@edspencer/paddock 0.63.0 → 0.65.0

package/packages/server/dist/routes/git.js

@@ -146,7 +146,10 @@ export function registerGitWorkspaceRoutes(app, ctx) {
     }, async (req, reply) => {
         try {
             const project = await projects.get(req.params.slug);
-            return await git.projectStatus(project.dir);
+            // The project's WORKING directory, not its metadata dir (#597): for a
+            // repo-backed or linked project those differ, and `dir` showed the notes
+            // folder rather than the code the project is about.
+            return await git.projectStatus(project.workingDir);
         }
         catch (err) {
             return sendProjectError(reply, err);
@@ -181,7 +184,7 @@ export function registerGitWorkspaceRoutes(app, ctx) {
     }, async (req, reply) => {
         try {
             const project = await projects.get(req.params.slug);
-            const diff = await git.projectDiff(project.dir, req.query.file);
+            const diff = await git.projectDiff(project.workingDir, req.query.file);
             reply.header("content-type", "text/plain; charset=utf-8");
             return diff;
         }
@@ -227,7 +230,7 @@ export function registerGitWorkspaceRoutes(app, ctx) {
             // Optional `files` (project-relative) commits only those changes (#258);
             // omitted ⇒ commit the whole subtree (legacy behavior).
             const files = Array.isArray(req.body?.files) ? req.body?.files : undefined;
-            return await git.commitProject(project.dir, message, files);
+            return await git.commitProject(project.workingDir, message, files);
         }
         catch (err) {
             return sendProjectError(reply, err);

package/packages/server/dist/routes/projects.js

@@ -79,7 +79,15 @@ export function registerProjectRoutes(app, ctx) {
         const projectsOut = await Promise.all(list.map(async (p) => ({
             ...p,
             chatTurns: await buildChatTurns(p.slug, turnsByProject, user, readState, unread),
-            dirty: dirty[p.slug] ?? 0,
+            // The cheap store-wide sweep above buckets by path segment under
+            // `projectsRoot`, so it can only speak for projects whose working dir is
+            // the metadata dir. For one pointing somewhere else (a linked checkout,
+            // issue #206) ask its own repo directly — a subprocess, but only for the
+            // projects the sweep structurally cannot cover, and only for as many of
+            // those as actually exist.
+            dirty: p.workingDir === p.dir
+                ? (dirty[p.slug] ?? 0)
+                : await git.dirtyCountAt(p.workingDir).catch(() => 0),
         })));
         // No `dirty` for the root: `dirtyCounts()` buckets by first path segment, so
         // a file directly in the projects root has no bucket at all. Reporting 0
@@ -93,7 +101,7 @@ export function registerProjectRoutes(app, ctx) {
         schema: {
             tags: ["Projects"],
             summary: "Create a project",
-            description: "Creates a project from `CreateProjectInput` and registers its agent and its sweeper. Set `repo` to create a repo-backed project (the cloned checkout becomes the agent's working directory); omit it for a notebook project. Responds 201 with `{ project }`.",
+            description: "Creates a project from `CreateProjectInput` and registers its agent and its sweeper. Set `repo` to create a repo-backed project (the cloned checkout becomes the agent's working directory), or `path` to LINK an existing on-box git checkout used in place with no copy (that directory becomes the working directory and Paddock writes nothing into it); omit both for a notebook project. Responds 201 with `{ project }`.",
             body: {
                 type: ["object", "null"],
                 additionalProperties: true,
@@ -113,6 +121,12 @@ export function registerProjectRoutes(app, ctx) {
                     repo: {
                         description: "External git repo URL to back this project (repo-backed if set).",
                     },
+                    path: {
+                        description: "Absolute path to the directory this project's content lives in (issue #206). For an unmanaged project this LINKS an existing on-box checkout, used in place with no copy. If it does not exist, Paddock clones `repo` into it when one is given, or creates it for a managed project. Must lie outside the projects root, the data dir, and every other project's working directory. No git repository is required. Immutable once set.",
+                    },
+                    managed: {
+                        description: "Whether Paddock curates this project's own CLAUDE.md/OVERVIEW.md/CHANGELOG.md (issue #206). Omit to derive it: a create naming `repo` or `path` is unmanaged, a plain one is managed. `managed: true` together with `repo` is rejected.",
+                    },
                 },
                 required: [],
             },

package/packages/server/dist/self-mcp-descriptions.d.ts

@@ -14,6 +14,7 @@ export declare const ARCHIVE_CHAT_DESC: string;
 export declare const UNARCHIVE_CHAT_DESC: string;
 export declare const FORK_CHAT_BATCH_DESC: string;
 export declare const CREATE_PROJECT_DESC: string;
+export declare const PROMOTE_PROJECT_DESC: string;
 export declare const SET_TRIGGER_DESC: string;
 export declare const REMOVE_TRIGGER_DESC: string;
 export declare const RUN_TRIGGER_DESC: string;

package/packages/server/dist/self-mcp-descriptions.js

@@ -96,7 +96,7 @@ export const FORK_CHAT_BATCH_DESC = "FAN-OUT primitive: fork ONE source chat int
     `"<name_prefix> <i>" (1-based). With \`model\`, every fork's kickoff turn runs on ` +
     `that model. Up to ${FORK_BATCH_MAX} forks per call; they run ` +
     "concurrently. Returns the source and every new child's sessionId.";
-// ── Project tools (issue #467) ──────────────────────────────────────────────
+// ── Project tools (issues #467, #470) ───────────────────────────────────────
 export const CREATE_PROJECT_DESC = "Create a BRAND-NEW Paddock project — the workspace a keeper agent lives in — and " +
     "register its keeper. `name` is the only required argument; the kebab-case `slug` " +
     "is derived from it unless you pass one. Two kinds: pass a `repo` git URL for a " +
@@ -109,6 +109,19 @@ export const CREATE_PROJECT_DESC = "Create a BRAND-NEW Paddock project — the w
     "pass that slug to `create_chat` to start working in it. A bad or unreachable " +
     "repo URL fails cleanly and leaves NO half-created project behind, so it is safe " +
     "to retry with a corrected URL.";
+export const PROMOTE_PROJECT_DESC = "Turn an EXISTING notebook project into a REPO-BACKED one, in place — use this " +
+    "when a notes-only project has grown into (or was always meant to be) a codebase, " +
+    "instead of creating a second project and abandoning the first. `repo` (a git URL) " +
+    "is required; `project` defaults to the CURRENT project, so an agent can promote " +
+    "the workspace it is running in. The repo is cloned into a nested checkout inside " +
+    "the project, that checkout becomes the agent's working directory, and the agent is " +
+    "re-registered there. Everything already in the project is KEPT — its existing " +
+    "chats stay listed and resumable, and its OVERVIEW/CHANGELOG/settings are " +
+    "untouched. Not reversible through this MCP, and only ever notebook → repo-backed: " +
+    "a project that is ALREADY repo-backed is refused, as is the root workspace. A bad " +
+    "or unreachable repo URL fails cleanly, leaving the notebook exactly as it was, so " +
+    "it is safe to retry with a corrected URL. Returns the project's new working " +
+    "directory and whether its agent re-registered.";
 // ── Unified trigger tools (Epic T / T3) ─────────────────────────────────────
 export const SET_TRIGGER_DESC = "Create or update a unified project TRIGGER — a standing rule that runs an agent " +
     "turn when something happens, keyed by `name`. Enable/disable is just this call " +

package/packages/server/dist/self-mcp-types.d.ts

@@ -39,12 +39,14 @@ export interface SelfMcpCreatedProject {
     name: string;
     /** The project's metadata dir (OVERVIEW/CHANGELOG/`.chats` live here). */
     dir: string;
-    /** The keeper's cwd — the nested checkout when repo-backed, else `dir`. */
+    /** The keeper's cwd — `path`, else the nested checkout, else `dir` (#206). */
     workingDir: string;
-    /** Whether the project is backed by a cloned external repo (#187). */
-    repoBacked: boolean;
-    /** The repo URL when repo-backed, else undefined. */
+    /** Whether Paddock curates this project's own files (#206, replaced `repoBacked`). */
+    managed: boolean;
+    /** The repo URL when one is recorded, else undefined. */
     repo?: string;
+    /** The nominated content directory when one is set, else undefined (#206). */
+    path?: string;
     /**
      * Whether the keeper agent registered. The REST create path treats a registration
      * failure as non-fatal (the project IS created), so this mirrors it — but reports
@@ -52,6 +54,13 @@ export interface SelfMcpCreatedProject {
      */
     agentRegistered: boolean;
 }
+/**
+ * A promoted project as surfaced back to the agent (issue #470). Declared as an
+ * ALIAS rather than a second copy of the same fields: promotion's whole point is
+ * that the project ends up in exactly the state a repo-backed `create_project`
+ * would have produced, so the two reports must not be able to drift.
+ */
+export type SelfMcpPromotedProject = SelfMcpCreatedProject;
 /** A chat as surfaced to the agent. */
 export interface SelfMcpChat {
     /** Owning project slug. */
@@ -190,10 +199,11 @@ export interface SelfMcpWriteContext {
     /** Set (or clear) a chat's archived flag (presentational metadata only). */
     setArchived: (projectSlug: string, sessionId: string, archived: boolean) => Promise<void>;
     /**
-     * Whether the PROJECT tools (`create_project`, issue #467) are enabled for this
-     * instance — the `selfMcpProjectsEnabled` gate, resolved by the caller. When false
-     * the tool is NOT injected at all (absent, not present-but-refusing), the same
-     * binary discipline as {@link triggersMcpEnabled}.
+     * Whether the PROJECT tools (`create_project`, issue #467; `promote_project`,
+     * issue #470) are enabled for this instance — the `selfMcpProjectsEnabled` gate,
+     * resolved by the caller. When false the tools are NOT injected at all (absent,
+     * not present-but-refusing), the same binary discipline as
+     * {@link triggersMcpEnabled}.
      */
     projectsMcpEnabled: boolean;
     /**
@@ -206,6 +216,20 @@ export interface SelfMcpWriteContext {
      * non-fatal (mirroring the route) and reported via `agentRegistered`.
      */
     createProject: (input: SelfMcpCreateProjectInput) => Promise<SelfMcpCreatedProject>;
+    /**
+     * Promote an EXISTING notebook project to repo-backed in place, and re-register
+     * its agent — the SAME two steps `POST /api/projects/:slug/promote` performs, in
+     * the same order (`ProjectStore.promote` then `ensureProjectAgent`), so the REST
+     * and MCP paths cannot drift (issue #470/#213). All the real work (the already-
+     * repo-backed / root-workspace / bad-URL guards, the clone into the nested
+     * checkout, the `writeYaml` commit point and its rollback to an UNTOUCHED
+     * notebook on failure) stays in the store. Throws on a promote failure; a
+     * re-registration failure is non-fatal (mirroring the route) and reported via
+     * `agentRegistered` — though it matters more here than for create, since
+     * re-registration is what re-symlinks the new working dir at the project's
+     * existing `.chats/` store so its chats stay listed and resumable.
+     */
+    promoteProject: (projectSlug: string, repo: string) => Promise<SelfMcpPromotedProject>;
     /**
      * Whether the unified trigger-management MCP is enabled for THIS turn's project
      * (Epic T / T3 — the successor to the G5 hook-MCP gate, resolved from the SAME

package/packages/server/dist/self-mcp-write.d.ts

@@ -32,4 +32,25 @@ export declare function archiveChatHandler(write: SelfMcpWriteContext, archived:
  * an unclonable repo, and still rolls the whole project dir back on a clone failure.
  */
 export declare function createProjectHandler(write: SelfMcpWriteContext): (args: Record<string, unknown>) => Promise<McpToolCallResult>;
+/**
+ * `promote_project` (issue #470) — turn an EXISTING notebook project into a
+ * repo-backed one in place, over the same `ProjectStore.promote` (#213) that
+ * `POST /api/projects/:slug/promote` uses. Shares `create_project`'s
+ * `projectsMcpEnabled` gate: same blast-radius class (it clones a caller-supplied
+ * URL and restructures a project), and this one MUTATES existing state.
+ *
+ * Pure, like its siblings: it resolves the target (defaulting to the current
+ * project, as every other project-targeting write tool does), shape-checks the URL
+ * with the very same `isValidRepoUrl` the store uses, and delegates. Everything
+ * that makes promotion safe — the already-repo-backed / root-workspace / existing-
+ * checkout-dir guards, and the rollback that leaves an untouched notebook when the
+ * clone fails — stays in the store; nothing is re-implemented here.
+ *
+ * Deliberately NO up-front `SLUG_RE` check on the target, unlike `create_project`:
+ * there the slug names a project being INVENTED, here it names one that must
+ * already exist, so the store's own `not_found` is both the real check and the
+ * better message — and `SLUG_RE` would reject the root workspace's legitimate ""
+ * key with a misleading "invalid slug" instead of the store's explicit refusal.
+ */
+export declare function promoteProjectHandler(write: SelfMcpWriteContext): (args: Record<string, unknown>) => Promise<McpToolCallResult>;
 export declare function forkChatBatchHandler(write: SelfMcpWriteContext): (args: Record<string, unknown>) => Promise<McpToolCallResult>;

package/packages/server/dist/self-mcp-write.js

@@ -171,6 +171,50 @@ export function createProjectHandler(write) {
         }
     };
 }
+/**
+ * `promote_project` (issue #470) — turn an EXISTING notebook project into a
+ * repo-backed one in place, over the same `ProjectStore.promote` (#213) that
+ * `POST /api/projects/:slug/promote` uses. Shares `create_project`'s
+ * `projectsMcpEnabled` gate: same blast-radius class (it clones a caller-supplied
+ * URL and restructures a project), and this one MUTATES existing state.
+ *
+ * Pure, like its siblings: it resolves the target (defaulting to the current
+ * project, as every other project-targeting write tool does), shape-checks the URL
+ * with the very same `isValidRepoUrl` the store uses, and delegates. Everything
+ * that makes promotion safe — the already-repo-backed / root-workspace / existing-
+ * checkout-dir guards, and the rollback that leaves an untouched notebook when the
+ * clone fails — stays in the store; nothing is re-implemented here.
+ *
+ * Deliberately NO up-front `SLUG_RE` check on the target, unlike `create_project`:
+ * there the slug names a project being INVENTED, here it names one that must
+ * already exist, so the store's own `not_found` is both the real check and the
+ * better message — and `SLUG_RE` would reject the root workspace's legitimate ""
+ * key with a misleading "invalid slug" instead of the store's explicit refusal.
+ */
+export function promoteProjectHandler(write) {
+    return async (args) => {
+        try {
+            const projectArg = typeof args.project === "string" ? args.project.trim() : "";
+            const projectSlug = projectArg.length > 0 ? projectArg : write.currentProjectSlug;
+            const repo = typeof args.repo === "string" ? args.repo.trim() : "";
+            if (!repo) {
+                return fail("Error: `repo` is required (the git URL to back the project with).");
+            }
+            if (!isValidRepoUrl(repo)) {
+                return fail(`Error: invalid repo URL "${repo}" — expected an https://, git://, ssh:// or ` +
+                    "git@host:owner/repo url.");
+            }
+            const project = await write.promoteProject(projectSlug, repo);
+            return ok({ promoted: true, ...project });
+        }
+        catch (error) {
+            // Same hygiene as create_project: a clone failure arrives as git's whole argv
+            // (`Command failed: git clone -- <url> <dest>`), and the agent needs the repo
+            // URL + git's reason, not our on-disk layout.
+            return fail(`Error promoting project: ${truncateText(redactPaths(errText(error)))}`);
+        }
+    };
+}
 export function forkChatBatchHandler(write) {
     return async (args) => {
         try {

package/packages/server/dist/self-mcp.d.ts

@@ -12,7 +12,7 @@
  *   - `self-mcp-util.ts`         — result envelopes, clamps, arg coercion + caps
  *   - `self-mcp-descriptions.ts` — the agent-facing `*_DESC` prose
  *   - `self-mcp-read.ts`         — list_projects / list_chats / read_chat handlers
- *   - `self-mcp-write.ts`        — create/fork/send/archive/fork-batch + create_project handlers
+ *   - `self-mcp-write.ts`        — create/fork/send/archive/fork-batch + project handlers
  *   - `self-mcp-triggers.ts`     — list/set/remove/run trigger handlers
  *
  * ── How it reaches the keeper ───────────────────────────────────────────────
@@ -32,7 +32,7 @@
  */
 import type { InjectedMcpServerDef } from "@herdctl/core";
 import type { SelfMcpContext, SelfMcpWriteContext } from "./self-mcp-types.js";
-export type { SelfMcpProject, SelfMcpChat, SelfMcpMessage, SelfMcpTrigger, SelfMcpContext, SelfMcpWriteContext, SelfMcpCreateProjectInput, SelfMcpCreatedProject, } from "./self-mcp-types.js";
+export type { SelfMcpProject, SelfMcpChat, SelfMcpMessage, SelfMcpTrigger, SelfMcpContext, SelfMcpWriteContext, SelfMcpCreateProjectInput, SelfMcpCreatedProject, SelfMcpPromotedProject, } from "./self-mcp-types.js";
 export { FORK_BATCH_MAX, redactPaths, READ_CHAT_DEFAULT_LIMIT, READ_CHAT_MAX_LIMIT, READ_CHAT_MAX_TEXT, clampLimit, truncateText, resolveModelArg, coercePrompts, coerceToolList, coerceBoolean, } from "./self-mcp-util.js";
 /** Assembly-time options for {@link selfMcpServerDef}. */
 export interface SelfMcpServerDefOptions {
@@ -50,8 +50,8 @@ export interface SelfMcpServerDefOptions {
  * write flag is on), the WRITE tools (create_chat/fork_chat/send_message/
  * archive_chat/unarchive_chat/fork_chat_batch) are appended too; omit it for
  * unchanged read-only behavior. Two further blocks hang off independent gates ON
- * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issue #467)
- * appends the project tool (create_project), and
+ * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issues #467,
+ * #470) appends the project tools (create_project/promote_project), and
  * {@link SelfMcpWriteContext.triggersMcpEnabled} (the per-project trigger-MCP
  * opt-in, Epic T / T3) appends the unified trigger-management tools (list_triggers/
  * set_trigger/remove_trigger/run_trigger). Inject under
@@ -75,11 +75,12 @@ export declare const SELF_MCP_WRITE_TOOL_NAMES: {
     readonly forkChatBatch: "mcp__paddock_manage__fork_chat_batch";
 };
 /**
- * The fully-qualified name of the PROJECT tool (issue #467), present only when a
- * write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
+ * The fully-qualified names of the PROJECT tools (issues #467, #470), present only
+ * when a write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
  */
 export declare const SELF_MCP_PROJECT_TOOL_NAMES: {
     readonly createProject: "mcp__paddock_manage__create_project";
+    readonly promoteProject: "mcp__paddock_manage__promote_project";
 };
 /**
  * The fully-qualified names of the Epic T / T3 unified trigger-management tools

package/packages/server/dist/self-mcp.js

@@ -1,7 +1,7 @@
 import { FORK_BATCH_MAX, READ_CHAT_DEFAULT_LIMIT, READ_CHAT_MAX_LIMIT, } from "./self-mcp-util.js";
-import { MODEL_ARG_DESC, LIST_PROJECTS_DESC, LIST_CHATS_DESC, READ_CHAT_DESC, CREATE_CHAT_DESC, FORK_CHAT_DESC, SEND_MESSAGE_DESC, ARCHIVE_CHAT_DESC, UNARCHIVE_CHAT_DESC, FORK_CHAT_BATCH_DESC, CREATE_PROJECT_DESC, SET_TRIGGER_DESC, REMOVE_TRIGGER_DESC, RUN_TRIGGER_DESC, LIST_TRIGGERS_DESC, } from "./self-mcp-descriptions.js";
+import { MODEL_ARG_DESC, LIST_PROJECTS_DESC, LIST_CHATS_DESC, READ_CHAT_DESC, CREATE_CHAT_DESC, FORK_CHAT_DESC, SEND_MESSAGE_DESC, ARCHIVE_CHAT_DESC, UNARCHIVE_CHAT_DESC, FORK_CHAT_BATCH_DESC, CREATE_PROJECT_DESC, PROMOTE_PROJECT_DESC, SET_TRIGGER_DESC, REMOVE_TRIGGER_DESC, RUN_TRIGGER_DESC, LIST_TRIGGERS_DESC, } from "./self-mcp-descriptions.js";
 import { listProjectsHandler, listChatsHandler, readChatHandler } from "./self-mcp-read.js";
-import { createChatHandler, forkChatHandler, sendMessageHandler, archiveChatHandler, forkChatBatchHandler, createProjectHandler, } from "./self-mcp-write.js";
+import { createChatHandler, forkChatHandler, sendMessageHandler, archiveChatHandler, forkChatBatchHandler, createProjectHandler, promoteProjectHandler, } from "./self-mcp-write.js";
 import { PROJECT_STATUSES } from "./project-types.js";
 import { listTriggersHandler, setTriggerHandler, removeTriggerHandler, runTriggerHandler, } from "./self-mcp-triggers.js";
 export { FORK_BATCH_MAX, redactPaths, READ_CHAT_DEFAULT_LIMIT, READ_CHAT_MAX_LIMIT, READ_CHAT_MAX_TEXT, clampLimit, truncateText, resolveModelArg, coercePrompts, coerceToolList, coerceBoolean, } from "./self-mcp-util.js";
@@ -204,11 +204,15 @@ function writeTools(write) {
     ];
 }
 /**
- * The PROJECT tools (issue #467 — `create_project`). Appended only when
+ * The PROJECT tools (issue #467 — `create_project`; issue #470 —
+ * `promote_project`). Appended only when
  * {@link SelfMcpWriteContext.projectsMcpEnabled} is on: the same coarse binary gate
- * as the trigger tools (when off the tool is ABSENT, not present-but-refusing). Its
- * own flag because — unlike every other write tool — this one provisions
- * instance-level state and clones a caller-supplied git URL.
+ * as the trigger tools (when off the tools are ABSENT, not present-but-refusing).
+ * Their own flag because — unlike every other write tool — these provision or
+ * restructure instance-level state and clone a caller-supplied git URL. Promotion
+ * shares the flag rather than getting a third one: it is the same blast-radius
+ * class, and an operator who has granted "this agent may provision projects" has
+ * already made the decision promotion asks for.
  */
 function projectTools(write) {
     return [
@@ -244,6 +248,27 @@ function projectTools(write) {
             },
             handler: createProjectHandler(write),
         },
+        {
+            name: "promote_project",
+            description: PROMOTE_PROJECT_DESC,
+            inputSchema: {
+                type: "object",
+                properties: {
+                    project: {
+                        type: "string",
+                        description: "Slug of the NOTEBOOK project to promote. Omit to promote the current project.",
+                    },
+                    repo: {
+                        type: "string",
+                        description: "Git URL to back the project with (https://, git://, ssh:// or " +
+                            "git@host:owner/repo). Cloned into a nested checkout that becomes the " +
+                            "agent's working directory. Required.",
+                    },
+                },
+                required: ["repo"],
+            },
+            handler: promoteProjectHandler(write),
+        },
     ];
 }
 /**
@@ -386,8 +411,8 @@ function triggerTools(write) {
  * write flag is on), the WRITE tools (create_chat/fork_chat/send_message/
  * archive_chat/unarchive_chat/fork_chat_batch) are appended too; omit it for
  * unchanged read-only behavior. Two further blocks hang off independent gates ON
- * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issue #467)
- * appends the project tool (create_project), and
+ * that write context: {@link SelfMcpWriteContext.projectsMcpEnabled} (issues #467,
+ * #470) appends the project tools (create_project/promote_project), and
  * {@link SelfMcpWriteContext.triggersMcpEnabled} (the per-project trigger-MCP
  * opt-in, Epic T / T3) appends the unified trigger-management tools (list_triggers/
  * set_trigger/remove_trigger/run_trigger). Inject under
@@ -428,11 +453,12 @@ export const SELF_MCP_WRITE_TOOL_NAMES = {
     forkChatBatch: `mcp__${SERVER_NAME}__fork_chat_batch`,
 };
 /**
- * The fully-qualified name of the PROJECT tool (issue #467), present only when a
- * write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
+ * The fully-qualified names of the PROJECT tools (issues #467, #470), present only
+ * when a write context has {@link SelfMcpWriteContext.projectsMcpEnabled} on.
  */
 export const SELF_MCP_PROJECT_TOOL_NAMES = {
     createProject: `mcp__${SERVER_NAME}__create_project`,
+    promoteProject: `mcp__${SERVER_NAME}__promote_project`,
 };
 /**
  * The fully-qualified names of the Epic T / T3 unified trigger-management tools

package/packages/server/dist/sweep.js

@@ -285,11 +285,16 @@ export class SweepService {
         // NOCHANGE leaves it untouched. A write failure is non-fatal (OVERVIEW/
         // CHANGELOG already landed; the watermark should still advance) → warn.
         //
-        // REPO-BACKED projects (issue #187): the CLAUDE.md is the external repo's
-        // OWN, upstream-owned file — the sweeper must NEVER write it (that would
-        // dirty the checkout and, if pushed, leak curation upstream). OVERVIEW.md +
-        // CHANGELOG.md are still curated (sidecarred), just not CLAUDE.md.
-        if (parsed.claude !== null && !project.repoBacked) {
+        // UNMANAGED projects (issue #206, formerly keyed on `repoBacked`): the
+        // CLAUDE.md belongs to the working directory's own source control — the
+        // sweeper must NEVER write it (that would dirty the checkout and, if pushed,
+        // leak curation upstream). OVERVIEW.md + CHANGELOG.md are still curated
+        // (sidecarred into the metadata dir), just not CLAUDE.md.
+        //
+        // `managed` is the precise fact here, where `repoBacked` was a proxy for it:
+        // what decides this is whether Paddock looks after the project's files, not
+        // whether a git repo happens to sit behind them.
+        if (parsed.claude !== null && project.managed) {
             const bounded = enforceHeadBudget(parsed.claude, budgetChars(budget, "claudeMaxTokens"));
             await this.projects.writeClaudeCurated(project.slug, bounded).catch((err) => {
                 this.log.warn({ err, slug: project.slug }, "sweep: CLAUDE.md write failed (non-fatal)");

package/packages/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paddock/server",
-  "version": "0.63.0",
+  "version": "0.65.0",
   "private": true,
   "type": "module"
 }

package/packages/web/dist/assets/{InstanceConfigPage-CCk2hVT9.js → InstanceConfigPage-DcprTH2W.js}

@@ -1,2 +1,2 @@
-import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-CUnFKMga.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};
+import{r as o,b as f,j as e,A as b,k as E,l as A,m as O,M as F,n as I}from"./index-DVSsta3B.js";function $(){const[t,s]=o.useState(null),[l,i]=o.useState(!0),[r,c]=o.useState(null),[d,m]=o.useState({}),[h,k]=o.useState(!1),[j,p]=o.useState(null),[N,u]=o.useState(!1);o.useEffect(()=>{let a=!0;return i(!0),f.getInstanceConfig().then(n=>{a&&(s(n),c(null))}).catch(n=>a&&c(n instanceof Error?n.message:String(n))).finally(()=>a&&i(!1)),()=>{a=!1}},[]);const v=(a,n)=>{u(!1),p(null),m(g=>({...g,[a]:n}))},S=a=>Object.prototype.hasOwnProperty.call(d,a.key)?d[a.key]:a.value,y=o.useMemo(()=>t?t.groups.flatMap(a=>a.fields):[],[t]),x=o.useMemo(()=>y.filter(a=>a.editable&&!a.envOverridden).filter(a=>Object.prototype.hasOwnProperty.call(d,a.key)).filter(a=>!B(d[a.key],a.value)).map(a=>a.key),[y,d]),w=async()=>{if(x.length===0)return;const a={};for(const n of x)a[n]=d[n];k(!0),p(null);try{await f.updateInstanceConfig(a);const n=await f.getInstanceConfig();s(n),m({}),u(!0)}catch(n){p(n instanceof A||n instanceof Error?n.message:String(n))}finally{k(!1)}},C=()=>{m({}),p(null),u(!1)};return e.jsxs(e.Fragment,{children:[e.jsx("div",{className:"min-h-0 flex-1 overflow-y-auto px-4 py-5 sm:px-6",children:e.jsxs("div",{className:"mx-auto max-w-2xl",children:[e.jsx(L,{saved:N,configPath:t==null?void 0:t.configPath}),l&&e.jsx("p",{className:"text-sm text-paddock-500",children:"Loading…"}),r&&e.jsxs("p",{className:"text-sm text-red-600 dark:text-red-400",role:"alert",children:["Failed to load settings: ",r]}),t&&t.groups.map(a=>e.jsx(M,{title:a.label,description:a.description,children:e.jsx("div",{className:"grid grid-cols-1 gap-4",children:a.fields.map(n=>e.jsx(P,{field:n,value:S(n),onChange:g=>v(n.key,g)},n.key))})},a.id))]})}),t&&e.jsxs("footer",{className:"flex items-center gap-3 border-t border-paddock-200 px-4 py-3 dark:border-paddock-800 sm:px-6",children:[j&&e.jsxs("span",{className:"flex items-center gap-1.5 text-[13px] text-red-600 dark:text-red-400",role:"alert",children:[e.jsx(b,{width:14,height:14,className:"shrink-0"}),j]}),e.jsx("span",{className:"ml-auto text-[12px] text-paddock-400",children:x.length>0?`${x.length} unsaved change${x.length===1?"":"s"}`:"No changes"}),e.jsx("button",{type:"button",className:"btn-subtle",onClick:C,disabled:x.length===0||h,children:"Reset"}),e.jsx("button",{type:"button",className:"btn-primary",onClick:w,disabled:x.length===0||h,children:h?"Saving…":"Save changes"})]})]})}function L({saved:t,configPath:s}){return e.jsxs("div",{role:"status",className:`mb-6 flex items-start gap-2 rounded-lg border px-3 py-2.5 text-[13px] leading-snug ${t?"border-emerald-300 bg-emerald-50 text-emerald-800 dark:border-emerald-700/60 dark:bg-emerald-900/20 dark:text-emerald-300":"border-amber-300 bg-amber-50 text-amber-800 dark:border-amber-700/60 dark:bg-amber-900/20 dark:text-amber-300"}`,children:[t?e.jsx(E,{width:15,height:15,className:"mt-0.5 shrink-0"}):e.jsx(b,{width:15,height:15,className:"mt-0.5 shrink-0"}),e.jsx("span",{children:t?e.jsxs(e.Fragment,{children:[e.jsx("strong",{children:"Saved to disk."})," These changes take effect only after the server restarts."]}):e.jsxs(e.Fragment,{children:["Changes here are written to ",e.jsx("code",{className:"font-mono text-[12px]",children:T(s)})," ","and take effect only after the server restarts — the running instance keeps its current config until then."]})})]})}function M({title:t,description:s,children:l}){return e.jsxs("section",{className:"mb-6",children:[e.jsx("h2",{className:"text-sm font-semibold uppercase tracking-wide text-paddock-500",children:t}),s&&e.jsx("p",{className:"mb-3 mt-0.5 text-[13px] text-paddock-500",children:s}),e.jsx("div",{className:`card ${s?"":"mt-2"}`,children:l})]})}function P({field:t,value:s,onChange:l}){const i=!t.editable||t.envOverridden,r=`cfg-${t.key}`;return e.jsxs("div",{children:[e.jsxs("div",{className:"flex items-center justify-between gap-3",children:[e.jsxs("label",{htmlFor:i?void 0:r,className:"text-sm font-medium",children:[t.label,t.sensitive&&e.jsx("span",{className:"ml-1.5 align-middle text-[10px] font-semibold uppercase tracking-wide text-amber-600 dark:text-amber-400",children:"sensitive"})]}),t.type==="boolean"&&!i&&e.jsx("input",{id:r,type:"checkbox",className:"h-4 w-4 accent-accent",checked:!!s,onChange:c=>l(c.target.checked)})]}),t.help&&e.jsx("p",{className:"mt-0.5 text-[12px] leading-snug text-paddock-500",children:t.help}),i?e.jsx(V,{field:t,value:s}):t.type!=="boolean"&&e.jsx(R,{field:t,value:s,onChange:l,inputId:r}),t.envOverridden&&e.jsxs("p",{className:"mt-1 flex items-start gap-1.5 text-[12px] leading-snug text-amber-600 dark:text-amber-400",children:[e.jsx(b,{width:13,height:13,className:"mt-0.5 shrink-0"}),e.jsxs("span",{children:["Overridden by environment variable ",e.jsx("code",{className:"font-mono",children:t.envVar})," — edit that env var (and restart) to change it."]})]})]})}function R({field:t,value:s,onChange:l,inputId:i}){if(t.type==="enum")return e.jsx("select",{id:i,className:"input mt-1.5",value:String(s??""),onChange:r=>l(r.target.value),children:(t.enumValues??[]).map(r=>e.jsx("option",{value:r,children:r},r))});if(t.type==="number")return e.jsx("input",{id:i,type:"number",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"default":String(t.default),onChange:r=>l(r.target.value===""?null:Number(r.target.value))});if(t.type==="text"){const r=s==null||s===t.default,c=s==null?String(t.default??""):String(s),d=typeof t.default=="string"&&!r;return e.jsxs("div",{className:"mt-1.5",children:[e.jsx("textarea",{id:i,className:"input min-h-[9rem] resize-y font-mono text-[12px] leading-relaxed",rows:10,spellCheck:!1,value:c,onChange:m=>l(m.target.value)}),e.jsxs("div",{className:"mt-1 flex items-center justify-between gap-3 text-[12px] text-paddock-500",children:[e.jsx("span",{children:r?"Using the built-in default.":s===""?"Empty — nothing will be appended.":`${c.length.toLocaleString()} characters.`}),d&&e.jsx("button",{type:"button",className:"shrink-0 underline underline-offset-2 hover:text-paddock-700 dark:hover:text-paddock-300",onClick:()=>l(null),children:"Restore default"})]})]})}if(t.type==="string-list"){const r=Array.isArray(s)?s.join(", "):String(s??"");return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:r,onChange:c=>l(c.target.value.split(",").map(d=>d.trim()).filter(Boolean))})}return e.jsx("input",{id:i,type:"text",className:"input mt-1.5",value:s==null?"":String(s),placeholder:t.default===null?"":String(t.default),onChange:r=>l(r.target.value)})}function V({field:t,value:s}){return e.jsx("div",{className:"mt-1.5 rounded-md border border-dashed border-paddock-300 bg-paddock-50 px-2.5 py-1.5 text-[13px] text-paddock-600 dark:border-paddock-700 dark:bg-paddock-900/40 dark:text-paddock-300",children:t.type==="boolean"?e.jsx("span",{className:"font-mono",children:s?"true":"false"}):s==null||s===""?e.jsx("span",{className:"italic text-paddock-400",children:t.type==="text"&&s===""?"(empty — nothing appended)":"(not set)"}):t.type==="text"?e.jsx("span",{className:"block max-h-64 overflow-y-auto whitespace-pre-wrap font-mono text-[12px] leading-relaxed",children:String(s)}):e.jsx("span",{className:"break-all font-mono",children:Array.isArray(s)?s.join(", "):String(s)})})}function B(t,s){return Array.isArray(t)&&Array.isArray(s)?t.length===s.length&&t.every((l,i)=>l===s[i]):t===s}function T(t){if(!t)return"paddock.config.yaml";const s=t.split("/");return s[s.length-1]||t}function z(){const t=O(),s=(t==null?void 0:t.openNav)??(()=>{});return e.jsxs("div",{className:"flex h-full min-h-0 flex-col",children:[e.jsxs("header",{className:"pt-safe flex items-center gap-2 border-b border-paddock-200 px-3 pb-2.5 dark:border-paddock-800 sm:px-6 lg:py-4",children:[e.jsx("button",{type:"button",onClick:s,"aria-label":"Open menu",className:"btn-subtle -ml-1 shrink-0 px-2 py-1.5 lg:hidden",children:e.jsx(F,{width:20,height:20})}),e.jsx(I,{width:18,height:18,className:"shrink-0 text-paddock-400"}),e.jsx("h1",{className:"text-[15px] font-semibold tracking-tight",children:"Config"})]}),e.jsx($,{})]})}export{z as InstanceConfigPage};