ppcos 1.0.1 → 1.0.3

package/bin/ppcos.js

@@ -25,10 +25,12 @@ const pkg = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8
  */
 function gated(fn) {
   return async (...args) => {
-    const auth = requireAuth();
-    if (!auth) {
-      process.exitCode = 1;
-      return;
+    if (!process.env.PPCOS_DEV) {
+      const auth = requireAuth();
+      if (!auth) {
+        process.exitCode = 1;
+        return;
+      }
     }
     return fn(...args);
   };

package/lib/commands/init.js

@@ -4,7 +4,7 @@
  * Usage: ppcos init <client-name> [--skip-config]
  */
 
-import { readFileSync, existsSync } from 'node:fs';
+import { readFileSync, existsSync, rmSync } from 'node:fs';
 import { readFile, writeFile } from 'node:fs/promises';
 import { join, dirname } from 'node:path';
 import { fileURLToPath } from 'node:url';
@@ -13,7 +13,6 @@ import { calculateChecksum } from '../utils/checksum.js';
 import { createManifest, writeManifest, manifestExists, getManagedType } from '../utils/manifest.js';
 import { getAllFiles, copyFileWithDirs, ensureDir, fileExists } from '../utils/fs-helpers.js';
 import { fetchSkills } from '../utils/skills-fetcher.js';
-import { requireAuth } from '../utils/auth.js';
 import logger from '../utils/logger.js';
 import ora from 'ora';
 
@@ -152,14 +151,17 @@ export default async function init(clientName, options = {}) {
 
   // 3. Fetch skills from API (with local fallback for dev/testing)
   const spinner = ora('Fetching skills from API...').start();
-  let usedLocalFallback = false;
-
   try {
     await fetchSkills(clientDir);
     spinner.succeed('Skills downloaded');
   } catch (error) {
     spinner.fail('Failed to fetch skills');
 
+    // Clean up partial directory from failed download
+    if (existsSync(clientDir)) {
+      rmSync(clientDir, { recursive: true, force: true });
+    }
+
     // Fallback to local .claude-base for development/testing
     const basePath = getBaseTemplatePath();
     if (existsSync(basePath)) {
@@ -171,7 +173,6 @@ export default async function init(clientName, options = {}) {
         const destPath = join(clientDir, relativePath);
         await copyFileWithDirs(srcPath, destPath);
       }
-      usedLocalFallback = true;
     } else {
       logger.error(error.message);
       logger.error('No local fallback available. Run: ppcos login');

package/lib/commands/status.js

@@ -12,7 +12,6 @@ import {
   manifestExists,
   detectModifications
 } from '../utils/manifest.js';
-import { getAllFiles } from '../utils/fs-helpers.js';
 import { readAuth } from '../utils/auth.js';
 import logger from '../utils/logger.js';
 import chalk from 'chalk';
@@ -32,14 +31,6 @@ function getPackageVersion() {
   return pkg.version;
 }
 
-/**
- * Get path to .claude-base template directory
- * @returns {string}
- */
-function getBaseTemplatePath() {
-  return join(PACKAGE_ROOT, '.claude-base');
-}
-
 /**
  * Get clients directory path
  * @returns {string}
@@ -94,8 +85,9 @@ function findCustomSkills(clientDir, manifest) {
   // Get managed skill directories from manifest
   const managedSkillDirs = new Set();
   for (const path of Object.keys(manifest.managedFiles)) {
-    if (path.startsWith('.claude/skills/')) {
-      const parts = path.split('/');
+    const normalized = path.replace(/\\/g, '/');
+    if (normalized.startsWith('.claude/skills/')) {
+      const parts = normalized.split('/');
       if (parts.length >= 3) {
         managedSkillDirs.add(parts[2]);
       }
@@ -119,18 +111,14 @@ function findCustomSkills(clientDir, manifest) {
 async function getClientStatus(clientName) {
   const clientsDir = getClientsDir();
   const clientDir = join(clientsDir, clientName);
-  const basePath = getBaseTemplatePath();
   const packageVersion = getPackageVersion();
 
   // Read manifest
   const manifest = await readManifest(clientDir);
   const currentVersion = manifest.baseVersion;
 
-  // Get base template files for detecting modifications
-  const baseFiles = await getAllFiles(basePath);
-
-  // Detect modifications
-  const mods = await detectModifications(clientDir, manifest, baseFiles);
+  // Detect modifications (no base files needed — status only uses manifest checksums)
+  const mods = await detectModifications(clientDir, manifest);
 
   // Find custom skills
   const customSkills = findCustomSkills(clientDir, manifest);
@@ -164,15 +152,6 @@ async function getClientStatus(clientName) {
  */
 export default async function status(options = {}) {
   const packageVersion = getPackageVersion();
-  const basePath = getBaseTemplatePath();
-
-  // Check base template exists
-  if (!existsSync(basePath)) {
-    logger.error('Template directory not found. Package may be corrupted.');
-    process.exitCode = 1;
-    return;
-  }
-
   // Discover clients
   let clients = discoverClients();
 
@@ -281,7 +260,6 @@ export default async function status(options = {}) {
 // Export helpers for testing
 export {
   getPackageVersion,
-  getBaseTemplatePath,
   getClientsDir,
   discoverClients,
   findCustomSkills,

package/lib/commands/update.js

@@ -4,8 +4,8 @@
  * Usage: ppcos update [--client <name>] [--dry-run]
  */
 
-import { readFileSync, existsSync, readdirSync } from 'node:fs';
-import { join, dirname } from 'node:path';
+import { readFileSync, writeFileSync, existsSync, readdirSync, unlinkSync } from 'node:fs';
+import { join, dirname, sep } from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { createInterface } from 'node:readline';
 import {
@@ -25,9 +25,9 @@ import {
   createBackupTimestamp
 } from '../utils/fs-helpers.js';
 import { fetchSkills } from '../utils/skills-fetcher.js';
-import { requireAuth } from '../utils/auth.js';
 import { mkdtempSync, rmSync } from 'node:fs';
 import { tmpdir } from 'node:os';
+import { displayDiffs } from '../utils/diff.js';
 import logger from '../utils/logger.js';
 import ora from 'ora';
 
@@ -75,6 +75,80 @@ async function ensureMemoryFolder(clientDir) {
   }
 }
 
+/**
+ * One-time migration: merge deny rules into settings.local.json
+ * Adds missing deny entries without touching existing config
+ */
+function migrateSettingsDenyRules(clientDir) {
+  const settingsPath = join(clientDir, '.claude', 'settings.local.json');
+  if (!existsSync(settingsPath)) return;
+
+  const requiredDeny = [
+    'Read(./.env)',
+    'Read(./.env.*)',
+    'Read(./secrets/**)'
+  ];
+
+  try {
+    const settings = JSON.parse(readFileSync(settingsPath, 'utf8'));
+    if (!settings.permissions) settings.permissions = {};
+    const existing = settings.permissions.deny || [];
+    const toAdd = requiredDeny.filter(rule => !existing.includes(rule));
+
+    if (toAdd.length === 0) return;
+
+    settings.permissions.deny = [...existing, ...toAdd];
+    writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+    logger.info(`  Added ${toAdd.length} deny rule${toAdd.length !== 1 ? 's' : ''} to settings.local.json`);
+  } catch {
+    // Don't fail update over migration
+  }
+}
+
+/**
+ * One-time migration: normalize backslash manifest keys to forward slashes.
+ * On Windows, getAllFiles() returned backslash paths which were stored as manifest keys.
+ * This normalizes them so lookups work cross-platform.
+ */
+function migrateManifestKeys(manifest) {
+  let fixed = 0;
+  for (const [key, value] of Object.entries(manifest.managedFiles)) {
+    const normalized = key.replace(/\\/g, '/');
+    if (normalized !== key) {
+      delete manifest.managedFiles[key];
+      manifest.managedFiles[normalized] = value;
+      fixed++;
+    }
+  }
+  for (const conflict of (manifest.conflicts || [])) {
+    if (conflict.file) {
+      conflict.file = conflict.file.replace(/\\/g, '/');
+    }
+  }
+  if (fixed > 0) {
+    logger.info(`  Normalized ${fixed} manifest key${fixed !== 1 ? 's' : ''}`);
+  }
+}
+
+/**
+ * One-time migration: fix managedType for config files.
+ * On Windows, isConfigFile() failed due to backslash paths, so config files
+ * got stored with managedType 'update' instead of 'config'.
+ * This corrects existing manifests in-place (before detectModifications runs).
+ */
+function migrateConfigManagedTypes(manifest) {
+  let fixed = 0;
+  for (const [path, info] of Object.entries(manifest.managedFiles)) {
+    if (isConfigFile(path) && info.managedType !== 'config') {
+      info.managedType = 'config';
+      fixed++;
+    }
+  }
+  if (fixed > 0) {
+    logger.info(`  Fixed managedType for ${fixed} config file${fixed !== 1 ? 's' : ''}`);
+  }
+}
+
 /**
  * Find all client directories with .managed.json
  * @returns {string[]} Array of client names
@@ -104,21 +178,29 @@ function discoverClients() {
 /**
  * Prompt user for conflict resolution
  * @param {string[]} modifiedFiles - List of modified file paths
- * @returns {Promise<'backup'|'skip'|'cancel'>}
+ * @param {string} clientDir - Path to client directory
+ * @param {string} basePath - Path to base template directory
+ * @returns {Promise<'backup'|'overwrite'|'skip'|'cancel'>}
  */
-async function promptConflictResolution(modifiedFiles) {
+async function promptConflictResolution(modifiedFiles, clientDir, basePath) {
   console.log('');
   logger.warn('Modified files detected:');
   for (const file of modifiedFiles) {
     console.log(`  - ${file}`);
   }
 
-  console.log('');
-  console.log('Options:');
-  console.log('  [1] Backup and overwrite (files saved to .backup/)');
-  console.log('  [2] Skip modified files (keep your changes)');
-  console.log('  [3] Cancel update');
-  console.log('');
+  const showMenu = () => {
+    console.log('');
+    console.log('Options:');
+    console.log('  [d] View differences');
+    console.log('  [1] Backup and overwrite (files saved to .backup/)');
+    console.log('  [2] Overwrite without backup (discard your changes)');
+    console.log('  [3] Skip modified files (keep your changes)');
+    console.log('  [4] Cancel update');
+    console.log('');
+  };
+
+  showMenu();
 
   const rl = createInterface({
     input: process.stdin,
@@ -127,19 +209,26 @@ async function promptConflictResolution(modifiedFiles) {
 
   return new Promise((resolve) => {
     const ask = () => {
-      rl.question('Choice [1/2/3]: ', (answer) => {
-        const choice = answer.trim();
-        if (choice === '1') {
+      rl.question('Choice [d/1/2/3/4]: ', (answer) => {
+        const choice = answer.trim().toLowerCase();
+        if (choice === 'd') {
+          displayDiffs(modifiedFiles, clientDir, basePath);
+          showMenu();
+          ask();
+        } else if (choice === '1') {
           rl.close();
           resolve('backup');
         } else if (choice === '2') {
           rl.close();
-          resolve('skip');
+          resolve('overwrite');
         } else if (choice === '3') {
+          rl.close();
+          resolve('skip');
+        } else if (choice === '4') {
           rl.close();
           resolve('cancel');
         } else {
-          console.log('Invalid choice. Please enter 1, 2, or 3.');
+          console.log('Invalid choice. Please enter d, 1, 2, 3, or 4.');
           ask();
         }
       });
@@ -175,6 +264,21 @@ async function backupFiles(clientDir, files) {
   const { writeFile } = await import('node:fs/promises');
   await writeFile(join(backupDir, 'manifest.txt'), manifestContent);
 
+  // Verify all files were actually backed up before returning
+  const { readFileSync } = await import('node:fs');
+  for (const relativePath of files) {
+    const backedUpPath = join(backupDir, relativePath);
+    if (!existsSync(backedUpPath)) {
+      throw new Error(`Backup verification failed: ${relativePath} was not created in ${backupDir}`);
+    }
+    // Verify content matches source (guards against empty/placeholder files from cloud sync)
+    const srcContent = readFileSync(join(clientDir, relativePath));
+    const backupContent = readFileSync(backedUpPath);
+    if (!srcContent.equals(backupContent)) {
+      throw new Error(`Backup verification failed: ${relativePath} content mismatch (possible cloud sync interference)`);
+    }
+  }
+
   return backupDir;
 }
 
@@ -204,8 +308,11 @@ async function updateClient(clientName, basePathOrOptions = {}, options = {}) {
   const manifest = await readManifest(clientDir);
   const currentVersion = manifest.baseVersion;
 
-  // Auto-create memory folder for existing clients (migration)
+  // Migrations for existing clients
   await ensureMemoryFolder(clientDir);
+  migrateSettingsDenyRules(clientDir);
+  migrateManifestKeys(manifest);
+  migrateConfigManagedTypes(manifest);
 
   // Check if already up to date
   if (currentVersion === packageVersion) {
@@ -218,6 +325,28 @@ async function updateClient(clientName, basePathOrOptions = {}, options = {}) {
   // Detect modifications
   const mods = await detectModifications(clientDir, manifest, baseFiles);
 
+  // Guard: if downloaded base is empty or incomplete, something went wrong — abort
+  const managedUpdateFiles = Object.keys(manifest.managedFiles).filter(f => {
+    const managedType = manifest.managedFiles[f].managedType || 'update';
+    return managedType !== 'config';
+  });
+
+  if (managedUpdateFiles.length > 0 && baseFiles.length < managedUpdateFiles.length * 0.5) {
+    logger.error(`  Downloaded template looks incomplete (${baseFiles.length} files vs ${managedUpdateFiles.length} expected) — aborting update for ${clientName}`);
+    return { status: 'cancelled' };
+  }
+
+  // Detect files removed from base template (orphans)
+  const baseFileSet = new Set(baseFiles);
+  const orphanedFiles = Object.keys(manifest.managedFiles).filter(f => {
+    const managedType = manifest.managedFiles[f].managedType || 'update';
+    return managedType !== 'config' && !baseFileSet.has(f);
+  });
+
+  // Separate modified files that are orphaned (handled differently)
+  const orphanSet = new Set(orphanedFiles);
+  const modifiedNonOrphans = mods.modified.filter(f => !orphanSet.has(f));
+
   // Dry run output
   if (options.dryRun) {
     return {
@@ -228,27 +357,35 @@ async function updateClient(clientName, basePathOrOptions = {}, options = {}) {
         unchanged: mods.unchanged.length,
         modified: mods.modified,
         missing: mods.missing,
-        newInBase: mods.newInBase
+        newInBase: mods.newInBase,
+        removedFromBase: orphanedFiles
       }
     };
   }
 
-  // Handle modified files
+  // Handle modified files (excluding orphans, which are handled separately)
   let resolution = null;
   let backedUpFiles = [];
 
-  if (mods.modified.length > 0) {
+  if (modifiedNonOrphans.length > 0) {
     console.log(`Updating ${clientName} (v${currentVersion} → v${packageVersion})`);
-    resolution = await promptConflictResolution(mods.modified);
+    resolution = await promptConflictResolution(modifiedNonOrphans, clientDir, basePath);
 
     if (resolution === 'cancel') {
       return { status: 'cancelled' };
     }
 
     if (resolution === 'backup') {
-      const backupDir = await backupFiles(clientDir, mods.modified);
-      backedUpFiles = mods.modified;
-      console.log(`  Backed up ${mods.modified.length} modified files to ${backupDir.replace(clientDir + '/', '')}`);
+      try {
+        const backupDir = await backupFiles(clientDir, modifiedNonOrphans);
+        backedUpFiles = modifiedNonOrphans;
+        const relativePath = backupDir.replace(clientDir + sep, '');
+        console.log(`  Backed up ${modifiedNonOrphans.length} modified files to ${relativePath}`);
+      } catch (err) {
+        logger.error(`  Backup failed: ${err.message}`);
+        logger.error('  Update aborted — no files were overwritten.');
+        return { status: 'cancelled' };
+      }
     }
   }
 
@@ -262,7 +399,7 @@ async function updateClient(clientName, basePathOrOptions = {}, options = {}) {
       continue;
     }
 
-    if (mods.modified.includes(file) && resolution === 'skip') {
+    if (modifiedNonOrphans.includes(file) && resolution === 'skip') {
       filesToSkip.push(file);
     } else {
       filesToUpdate.push(file);
@@ -276,31 +413,71 @@ async function updateClient(clientName, basePathOrOptions = {}, options = {}) {
     const srcPath = join(basePath, relativePath);
     const destPath = join(clientDir, relativePath);
 
+    const srcChecksum = await calculateChecksum(srcPath);
     await copyFileWithDirs(srcPath, destPath);
 
-    const checksum = await calculateChecksum(destPath);
+    // Verify copy integrity (guards against cloud sync placeholder files)
+    let destChecksum = await calculateChecksum(destPath);
+    if (destChecksum !== srcChecksum) {
+      // Retry once — cloud sync may have interfered
+      await copyFileWithDirs(srcPath, destPath);
+      destChecksum = await calculateChecksum(destPath);
+      if (destChecksum !== srcChecksum) {
+        logger.error(`  File write failed for ${relativePath} (possible cloud sync interference).`);
+        logger.error('  Update aborted — try running update again.');
+        return { status: 'cancelled' };
+      }
+    }
 
     // Preserve managedType from existing manifest or determine new
     const existingEntry = manifest.managedFiles[relativePath];
     const managedType = existingEntry?.managedType || getManagedType(relativePath);
 
     updatedFiles[relativePath] = {
-      checksum,
+      checksum: srcChecksum,
       version: packageVersion,
       managedType
     };
   }
 
+  // Remove orphaned files (removed from base template)
+  let removedCount = 0;
+  if (orphanedFiles.length > 0) {
+    // Back up modified orphans before removing
+    const modifiedOrphans = orphanedFiles.filter(f => mods.modified.includes(f));
+    if (modifiedOrphans.length > 0) {
+      try {
+        const backupDir = await backupFiles(clientDir, modifiedOrphans);
+        const relPath = backupDir.replace(clientDir + sep, '');
+        console.log(`  Backed up ${modifiedOrphans.length} modified removed file${modifiedOrphans.length !== 1 ? 's' : ''} to ${relPath}`);
+      } catch (err) {
+        logger.error(`  Backup of removed files failed: ${err.message}`);
+        logger.error('  Update aborted — no files were removed.');
+        return { status: 'cancelled' };
+      }
+    }
+
+    for (const relativePath of orphanedFiles) {
+      const fullPath = join(clientDir, relativePath);
+      if (existsSync(fullPath)) {
+        unlinkSync(fullPath);
+        removedCount++;
+      }
+      delete manifest.managedFiles[relativePath];
+    }
+  }
+
   // Update manifest
   manifest.baseVersion = packageVersion;
   manifest.lastUpdated = new Date().toISOString();
+  manifest.conflicts = []; // Clear stale conflicts from previous updates
 
   // Update file entries
   for (const [path, info] of Object.entries(updatedFiles)) {
     manifest.managedFiles[path] = info;
   }
 
-  // Record skipped files as conflicts
+  // Record skipped files as conflicts (only from this update)
   for (const file of filesToSkip) {
     addConflict(manifest, file, 'User modified - skipped during update', packageVersion);
   }
@@ -314,7 +491,8 @@ async function updateClient(clientName, basePathOrOptions = {}, options = {}) {
       toVersion: packageVersion,
       updatedCount: filesToUpdate.length,
       skippedCount: filesToSkip.length,
-      backedUpCount: backedUpFiles.length
+      backedUpCount: backedUpFiles.length,
+      removedCount
     }
   };
 }
@@ -333,19 +511,31 @@ export default async function update(options = {}) {
   const tempDir = mkdtempSync(join(tmpdir(), 'ppcos-update-'));
 
   let basePath;
-  try {
-    await fetchSkills(tempDir);
-    basePath = tempDir;
-    spinner.succeed('Skills downloaded');
-  } catch (error) {
-    spinner.fail('Failed to download skills');
-    logger.error(error.message);
-    logger.info('Falling back to local template if available...');
-
-    // Fallback to local template during migration period
+  if (process.env.PPCOS_DEV) {
+    // Dev mode: use local .claude-base instead of API
     basePath = getBaseTemplatePath();
     if (!existsSync(basePath)) {
-      logger.error('No local template available. Cannot update.');
+      spinner.fail('No local .claude-base found');
+      rmSync(tempDir, { recursive: true, force: true });
+      return;
+    }
+    spinner.succeed('Using local .claude-base (dev mode)');
+    rmSync(tempDir, { recursive: true, force: true });
+  } else {
+    try {
+      await fetchSkills(tempDir);
+      basePath = tempDir;
+      spinner.succeed('Skills downloaded');
+    } catch (error) {
+      spinner.fail('Failed to download skills');
+      logger.error(error.message);
+
+      if (error.message.includes('Not authenticated') || error.message.includes('401') || error.message.includes('expired')) {
+        logger.info('Try: ppcos login');
+      } else {
+        logger.info('Check your internet connection and try again.');
+      }
+
       process.exitCode = 1;
       rmSync(tempDir, { recursive: true, force: true });
       return;
@@ -363,6 +553,7 @@ export default async function update(options = {}) {
     console.log('');
     console.log('Or create main-config.json and run:');
     console.log('  ppcos init-all');
+    rmSync(tempDir, { recursive: true, force: true });
     return;
   }
 
@@ -371,6 +562,7 @@ export default async function update(options = {}) {
     if (!clients.includes(options.client)) {
       logger.error(`Client "${options.client}" not found.`);
       process.exitCode = 1;
+      rmSync(tempDir, { recursive: true, force: true });
       return;
     }
     clients = [options.client];
@@ -416,6 +608,13 @@ export default async function update(options = {}) {
           }
         }
 
+        if (d.removedFromBase.length > 0) {
+          console.log(`  Removed: ${d.removedFromBase.length} files`);
+          for (const file of d.removedFromBase) {
+            console.log(`    - ${file}`);
+          }
+        }
+
         console.log('');
         results.skipped++;
       } else if (result.status === 'up-to-date') {
@@ -432,6 +631,9 @@ export default async function update(options = {}) {
       } else if (result.status === 'updated') {
         const d = result.details;
         console.log(`  Updated ${d.updatedCount} files`);
+        if (d.removedCount > 0) {
+          console.log(`  Removed ${d.removedCount} orphaned files`);
+        }
         if (d.skippedCount > 0) {
           console.log(`  Skipped ${d.skippedCount} modified files`);
         }

package/lib/utils/diff.js

@@ -0,0 +1,74 @@
+/**
+ * Diff utilities - Show file differences in terminal
+ */
+import { readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { createTwoFilesPatch } from 'diff';
+import chalk from 'chalk';
+
+const MAX_DIFF_LINES = 200;
+
+/**
+ * Generate a colored inline diff between two files
+ * @param {string} oldPath - Path to current (user-modified) file
+ * @param {string} newPath - Path to incoming (base template) file
+ * @param {string} label - Display name for the file
+ * @param {number} [maxLines] - Max diff lines to show
+ * @returns {string} Formatted diff string for terminal
+ */
+export function formatFileDiff(oldPath, newPath, label, maxLines = MAX_DIFF_LINES) {
+  const oldContent = readFileSync(oldPath, 'utf8');
+  const newContent = readFileSync(newPath, 'utf8');
+
+  const patch = createTwoFilesPatch(
+    `your version: ${label}`,
+    `incoming update: ${label}`,
+    oldContent,
+    newContent,
+    '', '',
+    { context: 3 }
+  );
+
+  const lines = patch.split('\n');
+  const coloredLines = lines.map(line => {
+    if (line.startsWith('+') && !line.startsWith('+++')) {
+      return chalk.green(line);
+    } else if (line.startsWith('-') && !line.startsWith('---')) {
+      return chalk.red(line);
+    } else if (line.startsWith('@@')) {
+      return chalk.cyan(line);
+    }
+    return line;
+  });
+
+  if (coloredLines.length > maxLines) {
+    const truncated = coloredLines.slice(0, maxLines);
+    truncated.push('');
+    truncated.push(chalk.gray(`  ... ${coloredLines.length - maxLines} more lines (truncated)`));
+    return truncated.join('\n');
+  }
+
+  return coloredLines.join('\n');
+}
+
+/**
+ * Display diffs for all modified files
+ * @param {string[]} modifiedFiles - Relative paths of modified files
+ * @param {string} clientDir - Path to client directory
+ * @param {string} basePath - Path to base template directory
+ */
+export function displayDiffs(modifiedFiles, clientDir, basePath) {
+  console.log('');
+  console.log(chalk.gray(`  ${chalk.red('- red')}   = your version (will be replaced)`));
+  console.log(chalk.gray(`  ${chalk.green('+ green')} = incoming update`));
+
+  for (const file of modifiedFiles) {
+    const clientFile = join(clientDir, file);
+    const baseFile = join(basePath, file);
+
+    console.log('');
+    console.log(chalk.bold.underline(file));
+    console.log(formatFileDiff(clientFile, baseFile, file));
+  }
+  console.log('');
+}

package/lib/utils/fs-helpers.js

@@ -45,7 +45,7 @@ export async function getAllFiles(dir, baseDir = dir) {
     if (entry.isDirectory()) {
       files.push(...await getAllFiles(fullPath, baseDir));
     } else {
-      files.push(relative(baseDir, fullPath));
+      files.push(relative(baseDir, fullPath).replace(/\\/g, '/'));
     }
   }
 
@@ -67,7 +67,7 @@ export function getAllFilesSync(dir, baseDir = dir) {
     if (entry.isDirectory()) {
       files.push(...getAllFilesSync(fullPath, baseDir));
     } else {
-      files.push(relative(baseDir, fullPath));
+      files.push(relative(baseDir, fullPath).replace(/\\/g, '/'));
     }
   }
 

package/lib/utils/manifest.js

@@ -25,7 +25,8 @@ const CONFIG_ONLY_FILES = new Set([
  * @returns {boolean}
  */
 export function isConfigFile(relativePath) {
-  return CONFIG_ONLY_FILES.has(relativePath);
+  // Normalize backslashes to forward slashes for Windows compatibility
+  return CONFIG_ONLY_FILES.has(relativePath.replace(/\\/g, '/'));
 }
 
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ppcos",
-  "version": "1.0.1",
+  "version": "1.0.3",
   "description": "CLI tool to manage Google Ads AI workflow skills and agents for Claude Code",
   "type": "module",
   "bin": {
@@ -18,8 +18,9 @@
   },
   "license": "SEE LICENSE IN LICENSE",
   "dependencies": {
-    "commander": "^12.0.0",
     "chalk": "^5.3.0",
+    "commander": "^12.0.0",
+    "diff": "^8.0.3",
     "ora": "^8.0.0",
     "unzipper": "^0.12.3"
   },