@mutmutco/cli 2.51.0 → 2.52.1

package/dist/main.cjs

@@ -5571,6 +5571,7 @@ var import_node_child_process13 = require("node:child_process");
 // src/cli-shared.ts
 var import_promises = require("node:fs/promises");
 var import_node_fs7 = require("node:fs");
+var import_node_path7 = require("node:path");
 var import_node_crypto2 = require("node:crypto");
 var import_node_child_process4 = require("node:child_process");
 var import_node_util4 = require("node:util");
@@ -6326,16 +6327,20 @@ async function hubHeaders(extra = {}) {
   const base = { ...clientVersionHeaders(), ...extra };
   return t ? { ...base, Authorization: `Bearer ${t}` } : base;
 }
+var CONFIG_FILE = ".mmi/config.json";
 async function loadConfig() {
   let file = {};
   try {
-    file = JSON.parse(await (0, import_promises.readFile)(".mmi/config.json", "utf8"));
+    file = JSON.parse(await (0, import_promises.readFile)(CONFIG_FILE, "utf8"));
   } catch {
     file = {};
   }
   if (!file.sagaApiUrl) file.sagaApiUrl = defaultHubUrl();
   return file;
 }
+function isOrgRepoRoot(cwd = process.cwd(), exists = import_node_fs7.existsSync) {
+  return exists((0, import_node_path7.join)(cwd, CONFIG_FILE));
+}
 var SESSION_FILE = ".mmi/.session";
 var gitOut = async (args) => {
   try {
@@ -6568,8 +6573,8 @@ function memorySyncBanner(report) {
 
 // src/continuity.ts
 var import_node_fs8 = require("node:fs");
-var import_node_path7 = require("node:path");
-var CONTINUITY_FILE = (0, import_node_path7.join)(".mmi", "continuity.json");
+var import_node_path8 = require("node:path");
+var CONTINUITY_FILE = (0, import_node_path8.join)(".mmi", "continuity.json");
 function parseContinuityStamp(raw) {
   if (!raw) return {};
   try {
@@ -6595,7 +6600,7 @@ function readContinuityStamp(path2 = CONTINUITY_FILE) {
 function stampSagaNoteContinuity(now = (/* @__PURE__ */ new Date()).toISOString(), path2 = CONTINUITY_FILE) {
   try {
     const current = readContinuityStamp(path2);
-    (0, import_node_fs8.mkdirSync)((0, import_node_path7.dirname)(path2), { recursive: true });
+    (0, import_node_fs8.mkdirSync)((0, import_node_path8.dirname)(path2), { recursive: true });
     (0, import_node_fs8.writeFileSync)(path2, serializeContinuityStamp({ ...current, lastSagaNoteAt: now }), "utf8");
   } catch {
   }
@@ -6954,7 +6959,7 @@ var import_node_fs10 = require("node:fs");
 // src/stage-runner.ts
 var import_node_child_process5 = require("node:child_process");
 var import_node_fs9 = require("node:fs");
-var import_node_path8 = require("node:path");
+var import_node_path9 = require("node:path");
 var import_node_net = require("node:net");
 var import_node_util5 = require("node:util");
 var execFileP3 = (0, import_node_util5.promisify)(import_node_child_process5.execFile);
@@ -7071,11 +7076,11 @@ function appendForceRecreate(up) {
   return `${up.trimEnd()} --force-recreate`;
 }
 function stageStatePath(cwd = process.cwd()) {
-  return (0, import_node_path8.join)(cwd, "tmp", "stage", "state.json");
+  return (0, import_node_path9.join)(cwd, "tmp", "stage", "state.json");
 }
 function stageGlobalStatePath(cwd = process.cwd(), gitCommonDir = ".git") {
-  const dir = (0, import_node_path8.isAbsolute)(gitCommonDir) ? gitCommonDir : (0, import_node_path8.resolve)(cwd, gitCommonDir);
-  return (0, import_node_path8.join)(dir, "mmi", "stage", "state.json");
+  const dir = (0, import_node_path9.isAbsolute)(gitCommonDir) ? gitCommonDir : (0, import_node_path9.resolve)(cwd, gitCommonDir);
+  return (0, import_node_path9.join)(dir, "mmi", "stage", "state.json");
 }
 function normPath2(path2) {
   return path2.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
@@ -7299,8 +7304,8 @@ function stageProcessEnv(stagePort, extraEnv) {
 }
 async function ensureStageRuntimeEnv(config, opts, cwd) {
   if (!config.ensureEnv) return;
-  const target = (0, import_node_path8.join)(cwd, config.ensureEnv.target);
-  const example = (0, import_node_path8.join)(cwd, config.ensureEnv.example);
+  const target = (0, import_node_path9.join)(cwd, config.ensureEnv.target);
+  const example = (0, import_node_path9.join)(cwd, config.ensureEnv.example);
   if (!(0, import_node_fs9.existsSync)(target) && (0, import_node_fs9.existsSync)(example)) {
     (0, import_node_fs9.copyFileSync)(example, target);
   } else if ((0, import_node_fs9.existsSync)(target) && (0, import_node_fs9.existsSync)(example)) {
@@ -7811,12 +7816,14 @@ function registerSagaCommands(program3) {
   saga.command("flush").option("--json", "machine-readable {flushed, dropped, remaining}").option("--run", "detached worker: drain the queue silently (spawned by note/capture)").description("roll the local pending-note queue forward (re-POST queued saga writes); reports what landed").action((o) => runSagaFlush(o));
   saga.command("show").option("--quiet", "no-op silently when unconfigured/unreachable (SessionStart hook)").option("--latest-anywhere", "resume the newest saga across all repos (default: current repo)").description("print your resume block \u2014 current repo HEAD + project memory (where you left off)").action((opts) => runSagaShow(opts));
   saga.command("capture").option("--quiet", "capture silently (for the Stop hook)").description("per-turn deterministic capture (Stop hook): turn boundary + current sha + gated HEAD-update").action(async (opts) => {
+    if (!isOrgRepoRoot()) return;
     const hook = parseHookInput(await readStdin());
     if (hook.session_id) persistSession(hook.session_id);
     await postCapture({ event: "stop", id: (0, import_node_crypto3.randomUUID)(), source: "hook", sha: await gitOut(["rev-parse", "--short", "HEAD"]), surface: agentSurface() }, opts.quiet ?? false);
     await maybeSpawnHeadUpdate();
   });
   saga.command("session").option("--quiet", "silent (for the SessionStart hook)").description("persist the harness session id for this repo (SessionStart hook)").action(async () => {
+    if (!isOrgRepoRoot()) return;
     const hook = parseHookInput(await readStdin());
     if (hook.session_id) persistSession(hook.session_id);
   });
@@ -8230,16 +8237,16 @@ var import_node_child_process7 = require("node:child_process");
 
 // src/session-start.ts
 var import_node_fs13 = require("node:fs");
-var import_node_path11 = require("node:path");
+var import_node_path12 = require("node:path");
 
 // src/scratch-gc.ts
 var import_node_child_process6 = require("node:child_process");
 var import_node_fs12 = require("node:fs");
-var import_node_path10 = require("node:path");
+var import_node_path11 = require("node:path");
 
 // src/plan.ts
 var import_node_fs11 = require("node:fs");
-var import_node_path9 = require("node:path");
+var import_node_path10 = require("node:path");
 
 // src/frontmatter.ts
 function splitFrontmatter(content) {
@@ -8322,8 +8329,8 @@ function rankPlansByRelevance(plans, signals, opts = {}) {
 
 // src/plan.ts
 var PLANS_DIR = "plans";
-var META_FILE = (0, import_node_path9.join)(PLANS_DIR, ".plan-meta.json");
-var planPath = (slug) => (0, import_node_path9.join)(PLANS_DIR, `${slug}.md`);
+var META_FILE = (0, import_node_path10.join)(PLANS_DIR, ".plan-meta.json");
+var planPath = (slug) => (0, import_node_path10.join)(PLANS_DIR, `${slug}.md`);
 var metaKey = (project2, slug) => `${project2}/${slug}`;
 function parseMeta(raw) {
   if (!raw) return {};
@@ -8348,7 +8355,7 @@ function hashContent(s) {
 function staleHint(slug) {
   return `remote "${slug}" is newer \u2014 run \`mmi-cli northstar pull ${slug}\` first (your local is based on an older version), or re-push with \`--force\` to overwrite`;
 }
-var INDEX_FILE = (0, import_node_path9.join)(PLANS_DIR, ".index.json");
+var INDEX_FILE = (0, import_node_path10.join)(PLANS_DIR, ".index.json");
 var INDEX_TTL_MS = 6e4;
 function parseIndex(raw) {
   if (!raw) return null;
@@ -8377,7 +8384,7 @@ function mergeIndex(idx, scope, plans, now) {
   const mergedScope = idx.scope === null ? null : [.../* @__PURE__ */ new Set([...idx.scope, ...scope])];
   return { fetchedAt: now, scope: mergedScope, plans: [...kept, ...plans] };
 }
-var QUEUE_FILE = (0, import_node_path9.join)(PLANS_DIR, ".sync-queue.json");
+var QUEUE_FILE = (0, import_node_path10.join)(PLANS_DIR, ".sync-queue.json");
 var QUEUE_MAX_ATTEMPTS = 10;
 function isValidQueueEntry(e) {
   if (!e || typeof e !== "object") return false;
@@ -8498,8 +8505,8 @@ function dropQueued(deps, project2, slug) {
 }
 function parsePlanSlugFromPath(cwd, filePath) {
   const norm = (s) => s.replace(/\\/g, "/");
-  const cwdNorm = norm((0, import_node_path9.resolve)(cwd)).replace(/\/+$/, "");
-  const pathNorm = norm((0, import_node_path9.resolve)(filePath));
+  const cwdNorm = norm((0, import_node_path10.resolve)(cwd)).replace(/\/+$/, "");
+  const pathNorm = norm((0, import_node_path10.resolve)(filePath));
   const rel = pathNorm.startsWith(`${cwdNorm}/`) ? pathNorm.slice(cwdNorm.length + 1) : norm(filePath);
   const m = /^plans\/([A-Za-z0-9][A-Za-z0-9_-]*)\.md$/.exec(rel);
   return m ? m[1] : null;
@@ -9082,7 +9089,7 @@ var PLAN_ADVISORY_AGE_MS = 30 * 24 * 36e5;
 var ROOT_SCRATCH_STALE_MS = 24 * 36e5;
 var SCRATCH_GC_THROTTLE_MS = 24 * 36e5;
 function scratchGcThrottlePath(mmiRoot) {
-  return (0, import_node_path10.join)(mmiRoot, "head-ts", ".scratch-gc-last");
+  return (0, import_node_path11.join)(mmiRoot, "head-ts", ".scratch-gc-last");
 }
 function scratchGcDue(stampPath, now = Date.now(), read = import_node_fs12.readFileSync) {
   try {
@@ -9093,7 +9100,7 @@ function scratchGcDue(stampPath, now = Date.now(), read = import_node_fs12.readF
 }
 function markScratchGcRun(stampPath, now = Date.now()) {
   try {
-    (0, import_node_fs12.mkdirSync)((0, import_node_path10.dirname)(stampPath), { recursive: true });
+    (0, import_node_fs12.mkdirSync)((0, import_node_path11.dirname)(stampPath), { recursive: true });
     (0, import_node_fs12.writeFileSync)(stampPath, String(now), "utf8");
   } catch {
   }
@@ -9153,7 +9160,7 @@ function isTmpSidecar(name) {
 function planScratchGc(snap, now = Date.now()) {
   const candidates = [];
   const normalizePath = (p) => p.replace(/\\/g, "/");
-  const repoRoot = normalizePath((snap.repoRoot ?? (0, import_node_path10.dirname)(snap.mmiRoot)).replace(/[\\/]+$/, ""));
+  const repoRoot = normalizePath((snap.repoRoot ?? (0, import_node_path11.dirname)(snap.mmiRoot)).replace(/[\\/]+$/, ""));
   const mmiPaths = new Set(snap.mmiFiles.map((f) => normalizePath(f.path)));
   const headTsPrefix = `${snap.mmiRoot.replace(/[\\/]+$/, "")}/head-ts/`.replace(/\\/g, "/");
   const days = (ms) => `${Math.floor(ms / 864e5)}d`;
@@ -9202,7 +9209,7 @@ function planScratchGc(snap, now = Date.now()) {
       continue;
     }
     const orig = conflictCopyOriginal(f.name);
-    if (orig && CONFLICT_COPY_ALLOWLIST.has(orig) && mmiPaths.has(normalizePath((0, import_node_path10.join)(f.dir, orig))) && age > CONFLICT_COPY_STALE_MS) {
+    if (orig && CONFLICT_COPY_ALLOWLIST.has(orig) && mmiPaths.has(normalizePath((0, import_node_path11.join)(f.dir, orig))) && age > CONFLICT_COPY_STALE_MS) {
       add("conflict-copy", `cloud-sync conflict copy of ${orig} (${days(age)} old)`);
     }
   }
@@ -9272,7 +9279,7 @@ function syncedPlanMetaEntry(meta, project2, slug, hash) {
 }
 function readProject(repoRoot) {
   try {
-    const cfg = JSON.parse((0, import_node_fs12.readFileSync)((0, import_node_path10.join)(repoRoot, ".mmi", "config.json"), "utf8"));
+    const cfg = JSON.parse((0, import_node_fs12.readFileSync)((0, import_node_path11.join)(repoRoot, ".mmi", "config.json"), "utf8"));
     if (typeof cfg.project === "string" && cfg.project.trim()) return cfg.project.trim();
   } catch {
   }
@@ -9280,7 +9287,7 @@ function readProject(repoRoot) {
 }
 function readPlanMeta(plansRoot) {
   try {
-    return parseMeta((0, import_node_fs12.readFileSync)((0, import_node_path10.join)(plansRoot, ".plan-meta.json"), "utf8"));
+    return parseMeta((0, import_node_fs12.readFileSync)((0, import_node_path11.join)(plansRoot, ".plan-meta.json"), "utf8"));
   } catch {
     return null;
   }
@@ -9288,7 +9295,7 @@ function readPlanMeta(plansRoot) {
 function readSyncQueueSlugs(plansRoot) {
   let queueRaw;
   try {
-    queueRaw = (0, import_node_fs12.readFileSync)((0, import_node_path10.join)(plansRoot, ".sync-queue.json"), "utf8");
+    queueRaw = (0, import_node_fs12.readFileSync)((0, import_node_path11.join)(plansRoot, ".sync-queue.json"), "utf8");
   } catch (e) {
     const code = typeof e === "object" && e && "code" in e ? String(e.code ?? "") : "";
     return code === "ENOENT" || code === "ENOTDIR" ? /* @__PURE__ */ new Set() : null;
@@ -9303,8 +9310,8 @@ function readSyncQueueSlugs(plansRoot) {
 }
 function physicalPlanCandidateStillAllowed(candidatePath, repoAnchor, lstat = import_node_fs12.lstatSync) {
   const path2 = candidatePath.replace(/\\/g, "/").replace(/\/+$/, "");
-  const parent = (0, import_node_path10.dirname)(path2).replace(/\\/g, "/").replace(/\/+$/, "");
-  const name = (0, import_node_path10.basename)(path2);
+  const parent = (0, import_node_path11.dirname)(path2).replace(/\\/g, "/").replace(/\/+$/, "");
+  const name = (0, import_node_path11.basename)(path2);
   const plansDir = `${repoAnchor}/plans`;
   if (parent !== plansDir || !name.endsWith(".md")) return false;
   try {
@@ -9352,7 +9359,7 @@ function treeOlderThan(root, now, floor) {
     if (now - st.mtimeMs <= floor) return false;
     if (!st.isDirectory()) continue;
     for (const ent of (0, import_node_fs12.readdirSync)(current, { withFileTypes: true })) {
-      const child = (0, import_node_path10.join)(current, ent.name);
+      const child = (0, import_node_path11.join)(current, ent.name);
       if (isLinkLike(child, ent.isSymbolicLink())) return false;
       stack.push(child);
     }
@@ -9364,7 +9371,7 @@ function applyScratchGc(plan2, mmiRoot, now = Date.now()) {
   let repoAnchor;
   let anchor;
   try {
-    repoAnchor = (0, import_node_fs12.realpathSync)((0, import_node_path10.dirname)(mmiRoot)).replace(/\\/g, "/").replace(/\/+$/, "");
+    repoAnchor = (0, import_node_fs12.realpathSync)((0, import_node_path11.dirname)(mmiRoot)).replace(/\\/g, "/").replace(/\/+$/, "");
   } catch {
     return result;
   }
@@ -9406,7 +9413,7 @@ function applyScratchGc(plan2, mmiRoot, now = Date.now()) {
           continue;
         }
         const plansRoot = `${repoAnchor}/plans`;
-        const slug = (0, import_node_path10.basename)(c.path).replace(/\.md$/, "");
+        const slug = (0, import_node_path11.basename)(c.path).replace(/\.md$/, "");
         const pending = readSyncQueueSlugs(plansRoot);
         if (pending === null || pending.has(slug)) {
           result.skipped += 1;
@@ -9448,15 +9455,15 @@ function pathContained(real, anchor) {
 }
 function rootCandidateStillAllowed(c, repoAnchor) {
   const path2 = c.path.replace(/\\/g, "/").replace(/\/+$/, "");
-  const parent = (0, import_node_path10.dirname)(path2).replace(/\\/g, "/").replace(/\/+$/, "");
-  const name = (0, import_node_path10.basename)(path2);
+  const parent = (0, import_node_path11.dirname)(path2).replace(/\\/g, "/").replace(/\/+$/, "");
+  const name = (0, import_node_path11.basename)(path2);
   if (c.family === "scratch-dir") return c.kind === "dir" && parent === repoAnchor && ROOT_SCRATCH_DIRS.has(name);
   if (c.family === "scratch-file") return (c.kind ?? "file") === "file" && parent === repoAnchor && ROOT_SCRATCH_FILE_PREFIXES.some((prefix) => name.startsWith(prefix));
   if (c.family === "plan") return physicalPlanCandidateStillAllowed(c.path, repoAnchor);
   return false;
 }
 function trackedPathStatus(c, repoAnchor) {
-  const rel = (0, import_node_path10.relative)(repoAnchor, c.path).replace(/\\/g, "/");
+  const rel = (0, import_node_path11.relative)(repoAnchor, c.path).replace(/\\/g, "/");
   if (!rel || rel.startsWith("../") || rel === "..") return null;
   const gitPath = c.kind === "dir" ? `${rel.replace(/\/+$/, "")}/` : rel;
   try {
@@ -9487,7 +9494,7 @@ function rootScratchDirSnapshot(root, readdir, stat) {
     while (stack.length) {
       const current = stack.pop();
       for (const ent of readdir(current, { withFileTypes: true })) {
-        const child = (0, import_node_path10.join)(current, ent.name);
+        const child = (0, import_node_path11.join)(current, ent.name);
         if (ent.isSymbolicLink?.()) return null;
         try {
           (0, import_node_fs12.readlinkSync)(child);
@@ -9509,8 +9516,8 @@ function collectScratchSnapshot(repoRoot, deps = {}) {
   const readdir = deps.readdir ?? import_node_fs12.readdirSync;
   const stat = deps.stat ?? import_node_fs12.statSync;
   const readFile7 = deps.readFile ?? import_node_fs12.readFileSync;
-  const mmiRoot = (0, import_node_path10.join)(repoRoot, ".mmi");
-  const plansRoot = (0, import_node_path10.join)(repoRoot, "plans");
+  const mmiRoot = (0, import_node_path11.join)(repoRoot, ".mmi");
+  const plansRoot = (0, import_node_path11.join)(repoRoot, "plans");
   const rootScratchFiles = [];
   try {
     for (const ent of readdir(repoRoot, { withFileTypes: true })) {
@@ -9519,7 +9526,7 @@ function collectScratchSnapshot(repoRoot, deps = {}) {
       if (!(isDir && ROOT_SCRATCH_DIRS.has(ent.name)) && !(isFile && ROOT_SCRATCH_FILE_PREFIXES.some((prefix) => ent.name.startsWith(prefix)))) {
         continue;
       }
-      const full = (0, import_node_path10.join)(repoRoot, ent.name);
+      const full = (0, import_node_path11.join)(repoRoot, ent.name);
       try {
         if (isDir) {
           const snap = rootScratchDirSnapshot(full, readdir, stat);
@@ -9538,7 +9545,7 @@ function collectScratchSnapshot(repoRoot, deps = {}) {
     for (const ent of readdir(mmiRoot, { recursive: true, withFileTypes: true })) {
       if (!ent.isFile()) continue;
       const dir = ent.parentPath ?? ent.path ?? mmiRoot;
-      const full = (0, import_node_path10.join)(dir, ent.name);
+      const full = (0, import_node_path11.join)(dir, ent.name);
       try {
         const st = stat(full);
         mmiFiles.push({ path: full, dir, name: ent.name, mtimeMs: st.mtimeMs, bytes: st.size });
@@ -9551,7 +9558,7 @@ function collectScratchSnapshot(repoRoot, deps = {}) {
   try {
     for (const ent of readdir(plansRoot, { withFileTypes: true })) {
       if (!ent.isFile() || !ent.name.endsWith(".md")) continue;
-      const full = (0, import_node_path10.join)(plansRoot, ent.name);
+      const full = (0, import_node_path11.join)(plansRoot, ent.name);
       try {
         const st = stat(full);
         const raw = readFile7(full, "utf8");
@@ -9563,20 +9570,20 @@ function collectScratchSnapshot(repoRoot, deps = {}) {
   }
   let planMeta = {};
   try {
-    planMeta = parseMeta(readFile7((0, import_node_path10.join)(plansRoot, ".plan-meta.json"), "utf8"));
+    planMeta = parseMeta(readFile7((0, import_node_path11.join)(plansRoot, ".plan-meta.json"), "utf8"));
   } catch {
     planMeta = {};
   }
   let project2;
   try {
-    const cfg = JSON.parse(readFile7((0, import_node_path10.join)(repoRoot, ".mmi", "config.json"), "utf8"));
+    const cfg = JSON.parse(readFile7((0, import_node_path11.join)(repoRoot, ".mmi", "config.json"), "utf8"));
     if (typeof cfg.project === "string" && cfg.project.trim()) project2 = cfg.project.trim();
   } catch {
   }
   const syncQueueSlugs = (() => {
     let queueRaw;
     try {
-      queueRaw = readFile7((0, import_node_path10.join)(plansRoot, ".sync-queue.json"), "utf8");
+      queueRaw = readFile7((0, import_node_path11.join)(plansRoot, ".sync-queue.json"), "utf8");
     } catch (e) {
       const code = typeof e === "object" && e && "code" in e ? String(e.code ?? "") : "";
       return code === "ENOENT" || code === "ENOTDIR" ? /* @__PURE__ */ new Set() : null;
@@ -9649,23 +9656,23 @@ function spawnDetachedSelf(args, deps) {
   }
 }
 function isInsideRepoSubdir(cwd, exists = import_node_fs13.existsSync) {
-  if (exists((0, import_node_path11.join)(cwd, ".git"))) return false;
+  if (exists((0, import_node_path12.join)(cwd, ".git"))) return false;
   let dir = cwd;
   for (; ; ) {
-    const parent = (0, import_node_path11.dirname)(dir);
+    const parent = (0, import_node_path12.dirname)(dir);
     if (parent === dir) return false;
-    if (exists((0, import_node_path11.join)(parent, ".git"))) return true;
+    if (exists((0, import_node_path12.join)(parent, ".git"))) return true;
     dir = parent;
   }
 }
 function planStoreLines(cwd) {
   const mdFiles = (dir, minSize = 0) => {
-    const p = (0, import_node_path11.join)(cwd, dir);
+    const p = (0, import_node_path12.join)(cwd, dir);
     if (!(0, import_node_fs13.existsSync)(p)) return [];
     try {
       return (0, import_node_fs13.readdirSync)(p).filter((f) => f.toLowerCase().endsWith(".md")).filter((f) => {
         try {
-          return (0, import_node_fs13.statSync)((0, import_node_path11.join)(p, f)).size >= minSize;
+          return (0, import_node_fs13.statSync)((0, import_node_path12.join)(p, f)).size >= minSize;
         } catch {
           return false;
         }
@@ -9686,7 +9693,7 @@ function planStoreLines(cwd) {
 function scratchGcLines(cwd, env = process.env, now = Date.now()) {
   if (env.MMI_NO_AUTO_GC) return [];
   try {
-    const stamp = scratchGcThrottlePath((0, import_node_path11.join)(cwd, ".mmi"));
+    const stamp = scratchGcThrottlePath((0, import_node_path12.join)(cwd, ".mmi"));
     if (!scratchGcDue(stamp, now)) return [];
     const run = executeScratchGc(cwd, { apply: true }, now);
     markScratchGcRun(stamp, now);
@@ -9879,8 +9886,8 @@ function registerCoopCommands(program3) {
 // src/throttle-commands.ts
 var import_node_child_process8 = require("node:child_process");
 var import_node_fs14 = require("node:fs");
-var import_node_path12 = require("node:path");
-var THROTTLE_TRACE_REL = (0, import_node_path12.join)(".mmi", "throttle", "trace.jsonl");
+var import_node_path13 = require("node:path");
+var THROTTLE_TRACE_REL = (0, import_node_path13.join)(".mmi", "throttle", "trace.jsonl");
 function resolveRepoGitRoot(cwd = process.cwd()) {
   try {
     const root = (0, import_node_child_process8.execFileSync)("git", ["-C", cwd, "rev-parse", "--show-toplevel"], {
@@ -9893,7 +9900,7 @@ function resolveRepoGitRoot(cwd = process.cwd()) {
   }
 }
 function resolveThrottleTracePath(cwd = process.cwd()) {
-  return (0, import_node_path12.join)(resolveRepoGitRoot(cwd), THROTTLE_TRACE_REL);
+  return (0, import_node_path13.join)(resolveRepoGitRoot(cwd), THROTTLE_TRACE_REL);
 }
 function resolveModeFromEnv() {
   const v = String(process.env.MMI_THROTTLE_MODE ?? "block").trim().toLowerCase();
@@ -10950,11 +10957,11 @@ function ghError(e) {
 
