claude-nomad 0.38.0 → 0.38.1

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## [0.38.1](https://github.com/funkadelic/claude-nomad/compare/v0.38.0...v0.38.1) (2026-06-02)
+
+
+### Fixed
+
+* **docs:** base-qualify internal links so they resolve under /claude-nomad ([#222](https://github.com/funkadelic/claude-nomad/issues/222)) ([8cff369](https://github.com/funkadelic/claude-nomad/commit/8cff3691687d07eb4c0f54f9f7fdbf680342c2e4))
+
+
+### Changed
+
+* adopt fallow analyzer config ([#227](https://github.com/funkadelic/claude-nomad/issues/227)) ([ebf7ca0](https://github.com/funkadelic/claude-nomad/commit/ebf7ca0aa05510fa9edde5f408e951b7bfec05ab))
+* break import cycles and trim unused exports ([#225](https://github.com/funkadelic/claude-nomad/issues/225)) ([1808539](https://github.com/funkadelic/claude-nomad/commit/180853964c1d09153b3c9e1272255e2a753bd6d3))
+* **tests:** don't cancel in-progress push:main coverage runs ([#226](https://github.com/funkadelic/claude-nomad/issues/226)) ([3164283](https://github.com/funkadelic/claude-nomad/commit/31642839a5be85e3e9a966411bf5b839226616e8))
+
+
+### Documentation
+
+* document ALWAYS_NEVER_SYNC credential hard-block in docs-site ([#224](https://github.com/funkadelic/claude-nomad/issues/224)) ([8904a4a](https://github.com/funkadelic/claude-nomad/commit/8904a4a8685f555e399dd394b825018e2055d373))
+
 ## [0.38.0](https://github.com/funkadelic/claude-nomad/compare/v0.37.0...v0.38.0) (2026-06-02)
 
 

package/dist/nomad.mjs

@@ -32,6 +32,39 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   mod
 ));
 
+// src/config.never-sync.ts
+var NEVER_SYNC;
+var init_config_never_sync = __esm({
+  "src/config.never-sync.ts"() {
+    "use strict";
+    NEVER_SYNC = /* @__PURE__ */ new Set([
+      ".claude.json",
+      ".credentials.json",
+      "history.jsonl",
+      "settings.local.json",
+      "stats-cache.json",
+      "todos",
+      "shell-snapshots",
+      "debug",
+      "file-history",
+      "plans",
+      "session-env",
+      "statsig",
+      "telemetry",
+      "ide",
+      // Host-local caches and runtime state (sharedDirs guard also rejects these).
+      "cache",
+      "backups",
+      "paste-cache",
+      "daemon",
+      "jobs",
+      "tasks",
+      "security",
+      "sessions"
+    ]);
+  }
+});
+
 // node_modules/picocolors/picocolors.js
 var require_picocolors = __commonJS({
   "node_modules/picocolors/picocolors.js"(exports, module) {
@@ -189,7 +222,7 @@ var SAFE_LOGICAL, SAFE_SEGMENT, RESERVED_SHARED;
 var init_config_sharedDirs_guard = __esm({
   "src/config.sharedDirs.guard.ts"() {
     "use strict";
-    init_config();
+    init_config_never_sync();
     init_utils();
     SAFE_LOGICAL = /^[A-Za-z0-9._-]+$/;
     SAFE_SEGMENT = /^[A-Za-z0-9._-]+$/;
@@ -341,12 +374,13 @@ function allSharedLinks(map) {
   }
   return [...SHARED_LINKS, ...extras];
 }
-var HOME, CLAUDE_HOME, BACKUP_BASE, REPO_HOME, SETTINGS_SCHEMA_URL, NPM_REGISTRY_LATEST_URL, GITLEAKS_PINNED_VERSION, HOST, SHARED_LINKS, SUPPORTED_EXTRAS, ALWAYS_NEVER_SYNC, NEVER_SYNC, PUSH_ALLOWED_STATIC;
+var HOME, CLAUDE_HOME, BACKUP_BASE, REPO_HOME, SETTINGS_SCHEMA_URL, NPM_REGISTRY_LATEST_URL, GITLEAKS_PINNED_VERSION, HOST, SHARED_LINKS, SUPPORTED_EXTRAS, ALWAYS_NEVER_SYNC, PUSH_ALLOWED_STATIC;
 var init_config = __esm({
   "src/config.ts"() {
     "use strict";
     init_config_sharedDirs_guard();
     init_utils();
+    init_config_never_sync();
     init_settings_keys();
     HOME = homedir();
     CLAUDE_HOME = resolve(HOME, ".claude");
@@ -373,31 +407,6 @@ var init_config = __esm({
       "history.jsonl",
       "stats-cache.json"
     ]);
-    NEVER_SYNC = /* @__PURE__ */ new Set([
-      ".claude.json",
-      ".credentials.json",
-      "history.jsonl",
-      "settings.local.json",
-      "stats-cache.json",
-      "todos",
-      "shell-snapshots",
-      "debug",
-      "file-history",
-      "plans",
-      "session-env",
-      "statsig",
-      "telemetry",
-      "ide",
-      // Host-local caches and runtime state (sharedDirs guard also rejects these).
-      "cache",
-      "backups",
-      "paste-cache",
-      "daemon",
-      "jobs",
-      "tasks",
-      "security",
-      "sessions"
-    ]);
     PUSH_ALLOWED_STATIC = [
       "shared/CLAUDE.md",
       "shared/my-statusline.cjs",
@@ -541,10 +550,9 @@ var init_utils_fs = __esm({
   }
 });
 
