@erclx/canon 4.26.0 → 4.26.1

package/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "canon",
   "description": "Automated governance, versioning, and discovery tools for Claude Code.",
-  "version": "4.26.0",
+  "version": "4.26.1",
   "author": {
     "name": "Eric Le",
     "url": "https://github.com/erclx"

package/docs/agents/key-changes.md

@@ -22,7 +22,7 @@ The positional is the pull request to read, defaulting to the one open on this b
 | `--root <path>` | Repository to read, defaulting to the cwd                          |
 | `--json`        | Add a machine-readable record on stdout, keeping the frame         |
 
-`--body` decides where both halves come from, so a number passed beside it is never read. The body comes off disk and the changed set from the local range, which is the shape a fixture and a body still being drafted both need.
+`--body` decides where both halves come from, so a number passed beside it is never read. The body comes off disk and the changed set from the local range, which is the shape a fixture and a body still being drafted both need. A relative `--body` path resolves against the working directory the command runs from, never against `--root`. `--base` and the changed-file read still resolve against `--root`.
 
 `--base` names the far side of that range and never the commit the comparison runs against directly. The reader resolves the merge base between `HEAD` and the ref, so `--base origin/main` measures what the branch wrote rather than what the trunk gained while the branch was open. Passing the trunk as it stands today is therefore safe on a branch of any age, and a ref sharing no history with `HEAD` refuses as `bad-base`.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@erclx/canon",
   "type": "module",
-  "version": "4.26.0",
+  "version": "4.26.1",
   "description": "Infrastructure and quality tooling for developer workflows",
   "license": "MIT",
   "bin": {

package/src/commands/pr.ts

@@ -349,15 +349,21 @@ async function listFilesByPage(
 /**
  * Reads the body off disk and the changed set from git, which is the shape a
  * fixture and a body still being drafted both need.
+ *
+ * `cwd` and `root` diverge when a caller passes `--root` to read a pull
+ * request against a worktree other than the one they are standing in. The
+ * body path is resolved against `cwd`, since it is correct from where the
+ * caller stands regardless of which tree `--root` names.
  */
 async function readFromFile(
   root: string,
+  cwd: string,
   path: string,
   base: string | undefined,
 ): Promise<SourceRead> {
   let body: string
   try {
-    body = await readFile(resolve(root, path), 'utf8')
+    body = await readFile(resolve(cwd, path), 'utf8')
   } catch {
     return { kind: 'refused', reason: 'unreadable-body' }
   }
@@ -403,7 +409,7 @@ async function runKeyChanges(
   const source =
     opts.body === undefined
       ? await readFromApi(root, number)
-      : await readFromFile(root, opts.body, opts.base)
+      : await readFromFile(root, process.cwd(), opts.body, opts.base)
 
   if (source.kind === 'refused') return refuse(source.reason, emitJson, root)