5603,7 +5816,7 @@ class WorkspaceFiles {
         throw new Error("File not found.");
       throw error;
     }
-    const info = await stat2(target);
+    const info = await stat3(target);
     if (!info.isFile())
       throw new Error("Not a file.");
     const base = { path: clean, size: info.size, mtimeMs: info.mtimeMs };
@@ -5706,8 +5919,9 @@ function cancellable(work, signal) {
       abort();
   });
 }
-var BROWSE_LIMITS, ENV_TEMPLATE, FILE_CACHE_LIMITS;
+var BROWSE_LIMITS, ENV_TEMPLATE, FILE_CACHE_LIMITS, ShellUnavailableEnv;
 var init_workspace_files = __esm(() => {
+  init_windows_shell();
   BROWSE_LIMITS = { children: 1000, readBytes: 512 * 1024 };
   ENV_TEMPLATE = /\.(example|sample|template)$/;
   FILE_CACHE_LIMITS = {
@@ -5722,6 +5936,18 @@ var init_workspace_files = __esm(() => {
     idleMs: 300000,
     concurrent: 2
   };
+  ShellUnavailableEnv = class ShellUnavailableEnv extends LocalExecutionEnv {
+    #message;
+    constructor(options, message) {
+      super(options);
+      this.#message = message;
+    }
+    async exec(command, options, context) {
+      if (typeof command === "string")
+        return err(new ExecutionError("shell_unavailable", this.#message));
+      return super.exec(command, options, context);
+    }
+  };
 });
 
 // packages/core/src/runtime.ts
@@ -5807,7 +6033,8 @@ async function createNekoRuntime(options = {}) {
     }));
     return modelInfoCache;
   };
-  const workspaceFiles = new WorkspaceFiles;
+  const shellResolver = options.shellResolver ?? (process.platform === "win32" ? createWindowsShellResolver({ configPath: options.shellPath }) : undefined);
+  const workspaceFiles = new WorkspaceFiles(undefined, shellResolver);
   const storage = options.storage === "memory" ? new MemoryStorage : await openNodeSqliteStorage(options.storagePath ?? DEFAULT_STORAGE_PATH);
   const registry = createRegistry();
   registry.install(createCodingTools({ images: await createNodePhotonImages() }));
@@ -6317,6 +6544,10 @@ async function createNekoRuntime(options = {}) {
     questions,
     closed: harness.closed,
     workspaceFiles,
+    shellStatus(call) {
+      const status = workspaceFiles.shellStatus(call);
+      return status === undefined ? undefined : summarizeWindowsShell(status);
+    },
     conversation,
     root: rootSession,
     submit: rootSession.submit,
@@ -6584,6 +6815,7 @@ var init_runtime = __esm(() => {
   init_deepseek();
   init_web_search();
   init_tavily();
+  init_windows_shell();
   init_workspace();
   init_workspace_files();
   DEFAULT_MODEL = { provider: "deepseek", modelId: "deepseek-flash" };
@@ -6670,6 +6902,7 @@ var init_src = __esm(() => {
   init_projection();
   init_frontmatter();
   init_queued();
+  init_rename_with_retry();
   init_runtime();
   init_search_providers();
   init_session_metadata();
@@ -6678,6 +6911,7 @@ var init_src = __esm(() => {
   init_todos();
   init_tool_approvals();
   init_user_questions();
+  init_windows_shell();
   init_workspace();
   init_workspace_files();
 });
@@ -6803,7 +7037,7 @@ function contract(name, def) {
   ]));
   return remote(name, { ...def, host: hostNamed(GATEWAY_HOST), variants });
 }
-var GATEWAY_HOST = "neko", rpc = (args, result) => [args, result], str, num, bool, nil, integer, nullableString, phase, level, thinking, model2, change, usage, image, skill, call, DelegationSchema, SubagentSummarySchema, jobStatus, JobSummarySchema, JobOutputSchema, QueuedInputSchema, WithdrawResultSchema, SteerResultSchema, TodoItemSchema, TodoListSchema, QuestionOptionSchema, questionStatus, QuestionSummarySchema, WorkspaceEntrySchema, WorkspaceDirSchema, WorkspaceFileSchema, ChangeSummarySchema, ChangedFileSchema, ChangeListSchema, ChangeOpSchema, ChangeDetailSchema, QuestionListSchema, QuestionRecordSchema, QuestionResponseSchema, ToolInteractionSchema, ChatViewSchema, SessionSummarySchema, DirectoryStateSchema, WorkspaceSummarySchema, WorkspaceStateSchema, credentialStatus, CredentialStateSchema, AttachmentSchema, chatInput, NekoSessionDirectory, NekoSessionManagement, resize, inputLimits, modelInfo, NekoModels, imageChunk, NekoSubagent, NekoChat, browse, page, NekoWorkspaces, provider, NekoCredentials, SearchSettingsStateSchema, NekoSearchSettings, contextSource, ContextSettingsStateSchema, nullable = (schema) => Type7.Union([schema, nil]), ContextSettingsPatchSchema, NekoContextSettings, defaultModelSource, DefaultModelStateSchema, NekoDefaultModel, FileCandidatesSchema, NekoWorkspaceFiles, marketSkill, preview, scope, installResult, NekoSkillMarket, ApplicationInfoSchema, NekoApplicationInfo;
+var GATEWAY_HOST = "neko", rpc = (args, result) => [args, result], str, num, bool, nil, integer, nullableString, phase, level, thinking, model2, change, usage, image, skill, call, DelegationSchema, SubagentSummarySchema, jobStatus, JobSummarySchema, JobOutputSchema, QueuedInputSchema, WithdrawResultSchema, SteerResultSchema, TodoItemSchema, TodoListSchema, QuestionOptionSchema, questionStatus, QuestionSummarySchema, WorkspaceEntrySchema, WorkspaceDirSchema, WorkspaceFileSchema, ChangeSummarySchema, ChangedFileSchema, ChangeListSchema, ChangeOpSchema, ChangeDetailSchema, QuestionListSchema, QuestionRecordSchema, QuestionResponseSchema, ToolInteractionSchema, ChatViewSchema, SessionSummarySchema, DirectoryStateSchema, WorkspaceSummarySchema, WorkspaceStateSchema, credentialStatus, CredentialStateSchema, AttachmentSchema, chatInput, NekoSessionDirectory, NekoSessionManagement, resize, inputLimits, modelInfo, NekoModels, imageChunk, NekoSubagent, NekoChat, browse, page, NekoWorkspaces, provider, NekoCredentials, SearchSettingsStateSchema, NekoSearchSettings, contextSource, ContextSettingsStateSchema, nullable = (schema) => Type7.Union([schema, nil]), ContextSettingsPatchSchema, NekoContextSettings, defaultModelSource, DefaultModelStateSchema, NekoDefaultModel, FileCandidatesSchema, NekoWorkspaceFiles, marketSkill, preview, scope, installResult, NekoSkillMarket, ShellStatusSchema, ApplicationInfoSchema, NekoApplicationInfo;
 var init_contract = __esm(() => {
   init_interactions();
   str = Type7.String();
@@ -7454,6 +7688,14 @@ var init_contract = __esm(() => {
       }
     }
   });
+  ShellStatusSchema = Type7.Union([
+    Type7.Object({ status: Type7.Literal("ready"), path: str, source: Type7.Enum(["config", "auto"]) }),
+    Type7.Object({
+      status: Type7.Literal("missing"),
+      reason: Type7.Enum(["not_found", "invalid_config"]),
+      detail: Type7.Optional(str)
+    })
+  ]);
   ApplicationInfoSchema = Type7.Object({
     runningVersion: str,
     installedVersion: nullableString,
@@ -7461,7 +7703,8 @@ var init_contract = __esm(() => {
     latestVersion: nullableString,
     checkedAt: Type7.Union([integer, nil]),
     checkState: Type7.Enum(["unknown", "checking", "ok", "failed", "development"]),
-    serverId: str
+    serverId: str,
+    shell: Type7.Optional(ShellStatusSchema)
   });
   NekoApplicationInfo = contract("neko.application-info", {
     version: 1,
@@ -22292,10 +22535,151 @@ function followTerminalTheme(ui, apply) {
 }
 var THEME_QUERY_TIMEOUT_MS = 100;
 
+// packages/tui/src/image-input.ts
+import { execFile as execFile2 } from "child_process";
+import { readFileSync as readFileSync2 } from "fs";
+import { readFile as readFile6, stat as stat4 } from "fs/promises";
+import { homedir as homedir6 } from "os";
+import { basename as basename5, join as join8, resolve as resolve5 } from "path";
+import { promisify as promisify2 } from "util";
+import { isKeyRelease as isKeyRelease4, isKeyRepeat as isKeyRepeat2, matchesKey as matchesKey8 } from "@earendil-works/pi-tui";
+function imagePaths(text, platform = process.platform) {
+  const paths = [];
+  let word = "", quote = "", escaped = false;
+  for (const c of text.trim()) {
+    if (escaped) {
+      word += c;
+      escaped = false;
+    } else if (c === "\\" && quote !== "'" && platform !== "win32") {
+      escaped = true;
+    } else if (quote) {
+      if (c === quote)
+        quote = "";
+      else
+        word += c;
+    } else if (c === '"' || c === "'")
+      quote = c;
+    else if (/\s/.test(c)) {
+      if (word) {
+        paths.push(word);
+        word = "";
+      }
+    } else
+      word += c;
+  }
+  if (quote || escaped)
+    return null;
+  if (word)
+    paths.push(word);
+  return paths.length && paths.every((p) => /\.(png|jpe?g|webp)$/i.test(p)) ? paths : null;
+}
+function expandHome(path, platform = process.platform) {
+  if (path.startsWith("~/") || platform === "win32" && path.startsWith("~\\"))
+    return join8(homedir6(), path.slice(2));
+  return path;
+}
+async function readImageFile(path, cwd, platform = process.platform) {
+  const full = resolve5(cwd, expandHome(path, platform));
+  const info = await stat4(full);
+  if (!info.isFile() || info.size > 20 * 1024 * 1024)
+    throw new Error("Image must be a file no larger than 20 MiB");
+  const bytes = await readFile6(full);
+  const after = await stat4(full);
+  if (bytes.length !== info.size || after.size !== info.size || after.mtimeMs !== info.mtimeMs)
+    throw new Error("Image changed while reading");
+  const mimeType = /\.png$/i.test(full) ? "image/png" : /\.webp$/i.test(full) ? "image/webp" : "image/jpeg";
+  return { name: basename5(full), mimeType, bytes };
+}
+async function command(file, args, encoding = "utf8", timeout = 2000) {
+  return (await exec(file, args, { timeout, maxBuffer: 30 * 1024 * 1024, encoding })).stdout;
+}
+async function clipboard(options = {}) {
+  const run = options.command ?? command;
+  const platform = options.platform ?? process.platform;
+  if (platform === "darwin") {
+    const files = await run("osascript", [
+      "-e",
+      `try
+set fs to the clipboard as \xABclass furl\xBB
+return POSIX path of fs
+on error
+return ""
+end try`
+    ]).catch(() => "");
+    if (String(files).trim())
+      return /\.(png|jpe?g|webp)$/i.test(String(files).trim()) ? { paths: [String(files).trim()] } : { text: String(files).trim() };
+    const image = String(await run("osascript", ["-e", `try
+return the clipboard as \xABclass PNGf\xBB
+on error
+return ""
+end try`]).catch(() => ""));
+    const hex = /\u00ABdata PNGf([0-9A-Fa-f]+)\u00BB/.exec(image)?.[1];
+    if (hex)
+      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(hex, "hex") } };
+    return { text: String(await run("pbpaste", [])) };
+  }
+  if (platform === "win32")
+    return windowsClipboard(run);
+  let windowsError;
+  if (platform === "linux" && (options.wsl ?? runningInWsl())) {
+    try {
+      return await windowsClipboard(run);
+    } catch (error) {
+      windowsError = error;
+    }
+  }
+  const wayland = options.wayland ?? !!process.env.WAYLAND_DISPLAY;
+  const tool = wayland ? "wl-paste" : "xclip";
+  try {
+    const bytes = await run(tool, wayland ? ["--type", "image/png"] : ["-selection", "clipboard", "-t", "image/png", "-o"], "buffer");
+    if (bytes.length)
+      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(bytes) } };
+  } catch {}
+  try {
+    return { text: String(await run(tool, wayland ? ["--no-newline"] : ["-selection", "clipboard", "-o"])) };
+  } catch (error) {
+    throw windowsError ?? error;
+  }
+}
+async function windowsClipboard(run) {
+  const value = String(await run("powershell.exe", ["-NoProfile", "-STA", "-Command", WINDOWS_CLIPBOARD_SCRIPT], "utf8", 8000));
+  if (value.startsWith("IMAGE:"))
+    return {
+      image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(value.slice(6).trim(), "base64") }
+    };
+  return { text: value.replace(/\r?\n$/, "") };
+}
+function runningInWsl() {
+  wslHost ??= process.platform === "linux" && (Boolean(process.env.WSL_DISTRO_NAME || process.env.WSL_INTEROP || process.env.WSLENV) || /microsoft|wsl/i.test(readFileOrEmpty("/proc/version")));
+  return wslHost;
+}
+function readFileOrEmpty(path) {
+  try {
+    return readFileSync2(path, "utf8");
+  } catch {
+    return "";
+  }
+}
+function clipboardShortcutKey(platform = process.platform, wsl = runningInWsl()) {
+  return platform === "win32" || platform === "linux" && wsl ? "alt+v" : "ctrl+v";
+}
+function isClipboardShortcut(data, platform = process.platform, wsl = runningInWsl()) {
+  return !isKeyRelease4(data) && !isKeyRepeat2(data) && matchesKey8(data, clipboardShortcutKey(platform, wsl));
+}
+var exec, WINDOWS_CLIPBOARD_SCRIPT, wslHost;
+var init_image_input = __esm(() => {
+  exec = promisify2(execFile2);
+  WINDOWS_CLIPBOARD_SCRIPT = [
+    "try{[Console]::OutputEncoding=[Text.UTF8Encoding]::new($false)}catch{}",
+    "Add-Type -AssemblyName System.Windows.Forms",
+    "$i=[Windows.Forms.Clipboard]::GetImage()",
+    'if($i){$m=New-Object IO.MemoryStream; $i.Save($m,[Drawing.Imaging.ImageFormat]::Png); "IMAGE:"+[Convert]::ToBase64String($m.ToArray());$i.Dispose();$m.Dispose()}else{Get-Clipboard -Raw}'
+  ].join("; ");
+});
+
 // packages/tui/src/export-command.ts
 import { open as open3, unlink as unlink2 } from "fs/promises";
-import { homedir as homedir6 } from "os";
-import { resolve as resolve5 } from "path";
+import { resolve as resolve6 } from "path";
 function parseExportArgs(input) {
   const words = [];
   let word = "";
@@ -22345,7 +22729,7 @@ async function exportToFile(input) {
   const format = input.path === undefined ? "markdown" : exportFormatFromPath(input.path);
   if (format === null)
     throw new Error("Unsupported export format: use a .md, .html or .json path");
-  const target = resolve5(input.cwd, input.path === undefined ? exportFileName(input.source.title, format, input.source.exportedAt) : input.path.startsWith("~/") ? homedir6() + input.path.slice(1) : input.path);
+  const target = resolve6(input.cwd, input.path === undefined ? exportFileName(input.source.title, format, input.source.exportedAt) : expandHome(input.path, input.platform));
   let handle;
   try {
     handle = await open3(target, "wx");
@@ -22374,6 +22758,7 @@ async function exportToFile(input) {
 var EXPORT_USAGE = "Usage: /export [path.md|path.html|path.json] [--thinking]";
 var init_export_command = __esm(() => {
   init_conversation_export();
+  init_image_input();
 });
 
 // packages/core/src/file-mentions.ts
@@ -22683,7 +23068,11 @@ var init_ws_listener = __esm(() => {
 async function connectNekoGateway(address, signal) {
   signal?.throwIfAborted();
   const link = address.transport === "unix" ? await createUnixLink(address.socketPath, signal) : createWsLink(address.url, signal);
-  const connection = createGatewayConnection(link, address.serverId);
+  return connectNekoGatewayLink(link, address.serverId, signal);
+}
+async function connectNekoGatewayLink(link, serverId, signal) {
+  signal?.throwIfAborted();
+  const connection = createGatewayConnection(link, serverId);
   const controller = new AbortController;
   const abort = () => controller.abort(signal?.reason);
   signal?.addEventListener("abort", abort, { once: true });
@@ -22732,8 +23121,8 @@ var init_principal = __esm(() => {
 
 // packages/gateway/src/mobile/store.ts
 import { randomBytes } from "crypto";
-import { chmod as chmod2, mkdir as mkdir5, readFile as readFile6, rename as rename3, rm as rm3, writeFile as writeFile3 } from "fs/promises";
-import { join as join8 } from "path";
+import { chmod as chmod2, mkdir as mkdir5, readFile as readFile7, rm as rm3, writeFile as writeFile3 } from "fs/promises";
+import { join as join9 } from "path";
 function defaultState() {
   return {
     formatVersion: MOBILE_STATE_FORMAT_VERSION,
@@ -22853,9 +23242,10 @@ async function writeFileAtomic(filePath, contents, mode) {
     await writeFile3(tempPath, contents, { mode });
     if (POSIX)
       await chmod2(tempPath, mode);
-    await rename3(tempPath, filePath);
-  } finally {
+    await renameWithRetry(tempPath, filePath);
+  } catch (error) {
     await rm3(tempPath, { force: true });
+    throw error;
   }
 }
 async function writeSecretFile(filePath, contents) {
@@ -22863,7 +23253,7 @@ async function writeSecretFile(filePath, contents) {
 }
 async function readSecretFile(filePath) {
   try {
-    return await readFile6(filePath, "utf8");
+    return await readFile7(filePath, "utf8");
   } catch (error) {
     if (isNotFound(error))
       return;
@@ -22873,7 +23263,7 @@ async function readSecretFile(filePath) {
 async function loadState(statePath) {
   let raw;
   try {
-    raw = await readFile6(statePath, "utf8");
+    raw = await readFile7(statePath, "utf8");
   } catch (error) {
     if (isNotFound(error))
       return freezeState(defaultState());
@@ -22897,21 +23287,21 @@ class MobileStore {
   queue = Promise.resolve();
   constructor(mobileDir, initial) {
     this.mobileDir = mobileDir;
-    this.tlsDir = join8(mobileDir, "tls");
-    this.statePath = join8(mobileDir, "state.json");
-    this.adminTokenPath = join8(mobileDir, "admin-token");
+    this.tlsDir = join9(mobileDir, "tls");
+    this.statePath = join9(mobileDir, "state.json");
+    this.adminTokenPath = join9(mobileDir, "admin-token");
     this.current = initial;
   }
   static async open(nekoDir) {
-    const mobileDir = join8(nekoDir, "mobile");
-    const tlsDir = join8(mobileDir, "tls");
+    const mobileDir = join9(nekoDir, "mobile");
+    const tlsDir = join9(mobileDir, "tls");
     await mkdir5(mobileDir, { recursive: true, mode: 448 });
     await mkdir5(tlsDir, { recursive: true, mode: 448 });
     if (POSIX) {
       await chmod2(mobileDir, 448);
       await chmod2(tlsDir, 448);
     }
-    return new MobileStore(mobileDir, await loadState(join8(mobileDir, "state.json")));
+    return new MobileStore(mobileDir, await loadState(join9(mobileDir, "state.json")));
   }
   getState() {
     return this.current;
@@ -23033,6 +23423,7 @@ class MobileStore {
 }
 var MOBILE_STATE_FORMAT_VERSION = 1, MOBILE_DEFAULT_PORT = 8323, MOBILE_ADMIN_TOKEN_BYTES = 32, POSIX, ADMIN_TOKEN_PATTERN, CREDENTIAL_HASH_PATTERN, tempCounter = 0;
 var init_store = __esm(() => {
+  init_src();
   POSIX = process.platform !== "win32";
   ADMIN_TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
   CREDENTIAL_HASH_PATTERN = /^[0-9a-fA-F]{64}$/;
@@ -41475,7 +41866,7 @@ import {
   randomBytes as randomBytes2,
   X509Certificate
 } from "crypto";
-import { join as join9 } from "path";
+import { join as join10 } from "path";
 function mobileCommonName(serverId) {
   return `neko-${serverId.slice(0, 8).toLowerCase()}.invalid`;
 }
@@ -41567,8 +41958,8 @@ class MobileCertificate {
     this.current = initial;
   }
   static async load(store, serverId) {
-    const certPath = join9(store.tlsDir, TLS_CERT_FILE);
-    const keyPath = join9(store.tlsDir, TLS_KEY_FILE);
+    const certPath = join10(store.tlsDir, TLS_CERT_FILE);
+    const keyPath = join10(store.tlsDir, TLS_KEY_FILE);
     const certPem = await readSecretFile(certPath);
     const keyPem = await readSecretFile(keyPath);
     if (certPem === undefined && keyPem === undefined) {
@@ -42098,10 +42489,10 @@ var init_relay = __esm(() => {
 });
 
 // packages/gateway/src/mobile/wsl.ts
-import { execFile as execFile2 } from "child_process";
-import { accessSync as accessSync2, constants as constants2, readFileSync as readFileSync2 } from "fs";
+import { execFile as execFile3 } from "child_process";
+import { accessSync as accessSync2, constants as constants2, readFileSync as readFileSync3 } from "fs";
 import { networkInterfaces as networkInterfaces2 } from "os";
-import { delimiter, join as join10 } from "path";
+import { delimiter, join as join11 } from "path";
 function detectWsl(overrides = {}) {
   const deps = { ...defaultProbeDeps, ...overrides };
   if (deps.platform !== "linux")
@@ -42112,7 +42503,7 @@ function detectWsl(overrides = {}) {
   if (!inWsl)
     return;
   const candidates = [
-    ...(env.PATH ?? "").split(delimiter).filter((dir) => dir !== "").map((dir) => join10(dir, "powershell.exe")),
+    ...(env.PATH ?? "").split(delimiter).filter((dir) => dir !== "").map((dir) => join11(dir, "powershell.exe")),
     POWERSHELL_FALLBACK
   ];
   return { powershell: candidates.find((candidate) => deps.isExecutable(candidate)) };
@@ -42201,7 +42592,7 @@ function primaryWslAddress(interfaces = networkInterfaces2()) {
   return eth0?.address ?? wslOwnAddresses(interfaces)[0];
 }
 var POWERSHELL_FALLBACK = "/mnt/c/Windows/System32/WindowsPowerShell/v1.0/powershell.exe", defaultProbeDeps, WINDOWS_ADDRESSES_SCRIPT, WSL_ADAPTER_PATTERN, runPowerShell = (powershell, script, timeoutMs) => new Promise((resolve, reject) => {
-  execFile2(powershell, ["-NoProfile", "-NonInteractive", "-Command", script], { timeout: timeoutMs, windowsHide: true, maxBuffer: 1024 * 1024, encoding: "utf8" }, (error, stdout) => error ? reject(error) : resolve(stdout));
+  execFile3(powershell, ["-NoProfile", "-NonInteractive", "-Command", script], { timeout: timeoutMs, windowsHide: true, maxBuffer: 1024 * 1024, encoding: "utf8" }, (error, stdout) => error ? reject(error) : resolve(stdout));
 });
 var init_wsl = __esm(() => {
   init_network();
@@ -42210,7 +42601,7 @@ var init_wsl = __esm(() => {
     env: process.env,
     readProcVersion() {
       try {
-        return readFileSync2("/proc/version", "utf8");
+        return readFileSync3("/proc/version", "utf8");
       } catch {
         return;
       }
@@ -42282,6 +42673,10 @@ function toMessage(error) {
   }
   return String(error);
 }
+function normalizeLocalAddress(address) {
+  const mapped = address?.startsWith("::ffff:") ? address.slice("::ffff:".length) : undefined;
+  return mapped !== undefined && isIpv4Literal(mapped) ? mapped : address;
+}
 
 class MobileGateway {
   serverId;
@@ -42610,11 +43005,12 @@ class MobileGateway {
       connection.sendNotification(method, params);
   }
   advertisedAddress(localAddress) {
+    const normalized = normalizeLocalAddress(localAddress);
     const state = this.stateValue;
-    if (state.status === "listening" && state.mode === "wsl-relay" && localAddress === state.bindAddress) {
+    if (state.status === "listening" && state.mode === "wsl-relay" && normalized === state.bindAddress) {
       return state.address;
     }
-    return localAddress;
+    return normalized;
   }
   requireStore() {
     if (this.storeHandle === undefined)
@@ -42872,10 +43268,10 @@ var init_listener = __esm(() => {
 });
 
 // packages/gateway/src/port-file.ts
-import { readFile as readFile7, rm as rm4, writeFile as writeFile4 } from "fs/promises";
-import { join as join11 } from "path";
+import { readFile as readFile8, rm as rm4, writeFile as writeFile4 } from "fs/promises";
+import { join as join12 } from "path";
 function gatewayPortFilePath(nekoDir, serverId) {
-  return join11(nekoDir, `${serverId}.port`);
+  return join12(nekoDir, `${serverId}.port`);
 }
 async function writeGatewayPortFile(nekoDir, serverId, wsUrl) {
   await writeFile4(gatewayPortFilePath(nekoDir, serverId), `${wsUrl}
@@ -42884,7 +43280,7 @@ async function writeGatewayPortFile(nekoDir, serverId, wsUrl) {
 async function readGatewayPortFile(nekoDir, serverId) {
   let content;
   try {
-    content = await readFile7(gatewayPortFilePath(nekoDir, serverId), "utf8");
+    content = await readFile8(gatewayPortFilePath(nekoDir, serverId), "utf8");
   } catch {
     return;
   }
@@ -43231,7 +43627,7 @@ var init_subagent_host = __esm(() => {
 
 // packages/gateway/src/session-host.ts
 import { open as open4 } from "fs/promises";
-import { basename as basename5, extname } from "path";
+import { basename as basename6, extname } from "path";
 import {
   ChordError as ChordError4,
   local as local2,
@@ -43426,7 +43822,7 @@ function serveSessions(host, runtime, context) {
           if (!info.isFile())
             throw new Error("Image must be a file");
           ctx.signal?.throwIfAborted();
-          id = uploads.value.begin({ name: basename5(target), mimeType, size: info.size });
+          id = uploads.value.begin({ name: basename6(target), mimeType, size: info.size });
           let offset = 0;
           while (offset < info.size) {
             ctx.signal?.throwIfAborted();
@@ -43443,9 +43839,9 @@ function serveSessions(host, runtime, context) {
           ctx.signal?.throwIfAborted();
           uploads.value.finish(id);
           const raw = uploads.value.resolve([id])[0];
-          await prepareImage(Buffer.from(raw.content.data, "base64"), mimeType, basename5(target), model);
+          await prepareImage(Buffer.from(raw.content.data, "base64"), mimeType, basename6(target), model);
           ctx.signal?.throwIfAborted();
-          return { id, name: basename5(target) };
+          return { id, name: basename6(target) };
         } catch (error) {
           if (id)
             uploads.value.release(id);
@@ -43639,7 +44035,7 @@ function strFromU8(dat, latin1) {
   } else {
     var _a = dutf8(dat), { s, r } = _a;
     if (r.length)
-      err(8);
+      err2(8);
     return s;
   }
 }
@@ -43648,7 +44044,7 @@ function unzipSync(data, opts) {
   var e = data.length - 22;
   for (;b4(data, e) != 101010256; --e) {
     if (!e || data.length - e > 65558)
-      err(13);
+      err2(13);
   }
   var c = b2(data, e + 8);
   if (!c)
@@ -43678,7 +44074,7 @@ function unzipSync(data, opts) {
       else if (c_2 == 8)
         files[fn] = inflateSync(data.subarray(b, b + sc), { out: new u8(su) });
       else
-        err(14, "unknown compression type " + c_2);
+        err2(14, "unknown compression type " + c_2);
     }
   }
   return files;
@@ -43751,11 +44147,11 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
   if (e == null || e > v.length)
     e = v.length;
   return new u8(v.subarray(s, e));
-}, ec, err = function(ind, msg, nt) {
+}, ec, err2 = function(ind, msg, nt) {
   var e = new Error(msg || ec[ind]);
   e.code = ind;
   if (Error.captureStackTrace)
-    Error.captureStackTrace(e, err);
+    Error.captureStackTrace(e, err2);
   if (!nt)
     throw e;
   return e;
@@ -43787,7 +44183,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         var s = shft(pos) + 4, l = dat[s - 4] | dat[s - 3] << 8, t = s + l;
         if (t > sl) {
           if (noSt)
-            err(0);
+            err2(0);
           break;
         }
         if (resize)
@@ -43833,10 +44229,10 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         lm = hMap(lt, lbt, 1);
         dm = hMap(dt, dbt, 1);
       } else
-        err(1);
+        err2(1);
       if (pos > tbts) {
         if (noSt)
-          err(0);
+          err2(0);
         break;
       }
     }
@@ -43849,11 +44245,11 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
       pos += c & 15;
       if (pos > tbts) {
         if (noSt)
-          err(0);
+          err2(0);
         break;
       }
       if (!c)
-        err(2);
+        err2(2);
       if (sym < 256)
         buf[bt++] = sym;
       else if (sym == 256) {
@@ -43868,7 +44264,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         }
         var d = dm[bits16(dat, pos) & dms], dsym = d >> 4;
         if (!d)
-          err(3);
+          err2(3);
         pos += d & 15;
         var dt = fd[dsym];
         if (dsym > 3) {
@@ -43877,7 +44273,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         }
         if (pos > tbts) {
           if (noSt)
-            err(0);
+            err2(0);
           break;
         }
         if (resize)
@@ -43886,7 +44282,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
         if (bt < dt) {
           var shift = dl - dt, dend = Math.min(dt, end);
           if (shift + bt < 0)
-            err(3);
+            err2(3);
           for (;bt < dend; ++bt)
             buf[bt] = dict[shift + bt];
         }
@@ -43941,7 +44337,7 @@ var require2, _a, Worker2, isMarkedAsUntransferable, u8, u16, i32, fleb, fdeb, c
       }
     }
     if (z < 2)
-      err(13);
+      err2(13);
   }
   return [sc, su, off, 0];
 };
@@ -44010,13 +44406,14 @@ var init_esm = __esm(() => {
 
 // packages/gateway/src/skill-market.ts
 import { createHash as createHash6, randomUUID as randomUUID4 } from "crypto";
-import { mkdir as mkdir6, readdir as readdir2, rename as rename4, rm as rm5, stat as stat3, writeFile as writeFile5 } from "fs/promises";
+import { mkdir as mkdir6, readdir as readdir2, rm as rm5, stat as stat5, writeFile as writeFile5 } from "fs/promises";
 import { homedir as homedir7 } from "os";
-import { dirname as dirname8, join as join12 } from "path";
+import { dirname as dirname8, join as join13 } from "path";
 function createSkillMarketClient(options) {
   const home = options.home ?? homedir7();
   const fetchImpl = options.fetchImpl ?? fetch;
   const now = options.now ?? Date.now;
+  const placeRename = options.renameImpl;
   let base;
   try {
     base = new URL(options.marketUrl);
@@ -44121,6 +44518,8 @@ function createSkillMarketClient(options) {
       throw new SkillMarketError("market_unavailable", "Project-scope install needs a workspaceRoot");
     return projectSkillsDir(workspaceRoot);
   };
+  const BACKUP_PREFIX = ".bak-";
+  const UUID_LENGTH = 36;
   const sweepTempDirs = async (skillsDir) => {
     const parent = dirname8(skillsDir);
     let names = [];
@@ -44129,12 +44528,27 @@ function createSkillMarketClient(options) {
     } catch {
       return;
     }
-    await Promise.all(names.filter((n) => n.startsWith(".tmp-")).map((n) => rm5(join12(parent, n), { recursive: true, force: true }).catch(() => {})));
+    await Promise.all(names.filter((n) => n.startsWith(".tmp-")).map((n) => rm5(join13(parent, n), { recursive: true, force: true }).catch(() => {})));
+    for (const n of names.filter((n) => n.startsWith(BACKUP_PREFIX))) {
+      const backup = join13(parent, n);
+      const skill = n.slice(BACKUP_PREFIX.length + UUID_LENGTH + 1);
+      if (skill === "" || skill.includes("/") || skill.includes("\\") || skill === "." || skill === "..")
+        continue;
+      const target = join13(skillsDir, skill);
+      if (await stat5(target).catch(() => {
+        return;
+      }) === undefined) {
+        await mkdir6(skillsDir, { recursive: true }).catch(() => {});
+        await renameWithRetry(backup, target).catch(() => {});
+      } else {
+        await rm5(backup, { recursive: true, force: true }).catch(() => {});
+      }
+    }
   };
   const install = async ({ name, scope, workspaceRoot, overwrite }) => {
     const skillsDir = skillsDirFor(scope, workspaceRoot);
-    const target = join12(skillsDir, name);
-    const exists = await stat3(target).catch(() => {
+    const target = join13(skillsDir, name);
+    const exists = await stat5(target).catch(() => {
       return;
     }) !== undefined;
     if (exists && overwrite !== true)
@@ -44142,24 +44556,34 @@ function createSkillMarketClient(options) {
     const skill = await detail(name);
     const files = unpack(skill, await download(skill));
     await sweepTempDirs(skillsDir);
-    const temp = join12(dirname8(skillsDir), `.tmp-${randomUUID4()}`);
+    const temp = join13(dirname8(skillsDir), `.tmp-${randomUUID4()}`);
     try {
       for (const [relative, bytes] of files) {
-        const dest = join12(temp, ...relative.split("/"));
+        const dest = join13(temp, ...relative.split("/"));
         await mkdir6(dirname8(dest), { recursive: true });
         await writeFile5(dest, bytes);
       }
-      if (exists)
-        await rm5(target, { recursive: true, force: true });
       await mkdir6(skillsDir, { recursive: true });
-      await rename4(temp, target);
+      if (exists) {
+        const backup = join13(dirname8(skillsDir), `${BACKUP_PREFIX}${randomUUID4()}-${name}`);
+        await renameWithRetry(target, backup);
+        try {
+          await renameWithRetry(temp, target, placeRename ? { rename: placeRename } : {});
+        } catch (error) {
+          await renameWithRetry(backup, target).catch(() => {});
+          throw error;
+        }
+        await rm5(backup, { recursive: true, force: true }).catch(() => {});
+      } else {
+        await renameWithRetry(temp, target, placeRename ? { rename: placeRename } : {});
+      }
     } finally {
       await rm5(temp, { recursive: true, force: true }).catch(() => {});
     }
     let shadowedBy;
     if (scope === "user" && workspaceRoot !== undefined && workspaceRoot !== "") {
-      const projectDir = join12(projectSkillsDir(workspaceRoot), name);
-      if (await stat3(projectDir).catch(() => {
+      const projectDir = join13(projectSkillsDir(workspaceRoot), name);
+      if (await stat5(projectDir).catch(() => {
         return;
       }) !== undefined)
         shadowedBy = "project";
@@ -44168,8 +44592,8 @@ function createSkillMarketClient(options) {
   };
   const uninstall = async ({ name, scope, workspaceRoot }) => {
     const skillsDir = skillsDirFor(scope, workspaceRoot);
-    const target = join12(skillsDir, name);
-    if (await stat3(target).catch(() => {
+    const target = join13(skillsDir, name);
+    if (await stat5(target).catch(() => {
       return;
     }) === undefined)
       throw new SkillMarketError("skill_not_installed", `Skill ${name} is not installed at ${scope} level`);
@@ -44200,7 +44624,7 @@ function createSkillMarketClient(options) {
     uninstall
   };
 }
-var SkillMarketError, CATALOG_TTL_MS = 60000, ZIP_CACHE_MAX = 16, MAX_PACKAGE_BYTES, userSkillsDir2 = (home) => join12(home, ".agents", "skills"), projectSkillsDir = (workspaceRoot) => join12(workspaceRoot, ".agents", "skills"), activeLevelOf = (state) => state.project ? "project" : state.user ? "user" : state.builtin ? "builtin" : null, normalizeEntry = (raw) => {
+var SkillMarketError, CATALOG_TTL_MS = 60000, ZIP_CACHE_MAX = 16, MAX_PACKAGE_BYTES, userSkillsDir2 = (home) => join13(home, ".agents", "skills"), projectSkillsDir = (workspaceRoot) => join13(workspaceRoot, ".agents", "skills"), activeLevelOf = (state) => state.project ? "project" : state.user ? "user" : state.builtin ? "builtin" : null, normalizeEntry = (raw) => {
   const row = raw ?? {};
   const metadata = row.metadata;
   const source = metadata !== null && typeof metadata === "object" ? metadata.source : undefined;
@@ -44232,8 +44656,8 @@ var init_skill_market = __esm(() => {
 
