claude-nomad 0.32.3 → 0.33.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.33.0](https://github.com/funkadelic/claude-nomad/compare/v0.32.4...v0.33.0) (2026-05-30)
+
+
+### Added
+
+* **dist:** run bin under node native type-stripping, drop tsx ([#198](https://github.com/funkadelic/claude-nomad/issues/198)) ([79b437d](https://github.com/funkadelic/claude-nomad/commit/79b437d8fee69d4f0f25394de9236f7c67289291))
+* **help:** show CLI version at the top of default help ([#196](https://github.com/funkadelic/claude-nomad/issues/196)) ([f095d35](https://github.com/funkadelic/claude-nomad/commit/f095d354273122bc530aac5f486fdb9ad771341e))
+
+## [0.32.4](https://github.com/funkadelic/claude-nomad/compare/v0.32.3...v0.32.4) (2026-05-30)
+
+
+### Fixed
+
+* **push:** honor drop-wins for allow in recovery dispatch ([#194](https://github.com/funkadelic/claude-nomad/issues/194)) ([9731ecf](https://github.com/funkadelic/claude-nomad/commit/9731ecf9b3d65a6f10fd3e7fc8e520f839640b25))
+
 ## [0.32.3](https://github.com/funkadelic/claude-nomad/compare/v0.32.2...v0.32.3) (2026-05-30)
 
 

package/README.md

@@ -381,8 +381,6 @@ Read these before adopting so you opt in with eyes open.
 - Node.js 22.22.1 or newer (24 LTS recommended; the npm `engines` field declares the 22.22.1 floor
   and surfaces a warning on older runtimes - npm only blocks the install when `engine-strict=true`
   is configured)
-- `tsx` (ships as a runtime dependency of the published package; no separate global install
-  required)
 - Git
 - [`gitleaks`](https://github.com/gitleaks/gitleaks) (required for `nomad push`, which exits with an
   error if it is not on PATH; `nomad doctor` also checks it against the pinned 8.30.x and warns when
@@ -455,9 +453,11 @@ $ git clone git@github.com:<your-username>/claude-nomad.git ~/claude-nomad
 export NOMAD_HOST=<your-host-label>      # any short, stable label; nomad reads this instead of os.hostname()
 ```
 
-`npm i -g claude-nomad` puts a `nomad` binary on your PATH. The bin shim is the existing
-`src/nomad.ts` entrypoint resolved through tsx (a runtime dependency); no compile step. (The Node
-version floor and the `engine-strict` caveat are in [Requirements](#requirements).)
+`npm i -g claude-nomad` puts a `nomad` binary on your PATH. The binary runs the `src/nomad.ts`
+source directly under Node's built-in type-stripping. What this means for you: there is no compile
+step, no extra transpiler to install, and nothing is fetched from the network the first time you run
+`nomad`, so the first run works offline. (The Node version floor and the `engine-strict` caveat are
+in [Requirements](#requirements).)
 
 On every additional host you repeat only steps 3-4; steps 1-2 are already done, since your private
 repo lives on the remote from step 2.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.32.3",
+  "version": "0.33.0",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [
@@ -33,9 +33,9 @@
     "node": ">=22.22.1"
   },
   "scripts": {
-    "pull": "tsx src/nomad.ts pull",
-    "push": "tsx src/nomad.ts push",
-    "doctor": "tsx src/nomad.ts doctor",
+    "pull": "node src/nomad.ts pull",
+    "push": "node src/nomad.ts push",
+    "doctor": "node src/nomad.ts doctor",
     "update": "bash scripts/update.sh",
     "test": "vitest run",
     "coverage": "vitest run --coverage",
@@ -81,7 +81,6 @@
   },
   "dependencies": {
     "diff": "^9.0.0",
-    "picocolors": "^1.1.1",
-    "tsx": "^4.22.2"
+    "picocolors": "^1.1.1"
   }
 }

package/src/commands.push.recovery.actions.ts

@@ -46,64 +46,65 @@ export async function collectActions(
     const sid = sessionIdFromFinding(f);
     const header =
       `\nFinding: ${f.RuleID} in ${f.File} line ${f.StartLine}` +
-      (sid !== null ? ` (session: ${sid})` : '') +
+      (sid === null ? '' : ` (session: ${sid})`) +
       '\n  [R]edact  [A]llow  [D]rop session  [S]kip (default)\n';
     actions.set(findingKey(f), parseAction(await prompt(header + '> ')));
   }
   return actions;
 }
 
+/**
+ * Loop-invariant context for `dispatchOne`, built once by `dispatchActions`
+ * before iterating findings. Bundling these keeps `dispatchOne` to two
+ * parameters. The `redactedSids` and `droppedSids` sets are mutated in place so
+ * per-session de-duplication is maintained across the caller's loop.
+ */
+type DispatchCtx = {
+  findings: Finding[];
+  actions: Map<string, FindingAction>;
+  ts: string;
+  map: PathMap;
+  nowMs: () => number;
+  scan: (p: string) => Finding[] | null;
+  drop: (sid: string, map: PathMap) => boolean;
+  redactedSids: Set<string>;
+  droppedSids: Set<string>;
+};
+
 /**
  * Apply one finding's triaged action against local state. Extracted from
  * `dispatchActions` so each function stays under the cognitive-complexity gate.
- * `redactedSids` and `droppedSids` are mutated in place so per-session
- * de-duplication is maintained across the caller's loop. Drop wins: once a
- * session id appears in `droppedSids`, subsequent redact or allow actions for
- * findings in that session are skipped.
+ * Drop wins: once a session id appears in `ctx.droppedSids`, subsequent redact
+ * or allow actions for findings in that session are skipped.
  *
  * @param f The finding to act on.
- * @param findings Full findings list (passed to `applyRedact` for per-session redaction).
- * @param actions The action map returned by `collectActions`.
- * @param ts Backup timestamp.
- * @param map Parsed path-map.
- * @param nowMs Injectable clock.
- * @param scan Injectable scan function for `applyRedact`.
- * @param drop Injectable staged-copy remover for the Drop action.
- * @param redactedSids Set of already-redacted session ids (mutated in place).
- * @param droppedSids Set of already-dropped session ids (mutated in place).
+ * @param ctx Loop-invariant dispatch context (see `DispatchCtx`).
  */
-function dispatchOne(
-  f: Finding,
-  findings: Finding[],
-  actions: Map<string, FindingAction>,
-  ts: string,
-  map: PathMap,
-  nowMs: () => number,
-  scan: (p: string) => Finding[] | null,
-  drop: (sid: string, map: PathMap) => boolean,
-  redactedSids: Set<string>,
-  droppedSids: Set<string>,
-): void {
-  const action = actions.get(findingKey(f)) ?? 'skip';
+function dispatchOne(f: Finding, ctx: DispatchCtx): void {
+  const action = ctx.actions.get(findingKey(f)) ?? 'skip';
   if (action === 'skip') return;
+  const sid = sessionIdFromFinding(f);
+  // Drop wins: a dropped session short-circuits every later action for it,
+  // including allow, so a stale fingerprint is never written for content that
+  // was held back from the push.
+  if (sid !== null && ctx.droppedSids.has(sid)) return;
   if (action === 'allow') {
     applyAllow(f);
     return;
   }
-  const sid = sessionIdFromFinding(f);
   if (sid === null) return;
-  if (droppedSids.has(sid)) return;
   if (action === 'drop') {
-    droppedSids.add(sid);
-    if (drop(sid, map)) {
+    ctx.droppedSids.add(sid);
+    if (ctx.drop(sid, ctx.map)) {
       log(
         `dropped session ${sid} from this push (local transcript kept; the secret remains in your local copy)`,
       );
     }
     return;
   }
-  if (action === 'redact' && !redactedSids.has(sid)) {
-    if (applyRedact(f, findings, ts, map, nowMs, scan)) redactedSids.add(sid);
+  if (action === 'redact' && !ctx.redactedSids.has(sid)) {
+    if (applyRedact(f, ctx.findings, ctx.ts, ctx.map, ctx.nowMs, ctx.scan))
+      ctx.redactedSids.add(sid);
   }
 }
 
@@ -130,10 +131,19 @@ export function dispatchActions(
   scan: (p: string) => Finding[] | null = scanFile,
   drop: (sid: string, map: PathMap) => boolean = dropSessionFromStaged,
 ): void {
-  const redactedSids = new Set<string>();
-  const droppedSids = new Set<string>();
+  const ctx: DispatchCtx = {
+    findings,
+    actions,
+    ts,
+    map,
+    nowMs,
+    scan,
+    drop,
+    redactedSids: new Set<string>(),
+    droppedSids: new Set<string>(),
+  };
   for (const f of findings) {
-    dispatchOne(f, findings, actions, ts, map, nowMs, scan, drop, redactedSids, droppedSids);
+    dispatchOne(f, ctx);
   }
 }
 

package/src/commands.redact.ts

@@ -153,7 +153,8 @@ export function cmdRedact(
     }
 
     if (findings.length === 0) {
-      log(`no findings${rule !== undefined ? ` for rule ${rule}` : ''} in session ${id}`);
+      const ruleClause = rule === undefined ? '' : ` for rule ${rule}`;
+      log(`no findings${ruleClause} in session ${id}`);
       return;
     }
 

package/src/nomad.help.ts

@@ -6,6 +6,8 @@
  * into the README. Channel is stderr, exit code is 1.
  */
 
+import pkg from '../package.json' with { type: 'json' };
+
 /**
  * Column (0-indexed) at which every command and flag description starts. Sized
  * to clear the longest label (`--resume-cmd <id>`, which ends at column 24)
@@ -28,6 +30,8 @@ const row = (label: string, desc: string): string => label.padEnd(DESC_COL) + de
 const cont = (text: string): string => ' '.repeat(DESC_COL) + text;
 
 export const DEFAULT_HELP = [
+  `claude-nomad v${pkg.version}`,
+  '',
   'usage: nomad <command> [flags]',
   '',
   'Commands:',

package/src/nomad.ts

@@ -1,4 +1,4 @@
-#!/usr/bin/env -S npx tsx
+#!/usr/bin/env -S node --disable-warning=ExperimentalWarning
 /**
  * claude-nomad: Claude Code config sync wrapper over a private Git repo.
  *