@dylanpiercey/work 0.0.120 → 0.0.122

package/lib/setup/install.mjs

@@ -10,17 +10,20 @@ import { agentById, toolById } from "./catalog.mjs";
 import { setupPath, which } from "./doctor.mjs";
 
 /**
- * Run a command, streaming each output line to `log`.
- * `interactive` hands the terminal over (CLI prompts such as gh's device
- * flow); otherwise stdout/err are captured line by line and `input` (if
- * any) is written to stdin before it closes. `cwd` matters for tools whose
- * scope is the directory they run in, such as project-scope skill installs.
+ * Run a command, streaming each output line to `log`. stdout/err are
+ * captured line by line and `input` (if any) is written to stdin before it
+ * closes. `cwd` matters for tools whose scope is the directory they run in,
+ * such as project-scope skill installs.
  */
-export function runStreaming(cmd, args, { log = () => {}, interactive = false, input, env, cwd, timeout = 15 * 60_000 } = {}) {
+export function runStreaming(
+  cmd,
+  args,
+  { log = () => {}, input, env, cwd, timeout = 15 * 60_000 } = {},
+) {
   return new Promise((resolve, reject) => {
     const child = spawn(cmd, args, {
       cwd,
-      stdio: interactive ? "inherit" : ["pipe", "pipe", "pipe"],
+      stdio: ["pipe", "pipe", "pipe"],
       env: { ...process.env, ...env, PATH: setupPath() },
     });
     const lines = [];
@@ -29,7 +32,10 @@ export function runStreaming(cmd, args, { log = () => {}, interactive = false, i
       buf += String(chunk);
       let i;
       while ((i = buf.search(/\r?\n/)) >= 0) {
-        const line = buf.slice(0, i).replace(/\x1b\[[0-9;]*[A-Za-z]/g, "").trimEnd();
+        const line = buf
+          .slice(0, i)
+          .replace(/\x1b\[[0-9;]*[A-Za-z]/g, "")
+          .trimEnd();
         buf = buf.slice(i + (buf[i] === "\r" ? 2 : 1));
         if (line) {
           lines.push(line);
@@ -39,10 +45,8 @@ export function runStreaming(cmd, args, { log = () => {}, interactive = false, i
     };
     child.stdout?.on("data", onData);
     child.stderr?.on("data", onData);
-    if (child.stdin) {
-      if (input) child.stdin.write(input);
-      child.stdin.end();
-    }
+    if (input) child.stdin.write(input);
+    child.stdin.end();
     const timer = setTimeout(() => child.kill("SIGTERM"), timeout);
     child.on("error", (err) => {
       clearTimeout(timer);
@@ -52,7 +56,12 @@ export function runStreaming(cmd, args, { log = () => {}, interactive = false, i
       clearTimeout(timer);
       if (buf.trim()) onData("\n");
       if (code === 0) resolve(lines);
-      else reject(new Error(`${cmd} ${args.join(" ")} exited ${code}${lines.length ? `: ${lines[lines.length - 1]}` : ""}`));
+      else
+        reject(
+          new Error(
+            `${cmd} ${args.join(" ")} exited ${code}${lines.length ? `: ${lines[lines.length - 1]}` : ""}`,
+          ),
+        );
     });
   });
 }
@@ -62,7 +71,10 @@ export function runStreaming(cmd, args, { log = () => {}, interactive = false, i
  * stream into a login shell: the URL is pinned in the catalog and the
  * script runs in the setup PATH, not the user's rc. */
 async function runRemoteScript(url, shell, opts) {
-  const res = await fetch(url, { redirect: "follow", signal: AbortSignal.timeout(60_000) });
+  const res = await fetch(url, {
+    redirect: "follow",
+    signal: AbortSignal.timeout(60_000),
+  });
   if (!res.ok) throw new Error(`${url} → ${res.status}`);
   const dir = fs.mkdtempSync(path.join(os.tmpdir(), "work-install-"));
   const file = path.join(dir, "install.sh");
@@ -78,18 +90,25 @@ export async function installMise(opts = {}) {
   if (which("mise")) return;
   opts.log?.("installing mise");
   await runRemoteScript("https://mise.run", "sh", opts);
-  if (!which("mise")) throw new Error("mise install finished but binary not found");
+  if (!which("mise"))
+    throw new Error("mise install finished but binary not found");
 }
 
 function miseName(idOrName) {
   const t = toolById(idOrName);
-  if (t && !t.mise) throw new Error(`${t.label} is a system package. Install it with the system package manager`);
+  if (t && !t.mise)
+    throw new Error(
+      `${t.label} is a system package. Install it with the system package manager`,
+    );
   return t ? t.mise : idOrName;
 }
 
 /** `mise use -g name@version` — installs (or re-pins) a global tool. Accepts
  * catalog ids or any mise registry short name (Settings search). */
-export async function installTool(idOrName, { version = "latest", ...opts } = {}) {
+export async function installTool(
+  idOrName,
+  { version = "latest", ...opts } = {},
+) {
   await installMise(opts);
   const name = miseName(idOrName);
   opts.log?.(`mise use -g ${name}@${version}`);
@@ -119,39 +138,49 @@ export async function installAgent(id, opts = {}) {
   if (!a) throw new Error(`unknown agent: ${id}`);
   opts.log?.(`installing ${a.label} (${a.install.url})`);
   await runRemoteScript(a.install.url, a.install.shell, opts);
-  if (!a.bins.some((b) => which(b))) throw new Error(`${a.label} installer finished but ${a.bins[0]} is not on PATH`);
+  if (!a.bins.some((b) => which(b)))
+    throw new Error(
+      `${a.label} installer finished but ${a.bins[0]} is not on PATH`,
+    );
 }
 
-/**
- * Sign in to a GitHub host with gh's browser device flow, never opening a
- * browser: `work` usually runs on a remote box, so gh's attempt to launch
- * one only produces "Failed opening a web browser" noise. Interactive (CLI)
- * lets gh own the terminal (it prints the code + URL and polls); otherwise
- * (server) we press Enter for it and the code and URL flow out through
- * `log` for the UI to show — gh keeps polling until the user finishes in
- * their own browser.
- */
-export async function authGithub(host, { interactive = false, ...opts } = {}) {
+/** Shared gh device flow: sign in / refresh without opening a browser.
+ * `work` usually runs on a remote box, so gh's attempt to launch one only
+ * produces "Failed opening a web browser" noise. Server-side we press Enter
+ * for gh and the code and URL flow out through `log` for the UI to show —
+ * gh keeps polling until the user finishes in their own browser
+ * (BROWSER=true suppresses the launch attempt; GH_PROMPT_DISABLED stops the
+ * prompt waiting on stdin we already fed). */
+async function ghDeviceFlow(host, args, opts = {}) {
   if (!which("gh")) throw new Error("gh is not installed");
-  const args = ["auth", "login", "--hostname", host, "--web", "--git-protocol", "https"];
-  const env = { ...opts.env, BROWSER: "true" };
-  if (interactive) return runStreaming("gh", args, { ...opts, env, interactive: true });
-  return runStreaming("gh", args, { ...opts, input: "\n", env: { ...env, GH_PROMPT_DISABLED: "1" } });
+  return runStreaming("gh", args, {
+    ...opts,
+    input: "\n",
+    env: { ...opts.env, BROWSER: "true", GH_PROMPT_DISABLED: "1" },
+  });
+}
+
+/** Sign a GitHub host in with gh's device flow — see ghDeviceFlow. */
+export async function authGithub(host, opts = {}) {
+  return ghDeviceFlow(
+    host,
+    ["auth", "login", "--hostname", host, "--web", "--git-protocol", "https"],
+    opts,
+  );
 }
 
 /** Re-authorize an existing gh login (device flow). Needed after an org
  * enables SAML: visiting the X-GitHub-SSO link only signs the browser into
  * the IdP, while `auth refresh` re-issues the OAuth token with org SSO. */
-export async function refreshGithub(host, { interactive = false, ...opts } = {}) {
-  if (!which("gh")) throw new Error("gh is not installed");
-  const args = ["auth", "refresh", "--hostname", host];
-  const env = { ...opts.env, BROWSER: "true" };
-  if (interactive) return runStreaming("gh", args, { ...opts, env, interactive: true });
-  return runStreaming("gh", args, { ...opts, input: "\n", env: { ...env, GH_PROMPT_DISABLED: "1" } });
+export async function refreshGithub(host, opts = {}) {
+  return ghDeviceFlow(host, ["auth", "refresh", "--hostname", host], opts);
 }
 
