@mutmutco/cli 3.127.0 → 3.129.0

package/dist/main.cjs

@@ -6744,7 +6744,7 @@ function localTrainSyncBannerLine(result) {
 // src/gc.ts
 var import_node_fs11 = require("node:fs");
 var import_promises = require("node:fs/promises");
-var import_node_path9 = require("node:path");
+var import_node_path10 = require("node:path");
 
 // src/active-workspace-root.ts
 var import_node_fs9 = require("node:fs");
@@ -6762,6 +6762,12 @@ function isPathUnderDirectory(childPath, parentPath, platform2 = process.platfor
   if (child2 === parent) return true;
   return child2.startsWith(`${parent}/`);
 }
+function isCursorAgentHost(env = process.env) {
+  return env.CURSOR_AGENT === "1" || Boolean(env.CURSOR_EXTENSION_HOST_ROLE?.trim()) || Boolean(env.AGENT_TRANSCRIPTS?.trim());
+}
+function unresolvedWorkspaceRefusalMessage() {
+  return "refusing to remove a worktree: Cursor agent host cannot resolve the active workspace root. Open the primary checkout in Cursor first (keep the workspace root on the primary; edit the worktree without move_agent_to_root), or set MMI_ACTIVE_WORKSPACE_ROOT to the primary path, then retry `mmi-cli worktree gc sweep-deferred` / `worktree gc --apply` / `worktree land --apply`.";
+}
 function normalizeActiveWorkspaceRoot(value, opts = {}) {
   const raw = value?.trim();
   if (!raw) return void 0;
@@ -6779,8 +6785,13 @@ function removalTouchesActiveWorkspace(targetPath, activeWorkspaceRoot, platform
 function activeWorkspaceRefusalMessage(targetPath, activeWorkspaceRoot) {
   return `refusing to remove active Cursor workspace ${activeWorkspaceRoot} (target ${targetPath}). Open the primary checkout in Cursor first, then retry \`mmi-cli worktree gc sweep-deferred\` / \`worktree gc --apply\`.`;
 }
-function decideActiveWorkspaceGuard(targetPath, activeWorkspaceRoot, platform2 = process.platform) {
-  if (!activeWorkspaceRoot) return { action: "proceed" };
+function decideActiveWorkspaceGuard(targetPath, activeWorkspaceRoot, platform2 = process.platform, opts = {}) {
+  if (!activeWorkspaceRoot) {
+    if (opts.cursorAgentHost) {
+      return { action: "refuse", reason: "unresolved-workspace", message: unresolvedWorkspaceRefusalMessage() };
+    }
+    return { action: "proceed" };
+  }
   if (!removalTouchesActiveWorkspace(targetPath, activeWorkspaceRoot, platform2)) {
     return { action: "proceed" };
   }
@@ -6882,10 +6893,137 @@ function resolveActiveWorkspaceRoot(deps = {}) {
   return resolveCursorAgentWorkspaceRoot(deps);
 }
 
+// src/estate-hygiene.ts
+var import_node_path8 = require("node:path");
+function win32LongPath(p, platform2 = process.platform) {
+  if (platform2 !== "win32") return p;
+  if (p.startsWith("\\\\?\\")) return p;
+  if (p.startsWith("\\\\")) return `\\\\?\\UNC\\${p.slice(2)}`;
+  return `\\\\?\\${p}`;
+}
+function normalizeGithubRemote(url) {
+  const raw = url.trim();
+  if (!raw) return void 0;
+  const ssh = raw.match(/^git@github\.com:([^/]+)\/(.+?)(?:\.git)?$/i);
+  if (ssh) return `${ssh[1]}/${ssh[2]}`.toLowerCase();
+  const https = raw.match(/^https?:\/\/github\.com\/([^/]+)\/(.+?)(?:\.git)?$/i);
+  if (https) return `${https[1]}/${https[2]}`.toLowerCase();
+  return void 0;
+}
+function remotesOverlap(a, b) {
+  const left = new Set(a.map(normalizeGithubRemote).filter((x) => Boolean(x)));
+  if (!left.size) return false;
+  return b.some((url) => {
+    const key = normalizeGithubRemote(url);
+    return Boolean(key && left.has(key));
+  });
+}
+function worktreesRootOf(primaryCheckout) {
+  return (0, import_node_path8.join)((0, import_node_path8.dirname)(primaryCheckout), "mmi-worktrees", (0, import_node_path8.basename)(primaryCheckout));
+}
+function helperWorktreeRoots(primaryCheckout) {
+  return [
+    (0, import_node_path8.join)(primaryCheckout, ".claude", "worktrees"),
+    (0, import_node_path8.join)(primaryCheckout, ".worktrees")
+  ];
+}
+function pathProvesRepoContainerOwnership(dir, repoContainer, platform2 = process.platform) {
+  const norm = (p) => {
+    const unified = p.replace(/\\/g, "/").replace(/\/+$/, "");
+    return platform2 === "win32" || platform2 === "darwin" ? unified.toLowerCase() : unified;
+  };
+  return norm((0, import_node_path8.dirname)(dir)) === norm(repoContainer);
+}
+function worktreesRootFromLeaseRef(ref) {
+  const unified = ref.replace(/\\/g, "/");
+  const marker = "/mmi-worktrees/";
+  const idx = unified.toLowerCase().lastIndexOf(marker);
+  if (idx < 0) return void 0;
+  const after = unified.slice(idx + marker.length);
+  const repo = after.split("/").filter(Boolean)[0];
+  if (!repo) return void 0;
+  return unified.slice(0, idx + marker.length + repo.length);
+}
+function classifyEstateAudit(input) {
+  const otherPrimaries = input.otherCheckouts.filter((c) => remotesOverlap(input.remoteUrls, c.remoteUrls)).map((c) => c.path);
+  const thisRoot = input.thisWorktreesRoot.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+  const foreignLeaseRoots = [...new Set(
+    (input.leaseRefs ?? []).map(worktreesRootFromLeaseRef).filter((root) => Boolean(root)).filter((root) => root.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase() !== thisRoot)
+  )];
+  const reasons = [];
+  if (otherPrimaries.length) {
+    reasons.push(
+      `another primary checkout of the same remotes exists: ${otherPrimaries.join(", ")}`
+    );
+  }
+  if (foreignLeaseRoots.length) {
+    reasons.push(
+      `jerv lease ledger points at another worktrees root: ${foreignLeaseRoots.join(", ")}`
+    );
+  }
+  return {
+    auditedClone: input.auditedClone,
+    otherPrimaries,
+    foreignLeaseRoots,
+    blocksGreen: reasons.length > 0,
+    reasons
+  };
+}
+function formatEstateAuditLines(audit) {
+  const lines = [`audited clone: ${audit.auditedClone}`];
+  if (!audit.blocksGreen) return lines;
+  lines.push('refusing a clean "no leaks" report \u2014 this clone is not the whole estate:');
+  for (const reason of audit.reasons) lines.push(`  ${reason}`);
+  lines.push("  fix: run doctor / worktree list --stale / worktree gc from the canonical primary (E:\\AI Projects\\Mutatis Mutandis\\\u2026), not a second clone");
+  return lines;
+}
+function classifyOriginLeftovers(input) {
+  const local = new Set(input.localBranches ?? []);
+  const leftovers = [];
+  for (const branch of input.remoteBranches) {
+    const name = branch.replace(/^origin\//, "").trim();
+    if (!name || name === "HEAD" || input.protectedBranches.has(name)) continue;
+    if (input.openPrBranches.has(name)) {
+      leftovers.push({
+        branch: name,
+        kind: "open-pr",
+        autoReap: false,
+        detail: `origin/${name} has an open PR \u2014 gc will not delete it`
+      });
+      continue;
+    }
+    if (input.mergedPrBranches.has(name)) {
+      leftovers.push({
+        branch: name,
+        kind: "merged-missed",
+        autoReap: true,
+        detail: local.has(name) ? `origin/${name} is merged; this clone still has the head` : `origin/${name} is merged; this clone has no local branch (missed reap)`
+      });
+      continue;
+    }
+    if (input.closedUnmergedBranches.has(name)) {
+      leftovers.push({
+        branch: name,
+        kind: "closed-not-merged",
+        autoReap: Boolean(input.trainOnly),
+        detail: `origin/${name} is closed-not-merged \u2014 gc will not auto-delete it${input.trainOnly ? " unless --train-only --apply" : ""}`
+      });
+      continue;
+    }
+    leftovers.push({
+      branch: name,
+      kind: local.has(name) ? "no-pr" : "other-clone",
+      autoReap: Boolean(input.trainOnly),
+      detail: local.has(name) ? `origin/${name} has no PR \u2014 gc will not auto-delete it` : `origin/${name} is an other-clone leftover with no PR this clone can see`
+    });
+  }
+  return leftovers;
+}
+
 // src/worktree-ownership.ts
 var import_node_fs10 = require("node:fs");
 var import_node_os4 = require("node:os");
-var import_node_path8 = require("node:path");
+var import_node_path9 = require("node:path");
 var OWNERS_FILE = "worktree-owners.json";
 var EVENTS_FILE = "worktree-events.jsonl";
 var WORKTREE_ACTIVITY_WINDOW_MS = 30 * 6e4;
@@ -6990,7 +7128,7 @@ function decideWorktreeRemoval(input) {
 }
 function readFreshWorktreeLease(path2, now) {
   try {
-    const candidate = JSON.parse((0, import_node_fs10.readFileSync)((0, import_node_path8.join)(path2, WORKTREE_LEASE_MARKER), "utf8"));
+    const candidate = JSON.parse((0, import_node_fs10.readFileSync)((0, import_node_path9.join)(path2, WORKTREE_LEASE_MARKER), "utf8"));
     if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) return void 0;
     const lease = candidate;
     if (lease.kind !== "worktree" || lease.state !== "active" || typeof lease.agent !== "string" || !lease.agent.trim() || typeof lease.ref !== "string" || !sameWorktreePath(lease.ref, path2) || typeof lease.createdAt !== "string" || typeof lease.ttlHours !== "number" || !Number.isFinite(lease.ttlHours) || lease.ttlHours <= 0) return void 0;
@@ -7017,7 +7155,7 @@ function readOwners(primaryRoot) {
 function writeOwners(primaryRoot, entries) {
   try {
     const path2 = worktreeOwnersPath(primaryRoot);
-    (0, import_node_fs10.mkdirSync)((0, import_node_path8.dirname)(path2), { recursive: true });
+    (0, import_node_fs10.mkdirSync)((0, import_node_path9.dirname)(path2), { recursive: true });
     (0, import_node_fs10.writeFileSync)(path2, serializeWorktreeOwners(entries), "utf8");
   } catch {
   }
@@ -7053,7 +7191,7 @@ function dropWorktreeOwner(primaryRoot, path2, expectedCreatedAt) {
 function appendWorktreeEvent(primaryRoot, event) {
   try {
     const path2 = worktreeEventsPath(primaryRoot);
-    (0, import_node_fs10.mkdirSync)((0, import_node_path8.dirname)(path2), { recursive: true });
+    (0, import_node_fs10.mkdirSync)((0, import_node_path9.dirname)(path2), { recursive: true });
     (0, import_node_fs10.appendFileSync)(path2, `${JSON.stringify({ at: event.at ?? (/* @__PURE__ */ new Date()).toISOString(), ...event })}
 `, "utf8");
   } catch {
@@ -7132,7 +7270,7 @@ function archiveWorktreeJervArtifacts(args, deps = {}) {
   const resolveRoot = deps.resolveArchiveRoot ?? repoRuntimeStatePath;
   if (!args.primaryRoot?.trim()) return { status: "skipped", reason: "missing-primary-root" };
   if (!args.worktreePath?.trim()) return { status: "skipped", reason: "missing-worktree-path" };
-  const source = (0, import_node_path9.join)(args.worktreePath, ".jerv");
+  const source = (0, import_node_path10.join)(args.worktreePath, ".jerv");
   if (!exists(source)) return { status: "absent" };
   if (!isDirectory(source)) return { status: "skipped", reason: "jerv-not-a-directory" };
   const runScope = resolveJervArtifactRunScope(env);
@@ -7140,7 +7278,7 @@ function archiveWorktreeJervArtifacts(args, deps = {}) {
   const stamp = now().toISOString().replace(/[:.]/g, "-");
   const dest = resolveRoot(args.primaryRoot, "jerv-artifacts", runScope, branchSlug, stamp, ".jerv");
   try {
-    mkdirp((0, import_node_path9.dirname)(dest));
+    mkdirp((0, import_node_path10.dirname)(dest));
     copyDir(source, dest);
     if (!exists(dest)) return { status: "failed", error: `archive write left no directory at ${dest}` };
     return { status: "archived", path: dest, runScope };
@@ -7294,7 +7432,9 @@ async function sweepDeferredWorktrees(store, deps, removalContext) {
     const owner = removalContext ? lookupWorktreeOwner(removalContext.primaryRoot, entry.path) : void 0;
     if (removalContext) {
       const activeRoot = removalContext.activeWorkspaceRoot ?? resolveActiveWorkspaceRoot();
-      const activeGuard = decideActiveWorkspaceGuard(entry.path, activeRoot);
+      const activeGuard = decideActiveWorkspaceGuard(entry.path, activeRoot, process.platform, {
+        cursorAgentHost: removalContext.cursorAgentHost ?? false
+      });
       if (activeGuard.action === "refuse") {
         stillDeferred.push({ ...entry, reason: "active-workspace" });
         recordWorktreeRemoval(removalContext.primaryRoot, {
@@ -7639,23 +7779,23 @@ function resolveSafeSiblingWorktreeCleanupTarget(worktreePath, siblingRoots, dep
   return { ok: false, reason: reasons.join("; ") || "no worktrees root to check against" };
 }
 function siblingMmiWorktreesRoot(repoRoot2) {
-  const parent = (0, import_node_path9.dirname)(repoRoot2);
-  if ((0, import_node_path9.basename)(parent).toLowerCase() === "mmi-worktrees") return parent;
-  const grandparent = (0, import_node_path9.dirname)(parent);
-  if ((0, import_node_path9.basename)(grandparent).toLowerCase() === "mmi-worktrees") return grandparent;
-  return (0, import_node_path9.join)(parent, "mmi-worktrees");
+  const parent = (0, import_node_path10.dirname)(repoRoot2);
+  if ((0, import_node_path10.basename)(parent).toLowerCase() === "mmi-worktrees") return parent;
+  const grandparent = (0, import_node_path10.dirname)(parent);
+  if ((0, import_node_path10.basename)(grandparent).toLowerCase() === "mmi-worktrees") return grandparent;
+  return (0, import_node_path10.join)(parent, "mmi-worktrees");
 }
 function agentWorktreesRoot(repoRoot2) {
-  return (0, import_node_path9.join)(repoRoot2, ".claude", "worktrees");
+  return (0, import_node_path10.join)(repoRoot2, ".claude", "worktrees");
 }
 function worktreeScanDirs(root, repoRoot2, listDirs, isRepoCheckout) {
-  const projectsDir = (0, import_node_path9.dirname)(root);
-  const ownName = (0, import_node_path9.basename)(repoRoot2).toLowerCase();
+  const projectsDir = (0, import_node_path10.dirname)(root);
+  const ownName = (0, import_node_path10.basename)(repoRoot2).toLowerCase();
   const flat = [];
   let ownContainer = null;
   for (const dir of listDirs(root)) {
-    const name = (0, import_node_path9.basename)(dir);
-    if (isRepoCheckout((0, import_node_path9.join)(projectsDir, name))) {
+    const name = (0, import_node_path10.basename)(dir);
+    if (isRepoCheckout((0, import_node_path10.join)(projectsDir, name))) {
       if (name.toLowerCase() === ownName) ownContainer = dir;
       continue;
     }
@@ -7664,9 +7804,9 @@ function worktreeScanDirs(root, repoRoot2, listDirs, isRepoCheckout) {
   return ownContainer ? [...flat, ...listDirs(ownContainer)] : flat;
 }
 function explicitRepoWorktreesRoot(root, repoRoot2, rootDirs) {
-  const repoName2 = (0, import_node_path9.basename)(repoRoot2);
+  const repoName2 = (0, import_node_path10.basename)(repoRoot2);
   const repoDir = rootDirs.find((name) => name.toLowerCase() === repoName2.toLowerCase());
-  return repoDir ? (0, import_node_path9.join)(root, repoDir) : root;
+  return repoDir ? (0, import_node_path10.join)(root, repoDir) : root;
 }
 function classifySiblingWorktreeDir(entry) {
   if (!entry.ownedByCurrentRepo) {
@@ -7914,7 +8054,33 @@ function buildGcPlan(inputs) {
     const state = closedState(prSet);
     return state ? { ref, branch, prState: state.state, prNumbers: state.numbers } : null;
   }).filter((r) => Boolean(r));
-  return { branches, trackingRefs, worktreeDirs, skippedWorktreeDirs, skipped };
+  const originLeftovers = classifyOriginLeftovers({
+    remoteBranches: inputs.originBranches ?? [],
+    localBranches: inputs.localBranches,
+    protectedBranches,
+    openPrBranches: new Set(
+      [...prs.entries()].filter(([, set]) => set.some((pr2) => pr2.state === "OPEN")).map(([b]) => b)
+    ),
+    mergedPrBranches: new Set(
+      [...prs.entries()].filter(([, set]) => set.some((pr2) => pr2.state === "MERGED")).map(([b]) => b)
+    ),
+    closedUnmergedBranches: new Set(
+      [...prs.entries()].filter(([, set]) => set.some((pr2) => pr2.state === "CLOSED") && !set.some((pr2) => pr2.state === "MERGED")).map(([b]) => b)
+    ),
+    trainOnly: inputs.trainOnly
+  });
+  const plannedBranches = new Set(branches.map((b) => b.branch));
+  const reapOriginHeads = originLeftovers.filter((l) => l.autoReap && !plannedBranches.has(l.branch)).map((l) => {
+    const prSet = prs.get(l.branch);
+    const state = closedState(prSet);
+    return {
+      branch: l.branch,
+      prState: state?.state ?? "MERGED",
+      prNumbers: state?.numbers ?? [],
+      ...state?.headOids.length ? { reviewedHeadOids: state.headOids } : {}
+    };
+  });
+  return { branches, trackingRefs, worktreeDirs, skippedWorktreeDirs, skipped, originLeftovers, reapOriginHeads };
 }
 function parseRemotePruneDryRun(stdout) {
   const refs = [];
@@ -8229,7 +8395,9 @@ async function cleanupPrMergeLocalBranch(branch, options) {
     report.worktree = { path: wtPath, status: "not-attempted", reason: "main-worktree" };
   } else if (wtPath) {
     const activeRoot = options.removalContext?.activeWorkspaceRoot ?? resolveActiveWorkspaceRoot();
-    const activeGuard = decideActiveWorkspaceGuard(wtPath, activeRoot);
+    const activeGuard = decideActiveWorkspaceGuard(wtPath, activeRoot, process.platform, {
+      cursorAgentHost: options.removalContext?.cursorAgentHost ?? false
+    });
     if (activeGuard.action === "refuse") {
       if (options.deferredStore) {
         try {
@@ -8463,9 +8631,13 @@ async function cleanupPrMergeLocalBranch(branch, options) {
   if (wtPath) await git2(["worktree", "prune"]).catch(() => "");
   return report;
 }
-function formatGcPlan(plan, apply) {
+function formatGcPlan(plan, apply, auditClone) {
   const lines = [`mmi-cli worktree gc: ${apply ? "apply" : "dry-run"}`];
-  if (!plan.branches.length && !plan.trackingRefs.length && !plan.worktreeDirs.length) lines.push("nothing to clean");
+  if (auditClone) lines.push(`audited clone: ${auditClone}`);
+  const hasOriginNames = Boolean(plan.originLeftovers?.length);
+  if (!plan.branches.length && !plan.trackingRefs.length && !plan.worktreeDirs.length && !plan.reapOriginHeads?.length) {
+    lines.push(hasOriginNames ? "nothing this clone will auto-delete" : "nothing to clean");
+  }
   if (plan.branches.length) {
     lines.push("local branches:");
     for (const b of plan.branches) {
@@ -8507,6 +8679,12 @@ function formatGcPlan(plan, apply) {
       lines.push(` - ${s.path}: ${s.reason}${s.detail ? ` (${s.detail})` : ""}`);
     }
   }
+  if (plan.originLeftovers?.length) {
+    lines.push("origin leftovers gc will not silently delete (use --train-only for closed-not-merged / no-PR):");
+    for (const leftover of plan.originLeftovers) {
+      lines.push(` - ${leftover.branch}: ${leftover.kind}${leftover.autoReap ? " (will reap)" : ""} \u2014 ${leftover.detail}`);
+    }
+  }
   if (!apply && (plan.branches.length || plan.trackingRefs.length || plan.worktreeDirs.length)) lines.push("rerun with --apply to delete only the listed local, remote, tracking, and directory items");
   return lines.join("\n");
 }
@@ -8592,7 +8770,7 @@ async function gatherStaleWorktreeWarning(gitRun = defaultGitRun) {
 
 // src/released-version-cache.ts
 var import_node_fs12 = require("node:fs");
-var import_node_path10 = require("node:path");
+var import_node_path11 = require("node:path");
 
 // src/version-lag.ts
 var VERSION_LABEL = "installed plugin/adapter cache freshness";
@@ -8688,7 +8866,7 @@ function versionAutoUpdateAction(report, releasedSource) {
 // src/released-version-cache.ts
 var RELEASED_VERSION_CACHE_MS = 24 * 36e5;
 function releasedVersionCachePath(runtimeRoot) {
-  return (0, import_node_path10.join)(runtimeRoot, "head-ts", ".released-version");
+  return (0, import_node_path11.join)(runtimeRoot, "head-ts", ".released-version");
 }
 function readReleasedVersionCache(cachePath, now = Date.now(), read = import_node_fs12.readFileSync, currentVersion = resolveClientVersion()) {
   let parsed;
@@ -8708,7 +8886,7 @@ function readReleasedVersionCache(cachePath, now = Date.now(), read = import_nod
 }
 function writeReleasedVersionCache(cachePath, version, now = Date.now()) {
   try {
-    (0, import_node_fs12.mkdirSync)((0, import_node_path10.dirname)(cachePath), { recursive: true });
+    (0, import_node_fs12.mkdirSync)((0, import_node_path11.dirname)(cachePath), { recursive: true });
     (0, import_node_fs12.writeFileSync)(cachePath, JSON.stringify({ version, at: now }), "utf8");
   } catch {
   }
@@ -8723,10 +8901,10 @@ function cachedReadNote(cachedAt, now = Date.now()) {
 
 // src/schedules-drift-cache.ts
 var import_node_fs13 = require("node:fs");
-var import_node_path11 = require("node:path");
+var import_node_path12 = require("node:path");
 var SCHEDULES_DRIFT_CACHE_MS = 6 * 36e5;
 function schedulesDriftCachePath(runtimeRoot) {
-  return (0, import_node_path11.join)(runtimeRoot, "head-ts", ".schedules-drift");
+  return (0, import_node_path12.join)(runtimeRoot, "head-ts", ".schedules-drift");
 }
 function readSchedulesDriftCache(cachePath, now = Date.now(), read = import_node_fs13.readFileSync) {
   let parsed;
@@ -8745,7 +8923,7 @@ function readSchedulesDriftCache(cachePath, now = Date.now(), read = import_node
 }
 function writeSchedulesDriftCache(cachePath, driftLines, now = Date.now()) {
   try {
-    (0, import_node_fs13.mkdirSync)((0, import_node_path11.dirname)(cachePath), { recursive: true });
+    (0, import_node_fs13.mkdirSync)((0, import_node_path12.dirname)(cachePath), { recursive: true });
     (0, import_node_fs13.writeFileSync)(cachePath, JSON.stringify({ driftLines, at: now }), "utf8");
   } catch {
   }
@@ -8901,7 +9079,7 @@ function resolveCatalogRef(probe) {
 // src/plugin-guard-io.ts
 var import_node_fs14 = require("node:fs");
 var import_node_child_process6 = require("node:child_process");
-var import_node_path12 = require("node:path");
+var import_node_path13 = require("node:path");
 var import_node_os5 = require("node:os");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 
@@ -9204,17 +9382,17 @@ function runHostBin(bin, args, opts) {
   return step ? execFileHard(file, argv, { ...shared, step }) : execFileP2(file, argv, shared);
 }
 function surfaceConfigRoot(surface, env = process.env, home = (0, import_node_os5.homedir)()) {
-  if (surface === "codex") return env.CODEX_HOME?.trim() || (0, import_node_path12.join)(home, ".codex");
-  if (surface === "kimi") return env.KIMI_CODE_HOME?.trim() || (0, import_node_path12.join)(home, ".kimi-code");
-  if (surface === "kilo") return env.KILO_CONFIG_DIR?.trim() || (0, import_node_path12.join)(home, ".config", "kilo");
-  if (surface === "cursor") return (0, import_node_path12.join)(home, ".cursor");
+  if (surface === "codex") return env.CODEX_HOME?.trim() || (0, import_node_path13.join)(home, ".codex");
+  if (surface === "kimi") return env.KIMI_CODE_HOME?.trim() || (0, import_node_path13.join)(home, ".kimi-code");
+  if (surface === "kilo") return env.KILO_CONFIG_DIR?.trim() || (0, import_node_path13.join)(home, ".config", "kilo");
+  if (surface === "cursor") return (0, import_node_path13.join)(home, ".cursor");
   if (surface === "jervcode") {
-    return env.JERVCODE_CODING_AGENT_DIR?.trim() || env.PI_CODING_AGENT_DIR?.trim() || (0, import_node_path12.join)(home, ".jerv", "agent");
+    return env.JERVCODE_CODING_AGENT_DIR?.trim() || env.PI_CODING_AGENT_DIR?.trim() || (0, import_node_path13.join)(home, ".jerv", "agent");
   }
-  return (0, import_node_path12.join)(home, ".claude");
+  return (0, import_node_path13.join)(home, ".claude");
 }
 var installedPluginsPath = (surface = detectSurface(process.env)) => {
-  return (0, import_node_path12.join)(surfaceConfigRoot(surface), "plugins", "installed_plugins.json");
+  return (0, import_node_path13.join)(surfaceConfigRoot(surface), "plugins", "installed_plugins.json");
 };
 function readInstalledPlugins(surface = detectSurface(process.env)) {
   try {
@@ -9227,15 +9405,15 @@ function marketplaceCloneCandidates(surface, home, env = process.env) {
   if (surface === "codex") {
     const root = surfaceConfigRoot(surface, env, home);
     return [
-      (0, import_node_path12.join)(root, ".tmp", "marketplaces", CODEX_MARKETPLACE),
-      (0, import_node_path12.join)(root, "plugins", "marketplaces", CODEX_MARKETPLACE)
+      (0, import_node_path13.join)(root, ".tmp", "marketplaces", CODEX_MARKETPLACE),
+      (0, import_node_path13.join)(root, "plugins", "marketplaces", CODEX_MARKETPLACE)
     ];
   }
   if (surface === "kimi") return [];
   if (surface === "kilo") return [];
   if (surface === "cursor") return [];
   if (surface === "jervcode") return [];
-  return [(0, import_node_path12.join)(home, ".claude", "plugins", "marketplaces", "mutmutco")];
+  return [(0, import_node_path13.join)(home, ".claude", "plugins", "marketplaces", "mutmutco")];
 }
 function marketplaceClonePresent(surface, home, exists = import_node_fs14.existsSync, env = process.env) {
   return marketplaceCloneCandidates(surface, home, env).some(exists);
@@ -9286,11 +9464,11 @@ function codexHookTrustState(status = codexPluginStatus()) {
     return { applicable: false, trusted: false, trustedCount: 0, requiredCount: 0 };
   }
   const root = surfaceConfigRoot("codex");
-  const hooksPath = (0, import_node_path12.join)(root, "plugins", "cache", CODEX_MARKETPLACE, "mmi", status.version, "hooks", "codex-hooks.json");
+  const hooksPath = (0, import_node_path13.join)(root, "plugins", "cache", CODEX_MARKETPLACE, "mmi", status.version, "hooks", "codex-hooks.json");
   const requiredCount = countCodexHookCommands(hooksPath);
   let config = "";
   try {
-    config = (0, import_node_fs14.readFileSync)((0, import_node_path12.join)(root, "config.toml"), "utf8");
+    config = (0, import_node_fs14.readFileSync)((0, import_node_path13.join)(root, "config.toml"), "utf8");
   } catch {
     return { applicable: true, trusted: false, trustedCount: 0, requiredCount };
   }
@@ -9317,7 +9495,7 @@ var NPM_INSTALL_TIMEOUT_MS = 12e4;
 var CLI_VERSION_PROBE_TIMEOUT_MS = 3e4;
 function resolveNpmSpawn(args) {
   if (!isWin) return { file: "npm", args };
-  const cli = (0, import_node_path12.join)((0, import_node_path12.dirname)(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
+  const cli = (0, import_node_path13.join)((0, import_node_path13.dirname)(process.execPath), "node_modules", "npm", "bin", "npm-cli.js");
   if ((0, import_node_fs14.existsSync)(cli)) return { file: process.execPath, args: [cli, ...args] };
   return { file: "cmd.exe", args: ["/c", "npm", ...args] };
 }
@@ -9346,9 +9524,9 @@ async function npmSelfUpdateCli(target, onStep, deps = {}) {
 }
 function kiloConfigListsPlugin(configRoot, home = (0, import_node_os5.homedir)(), read = (p) => (0, import_node_fs14.readFileSync)(p, "utf8"), exists = import_node_fs14.existsSync) {
   const candidates = ["kilo.json", "kilo.jsonc", "opencode.json", "opencode.jsonc", "config.json"];
-  for (const dir of [configRoot, (0, import_node_path12.join)(home, ".kilo")]) {
+  for (const dir of [configRoot, (0, import_node_path13.join)(home, ".kilo")]) {
     for (const file of candidates) {
-      const path2 = (0, import_node_path12.join)(dir, file);
+      const path2 = (0, import_node_path13.join)(dir, file);
       if (!exists(path2)) continue;
       try {
         const stripped = read(path2).replace(/\/\*[\s\S]*?\*\//g, "").replace(/\/\/.*$/gm, "");
@@ -9365,7 +9543,7 @@ function kiloConfigListsPlugin(configRoot, home = (0, import_node_os5.homedir)()
   return false;
 }
 function cursorLocalPluginRoot(env = process.env, home = (0, import_node_os5.homedir)()) {
-  return (0, import_node_path12.join)(surfaceConfigRoot("cursor", env, home), "plugins", "local", "mmi");
+  return (0, import_node_path13.join)(surfaceConfigRoot("cursor", env, home), "plugins", "local", "mmi");
 }
 function cursorPluginTreeHealthy(root, exists = import_node_fs14.existsSync) {
   return [
@@ -9374,14 +9552,14 @@ function cursorPluginTreeHealthy(root, exists = import_node_fs14.existsSync) {
     "hooks/cursor-hooks.json",
     "scripts/hook-run.mjs",
     "scripts/hook-policy.mjs"
-  ].every((path2) => exists((0, import_node_path12.join)(root, ...path2.split("/"))));
+  ].every((path2) => exists((0, import_node_path13.join)(root, ...path2.split("/"))));
 }
 function kimiPluginTreeHealthy(root, exists = import_node_fs14.existsSync) {
   return [
     ".kimi-plugin/plugin.json",
     "skills/mmi/SKILL.md",
     "scripts/hook-run.mjs"
-  ].every((path2) => exists((0, import_node_path12.join)(root, ...path2.split("/"))));
+  ].every((path2) => exists((0, import_node_path13.join)(root, ...path2.split("/"))));
 }
 var JERVCODE_WRAPPER_DIR = ".pi-plugin";
 function normalizePiEntry(value) {
@@ -9404,7 +9582,7 @@ function jervcodePackageFamily(entry) {
 function isMmiOwnedPiEntry(entry) {
   if (typeof entry !== "string") return false;
   try {
-    const pkg = JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path12.join)(piEntryFsPath(entry), "package.json"), "utf8"));
+    const pkg = JSON.parse((0, import_node_fs14.readFileSync)((0, import_node_path13.join)(piEntryFsPath(entry), "package.json"), "utf8"));
     return pkg.name === "mmi";
   } catch {
     return false;
@@ -9436,8 +9614,8 @@ function readPiSettings(path2) {
   }
 }
 function jervcodeSettingsCandidates(env = process.env, home = (0, import_node_os5.homedir)()) {
-  const primary = (0, import_node_path12.join)(surfaceConfigRoot("jervcode", env, home), "settings.json");
-  const legacy = (0, import_node_path12.join)(home, ".pi", "agent", "settings.json");
+  const primary = (0, import_node_path13.join)(surfaceConfigRoot("jervcode", env, home), "settings.json");
+  const legacy = (0, import_node_path13.join)(home, ".pi", "agent", "settings.json");
   return legacy === primary ? [primary] : [primary, legacy];
 }
 function mmiPiWrapperEntry(env = process.env, home = (0, import_node_os5.homedir)()) {
@@ -9456,17 +9634,17 @@ function mmiPiWrapperEntry(env = process.env, home = (0, import_node_os5.homedir
 function mmiPiWrapperHealthy(entry) {
   if (!entry) return false;
   const wrapper = piEntryFsPath(entry);
-  return isMmiOwnedPiEntry(entry) && (0, import_node_fs14.existsSync)((0, import_node_path12.join)((0, import_node_path12.dirname)(wrapper), "skills", "mmi", "SKILL.md"));
+  return isMmiOwnedPiEntry(entry) && (0, import_node_fs14.existsSync)((0, import_node_path13.join)((0, import_node_path13.dirname)(wrapper), "skills", "mmi", "SKILL.md"));
 }
 function findMmiPiSourceClone(home = (0, import_node_os5.homedir)()) {
-  const cacheRoot = (0, import_node_path12.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi");
+  const cacheRoot = (0, import_node_path13.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi");
   let best = null;
   try {
     for (const entry of (0, import_node_fs14.readdirSync)(cacheRoot, { withFileTypes: true })) {
       if (!entry.isDirectory() || !/^\d+\.\d+\.\d+$/.test(entry.name)) continue;
-      if (!(0, import_node_fs14.existsSync)((0, import_node_path12.join)(cacheRoot, entry.name, JERVCODE_WRAPPER_DIR, "package.json"))) continue;
+      if (!(0, import_node_fs14.existsSync)((0, import_node_path13.join)(cacheRoot, entry.name, JERVCODE_WRAPPER_DIR, "package.json"))) continue;
       if (!best || compareVersions(entry.name, best.version) > 0) {
-        best = { path: (0, import_node_path12.join)(cacheRoot, entry.name), version: entry.name };
+        best = { path: (0, import_node_path13.join)(cacheRoot, entry.name), version: entry.name };
       }
     }
   } catch {
@@ -9520,7 +9698,7 @@ function healOneJervCodeSettingsFile(settingsPath2, packagePath, version, nextLa
     }
     current.packages = merged.next;
     try {
-      (0, import_node_fs14.mkdirSync)((0, import_node_path12.dirname)(settingsPath2), { recursive: true });
+      (0, import_node_fs14.mkdirSync)((0, import_node_path13.dirname)(settingsPath2), { recursive: true });
       const tmp = `${settingsPath2}.tmp-${process.pid}`;
       (0, import_node_fs14.writeFileSync)(tmp, `${JSON.stringify(current, null, 2)}
 `, "utf8");
@@ -9551,7 +9729,7 @@ function healJervCodePackageRegistration(opts = {}) {
   const nextLaunch = inSeat ? " \u2014 takes effect on the next seat launch" : "";
   const home = opts.home ?? (0, import_node_os5.homedir)();
   const agentDir = surfaceConfigRoot("jervcode", env, home);
-  const legacyPi = (0, import_node_path12.join)(home, ".pi", "agent");
+  const legacyPi = (0, import_node_path13.join)(home, ".pi", "agent");
   if (!(0, import_node_fs14.existsSync)(agentDir) && !(0, import_node_fs14.existsSync)(legacyPi)) {
     return { available: false, ok: true, changed: false, version: null, detail: "skipped \u2014 no Pi/JervCode install (no agent config dir)" };
   }
@@ -9560,8 +9738,8 @@ function healJervCodePackageRegistration(opts = {}) {
     return { available: true, ok: true, changed: false, version: null, detail: "skipped \u2014 no installed MMI clone carries the pi wrapper (install the Claude plugin first)" };
   }
   const packagePath = `${clone.path.replace(/\\/g, "/").replace(/\/+$/, "")}/${JERVCODE_WRAPPER_DIR}`;
-  const targets = [(0, import_node_path12.join)(agentDir, "settings.json")];
-  const legacySettings = (0, import_node_path12.join)(legacyPi, "settings.json");
+  const targets = [(0, import_node_path13.join)(agentDir, "settings.json")];
+  const legacySettings = (0, import_node_path13.join)(legacyPi, "settings.json");
   if ((0, import_node_fs14.existsSync)(legacyPi) && legacySettings !== targets[0]) targets.push(legacySettings);
   const details = [];
   let anyChanged = false;
@@ -9590,7 +9768,7 @@ function snapshotPluginGuardInput(surface = detectSurface(process.env), isOrgRep
   return {
     isOrgRepo,
     installRecordPresent: hasUserInstallRecord(installed, MMI_PLUGIN_ID) || hasProjectInstallRecord(installed, MMI_PLUGIN_ID, process.cwd()) || // Kimi's managed plugin directory is its native install record; it has no Claude-style ledger.
-    surface === "kimi" && (0, import_node_fs14.existsSync)((0, import_node_path12.join)(root, "plugins", "managed", "mmi")) || // kilo-p1: the install record is the config file itself.
+    surface === "kimi" && (0, import_node_fs14.existsSync)((0, import_node_path13.join)(root, "plugins", "managed", "mmi")) || // kilo-p1: the install record is the config file itself.
     surface === "kilo" && kiloConfigListsPlugin(root) || // #4188: jervcode's install record is the settings-file packages[] entry itself.
     surface === "jervcode" && piEntry !== null || surface === "cursor" && (0, import_node_fs14.existsSync)(cursorLocalPluginRoot()),
     // Kilo has no marketplace to clone — the config file IS the install record, so this dimension of
@@ -9599,9 +9777,9 @@ function snapshotPluginGuardInput(surface = detectSurface(process.env), isOrgRep
     // Kimi keeps no plugin cache dir — installs are copied to plugins/managed/<id> and run from there.
     // Kilo (kilo-p1) keeps no cache dir either: the plugin's server() provisions ~/.kilo behind the
     // version stamp, so the stamp's presence is the cache signal.
-    pluginCachePresent: surface === "jervcode" ? mmiPiWrapperHealthy(piEntry) : surface === "kilo" ? (0, import_node_fs14.existsSync)((0, import_node_path12.join)((0, import_node_os5.homedir)(), ".kilo", ".mmi-kilo-version")) : surface === "kimi" ? kimiPluginTreeHealthy((0, import_node_path12.join)(root, "plugins", "managed", "mmi")) : surface === "cursor" ? cursorPluginTreeHealthy(cursorLocalPluginRoot()) : surface === "codex" ? Boolean(
-      codexStatus?.installed && codexStatus.enabled && codexStatus.version && (0, import_node_fs14.existsSync)((0, import_node_path12.join)(root, "plugins", "cache", CODEX_MARKETPLACE, "mmi", codexStatus.version))
-    ) : (0, import_node_fs14.existsSync)((0, import_node_path12.join)(root, "plugins", "cache", "mutmutco", "mmi"))
+    pluginCachePresent: surface === "jervcode" ? mmiPiWrapperHealthy(piEntry) : surface === "kilo" ? (0, import_node_fs14.existsSync)((0, import_node_path13.join)((0, import_node_os5.homedir)(), ".kilo", ".mmi-kilo-version")) : surface === "kimi" ? kimiPluginTreeHealthy((0, import_node_path13.join)(root, "plugins", "managed", "mmi")) : surface === "cursor" ? cursorPluginTreeHealthy(cursorLocalPluginRoot()) : surface === "codex" ? Boolean(
+      codexStatus?.installed && codexStatus.enabled && codexStatus.version && (0, import_node_fs14.existsSync)((0, import_node_path13.join)(root, "plugins", "cache", CODEX_MARKETPLACE, "mmi", codexStatus.version))
+    ) : (0, import_node_fs14.existsSync)((0, import_node_path13.join)(root, "plugins", "cache", "mutmutco", "mmi"))
   };
 }
 async function runHostBinLogged(bin, args, opts) {
@@ -9621,9 +9799,9 @@ async function runPluginCli(bin, args, log) {
 function captureCodexHookLauncher() {
   const status = codexPluginStatus();
   if (!status.installed || !status.enabled || !status.version) return void 0;
-  const root = (0, import_node_path12.join)(surfaceConfigRoot("codex"), "plugins", "cache", CODEX_MARKETPLACE, "mmi", status.version);
+  const root = (0, import_node_path13.join)(surfaceConfigRoot("codex"), "plugins", "cache", CODEX_MARKETPLACE, "mmi", status.version);
   const files = ["mmi-hook", "mmi-hook.exe"].flatMap((name) => {
-    const path2 = (0, import_node_path12.join)(root, "bin", name);
+    const path2 = (0, import_node_path13.join)(root, "bin", name);
     try {
       return [{ name, content: (0, import_node_fs14.readFileSync)(path2) }];
     } catch {
@@ -9633,11 +9811,11 @@ function captureCodexHookLauncher() {
   return files.length === 2 ? { root, files } : void 0;
 }
 function restoreCodexHookLauncher(snapshot) {
-  if (!snapshot || (0, import_node_fs14.existsSync)((0, import_node_path12.join)(snapshot.root, "scripts", "hook-run.mjs"))) return false;
-  const bin = (0, import_node_path12.join)(snapshot.root, "bin");
+  if (!snapshot || (0, import_node_fs14.existsSync)((0, import_node_path13.join)(snapshot.root, "scripts", "hook-run.mjs"))) return false;
+  const bin = (0, import_node_path13.join)(snapshot.root, "bin");
   (0, import_node_fs14.mkdirSync)(bin, { recursive: true });
   for (const file of snapshot.files) {
-    const path2 = (0, import_node_path12.join)(bin, file.name);
+    const path2 = (0, import_node_path13.join)(bin, file.name);
     (0, import_node_fs14.writeFileSync)(path2, file.content);
     if (file.name === "mmi-hook") (0, import_node_fs14.chmodSync)(path2, 493);
   }
@@ -9648,8 +9826,8 @@ function canonicalCursorRemote(remote) {
 }
 async function installCursorPluginCheckout(env = process.env) {
   const configRoot = surfaceConfigRoot("cursor", env);
-  const pluginsRoot = (0, import_node_path12.join)(configRoot, "plugins");
-  const target = (0, import_node_path12.join)(pluginsRoot, "local", "mmi");
+  const pluginsRoot = (0, import_node_path13.join)(configRoot, "plugins");
+  const target = (0, import_node_path13.join)(pluginsRoot, "local", "mmi");
   const source = env.MMI_CURSOR_PLUGIN_SOURCE?.trim();
   if ((0, import_node_fs14.existsSync)(target) && !source) {
     try {
@@ -9661,12 +9839,12 @@ async function installCursorPluginCheckout(env = process.env) {
       return { ok: false, detail: `refused to replace unmanaged Cursor plugin directory at ${target}` };
     }
   }
-  (0, import_node_fs14.mkdirSync)((0, import_node_path12.join)(pluginsRoot, "local"), { recursive: true });
-  (0, import_node_fs14.mkdirSync)((0, import_node_path12.join)(pluginsRoot, "staging"), { recursive: true });
-  (0, import_node_fs14.mkdirSync)((0, import_node_path12.join)(pluginsRoot, "quarantine"), { recursive: true });
+  (0, import_node_fs14.mkdirSync)((0, import_node_path13.join)(pluginsRoot, "local"), { recursive: true });
+  (0, import_node_fs14.mkdirSync)((0, import_node_path13.join)(pluginsRoot, "staging"), { recursive: true });
+  (0, import_node_fs14.mkdirSync)((0, import_node_path13.join)(pluginsRoot, "quarantine"), { recursive: true });
   const suffix = `${Date.now()}-${process.pid}`;
-  const staged = (0, import_node_path12.join)(pluginsRoot, "staging", `mmi-${suffix}`);
-  const quarantined = (0, import_node_path12.join)(pluginsRoot, "quarantine", `mmi-${suffix}`);
+  const staged = (0, import_node_path13.join)(pluginsRoot, "staging", `mmi-${suffix}`);
+  const quarantined = (0, import_node_path13.join)(pluginsRoot, "quarantine", `mmi-${suffix}`);
   try {
     if (source) {
       (0, import_node_fs14.cpSync)(source, staged, {
@@ -9737,7 +9915,7 @@ async function runHealSteps(host, tableSteps, deps) {
   const refSupported = needsRefProbe ? await marketplaceAddRefSupported(host) : true;
   const { steps } = adaptHealStepsForRefSupport(tableSteps, refSupported);
   if (deps.banner) log(deps.banner(refSupported));
-  const pinsPath = (0, import_node_path12.join)((0, import_node_os5.homedir)(), ...KNOWN_MARKETPLACES_RELATIVE);
+  const pinsPath = (0, import_node_path13.join)((0, import_node_os5.homedir)(), ...KNOWN_MARKETPLACES_RELATIVE);
   const pins = host === "claude" ? captureMarketplacePins(readKnownMarketplacesFile(pinsPath), [MMI_MARKETPLACE_NAME, JERV_MARKETPLACE_NAME]) : /* @__PURE__ */ new Map();
   let failure;
   try {
@@ -10048,7 +10226,7 @@ function describeUpdatePlan(hasBinary) {
 
 // src/hook-activity.ts
 var import_node_fs15 = require("node:fs");
-var import_node_path13 = require("node:path");
+var import_node_path14 = require("node:path");
 var DEFAULT_SURFACE = "claude";
 function activityLogPath(cwd) {
   return repoRuntimeStatePath(cwd, "hooks", "activity.jsonl");
@@ -10061,7 +10239,7 @@ function appendHookActivity(cwd, entry) {
       surface: DEFAULT_SURFACE,
       ...entry
     };
-    (0, import_node_fs15.mkdirSync)((0, import_node_path13.dirname)(path2), { recursive: true });
+    (0, import_node_fs15.mkdirSync)((0, import_node_path14.dirname)(path2), { recursive: true });
     (0, import_node_fs15.appendFileSync)(path2, `${JSON.stringify(line)}
 `, "utf8");
   } catch {
@@ -10070,11 +10248,11 @@ function appendHookActivity(cwd, entry) {
 
 // src/worktree.ts
 var import_node_fs16 = require("node:fs");
-var import_node_path15 = require("node:path");
+var import_node_path16 = require("node:path");
 
 // src/file-lock.ts
 var import_promises2 = require("node:fs/promises");
-var import_node_path14 = require("node:path");
+var import_node_path15 = require("node:path");
 var sleep = (ms) => new Promise((resolve6) => setTimeout(resolve6, ms));
 var IMMEDIATE_RETRY_BUDGET = 3;
 var FileLockBusyError = class extends Error {
@@ -10159,7 +10337,7 @@ async function releaseFileLock(lockPath, guard) {
 }
 async function withFileLock(lockPath, opts, fn) {
   const resolved = resolveFileLockOpts(opts);
-  await (0, import_promises2.mkdir)((0, import_node_path14.dirname)(lockPath), { recursive: true }).catch(() => void 0);
+  await (0, import_promises2.mkdir)((0, import_node_path15.dirname)(lockPath), { recursive: true }).catch(() => void 0);
   const guard = await acquireFileLock(lockPath, resolved, Date.now() + resolved.maxWaitMs);
   try {
     return await fn();
@@ -10214,7 +10392,7 @@ var realFsProbe = {
   }
 };
 function declaredProvision(fs2, abs) {
-  const raw = fs2.readFile?.((0, import_node_path15.join)(abs, PKG));
+  const raw = fs2.readFile?.((0, import_node_path16.join)(abs, PKG));
   if (raw === void 0) return void 0;
   try {
     const scripts = JSON.parse(raw).scripts;
@@ -10226,13 +10404,13 @@ function declaredProvision(fs2, abs) {
 }
 function scanInstallDirs(root, fs2 = realFsProbe) {
   const factsFor = (dir) => {
-    const abs = dir ? (0, import_node_path15.join)(root, dir) : root;
-    const match = LOCKFILE_INSTALLS.find((c) => fs2.isFile((0, import_node_path15.join)(abs, c.lockfile)));
-    const hasPackageJson = fs2.isFile((0, import_node_path15.join)(abs, PKG));
+    const abs = dir ? (0, import_node_path16.join)(root, dir) : root;
+    const match = LOCKFILE_INSTALLS.find((c) => fs2.isFile((0, import_node_path16.join)(abs, c.lockfile)));
+    const hasPackageJson = fs2.isFile((0, import_node_path16.join)(abs, PKG));
     return {
       dir,
       hasPackageJson,
-      hasNodeModules: fs2.isDir((0, import_node_path15.join)(abs, NODE_MODULES)),
+      hasNodeModules: fs2.isDir((0, import_node_path16.join)(abs, NODE_MODULES)),
       install: match?.command,
       provision: hasPackageJson ? declaredProvision(fs2, abs) : void 0
     };
@@ -10248,7 +10426,7 @@ function npmInstallTargets(dirs) {
   }));
 }
 function isLinkedWorktree(root, fs2 = realFsProbe) {
-  return fs2.isFile((0, import_node_path15.join)(root, ".git"));
+  return fs2.isFile((0, import_node_path16.join)(root, ".git"));
 }
 function worktreeAutoProvisionBanner(root, fs2 = realFsProbe) {
   if (!isLinkedWorktree(root, fs2)) return null;
@@ -10258,7 +10436,7 @@ function worktreeAutoProvisionBanner(root, fs2 = realFsProbe) {
   return `[worktree] provisioning tooling in the background (deps in ${where} + local config) \u2014 \`mmi-cli worktree setup\` to redo`;
 }
 function defaultCopyFile(from, to) {
-  (0, import_node_fs16.mkdirSync)((0, import_node_path15.dirname)(to), { recursive: true });
+  (0, import_node_fs16.mkdirSync)((0, import_node_path16.dirname)(to), { recursive: true });
   (0, import_node_fs16.copyFileSync)(from, to);
 }
 async function runDeclaredProvision(target, cwd, runInstall) {
@@ -10289,7 +10467,7 @@ async function provisionWorktree(worktreeRoot, deps) {
   const targets = npmInstallTargets(allDirs);
   if (deps.validateInstall) {
     for (const dir of allDirs.filter((d) => d.hasPackageJson && (d.provision ?? d.install) && d.hasNodeModules)) {
-      const cwd = dir.dir ? (0, import_node_path15.join)(worktreeRoot, dir.dir) : worktreeRoot;
+      const cwd = dir.dir ? (0, import_node_path16.join)(worktreeRoot, dir.dir) : worktreeRoot;
       if (!await deps.validateInstall(cwd)) {
         targets.push({
           dir: dir.dir,
@@ -10303,7 +10481,7 @@ async function provisionWorktree(worktreeRoot, deps) {
   const skippedInstall = allDirs.filter((d) => d.hasPackageJson && d.hasNodeModules && !targetDirs.has(d.dir)).map((d) => d.dir);
   const installed = [];
   for (const target of targets) {
-    const cwd = target.dir ? (0, import_node_path15.join)(worktreeRoot, target.dir) : worktreeRoot;
+    const cwd = target.dir ? (0, import_node_path16.join)(worktreeRoot, target.dir) : worktreeRoot;
     log(`installing deps: ${target.command} in ${target.dir || "."}`);
     if (target.declared) await runDeclaredProvision(target, cwd, deps.runInstall);
     else await deps.runInstall(target.command, cwd);
@@ -10313,7 +10491,7 @@ async function provisionWorktree(worktreeRoot, deps) {
   const copySkipped = [];
   const primary = await deps.primaryCheckout();
   for (const rel of LOCAL_ONLY_FILES) {
-    const dest = (0, import_node_path15.join)(worktreeRoot, rel);
+    const dest = (0, import_node_path16.join)(worktreeRoot, rel);
     if (fs2.isFile(dest)) {
       copySkipped.push({ file: rel, reason: "already-present" });
       continue;
@@ -10322,11 +10500,11 @@ async function provisionWorktree(worktreeRoot, deps) {
       copySkipped.push({ file: rel, reason: "no-primary" });
       continue;
     }
-    if (!fs2.isFile((0, import_node_path15.join)(primary, rel))) {
+    if (!fs2.isFile((0, import_node_path16.join)(primary, rel))) {
       copySkipped.push({ file: rel, reason: "absent-in-primary" });
       continue;
     }
-    copyFile((0, import_node_path15.join)(primary, rel), dest);
+    copyFile((0, import_node_path16.join)(primary, rel), dest);
     copied.push(rel);
     log(`copied local config: ${rel}`);
   }
@@ -10340,12 +10518,12 @@ function capWorktreeDirName(name, max = 40) {
 }
 function defaultWorktreePath(repoRoot2, branch) {
   const safe = capWorktreeDirName(branch.replace(/[/\\]+/g, "-"));
-  return (0, import_node_path15.join)((0, import_node_path15.dirname)(repoRoot2), "mmi-worktrees", (0, import_node_path15.basename)(repoRoot2), safe);
+  return (0, import_node_path16.join)((0, import_node_path16.dirname)(repoRoot2), "mmi-worktrees", (0, import_node_path16.basename)(repoRoot2), safe);
 }
 async function primaryCheckoutRootOf(git2) {
   try {
     const out = (await git2(["rev-parse", "--path-format=absolute", "--git-common-dir"])).trim();
-    return out ? (0, import_node_path15.dirname)(out) : void 0;
+    return out ? (0, import_node_path16.dirname)(out) : void 0;
   } catch {
     return void 0;
   }
@@ -10488,7 +10666,7 @@ function commandLadderHint() {
 }
 
 // src/index.ts
-var import_node_path45 = require("node:path");
+var import_node_path46 = require("node:path");
 
 // src/merge-ci-policy.ts
 function resolveMergeCiPolicy(input) {
@@ -11162,12 +11340,12 @@ function planManagedGitignore(current) {
 
 // src/docs-index-command.ts
 var import_node_fs18 = require("node:fs");
-var import_node_path17 = require("node:path");
+var import_node_path18 = require("node:path");
 
 // src/doc-refs-core.ts
 var import_node_child_process7 = require("node:child_process");
 var import_node_fs17 = require("node:fs");
-var import_node_path16 = require("node:path");
+var import_node_path17 = require("node:path");
 var PIN_RE = /<!--\s*pinned by\s+([^:]+?)\s*:\s*"([^"]+)"[^"]*-->/;
 var PIN_MENTION_RE = /<!--\s*pinned by\b/;
 var FWD_RE = /<!--\s*forward-ref:\s*(\S+?)\s*-->/;
@@ -11226,7 +11404,7 @@ function checkPins(root, readFile9, docs2) {
         findings.push({ kind: "malformed-pin", doc, line: pin.line, detail: pin.text });
         continue;
       }
-      const source = readFile9((0, import_node_path16.join)(root, pin.file));
+      const source = readFile9((0, import_node_path17.join)(root, pin.file));
       if (source == null) {
         findings.push({ kind: "missing-test", doc, line: pin.line, detail: pin.file });
         continue;
@@ -11288,11 +11466,11 @@ function checkRefs(root, deps, docs2) {
     for (const { ref } of extractRefs(markdown)) allFirstSegments.add(refFirstSegment(ref));
   }
   const tracked = allFirstSegments.size ? deps.trackedFirstSegments?.([...allFirstSegments]) ?? null : null;
-  const firstVerifiable = (first) => tracked ? tracked.has(first) : exists((0, import_node_path16.join)(root, first));
+  const firstVerifiable = (first) => tracked ? tracked.has(first) : exists((0, import_node_path17.join)(root, first));
   const candidates = [];
   const direct = [];
   for (const [doc, markdown] of Object.entries(docs2)) {
-    const docDir = import_node_path16.posix.dirname(doc);
+    const docDir = import_node_path17.posix.dirname(doc);
     const base = docDir === "." ? "" : docDir;
     const covered = /* @__PURE__ */ new Set();
     const markers = [];
@@ -11301,21 +11479,21 @@ function checkRefs(root, deps, docs2) {
         direct.push({ kind: "malformed-forward-ref", doc, line: fwd.line, detail: fwd.text });
         continue;
       }
-      const docRel = import_node_path16.posix.normalize(import_node_path16.posix.join(base, fwd.target));
-      const rootRel = import_node_path16.posix.normalize(fwd.target.replace(/^\/+/, ""));
+      const docRel = import_node_path17.posix.normalize(import_node_path17.posix.join(base, fwd.target));
+      const rootRel = import_node_path17.posix.normalize(fwd.target.replace(/^\/+/, ""));
       markers.push({ target: fwd.target, line: fwd.line, docRel, rootRel });
       covered.add(docRel);
       covered.add(rootRel);
     }
     const links = extractLinks(markdown).map(({ target, line }) => {
-      const resolved = import_node_path16.posix.normalize(import_node_path16.posix.join(base, target));
-      return { target, line, resolved, missing: !exists((0, import_node_path16.join)(root, resolved)) };
+      const resolved = import_node_path17.posix.normalize(import_node_path17.posix.join(base, target));
+      return { target, line, resolved, missing: !exists((0, import_node_path17.join)(root, resolved)) };
     });
     for (const marker of markers) {
       const coversMissing = links.some(
         (l) => l.missing && (l.resolved === marker.docRel || l.resolved === marker.rootRel)
       );
-      if (!coversMissing && (exists((0, import_node_path16.join)(root, marker.docRel)) || exists((0, import_node_path16.join)(root, marker.rootRel)))) {
+      if (!coversMissing && (exists((0, import_node_path17.join)(root, marker.docRel)) || exists((0, import_node_path17.join)(root, marker.rootRel)))) {
         direct.push({
           kind: "stale-forward-ref",
           doc,
@@ -11326,7 +11504,7 @@ function checkRefs(root, deps, docs2) {
     }
     for (const { ref, line } of extractRefs(markdown)) {
       if (!firstVerifiable(refFirstSegment(ref))) continue;
-      if (!exists((0, import_node_path16.join)(root, ref))) candidates.push({ kind: "missing-path", doc, line, detail: ref });
+      if (!exists((0, import_node_path17.join)(root, ref))) candidates.push({ kind: "missing-path", doc, line, detail: ref });
     }
     for (const { target, line, resolved, missing } of links) {
       if (resolved.startsWith("..")) {
@@ -11378,18 +11556,18 @@ function readFileOrNull(path2) {
 }
 function walk(dir, root, out) {
   for (const entry of (0, import_node_fs17.readdirSync)(dir)) {
-    const full = (0, import_node_path16.join)(dir, entry);
+    const full = (0, import_node_path17.join)(dir, entry);
     if ((0, import_node_fs17.statSync)(full).isDirectory()) walk(full, root, out);
     else if (entry.endsWith(".md")) out.push(full.slice(root.length + 1).replaceAll("\\", "/"));
   }
   return out;
 }
 function defaultListDocs(root) {
-  const docsDir = (0, import_node_path16.join)(root, "docs");
+  const docsDir = (0, import_node_path17.join)(root, "docs");
   const docs2 = ((0, import_node_fs17.existsSync)(docsDir) ? walk(docsDir, root, []) : []).filter(
     (rel) => !SKIP_WALK.some((skip) => rel.startsWith(skip))
   );
-  return [...ROOT_DOCS.filter((rel) => (0, import_node_fs17.existsSync)((0, import_node_path16.join)(root, rel))), ...docs2];
+  return [...ROOT_DOCS.filter((rel) => (0, import_node_fs17.existsSync)((0, import_node_path17.join)(root, rel))), ...docs2];
 }
 var CHECK_IGNORE_MAX_BUFFER = 32 * 1024 * 1024;
 function defaultIsIgnored(root, relPaths, exec = import_node_child_process7.execFileSync) {
@@ -11449,7 +11627,7 @@ function runDocRefs(root, deps = {}) {
   const walked = listDocs(root);
   const ignoredDocs = walked.length ? isIgnored(walked) : /* @__PURE__ */ new Set();
   const docs2 = Object.fromEntries(
-    walked.filter((rel) => !ignoredDocs.has(rel)).map((rel) => [rel, readFile9((0, import_node_path16.join)(root, rel))]).filter(([, body]) => body != null)
+    walked.filter((rel) => !ignoredDocs.has(rel)).map((rel) => [rel, readFile9((0, import_node_path17.join)(root, rel))]).filter(([, body]) => body != null)
   );
   const refResult = checkRefs(root, { exists, isIgnored, trackedFirstSegments }, docs2);
   const findings = [
@@ -11557,19 +11735,19 @@ function walkMarkdown(dir) {
   while (stack.length) {
     const current = stack.pop();
     for (const entry of (0, import_node_fs18.readdirSync)(current, { withFileTypes: true })) {
-      const full = (0, import_node_path17.join)(current, entry.name);
+      const full = (0, import_node_path18.join)(current, entry.name);
       if (entry.isDirectory()) {
         stack.push(full);
       } else if (entry.isFile() && entry.name.endsWith(".md")) {
-        out.push((0, import_node_path17.relative)(dir, full).split(import_node_path17.sep).join("/"));
+        out.push((0, import_node_path18.relative)(dir, full).split(import_node_path18.sep).join("/"));
       }
     }
   }
   return out;
 }
 function createDocsIndexDeps(repoRoot2) {
-  const docsDir = (0, import_node_path17.join)(repoRoot2, "docs");
-  const indexPath = (0, import_node_path17.join)(repoRoot2, DOCS_INDEX_PATH);
+  const docsDir = (0, import_node_path18.join)(repoRoot2, "docs");
+  const indexPath = (0, import_node_path18.join)(repoRoot2, DOCS_INDEX_PATH);
   return {
     listDocs: () => {
       if (!(0, import_node_fs18.existsSync)(docsDir)) return [];
@@ -11578,7 +11756,7 @@ function createDocsIndexDeps(repoRoot2) {
       const ignored = defaultIsIgnored(repoRoot2, walked.map((rel) => `docs/${rel}`));
       return walked.filter((rel) => !ignored.has(`docs/${rel}`)).sort();
     },
-    readDoc: (relPath) => (0, import_node_fs18.readFileSync)((0, import_node_path17.join)(docsDir, relPath), "utf8"),
+    readDoc: (relPath) => (0, import_node_fs18.readFileSync)((0, import_node_path18.join)(docsDir, relPath), "utf8"),
     readIndex: () => (0, import_node_fs18.existsSync)(indexPath) ? (0, import_node_fs18.readFileSync)(indexPath, "utf8") : null,
     writeIndex: (content) => (0, import_node_fs18.writeFileSync)(indexPath, content, "utf8")
   };
@@ -12373,7 +12551,7 @@ function parseVerifyBroker(stdout) {
 // src/train-apply.ts
 var import_node_fs21 = require("node:fs");
 var import_promises4 = require("node:fs/promises");
-var import_node_path20 = require("node:path");
+var import_node_path21 = require("node:path");
 
 // src/bootstrap-org-ruleset.ts
 var ORG_NO_AGENT_FILES_RULESET_NAME = "mmi-no-agent-files-org";
@@ -12846,7 +13024,7 @@ function renderAccessReport(report) {
 
 // src/cli-doctor-shared.ts
 var import_node_fs19 = require("node:fs");
-var import_node_path19 = require("node:path");
+var import_node_path20 = require("node:path");
 var import_node_fs20 = require("node:fs");
 
 // ../infra/registry-endpoints.mjs
@@ -12976,9 +13154,9 @@ function extractWorkflowCrons(yamlText) {
 function workflowEntry(repo, workflowPath, yamlText) {
   const crons = extractWorkflowCrons(yamlText);
   if (!crons.length) return null;
-  const basename6 = workflowPath.split("/").pop() ?? workflowPath;
+  const basename8 = workflowPath.split("/").pop() ?? workflowPath;
   return {
-    name: `${repo}/${basename6.replace(/\.ya?ml$/, "")}`,
+    name: `${repo}/${basename8.replace(/\.ya?ml$/, "")}`,
     cadence: crons.join(" + "),
     executor: "github-actions",
     llm: llmFromHeader(yamlText),
@@ -13388,8 +13566,8 @@ function scheduleRecordFromWorkflow(repo, workflowPath, yamlText) {
   const crons = extractWorkflowCrons(yamlText);
   const header = parseScheduleHeader(yamlText);
   if (!crons.length && !header.schedule) return null;
-  const basename6 = workflowPath.split("/").pop() ?? workflowPath;
-  const expectedId = `${repo}/${basename6.replace(/\.ya?ml$/, "")}`;
+  const basename8 = workflowPath.split("/").pop() ?? workflowPath;
+  const expectedId = `${repo}/${basename8.replace(/\.ya?ml$/, "")}`;
   if (isHarbourUnmanaged(yamlText)) return null;
   const missing = SCHEDULE_HEADER_FIELDS.filter((f) => !header[f]);
   if (missing.length) {
@@ -13764,7 +13942,7 @@ var import_node_os7 = require("node:os");
 // src/gh-create.ts
 var import_promises3 = require("node:fs/promises");
 var import_node_os6 = require("node:os");
-var import_node_path18 = require("node:path");
+var import_node_path19 = require("node:path");
 var import_node_crypto3 = require("node:crypto");
 
 // src/board-priority.ts
@@ -13847,8 +14025,8 @@ async function bodyArgsViaFile(args, deps = {}) {
   const remove2 = deps.remove ?? import_promises3.unlink;
   const ensureDir = deps.ensureDir ?? import_promises3.mkdir;
   const dir = deps.dir ?? (0, import_node_os6.tmpdir)();
-  const file = (0, import_node_path18.join)(dir, `mmi-gh-body-${process.pid}-${(0, import_node_crypto3.randomBytes)(4).toString("hex")}.md`);
-  await ensureDir((0, import_node_path18.dirname)(file), { recursive: true }).catch(() => {
+  const file = (0, import_node_path19.join)(dir, `mmi-gh-body-${process.pid}-${(0, import_node_crypto3.randomBytes)(4).toString("hex")}.md`);
+  await ensureDir((0, import_node_path19.dirname)(file), { recursive: true }).catch(() => {
   });
   await write(file, args[i + 1], "utf8");
   return {
@@ -15391,7 +15569,7 @@ async function localBranchHeads() {
 }
 async function currentRepoWorktreeGitRoot(repoRoot2) {
   const gitCommonDir = (await execFileP2("git", ["rev-parse", "--git-common-dir"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim();
-  return gitCommonDir ? (0, import_node_path19.resolve)(repoRoot2, gitCommonDir, "worktrees") : "";
+  return gitCommonDir ? (0, import_node_path20.resolve)(repoRoot2, gitCommonDir, "worktrees") : "";
 }
 async function worktreeBranches() {
   const { stdout } = await execFileP2("git", ["worktree", "list", "--porcelain"], { timeout: GIT_TIMEOUT_MS });
@@ -15411,7 +15589,7 @@ function resolveGitdirForWorktreeFile(worktreePath, content) {
   const match = /^gitdir:\s*(.+)\s*$/im.exec(content);
   if (!match?.[1]) return void 0;
   const raw = match[1].trim();
-  return (0, import_node_path19.isAbsolute)(raw) ? raw : (0, import_node_path19.resolve)(worktreePath, raw);
+  return (0, import_node_path20.isAbsolute)(raw) ? raw : (0, import_node_path20.resolve)(worktreePath, raw);
 }
 function metadataOwnsMissingWorktreeDir(worktreePath, worktreeGitRoot) {
   if (!worktreeGitRoot) return false;
@@ -15420,9 +15598,9 @@ function metadataOwnsMissingWorktreeDir(worktreePath, worktreeGitRoot) {
     for (const ent of entries) {
       if (!ent.isDirectory()) continue;
       try {
-        const gitdirPath = (0, import_node_fs19.readFileSync)((0, import_node_path19.join)(worktreeGitRoot, ent.name, "gitdir"), "utf8").trim();
-        const resolvedGitdir = (0, import_node_path19.isAbsolute)(gitdirPath) ? gitdirPath : (0, import_node_path19.resolve)(worktreeGitRoot, ent.name, gitdirPath);
-        if (sameWorktreeMetadataPath((0, import_node_path19.dirname)(resolvedGitdir), worktreePath)) return true;
+        const gitdirPath = (0, import_node_fs19.readFileSync)((0, import_node_path20.join)(worktreeGitRoot, ent.name, "gitdir"), "utf8").trim();
+        const resolvedGitdir = (0, import_node_path20.isAbsolute)(gitdirPath) ? gitdirPath : (0, import_node_path20.resolve)(worktreeGitRoot, ent.name, gitdirPath);
+        if (sameWorktreeMetadataPath((0, import_node_path20.dirname)(resolvedGitdir), worktreePath)) return true;
       } catch {
       }
     }
@@ -15441,7 +15619,7 @@ function pathExistsKnown(path2) {
   }
 }
 function inspectSiblingWorktreeDir(path2, worktreeGitRoot) {
-  const gitPath = (0, import_node_path19.join)(path2, ".git");
+  const gitPath = (0, import_node_path20.join)(path2, ".git");
   let st;
   try {
     st = (0, import_node_fs20.lstatSync)(gitPath);
@@ -15495,24 +15673,25 @@ async function preservedBranches() {
 async function siblingWorktreeDirs(explicitRoot) {
   const repoRoot2 = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path19.dirname)((0, import_node_path19.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path20.dirname)((0, import_node_path20.dirname)(worktreeGitRoot)) : repoRoot2;
   try {
     const dirs = explicitRoot ? listDirsIn(resolveExplicitScanRoot(explicitRoot, primaryRepoRoot)) : worktreeScanDirs(siblingMmiWorktreesRoot(primaryRepoRoot), primaryRepoRoot, listDirsIn, isRepoCheckoutDir);
     const agentDirs2 = listDirsIn(agentWorktreesRoot(primaryRepoRoot));
-    return [...dirs, ...agentDirs2].map((dir) => inspectSiblingWorktreeDir(dir, worktreeGitRoot)).filter((entry) => Boolean(entry));
+    const repoLocalWorktrees = listDirsIn((0, import_node_path20.join)(primaryRepoRoot, ".worktrees"));
+    return [...dirs, ...agentDirs2, ...repoLocalWorktrees].map((dir) => inspectSiblingWorktreeDir(dir, worktreeGitRoot)).filter((entry) => Boolean(entry));
   } catch {
     return [];
   }
 }
 function listDirsIn(dir) {
   try {
-    return (0, import_node_fs20.readdirSync)(dir, { withFileTypes: true }).filter((ent) => ent.isDirectory()).map((ent) => (0, import_node_path19.join)(dir, ent.name));
+    return (0, import_node_fs20.readdirSync)(dir, { withFileTypes: true }).filter((ent) => ent.isDirectory()).map((ent) => (0, import_node_path20.join)(dir, ent.name));
   } catch {
     return [];
   }
 }
 function isRepoCheckoutDir(dir) {
-  return (0, import_node_fs20.existsSync)((0, import_node_path19.join)(dir, ".git"));
+  return (0, import_node_fs20.existsSync)((0, import_node_path20.join)(dir, ".git"));
 }
 function resolveExplicitScanRoot(explicitRoot, repoRoot2) {
   let rootDirs;
@@ -15524,7 +15703,7 @@ function resolveExplicitScanRoot(explicitRoot, repoRoot2) {
   return explicitRepoWorktreesRoot(explicitRoot, repoRoot2, rootDirs);
 }
 async function gcPlan(remote, limit, opts = {}) {
-  const [branches, heads, current, stale, worktrees, siblingDirs, preserved, mergedIntoBase] = await Promise.all([
+  const [branches, heads, current, stale, worktrees, siblingDirs, preserved, mergedIntoBase, originListed] = await Promise.all([
     gitOut(["branch", "--format=%(refname:short)"]),
     localBranchHeads(),
     gitOut(["rev-parse", "--abbrev-ref", "HEAD"]),
@@ -15534,11 +15713,18 @@ async function gcPlan(remote, limit, opts = {}) {
     worktreeBranches(),
     siblingWorktreeDirs(opts.root),
     preservedBranches(),
-    branchesMergedIntoBase(remote)
+    branchesMergedIntoBase(remote),
+    gitOut(["branch", "-r", "--format=%(refname:short)"]).catch(() => "")
   ]);
   const localBranches = branches.split(/\r?\n/).map((b) => b.trim()).filter(Boolean);
+  const originBranches = originListed.split(/\r?\n/).map((b) => b.trim()).filter((b) => b.startsWith(`${remote}/`) && b !== `${remote}/HEAD`);
+  const originNames = originBranches.map((b) => b.slice(remote.length + 1));
   const { prs, failures } = await resolveBranchPrs(
-    [...localBranches, ...stale.map((ref) => branchForTrackingRef(ref, remote)).filter((b) => Boolean(b))].filter((b) => !isProtectedBranch(b)),
+    [.../* @__PURE__ */ new Set([
+      ...localBranches,
+      ...stale.map((ref) => branchForTrackingRef(ref, remote)).filter((b) => Boolean(b)),
+      ...originNames
+    ])].filter((b) => !isProtectedBranch(b)),
     limit
   );
   return buildGcPlan({
@@ -15552,7 +15738,9 @@ async function gcPlan(remote, limit, opts = {}) {
     worktrees,
     remote,
     preservedBranches: preserved,
-    mergedIntoBase
+    mergedIntoBase,
+    originBranches,
+    trainOnly: opts.trainOnly
   });
 }
 async function branchesMergedIntoBase(remote) {
@@ -15849,10 +16037,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "3.127.0",
-    tag: "v3.127.0",
-    commit: "2f170f4e63d4",
-    npm: "@mutmutco/cli@3.127.0"
+    version: "3.129.0",
+    tag: "v3.129.0",
+    commit: "7067f7164642",
+    npm: "@mutmutco/cli@3.129.0"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15869,14 +16057,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v3.127.0"
+          v3Target: "v3.129.0"
         }
       ],
       rollbackTrigger: "Any red inside the post-cut soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a v3 client refused while the compat window must still admit it (SUPPORTED_MINOR_WINDOW=2, MIN_CLIENT_VERSION 0.0.0 \u2014 D6a), or npm consumer install/doctor failure on the v4 dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 3.127.0 and redeploy the Hub Lambda from tag v3.127.0 (2f170f4e63d4); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v3.127.0 (@mutmutco/cli@3.127.0, tag commit 2f170f4e63d4 \u2014 the preserved latest-v3 distribution, D6b)"
+        mechanism: "npm dist-tag latest -> 3.129.0 and redeploy the Hub Lambda from tag v3.129.0 (7067f7164642); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v3.129.0 (@mutmutco/cli@3.129.0, tag commit 7067f7164642 \u2014 the preserved latest-v3 distribution, D6b)"
       }
     },
     {
@@ -18125,7 +18313,7 @@ function publishVisibilityFor(surfaceId) {
 }
 function npmPackArtifactName(packagePath) {
   try {
-    const pkg = JSON.parse((0, import_node_fs21.readFileSync)((0, import_node_path20.join)(packagePath, "package.json"), "utf8"));
+    const pkg = JSON.parse((0, import_node_fs21.readFileSync)((0, import_node_path21.join)(packagePath, "package.json"), "utf8"));
     return pkg.name || void 0;
   } catch {
     return void 0;
@@ -19296,7 +19484,7 @@ async function dispatchDeploy(deps, ctx, stage, ref, model, watch, autoRunSince,
   return { note: `no manual dispatch: ${model} repo deploys via its own push-triggered workflow`, deployStatus: "pending" };
 }
 function readLocalGateWorkflows() {
-  const dir = (0, import_node_path20.join)(".github", "workflows");
+  const dir = (0, import_node_path21.join)(".github", "workflows");
   let names;
   try {
     names = (0, import_node_fs21.readdirSync)(dir);
@@ -19306,7 +19494,7 @@ function readLocalGateWorkflows() {
   const files = [];
   for (const name of names.filter(isGateWorkflowPath)) {
     try {
-      files.push({ path: `${dir}/${name}`.replace(/\\/g, "/"), body: (0, import_node_fs21.readFileSync)((0, import_node_path20.join)(dir, name), "utf8") });
+      files.push({ path: `${dir}/${name}`.replace(/\\/g, "/"), body: (0, import_node_fs21.readFileSync)((0, import_node_path21.join)(dir, name), "utf8") });
     } catch {
     }
   }
@@ -21543,7 +21731,7 @@ var import_node_fs23 = require("node:fs");
 // src/stage-runner.ts
 var import_node_child_process9 = require("node:child_process");
 var import_node_fs22 = require("node:fs");
-var import_node_path21 = require("node:path");
+var import_node_path22 = require("node:path");
 var import_node_net = require("node:net");
 var import_node_util5 = require("node:util");
 
@@ -21682,11 +21870,11 @@ function appendForceRecreate(up) {
   return `${up.trimEnd()} --force-recreate`;
 }
 function stageStatePath(cwd = process.cwd()) {
-  return (0, import_node_path21.join)(cwd, "tmp", "stage", "state.json");
+  return (0, import_node_path22.join)(cwd, "tmp", "stage", "state.json");
 }
 function stageGlobalStatePath(cwd = process.cwd(), gitCommonDir = ".git") {
-  const dir = (0, import_node_path21.isAbsolute)(gitCommonDir) ? gitCommonDir : (0, import_node_path21.resolve)(cwd, gitCommonDir);
-  return (0, import_node_path21.join)(dir, "mmi", "stage", "state.json");
+  const dir = (0, import_node_path22.isAbsolute)(gitCommonDir) ? gitCommonDir : (0, import_node_path22.resolve)(cwd, gitCommonDir);
+  return (0, import_node_path22.join)(dir, "mmi", "stage", "state.json");
 }
 function normPath3(path2) {
   return path2.replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
@@ -21910,8 +22098,8 @@ function stageProcessEnv(stagePort, extraEnv) {
 }
 async function ensureStageRuntimeEnv(config, opts, cwd) {
   if (!config.ensureEnv) return;
-  const target = (0, import_node_path21.join)(cwd, config.ensureEnv.target);
-  const example = (0, import_node_path21.join)(cwd, config.ensureEnv.example);
+  const target = (0, import_node_path22.join)(cwd, config.ensureEnv.target);
+  const example = (0, import_node_path22.join)(cwd, config.ensureEnv.example);
   if (!(0, import_node_fs22.existsSync)(target) && (0, import_node_fs22.existsSync)(example)) {
     (0, import_node_fs22.copyFileSync)(example, target);
   } else if ((0, import_node_fs22.existsSync)(target) && (0, import_node_fs22.existsSync)(example)) {
@@ -22276,13 +22464,13 @@ async function executeWaveLand(plan, deps, opts = { preserveWorktree: true }) {
 }
 
 // src/index.ts
-var import_node_os19 = require("node:os");
+var import_node_os20 = require("node:os");
 
 // src/board.ts
 var import_node_child_process10 = require("node:child_process");
 var import_node_fs24 = require("node:fs");
 var import_node_os8 = require("node:os");
-var import_node_path22 = require("node:path");
+var import_node_path23 = require("node:path");
 var import_node_util6 = require("node:util");
 
 // src/board-dependency.ts
@@ -22629,9 +22817,6 @@ var BOARD_GIT_TIMEOUT_MS = 1e4;
 var WRITE_PROBE_CONCURRENCY = 8;
 var CLAIM_CONCURRENCY = 5;
 var BOARD_ACTIVE_READ_MAX_PAGES = 100;
-var BOARD_PROJECTION_STALE_MS = 24 * 60 * 6e4;
-var BOARD_PROJECTION_RECONCILE_STALE_MS = 3 * 60 * 6e4;
-var BOARD_PROJECTION_TIMEOUT_MS = 8e3;
 var execFileP4 = (file, args, options = {}) => (
   // encoding 'utf8' guarantees string output at runtime; the cast pins the type (promisify's
   // overloads widen to string|Buffer when options is spread in).
@@ -22899,7 +23084,7 @@ function renderBoardItem(item) {
   return lines.join("\n");
 }
 function renderBoardReport(report) {
-  const lines = [`Board \xB7 ${report.project.title} \xB7 @${report.viewer}`, renderBoardSource(report)];
+  const lines = [`Board \xB7 ${report.project.title} \xB7 @${report.viewer}`, renderBoardSource()];
   renderScope(lines, "PRIMARY", report.repo, report.primary, report.viewer);
   renderScope(lines, "SECONDARY", "Other repos on this project", report.secondary, report.viewer);
   if (report.warnings.length) {
@@ -23003,132 +23188,13 @@ async function resolveWritableReposForClaimables(items, client) {
 function writableOrUnknown(writable) {
   return /* @__PURE__ */ new Set([...writable.repos, ...writable.unknown]);
 }
-async function defaultFetchBoardProjection(owner, number, baseUrl) {
-  if (!baseUrl) throw new Error("Hub API URL not configured");
-  const token = await hubAuthToken({ baseUrl, githubToken });
-  if (!token) throw new Error("no Hub session token");
-  const url = new URL("/board-projection", `${baseUrl.replace(/\/$/, "")}/`);
-  url.searchParams.set("owner", owner);
-  url.searchParams.set("number", String(number));
-  const res = await fetch(url, {
-    method: "GET",
-    headers: { ...clientVersionHeaders(), Authorization: `Bearer ${token}` },
-    signal: AbortSignal.timeout(BOARD_PROJECTION_TIMEOUT_MS)
-  });
-  if (res.status === 404) return null;
-  if (res.status === 426) throw new Error(upgradeRequiredError(res, await res.json().catch(() => null)));
-  if (!res.ok) throw new Error(`board projection HTTP ${res.status}`);
-  return await res.json();
-}
-function projectionItems(row) {
-  if (!row.items || typeof row.items !== "object" || Array.isArray(row.items)) {
-    throw new Error("malformed projection items");
-  }
-  const items = [];
-  for (const raw of Object.values(row.items)) {
-    if (!raw || typeof raw !== "object") throw new Error("malformed projection item");
-    if (raw.tombstone === true) continue;
-    const item = raw;
-    if (typeof item.itemId !== "string" || typeof item.contentId !== "string" || item.contentType !== "Issue" && item.contentType !== "PullRequest" || typeof item.repository !== "string" || typeof item.number !== "number" || !Number.isFinite(item.number) || typeof item.ref !== "string" || typeof item.url !== "string" || typeof item.title !== "string" || typeof item.state !== "string" || !BOARD_STATUSES.includes(item.status) || !Array.isArray(item.assignees) || item.assignees.some((value) => typeof value !== "string") || !Array.isArray(item.labels) || item.labels.some((value) => typeof value !== "string") || typeof item.sourceTimestamp !== "string") {
-      throw new Error("malformed projection item");
-    }
-    if (item.state.toUpperCase() === "CLOSED" || item.status === "Done") continue;
-    items.push(withLoopState({
-      itemId: item.itemId,
-      contentId: item.contentId,
-      contentType: item.contentType,
-      repository: item.repository,
-      number: item.number,
-      ref: item.ref,
-      url: item.url,
-      title: item.title,
-      state: item.state,
-      // #4441: the reconciler stamps each item's content updatedAt as sourceTimestamp — the same
-      // idle-age evidence the live read carries, so projection reads derive staleness too.
-      updatedAt: item.sourceTimestamp,
-      status: item.status,
-      statusOptionId: item.statusOptionId,
-      priority: item.priority,
-      priorityOptionId: item.priorityOptionId,
-      assignees: [...item.assignees],
-      labels: [...item.labels],
-      type: item.type
-    }));
-  }
-  return items;
-}
-async function readViewerLogin(client) {
-  const user = await client.rest("GET", "user");
-  if (!user?.login) throw new Error("viewer login unavailable");
-  return user.login;
-}
-function projectionFreshness(row, now) {
-  const projectedAtMs = Date.parse(row.watermark?.projectedAt);
-  const sourceTimestampMs = Date.parse(row.watermark?.sourceTimestamp);
-  if (!Number.isFinite(projectedAtMs) || !Number.isFinite(sourceTimestampMs)) {
-    throw new Error("malformed projection watermark");
-  }
-  const projectedAgeMs = Math.max(0, now - projectedAtMs);
-  const sourceAgeMs = Math.max(0, now - sourceTimestampMs);
-  return {
-    projectedAt: row.watermark.projectedAt,
-    projectedAgeMs,
-    sourceTimestamp: row.watermark.sourceTimestamp,
-    sourceAgeMs,
-    // #4774: health must agree with BOTH ages a caller can see on the source line — a projection whose
-    // rebuild (projectedAt) went stale is exactly as unreliable as one whose source events did, even
-    // while recent webhook activity keeps sourceAgeMs looking fresh.
-    health: row.watermark.health === "stale" || sourceAgeMs > BOARD_PROJECTION_STALE_MS || projectedAgeMs > BOARD_PROJECTION_RECONCILE_STALE_MS ? "stale" : "fresh"
-  };
-}
-function renderBoardSource(report) {
-  if (report.source === "projection" && report.freshness) {
-    return `source: projection \xB7 projected ${formatClaimAge(report.freshness.projectedAgeMs)} ago \xB7 source events through ${report.freshness.sourceTimestamp} \xB7 health ${report.freshness.health}`;
-  }
-  return `source: live${report.sourceReason ? ` (${report.sourceReason})` : ""}`;
+function renderBoardSource() {
+  return "source: live";
 }
 async function readBoard(options, deps = {}) {
   const cfg = resolveBoardConfig(options.config);
   const client = deps.client ?? defaultGitHubClient();
-  let collected;
-  let source = "live";
-  let freshness = null;
-  let sourceReason;
-  if (!options.live) {
-    try {
-      const baseUrl = options.config.sagaApiUrl;
-      const row = await (deps.fetchProjection ?? defaultFetchBoardProjection)(cfg.projectOwner, cfg.projectNumber, baseUrl);
-      if (!row) {
-        sourceReason = "projection absent";
-      } else if (row.schemaVersion !== 1) {
-        sourceReason = `unsupported projection schema ${String(row.schemaVersion)}`;
-      } else if (row.watermark?.health === "oversize") {
-        sourceReason = "projection oversize";
-      } else {
-        const [viewer, repo] = await Promise.all([
-          readViewerLogin(client),
-          resolveCurrentRepo(options, deps)
-        ]);
-        const now = (deps.now ?? Date.now)();
-        collected = {
-          items: projectionItems(row),
-          viewer,
-          repo,
-          projectId: cfg.projectId,
-          projectTitle: String(cfg.projectNumber),
-          warnings: [],
-          partial: false
-        };
-        freshness = projectionFreshness(row, now);
-        source = "projection";
-      }
-    } catch {
-      sourceReason = "projection read error";
-    }
-  }
-  if (!collected) {
-    collected = await collectBoardItems(cfg, { repo: options.repo, allowPartial: options.allowPartial, activeOnly: true }, deps);
-  }
+  const collected = await collectBoardItems(cfg, { repo: options.repo, allowPartial: options.allowPartial, activeOnly: true }, deps);
   const writable = await resolveWritableReposForClaimables(collected.items, client);
   collected.warnings.push(...writable.warnings);
   collected.partial = collected.partial || writable.partial;
@@ -23140,9 +23206,7 @@ async function readBoard(options, deps = {}) {
     ...groups,
     warnings: collected.warnings,
     partial: collected.partial,
-    source,
-    freshness,
-    ...sourceReason ? { sourceReason } : {}
+    source: "live"
   };
   if (options.includeBundleDetails || options.includeAllBodies) {
     await attachBundleDetails(report, client, options.allowPartial ?? false, { all: options.includeAllBodies });
@@ -24025,14 +24089,14 @@ function probeLocalClaimSession(marker, now = Date.now()) {
     claimSessionProbeCache.set(cacheKey, { checkedAt: now, state });
     return state;
   };
-  const root = (0, import_node_path22.join)((0, import_node_os8.homedir)(), ".claude", "projects");
+  const root = (0, import_node_path23.join)((0, import_node_os8.homedir)(), ".claude", "projects");
   try {
     const wanted = `${marker.session}.jsonl`.toLowerCase();
     const pending = [root];
     while (pending.length) {
       const dir = pending.pop();
       for (const entry of (0, import_node_fs24.readdirSync)(dir, { withFileTypes: true })) {
-        const path2 = (0, import_node_path22.join)(dir, entry.name);
+        const path2 = (0, import_node_path23.join)(dir, entry.name);
         if (entry.isDirectory()) pending.push(path2);
         else if (entry.isFile() && entry.name.toLowerCase() === wanted) {
           return remember(now - (0, import_node_fs24.statSync)(path2).mtimeMs <= CLAIM_SESSION_ACTIVITY_MS ? "live" : "dead");
@@ -24938,7 +25002,7 @@ function consolidateCommandNamespaces(program3) {
 
 // src/pi-plugin-registration.ts
 var import_node_fs25 = require("node:fs");
-var import_node_path23 = require("node:path");
+var import_node_path24 = require("node:path");
 var import_proper_lockfile2 = __toESM(require_proper_lockfile(), 1);
 
 // src/plugin-cache-prune.ts
@@ -25201,17 +25265,17 @@ function newestExistingPiPlugin(home) {
     return void 0;
   }
   for (const version of names.filter(isVersionDirName).sort((a, b) => compareVersions(b, a))) {
-    const candidate = (0, import_node_path23.join)(cacheRoot, version, ".pi-plugin");
+    const candidate = (0, import_node_path24.join)(cacheRoot, version, ".pi-plugin");
     if ((0, import_node_fs25.existsSync)(candidate)) return candidate;
   }
   return void 0;
 }
 function expectedPiPluginPath(home, env, installedVersion) {
   const root = env.CLAUDE_PLUGIN_ROOT?.trim();
-  if (root && /[\\/]mutmutco[\\/]mmi[\\/]/.test(root)) return (0, import_node_path23.join)(root, ".pi-plugin");
+  if (root && /[\\/]mutmutco[\\/]mmi[\\/]/.test(root)) return (0, import_node_path24.join)(root, ".pi-plugin");
   const version = installedVersion ?? runningPluginVersion(env);
   if (version) {
-    const pinned = (0, import_node_path23.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi", version, ".pi-plugin");
+    const pinned = (0, import_node_path24.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi", version, ".pi-plugin");
     if ((0, import_node_fs25.existsSync)(pinned)) return pinned;
   }
   return newestExistingPiPlugin(home);
@@ -25219,15 +25283,15 @@ function expectedPiPluginPath(home, env, installedVersion) {
 function agentDirs(home, env = process.env) {
   const override = env.JERVCODE_CODING_AGENT_DIR?.trim() || env.PI_CODING_AGENT_DIR?.trim();
   if (override) return [override];
-  const jerv = (0, import_node_path23.join)(home, ".jerv", "agent");
-  const pi = (0, import_node_path23.join)(home, ".pi", "agent");
+  const jerv = (0, import_node_path24.join)(home, ".jerv", "agent");
+  const pi = (0, import_node_path24.join)(home, ".pi", "agent");
   if (!(0, import_node_fs25.existsSync)(jerv) && !(0, import_node_fs25.existsSync)(pi)) return [];
   const dirs = [jerv];
   if ((0, import_node_fs25.existsSync)(pi) && pi !== jerv) dirs.push(pi);
   return dirs;
 }
 function settingsPath(agentDir) {
-  return (0, import_node_path23.join)(agentDir, "settings.json");
+  return (0, import_node_path24.join)(agentDir, "settings.json");
 }
 function readPiPluginState(home, env, installedVersion) {
   const dirs = agentDirs(home, env);
@@ -25261,7 +25325,7 @@ function acquirePiSettingsLock2(settingsFile) {
   return void 0;
 }
 function atomicWriteSettings(file, body) {
-  (0, import_node_fs25.mkdirSync)((0, import_node_path23.dirname)(file), { recursive: true });
+  (0, import_node_fs25.mkdirSync)((0, import_node_path24.dirname)(file), { recursive: true });
   const tmp = `${file}.tmp-${process.pid}`;
   (0, import_node_fs25.writeFileSync)(tmp, body, "utf8");
   try {
@@ -25339,18 +25403,18 @@ function healPiPluginRegistration(home, env, installedVersion) {
 // src/claude-binary-doctor.ts
 var import_node_fs27 = require("node:fs");
 var import_node_os11 = require("node:os");
-var import_node_path25 = require("node:path");
+var import_node_path26 = require("node:path");
 
 // src/jerv-cli-spawn.ts
 var import_node_fs26 = require("node:fs");
 var import_node_os10 = require("node:os");
-var import_node_path24 = require("node:path");
+var import_node_path25 = require("node:path");
 var WIN_NAMES = ["jerv-cli.cmd", "jerv-cli.exe", "jerv-cli"];
 var POSIX_NAMES = ["jerv-cli"];
-var JERV_CLI_ENTRY = (0, import_node_path24.join)("node_modules", "@jervaise", "jerv-cli", "dist", "index.cjs");
+var JERV_CLI_ENTRY = (0, import_node_path25.join)("node_modules", "@jervaise", "jerv-cli", "dist", "index.cjs");
 function pathEnvEntries(pathEnv, platform2 = process.platform) {
   if (platform2 !== "win32") {
-    return pathEnv.split(import_node_path24.delimiter).map((e) => e.trim()).filter(Boolean);
+    return pathEnv.split(import_node_path25.delimiter).map((e) => e.trim()).filter(Boolean);
   }
   if (pathEnv.includes(";")) {
     return pathEnv.split(";").map((e) => e.trim()).filter(Boolean);
@@ -25383,10 +25447,10 @@ function jervCliCandidateDirs(env = process.env, home = (0, import_node_os10.hom
     push(normalizeSpawnPathEntry(entry, platform2));
   }
   if (platform2 === "win32") {
-    if (env.APPDATA) push((0, import_node_path24.join)(env.APPDATA, "npm"));
-    if (env.LOCALAPPDATA) push((0, import_node_path24.join)(env.LOCALAPPDATA, "npm"));
+    if (env.APPDATA) push((0, import_node_path25.join)(env.APPDATA, "npm"));
+    if (env.LOCALAPPDATA) push((0, import_node_path25.join)(env.LOCALAPPDATA, "npm"));
   } else {
-    push((0, import_node_path24.join)(home, ".local", "bin"));
+    push((0, import_node_path25.join)(home, ".local", "bin"));
   }
   return out;
 }
@@ -25394,7 +25458,7 @@ function jervCliCandidatePaths(env = process.env, home = (0, import_node_os10.ho
   const names = platform2 === "win32" ? WIN_NAMES : POSIX_NAMES;
   const out = [];
   for (const dir of jervCliCandidateDirs(env, home, platform2)) {
-    for (const name of names) out.push((0, import_node_path24.join)(dir, name));
+    for (const name of names) out.push((0, import_node_path25.join)(dir, name));
   }
   return out;
 }
@@ -25405,7 +25469,7 @@ function resolveJervCliPath(env = process.env, home = (0, import_node_os10.homed
   return void 0;
 }
 function resolveJervCliNodeEntry(shimPath, exists = import_node_fs26.existsSync) {
-  const entry = (0, import_node_path24.join)((0, import_node_path24.dirname)(shimPath), JERV_CLI_ENTRY);
+  const entry = (0, import_node_path25.join)((0, import_node_path25.dirname)(shimPath), JERV_CLI_ENTRY);
   return exists(entry) ? entry : void 0;
 }
 function jervCliExecFileArgs(args, opts = {}) {
@@ -25500,10 +25564,10 @@ function globalNodeModulesRoots(host) {
     out.push(dir);
   };
   const prefix = env.npm_config_prefix?.trim();
-  if (prefix) push(platform2 === "win32" ? (0, import_node_path25.join)(prefix, "node_modules") : (0, import_node_path25.join)(prefix, "lib", "node_modules"));
+  if (prefix) push(platform2 === "win32" ? (0, import_node_path26.join)(prefix, "node_modules") : (0, import_node_path26.join)(prefix, "lib", "node_modules"));
   for (const dir of jervCliCandidateDirs(env, host.home ?? (0, import_node_os11.homedir)(), platform2)) {
-    push((0, import_node_path25.join)(dir, "node_modules"));
-    push((0, import_node_path25.join)((0, import_node_path25.dirname)(dir), "lib", "node_modules"));
+    push((0, import_node_path26.join)(dir, "node_modules"));
+    push((0, import_node_path26.join)((0, import_node_path26.dirname)(dir), "lib", "node_modules"));
   }
   return out;
 }
@@ -25541,17 +25605,17 @@ function readClaudeBinaryState(host = {}) {
   const arch = host.arch ?? process.arch;
   const magic = EXECUTABLE_MAGIC[platform2];
   if (!magic) return void 0;
-  const packageRoot = globalNodeModulesRoots(host).map((root) => (0, import_node_path25.join)(root, ...PACKAGE.split("/"))).find((dir) => (0, import_node_fs27.existsSync)((0, import_node_path25.join)(dir, "package.json")));
+  const packageRoot = globalNodeModulesRoots(host).map((root) => (0, import_node_path26.join)(root, ...PACKAGE.split("/"))).find((dir) => (0, import_node_fs27.existsSync)((0, import_node_path26.join)(dir, "package.json")));
   if (!packageRoot) return void 0;
   const keys = platformPackageKeys(platform2, arch);
   const fallbackPackage = `${PACKAGE}-${keys[0]}`;
   let manifest;
   try {
-    manifest = JSON.parse((0, import_node_fs27.readFileSync)((0, import_node_path25.join)(packageRoot, "package.json"), "utf8"));
+    manifest = JSON.parse((0, import_node_fs27.readFileSync)((0, import_node_path26.join)(packageRoot, "package.json"), "utf8"));
   } catch (e) {
     return {
       state: "unreadable",
-      binPath: (0, import_node_path25.join)(packageRoot, "package.json"),
+      binPath: (0, import_node_path26.join)(packageRoot, "package.json"),
       expectedMagic: magic.name,
       platformPackage: fallbackPackage,
       error: `package.json could not be read \u2014 ${e.message}`
@@ -25568,15 +25632,15 @@ function readClaudeBinaryState(host = {}) {
       error: "package.json declares no `bin` entry \u2014 the executed file cannot be resolved"
     };
   }
-  const binPath = (0, import_node_path25.join)(packageRoot, binRelative);
-  const binName = (0, import_node_path25.basename)(binRelative);
+  const binPath = (0, import_node_path26.join)(packageRoot, binRelative);
+  const binName = (0, import_node_path26.basename)(binRelative);
   const optional = manifest.optionalDependencies;
   const publishes = (name) => typeof optional === "object" && optional !== null && Object.prototype.hasOwnProperty.call(optional, name);
   const published = keys.map((key) => `${PACKAGE}-${key}`).filter(publishes);
   if (published.length === 0) return void 0;
   const binIn = (name) => [
-    (0, import_node_path25.join)(packageRoot, "node_modules", ...name.split("/"), binName),
-    (0, import_node_path25.join)((0, import_node_path25.dirname)((0, import_node_path25.dirname)(packageRoot)), ...name.split("/"), binName)
+    (0, import_node_path26.join)(packageRoot, "node_modules", ...name.split("/"), binName),
+    (0, import_node_path26.join)((0, import_node_path26.dirname)((0, import_node_path26.dirname)(packageRoot)), ...name.split("/"), binName)
   ];
   const found = published.map((name) => ({ name, path: binIn(name).find((file) => (0, import_node_fs27.existsSync)(file)) })).find((c) => c.path);
   const platformPackage = found?.name ?? published[0];
@@ -25901,7 +25965,7 @@ function renderVerifyBroker(input) {
 var import_node_crypto4 = require("node:crypto");
 var import_node_fs28 = require("node:fs");
 var import_promises5 = require("node:fs/promises");
-var import_node_path26 = require("node:path");
+var import_node_path27 = require("node:path");
 var ARTIFACT_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var MAX_BYTES = 5 * 1024 * 1024 * 1024;
 async function sha256File(path2) {
@@ -25911,7 +25975,7 @@ async function sha256File(path2) {
 }
 async function putTenantArtifact(repo, stage, inputPath, deps) {
   if (!["dev", "rc", "main"].includes(stage)) throw new Error("tenant artifact put: <stage> must be dev, rc, or main");
-  const path2 = (0, import_node_path26.resolve)(inputPath);
+  const path2 = (0, import_node_path27.resolve)(inputPath);
   const info = await (0, import_promises5.stat)(path2);
   if (!info.isFile()) throw new Error("tenant artifact put: input path must be a file");
   if (!Number.isSafeInteger(info.size) || info.size < 1 || info.size > MAX_BYTES) throw new Error(`tenant artifact put: file must be 1..${MAX_BYTES} bytes`);
@@ -27048,7 +27112,7 @@ async function announceRelease(deps, args) {
 var import_node_crypto5 = require("node:crypto");
 var import_node_child_process13 = require("node:child_process");
 var import_node_fs29 = require("node:fs");
-var import_node_path27 = require("node:path");
+var import_node_path28 = require("node:path");
 var REPO_INDEX_SCHEMA = 1;
 var HARD_DENY = [
   /(^|\/)\.env(\.|$)/i,
@@ -27173,7 +27237,7 @@ function loadReadmeHints(cwd, candidatePaths) {
   }
   for (const rel of readmes) {
     if (isHardDeniedPath(rel)) continue;
-    const abs = (0, import_node_path27.join)(cwd, ...rel.split("/"));
+    const abs = (0, import_node_path28.join)(cwd, ...rel.split("/"));
     if (!(0, import_node_fs29.existsSync)(abs)) continue;
     let text;
     try {
@@ -27190,7 +27254,7 @@ function loadReadmeHints(cwd, candidatePaths) {
   return hints;
 }
 function toPosix(p) {
-  return p.split(import_node_path27.sep).join("/");
+  return p.split(import_node_path28.sep).join("/");
 }
 function listCandidatePaths(cwd, exec = import_node_child_process13.execFileSync) {
   try {
@@ -27212,7 +27276,7 @@ function rebuildRepoIndex(cwd, repoSlug2) {
   for (const rel of candidates) {
     if (ignored.has(rel)) continue;
     if (isHardDeniedPath(rel)) continue;
-    const abs = (0, import_node_path27.join)(cwd, ...rel.split("/"));
+    const abs = (0, import_node_path28.join)(cwd, ...rel.split("/"));
     if (!(0, import_node_fs29.existsSync)(abs)) continue;
     let text;
     try {
@@ -27241,7 +27305,7 @@ function rebuildRepoIndex(cwd, repoSlug2) {
     entries
   };
   const store = repoIndexStorePath(cwd);
-  (0, import_node_fs29.mkdirSync)((0, import_node_path27.dirname)(store), { recursive: true });
+  (0, import_node_fs29.mkdirSync)((0, import_node_path28.dirname)(store), { recursive: true });
   (0, import_node_fs29.writeFileSync)(store, `${JSON.stringify(projection, null, 2)}
 `, "utf8");
   return projection;
@@ -27322,7 +27386,7 @@ function inferRepoSlug(cwd, exec = import_node_child_process13.execFileSync) {
     if (m?.[1]) return m[1].toLowerCase();
   } catch {
   }
-  return ((0, import_node_path27.basename)(cwd) || "local").toLowerCase();
+  return ((0, import_node_path28.basename)(cwd) || "local").toLowerCase();
 }
 
 // src/repo-index-cloud-client.ts
@@ -27464,7 +27528,7 @@ async function gcRepoIndexCloud(deps) {
 // src/repo-index-sync.ts
 var import_node_fs30 = require("node:fs");
 var import_node_os12 = require("node:os");
-var import_node_path28 = require("node:path");
+var import_node_path29 = require("node:path");
 var import_node_child_process14 = require("node:child_process");
 var MAX_EMBED_BACKFILL_ROUNDS = 40;
 function normalizeRepo(raw) {
@@ -27508,7 +27572,7 @@ async function syncEstateRepoIndex(opts) {
   const failed = [];
   const skipped = [];
   for (const repo of repos) {
-    const dir = (0, import_node_fs30.mkdtempSync)((0, import_node_path28.join)((0, import_node_os12.tmpdir)(), "mmi-repo-index-"));
+    const dir = (0, import_node_fs30.mkdtempSync)((0, import_node_path29.join)((0, import_node_os12.tmpdir)(), "mmi-repo-index-"));
     try {
       shallowClone(repo, dir, opts.githubToken);
       const built = rebuildRepoIndex(dir, repo);
@@ -27764,7 +27828,7 @@ async function runRepoIndexHealth(opts) {
 // src/spawn-policy-core.ts
 var import_node_child_process15 = require("node:child_process");
 var import_node_fs32 = require("node:fs");
-var import_node_path29 = require("node:path");
+var import_node_path30 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
 var CALL_SOURCE = String.raw`(^|[^.\w$])(${SPAWNERS.join("|")})\s*\(`;
 var SOURCE_EXT = /\.(ts|mts|cts|js|mjs|cjs)$/;
@@ -27850,7 +27914,7 @@ function runSpawnPolicy(root) {
   for (const file of files) {
     let raw;
     try {
-      raw = (0, import_node_fs32.readFileSync)((0, import_node_path29.join)(root, file), "utf8");
+      raw = (0, import_node_fs32.readFileSync)((0, import_node_path30.join)(root, file), "utf8");
     } catch {
       continue;
     }
@@ -27869,7 +27933,7 @@ function runSpawnPolicy(root) {
 // src/test-policy-core.ts
 var import_node_child_process16 = require("node:child_process");
 var import_node_fs33 = require("node:fs");
-var import_node_path30 = require("node:path");
+var import_node_path31 = require("node:path");
 var POLICY_FILE = "test-policy.json";
 var TEST_RE = /\.(?:test|spec)\.[cm]?[jt]sx?$/;
 var PY_TEST_RE = /(?:^|\/)test_[^/]*\.py$|_test\.py$/;
@@ -27922,7 +27986,7 @@ function isTestPath(path2) {
   return TEST_RE.test(path2) || PY_TEST_RE.test(path2);
 }
 function loadPolicy(root, readFile9 = readFileOrNull2) {
-  const raw = readFile9((0, import_node_path30.join)(root, POLICY_FILE));
+  const raw = readFile9((0, import_node_path31.join)(root, POLICY_FILE));
   if (raw == null) return { mandatory: [], declared: false };
   try {
     return { ...JSON.parse(raw), declared: true };
@@ -27960,11 +28024,11 @@ function classify(changed, policy, present = () => false) {
   return { mandatoryHits, untestedHits, testChanges, addedTests, removedProtected };
 }
 function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs33.existsSync)(path2)) {
-  return (policy.protected ?? []).map((p) => p.path).filter((p) => !exists((0, import_node_path30.join)(root, p)));
+  return (policy.protected ?? []).map((p) => p.path).filter((p) => !exists((0, import_node_path31.join)(root, p)));
 }
 function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs33.existsSync)(path2)) {
   const declared = (policy.mandatory ?? []).flatMap((m) => m.satisfiedBy ?? []);
-  return [...new Set(declared)].filter((p) => !exists((0, import_node_path30.join)(root, p)));
+  return [...new Set(declared)].filter((p) => !exists((0, import_node_path31.join)(root, p)));
 }
 function evaluate(changed, policy, present = () => false) {
   const { mandatoryHits, untestedHits, testChanges, addedTests, removedProtected } = classify(changed, policy, present);
@@ -28152,7 +28216,7 @@ function runTestPolicy(root, deps = {}) {
   const refusal = deps.changed ? null : untrustworthyRange(root, base);
   const changed = deps.changed ?? (refusal ? [] : changedFilesSince(base, root));
   const lookup = deps.override !== void 0 ? { override: deps.override, refusals: [] } : !deps.changed && !refusal ? readOverride(base, root) : { override: null, refusals: [] };
-  const present = (path2) => exists((0, import_node_path30.join)(root, path2));
+  const present = (path2) => exists((0, import_node_path31.join)(root, path2));
   const removedByThisDiff = removedPaths(changed);
   const staleFindings = [];
   const unresolved = unresolvedProtectedEntries(policy, root, exists).filter((p) => !removedByThisDiff.has(p));
@@ -28191,7 +28255,7 @@ function runTestPolicy(root, deps = {}) {
 
 // src/project-info-sync.ts
 var import_node_fs34 = require("node:fs");
-var import_node_path31 = require("node:path");
+var import_node_path32 = require("node:path");
 var UPDATE_PROJECT_INFO = `mutation($projectId: ID!, $shortDescription: String!, $readme: String!) {
   updateProjectV2(input: { projectId: $projectId, shortDescription: $shortDescription, readme: $readme }) {
     projectV2 { id }
@@ -28236,7 +28300,7 @@ function sharedName(entries, fallback) {
 }
 function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   if (!project2.projectId) throw new Error(`org project sync-info: ${targetRepo2} registry META has no projectId`);
-  const readmePath = (0, import_node_path31.join)(repoRoot2, "README.md");
+  const readmePath = (0, import_node_path32.join)(repoRoot2, "README.md");
   if (!(0, import_node_fs34.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
   const entries = entriesFor(project2, projects);
   const memberRepos = [...new Set(entries.flatMap((entry) => entry.repos ?? []))].filter((repo) => /^[^/]+\/[^/]+$/.test(repo)).sort((a, b) => a.localeCompare(b));
@@ -28262,8 +28326,8 @@ function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   const targetBase = `https://github.com/${targetRepo2}`;
   const targetBranch = branchFor(targetRepo2, projects);
   const orgDocs = [
-    (0, import_node_fs34.existsSync)((0, import_node_path31.join)(repoRoot2, "docs", "org-readme.md")) ? `- [Org identity](${targetBase}/blob/${targetBranch}/docs/org-readme.md)` : "",
-    (0, import_node_fs34.existsSync)((0, import_node_path31.join)(repoRoot2, "docs", "org-architecture.md")) ? `- [Org architecture](${targetBase}/blob/${targetBranch}/docs/org-architecture.md)` : ""
+    (0, import_node_fs34.existsSync)((0, import_node_path32.join)(repoRoot2, "docs", "org-readme.md")) ? `- [Org identity](${targetBase}/blob/${targetBranch}/docs/org-readme.md)` : "",
+    (0, import_node_fs34.existsSync)((0, import_node_path32.join)(repoRoot2, "docs", "org-architecture.md")) ? `- [Org architecture](${targetBase}/blob/${targetBranch}/docs/org-architecture.md)` : ""
   ].filter(Boolean);
   if (orgDocs.length) lines.push("", "## Organisation docs", "", ...orgDocs);
   return { projectId: project2.projectId, projectName, targetRepo: targetRepo2, memberRepos, shortDescription, readme: `${lines.join("\n")}
@@ -29090,7 +29154,7 @@ function writeError(res) {
 
 // src/secrets-commands.ts
 var import_node_fs35 = require("node:fs");
-var import_node_path32 = require("node:path");
+var import_node_path33 = require("node:path");
 var import_node_os13 = require("node:os");
 
 // src/secrets-diff.ts
@@ -29193,11 +29257,11 @@ function collectMap(value, previous = []) {
   return [...previous, value];
 }
 async function decryptRailsCredentials(input) {
-  const appDir = (0, import_node_path32.resolve)(input.appDir ?? process.cwd());
+  const appDir = (0, import_node_path33.resolve)(input.appDir ?? process.cwd());
   const credentialsFile = input.credentialsFile ?? DEFAULT_RAILS_CREDENTIALS_FILE;
   const masterKeyFile = input.masterKeyFile ?? DEFAULT_RAILS_MASTER_KEY_FILE;
-  const credentialsPath = (0, import_node_path32.resolve)(appDir, credentialsFile);
-  const masterKeyPath = (0, import_node_path32.resolve)(appDir, masterKeyFile);
+  const credentialsPath = (0, import_node_path33.resolve)(appDir, credentialsFile);
+  const masterKeyPath = (0, import_node_path33.resolve)(appDir, masterKeyFile);
   const env = {
     ...process.env,
     MMI_RAILS_CREDENTIALS_FILE: credentialsPath,
@@ -29214,8 +29278,8 @@ async function decryptRailsCredentials(input) {
     'config = ActiveSupport::EncryptedConfiguration.new(config_path: config_path, key_path: key_path, env_key: "RAILS_MASTER_KEY", raise_if_missing_key: true)',
     "puts JSON.generate(config.config)"
   ].join("\n");
-  const scriptDir = (0, import_node_fs35.mkdtempSync)((0, import_node_path32.join)((0, import_node_os13.tmpdir)(), "mmi-rails-decrypt-"));
-  const scriptPath = (0, import_node_path32.join)(scriptDir, "decrypt.rb");
+  const scriptDir = (0, import_node_fs35.mkdtempSync)((0, import_node_path33.join)((0, import_node_os13.tmpdir)(), "mmi-rails-decrypt-"));
+  const scriptPath = (0, import_node_path33.join)(scriptDir, "decrypt.rb");
   (0, import_node_fs35.writeFileSync)(scriptPath, script, "utf8");
   try {
     const args = ["exec", "ruby", scriptPath];
@@ -29318,7 +29382,7 @@ function registerSecretsCommands(program3) {
     let body;
     if (o.file) {
       try {
-        body = (0, import_node_fs35.readFileSync)((0, import_node_path32.resolve)(o.file), "utf8");
+        body = (0, import_node_fs35.readFileSync)((0, import_node_path33.resolve)(o.file), "utf8");
       } catch (e) {
         return fail(`secrets org-catalog: cannot read --file ${o.file}: ${e.message}`);
       }
@@ -29423,7 +29487,7 @@ function registerSecretsCommands(program3) {
       {
         ...d,
         decryptRailsCredentials,
-        removeFile: (path2) => (0, import_node_fs35.unlinkSync)((0, import_node_path32.resolve)(o.appDir ?? process.cwd(), path2))
+        removeFile: (path2) => (0, import_node_fs35.unlinkSync)((0, import_node_path33.resolve)(o.appDir ?? process.cwd(), path2))
       },
       {
         repo: o.repo,
@@ -29877,8 +29941,8 @@ async function repoWorkflowEntries(client, repo) {
   for (const wf of workflowsList) {
     if (typeof wf?.path !== "string" || !wf.path) continue;
     if (!wf.path.startsWith(".github/workflows/")) continue;
-    const basename6 = wf.path.split("/").pop() ?? wf.path;
-    const name = `${repo}/${basename6.replace(/\.ya?ml$/, "")}`;
+    const basename8 = wf.path.split("/").pop() ?? wf.path;
+    const name = `${repo}/${basename8.replace(/\.ya?ml$/, "")}`;
     if (wf.state !== "active") {
       disabled.push(name);
       continue;
@@ -30150,7 +30214,7 @@ function registerSchedulesCommands(program3) {
 
 // src/schedules-lift-command.ts
 var import_promises7 = require("node:fs/promises");
-var import_node_path33 = require("node:path");
+var import_node_path34 = require("node:path");
 var DEFAULT_WORKFLOWS_DIR = ".github/workflows";
 var SCHEDULE_REPO_RE = /^[A-Za-z0-9_.-]+$/;
 var SchedulesLiftUsageError = class extends Error {
@@ -30177,7 +30241,7 @@ async function readWorkflowFiles(dir) {
   const files = [];
   for (const name of names.sort()) {
     if (!/\.ya?ml$/.test(name)) continue;
-    files.push({ path: `.github/workflows/${name}`, text: await (0, import_promises7.readFile)((0, import_node_path33.join)(dir, name), "utf8") });
+    files.push({ path: `.github/workflows/${name}`, text: await (0, import_promises7.readFile)((0, import_node_path34.join)(dir, name), "utf8") });
   }
   return files;
 }
@@ -30327,7 +30391,7 @@ function registerEdgeCommands(program3) {
 // src/bootstrap-commands.ts
 var import_node_fs37 = require("node:fs");
 var import_node_os14 = require("node:os");
-var import_node_path34 = require("node:path");
+var import_node_path35 = require("node:path");
 
 // src/bootstrap-drift.ts
 var import_node_crypto7 = require("node:crypto");
@@ -31369,7 +31433,7 @@ function registerBootstrapCommands(program3) {
     const readFile9 = (p) => (0, import_node_fs37.existsSync)(p) ? (0, import_node_fs37.readFileSync)(p, "utf8") : null;
     const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
     const putSeed = async (target, content, ref, sha) => {
-      const tmp = (0, import_node_path34.join)((0, import_node_os14.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
+      const tmp = (0, import_node_path35.join)((0, import_node_os14.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
       (0, import_node_fs37.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
       try {
         await gh(contentPutInputArgs(repo, target, tmp));
@@ -31780,7 +31844,7 @@ LIVE apply to ${repo}:
         } catch {
           existingSha = void 0;
         }
-        const tmp = (0, import_node_path34.join)((0, import_node_os14.tmpdir)(), `mmi-propagate-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
+        const tmp = (0, import_node_path35.join)((0, import_node_os14.tmpdir)(), `mmi-propagate-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
         (0, import_node_fs37.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, hubContent, branch, existingSha)), "utf8");
         try {
           await gh(contentPutInputArgs(rec.repo, seed.target, tmp));
@@ -31936,7 +32000,7 @@ Rollback: \`mmi-cli devops bootstrap rollback ${rec.repo} --target ${seed.target
       } catch {
         existingSha = void 0;
       }
-      const tmp = (0, import_node_path34.join)((0, import_node_os14.tmpdir)(), `mmi-rollback-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
+      const tmp = (0, import_node_path35.join)((0, import_node_os14.tmpdir)(), `mmi-rollback-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
       (0, import_node_fs37.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, preSeedContent, plan.branch, existingSha)), "utf8");
       try {
         await gh(contentPutInputArgs(repo, seed.target, tmp));
@@ -31965,11 +32029,11 @@ Rollback: \`mmi-cli devops bootstrap rollback ${rec.repo} --target ${seed.target
 
 // src/stage-commands.ts
 var import_node_fs39 = require("node:fs");
-var import_node_path36 = require("node:path");
+var import_node_path37 = require("node:path");
 
 // src/port-registry.ts
 var import_node_fs38 = require("node:fs");
-var import_node_path35 = require("node:path");
+var import_node_path36 = require("node:path");
 
 // ../infra/port-geometry.mjs
 var PORT_BLOCK = 100;
@@ -32022,22 +32086,22 @@ function existingPortRange(repo, registry2) {
   return registry2[repo] ?? null;
 }
 function portRangeInfraAt(root, source) {
-  const registryPath = (0, import_node_path35.join)(root, "infra", "port-ranges.json");
-  const ddbScriptPath = (0, import_node_path35.join)(root, "infra", "port-ddb.mjs");
+  const registryPath = (0, import_node_path36.join)(root, "infra", "port-ranges.json");
+  const ddbScriptPath = (0, import_node_path36.join)(root, "infra", "port-ddb.mjs");
   if (!(0, import_node_fs38.existsSync)(registryPath) || !(0, import_node_fs38.existsSync)(ddbScriptPath)) return null;
   return { root, source, registryPath, ddbScriptPath };
 }
 function resolvePortRangeInfra(cwd, packageDir) {
   const direct = portRangeInfraAt(cwd, "cwd");
   if (direct) return direct;
-  for (let dir = cwd; ; dir = (0, import_node_path35.dirname)(dir)) {
-    const sibling = portRangeInfraAt((0, import_node_path35.join)(dir, "MMI-Hub"), "sibling-hub");
+  for (let dir = cwd; ; dir = (0, import_node_path36.dirname)(dir)) {
+    const sibling = portRangeInfraAt((0, import_node_path36.join)(dir, "MMI-Hub"), "sibling-hub");
     if (sibling) return sibling;
-    const parent = (0, import_node_path35.dirname)(dir);
+    const parent = (0, import_node_path36.dirname)(dir);
     if (parent === dir) break;
   }
   if (packageDir) {
-    const pkgRoot = (0, import_node_path35.join)(packageDir, "..", "..");
+    const pkgRoot = (0, import_node_path36.join)(packageDir, "..", "..");
     const pkgFrom = portRangeInfraAt(pkgRoot, "pkg-root");
     if (pkgFrom) return pkgFrom;
   }
@@ -32231,8 +32295,8 @@ function registerStageCommands(program3) {
     const portRange = portRangeMeta && typeof portRangeMeta.start === "number" && typeof portRangeMeta.end === "number" ? [portRangeMeta.start, portRangeMeta.end] : void 0;
     return decideStage({
       registry: { deployModel: project2?.deployModel, portRange, error: read.ok ? void 0 : read.error },
-      hasCompose: (0, import_node_fs39.existsSync)((0, import_node_path36.join)(process.cwd(), "docker-compose.yml")),
-      hasEnvExample: (0, import_node_fs39.existsSync)((0, import_node_path36.join)(process.cwd(), ".env.example"))
+      hasCompose: (0, import_node_fs39.existsSync)((0, import_node_path37.join)(process.cwd(), "docker-compose.yml")),
+      hasEnvExample: (0, import_node_fs39.existsSync)((0, import_node_path37.join)(process.cwd(), ".env.example"))
     });
   }
   async function fetchStageVaultEnvMerge() {
@@ -32503,8 +32567,7 @@ function registerBoardCommands(program3) {
         repo: o.repo,
         includeBundleDetails: o.bundleDetails,
         includeAllBodies: o.bodies,
-        allowPartial: o.allowPartial,
-        live: o.live
+        allowPartial: o.allowPartial
       });
       console.log(o.json ? JSON.stringify(report) : renderBoardReport(report));
     } catch (e) {
@@ -32515,7 +32578,7 @@ function registerBoardCommands(program3) {
     return alreadyClaimed ? `Check ${ref}: claimed and In Progress, no live contest - claim would renew the lease (nothing written)` : `Check ${ref}: free - claim would proceed (nothing written)`;
   }
   const board = program3.command("board").description("read, claim, show, and move Project v2 work items for the current repo");
-  board.command("read", { isDefault: true }).description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").option("--live", "bypass the projection and read the authoritative GitHub Project v2 board").addHelpText("after", "\nBy default, read uses the explicitly-stale Hub projection and prints its watermark. --live is authoritative.\n--allow-partial applies to the live paginated path and detail reads; the projection row itself is atomic.\n").action((o) => runBoardRead(o));
+  board.command("read", { isDefault: true }).description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").addHelpText("after", "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--allow-partial applies to the paginated path and detail reads.\n").action((o) => runBoardRead(o));
   withExamples(mutating(
     board.command("claim <issues...>").description("claim issues: assign them and move their Project v2 Status to In Progress \u2014 idempotent, so an item already yours and In Progress succeeds unchanged (one or more refs)").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--for <login>", "assign to this login instead of @me \u2014 agent claims on behalf of the master").option("--force", "take an item already claimed by another lane that shows live evidence of active work (#3727)").option("--check", "read-only: run every claim gate and report the verdict, writing nothing \u2014 exits 1 with the same refusal a real claim would raise (#4511)").option("--allow-partial", "return success JSON if assignment succeeds but the status move fails"),
     (_opts, args) => ({ command: "board claim", issues: args[0] ?? [] })
@@ -32726,7 +32789,7 @@ function registerBoardCommands(program3) {
 // src/merge-cleanup.ts
 var import_node_fs40 = require("node:fs");
 var import_promises9 = require("node:fs/promises");
-var import_node_path38 = require("node:path");
+var import_node_path39 = require("node:path");
 var import_node_os15 = require("node:os");
 var import_node_child_process18 = require("node:child_process");
 
@@ -32814,7 +32877,7 @@ function boardAdvanceFailureMessage(result) {
 
 // src/deferred-registry-store.ts
 var import_promises8 = require("node:fs/promises");
-var import_node_path37 = require("node:path");
+var import_node_path38 = require("node:path");
 var sleep2 = (ms) => new Promise((resolve6) => setTimeout(resolve6, ms));
 async function atomicWrite(target, contents) {
   const tmp = `${target}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
@@ -32865,12 +32928,12 @@ function makeDeferredWorktreeStore(registryPath, lockOpts = {}) {
     },
     // Standalone atomic write — THROWS on failure (no best-effort swallow, #2846).
     write: async (entries) => {
-      await (0, import_promises8.mkdir)((0, import_node_path37.dirname)(registryPath), { recursive: true });
+      await (0, import_promises8.mkdir)((0, import_node_path38.dirname)(registryPath), { recursive: true });
       await atomicWrite(registryPath, serializeDeferredWorktrees(entries));
     },
     // Serialized read-modify-write under the repo-wide lock (#2846).
     update: async (mutate) => {
-      await (0, import_promises8.mkdir)((0, import_node_path37.dirname)(registryPath), { recursive: true });
+      await (0, import_promises8.mkdir)((0, import_node_path38.dirname)(registryPath), { recursive: true });
       const deadline = Date.now() + opts.maxWaitMs;
       for (; ; ) {
         const guard = await acquireLock(lockPath, opts, deadline);
@@ -33034,6 +33097,23 @@ ${err.stderr ?? ""}`;
     return { step, status: `failed: ${msg}` };
   }
 }
+async function bestEffortCloseMissingWorktreeLeases(leaseDir = (0, import_node_path39.join)((0, import_node_os15.homedir)(), ".jerv", "leases"), exists = import_node_fs40.existsSync) {
+  let names = [];
+  try {
+    names = (0, import_node_fs40.readdirSync)(leaseDir);
+  } catch {
+    return;
+  }
+  for (const name of names) {
+    if (!name.endsWith(".json")) continue;
+    try {
+      const rec = JSON.parse((0, import_node_fs40.readFileSync)((0, import_node_path39.join)(leaseDir, name), "utf8"));
+      if (rec.kind !== "worktree" || rec.state === "closed" || typeof rec.ref !== "string" || !rec.ref.trim()) continue;
+      if (!exists(rec.ref)) await bestEffortLeaseClose(rec.ref);
+    } catch {
+    }
+  }
+}
 async function applyGcPlan(plan, remote, opts = {}) {
   const result = { removedBranches: [], removedRemoteBranches: [], removedTrackingRefs: [], removedWorktreeDirs: [], refused: [], failed: [], pruned: false };
   const beforeWorktrees = parseWorktreePorcelain(
@@ -33041,7 +33121,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
   );
   const repoRoot2 = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path38.dirname)((0, import_node_path38.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path39.dirname)((0, import_node_path39.dirname)(worktreeGitRoot)) : repoRoot2;
   const gcActor = describeActor({ env: process.env, surface: detectSurface(process.env), cwd: process.cwd() });
   const owners = readWorktreeOwners(primaryRepoRoot);
   const removalNow = Date.now();
@@ -33050,7 +33130,9 @@ async function applyGcPlan(plan, remote, opts = {}) {
   const activeWorkspaceDeferred = [];
   const refusesRemoval = (path2, branch) => {
     if (!path2) return false;
-    const activeGuard = decideActiveWorkspaceGuard(path2, activeWorkspaceRoot);
+    const activeGuard = decideActiveWorkspaceGuard(path2, activeWorkspaceRoot, process.platform, {
+      cursorAgentHost: isCursorAgentHost()
+    });
     if (activeGuard.action === "refuse") {
       result.refused.push(activeGuard.message);
       const owner2 = findWorktreeOwner(owners, path2);
@@ -33129,7 +33211,8 @@ async function applyGcPlan(plan, remote, opts = {}) {
   const removeDeps = worktreeRemoveDeps(async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout);
   const cleanupRoots = [
     opts.root ? resolveExplicitScanRoot(opts.root, primaryRepoRoot) : siblingMmiWorktreesRoot(primaryRepoRoot),
-    agentWorktreesRoot(primaryRepoRoot)
+    agentWorktreesRoot(primaryRepoRoot),
+    ...helperWorktreeRoots(primaryRepoRoot)
   ];
   for (const wt of worktreeDirsToRemove) {
     const owner = findWorktreeOwner(owners, wt.path);
@@ -33181,12 +33264,27 @@ async function applyGcPlan(plan, remote, opts = {}) {
       }
     }
   }
+  for (const head of plan.reapOriginHeads ?? []) {
+    try {
+      await execFileP2("git", ["push", remote, "--delete", head.branch], { timeout: GIT_TIMEOUT_MS });
+      result.removedRemoteBranches.push(head.branch);
+    } catch (e) {
+      const detail = `${e.message}
+${e.stderr ?? ""}`;
+      if (/not found|does not exist|unable to delete|remote ref does not exist/i.test(detail)) {
+        result.removedRemoteBranches.push(head.branch);
+      } else {
+        result.failed.push(`${head.branch}: origin delete failed (${e.message.split("\n")[0]})`);
+      }
+    }
+  }
   try {
     await execFileP2("git", ["worktree", "prune"], { timeout: GIT_TIMEOUT_MS });
     result.pruned = true;
   } catch (e) {
     result.failed.push(`worktree prune: ${e.message.split("\n")[0]}`);
   }
+  await bestEffortCloseMissingWorktreeLeases();
   return result;
 }
 async function pollGhPrChecks(prNumber, repoArgs) {
@@ -33223,8 +33321,8 @@ async function composeOverrideBodyFile(prNumber, repoArgs, gh) {
     const commits = JSON.parse(raw).commits ?? [];
     const body = squashBodyWithOverride(commits.map((c) => ({ headline: c.messageHeadline ?? "", body: c.messageBody ?? "" })), process.cwd());
     if (!body) return void 0;
-    const dir = (0, import_node_fs40.mkdtempSync)((0, import_node_path38.join)((0, import_node_os15.tmpdir)(), "mmi-squash-body-"));
-    const path2 = (0, import_node_path38.join)(dir, "body.txt");
+    const dir = (0, import_node_fs40.mkdtempSync)((0, import_node_path39.join)((0, import_node_os15.tmpdir)(), "mmi-squash-body-"));
+    const path2 = (0, import_node_path39.join)(dir, "body.txt");
     (0, import_node_fs40.writeFileSync)(path2, `${body}
 `, "utf8");
     return { path: path2, cleanup: () => {
@@ -33349,15 +33447,16 @@ async function createDeferredWorktreeStore() {
 }
 var realWorktreeDirRemover = {
   probe: (p) => {
+    const target = win32LongPath(p);
     let st;
     try {
-      st = (0, import_node_fs40.lstatSync)(p);
+      st = (0, import_node_fs40.lstatSync)(target);
     } catch {
       return null;
     }
     if (st.isSymbolicLink()) return "link";
     try {
-      (0, import_node_fs40.readlinkSync)(p);
+      (0, import_node_fs40.readlinkSync)(target);
       return "link";
     } catch {
     }
@@ -33365,7 +33464,7 @@ var realWorktreeDirRemover = {
   },
   readdir: (p) => {
     try {
-      return (0, import_node_fs40.readdirSync)(p);
+      return (0, import_node_fs40.readdirSync)(win32LongPath(p));
     } catch {
       return [];
     }
@@ -33373,13 +33472,16 @@ var realWorktreeDirRemover = {
   // A directory reparse point (junction / dir-symlink) is detached with rmdir (unlinks the mount point,
   // leaving the target); a file symlink with unlink. rmdir first, fall back to unlink.
   detachLink: (p) => {
+    const target = win32LongPath(p);
     try {
-      (0, import_node_fs40.rmdirSync)(p);
+      (0, import_node_fs40.rmdirSync)(target);
     } catch {
-      (0, import_node_fs40.unlinkSync)(p);
+      (0, import_node_fs40.unlinkSync)(target);
     }
   },
-  removeTree: (p) => (0, import_promises9.rm)(p, { recursive: true, force: true, maxRetries: 5, retryDelay: 200 })
+  // #4904: Windows MAX_PATH aborts git worktree remove; the fallback must use \\?\ so the dir
+  // (and its lease) do not survive as an unregistered leftover.
+  removeTree: (p) => (0, import_promises9.rm)(win32LongPath(p), { recursive: true, force: true, maxRetries: 5, retryDelay: 200 })
 };
 async function resolvePrimaryCheckout(execGit) {
   try {
@@ -33850,12 +33952,13 @@ async function checkDocsIndexAtHead(opts, deps) {
 // src/worktree-lifecycle-commands.ts
 var import_node_fs42 = require("node:fs");
 var import_promises10 = require("node:fs/promises");
-var import_node_path40 = require("node:path");
+var import_node_os16 = require("node:os");
+var import_node_path41 = require("node:path");
 
 // src/worktree-install-cache.ts
 var import_node_crypto8 = require("node:crypto");
 var import_node_fs41 = require("node:fs");
-var import_node_path39 = require("node:path");
+var import_node_path40 = require("node:path");
 var CACHE_DIR = "worktree-install-cache";
 var MANIFEST = "manifest.json";
 var NODE_MODULES2 = "node_modules";
@@ -33885,7 +33988,7 @@ function hashLockfileBytes(contents) {
 }
 function resolveWorktreeInstallLockfile(packageDir, fs2 = realWorktreeInstallCacheFs) {
   for (const name of LOCKFILE_NAMES) {
-    const path2 = (0, import_node_path39.join)(packageDir, name);
+    const path2 = (0, import_node_path40.join)(packageDir, name);
     if (!fs2.exists(path2)) continue;
     try {
       const hash = hashLockfileBytes(fs2.readFile(path2));
@@ -33900,8 +34003,8 @@ function worktreeInstallCacheEntry(primaryRoot, lockfileHash) {
   const root = repoRuntimeStatePath(primaryRoot, CACHE_DIR, lockfileHash);
   return {
     root,
-    manifestPath: (0, import_node_path39.join)(root, MANIFEST),
-    nodeModulesPath: (0, import_node_path39.join)(root, NODE_MODULES2)
+    manifestPath: (0, import_node_path40.join)(root, MANIFEST),
+    nodeModulesPath: (0, import_node_path40.join)(root, NODE_MODULES2)
   };
 }
 function readWorktreeInstallCacheManifest(manifestPath, fs2 = realWorktreeInstallCacheFs) {
@@ -33941,7 +34044,7 @@ function invalidateWorktreeInstallCacheEntry(entry, fs2 = realWorktreeInstallCac
   }
 }
 function removeMaterializedTree(packageDir, fs2) {
-  const dest = (0, import_node_path39.join)(packageDir, NODE_MODULES2);
+  const dest = (0, import_node_path40.join)(packageDir, NODE_MODULES2);
   if (!fs2.exists(dest)) return;
   fs2.rm(dest);
   if (fs2.exists(dest)) {
@@ -33949,7 +34052,7 @@ function removeMaterializedTree(packageDir, fs2) {
   }
 }
 function materializeCachedNodeModules(entry, destPackageDir, fs2 = realWorktreeInstallCacheFs) {
-  const dest = (0, import_node_path39.join)(destPackageDir, NODE_MODULES2);
+  const dest = (0, import_node_path40.join)(destPackageDir, NODE_MODULES2);
   try {
     if (fs2.exists(dest)) fs2.rm(dest);
     fs2.mkdirp(destPackageDir);
@@ -33964,7 +34067,7 @@ function materializeCachedNodeModules(entry, destPackageDir, fs2 = realWorktreeI
   }
 }
 async function storeWorktreeInstallCacheEntry(primaryRoot, lockfile3, command, sourcePackageDir, fs2 = realWorktreeInstallCacheFs, now = Date.now()) {
-  const source = (0, import_node_path39.join)(sourcePackageDir, NODE_MODULES2);
+  const source = (0, import_node_path40.join)(sourcePackageDir, NODE_MODULES2);
   if (!isMaterializableNodeModulesDir(source, fs2)) return;
   const entry = worktreeInstallCacheEntry(primaryRoot, lockfile3.hash);
   const manifest = {
@@ -34219,12 +34322,36 @@ function classifyStaleLeaks(input) {
       remediation: "mmi-cli worktree gc --apply"
     });
   }
+  for (const leftover of input.originLeftovers ?? []) {
+    leaks.push({
+      kind: "origin-leftover",
+      ref: leftover.branch,
+      detail: leftover.detail,
+      remediation: leftover.autoReap ? "mmi-cli worktree gc --apply  (conservative merged-head reap)" : leftover.kind === "open-pr" ? "leave open \u2014 gc will not delete an open PR head" : "mmi-cli worktree gc --apply --train-only  (explicit; will not silently delete every non-train branch)"
+    });
+  }
+  for (const helper of input.helperWorktrees ?? []) {
+    leaks.push({
+      kind: "helper-worktree",
+      ref: helper.path,
+      detail: helper.detail,
+      remediation: helper.reapable ? "mmi-cli worktree gc --apply" : "inspect / git -C <primary> worktree remove --force after the helper is abandoned"
+    });
+  }
+  for (const ref of input.missingLeaseRefs ?? []) {
+    leaks.push({
+      kind: "missing-lease",
+      ref,
+      detail: `jerv worktree lease still active but path is gone`,
+      remediation: "mmi-cli worktree gc --apply  (closes the lease; JPT #5548 also reaps on sweep)"
+    });
+  }
   return leaks;
 }
 var defaultOrphanDirScanDeps = {
   listDirs: (root) => {
     try {
-      return (0, import_node_fs42.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path40.join)(root, e.name));
+      return (0, import_node_fs42.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path41.join)(root, e.name));
     } catch {
       return [];
     }
@@ -34239,8 +34366,12 @@ function scanOrphanDirs(worktreesRoot, worktreeGitRoot, deps = defaultOrphanDirS
   }
   return candidates;
 }
-function formatStaleLeaks(leaks, prLookupFailures = []) {
-  const lines = leaks.length ? [`worktree list --stale: ${leaks.length} leak(s)`] : ["worktree list --stale: no leaks found"];
+function formatStaleLeaks(leaks, prLookupFailures = [], audit) {
+  const blocked = Boolean(audit?.blocksGreen);
+  const lines = leaks.length ? [`worktree list --stale: ${leaks.length} leak(s)`] : blocked ? ["worktree list --stale: incomplete \u2014 refusing a clean report"] : ["worktree list --stale: no leaks found"];
+  if (audit) {
+    for (const line of formatEstateAuditLines(audit)) lines.push(`  ${line}`);
+  }
   for (const leak of leaks) {
     lines.push(`  [${leak.kind}] ${leak.ref} \u2014 ${leak.detail}`);
     lines.push(`      fix: ${leak.remediation}`);
@@ -34390,13 +34521,13 @@ function registerWorktreeCommands(program3) {
       const detached = headBorn && !symbolicBranch;
       const branch = symbolicBranch || (detached ? "HEAD" : "");
       if (!wtPath || !branch) return fail("worktree land: not inside a git worktree");
-      const gitFile = (0, import_node_path40.join)(wtPath, ".git");
+      const gitFile = (0, import_node_path41.join)(wtPath, ".git");
       const isLinked = (0, import_node_fs42.existsSync)(gitFile) && (0, import_node_fs42.statSync)(gitFile).isFile();
       if (apply && !isLinked) {
         return fail("worktree land: run from inside the linked worktree you want to land (this is the primary checkout)");
       }
       const commonDir = (await execFileP2("git", ["rev-parse", "--git-common-dir"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim();
-      const primaryCheckout = commonDir ? (0, import_node_path40.dirname)(commonDir) : wtPath;
+      const primaryCheckout = commonDir ? (0, import_node_path41.dirname)(commonDir) : wtPath;
       const localBranchNames = await execFileP2("git", ["-C", primaryCheckout, "for-each-ref", "--format=%(refname:short)", "refs/heads"], { timeout: GIT_TIMEOUT_MS }).then(({ stdout }) => new Set((stdout || "").split("\n").map((l) => l.trim()).filter(Boolean))).catch(() => void 0);
       const orphan = classifyOrphanedWorktree({
         branch,
@@ -34460,7 +34591,9 @@ function registerWorktreeCommands(program3) {
       const reportedMergeState = treeOnly ? "not-checked" : mergeVerdict.state;
       const landOwner = lookupWorktreeOwner(primaryCheckout, wtPath);
       const activeWorkspaceRoot = resolveActiveWorkspaceRoot();
-      const activeGuard = decideActiveWorkspaceGuard(wtPath, activeWorkspaceRoot);
+      const activeGuard = decideActiveWorkspaceGuard(wtPath, activeWorkspaceRoot, process.platform, {
+        cursorAgentHost: isCursorAgentHost()
+      });
       if (activeGuard.action === "refuse") {
         const deferredStore = await createDeferredWorktreeStore();
         if (deferredStore) {
@@ -34536,6 +34669,9 @@ function registerWorktreeCommands(program3) {
         step: "remove worktree",
         status: removeOutcome.status === "removed" ? removeOutcome.recovery ? `done (${removeOutcome.recovery})` : "done" : removeOutcome.remainsOnDisk ? `failed: ${removeOutcome.error ?? "lock held"} \u2014 the directory "${wtPath}" is still on disk; cd every shell out of it (a cwd inside holds it open on Windows), then delete that directory` : `failed: ${removeOutcome.error ?? "lock held"} \u2014 run: git -C "${primaryCheckout}" worktree remove --force "${wtPath}"`
       });
+      if (!removeOutcome.remainsOnDisk) {
+        report.push(await bestEffortLeaseClose(wtPath));
+      }
       if (!shouldContinueLandCleanup(removeOutcome.status)) {
         const result2 = {
           dryRun: false,
@@ -34620,8 +34756,17 @@ function registerWorktreeCommands(program3) {
       if (o.stale) {
         const leaks = classifyStaleLeaks(ctx);
         const failures = ctx.prLookupFailures ?? [];
-        if (o.json) return console.log(JSON.stringify({ stale: leaks, count: leaks.length, prLookupFailures: failures, complete: failures.length === 0 }, null, 2));
-        return console.log(formatStaleLeaks(leaks, failures));
+        const complete = failures.length === 0 && !ctx.audit?.blocksGreen;
+        if (o.json) {
+          return console.log(JSON.stringify({
+            stale: leaks,
+            count: leaks.length,
+            prLookupFailures: failures,
+            complete,
+            audit: ctx.audit
+          }, null, 2));
+        }
+        return console.log(formatStaleLeaks(leaks, failures, ctx.audit));
       }
       if (o.json) return console.log(JSON.stringify({ worktrees: ctx.worktrees }, null, 2));
       if (!ctx.worktrees.length) return console.log("worktree list: no worktrees");
@@ -34645,10 +34790,18 @@ async function gatherWorktreeContext() {
   const branchOut = (await execFileP2("git", ["branch", "--format=%(refname:short)"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
   const localBranches = branchOut.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
   const currentBranch2 = (await execFileP2("git", ["rev-parse", "--abbrev-ref", "HEAD"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || void 0;
-  const { prs, failures: prLookupFailures } = await resolveBranchPrs(localBranches.filter((b) => !PROTECTED_BRANCHES2.has(b)), STALE_PR_LOOKUP_LIMIT);
+  const remoteBranchOut = (await execFileP2("git", ["branch", "-r", "--format=%(refname:short)"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
+  const remoteBranches = remoteBranchOut.split(/\r?\n/).map((l) => l.trim()).filter((b) => b.startsWith("origin/") && b !== "origin/HEAD");
+  const remoteNames = remoteBranches.map((b) => b.replace(/^origin\//, ""));
+  const prTargets = [.../* @__PURE__ */ new Set([
+    ...localBranches.filter((b) => !PROTECTED_BRANCHES2.has(b)),
+    ...remoteNames.filter((b) => !PROTECTED_BRANCHES2.has(b))
+  ])];
+  const { prs, failures: prLookupFailures } = await resolveBranchPrs(prTargets, STALE_PR_LOOKUP_LIMIT);
   const openPrBranches = /* @__PURE__ */ new Set();
   const closedBranches = /* @__PURE__ */ new Set();
   const closedUnmergedBranches = /* @__PURE__ */ new Set();
+  const mergedPrBranches = /* @__PURE__ */ new Set();
   const byBranch = /* @__PURE__ */ new Map();
   for (const pr2 of prs) {
     const arr = byBranch.get(pr2.headRefName) ?? [];
@@ -34659,6 +34812,7 @@ async function gatherWorktreeContext() {
     if (states.some((s) => s === "OPEN")) openPrBranches.add(br);
     else if (states.some((s) => s === "MERGED" || s === "CLOSED")) {
       closedBranches.add(br);
+      if (states.some((s) => s === "MERGED")) mergedPrBranches.add(br);
       if (!states.some((s) => s === "MERGED") && states.some((s) => s === "CLOSED")) {
         closedUnmergedBranches.add(br);
       }
@@ -34670,7 +34824,7 @@ async function gatherWorktreeContext() {
     if (s) stages.push({ path: wt.path, port: s.port });
   }
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path40.dirname)((0, import_node_path40.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path41.dirname)((0, import_node_path41.dirname)(worktreeGitRoot)) : repoRoot2;
   const wtRoot = siblingMmiWorktreesRoot(primaryRepoRoot);
   let orphanDirs = [];
   if ((0, import_node_fs42.existsSync)(wtRoot)) {
@@ -34679,6 +34833,44 @@ async function gatherWorktreeContext() {
       listDirs: (root) => worktreeScanDirs(root, primaryRepoRoot, defaultOrphanDirScanDeps.listDirs, isRepoCheckoutDir)
     });
   }
+  const repoContainer = worktreesRootOf(primaryRepoRoot);
+  if ((0, import_node_fs42.existsSync)(repoContainer)) {
+    for (const dir of defaultOrphanDirScanDeps.listDirs(repoContainer)) {
+      if (orphanDirs.some((o) => o.path === dir)) continue;
+      const inspected = inspectSiblingWorktreeDir(dir, worktreeGitRoot);
+      const classified = classifySiblingWorktreeDir(inspected);
+      if (classified.cleanup) {
+        orphanDirs.push({ path: dir, reason: classified.cleanup.reason });
+        continue;
+      }
+      if (inspected.gitType === "missing" && pathProvesRepoContainerOwnership(dir, repoContainer)) {
+        orphanDirs.push({ path: dir, reason: "orphaned-folder" });
+      }
+    }
+  }
+  const originLeftovers = classifyOriginLeftovers({
+    remoteBranches,
+    localBranches,
+    protectedBranches: PROTECTED_BRANCHES2,
+    openPrBranches,
+    mergedPrBranches,
+    closedUnmergedBranches
+  });
+  const helperWorktrees = scanHelperWorktrees(primaryRepoRoot, worktreeGitRoot);
+  const leaseRefs = readJervWorktreeLeaseRefs();
+  const missingLeaseRefs = leaseRefs.filter((ref) => !(0, import_node_fs42.existsSync)(ref));
+  const remoteUrls = await gitRemoteUrls();
+  const otherCheckouts = discoverOtherPrimaries(primaryRepoRoot).map((path2) => ({
+    path: path2,
+    remoteUrls: gitConfigRemoteUrls(path2)
+  }));
+  const audit = classifyEstateAudit({
+    auditedClone: primaryRepoRoot,
+    remoteUrls,
+    otherCheckouts,
+    leaseRefs,
+    thisWorktreesRoot: repoContainer
+  });
   return {
     worktrees,
     localBranches,
@@ -34688,9 +34880,96 @@ async function gatherWorktreeContext() {
     closedUnmergedBranches,
     stages,
     orphanDirs,
-    prLookupFailures
+    prLookupFailures,
+    originLeftovers,
+    helperWorktrees,
+    missingLeaseRefs,
+    audit
   };
 }
+function gitConfigRemoteUrls(checkout) {
+  const gitPath = (0, import_node_path41.join)(checkout, ".git");
+  let configPath = (0, import_node_path41.join)(checkout, ".git", "config");
+  try {
+    const st = (0, import_node_fs42.statSync)(gitPath);
+    if (st.isFile()) return [];
+  } catch {
+    return [];
+  }
+  try {
+    const text = (0, import_node_fs42.readFileSync)(configPath, "utf8");
+    return [...text.matchAll(/^\s*url\s*=\s*(.+)$/gm)].map((m) => m[1].trim());
+  } catch {
+    return [];
+  }
+}
+async function gitRemoteUrls() {
+  const out = (await execFileP2("git", ["remote", "-v"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
+  return [...new Set(
+    out.split(/\r?\n/).map((line) => line.trim().split(/\s+/)[1]).filter((url) => Boolean(url))
+  )];
+}
+function discoverOtherPrimaries(primaryRepoRoot) {
+  const found = /* @__PURE__ */ new Set();
+  const parent = (0, import_node_path41.dirname)(primaryRepoRoot);
+  try {
+    for (const name of (0, import_node_fs42.readdirSync)(parent)) {
+      const path2 = (0, import_node_path41.join)(parent, name);
+      if (path2 === primaryRepoRoot) continue;
+      if ((0, import_node_fs42.existsSync)((0, import_node_path41.join)(path2, ".git"))) found.add(path2);
+    }
+  } catch {
+  }
+  const mirror = (0, import_node_path41.join)((0, import_node_os16.homedir)(), "Projects", (0, import_node_path41.basename)(primaryRepoRoot));
+  if (mirror !== primaryRepoRoot && (0, import_node_fs42.existsSync)((0, import_node_path41.join)(mirror, ".git"))) found.add(mirror);
+  return [...found];
+}
+function readJervWorktreeLeaseRefs(leaseDir = (0, import_node_path41.join)((0, import_node_os16.homedir)(), ".jerv", "leases")) {
+  try {
+    const refs = [];
+    for (const name of (0, import_node_fs42.readdirSync)(leaseDir)) {
+      if (!name.endsWith(".json")) continue;
+      try {
+        const rec = JSON.parse((0, import_node_fs42.readFileSync)((0, import_node_path41.join)(leaseDir, name), "utf8"));
+        if (rec.kind === "worktree" && rec.state !== "closed" && typeof rec.ref === "string" && rec.ref.trim()) {
+          refs.push(rec.ref);
+        }
+      } catch {
+      }
+    }
+    return refs;
+  } catch {
+    return [];
+  }
+}
+function scanHelperWorktrees(thisPrimary, thisWorktreeGitRoot) {
+  const primaries = [thisPrimary, ...discoverOtherPrimaries(thisPrimary)];
+  const out = [];
+  for (const primary of primaries) {
+    const gitRoot = primary === thisPrimary ? thisWorktreeGitRoot : (0, import_node_path41.join)(primary, ".git", "worktrees");
+    for (const root of helperWorktreeRoots(primary)) {
+      if (!(0, import_node_fs42.existsSync)(root)) continue;
+      for (const dir of defaultOrphanDirScanDeps.listDirs(root)) {
+        const inspected = inspectSiblingWorktreeDir(dir, gitRoot);
+        const classified = classifySiblingWorktreeDir(inspected);
+        if (classified.cleanup) {
+          out.push({
+            path: dir,
+            detail: `${classified.cleanup.reason} helper worktree under ${root}`,
+            reapable: true
+          });
+        } else {
+          out.push({
+            path: dir,
+            detail: `helper worktree outside ../mmi-worktrees (${classified.skip?.reason ?? inspected.gitType}) at ${dir}`,
+            reapable: false
+          });
+        }
+      }
+    }
+  }
+  return out;
+}
 async function bestEffortGit(args, cwd, step, timeoutMs = GIT_TIMEOUT_MS) {
   try {
     const fullArgs = cwd ? ["-C", cwd, ...args] : args;
@@ -35408,7 +35687,7 @@ ${lines}`, {
 
 // src/train-commands.ts
 var import_node_fs44 = require("node:fs");
-var import_node_path41 = require("node:path");
+var import_node_path42 = require("node:path");
 var RELEASE_BUMP_INTENTS = ["major", "minor", "patch"];
 function resolveReleaseBumpIntent(raw) {
   const intent = typeof raw === "string" ? raw.trim() : "";
@@ -35419,7 +35698,7 @@ function resolveReleaseBumpIntent(raw) {
 }
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs44.readFileSync)((0, import_node_path41.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs44.readFileSync)((0, import_node_path42.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -35577,8 +35856,8 @@ function registerDeployCommands(program3) {
 
 // src/discovery-commands.ts
 var import_node_fs45 = require("node:fs");
-var import_node_os16 = require("node:os");
-var import_node_path42 = require("node:path");
+var import_node_os17 = require("node:os");
+var import_node_path43 = require("node:path");
 var GC_GH_TIMEOUT_MS3 = 2e4;
 async function collectStatus() {
   const repo = await resolveRepo();
@@ -35766,10 +36045,10 @@ async function collectOnboardStatus(opts = {}) {
     else if (top) nextCommand = `mmi-cli oracle board claim ${top.number}  # ${top.title}`;
     else nextCommand = "mmi-cli oracle board read \u2014 no claimable items found";
   }
-  const home = (0, import_node_os16.homedir)();
+  const home = (0, import_node_os17.homedir)();
   const plugin = onboardPluginGate({
-    readKnown: () => readFileSyncSafe((0, import_node_path42.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs45.readFileSync),
-    readSettings: () => readFileSyncSafe((0, import_node_path42.join)(home, ".claude", "settings.json"), import_node_fs45.readFileSync)
+    readKnown: () => readFileSyncSafe((0, import_node_path43.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs45.readFileSync),
+    readSettings: () => readFileSyncSafe((0, import_node_path43.join)(home, ".claude", "settings.json"), import_node_fs45.readFileSync)
   });
   return { track, board, registry: registry2, secrets, plugin, estateCli, doors: opts.doors ?? [], nextCommand };
 }
@@ -36905,18 +37184,18 @@ function registerOrgHealthQuery(program3, deps = defaultOrgHealthQueryDeps()) {
 
 // src/plugin-release-catchup.ts
 var import_node_fs46 = require("node:fs");
-var import_node_path43 = require("node:path");
-var import_node_os17 = require("node:os");
+var import_node_path44 = require("node:path");
+var import_node_os18 = require("node:os");
 var RELEASE_CATCHUP_TTL_MS = 24 * 60 * 60 * 1e3;
 var RELEASE_CATCHUP_DISABLE_ENV = "MMI_NO_RELEASE_CATCHUP";
 function releaseCatchupStatePath(env = process.env) {
   if (env.MMI_RELEASE_CATCHUP_STATE) return env.MMI_RELEASE_CATCHUP_STATE;
   if (process.platform === "win32") {
-    const base2 = env.LOCALAPPDATA || (0, import_node_path43.join)((0, import_node_os17.homedir)(), "AppData", "Local");
-    return (0, import_node_path43.join)(base2, "MMI Future", "mmi-cli", "release-catchup.json");
+    const base2 = env.LOCALAPPDATA || (0, import_node_path44.join)((0, import_node_os18.homedir)(), "AppData", "Local");
+    return (0, import_node_path44.join)(base2, "MMI Future", "mmi-cli", "release-catchup.json");
   }
-  const base = env.XDG_STATE_HOME || (0, import_node_path43.join)((0, import_node_os17.homedir)(), ".local", "state");
-  return (0, import_node_path43.join)(base, "mmi-cli", "release-catchup.json");
+  const base = env.XDG_STATE_HOME || (0, import_node_path44.join)((0, import_node_os18.homedir)(), ".local", "state");
+  return (0, import_node_path44.join)(base, "mmi-cli", "release-catchup.json");
 }
 function releaseCatchupDue(state, now, force = false) {
   if (force) return true;
@@ -36934,15 +37213,15 @@ function newestCachedPluginVersion(home) {
 }
 function marketplaceClonePath(home) {
   try {
-    const parsed = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path43.join)(home, ".claude", "plugins", "known_marketplaces.json"), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path44.join)(home, ".claude", "plugins", "known_marketplaces.json"), "utf8"));
     if (parsed.mutmutco?.installLocation) return parsed.mutmutco.installLocation;
   } catch {
   }
-  return (0, import_node_path43.join)(home, ".claude", "plugins", "marketplaces", "mutmutco");
+  return (0, import_node_path44.join)(home, ".claude", "plugins", "marketplaces", "mutmutco");
 }
 function readCatalogVersion(home) {
   try {
-    const parsed = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path43.join)(marketplaceClonePath(home), ".claude-plugin", "marketplace.json"), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path44.join)(marketplaceClonePath(home), ".claude-plugin", "marketplace.json"), "utf8"));
     return parsed.plugins?.find((p) => p.name === "mmi")?.version;
   } catch {
     return void 0;
@@ -36950,7 +37229,7 @@ function readCatalogVersion(home) {
 }
 function readMmiInstallRecord(home) {
   try {
-    const parsed = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path43.join)(home, ".claude", "plugins", "installed_plugins.json"), "utf8"));
+    const parsed = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path44.join)(home, ".claude", "plugins", "installed_plugins.json"), "utf8"));
     const record = parsed.plugins?.["mmi@mutmutco"]?.[0];
     return record?.version ? { version: record.version, gitCommitSha: record.gitCommitSha } : void 0;
   } catch {
@@ -37012,7 +37291,7 @@ async function runReleaseCatchup(home, env, deps, opts = {}) {
     return { ok: false, detail: `${cliUpdateDetail}; plugin install record could not be cleared (still ${prior.version})` };
   }
   const installed = await deps.runClaude(["plugin", "install", "mmi@mutmutco"], "claude plugin install mmi@mutmutco");
-  const payload = (0, import_node_path43.join)(pluginCacheRoot(home), latest, ".pi-plugin");
+  const payload = (0, import_node_path44.join)(pluginCacheRoot(home), latest, ".pi-plugin");
   if (!installed || !(0, import_node_fs46.existsSync)(payload)) {
     const why = installed ? `install of ${latest} did not produce a verifiable .pi-plugin payload` : `install of ${latest} failed`;
     if (!prior) return { ok: false, detail: `${cliUpdateDetail}; ${why}; no prior record to restore` };
@@ -38048,10 +38327,10 @@ function checkRepoWorktrees(probe) {
     ok: !(probe.isOrgRepo && probe.hasRepoLocalWorktrees),
     id: "repo-worktrees",
     label: "repo worktrees",
-    fix: "repo-local `.worktrees/` is not the canonical path \u2014 use `mmi-cli worktree create <branch>` (sibling `../worktrees/`), then remove the in-repo `.worktrees/`",
+    fix: "repo-local `.worktrees/` / `.claude/worktrees` are not the canonical path \u2014 use `mmi-cli worktree create <branch>` (sibling `../mmi-worktrees/<Repo>/`), then `mmi-cli worktree gc --apply` for abandoned helper trees",
     verbose: [
       `org repo: ${probe.isOrgRepo ? "yes" : "no"}`,
-      `repo-local .worktrees/: ${probe.hasRepoLocalWorktrees ? "present" : "absent"}`
+      `repo-local .worktrees/ or .claude/worktrees/: ${probe.hasRepoLocalWorktrees ? "present" : "absent"}`
     ]
   };
 }
@@ -39238,17 +39517,17 @@ function parseOriginRepo(remoteUrl) {
 }
 function ghHostsConfigPath(env, platform2) {
   const sep3 = platform2 === "win32" ? "\\" : "/";
-  const join40 = (...parts) => parts.join(sep3);
+  const join41 = (...parts) => parts.join(sep3);
   const explicit = env.GH_CONFIG_DIR?.trim();
-  if (explicit) return join40(explicit, "hosts.yml");
+  if (explicit) return join41(explicit, "hosts.yml");
   if (platform2 === "win32") {
     const appData = (env.AppData ?? env.APPDATA)?.trim();
-    return appData ? join40(appData, "GitHub CLI", "hosts.yml") : void 0;
+    return appData ? join41(appData, "GitHub CLI", "hosts.yml") : void 0;
   }
   const xdg = env.XDG_CONFIG_HOME?.trim();
-  if (xdg) return join40(xdg, "gh", "hosts.yml");
+  if (xdg) return join41(xdg, "gh", "hosts.yml");
   const home = env.HOME?.trim();
-  return home ? join40(home, ".config", "gh", "hosts.yml") : void 0;
+  return home ? join41(home, ".config", "gh", "hosts.yml") : void 0;
 }
 function parseGhHostsAccounts(yaml, host = "github.com") {
   let hostIndent = null;
@@ -39299,8 +39578,8 @@ function ghAccountCaveat(announcedLogin, accounts) {
 
 // src/doctor-io.ts
 var import_node_fs47 = require("node:fs");
-var import_node_os18 = require("node:os");
-var import_node_path44 = require("node:path");
+var import_node_os19 = require("node:os");
+var import_node_path45 = require("node:path");
 var import_node_child_process19 = require("node:child_process");
 var import_node_util8 = require("node:util");
 var execFileP6 = (0, import_node_util8.promisify)(import_node_child_process19.execFile);
@@ -39308,7 +39587,7 @@ var MMI_PLUGIN_ID2 = "mmi@mutmutco";
 function installedClaudePluginVersion() {
   try {
     const file = JSON.parse(
-      (0, import_node_fs47.readFileSync)((0, import_node_path44.join)((0, import_node_os18.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
+      (0, import_node_fs47.readFileSync)((0, import_node_path45.join)((0, import_node_os19.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
     );
     const versions = (file.plugins?.[MMI_PLUGIN_ID2] ?? []).map((r) => r.version).filter((v) => Boolean(v));
     if (versions.length === 0) return void 0;
@@ -39329,22 +39608,22 @@ function installedSurfacePluginVersion(surface) {
   const token = surfaceToken(surface);
   if (token === "kilo") {
     try {
-      const stamp = (0, import_node_fs47.readFileSync)((0, import_node_path44.join)((0, import_node_os18.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
+      const stamp = (0, import_node_fs47.readFileSync)((0, import_node_path45.join)((0, import_node_os19.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
       return stamp || void 0;
     } catch {
       return void 0;
     }
   }
   if (token === "cursor") {
-    return manifestVersion((0, import_node_path44.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
+    return manifestVersion((0, import_node_path45.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
   }
   if (token === "jervcode") {
     const entry = mmiPiWrapperEntry();
     if (!entry) return void 0;
-    return manifestVersion((0, import_node_path44.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
+    return manifestVersion((0, import_node_path45.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
   }
   if (token === "kimi") {
-    return manifestVersion((0, import_node_path44.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
+    return manifestVersion((0, import_node_path45.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
   }
   if (token === "claude") return installedClaudePluginVersion();
   if (token !== "codex") return void 0;
@@ -39382,7 +39661,7 @@ function worktreeRootSync() {
 }
 var gitignorePath = () => {
   const root = worktreeRootSync();
-  return root === null ? null : (0, import_node_path44.join)(root, ".gitignore");
+  return root === null ? null : (0, import_node_path45.join)(root, ".gitignore");
 };
 function readGitignore() {
   const path2 = gitignorePath();
@@ -39416,7 +39695,7 @@ async function repoRoot() {
 }
 function hasRepoLocalWorktrees() {
   const root = worktreeRootSync();
-  return root !== null && (0, import_node_fs47.existsSync)((0, import_node_path44.join)(root, ".worktrees"));
+  return root !== null && ((0, import_node_fs47.existsSync)((0, import_node_path45.join)(root, ".worktrees")) || (0, import_node_fs47.existsSync)((0, import_node_path45.join)(root, ".claude", "worktrees")));
 }
 
 // src/cross-repo-filing-issue.ts
@@ -39512,7 +39791,7 @@ function binaryOnPath(bin) {
   for (const dir of pathEnvEntries(process.env.PATH ?? "")) {
     for (const ext of exts) {
       try {
-        if ((0, import_node_fs48.existsSync)((0, import_node_path45.join)(dir, `${bin}${ext}`))) return true;
+        if ((0, import_node_fs48.existsSync)((0, import_node_path46.join)(dir, `${bin}${ext}`))) return true;
       } catch {
       }
     }
@@ -39543,12 +39822,12 @@ function ghMultiAccountCaveat(announcedLogin) {
 var ENV_HEAL_LOCK_STALE_MS = 10 * 6e4;
 var ENV_HEAL_LOCK_MAX_WAIT_MS = 2 * 6e4;
 function envHealLockPath(home) {
-  return (0, import_node_path45.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
+  return (0, import_node_path46.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
 }
 async function withEnvHealLock(what, run) {
   try {
     return await withFileLock(
-      envHealLockPath((0, import_node_os19.homedir)()),
+      envHealLockPath((0, import_node_os20.homedir)()),
       { staleMs: ENV_HEAL_LOCK_STALE_MS, maxWaitMs: ENV_HEAL_LOCK_MAX_WAIT_MS, label: "mmi env-heal lock" },
       run
     );
@@ -39645,7 +39924,7 @@ function mmiDoctorDeps(opts = {}) {
       const configRoot = surfaceConfigRoot(surface);
       const running = surface === "codex" ? installedActivePluginVersion(surface) : runningPluginVersion(process.env, resolveClientVersion());
       const plan = buildPluginCachePlan(
-        (0, import_node_os19.homedir)(),
+        (0, import_node_os20.homedir)(),
         running,
         pluginCacheFsDeps(configRoot, () => 0),
         { configRoot, includeStaging: surface !== "codex" }
@@ -39669,7 +39948,7 @@ function mmiDoctorDeps(opts = {}) {
       const running = surface === "codex" ? installedActivePluginVersion(surface) : runningPluginVersion(process.env, resolveClientVersion());
       const installed = installedActivePluginVersion(surface);
       const plan = buildPluginCachePlan(
-        (0, import_node_os19.homedir)(),
+        (0, import_node_os20.homedir)(),
         running,
         pluginCacheFsDeps(configRoot, () => 0),
         { configRoot, includeStaging: surface !== "codex", installedVersion: installed }
@@ -39704,12 +39983,12 @@ function mmiDoctorDeps(opts = {}) {
     piPluginState: () => {
       const env = { ...process.env };
       delete env.CLAUDE_PLUGIN_ROOT;
-      return readPiPluginState((0, import_node_os19.homedir)(), env);
+      return readPiPluginState((0, import_node_os20.homedir)(), env);
     },
     healPiPlugin: () => {
       const env = { ...process.env };
       delete env.CLAUDE_PLUGIN_ROOT;
-      return healPiPluginRegistration((0, import_node_os19.homedir)(), env);
+      return healPiPluginRegistration((0, import_node_os20.homedir)(), env);
     },
     // #4743: the global `claude` binary left as a ~500-byte placeholder by a self-update that died
     // EBUSY mid-install. A local read (package.json + the first bytes of two files) — no npm spawn:
@@ -39748,7 +40027,7 @@ function mmiDoctorDeps(opts = {}) {
       disableAutoUpdate: () => {
         if (detectSurface(process.env) === "codex") return void 0;
         return disableOrgMarketplaceBackgroundUpdates(
-          (0, import_node_path45.join)((0, import_node_os19.homedir)(), ...KNOWN_MARKETPLACES_RELATIVE),
+          (0, import_node_path46.join)((0, import_node_os20.homedir)(), ...KNOWN_MARKETPLACES_RELATIVE),
           [MMI_MARKETPLACE_NAME]
         );
       }
@@ -39762,7 +40041,7 @@ function mmiDoctorDeps(opts = {}) {
     // adopted the generated routing index (MMG-Unlive: `docs/Archive/**` only, no index, no gate.yml) would
     // get a permanent — demanding an artifact it never asked for.
     docsIndexState: (root) => {
-      if (!(0, import_node_fs48.existsSync)((0, import_node_path45.join)(root, DOCS_INDEX_PATH))) return void 0;
+      if (!(0, import_node_fs48.existsSync)((0, import_node_path46.join)(root, DOCS_INDEX_PATH))) return void 0;
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -39771,7 +40050,7 @@ function mmiDoctorDeps(opts = {}) {
     },
     // #4168: working-tree heal — write if drifted, then re-check. Commit remains the operator's step.
     healDocsIndex: (root) => {
-      if (!(0, import_node_fs48.existsSync)((0, import_node_path45.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
+      if (!(0, import_node_fs48.existsSync)((0, import_node_path46.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -40137,7 +40416,7 @@ program2.hook("preAction", async (_thisCommand, actionCommand) => {
 });
 var rules = program2.command("rules").description("org-managed .gitignore delivery");
 rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").option("--json", "machine-readable output").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
-  const path2 = (0, import_node_path45.join)(process.cwd(), ".gitignore");
+  const path2 = (0, import_node_path46.join)(process.cwd(), ".gitignore");
   const current = (0, import_node_fs48.existsSync)(path2) ? (0, import_node_fs48.readFileSync)(path2, "utf8") : null;
   const plan = planManagedGitignore(current);
   const drift = [...plan.added.map((l) => `+${l}`), ...plan.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
@@ -40291,7 +40570,7 @@ gcCmd.command("sweep-deferred").description("retry IDE-locked deferred worktree
     process.exit(process.exitCode ?? 0);
   });
 });
-gcCmd.option("--dry-run", "show what would be deleted (default)").option("--apply", "delete only the listed clean merged/closed PR local+remote branches, linked worktrees, and stale tracking refs").option("--json", "machine-readable output").option("--scratch", "prune safe local scratch (#1864) instead of git branches/refs; local plans are surfaced advisory-only, never auto-pruned").option("--remote <name>", "remote name", "origin").option("--limit <n>", "PRs to read PER BRANCH \u2014 an effort bound, not a correctness one: merge state is resolved per branch, so no branch is ever skipped for being old (#4227)", "200").option("--force", "remove worktrees even when the ownership registry shows another session created or worked in them recently (#3580), or when a dead worktree directory still holds leftover files (#4779)").option("--root <path>", "sweep an explicitly named worktrees root instead of the authoritative ../mmi-worktrees (#3471) \u2014 descends into this repo container when present; ownership, dead-dir, and content guards still apply").action(async (o) => {
+gcCmd.option("--dry-run", "show what would be deleted (default)").option("--apply", "delete only the listed clean merged/closed PR local+remote branches, linked worktrees, and stale tracking refs").option("--json", "machine-readable output").option("--scratch", "prune safe local scratch (#1864) instead of git branches/refs; local plans are surfaced advisory-only, never auto-pruned").option("--remote <name>", "remote name", "origin").option("--limit <n>", "PRs to read PER BRANCH \u2014 an effort bound, not a correctness one: merge state is resolved per branch, so no branch is ever skipped for being old (#4227)", "200").option("--force", "remove worktrees even when the ownership registry shows another session created or worked in them recently (#3580), or when a dead worktree directory still holds leftover files (#4779)").option("--root <path>", "sweep an explicitly named worktrees root instead of the authoritative ../mmi-worktrees (#3471) \u2014 descends into this repo container when present; ownership, dead-dir, and content guards still apply").option("--train-only", "explicit keep-only-train path: also reap closed-not-merged / no-PR origin leftovers; never deletes open PR heads (#4903)").action(async (o) => {
   if (o.apply && o.dryRun) return fail("worktree gc: choose either --dry-run or --apply");
   if (o.scratch) {
     try {
@@ -40308,7 +40587,7 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
   if (!Number.isFinite(limit) || limit < 1) return fail("worktree gc: --limit must be a positive integer");
   let root;
   if (o.root !== void 0) {
-    root = (0, import_node_path45.resolve)(o.root);
+    root = (0, import_node_path46.resolve)(o.root);
     if (!(0, import_node_fs48.existsSync)(root) || !(0, import_node_fs48.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
     const gcRepoRoot = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
     if (isPathUnderDirectory2(gcRepoRoot, root)) {
@@ -40316,10 +40595,11 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
     }
   }
   try {
-    const plan = await gcPlan(o.remote, limit, { root });
+    const plan = await gcPlan(o.remote, limit, { root, trainOnly: o.trainOnly });
+    const auditedClone = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
     if (root && !o.json) console.log(`worktree gc: scanning the explicitly named root ${root} for worktrees proven to belong to this repo
 `);
-    if (o.apply && !o.json) console.log(formatGcPlan(plan, true));
+    if (o.apply && !o.json) console.log(formatGcPlan(plan, true, auditedClone));
     let applyResult;
     if (o.apply) {
       const deferredStore = await createDeferredWorktreeStore();
@@ -40338,7 +40618,7 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
     if (o.json) {
       console.log(JSON.stringify({ dryRun: !o.apply, remote: o.remote, ...root ? { root } : {}, plan, applyResult }, null, 2));
     } else if (!o.apply) {
-      console.log(formatGcPlan(plan, false));
+      console.log(formatGcPlan(plan, false, auditedClone));
     } else {
       if (applyResult) console.log(`
 ${renderGcApplyResult(applyResult, plan.skipped)}`);
@@ -40402,7 +40682,8 @@ async function currentWorktreeRemovalContext(command, force) {
     actor: describeActor({ env: process.env, surface: detectSurface(process.env), cwd }),
     command,
     ...force ? { force: true } : {},
-    ...activeWorkspaceRoot ? { activeWorkspaceRoot } : {}
+    ...activeWorkspaceRoot ? { activeWorkspaceRoot } : {},
+    cursorAgentHost: isCursorAgentHost()
   };
 }
 async function unprovenWorktreeReason(wtPath, repoRoot2) {
@@ -40450,7 +40731,7 @@ function acquireWorktreeSetupLock(worktreeRoot) {
     };
   };
   try {
-    (0, import_node_fs48.mkdirSync)((0, import_node_path45.dirname)(lockPath), { recursive: true });
+    (0, import_node_fs48.mkdirSync)((0, import_node_path46.dirname)(lockPath), { recursive: true });
     return take();
   } catch {
     try {
@@ -42136,11 +42417,11 @@ pr.command("view <number>").description("read a PR as structured JSON (merged st
   }
 });
 async function listCiWorkflowPaths(cwd = process.cwd()) {
-  const wfDir = (0, import_node_path45.join)(cwd, ".github", "workflows");
+  const wfDir = (0, import_node_path46.join)(cwd, ".github", "workflows");
   if (!(0, import_node_fs48.existsSync)(wfDir)) return [];
   return (0, import_node_fs48.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
     try {
-      return workflowReportsPrChecks((0, import_node_fs48.readFileSync)((0, import_node_path45.join)(wfDir, name), "utf8"));
+      return workflowReportsPrChecks((0, import_node_fs48.readFileSync)((0, import_node_path46.join)(wfDir, name), "utf8"));
     } catch {
       return true;
     }
@@ -42192,16 +42473,16 @@ function ciAuditDeps() {
     // gate re-seed step is skipped gracefully rather than failing mid-run.
     readSeedFile: (path2) => {
       if (!root) return null;
-      const fullPath = (0, import_node_path45.join)(root, path2);
+      const fullPath = (0, import_node_path46.join)(root, path2);
       return (0, import_node_fs48.existsSync)(fullPath) ? (0, import_node_fs48.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
 function hubRoot() {
-  const fromPkg = (0, import_node_path45.join)(__dirname, "..", "..");
+  const fromPkg = (0, import_node_path46.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs48.existsSync)((0, import_node_path45.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs48.existsSync)((0, import_node_path45.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs48.existsSync)((0, import_node_path46.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs48.existsSync)((0, import_node_path46.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 async function waitLoopCorePool(label) {
@@ -43257,7 +43538,7 @@ function directoryBytes(path2) {
     return 0;
   }
   for (const entry of entries) {
-    const child2 = (0, import_node_path45.join)(path2, entry.name);
+    const child2 = (0, import_node_path46.join)(path2, entry.name);
     if (entry.isDirectory()) total += directoryBytes(child2);
     else {
       try {
@@ -43287,7 +43568,7 @@ function pluginCacheFsDeps(configRoot, dirBytes) {
     dirBytes,
     listStagingDirs: (root) => (0, import_node_fs48.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
       try {
-        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path45.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs48.statSync)(p).mtimeMs) };
+        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path46.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs48.statSync)(p).mtimeMs) };
       } catch {
         return { name: d.name, mtimeMs: Date.now() };
       }
@@ -43301,7 +43582,7 @@ function stagingApplyFsGuard(configRoot) {
   return {
     referencedPaths: () => readInstalledPluginRefs(configRoot),
     mtimeMs: (name) => {
-      const p = (0, import_node_path45.join)(stagingRoot, name);
+      const p = (0, import_node_path46.join)(stagingRoot, name);
       if (!(0, import_node_fs48.existsSync)(p)) return null;
       try {
         return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs48.statSync)(q).mtimeMs);
@@ -43324,7 +43605,7 @@ program2.command("plugin-prune").description(`prune stale cached MMI plugin vers
     return;
   }
   const plan = buildPluginCachePlan(
-    (0, import_node_os19.homedir)(),
+    (0, import_node_os20.homedir)(),
     running,
     pluginCacheFsDeps(configRoot, directoryBytes),
     { withBytes: true, configRoot, includeStaging: surface !== "codex" }
@@ -43346,7 +43627,7 @@ function readReleaseCatchupState(path2) {
 }
 function writeReleaseCatchupState(path2, state) {
   try {
-    (0, import_node_fs48.mkdirSync)((0, import_node_path45.dirname)(path2), { recursive: true });
+    (0, import_node_fs48.mkdirSync)((0, import_node_path46.dirname)(path2), { recursive: true });
     (0, import_node_fs48.writeFileSync)(path2, `${JSON.stringify(state)}
 `);
   } catch {
@@ -43355,7 +43636,7 @@ function writeReleaseCatchupState(path2, state) {
 program2.command("plugin-release-catchup").description("install a newer released MMI plugin clone non-destructively and re-point the Pi registration (#4297); TTL-gated no-op when current").option("--force", "skip the 24h TTL (acceptance proof / manual run)").option("--quiet", "print only failures (the detached session-start lane)").option("--json", "machine-readable output").action(async (o) => {
   const outcome = await withEnvHealLock(
     "plugin release catch-up",
-    () => runReleaseCatchup((0, import_node_os19.homedir)(), process.env, {
+    () => runReleaseCatchup((0, import_node_os20.homedir)(), process.env, {
       fetchReleased: fetchNpmReleasedVersion,
       runClaude: (args, step) => runPluginCli("claude", args, (msg) => {
         if (!o.quiet && !o.json) console.log(msg);
@@ -43371,7 +43652,7 @@ program2.command("plugin-release-catchup").description("install a newer released
       },
       readState: readReleaseCatchupState,
       writeState: writeReleaseCatchupState,
-      healRegistration: defaultRegistrationHeal((0, import_node_os19.homedir)(), process.env),
+      healRegistration: defaultRegistrationHeal((0, import_node_os20.homedir)(), process.env),
       now: () => Date.now()
     }, { force: o.force })
   );
@@ -43439,7 +43720,7 @@ program2.command("session-start").description("run the SessionStart verbs (whoam
     spawnDetachedSelf(["worktree", "setup", "--quiet"], { spawn: import_node_child_process20.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
     bannerIo.log(worktreeBanner);
   }
-  if (shouldSpawnReleaseCatchup((0, import_node_os19.homedir)(), process.env, readReleaseCatchupState)) {
+  if (shouldSpawnReleaseCatchup((0, import_node_os20.homedir)(), process.env, readReleaseCatchupState)) {
     spawnDetachedSelf(["plugin", "release-catchup", "--quiet"], { spawn: import_node_child_process20.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
   }
   if (isLinkedWorktree(process.cwd())) {