claude-nomad 0.63.0 → 0.63.2

package/CHANGELOG.md

@@ -1,5 +1,46 @@
 # Changelog
 
+## [0.63.2](https://github.com/funkadelic/claude-nomad/compare/v0.63.1...v0.63.2) (2026-08-04)
+
+### What's new
+
+- **`nomad doctor` stops warning about settings you legitimately set.** The list of settings it
+  recognizes has been updated and synced with the current Claude Code settings schema, so settings
+  the app actually writes (quiet hours, the break reminder, the token-usage reminder, and others)
+  are no longer reported as unknown keys on an otherwise healthy machine. Entries that were never
+  settings at all have been dropped at the same time.
+- **A new Claude Code setting is recognized within a day.** The job that tracks the official
+  settings list ran once a week, so a setting added on a Tuesday could be reported as unknown until
+  the following Monday. It now runs daily.
+- **The list keeps its own bookkeeping straight from here.** When a setting Claude Code writes
+  ahead of its published documentation is later documented, it now moves across on its own instead
+  of being recorded in two places at once.
+
+
+### Fixed
+
+* **doctor:** refresh APP_ONLY_KEYS against the current settings schema ([#487](https://github.com/funkadelic/claude-nomad/issues/487)) ([1102b41](https://github.com/funkadelic/claude-nomad/commit/1102b4180fd53b90e869dc00736b3e62c9a997cc))
+
+
+### Changed
+
+* **doctor:** sync settings schema keys ([#483](https://github.com/funkadelic/claude-nomad/issues/483)) ([c406281](https://github.com/funkadelic/claude-nomad/commit/c4062811e6568f4e3d1c1be44a090de8df810385))
+* run the settings schema drift check daily ([#486](https://github.com/funkadelic/claude-nomad/issues/486)) ([090f247](https://github.com/funkadelic/claude-nomad/commit/090f247d5e941d08300138967560e09487f6c387))
+
+
+### Dependencies
+
+* bump npm-run-all2 from 9.0.2 to 9.0.3 in the dev-dependencies group ([#480](https://github.com/funkadelic/claude-nomad/issues/480)) ([9e9e7ef](https://github.com/funkadelic/claude-nomad/commit/9e9e7efcc586deafd1ce03224b88ffe8e7a0d023))
+* bump the codeql-action group across 1 directory with 2 updates ([#481](https://github.com/funkadelic/claude-nomad/issues/481)) ([0905267](https://github.com/funkadelic/claude-nomad/commit/0905267f2a74c23a41bde5947edaa9b823d59940))
+* bump the prod-dependencies group across 1 directory with 2 updates ([#485](https://github.com/funkadelic/claude-nomad/issues/485)) ([d77491d](https://github.com/funkadelic/claude-nomad/commit/d77491d241b9faf2cacb87b54d58591ca1dd3bef))
+
+## [0.63.1](https://github.com/funkadelic/claude-nomad/compare/v0.63.0...v0.63.1) (2026-07-31)
+
+
+### Fixed
+
+* **push:** correct gitleaks column offsets in recovery prompts ([#478](https://github.com/funkadelic/claude-nomad/issues/478)) ([e230993](https://github.com/funkadelic/claude-nomad/commit/e2309932456f5646694685dd0c3b6b6e1007059f))
+
 ## [0.63.0](https://github.com/funkadelic/claude-nomad/compare/v0.62.6...v0.63.0) (2026-07-31)
 
 ### What's new

package/dist/nomad.mjs

@@ -353,8 +353,11 @@ var init_settings_keys = __esm({
       "allowManagedPermissionRulesOnly",
       "alwaysThinkingEnabled",
       "apiKeyHelper",
+      "askUserQuestionTimeout",
       "attribution",
       "autoCompactEnabled",
+      "autoConnectIde",
+      "autoInstallIdeExtension",
       "autoMemoryDirectory",
       "autoMemoryEnabled",
       "autoMode",
@@ -366,6 +369,7 @@ var init_settings_keys = __esm({
       "awsCredentialExport",
       "axScreenReader",
       "blockedMarketplaces",
+      "browserExternalPageTools",
       "channelsEnabled",
       "claudeMd",
       "claudeMdExcludes",
@@ -373,24 +377,31 @@ var init_settings_keys = __esm({
       "companyAnnouncements",
       "defaultShell",
       "deniedMcpServers",
+      "diffTool",
       "disableAgentView",
       "disableAllHooks",
       "disableArtifact",
       "disableAutoMode",
+      "disableBrowserExternalNavigation",
       "disableBundledSkills",
       "disableClaudeAiConnectors",
       "disableDeepLinkRegistration",
       "disabledMcpjsonServers",
+      "disableMobileSimulatorTools",
       "disableRemoteControl",
+      "disableSideloadFlags",
       "disableSkillShellExecution",
       "disableWorkflows",
       "editorMode",
       "effortLevel",
+      "emojiCompletionEnabled",
       "enableAllProjectMcpServers",
+      "enableArtifact",
       "enabledMcpjsonServers",
       "enabledPlugins",
       "enforceAvailableModels",
       "env",
+      "externalEditorContext",
       "extraKnownMarketplaces",
       "fallbackModel",
       "fastMode",
@@ -399,6 +410,7 @@ var init_settings_keys = __esm({
       "fileCheckpointingEnabled",
       "fileSuggestion",
       "footerLinksRegexes",
+      "forceLoginGatewayUrl",
       "forceLoginMethod",
       "forceLoginOrgUUID",
       "forceRemoteSettingsRefresh",
@@ -411,13 +423,13 @@ var init_settings_keys = __esm({
       "language",
       "leftArrowOpensAgents",
       "managedMcpServers",
-      "maxSkillDescriptionChars",
       "minimumVersion",
       "model",
       "modelOverrides",
       "otelHeadersHelper",
       "outputStyle",
       "parentSettingsBehavior",
+      "permissionExplainerEnabled",
       "permissions",
       "plansDirectory",
       "pluginConfigs",
@@ -426,8 +438,10 @@ var init_settings_keys = __esm({
       "policyHelper",
       "preferredNotifChannel",
       "prefersReducedMotion",
+      "processWrapper",
       "prUrlTemplate",
       "remoteControlAtStartup",
+      "requireCoworkFullVmSandbox",
       "requiredMaximumVersion",
       "requiredMinimumVersion",
       "respectGitignore",
@@ -437,6 +451,7 @@ var init_settings_keys = __esm({
       "showThinkingSummaries",
       "showTurnDuration",
       "skillListingBudgetFraction",
+      "skillListingMaxDescChars",
       "skillOverrides",
       "skipDangerousModePermissionPrompt",
       "skippedMarketplaces",
@@ -452,6 +467,7 @@ var init_settings_keys = __esm({
       "strictPluginOnlyCustomization",
       "subagentStatusLine",
       "syntaxHighlightingDisabled",
+      "teammateDefaultModel",
       "teammateMode",
       "terminalProgressBarEnabled",
       "theme",
@@ -459,29 +475,41 @@ var init_settings_keys = __esm({
       "useAutoModeDuringPlan",
       "verbose",
       "viewMode",
+      "vimInsertModeRemaps",
       "voice",
       "voiceEnabled",
       "wheelScrollAccelerationEnabled",
       "workflowKeywordTriggerEnabled",
+      "workflowSizeGuideline",
       "worktree",
       "wslInheritsWindowsSettings"
     ];
     APP_ONLY_KEYS = [
-      "agents",
-      "apiKeyHelperTimeoutMs",
-      "awsLoginRefresh",
-      "awsRegion",
-      "awsRetryMode",
-      "disableNonEssentialModelCalls",
-      "enabledExperimentalFeatures",
-      "installMethod",
-      "pluginGroups",
-      "pluginRepositoryEnabled",
-      "pluginsLocalConfig",
-      "proxy",
+      "autoCompactWindow",
+      "autoDreamEnabled",
+      "autoUploadSessions",
+      "breakReminder",
+      "daemonColdStart",
+      "defaultView",
+      "doneMeansMerged",
+      "enableWorkflows",
+      "feedbackDrafts",
+      "isolatePeerMachines",
+      "precomputeCompactionEnabled",
+      "promptSuggestionEnabled",
+      "proxyAuthHelper",
+      "quietHours",
+      "remote",
+      "showMessageTimestamps",
       "skipAutoPermissionPrompt",
-      "statsig",
-      "subagents"
+      "skipWorkflowUsageWarning",
+      "switchModelsOnFlag",
+      "terminalTitleFromRename",
+      "todoFeatureEnabled",
+      "totalTokensReminder",
+      "totalTokensReminderAfterUserTurn",
+      "totalTokensReminderBudget",
+      "ultracode"
     ];
     KNOWN_SETTINGS_KEYS = /* @__PURE__ */ new Set([...SCHEMA_KEYS, ...APP_ONLY_KEYS]);
   }
@@ -5658,6 +5686,93 @@ function dropSessionFromStaged(sid, map) {
 init_push_gitleaks_scan();
 init_utils();
 
+// src/commands.push.recovery.span-align.ts
+var REDACTED_TOKEN = "REDACTED";
+var SHIFT_WINDOW = [0, -1, 1, -2, 2];
+var ENTROPY_TOLERANCE = 1e-4;
+function byteAt(buf, at) {
+  return at >= 0 && at < buf.length ? buf[at] : void 0;
+}
+function isWordByte(byte) {
+  if (byte === void 0) return false;
+  return byte >= 48 && byte <= 57 || byte >= 65 && byte <= 90 || byte >= 97 && byte <= 122 || byte === 95;
+}
+function splitsToken(buf, at) {
+  return isWordByte(byteAt(buf, at - 1)) && isWordByte(byteAt(buf, at));
+}
+function shannonEntropy(text) {
+  if (text.length === 0) return 0;
+  const counts = /* @__PURE__ */ new Map();
+  for (const ch of text) counts.set(ch, (counts.get(ch) ?? 0) + 1);
+  let bits = 0;
+  for (const n of counts.values()) {
+    const p = n / text.length;
+    bits -= p * Math.log2(p);
+  }
+  return bits;
+}
+function matchTemplate(finding) {
+  if (finding.Match.length === 0) return null;
+  const idx = finding.Match.indexOf(REDACTED_TOKEN);
+  if (idx < 0) return { pre: "", post: "", redacted: false };
+  return {
+    pre: finding.Match.slice(0, idx),
+    post: finding.Match.slice(idx + REDACTED_TOKEN.length),
+    redacted: true
+  };
+}
+function fitsTemplate(span, finding, template) {
+  if (!template.redacted) return span === finding.Match;
+  return span.startsWith(template.pre) && span.endsWith(template.post);
+}
+function candidateAt(finding, buf, template, shift) {
+  const start = finding.StartColumn - 1 + shift;
+  const end = start + (finding.EndColumn - finding.StartColumn + 1);
+  if (start < 0 || end > buf.length) return null;
+  const span = buf.subarray(start, end).toString("utf8");
+  if (!fitsTemplate(span, finding, template)) return null;
+  const valueStart = start + Buffer.byteLength(template.pre, "utf8");
+  const valueEnd = end - Buffer.byteLength(template.post, "utf8");
+  const value = buf.subarray(valueStart, valueEnd).toString("utf8");
+  if (value.length === 0) return null;
+  if (splitsToken(buf, start) || splitsToken(buf, end)) return null;
+  return { start, end, valueStart, value, exact: template.redacted };
+}
+function locateSecretLiteral(finding, buf) {
+  const secret = finding.Secret;
+  if (typeof secret !== "string" || secret.length === 0 || secret === REDACTED_TOKEN) return null;
+  const needle = Buffer.from(secret, "utf8");
+  const hint = finding.StartColumn - 1;
+  let best = null;
+  for (let at = buf.indexOf(needle); at >= 0; at = buf.indexOf(needle, at + 1)) {
+    if (best === null || Math.abs(at - hint) < Math.abs(best - hint)) best = at;
+  }
+  if (best === null) return null;
+  return { start: best, end: best + needle.length, valueStart: best, value: secret, exact: true };
+}
+function breakTie(hits, finding) {
+  const reported = finding.Entropy;
+  if (typeof reported !== "number" || !Number.isFinite(reported) || reported <= 0) return null;
+  const agreeing = hits.filter(
+    (h2) => h2.exact && Math.abs(shannonEntropy(h2.value) - reported) <= ENTROPY_TOLERANCE
+  );
+  return agreeing.length === 1 ? agreeing[0] : null;
+}
+function alignFindingSpan(finding, buf) {
+  const literal = locateSecretLiteral(finding, buf);
+  if (literal !== null) return literal;
+  if (typeof finding.EndLine === "number" && finding.EndLine > finding.StartLine) return null;
+  const template = matchTemplate(finding);
+  if (template === null) return null;
+  const hits = [];
+  for (const shift of SHIFT_WINDOW) {
+    const candidate = candidateAt(finding, buf, template, shift);
+    if (candidate !== null) hits.push(candidate);
+  }
+  if (hits.length === 1) return hits[0];
+  return breakTie(hits, finding);
+}
+
 // src/commands.push.recovery.secret-shape.ts
 var VALUE_HEAD = 4;
 var VALUE_TAIL = 4;
@@ -5665,7 +5780,7 @@ var MIN_ELIDE_LEN = 16;
 var FRAGMENT_SEP = "...";
 var NEAR_WINDOW = 40;
 var VALUE_PAD = 16;
-var REDACTED_TOKEN = "REDACTED";
+var SIBLING_PAD = 2;
 var CONTROL_CHARS = /[\x00-\x1f\x7f]/g;
 function classifyCharset(value) {
   if (/^[0-9a-fA-F]+$/.test(value)) return "hex";
@@ -5691,26 +5806,23 @@ function withoutValue(near, value) {
   const idx = near.indexOf(value);
   return idx < 0 ? near : emptyToNull(near.slice(0, idx));
 }
-function alignRedactedMatch(finding, span, lead) {
+function templateLead(finding) {
   const idx = finding.Match.indexOf(REDACTED_TOKEN);
-  if (idx < 0) return null;
-  const pre = finding.Match.slice(0, idx);
-  const post = finding.Match.slice(idx + REDACTED_TOKEN.length);
-  if (span !== finding.Match && span.startsWith(pre) && span.endsWith(post) && span.length > pre.length + post.length) {
-    return {
-      value: span.slice(pre.length, span.length - post.length),
-      near: emptyToNull(lead + pre),
-      exact: true
-    };
-  }
-  return { value: null, near: emptyToNull(lead + pre), exact: false };
+  return idx > 0 ? finding.Match.slice(0, idx) : null;
+}
+function siblingBounds(sibling, buf) {
+  const aligned = alignFindingSpan(sibling, buf);
+  if (aligned !== null) return { start: aligned.start, end: aligned.end };
+  const reportedStart = sibling.StartColumn - 1;
+  if (sibling.EndColumn <= reportedStart) return { start: 0, end: 0 };
+  const start = Math.max(0, Math.min(reportedStart, buf.length) - SIBLING_PAD);
+  return { start, end: Math.max(start, Math.min(sibling.EndColumn + SIBLING_PAD, buf.length)) };
 }
 function maskSiblingSpans(buf, siblings, ownStart, ownEnd) {
   if (siblings.length === 0) return buf;
   const copy = Buffer.from(buf);
   for (const sibling of siblings) {
-    const start = Math.max(1, Math.min(sibling.StartColumn, copy.length + 1)) - 1;
-    const end = Math.max(start, Math.min(sibling.EndColumn, copy.length));
+    const { start, end } = siblingBounds(sibling, buf);
     const headEnd = Math.min(end, ownStart);
     if (start < headEnd) copy.fill(0, start, headEnd);
     const tailStart = Math.max(start, ownEnd);
@@ -5720,43 +5832,27 @@ function maskSiblingSpans(buf, siblings, ownStart, ownEnd) {
 }
 function resolveSecretContext(finding, readLine, siblings = []) {
   const resolved = resolveSpanContext(finding, readLine, siblings);
-  const ownStripped = withoutValue(resolved.near, resolved.value);
-  const multiLine = typeof finding.EndLine === "number" && finding.EndLine > finding.StartLine;
   return {
     value: resolved.value,
-    near: ownStripped,
-    exact: resolved.exact && !multiLine
+    near: withoutValue(resolved.near, resolved.value),
+    exact: resolved.exact
   };
 }
+function resolveWithoutLine(finding) {
+  if (finding.Match.includes(REDACTED_TOKEN)) {
+    return { value: null, near: templateLead(finding), exact: false };
+  }
+  return { value: emptyToNull(finding.Match), near: null, exact: false };
+}
 function resolveSpanContext(finding, readLine, siblings = []) {
   const raw = readLine(finding.File, finding.StartLine);
-  let span;
-  let lead;
-  if (raw !== null) {
-    const buf = Buffer.from(raw, "utf8");
-    const len = buf.length;
-    const startCol = Math.max(1, Math.min(finding.StartColumn, len + 1));
-    const endCol = Math.max(startCol, Math.min(finding.EndColumn, len));
-    span = buf.subarray(startCol - 1, endCol).toString("utf8");
-    lead = maskSiblingSpans(buf, siblings, startCol - 1, endCol).subarray(0, startCol - 1).toString("utf8");
-  } else {
-    span = finding.Match;
-    lead = "";
-  }
-  const aligned = alignRedactedMatch(finding, span, lead);
-  if (aligned !== null) return aligned;
-  if (typeof finding.Secret === "string" && finding.Secret.length > 0 && span.includes(finding.Secret)) {
-    return {
-      value: finding.Secret,
-      near: emptyToNull(lead + span.slice(0, span.indexOf(finding.Secret))),
-      exact: true
-    };
-  }
-  return {
-    value: span.length > 0 ? span : null,
-    near: emptyToNull(lead),
-    exact: false
-  };
+  if (raw === null) return resolveWithoutLine(finding);
+  const unresolved = { value: null, near: templateLead(finding), exact: false };
+  const buf = Buffer.from(raw, "utf8");
+  const aligned = alignFindingSpan(finding, buf);
+  if (aligned === null) return unresolved;
+  const near = maskSiblingSpans(buf, siblings, aligned.start, aligned.end).subarray(0, aligned.valueStart).toString("utf8");
+  return { value: aligned.value, near: emptyToNull(near), exact: aligned.exact };
 }
 function formatNear(text) {
   const stripped = elideTokenRuns(text.replace(CONTROL_CHARS, ""));
@@ -9439,7 +9535,7 @@ function parseSyncArgs(argv) {
 // package.json
 var package_default = {
   name: "claude-nomad",
-  version: "0.63.0",
+  version: "0.63.2",
   type: "module",
   description: "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   keywords: [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-nomad",
-  "version": "0.63.0",
+  "version": "0.63.2",
   "type": "module",
   "description": "Sync Claude Code config (~/.claude/) across machines via a private Git repo, with path remapping and per-host settings overrides.",
   "keywords": [