fix: stabilize agent chats across native sessions

.github/workflows/ci.yml

@@ -349,16 +349,31 @@ jobs:
         run: cargo clippy --locked -p nocterm-vault -p nocterm-vault-store -p nocterm-device-unlock --all-targets -- -D warnings
       - name: Test portable envelope and native metadata without authentication prompts
         run: cargo test --locked -p nocterm-vault -p nocterm-vault-store -p nocterm-device-unlock
+      - name: Test held filesystem capabilities on Windows
+        if: runner.os == 'Windows'
+        run: cargo test --locked -p nocterm-localfs
+      - name: Test bounded native file reads on Windows
+        if: runner.os == 'Windows'
+        run: cargo test --locked -p nocterm-core --lib fs::tests::bounded_read
+      - name: Test SSH native file reads on Windows
+        if: runner.os == 'Windows'
+        run: cargo test --locked -p nocterm-ssh --lib file::tests
+      - name: Test native chat history on Windows
+        if: runner.os == 'Windows'
+        run: cargo test --locked -p nocterm --test native_history
+      - name: Test authenticated MCP bridge after idle and refresh on Windows
+        if: runner.os == 'Windows'
+        run: cargo test --locked -p nocterm-acp --lib bridge::tests
       - name: Check the application builds for Windows
         if: runner.os == 'Windows'
         run: cargo check --locked -p nocterm
       # Held directories, chat history and agent launch have Windows-only code paths:
       # run them against the real filesystem and process APIs there.
-      - name: Test Windows held directories, chat history and agent launch
+      - name: Lint Windows history adapters and test agent environment
         if: runner.os == 'Windows'
         run: |
           cargo clippy --locked -p nocterm-localfs -p nocterm-agent-storage -p nocterm-agent-runtime --all-targets -- -D warnings
-          cargo test --locked -p nocterm-localfs -p nocterm-ai -p nocterm-agent-storage
+          cargo test --locked -p nocterm-ai -p nocterm-agent-storage
           cargo test --locked -p nocterm --test native_chat_history
 
   # The one check to require in branch protection: it passes only when every