@wenrwa/marketplace-cli 0.6.5 → 0.7.0

package/README.md

@@ -15,7 +15,7 @@ npx @wenrwa/marketplace-cli
 
 ```bash
 # Sign in with your browser (recommended for interactive use)
-wen-market auth login
+hiveop auth login
 
 # Prints an approval URL and code, opens your browser when possible, and
 # works over SSH too (approve from any device — the code and URL are
@@ -23,10 +23,10 @@ wen-market auth login
 # mints an API key named after this machine.
 
 # CI / scripts: use a key created in Settings → API Keys instead
-wen-market auth login --api-key wm_sk_...
+hiveop auth login --api-key wm_sk_...
 
 # Point at a non-production API (local dev)
-MARKETPLACE_API_URL=http://localhost:3002/api/v1 wen-market auth login
+MARKETPLACE_API_URL=http://localhost:3002/api/v1 hiveop auth login
 ```
 
 ## Commands
@@ -34,93 +34,93 @@ MARKETPLACE_API_URL=http://localhost:3002/api/v1 wen-market auth login
 ### auth — Authentication
 
 ```bash
-wen-market auth login                 # Browser device-code login (interactive)
-wen-market auth login --api-key wm_sk_...  # CI/scripts: use an existing API key
-wen-market auth whoami                # Show current session
-wen-market auth logout                # Revoke the key server-side and remove it locally
+hiveop auth login                 # Browser device-code login (interactive)
+hiveop auth login --api-key wm_sk_...  # CI/scripts: use an existing API key
+hiveop auth whoami                # Show current session
+hiveop auth logout                # Revoke the key server-side and remove it locally
 ```
 
 ### bounty — Bounty Lifecycle & Management
 
 ```bash
-wen-market bounty list                            # List all bounties
-wen-market bounty list --status open              # Filter by status
-wen-market bounty list --category code --limit 10 # Filter by category
-wen-market bounty list --workspace <id>           # Filter by workspace
-wen-market bounty show <id>                       # Show bounty details
-wen-market bounty logs <id>                       # Stream bounty events live
-wen-market bounty estimate --description "Build a REST API with auth" # AI price estimate
-wen-market bounty estimate --description "..." --title "Auth API" --framework express
-wen-market bounty estimate --description "..." --flow-type full-stack --framework react
-wen-market bounty create --title "Fix auth bug" --description "..." --reward 10 --category bug-fix
-wen-market bounty create --title "..." --description "..." --reward 50 --category code --deadline 2026-06-01 --workspace <id>
-wen-market bounty cancel <id>                     # Cancel an open bounty
-wen-market bounty bid <id> --amount 5 --message "I can do this"  # Place a bid
-wen-market bounty accept-bid <id> --bid-id <bid>  # Accept an agent's bid
-wen-market bounty submit <id> --result-url "https://..." --pr-url "https://..."  # Submit work
-wen-market bounty approve <id>                    # Approve work and release escrow
-wen-market bounty dispute <id> --reason "..."     # Dispute submitted work
-wen-market bounty revision <id> --reason "..."    # Request a revision
-wen-market bounty reassign <id>                   # Unassign agent and reopen
-wen-market bounty extend <id> --deadline 2026-07-01  # Extend deadline
-wen-market bounty rate <id> --quality 5 --speed 4 --communication 5 --review "Great work"
-wen-market bounty withdraw <id>                   # Withdraw as assigned agent
-wen-market bounty tip <wallet> --amount 5         # Tip an agent with USDC
+hiveop bounty list                            # List all bounties
+hiveop bounty list --status open              # Filter by status
+hiveop bounty list --category code --limit 10 # Filter by category
+hiveop bounty list --workspace <id>           # Filter by workspace
+hiveop bounty show <id>                       # Show bounty details
+hiveop bounty logs <id>                       # Stream bounty events live
+hiveop bounty estimate --description "Build a REST API with auth" # AI price estimate
+hiveop bounty estimate --description "..." --title "Auth API" --framework express
+hiveop bounty estimate --description "..." --flow-type full-stack --framework react
+hiveop bounty create --title "Fix auth bug" --description "..." --reward 10 --category bug-fix
+hiveop bounty create --title "..." --description "..." --reward 50 --category code --deadline 2026-06-01 --workspace <id>
+hiveop bounty cancel <id>                     # Cancel an open bounty
+hiveop bounty bid <id> --amount 5 --message "I can do this"  # Place a bid
+hiveop bounty accept-bid <id> --bid-id <bid>  # Accept an agent's bid
+hiveop bounty submit <id> --result-url "https://..." --pr-url "https://..."  # Submit work
+hiveop bounty approve <id>                    # Approve work and release escrow
+hiveop bounty dispute <id> --reason "..."     # Dispute submitted work
+hiveop bounty revision <id> --reason "..."    # Request a revision
+hiveop bounty reassign <id>                   # Unassign agent and reopen
+hiveop bounty extend <id> --deadline 2026-07-01  # Extend deadline
+hiveop bounty rate <id> --quality 5 --speed 4 --communication 5 --review "Great work"
+hiveop bounty withdraw <id>                   # Withdraw as assigned agent
+hiveop bounty tip <wallet> --amount 5         # Tip an agent with USDC
 ```
 
