replen 1.3.0 → 1.4.0

package/dist/auto-register.js

@@ -148,6 +148,9 @@ async function postProjectsBulk(base, token, projects) {
                     name: p.name,
                     tags: p.tags,
                     primaryLanguage: p.primaryLanguage ?? undefined,
+                    // Absolute local checkout path — see sync-projects.ts. Inert unless
+                    // the server is a self-host install with Immersion enabled.
+                    localPath: p.localPath,
                 })),
             }),
             signal: ctrl.signal,

package/dist/skill-install.js

@@ -20,6 +20,7 @@ const BUNDLED_SKILLS_ROOT = join(SELF_DIR, "..", "extras", "skills");
 // follow the MCP tool's description instead. The CLAUDE.md instruction
 // shipped by `replen project-init` is the cross-host fallback.
 const CLAUDE_SKILLS_ROOT = join(homedir(), ".claude", "skills");
+const CLAUDE_COMMANDS_ROOT = join(homedir(), ".claude", "commands");
 const SKILLS = [
     {
         name: "replen",
@@ -54,6 +55,18 @@ export function installSkills() {
             catch { /* best effort */ }
         }
     }
+    // Migrate: an early Replen shipped a `/replen` slash COMMAND (~/.claude/commands/
+    // replen.md) that invokes the now-removed `replen-match` skill. Left in place it
+    // renders a DUPLICATE `/replen` next to the skill. Remove only OUR stale command —
+    // gated on it referencing `replen-match`, so a user's own `/replen` command (or any
+    // other) is never touched.
+    try {
+        const legacyCmd = join(CLAUDE_COMMANDS_ROOT, "replen.md");
+        if (existsSync(legacyCmd) && readFileSync(legacyCmd, "utf8").includes("replen-match")) {
+            rmSync(legacyCmd, { force: true });
+        }
+    }
+    catch { /* best effort */ }
     let installed = 0;
     for (const skill of SKILLS) {
         for (const rel of skill.files) {

package/dist/sync-projects.js

@@ -38,6 +38,11 @@ export async function syncDiscoveredProjects({ token, base, explicitRoots = [],
             name: p.name,
             tags: p.tags,
             primaryLanguage: p.primaryLanguage ?? undefined,
+            // Absolute local checkout path. Used by Immersion on a self-host install
+            // (server == this machine) to ground on the actual source; inert on the
+            // hosted server, which can't read it. Always sent — it's identity, not
+            // code; nothing is read unless the operator enables Immersion.
+            localPath: p.localPath,
         })),
     };
     let res;

package/extras/skills/replen/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: replen
-description: Review Replen's suggestions for the current repo against your code. Replen surfaces libraries, dependency releases, and security advisories relevant to what you're building; this reads the codebase, gives each one a clear verdict and effort estimate with the specific files it affects, and records what you decide. Invoke with `/replen` or by saying "what's new from Replen?".
+description: Triage today's Replen matches for this repo — a verdict and effort estimate per candidate, grounded in your code. Invoke with `/replen` or "what's new from Replen?".
 ---
 
 # Replen Match — in-session candidate triage

package/extras/skills/replen-onboard/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: replen-onboard
-description: One-time background setup for Replen. Works through the user's active repos — reading each one's code, tidying thin/missing docs (never touching good ones), and building a tailored, grounded profile (a project report + capabilities) so Replen surfaces genuinely useful tools instead of generic ones. Runs autonomously in the background. Invoke with `/replen-onboard`, or when the user first sets up Replen and wants it configured properly across their projects.
+description: One-time Replen setup — profiles your active repos so matches are relevant, not generic. Runs autonomously in the background. Invoke with `/replen-onboard`.
 ---
 
 # Replen onboarding — autonomous, background, multi-repo setup

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "replen",
-  "version": "1.3.0",
+  "version": "1.4.0",
   "description": "Make your AI coding tools smarter. One command, no API keys, free. Replen watches what your projects actually do and surfaces a few things worth bringing in each month. Use one as is, port a piece of another, cherry pick an idea, or build it clean room. The match happens inside your AI tool's session. A few actionable matches a month, by design.",
   "type": "module",
   "bin": {