claude-nomad 0.47.0 → 0.48.0

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.48.0](https://github.com/funkadelic/claude-nomad/compare/v0.47.1...v0.48.0) (2026-06-09)
+
+
+### Added
+
+* **push:** surface changed shared config in push output ([#278](https://github.com/funkadelic/claude-nomad/issues/278)) ([4774661](https://github.com/funkadelic/claude-nomad/commit/477466138e203f861e60c72cb6522f25393b3987))
+* **update:** frame update output and report new version ([#279](https://github.com/funkadelic/claude-nomad/issues/279)) ([9342de1](https://github.com/funkadelic/claude-nomad/commit/9342de1187db1fd115cc73cb2b516a9477b67a54))
+
+## [0.47.1](https://github.com/funkadelic/claude-nomad/compare/v0.47.0...v0.47.1) (2026-06-09)
+
+
+### Fixed
+
+* **extras:** preserve host-local deny-set files on .claude pull ([#276](https://github.com/funkadelic/claude-nomad/issues/276)) ([3742c3e](https://github.com/funkadelic/claude-nomad/commit/3742c3e4067c1c986e7f182011581d4c867847b0))
+
 ## [0.47.0](https://github.com/funkadelic/claude-nomad/compare/v0.46.0...v0.47.0) (2026-06-09)
 
 

package/dist/nomad.mjs

@@ -4166,10 +4166,18 @@ function buildExtrasSection(items, extrasSkipped) {
   if (skip !== null) addItem(s, skip);
   return s;
 }
+function buildGlobalConfigSection(rows) {
+  const s = section("Global config");
+  for (const row2 of rows) {
+    addItem(s, `${green(okGlyph)} ${row2.label} ${row2.path}`);
+  }
+  return s;
+}
 function syncedSections(st) {
   const sessions = st.dryRun ? st.remap.wouldPush : st.remap.pushed;
   const extras = st.dryRun ? st.extras.wouldPush : st.extras.pushed;
   return [
+    buildGlobalConfigSection(st.globalConfig),
     buildSessionsSection(sessions, st.remap.unmapped),
     buildExtrasSection(extras, st.extras.skipped)
   ];
@@ -4240,7 +4248,7 @@ function listDivergingFiles(a, b) {
 
 // src/extras-sync.core.ts
 init_config();
-import { cpSync as cpSync6, existsSync as existsSync30, rmSync as rmSync10 } from "node:fs";
+import { cpSync as cpSync6, existsSync as existsSync30, lstatSync as lstatSync8, readdirSync as readdirSync11, rmSync as rmSync10 } from "node:fs";
 import { basename, join as join36 } from "node:path";
 
 // src/extras-sync.guards.ts
@@ -4314,6 +4322,36 @@ function copyExtrasFiltered(src, dst, blockSet) {
     filter: (srcEntry) => srcEntry === src || !blockSet.has(basename(srcEntry))
   });
 }
+function prunePreservingDenied(src, dst, blockSet) {
+  for (const name of readdirSync11(dst)) {
+    if (blockSet.has(name)) continue;
+    const dstPath = join36(dst, name);
+    const srcStat = lstatSync8(join36(src, name), { throwIfNoEntry: false });
+    if (srcStat === void 0) {
+      rmSync10(dstPath, { recursive: true, force: true });
+      continue;
+    }
+    const dstStat = lstatSync8(dstPath);
+    if (srcStat.isDirectory() && dstStat.isDirectory()) {
+      prunePreservingDenied(join36(src, name), dstPath, blockSet);
+    } else if (srcStat.isDirectory() !== dstStat.isDirectory()) {
+      rmSync10(dstPath, { recursive: true, force: true });
+    }
+  }
+}
+function copyExtrasFilteredPreserving(src, dst, blockSet) {
+  const dstStat = lstatSync8(dst, { throwIfNoEntry: false });
+  if (dstStat !== void 0) {
+    if (dstStat.isDirectory()) prunePreservingDenied(src, dst, blockSet);
+    else rmSync10(dst, { recursive: true, force: true });
+  }
+  cpSync6(src, dst, {
+    recursive: true,
+    force: true,
+    verbatimSymlinks: true,
+    filter: (srcEntry) => srcEntry === src || !blockSet.has(basename(srcEntry))
+  });
+}
 
 // src/extras-sync.ts
 init_utils();
@@ -4381,12 +4419,16 @@ function remapExtrasPull(ts, opts = {}) {
     // Snapshot the host-side dst BEFORE copyExtras clobbers it. Anchor on
     // localRoot so the backup tree mirrors the project layout.
     (dst, localRoot) => backupExtrasWrite(dst, ts, localRoot),
-    // Pull filters `.claude` against its NEVER_SYNC boundary so a repo poisoned
-    // out-of-band cannot restore a blocked per-host file (e.g. settings.local.json)
-    // onto this host. Other extras use the exact-mirror copyExtras: the repo is
-    // clean once push filters, and exact mirror is the documented restore for
-    // `.planning`.
-    (src, dst, dirname7) => dirname7 === ".claude" ? copyExtrasFiltered(src, dst, extrasDenySet(dirname7)) : copyExtras(src, dst)
+    // Pull routes `.claude` through copyExtrasFilteredPreserving so host-local
+    // deny-set files already on disk (e.g. settings.local.json) are preserved
+    // instead of being wiped by a blanket rmSync. The same deny-set filter still
+    // strips blocked basenames from the src copy (defense-in-depth: a repo
+    // poisoned out-of-band cannot restore a blocked per-host file). Synced
+    // non-deny files that are absent from src are still mirror-pruned. This
+    // preservation is `.claude`-only; `.planning` and `CLAUDE.md` use the
+    // exact-mirror copyExtras (documented restore semantics; they rarely carry
+    // host-local files, so the exact mirror is the correct default).
+    (src, dst, dirname7) => dirname7 === ".claude" ? copyExtrasFilteredPreserving(src, dst, extrasDenySet(dirname7)) : copyExtras(src, dst)
   );
   return { unmapped, skipped, pulled: done, wouldPull: would };
 }
@@ -4417,7 +4459,7 @@ init_config();
 init_utils();
 init_utils_fs();
 init_utils_json();
-import { existsSync as existsSync33, lstatSync as lstatSync8, rmSync as rmSync11 } from "node:fs";
+import { existsSync as existsSync33, lstatSync as lstatSync9, rmSync as rmSync11 } from "node:fs";
 import { join as join39 } from "node:path";
 function emitAutoMove(onPreview, linkPath, ts, name) {
   if (onPreview) {
@@ -4434,14 +4476,14 @@ function emitCreate(onPreview, from, to) {
   }
 }
 function isAlreadySymlink(linkPath) {
-  return existsSync33(linkPath) && lstatSync8(linkPath).isSymbolicLink();
+  return existsSync33(linkPath) && lstatSync9(linkPath).isSymbolicLink();
 }
 function runAutoMovePasses(linkNames, claude, repo, ts, dryRun, onPreview) {
   for (const name of linkNames) {
     const linkPath = join39(claude, name);
     const target = join39(repo, "shared", name);
     if (!existsSync33(linkPath)) continue;
-    if (lstatSync8(linkPath).isSymbolicLink()) continue;
+    if (lstatSync9(linkPath).isSymbolicLink()) continue;
     if (!existsSync33(target)) continue;
     if (dryRun) {
       emitAutoMove(onPreview, linkPath, ts, name);
@@ -5137,6 +5179,77 @@ function enforceAllowList(statusPorcelain, map) {
   throw new NomadFatal("push allow-list violations");
 }
 
+// src/push-global-config.ts
+init_config();
+import { execFileSync as execFileSync15 } from "node:child_process";
+var STATUS_LABELS = {
+  A: "add",
+  M: "modify",
+  D: "delete",
+  R: "rename",
+  C: "copy",
+  T: "type-change",
+  U: "unmerged",
+  X: "unknown"
+};
+function labelForStatus(statusToken) {
+  const letter = statusToken[0] ?? "";
+  return STATUS_LABELS[letter] ?? "change";
+}
+function buildPrefixSets(hostname2) {
+  const exactPrefixes = /* @__PURE__ */ new Set();
+  const dirPrefixes = [];
+  for (const name of SHARED_LINKS) {
+    const p = `shared/${name}`;
+    if (name.includes(".")) {
+      exactPrefixes.add(p);
+    } else {
+      dirPrefixes.push(p);
+    }
+  }
+  exactPrefixes.add("shared/settings.base.json");
+  exactPrefixes.add(`hosts/${hostname2}.json`);
+  return { exactPrefixes, dirPrefixes };
+}
+function isInScope(filePath, exactPrefixes, dirPrefixes) {
+  if (filePath.startsWith("shared/projects/") || filePath.startsWith("shared/extras/")) {
+    return false;
+  }
+  if (exactPrefixes.has(filePath)) return true;
+  return dirPrefixes.some((prefix) => filePath.startsWith(`${prefix}/`));
+}
+function collectGlobalConfigChanges(repoHome2, hostname2, opts) {
+  const args = opts.staged ? ["diff", "--cached", "--name-status", "-z"] : ["diff", "HEAD", "--name-status", "-z"];
+  const raw = execFileSync15("git", args, {
+    cwd: repoHome2,
+    stdio: ["ignore", "pipe", "pipe"]
+  }).toString();
+  const { exactPrefixes, dirPrefixes } = buildPrefixSets(hostname2);
+  const changes = [];
+  const tokens = raw.split("\0");
+  if (tokens.at(-1) === "") tokens.pop();
+  let i = 0;
+  while (i < tokens.length) {
+    const statusToken = tokens[i++] ?? "";
+    if (statusToken === "") continue;
+    const firstLetter = statusToken[0] ?? "";
+    const isRenameOrCopy = firstLetter === "R" || firstLetter === "C";
+    if (isRenameOrCopy) {
+      i++;
+      const newPath = tokens[i++] ?? "";
+      if (isInScope(newPath, exactPrefixes, dirPrefixes)) {
+        changes.push({ status: firstLetter, label: labelForStatus(statusToken), path: newPath });
+      }
+    } else {
+      const filePath = tokens[i++] ?? "";
+      if (isInScope(filePath, exactPrefixes, dirPrefixes)) {
+        changes.push({ status: firstLetter, label: labelForStatus(statusToken), path: filePath });
+      }
+    }
+  }
+  return changes;
+}
+
 // src/commands.push.ts
 init_push_leak_verdict();
 init_push_checks();
@@ -5146,7 +5259,7 @@ init_color();
 init_config();
 init_config_sharedDirs_guard();
 import { randomBytes as randomBytes2 } from "node:crypto";
-import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync9, readdirSync as readdirSync11, rmSync as rmSync12 } from "node:fs";
+import { copyFileSync, existsSync as existsSync36, mkdirSync as mkdirSync9, readdirSync as readdirSync12, rmSync as rmSync12 } from "node:fs";
 import { homedir as homedir5 } from "node:os";
 import { join as join42 } from "node:path";
 init_push_leak_verdict();
@@ -5166,7 +5279,7 @@ function stageSessions(tmpRoot, map) {
   const localProjects = join42(claudeHome(), "projects");
   if (!existsSync36(localProjects)) return 0;
   let staged = 0;
-  for (const dir of readdirSync11(localProjects)) {
+  for (const dir of readdirSync12(localProjects)) {
     const logical = reverse.get(dir);
     if (!logical) continue;
     copyDirJsonlOnly(join42(localProjects, dir), join42(tmpRoot, "shared", "projects", logical));
@@ -5242,6 +5355,7 @@ function guardGitlinks(repo) {
 }
 async function commitAndPush(st, ts, map, redactAll, allowAll, allowRule, repo) {
   gitOrFatal(["add", "-A"], "git add", repo);
+  st.globalConfig = collectGlobalConfigChanges(repo, HOST, { staged: true });
   let verdict = withSpinner("Scanning for secrets", () => scanPushVerdict(repo));
   if (verdict.leak) {
     renderPushTree(st, verdict);
@@ -5251,7 +5365,8 @@ async function commitAndPush(st, ts, map, redactAll, allowAll, allowRule, repo)
   withSpinner("Pushing", () => gitOrFatal(["push"], "git push", repo));
   renderPushTree(st, verdict);
 }
-function runDryRunPreview(st, map) {
+function runDryRunPreview(st, map, repo) {
+  st.globalConfig = collectGlobalConfigChanges(repo, HOST, { staged: false });
   if (map === null) {
     renderNoScanTree(st, { noMapHint: true });
     return;
@@ -5293,7 +5408,7 @@ async function cmdPush(opts = {}) {
     const ts = freshBackupTs(backup);
     const remap = withSpinner("Syncing sessions", () => remapPush(ts, { dryRun }));
     const extras = withSpinner("Syncing extras", () => remapExtrasPush(ts, { dryRun }));
-    const st = { dryRun, remap, extras };
+    const st = { dryRun, remap, extras, globalConfig: [] };
     guardGitlinks(repo);
     const status = gitStatusPorcelainZ(repo, { untrackedAll: true });
     if (!dryRun && !status) {
@@ -5303,12 +5418,12 @@ async function cmdPush(opts = {}) {
     }
     const mapPath = join43(repo, "path-map.json");
     if (!existsSync37(mapPath)) {
-      if (dryRun) return runDryRunPreview(st, null);
+      if (dryRun) return runDryRunPreview(st, null, repo);
       die("path-map.json missing, cannot enforce push allow-list");
     }
     const map = readPathMap(mapPath);
     if (status) enforceAllowList(status, map);
-    if (dryRun) return runDryRunPreview(st, map);
+    if (dryRun) return runDryRunPreview(st, map, repo);
     await commitAndPush(st, ts, map, redactAll, allowAll, allowRule, repo);
   } catch (err) {
     if (err instanceof NomadFatal) {
@@ -5323,9 +5438,17 @@ async function cmdPush(opts = {}) {
 }
 
 // src/commands.update.ts
-import { execFileSync as execFileSync15 } from "node:child_process";
+import { execFileSync as execFileSync16 } from "node:child_process";
 init_utils();
-function cmdUpdate(run = execFileSync15) {
+function readInstalledVersion(run = execFileSync16) {
+  try {
+    return run("nomad", ["--version"], { encoding: "utf8" }).toString().trim() || null;
+  } catch {
+    return null;
+  }
+}
+function cmdUpdate(run = execFileSync16) {
+  console.log("Updating claude-nomad CLI via npm...");
   try {
     run("npm", ["update", "-g", "claude-nomad"], { stdio: "inherit" });
   } catch (err) {
@@ -5335,6 +5458,12 @@ function cmdUpdate(run = execFileSync15) {
     }
     throw new NomadFatal(`npm update -g claude-nomad failed: ${e.message}`);
   }
+  const version = readInstalledVersion(run);
+  if (version) {
+    console.log(`claude-nomad is now at v${version}`);
+  } else {
+    console.log('Update complete. Run "nomad --version" to confirm the new version.');
+  }
 }
 
 // src/nomad.ts
@@ -5372,14 +5501,14 @@ import { join as join46 } from "node:path";
 
 // src/init.gh-onboard.ts
 init_config();
-import { execFileSync as execFileSync16 } from "node:child_process";
+import { execFileSync as execFileSync17 } from "node:child_process";
 init_utils();
 var DEFAULT_REPO_NAME = "claude-nomad-config";
 function isValidRepoName(name) {
   return /^[A-Za-z0-9._-]{1,100}$/.test(name);
 }
 var GH_NETWORK_TIMEOUT_MS = 3e4;
-function ensureOriginRepo(repoName, run = execFileSync16) {
+function ensureOriginRepo(repoName, run = execFileSync17) {
   if (!isValidRepoName(repoName)) {
     die(
       `invalid repo name: ${JSON.stringify(repoName)}. Use only letters, digits, hyphens, underscores, and dots (1-100 chars).`
@@ -5830,7 +5959,7 @@ function parsePushArgs(argv) {
 // package.json
 var package_default = {
   name: "claude-nomad",
-  version: "0.47.0",
+  version: "0.48.0",
   type: "module",
   description: "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   keywords: [
@@ -6031,7 +6160,7 @@ var DEFAULT_HELP = [
 init_config();
 init_utils();
 init_utils_json();
-import { existsSync as existsSync41, readFileSync as readFileSync14, readdirSync as readdirSync12 } from "node:fs";
+import { existsSync as existsSync41, readFileSync as readFileSync14, readdirSync as readdirSync13 } from "node:fs";
 import { join as join47 } from "node:path";
 function resumeCmd(sessionId) {
   if (!/^[A-Za-z0-9_-]+$/.test(sessionId) || sessionId.length > 128) {
@@ -6076,7 +6205,7 @@ function resumeCmd(sessionId) {
   console.log(`cd ${shQuote(hit.localPath)} && claude --resume ${shQuote(sessionId)}`);
 }
 function findTranscriptPath(projectsRoot, sessionId) {
-  for (const dir of readdirSync12(projectsRoot)) {
+  for (const dir of readdirSync13(projectsRoot)) {
     const candidate = join47(projectsRoot, dir, `${sessionId}.jsonl`);
     if (existsSync41(candidate)) return candidate;
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.47.0",
+  "version": "0.48.0",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [