@mutmutco/cli 3.105.0 → 3.105.3

package/dist/main.cjs

@@ -5000,7 +5000,7 @@ var program = new Command();
 
 // src/index.ts
 var import_promises11 = require("node:fs/promises");
-var import_node_fs41 = require("node:fs");
+var import_node_fs42 = require("node:fs");
 var import_node_child_process19 = require("node:child_process");
 
 // src/cli-shared.ts
@@ -8590,7 +8590,7 @@ function commandLadderHint() {
 }
 
 // src/index.ts
-var import_node_path39 = require("node:path");
+var import_node_path40 = require("node:path");
 
 // src/merge-ci-policy.ts
 function resolveMergeCiPolicy(input) {
@@ -15206,7 +15206,7 @@ async function executeWaveLand(plan, deps, opts = { preserveWorktree: true }) {
 }
 
 // src/index.ts
-var import_node_os16 = require("node:os");
+var import_node_os17 = require("node:os");
 
 // src/board.ts
 var import_node_child_process9 = require("node:child_process");
@@ -18832,13 +18832,25 @@ function liveEvidenceLines(evidence, repo) {
   if (evidence.branch) live.push(`live branch ${evidence.branch} on ${repo}`);
   return live;
 }
-function laneOwnership(marker, currentSession) {
-  if (marker?.session && currentSession) return marker.session === currentSession ? "mine" : "other";
+function sameClaimHost(a, b) {
+  return Boolean(a && b && a.toLowerCase() === b.toLowerCase());
+}
+function laneOwnership(marker, current) {
+  if (!marker) return "unknown";
+  if (marker.session && current.session) {
+    return marker.session === current.session ? "mine" : "other";
+  }
+  if (marker.surface && current.surface && marker.surface !== current.surface) return "other";
+  if (marker.host && current.host && !sameClaimHost(marker.host, current.host)) return "other";
+  if (marker.surface && current.surface && marker.surface === current.surface && marker.host && current.host && sameClaimHost(marker.host, current.host)) {
+    return "mine";
+  }
   return "unknown";
 }
 async function checkLaneContest(client, item) {
   const evidence = await gatherClaimLiveness(client, item.repository, item.number, openPullsFetcher(client));
-  const ownership = laneOwnership(evidence.marker, readSessionId(process.env));
+  const actor = describeActor({ env: process.env, surface: detectSurface(process.env), cwd: process.cwd() });
+  const ownership = laneOwnership(evidence.marker, actor);
   const live = ownership === "mine" ? [] : liveEvidenceLines(evidence, item.repository);
   const unverifiable = ownership === "mine" ? [] : evidence.failed;
   return {
@@ -20462,7 +20474,8 @@ async function runHotfixStart(deps, options) {
     }
     notes.push(`cherry-picked ${label} onto ${branch} (from origin/main, -x trailer recorded)`);
     if (deployModel === "hub-serverless") {
-      await deps.run("node", ["scripts/release-distribution.mjs", "prepare", version, "--source-commit", "HEAD"]);
+      const durableSource = clean3(await deps.run("git", ["merge-base", "HEAD", "origin/main"]));
+      await deps.run("node", ["scripts/release-distribution.mjs", "prepare", version, "--source-commit", durableSource]);
       const changedFiles = (await deps.run("node", ["scripts/release-distribution.mjs", "changed-files"])).split("\n").map((s) => s.trim()).filter(Boolean);
       await deps.run("git", ["add", "-f", "--", ...changedFiles]);
       const staged = await deps.run("git", ["diff", "--cached", "--name-only"]);
@@ -25439,6 +25452,148 @@ async function runIssueChildren(deps, epic, opts) {
   }
   return out;
 }
+var FRONTIER_BUCKET_ORDER = {
+  in_flight: 0,
+  partial: 1,
+  ready: 2,
+  landed: 3
+};
+function prStateIs(pr2, want) {
+  return String(pr2.state ?? "").toUpperCase() === want;
+}
+function isBoardDone(boardStatus) {
+  return /^done$/i.test(String(boardStatus ?? "").trim());
+}
+function isBoardInFlight(boardStatus) {
+  return /^(in\s*progress|in\s*review|review|doing)$/i.test(String(boardStatus ?? "").trim());
+}
+function classifyFrontierChild(child2) {
+  const mergedPrs = child2.linkedPrs.filter((p) => prStateIs(p, "MERGED"));
+  const openPrs = child2.linkedPrs.filter((p) => prStateIs(p, "OPEN"));
+  const otherPrs = child2.linkedPrs.filter((p) => !prStateIs(p, "MERGED") && !prStateIs(p, "OPEN"));
+  const closed = String(child2.state ?? "").toUpperCase() === "CLOSED";
+  let bucket;
+  if (closed || isBoardDone(child2.boardStatus)) {
+    bucket = "landed";
+  } else if (openPrs.length > 0 || isBoardInFlight(child2.boardStatus)) {
+    bucket = "in_flight";
+  } else if (mergedPrs.length > 0) {
+    bucket = "partial";
+  } else {
+    bucket = "ready";
+  }
+  return {
+    number: child2.number,
+    title: child2.title,
+    state: child2.state,
+    url: child2.url,
+    repo: child2.repo,
+    assignee: child2.assignee,
+    boardStatus: child2.boardStatus,
+    depth: child2.depth,
+    bucket,
+    mergedPrs,
+    openPrs,
+    otherPrs
+  };
+}
+function sortFrontierChildren(rows) {
+  return [...rows].sort((a, b) => {
+    const byBucket = FRONTIER_BUCKET_ORDER[a.bucket] - FRONTIER_BUCKET_ORDER[b.bucket];
+    if (byBucket !== 0) return byBucket;
+    return a.number - b.number;
+  });
+}
+function buildFrontierReport(epic, children) {
+  const classified = children.map(classifyFrontierChild);
+  const landed = classified.filter((c) => c.bucket === "landed").sort((a, b) => a.number - b.number);
+  const frontier = sortFrontierChildren(classified.filter((c) => c.bucket !== "landed"));
+  const inFlight = frontier.filter((c) => c.bucket === "in_flight").length;
+  const partial = frontier.filter((c) => c.bucket === "partial").length;
+  const ready = frontier.filter((c) => c.bucket === "ready").length;
+  const report = {
+    epic,
+    counts: {
+      total: classified.length,
+      landed: landed.length,
+      frontier: frontier.length,
+      inFlight,
+      partial,
+      ready
+    },
+    landed,
+    frontier,
+    children: classified,
+    summary: ""
+  };
+  report.summary = formatFrontierSummary(report);
+  return report;
+}
+function fmtChildLine(c) {
+  const board = c.boardStatus ? ` board=${c.boardStatus}` : "";
+  const merged = c.mergedPrs.length ? ` merged=[${c.mergedPrs.map((p) => `#${p.number}`).join(",")}]` : "";
+  const open2 = c.openPrs.length ? ` open=[${c.openPrs.map((p) => `#${p.number}`).join(",")}]` : "";
+  return `  #${c.number} [${c.bucket}] ${c.title} (${c.state}${board}${merged}${open2})`;
+}
+function formatFrontierSummary(report) {
+  const { epic, counts } = report;
+  const lines = [
+    `issue frontier \u2014 ${epic.repo}#${epic.number} ${epic.title} (${epic.state})`,
+    `  ${counts.total} children \xB7 ${counts.landed} landed \xB7 ${counts.frontier} frontier (${counts.inFlight} in-flight, ${counts.partial} partial, ${counts.ready} ready)`
+  ];
+  if (report.frontier.length) {
+    lines.push("frontier:");
+    for (const c of report.frontier) lines.push(fmtChildLine(c));
+  } else {
+    lines.push("frontier: (empty \u2014 every walked child is landed)");
+  }
+  if (report.landed.length) {
+    lines.push("landed:");
+    for (const c of report.landed) lines.push(fmtChildLine(c));
+  }
+  return lines.join("\n");
+}
+function frontierEpicGraphqlArgs(owner, name, number) {
+  const query = "query($owner:String!,$name:String!){repository(owner:$owner,name:$name){issue(number:" + number + "){number title state url}}}";
+  return ["api", "graphql", "-f", `query=${query}`, "-f", `owner=${owner}`, "-f", `name=${name}`];
+}
+function extractFrontierEpicResponse(resp, repo) {
+  const r = resp ?? {};
+  const issue2 = r.data?.repository?.issue;
+  if (!issue2 || (r.errors ?? []).some((e) => e?.type === "NOT_FOUND")) {
+    throw new QueryReadError("NOT_FOUND", "issue not found");
+  }
+  return {
+    number: Number(issue2.number),
+    title: String(issue2.title ?? ""),
+    state: String(issue2.state ?? ""),
+    url: String(issue2.url ?? ""),
+    repo
+  };
+}
+async function runIssueFrontier(deps, epic, opts) {
+  const ref = parseIssueRef(epic);
+  const repo = ref.repo ?? await deps.resolveRepo(void 0);
+  if (!repo) {
+    throw new QueryReadError("BAD_INPUT", `could not resolve repo for #${ref.number} (pass --repo <owner/repo>)`);
+  }
+  const { owner, name } = splitRepo(repo);
+  let headerResp;
+  try {
+    headerResp = await deps.ghJson(frontierEpicGraphqlArgs(owner, name, ref.number), GH_LIST_TIMEOUT_MS);
+  } catch (e) {
+    if (isGhNotFound(e)) {
+      throw new QueryReadError("NOT_FOUND", `#${ref.number} not found in ${repo}`);
+    }
+    throw e;
+  }
+  const epicHeader = extractFrontierEpicResponse(headerResp, repo);
+  const children = await runIssueChildren(deps, `${repo}#${ref.number}`, {
+    recursive: opts.recursive,
+    boardProjectId: opts.boardProjectId
+  });
+  return buildFrontierReport(epicHeader, children);
+}
 function buildPrListArgs(opts, repo, author) {
   const limit = clampLimit(opts.limit, DEFAULT_LIMIT);
   const state = opts.state ?? "open";
@@ -25615,6 +25770,17 @@ function registerQueryCommands(program3) {
       queryFail("issue children", e);
     }
   });
+  issue2.command("frontier <epic>").description("compute an epic's landed-vs-open frontier from merged PRs + board Status (read-only; never mutates the epic body) \u2014 human summary by default, --json for the structured report").option("--recursive", "walk the full sub-issue tree (bounded depth + total cap)").option("--repo <owner/repo>", "repo for a bare epic ref (defaults to the current repo)").option("--json", "print the structured FrontierReport JSON (includes summary)").action(async (epic, o) => {
+    try {
+      const frontierDeps = { ...deps, resolveRepo: async (r) => deps.resolveRepo(r ?? o.repo) };
+      const boardProjectId = await resolveBoardProjectId(o.repo);
+      const report = await runIssueFrontier(frontierDeps, epic, { recursive: o.recursive, boardProjectId });
+      if (o.json) console.log(JSON.stringify(report, null, 2));
+      else console.log(report.summary);
+    } catch (e) {
+      queryFail("issue frontier", e);
+    }
+  });
   pr2.command("list").description("bounded PR read \u2014 --mine scopes to the viewer's own PRs (resolves the viewer via gh); always prints JSON").option("--mine", "only the caller's own PRs (resolves the viewer via `gh api user`)").addOption(new Option("--state <state>", "open | all").default("open").choices(PR_STATES)).option("--limit <n>", "max PRs to return (capped at 100)", (v) => Number(v), DEFAULT_LIMIT).option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output (already the default \u2014 accepted for contract uniformity)").action(async (o) => {
     try {
       const state = validateEnum("--state", PR_STATES, o.state, "pr list");
@@ -28025,10 +28191,10 @@ function registerBoardCommands(program3) {
 }
 
