@wenrwa/marketplace-cli 0.4.2 → 0.4.4

package/dist/__tests__/bridge-autostart.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/bridge-autostart.test.js

@@ -0,0 +1,68 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const autostart_1 = require("../bridge/autostart");
+const HOME = '/Users/testuser';
+const makeDeps = (platform = 'darwin', hasConfig = true) => {
+    const writes = [];
+    const removed = [];
+    const runs = [];
+    return {
+        writes, removed, runs,
+        deps: {
+            platform,
+            homedir: () => HOME,
+            hasBridgeConfig: () => hasConfig,
+            mkdir: (_p) => { },
+            writeFile: (path, content, mode) => { writes.push({ path, content, mode }); },
+            removeFile: (path) => { removed.push(path); },
+            run: async (cmd, args) => { runs.push([cmd, ...args]); return { stdout: '', code: 0 }; },
+            uid: () => 501,
+        },
+    };
+};
+describe('launchAgentPlist', () => {
+    it('runs the bridge through a login shell (PATH-safe) with KeepAlive + RunAtLoad', () => {
+        const xml = (0, autostart_1.launchAgentPlist)({ logPath: `${HOME}/.wen-market/bridge.log` });
+        expect(xml).toContain(`<string>${autostart_1.AUTOSTART_LABEL}</string>`);
+        expect(xml).toContain('<string>/bin/zsh</string>');
+        expect(xml).toContain('npx -y @wenrwa/marketplace-cli bridge');
+        expect(xml).toContain('<key>RunAtLoad</key>');
+        expect(xml).toContain('<key>KeepAlive</key>');
+        expect(xml).toContain(`${HOME}/.wen-market/bridge.log`);
+        // The Connect Token must never be baked into the plist — the bridge
+        // reads it from its 0600 config at start.
+        expect(xml).not.toContain('wm_ct_');
+    });
+});
+describe('installAutostart', () => {
+    it('writes the LaunchAgent and bootstraps it via launchctl', async () => {
+        const { deps, writes, runs } = makeDeps();
+        const result = await (0, autostart_1.installAutostart)(deps);
+        expect(result.action).toBe('installed');
+        expect(writes).toHaveLength(1);
+        expect(writes[0].path).toBe(`${HOME}/Library/LaunchAgents/${autostart_1.AUTOSTART_LABEL}.plist`);
+        const flat = runs.map((r) => r.join(' ')).join('\n');
+        expect(flat).toContain('launchctl');
+        expect(flat).toContain(`gui/501/${autostart_1.AUTOSTART_LABEL}`);
+    });
+    it('refuses when no Connect Token is stored yet (bridge could never start)', async () => {
+        const { deps } = makeDeps('darwin', false);
+        const result = await (0, autostart_1.installAutostart)(deps);
+        expect(result.action).toBe('no-token');
+    });
+    it('reports unsupported on non-macOS platforms', async () => {
+        const { deps, writes } = makeDeps('linux');
+        const result = await (0, autostart_1.installAutostart)(deps);
+        expect(result.action).toBe('unsupported');
+        expect(writes).toHaveLength(0);
+    });
+});
+describe('uninstallAutostart', () => {
+    it('boots the agent out and removes the plist', async () => {
+        const { deps, removed, runs } = makeDeps();
+        const result = await (0, autostart_1.uninstallAutostart)(deps);
+        expect(result.action).toBe('uninstalled');
+        expect(removed[0]).toBe(`${HOME}/Library/LaunchAgents/${autostart_1.AUTOSTART_LABEL}.plist`);
+        expect(runs.map((r) => r.join(' ')).join('\n')).toContain('bootout');
+    });
+});

package/dist/__tests__/bridge-repo-checkout.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/bridge-repo-checkout.test.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const repoCheckout_1 = require("../bridge/repoCheckout");
+const BASE = '/Users/t/wenrwa-workspaces';
+const makeDeps = (existing = [], cloneFails = false) => {
+    const runs = [];
+    return {
+        runs,
+        deps: {
+            baseDir: BASE,
+            exists: (p) => existing.includes(p),
+            mkdir: (_p) => { },
+            run: async (cmd, args) => {
+                runs.push([cmd, ...args]);
+                if (cloneFails)
+                    throw new Error('clone failed');
+                return { stdout: '', code: 0 };
+            },
+        },
+    };
+};
+describe('parseRepoFullName', () => {
+    it('handles https, trailing .git, and bare owner/repo', () => {
+        expect((0, repoCheckout_1.parseRepoFullName)('https://github.com/BunnyDAO/CBP')).toBe('BunnyDAO/CBP');
+        expect((0, repoCheckout_1.parseRepoFullName)('https://github.com/BunnyDAO/CBP.git')).toBe('BunnyDAO/CBP');
+        expect((0, repoCheckout_1.parseRepoFullName)('BunnyDAO/CBP')).toBe('BunnyDAO/CBP');
+        expect((0, repoCheckout_1.parseRepoFullName)('not a repo url')).toBeNull();
+    });
+});
+describe('ensureRepoCheckout', () => {
+    it('reuses an existing checkout without running git', async () => {
+        const { deps, runs } = makeDeps([`${BASE}/BunnyDAO/CBP`]);
+        const result = await (0, repoCheckout_1.ensureRepoCheckout)('https://github.com/BunnyDAO/CBP', deps);
+        expect(result).toEqual({ path: `${BASE}/BunnyDAO/CBP`, action: 'existing' });
+        expect(runs).toHaveLength(0);
+    });
+    it('clones a missing repo into the workspace base dir', async () => {
+        const { deps, runs } = makeDeps();
+        const result = await (0, repoCheckout_1.ensureRepoCheckout)('https://github.com/BunnyDAO/CBP.git', deps);
+        expect(result).toEqual({ path: `${BASE}/BunnyDAO/CBP`, action: 'cloned' });
+        expect(runs[0].join(' ')).toBe(`git clone https://github.com/BunnyDAO/CBP.git ${BASE}/BunnyDAO/CBP`);
+    });
+    it('reports failure without throwing when the clone fails (no local git auth, etc.)', async () => {
+        const { deps } = makeDeps([], true);
+        const result = await (0, repoCheckout_1.ensureRepoCheckout)('https://github.com/Private/Repo', deps);
+        expect(result.action).toBe('failed');
+    });
+    it('rejects unparseable repo urls', async () => {
+        const { deps } = makeDeps();
+        const result = await (0, repoCheckout_1.ensureRepoCheckout)('garbage', deps);
+        expect(result.action).toBe('failed');
+    });
+});

package/dist/__tests__/bridge-server.test.js

@@ -140,6 +140,27 @@ describe('bridge WebSocket server', () => {
         });
         expect(bad.status).toBe(403);
     });
+    it('threads repoUrl through resolveCwd into the PTY spawn and the opened frame', async () => {
+        await handle.close();
+        const cwds = [];
+        const factory = { spawn: (o) => { cwds.push(o.cwd); const p = new FakePty(); ptys.push(p); return p; } };
+        handle = await (0, server_1.startBridgeServer)({
+            sessionToken: TOKEN,
+            allowedOrigin: ORIGIN,
+            sessions: new sessionManager_1.SessionManager(factory),
+            resolveCwd: async (repoUrl) => (repoUrl.includes('CBP') ? '/tmp/wenrwa-workspaces/BunnyDAO/CBP' : null),
+        });
+        const { ws, q } = await openAndAuth(handle.port);
+        ws.send(JSON.stringify({ t: 'open', cols: 80, rows: 24, repoUrl: 'https://github.com/BunnyDAO/CBP' }));
+        const opened = await q.next();
+        expect(opened.cwd).toBe('/tmp/wenrwa-workspaces/BunnyDAO/CBP');
+        expect(cwds[0]).toBe('/tmp/wenrwa-workspaces/BunnyDAO/CBP');
+        ws.send(JSON.stringify({ t: 'open', cols: 80, rows: 24, repoUrl: 'https://github.com/Other/Repo' }));
+        const fallback = await q.next();
+        expect(fallback.cwd).toBeUndefined();
+        expect(fallback.note).toContain('home directory');
+        ws.close();
+    });
     it('unauthenticated frames are rejected', async () => {
         const ws = connect(handle.port);
         await new Promise((r) => ws.on('open', r));

package/dist/bridge/autostart.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Bridge autostart (bct follow-up, 2026-07-30) — `wen-market bridge install`.
+ *
+ * Turns the one-liner into one-time-EVER setup: a macOS LaunchAgent starts
+ * the bridge at login and keeps it alive, so the Terminal pane always finds
+ * it. The plist runs through a login shell so the user's PATH (nvm/homebrew
+ * node) resolves; the Connect Token is NEVER baked into the plist — the
+ * bridge reads it from its 0600 config file at start.
+ *
+ * Windows/Linux: not yet supported — the command says so instead of
+ * guessing at Task Scheduler/systemd (add per real demand).
+ */
+export declare const AUTOSTART_LABEL = "com.wenrwa.bridge";
+export interface AutostartDeps {
+    platform: string;
+    homedir: () => string;
+    hasBridgeConfig: () => boolean;
+    mkdir: (path: string) => void;
+    writeFile: (path: string, content: string, mode?: number) => void;
+    removeFile: (path: string) => void;
+    run: (cmd: string, args: string[]) => Promise<{
+        stdout: string;
+        code: number;
+    }>;
+    uid: () => number;
+}
+export interface AutostartResult {
+    action: 'installed' | 'uninstalled' | 'unsupported' | 'no-token';
+    plistPath?: string;
+}
+export declare function launchAgentPlist(opts: {
+    logPath: string;
+}): string;
+export declare function installAutostart(deps: AutostartDeps): Promise<AutostartResult>;
+export declare function uninstallAutostart(deps: AutostartDeps): Promise<AutostartResult>;

package/dist/bridge/autostart.js

@@ -0,0 +1,69 @@
+"use strict";
+/**
+ * Bridge autostart (bct follow-up, 2026-07-30) — `wen-market bridge install`.
+ *
+ * Turns the one-liner into one-time-EVER setup: a macOS LaunchAgent starts
+ * the bridge at login and keeps it alive, so the Terminal pane always finds
+ * it. The plist runs through a login shell so the user's PATH (nvm/homebrew
+ * node) resolves; the Connect Token is NEVER baked into the plist — the
+ * bridge reads it from its 0600 config file at start.
+ *
+ * Windows/Linux: not yet supported — the command says so instead of
+ * guessing at Task Scheduler/systemd (add per real demand).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AUTOSTART_LABEL = void 0;
+exports.launchAgentPlist = launchAgentPlist;
+exports.installAutostart = installAutostart;
+exports.uninstallAutostart = uninstallAutostart;
+exports.AUTOSTART_LABEL = 'com.wenrwa.bridge';
+function launchAgentPlist(opts) {
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${exports.AUTOSTART_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>/bin/zsh</string>
+    <string>-lc</string>
+    <string>exec npx -y @wenrwa/marketplace-cli bridge</string>
+  </array>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>KeepAlive</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${opts.logPath}</string>
+  <key>StandardErrorPath</key>
+  <string>${opts.logPath}</string>
+</dict>
+</plist>
+`;
+}
+function plistPath(deps) {
+    return `${deps.homedir()}/Library/LaunchAgents/${exports.AUTOSTART_LABEL}.plist`;
+}
+async function installAutostart(deps) {
+    if (deps.platform !== 'darwin')
+        return { action: 'unsupported' };
+    if (!deps.hasBridgeConfig())
+        return { action: 'no-token' };
+    const path = plistPath(deps);
+    deps.mkdir(`${deps.homedir()}/Library/LaunchAgents`);
+    deps.writeFile(path, launchAgentPlist({ logPath: `${deps.homedir()}/.wen-market/bridge.log` }), 0o644);
+    const domain = `gui/${deps.uid()}`;
+    // Re-installs: bootout first (ignore failure when not loaded), then bootstrap.
+    await deps.run('launchctl', ['bootout', `${domain}/${exports.AUTOSTART_LABEL}`]).catch(() => { });
+    await deps.run('launchctl', ['bootstrap', domain, path]);
+    return { action: 'installed', plistPath: path };
+}
+async function uninstallAutostart(deps) {
+    if (deps.platform !== 'darwin')
+        return { action: 'unsupported' };
+    const path = plistPath(deps);
+    await deps.run('launchctl', ['bootout', `gui/${deps.uid()}/${exports.AUTOSTART_LABEL}`]).catch(() => { });
+    deps.removeFile(path);
+    return { action: 'uninstalled', plistPath: path };
+}

package/dist/bridge/realPty.js

@@ -68,12 +68,12 @@ function realPtyFactory() {
     const pty = require('node-pty');
     const shell = process.env.SHELL || (os.platform() === 'win32' ? 'powershell.exe' : '/bin/bash');
     return {
-        spawn: ({ cols, rows }) => {
+        spawn: ({ cols, rows, cwd }) => {
             const proc = pty.spawn(shell, [], {
                 name: 'xterm-256color',
                 cols,
                 rows,
-                cwd: os.homedir(),
+                cwd: cwd || os.homedir(),
                 env: process.env,
             });
             return {

package/dist/bridge/repoCheckout.d.ts

@@ -0,0 +1,24 @@
+/**
+ * bct UX round 2 (2026-07-30) — workspace-scoped terminals.
+ *
+ * The arena's mental model is workspace = repo, so the Terminal pane sends
+ * the workspace's GitHub URL with `open`, and the bridge lands the shell in
+ * a local checkout of that repo (cloning on first use with the USER'S own
+ * git credentials — the platform never touches repo auth). Checkouts live
+ * under ~/wenrwa-workspaces/<owner>/<repo>.
+ */
+export interface RepoCheckoutDeps {
+    baseDir: string;
+    exists: (path: string) => boolean;
+    mkdir: (path: string) => void;
+    run: (cmd: string, args: string[]) => Promise<{
+        stdout: string;
+        code: number;
+    }>;
+}
+export interface CheckoutResult {
+    path?: string;
+    action: 'existing' | 'cloned' | 'failed';
+}
+export declare function parseRepoFullName(repoUrl: string): string | null;
+export declare function ensureRepoCheckout(repoUrl: string, deps: RepoCheckoutDeps): Promise<CheckoutResult>;

package/dist/bridge/repoCheckout.js

@@ -0,0 +1,34 @@
+"use strict";
+/**
+ * bct UX round 2 (2026-07-30) — workspace-scoped terminals.
+ *
+ * The arena's mental model is workspace = repo, so the Terminal pane sends
+ * the workspace's GitHub URL with `open`, and the bridge lands the shell in
+ * a local checkout of that repo (cloning on first use with the USER'S own
+ * git credentials — the platform never touches repo auth). Checkouts live
+ * under ~/wenrwa-workspaces/<owner>/<repo>.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseRepoFullName = parseRepoFullName;
+exports.ensureRepoCheckout = ensureRepoCheckout;
+function parseRepoFullName(repoUrl) {
+    const m = repoUrl.match(/github\.com[/:]([\w.-]+)\/([\w.-]+?)(?:\.git)?(?:[/?#].*)?$/) ||
+        repoUrl.match(/^([\w.-]+)\/([\w.-]+)$/);
+    return m ? `${m[1]}/${m[2]}` : null;
+}
+async function ensureRepoCheckout(repoUrl, deps) {
+    const fullName = parseRepoFullName(repoUrl);
+    if (!fullName)
+        return { action: 'failed' };
+    const path = `${deps.baseDir}/${fullName}`;
+    if (deps.exists(path))
+        return { path, action: 'existing' };
+    try {
+        deps.mkdir(path.slice(0, path.lastIndexOf('/')));
+        await deps.run('git', ['clone', repoUrl, path]);
+        return { path, action: 'cloned' };
+    }
+    catch {
+        return { action: 'failed' };
+    }
+}

package/dist/bridge/server.d.ts

@@ -5,6 +5,9 @@ export interface BridgeServerOpts {
     sessions: SessionManager;
     /** 0 (default) = ephemeral port. */
     port?: number;
+    /** Workspace-scoped terminals: resolve a repo URL to a local checkout dir
+     *  (cloned on first use). Absent/null result → shell opens in $HOME. */
+    resolveCwd?: (repoUrl: string) => Promise<string | null>;
 }
 export interface BridgeServerHandle {
     port: number;

package/dist/bridge/server.js

@@ -137,9 +137,19 @@ function startBridgeServer(opts) {
             try {
                 switch (frame.t) {
                     case 'open': {
-                        const sessionId = opts.sessions.open({ cols: frame.cols, rows: frame.rows });
-                        attachTo(sessionId);
-                        send(ws, { t: 'opened', sessionId });
+                        const openSession = (cwd, note) => {
+                            const sessionId = opts.sessions.open({ cols: frame.cols, rows: frame.rows, cwd });
+                            attachTo(sessionId);
+                            send(ws, { t: 'opened', sessionId, ...(cwd ? { cwd } : {}), ...(note ? { note } : {}) });
+                        };
+                        if (frame.repoUrl && opts.resolveCwd) {
+                            opts.resolveCwd(frame.repoUrl)
+                                .then((cwd) => openSession(cwd ?? undefined, cwd ? undefined : 'repo checkout unavailable — opened in home directory'))
+                                .catch(() => openSession(undefined, 'repo checkout failed — opened in home directory'));
+                        }
+                        else {
+                            openSession();
+                        }
                         break;
                     }
                     case 'attach': {

package/dist/bridge/sessionManager.d.ts

@@ -9,6 +9,7 @@ export interface PtyFactory {
     spawn(opts: {
         cols: number;
         rows: number;
+        cwd?: string;
     }): PtyLike;
 }
 export type SinkFrame = {
@@ -35,6 +36,7 @@ export declare class SessionManager {
     open(opts: {
         cols: number;
         rows: number;
+        cwd?: string;
     }): string;
     attach(sessionId: string, sink: Sink): AttachmentHandle;
     close(sessionId: string): void;

package/dist/commands/bridge.js

@@ -47,6 +47,7 @@ exports.bridgeCommand = exports.DEFAULT_BRIDGE_PORT = void 0;
  */
 const crypto = __importStar(require("crypto"));
 const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
 const child_process_1 = require("child_process");
 const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
@@ -55,6 +56,8 @@ const server_1 = require("../bridge/server");
 const realPty_1 = require("../bridge/realPty");
 const config_1 = require("../bridge/config");
 const mcpRegister_1 = require("../bridge/mcpRegister");
+const autostart_1 = require("../bridge/autostart");
+const repoCheckout_1 = require("../bridge/repoCheckout");
 const config_2 = require("../utils/config");
 exports.DEFAULT_BRIDGE_PORT = 8377;
 const DEFAULT_ORIGIN = 'https://app.hiveop.io';
@@ -72,6 +75,16 @@ const execRunner = (cmd, args) => new Promise((resolve, reject) => {
             resolve({ stdout: stdout ?? '', code: 0 });
     });
 });
+const realAutostartDeps = () => ({
+    platform: os.platform(),
+    homedir: os.homedir,
+    hasBridgeConfig: () => (0, config_1.loadBridgeConfig)() !== null,
+    mkdir: (p) => fs.mkdirSync(p, { recursive: true }),
+    writeFile: (p, content, mode) => fs.writeFileSync(p, content, mode !== undefined ? { mode } : {}),
+    removeFile: (p) => fs.rmSync(p, { force: true }),
+    run: execRunner,
+    uid: () => process.getuid?.() ?? 501,
+});
 exports.bridgeCommand = new commander_1.Command('bridge')
     .description('Run the local Terminal Bridge for the arena Terminal Pane (BYO Claude Code)')
     .option('--token <connectToken>', 'Connect Token from arena settings (stored on first run, never logged)')
@@ -108,15 +121,60 @@ exports.bridgeCommand = new commander_1.Command('bridge')
         console.log(chalk_1.default.yellow('! claude binary not found — bridge will run, but install Claude Code for MCP world-wiring'));
     // 3. Serve.
     const sessionToken = crypto.randomBytes(16).toString('hex');
+    const workspacesBase = `${os.homedir()}/wenrwa-workspaces`;
     const handle = await (0, server_1.startBridgeServer)({
         sessionToken,
         allowedOrigin: opts.origin,
         sessions: new sessionManager_1.SessionManager((0, realPty_1.realPtyFactory)()),
         port: Number(opts.port),
+        // Workspace-scoped shells: the pane sends the workspace's GitHub URL;
+        // we land the PTY in a local checkout (user's own git credentials).
+        resolveCwd: async (repoUrl) => {
+            const result = await (0, repoCheckout_1.ensureRepoCheckout)(repoUrl, {
+                baseDir: workspacesBase,
+                exists: (p) => fs.existsSync(p),
+                mkdir: (p) => fs.mkdirSync(p, { recursive: true }),
+                run: execRunner,
+            });
+            if (result.action === 'cloned')
+                console.log(chalk_1.default.green(`✓ Cloned ${repoUrl} → ${result.path}`));
+            return result.path ?? null;
+        },
     });
     (0, config_1.writeDiscoveryFile)({ port: handle.port, sessionToken });
     fs.appendFileSync((0, config_1.bridgeLogPath)(), `${new Date().toISOString()} bridge up on ${handle.address}:${handle.port}\n`);
     console.log(chalk_1.default.cyan(`Terminal Bridge listening on ${handle.address}:${handle.port} (origin: ${opts.origin})`));
     console.log(chalk_1.default.dim('Open your arena workspace and add a Terminal pane — it will connect automatically.'));
     console.log(chalk_1.default.dim('Ctrl+C stops the bridge (terminal sessions end with it).'));
+    console.log(chalk_1.default.dim('Tip: `wen-market bridge install` makes this start automatically at login.'));
+});
+exports.bridgeCommand
+    .command('install')
+    .description('Start the bridge automatically at login (macOS LaunchAgent)')
+    .action(async () => {
+    const result = await (0, autostart_1.installAutostart)(realAutostartDeps());
+    if (result.action === 'installed') {
+        console.log(chalk_1.default.green(`✓ Bridge installed as a login service (${result.plistPath})`));
+        console.log(chalk_1.default.dim('It is running now and will start at every login. `wen-market bridge uninstall` removes it.'));
+    }
+    else if (result.action === 'no-token') {
+        console.error(chalk_1.default.red('No Connect Token stored yet. Run once first: wen-market bridge --token <wm_ct_…>'));
+        process.exit(1);
+    }
+    else {
+        console.error(chalk_1.default.yellow('Autostart is currently macOS-only — run `wen-market bridge` manually on this platform.'));
+        process.exit(1);
+    }
+});
+exports.bridgeCommand
+    .command('uninstall')
+    .description('Remove the login autostart service')
+    .action(async () => {
+    const result = await (0, autostart_1.uninstallAutostart)(realAutostartDeps());
+    if (result.action === 'uninstalled') {
+        console.log(chalk_1.default.green('✓ Bridge autostart removed.'));
+    }
+    else {
+        console.error(chalk_1.default.yellow('Autostart is currently macOS-only — nothing to remove here.'));
+    }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenrwa/marketplace-cli",
-  "version": "0.4.2",
+  "version": "0.4.4",
   "description": "CLI tool for the Wenrwa Agent Marketplace — monitor bounties, agents, workspaces, and treasury from your terminal",
   "author": "Wenrwa <dev@wenrwa.com>",
   "license": "MIT",