@theronap/agnoclast-mcp 0.9.244 → 0.9.246

package/lib/capture.mjs

@@ -72,7 +72,7 @@ export function repoFullNameFrom(cwd) {
   if (!cwd) return null
   try {
     const url = execFileSync('git', ['-C', String(cwd), 'config', '--get', 'remote.origin.url'], {
-      encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'],
+      encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true,
     })
     return githubFullName(url)
   } catch {
@@ -108,7 +108,7 @@ export function workingFilesFrom(cwd, max = 40) {
   const run = (args) => {
     try {
       return execFileSync('git', ['-C', String(cwd), ...args], {
-        encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'],
+        encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true,
       }).split('\n').map((l) => l.trim()).filter(Boolean)
     } catch {
       return []
@@ -316,12 +316,16 @@ function captureLogFd() {
 // feed it the hook payload on its stdin. Returns true if the child was launched (parent may return
 // immediately), false if spawning failed (caller then does the work in-band). The child sees
 // CORTEX_CAPTURE_DETACHED=1 so it runs captureWork() directly instead of forking again.
+// ⚠ WINDOWS: `detached` there means DETACHED_PROCESS — this worker has NO console, so every console
+// program it starts (`claude --print`, `git`) would get a brand-new, visible Windows Terminal window
+// titled with its path. Every spawn in this package passes windowsHide (windows_hide.test.mjs).
 function spawnDetachedWorker(stdinRaw) {
   try {
     const bin = join(dirname(fileURLToPath(import.meta.url)), '..', 'bin', 'cortex-mcp.mjs')
     const child = spawn(process.execPath, [bin, 'capture'], {
       env: { ...process.env, CORTEX_CAPTURE_DETACHED: '1' },
       detached: true,
+      windowsHide: true,
       stdio: ['pipe', captureLogFd(), captureLogFd()],
     })
     child.on('error', () => {}) // never let an async spawn error crash the hook

package/lib/code_graph_cli.mjs

@@ -14,7 +14,7 @@ function graphPath(cwd) {
 }
 
 function hasGraphifyBinary() {
-  const r = spawnSync('graphify', ['--version'], { encoding: 'utf8', timeout: 10_000 })
+  const r = spawnSync('graphify', ['--version'], { encoding: 'utf8', timeout: 10_000, windowsHide: true })
   return !r.error && r.status === 0
 }
 
@@ -50,7 +50,7 @@ export function runCodeGraphQuery({ action, question, from, to, node }, cwd = pr
   const built = buildArgs({ action, question, from, to, node })
   if (built.error) return { ok: false, text: built.error }
 
-  const r = spawnSync('graphify', built.args, { cwd, encoding: 'utf8', timeout: 60_000, maxBuffer: 4 * 1024 * 1024 })
+  const r = spawnSync('graphify', built.args, { cwd, encoding: 'utf8', timeout: 60_000, maxBuffer: 4 * 1024 * 1024, windowsHide: true })
   if (r.error) return { ok: false, text: `graphify failed to run: ${r.error.message}` }
   const out = (r.stdout || '').trim()
   const err = (r.stderr || '').trim()

package/lib/edge_extract.mjs

@@ -496,7 +496,7 @@ export function extractSession(transcript, opts = {}) {
     const r = spawnSync(
       'claude',
       ['--print', '--model', process.env.CORTEX_SUMMARY_MODEL ?? 'claude-haiku-4-5'],
-      { input: prompt, env: edgeSafeEnv(process.env, { CORTEX_SUMMARIZING: '1' }), encoding: 'utf8', timeout: timeoutMs, maxBuffer: 4 * 1024 * 1024 },
+      { input: prompt, env: edgeSafeEnv(process.env, { CORTEX_SUMMARIZING: '1' }), encoding: 'utf8', timeout: timeoutMs, maxBuffer: 4 * 1024 * 1024, windowsHide: true },
     )
     const why = classifyEdgeFailure(r, timeoutMs)
     if (why) return edgeSkip(why.reason, why.detail)

