spidersan 0.20.1 → 0.20.2

package/dist/commands/register.js

@@ -0,0 +1,176 @@
+import { Command } from 'commander';
+import { getStorage } from '../storage/index.js';
+import * as readline from 'readline';
+import { loadConfig } from '../lib/config.js';
+import { getChangedFiles, getCurrentBranch } from '../lib/git.js';
+import { getTrunkBranch } from '../lib/trunk.js';
+import { validateAgentId, sanitizeFilePaths, validateFilePath } from '../lib/security.js';
+import { logActivity } from '../lib/activity.js';
+import { renderRegisterResult } from '../lib/register-renderer.js';
+// Git execution is centralized in ../lib/git.js via execFileSync('git', [...]).
+// Path segments that are never meaningful for conflict tracking (matched anywhere in the path)
+const EXCLUDED_PATH_SEGMENTS = [
+    '/node_modules/',
+    '/.git/',
+    '/dist/',
+    '/build/',
+    '/.next/',
+    '/target/', // Rust/Cargo build output
+    '/.turbo/',
+    '/.cache/',
+];
+export function isExcludedPath(file) {
+    // Normalise: wrap in slashes so segment patterns match at the start too
+    const normalised = `/${file}/`;
+    return EXCLUDED_PATH_SEGMENTS.some(seg => normalised.includes(seg));
+}
+/**
+ * The Claude Code session running this command, or undefined. The id is written to the
+ * registry and later printed into agent context, so accept only a plain UUID-ish token.
+ */
+export function resolveSessionId(env = process.env) {
+    const id = env.CLAUDE_CODE_SESSION_ID?.trim();
+    return id && /^[0-9a-f][0-9a-f-]{7,63}$/i.test(id) ? id : undefined;
+}
+export function validateRegistrationFiles(files) {
+    for (const file of files) {
+        validateFilePath(file);
+    }
+}
+function getRelevantChangedFiles() {
+    return getChangedFiles({ base: getTrunkBranch() }).filter((file) => !isExcludedPath(file));
+}
+async function promptForFiles(detectedFiles) {
+    const rl = readline.createInterface({
+        input: process.stdin,
+        output: process.stdout
+    });
+    return new Promise((resolve) => {
+        if (detectedFiles.length > 0) {
+            console.log('\n🕷️ Detected changed files:');
+            detectedFiles.forEach((f, i) => console.log(`   ${i + 1}. ${f}`));
+            console.log('');
+            rl.question('Use these files? [Y/n/edit]: ', (answer) => {
+                rl.close();
+                const a = answer.toLowerCase().trim();
+                if (a === '' || a === 'y' || a === 'yes') {
+                    resolve(detectedFiles);
+                }
+                else if (a === 'n' || a === 'no') {
+                    resolve([]);
+                }
+                else {
+                    // Let them enter custom files
+                    console.log('   Enter comma-separated files, or leave empty:');
+                    const rl2 = readline.createInterface({
+                        input: process.stdin,
+                        output: process.stdout
+                    });
+                    rl2.question('   Files: ', (files) => {
+                        rl2.close();
+                        resolve(files ? files.split(',').map(f => f.trim()) : []);
+                    });
+                }
+            });
+        }
+        else {
+            rl.question('Enter files (comma-separated) or leave empty: ', (files) => {
+                rl.close();
+                resolve(files ? files.split(',').map(f => f.trim()) : []);
+            });
+        }
+    });
+}
+export const registerCommand = new Command('register')
+    .description('Register the current branch with files being modified')
+    .option('-f, --files <files>', 'Comma-separated list of files being modified')
+    .option('-d, --description <desc>', 'Description of what this branch does')
+    .option('-a, --agent <agent>', 'Agent identifier (e.g., claude-code, cursor)')
+    .option('-i, --interactive', 'Interactive mode (prompt for files)')
+    .option('--auto', 'Auto-detect files from git diff')
+    .action(async (options) => {
+    const storage = await getStorage();
+    const config = await loadConfig();
+    if (!await storage.isInitialized()) {
+        console.error('❌ Spidersan not initialized. Run: spidersan init');
+        process.exit(1);
+    }
+    const branchName = getCurrentBranch();
+    let files = [];
+    if (options.files) {
+        files = sanitizeFilePaths(options.files.split(',').map((f) => f.trim()).filter((f) => f && !isExcludedPath(f)));
+    }
+    else if (options.auto) {
+        files = getRelevantChangedFiles();
+    }
+    else if (options.interactive) {
+        const detected = getRelevantChangedFiles();
+        files = await promptForFiles(detected);
+    }
+    // Security: Validate ALL file paths before storing (Sentinel 2026-02-18)
+    try {
+        validateRegistrationFiles(files);
+    }
+    catch (err) {
+        if (err instanceof Error) {
+            console.error(`❌ Security Error: ${err.message}`);
+        }
+        else {
+            console.error('❌ Security Error: Invalid file path');
+        }
+        process.exit(1);
+    }
+    const configuredAgent = config.agent.name?.trim();
+    const rawAgent = (options.agent || process.env.SPIDERSAN_AGENT || configuredAgent || '').trim() || undefined;
+    let resolvedAgent = rawAgent;
+    if (resolvedAgent) {
+        try {
+            resolvedAgent = validateAgentId(resolvedAgent);
+        }
+        catch {
+            console.error(`❌ Invalid agent ID: "${resolvedAgent}". Must be alphanumeric with - or _.`);
+            process.exit(1);
+        }
+    }
+    const sessionId = resolveSessionId();
+    // Check if branch already registered
+    const existing = await storage.get(branchName);
+    if (existing) {
+        // Update existing registration
+        await storage.update(branchName, {
+            files: [...new Set([...existing.files, ...files])],
+            description: options.description || existing.description,
+            agent: resolvedAgent ?? existing.agent,
+            // latest session to touch the branch is the live one
+            sessionId: sessionId ?? existing.sessionId,
+        });
+        console.log(renderRegisterResult({
+            branchName,
+            files,
+            isUpdate: true,
+            autoDetected: !!options.auto,
+            autoDetectedFiles: files,
+        }));
+        logActivity({ event: 'register', branch: branchName, agent: resolvedAgent ?? undefined, details: { files, description: options.description, updated: true } });
+    }
+    else {
+        // New registration
+        await storage.register({
+            name: branchName,
+            files,
+            status: 'active',
+            description: options.description,
+            agent: resolvedAgent,
+            ...(sessionId ? { sessionId } : {}),
+        });
+        console.log(renderRegisterResult({
+            branchName,
+            files,
+            isUpdate: false,
+            autoDetected: !!options.auto,
+            autoDetectedFiles: files,
+        }));
+        logActivity({ event: 'register', branch: branchName, agent: resolvedAgent ?? undefined, details: { files, description: options.description } });
+    }
+});
+//# sourceMappingURL=register.js.map

package/dist/commands/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../src/commands/register.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,KAAK,QAAQ,MAAM,UAAU,CAAC;AACrC,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAC1F,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACnE,gFAAgF;AAEhF,+FAA+F;AAC/F,MAAM,sBAAsB,GAAG;IAC3B,gBAAgB;IAChB,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,UAAU,EAAO,0BAA0B;IAC3C,UAAU;IACV,UAAU;CACb,CAAC;AAEF,MAAM,UAAU,cAAc,CAAC,IAAY;IACvC,wEAAwE;IACxE,MAAM,UAAU,GAAG,IAAI,IAAI,GAAG,CAAC;IAC/B,OAAO,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,EAAE,GAAG,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,EAAE,IAAI,4BAA4B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAe;IACrD,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACvB,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;AACL,CAAC;AAED,SAAS,uBAAuB;IAC5B,OAAO,eAAe,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,aAAuB;IACjD,MAAM,EAAE,GAAG,QAAQ,CAAC,eAAe,CAAC;QAChC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;KACzB,CAAC,CAAC;IAEH,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC3B,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;YAC7C,aAAa,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;YAClE,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAEhB,EAAE,CAAC,QAAQ,CAAC,+BAA+B,EAAE,CAAC,MAAM,EAAE,EAAE;gBACpD,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,CAAC,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;gBACtC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;oBACvC,OAAO,CAAC,aAAa,CAAC,CAAC;gBAC3B,CAAC;qBAAM,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;oBACjC,OAAO,CAAC,EAAE,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACJ,8BAA8B;oBAC9B,OAAO,CAAC,GAAG,CAAC,iDAAiD,CAAC,CAAC;oBAC/D,MAAM,GAAG,GAAG,QAAQ,CAAC,eAAe,CAAC;wBACjC,KAAK,EAAE,OAAO,CAAC,KAAK;wBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;qBACzB,CAAC,CAAC;oBACH,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,EAAE;wBACjC,GAAG,CAAC,KAAK,EAAE,CAAC;wBACZ,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;oBAC9D,CAAC,CAAC,CAAC;gBACP,CAAC;YACL,CAAC,CAAC,CAAC;QACP,CAAC;aAAM,CAAC;YACJ,EAAE,CAAC,QAAQ,CAAC,gDAAgD,EAAE,CAAC,KAAK,EAAE,EAAE;gBACpE,EAAE,CAAC,KAAK,EAAE,CAAC;gBACX,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC9D,CAAC,CAAC,CAAC;QACP,CAAC;IACL,CAAC,CAAC,CAAC;AACP,CAAC;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC;KACjD,WAAW,CAAC,uDAAuD,CAAC;KACpE,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC;KAC7E,MAAM,CAAC,0BAA0B,EAAE,sCAAsC,CAAC;KAC1E,MAAM,CAAC,qBAAqB,EAAE,8CAA8C,CAAC;KAC7E,MAAM,CAAC,mBAAmB,EAAE,qCAAqC,CAAC;KAClE,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;KACnD,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IACnC,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAElC,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,UAAU,GAAG,gBAAgB,EAAE,CAAC;IACtC,IAAI,KAAK,GAAa,EAAE,CAAC;IAEzB,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAChB,KAAK,GAAG,iBAAiB,CACrB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CACvG,CAAC;IACN,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,GAAG,uBAAuB,EAAE,CAAC;IACtC,CAAC;SAAM,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,uBAAuB,EAAE,CAAC;QAC3C,KAAK,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC3C,CAAC;IAED,yEAAyE;IACzE,IAAI,CAAC;QACD,yBAAyB,CAAC,KAAK,CAAC,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACX,IAAI,GAAG,YAAY,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,KAAK,CAAC,qBAAqB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACJ,OAAO,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,eAAe,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IAClD,MAAM,QAAQ,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,eAAe,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;IAC7G,IAAI,aAAa,GAAG,QAAQ,CAAC;IAC7B,IAAI,aAAa,EAAE,CAAC;QAChB,IAAI,CAAC;YACD,aAAa,GAAG,eAAe,CAAC,aAAa,CAAC,CAAC;QACnD,CAAC;QAAC,MAAM,CAAC;YACL,OAAO,CAAC,KAAK,CAAC,wBAAwB,aAAa,sCAAsC,CAAC,CAAC;YAC3F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACL,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,EAAE,CAAC;IAErC,qCAAqC;IACrC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE/C,IAAI,QAAQ,EAAE,CAAC;QACX,+BAA+B;QAC/B,MAAM,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE;YAC7B,KAAK,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;YAClD,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;YACxD,KAAK,EAAE,aAAa,IAAI,QAAQ,CAAC,KAAK;YACtC,qDAAqD;YACrD,SAAS,EAAE,SAAS,IAAI,QAAQ,CAAC,SAAS;SAC7C,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC7B,UAAU;YACV,KAAK;YACL,QAAQ,EAAE,IAAI;YACd,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;YAC5B,iBAAiB,EAAE,KAAK;SAC3B,CAAC,CAAC,CAAC;QACJ,WAAW,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,IAAI,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IACnK,CAAC;SAAM,CAAC;QACJ,mBAAmB;QACnB,MAAM,OAAO,CAAC,QAAQ,CAAC;YACnB,IAAI,EAAE,UAAU;YAChB,KAAK;YACL,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,aAAa;YACpB,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtC,CAAC,CAAC;QACH,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAC7B,UAAU;YACV,KAAK;YACL,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI;YAC5B,iBAAiB,EAAE,KAAK;SAC3B,CAAC,CAAC,CAAC;QACJ,WAAW,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,aAAa,IAAI,SAAS,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpJ,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/registry-sync.d.ts

@@ -0,0 +1,9 @@
+/**
+ * spidersan registry-sync
+ *
+ * Sync local registry to/from Supabase for cross-machine awareness.
+ * Part of F1: Supabase Registry Sync (spidersan-github-dashboard).
+ */
+import { Command } from 'commander';
+export declare const registrySyncCommand: Command;
+//# sourceMappingURL=registry-sync.d.ts.map

package/dist/commands/registry-sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-sync.d.ts","sourceRoot":"","sources":["../../src/commands/registry-sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC,eAAO,MAAM,mBAAmB,SA4G1B,CAAC"}

package/dist/commands/registry-sync.js

@@ -0,0 +1,129 @@
+/**
+ * spidersan registry-sync
+ *
+ * Sync local registry to/from Supabase for cross-machine awareness.
+ * Part of F1: Supabase Registry Sync (spidersan-github-dashboard).
+ */
+import { Command } from 'commander';
+import { execFileSync } from 'child_process';
+import { LocalStorage } from '../storage/local.js';
+import { SupabaseStorage } from '../storage/supabase.js';
+import { resolveSupabaseCredentials } from '../lib/supabase-credentials.js';
+import { loadMachineIdentity } from '../lib/machine.js';
+import { getRepoName, registryRepoNames } from '../lib/git.js';
+/**
+ * Get the repo root path.
+ */
+function getRepoPath() {
+    try {
+        return execFileSync('git', ['rev-parse', '--show-toplevel'], { encoding: 'utf-8' }).trim();
+    }
+    catch {
+        return process.cwd();
+    }
+}
+/**
+ * Get a SupabaseStorage instance, or null if not configured.
+ */
+async function getSupabaseStorage() {
+    // COLONY_SUPABASE_* used to sit in this chain as a last-resort fallback. It
+    // is gone deliberately: colony is a different Supabase project, so that
+    // fallback could push spider_registries into the wrong database (tb-ly0b).
+    const creds = await resolveSupabaseCredentials();
+    if (!creds)
+        return null;
+    return new SupabaseStorage(creds);
+}
+export const registrySyncCommand = new Command('registry-sync')
+    .description('Sync local registry to/from Supabase (cross-machine awareness)')
+    .option('--push', 'Push local registry to Supabase')
+    .option('--pull', 'Pull other machines\' registries from Supabase')
+    .option('--status', 'Show sync status across all machines')
+    .option('--repo <name>', 'Limit to specific repo (default: current)')
+    .action(async (options) => {
+    const supabase = await getSupabaseStorage();
+    if (!supabase) {
+        console.error('❌ Supabase not configured. Set SUPABASE_URL and SUPABASE_KEY.');
+        console.error('   Registry sync requires cloud storage for cross-machine awareness.');
+        process.exit(1);
+    }
+    const machine = await loadMachineIdentity();
+    const repoName = options.repo || getRepoName();
+    // Default to --status if no flag specified
+    if (!options.push && !options.pull && !options.status) {
+        options.status = true;
+    }
+    // ── PUSH ──
+    if (options.push) {
+        console.log(`🕷️ Pushing registry from ${machine.name} (${repoName})...\n`);
+        const localStorage = new LocalStorage();
+        if (!await localStorage.isInitialized()) {
+            console.error('❌ Spidersan not initialized. Run: spidersan init');
+            process.exit(1);
+        }
+        const branches = await localStorage.list();
+        const repoPath = getRepoPath();
+        const result = await supabase.pushRegistry(machine, repoName, repoPath, branches);
+        if (result.errors.length > 0) {
+            for (const err of result.errors) {
+                console.error(`  ❌ ${err}`);
+            }
+            process.exit(1);
+        }
+        console.log(`  ✅ Pushed ${result.pushed} active branch(es)`);
+        if (result.updated > 0)
+            console.log(`  🔄 Updated ${result.updated} non-active branch(es)`);
+        if (result.abandoned > 0)
+            console.log(`  🗑️  Marked ${result.abandoned} removed branch(es) as abandoned`);
+        for (const name of result.abandonedBranches)
+            console.log(`       - ${name}`);
+        console.log(`\n  Machine: ${machine.name} (${machine.hostname})`);
+        console.log(`  Repo: ${repoName}`);
+    }
+    // ── PULL ──
+    if (options.pull) {
+        console.log(`🕷️ Pulling registries for ${repoName} (excluding ${machine.name})...\n`);
+        const views = await supabase.pullRegistries(options.repo ? [options.repo] : registryRepoNames(), machine.id);
+        if (views.length === 0) {
+            console.log('  No other machines have registered branches for this repo.');
+            return;
+        }
+        for (const view of views) {
+            console.log(`  📡 ${view.machine_name} (${view.hostname}) — ${view.branches.length} branch(es)`);
+            console.log(`     Last sync: ${new Date(view.last_synced).toLocaleString()}\n`);
+            for (const branch of view.branches) {
+                const files = branch.files.length > 0 ? ` [${branch.files.length} files]` : '';
+                const agent = branch.agent ? ` (${branch.agent})` : '';
+                console.log(`     • ${branch.name}${agent}${files}`);
+                if (branch.description) {
+                    console.log(`       ${branch.description}`);
+                }
+            }
+            console.log('');
+        }
+    }
+    // ── STATUS ──
+    if (options.status) {
+        console.log(`🕷️ Registry sync status${options.repo ? ` (${repoName})` : ' (all repos)'}:\n`);
+        const statuses = await supabase.getRegistryStatus(options.repo ? repoName : undefined);
+        if (statuses.length === 0) {
+            console.log('  No registries synced yet. Run: spidersan registry-sync --push');
+            return;
+        }
+        // Table header
+        console.log('  Machine      Hostname       Branches  Active  Repos            Last Sync');
+        console.log('  ─────────    ──────────     ────────  ──────  ─────            ─────────');
+        for (const s of statuses) {
+            const isSelf = s.machine_id === machine.id ? ' ⭐' : '';
+            const repos = s.repos.join(', ');
+            const lastSync = new Date(s.last_sync).toLocaleString();
+            console.log(`  ${(s.machine_name + isSelf).padEnd(14)}` +
+                `${s.hostname.padEnd(15)}` +
+                `${String(s.branch_count).padEnd(10)}` +
+                `${String(s.active_count).padEnd(8)}` +
+                `${repos.padEnd(17)}` +
+                `${lastSync}`);
+        }
+    }
+});
+//# sourceMappingURL=registry-sync.js.map

package/dist/commands/registry-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry-sync.js","sourceRoot":"","sources":["../../src/commands/registry-sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,gCAAgC,CAAC;AAC5E,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAE/D;;GAEG;AACH,SAAS,WAAW;IAChB,IAAI,CAAC;QACD,OAAO,YAAY,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,OAAO,CAAC,GAAG,EAAE,CAAC;IACzB,CAAC;AACL,CAAC;AAED;;GAEG;AACH,KAAK,UAAU,kBAAkB;IAC7B,4EAA4E;IAC5E,wEAAwE;IACxE,2EAA2E;IAC3E,MAAM,KAAK,GAAG,MAAM,0BAA0B,EAAE,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,OAAO,CAAC,eAAe,CAAC;KAC1D,WAAW,CAAC,gEAAgE,CAAC;KAC7E,MAAM,CAAC,QAAQ,EAAE,iCAAiC,CAAC;KACnD,MAAM,CAAC,QAAQ,EAAE,gDAAgD,CAAC;KAClE,MAAM,CAAC,UAAU,EAAE,sCAAsC,CAAC;KAC1D,MAAM,CAAC,eAAe,EAAE,2CAA2C,CAAC;KACpE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACtB,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAC5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACZ,OAAO,CAAC,KAAK,CAAC,+DAA+D,CAAC,CAAC;QAC/E,OAAO,CAAC,KAAK,CAAC,sEAAsE,CAAC,CAAC;QACtF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,mBAAmB,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;IAE/C,2CAA2C;IAC3C,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QACpD,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAC1B,CAAC;IAED,aAAa;IACb,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,6BAA6B,OAAO,CAAC,IAAI,KAAK,QAAQ,QAAQ,CAAC,CAAC;QAE5E,MAAM,YAAY,GAAG,IAAI,YAAY,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,YAAY,CAAC,aAAa,EAAE,EAAE,CAAC;YACtC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;YAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,IAAI,EAAE,CAAC;QAC3C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAE/B,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAElF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC3B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAC9B,OAAO,CAAC,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YAChC,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,cAAc,MAAM,CAAC,MAAM,oBAAoB,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,OAAO,wBAAwB,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,SAAS,GAAG,CAAC;YAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,SAAS,kCAAkC,CAAC,CAAC;QAC3G,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,iBAAiB;YAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC7E,OAAO,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QAClE,OAAO,CAAC,GAAG,CAAC,WAAW,QAAQ,EAAE,CAAC,CAAC;IACvC,CAAC;IAED,aAAa;IACb,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,8BAA8B,QAAQ,eAAe,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC;QAEvF,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,cAAc,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;QAE7G,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;YAC3E,OAAO;QACX,CAAC;QAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACvB,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,YAAY,KAAK,IAAI,CAAC,QAAQ,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,aAAa,CAAC,CAAC;YACjG,OAAO,CAAC,GAAG,CAAC,mBAAmB,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;YAEhF,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,CAAC,MAAM,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;gBACvD,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,IAAI,GAAG,KAAK,GAAG,KAAK,EAAE,CAAC,CAAC;gBACrD,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;oBACrB,OAAO,CAAC,GAAG,CAAC,UAAU,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;gBAChD,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpB,CAAC;IACL,CAAC;IAED,eAAe;IACf,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,2BAA2B,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,GAAG,CAAC,CAAC,CAAC,cAAc,KAAK,CAAC,CAAC;QAE9F,MAAM,QAAQ,GAAG,MAAM,QAAQ,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAEvF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,GAAG,CAAC,iEAAiE,CAAC,CAAC;YAC/E,OAAO;QACX,CAAC;QAED,eAAe;QACf,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;QAC1F,OAAO,CAAC,GAAG,CAAC,4EAA4E,CAAC,CAAC;QAE1F,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,KAAK,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;YACxD,OAAO,CAAC,GAAG,CACP,KAAK,CAAC,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;gBAC3C,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;gBAC1B,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;gBACtC,GAAG,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;gBACrC,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE;gBACrB,GAAG,QAAQ,EAAE,CAChB,CAAC;QACN,CAAC;IACL,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/stale.d.ts

@@ -0,0 +1,17 @@
+/**
+ * spidersan stale
+ *
+ * Show branches that haven't been updated recently.
+ * With --notify flag: sends notifications to branch owners via .pending_task.md updates.
+ */
+import { Command } from 'commander';
+/**
+ * Update agent's .pending_task.md file
+ * ⚡ Bolt: Batched updates to avoid N+1 file I/O
+ */
+export declare function updatePendingTaskFile(agentId: string, branches: {
+    name: string;
+    daysOld: number;
+}[]): boolean;
+export declare const staleCommand: Command;
+//# sourceMappingURL=stale.d.ts.map

package/dist/commands/stale.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale.d.ts","sourceRoot":"","sources":["../../src/commands/stale.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,EAAE,GAAG,OAAO,CAiD7G;AAED,eAAO,MAAM,YAAY,SAwFnB,CAAC"}

package/dist/commands/stale.js

@@ -0,0 +1,136 @@
+/**
+ * spidersan stale
+ *
+ * Show branches that haven't been updated recently.
+ * With --notify flag: sends notifications to branch owners via .pending_task.md updates.
+ */
+import { Command } from 'commander';
+import { getStorage } from '../storage/index.js';
+import { existsSync, readFileSync, appendFileSync } from 'fs';
+import { resolve } from 'path';
+import { validateAgentId, validateBranchName } from '../lib/security.js';
+/**
+ * Update agent's .pending_task.md file
+ * ⚡ Bolt: Batched updates to avoid N+1 file I/O
+ */
+export function updatePendingTaskFile(agentId, branches) {
+    if (branches.length === 0)
+        return true;
+    try {
+        // Security: Validate inputs
+        validateAgentId(agentId);
+        for (const b of branches) {
+            validateBranchName(b.name);
+        }
+        // Agent-OWNED locations only. The cwd's .pending_task.md belongs to
+        // whoever runs `stale --notify`, not to `agentId` — writing there
+        // "delivers" every agent's notifications to the wrong file.
+        const possiblePaths = [
+            resolve(process.env.HOME || '~', `Dev/treebird/agents/${agentId}/.pending_task.md`),
+            resolve(process.cwd(), `../${agentId}/.pending_task.md`),
+            resolve(process.env.HOME || '~', `Dev/${agentId}/.pending_task.md`),
+        ];
+        let taskFilePath = null;
+        for (const path of possiblePaths) {
+            if (existsSync(path)) {
+                taskFilePath = path;
+                break;
+            }
+        }
+        if (!taskFilePath) {
+            return false;
+        }
+        const content = readFileSync(taskFilePath, 'utf-8');
+        let newEntries = '';
+        for (const b of branches) {
+            // Check if entry already exists
+            if (!content.includes(b.name)) {
+                newEntries += `- [ ] 🕷️ Stale branch: \`${b.name}\` (${b.daysOld}d inactive) - run \`spidersan cleanup\`\n`;
+            }
+        }
+        if (newEntries.length > 0) {
+            appendFileSync(taskFilePath, newEntries, 'utf-8');
+        }
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+export const staleCommand = new Command('stale')
+    .description('Show stale branches (not updated recently)')
+    .option('--days <n>', 'Days threshold for staleness', '7')
+    .option('--notify', 'Send notifications to branch owners')
+    .option('--auto-cleanup', 'Automatically remove stale branches after listing')
+    .option('--json', 'Output as JSON')
+    .action(async (options) => {
+    const storage = await getStorage();
+    if (!await storage.isInitialized()) {
+        console.error('❌ Spidersan not initialized. Run: spidersan init');
+        process.exit(1);
+    }
+    const days = parseInt(options.days, 10);
+    if (!Number.isFinite(days) || days < 0) {
+        console.error(`❌ Invalid --days value: ${options.days}`);
+        process.exit(1);
+    }
+    const threshold = new Date();
+    threshold.setDate(threshold.getDate() - days);
+    const branches = await storage.list();
+    const stale = branches.filter(b => new Date(b.registeredAt) < threshold);
+    // Group by agent if notifying
+    const byAgent = new Map();
+    if (options.notify) {
+        for (const branch of stale) {
+            const agent = branch.agent || 'unknown';
+            if (!byAgent.has(agent)) {
+                byAgent.set(agent, []);
+            }
+            byAgent.get(agent).push(branch);
+        }
+    }
+    if (options.json) {
+        console.log(JSON.stringify(stale, null, 2));
+        return;
+    }
+    if (stale.length === 0) {
+        console.log(`🕷️ No stale branches (older than ${days} days)`);
+        return;
+    }
+    console.log(`🕷️ Stale Branches (>${days} days old):\n`);
+    for (const branch of stale) {
+        const age = Math.floor((Date.now() - new Date(branch.registeredAt).getTime()) / 86400000);
+        const agentTag = branch.agent ? ` [@${branch.agent}]` : '';
+        console.log(`  ⚠️  ${branch.name}${agentTag} (${age} days old)`);
+    }
+    // Send notifications if requested
+    if (options.notify) {
+        console.log(`\n📨 Sending notifications...`);
+        let fileSuccess = 0;
+        for (const [agent, branches] of byAgent) {
+            if (agent === 'unknown')
+                continue;
+            // ⚡ Bolt: Batch notification per agent to avoid N+1 slow calls
+            const branchData = branches.map(branch => ({
+                name: branch.name,
+                daysOld: Math.floor((Date.now() - new Date(branch.registeredAt).getTime()) / 86400000)
+            }));
+            // Try .pending_task.md update
+            if (updatePendingTaskFile(agent, branchData)) {
+                fileSuccess += branches.length;
+            }
+        }
+        console.log(`✅ Notifications sent:`);
+        console.log(`   - File updates: ${fileSuccess}/${stale.length}`);
+    }
+    if (options.autoCleanup) {
+        console.log(`\n🗑️  Auto-cleaning ${stale.length} stale branch(es)...`);
+        const removedNames = await storage.cleanup(threshold);
+        removedNames.forEach(name => console.log(`   Removed: ${name}`));
+        console.log(`✅ Cleaned up ${removedNames.length} branch(es).`);
+    }
+    else {
+        console.log(`\nRun 'spidersan cleanup' to remove these.`);
+    }
+});
+//# sourceMappingURL=stale.js.map

package/dist/commands/stale.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stale.js","sourceRoot":"","sources":["../../src/commands/stale.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEjD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,cAAc,EAAE,MAAM,IAAI,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,MAAM,MAAM,CAAC;AAC/B,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CAAC,OAAe,EAAE,QAA6C;IAChG,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEvC,IAAI,CAAC;QACD,4BAA4B;QAC5B,eAAe,CAAC,OAAO,CAAC,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC;QAED,oEAAoE;QACpE,kEAAkE;QAClE,4DAA4D;QAC5D,MAAM,aAAa,GAAG;YAClB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,uBAAuB,OAAO,mBAAmB,CAAC;YACnF,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,OAAO,mBAAmB,CAAC;YACxD,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,EAAE,OAAO,OAAO,mBAAmB,CAAC;SACtE,CAAC;QAEF,IAAI,YAAY,GAAkB,IAAI,CAAC;QACvC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;YAC/B,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnB,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM;YACV,CAAC;QACL,CAAC;QAED,IAAI,CAAC,YAAY,EAAE,CAAC;YAChB,OAAO,KAAK,CAAC;QACjB,CAAC;QAED,MAAM,OAAO,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QACpD,IAAI,UAAU,GAAG,EAAE,CAAC;QAEpB,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACvB,gCAAgC;YAChC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC5B,UAAU,IAAI,6BAA6B,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,2CAA2C,CAAC;YACjH,CAAC;QACL,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,cAAc,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,KAAK,CAAC;IACjB,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;KAC3C,WAAW,CAAC,4CAA4C,CAAC;KACzD,MAAM,CAAC,YAAY,EAAE,8BAA8B,EAAE,GAAG,CAAC;KACzD,MAAM,CAAC,UAAU,EAAE,qCAAqC,CAAC;KACzD,MAAM,CAAC,gBAAgB,EAAE,mDAAmD,CAAC;KAC7E,MAAM,CAAC,QAAQ,EAAE,gBAAgB,CAAC;KAClC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IAEnC,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,KAAK,CAAC,2BAA2B,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,IAAI,EAAE,CAAC;IAC7B,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,CAAC;IAE9C,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,CAAC;IAEzE,8BAA8B;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC5C,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;YACzB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,SAAS,CAAC;YACxC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBACtB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,KAAK,CAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrC,CAAC;IACL,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC5C,OAAO;IACX,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,qCAAqC,IAAI,QAAQ,CAAC,CAAC;QAC/D,OAAO;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,wBAAwB,IAAI,eAAe,CAAC,CAAC;IAEzD,KAAK,MAAM,MAAM,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC,CAAC;QAC1F,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,CAAC,IAAI,GAAG,QAAQ,KAAK,GAAG,YAAY,CAAC,CAAC;IACrE,CAAC;IAED,kCAAkC;IAClC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;QAE7C,IAAI,WAAW,GAAG,CAAC,CAAC;QAEpB,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,OAAO,EAAE,CAAC;YACtC,IAAI,KAAK,KAAK,SAAS;gBAAE,SAAS;YAElC,+DAA+D;YAC/D,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACvC,IAAI,EAAE,MAAM,CAAC,IAAI;gBACjB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,QAAQ,CAAC;aACzF,CAAC,CAAC,CAAC;YAEJ,8BAA8B;YAC9B,IAAI,qBAAqB,CAAC,KAAK,EAAE,UAAU,CAAC,EAAE,CAAC;gBAC3C,WAAW,IAAI,QAAQ,CAAC,MAAM,CAAC;YACnC,CAAC;QACL,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;QACrC,OAAO,CAAC,GAAG,CAAC,sBAAsB,WAAW,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACtB,OAAO,CAAC,GAAG,CAAC,wBAAwB,KAAK,CAAC,MAAM,sBAAsB,CAAC,CAAC;QACxE,MAAM,YAAY,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACtD,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,CAAC;QACjE,OAAO,CAAC,GAAG,CAAC,gBAAgB,YAAY,CAAC,MAAM,cAAc,CAAC,CAAC;IACnE,CAAC;SAAM,CAAC;QACJ,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC9D,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/sync.d.ts

@@ -0,0 +1,21 @@
+/**
+ * spidersan sync
+ *
+ * Reconcile the local registry against git truth and prune dead entries.
+ *
+ * Prunes BOTH:
+ *   - orphaned — no local or tracking ref AND `git ls-remote` confirms the
+ *                branch is gone from origin (or status `abandoned`)
+ *   - merged   — branch tip is an ancestor of trunk (or status `completed`)
+ *
+ * A missing ref alone only proves "not fetched here": the branch may be live on
+ * another machine. Those entries are kept, and so is every orphan when origin
+ * can't be asked (sp-slemub).
+ *
+ * Previously sync only removed orphans, so a merged branch lingered in the
+ * registry forever and kept producing phantom conflicts (tb-8sa.1 / §1.2).
+ * Merged entries are now deleted, not just marked.
+ */
+import { Command } from 'commander';
+export declare const syncCommand: Command;
+//# sourceMappingURL=sync.d.ts.map

package/dist/commands/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../../src/commands/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAKpC,eAAO,MAAM,WAAW,SA0DlB,CAAC"}

package/dist/commands/sync.js

@@ -0,0 +1,78 @@
+/**
+ * spidersan sync
+ *
+ * Reconcile the local registry against git truth and prune dead entries.
+ *
+ * Prunes BOTH:
+ *   - orphaned — no local or tracking ref AND `git ls-remote` confirms the
+ *                branch is gone from origin (or status `abandoned`)
+ *   - merged   — branch tip is an ancestor of trunk (or status `completed`)
+ *
+ * A missing ref alone only proves "not fetched here": the branch may be live on
+ * another machine. Those entries are kept, and so is every orphan when origin
+ * can't be asked (sp-slemub).
+ *
+ * Previously sync only removed orphans, so a merged branch lingered in the
+ * registry forever and kept producing phantom conflicts (tb-8sa.1 / §1.2).
+ * Merged entries are now deleted, not just marked.
+ */
+import { Command } from 'commander';
+import { getStorage } from '../storage/index.js';
+import { logActivity } from '../lib/activity.js';
+import { reconcileBranches, splitOrphans } from '../lib/reconcile.js';
+export const syncCommand = new Command('sync')
+    .description('Sync registry with actual git branches')
+    .option('--dry-run', 'Show what would be synced without syncing')
+    .action(async (options) => {
+    const storage = await getStorage();
+    if (!await storage.isInitialized()) {
+        console.error('❌ Spidersan not initialized. Run: spidersan init');
+        process.exit(1);
+    }
+    const branches = await storage.list();
+    const { merged, orphaned: noRef } = reconcileBranches(branches);
+    // `abandoned` is terminal registry status — prune it without asking origin.
+    const abandoned = new Set(branches.filter(b => b.status === 'abandoned').map(b => b.name));
+    const { gone, kept, remoteChecked } = splitOrphans(noRef.filter(n => !abandoned.has(n)));
+    const orphaned = [...noRef.filter(n => abandoned.has(n)), ...gone];
+    if (kept.length > 0) {
+        console.log(remoteChecked
+            ? `🕷️ Kept ${kept.length} entr${kept.length === 1 ? 'y' : 'ies'} with no ref here but still on origin (unfetched): ${kept.join(', ')}`
+            : `⚠️  Could not reach origin — kept ${kept.length} entr${kept.length === 1 ? 'y' : 'ies'} with no ref here (deleted, or just unfetched). Fetch and re-run to prune.`);
+    }
+    const stale = [
+        ...merged.map(name => ({ name, reason: 'merged' })),
+        ...orphaned.map(name => ({ name, reason: 'orphaned' })),
+    ];
+    if (stale.length === 0) {
+        console.log('🕷️ Registry is in sync with git.');
+        logActivity({ event: 'sync', details: { merged: 0, orphaned: 0, action: 'clean' } });
+        return;
+    }
+    console.log(`🕷️ Found ${stale.length} stale entr${stale.length === 1 ? 'y' : 'ies'} (${merged.length} merged, ${orphaned.length} orphaned):\n`);
+    let failed = 0;
+    for (const { name, reason } of stale) {
+        if (options.dryRun) {
+            console.log(`  Would remove (${reason}): ${name}`);
+        }
+        else if (await storage.unregister(name)) {
+            console.log(`  🗑️  Removed (${reason}): ${name}`);
+            logActivity({ event: 'sync', branch: name, details: { action: `removed_${reason}` } });
+        }
+        else {
+            // Don't claim "Removed" for a no-op — a delete that misses means
+            // the entry vanished mid-sync or the registry is corrupt (tb-orpt).
+            failed++;
+            console.log(`  ⚠️  Could not remove (${reason}): ${name} — not found in registry`);
+            logActivity({ event: 'sync', branch: name, details: { action: `remove_failed_${reason}` } });
+        }
+    }
+    if (!options.dryRun) {
+        if (failed > 0) {
+            console.log(`\n⚠️  Synced with ${failed} failed removal${failed === 1 ? '' : 's'} — registry may be corrupt (check .spidersan/registry.json).`);
+            process.exit(1);
+        }
+        console.log(`\n✅ Synced registry with git.`);
+    }
+});
+//# sourceMappingURL=sync.js.map

package/dist/commands/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../../src/commands/sync.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACjD,OAAO,EAAE,iBAAiB,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEtE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,OAAO,CAAC,MAAM,CAAC;KACzC,WAAW,CAAC,wCAAwC,CAAC;KACrD,MAAM,CAAC,WAAW,EAAE,2CAA2C,CAAC;KAChE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;IACtB,MAAM,OAAO,GAAG,MAAM,UAAU,EAAE,CAAC;IAEnC,IAAI,CAAC,MAAM,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;QACjC,OAAO,CAAC,KAAK,CAAC,kDAAkD,CAAC,CAAC;QAClE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;IACtC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAChE,4EAA4E;IAC5E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3F,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC;IACnE,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClB,OAAO,CAAC,GAAG,CAAC,aAAa;YACrB,CAAC,CAAC,YAAY,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,sDAAsD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YACvI,CAAC,CAAC,qCAAqC,IAAI,CAAC,MAAM,QAAQ,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,4EAA4E,CAAC,CAAC;IAC/K,CAAC;IACD,MAAM,KAAK,GAAG;QACV,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,QAAiB,EAAE,CAAC,CAAC;QAC5D,GAAG,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAmB,EAAE,CAAC,CAAC;KACnE,CAAC;IAEF,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;QACjD,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QACrF,OAAO;IACX,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,aAAa,KAAK,CAAC,MAAM,cAAc,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,eAAe,CAAC,CAAC;IAEjJ,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,KAAK,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;QACvD,CAAC;aAAM,IAAI,MAAM,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YACxC,OAAO,CAAC,GAAG,CAAC,mBAAmB,MAAM,MAAM,IAAI,EAAE,CAAC,CAAC;YACnD,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QAC3F,CAAC;aAAM,CAAC;YACJ,iEAAiE;YACjE,oEAAoE;YACpE,MAAM,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CAAC,2BAA2B,MAAM,MAAM,IAAI,0BAA0B,CAAC,CAAC;YACnF,WAAW,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,MAAM,EAAE,iBAAiB,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACjG,CAAC;IACL,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,EAAE,CAAC;YACb,OAAO,CAAC,GAAG,CAAC,qBAAqB,MAAM,kBAAkB,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,8DAA8D,CAAC,CAAC;YAChJ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,CAAC;IACjD,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/commands/verify-trunk.d.ts

@@ -0,0 +1,18 @@
+/**
+ * spidersan verify-trunk
+ *
+ * Detect (and optionally fix) registry "trunk-poison": the trunk branch
+ * (main/master/develop…) claiming files in the spidersan registry. A clean
+ * auto-merge can silently re-poison main, so the post-merge hook gates on this.
+ *
+ * Promotes the 2026-06-15 `spidersan-post.sh` hook into a first-class command.
+ */
+import { Command } from 'commander';
+/**
+ * The set of branch names that MUST claim no files: the resolved trunk plus the
+ * literal `main`/`master` (a repo can have stray entries for either even when
+ * trunk resolves to something else). De-duplicated, order-stable.
+ */
+export declare function trunkEquivalentNames(trunk: string): string[];
+export declare const verifyTrunkCommand: Command;
+//# sourceMappingURL=verify-trunk.d.ts.map

package/dist/commands/verify-trunk.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-trunk.d.ts","sourceRoot":"","sources":["../../src/commands/verify-trunk.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAG5D;AAED,eAAO,MAAM,kBAAkB,SA2DzB,CAAC"}