fix: remove duplicate permission + add mktree to cspell

.github/workflows/squad-ci.yml

@@ -10,7 +10,6 @@ on:
 permissions:
   contents: read
   pull-requests: read
-  pull-requests: read
 
 # Prevent parallel runs from competing for resources
 concurrency:

cspell.json

@@ -35,7 +35,7 @@
     "MSMQ", "permadeath", "Permadeath", "CRDT", "httpx",
     "Pydantic", "sdkgen", "ttft", "Strausz", "mycompany",
     "slugified", "simplejwt", "pytest", "Luca", "Clemenza",
-    "Tessio", "Triaging", "Futurama", "mklink", "slnx", "jqlang",
+    "Tessio", "Triaging", "Futurama", "mklink", "mktree", "slnx", "jqlang",
     "benleane", "TELMU", "Automator", "kedacore",
     "DEVBOX", "myaccount"
   ],

test/cli/consult.test.ts

@@ -19,11 +19,12 @@ import {
 } from 'node:fs';
 import { join } from 'node:path';
 import { randomBytes } from 'node:crypto';
+import { tmpdir } from 'node:os';
 import { execSync } from 'node:child_process';
 import { isConsultMode, type SquadDirConfig } from '@bradygaster/squad-sdk';
 
 const TEST_ROOT = join(
-  process.cwd(),
+  tmpdir(),
   `.test-cli-consult-${randomBytes(4).toString('hex')}`,
 );
 

test/cli/export-import.test.ts

@@ -8,12 +8,13 @@ import { mkdir, rm, readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
 import { randomBytes } from 'crypto';
+import { tmpdir } from 'os';
 import { runInit } from '@bradygaster/squad-cli/core/init';
 import { runExport } from '@bradygaster/squad-cli/commands/export';
 import { runImport } from '@bradygaster/squad-cli/commands/import';
 
-const TEST_ROOT = join(process.cwd(), `.test-cli-export-import-${randomBytes(4).toString('hex')}`);
-const IMPORT_ROOT = join(process.cwd(), `.test-cli-import-target-${randomBytes(4).toString('hex')}`);
+const TEST_ROOT = join(tmpdir(), `.test-cli-export-import-${randomBytes(4).toString('hex')}`);
+const IMPORT_ROOT = join(tmpdir(), `.test-cli-import-target-${randomBytes(4).toString('hex')}`);
 
 describe('CLI: export/import commands', () => {
   beforeEach(async () => {

test/cli/init-upgrade-parity.test.ts

@@ -13,6 +13,7 @@ import { mkdir, rm, readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
 import { randomBytes } from 'crypto';
+import { tmpdir } from 'os';
 import { runInit } from '@bradygaster/squad-cli/core/init';
 import {
   runUpgrade,
@@ -21,7 +22,7 @@ import {
 } from '@bradygaster/squad-cli/core/upgrade';
 
 const TEST_ROOT = join(
-  process.cwd(),
+  tmpdir(),
   `.test-init-upgrade-parity-${randomBytes(4).toString('hex')}`,
 );
 

test/cli/init.test.ts

@@ -7,11 +7,12 @@ import { describe, it, expect, beforeEach, afterEach } from 'vitest';
 import { mkdir, rm, readdir, readFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
+import { tmpdir } from 'os';
 import { randomBytes } from 'crypto';
 import { runInit } from '@bradygaster/squad-cli/core/init';
 import { getPackageVersion } from '@bradygaster/squad-cli/core/version';
 
-const TEST_ROOT = join(process.cwd(), `.test-cli-init-${randomBytes(4).toString('hex')}`);
+const TEST_ROOT = join(tmpdir(), `.test-cli-init-${randomBytes(4).toString('hex')}`);
 
 describe('CLI: init command', () => {
   beforeEach(async () => {

test/cli/loop.test.ts

@@ -365,7 +365,7 @@ describe('runLoop', () => {
     });
 
     await expect(runLoop(DEST, defaultOptions)).rejects.toThrow(
-      /gh CLI/i,
+      /Copilot CLI/i,
     );
   });
 

test/cli/scrub-emails.test.ts

@@ -8,10 +8,11 @@ import { mkdir, rm, readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync } from 'fs';
 import { randomBytes } from 'crypto';
+import { tmpdir } from 'os';
 import { runInit } from '@bradygaster/squad-cli/core/init';
 import { scrubEmails } from '@bradygaster/squad-cli/core/email-scrub';
 
-const TEST_ROOT = join(process.cwd(), `.test-cli-scrub-${randomBytes(4).toString('hex')}`);
+const TEST_ROOT = join(tmpdir(), `.test-cli-scrub-${randomBytes(4).toString('hex')}`);
 
 describe('CLI: scrub-emails command', () => {
   beforeEach(async () => {

test/cli/upgrade.test.ts

@@ -7,12 +7,13 @@ import { describe, it, expect, vi, beforeEach, afterEach } from 'vitest';
 import { mkdir, rm, readFile, writeFile } from 'fs/promises';
 import { join } from 'path';
 import { existsSync, mkdirSync, writeFileSync, readFileSync, rmSync, chmodSync } from 'fs';
+import { tmpdir } from 'os';
 import { randomBytes } from 'crypto';
 import { runInit } from '@bradygaster/squad-cli/core/init';
 import { runUpgrade, ensureGitattributes, ensureGitignore, ensureDirectories, ensureCastingDefaults, selfUpgradeCli } from '@bradygaster/squad-cli/core/upgrade';
 import { getPackageVersion } from '@bradygaster/squad-cli/core/version';
 
-const TEST_ROOT = join(process.cwd(), `.test-cli-upgrade-${randomBytes(4).toString('hex')}`);
+const TEST_ROOT = join(tmpdir(), `.test-cli-upgrade-${randomBytes(4).toString('hex')}`);
 
 describe('CLI: upgrade command', () => {
   beforeEach(async () => {

test/comms-teams-integration.test.ts

@@ -360,7 +360,7 @@ describe('token refresh failure fallback', () => {
     // Refresh was attempted and failed
     expect(refreshAttempted).toBe(true);
     // Warning logged about refresh failure
-    expect(warnSpy).toHaveBeenCalledWith('⚠️  Token refresh failed — re-authenticating...');
+    expect(warnSpy).toHaveBeenCalledWith('⚠️  Token refresh permanently failed (invalid_grant) — re-authenticating...');
     // Fell through to device code and succeeded
     expect(deviceCodeCompleted).toBe(true);
     expect(result.id).toBeDefined();