@bordoni/claudep 0.4.0 → 0.4.1

package/CHANGELOG.md

@@ -6,6 +6,21 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 
 ## [Unreleased]
 
+## [0.4.1] - 2026-10-01
+
+### Added
+
+- `claudep doctor` warns when your Claude Code asks for approval on every auto-memory write in a profile. Since 2.1.280 a write through the shared `projects/` symlink is judged at `~/.claude/projects`, which auto mode cannot approve ([anthropics/claude-code#98044](https://github.com/anthropics/claude-code/issues/98044)). The README explains it.
+
+### Changed
+
+- Caught up with Claude Code 2.1.280, whose list of per-instance files grew. `state/`, `policy-limits.json.stamp.json`, the `.signature.json` files next to `policy-limits.json` and `remote-settings.json`, `daemon.lock`, `shares/`, `storage-v2/` and about twenty-five caches and locks are known-private, so `doctor` stops calling them unclassified.
+
+### Fixed
+
+- `loop.md`, which Claude Code keeps per instance, is no longer shared by the rule that links every top-level `*.md`. `claudep doctor` names any `loop.md` symlink an older claudep left in a profile and tells you to remove it.
+- `claudep doctor` on Linux and Windows no longer calls a profile "not logged in yet" when it has no `.credentials.json` but Claude Code reports it logged in. Claude Code can keep the login elsewhere, such as Windows Credential Manager behind a feature flag.
+
 ## [0.4.0] - 2026-09-14
 
 ### Added
@@ -86,7 +101,8 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and
 - Keychain isolation per config dir verified against Claude Code 2.1.259: the service name is `Claude Code-credentials-<sha256(dir)[0:8]>`.
 - Test suite with `bun test`, a sandboxed `$HOME`, a fake `claude` and `security` on PATH, and a real-shell test for the hook. CI runs typecheck, lint and tests on macOS and Linux.
 
-[Unreleased]: https://github.com/bordoni/claudep/compare/0.4.0...HEAD
+[Unreleased]: https://github.com/bordoni/claudep/compare/0.4.1...HEAD
+[0.4.1]: https://github.com/bordoni/claudep/compare/0.4.0...0.4.1
 [0.4.0]: https://github.com/bordoni/claudep/compare/0.3.0...0.4.0
 [0.3.0]: https://github.com/bordoni/claudep/compare/0.2.1...0.3.0
 [0.2.1]: https://github.com/bordoni/claudep/compare/0.2.0...0.2.1

package/README.md

@@ -155,7 +155,11 @@ The shared list is an allowlist, so an account-specific file cannot leak across
 
 - The first time you open a repository under a new profile you will re-accept folder trust, and claude.ai connectors need their OAuth redone in that profile.
 - Two profiles running at the same time write the same `settings.json` and `plugins/`. That is the same situation as two terminals today.
-- Background sessions and the daemon are tied to `~/.claude`. As of Claude Code 2.1.263, `claude daemon install` refuses to run with `CLAUDE_CONFIG_DIR` set, and `claude --bg` under a profile runs without the daemon.
+- Background sessions and the daemon are tied to `~/.claude`. As of Claude Code 2.1.280, `claude daemon install` refuses to run with `CLAUDE_CONFIG_DIR` set, and the launcher skips the daemon for `claude --bg` under a profile. Anthropic's docs describe a separate background supervisor per config dir; I have not verified that here.
+- Since Claude Code 2.1.280, every auto-memory write in a profile asks for approval, and auto mode cannot give it. The memory directory sits under the shared `projects/` symlink, and Claude Code now checks a write at the path it lands on, `~/.claude/projects/...`, which it treats as sensitive. This is [anthropics/claude-code#98044](https://github.com/anthropics/claude-code/issues/98044), open upstream. `claudep doctor` warns while your Claude Code is affected. The default profile is not.
+- Skills and plugins synced from claude.ai land in the shared `skills/synced/` and `plugins/synced/`, in one folder per account, so profiles do not mix them. The `syncClaudeAiSkills` and `syncClaudeAiPlugins` switches live in the shared `settings.json` and apply to every profile.
+- Console sign-ins made without an API key live in `~/.config/anthropic`, outside every config dir, so all profiles see the same ones. `ANTHROPIC_PROFILE` picks which one Claude Code uses.
+- In VS Code, `CLAUDE_CONFIG_DIR` in `claudeCode.environmentVariables` must be an absolute path. The session list ignores it when `claudeProcessWrapper` is set.
 - Set `CLAUDE_PROFILES_DIR` to move the profiles root. Keep it out of iCloud or Dropbox; `.claude.json` is rewritten constantly and sync tools create conflict copies.
 - Never put `CLAUDE_CONFIG_DIR` in a `settings.json` `env` block. Claude Code detects that mismatch and disables features; `claudep doctor` reports it.
 - `ANTHROPIC_API_KEY`, `ANTHROPIC_AUTH_TOKEN` and `CLAUDE_CODE_OAUTH_TOKEN` override the login in any config dir, always in `-p` mode. `claudep <name>` and `claudep doctor` warn when one is set and leave it alone.

package/claudep.ts

@@ -250,8 +250,9 @@ export const SHARED_DIRS = [
   "workflows",
 ] as const;
 
-/** Per-profile state. First block is Claude Code's own runtime-state list;
- *  the rest are observed extras. Never shared. */
+/** Per-profile state. First block is Claude Code's own runtime-state list as of
+ *  2.1.263, then observed extras, then what 2.1.280 added to that list. Never
+ *  shared, and a name here is never shared by the top-level *.md rule either. */
 export const KNOWN_PRIVATE = new Set<string>([
   ".claude.json",
   ".claude.json.backup",
@@ -301,6 +302,42 @@ export const KNOWN_PRIVATE = new Set<string>([
   "launch.json",
   "scheduled_tasks.json",
   "seed-admin",
+  // Added to Claude Code's runtime-state list by 2.1.280 (checked 2026-09-30).
+  "state",
+  "policy-limits.json.stamp.json",
+  "policy-limits.json.signature.json",
+  "policy-limits.json.signature-iat.json",
+  "remote-settings.json.signature.json",
+  "remote-settings.json.signature-iat.json",
+  "remote-settings-consent.json",
+  "remote-settings-helper-consent",
+  "hfi-auth.json",
+  "shares",
+  "storage-v2",
+  "daemon.lock",
+  "gh-pr-status-cache.json",
+  "active-time.json",
+  "server-sessions.json",
+  "image-cache",
+  "file-transfers",
+  "computer-use.lock",
+  "server.lock",
+  "downloads",
+  "scratch",
+  "traces",
+  "startup-perf",
+  "feedback-bundles",
+  "ccr",
+  "bridge-spawn",
+  "local-settings",
+  "project-settings",
+  "remote",
+  "systemd",
+  "api-dumps",
+  "dump-prompts",
+  "antproto.json",
+  ".cc-writes",
+  "loop.md",
 ]);
 
 /** Keys copied from the base .claude.json into a fresh profile so first-run
@@ -462,7 +499,8 @@ export function sharedItems(base: string): SharedItem[] {
   for (const f of SHARED_FILES) push(f, "file");
   if (existsSync(base)) {
     for (const entry of readdirSync(base, { withFileTypes: true })) {
-      if (entry.name.endsWith(".md") && !entry.isDirectory()) push(entry.name, "file");
+      if (entry.name.endsWith(".md") && !entry.isDirectory() && !KNOWN_PRIVATE.has(entry.name))
+        push(entry.name, "file");
     }
   }
   for (const d of SHARED_DIRS) push(d, "dir");
@@ -557,6 +595,18 @@ export function linkState(
   return existsSync(dest) ? "ok" : "broken";
 }
 
+/** Known-private names in a profile that are still symlinks into the base.
+ *  An older claudep linked every top-level *.md, which once included loop.md;
+ *  link() never deletes, so doctor names them for the user to remove. */
+export function staleSharedLinks(base: string, dir: string, platform: NodeJS.Platform = process.platform): string[] {
+  if (!existsSync(dir)) return [];
+  return readdirSync(dir, { withFileTypes: true })
+    .filter((e) => e.isSymbolicLink() && KNOWN_PRIVATE.has(e.name))
+    .filter((e) => samePath(readlinkSync(join(dir, e.name)), join(base, e.name), platform))
+    .map((e) => e.name)
+    .sort();
+}
+
 /** What to tell the user when the OS refused to create a symlink. */
 export function symlinkDeniedHint(platform: NodeJS.Platform, name: string): string {
   if (platform === "win32")
@@ -598,8 +648,23 @@ export function authEnvOverrides(env: Env = process.env, platform: NodeJS.Platfo
  *  dir. Before it every config dir shared one login. */
 export const MIN_CLAUDE_VERSION = "2.1.144";
 
+/** From this Claude Code on, a write through a symlink is also judged at the
+ *  path it lands on. Auto memory in a profile whose projects/ is shared lands
+ *  in ~/.claude/projects and asks for approval on every write, which auto mode
+ *  cannot give (anthropics/claude-code#98044). No fixed version yet. */
+export const MEMORY_SYMLINK_PROMPT_FROM = "2.1.280";
+export const MEMORY_SYMLINK_ISSUE = "https://github.com/anthropics/claude-code/issues/98044";
+
 export type Version = [number, number, number];
 
+/** True when this Claude Code prompts on every auto-memory write through the
+ *  shared projects/ symlink. An unknown version is not reported. */
+export function memoryWritesPrompt(v: Version | undefined, shared: readonly SharedItem[]): boolean {
+  const from = parseVersion(MEMORY_SYMLINK_PROMPT_FROM);
+  if (!v || !from || versionBelow(v, from)) return false;
+  return shared.some((s) => s.name === "projects");
+}
+
 /** The first x.y.z in `claude --version` output. */
 export function parseVersion(text: string): Version | undefined {
   const m = /(\d+)\.(\d+)\.(\d+)/.exec(text);
@@ -1672,6 +1737,7 @@ function msysConfigDirWarning(L: Layout, env: Env = process.env): string | undef
 async function cmdDoctor(L: Layout, args: string[]): Promise<void> {
   const names = args[0] ? [args[0]] : listProfileNames(L);
   let problems = 0;
+  let v: Version | undefined;
   const launch = findClaude();
   if (launch && launch.kind !== "ps1") {
     const { out } = await captureClaude(L, undefined, ["--version"]);
@@ -1680,7 +1746,7 @@ async function cmdDoctor(L: Layout, args: string[]): Promise<void> {
       console.log(
         `${c.dim("·")} claude is the npm cmd shim and runs through cmd.exe; the native installer's claude.exe avoids that hop`,
       );
-    const v = parseVersion(out);
+    v = parseVersion(out);
     const floor = parseVersion(MIN_CLAUDE_VERSION);
     if (L.platform === "darwin" && v && floor && versionBelow(v, floor)) {
       bad(
@@ -1715,6 +1781,10 @@ async function cmdDoctor(L: Layout, args: string[]): Promise<void> {
   if (unclassified.length) {
     warn(`base items neither shared nor known-private (they stay per-profile): ${unclassified.join(", ")}`);
   }
+  if (memoryWritesPrompt(v, shared))
+    warn(
+      `Claude Code ${v?.join(".")} asks for approval on every auto-memory write in a profile, because projects/ is shared through a symlink; auto mode cannot approve it. Known upstream bug: ${MEMORY_SYMLINK_ISSUE}`,
+    );
 
   for (const name of names) {
     const dir = profileDir(L, name);
@@ -1744,13 +1814,23 @@ async function cmdDoctor(L: Layout, args: string[]): Promise<void> {
     ok(`${shared.length} shared item(s) checked`);
     const strays = readdirSync(dir).filter((n) => !sharedNames.has(n) && !KNOWN_PRIVATE.has(n) && !n.endsWith(".md"));
     if (strays.length) warn(`unexpected private items: ${strays.join(", ")}`);
+    for (const n of staleSharedLinks(L.base, dir, L.platform)) {
+      bad(
+        `${n}: linked to the base by an older claudep, but it is per-profile state now. Remove the symlink: ${join(dir, n)}`,
+      );
+      problems++;
+    }
+    const s = await authStatus(L, dir);
     if (L.platform === "darwin") {
       const svc = keychainService(dir);
       if (await keychainHas(svc)) ok(`keychain item "${svc}" present`);
       else warn(`no keychain item "${svc}". Not logged in yet (claudep ${name} auth login)`);
     } else if (credentialsFileHas(dir)) ok(".credentials.json present");
+    else if (s.loggedIn)
+      console.log(
+        `${c.dim("·")} no .credentials.json in the profile; Claude Code keeps this login elsewhere (on Windows, possibly Credential Manager)`,
+      );
     else warn(`no .credentials.json in the profile. Not logged in yet (claudep ${name} auth login)`);
-    const s = await authStatus(L, dir);
     if (s.loggedIn) ok(`logged in as ${s.email ?? "?"} (${s.orgName ?? "?"}, ${s.subscriptionType ?? "?"})`);
     else warn("not logged in");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bordoni/claudep",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "Unofficial, not affiliated with Anthropic. Run Claude Code under separate accounts on one machine (work + personal) with isolated logins and shared config.",
   "type": "module",
   "license": "MIT",