gitstow 0.2.8__tar.gz → 0.4.0__tar.gz

{gitstow-0.2.8 → gitstow-0.4.0}/.github/workflows/ci.yml

@@ -8,10 +8,14 @@ on:
 
 jobs:
   test:
-    runs-on: ubuntu-latest
     strategy:
       matrix:
+        os: [ubuntu-latest]
         python-version: ["3.10", "3.11", "3.12", "3.13"]
+        include:
+          - os: macos-latest
+            python-version: "3.12"
+    runs-on: ${{ matrix.os }}
 
     steps:
       - uses: actions/checkout@v4

gitstow-0.4.0/BACKLOG.md

@@ -0,0 +1,43 @@
+# Backlog
+
+Post-v0.1.0 improvements tracked here. See [GitHub Issues](https://github.com/rishmadaan/gitstow/issues) for discussion.
+
+## Enhancements
+
+- [x] **TUI: expand beyond read-only dashboard** (#1) — Added pull selected (P), workspace cycling (w), tag cycling (t)
+- [x] **Shell completion for repo names** (#2) — `gitstow shell completions` for bash/zsh/fish; `--quiet` on list/tags/workspace list
+- [x] **Network retry/resume for batch operations** (#3) — `--retry N` flag on add and pull; cleans up partial clones before retry
+- [x] **Export format versioning and checksums** (#4) — Added `version: 1` to YAML/JSON exports; validates on import; backward-compatible with unversioned files
+- [x] **Progress indication during long clones** (#5) — `git clone --progress`; pull shows live counter `[5/47]`
+- [x] **Publish to PyPI** (#6) — Release workflow created (`.github/workflows/publish.yml`); publish on GitHub release
+- [x] **Web dashboard (`gitstow ui`)** — Dark local browser UI wrapping core/ for daily repo management. FastAPI + Jinja2 + HTMX, dark + ember accent aesthetic. See [CHANGELOG.md](CHANGELOG.md) v0.2.0.
+- [x] **Fix TUI breakage** — Resolved by retirement: the Textual TUI was removed in v0.3.0; `gitstow ui` (web dashboard) is the visual surface going forward.
+
+## Documentation
+
+- [x] **Record demo GIF for README** (#7) — Recorded with VHS, embedded in README
+
+## Post-0.3.0 follow-ups
+
+Triaged non-blocking items from the 2026-07 audit remediation (see
+[docs/building/audit-2026-07-06.md](docs/building/audit-2026-07-06.md) for the full effort).
+
+- [ ] **URL parser: schemeless multi-dot hosts** — `dev.azure.com/org/project/_git/repo` without
+  `https://` parses as owner/repo shorthand and builds a garbage clone URL (`_LOOKS_LIKE_HOST`
+  regex can't match a multi-dot first segment). Pre-existing; 0.3.1 candidate.
+- [ ] **Route search subprocesses through a hardened runner** — `git grep`/`rg` in `cli/search.py`
+  and `mcp/server.py` shell raw `subprocess.run` without the `GIT_TERMINAL_PROMPT=0`/`LC_ALL=C`
+  env applied to all other git calls. Local-only operations, negligible risk — consistency cleanup.
+- [ ] **Test strengthening batch** — frozen-collapse MCP test needs two frozen same-named repos;
+  `run_bulk` missing-status retry + `on_attempt` callback untested; locking mutual-exclusion test
+  passes without a lock (use an event-based barrier); status JSON legacy-key test covers 3/13 keys.
+- [ ] **Small edges** — `add` on an on-disk repo with no remote falls through to a doomed clone;
+  whitespace-only `$EDITOR` raises IndexError; fully-untracked workspaces never get the untracked
+  hint (early return; `doctor` covers); dashboard vs single-row-refresh number sources diverge for
+  orphaned-workspace repos.
+- [ ] **Product call: `pull --force` escape hatch** — CLI explicit args follow the bulk skip rule
+  while a web single-row Pull click pulls unconditionally; a `--force` flag would reconcile the
+  "explicit intent" asymmetry.
+- [ ] **Product call: frozen + diverged + `--include-frozen`** — surfaces as an ff-only error row
+  instead of a clean "diverged" skip (check `remote_state` directly in the worker if the messaging
+  matters).

{gitstow-0.2.8 → gitstow-0.4.0}/CHANGELOG.md

@@ -4,6 +4,60 @@ All notable changes to gitstow will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/), and this project adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.4.0] - 2026-07-12
+
+### Added
+
+- **Dashboard filters that actually filter.** The search box, workspace dropdown, and Hide-frozen toggle now work — instant client-side filtering that survives auto-refresh and pull updates.
+- **Settings save.** The Settings page persists changes for real (and gains Parallel limit + Clone timeout fields).
+- **`local` badge.** Repos without an upstream remote show a `local` Remote Δ badge; bulk pulls skip them with a clear reason instead of failing every run.
+- **Responsive dashboard.** Works down to half-monitor width — columns collapse by priority, the table scrolls within its own container, and row menus flip upward when space runs out.
+- **Last-fetched visibility.** The repo detail page shows when each repo was last pulled AND last fetched (hover for exact times); Remote Δ tooltips state which fetch the counts reflect.
+
+### Changed
+
+- **Fully offline dashboard.** htmx and both fonts are now bundled — no CDN, no network needed for the UI itself.
+- **Styled confirmations.** Native browser confirm/alert dialogs replaced with an in-app dialog (also makes the dashboard automatable).
+- **Web collection import honors recorded workspaces**, sharing one implementation with the CLI.
+- **Honest metrics chips.** Diverged and missing repos get their own hero chips instead of hiding inside 'conflict'; the pull summary reads 'N attempted' with exclusions stated.
+- **Cleaner micro-interactions.** Styled file picker, a LIVE dot that actually goes red when the server is unreachable, keyboard-visible focus rings, Escape closes menus, add-repo shows a Cloning… state.
+
+### Fixed
+
+- **Pull all / Fetch all spinners stop when the operation completes** (htmx indicator/disable double-count).
+- **Repo detail timestamps** no longer render raw machine format.
+
+## [0.3.0] - 2026-07-12
+
+### Added
+
+- **Composition-aware status everywhere.** `gitstow status` now shows a Local Changes column (modified/staged/untracked counts) and a separate Remote column (in-sync/ahead/behind/diverged). The web dashboard rows, repo drawer, and help legend all use the same shared classifier — a repo with only staged or untracked files can no longer display as "clean". JSON output gains additive `local` and `remote` keys (all existing keys preserved).
+- **`gitstow fetch_repos` MCP tool** and a `last_fetched` timestamp in all JSON outputs — MCP clients can now see fetch state, matching the CLI and web dashboard.
+- **Untracked-repo hints on `list` and `status`.** Repos found on disk but not in the registry are now surfaced with a hint pointing at `workspace scan`, instead of being silently invisible.
+- **`doctor` detects orphaned workspaces**, and `workspace remove` now warns when repos would be left pointing at a removed workspace.
+- **`clone_timeout` setting** (`gitstow config set clone_timeout <seconds>`) — clone operations on very large repos no longer fail on a hardcoded 300s limit.
+- **macOS added to the CI test matrix**, matching the packaging classifiers.
+- **CHANGELOG gate in the release script** — `scripts/release.sh` now refuses to cut a release without a corresponding changelog entry.
+
+### Changed
+
+- **`add` clones multiple repos in parallel** and now detects remote mismatches and duplicate URLs before cloning, instead of silently registering whatever is already on disk.
+- **`search` now runs across repos in parallel**, matching `exec`.
+- **Pull, fetch, and the MCP server share one operations layer.** The MCP server now follows the same bulk-pull rule as the CLI and web dashboard (modified/staged skip, diverged skip, untracked-only pulls).
+- **`open` prefers `$VISUAL`/`$EDITOR`** over guessing an editor, and runs terminal editors in the foreground so they actually get a usable TTY.
+- **Disk sizing (`stats`, `repo info`) now shells out to `du`** instead of walking every file in Python — much faster on large repos.
+- **`collection import` honors each entry's recorded workspace** instead of dumping everything into one workspace, and now fails loudly (with a printed error) on newer file versions instead of exiting silently.
+- **The web dashboard's dependencies (FastAPI, uvicorn, Jinja2) moved to the optional `[ui]` extra.** Existing installs keep working; fresh CLI-only installs are ~15 packages lighter. Install with `pip install "gitstow[ui]"` to keep the dashboard.
+- **Bulk pull rule unified and refined (behavior change).** CLI `pull` and the dashboard's Pull-all now follow one rule: repos with modified or staged files are skipped (with the composition shown), diverged repos are skipped (fast-forward pull cannot succeed), and repos with only untracked files ARE pulled — previously the CLI skipped them forever while the web pulled everything.
+
+### Fixed
+
+- **`search`, `exec`, and `status` `--json` now emit pure JSON on an empty filter match** — previously they printed a "no repos match" banner and no payload at all, even with `--json` set.
+
+### Removed
+
+- **The Textual TUI (`gitstow tui`).** The web dashboard (`gitstow ui`) replaced it as the visual surface in v0.2.0; the TUI had been broken and parked since. Git history preserves it.
+
 ## [0.2.8] - 2026-07-12
 
 ### Fixed

{gitstow-0.2.8 → gitstow-0.4.0}/CLAUDE.md

@@ -25,21 +25,20 @@ src/gitstow/
 │   ├── exec_cmd.py, search.py, open_cmd.py, stats.py       # Power commands
 │   ├── export_cmd.py    # export/import collection
 │   ├── shell.py         # Shell integration (fzf, aliases)
-│   ├── tui.py           # TUI launcher
 │   ├── serve.py         # Web dashboard launcher
 │   ├── migrate.py, config_cmd.py, onboard.py, doctor.py, skill_cmd.py
 │   └── __init__.py
 ├── core/         # Business logic (git ops, URL parsing, state)
-│   ├── paths.py       # Path constants, central repos.yaml resolution
-│   ├── config.py      # Workspace + Settings dataclasses, load/save
-│   ├── repo.py        # Repo dataclass + RepoStore (nested YAML CRUD)
-│   ├── url_parser.py  # URL → (host, owner, repo) extraction
-│   ├── git.py         # All git subprocess calls
-│   ├── discovery.py   # Walk directory tree (structured + flat), reconcile
-│   ├── parallel.py    # Async execution with semaphore
-│   └── __init__.py
-├── tui/          # Textual interactive dashboard
-│   ├── app.py         # Main TUI application
+│   ├── paths.py         # Path constants, central repos.yaml resolution
+│   ├── config.py        # Workspace + Settings dataclasses, load/save
+│   ├── repo.py          # Repo dataclass + RepoStore (nested YAML CRUD)
+│   ├── url_parser.py    # URL → (host, owner, repo) extraction
+│   ├── git.py           # All git subprocess calls
+│   ├── discovery.py     # Walk directory tree (structured + flat), reconcile
+│   ├── parallel.py      # Async execution with semaphore
+│   ├── status_model.py  # Shared repo-state classifier — local composition vs remote relationship
+│   ├── operations.py    # Shared filter + bulk-runner layer (pull/fetch/MCP)
+│   ├── locking.py       # Cross-process file lock guarding repos.yaml writes
 │   └── __init__.py
 ├── web/          # FastAPI browser dashboard (gitstow ui)
 │   ├── server.py          # FastAPI app, uvicorn runner, app.state.server stash
@@ -64,15 +63,18 @@ src/gitstow/
 - `core/url_parser.py` — URL parsing (the hardest part). Test changes here thoroughly.
 - `core/git.py` — All git subprocess calls. Uses `git status --porcelain=v2 --branch` for single-call efficiency.
 - `core/parallel.py` — Async execution with semaphore (max 6 concurrent).
+- `core/status_model.py` — `RepoState` — the single source of truth for local (modified/staged/untracked) vs remote (in-sync/ahead/behind/diverged) classification, consumed by CLI, web, and JSON.
+- `core/operations.py` — Shared `filter_repo_pairs()` + bulk-runner used by `pull`, `fetch`, and the MCP server so surfaces can't drift.
+- `core/locking.py` — `file_lock()` cross-process advisory lock guarding `repos.yaml` against concurrent CLI/web writes.
 - `cli/helpers.py` — Shared workspace resolution used by all CLI commands.
 - `cli/workspace_cmd.py` — workspace list/add/remove/scan subcommands.
 - `cli/main.py` — Typer app, global `-w/--workspace` option, command registration.
-- `tui/app.py` — Textual dashboard with DataTable, filter, pull, freeze toggle.
 