 // packages/gateway/src/workspaces.ts
 import { constants as constants3 } from "fs";
-import { access, readdir as readdir3, stat as stat4 } from "fs/promises";
-import { dirname as dirname9, isAbsolute as isAbsolute4, join as join13 } from "path";
+import { access, readdir as readdir3, stat as stat6 } from "fs/promises";
+import { dirname as dirname9, isAbsolute as isAbsolute4, join as join14 } from "path";
 async function browseWorkspaces(options) {
   const requested = options.path.replace(/^\/+([A-Za-z]:[\\/])/, "$1");
   if (process.platform === "win32" && (requested === "/" || requested === "\\")) {
@@ -44260,11 +44684,11 @@ async function browseWorkspaces(options) {
   let next = offset;
   for (;next < entries.length && directories.length < 100; next++) {
     const entry = entries[next];
-    const target = join13(path, entry.name);
+    const target = join14(path, entry.name);
     if (!entry.isDirectory() && !entry.isSymbolicLink())
       continue;
     try {
-      if (!(await stat4(target)).isDirectory())
+      if (!(await stat6(target)).isDirectory())
         continue;
       await access(target, constants3.R_OK | constants3.X_OK);
       directories.push({ name: entry.name, path: target });
@@ -44303,12 +44727,15 @@ async function createNekoServerServices(options) {
   const updates = new UpdateChecker(options.updates);
   await updates.local();
   const updateListeners = new Set;
-  const info = (value) => ({ ...value, serverId: options.serverId });
-  let published = JSON.stringify(updates.state), closed = false;
+  const info = (value) => {
+    const shell = runtime.shellStatus();
+    return { ...value, serverId: options.serverId, ...shell === undefined ? {} : { shell } };
+  };
+  let published = JSON.stringify(info(updates.state)), closed = false;
   const publishUpdates = () => {
     if (closed)
       return;
-    const next = JSON.stringify(updates.state);
+    const next = JSON.stringify(info(updates.state));
     if (next === published)
       return;
     published = next;
@@ -44327,6 +44754,7 @@ async function createNekoServerServices(options) {
       variant: "ready",
       info: current,
       check: async () => {
+        runtime.shellStatus({ refresh: true });
         await updates.check(true);
         publishUpdates();
         return info(updates.state);
@@ -44637,8 +45065,8 @@ var init_server_services = __esm(() => {
 
 // packages/gateway/src/gateway.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { mkdir as mkdir7, readFile as readFile8, writeFile as writeFile6 } from "fs/promises";
-import { basename as basename6, dirname as dirname10, join as join14 } from "path";
+import { mkdir as mkdir7, readFile as readFile9, writeFile as writeFile6 } from "fs/promises";
+import { basename as basename7, dirname as dirname10, join as join15 } from "path";
 import { createHost as createHost2 } from "@earendil-works/chord";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT4 } from "@earendil-works/chord/context";
 async function startGateway(options = {}) {
@@ -44651,7 +45079,7 @@ async function startGateway(options = {}) {
   const marketUrl = options.marketUrl ?? fileConfig.skills?.marketUrl ?? DEFAULT_SKILL_MARKET_URL;
   const nekoDir = dirname10(storagePath);
   const serverId = options.serverId ?? await loadOrCreateServerId(nekoDir);
-  const socketPath = options.socketPath !== undefined ? options.socketPath : fileConfig.gateway?.socketPath !== undefined ? fileConfig.gateway.socketPath : process.platform === "win32" ? null : join14(nekoDir, `${serverId}.sock`);
+  const socketPath = options.socketPath !== undefined ? options.socketPath : fileConfig.gateway?.socketPath !== undefined ? fileConfig.gateway.socketPath : process.platform === "win32" ? null : join15(nekoDir, `${serverId}.sock`);
   const runtime = await createNekoRuntime({
     context,
     onReport: (error) => options.onError?.(error instanceof Error ? error : new Error(String(error))),
@@ -44667,7 +45095,9 @@ async function startGateway(options = {}) {
     ...options.cwd !== undefined ? { cwd: options.cwd } : {},
     ...options.providers !== undefined ? { providers: options.providers } : {},
     ...options.extensions !== undefined ? { extensions: options.extensions } : {},
-    ...options.promptHome !== undefined ? { promptHome: options.promptHome } : {}
+    ...options.promptHome !== undefined ? { promptHome: options.promptHome } : {},
+    ...fileConfig.shell?.path !== undefined ? { shellPath: fileConfig.shell.path } : {},
+    ...options.shellResolver !== undefined ? { shellResolver: options.shellResolver } : {}
   });
   try {
     return await bindGateway(runtime, {
@@ -44682,6 +45112,7 @@ async function startGateway(options = {}) {
       updates: options.updates,
       updateIntervalMs: options.updateIntervalMs,
       mobileServerName: options.mobileServerName,
+      mobileNetwork: options.mobileNetwork,
       onError: options.onError
     });
   } catch (error) {
@@ -44716,12 +45147,13 @@ async function bindGateway(runtime, options) {
     wsListener = createWsListener({ host, port, onError: options.onError });
     listeners.push(wsListener);
   }
+  const acceptLocal = (link) => chord.accept(link, {
+    principal: { kind: "local", connectionId: randomUUID6() },
+    onProtocolMismatch: ({ peer }) => options.onError?.(new Error(`Rejected a client on Chord protocol ${peer ?? "unknown"}; restart or update it.`))
+  });
   try {
     for (const listener of listeners)
-      await listener.start((link) => chord.accept(link, {
-        principal: { kind: "local", connectionId: randomUUID6() },
-        onProtocolMismatch: ({ peer }) => options.onError?.(new Error(`Rejected a client on Chord protocol ${peer ?? "unknown"}; restart or update it.`))
-      }));
+      await listener.start(acceptLocal);
   } catch (error) {
     await Promise.allSettled(listeners.map((listener) => listener.close()));
     await chord.close();
@@ -44737,6 +45169,7 @@ async function bindGateway(runtime, options) {
     serverId,
     serverName: options.mobileServerName,
     onError: options.onError,
+    network: options.mobileNetwork,
     chord: {
       accept: (link, acceptOptions) => chord.accept(link, acceptOptions),
       invalidatePrincipal: (match) => chord.invalidatePrincipal(match)
@@ -44761,6 +45194,9 @@ async function bindGateway(runtime, options) {
     port: wsListener?.port,
     runtime,
     mobile,
+    accept(link) {
+      acceptLocal(link);
+    },
     async close() {
       if (closing)
         return closing;
@@ -44801,16 +45237,16 @@ ${connectHint}`);
   return error instanceof Error ? error : new Error(message);
 }
 function serverIdFromSocketPath(socketPath) {
-  const name = basename6(socketPath);
+  const name = basename7(socketPath);
   if (!name.endsWith(".sock"))
     return;
   const candidate = name.slice(0, -".sock".length);
   return isServerId(candidate) ? candidate : undefined;
 }
 async function loadOrCreateServerId(nekoDir) {
-  const file = join14(nekoDir, SERVER_ID_FILENAME);
+  const file = join15(nekoDir, SERVER_ID_FILENAME);
   try {
-    const existing = (await readFile8(file, "utf8")).trim();
+    const existing = (await readFile9(file, "utf8")).trim();
     if (existing !== "")
       return existing;
   } catch {}
@@ -44849,10 +45285,11 @@ function gatewayCommand(args) {
 async function stopGatewayProcess(child, options = {}) {
   if (child.pid === undefined || child.exitCode !== null || child.signalCode !== null)
     return;
+  const viaStdin = options.viaStdin === true && child.stdin != null;
   await new Promise((resolve) => {
     let forcedTimer;
     const timer = setTimeout(() => {
-      child.kill("SIGKILL");
+      child.kill(viaStdin ? undefined : "SIGKILL");
       forcedTimer = setTimeout(resolve, options.forcedMs ?? FORCED_STOP_MS);
     }, options.gracefulMs ?? GRACEFUL_STOP_MS);
     child.once("exit", () => {
@@ -44860,7 +45297,10 @@ async function stopGatewayProcess(child, options = {}) {
       clearTimeout(forcedTimer);
       resolve();
     });
-    child.kill("SIGTERM");
+    if (viaStdin)
+      child.stdin?.end();
+    else
+      child.kill("SIGTERM");
   });
 }
 var GRACEFUL_STOP_MS = 3000, FORCED_STOP_MS = 2000;
@@ -44890,14 +45330,15 @@ function installShutdown(options = {}) {
       exit(1);
     });
   };
-  const onSignal = () => {
+  const begin = (reason) => {
     if (controller.signal.aborted) {
       options.log?.("\u518D\u6B21\u6536\u5230\u7EC8\u6B62\u4FE1\u53F7\uFF0C\u5F3A\u5236\u9000\u51FA\u3002");
       exit(130);
       return;
     }
-    options.log?.(`
-\u6B63\u5728\u5173\u95ED\u2026`);
+    options.log?.(reason === undefined ? `
+\u6B63\u5728\u5173\u95ED\u2026` : `
+\u6B63\u5728\u5173\u95ED\uFF08${reason}\uFF09\u2026`);
     controller.abort();
     timer = setTimeout(() => {
       options.log?.("\u5173\u95ED\u8D85\u65F6\uFF0C\u5F3A\u5236\u9000\u51FA\u3002");
@@ -44906,6 +45347,7 @@ function installShutdown(options = {}) {
     timer.unref?.();
     runCleanup();
   };
+  const onSignal = () => begin(undefined);
   const installed = [];
   for (const signal of shutdownSignals(proc.platform)) {
     try {
@@ -44920,6 +45362,9 @@ function installShutdown(options = {}) {
       if (controller.signal.aborted)
         runCleanup();
     },
+    trigger(reason) {
+      begin(reason);
+    },
     dispose() {
       clearTimeout(timer);
       for (const signal of installed)
@@ -44945,13 +45390,13 @@ var init_src2 = __esm(() => {
 
 // packages/tui/src/gateway.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
-import { basename as basename7, dirname as dirname11, join as join15 } from "path";
+import { existsSync as existsSync3, readFileSync as readFileSync4 } from "fs";
+import { basename as basename8, dirname as dirname11, join as join16 } from "path";
 async function connectToGateway(options = {}) {
   const config = loadNekoConfig(options.configDir);
   const storagePath = options.storagePath ?? config.storagePath ?? DEFAULT_STORAGE_PATH;
   const nekoDir = dirname11(storagePath);
-  const fileServerId = readServerId(join15(nekoDir, SERVER_ID_FILENAME2));
+  const fileServerId = readServerId(join16(nekoDir, SERVER_ID_FILENAME2));
   const platform = options.platform ?? process.platform;
   if (platform === "win32") {
     if (fileServerId !== undefined) {
@@ -44968,8 +45413,8 @@ async function connectToGateway(options = {}) {
     }
     return spawnAndConnect({ ...options, platform, storagePath, socketPath: undefined, nekoDir, fileServerId });
   }
-  const socketPath = options.socketPath ?? config.gateway?.socketPath ?? (fileServerId !== undefined ? join15(nekoDir, `${fileServerId}.sock`) : undefined);
-  const serverIdFor = (path) => fileServerId ?? serverIdFromSocketPath2(path) ?? readServerId(join15(nekoDir, SERVER_ID_FILENAME2));
+  const socketPath = options.socketPath ?? config.gateway?.socketPath ?? (fileServerId !== undefined ? join16(nekoDir, `${fileServerId}.sock`) : undefined);
+  const serverIdFor = (path) => fileServerId ?? serverIdFromSocketPath2(path) ?? readServerId(join16(nekoDir, SERVER_ID_FILENAME2));
   if (socketPath !== undefined && existsSync3(socketPath)) {
     const serverId = serverIdFor(socketPath);
     if (serverId !== undefined) {
@@ -44986,7 +45431,9 @@ async function connectToGateway(options = {}) {
 }
 async function spawnAndConnect(plan) {
   const command = gatewayCommand(gatewayArgs(plan));
-  const child = spawn3(command.binary, command.args, { stdio: ["ignore", "pipe", "pipe"] });
+  const child = spawn3(command.binary, command.args, {
+    stdio: [plan.platform === "win32" ? "pipe" : "ignore", "pipe", "pipe"]
+  });
   const outputTail = captureOutput(child);
   let spawnError;
   child.on("error", (error) => {
@@ -44995,7 +45442,7 @@ async function spawnAndConnect(plan) {
   try {
     return await connectSpawned(plan, child, outputTail, () => spawnError);
   } catch (error) {
-    await stopGatewayProcess(child);
+    await stopGatewayProcess(child, { viaStdin: plan.platform === "win32" });
     throw error;
   }
 }
@@ -45003,7 +45450,7 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
   const timeoutMs = plan.spawnTimeoutMs ?? 20000;
   if (plan.platform === "win32") {
     const timeoutAt = Date.now() + timeoutMs;
-    const serverId = plan.fileServerId ?? await waitForValue(() => readServerId(join15(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
+    const serverId = plan.fileServerId ?? await waitForValue(() => readServerId(join16(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
     let lastError = new Error("Gateway port file unavailable");
     while (Date.now() < timeoutAt) {
       if (child.exitCode !== null || child.signalCode !== null || spawnError() !== undefined) {
@@ -45024,7 +45471,7 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
           spawned: true,
           async close() {
             await client.close().catch(() => {});
-            await stopGatewayProcess(child);
+            await stopGatewayProcess(child, { viaStdin: plan.platform === "win32" });
             await removeGatewayPortFile(plan.nekoDir, serverId).catch(() => {});
           }
         };
@@ -45040,11 +45487,11 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
   }
   let socketPath = plan.socketPath;
   if (socketPath === undefined) {
-    const generated = await waitForValue(() => readServerId(join15(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
-    socketPath = join15(plan.nekoDir, `${generated}.sock`);
+    const generated = await waitForValue(() => readServerId(join16(plan.nekoDir, SERVER_ID_FILENAME2)), "gateway serverId file", timeoutMs, child, outputTail, spawnError);
+    socketPath = join16(plan.nekoDir, `${generated}.sock`);
   }
   await waitForValue(() => existsSync3(socketPath) ? true : undefined, `gateway ready (socket: ${socketPath})`, timeoutMs, child, outputTail, spawnError);
-  const serverId = plan.fileServerId ?? serverIdFromSocketPath2(socketPath) ?? readServerId(join15(plan.nekoDir, SERVER_ID_FILENAME2));
+  const serverId = plan.fileServerId ?? serverIdFromSocketPath2(socketPath) ?? readServerId(join16(plan.nekoDir, SERVER_ID_FILENAME2));
   if (serverId === undefined) {
     throw new Error(`Cannot determine gateway serverId (socket: ${socketPath})`);
   }
@@ -45061,7 +45508,7 @@ async function connectSpawned(plan, child, outputTail, spawnError) {
         spawned: true,
         async close() {
           await client.close().catch(() => {});
-          await stopGatewayProcess(child);
+          await stopGatewayProcess(child, { viaStdin: plan.platform === "win32" });
         }
       };
     } catch (error) {
@@ -45078,6 +45525,7 @@ function gatewayArgs(plan) {
   if (plan.platform === "win32") {
     return [
       "--no-socket",
+      "--stop-on-stdin",
       "--storage",
       plan.storagePath,
       ...plan.credentialsPath ? ["--credentials", plan.credentialsPath] : [],
@@ -45096,14 +45544,14 @@ function gatewayArgs(plan) {
 }
 function readServerId(file) {
   try {
-    const value = readFileSync3(file, "utf8").trim();
+    const value = readFileSync4(file, "utf8").trim();
     return isServerId(value) ? value : undefined;
   } catch {
     return;
   }
 }
 function serverIdFromSocketPath2(socketPath) {
-  const name = basename7(socketPath);
+  const name = basename8(socketPath);
   if (!name.endsWith(".sock"))
     return;
   const candidate = name.slice(0, -".sock".length);
@@ -45175,8 +45623,8 @@ var init_gateway2 = __esm(() => {
 });
 
 // packages/tui/src/help-ui.ts
-import { getKeybindings, matchesKey as matchesKey8, TUI_KEYBINDINGS, wrapTextWithAnsi as wrapTextWithAnsi4 } from "@earendil-works/pi-tui";
-function helpLines(platform = process.platform) {
+import { getKeybindings, matchesKey as matchesKey9, TUI_KEYBINDINGS, wrapTextWithAnsi as wrapTextWithAnsi4 } from "@earendil-works/pi-tui";
+function helpLines(platform = process.platform, wsl = runningInWsl()) {
   const rows = [];
   const section = (title, hints) => {
     rows.push(theme.accent(title), ...hints.map(([key, description]) => shortcutHints([key, description])), "");
@@ -45189,7 +45637,7 @@ function helpLines(platform = process.platform) {
     ["Ctrl+C", "Stop while running; exit when idle"],
     ["Ctrl+S", "Open sessions"],
     ["Ctrl+O", "Open or close the assistant's question"],
-    [platform === "win32" ? "Alt+V" : "Ctrl+V", "Paste clipboard image or text"],
+    [keyLabel(clipboardShortcutKey(platform, wsl)), "Paste clipboard image or text"],
     ["/", "Complete commands"],
     ["@", "Complete workspace files"],
     ["/skill:", "Complete installed skills"]
@@ -45308,13 +45756,13 @@ class HelpDetail {
     this.#offset = Math.max(0, Math.min(this.#max, this.#offset + delta));
   }
   handleKey(data) {
-    if (matchesKey8(data, "up"))
+    if (matchesKey9(data, "up"))
       this.scroll(-1);
-    else if (matchesKey8(data, "down"))
+    else if (matchesKey9(data, "down"))
       this.scroll(1);
-    else if (matchesKey8(data, "pageUp"))
+    else if (matchesKey9(data, "pageUp"))
       this.scroll(-this.#page);
-    else if (matchesKey8(data, "pageDown"))
+    else if (matchesKey9(data, "pageDown"))
       this.scroll(this.#page);
     else
       return false;
@@ -45331,117 +45779,11 @@ class HelpDetail {
 var keyLabel = (key) => key.split("+").map((part) => ({ escape: "Esc", pageUp: "PgUp", pageDown: "PgDn" })[part] ?? part[0].toUpperCase() + part.slice(1)).join("+");
 var init_help_ui = __esm(() => {
   init_shortcut_hints();
+  init_image_input();
   init_labels();
   init_theme();
 });
 