 // src/merge-cleanup.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_promises8 = require("node:fs/promises");
-var import_node_path33 = require("node:path");
-var import_node_os12 = require("node:os");
+var import_node_path34 = require("node:path");
+var import_node_os13 = require("node:os");
 var import_node_child_process17 = require("node:child_process");
 
 // src/board-advance.ts
@@ -28194,6 +28360,117 @@ function makeDeferredWorktreeStore(registryPath, lockOpts = {}) {
   };
 }
 
+// src/jerv-cli-spawn.ts
+var import_node_fs34 = require("node:fs");
+var import_node_os12 = require("node:os");
+var import_node_path33 = require("node:path");
+var WIN_NAMES = ["jerv-cli.cmd", "jerv-cli.exe", "jerv-cli"];
+var POSIX_NAMES = ["jerv-cli"];
+var JERV_CLI_ENTRY = (0, import_node_path33.join)("node_modules", "@jervaise", "jerv-cli", "dist", "index.cjs");
+function pathEnvEntries(pathEnv, platform2 = process.platform) {
+  if (platform2 !== "win32") {
+    return pathEnv.split(import_node_path33.delimiter).map((e) => e.trim()).filter(Boolean);
+  }
+  if (pathEnv.includes(";")) {
+    return pathEnv.split(";").map((e) => e.trim()).filter(Boolean);
+  }
+  const looksUnix = pathEnv.startsWith("/") || /(?:^|:)\/[a-zA-Z]\//.test(pathEnv);
+  if (looksUnix && pathEnv.includes(":")) {
+    return pathEnv.split(":").map((e) => e.trim()).filter(Boolean);
+  }
+  return pathEnv.trim() ? [pathEnv.trim()] : [];
+}
+function normalizeSpawnPathEntry(entry, platform2 = process.platform) {
+  const trimmed = entry.trim();
+  if (!trimmed) return void 0;
+  if (platform2 !== "win32") return trimmed;
+  const msys = /^\/([a-zA-Z])\/(.*)$/.exec(trimmed.replace(/\\/g, "/"));
+  if (msys) return `${msys[1].toUpperCase()}:\\${msys[2].replace(/\//g, "\\")}`;
+  return trimmed;
+}
+function jervCliCandidateDirs(env = process.env, home = (0, import_node_os12.homedir)(), platform2 = process.platform) {
+  const seen = /* @__PURE__ */ new Set();
+  const out = [];
+  const push = (dir) => {
+    if (!dir) return;
+    const key = platform2 === "win32" ? dir.toLowerCase() : dir;
+    if (seen.has(key)) return;
+    seen.add(key);
+    out.push(dir);
+  };
+  for (const entry of pathEnvEntries(env.PATH ?? "", platform2)) {
+    push(normalizeSpawnPathEntry(entry, platform2));
+  }
+  if (platform2 === "win32") {
+    if (env.APPDATA) push((0, import_node_path33.join)(env.APPDATA, "npm"));
+    if (env.LOCALAPPDATA) push((0, import_node_path33.join)(env.LOCALAPPDATA, "npm"));
+  } else {
+    push((0, import_node_path33.join)(home, ".local", "bin"));
+  }
+  return out;
+}
+function jervCliCandidatePaths(env = process.env, home = (0, import_node_os12.homedir)(), platform2 = process.platform) {
+  const names = platform2 === "win32" ? WIN_NAMES : POSIX_NAMES;
+  const out = [];
+  for (const dir of jervCliCandidateDirs(env, home, platform2)) {
+    for (const name of names) out.push((0, import_node_path33.join)(dir, name));
+  }
+  return out;
+}
+function resolveJervCliPath(env = process.env, home = (0, import_node_os12.homedir)(), platform2 = process.platform, exists = import_node_fs34.existsSync) {
+  for (const candidate of jervCliCandidatePaths(env, home, platform2)) {
+    if (exists(candidate)) return candidate;
+  }
+  return void 0;
+}
+function resolveJervCliNodeEntry(shimPath, exists = import_node_fs34.existsSync) {
+  const entry = (0, import_node_path33.join)((0, import_node_path33.dirname)(shimPath), JERV_CLI_ENTRY);
+  return exists(entry) ? entry : void 0;
+}
+function jervCliExecFileArgs(args, opts = {}) {
+  const platform2 = opts.platform ?? process.platform;
+  const exists = opts.exists ?? import_node_fs34.existsSync;
+  const resolved = resolveJervCliPath(opts.env ?? process.env, opts.home ?? (0, import_node_os12.homedir)(), platform2, exists);
+  if (resolved) {
+    const entry = resolveJervCliNodeEntry(resolved, exists);
+    if (entry) {
+      return { file: opts.execPath ?? process.execPath, args: [entry, ...args], via: "node-entry" };
+    }
+  }
+  const bin = resolved ?? "jerv-cli";
+  if (platform2 === "win32") {
+    return { file: "cmd.exe", args: ["/c", bin, ...args], via: resolved ? "cmd-shim" : "bare" };
+  }
+  return { file: bin, args: [...args], via: resolved ? "posix" : "bare" };
+}
+function formatJervCliSpawnFailure(err, plan, candidates) {
+  const base = (err.stderr?.trim() || err.message.trim()).split("\n")[0] || "spawn failed";
+  const code = err.code;
+  if (code !== "ENOENT" && !/\bENOENT\b/i.test(base)) return base;
+  const tried = candidates.length > 0 ? candidates.join(" | ") : "(no candidates)";
+  return `${base} [via=${plan.via} file=${plan.file}; tried: ${tried}]`;
+}
+function isEnoent(err) {
+  const code = err.code;
+  if (code === "ENOENT") return true;
+  return /\bENOENT\b/i.test(err.message ?? "");
+}
+function execJervCli(args, options = {}) {
+  const env = options.env ?? process.env;
+  const candidates = jervCliCandidatePaths(env);
+  const plan = jervCliExecFileArgs(args, { env });
+  return execFileP2(plan.file, plan.args, options).catch((err) => {
+    if (!isEnoent(err)) throw err;
+    const wrapped = new Error(formatJervCliSpawnFailure(err, plan, candidates));
+    Object.assign(wrapped, {
+      code: "ENOENT",
+      stderr: err.stderr,
+      cause: err
+    });
+    throw wrapped;
+  });
+}
+
 // src/merge-cleanup.ts
 var GC_GH_TIMEOUT_MS2 = 2e4;
 async function advanceClosedIssuesToDone2(prNumber, repoOption) {
@@ -28312,7 +28589,8 @@ function assertPrMergeHousekeepingClean(startingPath, context, options = {}) {
   if (verdict.blocked) throw new Error(verdict.reason);
   return housekeeping;
 }
-async function bestEffortLeaseClose(wtPath, exec = (cmd, args) => execFileP2(cmd, args, { timeout: GIT_TIMEOUT_MS })) {
+var defaultLeaseCloseExec = (_cmd, args) => execJervCli(args, { timeout: GIT_TIMEOUT_MS });
+async function bestEffortLeaseClose(wtPath, exec = defaultLeaseCloseExec) {
   const step = "close jerv worktree lease";
   try {
     await exec("jerv-cli", ["lease", "close", "--ref", wtPath]);
@@ -28335,7 +28613,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
   );
   const repoRoot2 = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path33.dirname)((0, import_node_path33.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path34.dirname)((0, import_node_path34.dirname)(worktreeGitRoot)) : repoRoot2;
   const gcActor = describeActor({ env: process.env, surface: detectSurface(process.env), cwd: process.cwd() });
   const owners = readWorktreeOwners(primaryRepoRoot);
   const removalNow = Date.now();
@@ -28366,7 +28644,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
       const cleanup = await cleanupPrMergeLocalBranch(branch.branch, {
         beforeWorktrees,
         startingPath: branch.worktreePath,
-        pathExists: (p) => (0, import_node_fs34.existsSync)(p),
+        pathExists: (p) => (0, import_node_fs35.existsSync)(p),
         execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
         teardownWorktreeStage,
         deferredStore,
@@ -28395,7 +28673,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
     let removalAttempted = false;
     try {
       const cleanupTarget = resolveSafeSiblingWorktreeCleanupTarget(wt.path, siblingRoot, {
-        realpath: (path2) => (0, import_node_fs34.realpathSync)(path2)
+        realpath: (path2) => (0, import_node_fs35.realpathSync)(path2)
       });
       if (!cleanupTarget.ok) {
         result.failed.push(`${wt.path}: ${cleanupTarget.reason}`);
@@ -28482,13 +28760,13 @@ async function composeOverrideBodyFile(prNumber, repoArgs, gh) {
     const commits = JSON.parse(raw).commits ?? [];
     const body = squashBodyWithOverride(commits.map((c) => ({ headline: c.messageHeadline ?? "", body: c.messageBody ?? "" })), process.cwd());
     if (!body) return void 0;
-    const dir = (0, import_node_fs34.mkdtempSync)((0, import_node_path33.join)((0, import_node_os12.tmpdir)(), "mmi-squash-body-"));
-    const path2 = (0, import_node_path33.join)(dir, "body.txt");
-    (0, import_node_fs34.writeFileSync)(path2, `${body}
+    const dir = (0, import_node_fs35.mkdtempSync)((0, import_node_path34.join)((0, import_node_os13.tmpdir)(), "mmi-squash-body-"));
+    const path2 = (0, import_node_path34.join)(dir, "body.txt");
+    (0, import_node_fs35.writeFileSync)(path2, `${body}
 `, "utf8");
     return { path: path2, cleanup: () => {
       try {
-        (0, import_node_fs34.rmSync)(dir, { recursive: true, force: true });
+        (0, import_node_fs35.rmSync)(dir, { recursive: true, force: true });
       } catch {
       }
     } };
@@ -28610,13 +28888,13 @@ var realWorktreeDirRemover = {
   probe: (p) => {
     let st;
     try {
-      st = (0, import_node_fs34.lstatSync)(p);
+      st = (0, import_node_fs35.lstatSync)(p);
     } catch {
       return null;
     }
     if (st.isSymbolicLink()) return "link";
     try {
-      (0, import_node_fs34.readlinkSync)(p);
+      (0, import_node_fs35.readlinkSync)(p);
       return "link";
     } catch {
     }
@@ -28624,7 +28902,7 @@ var realWorktreeDirRemover = {
   },
   readdir: (p) => {
     try {
-      return (0, import_node_fs34.readdirSync)(p);
+      return (0, import_node_fs35.readdirSync)(p);
     } catch {
       return [];
     }
@@ -28633,9 +28911,9 @@ var realWorktreeDirRemover = {
   // leaving the target); a file symlink with unlink. rmdir first, fall back to unlink.
   detachLink: (p) => {
     try {
-      (0, import_node_fs34.rmdirSync)(p);
+      (0, import_node_fs35.rmdirSync)(p);
     } catch {
-      (0, import_node_fs34.unlinkSync)(p);
+      (0, import_node_fs35.unlinkSync)(p);
     }
   },
   removeTree: (p) => (0, import_promises8.rm)(p, { recursive: true, force: true, maxRetries: 5, retryDelay: 200 })
@@ -28668,9 +28946,9 @@ async function worktreeHasStageState(worktreePath) {
   }
 }
 function stageStateFileBelongsToWorktree(statePath, worktreePath) {
-  if (!(0, import_node_fs34.existsSync)(statePath)) return false;
+  if (!(0, import_node_fs35.existsSync)(statePath)) return false;
   try {
-    const state = JSON.parse((0, import_node_fs34.readFileSync)(statePath, "utf8"));
+    const state = JSON.parse((0, import_node_fs35.readFileSync)(statePath, "utf8"));
     const recordedCwd = typeof state.identity?.cwd === "string" ? state.identity.cwd : typeof state.cwd === "string" ? state.cwd : "";
     return Boolean(recordedCwd && isPathUnderDirectory(recordedCwd, worktreePath));
   } catch {
@@ -29001,9 +29279,9 @@ async function checkDocsIndexAtHead(opts, deps) {
 }
 
 // src/worktree-lifecycle-commands.ts
-var import_node_fs35 = require("node:fs");
+var import_node_fs36 = require("node:fs");
 var import_promises9 = require("node:fs/promises");
-var import_node_path34 = require("node:path");
+var import_node_path35 = require("node:path");
 var GH_TIMEOUT_MS = 2e4;
 var STALE_PR_LOOKUP_LIMIT = 20;
 var DEFAULT_BASE = "origin/development";
@@ -29150,7 +29428,7 @@ function classifyStaleLeaks(input) {
 var defaultOrphanDirScanDeps = {
   listDirs: (root) => {
     try {
-      return (0, import_node_fs35.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path34.join)(root, e.name));
+      return (0, import_node_fs36.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path35.join)(root, e.name));
     } catch {
       return [];
     }
@@ -29306,13 +29584,13 @@ function registerWorktreeCommands(program3) {
       const detached = headBorn && !symbolicBranch;
       const branch = symbolicBranch || (detached ? "HEAD" : "");
       if (!wtPath || !branch) return fail("worktree land: not inside a git worktree");
-      const gitFile = (0, import_node_path34.join)(wtPath, ".git");
-      const isLinked = (0, import_node_fs35.existsSync)(gitFile) && (0, import_node_fs35.statSync)(gitFile).isFile();
+      const gitFile = (0, import_node_path35.join)(wtPath, ".git");
+      const isLinked = (0, import_node_fs36.existsSync)(gitFile) && (0, import_node_fs36.statSync)(gitFile).isFile();
       if (apply && !isLinked) {
         return fail("worktree land: run from inside the linked worktree you want to land (this is the primary checkout)");
       }
       const commonDir = (await execFileP2("git", ["rev-parse", "--git-common-dir"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim();
-      const primaryCheckout = commonDir ? (0, import_node_path34.dirname)(commonDir) : wtPath;
+      const primaryCheckout = commonDir ? (0, import_node_path35.dirname)(commonDir) : wtPath;
       const localBranchNames = await execFileP2("git", ["-C", primaryCheckout, "for-each-ref", "--format=%(refname:short)", "refs/heads"], { timeout: GIT_TIMEOUT_MS }).then(({ stdout }) => new Set((stdout || "").split("\n").map((l) => l.trim()).filter(Boolean))).catch(() => void 0);
       const orphan = classifyOrphanedWorktree({
         branch,
@@ -29521,10 +29799,10 @@ async function gatherWorktreeContext() {
     if (s) stages.push({ path: wt.path, port: s.port });
   }
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path34.dirname)((0, import_node_path34.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path35.dirname)((0, import_node_path35.dirname)(worktreeGitRoot)) : repoRoot2;
   const wtRoot = siblingMmiWorktreesRoot(primaryRepoRoot);
   let orphanDirs = [];
-  if ((0, import_node_fs35.existsSync)(wtRoot)) {
+  if ((0, import_node_fs36.existsSync)(wtRoot)) {
     orphanDirs = scanOrphanDirs(wtRoot, worktreeGitRoot, {
       ...defaultOrphanDirScanDeps,
       listDirs: (root) => worktreeScanDirs(root, primaryRepoRoot, defaultOrphanDirScanDeps.listDirs, isRepoCheckoutDir)
@@ -29550,7 +29828,7 @@ ${err.stderr ?? ""}`;
 }
 
 // src/issue-commands.ts
-var import_node_fs36 = require("node:fs");
+var import_node_fs37 = require("node:fs");
 var import_node_crypto7 = require("node:crypto");
 var ghRunner = async (args, timeoutMs) => (await execFileP2("gh", args, { timeout: timeoutMs })).stdout;
 var ReparentConflictError = class extends Error {
@@ -29568,7 +29846,7 @@ async function editIssue(client, options, deps = {}) {
   const url = `https://github.com/${repo}/issues/${parsed.number}`;
   const patch = {};
   let bodyChanged = false;
-  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs36.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
+  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs37.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
   if (options.titleFile !== void 0) {
     patch.title = await resolveIssueTitle({ title: options.title, titleFile: options.titleFile }, textDeps());
   } else if (options.title !== void 0) {
@@ -30173,7 +30451,7 @@ function extendCreateCommand(issue2, batchAttach) {
     if (opts.batch) {
       let specs;
       try {
-        const raw = (0, import_node_fs36.readFileSync)(opts.batch, "utf8");
+        const raw = (0, import_node_fs37.readFileSync)(opts.batch, "utf8");
         specs = JSON.parse(raw);
         if (!Array.isArray(specs)) throw new Error("batch file must contain a JSON array");
       } catch (e) {
@@ -30248,8 +30526,8 @@ ${lines}`, {
 }
 
 // src/train-commands.ts
-var import_node_fs37 = require("node:fs");
-var import_node_path35 = require("node:path");
+var import_node_fs38 = require("node:fs");
+var import_node_path36 = require("node:path");
 
 // src/train-status.ts
 function buildTrainStatusReport(input) {
@@ -30289,7 +30567,7 @@ function formatTrainStatus(r) {
 // src/train-commands.ts
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs37.readFileSync)((0, import_node_path35.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs38.readFileSync)((0, import_node_path36.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -30435,9 +30713,9 @@ function registerDeployCommands(program3) {
 }
 
 // src/discovery-commands.ts
-var import_node_fs38 = require("node:fs");
-var import_node_os13 = require("node:os");
-var import_node_path36 = require("node:path");
+var import_node_fs39 = require("node:fs");
+var import_node_os14 = require("node:os");
+var import_node_path37 = require("node:path");
 var GC_GH_TIMEOUT_MS3 = 2e4;
 async function collectStatus() {
   const repo = await resolveRepo();
@@ -30625,10 +30903,10 @@ async function collectOnboardStatus(opts = {}) {
     else if (top) nextCommand = `mmi-cli board claim ${top.number}  # ${top.title}`;
     else nextCommand = "mmi-cli board read \u2014 no claimable items found";
   }
-  const home = (0, import_node_os13.homedir)();
+  const home = (0, import_node_os14.homedir)();
   const plugin = onboardPluginGate({
-    readKnown: () => readFileSyncSafe((0, import_node_path36.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs38.readFileSync),
-    readSettings: () => readFileSyncSafe((0, import_node_path36.join)(home, ".claude", "settings.json"), import_node_fs38.readFileSync)
+    readKnown: () => readFileSyncSafe((0, import_node_path37.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs39.readFileSync),
+    readSettings: () => readFileSyncSafe((0, import_node_path37.join)(home, ".claude", "settings.json"), import_node_fs39.readFileSync)
   });
   return { track, board, registry: registry2, secrets, plugin, estateCli, nextCommand };
 }
@@ -31532,19 +31810,19 @@ function registerSessionReport(program3) {
 }
 
 // src/plugin-release-catchup.ts
-var import_node_fs39 = require("node:fs");
-var import_node_path37 = require("node:path");
-var import_node_os14 = require("node:os");
+var import_node_fs40 = require("node:fs");
+var import_node_path38 = require("node:path");
+var import_node_os15 = require("node:os");
 var RELEASE_CATCHUP_TTL_MS = 24 * 60 * 60 * 1e3;
 var RELEASE_CATCHUP_DISABLE_ENV = "MMI_NO_RELEASE_CATCHUP";
 function releaseCatchupStatePath(env = process.env) {
   if (env.MMI_RELEASE_CATCHUP_STATE) return env.MMI_RELEASE_CATCHUP_STATE;
   if (process.platform === "win32") {
-    const base2 = env.LOCALAPPDATA || (0, import_node_path37.join)((0, import_node_os14.homedir)(), "AppData", "Local");
-    return (0, import_node_path37.join)(base2, "MMI Future", "mmi-cli", "release-catchup.json");
+    const base2 = env.LOCALAPPDATA || (0, import_node_path38.join)((0, import_node_os15.homedir)(), "AppData", "Local");
+    return (0, import_node_path38.join)(base2, "MMI Future", "mmi-cli", "release-catchup.json");
   }
-  const base = env.XDG_STATE_HOME || (0, import_node_path37.join)((0, import_node_os14.homedir)(), ".local", "state");
-  return (0, import_node_path37.join)(base, "mmi-cli", "release-catchup.json");
+  const base = env.XDG_STATE_HOME || (0, import_node_path38.join)((0, import_node_os15.homedir)(), ".local", "state");
+  return (0, import_node_path38.join)(base, "mmi-cli", "release-catchup.json");
 }
 function releaseCatchupDue(state, now, force = false) {
   if (force) return true;
@@ -31554,7 +31832,7 @@ function releaseCatchupDue(state, now, force = false) {
 function newestCachedPluginVersion(home) {
   let names;
   try {
-    names = (0, import_node_fs39.readdirSync)(pluginCacheRoot(home));
+    names = (0, import_node_fs40.readdirSync)(pluginCacheRoot(home));
   } catch {
     return void 0;
   }
@@ -31562,15 +31840,15 @@ function newestCachedPluginVersion(home) {
 }
 function marketplaceClonePath(home) {
   try {
-    const parsed = JSON.parse((0, import_node_fs39.readFileSync)((0, import_node_path37.join)(home, ".claude", "plugins", "known_marketplaces.json"), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs40.readFileSync)((0, import_node_path38.join)(home, ".claude", "plugins", "known_marketplaces.json"), "utf8"));
     if (parsed.mutmutco?.installLocation) return parsed.mutmutco.installLocation;
   } catch {
   }
-  return (0, import_node_path37.join)(home, ".claude", "plugins", "marketplaces", "mutmutco");
+  return (0, import_node_path38.join)(home, ".claude", "plugins", "marketplaces", "mutmutco");
 }
 function readCatalogVersion(home) {
   try {
-    const parsed = JSON.parse((0, import_node_fs39.readFileSync)((0, import_node_path37.join)(marketplaceClonePath(home), ".claude-plugin", "marketplace.json"), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs40.readFileSync)((0, import_node_path38.join)(marketplaceClonePath(home), ".claude-plugin", "marketplace.json"), "utf8"));
     return parsed.plugins?.find((p) => p.name === "mmi")?.version;
   } catch {
     return void 0;
@@ -31578,7 +31856,7 @@ function readCatalogVersion(home) {
 }
 function readMmiInstallRecord(home) {
   try {
-    const parsed = JSON.parse((0, import_node_fs39.readFileSync)((0, import_node_path37.join)(home, ".claude", "plugins", "installed_plugins.json"), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs40.readFileSync)((0, import_node_path38.join)(home, ".claude", "plugins", "installed_plugins.json"), "utf8"));
     const record = parsed.plugins?.["mmi@mutmutco"]?.[0];
     return record?.version ? { version: record.version, gitCommitSha: record.gitCommitSha } : void 0;
   } catch {
@@ -31587,7 +31865,7 @@ function readMmiInstallRecord(home) {
 }
 async function runReleaseCatchup(home, env, deps, opts = {}) {
   if (env[RELEASE_CATCHUP_DISABLE_ENV]) return { ok: true, skipped: true, detail: `disabled via ${RELEASE_CATCHUP_DISABLE_ENV}` };
-  if (!(0, import_node_fs39.existsSync)(pluginCacheRoot(home))) return { ok: true, skipped: true, detail: "no mmi plugin cache on this machine \u2014 nothing to catch up" };
+  if (!(0, import_node_fs40.existsSync)(pluginCacheRoot(home))) return { ok: true, skipped: true, detail: "no mmi plugin cache on this machine \u2014 nothing to catch up" };
   const statePath = releaseCatchupStatePath(env);
   const state = deps.readState(statePath);
   if (!releaseCatchupDue(state, deps.now(), opts.force)) {
@@ -31612,8 +31890,8 @@ async function runReleaseCatchup(home, env, deps, opts = {}) {
     return { ok: false, detail: `released ${latest} but the install record could not be cleared \u2014 nothing changed (record still ${prior.version})` };
   }
   const installed = await deps.runClaude(["plugin", "install", "mmi@mutmutco"], "claude plugin install mmi@mutmutco");
-  const payload = (0, import_node_path37.join)(pluginCacheRoot(home), latest, ".pi-plugin");
-  if (!installed || !(0, import_node_fs39.existsSync)(payload)) {
+  const payload = (0, import_node_path38.join)(pluginCacheRoot(home), latest, ".pi-plugin");
+  if (!installed || !(0, import_node_fs40.existsSync)(payload)) {
     const why = installed ? `install of ${latest} did not produce a verifiable .pi-plugin payload` : `install of ${latest} failed`;
     if (!prior) return { ok: false, detail: `${why}; no prior record to restore` };
     const rollback = await restorePriorRecord(home, prior, deps);
@@ -31641,7 +31919,7 @@ async function restorePriorRecord(home, prior, deps) {
 }
 function shouldSpawnReleaseCatchup(home, env, readState2, now = Date.now()) {
   if (env[RELEASE_CATCHUP_DISABLE_ENV]) return false;
-  if (!(0, import_node_fs39.existsSync)(pluginCacheRoot(home))) return false;
+  if (!(0, import_node_fs40.existsSync)(pluginCacheRoot(home))) return false;
   return releaseCatchupDue(readState2(releaseCatchupStatePath(env)), now);
 }
 function defaultRegistrationHeal(home, env) {
@@ -33687,17 +33965,17 @@ function parseOriginRepo(remoteUrl) {
 }
 function ghHostsConfigPath(env, platform2) {
   const sep3 = platform2 === "win32" ? "\\" : "/";
-  const join35 = (...parts) => parts.join(sep3);
+  const join36 = (...parts) => parts.join(sep3);
   const explicit = env.GH_CONFIG_DIR?.trim();
-  if (explicit) return join35(explicit, "hosts.yml");
+  if (explicit) return join36(explicit, "hosts.yml");
   if (platform2 === "win32") {
     const appData = (env.AppData ?? env.APPDATA)?.trim();
-    return appData ? join35(appData, "GitHub CLI", "hosts.yml") : void 0;
+    return appData ? join36(appData, "GitHub CLI", "hosts.yml") : void 0;
   }
   const xdg = env.XDG_CONFIG_HOME?.trim();
-  if (xdg) return join35(xdg, "gh", "hosts.yml");
+  if (xdg) return join36(xdg, "gh", "hosts.yml");
   const home = env.HOME?.trim();
-  return home ? join35(home, ".config", "gh", "hosts.yml") : void 0;
+  return home ? join36(home, ".config", "gh", "hosts.yml") : void 0;
 }
 function parseGhHostsAccounts(yaml, host = "github.com") {
   let hostIndent = null;
@@ -33747,9 +34025,9 @@ function ghAccountCaveat(announcedLogin, accounts) {
 }
 
 // src/doctor-io.ts
-var import_node_fs40 = require("node:fs");
-var import_node_os15 = require("node:os");
-var import_node_path38 = require("node:path");
+var import_node_fs41 = require("node:fs");
+var import_node_os16 = require("node:os");
+var import_node_path39 = require("node:path");
 var import_node_child_process18 = require("node:child_process");
 var import_node_util8 = require("node:util");
 var execFileP6 = (0, import_node_util8.promisify)(import_node_child_process18.execFile);
@@ -33757,7 +34035,7 @@ var MMI_PLUGIN_ID2 = "mmi@mutmutco";
 function installedClaudePluginVersion() {
   try {
     const file = JSON.parse(
-      (0, import_node_fs40.readFileSync)((0, import_node_path38.join)((0, import_node_os15.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
+      (0, import_node_fs41.readFileSync)((0, import_node_path39.join)((0, import_node_os16.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
     );
     const versions = (file.plugins?.[MMI_PLUGIN_ID2] ?? []).map((r) => r.version).filter((v) => Boolean(v));
     if (versions.length === 0) return void 0;
@@ -33768,7 +34046,7 @@ function installedClaudePluginVersion() {
 }
 function manifestVersion(path2) {
   try {
-    const manifest = JSON.parse((0, import_node_fs40.readFileSync)(path2, "utf8"));
+    const manifest = JSON.parse((0, import_node_fs41.readFileSync)(path2, "utf8"));
     return typeof manifest.version === "string" && manifest.version.trim() ? manifest.version.trim() : void 0;
   } catch {
     return void 0;
@@ -33778,22 +34056,22 @@ function installedSurfacePluginVersion(surface) {
   const token = surfaceToken(surface);
   if (token === "kilo") {
     try {
-      const stamp = (0, import_node_fs40.readFileSync)((0, import_node_path38.join)((0, import_node_os15.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
+      const stamp = (0, import_node_fs41.readFileSync)((0, import_node_path39.join)((0, import_node_os16.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
       return stamp || void 0;
     } catch {
       return void 0;
     }
   }
   if (token === "cursor") {
-    return manifestVersion((0, import_node_path38.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
+    return manifestVersion((0, import_node_path39.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
   }
   if (token === "jervcode") {
     const entry = mmiPiWrapperEntry();
     if (!entry) return void 0;
-    return manifestVersion((0, import_node_path38.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
+    return manifestVersion((0, import_node_path39.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
   }
   if (token === "kimi") {
-    return manifestVersion((0, import_node_path38.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
+    return manifestVersion((0, import_node_path39.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
   }
   if (token === "claude") return installedClaudePluginVersion();
   if (token !== "codex") return void 0;
@@ -33831,13 +34109,13 @@ function worktreeRootSync() {
 }
 var gitignorePath = () => {
   const root = worktreeRootSync();
-  return root === null ? null : (0, import_node_path38.join)(root, ".gitignore");
+  return root === null ? null : (0, import_node_path39.join)(root, ".gitignore");
 };
 function readGitignore() {
   const path2 = gitignorePath();
   if (path2 === null) return null;
   try {
-    return (0, import_node_fs40.readFileSync)(path2, "utf8");
+    return (0, import_node_fs41.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -33846,7 +34124,7 @@ function writeGitignore(content) {
   const path2 = gitignorePath();
   if (path2 === null) return false;
   try {
-    (0, import_node_fs40.writeFileSync)(path2, content, "utf8");
+    (0, import_node_fs41.writeFileSync)(path2, content, "utf8");
     return true;
   } catch {
     return false;
@@ -33870,7 +34148,7 @@ async function repoRoot() {
 }
 function hasRepoLocalWorktrees() {
   const root = worktreeRootSync();
-  return root !== null && (0, import_node_fs40.existsSync)((0, import_node_path38.join)(root, ".worktrees"));
+  return root !== null && (0, import_node_fs41.existsSync)((0, import_node_path39.join)(root, ".worktrees"));
 }
 
 // src/index.ts
@@ -33889,8 +34167,8 @@ ${r.stderr ?? ""}`).catch(() => "");
 function ghMultiAccountCaveat(announcedLogin) {
   try {
     const hostsPath = ghHostsConfigPath(process.env, process.platform);
-    if (!hostsPath || !(0, import_node_fs41.existsSync)(hostsPath)) return void 0;
-    return ghAccountCaveat(announcedLogin, parseGhHostsAccounts((0, import_node_fs41.readFileSync)(hostsPath, "utf8")));
+    if (!hostsPath || !(0, import_node_fs42.existsSync)(hostsPath)) return void 0;
+    return ghAccountCaveat(announcedLogin, parseGhHostsAccounts((0, import_node_fs42.readFileSync)(hostsPath, "utf8")));
   } catch {
     return void 0;
   }
@@ -33898,12 +34176,12 @@ function ghMultiAccountCaveat(announcedLogin) {
 var ENV_HEAL_LOCK_STALE_MS = 10 * 6e4;
 var ENV_HEAL_LOCK_MAX_WAIT_MS = 2 * 6e4;
 function envHealLockPath(home) {
-  return (0, import_node_path39.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
+  return (0, import_node_path40.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
 }
 async function withEnvHealLock(what, run) {
   try {
     return await withFileLock(
-      envHealLockPath((0, import_node_os16.homedir)()),
+      envHealLockPath((0, import_node_os17.homedir)()),
       { staleMs: ENV_HEAL_LOCK_STALE_MS, maxWaitMs: ENV_HEAL_LOCK_MAX_WAIT_MS, label: "mmi env-heal lock" },
       run
     );
@@ -34000,7 +34278,7 @@ function mmiDoctorDeps(opts = {}) {
       const configRoot = surfaceConfigRoot(surface);
       const running = surface === "codex" ? installedActivePluginVersion(surface) : runningPluginVersion(process.env, resolveClientVersion());
       const plan = buildPluginCachePlan(
-        (0, import_node_os16.homedir)(),
+        (0, import_node_os17.homedir)(),
         running,
         pluginCacheFsDeps(configRoot, () => 0),
         { configRoot, includeStaging: surface !== "codex" }
@@ -34024,14 +34302,14 @@ function mmiDoctorDeps(opts = {}) {
       const running = surface === "codex" ? installedActivePluginVersion(surface) : runningPluginVersion(process.env, resolveClientVersion());
       const installed = installedActivePluginVersion(surface);
       const plan = buildPluginCachePlan(
-        (0, import_node_os16.homedir)(),
+        (0, import_node_os17.homedir)(),
         running,
         pluginCacheFsDeps(configRoot, () => 0),
         { configRoot, includeStaging: surface !== "codex", installedVersion: installed }
       );
       const result = applyPluginCachePlan(
         plan,
-        (p) => (0, import_node_fs41.rmSync)(p, { recursive: true }),
+        (p) => (0, import_node_fs42.rmSync)(p, { recursive: true }),
         stagingApplyFsGuard(configRoot)
       );
       return {
@@ -34059,12 +34337,12 @@ function mmiDoctorDeps(opts = {}) {
     piPluginState: () => {
       const env = { ...process.env };
       delete env.CLAUDE_PLUGIN_ROOT;
-      return readPiPluginState((0, import_node_os16.homedir)(), env);
+      return readPiPluginState((0, import_node_os17.homedir)(), env);
     },
     healPiPlugin: () => {
       const env = { ...process.env };
       delete env.CLAUDE_PLUGIN_ROOT;
-      return healPiPluginRegistration((0, import_node_os16.homedir)(), env);
+      return healPiPluginRegistration((0, import_node_os17.homedir)(), env);
     },
     // #3470: what the SessionStart hook LAST emitted, measured at emission by the session-start verb below.
     // A local record read ? cheap enough for every lane, including the banner.
@@ -34074,17 +34352,17 @@ function mmiDoctorDeps(opts = {}) {
     marketplaceRows: () => {
       try {
         if (detectSurface(process.env) === "codex") return [];
-        const home = (0, import_node_os16.homedir)();
+        const home = (0, import_node_os17.homedir)();
         const rows = marketplaceRows(
           MMI_MARKETPLACE_NAME,
-          readFileSyncSafe((0, import_node_path39.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs41.readFileSync),
-          readFileSyncSafe((0, import_node_path39.join)(home, ".claude", "settings.json"), import_node_fs41.readFileSync),
+          readFileSyncSafe((0, import_node_path40.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs42.readFileSync),
+          readFileSyncSafe((0, import_node_path40.join)(home, ".claude", "settings.json"), import_node_fs42.readFileSync),
           // #3974: this CLI heals these rows, so report mode names the doctor run rather than the hand
           // edit. Unconditional ? it is a fact about mmi-cli, not about the lane this run is on.
           true
         );
         const pending = readMarketplacePinPending(
-          (0, import_node_path39.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"),
+          (0, import_node_path40.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"),
           MMI_MARKETPLACE_NAME
         );
         if (!pending) return rows;
@@ -34108,11 +34386,11 @@ function mmiDoctorDeps(opts = {}) {
     healMarketplacePins: () => {
       try {
         if (detectSurface(process.env) === "codex") return void 0;
-        const home = (0, import_node_os16.homedir)();
+        const home = (0, import_node_os17.homedir)();
         const names = [MMI_MARKETPLACE_NAME];
-        const result = applyOrgMarketplacePins((0, import_node_path39.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), names);
+        const result = applyOrgMarketplacePins((0, import_node_path40.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), names);
         if (result?.wrote) {
-          writeMarketplacePinPending((0, import_node_path39.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"), names);
+          writeMarketplacePinPending((0, import_node_path40.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"), names);
         }
         return result;
       } catch {
@@ -34128,7 +34406,7 @@ function mmiDoctorDeps(opts = {}) {
     // adopted the generated routing index (MMG-Unlive: `docs/Archive/**` only, no index, no gate.yml) would
     // get a permanent ? demanding an artifact it never asked for.
     docsIndexState: (root) => {
-      if (!(0, import_node_fs41.existsSync)((0, import_node_path39.join)(root, DOCS_INDEX_PATH))) return void 0;
+      if (!(0, import_node_fs42.existsSync)((0, import_node_path40.join)(root, DOCS_INDEX_PATH))) return void 0;
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -34137,7 +34415,7 @@ function mmiDoctorDeps(opts = {}) {
     },
     // #4168: working-tree heal — write if drifted, then re-check. Commit remains the operator's step.
     healDocsIndex: (root) => {
-      if (!(0, import_node_fs41.existsSync)((0, import_node_path39.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
+      if (!(0, import_node_fs42.existsSync)((0, import_node_path40.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -34472,19 +34750,19 @@ program2.hook("preAction", async (_thisCommand, actionCommand) => {
 });
 var rules = program2.command("rules").description("org-managed .gitignore delivery");
 rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").option("--json", "machine-readable output").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
-  const path2 = (0, import_node_path39.join)(process.cwd(), ".gitignore");
-  const current = (0, import_node_fs41.existsSync)(path2) ? (0, import_node_fs41.readFileSync)(path2, "utf8") : null;
+  const path2 = (0, import_node_path40.join)(process.cwd(), ".gitignore");
+  const current = (0, import_node_fs42.existsSync)(path2) ? (0, import_node_fs42.readFileSync)(path2, "utf8") : null;
   const plan = planManagedGitignore(current);
   const drift = [...plan.added.map((l) => `+${l}`), ...plan.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
   if (opts.json) {
-    if (opts.write && plan.changed) (0, import_node_fs41.writeFileSync)(path2, plan.content, "utf8");
+    if (opts.write && plan.changed) (0, import_node_fs42.writeFileSync)(path2, plan.content, "utf8");
     console.log(JSON.stringify(plan, null, 2));
     if (!opts.write && plan.changed) process.exitCode = 1;
     return;
   }
   if (opts.write) {
     if (plan.changed) {
-      (0, import_node_fs41.writeFileSync)(path2, plan.content, "utf8");
+      (0, import_node_fs42.writeFileSync)(path2, plan.content, "utf8");
       console.log(`mmi-cli org rules gitignore: updated .gitignore (${drift})`);
     } else {
       console.log("mmi-cli org rules gitignore: up to date");
@@ -34642,8 +34920,8 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
   if (!Number.isFinite(limit) || limit < 1) return fail("worktree gc: --limit must be a positive integer");
   let root;
   if (o.root !== void 0) {
-    root = (0, import_node_path39.resolve)(o.root);
-    if (!(0, import_node_fs41.existsSync)(root) || !(0, import_node_fs41.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
+    root = (0, import_node_path40.resolve)(o.root);
+    if (!(0, import_node_fs42.existsSync)(root) || !(0, import_node_fs42.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
     const gcRepoRoot = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
     if (isPathUnderDirectory(gcRepoRoot, root)) {
       return fail(`worktree gc: --root ${root} contains this checkout ? name a worktrees root, not the repo or an ancestor of it`);
@@ -34723,7 +35001,7 @@ async function currentWorktreeRemovalContext(command, force) {
   };
 }
 async function unprovenWorktreeReason(wtPath, repoRoot2) {
-  if (!(0, import_node_fs41.existsSync)(wtPath)) return `${wtPath} does not exist on disk`;
+  if (!(0, import_node_fs42.existsSync)(wtPath)) return `${wtPath} does not exist on disk`;
   const porcelain = (await execFileP2("git", ["-C", repoRoot2, "worktree", "list", "--porcelain"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
   const registered = parseWorktreePorcelainEntries(porcelain);
   if (!registered.length) {
@@ -34745,26 +35023,26 @@ function makeProvisionDeps(worktreeRoot, quiet, log) {
 function acquireWorktreeSetupLock(worktreeRoot) {
   const lockPath = repoRuntimeStatePath(worktreeRoot, "worktree-setup.lock");
   const take = () => {
-    const fd = (0, import_node_fs41.openSync)(lockPath, "wx");
+    const fd = (0, import_node_fs42.openSync)(lockPath, "wx");
     try {
-      (0, import_node_fs41.writeSync)(fd, String(Date.now()));
+      (0, import_node_fs42.writeSync)(fd, String(Date.now()));
     } finally {
-      (0, import_node_fs41.closeSync)(fd);
+      (0, import_node_fs42.closeSync)(fd);
     }
     return () => {
       try {
-        (0, import_node_fs41.rmSync)(lockPath, { force: true });
+        (0, import_node_fs42.rmSync)(lockPath, { force: true });
       } catch {
       }
     };
   };
   try {
-    (0, import_node_fs41.mkdirSync)((0, import_node_path39.dirname)(lockPath), { recursive: true });
+    (0, import_node_fs42.mkdirSync)((0, import_node_path40.dirname)(lockPath), { recursive: true });
     return take();
   } catch {
     try {
-      if (Date.now() - (0, import_node_fs41.statSync)(lockPath).mtimeMs > WORKTREE_SETUP_LOCK_TTL_MS) {
-        (0, import_node_fs41.rmSync)(lockPath, { force: true });
+      if (Date.now() - (0, import_node_fs42.statSync)(lockPath).mtimeMs > WORKTREE_SETUP_LOCK_TTL_MS) {
+        (0, import_node_fs42.rmSync)(lockPath, { force: true });
         return take();
       }
     } catch {
@@ -34790,6 +35068,11 @@ withExamples(mutating(
       const resolvedRepo = await resolveRepo();
       if (!resolvedRepo) return fail("worktree create: could not resolve the repo for the issue ref (run from a repo checkout)");
       selector = parseIssueSelector(target, resolvedRepo);
+      if (selector.repo.toLowerCase() !== resolvedRepo.toLowerCase()) {
+        return fail(
+          `worktree create: issue ${selector.repo}#${selector.number} belongs to ${selector.repo}, but this checkout is ${resolvedRepo} \u2014 re-run from ${selector.repo}'s primary checkout. Refusing to attach a foreign issue branch here (MMI-Hub#4351).`
+        );
+      }
       const slug = o.slug ?? await fetchIssueTitle(selector.repo, selector.number).then((t) => t ? slugifyIssueTitle(t) : "");
       branch = buildNewBranchName(selector.number, slug ?? "");
       if (PROTECTED_BRANCHES2.has(branch)) {
@@ -34903,7 +35186,7 @@ withExamples(mutating(
     appendWorktreeEvent(repoRoot2, { action: "created", command: "worktree create", target: wtPath, branch, actor: owner.actor });
     let lease;
     try {
-      await execFileP2("jerv-cli", [
+      await execJervCli([
         "lease",
         "open",
         "--kind",
@@ -35612,7 +35895,7 @@ project.command("set [owner/repo]").description("upsert project META (idempotent
   if (dupe) return fail(`org project set: KEY "${dupe}" was passed to both --var and --set; --set is an alias of --var, so pass each KEY once`);
   if (o.secretsFile) {
     try {
-      vars.push(`secrets=${(0, import_node_fs41.readFileSync)(o.secretsFile, "utf8")}`);
+      vars.push(`secrets=${(0, import_node_fs42.readFileSync)(o.secretsFile, "utf8")}`);
     } catch (e) {
       return fail(`org project set: cannot read --secrets-file ${o.secretsFile}: ${e.message}`);
     }
@@ -36366,11 +36649,11 @@ pr.command("view <number>").description("read a PR as structured JSON (merged st
   }
 });
 async function listCiWorkflowPaths(cwd = process.cwd()) {
-  const wfDir = (0, import_node_path39.join)(cwd, ".github", "workflows");
-  if (!(0, import_node_fs41.existsSync)(wfDir)) return [];
-  return (0, import_node_fs41.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
+  const wfDir = (0, import_node_path40.join)(cwd, ".github", "workflows");
+  if (!(0, import_node_fs42.existsSync)(wfDir)) return [];
+  return (0, import_node_fs42.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
     try {
-      return workflowReportsPrChecks((0, import_node_fs41.readFileSync)((0, import_node_path39.join)(wfDir, name), "utf8"));
+      return workflowReportsPrChecks((0, import_node_fs42.readFileSync)((0, import_node_path40.join)(wfDir, name), "utf8"));
     } catch {
       return true;
     }
@@ -36402,16 +36685,16 @@ function ciAuditDeps() {
     // gate re-seed step is skipped gracefully rather than failing mid-run.
     readSeedFile: (path2) => {
       if (!root) return null;
-      const fullPath = (0, import_node_path39.join)(root, path2);
-      return (0, import_node_fs41.existsSync)(fullPath) ? (0, import_node_fs41.readFileSync)(fullPath, "utf8") : null;
+      const fullPath = (0, import_node_path40.join)(root, path2);
+      return (0, import_node_fs42.existsSync)(fullPath) ? (0, import_node_fs42.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
 function hubRoot() {
-  const fromPkg = (0, import_node_path39.join)(__dirname, "..", "..");
+  const fromPkg = (0, import_node_path40.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs41.existsSync)((0, import_node_path39.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs41.existsSync)((0, import_node_path39.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs42.existsSync)((0, import_node_path40.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs42.existsSync)((0, import_node_path40.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 pr.command("ci-policy").description("report merge CI policy: wait-for-checks vs no-ci (for grind/build agents)").option("--json", "machine-readable output").option("--repo <owner/repo>", "target repo (defaults to the current checkout)").action(async (o) => {
@@ -36723,7 +37006,7 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
     localCleanup = await cleanupPrMergeLocalBranch(headRef, {
       beforeWorktrees,
       startingPath,
-      pathExists: (p) => (0, import_node_fs41.existsSync)(p),
+      pathExists: (p) => (0, import_node_fs42.existsSync)(p),
       execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
       teardownWorktreeStage,
       deferredStore,
@@ -37219,12 +37502,12 @@ access.command("audit").description("audit collaborator roles + train-branch pus
     targets = resolution.targets;
   }
   const derivedMatrix = registryProjects ? accessMatrixFromProjects(registryProjects) : {};
-  const fileMatrix = (0, import_node_fs41.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs41.readFileSync)("access-matrix.json", "utf8")) : {};
+  const fileMatrix = (0, import_node_fs42.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs42.readFileSync)("access-matrix.json", "utf8")) : {};
   const matrix = mergeAccessMatrix(fileMatrix, derivedMatrix);
   const derivedContracts = registryProjects ? dataAccessContractsFromProjects(registryProjects) : { consumers: {} };
-  const fileContracts = (0, import_node_fs41.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs41.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
+  const fileContracts = (0, import_node_fs42.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs42.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
   const dataAccess = mergeDataAccessContracts(fileContracts, derivedContracts);
-  const sanctioned = (0, import_node_fs41.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs41.readFileSync)("access-matrix.json", "utf8")) : {};
+  const sanctioned = (0, import_node_fs42.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs42.readFileSync)("access-matrix.json", "utf8")) : {};
   const report = await auditOrgAccess(targets, deps, matrix, dataAccess, sanctioned);
   console.log(o.json ? JSON.stringify(report, null, 2) : renderAccessReport(report));
   if (!report.ok) process.exitCode = 1;
@@ -37256,16 +37539,16 @@ function directoryBytes(path2) {
   let total = 0;
   let entries;
   try {
-    entries = (0, import_node_fs41.readdirSync)(path2, { withFileTypes: true });
+    entries = (0, import_node_fs42.readdirSync)(path2, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const entry of entries) {
-    const child2 = (0, import_node_path39.join)(path2, entry.name);
+    const child2 = (0, import_node_path40.join)(path2, entry.name);
     if (entry.isDirectory()) total += directoryBytes(child2);
     else {
       try {
-        total += (0, import_node_fs41.statSync)(child2).size;
+        total += (0, import_node_fs42.statSync)(child2).size;
       } catch {
       }
     }
@@ -37273,25 +37556,25 @@ function directoryBytes(path2) {
   return total;
 }
 function listDirEntries(dir) {
-  return (0, import_node_fs41.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
+  return (0, import_node_fs42.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
 }
 function readInstalledPluginRefs(configRoot) {
   const p = installedPluginsPathForConfig(configRoot);
-  if (!(0, import_node_fs41.existsSync)(p)) return [];
+  if (!(0, import_node_fs42.existsSync)(p)) return [];
   try {
-    return installedPluginPaths((0, import_node_fs41.readFileSync)(p, "utf8"));
+    return installedPluginPaths((0, import_node_fs42.readFileSync)(p, "utf8"));
   } catch {
     return null;
   }
 }
 function pluginCacheFsDeps(configRoot, dirBytes) {
   return {
-    exists: (p) => (0, import_node_fs41.existsSync)(p),
-    listVersionDirs: (root) => (0, import_node_fs41.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
+    exists: (p) => (0, import_node_fs42.existsSync)(p),
+    listVersionDirs: (root) => (0, import_node_fs42.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
     dirBytes,
-    listStagingDirs: (root) => (0, import_node_fs41.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
+    listStagingDirs: (root) => (0, import_node_fs42.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
       try {
-        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path39.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs41.statSync)(p).mtimeMs) };
+        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path40.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs42.statSync)(p).mtimeMs) };
       } catch {
         return { name: d.name, mtimeMs: Date.now() };
       }
@@ -37305,10 +37588,10 @@ function stagingApplyFsGuard(configRoot) {
   return {
     referencedPaths: () => readInstalledPluginRefs(configRoot),
     mtimeMs: (name) => {
-      const p = (0, import_node_path39.join)(stagingRoot, name);
-      if (!(0, import_node_fs41.existsSync)(p)) return null;
+      const p = (0, import_node_path40.join)(stagingRoot, name);
+      if (!(0, import_node_fs42.existsSync)(p)) return null;
       try {
-        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs41.statSync)(q).mtimeMs);
+        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs42.statSync)(q).mtimeMs);
       } catch {
         return null;
       }
@@ -37328,13 +37611,13 @@ program2.command("plugin-prune").description(`prune stale cached MMI plugin vers
     return;
   }
   const plan = buildPluginCachePlan(
-    (0, import_node_os16.homedir)(),
+    (0, import_node_os17.homedir)(),
     running,
     pluginCacheFsDeps(configRoot, directoryBytes),
     { withBytes: true, configRoot, includeStaging: surface !== "codex" }
   );
   const anythingToDelete = plan.prune.length > 0 || plan.staging.length > 0;
-  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs41.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
+  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs42.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
   const warnings = plan.prune.length > 0 ? [CONCURRENT_SESSION_WARNING] : [];
   if (o.json) console.log(JSON.stringify({ ...plan, warnings, applied: result ?? null }));
   else console.log(renderPluginCachePlan(plan, result));
@@ -37342,7 +37625,7 @@ program2.command("plugin-prune").description(`prune stale cached MMI plugin vers
 });
 function readReleaseCatchupState(path2) {
   try {
-    const parsed = JSON.parse((0, import_node_fs41.readFileSync)(path2, "utf8"));
+    const parsed = JSON.parse((0, import_node_fs42.readFileSync)(path2, "utf8"));
     return typeof parsed?.checkedAt === "number" ? parsed : void 0;
   } catch {
     return void 0;
@@ -37350,8 +37633,8 @@ function readReleaseCatchupState(path2) {
 }
 function writeReleaseCatchupState(path2, state) {
   try {
-    (0, import_node_fs41.mkdirSync)((0, import_node_path39.dirname)(path2), { recursive: true });
-    (0, import_node_fs41.writeFileSync)(path2, `${JSON.stringify(state)}
+    (0, import_node_fs42.mkdirSync)((0, import_node_path40.dirname)(path2), { recursive: true });
+    (0, import_node_fs42.writeFileSync)(path2, `${JSON.stringify(state)}
 `);
   } catch {
   }
@@ -37359,7 +37642,7 @@ function writeReleaseCatchupState(path2, state) {
 program2.command("plugin-release-catchup").description("install a newer released MMI plugin clone non-destructively and re-point the Pi registration (#4297); TTL-gated no-op when current").option("--force", "skip the 24h TTL (acceptance proof / manual run)").option("--quiet", "print only failures (the detached session-start lane)").option("--json", "machine-readable output").action(async (o) => {
   const outcome = await withEnvHealLock(
     "plugin release catch-up",
-    () => runReleaseCatchup((0, import_node_os16.homedir)(), process.env, {
+    () => runReleaseCatchup((0, import_node_os17.homedir)(), process.env, {
       fetchReleased: fetchNpmReleasedVersion,
       runClaude: (args, step) => runPluginCli("claude", args, (msg) => {
         if (!o.quiet && !o.json) console.log(msg);
@@ -37375,7 +37658,7 @@ program2.command("plugin-release-catchup").description("install a newer released
       },
       readState: readReleaseCatchupState,
       writeState: writeReleaseCatchupState,
-      healRegistration: defaultRegistrationHeal((0, import_node_os16.homedir)(), process.env),
+      healRegistration: defaultRegistrationHeal((0, import_node_os17.homedir)(), process.env),
       now: () => Date.now()
     }, { force: o.force })
   );
@@ -37443,7 +37726,7 @@ program2.command("session-start").description("run the SessionStart verbs (whoam
     spawnDetachedSelf(["worktree", "setup", "--quiet"], { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
     bannerIo.log(worktreeBanner);
   }
-  if (shouldSpawnReleaseCatchup((0, import_node_os16.homedir)(), process.env, readReleaseCatchupState)) {
+  if (shouldSpawnReleaseCatchup((0, import_node_os17.homedir)(), process.env, readReleaseCatchupState)) {
     spawnDetachedSelf(["plugin", "release-catchup", "--quiet"], { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
   }
   if (isLinkedWorktree(process.cwd())) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "3.105.0",
+  "version": "3.105.3",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",