forge-workflow 0.0.6 → 0.0.7

package/opencode.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "permission": {
+    "*": "ask",
+    "bash": {
+      "*": "ask",
+      "git status *": "allow",
+      "git log *": "allow",
+      "git diff *": "allow",
+      "git branch *": "allow",
+      "git show *": "allow",
+      "git remote *": "allow",
+      "git stash *": "allow",
+      "git tag *": "allow",
+      "git rev-parse *": "allow",
+      "git describe *": "allow",
+      "git ls-files *": "allow",
+      "git blame *": "allow",
+      "git shortlog *": "allow",
+      "git add *": "allow",
+      "git commit *": "allow",
+      "git push *": "allow",
+      "git checkout *": "allow",
+      "git switch *": "allow",
+      "git merge *": "allow",
+      "git rebase *": "ask",
+      "git cherry-pick *": "allow",
+      "bd *": "allow",
+      "gh *": "allow",
+      "ls *": "allow",
+      "cat *": "allow",
+      "grep *": "allow",
+      "find *": "allow",
+      "pwd *": "allow",
+      "which *": "allow",
+      "echo *": "allow",
+      "head *": "allow",
+      "tail *": "allow",
+      "sort *": "allow",
+      "wc *": "allow",
+      "awk *": "allow",
+      "sed *": "allow",
+      "stat *": "allow",
+      "du *": "allow",
+      "df *": "allow",
+      "file *": "allow",
+      "mkdir *": "allow",
+      "touch *": "allow",
+      "cp *": "allow",
+      "mv *": "allow",
+      "bun *": "allow",
+      "bunx *": "allow",
+      "npm *": "allow",
+      "npx *": "allow",
+      "node *": "allow",
+
+      "git worktree *": "allow",
+      "git reset --hard *": "ask",
+      "rm -rf *": "deny",
+      "git push --force *": "deny",
+      "git push -f *": "deny"
+    },
+    "edit": {
+      "*": "allow"
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "forge-workflow",
-  "version": "0.0.6",
+  "version": "0.0.7",
   "description": "7-stage TDD workflow for ALL AI coding agents (Claude, Cursor, Cline, OpenCode, Copilot, Kilo Code, Roo Code, Codex)",
   "bin": {
     "forge": "bin/forge.js",
@@ -43,8 +43,8 @@
     "eslint": "^10.0.2",
     "globals": "^17.3.0",
     "js-yaml": "^4.1.1",
-    "lefthook": "^1.10.1",
-    "yaml": "^2.8.2"
+    "lefthook": "^2.1.4",
+    "yaml": "^2.8.3"
   },
   "keywords": [
     "ai",
@@ -81,11 +81,17 @@
     ".claude/scripts/",
     ".claude/skills/",
     ".cursor/",
+    "!.cursor/node_modules/",
     ".cline/",
+    "!.cline/node_modules/",
     ".roo/",
+    "!.roo/node_modules/",
     ".codex/",
+    "!.codex/node_modules/",
     ".kilocode/",
+    "!.kilocode/node_modules/",
     ".opencode/",
+    "!.opencode/node_modules/",
     "scripts/",
     ".github/prompts/",
     ".github/PLUGIN_TEMPLATE.json",
@@ -97,7 +103,9 @@
     "lefthook.yml",
     "AGENTS.md",
     "CLAUDE.md",
-    ".mcp.json.example"
+    ".mcp.json.example",
+    ".cursorrules",
+    "opencode.json"
   ],
   "dependencies": {
     "@babel/parser": "^7.29.2",
@@ -106,7 +114,9 @@
   "overrides": {
     "eslint": "^10.0.2",
     "flatted": "3.4.2",
-    "minimatch": "10.2.4"
+    "minimatch": "10.2.4",
+    "brace-expansion": "5.0.5",
+    "lodash": "4.18.1"
   },
   "c8": {
     "lines": 80,

package/scripts/beads-context.sh

@@ -7,7 +7,7 @@
 #   set-acceptance   <issue-id> "<criteria-text>"
 #   update-progress  <issue-id> <task-num> <total> "<title>" <commit-sha> <test-count> <gate-count>
 #   parse-progress   <issue-id>
-#   stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."]
+#   stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."] [--workflow-state "{...}"]
 #   validate         <issue-id>
 #
 # Cross-platform: works on Windows (Git Bash), macOS, and Linux.
@@ -30,7 +30,7 @@ Subcommands:
   set-acceptance   <issue-id> "<criteria-text>"
   update-progress  <issue-id> <task-num> <total> "<title>" <commit-sha> <test-count> <gate-count>
   parse-progress   <issue-id>
-  stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."]
+  stage-transition <issue-id> <completed-stage> <next-stage> [--summary "..."] [--decisions "..."] [--artifacts "..."] [--next "..."] [--workflow-state "{...}"]
   validate         <issue-id>
 EOF
   exit 1
@@ -238,7 +238,7 @@ cmd_parse_progress() {
 
 cmd_stage_transition() {
   if [[ $# -lt 3 ]]; then
-    echo "Usage: beads-context.sh stage-transition <issue-id> <completed-stage> <next-stage> [--summary \"...\"] [--decisions \"...\"] [--artifacts \"...\"] [--next \"...\"]" >&2
+    echo "Usage: beads-context.sh stage-transition <issue-id> <completed-stage> <next-stage> [--summary \"...\"] [--decisions \"...\"] [--artifacts \"...\"] [--next \"...\"] [--workflow-state \"{...}\"]" >&2
     exit 1
   fi
 
@@ -250,7 +250,7 @@ cmd_stage_transition() {
   shift 3
 
   # Parse optional flags
-  local flag_summary="" flag_decisions="" flag_artifacts="" flag_next=""
+  local flag_summary="" flag_decisions="" flag_artifacts="" flag_next="" flag_workflow_state=""
   while [[ $# -gt 0 ]]; do
     case "$1" in
       --summary)
@@ -269,6 +269,10 @@ cmd_stage_transition() {
         shift
         flag_next="$(sanitize "${1:-}")"
         ;;
+      --workflow-state)
+        shift
+        flag_workflow_state="$(sanitize_config_value "${1:-}")"
+        ;;
       *)
         # Ignore unknown flags for forward compatibility
         ;;
@@ -296,6 +300,10 @@ Artifacts: ${flag_artifacts}"
     comment="${comment}
 Next: ${flag_next}"
   fi
+  if [[ -n "$flag_workflow_state" ]]; then
+    comment="${comment}
+WorkflowState: ${flag_workflow_state}"
+  fi
 
   if ! bd_comment "$issue_id" "$comment" > /dev/null; then
     die "Failed to record stage transition on issue ${issue_id}"

package/scripts/check-agents.js

@@ -19,8 +19,110 @@
  */
 
 const { syncCommands } = require('./sync-commands');
+const { AGENT_ADAPTERS } = require('./sync-commands');
 const path = require('path');
 const fs = require('fs');
+const { validatePluginSchema } = require('../lib/plugin-manager');
+
+const SYNC_ADAPTER_BY_PLUGIN_ID = Object.freeze({
+  claude: 'claude-code',
+  cline: 'cline',
+  codex: 'codex',
+  copilot: 'github-copilot',
+  cursor: 'cursor',
+  kilocode: 'kilo-code',
+  opencode: 'opencode',
+  roo: 'roo-code',
+});
+
+function normalizeRelativeDir(dir) {
+  if (!dir) return null;
+  return String(dir).replace(/\\/g, '/').replace(/\/+$/, '');
+}
+
+function getDeclaredCommandDir(plugin) {
+  const dirs = plugin.directories || {};
+  return dirs.commands || dirs.workflows || dirs.prompts || dirs.skills || null;
+}
+
+function getExpectedCommandDir(plugin) {
+  const adapterId = SYNC_ADAPTER_BY_PLUGIN_ID[plugin.id];
+  if (!adapterId) {
+    return null;
+  }
+
+  const adapter = AGENT_ADAPTERS[adapterId];
+  if (!adapter) {
+    return null;
+  }
+
+  if (plugin.id === 'codex') {
+    return normalizeRelativeDir(plugin.directories?.skills || adapter.baseDir);
+  }
+
+  return normalizeRelativeDir(adapter.baseDir);
+}
+
+function validatePluginParity(plugin, errors) {
+  const validation = validatePluginSchema(plugin);
+  if (!validation.valid) {
+    const parityErrors = validation.errors.filter((error) =>
+      error.startsWith('"support') || error.startsWith('"capabilities')
+    );
+    parityErrors.forEach((error) => {
+      errors.push(`Plugin "${plugin.name || plugin.id}" (${plugin.id || 'unknown'}): ${error}`);
+    });
+  }
+
+  const capabilities = plugin.capabilities || {};
+  const dirs = plugin.directories || {};
+  const supportStatus = plugin.support?.status;
+
+  if (capabilities.commands) {
+    const expectedDir = getExpectedCommandDir(plugin);
+    const declaredDir = normalizeRelativeDir(getDeclaredCommandDir(plugin));
+
+    if (!expectedDir) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) declares commands support but has no Forge sync adapter.`
+      );
+    } else if (!declaredDir) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) declares commands support but has no command directory configured.`
+      );
+    } else if (declaredDir !== expectedDir) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) command directory "${declaredDir}" does not match sync output "${expectedDir}".`
+      );
+    }
+  }
+
+  if (capabilities.rules && !dirs.rules) {
+    errors.push(
+      `Plugin "${plugin.name}" (${plugin.id}) declares rules capability but has no scaffold path configured.`
+    );
+  }
+
+  if (capabilities.skills && !dirs.skills) {
+    errors.push(
+      `Plugin "${plugin.name}" (${plugin.id}) declares skills capability but has no scaffold path configured.`
+    );
+  }
+
+  if (supportStatus === 'deprecated' || supportStatus === 'unsupported') {
+    if (capabilities.skills) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) is ${supportStatus} but still declares skills parity.`
+      );
+    }
+
+    if (plugin.setup?.createSkill || dirs.skills) {
+      errors.push(
+        `Plugin "${plugin.name}" (${plugin.id}) is ${supportStatus} but still scaffolds Forge skills.`
+      );
+    }
+  }
+}
 
 /**
  * Validate all agent configs are complete and in sync.
@@ -89,6 +191,7 @@ function checkAgents(repoRoot) {
       try {
         const plugin = JSON.parse(fs.readFileSync(path.join(pluginDir, file), 'utf8'));
         plugins.push(plugin);
+        validatePluginParity(plugin, errors);
       } catch (_err) {
         errors.push(`Failed to parse plugin file: lib/agents/${file}`);
       }

package/scripts/pr-coordinator.sh

@@ -563,9 +563,54 @@ cmd_auto_label() {
     echo "No label changes needed for PR #$pr_number"
   fi
 }
+collect_worktree_entries() {
+  local git_cmd porcelain current_path current_branch entries line separator
+  entries=""
+  current_path=""
+  current_branch=""
+  separator=$'\t'
+  git_cmd="${GIT_CMD:-git}"
+  porcelain="$("$git_cmd" worktree list --porcelain 2>/dev/null || true)"
+
+  while IFS= read -r line; do
+    case "$line" in
+      worktree\ *)
+        current_path="${line#worktree }"
+        ;;
+      branch\ refs/heads/*)
+        current_branch="${line#branch refs/heads/}"
+        ;;
+      "")
+        if [[ -n "$current_path" ]]; then
+          if [[ -n "$entries" ]]; then
+            entries+=$'\n'
+          fi
+          entries+="${current_path}${separator}${current_branch}"
+        fi
+        current_path=""
+        current_branch=""
+        ;;
+    esac
+  done <<EOF
+$porcelain
+
+EOF
+
+  if [[ -n "$current_path" ]]; then
+    if [[ -n "$entries" ]]; then
+      entries+=$'\n'
+    fi
+    entries+="${current_path}${separator}${current_branch}"
+  fi
+
+  printf '%s' "$entries"
+}
+
 cmd_stale_worktrees() {
   local threshold_hours=48
-  local worktrees_dir=".worktrees"
+  local worktree_filter=""
+  local git_cmd
+  git_cmd="${GIT_CMD:-git}"
 
