@wenrwa/marketplace-cli 0.8.7 → 0.8.8

package/dist/__tests__/bridge-session-anchor-no-identity.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/__tests__/bridge-session-anchor-no-identity.test.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * A session anchor must not need a git identity.
+ *
+ * Production 2026-10-19 (owner: "the Changes button doesn't seem to work"):
+ * a hosted box has NO git identity — no user.name/user.email in any config;
+ * the agent's identity rides only in the PTY env (GIT_AUTHOR_*). The bridge's
+ * own `git commit-tree` therefore died with "Author identity unknown" (exit
+ * 128, probed on the live machine), no refs/wenrwa/session-* ref was ever
+ * created, and no session-scoped Changes report has ever been persisted (zero
+ * `scope = 'session'` rows in terminal_changes).
+ *
+ * This runs REAL git with `user.useConfigOnly = true` and no identity, which
+ * is the container's situation made deterministic (a laptop would otherwise
+ * auto-detect user@host and hide the bug).
+ */
+const fs_1 = require("fs");
+const os_1 = require("os");
+const path_1 = require("path");
+const child_process_1 = require("child_process");
+const sessionAnchor_1 = require("../bridge/sessionAnchor");
+const changesReporter_1 = require("../bridge/changesReporter");
+// Jest's sandboxed process.env does not reach child_process on its own, so
+// every git call here passes the (identity-less) env explicitly — the same
+// merge execGit does in production.
+const sandboxEnv = () => ({ ...process.env });
+const run = (cmd, args, opts) => (0, changesReporter_1.execGit)(cmd, args, { env: { ...sandboxEnv(), ...(opts?.env ?? {}) } });
+const git = (args) => (0, child_process_1.execFileSync)('git', args, { env: sandboxEnv(), stdio: 'pipe' }).toString().trim();
+const IDENTITY_KEYS = ['GIT_AUTHOR_NAME', 'GIT_AUTHOR_EMAIL', 'GIT_COMMITTER_NAME', 'GIT_COMMITTER_EMAIL', 'EMAIL'];
+describe('createSessionAnchor on a box with no git identity', () => {
+    let dir;
+    let repo;
+    const saved = {};
+    beforeEach(() => {
+        dir = (0, fs_1.mkdtempSync)((0, path_1.join)((0, os_1.tmpdir)(), 'anchor-noid-'));
+        repo = (0, path_1.join)(dir, 'repo');
+        const globalCfg = (0, path_1.join)(dir, 'gitconfig');
+        (0, fs_1.writeFileSync)(globalCfg, '[user]\n\tuseConfigOnly = true\n');
+        for (const k of [...IDENTITY_KEYS, 'GIT_CONFIG_GLOBAL', 'GIT_CONFIG_NOSYSTEM', 'HOME'])
+            saved[k] = process.env[k];
+        for (const k of IDENTITY_KEYS)
+            delete process.env[k];
+        process.env.GIT_CONFIG_GLOBAL = globalCfg;
+        process.env.GIT_CONFIG_NOSYSTEM = '1';
+        process.env.HOME = dir;
+        git(['init', '-q', repo]);
+        (0, fs_1.writeFileSync)((0, path_1.join)(repo, 'a.txt'), 'hello\n');
+    });
+    afterEach(() => {
+        for (const [k, v] of Object.entries(saved)) {
+            if (v === undefined)
+                delete process.env[k];
+            else
+                process.env[k] = v;
+        }
+        (0, fs_1.rmSync)(dir, { recursive: true, force: true });
+    });
+    it('git itself refuses a commit here (the precondition is real)', () => {
+        const tree = git(['-C', repo, 'write-tree']);
+        expect(() => git(['-C', repo, 'commit-tree', tree, '-m', 'x'])).toThrow(/identity unknown|auto-detection is disabled/i);
+    });
+    it('still creates the anchor commit and its ref', async () => {
+        const res = await (0, sessionAnchor_1.createSessionAnchor)(repo, 'sess-noid', { run });
+        expect(res.ok).toBe(true);
+        if (!res.ok)
+            return;
+        const refSha = git(['-C', repo, 'rev-parse', (0, sessionAnchor_1.anchorRefName)('sess-noid')]);
+        expect(refSha).toBe(res.sha);
+        // The anchor snapshots the untracked file, so a later diff is relative to it.
+        const files = git(['-C', repo, 'ls-tree', '--name-only', res.sha]);
+        expect(files).toBe('a.txt');
+    });
+});

package/dist/__tests__/bridge-session-anchor.test.js

@@ -68,9 +68,17 @@ describe('createSessionAnchor', () => {
         expect(calls[1].args).toEqual(['-C', CWD, 'write-tree']);
         expect(calls[1].opts?.env?.GIT_INDEX_FILE).toBe(indexFile);
         // 3. commit-tree — no parent (a fresh anchor, not a chain), no index
-        //    involved at all (commit-tree never reads one) — no env override.
+        //    involved at all (commit-tree never reads one). Its only env is a
+        //    fixed identity: a hosted box has none (see
+        //    bridge-session-anchor-no-identity.test.ts).
         expect(calls[2].args).toEqual(['-C', CWD, 'commit-tree', 'treesha0000', '-m', 'wenrwa session anchor']);
-        expect(calls[2].opts?.env).toBeUndefined();
+        expect(calls[2].opts?.env).toEqual({
+            GIT_AUTHOR_NAME: 'HiveOp',
+            GIT_AUTHOR_EMAIL: 'session-anchor@hiveop.local',
+            GIT_COMMITTER_NAME: 'HiveOp',
+            GIT_COMMITTER_EMAIL: 'session-anchor@hiveop.local',
+        });
+        expect(calls[2].opts?.env?.GIT_INDEX_FILE).toBeUndefined();
         // 4. update-ref — points the session's ref at the new commit, no env.
         expect(calls[3].args).toEqual(['-C', CWD, 'update-ref', 'refs/wenrwa/session-sess-1', 'commitsha1111']);
         expect(calls[3].opts?.env).toBeUndefined();

package/dist/bridge/sessionAnchor.d.ts

@@ -22,6 +22,15 @@ export type SweepAnchorsResult = {
     ok: false;
     error: string;
 };
+/** The fixed author/committer of every anchor commit — see createSessionAnchor. */
+export declare const ANCHOR_IDENTITY: {
+    env: {
+        GIT_AUTHOR_NAME: string;
+        GIT_AUTHOR_EMAIL: string;
+        GIT_COMMITTER_NAME: string;
+        GIT_COMMITTER_EMAIL: string;
+    };
+};
 /** Every session anchor ref lives under this namespace — sweepStaleAnchors's glob and this function must agree. */
 export declare function anchorRefName(sessionId: string): string;
 /**

package/dist/bridge/sessionAnchor.js

@@ -33,6 +33,7 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.ANCHOR_IDENTITY = void 0;
 exports.anchorRefName = anchorRefName;
 exports.createSessionAnchor = createSessionAnchor;
 exports.releaseSessionAnchor = releaseSessionAnchor;
@@ -80,6 +81,15 @@ exports.sweepStaleAnchors = sweepStaleAnchors;
 const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const crypto_1 = require("crypto");
+/** The fixed author/committer of every anchor commit — see createSessionAnchor. */
+exports.ANCHOR_IDENTITY = {
+    env: {
+        GIT_AUTHOR_NAME: 'HiveOp',
+        GIT_AUTHOR_EMAIL: 'session-anchor@hiveop.local',
+        GIT_COMMITTER_NAME: 'HiveOp',
+        GIT_COMMITTER_EMAIL: 'session-anchor@hiveop.local',
+    },
+};
 /** Every session anchor ref lives under this namespace — sweepStaleAnchors's glob and this function must agree. */
 function anchorRefName(sessionId) {
     return `refs/wenrwa/session-${sessionId}`;
@@ -114,7 +124,12 @@ async function createSessionAnchor(cwd, sessionId, deps) {
         const tree = treeRes.stdout.trim();
         // commit-tree never reads an index — no env override, and deliberately
         // no `-p <parent>`: this commit is a floating snapshot, not history.
-        const commitRes = await deps.run('git', ['-C', cwd, 'commit-tree', tree, '-m', 'wenrwa session anchor']);
+        // The identity is set HERE, never inherited: a hosted box has no git
+        // identity at all (the agent's rides only in its PTY env), and without
+        // one commit-tree dies "Author identity unknown" — which is why no hosted
+        // session report had ever been produced (prod 2026-10-19). The anchor is
+        // a hidden ref nobody pushes, so a fixed identity costs nothing.
+        const commitRes = await deps.run('git', ['-C', cwd, 'commit-tree', tree, '-m', 'wenrwa session anchor'], exports.ANCHOR_IDENTITY);
         if (commitRes.code !== 0) {
             return { ok: false, error: `anchor-commit-failed: ${commitRes.stdout.trim() || 'git commit-tree failed'}` };
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wenrwa/marketplace-cli",
-  "version": "0.8.7",
+  "version": "0.8.8",
   "description": "CLI tool for the Wenrwa Agent Marketplace — monitor bounties, agents, workspaces, and treasury from your terminal",
   "author": "Wenrwa <dev@wenrwa.com>",
   "license": "MIT",