From d99ca457f34bb754d20fc7ef2c048239176921fc Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 22:37:03 +0200
Subject: [PATCH 01/21] feat: LabWired branding pass and working install URLs

Apply a LabWired TUI theme, splash, and product start messages while keeping
OpenCode as the engine (`labwired agent opencode` still works). Point public
install docs at live macOS/Linux and Windows endpoints that return 200.
---
 CHANGELOG.md                    |  9 +++-
 README.md                       |  9 +++-
 VERSION                         |  2 +-
 bin/labwired-agent              | 81 +++++++++++++++++++++++++++++++--
 bin/labwired-agent.ps1          | 71 ++++++++++++++++++++++++++++-
 branding/banner.txt             |  5 +-
 branding/theme.css              |  7 ++-
 branding/themes/labwired.json   | 77 +++++++++++++++++++++++++++++++
 config/tui.json                 |  2 +-
 docs/INSTALL.md                 |  8 +++-
 install.sh                      | 38 ++++++++++++----
 package.json                    |  3 +-
 scripts/agent-install.sh        |  2 +-
 scripts/check-public-package.sh |  4 +-
 scripts/install.ps1             | 36 +++++++++++++--
 scripts/public/DEPLOY.md        | 16 +++++--
 scripts/public/install          |  7 +--
 scripts/public/install.ps1      |  3 +-
 tests/public-install.sh         | 25 ++++++----
 19 files changed, 356 insertions(+), 49 deletions(-)
 create mode 100644 branding/themes/labwired.json

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 3bf3dee..09fd593 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,9 +1,16 @@
 # Changelog
 
+## 0.3.8 — 2026-08-10 — Product branding + install URLs
+
+- LabWired TUI theme (`branding/themes/labwired.json`) applied on install and agent start.
+- Splash banner, terminal title, and product start messages (OpenCode remains the engine).
+- Public install URLs match the live site: `labwired.com/install` (macOS/Linux) and `labwired.com/install.ps1` (Windows).
+- `labwired agent opencode` stays a supported alias.
+
 ## 0.3.7 — 2026-08-10 — Public Agent release
 
 - Start the agent with `labwired agent`.
-- Install only the agent from `/install/agent`.
+- Install only the agent from `labwired.com/install`.
 - Keep existing LabWired Core commands working.
 - Update and remove the agent without changing Core data.
 - Use shorter public documentation.
diff --git a/README.md b/README.md
index 765612e..cd98134 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,14 @@
 Write firmware and test its behavior on a digital twin.
 
 ```bash
-curl -fsSL https://labwired.com/install/agent | bash
+# macOS / Linux
+curl -fsSL https://labwired.com/install | bash
+labwired agent
+```
+
+```powershell
+# Windows (PowerShell)
+irm https://labwired.com/install.ps1 | iex
 labwired agent
 ```
 
diff --git a/VERSION b/VERSION
index 0f82685..6678432 100644
--- a/VERSION
+++ b/VERSION
@@ -1 +1 @@
-0.3.7
+0.3.8
diff --git a/bin/labwired-agent b/bin/labwired-agent
index 748ac2e..c583318 100755
--- a/bin/labwired-agent
+++ b/bin/labwired-agent
@@ -199,6 +199,18 @@ cmd_doctor() {
   else
     printf '\033[33mwarn\033[0m branding: missing — re-run ./install.sh\n'
   fi
+  if [[ -f "$cfg/themes/labwired.json" ]] || [[ -f "$ROOT/branding/themes/labwired.json" ]]; then
+    say "ok  theme: labwired"
+  else
+    printf '\033[33mwarn\033[0m theme: missing labwired — re-run labwired agent or ./install.sh\n'
+  fi
+  if [[ -f "$cfg/tui.json" ]] && grep -q '"labwired"' "$cfg/tui.json" 2>/dev/null; then
+    say "ok  tui: LabWired theme selected"
+  elif [[ -f "$ROOT/config/tui.json" ]]; then
+    say "ok  tui: kit default (will apply on next agent start)"
+  else
+    printf '\033[33mwarn\033[0m tui: missing — re-run ./install.sh\n'
+  fi
 
   # Five primary packs (ship surface). Aliases optional.
   local skill
@@ -496,12 +508,67 @@ cmd_whoami() {
   echo "mcp:      remote https://api.labwired.com/mcp (shared labwired_* tools)"
 }
 
+# Product chrome for the OpenCode TUI substrate (theme, banner, terminal title).
+# OpenCode remains the engine; we brand the LabWired product surface.
+labwired_apply_branding() {
+  local cfg_dir
+  cfg_dir="${OPENCODE_CONFIG_DIR:-$HOME/.config/opencode}"
+  mkdir -p "$cfg_dir/themes" "$cfg_dir/branding"
+
+  # Product theme is always refreshed; user banner/logo stay if already present.
+  if [[ -f "$ROOT/branding/themes/labwired.json" ]]; then
+    cp "$ROOT/branding/themes/labwired.json" "$cfg_dir/themes/labwired.json"
+  fi
+  if [[ -d "$ROOT/branding" ]]; then
+    local f
+    for f in "$ROOT/branding"/*; do
+      [[ -f "$f" ]] || continue
+      local dest="$cfg_dir/branding/$(basename "$f")"
+      if [[ ! -e "$dest" ]]; then
+        cp "$f" "$dest"
+      fi
+    done
+  fi
+  # Default product theme; do not clobber user-chosen themes (tokyonight, etc.).
+  if [[ ! -e "$cfg_dir/tui.json" ]]; then
+    if [[ -f "$ROOT/config/tui.json" ]]; then
+      cp "$ROOT/config/tui.json" "$cfg_dir/tui.json"
+    else
+      printf '%s\n' '{' '  "$schema": "https://opencode.ai/tui.json",' '  "theme": "labwired"' '}' >"$cfg_dir/tui.json"
+    fi
+  elif grep -Eq '"theme"[[:space:]]*:[[:space:]]*"(system|opencode)"' "$cfg_dir/tui.json" 2>/dev/null; then
+    if [[ -f "$ROOT/config/tui.json" ]]; then
+      cp "$ROOT/config/tui.json" "$cfg_dir/tui.json"
+    fi
+  fi
+
+  # Terminal window / tab title (OSC 0). No-op when not a TTY.
+  if [[ -t 1 ]] || [[ -t 2 ]]; then
+    printf '\033]0;LabWired Agent\007' 2>/dev/null || true
+  fi
+}
+
+labwired_splash() {
+  if [[ ! -t 2 ]]; then
+    return 0
+  fi
+  if [[ -f "$ROOT/branding/banner.txt" ]]; then
+    printf '\033[34m' >&2
+    cat "$ROOT/branding/banner.txt" >&2
+    printf '\033[0m' >&2
+  else
+    brand "  LabWired Agent"
+    brand "  Write firmware · check on a twin"
+  fi
+}
+
 labwired_prepare_agent_start() {
   # Ensure skills + AGENTS.md are discoverable by OpenCode even when the user
   # only has a partial ~/.config/opencode from an older install.
   local cfg_dir
   cfg_dir="${OPENCODE_CONFIG_DIR:-$HOME/.config/opencode}"
   mkdir -p "$cfg_dir/skills"
+  labwired_apply_branding
   if [[ -f "$ROOT/config/AGENTS.md" && ! -f "$cfg_dir/AGENTS.md" ]]; then
     cp "$ROOT/config/AGENTS.md" "$cfg_dir/AGENTS.md"
   fi
@@ -608,14 +675,15 @@ cmd_help() {
     echo
   fi
   cat <<'EOF'
-LabWired Agent — start here (OpenCode + packs + shared MCP)
+LabWired Agent — write firmware, check on a twin
 
   curl install → labwired agent login → labwired agent doctor → labwired agent
   In chat: "Blink the LED and prove it on the twin."
   (Playground Architect is optional / secondary — same labwired_* tools.)
 
 Usage:
-  labwired agent                 Start OpenCode agent (golden-path first + MCP)
+  labwired agent                 Start LabWired Agent (golden-path + MCP)
+  labwired agent opencode …      Same start (OpenCode engine alias)
   labwired agent login           Device-code sign-in → hosted MCP + model gateway
   labwired agent logout          Clear cloud session
   labwired agent whoami          Show signed-in identity / project
@@ -934,6 +1002,7 @@ case "${1:-}" in
     labwired_probe_cmd "$@"
     ;;
   agent|opencode)
+    # `opencode` remains a supported alias: same product start, OpenCode engine.
     shift || true
     if [[ -n "${LABWIRED_HOME:-}" && -d "${LABWIRED_HOME}/bin" ]]; then
       export PATH="${LABWIRED_HOME}/bin:${PATH}"
@@ -945,8 +1014,9 @@ case "${1:-}" in
     if [[ "${LABWIRED_PROFILE:-}" != "hosted" ]]; then
       labwired_export_sim || true
     fi
-    echo "labwired: starting OpenCode — default skill golden-path; packs bringup/prove/observe/desk-hw" >&2
-    echo "labwired: knowledge MCP labwired_part + labwired_datasheet; compose: labwired agent compose …" >&2
+    labwired_splash
+    echo "labwired: starting LabWired Agent — skill golden-path; packs bringup/prove/observe/desk-hw" >&2
+    echo "labwired: engine OpenCode · twin tools via MCP labwired_* · compose: labwired agent compose …" >&2
     exec opencode "$@"
     ;;
   "")
@@ -968,7 +1038,8 @@ case "${1:-}" in
         echo "         or use LabWired debugger / probe-rs — sim is not required" >&2
       fi
     fi
-    echo "labwired: starting OpenCode — default skill golden-path (firmware first)" >&2
+    labwired_splash
+    echo "labwired: starting LabWired Agent — skill golden-path (firmware first)" >&2
     echo "labwired: start-here: login → doctor → labwired agent → “blink and prove it”" >&2
     exec opencode "$@"
     ;;
diff --git a/bin/labwired-agent.ps1 b/bin/labwired-agent.ps1
index 07d793d..96a8a16 100644
--- a/bin/labwired-agent.ps1
+++ b/bin/labwired-agent.ps1
@@ -71,7 +71,7 @@ function Show-Help {
 LabWired Agent (Windows)
 
 Usage:
-  labwired agent                 Start agent (OpenCode)
+  labwired agent                 Start LabWired Agent
   labwired agent doctor          Check install
   labwired agent update          Self-update kit + tools
   labwired agent version         Version
@@ -80,6 +80,8 @@ Usage:
   labwired agent install-deps    Refresh tools into prefix
   labwired agent help
 
+  Alias: labwired agent opencode …  (same start; OpenCode engine)
+
 Env:
   LABWIRED_HOME            Install root (default %USERPROFILE%\.labwired)
   LABWIRED_CLI / LABWIRED_SIM   Simulator
@@ -87,6 +89,55 @@ Env:
 "@
 }
 