   while [[ $# -gt 0 ]]; do
     case "$1" in
@@ -578,17 +623,19 @@ cmd_stale_worktrees() {
           return 1
         fi
         shift ;;
-      --dir=*) worktrees_dir="${1#--dir=}"; shift ;;
+      --dir=*) worktree_filter="${1#--dir=}"; shift ;;
       *) echo "Error: unknown flag '$1'" >&2; return 1 ;;
     esac
   done
 
   local repo_root
-  repo_root="$(git rev-parse --show-toplevel 2>/dev/null)" || repo_root="."
-  local wt_path="$repo_root/$worktrees_dir"
+  repo_root="$("$git_cmd" rev-parse --show-toplevel 2>/dev/null)" || repo_root="."
+
+  local worktree_entries
+  worktree_entries="$(collect_worktree_entries)"
 
-  if [[ ! -d "$wt_path" ]]; then
-    echo "No worktrees found (directory $worktrees_dir does not exist)"
+  if [[ -z "$worktree_entries" ]]; then
+    echo "No worktrees found"
     return 0
   fi
 
@@ -596,28 +643,29 @@ cmd_stale_worktrees() {
   local found_any=0
   local stale_count=0
 
-  for entry in "$wt_path"/*/; do
-    [[ -d "$entry" ]] || continue
-    found_any=1
+  while IFS=$'\t' read -r entry_path entry_branch; do
+    [[ -n "$entry_path" ]] || continue
 
-    # Resolve real path and verify it's under repo root
-    local real_path
-    real_path="$(realpath "$entry" 2>/dev/null)" || continue
-    local real_root
-    real_root="$(realpath "$repo_root" 2>/dev/null)" || continue
+    if [[ "$entry_path" == "$repo_root" ]]; then
+      continue
+    fi
 
-    if [[ "$real_path" != "$real_root/"* ]]; then
-      echo "WARNING: skipping symlink outside repo: $entry" >&2
+    if [[ -n "$worktree_filter" ]] && [[ "$entry_path" != *"$worktree_filter"* ]]; then
       continue
     fi
 
+    found_any=1
+
     # Get last commit date
     local last_commit_date
-    last_commit_date="$(git -C "$entry" log -1 --format=%ci 2>/dev/null)" || continue
+    last_commit_date="$("$git_cmd" -C "$entry_path" log -1 --format=%ci 2>/dev/null)" || continue
 
     # Get branch name
-    local branch_name
-    branch_name="$(git -C "$entry" branch --show-current 2>/dev/null)" || branch_name="unknown"
+    local branch_name="${entry_branch:-}"
+    if [[ -z "$branch_name" ]]; then
+      branch_name="$("$git_cmd" -C "$entry_path" branch --show-current 2>/dev/null)" || branch_name="unknown"
+    fi
+    branch_name="${branch_name:-unknown}"
 
     # Calculate age in hours
     local last_epoch now_epoch
@@ -628,10 +676,12 @@ cmd_stale_worktrees() {
     if [[ "$age_hours" -ge "$threshold_hours" ]]; then
       stale_count=$((stale_count + 1))
       local dir_name
-      dir_name="$(basename "$entry")"
+      dir_name="$(basename "$entry_path")"
       echo "STALE: $dir_name (branch: $branch_name, last commit: ${age_hours}h ago)"
     fi
-  done
+  done <<EOF
+$worktree_entries
+EOF
 
   if [[ "$found_any" -eq 0 ]]; then
     echo "No worktrees found"

package/scripts/smart-status.sh

@@ -20,8 +20,24 @@
 
 set -euo pipefail
 
+# ── Source cross-dev awareness scripts ────────────────────────────────
+# file-index.sh: file_index_read for reading file index entries
+# sync-utils.sh: get_session_identity for current developer identity
+
+_SMART_STATUS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+if [ -f "$_SMART_STATUS_DIR/lib/sanitize.sh" ]; then
+  source "$_SMART_STATUS_DIR/lib/sanitize.sh"
+fi
+if [ -f "$_SMART_STATUS_DIR/file-index.sh" ]; then
+  source "$_SMART_STATUS_DIR/file-index.sh"
+fi
+if [ -f "$_SMART_STATUS_DIR/sync-utils.sh" ]; then
+  source "$_SMART_STATUS_DIR/sync-utils.sh"
+fi
+
 # ── Helpers ──────────────────────────────────────────────────────────────
 
+if ! declare -F sanitize >/dev/null; then
 # Sanitize a string: strip shell-injection patterns (OWASP A03)
 # Removes: double quotes, $(...), backticks, semicolons, and newlines
 sanitize() {
@@ -38,17 +54,6 @@ sanitize() {
   val="$(printf '%s' "$val" | tr '\n' ' ')"
   printf '%s' "$val"
 }
-
-# ── Source cross-dev awareness scripts ────────────────────────────────
-# file-index.sh: file_index_read for reading file index entries
-# sync-utils.sh: get_session_identity for current developer identity
-
-_SMART_STATUS_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-if [ -f "$_SMART_STATUS_DIR/file-index.sh" ]; then
-  source "$_SMART_STATUS_DIR/file-index.sh"
-fi
-if [ -f "$_SMART_STATUS_DIR/sync-utils.sh" ]; then
-  source "$_SMART_STATUS_DIR/sync-utils.sh"
 fi
 
 # ── Dependency check ────────────────────────────────────────────────────
@@ -117,6 +122,11 @@ done
 # not found" error, runs bd init --force + bd backup restore, then retries.
 # Capture stderr into variable (2>&1 redirects stderr to stdout for capture,
 # then >/dev/null discards original stdout so only errors remain).
+if ! command -v "$BD" >/dev/null 2>&1; then
+  echo "Error: bd is required but not found." >&2
+  exit 1
+fi
+
 _bd_list_err="$("$BD" list --json --limit 0 2>&1 >/dev/null || true)"
 if printf '%s' "$_bd_list_err" | grep -qi "database.*not found"; then
   # Derive prefix from repo root directory name (not pwd, which could be a subdirectory)

package/scripts/sync-commands.js

@@ -12,6 +12,10 @@
  */
 
 const YAML = require('yaml');
+const fs = require('fs');
+const path = require('path');
+const crypto = require('crypto');
+const { listCodexSkillEntries } = require('../lib/codex-skills');
 
 /**
  * Parse YAML frontmatter from a markdown string.
@@ -293,9 +297,14 @@ function adaptForAgent(agentName, frontmatter, body, commandName) {
 
 // ---- Sync logic -----------------------------------------------------------------
 
-const fs = require('fs');
-const path = require('path');
-const crypto = require('crypto');
+function resolveCanonicalCommandsDir(repoRoot) {
+  const candidates = [
+    path.join(repoRoot, 'commands'),
+    path.join(repoRoot, '.claude', 'commands'),
+  ];
+
+  return candidates.find(candidate => fs.existsSync(candidate)) || null;
+}
 
 /**
  * Compute a content hash for change detection.
@@ -310,6 +319,25 @@ function contentHash(content) {
   return crypto.createHash('sha256').update(normalized).digest('hex');
 }
 
+/**
+ * Write the sync manifest for generated entries without rewriting command files.
+ *
+ * @param {string} repoRoot
+ * @param {SyncEntry[]} entries
+ */
+function writeSyncManifest(repoRoot, entries) {
+  const manifestDir = path.join(repoRoot, '.forge');
+  fs.mkdirSync(manifestDir, { recursive: true });
+  const manifestData = {
+    generatedAt: new Date().toISOString(),
+    files: entries.map((e) => path.relative(repoRoot, e.filePath).replace(/\\/g, '/')),
+  };
+  fs.writeFileSync(
+    path.join(manifestDir, 'sync-manifest.json'),
+    JSON.stringify(manifestData, null, 2) + '\n'
+  );
+}
+
 /**
  * @typedef {Object} SyncEntry
  * @property {string} agent - Agent slug
@@ -339,11 +367,11 @@ function contentHash(content) {
  * - `check: true` — compares generated content with existing files, reports mismatches
  * - default (both false) — writes files, creating directories as needed
  *
- * @param {{ dryRun: boolean, check: boolean, repoRoot: string }} options
+ * @param {{ dryRun: boolean, check: boolean, repoRoot: string, canonicalDir?: string | null }} options
  * @returns {SyncResult}
  */
-function syncCommands({ dryRun, check, repoRoot }) {
-  const commandsDir = path.join(repoRoot, '.claude', 'commands');
+function syncCommands({ dryRun, check, repoRoot, canonicalDir = null }) {
+  const commandsDir = canonicalDir || resolveCanonicalCommandsDir(repoRoot) || path.join(repoRoot, '.claude', 'commands');
 
   // Read all .md files from the commands directory
   /** @type {string[]} */
@@ -474,16 +502,7 @@ function syncCommands({ dryRun, check, repoRoot }) {
 
   // Write sync manifest — records every file generated so stale detection
   // can identify orphaned files without false-flagging custom files.
-  const manifestDir = path.join(repoRoot, '.forge');
-  fs.mkdirSync(manifestDir, { recursive: true });
-  const manifestData = {
-    generatedAt: new Date().toISOString(),
-    files: written.map((e) => path.relative(repoRoot, e.filePath).replace(/\\/g, '/')),
-  };
-  fs.writeFileSync(
-    path.join(manifestDir, 'sync-manifest.json'),
-    JSON.stringify(manifestData, null, 2) + '\n'
-  );
+  writeSyncManifest(repoRoot, written);
 
   return { written, overwritten };
 }
@@ -506,7 +525,7 @@ if (require.main === module) {
 
   if (dryRun) {
     if (result.planned.length === 0) {
-      console.log('No command files found in .claude/commands/');
+      console.log('No command files found in commands/ or .claude/commands/');
     } else {
       console.log('Dry run — files that would be generated:\n');
       for (const entry of result.planned) {
@@ -516,7 +535,7 @@ if (require.main === module) {
     }
   } else if (check) {
     if (result.empty) {
-      console.error('Error: no command files found in .claude/commands/ — cannot verify sync.');
+      console.error('Error: no command files found in commands/ or .claude/commands/ — cannot verify sync.');
       process.exit(1);
     }
     if (result.manifestMissing) {
@@ -561,11 +580,21 @@ if (require.main === module) {
     }
 
     if (result.written.length === 0) {
-      console.log('No command files found in .claude/commands/');
+      console.log('No command files found in commands/ or .claude/commands/');
     } else {
       console.log(`Synced ${result.written.length} file(s) across agents.`);
     }
   }
 }
 
-module.exports = { parseFrontmatter, buildFile, AGENT_ADAPTERS, adaptForAgent, syncCommands };
+module.exports = {
+  parseFrontmatter,
+  buildFile,
+  AGENT_ADAPTERS,
+  adaptForAgent,
+  listCodexSkillEntries,
+  syncCommands,
+  contentHash,
+  resolveCanonicalCommandsDir,
+  writeSyncManifest,
+};

package/scripts/test.js

@@ -22,9 +22,24 @@ function detectPackageManager() {
 const pkgManager = detectPackageManager();
 console.log(`🧪 Running test suite (${pkgManager} test)...`);
 
+// Strip git hook environment variables so child processes (especially tests
+// that create temp git repos) never accidentally operate on the real worktree.
+// During pre-push hooks, git sets GIT_DIR pointing to the repo — any test that
+// runs `git init` / `git commit` in a temp dir inherits this and silently
+// commits into the worktree instead, creating rogue "initial commit" that
+// deletes the entire codebase.
+const env = { ...process.env };
+for (const key of Object.keys(env)) {
+  if (key === 'GIT_DIR' || key === 'GIT_WORK_TREE' || key === 'GIT_INDEX_FILE'
+    || key === 'GIT_OBJECT_DIRECTORY' || key === 'GIT_ALTERNATE_OBJECT_DIRECTORIES'
+    || key === 'GIT_QUARANTINE_PATH') {
+    delete env[key];
+  }
+}
+
 // Use 'run test' to invoke the package.json script (which may include --timeout flags)
 // 'bun test' is a built-in that ignores package.json scripts
-const result = spawnSync(pkgManager, ['run', 'test'], { stdio: 'inherit', shell: isWindows });
+const result = spawnSync(pkgManager, ['run', 'test'], { stdio: 'inherit', shell: isWindows, env });
 
 if (result.error) {
   console.error('');