baldart 4.89.1 → 4.89.2

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable changes to BALDART will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [4.89.2] - 2026-07-01
+
+**`baldart update` auto-commit now covers the FULL payload — Codex artifacts included.** A consumer reported that `baldart update` "never commits anything" even when authorized, and that other clones keep seeing the same files untracked. Root cause: `postUpdateAutoCommit` (`src/commands/update.js`) auto-commits only paths matching `BALDART_MANAGED_PATTERNS`; everything else is classified `userOwned` and left in the tree forever. The allowlist had drifted behind the payloads BALDART actually writes — it was missing every Codex-native artifact (`.codex/agents/*.toml` transpiled agents v4.80.0, `.codex/hooks.json` v4.88.0, `.agents/skills/*` skill symlinks v3.7.0), `.claude/output-styles/` (v4.50.0), and the i18n gate files (`eslint.i18n.config.mjs` / `.eslintrc.i18n.json` / the `paths.i18n_registry` directory, v4.52.0). On a Codex-enabled consumer the 32 `.toml` files are regenerated as real files on every update, classified `userOwned`, never committed → churn in every other clone.
+
+**PATCH** — bugfix, no install-layout or command-surface change; existing consumers get correct auto-commit on their next `update`. **No new `baldart.config.yml` key** (the i18n directory is *derived from* the existing `paths.i18n_registry`) → the schema-change propagation rule does NOT apply.
+
+**Codex parity: adapter-generated / N/A** — the fix is precisely the parity closure (the Codex-written payloads are now committed exactly like the Claude ones); the single classifier serves both runtimes.
+
+### Fixed
+
+- **`BALDART_MANAGED_PATTERNS` extended** to the full written payload: `.codex/` (agents + hooks), `.agents/skills/`, `.claude/output-styles/`, `eslint.i18n.config.mjs`, `.eslintrc.i18n.json`. A prominent INVARIANT comment now warns that any new written payload MUST add its pattern here in the same change (parity twin of the schema-change propagation rule).
+- **New `i18nRegistryPatterns(cwd)`** derives the i18n context-registry file + its containing directory from `paths.i18n_registry` (fallback `docs/i18n/registry.yml`), so the configurable path is auto-committed without hardcoding. `isBaldartManagedPath(p, extra)` now accepts these config-derived patterns.
+- **`.claude/settings.local.json` stays excluded** by design (personal, gitignored — the output-style activation target), so widening the `.claude/*` group to `output-styles` does not sweep in personal settings.
+
 ## [4.89.1] - 2026-07-01
 
 **`/new` tracker-write economy — remove the phase-entry write prompts.** An audit (mayo FEAT-0064) measured **20 orchestrator turns whose only tool call was a tracker `Edit`** (~5-11M tokens of pure `cache_read` replay, ~3-6% of the run). The § "Context economy" rule already forbids lone tracker-`Edit` turns (and the metric is trending down: 38 → 28 → 20), so this is a compliance gap, not a missing rule. The non-redundant fix: the per-phase reference modules carried ~9 numbered `**Update tracker**: phase = "X"` **phase-entry** steps (no data) that actively prompt a standalone write, contradicting the global co-emit rule. Removing that prompt at the source is more effective than more prose.

package/VERSION

@@ -1 +1 @@
-4.89.1
+4.89.2

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "4.89.1",
+  "version": "4.89.2",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"

package/src/commands/update.js

@@ -120,22 +120,67 @@ function scaffoldOverlaysForCommits(commits) {
 
 // Path prefixes BALDART itself writes during install/update. Anything outside
 // these patterns is treated as user-owned and never auto-staged.
+//
+// INVARIANT (do not let this list drift again): this allowlist MUST cover the
+// FULL set of payloads BALDART writes to a consumer's tree — every runtime, not
+// just Claude. A path BALDART generates but that is absent here is classified
+// `userOwned`, never auto-committed, and resurfaces as an untracked/modified
+// file in every other clone of the repo (the exact "commit never happens →
+// other terminals see churn" bug). When you add ANY new written payload — a new
+// `.claude/*` payload kind, a Codex artifact under `.codex/` or `.agents/`, a
+// root file, an i18n/toolchain config — add its pattern here in the SAME change
+// (parity twin of the schema-change propagation rule). See CHANGELOG v4.89.2.
 const BALDART_MANAGED_PATTERNS = [
   /^\.framework(\/|$)/,
   /^AGENTS\.md$/,
   /^CLAUDE\.md$/,
   /^agents(\.backup)?(\/|$)/,
-  /^\.claude\/(agents|commands|skills|workflows|hooks|routines|settings\.json)(\/|$)/,
+  // Claude payload kinds (incl. output-styles, v4.50.0).
+  /^\.claude\/(agents|commands|skills|workflows|hooks|routines|output-styles|settings\.json)(\/|$)/,
+  // Codex-native payloads: skill symlinks (v3.7.0), transpiled agents (v4.80.0),
+  // native hooks (v4.88.0). Only exist when `tools.enabled ∋ codex`, so listing
+  // them unconditionally is safe — absent means never dirty.
+  /^\.agents\/skills(\/|$)/,
+  /^\.codex(\/|$)/,
   /^\.baldart(\/|$)/,
   /^baldart\.config\.yml$/,
   /^docs\/references\/(ui-guidelines\.template\.md|brand-guidelines\.md)$/,
   /^templates(\/|$)/,
   /^\.github\/workflows\/baldart-/,
-  /^scripts\/routines(\/|$)/
+  /^scripts\/routines(\/|$)/,
+  // i18n gate configs written by src/utils/i18n-gate.js (flat + legacy).
+  /^eslint\.i18n\.config\.mjs$/,
+  /^\.eslintrc\.i18n\.json$/
 ];
 
-function isBaldartManagedPath(p) {
-  return BALDART_MANAGED_PATTERNS.some((rx) => rx.test(p));
+// The i18n context registry path is consumer-configurable (paths.i18n_registry),
+// so its containing directory can't be a static literal — derive it from config
+// so the registry file BALDART writes is auto-committed like every other managed
+// payload. Falls back to the template default (docs/i18n/) when unset/unreadable.
+function i18nRegistryPatterns(cwd = process.cwd()) {
+  let rel = 'docs/i18n/registry.yml';
+  try {
+    const fs = require('fs');
+    const path = require('path');
+    const yaml = require('js-yaml');
+    const cfgPath = path.join(cwd, 'baldart.config.yml');
+    if (fs.existsSync(cfgPath)) {
+      const cfg = yaml.load(fs.readFileSync(cfgPath, 'utf8'));
+      const v = cfg && cfg.paths && cfg.paths.i18n_registry;
+      if (typeof v === 'string' && v.trim()) rel = v.trim();
+    }
+  } catch (_) { /* fall back to the template default */ }
+  const norm = rel.replace(/\\/g, '/');
+  const out = [new RegExp('^' + norm.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + '$')];
+  const dir = norm.replace(/\/[^/]*$/, '');
+  if (dir && dir !== norm) {
+    out.push(new RegExp('^' + dir.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + '(\\/|$)'));
+  }
+  return out;
+}
+
+function isBaldartManagedPath(p, extra = []) {
+  return BALDART_MANAGED_PATTERNS.some((rx) => rx.test(p)) || extra.some((rx) => rx.test(p));
 }
 
 // Re-generate the root primitives (AGENTS.md + CLAUDE.md) from the versioned
@@ -206,10 +251,11 @@ async function postUpdateAutoCommit(git, newVersion, options) {
   const seen = new Set();
   const managed = [];
   const userOwned = [];
+  const extraPatterns = i18nRegistryPatterns();
   for (const p of allDirty) {
     if (!p || seen.has(p)) continue;
     seen.add(p);
-    (isBaldartManagedPath(p) ? managed : userOwned).push(p);
+    (isBaldartManagedPath(p, extraPatterns) ? managed : userOwned).push(p);
   }
   if (managed.length === 0) {
     return;