@basou/cli 0.40.0 → 0.41.0

package/dist/program.js

@@ -710,8 +710,8 @@ ${block}${markers.end}
       return `${section.before}${markers.start}
 ${block}${markers.end}${section.after}`;
     case "no_markers": {
-      const sep = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
-      return `${existing}${sep}${wrapped}`;
+      const sep2 = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+      return `${existing}${sep2}${wrapped}`;
     }
     default:
       throw new Error(
@@ -2241,7 +2241,7 @@ async function assertWorkspaceInitialized4(basouRoot) {
 }
 
 // src/commands/hook.ts
-import { open as open2, readFile as readFile3, realpath as realpath2, stat as stat4 } from "fs/promises";
+import { open as open2, readFile as readFile3, realpath as realpath3, stat as stat4 } from "fs/promises";
 import { homedir as homedir7 } from "os";
 import { join as join9 } from "path";
 import { fileURLToPath } from "url";
@@ -2255,7 +2255,7 @@ import {
   ORIENTATION_END as ORIENTATION_END2,
   ORIENTATION_START as ORIENTATION_START2,
   parseMarkers as parseMarkers2,
-  readMarkdownFile as readMarkdownFile5,
+  readMarkdownFile as readMarkdownFile6,
   removeSessionStartHook,
   removeStopHook,
   upsertSessionStartHook,
@@ -2381,6 +2381,137 @@ function describeCodexHookTrust(trust) {
   }
 }
 
+// src/lib/foreign-workspace-warn.ts
+import { realpath as realpath2 } from "fs/promises";
+import { dirname as dirname2 } from "path";
+import { readMarkdownFile as readMarkdownFile4 } from "@basou/core";
+
+// src/lib/foreign-workspace-scan.ts
+import { homedir as osHomedir } from "os";
+import { basename as basename3, normalize, sep } from "path";
+var MIN_TOKEN_LENGTH = 4;
+function stripTrailingSep(p) {
+  return p.length > 1 && p.endsWith(sep) ? p.slice(0, -sep.length) : p;
+}
+function toTildePath(absPath, home) {
+  if (absPath === home) return "~";
+  if (absPath.startsWith(home + sep)) return `~${absPath.slice(home.length)}`;
+  return null;
+}
+function encodedSpelling(name) {
+  return name.replace(/[^a-zA-Z0-9]/g, "-");
+}
+function directoryNameSpellings(dir) {
+  const paired = /^(.+)-(planning|workspace)$/.exec(dir);
+  const plain = paired !== null ? [`${paired[1]}-planning`, `${paired[1]}-workspace`] : [dir, `${dir}-workspace`];
+  return [...plain, ...plain.map(encodedSpelling)];
+}
+function nameTokensFor(workspacePath, home) {
+  const abs = stripTrailingSep(normalize(workspacePath));
+  const tokens = /* @__PURE__ */ new Set([abs]);
+  const tilde = toTildePath(abs, home);
+  if (tilde !== null) tokens.add(tilde);
+  for (const name of directoryNameSpellings(basename3(abs))) tokens.add(name);
+  return [...tokens].filter((t) => t.length >= MIN_TOKEN_LENGTH);
+}
+function isSpellingOfSelf(workspacePath, selfPath) {
+  const own = new Set(directoryNameSpellings(basename3(stripTrailingSep(normalize(selfPath)))));
+  return directoryNameSpellings(basename3(stripTrailingSep(normalize(workspacePath)))).some(
+    (s) => own.has(s)
+  );
+}
+function scanForeignWorkspaceNames(input) {
+  if (input.text.length === 0 || input.workspacePaths.length === 0) return [];
+  const home = input.homedir ?? osHomedir();
+  const own = input.selfPath === void 0 ? [] : nameTokensFor(input.selfPath, home);
+  const lines = input.text.split("\n");
+  const hits = [];
+  for (const workspacePath of input.workspacePaths) {
+    if (input.selfPath !== void 0 && isSpellingOfSelf(workspacePath, input.selfPath)) continue;
+    const tokens = nameTokensFor(workspacePath, home).filter(
+      (token) => !own.some((ownToken) => ownToken.includes(token))
+    );
+    if (tokens.length === 0) continue;
+    const matched = /* @__PURE__ */ new Set();
+    const matchedLines = [];
+    for (const [index, line] of lines.entries()) {
+      let lineMatched = false;
+      for (const token of tokens) {
+        if (line.includes(token)) {
+          matched.add(token);
+          lineMatched = true;
+        }
+      }
+      if (lineMatched) matchedLines.push(index + 1);
+    }
+    if (matchedLines.length === 0) continue;
+    hits.push({
+      workspacePath,
+      tokens: [...matched].sort((a, b) => b.length - a.length || a.localeCompare(b)),
+      lines: matchedLines
+    });
+  }
+  return hits;
+}
+
+// src/lib/foreign-workspace-warn.ts
+var MAX_LISTED_LINES = 5;
+async function canonicalize2(path) {
+  try {
+    return await realpath2(path);
+  } catch {
+    return path;
+  }
+}
+async function findForeignWorkspaceNames(args) {
+  let workspacePaths;
+  let selfPath;
+  try {
+    const workspaces = await loadPortfolioConfig(args.configPath);
+    workspacePaths = await Promise.all(workspaces.map((w) => canonicalize2(w.path)));
+    selfPath = args.selfPath === void 0 ? void 0 : await canonicalize2(args.selfPath);
+  } catch {
+    return null;
+  }
+  const hits = scanForeignWorkspaceNames({
+    text: args.text,
+    workspacePaths,
+    selfPath
+  });
+  if (hits.length === 0) return null;
+  const lines = [...new Set(hits.flatMap((h) => h.lines))].sort((a, b) => a - b);
+  return { workspaceCount: hits.length, lines };
+}
+function describeForeignWorkspaceLines(lines) {
+  const listed = lines.slice(0, MAX_LISTED_LINES).join(", ");
+  const rest = lines.length - MAX_LISTED_LINES;
+  const numbers = rest > 0 ? `${listed} and ${rest} more` : listed;
+  return `${lines.length === 1 ? "line" : "lines"} ${numbers}`;
+}
+function positionForeignWorkspaceWarning(report, where) {
+  const subject = report.workspaceCount === 1 ? "names another registered workspace" : `names ${report.workspaceCount} other registered workspaces`;
+  return `basou: this workspace's position ${subject} (${where}, ${describeForeignWorkspaceLines(report.lines)}). The position is handed to the agent session running in this workspace, so those names travel with it. Advisory only: nothing was withheld.`;
+}
+function protocolForeignWorkspaceWarning(report) {
+  const subject = report.workspaceCount === 1 ? "names a registered workspace" : `names ${report.workspaceCount} registered workspaces`;
+  return `basou: the protocol block ${subject} (block ${describeForeignWorkspaceLines(report.lines)}, counted from the block's first line, not the file's). Standing protocols are written to the user-global CLAUDE.md, which every project on this machine loads, so a workspace-specific name there reaches every workspace's sessions. Only the basou-managed block is checked; the rest of that file is not basou's to inspect. Advisory only: nothing was withheld.`;
+}
+async function warnIfPositionNamesOtherWorkspaces(args) {
+  try {
+    const body = await readMarkdownFile4(args.paths.files.orientation);
+    if (body === null) return;
+    const report = await findForeignWorkspaceNames({
+      text: body,
+      selfPath: dirname2(args.paths.root),
+      configPath: args.configPath
+    });
+    if (report !== null) {
+      console.error(positionForeignWorkspaceWarning(report, args.paths.files.orientation));
+    }
+  } catch {
+  }
+}
+
 // src/commands/orient.ts
 import {
   assertBasouRootSafe as assertBasouRootSafe7,
@@ -2448,7 +2579,7 @@ async function loadHostsConfig(configPath = DEFAULT_HOSTS_CONFIG_PATH) {
 
 // src/lib/provenance-actions.ts
 import {
-  readMarkdownFile as readMarkdownFile4,
+  readMarkdownFile as readMarkdownFile5,
   renderDecisions as renderDecisions2,
   renderHandoff as renderHandoff2,
   renderOrientation,
@@ -2460,7 +2591,7 @@ import {
 import { createReadStream } from "fs";
 import { readdir, readFile as readFile2, rm, stat as stat3 } from "fs/promises";
 import { homedir as homedir6 } from "os";
-import { basename as basename3, dirname as dirname2, join as join8, resolve as resolve5 } from "path";
+import { basename as basename4, dirname as dirname3, join as join8, resolve as resolve5 } from "path";
 import { createInterface } from "readline";
 import {
   AGENT_INFRA_DIRS as AGENT_INFRA_DIRS2,
@@ -2550,7 +2681,7 @@ async function doRunImportClaudeCode(options, ctx) {
   const files = await selectTranscriptFiles(projectsRoot, projectPaths, options);
   const projectSet = new Set(projectPaths);
   const candidates = files.map((file) => {
-    const externalId = basename3(file, ".jsonl");
+    const externalId = basename4(file, ".jsonl");
     return {
       externalId,
       sourcePath: file,
@@ -2640,7 +2771,7 @@ async function importDerivedSessions(paths, manifest, options, sourceKind, candi
         files: payload.session.related_files ?? [],
         workingDirectory: payload.session.working_directory,
         sourceRoots: projectPaths,
-        masterRoot: dirname2(paths.root),
+        masterRoot: dirname3(paths.root),
         extraInRoot: AGENT_INFRA_DIRS2
       });
       if (scope.outOfRoot.length > 0) crossProject.push({ externalId, outOfRoot: scope.outOfRoot });
@@ -3158,7 +3289,7 @@ function importCodex(options, ctx) {
 }
 async function regenerateHandoff(paths, nowIso, callbacks) {
   const result = await renderHandoff2({ paths, nowIso, ...callbacks });
-  const existing = await readMarkdownFile4(paths.files.handoff);
+  const existing = await readMarkdownFile5(paths.files.handoff);
   await writeMarkdownFile3(
     paths.files.handoff,
     renderWithMarkers3(existing, result.body, "handoff.md")
@@ -3172,7 +3303,7 @@ async function regenerateHandoff(paths, nowIso, callbacks) {
 }
 async function regenerateDecisions(paths, nowIso, callbacks) {
   const result = await renderDecisions2({ paths, nowIso, ...callbacks });
-  const existing = await readMarkdownFile4(paths.files.decisions);
+  const existing = await readMarkdownFile5(paths.files.decisions);
   await writeMarkdownFile3(
     paths.files.decisions,
     renderWithMarkers3(existing, result.body, "decisions.md")
@@ -3282,6 +3413,19 @@ async function doRunOrient(options, ctx) {
   } else {
     console.log(result.body);
   }
+  await warnIfPositionNamesOtherWorkspaces2(result, ctx);
+}
+async function warnIfPositionNamesOtherWorkspaces2(result, ctx) {
+  const report = await findForeignWorkspaceNames({
+    text: result.body,
+    selfPath: result.workspaceRoot,
+    configPath: ctx.portfolioConfigPath
+  });
+  if (report !== null) {
+    console.error(
+      positionForeignWorkspaceWarning(report, basouPaths8(result.workspaceRoot).files.orientation)
+    );
+  }
 }
 async function renderOrientationForCwd(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
