claude-nomad 0.46.0 → 0.47.1

package/CHANGELOG.md

@@ -1,5 +1,38 @@
 # Changelog
 
+## [0.47.1](https://github.com/funkadelic/claude-nomad/compare/v0.47.0...v0.47.1) (2026-06-09)
+
+
+### Fixed
+
+* **extras:** preserve host-local deny-set files on .claude pull ([#276](https://github.com/funkadelic/claude-nomad/issues/276)) ([3742c3e](https://github.com/funkadelic/claude-nomad/commit/3742c3e4067c1c986e7f182011581d4c867847b0))
+
+## [0.47.0](https://github.com/funkadelic/claude-nomad/compare/v0.46.0...v0.47.0) (2026-06-09)
+
+
+### Added
+
+* **extras:** add .claude as a supported per-project extra ([#274](https://github.com/funkadelic/claude-nomad/issues/274)) ([41a79a3](https://github.com/funkadelic/claude-nomad/commit/41a79a3fa9963f2ade76ec4d89d880d9634bb0d2))
+
+
+### Changed
+
+* remove orphaned shared/ folder from package ([#267](https://github.com/funkadelic/claude-nomad/issues/267)) ([93e4119](https://github.com/funkadelic/claude-nomad/commit/93e411951df4aa600e94da8d9db4298129ad1fa2))
+
+
+### Documentation
+
+* **extras:** document .claude extra in security, features, and recovery pages ([#275](https://github.com/funkadelic/claude-nomad/issues/275)) ([232016c](https://github.com/funkadelic/claude-nomad/commit/232016c5cb14988fb3fe8dd3f1f558d49789fffb))
+* **faq:** explain unmapped local projects in nomad doctor ([#273](https://github.com/funkadelic/claude-nomad/issues/273)) ([6c2e9d4](https://github.com/funkadelic/claude-nomad/commit/6c2e9d475decb8cea3e159a3047f5f9daff24785))
+
+
+### Dependencies
+
+* bump @types/node in the dev-dependencies group ([#272](https://github.com/funkadelic/claude-nomad/issues/272)) ([951471e](https://github.com/funkadelic/claude-nomad/commit/951471e0879eee0e10756f67a9e58554dce96c52))
+* bump actions/checkout from 6.0.2 to 6.0.3 ([#269](https://github.com/funkadelic/claude-nomad/issues/269)) ([21b7490](https://github.com/funkadelic/claude-nomad/commit/21b7490b273bfe22aa76216edc5de44a49b57c59))
+* bump codecov/codecov-action from 6.0.1 to 7.0.0 ([#270](https://github.com/funkadelic/claude-nomad/issues/270)) ([905d468](https://github.com/funkadelic/claude-nomad/commit/905d46832e6d52c825419be39fac08d5408de39f))
+* bump github/codeql-action from 4.36.0 to 4.36.2 ([#271](https://github.com/funkadelic/claude-nomad/issues/271)) ([6ff50c7](https://github.com/funkadelic/claude-nomad/commit/6ff50c76d3ddc9e0cd8247f572288b722cd588b5))
+
 ## [0.46.0](https://github.com/funkadelic/claude-nomad/compare/v0.45.0...v0.46.0) (2026-06-08)
 
 

package/dist/nomad.mjs

@@ -33,7 +33,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 ));
 
 // src/config.never-sync.ts
-var NEVER_SYNC;
+var NEVER_SYNC, CLAUDE_EXTRA_NEVER_SYNC;
 var init_config_never_sync = __esm({
   "src/config.never-sync.ts"() {
     "use strict";
@@ -62,6 +62,7 @@ var init_config_never_sync = __esm({
       "security",
       "sessions"
     ]);
+    CLAUDE_EXTRA_NEVER_SYNC = /* @__PURE__ */ new Set([...NEVER_SYNC, "projects"]);
   }
 });
 
@@ -407,7 +408,7 @@ var init_config = __esm({
       "my-statusline.cjs",
       "hooks"
     ];
-    SUPPORTED_EXTRAS = [".planning", "CLAUDE.md"];
+    SUPPORTED_EXTRAS = [".planning", "CLAUDE.md", ".claude"];
     ALWAYS_NEVER_SYNC = /* @__PURE__ */ new Set([
       ".claude.json",
       ".credentials.json",
@@ -4239,8 +4240,8 @@ function listDivergingFiles(a, b) {
 
 // src/extras-sync.core.ts
 init_config();
-import { cpSync as cpSync6, existsSync as existsSync30, rmSync as rmSync10 } from "node:fs";
-import { join as join36 } from "node:path";
+import { cpSync as cpSync6, existsSync as existsSync30, lstatSync as lstatSync8, readdirSync as readdirSync11, rmSync as rmSync10 } from "node:fs";
+import { basename, join as join36 } from "node:path";
 
 // src/extras-sync.guards.ts
 init_utils();
@@ -4301,6 +4302,48 @@ function copyExtras(src, dst) {
   rmSync10(dst, { recursive: true, force: true });
   cpSync6(src, dst, { recursive: true, force: true, verbatimSymlinks: true });
 }
+function extrasDenySet(dirname7) {
+  return dirname7 === ".claude" ? CLAUDE_EXTRA_NEVER_SYNC : ALWAYS_NEVER_SYNC;
+}
+function copyExtrasFiltered(src, dst, blockSet) {
+  rmSync10(dst, { recursive: true, force: true });
+  cpSync6(src, dst, {
+    recursive: true,
+    force: true,
+    verbatimSymlinks: true,
+    filter: (srcEntry) => srcEntry === src || !blockSet.has(basename(srcEntry))
+  });
+}
+function prunePreservingDenied(src, dst, blockSet) {
+  for (const name of readdirSync11(dst)) {
+    if (blockSet.has(name)) continue;
+    const dstPath = join36(dst, name);
+    const srcStat = lstatSync8(join36(src, name), { throwIfNoEntry: false });
+    if (srcStat === void 0) {
+      rmSync10(dstPath, { recursive: true, force: true });
+      continue;
+    }
+    const dstStat = lstatSync8(dstPath);
+    if (srcStat.isDirectory() && dstStat.isDirectory()) {
+      prunePreservingDenied(join36(src, name), dstPath, blockSet);
+    } else if (srcStat.isDirectory() !== dstStat.isDirectory()) {
+      rmSync10(dstPath, { recursive: true, force: true });
+    }
+  }
+}
+function copyExtrasFilteredPreserving(src, dst, blockSet) {
+  const dstStat = lstatSync8(dst, { throwIfNoEntry: false });
+  if (dstStat !== void 0) {
+    if (dstStat.isDirectory()) prunePreservingDenied(src, dst, blockSet);
+    else rmSync10(dst, { recursive: true, force: true });
+  }
+  cpSync6(src, dst, {
+    recursive: true,
+    force: true,
+    verbatimSymlinks: true,
+    filter: (srcEntry) => srcEntry === src || !blockSet.has(basename(srcEntry))
+  });
+}
 
 // src/extras-sync.ts
 init_utils();
@@ -4311,7 +4354,7 @@ init_config();
 import { existsSync as existsSync31, mkdirSync as mkdirSync7 } from "node:fs";
 import { join as join37 } from "node:path";
 init_utils_fs();
-function runExtrasOp(v, dryRun, paths, backup) {
+function runExtrasOp(v, dryRun, paths, backup, copy) {
   const counts = { unmapped: 0, skipped: 0 };
   const done = [];
   const would = [];
@@ -4324,7 +4367,7 @@ function runExtrasOp(v, dryRun, paths, backup) {
       continue;
     }
     backup(dst, t.localRoot);
-    copyExtras(src, dst);
+    copy(src, dst, t.dirname);
     done.push(item2);
   }
   return { ...counts, done, would };
@@ -4343,7 +4386,10 @@ function remapExtrasPush(ts, opts = {}) {
       src: join37(localRoot, dirname7),
       dst: join37(repoExtras, logical, dirname7)
     }),
-    (dst) => backupRepoWrite(dst, ts, repo)
+    (dst) => backupRepoWrite(dst, ts, repo),
+    // Push filters every extra by its per-name denylist: `.claude` gets the
+    // full NEVER_SYNC boundary, `.planning` keeps the narrow ALWAYS_NEVER_SYNC.
+    (src, dst, dirname7) => copyExtrasFiltered(src, dst, extrasDenySet(dirname7))
   );
   return { unmapped, skipped, pushed: done, wouldPush: would };
 }
@@ -4364,7 +4410,17 @@ function remapExtrasPull(ts, opts = {}) {
     }),
     // Snapshot the host-side dst BEFORE copyExtras clobbers it. Anchor on
     // localRoot so the backup tree mirrors the project layout.
-    (dst, localRoot) => backupExtrasWrite(dst, ts, localRoot)
+    (dst, localRoot) => backupExtrasWrite(dst, ts, localRoot),
+    // Pull routes `.claude` through copyExtrasFilteredPreserving so host-local
+    // deny-set files already on disk (e.g. settings.local.json) are preserved
+    // instead of being wiped by a blanket rmSync. The same deny-set filter still
+    // strips blocked basenames from the src copy (defense-in-depth: a repo
+    // poisoned out-of-band cannot restore a blocked per-host file). Synced
+    // non-deny files that are absent from src are still mirror-pruned. This
+    // preservation is `.claude`-only; `.planning` and `CLAUDE.md` use the
+    // exact-mirror copyExtras (documented restore semantics; they rarely carry
+    // host-local files, so the exact mirror is the correct default).
+    (src, dst, dirname7) => dirname7 === ".claude" ? copyExtrasFilteredPreserving(src, dst, extrasDenySet(dirname7)) : copyExtras(src, dst)
   );
   return { unmapped, skipped, pulled: done, wouldPull: would };
 }
@@ -4395,7 +4451,7 @@ init_config();
 init_utils();
 init_utils_fs();
 init_utils_json();
-import { existsSync as existsSync33, lstatSync as lstatSync8, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync33, lstatSync as lstatSync9, rmSync as rmSync11 } from "node:fs";
 import { join as join39 } from "node:path";
 function emitAutoMove(onPreview, linkPath, ts, name) {
   if (onPreview) {
@@ -4412,14 +4468,14 @@ function emitCreate(onPreview, from, to) {
   }
 }
 function isAlreadySymlink(linkPath) {
-  return existsSync33(linkPath) && lstatSync8(linkPath).isSymbolicLink();
+  return existsSync33(linkPath) && lstatSync9(linkPath).isSymbolicLink();
 }
 function runAutoMovePasses(linkNames, claude, repo, ts, dryRun, onPreview) {
   for (const name of linkNames) {
     const linkPath = join39(claude, name);
     const target = join39(repo, "shared", name);
     if (!existsSync33(linkPath)) continue;
-    if (lstatSync8(linkPath).isSymbolicLink()) continue;
+    if (lstatSync9(linkPath).isSymbolicLink()) continue;
     if (!existsSync33(target)) continue;
     if (dryRun) {
       emitAutoMove(onPreview, linkPath, ts, name);
@@ -5055,9 +5111,15 @@ function isAllowed(path, allowed) {
   }
   return false;
 }
+function blockSetFor(segments) {
+  if (segments[0] !== "shared" || segments[1] !== "extras") return NEVER_SYNC;
+  return segments[3] === ".claude" ? CLAUDE_EXTRA_NEVER_SYNC : ALWAYS_NEVER_SYNC;
+}
 function isNeverSync(path) {
-  const blockSet = path.startsWith("shared/extras/") ? ALWAYS_NEVER_SYNC : NEVER_SYNC;
-  for (const segment of path.split("/")) {
+  const segments = path.split("/");
+  const blockSet = blockSetFor(segments);
+  const scan = segments[0] === "shared" && segments[1] === "extras" ? segments.slice(4) : segments;
+  for (const segment of scan) {
     if (blockSet.has(segment)) return true;
   }
   return false;
@@ -5118,7 +5180,7 @@ init_color();
 init_config();
 init_config_sharedDirs_guard();
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync9, readdirSync as readdirSync11, rmSync as rmSync12 } from "node:fs";
+import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync9, readdirSync as readdirSync12, rmSync as rmSync12 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join42 } from "node:path";
 init_push_leak_verdict();
@@ -5138,7 +5200,7 @@ function stageSessions(tmpRoot, map) {
   const localProjects = join42(claudeHome(), "projects");
   if (!existsSync36(localProjects)) return 0;
   let staged = 0;
-  for (const dir of readdirSync11(localProjects)) {
+  for (const dir of readdirSync12(localProjects)) {
     const logical = reverse.get(dir);
     if (!logical) continue;
     copyDirJsonlOnly(join42(localProjects, dir), join42(tmpRoot, "shared", "projects", logical));
@@ -5802,7 +5864,7 @@ function parsePushArgs(argv) {
 // package.json
 var package_default = {
   name: "claude-nomad",
-  version: "0.46.0",
+  version: "0.47.1",
   type: "module",
   description: "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   keywords: [
@@ -5825,7 +5887,6 @@ var package_default = {
   },
   files: [
     "dist/",
-    "shared/.gitignore",
     ".gitleaks.toml",
     "README.md",
     "CHANGELOG.md",
@@ -6004,7 +6065,7 @@ var DEFAULT_HELP = [
 init_config();
 init_utils();
 init_utils_json();
-import { existsSync as existsSync41, readFileSync as readFileSync14, readdirSync as readdirSync12 } from "node:fs";
+import { existsSync as existsSync41, readFileSync as readFileSync14, readdirSync as readdirSync13 } from "node:fs";
 import { join as join47 } from "node:path";
 function resumeCmd(sessionId) {
   if (!/^[A-Za-z0-9_-]+$/.test(sessionId) || sessionId.length > 128) {
@@ -6049,7 +6110,7 @@ function resumeCmd(sessionId) {
   console.log(`cd ${shQuote(hit.localPath)} && claude --resume ${shQuote(sessionId)}`);
 }
 function findTranscriptPath(projectsRoot, sessionId) {
-  for (const dir of readdirSync12(projectsRoot)) {
+  for (const dir of readdirSync13(projectsRoot)) {
     const candidate = join47(projectsRoot, dir, `${sessionId}.jsonl`);
     if (existsSync41(candidate)) return candidate;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.46.0",
+  "version": "0.47.1",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [
@@ -23,7 +23,6 @@
   },
   "files": [
     "dist/",
-    "shared/.gitignore",
     ".gitleaks.toml",
     "README.md",
     "CHANGELOG.md",

package/shared/.gitignore

@@ -1,9 +0,0 @@
-*.token
-*.key
-.env
-.env.*
-.claude.json
-settings.local.json
-*.pem
-id_rsa
-id_ed25519