@massu/core 2.1.0 → 2.3.0

package/dist/cli.js

@@ -70,13 +70,13 @@ var init_node_floor = __esm({
   "src/lib/node-floor.ts"() {
     "use strict";
     MIN_NODE_MAJOR = 22;
-    MIN_NODE_MINOR = 13;
+    MIN_NODE_MINOR = 16;
   }
 });
 
 // src/credentials.ts
 import { homedir as homedir2 } from "os";
-import { resolve as resolve2 } from "path";
+import { resolve } from "path";
 import {
   existsSync as existsSync2,
   readFileSync,
@@ -86,10 +86,10 @@ import {
   chmodSync
 } from "fs";
 function credentialsDir(home = homedir2()) {
-  return resolve2(home, ".massu");
+  return resolve(home, ".massu");
 }
 function credentialsPath(home = homedir2()) {
-  return resolve2(credentialsDir(home), "credentials");
+  return resolve(credentialsDir(home), "credentials");
 }
 function readUserCredentials(home = homedir2()) {
   try {
@@ -718,7 +718,7 @@ var init_db_driver = __esm({
     DEFAULT_DB_ENGINE = "node-sqlite";
     DB_ENGINE_ENV = "MASSU_DB_ENGINE";
     _nodeCtor = null;
-    NODE_SQLITE_REMEDY = "Node's built-in node:sqlite failed to open the database. Ensure Node >= 22.13.0 (`node --version`) and that this Node build includes SQLite, then restart your MCP client / Claude Code.";
+    NODE_SQLITE_REMEDY = "Node's built-in node:sqlite failed to open the database. Ensure Node >= 22.16.0 (`node --version`) and that this Node build includes SQLite, then restart your MCP client / Claude Code.";
   }
 });
 
@@ -907,7 +907,7 @@ __export(config_exports, {
   getResolvedPaths: () => getResolvedPaths,
   resetConfig: () => resetConfig
 });
-import { resolve as resolve3, dirname as dirname3 } from "path";
+import { resolve as resolve2, dirname as dirname3 } from "path";
 import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
 import { homedir as homedir3 } from "os";
 import { parse as parseYaml } from "yaml";
@@ -916,7 +916,7 @@ function findProjectRoot() {
   const cwd = process.cwd();
   let dir = cwd;
   while (true) {
-    if (existsSync5(resolve3(dir, "massu.config.yaml"))) {
+    if (existsSync5(resolve2(dir, "massu.config.yaml"))) {
       return dir;
     }
     const parent = dirname3(dir);
@@ -925,10 +925,10 @@ function findProjectRoot() {
   }
   dir = cwd;
   while (true) {
-    if (existsSync5(resolve3(dir, "package.json"))) {
+    if (existsSync5(resolve2(dir, "package.json"))) {
       return dir;
     }
-    if (existsSync5(resolve3(dir, ".git"))) {
+    if (existsSync5(resolve2(dir, ".git"))) {
       return dir;
     }
     const parent = dirname3(dir);
@@ -946,7 +946,7 @@ function getProjectRoot() {
 function getConfig() {
   if (_config) return _config;
   const root = getProjectRoot();
-  const configPath = resolve3(root, "massu.config.yaml");
+  const configPath = resolve2(root, "massu.config.yaml");
   let rawYaml = {};
   if (existsSync5(configPath)) {
     const content = readFileSync4(configPath, "utf-8");
@@ -966,7 +966,7 @@ Hint: run \`massu config refresh\` to regenerate a valid config or fix the liste
     );
   }
   const parsed = result.data;
-  const projectRoot = parsed.project.root === "auto" || !parsed.project.root ? root : resolve3(root, parsed.project.root);
+  const projectRoot = parsed.project.root === "auto" || !parsed.project.root ? root : resolve2(root, parsed.project.root);
   const fw = parsed.framework;
   let router = fw.router;
   let orm = fw.orm;
@@ -1054,35 +1054,35 @@ function getResolvedPaths() {
   const root = getProjectRoot();
   const claudeDirName = config.conventions?.claudeDirName ?? ".claude";
   return {
-    codegraphDbPath: resolve3(root, ".codegraph/codegraph.db"),
-    dataDbPath: resolve3(root, ".massu/data.db"),
-    prismaSchemaPath: resolve3(root, config.paths.schema ?? "prisma/schema.prisma"),
-    rootRouterPath: resolve3(root, config.paths.routerRoot ?? "src/server/api/root.ts"),
-    routersDir: resolve3(root, config.paths.routers ?? "src/server/api/routers"),
-    srcDir: resolve3(root, config.paths.source),
+    codegraphDbPath: resolve2(root, ".codegraph/codegraph.db"),
+    dataDbPath: resolve2(root, ".massu/data.db"),
+    prismaSchemaPath: resolve2(root, config.paths.schema ?? "prisma/schema.prisma"),
+    rootRouterPath: resolve2(root, config.paths.routerRoot ?? "src/server/api/root.ts"),
+    routersDir: resolve2(root, config.paths.routers ?? "src/server/api/routers"),
+    srcDir: resolve2(root, config.paths.source),
     pathAlias: Object.fromEntries(
       Object.entries(config.paths.aliases).map(([alias, target]) => [
         alias,
-        resolve3(root, target)
+        resolve2(root, target)
       ])
     ),
     extensions: [".ts", ".tsx", ".js", ".jsx"],
     indexFiles: ["index.ts", "index.tsx", "index.js", "index.jsx"],
-    patternsDir: resolve3(root, claudeDirName, "patterns"),
-    claudeMdPath: resolve3(root, claudeDirName, "CLAUDE.md"),
-    docsMapPath: resolve3(root, ".massu/docs-map.json"),
-    helpSitePath: resolve3(root, "../" + config.project.name + "-help"),
-    memoryDbPath: resolve3(root, ".massu/memory.db"),
-    knowledgeDbPath: resolve3(root, ".massu/knowledge.db"),
-    plansDir: resolve3(root, "docs/plans"),
-    docsDir: resolve3(root, "docs"),
-    claudeDir: resolve3(root, claudeDirName),
-    memoryDir: resolve3(homedir3(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
-    sessionStatePath: resolve3(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
-    sessionArchivePath: resolve3(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
-    mcpJsonPath: resolve3(root, ".mcp.json"),
-    settingsPath: resolve3(root, claudeDirName, "settings.json"),
-    settingsLocalPath: resolve3(root, claudeDirName, "settings.local.json")
+    patternsDir: resolve2(root, claudeDirName, "patterns"),
+    claudeMdPath: resolve2(root, claudeDirName, "CLAUDE.md"),
+    docsMapPath: resolve2(root, ".massu/docs-map.json"),
+    helpSitePath: resolve2(root, "../" + config.project.name + "-help"),
+    memoryDbPath: resolve2(root, ".massu/memory.db"),
+    knowledgeDbPath: resolve2(root, ".massu/knowledge.db"),
+    plansDir: resolve2(root, "docs/plans"),
+    docsDir: resolve2(root, "docs"),
+    claudeDir: resolve2(root, claudeDirName),
+    memoryDir: resolve2(homedir3(), claudeDirName, "projects", encodeMemoryDirName(root), "memory"),
+    sessionStatePath: resolve2(root, config.conventions?.sessionStatePath ?? `${claudeDirName}/session-state/CURRENT.md`),
+    sessionArchivePath: resolve2(root, config.conventions?.sessionArchivePath ?? `${claudeDirName}/session-state/archive`),
+    mcpJsonPath: resolve2(root, ".mcp.json"),
+    settingsPath: resolve2(root, claudeDirName, "settings.json"),
+    settingsLocalPath: resolve2(root, claudeDirName, "settings.local.json")
   };
 }
 function resetConfig() {
@@ -1539,10 +1539,10 @@ var init_memory_vector = __esm({
 
 // src/db-backup.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync4, readdirSync as readdirSync2, statSync as statSync2, unlinkSync, copyFileSync, rmSync as rmSync4 } from "fs";
-import { resolve as resolve4, join as join3, basename, dirname as dirname4 } from "path";
+import { resolve as resolve3, join as join3, basename, dirname as dirname4 } from "path";
 import { homedir as homedir4 } from "os";
 function dbBackupsRoot(home = homedir4()) {
-  return resolve4(home, ".massu", "db-backups");
+  return resolve3(home, ".massu", "db-backups");
 }
 function projectBackupDir(projectRoot, home = homedir4()) {
   const slug = basename(projectRoot).replace(/[^A-Za-z0-9._-]/g, "_") || "project";
@@ -4667,7 +4667,7 @@ import {
   rmSync as rmSync5,
   writeSync
 } from "fs";
-import { dirname as dirname8, resolve as resolve6 } from "path";
+import { dirname as dirname8, resolve as resolve5 } from "path";
 function atomicWriteFile(targetPath, content, mode = 420) {
   const tmpPath = `${targetPath}.${process.pid}.tmp`;
   try {
@@ -4706,10 +4706,10 @@ function readSettingsAtPath(absolutePath) {
   }
 }
 function readSettingsLocal(claudeDir) {
-  return readSettingsAtPath(resolve6(claudeDir, "settings.local.json"));
+  return readSettingsAtPath(resolve5(claudeDir, "settings.local.json"));
 }
 function writeSettingsLocalAtomic(claudeDir, settings) {
-  const targetPath = resolve6(claudeDir, "settings.local.json");
+  const targetPath = resolve5(claudeDir, "settings.local.json");
   const dir = dirname8(targetPath);
   if (!existsSync11(dir)) {
     mkdirSync7(dir, { recursive: true });
@@ -4959,14 +4959,14 @@ import {
   readdirSync as readdirSync4,
   statSync as statSync3
 } from "fs";
-import { resolve as resolve7, dirname as dirname9, join as join8 } from "path";
+import { resolve as resolve6, dirname as dirname9, join as join8 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import { createHash as createHash3 } from "crypto";
 function dirHoldsAssets(dir) {
   if (!existsSync12(dir)) return false;
   try {
     return readdirSync4(dir).some(
-      (e2) => e2.endsWith(".md") || statSync3(resolve7(dir, e2)).isDirectory()
+      (e2) => e2.endsWith(".md") || statSync3(resolve6(dir, e2)).isDirectory()
     );
   } catch {
     return false;
@@ -4976,11 +4976,11 @@ function resolveAssetDir(assetName) {
   const cwd = process.cwd();
   const candidates = [
     // 1. npm-installed: node_modules/@massu/core/{assetName}
-    resolve7(cwd, "node_modules/@massu/core", assetName),
+    resolve6(cwd, "node_modules/@massu/core", assetName),
     // 2. Relative to compiled dist/cli.js → ../{assetName}
-    resolve7(__dirname, "..", assetName),
+    resolve6(__dirname, "..", assetName),
     // 3. Relative to source src/commands/ → ../../{assetName}
-    resolve7(__dirname, "../..", assetName)
+    resolve6(__dirname, "../..", assetName)
   ];
   for (const c2 of candidates) {
     if (dirHoldsAssets(c2)) return c2;
@@ -5011,7 +5011,7 @@ function hashContent(content) {
   return createHash3("sha256").update(content, "utf-8").digest("hex");
 }
 function loadManifest(claudeDir) {
-  const path = resolve7(claudeDir, MANIFEST_RELPATH);
+  const path = resolve6(claudeDir, MANIFEST_RELPATH);
   if (!existsSync12(path)) {
     return emptyManifest();
   }
@@ -5027,11 +5027,11 @@ function loadManifest(claudeDir) {
   }
 }
 function saveManifest(claudeDir, manifest) {
-  const dir = resolve7(claudeDir, ".massu");
+  const dir = resolve6(claudeDir, ".massu");
   if (!existsSync12(dir)) {
     mkdirSync8(dir, { recursive: true });
   }
-  const finalPath = resolve7(dir, "install-manifest.json");
+  const finalPath = resolve6(dir, "install-manifest.json");
   manifest.generatedAt = (/* @__PURE__ */ new Date()).toISOString();
   atomicWriteFile(finalPath, JSON.stringify(manifest, null, 2));
 }
@@ -5093,17 +5093,17 @@ function pickVariant(baseName, sourceDir, framework) {
   }
   for (const cand of candidates) {
     if (cand.subFramework) {
-      const subPath = resolve7(sourceDir, `${baseName}.${cand.lang}-${cand.subFramework}.md`);
+      const subPath = resolve6(sourceDir, `${baseName}.${cand.lang}-${cand.subFramework}.md`);
       if (existsSync12(subPath)) {
         return { kind: "hit", suffix: `.${cand.lang}-${cand.subFramework}` };
       }
     }
-    const langPath = resolve7(sourceDir, `${baseName}.${cand.lang}.md`);
+    const langPath = resolve6(sourceDir, `${baseName}.${cand.lang}.md`);
     if (existsSync12(langPath)) {
       return { kind: "hit", suffix: `.${cand.lang}` };
     }
   }
-  const defaultPath = resolve7(sourceDir, `${baseName}.md`);
+  const defaultPath = resolve6(sourceDir, `${baseName}.md`);
   if (existsSync12(defaultPath)) {
     return { kind: "hit", suffix: "" };
   }
@@ -5125,10 +5125,10 @@ function syncDirectory(sourceDir, targetDir, framework, manifest, manifestKeyPre
   }
   const entries = readdirSync4(sourceDir);
   for (const entry of entries) {
-    const sourcePath = resolve7(sourceDir, entry);
+    const sourcePath = resolve6(sourceDir, entry);
     const entryStat = statSync3(sourcePath);
     if (entryStat.isDirectory()) {
-      const subTargetDir = resolve7(targetDir, entry);
+      const subTargetDir = resolve6(targetDir, entry);
       const subPrefix = manifestKeyPrefix === "" ? entry : `${manifestKeyPrefix}/${entry}`;
       const subStats = syncDirectory(
         sourcePath,
@@ -5157,12 +5157,12 @@ function syncDirectory(sourceDir, targetDir, framework, manifest, manifestKeyPre
       const suffix = choice.kind === "hit" ? choice.suffix : "";
       sourceFilename = suffix === "" ? `${baseName}.md` : `${baseName}${suffix}.md`;
     }
-    const resolvedSourcePath = resolve7(sourceDir, sourceFilename);
+    const resolvedSourcePath = resolve6(sourceDir, sourceFilename);
     if (!existsSync12(resolvedSourcePath)) {
       continue;
     }
     const targetFilename = topLevel ? `${baseName}.md` : entry;
-    const targetPath = resolve7(targetDir, targetFilename);
+    const targetPath = resolve6(targetDir, targetFilename);
     const rawContent = readFileSync8(resolvedSourcePath, "utf-8");
     let sourceContent;
     try {
@@ -5266,8 +5266,8 @@ function buildTemplateVars() {
 }
 function installCommands(projectRoot, opts = {}) {
   const claudeDirName = getConfig().conventions?.claudeDirName ?? ".claude";
-  const claudeDir = resolve7(projectRoot, claudeDirName);
-  const targetDir = resolve7(claudeDir, "commands");
+  const claudeDir = resolve6(projectRoot, claudeDirName);
+  const targetDir = resolve6(claudeDir, "commands");
   if (!existsSync12(targetDir)) {
     mkdirSync8(targetDir, { recursive: true });
   }
@@ -5298,7 +5298,7 @@ function installCommands(projectRoot, opts = {}) {
 }
 function installAll(projectRoot, opts = {}) {
   const claudeDirName = getConfig().conventions?.claudeDirName ?? ".claude";
-  const claudeDir = resolve7(projectRoot, claudeDirName);
+  const claudeDir = resolve6(projectRoot, claudeDirName);
   const assets = {};
   let totalInstalled = 0;
   let totalUpdated = 0;
@@ -5311,7 +5311,7 @@ function installAll(projectRoot, opts = {}) {
     for (const assetType of ASSET_TYPES) {
       const sourceDir = resolveAssetDir(assetType.name);
       if (!sourceDir) continue;
-      const targetDir = resolve7(claudeDir, assetType.targetSubdir);
+      const targetDir = resolve6(claudeDir, assetType.targetSubdir);
       const stats = syncDirectory(
         sourceDir,
         targetDir,
@@ -6376,21 +6376,21 @@ import {
   fsyncSync as fsyncSync3,
   closeSync as closeSync3,
   existsSync as existsSync14,
-  realpathSync,
+  realpathSync as realpathSync2,
   unlinkSync as unlinkSync2,
   accessSync as accessSync2,
   statSync as statSync5,
   chmodSync as chmodSync3,
   constants
 } from "fs";
-import { dirname as dirname10, resolve as resolve8, relative as relative3, isAbsolute as isAbsolute2, basename as basename3, sep } from "path";
+import { dirname as dirname10, resolve as resolve7, relative as relative3, isAbsolute, basename as basename3, sep } from "path";
 import { createHash as createHash4 } from "crypto";
 function assertContainedIn(rootDir, candidate, opts = {}) {
   if (candidate.includes("\0")) {
     throw new PathEscapeError("path contains a NUL byte");
   }
-  const root = resolve8(rootDir);
-  const abs = resolve8(root, candidate);
+  const root = resolve7(rootDir);
+  const abs = resolve7(root, candidate);
   if (!opts.allowNested) {
     const rel = relative3(root, abs);
     if (rel.includes(sep)) {
@@ -6409,11 +6409,11 @@ function assertContainedIn(rootDir, candidate, opts = {}) {
 }
 function isContainedIn(rootDir, candidate, opts = {}) {
   if (candidate.includes("\0")) return false;
-  const root = resolve8(rootDir);
-  const abs = resolve8(root, candidate);
+  const root = resolve7(rootDir);
+  const abs = resolve7(root, candidate);
   const rel = relative3(root, abs);
   if (rel === "" && !opts.allowRoot) return false;
-  if (rel.startsWith("..") || isAbsolute2(rel)) return false;
+  if (rel.startsWith("..") || isAbsolute(rel)) return false;
   let probe = abs;
   while (!existsSync14(probe) && probe.length > 1) {
     const parent = dirname10(probe);
@@ -6423,18 +6423,18 @@ function isContainedIn(rootDir, candidate, opts = {}) {
   let realRoot;
   let realProbe;
   try {
-    realRoot = realpathSync(root);
-    realProbe = realpathSync(probe);
+    realRoot = realpathSync2(root);
+    realProbe = realpathSync2(probe);
   } catch {
     return true;
   }
   const realRel = relative3(realRoot, realProbe);
   if (realRel === "") return true;
-  return !realRel.startsWith("..") && !isAbsolute2(realRel);
+  return !realRel.startsWith("..") && !isAbsolute(realRel);
 }
 function atomicWriteFileSync(destPath, contents) {
   const dir = dirname10(destPath);
-  const tmp = resolve8(dir, `.${basename3(destPath)}.massu-tmp-${process.pid}`);
+  const tmp = resolve7(dir, `.${basename3(destPath)}.massu-tmp-${process.pid}`);
   let destMode;
   if (existsSync14(destPath)) {
     accessSync2(destPath, constants.W_OK);
@@ -9964,7 +9964,7 @@ var require_pattern = __commonJS({
       const absolute = [];
       const relative15 = [];
       for (const pattern of patterns) {
-        if (isAbsolute6(pattern)) {
+        if (isAbsolute5(pattern)) {
           absolute.push(pattern);
         } else {
           relative15.push(pattern);
@@ -9973,10 +9973,10 @@ var require_pattern = __commonJS({
       return [absolute, relative15];
     }
     exports.partitionAbsoluteAndRelative = partitionAbsoluteAndRelative;
-    function isAbsolute6(pattern) {
+    function isAbsolute5(pattern) {
       return path.isAbsolute(pattern);
     }
-    exports.isAbsolute = isAbsolute6;
+    exports.isAbsolute = isAbsolute5;
   }
 });
 
@@ -11060,41 +11060,41 @@ var require_queue = __commonJS({
       queue.drained = drained;
       return queue;
       function push(value) {
-        var p19 = new Promise(function(resolve46, reject) {
+        var p19 = new Promise(function(resolve45, reject) {
           pushCb(value, function(err, result) {
             if (err) {
               reject(err);
               return;
             }
-            resolve46(result);
+            resolve45(result);
           });
         });
         p19.catch(noop);
         return p19;
       }
       function unshift(value) {
-        var p19 = new Promise(function(resolve46, reject) {
+        var p19 = new Promise(function(resolve45, reject) {
           unshiftCb(value, function(err, result) {
             if (err) {
               reject(err);
               return;
             }
-            resolve46(result);
+            resolve45(result);
           });
         });
         p19.catch(noop);
         return p19;
       }
       function drained() {
-        var p19 = new Promise(function(resolve46) {
+        var p19 = new Promise(function(resolve45) {
           process.nextTick(function() {
             if (queue.idle()) {
-              resolve46();
+              resolve45();
             } else {
               var previousDrain = queue.drain;
               queue.drain = function() {
                 if (typeof previousDrain === "function") previousDrain();
-                resolve46();
+                resolve45();
                 queue.drain = previousDrain;
               };
             }
@@ -11580,9 +11580,9 @@ var require_stream3 = __commonJS({
         });
       }
       _getStat(filepath) {
-        return new Promise((resolve46, reject) => {
+        return new Promise((resolve45, reject) => {
           this._stat(filepath, this._fsStatSettings, (error, stats) => {
-            return error === null ? resolve46(stats) : reject(error);
+            return error === null ? resolve45(stats) : reject(error);
           });
         });
       }
@@ -11606,10 +11606,10 @@ var require_async5 = __commonJS({
         this._readerStream = new stream_1.default(this._settings);
       }
       dynamic(root, options) {
-        return new Promise((resolve46, reject) => {
+        return new Promise((resolve45, reject) => {
           this._walkAsync(root, options, (error, entries) => {
             if (error === null) {
-              resolve46(entries);
+              resolve45(entries);
             } else {
               reject(error);
             }
@@ -11619,10 +11619,10 @@ var require_async5 = __commonJS({
       async static(patterns, options) {
         const entries = [];
         const stream = this._readerStream.static(patterns, options);
-        return new Promise((resolve46, reject) => {
+        return new Promise((resolve45, reject) => {
           stream.once("error", reject);
           stream.on("data", (entry) => entries.push(entry));
-          stream.once("end", () => resolve46(entries));
+          stream.once("end", () => resolve45(entries));
         });
       }
     };
@@ -12924,7 +12924,7 @@ var init_domain_inferrer = __esm({
 
 // src/detect/regex-fallback.ts
 import { existsSync as existsSync17, readdirSync as readdirSync8, readFileSync as readFileSync11, statSync as statSync7 } from "fs";
-import { resolve as resolve9, join as join12, basename as basename4 } from "path";
+import { resolve as resolve8, join as join12, basename as basename4 } from "path";
 function introspectPython(detection, projectRoot) {
   const sourceDir = resolveSourceDir(detection, "python", projectRoot);
   if (!sourceDir) return null;
@@ -13090,7 +13090,7 @@ function resolveSourceDir(detection, lang, projectRoot) {
   const list = info?.source_dirs ?? [];
   if (list.length > 0) {
     const first = list[0];
-    const abs = resolve9(projectRoot, first);
+    const abs = resolve8(projectRoot, first);
     return existsSync17(abs) ? abs : null;
   }
   return existsSync17(projectRoot) ? projectRoot : null;
@@ -15979,7 +15979,7 @@ __export(init_exports, {
   writeConfigAtomic: () => writeConfigAtomic
 });
 import { closeSync as closeSync4, existsSync as existsSync19, fsyncSync as fsyncSync4, openSync as openSync4, readFileSync as readFileSync15, writeFileSync as writeFileSync5, writeSync as writeSync2, mkdirSync as mkdirSync10, readdirSync as readdirSync12, renameSync as renameSync4, rmSync as rmSync6, statSync as statSync10, chmodSync as chmodSync5 } from "fs";
-import { resolve as resolve10, basename as basename6, dirname as dirname12 } from "path";
+import { resolve as resolve9, basename as basename6, dirname as dirname12 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { homedir as homedir7 } from "os";
 import { stringify as yamlStringify, parse as yamlParse } from "yaml";
@@ -15990,7 +15990,7 @@ function detectFramework(projectRoot) {
     orm: "none",
     ui: "none"
   };
-  const pkgPath = resolve10(projectRoot, "package.json");
+  const pkgPath = resolve9(projectRoot, "package.json");
   if (!existsSync19(pkgPath)) return result;
   try {
     const pkg = JSON.parse(readFileSync15(pkgPath, "utf-8"));
@@ -16027,7 +16027,7 @@ function detectPython(projectRoot) {
     alembicDir: null
   };
   const markers = ["pyproject.toml", "setup.py", "requirements.txt", "Pipfile"];
-  const hasMarker = markers.some((m3) => existsSync19(resolve10(projectRoot, m3)));
+  const hasMarker = markers.some((m3) => existsSync19(resolve9(projectRoot, m3)));
   if (!hasMarker) return result;
   result.detected = true;
   const depFiles = [
@@ -16037,7 +16037,7 @@ function detectPython(projectRoot) {
     { file: "Pipfile" }
   ];
   for (const { file } of depFiles) {
-    const filePath = resolve10(projectRoot, file);
+    const filePath = resolve9(projectRoot, file);
     if (existsSync19(filePath)) {
       try {
         const content = readFileSync15(filePath, "utf-8").toLowerCase();
@@ -16047,19 +16047,19 @@ function detectPython(projectRoot) {
       }
     }
   }
-  if (existsSync19(resolve10(projectRoot, "alembic.ini"))) {
+  if (existsSync19(resolve9(projectRoot, "alembic.ini"))) {
     result.hasAlembic = true;
-    if (existsSync19(resolve10(projectRoot, "alembic"))) {
+    if (existsSync19(resolve9(projectRoot, "alembic"))) {
       result.alembicDir = "alembic";
     }
-  } else if (existsSync19(resolve10(projectRoot, "alembic"))) {
+  } else if (existsSync19(resolve9(projectRoot, "alembic"))) {
     result.hasAlembic = true;
     result.alembicDir = "alembic";
   }
   const candidateRoots = ["app", "src", "backend", "api"];
   for (const candidate of candidateRoots) {
-    const candidatePath = resolve10(projectRoot, candidate);
-    if (existsSync19(candidatePath) && existsSync19(resolve10(candidatePath, "__init__.py"))) {
+    const candidatePath = resolve9(projectRoot, candidate);
+    if (existsSync19(candidatePath) && existsSync19(resolve9(candidatePath, "__init__.py"))) {
       result.root = candidate;
       break;
     }
@@ -16083,7 +16083,7 @@ function generateConfig(projectRoot, framework) {
   console.warn(
     "[@massu/core] generateConfig() is deprecated since 1.2.1 \u2014 use buildConfigFromDetection instead. It cannot produce valid configs for monorepos."
   );
-  const configPath = resolve10(projectRoot, "massu.config.yaml");
+  const configPath = resolve9(projectRoot, "massu.config.yaml");
   if (existsSync19(configPath)) {
     return false;
   }
@@ -16195,10 +16195,10 @@ function buildConfigFromDetection(opts) {
       pathsSource = monorepoCommonRoot(detection.monorepo.packages);
     }
   }
-  if (pathsSource === "src" && !existsSync19(resolve10(projectRoot, "src"))) {
+  if (pathsSource === "src" && !existsSync19(resolve9(projectRoot, "src"))) {
     const fallbacks = ["app", "pages", "."];
     for (const fallback of fallbacks) {
-      if (fallback === "." || existsSync19(resolve10(projectRoot, fallback))) {
+      if (fallback === "." || existsSync19(resolve9(projectRoot, fallback))) {
         pathsSource = fallback;
         break;
       }
@@ -16282,7 +16282,7 @@ function buildConfigFromDetection(opts) {
     };
     if (pyFw?.framework) pythonBlock.framework = pyFw.framework;
     if (pyFw?.orm) pythonBlock.orm = pyFw.orm;
-    if (existsSync19(resolve10(projectRoot, "alembic.ini")) || existsSync19(resolve10(projectRoot, "alembic"))) {
+    if (existsSync19(resolve9(projectRoot, "alembic.ini")) || existsSync19(resolve9(projectRoot, "alembic"))) {
       pythonBlock.alembic_dir = "alembic";
     }
     config.python = pythonBlock;
@@ -16306,7 +16306,7 @@ function applyVariantTemplate(config, templatesDir) {
     }
   }
   if (templateId === null) return config;
-  const templatePath = resolve10(templatesDir, templateId, "massu.config.yaml");
+  const templatePath = resolve9(templatesDir, templateId, "massu.config.yaml");
   if (!existsSync19(templatePath)) return config;
   let template;
   try {
@@ -16431,7 +16431,7 @@ function validateWrittenConfig(configPath, projectRoot, checkPaths = true) {
       if (checkPaths) {
         const src = cfg.paths.source;
         if (src && src !== ".") {
-          const srcAbs = resolve10(projectRoot, src);
+          const srcAbs = resolve9(projectRoot, src);
           if (!existsSync19(srcAbs)) {
             return `paths.source '${src}' does not exist on disk`;
           }
@@ -16442,7 +16442,7 @@ function validateWrittenConfig(configPath, projectRoot, checkPaths = true) {
           if (!Array.isArray(rawDirs)) continue;
           for (const d2 of rawDirs) {
             if (typeof d2 !== "string" || d2 === ".") continue;
-            const abs = resolve10(projectRoot, d2);
+            const abs = resolve9(projectRoot, d2);
             if (!existsSync19(abs)) {
               return `framework.languages.${lang}.source_dirs '${d2}' does not exist on disk`;
             }
@@ -16452,7 +16452,7 @@ function validateWrittenConfig(configPath, projectRoot, checkPaths = true) {
         if (Array.isArray(mRoots)) {
           for (const r2 of mRoots) {
             if (typeof r2 !== "string" || r2 === ".") continue;
-            if (!existsSync19(resolve10(projectRoot, r2))) {
+            if (!existsSync19(resolve9(projectRoot, r2))) {
               return `paths.monorepo_roots '${r2}' does not exist on disk`;
             }
           }
@@ -16484,18 +16484,18 @@ function resolveTemplatesDir() {
   const cwd = process.cwd();
   const candidates = [
     // Project-local install: `<project>/node_modules/@massu/core/templates`.
-    resolve10(cwd, "node_modules/@massu/core/templates"),
+    resolve9(cwd, "node_modules/@massu/core/templates"),
     // Bundled cli.js layout: cli.js sits at `<package>/dist/cli.js`, so
     // templates live one level up at `<package>/templates`. (Plan 1.5.1
     // bug discovery: pre-existing layout assumed `dist/commands/init.js`
     // depth which never matched the bundled cli, so resolveTemplatesDir
     // returned null in production for both `--template` mode AND the
     // applyVariantTemplate path.)
-    resolve10(__dirname2, "../templates"),
+    resolve9(__dirname2, "../templates"),
     // Legacy nested layouts retained as fallbacks (in case a future
     // build moves cli.js back into a subdirectory).
-    resolve10(__dirname2, "../../templates"),
-    resolve10(__dirname2, "../../../templates")
+    resolve9(__dirname2, "../../templates"),
+    resolve9(__dirname2, "../../../templates")
   ];
   for (const c2 of candidates) {
     if (existsSync19(c2)) return c2;
@@ -16507,7 +16507,7 @@ function copyTemplateConfig(templateName, targetPath, projectName) {
   if (!templatesDir) {
     return { success: false, error: `Templates directory not found (looked in node_modules and dist/src)` };
   }
-  const srcPath = resolve10(templatesDir, templateName, "massu.config.yaml");
+  const srcPath = resolve9(templatesDir, templateName, "massu.config.yaml");
   if (!existsSync19(srcPath)) {
     return { success: false, error: `Template '${templateName}' not found at ${srcPath}` };
   }
@@ -16522,8 +16522,8 @@ function copyTemplateConfig(templateName, targetPath, projectName) {
 }
 function getInstallerVersion() {
   const candidates = [
-    resolve10(__dirname2, "../package.json"),
-    resolve10(__dirname2, "../../package.json")
+    resolve9(__dirname2, "../package.json"),
+    resolve9(__dirname2, "../../package.json")
   ];
   for (const candidate of candidates) {
     if (existsSync19(candidate)) {
@@ -16541,7 +16541,7 @@ function getInstallerVersion() {
   );
 }
 function registerMcpServer(projectRoot) {
-  const mcpPath = resolve10(projectRoot, ".mcp.json");
+  const mcpPath = resolve9(projectRoot, ".mcp.json");
   let existing = {};
   if (existsSync19(mcpPath)) {
     try {
@@ -16566,11 +16566,11 @@ function registerMcpServer(projectRoot) {
 }
 function resolveHooksDir() {
   const cwd = process.cwd();
-  const nodeModulesPath = resolve10(cwd, "node_modules/@massu/core/dist/hooks");
+  const nodeModulesPath = resolve9(cwd, "node_modules/@massu/core/dist/hooks");
   if (existsSync19(nodeModulesPath)) {
     return "node_modules/@massu/core/dist/hooks";
   }
-  const localPath = resolve10(__dirname2, "../dist/hooks");
+  const localPath = resolve9(__dirname2, "../dist/hooks");
   if (existsSync19(localPath)) {
     return localPath;
   }
@@ -16720,7 +16720,7 @@ function installHooks(projectRoot) {
   } catch {
     claudeDirName = ".claude";
   }
-  const claudeDir = resolve10(projectRoot, claudeDirName);
+  const claudeDir = resolve9(projectRoot, claudeDirName);
   if (!existsSync19(claudeDir)) {
     mkdirSync10(claudeDir, { recursive: true });
   }
@@ -16740,15 +16740,15 @@ function installHooks(projectRoot) {
 }
 function initMemoryDir(projectRoot) {
   const encodedRoot = encodeMemoryDirName(projectRoot);
-  const memoryDir = resolve10(homedir7(), `.claude/projects/${encodedRoot}/memory`);
+  const memoryDir = resolve9(homedir7(), `.claude/projects/${encodedRoot}/memory`);
   let migratedFromLegacy = false;
-  const legacyDir = resolve10(homedir7(), `.claude/projects/-${encodedRoot}/memory`);
+  const legacyDir = resolve9(homedir7(), `.claude/projects/-${encodedRoot}/memory`);
   if (existsSync19(legacyDir) && !existsSync19(memoryDir)) {
     try {
-      mkdirSync10(resolve10(memoryDir, ".."), { recursive: true });
+      mkdirSync10(resolve9(memoryDir, ".."), { recursive: true });
       renameSync4(legacyDir, memoryDir);
       try {
-        const legacyParent = resolve10(legacyDir, "..");
+        const legacyParent = resolve9(legacyDir, "..");
         if (existsSync19(legacyParent) && readdirSync12(legacyParent).length === 0) {
           rmSync6(legacyParent, { recursive: false });
         }
@@ -16763,7 +16763,7 @@ function initMemoryDir(projectRoot) {
     mkdirSync10(memoryDir, { recursive: true });
     created = true;
   }
-  const memoryMdPath = resolve10(memoryDir, "MEMORY.md");
+  const memoryMdPath = resolve9(memoryDir, "MEMORY.md");
   let memoryMdCreated = false;
   if (!existsSync19(memoryMdPath)) {
     const projectName = basename6(projectRoot);
@@ -16879,7 +16879,7 @@ async function runInit(argv, overrides) {
   log("Massu AI - Project Setup");
   log("========================");
   log("");
-  const configPath = resolve10(projectRoot, "massu.config.yaml");
+  const configPath = resolve9(projectRoot, "massu.config.yaml");
   if (existsSync19(configPath)) {
     if (opts.ci && !opts.force) {
       errLog(`error: massu.config.yaml already exists at ${configPath}`);
@@ -17019,7 +17019,7 @@ function installSideEffects(projectRoot, log, skipCommands = false, emptyStack =
       const commandStats = cmdResult.assets.commands;
       const stackResolved = !emptyStack && commandStats && (commandStats.installed > 0 || commandStats.updated > 0 || commandStats.kept > 0);
       if (!stackResolved) {
-        const placeholderPath = resolve10(cmdResult.claudeDir, "commands", "_massu-needs-stack.md");
+        const placeholderPath = resolve9(cmdResult.claudeDir, "commands", "_massu-needs-stack.md");
         if (!existsSync19(placeholderPath)) {
           const placeholderBody = [
             "# Massu \u2014 stack not yet detected",
@@ -17041,7 +17041,7 @@ function installSideEffects(projectRoot, log, skipCommands = false, emptyStack =
             "\u2014 Massu"
           ].join("\n");
           try {
-            mkdirSync10(resolve10(cmdResult.claudeDir, "commands"), { recursive: true });
+            mkdirSync10(resolve9(cmdResult.claudeDir, "commands"), { recursive: true });
             writeFileSync5(placeholderPath, placeholderBody, "utf-8");
             log("  Wrote _massu-needs-stack.md placeholder (no stack detected yet)");
           } catch {
@@ -17064,7 +17064,7 @@ function installSideEffects(projectRoot, log, skipCommands = false, emptyStack =
   (async () => {
     try {
       const encodedRoot = encodeMemoryDirName(projectRoot);
-      const memoryDir = resolve10(homedir7(), ".claude", "projects", encodedRoot, "memory");
+      const memoryDir = resolve9(homedir7(), ".claude", "projects", encodedRoot, "memory");
       const memFiles = existsSync19(memoryDir) ? readdirSync12(memoryDir).filter((f2) => f2.endsWith(".md") && f2 !== "MEMORY.md") : [];
       if (memFiles.length > 0) {
         const { getMemoryDb: getMemoryDb2 } = await Promise.resolve().then(() => (init_memory_db(), memory_db_exports));
@@ -17836,7 +17836,7 @@ __export(hook_runner_exports, {
   runHookRunner: () => runHookRunner
 });
 import { existsSync as existsSync21 } from "fs";
-import { resolve as resolve11, dirname as dirname13 } from "path";
+import { resolve as resolve10, dirname as dirname13 } from "path";
 import { fileURLToPath as fileURLToPath4 } from "url";
 import { spawn } from "child_process";
 function resolveHookFile(hookName) {
@@ -17848,11 +17848,11 @@ function resolveHookFile(hookName) {
   }
   const candidates = [
     // Bundled compiled layout: dist/cli.js → ./hooks/<file>.js
-    resolve11(__dirname3, "hooks", file),
+    resolve10(__dirname3, "hooks", file),
     // TS-source dev / sibling layout: src/commands/ → ../hooks/<file>
-    resolve11(__dirname3, "../hooks", file),
+    resolve10(__dirname3, "../hooks", file),
     // TS-source dev fallback: src/commands/ → ../../dist/hooks/<file>
-    resolve11(__dirname3, "../../dist/hooks", file)
+    resolve10(__dirname3, "../../dist/hooks", file)
   ];
   for (const candidate of candidates) {
     if (existsSync21(candidate)) {
@@ -17929,11 +17929,11 @@ __export(doctor_exports, {
   runValidateConfig: () => runValidateConfig
 });
 import { existsSync as existsSync22, readFileSync as readFileSync16, readdirSync as readdirSync13 } from "fs";
-import { resolve as resolve12, dirname as dirname14 } from "path";
+import { resolve as resolve11, dirname as dirname14 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 import { parse as parseYaml4 } from "yaml";
 function checkConfig(projectRoot) {
-  const configPath = resolve12(projectRoot, "massu.config.yaml");
+  const configPath = resolve11(projectRoot, "massu.config.yaml");
   if (!existsSync22(configPath)) {
     return { name: "Configuration", status: "fail", detail: "massu.config.yaml not found. Run: npx massu init" };
   }
@@ -18007,10 +18007,10 @@ function checkHooksConfig(_projectRoot2) {
   }
 }
 function checkHookFiles(projectRoot) {
-  const nodeModulesHooksDir = resolve12(projectRoot, "node_modules/@massu/core/dist/hooks");
+  const nodeModulesHooksDir = resolve11(projectRoot, "node_modules/@massu/core/dist/hooks");
   let hooksDir = nodeModulesHooksDir;
   if (!existsSync22(nodeModulesHooksDir)) {
-    const devHooksDir = resolve12(__dirname4, "../../dist/hooks");
+    const devHooksDir = resolve11(__dirname4, "../../dist/hooks");
     if (existsSync22(devHooksDir)) {
       hooksDir = devHooksDir;
     } else {
@@ -18019,7 +18019,7 @@ function checkHookFiles(projectRoot) {
   }
   const missing = [];
   for (const hookFile of EXPECTED_HOOKS) {
-    if (!existsSync22(resolve12(hooksDir, hookFile))) {
+    if (!existsSync22(resolve11(hooksDir, hookFile))) {
       missing.push(hookFile);
     }
   }
@@ -18045,12 +18045,12 @@ async function checkHookExecution(projectRoot, opts = {}) {
       detail: `Canary hook file unresolved: ${err instanceof Error ? err.message : String(err)}. Re-run: npx -y @massu/core init`
     };
   }
-  const tmpCwd = mkdtempSync2(resolve12(tmpdir2(), "massu-hook-canary-"));
+  const tmpCwd = mkdtempSync2(resolve11(tmpdir2(), "massu-hook-canary-"));
   try {
-    const realConfig = resolve12(projectRoot, "massu.config.yaml");
+    const realConfig = resolve11(projectRoot, "massu.config.yaml");
     if (existsSync22(realConfig)) {
       try {
-        copyFileSync4(realConfig, resolve12(tmpCwd, "massu.config.yaml"));
+        copyFileSync4(realConfig, resolve11(tmpCwd, "massu.config.yaml"));
       } catch {
       }
     }
@@ -18113,7 +18113,7 @@ function checkNodeVersion2() {
   return { name: "Node.js", status: "fail", detail: `v${version} \u2014 Node.js >= ${floor} is required (node:sqlite engine)` };
 }
 async function checkGitRepo(projectRoot) {
-  const gitDir = resolve12(projectRoot, ".git");
+  const gitDir = resolve11(projectRoot, ".git");
   if (!existsSync22(gitDir)) {
     return { name: "Git Repository", status: "warn", detail: "Not a git repository (optional but recommended)" };
   }
@@ -18253,7 +18253,7 @@ async function checkApiKeyHygiene(projectRoot) {
 function checkPythonHealth(projectRoot) {
   const config = getConfig();
   if (!config.python?.root) return null;
-  const pythonRoot = resolve12(projectRoot, config.python.root);
+  const pythonRoot = resolve11(projectRoot, config.python.root);
   if (!existsSync22(pythonRoot)) {
     return {
       name: "Python",
@@ -18273,8 +18273,8 @@ function checkPythonHealth(projectRoot) {
         if (entry.isDirectory()) {
           const excludeDirs = config.python?.exclude_dirs || ["__pycache__", ".venv", "venv", ".mypy_cache", ".pytest_cache"];
           if (!excludeDirs.includes(entry.name)) {
-            const subdir = resolve12(dir, entry.name);
-            if (depth <= 2 && !existsSync22(resolve12(subdir, "__init__.py"))) {
+            const subdir = resolve11(dir, entry.name);
+            if (depth <= 2 && !existsSync22(resolve11(subdir, "__init__.py"))) {
               try {
                 const subEntries = readdirSync13(subdir);
                 if (subEntries.some((f2) => f2.endsWith(".py") && f2 !== "__init__.py")) {
@@ -18372,7 +18372,7 @@ async function runDoctor() {
 }
 async function runValidateConfig() {
   const projectRoot = process.cwd();
-  const configPath = resolve12(projectRoot, "massu.config.yaml");
+  const configPath = resolve11(projectRoot, "massu.config.yaml");
   if (!existsSync22(configPath)) {
     console.error("Error: massu.config.yaml not found in current directory");
     console.error("Run: npx massu init");
@@ -18720,7 +18720,7 @@ __export(permissions_exports, {
   handlePermissionsSubcommand: () => handlePermissionsSubcommand,
   printPermissionsHelp: () => printPermissionsHelp
 });
-import { resolve as resolve13 } from "path";
+import { resolve as resolve12 } from "path";
 function resolveClaudeDir2() {
   let claudeDirName = ".claude";
   try {
@@ -18728,7 +18728,7 @@ function resolveClaudeDir2() {
   } catch {
     claudeDirName = ".claude";
   }
-  return resolve13(process.cwd(), claudeDirName);
+  return resolve12(process.cwd(), claudeDirName);
 }
 async function handlePermissionsSubcommand(args2) {
   const sub = args2[0];
@@ -19156,7 +19156,7 @@ var init_license2 = __esm({
 
 // src/changelog-generator.ts
 import { existsSync as existsSync24, readFileSync as readFileSync17, readdirSync as readdirSync14 } from "fs";
-import { resolve as resolve14 } from "path";
+import { resolve as resolve13 } from "path";
 function parseCommitsForPlanTokens(subjects) {
   const tokens = /* @__PURE__ */ new Set();
   const maintenance = [];
@@ -19181,7 +19181,7 @@ function loadPlanSummaries(tokens, planDir) {
     let matchedFile = null;
     let content = "";
     for (const file of files) {
-      const path = resolve14(planDir, file);
+      const path = resolve13(planDir, file);
       const text18 = readFileSync17(path, "utf-8");
       const tokenRe = new RegExp(
         `^\\*\\*Plan Token\\*\\*:\\s*\`?${token.replace(/[.*+?^${}()|[\\]\\\\]/g, "\\$&")}\`?(\\s|$)`,
@@ -19264,7 +19264,7 @@ __export(changelog_exports, {
 });
 import { execSync } from "child_process";
 import { existsSync as existsSync25, readFileSync as readFileSync18 } from "fs";
-import { resolve as resolve15 } from "path";
+import { resolve as resolve14 } from "path";
 function resolveRepoRoot() {
   try {
     return execSync("git rev-parse --show-toplevel", { encoding: "utf-8" }).trim();
@@ -19288,7 +19288,7 @@ function getCommitSubjects(range) {
   }
 }
 function getCurrentVersion(repoRoot) {
-  const pkgPath = resolve15(repoRoot, "packages/core/package.json");
+  const pkgPath = resolve14(repoRoot, "packages/core/package.json");
   if (!existsSync25(pkgPath)) return "0.0.0";
   const pkg = JSON.parse(readFileSync18(pkgPath, "utf-8"));
   return pkg.version || "0.0.0";
@@ -19297,7 +19297,7 @@ function todayDate() {
   return (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
 }
 function getLatestChangelogEntryBody(repoRoot) {
-  const path = resolve15(repoRoot, "CHANGELOG.md");
+  const path = resolve14(repoRoot, "CHANGELOG.md");
   if (!existsSync25(path)) return "";
   const content = readFileSync18(path, "utf-8");
   const m3 = content.match(/^## \[[\d.]+\][^\n]*\n([\s\S]*?)(?=\n## \[|$)/m);
@@ -19306,7 +19306,7 @@ function getLatestChangelogEntryBody(repoRoot) {
 async function handleChangelogSubcommand(args2) {
   const sub = args2[0];
   const repoRoot = resolveRepoRoot();
-  const planDir = resolve15(repoRoot, "docs/plans");
+  const planDir = resolve14(repoRoot, "docs/plans");
   switch (sub) {
     case "generate": {
       const lastTag = getLastTag();
@@ -19688,9 +19688,9 @@ var init_memory_embed_backfill = __esm({
 import { createHmac, randomBytes, timingSafeEqual } from "crypto";
 import { readFileSync as readFileSync19, writeFileSync as writeFileSync6, existsSync as existsSync28, mkdirSync as mkdirSync12, chmodSync as chmodSync6, statSync as statSync12 } from "fs";
 import { homedir as homedir8 } from "os";
-import { resolve as resolve16 } from "path";
+import { resolve as resolve15 } from "path";
 function renderKeyPath(home = homedir8()) {
-  return resolve16(home, ".massu", "render-key");
+  return resolve15(home, ".massu", "render-key");
 }
 function readRenderKey(home = homedir8()) {
   const p19 = renderKeyPath(home);
@@ -19708,7 +19708,7 @@ function ensureRenderKey(home = homedir8()) {
   if (existing) return existing;
   const p19 = renderKeyPath(home);
   try {
-    const dir = resolve16(home, ".massu");
+    const dir = resolve15(home, ".massu");
     mkdirSync12(dir, { recursive: true, mode: 448 });
     try {
       chmodSync6(dir, 448);
@@ -20119,9 +20119,9 @@ import {
   readFileSync as readFileSync22
 } from "fs";
 import { homedir as homedir9 } from "os";
-import { join as join17, resolve as resolve17 } from "path";
+import { join as join17, resolve as resolve16 } from "path";
 function backupsRoot(home = homedir9()) {
-  return resolve17(home, ".massu", "memory-backups");
+  return resolve16(home, ".massu", "memory-backups");
 }
 function backupStamp2(nowMs) {
   return new Date(nowMs).toISOString().replace(/:/g, "-");
@@ -22227,7 +22227,7 @@ var init_promotion_apply_mac = __esm({
 
 // src/rule-candidate-applier.ts
 import { readFileSync as readFileSync29, writeFileSync as writeFileSync11, existsSync as existsSync38, unlinkSync as unlinkSync5, mkdirSync as mkdirSync17 } from "fs";
-import { join as join24, dirname as dirname19, isAbsolute as isAbsolute3 } from "path";
+import { join as join24, dirname as dirname19, isAbsolute as isAbsolute2 } from "path";
 import { homedir as homedir19 } from "os";
 import { createHash as createHash11 } from "crypto";
 function isRuleDestination(value) {
@@ -22530,7 +22530,7 @@ function computeDestinationTargets(opts, candidate, slug, projectRoot, home) {
       throw new DestinationConfigError("custom-destination requires customDestination config entry");
     }
     const raw = opts.customDestination.path;
-    const absolute = isAbsolute3(raw) ? raw : join24(projectRoot, raw);
+    const absolute = isAbsolute2(raw) ? raw : join24(projectRoot, raw);
     try {
       assertContainedIn(projectRoot, absolute, { allowNested: true });
     } catch (err) {
@@ -24704,7 +24704,7 @@ __export(show_template_exports, {
   runShowTemplate: () => runShowTemplate
 });
 import { existsSync as existsSync43, readFileSync as readFileSync32 } from "fs";
-import { resolve as resolve18 } from "path";
+import { resolve as resolve17 } from "path";
 function normalizeBaseName(input) {
   return input.endsWith(".md") ? input.slice(0, -".md".length) : input;
 }
@@ -24732,7 +24732,7 @@ async function runShowTemplate(args2) {
     return;
   }
   const suffix = choice.kind === "hit" ? choice.suffix : "";
-  const file = suffix === "" ? resolve18(sourceDir, `${baseName}.md`) : resolve18(sourceDir, `${baseName}${suffix}.md`);
+  const file = suffix === "" ? resolve17(sourceDir, `${baseName}.md`) : resolve17(sourceDir, `${baseName}${suffix}.md`);
   if (!existsSync43(file)) {
     process.stderr.write(`massu: resolved template "${file}" no longer exists
 `);
@@ -24792,9 +24792,9 @@ var init_passthrough = __esm({
 });
 
 // src/lib/installLock.ts
-import { resolve as resolve19 } from "path";
+import { resolve as resolve18 } from "path";
 function withInstallLock(projectRoot, fn, opts = {}) {
-  const lockPath = resolve19(projectRoot, ".massu", "installAll.lock");
+  const lockPath = resolve18(projectRoot, ".massu", "installAll.lock");
   return withFileLockSync(
     lockPath,
     fn,
@@ -24835,7 +24835,7 @@ __export(config_refresh_exports, {
   runConfigRefresh: () => runConfigRefresh
 });
 import { existsSync as existsSync44, readFileSync as readFileSync33, rmSync as rmSync9 } from "fs";
-import { resolve as resolve20 } from "path";
+import { resolve as resolve19 } from "path";
 import { parse as parseYaml5 } from "yaml";
 function flatten(obj, prefix3 = "") {
   const out = {};
@@ -24963,7 +24963,7 @@ function renderDiff(diff) {
 }
 async function runConfigRefresh(opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
-  const configPath = resolve20(cwd, "massu.config.yaml");
+  const configPath = resolve19(cwd, "massu.config.yaml");
   const log = opts.silent ? () => {
   } : (s) => process.stdout.write(s);
   if (!existsSync44(configPath)) {
@@ -25046,7 +25046,7 @@ async function runConfigRefresh(opts = {}) {
 `);
       const stackResolved = installResult.totalInstalled > 0 || installResult.totalUpdated > 0;
       if (stackResolved) {
-        const placeholderPath = resolve20(installResult.claudeDir, "commands", "_massu-needs-stack.md");
+        const placeholderPath = resolve19(installResult.claudeDir, "commands", "_massu-needs-stack.md");
         if (existsSync44(placeholderPath)) {
           try {
             rmSync9(placeholderPath, { force: true });
@@ -25157,10 +25157,10 @@ var init_gitToplevel = __esm({
 
 // src/watch/lockfile-detector.ts
 import { existsSync as existsSync45, statSync as statSync15 } from "fs";
-import { resolve as resolve21 } from "path";
+import { resolve as resolve20 } from "path";
 function lockfileMidWrite(projectRoot, now = Date.now(), windowMs = LOCKFILE_WINDOW_MS) {
   for (const lf of KNOWN_LOCKFILES) {
-    const p19 = resolve21(projectRoot, lf);
+    const p19 = resolve20(projectRoot, lf);
     if (!existsSync45(p19)) continue;
     try {
       const stat = statSync15(p19);
@@ -25174,7 +25174,7 @@ function lockfileMidWrite(projectRoot, now = Date.now(), windowMs = LOCKFILE_WIN
 function gitMidOperation(projectRoot) {
   const sentinels = ["MERGE_HEAD", "REBASE_HEAD", "CHERRY_PICK_HEAD", "rebase-apply", "rebase-merge"];
   for (const s of sentinels) {
-    if (existsSync45(resolve21(projectRoot, ".git", s))) return true;
+    if (existsSync45(resolve20(projectRoot, ".git", s))) return true;
   }
   return false;
 }
@@ -25374,12 +25374,12 @@ var init_paths = __esm({
 
 // src/watch/state.ts
 import { closeSync as closeSync5, existsSync as existsSync46, fsyncSync as fsyncSync5, mkdirSync as mkdirSync20, openSync as openSync5, readFileSync as readFileSync34, renameSync as renameSync5, rmSync as rmSync10, writeFileSync as writeFileSync15, writeSync as writeSync3 } from "fs";
-import { dirname as dirname21, resolve as resolve22 } from "path";
+import { dirname as dirname21, resolve as resolve21 } from "path";
 function watchStatePath(projectRoot) {
-  return resolve22(projectRoot, ".massu", "watch-state.json");
+  return resolve21(projectRoot, ".massu", "watch-state.json");
 }
 function backupStatePath(projectRoot) {
-  return resolve22(projectRoot, ".massu", "watch-state.v0.bak.json");
+  return resolve21(projectRoot, ".massu", "watch-state.v0.bak.json");
 }
 function readState(projectRoot) {
   const path = watchStatePath(projectRoot);
@@ -25729,7 +25729,7 @@ __export(watch_exports, {
   runWatch: () => runWatch
 });
 import { spawnSync as spawnSync5 } from "child_process";
-import { basename as basename8, dirname as dirname22, resolve as resolve23 } from "path";
+import { basename as basename8, dirname as dirname22, resolve as resolve22 } from "path";
 import { appendFileSync as appendFileSync4, existsSync as existsSync47, mkdirSync as mkdirSync21, readFileSync as readFileSync35 } from "fs";
 function parseFlags(args2) {
   const out = {
@@ -25755,7 +25755,7 @@ function parseFlags(args2) {
 }
 function findClaudeBg() {
   const home = process.env.HOME ?? "";
-  const fixed = home ? resolve23(home, ".claude", "bin", "claude-bg") : null;
+  const fixed = home ? resolve22(home, ".claude", "bin", "claude-bg") : null;
   if (fixed && existsSync47(fixed)) return fixed;
   const which = spawnSync5("which", ["claude-bg"], { encoding: "utf-8" });
   if (which.status === 0 && which.stdout) {
@@ -25899,7 +25899,7 @@ async function runForeground(root) {
     }
     throw err;
   }
-  return new Promise((resolve46) => {
+  return new Promise((resolve45) => {
     const shutdown = async () => {
       if (stopped) return;
       stopped = true;
@@ -25909,7 +25909,7 @@ async function runForeground(root) {
         process.chdir(priorCwd);
       } catch {
       }
-      resolve46({ exitCode: 0 });
+      resolve45({ exitCode: 0 });
     };
     process.on("SIGINT", () => {
       void shutdown();
@@ -25970,7 +25970,7 @@ async function runOnQuiescent(projectRoot) {
   );
 }
 function refreshLogPath(projectRoot) {
-  return resolve23(projectRoot, ".massu", "refresh-log.jsonl");
+  return resolve22(projectRoot, ".massu", "refresh-log.jsonl");
 }
 function appendRefreshLog(projectRoot, event) {
   const path = refreshLogPath(projectRoot);
@@ -26446,13 +26446,13 @@ var init_fetcher = __esm({
 // src/security/manifest-cache.ts
 import { existsSync as existsSync49, readFileSync as readFileSync36, statSync as statSync17 } from "node:fs";
 import { homedir as homedir21 } from "node:os";
-import { resolve as resolve24 } from "node:path";
+import { resolve as resolve23 } from "node:path";
 import { z as z5 } from "zod";
 function defaultCachePaths() {
-  const dir = resolve24(homedir21(), ".massu");
+  const dir = resolve23(homedir21(), ".massu");
   return {
-    cachePath: resolve24(dir, "adapter-manifest.json"),
-    lockPath: resolve24(dir, ".adapter-manifest.lock")
+    cachePath: resolve23(dir, "adapter-manifest.json"),
+    lockPath: resolve23(dir, ".adapter-manifest.lock")
   };
 }
 function loadCachedManifest(paths = defaultCachePaths()) {
@@ -26652,13 +26652,13 @@ var init_adapter_origin = __esm({
 // src/security/local-fingerprint.ts
 import { existsSync as existsSync50, readFileSync as readFileSync37, lstatSync as lstatSync5 } from "node:fs";
 import { homedir as homedir22 } from "node:os";
-import { resolve as resolve25, isAbsolute as isAbsolute4 } from "node:path";
+import { resolve as resolve24, isAbsolute as isAbsolute3 } from "node:path";
 import { createHash as createHash14 } from "node:crypto";
 import { z as z6 } from "zod";
 function computeLocalFingerprint(localPaths, projectRoot) {
   const tuples = [];
   for (const p19 of localPaths) {
-    const abs = isAbsolute4(p19) ? p19 : resolve25(projectRoot, p19);
+    const abs = isAbsolute3(p19) ? p19 : resolve24(projectRoot, p19);
     let contentTag;
     try {
       const lst = lstatSync5(abs);
@@ -26730,7 +26730,7 @@ var init_local_fingerprint = __esm({
     "use strict";
     init_atomic_write();
     init_manifest_schema();
-    FINGERPRINT_PATH = resolve25(homedir22(), ".massu", "adapters-local-fingerprint.json");
+    FINGERPRINT_PATH = resolve24(homedir22(), ".massu", "adapters-local-fingerprint.json");
     FingerprintSentinelSchema = z6.object({
       fingerprint: z6.string().regex(/^[0-9a-f]{64}$/),
       source: z6.enum(["cli", "cli-resync"]),
@@ -26749,7 +26749,7 @@ var init_local_fingerprint = __esm({
 import { readFileSync as readFileSync38, readdirSync as readdirSync17, lstatSync as lstatSync6, existsSync as existsSync51 } from "node:fs";
 import { join as join28, relative as relative7, sep as sep2 } from "node:path";
 import { homedir as homedir23 } from "node:os";
-import { resolve as resolve26 } from "node:path";
+import { resolve as resolve25 } from "node:path";
 import { createHash as createHash15 } from "node:crypto";
 import { z as z7 } from "zod";
 function containsHiddenDirs(packageDir) {
@@ -26876,7 +26876,7 @@ var init_install_tracking = __esm({
   "src/security/install-tracking.ts"() {
     "use strict";
     init_atomic_write();
-    INSTALLED_MANIFEST_PATH = resolve26(homedir23(), ".massu", "adapter-manifest-installed.json");
+    INSTALLED_MANIFEST_PATH = resolve25(homedir23(), ".massu", "adapter-manifest-installed.json");
     DEFAULT_MAX_FILE_BYTES = 64 * 1024 * 1024;
     EXCLUDED_DIR_NAMES = /* @__PURE__ */ new Set([".git", "node_modules", ".cache", ".tmp"]);
     InstallEntrySchema = z7.object({
@@ -26900,10 +26900,10 @@ var init_install_tracking = __esm({
 
 // src/detect/adapters/discover.ts
 import { existsSync as existsSync52, readdirSync as readdirSync18, readFileSync as readFileSync39, lstatSync as lstatSync7 } from "node:fs";
-import { resolve as resolve27, isAbsolute as isAbsolute5 } from "node:path";
+import { resolve as resolve26, isAbsolute as isAbsolute4 } from "node:path";
 import { z as z8 } from "zod";
 function walkNodeModules(projectRoot, warnings) {
-  const nodeModulesDir = resolve27(projectRoot, "node_modules");
+  const nodeModulesDir = resolve26(projectRoot, "node_modules");
   if (!existsSync52(nodeModulesDir)) {
     return [];
   }
@@ -26917,7 +26917,7 @@ function walkNodeModules(projectRoot, warnings) {
   }
   for (const entry of topLevelEntries) {
     if (entry.startsWith(".")) continue;
-    const entryPath = resolve27(nodeModulesDir, entry);
+    const entryPath = resolve26(nodeModulesDir, entry);
     let entryStat;
     try {
       entryStat = lstatSync7(entryPath);
@@ -26939,7 +26939,7 @@ function walkNodeModules(projectRoot, warnings) {
         continue;
       }
       for (const sub of scopedEntries) {
-        const subPath = resolve27(entryPath, sub);
+        const subPath = resolve26(entryPath, sub);
         let subStat;
         try {
           subStat = lstatSync7(subPath);
@@ -26958,7 +26958,7 @@ function walkNodeModules(projectRoot, warnings) {
   return candidates;
 }
 function tryReadAdapterPackage(packageDir, warnings) {
-  const pkgJsonPath = resolve27(packageDir, "package.json");
+  const pkgJsonPath = resolve26(packageDir, "package.json");
   if (!existsSync52(pkgJsonPath)) return null;
   let raw;
   try {
@@ -27096,7 +27096,7 @@ function discoverAdapters(opts) {
   const localSet = new Set(opts.configLocalPaths);
   for (const localPath of opts.configLocalPaths) {
     if (seenIds.has(localPath)) continue;
-    const absPath = isAbsolute5(localPath) ? localPath : resolve27(opts.projectRoot, localPath);
+    const absPath = isAbsolute4(localPath) ? localPath : resolve26(opts.projectRoot, localPath);
     if (!existsSync52(absPath)) {
       warnings.push(
         `local adapter file not found: ${localPath} (resolved to ${absPath}). Remove via: massu adapters remove-local ${localPath}`
@@ -27180,7 +27180,7 @@ __export(adapters_exports, {
   runAdaptersSearch: () => runAdaptersSearch
 });
 import { existsSync as existsSync53, readFileSync as readFileSync40 } from "node:fs";
-import { resolve as resolve28 } from "node:path";
+import { resolve as resolve27 } from "node:path";
 import { parseDocument } from "yaml";
 async function handleAdaptersSubcommand(args2) {
   const sub = args2[0];
@@ -27447,7 +27447,7 @@ function mutateLocalArray(mutator, command) {
     );
     return { exitCode: 2 };
   }
-  const yamlPath = resolve28(projectRoot, "massu.config.yaml");
+  const yamlPath = resolve27(projectRoot, "massu.config.yaml");
   if (!existsSync53(yamlPath)) {
     process.stderr.write(
       `${command}: massu.config.yaml not found at ${yamlPath}. Run \`massu init\` first.
@@ -27478,7 +27478,7 @@ function mutateLocalArray(mutator, command) {
   if (next === null) {
     return { exitCode: 0 };
   }
-  const lockPath = resolve28(projectRoot, ".massu", "adapters-local-mutate.lock");
+  const lockPath = resolve27(projectRoot, ".massu", "adapters-local-mutate.lock");
   return withFileLockSync(lockPath, () => {
     doc.setIn(["adapters", "local"], next);
     const newYaml = doc.toString();
@@ -27547,7 +27547,7 @@ async function runAdaptersInstall(args2) {
 `);
     return { exitCode: 1 };
   }
-  const packageDir = resolve28(projectRoot, "node_modules", ...packageName.split("/"));
+  const packageDir = resolve27(projectRoot, "node_modules", ...packageName.split("/"));
   if (!existsSync53(packageDir)) {
     process.stderr.write(
       `install: ${packageName} is not installed in node_modules. Run \`npm install ${packageName}\` first.
@@ -27555,7 +27555,7 @@ async function runAdaptersInstall(args2) {
     );
     return { exitCode: 1 };
   }
-  const pkgJsonPath = resolve28(packageDir, "package.json");
+  const pkgJsonPath = resolve27(packageDir, "package.json");
   if (!existsSync53(pkgJsonPath)) {
     process.stderr.write(`install: ${packageName} has no package.json at ${pkgJsonPath}
 `);
@@ -27682,7 +27682,7 @@ async function runAdaptersResign(_args) {
       removeInstalledManifestEntry(name);
       continue;
     }
-    const packageDir = resolve28(projectRoot, "node_modules", ...name.split("/"));
+    const packageDir = resolve27(projectRoot, "node_modules", ...name.split("/"));
     if (!existsSync53(packageDir)) {
       removed++;
       warnings.push(`${name}@${entry.version}: not present in node_modules \u2014 REMOVED from sidecar`);
@@ -28094,10 +28094,10 @@ var init_db2 = __esm({
 });
 
 // src/security-utils.ts
-import { resolve as resolve29, normalize } from "path";
+import { resolve as resolve28, normalize } from "path";
 function ensureWithinRoot(filePath, projectRoot) {
-  const resolvedRoot = resolve29(projectRoot);
-  const resolvedPath = resolve29(resolvedRoot, filePath);
+  const resolvedRoot = resolve28(projectRoot);
+  const resolvedPath = resolve28(resolvedRoot, filePath);
   const normalizedPath = normalize(resolvedPath);
   const normalizedRoot = normalize(resolvedRoot);
   if (!normalizedPath.startsWith(normalizedRoot + "/") && normalizedPath !== normalizedRoot) {
@@ -28171,7 +28171,7 @@ var init_rules = __esm({
 
 // src/import-resolver.ts
 import { readFileSync as readFileSync41, existsSync as existsSync55, statSync as statSync19 } from "fs";
-import { resolve as resolve30, dirname as dirname25, join as join30 } from "path";
+import { resolve as resolve29, dirname as dirname25, join as join30 } from "path";
 function parseImports(source) {
   const imports = [];
   const lines = source.split("\n");
@@ -28227,9 +28227,9 @@ function resolveImportPath(specifier, fromFile) {
   let basePath;
   if (specifier.startsWith("@/")) {
     const paths = getResolvedPaths();
-    basePath = resolve30(paths.pathAlias["@"] ?? paths.srcDir, specifier.slice(2));
+    basePath = resolve29(paths.pathAlias["@"] ?? paths.srcDir, specifier.slice(2));
   } else {
-    basePath = resolve30(dirname25(fromFile), specifier);
+    basePath = resolve29(dirname25(fromFile), specifier);
   }
   if (existsSync55(basePath) && !isDirectory(basePath)) {
     return toRelative(basePath);
@@ -28279,7 +28279,7 @@ function buildImportIndex(dataDb, codegraphDb) {
   const batchSize = 500;
   let batch = [];
   for (const file of files) {
-    const absPath = ensureWithinRoot(resolve30(projectRoot, file.path), projectRoot);
+    const absPath = ensureWithinRoot(resolve29(projectRoot, file.path), projectRoot);
     if (!existsSync55(absPath)) continue;
     let source;
     try {
@@ -28321,7 +28321,7 @@ var init_import_resolver = __esm({
 
 // src/trpc-index.ts
 import { readFileSync as readFileSync42, existsSync as existsSync56, readdirSync as readdirSync20 } from "fs";
-import { resolve as resolve31, join as join31 } from "path";
+import { resolve as resolve30, join as join31 } from "path";
 function parseRootRouter() {
   const paths = getResolvedPaths();
   const rootPath = paths.rootRouterPath;
@@ -28336,7 +28336,7 @@ function parseRootRouter() {
   while ((match = importRegex.exec(source)) !== null) {
     const variable = match[1];
     let filePath = match[2];
-    const fullPath = resolve31(paths.routersDir, filePath);
+    const fullPath = resolve30(paths.routersDir, filePath);
     for (const ext of [".ts", ".tsx", ""]) {
       const candidate = fullPath + ext;
       const routersRelPath = getConfig().paths.routers ?? "src/server/api/routers";
@@ -28364,7 +28364,7 @@ function parseRootRouter() {
   return mappings;
 }
 function extractProcedures(routerFilePath) {
-  const absPath = resolve31(getProjectRoot(), routerFilePath);
+  const absPath = resolve30(getProjectRoot(), routerFilePath);
   if (!existsSync56(absPath)) return [];
   const source = readFileSync42(absPath, "utf-8");
   const procedures = [];
@@ -28389,9 +28389,9 @@ function findUICallSites(routerKey, procedureName) {
   const root = getProjectRoot();
   const src = config.paths.source;
   const searchDirs = [
-    resolve31(root, config.paths.pages ?? src + "/app"),
-    resolve31(root, config.paths.components ?? src + "/components"),
-    resolve31(root, config.paths.hooks ?? src + "/hooks")
+    resolve30(root, config.paths.pages ?? src + "/app"),
+    resolve30(root, config.paths.components ?? src + "/components"),
+    resolve30(root, config.paths.hooks ?? src + "/hooks")
   ];
   const searchPattern = `api.${routerKey}.${procedureName}`;
   for (const dir of searchDirs) {
@@ -28474,7 +28474,7 @@ var init_trpc_index = __esm({
 
 // src/page-deps.ts
 import { readFileSync as readFileSync43, existsSync as existsSync57 } from "fs";
-import { resolve as resolve32 } from "path";
+import { resolve as resolve31 } from "path";
 function deriveRoute(pageFile) {
   let route = pageFile.replace(/^src\/app/, "").replace(/\/page\.tsx?$/, "").replace(/\/page\.jsx?$/, "");
   return route || "/";
@@ -28512,7 +28512,7 @@ function findRouterCalls(files) {
   const routers = /* @__PURE__ */ new Set();
   const projectRoot = getProjectRoot();
   for (const file of files) {
-    const absPath = ensureWithinRoot(resolve32(projectRoot, file), projectRoot);
+    const absPath = ensureWithinRoot(resolve31(projectRoot, file), projectRoot);
     if (!existsSync57(absPath)) continue;
     try {
       const source = readFileSync43(absPath, "utf-8");
@@ -28533,7 +28533,7 @@ function findTablesFromRouters(routerNames, dataDb) {
       `SELECT DISTINCT router_file FROM ${t("trpc_procedures")} WHERE router_name = ? LIMIT 10000`
     ).all(routerName);
     for (const proc of procs) {
-      const absPath = ensureWithinRoot(resolve32(getProjectRoot(), proc.router_file), getProjectRoot());
+      const absPath = ensureWithinRoot(resolve31(getProjectRoot(), proc.router_file), getProjectRoot());
       if (!existsSync57(absPath)) continue;
       try {
         const source = readFileSync43(absPath, "utf-8");
@@ -29089,11 +29089,11 @@ var init_import_parser = __esm({
 
 // src/python/import-resolver.ts
 import { readFileSync as readFileSync45, existsSync as existsSync59, readdirSync as readdirSync22 } from "fs";
-import { resolve as resolve34, join as join33, relative as relative8, dirname as dirname26 } from "path";
+import { resolve as resolve33, join as join33, relative as relative8, dirname as dirname26 } from "path";
 function resolvePythonModulePath(module, fromFile, pythonRoot, level) {
   const projectRoot = getProjectRoot();
   if (level > 0) {
-    let baseDir = dirname26(resolve34(projectRoot, fromFile));
+    let baseDir = dirname26(resolve33(projectRoot, fromFile));
     for (let i = 1; i < level; i++) {
       baseDir = dirname26(baseDir);
     }
@@ -29105,7 +29105,7 @@ function resolvePythonModulePath(module, fromFile, pythonRoot, level) {
     return tryResolvePythonPath(baseDir, projectRoot);
   }
   const parts = module.split(".");
-  const candidate = join33(resolve34(projectRoot, pythonRoot), ...parts);
+  const candidate = join33(resolve33(projectRoot, pythonRoot), ...parts);
   return tryResolvePythonPath(candidate, projectRoot);
 }
 function tryResolvePythonPath(basePath, projectRoot) {
@@ -29138,7 +29138,7 @@ function walkPythonFiles(dir, excludeDirs) {
 }
 function buildPythonImportIndex(dataDb, pythonRoot, excludeDirs = ["__pycache__", ".venv", "venv", ".mypy_cache", ".pytest_cache"]) {
   const projectRoot = getProjectRoot();
-  const absRoot = resolve34(projectRoot, pythonRoot);
+  const absRoot = resolve33(projectRoot, pythonRoot);
   dataDb.exec(`DELETE FROM ${t("py_imports")}`);
   const insertStmt = dataDb.prepare(
     `INSERT INTO ${t("py_imports")} (source_file, target_file, import_type, imported_names, line) VALUES (?, ?, ?, ?, ?)`
@@ -30469,7 +30469,7 @@ var init_memory_tools = __esm({
 
 // src/docs-tools.ts
 import { readFileSync as readFileSync50, existsSync as existsSync60 } from "fs";
-import { resolve as resolve35, basename as basename9 } from "path";
+import { resolve as resolve34, basename as basename9 } from "path";
 function p4(baseName) {
   return `${getConfig().toolPrefix}_${baseName}`;
 }
@@ -30597,9 +30597,9 @@ function extractFrontmatter(content) {
 }
 function extractProcedureNames(routerPath) {
   const root = getProjectRoot();
-  const absPath = ensureWithinRoot(resolve35(getResolvedPaths().srcDir, "..", routerPath), root);
+  const absPath = ensureWithinRoot(resolve34(getResolvedPaths().srcDir, "..", routerPath), root);
   if (!existsSync60(absPath)) {
-    const altPath = ensureWithinRoot(resolve35(getResolvedPaths().srcDir, "../server/api/routers", basename9(routerPath)), root);
+    const altPath = ensureWithinRoot(resolve34(getResolvedPaths().srcDir, "../server/api/routers", basename9(routerPath)), root);
     if (!existsSync60(altPath)) return [];
     return extractProcedureNamesFromContent(readFileSync50(altPath, "utf-8"));
   }
@@ -30643,7 +30643,7 @@ function handleDocsAudit(args2) {
   for (const [mappingId, triggeringFiles] of affectedMappings) {
     const mapping = docsMap.mappings.find((m3) => m3.id === mappingId);
     if (!mapping) continue;
-    const helpPagePath = ensureWithinRoot(resolve35(getResolvedPaths().helpSitePath, mapping.helpPage), getProjectRoot());
+    const helpPagePath = ensureWithinRoot(resolve34(getResolvedPaths().helpSitePath, mapping.helpPage), getProjectRoot());
     if (!existsSync60(helpPagePath)) {
       results.push({
         helpPage: mapping.helpPage,
@@ -30696,7 +30696,7 @@ function handleDocsAudit(args2) {
     });
     for (const [guideName, parentId] of Object.entries(docsMap.userGuideInheritance.examples)) {
       if (parentId === mappingId) {
-        const guidePath = ensureWithinRoot(resolve35(getResolvedPaths().helpSitePath, `pages/user-guides/${guideName}/index.mdx`), getProjectRoot());
+        const guidePath = ensureWithinRoot(resolve34(getResolvedPaths().helpSitePath, `pages/user-guides/${guideName}/index.mdx`), getProjectRoot());
         if (existsSync60(guidePath)) {
           const guideContent = readFileSync50(guidePath, "utf-8");
           const guideFrontmatter = extractFrontmatter(guideContent);
@@ -30731,7 +30731,7 @@ function handleDocsCoverage(args2) {
   const gaps = [];
   const mappings = filterDomain ? docsMap.mappings.filter((m3) => m3.id === filterDomain) : docsMap.mappings;
   for (const mapping of mappings) {
-    const helpPagePath = ensureWithinRoot(resolve35(getResolvedPaths().helpSitePath, mapping.helpPage), getProjectRoot());
+    const helpPagePath = ensureWithinRoot(resolve34(getResolvedPaths().helpSitePath, mapping.helpPage), getProjectRoot());
     const exists = existsSync60(helpPagePath);
     let hasContent = false;
     let lineCount = 0;
@@ -31080,7 +31080,7 @@ var init_observability_tools = __esm({
 
 // src/sentinel-db.ts
 import { existsSync as existsSync61 } from "fs";
-import { resolve as resolve36 } from "path";
+import { resolve as resolve35 } from "path";
 function parsePortalScope(raw) {
   if (!raw) return [];
   try {
@@ -31316,22 +31316,22 @@ function validateFeatures(db, domainFilter) {
     const missingProcedures = [];
     const missingPages = [];
     for (const comp of components) {
-      const absPath = resolve36(PROJECT_ROOT, comp.component_file);
+      const absPath = resolve35(PROJECT_ROOT, comp.component_file);
       if (!existsSync61(absPath)) {
         missingComponents.push(comp.component_file);
       }
     }
     for (const proc of procedures) {
-      const routerPath = resolve36(PROJECT_ROOT, `src/server/api/routers/${proc.router_name}.ts`);
+      const routerPath = resolve35(PROJECT_ROOT, `src/server/api/routers/${proc.router_name}.ts`);
       if (!existsSync61(routerPath)) {
         missingProcedures.push({ router: proc.router_name, procedure: proc.procedure_name });
       }
     }
     for (const page of pages) {
       const routeToPath = page.page_route.replace(/^\/(portal-[^/]+\/)?/, "src/app/").replace(/\/$/, "") + "/page.tsx";
-      const absPath = resolve36(PROJECT_ROOT, routeToPath);
+      const absPath = resolve35(PROJECT_ROOT, routeToPath);
       if (page.page_route.startsWith("/") && !existsSync61(absPath)) {
-        const altPath = resolve36(PROJECT_ROOT, `src/app${page.page_route}/page.tsx`);
+        const altPath = resolve35(PROJECT_ROOT, `src/app${page.page_route}/page.tsx`);
         if (!existsSync61(altPath)) {
           missingPages.push(page.page_route);
         }
@@ -31859,7 +31859,7 @@ var init_sentinel_tools = __esm({
 
 // src/sentinel-scanner.ts
 import { readFileSync as readFileSync51, existsSync as existsSync62, readdirSync as readdirSync27, statSync as statSync20 } from "fs";
-import { resolve as resolve37, join as join38, basename as basename10, dirname as dirname27, relative as relative13 } from "path";
+import { resolve as resolve36, join as join38, basename as basename10, dirname as dirname27, relative as relative13 } from "path";
 function inferDomain(filePath) {
   const domains = getConfig().domains;
   const path = filePath.toLowerCase();
@@ -31990,7 +31990,7 @@ function scanComponentExports(dataDb) {
   const projectRoot = getProjectRoot();
   const componentsBase = config.paths.components ?? config.paths.source + "/components";
   const componentDirs = [];
-  const basePath = resolve37(projectRoot, componentsBase);
+  const basePath = resolve36(projectRoot, componentsBase);
   if (existsSync62(basePath)) {
     try {
       const entries = readdirSync27(basePath, { withFileTypes: true });
@@ -32003,7 +32003,7 @@ function scanComponentExports(dataDb) {
     }
   }
   for (const dir of componentDirs) {
-    const absDir = resolve37(projectRoot, dir);
+    const absDir = resolve36(projectRoot, dir);
     if (!existsSync62(absDir)) continue;
     const files = walkDir2(absDir).filter((f2) => f2.endsWith(".tsx") || f2.endsWith(".ts"));
     for (const file of files) {
@@ -33588,7 +33588,7 @@ var init_security_scorer = __esm({
 
 // src/dependency-scorer.ts
 import { existsSync as existsSync65, readFileSync as readFileSync54 } from "fs";
-import { resolve as resolve38 } from "path";
+import { resolve as resolve37 } from "path";
 function p13(baseName) {
   return `${getConfig().toolPrefix}_${baseName}`;
 }
@@ -33620,7 +33620,7 @@ function calculateDepRisk(factors) {
   return Math.min(100, risk);
 }
 function getInstalledPackages(projectRoot) {
-  const pkgPath = resolve38(projectRoot, "package.json");
+  const pkgPath = resolve37(projectRoot, "package.json");
   if (!existsSync65(pkgPath)) return /* @__PURE__ */ new Map();
   try {
     const pkg = JSON.parse(readFileSync54(pkgPath, "utf-8"));
@@ -34230,7 +34230,7 @@ var init_regression_detector = __esm({
 // src/knowledge-indexer.ts
 import { createHash as createHash16 } from "crypto";
 import { readFileSync as readFileSync55, readdirSync as readdirSync28, statSync as statSync21, existsSync as existsSync66 } from "fs";
-import { resolve as resolve39, relative as relative14, basename as basename11, extname as extname2 } from "path";
+import { resolve as resolve38, relative as relative14, basename as basename11, extname as extname2 } from "path";
 function getKnowledgePaths() {
   const resolved = getResolvedPaths();
   const config = getConfig();
@@ -34258,7 +34258,7 @@ function discoverMarkdownFiles(baseDir) {
     try {
       const entries = readdirSync28(dir, { withFileTypes: true });
       for (const entry of entries) {
-        const fullPath = resolve39(dir, entry.name);
+        const fullPath = resolve38(dir, entry.name);
         if (entry.isDirectory()) {
           if (entry.name === "archive" && dir.includes("session-state")) continue;
           if (entry.name === "archive" && dir.includes("status")) continue;
@@ -34753,7 +34753,7 @@ var init_knowledge_indexer = __esm({
 
 // src/knowledge-tools.ts
 import { readFileSync as readFileSync56, writeFileSync as writeFileSync16, appendFileSync as appendFileSync5, readdirSync as readdirSync29 } from "fs";
-import { resolve as resolve40, basename as basename12 } from "path";
+import { resolve as resolve39, basename as basename12 } from "path";
 function p16(baseName) {
   return `${getConfig().toolPrefix}_${baseName}`;
 }
@@ -35492,7 +35492,7 @@ function handleCorrect(db, args2) {
   if (!wrong || !correction || !rule) {
     return text15("Error: wrong, correction, and rule are all required.");
   }
-  const correctionsPath = resolve40(getResolvedPaths().memoryDir, "corrections.md");
+  const correctionsPath = resolve39(getResolvedPaths().memoryDir, "corrections.md");
   const today = (/* @__PURE__ */ new Date()).toISOString().split("T")[0];
   const title = rule.slice(0, 60);
   const entry = formatCorrectionEntry({
@@ -36462,7 +36462,7 @@ var init_framework_supports = __esm({
 
 // src/tools.ts
 import { readFileSync as readFileSync57, existsSync as existsSync68 } from "fs";
-import { resolve as resolve41, basename as basename13 } from "path";
+import { resolve as resolve40, basename as basename13 } from "path";
 function prefix2() {
   return getConfig().toolPrefix;
 }
@@ -36497,7 +36497,7 @@ function ensureIndexes(dataDb, codegraphDb, force = false) {
   if (config.python?.root) {
     const pythonRoot = config.python.root;
     const excludeDirs = config.python.exclude_dirs || ["__pycache__", ".venv", "venv", ".mypy_cache", ".pytest_cache"];
-    if (force || isPythonDataStale(dataDb, resolve41(getProjectRoot(), pythonRoot))) {
+    if (force || isPythonDataStale(dataDb, resolve40(getProjectRoot(), pythonRoot))) {
       const pyImports = buildPythonImportIndex(dataDb, pythonRoot, excludeDirs);
       results.push(`Python imports: ${pyImports}`);
       const pyRoutes = buildPythonRouteIndex(dataDb, pythonRoot, excludeDirs);
@@ -36880,7 +36880,7 @@ function handleContext(file, dataDb, codegraphDb) {
         try {
           const resolvedPaths = getResolvedPaths();
           const root = getProjectRoot();
-          const absFilePath = ensureWithinRoot(resolve41(resolvedPaths.srcDir, "..", file), root);
+          const absFilePath = ensureWithinRoot(resolve40(resolvedPaths.srcDir, "..", file), root);
           if (existsSync68(absFilePath)) {
             const fileContent = readFileSync57(absFilePath, "utf-8").slice(0, 3e3);
             const keywords = [];
@@ -37319,7 +37319,7 @@ function handleSchema(args2) {
     lines.push("Checking all column references against Prisma schema...");
     lines.push("");
     const projectRoot = getProjectRoot();
-    const absPath = ensureWithinRoot(resolve41(projectRoot, file), projectRoot);
+    const absPath = ensureWithinRoot(resolve40(projectRoot, file), projectRoot);
     if (!existsSync68(absPath)) {
       return text17(`File not found: ${file}`);
     }
@@ -37756,7 +37756,7 @@ var init_startup_health = __esm({
 // src/server.ts
 var server_exports = {};
 import { readFileSync as readFileSync58 } from "fs";
-import { resolve as resolve42, dirname as dirname28 } from "path";
+import { resolve as resolve41, dirname as dirname28 } from "path";
 import { fileURLToPath as fileURLToPath6 } from "url";
 function pruneMemoryOnStartup() {
   try {
@@ -37804,7 +37804,7 @@ var init_server = __esm({
     __dirname5 = dirname28(fileURLToPath6(import.meta.url));
     PKG_VERSION = (() => {
       try {
-        const pkg = JSON.parse(readFileSync58(resolve42(__dirname5, "..", "package.json"), "utf-8"));
+        const pkg = JSON.parse(readFileSync58(resolve41(__dirname5, "..", "package.json"), "utf-8"));
         return pkg.version ?? "0.0.0";
       } catch {
         return "0.0.0";
@@ -38108,11 +38108,11 @@ __export(config_upgrade_exports, {
   runConfigUpgrade: () => runConfigUpgrade
 });
 import { existsSync as existsSync69, readFileSync as readFileSync59, writeFileSync as writeFileSync17, copyFileSync as copyFileSync3, unlinkSync as unlinkSync6 } from "fs";
-import { resolve as resolve43 } from "path";
+import { resolve as resolve42 } from "path";
 import { parse as parseYaml6 } from "yaml";
 async function runConfigUpgrade(opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
-  const configPath = resolve43(cwd, "massu.config.yaml");
+  const configPath = resolve42(cwd, "massu.config.yaml");
   const bakPath = `${configPath}.bak`;
   const log = opts.silent ? () => {
   } : (s) => process.stdout.write(s);
@@ -38200,7 +38200,7 @@ __export(config_check_drift_exports, {
   runConfigCheckDrift: () => runConfigCheckDrift
 });
 import { existsSync as existsSync70, readFileSync as readFileSync60 } from "fs";
-import { resolve as resolve44 } from "path";
+import { resolve as resolve43 } from "path";
 import { parse as parseYaml7 } from "yaml";
 function renderChanges(changes) {
   if (changes.length === 0) return "(none)\n";
@@ -38208,7 +38208,7 @@ function renderChanges(changes) {
 }
 async function runConfigCheckDrift(opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
-  const configPath = resolve44(cwd, "massu.config.yaml");
+  const configPath = resolve43(cwd, "massu.config.yaml");
   const log = opts.silent ? () => {
   } : (s) => process.stdout.write(s);
   const err = opts.silent ? () => {
@@ -38295,29 +38295,30 @@ var init_config_check_drift = __esm({
 
 // src/cli.ts
 import { readFileSync as readFileSync61 } from "fs";
-import { resolve as resolve45, dirname as dirname29 } from "path";
+import { resolve as resolve44, dirname as dirname29 } from "path";
 import { fileURLToPath as fileURLToPath7 } from "url";
 
 // src/lib/node-bootstrap.ts
 init_node_floor();
-import { existsSync, readdirSync, statSync } from "fs";
+import { existsSync, readdirSync, statSync, realpathSync } from "fs";
 import { spawnSync, execFileSync } from "child_process";
 import { homedir } from "os";
-import { isAbsolute, resolve } from "path";
+import { win32 as pathWin32, posix as pathPosix } from "path";
 var REEXEC_SENTINEL_ENV = "MASSU_BOOTSTRAP_REEXEC";
 var OPT_OUT_ENV = "MASSU_NO_NODE_BOOTSTRAP";
-function allowlistPatterns(env) {
+function allowlistPatterns(env, platform = process.platform) {
+  if (platform === "win32") return windowsAllowlistPatterns(env);
   const patterns = [];
   const rawHome = env.HOME || homedir();
-  const home = rawHome && isAbsolute(rawHome) ? rawHome : null;
+  const home = rawHome && pathPosix.isAbsolute(rawHome) ? rawHome : null;
   const addAbs = (dir, suffix) => {
-    if (dir && isAbsolute(dir)) patterns.push(resolve(dir, suffix));
+    if (dir && pathPosix.isAbsolute(dir)) patterns.push(pathPosix.resolve(dir, suffix));
   };
-  addAbs(env.NVM_DIR ?? (home && resolve(home, ".nvm")), "versions/node/*/bin/node");
-  addAbs(env.FNM_DIR ?? (home && resolve(home, ".local/share/fnm")), "node-versions/*/installation/bin/node");
-  addAbs(env.VOLTA_HOME ?? (home && resolve(home, ".volta")), "tools/image/node/*/bin/node");
-  addAbs(env.ASDF_DATA_DIR ?? (home && resolve(home, ".asdf")), "installs/nodejs/*/bin/node");
-  addAbs(env.N_PREFIX ?? (home && resolve(home, "n")), "bin/node");
+  addAbs(env.NVM_DIR ?? (home && pathPosix.resolve(home, ".nvm")), "versions/node/*/bin/node");
+  addAbs(env.FNM_DIR ?? (home && pathPosix.resolve(home, ".local/share/fnm")), "node-versions/*/installation/bin/node");
+  addAbs(env.VOLTA_HOME ?? (home && pathPosix.resolve(home, ".volta")), "tools/image/node/*/bin/node");
+  addAbs(env.ASDF_DATA_DIR ?? (home && pathPosix.resolve(home, ".asdf")), "installs/nodejs/*/bin/node");
+  addAbs(env.N_PREFIX ?? (home && pathPosix.resolve(home, "n")), "bin/node");
   patterns.push(
     "/opt/homebrew/opt/node@*/bin/node",
     "/usr/local/opt/node@*/bin/node",
@@ -38326,6 +38327,44 @@ function allowlistPatterns(env) {
   );
   return patterns;
 }
+function winManagerDirs(env) {
+  const abs = (d2) => d2 && pathWin32.isAbsolute(d2) ? d2 : null;
+  const appdata = abs(env.APPDATA);
+  const localappdata = abs(env.LOCALAPPDATA);
+  return {
+    userprofile: abs(env.USERPROFILE),
+    nvmHome: abs(env.NVM_HOME),
+    nvmSymlink: abs(env.NVM_SYMLINK),
+    fnmDir: abs(env.FNM_DIR) ?? (appdata ? `${appdata}\\fnm` : null),
+    voltaHome: abs(env.VOLTA_HOME) ?? (localappdata ? `${localappdata}\\Volta` : null),
+    localappdata
+  };
+}
+function windowsAllowlistRoots(env) {
+  const d2 = winManagerDirs(env);
+  const roots = [];
+  for (const r2 of [d2.userprofile, d2.nvmHome, d2.nvmSymlink, d2.fnmDir, d2.voltaHome, d2.localappdata]) {
+    if (r2) roots.push(r2);
+  }
+  roots.push("C:\\Program Files\\nodejs", "C:\\Program Files (x86)\\nodejs");
+  return roots;
+}
+function windowsAllowlistPatterns(env) {
+  const d2 = winManagerDirs(env);
+  const patterns = [];
+  const add = (dir, suffix) => {
+    if (dir) patterns.push(`${dir}\\${suffix}`);
+  };
+  add(d2.nvmHome, "v*\\node.exe");
+  add(d2.nvmSymlink, "node.exe");
+  add(d2.fnmDir, "node-versions\\v*\\installation\\node.exe");
+  add(d2.voltaHome, "tools\\image\\node\\*\\node.exe");
+  add(d2.userprofile, "scoop\\apps\\nodejs\\current\\node.exe");
+  add(d2.userprofile, "scoop\\apps\\nodejs-lts\\current\\node.exe");
+  add(d2.localappdata, "Programs\\nodejs\\node.exe");
+  patterns.push("C:\\Program Files\\nodejs\\node.exe", "C:\\Program Files (x86)\\nodejs\\node.exe");
+  return patterns;
+}
 function isOwnershipTrusted(candidate) {
   const getuid = process.getuid;
   if (typeof getuid !== "function") return true;
@@ -38336,8 +38375,22 @@ function isOwnershipTrusted(candidate) {
     return false;
   }
 }
+function isWindowsTrusted(candidate, env) {
+  let resolved;
+  try {
+    resolved = pathWin32.resolve(realpathSync(candidate));
+  } catch {
+    resolved = pathWin32.resolve(candidate);
+  }
+  const target = resolved.toLowerCase();
+  for (const root of windowsAllowlistRoots(env)) {
+    const base = pathWin32.resolve(root).toLowerCase();
+    if (target === base || target.startsWith(base + pathWin32.sep)) return true;
+  }
+  return false;
+}
 function expandSingleStarGlob(pattern) {
-  const parts = pattern.split("/");
+  const parts = pattern.split(/[\\/]/);
   const starIdx = parts.findIndex((p19) => p19.includes("*"));
   if (starIdx === -1) {
     return existsSync(pattern) ? [pattern] : [];
@@ -38371,16 +38424,23 @@ function probeNodeVersion(candidate) {
     return null;
   }
 }
-function discoverCompatibleNode(env = process.env) {
+function isAcceptedCandidatePath(candidate, platform = process.platform) {
+  if (platform === "win32") {
+    return pathWin32.isAbsolute(candidate) && (/^[A-Za-z]:[\\/]/.test(candidate) || candidate.startsWith("\\\\"));
+  }
+  return candidate.startsWith("/");
+}
+function discoverCompatibleNode(env = process.env, platform = process.platform) {
   const seen = /* @__PURE__ */ new Set();
   let best = null;
-  for (const pattern of allowlistPatterns(env)) {
+  for (const pattern of allowlistPatterns(env, platform)) {
     for (const candidate of expandSingleStarGlob(pattern)) {
-      if (!candidate.startsWith("/")) continue;
+      if (!isAcceptedCandidatePath(candidate, platform)) continue;
       if (seen.has(candidate)) continue;
       seen.add(candidate);
       if (!existsSync(candidate)) continue;
-      if (!isOwnershipTrusted(candidate)) continue;
+      const trusted = platform === "win32" ? isWindowsTrusted(candidate, env) : isOwnershipTrusted(candidate);
+      if (!trusted) continue;
       const v3 = probeNodeVersion(candidate);
       if (!v3) continue;
       if (!checkNodeVersion(`v${v3}`).ok) continue;
@@ -38737,7 +38797,7 @@ Examples:
 }
 function printVersion() {
   try {
-    const pkg = JSON.parse(readFileSync61(resolve45(__dirname6, "../package.json"), "utf-8"));
+    const pkg = JSON.parse(readFileSync61(resolve44(__dirname6, "../package.json"), "utf-8"));
     console.log(`massu v${pkg.version}`);
   } catch {
     console.log("massu v0.1.0");