@annealessio647-toby/ai-agent-collab-mcp-lite 0.1.0

package/CHANGELOG.md

@@ -0,0 +1,94 @@
+# Changelog
+
+All notable changes to `ai-agent-collab-mcp-lite` are documented in this file.
+
+The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+Schema versions follow [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
+
+## [0.1.0] - 2026-06-08
+
+### Added
+- Initial v1 build per `MCP_LITE_v1_PLAN.md` Rev 2 (codex PASS).
+- MCP stdio server (Node.js + TypeScript) registering 7 manual-trigger tools.
+- **7 tools** (D-5): `status`, `fetch`, `read_report`, `claim_review`, `write_verdict`, `push_verdict`, `close`.
+- **D-2** validate-before-action: `write_verdict` runs `agent-collab.ps1 validate -As codex` after write; `push_verdict` runs validate before the verb.
+- **D-4** fail-fast: every tool throws `SchemaVersionMismatch` if `.agent/COLLAB_MODE.yaml: schema_version != 2`.
+- **D-5** lease safety for `claim_review`: explicit branches (fresh / `LeaseConflict` / `StaleLease` + opt-in `forceSteal`). Never silently passes `-Force`.
+- **D-6** branch handling first-class: mutable tools throw `BranchMismatch` if local checkout differs from `COLLAB_MODE.yaml: branch`. `fetch` does ref-only fetch always + conditional ff-pull when local matches.
+- PS 5.1 / pwsh 7+ safety: `ps_runner` always uses `-File` mode to preserve exit codes (R-1).
+- UTF-8 no BOM file writes (R-2).
+- Distribution: npm package primary (`@annealessio647-toby/ai-agent-collab-mcp-lite`), submodule install supported.
+- Examples: VS Code MCP configs (npm + submodule paths) + walkthrough.md.
+- CI: tsc + jest (`ci.yml`); banned-words scanner (`banned-words.yml`); npm publish on tag (`publish.yml`).
+- `.github/CODEOWNERS` locks `src/`, `tests/`, `.github/`.
+
+### Changed
+- **RC1 (codex 41687a2):** Removed heartbeat semantics from `claim_review`. The
+  underlying `agent-collab.ps1 codex-reviewing` verb only accepts
+  `state=waiting_for_codex`, so a second `claim_review` call (post-claim, when
+  state is `codex_reviewing`) now throws `BadState` upfront. `ClaimType` is
+  reduced to `'fresh' | 'stolen-stale'`. Walkthrough + tests updated.
+
+### CI
+- **RC3 (codex 41687a2):** Added `package-lock.json` and switched CI + publish
+  workflows from `npm install` to `npm ci`. Restored `cache: 'npm'` under
+  `actions/setup-node@v4` in both workflows.
+
+### Fixed (mcp-lite-v1-fix-pathext)
+- **Windows PATHEXT silent failure (integrate phase smoke discovery):**
+  The `@modelcontextprotocol/sdk` `StdioClientTransport` on Windows uses
+  a curated env (`DEFAULT_INHERITED_ENV_VARS`) that includes `PATH` but
+  OMITS `PATHEXT`. Without `PATHEXT` a spawned PowerShell cannot resolve
+  extension-less command names like `git`, and the FROZEN `agent-collab.ps1`
+  dies on its first `git` call with `The term 'git' is not recognized` —
+  but PowerShell's `Write-Error` does not set a non-zero exit code by
+  default. The tools previously trusted `exitCode === 0` and returned
+  hardcoded post-state values, masking a complete no-op.
+- **Defense layer 1 — `src/lib/ps_runner.ts buildPsEnv()`:** when running
+  on Windows, the spawn env is composed so a missing parent `PATHEXT` is
+  filled with `.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC`.
+  Parent-set `PATHEXT` (any casing — Windows env is case-insensitive)
+  is preserved. Non-Windows: passthrough.
+- **Defense layer 2 — `src/lib/post_state_verify.ts assertPostState()`:**
+  every mutating tool (`claim_review`, `push_verdict`, `close`) now
+  re-reads `.agent/COLLAB_MODE.yaml` after the PS verb returns and
+  throws `PostStateMismatch` (new `ToolErrorName`) if the on-disk state
+  is not one of the expected post-states. The error includes the
+  expected set, actual state, exit code, and truncated stdout/stderr
+  (1000 chars each) for forensic diagnosis. Catches *any* silent no-op,
+  not just the `PATHEXT` cause.
+- **`src/types.ts`:** `ToolErrorName` extended with `'PostStateMismatch'`.
+- **Tests:** `tests/pathext_env.spec.ts` (5 cases — fill / preserve /
+  case-insensitive / non-Windows passthrough) + `tests/post_state_verify.spec.ts`
+  (4 unit + 2 integration cases proving `claim_review` and `close` throw
+  `PostStateMismatch` when a stub PS verb is a silent no-op).
+- **Examples:** `examples/vscode-mcp.npm.json` + `examples/vscode-mcp.submodule.json`
+  now ship an explicit (optional) `PATHEXT` entry in the `env:` block,
+  self-documenting the dependency.
+- **README + walkthrough:** Windows section documents the SDK quirk,
+  both defense layers, and the optional explicit override.
+
+### Fixed
+- **Codex r3 0e81196 — concurrency-unsafe lock unlink:** Replaced the
+  `clearStaleLock()` helper (which unconditionally `unlink`'d
+  `.agent/.lock` before every mutating PS spawn — and could race a sibling
+  in-flight mutation) with `runMutatingVerbWithLockRetry()`. New behavior:
+  invoke the verb normally; on `lock already held` stderr, back off (100ms,
+  200ms, 400ms; ~700ms total) and retry. If still held, throw a structured
+  `ToolError('LockHeld', ...)` with retry count and stderr; the lock file
+  is NEVER deleted by the helper. `claim_review`, `push_verdict`, `close`
+  all switched to the new helper; `write_verdict` was already safe (its
+  only PS spawn is read-only `validate -As codex`).
+- Regression test `tests/lock_concurrency.spec.ts` plants a fresh
+  `.agent/.lock` with sentinel content and asserts both `claim_review` and
+  `close` throw `LockHeld` AND the lock file is byte-identical afterward.
+- `src/types.ts` `ToolErrorName` extended with `'LockHeld'`.
+- e2e setup-side sequential cleanup in `tests/e2e.spec.ts` (`runPwshSync`)
+  kept as-is per codex r3 guidance — tests are strictly sequential and
+  setup is canonical PS only.
+
+### Spec notes
+- Implements MCP_LITE_v1_PLAN.md Rev 2 from standalone-v1 collab phase `mcp-lite-plan-review-r2` (codex PASS 3b182a6).
+- Does NOT implement Claude-side verbs (`on`, `claim`, `claude-done`); those remain direct PS calls per non-goal §1.
+- Does NOT implement webhook, scheduler, file-watcher, auto-merge; per non-goal §1.
+- Requires `ai-agent-collab-standard` schema_version 2 in the target project.

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 annealessio647-toby
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,157 @@
+# ai-agent-collab-mcp-lite
+
+**MCP Lite v1**: a tiny manual-trigger MCP stdio server that wraps the existing `agent-collab.ps1 + Git + .agent/` collaboration flow so the **codex review side** is end-to-end through MCP without a PowerShell call.
+
+Wraps. Does not replace. Source of truth stays in `.agent/` and GitHub.
+
+## 7 manual-trigger tools
+
+| Tool | Maps to | Side effects |
+|---|---|---|
+| `status` | `agent-collab.ps1 status -Json` | none (or `git fetch` if `fetchFirst`) |
+| `fetch` | `git fetch origin <branch>` + conditional `git pull --ff-only` | remote ref always; local working tree only when branch matches |
+| `read_report` | `fs.readFile(.agent/CLAUDE_REPORT.md)` | none |
+| `claim_review` | `agent-collab.ps1 codex-reviewing` | one atomic git commit + push (lease-safe; never auto-`-Force`) |
+| `write_verdict` | write `.agent/CODEX_VERDICT.md` → `validate -As codex` | local file write only; does NOT commit |
+| `push_verdict` | `validate -As codex` → `codex-pass` / `codex-fail` | one atomic git commit + push |
+| `close` | `agent-collab.ps1 off` | one atomic git commit + push |
+
+Every mutable tool runs the same two guards first: **D-4 schema version check** (`schema_version != 2` → throw) and **D-6 branch guard** (`git symbolic-ref --short HEAD != COLLAB_MODE.branch` → throw, no side effects). See the inline TypeScript types under `src/types.ts` and the design rationale in [`CHANGELOG.md`](CHANGELOG.md).
+
+## Install — VS Code Quick Start
+
+### Option A: npm global install (D-3 primary path)
+
+```powershell
+npm install -g @annealessio647-toby/ai-agent-collab-mcp-lite
+```
+
+Then in your project's `.vscode/mcp.json`:
+
+```json
+{
+  "servers": {
+    "collab-mcp-lite": {
+      "command": "agent-collab-mcp-lite",
+      "args": [],
+      "env": {}
+    }
+  }
+}
+```
+
+### Option B: git submodule (D-3 supported path)
+
+```powershell
+git submodule add https://github.com/annealessio647-toby/ai-agent-collab-mcp-lite.git .agent-mcp-lite
+cd .agent-mcp-lite
+npm install
+npm run build
+```
+
+Then in `.vscode/mcp.json`:
+
+```json
+{
+  "servers": {
+    "collab-mcp-lite": {
+      "command": "node",
+      "args": ["${workspaceFolder}/.agent-mcp-lite/dist/server.js"],
+      "env": {}
+    }
+  }
+}
+```
+
+See `examples/vscode-mcp.npm.json` and `examples/vscode-mcp.submodule.json` for ready-to-copy snippets.
+
+## Windows note — PATHEXT and `git`
+
+The `@modelcontextprotocol/sdk` `StdioClientTransport` on Windows uses a curated env (`DEFAULT_INHERITED_ENV_VARS`) that includes `PATH` but **OMITS `PATHEXT`**. Without `PATHEXT`, a spawned PowerShell cannot resolve extension-less command names (`git`, `npm`, …), and the FROZEN `agent-collab.ps1` dies on its first `git` call with `The term 'git' is not recognized` — but PowerShell's `Write-Error` does NOT set a non-zero exit code by default, so the underlying verb returns "successfully" and disk state is never advanced.
+
+This MCP server defends in two layers:
+
+1. **`src/lib/ps_runner.ts buildPsEnv()`** — when running on Windows, the spawn env is composed so that if the parent `process.env` has no `PATHEXT`, a canonical default (`.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC`) is supplied. Parent-set `PATHEXT` (in any casing) is preserved.
+2. **`src/lib/post_state_verify.ts assertPostState()`** — every mutating tool re-reads `.agent/COLLAB_MODE.yaml` after the PS verb returns and asserts the on-disk state advanced to one of the expected values. If not, the tool throws `PostStateMismatch` with the actual state, exit code, and truncated stdout/stderr so the operator can investigate. This catches *any* silent no-op, not just the `PATHEXT` cause.
+
+If you are a VS Code MCP / Codex CLI MCP user on Windows and want to be extra safe, you can still pass `PATHEXT` explicitly in the server's `env`:
+
+```json
+{
+  "servers": {
+    "collab-mcp-lite": {
+      "command": "agent-collab-mcp-lite",
+      "args": [],
+      "env": {
+        "PATHEXT": ".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC"
+      }
+    }
+  }
+}
+```
+
+This is no longer required (the server compensates internally), but it does no harm and makes the dependency explicit.
+
+## Prerequisites per project
+
+The target project must contain a working `.agent/` directory and a `tools/agent-collab.ps1` stub (or `.agent-collab/tools/agent-collab.ps1` submodule path). See [`ai-agent-collab-standard`](https://github.com/annealessio647-toby/ai-agent-collab-standard) for the upstream protocol.
+
+Specifically:
+- `.agent/COLLAB_MODE.yaml` exists with `schema_version: 2`
+- `.agent/policy.yaml` exists
+- `agent-collab.ps1` is available via the path resolved from `repoPath` parameter on each tool call
+
+## Tool call shape
+
+Every tool call requires `repoPath` (absolute path to the project repo containing `.agent/`). One MCP server instance can drive multiple projects; no global "current repo" state.
+
+```json
+// example: write_verdict
+{
+  "name": "write_verdict",
+  "arguments": {
+    "repoPath": "D:/projects/<project-root>",
+    "verdict": "PASS",
+    "accepted": "...",
+    "requiredChanges": "None.",
+    "risks": "None.",
+    "nextStep": "Run close to advance state.",
+    "expectedBranch": "collab/some-phase"
+  }
+}
+```
+
+## Acceptance test (manual two-machine round-trip)
+
+| Step | Where | Action |
+|---|---|---|
+| 1 | Machine A (Claude, no MCP needed) | `agent-collab.ps1 on -Phase <p>`, `claim -As claude`, fill report, `claude-done` |
+| 2 | Machine B (Codex, **using MCP Lite**) | `status({repoPath})` → `state=waiting_for_codex` |
+| 3 | B | `fetch({repoPath})` → ref-only + ff-pull (local matches) |
+| 4 | B | `read_report({repoPath})` |
+| 5 | B | `claim_review({repoPath})` → state=`codex_reviewing` |
+| 6 | B | `write_verdict({repoPath, verdict, ...})` → validate PASS |
+| 7 | B | `push_verdict({repoPath, verdict})` → commit + push |
+| 8 | A or B | `close({repoPath, reason})` → state=`closed` |
+
+## Versioning + compatibility
+
+- Requires `schema_version: 2` in the target project's `.agent/COLLAB_MODE.yaml`. Otherwise every tool throws `SchemaVersionMismatch`.
+- v0.1.x line supports `ai-agent-collab-standard` v2.0.0 schema. A future v0.2.x may track v3.
+
+## What this is NOT
+
+- Not a webhook receiver.
+- Not a background scheduler.
+- Not an auto-PR-merger.
+- Not a domain-aware service (no KiCad / DRC / firmware / report knowledge).
+- Not a replacement for `agent-collab.ps1` — it shells out to the canonical script.
+
+## License
+
+MIT — see [LICENSE](LICENSE).
+
+## See also
+
+- [`ai-agent-collab-standard`](https://github.com/annealessio647-toby/ai-agent-collab-standard) — upstream protocol + canonical `agent-collab.ps1`
+- `MCP_LITE_v1_PLAN.md` (Rev 2) in `standalone-v1` collab phase `mcp-lite-plan-review-r2` — full spec this repo implements

package/VERSION

@@ -0,0 +1 @@
+0.1.0

package/bin/agent-collab-mcp-lite.js

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+// CLI shim — used by `npm install -g` to expose `agent-collab-mcp-lite`.
+// All work lives in the compiled stdio server.
+import('../dist/server.js').catch((err) => {
+  process.stderr.write(`agent-collab-mcp-lite: failed to load server: ${err}\n`);
+  process.exit(1);
+});

package/dist/lib/branch_guard.d.ts

@@ -0,0 +1,11 @@
+import { CollabMode } from '../types.js';
+export declare function assertBranchGuard(repoPath: string, collab: CollabMode, callerExpectedBranch?: string): Promise<{
+    actual: string;
+    expected: string;
+}>;
+export declare function softBranchCheck(repoPath: string, collab: CollabMode, callerExpectedBranch?: string): Promise<{
+    actual: string;
+    expected: string;
+    matches: boolean;
+}>;
+//# sourceMappingURL=branch_guard.d.ts.map

package/dist/lib/branch_guard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch_guard.d.ts","sourceRoot":"","sources":["../../src/lib/branch_guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAa,MAAM,aAAa,CAAC;AAMpD,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,EAClB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAW/C;AAGD,wBAAsB,eAAe,CACnC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,UAAU,EAClB,oBAAoB,CAAC,EAAE,MAAM,GAC5B,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,CAAC,CAIjE"}

package/dist/lib/branch_guard.js

@@ -0,0 +1,30 @@
+import { ToolError } from '../types.js';
+import { currentBranch } from './git_runner.js';
+// D-6 branch guard. Mutable tools MUST call this before any side effect.
+// Throws BranchMismatch if local checkout differs from expectedBranch (or
+// COLLAB_MODE.branch if expectedBranch is omitted).
+export async function assertBranchGuard(repoPath, collab, callerExpectedBranch) {
+    const expected = resolveExpected(collab, callerExpectedBranch);
+    const actual = await currentBranch(repoPath);
+    if (actual !== expected) {
+        throw new ToolError('BranchMismatch', `expected branch '${expected}', got '${actual || '(detached HEAD)'}'; checkout the collab branch before mutating`, { expected, actual });
+    }
+    return { actual, expected };
+}
+// D-6 soft check. Read-only tools (fetch) use this to populate result.
+export async function softBranchCheck(repoPath, collab, callerExpectedBranch) {
+    const expected = resolveExpected(collab, callerExpectedBranch);
+    const actual = await currentBranch(repoPath);
+    return { actual, expected, matches: actual === expected };
+}
+function resolveExpected(collab, caller) {
+    if (caller && collab.branch && caller !== collab.branch) {
+        throw new ToolError('ToolUsage', `expectedBranch '${caller}' contradicts COLLAB_MODE.branch '${collab.branch}'`, { callerExpectedBranch: caller, collabBranch: collab.branch });
+    }
+    const expected = caller ?? collab.branch;
+    if (!expected) {
+        throw new ToolError('ToolUsage', 'no branch to check: COLLAB_MODE.branch is empty and no expectedBranch supplied');
+    }
+    return expected;
+}
+//# sourceMappingURL=branch_guard.js.map

package/dist/lib/branch_guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"branch_guard.js","sourceRoot":"","sources":["../../src/lib/branch_guard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,SAAS,EAAE,MAAM,aAAa,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,yEAAyE;AACzE,0EAA0E;AAC1E,oDAAoD;AACpD,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,MAAkB,EAClB,oBAA6B;IAE7B,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,SAAS,CACjB,gBAAgB,EAChB,oBAAoB,QAAQ,WAAW,MAAM,IAAI,iBAAiB,+CAA+C,EACjH,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAC9B,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,MAAkB,EAClB,oBAA6B;IAE7B,MAAM,QAAQ,GAAG,eAAe,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,MAAkB,EAAE,MAAe;IAC1D,IAAI,MAAM,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;QACxD,MAAM,IAAI,SAAS,CACjB,WAAW,EACX,mBAAmB,MAAM,qCAAqC,MAAM,CAAC,MAAM,GAAG,EAC9E,EAAE,oBAAoB,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,CAC9D,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC;IACzC,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,SAAS,CACjB,WAAW,EACX,gFAAgF,CACjF,CAAC;IACJ,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/lib/git_runner.d.ts

@@ -0,0 +1,13 @@
+export interface GitResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export declare function runGit(cwd: string, args: string[]): Promise<GitResult>;
+export declare function currentBranch(cwd: string): Promise<string>;
+export declare function aheadBehind(cwd: string, branch: string): Promise<{
+    hasUpstream: boolean;
+    ahead: number;
+    behind: number;
+}>;
+//# sourceMappingURL=git_runner.d.ts.map

package/dist/lib/git_runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git_runner.d.ts","sourceRoot":"","sources":["../../src/lib/git_runner.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAKD,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,CAAC,CAkBtE;AAGD,wBAAsB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAIhE;AAID,wBAAsB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACtE,WAAW,EAAE,OAAO,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC,CAaD"}

package/dist/lib/git_runner.js

@@ -0,0 +1,49 @@
+import { spawn } from 'node:child_process';
+import { ToolError } from '../types.js';
+// Spawn `git` with the given args under `cwd`. Captures all output and the exit
+// code. Never throws on non-zero exit — callers inspect `exitCode`. Throws only
+// on process-spawn failures (e.g., git not installed).
+export function runGit(cwd, args) {
+    return new Promise((resolve, reject) => {
+        const child = spawn('git', args, { cwd, stdio: ['ignore', 'pipe', 'pipe'] });
+        const stdoutChunks = [];
+        const stderrChunks = [];
+        child.stdout.on('data', (c) => stdoutChunks.push(c));
+        child.stderr.on('data', (c) => stderrChunks.push(c));
+        child.on('error', (err) => {
+            reject(new ToolError('IO', `failed to spawn git: ${err.message}`));
+        });
+        child.on('close', (code) => {
+            resolve({
+                exitCode: code ?? -1,
+                stdout: Buffer.concat(stdoutChunks).toString('utf-8'),
+                stderr: Buffer.concat(stderrChunks).toString('utf-8'),
+            });
+        });
+    });
+}
+// Read the current branch name. Returns empty string when detached HEAD.
+export async function currentBranch(cwd) {
+    const r = await runGit(cwd, ['symbolic-ref', '--short', 'HEAD']);
+    if (r.exitCode === 0)
+        return r.stdout.trim();
+    return '';
+}
+// Compare local HEAD against origin/<branch>. Returns ahead/behind counts; if
+// the upstream is unknown both counts are 0 and `hasUpstream: false`.
+export async function aheadBehind(cwd, branch) {
+    const ref = `origin/${branch}`;
+    const exists = await runGit(cwd, ['rev-parse', '--verify', '--quiet', ref]);
+    if (exists.exitCode !== 0) {
+        return { hasUpstream: false, ahead: 0, behind: 0 };
+    }
+    const r = await runGit(cwd, ['rev-list', '--left-right', '--count', `${ref}...HEAD`]);
+    if (r.exitCode !== 0) {
+        return { hasUpstream: false, ahead: 0, behind: 0 };
+    }
+    const m = r.stdout.trim().match(/^(\d+)\s+(\d+)$/);
+    if (!m)
+        return { hasUpstream: true, ahead: 0, behind: 0 };
+    return { hasUpstream: true, behind: parseInt(m[1], 10), ahead: parseInt(m[2], 10) };
+}
+//# sourceMappingURL=git_runner.js.map

package/dist/lib/git_runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git_runner.js","sourceRoot":"","sources":["../../src/lib/git_runner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAQxC,gFAAgF;AAChF,gFAAgF;AAChF,uDAAuD;AACvD,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,IAAc;IAChD,OAAO,IAAI,OAAO,CAAY,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,MAAM,YAAY,GAAa,EAAE,CAAC;QAClC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7D,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,EAAE,wBAAwB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,OAAO,CAAC;gBACN,QAAQ,EAAE,IAAI,IAAI,CAAC,CAAC;gBACpB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;gBACrD,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;aACtD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAW;IAC7C,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,cAAc,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC;IACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;IAC7C,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,8EAA8E;AAC9E,sEAAsE;AACtE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,GAAW,EAAE,MAAc;IAK3D,MAAM,GAAG,GAAG,UAAU,MAAM,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5E,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,MAAM,CAAC,GAAG,EAAE,CAAC,UAAU,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,GAAG,SAAS,CAAC,CAAC,CAAC;IACtF,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAC1D,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC"}

package/dist/lib/lock_retry.d.ts

@@ -0,0 +1,40 @@
+export interface VerbRetryResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+    retries: number;
+}
+/**
+ * Invoke a mutating agent-collab.ps1 verb with concurrency-safe lock-held
+ * retry semantics.
+ *
+ * Why this exists (codex r3 review of `2c661e4`): unconditionally unlinking
+ * `.agent/.lock` before every mutating spawn breaks the script's per-machine
+ * concurrency protection. If a sibling MCP / VS Code / manual PS process is
+ * legitimately mid-mutation, deleting their lock races them and risks
+ * interleaved state writes.
+ *
+ * Strategy:
+ *   1. Invoke the verb. If exit 0, return immediately.
+ *   2. If exit != 0 AND stderr matches "lock already held:", back off briefly
+ *      and retry. The FROZEN script's `finally { Remove-Item .lock }` is the
+ *      release path; on Linux pwsh 7 that unlink occasionally trails the
+ *      child's exit by tens of milliseconds. After ~100-700 ms one of three
+ *      things has happened:
+ *        a) the unlink landed -> next attempt acquires cleanly
+ *        b) a real sibling is still working -> we keep seeing the lock
+ *        c) the script crashed before unlink and left a truly stale file
+ *      Cases (b) and (c) are externally indistinguishable from a single
+ *      machine without consulting other processes; both surface the same
+ *      `LockHeld` error to the caller, who decides how to react (wait, page
+ *      a human, manually clear if confident no sibling exists).
+ *   3. After all retries are exhausted, throw `ToolError('LockHeld', ...)`
+ *      with the retry count and the original stderr/stdout. The lock file
+ *      is NEVER deleted by this helper.
+ *
+ * The FROZEN agent-collab.ps1's `Acquire-Lock` still catches truly concurrent
+ * holders via `[System.IO.File]::Open(...CreateNew...)`. We do not weaken
+ * that guarantee here.
+ */
+export declare function runMutatingVerbWithLockRetry(ps: string, args: string[]): Promise<VerbRetryResult>;
+//# sourceMappingURL=lock_retry.d.ts.map

package/dist/lib/lock_retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock_retry.d.ts","sourceRoot":"","sources":["../../src/lib/lock_retry.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,wBAAsB,4BAA4B,CAChD,EAAE,EAAE,MAAM,EACV,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC,eAAe,CAAC,CA+B1B"}

package/dist/lib/lock_retry.js

@@ -0,0 +1,76 @@
+import { runPsScript } from './ps_runner.js';
+import { ToolError } from '../types.js';
+// Pattern emitted by FROZEN agent-collab.ps1 Acquire-Lock when .agent/.lock
+// already exists. The exact message text:
+//   "lock already held: <path> -- another agent-collab process is running on
+//    this machine; remove file if stale"
+const LOCK_HELD_PATTERN = /lock already held:/i;
+// Backoff schedule for the retry loop. Total worst-case wait = 700 ms.
+// Picked to be:
+//   - long enough to let a sibling PS process's `finally { Remove-Item .lock }`
+//     land its unlink on a slow Linux runner;
+//   - short enough that legitimately-stuck locks surface a structured error
+//     within the same MCP tool invocation rather than hanging.
+const RETRY_DELAYS_MS = [100, 200, 400];
+/**
+ * Invoke a mutating agent-collab.ps1 verb with concurrency-safe lock-held
+ * retry semantics.
+ *
+ * Why this exists (codex r3 review of `2c661e4`): unconditionally unlinking
+ * `.agent/.lock` before every mutating spawn breaks the script's per-machine
+ * concurrency protection. If a sibling MCP / VS Code / manual PS process is
+ * legitimately mid-mutation, deleting their lock races them and risks
+ * interleaved state writes.
+ *
+ * Strategy:
+ *   1. Invoke the verb. If exit 0, return immediately.
+ *   2. If exit != 0 AND stderr matches "lock already held:", back off briefly
+ *      and retry. The FROZEN script's `finally { Remove-Item .lock }` is the
+ *      release path; on Linux pwsh 7 that unlink occasionally trails the
+ *      child's exit by tens of milliseconds. After ~100-700 ms one of three
+ *      things has happened:
+ *        a) the unlink landed -> next attempt acquires cleanly
+ *        b) a real sibling is still working -> we keep seeing the lock
+ *        c) the script crashed before unlink and left a truly stale file
+ *      Cases (b) and (c) are externally indistinguishable from a single
+ *      machine without consulting other processes; both surface the same
+ *      `LockHeld` error to the caller, who decides how to react (wait, page
+ *      a human, manually clear if confident no sibling exists).
+ *   3. After all retries are exhausted, throw `ToolError('LockHeld', ...)`
+ *      with the retry count and the original stderr/stdout. The lock file
+ *      is NEVER deleted by this helper.
+ *
+ * The FROZEN agent-collab.ps1's `Acquire-Lock` still catches truly concurrent
+ * holders via `[System.IO.File]::Open(...CreateNew...)`. We do not weaken
+ * that guarantee here.
+ */
+export async function runMutatingVerbWithLockRetry(ps, args) {
+    let retries = 0;
+    let res = await runPsScript(ps, args);
+    while (res.exitCode !== 0 &&
+        LOCK_HELD_PATTERN.test(res.stderr || '') &&
+        retries < RETRY_DELAYS_MS.length) {
+        await delay(RETRY_DELAYS_MS[retries]);
+        retries += 1;
+        res = await runPsScript(ps, args);
+    }
+    if (res.exitCode !== 0 && LOCK_HELD_PATTERN.test(res.stderr || '')) {
+        throw new ToolError('LockHeld', `agent-collab.ps1 reported lock held after ${retries} retries (${RETRY_DELAYS_MS.slice(0, retries).reduce((a, b) => a + b, 0)} ms). Another agent-collab process may be mid-mutation; inspect .agent/.lock manually before clearing.`, {
+            retries,
+            retryDelaysMs: RETRY_DELAYS_MS,
+            stderr: res.stderr,
+            stdout: res.stdout,
+            exitCode: res.exitCode,
+        });
+    }
+    return {
+        exitCode: res.exitCode,
+        stdout: res.stdout,
+        stderr: res.stderr,
+        retries,
+    };
+}
+function delay(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+//# sourceMappingURL=lock_retry.js.map

package/dist/lib/lock_retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock_retry.js","sourceRoot":"","sources":["../../src/lib/lock_retry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAiB,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,4EAA4E;AAC5E,0CAA0C;AAC1C,6EAA6E;AAC7E,yCAAyC;AACzC,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAEhD,uEAAuE;AACvE,gBAAgB;AAChB,gFAAgF;AAChF,8CAA8C;AAC9C,4EAA4E;AAC5E,+DAA+D;AAC/D,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;AASxC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,EAAU,EACV,IAAc;IAEd,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,IAAI,GAAG,GAAa,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IAChD,OACE,GAAG,CAAC,QAAQ,KAAK,CAAC;QAClB,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;QACxC,OAAO,GAAG,eAAe,CAAC,MAAM,EAChC,CAAC;QACD,MAAM,KAAK,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC;QACtC,OAAO,IAAI,CAAC,CAAC;QACb,GAAG,GAAG,MAAM,WAAW,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,CAAC,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACnE,MAAM,IAAI,SAAS,CACjB,UAAU,EACV,6CAA6C,OAAO,aAAa,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,wGAAwG,EACrO;YACE,OAAO;YACP,aAAa,EAAE,eAAe;YAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,GAAG,CAAC,QAAQ;SACvB,CACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO;KACR,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC"}

package/dist/lib/post_state_verify.d.ts

@@ -0,0 +1,7 @@
+import { CollabState, CollabMode } from '../types.js';
+export declare function assertPostState(repoPath: string, expected: ReadonlyArray<CollabState>, verbDescription: string, context?: {
+    exitCode?: number;
+    stdout?: string;
+    stderr?: string;
+}): CollabMode;
+//# sourceMappingURL=post_state_verify.d.ts.map

package/dist/lib/post_state_verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"post_state_verify.d.ts","sourceRoot":"","sources":["../../src/lib/post_state_verify.ts"],"names":[],"mappings":"AACA,OAAO,EAAa,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAwBjE,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,aAAa,CAAC,WAAW,CAAC,EACpC,eAAe,EAAE,MAAM,EACvB,OAAO,CAAC,EAAE;IACR,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACA,UAAU,CAsBZ"}

package/dist/lib/post_state_verify.js

@@ -0,0 +1,43 @@
+import { readCollabModeOrThrow } from './schema_guard.js';
+import { ToolError } from '../types.js';
+// Post-state verification for mutating tools.
+//
+// Background (mcp-lite-v1-fix-pathext): the FROZEN agent-collab.ps1 calls
+// `git` repeatedly. On a misconfigured Windows host where the spawned
+// PowerShell cannot resolve `git` (the original repro: MCP SDK strips
+// PATHEXT — see ps_runner.ts buildPsEnv), the script's `Write-Error` from
+// the missing `git` does NOT cause a non-zero exit code by default. The
+// MCP tool sees `exitCode: 0` and `stderr: <some PowerShell error spew>`
+// and previously trusted it as "verb succeeded" — but on disk the state
+// machine never advanced. The user then sees a phantom green tool call
+// with no real Git commit and no real state change.
+//
+// This helper closes that hole: after any mutating verb returns exit=0
+// and the lock-retry logic accepts it, we re-read `.agent/COLLAB_MODE.yaml`
+// and assert the on-disk state is one of the values the caller expected.
+// If not, we throw `PostStateMismatch` with both the expected set and the
+// actual observed state so the operator can investigate.
+//
+// `assertPostState` returns the freshly-read CollabMode so callers can
+// reuse the post-state fields (lease_expires_at, owner, etc.) without
+// re-reading the file again themselves.
+export function assertPostState(repoPath, expected, verbDescription, context) {
+    const collab = readCollabModeOrThrow(repoPath);
+    if (!expected.includes(collab.state)) {
+        const head = `${verbDescription} reported success but post-state is '${collab.state}' (expected one of: ${expected.join(', ')})`;
+        const hint = collab.state === 'waiting_for_codex' || collab.state === 'waiting_for_claude' || collab.state === 'idle'
+            ? ' — the FROZEN agent-collab.ps1 likely failed silently (e.g. missing git on PATH inside the spawned PowerShell, see ps_runner buildPsEnv).'
+            : '';
+        throw new ToolError('PostStateMismatch', head + hint, {
+            expected: Array.from(expected),
+            actual: collab.state,
+            phase: collab.phase,
+            owner: collab.owner,
+            verbExitCode: context?.exitCode,
+            verbStdout: context?.stdout?.slice(0, 1000) ?? '',
+            verbStderr: context?.stderr?.slice(0, 1000) ?? '',
+        });
+    }
+    return collab;
+}
+//# sourceMappingURL=post_state_verify.js.map

package/dist/lib/post_state_verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"post_state_verify.js","sourceRoot":"","sources":["../../src/lib/post_state_verify.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,SAAS,EAA2B,MAAM,aAAa,CAAC;AAEjE,8CAA8C;AAC9C,EAAE;AACF,0EAA0E;AAC1E,sEAAsE;AACtE,sEAAsE;AACtE,0EAA0E;AAC1E,wEAAwE;AACxE,yEAAyE;AACzE,wEAAwE;AACxE,uEAAuE;AACvE,oDAAoD;AACpD,EAAE;AACF,uEAAuE;AACvE,4EAA4E;AAC5E,yEAAyE;AACzE,0EAA0E;AAC1E,yDAAyD;AACzD,EAAE;AACF,uEAAuE;AACvE,sEAAsE;AACtE,wCAAwC;AAExC,MAAM,UAAU,eAAe,CAC7B,QAAgB,EAChB,QAAoC,EACpC,eAAuB,EACvB,OAIC;IAED,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,GAAG,eAAe,wCAAwC,MAAM,CAAC,KAAK,uBAAuB,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;QACjI,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,KAAK,mBAAmB,IAAI,MAAM,CAAC,KAAK,KAAK,oBAAoB,IAAI,MAAM,CAAC,KAAK,KAAK,MAAM;YACnH,CAAC,CAAC,2IAA2I;YAC7I,CAAC,CAAC,EAAE,CAAC;QACP,MAAM,IAAI,SAAS,CACjB,mBAAmB,EACnB,IAAI,GAAG,IAAI,EACX;YACE,QAAQ,EAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC;YAC9B,MAAM,EAAE,MAAM,CAAC,KAAK;YACpB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,YAAY,EAAE,OAAO,EAAE,QAAQ;YAC/B,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE;YACjD,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE;SAClD,CACF,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/ps_runner.d.ts

@@ -0,0 +1,8 @@
+export interface PsResult {
+    exitCode: number;
+    stdout: string;
+    stderr: string;
+}
+export declare function buildPsEnv(parentEnv?: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+export declare function runPsScript(scriptPath: string, scriptArgs: string[], cwd?: string): Promise<PsResult>;
+//# sourceMappingURL=ps_runner.d.ts.map

package/dist/lib/ps_runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ps_runner.d.ts","sourceRoot":"","sources":["../../src/lib/ps_runner.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,QAAQ;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;CAChB;AAmCD,wBAAgB,UAAU,CACxB,SAAS,GAAE,MAAM,CAAC,UAAwB,GACzC,MAAM,CAAC,UAAU,CAgBnB;AAOD,wBAAgB,WAAW,CACzB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAAE,EACpB,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,QAAQ,CAAC,CAYnB"}