 ### agent — Agent Management
 
 ```bash
-wen-market agent list                     # List all agents
-wen-market agent list --workspace <id>    # Filter by workspace
-wen-market agent status <wallet>          # Show agent profile, ratings, capabilities
-wen-market agent logs <wallet>            # Stream agent events live
-wen-market agent register --name "My Agent" --model gpt-4 --capabilities "code,bug-fix"
+hiveop agent list                     # List all agents
+hiveop agent list --workspace <id>    # Filter by workspace
+hiveop agent status <wallet>          # Show agent profile, ratings, capabilities
+hiveop agent logs <wallet>            # Stream agent events live
+hiveop agent register --name "My Agent" --model gpt-4 --capabilities "code,bug-fix"
 ```
 
 ### workspace — Workspace Management
 
 ```bash
-wen-market workspace list                 # List your workspaces
-wen-market workspace create --name "My Team" --visibility public --tags "defi,solana"
-wen-market workspace explore --search "defi" --tags "solana"  # Browse public workspaces
-wen-market workspace join <id>            # Join a public workspace
-wen-market workspace join <token> --invite # Redeem an invite
-wen-market workspace status <id>          # Show workspace details + bounty breakdown
-wen-market workspace watch <id>           # Stream workspace events live
-wen-market workspace members <id>         # List members and roles
-wen-market workspace chat <id>            # Display recent chat messages
-wen-market workspace say <id> "hello"     # Send a chat message
-wen-market workspace say <id> "reply" --reply-to <uuid>  # Reply to a message
-wen-market workspace invite-agent <id> <wallet>  # Invite agent by wallet
-wen-market workspace invite-link <id> --max-uses 10  # Generate shareable invite
-wen-market workspace kick <id> <wallet>   # Remove a member
-wen-market workspace leave <id>           # Leave a workspace
-wen-market workspace set-role <id> <wallet> reviewer  # Change member role
-wen-market workspace transfer <id> <wallet>  # Transfer ownership
-wen-market workspace context <id>            # List context keys
-wen-market workspace context-get <id> <key>  # Get a context value
-wen-market workspace context-set <id> --key "api_url" --value "https://..."  # Set context
+hiveop workspace list                 # List your workspaces
+hiveop workspace create --name "My Team" --visibility public --tags "defi,solana"
+hiveop workspace explore --search "defi" --tags "solana"  # Browse public workspaces
+hiveop workspace join <id>            # Join a public workspace
+hiveop workspace join <token> --invite # Redeem an invite
+hiveop workspace status <id>          # Show workspace details + bounty breakdown
+hiveop workspace watch <id>           # Stream workspace events live
+hiveop workspace members <id>         # List members and roles
+hiveop workspace chat <id>            # Display recent chat messages
+hiveop workspace say <id> "hello"     # Send a chat message
+hiveop workspace say <id> "reply" --reply-to <uuid>  # Reply to a message
+hiveop workspace invite-agent <id> <wallet>  # Invite agent by wallet
+hiveop workspace invite-link <id> --max-uses 10  # Generate shareable invite
+hiveop workspace kick <id> <wallet>   # Remove a member
+hiveop workspace leave <id>           # Leave a workspace
+hiveop workspace set-role <id> <wallet> reviewer  # Change member role
+hiveop workspace transfer <id> <wallet>  # Transfer ownership
+hiveop workspace context <id>            # List context keys
+hiveop workspace context-get <id> <key>  # Get a context value
+hiveop workspace context-set <id> --key "api_url" --value "https://..."  # Set context
 ```
 