-// packages/tui/src/image-input.ts
-import { execFile as execFile3 } from "child_process";
-import { readFile as readFile9, stat as stat5 } from "fs/promises";
-import { homedir as homedir8 } from "os";
-import { basename as basename8, resolve as resolve6 } from "path";
-import { promisify as promisify2 } from "util";
-import { isKeyRelease as isKeyRelease4, isKeyRepeat as isKeyRepeat2, matchesKey as matchesKey9 } from "@earendil-works/pi-tui";
-function imagePaths(text, platform = process.platform) {
-  const paths = [];
-  let word = "", quote = "", escaped = false;
-  for (const c of text.trim()) {
-    if (escaped) {
-      word += c;
-      escaped = false;
-    } else if (c === "\\" && quote !== "'" && platform !== "win32") {
-      escaped = true;
-    } else if (quote) {
-      if (c === quote)
-        quote = "";
-      else
-        word += c;
-    } else if (c === '"' || c === "'")
-      quote = c;
-    else if (/\s/.test(c)) {
-      if (word) {
-        paths.push(word);
-        word = "";
-      }
-    } else
-      word += c;
-  }
-  if (quote || escaped)
-    return null;
-  if (word)
-    paths.push(word);
-  return paths.length && paths.every((p) => /\.(png|jpe?g|webp)$/i.test(p)) ? paths : null;
-}
-async function readImageFile(path, cwd) {
-  const full = resolve6(cwd, path.startsWith("~/") ? homedir8() + path.slice(1) : path);
-  const info = await stat5(full);
-  if (!info.isFile() || info.size > 20 * 1024 * 1024)
-    throw new Error("Image must be a file no larger than 20 MiB");
-  const bytes = await readFile9(full);
-  const after = await stat5(full);
-  if (bytes.length !== info.size || after.size !== info.size || after.mtimeMs !== info.mtimeMs)
-    throw new Error("Image changed while reading");
-  const mimeType = /\.png$/i.test(full) ? "image/png" : /\.webp$/i.test(full) ? "image/webp" : "image/jpeg";
-  return { name: basename8(full), mimeType, bytes };
-}
-async function command(file, args, encoding = "utf8") {
-  return (await exec(file, args, { timeout: 2000, maxBuffer: 30 * 1024 * 1024, encoding })).stdout;
-}
-async function clipboard(options = {}) {
-  const run = options.command ?? command;
-  const platform = options.platform ?? process.platform;
-  if (platform === "darwin") {
-    const files = await run("osascript", [
-      "-e",
-      `try
-set fs to the clipboard as \xABclass furl\xBB
-return POSIX path of fs
-on error
-return ""
-end try`
-    ]).catch(() => "");
-    if (String(files).trim())
-      return /\.(png|jpe?g|webp)$/i.test(String(files).trim()) ? { paths: [String(files).trim()] } : { text: String(files).trim() };
-    const image = String(await run("osascript", ["-e", `try
-return the clipboard as \xABclass PNGf\xBB
-on error
-return ""
-end try`]).catch(() => ""));
-    const hex = /\u00ABdata PNGf([0-9A-Fa-f]+)\u00BB/.exec(image)?.[1];
-    if (hex)
-      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(hex, "hex") } };
-    return { text: String(await run("pbpaste", [])) };
-  }
-  if (platform === "win32") {
-    const value = String(await run("powershell.exe", [
-      "-NoProfile",
-      "-STA",
-      "-Command",
-      'Add-Type -AssemblyName System.Windows.Forms; $i=[Windows.Forms.Clipboard]::GetImage(); if($i){$m=New-Object IO.MemoryStream; $i.Save($m,[Drawing.Imaging.ImageFormat]::Png); "IMAGE:"+[Convert]::ToBase64String($m.ToArray());$i.Dispose();$m.Dispose()}else{Get-Clipboard -Raw}'
-    ]));
-    if (value.startsWith("IMAGE:"))
-      return {
-        image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(value.slice(6).trim(), "base64") }
-      };
-    return { text: value };
-  }
-  const wayland = options.wayland ?? !!process.env.WAYLAND_DISPLAY;
-  const tool = wayland ? "wl-paste" : "xclip";
-  try {
-    const bytes = await run(tool, wayland ? ["--type", "image/png"] : ["-selection", "clipboard", "-t", "image/png", "-o"], "buffer");
-    if (bytes.length)
-      return { image: { name: "Clipboard.png", mimeType: "image/png", bytes: Buffer.from(bytes) } };
-  } catch {}
-  return { text: String(await run(tool, wayland ? ["--no-newline"] : ["-selection", "clipboard", "-o"])) };
-}
-function isClipboardShortcut(data, platform = process.platform) {
-  return !isKeyRelease4(data) && !isKeyRepeat2(data) && matchesKey9(data, platform === "win32" ? "alt+v" : "ctrl+v");
-}
-var exec;
-var init_image_input = __esm(() => {
-  exec = promisify2(execFile3);
-});
-
 // packages/tui/src/question-dock.ts
 import {
   Input as Input3,
@@ -46440,6 +46782,31 @@ var init_search_ui = __esm(() => {
   };
 });
 
+// packages/tui/src/shell-notice.ts
+function shellNoticeText(shell) {
+  if (shell.status !== "missing")
+    return;
+  if (shell.reason === "invalid_config")
+    return `${shell.detail ?? "shell.path is invalid."} Bash and background jobs are unavailable. Fix shell.path in neko.config.json.`;
+  return "Git Bash not found: bash and background jobs are unavailable. Install Git for Windows (https://git-scm.com/download/win) or set shell.path in neko.config.json.";
+}
+function createShellNotifier(show) {
+  let last;
+  return (shell) => {
+    if (shell === undefined)
+      return;
+    const text = shellNoticeText(shell);
+    if (text === undefined) {
+      last = undefined;
+      return;
+    }
+    if (text === last)
+      return;
+    last = text;
+    show(text);
+  };
+}
+
 // packages/tui/src/skill-market-ui.ts
 import { ChordError as ChordError6 } from "@earendil-works/chord";
 import { Markdown as Markdown3, matchesKey as matchesKey13, wrapTextWithAnsi as wrapTextWithAnsi6 } from "@earendil-works/pi-tui";
@@ -47222,6 +47589,7 @@ class NekoTuiApp {
   #notices = new Container6;
   #versionNotice = new Container6;
   #versionStop;
+  #shellStop;
   #versionTimer;
   #terminal = new ProcessTerminal;
   #panel;
@@ -47391,7 +47759,7 @@ class NekoTuiApp {
       showAgents: () => this.#showAgents(),
       toggleQuestion: () => this.#toggleQuestion(),
       clipboardKey: (data) => {
-        if (!matchesKey17(data, process.platform === "win32" ? "alt+v" : "ctrl+v"))
+        if (!matchesKey17(data, clipboardShortcutKey()))
           return false;
         if (isClipboardShortcut(data))
           this.pasteClipboard();
@@ -47480,15 +47848,20 @@ class NekoTuiApp {
       this.#ui.requestRender();
     };
     this.#versionStop = this.#gateway.client.application.info.subscribe(() => void refreshVersion());
+    const notifyShell = createShellNotifier((text) => this.addNotice(text, "warning", { wrap: true, ttlMs: 20000 }));
+    const checkShell = () => notifyShell(this.#gateway.client.application.info.value?.shell);
+    this.#shellStop = this.#gateway.client.application.info.subscribe(checkShell);
     this.#versionTimer = setInterval(() => void refreshVersion(), 30000);
     refreshVersion();
     await this.switchSession(initialSessionId);
     this.#ui.start();
     this.#ui.requestRender(true);
+    checkShell();
     loadAllHighlightLanguages();
     this.#startThemeDetection();
     await this.#exited;
     this.#versionStop?.();
+    this.#shellStop?.();
     clearInterval(this.#versionTimer);
     this.#viewUnsubscribe?.();
     this.#directoryUnsubscribe?.();
@@ -48679,7 +49052,7 @@ var init_open_browser = () => {};
 import { spawn as spawn4 } from "child_process";
 import { randomUUID as randomUUID7 } from "crypto";
 import { mkdir as mkdir8, readFile as readFile10, writeFile as writeFile7 } from "fs/promises";
-import { dirname as dirname12, join as join16 } from "path";
+import { dirname as dirname12, join as join17 } from "path";
 async function ensureNekoGateway(options) {
   const timeoutMs = options.spawnTimeoutMs ?? 30000;
   const timeoutAt = Date.now() + timeoutMs;
@@ -48721,11 +49094,11 @@ async function ensureNekoGateway(options) {
       }
       throw new Error(`\u7B49\u5F85 neko gateway \u5C31\u7EEA\u8D85\u65F6\uFF08${options.spawnTimeoutMs ?? 30000}ms\uFF09\uFF1A${lastError instanceof Error ? lastError.message : String(lastError)}`);
     } catch (error) {
-      await stopGatewayProcess(child);
+      await stopSpawnedGateway(child);
       throw error;
     }
   }
-  const socketPath = options.socketPath ?? join16(nekoDir, `${serverId}.sock`);
+  const socketPath = options.socketPath ?? join17(nekoDir, `${serverId}.sock`);
   const host = options.host ?? "127.0.0.1";
   const port = options.port ?? 8321;
   const wsUrl = `ws://${host.includes(":") && !host.startsWith("[") ? `[${host}]` : host}:${port}`;
@@ -48764,15 +49137,18 @@ async function ensureNekoGateway(options) {
     }
     throw new Error(`\u7B49\u5F85 neko gateway \u5C31\u7EEA\u8D85\u65F6\uFF08${options.spawnTimeoutMs ?? 30000}ms\uFF09\uFF1A${lastError instanceof Error ? lastError.message : String(lastError)}`);
   } catch (error) {
-    await stopGatewayProcess(child);
+    await stopSpawnedGateway(child);
     throw error;
   }
 }
+function stopSpawnedGateway(child) {
+  return stopGatewayProcess(child, { viaStdin: process.platform === "win32" });
+}
 function spawnGatewayProcess(options, socketPath, serverId) {
   const args = [
     "--host",
     options.host ?? "127.0.0.1",
-    ...process.platform === "win32" ? ["--no-socket"] : ["--port", String(options.port ?? 8321), "--socket-path", socketPath ?? ""],
+    ...process.platform === "win32" ? ["--no-socket", "--stop-on-stdin"] : ["--port", String(options.port ?? 8321), "--socket-path", socketPath ?? ""],
     "--server-id",
     serverId,
     "--storage",
@@ -48782,7 +49158,10 @@ function spawnGatewayProcess(options, socketPath, serverId) {
     ...options.model !== undefined ? ["--model", `${options.model.provider}/${options.model.modelId}`] : []
   ];
   const command = gatewayCommand(args);
-  return spawn4(command.binary, command.args, { env: process.env, stdio: ["ignore", "pipe", "pipe"] });
+  return spawn4(command.binary, command.args, {
+    env: process.env,
+    stdio: [process.platform === "win32" ? "pipe" : "ignore", "pipe", "pipe"]
+  });
 }
 function pipeChildLogs(child, onLog) {
   if (onLog === undefined)
@@ -48839,7 +49218,7 @@ function makeHandle(serverId, socketPath, wsUrl, spawned, nekoDir) {
     spawned,
     async close() {
       if (spawned !== null) {
-        await stopGatewayProcess(spawned);
+        await stopSpawnedGateway(spawned);
         if (process.platform === "win32")
           await removeGatewayPortFile(nekoDir, serverId).catch(() => {});
       }
@@ -48847,7 +49226,7 @@ function makeHandle(serverId, socketPath, wsUrl, spawned, nekoDir) {
   };
 }
 async function loadOrCreateServerId2(nekoDir) {
-  const file = join16(nekoDir, SERVER_ID_FILENAME3);
+  const file = join17(nekoDir, SERVER_ID_FILENAME3);
   try {
     const existing = (await readFile10(file, "utf8")).trim();
     if (existing !== "")
@@ -49172,9 +49551,9 @@ var init_mobile_admin = __esm(() => {
 
