@popoverai/dotrequirements 0.27.2 → 0.27.4

package/dist/commands/link.js

@@ -135,6 +135,7 @@ async function runNonInteractiveLink(options) {
                         projectName: match.projectName,
                         renamed: false,
                         settingsPath,
+                        signedInAs: oauthResult.email,
                         ...artifacts,
                     });
                     return;
@@ -189,6 +190,7 @@ async function runNonInteractiveLink(options) {
                 projectName: name,
                 renamed: false,
                 settingsPath,
+                signedInAs: oauthResult.email,
                 ...artifacts,
             });
             return;
@@ -227,6 +229,7 @@ async function runNonInteractiveLink(options) {
             projectName,
             renamed,
             settingsPath,
+            signedInAs: oauthResult.email,
             ...artifacts,
         });
     }

package/dist/requirements/index.js

@@ -20,6 +20,11 @@ const REQUIREMENTS_IGNORE_PATTERNS = [
     "**/__tests__/**",
     "**/fixtures/**",
     "**/.fixtures/**",
+    // Claude Code worktrees hold other sessions' checkouts of the repo, whose
+    // stale .requirements copies must not fail this workspace's validation.
+    // Nothing else here excludes them: a checkout's requirements live beside
+    // its .git, not inside it, so "**/.git/**" above never matches them.
+    "**/.claude/worktrees/**",
 ];
 /**
  * Find all *.requirements.md files in the workspace.

package/dist/utils/oauth-flow.d.ts

@@ -8,6 +8,8 @@ export interface OAuthResult {
     accessToken: string;
     refreshToken: string;
     expiresAt: number;
+    /** Email of the authenticated account (LINK-14 / INIT-20). */
+    email: string;
 }
 /**
  * Execute the full OAuth flow:

package/dist/utils/oauth-flow.js

@@ -66,12 +66,19 @@ export async function executeOAuthFlow() {
     if (!result.success) {
         throw new Error(`Token exchange failed: ${result.error}`);
     }
-    const { accessToken, refreshToken, expiresAt } = result;
+    const { accessToken, refreshToken, expiresAt, email } = result;
     console.log("✓ Authentication complete!");
+    // LINK-14 / INIT-20: name the account we signed in as. The browser session
+    // decides which identity authenticates; surfacing it here (one site shared by
+    // link, init, and the invite flow) makes a wrong-account login visible before
+    // anything is saved. In JSON mode the callers route console.log to stderr, so
+    // this line never corrupts a machine-readable result.
+    console.log(`Signed in as ${email}`);
     return {
         accessToken,
         refreshToken,
         expiresAt,
+        email,
     };
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@popoverai/dotrequirements",
-  "version": "0.27.2",
+  "version": "0.27.4",
   "description": "Requirements tracking CLI and test harness",
   "type": "module",
   "bin": {