package/lib/extract_typed.mjs

@@ -42,7 +42,7 @@ export function extractTyped(transcript, registry, opts = {}) {
     const r = spawnSync(
       'claude',
       ['--print', '--model', opts.model ?? process.env.CORTEX_SUMMARY_MODEL ?? 'claude-haiku-4-5', prompt],
-      { env: edgeSafeEnv(process.env, { CORTEX_SUMMARIZING: '1' }), encoding: 'utf8', timeout: 120_000, maxBuffer: 8 * 1024 * 1024 },
+      { env: edgeSafeEnv(process.env, { CORTEX_SUMMARIZING: '1' }), encoding: 'utf8', timeout: 120_000, maxBuffer: 8 * 1024 * 1024, windowsHide: true },
     )
     if (r.status !== 0 || !r.stdout) return null
     return parseTyped(r.stdout)

package/lib/graphify_sync.mjs

@@ -15,7 +15,7 @@ import { fetchCortex, classify, resolveBase, resolveEnvToken } from './diagnose.
 // job just reads whatever the tree looks like at that moment, no hook into git operations at all.
 
 function run(cmd, args, cwd) {
-  const r = spawnSync(cmd, args, { cwd, encoding: 'utf8', timeout: 120_000 })
+  const r = spawnSync(cmd, args, { cwd, encoding: 'utf8', timeout: 120_000, windowsHide: true })
   return r.status === 0 ? (r.stdout || '').trim() : null
 }
 
@@ -78,7 +78,7 @@ export async function runGraphifySync(argv = []) {
     return 1
   }
 
-  const update = spawnSync('graphify', ['update', '.'], { cwd, encoding: 'utf8', timeout: 300_000, maxBuffer: 8 * 1024 * 1024 })
+  const update = spawnSync('graphify', ['update', '.'], { cwd, encoding: 'utf8', timeout: 300_000, maxBuffer: 8 * 1024 * 1024, windowsHide: true })
   if (update.status !== 0) {
     process.stderr.write(`cortex-mcp graphify-sync: \`graphify update\` failed:\n${(update.stderr || update.stdout || '').trim()}\n`)
     return 1

package/lib/login.mjs

@@ -27,7 +27,7 @@ function openBrowser(url) {
     process.platform === 'darwin' ? 'open' : process.platform === 'win32' ? 'cmd' : 'xdg-open'
   const args = process.platform === 'win32' ? ['/c', 'start', '""', url] : [url]
   try {
-    const child = spawn(cmd, args, { stdio: 'ignore', detached: true })
+    const child = spawn(cmd, args, { stdio: 'ignore', detached: true, windowsHide: true })
     // If the browser cannot be launched we still printed the URL, so this is genuinely non-fatal.
     child.on('error', () => {})
     child.unref()

package/lib/obligation_review.mjs

@@ -144,6 +144,7 @@ function runClaude(prompt, model) {
     encoding: 'utf8',
     timeout: REVIEW_TIMEOUT_MS,
     maxBuffer: 1024 * 1024,
+    windowsHide: true,
   })
 }
 

package/lib/obligations_worker.mjs

@@ -244,6 +244,7 @@ export function spawnObligationWorker(job) {
     const child = spawn(process.execPath, [bin, 'extract-obligations'], {
       env: { ...process.env },
       detached: true,
+      windowsHide: true,
       stdio: ['pipe', fd, fd],
     })
     child.on('error', () => {})

package/lib/server.mjs

@@ -5057,6 +5057,53 @@ function renderNudge(payload) {
     },
   )
 
+  // share_page — a read-only link to one wiki page (ADR-0090; Theron, 2026-10-19). Same shape as share_record:
+  // NOT auto-allowed (a disclosure, so it prompts), and only when the person asks. Never a confidential page.
+  server.registerTool(
+    'share_page',
+    {
+      title: 'Make a share link for a wiki page',
+      description:
+        'Make a read-only link (agnoclast.com/p/…) to ONE wiki page, for anyone — including people outside Agnoclast. ' +
+        'They see the page as it is when they open it: its title and sections; links to other pages show as plain text, ' +
+        'and nothing else in the brain is shared. Signed-in viewers can save their own copy; others can join free. ' +
+        'Allowed for a page you own, or an accessible page you can edit; never a confidential page. Name the page by ' +
+        'node kind + ref (what read_page shows), optionally its tier. The link is shown ONCE — give it to the person ' +
+        'straight away. Only when the person asks to share; never on your own initiative.',
+      inputSchema: {
+        kind: z.string().describe('the page node kind (project, person, org, user, …)'),
+        ref: z.string().describe('the page node ref (uuid)'),
+        tier: z.enum(['accessible', 'scoped', 'reports', 'peers', 'down']).optional().describe('which version, when the node has several'),
+        label: z.string().max(80).optional().describe('a label only you see'),
+        expires_in_days: z.number().int().min(1).max(3650).optional().describe('how long the link works; default: no expiry'),
+      },
+    },
+    async ({ kind, ref, tier, label, expires_in_days }) => {
+      let res
+      try {
+        res = await fetchCortex(`${BASE}/api/brain/page-shares`, {
+          method: 'POST',
+          headers: { Authorization: `Bearer ${TOKEN}`, 'Content-Type': 'application/json' },
+          body: JSON.stringify({ kind, ref, ...(tier ? { tier } : {}), ...(label ? { label } : {}), ...(expires_in_days ? { expiresInDays: expires_in_days } : {}) }),
+        })
+      } catch (e) {
+        return toolError(`Could not make a share link: ${e.message}`)
+      }
+      if ([403, 404, 409].includes(res.status)) {
+        const b = await res.json().catch(() => null)
+        return toolError(`Not shared: ${b?.detail ?? b?.error ?? 'refused'}`)
+      }
+      if (!res.ok) {
+        const d = classify(res.status, res.headers.get('content-type'), await res.text(), res.headers.get('x-vercel-id'))
+        return toolError(`Could not make a share link: ${d.message}`)
+      }
+      const out = await res.json()
+      return { content: [{ type: 'text', text:
+        `Share link for the page "${out.title}":\n${out.url}\n` +
+        `Read-only, live (they see the page as it is when they open it). This link is shown only once. share id: ${out.share.id}` }] }
+    },
+  )
+
   // set_record_notes — write the NOTES layer of one of your own transcripts (Theron, 2026-10-08: "two
   // layers … a summary and notes from the transcript … the full transcript"). The server keeps the
   // before-state in record history and refuses anything that is not your own kept transcript.

package/lib/uninstall.mjs

@@ -221,17 +221,17 @@ export function stripCodexCortexTables(text) {
 }
 
 function safeReaddir(dir) {
-  try { return execFileSync('ls', ['-1', dir], { encoding: 'utf8' }).split('\n').filter(Boolean) } catch { return [] }
+  try { return execFileSync('ls', ['-1', dir], { encoding: 'utf8', windowsHide: true }).split('\n').filter(Boolean) } catch { return [] }
 }
 function npxCacheDirs() {
   const base = join(HOME, '.npm', '_npx')
   const out = []
   for (const d of safeReaddir(base)) {
     const dir = join(base, d)
-    try { if (execFileSync('grep', ['-rlE', '@theronap/(cortex|agnoclast)-mcp', join(dir, 'package.json')], { encoding: 'utf8' }).trim()) out.push(dir) } catch { /* not one of ours */ }
+    try { if (execFileSync('grep', ['-rlE', '@theronap/(cortex|agnoclast)-mcp', join(dir, 'package.json')], { encoding: 'utf8', windowsHide: true }).trim()) out.push(dir) } catch { /* not one of ours */ }
   }
   return out
 }
-function tryExec(cmd, args) { try { execFileSync(cmd, args, { stdio: 'ignore' }) } catch { /* best-effort */ } }
-function tryExecOut(cmd, args) { try { return execFileSync(cmd, args, { encoding: 'utf8' }) } catch { return null } }
-function tryExecIn(cmd, args, input) { try { execFileSync(cmd, args, { input }) } catch { /* best-effort */ } }
+function tryExec(cmd, args) { try { execFileSync(cmd, args, { stdio: 'ignore', windowsHide: true }) } catch { /* best-effort */ } }
+function tryExecOut(cmd, args) { try { return execFileSync(cmd, args, { encoding: 'utf8', windowsHide: true }) } catch { return null } }
+function tryExecIn(cmd, args, input) { try { execFileSync(cmd, args, { input, windowsHide: true }) } catch { /* best-effort */ } }

package/lib/working_files.mjs

@@ -383,7 +383,7 @@ export function findTranscript(sessionId, projectsDir = join(homedir(), '.claude
 function gitRoot(dir) {
   try {
     return execFileSync('git', ['-C', dir, 'rev-parse', '--show-toplevel'], {
-      encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'],
+      encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'], windowsHide: true,
     }).trim() || null
   } catch {
     return null

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@theronap/agnoclast-mcp",
-  "version": "0.9.244",
+  "version": "0.9.246",
   "description": "Connect your AI assistant to Cortex — your org's projects, activity, gaps, and directives, scoped to you.",
   "type": "module",
   "bin": {