cleargate 0.11.3 → 0.11.5

package/dist/cli.cjs

@@ -114,6 +114,40 @@ function requireMcpUrl(cfg) {
   }
   return cfg.mcpUrl;
 }
+function saveConfig(updates, opts = {}) {
+  const home = os.homedir();
+  if (!home) {
+    throw new Error("Cannot determine home directory.");
+  }
+  const configPath = opts.configPath ?? path2.join(home, ".cleargate", "config.json");
+  const dir = path2.dirname(configPath);
+  let existing = {};
+  try {
+    const raw = fs2.readFileSync(configPath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed !== null && typeof parsed === "object" && !Array.isArray(parsed)) {
+      existing = parsed;
+    }
+  } catch (err) {
+    if (!(err instanceof Error && "code" in err && err.code === "ENOENT")) {
+    }
+  }
+  const merged = { ...existing };
+  for (const [k, v] of Object.entries(updates)) {
+    if (v !== void 0) merged[k] = v;
+  }
+  fs2.mkdirSync(dir, { recursive: true, mode: 448 });
+  try {
+    fs2.chmodSync(dir, 448);
+  } catch {
+  }
+  const tmpPath = path2.join(dir, ".config.json.tmp");
+  const json = JSON.stringify(merged, null, 2) + "\n";
+  fs2.writeFileSync(tmpPath, json, { mode: 384 });
+  fs2.chmodSync(tmpPath, 384);
+  fs2.renameSync(tmpPath, configPath);
+  fs2.chmodSync(configPath, 384);
+}
 var fs2, os, path2, import_zod, ConfigSchema;
 var init_config = __esm({
   "src/config.ts"() {
@@ -383,6 +417,41 @@ var init_membership = __esm({
 });
 
 // src/auth/acquire.ts
+function defaultDiskCachePath(env = process.env) {
+  const override = env["CLEARGATE_DISK_CACHE_PATH"];
+  if (override === "off") return null;
+  if (typeof override === "string" && override.length > 0) return override;
+  const home = os9.homedir();
+  if (!home) return null;
+  return path45.join(home, ".cleargate", "access-token.json");
+}
+function readDiskCache(filePath) {
+  try {
+    const raw = fs42.readFileSync(filePath, "utf8");
+    const parsed = JSON.parse(raw);
+    if (parsed !== null && typeof parsed === "object" && parsed.version === 1 && typeof parsed.entries === "object" && parsed.entries !== null) {
+      return parsed;
+    }
+  } catch {
+  }
+  return { version: 1, entries: {} };
+}
+function writeDiskCache(filePath, data) {
+  const dir = path45.dirname(filePath);
+  try {
+    fs42.mkdirSync(dir, { recursive: true, mode: 448 });
+    try {
+      fs42.chmodSync(dir, 448);
+    } catch {
+    }
+    const tmpPath = path45.join(dir, ".access-token.json.tmp");
+    fs42.writeFileSync(tmpPath, JSON.stringify(data, null, 2) + "\n", { mode: 384 });
+    fs42.chmodSync(tmpPath, 384);
+    fs42.renameSync(tmpPath, filePath);
+    fs42.chmodSync(filePath, 384);
+  } catch {
+  }
+}
 function decodeJwtPayload2(token) {
   try {
     const parts = token.split(".");
@@ -408,6 +477,15 @@ async function acquireAccessToken(opts) {
       return cached.accessToken;
     }
   }
+  const diskCachePath = opts.diskCachePath === void 0 ? defaultDiskCachePath() : opts.diskCachePath;
+  if (!opts.forceRefresh && diskCachePath) {
+    const file = readDiskCache(diskCachePath);
+    const entry = file.entries[cacheKey];
+    if (entry && nowFn() < entry.expiresAtMs) {
+      CACHE.set(cacheKey, entry);
+      return entry.accessToken;
+    }
+  }
   const store = await (opts.createStore ?? createTokenStore)();
   const stored = await store.load(opts.profile);
   if (!stored) {
@@ -456,15 +534,24 @@ async function acquireAccessToken(opts) {
   const exp = payload?.exp;
   if (typeof exp === "number" && Number.isFinite(exp)) {
     const expiresAtMs = (exp - 60) * 1e3;
-    CACHE.set(cacheKey, { accessToken, expiresAtMs });
+    const entry = { accessToken, expiresAtMs };
+    CACHE.set(cacheKey, entry);
+    if (diskCachePath) {
+      const file = readDiskCache(diskCachePath);
+      file.entries[cacheKey] = entry;
+      writeDiskCache(diskCachePath, file);
+    }
   }
   return accessToken;
 }
-var CACHE, AcquireError;
+var fs42, os9, path45, CACHE, AcquireError;
 var init_acquire = __esm({
   "src/auth/acquire.ts"() {
     "use strict";
     init_cjs_shims();
+    fs42 = __toESM(require("fs"), 1);
+    os9 = __toESM(require("os"), 1);
+    path45 = __toESM(require("path"), 1);
     init_factory();
     CACHE = /* @__PURE__ */ new Map();
     AcquireError = class extends Error {
@@ -696,7 +783,7 @@ var import_commander = require("commander");
 // package.json
 var package_default = {
   name: "cleargate",
-  version: "0.11.3",
+  version: "0.11.5",
   private: false,
   type: "module",
   description: "Planning framework for Claude Code agents \u2014 sprint/epic/story protocol, five-role agent team (architect/developer/qa/devops/reporter), Karpathy-style awareness wiki.",
@@ -1314,7 +1401,8 @@ async function joinHandler(opts) {
     if (UUID_V4_RE.test(opts.inviteUrl)) {
       token = opts.inviteUrl;
       const cfg = loadConfig({
-        flags: { profile: opts.profile, mcpUrl: opts.mcpUrlFlag }
+        flags: { profile: opts.profile, mcpUrl: opts.mcpUrlFlag },
+        ...opts.configPath !== void 0 ? { configPath: opts.configPath } : {}
       });
       if (!cfg.mcpUrl) {
         stderr(
@@ -1651,9 +1739,15 @@ async function joinHandler(opts) {
   try {
     const store = await (opts.createStore ?? createTokenStore)();
     await store.save(opts.profile, refreshToken);
+    saveConfig(
+      { mcpUrl: baseUrl },
+      opts.configPath !== void 0 ? { configPath: opts.configPath } : {}
+    );
     stdout(`joined project '${projectName}' as '${hostname3()}'
 `);
     stdout(`refresh token saved to ${store.backend}.
+`);
+    stdout(`mcp_url ${baseUrl} saved to ~/.cleargate/config.json.
 `);
   } catch (err) {
     stderr(
@@ -3176,6 +3270,62 @@ function resolveScaffoldRoot(opts) {
   };
 }
 
+// src/lib/session-load-delta.ts
+init_cjs_shims();
+function canonicalize(value) {
+  if (value === null || typeof value !== "object") {
+    return JSON.stringify(value);
+  }
+  if (Array.isArray(value)) {
+    return "[" + value.map(canonicalize).join(",") + "]";
+  }
+  const obj = value;
+  const sortedKeys = Object.keys(obj).sort();
+  const pairs = sortedKeys.map((k) => JSON.stringify(k) + ":" + canonicalize(obj[k]));
+  return "{" + pairs.join(",") + "}";
+}
+var HOOK_EVENTS = ["PreToolUse", "PostToolUse", "SessionStart", "SubagentStop"];
+function extractSettingsHooksBlock(settings) {
+  const hooks = settings["hooks"] ?? {};
+  const extracted = {};
+  for (const event of HOOK_EVENTS) {
+    if (Object.prototype.hasOwnProperty.call(hooks, event)) {
+      extracted[event] = hooks[event];
+    }
+  }
+  return extracted;
+}
+function extractMcpCleargateEntry(mcp2) {
+  const servers = mcp2["mcpServers"] ?? {};
+  return servers["cleargate"] ?? null;
+}
+function extractSessionLoadDelta(filePath, oldContent, newContent) {
+  const normalized = filePath.replace(/\\/g, "/");
+  if (normalized === ".claude/settings.json") {
+    try {
+      const oldSettings = JSON.parse(oldContent);
+      const newSettings = JSON.parse(newContent);
+      const oldHooks = extractSettingsHooksBlock(oldSettings);
+      const newHooks = extractSettingsHooksBlock(newSettings);
+      return canonicalize(oldHooks) !== canonicalize(newHooks);
+    } catch {
+      return true;
+    }
+  }
+  if (normalized === ".mcp.json") {
+    try {
+      const oldMcp = JSON.parse(oldContent);
+      const newMcp = JSON.parse(newContent);
+      const oldEntry = extractMcpCleargateEntry(oldMcp);
+      const newEntry = extractMcpCleargateEntry(newMcp);
+      return canonicalize(oldEntry) !== canonicalize(newEntry);
+    } catch {
+      return true;
+    }
+  }
+  return true;
+}
+
 // src/commands/init.ts
 var HOOK_ADDITION = {
   hooks: {
@@ -3351,10 +3501,17 @@ async function initHandler(opts = {}) {
     }
   }
   const mergedSettings = mergeSettings(existingSettings, HOOK_ADDITION);
+  const mergedSettingsContent = JSON.stringify(mergedSettings, null, 2) + "\n";
+  const existingSettingsContent = existingSettings !== null ? JSON.stringify(existingSettings, null, 2) + "\n" : "{}";
   fs17.mkdirSync(path18.dirname(settingsPath), { recursive: true });
-  writeAtomic(settingsPath, JSON.stringify(mergedSettings, null, 2) + "\n");
-  stdout(`[cleargate init] Updated .claude/settings.json: merged PostToolUse hook \u2014 restart Claude Code if already open.
+  writeAtomic(settingsPath, mergedSettingsContent);
+  if (extractSessionLoadDelta(".claude/settings.json", existingSettingsContent, mergedSettingsContent)) {
+    stdout(`[cleargate init] Updated .claude/settings.json: merged PostToolUse hook \u2014 restart Claude Code if already open.
+`);
+  } else {
+    stdout(`[cleargate init] .claude/settings.json unchanged (hooks block already current)
 `);
+  }
   const claudeMdPath = path18.join(cwd, "CLAUDE.md");
   const claudeMdSrcPath = path18.join(payloadDir, "CLAUDE.md");
   let claudeMdBlock;
@@ -8863,7 +9020,16 @@ function removeClearGateHooks(settings) {
 init_cjs_shims();
 var import_diff = require("diff");
 function renderInlineDiff(ours, theirs, filePath) {
-  return (0, import_diff.createPatch)(filePath, ours, theirs, "installed", "upstream");
+  const patch = (0, import_diff.createPatch)(filePath, ours, theirs, "installed", "upstream");
+  const hasHunkLines = patch.split("\n").filter((l) => l.startsWith("+") || l.startsWith("-")).filter((l) => !l.startsWith("+++") && !l.startsWith("---")).length > 0;
+  if (!hasHunkLines) {
+    const ourBytes = Buffer.byteLength(ours, "utf-8");
+    const theirBytes = Buffer.byteLength(theirs, "utf-8");
+    const byteNote = ourBytes !== theirBytes ? `${Math.abs(theirBytes - ourBytes)} bytes changed` : "same byte count";
+    return patch + `(whitespace/EOL-only differences \u2014 ${byteNote})
+`;
+  }
+  return patch;
 }
 async function promptMergeChoice(opts) {
   const { path: filePath, state: state2, ours, theirs } = opts;
@@ -9159,7 +9325,15 @@ async function upgradeHandler(flags, cli) {
     let count = 0;
     for (const item of workItems) {
       const state2 = classify(item.entry.sha256, item.installSha, item.currentSha, item.entry.tier);
-      stdout(`[dry-run] ${item.entry.path}  action=${item.action}  state=${state2}`);
+      const projectedPostSha = item.entry.sha256;
+      const projectedPostState = classify(
+        item.entry.sha256,
+        item.entry.sha256,
+        projectedPostSha,
+        item.entry.tier
+      );
+      const stateLabel = state2 !== projectedPostState ? `state=${state2} \u2192 ${projectedPostState}` : `state=${state2}`;
+      stdout(`[dry-run] ${item.entry.path}  action=${item.action}  ${stateLabel}`);
       count++;
     }
     stdout(`[dry-run] ${count} files planned. No changes made.`);
@@ -9171,6 +9345,15 @@ async function upgradeHandler(flags, cli) {
   const sessionRestartFiles = [];
   for (const item of workItems) {
     const { entry, currentSha, installSha, action } = item;
+    let preMutationContent = null;
+    if (SESSION_LOAD_PATHS.has(entry.path)) {
+      const targetPath = path41.join(cwd, entry.path);
+      try {
+        preMutationContent = await fsp.readFile(targetPath, "utf-8");
+      } catch {
+        preMutationContent = "";
+      }
+    }
     switch (action) {
       case "skip": {
         stdout(`[skip] ${entry.path}  policy=${entry.overwrite_policy}`);
@@ -9201,8 +9384,17 @@ async function upgradeHandler(flags, cli) {
       current_sha: postSha,
       package_sha: entry.sha256
     };
-    if (SESSION_LOAD_PATHS.has(entry.path) && postSha !== currentSha) {
-      sessionRestartFiles.push(entry.path);
+    if (SESSION_LOAD_PATHS.has(entry.path) && preMutationContent !== null) {
+      const targetPath = path41.join(cwd, entry.path);
+      let postMutationContent;
+      try {
+        postMutationContent = await fsp.readFile(targetPath, "utf-8");
+      } catch {
+        postMutationContent = "";
+      }
+      if (extractSessionLoadDelta(entry.path, preMutationContent, postMutationContent)) {
+        sessionRestartFiles.push(entry.path);
+      }
     }
   }
   await writeDriftState(cwd, driftMap, { lastRefreshed: now.toISOString() });
@@ -9520,7 +9712,7 @@ async function uninstallHandler(opts) {
 // src/commands/sync.ts
 init_cjs_shims();
 var fsPromises8 = __toESM(require("fs/promises"), 1);
-var path50 = __toESM(require("path"), 1);
+var path51 = __toESM(require("path"), 1);
 
 // src/lib/sync-log.ts
 init_cjs_shims();
@@ -9840,12 +10032,12 @@ init_config();
 // src/lib/intake.ts
 init_cjs_shims();
 var fsPromises4 = __toESM(require("fs/promises"), 1);
-var path46 = __toESM(require("path"), 1);
+var path47 = __toESM(require("path"), 1);
 
 // src/lib/slug.ts
 init_cjs_shims();
 var fsPromises3 = __toESM(require("fs/promises"), 1);
-var path45 = __toESM(require("path"), 1);
+var path46 = __toESM(require("path"), 1);
 function slugify(title, max = 40) {
   const normalized = title.normalize("NFKD").replace(new RegExp("\\p{M}", "gu"), "");
   const lowered = normalized.toLowerCase();
@@ -9860,8 +10052,8 @@ function slugify(title, max = 40) {
 var PROPOSAL_ID_RE = /^proposal_id:\s*"?PROP-(\d+)"?/m;
 async function nextProposalId(projectRoot) {
   const dirs = [
-    path45.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
-    path45.join(projectRoot, ".cleargate", "delivery", "archive")
+    path46.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
+    path46.join(projectRoot, ".cleargate", "delivery", "archive")
   ];
   let maxN = 0;
   for (const dir of dirs) {
@@ -9873,7 +10065,7 @@ async function nextProposalId(projectRoot) {
     }
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-      const fullPath = path45.join(dir, entry.name);
+      const fullPath = path46.join(dir, entry.name);
       try {
         const raw = await fsPromises3.readFile(fullPath, "utf8");
         const fmEnd = extractFrontmatterBlock(raw);
@@ -9891,8 +10083,8 @@ async function nextProposalId(projectRoot) {
 }
 async function findByRemoteId(projectRoot, remoteId) {
   const dirs = [
-    path45.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
-    path45.join(projectRoot, ".cleargate", "delivery", "archive")
+    path46.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
+    path46.join(projectRoot, ".cleargate", "delivery", "archive")
   ];
   const escaped = remoteId.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const re = new RegExp(`^remote_id:\\s*"?${escaped}"?\\s*$`, "m");
@@ -9905,7 +10097,7 @@ async function findByRemoteId(projectRoot, remoteId) {
     }
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-      const fullPath = path45.join(dir, entry.name);
+      const fullPath = path46.join(dir, entry.name);
       try {
         const raw = await fsPromises3.readFile(fullPath, "utf8");
         const fm = extractFrontmatterBlock(raw);
@@ -9942,7 +10134,7 @@ async function runIntakeBranch(opts) {
     labelFilter = "cleargate:proposal",
     now = () => (/* @__PURE__ */ new Date()).toISOString()
   } = opts;
-  const pendingSyncDir = path46.join(projectRoot, ".cleargate", "delivery", "pending-sync");
+  const pendingSyncDir = path47.join(projectRoot, ".cleargate", "delivery", "pending-sync");
   let remoteItems = [];
   try {
     remoteItems = await mcp2.call(
@@ -9973,7 +10165,7 @@ async function runIntakeBranch(opts) {
       const slug2 = slugify(item.title ?? "untitled");
       const num2 = proposalId2.replace("PROP-", "");
       const filename2 = `PROPOSAL-${num2}-remote-${slug2}.md`;
-      const targetPath2 = path46.join(pendingSyncDir, filename2);
+      const targetPath2 = path47.join(pendingSyncDir, filename2);
       createdItems.push({
         proposalId: proposalId2,
         remoteId: item.remote_id,
@@ -9986,7 +10178,7 @@ async function runIntakeBranch(opts) {
     const num = proposalId.replace("PROP-", "");
     const slug = slugify(item.title ?? "untitled");
     const filename = `PROPOSAL-${num}-remote-${slug}.md`;
-    const targetPath = path46.join(pendingSyncDir, filename);
+    const targetPath = path47.join(pendingSyncDir, filename);
     const nowTs = now();
     const fm = {
       proposal_id: proposalId,
@@ -10078,8 +10270,8 @@ path/to/new/file.ext - {Explanation of purpose}
 }
 async function hasAnyRemoteAuthored(projectRoot) {
   const dirs = [
-    path46.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
-    path46.join(projectRoot, ".cleargate", "delivery", "archive")
+    path47.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
+    path47.join(projectRoot, ".cleargate", "delivery", "archive")
   ];
   for (const dir of dirs) {
     let entries;
@@ -10090,7 +10282,7 @@ async function hasAnyRemoteAuthored(projectRoot) {
     }
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-      const fullPath = path46.join(dir, entry.name);
+      const fullPath = path47.join(dir, entry.name);
       try {
         const raw = await fsPromises4.readFile(fullPath, "utf8");
         const fmEnd = raw.indexOf("\n---", 4);
@@ -10108,9 +10300,9 @@ async function hasAnyRemoteAuthored(projectRoot) {
 
 // src/lib/active-criteria.ts
 init_cjs_shims();
-var fs42 = __toESM(require("fs"), 1);
+var fs43 = __toESM(require("fs"), 1);
 var fsPromises5 = __toESM(require("fs/promises"), 1);
-var path47 = __toESM(require("path"), 1);
+var path48 = __toESM(require("path"), 1);
 async function resolveActiveItems(projectRoot, localItems, nowFn = () => (/* @__PURE__ */ new Date()).toISOString()) {
   const active = /* @__PURE__ */ new Set();
   const now = Date.parse(nowFn());
@@ -10135,7 +10327,7 @@ async function resolveInSprintIds(projectRoot) {
   const ids = /* @__PURE__ */ new Set();
   try {
     const sprintDir = resolveActiveSprintDir(projectRoot);
-    const sprintId = path47.basename(sprintDir);
+    const sprintId = path48.basename(sprintDir);
     if (sprintId === "_off-sprint") return ids;
     const sprintFile = await findSprintFile2(projectRoot, sprintId);
     if (!sprintFile) return ids;
@@ -10150,14 +10342,14 @@ async function resolveInSprintIds(projectRoot) {
   return ids;
 }
 async function findSprintFile2(projectRoot, sprintId) {
-  const pendingSync = path47.join(projectRoot, ".cleargate", "delivery", "pending-sync");
-  const archive = path47.join(projectRoot, ".cleargate", "delivery", "archive");
+  const pendingSync = path48.join(projectRoot, ".cleargate", "delivery", "pending-sync");
+  const archive = path48.join(projectRoot, ".cleargate", "delivery", "archive");
   for (const dir of [pendingSync, archive]) {
     try {
-      const entries = fs42.readdirSync(dir, { withFileTypes: true });
+      const entries = fs43.readdirSync(dir, { withFileTypes: true });
       for (const entry of entries) {
         if (entry.isFile() && entry.name.startsWith(sprintId) && entry.name.endsWith(".md")) {
-          return path47.join(dir, entry.name);
+          return path48.join(dir, entry.name);
         }
       }
     } catch {
@@ -10169,12 +10361,12 @@ async function findSprintFile2(projectRoot, sprintId) {
 // src/lib/comments-cache.ts
 init_cjs_shims();
 var fsPromises6 = __toESM(require("fs/promises"), 1);
-var path48 = __toESM(require("path"), 1);
+var path49 = __toESM(require("path"), 1);
 function cacheDir(projectRoot) {
-  return path48.join(projectRoot, ".cleargate", ".comments-cache");
+  return path49.join(projectRoot, ".cleargate", ".comments-cache");
 }
 function cachePath(projectRoot, remoteId) {
-  return path48.join(cacheDir(projectRoot), `${remoteId}.json`);
+  return path49.join(cacheDir(projectRoot), `${remoteId}.json`);
 }
 async function writeCommentCache(projectRoot, remoteId, comments) {
   const dir = cacheDir(projectRoot);
@@ -10189,7 +10381,7 @@ async function writeCommentCache(projectRoot, remoteId, comments) {
 // src/lib/wiki-comments-render.ts
 init_cjs_shims();
 var fsPromises7 = __toESM(require("fs/promises"), 1);
-var path49 = __toESM(require("path"), 1);
+var path50 = __toESM(require("path"), 1);
 var START = "<!-- cleargate:comments:start -->";
 var END = "<!-- cleargate:comments:end -->";
 function resolveBucket(fm) {
@@ -10234,7 +10426,7 @@ async function renderCommentsSection(opts) {
   const bucket = resolveBucket(localItem.fm);
   const primaryId = getPrimaryId(localItem.fm);
   if (!bucket || !primaryId) return;
-  const wikiPath = path49.join(
+  const wikiPath = path50.join(
     projectRoot,
     ".cleargate",
     "wiki",
@@ -10270,7 +10462,7 @@ async function renderCommentsSection(opts) {
   await writeAtomic4(wikiPath, updated);
 }
 async function writeAtomic4(filePath, content) {
-  await fsPromises7.mkdir(path49.dirname(filePath), { recursive: true });
+  await fsPromises7.mkdir(path50.dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp.${Date.now()}`;
   await fsPromises7.writeFile(tmpPath, content, "utf8");
   await fsPromises7.rename(tmpPath, filePath);
@@ -10282,11 +10474,11 @@ async function syncCheckHandler(opts = {}) {
   const env = opts.env ?? process.env;
   const stdout = opts.stdout ?? ((s) => process.stdout.write(s));
   const nowFn = opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
-  const markerPath = path50.join(projectRoot, ".cleargate", ".sync-marker.json");
+  const markerPath = path51.join(projectRoot, ".cleargate", ".sync-marker.json");
   const updateMarker = async (nowIso2) => {
     try {
       const content = JSON.stringify({ last_check: nowIso2 });
-      await fsPromises8.mkdir(path50.dirname(markerPath), { recursive: true });
+      await fsPromises8.mkdir(path51.dirname(markerPath), { recursive: true });
       const tmpPath = `${markerPath}.tmp.${Date.now()}`;
       await fsPromises8.writeFile(tmpPath, content, "utf8");
       await fsPromises8.rename(tmpPath, markerPath);
@@ -10369,7 +10561,7 @@ async function syncHandler(opts = {}) {
   const nowFn = opts.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
   const identity = resolveIdentity(projectRoot);
   const sprintRoot = resolveActiveSprintDir(projectRoot);
-  const sprintId = path50.basename(sprintRoot);
+  const sprintId = path51.basename(sprintRoot);
   let mcp2;
   if (opts.mcp) {
     mcp2 = opts.mcp;
@@ -10430,7 +10622,7 @@ async function syncHandler(opts = {}) {
     exit(2);
     return;
   }
-  const wikiMetaPath = path50.join(projectRoot, ".cleargate", "wiki", "meta.json");
+  const wikiMetaPath = path51.join(projectRoot, ".cleargate", "wiki", "meta.json");
   let lastRemoteSync = "1970-01-01T00:00:00.000Z";
   try {
     const metaRaw = await fsPromises8.readFile(wikiMetaPath, "utf8");
@@ -10671,7 +10863,7 @@ async function syncHandler(opts = {}) {
     };
     await appendSyncLog(sprintRoot, entry);
   }
-  const conflictsFile = path50.join(projectRoot, ".cleargate", ".conflicts.json");
+  const conflictsFile = path51.join(projectRoot, ".cleargate", ".conflicts.json");
   const conflictsContent = {
     generated_at: nowFn(),
     sprint_id: sprintId,
@@ -10679,7 +10871,7 @@ async function syncHandler(opts = {}) {
   };
   await writeAtomic5(conflictsFile, JSON.stringify(conflictsContent, null, 2) + "\n");
   try {
-    await fsPromises8.mkdir(path50.dirname(wikiMetaPath), { recursive: true });
+    await fsPromises8.mkdir(path51.dirname(wikiMetaPath), { recursive: true });
     let meta = {};
     try {
       const raw = await fsPromises8.readFile(wikiMetaPath, "utf8");
@@ -10720,13 +10912,13 @@ async function applyPull(item, localPath, fm, actorEmail, nowFn) {
   await writeAtomic5(localPath, newContent);
 }
 async function writeAtomic5(filePath, content) {
-  await fsPromises8.mkdir(path50.dirname(filePath), { recursive: true });
+  await fsPromises8.mkdir(path51.dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp.${Date.now()}`;
   await fsPromises8.writeFile(tmpPath, content, "utf8");
   await fsPromises8.rename(tmpPath, filePath);
 }
 async function scanLocalItems(projectRoot) {
-  const pendingSync = path50.join(projectRoot, ".cleargate", "delivery", "pending-sync");
+  const pendingSync = path51.join(projectRoot, ".cleargate", "delivery", "pending-sync");
   const results = [];
   let entries;
   try {
@@ -10736,7 +10928,7 @@ async function scanLocalItems(projectRoot) {
   }
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-    const fullPath = path50.join(pendingSync, entry.name);
+    const fullPath = path51.join(pendingSync, entry.name);
     try {
       const raw = await fsPromises8.readFile(fullPath, "utf8");
       const { fm, body } = parseFrontmatter(raw);
@@ -10764,7 +10956,7 @@ init_config();
 // src/lib/sync/work-items.ts
 init_cjs_shims();
 var fsPromises9 = __toESM(require("fs/promises"), 1);
-var path51 = __toESM(require("path"), 1);
+var path52 = __toESM(require("path"), 1);
 var import_node_crypto2 = require("crypto");
 var BATCH_SIZE = 100;
 var ATTRIBUTION_FIELDS = /* @__PURE__ */ new Set([
@@ -10812,8 +11004,8 @@ function getItemId2(fm) {
 }
 async function walkDeliveryDirs(projectRoot) {
   const dirs = [
-    path51.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
-    path51.join(projectRoot, ".cleargate", "delivery", "archive")
+    path52.join(projectRoot, ".cleargate", "delivery", "pending-sync"),
+    path52.join(projectRoot, ".cleargate", "delivery", "archive")
   ];
   const results = [];
   for (const dir of dirs) {
@@ -10825,7 +11017,7 @@ async function walkDeliveryDirs(projectRoot) {
     }
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-      const fullPath = path51.join(dir, entry.name);
+      const fullPath = path52.join(dir, entry.name);
       try {
         const raw = await fsPromises9.readFile(fullPath, "utf8");
         const { fm, body } = parseFrontmatter(raw);
@@ -10850,7 +11042,7 @@ async function walkDeliveryDirs(projectRoot) {
   return results;
 }
 async function writeAtomic6(filePath, content) {
-  await fsPromises9.mkdir(path51.dirname(filePath), { recursive: true });
+  await fsPromises9.mkdir(path52.dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp.${Date.now()}`;
   await fsPromises9.writeFile(tmpPath, content, "utf8");
   await fsPromises9.rename(tmpPath, filePath);
@@ -10917,9 +11109,9 @@ async function syncWorkItems(opts) {
 
 // src/lib/admin-url.ts
 init_cjs_shims();
-var fs43 = __toESM(require("fs"), 1);
-var os9 = __toESM(require("os"), 1);
-var path52 = __toESM(require("path"), 1);
+var fs44 = __toESM(require("fs"), 1);
+var os10 = __toESM(require("os"), 1);
+var path53 = __toESM(require("path"), 1);
 var DEFAULT_BASE = "https://admin.cleargate.soula.ge/";
 function adminUrl(urlPath, opts) {
   const env = opts?.env ?? process.env;
@@ -10940,10 +11132,10 @@ function adminUrl(urlPath, opts) {
   return base;
 }
 function readLocalConfig() {
-  const home = os9.homedir();
+  const home = os10.homedir();
   if (!home) return null;
-  const configPath = path52.join(home, ".cleargate", "config.json");
-  const raw = fs43.readFileSync(configPath, "utf8");
+  const configPath = path53.join(home, ".cleargate", "config.json");
+  const raw = fs44.readFileSync(configPath, "utf8");
   return JSON.parse(raw);
 }
 
@@ -11058,7 +11250,7 @@ async function syncWorkItemsHandler(opts = {}) {
 // src/commands/pull.ts
 init_cjs_shims();
 var fsPromises10 = __toESM(require("fs/promises"), 1);
-var path53 = __toESM(require("path"), 1);
+var path54 = __toESM(require("path"), 1);
 init_acquire();
 init_config();
 async function pullHandler(idOrRemoteId, opts = {}) {
@@ -11173,7 +11365,7 @@ async function pullHandler(idOrRemoteId, opts = {}) {
     result: "ok"
   };
   await appendSyncLog(sprintRoot, entry);
-  stdout(`pull: ${remoteId} applied to ${path53.relative(projectRoot, localPath)}
+  stdout(`pull: ${remoteId} applied to ${path54.relative(projectRoot, localPath)}
 `);
   if (opts.comments) {
     const comments = await mcp2.call(
@@ -11196,7 +11388,7 @@ async function resolveRemoteId(idOrRemoteId, projectRoot) {
   if (/^[A-Z]+-\d+/.test(idOrRemoteId)) {
     return idOrRemoteId;
   }
-  const pendingSync = path53.join(projectRoot, ".cleargate", "delivery", "pending-sync");
+  const pendingSync = path54.join(projectRoot, ".cleargate", "delivery", "pending-sync");
   let entries;
   try {
     entries = await fsPromises10.readdir(pendingSync, { withFileTypes: true });
@@ -11206,7 +11398,7 @@ async function resolveRemoteId(idOrRemoteId, projectRoot) {
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
     try {
-      const raw = await fsPromises10.readFile(path53.join(pendingSync, entry.name), "utf8");
+      const raw = await fsPromises10.readFile(path54.join(pendingSync, entry.name), "utf8");
       const { fm } = parseFrontmatter(raw);
       for (const key of ["story_id", "epic_id", "proposal_id", "cr_id", "bug_id"]) {
         if (fm[key] === idOrRemoteId && typeof fm["remote_id"] === "string") {
@@ -11219,7 +11411,7 @@ async function resolveRemoteId(idOrRemoteId, projectRoot) {
   return null;
 }
 async function findLocalFile(remoteId, projectRoot) {
-  const pendingSync = path53.join(projectRoot, ".cleargate", "delivery", "pending-sync");
+  const pendingSync = path54.join(projectRoot, ".cleargate", "delivery", "pending-sync");
   let entries;
   try {
     entries = await fsPromises10.readdir(pendingSync, { withFileTypes: true });
@@ -11228,7 +11420,7 @@ async function findLocalFile(remoteId, projectRoot) {
   }
   for (const entry of entries) {
     if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-    const fullPath = path53.join(pendingSync, entry.name);
+    const fullPath = path54.join(pendingSync, entry.name);
     try {
       const raw = await fsPromises10.readFile(fullPath, "utf8");
       const { fm } = parseFrontmatter(raw);
@@ -11239,7 +11431,7 @@ async function findLocalFile(remoteId, projectRoot) {
   return null;
 }
 async function writeAtomic7(filePath, content) {
-  await fsPromises10.mkdir(path53.dirname(filePath), { recursive: true });
+  await fsPromises10.mkdir(path54.dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp.${Date.now()}`;
   await fsPromises10.writeFile(tmpPath, content, "utf8");
   await fsPromises10.rename(tmpPath, filePath);
@@ -11255,7 +11447,7 @@ function getItemId3(fm) {
 // src/commands/push.ts
 init_cjs_shims();
 var fsPromises11 = __toESM(require("fs/promises"), 1);
-var path54 = __toESM(require("path"), 1);
+var path55 = __toESM(require("path"), 1);
 init_acquire();
 init_config();
 async function pushHandler(fileOrId, opts = {}) {
@@ -11331,7 +11523,7 @@ async function pushHandler(fileOrId, opts = {}) {
 }
 async function handlePush(filePath, ctx) {
   const { projectRoot, identity, sprintRoot, nowFn, resolveMcp, stdout, stderr, exit } = ctx;
-  const resolvedPath = path54.isAbsolute(filePath) ? filePath : path54.resolve(projectRoot, filePath);
+  const resolvedPath = path55.isAbsolute(filePath) ? filePath : path55.resolve(projectRoot, filePath);
   let rawContent;
   try {
     rawContent = await fsPromises11.readFile(resolvedPath, "utf8");
@@ -11457,8 +11649,8 @@ async function handleRevert(idOrRemoteId, ctx) {
   void localPath;
 }
 async function resolveLocalItem(idOrRemoteId, projectRoot) {
-  const pendingSync = path54.join(projectRoot, ".cleargate", "delivery", "pending-sync");
-  const archive = path54.join(projectRoot, ".cleargate", "delivery", "archive");
+  const pendingSync = path55.join(projectRoot, ".cleargate", "delivery", "pending-sync");
+  const archive = path55.join(projectRoot, ".cleargate", "delivery", "archive");
   for (const dir of [pendingSync, archive]) {
     let entries;
     try {
@@ -11468,7 +11660,7 @@ async function resolveLocalItem(idOrRemoteId, projectRoot) {
     }
     for (const entry of entries) {
       if (!entry.isFile() || !entry.name.endsWith(".md")) continue;
-      const fullPath = path54.join(dir, entry.name);
+      const fullPath = path55.join(dir, entry.name);
       try {
         const raw = await fsPromises11.readFile(fullPath, "utf8");
         const { fm } = parseFrontmatter(raw);
@@ -11487,7 +11679,7 @@ async function resolveLocalItem(idOrRemoteId, projectRoot) {
   return null;
 }
 async function writeAtomic8(filePath, content) {
-  await fsPromises11.mkdir(path54.dirname(filePath), { recursive: true });
+  await fsPromises11.mkdir(path55.dirname(filePath), { recursive: true });
   const tmpPath = `${filePath}.tmp.${Date.now()}`;
   await fsPromises11.writeFile(tmpPath, content, "utf8");
   await fsPromises11.rename(tmpPath, filePath);
@@ -11516,7 +11708,7 @@ function getItemType2(fm) {
 // src/commands/conflicts.ts
 init_cjs_shims();
 var fsPromises12 = __toESM(require("fs/promises"), 1);
-var path55 = __toESM(require("path"), 1);
+var path56 = __toESM(require("path"), 1);
 init_acquire();
 init_config();
 var RESOLUTION_HINTS = {
@@ -11554,7 +11746,7 @@ async function conflictsHandler(opts = {}) {
       }
     }
   }
-  const conflictsFile = path55.join(projectRoot, ".cleargate", ".conflicts.json");
+  const conflictsFile = path56.join(projectRoot, ".cleargate", ".conflicts.json");
   let data;
   try {
     const raw = await fsPromises12.readFile(conflictsFile, "utf8");
@@ -11642,24 +11834,24 @@ function formatEntry(entry) {
 
 // src/commands/admin-login.ts
 init_cjs_shims();
-var fs44 = __toESM(require("fs"), 1);
-var path56 = __toESM(require("path"), 1);
-var os10 = __toESM(require("os"), 1);
+var fs45 = __toESM(require("fs"), 1);
+var path57 = __toESM(require("path"), 1);
+var os11 = __toESM(require("os"), 1);
 var DEFAULT_MCP_URL = "http://localhost:3000";
 function resolveMcpUrl(mcpUrlFlag, env) {
   return (mcpUrlFlag ?? (env ?? process.env)["CLEARGATE_MCP_URL"] ?? DEFAULT_MCP_URL).replace(/\/$/, "");
 }
 function resolveAuthFilePath(opts) {
   if (opts.authFilePath) return opts.authFilePath;
-  const homedirFn = opts.homedir ?? os10.homedir;
-  return path56.join(homedirFn(), ".cleargate", "admin-auth.json");
+  const homedirFn = opts.homedir ?? os11.homedir;
+  return path57.join(homedirFn(), ".cleargate", "admin-auth.json");
 }
 function writeAdminAuth(filePath, token) {
-  const dir = path56.dirname(filePath);
-  fs44.mkdirSync(dir, { recursive: true });
+  const dir = path57.dirname(filePath);
+  fs45.mkdirSync(dir, { recursive: true });
   const payload = JSON.stringify({ version: 1, token }, null, 2);
-  fs44.writeFileSync(filePath, payload, { encoding: "utf8", mode: 384 });
-  fs44.chmodSync(filePath, 384);
+  fs45.writeFileSync(filePath, payload, { encoding: "utf8", mode: 384 });
+  fs45.chmodSync(filePath, 384);
 }
 async function adminLoginHandler(opts = {}) {
   const fetchFn = opts.fetch ?? globalThis.fetch;
@@ -11769,8 +11961,8 @@ async function adminLoginHandler(opts = {}) {
 
 // src/commands/hotfix.ts
 init_cjs_shims();
-var fs45 = __toESM(require("fs"), 1);
-var path57 = __toESM(require("path"), 1);
+var fs46 = __toESM(require("fs"), 1);
+var path58 = __toESM(require("path"), 1);
 function defaultExit4(code) {
   return process.exit(code);
 }
@@ -11780,7 +11972,7 @@ function maxHotfixId(pendingDir) {
   let max = 0;
   let entries;
   try {
-    entries = fs45.readdirSync(pendingDir);
+    entries = fs46.readdirSync(pendingDir);
   } catch {
     return 0;
   }
@@ -11794,13 +11986,13 @@ function maxHotfixId(pendingDir) {
   return max;
 }
 function countActiveHotfixes(repoRoot) {
-  const pendingDir = path57.join(repoRoot, ".cleargate", "delivery", "pending-sync");
-  const archiveDir = path57.join(repoRoot, ".cleargate", "delivery", "archive");
+  const pendingDir = path58.join(repoRoot, ".cleargate", "delivery", "pending-sync");
+  const archiveDir = path58.join(repoRoot, ".cleargate", "delivery", "archive");
   const sevenDaysAgo = Date.now() - 7 * 24 * 60 * 60 * 1e3;
   let count = 0;
   let pendingEntries = [];
   try {
-    pendingEntries = fs45.readdirSync(pendingDir);
+    pendingEntries = fs46.readdirSync(pendingDir);
   } catch {
   }
   for (const entry of pendingEntries) {
@@ -11808,13 +12000,13 @@ function countActiveHotfixes(repoRoot) {
   }
   let archiveEntries = [];
   try {
-    archiveEntries = fs45.readdirSync(archiveDir);
+    archiveEntries = fs46.readdirSync(archiveDir);
   } catch {
   }
   for (const entry of archiveEntries) {
     if (entry.startsWith("HOTFIX-") && entry.endsWith(".md")) {
       try {
-        const stat = fs45.statSync(path57.join(archiveDir, entry));
+        const stat = fs46.statSync(path58.join(archiveDir, entry));
         if (stat.mtimeMs >= sevenDaysAgo) count++;
       } catch {
       }
@@ -11823,7 +12015,7 @@ function countActiveHotfixes(repoRoot) {
   return count;
 }
 function resolveTemplatePath(repoRoot) {
-  return path57.join(repoRoot, ".cleargate", "templates", "hotfix.md");
+  return path58.join(repoRoot, ".cleargate", "templates", "hotfix.md");
 }
 function hotfixNewHandler(opts, cli) {
   const stdoutFn = cli?.stdout ?? ((s) => process.stdout.write(s + "\n"));
@@ -11842,14 +12034,14 @@ function hotfixNewHandler(opts, cli) {
     );
     return exitFn(1);
   }
-  const pendingDir = path57.join(repoRoot, ".cleargate", "delivery", "pending-sync");
+  const pendingDir = path58.join(repoRoot, ".cleargate", "delivery", "pending-sync");
   const maxId = maxHotfixId(pendingDir);
   const nextId = maxId + 1;
   const idStr = `HOTFIX-${String(nextId).padStart(3, "0")}`;
   const templatePath = resolveTemplatePath(repoRoot);
   let templateContent;
   try {
-    templateContent = fs45.readFileSync(templatePath, "utf8");
+    templateContent = fs46.readFileSync(templatePath, "utf8");
   } catch {
     stderrFn(`[cleargate hotfix new] template not found: ${templatePath}`);
     return exitFn(2);
@@ -11857,10 +12049,10 @@ function hotfixNewHandler(opts, cli) {
   const content = templateContent.replace(/\{ID\}/g, idStr).replace(/\{SLUG\}/g, opts.slug).replace(/\{ISO\}/g, now);
   const fileSlug = opts.slug.replace(/-/g, "_");
   const fileName = `${idStr}_${fileSlug}.md`;
-  const outPath = path57.join(pendingDir, fileName);
+  const outPath = path58.join(pendingDir, fileName);
   try {
-    fs45.mkdirSync(pendingDir, { recursive: true });
-    fs45.writeFileSync(outPath, content, "utf8");
+    fs46.mkdirSync(pendingDir, { recursive: true });
+    fs46.writeFileSync(outPath, content, "utf8");
   } catch (err) {
     const msg = err instanceof Error ? err.message : String(err);
     stderrFn(`[cleargate hotfix new] write failed: ${msg}`);