-// src/push-gitleaks.scan.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { existsSync as existsSync9, mkdirSync as mkdirSync2, readFileSync as readFileSync3, rmSync as rmSync3 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
+// src/push-gitleaks.config.ts
+import { existsSync as existsSync9, mkdtempSync, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { tmpdir } from "node:os";
 import { join as join10 } from "node:path";
 import { fileURLToPath } from "node:url";
 function resolveTomlPath() {
@@ -553,110 +561,21 @@ function resolveTomlPath() {
   const bundled = fileURLToPath(new URL("../.gitleaks.toml", import.meta.url));
   return existsSync9(bundled) ? bundled : null;
 }
-function readGitleaksReport(reportPath) {
-  try {
-    const raw = readFileSync3(reportPath, "utf8");
-    const parsed = JSON.parse(raw);
-    if (!Array.isArray(parsed)) return null;
-    return parsed;
-  } catch {
-    return null;
-  }
-}
-function scanStagedTree(repoDir, forwardStreams = false) {
-  const cacheDir = join10(homedir2(), ".cache", "claude-nomad");
-  mkdirSync2(cacheDir, { recursive: true });
-  const reportPath = join10(cacheDir, `gitleaks-${nowTimestamp()}-${process.pid}.json`);
-  const { path: toml, tempPath } = resolveTomlConfig();
-  const args = [
-    "protect",
-    "--staged",
-    "--redact",
-    "-v",
-    "--report-format=json",
-    `--report-path=${reportPath}`
-  ];
-  if (toml !== null) args.push("--config", toml);
-  const opts = { cwd: repoDir, stdio: ["ignore", "pipe", "pipe"] };
-  try {
-    execFileSync2("git", ["init", "-q"], opts);
-    execFileSync2("git", ["add", "-A"], opts);
-    execFileSync2("gitleaks", args, opts);
-    return [];
-  } catch (err) {
-    const e = err;
-    if (e.code === "ENOENT") throw err;
-    const report = readGitleaksReport(reportPath);
-    if (forwardStreams && report === null) {
-      if (e.stderr) process.stderr.write(e.stderr);
-      if (e.stdout) process.stdout.write(e.stdout);
-    }
-    return report;
-  } finally {
-    if (tempPath !== null) rmSync3(tempPath, { recursive: true, force: true });
-    rmSync3(reportPath, { force: true });
-  }
-}
-function scanFile(filePath, forwardStreams = false) {
-  const cacheDir = join10(homedir2(), ".cache", "claude-nomad");
-  mkdirSync2(cacheDir, { recursive: true });
-  const reportPath = join10(cacheDir, `gitleaks-file-${nowTimestamp()}-${process.pid}.json`);
-  const { path: toml, tempPath } = resolveTomlConfig();
-  const args = [
-    "detect",
-    "--no-git",
-    "--source",
-    filePath,
-    "--report-format=json",
-    `--report-path=${reportPath}`
-  ];
-  if (toml !== null) args.push("--config", toml);
-  const opts = { stdio: ["ignore", "pipe", "pipe"] };
-  try {
-    execFileSync2("gitleaks", args, opts);
-    return [];
-  } catch (err) {
-    const e = err;
-    if (e.code === "ENOENT") return null;
-    const report = readGitleaksReport(reportPath);
-    if (forwardStreams && report === null) {
-      if (e.stderr) process.stderr.write(e.stderr);
-      if (e.stdout) process.stdout.write(e.stdout);
-    }
-    return report;
-  } finally {
-    if (tempPath !== null) rmSync3(tempPath, { recursive: true, force: true });
-    rmSync3(reportPath, { force: true });
-  }
-}
-var init_push_gitleaks_scan = __esm({
-  "src/push-gitleaks.scan.ts"() {
-    "use strict";
-    init_config();
-    init_push_gitleaks_config();
-    init_utils_fs();
-  }
-});
-
-// src/push-gitleaks.config.ts
-import { existsSync as existsSync10, mkdtempSync, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
-import { tmpdir } from "node:os";
-import { join as join11 } from "node:path";
 function buildOverlayTempConfig(overlayBody, bundled) {
   const tempBody = `[extend]
 path = ${JSON.stringify(bundled)}
 
 ${overlayBody}`;
-  const tempPath = mkdtempSync(join11(tmpdir(), "nomad-gitleaks-cfg-"));
-  const configPath = join11(tempPath, "config.toml");
+  const tempPath = mkdtempSync(join10(tmpdir(), "nomad-gitleaks-cfg-"));
+  const configPath = join10(tempPath, "config.toml");
   writeFileSync2(configPath, tempBody, { mode: 384, flag: "wx" });
   return { configPath, tempPath };
 }
 function resolveTomlConfig() {
-  const overlayPath = join11(REPO_HOME, ".gitleaks.overlay.toml");
-  const repoToml = join11(REPO_HOME, ".gitleaks.toml");
+  const overlayPath = join10(REPO_HOME, ".gitleaks.overlay.toml");
+  const repoToml = join10(REPO_HOME, ".gitleaks.toml");
   const bundled = resolveTomlPath();
-  if (!existsSync10(overlayPath)) {
+  if (!existsSync9(overlayPath)) {
     return { path: bundled, tempPath: null };
   }
   if (bundled === repoToml) {
@@ -669,7 +588,7 @@ function resolveTomlConfig() {
     return { path: null, tempPath: null };
   }
   try {
-    const overlayBody = readFileSync4(overlayPath, "utf8");
+    const overlayBody = readFileSync3(overlayPath, "utf8");
     if (OVERLAY_EXTEND_RE.test(overlayBody)) {
       throw new NomadFatal(
         ".gitleaks.overlay.toml must not contain an [extend] block; it is generated automatically. Remove the [extend] section and retry."
@@ -690,17 +609,16 @@ var init_push_gitleaks_config = __esm({
   "src/push-gitleaks.config.ts"() {
     "use strict";
     init_config();
-    init_push_gitleaks_scan();
     init_utils();
     OVERLAY_EXTEND_RE = /^\s*(?:\[\s*extend\s*\]|extend\s*[.=])/m;
   }
 });
 
 // src/push-checks.ts
-import { execFileSync as execFileSync3 } from "node:child_process";
-import { readdirSync as readdirSync3, rmSync as rmSync4 } from "node:fs";
-import { homedir as homedir3, platform } from "node:os";
-import { join as join12 } from "node:path";
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { readdirSync as readdirSync3, rmSync as rmSync3 } from "node:fs";
+import { homedir as homedir2, platform } from "node:os";
+import { join as join11 } from "node:path";
 function gitleaksInstallHint() {
   const head = "gitleaks not on PATH (required for nomad push). Install:";
   const plat = platform();
@@ -720,7 +638,7 @@ function gitleaksInstallHint() {
       "       chmod +x ~/.local/bin/gitleaks",
       "       ~/.local/bin/gitleaks version   # verify"
     ];
-    const localBin = `${homedir3()}/.local/bin`;
+    const localBin = `${homedir2()}/.local/bin`;
     const paths = (process.env.PATH ?? "").split(":");
     if (!paths.includes(localBin)) {
       lines.push(
@@ -743,7 +661,7 @@ function findGitlinks(dir) {
       return;
     }
     for (const e of entries) {
-      const p = join12(current, e.name);
+      const p = join11(current, e.name);
       if (e.name === ".git") {
         hits.push(p);
         continue;
@@ -759,18 +677,18 @@ function probeGitleaks() {
   const args = ["version"];
   if (toml !== null) args.push("--config", toml);
   try {
-    return execFileSync3("gitleaks", args, { stdio: ["ignore", "pipe", "pipe"] }).toString().trim();
+    return execFileSync2("gitleaks", args, { stdio: ["ignore", "pipe", "pipe"] }).toString().trim();
   } catch (err) {
     const e = err;
     if (e.code === "ENOENT") throw new NomadFatal(gitleaksInstallHint());
     throw new NomadFatal(`gitleaks --version failed: ${e.message}`);
   } finally {
-    if (tempPath !== null) rmSync4(tempPath, { recursive: true, force: true });
+    if (tempPath !== null) rmSync3(tempPath, { recursive: true, force: true });
   }
 }
 function rebaseBeforePush() {
   try {
-    execFileSync3("git", ["pull", "--rebase", "--autostash"], {
+    execFileSync2("git", ["pull", "--rebase", "--autostash"], {
       cwd: REPO_HOME,
       stdio: ["ignore", "pipe", "pipe"]
     });
@@ -791,6 +709,95 @@ var init_push_checks = __esm({
   }
 });
 
+// src/push-gitleaks.scan.ts
+import { execFileSync as execFileSync5 } from "node:child_process";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync4, rmSync as rmSync4 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join15 } from "node:path";
+function readGitleaksReport(reportPath) {
+  try {
+    const raw = readFileSync4(reportPath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (!Array.isArray(parsed)) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function scanStagedTree(repoDir, forwardStreams = false) {
+  const cacheDir = join15(homedir3(), ".cache", "claude-nomad");
+  mkdirSync2(cacheDir, { recursive: true });
+  const reportPath = join15(cacheDir, `gitleaks-${nowTimestamp()}-${process.pid}.json`);
+  const { path: toml, tempPath } = resolveTomlConfig();
+  const args = [
+    "protect",
+    "--staged",
+    "--redact",
+    "-v",
+    "--report-format=json",
+    `--report-path=${reportPath}`
+  ];
+  if (toml !== null) args.push("--config", toml);
+  const opts = { cwd: repoDir, stdio: ["ignore", "pipe", "pipe"] };
+  try {
+    execFileSync5("git", ["init", "-q"], opts);
+    execFileSync5("git", ["add", "-A"], opts);
+    execFileSync5("gitleaks", args, opts);
+    return [];
+  } catch (err) {
+    const e = err;
+    if (e.code === "ENOENT") throw err;
+    const report = readGitleaksReport(reportPath);
+    if (forwardStreams && report === null) {
+      if (e.stderr) process.stderr.write(e.stderr);
+      if (e.stdout) process.stdout.write(e.stdout);
+    }
+    return report;
+  } finally {
+    if (tempPath !== null) rmSync4(tempPath, { recursive: true, force: true });
+    rmSync4(reportPath, { force: true });
+  }
+}
+function scanFile(filePath, forwardStreams = false) {
+  const cacheDir = join15(homedir3(), ".cache", "claude-nomad");
+  mkdirSync2(cacheDir, { recursive: true });
+  const reportPath = join15(cacheDir, `gitleaks-file-${nowTimestamp()}-${process.pid}.json`);
+  const { path: toml, tempPath } = resolveTomlConfig();
+  const args = [
+    "detect",
+    "--no-git",
+    "--source",
+    filePath,
+    "--report-format=json",
+    `--report-path=${reportPath}`
+  ];
+  if (toml !== null) args.push("--config", toml);
+  const opts = { stdio: ["ignore", "pipe", "pipe"] };
+  try {
+    execFileSync5("gitleaks", args, opts);
+    return [];
+  } catch (err) {
+    const e = err;
+    if (e.code === "ENOENT") return null;
+    const report = readGitleaksReport(reportPath);
+    if (forwardStreams && report === null) {
+      if (e.stderr) process.stderr.write(e.stderr);
+      if (e.stdout) process.stdout.write(e.stdout);
+    }
+    return report;
+  } finally {
+    if (tempPath !== null) rmSync4(tempPath, { recursive: true, force: true });
+    rmSync4(reportPath, { force: true });
+  }
+}
+var init_push_gitleaks_scan = __esm({
+  "src/push-gitleaks.scan.ts"() {
+    "use strict";
+    init_push_gitleaks_config();
+    init_utils_fs();
+  }
+});
+
 // src/push-gitleaks.ts
 function findingIdentityKey(f) {
   const fp = f.Fingerprint;
@@ -870,7 +877,6 @@ var init_push_gitleaks = __esm({
     init_push_checks();
     init_push_gitleaks_scan();
     init_utils();
-    init_push_gitleaks_scan();
     SESSION_PATH = /^shared\/projects\/[^/]+\/([^/]+)\.jsonl$/;
     SUBAGENT_SESSION_PATH = /^shared\/projects\/[^/]+\/([^/]+)\/.*\.jsonl$/;
     LEGACY_FATAL = "gitleaks detected secrets; review staged changes with git diff --cached and unstage offending files before retry";
@@ -1204,7 +1210,7 @@ function cmdClean(opts, backupBase = BACKUP_BASE) {
 }
 
 // src/commands.doctor.ts
-import { existsSync as existsSync19 } from "node:fs";
+import { existsSync as existsSync18 } from "node:fs";
 import { join as join22 } from "node:path";
 
 // src/commands.doctor.checks.repo.ts
@@ -1535,14 +1541,14 @@ function reportNeverSync(section2) {
 // src/commands.doctor.checks.repository.ts
 init_color();
 init_config();
-import { execFileSync as execFileSync4 } from "node:child_process";
-import { existsSync as existsSync11 } from "node:fs";
-import { join as join13, relative as relative2 } from "node:path";
+import { execFileSync as execFileSync3 } from "node:child_process";
+import { existsSync as existsSync10 } from "node:fs";
+import { join as join12, relative as relative2 } from "node:path";
 init_push_checks();
 init_utils();
 function reportGitleaksProbe(section2) {
   try {
-    const v = execFileSync4("gitleaks", ["version"], { stdio: ["ignore", "pipe", "pipe"] }).toString().trim();
+    const v = execFileSync3("gitleaks", ["version"], { stdio: ["ignore", "pipe", "pipe"] }).toString().trim();
     addItem(section2, `${green(okGlyph)} gitleaks: ${dim(v)}`);
     return true;
   } catch (err) {
@@ -1556,8 +1562,8 @@ function reportGitleaksProbe(section2) {
   }
 }
 function reportGitlinks(section2) {
-  const sharedDir = join13(REPO_HOME, "shared");
-  if (existsSync11(sharedDir)) {
+  const sharedDir = join12(REPO_HOME, "shared");
+  if (existsSync10(sharedDir)) {
     const gitlinks = findGitlinks(sharedDir);
     for (const p of gitlinks) {
       const rel = relative2(REPO_HOME, p);
@@ -1575,7 +1581,7 @@ function reportGitlinks(section2) {
 }
 function reportRemote(section2) {
   try {
-    const url = execFileSync4("git", ["remote", "get-url", "origin"], {
+    const url = execFileSync3("git", ["remote", "get-url", "origin"], {
       cwd: REPO_HOME,
       stdio: ["ignore", "pipe", "pipe"]
     }).toString().trim();
@@ -1599,8 +1605,8 @@ function reportRebaseClean(section2) {
 
 // src/commands.doctor.checks.backups.ts
 init_color();
-import { existsSync as existsSync12, lstatSync as lstatSync5, readdirSync as readdirSync4 } from "node:fs";
-import { join as join14 } from "node:path";
+import { existsSync as existsSync11, lstatSync as lstatSync5, readdirSync as readdirSync4 } from "node:fs";
+import { join as join13 } from "node:path";
 init_config();
 var TS_SHAPE2 = /^\d{8}-\d{6}(-\d+)?$/;
 function safeReaddir(dir) {
@@ -1616,7 +1622,7 @@ var BYTES_PER_MB = 1024 * 1024;
 function dirSizeBytes(dir) {
   let bytes = 0;
   for (const entry of safeReaddir(dir)) {
-    const full = join14(dir, entry);
+    const full = join13(dir, entry);
     const st = lstatSync5(full, { throwIfNoEntry: false });
     if (!st) continue;
     if (st.isSymbolicLink()) continue;
@@ -1627,11 +1633,11 @@ function dirSizeBytes(dir) {
 }
 function totalSizeMb(backupBase, dirs) {
   let bytes = 0;
-  for (const name of dirs) bytes += dirSizeBytes(join14(backupBase, name));
+  for (const name of dirs) bytes += dirSizeBytes(join13(backupBase, name));
   return bytes / BYTES_PER_MB;
 }
 function reportBackupsCheck(section2, backupBase = BACKUP_BASE) {
-  if (!existsSync12(backupBase)) return;
+  if (!existsSync11(backupBase)) return;
   const dirs = safeReaddir(backupBase).filter((n) => TS_SHAPE2.test(n));
   const count = dirs.length;
   const sizeMb = totalSizeMb(backupBase, dirs);
@@ -1645,14 +1651,14 @@ function reportBackupsCheck(section2, backupBase = BACKUP_BASE) {
 
 // src/commands.doctor.check-schema.ts
 init_color();
-import { existsSync as existsSync13 } from "node:fs";
-import { join as join15 } from "node:path";
+import { existsSync as existsSync12 } from "node:fs";
+import { join as join14 } from "node:path";
 init_config();
 
 // src/http-fetch.ts
-import { execFileSync as execFileSync5 } from "node:child_process";
+import { execFileSync as execFileSync4 } from "node:child_process";
 var FETCH_TIMEOUT_MS = 3e3;
-function fetchUrl(url, run = execFileSync5) {
+function fetchUrl(url, run = execFileSync4) {
   try {
     return run("curl", ["-fsSL", "-m", "3", url], {
       stdio: ["ignore", "pipe", "pipe"],
@@ -1683,8 +1689,8 @@ function fetchSchemaKeys() {
   }
 }
 function reportCheckSchema(section2) {
-  const settingsPath = join15(CLAUDE_HOME, "settings.json");
-  if (!existsSync13(settingsPath)) {
+  const settingsPath = join14(CLAUDE_HOME, "settings.json");
+  if (!existsSync12(settingsPath)) {
     addItem(section2, `${dim(infoGlyph)} no ~/.claude/settings.json to check`);
     return;
   }
@@ -1714,7 +1720,7 @@ function reportCheckSchema(section2) {
 init_color();
 import { randomBytes } from "node:crypto";
 import { execFileSync as execFileSync6 } from "node:child_process";
-import { existsSync as existsSync15, mkdirSync as mkdirSync4, readdirSync as readdirSync6, rmSync as rmSync6 } from "node:fs";
+import { existsSync as existsSync14, mkdirSync as mkdirSync4, readdirSync as readdirSync6, rmSync as rmSync6 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { join as join18 } from "node:path";
 
@@ -1817,7 +1823,7 @@ init_config();
 init_utils();
 init_utils_fs();
 init_utils_json();
-import { cpSync as cpSync3, existsSync as existsSync14, mkdirSync as mkdirSync3, readdirSync as readdirSync5, rmSync as rmSync5, statSync as statSync4 } from "node:fs";
+import { cpSync as cpSync3, existsSync as existsSync13, mkdirSync as mkdirSync3, readdirSync as readdirSync5, rmSync as rmSync5, statSync as statSync4 } from "node:fs";
 import { join as join17, relative as relative3, sep } from "node:path";
 function copyDir(src, dst) {
   rmSync5(dst, { recursive: true, force: true });
@@ -1846,7 +1852,7 @@ function remapPull(ts, opts = {}) {
   const wouldPull = [];
   const mapPath = join17(REPO_HOME, "path-map.json");
   const repoProjects = join17(REPO_HOME, "shared", "projects");
-  if (!existsSync14(mapPath) || !existsSync14(repoProjects)) {
+  if (!existsSync13(mapPath) || !existsSync13(repoProjects)) {
     log("no path-map or repo projects dir; skipping session remap");
     return { unmapped: 0, pulled, wouldPull };
   }
@@ -1861,7 +1867,7 @@ function remapPull(ts, opts = {}) {
       continue;
     }
     const src = join17(repoProjects, logical);
-    if (!existsSync14(src)) continue;
+    if (!existsSync13(src)) continue;
     const dst = join17(localProjects, encodePath(localPath));
     if (dryRun) {
       wouldPull.push(logical);
@@ -1904,7 +1910,7 @@ function remapPush(ts, opts = {}) {
   const pushed = [];
   const wouldPush = [];
   const mapPath = join17(REPO_HOME, "path-map.json");
-  if (!existsSync14(mapPath)) {
+  if (!existsSync13(mapPath)) {
     log("no path-map.json; skipping session export");
     return { unmapped: 0, collisions: 0, pushed, wouldPush };
   }
@@ -1912,7 +1918,7 @@ function remapPush(ts, opts = {}) {
   const localProjects = join17(CLAUDE_HOME, "projects");
   const repoProjects = join17(REPO_HOME, "shared", "projects");
   const reverse = buildReverseMap(map);
-  if (!existsSync14(localProjects)) return { unmapped, collisions: 0, pushed, wouldPush };
+  if (!existsSync13(localProjects)) return { unmapped, collisions: 0, pushed, wouldPush };
   if (!dryRun) mkdirSync3(repoProjects, { recursive: true });
   for (const dir of readdirSync5(localProjects)) {
     const logical = reverse.get(dir);
@@ -1939,7 +1945,7 @@ function buildScanTree(tmpRoot) {
   const logicalToEncoded = /* @__PURE__ */ new Map();
   let staged = 0;
   const mapPath = join18(REPO_HOME, "path-map.json");
-  if (!existsSync15(mapPath)) return { logicalToEncoded, staged, malformed: false };
+  if (!existsSync14(mapPath)) return { logicalToEncoded, staged, malformed: false };
   let map;
   try {
     map = readJson(mapPath);
@@ -1957,7 +1963,7 @@ function buildScanTree(tmpRoot) {
     reverse.set(encodePath(p), logical);
   }
   const localProjects = join18(CLAUDE_HOME, "projects");
-  if (!existsSync15(localProjects)) return { logicalToEncoded, staged, malformed: false };
+  if (!existsSync14(localProjects)) return { logicalToEncoded, staged, malformed: false };
   for (const dir of readdirSync6(localProjects)) {
     const logical = reverse.get(dir);
     if (!logical) continue;
@@ -2017,7 +2023,7 @@ function reportCheckShared(section2, gitleaksReady) {
 
 // src/commands.doctor.checks.hooks.scope.ts
 init_color();
-import { existsSync as existsSync16, readFileSync as readFileSync5, readdirSync as readdirSync7, realpathSync } from "node:fs";
+import { existsSync as existsSync15, readFileSync as readFileSync5, readdirSync as readdirSync7, realpathSync } from "node:fs";
 import { dirname as dirname2, extname, join as join19 } from "node:path";
 init_config();
 function typeFromPackageJson(pkgPath) {
@@ -2041,7 +2047,7 @@ function effectiveType(hookPath) {
   let dir = dirname2(real);
   for (; ; ) {
     const pkg = join19(dir, "package.json");
-    if (existsSync16(pkg)) return typeFromPackageJson(pkg);
+    if (existsSync15(pkg)) return typeFromPackageJson(pkg);
     const parent = dirname2(dir);
     if (parent === dir) return "cjs";
     dir = parent;
@@ -2084,7 +2090,7 @@ function safeRead(path) {
 }
 function reportHookScopeCheck(section2) {
   const hooksDir = join19(CLAUDE_HOME, "hooks");
-  if (!existsSync16(hooksDir)) {
+  if (!existsSync15(hooksDir)) {
     addItem(section2, `${dim(infoGlyph)} no ~/.claude/hooks; skipping module-scope check`);
     return;
   }
@@ -2111,7 +2117,7 @@ function reportHookScopeCheck(section2) {
 
 // src/commands.doctor.checks.hooks.ts
 init_color();
-import { existsSync as existsSync17 } from "node:fs";
+import { existsSync as existsSync16 } from "node:fs";
 import { join as join20 } from "node:path";
 init_config();
 function expandHome(token) {
@@ -2150,7 +2156,7 @@ function checkEventGroups(section2, event, groups) {
   for (const group of groups) {
     for (const cmd of commandsFromGroup(group)) {
       for (const resolved of claudePathsIn(cmd)) {
-        if (existsSync17(resolved)) continue;
+        if (existsSync16(resolved)) continue;
         addItem(section2, `${red(failGlyph)} hooks/${event}: command target missing: ${resolved}`);
         process.exitCode = 1;
         anyFail = true;
@@ -2161,7 +2167,7 @@ function checkEventGroups(section2, event, groups) {
 }
 function reportHooksTargetCheck(section2) {
   const settingsPath = join20(CLAUDE_HOME, "settings.json");
-  if (!existsSync17(settingsPath)) {
+  if (!existsSync16(settingsPath)) {
     addItem(section2, `${dim(infoGlyph)} no ~/.claude/settings.json; skipping hook target check`);
     return;
   }
@@ -2291,7 +2297,7 @@ function reportNodeEngineCheck(section2) {
 // src/commands.doctor.gitleaks-version.ts
 init_color();
 import { execFileSync as execFileSync7 } from "node:child_process";
-import { existsSync as existsSync18 } from "node:fs";
+import { existsSync as existsSync17 } from "node:fs";
 import { join as join21 } from "node:path";
 init_config();
 var SEMVER_MAJOR_MINOR = /^(\d+)\.(\d+)\.\d+$/;
@@ -2313,7 +2319,7 @@ function readGitleaksVersion(run, tomlExists) {
     return null;
   }
 }
-function reportGitleaksVersionCheck(section2, run = execFileSync7, tomlExists = existsSync18) {
+function reportGitleaksVersionCheck(section2, run = execFileSync7, tomlExists = existsSync17) {
   const raw = readGitleaksVersion(run, tomlExists);
   if (raw === null) return;
   const local = majorMinorOf(raw);
@@ -2487,7 +2493,7 @@ function cmdDoctor(opts = {}) {
   reportRepoState(host);
   const links = section("Shared links");
   const mapPath = join22(REPO_HOME, "path-map.json");
-  const rawMap = existsSync19(mapPath) ? readJsonSafe(mapPath, mapPath, links) : null;
+  const rawMap = existsSync18(mapPath) ? readJsonSafe(mapPath, mapPath, links) : null;
   const map = rawMap ?? { projects: {} };
   reportSharedLinks(links, map);
   const hooksScan = section("Hook targets");
@@ -2534,7 +2540,7 @@ function cmdDoctor(opts = {}) {
 // src/commands.drop-session.ts
 init_config();
 import { execFileSync as execFileSync12 } from "node:child_process";
-import { existsSync as existsSync21, readdirSync as readdirSync8, statSync as statSync5 } from "node:fs";
+import { existsSync as existsSync20, readdirSync as readdirSync8, statSync as statSync5 } from "node:fs";
 import { join as join25, relative as relative4 } from "node:path";
 
 // src/commands.drop-session.git.ts
@@ -2578,7 +2584,7 @@ function isInIndex(rel) {
 init_config();
 init_utils();
 init_utils_json();
-import { existsSync as existsSync20 } from "node:fs";
+import { existsSync as existsSync19 } from "node:fs";
 import { join as join23 } from "node:path";
 var SHARED_PROJECT_LOGICAL = /^shared\/projects\/([^/]+)\//;
 function reportScrubHint(id, matches) {
@@ -2596,7 +2602,7 @@ function reportScrubHint(id, matches) {
 function resolveLiveTranscript(id, matches) {
   try {
     const mapPath = join23(REPO_HOME, "path-map.json");
-    if (!existsSync20(mapPath)) return null;
+    if (!existsSync19(mapPath)) return null;
     const projects = readJson(mapPath).projects;
     for (const rel of matches) {
       const logical = SHARED_PROJECT_LOGICAL.exec(rel)?.[1];
@@ -2604,7 +2610,7 @@ function resolveLiveTranscript(id, matches) {
       const abs = projects[logical]?.[HOST];
       if (abs === void 0) continue;
       const live = join23(CLAUDE_HOME, "projects", encodePath(abs), `${id}.jsonl`);
-      if (existsSync20(live)) return live;
+      if (existsSync19(live)) return live;
     }
     return null;
   } catch {
@@ -2730,12 +2736,12 @@ function cmdDropSession(id) {
     fail(`invalid session id: ${id}`);
     process.exit(1);
   }
-  if (!existsSync21(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
+  if (!existsSync20(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
   const handle = acquireLock("drop-session");
   if (handle === null) process.exit(0);
   try {
     const repoProjects = join25(REPO_HOME, "shared", "projects");
-    if (!existsSync21(repoProjects)) {
+    if (!existsSync20(repoProjects)) {
       throw new NomadFatal(`no staged session matches ${id}`);
     }
     const matches = collectMatches(repoProjects, id);
@@ -2758,11 +2764,11 @@ function collectMatches(repoProjects, id) {
   const matches = [];
   for (const logical of readdirSync8(repoProjects)) {
     const candidate = join25(repoProjects, logical, `${id}.jsonl`);
-    if (existsSync21(candidate)) {
+    if (existsSync20(candidate)) {
       matches.push(relative4(REPO_HOME, candidate));
     }
     const dir = join25(repoProjects, logical, id);
-    if (existsSync21(dir) && statSync5(dir).isDirectory()) {
+    if (existsSync20(dir) && statSync5(dir).isDirectory()) {
       const dirRel = relative4(REPO_HOME, dir);
       const staged = expandStagedDir(dirRel);
       if (staged.length > 0) matches.push(...staged);
@@ -2798,15 +2804,15 @@ function unstageOne(rel) {
 
 // src/commands.redact.ts
 init_config();
-import { existsSync as existsSync23, statSync as statSync7 } from "node:fs";
+import { existsSync as existsSync22, statSync as statSync7 } from "node:fs";
 import { dirname as dirname4, join as join27 } from "node:path";
 
 // src/commands.redact.subtree.ts
-import { existsSync as existsSync22, lstatSync as lstatSync6, readFileSync as readFileSync9, readdirSync as readdirSync9, statSync as statSync6, writeFileSync as writeFileSync4 } from "node:fs";
+import { existsSync as existsSync21, lstatSync as lstatSync6, readFileSync as readFileSync9, readdirSync as readdirSync9, statSync as statSync6, writeFileSync as writeFileSync4 } from "node:fs";
 import { join as join26 } from "node:path";
 init_utils_fs();
 function collectFiles(dir, out) {
-  if (!existsSync22(dir)) return;
+  if (!existsSync21(dir)) return;
   const st = lstatSync6(dir);
   if (!st.isDirectory()) return;
   for (const entry of readdirSync9(dir)) {
@@ -2861,13 +2867,13 @@ init_utils();
 function resolveLiveTranscript2(id) {
   try {
     const mapPath = join27(REPO_HOME, "path-map.json");
-    if (!existsSync23(mapPath)) return null;
+    if (!existsSync22(mapPath)) return null;
     const projects = readJson(mapPath).projects;
     for (const hostMap of Object.values(projects)) {
       const abs = hostMap[HOST];
       if (abs === void 0) continue;
       const live = join27(CLAUDE_HOME, "projects", encodePath(abs), `${id}.jsonl`);
-      if (existsSync23(live)) return live;
+      if (existsSync22(live)) return live;
     }
     return null;
   } catch {
@@ -2885,12 +2891,12 @@ function cmdRedact(opts, nowMs = Date.now, scan = scanFile) {
     fail(`invalid session id: ${id}`);
     process.exit(1);
   }
-  if (!existsSync23(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
+  if (!existsSync22(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
   const handle = acquireLock("redact");
   if (handle === null) process.exit(0);
   try {
     const localPath = resolveLiveTranscript2(id);
-    if (localPath === null || !existsSync23(localPath)) {
+    if (localPath === null || !existsSync22(localPath)) {
       fail(`could not resolve local transcript for session ${id} on this host`);
       process.exitCode = 1;
       return;
@@ -2948,7 +2954,7 @@ ${lines}`);
 }
 
 // src/commands.pull.ts
-import { existsSync as existsSync29, mkdirSync as mkdirSync7 } from "node:fs";
+import { existsSync as existsSync28, mkdirSync as mkdirSync7 } from "node:fs";
 import { join as join33 } from "node:path";
 
 // src/commands.push.sections.ts
@@ -3045,7 +3051,7 @@ init_config();
 
 // src/extras-sync.ts
 init_config();
-import { existsSync as existsSync26 } from "node:fs";
+import { existsSync as existsSync25 } from "node:fs";
 import { join as join30 } from "node:path";
 
 // src/extras-sync.diff.ts
@@ -3073,7 +3079,7 @@ function listDivergingFiles(a, b) {
 
 // src/extras-sync.core.ts
 init_config();
-import { cpSync as cpSync4, existsSync as existsSync24, rmSync as rmSync7 } from "node:fs";
+import { cpSync as cpSync4, existsSync as existsSync23, rmSync as rmSync7 } from "node:fs";
 import { join as join28 } from "node:path";
 
 // src/extras-sync.guards.ts
@@ -3099,7 +3105,7 @@ init_utils_json();
 function loadValidatedExtras(opts) {
   const mapPath = join28(REPO_HOME, "path-map.json");
   const repoExtras = join28(REPO_HOME, "shared", "extras");
-  if (!existsSync24(mapPath) || opts.requireRepoExtras === true && !existsSync24(repoExtras)) {
+  if (!existsSync23(mapPath) || opts.requireRepoExtras === true && !existsSync23(repoExtras)) {
     if (opts.missingMsg !== void 0) log(opts.missingMsg);
     return null;
   }
@@ -3141,7 +3147,7 @@ init_utils_json();
 
 // src/extras-sync.remap.ts
 init_config();
-import { existsSync as existsSync25, mkdirSync as mkdirSync6 } from "node:fs";
+import { existsSync as existsSync24, mkdirSync as mkdirSync6 } from "node:fs";
 import { join as join29 } from "node:path";
 init_utils_fs();
 function runExtrasOp(v, dryRun, paths, backup) {
@@ -3150,7 +3156,7 @@ function runExtrasOp(v, dryRun, paths, backup) {
   const would = [];
   for (const t of eachExtrasTarget(v, counts)) {
     const { src, dst } = paths(t);
-    if (!existsSync25(src)) continue;
+    if (!existsSync24(src)) continue;
     const item = `${t.logical}/${t.dirname}`;
     if (dryRun) {
       would.push(item);
@@ -3210,7 +3216,7 @@ function divergenceCheckExtras(ts) {
   for (const { logical, localRoot, dirname: dirname6 } of eachExtrasTarget(v, counts)) {
     const local = join30(localRoot, dirname6);
     const repo = join30(REPO_HOME, "shared", "extras", logical, dirname6);
-    if (!existsSync26(local) || !existsSync26(repo)) continue;
+    if (!existsSync25(local) || !existsSync25(repo)) continue;
     const diff = listDivergingFiles(local, repo);
     if (diff.length === 0) continue;
     const projectBackupRoot = join30(backupRoot, encodePath(localRoot));
@@ -3226,7 +3232,7 @@ init_config();
 init_utils();
 init_utils_fs();
 init_utils_json();
-import { existsSync as existsSync27, lstatSync as lstatSync7, rmSync as rmSync8 } from "node:fs";
+import { existsSync as existsSync26, lstatSync as lstatSync7, rmSync as rmSync8 } from "node:fs";
 import { join as join31 } from "node:path";
 function applySharedLinks(ts, map, opts = {}) {
   const dryRun = opts.dryRun === true;
@@ -3234,9 +3240,9 @@ function applySharedLinks(ts, map, opts = {}) {
   for (const name of linkNames) {
     const linkPath = join31(CLAUDE_HOME, name);
     const target = join31(REPO_HOME, "shared", name);
-    if (!existsSync27(linkPath)) continue;
+    if (!existsSync26(linkPath)) continue;
     if (lstatSync7(linkPath).isSymbolicLink()) continue;
-    if (!existsSync27(target)) continue;
+    if (!existsSync26(target)) continue;
     if (dryRun) {
       log(`would auto-move non-symlink: ${linkPath} -> backup/${ts}/${name}`);
       continue;
@@ -3246,7 +3252,7 @@ function applySharedLinks(ts, map, opts = {}) {
   }
   for (const name of linkNames) {
     const target = join31(REPO_HOME, "shared", name);
-    if (!existsSync27(target)) continue;
+    if (!existsSync26(target)) continue;
     if (dryRun) {
       log(`would create symlink: ${join31(CLAUDE_HOME, name)} -> ${target}`);
       continue;
@@ -3258,15 +3264,15 @@ function regenerateSettings(ts, opts = {}) {
   const dryRun = opts.dryRun === true;
   const basePath = join31(REPO_HOME, "shared", "settings.base.json");
   const hostPath = join31(REPO_HOME, "hosts", `${HOST}.json`);
-  if (!existsSync27(basePath)) {
+  if (!existsSync26(basePath)) {
     die("repo not initialized; run 'nomad init' to scaffold");
   }
   const base = readJson(basePath);
-  const hasOverrides = existsSync27(hostPath);
+  const hasOverrides = existsSync26(hostPath);
   const overrides = hasOverrides ? readJson(hostPath) : {};
   const merged = deepMerge(base, overrides);
   const settingsPath = join31(CLAUDE_HOME, "settings.json");
-  if (!hasOverrides && existsSync27(settingsPath)) {
+  if (!hasOverrides && existsSync26(settingsPath)) {
     try {
       const existing = readJson(settingsPath);
       const baseKeys = new Set(Object.keys(base));
@@ -3292,7 +3298,7 @@ function regenerateSettings(ts, opts = {}) {
 
 // src/preview.ts
 init_config();
-import { existsSync as existsSync28 } from "node:fs";
+import { existsSync as existsSync27 } from "node:fs";
 import { join as join32 } from "node:path";
 
 // node_modules/diff/libesm/diff/base.js
@@ -3579,7 +3585,7 @@ function diffJsonStrings(currentJsonText, newJsonText) {
   return lines.join("\n");
 }
 function readJsonOrNull(path) {
-  if (!existsSync28(path)) return null;
+  if (!existsSync27(path)) return null;
   try {
     return readJson(path);
   } catch {
@@ -3593,12 +3599,12 @@ function previewSettings(basePath, hostPath, settingsPath) {
     return;
   }
   const hostOverrides = readJsonOrNull(hostPath);
-  if (hostOverrides === null && existsSync28(hostPath)) {
+  if (hostOverrides === null && existsSync27(hostPath)) {
     log(`settings.json: malformed hosts/${HOST}.json; ignoring overrides`);
   }
   const merged = deepMerge(base, hostOverrides ?? {});
   const current = readJsonOrNull(settingsPath);
-  if (current === null && existsSync28(settingsPath)) {
+  if (current === null && existsSync27(settingsPath)) {
     log("settings.json: malformed; skipping diff");
     return;
   }
@@ -3648,8 +3654,8 @@ function applyWetPull(ts, map) {
 }
 function cmdPull(opts = {}) {
   const dryRun = opts.dryRun === true;
-  if (!existsSync29(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
-  if (!existsSync29(join33(REPO_HOME, "shared", "settings.base.json"))) {
+  if (!existsSync28(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
+  if (!existsSync28(join33(REPO_HOME, "shared", "settings.base.json"))) {
     die("repo not initialized; run 'nomad init' to scaffold");
   }
   const handle = acquireLock("pull");
@@ -3669,7 +3675,7 @@ function cmdPull(opts = {}) {
     );
     gitOrFatal(["pull", "--rebase", "--autostash"], "git pull --rebase", REPO_HOME);
     const mapPath = join33(REPO_HOME, "path-map.json");
-    const map = existsSync29(mapPath) ? readPathMap(mapPath) : { projects: {} };
+    const map = existsSync28(mapPath) ? readPathMap(mapPath) : { projects: {} };
     divergenceCheckExtras(ts);
     if (dryRun) {
       const previewResult = computePreview(ts, map);
@@ -3692,7 +3698,7 @@ function cmdPull(opts = {}) {
 
 // src/commands.push.ts
 init_config();
-import { existsSync as existsSync32 } from "node:fs";
+import { existsSync as existsSync31 } from "node:fs";
 import { join as join38, relative as relative5 } from "node:path";
 
 // src/commands.push.allowlist.ts
@@ -3773,7 +3779,7 @@ import { createInterface } from "node:readline/promises";
 // src/commands.push.recovery.redact.ts
 init_config();
 init_config_sharedDirs_guard();
-import { cpSync as cpSync5, existsSync as existsSync30, mkdirSync as mkdirSync8, statSync as statSync8 } from "node:fs";
+import { cpSync as cpSync5, existsSync as existsSync29, mkdirSync as mkdirSync8, statSync as statSync8 } from "node:fs";
 import { dirname as dirname5, join as join34, sep as sep2 } from "node:path";
 init_push_gitleaks_scan();
 init_utils_json();
@@ -3863,7 +3869,7 @@ function applyRedact(f, ts, map, nowMs, scan = scanFile) {
   }
   mkdirSync8(stagedProjectDir, { recursive: true });
   cpSync5(localPath, join34(stagedProjectDir, `${sid}.jsonl`), { force: true });
-  if (existsSync30(sessionDir)) {
+  if (existsSync29(sessionDir)) {
     cpSync5(sessionDir, join34(stagedProjectDir, sid), { force: true, recursive: true });
   }
   return true;
@@ -4084,7 +4090,7 @@ init_color();
 init_config();
 init_config_sharedDirs_guard();
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { copyFileSync, existsSync as existsSync31, mkdirSync as mkdirSync9, readdirSync as readdirSync10, rmSync as rmSync11 } from "node:fs";
+import { copyFileSync, existsSync as existsSync30, mkdirSync as mkdirSync9, readdirSync as readdirSync10, rmSync as rmSync11 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join37 } from "node:path";
 init_push_leak_verdict();
@@ -4102,7 +4108,7 @@ function stageSessions(tmpRoot, map) {
     reverse.set(encodePath(p), logical);
   }
   const localProjects = join37(CLAUDE_HOME, "projects");
-  if (!existsSync31(localProjects)) return 0;
+  if (!existsSync30(localProjects)) return 0;
   let staged = 0;
   for (const dir of readdirSync10(localProjects)) {
     const logical = reverse.get(dir);
@@ -4124,7 +4130,7 @@ function stageExtras(tmpRoot, map) {
     for (const dirname6 of dirnames) {
       if (!whitelist.includes(dirname6)) continue;
       const src = join37(localRoot, dirname6);
-      if (!existsSync31(src)) continue;
+      if (!existsSync30(src)) continue;
       const dst = join37(tmpRoot, "shared", "extras", logical, dirname6);
       copyExtras(src, dst);
       staged++;
@@ -4144,7 +4150,7 @@ function previewPushLeaks(map) {
       return { leak: false, verdictRow: NOTHING_TO_SCAN_ROW, recovery: null, findings: [] };
     }
     const ignoreFile = join37(REPO_HOME, ".gitleaksignore");
-    if (existsSync31(ignoreFile)) {
+    if (existsSync30(ignoreFile)) {
       copyFileSync(ignoreFile, join37(tmpRoot, ".gitleaksignore"));
     }
     let findings;
@@ -4219,7 +4225,7 @@ async function cmdPush(opts = {}) {
   const allowAll = opts.allowAll === true;
   const allowRule = opts.allowRule;
   guardResolutionModeConflicts(dryRun, redactAll, allowAll, allowRule);
-  if (!existsSync32(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
+  if (!existsSync31(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
   const handle = acquireLock("push");
   if (handle === null) process.exit(0);
   try {
@@ -4238,7 +4244,7 @@ async function cmdPush(opts = {}) {
       return;
     }
     const mapPath = join38(REPO_HOME, "path-map.json");
-    if (!existsSync32(mapPath)) {
+    if (!existsSync31(mapPath)) {
       if (dryRun) return runDryRunPreview(st, null);
       die("path-map.json missing, cannot enforce push allow-list");
     }
@@ -4278,17 +4284,17 @@ init_config();
 
 // src/diff.ts
 init_config();
-import { existsSync as existsSync33 } from "node:fs";
+import { existsSync as existsSync32 } from "node:fs";
 import { join as join39 } from "node:path";
 init_utils();
 init_utils_fs();
 init_utils_json();
 function cmdDiff() {
   try {
-    if (!existsSync33(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
+    if (!existsSync32(REPO_HOME)) die(`repo not cloned at ${REPO_HOME}`);
     const ts = freshBackupTs(BACKUP_BASE);
     const mapPath = join39(REPO_HOME, "path-map.json");
-    const map = existsSync33(mapPath) ? readPathMap(mapPath) : { projects: {} };
+    const map = existsSync32(mapPath) ? readPathMap(mapPath) : { projects: {} };
     const result = computePreview(ts, map);
     emitSummary("diff", result.unmapped);
   } catch (err) {
@@ -4303,7 +4309,7 @@ function cmdDiff() {
 
 // src/init.ts
 init_config();
-import { existsSync as existsSync35, mkdirSync as mkdirSync10, writeFileSync as writeFileSync6 } from "node:fs";
+import { existsSync as existsSync34, mkdirSync as mkdirSync10, writeFileSync as writeFileSync6 } from "node:fs";
 import { join as join41 } from "node:path";
 
 // src/init.gh-onboard.ts
@@ -4385,16 +4391,16 @@ init_config();
 init_utils();
 init_utils_fs();
 init_utils_json();
-import { copyFileSync as copyFileSync2, cpSync as cpSync6, existsSync as existsSync34, rmSync as rmSync12, statSync as statSync9 } from "node:fs";
+import { copyFileSync as copyFileSync2, cpSync as cpSync6, existsSync as existsSync33, rmSync as rmSync12, statSync as statSync9 } from "node:fs";
 import { join as join40 } from "node:path";
 function snapshotIntoShared(map) {
   for (const name of allSharedLinks(map)) {
     const src = join40(CLAUDE_HOME, name);
-    if (!existsSync34(src)) continue;
+    if (!existsSync33(src)) continue;
     const dst = join40(REPO_HOME, "shared", name);
     if (statSync9(src).isDirectory()) {
       const gk = join40(dst, ".gitkeep");
-      if (existsSync34(gk)) rmSync12(gk);
+      if (existsSync33(gk)) rmSync12(gk);
       cpSync6(src, dst, { recursive: true, force: false, errorOnExist: true });
     } else {
       copyFileSync2(src, dst);
@@ -4402,7 +4408,7 @@ function snapshotIntoShared(map) {
     log(`snapshotted shared/${name} from ${src}`);
   }
   const userSettings = join40(CLAUDE_HOME, "settings.json");
-  if (existsSync34(userSettings)) {
+  if (existsSync33(userSettings)) {
     let parsed;
     try {
       parsed = readJson(userSettings);
@@ -4429,7 +4435,7 @@ function preflightConflict(repoHome) {
     join41(repoHome, "shared")
   ];
   for (const c of candidates) {
-    if (existsSync35(c)) return c;
+    if (existsSync34(c)) return c;
   }
   return null;
 }
@@ -4448,7 +4454,7 @@ function cmdInit(opts = {}) {
     mkdirSync10(join41(REPO_HOME, "shared", name), { recursive: true });
   }
   const userClaudeMd = join41(CLAUDE_HOME, "CLAUDE.md");
-  if (!snapshot || !existsSync35(userClaudeMd)) {
+  if (!snapshot || !existsSync34(userClaudeMd)) {
     writeFileSync6(join41(REPO_HOME, "shared", "CLAUDE.md"), SHARED_CLAUDE_MD);
     log("created shared/CLAUDE.md");
   }
@@ -4722,7 +4728,7 @@ function parsePushArgs(argv) {
 // package.json
 var package_default = {
   name: "claude-nomad",
-  version: "0.38.0",
+  version: "0.38.1",
   type: "module",
   description: "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   keywords: [
@@ -4912,7 +4918,7 @@ var DEFAULT_HELP = [
 init_config();
 init_utils();
 init_utils_json();
-import { existsSync as existsSync36, readFileSync as readFileSync11, readdirSync as readdirSync11 } from "node:fs";
+import { existsSync as existsSync35, readFileSync as readFileSync11, readdirSync as readdirSync11 } from "node:fs";
 import { join as join42 } from "node:path";
 function resumeCmd(sessionId) {
   if (!/^[A-Za-z0-9_-]+$/.test(sessionId) || sessionId.length > 128) {
@@ -4920,7 +4926,7 @@ function resumeCmd(sessionId) {
     process.exit(1);
   }
   const projectsRoot = join42(CLAUDE_HOME, "projects");
-  if (!existsSync36(projectsRoot)) {
+  if (!existsSync35(projectsRoot)) {
     fail(`${projectsRoot} does not exist`);
     process.exit(1);
   }
@@ -4935,7 +4941,7 @@ function resumeCmd(sessionId) {
     process.exit(1);
   }
   const mapPath = join42(REPO_HOME, "path-map.json");
-  if (!existsSync36(mapPath)) {
+  if (!existsSync35(mapPath)) {
     fail("path-map.json missing");
     process.exit(1);
   }
@@ -4959,7 +4965,7 @@ function resumeCmd(sessionId) {
 function findTranscriptPath(projectsRoot, sessionId) {
   for (const dir of readdirSync11(projectsRoot)) {
     const candidate = join42(projectsRoot, dir, `${sessionId}.jsonl`);
-    if (existsSync36(candidate)) return candidate;
+    if (existsSync35(candidate)) return candidate;
   }
   return null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.38.0",
+  "version": "0.38.1",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [