ppcos 1.6.1 → 1.6.2

package/lib/commands/update.js

@@ -33,7 +33,9 @@ import updateHub from './update-hub.js';
 
 // Directories to exclude when enumerating client template files.
 // hub-base/ contains hub-level skills that are handled separately.
-const CLIENT_TEMPLATE_EXCLUDE_DIRS = new Set(['tmp', 'hub-base']);
+// node_modules is also hard-excluded inside getAllFiles(), but stays listed
+// here so this set matches init-all's and doesn't rely on that backstop.
+const CLIENT_TEMPLATE_EXCLUDE_DIRS = new Set(['tmp', 'node_modules', 'hub-base']);
 
 /**
  * Update a single client

package/lib/utils/fs-helpers.js

@@ -12,6 +12,12 @@ import { constants } from 'node:fs';
 // that must never be distributed to clients.
 const EXCLUDED_DIR_NAMES = new Set(['tmp', 'node_modules']);
 
+// Excluded even when callers pass a custom excludeDirs set. Vendored
+// dependencies must never be enumerated into manifests or client copies —
+// a custom set that silently dropped the node_modules default once
+// registered ~9.5k dependency files as managed in every client.
+const ALWAYS_EXCLUDED_DIR_NAMES = new Set(['node_modules']);
+
 /**
  * Check if a file exists (async)
  * @param {string} filePath - Path to check
@@ -48,7 +54,7 @@ export async function getAllFiles(dir, baseDir = dir, excludeDirs = EXCLUDED_DIR
   for (const entry of entries) {
     const fullPath = join(dir, entry.name);
     if (entry.isDirectory()) {
-      if (excludeDirs.has(entry.name)) continue;
+      if (excludeDirs.has(entry.name) || ALWAYS_EXCLUDED_DIR_NAMES.has(entry.name)) continue;
       files.push(...await getAllFiles(fullPath, baseDir, excludeDirs));
     } else {
       files.push(relative(baseDir, fullPath).replace(/\\/g, '/'));
@@ -71,7 +77,7 @@ export function getAllFilesSync(dir, baseDir = dir, excludeDirs = EXCLUDED_DIR_N
   for (const entry of entries) {
     const fullPath = join(dir, entry.name);
     if (entry.isDirectory()) {
-      if (excludeDirs.has(entry.name)) continue;
+      if (excludeDirs.has(entry.name) || ALWAYS_EXCLUDED_DIR_NAMES.has(entry.name)) continue;
       files.push(...getAllFilesSync(fullPath, baseDir, excludeDirs));
     } else {
       files.push(relative(baseDir, fullPath).replace(/\\/g, '/'));

package/lib/utils/migrations.js

@@ -240,6 +240,33 @@ export function migrateTmpDataFiles(clientDir, manifest) {
   }
 }
 
+/**
+ * One-time migration: drop vendored node_modules entries from the manifest.
+ *
+ * A dev-mode (PPCOS_DEV) update enumerated the local template with a custom
+ * exclude set that overrode getAllFiles()'s default node_modules exclusion,
+ * registering ~9.5k dependency files as managed in every client. Those
+ * entries inflate the expected-file count that update.js's incomplete-download
+ * guard compares against, so every subsequent update against the real API
+ * zip (which never contains node_modules) aborts before the orphan cleanup
+ * that would remove them — a deadlock only fixable here, before the guard.
+ *
+ * Manifest-only: files on disk are left in place because skill scripts need
+ * them at runtime. They become untracked, same as a user-run `npm install`.
+ */
+export function migrateNodeModulesManifestEntries(manifest) {
+  let removed = 0;
+  for (const path of Object.keys(manifest.managedFiles)) {
+    if (path.split('/').includes('node_modules')) {
+      delete manifest.managedFiles[path];
+      removed++;
+    }
+  }
+  if (removed > 0) {
+    logger.info(`  Untracked ${removed} vendored node_modules manifest entr${removed !== 1 ? 'ies' : 'y'}`);
+  }
+}
+
 /**
  * Run all client migrations in order.
  * @param {string} clientDir - Path to client directory
@@ -253,4 +280,5 @@ export async function runAllMigrations(clientDir, manifest) {
   migrateManifestKeys(manifest);
   migrateConfigManagedTypes(manifest);
   migrateTmpDataFiles(clientDir, manifest);
+  migrateNodeModulesManifestEntries(manifest);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ppcos",
-  "version": "1.6.1",
+  "version": "1.6.2",
   "description": "CLI tool to manage Google Ads AI workflow skills and agents for Claude Code",
   "type": "module",
   "bin": {