@mutmutco/cli 3.96.0 → 3.98.0

package/dist/main.cjs

@@ -3416,7 +3416,7 @@ var program = new Command();
 
 // src/index.ts
 var import_promises11 = require("node:fs/promises");
-var import_node_fs39 = require("node:fs");
+var import_node_fs40 = require("node:fs");
 var import_node_child_process18 = require("node:child_process");
 
 // src/cli-shared.ts
@@ -5235,7 +5235,7 @@ function deferredWorktreesRegistryPath(gitDir) {
   return `${base}/mmi-deferred-worktrees.json`;
 }
 function parseDeferredWorktreesFile(text) {
-  const parsed = JSON.parse(text);
+  const parsed = JSON.parse(text.replace(/^\uFEFF/, ""));
   if (!parsed || !Array.isArray(parsed.entries)) return [];
   return parsed.entries.filter((e) => Boolean(e) && typeof e === "object" && typeof e.path === "string" && typeof e.branch === "string" && e.reason === "lock-held").map((e) => ({ ...e, registeredAt: e.registeredAt || (/* @__PURE__ */ new Date(0)).toISOString() }));
 }
@@ -7643,6 +7643,9 @@ var CMD_RE = /`mmi-cli ((?:[a-z][a-z-]*)(?: [a-z][a-z-]*){0,3})/g;
 var RETIRED_RE = /\b(retired|historical|removed|deleted|gone|no longer|superseded|legacy)\b/i;
 var ROOT_DOCS = ["README.md", "architecture.md"];
 var SKIP_WALK = ["docs/Archive/", "docs/incidents/", "docs/research/"];
+function refFirstSegment(ref) {
+  return ref.replace(/^(\.\/)+/, "").split("/")[0];
+}
 function stripFences(markdown) {
   let inFence = false;
   return markdown.split(/\r?\n/).map((line) => {
@@ -7745,6 +7748,12 @@ function extractCommands(markdown) {
 }
 function checkRefs(root, deps, docs2) {
   const { exists, isIgnored = () => /* @__PURE__ */ new Set() } = deps;
+  const allFirstSegments = /* @__PURE__ */ new Set();
+  for (const markdown of Object.values(docs2)) {
+    for (const { ref } of extractRefs(markdown)) allFirstSegments.add(refFirstSegment(ref));
+  }
+  const tracked = allFirstSegments.size ? deps.trackedFirstSegments?.([...allFirstSegments]) ?? null : null;
+  const firstVerifiable = (first) => tracked ? tracked.has(first) : exists((0, import_node_path12.join)(root, first));
   const candidates = [];
   const direct = [];
   for (const [doc, markdown] of Object.entries(docs2)) {
@@ -7781,8 +7790,7 @@ function checkRefs(root, deps, docs2) {
       }
     }
     for (const { ref, line } of extractRefs(markdown)) {
-      const first = ref.split("/")[0];
-      if (!exists((0, import_node_path12.join)(root, first))) continue;
+      if (!firstVerifiable(refFirstSegment(ref))) continue;
       if (!exists((0, import_node_path12.join)(root, ref))) candidates.push({ kind: "missing-path", doc, line, detail: ref });
     }
     for (const { target, line, resolved, missing } of links) {
@@ -7872,18 +7880,43 @@ function defaultIsIgnored(root, relPaths, exec = import_node_child_process5.exec
     throw error;
   }
 }
+function defaultTrackedFirstSegments(root, firstSegments, exec = import_node_child_process5.execFileSync) {
+  if (firstSegments.length === 0) return /* @__PURE__ */ new Set();
+  try {
+    const out = exec("git", ["ls-files", "-z", "--", ...firstSegments.map((s) => `:(literal)${s}`)], {
+      cwd: root,
+      encoding: "utf8",
+      maxBuffer: CHECK_IGNORE_MAX_BUFFER
+    });
+    const tracked = /* @__PURE__ */ new Set();
+    for (const path2 of out.split("\0")) {
+      if (path2) tracked.add(path2.split("/")[0]);
+    }
+    return tracked;
+  } catch (error) {
+    if (error?.status === 128) return null;
+    if (error?.code === "ENOENT") return null;
+    if (error?.code === "ENOBUFS") {
+      throw new Error(
+        `git ls-files produced more than ${CHECK_IGNORE_MAX_BUFFER} bytes for ${firstSegments.length} segment(s) \u2014 the tracked set cannot be read, and treating it as empty would silently skip every ref (#4208)`
+      );
+    }
+    throw error;
+  }
+}
 function runDocRefs(root, deps = {}) {
   const readFile9 = deps.readFile ?? readFileOrNull;
   const exists = deps.exists ?? import_node_fs13.existsSync;
   const listDocs = deps.listDocs ?? defaultListDocs;
   const isIgnored = deps.isIgnored ?? ((paths) => defaultIsIgnored(root, paths));
+  const trackedFirstSegments = deps.trackedFirstSegments ?? ((segs) => defaultTrackedFirstSegments(root, segs));
   const commandPaths = deps.commandPaths ?? null;
   const walked = listDocs(root);
   const ignoredDocs = walked.length ? isIgnored(walked) : /* @__PURE__ */ new Set();
   const docs2 = Object.fromEntries(
     walked.filter((rel) => !ignoredDocs.has(rel)).map((rel) => [rel, readFile9((0, import_node_path12.join)(root, rel))]).filter(([, body]) => body != null)
   );
-  const refResult = checkRefs(root, { exists, isIgnored }, docs2);
+  const refResult = checkRefs(root, { exists, isIgnored, trackedFirstSegments }, docs2);
   const findings = [
     ...checkPins(root, readFile9, docs2).findings,
     ...refResult.findings
@@ -8788,6 +8821,9 @@ function detectSurface(env) {
   if (env.MMI_AGENT_SURFACE === "codex" || has("CODEX_THREAD_ID") || has("CODEX_MANAGED_BY_NPM") || has("CODEX_MANAGED_PACKAGE_ROOT") || (env.CLAUDE_PLUGIN_ROOT ?? "").includes(".codex")) {
     return "codex";
   }
+  if (env.MMI_AGENT_SURFACE === "jervcode" || has("PI_SESSION_ID")) {
+    return "jervcode";
+  }
   if (env.MMI_AGENT_SURFACE === "kimi" || has("KIMI_PLUGIN_ROOT") || has("KIMI_CODE_HOME")) {
     return "kimi";
   }
@@ -8817,6 +8853,8 @@ function surfaceToken(surface) {
       return "kilo";
     case "cursor":
       return "cursor";
+    case "jervcode":
+      return "jervcode";
     case "opencode":
       return "opencode";
     case "shell":
@@ -8838,6 +8876,8 @@ function reloadAction(surface) {
       return "restart OpenCode";
     case "cursor":
       return "reload the Cursor window";
+    case "jervcode":
+      return "restart JervCode (the package set is read at launch)";
     case "claude-cli":
     case "shell":
     default:
@@ -8905,7 +8945,7 @@ function nonClaudeSurfaceHealMessage(surface) {
   if (surface === "cursor") {
     return "Cursor ships an MMI plugin (#3920). Install or repair its managed local checkout with:\n  mmi-cli plugin heal\n  Then reload the Cursor window. For one-off CLI use, pass --plugin-dir <MMI-Hub checkout>.\n  Update the CLI too: npm i -g @mutmutco/cli";
   }
-  return "No Hub-shipped MMI plugin on this host \u2014 the Hub ships plugins for Claude, Codex, Kimi, Cursor, and Kilo only.\n  Update the CLI instead: npm i -g @mutmutco/cli   (org rules ride an AGENTS.md authored outside the Hub)";
+  return "No Hub-shipped MMI plugin on this host \u2014 the Hub ships plugins for Claude, Codex, Kimi, Cursor, Kilo, and JervCode only.\n  Update the CLI instead: npm i -g @mutmutco/cli   (org rules ride an AGENTS.md authored outside the Hub)";
 }
 function healStepAborts(step, ok) {
   return !ok && step.gated;
@@ -8953,6 +8993,7 @@ function surfaceConfigRoot(surface, env = process.env, home = (0, import_node_os
   if (surface === "kimi") return env.KIMI_CODE_HOME?.trim() || (0, import_node_path14.join)(home, ".kimi-code");
   if (surface === "kilo") return env.KILO_CONFIG_DIR?.trim() || (0, import_node_path14.join)(home, ".config", "kilo");
   if (surface === "cursor") return (0, import_node_path14.join)(home, ".cursor");
+  if (surface === "jervcode") return env.PI_CODING_AGENT_DIR?.trim() || (0, import_node_path14.join)(home, ".pi", "agent");
   return (0, import_node_path14.join)(home, ".claude");
 }
 var installedPluginsPath = (surface = detectSurface(process.env)) => {
@@ -8976,6 +9017,7 @@ function marketplaceCloneCandidates(surface, home, env = process.env) {
   if (surface === "kimi") return [];
   if (surface === "kilo") return [];
   if (surface === "cursor") return [];
+  if (surface === "jervcode") return [];
   return [(0, import_node_path14.join)(home, ".claude", "plugins", "marketplaces", "mutmutco")];
 }
 function marketplaceClonePresent(surface, home, exists = import_node_fs15.existsSync, env = process.env) {
@@ -9104,22 +9146,170 @@ function kimiPluginTreeHealthy(root, exists = import_node_fs15.existsSync) {
     "scripts/hook-run.mjs"
   ].every((path2) => exists((0, import_node_path14.join)(root, ...path2.split("/"))));
 }
+var JERVCODE_WRAPPER_DIR = ".pi-plugin";
+function normalizePiEntry(value) {
+  return decodeURIComponent(value.replace(/^file:\/\/\/?/, "")).replace(/\\/g, "/").replace(/\/+$/, "").toLowerCase();
+}
+function piEntryFsPath(entry) {
+  return decodeURIComponent(entry.replace(/^file:\/\/\/?/, ""));
+}
+function samePiEntry(entry, packagePath) {
+  return typeof entry === "string" && normalizePiEntry(entry) === normalizePiEntry(packagePath);
+}
+function jervcodePackageFamily(entry) {
+  if (typeof entry !== "string") return null;
+  const parts = normalizePiEntry(entry).split("/");
+  if (parts.length < 3 || parts[parts.length - 1] !== JERVCODE_WRAPPER_DIR) return null;
+  if (!/^\d+\.\d+\.\d+$/.test(parts[parts.length - 2])) return null;
+  parts.splice(parts.length - 2, 1);
+  return parts.join("/");
+}
+function isMmiOwnedPiEntry(entry) {
+  if (typeof entry !== "string") return false;
+  try {
+    const pkg = JSON.parse((0, import_node_fs15.readFileSync)((0, import_node_path14.join)(piEntryFsPath(entry), "package.json"), "utf8"));
+    return pkg.name === "mmi";
+  } catch {
+    return false;
+  }
+}
+function mergeMmiPiPackageEntries(entries, packagePath) {
+  const family = jervcodePackageFamily(packagePath);
+  const others = entries.filter((entry) => {
+    if (samePiEntry(entry, packagePath)) return false;
+    if (family === null || jervcodePackageFamily(entry) !== family) return true;
+    return !isMmiOwnedPiEntry(entry);
+  });
+  const already = entries.some((entry) => samePiEntry(entry, packagePath));
+  const superseded = entries.length - others.length - (already ? 1 : 0);
+  return {
+    next: [...others, packagePath],
+    superseded,
+    changed: !(already && others.length === entries.length - 1)
+  };
+}
+function readPiSettings(path2) {
+  if (!(0, import_node_fs15.existsSync)(path2)) return void 0;
+  try {
+    const parsed = JSON.parse((0, import_node_fs15.readFileSync)(path2, "utf8"));
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+    return parsed;
+  } catch {
+    return null;
+  }
+}
+function mmiPiWrapperEntry(env = process.env, home = (0, import_node_os4.homedir)()) {
+  const settings = readPiSettings((0, import_node_path14.join)(surfaceConfigRoot("jervcode", env, home), "settings.json"));
+  const entries = Array.isArray(settings?.packages) ? settings.packages : [];
+  for (const entry of entries) {
+    if (typeof entry !== "string") continue;
+    if (jervcodePackageFamily(entry)?.endsWith("/mutmutco/mmi/" + JERVCODE_WRAPPER_DIR) || isMmiOwnedPiEntry(entry)) {
+      return entry;
+    }
+  }
+  return null;
+}
+function mmiPiWrapperHealthy(entry) {
+  if (!entry) return false;
+  const wrapper = piEntryFsPath(entry);
+  return isMmiOwnedPiEntry(entry) && (0, import_node_fs15.existsSync)((0, import_node_path14.join)((0, import_node_path14.dirname)(wrapper), "skills", "mmi", "SKILL.md"));
+}
+function findMmiPiSourceClone(home = (0, import_node_os4.homedir)()) {
+  const cacheRoot = (0, import_node_path14.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi");
+  let best = null;
+  try {
+    for (const entry of (0, import_node_fs15.readdirSync)(cacheRoot, { withFileTypes: true })) {
+      if (!entry.isDirectory() || !/^\d+\.\d+\.\d+$/.test(entry.name)) continue;
+      if (!(0, import_node_fs15.existsSync)((0, import_node_path14.join)(cacheRoot, entry.name, JERVCODE_WRAPPER_DIR, "package.json"))) continue;
+      if (!best || compareVersions(entry.name, best.version) > 0) {
+        best = { path: (0, import_node_path14.join)(cacheRoot, entry.name), version: entry.name };
+      }
+    }
+  } catch {
+    return null;
+  }
+  return best;
+}
+function healJervCodePackageRegistration(opts = {}) {
+  const env = opts.env ?? process.env;
+  if (env.PI_SESSION_ID?.trim()) {
+    return {
+      available: true,
+      ok: true,
+      changed: false,
+      version: null,
+      detail: "skipped \u2014 live JervCode/Pi seat (PI_SESSION_ID set); the package set is read at launch, so this registration is deferred to an out-of-session doctor run"
+    };
+  }
+  const home = opts.home ?? (0, import_node_os4.homedir)();
+  const agentDir = surfaceConfigRoot("jervcode", env, home);
+  if (!(0, import_node_fs15.existsSync)(agentDir)) {
+    return { available: false, ok: true, changed: false, version: null, detail: "skipped \u2014 no Pi/JervCode install (no agent config dir)" };
+  }
+  const clone = opts.clone === void 0 ? findMmiPiSourceClone(home) : opts.clone;
+  if (!clone) {
+    return { available: true, ok: true, changed: false, version: null, detail: "skipped \u2014 no installed MMI clone carries the pi wrapper (install the Claude plugin first)" };
+  }
+  const packagePath = `${clone.path.replace(/\\/g, "/").replace(/\/+$/, "")}/${JERVCODE_WRAPPER_DIR}`;
+  const settingsPath2 = (0, import_node_path14.join)(agentDir, "settings.json");
+  const settings = readPiSettings(settingsPath2);
+  if (settings === null) {
+    return {
+      available: true,
+      ok: false,
+      changed: false,
+      version: clone.version,
+      detail: `package NOT registered \u2014 ${settingsPath2} is not a strict JSON object, so mmi left it alone; add ${packagePath} to its packages array by hand`
+    };
+  }
+  const current = settings ?? {};
+  const entries = Array.isArray(current.packages) ? current.packages : [];
+  const merged = mergeMmiPiPackageEntries(entries, packagePath);
+  if (!merged.changed) {
+    return { available: true, ok: true, changed: false, version: clone.version, detail: `holds ${clone.version}` };
+  }
+  current.packages = merged.next;
+  try {
+    (0, import_node_fs15.mkdirSync)((0, import_node_path14.dirname)(settingsPath2), { recursive: true });
+    const tmp = `${settingsPath2}.tmp-${process.pid}`;
+    (0, import_node_fs15.writeFileSync)(tmp, `${JSON.stringify(current, null, 2)}
+`, "utf8");
+    try {
+      (0, import_node_fs15.renameSync)(tmp, settingsPath2);
+    } catch (renameError) {
+      (0, import_node_fs15.rmSync)(tmp, { force: true });
+      throw renameError;
+    }
+  } catch (error) {
+    return { available: true, ok: false, changed: false, version: clone.version, detail: `package NOT registered \u2014 ${error.message}` };
+  }
+  const beside = `package registered in settings.json (${merged.next.length - 1} other package(s) untouched)`;
+  return {
+    available: true,
+    ok: true,
+    changed: true,
+    version: clone.version,
+    detail: `${clone.version}: ${merged.superseded > 0 ? `${beside}, superseding ${merged.superseded} earlier mmi version(s)` : beside}`
+  };
+}
 function snapshotPluginGuardInput(surface = detectSurface(process.env), isOrgRepo = false) {
   const root = surfaceConfigRoot(surface);
   const installed = readInstalledPlugins(surface);
   const codexStatus = surface === "codex" ? codexPluginStatus() : void 0;
+  const piEntry = surface === "jervcode" ? mmiPiWrapperEntry() : null;
   return {
     isOrgRepo,
     installRecordPresent: hasUserInstallRecord(installed, MMI_PLUGIN_ID) || hasProjectInstallRecord(installed, MMI_PLUGIN_ID, process.cwd()) || // Kimi's managed plugin directory is its native install record; it has no Claude-style ledger.
     surface === "kimi" && (0, import_node_fs15.existsSync)((0, import_node_path14.join)(root, "plugins", "managed", "mmi")) || // kilo-p1: the install record is the config file itself.
-    surface === "kilo" && kiloConfigListsPlugin(root) || surface === "cursor" && (0, import_node_fs15.existsSync)(cursorLocalPluginRoot()),
+    surface === "kilo" && kiloConfigListsPlugin(root) || // #4188: jervcode's install record is the settings-file packages[] entry itself.
+    surface === "jervcode" && piEntry !== null || surface === "cursor" && (0, import_node_fs15.existsSync)(cursorLocalPluginRoot()),
     // Kilo has no marketplace to clone — the config file IS the install record, so this dimension of
-    // the shared guard table is vacuously satisfied.
-    marketplaceClonePresent: surface === "kimi" || surface === "kilo" || surface === "cursor" ? true : marketplaceClonePresent(surface, (0, import_node_os4.homedir)()),
+    // the shared guard table is vacuously satisfied. Same for jervcode's settings entry.
+    marketplaceClonePresent: surface === "kimi" || surface === "kilo" || surface === "cursor" || surface === "jervcode" ? true : marketplaceClonePresent(surface, (0, import_node_os4.homedir)()),
     // Kimi keeps no plugin cache dir — installs are copied to plugins/managed/<id> and run from there.
     // Kilo (kilo-p1) keeps no cache dir either: the plugin's server() provisions ~/.kilo behind the
     // version stamp, so the stamp's presence is the cache signal.
-    pluginCachePresent: surface === "kilo" ? (0, import_node_fs15.existsSync)((0, import_node_path14.join)((0, import_node_os4.homedir)(), ".kilo", ".mmi-kilo-version")) : surface === "kimi" ? kimiPluginTreeHealthy((0, import_node_path14.join)(root, "plugins", "managed", "mmi")) : surface === "cursor" ? cursorPluginTreeHealthy(cursorLocalPluginRoot()) : surface === "codex" ? Boolean(
+    pluginCachePresent: surface === "jervcode" ? mmiPiWrapperHealthy(piEntry) : surface === "kilo" ? (0, import_node_fs15.existsSync)((0, import_node_path14.join)((0, import_node_os4.homedir)(), ".kilo", ".mmi-kilo-version")) : surface === "kimi" ? kimiPluginTreeHealthy((0, import_node_path14.join)(root, "plugins", "managed", "mmi")) : surface === "cursor" ? cursorPluginTreeHealthy(cursorLocalPluginRoot()) : surface === "codex" ? Boolean(
       codexStatus?.installed && codexStatus.enabled && codexStatus.version && (0, import_node_fs15.existsSync)((0, import_node_path14.join)(root, "plugins", "cache", CODEX_MARKETPLACE, "mmi", codexStatus.version))
     ) : (0, import_node_fs15.existsSync)((0, import_node_path14.join)(root, "plugins", "cache", "mutmutco", "mmi"))
   };
@@ -9298,13 +9488,26 @@ async function healClaudePluginForDoctor(surface = detectSurface(process.env), o
     detail: ok ? `marketplace remove \u2192 add \u2192 install succeeded${pinNote ? `; ${pinNote}` : ""}` : `\`claude plugin\` reinstall failed or was skipped${steps.length ? ` (${steps[steps.length - 1]})` : ""}`
   };
 }
+async function healJervCodeForDoctor() {
+  const heal = healJervCodePackageRegistration();
+  if (!heal.ok) return { ok: false, detail: heal.detail };
+  const snapshot = snapshotPluginGuardInput("jervcode", true);
+  const state = buildPluginGuardDecision(snapshot).state;
+  const verification = `record=${snapshot.installRecordPresent ? "yes" : "no"}, payload=${snapshot.pluginCachePresent ? "yes" : "no"}`;
+  if (!heal.changed && heal.detail.startsWith("skipped")) return { ok: true, detail: heal.detail };
+  return {
+    ok: state === "healthy",
+    detail: state === "healthy" ? `${heal.detail}; full guard verified (${verification})` : `pi package registration did not verify (${verification}); ${heal.detail}`
+  };
+}
 async function healActivePluginForDoctor(surface = detectSurface(process.env), onStep) {
   const token = surfaceToken(surface);
-  if (token !== "claude" && token !== "codex" && token !== "cursor" && token !== "kilo") {
+  if (token !== "claude" && token !== "codex" && token !== "cursor" && token !== "kilo" && token !== "jervcode") {
     return { ok: false, detail: `not a supported plugin surface (${surface})` };
   }
   if (token === "claude") return healClaudePluginForDoctor(surface, onStep);
   if (token === "cursor") return installCursorPluginCheckout();
+  if (token === "jervcode") return healJervCodeForDoctor();
   const steps = [];
   const applied = await applyPluginHeal(surface, (msg) => {
     const line = msg.trim();
@@ -9421,7 +9624,7 @@ async function runGuard(readOrigin) {
   const surface = detectSurface(process.env);
   try {
     const token = surfaceToken(surface);
-    if (token !== "claude" && token !== "codex" && token !== "cursor" && token !== "kilo") {
+    if (token !== "claude" && token !== "codex" && token !== "cursor" && token !== "kilo" && token !== "jervcode") {
       process.exitCode = 0;
       return;
     }
@@ -9441,8 +9644,8 @@ async function runGuard(readOrigin) {
     if (surfaceToken(surface) === "codex") {
       console.error("[mmi-guard] Could not inspect the active Codex plugin; run `mmi-cli plugin heal`.");
       process.exitCode = 1;
-    } else if (surfaceToken(surface) === "kilo" || surfaceToken(surface) === "cursor") {
-      const host = surfaceToken(surface) === "cursor" ? "Cursor" : "Kilo";
+    } else if (surfaceToken(surface) === "kilo" || surfaceToken(surface) === "cursor" || surfaceToken(surface) === "jervcode") {
+      const host = surfaceToken(surface) === "cursor" ? "Cursor" : surfaceToken(surface) === "jervcode" ? "JervCode" : "Kilo";
       console.error(`[mmi-guard] Could not inspect the active ${host} plugin; run \`mmi-cli plugin heal\`.`);
       process.exitCode = 1;
     } else {
@@ -9452,10 +9655,21 @@ async function runGuard(readOrigin) {
 }
 async function runPluginHeal(surface = detectSurface(process.env)) {
   const token = surfaceToken(surface);
-  if (token !== "claude" && token !== "codex" && token !== "cursor" && token !== "kilo") {
+  if (token !== "claude" && token !== "codex" && token !== "cursor" && token !== "kilo" && token !== "jervcode") {
     console.log(nonClaudeSurfaceHealMessage(token ?? void 0));
     return;
   }
+  if (token === "jervcode") {
+    const result = await healJervCodeForDoctor();
+    console.log(`  \u21BB ${result.detail}`);
+    if (result.ok) {
+      console.log(`  \u2713 MMI pi package registered \u2014 ${reloadAction(surface)} to load MMI skills.`);
+    } else {
+      process.exitCode = 1;
+      console.log("  \u2717 Auto-heal failed or was skipped. Install the Claude MMI plugin first (it owns the referenced clone), then rerun `mmi-cli plugin heal`.");
+    }
+    return;
+  }
   const descriptor = PLUGIN_SURFACE_HEAL[token];
   const cursorResult = token === "cursor" ? await installCursorPluginCheckout() : void 0;
   if (cursorResult) console.log(`  \u21BB ${cursorResult.detail}`);
@@ -11830,6 +12044,12 @@ async function auditRepoCi(repo, deps) {
     label: "delete_branch_on_merge enabled",
     detail: info.delete_branch_on_merge === true ? void 0 : "false or unavailable"
   });
+  checks.push({
+    ok: info.has_wiki === false,
+    label: "has_wiki disabled",
+    detail: info.has_wiki === false ? void 0 : "wikis are retired org-wide",
+    remediation: `gh api -X PATCH repos/${repo} -F has_wiki=false`
+  });
   const hasCanonicalGateWorkflow = repoClass === "hub" ? true : repoClass === "content" ? true : await contentExists(deps, repo, baseBranch, PRODUCT_GATE_PATH);
   let prWorkflowPaths = repoClass === "deployable" && hasCanonicalGateWorkflow ? [PRODUCT_GATE_PATH] : [];
   if (repoClass === "deployable" && !hasCanonicalGateWorkflow) {
@@ -12088,7 +12308,7 @@ async function applyCiReconcileMergeSettingsFromReport(repo, deps, report) {
   const applied = [];
   const skipped = [];
   const errors = [];
-  const mergeChecks = report.checks.filter((c) => c.label.startsWith("allow_") || c.label.startsWith("delete_branch"));
+  const mergeChecks = report.checks.filter((c) => c.label.startsWith("allow_") || c.label.startsWith("delete_branch") || c.label.startsWith("has_wiki"));
   const needsPatch = mergeChecks.some((c) => !c.ok);
   if (!needsPatch) {
     skipped.push("merge settings already canonical");
@@ -12099,10 +12319,11 @@ async function applyCiReconcileMergeSettingsFromReport(repo, deps, report) {
       body: {
         allow_auto_merge: true,
         allow_squash_merge: true,
-        delete_branch_on_merge: true
+        delete_branch_on_merge: true,
+        has_wiki: false
       }
     });
-    applied.push("allow_auto_merge, allow_squash_merge, delete_branch_on_merge");
+    applied.push("allow_auto_merge, allow_squash_merge, delete_branch_on_merge, has_wiki=false");
   } catch (e) {
     errors.push(e.message);
   }
@@ -12285,7 +12506,7 @@ async function parkProductRuleset(repo, deps) {
   return result;
 }
 function reconcileOwnedFailures(report) {
-  return report.checks.filter((check) => !check.ok).filter((check) => check.label.startsWith("allow_") || check.label.startsWith("delete_branch") || check.label.startsWith("gate workflow committed on ") || check.label.startsWith("product ruleset reference committed on ") || check.label === "product required status checks active" || check.label === RULESET_REFERENCE_MATCH_LABEL || check.label === REQUIRED_CONTEXTS_EMITTED_LABEL || check.label === TAG_ADDRESSABLE_CONTEXTS_LABEL).map((check) => check.label);
+  return report.checks.filter((check) => !check.ok).filter((check) => check.label.startsWith("allow_") || check.label.startsWith("delete_branch") || check.label.startsWith("has_wiki") || check.label.startsWith("gate workflow committed on ") || check.label.startsWith("product ruleset reference committed on ") || check.label === "product required status checks active" || check.label === RULESET_REFERENCE_MATCH_LABEL || check.label === REQUIRED_CONTEXTS_EMITTED_LABEL || check.label === TAG_ADDRESSABLE_CONTEXTS_LABEL).map((check) => check.label);
 }
 async function finalizeCiReconcile(repo, deps, result, before, pendingReason) {
   if (result.errors.length > 0) {
@@ -17227,7 +17448,7 @@ function applyChecklistCheck(body, query, checked) {
 // src/command-taxonomy.ts
 var COMMAND_METADATA = /* @__PURE__ */ Symbol.for("mmi.commandTaxonomy.metadata");
 var PRIMARY_GROUPS = [
-  ["Orient", ["onboard", "status", "next", "doctor", "whoami", "commands", "explain"]],
+  ["Orient", ["onboard", "status", "next", "find", "doctor", "whoami", "commands", "explain"]],
   ["Plan and work", ["board", "issue", "worktree", "stage"]],
   ["Review and ship", ["pr", "ci", "rcand", "release", "hotfix", "train"]],
   // `tests` sits beside `docs` deliberately: both are deterministic, repo-local gates a workflow
@@ -17237,7 +17458,7 @@ var PRIMARY_GROUPS = [
   ["Coordinate and improve", ["wave", "report", "skill-lesson"]]
 ];
 var OPERATIONAL_TOP_LEVEL = /* @__PURE__ */ new Set(["org", "runtime", "plugin"]);
-var SUPPORT_PRIMARY = /* @__PURE__ */ new Set(["doctor", "whoami", "commands", "explain", "docs", "repo-index", "tests", "spawn", "wave", "report", "skill-lesson"]);
+var SUPPORT_PRIMARY = /* @__PURE__ */ new Set(["doctor", "whoami", "commands", "explain", "docs", "repo-index", "find", "tests", "spawn", "wave", "report", "skill-lesson"]);
 var TOP_LEVEL_ORDER = /* @__PURE__ */ new Map();
 var HELP_GROUP_ORDER = /* @__PURE__ */ new Map();
 var topLevelPosition = 0;
@@ -17248,6 +17469,10 @@ for (const [helpGroup, names] of PRIMARY_GROUPS) {
 HELP_GROUP_ORDER.set("Operations", HELP_GROUP_ORDER.size);
 for (const name of OPERATIONAL_TOP_LEVEL) TOP_LEVEL_ORDER.set(name, topLevelPosition++);
 var PATH_OVERRIDES = {
+  // #4184: the estate-search door reads as Orient, while rebuild/publish/gc/sync-estate stay
+  // Setup and support — that split is the point.
+  "repo-index search": { category: "support", discovery: "primary", help_group: "Orient" },
+  "repo-index status": { category: "support", discovery: "primary", help_group: "Orient" },
   "secrets find": { category: "admin", discovery: "all-only", help_group: "Operations" },
   "secrets catalog": { category: "admin", discovery: "all-only", help_group: "Operations" },
   "secrets doctor": { category: "admin", discovery: "all-only", help_group: "Operations" },
@@ -17277,6 +17502,7 @@ var COMMAND_OWNERSHIP = {
   secrets: { module_owner: "cli/src/secrets-commands.ts", consumer: "authenticated-operator" },
   docs: { module_owner: "cli/src/docs-index-command.ts", consumer: "repo-gates" },
   "repo-index": { module_owner: "cli/src/repo-index.ts", consumer: "agent-session" },
+  find: { module_owner: "cli/src/repo-index.ts", consumer: "agent-session" },
   tests: { module_owner: "cli/src/test-policy-core.ts", consumer: "repo-gates" },
   spawn: { module_owner: "cli/src/spawn-policy-core.ts", consumer: "repo-gates" },
   wave: { module_owner: "cli/src/wave-land.ts", consumer: "campaign-orchestrator" },
@@ -17639,18 +17865,25 @@ function consolidateCommandNamespaces(program3) {
   move(program3, stage, "port-range");
 }
 
+// src/pi-plugin-registration.ts
+var import_node_fs22 = require("node:fs");
+var import_node_path20 = require("node:path");
+
 // src/plugin-cache-prune.ts
 var PLUGIN_CACHE_KEEP = 2;
 var VERSION_DIR = /^\d+\.\d+\.\d+(?:[-+].*)?$/;
 function isVersionDirName(name) {
   return VERSION_DIR.test(name);
 }
-function selectPrunablePluginVersions(names, currentVersion) {
+function selectPrunablePluginVersions(names, currentVersion, installedVersion) {
   const versions = [...new Set(names)].filter(isVersionDirName);
   if (versions.length <= PLUGIN_CACHE_KEEP) return [];
+  if (!currentVersion && !installedVersion) return [];
   const newestFirst = [...versions].sort((a, b) => compareVersions(b, a));
   const keep = /* @__PURE__ */ new Set();
+  keep.add(newestFirst[0]);
   if (currentVersion && versions.includes(currentVersion)) keep.add(currentVersion);
+  if (installedVersion && versions.includes(installedVersion)) keep.add(installedVersion);
   for (const v of newestFirst) {
     if (keep.size >= PLUGIN_CACHE_KEEP) break;
     keep.add(v);
@@ -17778,7 +18011,7 @@ function buildPluginCachePlan(home, running, deps, opts = {}) {
     return absent;
   }
   const versions = names.filter(isVersionDirName);
-  const prune = selectPrunablePluginVersions(versions, running);
+  const prune = selectPrunablePluginVersions(versions, running, opts.installedVersion);
   const pruneSet = new Set(prune);
   const keep = [...versions].sort((a, b) => compareVersions(b, a)).filter((v) => !pruneSet.has(v));
   const bytes = opts.withBytes ? prune.reduce((sum, v) => sum + deps.dirBytes(`${cacheRoot}/${v}`), 0) : 0;
@@ -17877,6 +18110,52 @@ function renderPluginCachePlan(plan, applied) {
   return lines.join("\n");
 }
 
+// src/pi-plugin-registration.ts
+function isMmiPiPackage(entry) {
+  return /[\\/]mutmutco[\\/]mmi[\\/][^\\/]+[\\/]\.pi-plugin\/?$/.test(entry);
+}
+function expectedPiPluginPath(home, env, installedVersion) {
+  const root = env.CLAUDE_PLUGIN_ROOT?.trim();
+  if (root && /[\\/]mutmutco[\\/]mmi[\\/]/.test(root)) return (0, import_node_path20.join)(root, ".pi-plugin");
+  const version = installedVersion ?? runningPluginVersion(env);
+  if (!version) return void 0;
+  return (0, import_node_path20.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi", version, ".pi-plugin");
+}
+function settingsPath(home) {
+  return (0, import_node_path20.join)(home, ".pi", "agent", "settings.json");
+}
+function readPiPluginState(home, env, installedVersion) {
+  if (!(0, import_node_fs22.existsSync)((0, import_node_path20.join)(home, ".pi", "agent"))) return void 0;
+  const expectedPath = expectedPiPluginPath(home, env, installedVersion);
+  if (!expectedPath || !(0, import_node_fs22.existsSync)(expectedPath)) return void 0;
+  const file = settingsPath(home);
+  if (!(0, import_node_fs22.existsSync)(file)) return { expectedPath, settingsReadable: true };
+  try {
+    const parsed = JSON.parse((0, import_node_fs22.readFileSync)(file, "utf8"));
+    const packages = Array.isArray(parsed.packages) ? parsed.packages : [];
+    return { expectedPath, registeredPath: packages.find((p) => typeof p === "string" && isMmiPiPackage(p)), settingsReadable: true };
+  } catch {
+    return { expectedPath, settingsReadable: false };
+  }
+}
+function healPiPluginRegistration(home, env, installedVersion) {
+  const state = readPiPluginState(home, env, installedVersion);
+  if (!state) return { ok: false, detail: "no ~/.pi/agent or no installed .pi-plugin payload" };
+  if (!state.settingsReadable) return { ok: false, detail: "settings.json unreadable \u2014 nothing written (fail closed)" };
+  const file = settingsPath(home);
+  try {
+    const parsed = (0, import_node_fs22.existsSync)(file) ? JSON.parse((0, import_node_fs22.readFileSync)(file, "utf8")) : {};
+    const packages = Array.isArray(parsed.packages) ? parsed.packages : [];
+    const next = packages.filter((p) => !(typeof p === "string" && isMmiPiPackage(p)));
+    next.push(state.expectedPath);
+    (0, import_node_fs22.writeFileSync)(file, `${JSON.stringify({ ...parsed, packages: next }, null, 2)}
+`);
+    return { ok: true, detail: state.registeredPath ? `replaced ${state.registeredPath}` : `registered ${state.expectedPath}` };
+  } catch (e) {
+    return { ok: false, detail: e.message };
+  }
+}
+
 // src/skill-lesson.ts
 var SKILL_LESSON_LABEL = "skill-lesson";
 var SKILL_NAMES = ["bootstrap", "browser-automation", "doctor", "epic", "hotfix", "mmi", "onboard", "rcand", "release", "resume", "secrets", "stage", "worktree"];
@@ -19304,8 +19583,8 @@ function renderAccessReport(report) {
 // src/repo-index.ts
 var import_node_crypto4 = require("node:crypto");
 var import_node_child_process11 = require("node:child_process");
-var import_node_fs22 = require("node:fs");
-var import_node_path20 = require("node:path");
+var import_node_fs23 = require("node:fs");
+var import_node_path21 = require("node:path");
 var REPO_INDEX_SCHEMA = 1;
 var HARD_DENY = [
   /(^|\/)\.env(\.|$)/i,
@@ -19430,11 +19709,11 @@ function loadReadmeHints(cwd, candidatePaths) {
   }
   for (const rel of readmes) {
     if (isHardDeniedPath(rel)) continue;
-    const abs = (0, import_node_path20.join)(cwd, ...rel.split("/"));
-    if (!(0, import_node_fs22.existsSync)(abs)) continue;
+    const abs = (0, import_node_path21.join)(cwd, ...rel.split("/"));
+    if (!(0, import_node_fs23.existsSync)(abs)) continue;
     let text;
     try {
-      text = (0, import_node_fs22.readFileSync)(abs, "utf8");
+      text = (0, import_node_fs23.readFileSync)(abs, "utf8");
     } catch {
       continue;
     }
@@ -19447,7 +19726,7 @@ function loadReadmeHints(cwd, candidatePaths) {
   return hints;
 }
 function toPosix(p) {
-  return p.split(import_node_path20.sep).join("/");
+  return p.split(import_node_path21.sep).join("/");
 }
 function listCandidatePaths(cwd, exec = import_node_child_process11.execFileSync) {
   try {
@@ -19469,11 +19748,11 @@ function rebuildRepoIndex(cwd, repoSlug2) {
   for (const rel of candidates) {
     if (ignored.has(rel)) continue;
     if (isHardDeniedPath(rel)) continue;
-    const abs = (0, import_node_path20.join)(cwd, ...rel.split("/"));
-    if (!(0, import_node_fs22.existsSync)(abs)) continue;
+    const abs = (0, import_node_path21.join)(cwd, ...rel.split("/"));
+    if (!(0, import_node_fs23.existsSync)(abs)) continue;
     let text;
     try {
-      text = (0, import_node_fs22.readFileSync)(abs, "utf8");
+      text = (0, import_node_fs23.readFileSync)(abs, "utf8");
     } catch {
       continue;
     }
@@ -19498,16 +19777,16 @@ function rebuildRepoIndex(cwd, repoSlug2) {
     entries
   };
   const store = repoIndexStorePath(cwd);
-  (0, import_node_fs22.mkdirSync)((0, import_node_path20.dirname)(store), { recursive: true });
-  (0, import_node_fs22.writeFileSync)(store, `${JSON.stringify(projection, null, 2)}
+  (0, import_node_fs23.mkdirSync)((0, import_node_path21.dirname)(store), { recursive: true });
+  (0, import_node_fs23.writeFileSync)(store, `${JSON.stringify(projection, null, 2)}
 `, "utf8");
   return projection;
 }
 function loadRepoIndex(cwd) {
   const store = repoIndexStorePath(cwd);
-  if (!(0, import_node_fs22.existsSync)(store)) return null;
+  if (!(0, import_node_fs23.existsSync)(store)) return null;
   try {
-    const raw = JSON.parse((0, import_node_fs22.readFileSync)(store, "utf8"));
+    const raw = JSON.parse((0, import_node_fs23.readFileSync)(store, "utf8"));
     if (raw?.schema !== REPO_INDEX_SCHEMA || !Array.isArray(raw.entries)) return null;
     return raw;
   } catch {
@@ -19579,7 +19858,7 @@ function inferRepoSlug(cwd, exec = import_node_child_process11.execFileSync) {
     if (m?.[1]) return m[1].toLowerCase();
   } catch {
   }
-  return ((0, import_node_path20.basename)(cwd) || "local").toLowerCase();
+  return ((0, import_node_path21.basename)(cwd) || "local").toLowerCase();
 }
 
 // src/repo-index-cloud-client.ts
@@ -19719,9 +19998,9 @@ async function gcRepoIndexCloud(deps) {
 }
 
 // src/repo-index-sync.ts
-var import_node_fs23 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path21 = require("node:path");
+var import_node_path22 = require("node:path");
 var import_node_child_process12 = require("node:child_process");
 var MAX_EMBED_BACKFILL_ROUNDS = 40;
 function normalizeRepo(raw) {
@@ -19765,7 +20044,7 @@ async function syncEstateRepoIndex(opts) {
   const failed = [];
   const skipped = [];
   for (const repo of repos) {
-    const dir = (0, import_node_fs23.mkdtempSync)((0, import_node_path21.join)((0, import_node_os9.tmpdir)(), "mmi-repo-index-"));
+    const dir = (0, import_node_fs24.mkdtempSync)((0, import_node_path22.join)((0, import_node_os9.tmpdir)(), "mmi-repo-index-"));
     try {
       shallowClone(repo, dir, opts.githubToken);
       const built = rebuildRepoIndex(dir, repo);
@@ -19815,7 +20094,7 @@ async function syncEstateRepoIndex(opts) {
       failed.push({ repo, error: e.message });
     } finally {
       try {
-        (0, import_node_fs23.rmSync)(dir, { recursive: true, force: true });
+        (0, import_node_fs24.rmSync)(dir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -19824,18 +20103,57 @@ async function syncEstateRepoIndex(opts) {
 }
 
 // src/repo-index-health.ts
-var import_node_fs24 = require("node:fs");
-var import_node_path22 = require("node:path");
-function defaultGoldenPath(repoRoot2) {
-  return (0, import_node_path22.join)(repoRoot2, "cli", "testdata", "repo-index-golden-queries.json");
-}
-function loadGoldenSuite(path2) {
-  const raw = JSON.parse((0, import_node_fs24.readFileSync)(path2, "utf8"));
+var import_node_fs25 = require("node:fs");
+
+// testdata/repo-index-golden-queries.json
+var repo_index_golden_queries_default = {
+  schema: 1,
+  staleThresholdHours: 12,
+  hubRepo: "mutmutco/MMI-Hub",
+  hubEmbMinCoverage: 0.5,
+  maxSyncEmbeds: 100,
+  queries: [
+    {
+      id: "rebuild-symbol-lexical",
+      q: "rebuildRepoIndex",
+      mode: "lexical",
+      expect: {
+        topRepos: ["mutmutco/MMI-Hub"],
+        topPaths: ["cli/src/repo-index.ts"],
+        minScore: 0.1
+      }
+    },
+    {
+      id: "schedules-register-semantic",
+      q: "schedules register",
+      mode: "semantic",
+      expect: {
+        topRepos: ["mutmutco/MMI-Hub"],
+        minScore: 0.05
+      }
+    }
+  ]
+};
+
+// src/repo-index-health.ts
+function assertGoldenSuite(raw, source) {
   if (!raw || raw.schema !== 1 || !Array.isArray(raw.queries)) {
-    throw new Error(`invalid golden suite at ${path2}`);
+    throw new Error(`invalid golden suite at ${source}`);
   }
   return raw;
 }
+function loadGoldenSuite(path2) {
+  let text;
+  try {
+    text = (0, import_node_fs25.readFileSync)(path2, "utf8");
+  } catch (e) {
+    throw new Error(`golden suite unreadable at ${path2}: ${e.message}`);
+  }
+  return assertGoldenSuite(JSON.parse(text), path2);
+}
+function defaultGoldenSuite() {
+  return assertGoldenSuite(repo_index_golden_queries_default, "bundled repo-index-golden-queries.json");
+}
 function evaluateQueryHits(query, hits) {
   if (!hits.length) {
     return { ok: false, code: "empty-hits", detail: `${query.id}: no hits for ${JSON.stringify(query.q)}` };
@@ -19971,7 +20289,7 @@ async function runRepoIndexHealth(opts) {
 
 // src/spawn-policy-core.ts
 var import_node_child_process13 = require("node:child_process");
-var import_node_fs25 = require("node:fs");
+var import_node_fs26 = require("node:fs");
 var import_node_path23 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
 var CALL_SOURCE = String.raw`(^|[^.\w$])(${SPAWNERS.join("|")})\s*\(`;
@@ -20058,7 +20376,7 @@ function runSpawnPolicy(root) {
   for (const file of files) {
     let raw;
     try {
-      raw = (0, import_node_fs25.readFileSync)((0, import_node_path23.join)(root, file), "utf8");
+      raw = (0, import_node_fs26.readFileSync)((0, import_node_path23.join)(root, file), "utf8");
     } catch {
       continue;
     }
@@ -20076,7 +20394,7 @@ function runSpawnPolicy(root) {
 
 // src/test-policy-core.ts
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs26 = require("node:fs");
+var import_node_fs27 = require("node:fs");
 var import_node_path24 = require("node:path");
 var POLICY_FILE = "test-policy.json";
 var TEST_RE = /\.(?:test|spec)\.[cm]?[jt]sx?$/;
@@ -20140,7 +20458,7 @@ function loadPolicy(root, readFile9 = readFileOrNull2) {
 }
 function readFileOrNull2(path2) {
   try {
-    return (0, import_node_fs26.readFileSync)(path2, "utf8");
+    return (0, import_node_fs27.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -20167,10 +20485,10 @@ function classify(changed, policy, present = () => false) {
   const removedProtected = [...removed].filter((p) => protectedBy.has(p)).map((p) => ({ path: p, why: protectedBy.get(p) ?? "" }));
   return { mandatoryHits, untestedHits, testChanges, addedTests, removedProtected };
 }
-function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs26.existsSync)(path2)) {
+function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs27.existsSync)(path2)) {
   return (policy.protected ?? []).map((p) => p.path).filter((p) => !exists((0, import_node_path24.join)(root, p)));
 }
-function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs26.existsSync)(path2)) {
+function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs27.existsSync)(path2)) {
   const declared = (policy.mandatory ?? []).flatMap((m) => m.satisfiedBy ?? []);
   return [...new Set(declared)].filter((p) => !exists((0, import_node_path24.join)(root, p)));
 }
@@ -20354,7 +20672,7 @@ function changedFilesSince(base, cwd) {
 }
 function runTestPolicy(root, deps = {}) {
   const policy = deps.policy ?? loadPolicy(root);
-  const exists = deps.exists ?? ((path2) => (0, import_node_fs26.existsSync)(path2));
+  const exists = deps.exists ?? ((path2) => (0, import_node_fs27.existsSync)(path2));
   const counts = { mandatoryCount: (policy.mandatory ?? []).length, protectedCount: (policy.protected ?? []).length };
   const base = deps.changed ? "(injected)" : resolveBase(root, deps.base);
   const refusal = deps.changed ? null : untrustworthyRange(root, base);
@@ -20516,7 +20834,7 @@ function docsAuditStatus(fetch2, opts) {
 }
 
 // src/project-info-sync.ts
-var import_node_fs27 = require("node:fs");
+var import_node_fs28 = require("node:fs");
 var import_node_path25 = require("node:path");
 var UPDATE_PROJECT_INFO = `mutation($projectId: ID!, $shortDescription: String!, $readme: String!) {
   updateProjectV2(input: { projectId: $projectId, shortDescription: $shortDescription, readme: $readme }) {
@@ -20563,13 +20881,13 @@ function sharedName(entries, fallback) {
 function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   if (!project2.projectId) throw new Error(`org project sync-info: ${targetRepo2} registry META has no projectId`);
   const readmePath = (0, import_node_path25.join)(repoRoot2, "README.md");
-  if (!(0, import_node_fs27.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
+  if (!(0, import_node_fs28.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
   const entries = entriesFor(project2, projects);
   const memberRepos = [...new Set(entries.flatMap((entry) => entry.repos ?? []))].filter((repo) => /^[^/]+\/[^/]+$/.test(repo)).sort((a, b) => a.localeCompare(b));
   const projectName = sharedName(entries, project2.name?.trim() || targetRepo2.split("/").pop() || targetRepo2);
   if (!memberRepos.length) throw new Error(`org project sync-info: project ${projectName} has no registered member repos`);
   const entryNames = entries.map((entry) => entry.name?.trim()).filter((name) => Boolean(name));
-  const shortDescription = memberRepos.length === 1 ? shortDescriptionFromReadme((0, import_node_fs27.readFileSync)(readmePath, "utf8")) : `Shared work across ${new Intl.ListFormat("en", { type: "conjunction" }).format(entryNames)}.`;
+  const shortDescription = memberRepos.length === 1 ? shortDescriptionFromReadme((0, import_node_fs28.readFileSync)(readmePath, "utf8")) : `Shared work across ${new Intl.ListFormat("en", { type: "conjunction" }).format(entryNames)}.`;
   const lines = [
     `# ${projectName}`,
     "",
@@ -20588,8 +20906,8 @@ function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   const targetBase = `https://github.com/${targetRepo2}`;
   const targetBranch = branchFor(targetRepo2, projects);
   const orgDocs = [
-    (0, import_node_fs27.existsSync)((0, import_node_path25.join)(repoRoot2, "docs", "org-readme.md")) ? `- [Org identity](${targetBase}/blob/${targetBranch}/docs/org-readme.md)` : "",
-    (0, import_node_fs27.existsSync)((0, import_node_path25.join)(repoRoot2, "docs", "org-architecture.md")) ? `- [Org architecture](${targetBase}/blob/${targetBranch}/docs/org-architecture.md)` : ""
+    (0, import_node_fs28.existsSync)((0, import_node_path25.join)(repoRoot2, "docs", "org-readme.md")) ? `- [Org identity](${targetBase}/blob/${targetBranch}/docs/org-readme.md)` : "",
+    (0, import_node_fs28.existsSync)((0, import_node_path25.join)(repoRoot2, "docs", "org-architecture.md")) ? `- [Org architecture](${targetBase}/blob/${targetBranch}/docs/org-architecture.md)` : ""
   ].filter(Boolean);
   if (orgDocs.length) lines.push("", "## Organisation docs", "", ...orgDocs);
   return { projectId: project2.projectId, projectName, targetRepo: targetRepo2, memberRepos, shortDescription, readme: `${lines.join("\n")}
@@ -21448,7 +21766,7 @@ function writeError(res) {
 }
 
 // src/secrets-commands.ts
-var import_node_fs28 = require("node:fs");
+var import_node_fs29 = require("node:fs");
 var import_node_path26 = require("node:path");
 var import_node_os10 = require("node:os");
 
@@ -21583,8 +21901,8 @@ async function decryptRailsCredentials(input) {
     MMI_RAILS_CREDENTIALS_FILE: credentialsPath,
     MMI_RAILS_MASTER_KEY_FILE: masterKeyPath
   };
-  if ((0, import_node_fs28.existsSync)(masterKeyPath)) {
-    env.RAILS_MASTER_KEY = (0, import_node_fs28.readFileSync)(masterKeyPath, "utf8").trim();
+  if ((0, import_node_fs29.existsSync)(masterKeyPath)) {
+    env.RAILS_MASTER_KEY = (0, import_node_fs29.readFileSync)(masterKeyPath, "utf8").trim();
   }
   const script = [
     'require "json"',
@@ -21594,9 +21912,9 @@ async function decryptRailsCredentials(input) {
     'config = ActiveSupport::EncryptedConfiguration.new(config_path: config_path, key_path: key_path, env_key: "RAILS_MASTER_KEY", raise_if_missing_key: true)',
     "puts JSON.generate(config.config)"
   ].join("\n");
-  const scriptDir = (0, import_node_fs28.mkdtempSync)((0, import_node_path26.join)((0, import_node_os10.tmpdir)(), "mmi-rails-decrypt-"));
+  const scriptDir = (0, import_node_fs29.mkdtempSync)((0, import_node_path26.join)((0, import_node_os10.tmpdir)(), "mmi-rails-decrypt-"));
   const scriptPath = (0, import_node_path26.join)(scriptDir, "decrypt.rb");
-  (0, import_node_fs28.writeFileSync)(scriptPath, script, "utf8");
+  (0, import_node_fs29.writeFileSync)(scriptPath, script, "utf8");
   try {
     const args = ["exec", "ruby", scriptPath];
     const cmd = process.platform === "win32" ? "cmd.exe" : "bundle";
@@ -21608,7 +21926,7 @@ async function decryptRailsCredentials(input) {
     });
     return JSON.parse(stdout);
   } finally {
-    (0, import_node_fs28.rmSync)(scriptDir, { recursive: true, force: true });
+    (0, import_node_fs29.rmSync)(scriptDir, { recursive: true, force: true });
   }
 }
 async function readSecretStdin() {
@@ -21698,7 +22016,7 @@ function registerSecretsCommands(program3) {
     let body;
     if (o.file) {
       try {
-        body = (0, import_node_fs28.readFileSync)((0, import_node_path26.resolve)(o.file), "utf8");
+        body = (0, import_node_fs29.readFileSync)((0, import_node_path26.resolve)(o.file), "utf8");
       } catch (e) {
         return fail(`secrets org-catalog: cannot read --file ${o.file}: ${e.message}`);
       }
@@ -21803,7 +22121,7 @@ function registerSecretsCommands(program3) {
       {
         ...d,
         decryptRailsCredentials,
-        removeFile: (path2) => (0, import_node_fs28.unlinkSync)((0, import_node_path26.resolve)(o.appDir ?? process.cwd(), path2))
+        removeFile: (path2) => (0, import_node_fs29.unlinkSync)((0, import_node_path26.resolve)(o.appDir ?? process.cwd(), path2))
       },
       {
         repo: o.repo,
@@ -21967,7 +22285,7 @@ async function activateAppActor(commandPath3, env, mint) {
 }
 
 // src/box-commands.ts
-var import_node_fs29 = require("node:fs");
+var import_node_fs30 = require("node:fs");
 
 // src/box.ts
 var BOX_KEYS = {
@@ -22170,7 +22488,7 @@ function registerBoxCommands(program3) {
       }
       if (o.json) console.log(JSON.stringify({ box: found, incomplete }, null, 2));
       else if (o.ssh && o.script) {
-        (0, import_node_fs29.writeFileSync)(o.script, sshRecipeScript(found), "utf8");
+        (0, import_node_fs30.writeFileSync)(o.script, sshRecipeScript(found), "utf8");
         console.log(`wrote ${o.script} \u2014 run: bash "${o.script}"`);
       } else if (o.ssh) console.log(`${formatSshRecipe(found)}
 ${SSH_RECIPE_AGENT_NOTE}`);
@@ -23603,7 +23921,7 @@ function registerQueryCommands(program3) {
 }
 
 // src/bootstrap-commands.ts
-var import_node_fs30 = require("node:fs");
+var import_node_fs31 = require("node:fs");
 var import_node_os11 = require("node:os");
 var import_node_path29 = require("node:path");
 
@@ -23877,6 +24195,11 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
   const repoInfo = await restJson3(deps, `repos/${repo}`, {});
   checks.push({ ok: Boolean(repoInfo.default_branch), label: "repo exists" });
   checks.push({ ok: repoInfo.default_branch === baseBranch, label: `default branch is ${baseBranch}`, detail: repoInfo.default_branch || "missing" });
+  checks.push({
+    ok: repoInfo.has_wiki === false,
+    label: "has_wiki disabled",
+    detail: repoInfo.has_wiki === false ? void 0 : `wikis are retired org-wide \u2014 gh api -X PATCH repos/${repo} -F has_wiki=false`
+  });
   const branchList = await restPagedJson2(deps, `repos/${repo}/branches`, []);
   const branchNames = new Set(branchList.map((b) => b.name));
   for (const branch of branchesWanted) {
@@ -24318,13 +24641,13 @@ function registerBootstrapCommands(program3) {
       client: defaultGitHubClient(),
       projectMeta: meta,
       deployModel: typeof meta?.deployModel === "string" ? meta.deployModel : void 0,
-      readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs30.existsSync)(path2) ? (0, import_node_fs30.readFileSync)(path2, "utf8") : null,
+      readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs31.existsSync)(path2) ? (0, import_node_fs31.readFileSync)(path2, "utf8") : null,
       // requiredGcpApis is stored as an array by a JSON write, but `org project set --var KEY=VALUE` stores a raw
       // comma-string — accept either so the seeded value verifies regardless of how it was written.
       // #3689: the same committed map the org access audit reads (#3664), so a sanctioned admin is not a
       // permanent bootstrap failure on one surface and an intended state on the other. Absent file → no
       // sanction, which is the pre-#3664 behaviour.
-      sanctionedAdmins: (0, import_node_fs30.existsSync)("access-matrix.json") ? entriesValueByCanonicalRepo(loadSanctionedAdmins((0, import_node_fs30.readFileSync)("access-matrix.json", "utf8")), repo) : void 0,
+      sanctionedAdmins: (0, import_node_fs31.existsSync)("access-matrix.json") ? entriesValueByCanonicalRepo(loadSanctionedAdmins((0, import_node_fs31.readFileSync)("access-matrix.json", "utf8")), repo) : void 0,
       requiredGcpApis: (() => {
         const v = meta?.requiredGcpApis;
         if (Array.isArray(v)) return v;
@@ -24377,12 +24700,12 @@ function registerBootstrapCommands(program3) {
   bootstrap.command("drift").description("#3818: compare every org-owned whole-file seed against MMI-Hub's copy across the registry roster; read-only").option("--repo <owner/repo>", "audit one repo instead of the roster (never a fleet verdict)").option("--json", "machine-readable output").action(async () => {
     const o = { repo: rawValue("--repo", ""), json: rawFlag("--json") };
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs30.existsSync)(manifestPath)) return fail(`bootstrap drift: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the reference this compares against`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs30.readFileSync)(manifestPath, "utf8"));
+    if (!(0, import_node_fs31.existsSync)(manifestPath)) return fail(`bootstrap drift: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the reference this compares against`);
+    const manifest = loadBootstrapSeeds((0, import_node_fs31.readFileSync)(manifestPath, "utf8"));
     const hubContents = /* @__PURE__ */ new Map();
     for (const s of manifest.seeds) {
       if (s.ownership !== "org" || s.source !== "self") continue;
-      hubContents.set(s.target, (0, import_node_fs30.existsSync)(s.target) ? (0, import_node_fs30.readFileSync)(s.target, "utf8") : null);
+      hubContents.set(s.target, (0, import_node_fs31.existsSync)(s.target) ? (0, import_node_fs31.readFileSync)(s.target, "utf8") : null);
     }
     let targets;
     let classOf = (_repo) => "deployable";
@@ -24459,8 +24782,8 @@ function registerBootstrapCommands(program3) {
       return fail(`bootstrap apply: ${e.message}`);
     }
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs30.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; bootstrap runs from the MMI-Hub repo root by design \u2014 it stamps org-level resources (Project, Ruleset, secrets, access) through the GitHub App, which is only authorized from the Hub checkout`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs30.readFileSync)(manifestPath, "utf8"));
+    if (!(0, import_node_fs31.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; bootstrap runs from the MMI-Hub repo root by design \u2014 it stamps org-level resources (Project, Ruleset, secrets, access) through the GitHub App, which is only authorized from the Hub checkout`);
+    const manifest = loadBootstrapSeeds((0, import_node_fs31.readFileSync)(manifestPath, "utf8"));
     const baseBranch = o.class === "content" ? "main" : "development";
     const slug = parsedRepo.slug;
     const onlyTarget = o.only.trim();
@@ -24471,16 +24794,16 @@ function registerBootstrapCommands(program3) {
   ${known}`);
     }
     const gh = async (args) => execFileP2("gh", args, { timeout: 2e4 });
-    const readFile9 = (p) => (0, import_node_fs30.existsSync)(p) ? (0, import_node_fs30.readFileSync)(p, "utf8") : null;
+    const readFile9 = (p) => (0, import_node_fs31.existsSync)(p) ? (0, import_node_fs31.readFileSync)(p, "utf8") : null;
     const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
     const putSeed = async (target, content, ref, sha) => {
       const tmp = (0, import_node_path29.join)((0, import_node_os11.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
-      (0, import_node_fs30.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
+      (0, import_node_fs31.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
       try {
         await gh(contentPutInputArgs(repo, target, tmp));
       } finally {
         try {
-          (0, import_node_fs30.unlinkSync)(tmp);
+          (0, import_node_fs31.unlinkSync)(tmp);
         } catch {
         }
       }
@@ -24654,6 +24977,14 @@ function registerBootstrapCommands(program3) {
       });
       applied.push(autoMergeEnabled ? `seed: PR ${seedPrUrl} (base ${baseBranch} protected; auto-merge enabled)` : `seed: PR ${seedPrUrl} (base ${baseBranch} protected; auto-merge refused \u2014 PR is already clean. Land it: mmi-cli pr land <n> --repo ${repo})`);
     }
+    if (o.execute && !onlyTarget) {
+      try {
+        await gh(["api", "-X", "PATCH", `repos/${repo}`, "-F", "has_wiki=false"]);
+        applied.push("has_wiki=false (wikis retired org-wide)");
+      } catch (e) {
+        applied.push(`has_wiki=false (failed: ${e.message})`);
+      }
+    }
     if (o.execute && !onlyTarget && o.class === "deployable") {
       try {
         await gh(["api", "-X", "PATCH", `repos/${repo}`, "-f", "allow_auto_merge=true", "-f", "allow_squash_merge=true", "-f", "delete_branch_on_merge=true"]);
@@ -24737,11 +25068,11 @@ LIVE apply to ${repo}:
 }
 
 // src/stage-commands.ts
-var import_node_fs32 = require("node:fs");
+var import_node_fs33 = require("node:fs");
 var import_node_path31 = require("node:path");
 
 // src/port-registry.ts
-var import_node_fs31 = require("node:fs");
+var import_node_fs32 = require("node:fs");
 var import_node_path30 = require("node:path");
 
 // ../infra/port-geometry.mjs
@@ -24756,8 +25087,8 @@ function nextPortBlock(registry2) {
   return [base, base + PORT_SPAN];
 }
 function loadPortRegistry(path2) {
-  if (!(0, import_node_fs31.existsSync)(path2)) return {};
-  const raw = JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8"));
+  if (!(0, import_node_fs32.existsSync)(path2)) return {};
+  const raw = JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8"));
   const out = {};
   for (const [key, value] of Object.entries(raw)) {
     if (Array.isArray(value) && value.length === 2 && value.every((n) => typeof n === "number")) {
@@ -24771,9 +25102,9 @@ function ensurePortRange(repo, path2) {
   const existing = registry2[repo];
   if (existing) return existing;
   const range = nextPortBlock(registry2);
-  const raw = (0, import_node_fs31.existsSync)(path2) ? JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8")) : {};
+  const raw = (0, import_node_fs32.existsSync)(path2) ? JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8")) : {};
   raw[repo] = range;
-  (0, import_node_fs31.writeFileSync)(path2, JSON.stringify(raw, null, 2) + "\n", "utf8");
+  (0, import_node_fs32.writeFileSync)(path2, JSON.stringify(raw, null, 2) + "\n", "utf8");
   return range;
 }
 function portCursorSeed(registry2) {
@@ -24797,7 +25128,7 @@ function existingPortRange(repo, registry2) {
 function portRangeInfraAt(root, source) {
   const registryPath = (0, import_node_path30.join)(root, "infra", "port-ranges.json");
   const ddbScriptPath = (0, import_node_path30.join)(root, "infra", "port-ddb.mjs");
-  if (!(0, import_node_fs31.existsSync)(registryPath) || !(0, import_node_fs31.existsSync)(ddbScriptPath)) return null;
+  if (!(0, import_node_fs32.existsSync)(registryPath) || !(0, import_node_fs32.existsSync)(ddbScriptPath)) return null;
   return { root, source, registryPath, ddbScriptPath };
 }
 function resolvePortRangeInfra(cwd, packageDir) {
@@ -25004,8 +25335,8 @@ function registerStageCommands(program3) {
     const portRange = portRangeMeta && typeof portRangeMeta.start === "number" && typeof portRangeMeta.end === "number" ? [portRangeMeta.start, portRangeMeta.end] : void 0;
     return decideStage({
       registry: { deployModel: project2?.deployModel, portRange, error: read.ok ? void 0 : read.error },
-      hasCompose: (0, import_node_fs32.existsSync)((0, import_node_path31.join)(process.cwd(), "docker-compose.yml")),
-      hasEnvExample: (0, import_node_fs32.existsSync)((0, import_node_path31.join)(process.cwd(), ".env.example"))
+      hasCompose: (0, import_node_fs33.existsSync)((0, import_node_path31.join)(process.cwd(), "docker-compose.yml")),
+      hasEnvExample: (0, import_node_fs33.existsSync)((0, import_node_path31.join)(process.cwd(), ".env.example"))
     });
   }
   async function fetchStageVaultEnvMerge() {
@@ -25443,7 +25774,7 @@ function registerBoardCommands(program3) {
 }
 
 // src/merge-cleanup.ts
-var import_node_fs33 = require("node:fs");
+var import_node_fs34 = require("node:fs");
 var import_promises8 = require("node:fs/promises");
 var import_node_path33 = require("node:path");
 var import_node_os12 = require("node:os");
@@ -25768,7 +26099,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
       const cleanup = await cleanupPrMergeLocalBranch(branch.branch, {
         beforeWorktrees,
         startingPath: branch.worktreePath,
-        pathExists: (p) => (0, import_node_fs33.existsSync)(p),
+        pathExists: (p) => (0, import_node_fs34.existsSync)(p),
         execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
         teardownWorktreeStage,
         deferredStore,
@@ -25796,7 +26127,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
     let removalAttempted = false;
     try {
       const cleanupTarget = resolveSafeSiblingWorktreeCleanupTarget(wt.path, siblingRoot, {
-        realpath: (path2) => (0, import_node_fs33.realpathSync)(path2)
+        realpath: (path2) => (0, import_node_fs34.realpathSync)(path2)
       });
       if (!cleanupTarget.ok) {
         result.failed.push(`${wt.path}: ${cleanupTarget.reason}`);
@@ -25882,13 +26213,13 @@ async function composeOverrideBodyFile(prNumber, repoArgs, gh) {
     const commits = JSON.parse(raw).commits ?? [];
     const body = squashBodyWithOverride(commits.map((c) => ({ headline: c.messageHeadline ?? "", body: c.messageBody ?? "" })), process.cwd());
     if (!body) return void 0;
-    const dir = (0, import_node_fs33.mkdtempSync)((0, import_node_path33.join)((0, import_node_os12.tmpdir)(), "mmi-squash-body-"));
+    const dir = (0, import_node_fs34.mkdtempSync)((0, import_node_path33.join)((0, import_node_os12.tmpdir)(), "mmi-squash-body-"));
     const path2 = (0, import_node_path33.join)(dir, "body.txt");
-    (0, import_node_fs33.writeFileSync)(path2, `${body}
+    (0, import_node_fs34.writeFileSync)(path2, `${body}
 `, "utf8");
     return { path: path2, cleanup: () => {
       try {
-        (0, import_node_fs33.rmSync)(dir, { recursive: true, force: true });
+        (0, import_node_fs34.rmSync)(dir, { recursive: true, force: true });
       } catch {
       }
     } };
@@ -26010,13 +26341,13 @@ var realWorktreeDirRemover = {
   probe: (p) => {
     let st;
     try {
-      st = (0, import_node_fs33.lstatSync)(p);
+      st = (0, import_node_fs34.lstatSync)(p);
     } catch {
       return null;
     }
     if (st.isSymbolicLink()) return "link";
     try {
-      (0, import_node_fs33.readlinkSync)(p);
+      (0, import_node_fs34.readlinkSync)(p);
       return "link";
     } catch {
     }
@@ -26024,7 +26355,7 @@ var realWorktreeDirRemover = {
   },
   readdir: (p) => {
     try {
-      return (0, import_node_fs33.readdirSync)(p);
+      return (0, import_node_fs34.readdirSync)(p);
     } catch {
       return [];
     }
@@ -26033,9 +26364,9 @@ var realWorktreeDirRemover = {
   // leaving the target); a file symlink with unlink. rmdir first, fall back to unlink.
   detachLink: (p) => {
     try {
-      (0, import_node_fs33.rmdirSync)(p);
+      (0, import_node_fs34.rmdirSync)(p);
     } catch {
-      (0, import_node_fs33.unlinkSync)(p);
+      (0, import_node_fs34.unlinkSync)(p);
     }
   },
   removeTree: (p) => (0, import_promises8.rm)(p, { recursive: true, force: true, maxRetries: 5, retryDelay: 200 })
@@ -26068,9 +26399,9 @@ async function worktreeHasStageState(worktreePath) {
   }
 }
 function stageStateFileBelongsToWorktree(statePath, worktreePath) {
-  if (!(0, import_node_fs33.existsSync)(statePath)) return false;
+  if (!(0, import_node_fs34.existsSync)(statePath)) return false;
   try {
-    const state = JSON.parse((0, import_node_fs33.readFileSync)(statePath, "utf8"));
+    const state = JSON.parse((0, import_node_fs34.readFileSync)(statePath, "utf8"));
     const recordedCwd = typeof state.identity?.cwd === "string" ? state.identity.cwd : typeof state.cwd === "string" ? state.cwd : "";
     return Boolean(recordedCwd && isPathUnderDirectory(recordedCwd, worktreePath));
   } catch {
@@ -26401,7 +26732,7 @@ async function checkDocsIndexAtHead(opts, deps) {
 }
 
 // src/worktree-lifecycle-commands.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_promises9 = require("node:fs/promises");
 var import_node_path34 = require("node:path");
 var GH_TIMEOUT_MS = 2e4;
@@ -26549,7 +26880,7 @@ function classifyStaleLeaks(input) {
 var defaultOrphanDirScanDeps = {
   listDirs: (root) => {
     try {
-      return (0, import_node_fs34.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path34.join)(root, e.name));
+      return (0, import_node_fs35.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path34.join)(root, e.name));
     } catch {
       return [];
     }
@@ -26703,7 +27034,7 @@ function registerWorktreeCommands(program3) {
       const branch = symbolicBranch || (detached ? "HEAD" : "");
       if (!wtPath || !branch) return fail("worktree land: not inside a git worktree");
       const gitFile = (0, import_node_path34.join)(wtPath, ".git");
-      const isLinked = (0, import_node_fs34.existsSync)(gitFile) && (0, import_node_fs34.statSync)(gitFile).isFile();
+      const isLinked = (0, import_node_fs35.existsSync)(gitFile) && (0, import_node_fs35.statSync)(gitFile).isFile();
       if (apply && !isLinked) {
         return fail("worktree land: run from inside the linked worktree you want to land (this is the primary checkout)");
       }
@@ -26922,7 +27253,7 @@ async function gatherWorktreeContext() {
   const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path34.dirname)((0, import_node_path34.dirname)(worktreeGitRoot)) : repoRoot2;
   const wtRoot = siblingMmiWorktreesRoot(primaryRepoRoot);
   let orphanDirs = [];
-  if ((0, import_node_fs34.existsSync)(wtRoot)) {
+  if ((0, import_node_fs35.existsSync)(wtRoot)) {
     orphanDirs = scanOrphanDirs(wtRoot, worktreeGitRoot, {
       ...defaultOrphanDirScanDeps,
       listDirs: (root) => worktreeScanDirs(root, primaryRepoRoot, defaultOrphanDirScanDeps.listDirs, isRepoCheckoutDir)
@@ -26948,7 +27279,7 @@ ${err.stderr ?? ""}`;
 }
 
 // src/issue-commands.ts
-var import_node_fs35 = require("node:fs");
+var import_node_fs36 = require("node:fs");
 var import_node_crypto6 = require("node:crypto");
 var ghRunner = async (args, timeoutMs) => (await execFileP2("gh", args, { timeout: timeoutMs })).stdout;
 var ReparentConflictError = class extends Error {
@@ -26966,7 +27297,7 @@ async function editIssue(client, options, deps = {}) {
   const url = `https://github.com/${repo}/issues/${parsed.number}`;
   const patch = {};
   let bodyChanged = false;
-  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs35.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
+  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs36.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
   if (options.titleFile !== void 0) {
     patch.title = await resolveIssueTitle({ title: options.title, titleFile: options.titleFile }, textDeps());
   } else if (options.title !== void 0) {
@@ -27529,7 +27860,7 @@ function extendCreateCommand(issue2, batchAttach) {
     if (opts.batch) {
       let specs;
       try {
-        const raw = (0, import_node_fs35.readFileSync)(opts.batch, "utf8");
+        const raw = (0, import_node_fs36.readFileSync)(opts.batch, "utf8");
         specs = JSON.parse(raw);
         if (!Array.isArray(specs)) throw new Error("batch file must contain a JSON array");
       } catch (e) {
@@ -27603,7 +27934,7 @@ ${lines}`, {
 }
 
 // src/train-commands.ts
-var import_node_fs36 = require("node:fs");
+var import_node_fs37 = require("node:fs");
 var import_node_path35 = require("node:path");
 
 // src/train-status.ts
@@ -27644,7 +27975,7 @@ function formatTrainStatus(r) {
 // src/train-commands.ts
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs36.readFileSync)((0, import_node_path35.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs37.readFileSync)((0, import_node_path35.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -27790,7 +28121,7 @@ function registerDeployCommands(program3) {
 }
 
 // src/discovery-commands.ts
-var import_node_fs37 = require("node:fs");
+var import_node_fs38 = require("node:fs");
 var import_node_os13 = require("node:os");
 var import_node_path36 = require("node:path");
 var GC_GH_TIMEOUT_MS3 = 2e4;
@@ -27982,8 +28313,8 @@ async function collectOnboardStatus(opts = {}) {
   }
   const home = (0, import_node_os13.homedir)();
   const plugin = onboardPluginGate({
-    readKnown: () => readFileSyncSafe((0, import_node_path36.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs37.readFileSync),
-    readSettings: () => readFileSyncSafe((0, import_node_path36.join)(home, ".claude", "settings.json"), import_node_fs37.readFileSync)
+    readKnown: () => readFileSyncSafe((0, import_node_path36.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs38.readFileSync),
+    readSettings: () => readFileSyncSafe((0, import_node_path36.join)(home, ".claude", "settings.json"), import_node_fs38.readFileSync)
   });
   return { track, board, registry: registry2, secrets, plugin, estateCli, nextCommand };
 }
@@ -29246,6 +29577,63 @@ var surfaces_default = {
         "Some read, write, and web-fetch tool outputs are not rewriteable by the host.",
         "Provisioned skills and agents become discoverable only after a fresh session."
       ]
+    },
+    {
+      token: "jervcode",
+      displayName: "JervCode",
+      lifecycle: "active",
+      artifactIds: ["mmi-pi-plugin", "mmi-skills", "mmi-cli"],
+      plannedArtifactIds: [],
+      assembly: {
+        mode: "source-tree",
+        rootPath: ".",
+        sync: []
+      },
+      install: {
+        mechanism: "managed-config",
+        locator: "~/.pi/agent/settings.json"
+      },
+      upgrade: {
+        mechanism: "reinstall",
+        reload: "restart"
+      },
+      skills: {
+        delivery: "manifest",
+        sourceSurfaceId: "mmi-skills",
+        artifactId: "mmi-skills",
+        invocation: {
+          entry: "/mmi",
+          any: "/<skill>"
+        }
+      },
+      hooks: {
+        adapterPath: ".pi-plugin/package.json",
+        sourceSurfaceId: "mmi-hook-policy",
+        gates: [],
+        probe: "unsupported",
+        execution: "unsupported",
+        preToolUse: "unsupported",
+        postToolOutput: "unsupported",
+        finalOutput: "unsupported"
+      },
+      cli: {
+        delivery: "standalone",
+        artifactId: "mmi-cli"
+      },
+      ownership: {
+        trust: "host",
+        cache: "host",
+        repair: "mmi-cli"
+      },
+      certification: {
+        hostCommand: "jervcode",
+        versionArgs: ["--version"]
+      },
+      enforcementCeilings: [
+        "Pi reads the user package set from ~/.pi/agent/settings.json at launch: a live seat keeps the packages it started with, the mmi-cli heal refuses to edit the file while PI_SESSION_ID is set, and a new registration reaches JervCode only on the next launch.",
+        "No hook event is wired on this host \u2014 there is no PreToolUse deny gate, no vault-edit gate, and no secret-output redaction or detection; the hook policy artifact does not ship here.",
+        "The settings entry points into a version-pinned plugin cache clone; a release that mints a new clone leaves the entry stale until `mmi-cli doctor` re-points it, and Pi keeps loading the dead path silently until then."
+      ]
     }
   ],
   surfaces: [
@@ -29556,12 +29944,38 @@ var surfaces_default = {
       applicability: "master DM notifications only; chatops out by default",
       versionCoordinated: false,
       publishVisibility: "n/a"
+    },
+    {
+      id: "mmi-pi-plugin",
+      classification: "packaging",
+      kind: "plugin",
+      ownerPath: ".pi-plugin/package.json",
+      deliveryPath: ".pi-plugin/package.json",
+      delivery: "release",
+      applicability: "JervCode (branded launcher of the pi coding agent). A generated pi package wrapper whose `pi` block references the canonical skills tree by relative path inside the shipped clone \u2014 content is never copied. mmi-cli registers the wrapper directory as a local-path entry in the `packages` array of ~/.pi/agent/settings.json.",
+      versionCoordinated: true,
+      surfaceToken: "jervcode",
+      versionPaths: [
+        { path: ".pi-plugin/package.json", pointer: "version" }
+      ],
+      artifactIdentity: {
+        kind: "sha256-tree",
+        paths: [".pi-plugin/package.json", "skills"]
+      },
+      verify: [
+        {
+          command: "node",
+          args: ["scripts/check-jervcode-consumer.mjs"],
+          expected: "JervCode consumer fitness: clean ({version})"
+        }
+      ],
+      publishVisibility: "public"
     }
   ]
 };
 
 // src/surface-doctor.ts
-var TOKENS = /* @__PURE__ */ new Set(["claude", "codex", "kimi", "cursor", "kilo"]);
+var TOKENS = /* @__PURE__ */ new Set(["claude", "codex", "kimi", "cursor", "kilo", "jervcode"]);
 function isActiveToken(value) {
   return TOKENS.has(value);
 }
@@ -29677,6 +30091,10 @@ function surfaceRestartAction(descriptor) {
 }
 
 // src/doctor-clean.ts
+function doctorSnapshotFingerprint(checks) {
+  const rows = [...checks].sort((a, b) => `${a.id ?? a.label}`.localeCompare(`${b.id ?? b.label}`)).map((c) => [c.id ?? c.label, c.ok, c.verified ?? null, c.detail ?? null]);
+  return JSON.stringify(rows);
+}
 function checkGithubAuth(probe) {
   const login = probe.login?.trim();
   const authed = Boolean(login);
@@ -30043,7 +30461,7 @@ function gcReapable(plan) {
 }
 async function runDoctorClean(opts, io, deps) {
   const full = !opts.fast && !opts.banner && !opts.preflight;
-  const applyEnv = full || Boolean(opts.preflight);
+  const applyEnv = full;
   const applyRepo = full && opts.repoWrites !== false;
   const lane = {
     banner: Boolean(opts.banner),
@@ -30070,11 +30488,14 @@ async function runDoctorClean(opts, io, deps) {
   const checks = [];
   let restartPending = false;
   const streamed = /* @__PURE__ */ new Set();
+  const streamedLines = /* @__PURE__ */ new Set();
+  const alreadyShown = (c) => streamed.has(c) || streamedLines.has(renderCheckLine(c));
   const worthPrinting = (c) => Boolean(opts.verbose) || !c.ok || Boolean(c.warn);
   const emitNow = (check) => {
     checks.push(check);
-    if (opts.json || !worthPrinting(check)) return;
+    if (opts.json || !streamingPass || !worthPrinting(check)) return;
     streamed.add(check);
+    streamedLines.add(renderCheckLine(check));
     io.log(renderCheckLine(check));
     if (opts.verbose) for (const evidence of check.verbose ?? []) io.log(`${VERBOSE_INDENT}${evidence}`);
   };
@@ -30086,13 +30507,35 @@ async function runDoctorClean(opts, io, deps) {
   };
   const releasedNote = deps.releasedVersionNote?.();
   let pluginHealed = false;
+  const spentHeals = /* @__PURE__ */ new Set();
+  let healChangedThisPass = false;
+  const markHealChanged = () => {
+    healChangedThisPass = true;
+  };
+  const traceHeal = (kind) => opts.healTrace?.(kind);
+  const spendOnce = (kind) => {
+    if (spentHeals.has(kind)) return false;
+    spentHeals.add(kind);
+    return true;
+  };
+  const spentRows = /* @__PURE__ */ new Map();
   async function runPluginRow() {
     if (!registryEvidence) return;
+    const spentRow = spentRows.get("plugin-chain");
+    if (spentRow) {
+      emitNow(spentRow);
+      if (registryEvidence.descriptor.trustOwner === "operator" && (registryEvidence.guardState === "healthy" || pluginHealed)) {
+        const trust = checkCodexHookTrust(deps.pluginTrustState?.(), registryEvidence.descriptor.displayName);
+        if (trust) emitNow(trust);
+      }
+      return;
+    }
     const diagnosis = diagnoseSurface({ ...registryEvidence, releasedVersion: released });
     const repair = planSurfaceRepair(diagnosis);
-    if (applyEnv && deps.healPlugin && repair?.supported) {
+    if (applyEnv && deps.healPlugin && repair?.supported && spendOnce("plugin-chain")) {
       const { descriptor } = registryEvidence;
       healIntent(`${descriptor.displayName} plugin \u2014 healing via ${descriptor.installMechanism} (${descriptor.installLocator})`);
+      traceHeal("plugin-chain");
       const heal = await deps.healPlugin(healStep);
       pluginHealed = heal.ok;
       const row = buildSurfaceDoctorCheck(diagnoseSurface({
@@ -30105,7 +30548,12 @@ async function runDoctorClean(opts, io, deps) {
         row.fix = `${heal.detail} \u2014 another doctor on this machine is healing it now; re-run once it finishes`;
       }
       emitNow(row);
+      if (heal.skipped) spentHeals.delete("plugin-chain");
       if (!heal.skipped) restartPending = true;
+      if (heal.ok && !heal.skipped) {
+        markHealChanged();
+        spentRows.set("plugin-chain", row);
+      }
     } else if (diagnosis.state !== "skipped") {
       const row = buildSurfaceDoctorCheck(diagnosis);
       emitNow(row);
@@ -30117,13 +30565,18 @@ async function runDoctorClean(opts, io, deps) {
     }
   }
   async function runCliRow() {
+    const spentRow = spentRows.get("cli-self-update");
+    if (spentRow) {
+      emitNow(spentRow);
+      return;
+    }
     const missing = deps.missingCliCommands?.() ?? [];
     const cliInput = { currentVersion: deps.currentCliVersion(), releasedVersion: released };
     const cliReport = buildVersionLagReport(cliInput);
     const capabilityGap = missing.length > 0 && Boolean(cliReport.releasedVersion);
     const shouldUpdate = Boolean(
       applyEnv && deps.updateCli && (versionAutoUpdateAction(cliReport) === "npm" || capabilityGap)
-    );
+    ) && spendOnce("cli-self-update");
     if (!shouldUpdate) {
       const cli = checkCliVersion(cliInput, releasedNote);
       if (cli) {
@@ -30153,29 +30606,40 @@ async function runDoctorClean(opts, io, deps) {
     const target = cliReport.releasedVersion;
     const intent = capabilityGap && cliReport.ok ? `mmi-cli \u2014 self-updating to ${target} via npm install -g (missing commands: ${missing.join(", ")})` : `mmi-cli \u2014 self-updating ${cliReport.currentVersion} \u2192 ${target} via npm install -g`;
     healIntent(intent);
+    traceHeal("cli-self-update");
     const heal = await deps.updateCli(target, healStep);
+    if (heal.skipped) spentHeals.delete("cli-self-update");
+    if (heal.ok && !heal.skipped) markHealChanged();
     const healEvidence = [
       `running:  ${cliReport.currentVersion}`,
       `published: ${target ?? "(unknown)"}`,
       `heal: ${heal.detail}`,
       ...missing.length ? [`missing commands before heal: ${missing.join(", ")}`] : []
     ];
-    emitNow(heal.ok ? {
-      id: "cli-version",
-      ok: true,
-      label: "mmi-cli",
-      detail: capabilityGap && cliReport.ok ? `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g (was missing: ${missing.join(", ")}); the next mmi-cli invocation runs the new version` : `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g; the next mmi-cli invocation runs the new version`,
-      verbose: healEvidence
-    } : {
-      id: "cli-version",
-      ok: false,
-      label: "mmi-cli",
-      detail: capabilityGap && cliReport.ok ? `missing commands: ${missing.join(", ")}` : `${cliReport.currentVersion} \u2192 ${target}`,
-      // #3489: same split as the plugin heal above — a lock-contention skip is not this run's gap.
-      ...heal.skipped ? { reportOnly: true } : {},
-      fix: heal.skipped ? `${heal.detail} \u2014 another doctor on this machine is updating it now; re-run once it finishes` : `self-update failed (${heal.detail}) \u2014 run \`${cliUpdateCommand(target)}\``,
-      verbose: healEvidence
-    });
+    if (heal.ok) {
+      const healedRow = {
+        id: "cli-version",
+        ok: true,
+        label: "mmi-cli",
+        detail: capabilityGap && cliReport.ok ? `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g (was missing: ${missing.join(", ")}); the next mmi-cli invocation runs the new version` : `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g; the next mmi-cli invocation runs the new version`,
+        verbose: healEvidence
+      };
+      spentRows.set("cli-self-update", healedRow);
+      emitNow(healedRow);
+      return;
+    }
+    emitNow(
+      {
+        id: "cli-version",
+        ok: false,
+        label: "mmi-cli",
+        detail: capabilityGap && cliReport.ok ? `missing commands: ${missing.join(", ")}` : `${cliReport.currentVersion} \u2192 ${target}`,
+        // #3489: same split as the plugin heal above — a lock-contention skip is not this run's gap.
+        ...heal.skipped ? { reportOnly: true } : {},
+        fix: heal.skipped ? `${heal.detail} \u2014 another doctor on this machine is updating it now; re-run once it finishes` : `self-update failed (${heal.detail}) \u2014 run \`${cliUpdateCommand(target)}\``,
+        verbose: healEvidence
+      }
+    );
   }
   async function runGithubAuthRow() {
     emitNow(checkGithubAuth({ login, ghInstalled: ghInstalled2, reach }));
@@ -30197,6 +30661,8 @@ async function runDoctorClean(opts, io, deps) {
     if (gi.ok) {
       emitNow({ ok: true, id: "gitignore-block", label: "gitignore block", verbose: giEvidence });
     } else if (applyRepo && gi.content && deps.writeGitignore(gi.content)) {
+      traceHeal("repo-cleans");
+      markHealChanged();
       emitNow({ ok: true, id: "gitignore-block", label: "gitignore block", detail: "rewrote managed block", verbose: giEvidence });
       restartPending = true;
     } else {
@@ -30204,8 +30670,100 @@ async function runDoctorClean(opts, io, deps) {
     }
   }
   async function runPluginCacheRow() {
+    if (applyEnv && deps.prunePluginCache && spendOnce("cache-prune")) {
+      const cache = deps.pluginCache();
+      if (cache.stale.length === 0 && cache.staging.length === 0) {
+        emitNow(checkPluginCache(cache));
+        return;
+      }
+      healIntent(`plugin cache \u2014 pruning ${cache.stale.length} superseded version(s) (guarded)`);
+      traceHeal("cache-prune");
+      const outcome = deps.prunePluginCache();
+      if (outcome.removed.length) markHealChanged();
+      const evidence = [
+        ...outcome.removed.map((v) => `pruned: ${v}`),
+        ...outcome.held.map((h) => `still held: ${h.version} (${h.error}) \u2014 never forced`),
+        ...outcome.kept.map((k) => `kept: ${k.version} \u2014 ${k.reason}`)
+      ];
+      if (outcome.held.length === 0) {
+        emitNow({
+          id: "plugin-cache",
+          ok: true,
+          label: "plugin cache",
+          detail: outcome.removed.length ? `pruned ${outcome.removed.length} superseded version(s)` : "nothing provably superseded (guards kept every candidate)",
+          verbose: evidence
+        });
+      } else {
+        emitNow({
+          id: "plugin-cache",
+          ok: false,
+          reportOnly: true,
+          label: "plugin cache",
+          detail: `${outcome.removed.length} pruned; ${outcome.held.length} still held by a live session`,
+          fix: "close the session holding it and re-run `mmi-cli doctor`",
+          verbose: evidence
+        });
+      }
+      return;
+    }
     emitNow(checkPluginCache(deps.pluginCache()));
   }
+  async function runPiPluginRow() {
+    const state = deps.piPluginState?.();
+    if (!state) return;
+    if (!state.settingsReadable) {
+      emitNow({
+        id: "pi-plugin",
+        ok: false,
+        reportOnly: true,
+        label: "pi plugin",
+        detail: "settings.json unreadable",
+        fix: "repair ~/.pi/agent/settings.json, then re-run doctor",
+        verbose: ["~/.pi/agent exists but settings.json could not be parsed \u2014 fail closed, nothing written"]
+      });
+      return;
+    }
+    const current = state.registeredPath === state.expectedPath;
+    if (current) {
+      emitNow({
+        id: "pi-plugin",
+        ok: true,
+        label: "pi plugin",
+        detail: "package registered in settings.json",
+        verbose: [`registered: ${state.registeredPath}`]
+      });
+      return;
+    }
+    if (applyEnv && deps.healPiPlugin) {
+      healIntent(`pi plugin \u2014 registering ${state.expectedPath}`);
+      traceHeal("env-heals");
+      const heal = deps.healPiPlugin();
+      if (heal.ok) markHealChanged();
+      emitNow(heal.ok ? {
+        id: "pi-plugin",
+        ok: true,
+        label: "pi plugin",
+        detail: state.registeredPath ? "replaced stale package path" : "registered package in settings.json",
+        verbose: [`was: ${state.registeredPath ?? "(absent)"}`, `now: ${state.expectedPath}`, `heal: ${heal.detail}`]
+      } : {
+        id: "pi-plugin",
+        ok: false,
+        label: "pi plugin",
+        detail: state.registeredPath ? "stale package path" : "package not registered",
+        fix: `heal failed (${heal.detail}) \u2014 add ${state.expectedPath} to packages[] in ~/.pi/agent/settings.json`,
+        verbose: [`expected: ${state.expectedPath}`]
+      });
+      return;
+    }
+    emitNow({
+      id: "pi-plugin",
+      ok: false,
+      label: "pi plugin",
+      detail: state.registeredPath ? "stale package path" : "package not registered",
+      fix: "run `mmi-cli doctor` to register the mmi .pi-plugin in ~/.pi/agent/settings.json",
+      verbose: [`expected: ${state.expectedPath}`, `registered: ${state.registeredPath ?? "(absent)"}`]
+    });
+  }
   async function runSessionPayloadRow() {
     const payload = checkSessionPayload(deps.sessionPayload());
     if (payload) emitNow(payload);
@@ -30215,7 +30773,11 @@ async function runDoctorClean(opts, io, deps) {
       const healed = deps.healMarketplacePins();
       if (healed) {
         healIntent(`marketplace pins \u2014 ${healed.detail}`);
-        if (healed.wrote) restartPending = true;
+        if (healed.wrote) {
+          traceHeal("env-heals");
+          markHealChanged();
+          restartPending = true;
+        }
       }
     }
     for (const row of deps.marketplaceRows()) emitNow(row);
@@ -30258,6 +30820,8 @@ async function runDoctorClean(opts, io, deps) {
     let healedWrite = false;
     if (applyRepo && probe?.drift && deps.healDocsIndex) {
       healIntent("docs index \u2014 regenerating docs/index.md");
+      traceHeal("repo-cleans");
+      markHealChanged();
       try {
         probe = deps.healDocsIndex(root);
         healedWrite = !probe.drift;
@@ -30478,7 +31042,11 @@ async function runDoctorClean(opts, io, deps) {
             `skipped: ${sweep.skipped}`
           ]
         });
-        if (sweep.removed.length) restartPending = true;
+        if (sweep.removed.length) {
+          traceHeal("repo-cleans");
+          markHealChanged();
+          restartPending = true;
+        }
       } catch (e) {
         const message = e instanceof Error ? e.message : String(e);
         emitNow({
@@ -30516,7 +31084,11 @@ async function runDoctorClean(opts, io, deps) {
             ...r.failed.map((f) => `FAILED: ${f}`)
           ] : ["nothing reapable"]
         });
-        if (reaped) restartPending = true;
+        if (reaped) {
+          traceHeal("repo-cleans");
+          markHealChanged();
+          restartPending = true;
+        }
       } else {
         const n = gcReapable(plan);
         const gcEvidence = [
@@ -30543,36 +31115,62 @@ async function runDoctorClean(opts, io, deps) {
       const applied = deps.executeScratchGc(repoRoot2, { apply: true });
       const pruned = applied.applied?.pruned.length ?? 0;
       emitNow({ id: "scratch", ok: true, label: "scratch", detail: pruned ? `removed ${pruned} aged item(s)` : "nothing stale", verbose: scratchEvidence });
-      if (pruned) restartPending = true;
+      if (pruned) {
+        traceHeal("repo-cleans");
+        markHealChanged();
+        restartPending = true;
+      }
     } else {
       emitNow(scratch.plan.safeAuto.length === 0 ? { id: "scratch", ok: true, label: "scratch", verbose: scratchEvidence } : { id: "scratch", ok: false, label: "scratch", detail: `${scratch.plan.safeAuto.length} aged item(s)`, fix: "run `mmi-cli doctor` (without --no-repo-writes)", verbose: scratchEvidence });
     }
   }
   const prefix = [
-    { id: "plugin", when: true, run: runPluginRow },
     { id: "cli-version", when: true, run: runCliRow },
+    { id: "plugin", when: true, run: runPluginRow },
+    { id: "plugin-cache", when: true, run: runPluginCacheRow },
     { id: "github-auth", when: true, run: runGithubAuthRow },
     { id: "aws-identity", when: true, run: runAwsRow },
     { id: "repo-worktrees", when: true, run: runRepoWorktreesRow },
-    { id: "gitignore-block", when: isOrgRepo, run: runGitignoreRow },
-    { id: "plugin-cache", when: true, run: runPluginCacheRow },
     { id: "sessionstart-payload", when: true, run: runSessionPayloadRow },
-    { id: "marketplace", when: true, run: runMarketplaceRows }
-  ];
-  for (const entry of prefix) if (entry.when) await entry.run();
-  const parallel = [
-    { id: "docs-index", when: isOrgRepo && lane.full, run: runDocsIndexRow },
-    // Hub cloud probe (short timeout). Full lane + `--self`; `--preflight` may emit command-absent only (#4156).
-    { id: "repo-index", when: isOrgRepo && (lane.full || Boolean(opts.self) || lane.preflight), run: runRepoIndexRow },
-    { id: "board-doctor", when: isOrgRepo && lane.full, run: runBoardDoctorRow },
-    { id: "schedules-drift", when: isOrgRepo && lane.full, run: runSchedulesDriftRow }
+    { id: "marketplace", when: true, run: runMarketplaceRows },
+    { id: "pi-plugin", when: true, run: runPiPluginRow },
+    { id: "gitignore-block", when: isOrgRepo, run: runGitignoreRow }
   ];
-  await Promise.all(parallel.filter((entry) => entry.when).map((entry) => entry.run()));
-  const suffix = [
-    { id: "train-branches", when: isOrgRepo && lane.full, run: runTrainSyncRow },
-    { id: "housekeeper", when: isOrgRepo && lane.full, run: runHousekeeperRows }
-  ];
-  for (const entry of suffix) if (entry.when) await entry.run();
+  const maxPasses = 3;
+  let passes = 0;
+  let prevFingerprint;
+  let streamingPass = true;
+  for (; ; ) {
+    passes += 1;
+    opts.onPass?.(passes);
+    checks.length = 0;
+    healChangedThisPass = false;
+    for (const entry of prefix) if (entry.when) await entry.run();
+    const parallelRows = [
+      { id: "docs-index", when: isOrgRepo && lane.full, run: runDocsIndexRow },
+      // Hub cloud probe (short timeout). Full lane + `--self`; `--preflight` may emit command-absent only (#4156).
+      { id: "repo-index", when: isOrgRepo && (lane.full || Boolean(opts.self) || lane.preflight), run: runRepoIndexRow },
+      { id: "board-doctor", when: isOrgRepo && lane.full, run: runBoardDoctorRow },
+      { id: "schedules-drift", when: isOrgRepo && lane.full, run: runSchedulesDriftRow }
+    ];
+    await Promise.all(parallelRows.filter((entry) => entry.when).map((entry) => entry.run()));
+    const suffix = [
+      { id: "train-branches", when: isOrgRepo && lane.full, run: runTrainSyncRow },
+      { id: "housekeeper", when: isOrgRepo && lane.full, run: runHousekeeperRows }
+    ];
+    for (const entry of suffix) if (entry.when) await entry.run();
+    if (!lane.full) break;
+    const fingerprint = doctorSnapshotFingerprint(checks);
+    const stillActionable = checks.some((c) => !c.ok && !c.reportOnly);
+    if (!healChangedThisPass || !stillActionable || fingerprint === prevFingerprint) break;
+    if (passes >= maxPasses) {
+      healIntent(`convergence \u2014 pass bound (${maxPasses}) reached with rows still moving; re-run doctor to continue`);
+      break;
+    }
+    prevFingerprint = fingerprint;
+    streamingPass = false;
+    healIntent(`convergence \u2014 pass ${passes} healed; re-measuring (pass ${passes + 1}/${maxPasses})`);
+  }
   const exitCode = doctorReportExitCode(checks);
   if (opts.json) {
     const payload = opts.verbose ? checks : checks.map(({ verbose: _evidence, ...check }) => check);
@@ -30585,7 +31183,7 @@ async function runDoctorClean(opts, io, deps) {
     return exitCode;
   }
   if (opts.banner) {
-    const actionable = checks.filter((c) => (!c.ok || c.warn) && !streamed.has(c));
+    const actionable = checks.filter((c) => (!c.ok || c.warn) && !alreadyShown(c));
     for (const c of actionable) {
       io.log(renderReport([c], { restartPending: false }));
       if (opts.verbose) for (const evidence of c.verbose ?? []) io.log(`${VERBOSE_INDENT}${evidence}`);
@@ -30593,7 +31191,7 @@ async function runDoctorClean(opts, io, deps) {
     if (restartPending) io.log(`\u21BB ${restartAction.charAt(0).toUpperCase()}${restartAction.slice(1)} to finish.`);
     return 0;
   }
-  const rest = checks.filter((c) => !streamed.has(c));
+  const rest = checks.filter((c) => !alreadyShown(c));
   const shown = opts.verbose ? rest : rest.filter((c) => !c.ok || c.warn);
   const lines = [];
   for (const check of shown) {
@@ -30685,7 +31283,7 @@ function ghAccountCaveat(announcedLogin, accounts) {
 }
 
 // src/doctor-io.ts
-var import_node_fs38 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_os14 = require("node:os");
 var import_node_path37 = require("node:path");
 var import_node_child_process17 = require("node:child_process");
@@ -30695,7 +31293,7 @@ var MMI_PLUGIN_ID2 = "mmi@mutmutco";
 function installedClaudePluginVersion() {
   try {
     const file = JSON.parse(
-      (0, import_node_fs38.readFileSync)((0, import_node_path37.join)((0, import_node_os14.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
+      (0, import_node_fs39.readFileSync)((0, import_node_path37.join)((0, import_node_os14.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
     );
     const versions = (file.plugins?.[MMI_PLUGIN_ID2] ?? []).map((r) => r.version).filter((v) => Boolean(v));
     if (versions.length === 0) return void 0;
@@ -30706,7 +31304,7 @@ function installedClaudePluginVersion() {
 }
 function manifestVersion(path2) {
   try {
-    const manifest = JSON.parse((0, import_node_fs38.readFileSync)(path2, "utf8"));
+    const manifest = JSON.parse((0, import_node_fs39.readFileSync)(path2, "utf8"));
     return typeof manifest.version === "string" && manifest.version.trim() ? manifest.version.trim() : void 0;
   } catch {
     return void 0;
@@ -30716,7 +31314,7 @@ function installedSurfacePluginVersion(surface) {
   const token = surfaceToken(surface);
   if (token === "kilo") {
     try {
-      const stamp = (0, import_node_fs38.readFileSync)((0, import_node_path37.join)((0, import_node_os14.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
+      const stamp = (0, import_node_fs39.readFileSync)((0, import_node_path37.join)((0, import_node_os14.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
       return stamp || void 0;
     } catch {
       return void 0;
@@ -30725,6 +31323,11 @@ function installedSurfacePluginVersion(surface) {
   if (token === "cursor") {
     return manifestVersion((0, import_node_path37.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
   }
+  if (token === "jervcode") {
+    const entry = mmiPiWrapperEntry();
+    if (!entry) return void 0;
+    return manifestVersion((0, import_node_path37.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
+  }
   if (token === "kimi") {
     return manifestVersion((0, import_node_path37.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
   }
@@ -30770,7 +31373,7 @@ function readGitignore() {
   const path2 = gitignorePath();
   if (path2 === null) return null;
   try {
-    return (0, import_node_fs38.readFileSync)(path2, "utf8");
+    return (0, import_node_fs39.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -30779,7 +31382,7 @@ function writeGitignore(content) {
   const path2 = gitignorePath();
   if (path2 === null) return false;
   try {
-    (0, import_node_fs38.writeFileSync)(path2, content, "utf8");
+    (0, import_node_fs39.writeFileSync)(path2, content, "utf8");
     return true;
   } catch {
     return false;
@@ -30803,7 +31406,7 @@ async function repoRoot() {
 }
 function hasRepoLocalWorktrees() {
   const root = worktreeRootSync();
-  return root !== null && (0, import_node_fs38.existsSync)((0, import_node_path37.join)(root, ".worktrees"));
+  return root !== null && (0, import_node_fs39.existsSync)((0, import_node_path37.join)(root, ".worktrees"));
 }
 
 // src/index.ts
@@ -30839,8 +31442,8 @@ ${r.stderr ?? ""}`).catch(() => "");
 function ghMultiAccountCaveat(announcedLogin) {
   try {
     const hostsPath = ghHostsConfigPath(process.env, process.platform);
-    if (!hostsPath || !(0, import_node_fs39.existsSync)(hostsPath)) return void 0;
-    return ghAccountCaveat(announcedLogin, parseGhHostsAccounts((0, import_node_fs39.readFileSync)(hostsPath, "utf8")));
+    if (!hostsPath || !(0, import_node_fs40.existsSync)(hostsPath)) return void 0;
+    return ghAccountCaveat(announcedLogin, parseGhHostsAccounts((0, import_node_fs40.readFileSync)(hostsPath, "utf8")));
   } catch {
     return void 0;
   }
@@ -30963,6 +31566,45 @@ function mmiDoctorDeps(opts = {}) {
         stagingBytes: plan.stagingBytes
       };
     },
+    // #4199: guarded auto-prune (docs/doctor-contract.md § Guarded cache prune). The plan is rebuilt
+    // HERE, from live evidence, immediately before the delete — plan is the revalidation. Guards live in
+    // `selectPrunablePluginVersions` (never running/newest/installed; unreadable evidence keeps the dir,
+    // named). No `force`: a dir whose delete refuses (a session holds it) surfaces as `held`, never freed
+    // out from under the holder.
+    prunePluginCache: () => {
+      const surface = detectSurface(process.env);
+      const configRoot = surfaceConfigRoot(surface);
+      const running = surface === "codex" ? installedActivePluginVersion(surface) : runningPluginVersion(process.env, resolveClientVersion());
+      const installed = installedActivePluginVersion(surface);
+      const plan = buildPluginCachePlan(
+        (0, import_node_os15.homedir)(),
+        running,
+        pluginCacheFsDeps(configRoot, () => 0),
+        { configRoot, includeStaging: surface !== "codex", installedVersion: installed }
+      );
+      const result = applyPluginCachePlan(
+        plan,
+        (p) => (0, import_node_fs40.rmSync)(p, { recursive: true }),
+        stagingApplyFsGuard(configRoot)
+      );
+      return {
+        removed: [...result.removed, ...result.removedStaging],
+        held: [
+          ...result.failed,
+          ...result.failedStaging.map((f) => ({ version: f.name, error: f.error }))
+        ],
+        kept: [
+          ...plan.keep.map((version) => ({
+            version,
+            reason: version === running ? "running" : version === installed ? "installed" : "newest / keep policy"
+          })),
+          ...result.skippedStaging.map((s) => ({ version: s.name, reason: s.reason }))
+        ]
+      };
+    },
+    // #4201: mmi `.pi-plugin` registration in ~/.pi/agent/settings.json — mirror of jerv-cli's own heal.
+    piPluginState: () => readPiPluginState((0, import_node_os15.homedir)(), process.env),
+    healPiPlugin: () => healPiPluginRegistration((0, import_node_os15.homedir)(), process.env),
     // #3470: what the SessionStart hook LAST emitted, measured at emission by the session-start verb below.
     // A local record read ? cheap enough for every lane, including the banner.
     sessionPayload: () => readSessionPayload(process.cwd()),
@@ -30974,8 +31616,8 @@ function mmiDoctorDeps(opts = {}) {
         const home = (0, import_node_os15.homedir)();
         const rows = marketplaceRows(
           MMI_MARKETPLACE_NAME,
-          readFileSyncSafe((0, import_node_path38.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs39.readFileSync),
-          readFileSyncSafe((0, import_node_path38.join)(home, ".claude", "settings.json"), import_node_fs39.readFileSync),
+          readFileSyncSafe((0, import_node_path38.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs40.readFileSync),
+          readFileSyncSafe((0, import_node_path38.join)(home, ".claude", "settings.json"), import_node_fs40.readFileSync),
           // #3974: this CLI heals these rows, so report mode names the doctor run rather than the hand
           // edit. Unconditional ? it is a fact about mmi-cli, not about the lane this run is on.
           true
@@ -31025,7 +31667,7 @@ function mmiDoctorDeps(opts = {}) {
     // adopted the generated routing index (MMG-Unlive: `docs/Archive/**` only, no index, no gate.yml) would
     // get a permanent ? demanding an artifact it never asked for.
     docsIndexState: (root) => {
-      if (!(0, import_node_fs39.existsSync)((0, import_node_path38.join)(root, DOCS_INDEX_PATH))) return void 0;
+      if (!(0, import_node_fs40.existsSync)((0, import_node_path38.join)(root, DOCS_INDEX_PATH))) return void 0;
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -31034,7 +31676,7 @@ function mmiDoctorDeps(opts = {}) {
     },
     // #4168: working-tree heal — write if drifted, then re-check. Commit remains the operator's step.
     healDocsIndex: (root) => {
-      if (!(0, import_node_fs39.existsSync)((0, import_node_path38.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
+      if (!(0, import_node_fs40.existsSync)((0, import_node_path38.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -31369,18 +32011,18 @@ program2.hook("preAction", async (_thisCommand, actionCommand) => {
 var rules = program2.command("rules").description("org-managed .gitignore delivery");
 rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").option("--json", "machine-readable output").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
   const path2 = (0, import_node_path38.join)(process.cwd(), ".gitignore");
-  const current = (0, import_node_fs39.existsSync)(path2) ? (0, import_node_fs39.readFileSync)(path2, "utf8") : null;
+  const current = (0, import_node_fs40.existsSync)(path2) ? (0, import_node_fs40.readFileSync)(path2, "utf8") : null;
   const plan = planManagedGitignore(current);
   const drift = [...plan.added.map((l) => `+${l}`), ...plan.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
   if (opts.json) {
-    if (opts.write && plan.changed) (0, import_node_fs39.writeFileSync)(path2, plan.content, "utf8");
+    if (opts.write && plan.changed) (0, import_node_fs40.writeFileSync)(path2, plan.content, "utf8");
     console.log(JSON.stringify(plan, null, 2));
     if (!opts.write && plan.changed) process.exitCode = 1;
     return;
   }
   if (opts.write) {
     if (plan.changed) {
-      (0, import_node_fs39.writeFileSync)(path2, plan.content, "utf8");
+      (0, import_node_fs40.writeFileSync)(path2, plan.content, "utf8");
       console.log(`mmi-cli org rules gitignore: updated .gitignore (${drift})`);
     } else {
       console.log("mmi-cli org rules gitignore: up to date");
@@ -31538,7 +32180,7 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
   let root;
   if (o.root !== void 0) {
     root = (0, import_node_path38.resolve)(o.root);
-    if (!(0, import_node_fs39.existsSync)(root) || !(0, import_node_fs39.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
+    if (!(0, import_node_fs40.existsSync)(root) || !(0, import_node_fs40.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
     const gcRepoRoot = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
     if (isPathUnderDirectory(gcRepoRoot, root)) {
       return fail(`worktree gc: --root ${root} contains this checkout ? name a worktrees root, not the repo or an ancestor of it`);
@@ -31617,7 +32259,7 @@ async function currentWorktreeRemovalContext(command, force) {
   };
 }
 async function unprovenWorktreeReason(wtPath, repoRoot2) {
-  if (!(0, import_node_fs39.existsSync)(wtPath)) return `${wtPath} does not exist on disk`;
+  if (!(0, import_node_fs40.existsSync)(wtPath)) return `${wtPath} does not exist on disk`;
   const porcelain = (await execFileP2("git", ["-C", repoRoot2, "worktree", "list", "--porcelain"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
   const registered = parseWorktreePorcelainEntries(porcelain);
   if (!registered.length) {
@@ -31639,26 +32281,26 @@ function makeProvisionDeps(worktreeRoot, quiet, log) {
 function acquireWorktreeSetupLock(worktreeRoot) {
   const lockPath = repoRuntimeStatePath(worktreeRoot, "worktree-setup.lock");
   const take = () => {
-    const fd = (0, import_node_fs39.openSync)(lockPath, "wx");
+    const fd = (0, import_node_fs40.openSync)(lockPath, "wx");
     try {
-      (0, import_node_fs39.writeSync)(fd, String(Date.now()));
+      (0, import_node_fs40.writeSync)(fd, String(Date.now()));
     } finally {
-      (0, import_node_fs39.closeSync)(fd);
+      (0, import_node_fs40.closeSync)(fd);
     }
     return () => {
       try {
-        (0, import_node_fs39.rmSync)(lockPath, { force: true });
+        (0, import_node_fs40.rmSync)(lockPath, { force: true });
       } catch {
       }
     };
   };
   try {
-    (0, import_node_fs39.mkdirSync)((0, import_node_path38.dirname)(lockPath), { recursive: true });
+    (0, import_node_fs40.mkdirSync)((0, import_node_path38.dirname)(lockPath), { recursive: true });
     return take();
   } catch {
     try {
-      if (Date.now() - (0, import_node_fs39.statSync)(lockPath).mtimeMs > WORKTREE_SETUP_LOCK_TTL_MS) {
-        (0, import_node_fs39.rmSync)(lockPath, { force: true });
+      if (Date.now() - (0, import_node_fs40.statSync)(lockPath).mtimeMs > WORKTREE_SETUP_LOCK_TTL_MS) {
+        (0, import_node_fs40.rmSync)(lockPath, { force: true });
         return take();
       }
     } catch {
@@ -31965,7 +32607,7 @@ repoIndex.command("publish").description("publish this checkout's projection to
     return await failGraceful(e.message);
   }
 });
-repoIndex.command("search").description("search Hub cloud by default (lexical/hybrid/semantic); use --local for checkout-only").argument("<query>", "path fragment, symbol, or meaning phrase").option("--limit <n>", "max hits", "20").option("--json", "machine-readable hits").option("--local", "search only the local projection (rebuild if missing)").option("--cloud", "force Hub cloud search (default when not --local)").option("--semantic", "semantic mode (Titan cosine over path+symbols embeddings)").option("--lexical", "lexical-only mode (paths/symbols)").option("--repo <owner/name>", "limit cloud search to one repo").action(async (query, o) => {
+async function runRepoIndexSearchCommand(query, o, defaultMode) {
   try {
     const limit = Math.max(1, Math.min(100, Number(o.limit ?? 20) || 20));
     const useLocal = o.local === true && o.cloud !== true;
@@ -31988,7 +32630,7 @@ repoIndex.command("search").description("search Hub cloud by default (lexical/hy
       }
       return;
     }
-    const mode = o.semantic ? "semantic" : o.lexical ? "lexical" : "hybrid";
+    const mode = o.semantic ? "semantic" : o.lexical ? "lexical" : defaultMode;
     const cfg = await loadConfig();
     const res = await searchRepoIndexCloud(query, { mode, limit, repo: o.repo }, registryClientDeps(cfg));
     if (!res.ok) return await failGraceful(res.error);
@@ -32007,7 +32649,13 @@ repoIndex.command("search").description("search Hub cloud by default (lexical/hy
   } catch (e) {
     return await failGraceful(e.message);
   }
-});
+}
+var REPO_INDEX_SEARCH_WHEN = 'beats grep for cross-repo questions, "where does X happen", and unknown filenames; grep wins inside a known checkout';
+function repoIndexSearchOptions(cmd) {
+  return cmd.option("--limit <n>", "max hits", "20").option("--json", "machine-readable hits").option("--local", "search only the local projection (rebuild if missing)").option("--cloud", "force Hub cloud search (default when not --local)").option("--semantic", "semantic mode (Titan cosine over path+symbols embeddings)").option("--lexical", "lexical-only mode (paths/symbols)").option("--repo <owner/name>", "limit cloud search to one repo");
+}
+repoIndexSearchOptions(repoIndex.command("search").description(`search Hub cloud by default (lexical/hybrid/semantic); use --local for checkout-only \u2014 ${REPO_INDEX_SEARCH_WHEN}`).argument("<query>", "path fragment, symbol, or meaning phrase")).action(async (query, o) => runRepoIndexSearchCommand(query, o, "hybrid"));
+repoIndexSearchOptions(program2.command("find").description(`estate code search across every registered repo (repo-index search, semantic by default) \u2014 ${REPO_INDEX_SEARCH_WHEN}`).argument("<query>", "path fragment, symbol, or meaning phrase")).action(async (query, o) => runRepoIndexSearchCommand(query, o, "semantic"));
 repoIndex.command("status").description("show local and/or cloud repo-index status").option("--json", "machine-readable status").option("--cloud", "query Hub cloud status (estate or --repo)").option("--repo <owner/name>", "cloud status for one repo").action(async (o) => {
   try {
     if (o.cloud || o.repo) {
@@ -32059,11 +32707,10 @@ repoIndex.command("status").description("show local and/or cloud repo-index stat
     return await failGraceful(e.message);
   }
 });
-repoIndex.command("health").description("post-deploy health gate: status + golden lexical/semantic queries (Hub#4149)").option("--live", "hit Hub cloud (status + searches); omit for offline golden-shape check").option("--golden <path>", "golden queries JSON (default: cli/testdata/repo-index-golden-queries.json)").option("--json", "machine-readable findings").action(async (o) => {
+repoIndex.command("health").description("post-deploy health gate: status + golden lexical/semantic queries (Hub#4149)").option("--live", "hit Hub cloud (status + searches); omit for offline golden-shape check").option("--golden <path>", "golden queries JSON (default: the suite bundled with the CLI, so the gate runs from any repo)").option("--json", "machine-readable findings").action(async (o) => {
   try {
-    const root = await repoRoot();
-    const goldenPath = o.golden || defaultGoldenPath(root);
-    const golden = loadGoldenSuite(goldenPath);
+    const goldenPath = o.golden || "bundled repo-index-golden-queries.json";
+    const golden = o.golden ? loadGoldenSuite(o.golden) : defaultGoldenSuite();
     const result = o.live ? await runRepoIndexHealth({
       golden,
       live: {
@@ -32514,7 +33161,7 @@ project.command("set [owner/repo]").description("upsert project META (idempotent
   if (dupe) return fail(`org project set: KEY "${dupe}" was passed to both --var and --set; --set is an alias of --var, so pass each KEY once`);
   if (o.secretsFile) {
     try {
-      vars.push(`secrets=${(0, import_node_fs39.readFileSync)(o.secretsFile, "utf8")}`);
+      vars.push(`secrets=${(0, import_node_fs40.readFileSync)(o.secretsFile, "utf8")}`);
     } catch (e) {
       return fail(`org project set: cannot read --secrets-file ${o.secretsFile}: ${e.message}`);
     }
@@ -33267,10 +33914,10 @@ pr.command("view <number>").description("read a PR as structured JSON (merged st
 });
 async function listCiWorkflowPaths(cwd = process.cwd()) {
   const wfDir = (0, import_node_path38.join)(cwd, ".github", "workflows");
-  if (!(0, import_node_fs39.existsSync)(wfDir)) return [];
-  return (0, import_node_fs39.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
+  if (!(0, import_node_fs40.existsSync)(wfDir)) return [];
+  return (0, import_node_fs40.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
     try {
-      return workflowReportsPrChecks((0, import_node_fs39.readFileSync)((0, import_node_path38.join)(wfDir, name), "utf8"));
+      return workflowReportsPrChecks((0, import_node_fs40.readFileSync)((0, import_node_path38.join)(wfDir, name), "utf8"));
     } catch {
       return true;
     }
@@ -33303,15 +33950,15 @@ function ciAuditDeps() {
     readSeedFile: (path2) => {
       if (!root) return null;
       const fullPath = (0, import_node_path38.join)(root, path2);
-      return (0, import_node_fs39.existsSync)(fullPath) ? (0, import_node_fs39.readFileSync)(fullPath, "utf8") : null;
+      return (0, import_node_fs40.existsSync)(fullPath) ? (0, import_node_fs40.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
 function hubRoot() {
   const fromPkg = (0, import_node_path38.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs39.existsSync)((0, import_node_path38.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs39.existsSync)((0, import_node_path38.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs40.existsSync)((0, import_node_path38.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs40.existsSync)((0, import_node_path38.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 pr.command("ci-policy").description("report merge CI policy: wait-for-checks vs no-ci (for grind/build agents)").option("--json", "machine-readable output").option("--repo <owner/repo>", "target repo (defaults to the current checkout)").action(async (o) => {
@@ -33622,7 +34269,7 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
     localCleanup = await cleanupPrMergeLocalBranch(headRef, {
       beforeWorktrees,
       startingPath,
-      pathExists: (p) => (0, import_node_fs39.existsSync)(p),
+      pathExists: (p) => (0, import_node_fs40.existsSync)(p),
       execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
       teardownWorktreeStage,
       deferredStore,
@@ -34116,19 +34763,19 @@ access.command("audit").description("audit collaborator roles + train-branch pus
     targets = resolution.targets;
   }
   const derivedMatrix = registryProjects ? accessMatrixFromProjects(registryProjects) : {};
-  const fileMatrix = (0, import_node_fs39.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs39.readFileSync)("access-matrix.json", "utf8")) : {};
+  const fileMatrix = (0, import_node_fs40.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs40.readFileSync)("access-matrix.json", "utf8")) : {};
   const matrix = mergeAccessMatrix(fileMatrix, derivedMatrix);
   const derivedContracts = registryProjects ? dataAccessContractsFromProjects(registryProjects) : { consumers: {} };
-  const fileContracts = (0, import_node_fs39.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs39.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
+  const fileContracts = (0, import_node_fs40.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs40.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
   const dataAccess = mergeDataAccessContracts(fileContracts, derivedContracts);
-  const sanctioned = (0, import_node_fs39.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs39.readFileSync)("access-matrix.json", "utf8")) : {};
+  const sanctioned = (0, import_node_fs40.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs40.readFileSync)("access-matrix.json", "utf8")) : {};
   const report = await auditOrgAccess(targets, deps, matrix, dataAccess, sanctioned);
   console.log(o.json ? JSON.stringify(report, null, 2) : renderAccessReport(report));
   if (!report.ok) process.exitCode = 1;
 });
 access.command("capabilities").description("enumerate your effective vault reach ? every credential NAME + tier + scope you can read/use across project + org/master tiers (names only, no values) (#1615)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action((o) => withSecrets((d) => secretsCapabilities(d, o)));
 var isWin2 = process.platform === "win32";
-program2.command("doctor").description("heal CLI/plugin wiring and clean up repo cruft ? repairs run by default (#3975); use --verbose for the full audit checklist").option("--banner", "one-line resume summary; silent when all gates pass").option("--fast", "offline-safe fast lane; read-only, skips slow checks and network probes").option("--preflight", "eager version/plugin-heal (env repairs only ? never the repo working tree) with upfront notice when stale; silent when healthy (#1871)").option("--verbose", "print the evidence behind every check ? probes, resolved paths, versions compared, and the names behind each count (#2977)").option("--guide", "print the MMI Agentic Onboarding guide URL").option("--json", "machine-readable output (an output format ? repairs still run by lane)").option("--apply", "deprecated no-op: repairs run by default now (#3975); kept so older instructions still parse").option("--no-repo-writes", "env/plugin repairs only ? never mutate the repo working tree; report pending managed .gitignore repairs with the follow-up command (for train preflights)").option("--self", "verify CLI/plugin version parity and gh auth reach; suggests plugin-heal on a hard gap (reads the published version, so not offline-safe) (#2689)").addHelpText("after", "\nExit codes:\n  0  no hard gaps remain; advisory gaps may exist\n  1  one or more included hard checks failed\n\nA plain run heals env drift (CLI, plugin, marketplace pins) and cleans repo cruft (gitignore block,\nmerged branches, dead worktrees, aged scratch) automatically (#3975). --no-repo-writes keeps the\nworking tree untouched for train preflights; --banner/--fast/--self are read-only lanes.\n\n--banner keeps the legacy SessionStart contract and returns 0 unless the process crashes.\n").action(async (opts) => {
+program2.command("doctor").description("heal CLI/plugin wiring and clean up repo cruft ? repairs run by default (#3975); use --verbose for the full audit checklist").option("--banner", "one-line resume summary; silent when all gates pass").option("--fast", "offline-safe fast lane; read-only, skips slow checks and network probes").option("--preflight", "read-only fast gate for automation: measures and reports with the shared exit code, zero writes (#4199, canon); heal env drift with a plain run or --no-repo-writes").option("--verbose", "print the evidence behind every check ? probes, resolved paths, versions compared, and the names behind each count (#2977)").option("--guide", "print the MMI Agentic Onboarding guide URL").option("--json", "machine-readable output (an output format ? repairs still run by lane)").option("--apply", "deprecated no-op: repairs run by default now (#3975); kept so older instructions still parse").option("--no-repo-writes", "env/plugin repairs only ? never mutate the repo working tree; report pending managed .gitignore repairs with the follow-up command (for train preflights)").option("--self", "verify CLI/plugin version parity and gh auth reach; suggests plugin-heal on a hard gap (reads the published version, so not offline-safe) (#2689)").addHelpText("after", "\nExit codes:\n  0  no hard gaps remain; advisory gaps may exist\n  1  one or more included hard checks failed\n\nA plain run heals env drift (CLI, plugin, marketplace pins) and cleans repo cruft (gitignore block,\nmerged branches, dead worktrees, aged scratch) automatically (#3975). --no-repo-writes keeps the\nworking tree untouched for train preflights; --banner/--fast/--self are read-only lanes.\n\n--banner keeps the legacy SessionStart contract and returns 0 unless the process crashes.\n").action(async (opts) => {
   if (opts.guide) {
     consoleIo.log("MMI Agentic Onboarding: docs/Architecture/agentic-dev-environment.md");
     return;
@@ -34153,7 +34800,7 @@ function directoryBytes(path2) {
   let total = 0;
   let entries;
   try {
-    entries = (0, import_node_fs39.readdirSync)(path2, { withFileTypes: true });
+    entries = (0, import_node_fs40.readdirSync)(path2, { withFileTypes: true });
   } catch {
     return 0;
   }
@@ -34162,7 +34809,7 @@ function directoryBytes(path2) {
     if (entry.isDirectory()) total += directoryBytes(child2);
     else {
       try {
-        total += (0, import_node_fs39.statSync)(child2).size;
+        total += (0, import_node_fs40.statSync)(child2).size;
       } catch {
       }
     }
@@ -34170,25 +34817,25 @@ function directoryBytes(path2) {
   return total;
 }
 function listDirEntries(dir) {
-  return (0, import_node_fs39.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
+  return (0, import_node_fs40.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
 }
 function readInstalledPluginRefs(configRoot) {
   const p = installedPluginsPathForConfig(configRoot);
-  if (!(0, import_node_fs39.existsSync)(p)) return [];
+  if (!(0, import_node_fs40.existsSync)(p)) return [];
   try {
-    return installedPluginPaths((0, import_node_fs39.readFileSync)(p, "utf8"));
+    return installedPluginPaths((0, import_node_fs40.readFileSync)(p, "utf8"));
   } catch {
     return null;
   }
 }
 function pluginCacheFsDeps(configRoot, dirBytes) {
   return {
-    exists: (p) => (0, import_node_fs39.existsSync)(p),
-    listVersionDirs: (root) => (0, import_node_fs39.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
+    exists: (p) => (0, import_node_fs40.existsSync)(p),
+    listVersionDirs: (root) => (0, import_node_fs40.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
     dirBytes,
-    listStagingDirs: (root) => (0, import_node_fs39.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
+    listStagingDirs: (root) => (0, import_node_fs40.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
       try {
-        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path38.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs39.statSync)(p).mtimeMs) };
+        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path38.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs40.statSync)(p).mtimeMs) };
       } catch {
         return { name: d.name, mtimeMs: Date.now() };
       }
@@ -34203,9 +34850,9 @@ function stagingApplyFsGuard(configRoot) {
     referencedPaths: () => readInstalledPluginRefs(configRoot),
     mtimeMs: (name) => {
       const p = (0, import_node_path38.join)(stagingRoot, name);
-      if (!(0, import_node_fs39.existsSync)(p)) return null;
+      if (!(0, import_node_fs40.existsSync)(p)) return null;
       try {
-        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs39.statSync)(q).mtimeMs);
+        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs40.statSync)(q).mtimeMs);
       } catch {
         return null;
       }
@@ -34231,7 +34878,7 @@ program2.command("plugin-prune").description(`prune stale cached MMI plugin vers
     { withBytes: true, configRoot, includeStaging: surface !== "codex" }
   );
   const anythingToDelete = plan.prune.length > 0 || plan.staging.length > 0;
-  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs39.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
+  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs40.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
   const warnings = plan.prune.length > 0 ? [CONCURRENT_SESSION_WARNING] : [];
   if (o.json) console.log(JSON.stringify({ ...plan, warnings, applied: result ?? null }));
   else console.log(renderPluginCachePlan(plan, result));