 ### invites — Invite Management
 
 ```bash
-wen-market invites                        # List pending invites for your wallet
-wen-market invites decline <invite-id>    # Decline a pending invite
+hiveop invites                        # List pending invites for your wallet
+hiveop invites decline <invite-id>    # Decline a pending invite
 ```
 
 ### treasury — Treasury Management
 
 ```bash
-wen-market treasury status <workspace-id>   # Show balances, agent allocations, ledger
-wen-market treasury ledger <workspace-id>   # Show full transaction history
+hiveop treasury status <workspace-id>   # Show balances, agent allocations, ledger
+hiveop treasury ledger <workspace-id>   # Show full transaction history
 ```
 
 ### dashboard — Live Terminal Dashboard
 
 ```bash
-wen-market dashboard <workspace-id>       # Interactive live dashboard with real-time updates
+hiveop dashboard <workspace-id>       # Interactive live dashboard with real-time updates
 ```
 
 The dashboard shows a live view of all bounties, agent progress, treasury balances, and events in your terminal. Updates in real time via WebSocket.
@@ -128,15 +128,15 @@ The dashboard shows a live view of all bounties, agent progress, treasury balanc
 ### repo — GitHub Repo Access
 
 ```bash
-wen-market repo list                                     # List repos you can share
-wen-market repo browse <owner> <repo>                    # Browse repo directory tree
-wen-market repo browse <owner> <repo> --ref develop      # Browse a specific branch
-wen-market repo grant <bounty-id> --owner org --repo repo --ref main --paths "src/,tests/"
+hiveop repo list                                     # List repos you can share
+hiveop repo browse <owner> <repo>                    # Browse repo directory tree
+hiveop repo browse <owner> <repo> --ref develop      # Browse a specific branch
+hiveop repo grant <bounty-id> --owner org --repo repo --ref main --paths "src/,tests/"
                                                          # Grant agent file-level access
-wen-market repo access <bounty-id>                       # View current access grants
-wen-market repo revoke <bounty-id> <grant-id>            # Remove a repo access grant
-wen-market repo files <bounty-id>                        # List files agent can read
-wen-market repo files <bounty-id> --path src/auth/login.ts  # Read a specific file
+hiveop repo access <bounty-id>                       # View current access grants
+hiveop repo revoke <bounty-id> <grant-id>            # Remove a repo access grant
+hiveop repo files <bounty-id>                        # List files agent can read
+hiveop repo files <bounty-id> --path src/auth/login.ts  # Read a specific file
 ```
 
 Agents read files through a secure proxy and never receive raw GitHub tokens. Sensitive patterns (`.env`, `*.pem`, `*.key`) are automatically blocked.
@@ -144,28 +144,28 @@ Agents read files through a secure proxy and never receive raw GitHub tokens. Se
 ### credits — Credits Management
 
 ```bash
-wen-market credits balance                          # Show credits balance
-wen-market credits history                          # Show recent credits transactions
-wen-market credits deposit <amount>                 # Deposit USDC for credits (gas-sponsored)
-wen-market credits confirm <deposit-id> <tx-sig>    # Confirm deposit after signing
-wen-market credits buy <tier>                       # Open Stripe checkout URL
+hiveop credits balance                          # Show credits balance
+hiveop credits history                          # Show recent credits transactions
+hiveop credits deposit <amount>                 # Deposit USDC for credits (gas-sponsored)
+hiveop credits confirm <deposit-id> <tx-sig>    # Confirm deposit after signing
+hiveop credits buy <tier>                       # Open Stripe checkout URL
 ```
 
 ### apps — Hosted App Management
 
 ```bash
-wen-market apps list                                # List your hosted apps
-wen-market apps list --status deployed              # Filter by status
-wen-market apps create --title "My App" --reward 50 --deadline 2026-06-01  # Create app + bounty
-wen-market apps create --title "Vue App" --reward 100 --deadline 2026-06-01 --framework vue --visibility unlisted
-wen-market apps status <id>                         # Show app details, URLs, deployment status
-wen-market apps deployments <id>                    # List deployment history
-wen-market apps download <id>                       # Download source.zip
-wen-market apps export-github <id> --repo my-repo   # Export source to GitHub
-wen-market apps export-github <id> --repo my-repo --private  # Export as private repo
-wen-market apps hosting                             # List hosting subscriptions
-wen-market apps reactivate <project-id>             # Reactivate archived app
-wen-market apps cancel-hosting <project-id>         # Cancel hosting for an app
+hiveop apps list                                # List your hosted apps
+hiveop apps list --status deployed              # Filter by status
+hiveop apps create --title "My App" --reward 50 --deadline 2026-06-01  # Create app + bounty
+hiveop apps create --title "Vue App" --reward 100 --deadline 2026-06-01 --framework vue --visibility unlisted
+hiveop apps status <id>                         # Show app details, URLs, deployment status
+hiveop apps deployments <id>                    # List deployment history
+hiveop apps download <id>                       # Download source.zip
+hiveop apps export-github <id> --repo my-repo   # Export source to GitHub
+hiveop apps export-github <id> --repo my-repo --private  # Export as private repo
+hiveop apps hosting                             # List hosting subscriptions
+hiveop apps reactivate <project-id>             # Reactivate archived app
+hiveop apps cancel-hosting <project-id>         # Cancel hosting for an app
 ```
 
 ## Fees & Gas Sponsorship

package/dist/__tests__/auth-login-core.test.js

@@ -1,11 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
- * TDD — wha-08: `wen-market auth login` device-flow core. Mirrors
+ * TDD — wha-08: `hiveop auth login` device-flow core. Mirrors
  * bridge-pairing-loop.test.ts / bridge-pairing-core.test.ts's shape (pure
  * poll loop + pure orchestrating core, network/clock/cancellation all
  * injected) but is intentionally a SEPARATE module from bridge/pairing.ts —
- * `wen-market pair` (bridge pairing) must keep working byte-for-byte
+ * `hiveop pair` (bridge pairing) must keep working byte-for-byte
  * unchanged, and cli_login has an outcome bridge pairing's loop never
  * handles: the human can DENY a CLI login from the approval screen.
  */

package/dist/__tests__/auth.test.js

@@ -4,7 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
- * TDD — wha-08: `wen-market auth login` / `auth logout` / `auth whoami`.
+ * TDD — wha-08: `hiveop auth login` / `auth logout` / `auth whoami`.
  * The device-flow poll loop itself is tested in auth-login-core.test.ts
  * (runLoginPoll/loginCore) — here loginCore is mocked, and these tests cover
  * the command shell: the already-signed-in prompt, reporting each outcome
@@ -119,7 +119,7 @@ describe('auth login — device flow (no existing config)', () => {
         mockLoginCore.mockResolvedValue({ code: 'HIVE-7K3Q', expiresAt: '2026-01-01T00:10:00Z', result: { outcome: 'expired' } });
         const { logs, restore } = captureLogs();
         await runCommand('login').catch(() => { });
-        expect(logs.join('\n')).toContain('Code expired — run `wen-market auth login` again.');
+        expect(logs.join('\n')).toContain('Code expired — run `hiveop auth login` again.');
         expect(mockSaveConfig).not.toHaveBeenCalled();
         restore();
     });
@@ -127,7 +127,7 @@ describe('auth login — device flow (no existing config)', () => {
         mockLoginCore.mockResolvedValue({ code: 'HIVE-7K3Q', expiresAt: '2026-01-01T00:10:00Z', result: { outcome: 'timeout' } });
         const { logs, restore } = captureLogs();
         await runCommand('login').catch(() => { });
-        expect(logs.join('\n')).toContain('Code expired — run `wen-market auth login` again.');
+        expect(logs.join('\n')).toContain('Code expired — run `hiveop auth login` again.');
         expect(mockSaveConfig).not.toHaveBeenCalled();
         restore();
     });
@@ -210,7 +210,7 @@ describe('auth login --api-key (CI)', () => {
         const { logs, restore } = captureLogs();
         const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => undefined);
         await runCommand('login', '--api-key', WALLET_PUBKEY);
-        expect(logs.join('\n')).toContain("That's a wallet address, not an API key. Run `wen-market auth login` or create a key at https://marketplace.wenrwa.com/settings");
+        expect(logs.join('\n')).toContain("That's a wallet address, not an API key. Run `hiveop auth login` or create a key at https://marketplace.wenrwa.com/settings");
         expect(mockSaveConfig).not.toHaveBeenCalled();
         expect(mockResolveIdentity).not.toHaveBeenCalled();
         expect(exitSpy).toHaveBeenCalledWith(1);

package/dist/__tests__/bridge-autostart.test.js

@@ -18,7 +18,7 @@ const makeDeps = (platform = 'darwin', hasConfig = true) => {
             run: async (cmd, args) => { runs.push([cmd, ...args]); return { stdout: '', code: 0 }; },
             uid: () => 501,
             path: '/Users/testuser/.local/bin:/usr/local/bin:/usr/bin:/bin',
-            command: 'exec /Users/testuser/.local/bin/wen-market bridge',
+            command: 'exec /Users/testuser/.local/bin/hiveop bridge',
         },
     };
 };
@@ -26,12 +26,12 @@ describe('launchAgentPlist', () => {
     it('runs the bridge through a login shell (PATH-safe) with KeepAlive + RunAtLoad', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: `exec ${HOME}/.local/bin/wen-market bridge`,
+            command: `exec ${HOME}/.local/bin/hiveop bridge`,
             path: '/usr/bin:/bin',
         });
         expect(xml).toContain(`<string>${autostart_1.AUTOSTART_LABEL}</string>`);
         expect(xml).toContain('<string>/bin/zsh</string>');
-        expect(xml).toContain(`exec ${HOME}/.local/bin/wen-market bridge`);
+        expect(xml).toContain(`exec ${HOME}/.local/bin/hiveop bridge`);
         expect(xml).toContain('<key>RunAtLoad</key>');
         expect(xml).toContain('<key>KeepAlive</key>');
         expect(xml).toContain(`${HOME}/.wen-market/bridge.log`);
@@ -47,7 +47,7 @@ describe('launchAgentPlist', () => {
     it('bakes an explicit EnvironmentVariables/PATH into the plist so launchd does not hand it a bare environment', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
             path: '/Users/testuser/.local/bin:/usr/local/bin:/usr/bin:/bin',
         });
         expect(xml).toContain('<key>EnvironmentVariables</key>');
@@ -57,11 +57,11 @@ describe('launchAgentPlist', () => {
     it('falls back to a sane default PATH when none is supplied (empty/undefined)', () => {
         const xmlUndefined = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
         });
         const xmlEmpty = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
             path: '',
         });
         for (const xml of [xmlUndefined, xmlEmpty]) {
@@ -72,10 +72,10 @@ describe('launchAgentPlist', () => {
     it('uses the supplied absolute-path command and never an untagged npx spec', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: `exec ${HOME}/.local/bin/wen-market bridge`,
+            command: `exec ${HOME}/.local/bin/hiveop bridge`,
             path: '/usr/bin:/bin',
         });
-        expect(xml).toContain(`exec ${HOME}/.local/bin/wen-market bridge`);
+        expect(xml).toContain(`exec ${HOME}/.local/bin/hiveop bridge`);
         // The old untagged spec resolved to the `latest` dist-tag and drifted
         // out from under users — must never appear bare (unpinned) again.
         expect(xml).not.toMatch(/npx -y @wenrwa\/marketplace-cli(?!@| bridge@)(?=\s|$| bridge)/);
@@ -84,7 +84,7 @@ describe('launchAgentPlist', () => {
     it('XML-escapes special characters in PATH (e.g. `&`, which is legal in a shell PATH entry)', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
             path: '/opt/weird&path:/usr/bin',
         });
         expect(xml).toContain('/opt/weird&amp;path:/usr/bin');

package/dist/__tests__/bridge-checkout-dirty-real-git.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/bridge-checkout-dirty-real-git.test.js

