@difflab/difflab-cli 0.4.0 → 0.6.0

package/README.md

@@ -46,6 +46,17 @@ Clients are selected explicitly. Supported names: `pi`, `cursor`, `codex`, `clau
 
 MCP clients launch `npx -y @difflab/difflab-cli mcp serve` over stdio, so no daemon or port is needed. Bun must be on the client's PATH.
 
+## MCP todo tools
+
+`mcp setup` does **not** create a todo file. Use `todo_init` to create a list. Each todo call requires an absolute `cwd` pointing to an existing directory and a relative `path` to a JSON todo file inside it. For example:
+
+```text
+todo_init({"cwd":"/home/alex","path":"todos.json"})
+todo_add({"cwd":"/home/alex","path":"todos.json","text":"Review PR"})
+```
+
+`todo_list`, `todo_complete`, and `todo_remove` also require both fields; the latter two require a task `id` returned by `todo_list` or `todo_add`. Call `todo_init` before other operations on a new file. Parent traversal outside `cwd`, absolute `path` values, and symlinked paths are rejected. Keep personal todo files outside the repository or add their paths to `.gitignore`. Concurrent writes to the same file are not yet coordinated. Agents can load `skills/difflab-todo/SKILL.md` for usage instructions.
+
 ## Document templates
 
 List the available templates or scaffold a new document from one:
@@ -55,9 +66,19 @@ difflab-cli templates list
 difflab-cli templates scaffold spec-driven-plan docs/plans first-plan.md --cwd /absolute/project/path
 ```
 
-The CLI defaults `--cwd` to its current directory. The MCP server exposes `template_list({})` and `scaffold({"name":"spec-driven-plan","cwd":"/absolute/project/path","path":"docs/plans","filename":"first-plan.md"})`. Both interfaces take a hyphenated template name, a relative destination **directory** (`path`, or `.` for `cwd`), and a separate **filename**. MCP always requires an absolute existing `cwd`. Missing destination directories are created. Available names: `spec-driven-plan`, `software-architecture-design`, `architecture-decision-record`, `product-requirements-document`, `code-review`, `planning-intent`, `ui-component-architecture`, and `pull-request-description` (adapted from Diffpi's PR template).
+The CLI defaults `--cwd` to its current directory. The MCP server exposes `template_list({})` and `scaffold({"name":"spec-driven-plan","cwd":"/absolute/project/path","path":"docs/plans","filename":"first-plan.md"})`. Both interfaces take a hyphenated template name, a relative destination **directory** (`path`, or `.` for `cwd`), and a separate **filename**. MCP always requires an absolute existing `cwd`. Missing destination directories are created. Available names: `spec-driven-plan`, `software-architecture-design`, `architecture-decision-record`, `product-requirements-document`, `code-review`, `planning-intent`, `ui-component-architecture`, `pull-request-description` (adapted from Diffpi's PR template), `flow-definition`, and `flow-instance`.
+
+On first use, missing bundled templates and filled examples are copied to `~/.difflab/templates` and `~/.difflab/templates/examples`. Edit the installed templates to customize future documents. Later runs add missing files but never replace existing ones, even after an upgrade. Examples are for reference, not selectable templates. Copying is literal: prompts and placeholders are not substituted. An unknown name, missing or invalid source, unsafe path, symlink, or existing destination causes an error; destination files are never overwritten. The target directory must remain inside `cwd` and the filename must be a single file name without separators. The one symlink exception is an initialized repository's `.difflab` link to its own user project store: `templates scaffold spec-driven-plan .difflab/plans/YYMMDD-name PLAN.md --cwd /absolute/repo` works in Git worktrees as well. To restore a bundled default, move your installed copy aside before listing again.
+
+The portable `skills/difflab-plan`, `skills/difflab-review`, and `skills/difflab-flow` directories contain natural-language agent workflows for these templates. Install each skill in your client's Agent Skills directory. The MCP-only `log_append({"path":"/absolute/physical/project-store/plans/YYMMDD-name/logs.txt","message":"Phase started"})` tool creates an append-only progress log on first use; pass the physical path, not the `.difflab` symlink. There is no log CLI command.
+
+## Flow definitions and runs
+
+`flow new <name>` and `flow go <name>` are Agent Skill requests, not CLI subcommands. The agent creates a definition once at `~/.difflab/flows/<name>.md`. It calls MCP `scaffold` with `cwd=<absolute home>/.difflab`, `path="flows"`, and `filename="<name>.md"`. Do not use `cwd=<home>,path=".difflab/flows"`: that route is for a repository project store. You can edit a definition before another run. A new run uses a fresh snapshot and does not alter old runs.
+
+From an initialized repository, ask “flow go autospec with input 'Export monthly sales' --local”. The agent selects one branch and creates `.difflab/flows/YYMMDD-autospec/FLOW.md`. It keeps inputs, selected permissions, step checkboxes, and verified outputs for later steps in that file. A same-day path requires an explicit resume choice or a distinct run ID. The first unchecked step is the resume point. The physical project-store path to the sibling `logs.txt` receives timestamped entries through MCP `log_append` only. The definition remains unchanged.
 
-On first use, missing bundled templates and filled examples are copied to `~/.difflab/templates` and `~/.difflab/templates/examples`. Edit the installed templates to customize future documents. Later runs add missing files but never replace existing ones, even after an upgrade. Examples are for reference, not selectable templates. Copying is literal: prompts and placeholders are not substituted. An unknown name, missing or invalid source, unsafe path, symlink, or existing destination causes an error; destination files are never overwritten. The target directory must remain inside `cwd` and the filename must be a single file name without separators. To restore a bundled default, move your installed copy aside before listing again.
+`--local` removes remote steps before creating the run. `--commit` permits only an explicitly declared local commit step when passed, and never permits a push. Remote review needs separate permission and the review skill's forge checks. Plan and review skills still control their own operations; a flow cannot override them. Merge is not supported as a flow step. Example definitions live in `skills/difflab-flow/examples/`.
 
 ## Develop
 

package/dist/index.js

@@ -12796,17 +12796,17 @@ var init_registry = __esm(() => {
 // ../../libs/difflab-ts/src/gitx.ts
 import { execFileSync } from "child_process";
 import { appendFile, readFile } from "fs/promises";
-import { isAbsolute, join, resolve as resolve2 } from "path";
+import { isAbsolute, resolve as resolve2 } from "path";
 function gitRoot(cwd) {
   return runGit(cwd, ["rev-parse", "--show-toplevel"]);
 }
 function discoverGitRepository(cwd) {
   const root = gitRoot(cwd);
-  const gitDir = runGit(root, ["rev-parse", "--git-dir"]);
+  const exclude = runGit(root, ["rev-parse", "--git-path", "info/exclude"]);
   return {
     root,
     originUrl: runGit(root, ["remote", "get-url", "origin"]),
-    excludePath: join(isAbsolute(gitDir) ? gitDir : resolve2(root, gitDir), "info", "exclude")
+    excludePath: isAbsolute(exclude) ? exclude : resolve2(root, exclude)
   };
 }
 async function addPathToGitExcludes(path, entry) {
@@ -26485,9 +26485,9 @@ var init_dist3 = __esm(() => {
 
 // src/projects/config.ts
 import { lstat as lstat2, readFile as readFile2, writeFile } from "fs/promises";
-import { join as join2 } from "path";
+import { join } from "path";
 function repoConfigPath(root = process.cwd()) {
-  return join2(root, "difflab.yaml");
+  return join(root, "difflab.yaml");
 }
 async function readRepoConfig(root = process.cwd()) {
   const path = repoConfigPath(root);
@@ -26548,7 +26548,7 @@ var init_config = __esm(() => {
 import { realpathSync } from "fs";
 import { lstat as lstat3, mkdir } from "fs/promises";
 import { homedir } from "os";
-import { join as join3, resolve as resolve3 } from "path";
+import { join as join2, resolve as resolve3 } from "path";
 function userPaths(home = process.env.HOME || homedir()) {
   let tilde;
   try {
@@ -26558,8 +26558,8 @@ function userPaths(home = process.env.HOME || homedir()) {
       throw error;
     tilde = resolve3(home);
   }
-  const root = join3(tilde, ".difflab");
-  return { root, projects: join3(root, "projects"), database: join3(root, "difflab.sqlite") };
+  const root = join2(tilde, ".difflab");
+  return { root, projects: join2(root, "projects"), database: join2(root, "difflab.sqlite") };
 }
 function createUserStore(home) {
   return {
@@ -26645,7 +26645,7 @@ var init_osx = () => {};
 
 // src/extensions/pathx.ts
 import { lstat as lstat4, realpath, stat } from "fs/promises";
-import { isAbsolute as isAbsolute2, join as join4, relative, resolve as resolve4, sep } from "path";
+import { isAbsolute as isAbsolute2, join as join3, relative, resolve as resolve4, sep } from "path";
 async function resolvePath(cwd, path) {
   if (!isAbsolute2(cwd))
     throw new Error("cwd must be an absolute path to an existing directory");
@@ -26661,7 +26661,7 @@ async function resolvePath(cwd, path) {
   }
   let current = root;
   for (const segment of inside.split(sep)) {
-    current = join4(current, segment);
+    current = join3(current, segment);
     try {
       if ((await lstat4(current)).isSymbolicLink()) {
         throw new Error(`Symlink paths are not allowed for files: ${current}`);
@@ -26732,7 +26732,7 @@ var init_fsx = __esm(() => {
 
 // src/projects/repo-store.ts
 import { mkdir as mkdir3, readlink, symlink } from "fs/promises";
-import { dirname as dirname2, join as join5, resolve as resolve5 } from "path";
+import { dirname as dirname2, join as join4, resolve as resolve5 } from "path";
 async function preflightRepoStore(root, target) {
   for (const path of [root, dirname2(target)]) {
     const entry = await lstatOrNull(path);
@@ -26742,7 +26742,7 @@ async function preflightRepoStore(root, target) {
   const targetStat = await lstatOrNull(target);
   if (targetStat && !targetStat.isDirectory())
     throw new RepoStoreError(`Refusing existing target: ${target}`);
-  const link = join5(root, ".difflab");
+  const link = join4(root, ".difflab");
   const entry = await lstatOrNull(link);
   if (entry) {
     if (!entry.isSymbolicLink())
@@ -26752,7 +26752,7 @@ async function preflightRepoStore(root, target) {
   }
 }
 async function checkRepoStore(root, target, excludePath) {
-  const link = join5(root, ".difflab");
+  const link = join4(root, ".difflab");
   const entry = await lstatOrNull(link);
   if (!entry)
     throw new RepoStoreError(`Missing .difflab symlink at ${link}`);
@@ -26776,7 +26776,7 @@ async function ensureRepoStore(root, target, excludePath) {
         throw error;
     }
   }
-  const link = join5(root, ".difflab");
+  const link = join4(root, ".difflab");
   if (!await lstatOrNull(link)) {
     try {
       await symlink(target, link);
@@ -26794,7 +26794,7 @@ var init_repo_store = __esm(() => {
 });
 
 // src/context.ts
-import { join as join6 } from "path";
+import { join as join5 } from "path";
 async function readProjectContext(cwd = process.cwd(), home) {
   const git = discoverGitRepository(cwd);
   const config = await readRepoConfig(git.root);
@@ -26815,7 +26815,7 @@ async function getProjectContext(git, projectId, home) {
   const repository = project.repositories.find((item) => item.url === origin);
   if (!repository)
     throw new RepoStoreError("Repository is not registered in the selected project database");
-  const target = join6(userPaths(home).projects, project.id, repository.slug);
+  const target = join5(userPaths(home).projects, project.id, repository.slug);
   await checkRepoStore(git.root, target);
   return {
     project: { id: project.id, name: project.name },
@@ -48181,14 +48181,100 @@ var init_tools = __esm(() => {
   ];
 });
 
-// src/projects/tools.ts
+// src/extensions/zodx.ts
 import { isAbsolute as isAbsolute4 } from "path";
+var absolutePath, relativePath, fileName;
+var init_zodx = __esm(() => {
+  init_zod();
+  absolutePath = string2().refine(isAbsolute4, "path must be absolute");
+  relativePath = string2().min(1).refine((value) => value.trim().length > 0 && !isAbsolute4(value), "path must be relative");
+  fileName = string2().refine((value) => value.trim().length > 0 && value !== "." && value !== ".." && !/[/\\\0]/.test(value), "filename must be a single non-empty file name");
+});
+
+// src/logs/store.ts
+import { constants } from "fs";
+import { lstat as lstat6, open as open2, realpath as realpath2 } from "fs/promises";
+import { basename, dirname as dirname5, isAbsolute as isAbsolute5, resolve as resolve8 } from "path";
+async function appendProgressLog(path, message, now = new Date) {
+  if (!isAbsolute5(path) || resolve8(path) !== path || basename(path) !== "logs.txt") {
+    throw new ProgressLogError("path must be an absolute, normalized path ending in logs.txt");
+  }
+  if (!message.trim() || /[\r\n\v\f\0\u0085\u2028\u2029]/.test(message) || Buffer.byteLength(message, "utf8") > 2048) {
+    throw new ProgressLogError("message must be one non-empty line of at most 2048 bytes");
+  }
+  const parent = dirname5(path);
+  if (await realpath2(parent) !== parent) {
+    throw new ProgressLogError("path must not contain symlinked directories");
+  }
+  const pad = (value) => String(value).padStart(2, "0");
+  const stamp = `${pad(now.getFullYear() % 100)}${pad(now.getMonth() + 1)}${pad(now.getDate())} ${pad(now.getHours())}:${pad(now.getMinutes())}:${pad(now.getSeconds())}`;
+  const entry = `[${stamp}]: ${message}`;
+  try {
+    const existing = await lstat6(path);
+    if (existing.isSymbolicLink())
+      throw new ProgressLogError("logs.txt must not be a symlink");
+    if (!existing.isFile())
+      throw new ProgressLogError("logs.txt must be a regular file");
+  } catch (error) {
+    if (!hasErrorCode(error, "ENOENT"))
+      throw error;
+  }
+  let handle;
+  try {
+    handle = await open2(path, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | constants.O_NOFOLLOW, 384);
+  } catch (error) {
+    if (hasErrorCode(error, "ELOOP"))
+      throw new ProgressLogError("logs.txt must not be a symlink");
+    throw error;
+  }
+  try {
+    if (!(await handle.stat()).isFile())
+      throw new ProgressLogError("logs.txt must be a regular file");
+    const line = Buffer.from(`${entry}
+`, "utf8");
+    const { bytesWritten } = await handle.write(line);
+    if (bytesWritten !== line.length)
+      throw new ProgressLogError("Could not append the full log line");
+  } finally {
+    await handle.close();
+  }
+  return { path, entry };
+}
+var ProgressLogError;
+var init_store2 = __esm(() => {
+  init_osx();
+  ProgressLogError = class ProgressLogError extends Error {
+  };
+});
+
+// src/logs/tools.ts
+var logOutput, logTools;
+var init_tools2 = __esm(() => {
+  init_zod();
+  init_zodx();
+  init_store2();
+  logOutput = object({ result: object({ path: string2(), entry: string2() }) });
+  logTools = [
+    defineTool("log_append", {
+      description: "Append one locally timestamped progress line to logs.txt at an absolute physical path. The parent directory must already exist; create the file if absent, never overwrite prior entries.",
+      inputSchema: strictObject({
+        path: absolutePath.describe("Absolute physical path to an existing plan directory/logs.txt"),
+        message: string2().min(1).describe("Single-line progress message")
+      }),
+      outputSchema: logOutput,
+      annotations: { openWorldHint: false }
+    }, async ({ path, message }) => appendProgressLog(path, message), { toStructuredContent: (result) => ({ result }) })
+  ];
+});
+
+// src/projects/tools.ts
+import { isAbsolute as isAbsolute6 } from "path";
 function createProjectTools(home) {
   return [
     defineTool("project_context", {
       description: "Read the configured Difflab project and GitHub repository for an existing absolute cwd. Never sets up or modifies a repository.",
       inputSchema: strictObject({
-        cwd: string2().refine(isAbsolute4, "cwd must be an absolute existing directory")
+        cwd: string2().refine(isAbsolute6, "cwd must be an absolute existing directory")
       }),
       outputSchema: projectContextOutput,
       annotations: { readOnlyHint: true, openWorldHint: false }
@@ -48196,7 +48282,7 @@ function createProjectTools(home) {
   ];
 }
 var setupHint = "Use the difflab-init skill to set up this repository with the Difflab CLI.", projectContextOutput, projectTools;
-var init_tools2 = __esm(() => {
+var init_tools3 = __esm(() => {
   init_zod();
   init_context();
   projectContextOutput = strictObject({
@@ -48213,16 +48299,6 @@ var init_tools2 = __esm(() => {
   projectTools = createProjectTools();
 });
 
-// src/extensions/zodx.ts
-import { isAbsolute as isAbsolute5 } from "path";
-var absolutePath, relativePath, fileName;
-var init_zodx = __esm(() => {
-  init_zod();
-  absolutePath = string2().refine(isAbsolute5, "path must be absolute");
-  relativePath = string2().min(1).refine((value) => value.trim().length > 0 && !isAbsolute5(value), "path must be relative");
-  fileName = string2().refine((value) => value.trim().length > 0 && value !== "." && value !== ".." && !/[/\\\0]/.test(value), "filename must be a single non-empty file name");
-});
-
 // templates/spec-driven-plan.md
 var spec_driven_plan_default = `# [Outcome to deliver]
 
@@ -48511,6 +48587,21 @@ var code_review_default = `# Review: [change or pull request]
 
 [Evaluate authentication and autorization, permissions, secrets, dependencies, input validation, proper error handling, and trust boundaries. State SKIPPED if skipped with reason, for example for chores, simple scripting, pure cosmetic UI work, documentation, etc.]
 
+## Change Requests
+
+Track actionable inline requests with one entry per request. End each generated request and response with its own model attribution quote; preserve human text unchanged.
+
+### [file:line \u2014 request]
+
+- **Status:** [open/in progress/resolved]
+- **Request:** [verbatim request or concise generated finding]
+
+> Generated via [actual model name, only for a generated request]
+
+- **Response:** [resolution, evidence, or reason this remains open]
+
+> Generated via [actual model name, only for a generated response]
+
 ## Findings
 
 | Severity                 | Location    | Evidence and impact        | Required change or question |
@@ -48621,6 +48712,97 @@ var pull_request_description_default = `## Intent
 `;
 var init_pull_request_description = () => {};
 
+// templates/flow-definition.md
+var flow_definition_default = `# {{name}}
+
+## Intent
+
+{{intent}}
+
+## Inputs
+
+| Name  | Required | Default | Description                                |
+| ----- | -------- | ------- | ------------------------------------------ |
+| input | yes      | \u2014       | Free-form user request; bind as one value. |
+
+## Flags
+
+| Flag            | Default | Capability    | Effect                                                                             |
+| --------------- | ------- | ------------- | ---------------------------------------------------------------------------------- |
+| --local         | false   | local         | Omit steps with \`unless: --local\`; never forward to every skill.                   |
+| --commit        | false   | local-commit  | Permit only explicitly commit-capable selected steps to make scoped local commits. |
+| --remote-review | false   | remote-review | Opt in to remote review with independent forge authorization.                      |
+
+## Steps
+
+### 1. {{step-id}}
+
+- Handler: \`plan new\`
+- When: always
+- Unless: never
+- Requires: local
+- Receives: \`{{input}}\`
+- Produces: \`plan_path\` (verified path to the created plan)
+- Instructions: {{step-instructions}}
+
+### 2. {{next-step-id}}
+
+- Handler: \`review new\`
+- When: \`--remote-review\`
+- Unless: \`--local\`
+- Requires: remote-review
+- Receives: \`{{steps.step-id.plan_path}}\`
+- Produces: \`review_path\` (verified review artifact)
+- Instructions: {{step-instructions}}
+
+## Contract
+
+Replace example rows and steps when creating a definition. Use stable unique lower-case hyphenated input and step IDs; output names may also contain underscores (\`^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$\`). Declare every input, flag, capability, output and condition. \`When\` and \`Unless\` accept only \`always\`, \`never\`, or one declared flag; no expressions, shell interpolation or implicit flags. The only tokens are \`{{input-name}}\` and \`{{steps.step-id.output-name}}\`. A later step can consume only an earlier declared output, verified when that step finishes. Define any remote or commit capability explicitly and require its independent opt-in flag. This file is reusable and has no run state; editing it affects future runs only.
+`;
+var init_flow_definition = () => {};
+
+// templates/flow-instance.md
+var flow_instance_default = `# Flow run: {{name}}
+
+- **Status:** in progress
+- **Definition:** {{absolute-definition-path}}
+- **Definition SHA-256:** {{definition-sha256}}
+- **Repository:** {{absolute-repository-root}}
+- **Run ID:** {{run-id}}
+
+## Resolved inputs
+
+| Input | Value     |
+| ----- | --------- |
+| input | {{input}} |
+
+## Selected flags and permissions
+
+{{flags-and-capabilities}}
+
+## Selection provenance
+
+{{omitted-step-ids-and-reasons-only-no-instructions}}
+
+## Steps
+
+- [ ] 1. {{selected-step-id}} \u2014 {{resolved-handler}}
+  - Requires: {{authorized-capability}}
+  - Instructions: {{resolved-instructions}}
+  - Receives: {{concrete-input-or-prior-step-handoff}}
+  - Expected output: {{declared-output-name}}
+  - Result/handoff: pending
+
+## Blocker
+
+None.
+
+## Contract
+
+This is the frozen execution snapshot. Include only selected executable steps; never copy unselected instructions here. Resolve all declared inputs before creating this file. References to earlier step outputs are typed handoff slots, filled only from verified results when those steps complete. Check a step only after success; on failure leave it unchecked, record the blocker and stop. Resume this exact instance at its first unchecked step without rereading the global definition.
+`;
+var init_flow_instance = () => {};
+
 // templates/examples/plan-feature.md
 var plan_feature_default = `# Invite teammates to a project
 
@@ -49136,6 +49318,8 @@ var init_source = __esm(() => {
   init_planning_intent();
   init_ui_component_architecture();
   init_pull_request_description();
+  init_flow_definition();
+  init_flow_instance();
   init_plan_feature();
   init_plan_migration();
   init_design_service();
@@ -49154,7 +49338,9 @@ var init_source = __esm(() => {
     { name: "code-review", description: "Thorough code review" },
     { name: "planning-intent", description: "Planning intent for a user to fill in" },
     { name: "ui-component-architecture", description: "UI component design and implementation" },
-    { name: "pull-request-description", description: "Draft pull request description" }
+    { name: "pull-request-description", description: "Draft pull request description" },
+    { name: "flow-definition", description: "Reusable global Agent Skill flow definition" },
+    { name: "flow-instance", description: "Frozen repository-local flow run" }
   ];
   contents = {
     "spec-driven-plan.md": spec_driven_plan_default,
@@ -49165,6 +49351,8 @@ var init_source = __esm(() => {
     "planning-intent.md": planning_intent_default,
     "ui-component-architecture.md": ui_component_architecture_default,
     "pull-request-description.md": pull_request_description_default,
+    "flow-definition.md": flow_definition_default,
+    "flow-instance.md": flow_instance_default,
     "examples/plan-feature.md": plan_feature_default,
     "examples/plan-migration.md": plan_migration_default,
     "examples/design-service.md": design_service_default,
@@ -49193,9 +49381,9 @@ var exports_service = {};
 __export(exports_service, {
   TemplateService: () => TemplateService
 });
-import { constants } from "fs";
-import { lstat as lstat6, open as open2, rm as rm3 } from "fs/promises";
-import { isAbsolute as isAbsolute6, join as join7 } from "path";
+import { constants as constants2 } from "fs";
+import { lstat as lstat7, open as open3, rm as rm3 } from "fs/promises";
+import { isAbsolute as isAbsolute7, join as join6 } from "path";
 
 class TemplateService {
   home;
@@ -49212,16 +49400,16 @@ class TemplateService {
     if (!this.source.catalog.some((item) => item.name === name)) {
       throw new UnknownTemplateError(`Unknown template: ${name}`);
     }
-    if (!path.trim() || isAbsolute6(path)) {
+    if (!path.trim() || isAbsolute7(path)) {
       throw new TemplateError("path must be a non-empty relative directory inside cwd");
     }
     if (!filename.trim() || filename === "." || filename === ".." || /[/\\\0]/.test(filename)) {
       throw new TemplateError("filename must be a single non-empty file name");
     }
     await this.installMissing();
-    const installed = await resolvePath(this.home, join7(".difflab", "templates", `${name}.md`));
+    const installed = await resolvePath(this.home, join6(".difflab", "templates", `${name}.md`));
     const contents = await readMarkdown(installed);
-    const destination = await ensurePathDirsExist(join7(path, filename), cwd);
+    const destination = path.startsWith(".difflab/") ? await this.projectDestination(cwd, path.slice(".difflab/".length), filename) : await ensurePathDirsExist(join6(path, filename), cwd);
     try {
       await createExclusive(destination, contents);
     } catch (error) {
@@ -49234,12 +49422,23 @@ class TemplateService {
     }
     return destination;
   }
+  async projectDestination(cwd, path, filename) {
+    if (!isAbsolute7(cwd))
+      throw new TemplateError("cwd must be an absolute path");
+    const git = discoverGitRepository(cwd);
+    const config = await readRepoConfig(git.root);
+    if (!config)
+      throw new TemplateError(`Initialize this repository with difflab init: ${git.root}`);
+    const target = join6(userPaths(this.home).projects, config.project.id, repositorySlug(canonicalGitUrl(git.originUrl)));
+    await checkRepoStore(git.root, target);
+    return ensurePathDirsExist(join6(path, filename), target);
+  }
   async installMissing() {
     for (const asset of this.source.assets) {
-      const relative = join7(".difflab", "templates", asset);
+      const relative = join6(".difflab", "templates", asset);
       const destination = await ensurePathDirsExist(relative, this.home);
       try {
-        if ((await lstat6(destination)).isSymbolicLink()) {
+        if ((await lstat7(destination)).isSymbolicLink()) {
           throw new TemplateSourceError(`Installed template asset is a symlink: ${destination}`);
         }
         await readMarkdown(destination);
@@ -49273,7 +49472,7 @@ async function readSource(source, asset) {
 async function readMarkdown(path) {
   let handle;
   try {
-    handle = await open2(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    handle = await open3(path, constants2.O_RDONLY | constants2.O_NOFOLLOW);
     if (!(await handle.stat()).isFile())
       throw new TemplateSourceError(`Template is not a file: ${path}`);
     const content = await handle.readFile("utf8");
@@ -49289,7 +49488,7 @@ async function readMarkdown(path) {
   }
 }
 async function createExclusive(path, content) {
-  const handle = await open2(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 384);
+  const handle = await open3(path, constants2.O_WRONLY | constants2.O_CREAT | constants2.O_EXCL | constants2.O_NOFOLLOW, 384);
   try {
     await handle.writeFile(content, "utf8");
   } catch (error) {
@@ -49305,6 +49504,10 @@ var init_service = __esm(() => {
   init_fsx();
   init_osx();
   init_pathx();
+  init_gitx2();
+  init_config();
+  init_repo_store();
+  init_user_store();
   init_source();
   TemplateError = class TemplateError extends Error {
   };
@@ -49318,7 +49521,7 @@ var init_service = __esm(() => {
 
 // src/templates/tools.ts
 var templateInfo, templateListOutput, scaffoldOutput, templateTools;
-var init_tools3 = __esm(() => {
+var init_tools4 = __esm(() => {
   init_zod();
   init_zodx();
   init_service();
@@ -49332,7 +49535,7 @@ var init_tools3 = __esm(() => {
   });
   templateTools = [
     defineTool("template_list", {
-      description: "List eight document templates; install any missing defaults and examples in the user templates directory without overwriting local edits.",
+      description: "List document templates, including flow definitions and instances; install any missing defaults and examples in the user templates directory without overwriting local edits.",
       inputSchema: strictObject({}),
       outputSchema: templateListOutput,
       annotations: { openWorldHint: false }
@@ -49357,7 +49560,7 @@ var init_tools3 = __esm(() => {
 // src/mcp/server.ts
 async function serveMcp(version = "0.1.0") {
   const server = new McpServer({ name: "difflab", version });
-  for (const tool of [...todoTools, ...projectTools, ...templateTools]) {
+  for (const tool of [...todoTools, ...projectTools, ...templateTools, ...logTools]) {
     server.registerTool(tool.name, tool.config, tool.callback);
   }
   await server.connect(new StdioServerTransport);
@@ -49368,6 +49571,7 @@ var init_server3 = __esm(() => {
   init_tools();
   init_tools2();
   init_tools3();
+  init_tools4();
 });
 
 // src/extensions/processx.ts
@@ -49442,7 +49646,7 @@ var init_json_config = __esm(() => {
 });
 
 // src/agents/claude-code.ts
-import { join as join8 } from "path";
+import { join as join7 } from "path";
 var claudeCodeAdapter;
 var init_claude_code = __esm(() => {
   init_adapter();
@@ -49452,7 +49656,7 @@ var init_claude_code = __esm(() => {
     id: "claude-code",
     async setupMcpConfig(context = {}) {
       const home = setupHome(context);
-      const file = join8(home, ".claude.json");
+      const file = join7(home, ".claude.json");
       const status = serverStatus(await readJsonConfig(file), file);
       if (status === "matching")
         return { file, status: "existing" };
@@ -49468,7 +49672,7 @@ var init_claude_code = __esm(() => {
 
 // src/agents/codex.ts
 import { readFile as readFile5 } from "fs/promises";
-import { join as join9 } from "path";
+import { join as join8 } from "path";
 function codexServerStatus(content) {
   const lines = content.split(/\r?\n/);
   const start = lines.findIndex((line) => /^\s*\[mcp_servers\.(?:difflab|"difflab"|'difflab')\]\s*(?:#.*)?$/.test(line));
@@ -49492,7 +49696,7 @@ var init_codex = __esm(() => {
     id: "codex",
     async setupMcpConfig(context = {}) {
       const home = setupHome(context);
-      const file = join9(home, ".codex", "config.toml");
+      const file = join8(home, ".codex", "config.toml");
       let content = "";
       try {
         content = await readFile5(file, "utf8");
@@ -49514,7 +49718,7 @@ var init_codex = __esm(() => {
 });
 
 // src/agents/index.ts
-import { join as join10 } from "path";
+import { join as join9 } from "path";
 function agentAdapter(name) {
   return Object.hasOwn(agentAdapters, name) ? agentAdapters[name] : undefined;
 }
@@ -49525,20 +49729,20 @@ var init_agents = __esm(() => {
   init_codex();
   init_json_config();
   agentAdapters = {
-    pi: jsonAgentAdapter("pi", (context) => join10(setupHome(context), ".config", "mcp", "mcp.json")),
-    cursor: jsonAgentAdapter("cursor", (context) => join10(setupHome(context), ".cursor", "mcp.json")),
+    pi: jsonAgentAdapter("pi", (context) => join9(setupHome(context), ".config", "mcp", "mcp.json")),
+    cursor: jsonAgentAdapter("cursor", (context) => join9(setupHome(context), ".cursor", "mcp.json")),
     codex: codexAdapter,
     "claude-code": claudeCodeAdapter,
     "claude-desktop": jsonAgentAdapter("claude-desktop", (context) => {
       const home = setupHome(context);
       const platform = context.platform ?? process.platform;
       if (platform === "darwin") {
-        return join10(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+        return join9(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
       }
       if (platform === "win32") {
-        return join10(process.env.APPDATA ?? join10(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
+        return join9(process.env.APPDATA ?? join9(home, "AppData", "Roaming"), "Claude", "claude_desktop_config.json");
       }
-      return join10(home, ".config", "Claude", "claude_desktop_config.json");
+      return join9(home, ".config", "Claude", "claude_desktop_config.json");
     })
   };
   agentNames = Object.keys(agentAdapters);
@@ -51626,7 +51830,7 @@ init_config();
 init_context();
 init_repo_store();
 init_user_store();
-import { join as join11 } from "path";
+import { join as join10 } from "path";
 function createProgram(write = console.log, version = "0.1.0", options = {}) {
   const program = new Command2().name("difflab").description("Difflab CLI and local MCP server").version(version);
   program.action(() => program.outputHelp());
@@ -51660,7 +51864,7 @@ function createProgram(write = console.log, version = "0.1.0", options = {}) {
     if (config && config.project.id !== key)
       throw new RepoStoreError(`Repository already belongs to project ${config.project.id}; requested ${key}`);
     const origin = canonicalGitUrl(git.originUrl);
-    const target = join11(userPaths(options.home).projects, key, repositorySlug(origin));
+    const target = join10(userPaths(options.home).projects, key, repositorySlug(origin));
     await preflightRepoStore(git.root, target);
     const project = await withUserStore(async (db) => {
       const project = await db.projects.getProjectById(key);
@@ -51709,7 +51913,7 @@ function createProgram(write = console.log, version = "0.1.0", options = {}) {
 
 // src/index.ts
 init_errors3();
-var version2 = "0.4.0";
+var version2 = "0.6.0";
 try {
   await createProgram(console.log, version2).parseAsync(process.argv);
 } catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@difflab/difflab-cli",
-  "version": "0.4.0",
+  "version": "0.6.0",
   "private": false,
   "description": "A minimal Bun CLI starter built with Commander",
   "license": "Apache-2.0",