@@ -3327,6 +3471,7 @@ async function renderOrientationForRoot(repositoryRoot, options, ctx, behaviour)
 `);
   return {
     body: result.body,
+    workspaceRoot: repositoryRoot,
     sessionCount: result.sessionCount,
     inFlightTaskCount: result.inFlightTaskCount,
     pendingApprovalsCount: result.pendingApprovalsCount,
@@ -3351,7 +3496,7 @@ function registerHookCommand(program) {
     "Hook handlers for AI coding tools (Claude Code, Codex): read a hook payload on stdin, emit the tool's hook output on stdout"
   );
   hook.command("session-start").description(
-    "Codex SessionStart hook: print the current position of the workspace Codex was opened in (read from the payload's cwd) so Codex adds it to that session's context. Stays silent outside a basou workspace; never fails the session."
+    "SessionStart hook (Codex; Claude Code too): print the current position of the workspace the session was opened in (read from the payload's cwd) so the tool adds it to that session's context. Stays silent outside a registered basou workspace, and when the position names another registered workspace; never fails the session."
   ).addHelpText("after", HOOK_SESSION_START_HELP).action(async () => {
     await runHookSessionStart();
   });
@@ -3440,6 +3585,18 @@ desktop app has bound a folder, when cwd is '/') gets nothing. That is how one
 user-global hook serves every workspace without any workspace's position ever
 being written where another workspace's session would read it.
 
+The hook stays silent in one more case: when the position it would print names
+ANOTHER registered workspace (a recorded path under it, a captured decision that
+mentions it). 'basou orient' and 'basou refresh' report that as a stderr
+advisory the operator can read; a hook has no reader for stderr and its stdout
+becomes the session's trusted context, so it withholds the position instead.
+Run 'basou refresh' to see which lines are responsible.
+
+Claude Code's SessionStart hook sends the same kind of payload (a JSON object
+with 'cwd') and adds stdout to context the same way, so a Claude Code user may
+register this command in ~/.claude/settings.json in place of 'basou orient' to
+get both gates. basou does not install that one.
+
 Codex trusts hooks by hash. A newly installed or changed hook is skipped until
 you review it: the interactive CLI asks at startup ("Hooks need review"), the
 desktop app lists it under Settings -> Hooks. Non-interactive 'codex exec' skips
@@ -3530,6 +3687,14 @@ async function renderRegisteredWorkspacePosition(cwd, portfolioConfigPath = DEFA
     throw new Error("The workspace is not registered in the portfolio; the hook stays silent.");
   }
   const rendered = await renderOrientationForRoot(root, {}, { cwd }, { write: false });
+  const foreign = await findForeignWorkspaceNames({
+    text: rendered.body,
+    selfPath: root,
+    configPath: portfolioConfigPath
+  });
+  if (foreign !== null) {
+    throw new Error("The position names another registered workspace; the hook stays silent.");
+  }
   return { body: rendered.body };
 }
 async function isRegisteredWorkspace(root, portfolioConfigPath) {
@@ -3539,9 +3704,9 @@ async function isRegisteredWorkspace(root, portfolioConfigPath) {
   } catch {
     return false;
   }
-  const rootReal = await realpath2(root).catch(() => root);
+  const rootReal = await realpath3(root).catch(() => root);
   for (const entry of entries) {
-    const entryReal = await realpath2(entry.path).catch(() => null);
+    const entryReal = await realpath3(entry.path).catch(() => null);
     if (entryReal !== null && entryReal === rootReal) return true;
   }
   return false;
@@ -3785,7 +3950,7 @@ var DEFAULT_CODEX_FACE_PATH = join9(homedir7(), ".codex", "AGENTS.md");
 var LEFTOVER_FACE_NOTE = (label) => `${label} still carries an orientation block rendered by an earlier basou (0.39 or before); every Codex session on this machine reads it. \`basou channel clear codex\` removes it.`;
 async function faceHasLeftoverOrientationBlock(facePath) {
   try {
-    const existing = await readMarkdownFile5(facePath);
+    const existing = await readMarkdownFile6(facePath);
     if (existing === null) return false;
     const section = parseMarkers2(existing, { start: ORIENTATION_START2, end: ORIENTATION_END2 });
     return section.kind !== "no_markers";
@@ -3965,7 +4130,7 @@ async function codexHookTrustFor(hooksPath, location, configPath) {
 }
 
 // src/commands/init.ts
-import { basename as basename4, relative, resolve as resolve6 } from "path";
+import { basename as basename5, relative, resolve as resolve6 } from "path";
 import {
   appendBasouGitignore,
   createManifest,
@@ -4003,7 +4168,7 @@ async function runInit(options, ctx = {}) {
 async function doRunInit(options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForInit(cwd);
-  const workspaceName = options.name ?? basename4(repositoryRoot);
+  const workspaceName = options.name ?? basename5(repositoryRoot);
   if (options.repoUrl !== void 0) {
     console.error(
       "Warning: --repo-url is deprecated and ignored (project.repository_url was removed); the flag will be removed at 1.0."