 /** Sign out of a GitHub host (drops gh's token; the host stays listed). */
 export async function logoutGithub(host, opts = {}) {
   if (!which("gh")) throw new Error("gh is not installed");
-  return runStreaming("gh", ["auth", "logout", "--hostname", host], { ...opts, env: { GH_PROMPT_DISABLED: "1" } });
+  return runStreaming("gh", ["auth", "logout", "--hostname", host], {
+    ...opts,
+    env: { GH_PROMPT_DISABLED: "1" },
+  });
 }

package/lib/share/manifest.d.mts

@@ -0,0 +1,27 @@
+export interface RepoRow {
+  full_name: string;
+  worktree: string;
+  base_branch: string;
+  default_branch: string;
+}
+
+/** `owner/name`, `owner/name@base`, or `{ repo, dir?, base? }`. */
+export type RepoEntry = string | { repo: string; dir?: string; base?: string };
+
+export interface Invite {
+  name: string;
+  branch: string;
+  /** `[host/]owner/name` per repo. */
+  repos: string[];
+}
+
+/** A repo row as the manifest writes it. */
+export function encodeRepo(r: RepoRow): RepoEntry;
+/** The row for a manifest entry (or an older object form); null if not one.
+ * `base_branch`/`default_branch` are empty when the file did not pin them. */
+export function decodeRepo(entry: unknown): RepoRow | null;
+/** The pastable invite for a workspace (Manage's copy button, `work share`). */
+export function formatInvite(ws: Invite): string;
+/** Parse an invite, or a one-workspace backup. Throws with a reason a
+ * person can act on. */
+export function parseInvite(text: string): Invite;

package/lib/share/manifest.mjs

@@ -0,0 +1,144 @@
+// The backup manifest's workspace entry is the one shape a workspace has
+// outside the database: what `work export` writes, what Manage's copy
+// button puts on the clipboard, what New → Join and `work join` read. An
+// invite is that entry without the machine-specific parts (id, created,
+// archived). Plain ESM with no dependencies, shared by the browser, the
+// server and the CLI so there is exactly one format:
+//
+//   {
+//    "name": "persisted pages",
+//    "branch": "dpiercey-ws-persisted-pages-xh8764",
+//    "repos": ["marko-js/marko", "DylanPiercey/persisted-pages-scratch"]
+//   }
+//
+// A repo is `owner/name` (`host/owner/name` off github.com), `owner/name@base`
+// when the workspace's base is not the remote's default branch, and an
+// object `{ repo, dir?, base? }` only when its directory is not the repo's
+// name. A join ignores the base — the shared branch is the base.
+
+const BRANCH_RE = /^[\w./+@-]+$/;
+// `owner/name`, or `host/owner/name` — a host has a dot in it.
+const REPO_RE = /^(?:[\w-]+(?:\.[\w-]+)+\/)?[\w.-]+\/[\w.-]+$/;
+// One path segment: a repo's directory in the workspace.
+const DIR_RE = /^(?!\.{1,2}$)[\w.-]+$/;
+
+/**
+ * @typedef {{ full_name: string, worktree: string, base_branch: string, default_branch: string }} RepoRow
+ * @typedef {string | { repo: string, dir?: string, base?: string }} RepoEntry
+ */
+
+/** @param {RepoRow} r @returns {RepoEntry} */
+export function encodeRepo(r) {
+  const base = r.base_branch !== r.default_branch ? r.base_branch : undefined;
+  // `@` in the base would split wrong on the way back: object form then.
+  if (r.worktree === r.full_name.split("/").at(-1) && !base?.includes("@")) {
+    return base ? `${r.full_name}@${base}` : r.full_name;
+  }
+  const dir = r.worktree !== r.full_name.split("/").at(-1);
+  return {
+    repo: r.full_name,
+    ...(dir && { dir: r.worktree }),
+    ...(base && { base }),
+  };
+}
+
+/**
+ * The row for an entry, or null when it is not one. The remote's default
+ * branch is never in the file: `base_branch`/`default_branch` come back
+ * empty when not pinned and the server fills them from the clone.
+ * @param {unknown} entry @returns {RepoRow | null}
+ */
+export function decodeRepo(entry) {
+  let full = "";
+  let dir;
+  let base;
+  if (typeof entry === "string") {
+    const at = entry.lastIndexOf("@");
+    full = at > 0 ? entry.slice(0, at) : entry;
+    base = at > 0 ? entry.slice(at + 1) : undefined;
+  } else if (entry && typeof entry === "object") {
+    const o = /** @type {Record<string, unknown>} */ (entry);
+    // Format-1 rows and API shapes spell the name differently.
+    full = String(o.repo ?? o.full_name ?? o.fullName ?? "");
+    dir = typeof o.dir === "string" ? o.dir : undefined;
+    if (typeof o.worktree === "string") dir = o.worktree;
+    base = typeof o.base === "string" ? o.base : undefined;
+    if (typeof o.base_branch === "string") base = o.base_branch;
+  } else return null;
+  full = full.trim();
+  if (!REPO_RE.test(full)) return null;
+  // A host is case-insensitive; the configured list is lowercase.
+  const parts = full.split("/");
+  if (parts.length === 3)
+    full = [parts[0].toLowerCase(), parts[1], parts[2]].join("/");
+  if (base !== undefined && !BRANCH_RE.test(base)) return null;
+  if (dir !== undefined && !DIR_RE.test(dir)) return null;
+  return {
+    full_name: full,
+    worktree: dir || full.split("/").at(-1),
+    base_branch: base || "",
+    default_branch:
+      entry &&
+      typeof entry === "object" &&
+      typeof entry.default_branch === "string"
+        ? entry.default_branch
+        : base || "",
+  };
+}
+
+/**
+ * The invite for a workspace: its manifest entry, pared to what a join
+ * needs. Repos carry no base — the joiner's base is the branch.
+ * @param {{ name: string, branch: string, repos: string[] }} ws
+ * @returns {string}
+ */
+export function formatInvite(ws) {
+  return (
+    JSON.stringify(
+      { name: ws.name, branch: ws.branch, repos: ws.repos },
+      null,
+      1,
+    ) + "\n"
+  );
+}
+
+/**
+ * Read an invite: a workspace entry, or a whole backup that holds one
+ * workspace. Throws with a reason a person can act on.
+ * @param {string} text
+ * @returns {{ name: string, branch: string, repos: string[] }}
+ */
+export function parseInvite(text) {
+  const raw = String(text ?? "").trim();
+  if (!raw) throw new Error("paste a workspace invite");
+  let obj;
+  try {
+    obj = JSON.parse(raw);
+  } catch {
+    throw new Error("not an invite (expected JSON)");
+  }
+  if (!obj || typeof obj !== "object") throw new Error("not an invite");
+  if (Array.isArray(obj.workspaces)) {
+    if (obj.workspaces.length !== 1)
+      throw new Error(
+        obj.workspaces.length
+          ? "this is a whole backup — restore it from Settings, or paste one workspace entry"
+          : "this backup holds no workspaces",
+      );
+    obj = obj.workspaces[0];
+    if (!obj || typeof obj !== "object") throw new Error("not an invite");
+  }
+  const branch = String(obj.branch ?? "").trim();
+  if (!branch) throw new Error("the invite has no branch");
+  if (!BRANCH_RE.test(branch)) throw new Error(`not a branch name: ${branch}`);
+  const entries = Array.isArray(obj.repos) ? obj.repos : [];
+  const repos = [];
+  for (const e of entries) {
+    const r = decodeRepo(e);
+    if (!r) throw new Error(`not a repo: ${JSON.stringify(e)}`);
+    if (!repos.includes(r.full_name)) repos.push(r.full_name);
+  }
+  if (!repos.length) throw new Error("the invite lists no repos");
+  const name = String(obj.name ?? "").trim();
+  return { name: name || branch, branch, repos };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dylanpiercey/work",
-  "version": "0.0.120",
+  "version": "0.0.122",
   "type": "module",
   "description": "Web GUI for agentic dev workspaces",
   "license": "MIT",
@@ -29,7 +29,9 @@
     "postinstall": "chmod +x node_modules/node-pty/prebuilds/*/spawn-helper node_modules/node-pty/build/Release/spawn-helper 2>/dev/null || true",
     "build": "node scripts/agents-catalog.mjs && marko-run build src/entry.ts",
     "check": "node scripts/agents-catalog.mjs && mtc",
-    "preview": "PORT=7171 node dist/index.mjs"
+    "preview": "PORT=7171 node dist/index.mjs",
+    "format": "prettier . -w",
+    "format:check": "prettier --check ."
   },
   "dependencies": {
     "node-pty": "^1.1.0"
@@ -56,6 +58,8 @@
     "iconoir": "^7.12.1",
     "marko": "^6.3.43",
     "playwright": "^1.62.1",
+    "prettier": "^3.9.6",
+    "prettier-plugin-marko": "^4.1.0",
     "serve-static": "^2.2.1",
     "typescript": "^6.0.3",
     "valibot": "^1.4.2",