 // src/board-slice-cache.ts
 var import_node_fs15 = require("node:fs");
-var import_node_path13 = require("node:path");
-var BOARD_SLICE_CACHE_FILE = (0, import_node_path13.join)(".mmi", "board-slice.json");
+var import_node_path14 = require("node:path");
+var BOARD_SLICE_CACHE_FILE = (0, import_node_path14.join)(".mmi", "board-slice.json");
 var BOARD_SLICE_CACHE_TTL_MS = 10 * 60 * 1e3;
 function boardSliceCachePath(cwd) {
-  return (0, import_node_path13.join)(cwd, BOARD_SLICE_CACHE_FILE);
+  return (0, import_node_path14.join)(cwd, BOARD_SLICE_CACHE_FILE);
 }
 function readCachedBoardSlice(cwd) {
   try {
@@ -10969,7 +10976,7 @@ function writeCachedBoardSlice(cwd, slice) {
   const path2 = boardSliceCachePath(cwd);
   const tmp = `${path2}.${process.pid}.tmp`;
   try {
-    (0, import_node_fs15.mkdirSync)((0, import_node_path13.dirname)(path2), { recursive: true });
+    (0, import_node_fs15.mkdirSync)((0, import_node_path14.dirname)(path2), { recursive: true });
     (0, import_node_fs15.writeFileSync)(tmp, JSON.stringify(slice));
     (0, import_node_fs15.renameSync)(tmp, path2);
   } catch {
@@ -11103,7 +11110,7 @@ async function refreshBoardSliceCache(deps) {
 
 // src/worktree.ts
 var import_node_fs16 = require("node:fs");
-var import_node_path14 = require("node:path");
+var import_node_path15 = require("node:path");
 var LOCAL_ONLY_FILES = [".claude/settings.local.json"];
 var PKG = "package.json";
 var LOCKFILE = "package-lock.json";
@@ -11133,12 +11140,12 @@ var realFsProbe = {
 };
 function scanInstallDirs(root, fs2 = realFsProbe) {
   const factsFor = (dir) => {
-    const abs = dir ? (0, import_node_path14.join)(root, dir) : root;
+    const abs = dir ? (0, import_node_path15.join)(root, dir) : root;
     return {
       dir,
-      hasPackageJson: fs2.isFile((0, import_node_path14.join)(abs, PKG)),
-      hasLockfile: fs2.isFile((0, import_node_path14.join)(abs, LOCKFILE)),
-      hasNodeModules: fs2.isDir((0, import_node_path14.join)(abs, NODE_MODULES))
+      hasPackageJson: fs2.isFile((0, import_node_path15.join)(abs, PKG)),
+      hasLockfile: fs2.isFile((0, import_node_path15.join)(abs, LOCKFILE)),
+      hasNodeModules: fs2.isDir((0, import_node_path15.join)(abs, NODE_MODULES))
     };
   };
   const children = fs2.listDirs(root).filter((name) => name !== NODE_MODULES && name !== ".git");
@@ -11148,7 +11155,7 @@ function npmInstallTargets(dirs) {
   return dirs.filter((d) => d.hasPackageJson && !d.hasNodeModules).map((d) => ({ dir: d.dir, command: d.hasLockfile ? "npm ci" : "npm install" }));
 }
 function isLinkedWorktree(root, fs2 = realFsProbe) {
-  return fs2.isFile((0, import_node_path14.join)(root, ".git"));
+  return fs2.isFile((0, import_node_path15.join)(root, ".git"));
 }
 function worktreeAutoProvisionBanner(root, fs2 = realFsProbe) {
   if (!isLinkedWorktree(root, fs2)) return null;
@@ -11158,7 +11165,7 @@ function worktreeAutoProvisionBanner(root, fs2 = realFsProbe) {
   return `[worktree] provisioning tooling in the background (deps in ${where} + local config) \u2014 \`mmi-cli worktree setup\` to redo`;
 }
 function defaultCopyFile(from, to) {
-  (0, import_node_fs16.mkdirSync)((0, import_node_path14.dirname)(to), { recursive: true });
+  (0, import_node_fs16.mkdirSync)((0, import_node_path15.dirname)(to), { recursive: true });
   (0, import_node_fs16.copyFileSync)(from, to);
 }
 async function provisionWorktree(worktreeRoot, deps) {
@@ -11171,7 +11178,7 @@ async function provisionWorktree(worktreeRoot, deps) {
   const skippedInstall = allDirs.filter((d) => d.hasPackageJson && d.hasNodeModules).map((d) => d.dir);
   const installed = [];
   for (const target of targets) {
-    const cwd = target.dir ? (0, import_node_path14.join)(worktreeRoot, target.dir) : worktreeRoot;
+    const cwd = target.dir ? (0, import_node_path15.join)(worktreeRoot, target.dir) : worktreeRoot;
     log(`installing deps: ${target.command} in ${target.dir || "."}`);
     await deps.runInstall(target.command, cwd);
     installed.push(target);
@@ -11180,7 +11187,7 @@ async function provisionWorktree(worktreeRoot, deps) {
   const copySkipped = [];
   const primary = await deps.primaryCheckout();
   for (const rel of LOCAL_ONLY_FILES) {
-    const dest = (0, import_node_path14.join)(worktreeRoot, rel);
+    const dest = (0, import_node_path15.join)(worktreeRoot, rel);
     if (fs2.isFile(dest)) {
       copySkipped.push({ file: rel, reason: "already-present" });
       continue;
@@ -11189,11 +11196,11 @@ async function provisionWorktree(worktreeRoot, deps) {
       copySkipped.push({ file: rel, reason: "no-primary" });
       continue;
     }
-    if (!fs2.isFile((0, import_node_path14.join)(primary, rel))) {
+    if (!fs2.isFile((0, import_node_path15.join)(primary, rel))) {
       copySkipped.push({ file: rel, reason: "absent-in-primary" });
       continue;
     }
-    copyFile((0, import_node_path14.join)(primary, rel), dest);
+    copyFile((0, import_node_path15.join)(primary, rel), dest);
     copied.push(rel);
     log(`copied local config: ${rel}`);
   }
@@ -11201,7 +11208,7 @@ async function provisionWorktree(worktreeRoot, deps) {
 }
 function defaultWorktreePath(repoRoot, branch) {
   const safe = branch.replace(/[/\\]+/g, "-");
-  return (0, import_node_path14.join)((0, import_node_path14.dirname)(repoRoot), "mmi-worktrees", safe);
+  return (0, import_node_path15.join)((0, import_node_path15.dirname)(repoRoot), "mmi-worktrees", safe);
 }
 
 // src/northstar-context.ts
@@ -11343,7 +11350,7 @@ function whoamiLine(report) {
 }
 
 // src/index.ts
-var import_node_path23 = require("node:path");
+var import_node_path24 = require("node:path");
 
