claude-nomad 0.47.0 → 0.47.1

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.47.1](https://github.com/funkadelic/claude-nomad/compare/v0.47.0...v0.47.1) (2026-06-09)
+
+
+### Fixed
+
+* **extras:** preserve host-local deny-set files on .claude pull ([#276](https://github.com/funkadelic/claude-nomad/issues/276)) ([3742c3e](https://github.com/funkadelic/claude-nomad/commit/3742c3e4067c1c986e7f182011581d4c867847b0))
+
 ## [0.47.0](https://github.com/funkadelic/claude-nomad/compare/v0.46.0...v0.47.0) (2026-06-09)
 
 

package/dist/nomad.mjs

@@ -4240,7 +4240,7 @@ function listDivergingFiles(a, b) {
 
 // src/extras-sync.core.ts
 init_config();
-import { cpSync as cpSync6, existsSync as existsSync30, rmSync as rmSync10 } from "node:fs";
+import { cpSync as cpSync6, existsSync as existsSync30, lstatSync as lstatSync8, readdirSync as readdirSync11, rmSync as rmSync10 } from "node:fs";
 import { basename, join as join36 } from "node:path";
 
 // src/extras-sync.guards.ts
@@ -4314,6 +4314,36 @@ function copyExtrasFiltered(src, dst, blockSet) {
     filter: (srcEntry) => srcEntry === src || !blockSet.has(basename(srcEntry))
   });
 }
+function prunePreservingDenied(src, dst, blockSet) {
+  for (const name of readdirSync11(dst)) {
+    if (blockSet.has(name)) continue;
+    const dstPath = join36(dst, name);
+    const srcStat = lstatSync8(join36(src, name), { throwIfNoEntry: false });
+    if (srcStat === void 0) {
+      rmSync10(dstPath, { recursive: true, force: true });
+      continue;
+    }
+    const dstStat = lstatSync8(dstPath);
+    if (srcStat.isDirectory() && dstStat.isDirectory()) {
+      prunePreservingDenied(join36(src, name), dstPath, blockSet);
+    } else if (srcStat.isDirectory() !== dstStat.isDirectory()) {
+      rmSync10(dstPath, { recursive: true, force: true });
+    }
+  }
+}
+function copyExtrasFilteredPreserving(src, dst, blockSet) {
+  const dstStat = lstatSync8(dst, { throwIfNoEntry: false });
+  if (dstStat !== void 0) {
+    if (dstStat.isDirectory()) prunePreservingDenied(src, dst, blockSet);
+    else rmSync10(dst, { recursive: true, force: true });
+  }
+  cpSync6(src, dst, {
+    recursive: true,
+    force: true,
+    verbatimSymlinks: true,
+    filter: (srcEntry) => srcEntry === src || !blockSet.has(basename(srcEntry))
+  });
+}
 
 // src/extras-sync.ts
 init_utils();
@@ -4381,12 +4411,16 @@ function remapExtrasPull(ts, opts = {}) {
     // Snapshot the host-side dst BEFORE copyExtras clobbers it. Anchor on
     // localRoot so the backup tree mirrors the project layout.
     (dst, localRoot) => backupExtrasWrite(dst, ts, localRoot),
-    // Pull filters `.claude` against its NEVER_SYNC boundary so a repo poisoned
-    // out-of-band cannot restore a blocked per-host file (e.g. settings.local.json)
-    // onto this host. Other extras use the exact-mirror copyExtras: the repo is
-    // clean once push filters, and exact mirror is the documented restore for
-    // `.planning`.
-    (src, dst, dirname7) => dirname7 === ".claude" ? copyExtrasFiltered(src, dst, extrasDenySet(dirname7)) : copyExtras(src, dst)
+    // Pull routes `.claude` through copyExtrasFilteredPreserving so host-local
+    // deny-set files already on disk (e.g. settings.local.json) are preserved
+    // instead of being wiped by a blanket rmSync. The same deny-set filter still
+    // strips blocked basenames from the src copy (defense-in-depth: a repo
+    // poisoned out-of-band cannot restore a blocked per-host file). Synced
+    // non-deny files that are absent from src are still mirror-pruned. This
+    // preservation is `.claude`-only; `.planning` and `CLAUDE.md` use the
+    // exact-mirror copyExtras (documented restore semantics; they rarely carry
+    // host-local files, so the exact mirror is the correct default).
+    (src, dst, dirname7) => dirname7 === ".claude" ? copyExtrasFilteredPreserving(src, dst, extrasDenySet(dirname7)) : copyExtras(src, dst)
   );
   return { unmapped, skipped, pulled: done, wouldPull: would };
 }
@@ -4417,7 +4451,7 @@ init_config();
 init_utils();
 init_utils_fs();
 init_utils_json();
-import { existsSync as existsSync33, lstatSync as lstatSync8, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync33, lstatSync as lstatSync9, rmSync as rmSync11 } from "node:fs";
 import { join as join39 } from "node:path";
 function emitAutoMove(onPreview, linkPath, ts, name) {
   if (onPreview) {
@@ -4434,14 +4468,14 @@ function emitCreate(onPreview, from, to) {
   }
 }
 function isAlreadySymlink(linkPath) {
-  return existsSync33(linkPath) && lstatSync8(linkPath).isSymbolicLink();
+  return existsSync33(linkPath) && lstatSync9(linkPath).isSymbolicLink();
 }
 function runAutoMovePasses(linkNames, claude, repo, ts, dryRun, onPreview) {
   for (const name of linkNames) {
     const linkPath = join39(claude, name);
     const target = join39(repo, "shared", name);
     if (!existsSync33(linkPath)) continue;
-    if (lstatSync8(linkPath).isSymbolicLink()) continue;
+    if (lstatSync9(linkPath).isSymbolicLink()) continue;
     if (!existsSync33(target)) continue;
     if (dryRun) {
       emitAutoMove(onPreview, linkPath, ts, name);
@@ -5146,7 +5180,7 @@ init_color();
 init_config();
 init_config_sharedDirs_guard();
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync9, readdirSync as readdirSync11, rmSync as rmSync12 } from "node:fs";
+import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync9, readdirSync as readdirSync12, rmSync as rmSync12 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join42 } from "node:path";
 init_push_leak_verdict();
@@ -5166,7 +5200,7 @@ function stageSessions(tmpRoot, map) {
   const localProjects = join42(claudeHome(), "projects");
   if (!existsSync36(localProjects)) return 0;
   let staged = 0;
-  for (const dir of readdirSync11(localProjects)) {
+  for (const dir of readdirSync12(localProjects)) {
     const logical = reverse.get(dir);
     if (!logical) continue;
     copyDirJsonlOnly(join42(localProjects, dir), join42(tmpRoot, "shared", "projects", logical));
@@ -5830,7 +5864,7 @@ function parsePushArgs(argv) {
 // package.json
 var package_default = {
   name: "claude-nomad",
-  version: "0.47.0",
+  version: "0.47.1",
   type: "module",
   description: "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   keywords: [
@@ -6031,7 +6065,7 @@ var DEFAULT_HELP = [
 init_config();
 init_utils();
 init_utils_json();
-import { existsSync as existsSync41, readFileSync as readFileSync14, readdirSync as readdirSync12 } from "node:fs";
+import { existsSync as existsSync41, readFileSync as readFileSync14, readdirSync as readdirSync13 } from "node:fs";
 import { join as join47 } from "node:path";
 function resumeCmd(sessionId) {
   if (!/^[A-Za-z0-9_-]+$/.test(sessionId) || sessionId.length > 128) {
@@ -6076,7 +6110,7 @@ function resumeCmd(sessionId) {
   console.log(`cd ${shQuote(hit.localPath)} && claude --resume ${shQuote(sessionId)}`);
 }
 function findTranscriptPath(projectsRoot, sessionId) {
-  for (const dir of readdirSync12(projectsRoot)) {
+  for (const dir of readdirSync13(projectsRoot)) {
     const candidate = join47(projectsRoot, dir, `${sessionId}.jsonl`);
     if (existsSync41(candidate)) return candidate;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.47.0",
+  "version": "0.47.1",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [