specrails-desktop 2.11.3 → 2.11.5

package/cli/dist/specrails-desktop.js

@@ -27,12 +27,11 @@ exports.formatTokens = formatTokens;
 exports.printSummary = printSummary;
 const http_1 = __importDefault(require("http"));
 const net_1 = __importDefault(require("net"));
-const child_process_1 = require("child_process");
-const child_process_2 = require("child_process");
 const readline_1 = require("readline");
 const ws_1 = __importDefault(require("ws"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
+const win_spawn_1 = require("./win-spawn");
 const fs_1 = __importDefault(require("fs"));
 // ---------------------------------------------------------------------------
 // Constants
@@ -324,7 +323,15 @@ async function resolveProjectFromCwd(baseUrl, projectOverride) {
     try {
         // --project flag: resolve by path (absolute/relative) or by name
         if (projectOverride) {
-            const isPathLike = projectOverride.startsWith('/') || projectOverride.startsWith('.');
+            // Path vs name: POSIX absolute (`/…`), relative (`./…`), OR a Windows
+            // absolute (`C:\…` / `C:/…`) or any path containing a separator. Without
+            // the drive-letter/backslash cases `--project C:\repo` was mis-read as a
+            // project NAME on Windows and never matched.
+            const isPathLike = path_1.default.isAbsolute(projectOverride) ||
+                projectOverride.startsWith('.') ||
+                /^[A-Za-z]:[\\/]/.test(projectOverride) ||
+                projectOverride.includes('/') ||
+                projectOverride.includes('\\');
             if (isPathLike) {
                 const res = await httpGet(`${baseUrl}/api/resolve?path=${encodeURIComponent(projectOverride)}`);
                 if (res.status === 200) {
@@ -531,7 +538,10 @@ async function runDirect(command) {
     ];
     let child;
     try {
-        child = (0, child_process_1.spawn)('claude', args, {
+        // Windows: `claude` is `claude.cmd`; spawnCli routes through cross-spawn so
+        // the shim resolves and multi-line args survive (raw `spawn(shell:false)`
+        // threw ENOENT/EINVAL on Windows even with claude installed).
+        child = (0, win_spawn_1.spawnCli)('claude', args, {
             env: process.env,
             shell: false,
         });
@@ -812,7 +822,10 @@ async function desktopStart(port) {
         logFd ?? 'ignore',
         logFd ?? 'ignore',
     ];
-    const child = (0, child_process_2.spawn)(args[0], args.slice(1), {
+    // spawnCli so a dev `tsx`(.cmd) launcher resolves on Windows and the env is
+    // SystemRoot-backfilled; for the packaged `node` path cross-spawn spawns the
+    // .exe directly (no cmd.exe wrapper), keeping `detached` clean.
+    const child = (0, win_spawn_1.spawnCli)(args[0], args.slice(1), {
         detached: true,
         stdio,
         env: { ...process.env },

package/cli/dist/win-spawn.js

@@ -0,0 +1,40 @@
+"use strict";
+// Windows-safe spawn for the CLI bridge. Mirrors server/util/win-spawn.ts but is
+// self-contained because the CLI compiles with its own tsconfig (rootDir: cli).
+//
+// Two Windows problems this solves:
+//  1. `claude`/`tsx` etc. ship as `.cmd` shims. `spawn('claude', …, { shell:false })`
+//     fails with ENOENT (no extension expansion) and, since Node 20.12 /
+//     CVE-2024-27980, `spawn('claude.cmd', …, { shell:false })` fails with EINVAL.
+//     cross-spawn launches cmd.exe with quoted args so `.cmd` resolves and
+//     multi-line `--system-prompt`/`-p` values survive intact.
+//  2. A GUI-launched packaged app can inherit a stripped env missing SystemRoot/
+//     ComSpec, which cmd.exe needs to start — windowsSpawnEnv backfills them.
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.windowsSpawnEnv = windowsSpawnEnv;
+exports.spawnCli = spawnCli;
+const child_process_1 = require("child_process");
+const cross_spawn_1 = __importDefault(require("cross-spawn"));
+/** Reconstruct the Windows shell-critical env when a stripped sidecar lacks it. */
+function windowsSpawnEnv(base = process.env) {
+    if (process.platform !== 'win32')
+        return base;
+    const env = { ...base };
+    const systemRoot = (env.SystemRoot || env.windir || 'C:\\Windows').replace(/[\\/]$/, '');
+    env.SystemRoot = env.SystemRoot || systemRoot;
+    env.windir = env.windir || systemRoot;
+    env.ComSpec = env.ComSpec || `${systemRoot}\\System32\\cmd.exe`;
+    return env;
+}
+/** Spawn `binary` Windows-safely: cross-spawn on win32 (resolves `.cmd`, quotes
+ *  args), plain spawn on POSIX. Backfills the Windows base env unless the caller
+ *  already supplied one. */
+function spawnCli(binary, args, options = {}) {
+    if (process.platform === 'win32') {
+        return (0, cross_spawn_1.default)(binary, args, { ...options, env: windowsSpawnEnv(options.env) });
+    }
+    return (0, child_process_1.spawn)(binary, args, options);
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "specrails-desktop",
-  "version": "2.11.3",
+  "version": "2.11.5",
   "license": "MIT",
   "repository": {
     "type": "git",

package/server/dist/artifact-registry.js

@@ -189,7 +189,31 @@ function atomicWrite(filePath, data) {
     finally {
         (0, fs_1.closeSync)(fd);
     }
-    (0, fs_1.renameSync)(tmp, filePath);
+    // Windows: renaming over an EXISTING destination held open by a reader (the
+    // bundled core reads registry.json WITHOUT the lock by contract), an AV
+    // scanner, or a concurrent reader fails transiently with EPERM/EACCES/EBUSY.
+    // POSIX rename-over is atomic and never hits this. Bounded retry on Windows
+    // only; rethrow the last error so the caller's try/catch still surfaces it.
+    let lastErr;
+    for (let attempt = 0; attempt < 5; attempt++) {
+        try {
+            (0, fs_1.renameSync)(tmp, filePath);
+            return;
+        }
+        catch (err) {
+            lastErr = err;
+            const code = err.code;
+            const retryable = process.platform === 'win32' && (code === 'EPERM' || code === 'EACCES' || code === 'EBUSY');
+            if (!retryable)
+                throw err;
+            syncSleep(20 * (attempt + 1));
+        }
+    }
+    try {
+        (0, fs_1.unlinkSync)(tmp);
+    }
+    catch { /* best-effort temp cleanup */ }
+    throw lastErr;
 }
 /** Synchronous sleep without busy-spinning the CPU. */
 function syncSleep(ms) {

package/server/dist/binary-probe.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.binaryOnPath = binaryOnPath;
 exports.__resetBinaryProbeCacheForTest = __resetBinaryProbeCacheForTest;
 const child_process_1 = require("child_process");
+const win_spawn_1 = require("./util/win-spawn");
 // Windows has no `which`; probe via `where` instead. Both exit non-zero
 // when the command is missing, which the try/catch relies on.
 const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
@@ -20,7 +21,10 @@ function binaryOnPath(binary) {
         return hit.onPath;
     let onPath;
     try {
-        (0, child_process_1.execSync)(`${WHICH_CMD} ${binary}`, { stdio: 'ignore' });
+        // `where` runs via cmd.exe; pass a SystemRoot-backfilled env so the probe
+        // (a HARD gate before job/chat spawns) can't be falsely cached as missing
+        // when a packaged sidecar inherited a stripped env.
+        (0, child_process_1.execSync)(`${WHICH_CMD} ${binary}`, { stdio: 'ignore', env: (0, win_spawn_1.windowsSpawnEnv)() });
         onPath = true;
     }
     catch {

package/server/dist/bundled-core.js

@@ -9,6 +9,7 @@ exports.getBundledCoreVersion = getBundledCoreVersion;
 exports.hasBundledCore = hasBundledCore;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
+const win_spawn_1 = require("./util/win-spawn");
 /**
  * Bundled specrails-core resolution.
  *
@@ -24,7 +25,9 @@ const path_1 = __importDefault(require("path"));
  */
 /** The bundled core package root (`<resource_dir>/core`) or null when absent. */
 function getBundledCoreRoot() {
-    const p = process.env.SPECRAILS_BUNDLED_CORE_PATH;
+    // Strip any `\\?\` verbatim prefix (Tauri resource_dir) — Node's module loader
+    // realpathSync chokes on it when running cli.js (EISDIR lstat 'C:').
+    const p = (0, win_spawn_1.stripWindowsVerbatimPrefix)(process.env.SPECRAILS_BUNDLED_CORE_PATH ?? '');
     if (!p || p.length === 0)
         return null;
     // Existence-gate (defence-in-depth — lib.rs already gates, but a stale env

package/server/dist/bundled-openspec.js

@@ -7,6 +7,7 @@ exports.getBundledOpenspecCli = getBundledOpenspecCli;
 exports.hasBundledOpenspec = hasBundledOpenspec;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
+const win_spawn_1 = require("./util/win-spawn");
 /**
  * Bundled `@fission-ai/openspec` resolution.
  *
@@ -29,7 +30,9 @@ const path_1 = __importDefault(require("path"));
 const OPENSPEC_CLI_REL = path_1.default.join('node_modules', '@fission-ai', 'openspec', 'bin', 'openspec.js');
 /** The bundled openspec root (`<resource_dir>/openspec`) or null when absent. */
 function getBundledOpenspecRoot() {
-    const p = process.env.SPECRAILS_BUNDLED_OPENSPEC_PATH;
+    // Strip any `\\?\` verbatim prefix (Tauri resource_dir) so `node openspec.js`
+    // resolves its entry without the realpathSync EISDIR-on-'C:' crash.
+    const p = (0, win_spawn_1.stripWindowsVerbatimPrefix)(process.env.SPECRAILS_BUNDLED_OPENSPEC_PATH ?? '');
     if (!p || p.length === 0)
         return null;
     // Existence-gate (defence-in-depth — lib.rs already gates, but a stale env

package/server/dist/config.js

@@ -9,6 +9,9 @@ exports.fetchIssues = fetchIssues;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const child_process_1 = require("child_process");
+// Windows has no `which`; it's `where`. The lone holdout that hardcoded `which`
+// here made gh/jira tracker detection always report unavailable on Windows.
+const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
 function runCommand(cmd, cwd) {
     try {
         return (0, child_process_1.execSync)(cmd, { stdio: ['ignore', 'pipe', 'ignore'], timeout: 5000, cwd }).toString().trim();
@@ -37,7 +40,7 @@ function runCommandArgs(file, args, cwd) {
     }
 }
 function detectGithub() {
-    const ghPath = runCommand('which gh');
+    const ghPath = runCommand(`${WHICH_CMD} gh`);
     if (!ghPath)
         return { available: false, authenticated: false };
     const authOutput = runCommand('gh auth status');
@@ -45,7 +48,7 @@ function detectGithub() {
     return { available: true, authenticated };
 }
 function detectJira() {
-    const jiraPath = runCommand('which jira');
+    const jiraPath = runCommand(`${WHICH_CMD} jira`);
     if (!jiraPath)
         return { available: false, authenticated: false };
     // jira CLI availability means it is configured (auth is implicit via jira config)

package/server/dist/desktop-router.js

@@ -65,13 +65,28 @@ const THEME_ID_ALLOWLIST = new Set(['dracula', 'aurora-light', 'obsidian-dark',
 // Language allow-list. Mirror of LANGUAGE_IDS in `client/src/lib/i18n.ts` —
 // kept duplicated to avoid pulling client code into the server bundle.
 const LANGUAGE_ID_ALLOWLIST = new Set(['en', 'es', 'fr', 'de', 'pt', 'it', 'zh', 'ja']);
-// LOW-04: Deny registration of system-critical directory paths.
+// LOW-04: Deny registration of system-critical directory paths. The POSIX list
+// is matched against forward-slash-normalized, lowercased paths; on Windows it
+// was a complete no-op (no path matches `/etc`), so add a Windows deny-list and
+// fold case (Windows FS is case-insensitive).
 const DENIED_PATH_PREFIXES = [
     '/etc', '/usr', '/bin', '/sbin', '/lib', '/lib64',
     '/sys', '/proc', '/dev', '/boot', '/run',
 ];
+// Windows: deny the Windows dir, Program Files variants, and any bare drive root.
+const DENIED_WINDOWS_PREFIXES = [
+    'c:/windows', 'c:/program files', 'c:/program files (x86)', 'c:/programdata',
+];
 function isPathSafe(resolvedPath) {
-    const normalized = resolvedPath.endsWith('/') ? resolvedPath : resolvedPath + '/';
+    const slashed = resolvedPath.replace(/\\/g, '/');
+    const normalized = slashed.endsWith('/') ? slashed : slashed + '/';
+    if (process.platform === 'win32') {
+        const lower = normalized.toLowerCase();
+        // Bare drive root (C:/) is never a valid project location.
+        if (/^[a-z]:\/$/.test(lower))
+            return false;
+        return !DENIED_WINDOWS_PREFIXES.some((prefix) => lower.startsWith(prefix + '/') || lower === prefix + '/');
+    }
     return !DENIED_PATH_PREFIXES.some((prefix) => normalized.startsWith(prefix + '/') || normalized === prefix + '/');
 }
 function deriveProjectName(projectPath) {

package/server/dist/file-summary-manager.js

@@ -592,7 +592,11 @@ class FileSummaryManager {
             awaitWriteFinish: { stabilityThreshold: 200, pollInterval: 100 },
         });
         watcher.on('change', (changed) => {
-            const rel = path.relative(projectPath, changed);
+            // The summary store keys off POSIX forward-slash relpaths everywhere
+            // (the REST normalizeRel, pathHash, knownSummaries seeding). On Windows
+            // path.relative yields backslashes, so normalize before lookup/markStale —
+            // otherwise `known.has(rel)` always misses and edits never mark stale.
+            const rel = path.relative(projectPath, changed).split(path.sep).join('/');
             if (!rel || rel.startsWith('..'))
                 return;
             // Skip the readSummary disk hit when this file provably has no summary.

package/server/dist/framework-migration.js

@@ -180,7 +180,7 @@ function runMigration(slug, projectPath, provider, fwCurrent, fm, opts) {
         try {
             // Clear a stale backup from a prior aborted run.
             if (fs_1.default.existsSync(bak))
-                fs_1.default.rmSync(bak, { recursive: true, force: true });
+                fs_1.default.rmSync(bak, { recursive: true, force: true, maxRetries: 5, retryDelay: 50 });
             fs_1.default.renameSync(live, bak);
             backedUp.push({ live, bak });
         }
@@ -216,7 +216,7 @@ function runMigration(slug, projectPath, provider, fwCurrent, fm, opts) {
         for (const { live } of backedUp) {
             try {
                 if (fs_1.default.existsSync(live) || isSymlink(live))
-                    fs_1.default.rmSync(live, { recursive: true, force: true });
+                    fs_1.default.rmSync(live, { recursive: true, force: true, maxRetries: 5, retryDelay: 50 });
             }
             catch {
                 /* best-effort */
@@ -242,7 +242,7 @@ function runMigration(slug, projectPath, provider, fwCurrent, fm, opts) {
             const preserved = live + '.custom.preserved';
             try {
                 if (fs_1.default.existsSync(preserved))
-                    fs_1.default.rmSync(preserved, { recursive: true, force: true });
+                    fs_1.default.rmSync(preserved, { recursive: true, force: true, maxRetries: 5, retryDelay: 50 });
                 fs_1.default.renameSync(bak, preserved);
                 preservedCustom.push(...customs.map((c) => path_1.default.basename(c)));
             }
@@ -252,7 +252,7 @@ function runMigration(slug, projectPath, provider, fwCurrent, fm, opts) {
         }
         else {
             try {
-                fs_1.default.rmSync(bak, { recursive: true, force: true });
+                fs_1.default.rmSync(bak, { recursive: true, force: true, maxRetries: 5, retryDelay: 50 });
             }
             catch {
                 /* leaving a stale .bak is harmless; never fail the migration on cleanup */
@@ -272,7 +272,7 @@ function restoreBackups(backedUp) {
             if (!fs_1.default.existsSync(bak))
                 continue;
             if (fs_1.default.existsSync(live) || isSymlink(live))
-                fs_1.default.rmSync(live, { recursive: true, force: true });
+                fs_1.default.rmSync(live, { recursive: true, force: true, maxRetries: 5, retryDelay: 50 });
             fs_1.default.renameSync(bak, live);
         }
         catch {

package/server/dist/index.js

@@ -34,6 +34,10 @@ const path_resolver_1 = require("./path-resolver");
 // openspec/changes/add-multi-provider-support/specs/multi-provider-architecture/spec.md.
 require("./providers");
 const inheritedPathBeforeResolve = (process.env.PATH ?? '').split(process.platform === 'win32' ? ';' : ':').filter(Boolean).length;
+// Backfill SystemRoot/ComSpec/etc into process.env BEFORE anything spawns, so a
+// stripped GUI-launch sidecar env never breaks cmd.exe-mediated spawns (PTY,
+// where-probes, .cmd shims). No-op on POSIX. Must precede resolveStartupPath().
+(0, path_resolver_1.ensureWindowsBaseEnv)();
 (0, path_resolver_1.resolveStartupPath)();
 const TERMINAL_PANEL_ENABLED = process.env.SPECRAILS_TERMINAL_PANEL !== 'false';
 const BROWSER_CAPTURE_ENABLED = (0, feature_flags_1.isBrowserCaptureEnabled)();

package/server/dist/path-resolver.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureWindowsBaseEnv = ensureWindowsBaseEnv;
 exports.resolveBundledRuntimePath = resolveBundledRuntimePath;
 exports.resolveBundledNodeExe = resolveBundledNodeExe;
 exports.resolveStartupPath = resolveStartupPath;
@@ -14,6 +15,42 @@ const child_process_1 = require("child_process");
 const fs_1 = __importDefault(require("fs"));
 const os_1 = __importDefault(require("os"));
 const path_1 = __importDefault(require("path"));
+const win_spawn_1 = require("./util/win-spawn");
+/** Bundled-path env vars set by the Tauri host — normalized at startup. */
+const BUNDLED_PATH_ENV_VARS = [
+    'SPECRAILS_BUNDLED_RUNTIMES_PATH',
+    'SPECRAILS_BUNDLED_CORE_PATH',
+    'SPECRAILS_BUNDLED_OPENSPEC_PATH',
+];
+/**
+ * Backfill the Windows shell-critical environment into `process.env` ONCE at
+ * startup. The desktop server runs as a pkg sidecar launched by the Tauri host,
+ * which can deliver a STRIPPED env missing `SystemRoot`/`windir`/`ComSpec`
+ * (and the npm-config family). Without `SystemRoot`, every `cmd.exe`-mediated
+ * spawn — PTY/PowerShell, `execSync('where …')`, `.cmd` shims — fails to start.
+ * Doing this on `process.env` directly means EVERY downstream consumer that
+ * copies `process.env` (terminal-manager, binary-probe, plugin spawns, …) is
+ * protected at the source, in addition to the per-callsite `windowsSpawnEnv()`.
+ *
+ * ALSO strips the Windows verbatim prefix (`\\?\`) from the bundled-path env
+ * vars. Tauri's `resource_dir()` returns `\\?\C:\…` paths; Node's module loader
+ * `realpathSync` mishandles that prefix when resolving the main entry script,
+ * crashing the bundled-core child with `EISDIR: lstat 'C:'`. Normalizing here
+ * (before resolveStartupPath + before any spawn) means every reader
+ * (getBundledCoreCli, resolveBundledNodeExe, chromium/docs/setup-prerequisites,
+ * the PATH prepend) gets a plain `C:\…` path. No-op on POSIX / already-present /
+ * unprefixed. Idempotent.
+ */
+function ensureWindowsBaseEnv() {
+    if (process.platform !== 'win32')
+        return;
+    Object.assign(process.env, (0, win_spawn_1.windowsSpawnEnv)(process.env));
+    for (const key of BUNDLED_PATH_ENV_VARS) {
+        const v = process.env[key];
+        if (v)
+            process.env[key] = (0, win_spawn_1.stripWindowsVerbatimPrefix)(v);
+    }
+}
 const PATH_BEGIN = '__SRH_PATH_BEGIN__';
 const PATH_END = '__SRH_PATH_END__';
 const LOGIN_SHELL_TIMEOUT_MS = 1500;
@@ -83,17 +120,37 @@ function fastPathDirectories() {
     }
     return [];
 }
+/**
+ * Well-known Windows directories that hold globally-installed CLI shims
+ * (`claude.cmd` / `codex.cmd` / `gemini.cmd`) which a GUI-launched (Explorer/
+ * Tauri) process may not have on its inherited PATH. The per-user npm prefix
+ * places `.cmd` shims DIRECTLY in the prefix root (`%APPDATA%\npm`), not a `bin`
+ * subdir. `npm prefix -g` is the authoritative location for a custom prefix.
+ */
+function windowsGlobalBinDirs() {
+    if (process.platform !== 'win32')
+        return [];
+    const dirs = [];
+    // Default per-user npm prefix: shims (`claude.cmd` …) live in the prefix ROOT.
+    if (process.env.APPDATA)
+        dirs.push(path_1.default.join(process.env.APPDATA, 'npm'));
+    // Machine-wide Node install (also where a machine-scope npm prefix points).
+    if (process.env.ProgramFiles)
+        dirs.push(path_1.default.join(process.env.ProgramFiles, 'nodejs'));
+    return dirs;
+}
 /**
  * Returns the absolute path to the bundled runtimes directory.
  * Only valid when SPECRAILS_IS_DESKTOP=1 and SPECRAILS_BUNDLED_RUNTIMES_PATH is set.
  * Throws if the env var is missing.
  */
 function resolveBundledRuntimePath() {
-    const p = process.env.SPECRAILS_BUNDLED_RUNTIMES_PATH;
-    if (!p) {
+    const raw = process.env.SPECRAILS_BUNDLED_RUNTIMES_PATH;
+    if (!raw) {
         throw new Error('[path-resolver] resolveBundledRuntimePath() called but SPECRAILS_BUNDLED_RUNTIMES_PATH is not set');
     }
-    return p;
+    // Strip the `\\?\` verbatim prefix (Tauri resource_dir) — see ensureWindowsBaseEnv.
+    return (0, win_spawn_1.stripWindowsVerbatimPrefix)(raw);
 }
 /**
  * Absolute path to the bundled REAL Node executable (`runtimes/node/bin/node` on
@@ -107,7 +164,9 @@ function resolveBundledRuntimePath() {
  * Existence-gated so a stale/partial bundle degrades to the PATH `node` instead.
  */
 function resolveBundledNodeExe() {
-    const runtimesPath = process.env.SPECRAILS_BUNDLED_RUNTIMES_PATH;
+    // Strip the `\\?\` verbatim prefix so the resulting node.exe path doesn't
+    // crash Node's module loader when it runs cli.js (EISDIR lstat 'C:').
+    const runtimesPath = (0, win_spawn_1.stripWindowsVerbatimPrefix)(process.env.SPECRAILS_BUNDLED_RUNTIMES_PATH ?? '');
     if (!runtimesPath || runtimesPath.length === 0)
         return null;
     const exe = process.platform === 'win32'
@@ -160,9 +219,26 @@ function resolveStartupPath() {
     const inherited = splitPath(process.env.PATH);
     const inheritedSet = new Set(inherited);
     if (process.platform === 'win32') {
+        // Prepend well-known global-CLI dirs (npm prefix, Program Files\nodejs) that
+        // a GUI-launched process may lack, so provider shims (claude/codex/gemini
+        // .cmd) — and any RECURSIVE bare-name invocation by a spawned CLI — resolve.
+        // Existence-gated + deduped; no-op when already present (the common case).
+        const winPrepend = [];
+        for (const dir of windowsGlobalBinDirs()) {
+            if (dir && fileExists(dir) && !inheritedSet.has(dir)) {
+                winPrepend.push(dir);
+                inheritedSet.add(dir);
+            }
+        }
+        const winMerged = [...winPrepend, ...inherited];
+        if (winPrepend.length > 0)
+            process.env.PATH = joinPath(winMerged);
         diagnostic = {
-            pathSegments: inherited,
-            pathSources: inherited.map(() => 'inherited'),
+            pathSegments: winMerged,
+            pathSources: [
+                ...winPrepend.map(() => 'fast-path'),
+                ...inherited.map(() => 'inherited'),
+            ],
             loginShellStatus: 'skipped',
         };
         return;

package/server/dist/plugins/codex-mcp.js

@@ -18,9 +18,25 @@ exports.codexMcpAdd = codexMcpAdd;
 exports.codexMcpRemove = codexMcpRemove;
 exports.codexMcpList = codexMcpList;
 const child_process_1 = require("child_process");
+const cross_spawn_1 = __importDefault(require("cross-spawn"));
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const os_1 = __importDefault(require("os"));
+const win_spawn_1 = require("../util/win-spawn");
+/**
+ * Spawn `codex` synchronously, Windows-safe. On Windows the codex CLI is a
+ * `.cmd` shim; Node 20.12+ (CVE-2024-27980) refuses to spawn `.cmd` without a
+ * shell, and the packaged sidecar may lack `SystemRoot`/`ComSpec` — so route
+ * through cross-spawn (resolves the shim, runs cmd.exe with correct quoting)
+ * under `windowsSpawnEnv()`. POSIX is a plain `spawnSync`.
+ */
+function codexSpawn(argv, extraEnv) {
+    const env = (0, win_spawn_1.windowsSpawnEnv)({ ...process.env, ...extraEnv });
+    const opts = { env, encoding: 'utf-8', timeout: 10_000 };
+    return process.platform === 'win32'
+        ? cross_spawn_1.default.sync('codex', argv, opts)
+        : (0, child_process_1.spawnSync)('codex', argv, opts);
+}
 /** Per-project CODEX_HOME root, sibling of the existing
  *  `~/.specrails/projects/<slug>/{telemetry,jobs,explore-cwd,...}` tree. */
 function codexHomeFor(slug) {
@@ -39,15 +55,7 @@ function ensureCodexHome(slug) {
 function codexMcpAdd(slug, name, entry) {
     const home = ensureCodexHome(slug);
     const argv = ['mcp', 'add', name, '--', entry.command, ...entry.args];
-    const result = (0, child_process_1.spawnSync)('codex', argv, {
-        env: {
-            ...process.env,
-            ...(entry.env ?? {}),
-            CODEX_HOME: home,
-        },
-        encoding: 'utf-8',
-        timeout: 10_000,
-    });
+    const result = codexSpawn(argv, { ...(entry.env ?? {}), CODEX_HOME: home });
     if (result.error) {
         return { ok: false, stdout: '', stderr: `${result.error.message}` };
     }
@@ -60,11 +68,7 @@ function codexMcpAdd(slug, name, entry) {
 /** Run `codex mcp remove <name>` against the per-project CODEX_HOME. */
 function codexMcpRemove(slug, name) {
     const home = ensureCodexHome(slug);
-    const result = (0, child_process_1.spawnSync)('codex', ['mcp', 'remove', name], {
-        env: { ...process.env, CODEX_HOME: home },
-        encoding: 'utf-8',
-        timeout: 10_000,
-    });
+    const result = codexSpawn(['mcp', 'remove', name], { CODEX_HOME: home });
     if (result.error) {
         return { ok: false, stdout: '', stderr: `${result.error.message}` };
     }
@@ -80,11 +84,7 @@ function codexMcpRemove(slug, name) {
  *  for this subcommand. */
 function codexMcpList(slug) {
     const home = ensureCodexHome(slug);
-    const result = (0, child_process_1.spawnSync)('codex', ['mcp', 'list'], {
-        env: { ...process.env, CODEX_HOME: home },
-        encoding: 'utf-8',
-        timeout: 10_000,
-    });
+    const result = codexSpawn(['mcp', 'list'], { CODEX_HOME: home });
     if (result.error || (result.status ?? 1) !== 0) {
         return { ok: false, servers: [], raw: `${result.stderr ?? result.stdout ?? ''}` };
     }

package/server/dist/plugins/prereq-installer.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.installPrerequisite = installPrerequisite;
 const child_process_1 = require("child_process");
+const win_spawn_1 = require("../util/win-spawn");
 /**
  * Returns the official installer command for `name` on the current platform.
  * Returns `null` for unsupported (name, platform) pairs — caller should treat
@@ -60,7 +61,8 @@ async function installPrerequisite(name, projectId, broadcast) {
         const child = (0, child_process_1.spawn)(cmd.shell, [], {
             shell: isWin ? 'powershell.exe' : true,
             stdio: ['ignore', 'pipe', 'pipe'],
-            env: process.env,
+            // PowerShell needs SystemRoot/windir to start; backfill for a stripped env.
+            env: (0, win_spawn_1.windowsSpawnEnv)(),
         });
         let settled = false;
         const finish = (result) => {

package/server/dist/plugins/serena/verify.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.verifySerena = verifySerena;
 const child_process_1 = require("child_process");
+const win_spawn_1 = require("../../util/win-spawn");
 const TIMEOUT_MS = 1800;
 /**
  * Verify Serena availability. We only probe `uv --version` here — proxy for
@@ -29,6 +30,9 @@ async function verifySerena() {
             child = (0, child_process_1.spawn)('uv', ['--version'], {
                 stdio: ['ignore', 'pipe', 'pipe'],
                 shell: isWin,
+                // SystemRoot/ComSpec so cmd.exe (shell:true) can start under a stripped
+                // packaged-sidecar env; else uv is wrongly reported not-on-path.
+                env: (0, win_spawn_1.windowsSpawnEnv)(),
             });
         }
         catch {

package/server/dist/providers/gemini-adapter.js

@@ -29,6 +29,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports._GEMINI_MIN_VERSION = exports.geminiAdapter = void 0;
 exports._compareSemver = compareSemver;
 const child_process_1 = require("child_process");
+const win_spawn_1 = require("../util/win-spawn");
 const gemini_agent_ack_1 = require("./gemini-agent-ack");
 const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
 // Floor where `--output-format stream-json` + headless `--resume` are available.
@@ -180,16 +181,20 @@ function compareSemver(a, b) {
 }
 async function detectGeminiInstalled() {
     try {
-        (0, child_process_1.execSync)(`${WHICH_CMD} gemini`, { stdio: 'ignore' });
+        (0, child_process_1.execSync)(`${WHICH_CMD} gemini`, { stdio: 'ignore', env: (0, win_spawn_1.windowsSpawnEnv)() });
     }
     catch {
         return { installed: false, executable: false };
     }
     try {
+        // gemini is a Node CLI; its cold `--version` (cmd.exe → node → load bundle,
+        // Defender scanning) can exceed a few seconds on Windows. Give it a generous
+        // budget + SystemRoot env so it isn't wrongly reported not-executable.
         const raw = (0, child_process_1.execSync)('gemini --version', {
             encoding: 'utf-8',
             stdio: ['pipe', 'pipe', 'ignore'],
-            timeout: 3000,
+            timeout: process.platform === 'win32' ? 20_000 : 8_000,
+            env: (0, win_spawn_1.windowsSpawnEnv)(),
         }).trim();
         const match = raw.match(/\d+\.\d+\.\d+/);
         const version = match ? match[0] : raw;

package/server/dist/setup-prerequisites.js

@@ -28,13 +28,19 @@ const WHICH_CMD = process.platform === 'win32' ? 'where' : 'which';
  * inherited a stripped env) — without it every bundled probe failed with a bogus
  * "bundle corrupted — reinstall the app".
  */
-function runVersionSpawn(cmd, args) {
-    const opts = { env: (0, win_spawn_1.windowsSpawnEnv)(), encoding: 'utf-8', timeout: 5_000 };
+function runVersionSpawn(cmd, args, timeoutMs = 5_000) {
+    const opts = { env: (0, win_spawn_1.windowsSpawnEnv)(), encoding: 'utf-8', timeout: timeoutMs };
     if (process.platform === 'win32') {
         return cross_spawn_1.default.sync(cmd, args, opts);
     }
     return (0, child_process_1.spawnSync)(cmd, args, opts);
 }
+// A bundled/system CLI's `--version` cold start can be slow on Windows: a npm
+// `.cmd` shim goes cmd.exe → node.exe → load the CLI bundle, while Defender
+// scans it. The Node-based gemini CLI in particular exceeded the old 5s cap and
+// was wrongly reported not-executable. Give version probes a generous Windows
+// budget; the `where`/`which` LOCATE probe stays fast (5s) since it's a builtin.
+const VERSION_PROBE_TIMEOUT_MS = process.platform === 'win32' ? 20_000 : 8_000;
 exports.MIN_VERSIONS = {
     node: '18.0.0',
     npm: '9.0.0',
@@ -53,7 +59,7 @@ function locateCommand(command) {
 }
 /** Run `<bin> <args>` and interpret the result as a `--version` probe. */
 function runProbe(bin, args) {
-    const result = runVersionSpawn(bin, args);
+    const result = runVersionSpawn(bin, args, VERSION_PROBE_TIMEOUT_MS);
     if (result.error) {
         const err = result.error;
         return { executed: false, error: `${err.code ?? 'ERR'}: ${err.message}` };

package/server/dist/terminal-manager.js

@@ -14,6 +14,7 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const node_pty_1 = require("node-pty");
 const ids_1 = require("./ids");
+const win_spawn_1 = require("./util/win-spawn");
 const terminal_osc_parser_1 = require("./terminal-osc-parser");
 const terminal_marks_store_1 = require("./terminal-marks-store");
 const terminal_shell_integration_1 = require("./terminal-shell-integration");
@@ -69,8 +70,11 @@ function resolveShell() {
  * default and has no shell-integration shim.
  */
 function resolveShellFor(platform, env, exists) {
+    // Honor $SHELL only on POSIX. On Windows $SHELL is not native but is commonly
+    // exported by Git Bash/MSYS2 as a Unix path (e.g. /usr/bin/bash) that ConPTY
+    // cannot spawn — so on win32 ignore it and fall through to pwsh→powershell→cmd.
     const envShell = env.SHELL;
-    if (envShell && envShell.trim().length > 0)
+    if (platform !== 'win32' && envShell && envShell.trim().length > 0)
         return envShell.trim();
     if (platform === 'win32') {
         for (const dir of (env.PATH ?? '').split(';')) {
@@ -215,8 +219,13 @@ class TerminalManager {
         const baseArgs = shellArgs(shell);
         const cols = clampDim(opts.cols ?? exports.TERMINAL_DEFAULT_COLS, 2, 1000);
         const rows = clampDim(opts.rows ?? exports.TERMINAL_DEFAULT_ROWS, 2, 1000);
+        // Build the PTY env from a SystemRoot-backfilled base so PowerShell/cmd can
+        // start even when the packaged sidecar inherited a stripped env (no
+        // SystemRoot/ComSpec → ConPTY spawn fails and the panel never opens). No-op
+        // on POSIX. (process.env is also backfilled globally at startup; this is the
+        // explicit guard at the PTY boundary.)
         const env = {};
-        for (const [k, v] of Object.entries(process.env)) {
+        for (const [k, v] of Object.entries((0, win_spawn_1.windowsSpawnEnv)(process.env))) {
             if (typeof v === 'string')
                 env[k] = v;
         }

package/server/dist/util/win-spawn.js

@@ -26,6 +26,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.spawnCli = spawnCli;
 exports.windowsSpawnEnv = windowsSpawnEnv;
+exports.stripWindowsVerbatimPrefix = stripWindowsVerbatimPrefix;
 exports.resolveWindowsBinary = resolveWindowsBinary;
 const child_process_1 = require("child_process");
 const cross_spawn_1 = __importDefault(require("cross-spawn"));
@@ -79,6 +80,25 @@ function windowsSpawnEnv(base = process.env) {
     env.TMP = env.TMP || temp;
     return env;
 }
+/**
+ * Strip the Windows extended-length / "verbatim" path prefix (`\\?\`) from a
+ * path. Tauri's `resource_dir()` returns canonicalized paths like
+ * `\\?\C:\Users\…\core`, and Node's MODULE LOADER `realpathSync` (used to
+ * resolve the main entry script) does NOT handle the `\\?\` prefix — it parses
+ * the root as a bare `C:` and throws `EISDIR: lstat 'C:'`. So a bundled `node`
+ * interpreter or `cli.js` entry carrying this prefix crashes the child at
+ * startup. Normalizing the bundled path env vars to plain `C:\…` form fixes it.
+ * `\\?\UNC\server\share` → `\\server\share`. No-op on POSIX / unprefixed paths.
+ */
+function stripWindowsVerbatimPrefix(p) {
+    if (typeof p !== 'string' || p.length === 0)
+        return p;
+    if (p.startsWith('\\\\?\\UNC\\'))
+        return '\\\\' + p.slice(8);
+    if (p.startsWith('\\\\?\\'))
+        return p.slice(4);
+    return p;
+}
 // Back-compat for callsites that only need the resolved binary
 // (e.g. logging). Kept as a no-op identity on POSIX; on Windows
 // `where`-based resolution lives inside cross-spawn now.