+function Apply-LabWiredBranding {
+  $cfg = if ($env:OPENCODE_CONFIG_DIR) { $env:OPENCODE_CONFIG_DIR } else { Join-Path $env:USERPROFILE ".config\opencode" }
+  $themesDir = Join-Path $cfg "themes"
+  $brandingDir = Join-Path $cfg "branding"
+  if (-not (Test-Path $themesDir)) { New-Item -ItemType Directory -Path $themesDir -Force | Out-Null }
+  if (-not (Test-Path $brandingDir)) { New-Item -ItemType Directory -Path $brandingDir -Force | Out-Null }
+  $themeSrc = Join-Path $AgentHome "branding\themes\labwired.json"
+  if (Test-Path $themeSrc) {
+    Copy-Item -Force $themeSrc (Join-Path $themesDir "labwired.json")
+  }
+  $bannerSrc = Join-Path $AgentHome "branding\banner.txt"
+  $bannerDst = Join-Path $brandingDir "banner.txt"
+  if ((Test-Path $bannerSrc) -and -not (Test-Path $bannerDst)) {
+    Copy-Item $bannerSrc $bannerDst
+  }
+  $tuiSrc = Join-Path $AgentHome "config\tui.json"
+  $tuiDst = Join-Path $cfg "tui.json"
+  $writeTui = -not (Test-Path $tuiDst)
+  if (-not $writeTui -and (Test-Path $tuiDst)) {
+    $existing = Get-Content -Raw $tuiDst
+    if ($existing -match '"theme"\s*:\s*"(system|opencode)"') { $writeTui = $true }
+  }
+  if ($writeTui) {
+    if (Test-Path $tuiSrc) {
+      Copy-Item -Force $tuiSrc $tuiDst
+    } else {
+      Set-Content -Path $tuiDst -Value @"
+{
+  "`$schema": "https://opencode.ai/tui.json",
+  "theme": "labwired"
+}
+"@ -Encoding utf8
+    }
+  }
+  try {
+    $Host.UI.RawUI.WindowTitle = "LabWired Agent"
+  } catch { }
+}
+
+function Show-LabWiredSplash {
+  $banner = Join-Path $AgentHome "branding\banner.txt"
+  if (Test-Path $banner) {
+    Write-Host (Get-Content $banner -Raw) -ForegroundColor Blue
+  } else {
+    Write-Host "  LabWired Agent" -ForegroundColor Blue
+    Write-Host "  Write firmware · check on a twin" -ForegroundColor Blue
+  }
+}
+
 function Cmd-Version {
   $ver = "0.0.0"
   $vf = Join-Path $AgentHome "VERSION"
@@ -232,20 +283,38 @@ switch ($cmd) {
   "update" { Cmd-Update }
   "self-update" { Cmd-Update }
   "upgrade" { Cmd-Update }
+  "opencode" {
+    # Alias for product start (OpenCode remains the engine).
+    if (-not (Get-Command opencode -ErrorAction SilentlyContinue)) {
+      $pin = if ($env:OPENCODE_PIN) { $env:OPENCODE_PIN } else { "1.18.7" }
+      Fail "'opencode' not found. Install Node 18+, then: npm i -g opencode-ai@$pin"
+    }
+    Apply-LabWiredBranding
+    if (-not $env:LABWIRED_CLI) {
+      Write-Host "labwired: note — no local sim; hosted MCP verify still works." -ForegroundColor Yellow
+    }
+    Show-LabWiredSplash
+    Write-Host "labwired: starting LabWired Agent (OpenCode engine)" -ForegroundColor Cyan
+    & opencode @argsRest
+  }
   "" {
     if (-not (Get-Command opencode -ErrorAction SilentlyContinue)) {
       $pin = if ($env:OPENCODE_PIN) { $env:OPENCODE_PIN } else { "1.18.7" }
       Fail "'opencode' not found. Install Node 18+, then: npm i -g opencode-ai@$pin"
     }
+    Apply-LabWiredBranding
     if (-not $env:LABWIRED_CLI) {
       Write-Host "labwired: note — no local sim; hosted MCP verify still works." -ForegroundColor Yellow
     }
+    Show-LabWiredSplash
+    Write-Host "labwired: starting LabWired Agent (OpenCode engine)" -ForegroundColor Cyan
     & opencode @argsRest
   }
   default {
     if (-not (Get-Command opencode -ErrorAction SilentlyContinue)) {
       Fail "unknown command '$cmd' and opencode missing"
     }
+    Apply-LabWiredBranding
     & opencode @Rest
   }
 }
diff --git a/branding/banner.txt b/branding/banner.txt
index 08fd7be..4ac7237 100644
--- a/branding/banner.txt
+++ b/branding/banner.txt
@@ -1 +1,4 @@
-LabWired Agent
+
+  L A B W I R E D   A G E N T
+  Write firmware · check on a twin
+
diff --git a/branding/theme.css b/branding/theme.css
index 41b39b1..fbab7b8 100644
--- a/branding/theme.css
+++ b/branding/theme.css
@@ -1,6 +1,11 @@
-/* LabWired product chrome for agent docs / future surfaces */
+/* LabWired product chrome (docs, workbench, future web surfaces) */
 :root {
   --lw-accent: #0056b3;
+  --lw-accent-bright: #3d8fd1;
   --lw-fg: #14151a;
   --lw-bg: #f7f8fb;
+  --lw-panel: #eef1f7;
+  --lw-success: #2f9e6b;
+  --lw-warning: #c9922a;
+  --lw-error: #d64545;
 }
diff --git a/branding/themes/labwired.json b/branding/themes/labwired.json
new file mode 100644
index 0000000..697eb37
--- /dev/null
+++ b/branding/themes/labwired.json
@@ -0,0 +1,77 @@
+{
+  "$schema": "https://opencode.ai/theme.json",
+  "defs": {
+    "lwBlue": "#0056b3",
+    "lwBlueBright": "#3d8fd1",
+    "lwBlueDeep": "#003d80",
+    "lwInk": "#14151a",
+    "lwInkSoft": "#2a2c35",
+    "lwPanel": "#1c1e26",
+    "lwPanelSoft": "#252833",
+    "lwBorder": "#343848",
+    "lwBorderActive": "#4a5168",
+    "lwFg": "#e8eaf0",
+    "lwFgMuted": "#8b91a3",
+    "lwSuccess": "#2f9e6b",
+    "lwWarning": "#c9922a",
+    "lwError": "#d64545",
+    "lwInfo": "#3d8fd1",
+    "lwLightBg": "#f7f8fb",
+    "lwLightPanel": "#eef1f7",
+    "lwLightFg": "#14151a",
+    "lwLightMuted": "#5c6370",
+    "lwLightBorder": "#c9d0dc"
+  },
+  "theme": {
+    "primary": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "secondary": { "dark": "lwFgMuted", "light": "lwLightMuted" },
+    "accent": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "error": { "dark": "lwError", "light": "lwError" },
+    "warning": { "dark": "lwWarning", "light": "lwWarning" },
+    "success": { "dark": "lwSuccess", "light": "lwSuccess" },
+    "info": { "dark": "lwInfo", "light": "lwInfo" },
+    "text": { "dark": "lwFg", "light": "lwLightFg" },
+    "textMuted": { "dark": "lwFgMuted", "light": "lwLightMuted" },
+    "background": { "dark": "lwInk", "light": "lwLightBg" },
+    "backgroundPanel": { "dark": "lwPanel", "light": "lwLightPanel" },
+    "backgroundElement": { "dark": "lwPanelSoft", "light": "#e4e8f0" },
+    "border": { "dark": "lwBorder", "light": "lwLightBorder" },
+    "borderActive": { "dark": "lwBorderActive", "light": "lwBlue" },
+    "borderSubtle": { "dark": "lwBorder", "light": "lwLightBorder" },
+    "diffAdded": { "dark": "lwSuccess", "light": "lwSuccess" },
+    "diffRemoved": { "dark": "lwError", "light": "lwError" },
+    "diffContext": { "dark": "lwFgMuted", "light": "lwLightMuted" },
+    "diffHunkHeader": { "dark": "lwFgMuted", "light": "lwLightMuted" },
+    "diffHighlightAdded": { "dark": "lwSuccess", "light": "lwSuccess" },
+    "diffHighlightRemoved": { "dark": "lwError", "light": "lwError" },
+    "diffAddedBg": { "dark": "#163528", "light": "#d9f0e5" },
+    "diffRemovedBg": { "dark": "#3a1a1a", "light": "#f8dede" },
+    "diffContextBg": { "dark": "lwPanel", "light": "lwLightPanel" },
+    "diffLineNumber": { "dark": "lwBorder", "light": "lwLightBorder" },
+    "diffAddedLineNumberBg": { "dark": "#163528", "light": "#d9f0e5" },
+    "diffRemovedLineNumberBg": { "dark": "#3a1a1a", "light": "#f8dede" },
+    "markdownText": { "dark": "lwFg", "light": "lwLightFg" },
+    "markdownHeading": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "markdownLink": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "markdownLinkText": { "dark": "lwInfo", "light": "lwBlue" },
+    "markdownCode": { "dark": "lwSuccess", "light": "lwSuccess" },
+    "markdownBlockQuote": { "dark": "lwFgMuted", "light": "lwLightMuted" },
+    "markdownEmph": { "dark": "lwWarning", "light": "lwWarning" },
+    "markdownStrong": { "dark": "lwFg", "light": "lwLightFg" },
+    "markdownHorizontalRule": { "dark": "lwBorder", "light": "lwLightBorder" },
+    "markdownListItem": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "markdownListEnumeration": { "dark": "lwInfo", "light": "lwBlue" },
+    "markdownImage": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "markdownImageText": { "dark": "lwInfo", "light": "lwBlue" },
+    "markdownCodeBlock": { "dark": "lwFg", "light": "lwLightFg" },
+    "syntaxComment": { "dark": "lwFgMuted", "light": "lwLightMuted" },
+    "syntaxKeyword": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "syntaxFunction": { "dark": "lwInfo", "light": "lwBlueDeep" },
+    "syntaxVariable": { "dark": "lwFg", "light": "lwLightFg" },
+    "syntaxString": { "dark": "lwSuccess", "light": "lwSuccess" },
+    "syntaxNumber": { "dark": "lwWarning", "light": "lwWarning" },
+    "syntaxType": { "dark": "lwInfo", "light": "lwBlue" },
+    "syntaxOperator": { "dark": "lwBlueBright", "light": "lwBlue" },
+    "syntaxPunctuation": { "dark": "lwFgMuted", "light": "lwLightMuted" }
+  }
+}
diff --git a/config/tui.json b/config/tui.json
index 59f46ac..70e0b71 100644
--- a/config/tui.json
+++ b/config/tui.json
@@ -1,4 +1,4 @@
 {
   "$schema": "https://opencode.ai/tui.json",
-  "theme": "system"
+  "theme": "labwired"
 }
diff --git a/docs/INSTALL.md b/docs/INSTALL.md
index 4965c49..57afd8f 100644
--- a/docs/INSTALL.md
+++ b/docs/INSTALL.md
@@ -10,17 +10,21 @@ changing each other's files or data.
 ## Install on macOS or Linux
 
 ```bash
-curl -fsSL https://labwired.com/install/agent | bash
+curl -fsSL https://labwired.com/install | bash
 ```
 
+Legacy aliases also work: `https://labwired.com/agent-install.sh`
+
 ## Install on Windows
 
 Run PowerShell:
 
 ```powershell
-irm https://labwired.com/install/agent.ps1 | iex
+irm https://labwired.com/install.ps1 | iex
 ```
 
+Legacy aliases also work: `https://labwired.com/agent-install.ps1`
+
 Start the Agent after installation:
 
 ```bash
diff --git a/install.sh b/install.sh
index 0ef7c51..4ea1557 100755
--- a/install.sh
+++ b/install.sh
@@ -93,11 +93,11 @@ Portable, contained install (multi-platform):
   --hosted           Remote MCP + api.labwired.com model (labwired login)
   --prefix DIR       Portable root (USB, CI, /opt/labwired)
 
-  curl -fsSL https://labwired.com/install/agent | bash
-  irm 'https://labwired.com/install?win32=true' | iex   # Windows
+  curl -fsSL https://labwired.com/install | bash
+  irm https://labwired.com/install.ps1 | iex   # Windows
   npx @labwired/agent
 
-  After install:  labwired smoke && labwired
+  After install:  labwired agent doctor && labwired agent
 
 Env:
   LABWIRED_HOME  LABWIRED_BIN_DIR  LABWIRED_INSTALL_PIO=1  LABWIRED_FAST=0
@@ -354,14 +354,31 @@ WRAP
 chmod 0755 "$_prefix_dispatcher_tmp"
 mv -f "$_prefix_dispatcher_tmp" "${PREFIX_BIN}/labwired"
 
-# Branding into OpenCode config (product identity)
-mkdir -p "$CFG_DIR/branding"
+# Branding into OpenCode config (product identity).
+# Force-refresh LabWired theme + default tui theme. Flat branding files are
+# owned only when absent so user banners/custom assets survive reinstall.
+mkdir -p "$CFG_DIR/branding" "$CFG_DIR/themes"
+if [[ -f "$AGENT_HOME/branding/themes/labwired.json" ]]; then
+  cp "$AGENT_HOME/branding/themes/labwired.json" "$CFG_DIR/themes/labwired.json"
+  grep -Fqx "themes/labwired.json" "$MANIFEST" 2>/dev/null || printf '%s\n' "themes/labwired.json" >>"$MANIFEST"
+fi
 while IFS= read -r branding_file; do
   rel="${branding_file#"$AGENT_HOME/branding/"}"
+  # Nested themes live under CFG_DIR/themes, not branding/themes.
+  case "$rel" in
+    themes/*) continue ;;
+  esac
   _install_owned_file_if_absent "$branding_file" "$CFG_DIR/branding/$rel"
 done < <(find "$AGENT_HOME/branding" -type f -print 2>/dev/null)
 if [[ -f "$AGENT_HOME/config/tui.json" ]]; then
-  _install_owned_file_if_absent "$AGENT_HOME/config/tui.json" "$CFG_DIR/tui.json"
+  if [[ ! -e "$CFG_DIR/tui.json" && ! -L "$CFG_DIR/tui.json" ]]; then
+    cp "$AGENT_HOME/config/tui.json" "$CFG_DIR/tui.json"
+    grep -Fqx "tui.json" "$MANIFEST" 2>/dev/null || printf '%s\n' "tui.json" >>"$MANIFEST"
+  elif grep -Eq '"theme"[[:space:]]*:[[:space:]]*"(system|opencode)"' "$CFG_DIR/tui.json" 2>/dev/null; then
+    # Upgrade stock OpenCode defaults to LabWired product theme.
+    cp "$AGENT_HOME/config/tui.json" "$CFG_DIR/tui.json"
+    grep -Fqx "tui.json" "$MANIFEST" 2>/dev/null || printf '%s\n' "tui.json" >>"$MANIFEST"
+  fi
 fi
 
 # Thin user PATH shim — self-contained (no need to source env.sh first)
@@ -416,9 +433,12 @@ cat <<EOF
 
 $(printf '\033[32m✓\033[0m') LabWired Agent installed
 
-  Run:     labwired
-  Check:   labwired doctor
-  Update:  curl -fsSL https://labwired.com/install/agent | bash
+  Run:     labwired agent
+  Check:   labwired agent doctor
+  Update:  curl -fsSL https://labwired.com/install | bash
+
+  macOS/Linux:  curl -fsSL https://labwired.com/install | bash
+  Windows:      irm https://labwired.com/install.ps1 | iex
 
 EOF
 
diff --git a/package.json b/package.json
index 27f0fb2..d23180e 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@labwired/agent",
-  "version": "0.3.7",
+  "version": "0.3.8",
   "description": "Firmware agent with LabWired twin verification",
   "license": "MIT",
   "homepage": "https://labwired.com",
@@ -60,6 +60,7 @@
     "branding/banner.txt",
     "branding/logo.svg",
     "branding/theme.css",
+    "branding/themes/labwired.json",
     "share/smoke/status-parser-model-verified.json",
     "share/smoke/status-parser-failed.json",
     "scripts/profiles/esp32c3-serial.sh",
diff --git a/scripts/agent-install.sh b/scripts/agent-install.sh
index 94055e4..f94b960 100755
--- a/scripts/agent-install.sh
+++ b/scripts/agent-install.sh
@@ -1,6 +1,6 @@
 #!/usr/bin/env bash
 # Legacy URL entry → same as scripts/public/install
-# Prefer: curl -fsSL https://labwired.com/install/agent | bash
+# Prefer: curl -fsSL https://labwired.com/install | bash
 set -euo pipefail
 HERE="$(CDPATH= cd -- "$(dirname "$0")" && pwd)"
 if [[ -f "$HERE/public/install" ]]; then
diff --git a/scripts/check-public-package.sh b/scripts/check-public-package.sh
index b5bb7bd..b0ab428 100755
--- a/scripts/check-public-package.sh
+++ b/scripts/check-public-package.sh
@@ -30,8 +30,8 @@ reject() {
   done
 }
 
-reject 'https://labwired\.com/install([^/[:alnum:]]|$)' 'use https://labwired.com/install/agent'
-reject '/agent-install\.sh' 'use the public /install/agent endpoint'
+# Live GitHub Pages serves flat install endpoints. Nested /install/agent is 404.
+reject 'https://labwired\.com/install/agent' 'use https://labwired.com/install (macOS/Linux) or https://labwired.com/install.ps1 (Windows)'
 reject '(^|[^[:alnum:]_-])labwired doctor([^[:alnum:]_-]|$)' 'use labwired agent doctor'
 reject '(^|[^[:alnum:]_-])labwired login([^[:alnum:]_-]|$)' 'use labwired agent login'
 reject 'Gate 1' 'replace the internal gate name with plain language'
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index db7a1db..070eb39 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -32,7 +32,7 @@
   Require LABWIRED_MCP_ENTRY or mcp\vendor.
 
 .EXAMPLE
-  irm https://labwired.com/install/agent.ps1 | iex
+  irm https://labwired.com/install.ps1 | iex
   .\scripts\install.ps1 -Prefix $env:USERPROFILE\.labwired
 #>
 [CmdletBinding()]
@@ -621,16 +621,42 @@ function Install-OpenCodeConfig {
       if (-not (Test-Path $destination)) { Protect-Mutation $destination; Copy-Safe $_.FullName $destination -Recurse }
     }
   }
+  # LabWired product chrome: always refresh theme; keep user banner if present.
+  $themeSrc = Join-Path $agent "branding\themes\labwired.json"
+  if (Test-Path $themeSrc) {
+    $themesDir = Join-Path $cfg "themes"
+    Protect-Mutation $themesDir
+    Ensure-Dir $themesDir
+    $themeDst = Join-Path $themesDir "labwired.json"
+    Protect-Mutation $themeDst
+    Copy-Safe $themeSrc $themeDst
+  }
   if (Test-Path (Join-Path $agent "branding")) {
     $brandingDir = Join-Path $cfg "branding"
     Protect-Mutation $brandingDir
     Ensure-Dir $brandingDir
     Get-ChildItem (Join-Path $agent "branding") -File | ForEach-Object {
-      $destination = Join-Path (Join-Path $cfg "branding") $_.Name
-      if (-not (Test-Path $destination)) { Protect-Mutation $destination; Copy-Safe $_.FullName $destination }
+      $destination = Join-Path $brandingDir $_.Name
+      if (-not (Test-Path $destination)) {
+        Protect-Mutation $destination
+        Copy-Safe $_.FullName $destination
+      }
+    }
+  }
+  $tuiSrc = Join-Path $agent "config\tui.json"
+  $tuiDst = Join-Path $cfg "tui.json"
+  if (Test-Path $tuiSrc) {
+    $shouldWriteTui = -not (Test-Path $tuiDst)
+    if (-not $shouldWriteTui) {
+      $existing = Get-Content -Raw $tuiDst
+      if ($existing -match '"theme"\s*:\s*"(system|opencode)"') { $shouldWriteTui = $true }
+    }
+    if ($shouldWriteTui) {
+      Protect-Mutation $tuiDst
+      Copy-Safe $tuiSrc $tuiDst
     }
   }
-  Ok "OpenCode config → $cfg"
+  Ok "LabWired config → $cfg (OpenCode engine)"
 }
 
 # ── main ─────────────────────────────────────────────────────────────────────
@@ -700,5 +726,5 @@ Write-Host "✓ LabWired Agent installed" -ForegroundColor Green
 Write-Host ""
 Write-Host "  Run:     labwired agent"
 Write-Host "  Check:   labwired agent doctor"
-Write-Host "  Update:  irm https://labwired.com/install/agent.ps1 | iex"
+Write-Host "  Update:  irm https://labwired.com/install.ps1 | iex"
 Write-Host ""
diff --git a/scripts/public/DEPLOY.md b/scripts/public/DEPLOY.md
index 0d017d5..9d00265 100644
--- a/scripts/public/DEPLOY.md
+++ b/scripts/public/DEPLOY.md
@@ -1,18 +1,24 @@
 # Deploy Agent install endpoints
 
-Publish these files as plain text with UTF-8 encoding:
+Publish these files as plain text with UTF-8 encoding on the landing site
+(`labwired-landing-deck` / `astro/public/`):
 
 | Public URL | Repository file |
 |---|---|
-| `https://labwired.com/install/agent` | `scripts/public/install` |
-| `https://labwired.com/install/agent.ps1` | `scripts/public/install.ps1` |
+| `https://labwired.com/install` | `scripts/public/install` |
+| `https://labwired.com/install.ps1` | `scripts/public/install.ps1` |
+| `https://labwired.com/agent-install.sh` | same body as `install` (legacy alias) |
+| `https://labwired.com/agent-install.ps1` | same body as `install.ps1` (legacy alias) |
 
 Public guides use these commands:
 
 ```bash
-curl -fsSL https://labwired.com/install/agent | bash
+curl -fsSL https://labwired.com/install | bash
 ```
 
 ```powershell
-irm https://labwired.com/install/agent.ps1 | iex
+irm https://labwired.com/install.ps1 | iex
 ```
+
+Note: nested paths like `/install/agent` are not used on GitHub Pages; keep
+flat URLs so macOS and Windows one-liners keep working.
\ No newline at end of file
diff --git a/scripts/public/install b/scripts/public/install
index b9ee75f..2e099d0 100755
--- a/scripts/public/install
+++ b/scripts/public/install
@@ -1,12 +1,13 @@
 #!/usr/bin/env bash
 # LabWired Agent — one-line install (Cursor-style)
 #
-#   curl -fsSL https://labwired.com/install/agent | bash
+#   curl -fsSL https://labwired.com/install | bash
 #
-# That's it. Then: labwired
+# That's it. Then: labwired agent
 #
 # Windows:  irm https://labwired.com/install.ps1 | iex
-# Optional: curl -fsSL https://labwired.com/install/agent | bash -s -- --prefix /opt/labwired
+# Optional: curl -fsSL https://labwired.com/install | bash -s -- --prefix /opt/labwired
+# Legacy:   https://labwired.com/agent-install.sh
 set -euo pipefail
 
 if [[ "$(uname -s 2>/dev/null || true)" == MINGW* ]] \
diff --git a/scripts/public/install.ps1 b/scripts/public/install.ps1
index 1d7b8f0..bc57685 100755
--- a/scripts/public/install.ps1
+++ b/scripts/public/install.ps1
@@ -1,9 +1,10 @@
 # LabWired Agent — one-line install (Windows, Cursor-style)
 #
-#   irm https://labwired.com/install/agent.ps1 | iex
+#   irm https://labwired.com/install.ps1 | iex
 #   irm 'https://labwired.com/install?win32=true' | iex
 #
 # That's it. Then: labwired agent
+# Legacy: agent-install.ps1
 #Requires -Version 5.1
 $ErrorActionPreference = "Stop"
 
diff --git a/tests/public-install.sh b/tests/public-install.sh
index 306367c..9e22136 100755
--- a/tests/public-install.sh
+++ b/tests/public-install.sh
@@ -107,19 +107,28 @@ else
   fail=1
 fi
 
-if grep -q 'https://labwired.com/install/agent' "$ROOT/scripts/public/install" \
-  && grep -q 'https://labwired.com/install/agent' "$ROOT/scripts/agent-install.sh"; then
-  echo "ok   public agent install URL"
+# Live site (GitHub Pages) serves flat URLs. Nested /install/agent returns 404.
+if grep -q 'https://labwired.com/install | bash' "$ROOT/scripts/public/install" \
+  && grep -q 'https://labwired.com/install | bash' "$ROOT/scripts/agent-install.sh"; then
+  echo "ok   public agent install URL (macOS/Linux)"
 else
-  echo "FAIL public scripts missing /install/agent URL"
+  echo "FAIL public scripts missing https://labwired.com/install | bash"
   fail=1
 fi
-if grep -REq "https://labwired\\.com/install([[:space:]]|\"|'|$)" \
-  "$ROOT/scripts/public/install" "$ROOT/scripts/agent-install.sh"; then
-  echo "FAIL stale bare /install URL in public agent examples"
+if grep -q 'https://labwired.com/install.ps1' "$ROOT/scripts/public/install.ps1" \
+  && grep -q 'install.ps1' "$ROOT/scripts/public/install"; then
+  echo "ok   public agent install URL (Windows)"
+else
+  echo "FAIL public scripts missing Windows install.ps1 URL"
+  fail=1
+fi
+if grep -REq 'https://labwired\.com/install/agent' \
+  "$ROOT/scripts/public/install" "$ROOT/scripts/agent-install.sh" \
+  "$ROOT/README.md" "$ROOT/docs/INSTALL.md"; then
+  echo "FAIL stale nested /install/agent URL (404 on live site)"
   fail=1
 else
-  echo "ok   no stale bare /install URL"
+  echo "ok   no stale nested /install/agent URL"
 fi
 
 if grep -q '\["--agent-only", \.\.\.args\]' "$ROOT/scripts/npm-install.js" \

From ad0c3cf6d2ce65d084764ee624f9be7ebe76b303 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:13:08 +0200
Subject: [PATCH 02/21] fix: make PATH hooks idempotent and unbreak Windows CI

Reinstall no longer duplicates shell PATH hooks when LABWIRED_HOME is a
temp path without ~/.labwired markers. Replace Unicode em dashes in
Windows cmd/test strings so PowerShell 5.1 can parse the contract test.
---
 bin/labwired.cmd           | 2 +-
 install.sh                 | 8 ++++++--
 scripts/install.ps1        | 4 ++--
 tests/agent-lifecycle.sh   | 8 +++++++-
 tests/windows-contract.ps1 | 4 ++--
 5 files changed, 18 insertions(+), 8 deletions(-)

diff --git a/bin/labwired.cmd b/bin/labwired.cmd
index 5a10a2e..7ce267d 100644
--- a/bin/labwired.cmd
+++ b/bin/labwired.cmd
@@ -1,5 +1,5 @@
 @echo off
-REM LabWired product dispatcher — Windows entry (cmd.exe)
+REM LabWired product dispatcher - Windows entry (cmd.exe)
 setlocal
 if defined LABWIRED_HOME goto :run
 set "LABWIRED_HOME=%USERPROFILE%\.labwired"
diff --git a/install.sh b/install.sh
index 4ea1557..cdd8ae0 100755
--- a/install.sh
+++ b/install.sh
@@ -393,13 +393,17 @@ source "$(labwired_prefix_home)/env.sh" 2>/dev/null || true
 # Soft PATH persistence (portable — only if missing)
 _user_bin="$(labwired_user_bin)"
 _prefix="$(labwired_prefix_home)"
+# Marker must match the comment we write so reinstall is idempotent (temp
+# prefixes do not contain ~/.labwired paths that older greps looked for).
+_LW_PATH_MARKER='LabWired Agent (portable prefix)'
 for _rc in "${HOME}/.zprofile" "${HOME}/.zshrc" "${HOME}/.bashrc" "${HOME}/.profile"; do
   if [[ -f "$_rc" ]] || [[ "$_rc" == "${HOME}/.zprofile" ]]; then
     if [[ ! -f "$_rc" ]]; then touch "$_rc"; fi
-    if ! grep -q 'LABWIRED_HOME\|labwired/env.sh\|\.labwired/bin' "$_rc" 2>/dev/null; then
+    if ! grep -Fq "$_LW_PATH_MARKER" "$_rc" 2>/dev/null \
+      && ! grep -q 'LABWIRED_HOME\|labwired/env.sh\|\.labwired/bin' "$_rc" 2>/dev/null; then
       {
         echo ""
-        echo "# LabWired Agent (portable prefix)"
+        echo "# ${_LW_PATH_MARKER}"
         echo "[ -f \"${_prefix}/env.sh\" ] && . \"${_prefix}/env.sh\""
         echo "export PATH=\"${_user_bin}:\$PATH\""
       } >>"$_rc"
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index 070eb39..b7c1160 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -205,8 +205,8 @@ function Test-LegacyAgentLauncher([string]$Path) {
     $content = ((Get-Content -LiteralPath $Path -Raw).TrimStart([char]0xfeff)) -replace "`r`n", "`n"
     $current = ((Get-Content -LiteralPath (Join-Path $Src "bin\labwired.cmd") -Raw).TrimStart([char]0xfeff)) -replace "`r`n", "`n"
     $priorCanonical = $current.Replace(
-      "REM LabWired product dispatcher — Windows entry (cmd.exe)",
-      "REM LabWired Agent — Windows entry (cmd.exe)"
+      "REM LabWired product dispatcher - Windows entry (cmd.exe)",
+      "REM LabWired Agent - Windows entry (cmd.exe)"
     )
     $generatedLegacy = @"
 @echo off
diff --git a/tests/agent-lifecycle.sh b/tests/agent-lifecycle.sh
index 6be6829..d76cf8c 100755
--- a/tests/agent-lifecycle.sh
+++ b/tests/agent-lifecycle.sh
@@ -72,7 +72,13 @@ grep -qx 'keep me' "$LABWIRED_HOME/user-data/keep.txt"
 test ! -e "$LABWIRED_HOME/tools/sim/labwired-sim"
 test ! -d "$LABWIRED_HOME/editor"
 grep -qx 'existing rc' "$HOME/.zprofile"
-[[ "$(grep -c 'LabWired Agent (portable prefix)' "$HOME/.zprofile")" -eq 1 ]]
+# Portable prefixes never contain ~/.labwired; hook idempotency is by marker comment.
+_hook_count="$(grep -c 'LabWired Agent (portable prefix)' "$HOME/.zprofile" || true)"
+if [[ "$_hook_count" -ne 1 ]]; then
+  echo "FAIL expected one PATH hook, got ${_hook_count}:" >&2
+  cat "$HOME/.zprofile" >&2
+  exit 1
+fi
 cmp "$CORE_TARGET" "$TMP/original-core"
 cmp "$TMP/original-config.json" "$OPENCODE_CONFIG_DIR/opencode.json.labwired-backup"
 grep -q '"custom"' "$OPENCODE_CONFIG_DIR/opencode.json"
diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index 57bd45b..e97e099 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -229,8 +229,8 @@ exit /b 0
   $priorAgentPrefix = Join-Path $TempRoot "prior-agent-wrapper"
   New-Item -ItemType Directory -Path (Join-Path $priorAgentPrefix "bin") -Force | Out-Null
   $priorAgentContent = (Get-Content (Join-Path $Root "bin\labwired.cmd") -Raw).Replace(
-    "REM LabWired product dispatcher — Windows entry (cmd.exe)",
-    "REM LabWired Agent — Windows entry (cmd.exe)"
+    "REM LabWired product dispatcher - Windows entry (cmd.exe)",
+    "REM LabWired Agent - Windows entry (cmd.exe)"
   )
   [IO.File]::WriteAllText((Join-Path $priorAgentPrefix "bin\labwired.cmd"), $priorAgentContent, (New-Object Text.UTF8Encoding($true)))
   $result = Invoke-Installer @("-Prefix", $priorAgentPrefix, "-UserBin", (Join-Path $TempRoot "prior-agent-bin"), "-AgentOnly", "-SkipOpenCode", "-SkipPathUpdate")

From eb92459f329998c83ad2d58727582fd9a9d64155 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:14:45 +0200
Subject: [PATCH 03/21] fix(windows): quote cmd metacharacters when launching
 Core

Route .cmd/.bat Core through CreateProcess-style quoting and quote
arguments containing &|<>()^% so a&b survives the Windows dispatcher.
---
 bin/labwired.ps1 | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bin/labwired.ps1 b/bin/labwired.ps1
index 2c9d2dd..5dfbe51 100644
--- a/bin/labwired.ps1
+++ b/bin/labwired.ps1
@@ -38,7 +38,9 @@ function Get-CoreBin {
 }
 
 function ConvertTo-WindowsNativeArgument([AllowEmptyString()][string]$Value) {
-  if ($Value.Length -gt 0 -and $Value -notmatch '[\s"]') { return $Value }
+  # Quote when empty, whitespace/quotes present, or cmd.exe metacharacters so
+  # values like a&b survive CreateProcess → cmd (.cmd/.bat Core launchers).
+  if ($Value.Length -gt 0 -and $Value -notmatch '[\s"&|<>()^%!]') { return $Value }
   $encoded = New-Object Text.StringBuilder
   $backslash = [char]92
   $quote = [char]34
@@ -87,7 +89,9 @@ function Invoke-Component([string]$Path, [string]$Name, [string[]]$Arguments) {
     [Console]::Error.WriteLine("Install it, or set $overrideName to its executable.")
     exit 1
   }
-  if ([IO.Path]::GetExtension($Path) -ieq ".exe") {
+  $ext = [IO.Path]::GetExtension($Path)
+  # .exe and .cmd/.bat need CreateProcess-style quoting; .ps1 can use PowerShell splat.
+  if ($ext -ieq ".exe" -or $ext -ieq ".cmd" -or $ext -ieq ".bat") {
     exit (Invoke-NativeComponent $Path $Arguments)
   }
   & $Path @Arguments

From 6da8da6f6f329a2a7525897212bb8d27ae789040 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:16:16 +0200
Subject: [PATCH 04/21] fix(windows): preserve empty Agent argv through
 powershell -File

Call Agent .ps1 scripts via CreateProcess + powershell -File so empty
arguments and embedded quotes are not dropped by PowerShell splatting.
---
 bin/labwired.ps1 | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/bin/labwired.ps1 b/bin/labwired.ps1
index 5dfbe51..927aff3 100644
--- a/bin/labwired.ps1
+++ b/bin/labwired.ps1
@@ -90,10 +90,19 @@ function Invoke-Component([string]$Path, [string]$Name, [string[]]$Arguments) {
     exit 1
   }
   $ext = [IO.Path]::GetExtension($Path)
-  # .exe and .cmd/.bat need CreateProcess-style quoting; .ps1 can use PowerShell splat.
+  # Native launch preserves empty args and cmd metacharacters. PowerShell splat
+  # drops "" and mishandles some quote edges when calling another .ps1.
   if ($ext -ieq ".exe" -or $ext -ieq ".cmd" -or $ext -ieq ".bat") {
     exit (Invoke-NativeComponent $Path $Arguments)
   }
+  if ($ext -ieq ".ps1") {
+    $psExe = if ($PSVersionTable.PSEdition -eq "Core") {
+      (Get-Command pwsh -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Source -First 1)
+    } else { $null }
+    if (-not $psExe) { $psExe = Join-Path $PSHOME "powershell.exe" }
+    $psArgs = @("-NoProfile", "-ExecutionPolicy", "Bypass", "-File", $Path) + @($Arguments)
+    exit (Invoke-NativeComponent $psExe $psArgs)
+  }
   & $Path @Arguments
   if ($null -ne $LASTEXITCODE) { exit $LASTEXITCODE }
   if (-not $?) { exit 1 }

From 844dc844480f9ea394c952465074dd2633ba62de Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:17:26 +0200
Subject: [PATCH 05/21] test: print actual Agent argv on windows-contract
 failure

---
 tests/windows-contract.ps1 | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index e97e099..f27fe18 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -95,7 +95,12 @@ exit /b 0
   $result = Invoke-Dispatcher @("agent", "capture", "spaced value", "", "say`"hi", "tail")
   Assert-True ($result.Status -eq 0) "Agent argv capture exits zero"
   $actual = @(Get-Content $ArgsFile)
-  Assert-True (($actual -join '|') -eq '<capture>|<spaced value>|<>|<say"hi>|<tail>') "script component preserves spaced, empty, and quoted argv"
+  $joined = ($actual -join '|')
+  $expected = '<capture>|<spaced value>|<>|<say"hi>|<tail>'
+  if ($joined -ne $expected) {
+    Write-Host "DEBUG agent argv actual=[$joined] expected=[$expected] raw-out=[$($result.Output)]" -ForegroundColor Yellow
+  }
+  Assert-True ($joined -eq $expected) "script component preserves spaced, empty, and quoted argv"
 
   Remove-Item $ArgsFile -Force
   $shimCommand = '"{0}" agent capture "spaced value" "" tail' -f $Shim

From 21e233b6aa064952a068ffbb4e610051863929e2 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:18:39 +0200
Subject: [PATCH 06/21] fix(windows): pass Agent argv via EncodedCommand base64

powershell -File still collapses empty args and embedded quotes. Rehydrate
exact Agent arguments inside -EncodedCommand so capture tests and real
spawns keep spaced, empty, and quoted values.
---
 bin/labwired.ps1 | 21 +++++++++++++++++++--
 1 file changed, 19 insertions(+), 2 deletions(-)

diff --git a/bin/labwired.ps1 b/bin/labwired.ps1
index 927aff3..a890200 100644
--- a/bin/labwired.ps1
+++ b/bin/labwired.ps1
@@ -100,8 +100,25 @@ function Invoke-Component([string]$Path, [string]$Name, [string[]]$Arguments) {
       (Get-Command pwsh -ErrorAction SilentlyContinue | Select-Object -ExpandProperty Source -First 1)
     } else { $null }
     if (-not $psExe) { $psExe = Join-Path $PSHOME "powershell.exe" }
-    $psArgs = @("-NoProfile", "-ExecutionPolicy", "Bypass", "-File", $Path) + @($Arguments)
-    exit (Invoke-NativeComponent $psExe $psArgs)
+    # -File mangles empty args and embedded quotes on the CreateProcess command
+    # line. Re-hydrate argv from base64 inside -EncodedCommand instead.
+    $path64 = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($Path))
+    $argLiterals = @(
+      @($Arguments) | ForEach-Object {
+        "'" + [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($_)) + "'"
+      }
+    ) -join ","
+    $command = @"
+`$script = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('$path64'))
+`$encoded = @($argLiterals)
+`$argv = @(foreach (`$item in `$encoded) { [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String(`$item)) })
+& `$script @argv
+if (`$null -ne `$LASTEXITCODE) { exit `$LASTEXITCODE }
+if (-not `$?) { exit 1 }
+exit 0
+"@
+    $encodedCommand = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($command))
+    exit (Invoke-NativeComponent $psExe @("-NoProfile", "-ExecutionPolicy", "Bypass", "-EncodedCommand", $encodedCommand))
   }
   & $Path @Arguments
   if ($null -ne $LASTEXITCODE) { exit $LASTEXITCODE }

From d65bbd32f0a52855e2c8afaad033f794a280b785 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:19:53 +0200
Subject: [PATCH 07/21] fix(windows): use exact argv harness for Agent capture
 contract

Empty and quote-heavy Agent args were lost by the test's powershell -File
wrapper before the dispatcher ran. Drive that case through EncodedCommand
ExactArgs so the contract measures product behavior.
---
 tests/windows-contract.ps1 | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index f27fe18..8039b3f 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -92,7 +92,10 @@ exit /b 0
   Assert-True ($result.Status -eq 0) "cmd Core accepts quoted boundary argv"
   $cmdArgv = (Get-Content $ArgsFile -Raw).Trim()
   Assert-True ($cmdArgv -match '"quoted value"' -and $cmdArgv -match 'trail\\' -and $cmdArgv -match '100%' -and $cmdArgv -match 'bang!' -and $cmdArgv -match '"a&b"' -and $cmdArgv -match '"\(group\)"') "cmd Core does not worsen representable cmd.exe argv"
-  $result = Invoke-Dispatcher @("agent", "capture", "spaced value", "", "say`"hi", "tail")
+  # Invoke-Dispatcher uses powershell -File, which drops empty argv on the outer
+  # hop. ExactArgs rehydrates the full vector so this contract is about the
+  # product dispatcher, not the test harness launcher.
+  $result = Invoke-DispatcherWithExactArgs @("agent", "capture", "spaced value", "", "say`"hi", "tail")
   Assert-True ($result.Status -eq 0) "Agent argv capture exits zero"
   $actual = @(Get-Content $ArgsFile)
   $joined = ($actual -join '|')

From 176722de8718a20833c02b43d28843d9eddc6fd0 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:21:14 +0200
Subject: [PATCH 08/21] test: debug native Core argv mismatch

---
 tests/windows-contract.ps1 | 10 +++++++++-
 1 file changed, 9 insertions(+), 1 deletion(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index 8039b3f..4d29a1b 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -141,7 +141,15 @@ public static class NativeArgvEcho {
   Assert-True ($result.Status -eq 0) "native Core executable route exits zero"
   $expectedNative = @($nativeArgs | ForEach-Object { [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($_)) })
   $actualNative = @($result.Output -split "`r?`n" | Where-Object { $_.Length -gt 0 })
-  Assert-True (($actualNative -join '|') -eq ($expectedNative -join '|')) "native Core preserves all argv boundaries"
+  $nativeJoined = ($actualNative -join '|')
+  $nativeExpectedJoined = ($expectedNative -join '|')
+  if ($nativeJoined -ne $nativeExpectedJoined) {
+    $decoded = @($actualNative | ForEach-Object {
+      try { [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String($_)) } catch { "<bad:$_>" }
+    })
+    Write-Host ("DEBUG native actual=[{0}] decoded=[{1}]" -f $nativeJoined, ($decoded -join '|')) -ForegroundColor Yellow
+  }
+  Assert-True ($nativeJoined -eq $nativeExpectedJoined) "native Core preserves all argv boundaries"
   $result = Invoke-DispatcherWithExactArgs @("core", "--exit=23")
   Assert-True ($result.Status -eq 23) "native Core nonzero exit is propagated exactly"
   $result = Invoke-DispatcherWithExactArgs @("core", "--streams")

From 0ff402eb48b6fc6c2733d214d4b23f1d67ff4ae5 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:23:30 +0200
Subject: [PATCH 09/21] fix(windows): preserve empty argv through dispatcher
 binding

AllowEmptyString on component argv parameters, force string[] copies, and
use ProcessStartInfo.ArgumentList when available so empty Core/Agent args
survive Windows PowerShell parameter binding and CreateProcess.
---
 bin/labwired.ps1 | 45 +++++++++++++++++++++++++++++++++------------
 1 file changed, 33 insertions(+), 12 deletions(-)

diff --git a/bin/labwired.ps1 b/bin/labwired.ps1
index a890200..03f09c4 100644
--- a/bin/labwired.ps1
+++ b/bin/labwired.ps1
@@ -63,14 +63,28 @@ function ConvertTo-WindowsNativeArgument([AllowEmptyString()][string]$Value) {
   return $encoded.ToString()
 }
 
-function Invoke-NativeComponent([string]$Path, [string[]]$Arguments) {
+function Invoke-NativeComponent {
+  param(
+    [Parameter(Mandatory = $true)][string]$Path,
+    [Parameter(Mandatory = $false)][AllowEmptyString()][AllowEmptyCollection()][string[]]$Arguments = @()
+  )
+  $argv = if ($null -eq $Arguments) { @() } else { [string[]]@($Arguments) }
   $startInfo = New-Object Diagnostics.ProcessStartInfo
   $startInfo.FileName = $Path
   $startInfo.UseShellExecute = $false
   $startInfo.CreateNoWindow = $true
   $startInfo.RedirectStandardOutput = $true
   $startInfo.RedirectStandardError = $true
-  $startInfo.Arguments = (($Arguments | ForEach-Object { ConvertTo-WindowsNativeArgument $_ }) -join ' ')
+  # Prefer ArgumentList when present (pwsh / .NET Core) — it preserves empty argv.
+  $argList = $null
+  try { $argList = $startInfo.ArgumentList } catch { $argList = $null }
+  if ($null -ne $argList) {
+    foreach ($a in $argv) { [void]$argList.Add([string]$a) }
+  } else {
+    $parts = New-Object System.Collections.Generic.List[string]
+    foreach ($a in $argv) { [void]$parts.Add((ConvertTo-WindowsNativeArgument ([string]$a))) }
+    $startInfo.Arguments = ($parts -join ' ')
+  }
   $process = New-Object Diagnostics.Process
   $process.StartInfo = $startInfo
   if (-not $process.Start()) { return 1 }
@@ -82,7 +96,13 @@ function Invoke-NativeComponent([string]$Path, [string[]]$Arguments) {
   return $process.ExitCode
 }
 
-function Invoke-Component([string]$Path, [string]$Name, [string[]]$Arguments) {
+function Invoke-Component {
+  param(
+    [Parameter(Mandatory = $true)][string]$Path,
+    [Parameter(Mandatory = $true)][string]$Name,
+    [Parameter(Mandatory = $false)][AllowEmptyString()][AllowEmptyCollection()][string[]]$Arguments = @()
+  )
+  $argv = if ($null -eq $Arguments) { @() } else { [string[]]@($Arguments) }
   if (-not $Path -or -not (Test-Path -LiteralPath $Path -PathType Leaf)) {
     [Console]::Error.WriteLine("labwired: LabWired $Name is not installed.")
     $overrideName = "LABWIRED_{0}_BIN" -f $Name.ToUpperInvariant()
@@ -93,7 +113,7 @@ function Invoke-Component([string]$Path, [string]$Name, [string[]]$Arguments) {
   # Native launch preserves empty args and cmd metacharacters. PowerShell splat
   # drops "" and mishandles some quote edges when calling another .ps1.
   if ($ext -ieq ".exe" -or $ext -ieq ".cmd" -or $ext -ieq ".bat") {
-    exit (Invoke-NativeComponent $Path $Arguments)
+    exit (Invoke-NativeComponent -Path $Path -Arguments $argv)
   }
   if ($ext -ieq ".ps1") {
     $psExe = if ($PSVersionTable.PSEdition -eq "Core") {
@@ -104,8 +124,8 @@ function Invoke-Component([string]$Path, [string]$Name, [string[]]$Arguments) {
     # line. Re-hydrate argv from base64 inside -EncodedCommand instead.
     $path64 = [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($Path))
     $argLiterals = @(
-      @($Arguments) | ForEach-Object {
-        "'" + [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($_)) + "'"
+      $argv | ForEach-Object {
+        "'" + [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes([string]$_)) + "'"
       }
     ) -join ","
     $command = @"
@@ -118,28 +138,29 @@ if (-not `$?) { exit 1 }
 exit 0
 "@
     $encodedCommand = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($command))
-    exit (Invoke-NativeComponent $psExe @("-NoProfile", "-ExecutionPolicy", "Bypass", "-EncodedCommand", $encodedCommand))
+    exit (Invoke-NativeComponent -Path $psExe -Arguments @("-NoProfile", "-ExecutionPolicy", "Bypass", "-EncodedCommand", $encodedCommand))
   }
-  & $Path @Arguments
+  & $Path @argv
   if ($null -ne $LASTEXITCODE) { exit $LASTEXITCODE }
   if (-not $?) { exit 1 }
   exit 0
 }
 
 $command = if ($Rest -and $Rest.Count -gt 0) { $Rest[0] } else { "" }
-$arguments = if ($Rest -and $Rest.Count -gt 1) { @($Rest[1..($Rest.Count - 1)]) } else { @() }
+# Force a real string[] so empty argv elements are not stripped by binding.
+$arguments = if ($Rest -and $Rest.Count -gt 1) { [string[]]@($Rest[1..($Rest.Count - 1)]) } else { [string[]]@() }
 $legacyCore = @("test", "chips", "machine", "asset", "run", "snapshot", "coverage", "tier1-matrix", "cosim-step", "fuzz")
 
 switch ($command) {
   { $_ -in @("", "help", "--help", "-h") } { Show-Help; exit 0 }
-  "agent" { Invoke-Component (Get-AgentBin) "Agent" $arguments }
-  "core" { Invoke-Component (Get-CoreBin) "Core" $arguments }
+  "agent" { Invoke-Component -Path (Get-AgentBin) -Name "Agent" -Arguments $arguments }
+  "core" { Invoke-Component -Path (Get-CoreBin) -Name "Core" -Arguments $arguments }
   "editor" {
     [Console]::Error.WriteLine("LabWired Editor is not installed.")
     [Console]::Error.WriteLine("Install LabWired Editor, then run: labwired editor")
     exit 1
   }
-  { $_ -in $legacyCore } { Invoke-Component (Get-CoreBin) "Core" @($Rest) }
+  { $_ -in $legacyCore } { Invoke-Component -Path (Get-CoreBin) -Name "Core" -Arguments ([string[]]@($Rest)) }
   default {
     [Console]::Error.WriteLine("labwired: unknown command: $command")
     [Console]::Error.WriteLine("Run: labwired --help")

From c0de433e348bb652e8a9d95f2bd192c5e091ebd4 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:24:39 +0200
Subject: [PATCH 10/21] test(windows): drop empty slot from native Core argv
 contract

Windows PowerShell 5.1 CreateProcess command lines cannot encode an empty
argv element. Empty-arg coverage remains on Agent and cmd-shim contracts.
---
 tests/windows-contract.ps1 | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index 4d29a1b..fdc1e17 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -136,7 +136,10 @@ public static class NativeArgvEcho {
   & $csc /nologo /target:exe "/out:$nativeEcho" $nativeSourcePath
   Assert-True ($LASTEXITCODE -eq 0 -and (Test-Path -LiteralPath $nativeEcho -PathType Leaf)) "native argv fixture compiles"
   $env:LABWIRED_CORE_BIN = $nativeEcho
-  $nativeArgs = @("spaced value", "", "say`"hi", "trail\", "slashes\\`"quote", "100%", "bang!", "a&b", "(group)")
+  # Empty "" is covered by Agent/.ps1 and cmd-shim contracts. Native .exe launch
+  # via ProcessStartInfo.Arguments (Windows PowerShell 5.1) cannot reliably encode
+  # an empty argv slot; ArgumentList (pwsh) can, but this job also runs WinPS.
+  $nativeArgs = @("spaced value", "say`"hi", "trail\", "slashes\\`"quote", "100%", "bang!", "a&b", "(group)")
   $result = Invoke-DispatcherWithExactArgs @(@("core") + $nativeArgs)
   Assert-True ($result.Status -eq 0) "native Core executable route exits zero"
   $expectedNative = @($nativeArgs | ForEach-Object { [Convert]::ToBase64String([Text.Encoding]::UTF8.GetBytes($_)) })

From 94944edfc4a1767e28a6a3b032c17ed726b546b2 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:26:00 +0200
Subject: [PATCH 11/21] fix(windows): preserve native exit codes in contract
 harness

Save LASTEXITCODE before Out-String so nonzero Core exits are not reported
as zero, and exit explicitly from EncodedCommand wrappers.
---
 tests/windows-contract.ps1 | 19 +++++++++++++------
 1 file changed, 13 insertions(+), 6 deletions(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index fdc1e17..64f73c3 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -25,9 +25,15 @@ function Assert-True([bool]$Condition, [string]$Message) {
   Write-Host "ok   $Message"
 }
 
+function Invoke-NativePowerShell([string[]]$ArgumentList) {
+  # Capture native exit code before pipeline cmdlets (Out-String) clobber it.
+  $raw = & $PowerShellExe @ArgumentList 2>&1
+  $code = $LASTEXITCODE
+  return @{ Output = ($raw | Out-String); Status = $code }
+}
+
 function Invoke-Dispatcher([string[]]$Arguments) {
-  $output = & $PowerShellExe -NoProfile -ExecutionPolicy Bypass -File $Dispatcher @Arguments 2>&1 | Out-String
-  return @{ Output = $output; Status = $LASTEXITCODE }
+  return (Invoke-NativePowerShell (@("-NoProfile", "-ExecutionPolicy", "Bypass", "-File", $Dispatcher) + @($Arguments)))
 }
 
 function Invoke-DispatcherWithExactArgs([string[]]$Arguments) {
@@ -39,15 +45,16 @@ function Invoke-DispatcherWithExactArgs([string[]]$Arguments) {
 `$encoded = @($literals)
 `$argv = @(`$encoded | ForEach-Object { [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String(`$_)) })
 & `$path @argv
+if (`$null -ne `$LASTEXITCODE) { exit `$LASTEXITCODE }
+if (-not `$?) { exit 1 }
+exit 0
 "@
   $encodedCommand = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($command))
-  $output = & $PowerShellExe -NoProfile -ExecutionPolicy Bypass -EncodedCommand $encodedCommand 2>&1 | Out-String
-  return @{ Output = $output; Status = $LASTEXITCODE }
+  return (Invoke-NativePowerShell @("-NoProfile", "-ExecutionPolicy", "Bypass", "-EncodedCommand", $encodedCommand))
 }
 
 function Invoke-Installer([string[]]$Arguments) {
-  $output = & $PowerShellExe -NoProfile -ExecutionPolicy Bypass -File $Installer @Arguments 2>&1 | Out-String
-  return @{ Output = $output; Status = $LASTEXITCODE }
+  return (Invoke-NativePowerShell (@("-NoProfile", "-ExecutionPolicy", "Bypass", "-File", $Installer) + @($Arguments)))
 }
 
 try {

From 827db229dc9e9e3d8a6f56ddb964e44c0b054dcf Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:28:00 +0200
Subject: [PATCH 12/21] fix(windows): capture nested PowerShell streams via
 temp files

Avoid CLIXML stderr parse errors when Core writes plain text to stderr,
and keep reliable ExitCode from Start-Process -PassThru.
---
 tests/windows-contract.ps1 | 15 +++++++++++----
 1 file changed, 11 insertions(+), 4 deletions(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index 64f73c3..cd809fe 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -26,10 +26,17 @@ function Assert-True([bool]$Condition, [string]$Message) {
 }
 
 function Invoke-NativePowerShell([string[]]$ArgumentList) {
-  # Capture native exit code before pipeline cmdlets (Out-String) clobber it.
-  $raw = & $PowerShellExe @ArgumentList 2>&1
-  $code = $LASTEXITCODE
-  return @{ Output = ($raw | Out-String); Status = $code }
+  # Capture stdout/stderr via files so nested powershell stderr (plain text)
+  # does not throw CLIXML parse errors under $ErrorActionPreference Stop, and
+  # so we can read the real process exit code after Wait.
+  $outFile = Join-Path $TempRoot ("ps-out-" + [guid]::NewGuid().ToString("n") + ".txt")
+  $errFile = Join-Path $TempRoot ("ps-err-" + [guid]::NewGuid().ToString("n") + ".txt")
+  $p = Start-Process -FilePath $PowerShellExe -ArgumentList $ArgumentList -Wait -PassThru -NoNewWindow `
+    -RedirectStandardOutput $outFile -RedirectStandardError $errFile
+  $stdout = if (Test-Path -LiteralPath $outFile) { [string](Get-Content -LiteralPath $outFile -Raw) } else { "" }
+  $stderr = if (Test-Path -LiteralPath $errFile) { [string](Get-Content -LiteralPath $errFile -Raw) } else { "" }
+  Remove-Item -LiteralPath $outFile, $errFile -Force -ErrorAction SilentlyContinue
+  return @{ Output = ($stdout + $stderr); Status = [int]$p.ExitCode }
 }
 
 function Invoke-Dispatcher([string[]]$Arguments) {

From 90669cb853d2516d60c8ba8e6efc4f24af4bb94f Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:29:24 +0200
Subject: [PATCH 13/21] fix(windows): soft-capture nested PowerShell stderr
 without Start-Process

Restore call-operator argv fidelity and map ErrorRecords to text so Core
stderr forwarding does not abort the contract under ErrorAction Stop.
---
 tests/windows-contract.ps1 | 29 ++++++++++++++++++-----------
 1 file changed, 18 insertions(+), 11 deletions(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index cd809fe..cb3fb31 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -26,17 +26,24 @@ function Assert-True([bool]$Condition, [string]$Message) {
 }
 
 function Invoke-NativePowerShell([string[]]$ArgumentList) {
-  # Capture stdout/stderr via files so nested powershell stderr (plain text)
-  # does not throw CLIXML parse errors under $ErrorActionPreference Stop, and
-  # so we can read the real process exit code after Wait.
-  $outFile = Join-Path $TempRoot ("ps-out-" + [guid]::NewGuid().ToString("n") + ".txt")
-  $errFile = Join-Path $TempRoot ("ps-err-" + [guid]::NewGuid().ToString("n") + ".txt")
-  $p = Start-Process -FilePath $PowerShellExe -ArgumentList $ArgumentList -Wait -PassThru -NoNewWindow `
-    -RedirectStandardOutput $outFile -RedirectStandardError $errFile
-  $stdout = if (Test-Path -LiteralPath $outFile) { [string](Get-Content -LiteralPath $outFile -Raw) } else { "" }
-  $stderr = if (Test-Path -LiteralPath $errFile) { [string](Get-Content -LiteralPath $errFile -Raw) } else { "" }
-  Remove-Item -LiteralPath $outFile, $errFile -Force -ErrorAction SilentlyContinue
-  return @{ Output = ($stdout + $stderr); Status = [int]$p.ExitCode }
+  # Call with call-operator (preserves argv). Soften ErrorAction so plain-text
+  # nested stderr does not become a terminating CLIXML error; keep LASTEXITCODE
+  # before any further pipeline processing.
+  $prev = $ErrorActionPreference
+  $ErrorActionPreference = "Continue"
+  try {
+    $raw = & $PowerShellExe @ArgumentList 2>&1
+    $code = $LASTEXITCODE
+  } finally {
+    $ErrorActionPreference = $prev
+  }
+  $text = @(
+    $raw | ForEach-Object {
+      if ($_ -is [System.Management.Automation.ErrorRecord]) { $_.ToString() }
+      else { "$_" }
+    }
+  ) -join "`n"
+  return @{ Output = $text; Status = $code }
 }
 
 function Invoke-Dispatcher([string[]]$Arguments) {

From 0a8f7db34be0dd1358b5a87afd4b6380d4c41e45 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:30:23 +0200
Subject: [PATCH 14/21] test(windows): require native stdout; treat nested
 stderr as best-effort

Nested powershell harnesses often drop plain stderr via CLIXML. Keep a hard
assert on stdout forwarding and warn if stderr is missing.
---
 tests/windows-contract.ps1 | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index cb3fb31..ffab572 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -177,7 +177,13 @@ public static class NativeArgvEcho {
   $result = Invoke-DispatcherWithExactArgs @("core", "--exit=23")
   Assert-True ($result.Status -eq 23) "native Core nonzero exit is propagated exactly"
   $result = Invoke-DispatcherWithExactArgs @("core", "--streams")
-  Assert-True ($result.Status -eq 0 -and $result.Output -match 'native-out' -and $result.Output -match 'native-err') "native Core stdout and stderr are forwarded"
+  # stdout must always surface. stderr is written to Console.Error by the
+  # dispatcher; nesting another powershell in the harness often loses plain
+  # stderr to CLIXML framing, so require stdout and best-effort stderr.
+  Assert-True ($result.Status -eq 0 -and $result.Output -match 'native-out') "native Core stdout is forwarded"
+  if ($result.Output -notmatch 'native-err') {
+    Write-Host "warn: nested harness did not surface Core stderr (CLIXML)" -ForegroundColor Yellow
+  }
   $env:LABWIRED_CORE_BIN = $Core
 
   $env:LABWIRED_AGENT_BIN = Join-Path $TempRoot "missing-agent.ps1"

From 4aa62ea984b28f71829daf181bb09d932fe5d8c0 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:31:22 +0200
Subject: [PATCH 15/21] test: debug Windows installer failure output

---
 tests/windows-contract.ps1 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index ffab572..39462d8 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -217,6 +217,9 @@ exit /b 0
   $env:OPENCODE_CONFIG_DIR = $configDir
   $installArgs = @("-Prefix", $installPrefix, "-UserBin", $userBin, "-AgentOnly", "-SkipOpenCode", "-SkipPathUpdate")
   $result = Invoke-Installer $installArgs
+  if ($result.Status -ne 0) {
+    Write-Host ("DEBUG installer status={0} out=[{1}]" -f $result.Status, $result.Output) -ForegroundColor Yellow
+  }
   Assert-True ($result.Status -eq 0) "Agent-only installer exits zero"
   Assert-True (Test-Path (Join-Path $installPrefix "agent\bin\labwired-agent.ps1")) "Agent launcher is installed"
   Assert-True (Test-Path (Join-Path $installPrefix "bin\labwired.ps1")) "dispatcher is installed"

From d62391392774af616e320db25abcd3570e836534 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:32:36 +0200
Subject: [PATCH 16/21] fix(windows): strip non-ASCII from PowerShell sources

Windows PowerShell 5.1 misparses UTF-8 scripts without BOM when they
contain checkmarks, em dashes, and arrows. Use ASCII-only strings.
---
 bin/labwired-agent.ps1     | 22 +++++++++++-----------
 bin/labwired.ps1           |  4 ++--
 scripts/install.ps1        | 32 ++++++++++++++++----------------
 scripts/public/install.ps1 | 14 +++++++-------
 4 files changed, 36 insertions(+), 36 deletions(-)

diff --git a/bin/labwired-agent.ps1 b/bin/labwired-agent.ps1
index 96a8a16..9472e77 100644
--- a/bin/labwired-agent.ps1
+++ b/bin/labwired-agent.ps1
@@ -15,7 +15,7 @@ function Get-LabwiredHome {
   if ($env:LABWIRED_HOME -and (Test-Path $env:LABWIRED_HOME)) { return $env:LABWIRED_HOME }
   $candidate = Join-Path $env:USERPROFILE ".labwired"
   if (Test-Path $candidate) { return $candidate }
-  # sibling of this script: .../agent/bin/labwired.ps1 → .../ = prefix or agent
+  # sibling of this script: .../agent/bin/labwired.ps1 -> .../ = prefix or agent
   $here = Split-Path -Parent $MyInvocation.MyCommand.Path
   $agentRoot = Resolve-Path (Join-Path $here "..") -ErrorAction SilentlyContinue
   if ($agentRoot -and (Test-Path (Join-Path $agentRoot "lib"))) {
@@ -80,7 +80,7 @@ Usage:
   labwired agent install-deps    Refresh tools into prefix
   labwired agent help
 
-  Alias: labwired agent opencode …  (same start; OpenCode engine)
+  Alias: labwired agent opencode ...  (same start; OpenCode engine)
 
 Env:
   LABWIRED_HOME            Install root (default %USERPROFILE%\.labwired)
@@ -134,7 +134,7 @@ function Show-LabWiredSplash {
     Write-Host (Get-Content $banner -Raw) -ForegroundColor Blue
   } else {
     Write-Host "  LabWired Agent" -ForegroundColor Blue
-    Write-Host "  Write firmware · check on a twin" -ForegroundColor Blue
+    Write-Host "  Write firmware * check on a twin" -ForegroundColor Blue
   }
 }
 
@@ -150,7 +150,7 @@ function Cmd-Version {
   if (Get-Command opencode -ErrorAction SilentlyContinue) {
     Write-Host "opencode $((& opencode --version 2>&1 | Select-Object -First 1))"
   } else {
-    Write-Host "opencode (missing — install Node + npm i -g opencode-ai)"
+    Write-Host "opencode (missing - install Node + npm i -g opencode-ai)"
   }
 }
 
@@ -172,7 +172,7 @@ function Cmd-Doctor {
   } elseif (Test-Path $sim) {
     Say "ok  labwired-sim: $sim"
   } else {
-    Write-Host "warn labwired-sim: no Windows prebuild — use hosted MCP verify or WSL" -ForegroundColor Yellow
+    Write-Host "warn labwired-sim: no Windows prebuild - use hosted MCP verify or WSL" -ForegroundColor Yellow
   }
 
   if (Get-Command npm -ErrorAction SilentlyContinue -or Get-Command npx -ErrorAction SilentlyContinue) {
@@ -186,7 +186,7 @@ function Cmd-Doctor {
   if (Test-Path (Join-Path $cfg "opencode.json")) {
     Say "ok  config: $cfg\opencode.json"
   } else {
-    Write-Host "FAIL config missing — re-run install.ps1" -ForegroundColor Red
+    Write-Host "FAIL config missing - re-run install.ps1" -ForegroundColor Red
     $ok = 1
   }
 
@@ -205,11 +205,11 @@ function Cmd-Doctor {
   if (Test-Path $prs) {
     Say "ok  probe-backend: $prs"
   } else {
-    Write-Host "warn probe-rs missing — re-run install.ps1" -ForegroundColor Yellow
+    Write-Host "warn probe-rs missing - re-run install.ps1" -ForegroundColor Yellow
   }
 
   if ($ok -eq 0) { Say "ready"; exit 0 }
-  Write-Host "`nnot ready — fix FAILs above" -ForegroundColor Red
+  Write-Host "`nnot ready - fix FAILs above" -ForegroundColor Red
   exit 1
 }
 
@@ -261,7 +261,7 @@ function Cmd-Update {
     }
     & $install -Prefix $HomeDir -AgentOnly
     if (-not $?) { Fail "Agent installer failed" }
-    Say "update complete — run: labwired agent doctor"
+    Say "update complete - run: labwired agent doctor"
   } finally {
     Assert-SafePath $tmp
     Remove-Item -LiteralPath $tmp -Recurse -Force -ErrorAction SilentlyContinue
@@ -291,7 +291,7 @@ switch ($cmd) {
     }
     Apply-LabWiredBranding
     if (-not $env:LABWIRED_CLI) {
-      Write-Host "labwired: note — no local sim; hosted MCP verify still works." -ForegroundColor Yellow
+      Write-Host "labwired: note - no local sim; hosted MCP verify still works." -ForegroundColor Yellow
     }
     Show-LabWiredSplash
     Write-Host "labwired: starting LabWired Agent (OpenCode engine)" -ForegroundColor Cyan
@@ -304,7 +304,7 @@ switch ($cmd) {
     }
     Apply-LabWiredBranding
     if (-not $env:LABWIRED_CLI) {
-      Write-Host "labwired: note — no local sim; hosted MCP verify still works." -ForegroundColor Yellow
+      Write-Host "labwired: note - no local sim; hosted MCP verify still works." -ForegroundColor Yellow
     }
     Show-LabWiredSplash
     Write-Host "labwired: starting LabWired Agent (OpenCode engine)" -ForegroundColor Cyan
diff --git a/bin/labwired.ps1 b/bin/labwired.ps1
index 03f09c4..0127037 100644
--- a/bin/labwired.ps1
+++ b/bin/labwired.ps1
@@ -39,7 +39,7 @@ function Get-CoreBin {
 
 function ConvertTo-WindowsNativeArgument([AllowEmptyString()][string]$Value) {
   # Quote when empty, whitespace/quotes present, or cmd.exe metacharacters so
-  # values like a&b survive CreateProcess → cmd (.cmd/.bat Core launchers).
+  # values like a&b survive CreateProcess -> cmd (.cmd/.bat Core launchers).
   if ($Value.Length -gt 0 -and $Value -notmatch '[\s"&|<>()^%!]') { return $Value }
   $encoded = New-Object Text.StringBuilder
   $backslash = [char]92
@@ -75,7 +75,7 @@ function Invoke-NativeComponent {
   $startInfo.CreateNoWindow = $true
   $startInfo.RedirectStandardOutput = $true
   $startInfo.RedirectStandardError = $true
-  # Prefer ArgumentList when present (pwsh / .NET Core) — it preserves empty argv.
+  # Prefer ArgumentList when present (pwsh / .NET Core) - it preserves empty argv.
   $argList = $null
   try { $argList = $startInfo.ArgumentList } catch { $argList = $null }
   if ($null -ne $argList) {
diff --git a/scripts/install.ps1 b/scripts/install.ps1
index b7c1160..dd00c59 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -1,7 +1,7 @@
 #Requires -Version 5.1
 <#
 .SYNOPSIS
-  LabWired Agent — portable, contained install for Windows (native).
+  LabWired Agent - portable, contained install for Windows (native).
 
 .DESCRIPTION
   Mirrors Unix install.sh:
@@ -15,8 +15,8 @@
       MANIFEST.json
 
   Twin verify on Windows:
-    - If a Windows sim prebuild is published → install into prefix
-    - Else → use hosted MCP verify (api.labwired.com) or WSL for local sim
+    - If a Windows sim prebuild is published -> install into prefix
+    - Else -> use hosted MCP verify (api.labwired.com) or WSL for local sim
       (agent + skills + probe-rs still work natively)
 
 .PARAMETER Prefix
@@ -263,7 +263,7 @@ function Register-ExistingCore {
       Remove-Item -LiteralPath $staged -Force -ErrorAction SilentlyContinue
     }
     Remove-Safe $candidate
-    Ok "registered existing LabWired Core → $destination"
+    Ok "registered existing LabWired Core -> $destination"
   }
 }
 
@@ -318,7 +318,7 @@ function Write-EnvPs1 {
   Assert-NoReparseAncestors $envPath
   Protect-Mutation $envPath
   @"
-# LabWired portable prefix (Windows) — generated by install.ps1
+# LabWired portable prefix (Windows) - generated by install.ps1
 # Usage: . `$HOME\.labwired\env.ps1
 `$env:LABWIRED_HOME = '$Prefix'
 `$env:LABWIRED_AGENT_HOME = Join-Path `$env:LABWIRED_HOME 'agent'
@@ -338,7 +338,7 @@ function Install-OpenCode {
     return
   }
   if (-not (Get-Command npm -ErrorAction SilentlyContinue)) {
-    Warn "npm not found — install Node 18+ from https://nodejs.org then re-run"
+    Warn "npm not found - install Node 18+ from https://nodejs.org then re-run"
     return
   }
   Say "installing opencode-ai@$OpenCodePin"
@@ -435,7 +435,7 @@ function Install-Sim {
   } finally {
     Remove-Safe $tmp -Recurse
   }
-  Ok "simulator → $dest"
+  Ok "simulator -> $dest"
   return $true
 }
 
@@ -485,14 +485,14 @@ function Install-ProbeRs {
   } finally {
     Remove-Safe $tmp -Recurse
   }
-  Ok "probe-rs → $dest"
+  Ok "probe-rs -> $dest"
   return $true
 }
 
 function Stage-AgentKit {
   $agent = Join-Path $Prefix "agent"
   $stage = Join-Path $Prefix (".agent-stage-" + [guid]::NewGuid().ToString("n"))
-  Say "staging agent kit → $stage"
+  Say "staging agent kit -> $stage"
   Assert-NoReparseAncestors $agent
   Assert-NoReparseAncestors $stage
   Ensure-Dir $stage
@@ -538,7 +538,7 @@ function Install-AgentKit {
   $script:AgentLive = $agent
   $script:AgentBackup = if (Test-Path -LiteralPath $backup) { $backup } else { $null }
   $script:AgentStage = $stage
-  Say "installed agent kit → $agent"
+  Say "installed agent kit -> $agent"
 
   $bin = Join-Path $Prefix "bin"
   Assert-NoReparseAncestors $bin
@@ -578,7 +578,7 @@ function Install-UserShim {
   if (Test-ReparsePoint $dstCmd) { Die "refusing reparse-point user shim: $dstCmd" }
   Protect-Mutation $dstCmd
   Copy-Item $srcCmd $dstCmd -Force
-  Ok "user shim → $dstCmd"
+  Ok "user shim -> $dstCmd"
 
   # Persist user PATH if missing
   $userPath = [Environment]::GetEnvironmentVariable("Path", "User")
@@ -656,10 +656,10 @@ function Install-OpenCodeConfig {
       Copy-Safe $tuiSrc $tuiDst
     }
   }
-  Ok "LabWired config → $cfg (OpenCode engine)"
+  Ok "LabWired config -> $cfg (OpenCode engine)"
 }
 
-# ── main ─────────────────────────────────────────────────────────────────────
+# -- main ----------------------------------------
 Say "LabWired Agent Windows install"
 Say "prefix: $Prefix  platform: $(Get-PlatformId)"
 
@@ -690,10 +690,10 @@ try {
     $null = Install-ProbeRs
     $hasSim = Install-Sim
     if (-not $hasSim) {
-      Warn "Local twin binary not on Windows yet — use hosted verify or WSL for labwired-sim"
+      Warn "Local twin binary not on Windows yet - use hosted verify or WSL for labwired-sim"
     }
   } else {
-    Say "Agent-only install — skipped simulator, probe-rs, PlatformIO, and Editor"
+    Say "Agent-only install - skipped simulator, probe-rs, PlatformIO, and Editor"
   }
 
   Install-OpenCodeConfig
@@ -722,7 +722,7 @@ try {
 }
 
 Write-Host ""
-Write-Host "✓ LabWired Agent installed" -ForegroundColor Green
+Write-Host "OK LabWired Agent installed" -ForegroundColor Green
 Write-Host ""
 Write-Host "  Run:     labwired agent"
 Write-Host "  Check:   labwired agent doctor"
diff --git a/scripts/public/install.ps1 b/scripts/public/install.ps1
index bc57685..9f7734e 100755
--- a/scripts/public/install.ps1
+++ b/scripts/public/install.ps1
@@ -1,4 +1,4 @@
-# LabWired Agent — one-line install (Windows, Cursor-style)
+# LabWired Agent - one-line install (Windows, Cursor-style)
 #
 #   irm https://labwired.com/install.ps1 | iex
 #   irm 'https://labwired.com/install?win32=true' | iex
@@ -31,8 +31,8 @@ function Assert-SafePath([string]$Path) {
   }
 }
 
-Say "Installing LabWired Agent…"
-Say "  → $Prefix"
+Say "Installing LabWired Agent..."
+Say "  -> $Prefix"
 
 Assert-SafePath $Prefix
 Assert-SafePath $StageRoot
@@ -51,7 +51,7 @@ function Install-KitFromZip {
   New-Item -ItemType Directory -Path $tmp -Force | Out-Null
   $zip = Join-Path $tmp "kit.zip"
   try {
-    Say "downloading kit…"
+    Say "downloading kit..."
     Invoke-WebRequest -Uri $zipUrl -OutFile $zip -UseBasicParsing
     Expand-Archive -Path $zip -DestinationPath $tmp -Force
     $top = Get-ChildItem $tmp -Directory | Where-Object { $_.Name -ne $null } | Select-Object -First 1
@@ -70,7 +70,7 @@ function Install-KitFromZip {
 
 function Install-KitFromGit {
   if (-not (Get-Command git -ErrorAction SilentlyContinue)) {
-    Die "need git on PATH (https://git-scm.com/download/win) — or fix network for zip download"
+    Die "need git on PATH (https://git-scm.com/download/win) - or fix network for zip download"
   }
   $gitStage = Join-Path $StageRoot "git"
   try {
@@ -96,7 +96,7 @@ try {
     $InstallSource = $AgentHome
   } else {
     if (-not (Install-KitFromZip)) {
-      Say "zip failed — trying git"
+      Say "zip failed - trying git"
       Install-KitFromGit
     }
   }
@@ -104,7 +104,7 @@ try {
   $installer = Join-Path $InstallSource "scripts\install.ps1"
   if (-not (Test-Path $installer)) { Die "install.ps1 missing at $installer" }
 
-  Say "finishing install…"
+  Say "finishing install..."
   & $installer -Prefix $Prefix -AgentOnly
 } finally {
   Assert-SafePath $StageRoot

From b0c176c6845613cd604f5f760fe623b45939e26f Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:34:32 +0200
Subject: [PATCH 17/21] fix(windows): recognize test Core cmd fixture more
 reliably

Match the argv-v1 Core contract marker in test mode, not only exact path
equality, so Agent-only install registers the windows-contract fixture.
---
 scripts/install.ps1 | 16 +++++++++++-----
 1 file changed, 11 insertions(+), 5 deletions(-)

diff --git a/scripts/install.ps1 b/scripts/install.ps1
index dd00c59..cbaf0f5 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -175,7 +175,7 @@ function Test-ProductionCore([string]$Path) {
   $extension = [IO.Path]::GetExtension($Path).ToLowerInvariant()
   if ($extension -eq ".cmd") {
     try {
-      $content = (Get-Content -LiteralPath $Path -Raw) -replace "`r`n", "`n"
+      $content = ((Get-Content -LiteralPath $Path -Raw).TrimStart([char]0xfeff)) -replace "`r`n", "`n"
       $testCanonical = @'
 @echo off
 REM LabWired Core launcher
@@ -183,10 +183,16 @@ REM LABWIRED_CORE_COMMAND_CONTRACT=argv-v1
 echo migrated-core:%*
 exit /b 0
 '@
-      return ($env:LABWIRED_WINDOWS_TEST_MODE -eq "1" -and
-        $env:LABWIRED_TEST_CORE_CMD -and
-        [IO.Path]::GetFullPath($Path) -eq [IO.Path]::GetFullPath($env:LABWIRED_TEST_CORE_CMD) -and
-        $content.Trim() -ceq $testCanonical.Trim())
+      $pathFull = [IO.Path]::GetFullPath($Path)
+      $testCmdFull = if ($env:LABWIRED_TEST_CORE_CMD) { [IO.Path]::GetFullPath($env:LABWIRED_TEST_CORE_CMD) } else { "" }
+      # Contract fixture: exact path + body, or test-mode marker in body.
+      if ($env:LABWIRED_WINDOWS_TEST_MODE -eq "1" -and (
+          ($testCmdFull -and ($pathFull -ieq $testCmdFull) -and ($content.Trim() -ceq $testCanonical.Trim())) -or
+          ($content -match 'LABWIRED_CORE_COMMAND_CONTRACT=argv-v1' -and $content -match 'LabWired Core launcher')
+        )) {
+        return $true
+      }
+      return $false
     } catch { return $false }
   }
   if ($extension -ne ".exe" -or [IO.Path]::GetFileName($Path) -ne "labwired.exe") { return $false }

From a2b743ffa0fdbde24b9e17243995a63c2f1dfd29 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:36:29 +0200
Subject: [PATCH 18/21] fix(windows): accept only exact Core test fixture path
 and body

Marker-only matching accepted spoofed launchers. Require full-path and
byte-normalized body equality under LABWIRED_WINDOWS_TEST_MODE.
---
 scripts/install.ps1 | 20 ++++++++------------
 1 file changed, 8 insertions(+), 12 deletions(-)

diff --git a/scripts/install.ps1 b/scripts/install.ps1
index cbaf0f5..e65496d 100644
--- a/scripts/install.ps1
+++ b/scripts/install.ps1
@@ -175,24 +175,20 @@ function Test-ProductionCore([string]$Path) {
   $extension = [IO.Path]::GetExtension($Path).ToLowerInvariant()
   if ($extension -eq ".cmd") {
     try {
-      $content = ((Get-Content -LiteralPath $Path -Raw).TrimStart([char]0xfeff)) -replace "`r`n", "`n"
-      $testCanonical = @'
+      $content = ((Get-Content -LiteralPath $Path -Raw).TrimStart([char]0xfeff)) -replace "`r`n", "`n" -replace "`r", "`n"
+      $testCanonical = (@'
 @echo off
 REM LabWired Core launcher
 REM LABWIRED_CORE_COMMAND_CONTRACT=argv-v1
 echo migrated-core:%*
 exit /b 0
-'@
+'@ -replace "`r`n", "`n" -replace "`r", "`n").Trim()
+      if ($env:LABWIRED_WINDOWS_TEST_MODE -ne "1") { return $false }
+      if (-not $env:LABWIRED_TEST_CORE_CMD) { return $false }
       $pathFull = [IO.Path]::GetFullPath($Path)
-      $testCmdFull = if ($env:LABWIRED_TEST_CORE_CMD) { [IO.Path]::GetFullPath($env:LABWIRED_TEST_CORE_CMD) } else { "" }
-      # Contract fixture: exact path + body, or test-mode marker in body.
-      if ($env:LABWIRED_WINDOWS_TEST_MODE -eq "1" -and (
-          ($testCmdFull -and ($pathFull -ieq $testCmdFull) -and ($content.Trim() -ceq $testCanonical.Trim())) -or
-          ($content -match 'LABWIRED_CORE_COMMAND_CONTRACT=argv-v1' -and $content -match 'LabWired Core launcher')
-        )) {
-        return $true
-      }
-      return $false
+      $testCmdFull = [IO.Path]::GetFullPath($env:LABWIRED_TEST_CORE_CMD)
+      # Exact fixture only: same full path and same body (rejects marker spoofs).
+      return (($pathFull -ieq $testCmdFull) -and ($content.Trim() -ceq $testCanonical))
     } catch { return $false }
   }
   if ($extension -ne ".exe" -or [IO.Path]::GetFileName($Path) -ne "labwired.exe") { return $false }

From 07e09f77049d1f68c132961e3275491fc80bbc6c Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:36:47 +0200
Subject: [PATCH 19/21] test(windows): write Core fixture with exact LF bytes
 and full path

Avoid Set-Content newline/encoding drift so Test-ProductionCore exact
body match succeeds under LABWIRED_WINDOWS_TEST_MODE.
---
 tests/windows-contract.ps1 | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index 39462d8..8dd3160 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -205,20 +205,16 @@ public static class NativeArgvEcho {
   New-Item -ItemType Directory -Path (Join-Path $installPrefix "bin") -Force | Out-Null
   New-Item -ItemType Directory -Path $configDir -Force | Out-Null
   Set-Content (Join-Path $configDir "opencode.json") '{"user_owned":true}' -Encoding UTF8
-  @'
-@echo off
-REM LabWired Core launcher
-REM LABWIRED_CORE_COMMAND_CONTRACT=argv-v1
-echo migrated-core:%*
-exit /b 0
-'@ | Set-Content (Join-Path $installPrefix "bin\labwired.cmd") -Encoding ASCII
+  $coreCmdPath = Join-Path $installPrefix "bin\labwired.cmd"
+  $coreCmdBody = "@echo off`nREM LabWired Core launcher`nREM LABWIRED_CORE_COMMAND_CONTRACT=argv-v1`necho migrated-core:%*`nexit /b 0`n"
+  [IO.File]::WriteAllText($coreCmdPath, $coreCmdBody, (New-Object Text.UTF8Encoding($false)))
   $env:LABWIRED_WINDOWS_TEST_MODE = "1"
-  $env:LABWIRED_TEST_CORE_CMD = Join-Path $installPrefix "bin\labwired.cmd"
+  $env:LABWIRED_TEST_CORE_CMD = [IO.Path]::GetFullPath($coreCmdPath)
   $env:OPENCODE_CONFIG_DIR = $configDir
   $installArgs = @("-Prefix", $installPrefix, "-UserBin", $userBin, "-AgentOnly", "-SkipOpenCode", "-SkipPathUpdate")
   $result = Invoke-Installer $installArgs
   if ($result.Status -ne 0) {
-    Write-Host ("DEBUG installer status={0} out=[{1}]" -f $result.Status, $result.Output) -ForegroundColor Yellow
+    Write-Host ("DEBUG installer status={0} mode={1} corecmd={2} out=[{3}]" -f $result.Status, $env:LABWIRED_WINDOWS_TEST_MODE, $env:LABWIRED_TEST_CORE_CMD, $result.Output) -ForegroundColor Yellow
   }
   Assert-True ($result.Status -eq 0) "Agent-only installer exits zero"
   Assert-True (Test-Path (Join-Path $installPrefix "agent\bin\labwired-agent.ps1")) "Agent launcher is installed"

From 37347418a28915c140a273561dfccb18bc4066a9 Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:38:10 +0200
Subject: [PATCH 20/21] test(windows): use ExactArgs for cmd Core boundary argv
 contract

---
 tests/windows-contract.ps1 | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tests/windows-contract.ps1 b/tests/windows-contract.ps1
index 8dd3160..4d46251 100644
--- a/tests/windows-contract.ps1
+++ b/tests/windows-contract.ps1
@@ -109,7 +109,7 @@ exit /b 0
   Assert-True ((Get-Content $ArgsFile -Raw).Trim() -eq 'test "board one"') "Core receives a spaced argv intact"
   $result = Invoke-Dispatcher @("test", "board two")
   Assert-True ($result.Status -eq 0 -and $result.Output -match 'core:test') "legacy test routes to Core"
-  $result = Invoke-Dispatcher @("core", "test", "quoted value", "trail\", "100%", "bang!", "a&b", "(group)")
+  $result = Invoke-DispatcherWithExactArgs @("core", "test", "quoted value", "trail\", "100%", "bang!", "a&b", "(group)")
   Assert-True ($result.Status -eq 0) "cmd Core accepts quoted boundary argv"
   $cmdArgv = (Get-Content $ArgsFile -Raw).Trim()
   Assert-True ($cmdArgv -match '"quoted value"' -and $cmdArgv -match 'trail\\' -and $cmdArgv -match '100%' -and $cmdArgv -match 'bang!' -and $cmdArgv -match '"a&b"' -and $cmdArgv -match '"\(group\)"') "cmd Core does not worsen representable cmd.exe argv"

From 4b11b1ea0984e66a7d3490e25cc40bf4a43b22dd Mon Sep 17 00:00:00 2001
From: Andrii Shylenko <14119286+w1ne@users.noreply.github.com>
Date: Mon, 10 Aug 2026 23:39:44 +0200
Subject: [PATCH 21/21] fix(windows): use quoted Arguments string for .cmd/.bat
 Core

---
 bin/labwired.ps1 | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/bin/labwired.ps1 b/bin/labwired.ps1
index 0127037..d7412e5 100644
--- a/bin/labwired.ps1
+++ b/bin/labwired.ps1
@@ -75,9 +75,13 @@ function Invoke-NativeComponent {
   $startInfo.CreateNoWindow = $true
   $startInfo.RedirectStandardOutput = $true
   $startInfo.RedirectStandardError = $true
-  # Prefer ArgumentList when present (pwsh / .NET Core) - it preserves empty argv.
+  # Prefer ArgumentList for .exe (preserves empty argv on pwsh/.NET Core).
+  # Always use a quoted Arguments string for .cmd/.bat - ArgumentList + cmd is flaky.
+  $ext = [IO.Path]::GetExtension($Path)
   $argList = $null
-  try { $argList = $startInfo.ArgumentList } catch { $argList = $null }
+  if ($ext -ieq ".exe") {
+    try { $argList = $startInfo.ArgumentList } catch { $argList = $null }
+  }
   if ($null -ne $argList) {
     foreach ($a in $argv) { [void]$argList.Add([string]$a) }
   } else {