claude-launchpad 1.14.0 → 1.16.0

package/dist/{chunk-D6RAMWH6.js → chunk-7KB5YGQZ.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   log
-} from "./chunk-QEPE3WVF.js";
+} from "./chunk-U2TFIUGE.js";
 
 // src/commands/memory/utils/require-deps.ts
 import { createRequire } from "module";
@@ -44,4 +44,4 @@ export {
   cwdRequire,
   requireMemoryDeps
 };
-//# sourceMappingURL=chunk-D6RAMWH6.js.map
+//# sourceMappingURL=chunk-7KB5YGQZ.js.map

package/dist/{chunk-UN43OVRW.js → chunk-DLDVXHI3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   cwdRequire
-} from "./chunk-D6RAMWH6.js";
+} from "./chunk-7KB5YGQZ.js";
 
 // src/commands/memory/config.ts
 import { z } from "zod";
@@ -181,4 +181,4 @@ export {
   createDatabase,
   closeDatabase
 };
-//# sourceMappingURL=chunk-UN43OVRW.js.map
+//# sourceMappingURL=chunk-DLDVXHI3.js.map

package/dist/{chunk-M6GVFN67.js → chunk-IPGNXDJF.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   log
-} from "./chunk-QEPE3WVF.js";
+} from "./chunk-U2TFIUGE.js";
 
 // src/commands/memory/utils/gist-transport.ts
 import { execSync } from "child_process";
@@ -205,4 +205,4 @@ export {
   deleteGistFile,
   updateGistFiles
 };
-//# sourceMappingURL=chunk-M6GVFN67.js.map
+//# sourceMappingURL=chunk-IPGNXDJF.js.map

package/dist/{chunk-VF7U63AI.js → chunk-LCKV24Q3.js}

@@ -5,7 +5,7 @@ import {
 } from "./chunk-HSGSTSVN.js";
 import {
   migrate
-} from "./chunk-OPORVSAF.js";
+} from "./chunk-MX3T2VEX.js";
 import {
   MemoryRepo
 } from "./chunk-IDH3M4EI.js";
@@ -14,7 +14,7 @@ import {
   createDatabase,
   loadConfig,
   resolveDataDir
-} from "./chunk-UN43OVRW.js";
+} from "./chunk-DLDVXHI3.js";
 
 // src/commands/memory/subcommands/init-storage.ts
 function initStorage(dbPath) {
@@ -36,4 +36,4 @@ function initStorage(dbPath) {
 export {
   initStorage
 };
-//# sourceMappingURL=chunk-VF7U63AI.js.map
+//# sourceMappingURL=chunk-LCKV24Q3.js.map

package/dist/{chunk-OPORVSAF.js → chunk-MX3T2VEX.js}

@@ -1,10 +1,10 @@
 #!/usr/bin/env node
 import {
   cwdRequire
-} from "./chunk-D6RAMWH6.js";
+} from "./chunk-7KB5YGQZ.js";
 import {
   __export
-} from "./chunk-QEPE3WVF.js";
+} from "./chunk-U2TFIUGE.js";
 
 // src/commands/memory/storage/migrations/001-initial.ts
 var initial_exports = {};
@@ -222,4 +222,4 @@ function migrate(db) {
 export {
   migrate
 };
-//# sourceMappingURL=chunk-OPORVSAF.js.map
+//# sourceMappingURL=chunk-MX3T2VEX.js.map

package/dist/{chunk-QEPE3WVF.js → chunk-U2TFIUGE.js}

@@ -46,7 +46,7 @@ import { homedir } from "os";
 // src/lib/sections.ts
 var SESSION_START_CONTENT = "- ALWAYS read @TASKS.md first \u2014 it tracks progress across sessions\n- Check the Session Log at the bottom of TASKS.md for where we left off\n- Update TASKS.md as you complete work";
 var BACKLOG_CONTENT = "- When a feature is discussed but deferred, add it to BACKLOG.md immediately\n- Never leave future ideas only in TASKS.md or conversation \u2014 they get lost\n- BACKLOG.md is the single source of truth for parked features\n- Every WP uses the 7-field template in BACKLOG.md \u2014 no freeform entries\n- Pull a WP into a sprint = **move**, not copy. A WP lives in exactly one file at a time";
-var STOP_AND_SWARM_CONTENT = 'Three failed iterations on the same problem = stop iterating alone.\n(An iteration = an attempted fix that did not change the failing symptom. Announce "Attempt N" when retrying so the count stays visible.)\nFirst, one systematic pass \u2014 it usually resolves the loop without the swarm:\nreproduce the failure, read the FULL error output, state one hypothesis about the root cause, and verify it BEFORE writing any fix.\nOnly if that pass fails, swarm: dispatch at least 3 parallel subagents via the Task tool \u2014 in a single message so they run concurrently \u2014 each investigating from a different angle:\n1. Root-cause debug agent\n2. Upstream library/docs research agent\n3. Alternative architecture agent\nHand each agent the exact repro command, the full error text, and the list of already-failed fixes \u2014 subagents start with empty context.\nWait for all agents to return, synthesize their findings, then act.\nFor re-planning after repeated failure, switch to plan mode instead of attempting again.';
+var STOP_AND_SWARM_CONTENT = 'Three failed iterations on the same problem = stop iterating alone.\n(An iteration = an attempted fix that did not change the failing symptom. Announce "Attempt N" when retrying so the count stays visible.)\nFirst, one systematic pass \u2014 it usually resolves the loop without the swarm:\nreproduce the failure, read the FULL error output, state one hypothesis about the root cause, and verify it BEFORE writing any fix.\nOnly if that pass fails, swarm: dispatch at least 3 parallel subagents via the Task tool \u2014 in a single message so they run concurrently \u2014 each investigating from a different angle:\n1. Root-cause debug agent\n2. Upstream library/docs research agent\n3. Alternative architecture agent\nEvery agent brief has four parts \u2014 agents start with empty context: Mission (one sentence), Context (exact repro command, full error text, already-failed fixes), Scope fence (files/questions NOT to touch), Return format (findings as file:line + evidence).\nTreat agent output as testimony, not truth \u2014 spot-check load-bearing claims (open the cited file, re-run the cited command) before acting on them.\nWait for all agents to return, synthesize their findings, then act.\nFor re-planning after repeated failure, switch to plan mode instead of attempting again.';
 var STALE_SWARM_PHRASE = "spin up at least 3 parallel agents via the Agent tool";
 var SWARM_PHRASE_REPLACEMENT = "dispatch at least 3 parallel subagents via the Task tool (in a single message so they run concurrently)";
 var OFF_LIMITS_CONTENT = "- Never hardcode secrets \u2014 use environment variables\n- Never write to `.env` files\n- Never expose internal error details in API responses";
@@ -757,6 +757,7 @@ function isJqAvailable() {
   }
   return jqChecked;
 }
+var FORCE_PUSH_ERE = "git +(-[cC][^ ]* +([^ ]+ +)?)*push([^|;&]*( -[a-zA-Z]*f[a-zA-Z]*| --force| --force-with-lease(=[^ ;|&]*)?)( |$|;|&)|[^|;&]* \\+[^ ;|&]+)";
 
 // src/lib/hook-scripts.ts
 var SPRINT_SIZE_CHECK = `#!/usr/bin/env bash
@@ -1627,7 +1628,7 @@ async function addForcePushProtection(root) {
     matcher: "Bash",
     hooks: [{
       type: "command",
-      command: `cmd=${jqField("command")}; echo "$cmd" | grep -qE 'push.*--force|push.*-f' && { echo 'WARNING: Force push detected \u2014 this can destroy remote history' >&2; exit 2; }; exit 0`
+      command: `cmd=${jqField("command")}; echo "$cmd" | grep -qE "${FORCE_PUSH_ERE}" && { echo 'WARNING: Force push detected \u2014 this can destroy remote history' >&2; exit 2; }; exit 0`
     }]
   }, "Added force-push protection hook (PreToolUse \u2192 Bash)");
 }
@@ -1685,6 +1686,42 @@ async function addSessionStartHook(root) {
     hooks: [{ type: "command", command: "cat TASKS.md 2>/dev/null; exit 0" }]
   }, "Added SessionStart hook (injects TASKS.md at startup/resume/compact/clear)");
 }
+async function upgradeForcePushPattern(root) {
+  const stale = "push.*--force|push.*-f";
+  let any = false;
+  for (const [read, write, label] of [
+    [readSettingsJson, writeSettingsJson, "settings.json"],
+    [readSettingsLocalJson, writeSettingsLocalJson, "settings.local.json"]
+  ]) {
+    const settings = await read(root);
+    if (settings === null) continue;
+    const raw = JSON.stringify(settings);
+    if (!raw.includes(stale.replace(/\\/g, "\\\\"))) {
+      if (!raw.includes(stale)) continue;
+    }
+    const hooks = settings.hooks;
+    if (!hooks) continue;
+    let changed = false;
+    for (const groups of Object.values(hooks)) {
+      for (const group of groups) {
+        const inner = group.hooks;
+        if (!inner) continue;
+        for (const h of inner) {
+          const cmd = typeof h.command === "string" ? h.command : "";
+          if (cmd.includes(stale)) {
+            h.command = cmd.replace(stale, FORCE_PUSH_ERE);
+            changed = true;
+          }
+        }
+      }
+    }
+    if (!changed) continue;
+    await write(root, settings);
+    log.success(`Upgraded force-push guard pattern in ${label}`);
+    any = true;
+  }
+  return any;
+}
 
 // src/commands/doctor/fixer-hook-input.ts
 import { readFile as readFile4 } from "fs/promises";
@@ -1695,10 +1732,10 @@ function rewriteEnvVarHookCommand(cmd) {
     return `fp=${jqField("file_path")}; echo "$fp" | grep -qE '\\.(env|env\\..*)$' && ! echo "$fp" | grep -q '.env.example' && { echo 'BLOCKED: .env files contain secrets' >&2; exit 2; }; exit 0`;
   }
   if (cmd.includes("BLOCKED: Destructive command detected")) {
-    return `cmd=${jqField("command")}; echo "$cmd" | grep -qE 'rm\\s+-rf\\s+/|DROP\\s+TABLE|DROP\\s+DATABASE|push.*--force|push.*-f' && { echo 'BLOCKED: Destructive command detected' >&2; exit 2; }; exit 0`;
+    return `cmd=${jqField("command")}; echo "$cmd" | grep -qE 'rm\\s+-rf\\s+/|DROP\\s+TABLE|DROP\\s+DATABASE|${FORCE_PUSH_ERE}' && { echo 'BLOCKED: Destructive command detected' >&2; exit 2; }; exit 0`;
   }
   if (cmd.includes("WARNING: Force push detected") || cmd.includes("Force push detected")) {
-    return `cmd=${jqField("command")}; echo "$cmd" | grep -qE 'push.*--force|push.*-f' && { echo 'WARNING: Force push detected \u2014 this can destroy remote history' >&2; exit 2; }; exit 0`;
+    return `cmd=${jqField("command")}; echo "$cmd" | grep -qE '${FORCE_PUSH_ERE}' && { echo 'WARNING: Force push detected \u2014 this can destroy remote history' >&2; exit 2; }; exit 0`;
   }
   if (cmd.includes("Sprint complete") && cmd.includes("TASKS.md")) {
     return SPRINT_COMPLETE_NUDGE;
@@ -1754,6 +1791,15 @@ async function rewriteEnvVarHooks(root) {
       didFix = true;
     }
   }
+  const localSettings = await readSettingsLocalJson(root);
+  if (localSettings !== null) {
+    const outcome = rewriteSettingsHooks(localSettings);
+    if (outcome.changed) {
+      await writeSettingsLocalJson(root, outcome.settings);
+      log.success("Rewrote inert $TOOL_INPUT_* hooks in settings.local.json to canonical jq+stdin form");
+      didFix = true;
+    }
+  }
   const workflowCheckPath = join5(root, ".claude", "hooks", "workflow-check.sh");
   if (await rewriteWrapperScript(workflowCheckPath, () => writeWorkflowCheckScript(root))) {
     log.success("Rewrote .claude/hooks/workflow-check.sh to canonical jq+stdin form");
@@ -2009,6 +2055,11 @@ var FIX_TABLE = [
       return a || b || c || d;
     }
   },
+  {
+    analyzer: "Hooks",
+    match: "outdated pattern",
+    fix: (root) => upgradeForcePushPattern(root)
+  },
   {
     analyzer: "Hooks",
     match: ".env file protection",
@@ -2663,6 +2714,7 @@ export {
   jqField,
   hasEnvVarHookPattern,
   isJqAvailable,
+  FORCE_PUSH_ERE,
   SPRINT_COMPLETE_NUDGE,
   WORKFLOW_CHECK_WRAPPER,
   SPRINT_OPEN_WRAPPER,
@@ -2682,4 +2734,4 @@ export {
   printScoreCard,
   renderDoctorReport
 };
-//# sourceMappingURL=chunk-QEPE3WVF.js.map
+//# sourceMappingURL=chunk-U2TFIUGE.js.map