@regression-io/claude-config 0.37.16 → 0.37.19

package/README.md

@@ -96,6 +96,7 @@ claude-config workstream add <ws> <path>   # Add project to workstream
 claude-config workstream remove <ws> <path>  # Remove project from workstream
 claude-config workstream inject [--silent] # Output restriction + context (for hooks)
 claude-config workstream detect [path]     # Detect workstream for directory
+claude-config workstream check-path <path> # Check if path is within workstream (exit 0/1)
 claude-config workstream install-hook      # Install pre-prompt hook for injection
 ```
 

package/config-loader.js

@@ -28,7 +28,7 @@ const { init, show } = require('./lib/init');
 const { memoryList, memoryInit, memoryAdd, memorySearch } = require('./lib/memory');
 const { envList, envSet, envUnset } = require('./lib/env');
 const { getProjectsRegistryPath, loadProjectsRegistry, saveProjectsRegistry, projectList, projectAdd, projectRemove } = require('./lib/projects');
-const { getWorkstreamsPath, loadWorkstreams, saveWorkstreams, workstreamList, workstreamCreate, workstreamUpdate, workstreamDelete, workstreamUse, workstreamActive, workstreamAddProject, workstreamRemoveProject, workstreamInject, workstreamDetect, workstreamGet, getActiveWorkstream, countWorkstreamsForProject, workstreamInstallHook, workstreamDeactivate } = require('./lib/workstreams');
+const { getWorkstreamsPath, loadWorkstreams, saveWorkstreams, workstreamList, workstreamCreate, workstreamUpdate, workstreamDelete, workstreamUse, workstreamActive, workstreamAddProject, workstreamRemoveProject, workstreamInject, workstreamDetect, workstreamGet, getActiveWorkstream, countWorkstreamsForProject, workstreamInstallHook, workstreamDeactivate, workstreamCheckPath } = require('./lib/workstreams');
 const { getActivityPath, getDefaultActivity, loadActivity, saveActivity, detectProjectRoot, activityLog, activitySummary, generateWorkstreamName, activitySuggestWorkstreams, activityClear } = require('./lib/activity');
 const { getSmartSyncPath, loadSmartSyncPrefs, saveSmartSyncPrefs, smartSyncRememberChoice, smartSyncDismissNudge, smartSyncUpdateSettings, smartSyncDetect, smartSyncCheckNudge, smartSyncHandleAction, smartSyncStatus } = require('./lib/smart-sync');
 const { runCli } = require('./lib/cli');
@@ -132,6 +132,7 @@ class ClaudeConfigManager {
   countWorkstreamsForProject(projectPath) { return countWorkstreamsForProject(this.installDir, projectPath); }
   workstreamInstallHook() { return workstreamInstallHook(); }
   workstreamDeactivate() { return workstreamDeactivate(); }
+  workstreamCheckPath(targetPath, silent) { return workstreamCheckPath(this.installDir, targetPath, silent); }
 
   // Activity
   getActivityPath() { return getActivityPath(this.installDir); }

package/lib/cli.js

@@ -122,6 +122,15 @@ function runCli(manager) {
         manager.workstreamInstallHook();
       } else if (args[1] === 'deactivate') {
         manager.workstreamDeactivate();
+      } else if (args[1] === 'check-path') {
+        const targetPath = args[2];
+        if (!targetPath) {
+          console.error('Usage: claude-config workstream check-path <path>');
+          process.exit(1);
+        }
+        const silent = args.includes('--silent') || args.includes('-s');
+        const isValid = manager.workstreamCheckPath(targetPath, silent);
+        process.exit(isValid ? 0 : 1);
       } else {
         manager.workstreamList();
       }

package/lib/constants.js

@@ -2,7 +2,7 @@
  * Constants and tool path configurations
  */
 
-const VERSION = '0.37.16';
+const VERSION = '0.37.19';
 
 // Tool-specific path configurations
 const TOOL_PATHS = {

package/lib/workstreams.js

@@ -442,6 +442,49 @@ function workstreamDeactivate() {
   return true;
 }
 
+/**
+ * Check if a path is within the active workstream's directories
+ * Used by pre-tool-call hooks for enforcement
+ * Returns true if path is valid, false otherwise
+ */
+function workstreamCheckPath(installDir, targetPath, silent = false) {
+  const active = getActiveWorkstream(installDir);
+
+  // No active workstream = all paths allowed
+  if (!active) {
+    return true;
+  }
+
+  // No projects in workstream = all paths allowed
+  if (!active.projects || active.projects.length === 0) {
+    return true;
+  }
+
+  // Resolve the target path
+  const absPath = path.resolve(targetPath.replace(/^~/, process.env.HOME || ''));
+
+  // Check if path is within any of the workstream's directories
+  const isWithin = active.projects.some(projectPath => {
+    // Path is within if it starts with the project path
+    // Handle both exact match and subdirectories
+    return absPath === projectPath || absPath.startsWith(projectPath + path.sep);
+  });
+
+  if (!silent) {
+    if (isWithin) {
+      console.log(`✓ Path is within workstream "${active.name}"`);
+    } else {
+      console.error(`✗ Path is outside workstream "${active.name}"`);
+      console.error(`  Allowed directories:`);
+      for (const p of active.projects) {
+        console.error(`    - ${p.replace(process.env.HOME || '', '~')}`);
+      }
+    }
+  }
+
+  return isWithin;
+}
+
 module.exports = {
   getWorkstreamsPath,
   loadWorkstreams,
@@ -461,4 +504,5 @@ module.exports = {
   countWorkstreamsForProject,
   workstreamInstallHook,
   workstreamDeactivate,
+  workstreamCheckPath,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@regression-io/claude-config",
-  "version": "0.37.16",
+  "version": "0.37.19",
   "description": "Configuration management UI for Claude Code and Antigravity - manage MCPs, rules, commands, memory, and project folders",
   "author": "regression.io",
   "main": "config-loader.js",

package/ui/routes/updates.js

@@ -36,7 +36,8 @@ function getVersionFromFile(filePath) {
 }
 
 /**
- * Fetch npm version
+ * Fetch npm version and verify it's installable
+ * Returns version only if the tarball is accessible (CDN propagated)
  */
 function fetchNpmVersion() {
   return new Promise((resolve) => {
@@ -47,7 +48,37 @@ function fetchNpmVersion() {
       res.on('end', () => {
         try {
           const parsed = JSON.parse(data);
-          resolve(parsed.version || null);
+          const version = parsed.version;
+          const tarballUrl = parsed.dist?.tarball;
+
+          if (!version || !tarballUrl) {
+            resolve(null);
+            return;
+          }
+
+          // Verify tarball is accessible (HEAD request)
+          const tarball = new URL(tarballUrl);
+          const options = {
+            hostname: tarball.hostname,
+            path: tarball.pathname,
+            method: 'HEAD',
+            timeout: 5000
+          };
+
+          const verifyReq = https.request(options, (verifyRes) => {
+            // 200 = accessible, anything else = not yet propagated
+            if (verifyRes.statusCode === 200) {
+              resolve(version);
+            } else {
+              resolve(null);
+            }
+          });
+          verifyReq.on('error', () => resolve(null));
+          verifyReq.on('timeout', () => {
+            verifyReq.destroy();
+            resolve(null);
+          });
+          verifyReq.end();
         } catch (e) {
           resolve(null);
         }
@@ -112,21 +143,41 @@ async function checkForUpdates(manager, dirname) {
  * Perform npm update
  */
 async function performNpmUpdate(targetVersion) {
-  try {
-    // Use npm install @latest instead of npm update for reliable updates
-    execSync('npm install -g @regression-io/claude-config@latest', {
-      stdio: 'pipe',
-      timeout: 120000
-    });
+  const maxRetries = 3;
+  const retryDelayMs = 5000;
+
+  for (let attempt = 1; attempt <= maxRetries; attempt++) {
+    try {
+      // Use npm install @latest instead of npm update for reliable updates
+      execSync('npm install -g @regression-io/claude-config@latest', {
+        stdio: 'pipe',
+        timeout: 120000
+      });
 
-    return {
-      success: true,
-      updateMethod: 'npm',
-      newVersion: targetVersion || 'latest',
-      message: 'Updated via npm. Please restart the UI to use the new version.'
-    };
-  } catch (error) {
-    return { success: false, error: error.message };
+      return {
+        success: true,
+        updateMethod: 'npm',
+        newVersion: targetVersion || 'latest',
+        message: 'Updated via npm. Please restart the UI to use the new version.'
+      };
+    } catch (error) {
+      const isEtarget = error.message.includes('ETARGET') || error.message.includes('No matching version');
+
+      // Retry on ETARGET (CDN propagation delay) if we have retries left
+      if (isEtarget && attempt < maxRetries) {
+        await new Promise(resolve => setTimeout(resolve, retryDelayMs));
+        continue;
+      }
+
+      // Final attempt failed or non-retryable error
+      if (isEtarget) {
+        return {
+          success: false,
+          error: `Version not yet available on npm CDN. Please try again in a minute. (${error.message})`
+        };
+      }
+      return { success: false, error: error.message };
+    }
   }
 }