 // src/merge-ci-policy.ts
 function resolveMergeCiPolicy(input) {
@@ -12526,7 +12533,7 @@ async function resolveAutoAddBoardAttach(client, cfg, selector, priority, warn =
 // src/gh-create.ts
 var import_promises5 = require("node:fs/promises");
 var import_node_os3 = require("node:os");
-var import_node_path15 = require("node:path");
+var import_node_path16 = require("node:path");
 var import_node_crypto5 = require("node:crypto");
 var ISSUE_TYPES = ["bug", "feature", "task"];
 var GH_MUTATION_TIMEOUT_MS = 12e4;
@@ -12567,7 +12574,7 @@ async function bodyArgsViaFile(args, deps = {}) {
   } };
   const write = deps.write ?? import_promises5.writeFile;
   const remove = deps.remove ?? import_promises5.unlink;
-  const file = (0, import_node_path15.join)(deps.dir ?? (0, import_node_os3.tmpdir)(), `mmi-gh-body-${process.pid}-${(0, import_node_crypto5.randomBytes)(4).toString("hex")}.md`);
+  const file = (0, import_node_path16.join)(deps.dir ?? (0, import_node_os3.tmpdir)(), `mmi-gh-body-${process.pid}-${(0, import_node_crypto5.randomBytes)(4).toString("hex")}.md`);
   await write(file, args[i + 1], "utf8");
   return {
     args: [...args.slice(0, i), "--body-file", file, ...args.slice(i + 2)],
@@ -13679,7 +13686,7 @@ async function runStageLiveDown(deps, t) {
 
 // src/design-system.ts
 var import_node_fs17 = require("node:fs");
-var import_node_path16 = require("node:path");
+var import_node_path17 = require("node:path");
 var UI_PACKAGE_CANDIDATES = ["@mutmutco/ui-dashboard", "@mutmutco/ui", "@mutmutco/theme"];
 var DESIGN_SYSTEM_VERSION_LABEL = "@mutmutco design-system npm package (vs @latest)";
 function dashboardConsumerRegistryFix(error) {
@@ -13734,11 +13741,11 @@ function readJsonFile(path2) {
   }
 }
 function isUiFactoryCheckout(root) {
-  const pkg = readJsonFile((0, import_node_path16.join)(root, "package.json"));
+  const pkg = readJsonFile((0, import_node_path17.join)(root, "package.json"));
   return pkg?.name === "mmd-ui" && pkg?.private === true;
 }
 function resolveDeclaredUiPackage(root) {
-  const pkg = readJsonFile((0, import_node_path16.join)(root, "package.json"));
+  const pkg = readJsonFile((0, import_node_path17.join)(root, "package.json"));
   if (!pkg) return void 0;
   const deps = { ...pkg.dependencies, ...pkg.devDependencies };
   for (const name of UI_PACKAGE_CANDIDATES) {
@@ -13748,7 +13755,7 @@ function resolveDeclaredUiPackage(root) {
   return void 0;
 }
 function readLockfileInstalledVersion(root, packageName) {
-  const lockPath = (0, import_node_path16.join)(root, "package-lock.json");
+  const lockPath = (0, import_node_path17.join)(root, "package-lock.json");
   if (!(0, import_node_fs17.existsSync)(lockPath)) return void 0;
   const lock = readJsonFile(lockPath);
   const node = lock?.packages?.[`node_modules/${packageName}`];
@@ -13779,7 +13786,7 @@ function designSystemSnapshot(root) {
 // src/design-system-registry.ts
 var import_node_crypto6 = require("node:crypto");
 var import_node_fs19 = require("node:fs");
-var import_node_path17 = require("node:path");
+var import_node_path18 = require("node:path");
 
 // src/atomic-write.ts
 var import_node_fs18 = require("node:fs");
@@ -13803,7 +13810,7 @@ function readJsonFile2(path2) {
   }
 }
 function readComponentsJson(root) {
-  return readJsonFile2((0, import_node_path17.join)(root, "components.json"));
+  return readJsonFile2((0, import_node_path18.join)(root, "components.json"));
 }
 function hasMutmutcoRegistry(root) {
   const url = readComponentsJson(root)?.registries?.["@mutmutco"];
@@ -13811,7 +13818,7 @@ function hasMutmutcoRegistry(root) {
 }
 function resolveCacheDir(root) {
   const custom = readComponentsJson(root)?.mmi?.cacheDir;
-  return (0, import_node_path17.join)(root, custom ?? DESIGN_SYSTEM_CACHE_DIR);
+  return (0, import_node_path18.join)(root, custom ?? DESIGN_SYSTEM_CACHE_DIR);
 }
 function resolveRegistryUrlTemplate(root) {
   return readComponentsJson(root)?.registries?.["@mutmutco"];
@@ -13820,7 +13827,7 @@ function registryItemUrl(template, name) {
   return template.replace("{name}", name);
 }
 function readDesignSystemManifest(root) {
-  const raw = readJsonFile2((0, import_node_path17.join)(root, DESIGN_SYSTEM_MANIFEST_PATH));
+  const raw = readJsonFile2((0, import_node_path18.join)(root, DESIGN_SYSTEM_MANIFEST_PATH));
   if (!raw || !Array.isArray(raw.components)) return void 0;
   return raw;
 }
@@ -13836,7 +13843,7 @@ function scanCachedComponentNames(cacheDir) {
   const names = /* @__PURE__ */ new Set();
   const walk = (dir) => {
     for (const ent of (0, import_node_fs19.readdirSync)(dir, { withFileTypes: true })) {
-      const p = (0, import_node_path17.join)(dir, ent.name);
+      const p = (0, import_node_path18.join)(dir, ent.name);
       if (ent.isDirectory()) walk(p);
       else if (ent.isFile() && /\.(tsx?|jsx?)$/.test(ent.name)) {
         names.add(ent.name.replace(/\.(tsx|ts|jsx|js)$/, ""));
@@ -13925,7 +13932,7 @@ async function gatherRegistryComponentsState(root, targetVersion, deps) {
     let componentStale = false;
     for (const file of item.files) {
       if (!file.target || file.content == null) continue;
-      const cachePath = (0, import_node_path17.join)(cacheDir, cacheRelativePath(file.target));
+      const cachePath = (0, import_node_path18.join)(cacheDir, cacheRelativePath(file.target));
       if (!(0, import_node_fs19.existsSync)(cachePath)) {
         componentStale = true;
         break;
@@ -13941,7 +13948,7 @@ async function gatherRegistryComponentsState(root, targetVersion, deps) {
       }
     }
     if (componentStale) {
-      if ((0, import_node_fs19.existsSync)((0, import_node_path17.join)(cacheDir, "ui", `${name}.tsx`)) || (0, import_node_fs19.existsSync)((0, import_node_path17.join)(cacheDir, `${name}.tsx`))) {
+      if ((0, import_node_fs19.existsSync)((0, import_node_path18.join)(cacheDir, "ui", `${name}.tsx`)) || (0, import_node_fs19.existsSync)((0, import_node_path18.join)(cacheDir, `${name}.tsx`))) {
         stale.push(name);
       } else {
         missing.push(name);
@@ -13969,15 +13976,15 @@ async function applyRegistryComponentsSync(root, components, targetVersion, log,
     if (!item) return { ok: false };
     for (const file of item.files) {
       if (!file.target || file.content == null) continue;
-      const outPath = (0, import_node_path17.join)(cacheDir, cacheRelativePath(file.target));
-      deps.mkdir((0, import_node_path17.dirname)(outPath));
+      const outPath = (0, import_node_path18.join)(cacheDir, cacheRelativePath(file.target));
+      deps.mkdir((0, import_node_path18.dirname)(outPath));
       const body = file.content.endsWith("\n") ? file.content : `${file.content}
 `;
       deps.writeFile(outPath, body);
     }
   }
-  const manifestPath = (0, import_node_path17.join)(root, DESIGN_SYSTEM_MANIFEST_PATH);
-  deps.mkdir((0, import_node_path17.dirname)(manifestPath));
+  const manifestPath = (0, import_node_path18.join)(root, DESIGN_SYSTEM_MANIFEST_PATH);
+  deps.mkdir((0, import_node_path18.dirname)(manifestPath));
   const manifest = {
     version: targetVersion,
     syncedAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -14746,7 +14753,7 @@ async function announceRelease(deps, args) {
 
 // src/port-registry.ts
 var import_node_fs20 = require("node:fs");
-var import_node_path18 = require("node:path");
+var import_node_path19 = require("node:path");
 
 // ../infra/port-geometry.mjs
 var PORT_BLOCK = 100;
@@ -14799,18 +14806,18 @@ function existingPortRange(repo, registry2) {
   return registry2[repo] ?? null;
 }
 function portRangeInfraAt(root, source) {
-  const registryPath = (0, import_node_path18.join)(root, "infra", "port-ranges.json");
-  const ddbScriptPath = (0, import_node_path18.join)(root, "infra", "port-ddb.mjs");
+  const registryPath = (0, import_node_path19.join)(root, "infra", "port-ranges.json");
+  const ddbScriptPath = (0, import_node_path19.join)(root, "infra", "port-ddb.mjs");
   if (!(0, import_node_fs20.existsSync)(registryPath) || !(0, import_node_fs20.existsSync)(ddbScriptPath)) return null;
   return { root, source, registryPath, ddbScriptPath };
 }
 function resolvePortRangeInfra(cwd) {
   const direct = portRangeInfraAt(cwd, "cwd");
   if (direct) return direct;
-  for (let dir = cwd; ; dir = (0, import_node_path18.dirname)(dir)) {
-    const sibling = portRangeInfraAt((0, import_node_path18.join)(dir, "MMI-Hub"), "sibling-hub");
+  for (let dir = cwd; ; dir = (0, import_node_path19.dirname)(dir)) {
+    const sibling = portRangeInfraAt((0, import_node_path19.join)(dir, "MMI-Hub"), "sibling-hub");
     if (sibling) return sibling;
-    const parent = (0, import_node_path18.dirname)(dir);
+    const parent = (0, import_node_path19.dirname)(dir);
     if (parent === dir) return null;
   }
 }
@@ -16075,7 +16082,7 @@ ${section}`.trim();
 }
 
 // src/project-set.ts
-var UNSET_KEYS = ["oauth", "requiredRuntimeSecrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "dashboard", "fofuEnabled", "consumesDesignSystem", "ci", "requiredChecks", "gate"];
+var UNSET_KEYS = ["oauth", "requiredRuntimeSecrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "dsManifestPath", "dashboard", "fofuEnabled", "consumesDesignSystem", "ci", "requiredChecks", "gate"];
 var UNSET_KEY_SET = new Set(UNSET_KEYS);
 var RUNTIME_SECRET_STAGES = ["dev", "rc", "main"];
 function parseRuntimeSecretsVar(raw) {
@@ -16261,6 +16268,16 @@ function parsePublishDirVar(raw) {
   }
   return v;
 }
+function parseDsManifestPathVar(raw) {
+  const v = raw.trim();
+  if (v === "" || !/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/.test(v) || /(^|\/)\.\.(\/|$)/.test(v)) {
+    throw new Error('project set: dsManifestPath must be a safe relative path \u2014 no leading slash, no ".." segment');
+  }
+  if (v !== "package.json" && !v.endsWith("/package.json")) {
+    throw new Error("project set: dsManifestPath must point to a package.json, e.g. web/package.json");
+  }
+  return v;
+}
 function parseRequiredChecksVar(raw) {
   let parsed;
   try {
@@ -16312,6 +16329,7 @@ var SETTABLE_VAR_KEYS = [
   "oauth",
   "publishRequired",
   "publishDir",
+  "dsManifestPath",
   "dashboard",
   "fofuEnabled",
   "consumesDesignSystem",
@@ -16332,6 +16350,7 @@ var SETTABLE_VAR_HINTS = {
   projectNumber: "numeric",
   publishRequired: "true|false",
   publishDir: "relative subpath, e.g. packages/ui",
+  dsManifestPath: "relative path to a package.json, e.g. web/package.json",
   dashboard: "true|false",
   fofuEnabled: "true|false",
   consumesDesignSystem: '"fofu"',
@@ -16416,6 +16435,8 @@ function buildProjectSetPatch(input) {
       patch[key] = parseConsumesDesignSystemVar(raw);
     } else if (key === "publishDir") {
       patch[key] = parsePublishDirVar(raw);
+    } else if (key === "dsManifestPath") {
+      patch[key] = parseDsManifestPathVar(raw);
     } else if (key === "ci") {
       if (raw !== "none") throw new Error('project set: ci must be "none" (or use --unset ci to require checks)');
       patch[key] = raw;
@@ -17574,14 +17595,14 @@ function authorizeBodyHasMismatch(body) {
 // src/doctor-run.ts
 var import_node_fs26 = require("node:fs");
 var import_promises7 = require("node:fs/promises");
-var import_node_path22 = require("node:path");
+var import_node_path23 = require("node:path");
 var import_node_os5 = require("node:os");
 
 // src/cursor-plugin-seed.ts
 var import_node_child_process12 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
 var import_node_os4 = require("node:os");
-var import_node_path19 = require("node:path");
+var import_node_path20 = require("node:path");
 var import_node_util7 = require("node:util");
 function isSemverVersion(v) {
   return typeof v === "string" && /^v?\d+\.\d+\.\d+/.test(v.trim());
@@ -17598,13 +17619,13 @@ function ghReleaseTarballApiArgs(tag) {
 }
 function cursorUserGlobalStatePath() {
   if (process.platform === "win32") {
-    const base = process.env.APPDATA || (0, import_node_path19.join)((0, import_node_os4.homedir)(), "AppData", "Roaming");
-    return (0, import_node_path19.join)(base, "Cursor", "User", "globalStorage", "state.vscdb");
+    const base = process.env.APPDATA || (0, import_node_path20.join)((0, import_node_os4.homedir)(), "AppData", "Roaming");
+    return (0, import_node_path20.join)(base, "Cursor", "User", "globalStorage", "state.vscdb");
   }
   if (process.platform === "darwin") {
-    return (0, import_node_path19.join)((0, import_node_os4.homedir)(), "Library", "Application Support", "Cursor", "User", "globalStorage", "state.vscdb");
+    return (0, import_node_path20.join)((0, import_node_os4.homedir)(), "Library", "Application Support", "Cursor", "User", "globalStorage", "state.vscdb");
   }
-  return (0, import_node_path19.join)((0, import_node_os4.homedir)(), ".config", "Cursor", "User", "globalStorage", "state.vscdb");
+  return (0, import_node_path20.join)((0, import_node_os4.homedir)(), ".config", "Cursor", "User", "globalStorage", "state.vscdb");
 }
 async function readCursorThirdPartyExtensibilityEnabled(execFileP5) {
   const dbPath = cursorUserGlobalStatePath();
@@ -17624,7 +17645,7 @@ async function readCursorThirdPartyExtensibilityEnabled(execFileP5) {
 function syncDirContents(src, dest) {
   (0, import_node_fs22.mkdirSync)(dest, { recursive: true });
   for (const name of (0, import_node_fs22.readdirSync)(dest)) {
-    (0, import_node_fs22.rmSync)((0, import_node_path19.join)(dest, name), { recursive: true, force: true });
+    (0, import_node_fs22.rmSync)((0, import_node_path20.join)(dest, name), { recursive: true, force: true });
   }
   (0, import_node_fs22.cpSync)(src, dest, { recursive: true });
 }
@@ -17632,21 +17653,21 @@ function releaseTag(releasedVersion) {
   return releasedVersion.startsWith("v") ? releasedVersion : `v${releasedVersion}`;
 }
 async function extractPluginMmiFromHubCheckout(hubCheckout, tag, tmpRoot, execFileP5) {
-  const tarFile = (0, import_node_path19.join)(tmpRoot, "archive.tar");
+  const tarFile = (0, import_node_path20.join)(tmpRoot, "archive.tar");
   try {
     await execFileP5("git", gitFetchReleaseTagArgs(hubCheckout, tag), { timeout: 6e4 });
     await execFileP5("git", ["-C", hubCheckout, "archive", "--format=tar", `--output=${tarFile}`, tag, "plugins/mmi"], {
       timeout: 6e4
     });
     await execFileP5("tar", ["-xf", tarFile, "-C", tmpRoot], { timeout: 6e4 });
-    const pluginMmi = (0, import_node_path19.join)(tmpRoot, "plugins", "mmi");
-    return (0, import_node_fs22.existsSync)((0, import_node_path19.join)(pluginMmi, PLUGIN_JSON_REL)) ? pluginMmi : void 0;
+    const pluginMmi = (0, import_node_path20.join)(tmpRoot, "plugins", "mmi");
+    return (0, import_node_fs22.existsSync)((0, import_node_path20.join)(pluginMmi, PLUGIN_JSON_REL)) ? pluginMmi : void 0;
   } catch {
     return void 0;
   }
 }
 async function downloadPluginMmiViaGh(tag, tmpRoot) {
-  const tarPath = (0, import_node_path19.join)(tmpRoot, "repo.tgz");
+  const tarPath = (0, import_node_path20.join)(tmpRoot, "repo.tgz");
   try {
     (0, import_node_fs22.mkdirSync)(tmpRoot, { recursive: true });
     const { stdout } = await execFileBuffer("gh", ghReleaseTarballApiArgs(tag), {
@@ -17659,8 +17680,8 @@ async function downloadPluginMmiViaGh(tag, tmpRoot) {
     await execFileBuffer("tar", ["-xzf", tarPath, "-C", tmpRoot], { timeout: 12e4, windowsHide: true });
     const top = (0, import_node_fs22.readdirSync)(tmpRoot).find((entry) => entry !== "repo.tgz");
     if (!top) return void 0;
-    const pluginMmi = (0, import_node_path19.join)(tmpRoot, top, "plugins", "mmi");
-    return (0, import_node_fs22.existsSync)((0, import_node_path19.join)(pluginMmi, PLUGIN_JSON_REL)) ? pluginMmi : void 0;
+    const pluginMmi = (0, import_node_path20.join)(tmpRoot, top, "plugins", "mmi");
+    return (0, import_node_fs22.existsSync)((0, import_node_path20.join)(pluginMmi, PLUGIN_JSON_REL)) ? pluginMmi : void 0;
   } catch {
     return void 0;
   }
@@ -17672,7 +17693,7 @@ async function resolvePluginMmiSource(releasedVersion, hubCheckout, tmpRoot, exe
     const fromHub = await extractPluginMmiFromHubCheckout(hubCheckout, tag, tmpRoot, execFileP5);
     if (fromHub) return fromHub;
   }
-  return downloadPluginMmiViaGh(tag, (0, import_node_path19.join)(tmpRoot, "gh"));
+  return downloadPluginMmiViaGh(tag, (0, import_node_path20.join)(tmpRoot, "gh"));
 }
 function cursorPluginPinsNeedingSeed(pins, releasedVersion) {
   if (!isSemverVersion(releasedVersion)) return pins.filter((pin) => !pin.hasPluginJson || !pin.hasHooksJson || pin.isEmpty);
@@ -18520,7 +18541,7 @@ function buildCursorPluginInstallCheck(input) {
       };
     }
   }
-  if (input.surface === "cursor" && isSemverVersion2(input.releasedVersion) && input.pins.some((pin) => isSemverVersion2(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0)) {
+  if (input.cacheRootExists && isSemverVersion2(input.releasedVersion) && input.pins.some((pin) => isSemverVersion2(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0)) {
     const stale = input.pins.filter((pin) => isSemverVersion2(pin.version) && compareVersions(pin.version, input.releasedVersion) < 0).map((pin) => `${pin.version} at ${pin.name}`).join(", ");
     return {
       ...base,
@@ -18700,12 +18721,34 @@ function doctorHealPlan(input) {
   const versionUpdate = versionAutoUpdateAction(input.versionReport, input.hasPluginRoot);
   const pluginReinstall = input.isOrgRepo && !input.installedVersionCheck.ok && (input.surface === "claude-cli" || input.surface === "claude-vscode" || input.surface === "codex") && Boolean(input.installedVersionCheck.staleSurfaces?.length);
   const legacyPluginMigration = input.isOrgRepo && !input.legacyPluginCheck.ok;
-  const needsEagerHeal = versionUpdate !== "none" || pluginReinstall || legacyPluginMigration;
-  return { needsEagerHeal, versionUpdate, pluginReinstall, legacyPluginMigration };
+  const opencodeReinstall = input.isOrgRepo && Boolean(input.opencodeAdapterStale);
+  const cursorReseed = input.isOrgRepo && Boolean(input.cursorCacheStale);
+  const needsEagerHeal = versionUpdate !== "none" || pluginReinstall || legacyPluginMigration || opencodeReinstall || cursorReseed;
+  return { needsEagerHeal, versionUpdate, pluginReinstall, legacyPluginMigration, opencodeReinstall, cursorReseed };
 }
 function doctorPreflightDoneLine(surface) {
   return `\u21BB MMI tooling updated \u2014 ${reloadAction(surface)} to load changes`;
 }
+function selfUpdateHaltLine(report) {
+  const to = report.releasedVersion ?? "latest";
+  return `\u21BB mmi-cli updated \u2192 ${to}. This process is still the previous version \u2014 rerun \`mmi-cli doctor --apply\` so the remaining surfaces reconcile under the new CLI.`;
+}
+function buildSelfUpdateHaltPayload(input) {
+  return {
+    ok: false,
+    rerunRequired: true,
+    reason: "mmi-cli self-updated; rerun doctor so the remaining surfaces reconcile under the new CLI",
+    updatedTo: input.updatedTo ?? null,
+    checks: input.checks
+  };
+}
+function preflightOutcome(input) {
+  if (input.gaps.length) {
+    return { healed: false, line: `\u26A0 MMI preflight: ${input.gaps.length} item(s) still need attention \u2014 ${input.gaps.map((g) => g.fix).join(" \xB7 ")}` };
+  }
+  if (input.needsEagerHeal) return { healed: true, line: doctorPreflightDoneLine(input.surface) };
+  return { healed: true };
+}
 function pluginAutonomousHaltLine(reloadHint) {
   return `\u26A0 PLUGIN RELOAD REQUIRED \u2014 mmi:* skills and agent types are unavailable until you ${reloadHint}. Halt autonomous /grind and /build until then.`;
 }
@@ -18741,14 +18784,14 @@ function renderTerseDoctorReport(input) {
 
 // src/kb-drift-report.ts
 var import_node_fs23 = require("node:fs");
-var import_node_path20 = require("node:path");
+var import_node_path21 = require("node:path");
 function yesterdayIso() {
   const d = /* @__PURE__ */ new Date();
   d.setUTCDate(d.getUTCDate() - 1);
   return d.toISOString().slice(0, 10);
 }
 async function fetchLatestKbDriftReport(execFileP5, repoRoot) {
-  const sagaIo = (0, import_node_path20.join)(repoRoot, "infra", "saga-io.mjs");
+  const sagaIo = (0, import_node_path21.join)(repoRoot, "infra", "saga-io.mjs");
   if (!(0, import_node_fs23.existsSync)(sagaIo)) return null;
   const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
   for (const date of [today, yesterdayIso()]) {
@@ -18766,7 +18809,7 @@ async function fetchLatestKbDriftReport(execFileP5, repoRoot) {
 
 // src/cli-doctor-shared.ts
 var import_node_fs24 = require("node:fs");
-var import_node_path21 = require("node:path");
+var import_node_path22 = require("node:path");
 var import_node_fs25 = require("node:fs");
 var GC_GH_TIMEOUT_MS = 2e4;
 async function awsCallerArn() {
@@ -18813,7 +18856,7 @@ async function localBranchHeads() {
 }
 async function currentRepoWorktreeGitRoot(repoRoot) {
   const gitCommonDir = (await execFileP2("git", ["rev-parse", "--git-common-dir"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim();
-  return gitCommonDir ? (0, import_node_path21.resolve)(repoRoot, gitCommonDir, "worktrees") : "";
+  return gitCommonDir ? (0, import_node_path22.resolve)(repoRoot, gitCommonDir, "worktrees") : "";
 }
 async function worktreeBranches() {
   const { stdout } = await execFileP2("git", ["worktree", "list", "--porcelain"], { timeout: GIT_TIMEOUT_MS });
@@ -18833,7 +18876,7 @@ function resolveGitdirForWorktreeFile(worktreePath, content) {
   const match = /^gitdir:\s*(.+)\s*$/im.exec(content);
   if (!match?.[1]) return void 0;
   const raw = match[1].trim();
-  return (0, import_node_path21.isAbsolute)(raw) ? raw : (0, import_node_path21.resolve)(worktreePath, raw);
+  return (0, import_node_path22.isAbsolute)(raw) ? raw : (0, import_node_path22.resolve)(worktreePath, raw);
 }
 function metadataOwnsMissingWorktreeDir(worktreePath, worktreeGitRoot) {
   if (!worktreeGitRoot) return false;
@@ -18842,9 +18885,9 @@ function metadataOwnsMissingWorktreeDir(worktreePath, worktreeGitRoot) {
     for (const ent of entries) {
       if (!ent.isDirectory()) continue;
       try {
-        const gitdirPath = (0, import_node_fs24.readFileSync)((0, import_node_path21.join)(worktreeGitRoot, ent.name, "gitdir"), "utf8").trim();
-        const resolvedGitdir = (0, import_node_path21.isAbsolute)(gitdirPath) ? gitdirPath : (0, import_node_path21.resolve)(worktreeGitRoot, ent.name, gitdirPath);
-        if (sameWorktreeMetadataPath((0, import_node_path21.dirname)(resolvedGitdir), worktreePath)) return true;
+        const gitdirPath = (0, import_node_fs24.readFileSync)((0, import_node_path22.join)(worktreeGitRoot, ent.name, "gitdir"), "utf8").trim();
+        const resolvedGitdir = (0, import_node_path22.isAbsolute)(gitdirPath) ? gitdirPath : (0, import_node_path22.resolve)(worktreeGitRoot, ent.name, gitdirPath);
+        if (sameWorktreeMetadataPath((0, import_node_path22.dirname)(resolvedGitdir), worktreePath)) return true;
       } catch {
       }
     }
@@ -18863,7 +18906,7 @@ function pathExistsKnown(path2) {
   }
 }
 function inspectSiblingWorktreeDir(path2, worktreeGitRoot) {
-  const gitPath = (0, import_node_path21.join)(path2, ".git");
+  const gitPath = (0, import_node_path22.join)(path2, ".git");
   let st;
   try {
     st = (0, import_node_fs25.lstatSync)(gitPath);
@@ -18920,7 +18963,7 @@ async function siblingWorktreeDirs() {
   const siblingRoot = siblingMmiWorktreesRoot(repoRoot);
   try {
     const entries = (0, import_node_fs25.readdirSync)(siblingRoot, { withFileTypes: true });
-    return entries.filter((ent) => ent.isDirectory()).map((ent) => inspectSiblingWorktreeDir((0, import_node_path21.join)(siblingRoot, ent.name), worktreeGitRoot)).filter((entry) => Boolean(entry));
+    return entries.filter((ent) => ent.isDirectory()).map((ent) => inspectSiblingWorktreeDir((0, import_node_path22.join)(siblingRoot, ent.name), worktreeGitRoot)).filter((entry) => Boolean(entry));
   } catch {
     return [];
   }
@@ -18970,7 +19013,7 @@ async function fetchHubVersionInfo(baseUrl) {
 }
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path22.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path23.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -18988,24 +19031,24 @@ var NPM_VIEW_TIMEOUT_MS = 15e3;
 var PLUGIN_PULL_TIMEOUT_MS = 3e4;
 async function applyVersionAutoUpdate(report, log) {
   const action = versionAutoUpdateAction(report, Boolean(process.env.CLAUDE_PLUGIN_ROOT));
-  if (action === "none") return report;
+  if (action === "none") return { report, applied: "none" };
   const target = report.releasedVersion ?? "latest";
   if (action === "plugin-pull") {
     try {
       const root = (await execFileP2("git", ["-C", process.env.CLAUDE_PLUGIN_ROOT, "rev-parse", "--show-toplevel"], { timeout: PLUGIN_PULL_TIMEOUT_MS })).stdout.trim();
       log(`  \u21BB refreshing MMI plugin ${report.currentVersion} \u2192 ${target} (effective next session)\u2026`);
       await execFileP2("git", ["-C", root, "pull", "--ff-only"], { timeout: PLUGIN_PULL_TIMEOUT_MS });
-      return { ...report, ok: true };
+      return { report: { ...report, ok: true }, applied: "plugin-pull" };
     } catch {
-      return report;
+      return { report, applied: "none" };
     }
   }
   try {
     log(`  \u21BB updating mmi-cli ${report.currentVersion} \u2192 ${target}\u2026`);
     await runHostBin("npm", ["install", "-g", "@mutmutco/cli@latest"], { timeout: NPM_UPDATE_TIMEOUT_MS });
-    return { ...report, ok: true };
+    return { report: { ...report, ok: true }, applied: "npm" };
   } catch {
-    return report;
+    return { report, applied: "none" };
   }
 }
 async function fetchNpmReleasedVersion() {
@@ -19033,7 +19076,11 @@ async function applyDesignSystemUpdate(check, log) {
     if (check.latestVersion && installedVersion && compareVersions(installedVersion, check.latestVersion) >= 0) {
       return { ...check, ok: true, installedVersion };
     }
-    return { ...check, installedVersion };
+    return {
+      ...check,
+      installedVersion,
+      fix: `${check.packageName} is held below ${check.latestVersion ?? "latest"} by this repo's package.json range \u2014 \`npm update\` cannot cross it. Bump the range or run \`npm install ${check.packageName}@latest\` to force the update.`
+    };
   } catch {
     return check;
   }
@@ -19067,6 +19114,9 @@ var CLAUDE_PLUGIN_TIMEOUT_MS = 12e4;
 function runHostBin(bin, args, opts) {
   return isWin ? execFileP2("cmd.exe", ["/c", bin, ...args], opts) : execFileP2(bin, args, opts);
 }
+function hostBinAvailable(bin) {
+  return execFileP2(isWin ? "where" : "which", [bin]).then(() => true).catch(() => false);
+}
 async function runClaudePlugin(args) {
   try {
     await runHostBin("claude", args, { timeout: CLAUDE_PLUGIN_TIMEOUT_MS });
@@ -19099,7 +19149,7 @@ async function applyPluginHeal(token, surface, log, opts) {
 }
 var installedPluginsPath = (surface = detectSurface(process.env)) => {
   const homeDir = surface === "codex" ? ".codex" : ".claude";
-  return (0, import_node_path22.join)((0, import_node_os5.homedir)(), homeDir, "plugins", "installed_plugins.json");
+  return (0, import_node_path23.join)((0, import_node_os5.homedir)(), homeDir, "plugins", "installed_plugins.json");
 };
 function readInstalledPlugins() {
   try {
@@ -19110,7 +19160,7 @@ function readInstalledPlugins() {
 }
 function installedPluginSources() {
   return ["claude", "codex"].map((surface) => {
-    const recordPath = (0, import_node_path22.join)((0, import_node_os5.homedir)(), `.${surface}`, "plugins", "installed_plugins.json");
+    const recordPath = (0, import_node_path23.join)((0, import_node_os5.homedir)(), `.${surface}`, "plugins", "installed_plugins.json");
     try {
       return { surface, installed: JSON.parse((0, import_node_fs26.readFileSync)(recordPath, "utf8")), recordPath };
     } catch {
@@ -19120,7 +19170,7 @@ function installedPluginSources() {
 }
 function readClaudeSettings() {
   try {
-    return JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path22.join)(process.cwd(), ".claude", "settings.json"), "utf8"));
+    return JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path23.join)(process.cwd(), ".claude", "settings.json"), "utf8"));
   } catch {
     return null;
   }
@@ -19165,16 +19215,16 @@ function backupAndWriteInstalledPlugins(records, pluginId) {
   }
 }
 function opencodeConfigDir() {
-  return (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".config", "opencode");
+  return (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".config", "opencode");
 }
 function opencodeConfigPath() {
-  return (0, import_node_path22.join)(opencodeConfigDir(), "opencode.jsonc");
+  return (0, import_node_path23.join)(opencodeConfigDir(), "opencode.jsonc");
 }
 function opencodeCommandsDir() {
-  return (0, import_node_path22.join)(opencodeConfigDir(), "commands");
+  return (0, import_node_path23.join)(opencodeConfigDir(), "commands");
 }
 function opencodeSkillsPath() {
-  return (0, import_node_path22.join)(opencodeConfigDir(), "node_modules", "@mutmutco", "opencode-mmi", "skills");
+  return (0, import_node_path23.join)(opencodeConfigDir(), "node_modules", "@mutmutco", "opencode-mmi", "skills");
 }
 function opencodeConfigSnapshot() {
   const path2 = opencodeConfigPath();
@@ -19203,7 +19253,7 @@ function writeOpencodeConfigPlugin(snapshot) {
     const plan2 = planOpencodeConfigWrite(snapshot.hasConfig ? snapshot.raw : void 0);
     if (plan2.action === "already") return true;
     if (!plan2.text || plan2.action === "unsafe") return false;
-    (0, import_node_fs26.mkdirSync)((0, import_node_path22.dirname)(path2), { recursive: true });
+    (0, import_node_fs26.mkdirSync)((0, import_node_path23.dirname)(path2), { recursive: true });
     if (snapshot.hasConfig) (0, import_node_fs26.copyFileSync)(path2, `${path2}.bak`);
     (0, import_node_fs26.writeFileSync)(path2, plan2.text, "utf8");
     return true;
@@ -19220,7 +19270,7 @@ function writeOpencodeSkillsPath(snapshot, skillsPath) {
     const normalized = skillsPath.replace(/\\/g, "/");
     if (!paths.some((p) => p.replace(/\\/g, "/") === normalized)) paths.push(skillsPath.replace(/\\/g, "/"));
     parsed.skills = { ...skills, paths };
-    (0, import_node_fs26.mkdirSync)((0, import_node_path22.dirname)(snapshot.path), { recursive: true });
+    (0, import_node_fs26.mkdirSync)((0, import_node_path23.dirname)(snapshot.path), { recursive: true });
     if (snapshot.hasConfig && (0, import_node_fs26.existsSync)(snapshot.path)) (0, import_node_fs26.copyFileSync)(snapshot.path, `${snapshot.path}.bak`);
     (0, import_node_fs26.writeFileSync)(snapshot.path, `${JSON.stringify(parsed, null, 2)}
 `, "utf8");
@@ -19241,7 +19291,7 @@ function writeOpencodeCommandFiles() {
     const dir = opencodeCommandsDir();
     (0, import_node_fs26.mkdirSync)(dir, { recursive: true });
     for (const command of OPENCODE_WORKFLOW_COMMANDS) {
-      (0, import_node_fs26.writeFileSync)((0, import_node_path22.join)(dir, `${command}.md`), opencodeCommandMarkdown(command), "utf8");
+      (0, import_node_fs26.writeFileSync)((0, import_node_path23.join)(dir, `${command}.md`), opencodeCommandMarkdown(command), "utf8");
     }
     return true;
   } catch {
@@ -19250,8 +19300,8 @@ function writeOpencodeCommandFiles() {
 }
 function readOpencodeAdapterDiskVersion() {
   const candidates = [
-    (0, import_node_path22.join)(opencodeConfigDir(), "node_modules", "@mutmutco", "opencode-mmi", "package.json"),
-    (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".cache", "opencode", "node_modules", "@mutmutco", "opencode-mmi", "package.json")
+    (0, import_node_path23.join)(opencodeConfigDir(), "node_modules", "@mutmutco", "opencode-mmi", "package.json"),
+    (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".cache", "opencode", "node_modules", "@mutmutco", "opencode-mmi", "package.json")
   ];
   for (const path2 of candidates) {
     try {
@@ -19286,21 +19336,21 @@ function opencodePluginVersionsForReport() {
 }
 function opencodeDesktopLogsRoot() {
   if (process.platform === "win32") {
-    const base = process.env.APPDATA || (0, import_node_path22.join)((0, import_node_os5.homedir)(), "AppData", "Roaming");
-    return (0, import_node_path22.join)(base, "ai.opencode.desktop", "logs");
+    const base = process.env.APPDATA || (0, import_node_path23.join)((0, import_node_os5.homedir)(), "AppData", "Roaming");
+    return (0, import_node_path23.join)(base, "ai.opencode.desktop", "logs");
   }
   if (process.platform === "darwin") {
-    return (0, import_node_path22.join)((0, import_node_os5.homedir)(), "Library", "Application Support", "ai.opencode.desktop", "logs");
+    return (0, import_node_path23.join)((0, import_node_os5.homedir)(), "Library", "Application Support", "ai.opencode.desktop", "logs");
   }
-  return (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".config", "ai.opencode.desktop", "logs");
+  return (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".config", "ai.opencode.desktop", "logs");
 }
 function opencodeDesktopBootstrapSnapshot() {
   const root = opencodeDesktopLogsRoot();
   try {
-    const sessionDirs = (0, import_node_fs26.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => (0, import_node_path22.join)(root, entry.name)).sort((a, b) => (0, import_node_fs26.statSync)(b).mtimeMs - (0, import_node_fs26.statSync)(a).mtimeMs);
+    const sessionDirs = (0, import_node_fs26.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => (0, import_node_path23.join)(root, entry.name)).sort((a, b) => (0, import_node_fs26.statSync)(b).mtimeMs - (0, import_node_fs26.statSync)(a).mtimeMs);
     const newest = sessionDirs[0];
     if (!newest) return [];
-    const logPath = (0, import_node_path22.join)(newest, "renderer.log");
+    const logPath = (0, import_node_path23.join)(newest, "renderer.log");
     const text = (0, import_node_fs26.readFileSync)(logPath, "utf8");
     return opencodeAgentDirectoriesFromLog(text).filter((directory) => !(0, import_node_fs26.existsSync)(directory)).map((directory) => ({ directory, logPath }));
   } catch {
@@ -19308,7 +19358,7 @@ function opencodeDesktopBootstrapSnapshot() {
   }
 }
 function opencodeLegacyConfigSnapshot() {
-  const legacyPath = (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".opencode", "opencode.json");
+  const legacyPath = (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".opencode", "opencode.json");
   if (!(0, import_node_fs26.existsSync)(legacyPath)) return {};
   const content = readTextFile(legacyPath);
   if (content == null) return {};
@@ -19329,16 +19379,16 @@ function quarantineOpencodeLegacyConfig(legacyPath) {
   }
 }
 function cursorPluginCacheRoot() {
-  return (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".cursor", "plugins", "cache", "mutmutco", "mmi");
+  return (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".cursor", "plugins", "cache", "mutmutco", "mmi");
 }
 function cursorPluginCachePinSnapshots() {
   const root = cursorPluginCacheRoot();
   try {
     return (0, import_node_fs26.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && !entry.name.startsWith(".")).map((entry) => {
-      const path2 = (0, import_node_path22.join)(root, entry.name);
-      const pluginJson = (0, import_node_path22.join)(path2, ".cursor-plugin", "plugin.json");
-      const hooksJson = (0, import_node_path22.join)(path2, "hooks", "hooks.json");
-      const cliBundle = (0, import_node_path22.join)(path2, "cli", "dist", "index.cjs");
+      const path2 = (0, import_node_path23.join)(root, entry.name);
+      const pluginJson = (0, import_node_path23.join)(path2, ".cursor-plugin", "plugin.json");
+      const hooksJson = (0, import_node_path23.join)(path2, "hooks", "hooks.json");
+      const cliBundle = (0, import_node_path23.join)(path2, "cli", "dist", "index.cjs");
       let version;
       try {
         const raw = JSON.parse((0, import_node_fs26.readFileSync)(pluginJson, "utf8"));
@@ -19367,19 +19417,19 @@ function cursorPluginCachePinSnapshots() {
   }
 }
 function hubCheckoutForCursorSeed() {
-  const manifest = (0, import_node_path22.join)(process.cwd(), "plugins", "mmi", ".cursor-plugin", "plugin.json");
+  const manifest = (0, import_node_path23.join)(process.cwd(), "plugins", "mmi", ".cursor-plugin", "plugin.json");
   return (0, import_node_fs26.existsSync)(manifest) ? process.cwd() : void 0;
 }
 function mmiPluginCacheRootSnapshots() {
   const roots = [
-    { surface: "claude", root: (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".claude", "plugins", "cache", "mutmutco", "mmi") },
-    { surface: "codex", root: (0, import_node_path22.join)((0, import_node_os5.homedir)(), ".codex", "plugins", "cache", "mutmutco", "mmi") }
+    { surface: "claude", root: (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".claude", "plugins", "cache", "mutmutco", "mmi") },
+    { surface: "codex", root: (0, import_node_path23.join)((0, import_node_os5.homedir)(), ".codex", "plugins", "cache", "mutmutco", "mmi") }
   ];
   return roots.flatMap(({ surface, root }) => {
     try {
       const entries = (0, import_node_fs26.readdirSync)(root, { withFileTypes: true }).map((entry) => ({
         name: entry.name,
-        path: (0, import_node_path22.join)(root, entry.name),
+        path: (0, import_node_path23.join)(root, entry.name),
         isDirectory: entry.isDirectory()
       }));
       return [{ surface, root, entries }];
@@ -19390,7 +19440,7 @@ function mmiPluginCacheRootSnapshots() {
 }
 function hasNestedMmiChild(versionDir) {
   try {
-    return (0, import_node_fs26.statSync)((0, import_node_path22.join)(versionDir, "mmi")).isDirectory();
+    return (0, import_node_fs26.statSync)((0, import_node_path23.join)(versionDir, "mmi")).isDirectory();
   } catch {
     return false;
   }
@@ -19415,7 +19465,7 @@ function quarantinePluginCacheDirs(plan2) {
     try {
       if (!(0, import_node_fs26.existsSync)(move.from)) continue;
       const target = uniqueQuarantineTarget(move.to);
-      (0, import_node_fs26.mkdirSync)((0, import_node_path22.dirname)(target), { recursive: true });
+      (0, import_node_fs26.mkdirSync)((0, import_node_path23.dirname)(target), { recursive: true });
       (0, import_node_fs26.renameSync)(move.from, target);
       moved += 1;
     } catch {
@@ -19437,7 +19487,7 @@ async function clearNestedPluginTreeDir(targetPath) {
   try {
     if (!(0, import_node_fs26.existsSync)(targetPath)) return true;
     if (isWin) {
-      const emptyDir = (0, import_node_path22.join)((0, import_node_os5.tmpdir)(), `mmi-empty-${Date.now()}`);
+      const emptyDir = (0, import_node_path23.join)((0, import_node_os5.tmpdir)(), `mmi-empty-${Date.now()}`);
       (0, import_node_fs26.mkdirSync)(emptyDir, { recursive: true });
       try {
         await robocopyMirrorEmpty(emptyDir, targetPath);
@@ -19464,7 +19514,7 @@ async function applyNestedPluginTreeCleanup(paths, log) {
   }
   return true;
 }
-var gitignorePath = () => (0, import_node_path22.join)(process.cwd(), ".gitignore");
+var gitignorePath = () => (0, import_node_path23.join)(process.cwd(), ".gitignore");
 function readTextFile(path2) {
   try {
     if (!(0, import_node_fs26.existsSync)(path2)) return null;
@@ -19477,10 +19527,10 @@ function playwrightMcpConfigSnapshots() {
   const cwd = process.cwd();
   const home = (0, import_node_os5.homedir)();
   const candidates = [
-    (0, import_node_path22.join)(cwd, ".mcp.json"),
-    (0, import_node_path22.join)(cwd, ".cursor", "mcp.json"),
-    (0, import_node_path22.join)(home, ".cursor", "mcp.json"),
-    (0, import_node_path22.join)(home, ".codex", "config.toml")
+    (0, import_node_path23.join)(cwd, ".mcp.json"),
+    (0, import_node_path23.join)(cwd, ".cursor", "mcp.json"),
+    (0, import_node_path23.join)(home, ".cursor", "mcp.json"),
+    (0, import_node_path23.join)(home, ".codex", "config.toml")
   ];
   const out = [];
   for (const path2 of candidates) {
@@ -19493,7 +19543,7 @@ function strayBrowserArtifactPaths() {
   const cwd = process.cwd();
   return STRAY_BROWSER_ARTIFACT_DIRS.filter((rel) => {
     try {
-      return (0, import_node_fs26.existsSync)((0, import_node_path22.join)(cwd, rel));
+      return (0, import_node_fs26.existsSync)((0, import_node_path23.join)(cwd, rel));
     } catch {
       return false;
     }
@@ -19512,8 +19562,8 @@ function latestIso(values) {
   return best;
 }
 function latestNorthstarContinuityAt() {
-  const meta = parseMeta(readTextFile((0, import_node_path22.join)(process.cwd(), META_FILE)));
-  const queue = parseQueue(readTextFile((0, import_node_path22.join)(process.cwd(), QUEUE_FILE)));
+  const meta = parseMeta(readTextFile((0, import_node_path23.join)(process.cwd(), META_FILE)));
+  const queue = parseQueue(readTextFile((0, import_node_path23.join)(process.cwd(), QUEUE_FILE)));
   return latestIso([
     ...Object.values(meta).map((entry) => entry.syncedAt),
     ...queue.map((entry) => entry.queuedAt)
@@ -19570,6 +19620,10 @@ async function runDoctor(opts, io = consoleIo) {
   });
   const installedForHealPlan = readInstalledPlugins();
   const sourcesForHealPlan = installedPluginSources();
+  const semverPrefix = /^\d+\.\d+\.\d+/;
+  const isBehind = (installed2, released) => Boolean(installed2 && released && semverPrefix.test(installed2) && semverPrefix.test(released) && compareVersions(installed2, released) < 0);
+  const opencodeAdapterStale = isBehind(opencodeInstalledVersionForDoctor(), releasedVersion);
+  const cursorCacheStale = (0, import_node_fs26.existsSync)(cursorPluginCacheRoot()) && (cursorPluginCachePinSnapshots() ?? []).some((p) => isBehind(p.version, releasedVersion));
   const healPlan = doctorHealPlan({
     isOrgRepo: Boolean(cfg.sagaApiUrl),
     surface,
@@ -19584,7 +19638,9 @@ async function runDoctor(opts, io = consoleIo) {
     legacyPluginCheck: buildLegacyPluginInstallCheck({
       isOrgRepo: Boolean(cfg.sagaApiUrl),
       sources: sourcesForHealPlan
-    })
+    }),
+    opencodeAdapterStale,
+    cursorCacheStale
   });
   if (opts.preflight && !healPlan.needsEagerHeal) return;
   const eagerHeal = Boolean(opts.preflight) || Boolean(opts.banner) && healPlan.needsEagerHeal;
@@ -19615,9 +19671,19 @@ async function runDoctor(opts, io = consoleIo) {
     repoVersion: readRepoVersion(),
     releasedVersion
   });
-  if (repairFull) versionReport = await applyVersionAutoUpdate(versionReport, (m) => io.err(m));
+  let selfUpdatedCli = false;
+  if (repairFull) {
+    const updated = await applyVersionAutoUpdate(versionReport, (m) => io.err(m));
+    versionReport = updated.report;
+    selfUpdatedCli = updated.applied === "npm";
+  }
   if (!versionReport.ok) versionReport = { ...versionReport, fix: pluginRecoveryFix(surface) };
   checks.push(versionReport);
+  if (selfUpdatedCli) {
+    if (opts.json) io.log(JSON.stringify(buildSelfUpdateHaltPayload({ checks, updatedTo: versionReport.releasedVersion }), null, 2));
+    else io.err(selfUpdateHaltLine(versionReport));
+    return;
+  }
   checks.push({ ok: Boolean(cfg.sagaApiUrl), label: "Hub API URL configured", fix: "set MMI_HUB_URL or use a current MMI CLI/plugin build" });
   const hubVersionInfo = await fetchHubVersionInfo(cfg.sagaApiUrl);
   const installedVersion = resolveClientVersion();
@@ -19732,14 +19798,12 @@ async function runDoctor(opts, io = consoleIo) {
     surface
   });
   if (!installedVersionCheck.ok && (repairFull || repairLocal)) {
+    const crossSurfaceRepair = Boolean(opts.apply) || !opts.json && !opts.banner && !opts.preflight;
+    const canDriveSurface = async (token) => surfaceToken(surface) === token || crossSurfaceRepair && await hostBinAvailable(token);
+    const rereadInstalled = () => buildInstalledPluginVersionCheck({ isOrgRepo: Boolean(cfg.sagaApiUrl), sources: installedPluginSources(), releasedVersion, surface });
     const claudeStale = installedVersionCheck.staleSurfaces?.some((s) => s.surface === "claude") ?? false;
-    if (claudeStale && await applyPluginHeal("claude", surface, (m) => io.err(m))) {
-      const healed = buildInstalledPluginVersionCheck({
-        isOrgRepo: Boolean(cfg.sagaApiUrl),
-        sources: installedPluginSources(),
-        releasedVersion,
-        surface
-      });
+    if (claudeStale && await canDriveSurface("claude") && await applyPluginHeal("claude", surface, (m) => io.err(m), { force: true })) {
+      const healed = rereadInstalled();
       installedVersionCheck = healed;
       if (healed.ok) {
         markPluginReloadRequired();
@@ -19747,13 +19811,8 @@ async function runDoctor(opts, io = consoleIo) {
       }
     }
     const codexStale = installedVersionCheck.staleSurfaces?.some((s) => s.surface === "codex") ?? false;
-    if (!installedVersionCheck.ok && codexStale && await applyPluginHeal("codex", surface, (m) => io.err(m))) {
-      const healed = buildInstalledPluginVersionCheck({
-        isOrgRepo: Boolean(cfg.sagaApiUrl),
-        sources: installedPluginSources(),
-        releasedVersion,
-        surface
-      });
+    if (!installedVersionCheck.ok && codexStale && await canDriveSurface("codex") && await applyPluginHeal("codex", surface, (m) => io.err(m), { force: true })) {
+      const healed = rereadInstalled();
       installedVersionCheck = healed;
       if (healed.ok) {
         markPluginReloadRequired();
@@ -19937,7 +19996,7 @@ async function runDoctor(opts, io = consoleIo) {
       releasedVersion,
       hubCheckout: hubCheckoutForCursorSeed(),
       execFileP: execFileP2,
-      mkdtemp: (prefix) => (0, import_promises7.mkdtemp)((0, import_node_path22.join)((0, import_node_os5.tmpdir)(), prefix)),
+      mkdtemp: (prefix) => (0, import_promises7.mkdtemp)((0, import_node_path23.join)((0, import_node_os5.tmpdir)(), prefix)),
       log: (m) => io.err(m)
     });
     if (seeded) {
@@ -20075,7 +20134,8 @@ async function runDoctor(opts, io = consoleIo) {
   }
   const gaps = checks.filter((c) => !c.ok);
   if (opts.preflight) {
-    if (healPlan.needsEagerHeal) io.err(doctorPreflightDoneLine(surface));
+    const outcome = preflightOutcome({ gaps, needsEagerHeal: healPlan.needsEagerHeal, surface });
+    if (outcome.line) io.err(outcome.line);
     if (pluginReloadRequired) io.err(pluginAutonomousHaltLine(reloadHint));
     return;
   }
@@ -20327,7 +20387,7 @@ rules.command("sync").option("--quiet", "stay silent unless something changed or
   if (!await runRulesSync(opts)) process.exitCode = 1;
 });
 rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
-  const path2 = (0, import_node_path23.join)(process.cwd(), ".gitignore");
+  const path2 = (0, import_node_path24.join)(process.cwd(), ".gitignore");
   const current = (0, import_node_fs27.existsSync)(path2) ? (0, import_node_fs27.readFileSync)(path2, "utf8") : null;
   const plan2 = planManagedGitignore(current);
   const drift = [...plan2.added.map((l) => `+${l}`), ...plan2.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
@@ -20534,7 +20594,7 @@ function runWorktreeInstall(command, cwd, quiet) {
 async function primaryCheckoutRoot(worktreeRoot) {
   try {
     const out = (await execFileP2("git", ["-C", worktreeRoot, "rev-parse", "--path-format=absolute", "--git-common-dir"], { timeout: GIT_TIMEOUT_MS })).stdout.trim();
-    return out ? (0, import_node_path23.dirname)(out) : void 0;
+    return out ? (0, import_node_path24.dirname)(out) : void 0;
   } catch {
     return void 0;
   }
@@ -20547,7 +20607,7 @@ function makeProvisionDeps(worktreeRoot, quiet, log) {
   };
 }
 function acquireWorktreeSetupLock(worktreeRoot) {
-  const lockPath = (0, import_node_path23.join)(worktreeRoot, ".mmi", "worktree-setup.lock");
+  const lockPath = (0, import_node_path24.join)(worktreeRoot, ".mmi", "worktree-setup.lock");
   const take = () => {
     const fd = (0, import_node_fs27.openSync)(lockPath, "wx");
     try {
@@ -20563,7 +20623,7 @@ function acquireWorktreeSetupLock(worktreeRoot) {
     };
   };
   try {
-    (0, import_node_fs27.mkdirSync)((0, import_node_path23.dirname)(lockPath), { recursive: true });
+    (0, import_node_fs27.mkdirSync)((0, import_node_path24.dirname)(lockPath), { recursive: true });
     return take();
   } catch {
     try {
@@ -21569,7 +21629,7 @@ pr.command("create").description("create a PR and print {number,url} JSON").opti
   console.log(JSON.stringify(created));
 });
 async function listCiWorkflowPaths(cwd = process.cwd()) {
-  const wfDir = (0, import_node_path23.join)(cwd, ".github", "workflows");
+  const wfDir = (0, import_node_path24.join)(cwd, ".github", "workflows");
   if (!(0, import_node_fs27.existsSync)(wfDir)) return [];
   return (0, import_node_fs27.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).map((name) => `.github/workflows/${name}`);
 }
@@ -21743,7 +21803,7 @@ async function createDeferredWorktreeStore() {
       },
       write: async (entries) => {
         try {
-          await (0, import_promises8.mkdir)((0, import_node_path23.dirname)(registryPath), { recursive: true });
+          await (0, import_promises8.mkdir)((0, import_node_path24.dirname)(registryPath), { recursive: true });
           await (0, import_promises8.writeFile)(registryPath, serializeDeferredWorktrees(entries), "utf8");
         } catch {
         }
@@ -22101,8 +22161,8 @@ async function resolveStage() {
     local,
     shell: shellFor(),
     registry: { deployModel: project2?.deployModel, portRange, error: read.ok ? void 0 : read.error },
-    hasCompose: (0, import_node_fs27.existsSync)((0, import_node_path23.join)(process.cwd(), "docker-compose.yml")),
-    hasEnvExample: (0, import_node_fs27.existsSync)((0, import_node_path23.join)(process.cwd(), ".env.example"))
+    hasCompose: (0, import_node_fs27.existsSync)((0, import_node_path24.join)(process.cwd(), "docker-compose.yml")),
+    hasEnvExample: (0, import_node_fs27.existsSync)((0, import_node_path24.join)(process.cwd(), ".env.example"))
   });
 }
 async function fetchStageVaultEnvMerge() {
@@ -22957,6 +23017,7 @@ program2.command("session-start").description("run the SessionStart verbs (rules
     console.error("[mmi-hook] session-start: cwd is a repository SUBDIRECTORY \u2014 skipping the SessionStart hook (spine/docs/plan/saga delivery); run it from the repo root.");
     return;
   }
+  if (!isOrgRepoRoot(process.cwd())) return;
   try {
     const hook = parseHookInput(await readStdin());
     if (hook.session_id) persistSession(hook.session_id);