gstack/test/uninstall.test.ts

import { describe, test, expect, beforeEach, afterEach } from 'bun:test';
import { spawn, spawnSync } from 'child_process';
import * as fs from 'fs';
import * as path from 'path';
import * as os from 'os';

const ROOT = path.resolve(import.meta.dir, '..');
const UNINSTALL = path.join(ROOT, 'bin', 'gstack-uninstall');

describe('gstack-uninstall', () => {
  test('syntax check passes', () => {
    const result = spawnSync('bash', ['-n', UNINSTALL], { stdio: 'pipe', timeout: 30_000 });
    expect(result.status).toBe(0);
  });

  test('--help prints usage and exits 0', () => {
    const result = spawnSync('bash', [UNINSTALL, '--help'], { stdio: 'pipe', timeout: 30_000 });
    expect(result.status).toBe(0);
    const output = result.stdout.toString();
    expect(output).toContain('gstack-uninstall');
    expect(output).toContain('--force');
    expect(output).toContain('--keep-state');
  });

  test('unknown flag exits with error', () => {
    const result = spawnSync('bash', [UNINSTALL, '--bogus'], {
      stdio: 'pipe',
      timeout: 30_000,
      env: { ...process.env, HOME: '/nonexistent' },
    });
    expect(result.status).toBe(1);
    expect(result.stderr.toString()).toContain('Unknown option');
  });

  describe('integration tests with mock layout', () => {
    let tmpDir: string;
    let mockHome: string;
    let mockGitRoot: string;

    beforeEach(() => {
      tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-test-'));
      mockHome = path.join(tmpDir, 'home');
      mockGitRoot = path.join(tmpDir, 'repo');

      // Create mock gstack install layout
      fs.mkdirSync(path.join(mockHome, '.claude', 'skills', 'gstack'), { recursive: true });
      fs.writeFileSync(path.join(mockHome, '.claude', 'skills', 'gstack', 'SKILL.md'), 'test');

      // Create per-skill symlinks (both old unprefixed and new prefixed)
      fs.symlinkSync('gstack/review', path.join(mockHome, '.claude', 'skills', 'review'));
      fs.symlinkSync('gstack/ship', path.join(mockHome, '.claude', 'skills', 'gstack-ship'));

      // Create a non-gstack symlink (should NOT be removed)
      fs.mkdirSync(path.join(mockHome, '.claude', 'skills', 'other-tool'), { recursive: true });

      // Create state directory
      fs.mkdirSync(path.join(mockHome, '.gstack', 'projects'), { recursive: true });
      fs.writeFileSync(path.join(mockHome, '.gstack', 'config.json'), '{}');

      // Create mock git repo
      fs.mkdirSync(mockGitRoot, { recursive: true });
      spawnSync('git', ['init', '-b', 'main'], { cwd: mockGitRoot, stdio: 'pipe', timeout: 30_000 });
    });

    afterEach(() => {
      fs.rmSync(tmpDir, { recursive: true, force: true });
    });

    test('--force removes global Claude skills and state', () => {
      const result = spawnSync('bash', [UNINSTALL, '--force'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_DIR: path.join(mockHome, '.claude', 'skills', 'gstack'),
          GSTACK_STATE_DIR: path.join(mockHome, '.gstack'),
        },
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);
      const output = result.stdout.toString();
      expect(output).toContain('gstack uninstalled');

      // Global skill dir should be removed
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'gstack'))).toBe(false);

      // Per-skill symlinks pointing into gstack/ should be removed
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'review'))).toBe(false);
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'gstack-ship'))).toBe(false);

      // Non-gstack tool should still exist
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'other-tool'))).toBe(true);

      // State should be removed
      expect(fs.existsSync(path.join(mockHome, '.gstack'))).toBe(false);
    });

    test('--keep-state preserves state directory', () => {
      const result = spawnSync('bash', [UNINSTALL, '--force', '--keep-state'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_DIR: path.join(mockHome, '.claude', 'skills', 'gstack'),
          GSTACK_STATE_DIR: path.join(mockHome, '.gstack'),
        },
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);

      // Skills should be removed
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'gstack'))).toBe(false);

      // State should still exist
      expect(fs.existsSync(path.join(mockHome, '.gstack'))).toBe(true);
      expect(fs.existsSync(path.join(mockHome, '.gstack', 'config.json'))).toBe(true);
    });

    test('clean system outputs nothing to remove', () => {
      const cleanHome = path.join(tmpDir, 'clean-home');
      fs.mkdirSync(cleanHome, { recursive: true });

      const result = spawnSync('bash', [UNINSTALL, '--force'], {
        stdio: 'pipe',
        env: {
          ...process.env,
          HOME: cleanHome,
          GSTACK_DIR: path.join(cleanHome, 'nonexistent'),
          GSTACK_STATE_DIR: path.join(cleanHome, '.gstack'),
        },
        timeout: 30_000,
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);
      expect(result.stdout.toString()).toContain('Nothing to remove');
    });

    test('upgrade path: prefixed install + uninstall cleans both old and new symlinks', () => {
      // Simulate the state after setup --no-prefix followed by setup (with prefix):
      // Both old unprefixed and new prefixed symlinks exist
      // (mockHome already has both 'review' and 'gstack-ship' symlinks)

      const result = spawnSync('bash', [UNINSTALL, '--force'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_DIR: path.join(mockHome, '.claude', 'skills', 'gstack'),
          GSTACK_STATE_DIR: path.join(mockHome, '.gstack'),
        },
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);

      // Both old (review) and new (gstack-ship) symlinks should be gone
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'review'))).toBe(false);
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'gstack-ship'))).toBe(false);

      // Non-gstack should survive
      expect(fs.existsSync(path.join(mockHome, '.claude', 'skills', 'other-tool'))).toBe(true);
    });

    test('--force removes Cursor gstack skills and leaves other Cursor skills', () => {
      // Cursor installs are rendered real dirs, so removal is gated on the
      // generated banner in SKILL.md (S5) — the managed fixtures carry it.
      const banner = '<!-- AUTO-GENERATED from SKILL.md.tmpl - DO NOT EDIT DIRECTLY -->\n# x\n';
      fs.mkdirSync(path.join(mockHome, '.cursor', 'skills', 'gstack'), { recursive: true });
      fs.writeFileSync(path.join(mockHome, '.cursor', 'skills', 'gstack', 'SKILL.md'), banner);
      fs.mkdirSync(path.join(mockHome, '.cursor', 'skills', 'gstack-review'), { recursive: true });
      fs.writeFileSync(path.join(mockHome, '.cursor', 'skills', 'gstack-review', 'SKILL.md'), banner);
      fs.mkdirSync(path.join(mockHome, '.cursor', 'skills', 'frontend-design'), { recursive: true });
      fs.writeFileSync(path.join(mockHome, '.cursor', 'skills', 'frontend-design', 'SKILL.md'), 'keep');

      fs.mkdirSync(path.join(mockGitRoot, '.cursor', 'skills', 'gstack-ship'), { recursive: true });
      fs.writeFileSync(path.join(mockGitRoot, '.cursor', 'skills', 'gstack-ship', 'SKILL.md'), banner);
      fs.mkdirSync(path.join(mockGitRoot, '.cursor', 'rules'), { recursive: true });
      fs.writeFileSync(path.join(mockGitRoot, '.cursor', 'rules', 'keep.md'), 'keep');

      const result = spawnSync('bash', [UNINSTALL, '--force'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_DIR: path.join(mockHome, '.claude', 'skills', 'gstack'),
          GSTACK_STATE_DIR: path.join(mockHome, '.gstack'),
        },
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);

      expect(fs.existsSync(path.join(mockHome, '.cursor', 'skills', 'gstack'))).toBe(false);
      expect(fs.existsSync(path.join(mockHome, '.cursor', 'skills', 'gstack-review'))).toBe(false);
      expect(fs.existsSync(path.join(mockHome, '.cursor', 'skills', 'frontend-design'))).toBe(true);
      expect(fs.existsSync(path.join(mockGitRoot, '.cursor', 'skills', 'gstack-ship'))).toBe(false);
      expect(fs.existsSync(path.join(mockGitRoot, '.cursor', 'rules', 'keep.md'))).toBe(true);
    });

    // Value: protects=uninstall clears gstack's Gemini CLI skills from ~/.gemini/skills, a folder the user's own skills share;
    //   fails_when=the Gemini block is dropped, or loses the provenance gate and sweeps a user's gstack-prefixed skill;
    //   why_new=#1247 adds the Gemini CLI host; seam=none; no_claim=Gemini CLI itself (temp HOME fixture)
    test('--force removes Gemini CLI gstack skills and leaves the user\'s own', () => {
      const banner = '<!-- AUTO-GENERATED from SKILL.md.tmpl - DO NOT EDIT DIRECTLY -->\n# x\n';
      const skills = path.join(mockHome, '.gemini', 'skills');
      const render = path.join(tmpDir, 'render', 'gstack-review');
      fs.mkdirSync(render, { recursive: true });
      fs.writeFileSync(path.join(render, 'SKILL.md'), banner);
      fs.mkdirSync(path.join(skills, 'gstack'), { recursive: true });
      fs.writeFileSync(path.join(skills, 'gstack', 'SKILL.md'), banner);
      fs.symlinkSync(render, path.join(skills, 'gstack-review'));
      for (const [name, body] of [['gstack-my-notes', '# mine\n'], ['frontend-design', 'keep']]) {
        fs.mkdirSync(path.join(skills, name), { recursive: true });
        fs.writeFileSync(path.join(skills, name, 'SKILL.md'), body);
      }
      fs.writeFileSync(path.join(mockHome, '.gemini', 'settings.json'), '{}');

      const result = spawnSync('bash', [UNINSTALL, '--force'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_DIR: path.join(mockHome, '.claude', 'skills', 'gstack'),
          GSTACK_STATE_DIR: path.join(mockHome, '.gstack'),
        },
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);
      expect(fs.existsSync(path.join(skills, 'gstack'))).toBe(false);
      expect(fs.existsSync(path.join(skills, 'gstack-review'))).toBe(false);
      expect(fs.existsSync(path.join(render, 'SKILL.md'))).toBe(true);
      expect(fs.existsSync(path.join(skills, 'gstack-my-notes', 'SKILL.md'))).toBe(true);
      expect(fs.existsSync(path.join(skills, 'frontend-design', 'SKILL.md'))).toBe(true);
      expect(fs.existsSync(path.join(mockHome, '.gemini', 'settings.json'))).toBe(true);
      expect(result.stderr.toString()).toContain('gstack-my-notes');
    });

    test("a user's own gstack-prefixed Cursor dir (no banner) survives and is listed", () => {
      // S5: the bare gstack* glob must not sweep a dir that merely starts
      // with "gstack" — provenance comes from the generated banner, and a
      // hand-written SKILL.md never carries it.
      const foreign = path.join(mockHome, '.cursor', 'skills', 'gstack-fork-notes');
      fs.mkdirSync(foreign, { recursive: true });
      fs.writeFileSync(path.join(foreign, 'SKILL.md'), '# my own notes\n');

      const foreignLocal = path.join(mockGitRoot, '.cursor', 'skills', 'gstack-my-rules');
      fs.mkdirSync(foreignLocal, { recursive: true });
      fs.writeFileSync(path.join(foreignLocal, 'SKILL.md'), '# hand-written\n');

      const result = spawnSync('bash', [UNINSTALL, '--force'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_DIR: path.join(mockHome, '.claude', 'skills', 'gstack'),
          GSTACK_STATE_DIR: path.join(mockHome, '.gstack'),
        },
        cwd: mockGitRoot,
      });

      expect(result.status).toBe(0);
      expect(fs.existsSync(foreign)).toBe(true);
      expect(fs.existsSync(foreignLocal)).toBe(true);
      const stderr = result.stderr.toString();
      expect(stderr).toContain('left in place');
      expect(stderr).toContain('gstack-fork-notes');
      expect(stderr).toContain('gstack-my-rules');
    });
  });
});

// ----------------------------------------------------------------------
// Hook-cleanup ordering (phantom-hooks fix). Pre-v1.67.2, the settings
// cleanup ran AFTER `rm -rf $CLAUDE_SKILLS/gstack` — and SETTINGS_HOOK
// resolves via $(dirname "$0") INSIDE that root, so a real global uninstall
// (running the installed copy) silently orphaned every hook. Prior tests
// masked this by running the uninstaller from the repo checkout. This test
// runs the INSTALLED copy.
// ----------------------------------------------------------------------

describe('hook cleanup runs before the install root is deleted', () => {
  test('uninstall executed FROM the install root still removes hook entries', () => {
    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-order-'));
    try {
      const mockHome = path.join(tmp, 'home');
      const installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
      const installBin = path.join(installRoot, 'bin');
      fs.mkdirSync(installBin, { recursive: true });
      // The installed copies — the uninstaller under test IS the one inside
      // the root it deletes.
      for (const b of ['gstack-uninstall', 'gstack-settings-hook', 'gstack-session-update', 'gstack-config', 'gstack-state-root.sh']) {
        const src = path.join(ROOT, 'bin', b);
        const dst = path.join(installBin, b);
        fs.copyFileSync(src, dst);
        fs.chmodSync(dst, 0o755);
      }
      const settingsFile = path.join(mockHome, '.claude', 'settings.json');
      fs.writeFileSync(settingsFile, JSON.stringify({
        hooks: {
          PostToolUse: [{
            matcher: '(AskUserQuestion|mcp__.*__AskUserQuestion)',
            _gstack_source: 'auq-error-fallback',
            hooks: [{ type: 'command', command: '/dead/wt/hosts/claude/hooks/auq-error-fallback-hook', timeout: 5 }],
          }],
          Stop: [{
            hooks: [{ type: 'command', command: `${installRoot}/hosts/claude/hooks/timeline-stop-hook`, timeout: 5 }],
          }],
          PreCompact: [{ hooks: [{ type: 'command', command: '/Users/me/my-own-hook' }] }],
        },
      }, null, 2));
      fs.mkdirSync(path.join(mockHome, '.gstack'), { recursive: true });

      const result = spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), '--force', '--keep-state'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_SETTINGS_FILE: settingsFile,
          GSTACK_STATE_ROOT: path.join(mockHome, '.gstack'),
        },
        cwd: tmp,
      });
      expect(result.status).toBe(0);

      // Install root gone…
      expect(fs.existsSync(installRoot)).toBe(false);
      // …and the hook entries were still cleaned (cleanup ran BEFORE deletion).
      const s = JSON.parse(fs.readFileSync(settingsFile, 'utf-8'));
      expect(s.hooks?.PostToolUse).toBeUndefined();
      expect(s.hooks?.Stop).toBeUndefined();
      // The user's own hook survives the sweep.
      expect(s.hooks?.PreCompact?.[0]?.hooks?.[0]?.command).toBe('/Users/me/my-own-hook');
    } finally {
      fs.rmSync(tmp, { recursive: true, force: true });
    }
    // 30s: the copied uninstaller spawns several bun -e children; on a loaded
    // box their cold starts blow bun's default 5s per-test timeout.
  }, 30000);
});

describe('the Memorable bridge hook is removed by name and the kept config is left honest', () => {
  test('a tag-stripped memorable entry is removed, reported, and memorable_recall is set off under --keep-state', () => {
    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-memo-'));
    try {
      const mockHome = path.join(tmp, 'home');
      const installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
      const installBin = path.join(installRoot, 'bin');
      fs.mkdirSync(installBin, { recursive: true });
      for (const b of ['gstack-uninstall', 'gstack-settings-hook', 'gstack-session-update', 'gstack-config', 'gstack-state-root.sh']) {
        const dst = path.join(installBin, b);
        fs.copyFileSync(path.join(ROOT, 'bin', b), dst);
        fs.chmodSync(dst, 0o755);
      }
      const settingsFile = path.join(mockHome, '.claude', 'settings.json');
      fs.writeFileSync(settingsFile, JSON.stringify({
        hooks: {
          UserPromptSubmit: [
            { hooks: [{ type: 'command', command: `${installRoot}/hosts/claude/hooks/memorable-user-prompt-hook`, timeout: 5 }] },
            { hooks: [{ type: 'command', command: '"/Users/me/.memorable/bin/memorable" hook user-prompt' }] },
          ],
        },
      }, null, 2));
      const stateRoot = path.join(mockHome, '.gstack');
      fs.mkdirSync(stateRoot, { recursive: true });
      const env = { ...process.env, HOME: mockHome, GSTACK_SETTINGS_FILE: settingsFile, GSTACK_STATE_ROOT: stateRoot };
      spawnSync('bash', [path.join(installBin, 'gstack-config'), 'set', 'memorable_recall', 'on'], { env, timeout: 20_000 });

      const result = spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), '--force', '--keep-state'], {
        stdio: 'pipe', timeout: 30_000, env, cwd: tmp, encoding: 'utf-8',
      });
      expect(result.status).toBe(0);
      expect(result.stdout).toContain('Memorable UserPromptSubmit hook');
      const s = JSON.parse(fs.readFileSync(settingsFile, 'utf-8'));
      // gstack's entry gone, the vendor's own entry untouched
      expect(s.hooks.UserPromptSubmit).toHaveLength(1);
      expect(s.hooks.UserPromptSubmit[0].hooks[0].command).toContain('.memorable/bin/memorable');
      expect(fs.readFileSync(path.join(stateRoot, 'config.yaml'), 'utf-8')).toMatch(/memorable_recall: off/);
    } finally {
      fs.rmSync(tmp, { recursive: true, force: true });
    }
  }, 30000);
});

describe('the Memorable arm stays quiet when nothing of its is registered', () => {
  test('no memorable entry -> no "Memorable UserPromptSubmit hook" in the summary, exit 0', () => {
    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-memo-none-'));
    try {
      const mockHome = path.join(tmp, 'home');
      const installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
      const installBin = path.join(installRoot, 'bin');
      fs.mkdirSync(installBin, { recursive: true });
      for (const b of ['gstack-uninstall', 'gstack-settings-hook', 'gstack-session-update', 'gstack-config', 'gstack-state-root.sh']) {
        const dst = path.join(installBin, b);
        fs.copyFileSync(path.join(ROOT, 'bin', b), dst);
        fs.chmodSync(dst, 0o755);
      }
      const settingsFile = path.join(mockHome, '.claude', 'settings.json');
      fs.writeFileSync(settingsFile, JSON.stringify({ hooks: { UserPromptSubmit: [{ hooks: [{ type: 'command', command: '/Users/me/my-own-hook' }] }] } }, null, 2));
      fs.mkdirSync(path.join(mockHome, '.gstack'), { recursive: true });
      const result = spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), '--force', '--keep-state'], {
        stdio: 'pipe', timeout: 30_000, encoding: 'utf-8', cwd: tmp,
        env: { ...process.env, HOME: mockHome, GSTACK_SETTINGS_FILE: settingsFile, GSTACK_STATE_ROOT: path.join(mockHome, '.gstack') },
      });
      expect(result.status).toBe(0);
      expect(result.stdout).not.toContain('Memorable UserPromptSubmit hook');
      const s = JSON.parse(fs.readFileSync(settingsFile, 'utf-8'));
      expect(s.hooks.UserPromptSubmit[0].hooks[0].command).toBe('/Users/me/my-own-hook');
      // the consent flip only runs when the key reads on: no config file is created just to say off
      expect(fs.existsSync(path.join(mockHome, '.gstack', 'config.yaml'))).toBe(false);
    } finally {
      fs.rmSync(tmp, { recursive: true, force: true });
    }
  }, 30000);
});

describe('hook cleanup under lock contention is loud, never silent (review-army)', () => {
  test('a held foreign lock during uninstall surfaces the give-up warning on stderr', () => {
    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-lock-'));
    try {
      const mockHome = path.join(tmp, 'home');
      const installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
      const installBin = path.join(installRoot, 'bin');
      fs.mkdirSync(installBin, { recursive: true });
      for (const b of ['gstack-uninstall', 'gstack-settings-hook', 'gstack-session-update', 'gstack-config', 'gstack-state-root.sh']) {
        const dst = path.join(installBin, b);
        fs.copyFileSync(path.join(ROOT, 'bin', b), dst);
        fs.chmodSync(dst, 0o755);
      }
      const settingsFile = path.join(mockHome, '.claude', 'settings.json');
      fs.writeFileSync(settingsFile, JSON.stringify({
        hooks: {
          Stop: [{
            _gstack_source: 'gstack-timeline-stop',
            hooks: [{ type: 'command', command: `${installRoot}/hosts/claude/hooks/timeline-stop-hook` }],
          }],
        },
      }, null, 2));
      fs.mkdirSync(path.join(mockHome, '.gstack'), { recursive: true });
      // A fresh foreign lock: pre-fix, every cleanup call silently skipped and
      // uninstall reported clean while orphaning the hooks forever.
      fs.mkdirSync(`${settingsFile}.lock`);
      fs.writeFileSync(path.join(`${settingsFile}.lock`, 'owner'), 'another-live-process');

      const result = spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), '--force', '--keep-state'], {
        stdio: 'pipe',
        timeout: 30_000,
        env: {
          ...process.env,
          HOME: mockHome,
          GSTACK_SETTINGS_FILE: settingsFile,
          GSTACK_STATE_ROOT: path.join(mockHome, '.gstack'),
          GSTACK_SETTINGS_LOCK_TIMEOUT_MS: '300',
        },
        cwd: tmp,
      });
      const stderr = result.stderr.toString();
      const s = JSON.parse(fs.readFileSync(settingsFile, 'utf-8'));
      const cleaned = s.hooks?.Stop === undefined;
      // Either the sweep still happened, or the user SEES why it didn't.
      expect(cleaned || /could not acquire lock/.test(stderr)).toBe(true);
      expect(/could not acquire lock/.test(stderr)).toBe(true);
    } finally {
      fs.rmSync(tmp, { recursive: true, force: true });
    }
    // 30s: several settings-hook calls each wait out the 300ms lock give-up,
    // and their bun -e cold starts stack up under load — the default 5s
    // per-test budget is too tight on a busy box.
  }, 30000);
});

describe('the consent key never outlives the hook, even when the config lives outside the removed state dir', () => {
  test('full uninstall (no --keep-state) with GSTACK_STATE_ROOT elsewhere: memorable_recall flips off there', () => {
    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-memo-root-'));
    try {
      const mockHome = path.join(tmp, 'home');
      const otherRoot = path.join(tmp, 'elsewhere');
      const installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
      const installBin = path.join(installRoot, 'bin');
      fs.mkdirSync(installBin, { recursive: true });
      fs.mkdirSync(otherRoot, { recursive: true });
      for (const b of ['gstack-uninstall', 'gstack-settings-hook', 'gstack-session-update', 'gstack-config', 'gstack-state-root.sh']) {
        const dst = path.join(installBin, b);
        fs.copyFileSync(path.join(ROOT, 'bin', b), dst);
        fs.chmodSync(dst, 0o755);
      }
      const settingsFile = path.join(mockHome, '.claude', 'settings.json');
      fs.writeFileSync(settingsFile, JSON.stringify({ hooks: {} }));
      fs.mkdirSync(path.join(mockHome, '.gstack'), { recursive: true });
      const env = { ...process.env, HOME: mockHome, GSTACK_SETTINGS_FILE: settingsFile, GSTACK_STATE_ROOT: otherRoot };
      expect(spawnSync('bash', [path.join(installBin, 'gstack-config'), 'set', 'memorable_recall', 'on'], { env, timeout: 20_000 }).status).toBe(0);
      const result = spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), '--force'], {
        stdio: 'pipe', timeout: 30_000, encoding: 'utf-8', cwd: tmp, env,
      });
      expect(result.status).toBe(0);
      expect(fs.existsSync(path.join(mockHome, '.gstack'))).toBe(false); // the default state dir went
      expect(fs.readFileSync(path.join(otherRoot, 'config.yaml'), 'utf-8')).toMatch(/memorable_recall: off/); // the real config did not keep consent
      expect(result.stdout).toContain('memorable_recall consent (set off)');
    } finally {
      fs.rmSync(tmp, { recursive: true, force: true });
    }
  });
});

describe('the consent flip does not depend on the hook manager being present', () => {
  test('gstack-settings-hook missing from the install: memorable_recall still goes off', () => {
    const tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-memo-nohook-'));
    try {
      const mockHome = path.join(tmp, 'home');
      const installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
      const installBin = path.join(installRoot, 'bin');
      fs.mkdirSync(installBin, { recursive: true });
      for (const b of ['gstack-uninstall', 'gstack-config', 'gstack-state-root.sh']) { // no settings hook, no session-update
        const dst = path.join(installBin, b);
        fs.copyFileSync(path.join(ROOT, 'bin', b), dst);
        fs.chmodSync(dst, 0o755);
      }
      const stateRoot = path.join(mockHome, '.gstack');
      fs.mkdirSync(stateRoot, { recursive: true });
      const env = { ...process.env, HOME: mockHome, GSTACK_STATE_ROOT: stateRoot };
      expect(spawnSync('bash', [path.join(installBin, 'gstack-config'), 'set', 'memorable_recall', 'on'], { env, timeout: 20_000 }).status).toBe(0);
      const result = spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), '--force', '--keep-state'], {
        stdio: 'pipe', timeout: 30_000, encoding: 'utf-8', cwd: tmp, env,
      });
      expect(result.status).toBe(0);
      expect(fs.readFileSync(path.join(stateRoot, 'config.yaml'), 'utf-8')).toMatch(/memorable_recall: off/);
    } finally {
      fs.rmSync(tmp, { recursive: true, force: true });
    }
  });
});

describe('state-root safety: only the default root is deleted (docs/state-root.md)', () => {
  let tmp: string, mockHome: string, installBin: string, installRoot: string;
  beforeEach(() => {
    tmp = fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-root-'));
    mockHome = path.join(tmp, 'home');
    installRoot = path.join(mockHome, '.claude', 'skills', 'gstack');
    installBin = path.join(installRoot, 'bin');
    fs.mkdirSync(installBin, { recursive: true });
    for (const b of ['gstack-uninstall', 'gstack-config', 'gstack-state-root.sh']) {
      fs.copyFileSync(path.join(ROOT, 'bin', b), path.join(installBin, b));
      fs.chmodSync(path.join(installBin, b), 0o755);
    }
  });
  afterEach(() => fs.rmSync(tmp, { recursive: true, force: true }));
  function uninstall(args: string[], env: Record<string, string>, input?: string) {
    return spawnSync('bash', [path.join(installBin, 'gstack-uninstall'), ...args], {
      cwd: tmp, input, encoding: 'utf-8', timeout: 30_000,
      env: { ...process.env, HOME: mockHome, GSTACK_SETTINGS_FILE: path.join(mockHome, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: '', GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '', ...env } as Record<string, string>,
    });
  }

  for (const mode of ['--force', 'interactive'] as const) {
    test(`a custom GSTACK_HOME root is left in place with the removal command (${mode}); $HOME/.gstack goes`, () => {
      const custom = path.join(tmp, 'custom-state');
      fs.mkdirSync(path.join(custom, 'projects'), { recursive: true });
      fs.mkdirSync(path.join(mockHome, '.gstack'), { recursive: true });
      const r = mode === '--force' ? uninstall(['--force'], { GSTACK_HOME: custom }) : uninstall([], { GSTACK_HOME: custom }, 'y\n');
      expect(r.status).toBe(0);
      expect(r.stderr).toContain(`left in place: ${custom} (selected by GSTACK_HOME=${custom})`);
      expect(r.stderr).toContain(`fix: after checking it, remove it with rm -rf -- '${custom}'`);
      expect(r.stderr).toContain('docs/state-root.md');
      expect(fs.existsSync(path.join(custom, 'projects'))).toBe(true);
      expect(fs.existsSync(path.join(mockHome, '.gstack'))).toBe(false);
      if (mode === 'interactive') expect(r.stdout).toContain(`(kept) ${custom}`);
    });
  }

  for (const [label, target] of [['$HOME', () => mockHome], ['/', () => '/'], ['the gstack checkout', () => installRoot]] as const) {
    test(`$HOME/.gstack symlinked to ${label} is refused with exit 2 and a fix line`, () => {
      fs.symlinkSync(target(), path.join(mockHome, '.gstack'));
      const r = uninstall(['--force'], {});
      expect(r.status).toBe(2);
      expect(r.stderr).toContain(`gstack-uninstall: refusing to delete ${path.join(mockHome, '.gstack')}: `);
      expect(r.stderr).toMatch(/^fix: .*docs\/state-root\.md/m);
      expect(fs.existsSync(path.join(installBin, 'gstack-uninstall'))).toBe(true);
      expect(fs.lstatSync(path.join(mockHome, '.gstack')).isSymbolicLink()).toBe(true);
    });
  }

  test('--keep-state deletes nothing and never refuses', () => {
    const custom = path.join(tmp, 'custom-state');
    fs.mkdirSync(custom, { recursive: true });
    fs.symlinkSync(mockHome, path.join(mockHome, '.gstack'));
    const r = uninstall(['--force', '--keep-state'], { GSTACK_HOME: custom });
    expect(r.status).toBe(0);
    expect(r.stderr).not.toContain('left in place:');
    expect(fs.existsSync(custom)).toBe(true);
    expect(fs.lstatSync(path.join(mockHome, '.gstack')).isSymbolicLink()).toBe(true);
  });
});

// Value: protects=a repo's tracked .gstack/ policy files and the uncommitted work in its .gstack-worktrees/ checkouts;
//   fails_when=uninstall removes per-project state without checking --keep-state, git-tracked files, or dirty worktrees;
//   why_new=GSTA-461 item 9 (data loss under --keep-state); seam=none; no_claim=a real gstack install (temp HOME and state root)
describe('per-project state: tracked files and dirty worktrees survive (GSTA-461 item 9)', () => {
  let tmp: string, home: string, repo: string, gitEnv: Record<string, string>;
  const git = (args: string[], cwd = repo) => {
    const r = spawnSync('git', ['-c', 'user.name=fixture', '-c', 'user.email=fixture@example.com', '-c', 'commit.gpgsign=false', ...args], { cwd, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
    expect(r.status).toBe(0);
    return r.stdout;
  };
  const uninstall = (args: string[]) => spawnSync('bash', [UNINSTALL, ...args], {
    cwd: repo, encoding: 'utf-8', timeout: 30_000,
    env: { ...gitEnv, HOME: home, GSTACK_DIR: path.join(home, '.claude', 'skills', 'gstack'),
      GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
      GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
  });
  const worktree = path.join('.gstack-worktrees', 'run-1', 'lane-1');

  beforeEach(() => {
    tmp = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-proj-')));
    home = path.join(tmp, 'home');
    repo = path.join(tmp, 'proj');
    fs.writeFileSync(path.join(tmp, 'gitconfig'), '');
    gitEnv = { ...process.env, GIT_CONFIG_GLOBAL: path.join(tmp, 'gitconfig'), GIT_CONFIG_NOSYSTEM: '1' } as Record<string, string>;
    fs.mkdirSync(path.join(home, '.claude', 'skills', 'gstack'), { recursive: true });
    fs.writeFileSync(path.join(home, '.claude', 'skills', 'gstack', 'SKILL.md'), 'test');
    fs.mkdirSync(path.join(home, '.gstack'), { recursive: true });
    fs.mkdirSync(path.join(repo, '.gstack'), { recursive: true });
    git(['init', '-q', '-b', 'main']);
    fs.writeFileSync(path.join(repo, '.git', 'info', 'exclude'), '.gstack-worktrees/\n');
    fs.writeFileSync(path.join(repo, 'README.md'), 'x\n');
    git(['add', 'README.md']);
    git(['commit', '-q', '-m', 'seed']);
  });
  afterEach(() => fs.rmSync(tmp, { recursive: true, force: true }));

  function trackPolicyAndAddBrowseState() {
    fs.writeFileSync(path.join(repo, '.gstack', 'ship-policy.json'), '{"merge":"direct"}\n');
    git(['add', '.gstack/ship-policy.json']);
    git(['commit', '-q', '-m', 'policy']);
    fs.writeFileSync(path.join(repo, '.gstack', '.gitignore'), '*\n');
    fs.writeFileSync(path.join(repo, '.gstack', 'browse.json'), '{}\n');
  }
  function addWorktree(dirty: boolean) {
    git(['worktree', 'add', '-q', '--detach', worktree, 'HEAD']);
    if (dirty) fs.writeFileSync(path.join(repo, worktree, 'wip.txt'), 'unsaved work\n');
  }

  test('--keep-state keeps the repo .gstack/ and every .gstack-worktrees/ checkout', () => {
    trackPolicyAndAddBrowseState();
    addWorktree(true);
    const r = uninstall(['--force', '--keep-state']);
    expect(r.status).toBe(0);
    expect(r.stdout).not.toContain(`${repo}/.gstack`);
    expect(fs.existsSync(path.join(repo, '.gstack', 'browse.json'))).toBe(true);
    expect(git(['status', '--short'])).toBe('');
    expect(fs.readFileSync(path.join(repo, worktree, 'wip.txt'), 'utf-8')).toBe('unsaved work\n');
    expect(fs.existsSync(path.join(home, '.claude', 'skills', 'gstack'))).toBe(false);
  });

  test('a plain uninstall keeps git-tracked .gstack files and removes the ignored browse state', () => {
    trackPolicyAndAddBrowseState();
    fs.writeFileSync(path.join(repo, '.gstack', 'ship-policy.json'), '{"merge":"queue"}\n');
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(fs.readFileSync(path.join(repo, '.gstack', 'ship-policy.json'), 'utf-8')).toBe('{"merge":"queue"}\n');
    expect(fs.existsSync(path.join(repo, '.gstack', 'browse.json'))).toBe(false);
    expect(git(['status', '--short', '--', '.gstack'])).toBe(' M .gstack/ship-policy.json\n');
    expect(r.stderr).toContain('kept git-tracked files');
  });

  test('a dirty worktree stops a plain uninstall before anything is removed, naming the worktree and the fix', () => {
    trackPolicyAndAddBrowseState();
    addWorktree(true);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${path.join(repo, worktree)}: it has uncommitted changes`);
    expect(r.stderr).toMatch(/^fix: .*--keep-state.*--force-worktrees/m);
    expect(fs.readFileSync(path.join(repo, worktree, 'wip.txt'), 'utf-8')).toBe('unsaved work\n');
    expect(fs.existsSync(path.join(repo, '.gstack', 'browse.json'))).toBe(true);
    expect(fs.existsSync(path.join(home, '.claude', 'skills', 'gstack'))).toBe(true);
    expect(fs.existsSync(path.join(home, '.gstack'))).toBe(true);
  });

  test('--force-worktrees removes a dirty worktree and prunes its registration', () => {
    addWorktree(true);
    const r = uninstall(['--force', '--force-worktrees']);
    expect(r.status).toBe(0);
    expect(fs.existsSync(path.join(repo, '.gstack-worktrees'))).toBe(false);
    expect(git(['worktree', 'list', '--porcelain'])).not.toContain('lane-1');
  });

  test('a missing worktree outside .gstack-worktrees keeps its registration and its commits', () => {
    addWorktree(false);
    const away = path.join(tmp, 'usb', 'wt');
    git(['worktree', 'add', '-q', '--detach', away, 'HEAD']);
    git(['commit', '-q', '--allow-empty', '-m', 'unique detached work'], away);
    const head = git(['rev-parse', 'HEAD'], away).trim();
    fs.renameSync(path.join(tmp, 'usb'), path.join(tmp, 'usb.unmounted'));
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(fs.existsSync(path.join(repo, '.gstack-worktrees'))).toBe(false);
    const list = git(['worktree', 'list', '--porcelain']);
    expect(list).toContain(`worktree ${away}\nHEAD ${head}\n`);
    expect(list).not.toContain('lane-1');
  });

  test('status.showUntrackedFiles=no does not hide a new file in a worktree', () => {
    addWorktree(true);
    git(['config', 'status.showUntrackedFiles', 'no']);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${path.join(repo, worktree)}: it has uncommitted changes`);
    expect(fs.existsSync(path.join(repo, worktree, 'wip.txt'))).toBe(true);
  });

  test('a dirty worktree still stops the uninstall after the repo is moved', () => {
    addWorktree(true);
    const moved = path.join(tmp, 'moved');
    fs.renameSync(repo, moved);
    repo = moved;
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${path.join(moved, worktree)}: it is not a registered worktree of this repository`);
    expect(fs.readFileSync(path.join(moved, worktree, 'wip.txt'), 'utf-8')).toBe('unsaved work\n');
  });

  test('a checkout name with a newline never turns into a relative delete', () => {
    fs.mkdirSync(path.join(repo, 'src'), { recursive: true });
    fs.writeFileSync(path.join(repo, 'src', 'app.txt'), 'app\n');
    git(['add', 'src/app.txt']);
    git(['commit', '-q', '-m', 'src']);
    fs.mkdirSync(path.join(repo, '.gstack-worktrees', 'x\nsrc', '.git'), { recursive: true });
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain('refusing to delete');
    expect(fs.readFileSync(path.join(repo, 'src', 'app.txt'), 'utf-8')).toBe('app\n');
  });

  const linkGone = () => {
    try { fs.lstatSync(path.join(repo, '.gstack-worktrees')); return false; } catch { return true; }
  };

  test('a symlinked .gstack-worktrees is unlinked, never followed, even when a checkout behind it has unique commits', () => {
    const store = path.join(repo, 'worktree-store');
    fs.mkdirSync(store);
    fs.symlinkSync(store, path.join(repo, '.gstack-worktrees'));
    addWorktree(false);
    git(['commit', '-q', '--allow-empty', '-m', 'wip'], path.join(repo, worktree));
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(linkGone()).toBe(true);
    expect(fs.existsSync(path.join(store, 'run-1', 'lane-1', 'README.md'))).toBe(true);
    expect(git(['worktree', 'list', '--porcelain'])).toContain(`worktree ${path.join(store, 'run-1', 'lane-1')}\n`);
  });

  test('a .gstack-worktrees symlink to a folder inside the repo keeps the worktrees behind it and their ignored files', () => {
    fs.appendFileSync(path.join(repo, '.git', 'info', 'exclude'), '.claude/worktrees/\n.env\n');
    const feat = path.join(repo, '.claude', 'worktrees', 'feat');
    git(['worktree', 'add', '-q', '-b', 'feat', feat]);
    fs.writeFileSync(path.join(feat, '.env'), 'SECRET=1\n');
    fs.symlinkSync('.claude/worktrees', path.join(repo, '.gstack-worktrees'));
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(linkGone()).toBe(true);
    expect(fs.readFileSync(path.join(feat, '.env'), 'utf-8')).toBe('SECRET=1\n');
    expect(git(['worktree', 'list', '--porcelain'])).toContain(`worktree ${feat}\n`);
  });

  for (const flags of [['--force'], ['--force', '--force-worktrees']]) {
    test(`a .gstack-worktrees symlink to a folder outside the repo is only unlinked by ${flags.join(' ')}`, () => {
      const store = path.join(tmp, 'worktree-store');
      fs.mkdirSync(store);
      git(['worktree', 'add', '-q', '-b', 'feature', path.join(store, 'feature')]);
      fs.symlinkSync(store, path.join(repo, '.gstack-worktrees'));
      const r = uninstall(flags);
      expect(r.status).toBe(0);
      expect(linkGone()).toBe(true);
      expect(fs.existsSync(path.join(store, 'feature', 'README.md'))).toBe(true);
      expect(git(['worktree', 'list', '--porcelain'])).toContain(`worktree ${path.join(store, 'feature')}\n`);
      expect(fs.existsSync(path.join(home, '.claude', 'skills', 'gstack'))).toBe(false);
    });
  }

  test('a .gstack-worktrees symlink to a folder holding the main checkout never deletes the repo', () => {
    fs.symlinkSync(tmp, path.join(repo, '.gstack-worktrees'));
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(linkGone()).toBe(true);
    expect(fs.existsSync(path.join(repo, '.git', 'HEAD'))).toBe(true);
    expect(fs.readFileSync(path.join(repo, 'README.md'), 'utf-8')).toBe('x\n');
  });

  test('a repo under .gstack-worktrees never runs its own config commands during the check', () => {
    const nested = path.join(repo, '.gstack-worktrees', 'run-1', 'clone');
    fs.mkdirSync(nested, { recursive: true });
    git(['init', '-q', '-b', 'main'], nested);
    fs.writeFileSync(path.join(nested, 'a.txt'), 'a\n');
    git(['add', 'a.txt'], nested);
    git(['commit', '-q', '-m', 'a'], nested);
    const marker = path.join(tmp, 'fsmonitor-ran');
    git(['config', 'core.fsmonitor', `touch '${marker}'; false`], nested);
    const r = uninstall(['--force']);
    expect(fs.existsSync(marker)).toBe(false);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${nested}: it is not a registered worktree of this repository`);
  });

  test('a .gstack-worktrees that is itself a git repo stops the uninstall and keeps its work', () => {
    git(['init', '-q', '.gstack-worktrees']);
    fs.writeFileSync(path.join(repo, '.gstack-worktrees', 'wip.txt'), 'unsaved work\n');
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(fs.readFileSync(path.join(repo, '.gstack-worktrees', 'wip.txt'), 'utf-8')).toBe('unsaved work\n');
  });

  test('a clean worktree holding a commit no branch contains stops the uninstall', () => {
    addWorktree(false);
    git(['commit', '-q', '--allow-empty', '-m', 'wip'], path.join(repo, worktree));
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${path.join(repo, worktree)}: it has commits no branch or tag contains`);
    expect(fs.existsSync(path.join(repo, worktree))).toBe(true);
  });

  test('a symlink inside .gstack-worktrees to a repo outside is only unlinked by --force --force-worktrees', () => {
    const outside = path.join(tmp, 'outside');
    fs.mkdirSync(outside);
    git(['init', '-q', '-b', 'main'], outside);
    fs.writeFileSync(path.join(outside, 'keep.txt'), 'keep\n');
    fs.mkdirSync(path.join(repo, '.gstack-worktrees', 'run-1'), { recursive: true });
    fs.symlinkSync(outside, path.join(repo, '.gstack-worktrees', 'run-1', 'lane'));
    const r = uninstall(['--force', '--force-worktrees']);
    expect(r.status).toBe(0);
    expect(fs.existsSync(path.join(repo, '.gstack-worktrees'))).toBe(false);
    expect(fs.readFileSync(path.join(outside, 'keep.txt'), 'utf-8')).toBe('keep\n');
    expect(fs.existsSync(path.join(outside, '.git', 'HEAD'))).toBe(true);
  });

  test('a dirty worktree nested inside a clean lane stops the uninstall and keeps its edit', () => {
    addWorktree(false);
    const inner = path.join(repo, worktree, '.gstack-worktrees', 'run-2', 'inner');
    git(['worktree', 'add', '-q', '--detach', inner, 'HEAD'], path.join(repo, worktree));
    fs.writeFileSync(path.join(inner, 'README.md'), 'unsaved edit\n');
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${inner}: it has uncommitted changes`);
    expect(fs.readFileSync(path.join(inner, 'README.md'), 'utf-8')).toBe('unsaved edit\n');
    expect(fs.existsSync(path.join(home, '.claude', 'skills', 'gstack'))).toBe(true);
  });

  test('a clean worktree nested inside a clean lane is removed with its registration', () => {
    addWorktree(false);
    const inner = path.join(repo, worktree, '.gstack-worktrees', 'run-2', 'inner');
    git(['worktree', 'add', '-q', '--detach', inner, 'HEAD'], path.join(repo, worktree));
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(fs.existsSync(path.join(repo, '.gstack-worktrees'))).toBe(false);
    expect(git(['worktree', 'list', '--porcelain'])).not.toContain('.gstack-worktrees');
  });

  test('an initialized submodule inside a clean lane does not stop the uninstall', () => {
    const lib = path.join(tmp, 'lib');
    fs.mkdirSync(lib);
    git(['init', '-q', '-b', 'main'], lib);
    fs.writeFileSync(path.join(lib, 'lib.txt'), 'lib\n');
    git(['add', 'lib.txt'], lib);
    git(['commit', '-q', '-m', 'lib'], lib);
    git(['-c', 'protocol.file.allow=always', 'submodule', 'add', '-q', lib, 'vendor/lib']);
    git(['commit', '-q', '-m', 'submodule']);
    addWorktree(false);
    git(['-c', 'protocol.file.allow=always', 'submodule', 'update', '-q', '--init'], path.join(repo, worktree));
    expect(fs.existsSync(path.join(repo, worktree, 'vendor', 'lib', '.git'))).toBe(true);
    const r = uninstall(['--force']);
    expect(r.stderr).toBe('');
    expect(r.status).toBe(0);
    expect(fs.existsSync(path.join(repo, '.gstack-worktrees'))).toBe(false);
  });

  test('a submodule inside a clean lane with a commit no remote-tracking branch holds stops the uninstall', () => {
    const lib = path.join(tmp, 'lib');
    fs.mkdirSync(lib);
    git(['init', '-q', '-b', 'main'], lib);
    fs.writeFileSync(path.join(lib, 'lib.txt'), 'lib\n');
    git(['add', 'lib.txt'], lib);
    git(['commit', '-q', '-m', 'lib'], lib);
    git(['-c', 'protocol.file.allow=always', 'submodule', 'add', '-q', lib, 'vendor/lib']);
    git(['commit', '-q', '-m', 'submodule']);
    addWorktree(false);
    git(['-c', 'protocol.file.allow=always', 'submodule', 'update', '-q', '--init'], path.join(repo, worktree));
    const sub = path.join(repo, worktree, 'vendor', 'lib');
    const recorded = git(['rev-parse', 'HEAD'], sub).trim();
    git(['switch', '-q', '-c', 'wip'], sub);
    fs.writeFileSync(path.join(sub, 'wip.txt'), 'local only\n');
    git(['add', 'wip.txt'], sub);
    git(['commit', '-q', '-m', 'wip'], sub);
    const wip = git(['rev-parse', 'HEAD'], sub).trim();
    git(['switch', '-q', '--detach', recorded], sub);
    expect(git(['status', '--porcelain', '--ignore-submodules=none'], path.join(repo, worktree))).toBe('');
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${sub}: it is a submodule with commits no remote-tracking branch contains`);
    expect(git(['cat-file', '-t', wip], sub).trim()).toBe('commit');
  });

  for (const flags of [['--force'], ['--force', '--force-worktrees']]) {
    test(`a locked worktree stops ${flags.join(' ')} and is kept with its registration`, () => {
      addWorktree(false);
      git(['worktree', 'lock', '--reason', 'on a USB disk', worktree]);
      const r = uninstall(flags);
      expect(r.status).toBe(2);
      expect(r.stderr).toContain(`refusing to delete ${path.join(repo, worktree)}: it is locked`);
      expect(r.stderr).toMatch(/^fix: .*git worktree unlock/m);
      expect(fs.existsSync(path.join(repo, worktree, 'README.md'))).toBe(true);
      expect(git(['worktree', 'list', '--porcelain'])).toContain(`worktree ${path.join(repo, worktree)}\n`);
    });
  }

  test('a .gstack that is its own git repo is kept, with the reason, when the project tracks nothing there', () => {
    git(['init', '-q', '-b', 'main'], path.join(repo, '.gstack'));
    fs.writeFileSync(path.join(repo, '.gstack', 'notes.md'), 'mine\n');
    git(['add', 'notes.md'], path.join(repo, '.gstack'));
    git(['commit', '-q', '-m', 'unpushed notes'], path.join(repo, '.gstack'));
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(r.stderr).toContain(`kept ${repo}/.gstack/: it holds its own git repository`);
    expect(git(['log', '--format=%s'], path.join(repo, '.gstack'))).toBe('unpushed notes\n');
    expect(fs.existsSync(path.join(home, '.gstack'))).toBe(false);
  });

  test('a worktree edited while the prompt waits is kept: the check runs again before deleting', async () => {
    addWorktree(false);
    const child = spawn('bash', [UNINSTALL], {
      cwd: repo, timeout: 30_000, stdio: ['pipe', 'pipe', 'pipe'],
      env: { ...gitEnv, HOME: home, GSTACK_DIR: path.join(home, '.claude', 'skills', 'gstack'),
        GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
    });
    let stdout = '', stderr = '';
    child.stderr.on('data', (d) => { stderr += d; });
    child.stdout.on('data', (d) => {
      stdout += d;
      if (stdout.includes('Continue? [y/N]') && !child.stdin.writableEnded) {
        fs.writeFileSync(path.join(repo, worktree, 'wip.txt'), 'typed during the prompt\n');
        child.stdin.end('y\n');
      }
    });
    const status = await new Promise<number | null>((resolve) => child.on('close', resolve));
    expect(status).toBe(2);
    expect(stderr).toContain(`refusing to delete ${path.join(repo, worktree)}: it has uncommitted changes`);
    expect(stderr).toContain('nothing was removed: a checkout changed while the prompt waited');
    expect(fs.existsSync(path.join(home, '.claude', 'skills', 'gstack'))).toBe(true);
    expect(fs.readFileSync(path.join(repo, worktree, 'wip.txt'), 'utf-8')).toBe('typed during the prompt\n');
  });

  const promptRun = (cwd: string, onPrompt: () => void) => new Promise<{ status: number | null; stderr: string }>((resolve) => {
    const child = spawn('bash', [UNINSTALL], {
      cwd, timeout: 30_000, stdio: ['pipe', 'pipe', 'pipe'],
      env: { ...gitEnv, HOME: home, GSTACK_DIR: path.join(home, '.claude', 'skills', 'gstack'),
        GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
    });
    let stdout = '', stderr = '';
    child.stderr.on('data', (d) => { stderr += d; });
    child.stdout.on('data', (d) => {
      stdout += d;
      if (stdout.includes('Continue? [y/N]') && !child.stdin.writableEnded) { onPrompt(); child.stdin.end('y\n'); }
    });
    child.on('close', (status) => resolve({ status, stderr }));
  });
  const makeInstallRepo = () => {
    const install = path.join(home, '.claude', 'skills', 'gstack');
    git(['init', '-q', '-b', 'main'], install);
    fs.writeFileSync(path.join(install, '.git', 'info', 'exclude'), '.gstack-worktrees/\n.gstack/\n');
    git(['add', 'SKILL.md'], install);
    git(['commit', '-q', '-m', 'install'], install);
    // Like a real git-clone install, every commit is on its origin (GST-2303 refuses unpushed ones).
    git(['init', '-q', '--bare', path.join(tmp, 'install-origin.git')], tmp);
    git(['remote', 'add', 'origin', path.join(tmp, 'install-origin.git')], install);
    git(['push', '-q', 'origin', 'main'], install);
    return install;
  };

  test('run from inside the install, a worktree edited during the prompt stops the uninstall before anything is removed', async () => {
    const install = makeInstallRepo();
    const lane = path.join(install, '.gstack-worktrees', 'run-1', 'lane');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD'], install);
    const r = await promptRun(install, () => fs.writeFileSync(path.join(lane, 'wip.txt'), 'typed during the prompt\n'));
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${lane}: it has uncommitted changes`);
    expect(fs.readFileSync(path.join(lane, 'wip.txt'), 'utf-8')).toBe('typed during the prompt\n');
    expect(fs.existsSync(path.join(install, 'SKILL.md'))).toBe(true);
    expect(fs.existsSync(path.join(home, '.gstack'))).toBe(true);
  });

  test('run from inside the install, a .gstack that is its own repo stops the uninstall before anything is removed', () => {
    const install = makeInstallRepo();
    const own = path.join(install, '.gstack');
    fs.mkdirSync(own);
    git(['init', '-q', '-b', 'main'], own);
    fs.writeFileSync(path.join(own, 'notes.md'), 'mine\n');
    git(['add', 'notes.md'], own);
    git(['commit', '-q', '-m', 'unpushed notes'], own);
    const r = spawnSync('bash', [UNINSTALL, '--force'], {
      cwd: install, encoding: 'utf-8', timeout: 30_000,
      env: { ...gitEnv, HOME: home, GSTACK_DIR: install, GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
    });
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`${install}/.gstack/ holds its own git repository`);
    expect(git(['log', '--format=%s'], own)).toBe('unpushed notes\n');
    expect(fs.existsSync(path.join(home, '.gstack'))).toBe(true);
  });

  test('run from inside a Cursor install, a .gstack that is its own repo stops the uninstall before anything is removed', () => {
    const install = path.join(home, '.cursor', 'skills', 'gstack');
    fs.mkdirSync(install, { recursive: true });
    fs.writeFileSync(path.join(install, 'SKILL.md'), '<!-- AUTO-GENERATED from SKILL.md.tmpl -->\n');
    git(['init', '-q', '-b', 'main'], install);
    fs.writeFileSync(path.join(install, '.git', 'info', 'exclude'), '.gstack/\n');
    git(['add', 'SKILL.md'], install);
    git(['commit', '-q', '-m', 'install'], install);
    const own = path.join(install, '.gstack');
    fs.mkdirSync(own);
    git(['init', '-q', '-b', 'main'], own);
    fs.writeFileSync(path.join(own, 'notes.md'), 'mine\n');
    git(['add', 'notes.md'], own);
    git(['commit', '-q', '-m', 'unpushed notes'], own);
    const r = spawnSync('bash', [UNINSTALL, '--force'], {
      cwd: install, encoding: 'utf-8', timeout: 30_000,
      env: { ...gitEnv, HOME: home, GSTACK_DIR: path.join(home, '.claude', 'skills', 'gstack'), GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
    });
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`${install}/.gstack/ holds its own git repository`);
    expect(git(['log', '--format=%s'], own)).toBe('unpushed notes\n');
    expect(fs.existsSync(path.join(install, 'SKILL.md'))).toBe(true);
  });

  test('a failing git worktree list stops --force --force-worktrees and keeps the checkouts', () => {
    addWorktree(true);
    const realGit = spawnSync('bash', ['-c', 'command -v git'], { encoding: 'utf-8', timeout: 30_000 }).stdout.trim();
    const shim = path.join(tmp, 'shim');
    fs.mkdirSync(shim);
    fs.writeFileSync(path.join(shim, 'git'), `#!/bin/sh\ncase " $* " in *" worktree list "*) echo "fatal: broken" >&2; exit 128 ;; esac\nexec '${realGit}' "$@"\n`, { mode: 0o755 });
    const r = spawnSync('bash', [UNINSTALL, '--force', '--force-worktrees'], {
      cwd: repo, encoding: 'utf-8', timeout: 30_000,
      env: { ...gitEnv, PATH: `${shim}:${process.env.PATH}`, HOME: home, GSTACK_DIR: path.join(home, '.claude', 'skills', 'gstack'),
        GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
    });
    expect(r.status).toBe(2);
    expect(r.stderr).toContain("git cannot list this repository's worktrees");
    expect(fs.readFileSync(path.join(repo, worktree, 'wip.txt'), 'utf-8')).toBe('unsaved work\n');
    expect(fs.existsSync(path.join(home, '.claude', 'skills', 'gstack'))).toBe(true);
  });

  test('the manual cleanup in docs/uninstall.md never touches a worktree outside the project whose path contains it', () => {
    const doc = fs.readFileSync(path.join(ROOT, 'docs', 'uninstall.md'), 'utf-8');
    const start = doc.indexOf('# 7. Per-project cleanup');
    const block = doc.slice(start, doc.indexOf('\n```', start));
    const external = path.join(tmp, 'mirror') + path.join(repo, '.gstack-worktrees', 'run-1', 'lane');
    git(['worktree', 'add', '-q', '--detach', external, 'HEAD']);
    fs.appendFileSync(path.join(repo, '.git', 'info', 'exclude'), 'personal.txt\n');
    fs.writeFileSync(path.join(external, 'personal.txt'), 'mine\n');
    const r = spawnSync('bash', ['-c', block], { cwd: repo, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
    expect(r.status).toBe(0);
    expect(fs.readFileSync(path.join(external, 'personal.txt'), 'utf-8')).toBe('mine\n');
    expect(git(['worktree', 'list', '--porcelain'])).toContain(`worktree ${external}\n`);
  });

  test('the manual per-project cleanup in docs/uninstall.md keeps dirty and nested worktrees and tracked policy', () => {
    const doc = fs.readFileSync(path.join(ROOT, 'docs', 'uninstall.md'), 'utf-8');
    const start = doc.indexOf('# 7. Per-project cleanup');
    expect(start).toBeGreaterThan(-1);
    const block = doc.slice(start, doc.indexOf('\n```', start));
    trackPolicyAndAddBrowseState();
    addWorktree(true);
    const lane = path.join(repo, '.gstack-worktrees', 'run-1', 'lane-2');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD']);
    const inner = path.join(lane, '.gstack-worktrees', 'run-2', 'inner');
    git(['worktree', 'add', '-q', '--detach', inner, 'HEAD'], lane);
    fs.writeFileSync(path.join(inner, 'README.md'), 'unsaved edit\n');
    const clean = path.join(repo, '.gstack-worktrees', 'run-3', 'lane');
    git(['worktree', 'add', '-q', '--detach', clean, 'HEAD']);
    const r = spawnSync('bash', ['-c', block], { cwd: repo, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
    expect(r.status).toBe(0);
    expect(fs.readFileSync(path.join(repo, worktree, 'wip.txt'), 'utf-8')).toBe('unsaved work\n');
    expect(fs.readFileSync(path.join(inner, 'README.md'), 'utf-8')).toBe('unsaved edit\n');
    expect(fs.existsSync(clean)).toBe(false);
    expect(fs.existsSync(path.join(repo, '.gstack', 'ship-policy.json'))).toBe(true);
    expect(fs.existsSync(path.join(repo, '.gstack', 'browse.json'))).toBe(false);
  });

  test('hold: a plain uninstall still removes untracked .gstack state and clean worktrees entirely', () => {
    fs.writeFileSync(path.join(repo, '.gstack', 'browse.json'), '{}\n');
    fs.mkdirSync(path.join(repo, '.gstack', 'reports'), { recursive: true });
    fs.writeFileSync(path.join(repo, '.gstack', 'reports', 'qa.md'), '# qa\n');
    addWorktree(false);
    const r = uninstall(['--force']);
    expect(r.status).toBe(0);
    expect(r.stdout).toContain(`${repo}/.gstack/`);
    expect(r.stdout).toContain(`${repo}/.gstack-worktrees/`);
    expect(fs.existsSync(path.join(repo, '.gstack'))).toBe(false);
    expect(fs.existsSync(path.join(repo, '.gstack-worktrees'))).toBe(false);
    expect(fs.existsSync(path.join(home, '.gstack'))).toBe(false);
  });
});

// Value: protects=unpushed commits, uncommitted edits, locked worktrees and --keep-state state that sit inside a gstack
//   install root, a project-local install, a Claude per-skill folder or ~/.gstack, whichever repository uninstall runs from;
//   fails_when=uninstall deletes a target without checking every git repository beneath it (GST-2303).
describe('every deletion target is checked for unsaved git work before anything is removed (GST-2303)', () => {
  let tmp: string, home: string, proj: string, install: string, gitEnv: Record<string, string>;
  const git = (args: string[], cwd = proj) => {
    const r = spawnSync('git', ['-c', 'user.name=fixture', '-c', 'user.email=fixture@example.com', '-c', 'commit.gpgsign=false', '-c', 'protocol.file.allow=always', ...args], { cwd, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
    expect(r.status).toBe(0);
    return r.stdout;
  };
  const uninstall = (args: string[], cwd = proj) => spawnSync('bash', [UNINSTALL, ...args], {
    cwd, encoding: 'utf-8', timeout: 30_000,
    env: { ...gitEnv, HOME: home, GSTACK_DIR: install, GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
      GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
  });
  // A repository with an origin it has pushed everything to, like a real git-clone install.
  const pushedRepo = (dir: string, file = 'SKILL.md', body = 'test\n') => {
    const origin = path.join(tmp, 'origins', path.relative(tmp, dir).replace(/[\\/]/g, '_') + '.git');
    fs.mkdirSync(dir, { recursive: true });
    git(['init', '-q', '--bare', origin], tmp);
    git(['init', '-q', '-b', 'main'], dir);
    fs.writeFileSync(path.join(dir, file), body);
    git(['add', file], dir);
    git(['commit', '-q', '-m', 'seed'], dir);
    git(['remote', 'add', 'origin', origin], dir);
    git(['push', '-q', 'origin', 'main'], dir);
    return dir;
  };
  const unpushedCommit = (dir: string) => {
    fs.writeFileSync(path.join(dir, 'notes.md'), 'mine\n');
    git(['add', 'notes.md'], dir);
    git(['commit', '-q', '-m', 'unpushed notes'], dir);
  };

  beforeEach(() => {
    tmp = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-targets-')));
    home = path.join(tmp, 'home');
    proj = path.join(tmp, 'proj');
    fs.writeFileSync(path.join(tmp, 'gitconfig'), '');
    gitEnv = { ...process.env, GIT_CONFIG_GLOBAL: path.join(tmp, 'gitconfig'), GIT_CONFIG_NOSYSTEM: '1' } as Record<string, string>;
    install = pushedRepo(path.join(home, '.claude', 'skills', 'gstack'));
    fs.writeFileSync(path.join(install, '.git', 'info', 'exclude'), '.gstack-worktrees/\n.gstack/\n');
    fs.mkdirSync(path.join(home, '.gstack'), { recursive: true });
    pushedRepo(proj, 'README.md', 'x\n');
  });
  afterEach(() => fs.rmSync(tmp, { recursive: true, force: true }));

  test('hold: a clean, pushed git-clone install is removed', () => {
    const r = uninstall(['--force']);
    expect(r.stderr).toBe('');
    expect(r.status).toBe(0);
    expect(fs.existsSync(install)).toBe(false);
  });

  test('--keep-state run from inside the install refuses instead of deleting its kept .gstack-worktrees lane', () => {
    const lane = path.join(install, '.gstack-worktrees', 'run', 'lane');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD'], install);
    const r = uninstall(['--force', '--keep-state'], install);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${install}: it holds ${install}/.gstack-worktrees, which this uninstall keeps`);
    expect(fs.existsSync(path.join(lane, 'SKILL.md'))).toBe(true);
  });

  test('--keep-state run from inside the install refuses instead of deleting its tracked .gstack policy', () => {
    fs.writeFileSync(path.join(install, '.git', 'info', 'exclude'), '');
    fs.mkdirSync(path.join(install, '.gstack'));
    fs.writeFileSync(path.join(install, '.gstack', 'ship-policy.json'), '{}\n');
    git(['add', '.gstack/ship-policy.json'], install);
    git(['commit', '-q', '-m', 'policy'], install);
    git(['push', '-q', 'origin', 'main'], install);
    const r = uninstall(['--force', '--keep-state'], install);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`it holds ${install}/.gstack, which this uninstall keeps`);
    expect(fs.existsSync(path.join(install, '.gstack', 'ship-policy.json'))).toBe(true);
  });

  test('run from an unrelated project, a .gstack repo with unpushed commits inside the global install stops the uninstall', () => {
    const own = path.join(install, '.gstack');
    pushedRepo(own, 'policy.md');
    unpushedCommit(own);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${install}: ${own} has commits no remote-tracking branch contains`);
    expect(git(['log', '-1', '--format=%s'], own)).toBe('unpushed notes\n');
    expect(fs.existsSync(path.join(home, '.gstack'))).toBe(true);
  });

  test('the install clone\'s own unpushed commit stops the uninstall', () => {
    unpushedCommit(install);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${install}: ${install} has commits no remote-tracking branch contains`);
    expect(fs.existsSync(path.join(install, 'notes.md'))).toBe(true);
  });

  test('a project-local install clone with an uncommitted edit stops the uninstall', () => {
    const local = pushedRepo(path.join(proj, '.claude', 'skills', 'gstack'));
    fs.writeFileSync(path.join(local, 'SKILL.md'), 'my edit\n');
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${local}: ${local} has uncommitted changes`);
    expect(fs.readFileSync(path.join(local, 'SKILL.md'), 'utf-8')).toBe('my edit\n');
    expect(fs.existsSync(install)).toBe(true);
  });

  test('a repository with unpushed commits at .agents/skills/gstack-notes stops the uninstall', () => {
    const notes = pushedRepo(path.join(proj, '.agents', 'skills', 'gstack-notes'), 'README.md');
    unpushedCommit(notes);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${notes}: ${notes} has commits no remote-tracking branch contains`);
    expect(fs.existsSync(path.join(notes, 'notes.md'))).toBe(true);
  });

  test('a gstack-generated Claude per-skill folder holding an uncommitted edit stops the uninstall', () => {
    fs.mkdirSync(path.join(install, 'review'));
    fs.writeFileSync(path.join(install, 'review', 'SKILL.md'), 'name: review\n');
    const skill = pushedRepo(path.join(home, '.claude', 'skills', 'review'), 'SKILL.md', '<!-- AUTO-GENERATED from SKILL.md.tmpl -->\n');
    fs.writeFileSync(path.join(skill, 'SKILL.md'), '<!-- AUTO-GENERATED from SKILL.md.tmpl -->\nmy edit\n');
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${skill}: ${skill} has uncommitted changes`);
    expect(fs.readFileSync(path.join(skill, 'SKILL.md'), 'utf-8')).toContain('my edit');
  });

  test('a repository with unpushed commits under ~/.gstack stops the uninstall', () => {
    const notes = pushedRepo(path.join(home, '.gstack', 'projects', 'notes'), 'README.md');
    unpushedCommit(notes);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${path.join(home, '.gstack')}: ${notes} has commits no remote-tracking branch contains`);
    expect(fs.existsSync(path.join(notes, 'notes.md'))).toBe(true);
    expect(fs.existsSync(install)).toBe(true);
  });

  test('a locked worktree of the install clone stops the uninstall, even outside the install', () => {
    const lane = path.join(tmp, 'lane');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD'], install);
    git(['worktree', 'lock', lane], install);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${install}: ${install} registers the locked worktree ${lane}`);
    expect(fs.existsSync(path.join(install, '.git'))).toBe(true);
  });

  test('a dirty repo behind a .gstack-worktrees symlink into ~/.gstack stops the uninstall', () => {
    const lane = pushedRepo(path.join(home, '.gstack', 'lanes', 'lane1'));
    fs.writeFileSync(path.join(lane, 'SKILL.md'), 'my edit\n');
    fs.symlinkSync(path.join(home, '.gstack', 'lanes'), path.join(proj, '.gstack-worktrees'));
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${path.join(home, '.gstack')}: ${lane} has uncommitted changes`);
    expect(fs.readFileSync(path.join(lane, 'SKILL.md'), 'utf-8')).toBe('my edit\n');
  });

  test('a shallow stable-channel install advanced by git fetch origin stable is removed', () => {
    fs.rmSync(install, { recursive: true, force: true });
    const origin = path.join(tmp, 'channel-origin.git');
    const seed = pushedRepo(path.join(tmp, 'channel-seed'));
    git(['remote', 'set-url', 'origin', origin], seed);
    git(['init', '-q', '--bare', '-b', 'main', origin], tmp);
    git(['push', '-q', 'origin', 'main'], seed);
    git(['clone', '-q', '--single-branch', '--depth', '1', `file://${origin}`, install], tmp);
    fs.writeFileSync(path.join(seed, 'SKILL.md'), 'release\n');
    git(['commit', '-q', '-am', 'release'], seed);
    git(['push', '-q', 'origin', 'main', 'main:stable'], seed);
    git(['fetch', '-q', 'origin', 'stable'], install);
    git(['merge', '-q', '--ff-only', 'FETCH_HEAD'], install);
    const r = uninstall(['--force']);
    expect(r.stderr).toBe('');
    expect(r.status).toBe(0);
    expect(fs.existsSync(install)).toBe(false);
  });

  test('a stable-channel install whose remote URL goes through url.insteadOf is removed', () => {
    fs.rmSync(install, { recursive: true, force: true });
    const origin = path.join(tmp, 'channel-origin.git');
    const seed = pushedRepo(path.join(tmp, 'channel-seed'));
    git(['remote', 'set-url', 'origin', origin], seed);
    git(['init', '-q', '--bare', '-b', 'main', origin], tmp);
    git(['push', '-q', 'origin', 'main'], seed);
    fs.writeFileSync(path.join(tmp, 'gitconfig'), `[url "file://${tmp}/"]\n\tinsteadOf = alias:\n`);
    git(['clone', '-q', '--single-branch', '--depth', '1', 'alias:channel-origin.git', install], tmp);
    fs.writeFileSync(path.join(seed, 'SKILL.md'), 'release\n');
    git(['commit', '-q', '-am', 'release'], seed);
    git(['push', '-q', 'origin', 'main', 'main:stable'], seed);
    git(['fetch', '-q', 'origin', 'stable'], install);
    git(['merge', '-q', '--ff-only', 'FETCH_HEAD'], install);
    const r = uninstall(['--force']);
    expect(r.stderr).toBe('');
    expect(r.status).toBe(0);
    expect(fs.existsSync(install)).toBe(false);
  });

  test('a local-only commit that git fetch . HEAD wrote into FETCH_HEAD still stops the uninstall', () => {
    unpushedCommit(install);
    git(['fetch', '-q', '.', 'HEAD'], install);
    const r = uninstall(['--force']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${install}: ${install} has commits no remote-tracking branch contains`);
    expect(fs.existsSync(path.join(install, 'notes.md'))).toBe(true);
  });

  test('on a git older than 2.36 (no worktree list -z) the uninstall refuses and keeps the install', () => {
    const lane = path.join(tmp, 'lane');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD'], install);
    git(['worktree', 'lock', lane], install);
    const shim = path.join(tmp, 'oldgit');
    fs.mkdirSync(shim);
    fs.writeFileSync(path.join(shim, 'git'), `#!/bin/bash\ncase " $* " in *" worktree list "*" -z "*) echo "error: unknown switch z" >&2; exit 129 ;; esac\nexec ${JSON.stringify(Bun.which('git'))} "$@"\n`, { mode: 0o755 });
    const r = spawnSync('bash', [UNINSTALL, '--force'], {
      cwd: proj, encoding: 'utf-8', timeout: 30_000,
      env: { ...gitEnv, PATH: `${shim}:${gitEnv.PATH}`, HOME: home, GSTACK_DIR: install, GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
        GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
    });
    expect(r.status).toBe(2);
    expect(r.stderr).toContain(`refusing to delete ${install}: ${install} has worktrees git cannot list (gstack-uninstall needs git 2.36 or later)`);
    expect(fs.existsSync(path.join(install, '.git'))).toBe(true);
  }, 30_000);
});

describe('locked worktrees are found by NUL-separated paths (GST-2303)', () => {
  let tmp: string, home: string, repo: string, gitEnv: Record<string, string>;
  const git = (args: string[], cwd = repo) => {
    const r = spawnSync('git', ['-c', 'user.name=fixture', '-c', 'user.email=fixture@example.com', '-c', 'commit.gpgsign=false', '-c', 'protocol.file.allow=always', ...args], { cwd, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
    expect(r.status).toBe(0);
    return r.stdout;
  };
  const uninstall = (args: string[]) => spawnSync('bash', [UNINSTALL, ...args], {
    cwd: repo, encoding: 'utf-8', timeout: 30_000,
    env: { ...gitEnv, HOME: home, GSTACK_DIR: path.join(home, '.claude', 'skills', 'gstack'),
      GSTACK_SETTINGS_FILE: path.join(home, 'settings.json'),
      GSTACK_HOME: '', GSTACK_STATE_ROOT: path.join(home, '.gstack'), GSTACK_STATE_DIR: '', CLAUDE_PLUGIN_DATA: '' },
  });
  beforeEach(() => {
    tmp = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-lock-')));
    home = path.join(tmp, 'home');
    repo = path.join(tmp, 'proj');
    fs.writeFileSync(path.join(tmp, 'gitconfig'), '');
    gitEnv = { ...process.env, GIT_CONFIG_GLOBAL: path.join(tmp, 'gitconfig'), GIT_CONFIG_NOSYSTEM: '1' } as Record<string, string>;
    fs.mkdirSync(path.join(home, '.claude', 'skills', 'gstack'), { recursive: true });
    fs.writeFileSync(path.join(home, '.claude', 'skills', 'gstack', 'SKILL.md'), 'test');
    fs.mkdirSync(repo, { recursive: true });
    git(['init', '-q', '-b', 'main']);
    fs.writeFileSync(path.join(repo, '.git', 'info', 'exclude'), '.gstack-worktrees/\n');
    fs.writeFileSync(path.join(repo, 'README.md'), 'x\n');
    git(['add', 'README.md']);
    git(['commit', '-q', '-m', 'seed']);
  });
  afterEach(() => fs.rmSync(tmp, { recursive: true, force: true }));

  test('a locked worktree whose path holds a newline survives --force --force-worktrees', () => {
    const lane = path.join(repo, '.gstack-worktrees', 'run', 'lane\nx');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD']);
    git(['worktree', 'lock', lane]);
    const r = uninstall(['--force', '--force-worktrees']);
    expect(r.status).toBe(2);
    expect(r.stderr).toContain('it is locked (git worktree lock)');
    expect(fs.existsSync(path.join(lane, 'README.md'))).toBe(true);
  });

  test('a clean submodule nested inside a clean submodule of a clean lane does not stop the uninstall', () => {
    const inner = path.join(tmp, 'inner');
    fs.mkdirSync(inner);
    git(['init', '-q', '-b', 'main'], inner);
    fs.writeFileSync(path.join(inner, 'a.txt'), 'a\n');
    git(['add', 'a.txt'], inner);
    git(['commit', '-q', '-m', 'inner'], inner);
    const lib = path.join(tmp, 'lib');
    fs.mkdirSync(lib);
    git(['init', '-q', '-b', 'main'], lib);
    git(['submodule', 'add', '-q', inner, 'deps/inner'], lib);
    git(['commit', '-q', '-m', 'lib'], lib);
    git(['submodule', 'add', '-q', lib, 'vendor/lib']);
    git(['commit', '-q', '-m', 'submodule']);
    const lane = path.join(repo, '.gstack-worktrees', 'run', 'lane');
    git(['worktree', 'add', '-q', '--detach', lane, 'HEAD']);
    git(['submodule', 'update', '-q', '--init', '--recursive'], lane);
    expect(fs.existsSync(path.join(lane, 'vendor', 'lib', 'deps', 'inner', 'a.txt'))).toBe(true);
    const r = uninstall(['--force']);
    expect(r.stderr).toBe('');
    expect(r.status).toBe(0);
    expect(fs.existsSync(lane)).toBe(false);
  });
});

describe('the manual removal in docs/uninstall.md checks each folder before deleting it (GST-2303)', () => {
  let tmp: string, gitEnv: Record<string, string>;
  const git = (args: string[], cwd: string) => {
    const r = spawnSync('git', ['-c', 'user.name=fixture', '-c', 'user.email=fixture@example.com', '-c', 'commit.gpgsign=false', ...args], { cwd, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
    expect(r.status).toBe(0);
  };
  const checkedDelete = (dirs: string[]) => {
    const doc = fs.readFileSync(path.join(ROOT, 'docs', 'uninstall.md'), 'utf-8');
    const start = doc.indexOf('# 0. A delete that stops for unsaved git work');
    expect(start).toBeGreaterThan(-1);
    const helper = doc.slice(start, doc.indexOf('# 1. Stop browse daemons', start));
    return spawnSync('bash', ['-c', `${helper}\ngstack_rm_checked "$@"`, 'doc', ...dirs], { cwd: tmp, encoding: 'utf-8', timeout: 30_000, env: gitEnv });
  };
  beforeEach(() => {
    tmp = fs.realpathSync(fs.mkdtempSync(path.join(os.tmpdir(), 'gstack-uninstall-doc-')));
    fs.writeFileSync(path.join(tmp, 'gitconfig'), '');
    gitEnv = { ...process.env, GIT_CONFIG_GLOBAL: path.join(tmp, 'gitconfig'), GIT_CONFIG_NOSYSTEM: '1' } as Record<string, string>;
  });
  afterEach(() => fs.rmSync(tmp, { recursive: true, force: true }));

  test('a folder holding a repo with an unpushed commit is kept, and a plain folder goes', () => {
    const install = path.join(tmp, 'install');
    const notes = path.join(install, '.gstack');
    fs.mkdirSync(notes, { recursive: true });
    fs.writeFileSync(path.join(install, 'SKILL.md'), 'test\n');
    git(['init', '-q', '-b', 'main'], notes);
    fs.writeFileSync(path.join(notes, 'notes.md'), 'mine\n');
    git(['add', 'notes.md'], notes);
    git(['commit', '-q', '-m', 'unpushed notes'], notes);
    const plain = path.join(tmp, 'plain');
    fs.mkdirSync(plain);
    fs.writeFileSync(path.join(plain, 'SKILL.md'), 'test\n');
    const r = checkedDelete([install, plain]);
    expect(r.status).toBe(0);
    expect(r.stderr).toContain(`kept ${install}: ${notes} has uncommitted changes, unpushed commits or a locked worktree`);
    expect(fs.existsSync(path.join(notes, 'notes.md'))).toBe(true);
    expect(fs.existsSync(plain)).toBe(false);
  });

  test('a local-only commit that git fetch . HEAD wrote into FETCH_HEAD keeps its folder', () => {
    const repo = path.join(tmp, 'repo');
    fs.mkdirSync(repo);
    git(['init', '-q', '-b', 'main'], repo);
    fs.writeFileSync(path.join(repo, 'notes.md'), 'mine\n');
    git(['add', 'notes.md'], repo);
    git(['commit', '-q', '-m', 'local notes'], repo);
    git(['fetch', '-q', '.', 'HEAD'], repo);
    const r = checkedDelete([repo]);
    expect(r.stderr).toContain(`kept ${repo}: ${repo} has uncommitted changes, unpushed commits or a locked worktree`);
    expect(fs.existsSync(path.join(repo, 'notes.md'))).toBe(true);
  });
});