teamshare-bridge 0.11.0 → 0.11.2

package/dist/lib/workspace/repo-lock.js

@@ -0,0 +1,296 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ARBITRATION_LOG = exports.WS_MAX_HOLD_MS = void 0;
+exports.canonicalDir = canonicalDir;
+exports.scopeKey = scopeKey;
+exports.isInsideLockRoot = isInsideLockRoot;
+exports.readWsHolders = readWsHolders;
+exports.readWsHoldersByKey = readWsHoldersByKey;
+exports.tryAcquireWsLock = tryAcquireWsLock;
+exports.acquireWsLock = acquireWsLock;
+exports.releaseWsLock = releaseWsLock;
+exports.releaseAllWsLocks = releaseAllWsLocks;
+exports.withWsLock = withWsLock;
+exports.logArbitration = logArbitration;
+exports.__writeForeignHolder = __writeForeignHolder;
+exports.__setLockRootForTests = __setLockRootForTests;
+/**
+ * Workspace arbitration: repo-scoped file locks (IMP-950).
+ *
+ * The per-agent session lock (../lock.ts) guarantees one SESSION per agent,
+ * but says nothing about WHERE it works. Two agents on two tasks of the same
+ * project legally share one linked folder - and their intrusive commands
+ * (`npm run build` deleting dist, `npm install` churning node_modules,
+ * branch checkouts, prisma generate's engine DLL) trample each other.
+ *
+ * This module is the second axis: locks keyed by WORKING DIRECTORY (plus a
+ * machine-global scope for engine DLLs), with reader/writer semantics:
+ *   - shared     readers coexist (tsc/eslint/jest/git status)
+ *   - exclusive  excludes every other holder (builds, installs, checkout)
+ *
+ * State lives on the FILESYSTEM so plain CLI runs arbitrate without the
+ * daemon; the localhost arbiter endpoints (bridge/local-server.ts) expose
+ * the same functions to PATH shims and external tools. Every holder is a
+ * separate `<mode>-<pid>-<ts>.json` file inside the scope directory, so
+ * shared holders never overwrite each other. Staleness = dead pid or age >
+ * MAX_HOLD_MS, mirroring lock.ts.
+ *
+ * Deadlock rules (documented, enforced by convention):
+ *   - acquire at most ONE dir scope at a time;
+ *   - when a global resource is also needed (prisma generate), take the dir
+ *     lock FIRST, then the global one, always in that order;
+ *   - re-entrancy: same pid + same scope + same mode returns the existing
+ *     handle; exclusive-then-shared in-process upgrades are rejected.
+ */
+const node_crypto_1 = require("node:crypto");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const DEFAULT_LOCK_ROOT = (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'locks', 'ws');
+/** Overridable for tests only - production code never touches this. */
+let lockRoot = process.env.TS_WS_LOCK_ROOT && process.env.TS_WS_LOCK_ROOT.trim()
+    ? (0, node_path_1.resolve)(process.env.TS_WS_LOCK_ROOT)
+    : DEFAULT_LOCK_ROOT;
+/** Comfortably above any real build/install; crashed holders die by pid check anyway. */
+exports.WS_MAX_HOLD_MS = 8 * 60 * 60 * 1000;
+exports.ARBITRATION_LOG = (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'arbitration.log');
+// ── scope keys ──────────────────────────────────────────────────────────────
+/** Canonical, case-folded identity of a working directory (win32-safe). */
+function canonicalDir(path) {
+    const resolved = path ? path.trim() : '';
+    // realpathSync would fail on not-yet-existing dirs; resolve() is enough -
+    // collisions only matter when two spellings reach the same folder.
+    return resolved.replace(/[\\/]+$/, '').toLowerCase();
+}
+function scopeKey(scope) {
+    if (scope.kind === 'global')
+        return `g-${slug(scope.name)}`;
+    return `d-${(0, node_crypto_1.createHash)('sha256').update(canonicalDir(scope.path)).digest('hex').slice(0, 20)}`;
+}
+function slug(name) {
+    return name.replace(/[^a-zA-Z0-9_-]+/g, '-').slice(0, 40) || 'x';
+}
+function scopeDir(scope) {
+    return (0, node_path_1.join)(lockRoot, scopeKey(scope));
+}
+/** True when `file` lives inside the managed lock tree (release guard). */
+function isInsideLockRoot(file) {
+    const resolved = (0, node_path_1.resolve)(file).toLowerCase();
+    const root = (0, node_path_1.resolve)(lockRoot).toLowerCase();
+    return resolved.startsWith(root);
+}
+// ── holder files ────────────────────────────────────────────────────────────
+function pidAlive(pid) {
+    if (!Number.isInteger(pid) || pid <= 0)
+        return false;
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (err) {
+        return err.code === 'EPERM';
+    }
+}
+function readHolderFile(file) {
+    try {
+        const body = JSON.parse((0, node_fs_1.readFileSync)(file, 'utf8'));
+        if (!body || typeof body.pid !== 'number' || (body.mode !== 'shared' && body.mode !== 'exclusive')) {
+            return null;
+        }
+        return { ...body, file };
+    }
+    catch {
+        return null;
+    }
+}
+/** Live + stale holders for a scope (stale ones still listed for pings). */
+function readWsHolders(scope) {
+    return readWsHoldersByKey(scopeKey(scope));
+}
+/** Holders by precomputed scope key (status endpoints scan the tree). */
+function readWsHoldersByKey(key) {
+    const safe = key.replace(/[^a-zA-Z0-9_-]/g, '');
+    if (!safe)
+        return [];
+    const dir = (0, node_path_1.join)(lockRoot, safe);
+    if (!(0, node_fs_1.existsSync)(dir))
+        return [];
+    const now = Date.now();
+    const out = [];
+    for (const entry of (0, node_fs_1.readdirSync)(dir)) {
+        if (!entry.endsWith('.json'))
+            continue;
+        const h = readHolderFile((0, node_path_1.join)(dir, entry));
+        if (!h)
+            continue;
+        const age = now - new Date(h.startedAt).getTime();
+        out.push({
+            pid: h.pid,
+            mode: h.mode,
+            startedAt: h.startedAt,
+            holder: h.holder ?? {},
+            file: h.file,
+            stale: !pidAlive(h.pid) || !Number.isFinite(age) || age > exports.WS_MAX_HOLD_MS,
+        });
+    }
+    return out.sort((a, b) => a.startedAt.localeCompare(b.startedAt));
+}
+function liveHolders(scope) {
+    return readWsHolders(scope).filter((h) => !h.stale);
+}
+function writeHolderFile(scope, mode, info) {
+    const dir = scopeDir(scope);
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    const startedAt = new Date().toISOString();
+    const body = { pid: process.pid, mode, startedAt, holder: info };
+    // Uniqueness: pid + ms timestamp is enough even for rapid re-acquire loops.
+    const file = (0, node_path_1.join)(dir, `${mode}-${process.pid}-${Date.now()}.json`);
+    (0, node_fs_1.writeFileSync)(file, JSON.stringify(body, null, 2), 'utf8');
+    return { scope, mode, file, pid: process.pid, startedAt };
+}
+// ── in-process registry (re-entrancy + reliable release) ───────────────────
+const held = new Map();
+function handleId(handle) {
+    return `${scopeKey(handle.scope)}|${handle.mode}`;
+}
+/**
+ * Re-entrancy lookup with self-healing: an externally released handle
+ * (HTTP /arbitrate/release removes the FILE without touching this
+ * process's map) must not keep shadowing fresh acquisitions - verify the
+ * backing file still exists and forget the entry when it does not.
+ */
+function validHeldHandle(mapKey) {
+    const h = held.get(mapKey);
+    if (!h)
+        return null;
+    if (!(0, node_fs_1.existsSync)(h.file)) {
+        held.delete(mapKey);
+        return null;
+    }
+    return h;
+}
+/**
+ * One-shot acquire. Exclusive requires an EMPTY live-holder set; shared
+ * requires no live EXCLUSIVE holder. Same-pid same-mode is re-entrant
+ * (returns the registered handle); same-pid cross-mode refuses rather than
+ * corrupting state.
+ */
+function tryAcquireWsLock(scope, mode, info = {}) {
+    const key = scopeKey(scope);
+    const existingSameMode = validHeldHandle(`${key}|${mode}`);
+    if (existingSameMode)
+        return { ok: true, handle: existingSameMode };
+    const otherMode = mode === 'exclusive' ? 'shared' : 'exclusive';
+    if (validHeldHandle(`${key}|${otherMode}`)) {
+        return { ok: false, reason: 'reentrant-conflict', holders: liveHolders(scope) };
+    }
+    // Purge stale holder files first - a dead build must never block anyone.
+    for (const h of readWsHolders(scope)) {
+        if (h.stale) {
+            try {
+                (0, node_fs_1.rmSync)(h.file, { force: true });
+            }
+            catch {
+                /* best-effort */
+            }
+        }
+    }
+    const live = liveHolders(scope);
+    if (mode === 'exclusive') {
+        if (live.length > 0 && !(live.length === 1 && live[0].pid === process.pid)) {
+            return { ok: false, reason: 'busy', holders: live };
+        }
+    }
+    else if (live.some((h) => h.mode === 'exclusive')) {
+        return { ok: false, reason: 'busy', holders: live };
+    }
+    const handle = writeHolderFile(scope, mode, info);
+    held.set(handleId(handle), handle);
+    return { ok: true, handle };
+}
+/**
+ * Wait until the scope admits `mode`, then hold it. Returns null on
+ * deadline. `onWaiting` fires once per poll cycle while blocked (used to
+ * emit bus pings + console notes exactly like ../lock.ts).
+ */
+async function acquireWsLock(scope, mode, info = {}, opts = {}) {
+    const waitMs = opts.waitMs ?? 10 * 60_000;
+    const pollMs = opts.pollMs ?? 500;
+    const deadline = Date.now() + waitMs;
+    for (;;) {
+        const attempt = tryAcquireWsLock(scope, mode, info);
+        if (attempt.ok)
+            return attempt.handle;
+        if (attempt.reason === 'busy')
+            opts.onWaiting?.(attempt.holders);
+        if (Date.now() >= deadline)
+            return null;
+        await sleep(Math.min(pollMs, Math.max(50, deadline - Date.now())));
+    }
+}
+/** Release a handle this process owns (no-op otherwise). */
+function releaseWsLock(handle) {
+    if (!handle)
+        return;
+    held.delete(handleId(handle));
+    try {
+        (0, node_fs_1.rmSync)(handle.file, { force: true });
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** Release every handle this process still holds (crash/exit safety net). */
+function releaseAllWsLocks() {
+    for (const [, handle] of held)
+        releaseWsLock(handle);
+}
+/** Run `fn` under the lock; always releases, even on throw. */
+async function withWsLock(scope, mode, info, fn, opts = {}) {
+    const handle = await acquireWsLock(scope, mode, info, opts);
+    if (!handle)
+        return null;
+    try {
+        return await fn();
+    }
+    finally {
+        releaseWsLock(handle);
+    }
+}
+function sleep(ms) {
+    return new Promise((resolve) => setTimeout(resolve, ms));
+}
+/** Append-only human-readable trail (best-effort, size-capped). */
+function logArbitration(line) {
+    try {
+        (0, node_fs_1.mkdirSync)((0, node_path_1.join)(exports.ARBITRATION_LOG, '..'), { recursive: true });
+        const stamp = new Date().toISOString();
+        if ((0, node_fs_1.existsSync)(exports.ARBITRATION_LOG) && (0, node_fs_1.statSync)(exports.ARBITRATION_LOG).size > 2 * 1024 * 1024) {
+            // Rotate once past 2 MB - keep the newest half.
+            const old = (0, node_fs_1.readFileSync)(exports.ARBITRATION_LOG, 'utf8');
+            (0, node_fs_1.writeFileSync)(exports.ARBITRATION_LOG, old.slice(old.length - 1024 * 1024), 'utf8');
+        }
+        (0, node_fs_1.appendFileSync)(exports.ARBITRATION_LOG, `[${stamp}] ${line}\n`, 'utf8');
+    }
+    catch {
+        /* best-effort */
+    }
+}
+/** Temp helper used by tests/E2E to fabricate a stale holder. */
+function __writeForeignHolder(scope, mode, pid, ageMs = 0) {
+    const dir = scopeDir(scope);
+    (0, node_fs_1.mkdirSync)(dir, { recursive: true });
+    const file = (0, node_path_1.join)(dir, `${mode}-${pid}-0.json`);
+    (0, node_fs_1.writeFileSync)(file, JSON.stringify({
+        pid,
+        mode,
+        startedAt: new Date(Date.now() - ageMs).toISOString(),
+        holder: { label: 'foreign' },
+    }), 'utf8');
+    return file;
+}
+/** Isolated root override for tests (never called in production paths). */
+function __setLockRootForTests(dir) {
+    lockRoot = dir ?? DEFAULT_LOCK_ROOT;
+}
+//# sourceMappingURL=repo-lock.js.map

package/dist/lib/workspace/repo-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-lock.js","sourceRoot":"","sources":["../../../src/lib/workspace/repo-lock.ts"],"names":[],"mappings":";;;AAwFA,oCAKC;AAED,4BAGC;AAWD,4CAIC;AA2BD,sCAEC;AAGD,gDAsBC;AAsDD,4CAoCC;AAOD,sCAoBC;AAGD,sCAQC;AAGD,8CAEC;AAGD,gCAcC;AAOD,wCAaC;AAGD,oDAoBC;AAGD,sDAEC;AA7WD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,6CAAyC;AACzC,qCAA4H;AAC5H,qCAAkC;AAClC,yCAA0C;AA2C1C,MAAM,iBAAiB,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACvE,uEAAuE;AACvE,IAAI,QAAQ,GACV,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,EAAE;IAC/D,CAAC,CAAC,IAAA,mBAAO,EAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACtC,CAAC,CAAC,iBAAiB,CAAC;AACxB,yFAAyF;AAC5E,QAAA,cAAc,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEpC,QAAA,eAAe,GAAG,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,iBAAiB,CAAC,CAAC;AAEhF,+EAA+E;AAE/E,2EAA2E;AAC3E,SAAgB,YAAY,CAAC,IAAY;IACvC,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAE,IAAe,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IACrD,0EAA0E;IAC1E,mEAAmE;IACnE,OAAO,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACvD,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC5D,OAAO,KAAK,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;AACjG,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC;AACnE,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,IAAA,gBAAI,EAAC,QAAQ,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,2EAA2E;AAC3E,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,QAAQ,GAAG,IAAA,mBAAO,EAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAA,mBAAO,EAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7C,OAAO,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,+EAA+E;AAE/E,SAAS,QAAQ,CAAC,GAAW;IAC3B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACrB,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAQ,GAA6B,CAAC,IAAI,KAAK,OAAO,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAA,sBAAY,EAAC,IAAI,EAAE,MAAM,CAAC,CAAe,CAAC;QAClE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;YACnG,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAgB,aAAa,CAAC,KAAc;IAC1C,OAAO,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,yEAAyE;AACzE,SAAgB,kBAAkB,CAAC,GAAW;IAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,IAAA,gBAAI,EAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,CAAC,IAAA,oBAAU,EAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,MAAM,GAAG,GAAe,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAA,qBAAW,EAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC;YAAE,SAAS;QACvC,MAAM,CAAC,GAAG,cAAc,CAAC,IAAA,gBAAI,EAAC,GAAG,EAAE,KAAK,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,CAAC;YAAE,SAAS;QACjB,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAClD,GAAG,CAAC,IAAI,CAAC;YACP,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,SAAS,EAAE,CAAC,CAAC,SAAS;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;YACtB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,KAAK,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,sBAAc;SACzE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,EAAE,IAAkB;IACvE,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC3C,MAAM,IAAI,GAAe,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC7E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,IAAI,IAAI,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpE,IAAA,uBAAa,EAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC3D,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,CAAC;AAC5D,CAAC;AAED,8EAA8E;AAE9E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;AAEzC,SAAS,QAAQ,CAAC,MAAgB;IAChC,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;AACpD,CAAC;AASD;;;;;GAKG;AACH,SAAS,eAAe,CAAC,MAAc;IACrC,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,IAAA,oBAAU,EAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACpB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;;GAKG;AACH,SAAgB,gBAAgB,CAC9B,KAAc,EACd,IAAY,EACZ,OAAqB,EAAE;IAEvB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,MAAM,gBAAgB,GAAG,eAAe,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,CAAC;IAC3D,IAAI,gBAAgB;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;IAChE,IAAI,eAAe,CAAC,GAAG,GAAG,IAAI,SAAS,EAAE,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,oBAAoB,EAAE,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC;IAClF,CAAC;IAED,yEAAyE;IACzE,KAAK,MAAM,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;YACZ,IAAI,CAAC;gBACH,IAAA,gBAAM,EAAC,CAAC,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClC,CAAC;YAAC,MAAM,CAAC;gBACP,iBAAiB;YACnB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC3E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;QACtD,CAAC;IACH,CAAC;SAAM,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtD,CAAC;IAED,MAAM,MAAM,GAAG,eAAe,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;IACnC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,aAAa,CACjC,KAAc,EACd,IAAY,EACZ,OAAqB,EAAE,EACvB,OAII,EAAE;IAEN,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,GAAG,MAAM,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC;IAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC;IACrC,SAAS,CAAC;QACR,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC;QACtC,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,IAAI,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IACrE,CAAC;AACH,CAAC;AAED,4DAA4D;AAC5D,SAAgB,aAAa,CAAC,MAAmC;IAC/D,IAAI,CAAC,MAAM;QAAE,OAAO;IACpB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,IAAI,CAAC;QACH,IAAA,gBAAM,EAAC,MAAM,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAgB,iBAAiB;IAC/B,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,IAAI,IAAI;QAAE,aAAa,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC;AAED,+DAA+D;AACxD,KAAK,UAAU,UAAU,CAC9B,KAAc,EACd,IAAY,EACZ,IAAkB,EAClB,EAAoB,EACpB,OAAkF,EAAE;IAEpF,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5D,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,EAAE,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACT,aAAa,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,mEAAmE;AACnE,SAAgB,cAAc,CAAC,IAAY;IACzC,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,IAAA,gBAAI,EAAC,uBAAe,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACvC,IAAI,IAAA,oBAAU,EAAC,uBAAe,CAAC,IAAI,IAAA,kBAAQ,EAAC,uBAAe,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;YACpF,gDAAgD;YAChD,MAAM,GAAG,GAAG,IAAA,sBAAY,EAAC,uBAAe,EAAE,MAAM,CAAC,CAAC;YAClD,IAAA,uBAAa,EAAC,uBAAe,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC;QAC9E,CAAC;QACD,IAAA,wBAAc,EAAC,uBAAe,EAAE,IAAI,KAAK,KAAK,IAAI,IAAI,EAAE,MAAM,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,iBAAiB;IACnB,CAAC;AACH,CAAC;AAED,iEAAiE;AACjE,SAAgB,oBAAoB,CAClC,KAAc,EACd,IAAY,EACZ,GAAW,EACX,KAAK,GAAG,CAAC;IAET,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC5B,IAAA,mBAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,IAAA,gBAAI,EAAC,GAAG,EAAE,GAAG,IAAI,IAAI,GAAG,SAAS,CAAC,CAAC;IAChD,IAAA,uBAAa,EACX,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;QACb,GAAG;QACH,IAAI;QACJ,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC,WAAW,EAAE;QACrD,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE;KAC7B,CAAC,EACF,MAAM,CACP,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC;AAED,2EAA2E;AAC3E,SAAgB,qBAAqB,CAAC,GAAY;IAChD,QAAQ,GAAG,GAAG,IAAI,iBAAiB,CAAC;AACtC,CAAC"}

package/dist/lib/workspace/shim-runner.d.ts

@@ -0,0 +1 @@
+export declare function runShim(argv: string[]): Promise<number>;

package/dist/lib/workspace/shim-runner.js

@@ -0,0 +1,233 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runShim = runShim;
+/**
+ * Shim runner (IMP-950): the payload behind ~/.teamshare/shims/*.cmd.
+ *
+ * A shim invocation looks like:  node shim-runner.js <bin> <args...>
+ *
+ * Flow: classify -> maybe acquire workspace locks (FS-backed, same code as
+ * the bridge uses in-process) -> exec the REAL binary -> release. Designed
+ * to fail OPEN on every error path: arbitration must never make a machine
+ * unusable. Timeouts are fail-CLOSED (exit 124 with a clear message) so the
+ * calling agent sees "workspace busy" instead of trampling another agent.
+ *
+ * Nested calls are handled via the inherited TS_WS_HELD environment list:
+ * a shim whose scope is already held by an ANCESTOR skips acquisition -
+ * the ancestor already serialized this subtree.
+ */
+const node_child_process_1 = require("node:child_process");
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const repo_lock_1 = require("./repo-lock");
+const classify_1 = require("./classify");
+const bus_1 = require("./bus");
+const DEFAULT_WAIT_MS = 10 * 60_000;
+function parseEnvInt(name, fallback) {
+    const raw = Number(process.env[name]);
+    return Number.isFinite(raw) && raw > 0 ? raw : fallback;
+}
+function heldScopesFromEnv() {
+    return new Set((process.env.TS_WS_HELD ?? '').split(',').filter(Boolean));
+}
+function addToHeldEnv(keys) {
+    const set = heldScopesFromEnv();
+    for (const k of keys)
+        set.add(k);
+    process.env.TS_WS_HELD = [...set].join(',');
+}
+function note(text) {
+    process.stderr.write(`[teamshare] ${text}\n`);
+}
+// ── real-binary resolution ─────────────────────────────────────────────────
+function shimDir() {
+    return (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'shims');
+}
+/** Absolute path of the real executable, skipping our shim directory. */
+function resolveRealBinary(bin) {
+    const isWin = process.platform === 'win32';
+    const finder = isWin ? 'where' : 'which';
+    try {
+        const res = (0, node_child_process_1.spawnSync)(finder, isWin ? [bin] : ['-a', bin], { encoding: 'utf8' });
+        const candidates = (res.stdout ?? '')
+            .split(/\r?\n/)
+            .map((l) => l.trim())
+            .filter(Boolean);
+        const shims = shimDir().toLowerCase();
+        const filtered = candidates.filter((c) => !c.toLowerCase().startsWith(shims));
+        if (!isWin)
+            return filtered[0] ?? null;
+        // Windows: `where` lists extensionless POSIX wrappers first (e.g.
+        // nodejs/npm is a sh script) which cannot be spawned directly. Prefer
+        // real executables in PATHEXT order: .cmd/.bat > .exe.
+        const byExt = (exts) => filtered.find((c) => exts.some((e) => c.toLowerCase().endsWith(e)));
+        return byExt(['.cmd', '.bat']) ?? byExt(['.exe']) ?? filtered[0] ?? null;
+    }
+    catch {
+        return null;
+    }
+}
+function quote(arg) {
+    return /[\s"^&|<>]/.test(arg) ? `"${arg.replace(/"/g, '""')}"` : arg;
+}
+/** Execute the real binary with inherited stdio; returns its exit code. */
+function execReal(realPath, args) {
+    const isWin = process.platform === 'win32';
+    const lower = realPath.toLowerCase();
+    if (isWin && (lower.endsWith('.cmd') || lower.endsWith('.bat'))) {
+        // Newer Node refuses to spawn .cmd directly; drive it through cmd /c.
+        const line = [`"${realPath}"`, ...args.map(quote)].join(' ');
+        const res = (0, node_child_process_1.spawnSync)(line, {
+            shell: true,
+            stdio: 'inherit',
+            windowsVerbatimArguments: true,
+            env: process.env,
+        });
+        return res.status ?? (res.error ? 1 : 0);
+    }
+    const res = (0, node_child_process_1.spawnSync)(realPath, args, { stdio: 'inherit', env: process.env });
+    if (res.error) {
+        note(`failed to execute ${realPath}: ${res.error.message}`);
+        return 127;
+    }
+    return res.status ?? 0;
+}
+// ── locking ────────────────────────────────────────────────────────────────
+async function arbitrateAndExec(ctx, cls) {
+    const dirScope = { kind: 'dir', path: process.cwd() };
+    const dirKeyStr = (0, repo_lock_1.scopeKey)(dirScope);
+    const globalScopes = (cls.global ?? []).map((name) => ({ kind: 'global', name }));
+    const allScopeKeys = [dirKeyStr, ...globalScopes.map(repo_lock_1.scopeKey)];
+    // Ancestor already holds this workspace - stay inside its serialization.
+    const held = heldScopesFromEnv();
+    if (allScopeKeys.every((k) => held.has(k))) {
+        return execReal(resolveReal(ctx.bin), ctx.args);
+    }
+    const waitMs = parseEnvInt('TS_SHIM_WAIT_MS', DEFAULT_WAIT_MS);
+    const handles = [];
+    try {
+        // Fixed order: dir first, then globals (documented deadlock rule).
+        const dirHandle = await (0, repo_lock_1.acquireWsLock)(dirScope, 'exclusive', ctx.info, {
+            waitMs,
+            pollMs: 1000,
+            onWaiting: (holders) => {
+                const holder = holders.find((h) => h.mode === 'exclusive') ?? holders[0];
+                note(`workspace busy (${holder?.holder?.label ?? 'another session'} pid=${holder?.pid}) - ` +
+                    `${cls.label} waiting (max ${Math.round(waitMs / 1000)}s)...`);
+                (0, bus_1.publishEvent)({
+                    type: 'lock.waiting',
+                    dir: (0, repo_lock_1.canonicalDir)(process.cwd()),
+                    agentId: ctx.info.agentId,
+                    taskId: ctx.info.taskId,
+                    note: `${cls.label} waits on ${holder?.holder?.label ?? 'unknown'} (pid ${holder?.pid})`,
+                });
+            },
+        });
+        if (!dirHandle) {
+            note(`TIMEOUT: workspace busy after ${Math.round(waitMs / 1000)}s - NOT running ${cls.label}. ` +
+                `Retry when the other session finishes.`);
+            (0, repo_lock_1.logArbitration)(`shim timeout dir=${(0, repo_lock_1.canonicalDir)(process.cwd())} cmd=${cls.label}`);
+            return 124;
+        }
+        handles.push(dirHandle);
+        addToHeldEnv(allScopeKeys);
+        for (const g of globalScopes) {
+            const gh = await (0, repo_lock_1.acquireWsLock)(g, 'exclusive', ctx.info, { waitMs, pollMs: 1000 });
+            if (!gh) {
+                note(`global resource ${g.name} busy - skipping ${cls.label}`);
+                return 124;
+            }
+            handles.push(gh);
+        }
+        (0, bus_1.publishEvent)({
+            type: 'lock.granted',
+            dir: (0, repo_lock_1.canonicalDir)(process.cwd()),
+            agentId: ctx.info.agentId,
+            taskId: ctx.info.taskId,
+            note: cls.label,
+        });
+        return execReal(resolveReal(ctx.bin), ctx.args);
+    }
+    catch (err) {
+        // Arbitration itself broke - fail OPEN, the command must still run.
+        note(`arbitration skipped (${err.message})`);
+        (0, repo_lock_1.logArbitration)(`shim fail-open dir=${(0, repo_lock_1.canonicalDir)(process.cwd())} cmd=${cls.label}`);
+        return execReal(resolveReal(ctx.bin), ctx.args);
+    }
+    finally {
+        for (const h of handles.reverse())
+            (0, repo_lock_1.releaseWsLock)(h);
+        if (handles.length > 0) {
+            (0, bus_1.publishEvent)({ type: 'lock.released', dir: (0, repo_lock_1.canonicalDir)(process.cwd()), agentId: ctx.info.agentId });
+        }
+    }
+}
+function resolveReal(bin) {
+    const found = resolveRealBinary(bin);
+    if (found)
+        return found;
+    // Fall back to the bare name and let the OS fail visibly.
+    return bin;
+}
+// ── entry ──────────────────────────────────────────────────────────────────
+async function runShim(argv) {
+    const [bin, ...args] = argv;
+    if (!bin)
+        return 2;
+    const cls = (0, classify_1.classifyCommand)([bin, ...args].join(' '));
+    // Passthrough commands never touch the lock files at all.
+    if (cls.cls === 'passthrough') {
+        return execReal(resolveReal(bin), args);
+    }
+    const mode = cls.cls === 'exclusive' ? 'exclusive' : 'shared';
+    const info = {
+        agentId: process.env.TS_AGENT_ID || undefined,
+        kind: process.env.TS_SESSION_KIND || 'shim',
+        taskId: process.env.TS_TASK_ID || undefined,
+        projectId: process.env.TS_PROJECT_ID || undefined,
+        label: cls.label,
+    };
+    if (!(0, node_fs_1.existsSync)(process.cwd())) {
+        return execReal(resolveReal(bin), args);
+    }
+    // Long-lived dev servers take a SHARED hold for their lifetime: visible
+    // to exclusive seekers (who ping + wait), but never blocking peers.
+    if (cls.cls === 'long-shared') {
+        const attempt = (0, repo_lock_1.tryAcquireWsLock)({ kind: 'dir', path: process.cwd() }, 'shared', info);
+        try {
+            return execReal(resolveReal(bin), args);
+        }
+        finally {
+            if (attempt.ok)
+                (0, repo_lock_1.releaseWsLock)(attempt.handle);
+        }
+    }
+    if (mode === 'shared') {
+        // Readers prefer a stable tree (short wait) but never hard-fail:
+        // after the wait elapses they run anyway - linting a moving tree
+        // beats not linting at all.
+        const sharedWaitMs = parseEnvInt('TS_SHIM_SHARED_WAIT_MS', 30_000);
+        let handle = null;
+        try {
+            handle = await (0, repo_lock_1.acquireWsLock)({ kind: 'dir', path: process.cwd() }, 'shared', info, {
+                waitMs: sharedWaitMs,
+                pollMs: 500,
+            });
+            if (!handle)
+                note(`workspace busy - running ${cls.label} without arbitration`);
+            return execReal(resolveReal(bin), args);
+        }
+        finally {
+            (0, repo_lock_1.releaseWsLock)(handle);
+        }
+    }
+    return arbitrateAndExec({ bin, args, info }, cls);
+}
+// Allow running as: node shim-runner.js <bin> <args...>
+if (require.main === module) {
+    void runShim(process.argv.slice(2)).then((code) => {
+        process.exit(code);
+    });
+}
+//# sourceMappingURL=shim-runner.js.map

package/dist/lib/workspace/shim-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shim-runner.js","sourceRoot":"","sources":["../../../src/lib/workspace/shim-runner.ts"],"names":[],"mappings":";;AAgNA,0BAsDC;AAtQD;;;;;;;;;;;;;;GAcG;AACH,2DAA+C;AAC/C,qCAAqC;AACrC,qCAAkC;AAClC,yCAAiC;AACjC,2CASqB;AACrB,yCAA6C;AAC7C,+BAAqC;AAErC,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAQpC,SAAS,WAAW,CAAC,IAAY,EAAE,QAAgB;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1D,CAAC;AAED,SAAS,iBAAiB;IACxB,OAAO,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,YAAY,CAAC,IAAc;IAClC,MAAM,GAAG,GAAG,iBAAiB,EAAE,CAAC;IAChC,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACjC,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC;AAChD,CAAC;AAED,8EAA8E;AAE9E,SAAS,OAAO;IACd,OAAO,IAAA,gBAAI,EAAC,IAAA,iBAAO,GAAE,EAAE,YAAY,EAAE,OAAO,CAAC,CAAC;AAChD,CAAC;AAED,yEAAyE;AACzE,SAAS,iBAAiB,CAAC,GAAW;IACpC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACzC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAA,8BAAS,EAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;QACjF,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC;aAClC,KAAK,CAAC,OAAO,CAAC;aACd,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK;YAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;QACvC,kEAAkE;QAClE,sEAAsE;QACtE,uDAAuD;QACvD,MAAM,KAAK,GAAG,CAAC,IAAc,EAAE,EAAE,CAC/B,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,KAAK,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,GAAW;IACxB,OAAO,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;AACvE,CAAC;AAED,2EAA2E;AAC3E,SAAS,QAAQ,CAAC,QAAgB,EAAE,IAAc;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAChE,sEAAsE;QACtE,MAAM,IAAI,GAAG,CAAC,IAAI,QAAQ,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,IAAA,8BAAS,EAAC,IAAI,EAAE;YAC1B,KAAK,EAAE,IAAI;YACX,KAAK,EAAE,SAAS;YAChB,wBAAwB,EAAE,IAAI;YAC9B,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,8BAAS,EAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,KAAK,EAAE,CAAC;QACd,IAAI,CAAC,qBAAqB,QAAQ,KAAM,GAAG,CAAC,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;QACvE,OAAO,GAAG,CAAC;IACb,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,8EAA8E;AAE9E,KAAK,UAAU,gBAAgB,CAAC,GAAgB,EAAE,GAAuC;IACvF,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,KAAc,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;IAC/D,MAAM,SAAS,GAAG,IAAA,oBAAQ,EAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC3F,MAAM,YAAY,GAAG,CAAC,SAAS,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,oBAAQ,CAAC,CAAC,CAAC;IAEhE,yEAAyE;IACzE,MAAM,IAAI,GAAG,iBAAiB,EAAE,CAAC;IACjC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3C,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAED,MAAM,MAAM,GAAG,WAAW,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAe,EAAE,CAAC;IAE/B,IAAI,CAAC;QACH,mEAAmE;QACnE,MAAM,SAAS,GAAG,MAAM,IAAA,yBAAa,EACnC,QAAQ,EACR,WAAW,EACX,GAAG,CAAC,IAAI,EACR;YACE,MAAM;YACN,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,CAAC,OAAO,EAAE,EAAE;gBACrB,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,CAAC;gBACzE,IAAI,CACF,mBAAmB,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,iBAAiB,QAAQ,MAAM,EAAE,GAAG,MAAM;oBACpF,GAAG,GAAG,CAAC,KAAK,iBAAiB,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAChE,CAAC;gBACF,IAAA,kBAAY,EAAC;oBACX,IAAI,EAAE,cAAc;oBACpB,GAAG,EAAE,IAAA,wBAAY,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC;oBAChC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;oBACzB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;oBACvB,IAAI,EAAE,GAAG,GAAG,CAAC,KAAK,aAAa,MAAM,EAAE,MAAM,EAAE,KAAK,IAAI,SAAS,SAAS,MAAM,EAAE,GAAG,GAAG;iBACzF,CAAC,CAAC;YACL,CAAC;SACF,CACF,CAAC;QACF,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CACF,iCAAiC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,mBAAmB,GAAG,CAAC,KAAK,IAAI;gBACxF,wCAAwC,CAC3C,CAAC;YACF,IAAA,0BAAc,EAAC,oBAAoB,IAAA,wBAAY,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;YACnF,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,YAAY,CAAC,YAAY,CAAC,CAAC;QAE3B,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;YAC7B,MAAM,EAAE,GAAG,MAAM,IAAA,yBAAa,EAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YACnF,IAAI,CAAC,EAAE,EAAE,CAAC;gBACR,IAAI,CAAC,mBAAmB,CAAC,CAAC,IAAI,oBAAoB,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/D,OAAO,GAAG,CAAC;YACb,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnB,CAAC;QAED,IAAA,kBAAY,EAAC;YACX,IAAI,EAAE,cAAc;YACpB,GAAG,EAAE,IAAA,wBAAY,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC;YAChC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO;YACzB,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM;YACvB,IAAI,EAAE,GAAG,CAAC,KAAK;SAChB,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oEAAoE;QACpE,IAAI,CAAC,wBAAyB,GAAa,CAAC,OAAO,GAAG,CAAC,CAAC;QACxD,IAAA,0BAAc,EAAC,sBAAsB,IAAA,wBAAY,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,QAAQ,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QACrF,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAClD,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE;YAAE,IAAA,yBAAa,EAAC,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,IAAA,kBAAY,EAAC,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,IAAA,wBAAY,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,KAAK,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,0DAA0D;IAC1D,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAEvE,KAAK,UAAU,OAAO,CAAC,IAAc;IAC1C,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IAC5B,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IAEnB,MAAM,GAAG,GAAG,IAAA,0BAAe,EAAC,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IAEtD,0DAA0D;IAC1D,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;QAC9B,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,MAAM,IAAI,GAAiB;QACzB,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,SAAS;QAC7C,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,MAAM;QAC3C,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,SAAS;QAC3C,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS;QACjD,KAAK,EAAE,GAAG,CAAC,KAAK;KACjB,CAAC;IAEF,IAAI,CAAC,IAAA,oBAAU,EAAC,OAAO,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC/B,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,wEAAwE;IACxE,oEAAoE;IACpE,IAAI,GAAG,CAAC,GAAG,KAAK,aAAa,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,IAAA,4BAAgB,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACvF,IAAI,CAAC;YACH,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,IAAI,OAAO,CAAC,EAAE;gBAAE,IAAA,yBAAa,EAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC;IACH,CAAC;IAED,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,iEAAiE;QACjE,iEAAiE;QACjE,4BAA4B;QAC5B,MAAM,YAAY,GAAG,WAAW,CAAC,wBAAwB,EAAE,MAAM,CAAC,CAAC;QACnE,IAAI,MAAM,GAAoB,IAAI,CAAC;QACnC,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,yBAAa,EAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBACjF,MAAM,EAAE,YAAY;gBACpB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;YACH,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,4BAA4B,GAAG,CAAC,KAAK,sBAAsB,CAAC,CAAC;YAC/E,OAAO,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACT,IAAA,yBAAa,EAAC,MAAM,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,gBAAgB,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,wDAAwD;AACxD,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,KAAK,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAChD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/lib/workspace/shims.d.ts

@@ -0,0 +1,9 @@
+export declare const SHIMS_DIR: string;
+/**
+ * Idempotent install. Returns the list of files written this call.
+ * Foreign files in the directory are never touched.
+ */
+export declare function ensureShims(): {
+    written: string[];
+    dir: string;
+};

package/dist/lib/workspace/shims.js

@@ -0,0 +1,88 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SHIMS_DIR = void 0;
+exports.ensureShims = ensureShims;
+/**
+ * Shim installer (IMP-950): writes PATH-injectable command shims into
+ * ~/.teamshare/shims. Each shim forwards to the compiled shim-runner.js,
+ * which classifies the invocation and arbitrates intrusive commands before
+ * executing the real binary.
+ *
+ * The bridge NEVER puts this directory on its own PATH - only agent-spawned
+ * session terminals get it prepended (see bridge/spawn.ts), so manual
+ * shells stay completely untouched. Files are stamped; upgrades rewrite.
+ */
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+exports.SHIMS_DIR = (0, node_path_1.join)((0, node_os_1.homedir)(), '.teamshare', 'shims');
+const STAMP = 'teamshare-arbitration-shim v1';
+/** Managed binaries. git is included: cmd.exe resolves git.CMD before a
+ * later PATH dir's git.EXE (per-directory PATHEXT scan). CreateProcess-based
+ * callers bypass the shim by design - fail-open philosophy. */
+const SHIMMED_BINS = ['npm', 'npx', 'pnpm', 'yarn', 'git'];
+function runnerPath() {
+    // dist/lib/workspace/shims.js -> dist/lib/workspace/shim-runner.js
+    return (0, node_path_1.join)(__dirname, 'shim-runner.js');
+}
+function windowsShim(bin) {
+    return [
+        '@echo off',
+        `rem ${STAMP}`,
+        `rem Arbitrated passthrough for "${bin}" - remove this file to unmanage.`,
+        'setlocal',
+        `set "TS_SHIM_DIR=%~dp0"`,
+        `node "${runnerPath().replace(/"/g, '')}" ${bin} %*`,
+        'endlocal & exit /b %ERRORLEVEL%',
+        '',
+    ].join('\r\n');
+}
+function posixShim(bin) {
+    return [
+        '#!/usr/bin/env bash',
+        `# ${STAMP}`,
+        `# Arbitrated passthrough for "${bin}" - remove this file to unmanage.`,
+        `exec node "${runnerPath()}" ${bin} "$@"`,
+        '',
+    ].join('\n');
+}
+function currentStamp(file) {
+    try {
+        const head = (0, node_fs_1.readFileSync)(file, 'utf8').split(/\r?\n/).slice(0, 3).join('\n');
+        if (head.includes(STAMP))
+            return STAMP;
+        if (head.includes('teamshare-arbitration-shim'))
+            return 'stale';
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Idempotent install. Returns the list of files written this call.
+ * Foreign files in the directory are never touched.
+ */
+function ensureShims() {
+    const written = [];
+    try {
+        (0, node_fs_1.mkdirSync)(exports.SHIMS_DIR, { recursive: true });
+        for (const bin of SHIMMED_BINS) {
+            const entries = process.platform === 'win32'
+                ? [[`${bin}.cmd`, () => windowsShim(bin)]]
+                : [[bin, () => posixShim(bin)]];
+            for (const [name, render] of entries) {
+                const file = (0, node_path_1.join)(exports.SHIMS_DIR, name);
+                if (currentStamp(file) === STAMP)
+                    continue;
+                (0, node_fs_1.writeFileSync)(file, render(), 'utf8');
+                written.push(file);
+            }
+        }
+    }
+    catch {
+        /* best-effort: no shims simply means unmanaged harness commands */
+    }
+    return { written, dir: exports.SHIMS_DIR };
+}
+//# sourceMappingURL=shims.js.map