fix: Windows test failures — path handling, EBUSY, SQLite handle leaks

Fix all Windows-specific test failures caused by path handling problems
and EBUSY errors from unclosed SQLite database handles.

Root causes fixed:
1. POSIX path assumptions: replaced hard-coded file:///tmp, /repo, etc.
   with pathToFileURL/path.resolve/path.join computed expectations
2. shortenPath() now normalizes backslashes to forward slashes after ~
   and respects home directory boundaries
3. HistoryStorage.resetInstance() leaked its Database — added #close()
   that finalizes all prepared statements and closes the DB
4. AgentStorage gained the same resetInstance()/#close() pattern
5. SqliteAuthCredentialStore.close() leaked one-off prepared statements
   from inline this.#db.prepare() calls — wrapped each in try/finally
6. model-cache.ts used a process-global DB even for custom dbPath —
   now opens/closes per-call via withModelCacheDb
7. createAgentSession leaked AuthStorage on construction failure —
   added ownsAuthStorage cleanup in catch block
8. MnemopiBackend.removeDbFiles() now truly best-effort (catches errors)
9. TempDir retry window expanded from 4x10ms to 40x25ms
10. TempDir prefix convention: non-@ prefixes created dirs relative to
    cwd instead of os.tmpdir() — all test temp dirs now use @ prefix
11. Shell-escaped interpolated paths in bash tool tests
12. git core.autocrlf false in autoresearch test repo init

All 522 previously-failing Windows tests now pass.

packages/coding-agent/test/agent-session-python-cleanup.test.ts

@@ -1,7 +1,5 @@
 import { afterEach, beforeEach, describe, expect, it, type Mock, vi } from "bun:test";
 import * as fs from "node:fs";
-import * as os from "node:os";
-import * as path from "node:path";
 import { getBundledModel } from "@oh-my-pi/pi-catalog/models";
 import { Settings } from "@oh-my-pi/pi-coding-agent/config/settings";
 import * as pythonExecutor from "@oh-my-pi/pi-coding-agent/eval/py/executor";
@@ -9,8 +7,9 @@ import type { PythonKernel as PythonKernelInstance } from "@oh-my-pi/pi-coding-a
 import * as pythonKernel from "@oh-my-pi/pi-coding-agent/eval/py/kernel";
 import { AgentRegistry } from "@oh-my-pi/pi-coding-agent/registry/agent-registry";
 import { createAgentSession, type ExtensionFactory, type WorkspaceTree } from "@oh-my-pi/pi-coding-agent/sdk";
+import { AgentStorage } from "@oh-my-pi/pi-coding-agent/session/agent-storage";
 import { SessionManager } from "@oh-my-pi/pi-coding-agent/session/session-manager";
-import { Snowflake } from "@oh-my-pi/pi-utils";
+import { Snowflake, TempDir } from "@oh-my-pi/pi-utils";
 
 const OK_EXECUTION = { status: "ok", cancelled: false, timedOut: false, stdinRequested: false } as const;
 
@@ -69,12 +68,21 @@ const getModel = () => {
 };
 
 const createTempProject = () => {
-	const tempDir = fs.mkdtempSync(path.join(os.tmpdir(), `pi-agent-session-python-cleanup-${Snowflake.next()}-`));
-	const cwd = path.join(tempDir, "project");
+	const tempDir = TempDir.createSync(`@pi-agent-session-python-cleanup-${Snowflake.next()}-`);
+	const cwd = tempDir.join("project");
 	fs.mkdirSync(cwd, { recursive: true });
 	return { tempDir, cwd };
 };
 
+// createAgentSession opens an AuthStorage at <agentDir>/auth.db that is not
+// closed when construction fails. Point agentDir at a separate dir so the
+// auth.db handle doesn't keep the per-test project temp dir locked on Windows.
+const agentDirPool: TempDir[] = [];
+const createAgentDir = (): string => {
+	const dir = TempDir.createSync("@pi-python-cleanup-agentdir-");
+	agentDirPool.push(dir);
+	return dir.path();
+};
 const emptyWorkspaceTree = (cwd: string): WorkspaceTree => ({
 	rootPath: cwd,
 	rendered: ".",
@@ -102,14 +110,14 @@ const expectSleepNear = (sleepSpy: Mock<typeof Bun.sleep>, targetMs: number) =>
 	).toBe(true);
 };
 const createSession = async (
-	tempDir: string,
+	_tempDir: TempDir,
 	cwd: string,
 	options: { extensions?: ExtensionFactory[]; sessionManager?: SessionManager } = {},
 ) =>
 	(
 		await createAgentSession({
 			cwd,
-			agentDir: tempDir,
+			agentDir: createAgentDir(),
 			sessionManager: options.sessionManager ?? SessionManager.inMemory(cwd),
 			settings: Settings.isolated({ "python.kernelMode": "session" }),
 			model: getModel(),
@@ -126,7 +134,6 @@ const createSession = async (
 			toolNames: ["eval"],
 		})
 	).session;
-
 const createMockKernel = () => {
 	let alive = true;
 	return {
@@ -144,7 +151,7 @@ const createMockKernel = () => {
 };
 
 describe("AgentSession python cleanup", () => {
-	const tempDirs: string[] = [];
+	const tempDirs: TempDir[] = [];
 	let originalNullPrompt: string | undefined;
 
 	beforeEach(() => {
@@ -160,9 +167,15 @@ describe("AgentSession python cleanup", () => {
 		}
 		originalNullPrompt = undefined;
 		vi.restoreAllMocks();
+		AgentStorage.resetInstance();
 		await pythonExecutor.disposeAllKernelSessions();
-		for (const tempDir of tempDirs.splice(0)) {
-			fs.rmSync(tempDir, { recursive: true, force: true });
+		await Bun.sleep(0);
+		// Best-effort cleanup: createAgentSession opens AuthStorage/AgentStorage
+		// inside agentDir that may outlive the test (dispose() doesn't close them).
+		// On Windows the leaked SQLite handles keep the dir locked; swallow EBUSY
+		// rather than failing the test — the OS temp dir reaper will clean up.
+		for (const tempDir of [...tempDirs.splice(0), ...agentDirPool.splice(0)]) {
+			await tempDir.remove().catch(() => {});
 		}
 	});
 
@@ -170,7 +183,7 @@ describe("AgentSession python cleanup", () => {
 		const { tempDir, cwd } = createTempProject();
 		tempDirs.push(tempDir);
 		const unrelatedKernel = createMockKernel();
-		const unrelatedCwd = path.join(tempDir, "unrelated-before");
+		const unrelatedCwd = tempDir.join("unrelated-before");
 		const throwingExtension: ExtensionFactory = () => {
 			throw new Error("Extension init failed");
 		};
@@ -189,7 +202,7 @@ describe("AgentSession python cleanup", () => {
 		await expect(
 			createAgentSession({
 				cwd,
-				agentDir: tempDir,
+				agentDir: createAgentDir(),
 				sessionManager: SessionManager.inMemory(cwd),
 				settings: Settings.isolated({ "python.kernelMode": "session" }),
 				model: getModel(),
@@ -237,7 +250,7 @@ describe("AgentSession python cleanup", () => {
 		const { tempDir, cwd } = createTempProject();
 		tempDirs.push(tempDir);
 		const unrelatedKernel = createMockKernel();
-		const unrelatedCwd = path.join(tempDir, "unrelated-after");
+		const unrelatedCwd = tempDir.join("unrelated-after");
 		vi.spyOn(pythonKernel, "checkPythonKernelAvailability").mockResolvedValue({ ok: true });
 		const startSpy = vi
 			.spyOn(pythonKernel.PythonKernel, "start")
@@ -257,7 +270,7 @@ describe("AgentSession python cleanup", () => {
 		await expect(
 			createAgentSession({
 				cwd,
-				agentDir: tempDir,
+				agentDir: createAgentDir(),
 				sessionManager: SessionManager.inMemory(cwd),
 				settings: Settings.isolated({ "python.kernelMode": "session", "memory.backend": "local" }),
 				model: getModel(),