 // packages/web/src/open-target.ts
 import { spawn as spawn5 } from "child_process";
-import { existsSync as existsSync4, readFileSync as readFileSync4 } from "fs";
-import { homedir as homedir9 } from "os";
-import { posix, win32 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "fs";
+import { homedir as homedir8 } from "os";
+import { posix, win32 as win322 } from "path";
 function isOpenTargetId(value) {
   return value === "vscode" || value === "file-manager";
 }
@@ -49193,9 +49572,9 @@ function systemOpenHost() {
   const platform = process.platform;
   return {
     platform,
-    wsl: detectWsl2(platform, process.env, () => readFileSync4("/proc/version", "utf8")),
+    wsl: detectWsl2(platform, process.env, () => readFileSync5("/proc/version", "utf8")),
     env: process.env,
-    home: homedir9(),
+    home: homedir8(),
     exists: existsSync4
   };
 }
@@ -49208,7 +49587,7 @@ function fileManagerLabel(host) {
 }
 function findOnPath(host, names) {
   const windows = host.platform === "win32";
-  const pathApi = windows ? win32 : posix;
+  const pathApi = windows ? win322 : posix;
   const raw = host.env[windows ? "Path" : "PATH"] ?? host.env.PATH ?? host.env.Path ?? "";
   for (const entry of raw.split(windows ? ";" : ":")) {
     if (entry === "")
@@ -49224,7 +49603,7 @@ function findOnPath(host, names) {
 function windowsCodeExecutable(host) {
   const shim = findOnPath(host, ["code.cmd"]);
   if (shim !== undefined) {
-    const exe = win32.join(win32.dirname(win32.dirname(shim)), "Code.exe");
+    const exe = win322.join(win322.dirname(win322.dirname(shim)), "Code.exe");
     if (host.exists(exe))
       return exe;
   }
@@ -49235,7 +49614,7 @@ function windowsCodeExecutable(host) {
     const base = host.env[variable];
     if (base === undefined || base === "")
       continue;
-    const exe = win32.join(base, suffix);
+    const exe = win322.join(base, suffix);
     if (host.exists(exe))
       return exe;
   }
@@ -49280,8 +49659,7 @@ function spawnDetached(spec) {
     const child = spawn5(spec.command, [...spec.args], {
       cwd: spec.cwd,
       detached: true,
-      stdio: "ignore",
-      windowsHide: true
+      stdio: "ignore"
     });
     const timer = setTimeout(() => reject(new OpenError("launch_failed", "\u542F\u52A8\u8D85\u65F6")), LAUNCH_TIMEOUT_MS);
     child.once("error", (error) => {
@@ -49322,7 +49700,7 @@ var init_open_target = __esm(() => {
 });
 
 // packages/web/src/open-api.ts
-import { realpath as realpath4, stat as stat6 } from "fs/promises";
+import { realpath as realpath4, stat as stat7 } from "fs/promises";
 import { isAbsolute as isAbsolute5 } from "path";
 async function validateDirectory(value) {
   if (typeof value !== "string" || value === "" || value.length > MAX_PATH_LENGTH)
@@ -49331,7 +49709,7 @@ async function validateDirectory(value) {
     return;
   try {
     const resolved = await realpath4(value);
-    return (await stat6(resolved)).isDirectory() ? resolved : undefined;
+    return (await stat7(resolved)).isDirectory() ? resolved : undefined;
   } catch {
     return;
   }
@@ -49393,7 +49771,7 @@ var init_open_api = __esm(() => {
 
 // packages/web/src/server.ts
 import { createReadStream } from "fs";
-import { stat as stat7 } from "fs/promises";
+import { stat as stat8 } from "fs/promises";
 import { createServer as createServer3 } from "http";
 import { dirname as dirname13, extname as extname2, resolve as resolve7, sep as sep3 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
@@ -49525,18 +49903,18 @@ async function serveStatic(pathname, method, response, staticDir) {
     return;
   }
   let file = candidate;
-  let stats = await stat7(file).catch(() => {
+  let stats = await stat8(file).catch(() => {
     return;
   });
   if (stats?.isDirectory()) {
     file = resolve7(file, "index.html");
-    stats = await stat7(file).catch(() => {
+    stats = await stat8(file).catch(() => {
       return;
     });
   }
   if (stats === undefined && extname2(candidate) === "") {
     file = resolve7(staticDir, "index.html");
-    stats = await stat7(file).catch(() => {
+    stats = await stat8(file).catch(() => {
       return;
     });
   }
@@ -49823,6 +50201,9 @@ function parseGatewayArgs(argv) {
         options.configDir = next;
         i++;
         break;
+      case "--stop-on-stdin":
+        options.stopOnStdin = true;
+        break;
       default:
         throw new Error(`\u672A\u77E5\u9009\u9879: ${arg}`);
     }
@@ -49844,6 +50225,7 @@ var GATEWAY_USAGE = `\u7528\u6CD5: neko serve [\u9009\u9879]
   --storage <path>     SQLite \u5B58\u50A8\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/neko.sqlite\uFF09
   --credentials <path> \u7528\u6237\u51ED\u636E\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/credentials.json\uFF09
   --config <dir>       neko.config.json \u67E5\u627E\u8D77\u59CB\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09
+  --stop-on-stdin      \u6807\u51C6\u8F93\u5165\u7ED3\u675F\u65F6\u5173\u505C\u7F51\u5173\uFF08\u4F9B Windows \u4E0A\u62C9\u8D77\u7F51\u5173\u7684\u524D\u7AEF\u4F7F\u7528\uFF09
   -h, --help           \u663E\u793A\u6B64\u5E2E\u52A9
 
 \u53EF\u901A\u8FC7\u524D\u7AEF\u8BBE\u7F6E\u6216\u73AF\u5883\u53D8\u91CF\uFF08DEEPSEEK_API_KEY / OPENROUTER_API_KEY / OPENCODE_API_KEY / TAVILY_API_KEY \u7B49\uFF09\u914D\u7F6E\u51ED\u636E\uFF1B
@@ -49876,6 +50258,18 @@ var init_main3 = __esm(async () => {
     console.log(`  WebSocket:   ${gateway.wsUrl}`);
   console.log("\u6309 Ctrl+C \u505C\u6B62\u3002");
   shutdown2.setCleanup(() => gateway.close());
+  if (options.stopOnStdin === true) {
+    let triggered = false;
+    const onStdinEnd = () => {
+      if (triggered)
+        return;
+      triggered = true;
+      shutdown2.trigger("stdin \u5DF2\u5173\u95ED");
+    };
+    process.stdin.once("end", onStdinEnd);
+    process.stdin.once("close", onStdinEnd);
+    process.stdin.resume();
+  }
 });
 
 // packages/cli/src/main.ts