diff --git a/.gitignore b/.gitignore
index 5b6adc786..6014dbebf 100644
--- a/.gitignore
+++ b/.gitignore
@@ -56,3 +56,9 @@ venv/
 
 # The Recorder extension's signing key never enters the repository (Decision 9).
 extension/**/*.pem
+
+# Added by CopilotKit CLI: browser snapshots a coding agent writes.
+.playwright-mcp/
+
+# The CopilotKit CLI's project selection for this checkout belongs to one machine and login.
+.copilotkit/
diff --git a/server/src/learning/ensure-container.ts b/server/src/learning/ensure-container.ts
index 812eea97d..5031f5c30 100644
--- a/server/src/learning/ensure-container.ts
+++ b/server/src/learning/ensure-container.ts
@@ -139,6 +139,8 @@ export const runCli: RunCli = (args, directory) =>
       {
         cwd: directory,
         env: cliEnvironment(),
+        // Node refuses to spawn .cmd files without a shell on Windows (EINVAL).
+        shell: process.platform === "win32",
         stdio: ["ignore", "pipe", "pipe"],
       },
     );