@@ -4329,7 +4494,7 @@ import {
   writeFileSync,
   writeSync
 } from "fs";
-import { basename as basename5, dirname as dirname3, isAbsolute as isAbsolute3, join as join11, relative as relative2, resolve as resolve7 } from "path";
+import { basename as basename6, dirname as dirname4, isAbsolute as isAbsolute3, join as join11, relative as relative2, resolve as resolve7 } from "path";
 import {
   appendBasouGitignore as appendBasouGitignore2,
   basouPaths as basouPaths10,
@@ -4348,7 +4513,7 @@ import {
   planRosterAdoption,
   planWorkspaceView,
   readManifest as readManifest6,
-  readMarkdownFile as readMarkdownFile6,
+  readMarkdownFile as readMarkdownFile7,
   reconcileSourceRoots,
   removeMarkerSection as removeMarkerSection2,
   renderAnchorStarter,
@@ -4960,9 +5125,9 @@ function applyGitignorePlan(repositoryRoot, plan) {
       throw new Error("Failed to read .gitignore", { cause: error });
     }
   }
-  const sep = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
+  const sep2 = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
   try {
-    writeFileSync(file, `${existing}${sep}${plan.toAdd.join("\n")}
+    writeFileSync(file, `${existing}${sep2}${plan.toAdd.join("\n")}
 `);
   } catch (error) {
     throw new Error("Failed to write .gitignore", { cause: error });
@@ -5102,7 +5267,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
         isAnchor: true,
         reachable: true,
         canonicalPresent: true,
-        canonicalName: basename5(real),
+        canonicalName: basename6(real),
         files: [{ name: CANONICAL_FILE, expectedTarget: CANONICAL_FILE, state: "blocked" }]
       };
     }
@@ -5124,14 +5289,14 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
       isAnchor: true,
       reachable: true,
       canonicalPresent: true,
-      canonicalName: basename5(real),
+      canonicalName: basename6(real),
       files: anchorFiles
     };
   }
   if (!existsSync2(join11(real, ".git"))) {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
-  const canonicalFile = isSelf ? join11(real, CANONICAL_FILE) : join11(anchorReal, "agents", basename5(real), CANONICAL_FILE);
+  const canonicalFile = isSelf ? join11(real, CANONICAL_FILE) : join11(anchorReal, "agents", basename6(real), CANONICAL_FILE);
   if (!existsSync2(canonicalFile)) {
     return { ...base, isAnchor: false, reachable: true, canonicalPresent: false, files: [] };
   }
@@ -5151,7 +5316,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
     isAnchor: false,
     reachable: true,
     canonicalPresent: true,
-    canonicalName: basename5(real),
+    canonicalName: basename6(real),
     files
   };
 }
@@ -5168,7 +5333,7 @@ function applySymlinkPlan(repositoryRoot, plan) {
   for (const { name, target } of plan.toCreate) {
     const filePath = join11(real, name);
     try {
-      mkdirSync(dirname3(filePath), { recursive: true });
+      mkdirSync(dirname4(filePath), { recursive: true });
       symlinkSync(target, filePath);
       created.push(name);
     } catch (error) {
@@ -5184,16 +5349,16 @@ function viewCanonicalCollision(repositoryRoot, roster, viewName) {
   for (const entry of roster) {
     let name;
     try {
-      name = basename5(realpathSync(resolve7(repositoryRoot, entry.path)));
+      name = basename6(realpathSync(resolve7(repositoryRoot, entry.path)));
     } catch {
-      name = basename5(resolve7(repositoryRoot, entry.path));
+      name = basename6(resolve7(repositoryRoot, entry.path));
     }
     if (name === viewName) return entry.path;
   }
   return void 0;
 }
 function gatherViewSymlinks(repositoryRoot, anchorReal, roster, viewDir) {
-  const viewName = basename5(viewDir);
+  const viewName = basename6(viewDir);
   const collision = viewCanonicalCollision(repositoryRoot, roster, viewName);
   if (collision !== void 0) return { kind: "collision", viewName, repoPath: collision };
   const canonicalFile = canonicalFileFor(anchorReal, viewName);
@@ -5218,7 +5383,7 @@ function applyViewSymlinks(viewDir, files) {
     if (f.state !== "missing") continue;
     const filePath = join11(viewDir, f.name);
     try {
-      mkdirSync(dirname3(filePath), { recursive: true });
+      mkdirSync(dirname4(filePath), { recursive: true });
       symlinkSync(f.expectedTarget, filePath);
       created.push(f.name);
     } catch (error) {
@@ -5438,7 +5603,7 @@ function resolveViewDir(repositoryRoot, viewPath) {
     return realpathSync(abs);
   } catch {
     try {
-      return join11(realpathSync(dirname3(abs)), basename5(abs));
+      return join11(realpathSync(dirname4(abs)), basename6(abs));
     } catch {
       return abs;
     }
@@ -5455,7 +5620,7 @@ function gatherViewRepo(repositoryRoot, viewDir, entry) {
   if (expectedTarget === "" || expectedTarget === ".") {
     return { path: entry.path, reachable: false };
   }
-  const linkName = basename5(repoReal);
+  const linkName = basename6(repoReal);
   const { state, actualTarget } = inspectSymlink(join11(viewDir, linkName), expectedTarget);
   return {
     path: entry.path,
@@ -5472,7 +5637,7 @@ function applyViewPlan(viewDir, toCreate) {
   for (const { name, target } of toCreate) {
     const filePath = join11(viewDir, name);
     try {
-      mkdirSync(dirname3(filePath), { recursive: true });
+      mkdirSync(dirname4(filePath), { recursive: true });
       symlinkSync(target, filePath);
       created.push(name);
     } catch (error) {
@@ -5585,7 +5750,7 @@ async function doRunProjectWorkspace(options, ctx) {
   } else {
     const viewDir = resolveViewDir(repositoryRoot, viewPath);
     const facts = roster.map((entry) => gatherViewRepo(repositoryRoot, viewDir, entry));
-    const rosterNames = roster.map((entry) => basename5(resolve7(repositoryRoot, entry.path)));
+    const rosterNames = roster.map((entry) => basename6(resolve7(repositoryRoot, entry.path)));
     const rosterRealpaths = /* @__PURE__ */ new Set();
     for (const entry of roster) {
       try {
@@ -5779,10 +5944,10 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   if (!existsSync2(join11(real, ".git"))) {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
-  const canonicalName = basename5(real);
+  const canonicalName = basename6(real);
   let content;
   try {
-    content = await readMarkdownFile6(canonicalFileFor(anchorReal, canonicalName));
+    content = await readMarkdownFile7(canonicalFileFor(anchorReal, canonicalName));
   } catch {
     return {
       ...declared,
@@ -5832,7 +5997,7 @@ function viewPresetReposFor(repositoryRoot, roster) {
     } catch {
       real = void 0;
     }
-    const name = basename5(real ?? abs);
+    const name = basename6(real ?? abs);
     const isAnchor = real !== void 0 && anchorReal !== void 0 ? real === anchorReal : abs === repositoryRoot;
     return {
       name,
@@ -5890,8 +6055,8 @@ async function applyViewPreset(anchorReal, outcome) {
     isLink = false;
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
-  if (outcome.action === "create") mkdirSync(dirname3(file), { recursive: true });
-  const existing = await readMarkdownFile6(file);
+  if (outcome.action === "create") mkdirSync(dirname4(file), { recursive: true });
+  const existing = await readMarkdownFile7(file);
   await writeMarkdownFile5(file, renderWithMarkers4(existing, outcome.block, label));
 }
 async function applyPresetPlan(anchorReal, plan) {
@@ -5904,8 +6069,8 @@ async function applyPresetPlan(anchorReal, plan) {
     isLink = false;
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
-  if (plan.action === "create") mkdirSync(dirname3(file), { recursive: true });
-  const existing = await readMarkdownFile6(file);
+  if (plan.action === "create") mkdirSync(dirname4(file), { recursive: true });
+  const existing = await readMarkdownFile7(file);
   await writeMarkdownFile5(file, renderWithMarkers4(existing, plan.desiredBlock, label));
 }
 function presetFailureReason(error) {
@@ -5927,7 +6092,7 @@ async function doRunProjectPreset(options, ctx) {
   const facts = [];
   for (const entry of roster) facts.push(await gatherRepoPreset(repositoryRoot, anchorReal, entry));
   const viewPath = manifest.workspace.view;
-  const viewCanonicalName = roster.length > 0 && viewPath !== void 0 ? basename5(resolveViewDir(repositoryRoot, viewPath)) : void 0;
+  const viewCanonicalName = roster.length > 0 && viewPath !== void 0 ? basename6(resolveViewDir(repositoryRoot, viewPath)) : void 0;
   const summary = summarizePresetPlan(
     facts,
     viewCanonicalName !== void 0 ? { viewCanonicalName } : void 0
@@ -6154,7 +6319,7 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
     return empty;
   }
   const anchorReal = realpathSync(repositoryRoot);
-  const canonicalName = basename5(real);
+  const canonicalName = basename6(real);
   const instructionFiles = [];
   for (const name of INSTRUCTION_FILES) {
     try {
@@ -6224,7 +6389,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
   }
   const isAnchor = repoReal !== void 0 && repoReal === anchorReal;
   const targetAbs = resolve7(repositoryRoot, target);
-  const canonicalName = basename5(repoReal ?? targetAbs);
+  const canonicalName = basename6(repoReal ?? targetAbs);
   const roster = manifest.repos ?? [];
   const declaredEntry = roster.find((r) => {
     try {
@@ -6245,10 +6410,10 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
     }
     if (rReal !== null) {
       if (repoReal !== void 0 && rReal === repoReal) return false;
-      return basename5(rReal).toLowerCase() === cnFold;
+      return basename6(rReal).toLowerCase() === cnFold;
     }
     if (resolve7(repositoryRoot, r.path) === targetAbs) return false;
-    return basename5(resolve7(repositoryRoot, r.path)).toLowerCase() === cnFold;
+    return basename6(resolve7(repositoryRoot, r.path)).toLowerCase() === cnFold;
   });
   const collisionNote = "shared with another repo of the same basename, so it cannot be removed (check manually)";
   const items = [];
@@ -6713,7 +6878,7 @@ function renderProjectArchive(result) {
   if (t.gitignorePatterns.length > 0)
     items.push(`.gitignore instruction patterns (${t.gitignorePatterns.join(", ")})`);
   if (t.canonical)
-    items.push(`the anchor's canonical (agents/${basename5(result.target)}/AGENTS.md)`);
+    items.push(`the anchor's canonical (agents/${basename6(result.target)}/AGENTS.md)`);
   if (!t.inspected) {
     lines.push(
       "## Manual teardown (the repo could not be resolved on disk, so it was not inspected)"
@@ -6924,7 +7089,7 @@ function validateProjectName(name) {
 async function doRunProjectNew(repos, options, ctx) {
   const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveRepositoryRootForNew(cwd);
-  const workspaceName = basename5(repositoryRoot);
+  const workspaceName = basename6(repositoryRoot);
   const productName = options.projectName !== void 0 ? validateProjectName(options.projectName) : void 0;
   const viewStem = productName ?? workspaceName;
   const viewOverridesProjectName = productName !== void 0 && typeof options.view === "string";
@@ -7123,10 +7288,10 @@ async function doRunProjectSeedAnchor(options, ctx) {
     return;
   }
   const viewPath = manifest.workspace.view;
-  const viewName = viewPath !== void 0 ? basename5(resolveViewDir(repositoryRoot, viewPath)) : void 0;
+  const viewName = viewPath !== void 0 ? basename6(resolveViewDir(repositoryRoot, viewPath)) : void 0;
   const repos = viewPresetReposFor(repositoryRoot, roster);
   const content = renderAnchorStarter({
-    anchorName: basename5(repositoryRoot),
+    anchorName: basename6(repositoryRoot),
     ...manifest.project?.name !== void 0 ? { projectName: manifest.project.name } : {},
     ...viewName !== void 0 ? { viewName } : {},
     repos
@@ -7207,7 +7372,7 @@ function gatherRetrofit(repositoryRoot, anchorReal, roster, argPath, argAbs, arg
   const self = declaredEntry !== void 0 && instructionMode(declaredEntry) === "self";
   const displayRel = argReal !== void 0 ? relative2(anchorReal, argReal) : relative2(repositoryRoot, argAbs);
   const path = displayRel === "" ? "." : displayRel;
-  const canonicalName = basename5(argReal ?? argAbs);
+  const canonicalName = basename6(argReal ?? argAbs);
   if (argReal === void 0) {
     return {
       path,
@@ -7241,7 +7406,7 @@ function gatherRetrofit(repositoryRoot, anchorReal, roster, argPath, argAbs, arg
 function relocateAgentsFile(repoReal, canonicalFile) {
   const agentsFile = join11(repoReal, CANONICAL_FILE);
   try {
-    mkdirSync(dirname3(canonicalFile), { recursive: true });
+    mkdirSync(dirname4(canonicalFile), { recursive: true });
   } catch (error) {
     return { ok: false, message: failureReason(error), partial: false };
   }
@@ -7262,7 +7427,7 @@ function relocateAgentsFile(repoReal, canonicalFile) {
 function gatherViewRetrofit(repositoryRoot, anchorReal, viewPath, roster) {
   if (viewPath === void 0) return { kind: "no-view" };
   const viewDir = resolveViewDir(repositoryRoot, viewPath);
-  const viewName = basename5(viewDir);
+  const viewName = basename6(viewDir);
   const collision = viewCanonicalCollision(repositoryRoot, roster, viewName);
   if (collision !== void 0) return { kind: "collision", viewName, repoPath: collision };
   const canonicalFile = canonicalFileFor(anchorReal, viewName);
@@ -7294,7 +7459,7 @@ async function applyViewRetrofit(anchorReal, outcome) {
     isLink = false;
   }
   if (isLink) throw new Error(`Canonical is a symlink in ${label}`);
-  const existing = await readMarkdownFile6(file);
+  const existing = await readMarkdownFile7(file);
   await writeMarkdownFile5(file, seedMarkers(existing, outcome.block, label));
 }
 async function doRunProjectRetrofit(repo, options, ctx) {
@@ -7341,7 +7506,7 @@ async function doRunProjectRetrofit(repo, options, ctx) {
   } catch {
     argReal = void 0;
   }
-  const viewCanonicalName = viewPath !== void 0 ? basename5(resolveViewDir(repositoryRoot, viewPath)) : void 0;
+  const viewCanonicalName = viewPath !== void 0 ? basename6(resolveViewDir(repositoryRoot, viewPath)) : void 0;
   const facts = gatherRetrofit(
     repositoryRoot,
     anchorReal,
@@ -7557,7 +7722,7 @@ function renderProjectRetrofit(result) {
 
 // src/commands/protocol.ts
 import { readFile as readFile4 } from "fs/promises";
-import { PROTOCOL_END, PROTOCOL_START, parseMarkers as parseMarkers4, readMarkdownFile as readMarkdownFile7 } from "@basou/core";
+import { PROTOCOL_END, PROTOCOL_START, parseMarkers as parseMarkers4, readMarkdownFile as readMarkdownFile8 } from "@basou/core";
 
 // src/lib/protocols-config.ts
 import { homedir as homedir8 } from "os";
@@ -7709,18 +7874,23 @@ ${body}` : body;
 ${sections.join("\n\n")}
 `;
 }
-async function doRunProtocolSync(options) {
+async function doRunProtocolSync(options, ctx = {}) {
   const configPath = options.config ?? DEFAULT_PROTOCOLS_CONFIG_PATH;
   const target = options.target ?? DEFAULT_TARGET_PATH;
   const entries = await loadProtocolsConfig(configPath);
   const sources = await readProtocolSources(entries);
   const block = buildBlock(sources);
+  const foreign = await findForeignWorkspaceNames({
+    text: block,
+    configPath: ctx.portfolioConfigPath
+  });
   const result = await syncMarkerBlock({
     target,
     markers: PROTOCOL_MARKERS,
     block,
     ...options.dryRun === true ? { dryRun: true } : {}
   });
+  if (foreign !== null) console.error(protocolForeignWorkspaceWarning(foreign));
   if (result.action === "unchanged") {
     console.log(`The basou:protocols block is already up to date (${entries.length} protocol(s)).`);
     return;
@@ -7742,7 +7912,7 @@ async function doRunProtocolList(options) {
   const configPath = options.config ?? DEFAULT_PROTOCOLS_CONFIG_PATH;
   const target = options.target ?? DEFAULT_TARGET_PATH;
   const entries = await loadProtocolsConfig(configPath);
-  const existing = await readMarkdownFile7(target);
+  const existing = await readMarkdownFile8(target);
   const installed = existing !== null && parseMarkers4(existing, PROTOCOL_MARKERS).kind === "ok";
   console.log(`Declared protocols (${entries.length}):`);
   for (const entry of entries) {
@@ -7975,7 +8145,7 @@ async function doRunRefreshPortfolio(options, ctx) {
   for (const ws of workspaces) {
     const label = ws.label ?? ws.path;
     try {
-      const { result } = await computeRefresh(
+      const { result, paths } = await computeRefresh(
         { ...options, portfolio: false },
         { ...ctx, cwd: ws.path }
       );
@@ -7985,6 +8155,7 @@ async function doRunRefreshPortfolio(options, ctx) {
 ## ${label} (${ws.path})`);
         printRefreshSummary(result);
       }
+      await warnPosition(paths, result, ctx);
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
       rollup.push({ label, path: ws.path, status: "failed", error: message });
@@ -8068,8 +8239,16 @@ async function doRunRefresh(options, ctx) {
     const line = await retiredChannelNotice(paths);
     if (line !== null) console.log(line);
   }
+  await warnPosition(paths, result, ctx);
   return reported;
 }
+async function warnPosition(paths, result, ctx) {
+  if (result.orientation.status !== "generated") return;
+  await warnIfPositionNamesOtherWorkspaces({
+    paths,
+    configPath: ctx.portfolioConfigPath
+  });
+}
 async function retiredChannelNotice(paths) {
   try {
     const manifest = await readManifest7(paths);
@@ -9104,7 +9283,7 @@ async function noteCodexHookStatusPreSpawn(_cwd, ctx) {
 
 // src/commands/session.ts
 import { readFile as readFile7 } from "fs/promises";
-import { basename as basename6, isAbsolute as isAbsolute6, join as join15, relative as relative3 } from "path";
+import { basename as basename7, isAbsolute as isAbsolute6, join as join15, relative as relative3 } from "path";
 import {
   acquireLock as acquireLock6,
   appendEventToExistingSession as appendEventToExistingSession3,
@@ -9612,7 +9791,7 @@ function printSessionImportResult(options, result) {
     return;
   }
   console.log(
-    `Imported session ${sid} (${result.eventCount} events) from ${basename6(options.from)}`
+    `Imported session ${sid} (${result.eventCount} events) from ${basename7(options.from)}`
   );
 }
 var NOTE_BODY_PREVIEW_LIMIT = 80;
@@ -11212,7 +11391,7 @@ async function assertWorkspaceInitialized14(basouRoot) {
 // src/commands/view.ts
 import { spawn } from "child_process";
 import { createHash as createHash2 } from "crypto";
-import { basename as basename9, resolve as resolve13 } from "path";
+import { basename as basename10, resolve as resolve13 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe18,
   basouPaths as basouPaths22,
@@ -11226,7 +11405,7 @@ import { InvalidArgumentError as InvalidArgumentError7 } from "commander";
 import { createReadStream as createReadStream2 } from "fs";
 import { readdir as readdir3, stat as stat6 } from "fs/promises";
 import { homedir as homedir12 } from "os";
-import { basename as basename7, dirname as dirname4, join as join17 } from "path";
+import { basename as basename8, dirname as dirname5, join as join17 } from "path";
 import { createInterface as createInterface2 } from "readline";
 import { basouPaths as basouPaths21, readManifest as readManifest13, resolveRepositoryRoot as resolveRepositoryRoot14 } from "@basou/core";
 function uncapturedTotal(result) {
@@ -11247,7 +11426,7 @@ async function checkPortfolioCoverage(workspaces, ctx = {}) {
         file,
         "claude-code",
         claudeTranscriptCwd,
-        listedDirs.has(basename7(dirname4(file)))
+        listedDirs.has(basename8(dirname5(file)))
       );
     }
   }
@@ -11536,7 +11715,7 @@ function inertLines(result) {
 
 // src/lib/portfolio-safety.ts
 import { execFile } from "child_process";
-import { lstat as lstat2, realpath as realpath3 } from "fs/promises";
+import { lstat as lstat2, realpath as realpath4 } from "fs/promises";
 import { isAbsolute as isAbsolute7, join as join18, relative as relative4, resolve as resolve11 } from "path";
 import { promisify } from "util";
 import { readManifest as readManifest14 } from "@basou/core";
@@ -11546,7 +11725,7 @@ function errorCode(error) {
 }
 async function canonical(p) {
   try {
-    return await realpath3(p);
+    return await realpath4(p);
   } catch {
     return resolve11(p);
   }
@@ -11715,7 +11894,7 @@ function formatSafetyReport(result) {
 
 // src/lib/view-server.ts
 import { createServer } from "http";
-import { basename as basename8, join as join19, resolve as resolve12 } from "path";
+import { basename as basename9, join as join19, resolve as resolve12 } from "path";
 import {
   computeWorkStats as computeWorkStats2,
   enumerateApprovals as enumerateApprovals2,
@@ -11726,7 +11905,7 @@ import {
   loadTaskEntries as loadTaskEntries2,
   readAllEvents as readAllEvents2,
   readManifest as readManifest15,
-  readMarkdownFile as readMarkdownFile8,
+  readMarkdownFile as readMarkdownFile9,
   readSessionYaml as readSessionYaml3,
   readTaskFile as readTaskFile2,
   renderDecisions as renderDecisions3,
@@ -12591,6 +12770,9 @@ async function handleWorkspacePost(res, sub, ws, body, deps, runExclusive) {
     const result = await runExclusive(
       () => refreshAll({ options: actionOptions, ctx: ws.importCtx, paths: ws.paths, nowIso })
     );
+    if (result.orientation.status === "generated") {
+      await warnIfPositionNamesOtherWorkspaces({ paths: ws.paths });
+    }
     sendJson(res, 200, result);
     return true;
   }
@@ -12721,7 +12903,7 @@ async function rosterRepos(repoRoot, manifest, resolveRemoteUrl) {
       const remote = await resolveRemoteUrl(abs);
       const url = remote !== void 0 ? toBrowserUrl(remote) : null;
       return {
-        name: basename8(abs),
+        name: basename9(abs),
         path: repo.path,
         ...url !== null ? { url } : {},
         ...repo.visibility !== void 0 ? { visibility: repo.visibility } : {}
@@ -12778,7 +12960,7 @@ async function taskDetail(ws, taskId) {
   }
 }
 async function decisionsView(ws, nowProvider) {
-  const fromDisk = await readMarkdownFile8(ws.paths.files.decisions);
+  const fromDisk = await readMarkdownFile9(ws.paths.files.decisions);
   if (fromDisk !== null) {
     return { body: fromDisk, fromDisk: true };
   }
@@ -12801,7 +12983,7 @@ async function approvalsView(ws, nowProvider) {
   return { pending: await toViews(ids.pending), resolved: await toViews(ids.resolved) };
 }
 async function handoffView(ws, nowProvider) {
-  const fromDisk = await readMarkdownFile8(ws.paths.files.handoff);
+  const fromDisk = await readMarkdownFile9(ws.paths.files.handoff);
   if (fromDisk !== null) {
     return { body: fromDisk, fromDisk: true };
   }
@@ -13036,7 +13218,7 @@ async function buildWorkspaceEntry(repoRoot, ctx, labelOverride) {
     const notFound = error instanceof Error && error.message === "YAML file not found";
     return {
       key: `ws-${createHash2("sha1").update(repoRoot).digest("hex").slice(0, 12)}`,
-      label: labelOverride ?? basename9(repoRoot),
+      label: labelOverride ?? basename10(repoRoot),
       paths,
       repoRoot,
       importCtx,