From d7a6f1e2525cb07878312c0ec44d2b93d23320c6 Mon Sep 17 00:00:00 2001
From: Miguel Morales <mimoralea@gmail.com>
Date: Mon, 1 Jun 2026 11:19:36 -0600
Subject: [PATCH 1/6] Use direct WSL exec for absolute agent commands

In WSL mode, launch simple absolute-path agent commands with `wsl.exe --cd <cwd> --exec <command> ...args` instead of routing them through the nested shell wrapper.

This avoids fragile `sh -c` quoting behavior when launching agents from Windows into WSL, especially for executable+argv CLIs such as OpenCode, Codex, Claude Code, and similar tools.

The existing shell-wrapper path is preserved for commands that may need shell semantics, including relative commands, PATH injection via `additionalPath`, or commands containing shell metacharacters. This keeps compatibility with existing configurations that rely on shell expansion or login-shell behavior while allowing straightforward WSL executables to launch without unnecessary quoting layers.
---
 src/utils/platform.ts | 28 ++++++++++++++++++++++------
 1 file changed, 22 insertions(+), 6 deletions(-)

diff --git a/src/utils/platform.ts b/src/utils/platform.ts
index 6f013c7..84c321f 100644
--- a/src/utils/platform.ts
+++ b/src/utils/platform.ts
@@ -307,13 +307,29 @@ export function wrapCommandForWsl(
 		pathPrefix = `export PATH="${escapePathForShell(wslPath)}:$PATH"; `;
 	}
 
-	const innerCommand = `${pathPrefix}cd ${escapeShellArgBash(wslCwd)} && ${command}${argsString}`;
-	wslArgs.push("sh", "-c", buildWslShellWrapper(innerCommand));
+    const commandIsAbsoluteWslPath = command.startsWith("/");
+    const commandHasShellSyntax = /[\s"'`$&|;<>(){}[\]*?!\\]/.test(command);
+    const canUseDirectExec =
+	    commandIsAbsoluteWslPath &&
+	    !commandHasShellSyntax &&
+	    !additionalPath;
 
-	return {
-		command: "C:\\Windows\\System32\\wsl.exe",
-		args: wslArgs,
-	};
+    if (canUseDirectExec) {
+	    wslArgs.push("--cd", wslCwd, "--exec", command, ...args);
+
+	    return {
+		    command: "C:\\Windows\\System32\\wsl.exe",
+		    args: wslArgs,
+	    };
+    }
+
+    const innerCommand = `${pathPrefix}cd ${escapeShellArgBash(wslCwd)} && ${command}${argsString}`;
+    wslArgs.push("sh", "-c", buildWslShellWrapper(innerCommand));
+
+    return {
+	    command: "C:\\Windows\\System32\\wsl.exe",
+	    args: wslArgs,
+    };
 }
 
 /**

From 850e2e1557754f3f43774d0d89a67501f77b01ee Mon Sep 17 00:00:00 2001
From: RAIT-09 <51452399+RAIT-09@users.noreply.github.com>
Date: Fri, 5 Jun 2026 13:16:28 +0900
Subject: [PATCH 2/6] fix(wsl): launch agents via --exec login-shell + argv,
 forward env via WSLENV

WSL agent launch previously wrapped the command in a nested
`sh -c "<baked string>"` construction. In some environments (e.g. RHEL8)
this fails before ACP connects (the process exits 1), and command
paths/args with spaces broke because the command was interpolated
unescaped.

Launch agents instead with:
  wsl.exe [--exec] /bin/sh -c '<constant launcher>' sh <pathDir> <cwd> <command> <args...>
This skips wsl's default-shell layer (--exec), runs under the user's
login shell so ~/.profile is sourced (environment preserved, unlike a
bare --exec), and passes command/args as argv (no quoting of user data).

Also forward configured env vars (API keys, custom agent env, tool env)
into WSL via WSLENV (buildWslEnv), so the plugin's API key field works in
WSL mode without requiring keys in ~/.profile. Defensive: skips empty
values and invalid names, merges existing WSLENV, never throws.

Add a vitest unit-test suite for the platform WSL helpers (39 cases,
incl. exact argv-ordering checks), with an obsidian stub alias and a
dedicated tsconfig for typed linting of tests.

Builds on #304 (direct WSL exec for absolute-path commands); this retains
the environment that a bare --exec would drop and also fixes paths/args
with spaces.

Terminal launch keeps the existing wrapper for now (env forwarding is
applied); a terminal-specific hybrid follows separately.
---
 docs/help/troubleshooting.md |    5 +
 eslint.config.mjs            |    2 +-
 package-lock.json            | 1142 +++++++++++++++++++++++++++++++++-
 package.json                 |    5 +-
 src/acp/acp-client.ts        |    9 +
 src/acp/terminal-handler.ts  |   15 +-
 src/utils/platform.ts        |  159 ++++-
 test/platform.test.ts        |  315 ++++++++++
 test/stubs/obsidian.ts       |   14 +
 tsconfig.eslint.json         |    4 +
 vitest.config.mts            |   19 +
 11 files changed, 1641 insertions(+), 48 deletions(-)
 create mode 100644 test/platform.test.ts
 create mode 100644 test/stubs/obsidian.ts
 create mode 100644 tsconfig.eslint.json
 create mode 100644 vitest.config.mts

diff --git a/docs/help/troubleshooting.md b/docs/help/troubleshooting.md
index 6edad7b..e12088d 100644
--- a/docs/help/troubleshooting.md
+++ b/docs/help/troubleshooting.md
@@ -143,6 +143,11 @@ If you sync your vault (e.g., via Nextcloud, Syncthing, or iCloud) across machin
 - Enable **Settings → Agent Client → Windows Subsystem for Linux → Enable WSL mode**
 - Optionally specify your distribution in **WSL distribution**
 
+**Using a Node version manager (nvm/fnm) inside WSL:**
+- These tools usually add `node` to `PATH` only in **interactive** shells (e.g. from `~/.bashrc`), so the agent — launched non-interactively — may not see your nvm-managed `node` and can fall back to an old system `node` (or none).
+- Fix: set **Node.js path** to the absolute path of your nvm `node` directory, e.g. `/home/<user>/.nvm/versions/node/<version>/bin`. The plugin then injects it into `PATH` for the agent.
+- API keys: in WSL mode you can enter them directly in the agent's API key field — the plugin forwards them into WSL automatically (no need to put them in `~/.profile`).
+
 ### Agent works in Terminal but not in Obsidian
 
 The PATH environment may differ between Terminal and Obsidian.
diff --git a/eslint.config.mjs b/eslint.config.mjs
index a6f152a..8a04682 100644
--- a/eslint.config.mjs
+++ b/eslint.config.mjs
@@ -13,7 +13,7 @@ export default defineConfig([
 		files: ["**/*.ts", "**/*.tsx"],
 		languageOptions: {
 			parser: tsparser,
-			parserOptions: { project: "./tsconfig.json" },
+			parserOptions: { project: "./tsconfig.eslint.json" },
 		},
 		rules: {
 			// Preserve existing rules
diff --git a/package-lock.json b/package-lock.json
index 7f86970..b31676c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -33,7 +33,8 @@
 				"tslib": "2.4.0",
 				"typescript": "^5.9.3",
 				"typescript-eslint": "^8.0.0",
-				"vitepress": "^1.6.4"
+				"vitepress": "^1.6.4",
+				"vitest": "^4.1.8"
 			}
 		},
 		"node_modules/@agentclientprotocol/sdk": {
@@ -425,6 +426,40 @@
 				}
 			}
 		},
+		"node_modules/@emnapi/core": {
+			"version": "1.10.0",
+			"resolved": "https://registry.npmjs.org/@emnapi/core/-/core-1.10.0.tgz",
+			"integrity": "sha512-yq6OkJ4p82CAfPl0u9mQebQHKPJkY7WrIuk205cTYnYe+k2Z8YBh11FrbRG/H6ihirqcacOgl2BIO8oyMQLeXw==",
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"dependencies": {
+				"@emnapi/wasi-threads": "1.2.1",
+				"tslib": "^2.4.0"
+			}
+		},
+		"node_modules/@emnapi/runtime": {
+			"version": "1.10.0",
+			"resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.10.0.tgz",
+			"integrity": "sha512-ewvYlk86xUoGI0zQRNq/mC+16R1QeDlKQy21Ki3oSYXNgLb45GV1P6A0M+/s6nyCuNDqe5VpaY84BzXGwVbwFA==",
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"dependencies": {
+				"tslib": "^2.4.0"
+			}
+		},
+		"node_modules/@emnapi/wasi-threads": {
+			"version": "1.2.1",
+			"resolved": "https://registry.npmjs.org/@emnapi/wasi-threads/-/wasi-threads-1.2.1.tgz",
+			"integrity": "sha512-uTII7OYF+/Mes/MrcIOYp5yOtSMLBWSIoLPpcgwipoiKbli6k322tcoFsxoIIxPDqW01SQGAgko4EzZi2BNv2w==",
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"dependencies": {
+				"tslib": "^2.4.0"
+			}
+		},
 		"node_modules/@esbuild/aix-ppc64": {
 			"version": "0.21.5",
 			"resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.21.5.tgz",
@@ -1171,6 +1206,35 @@
 				"ret": "~0.1.10"
 			}
 		},
+		"node_modules/@napi-rs/wasm-runtime": {
+			"version": "1.1.4",
+			"resolved": "https://registry.npmjs.org/@napi-rs/wasm-runtime/-/wasm-runtime-1.1.4.tgz",
+			"integrity": "sha512-3NQNNgA1YSlJb/kMH1ildASP9HW7/7kYnRI2szWJaofaS1hWmbGI4H+d3+22aGzXXN9IJ+n+GiFVcGipJP18ow==",
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"dependencies": {
+				"@tybys/wasm-util": "^0.10.1"
+			},
+			"funding": {
+				"type": "github",
+				"url": "https://github.com/sponsors/Brooooooklyn"
+			},
+			"peerDependencies": {
+				"@emnapi/core": "^1.7.1",
+				"@emnapi/runtime": "^1.7.1"
+			}
+		},
+		"node_modules/@oxc-project/types": {
+			"version": "0.133.0",
+			"resolved": "https://registry.npmjs.org/@oxc-project/types/-/types-0.133.0.tgz",
+			"integrity": "sha512-KzkdCd6Uxqnf6l3HOw1xfatAlUURA0g14cvBYFyJ5SaNOQbOUvBr9PKArcPcrNIeRsBdgcUzOGrhKveVpvOIGA==",
+			"dev": true,
+			"license": "MIT",
+			"funding": {
+				"url": "https://github.com/sponsors/Boshen"
+			}
+		},
 		"node_modules/@pkgr/core": {
 			"version": "0.1.2",
 			"resolved": "https://registry.npmjs.org/@pkgr/core/-/core-0.1.2.tgz",
@@ -1184,6 +1248,288 @@
 				"url": "https://opencollective.com/unts"
 			}
 		},
+		"node_modules/@rolldown/binding-android-arm64": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-android-arm64/-/binding-android-arm64-1.0.3.tgz",
+			"integrity": "sha512-454rs7jHngixp/NMxd5srYD57OnzSlZ/eFTETjORQHLwJG1lRtmNOJcBerZlfu4GjKqeq8aCCIQrMdHyhI51Hw==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"android"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-darwin-arm64": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-arm64/-/binding-darwin-arm64-1.0.3.tgz",
+			"integrity": "sha512-PcAhP+ynjURNyy8SKGl5DQP94aGuB/7JrXJb/t7P+hanXvQVMWzUvRRhBAcg/lNRadBhoUPqSoP4xw5tR/KBEA==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-darwin-x64": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-darwin-x64/-/binding-darwin-x64-1.0.3.tgz",
+			"integrity": "sha512-9YpfeUvSE2RS7wysJ81uOZkXJz7f7Q55H2Gvp3VEw/EsahqDtrphrZ0EwDLK5vvKOzaCrBsjF8JmnMLcUt78Gg==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-freebsd-x64": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-freebsd-x64/-/binding-freebsd-x64-1.0.3.tgz",
+			"integrity": "sha512-yB1IlAsSNHncV6SCTL27/MVGR5htvQsoGxIv5KMGXALp+Ll1wYsn+x98M9MW7qa+NdSbvrrY7ANI4wLJ0n1e6g==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"freebsd"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-arm-gnueabihf": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-1.0.3.tgz",
+			"integrity": "sha512-Yi30IVAAfLUCy2MseFjbB1jAMDl1VMCAas5StnYp8da9+CKvMd2H2cbEjWcw5NPaPqzvYkVIaF1nNUG+b7u/sw==",
+			"cpu": [
+				"arm"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-arm64-gnu": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-1.0.3.tgz",
+			"integrity": "sha512-jsO7R8To+AdlYgUmN5sHSCZbfhtMBkO0WUx8iORQnPcMMdgr7qM2DQmMwgabs3GhNztdmoKkMKQFHD6DTMCIQw==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"libc": [
+				"glibc"
+			],
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-arm64-musl": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-arm64-musl/-/binding-linux-arm64-musl-1.0.3.tgz",
+			"integrity": "sha512-VWkUHwWriDciit80wleYwKILoR/KMvxh/IdwS/paX+ZgpuRpCrKLUdadJbc0NpBEiyhpYawsJ73j9aCvOH+f7Q==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"libc": [
+				"musl"
+			],
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-ppc64-gnu": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-1.0.3.tgz",
+			"integrity": "sha512-5f1laC0SlIR0yDbFCd8acUhvJIag6N3zC5P7oUPN6wX0aOma+uKJ0wBDH5aq7I1PVI2ttTlhJwzwRIBnLiSGEg==",
+			"cpu": [
+				"ppc64"
+			],
+			"dev": true,
+			"libc": [
+				"glibc"
+			],
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-s390x-gnu": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-1.0.3.tgz",
+			"integrity": "sha512-Iq4ko0r4XsgbrF/LunNgHtAGLRRVE2kXonAXQ/MV0mC6jQpMOhW1SvtZja2EhC/kd05++bP78dsqBeIQyYJ6Yg==",
+			"cpu": [
+				"s390x"
+			],
+			"dev": true,
+			"libc": [
+				"glibc"
+			],
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-x64-gnu": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-gnu/-/binding-linux-x64-gnu-1.0.3.tgz",
+			"integrity": "sha512-B8m6tD5+/N5FeNQFbKlLA/2yVq9ycQP1SeedyEYYKWBNR3ZQbkvIUcNnDNM03lO1l5F2roiiFJGgvoLLyZXtSg==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"libc": [
+				"glibc"
+			],
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-linux-x64-musl": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-linux-x64-musl/-/binding-linux-x64-musl-1.0.3.tgz",
+			"integrity": "sha512-pSdpdUJHkuCxun9LE7jvgUB9qsRgaiyNNCX7m/AvHTcq67AiT/Yhoxvw5zPfhrM8k/BfP8ce/hMOpthKDpEUow==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"libc": [
+				"musl"
+			],
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-openharmony-arm64": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-openharmony-arm64/-/binding-openharmony-arm64-1.0.3.tgz",
+			"integrity": "sha512-OXXS3RKJgX2uLwM+gYyuH5omcH8fL1LJs96pZGgtetVCahON57+d4SJHzTgZiOjxgGkSnpXpOsWuPDGAKAigEg==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"openharmony"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-wasm32-wasi": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-wasm32-wasi/-/binding-wasm32-wasi-1.0.3.tgz",
+			"integrity": "sha512-JTtb8BWFynicNSoPrehsCzBtOKjZ6jhMiPFEmOiuXg1Fl8dn2KHQob+GuPSGR0dryQa1PQJbzjF3dqO/whhjLg==",
+			"cpu": [
+				"wasm32"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"dependencies": {
+				"@emnapi/core": "1.10.0",
+				"@emnapi/runtime": "1.10.0",
+				"@napi-rs/wasm-runtime": "^1.1.4"
+			},
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-win32-arm64-msvc": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-1.0.3.tgz",
+			"integrity": "sha512-gEdFFEN70A/jxb2svrWsN3aDL7OUtmvlOy+6fa2jxG8K0wQ1ZbdeLGnidov6Yu5/733dI5ySfzFlQ/cb0bSz1g==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"win32"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/binding-win32-x64-msvc": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/@rolldown/binding-win32-x64-msvc/-/binding-win32-x64-msvc-1.0.3.tgz",
+			"integrity": "sha512-eXB7CHuaQdqmJcc3koCNtNPmT/bj2gc999kUFgBxG8Ac0NdgXc4rkCHhqrgrhN3zddvvvrgzj1e90SuSfmyIXA==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"os": [
+				"win32"
+			],
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			}
+		},
+		"node_modules/@rolldown/pluginutils": {
+			"version": "1.0.1",
+			"resolved": "https://registry.npmjs.org/@rolldown/pluginutils/-/pluginutils-1.0.1.tgz",
+			"integrity": "sha512-2j9bGt5Jh8hj+vPtgzPtl72j0yRxHAyumoo6TNfAjsLB04UtpSvPbPcDcBMxz7n+9CYB0c1GxQFxYRg2jimqGw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@rollup/rollup-android-arm-eabi": {
 			"version": "4.60.4",
 			"resolved": "https://registry.npmjs.org/@rollup/rollup-android-arm-eabi/-/rollup-android-arm-eabi-4.60.4.tgz",
@@ -1667,6 +2013,13 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/@standard-schema/spec": {
+			"version": "1.1.0",
+			"resolved": "https://registry.npmjs.org/@standard-schema/spec/-/spec-1.1.0.tgz",
+			"integrity": "sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@tanstack/react-virtual": {
 			"version": "3.13.26",
 			"resolved": "https://registry.npmjs.org/@tanstack/react-virtual/-/react-virtual-3.13.26.tgz",
@@ -1694,6 +2047,28 @@
 				"url": "https://github.com/sponsors/tannerlinsley"
 			}
 		},
+		"node_modules/@tybys/wasm-util": {
+			"version": "0.10.2",
+			"resolved": "https://registry.npmjs.org/@tybys/wasm-util/-/wasm-util-0.10.2.tgz",
+			"integrity": "sha512-RoBvJ2X0wuKlWFIjrwffGw1IqZHKQqzIchKaadZZfnNpsAYp2mM0h36JtPCjNDAHGgYez/15uMBpfGwchhiMgg==",
+			"dev": true,
+			"license": "MIT",
+			"optional": true,
+			"dependencies": {
+				"tslib": "^2.4.0"
+			}
+		},
+		"node_modules/@types/chai": {
+			"version": "5.2.3",
+			"resolved": "https://registry.npmjs.org/@types/chai/-/chai-5.2.3.tgz",
+			"integrity": "sha512-Mw558oeA9fFbv65/y4mHtXDs9bPnFMZAL/jxdPFUpOHHIXX91mcgEHbS5Lahr+pwZFR8A7GQleRWeI6cGFC2UA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/deep-eql": "*",
+				"assertion-error": "^2.0.1"
+			}
+		},
 		"node_modules/@types/codemirror": {
 			"version": "5.60.8",
 			"resolved": "https://registry.npmjs.org/@types/codemirror/-/codemirror-5.60.8.tgz",
@@ -1704,6 +2079,13 @@
 				"@types/tern": "*"
 			}
 		},
+		"node_modules/@types/deep-eql": {
+			"version": "4.0.2",
+			"resolved": "https://registry.npmjs.org/@types/deep-eql/-/deep-eql-4.0.2.tgz",
+			"integrity": "sha512-c9h9dVVMigMPc4bwTvC5dxqtqJZwQPePsWjPlpSOnojbor6pGqdk541lfA7AqFQr5pB1BRdq0juY9db81BwyFw==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/@types/eslint": {
 			"version": "8.56.2",
 			"resolved": "https://registry.npmjs.org/@types/eslint/-/eslint-8.56.2.tgz",
@@ -2097,6 +2479,92 @@
 			"dev": true,
 			"license": "ISC"
 		},
+		"node_modules/@vitest/expect": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/expect/-/expect-4.1.8.tgz",
+			"integrity": "sha512-h3nDO677RDLEGlBxyQ5CW8RlMThSKSRLUePLOx09gNIWRL40edgA1GCZSZgf1W55MFAG6/Sw14KeaAnqv0NKdQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@standard-schema/spec": "^1.1.0",
+				"@types/chai": "^5.2.2",
+				"@vitest/spy": "4.1.8",
+				"@vitest/utils": "4.1.8",
+				"chai": "^6.2.2",
+				"tinyrainbow": "^3.1.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/pretty-format": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/pretty-format/-/pretty-format-4.1.8.tgz",
+			"integrity": "sha512-9GasEBxpZ1VYIpqHf/0+YGg121uSNwCKOJqIrTwWP/TB7DmFCiaBpNl3aPZzoLWfWkuqhbH8vJIVobZkvdo2cA==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"tinyrainbow": "^3.1.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/runner": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/runner/-/runner-4.1.8.tgz",
+			"integrity": "sha512-EmVxeBAfMJvycdjd6Hm+RbFBbA9fKvo0Kx37hNpBYoYeavH3RNsBXWDooR1mgD52dCrxIIuP7UotpfiwOikvcg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@vitest/utils": "4.1.8",
+				"pathe": "^2.0.3"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/snapshot": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/snapshot/-/snapshot-4.1.8.tgz",
+			"integrity": "sha512-acfZboRmAIf05DEKcBQy33VXojFJjtUdLyo7oOmV9kebb2xdU01UknNiPuPZoJZQyO7DF0gZdTGTpeAzET9QPQ==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@vitest/pretty-format": "4.1.8",
+				"@vitest/utils": "4.1.8",
+				"magic-string": "^0.30.21",
+				"pathe": "^2.0.3"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/spy": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/spy/-/spy-4.1.8.tgz",
+			"integrity": "sha512-6EevtBp6OZOPF7bmz36HrGMeP3txgVSrgebWxHOafDXGkhIzfXK14f8KF6MuFfgXXUeHxmpD3BQxkV00/3s5mA==",
+			"dev": true,
+			"license": "MIT",
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
+		"node_modules/@vitest/utils": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/utils/-/utils-4.1.8.tgz",
+			"integrity": "sha512-uOJamYALNhfJ6iolExyQM40yIQwDqYnkKtQ5VCiSe17E33H0aQ/u+1GlRuz4LZBk6Mm3sg90G9hEbmEt37C1Zg==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@vitest/pretty-format": "4.1.8",
+				"convert-source-map": "^2.0.0",
+				"tinyrainbow": "^3.1.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			}
+		},
 		"node_modules/@vue/compiler-core": {
 			"version": "3.5.35",
 			"resolved": "https://registry.npmjs.org/@vue/compiler-core/-/compiler-core-3.5.35.tgz",
@@ -2597,6 +3065,16 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/assertion-error": {
+			"version": "2.0.1",
+			"resolved": "https://registry.npmjs.org/assertion-error/-/assertion-error-2.0.1.tgz",
+			"integrity": "sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=12"
+			}
+		},
 		"node_modules/async-function": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/async-function/-/async-function-1.0.0.tgz",
@@ -2727,6 +3205,16 @@
 				"url": "https://github.com/sponsors/wooorm"
 			}
 		},
+		"node_modules/chai": {
+			"version": "6.2.2",
+			"resolved": "https://registry.npmjs.org/chai/-/chai-6.2.2.tgz",
+			"integrity": "sha512-NUPRluOfOiTKBKvWPtSD4PhFvWCqOi0BGStNWs57X9js7XGTprSmFoz5F0tWhR4WPjNeR9jXqdC7/UpSJTnlRg==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=18"
+			}
+		},
 		"node_modules/chalk": {
 			"version": "4.1.2",
 			"resolved": "https://registry.npmjs.org/chalk/-/chalk-4.1.2.tgz",
@@ -2804,6 +3292,13 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/convert-source-map": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/convert-source-map/-/convert-source-map-2.0.0.tgz",
+			"integrity": "sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/copy-anything": {
 			"version": "4.0.5",
 			"resolved": "https://registry.npmjs.org/copy-anything/-/copy-anything-4.0.5.tgz",
@@ -2973,6 +3468,16 @@
 				"node": ">=6"
 			}
 		},
+		"node_modules/detect-libc": {
+			"version": "2.1.2",
+			"resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+			"integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/devlop": {
 			"version": "1.1.0",
 			"resolved": "https://registry.npmjs.org/devlop/-/devlop-1.1.0.tgz",
@@ -3185,6 +3690,13 @@
 				"node": ">= 0.4"
 			}
 		},
+		"node_modules/es-module-lexer": {
+			"version": "2.1.0",
+			"resolved": "https://registry.npmjs.org/es-module-lexer/-/es-module-lexer-2.1.0.tgz",
+			"integrity": "sha512-n27zTYMjYu1aj4MjCWzSP7G9r75utsaoc8m61weK+W8JMBGGQybd43GstCXZ3WNmSFtGT9wi59qQTW6mhTR5LQ==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/es-object-atoms": {
 			"version": "1.1.2",
 			"resolved": "https://registry.npmjs.org/es-object-atoms/-/es-object-atoms-1.1.2.tgz",
@@ -4013,6 +4525,16 @@
 				"node": ">=0.10.0"
 			}
 		},
+		"node_modules/expect-type": {
+			"version": "1.3.0",
+			"resolved": "https://registry.npmjs.org/expect-type/-/expect-type-1.3.0.tgz",
+			"integrity": "sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==",
+			"dev": true,
+			"license": "Apache-2.0",
+			"engines": {
+				"node": ">=12.0.0"
+			}
+		},
 		"node_modules/fast-deep-equal": {
 			"version": "3.1.3",
 			"resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
@@ -5138,6 +5660,279 @@
 				"node": ">= 0.8.0"
 			}
 		},
+		"node_modules/lightningcss": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss/-/lightningcss-1.32.0.tgz",
+			"integrity": "sha512-NXYBzinNrblfraPGyrbPoD19C1h9lfI/1mzgWYvXUTe414Gz/X1FD2XBZSZM7rRTrMA8JL3OtAaGifrIKhQ5yQ==",
+			"dev": true,
+			"license": "MPL-2.0",
+			"dependencies": {
+				"detect-libc": "^2.0.3"
+			},
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			},
+			"optionalDependencies": {
+				"lightningcss-android-arm64": "1.32.0",
+				"lightningcss-darwin-arm64": "1.32.0",
+				"lightningcss-darwin-x64": "1.32.0",
+				"lightningcss-freebsd-x64": "1.32.0",
+				"lightningcss-linux-arm-gnueabihf": "1.32.0",
+				"lightningcss-linux-arm64-gnu": "1.32.0",
+				"lightningcss-linux-arm64-musl": "1.32.0",
+				"lightningcss-linux-x64-gnu": "1.32.0",
+				"lightningcss-linux-x64-musl": "1.32.0",
+				"lightningcss-win32-arm64-msvc": "1.32.0",
+				"lightningcss-win32-x64-msvc": "1.32.0"
+			}
+		},
+		"node_modules/lightningcss-android-arm64": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-android-arm64/-/lightningcss-android-arm64-1.32.0.tgz",
+			"integrity": "sha512-YK7/ClTt4kAK0vo6w3X+Pnm0D2cf2vPHbhOXdoNti1Ga0al1P4TBZhwjATvjNwLEBCnKvjJc2jQgHXH0NEwlAg==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"android"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-darwin-arm64": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-darwin-arm64/-/lightningcss-darwin-arm64-1.32.0.tgz",
+			"integrity": "sha512-RzeG9Ju5bag2Bv1/lwlVJvBE3q6TtXskdZLLCyfg5pt+HLz9BqlICO7LZM7VHNTTn/5PRhHFBSjk5lc4cmscPQ==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-darwin-x64": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-darwin-x64/-/lightningcss-darwin-x64-1.32.0.tgz",
+			"integrity": "sha512-U+QsBp2m/s2wqpUYT/6wnlagdZbtZdndSmut/NJqlCcMLTWp5muCrID+K5UJ6jqD2BFshejCYXniPDbNh73V8w==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"darwin"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-freebsd-x64": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-freebsd-x64/-/lightningcss-freebsd-x64-1.32.0.tgz",
+			"integrity": "sha512-JCTigedEksZk3tHTTthnMdVfGf61Fky8Ji2E4YjUTEQX14xiy/lTzXnu1vwiZe3bYe0q+SpsSH/CTeDXK6WHig==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"freebsd"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-linux-arm-gnueabihf": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-linux-arm-gnueabihf/-/lightningcss-linux-arm-gnueabihf-1.32.0.tgz",
+			"integrity": "sha512-x6rnnpRa2GL0zQOkt6rts3YDPzduLpWvwAF6EMhXFVZXD4tPrBkEFqzGowzCsIWsPjqSK+tyNEODUBXeeVHSkw==",
+			"cpu": [
+				"arm"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-linux-arm64-gnu": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-gnu/-/lightningcss-linux-arm64-gnu-1.32.0.tgz",
+			"integrity": "sha512-0nnMyoyOLRJXfbMOilaSRcLH3Jw5z9HDNGfT/gwCPgaDjnx0i8w7vBzFLFR1f6CMLKF8gVbebmkUN3fa/kQJpQ==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"libc": [
+				"glibc"
+			],
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-linux-arm64-musl": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-linux-arm64-musl/-/lightningcss-linux-arm64-musl-1.32.0.tgz",
+			"integrity": "sha512-UpQkoenr4UJEzgVIYpI80lDFvRmPVg6oqboNHfoH4CQIfNA+HOrZ7Mo7KZP02dC6LjghPQJeBsvXhJod/wnIBg==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"libc": [
+				"musl"
+			],
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-linux-x64-gnu": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-linux-x64-gnu/-/lightningcss-linux-x64-gnu-1.32.0.tgz",
+			"integrity": "sha512-V7Qr52IhZmdKPVr+Vtw8o+WLsQJYCTd8loIfpDaMRWGUZfBOYEJeyJIkqGIDMZPwPx24pUMfwSxxI8phr/MbOA==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"libc": [
+				"glibc"
+			],
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-linux-x64-musl": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-linux-x64-musl/-/lightningcss-linux-x64-musl-1.32.0.tgz",
+			"integrity": "sha512-bYcLp+Vb0awsiXg/80uCRezCYHNg1/l3mt0gzHnWV9XP1W5sKa5/TCdGWaR/zBM2PeF/HbsQv/j2URNOiVuxWg==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"libc": [
+				"musl"
+			],
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"linux"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-win32-arm64-msvc": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-win32-arm64-msvc/-/lightningcss-win32-arm64-msvc-1.32.0.tgz",
+			"integrity": "sha512-8SbC8BR40pS6baCM8sbtYDSwEVQd4JlFTOlaD3gWGHfThTcABnNDBda6eTZeqbofalIJhFx0qKzgHJmcPTnGdw==",
+			"cpu": [
+				"arm64"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"win32"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
+		"node_modules/lightningcss-win32-x64-msvc": {
+			"version": "1.32.0",
+			"resolved": "https://registry.npmjs.org/lightningcss-win32-x64-msvc/-/lightningcss-win32-x64-msvc-1.32.0.tgz",
+			"integrity": "sha512-Amq9B/SoZYdDi1kFrojnoqPLxYhQ4Wo5XiL8EVJrVsB8ARoC1PWW6VGtT0WKCemjy8aC+louJnjS7U18x3b06Q==",
+			"cpu": [
+				"x64"
+			],
+			"dev": true,
+			"license": "MPL-2.0",
+			"optional": true,
+			"os": [
+				"win32"
+			],
+			"engines": {
+				"node": ">= 12.0.0"
+			},
+			"funding": {
+				"type": "opencollective",
+				"url": "https://opencollective.com/parcel"
+			}
+		},
 		"node_modules/locate-path": {
 			"version": "6.0.0",
 			"resolved": "https://registry.npmjs.org/locate-path/-/locate-path-6.0.0.tgz",
@@ -5573,6 +6368,17 @@
 				"@codemirror/view": "6.38.6"
 			}
 		},
+		"node_modules/obug": {
+			"version": "2.1.1",
+			"resolved": "https://registry.npmjs.org/obug/-/obug-2.1.1.tgz",
+			"integrity": "sha512-uTqF9MuPraAQ+IsnPf366RG4cP9RtUi7MLO1N3KEc+wb0a6yKpeL0lmk2IB1jY5KHPAlTc6T/JRdC/YqxHNwkQ==",
+			"dev": true,
+			"funding": [
+				"https://github.com/sponsors/sxzz",
+				"https://opencollective.com/debug"
+			],
+			"license": "MIT"
+		},
 		"node_modules/oniguruma-to-es": {
 			"version": "3.1.1",
 			"resolved": "https://registry.npmjs.org/oniguruma-to-es/-/oniguruma-to-es-3.1.1.tgz",
@@ -5693,6 +6499,13 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/pathe": {
+			"version": "2.0.3",
+			"resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+			"integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/perfect-debounce": {
 			"version": "1.0.0",
 			"resolved": "https://registry.npmjs.org/perfect-debounce/-/perfect-debounce-1.0.0.tgz",
@@ -6013,6 +6826,40 @@
 			"dev": true,
 			"license": "MIT"
 		},
+		"node_modules/rolldown": {
+			"version": "1.0.3",
+			"resolved": "https://registry.npmjs.org/rolldown/-/rolldown-1.0.3.tgz",
+			"integrity": "sha512-i00lAJ2ks1BYr7rjNjKC7BcqAS7nVfiT3QX1SI5aY+AFHblCmaUf9OE9dbdzDvW6dJxbi2ZCZiy9v3CcwOiX3g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@oxc-project/types": "=0.133.0",
+				"@rolldown/pluginutils": "^1.0.0"
+			},
+			"bin": {
+				"rolldown": "bin/cli.mjs"
+			},
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			},
+			"optionalDependencies": {
+				"@rolldown/binding-android-arm64": "1.0.3",
+				"@rolldown/binding-darwin-arm64": "1.0.3",
+				"@rolldown/binding-darwin-x64": "1.0.3",
+				"@rolldown/binding-freebsd-x64": "1.0.3",
+				"@rolldown/binding-linux-arm-gnueabihf": "1.0.3",
+				"@rolldown/binding-linux-arm64-gnu": "1.0.3",
+				"@rolldown/binding-linux-arm64-musl": "1.0.3",
+				"@rolldown/binding-linux-ppc64-gnu": "1.0.3",
+				"@rolldown/binding-linux-s390x-gnu": "1.0.3",
+				"@rolldown/binding-linux-x64-gnu": "1.0.3",
+				"@rolldown/binding-linux-x64-musl": "1.0.3",
+				"@rolldown/binding-openharmony-arm64": "1.0.3",
+				"@rolldown/binding-wasm32-wasi": "1.0.3",
+				"@rolldown/binding-win32-arm64-msvc": "1.0.3",
+				"@rolldown/binding-win32-x64-msvc": "1.0.3"
+			}
+		},
 		"node_modules/rollup": {
 			"version": "4.60.4",
 			"resolved": "https://registry.npmjs.org/rollup/-/rollup-4.60.4.tgz",
@@ -6345,6 +7192,13 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/siginfo": {
+			"version": "2.0.0",
+			"resolved": "https://registry.npmjs.org/siginfo/-/siginfo-2.0.0.tgz",
+			"integrity": "sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==",
+			"dev": true,
+			"license": "ISC"
+		},
 		"node_modules/source-map-js": {
 			"version": "1.2.1",
 			"resolved": "https://registry.npmjs.org/source-map-js/-/source-map-js-1.2.1.tgz",
@@ -6376,6 +7230,20 @@
 				"node": ">=0.10.0"
 			}
 		},
+		"node_modules/stackback": {
+			"version": "0.0.2",
+			"resolved": "https://registry.npmjs.org/stackback/-/stackback-0.0.2.tgz",
+			"integrity": "sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/std-env": {
+			"version": "4.1.0",
+			"resolved": "https://registry.npmjs.org/std-env/-/std-env-4.1.0.tgz",
+			"integrity": "sha512-Rq7ybcX2RuC55r9oaPVEW7/xu3tj8u4GeBYHBWCychFtzMIr86A7e3PPEBPT37sHStKX3+TiX/Fr/ACmJLVlLQ==",
+			"dev": true,
+			"license": "MIT"
+		},
 		"node_modules/stop-iteration-iterator": {
 			"version": "1.1.0",
 			"resolved": "https://registry.npmjs.org/stop-iteration-iterator/-/stop-iteration-iterator-1.1.0.tgz",
@@ -6616,10 +7484,27 @@
 				"url": "https://opencollective.com/webpack"
 			}
 		},
+		"node_modules/tinybench": {
+			"version": "2.9.0",
+			"resolved": "https://registry.npmjs.org/tinybench/-/tinybench-2.9.0.tgz",
+			"integrity": "sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==",
+			"dev": true,
+			"license": "MIT"
+		},
+		"node_modules/tinyexec": {
+			"version": "1.2.4",
+			"resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-1.2.4.tgz",
+			"integrity": "sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=18"
+			}
+		},
 		"node_modules/tinyglobby": {
-			"version": "0.2.16",
-			"resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.16.tgz",
-			"integrity": "sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==",
+			"version": "0.2.17",
+			"resolved": "https://registry.npmjs.org/tinyglobby/-/tinyglobby-0.2.17.tgz",
+			"integrity": "sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==",
 			"dev": true,
 			"license": "MIT",
 			"dependencies": {
@@ -6633,6 +7518,16 @@
 				"url": "https://github.com/sponsors/SuperchupuDev"
 			}
 		},
+		"node_modules/tinyrainbow": {
+			"version": "3.1.0",
+			"resolved": "https://registry.npmjs.org/tinyrainbow/-/tinyrainbow-3.1.0.tgz",
+			"integrity": "sha512-Bf+ILmBgretUrdJxzXM0SgXLZ3XfiaUuOj/IKQHuTXip+05Xn+uyEYdVg0kYDipTBcLrCVyUzAPz7QmArb0mmw==",
+			"dev": true,
+			"license": "MIT",
+			"engines": {
+				"node": ">=14.0.0"
+			}
+		},
 		"node_modules/toml-eslint-parser": {
 			"version": "0.9.3",
 			"resolved": "https://registry.npmjs.org/toml-eslint-parser/-/toml-eslint-parser-0.9.3.tgz",
@@ -7390,16 +8285,6 @@
 				"node": ">=12"
 			}
 		},
-		"node_modules/vitepress/node_modules/@types/node": {
-			"version": "25.9.1",
-			"resolved": "https://registry.npmjs.org/@types/node/-/node-25.9.1.tgz",
-			"integrity": "sha512-xfrlY7UD5rMJk3ZVJP8BNzS28J36YJg+xp+LPXV1TdWxr8uMH5A860QNxYDGQe/ylDSgjxE52Q9VnO7p75tJxg==",
-			"extraneous": true,
-			"license": "MIT",
-			"dependencies": {
-				"undici-types": ">=7.24.0 <7.24.7"
-			}
-		},
 		"node_modules/vitepress/node_modules/@vitejs/plugin-vue": {
 			"version": "5.2.4",
 			"resolved": "https://registry.npmjs.org/@vitejs/plugin-vue/-/plugin-vue-5.2.4.tgz",
@@ -7453,13 +8338,6 @@
 				"@esbuild/win32-x64": "0.21.5"
 			}
 		},
-		"node_modules/vitepress/node_modules/undici-types": {
-			"version": "7.24.6",
-			"resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.24.6.tgz",
-			"integrity": "sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==",
-			"extraneous": true,
-			"license": "MIT"
-		},
 		"node_modules/vitepress/node_modules/vite": {
 			"version": "5.4.21",
 			"resolved": "https://registry.npmjs.org/vite/-/vite-5.4.21.tgz",
@@ -7520,6 +8398,211 @@
 				}
 			}
 		},
+		"node_modules/vitest": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/vitest/-/vitest-4.1.8.tgz",
+			"integrity": "sha512-flY6ScbCIt9HThs+C5HS7jvGOB560DJtk/Z15IQROTA6zEy49Nh8T/dofWTQL+n3vswqn87sbJNiuqw1SDp5Ig==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@vitest/expect": "4.1.8",
+				"@vitest/mocker": "4.1.8",
+				"@vitest/pretty-format": "4.1.8",
+				"@vitest/runner": "4.1.8",
+				"@vitest/snapshot": "4.1.8",
+				"@vitest/spy": "4.1.8",
+				"@vitest/utils": "4.1.8",
+				"es-module-lexer": "^2.0.0",
+				"expect-type": "^1.3.0",
+				"magic-string": "^0.30.21",
+				"obug": "^2.1.1",
+				"pathe": "^2.0.3",
+				"picomatch": "^4.0.3",
+				"std-env": "^4.0.0-rc.1",
+				"tinybench": "^2.9.0",
+				"tinyexec": "^1.0.2",
+				"tinyglobby": "^0.2.15",
+				"tinyrainbow": "^3.1.0",
+				"vite": "^6.0.0 || ^7.0.0 || ^8.0.0",
+				"why-is-node-running": "^2.3.0"
+			},
+			"bin": {
+				"vitest": "vitest.mjs"
+			},
+			"engines": {
+				"node": "^20.0.0 || ^22.0.0 || >=24.0.0"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			},
+			"peerDependencies": {
+				"@edge-runtime/vm": "*",
+				"@opentelemetry/api": "^1.9.0",
+				"@types/node": "^20.0.0 || ^22.0.0 || >=24.0.0",
+				"@vitest/browser-playwright": "4.1.8",
+				"@vitest/browser-preview": "4.1.8",
+				"@vitest/browser-webdriverio": "4.1.8",
+				"@vitest/coverage-istanbul": "4.1.8",
+				"@vitest/coverage-v8": "4.1.8",
+				"@vitest/ui": "4.1.8",
+				"happy-dom": "*",
+				"jsdom": "*",
+				"vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+			},
+			"peerDependenciesMeta": {
+				"@edge-runtime/vm": {
+					"optional": true
+				},
+				"@opentelemetry/api": {
+					"optional": true
+				},
+				"@types/node": {
+					"optional": true
+				},
+				"@vitest/browser-playwright": {
+					"optional": true
+				},
+				"@vitest/browser-preview": {
+					"optional": true
+				},
+				"@vitest/browser-webdriverio": {
+					"optional": true
+				},
+				"@vitest/coverage-istanbul": {
+					"optional": true
+				},
+				"@vitest/coverage-v8": {
+					"optional": true
+				},
+				"@vitest/ui": {
+					"optional": true
+				},
+				"happy-dom": {
+					"optional": true
+				},
+				"jsdom": {
+					"optional": true
+				},
+				"vite": {
+					"optional": false
+				}
+			}
+		},
+		"node_modules/vitest/node_modules/@vitest/mocker": {
+			"version": "4.1.8",
+			"resolved": "https://registry.npmjs.org/@vitest/mocker/-/mocker-4.1.8.tgz",
+			"integrity": "sha512-LEiN/xe4OSIbKe9HQIp5OC24agGD9J5CnmMgsLohVVoOPWL9a2sBoR6VBx43jQZb7Kr1l4RCuyCJzcAa0+dojw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@vitest/spy": "4.1.8",
+				"estree-walker": "^3.0.3",
+				"magic-string": "^0.30.21"
+			},
+			"funding": {
+				"url": "https://opencollective.com/vitest"
+			},
+			"peerDependencies": {
+				"msw": "^2.4.9",
+				"vite": "^6.0.0 || ^7.0.0 || ^8.0.0"
+			},
+			"peerDependenciesMeta": {
+				"msw": {
+					"optional": true
+				},
+				"vite": {
+					"optional": true
+				}
+			}
+		},
+		"node_modules/vitest/node_modules/estree-walker": {
+			"version": "3.0.3",
+			"resolved": "https://registry.npmjs.org/estree-walker/-/estree-walker-3.0.3.tgz",
+			"integrity": "sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"@types/estree": "^1.0.0"
+			}
+		},
+		"node_modules/vitest/node_modules/vite": {
+			"version": "8.0.16",
+			"resolved": "https://registry.npmjs.org/vite/-/vite-8.0.16.tgz",
+			"integrity": "sha512-h9bXPmJichP5fLmVQo3PyaGSDE2n3aPuomeAlVRm0JLmt4rY6zmPKd59HYI4LNW8oTK7tlTsuC7l/m7awx9Jcw==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"lightningcss": "^1.32.0",
+				"picomatch": "^4.0.4",
+				"postcss": "^8.5.15",
+				"rolldown": "1.0.3",
+				"tinyglobby": "^0.2.17"
+			},
+			"bin": {
+				"vite": "bin/vite.js"
+			},
+			"engines": {
+				"node": "^20.19.0 || >=22.12.0"
+			},
+			"funding": {
+				"url": "https://github.com/vitejs/vite?sponsor=1"
+			},
+			"optionalDependencies": {
+				"fsevents": "~2.3.3"
+			},
+			"peerDependencies": {
+				"@types/node": "^20.19.0 || >=22.12.0",
+				"@vitejs/devtools": "^0.1.18",
+				"esbuild": "^0.27.0 || ^0.28.0",
+				"jiti": ">=1.21.0",
+				"less": "^4.0.0",
+				"sass": "^1.70.0",
+				"sass-embedded": "^1.70.0",
+				"stylus": ">=0.54.8",
+				"sugarss": "^5.0.0",
+				"terser": "^5.16.0",
+				"tsx": "^4.8.1",
+				"yaml": "^2.4.2"
+			},
+			"peerDependenciesMeta": {
+				"@types/node": {
+					"optional": true
+				},
+				"@vitejs/devtools": {
+					"optional": true
+				},
+				"esbuild": {
+					"optional": true
+				},
+				"jiti": {
+					"optional": true
+				},
+				"less": {
+					"optional": true
+				},
+				"sass": {
+					"optional": true
+				},
+				"sass-embedded": {
+					"optional": true
+				},
+				"stylus": {
+					"optional": true
+				},
+				"sugarss": {
+					"optional": true
+				},
+				"terser": {
+					"optional": true
+				},
+				"tsx": {
+					"optional": true
+				},
+				"yaml": {
+					"optional": true
+				}
+			}
+		},
 		"node_modules/vue": {
 			"version": "3.5.35",
 			"resolved": "https://registry.npmjs.org/vue/-/vue-3.5.35.tgz",
@@ -7653,6 +8736,23 @@
 				"url": "https://github.com/sponsors/ljharb"
 			}
 		},
+		"node_modules/why-is-node-running": {
+			"version": "2.3.0",
+			"resolved": "https://registry.npmjs.org/why-is-node-running/-/why-is-node-running-2.3.0.tgz",
+			"integrity": "sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==",
+			"dev": true,
+			"license": "MIT",
+			"dependencies": {
+				"siginfo": "^2.0.0",
+				"stackback": "0.0.2"
+			},
+			"bin": {
+				"why-is-node-running": "cli.js"
+			},
+			"engines": {
+				"node": ">=8"
+			}
+		},
 		"node_modules/word-wrap": {
 			"version": "1.2.5",
 			"resolved": "https://registry.npmjs.org/word-wrap/-/word-wrap-1.2.5.tgz",
diff --git a/package.json b/package.json
index 4f29206..5c05c3c 100644
--- a/package.json
+++ b/package.json
@@ -6,6 +6,8 @@
 	"scripts": {
 		"dev": "node esbuild.config.mjs",
 		"build": "tsc -noEmit -skipLibCheck && node esbuild.config.mjs production",
+		"test": "vitest run",
+		"test:watch": "vitest",
 		"version": "node version-bump.mjs && git add manifest.json versions.json",
 		"format": "prettier --write \"src/**/*.{ts,tsx}\" \"*.css\"",
 		"format:check": "prettier --check \"src/**/*.{ts,tsx}\" \"*.css\"",
@@ -33,7 +35,8 @@
 		"tslib": "2.4.0",
 		"typescript": "^5.9.3",
 		"typescript-eslint": "^8.0.0",
-		"vitepress": "^1.6.4"
+		"vitepress": "^1.6.4",
+		"vitest": "^4.1.8"
 	},
 	"dependencies": {
 		"@agentclientprotocol/sdk": "^0.14.1",
diff --git a/src/acp/acp-client.ts b/src/acp/acp-client.ts
index d4165b7..d799546 100644
--- a/src/acp/acp-client.ts
+++ b/src/acp/acp-client.ts
@@ -21,6 +21,7 @@ import {
 	convertWindowsPathToWsl,
 	getEnhancedWindowsEnv,
 	prepareShellCommand,
+	buildWslEnv,
 } from "../utils/platform";
 import { resolveNodeDirectory } from "../utils/paths";
 import {
@@ -166,6 +167,14 @@ export class AcpClient {
 			baseEnv = getEnhancedWindowsEnv(baseEnv);
 		}
 
+		// In WSL mode, forward the configured env vars (API keys, custom agent
+		// env) into WSL via WSLENV. Windows env vars are otherwise not visible to
+		// the Linux agent process, so without this the plugin's API key field has
+		// no effect in WSL mode (the user would have to put keys in ~/.profile).
+		if (Platform.isWin && this.plugin.settings.windowsWslMode) {
+			baseEnv = buildWslEnv(baseEnv, Object.keys(config.env || {}));
+		}
+
 		// Add Node.js directory to PATH only when nodePath is an explicit absolute path.
 		// When nodePath is empty or a bare command name, the login shell handles it.
 		const nodeDir = resolveNodeDirectory(this.plugin.settings.nodePath);
diff --git a/src/acp/terminal-handler.ts b/src/acp/terminal-handler.ts
index 780bb03..a7fdf00 100644
--- a/src/acp/terminal-handler.ts
+++ b/src/acp/terminal-handler.ts
@@ -3,7 +3,11 @@ import type AgentClientPlugin from "../plugin";
 import { getLogger, Logger } from "../utils/logger";
 import { Platform } from "obsidian";
 import { resolveNodeDirectory } from "../utils/paths";
-import { getEnhancedWindowsEnv, prepareShellCommand } from "../utils/platform";
+import {
+	getEnhancedWindowsEnv,
+	prepareShellCommand,
+	buildWslEnv,
+} from "../utils/platform";
 
 /**
  * Parameters for creating a terminal process.
@@ -70,6 +74,15 @@ export class TerminalManager {
 			}
 		}
 
+		// In WSL mode, forward the tool-provided env vars into WSL via WSLENV
+		// (Windows env is otherwise not visible to the Linux process).
+		if (Platform.isWin && this.plugin.settings.windowsWslMode && params.env) {
+			env = buildWslEnv(
+				env,
+				params.env.map((e) => e.name),
+			);
+		}
+
 		// Handle command parsing
 		let command = params.command;
 		let args = params.args || [];
diff --git a/src/utils/platform.ts b/src/utils/platform.ts
index 84c321f..4436e74 100644
--- a/src/utils/platform.ts
+++ b/src/utils/platform.ts
@@ -174,6 +174,59 @@ export function clearWindowsPathCache(): void {
 	cachedFullPath = null;
 }
 
+/**
+ * Forward selected environment variables into WSL via WSLENV.
+ *
+ * WSL only imports Windows environment variables that are listed in WSLENV
+ * (Build 17063+). Values cross through the Windows process environment, not the
+ * command line, so secrets are not exposed in `ps`/argv. This makes env-based
+ * config (API keys from the plugin's key field, custom agent env, tool env)
+ * actually reach the agent in WSL mode, instead of relying on the user's
+ * ~/.profile.
+ *
+ * Defensive by design (this runs on every WSL launch): merges with any existing
+ * WSLENV without clobbering, skips empty values (so an empty key field never
+ * overrides a profile-set value with ""), skips invalid key names, and never
+ * throws.
+ *
+ * @param baseEnv - Base environment (not mutated)
+ * @param keysToForward - Names of env vars to make visible inside WSL
+ * @returns A new env object with WSLENV augmented, or baseEnv unchanged if nothing to add
+ */
+export function buildWslEnv(
+	baseEnv: NodeJS.ProcessEnv,
+	keysToForward: string[],
+): NodeJS.ProcessEnv {
+	// A valid WSLENV entry name is a normal env var name. Reject names containing
+	// ':' or '/' (the WSLENV separators / flag marker) to avoid corrupting the list.
+	const validName = /^[A-Za-z_][A-Za-z0-9_]*$/;
+	const toAdd = keysToForward.filter(
+		(k) =>
+			validName.test(k) &&
+			typeof baseEnv[k] === "string" &&
+			baseEnv[k] !== "",
+	);
+	if (toAdd.length === 0) {
+		return baseEnv;
+	}
+
+	const existing = baseEnv.WSLENV
+		? baseEnv.WSLENV.split(":").filter((e) => e.length > 0)
+		: [];
+	const existingNames = new Set(existing.map((e) => e.split("/")[0]));
+
+	const merged = [...existing];
+	for (const k of toAdd) {
+		if (!existingNames.has(k)) {
+			// "/u": share only when launching WSL from Win32 (our direction).
+			merged.push(`${k}/u`);
+			existingNames.add(k);
+		}
+	}
+
+	return { ...baseEnv, WSLENV: merged.join(":") };
+}
+
 /**
  * Convert Windows path to WSL path format.
  * Example: C:\Users\name\vault → /mnt/c/Users/name/vault
@@ -255,9 +308,50 @@ export function buildWslShellWrapper(innerCommand: string): string {
 	);
 }
 
+/**
+ * Build the constant launcher script for argv-based WSL agent launch.
+ *
+ * Used as: `wsl.exe [-d dist] --exec /bin/sh -c '<this>' sh <pathDir> <cwd> <command> <args...>`
+ * where pathDir/cwd/command/args are passed as separate argv (positional params),
+ * NEVER baked into this string. As a result there is no nested-quoting fragility
+ * and no escaping of user data is required — the returned string is a pure constant.
+ *
+ * This combines the strengths of both prior approaches: it skips wsl's default
+ * shell layer (via `--exec`, fixing environments where the nested `sh -c "<baked
+ * string>"` construction fails), runs under the user's login shell (`$SHELL -l`,
+ * so ~/.profile and login files are sourced — unlike a bare `--exec <command>`
+ * which would drop the environment), and forwards command/args as clean argv.
+ * Falls back to /bin/sh for non-POSIX shells (fish, elvish, nushell, xonsh).
+ *
+ * IMPORTANT (same caveat as buildWslShellWrapper): reference `${SHELL:-/bin/sh}`
+ * directly; do not use intermediate variables.
+ *
+ * Positional params seen by the inner login shell:
+ *   $1 = extra PATH dir ("" = none), $2 = working dir, $3 = command, $4.. = args
+ */
+export function buildWslArgvScript(): string {
+	// Constant inner script: optional PATH prepend, cd into the working dir,
+	// then exec the command with its args as argv.
+	const core =
+		'[ -n "$1" ] && export PATH="$1:$PATH"; shift; ' +
+		'cd "$1" 2>/dev/null; shift; exec "$@"';
+	const coreEsc = core.replace(/'/g, "'\\''");
+	return (
+		`case \${SHELL:-/bin/sh} in ` +
+		`*/fish|*/elvish|*/nushell|*/xonsh) exec /bin/sh -l -c '${coreEsc}' sh "$@";; ` +
+		`*) exec \${SHELL:-/bin/sh} -l -c '${coreEsc}' sh "$@";; ` +
+		`esac`
+	);
+}
+
 /**
  * Wrap a command to run inside WSL using wsl.exe.
  * Generates wsl.exe command with proper arguments for executing commands in WSL environment.
+ *
+ * @param useArgvExec - When true (agent launch), use the hybrid argv launcher
+ *   (`--exec` + login shell + argv) so command/args need no escaping and the
+ *   environment is preserved. When false (terminal launch), use the shell-string
+ *   wrapper so the login shell parses pipes/redirects in the command.
  */
 export function wrapCommandForWsl(
 	command: string,
@@ -265,6 +359,7 @@ export function wrapCommandForWsl(
 	cwd: string,
 	distribution?: string,
 	additionalPath?: string,
+	useArgvExec = false,
 ): { command: string; args: string[] } {
 	// Validate working directory path
 	// Check for UNC paths (\\server\share) which are not supported by WSL
@@ -294,8 +389,36 @@ export function wrapCommandForWsl(
 		wslArgs.push("-d", distribution);
 	}
 
-	// Build command to execute inside WSL
-	// Use login shell (-l) to inherit PATH from user's shell profile
+	if (useArgvExec) {
+		// Agent launch: hybrid argv launcher.
+		// command/args/cwd/pathDir are passed as separate argv (positional params),
+		// so no shell quoting of user data is needed (fixes paths/args with spaces
+		// or special chars), `--exec` skips wsl's default shell layer (fixes envs
+		// where the nested `sh -c "<baked string>"` construction breaks), and the
+		// login shell inside still sources ~/.profile (preserves the environment).
+		const pathDir = additionalPath
+			? convertWindowsPathToWsl(additionalPath)
+			: "";
+		wslArgs.push(
+			"--exec",
+			"/bin/sh",
+			"-c",
+			buildWslArgvScript(),
+			"sh",
+			pathDir,
+			wslCwd,
+			command,
+			...args,
+		);
+		return {
+			command: "C:\\Windows\\System32\\wsl.exe",
+			args: wslArgs,
+		};
+	}
+
+	// Terminal launch: the command may be a shell line (pipes, redirects, &&),
+	// so keep the shell-string wrapper and let the login shell parse it.
+	// Use login shell (-l) to inherit PATH from user's shell profile.
 	const escapedArgs = args.map(escapeShellArgBash).join(" ");
 	const argsString = escapedArgs.length > 0 ? ` ${escapedArgs}` : "";
 
@@ -307,29 +430,13 @@ export function wrapCommandForWsl(
 		pathPrefix = `export PATH="${escapePathForShell(wslPath)}:$PATH"; `;
 	}
 
-    const commandIsAbsoluteWslPath = command.startsWith("/");
-    const commandHasShellSyntax = /[\s"'`$&|;<>(){}[\]*?!\\]/.test(command);
-    const canUseDirectExec =
-	    commandIsAbsoluteWslPath &&
-	    !commandHasShellSyntax &&
-	    !additionalPath;
+	const innerCommand = `${pathPrefix}cd ${escapeShellArgBash(wslCwd)} && ${command}${argsString}`;
+	wslArgs.push("sh", "-c", buildWslShellWrapper(innerCommand));
 
-    if (canUseDirectExec) {
-	    wslArgs.push("--cd", wslCwd, "--exec", command, ...args);
-
-	    return {
-		    command: "C:\\Windows\\System32\\wsl.exe",
-		    args: wslArgs,
-	    };
-    }
-
-    const innerCommand = `${pathPrefix}cd ${escapeShellArgBash(wslCwd)} && ${command}${argsString}`;
-    wslArgs.push("sh", "-c", buildWslShellWrapper(innerCommand));
-
-    return {
-	    command: "C:\\Windows\\System32\\wsl.exe",
-	    args: wslArgs,
-    };
+	return {
+		command: "C:\\Windows\\System32\\wsl.exe",
+		args: wslArgs,
+	};
 }
 
 /**
@@ -390,12 +497,16 @@ export function prepareShellCommand(
 
 	// WSL mode (Windows only)
 	if (Platform.isWin && options.wslMode) {
+		// Agent launch (alwaysEscape: true) uses the hybrid argv launcher;
+		// terminal launch (alwaysEscape: false) uses the shell-string wrapper
+		// so pipes/redirects in the command are parsed by the shell.
 		const wrapped = wrapCommandForWsl(
 			command,
 			args,
 			cwd,
 			options.wslDistribution,
 			options.nodeDir,
+			alwaysEscape,
 		);
 		return {
 			command: wrapped.command,
diff --git a/test/platform.test.ts b/test/platform.test.ts
new file mode 100644
index 0000000..274bdeb
--- /dev/null
+++ b/test/platform.test.ts
@@ -0,0 +1,315 @@
+import { describe, it, expect, beforeEach } from "vitest";
+import { Platform } from "obsidian";
+import {
+	convertWindowsPathToWsl,
+	convertWslPathToWindows,
+	escapeShellArgBash,
+	escapeShellArgWindows,
+	buildWslArgvScript,
+	wrapCommandForWsl,
+	prepareShellCommand,
+	buildWslEnv,
+	isSameDirectory,
+} from "../src/utils/platform";
+
+const WSL_EXE = "C:\\Windows\\System32\\wsl.exe";
+
+function resetPlatform(): void {
+	Platform.isWin = false;
+	Platform.isMacOS = false;
+	Platform.isLinux = false;
+	Platform.isDesktopApp = true;
+}
+
+beforeEach(resetPlatform);
+
+describe("convertWindowsPathToWsl", () => {
+	it("converts a Windows drive path", () => {
+		expect(convertWindowsPathToWsl("C:\\Users\\me")).toBe("/mnt/c/Users/me");
+	});
+	it("lowercases the drive letter and normalizes slashes", () => {
+		expect(convertWindowsPathToWsl("D:/Foo/Bar")).toBe("/mnt/d/Foo/Bar");
+	});
+	it("is idempotent on already-WSL paths", () => {
+		expect(convertWindowsPathToWsl("/mnt/c/x")).toBe("/mnt/c/x");
+	});
+	it("passes through non-drive paths unchanged", () => {
+		expect(convertWindowsPathToWsl("relative/dir")).toBe("relative/dir");
+	});
+});
+
+describe("convertWslPathToWindows", () => {
+	it("converts a /mnt path", () => {
+		expect(convertWslPathToWindows("/mnt/c/Users/me")).toBe("C:\\Users\\me");
+	});
+	it("passes through non-/mnt paths unchanged", () => {
+		expect(convertWslPathToWindows("/home/me")).toBe("/home/me");
+	});
+	it("round-trips with convertWindowsPathToWsl", () => {
+		const win = "C:\\Users\\me\\vault";
+		expect(convertWslPathToWindows(convertWindowsPathToWsl(win))).toBe(win);
+	});
+});
+
+describe("escapeShellArgBash", () => {
+	it("wraps plain args in single quotes", () => {
+		expect(escapeShellArgBash("foo")).toBe("'foo'");
+	});
+	it("preserves spaces inside quotes", () => {
+		expect(escapeShellArgBash("foo bar")).toBe("'foo bar'");
+	});
+	it("escapes embedded single quotes", () => {
+		expect(escapeShellArgBash("it's")).toBe("'it'\\''s'");
+	});
+});
+
+describe("escapeShellArgWindows", () => {
+	it("leaves simple args unquoted", () => {
+		expect(escapeShellArgWindows("foo")).toBe("foo");
+	});
+	it("quotes args with spaces", () => {
+		expect(escapeShellArgWindows("foo bar")).toBe('"foo bar"');
+	});
+	it("doubles percent signs", () => {
+		expect(escapeShellArgWindows("%PATH%")).toBe("%%PATH%%");
+	});
+});
+
+describe("buildWslArgvScript", () => {
+	const script = buildWslArgvScript();
+	it("runs a login shell so ~/.profile is sourced (env preserved)", () => {
+		expect(script).toContain(" -l ");
+	});
+	it("execs the forwarded argv", () => {
+		expect(script).toContain('exec "$@"');
+	});
+	it("references $SHELL directly with a /bin/sh fallback", () => {
+		expect(script).toContain("${SHELL:-/bin/sh}");
+		expect(script).toContain("*/fish");
+	});
+	it("does not bake in any command/args (pure constant)", () => {
+		// Sanity: the script must not contain a placeholder that implies
+		// string interpolation of user data.
+		expect(script).not.toContain("undefined");
+	});
+});
+
+describe("wrapCommandForWsl — agent (useArgvExec)", () => {
+	it("uses --exec + /bin/sh -c <script>, forwarding command/args as ordered argv", () => {
+		const { command, args } = wrapCommandForWsl(
+			"/home/u/agent",
+			["acp"],
+			"C:\\vault",
+			undefined,
+			undefined,
+			true,
+		);
+		expect(command).toBe(WSL_EXE);
+		// header: --exec /bin/sh -c <launcher script>
+		expect(args.slice(0, 3)).toEqual(["--exec", "/bin/sh", "-c"]);
+		// launcher keeps a login shell so the environment is preserved
+		expect(args[3]).toContain(" -l ");
+		// positionals: sh <pathDir> <cwd> <command> <args...> — ORDER matters
+		// ("" pathDir must be present so $1..$N line up with the script)
+		expect(args.slice(4)).toEqual([
+			"sh",
+			"",
+			"/mnt/c/vault",
+			"/home/u/agent",
+			"acp",
+		]);
+	});
+
+	it("keeps a command path with spaces as a single, correctly-positioned argv element", () => {
+		const { args } = wrapCommandForWsl(
+			"/home/u/my agent",
+			[],
+			"C:\\vault",
+			undefined,
+			undefined,
+			true,
+		);
+		expect(args.slice(4)).toEqual([
+			"sh",
+			"",
+			"/mnt/c/vault",
+			"/home/u/my agent",
+		]);
+	});
+
+	it("forwards the additionalPath dir as the first positional (before cwd)", () => {
+		const { args } = wrapCommandForWsl(
+			"/home/u/agent",
+			[],
+			"C:\\vault",
+			undefined,
+			"C:\\node\\bin",
+			true,
+		);
+		expect(args.slice(4)).toEqual([
+			"sh",
+			"/mnt/c/node/bin",
+			"/mnt/c/vault",
+			"/home/u/agent",
+		]);
+	});
+
+	it("passes -d <distribution> before the launcher header", () => {
+		const { args } = wrapCommandForWsl(
+			"/home/u/agent",
+			[],
+			"C:\\vault",
+			"Ubuntu",
+			undefined,
+			true,
+		);
+		expect(args.slice(0, 5)).toEqual([
+			"-d",
+			"Ubuntu",
+			"--exec",
+			"/bin/sh",
+			"-c",
+		]);
+		// positionals (index 5 is the launcher script)
+		expect(args.slice(6)).toEqual([
+			"sh",
+			"",
+			"/mnt/c/vault",
+			"/home/u/agent",
+		]);
+	});
+});
+
+describe("wrapCommandForWsl — terminal (shell string)", () => {
+	it("uses sh -c wrapper and lets the shell parse the command (pipes)", () => {
+		const { command, args } = wrapCommandForWsl(
+			"ls -la | grep foo",
+			[],
+			"C:\\vault",
+			undefined,
+			undefined,
+			false,
+		);
+		expect(command).toBe(WSL_EXE);
+		expect(args).toContain("sh");
+		expect(args).toContain("-c");
+		const wrapper = args[args.indexOf("-c") + 1];
+		// login shell + profile sourcing preserved
+		expect(wrapper).toContain(". ~/.profile");
+		expect(wrapper).toContain(" -l ");
+		// command is left raw so the shell parses the pipe
+		expect(wrapper).toContain("ls -la | grep foo");
+	});
+});
+
+describe("wrapCommandForWsl — validation", () => {
+	it("rejects UNC working directories", () => {
+		expect(() =>
+			wrapCommandForWsl("/x", [], "\\\\server\\share"),
+		).toThrow(/UNC/);
+	});
+	it("rejects invalid distribution names", () => {
+		expect(() =>
+			wrapCommandForWsl("/x", [], "C:\\v", "bad;name"),
+		).toThrow(/distribution/i);
+	});
+});
+
+describe("prepareShellCommand", () => {
+	it("WSL agent: wsl.exe via --exec, no shell", () => {
+		Platform.isWin = true;
+		const r = prepareShellCommand("/home/u/agent", ["acp"], "C:\\vault", {
+			wslMode: true,
+			alwaysEscape: true,
+		});
+		expect(r.command).toBe(WSL_EXE);
+		expect(r.needsShell).toBe(false);
+		expect(r.args).toContain("--exec");
+	});
+
+	it("WSL terminal: wsl.exe via sh -c wrapper", () => {
+		Platform.isWin = true;
+		const r = prepareShellCommand("ls | grep x", [], "C:\\vault", {
+			wslMode: true,
+			alwaysEscape: false,
+		});
+		expect(r.command).toBe(WSL_EXE);
+		expect(r.args).toContain("sh");
+		expect(r.args).not.toContain("--exec");
+	});
+
+	it("macOS: wraps in a login shell (-l -c)", () => {
+		Platform.isMacOS = true;
+		const r = prepareShellCommand("agent", [], "/home/u", {
+			wslMode: false,
+		});
+		expect(r.args[0]).toBe("-l");
+		expect(r.args[1]).toBe("-c");
+		expect(r.needsShell).toBe(false);
+	});
+
+	it("Windows non-WSL: needs cmd.exe shell", () => {
+		Platform.isWin = true;
+		const r = prepareShellCommand("agent", ["x"], "C:\\vault", {
+			wslMode: false,
+		});
+		expect(r.needsShell).toBe(true);
+	});
+});
+
+describe("buildWslEnv", () => {
+	it("adds a forwarded key with the /u flag", () => {
+		const out = buildWslEnv({ FOO: "bar" }, ["FOO"]);
+		expect(out.WSLENV).toBe("FOO/u");
+	});
+
+	it("skips empty values (never clobbers a profile-set var)", () => {
+		const base = { FOO: "" };
+		const out = buildWslEnv(base, ["FOO"]);
+		expect(out.WSLENV).toBeUndefined();
+		expect(out).toBe(base); // unchanged reference when nothing to add
+	});
+
+	it("skips undefined values", () => {
+		const out = buildWslEnv({}, ["MISSING"]);
+		expect(out.WSLENV).toBeUndefined();
+	});
+
+	it("skips invalid key names", () => {
+		const out = buildWslEnv({ "A:B": "x" }, ["A:B"]);
+		expect(out.WSLENV).toBeUndefined();
+	});
+
+	it("merges with an existing WSLENV without clobbering", () => {
+		const out = buildWslEnv({ FOO: "bar", WSLENV: "EXISTING/p" }, ["FOO"]);
+		expect(out.WSLENV).toBe("EXISTING/p:FOO/u");
+	});
+
+	it("does not duplicate an already-listed key", () => {
+		const out = buildWslEnv({ FOO: "bar", WSLENV: "FOO/p" }, ["FOO"]);
+		expect(out.WSLENV).toBe("FOO/p");
+	});
+
+	it("does not mutate the input env", () => {
+		const base: NodeJS.ProcessEnv = { FOO: "bar" };
+		buildWslEnv(base, ["FOO"]);
+		expect(base.WSLENV).toBeUndefined();
+	});
+});
+
+describe("isSameDirectory", () => {
+	it("treats equivalent WSL and Windows paths as the same", () => {
+		expect(isSameDirectory("/mnt/c/x", "C:\\x")).toBe(true);
+	});
+	it("ignores trailing slashes", () => {
+		expect(isSameDirectory("/mnt/c/x/", "/mnt/c/x")).toBe(true);
+	});
+	it("is case-insensitive on Windows", () => {
+		Platform.isWin = true;
+		expect(isSameDirectory("C:\\Foo", "C:\\foo")).toBe(true);
+	});
+	it("is case-sensitive off Windows", () => {
+		Platform.isWin = false;
+		expect(isSameDirectory("/mnt/c/Foo", "/mnt/c/foo")).toBe(false);
+	});
+});
diff --git a/test/stubs/obsidian.ts b/test/stubs/obsidian.ts
new file mode 100644
index 0000000..c38b122
--- /dev/null
+++ b/test/stubs/obsidian.ts
@@ -0,0 +1,14 @@
+/**
+ * Lightweight `obsidian` stub for unit tests.
+ *
+ * The real `obsidian` module only exists inside the Obsidian runtime. The pure
+ * utilities under test (`src/utils/platform.ts`, `src/utils/paths.ts`) only need
+ * `Platform`, whose flags they read at call time. Tests mutate these flags to
+ * exercise the platform-specific branches.
+ */
+export const Platform = {
+	isWin: false,
+	isMacOS: false,
+	isLinux: false,
+	isDesktopApp: true,
+};
diff --git a/tsconfig.eslint.json b/tsconfig.eslint.json
new file mode 100644
index 0000000..1c910b0
--- /dev/null
+++ b/tsconfig.eslint.json
@@ -0,0 +1,4 @@
+{
+	"extends": "./tsconfig.json",
+	"include": ["src/**/*.ts", "src/**/*.tsx", "test/**/*.ts"]
+}
diff --git a/vitest.config.mts b/vitest.config.mts
new file mode 100644
index 0000000..d080471
--- /dev/null
+++ b/vitest.config.mts
@@ -0,0 +1,19 @@
+import { defineConfig } from "vitest/config";
+import { fileURLToPath } from "node:url";
+
+// `obsidian` has no real module outside Obsidian, so alias it to a lightweight
+// stub for unit tests. Only the pieces the tested pure functions need (Platform)
+// are provided.
+export default defineConfig({
+	test: {
+		environment: "node",
+		include: ["test/**/*.test.ts"],
+	},
+	resolve: {
+		alias: {
+			obsidian: fileURLToPath(
+				new URL("./test/stubs/obsidian.ts", import.meta.url),
+			),
+		},
+	},
+});

From b91184f01250d96679bd8e54aabedd5d2611be67 Mon Sep 17 00:00:00 2001
From: RAIT-09 <51452399+RAIT-09@users.noreply.github.com>
Date: Fri, 5 Jun 2026 13:38:37 +0900
Subject: [PATCH 3/6] fix(wsl): apply the launch hybrid to terminal commands
 too

Terminal commands (tool_call terminals) still used the nested
`sh -c "<buildWslShellWrapper(innerCommand)>"` construction, which carries
the same fragility that broke agent launch in some environments (e.g.
RHEL8) and double-escaped the command line.

Run terminal commands the same way as agents now:
  wsl.exe [--exec] /bin/sh -c '<launcher>' sh '<commandLine>'
The command line is delivered as a single positional and run under the
user's login shell ($SHELL -l -c "$1"). This keeps full shell parsing
(pipes, redirects, subshells, bash-isms under the user's shell, e.g. bash)
-- behaviorally identical to the previous `$SHELL -l -c <line>` -- while
skipping wsl's default-shell layer (--exec) and removing the doubly-escaped
nested string.

Also, in WSL mode omit the Windows-side spawn cwd for terminals: the
working directory is applied inside the launcher (cd '<wslCwd>'), and a
Linux path as the wsl.exe process cwd would make CreateProcess fail.

buildWslShellWrapper is retained (now used only by paths.ts for the WSL
`which` lookup).

Tests updated/added accordingly (43 cases).
---
 src/acp/terminal-handler.ts |  8 +++--
 src/utils/platform.ts       | 50 ++++++++++++++++++++++++++---
 test/platform.test.ts       | 63 +++++++++++++++++++++++++++++--------
 3 files changed, 102 insertions(+), 19 deletions(-)

diff --git a/src/acp/terminal-handler.ts b/src/acp/terminal-handler.ts
index a7fdf00..6b0cc7c 100644
--- a/src/acp/terminal-handler.ts
+++ b/src/acp/terminal-handler.ts
@@ -110,9 +110,13 @@ export class TerminalManager {
 			cwd: params.cwd,
 		});
 
-		// Spawn the process
+		// Spawn the process.
+		// In WSL mode the working directory is applied inside the launcher
+		// (cd '<wslCwd>'); the wsl.exe process must NOT receive a Linux path as
+		// its Windows cwd (CreateProcess would fail), so omit cwd there.
+		const useWsl = Platform.isWin && this.plugin.settings.windowsWslMode;
 		const spawnOptions: SpawnOptions = {
-			cwd: params.cwd || undefined,
+			cwd: useWsl ? undefined : params.cwd || undefined,
 			env,
 			stdio: ["pipe", "pipe", "pipe"],
 			shell: needsShell,
diff --git a/src/utils/platform.ts b/src/utils/platform.ts
index 4436e74..71d8e01 100644
--- a/src/utils/platform.ts
+++ b/src/utils/platform.ts
@@ -289,6 +289,10 @@ export function isSameDirectory(pathA: string, pathB: string): boolean {
  * $SHELL, and falls back to /bin/sh for non-POSIX shells (fish, elvish,
  * nushell, xonsh).
  *
+ * NOTE: agent and terminal launches now use buildWslArgvScript /
+ * buildWslTerminalScript (--exec + positional argv) instead. This helper is
+ * currently used only by paths.ts (resolveCommandPathInWsl, the `which` lookup).
+ *
  * IMPORTANT: wsl.exe pre-expands $VAR references using WSL environment
  * variables before passing them to the Linux shell. Intermediate variables
  * (e.g., s=$SHELL; exec $s) will NOT work because wsl.exe expands $s to
@@ -344,6 +348,34 @@ export function buildWslArgvScript(): string {
 	);
 }
 
+/**
+ * Build the constant launcher script for terminal commands in WSL.
+ *
+ * Used as: `wsl.exe [-d dist] --exec /bin/sh -c '<this>' sh '<commandLine>'`
+ * where the full shell command line is passed as a single positional ($1),
+ * NEVER baked into this string — so there is no nested-quoting fragility. The
+ * command line is then run under the user's login shell with `-c`, so it is
+ * parsed by the user's actual shell (e.g. bash): pipes, redirects, subshells and
+ * bash-specific syntax are preserved, with ~/.profile sourced. Falls back to
+ * /bin/sh for non-POSIX shells (fish, elvish, nushell, xonsh).
+ *
+ * This mirrors buildWslShellWrapper's effective behavior (`$SHELL -l -c
+ * <commandLine>`) but delivers the command line via an argv positional + `--exec`
+ * instead of a doubly-escaped nested string, which avoids quoting failures seen
+ * in some WSL environments (e.g. RHEL8).
+ *
+ * IMPORTANT (same caveat as buildWslArgvScript): reference `${SHELL:-/bin/sh}`
+ * directly; do not use intermediate variables.
+ */
+export function buildWslTerminalScript(): string {
+	return (
+		`case \${SHELL:-/bin/sh} in ` +
+		`*/fish|*/elvish|*/nushell|*/xonsh) exec /bin/sh -l -c "$1";; ` +
+		`*) exec \${SHELL:-/bin/sh} -l -c "$1";; ` +
+		`esac`
+	);
+}
+
 /**
  * Wrap a command to run inside WSL using wsl.exe.
  * Generates wsl.exe command with proper arguments for executing commands in WSL environment.
@@ -416,9 +448,12 @@ export function wrapCommandForWsl(
 		};
 	}
 
-	// Terminal launch: the command may be a shell line (pipes, redirects, &&),
-	// so keep the shell-string wrapper and let the login shell parse it.
-	// Use login shell (-l) to inherit PATH from user's shell profile.
+	// Terminal launch: the command may be a shell line (pipes, redirects, &&,
+	// subshells, bash-isms), so it must be parsed by the user's shell. Build the
+	// same shell command line as before, but deliver it via --exec + a single
+	// positional (no nested escaped string) so it survives WSL quoting, and run
+	// it under the user's login shell ($SHELL -l -c "$1"). Behaviorally identical
+	// to the previous `$SHELL -l -c <innerCommand>`, just delivered robustly.
 	const escapedArgs = args.map(escapeShellArgBash).join(" ");
 	const argsString = escapedArgs.length > 0 ? ` ${escapedArgs}` : "";
 
@@ -431,7 +466,14 @@ export function wrapCommandForWsl(
 	}
 
 	const innerCommand = `${pathPrefix}cd ${escapeShellArgBash(wslCwd)} && ${command}${argsString}`;
-	wslArgs.push("sh", "-c", buildWslShellWrapper(innerCommand));
+	wslArgs.push(
+		"--exec",
+		"/bin/sh",
+		"-c",
+		buildWslTerminalScript(),
+		"sh",
+		innerCommand,
+	);
 
 	return {
 		command: "C:\\Windows\\System32\\wsl.exe",
diff --git a/test/platform.test.ts b/test/platform.test.ts
index 274bdeb..8fb5ada 100644
--- a/test/platform.test.ts
+++ b/test/platform.test.ts
@@ -6,6 +6,7 @@ import {
 	escapeShellArgBash,
 	escapeShellArgWindows,
 	buildWslArgvScript,
+	buildWslTerminalScript,
 	wrapCommandForWsl,
 	prepareShellCommand,
 	buildWslEnv,
@@ -180,8 +181,8 @@ describe("wrapCommandForWsl — agent (useArgvExec)", () => {
 	});
 });
 
-describe("wrapCommandForWsl — terminal (shell string)", () => {
-	it("uses sh -c wrapper and lets the shell parse the command (pipes)", () => {
+describe("wrapCommandForWsl — terminal (shell string via hybrid)", () => {
+	it("uses --exec + login shell, command line as a single positional (pipes preserved)", () => {
 		const { command, args } = wrapCommandForWsl(
 			"ls -la | grep foo",
 			[],
@@ -191,14 +192,48 @@ describe("wrapCommandForWsl — terminal (shell string)", () => {
 			false,
 		);
 		expect(command).toBe(WSL_EXE);
-		expect(args).toContain("sh");
-		expect(args).toContain("-c");
-		const wrapper = args[args.indexOf("-c") + 1];
-		// login shell + profile sourcing preserved
-		expect(wrapper).toContain(". ~/.profile");
-		expect(wrapper).toContain(" -l ");
-		// command is left raw so the shell parses the pipe
-		expect(wrapper).toContain("ls -la | grep foo");
+		// header: --exec /bin/sh -c <launcher script>
+		expect(args.slice(0, 3)).toEqual(["--exec", "/bin/sh", "-c"]);
+		// launcher runs the command line under the user's login shell
+		const script = args[3];
+		expect(script).toContain(" -l ");
+		expect(script).toContain("${SHELL:-/bin/sh}");
+		expect(script).toContain('-c "$1"');
+		// positionals: sh <innerCommand> — the command line is ONE intact element
+		expect(args).toHaveLength(6);
+		expect(args[4]).toBe("sh");
+		const innerCommand = args[5];
+		expect(innerCommand).toContain("ls -la | grep foo"); // raw pipe preserved
+		expect(innerCommand).toContain("cd '/mnt/c/vault'");
+	});
+
+	it("includes the PATH export and cd in the command line when additionalPath is set", () => {
+		const { args } = wrapCommandForWsl(
+			"node x.js",
+			[],
+			"C:\\v",
+			undefined,
+			"C:\\node\\bin",
+			false,
+		);
+		const innerCommand = args[args.length - 1];
+		expect(innerCommand).toContain('export PATH="/mnt/c/node/bin:$PATH"');
+		expect(innerCommand).toContain("node x.js");
+	});
+});
+
+describe("buildWslTerminalScript", () => {
+	const s = buildWslTerminalScript();
+	it("runs the command line under the user's login shell via -c", () => {
+		expect(s).toContain(" -l ");
+		expect(s).toContain('-c "$1"');
+		expect(s).toContain("${SHELL:-/bin/sh}");
+	});
+	it("falls back to /bin/sh for non-POSIX shells", () => {
+		expect(s).toContain("*/fish");
+	});
+	it("is a pure constant (no baked-in user data)", () => {
+		expect(s).not.toContain("undefined");
 	});
 });
 
@@ -227,15 +262,17 @@ describe("prepareShellCommand", () => {
 		expect(r.args).toContain("--exec");
 	});
 
-	it("WSL terminal: wsl.exe via sh -c wrapper", () => {
+	it("WSL terminal: wsl.exe via --exec + login shell, command line as positional", () => {
 		Platform.isWin = true;
 		const r = prepareShellCommand("ls | grep x", [], "C:\\vault", {
 			wslMode: true,
 			alwaysEscape: false,
 		});
 		expect(r.command).toBe(WSL_EXE);
-		expect(r.args).toContain("sh");
-		expect(r.args).not.toContain("--exec");
+		expect(r.needsShell).toBe(false);
+		expect(r.args.slice(0, 3)).toEqual(["--exec", "/bin/sh", "-c"]);
+		// the command line (with the pipe) is the last positional, intact
+		expect(r.args[r.args.length - 1]).toContain("ls | grep x");
 	});
 
 	it("macOS: wraps in a login shell (-l -c)", () => {

From 1281c1ddcc006b22072e4eca96858f43f99abcae Mon Sep 17 00:00:00 2001
From: RAIT-09 <51452399+RAIT-09@users.noreply.github.com>
Date: Fri, 5 Jun 2026 14:01:39 +0900
Subject: [PATCH 4/6] fix(wsl): source ~/.profile in the hybrid launchers
 (regression)

The argv/terminal launchers added in 850e2e1 and b91184f dropped the
explicit `. ~/.profile 2>/dev/null;` that buildWslShellWrapper has. bash -l
skips ~/.profile when ~/.bash_profile exists, and linuxbrew/nvm/mise install
their PATH there -- and bare command names (e.g. claude-agent-acp) resolve
via that PATH. Without it, affected WSL users would fail to spawn the agent
or run terminal commands.

Restore `. ~/.profile 2>/dev/null;` in buildWslArgvScript and
buildWslTerminalScript, matching buildWslShellWrapper and preserving the
intent of #177 (236843c / dd4f4ca / fce40a3). Add regression-guard tests
asserting the launchers source ~/.profile.
---
 src/utils/platform.ts |  8 ++++++++
 test/platform.test.ts | 11 +++++++++++
 2 files changed, 19 insertions(+)

diff --git a/src/utils/platform.ts b/src/utils/platform.ts
index 71d8e01..585b108 100644
--- a/src/utils/platform.ts
+++ b/src/utils/platform.ts
@@ -340,7 +340,11 @@ export function buildWslArgvScript(): string {
 		'[ -n "$1" ] && export PATH="$1:$PATH"; shift; ' +
 		'cd "$1" 2>/dev/null; shift; exec "$@"';
 	const coreEsc = core.replace(/'/g, "'\\''");
+	// Source ~/.profile first (like buildWslShellWrapper): bash -l skips ~/.profile
+	// when ~/.bash_profile exists, yet linuxbrew/nvm/mise put their PATH there and
+	// bare command names resolve via that PATH.
 	return (
+		`. ~/.profile 2>/dev/null; ` +
 		`case \${SHELL:-/bin/sh} in ` +
 		`*/fish|*/elvish|*/nushell|*/xonsh) exec /bin/sh -l -c '${coreEsc}' sh "$@";; ` +
 		`*) exec \${SHELL:-/bin/sh} -l -c '${coreEsc}' sh "$@";; ` +
@@ -368,7 +372,11 @@ export function buildWslArgvScript(): string {
  * directly; do not use intermediate variables.
  */
 export function buildWslTerminalScript(): string {
+	// Source ~/.profile first (like buildWslShellWrapper): bash -l skips ~/.profile
+	// when ~/.bash_profile exists, yet linuxbrew/nvm/mise put their PATH there and
+	// bare command names resolve via that PATH.
 	return (
+		`. ~/.profile 2>/dev/null; ` +
 		`case \${SHELL:-/bin/sh} in ` +
 		`*/fish|*/elvish|*/nushell|*/xonsh) exec /bin/sh -l -c "$1";; ` +
 		`*) exec \${SHELL:-/bin/sh} -l -c "$1";; ` +
diff --git a/test/platform.test.ts b/test/platform.test.ts
index 8fb5ada..e476a67 100644
--- a/test/platform.test.ts
+++ b/test/platform.test.ts
@@ -88,6 +88,9 @@ describe("buildWslArgvScript", () => {
 		expect(script).toContain("${SHELL:-/bin/sh}");
 		expect(script).toContain("*/fish");
 	});
+	it("sources ~/.profile (bash -l skips it when ~/.bash_profile exists)", () => {
+		expect(script).toContain(". ~/.profile");
+	});
 	it("does not bake in any command/args (pure constant)", () => {
 		// Sanity: the script must not contain a placeholder that implies
 		// string interpolation of user data.
@@ -110,6 +113,9 @@ describe("wrapCommandForWsl — agent (useArgvExec)", () => {
 		expect(args.slice(0, 3)).toEqual(["--exec", "/bin/sh", "-c"]);
 		// launcher keeps a login shell so the environment is preserved
 		expect(args[3]).toContain(" -l ");
+		// and sources ~/.profile (regression guard: bash -l skips it when
+		// ~/.bash_profile exists; linuxbrew/nvm/mise/bare-commands need it)
+		expect(args[3]).toContain(". ~/.profile");
 		// positionals: sh <pathDir> <cwd> <command> <args...> — ORDER matters
 		// ("" pathDir must be present so $1..$N line up with the script)
 		expect(args.slice(4)).toEqual([
@@ -199,6 +205,8 @@ describe("wrapCommandForWsl — terminal (shell string via hybrid)", () => {
 		expect(script).toContain(" -l ");
 		expect(script).toContain("${SHELL:-/bin/sh}");
 		expect(script).toContain('-c "$1"');
+		expect(script).toContain(". ~/.profile"); // regression guard
+
 		// positionals: sh <innerCommand> — the command line is ONE intact element
 		expect(args).toHaveLength(6);
 		expect(args[4]).toBe("sh");
@@ -232,6 +240,9 @@ describe("buildWslTerminalScript", () => {
 	it("falls back to /bin/sh for non-POSIX shells", () => {
 		expect(s).toContain("*/fish");
 	});
+	it("sources ~/.profile (bash -l skips it when ~/.bash_profile exists)", () => {
+		expect(s).toContain(". ~/.profile");
+	});
 	it("is a pure constant (no baked-in user data)", () => {
 		expect(s).not.toContain("undefined");
 	});

From 5aa988091d8c1f9c59556d8d66ef30a0ae241cf7 Mon Sep 17 00:00:00 2001
From: RAIT-09 <51452399+RAIT-09@users.noreply.github.com>
Date: Fri, 5 Jun 2026 14:52:41 +0900
Subject: [PATCH 5/6] fix(wsl): address Copilot review on #312 (cd fail-fast,
 buildWslEnv guard)

- Agent launcher: `cd "$1" 2>/dev/null;` -> `cd "$1" || exit 1;` so a failed
  cd doesn't silently run the agent in the wrong directory. Matches the
  terminal wrapper and pre-#304 launch (both use `cd ... && ...`).
- buildWslEnv: guard `existing` with `typeof baseEnv.WSLENV === "string"` so
  the helper truly never throws (its docstring's contract) even if WSLENV is
  set to a non-string via a type cast.
- Tests: add regression guards for both.

Not changed: the `/bin/sh -l -c` fallback for non-POSIX shells (Copilot
flagged it as possibly unsupported). It matches the shipped buildWslShellWrapper
and `wsl.exe /bin/sh -l -c 'echo OK'` works (dash supports -l); revisit across
all three builders together if a shell without `-l` support turns up.
---
 src/utils/platform.ts | 14 ++++++++------
 test/platform.test.ts | 12 ++++++++++++
 2 files changed, 20 insertions(+), 6 deletions(-)

diff --git a/src/utils/platform.ts b/src/utils/platform.ts
index 585b108..443f7e4 100644
--- a/src/utils/platform.ts
+++ b/src/utils/platform.ts
@@ -210,9 +210,10 @@ export function buildWslEnv(
 		return baseEnv;
 	}
 
-	const existing = baseEnv.WSLENV
-		? baseEnv.WSLENV.split(":").filter((e) => e.length > 0)
-		: [];
+	const existing =
+		typeof baseEnv.WSLENV === "string"
+			? baseEnv.WSLENV.split(":").filter((e) => e.length > 0)
+			: [];
 	const existingNames = new Set(existing.map((e) => e.split("/")[0]));
 
 	const merged = [...existing];
@@ -334,11 +335,12 @@ export function buildWslShellWrapper(innerCommand: string): string {
  *   $1 = extra PATH dir ("" = none), $2 = working dir, $3 = command, $4.. = args
  */
 export function buildWslArgvScript(): string {
-	// Constant inner script: optional PATH prepend, cd into the working dir,
-	// then exec the command with its args as argv.
+	// Constant inner script: optional PATH prepend, cd into the working dir
+	// (fail fast like the terminal wrapper / pre-#304 launch, so the agent never
+	// runs in an unintended directory), then exec the command with its args.
 	const core =
 		'[ -n "$1" ] && export PATH="$1:$PATH"; shift; ' +
-		'cd "$1" 2>/dev/null; shift; exec "$@"';
+		'cd "$1" || exit 1; shift; exec "$@"';
 	const coreEsc = core.replace(/'/g, "'\\''");
 	// Source ~/.profile first (like buildWslShellWrapper): bash -l skips ~/.profile
 	// when ~/.bash_profile exists, yet linuxbrew/nvm/mise put their PATH there and
diff --git a/test/platform.test.ts b/test/platform.test.ts
index e476a67..a88cc81 100644
--- a/test/platform.test.ts
+++ b/test/platform.test.ts
@@ -91,6 +91,9 @@ describe("buildWslArgvScript", () => {
 	it("sources ~/.profile (bash -l skips it when ~/.bash_profile exists)", () => {
 		expect(script).toContain(". ~/.profile");
 	});
+	it("fails fast if cd to the working dir fails (no run in wrong dir)", () => {
+		expect(script).toContain('cd "$1" || exit');
+	});
 	it("does not bake in any command/args (pure constant)", () => {
 		// Sanity: the script must not contain a placeholder that implies
 		// string interpolation of user data.
@@ -343,6 +346,15 @@ describe("buildWslEnv", () => {
 		buildWslEnv(base, ["FOO"]);
 		expect(base.WSLENV).toBeUndefined();
 	});
+
+	it("does not throw when WSLENV is present but not a string (defensive)", () => {
+		const base = {
+			FOO: "bar",
+			WSLENV: 123 as unknown as string,
+		};
+		expect(() => buildWslEnv(base, ["FOO"])).not.toThrow();
+		expect(buildWslEnv(base, ["FOO"]).WSLENV).toBe("FOO/u");
+	});
 });
 
 describe("isSameDirectory", () => {

From 8628ac84a3cfc76360f01db6e49462ff010f6515 Mon Sep 17 00:00:00 2001
From: RAIT-09 <51452399+RAIT-09@users.noreply.github.com>
Date: Sat, 20 Jun 2026 01:49:02 +0900
Subject: [PATCH 6/6] fix(wsl): forward resolved API key into WSL via WSLENV
 after secret migration

dev resolves built-in agents' API keys from secret storage into baseEnv
just before spawn (not into config.env). #312's WSLENV forwarding ran
before that and built its name list from config.env, so the resolved key
name was never listed and the key never crossed into WSL for built-in
agents in WSL mode.

Move the buildWslEnv call to after secret resolution and include
config.apiKey.envVarName in the forwarded name list. Custom agents
(no config.apiKey) are unchanged.
---
 src/acp/acp-client.ts | 22 ++++++++++++++--------
 1 file changed, 14 insertions(+), 8 deletions(-)

diff --git a/src/acp/acp-client.ts b/src/acp/acp-client.ts
index d01b071..222d2f3 100644
--- a/src/acp/acp-client.ts
+++ b/src/acp/acp-client.ts
@@ -180,14 +180,6 @@ export class AcpClient {
 			baseEnv = getEnhancedWindowsEnv(baseEnv);
 		}
 
-		// In WSL mode, forward the configured env vars (API keys, custom agent
-		// env) into WSL via WSLENV. Windows env vars are otherwise not visible to
-		// the Linux agent process, so without this the plugin's API key field has
-		// no effect in WSL mode (the user would have to put keys in ~/.profile).
-		if (Platform.isWin && this.plugin.settings.windowsWslMode) {
-			baseEnv = buildWslEnv(baseEnv, Object.keys(config.env || {}));
-		}
-
 		// Add Node.js directory to PATH only when nodePath is an explicit absolute path.
 		// When nodePath is empty or a bare command name, the login shell handles it.
 		const nodeDir = resolveNodeDirectory(this.plugin.settings.nodePath);
@@ -212,6 +204,20 @@ export class AcpClient {
 			baseEnv[config.apiKey.envVarName] = secretValue;
 		}
 
+		// In WSL mode, forward the configured env var NAMES into WSL via WSLENV
+		// (Windows env vars are otherwise invisible to the Linux agent process,
+		// so the plugin's API key field would have no effect in WSL). Built-in
+		// agents resolve the API key into baseEnv above — not into config.env —
+		// so its var name must be added explicitly, or the key would never cross
+		// into WSL. Must run AFTER the secret is injected into baseEnv. (#312)
+		if (Platform.isWin && this.plugin.settings.windowsWslMode) {
+			const wslEnvNames = Object.keys(config.env || {});
+			if (config.apiKey?.envVarName) {
+				wslEnvNames.push(config.apiKey.envVarName);
+			}
+			baseEnv = buildWslEnv(baseEnv, wslEnvNames);
+		}
+
 		this.logger.log(
 			"[AcpClient] Starting agent process in directory:",
 			config.workingDirectory,