@kendoo.agentdesk/agentdesk 0.20.2 → 0.20.3

package/CHANGELOG.md

@@ -13,6 +13,13 @@ Internal refactors, infrastructure changes, and architectural notes are not list
 ### Added
 - `[UI]` Private-session sharing flow. When someone visits a session URL they don't own, they now see a friendly "Shh… this one's private" page with a one-click "Request access" button instead of a blank error. The session owner sees pending requests in a new header inbox and can grant viewer access for just that session or the whole project. Viewer-granted sessions show up in the teammate's sidebar tagged as a viewer.
 
+## [0.20.3] — 2026-04-19
+
+### Fixed
+- `[CLI]` Critical: `loadConfig` no longer lets a server row with `null` or missing fields override a fully-configured local `.agentdesk.json`. The merge now treats `null`/`undefined` from the server as "no value known" — only explicit non-null server values win. Previously a partially-synced project row on agentdesk.live would silently strip local tracker/repo/badge fields during the merge, and the cached-back write then persisted the stripped state to disk. On the next `init` run, the config looked empty even though the user had typed everything in.
+- `[CLI]` Existing-mode save in `init` preserves the full local `.agentdesk.json` — it only ensures `projectKey` is set, never replaces other fields. The previous behavior wrote `{ "projectKey": "..." }` as the entire file, which destroyed any data not also on the server.
+- `[CLI]` Auto-heal sync: when `loadConfig` sees a server row missing fields the local file has, it now pushes the merged config back to the server (fire-and-forget) so both sides converge. Projects that were set up before server-settings-push landed will heal themselves on next init.
+
 ## [0.20.2] — 2026-04-19
 
 ### Changed

package/cli/config.mjs

@@ -87,20 +87,32 @@ export async function loadConfig(dir, opts = {}) {
     }
   }
 
-  // Merge: DEFAULTS ← local ← server (UI is the single source of truth)
+  // Merge: DEFAULTS ← local ← server, where the "server overrides local"
+  // rule only kicks in when the server actually has a value. Null /
+  // undefined on the server means "the server doesn't know about this
+  // field yet" — local wins. This is what keeps a partially-configured
+  // server row from silently wiping a fully-configured local file on
+  // next read.
   let config = { ...DEFAULTS };
   if (localConfig) config = deepMerge(config, localConfig);
-  if (serverConfig) config = deepMerge(config, serverConfig);
-
-  // First-time sync: if local exists but server is empty, push local up.
-  if (localConfig && !serverConfig && apiKey && serverUrl && projectName) {
-    pushConfig(apiKey, serverUrl, projectName, localConfig).catch(() => {});
+  if (serverConfig) config = mergeNonNull(config, serverConfig);
+
+  // Auto-heal sync: if local has fields the server is missing (either
+  // no row at all or a partial row), push the merged config up so the
+  // server catches up. Fire-and-forget — we already have the right
+  // answer in `config` for the current caller.
+  const shouldHeal = localConfig && apiKey && serverUrl && projectName && (
+    !serverConfig || hasFieldsServerLacks(localConfig, serverConfig)
+  );
+  if (shouldHeal) {
+    pushConfig(apiKey, serverUrl, projectName, stripCredentials(config)).catch(() => {});
   }
 
-  // Cache the merged, credential-free config back to disk so the local file
-  // stays a readable view of the authoritative state. Only when we actually
-  // fetched from the server — offline runs must not silently mutate the
-  // user's local file.
+  // Cache the merged, credential-free config back to disk so the local
+  // file stays a readable view of the authoritative state. Only when we
+  // actually fetched from the server — offline runs must not silently
+  // mutate the user's local file. With mergeNonNull above, we're
+  // guaranteed this write never strips existing local fields.
   if (serverConfig) {
     writeLocalConfig(configPath, config);
   }
@@ -108,6 +120,23 @@ export async function loadConfig(dir, opts = {}) {
   return config;
 }
 
+// True when `local` has any non-null leaf that's null/missing on `server`.
+// Walked recursively for nested blocks (linear, jira, github). Used to
+// decide whether it's worth pushing a heal sync.
+function hasFieldsServerLacks(local, server) {
+  const isObj = v => v && typeof v === "object" && !Array.isArray(v);
+  for (const [key, v] of Object.entries(local || {})) {
+    if (v === null || v === undefined) continue;
+    const s = server?.[key];
+    if (isObj(v)) {
+      if (!isObj(s) || hasFieldsServerLacks(v, s)) return true;
+    } else {
+      if (s === null || s === undefined) return true;
+    }
+  }
+  return false;
+}
+
 // Push a config object to the server. Caller is responsible for deciding when.
 export async function pushConfig(apiKey, serverUrl, projectName, payload) {
   if (!apiKey || !serverUrl || !projectName) return { ok: false, error: "missing_auth" };
@@ -185,3 +214,19 @@ function deepMerge(defaults, overrides) {
   }
   return result;
 }
+
+// Like deepMerge, but null/undefined on the overrides side never
+// clobbers a non-null value already in base. Used for the local ← server
+// step so an empty server row can't wipe a fully-populated local file.
+function mergeNonNull(base, overrides) {
+  const result = { ...base };
+  for (const [key, value] of Object.entries(overrides)) {
+    if (value === null || value === undefined) continue;
+    if (value && typeof value === "object" && !Array.isArray(value) && base[key] && typeof base[key] === "object") {
+      result[key] = mergeNonNull(base[key], value);
+    } else {
+      result[key] = value;
+    }
+  }
+  return result;
+}

package/cli/init.mjs

@@ -484,12 +484,21 @@ async function runWizard({ cwd, apiKey, mode, projectKey }) {
   }
   console.log("");
 
-  // Write local .agentdesk.json. Existing mode writes only projectKey
-  // (server owns the rest and loadConfig will re-populate on the next
-  // run); new mode writes the full config.
+  // Write local .agentdesk.json.
+  //   • Existing mode: preserve whatever's already on disk, ensuring
+  //     only that `projectKey` is set. Never clobber tracker/github/
+  //     badge fields the user may have locally even when the server
+  //     hasn't caught up yet (auto-heal push in config.mjs will
+  //     reconcile the server side).
+  //   • New mode: write the full config we just built.
   const configPath = join(currentCwd, ".agentdesk.json");
   if (isExisting) {
-    writeFileSync(configPath, JSON.stringify({ projectKey: computedKey }, null, 2) + "\n");
+    let existingOnDisk = {};
+    if (existsSync(configPath)) {
+      try { existingOnDisk = JSON.parse(readFileSync(configPath, "utf-8")); } catch {}
+    }
+    const merged = { ...existingOnDisk, projectKey: computedKey };
+    writeFileSync(configPath, JSON.stringify(merged, null, 2) + "\n");
   } else {
     writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n");
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kendoo.agentdesk/agentdesk",
-  "version": "0.20.2",
+  "version": "0.20.3",
   "description": "AI team orchestrator for Claude Code — run collaborative agent sessions from your terminal",
   "type": "module",
   "bin": {