 ## Data Files
 
 - `~/.gitstow/config.yaml` — Settings (workspaces list, default host, SSH pref).
 - `~/.gitstow/repos.yaml` — Repo metadata nested by workspace label. Central location.
+- `~/.gitstow/repos.lock` — Cross-process advisory lock file (`core/locking.py`) held during `repos.yaml` writes. Not user-facing data; safe to ignore/delete if orphaned.
 
 ### repos.yaml format
 ```yaml
@@ -86,14 +88,14 @@ active:
     tags: [active]
 ```
 
-## All Commands (32)
+## All Commands (37)
 
 **Core:** `add`, `pull`, `fetch`, `list`, `status`, `remove`, `migrate`
 **Workspace:** `workspace list`, `workspace add`, `workspace remove`, `workspace scan`
 **Repo management:** `repo freeze`, `repo unfreeze`, `repo tag`, `repo untag`, `repo tags`, `repo info`
 **Power:** `exec`, `search`, `open`, `stats`
 **Sharing:** `collection export`, `collection import`
-**Shell:** `shell pick`, `shell init`, `shell completions`, `shell setup`, `tui`, `ui`
+**Shell:** `shell pick`, `shell init`, `shell completions`, `shell setup`, `ui`
 **Setup:** `onboard`, `config show/set/path/migrate-root`, `doctor`, `install-skill`, `setup-ai`, `update`
 
 ## Development
@@ -101,9 +103,8 @@ active:
 ```bash
 cd ~/labs/projects/gitstow
 pip install -e ".[dev]"
-pytest                    # 44 tests
+pytest                    # full suite — keep green
 ruff check src/
-pip install -e ".[tui]"   # For TUI development
 ```
 
 ## Patterns
@@ -123,7 +124,7 @@ pip install -e ".[tui]"   # For TUI development
 
 - Prefer proper long-term solutions over shortcut patches. If a feature is incomplete in one surface, build the feature into that surface instead of papering over it with wording, partial conditionals, or one-off display logic.
 - Do not recommend quick fixes, temporary patches, or narrow workarounds unless the user explicitly asks for a shortcut.
-- Keep CLI, TUI, web dashboard, JSON output, docs, and tests semantically aligned when changing user-facing status behavior.
+- Keep CLI, web dashboard, JSON output, docs, and tests semantically aligned when changing user-facing status behavior.
 - For repo state presentation, avoid using "dirty" as a broad user-facing bucket for every local change. Present it as local/uncommitted changes with the composition visible: modified, staged, and untracked counts.
 - Keep local working-tree state separate from remote relationship state. For example: local changes, clean, ahead, behind, diverged, frozen, missing.
 - When improving the web dashboard, implement the actual missing dashboard feature and shared classification/model behavior instead of copying a CLI-only assumption into the template.
@@ -139,6 +140,6 @@ pip install -e ".[tui]"   # For TUI development
 **Optional: MCP server** (`src/gitstow/mcp/server.py`)
 - For non-Claude-Code AI tools (Claude Desktop, Cursor, Windsurf)
 - Install: `pip install gitstow[mcp]`, entry point: `gitstow-mcp`
-- 13 tools + 3 resources, wraps same `core/` modules as CLI
+- 14 tools + 3 resources, wraps same `core/` modules as CLI
 - **Tradeoff:** MCP tools are always loaded into context (costs tokens even when idle).
   The skill has no such cost. Only use MCP for dedicated repo-management setups.

{gitstow-0.2.8 → gitstow-0.4.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: gitstow
-Version: 0.2.8
+Version: 0.4.0
 Summary: A git repository library manager — clone, organize, and maintain collections of repos you learn from
 Project-URL: Homepage, https://github.com/rishmadaan/gitstow
 Project-URL: Repository, https://github.com/rishmadaan/gitstow
@@ -26,21 +26,25 @@ Classifier: Programming Language :: Python :: 3.13
 Classifier: Topic :: Software Development :: Version Control :: Git
 Requires-Python: >=3.10
 Requires-Dist: beaupy>=3.0
-Requires-Dist: fastapi>=0.110
-Requires-Dist: jinja2>=3.1
-Requires-Dist: python-multipart>=0.0.9
 Requires-Dist: pyyaml>=6.0
 Requires-Dist: rich>=13.0
-Requires-Dist: typer[all]>=0.9
-Requires-Dist: uvicorn>=0.27
+Requires-Dist: typer>=0.9
 Provides-Extra: dev
+Requires-Dist: fastapi>=0.110; extra == 'dev'
 Requires-Dist: httpx>=0.27; extra == 'dev'
+Requires-Dist: jinja2>=3.1; extra == 'dev'
+Requires-Dist: mcp>=1.0; extra == 'dev'
 Requires-Dist: pytest>=8.0; extra == 'dev'
+Requires-Dist: python-multipart>=0.0.9; extra == 'dev'
 Requires-Dist: ruff>=0.4; extra == 'dev'
+Requires-Dist: uvicorn>=0.27; extra == 'dev'
 Provides-Extra: mcp
 Requires-Dist: mcp>=1.0; extra == 'mcp'
-Provides-Extra: tui
-Requires-Dist: textual>=0.50; extra == 'tui'
+Provides-Extra: ui
+Requires-Dist: fastapi>=0.110; extra == 'ui'
+Requires-Dist: jinja2>=3.1; extra == 'ui'
+Requires-Dist: python-multipart>=0.0.9; extra == 'ui'
+Requires-Dist: uvicorn>=0.27; extra == 'ui'
 Description-Content-Type: text/markdown
 
 # gitstow
@@ -62,8 +66,8 @@ Existing tools solve parts of this:
 ## Quick Start
 
 ```bash
-pipx install gitstow   # recommended
-# or: pip install gitstow
+pipx install "gitstow[ui]"   # recommended — CLI + browser dashboard
+# or: pip install gitstow    # CLI only; add [ui] for the dashboard
 
 # First-run setup (optional — works without it)
 gitstow onboard
@@ -99,6 +103,8 @@ gitstow workspace scan active
 ```bash
 gitstow add anthropic/claude-code facebook/react torvalds/linux
 ```
+Multiple URLs clone concurrently (bounded by `parallel_limit`, default 6) — a mismatched remote on an existing path errors instead of silently registering, and duplicate URLs in the same invocation are deduped.
+
 Creates (in a structured workspace):
 ```
 ~/oss/
@@ -117,8 +123,9 @@ gitstow -w oss pull             # Only update oss workspace
 gitstow pull --tag ai           # Only repos tagged 'ai'
 gitstow pull --exclude-tag stale # Everything except stale repos
 gitstow status                  # Git status dashboard
-gitstow -w active status --dirty # Dirty repos in active workspace
+gitstow -w active status --dirty # Repos with local changes in active workspace
 ```
+`status` shows local changes as a composition (e.g. "2 modified · 1 staged · 3 untracked") rather than a single "dirty" bucket, and keeps the remote relationship (ahead/behind/diverged) in its own column.
 
 ### Freeze & Tags
 ```bash
@@ -182,17 +189,13 @@ gsp                              # gitstow pull shorthand
 
 ### Browser Dashboard
 ```bash
-gitstow ui             # opens http://127.0.0.1:7853 in your browser
+pip install "gitstow[ui]"   # if you installed CLI-only
+gitstow ui                  # opens http://127.0.0.1:7853 in your browser
 gitstow ui --port 8080
 gitstow ui --no-browser
 ```
 Persistent local web dashboard for daily repo management — a tab you leave open. Shows dirty state across your library, pulls single repos or all-of-them with a parallel summary panel, adds/removes repos, edits tags, freezes stale ones. Auto-refreshes row status every 30 seconds. Binds `127.0.0.1` only (arbitrary git execution must not be LAN-reachable). Click **Shutdown** in the footer — or Ctrl+C — to stop.
 
-### Interactive Dashboard (TUI)
-```bash
-gitstow tui    # Keyboard-driven terminal dashboard (SSH-friendly)
-```
-
 ### JSON Output
 Every command supports `--json` for scripting and AI consumption:
 ```bash
@@ -237,7 +240,6 @@ gitstow status --json
 | `gitstow shell init` | Print shell functions to source in rc file |
 | `gitstow shell pick` | fzf-powered repo picker |
 | `gitstow shell completions` | Tab completion for repo names, workspaces, tags |
-| `gitstow tui` | Interactive terminal dashboard |
 | `gitstow fetch` | Fetch all remotes — update ahead/behind counts without merging |
 | `gitstow ui` | Launch local browser dashboard (http://127.0.0.1:7853) |
 | `gitstow update` | Upgrade gitstow itself from PyPI (detects pipx / pip / editable) |

{gitstow-0.2.8 → gitstow-0.4.0}/README.md

@@ -17,8 +17,8 @@ Existing tools solve parts of this:
 ## Quick Start
 
 ```bash
-pipx install gitstow   # recommended
-# or: pip install gitstow
+pipx install "gitstow[ui]"   # recommended — CLI + browser dashboard
+# or: pip install gitstow    # CLI only; add [ui] for the dashboard
 
 # First-run setup (optional — works without it)
 gitstow onboard
@@ -54,6 +54,8 @@ gitstow workspace scan active
 ```bash
 gitstow add anthropic/claude-code facebook/react torvalds/linux
 ```
+Multiple URLs clone concurrently (bounded by `parallel_limit`, default 6) — a mismatched remote on an existing path errors instead of silently registering, and duplicate URLs in the same invocation are deduped.
+
 Creates (in a structured workspace):
 ```
 ~/oss/
@@ -72,8 +74,9 @@ gitstow -w oss pull             # Only update oss workspace
 gitstow pull --tag ai           # Only repos tagged 'ai'
 gitstow pull --exclude-tag stale # Everything except stale repos
 gitstow status                  # Git status dashboard
-gitstow -w active status --dirty # Dirty repos in active workspace
+gitstow -w active status --dirty # Repos with local changes in active workspace
 ```
+`status` shows local changes as a composition (e.g. "2 modified · 1 staged · 3 untracked") rather than a single "dirty" bucket, and keeps the remote relationship (ahead/behind/diverged) in its own column.
 
 ### Freeze & Tags
 ```bash
@@ -137,17 +140,13 @@ gsp                              # gitstow pull shorthand
 
 ### Browser Dashboard
 ```bash
-gitstow ui             # opens http://127.0.0.1:7853 in your browser
+pip install "gitstow[ui]"   # if you installed CLI-only
+gitstow ui                  # opens http://127.0.0.1:7853 in your browser
 gitstow ui --port 8080
 gitstow ui --no-browser
 ```
 Persistent local web dashboard for daily repo management — a tab you leave open. Shows dirty state across your library, pulls single repos or all-of-them with a parallel summary panel, adds/removes repos, edits tags, freezes stale ones. Auto-refreshes row status every 30 seconds. Binds `127.0.0.1` only (arbitrary git execution must not be LAN-reachable). Click **Shutdown** in the footer — or Ctrl+C — to stop.
 
-### Interactive Dashboard (TUI)
-```bash
-gitstow tui    # Keyboard-driven terminal dashboard (SSH-friendly)
-```
-
 ### JSON Output
 Every command supports `--json` for scripting and AI consumption:
 ```bash
@@ -192,7 +191,6 @@ gitstow status --json
 | `gitstow shell init` | Print shell functions to source in rc file |
 | `gitstow shell pick` | fzf-powered repo picker |
 | `gitstow shell completions` | Tab completion for repo names, workspaces, tags |
-| `gitstow tui` | Interactive terminal dashboard |
 | `gitstow fetch` | Fetch all remotes — update ahead/behind counts without merging |
 | `gitstow ui` | Launch local browser dashboard (http://127.0.0.1:7853) |
 | `gitstow update` | Upgrade gitstow itself from PyPI (detects pipx / pip / editable) |

{gitstow-0.2.8 → gitstow-0.4.0}/docs/building/audit-2026-07-06.md

@@ -3,7 +3,7 @@
 **Date:** 2026-07-06
 **Auditor:** Claude (Fable 5), full read of all source (~9.5k lines Python), planning docs, tests, CI, packaging
 **Baseline:** commit `1aefe9a`, 139 tests passing
-**Status:** Awaiting greenlight — see [Implementation Waves](#implementation-waves)
+**Status:** COMPLETE — all three waves shipped (Wave 1 → 0.2.8; Waves 2+3 → 0.3.0)
 
 This document is the working tracker for the post-audit improvement effort. Each finding
 has an ID for reference. Check items off as waves land.
@@ -119,27 +119,27 @@ Opus (substantial) / Sonnet (mechanical) subagents.
 - [x] B12 path-containment check in CLI `remove --delete`
 - [x] B11 workspace label validation
 
-### Wave 2 — Shared status model (Opus) — NOT STARTED
-- [ ] P5 retire the Textual TUI (decision: retire; clears the third surface before the refactor)
-- [ ] A1/P4 `core/status_model.py`: one classifier separating local composition (modified/staged/untracked counts) from remote relationship (in-sync/ahead/behind/diverged) + frozen/missing overlays
-- [ ] Consume from CLI `status`, web dashboard, and `--json` payloads (per CLAUDE.md standards)
-- [ ] B6 one pull rule on both surfaces: modified/staged skip, untracked-only pulls (decision locked)
-- [ ] E1 parallelize web status gathering via `run_parallel` (off the event loop)
-- [ ] E2 batch RepoStore updates — `bulk()` (single save per bulk op)
-- [ ] Tests covering the classifier matrix
-
-### Wave 3 — Structure & polish (Sonnet-heavy, Opus for A3/A4) — NOT STARTED
-- [ ] P1/E3 parallel `add` clones; P2 remote-mismatch conflict error
-- [ ] E4 parallel `search`
-- [ ] A4 `core/operations.py` extraction (filters + bulk runner); collapse pull/fetch duplication
-- [ ] A3 MCP server consumes operations layer; add `last_fetched` everywhere (DOC3); new `fetch_repos` tool
-- [ ] P3 reconciliation hints surfacing untracked repos in `list`/`status` (human output only; JSON shapes unchanged)
-- [ ] B7 import preserves workspace; loud version error. B8 orphaned-workspace detection in doctor + workspace remove warning
-- [ ] B9 `$VISUAL`/`$EDITOR`-first open logic; terminal editors run foreground
-- [ ] A2 web stack → `[ui]` extra (decision locked; ships 0.3.0)
-- [ ] E5 `du`-backed disk sizing; E6 configurable `clone_timeout` setting
-- [ ] D2 macOS CI; D3 changelog gate in release.sh; D4 typer extra; D5 fetch/MCP tests
-- [ ] DOC1/DOC2 docs sync
+### Wave 2 — Shared status model (Opus) — COMPLETE (2026-07-12)
+- [x] P5 retire the Textual TUI (decision: retire; clears the third surface before the refactor)
+- [x] A1/P4 `core/status_model.py`: one classifier separating local composition (modified/staged/untracked counts) from remote relationship (in-sync/ahead/behind/diverged) + frozen/missing overlays
+- [x] Consume from CLI `status`, web dashboard, and `--json` payloads (per CLAUDE.md standards)
+- [x] B6 one pull rule on both surfaces: modified/staged skip, untracked-only pulls (decision locked)
+- [x] E1 parallelize web status gathering via `run_parallel` (off the event loop)
+- [x] E2 batch RepoStore updates — `bulk()` (single save per bulk op)
+- [x] Tests covering the classifier matrix
+
+### Wave 3 — Structure & polish (Sonnet-heavy, Opus for A3/A4) — COMPLETE (2026-07-12)
+- [x] P1/E3 parallel `add` clones; P2 remote-mismatch conflict error
+- [x] E4 parallel `search`
+- [x] A4 `core/operations.py` extraction (filters + bulk runner); collapse pull/fetch duplication
+- [x] A3 MCP server consumes operations layer; add `last_fetched` everywhere (DOC3); new `fetch_repos` tool
+- [x] P3 reconciliation hints surfacing untracked repos in `list`/`status` (human output only; JSON shapes unchanged)
+- [x] B7 import preserves workspace; loud version error. B8 orphaned-workspace detection in doctor + workspace remove warning
+- [x] B9 `$VISUAL`/`$EDITOR`-first open logic; terminal editors run foreground
+- [x] A2 web stack → `[ui]` extra (decision locked; ships 0.3.0)
+- [x] E5 `du`-backed disk sizing; E6 configurable `clone_timeout` setting
+- [x] D2 macOS CI; D3 changelog gate in release.sh; D4 typer extra; D5 fetch/MCP tests
+- [x] DOC1/DOC2 docs sync
 
 ## Verification notes