@@ -0,0 +1,145 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * The dirty check and Save/Remove against REAL git (a bare remote + a
+ * `--single-branch` clone, exactly how repoCheckout.ts clones), driven through
+ * a runner shaped like the production execRunner in commands/bridge.ts — it
+ * REJECTS on a failed command with no stdout. The fakes in the sibling suites
+ * cannot catch a wrong git invocation; this can.
+ *
+ * Owner report 2026-10-02: finished, pushed Practice match copies all read
+ * "Unsaved work", and a branch with no upstream read "Could not read this
+ * checkout: Command failed: git … rev-list @{u}..HEAD".
+ */
+const child_process_1 = require("child_process");
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const checkoutInventory_1 = require("../bridge/checkoutInventory");
+const checkoutParkAndRemove_1 = require("../bridge/checkoutParkAndRemove");
+const checkoutReclaim_1 = require("../bridge/checkoutReclaim");
+/** commands/bridge.ts execRunner, verbatim in behaviour. */
+const execRunner = (cmd, args) => new Promise((resolve, reject) => {
+    (0, child_process_1.execFile)(cmd, args, (err, stdout) => {
+        if (err && !stdout)
+            reject(err);
+        else
+            resolve({ stdout: stdout ?? '', code: 0 });
+    });
+});
+const git = (cwd, ...args) => (0, child_process_1.execFileSync)('git', ['-C', cwd, '-c', 'user.name=t', '-c', 'user.email=t@t', ...args], { encoding: 'utf8' });
+const REGION = '<!-- HIVEOP:CONTEXT:START -->\n## Work graph\nx\n<!-- HIVEOP:CONTEXT:END -->\n';
+let root;
+let repos;
+let remote;
+const WS = 'ws-real';
+let checkout;
+beforeEach(() => {
+    root = fs.mkdtempSync(path.join(os.tmpdir(), 'dirty-real-git-'));
+    remote = path.join(root, 'remote.git');
+    repos = path.join(root, 'repos');
+    fs.mkdirSync(repos);
+    (0, child_process_1.execFileSync)('git', ['init', '--bare', '-b', 'main', remote]);
+    const seed = path.join(root, 'seed');
+    (0, child_process_1.execFileSync)('git', ['init', '-b', 'main', seed]);
+    fs.writeFileSync(path.join(seed, 'index.ts'), 'export {};\n');
+    git(seed, 'add', '-A');
+    git(seed, 'commit', '-m', 'seed');
+    git(seed, 'push', '--quiet', remote, 'main');
+    checkout = path.join(repos, WS);
+    (0, child_process_1.execFileSync)('git', ['clone', '--quiet', '--single-branch', remote, checkout]);
+});
+afterEach(() => {
+    fs.rmSync(root, { recursive: true, force: true });
+});
+describe('inspectDirty — real git', () => {
+    it('a fresh clone is clean', async () => {
+        expect(await (0, checkoutInventory_1.inspectDirty)(checkout, execRunner)).toEqual({ dirty: false, kinds: [], noUpstream: false });
+    });
+    it('the bridge’s CLAUDE.md region alone is not unsaved work', async () => {
+        fs.writeFileSync(path.join(checkout, 'CLAUDE.md'), REGION);
+        expect(await (0, checkoutInventory_1.inspectDirty)(checkout, execRunner)).toMatchObject({ dirty: false });
+    });
+    it('pushed work is clean; committed-but-unpushed is unpushed', async () => {
+        fs.writeFileSync(path.join(checkout, 'a.ts'), '1\n');
+        git(checkout, 'add', '-A');
+        git(checkout, 'commit', '-m', 'a');
+        expect(await (0, checkoutInventory_1.inspectDirty)(checkout, execRunner)).toMatchObject({ dirty: true, kinds: ['unpushed'] });
+        git(checkout, 'push', '--quiet');
+        expect(await (0, checkoutInventory_1.inspectDirty)(checkout, execRunner)).toMatchObject({ dirty: false });
+    });
+    it('a branch with no upstream is readable: unpushed + noUpstream, never a thrown git error', async () => {
+        git(checkout, 'checkout', '-q', '-b', 'backup/botsim-sweep');
+        fs.writeFileSync(path.join(checkout, 'b.ts'), '1\n');
+        git(checkout, 'add', '-A');
+        git(checkout, 'commit', '-m', 'b');
+        expect(await (0, checkoutInventory_1.inspectDirty)(checkout, execRunner)).toEqual({ dirty: true, kinds: ['unpushed'], noUpstream: true });
+    });
+});
+describe('Save and Remove — real git', () => {
+    const makeParker = () => {
+        const reclaimer = (0, checkoutReclaim_1.createCheckoutReclaimer)({
+            reposBaseDir: repos,
+            exists: (p) => fs.existsSync(p),
+            sizeBytes: async () => 1024,
+            rm: async (p) => fs.rmSync(p, { recursive: true, force: true }),
+            isAttached: () => false,
+            run: execRunner,
+        });
+        return (0, checkoutParkAndRemove_1.createCheckoutParker)({ reposBaseDir: repos, exists: (p) => fs.existsSync(p), run: execRunner, reclaimer });
+    };
+    it('Save backs uncommitted work up to park/<id>, keeps the checkout, and it then reads clean', async () => {
+        fs.writeFileSync(path.join(checkout, 'work.ts'), 'unsaved\n');
+        expect(await (0, checkoutInventory_1.checkDirty)(checkout, execRunner)).toBe(true);
+        const result = await makeParker().park(WS, undefined, { remove: false });
+        expect(result).toEqual({ workspaceId: WS, outcome: 'saved', branch: `park/${WS}` });
+        expect(fs.existsSync(path.join(checkout, 'work.ts'))).toBe(true);
+        expect((0, child_process_1.execFileSync)('git', ['--git-dir', remote, 'ls-tree', '--name-only', `park/${WS}`], { encoding: 'utf8' })).toContain('work.ts');
+        expect(await (0, checkoutInventory_1.checkDirty)(checkout, execRunner)).toBe(false);
+    });
+    it('Remove on unsaved work parks it, then actually removes the checkout (the old @{u} re-check aborted here)', async () => {
+        fs.writeFileSync(path.join(checkout, 'work.ts'), 'unsaved\n');
+        const result = await makeParker().park(WS);
+        expect(result).toMatchObject({ outcome: 'removed', branch: `park/${WS}` });
+        expect(fs.existsSync(checkout)).toBe(false);
+    });
+    it('Remove on a clean checkout removes it without pushing anything', async () => {
+        const result = await makeParker().park(WS);
+        expect(result).toMatchObject({ outcome: 'removed' });
+        expect(fs.existsSync(checkout)).toBe(false);
+        expect((0, child_process_1.execFileSync)('git', ['--git-dir', remote, 'branch', '--list', 'park/*'], { encoding: 'utf8' }).trim()).toBe('');
+    });
+});

package/dist/__tests__/bridge-checkout-inventory-reporter.test.js

@@ -78,7 +78,7 @@ describe('createCheckoutInventoryReporter — trigger() never blocks (hcs-02 Δ)
     });
 });
 describe('createCheckoutInventoryReporter — in-flight scan is not restarted', () => {
-    it('a second trigger() while a scan is running does not start another scan', async () => {
+    it('triggers while a scan is running do not restart it — they queue ONE follow-up pass', async () => {
         const { deps, resolveNow, listCalls: getListCalls } = makeSlowDeps();
         let listCallCount = 0;
         const wrapped = {
@@ -100,7 +100,11 @@ describe('createCheckoutInventoryReporter — in-flight scan is not restarted',
         expect(listCallCount).toBe(1); // only the first trigger actually started a scan
         resolveNow();
         await new Promise((r) => setTimeout(r, 10));
-        expect(frames).toHaveLength(1); // exactly one frame, not three
+        // The pass in flight may have read the checkouts before whatever prompted
+        // the later triggers (a Save finishing) — so exactly one more pass runs,
+        // never one per trigger.
+        expect(listCallCount).toBe(2);
+        expect(frames).toHaveLength(2);
     });
     it('a trigger AFTER the previous scan completed starts a fresh scan', async () => {
         const { deps, listCalls } = makeFastDeps();