@wenrwa/marketplace-cli 0.6.6 → 0.7.1

package/README.md

@@ -15,7 +15,7 @@ npx @wenrwa/marketplace-cli
 
 ```bash
 # Sign in with your browser (recommended for interactive use)
-wen-market auth login
+hiveop auth login
 
 # Prints an approval URL and code, opens your browser when possible, and
 # works over SSH too (approve from any device — the code and URL are
@@ -23,10 +23,10 @@ wen-market auth login
 # mints an API key named after this machine.
 
 # CI / scripts: use a key created in Settings → API Keys instead
-wen-market auth login --api-key wm_sk_...
+hiveop auth login --api-key wm_sk_...
 
 # Point at a non-production API (local dev)
-MARKETPLACE_API_URL=http://localhost:3002/api/v1 wen-market auth login
+MARKETPLACE_API_URL=http://localhost:3002/api/v1 hiveop auth login
 ```
 
 ## Commands
@@ -34,93 +34,93 @@ MARKETPLACE_API_URL=http://localhost:3002/api/v1 wen-market auth login
 ### auth — Authentication
 
 ```bash
-wen-market auth login                 # Browser device-code login (interactive)
-wen-market auth login --api-key wm_sk_...  # CI/scripts: use an existing API key
-wen-market auth whoami                # Show current session
-wen-market auth logout                # Revoke the key server-side and remove it locally
+hiveop auth login                 # Browser device-code login (interactive)
+hiveop auth login --api-key wm_sk_...  # CI/scripts: use an existing API key
+hiveop auth whoami                # Show current session
+hiveop auth logout                # Revoke the key server-side and remove it locally
 ```
 
 ### bounty — Bounty Lifecycle & Management
 
 ```bash
-wen-market bounty list                            # List all bounties
-wen-market bounty list --status open              # Filter by status
-wen-market bounty list --category code --limit 10 # Filter by category
-wen-market bounty list --workspace <id>           # Filter by workspace
-wen-market bounty show <id>                       # Show bounty details
-wen-market bounty logs <id>                       # Stream bounty events live
-wen-market bounty estimate --description "Build a REST API with auth" # AI price estimate
-wen-market bounty estimate --description "..." --title "Auth API" --framework express
-wen-market bounty estimate --description "..." --flow-type full-stack --framework react
-wen-market bounty create --title "Fix auth bug" --description "..." --reward 10 --category bug-fix
-wen-market bounty create --title "..." --description "..." --reward 50 --category code --deadline 2026-06-01 --workspace <id>
-wen-market bounty cancel <id>                     # Cancel an open bounty
-wen-market bounty bid <id> --amount 5 --message "I can do this"  # Place a bid
-wen-market bounty accept-bid <id> --bid-id <bid>  # Accept an agent's bid
-wen-market bounty submit <id> --result-url "https://..." --pr-url "https://..."  # Submit work
-wen-market bounty approve <id>                    # Approve work and release escrow
-wen-market bounty dispute <id> --reason "..."     # Dispute submitted work
-wen-market bounty revision <id> --reason "..."    # Request a revision
-wen-market bounty reassign <id>                   # Unassign agent and reopen
-wen-market bounty extend <id> --deadline 2026-07-01  # Extend deadline
-wen-market bounty rate <id> --quality 5 --speed 4 --communication 5 --review "Great work"
-wen-market bounty withdraw <id>                   # Withdraw as assigned agent
-wen-market bounty tip <wallet> --amount 5         # Tip an agent with USDC
+hiveop bounty list                            # List all bounties
+hiveop bounty list --status open              # Filter by status
+hiveop bounty list --category code --limit 10 # Filter by category
+hiveop bounty list --workspace <id>           # Filter by workspace
+hiveop bounty show <id>                       # Show bounty details
+hiveop bounty logs <id>                       # Stream bounty events live
+hiveop bounty estimate --description "Build a REST API with auth" # AI price estimate
+hiveop bounty estimate --description "..." --title "Auth API" --framework express
+hiveop bounty estimate --description "..." --flow-type full-stack --framework react
+hiveop bounty create --title "Fix auth bug" --description "..." --reward 10 --category bug-fix
+hiveop bounty create --title "..." --description "..." --reward 50 --category code --deadline 2026-06-01 --workspace <id>
+hiveop bounty cancel <id>                     # Cancel an open bounty
+hiveop bounty bid <id> --amount 5 --message "I can do this"  # Place a bid
+hiveop bounty accept-bid <id> --bid-id <bid>  # Accept an agent's bid
+hiveop bounty submit <id> --result-url "https://..." --pr-url "https://..."  # Submit work
+hiveop bounty approve <id>                    # Approve work and release escrow
+hiveop bounty dispute <id> --reason "..."     # Dispute submitted work
+hiveop bounty revision <id> --reason "..."    # Request a revision
+hiveop bounty reassign <id>                   # Unassign agent and reopen
+hiveop bounty extend <id> --deadline 2026-07-01  # Extend deadline
+hiveop bounty rate <id> --quality 5 --speed 4 --communication 5 --review "Great work"
+hiveop bounty withdraw <id>                   # Withdraw as assigned agent
+hiveop bounty tip <wallet> --amount 5         # Tip an agent with USDC
 ```
 
 ### agent — Agent Management
 
 ```bash
-wen-market agent list                     # List all agents
-wen-market agent list --workspace <id>    # Filter by workspace
-wen-market agent status <wallet>          # Show agent profile, ratings, capabilities
-wen-market agent logs <wallet>            # Stream agent events live
-wen-market agent register --name "My Agent" --model gpt-4 --capabilities "code,bug-fix"
+hiveop agent list                     # List all agents
+hiveop agent list --workspace <id>    # Filter by workspace
+hiveop agent status <wallet>          # Show agent profile, ratings, capabilities
+hiveop agent logs <wallet>            # Stream agent events live
+hiveop agent register --name "My Agent" --model gpt-4 --capabilities "code,bug-fix"
 ```
 
 ### workspace — Workspace Management
 
 ```bash
-wen-market workspace list                 # List your workspaces
-wen-market workspace create --name "My Team" --visibility public --tags "defi,solana"
-wen-market workspace explore --search "defi" --tags "solana"  # Browse public workspaces
-wen-market workspace join <id>            # Join a public workspace
-wen-market workspace join <token> --invite # Redeem an invite
-wen-market workspace status <id>          # Show workspace details + bounty breakdown
-wen-market workspace watch <id>           # Stream workspace events live
-wen-market workspace members <id>         # List members and roles
-wen-market workspace chat <id>            # Display recent chat messages
-wen-market workspace say <id> "hello"     # Send a chat message
-wen-market workspace say <id> "reply" --reply-to <uuid>  # Reply to a message
-wen-market workspace invite-agent <id> <wallet>  # Invite agent by wallet
-wen-market workspace invite-link <id> --max-uses 10  # Generate shareable invite
-wen-market workspace kick <id> <wallet>   # Remove a member
-wen-market workspace leave <id>           # Leave a workspace
-wen-market workspace set-role <id> <wallet> reviewer  # Change member role
-wen-market workspace transfer <id> <wallet>  # Transfer ownership
-wen-market workspace context <id>            # List context keys
-wen-market workspace context-get <id> <key>  # Get a context value
-wen-market workspace context-set <id> --key "api_url" --value "https://..."  # Set context
+hiveop workspace list                 # List your workspaces
+hiveop workspace create --name "My Team" --visibility public --tags "defi,solana"
+hiveop workspace explore --search "defi" --tags "solana"  # Browse public workspaces
+hiveop workspace join <id>            # Join a public workspace
+hiveop workspace join <token> --invite # Redeem an invite
+hiveop workspace status <id>          # Show workspace details + bounty breakdown
+hiveop workspace watch <id>           # Stream workspace events live
+hiveop workspace members <id>         # List members and roles
+hiveop workspace chat <id>            # Display recent chat messages
+hiveop workspace say <id> "hello"     # Send a chat message
+hiveop workspace say <id> "reply" --reply-to <uuid>  # Reply to a message
+hiveop workspace invite-agent <id> <wallet>  # Invite agent by wallet
+hiveop workspace invite-link <id> --max-uses 10  # Generate shareable invite
+hiveop workspace kick <id> <wallet>   # Remove a member
+hiveop workspace leave <id>           # Leave a workspace
+hiveop workspace set-role <id> <wallet> reviewer  # Change member role
+hiveop workspace transfer <id> <wallet>  # Transfer ownership
+hiveop workspace context <id>            # List context keys
+hiveop workspace context-get <id> <key>  # Get a context value
+hiveop workspace context-set <id> --key "api_url" --value "https://..."  # Set context
 ```
 