package/scripts/migrate.mjs

@@ -79,7 +79,8 @@ for (const { path: wsPath } of db
     noted++;
   } catch {}
 }
-if (noted) console.log(`==> migrate: noted the shared stash in ${noted} AGENTS.md`);
+if (noted)
+  console.log(`==> migrate: noted the shared stash in ${noted} AGENTS.md`);
 
 // The review is commit-to-commit by default; fold that into the stash
 // bullet rather than appending another one. Keep in sync with writeAgentsMd.
@@ -98,7 +99,10 @@ for (const { path: wsPath } of db
     restated++;
   } catch {}
 }
-if (restated) console.log(`==> migrate: restated the stash bullet in ${restated} AGENTS.md`);
+if (restated)
+  console.log(
+    `==> migrate: restated the stash bullet in ${restated} AGENTS.md`,
+  );
 
 // Same rewrite-on-create-only problem: existing AGENTS.md never learn to
 // rebase after a squash-merge. Keep in sync with writeAgentsMd.
@@ -119,7 +123,8 @@ for (const { path: wsPath } of db
     rebased++;
   } catch {}
 }
-if (rebased) console.log(`==> migrate: noted rebase-after-merge in ${rebased} AGENTS.md`);
+if (rebased)
+  console.log(`==> migrate: noted rebase-after-merge in ${rebased} AGENTS.md`);
 
 // Branch rules: stay on the workspace branch; reset it after it lands;
 // topic lanes only when that branch must stay open. Replaces both the
@@ -173,7 +178,9 @@ for (const { path: wsPath } of db
   } catch {}
 }
 if (restatedBranches) {
-  console.log(`==> migrate: restated branch rules in ${restatedBranches} AGENTS.md`);
+  console.log(
+    `==> migrate: restated branch rules in ${restatedBranches} AGENTS.md`,
+  );
 }
 
 // Default review base/algorithm changed (workspace branch vs origin/<base>,
@@ -229,13 +236,19 @@ try {
       const fullName = `${owner}/${repoDir.slice(0, -4)}`;
       const script =
         `#!/bin/sh\n` +
-        `# installed by work — signals remote-ref updates to the app server.\n` +
+        `# installed by work: signals ref updates to the app server.\n` +
         `[ "$1" = "committed" ] || exit 0\n` +
-        `grep -q "refs/remotes/origin/" || exit 0\n` +
-        `curl -sf -m 2 -X POST "http://127.0.0.1:${appPort}` +
+        `refs=$(cat)\n` +
+        `case "$refs" in *"refs/remotes/origin/"*|*" refs/heads/"*) ;; *) exit 0 ;; esac\n` +
+        `printf '%s\\n' "$refs" | curl -sf -m 2 -X POST --data-binary @- "http://127.0.0.1:${appPort}` +
         `/api/repo-pushed?repo=${encodeURIComponent(fullName)}&token=${hookTokenValue}" >/dev/null 2>&1 &\n` +
         `exit 0\n`;
-      const file = path.join(ownerDir, repoDir, "hooks", "reference-transaction");
+      const file = path.join(
+        ownerDir,
+        repoDir,
+        "hooks",
+        "reference-transaction",
+      );
       try {
         if (fs.readFileSync(file, "utf8") === script) continue;
       } catch {}
@@ -247,7 +260,8 @@ try {
     }
   }
 } catch {}
-if (hooked) console.log(`==> migrate: installed push hook in ${hooked} cache repo(s)`);
+if (hooked)
+  console.log(`==> migrate: installed push hook in ${hooked} cache repo(s)`);
 
 // Lane branches used to accumulate in the bare caches: nothing deleted one
 // when its PR finished, only removing the repo or the whole workspace did,
@@ -260,24 +274,37 @@ const laneWorkspaces = db
   .prepare("SELECT id, branch FROM workspaces")
   .all()
   .map((w) => ({ ...w, repos: [] }));
-for (const row of db.prepare("SELECT workspace_id, full_name FROM repos").all()) {
-  laneWorkspaces.find((w) => w.id === row.workspace_id)?.repos.push(row.full_name);
+for (const row of db
+  .prepare("SELECT workspace_id, full_name FROM repos")
+  .all()) {
+  laneWorkspaces
+    .find((w) => w.id === row.workspace_id)
+    ?.repos.push(row.full_name);
 }
 const ownsRef = (ref, prefix) => ref === prefix || ref.startsWith(`${prefix}-`);
 const gitIn = (dir, args) =>
-  execFileSync("git", ["-C", dir, ...args], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+  execFileSync("git", ["-C", dir, ...args], {
+    encoding: "utf8",
+    stdio: ["ignore", "pipe", "ignore"],
+  });
 
 // Candidate lanes: owned by a workspace branch, not the branch itself, not
 // claimed by another workspace whose branch extends this one's prefix, and
 // not checked out in a worktree.
 const candidates = [];
 for (const ws of laneWorkspaces) {
-  const others = laneWorkspaces.filter((w) => w.id !== ws.id).map((w) => w.branch);
+  const others = laneWorkspaces
+    .filter((w) => w.id !== ws.id)
+    .map((w) => w.branch);
   for (const fullName of ws.repos) {
     const bare = path.join(cacheHost, `${fullName}.git`);
     let refs, checkedOut;
     try {
-      refs = gitIn(bare, ["for-each-ref", "--format=%(refname:short) %(objectname)", "refs/heads/"])
+      refs = gitIn(bare, [
+        "for-each-ref",
+        "--format=%(refname:short) %(objectname)",
+        "refs/heads/",
+      ])
         .split("\n")
         .filter(Boolean)
         .map((line) => line.split(" "));
@@ -292,7 +319,8 @@ for (const ws of laneWorkspaces) {
     }
     for (const [lane, oid] of refs) {
       if (lane === ws.branch || !ownsRef(lane, ws.branch)) continue;
-      if (others.some((b) => ownsRef(lane, b)) || checkedOut.has(lane)) continue;
+      if (others.some((b) => ownsRef(lane, b)) || checkedOut.has(lane))
+        continue;
       candidates.push({ bare, fullName, lane, oid });
     }
   }
@@ -332,26 +360,30 @@ for (let i = 0; i < candidates.length; i += 40) {
     // The lane has to still be sitting on the finished PR's head: anything
     // further along is work that PR never carried, and deleting it here
     // would be the only copy.
-    if (!nodes.some((p) => p.state !== "OPEN" && p.headRefOid === c.oid)) return;
+    if (!nodes.some((p) => p.state !== "OPEN" && p.headRefOid === c.oid))
+      return;
     try {
       gitIn(c.bare, ["branch", "-D", c.lane]);
       pruned++;
     } catch {}
   });
 }
-if (pruned) console.log(`==> migrate: pruned ${pruned} finished lane branch(es)`);
+if (pruned)
+  console.log(`==> migrate: pruned ${pruned} finished lane branch(es)`);
 
 // Existing AGENTS.md never learn about the `work` CLI read commands. Keep in
 // sync with writeAgentsMd.
 const WORK_CLI_BULLET =
-  '- **Ask `work` for facts:** the `work` CLI answers from the same data as\n' +
-  '  the app: `work workspace` (this workspace: repos, base branches, open PRs,\n' +
-  '  sessions, running procs/ports), `work repos`, `work procs`,\n' +
-  '  `work workspaces`, `work doctor` (installed tools / agents / GitHub\n' +
-  '  sign-in), `work usage` (agent plan quotas). Add `--json` for machine\n' +
-  '  output. Prefer these over guessing from the filesystem or calling GitHub.\n';
+  "- **Ask `work` for facts:** the `work` CLI answers from the same data as\n" +
+  "  the app: `work workspace` (this workspace: repos, base branches, open PRs,\n" +
+  "  sessions, running procs/ports), `work repos`, `work procs`,\n" +
+  "  `work workspaces`, `work doctor` (installed tools / agents / GitHub\n" +
+  "  sign-in), `work usage` (agent plan quotas). Add `--json` for machine\n" +
+  "  output. Prefer these over guessing from the filesystem or calling GitHub.\n";
 let cliNoted = 0;
-for (const { path: wsPath } of db.prepare("SELECT path FROM workspaces").all()) {
+for (const { path: wsPath } of db
+  .prepare("SELECT path FROM workspaces")
+  .all()) {
   const file = path.join(wsPath, "AGENTS.md");
   try {
     const text = fs.readFileSync(file, "utf8");
@@ -360,7 +392,8 @@ for (const { path: wsPath } of db.prepare("SELECT path FROM workspaces").all())
     cliNoted++;
   } catch {}
 }
-if (cliNoted) console.log(`==> migrate: pointed ${cliNoted} AGENTS.md at the work CLI`);
+if (cliNoted)
+  console.log(`==> migrate: pointed ${cliNoted} AGENTS.md at the work CLI`);
 
 // Existing AGENTS.md never learn that a repo's own agents file is required
 // reading. Splice it in after the repo list (ahead of the stash bullet), so
@@ -369,17 +402,25 @@ const REPO_AGENTS_BULLET =
   "- **Repo agents files:** you **MUST** read a repo's `AGENTS.md` (or\n" +
   "  `CLAUDE.md`) before doing any work in it. It is not loaded for you.\n";
 let repoNoted = 0;
-for (const { path: wsPath } of db.prepare("SELECT path FROM workspaces").all()) {
+for (const { path: wsPath } of db
+  .prepare("SELECT path FROM workspaces")
+  .all()) {
   const file = path.join(wsPath, "AGENTS.md");
   try {
     const text = fs.readFileSync(file, "utf8");
     const at = text.indexOf("- **No `git stash`:**");
     if (at < 0 || text.includes("**Repo agents files:**")) continue;
-    fs.writeFileSync(file, text.slice(0, at) + REPO_AGENTS_BULLET + text.slice(at));
+    fs.writeFileSync(
+      file,
+      text.slice(0, at) + REPO_AGENTS_BULLET + text.slice(at),
+    );
     repoNoted++;
   } catch {}
 }
-if (repoNoted) console.log(`==> migrate: required repo agents files in ${repoNoted} AGENTS.md`);
+if (repoNoted)
+  console.log(
+    `==> migrate: required repo agents files in ${repoNoted} AGENTS.md`,
+  );
 
 // Per-workspace UI prefs were never swept on delete; they ride every SSR
 // document via allPrefs(). Prune orphans once — runtime delete handles new ones.
@@ -387,7 +428,10 @@ if (repoNoted) console.log(`==> migrate: required repo agents files in ${repoNot
   const wr = new DatabaseSync(dbPath);
   try {
     const live = new Set(
-      wr.prepare("SELECT id FROM workspaces").all().map((r) => r.id),
+      wr
+        .prepare("SELECT id FROM workspaces")
+        .all()
+        .map((r) => r.id),
     );
     const prefixes = ["ui.tab:", "ui.diff-filter:", "ui.diff-pos:"];
     let pruned = 0;
@@ -400,7 +444,34 @@ if (repoNoted) console.log(`==> migrate: required repo agents files in ${repoNot
         pruned++;
       }
     }
-    if (pruned) console.log(`==> migrate: pruned ${pruned} orphaned ui pref(s)`);
+    if (pruned)
+      console.log(`==> migrate: pruned ${pruned} orphaned ui pref(s)`);
+  } finally {
+    wr.close();
+  }
+}
+
+// The review's two-way toggle became a three-way scope pref. Fold the old
+// value into the new key once and drop it, so runtime never carries legacy
+// handling — settings are plain rows, so this is the whole upgrade.
+{
+  const wr = new DatabaseSync(dbPath);
+  try {
+    const legacy = wr
+      .prepare("SELECT value FROM settings WHERE key = 'diff-uncommitted'")
+      .get();
+    if (legacy) {
+      const existing = wr
+        .prepare("SELECT value FROM settings WHERE key = 'diff-scope'")
+        .get();
+      if (!existing) {
+        wr.prepare(
+          "INSERT INTO settings (key, value) VALUES ('diff-scope', ?)",
+        ).run(legacy.value === "1" ? "working" : "committed");
+      }
+      wr.prepare("DELETE FROM settings WHERE key = 'diff-uncommitted'").run();
+      console.log("==> migrate: folded diff-uncommitted into diff-scope");
+    }
   } finally {
     wr.close();
   }

package/dist/_BIDn_RW1.js

@@ -1,2 +0,0 @@
-import { f as notifySessionsChanged } from "./_DE2RUdbF.js";
-export { notifySessionsChanged };