@muggleai/works 5.18.0 → 5.19.0-staging.124

package/dist/{chunk-63RAPKGG.js → chunk-ECZAVRVK.js}

@@ -1,4 +1,4 @@
-import { __export, getLogger, getConfig, createChildLogger, buildElectronAppReleaseAssetUrl, getActiveRuntimeTarget, getAuthService, hasApiKey, getElectronAppVersion, getElectronAppDir, getPlatformKey, reconcileProjectPreferences, getDataDir, PREFERENCES_FILE_NAME, isFirstRun, writePreferences, DEFAULT_PREFERENCES, isElectronAppInstalled, getElectronAppChecksums, getChecksumForPlatform, getElectronAppSignedFromVersion, getReleaseSignerIdentityUri, verifyFileChecksum, calculateFileChecksum, initTelemetry, Surface, ServiceName, track, EventName, getQaTools, getLocalQaTools, performLogout, assertDeviceCodeClientProvisioned, performLogin, toolRequiresAuth, getCallerCredentials, hasShownDisclosure, markDisclosureShown, getBundledElectronAppVersion, getElectronAppVersionSource, getCredentialsFilePath, buildElectronAppChecksumsUrl, __require, getDisclosureCopy, buildOnboardingPlan, applyOnboardingAnswers, needsOnboarding, OnboardingBlanketChoice, PreferenceKey } from './chunk-EKSYEVM2.js';
+import { __export, getLogger, getConfig, createChildLogger, buildElectronAppReleaseAssetUrl, getActiveRuntimeTarget, getAuthService, hasApiKey, getElectronAppVersion, getElectronAppDir, getPlatformKey, reconcileProjectPreferences, getDataDir, PREFERENCES_FILE_NAME, isFirstRun, writePreferences, DEFAULT_PREFERENCES, isElectronAppInstalled, getElectronAppChecksums, getChecksumForPlatform, getElectronAppSignedFromVersion, getReleaseSignerIdentityUri, verifyFileChecksum, calculateFileChecksum, initTelemetry, Surface, ServiceName, track, EventName, getQaTools, getLocalQaTools, performLogout, assertDeviceCodeClientProvisioned, performLogin, toolRequiresAuth, getCallerCredentials, hasShownDisclosure, markDisclosureShown, getBundledElectronAppVersion, getElectronAppVersionSource, getCredentialsFilePath, buildElectronAppChecksumsUrl, __require, getDisclosureCopy, buildOnboardingPlan, applyOnboardingAnswers, needsOnboarding, OnboardingBlanketChoice, PreferenceKey } from './chunk-KBOWKNKR.js';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 import { ListToolsRequestSchema, CallToolRequestSchema, ListResourcesRequestSchema, ReadResourceRequestSchema } from '@modelcontextprotocol/sdk/types.js';
 import { v4 } from 'uuid';
@@ -754,7 +754,7 @@ async function resolveGsScreenshotUrls(report, opts) {
     if (gsUrls.length === 0) {
       return report;
     }
-    const mcps = await import('./src-52J7RTUV.js');
+    const mcps = await import('./src-3E7EWTIT.js');
     const credentials = await mcps.getCallerCredentialsAsync();
     if (!credentials.bearerToken && !credentials.apiKey) {
       stderrWrite(
@@ -807,7 +807,7 @@ var withSentinel = (s) => s ? `${REPORT_SECTION_SENTINEL}
 ${s}` : s;
 async function resolveDashboardBaseUrl(stderrWrite) {
   try {
-    const mcps = await import('./src-52J7RTUV.js');
+    const mcps = await import('./src-3E7EWTIT.js');
     return mcps.resolveActiveProfile().dashboardBaseUrl;
   } catch (err) {
     stderrWrite(

package/dist/{chunk-EKSYEVM2.js → chunk-KBOWKNKR.js}

@@ -972,6 +972,13 @@ var TestResultStatus = /* @__PURE__ */ ((TestResultStatus2) => {
   TestResultStatus2["Skipped"] = "skipped";
   return TestResultStatus2;
 })(TestResultStatus || {});
+var DisplayResolution = /* @__PURE__ */ ((DisplayResolution2) => {
+  DisplayResolution2["R_0800x0600"] = "R_0800x0600";
+  DisplayResolution2["R_1024x0768"] = "R_1024x0768";
+  DisplayResolution2["R_0390x0844"] = "R_0390x0844";
+  DisplayResolution2["R_1920x1080"] = "R_1920x1080";
+  return DisplayResolution2;
+})(DisplayResolution || {});
 
 // packages/mcps/src/mcp/local/services/stored-auth-target.ts
 function decodeJwtPayload(token) {
@@ -2423,6 +2430,22 @@ function applyLlmEnvOverrides(baseEnv, dataDirOverride2) {
   return { env: baseEnv, appliedNames };
 }
 
+// packages/mcps/src/mcp/local/services/display-resolution-constants.ts
+var DISPLAY_PARAMS_BY_RESOLUTION = {
+  ["R_0800x0600" /* R_0800x0600 */]: { browserWindowWidth: 800, browserWindowHeight: 600 },
+  ["R_1024x0768" /* R_1024x0768 */]: { browserWindowWidth: 1024, browserWindowHeight: 768 },
+  ["R_0390x0844" /* R_0390x0844 */]: { browserWindowWidth: 390, browserWindowHeight: 844 },
+  ["R_1920x1080" /* R_1920x1080 */]: { browserWindowWidth: 1920, browserWindowHeight: 1080 }
+};
+var DEFAULT_DISPLAY_RESOLUTION = "R_1920x1080" /* R_1920x1080 */;
+
+// packages/mcps/src/mcp/local/services/display-resolution.ts
+function resolveDisplayParams(params) {
+  const storedResolution = params.storedDisplayOptions?.[0];
+  const effectiveResolution = params.requestedResolution ?? storedResolution ?? DEFAULT_DISPLAY_RESOLUTION;
+  return DISPLAY_PARAMS_BY_RESOLUTION[effectiveResolution] ?? DISPLAY_PARAMS_BY_RESOLUTION[DEFAULT_DISPLAY_RESOLUTION];
+}
+
 // packages/mcps/src/mcp/local/services/replay-url-rewrite.ts
 function rewriteActionScriptUrls(params) {
   const { actionScript, originalUrl, localUrl } = params;
@@ -2515,7 +2538,13 @@ function buildGenerationActionScript(params) {
       // projectId but NOT equal to it). The MCP has no client-side source for
       // it, so leave it empty here; STM-on-local needs a backend resolver.
       sharedTestMemoryId: "",
-      runEnvironmentType: "local"
+      runEnvironmentType: "local",
+      // Sizes the studio's webview. Absent, the electron-app falls back to its
+      // own hardcoded 1920x1080, which is why a phone-viewport run needs this.
+      displayParams: resolveDisplayParams({
+        requestedResolution: params.displayResolution,
+        storedDisplayOptions: params.testCase.displayOptions
+      })
     },
     goal: params.testCase.goal,
     url: params.localUrl,
@@ -2573,7 +2602,12 @@ function buildReplayActionScript(params) {
       // projectId but NOT equal to it). The MCP has no client-side source for
       // it, so leave it empty here; STM-on-local needs a backend resolver.
       sharedTestMemoryId: "",
-      runEnvironmentType: "local"
+      runEnvironmentType: "local",
+      // Sizes the studio's webview. Absent, the electron-app falls back to its
+      // own hardcoded 1920x1080, which is why a phone-viewport run needs this.
+      displayParams: resolveDisplayParams({
+        requestedResolution: params.displayResolution
+      })
     },
     goal: params.testScript.name,
     url: params.localUrl,
@@ -3182,7 +3216,8 @@ async function runTestGenerationLocked(params) {
       localUrl,
       runId,
       localTestScriptId: localTestScript.id,
-      ownerUserId: authContent.userId
+      ownerUserId: authContent.userId,
+      displayResolution: params.displayResolution
     });
     const inputFilePath = await writeTempFile({
       filename: `${runId}_input.json`,
@@ -3369,7 +3404,8 @@ async function runReplayLocked(params) {
       actionScript,
       localUrl,
       runId,
-      ownerUserId: authContent.userId
+      ownerUserId: authContent.userId,
+      displayResolution: params.displayResolution
     });
     const inputFilePath = await writeTempFile({
       filename: `${runId}_input.json`,
@@ -6714,6 +6750,7 @@ __export(local_exports, {
   executeTool: () => executeTool,
   getTool: () => getTool
 });
+var DisplayResolutionSchema = z.nativeEnum(DisplayResolution);
 var TestCaseDetailsSchema = z.object({
   /** Cloud test case ID. */
   id: MuggleEntityIdSchema.describe("Cloud test case ID (UUID)"),
@@ -6732,7 +6769,11 @@ var TestCaseDetailsSchema = z.object({
   /** Cloud project ID (required for electron workflow context). */
   projectId: MuggleEntityIdSchema.describe("Cloud project ID (UUID)"),
   /** Cloud use case ID (required for electron workflow context). */
-  useCaseId: MuggleEntityIdSchema.describe("Cloud use case ID (UUID)")
+  useCaseId: MuggleEntityIdSchema.describe("Cloud use case ID (UUID)"),
+  /** Resolutions stored on the cloud test case; the first entry sizes the run unless the caller names one. */
+  displayOptions: z.array(DisplayResolutionSchema).optional().describe(
+    "Resolutions stored on the cloud test case (from muggle-remote-test-case-get). The first entry sizes the browser unless displayResolution overrides it."
+  )
 });
 var TestScriptDetailsSchema = z.object({
   /** Cloud test script ID. */
@@ -6766,7 +6807,11 @@ var ExecuteTestGenerationInputSchema = z.object({
   /** Clear all session storage (cookies, localStorage, etc.) before execution. Use for test cases that require a clean browser state, such as registration, login, or cookie consent flows. */
   freshSession: z.boolean().optional().describe("Clear all session storage (cookies, localStorage, etc.) before execution. Use for test cases that require a clean browser state \u2014 e.g. registration, login, or cookie consent flows. Default: false."),
   /** Mutation parameters providing variable context for this generation run — a string[] where each element is a plain-English instruction or a local file path for uploads (e.g. "Attach the image at C:\\Users\\user\\photo.jpg"). Matches the electron-app's string[] mutation file format. */
-  mutations: z.array(z.string()).optional().describe(`Mutation parameters: string[] where each element is a plain-English instruction or a local file path (e.g. ["The post content should be 'Hello'", "Attach the image at C:\\\\Users\\\\user\\\\photo.jpg"]).`)
+  mutations: z.array(z.string()).optional().describe(`Mutation parameters: string[] where each element is a plain-English instruction or a local file path (e.g. ["The post content should be 'Hello'", "Attach the image at C:\\\\Users\\\\user\\\\photo.jpg"]).`),
+  /** Resolution for this run. Overrides `testCase.displayOptions`; both absent means 1920x1080. */
+  displayResolution: DisplayResolutionSchema.optional().describe(
+    "Browser resolution for this run, e.g. R_0390x0844 for a 390x844 phone viewport. Overrides testCase.displayOptions; defaults to R_1920x1080 when neither is given."
+  )
 });
 var ExecuteReplayInputSchema = z.object({
   /** Test script metadata from muggle-remote-test-script-get. */
@@ -6784,7 +6829,11 @@ var ExecuteReplayInputSchema = z.object({
   /** Clear all session storage (cookies, localStorage, etc.) before execution. Use for test cases that require a clean browser state, such as registration, login, or cookie consent flows. */
   freshSession: z.boolean().optional().describe("Clear all session storage (cookies, localStorage, etc.) before execution. Use for test cases that require a clean browser state \u2014 e.g. registration, login, or cookie consent flows. Default: false."),
   /** Mutation parameters passed to the LLM step predictor — a string[] where each element is an instruction describing what varies this run. Supports plain-English instructions (e.g. "The post content should be 'Hello world'") and local file paths for uploads (e.g. "Attach the image at C:\\Users\\user\\photo.jpg"). Matches the electron-app's string[] mutation file format. When provided, the electron app uses LLM-driven step prediction instead of deterministic replay. */
-  mutations: z.array(z.string()).optional().describe(`Mutation parameters: string[] where each element is a plain-English instruction or a local file path (e.g. ["The post content should be 'Hello'", "Attach the image at C:\\\\Users\\\\user\\\\photo.jpg"]).`)
+  mutations: z.array(z.string()).optional().describe(`Mutation parameters: string[] where each element is a plain-English instruction or a local file path (e.g. ["The post content should be 'Hello'", "Attach the image at C:\\\\Users\\\\user\\\\photo.jpg"]).`),
+  /** Resolution for this run. A test script carries no stored resolution, so this is replay's only sizing input. */
+  displayResolution: DisplayResolutionSchema.optional().describe(
+    "Browser resolution for this run, e.g. R_0390x0844 for a 390x844 phone viewport. Defaults to R_1920x1080."
+  )
 });
 var CancelExecutionInputSchema = z.object({
   runId: MuggleEntityIdSchema.describe("Run ID (UUID) to cancel")
@@ -7394,7 +7443,8 @@ var executeTestGenerationTool = {
         mutations: input.mutations,
         timeoutMs: input.timeoutMs,
         showUi,
-        freshSession: input.freshSession
+        freshSession: input.freshSession,
+        displayResolution: input.displayResolution
       });
       const content = [
         "## Test Generation " + (generationRun.status === "passed" ? "Successful" : "Failed"),
@@ -7436,7 +7486,8 @@ var executeReplayTool = {
         mutations: input.mutations,
         timeoutMs: input.timeoutMs,
         showUi,
-        freshSession: input.freshSession
+        freshSession: input.freshSession,
+        displayResolution: input.displayResolution
       });
       const content = [
         "## Test Replay " + (replayRun.status === "passed" ? "Successful" : "Failed"),
@@ -7864,6 +7915,8 @@ __export(local_exports2, {
   CleanupSessionsInputSchema: () => CleanupSessionsInputSchema,
   CloudMappingEntityType: () => CloudMappingEntityType,
   DeviceCodePollStatus: () => DeviceCodePollStatus,
+  DisplayResolution: () => DisplayResolution,
+  DisplayResolutionSchema: () => DisplayResolutionSchema,
   EmptyInputSchema: () => EmptyInputSchema2,
   EventTelemetryEmitInputSchema: () => EventTelemetryEmitInputSchema,
   ExecuteReplayInputSchema: () => ExecuteReplayInputSchema,

package/dist/cli.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { runCli } from './chunk-63RAPKGG.js';
-import './chunk-EKSYEVM2.js';
+import { runCli } from './chunk-ECZAVRVK.js';
+import './chunk-KBOWKNKR.js';
 
 // src/cli/main.ts
 runCli().catch((error) => {

package/dist/index.js

@@ -1,2 +1,2 @@
-export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-63RAPKGG.js';
-export { createChildLogger, e2e_exports as e2e, getConfig, getLocalQaTools, getLogger, getQaTools, local_exports as localQa, mcp_exports as mcp, e2e_exports as qa, src_exports as shared } from './chunk-EKSYEVM2.js';
+export { src_exports as commands, createUnifiedMcpServer, server_exports as server } from './chunk-ECZAVRVK.js';
+export { createChildLogger, e2e_exports as e2e, getConfig, getLocalQaTools, getLogger, getQaTools, local_exports as localQa, mcp_exports as mcp, e2e_exports as qa, src_exports as shared } from './chunk-KBOWKNKR.js';

package/dist/plugin/skills/_shared/post-merge-cleanup.md

@@ -6,11 +6,29 @@ On `always`, the steps below run as one pre-authorized sequence (no per-step pro
 
 **Verify every step, assume none.** Each step states what proves it succeeded. A step whose side effect *usually* happens is not a step that ran — that assumption is how a branch survives a cleanup that reported success. The [report](#report) states verified state, never intent.
 
+**A blocked step is reported, never handed back.** On `always` the gate already authorized this whole sequence, so nobody is sitting on the prompt: stopping to describe an obstacle and wait turns cleanup into a run that hangs until the user next looks at the terminal. Every step ends exactly one of three ways — done, `—` nothing to do, or `❌` with its reason in the [report](#report) and the sequence stopped. Waiting for the user is not a fourth ending. An obstacle you can clear yourself (standing in the directory you are about to remove) you clear and continue; one you cannot (a lock held by another process, a permission you lack) you record and stop. Print the report either way — the report is what tells the user cleanup is over.
+
 ## Preconditions
 
 Confirm the PR is `MERGED` from provider state. A closed-unmerged PR keeps its branch and worktree: the work never landed, so deleting it destroys it.
 
-## 1. Remove the worktree — link-safe
+## 1. Leave the worktree
+
+Only if a worktree was used. This runs **before** anything is deleted — the working directory is the precondition the rest of the sequence stands on.
+
+`git worktree remove` refuses to remove the worktree the command is standing in, and a shell whose directory is deleted out from under it fails everything afterwards with `getcwd`/`No such file or directory`. Both surface as "cleanup can't proceed", and the reflex — announcing that you are inside the directory and waiting for the user — is the stall this step exists to prevent. Moving is yours to do; it needs no one's permission, and the gate already gave it.
+
+1. **Resolve the anchor** — the repo's main working tree, which removing a worktree never touches:
+   ```bash
+   git -C {worktreePath} worktree list --porcelain   # the first `worktree ` line is the main tree
+   ```
+2. **Compare resolved paths, not strings.** Resolve the current directory and `{worktreePath}` through symlinks before asking whether one contains the other; `/var/…` against `/private/var/…` reads as "already outside" and the removal then fails anyway. Match on path segments, so a sibling like `<name>-old` is not mistaken for being inside `<name>`.
+3. If the cwd is at or under `{worktreePath}`, move to the anchor now.
+4. Run every remaining command against an explicit repo — `git -C <anchor> …` — so no later step walks back into the tree it is deleting.
+
+**Verify:** the resolved cwd is outside `{worktreePath}` **and** still exists (a directory that resolves, not just a string). A cwd that was deleted rather than left is the same stall arriving one step later.
+
+## 2. Remove the worktree — link-safe
 
 Only if a worktree was used.
 
@@ -26,7 +44,7 @@ A worktree's dependency dir (`node_modules`, and nested workspace copies) is oft
 
 **Verify:** the path is gone, it no longer appears in `git worktree list`, **and** the shared dependency tree the links pointed at still exists. That last check is the one that catches a link-follow.
 
-## 2. Delete the local branch
+## 3. Delete the local branch
 
 **Skip entirely when no worktree was used** — the branch is then the user's live checkout, and a checked-out branch must never be deleted.
 
@@ -39,7 +57,7 @@ Do not reach for `-D` on faith. Replace the ancestry check with a content check:
 
 **Verify:** the branch is absent from `git branch --list`.
 
-## 3. Delete the remote branch
+## 4. Delete the remote branch
 
 **A provider that auto-deletes the head branch on merge is a setting, not a guarantee.** It can be off for the repo, off for a fork, or simply not fire. Treat auto-delete as something to detect, never as this step having run.
 
@@ -48,7 +66,7 @@ Do not reach for `-D` on faith. Replace the ancestry check with a content check:
 
 **Verify:** querying the ref returns not-found.
 
-## 4. Clear the session slot
+## 5. Clear the session slot
 
 The slot is `~/.muggle-ai/muggle-do/sessions/<slug>/` — the home directory, not the project.
 
@@ -56,7 +74,7 @@ Clear it only when `prs.json` records a terminal state. A slot for a still-open
 
 **Verify:** the slot directory is gone, and no non-terminal slot was touched.
 
-## 5. Clear this run's prepare artifacts
+## 6. Clear this run's prepare artifacts
 
 The PID tracker and per-service logs written during environment prep — `/tmp/muggle-test-prepare.json` and `/tmp/muggle-prepare-*.log`.
 
@@ -75,6 +93,7 @@ Cleanup — <slug> (PR #<n>, merged)
 
 | Step                  | Result                                          |
 |:----------------------|:------------------------------------------------|
+| Left the worktree     | ✅ moved to <repo root> (cwd was inside)         |
 | Worktree removed      | ✅ .claude/worktrees/<name> (shared deps intact) |
 | Local branch deleted  | ✅ users/<user>/<branch>                         |
 | Remote branch deleted | ✅ (already gone — provider auto-delete)         |

package/dist/plugin/skills/_shared/use-worktrees.md

@@ -51,3 +51,5 @@ Use this for feature development, local validation, and PR iteration.
 
 After merge, remove the worktree.  
 See [`post-merge-cleanup.md`](post-merge-cleanup.md).
+
+**Never remove a worktree you are standing in.** Step back to the repo's main working tree first — `git worktree remove` refuses from inside, and a deleted working directory breaks every command that follows. Relocating is part of teardown, not a reason to stop and ask.

package/dist/plugin/skills/do/cleanup.md

@@ -13,3 +13,5 @@ Invoked by `/muggle-do` when the watcher forwards a PR's terminal state. On `mer
 3. **Teardown (`merged` only).** When the PR is `merged`, run [`../_shared/post-merge-cleanup.md`](../_shared/post-merge-cleanup.md) with `{worktreePath}` and `{branch}`. That file owns the teardown sequence **and its safety rules** — including skipping worktree-remove and local branch deletion when no worktree was used. This stage adds no teardown logic of its own. On `closed`, skip teardown — the branch and any worktree stay intact.
 4. Append a cleanup line to the session's `followup.log`, recording whether teardown ran.
 5. Suggest the next step per [`next-step.md`](next-step.md), passing whether teardown ran. This is the stage's last action.
+
+**Teardown never returns a question.** It finishes with its report — every step done, skipped, or blocked-with-a-reason — so steps 4 and 5 always run. A teardown that appears to be waiting on the user has stalled mid-sequence; the stage is not complete until the report and the next-step suggestion are both printed.

package/dist/release-manifest.json

@@ -1,7 +1,7 @@
 {
   "release": "5.18.0",
-  "buildId": "run-122-1",
-  "commitSha": "1170bfa0f0a22368c3ee36f85b65d708f0c99f83",
-  "buildTime": "2026-09-19T08:03:02Z",
+  "buildId": "run-124-1",
+  "commitSha": "fd774f165bbdddcd5d9b6707295e6efb6c63fbd5",
+  "buildTime": "2026-09-19T08:45:18Z",
   "serviceName": "muggle-ai-works-mcp"
 }

package/dist/{src-52J7RTUV.js → src-3E7EWTIT.js}

@@ -1 +1 @@
-export { DEFAULT_PREFERENCES, ElectronAppReleaseStream, ONBOARDING_BLANKET_OPTIONS, ONBOARDING_CHOICE_GROUPS, ONBOARDING_MAX_OFFERS, ONBOARDING_PRIMER_BULLETS, ONBOARDING_PRIMER_HEADLINE, ONBOARDING_TOGGLE_GROUPS, ONBOARDING_TOGGLE_PROMPT, ONBOARDING_UNSELECTED_TOGGLE_VALUE, OnboardingBlanketChoice, OnboardingGroupKind, PREFERENCES_FILE_NAME, PREFERENCES_PROJECT_DIR_NAME, PREFERENCES_SCHEMA, PREFERENCES_VERSION, PREFERENCE_ALLOWED_VALUES, PreferenceKey, PreferenceValue, ProjectPreferencesReconcileOutcome, RuntimeTarget, WATCHER_LIFETIME_SECONDS, WATCHER_LIFETIME_UNBOUNDED_SECONDS, applyOnboardingAnswers, assertDeviceCodeClientProvisioned, buildElectronAppChecksumsUrl, buildElectronAppReleaseAssetUrl, buildElectronAppReleaseTag, buildOnboardingPlan, calculateFileChecksum, completeOnboarding, createApiKeyWithToken, createChildLogger, deleteApiKeyData, deleteCredentials, e2e_exports as e2e, formatPreferencesOneLiner, getActiveElectronAppReleaseStream, getActiveRuntimeTarget, getApiKey, getApiKeyFilePath, getAuthService, getBundledElectronAppVersion, getCallerCredentials, getCallerCredentialsAsync, getChecksumForPlatform, getConfig, getCredentialsFilePath, getDataDir, getDownloadBaseUrl, getElectronAppChecksums, getElectronAppDir, getElectronAppReleaseTagPrefix, getElectronAppSignedFromVersion, getElectronAppVersion, getElectronAppVersionSource, getLocalQaTools, getLogger, getOnboardingToggleKeys, getPlatformKey, getQaTools, getReleaseSignerIdentityUri, getValidApiKeyData, getValidCredentials, hasApiKey, isElectronAppInstalled, isFirstRun, loadApiKeyData, loadCredentials, local_exports as localQa, markOnboardingCompleted, mcp_exports as mcp, needsOnboarding, openBrowserUrl, performLogin, performLogout, pollDeviceCode, e2e_exports as qa, readPreferencesMetadata, reconcileProjectPreferences, recordOnboardingSkip, resetConfig, resetLogger, resetPreference, resolveActiveProfile, resolveActiveReleaseStream, resolveActiveReleaseTagPrefix, resolveBlanketPreferences, resolveElectronAppPathOrNull, resolveOnboardingAnswers, resolvePreferences, resolveRuntimeTarget, resolveTogglePreferences, saveApiKey, saveApiKeyData, saveCredentials, startDeviceCodeFlow, toolRequiresAuth, validatePreference, verifyFileChecksum, writePreferences, writePreferencesWithMetadata } from './chunk-EKSYEVM2.js';
+export { DEFAULT_PREFERENCES, ElectronAppReleaseStream, ONBOARDING_BLANKET_OPTIONS, ONBOARDING_CHOICE_GROUPS, ONBOARDING_MAX_OFFERS, ONBOARDING_PRIMER_BULLETS, ONBOARDING_PRIMER_HEADLINE, ONBOARDING_TOGGLE_GROUPS, ONBOARDING_TOGGLE_PROMPT, ONBOARDING_UNSELECTED_TOGGLE_VALUE, OnboardingBlanketChoice, OnboardingGroupKind, PREFERENCES_FILE_NAME, PREFERENCES_PROJECT_DIR_NAME, PREFERENCES_SCHEMA, PREFERENCES_VERSION, PREFERENCE_ALLOWED_VALUES, PreferenceKey, PreferenceValue, ProjectPreferencesReconcileOutcome, RuntimeTarget, WATCHER_LIFETIME_SECONDS, WATCHER_LIFETIME_UNBOUNDED_SECONDS, applyOnboardingAnswers, assertDeviceCodeClientProvisioned, buildElectronAppChecksumsUrl, buildElectronAppReleaseAssetUrl, buildElectronAppReleaseTag, buildOnboardingPlan, calculateFileChecksum, completeOnboarding, createApiKeyWithToken, createChildLogger, deleteApiKeyData, deleteCredentials, e2e_exports as e2e, formatPreferencesOneLiner, getActiveElectronAppReleaseStream, getActiveRuntimeTarget, getApiKey, getApiKeyFilePath, getAuthService, getBundledElectronAppVersion, getCallerCredentials, getCallerCredentialsAsync, getChecksumForPlatform, getConfig, getCredentialsFilePath, getDataDir, getDownloadBaseUrl, getElectronAppChecksums, getElectronAppDir, getElectronAppReleaseTagPrefix, getElectronAppSignedFromVersion, getElectronAppVersion, getElectronAppVersionSource, getLocalQaTools, getLogger, getOnboardingToggleKeys, getPlatformKey, getQaTools, getReleaseSignerIdentityUri, getValidApiKeyData, getValidCredentials, hasApiKey, isElectronAppInstalled, isFirstRun, loadApiKeyData, loadCredentials, local_exports as localQa, markOnboardingCompleted, mcp_exports as mcp, needsOnboarding, openBrowserUrl, performLogin, performLogout, pollDeviceCode, e2e_exports as qa, readPreferencesMetadata, reconcileProjectPreferences, recordOnboardingSkip, resetConfig, resetLogger, resetPreference, resolveActiveProfile, resolveActiveReleaseStream, resolveActiveReleaseTagPrefix, resolveBlanketPreferences, resolveElectronAppPathOrNull, resolveOnboardingAnswers, resolvePreferences, resolveRuntimeTarget, resolveTogglePreferences, saveApiKey, saveApiKeyData, saveCredentials, startDeviceCodeFlow, toolRequiresAuth, validatePreference, verifyFileChecksum, writePreferences, writePreferencesWithMetadata } from './chunk-KBOWKNKR.js';

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@muggleai/works",
   "mcpName": "io.github.multiplex-ai/muggle",
-  "version": "5.18.0",
+  "version": "5.19.0-staging.124",
   "description": "Ship quality products with AI-powered E2E acceptance testing that validates your web app like a real user — from Claude Code and Cursor to PR.",
   "type": "module",
   "main": "dist/index.js",
@@ -54,7 +54,7 @@
   "muggleConfig": {
     "electronAppVersion": "1.10.6",
     "downloadBaseUrl": "https://github.com/multiplex-ai/muggle-ai-works/releases/download",
-    "runtimeTargetDefault": "production",
+    "runtimeTargetDefault": "staging",
     "checksumsByStream": {
       "production": {
         "win32-x64": "c20acdc2fd7a05039c62f9e5b079e3068d1b3a23a1b3b37b75e2a650b5401de6",

package/plugin/skills/_shared/post-merge-cleanup.md

@@ -6,11 +6,29 @@ On `always`, the steps below run as one pre-authorized sequence (no per-step pro
 
 **Verify every step, assume none.** Each step states what proves it succeeded. A step whose side effect *usually* happens is not a step that ran — that assumption is how a branch survives a cleanup that reported success. The [report](#report) states verified state, never intent.
 
+**A blocked step is reported, never handed back.** On `always` the gate already authorized this whole sequence, so nobody is sitting on the prompt: stopping to describe an obstacle and wait turns cleanup into a run that hangs until the user next looks at the terminal. Every step ends exactly one of three ways — done, `—` nothing to do, or `❌` with its reason in the [report](#report) and the sequence stopped. Waiting for the user is not a fourth ending. An obstacle you can clear yourself (standing in the directory you are about to remove) you clear and continue; one you cannot (a lock held by another process, a permission you lack) you record and stop. Print the report either way — the report is what tells the user cleanup is over.
+
 ## Preconditions
 
 Confirm the PR is `MERGED` from provider state. A closed-unmerged PR keeps its branch and worktree: the work never landed, so deleting it destroys it.
 
-## 1. Remove the worktree — link-safe
+## 1. Leave the worktree
+
+Only if a worktree was used. This runs **before** anything is deleted — the working directory is the precondition the rest of the sequence stands on.
+
+`git worktree remove` refuses to remove the worktree the command is standing in, and a shell whose directory is deleted out from under it fails everything afterwards with `getcwd`/`No such file or directory`. Both surface as "cleanup can't proceed", and the reflex — announcing that you are inside the directory and waiting for the user — is the stall this step exists to prevent. Moving is yours to do; it needs no one's permission, and the gate already gave it.
+
+1. **Resolve the anchor** — the repo's main working tree, which removing a worktree never touches:
+   ```bash
+   git -C {worktreePath} worktree list --porcelain   # the first `worktree ` line is the main tree
+   ```
+2. **Compare resolved paths, not strings.** Resolve the current directory and `{worktreePath}` through symlinks before asking whether one contains the other; `/var/…` against `/private/var/…` reads as "already outside" and the removal then fails anyway. Match on path segments, so a sibling like `<name>-old` is not mistaken for being inside `<name>`.
+3. If the cwd is at or under `{worktreePath}`, move to the anchor now.
+4. Run every remaining command against an explicit repo — `git -C <anchor> …` — so no later step walks back into the tree it is deleting.
+
+**Verify:** the resolved cwd is outside `{worktreePath}` **and** still exists (a directory that resolves, not just a string). A cwd that was deleted rather than left is the same stall arriving one step later.
+
+## 2. Remove the worktree — link-safe
 
 Only if a worktree was used.
 
@@ -26,7 +44,7 @@ A worktree's dependency dir (`node_modules`, and nested workspace copies) is oft
 
 **Verify:** the path is gone, it no longer appears in `git worktree list`, **and** the shared dependency tree the links pointed at still exists. That last check is the one that catches a link-follow.
 
-## 2. Delete the local branch
+## 3. Delete the local branch
 
 **Skip entirely when no worktree was used** — the branch is then the user's live checkout, and a checked-out branch must never be deleted.
 
@@ -39,7 +57,7 @@ Do not reach for `-D` on faith. Replace the ancestry check with a content check:
 
 **Verify:** the branch is absent from `git branch --list`.
 
-## 3. Delete the remote branch
+## 4. Delete the remote branch
 
 **A provider that auto-deletes the head branch on merge is a setting, not a guarantee.** It can be off for the repo, off for a fork, or simply not fire. Treat auto-delete as something to detect, never as this step having run.
 
@@ -48,7 +66,7 @@ Do not reach for `-D` on faith. Replace the ancestry check with a content check:
 
 **Verify:** querying the ref returns not-found.
 
-## 4. Clear the session slot
+## 5. Clear the session slot
 
 The slot is `~/.muggle-ai/muggle-do/sessions/<slug>/` — the home directory, not the project.
 
@@ -56,7 +74,7 @@ Clear it only when `prs.json` records a terminal state. A slot for a still-open
 
 **Verify:** the slot directory is gone, and no non-terminal slot was touched.
 
-## 5. Clear this run's prepare artifacts
+## 6. Clear this run's prepare artifacts
 
 The PID tracker and per-service logs written during environment prep — `/tmp/muggle-test-prepare.json` and `/tmp/muggle-prepare-*.log`.
 
@@ -75,6 +93,7 @@ Cleanup — <slug> (PR #<n>, merged)
 
 | Step                  | Result                                          |
 |:----------------------|:------------------------------------------------|
+| Left the worktree     | ✅ moved to <repo root> (cwd was inside)         |
 | Worktree removed      | ✅ .claude/worktrees/<name> (shared deps intact) |
 | Local branch deleted  | ✅ users/<user>/<branch>                         |
 | Remote branch deleted | ✅ (already gone — provider auto-delete)         |

package/plugin/skills/_shared/use-worktrees.md

@@ -51,3 +51,5 @@ Use this for feature development, local validation, and PR iteration.
 
 After merge, remove the worktree.  
 See [`post-merge-cleanup.md`](post-merge-cleanup.md).
+
+**Never remove a worktree you are standing in.** Step back to the repo's main working tree first — `git worktree remove` refuses from inside, and a deleted working directory breaks every command that follows. Relocating is part of teardown, not a reason to stop and ask.

package/plugin/skills/do/cleanup.md

@@ -13,3 +13,5 @@ Invoked by `/muggle-do` when the watcher forwards a PR's terminal state. On `mer
 3. **Teardown (`merged` only).** When the PR is `merged`, run [`../_shared/post-merge-cleanup.md`](../_shared/post-merge-cleanup.md) with `{worktreePath}` and `{branch}`. That file owns the teardown sequence **and its safety rules** — including skipping worktree-remove and local branch deletion when no worktree was used. This stage adds no teardown logic of its own. On `closed`, skip teardown — the branch and any worktree stay intact.
 4. Append a cleanup line to the session's `followup.log`, recording whether teardown ran.
 5. Suggest the next step per [`next-step.md`](next-step.md), passing whether teardown ran. This is the stage's last action.
+
+**Teardown never returns a question.** It finishes with its report — every step done, skipped, or blocked-with-a-reason — so steps 4 and 5 always run. A teardown that appears to be waiting on the user has stalled mid-sequence; the stage is not complete until the report and the next-step suggestion are both printed.