fix: ensure .gitignore is updated when .clix directory is first created

Previously ensureGitignore was only called after project selection in
SetupUI/LoginUI. If the user interrupted (Ctrl+C) after login but before
project selection, the .clix directory was created without a matching
.gitignore entry. Extracted gitignore logic to shared utility and moved
the call into directory creation (ensureStateDir/ensureConfigDir) so it
runs exactly once at the earliest possible moment.

Author: pitzcarraldo

src/lib/auth/credentials.ts

@@ -1,5 +1,6 @@
 import { chmod, mkdir, readFile, rm, stat, writeFile } from 'node:fs/promises';
-import { join } from 'node:path';
+import { dirname, join } from 'node:path';
+import { ensureClixGitignore } from '../utils/gitignore';
 import { findProjectRoot } from '../utils/path';
 import { AUTH_ENV_VARS, getAuth0Config } from './config';
 import { AuthError } from './errors';
@@ -70,6 +71,7 @@ export class CredentialsManager {
       await stat(this.stateDirPath);
     } catch {
       await mkdir(this.stateDirPath, { recursive: true, mode: 0o755 });
+      await ensureClixGitignore(dirname(this.stateDirPath));
     }
   }
 

src/lib/config/project-config-manager.ts

@@ -1,6 +1,7 @@
 import { mkdir, readFile, stat, writeFile } from 'node:fs/promises';
 import { join } from 'node:path';
 import { ConfigError, ERROR_CODES } from '../errors/types';
+import { ensureClixGitignore } from '../utils/gitignore';
 import {
   CURRENT_PROJECT_CONFIG_VERSION,
   ensureLatestVersion,
@@ -16,16 +17,6 @@ import {
  */
 const CONFIG_HEADER = '';
 
-/**
- * Gitignore patterns to check for .clix directory.
- */
-const GITIGNORE_PATTERNS = ['.clix', '.clix/', '/.clix', '/.clix/'];
-
-/**
- * Gitignore entry to add.
- */
-const GITIGNORE_ENTRY = '\n# Clix CLI local config\n.clix/\n';
-
 /**
  * ProjectConfigManager handles loading and saving project-local configuration.
  * Configuration is stored in .clix/config.jsonc in the project root.
@@ -94,6 +85,7 @@ export class ProjectConfigManager {
       await stat(this.configDirPath);
     } catch {
       await mkdir(this.configDirPath, { recursive: true, mode: 0o755 });
+      await ensureClixGitignore(this.projectPath);
     }
   }
 
@@ -221,50 +213,6 @@ export class ProjectConfigManager {
     }
   }
 
-  /**
-   * Ensure .clix is in .gitignore.
-   * Adds entry if not already present.
-   *
-   * @returns True if gitignore was modified
-   */
-  async ensureGitignore(): Promise<boolean> {
-    const gitignorePath = join(this.projectPath, '.gitignore');
-
-    try {
-      let content = '';
-
-      // Try to read existing .gitignore
-      try {
-        content = await readFile(gitignorePath, 'utf-8');
-      } catch {
-        // File doesn't exist, will create new one
-      }
-
-      // Check if .clix is already ignored
-      const lines = content.split('\n');
-      const hasClixIgnore = lines.some((line) => {
-        const trimmed = line.trim();
-        return GITIGNORE_PATTERNS.includes(trimmed);
-      });
-
-      if (hasClixIgnore) {
-        return false;
-      }
-
-      // Add .clix to gitignore
-      const newContent =
-        content.endsWith('\n') || content === ''
-          ? `${content}${GITIGNORE_ENTRY}`
-          : `${content}\n${GITIGNORE_ENTRY}`;
-
-      await writeFile(gitignorePath, newContent, 'utf-8');
-      return true;
-    } catch {
-      // Non-fatal: log warning but continue
-      return false;
-    }
-  }
-
   /**
    * Clear the cached config (useful for testing).
    */

src/lib/utils/gitignore.ts

@@ -0,0 +1,57 @@
+import { readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+
+/**
+ * Gitignore patterns to check for .clix directory.
+ */
+const GITIGNORE_PATTERNS = ['.clix', '.clix/', '/.clix', '/.clix/'];
+
+/**
+ * Gitignore entry to add.
+ */
+const GITIGNORE_ENTRY = '\n# Clix CLI local config\n.clix/\n';
+
+/**
+ * Ensure .clix is in .gitignore at the given project path.
+ * Adds entry if not already present. Creates .gitignore if it doesn't exist.
+ *
+ * @param projectPath - The project root directory containing .gitignore
+ * @returns True if gitignore was modified
+ */
+export async function ensureClixGitignore(projectPath: string): Promise<boolean> {
+  const gitignorePath = join(projectPath, '.gitignore');
+
+  try {
+    let content = '';
+
+    // Try to read existing .gitignore
+    try {
+      content = await readFile(gitignorePath, 'utf-8');
+    } catch {
+      // File doesn't exist, will create new one
+    }
+
+    // Check if .clix is already ignored
+    const lines = content.split('\n');
+    const hasClixIgnore = lines.some((line) => {
+      const trimmed = line.trim();
+      return GITIGNORE_PATTERNS.includes(trimmed);
+    });
+
+    if (hasClixIgnore) {
+      return false;
+    }
+
+    // Add .clix to gitignore
+    const newContent =
+      content.endsWith('\n') || content === ''
+        ? `${content}${GITIGNORE_ENTRY}`
+        : `${content}\n${GITIGNORE_ENTRY}`;
+
+    await writeFile(gitignorePath, newContent, 'utf-8');
+    return true;
+  } catch {
+    // Non-fatal: log warning but continue
+    return false;
+  }
+}

src/ui/LoginUI.tsx

@@ -141,9 +141,6 @@ export const LoginUI: React.FC<LoginUIProps> = ({ onComplete, onError }) => {
         const projectConfigManager = getProjectConfigManager(workspacePath);
         await projectConfigManager.save(projectConfig);
 
-        // Ensure .clix is in .gitignore
-        await projectConfigManager.ensureGitignore();
-
         setSavedConfig(projectConfig);
         setPhase('complete');
         setTimeout(() => {

src/ui/SetupUI.tsx

@@ -129,9 +129,6 @@ export const SetupUI: React.FC<SetupUIProps> = ({ onComplete, onError, projectPa
         const projectConfigManager = getProjectConfigManager(workspacePath);
         await projectConfigManager.save(config);
 
-        // Ensure .clix is in .gitignore
-        await projectConfigManager.ensureGitignore();
-
         setSavedConfig(config);
         setPhase('complete');