claude-nomad 0.62.1 → 0.62.2

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## [0.62.2](https://github.com/funkadelic/claude-nomad/compare/v0.62.1...v0.62.2) (2026-07-21)
+
+
+### Fixed
+
+* **push:** close the interactive-push secret-gate fail-open ([#446](https://github.com/funkadelic/claude-nomad/issues/446)) ([5de8975](https://github.com/funkadelic/claude-nomad/commit/5de8975f83f5e99711041ef6025fe69933b1ab15))
+
 ## [0.62.1](https://github.com/funkadelic/claude-nomad/compare/v0.62.0...v0.62.1) (2026-07-20)
 
 

package/dist/nomad.mjs

@@ -5726,6 +5726,9 @@ function allowThenRescan(append, scanVerdict, repoHome2) {
     throw err;
   }
 }
+function leakBlockedFatal(recovery) {
+  return new NomadFatal(recovery ?? "gitleaks detected secrets", { code: EXIT.LEAK_BLOCKED });
+}
 function makeRealPrompt() {
   return async (prompt) => {
     const rl = createInterface2({
@@ -5772,9 +5775,10 @@ async function resolveLeakFindings(verdict, ts, map, deps = {}) {
     );
   }
   if (!isTTYCheck()) {
-    throw new NomadFatal(current.recovery ?? "gitleaks detected secrets", {
-      code: EXIT.LEAK_BLOCKED
-    });
+    throw leakBlockedFatal(current.recovery);
+  }
+  if (current.leak && current.findings.length === 0) {
+    throw leakBlockedFatal(current.recovery);
   }
   const prompt = makePromptFn();
   printLegend();
@@ -5789,6 +5793,7 @@ async function resolveLeakFindings(verdict, ts, map, deps = {}) {
     gitOrFatal(["add", "-A"], "git add", repo);
     current = scanVerdict(repo);
   }
+  if (current.leak) throw leakBlockedFatal(current.recovery);
   return current;
 }
 
@@ -7884,6 +7889,7 @@ async function commitAndPush(st, ts, map, resolution, repo, newManifest, render)
     if (!render) log("push (leak recovery)");
     renderPushTree(st, verdict);
     verdict = await resolveLeakFindings(verdict, ts, map, resolution);
+    if (verdict.leak) throw leakBlockedFatal(verdict.recovery);
   }
   gitOrFatal(["commit", "-m", `chore: sync from ${HOST}`], "git commit", repo);
   withSpinner("Pushing", () => gitOrFatal(["push"], "git push", repo));
@@ -8998,7 +9004,7 @@ function parseSyncArgs(argv) {
 // package.json
 var package_default = {
   name: "claude-nomad",
-  version: "0.62.1",
+  version: "0.62.2",
   type: "module",
   description: "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   keywords: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.62.1",
+  "version": "0.62.2",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [