@basou/cli 0.52.0 → 0.54.0

package/dist/index.js

@@ -725,8 +725,8 @@ ${block}${markers.end}
       return `${section.before}${markers.start}
 ${block}${markers.end}${section.after}`;
     case "no_markers": {
-      const sep2 = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
-      return `${existing}${sep2}${wrapped}`;
+      const sep4 = existing.endsWith("\n\n") ? "" : existing.endsWith("\n") ? "\n" : "\n\n";
+      return `${existing}${sep4}${wrapped}`;
     }
     default:
       throw new Error(
@@ -4876,6 +4876,9 @@ async function resolveRepositoryRootForInit(cwd) {
 }
 
 // src/commands/note.ts
+import { readFile as readFile4 } from "fs/promises";
+import { homedir as homedir9 } from "os";
+import { resolve as resolve8 } from "path";
 import {
   acquireLock as acquireLock4,
   appendEventToExistingSession as appendEventToExistingSession2,
@@ -4886,7 +4889,8 @@ import {
   findErrorCode as findErrorCode7,
   LOCAL_CLI_EVENT_SOURCE as LOCAL_CLI_EVENT_SOURCE3,
   readManifest as readManifest6,
-  resolveSessionId as resolveSessionId2
+  resolveSessionId as resolveSessionId2,
+  sanitizePath as sanitizePath2
 } from "@basou/core";
 import { InvalidArgumentError as InvalidArgumentError3 } from "commander";
 var NOTE_SUBCOMMAND_LOOKALIKES = /* @__PURE__ */ new Set([
@@ -4904,11 +4908,33 @@ var NOTE_SUBCOMMAND_LOOKALIKES = /* @__PURE__ */ new Set([
 ]);
 var LABEL_BODY_MAX = 80;
 var LABEL_TRUNCATE_HEAD2 = LABEL_BODY_MAX - 3;
+var NOTE_HELP = `
+Text that contains backticks, $(...), $VAR or ! is safest on stdin through a
+heredoc whose delimiter is QUOTED: the shell then passes the text through
+untouched. Inside double quotes the shell runs backticks and $(...) as commands
+and records their output in place of the text, without any error.
+
+Example (heredoc on stdin):
+  basou note <<'EOF'
+  Next: rebase \`topic\` onto main, then rerun the $CI job.
+  EOF
+
+Keep the text on its own lines: words on the same line as <<'EOF' are ordinary
+shell words, not part of the quoted text. 'basou note -' does not read stdin;
+omit the argument instead.
+
+Trailing newlines in text read from stdin or --file are dropped (a heredoc
+always ends with one); everything else is recorded exactly as read.
+`;
+var HEREDOC_EXAMPLE = ["  basou note <<'EOF'", "  <your note>", "  EOF"].join("\n");
+var NO_INPUT_HINT2 = `No note text. Pass it on stdin through a quoted heredoc, with the text on its own lines:
+${HEREDOC_EXAMPLE}
+or pass it as an argument, or with --file <path>.`;
 function registerNoteCommand(program2) {
-  program2.command("note").description("Record a free-text note (orientation surfaces the latest as the next step)").argument("<body>", "Note text", parseBody).option(
+  program2.command("note").description("Record a free-text note (orientation surfaces the latest as the next step)").argument("[body]", "Note text (omit it to read the text from stdin or --file)", parseBody).option("--file <path>", "Read the note text from a file instead of the argument or stdin").option(
     "--session <session_id>",
     "Attach to an existing session; otherwise an ad-hoc session is created"
-  ).option("--json", "Output the result as JSON").option("-v, --verbose", "Show error causes").action(async (body, options) => {
+  ).option("--json", "Output the result as JSON").option("-v, --verbose", "Show error causes").addHelpText("after", NOTE_HELP).action(async (body, options) => {
     await runNote(body, options);
   });
 }
@@ -4923,17 +4949,29 @@ async function runNote(body, options, ctx = {}) {
     process.exitCode = 1;
   }
 }
-async function doRunNote(body, options, ctx) {
+async function doRunNote(bodyArgument, options, ctx) {
+  const cwd = ctx.cwd ?? process.cwd();
+  const { body, source } = await readNoteBody(bodyArgument, options, ctx, cwd);
+  if (source === "stdin" && body.trim().length === 0) {
+    throw new Error(NO_INPUT_HINT2);
+  }
   if (body.trim().length === 0) {
     throw new Error("Note body must not be empty");
   }
   const reserved = body.trim().toLowerCase();
   if (NOTE_SUBCOMMAND_LOOKALIKES.has(reserved)) {
     throw new Error(
-      `'basou note' records a free-text note and has no '${body.trim()}' subcommand. To record a note, pass its full text (e.g. \`basou note "<your note>"\`).`
+      `'basou note' records a free-text note and has no '${body.trim()}' subcommand. To record a note, pass its full text, e.g. on stdin through a quoted heredoc, with the text on its own lines:
+${HEREDOC_EXAMPLE}`
+    );
+  }
+  if (reserved === "-") {
+    throw new Error(
+      source === "argument" ? `'basou note -' does not read stdin; it would record '-' as the note. To pass the note on stdin, omit the argument:
+${HEREDOC_EXAMPLE}` : `The note text is just '-', which would be recorded as the next step. Write the note itself, e.g.:
+${HEREDOC_EXAMPLE}`
     );
   }
-  const cwd = ctx.cwd ?? process.cwd();
   const repositoryRoot = await resolveBasouRootForCommand(cwd, "note");
   const paths = basouPaths11(repositoryRoot);
   await assertWorkspaceInitialized7(paths.root);
@@ -4972,7 +5010,7 @@ async function doRunNote(body, options, ctx) {
     workingDirectory: repositoryRoot,
     invocation: {
       command: "basou note",
-      args: [body]
+      args: noteInvocationArgs({ body, source, file: options.file, cwd, repositoryRoot })
     },
     targetEventBuilders: [
       (sessionId, eventId) => buildNoteEvent({ eventId, sessionId, occurredAt, body })
@@ -5005,6 +5043,64 @@ function buildAdHocLabel2(body) {
   const truncated = oneLine3.length > LABEL_BODY_MAX ? `${oneLine3.slice(0, LABEL_TRUNCATE_HEAD2)}...` : oneLine3;
   return `Ad-hoc note: ${truncated}`;
 }
+async function readNoteBody(bodyArgument, options, ctx, cwd) {
+  if (bodyArgument !== void 0 && options.file !== void 0) {
+    throw new Error("Pass the note text either as an argument or with --file, not both.");
+  }
+  if (bodyArgument !== void 0) {
+    return { body: bodyArgument, source: "argument" };
+  }
+  if (options.file !== void 0) {
+    let raw;
+    try {
+      raw = await readFile4(resolve8(cwd, options.file), "utf8");
+    } catch (error) {
+      if (findErrorCode7(error, "ENOENT")) {
+        throw new Error("--file names a file that does not exist", { cause: error });
+      }
+      if (findErrorCode7(error, "EISDIR")) {
+        throw new Error("--file names a directory, not a file", { cause: error });
+      }
+      throw new Error("Could not read the file --file names", { cause: error });
+    }
+    return { body: dropTrailingNewlines(raw), source: "file" };
+  }
+  if (ctx.readInput !== void 0) {
+    return { body: dropTrailingNewlines(await ctx.readInput()), source: "stdin" };
+  }
+  if (process.stdin.isTTY === true) {
+    throw new Error(NO_INPUT_HINT2);
+  }
+  return { body: dropTrailingNewlines(await readStdinToEnd2()), source: "stdin" };
+}
+function dropTrailingNewlines(text) {
+  let end = text.length;
+  while (end > 0 && text[end - 1] === "\n") {
+    end -= 1;
+    if (end > 0 && text[end - 1] === "\r") end -= 1;
+  }
+  return text.slice(0, end);
+}
+async function readStdinToEnd2() {
+  const chunks = [];
+  for await (const chunk of process.stdin) {
+    chunks.push(Buffer.from(chunk));
+  }
+  return Buffer.concat(chunks).toString("utf8");
+}
+function noteInvocationArgs(input) {
+  if (input.source === "argument") return [input.body];
+  if (input.source === "file" && input.file !== void 0) {
+    return [
+      "--file",
+      sanitizePath2(resolve8(input.cwd, input.file), {
+        workingDirectory: input.repositoryRoot,
+        homedir: homedir9()
+      })
+    ];
+  }
+  return [];
+}
 function parseBody(raw) {
   if (raw.trim().length === 0) {
     throw new InvalidArgumentError3("Note body must not be empty");
@@ -5155,7 +5251,7 @@ import {
   writeFileSync,
   writeSync
 } from "fs";
-import { basename as basename6, dirname as dirname4, isAbsolute as isAbsolute4, join as join12, relative as relative2, resolve as resolve8 } from "path";
+import { basename as basename6, dirname as dirname4, isAbsolute as isAbsolute4, join as join12, relative as relative2, resolve as resolve9 } from "path";
 import {
   appendBasouGitignore as appendBasouGitignore2,
   basouPaths as basouPaths12,
@@ -5530,7 +5626,7 @@ async function runProjectAdopt(options, ctx = {}) {
   }
 }
 function classifySourceRoot(repositoryRoot, declaredPath) {
-  const absolute = resolve8(repositoryRoot, declaredPath);
+  const absolute = resolve9(repositoryRoot, declaredPath);
   let real;
   try {
     real = realpathSync(absolute);
@@ -5637,7 +5733,7 @@ async function gatherRepoWiring(repositoryRoot, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve8(repositoryRoot, entry.path));
+    real = realpathSync(resolve9(repositoryRoot, entry.path));
   } catch {
     return { ...base, reachable: false, instructionFiles: [] };
   }
@@ -5756,7 +5852,7 @@ function gatherRepoGitignore(repositoryRoot, entry) {
   };
   let real;
   try {
-    real = realpathSync(resolve8(repositoryRoot, entry.path));
+    real = realpathSync(resolve9(repositoryRoot, entry.path));
   } catch {
     return { ...base, reachable: false, currentLines: [] };
   }
@@ -5777,7 +5873,7 @@ function readGitignoreLines(file) {
   }
 }
 function applyGitignorePlan(repositoryRoot, plan) {
-  const file = join12(realpathSync(resolve8(repositoryRoot, plan.path)), ".gitignore");
+  const file = join12(realpathSync(resolve9(repositoryRoot, plan.path)), ".gitignore");
   let existing = "";
   try {
     existing = readFileSync(file, "utf8");
@@ -5786,9 +5882,9 @@ function applyGitignorePlan(repositoryRoot, plan) {
       throw new Error("Failed to read .gitignore", { cause: error });
     }
   }
-  const sep2 = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
+  const sep4 = existing.length > 0 && !existing.endsWith("\n") ? "\n" : "";
   try {
-    writeFileSync(file, `${existing}${sep2}${plan.toAdd.join("\n")}
+    writeFileSync(file, `${existing}${sep4}${plan.toAdd.join("\n")}
 `);
   } catch (error) {
     throw new Error("Failed to write .gitignore", { cause: error });
@@ -5912,7 +6008,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
   const base = { path: entry.path, ...isSelf ? { self: true } : {} };
   let real;
   try {
-    real = realpathSync(resolve8(repositoryRoot, entry.path));
+    real = realpathSync(resolve9(repositoryRoot, entry.path));
   } catch {
     return { ...base, isAnchor: false, reachable: false, canonicalPresent: false, files: [] };
   }
@@ -5984,7 +6080,7 @@ function gatherRepoSymlinks(repositoryRoot, anchorReal, entry) {
 function applySymlinkPlan(repositoryRoot, plan) {
   let real;
   try {
-    real = realpathSync(resolve8(repositoryRoot, plan.path));
+    real = realpathSync(resolve9(repositoryRoot, plan.path));
   } catch (error) {
     const message = failureReason(error);
     return { created: [], failed: plan.toCreate.map((c) => ({ file: c.name, message })) };
@@ -6010,9 +6106,9 @@ function viewCanonicalCollision(repositoryRoot, roster, viewName) {
   for (const entry of roster) {
     let name;
     try {
-      name = basename6(realpathSync(resolve8(repositoryRoot, entry.path)));
+      name = basename6(realpathSync(resolve9(repositoryRoot, entry.path)));
     } catch {
-      name = basename6(resolve8(repositoryRoot, entry.path));
+      name = basename6(resolve9(repositoryRoot, entry.path));
     }
     if (name === viewName) return entry.path;
   }
@@ -6259,7 +6355,7 @@ async function runProjectWorkspace(options, ctx = {}) {
   }
 }
 function resolveViewDir(repositoryRoot, viewPath) {
-  const abs = resolve8(repositoryRoot, viewPath);
+  const abs = resolve9(repositoryRoot, viewPath);
   try {
     return realpathSync(abs);
   } catch {
@@ -6273,7 +6369,7 @@ function resolveViewDir(repositoryRoot, viewPath) {
 function gatherViewRepo(repositoryRoot, viewDir, entry) {
   let repoReal;
   try {
-    repoReal = realpathSync(resolve8(repositoryRoot, entry.path));
+    repoReal = realpathSync(resolve9(repositoryRoot, entry.path));
   } catch {
     return { path: entry.path, reachable: false };
   }
@@ -6325,7 +6421,7 @@ function classifyViewLink(viewDir, name, rosterRealpaths) {
   } catch {
     return null;
   }
-  const resolved = isAbsolute4(target) ? target : resolve8(viewDir, target);
+  const resolved = isAbsolute4(target) ? target : resolve9(viewDir, target);
   try {
     if (rosterRealpaths.has(realpathSync(resolved))) return null;
   } catch {
@@ -6411,11 +6507,11 @@ async function doRunProjectWorkspace(options, ctx) {
   } else {
     const viewDir = resolveViewDir(repositoryRoot, viewPath);
     const facts = roster.map((entry) => gatherViewRepo(repositoryRoot, viewDir, entry));
-    const rosterNames = roster.map((entry) => basename6(resolve8(repositoryRoot, entry.path)));
+    const rosterNames = roster.map((entry) => basename6(resolve9(repositoryRoot, entry.path)));
     const rosterRealpaths = /* @__PURE__ */ new Set();
     for (const entry of roster) {
       try {
-        rosterRealpaths.add(realpathSync(resolve8(repositoryRoot, entry.path)));
+        rosterRealpaths.add(realpathSync(resolve9(repositoryRoot, entry.path)));
       } catch {
       }
     }
@@ -6595,7 +6691,7 @@ async function gatherRepoPreset(repositoryRoot, anchorReal, entry) {
   }
   let real;
   try {
-    real = realpathSync(resolve8(repositoryRoot, entry.path));
+    real = realpathSync(resolve9(repositoryRoot, entry.path));
   } catch {
     return { ...declared, isAnchor: false, reachable: false, canonicalPresent: false };
   }
@@ -6651,7 +6747,7 @@ function viewPresetReposFor(repositoryRoot, roster) {
     anchorReal = void 0;
   }
   return roster.map((entry) => {
-    const abs = resolve8(repositoryRoot, entry.path);
+    const abs = resolve9(repositoryRoot, entry.path);
     let real;
     try {
       real = realpathSync(abs);
@@ -6975,7 +7071,7 @@ function gatherArchiveTeardown(repositoryRoot, manifest, target) {
   };
   let real;
   try {
-    real = realpathSync(resolve8(repositoryRoot, target));
+    real = realpathSync(resolve9(repositoryRoot, target));
   } catch {
     return empty;
   }
@@ -7024,7 +7120,7 @@ function viewLinkPointsAt(viewDir, name, repoReal) {
     if (!lstatSync(filePath).isSymbolicLink()) return false;
     const target = readlinkSync(filePath);
     if (isAbsolute4(target)) return false;
-    return realpathSync(resolve8(viewDir, target)) === repoReal;
+    return realpathSync(resolve9(viewDir, target)) === repoReal;
   } catch {
     return false;
   }
@@ -7035,7 +7131,7 @@ function viewLinkPointsAtPath(viewDir, name, expectedRepoPath) {
     if (!lstatSync(filePath).isSymbolicLink()) return false;
     const target = readlinkSync(filePath);
     if (isAbsolute4(target)) return false;
-    return resolve8(viewDir, target) === expectedRepoPath;
+    return resolve9(viewDir, target) === expectedRepoPath;
   } catch {
     return false;
   }
@@ -7044,19 +7140,19 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
   const anchorReal = realpathSync(repositoryRoot);
   let repoReal;
   try {
-    repoReal = realpathSync(resolve8(repositoryRoot, target));
+    repoReal = realpathSync(resolve9(repositoryRoot, target));
   } catch {
     repoReal = void 0;
   }
   const isAnchor = repoReal !== void 0 && repoReal === anchorReal;
-  const targetAbs = resolve8(repositoryRoot, target);
+  const targetAbs = resolve9(repositoryRoot, target);
   const canonicalName = basename6(repoReal ?? targetAbs);
   const roster = manifest.repos ?? [];
   const declaredEntry = roster.find((r) => {
     try {
-      return realpathSync(resolve8(repositoryRoot, r.path)) === (repoReal ?? "\0");
+      return realpathSync(resolve9(repositoryRoot, r.path)) === (repoReal ?? "\0");
     } catch {
-      return resolve8(repositoryRoot, r.path) === targetAbs;
+      return resolve9(repositoryRoot, r.path) === targetAbs;
     }
   });
   const inRoster = declaredEntry !== void 0;
@@ -7065,7 +7161,7 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
   const canonicalShared = roster.some((r) => {
     let rReal = null;
     try {
-      rReal = realpathSync(resolve8(repositoryRoot, r.path));
+      rReal = realpathSync(resolve9(repositoryRoot, r.path));
     } catch {
       rReal = null;
     }
@@ -7073,8 +7169,8 @@ function gatherRepoTeardown(repositoryRoot, manifest, target) {
       if (repoReal !== void 0 && rReal === repoReal) return false;
       return basename6(rReal).toLowerCase() === cnFold;
     }
-    if (resolve8(repositoryRoot, r.path) === targetAbs) return false;
-    return basename6(resolve8(repositoryRoot, r.path)).toLowerCase() === cnFold;
+    if (resolve9(repositoryRoot, r.path) === targetAbs) return false;
+    return basename6(resolve9(repositoryRoot, r.path)).toLowerCase() === cnFold;
   });
   const collisionNote = "shared with another repo of the same basename, so it cannot be removed (check manually)";
   const items = [];
@@ -7255,7 +7351,7 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
   const changed = (label) => failed.push({ label, message: "the state changed since the scan (re-run)" });
   let currentRepoReal = null;
   try {
-    currentRepoReal = realpathSync(resolve8(repositoryRoot, plan.target));
+    currentRepoReal = realpathSync(resolve9(repositoryRoot, plan.target));
   } catch {
     currentRepoReal = null;
   }
@@ -7290,7 +7386,7 @@ function applyRepoTeardown(repositoryRoot, manifest, plan) {
       continue;
     }
     const viewDir = resolveViewDir(repositoryRoot, viewPath);
-    const owned = repoReal !== null ? viewLinkPointsAt(viewDir, item.label, repoReal) : viewLinkPointsAtPath(viewDir, item.label, resolve8(repositoryRoot, plan.target));
+    const owned = repoReal !== null ? viewLinkPointsAt(viewDir, item.label, repoReal) : viewLinkPointsAtPath(viewDir, item.label, resolve9(repositoryRoot, plan.target));
     if (!owned) {
       changed(item.label);
       continue;
@@ -7452,7 +7548,7 @@ async function doRunProjectArchive(target, options, ctx) {
   const roster = manifest.repos ?? [];
   let targetIsAnchor = false;
   try {
-    targetIsAnchor = realpathSync(resolve8(repositoryRoot, target)) === realpathSync(repositoryRoot);
+    targetIsAnchor = realpathSync(resolve9(repositoryRoot, target)) === realpathSync(repositoryRoot);
   } catch {
     targetIsAnchor = false;
   }
@@ -7609,7 +7705,7 @@ async function doRunProjectRename(oldPath, newPath, options, ctx) {
   const roster = manifest.repos ?? [];
   let oldIsAnchor = false;
   try {
-    oldIsAnchor = realpathSync(resolve8(repositoryRoot, oldPath)) === realpathSync(repositoryRoot);
+    oldIsAnchor = realpathSync(resolve9(repositoryRoot, oldPath)) === realpathSync(repositoryRoot);
   } catch {
     oldIsAnchor = false;
   }
@@ -7755,7 +7851,7 @@ async function doRunProjectNew(repos, options, ctx) {
   const viewStem = productName ?? workspaceName;
   const viewOverridesProjectName = productName !== void 0 && typeof options.view === "string";
   const declared = repos.map((p) => {
-    const abs = resolve8(cwd, p);
+    const abs = resolve9(cwd, p);
     let real;
     try {
       real = realpathSync(abs);
@@ -8020,7 +8116,7 @@ function pathPresent(p) {
 }
 function gatherRetrofit(repositoryRoot, anchorReal, roster, argAbs, argReal, viewCanonicalName) {
   const declaredEntry = roster.find((entry) => {
-    const entryAbs = resolve8(repositoryRoot, entry.path);
+    const entryAbs = resolve9(repositoryRoot, entry.path);
     if (argReal !== void 0) {
       try {
         if (realpathSync(entryAbs) === argReal) return true;
@@ -8160,7 +8256,7 @@ async function doRunProjectRetrofit(repo, options, ctx) {
     }
     return result2;
   }
-  const argAbs = resolve8(repositoryRoot, repo);
+  const argAbs = resolve9(repositoryRoot, repo);
   let argReal;
   try {
     argReal = realpathSync(argAbs);
@@ -8381,7 +8477,7 @@ function renderProjectRetrofit(result) {
 }
 
 // src/commands/protocol.ts
-import { readFile as readFile4, stat as stat5 } from "fs/promises";
+import { readFile as readFile5, stat as stat5 } from "fs/promises";
 import {
   carryForwardProtocolStamp,
   PROTOCOL_END as PROTOCOL_END2,
@@ -8438,7 +8534,7 @@ async function readProtocolSources(entries) {
   for (const entry of entries) {
     let content;
     try {
-      content = await readFile4(entry.source, "utf8");
+      content = await readFile5(entry.source, "utf8");
     } catch (error) {
       if (error instanceof Error && error.code === "ENOENT") {
         throw new Error(
@@ -8571,7 +8667,7 @@ import { InvalidArgumentError as InvalidArgumentError4 } from "commander";
 
 // src/commands/refresh-watch.ts
 import { readdir as readdir2, stat as stat6 } from "fs/promises";
-import { homedir as homedir9 } from "os";
+import { homedir as homedir10 } from "os";
 import { join as join13 } from "path";
 import { findErrorCode as findErrorCode8 } from "@basou/core";
 var DEFAULT_WATCH_INTERVAL_SEC = 30;
@@ -8579,8 +8675,8 @@ var MIN_WATCH_INTERVAL_SEC = 5;
 var MAX_WATCH_INTERVAL_SEC = 86400;
 function watchedRoots(ctx) {
   return [
-    ctx.codexSessionsDir ?? join13(homedir9(), ".codex", "sessions"),
-    ctx.claudeProjectsDir ?? join13(homedir9(), ".claude", "projects")
+    ctx.codexSessionsDir ?? join13(homedir10(), ".codex", "sessions"),
+    ctx.claudeProjectsDir ?? join13(homedir10(), ".claude", "projects")
   ];
 }
 async function scanSourceLogs(roots) {
@@ -8701,19 +8797,19 @@ function parseInterval(value) {
   return seconds;
 }
 function abortableSleep(ms, signal) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve15) => {
     if (signal.aborted) {
-      resolve14();
+      resolve15();
       return;
     }
     let timer;
     const onAbort = () => {
       clearTimeout(timer);
-      resolve14();
+      resolve15();
     };
     timer = setTimeout(() => {
       signal.removeEventListener("abort", onAbort);
-      resolve14();
+      resolve15();
     }, ms);
     signal.addEventListener("abort", onAbort, { once: true });
   });
@@ -8939,7 +9035,7 @@ async function assertWorkspaceInitialized8(basouRoot) {
 }
 
 // src/commands/report.ts
-import { isAbsolute as isAbsolute5, resolve as resolve9 } from "path";
+import { isAbsolute as isAbsolute5, resolve as resolve10 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe10,
   basouPaths as basouPaths14,
@@ -8979,7 +9075,7 @@ async function doRunReportGenerate(options, ctx) {
     onTaskSkip: (taskId, reason) => printTaskSkip(taskId, reason)
   });
   if (options.out !== void 0) {
-    const outPath = isAbsolute5(options.out) ? options.out : resolve9(cwd, options.out);
+    const outPath = isAbsolute5(options.out) ? options.out : resolve10(cwd, options.out);
     await writeMarkdownFile6(outPath, result.body);
     const { sessions, decisions, tasks } = result.data;
     console.error(
@@ -9017,9 +9113,9 @@ async function assertWorkspaceInitialized9(basouRoot) {
 }
 
 // src/commands/review.ts
-import { readFile as readFile5 } from "fs/promises";
-import { homedir as homedir10 } from "os";
-import { resolve as resolve10 } from "path";
+import { readFile as readFile6 } from "fs/promises";
+import { homedir as homedir11 } from "os";
+import { resolve as resolve11 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe11,
   basouPaths as basouPaths15,
@@ -9031,7 +9127,7 @@ import {
   parseReviewRecordInput,
   readManifest as readManifest9,
   resolveRepoRoot,
-  sanitizePath as sanitizePath2
+  sanitizePath as sanitizePath3
 } from "@basou/core";
 function registerReviewCommand(program2) {
   const review = program2.command("review").description("Record reviews that ran (the durable signal a review happened)");
@@ -9119,9 +9215,9 @@ async function doRunReviewRecord(options, ctx) {
   const manifest = await readManifest9(paths);
   const invocationArgs = options.file !== void 0 ? [
     "--file",
-    sanitizePath2(resolve10(cwd, options.file), {
+    sanitizePath3(resolve11(cwd, options.file), {
       workingDirectory: repositoryRoot,
-      homedir: homedir10()
+      homedir: homedir11()
     })
   ] : [];
   const adHoc = await createAdHocSessionWithEvent3({
@@ -9161,7 +9257,7 @@ ${detail}
 async function readReviewInput(options, ctx) {
   if (options.file !== void 0) {
     try {
-      return await readFile5(options.file, "utf8");
+      return await readFile6(options.file, "utf8");
     } catch (error) {
       if (findErrorCode11(error, "ENOENT")) {
         throw new Error(`Input file not found: ${options.file}`);
@@ -9173,18 +9269,18 @@ async function readReviewInput(options, ctx) {
     return await ctx.readInput();
   }
   if (process.stdin.isTTY === true) {
-    throw new Error(NO_INPUT_HINT2);
+    throw new Error(NO_INPUT_HINT3);
   }
-  return await readStdinToEnd2();
+  return await readStdinToEnd3();
 }
-async function readStdinToEnd2() {
+async function readStdinToEnd3() {
   const chunks = [];
   for await (const chunk of process.stdin) {
     chunks.push(Buffer.from(chunk));
   }
   return Buffer.concat(chunks).toString("utf8");
 }
-var NO_INPUT_HINT2 = "No input: pipe a JSON object describing the review to stdin or pass --file <path>.";
+var NO_INPUT_HINT3 = "No input: pipe a JSON object describing the review to stdin or pass --file <path>.";
 function reviewToPayload(review) {
   const payload = {
     reviewer: review.reviewer,
@@ -9454,8 +9550,8 @@ function unattachedLines(u) {
 }
 
 // src/commands/run.ts
-import { mkdir as mkdir2, readFile as readFile6 } from "fs/promises";
-import { homedir as homedir11 } from "os";
+import { mkdir as mkdir2, readFile as readFile7 } from "fs/promises";
+import { homedir as homedir12 } from "os";
 import { join as join14 } from "path";
 import {
   acquireLock as acquireLock5,
@@ -9681,7 +9777,7 @@ async function runTrackedTool(args, options, ctx, adapter) {
   const rawRelated = computeRelatedFiles(preSnapshot, postSnapshot, diff);
   const relatedFiles = sanitizeRelatedFiles(rawRelated, {
     workingDirectory: repoRoot,
-    homedir: homedir11()
+    homedir: homedir12()
   }).sanitized;
   const finalStatus = decideFinalStatus2(result, signalReceived);
   await appendEvent(sessionDir, {
@@ -9825,7 +9921,7 @@ function buildInitialSession2(input) {
       source: { ...input.source },
       started_at: input.startedAt,
       status: "initialized",
-      working_directory: sanitizeWorkingDirectory2(input.cwd, { homedir: homedir11() }),
+      working_directory: sanitizeWorkingDirectory2(input.cwd, { homedir: homedir12() }),
       invocation: {
         command: input.command,
         args: [...input.args],
@@ -9901,7 +9997,7 @@ async function noteCodexHookStatusPreSpawn(_cwd, ctx) {
   const hooksPath = ctx.codexHooksPath ?? DEFAULT_CODEX_HOOKS_PATH;
   let location;
   try {
-    location = findBasouSessionStartHook2(JSON.parse(await readFile6(hooksPath, "utf8")));
+    location = findBasouSessionStartHook2(JSON.parse(await readFile7(hooksPath, "utf8")));
   } catch (error) {
     if (!(error instanceof Error && error.code === "ENOENT")) return null;
     location = null;
@@ -9915,8 +10011,8 @@ async function noteCodexHookStatusPreSpawn(_cwd, ctx) {
 }
 
 // src/commands/session.ts
-import { readFile as readFile7 } from "fs/promises";
-import { basename as basename7, isAbsolute as isAbsolute6, join as join15, relative as relative3 } from "path";
+import { readFile as readFile8 } from "fs/promises";
+import { basename as basename7, isAbsolute as isAbsolute6, join as join15, relative as relative3, sep as sep2 } from "path";
 import {
   acquireLock as acquireLock6,
   appendEventToExistingSession as appendEventToExistingSession3,
@@ -10186,7 +10282,7 @@ function formatWorkingDir(workingDir, repositoryRoot, options) {
   if (workingDir === repositoryRoot) return "<repository_root>";
   const rel = relative3(repositoryRoot, workingDir);
   if (rel.length === 0 || rel === ".") return "<repository_root>";
-  if (rel.startsWith("..")) return rel;
+  if (rel === ".." || rel.startsWith(`..${sep2}`)) return rel;
   return `./${rel}`;
 }
 function formatRelatedFiles(files) {
@@ -10386,7 +10482,7 @@ async function doRunSessionImport(options, ctx) {
 }
 async function readInputFile(path) {
   try {
-    return await readFile7(path, "utf8");
+    return await readFile8(path, "utf8");
   } catch (error) {
     if (findErrorCode12(error, "ENOENT")) {
       throw new Error("Import source not found", { cause: error });
@@ -10503,7 +10599,7 @@ async function doRunSessionNote(sessionIdInput, options, ctx) {
 }
 async function readNoteFile(path) {
   try {
-    return await readFile7(path, "utf8");
+    return await readFile8(path, "utf8");
   } catch (error) {
     if (findErrorCode12(error, "ENOENT")) {
       throw new Error("Note source not found", { cause: error });
@@ -10828,7 +10924,7 @@ function formatVersionGateMessage(error) {
 }
 
 // src/commands/task.ts
-import { readFile as readFile8 } from "fs/promises";
+import { readFile as readFile9 } from "fs/promises";
 import { join as join16 } from "path";
 import {
   archiveTask,
@@ -11843,7 +11939,7 @@ function parsePositiveInt2(raw) {
 }
 async function readDescriptionFile(path) {
   try {
-    return await readFile8(path, "utf8");
+    return await readFile9(path, "utf8");
   } catch (error) {
     if (findErrorCode15(error, "ENOENT")) {
       throw new Error("Description source not found", { cause: error });
@@ -12048,7 +12144,7 @@ async function assertWorkspaceInitialized14(basouRoot) {
 // src/commands/view.ts
 import { spawn } from "child_process";
 import { createHash as createHash2 } from "crypto";
-import { basename as basename10, resolve as resolve13 } from "path";
+import { basename as basename10, resolve as resolve14 } from "path";
 import {
   assertBasouRootSafe as assertBasouRootSafe18,
   basouPaths as basouPaths24,
@@ -12061,7 +12157,7 @@ import { InvalidArgumentError as InvalidArgumentError8 } from "commander";
 // src/lib/portfolio-coverage.ts
 import { createReadStream as createReadStream2 } from "fs";
 import { readdir as readdir3, stat as stat7 } from "fs/promises";
-import { homedir as homedir12 } from "os";
+import { homedir as homedir13 } from "os";
 import { basename as basename8, dirname as dirname5, join as join17 } from "path";
 import { createInterface as createInterface2 } from "readline";
 import { basouPaths as basouPaths23, readManifest as readManifest14, resolveRepositoryRoot as resolveRepositoryRoot13 } from "@basou/core";
@@ -12071,8 +12167,8 @@ function uncapturedTotal(result) {
 async function checkPortfolioCoverage(workspaces, ctx = {}) {
   const { roots, inertWorkspaces } = await collectDeclaredRoots(workspaces);
   const listedDirs = new Set([...roots].map((root) => encodeProjectDir(root)));
-  const claudeProjectsDir = ctx.claudeProjectsDir ?? join17(homedir12(), ".claude", "projects");
-  const codexSessionsDir = ctx.codexSessionsDir ?? join17(homedir12(), ".codex", "sessions");
+  const claudeProjectsDir = ctx.claudeProjectsDir ?? join17(homedir13(), ".claude", "projects");
+  const codexSessionsDir = ctx.codexSessionsDir ?? join17(homedir13(), ".codex", "sessions");
   const tally = new Tally(roots);
   const absentTrees = [];
   const claudeFiles = await listClaudeTranscripts(claudeProjectsDir);
@@ -12376,7 +12472,7 @@ function inertLines(result) {
 // src/lib/portfolio-safety.ts
 import { execFile as execFile2 } from "child_process";
 import { lstat as lstat2, realpath as realpath4 } from "fs/promises";
-import { isAbsolute as isAbsolute7, join as join18, relative as relative4, resolve as resolve11 } from "path";
+import { isAbsolute as isAbsolute7, join as join18, relative as relative4, resolve as resolve12, sep as sep3 } from "path";
 import { promisify as promisify2 } from "util";
 import { readManifest as readManifest15 } from "@basou/core";
 var execFileAsync2 = promisify2(execFile2);
@@ -12387,12 +12483,12 @@ async function canonical(p) {
   try {
     return await realpath4(p);
   } catch {
-    return resolve11(p);
+    return resolve12(p);
   }
 }
 function isInside(child, parent) {
   const rel = relative4(parent, child);
-  return rel === "" || !rel.startsWith("..") && !isAbsolute7(rel);
+  return rel === "" || rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute7(rel);
 }
 function isBasouPath(p) {
   return p === ".basou" || p.startsWith(".basou/") || p.includes("/.basou/") || p.endsWith("/.basou");
@@ -12455,13 +12551,13 @@ async function checkPortfolioSafety(workspaces) {
     }
     const monitored = /* @__PURE__ */ new Map();
     for (const root of sourceRoots) {
-      const display = resolve11(ws.repoRoot, root);
+      const display = resolve12(ws.repoRoot, root);
       const real = await canonical(display);
       if (real !== wsReal) monitored.set(real, display);
     }
     const claimed = new Set(monitored.keys());
     if (isMaster && viewPath !== void 0) {
-      const viewReal = await canonical(resolve11(ws.repoRoot, viewPath));
+      const viewReal = await canonical(resolve12(ws.repoRoot, viewPath));
       if (viewReal !== wsReal) claimed.add(viewReal);
     }
     records.push({ ws, real: wsReal, isMaster, claimed });
@@ -12554,7 +12650,7 @@ function formatSafetyReport(result) {
 
 // src/lib/view-server.ts
 import { createServer } from "http";
-import { basename as basename9, join as join19, resolve as resolve12 } from "path";
+import { basename as basename9, join as join19, resolve as resolve13 } from "path";
 import {
   computeWorkStats as computeWorkStats2,
   enumerateApprovals as enumerateApprovals2,
@@ -13308,7 +13404,7 @@ function startViewServer(opts) {
   };
   let boundPort = port;
   const getPort = () => boundPort;
-  return new Promise((resolve14, reject) => {
+  return new Promise((resolve15, reject) => {
     const server = createServer((req, res) => {
       handleRequest(req, res, deps, getPort, runExclusive).catch((error) => {
         sendError(res, error instanceof HttpError ? error.status : 500, pathlessMessage(error));
@@ -13319,7 +13415,7 @@ function startViewServer(opts) {
       const address = server.address();
       boundPort = isAddressInfo(address) ? address.port : port;
       server.off("error", reject);
-      resolve14({
+      resolve15({
         url: `http://${host}:${boundPort}`,
         port: boundPort,
         close: () => closeServer(server)
@@ -13331,8 +13427,8 @@ function isAddressInfo(value) {
   return value !== null && typeof value === "object";
 }
 function closeServer(server) {
-  return new Promise((resolve14) => {
-    server.close(() => resolve14());
+  return new Promise((resolve15) => {
+    server.close(() => resolve15());
     server.closeAllConnections();
   });
 }
@@ -13604,7 +13700,7 @@ async function rosterRepos(repoRoot, manifest, resolveRemoteUrl) {
   const roster = manifest.repos ?? [];
   return Promise.all(
     roster.map(async (repo) => {
-      const abs = resolve12(repoRoot, repo.path);
+      const abs = resolve13(repoRoot, repo.path);
       const remote = await resolveRemoteUrl(abs);
       const url = remote !== void 0 ? toBrowserUrl(remote) : null;
       return {
@@ -13880,12 +13976,12 @@ async function buildSingleDeps(ctx, cwd) {
   };
 }
 async function buildPortfolioDeps(workspaceFlags, ctx, cwd) {
-  const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve13(cwd, p) })) : await loadPortfolioConfig(ctx.portfolioConfigPath);
+  const specs = workspaceFlags.length > 0 ? workspaceFlags.map((p) => ({ path: resolve14(cwd, p) })) : await loadPortfolioConfig(ctx.portfolioConfigPath);
   const entries = [];
   const seenPath = /* @__PURE__ */ new Set();
   const seenKey = /* @__PURE__ */ new Set();
   for (const spec of specs) {
-    const repoRoot = resolve13(spec.path);
+    const repoRoot = resolve14(spec.path);
     if (seenPath.has(repoRoot)) continue;
     seenPath.add(repoRoot);
     const entry = await buildWorkspaceEntry(repoRoot, ctx, spec.label);
@@ -13962,7 +14058,7 @@ function openInBrowser(url, override) {
   }
 }
 function waitForShutdown(signal) {
-  return new Promise((resolve14) => {
+  return new Promise((resolve15) => {
     const cleanup = () => {
       process.off("SIGINT", onSignal);
       process.off("SIGTERM", onSignal);
@@ -13970,18 +14066,18 @@ function waitForShutdown(signal) {
     };
     const onSignal = () => {
       cleanup();
-      resolve14();
+      resolve15();
     };
     const onAbort = () => {
       cleanup();
-      resolve14();
+      resolve15();
     };
     process.on("SIGINT", onSignal);
     process.on("SIGTERM", onSignal);
     if (signal !== void 0) {
       if (signal.aborted) {
         cleanup();
-        resolve14();
+        resolve15();
         return;
       }
       signal.addEventListener("abort", onAbort);
@@ -14015,7 +14111,7 @@ async function assertWorkspaceInitialized15(basouRoot) {
 function readBuildStamp() {
   if (false) return void 0;
   try {
-    return JSON.parse('{"version":"0.52.0","commit":"9e749db","committedAt":"2026-09-24T15:47:31+09:00"}');
+    return JSON.parse('{"version":"0.54.0","commit":"ac2e5dd","committedAt":"2026-09-25T23:04:16+09:00"}');
   } catch {
     return void 0;
   }