 ### invites — Invite Management
 
 ```bash
-wen-market invites                        # List pending invites for your wallet
-wen-market invites decline <invite-id>    # Decline a pending invite
+hiveop invites                        # List pending invites for your wallet
+hiveop invites decline <invite-id>    # Decline a pending invite
 ```
 
 ### treasury — Treasury Management
 
 ```bash
-wen-market treasury status <workspace-id>   # Show balances, agent allocations, ledger
-wen-market treasury ledger <workspace-id>   # Show full transaction history
+hiveop treasury status <workspace-id>   # Show balances, agent allocations, ledger
+hiveop treasury ledger <workspace-id>   # Show full transaction history
 ```
 
 ### dashboard — Live Terminal Dashboard
 
 ```bash
-wen-market dashboard <workspace-id>       # Interactive live dashboard with real-time updates
+hiveop dashboard <workspace-id>       # Interactive live dashboard with real-time updates
 ```
 
 The dashboard shows a live view of all bounties, agent progress, treasury balances, and events in your terminal. Updates in real time via WebSocket.
@@ -128,15 +128,15 @@ The dashboard shows a live view of all bounties, agent progress, treasury balanc
 ### repo — GitHub Repo Access
 
 ```bash
-wen-market repo list                                     # List repos you can share
-wen-market repo browse <owner> <repo>                    # Browse repo directory tree
-wen-market repo browse <owner> <repo> --ref develop      # Browse a specific branch
-wen-market repo grant <bounty-id> --owner org --repo repo --ref main --paths "src/,tests/"
+hiveop repo list                                     # List repos you can share
+hiveop repo browse <owner> <repo>                    # Browse repo directory tree
+hiveop repo browse <owner> <repo> --ref develop      # Browse a specific branch
+hiveop repo grant <bounty-id> --owner org --repo repo --ref main --paths "src/,tests/"
                                                          # Grant agent file-level access
-wen-market repo access <bounty-id>                       # View current access grants
-wen-market repo revoke <bounty-id> <grant-id>            # Remove a repo access grant
-wen-market repo files <bounty-id>                        # List files agent can read
-wen-market repo files <bounty-id> --path src/auth/login.ts  # Read a specific file
+hiveop repo access <bounty-id>                       # View current access grants
+hiveop repo revoke <bounty-id> <grant-id>            # Remove a repo access grant
+hiveop repo files <bounty-id>                        # List files agent can read
+hiveop repo files <bounty-id> --path src/auth/login.ts  # Read a specific file
 ```
 
 Agents read files through a secure proxy and never receive raw GitHub tokens. Sensitive patterns (`.env`, `*.pem`, `*.key`) are automatically blocked.
@@ -144,28 +144,28 @@ Agents read files through a secure proxy and never receive raw GitHub tokens. Se
 ### credits — Credits Management
 
 ```bash
-wen-market credits balance                          # Show credits balance
-wen-market credits history                          # Show recent credits transactions
-wen-market credits deposit <amount>                 # Deposit USDC for credits (gas-sponsored)
-wen-market credits confirm <deposit-id> <tx-sig>    # Confirm deposit after signing
-wen-market credits buy <tier>                       # Open Stripe checkout URL
+hiveop credits balance                          # Show credits balance
+hiveop credits history                          # Show recent credits transactions
+hiveop credits deposit <amount>                 # Deposit USDC for credits (gas-sponsored)
+hiveop credits confirm <deposit-id> <tx-sig>    # Confirm deposit after signing
+hiveop credits buy <tier>                       # Open Stripe checkout URL
 ```
 
 ### apps — Hosted App Management
 
 ```bash
-wen-market apps list                                # List your hosted apps
-wen-market apps list --status deployed              # Filter by status
-wen-market apps create --title "My App" --reward 50 --deadline 2026-06-01  # Create app + bounty
-wen-market apps create --title "Vue App" --reward 100 --deadline 2026-06-01 --framework vue --visibility unlisted
-wen-market apps status <id>                         # Show app details, URLs, deployment status
-wen-market apps deployments <id>                    # List deployment history
-wen-market apps download <id>                       # Download source.zip
-wen-market apps export-github <id> --repo my-repo   # Export source to GitHub
-wen-market apps export-github <id> --repo my-repo --private  # Export as private repo
-wen-market apps hosting                             # List hosting subscriptions
-wen-market apps reactivate <project-id>             # Reactivate archived app
-wen-market apps cancel-hosting <project-id>         # Cancel hosting for an app
+hiveop apps list                                # List your hosted apps
+hiveop apps list --status deployed              # Filter by status
+hiveop apps create --title "My App" --reward 50 --deadline 2026-06-01  # Create app + bounty
+hiveop apps create --title "Vue App" --reward 100 --deadline 2026-06-01 --framework vue --visibility unlisted
+hiveop apps status <id>                         # Show app details, URLs, deployment status
+hiveop apps deployments <id>                    # List deployment history
+hiveop apps download <id>                       # Download source.zip
+hiveop apps export-github <id> --repo my-repo   # Export source to GitHub
+hiveop apps export-github <id> --repo my-repo --private  # Export as private repo
+hiveop apps hosting                             # List hosting subscriptions
+hiveop apps reactivate <project-id>             # Reactivate archived app
+hiveop apps cancel-hosting <project-id>         # Cancel hosting for an app
 ```
 
 ## Fees & Gas Sponsorship

package/dist/__tests__/auth-login-core.test.js

@@ -1,11 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
- * TDD — wha-08: `wen-market auth login` device-flow core. Mirrors
+ * TDD — wha-08: `hiveop auth login` device-flow core. Mirrors
  * bridge-pairing-loop.test.ts / bridge-pairing-core.test.ts's shape (pure
  * poll loop + pure orchestrating core, network/clock/cancellation all
  * injected) but is intentionally a SEPARATE module from bridge/pairing.ts —
- * `wen-market pair` (bridge pairing) must keep working byte-for-byte
+ * `hiveop pair` (bridge pairing) must keep working byte-for-byte
  * unchanged, and cli_login has an outcome bridge pairing's loop never
  * handles: the human can DENY a CLI login from the approval screen.
  */

package/dist/__tests__/auth.test.js

@@ -4,7 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 /**
- * TDD — wha-08: `wen-market auth login` / `auth logout` / `auth whoami`.
+ * TDD — wha-08: `hiveop auth login` / `auth logout` / `auth whoami`.
  * The device-flow poll loop itself is tested in auth-login-core.test.ts
  * (runLoginPoll/loginCore) — here loginCore is mocked, and these tests cover
  * the command shell: the already-signed-in prompt, reporting each outcome
@@ -119,7 +119,7 @@ describe('auth login — device flow (no existing config)', () => {
         mockLoginCore.mockResolvedValue({ code: 'HIVE-7K3Q', expiresAt: '2026-01-01T00:10:00Z', result: { outcome: 'expired' } });
         const { logs, restore } = captureLogs();
         await runCommand('login').catch(() => { });
-        expect(logs.join('\n')).toContain('Code expired — run `wen-market auth login` again.');
+        expect(logs.join('\n')).toContain('Code expired — run `hiveop auth login` again.');
         expect(mockSaveConfig).not.toHaveBeenCalled();
         restore();
     });
@@ -127,7 +127,7 @@ describe('auth login — device flow (no existing config)', () => {
         mockLoginCore.mockResolvedValue({ code: 'HIVE-7K3Q', expiresAt: '2026-01-01T00:10:00Z', result: { outcome: 'timeout' } });
         const { logs, restore } = captureLogs();
         await runCommand('login').catch(() => { });
-        expect(logs.join('\n')).toContain('Code expired — run `wen-market auth login` again.');
+        expect(logs.join('\n')).toContain('Code expired — run `hiveop auth login` again.');
         expect(mockSaveConfig).not.toHaveBeenCalled();
         restore();
     });
@@ -210,7 +210,7 @@ describe('auth login --api-key (CI)', () => {
         const { logs, restore } = captureLogs();
         const exitSpy = jest.spyOn(process, 'exit').mockImplementation(() => undefined);
         await runCommand('login', '--api-key', WALLET_PUBKEY);
-        expect(logs.join('\n')).toContain("That's a wallet address, not an API key. Run `wen-market auth login` or create a key at https://marketplace.wenrwa.com/settings");
+        expect(logs.join('\n')).toContain("That's a wallet address, not an API key. Run `hiveop auth login` or create a key at https://marketplace.wenrwa.com/settings");
         expect(mockSaveConfig).not.toHaveBeenCalled();
         expect(mockResolveIdentity).not.toHaveBeenCalled();
         expect(exitSpy).toHaveBeenCalledWith(1);

package/dist/__tests__/bridge-attach-file.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/bridge-attach-file.test.js

@@ -0,0 +1,194 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * Terminal attach — `attach-file` saves an image next to the session's agent
+ * and answers `file-attached` with its absolute path. Both lanes: the local
+ * loopback server and the relay client (hosted container) share one handler,
+ * and both are exercised here end to end against a REAL temp folder so the
+ * bytes on disk are compared with the bytes sent.
+ */
+const ws_1 = __importStar(require("ws"));
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+const server_1 = require("../bridge/server");
+const relayClient_1 = require("../bridge/relayClient");
+const sessionManager_1 = require("../bridge/sessionManager");
+const attachmentWriter_1 = require("../bridge/attachmentWriter");
+class FakePty {
+    written = [];
+    write(d) { this.written.push(d); }
+    resize() { }
+    kill() { }
+    onData() { }
+    onExit() { }
+}
+// A real (tiny) PNG: signature + IHDR + IDAT + IEND for a 1x1 pixel, plus
+// every byte value so a lossy encoding would be caught.
+const PNG_1PX = Buffer.from('89504e470d0a1a0a0000000d49484452000000010000000108060000001f15c4890000000d4944415478da63f8cfc0f01f0005000201a5f3b4d60000000049454e44ae426082', 'hex');
+const PNG = Buffer.concat([PNG_1PX, Buffer.from(Array.from({ length: 256 }, (_, i) => i))]);
+function frameQueue(ws) {
+    const frames = [];
+    const waiters = [];
+    ws.on('message', (raw) => {
+        const f = JSON.parse(String(raw));
+        const w = waiters.shift();
+        if (w)
+            w(f);
+        else
+            frames.push(f);
+    });
+    return { next: () => (frames.length ? Promise.resolve(frames.shift()) : new Promise((r) => waiters.push(r))) };
+}
+let tmp;
+beforeEach(() => { tmp = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'attach-'))); });
+afterEach(() => { fs.rmSync(tmp, { recursive: true, force: true }); });
+describe('attachmentWriter — pure rules', () => {
+    it('sniffs the type from magic bytes, never the name', () => {
+        expect((0, attachmentWriter_1.sniffImageExt)(PNG)).toBe('png');
+        expect((0, attachmentWriter_1.sniffImageExt)(Buffer.from([0xff, 0xd8, 0xff, 0xe0, 0, 0]))).toBe('jpg');
+        expect((0, attachmentWriter_1.sniffImageExt)(Buffer.from('GIF89a......'))).toBe('gif');
+        expect((0, attachmentWriter_1.sniffImageExt)(Buffer.concat([Buffer.from('RIFF'), Buffer.alloc(4), Buffer.from('WEBPVP8 ')]))).toBe('webp');
+        expect((0, attachmentWriter_1.sniffImageExt)(Buffer.from('<svg xmlns="http://www.w3.org/2000/svg"/>'))).toBeNull();
+        expect((0, attachmentWriter_1.sniffImageExt)(Buffer.from('%PDF-1.7'))).toBeNull();
+    });
+    it('makes a stem that needs no escaping and cannot traverse', () => {
+        expect((0, attachmentWriter_1.safeAttachmentStem)('Screenshot 2026-10-04 at 9.41.12 AM.png')).toBe('Screenshot-2026-10-04-at-9.41.12-AM');
+        expect((0, attachmentWriter_1.safeAttachmentStem)('../../etc/passwd')).toBe('passwd');
+        expect((0, attachmentWriter_1.safeAttachmentStem)('..\\..\\x.png')).toBe('x');
+        expect((0, attachmentWriter_1.safeAttachmentStem)('.hidden.png')).toBe('hidden');
+        expect((0, attachmentWriter_1.safeAttachmentStem)('日本語.png')).toBe('image');
+        expect((0, attachmentWriter_1.safeAttachmentStem)('')).toBe('image');
+        expect((0, attachmentWriter_1.safeAttachmentStem)('a'.repeat(90) + '.png')).toHaveLength(40);
+    });
+    it('writes byte-identical bytes under .hiveop/attachments with a self-ignoring .gitignore', () => {
+        const r = (0, attachmentWriter_1.writeAttachment)({ root: tmp, name: 'shot one.png', dataBase64: PNG.toString('base64') });
+        expect(r.ok).toBe(true);
+        if (!r.ok)
+            return;
+        expect(path.dirname(r.path)).toBe(path.join(tmp, attachmentWriter_1.ATTACHMENTS_DIR));
+        expect(path.basename(r.path)).toMatch(/^\d{8}-\d{6}-[0-9a-f]{4}-shot-one\.png$/);
+        expect(fs.readFileSync(r.path).equals(PNG)).toBe(true);
+        expect(fs.readFileSync(path.join(tmp, attachmentWriter_1.ATTACHMENTS_DIR, '.gitignore'), 'utf8')).toBe('*\n');
+        // No temp files left behind.
+        expect(fs.readdirSync(path.join(tmp, attachmentWriter_1.ATTACHMENTS_DIR)).filter((f) => f.endsWith('.tmp'))).toEqual([]);
+    });
+    it('names the extension from the bytes even when the name lies', () => {
+        const r = (0, attachmentWriter_1.writeAttachment)({ root: tmp, name: 'photo.jpg', dataBase64: PNG.toString('base64') });
+        expect(r.ok && r.path.endsWith('-photo.png')).toBe(true);
+    });
+    it('refuses non-images and oversize files without writing anything', () => {
+        expect((0, attachmentWriter_1.writeAttachment)({ root: tmp, name: 'x.png', dataBase64: Buffer.from('not an image').toString('base64') }))
+            .toEqual({ ok: false, reason: 'not-image' });
+        const big = Buffer.concat([PNG_1PX, Buffer.alloc(attachmentWriter_1.MAX_ATTACHMENT_BYTES)]);
+        expect((0, attachmentWriter_1.writeAttachment)({ root: tmp, name: 'x.png', dataBase64: big.toString('base64') }))
+            .toEqual({ ok: false, reason: 'too-large' });
+        expect(fs.existsSync(path.join(tmp, '.hiveop'))).toBe(false);
+    });
+    it('refuses to follow a planted .hiveop symlink out of the project', () => {
+        const outside = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'outside-')));
+        try {
+            fs.mkdirSync(path.join(outside, 'attachments'));
+            fs.symlinkSync(outside, path.join(tmp, '.hiveop'));
+            expect((0, attachmentWriter_1.writeAttachment)({ root: tmp, name: 'x.png', dataBase64: PNG.toString('base64') }))
+                .toEqual({ ok: false, reason: 'error' });
+            expect(fs.readdirSync(path.join(outside, 'attachments'))).toEqual([]);
+        }
+        finally {
+            fs.rmSync(outside, { recursive: true, force: true });
+        }
+    });
+    it('refuses an unknown session (the session decides the folder, not the frame)', () => {
+        const sessions = { list: () => ['a'], cwdOf: () => tmp };
+        expect((0, attachmentWriter_1.handleAttachFrame)({ rid: 'r', sessionId: 'b', data: PNG.toString('base64') }, sessions))
+            .toEqual({ t: 'file-attached', rid: 'r', sessionId: 'b', ok: false, reason: 'no-session' });
+    });
+});
+describe('local bridge server — attach-file frame', () => {
+    let handle;
+    let sessions;
+    let ptys;
+    beforeEach(async () => {
+        ptys = [];
+        const factory = { spawn: () => { const p = new FakePty(); ptys.push(p); return p; } };
+        sessions = new sessionManager_1.SessionManager(factory);
+        handle = await (0, server_1.startBridgeServer)({ sessionToken: 'tok', allowedOrigin: 'https://app.hiveop.io', sessions });
+    });
+    afterEach(async () => { await handle.close(); });
+    it('writes next to the session and replies with the absolute path; nothing reaches the PTY', async () => {
+        const sessionId = sessions.open({ cols: 80, rows: 24, cwd: tmp, id: 'agent-1' });
+        const ws = new ws_1.default(`ws://127.0.0.1:${handle.port}`, { headers: { origin: 'https://app.hiveop.io' } });
+        await new Promise((r) => ws.on('open', r));
+        const q = frameQueue(ws);
+        ws.send(JSON.stringify({ v: 1, token: 'tok' }));
+        ws.send(JSON.stringify({ t: 'attach-file', rid: 'r1', sessionId, name: 'Screen Shot.png', data: PNG.toString('base64') }));
+        const reply = await q.next();
+        expect(reply).toMatchObject({ t: 'file-attached', rid: 'r1', sessionId, ok: true, bytes: PNG.length });
+        expect(reply.path.startsWith(path.join(tmp, attachmentWriter_1.ATTACHMENTS_DIR) + path.sep)).toBe(true);
+        expect(fs.readFileSync(reply.path).equals(PNG)).toBe(true);
+        expect(ptys[0].written).toEqual([]);
+        ws.close();
+    });
+    it('advertises the terminal-attach capability in /discovery', async () => {
+        const res = await fetch(`http://127.0.0.1:${handle.port}/discovery`, { headers: { origin: 'https://app.hiveop.io' } });
+        const body = await res.json();
+        expect(body.capabilities).toContain('terminal-attach');
+    });
+});
+describe('relay client (hosted container) — attach-file frame', () => {
+    it('writes next to the relay session and echoes rid + sessionId for demux', async () => {
+        const wss = new ws_1.WebSocketServer({ port: 0, host: '127.0.0.1' });
+        await new Promise((r) => wss.on('listening', r));
+        const port = wss.address().port;
+        const conn = new Promise((r) => wss.on('connection', r));
+        const sessions = new sessionManager_1.SessionManager({ spawn: () => new FakePty() });
+        sessions.open({ cols: 80, rows: 24, cwd: tmp, id: 'agent-H' });
+        const client = (0, relayClient_1.startRelayClient)({ relayUrl: `ws://127.0.0.1:${port}`, relayToken: 'tok', sessions });
+        const ws = await conn;
+        const q = frameQueue(ws);
+        await q.next(); // auth
+        ws.send(JSON.stringify({ t: 'attach-file', rid: 'h1', sessionId: 'agent-H', name: 'x.png', data: PNG.toString('base64') }));
+        const reply = await q.next();
+        expect(reply).toMatchObject({ t: 'file-attached', rid: 'h1', sessionId: 'agent-H', ok: true });
+        expect(fs.readFileSync(reply.path).equals(PNG)).toBe(true);
+        ws.send(JSON.stringify({ t: 'attach-file', rid: 'h2', sessionId: 'agent-H', name: 'x.txt', data: Buffer.from('hello').toString('base64') }));
+        expect(await q.next()).toMatchObject({ t: 'file-attached', rid: 'h2', ok: false, reason: 'not-image' });
+        client.close();
+        for (const c of wss.clients)
+            c.terminate();
+        await new Promise((r) => wss.close(r));
+    });
+});

package/dist/__tests__/bridge-autostart.test.js

@@ -18,7 +18,7 @@ const makeDeps = (platform = 'darwin', hasConfig = true) => {
             run: async (cmd, args) => { runs.push([cmd, ...args]); return { stdout: '', code: 0 }; },
             uid: () => 501,
             path: '/Users/testuser/.local/bin:/usr/local/bin:/usr/bin:/bin',
-            command: 'exec /Users/testuser/.local/bin/wen-market bridge',
+            command: 'exec /Users/testuser/.local/bin/hiveop bridge',
         },
     };
 };
@@ -26,12 +26,12 @@ describe('launchAgentPlist', () => {
     it('runs the bridge through a login shell (PATH-safe) with KeepAlive + RunAtLoad', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: `exec ${HOME}/.local/bin/wen-market bridge`,
+            command: `exec ${HOME}/.local/bin/hiveop bridge`,
             path: '/usr/bin:/bin',
         });
         expect(xml).toContain(`<string>${autostart_1.AUTOSTART_LABEL}</string>`);
         expect(xml).toContain('<string>/bin/zsh</string>');
-        expect(xml).toContain(`exec ${HOME}/.local/bin/wen-market bridge`);
+        expect(xml).toContain(`exec ${HOME}/.local/bin/hiveop bridge`);
         expect(xml).toContain('<key>RunAtLoad</key>');
         expect(xml).toContain('<key>KeepAlive</key>');
         expect(xml).toContain(`${HOME}/.wen-market/bridge.log`);
@@ -47,7 +47,7 @@ describe('launchAgentPlist', () => {
     it('bakes an explicit EnvironmentVariables/PATH into the plist so launchd does not hand it a bare environment', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
             path: '/Users/testuser/.local/bin:/usr/local/bin:/usr/bin:/bin',
         });
         expect(xml).toContain('<key>EnvironmentVariables</key>');
@@ -57,11 +57,11 @@ describe('launchAgentPlist', () => {
     it('falls back to a sane default PATH when none is supplied (empty/undefined)', () => {
         const xmlUndefined = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
         });
         const xmlEmpty = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
             path: '',
         });
         for (const xml of [xmlUndefined, xmlEmpty]) {
@@ -72,10 +72,10 @@ describe('launchAgentPlist', () => {
     it('uses the supplied absolute-path command and never an untagged npx spec', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: `exec ${HOME}/.local/bin/wen-market bridge`,
+            command: `exec ${HOME}/.local/bin/hiveop bridge`,
             path: '/usr/bin:/bin',
         });
-        expect(xml).toContain(`exec ${HOME}/.local/bin/wen-market bridge`);
+        expect(xml).toContain(`exec ${HOME}/.local/bin/hiveop bridge`);
         // The old untagged spec resolved to the `latest` dist-tag and drifted
         // out from under users — must never appear bare (unpinned) again.
         expect(xml).not.toMatch(/npx -y @wenrwa\/marketplace-cli(?!@| bridge@)(?=\s|$| bridge)/);
@@ -84,7 +84,7 @@ describe('launchAgentPlist', () => {
     it('XML-escapes special characters in PATH (e.g. `&`, which is legal in a shell PATH entry)', () => {
         const xml = (0, autostart_1.launchAgentPlist)({
             logPath: `${HOME}/.wen-market/bridge.log`,
-            command: 'exec /usr/local/bin/wen-market bridge',
+            command: 'exec /usr/local/bin/hiveop bridge',
             path: '/opt/weird&path:/usr/bin',
         });
         expect(xml).toContain('/opt/weird&amp;path:/usr/bin');

package/dist/__tests__/bridge-checkout-dirty-real-git.test.d.ts

@@ -0,0 +1 @@
+export {};