codebyplan 1.13.23 → 1.13.25

package/dist/cli.js

@@ -14,7 +14,7 @@ var VERSION, PACKAGE_NAME;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    VERSION = "1.13.23";
+    VERSION = "1.13.25";
     PACKAGE_NAME = "codebyplan";
   }
 });
@@ -149,6 +149,7 @@ var init_gitignore_block = __esm({
       ".codebyplan/device.local.json",
       ".codebyplan/statusline.local.json",
       ".codebyplan/worktree.local.json",
+      ".codebyplan/claude-status.local.json",
       ".codebyplan.local.json"
     ];
     GITIGNORE_BLOCK_START = "# >>> codebyplan (managed) >>>";
@@ -225,8 +226,8 @@ async function readLocalConfig(projectPath, onMigrationNotice) {
 }
 async function writeLocalConfig(projectPath, config) {
   const content = { device_id: config.device_id };
-  const path8 = localConfigPath(projectPath);
-  const dirPath = dirname(path8);
+  const path10 = localConfigPath(projectPath);
+  const dirPath = dirname(path10);
   let phase = "stat config directory";
   try {
     try {
@@ -246,7 +247,7 @@ async function writeLocalConfig(projectPath, config) {
     phase = "create config directory";
     await mkdir(dirPath, { recursive: true });
     phase = "write local config";
-    await writeFile2(path8, JSON.stringify(content, null, 2) + "\n", "utf-8");
+    await writeFile2(path10, JSON.stringify(content, null, 2) + "\n", "utf-8");
   } catch (err) {
     const code = err.code;
     if (code === "LEGACY_FILE_BLOCKS_DIR") {
@@ -396,7 +397,8 @@ var init_statusline_config = __esm({
         rate_limits: true,
         repo_pr: true,
         worktree: true,
-        infra_drift: true
+        infra_drift: true,
+        package_freshness: true
       },
       no_color: false
     };
@@ -467,12 +469,12 @@ async function readFallback(filename) {
   }
 }
 async function writeFallback(filename, data) {
-  const path8 = fallbackFile(filename);
-  await mkdir3(dirname2(path8), { recursive: true });
-  await writeFile4(path8, JSON.stringify(data, null, 2) + "\n", "utf-8");
+  const path10 = fallbackFile(filename);
+  await mkdir3(dirname2(path10), { recursive: true });
+  await writeFile4(path10, JSON.stringify(data, null, 2) + "\n", "utf-8");
   if (platform() !== "win32") {
     try {
-      await chmod(path8, 384);
+      await chmod(path10, 384);
     } catch {
     }
   }
@@ -677,8 +679,8 @@ async function getAuthHeaders() {
     return { headers: { "x-api-key": key }, via: "api_key" };
   }
 }
-function buildUrl(path8, params) {
-  const url = new URL(`${baseUrl()}/api${path8}`);
+function buildUrl(path10, params) {
+  const url = new URL(`${baseUrl()}/api${path10}`);
   if (params) {
     for (const [key, value] of Object.entries(params)) {
       if (value !== void 0) {
@@ -695,10 +697,10 @@ function isRetryable(err) {
   return false;
 }
 function delay(ms) {
-  return new Promise((resolve8) => setTimeout(resolve8, ms));
+  return new Promise((resolve9) => setTimeout(resolve9, ms));
 }
-async function request(method, path8, options) {
-  const url = buildUrl(path8, options?.params);
+async function request(method, path10, options) {
+  const url = buildUrl(path10, options?.params);
   const auth = await getAuthHeaders();
   let lastError;
   for (let attempt = 0; attempt <= MAX_RETRIES; attempt++) {
@@ -718,7 +720,7 @@ async function request(method, path8, options) {
         signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
       });
       if (!res.ok) {
-        let message = `API ${method} ${path8} failed with status ${res.status}`;
+        let message = `API ${method} ${path10} failed with status ${res.status}`;
         let code;
         try {
           const body = await res.json();
@@ -752,14 +754,14 @@ async function request(method, path8, options) {
   }
   throw lastError;
 }
-async function apiGet(path8, params) {
-  return request("GET", path8, { params });
+async function apiGet(path10, params) {
+  return request("GET", path10, { params });
 }
-async function apiPost(path8, body) {
-  return request("POST", path8, { body });
+async function apiPost(path10, body) {
+  return request("POST", path10, { body });
 }
-async function apiPut(path8, body) {
-  return request("PUT", path8, { body });
+async function apiPut(path10, body) {
+  return request("PUT", path10, { body });
 }
 async function callMcpTool(toolName, params) {
   const url = mcpEndpoint();
@@ -1053,7 +1055,7 @@ var init_device_flow = __esm({
         this.name = "OAuthInvalidClientError";
       }
     };
-    defaultSleep = (ms) => new Promise((resolve8) => setTimeout(resolve8, ms));
+    defaultSleep = (ms) => new Promise((resolve9) => setTimeout(resolve9, ms));
   }
 });
 
@@ -1861,9 +1863,9 @@ import { createInterface } from "node:readline/promises";
 function getConfigPath(scope) {
   return scope === "user" ? join9(homedir4(), ".claude.json") : join9(process.cwd(), ".mcp.json");
 }
-async function readConfig(path8) {
+async function readConfig(path10) {
   try {
-    const raw = await readFile6(path8, "utf-8");
+    const raw = await readFile6(path10, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
       return parsed;
@@ -2088,8 +2090,8 @@ async function runSetup() {
     const deviceId = await getOrCreateDeviceId(projectPath);
     let branch = "main";
     try {
-      const { execSync: execSync8 } = await import("node:child_process");
-      branch = execSync8("git symbolic-ref --short HEAD", {
+      const { execSync: execSync9 } = await import("node:child_process");
+      branch = execSync9("git symbolic-ref --short HEAD", {
         cwd: projectPath,
         encoding: "utf-8"
       }).trim();
@@ -2450,9 +2452,9 @@ import { join as join11 } from "node:path";
 function configPaths() {
   return [join11(homedir5(), ".claude.json"), join11(process.cwd(), ".mcp.json")];
 }
-async function readConfig2(path8) {
+async function readConfig2(path10) {
   try {
-    const raw = await readFile8(path8, "utf-8");
+    const raw = await readFile8(path10, "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed === "object" && parsed !== null && !Array.isArray(parsed)) {
       return parsed;
@@ -2466,7 +2468,7 @@ function entryHasLegacyApiKey(entry) {
   if (!entry || !entry.headers) return false;
   return "x-api-key" in entry.headers;
 }
-async function rewriteConfig(path8, config, newUrl) {
+async function rewriteConfig(path10, config, newUrl) {
   const servers = config.mcpServers;
   if (!servers) return false;
   const entry = servers.codebyplan;
@@ -2474,7 +2476,7 @@ async function rewriteConfig(path8, config, newUrl) {
   if (!entryHasLegacyApiKey(entry) && entry.url === newUrl && entry.type === "http")
     return false;
   servers.codebyplan = { type: "http", url: newUrl };
-  await writeFile7(path8, JSON.stringify(config, null, 2) + "\n", "utf-8");
+  await writeFile7(path10, JSON.stringify(config, null, 2) + "\n", "utf-8");
   return true;
 }
 async function runUpgradeAuth() {
@@ -2482,12 +2484,12 @@ async function runUpgradeAuth() {
   await runLogin();
   const newUrl = mcpEndpoint();
   let migrated = 0;
-  for (const path8 of configPaths()) {
-    const config = await readConfig2(path8);
+  for (const path10 of configPaths()) {
+    const config = await readConfig2(path10);
     if (!config) continue;
-    const changed = await rewriteConfig(path8, config, newUrl);
+    const changed = await rewriteConfig(path10, config, newUrl);
     if (changed) {
-      console.log(`  Updated ${path8}`);
+      console.log(`  Updated ${path10}`);
       migrated++;
     }
   }
@@ -3759,9 +3761,9 @@ async function eslintInit(repoId, projectPath) {
   Install ${missingPkgs.length} missing packages? [Y/n] `
     );
     if (confirmed) {
-      const { execSync: execSync8 } = await import("node:child_process");
+      const { execSync: execSync9 } = await import("node:child_process");
       try {
-        execSync8(installCmd, { cwd: projectPath, stdio: "inherit" });
+        execSync9(installCmd, { cwd: projectPath, stdio: "inherit" });
         console.log("  Packages installed.\n");
       } catch (err) {
         console.error(
@@ -4196,7 +4198,7 @@ function setRetryDelayMs(ms) {
   RETRY_DELAY_MS = ms;
 }
 function sleep(ms) {
-  return new Promise((resolve8) => setTimeout(resolve8, ms));
+  return new Promise((resolve9) => setTimeout(resolve9, ms));
 }
 function isTransientMcpError(err) {
   if (!(err instanceof McpError)) return false;
@@ -6247,6 +6249,8 @@ var init_create_repo = __esm({
 // src/cli/version-status.ts
 var version_status_exports = {};
 __export(version_status_exports, {
+  fetchLatestVersion: () => fetchLatestVersion,
+  resolveGuard: () => resolveGuard,
   runVersionStatus: () => runVersionStatus
 });
 import { execFileSync, execSync as execSync6 } from "node:child_process";
@@ -6669,8 +6673,8 @@ async function resolveWorktreePortAllocations(repoId, projectPath) {
     const deviceId = await getOrCreateDeviceId(projectPath);
     let branch = "main";
     try {
-      const { execSync: execSync8 } = await import("node:child_process");
-      branch = execSync8("git symbolic-ref --short HEAD", {
+      const { execSync: execSync9 } = await import("node:child_process");
+      branch = execSync9("git symbolic-ref --short HEAD", {
         cwd: projectPath,
         encoding: "utf-8"
       }).trim();
@@ -7675,10 +7679,10 @@ async function runTechStack() {
         );
       }
       try {
-        const { execSync: execSync8 } = await import("node:child_process");
+        const { execSync: execSync9 } = await import("node:child_process");
         let branch = "main";
         try {
-          branch = execSync8("git symbolic-ref --short HEAD", {
+          branch = execSync9("git symbolic-ref --short HEAD", {
             cwd: projectPath,
             encoding: "utf-8"
           }).trim();
@@ -7823,6 +7827,301 @@ var init_tech_stack = __esm({
   }
 });
 
+// src/lib/claude-plan.ts
+import * as fs5 from "node:fs";
+import * as path6 from "node:path";
+function buildDriftPlan(projectDir, templatesDir, manifest) {
+  const packaged = walkTemplates(templatesDir);
+  const packagedBySrc = new Map(packaged.map((f) => [f.src, f]));
+  const manifestBySrc = new Map(manifest.files.map((f) => [f.src, f]));
+  const plan = {
+    unchanged: [],
+    overwriteSafe: [],
+    overwriteHandEdited: [],
+    newOptIn: [],
+    removedFromPackage: []
+  };
+  for (const pkg of packaged) {
+    const inManifest = manifestBySrc.get(pkg.src);
+    const absDest = path6.join(projectDir, ".claude", pkg.dest);
+    const absSrc = path6.join(templatesDir, pkg.src);
+    if (!inManifest) {
+      plan.newOptIn.push({
+        packaged: { src: pkg.src, dest: pkg.dest, hash: pkg.hash },
+        absSrc
+      });
+      continue;
+    }
+    const onDiskExists = fs5.existsSync(absDest);
+    const onDiskContent = onDiskExists ? fs5.readFileSync(absDest) : Buffer.alloc(0);
+    const onDiskHash = onDiskExists ? sha256(onDiskContent) : null;
+    if (pkg.hash === inManifest.hash && onDiskHash === inManifest.hash) {
+      plan.unchanged.push(inManifest);
+      continue;
+    }
+    if (onDiskHash !== null && onDiskHash !== inManifest.hash) {
+      plan.overwriteHandEdited.push({
+        packaged: { src: pkg.src, dest: pkg.dest, hash: pkg.hash },
+        absSrc,
+        onDiskContent
+      });
+    } else {
+      plan.overwriteSafe.push({
+        packaged: { src: pkg.src, dest: pkg.dest, hash: pkg.hash },
+        absSrc
+      });
+    }
+  }
+  for (const m of manifest.files) {
+    if (!packagedBySrc.has(m.src)) {
+      plan.removedFromPackage.push(m);
+    }
+  }
+  return plan;
+}
+var init_claude_plan = __esm({
+  "src/lib/claude-plan.ts"() {
+    "use strict";
+    init_template_walker();
+    init_hash();
+  }
+});
+
+// src/cli/claude/status.ts
+var status_exports = {};
+__export(status_exports, {
+  runStatus: () => runStatus
+});
+import * as fs6 from "node:fs";
+import * as path7 from "node:path";
+import { fileURLToPath as fileURLToPath2 } from "node:url";
+import { execSync as execSync8 } from "node:child_process";
+function makeFailSafe(checked_at) {
+  return {
+    installed: VERSION,
+    manifest_version: null,
+    latest: null,
+    newer: false,
+    version_skip: false,
+    drifted_files: [],
+    new_in_package: [],
+    removed_from_package: [],
+    settings_drift: false,
+    guarded: true,
+    guard_reason: "unknown",
+    in_sync: true,
+    action: null,
+    checked_at
+  };
+}
+function resolveTemplatesDirFromInstall() {
+  const here = path7.dirname(fileURLToPath2(import.meta.url));
+  const candidates = [
+    path7.resolve(here, "..", "templates"),
+    path7.resolve(here, "..", "..", "templates"),
+    path7.resolve(here, "..", "..", "..", "templates")
+  ];
+  for (const c of candidates) {
+    if (fs6.existsSync(c) && fs6.statSync(c).isDirectory()) {
+      return c;
+    }
+  }
+  throw new Error(
+    `codebyplan claude: could not locate templates/ directory. Probed:
+  ${candidates.join(
+      "\n  "
+    )}`
+  );
+}
+function resolveGitRoot2() {
+  try {
+    return execSync8("git rev-parse --show-toplevel", {
+      encoding: "utf-8"
+    }).trim();
+  } catch {
+    return null;
+  }
+}
+function resolveCurrentBranch2() {
+  try {
+    return execSync8("git symbolic-ref --short HEAD", {
+      encoding: "utf-8"
+    }).trim();
+  } catch {
+    try {
+      return execSync8("git rev-parse --abbrev-ref HEAD", {
+        encoding: "utf-8"
+      }).trim();
+    } catch {
+      return "";
+    }
+  }
+}
+async function runStatus(argv) {
+  const checked_at = (/* @__PURE__ */ new Date()).toISOString();
+  const writeCache = argv.includes("--write-cache");
+  const quiet = argv.includes("--quiet");
+  try {
+    const projectDir = resolveGitRoot2() ?? process.cwd();
+    let templatesDir;
+    try {
+      templatesDir = resolveTemplatesDirFromInstall();
+    } catch {
+      const gitRoot2 = resolveGitRoot2();
+      const currentBranch2 = resolveCurrentBranch2();
+      const { guardReason: guardReason2 } = await resolveGuard(gitRoot2, currentBranch2);
+      const result2 = {
+        ...makeFailSafe(checked_at),
+        // Mirror the main path: only the canonical source repo hides the
+        // segment. A protected_branch consumer whose templates can't be
+        // resolved must still be guarded:false (segment visible).
+        guarded: guardReason2 === "canonical_source",
+        guard_reason: guardReason2 ?? "no_manifest",
+        in_sync: true
+      };
+      emitResult(result2, writeCache, quiet, projectDir);
+      process.exit(0);
+      return;
+    }
+    const gitRoot = resolveGitRoot2();
+    const currentBranch = resolveCurrentBranch2();
+    const { guardReason } = await resolveGuard(gitRoot, currentBranch);
+    const manifest = readManifest(projectDir);
+    if (manifest === null || guardReason === "canonical_source") {
+      const result2 = {
+        installed: VERSION,
+        manifest_version: manifest === null ? null : manifest.version,
+        latest: null,
+        newer: false,
+        version_skip: false,
+        drifted_files: [],
+        new_in_package: [],
+        removed_from_package: [],
+        settings_drift: false,
+        guarded: true,
+        // guarded:true must always pair with a non-null reason. canonical_source
+        // keeps its reason; the bare no-manifest case (never-installed consumer)
+        // gets the "no_manifest" sentinel instead of null.
+        guard_reason: guardReason ?? "no_manifest",
+        in_sync: true,
+        action: null,
+        checked_at
+      };
+      emitResult(result2, writeCache, quiet, projectDir);
+      process.exit(0);
+      return;
+    }
+    const installed = VERSION;
+    const manifest_version = manifest.version;
+    const version_skip = manifest_version != null && compareSemver(installed, manifest_version) > 0;
+    const driftPlan = buildDriftPlan(projectDir, templatesDir, manifest);
+    const drifted_files = driftPlan.overwriteHandEdited.map(
+      (e) => e.packaged.dest
+    );
+    const new_in_package = driftPlan.newOptIn.map((e) => e.packaged.dest);
+    const removed_from_package = driftPlan.removedFromPackage.map(
+      (e) => e.dest
+    );
+    const latest = fetchLatestVersion();
+    const newer = latest !== null && compareSemver(latest, installed) > 0;
+    let settings_drift = false;
+    const settingsPath = path7.join(projectDir, ".claude", "settings.json");
+    const baseSettingsPath = path7.join(
+      templatesDir,
+      "settings.project.base.json"
+    );
+    const hooksJsonPath = path7.join(templatesDir, "hooks", "hooks.json");
+    if (fs6.existsSync(settingsPath)) {
+      try {
+        const settingsRaw = fs6.readFileSync(settingsPath, "utf8");
+        const before = JSON.stringify(JSON.parse(settingsRaw));
+        const cloned = JSON.parse(settingsRaw);
+        if (fs6.existsSync(baseSettingsPath)) {
+          const base = JSON.parse(
+            fs6.readFileSync(baseSettingsPath, "utf8")
+          );
+          mergeBaseSettingsIntoSettings(cloned, base);
+        }
+        if (fs6.existsSync(hooksJsonPath)) {
+          const hooksJson = JSON.parse(
+            fs6.readFileSync(hooksJsonPath, "utf8")
+          );
+          mergeHooksIntoSettings(cloned, hooksJson);
+        }
+        const after = JSON.stringify(cloned);
+        settings_drift = before !== after;
+      } catch {
+        settings_drift = false;
+      }
+    }
+    const in_sync = !version_skip && drifted_files.length === 0 && new_in_package.length === 0 && removed_from_package.length === 0 && !settings_drift;
+    let action = null;
+    if (guardReason !== "protected_branch") {
+      action = !in_sync ? newer ? "newer available + drift: run npx codebyplan claude update" : "run npx codebyplan claude update" : newer ? "newer available: run npx codebyplan claude update" : null;
+    }
+    const result = {
+      installed,
+      manifest_version,
+      latest,
+      newer,
+      version_skip,
+      drifted_files,
+      new_in_package,
+      removed_from_package,
+      settings_drift,
+      // Always false in the full-detection path: a protected_branch consumer
+      // (the only guarded case that reaches here) must still SEE the segment;
+      // only canonical_source / no-manifest (Branch A) report guarded:true.
+      guarded: false,
+      guard_reason: guardReason,
+      in_sync,
+      action,
+      checked_at
+    };
+    emitResult(result, writeCache, quiet, projectDir);
+    process.exit(0);
+  } catch (err) {
+    const safe = makeFailSafe(checked_at);
+    if (!quiet) {
+      try {
+        process.stdout.write(JSON.stringify(safe) + "\n");
+      } catch {
+      }
+    }
+    void err;
+    process.exit(0);
+  }
+}
+function emitResult(result, writeCache, quiet, projectDir) {
+  const json = JSON.stringify(result, null, 2);
+  if (writeCache) {
+    try {
+      const cacheDir = path7.join(projectDir, ".codebyplan");
+      fs6.mkdirSync(cacheDir, { recursive: true });
+      fs6.writeFileSync(
+        path7.join(cacheDir, "claude-status.local.json"),
+        json + "\n",
+        "utf8"
+      );
+    } catch {
+    }
+  }
+  if (!quiet) {
+    process.stdout.write(json + "\n");
+  }
+}
+var init_status = __esm({
+  "src/cli/claude/status.ts"() {
+    "use strict";
+    init_version();
+    init_bump();
+    init_manifest();
+    init_claude_plan();
+    init_settings_merge();
+    init_version_status();
+  }
+});
+
 // src/lib/prompt.ts
 import * as readline from "node:readline";
 async function ask(q, opts) {
@@ -7841,11 +8140,11 @@ async function ask(q, opts) {
   try {
     while (true) {
       const choices = q.choices.map((c) => `[${c.key}] ${c.label}`).join("  ");
-      const answer = await new Promise((resolve8) => {
+      const answer = await new Promise((resolve9) => {
         rl.question(`${q.message}
   ${choices}
 > `, (input) => {
-          resolve8(input.trim().toLowerCase());
+          resolve9(input.trim().toLowerCase());
         });
       });
       const match = q.choices.find(
@@ -7939,10 +8238,10 @@ var update_exports = {};
 __export(update_exports, {
   runUpdate: () => runUpdate
 });
-import * as fs5 from "node:fs";
+import * as fs7 from "node:fs";
 import * as os3 from "node:os";
-import * as path6 from "node:path";
-import { fileURLToPath as fileURLToPath2 } from "node:url";
+import * as path8 from "node:path";
+import { fileURLToPath as fileURLToPath3 } from "node:url";
 async function runUpdate(opts, deps = {}) {
   await Promise.resolve();
   const scope = opts.scope ?? "project";
@@ -7958,7 +8257,7 @@ async function runUpdate(opts, deps = {}) {
   const projectDir = deps.projectDir ?? process.cwd();
   let templatesDir;
   try {
-    templatesDir = deps.templatesDir ?? resolveTemplatesDirFromInstall();
+    templatesDir = deps.templatesDir ?? resolveTemplatesDirFromInstall2();
   } catch (err) {
     console.error(
       err instanceof Error ? err.message : `codebyplan claude update: ${String(err)}`
@@ -7972,16 +8271,16 @@ async function runUpdate(opts, deps = {}) {
       await runInstall(opts, { ...deps, templatesDir });
       return;
     }
-    const plan = buildPlan(projectDir, templatesDir, manifestBefore);
+    const plan = buildDriftPlan(projectDir, templatesDir, manifestBefore);
     const finalManifestEntries = [];
     for (const e of plan.unchanged) {
       finalManifestEntries.push(e);
     }
     for (const { packaged, absSrc } of plan.overwriteSafe) {
-      const absDest = path6.join(projectDir, ".claude", packaged.dest);
+      const absDest = path8.join(projectDir, ".claude", packaged.dest);
       if (!opts.dryRun) {
-        fs5.mkdirSync(path6.dirname(absDest), { recursive: true });
-        fs5.copyFileSync(absSrc, absDest);
+        fs7.mkdirSync(path8.dirname(absDest), { recursive: true });
+        fs7.copyFileSync(absSrc, absDest);
         if (opts.verbose) console.log(`updated ${packaged.dest}`);
       } else if (opts.verbose) {
         console.log(`[dry-run] would update ${packaged.dest}`);
@@ -7993,8 +8292,8 @@ async function runUpdate(opts, deps = {}) {
       absSrc,
       onDiskContent
     } of plan.overwriteHandEdited) {
-      const absDest = path6.join(projectDir, ".claude", packaged.dest);
-      const newContent = fs5.readFileSync(absSrc);
+      const absDest = path8.join(projectDir, ".claude", packaged.dest);
+      const newContent = fs7.readFileSync(absSrc);
       const showDiff = () => {
         console.log(
           renderDiff(
@@ -8006,8 +8305,8 @@ async function runUpdate(opts, deps = {}) {
       const answer = await promptOverwrite(packaged.dest, opts, showDiff);
       if (answer === "overwrite") {
         if (!opts.dryRun) {
-          fs5.mkdirSync(path6.dirname(absDest), { recursive: true });
-          fs5.copyFileSync(absSrc, absDest);
+          fs7.mkdirSync(path8.dirname(absDest), { recursive: true });
+          fs7.copyFileSync(absSrc, absDest);
         }
         finalManifestEntries.push(packaged);
       } else {
@@ -8022,10 +8321,10 @@ async function runUpdate(opts, deps = {}) {
     for (const { packaged, absSrc } of plan.newOptIn) {
       const answer = await promptOptIn(packaged.dest, opts);
       if (answer === "opt-in") {
-        const absDest = path6.join(projectDir, ".claude", packaged.dest);
+        const absDest = path8.join(projectDir, ".claude", packaged.dest);
         if (!opts.dryRun) {
-          fs5.mkdirSync(path6.dirname(absDest), { recursive: true });
-          fs5.copyFileSync(absSrc, absDest);
+          fs7.mkdirSync(path8.dirname(absDest), { recursive: true });
+          fs7.copyFileSync(absSrc, absDest);
         }
         finalManifestEntries.push(packaged);
         if (opts.verbose) console.log(`installed new file ${packaged.dest}`);
@@ -8036,25 +8335,25 @@ async function runUpdate(opts, deps = {}) {
     for (const e of plan.removedFromPackage) {
       const answer = await promptRemove(e.dest, opts);
       if (answer === "remove") {
-        const absDest = path6.join(projectDir, ".claude", e.dest);
-        if (!opts.dryRun && fs5.existsSync(absDest)) {
-          fs5.rmSync(absDest);
-          const claudeDir = path6.join(projectDir, ".claude");
-          let cur = path6.dirname(absDest);
-          while (cur !== claudeDir && cur !== path6.dirname(cur)) {
-            if (path6.dirname(cur) === claudeDir) break;
+        const absDest = path8.join(projectDir, ".claude", e.dest);
+        if (!opts.dryRun && fs7.existsSync(absDest)) {
+          fs7.rmSync(absDest);
+          const claudeDir = path8.join(projectDir, ".claude");
+          let cur = path8.dirname(absDest);
+          while (cur !== claudeDir && cur !== path8.dirname(cur)) {
+            if (path8.dirname(cur) === claudeDir) break;
             try {
-              fs5.rmdirSync(cur);
+              fs7.rmdirSync(cur);
               if (opts.verbose)
                 console.log(
-                  `pruned empty dir ${path6.relative(claudeDir, cur)}`
+                  `pruned empty dir ${path8.relative(claudeDir, cur)}`
                 );
-              cur = path6.dirname(cur);
+              cur = path8.dirname(cur);
             } catch (err) {
               const code = err.code;
               if (code !== "ENOTEMPTY" && code !== "ENOENT") {
                 console.warn(
-                  `codebyplan claude: could not prune empty dir ${path6.relative(claudeDir, cur)}: ${err.message}`
+                  `codebyplan claude: could not prune empty dir ${path8.relative(claudeDir, cur)}: ${err.message}`
                 );
               }
               break;
@@ -8066,28 +8365,28 @@ async function runUpdate(opts, deps = {}) {
         if (opts.verbose) console.log(`kept (untracked) ${e.dest}`);
       }
     }
-    const hooksJsonPath = path6.join(templatesDir, "hooks", "hooks.json");
-    const baseSettingsPath = path6.join(
+    const hooksJsonPath = path8.join(templatesDir, "hooks", "hooks.json");
+    const baseSettingsPath = path8.join(
       templatesDir,
       "settings.project.base.json"
     );
-    const settingsPath = path6.join(projectDir, ".claude", "settings.json");
-    const existingSettings = fs5.existsSync(settingsPath) ? JSON.parse(fs5.readFileSync(settingsPath, "utf8")) : {};
-    if (fs5.existsSync(baseSettingsPath)) {
+    const settingsPath = path8.join(projectDir, ".claude", "settings.json");
+    const existingSettings = fs7.existsSync(settingsPath) ? JSON.parse(fs7.readFileSync(settingsPath, "utf8")) : {};
+    if (fs7.existsSync(baseSettingsPath)) {
       const base = JSON.parse(
-        fs5.readFileSync(baseSettingsPath, "utf8")
+        fs7.readFileSync(baseSettingsPath, "utf8")
       );
       mergeBaseSettingsIntoSettings(existingSettings, base);
     }
-    if (fs5.existsSync(hooksJsonPath)) {
+    if (fs7.existsSync(hooksJsonPath)) {
       const hooksJson = JSON.parse(
-        fs5.readFileSync(hooksJsonPath, "utf8")
+        fs7.readFileSync(hooksJsonPath, "utf8")
       );
       mergeHooksIntoSettings(existingSettings, hooksJson);
     }
     if (!opts.dryRun) {
-      fs5.mkdirSync(path6.dirname(settingsPath), { recursive: true });
-      fs5.writeFileSync(
+      fs7.mkdirSync(path8.dirname(settingsPath), { recursive: true });
+      fs7.writeFileSync(
         settingsPath,
         JSON.stringify(existingSettings, null, 2) + "\n",
         "utf8"
@@ -8099,7 +8398,7 @@ async function runUpdate(opts, deps = {}) {
     );
     if (opts.verbose && gitignoreAction !== "unchanged") {
       console.log(
-        `${opts.dryRun ? "[dry-run] would " : ""}${gitignoreAction} managed .gitignore block in ${path6.relative(projectDir, path6.join(projectDir, ".gitignore"))}`
+        `${opts.dryRun ? "[dry-run] would " : ""}${gitignoreAction} managed .gitignore block in ${path8.relative(projectDir, path8.join(projectDir, ".gitignore"))}`
       );
     }
     if (!opts.dryRun) {
@@ -8125,7 +8424,7 @@ async function runUpdate(opts, deps = {}) {
 function runUpdateUser(opts, deps) {
   let templatesDir;
   try {
-    templatesDir = deps.templatesDir ?? resolveTemplatesDirFromInstall();
+    templatesDir = deps.templatesDir ?? resolveTemplatesDirFromInstall2();
   } catch (err) {
     console.error(
       err instanceof Error ? err.message : `codebyplan claude update: ${String(err)}`
@@ -8134,9 +8433,9 @@ function runUpdateUser(opts, deps) {
     return;
   }
   try {
-    const userDir = deps.userDir ?? path6.join(os3.homedir(), ".claude");
-    const settingsPath = path6.join(userDir, "settings.json");
-    const userBaseSettingsPath = path6.join(
+    const userDir = deps.userDir ?? path8.join(os3.homedir(), ".claude");
+    const settingsPath = path8.join(userDir, "settings.json");
+    const userBaseSettingsPath = path8.join(
       templatesDir,
       "settings.user.base.json"
     );
@@ -8148,7 +8447,7 @@ function runUpdateUser(opts, deps) {
       process.exitCode = 1;
       return;
     }
-    if (!fs5.existsSync(userBaseSettingsPath)) {
+    if (!fs7.existsSync(userBaseSettingsPath)) {
       console.error(
         "codebyplan claude update: settings.user.base.json not found in templates."
       );
@@ -8156,13 +8455,13 @@ function runUpdateUser(opts, deps) {
       return;
     }
     const userBase = JSON.parse(
-      fs5.readFileSync(userBaseSettingsPath, "utf8")
+      fs7.readFileSync(userBaseSettingsPath, "utf8")
     );
-    const existingSettings = fs5.existsSync(settingsPath) ? JSON.parse(fs5.readFileSync(settingsPath, "utf8")) : {};
+    const existingSettings = fs7.existsSync(settingsPath) ? JSON.parse(fs7.readFileSync(settingsPath, "utf8")) : {};
     mergeBaseSettingsIntoSettings(existingSettings, userBase);
     if (!opts.dryRun) {
-      fs5.mkdirSync(userDir, { recursive: true });
-      fs5.writeFileSync(
+      fs7.mkdirSync(userDir, { recursive: true });
+      fs7.writeFileSync(
         settingsPath,
         JSON.stringify(existingSettings, null, 2) + "\n",
         "utf8"
@@ -8185,64 +8484,15 @@ function runUpdateUser(opts, deps) {
     process.exitCode = 1;
   }
 }
-function buildPlan(projectDir, templatesDir, manifest) {
-  const packaged = walkTemplates(templatesDir);
-  const packagedBySrc = new Map(packaged.map((f) => [f.src, f]));
-  const manifestBySrc = new Map(manifest.files.map((f) => [f.src, f]));
-  const plan = {
-    unchanged: [],
-    overwriteSafe: [],
-    overwriteHandEdited: [],
-    newOptIn: [],
-    removedFromPackage: []
-  };
-  for (const pkg of packaged) {
-    const inManifest = manifestBySrc.get(pkg.src);
-    const absDest = path6.join(projectDir, ".claude", pkg.dest);
-    const absSrc = path6.join(templatesDir, pkg.src);
-    if (!inManifest) {
-      plan.newOptIn.push({
-        packaged: { src: pkg.src, dest: pkg.dest, hash: pkg.hash },
-        absSrc
-      });
-      continue;
-    }
-    const onDiskExists = fs5.existsSync(absDest);
-    const onDiskContent = onDiskExists ? fs5.readFileSync(absDest) : Buffer.alloc(0);
-    const onDiskHash = onDiskExists ? sha256(onDiskContent) : null;
-    if (pkg.hash === inManifest.hash && onDiskHash === inManifest.hash) {
-      plan.unchanged.push(inManifest);
-      continue;
-    }
-    if (onDiskHash !== null && onDiskHash !== inManifest.hash) {
-      plan.overwriteHandEdited.push({
-        packaged: { src: pkg.src, dest: pkg.dest, hash: pkg.hash },
-        absSrc,
-        onDiskContent
-      });
-    } else {
-      plan.overwriteSafe.push({
-        packaged: { src: pkg.src, dest: pkg.dest, hash: pkg.hash },
-        absSrc
-      });
-    }
-  }
-  for (const m of manifest.files) {
-    if (!packagedBySrc.has(m.src)) {
-      plan.removedFromPackage.push(m);
-    }
-  }
-  return plan;
-}
-function resolveTemplatesDirFromInstall() {
-  const here = path6.dirname(fileURLToPath2(import.meta.url));
+function resolveTemplatesDirFromInstall2() {
+  const here = path8.dirname(fileURLToPath3(import.meta.url));
   const candidates = [
-    path6.resolve(here, "..", "templates"),
-    path6.resolve(here, "..", "..", "templates"),
-    path6.resolve(here, "..", "..", "..", "templates")
+    path8.resolve(here, "..", "templates"),
+    path8.resolve(here, "..", "..", "templates"),
+    path8.resolve(here, "..", "..", "..", "templates")
   ];
   for (const c of candidates) {
-    if (fs5.existsSync(c) && fs5.statSync(c).isDirectory()) {
+    if (fs7.existsSync(c) && fs7.statSync(c).isDirectory()) {
       return c;
     }
   }
@@ -8256,14 +8506,14 @@ function resolveTemplatesDirFromInstall() {
 var init_update = __esm({
   "src/cli/claude/update.ts"() {
     "use strict";
-    init_template_walker();
     init_gitignore_block();
-    init_hash();
     init_manifest();
     init_settings_merge();
     init_prompt();
     init_install();
     init_statusline_config();
+    init_hash();
+    init_claude_plan();
   }
 });
 
@@ -8272,9 +8522,9 @@ var uninstall_exports = {};
 __export(uninstall_exports, {
   runUninstall: () => runUninstall
 });
-import * as fs6 from "node:fs";
+import * as fs8 from "node:fs";
 import * as os4 from "node:os";
-import * as path7 from "node:path";
+import * as path9 from "node:path";
 async function runUninstall(opts, deps = {}) {
   await Promise.resolve();
   const scope = opts.scope ?? "project";
@@ -8303,15 +8553,15 @@ async function runUninstall(opts, deps = {}) {
     let removed = 0;
     let warnings = 0;
     for (const entry of manifest.files) {
-      const abs = path7.join(projectDir, ".claude", entry.dest);
-      if (!fs6.existsSync(abs)) {
+      const abs = path9.join(projectDir, ".claude", entry.dest);
+      if (!fs8.existsSync(abs)) {
         console.warn(
           `codebyplan claude uninstall: ${entry.dest} already absent (skipping).`
         );
         warnings += 1;
         continue;
       }
-      const onDiskHash = sha256(fs6.readFileSync(abs));
+      const onDiskHash = sha256(fs8.readFileSync(abs));
       if (onDiskHash !== entry.hash) {
         console.warn(
           `codebyplan claude uninstall: ${entry.dest} has been modified locally; removing anyway.`
@@ -8319,7 +8569,7 @@ async function runUninstall(opts, deps = {}) {
         warnings += 1;
       }
       if (!opts.dryRun) {
-        fs6.rmSync(abs);
+        fs8.rmSync(abs);
       }
       removed += 1;
       if (opts.verbose) console.log(`removed ${entry.dest}`);
@@ -8327,15 +8577,15 @@ async function runUninstall(opts, deps = {}) {
     if (!opts.dryRun) {
       pruneEmptyManagedDirs(projectDir);
     }
-    const settingsPath = path7.join(projectDir, ".claude", "settings.json");
-    if (fs6.existsSync(settingsPath)) {
+    const settingsPath = path9.join(projectDir, ".claude", "settings.json");
+    if (fs8.existsSync(settingsPath)) {
       const settings = JSON.parse(
-        fs6.readFileSync(settingsPath, "utf8")
+        fs8.readFileSync(settingsPath, "utf8")
       );
-      const baseSettingsPath = templatesDir ? path7.join(templatesDir, "settings.project.base.json") : null;
-      if (baseSettingsPath && fs6.existsSync(baseSettingsPath)) {
+      const baseSettingsPath = templatesDir ? path9.join(templatesDir, "settings.project.base.json") : null;
+      if (baseSettingsPath && fs8.existsSync(baseSettingsPath)) {
         const base = JSON.parse(
-          fs6.readFileSync(baseSettingsPath, "utf8")
+          fs8.readFileSync(baseSettingsPath, "utf8")
         );
         stripBaseSettingsFromSettings(settings, base);
       }
@@ -8343,9 +8593,9 @@ async function runUninstall(opts, deps = {}) {
       if (!opts.dryRun) {
         const isEmpty = Object.keys(settings).length === 0;
         if (isEmpty) {
-          fs6.rmSync(settingsPath);
+          fs8.rmSync(settingsPath);
         } else {
-          fs6.writeFileSync(
+          fs8.writeFileSync(
             settingsPath,
             JSON.stringify(settings, null, 2) + "\n",
             "utf8"
@@ -8364,11 +8614,11 @@ async function runUninstall(opts, deps = {}) {
     }
     if (!opts.dryRun) {
       const m = manifestPath(projectDir);
-      if (fs6.existsSync(m)) fs6.rmSync(m);
+      if (fs8.existsSync(m)) fs8.rmSync(m);
       const mid = midManifestPath(projectDir);
-      if (fs6.existsSync(mid)) fs6.rmSync(mid);
+      if (fs8.existsSync(mid)) fs8.rmSync(mid);
       const legacy = oldManifestPath(projectDir);
-      if (fs6.existsSync(legacy)) fs6.rmSync(legacy);
+      if (fs8.existsSync(legacy)) fs8.rmSync(legacy);
     }
     console.log(
       `codebyplan claude uninstall${opts.dryRun ? " (dry-run)" : ""}: removed ${removed} files${warnings > 0 ? ` (${warnings} warnings)` : ""}.`
@@ -8390,7 +8640,7 @@ function runUninstallUser(opts, deps) {
     }
   }
   try {
-    const userDir = deps.userDir ?? path7.join(os4.homedir(), ".claude");
+    const userDir = deps.userDir ?? path9.join(os4.homedir(), ".claude");
     const existingManifest = readManifestForScope("user", userDir);
     if (!existingManifest) {
       console.error(
@@ -8399,24 +8649,24 @@ function runUninstallUser(opts, deps) {
       process.exitCode = 1;
       return;
     }
-    const settingsPath = path7.join(userDir, "settings.json");
-    if (fs6.existsSync(settingsPath)) {
+    const settingsPath = path9.join(userDir, "settings.json");
+    if (fs8.existsSync(settingsPath)) {
       const settings = JSON.parse(
-        fs6.readFileSync(settingsPath, "utf8")
+        fs8.readFileSync(settingsPath, "utf8")
       );
-      const userBaseSettingsPath = templatesDir != null ? path7.join(templatesDir, "settings.user.base.json") : null;
-      if (userBaseSettingsPath && fs6.existsSync(userBaseSettingsPath)) {
+      const userBaseSettingsPath = templatesDir != null ? path9.join(templatesDir, "settings.user.base.json") : null;
+      if (userBaseSettingsPath && fs8.existsSync(userBaseSettingsPath)) {
         const userBase = JSON.parse(
-          fs6.readFileSync(userBaseSettingsPath, "utf8")
+          fs8.readFileSync(userBaseSettingsPath, "utf8")
         );
         stripBaseSettingsFromSettings(settings, userBase);
       }
       if (!opts.dryRun) {
         const isEmpty = Object.keys(settings).length === 0;
         if (isEmpty) {
-          fs6.rmSync(settingsPath);
+          fs8.rmSync(settingsPath);
         } else {
-          fs6.writeFileSync(
+          fs8.writeFileSync(
             settingsPath,
             JSON.stringify(settings, null, 2) + "\n",
             "utf8"
@@ -8426,11 +8676,11 @@ function runUninstallUser(opts, deps) {
     }
     if (!opts.dryRun) {
       const m = userManifestPath(userDir);
-      if (fs6.existsSync(m)) fs6.rmSync(m);
+      if (fs8.existsSync(m)) fs8.rmSync(m);
       const midUser = userMidManifestPath(userDir);
-      if (fs6.existsSync(midUser)) fs6.rmSync(midUser);
+      if (fs8.existsSync(midUser)) fs8.rmSync(midUser);
       const oldUser = userOldManifestPath(userDir);
-      if (fs6.existsSync(oldUser)) fs6.rmSync(oldUser);
+      if (fs8.existsSync(oldUser)) fs8.rmSync(oldUser);
     }
     console.log(
       `codebyplan claude uninstall --scope user${opts.dryRun ? " (dry-run)" : ""}: user base settings stripped.`
@@ -8445,23 +8695,23 @@ function runUninstallUser(opts, deps) {
 function pruneEmptyManagedDirs(projectDir) {
   const managedRoots = ["skills", "agents", "hooks", "rules"];
   for (const root of managedRoots) {
-    const abs = path7.join(projectDir, ".claude", root);
-    if (!fs6.existsSync(abs)) continue;
+    const abs = path9.join(projectDir, ".claude", root);
+    if (!fs8.existsSync(abs)) continue;
     pruneLeafFirst(abs);
   }
 }
 function pruneLeafFirst(dir) {
-  if (!fs6.existsSync(dir)) return;
-  const stat2 = fs6.statSync(dir);
+  if (!fs8.existsSync(dir)) return;
+  const stat2 = fs8.statSync(dir);
   if (!stat2.isDirectory()) return;
-  for (const entry of fs6.readdirSync(dir, { withFileTypes: true })) {
+  for (const entry of fs8.readdirSync(dir, { withFileTypes: true })) {
     if (entry.isDirectory()) {
-      pruneLeafFirst(path7.join(dir, entry.name));
+      pruneLeafFirst(path9.join(dir, entry.name));
     }
   }
-  const remaining = fs6.readdirSync(dir);
+  const remaining = fs8.readdirSync(dir);
   if (remaining.length === 0) {
-    fs6.rmdirSync(dir);
+    fs8.rmdirSync(dir);
   }
 }
 var init_uninstall = __esm({
@@ -8477,13 +8727,13 @@ var init_uninstall = __esm({
 
 // src/index.ts
 init_version();
-import { readFileSync as readFileSync8 } from "node:fs";
-import { resolve as resolve7 } from "node:path";
+import { readFileSync as readFileSync10 } from "node:fs";
+import { resolve as resolve8 } from "node:path";
 void (async () => {
   if (!process.env.CODEBYPLAN_API_KEY) {
     try {
-      const envPath = resolve7(process.cwd(), ".env.local");
-      const content = readFileSync8(envPath, "utf-8");
+      const envPath = resolve8(process.cwd(), ".env.local");
+      const content = readFileSync10(envPath, "utf-8");
       for (const line of content.split("\n")) {
         const trimmed = line.trim();
         if (!trimmed || trimmed.startsWith("#")) continue;
@@ -8640,6 +8890,11 @@ void (async () => {
     const subcommand = process.argv[3];
     const flagArgs = process.argv.slice(3);
     const parsed = parseClaudeFlags(flagArgs);
+    if (subcommand === "status") {
+      const { runStatus: runStatus2 } = await Promise.resolve().then(() => (init_status(), status_exports));
+      await runStatus2(process.argv.slice(4));
+      return;
+    }
     if (subcommand === "install") {
       if (parsed === null) {
         process.exit(1);
@@ -8680,6 +8935,9 @@ void (async () => {
     codebyplan claude install [flags]     Install skills/agents/hooks into ./.claude/
     codebyplan claude update  [flags]     Update installed assets to latest versions
     codebyplan claude uninstall [flags]   Remove installed assets from ./.claude/
+    codebyplan claude status              Check package-sync state (drift, version skip, settings drift)
+                                           --write-cache  Write result to .codebyplan/claude-status.local.json
+                                           --quiet        Suppress stdout output
 
   Flags (apply to install/update/uninstall):
     --yes, -y               Auto-accept every prompt with its recommended default