fix(path): reject whitespace-only user paths and run vendor before typecheck

resolveUserPath() trims input, so whitespace-only customPath/vaultPath
resolved to process.cwd(). Plans silently wrote into the repo root and
Obsidian notes landed in <cwd>/plannotator/ instead of erroring.

Guard at both call sites (getPlanDir, saveToObsidian — Bun + Pi copies).

Also prepend vendor.sh to the root typecheck script so fresh-clone
`bun run typecheck` works without a separate vendoring step.

For provenance purposes, this commit was AI assisted.

Author: backnotprop

apps/pi-extension/server/integrations.ts

@@ -112,6 +112,9 @@ export async function saveToObsidian(
 ): Promise<IntegrationResult> {
 	try {
 		const { vaultPath, folder, plan } = config;
+		if (!vaultPath?.trim()) {
+			return { success: false, error: "Vault path is required" };
+		}
 		const normalizedVault = resolveUserPath(vaultPath);
 		if (!existsSync(normalizedVault))
 			return {

package.json

@@ -30,7 +30,7 @@
     "build:vscode": "bun run --cwd apps/vscode-extension build",
     "package:vscode": "bun run --cwd apps/vscode-extension package",
     "test": "bun test",
-    "typecheck": "tsc --noEmit -p packages/shared/tsconfig.json && tsc --noEmit -p packages/ai/tsconfig.json && tsc --noEmit -p packages/server/tsconfig.json && tsc --noEmit -p apps/pi-extension/tsconfig.json"
+    "typecheck": "bash apps/pi-extension/vendor.sh && tsc --noEmit -p packages/shared/tsconfig.json && tsc --noEmit -p packages/ai/tsconfig.json && tsc --noEmit -p packages/server/tsconfig.json && tsc --noEmit -p apps/pi-extension/tsconfig.json"
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.92",

packages/server/integrations.ts

@@ -99,6 +99,10 @@ export async function saveToObsidian(
 	try {
 		const { vaultPath, folder, plan } = config;
 
+		if (!vaultPath?.trim()) {
+			return { success: false, error: "Vault path is required" };
+		}
+
 		const normalizedVault = resolveUserPath(vaultPath);
 
 		// Validate vault path exists and is a directory

packages/server/storage.test.ts

@@ -75,6 +75,12 @@ describe("getPlanDir", () => {
     const result = getPlanDir(null);
     expect(result).toMatch(/\.plannotator\/plans$/);
   });
+
+  test("uses default for whitespace-only custom path", () => {
+    const result = getPlanDir("   ");
+    expect(result).toMatch(/\.plannotator\/plans$/);
+    expect(result).not.toBe(process.cwd());
+  });
 });
 
 describe("savePlan", () => {

packages/shared/storage.ts

@@ -21,7 +21,7 @@ import { resolveUserPath } from "./resolve-file";
 export function getPlanDir(customPath?: string | null): string {
   let planDir: string;
 
-  if (customPath) {
+  if (customPath?.trim()) {
     planDir = resolveUserPath(customPath);
   } else {
     planDir = join(homedir(), ".plannotator", "plans");