@link-assistant/hive-mind 1.78.0 → 1.78.2

package/src/npm-global-prefix.lib.mjs

@@ -0,0 +1,160 @@
+#!/usr/bin/env node
+
+/**
+ * Ensure npm's global install directory is writable before `use-m` runs.
+ *
+ * Issue #1897: `use-m` loads runtime dependencies (command-stream, getenv,
+ * yargs, …) by shelling out to `npm install -g <alias>@npm:<pkg>@latest`.
+ * npm installs into the global prefix reported by `npm root -g`. When the
+ * CLI is launched with a system-wide Node.js whose global `node_modules`
+ * directory is owned by root (e.g. `/opt/node-v24.16.0-linux-x64/lib/node_modules`),
+ * the install fails with `EACCES: permission denied` and the whole process
+ * crashes at the very first `use()` call with an unhandled error:
+ *
+ *   Error: Failed to install command-stream@latest globally.
+ *     ... npm error code EACCES
+ *     ... npm error syscall rename
+ *     ... npm error path /opt/node-.../lib/node_modules/command-stream-v-latest
+ *
+ * This commonly happens when the package was installed with one runtime
+ * (e.g. `bun add -g`, which writes to a user-owned `~/.bun/...`) but launched
+ * under a system Node whose global prefix needs root.
+ *
+ * The fix mirrors npm's own documented recommendation for EACCES errors:
+ * point the global prefix at a user-writable directory. We detect the
+ * non-writable prefix up front and redirect `npm_config_prefix` (which both
+ * `npm install -g` and `npm root -g` honour) to `~/.npm-global`, so use-m's
+ * install succeeds without sudo. When the prefix is already writable we do
+ * nothing — the common case stays a no-op with no extra `npm` spawn.
+ */
+
+import { access, mkdir } from 'node:fs/promises';
+import { constants as fsConstants } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { homedir } from 'node:os';
+import { exec } from 'node:child_process';
+import { promisify } from 'node:util';
+
+const execAsync = promisify(exec);
+
+/**
+ * Derive the likely global `node_modules` path from the Node binary location
+ * without spawning npm. For a standard POSIX layout the node binary lives at
+ * `<prefix>/bin/node` and global packages at `<prefix>/lib/node_modules`.
+ *
+ * @param {string} execPath - Absolute path to the running node binary.
+ * @returns {string} Candidate global `node_modules` directory.
+ */
+export const deriveGlobalNodeModules = execPath => join(dirname(dirname(execPath)), 'lib', 'node_modules');
+
+/**
+ * Check whether a directory is writable, walking up to the nearest existing
+ * ancestor when the leaf does not yet exist (npm would create it on install).
+ *
+ * @param {string} startDir - Directory to test.
+ * @param {(path: string, mode: number) => Promise<void>} accessFn - fs.access.
+ * @returns {Promise<boolean>}
+ */
+export const isPathWritable = async (startDir, accessFn = access) => {
+  let current = startDir;
+  for (;;) {
+    try {
+      await accessFn(current, fsConstants.W_OK);
+      return true;
+    } catch (error) {
+      if (error && error.code === 'ENOENT') {
+        const parent = dirname(current);
+        if (parent === current) return false; // reached filesystem root
+        current = parent;
+        continue;
+      }
+      // EACCES / EPERM / anything else → treat as not writable.
+      return false;
+    }
+  }
+};
+
+const queryNpmRoot = async runner => {
+  try {
+    const { stdout } = await runner('npm root -g');
+    const value = String(stdout).trim();
+    return value || null;
+  } catch {
+    return null;
+  }
+};
+
+/**
+ * Detect a non-writable npm global prefix and, if found, redirect global
+ * installs to a user-writable directory by setting `npm_config_prefix`.
+ *
+ * Idempotent and dependency-injectable for tests. Returns an object describing
+ * what happened: `{ changed: boolean, reason: string, prefix?, previousRoot? }`.
+ *
+ * @param {object} [options]
+ * @param {Record<string, string>} [options.env=process.env] - Environment to mutate.
+ * @param {string} [options.execPath=process.execPath] - Running node binary path.
+ * @param {string} [options.platform=process.platform] - OS platform.
+ * @param {string} [options.home] - User home directory.
+ * @param {Function} [options.accessFn=fs.access]
+ * @param {Function} [options.mkdirFn=fs.mkdir]
+ * @param {Function} [options.runner=execAsync] - Runs a shell command, returns {stdout}.
+ * @param {(message: string) => void} [options.log] - Informational logger.
+ * @returns {Promise<{changed: boolean, reason: string, prefix?: string, previousRoot?: string, error?: Error}>}
+ */
+export const ensureWritableNpmGlobalPrefix = async (options = {}) => {
+  const { env = process.env, execPath = process.execPath, platform = process.platform, home = homedir(), accessFn = access, mkdirFn = mkdir, runner = execAsync, log = () => {}, isBunRuntime = typeof Bun !== 'undefined', isDenoRuntime = typeof Deno !== 'undefined' } = options;
+
+  // Windows' global layout differs (`<prefix>/node_modules`, AppData), and the
+  // EACCES scenario this guards against is POSIX-specific. Skip to avoid false
+  // positives that would needlessly relocate the prefix.
+  if (platform === 'win32') return { changed: false, reason: 'win32' };
+
+  // This workaround only protects use-m's Node/npm resolver. Bun and Deno use
+  // different install paths and should not have npm configuration changed.
+  if (isBunRuntime) return { changed: false, reason: 'bun-runtime' };
+  if (isDenoRuntime) return { changed: false, reason: 'deno-runtime' };
+
+  // Respect an explicitly configured prefix — the user (or a parent process)
+  // already chose where global installs go.
+  if (env.npm_config_prefix || env.NPM_CONFIG_PREFIX) return { changed: false, reason: 'preset' };
+
+  // Fast path: derive the likely global node_modules from the node binary and
+  // check writability without spawning npm. Most installs land here.
+  const derived = deriveGlobalNodeModules(execPath);
+  if (await isPathWritable(derived, accessFn)) {
+    return { changed: false, reason: 'writable' };
+  }
+
+  // The cheap heuristic says non-writable. Confirm against the authoritative
+  // path npm/use-m actually use before changing anything (handles custom prefixes).
+  const authoritative = (await queryNpmRoot(runner)) || derived;
+  if (await isPathWritable(authoritative, accessFn)) {
+    return { changed: false, reason: 'writable' };
+  }
+
+  // Global prefix is genuinely not writable by the current user (issue #1897).
+  if (!home) {
+    return { changed: false, reason: 'no-home' };
+  }
+
+  const prefix = join(home, '.npm-global');
+  try {
+    // npm installs into `<prefix>/lib/node_modules`; create it so the very
+    // first `npm install -g` does not have to.
+    await mkdirFn(join(prefix, 'lib', 'node_modules'), { recursive: true });
+  } catch (error) {
+    return { changed: false, reason: 'mkdir-failed', error };
+  }
+
+  env.npm_config_prefix = prefix;
+  // Make globally-installed binaries from the new prefix resolvable too.
+  const binDir = join(prefix, 'bin');
+  const pathParts = String(env.PATH || '').split(':');
+  if (!pathParts.includes(binDir)) {
+    env.PATH = env.PATH ? `${binDir}:${env.PATH}` : binDir;
+  }
+
+  log(`ℹ️  npm global directory (${authoritative}) is not writable; redirecting global installs to ${prefix} (issue #1897).`);
+  return { changed: true, reason: 'redirected', prefix, previousRoot: authoritative };
+};

package/src/opencode.lib.mjs

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // OpenCode-related utility functions
 
 // Check if use is already defined (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 const { $ } = await use('command-stream');

package/src/playwright-mcp.lib.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Playwright MCP session-level disable/restore utilities.
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const { $ } = await use('command-stream');
 const fs = (await use('fs')).promises;

package/src/protect-branch.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 /**
  * Branch Protection Script
  *
@@ -15,7 +16,7 @@
  */
 
 // Use use-m to dynamically import modules for cross-runtime compatibility
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+const use = await ensureUseM();
 
 // Use command-stream for consistent $ behavior across runtimes
 const { $: __rawDollar$ } = await use('command-stream');

package/src/queue-config.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Queue Configuration Module
@@ -26,7 +27,7 @@
 // Use use-m to dynamically import modules
 if (typeof globalThis.use === 'undefined') {
   try {
-    globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+    await ensureUseM();
   } catch (error) {
     console.error('❌ Fatal error: Failed to load dependencies for queue configuration');
     console.error(`   ${error.message}`);

package/src/qwen.lib.mjs

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Qwen Code CLI-related utility functions
 
 // Check if use is already defined (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 const { $ } = await use('command-stream');

package/src/review.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Early exit paths - handle these before loading all modules to speed up testing
 const earlyArgs = process.argv.slice(2);
@@ -32,7 +33,7 @@ if (earlyArgs.includes('--help') || earlyArgs.includes('-h')) {
 }
 
 // Use use-m to dynamically import modules for cross-runtime compatibility
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+const use = await ensureUseM();
 
 // Use command-stream for consistent $ behavior across runtimes
 const { $: __rawDollar$ } = await use('command-stream');

package/src/reviewers-hive.mjs

@@ -1,7 +1,8 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Use use-m to dynamically import modules for cross-runtime compatibility
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+const use = await ensureUseM();
 
 // Use command-stream for consistent $ behavior across runtimes
 const { $: __rawDollar$ } = await use('command-stream');

package/src/session-monitor.lib.mjs

@@ -15,8 +15,9 @@
  * @see https://github.com/link-assistant/hive-mind/issues/380
  */
 
-import { promisify } from 'util';
 import { exec as execCallback } from 'child_process';
+import fs from 'fs/promises';
+import { promisify } from 'util';
 import { formatSessionCompletionMessage, getSessionCompletionExitCode } from './work-session-formatting.lib.mjs';
 import { notifySubscribers, getSubscriberCount } from './telegram-subscribers.lib.mjs';
 
@@ -157,6 +158,45 @@ function normalizeSessionUrl(url) {
   return url.replace(/#.*$/, '').replace(/\/+$/, '').toLowerCase();
 }
 
+const GITHUB_PULL_REQUEST_URL_RE = /https:\/\/github\.com\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+)\/pull\/([0-9]+)/g;
+
+export function extractPullRequestUrlFromText(text, { owner = null, repo = null } = {}) {
+  if (!text) return null;
+
+  const expectedOwner = owner ? String(owner).toLowerCase() : null;
+  const expectedRepo = repo ? String(repo).toLowerCase() : null;
+  const value = String(text);
+  GITHUB_PULL_REQUEST_URL_RE.lastIndex = 0;
+
+  let match;
+  while ((match = GITHUB_PULL_REQUEST_URL_RE.exec(value)) !== null) {
+    const [, matchOwner, matchRepo, pullNumber] = match;
+    if (expectedOwner && matchOwner.toLowerCase() !== expectedOwner) continue;
+    if (expectedRepo && matchRepo.toLowerCase() !== expectedRepo) continue;
+    return `https://github.com/${matchOwner}/${matchRepo}/pull/${pullNumber}`;
+  }
+
+  return null;
+}
+
+async function resolvePullRequestUrlFromSessionLog(logPath, ctx, { verbose = false, readFile = fs.readFile } = {}) {
+  if (!logPath) return null;
+
+  try {
+    const logText = await readFile(logPath, 'utf8');
+    const pullRequestUrl = extractPullRequestUrlFromText(logText, { owner: ctx.owner, repo: ctx.repo });
+    if (pullRequestUrl && verbose) {
+      console.log(`[VERBOSE] Found PR ${pullRequestUrl} in completed session log ${logPath}`);
+    }
+    return pullRequestUrl;
+  } catch (error) {
+    if (verbose) {
+      console.log(`[VERBOSE] Could not inspect session log ${logPath} for PR URL: ${error?.message || error}`);
+    }
+    return null;
+  }
+}
+
 function isNonIsolationSessionActive(sessionName, sessionInfo, verbose = false) {
   const startTime = sessionInfo.startTime instanceof Date ? sessionInfo.startTime : new Date(sessionInfo.startTime);
   const elapsed = Date.now() - startTime.getTime();
@@ -272,13 +312,19 @@ export async function monitorSessions(bot, verbose = false, options = {}) {
       try {
         const finalExitCode = getSessionCompletionExitCode({ exitCode, statusResult });
 
-        // Issue #1688: When the original /solve URL was an issue, look up the
-        //   linked PR so the completion message can include both an `Issue:` and
-        //   a `Pull request:` line. Failures are logged and ignored — the
-        //   notification still goes out without the PR line.
+        // Issue #1688/#1905: When the original /solve URL was an issue, look up
+        //   the created PR so the completion message can include both an
+        //   `Issue:` and a `Pull request:` line. The linked-issue API can lag
+        //   behind the solver's own verification log, so we also inspect the
+        //   completed session log before giving up.
         let pullRequestUrl = null;
         try {
-          pullRequestUrl = await resolvePullRequestUrlForSession(sessionInfo, { verbose, lookupLinkedPullRequest: options.lookupLinkedPullRequest });
+          pullRequestUrl = await resolvePullRequestUrlForSession(sessionInfo, {
+            verbose,
+            lookupLinkedPullRequest: options.lookupLinkedPullRequest,
+            statusResult,
+            readFile: options.readFile,
+          });
         } catch (lookupError) {
           if (verbose) {
             console.log(`[VERBOSE] Pull request lookup failed for ${sessionName}: ${lookupError?.message || lookupError}`);
@@ -395,36 +441,50 @@ export async function monitorSessions(bot, verbose = false, options = {}) {
  * @param {Object} [options]
  * @param {boolean} [options.verbose]
  * @param {Function} [options.lookupLinkedPullRequest] - Optional override `(ctx) => Promise<string|null>`
+ * @param {Object} [options.statusResult] - Completed start-command status payload, including logPath
+ * @param {Function} [options.readFile] - Optional test override for reading session logs
  * @returns {Promise<string|null>} PR URL or null
  *
  * @see https://github.com/link-assistant/hive-mind/issues/1688
+ * @see https://github.com/link-assistant/hive-mind/issues/1905
  */
-async function resolvePullRequestUrlForSession(sessionInfo, { verbose = false, lookupLinkedPullRequest = null } = {}) {
+async function resolvePullRequestUrlForSession(sessionInfo, { verbose = false, lookupLinkedPullRequest = null, statusResult = null, readFile = fs.readFile } = {}) {
   const ctx = sessionInfo?.urlContext;
   if (!ctx || ctx.type !== 'issue' || !ctx.owner || !ctx.repo || !ctx.number) {
     return null;
   }
 
   if (typeof lookupLinkedPullRequest === 'function') {
-    return await lookupLinkedPullRequest(ctx);
-  }
-
-  try {
-    const { batchCheckPullRequestsForIssues } = await import('./github.lib.mjs');
-    const result = await batchCheckPullRequestsForIssues(ctx.owner, ctx.repo, [ctx.number]);
-    const linkedPRs = result?.[ctx.number]?.linkedPRs || [];
-    if (linkedPRs.length > 0 && linkedPRs[0].url) {
+    const linkedPullRequestUrl = await lookupLinkedPullRequest(ctx);
+    if (linkedPullRequestUrl) return linkedPullRequestUrl;
+  } else {
+    try {
+      const { batchCheckPullRequestsForIssues } = await import('./github.lib.mjs');
+      const result = await batchCheckPullRequestsForIssues(ctx.owner, ctx.repo, [ctx.number]);
+      const linkedPRs = result?.[ctx.number]?.linkedPRs || [];
+      if (linkedPRs.length > 0 && linkedPRs[0].url) {
+        if (verbose) {
+          console.log(`[VERBOSE] Found linked PR ${linkedPRs[0].url} for issue ${ctx.owner}/${ctx.repo}#${ctx.number}`);
+        }
+        return linkedPRs[0].url;
+      }
+    } catch (error) {
       if (verbose) {
-        console.log(`[VERBOSE] Found linked PR ${linkedPRs[0].url} for issue ${ctx.owner}/${ctx.repo}#${ctx.number}`);
+        console.log(`[VERBOSE] batchCheckPullRequestsForIssues failed for ${ctx.owner}/${ctx.repo}#${ctx.number}: ${error?.message || error}`);
       }
-      return linkedPRs[0].url;
-    }
-  } catch (error) {
-    if (verbose) {
-      console.log(`[VERBOSE] batchCheckPullRequestsForIssues failed for ${ctx.owner}/${ctx.repo}#${ctx.number}: ${error?.message || error}`);
     }
-    throw error;
   }
+
+  const logPath = statusResult?.logPath || sessionInfo?.logPath || null;
+  const pullRequestUrlFromLog = await resolvePullRequestUrlFromSessionLog(logPath, ctx, { verbose, readFile });
+  if (pullRequestUrlFromLog) return pullRequestUrlFromLog;
+
+  if (verbose && logPath) {
+    console.log(`[VERBOSE] No PR URL found for issue ${ctx.owner}/${ctx.repo}#${ctx.number} in session log ${logPath}`);
+  } else if (verbose) {
+    console.log(`[VERBOSE] No session log path available for PR URL fallback for issue ${ctx.owner}/${ctx.repo}#${ctx.number}`);
+  }
+
   return null;
 }
 

package/src/solve.auto-continue.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Session continuation module for solve command
 // Handles session resumption, PR detection, and limit reset waiting
@@ -8,7 +9,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.auto-ensure.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Finalize module for solve.mjs
@@ -13,7 +14,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.auto-merge-helpers.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Helper functions for the auto-merge module.
@@ -16,7 +17,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.auto-merge.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Auto-merge and auto-restart-until-mergeable module for solve.mjs
@@ -12,7 +13,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.bootstrap.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Handle lightweight early-exit paths before solve loads its full dependency graph.
@@ -20,7 +21,7 @@ export async function handleSolveEarlyExit(earlyArgs) {
 
   if (earlyArgs.includes('--help') || earlyArgs.includes('-h')) {
     // Load minimal modules needed for help output.
-    const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
+    const use = await ensureUseM();
     globalThis.use = use;
     const { initializeConfig, createYargsConfig } = await import('./solve.config.lib.mjs');
     const { yargs, hideBin } = await initializeConfig(use);

package/src/solve.escalate.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Escalate-mode module for solve.mjs
@@ -326,7 +327,7 @@ export const runEscalation = async ({ issueUrl, owner, repo, issueNumber, prNumb
   }
 
   if (typeof globalThis.use === 'undefined') {
-    globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+    await ensureUseM();
   }
   const use = globalThis.use;
   const { $: __rawDollar$ } = await use('command-stream');

package/src/solve.execution.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Main execution logic module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.fork-detection.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Fork-detection helpers for solve.mjs
@@ -14,7 +15,7 @@
  */
 
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 const { $ } = await use('command-stream');

package/src/solve.fork-sync.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Fork upstream-sync module for the solve command.
 // Extracted from solve.repository.lib.mjs to keep files under 1500 lines (#1893).
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.keep-working.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Keep-working-until-done module for solve.mjs
@@ -25,7 +26,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.mjs

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 // Import Sentry instrumentation first (must be before other imports)
 import './instrument.mjs';
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 const earlyArgs = process.argv.slice(2);
 const { handleSolveEarlyExit } = await import('./solve.bootstrap.lib.mjs');
 await handleSolveEarlyExit(earlyArgs);
 
-const { use } = eval(await (await fetch('https://unpkg.com/use-m/use.js')).text());
-globalThis.use = use;
+const use = (globalThis.use = await ensureUseM());
 const { $: __rawDollar$ } = await use('command-stream');
 const { configureGitHubRateLimitLogging, wrapDollarWithGhRetry } = await import('./github-rate-limit.lib.mjs');
 const $ = wrapDollarWithGhRetry(__rawDollar$);

package/src/solve.repository.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Repository management module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.restart-shared.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Shared utilities for watch mode and auto-restart-until-mergeable mode
@@ -15,7 +16,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.results.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Results processing module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.validation.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 // Validation module for solve command
 // Extracted from solve.mjs to keep files under 1500 lines
@@ -7,7 +8,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;
 

package/src/solve.watch.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Watch mode module for solve.mjs
@@ -10,7 +11,7 @@
 // Check if use is already defined globally (when imported from solve.mjs)
 // If not, fetch it (when running standalone)
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const use = globalThis.use;