@mutmutco/cli 3.97.0 → 3.99.0

package/dist/main.cjs

@@ -3416,8 +3416,8 @@ var program = new Command();
 
 // src/index.ts
 var import_promises11 = require("node:fs/promises");
-var import_node_fs39 = require("node:fs");
-var import_node_child_process18 = require("node:child_process");
+var import_node_fs40 = require("node:fs");
+var import_node_child_process19 = require("node:child_process");
 
 // src/cli-shared.ts
 var import_node_child_process3 = require("node:child_process");
@@ -5779,6 +5779,7 @@ function buildGcPlan(inputs) {
   const preservedBranches2 = new Set(inputs.preservedBranches ?? []);
   const preservedWorktrees = new Set((inputs.worktrees ?? []).filter((w) => w.preserved).map((w) => w.branch));
   const mergedIntoBase = new Set((inputs.mergedIntoBase ?? []).map((b) => b.trim()).filter(Boolean));
+  const prLookupFailures = new Map((inputs.prLookupFailures ?? []).map((f) => [f.branch.trim(), f.detail]));
   const skipped = [];
   const branches = [];
   const skipTrackingBranches = /* @__PURE__ */ new Set();
@@ -5794,6 +5795,11 @@ function buildGcPlan(inputs) {
       skipped.push({ branch, reason: "protected" });
       continue;
     }
+    if (prLookupFailures.has(branch)) {
+      skipped.push({ branch, reason: "pr-lookup-failed", detail: prLookupFailures.get(branch) });
+      skipTrackingBranches.add(branch);
+      continue;
+    }
     const prSet = prs.get(branch);
     if (prSet?.some((pr2) => pr2.state === "OPEN")) {
       skipped.push({ branch, reason: "open-pr" });
@@ -5838,6 +5844,7 @@ function buildGcPlan(inputs) {
     const branch = branchForTrackingRef(ref, remote);
     if (!branch || protectedBranches.has(branch)) return null;
     if (branch === inputs.currentBranch || dirtyWorktrees.has(branch) || unpushedWorktrees.has(branch) || preservedBranches2.has(branch) || preservedWorktrees.has(branch) || skipTrackingBranches.has(branch)) return null;
+    if (prLookupFailures.has(branch)) return null;
     const prSet = prs.get(branch);
     if (prSet?.some((pr2) => pr2.state === "OPEN")) return null;
     const state = closedState(prSet);
@@ -6999,7 +7006,7 @@ function commandLadderHint() {
 }
 
 // src/index.ts
-var import_node_path37 = require("node:path");
+var import_node_path38 = require("node:path");
 
 // src/merge-ci-policy.ts
 function resolveMergeCiPolicy(input) {
@@ -7643,6 +7650,9 @@ var CMD_RE = /`mmi-cli ((?:[a-z][a-z-]*)(?: [a-z][a-z-]*){0,3})/g;
 var RETIRED_RE = /\b(retired|historical|removed|deleted|gone|no longer|superseded|legacy)\b/i;
 var ROOT_DOCS = ["README.md", "architecture.md"];
 var SKIP_WALK = ["docs/Archive/", "docs/incidents/", "docs/research/"];
+function refFirstSegment(ref) {
+  return ref.replace(/^(\.\/)+/, "").split("/")[0];
+}
 function stripFences(markdown) {
   let inFence = false;
   return markdown.split(/\r?\n/).map((line) => {
@@ -7745,6 +7755,12 @@ function extractCommands(markdown) {
 }
 function checkRefs(root, deps, docs2) {
   const { exists, isIgnored = () => /* @__PURE__ */ new Set() } = deps;
+  const allFirstSegments = /* @__PURE__ */ new Set();
+  for (const markdown of Object.values(docs2)) {
+    for (const { ref } of extractRefs(markdown)) allFirstSegments.add(refFirstSegment(ref));
+  }
+  const tracked = allFirstSegments.size ? deps.trackedFirstSegments?.([...allFirstSegments]) ?? null : null;
+  const firstVerifiable = (first) => tracked ? tracked.has(first) : exists((0, import_node_path12.join)(root, first));
   const candidates = [];
   const direct = [];
   for (const [doc, markdown] of Object.entries(docs2)) {
@@ -7781,8 +7797,7 @@ function checkRefs(root, deps, docs2) {
       }
     }
     for (const { ref, line } of extractRefs(markdown)) {
-      const first = ref.split("/")[0];
-      if (!exists((0, import_node_path12.join)(root, first))) continue;
+      if (!firstVerifiable(refFirstSegment(ref))) continue;
       if (!exists((0, import_node_path12.join)(root, ref))) candidates.push({ kind: "missing-path", doc, line, detail: ref });
     }
     for (const { target, line, resolved, missing } of links) {
@@ -7872,18 +7887,43 @@ function defaultIsIgnored(root, relPaths, exec = import_node_child_process5.exec
     throw error;
   }
 }
+function defaultTrackedFirstSegments(root, firstSegments, exec = import_node_child_process5.execFileSync) {
+  if (firstSegments.length === 0) return /* @__PURE__ */ new Set();
+  try {
+    const out = exec("git", ["ls-files", "-z", "--", ...firstSegments.map((s) => `:(literal)${s}`)], {
+      cwd: root,
+      encoding: "utf8",
+      maxBuffer: CHECK_IGNORE_MAX_BUFFER
+    });
+    const tracked = /* @__PURE__ */ new Set();
+    for (const path2 of out.split("\0")) {
+      if (path2) tracked.add(path2.split("/")[0]);
+    }
+    return tracked;
+  } catch (error) {
+    if (error?.status === 128) return null;
+    if (error?.code === "ENOENT") return null;
+    if (error?.code === "ENOBUFS") {
+      throw new Error(
+        `git ls-files produced more than ${CHECK_IGNORE_MAX_BUFFER} bytes for ${firstSegments.length} segment(s) \u2014 the tracked set cannot be read, and treating it as empty would silently skip every ref (#4208)`
+      );
+    }
+    throw error;
+  }
+}
 function runDocRefs(root, deps = {}) {
   const readFile9 = deps.readFile ?? readFileOrNull;
   const exists = deps.exists ?? import_node_fs13.existsSync;
   const listDocs = deps.listDocs ?? defaultListDocs;
   const isIgnored = deps.isIgnored ?? ((paths) => defaultIsIgnored(root, paths));
+  const trackedFirstSegments = deps.trackedFirstSegments ?? ((segs) => defaultTrackedFirstSegments(root, segs));
   const commandPaths = deps.commandPaths ?? null;
   const walked = listDocs(root);
   const ignoredDocs = walked.length ? isIgnored(walked) : /* @__PURE__ */ new Set();
   const docs2 = Object.fromEntries(
     walked.filter((rel) => !ignoredDocs.has(rel)).map((rel) => [rel, readFile9((0, import_node_path12.join)(root, rel))]).filter(([, body]) => body != null)
   );
-  const refResult = checkRefs(root, { exists, isIgnored }, docs2);
+  const refResult = checkRefs(root, { exists, isIgnored, trackedFirstSegments }, docs2);
   const findings = [
     ...checkPins(root, readFile9, docs2).findings,
     ...refResult.findings
@@ -9218,15 +9258,15 @@ function healJervCodePackageRegistration(opts = {}) {
     return { available: true, ok: true, changed: false, version: null, detail: "skipped \u2014 no installed MMI clone carries the pi wrapper (install the Claude plugin first)" };
   }
   const packagePath = `${clone.path.replace(/\\/g, "/").replace(/\/+$/, "")}/${JERVCODE_WRAPPER_DIR}`;
-  const settingsPath = (0, import_node_path14.join)(agentDir, "settings.json");
-  const settings = readPiSettings(settingsPath);
+  const settingsPath2 = (0, import_node_path14.join)(agentDir, "settings.json");
+  const settings = readPiSettings(settingsPath2);
   if (settings === null) {
     return {
       available: true,
       ok: false,
       changed: false,
       version: clone.version,
-      detail: `package NOT registered \u2014 ${settingsPath} is not a strict JSON object, so mmi left it alone; add ${packagePath} to its packages array by hand`
+      detail: `package NOT registered \u2014 ${settingsPath2} is not a strict JSON object, so mmi left it alone; add ${packagePath} to its packages array by hand`
     };
   }
   const current = settings ?? {};
@@ -9237,12 +9277,12 @@ function healJervCodePackageRegistration(opts = {}) {
   }
   current.packages = merged.next;
   try {
-    (0, import_node_fs15.mkdirSync)((0, import_node_path14.dirname)(settingsPath), { recursive: true });
-    const tmp = `${settingsPath}.tmp-${process.pid}`;
+    (0, import_node_fs15.mkdirSync)((0, import_node_path14.dirname)(settingsPath2), { recursive: true });
+    const tmp = `${settingsPath2}.tmp-${process.pid}`;
     (0, import_node_fs15.writeFileSync)(tmp, `${JSON.stringify(current, null, 2)}
 `, "utf8");
     try {
-      (0, import_node_fs15.renameSync)(tmp, settingsPath);
+      (0, import_node_fs15.renameSync)(tmp, settingsPath2);
     } catch (renameError) {
       (0, import_node_fs15.rmSync)(tmp, { force: true });
       throw renameError;
@@ -12011,6 +12051,12 @@ async function auditRepoCi(repo, deps) {
     label: "delete_branch_on_merge enabled",
     detail: info.delete_branch_on_merge === true ? void 0 : "false or unavailable"
   });
+  checks.push({
+    ok: info.has_wiki === false,
+    label: "has_wiki disabled",
+    detail: info.has_wiki === false ? void 0 : "wikis are retired org-wide",
+    remediation: `gh api -X PATCH repos/${repo} -F has_wiki=false`
+  });
   const hasCanonicalGateWorkflow = repoClass === "hub" ? true : repoClass === "content" ? true : await contentExists(deps, repo, baseBranch, PRODUCT_GATE_PATH);
   let prWorkflowPaths = repoClass === "deployable" && hasCanonicalGateWorkflow ? [PRODUCT_GATE_PATH] : [];
   if (repoClass === "deployable" && !hasCanonicalGateWorkflow) {
@@ -12269,7 +12315,7 @@ async function applyCiReconcileMergeSettingsFromReport(repo, deps, report) {
   const applied = [];
   const skipped = [];
   const errors = [];
-  const mergeChecks = report.checks.filter((c) => c.label.startsWith("allow_") || c.label.startsWith("delete_branch"));
+  const mergeChecks = report.checks.filter((c) => c.label.startsWith("allow_") || c.label.startsWith("delete_branch") || c.label.startsWith("has_wiki"));
   const needsPatch = mergeChecks.some((c) => !c.ok);
   if (!needsPatch) {
     skipped.push("merge settings already canonical");
@@ -12280,10 +12326,11 @@ async function applyCiReconcileMergeSettingsFromReport(repo, deps, report) {
       body: {
         allow_auto_merge: true,
         allow_squash_merge: true,
-        delete_branch_on_merge: true
+        delete_branch_on_merge: true,
+        has_wiki: false
       }
     });
-    applied.push("allow_auto_merge, allow_squash_merge, delete_branch_on_merge");
+    applied.push("allow_auto_merge, allow_squash_merge, delete_branch_on_merge, has_wiki=false");
   } catch (e) {
     errors.push(e.message);
   }
@@ -12466,7 +12513,7 @@ async function parkProductRuleset(repo, deps) {
   return result;
 }
 function reconcileOwnedFailures(report) {
-  return report.checks.filter((check) => !check.ok).filter((check) => check.label.startsWith("allow_") || check.label.startsWith("delete_branch") || check.label.startsWith("gate workflow committed on ") || check.label.startsWith("product ruleset reference committed on ") || check.label === "product required status checks active" || check.label === RULESET_REFERENCE_MATCH_LABEL || check.label === REQUIRED_CONTEXTS_EMITTED_LABEL || check.label === TAG_ADDRESSABLE_CONTEXTS_LABEL).map((check) => check.label);
+  return report.checks.filter((check) => !check.ok).filter((check) => check.label.startsWith("allow_") || check.label.startsWith("delete_branch") || check.label.startsWith("has_wiki") || check.label.startsWith("gate workflow committed on ") || check.label.startsWith("product ruleset reference committed on ") || check.label === "product required status checks active" || check.label === RULESET_REFERENCE_MATCH_LABEL || check.label === REQUIRED_CONTEXTS_EMITTED_LABEL || check.label === TAG_ADDRESSABLE_CONTEXTS_LABEL).map((check) => check.label);
 }
 async function finalizeCiReconcile(repo, deps, result, before, pendingReason) {
   if (result.errors.length > 0) {
@@ -13757,23 +13804,6 @@ async function fetchSchedulesList(deps) {
     return null;
   }
 }
-async function fetchDocsAuditList(deps) {
-  if (!deps.baseUrl) return { notArmed: true };
-  try {
-    const token = await deps.token();
-    if (!token) return { notArmed: true };
-    const res = await retriedFetch(deps, `${deps.baseUrl.replace(/\/$/, "")}/docs-audit/list`, {
-      method: "GET",
-      headers: { Authorization: `Bearer ${token}` }
-    });
-    if (res.status === 404) return { notArmed: true };
-    if (!res.ok) return { ok: false, error: `docs-audit list HTTP ${res.status}` };
-    const body = await res.json();
-    return { ok: true, rows: Array.isArray(body?.docsAudits) ? body.docsAudits : [] };
-  } catch (e) {
-    return { ok: false, error: e.message };
-  }
-}
 async function fetchOrgConfig(deps) {
   if (!deps.baseUrl) return null;
   const token = await deps.token();
@@ -13824,9 +13854,6 @@ async function retireProject(slug, deps) {
 async function setDeployCoords(slug, payload, deps) {
   return postJson(`/projects/${encodeURIComponent(slug)}/deploy`, payload, deps);
 }
-async function recordDocsAudit(verdict, deps) {
-  return postJson("/docs-audit/record", { ...verdict }, deps);
-}
 async function postSchedulesLift(repo, schedules, deps) {
   const res = await postJson("/schedules/lift", { repo, schedules }, deps);
   if (!res.ok && res.status === 404) return { ...res, unreachable: "route-absent" };
@@ -15547,13 +15574,27 @@ async function isOrgRegisteredRepo(cfg, deps = {}) {
   if (!read.ok) return false;
   return read.project !== null;
 }
-async function ghPrs(limit) {
-  const args = (state) => ["pr", "list", "--state", state, "--limit", String(limit), "--json", "number,headRefName,headRefOid,state"];
-  const [open2, closed] = await Promise.all([
-    execFileP2("gh", args("open"), { timeout: GC_GH_TIMEOUT_MS }),
-    execFileP2("gh", args("closed"), { timeout: GC_GH_TIMEOUT_MS })
-  ]);
-  return [...JSON.parse(open2.stdout || "[]"), ...JSON.parse(closed.stdout || "[]")];
+var GC_PR_LOOKUP_CONCURRENCY = 8;
+async function resolveBranchPrs(branches, limit) {
+  const queue = [...new Set(branches.map((b) => b.trim()).filter(Boolean))];
+  const prs = [];
+  const failures = [];
+  const args = (branch) => ["pr", "list", "--head", branch, "--state", "all", "--limit", String(limit), "--json", "number,headRefName,headRefOid,state"];
+  let next = 0;
+  const worker = async () => {
+    for (let i = next++; i < queue.length; i = next++) {
+      const branch = queue[i];
+      try {
+        const { stdout } = await execFileP2("gh", args(branch), { timeout: GC_GH_TIMEOUT_MS });
+        const rows = JSON.parse(stdout || "[]");
+        prs.push(...rows.filter((pr2) => pr2.headRefName?.trim() === branch));
+      } catch (e) {
+        failures.push({ branch, detail: e.message });
+      }
+    }
+  };
+  await Promise.all(Array.from({ length: Math.min(GC_PR_LOOKUP_CONCURRENCY, queue.length) }, worker));
+  return { prs, failures };
 }
 async function localBranchHeads() {
   try {
@@ -15697,21 +15738,26 @@ function resolveExplicitScanRoot(explicitRoot, repoRoot2) {
   return explicitRepoWorktreesRoot(explicitRoot, repoRoot2, rootDirs);
 }
 async function gcPlan(remote, limit, opts = {}) {
-  const [branches, heads, current, stale, prs, worktrees, siblingDirs, preserved, mergedIntoBase] = await Promise.all([
+  const [branches, heads, current, stale, worktrees, siblingDirs, preserved, mergedIntoBase] = await Promise.all([
     gitOut(["branch", "--format=%(refname:short)"]),
     localBranchHeads(),
     gitOut(["rev-parse", "--abbrev-ref", "HEAD"]),
     collectStaleTrackingRefs(remote, {
       execGit: (args) => execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })
     }),
-    ghPrs(limit),
     worktreeBranches(),
     siblingWorktreeDirs(opts.root),
     preservedBranches(),
     branchesMergedIntoBase(remote)
   ]);
+  const localBranches = branches.split(/\r?\n/).map((b) => b.trim()).filter(Boolean);
+  const { prs, failures } = await resolveBranchPrs(
+    [...localBranches, ...stale.map((ref) => branchForTrackingRef(ref, remote)).filter((b) => Boolean(b))].filter((b) => !isProtectedBranch(b)),
+    limit
+  );
   return buildGcPlan({
-    localBranches: branches.split(/\r?\n/).map((b) => b.trim()).filter(Boolean),
+    localBranches,
+    prLookupFailures: failures,
     localBranchHeads: heads,
     currentBranch: current,
     siblingWorktreeDirs: siblingDirs,
@@ -17813,8 +17859,6 @@ function consolidateCommandNamespaces(program3) {
   move(program3, plugin, "plugin-heal", "heal");
   move(program3, plugin, "plugin-prune", "prune");
   move(program3, plugin, "session-start");
-  const docs2 = child(program3, "docs");
-  move(program3, docs2, "docs-audit", "audit");
   const train = child(program3, "train");
   const fullTrack2 = child(program3, "full-track");
   move(fullTrack2, train, "readiness");
@@ -17825,18 +17869,25 @@ function consolidateCommandNamespaces(program3) {
   move(program3, stage, "port-range");
 }
 
+// src/pi-plugin-registration.ts
+var import_node_fs22 = require("node:fs");
+var import_node_path20 = require("node:path");
+
 // src/plugin-cache-prune.ts
 var PLUGIN_CACHE_KEEP = 2;
 var VERSION_DIR = /^\d+\.\d+\.\d+(?:[-+].*)?$/;
 function isVersionDirName(name) {
   return VERSION_DIR.test(name);
 }
-function selectPrunablePluginVersions(names, currentVersion) {
+function selectPrunablePluginVersions(names, currentVersion, installedVersion) {
   const versions = [...new Set(names)].filter(isVersionDirName);
   if (versions.length <= PLUGIN_CACHE_KEEP) return [];
+  if (!currentVersion && !installedVersion) return [];
   const newestFirst = [...versions].sort((a, b) => compareVersions(b, a));
   const keep = /* @__PURE__ */ new Set();
+  keep.add(newestFirst[0]);
   if (currentVersion && versions.includes(currentVersion)) keep.add(currentVersion);
+  if (installedVersion && versions.includes(installedVersion)) keep.add(installedVersion);
   for (const v of newestFirst) {
     if (keep.size >= PLUGIN_CACHE_KEEP) break;
     keep.add(v);
@@ -17964,7 +18015,7 @@ function buildPluginCachePlan(home, running, deps, opts = {}) {
     return absent;
   }
   const versions = names.filter(isVersionDirName);
-  const prune = selectPrunablePluginVersions(versions, running);
+  const prune = selectPrunablePluginVersions(versions, running, opts.installedVersion);
   const pruneSet = new Set(prune);
   const keep = [...versions].sort((a, b) => compareVersions(b, a)).filter((v) => !pruneSet.has(v));
   const bytes = opts.withBytes ? prune.reduce((sum, v) => sum + deps.dirBytes(`${cacheRoot}/${v}`), 0) : 0;
@@ -18063,6 +18114,68 @@ function renderPluginCachePlan(plan, applied) {
   return lines.join("\n");
 }
 
+// src/pi-plugin-registration.ts
+function isMmiPiPackage(entry) {
+  return /[\\/]mutmutco[\\/]mmi[\\/][^\\/]+[\\/]\.pi-plugin\/?$/.test(entry);
+}
+function expectedPiPluginPath(home, env, installedVersion) {
+  const root = env.CLAUDE_PLUGIN_ROOT?.trim();
+  if (root && /[\\/]mutmutco[\\/]mmi[\\/]/.test(root)) return (0, import_node_path20.join)(root, ".pi-plugin");
+  const version = installedVersion ?? runningPluginVersion(env);
+  if (!version) return void 0;
+  return (0, import_node_path20.join)(home, ".claude", "plugins", "cache", "mutmutco", "mmi", version, ".pi-plugin");
+}
+function settingsPath(home) {
+  return (0, import_node_path20.join)(home, ".pi", "agent", "settings.json");
+}
+function readPiPluginState(home, env, installedVersion) {
+  if (!(0, import_node_fs22.existsSync)((0, import_node_path20.join)(home, ".pi", "agent"))) return void 0;
+  const expectedPath = expectedPiPluginPath(home, env, installedVersion);
+  if (!expectedPath || !(0, import_node_fs22.existsSync)(expectedPath)) return void 0;
+  const file = settingsPath(home);
+  if (!(0, import_node_fs22.existsSync)(file)) return { expectedPath, settingsReadable: true };
+  try {
+    const parsed = JSON.parse((0, import_node_fs22.readFileSync)(file, "utf8"));
+    const packages = Array.isArray(parsed.packages) ? parsed.packages : [];
+    return { expectedPath, registeredPath: packages.find((p) => typeof p === "string" && isMmiPiPackage(p)), settingsReadable: true };
+  } catch {
+    return { expectedPath, settingsReadable: false };
+  }
+}
+function healPiPluginRegistration(home, env, installedVersion) {
+  const state = readPiPluginState(home, env, installedVersion);
+  if (!state) return { ok: false, detail: "no ~/.pi/agent or no installed .pi-plugin payload" };
+  if (!state.settingsReadable) return { ok: false, detail: "settings.json unreadable \u2014 nothing written (fail closed)" };
+  const file = settingsPath(home);
+  try {
+    const parsed = (0, import_node_fs22.existsSync)(file) ? JSON.parse((0, import_node_fs22.readFileSync)(file, "utf8")) : {};
+    const packages = Array.isArray(parsed.packages) ? parsed.packages : [];
+    const next = packages.filter((p) => !(typeof p === "string" && isMmiPiPackage(p)));
+    next.push(state.expectedPath);
+    (0, import_node_fs22.writeFileSync)(file, `${JSON.stringify({ ...parsed, packages: next }, null, 2)}
+`);
+    return { ok: true, detail: state.registeredPath ? `replaced ${state.registeredPath}` : `registered ${state.expectedPath}` };
+  } catch (e) {
+    return { ok: false, detail: e.message };
+  }
+}
+
+// src/statusline-invalidate.ts
+var import_node_child_process10 = require("node:child_process");
+function invalidateStatuslineBoardCache() {
+  try {
+    const child2 = (0, import_node_child_process10.spawn)("jerv-cli", ["lane", "ops", "invalidate-board"], {
+      detached: true,
+      stdio: "ignore",
+      windowsHide: true
+    });
+    child2.on("error", () => {
+    });
+    child2.unref();
+  } catch {
+  }
+}
+
 // src/skill-lesson.ts
 var SKILL_LESSON_LABEL = "skill-lesson";
 var SKILL_NAMES = ["bootstrap", "browser-automation", "doctor", "epic", "hotfix", "mmi", "onboard", "rcand", "release", "resume", "secrets", "stage", "worktree"];
@@ -18302,12 +18415,12 @@ function renderVerifyBroker(input) {
 }
 
 // src/hotfix-coverage.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 var CHERRY_TRAILER = /\(cherry picked from commit ([0-9a-f]{7,40})\)/g;
 function checkHotfixCoverage(options = {}) {
   const { cwd = process.cwd(), mainRef = "origin/main", rcRef = "origin/rc", manifestPaths = [] } = options;
   const ack = (options.ack ?? []).filter(Boolean);
-  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process10.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process11.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const revList = (range) => {
     const out = git2(["rev-list", "--no-merges", range]).trim();
     return out ? out.split("\n") : [];
@@ -18375,7 +18488,7 @@ function checkHotfixCoverage(options = {}) {
 }
 function checkHotfixCarries(options) {
   const { cwd = process.cwd(), branch, baseRef, targets } = options;
-  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process10.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process11.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const isAncestor = (sha, ref) => {
     try {
       git2(["merge-base", "--is-ancestor", sha, ref]);
@@ -19489,9 +19602,9 @@ function renderAccessReport(report) {
 
 // src/repo-index.ts
 var import_node_crypto4 = require("node:crypto");
-var import_node_child_process11 = require("node:child_process");
-var import_node_fs22 = require("node:fs");
-var import_node_path20 = require("node:path");
+var import_node_child_process12 = require("node:child_process");
+var import_node_fs23 = require("node:fs");
+var import_node_path21 = require("node:path");
 var REPO_INDEX_SCHEMA = 1;
 var HARD_DENY = [
   /(^|\/)\.env(\.|$)/i,
@@ -19616,11 +19729,11 @@ function loadReadmeHints(cwd, candidatePaths) {
   }
   for (const rel of readmes) {
     if (isHardDeniedPath(rel)) continue;
-    const abs = (0, import_node_path20.join)(cwd, ...rel.split("/"));
-    if (!(0, import_node_fs22.existsSync)(abs)) continue;
+    const abs = (0, import_node_path21.join)(cwd, ...rel.split("/"));
+    if (!(0, import_node_fs23.existsSync)(abs)) continue;
     let text;
     try {
-      text = (0, import_node_fs22.readFileSync)(abs, "utf8");
+      text = (0, import_node_fs23.readFileSync)(abs, "utf8");
     } catch {
       continue;
     }
@@ -19633,9 +19746,9 @@ function loadReadmeHints(cwd, candidatePaths) {
   return hints;
 }
 function toPosix(p) {
-  return p.split(import_node_path20.sep).join("/");
+  return p.split(import_node_path21.sep).join("/");
 }
-function listCandidatePaths(cwd, exec = import_node_child_process11.execFileSync) {
+function listCandidatePaths(cwd, exec = import_node_child_process12.execFileSync) {
   try {
     const out = exec("git", ["ls-files", "-z", "-c", "-o", "--exclude-standard"], {
       cwd,
@@ -19655,11 +19768,11 @@ function rebuildRepoIndex(cwd, repoSlug2) {
   for (const rel of candidates) {
     if (ignored.has(rel)) continue;
     if (isHardDeniedPath(rel)) continue;
-    const abs = (0, import_node_path20.join)(cwd, ...rel.split("/"));
-    if (!(0, import_node_fs22.existsSync)(abs)) continue;
+    const abs = (0, import_node_path21.join)(cwd, ...rel.split("/"));
+    if (!(0, import_node_fs23.existsSync)(abs)) continue;
     let text;
     try {
-      text = (0, import_node_fs22.readFileSync)(abs, "utf8");
+      text = (0, import_node_fs23.readFileSync)(abs, "utf8");
     } catch {
       continue;
     }
@@ -19684,16 +19797,16 @@ function rebuildRepoIndex(cwd, repoSlug2) {
     entries
   };
   const store = repoIndexStorePath(cwd);
-  (0, import_node_fs22.mkdirSync)((0, import_node_path20.dirname)(store), { recursive: true });
-  (0, import_node_fs22.writeFileSync)(store, `${JSON.stringify(projection, null, 2)}
+  (0, import_node_fs23.mkdirSync)((0, import_node_path21.dirname)(store), { recursive: true });
+  (0, import_node_fs23.writeFileSync)(store, `${JSON.stringify(projection, null, 2)}
 `, "utf8");
   return projection;
 }
 function loadRepoIndex(cwd) {
   const store = repoIndexStorePath(cwd);
-  if (!(0, import_node_fs22.existsSync)(store)) return null;
+  if (!(0, import_node_fs23.existsSync)(store)) return null;
   try {
-    const raw = JSON.parse((0, import_node_fs22.readFileSync)(store, "utf8"));
+    const raw = JSON.parse((0, import_node_fs23.readFileSync)(store, "utf8"));
     if (raw?.schema !== REPO_INDEX_SCHEMA || !Array.isArray(raw.entries)) return null;
     return raw;
   } catch {
@@ -19758,14 +19871,14 @@ function searchRepoIndex(idx, query, limit = 20) {
   }
   return out;
 }
-function inferRepoSlug(cwd, exec = import_node_child_process11.execFileSync) {
+function inferRepoSlug(cwd, exec = import_node_child_process12.execFileSync) {
   try {
     const url = String(exec("git", ["remote", "get-url", "origin"], { cwd, encoding: "utf8" })).trim();
     const m = /[:/]([^/]+\/[^/]+?)(?:\.git)?$/.exec(url);
     if (m?.[1]) return m[1].toLowerCase();
   } catch {
   }
-  return ((0, import_node_path20.basename)(cwd) || "local").toLowerCase();
+  return ((0, import_node_path21.basename)(cwd) || "local").toLowerCase();
 }
 
 // src/repo-index-cloud-client.ts
@@ -19905,10 +20018,10 @@ async function gcRepoIndexCloud(deps) {
 }
 
 // src/repo-index-sync.ts
-var import_node_fs23 = require("node:fs");
+var import_node_fs24 = require("node:fs");
 var import_node_os9 = require("node:os");
-var import_node_path21 = require("node:path");
-var import_node_child_process12 = require("node:child_process");
+var import_node_path22 = require("node:path");
+var import_node_child_process13 = require("node:child_process");
 var MAX_EMBED_BACKFILL_ROUNDS = 40;
 function normalizeRepo(raw) {
   const t = raw.trim().replace(/\.git$/, "");
@@ -19928,7 +20041,7 @@ function rosterRepos(projects) {
 }
 function shallowClone(repo, dest, token) {
   const basic = Buffer.from(`x-access-token:${token}`, "utf8").toString("base64");
-  (0, import_node_child_process12.execFileSync)(
+  (0, import_node_child_process13.execFileSync)(
     "git",
     ["-c", `http.extraHeader=Authorization: Basic ${basic}`, "clone", "--depth", "1", "--single-branch", `https://github.com/${repo}.git`, dest],
     { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], windowsHide: true }
@@ -19951,7 +20064,7 @@ async function syncEstateRepoIndex(opts) {
   const failed = [];
   const skipped = [];
   for (const repo of repos) {
-    const dir = (0, import_node_fs23.mkdtempSync)((0, import_node_path21.join)((0, import_node_os9.tmpdir)(), "mmi-repo-index-"));
+    const dir = (0, import_node_fs24.mkdtempSync)((0, import_node_path22.join)((0, import_node_os9.tmpdir)(), "mmi-repo-index-"));
     try {
       shallowClone(repo, dir, opts.githubToken);
       const built = rebuildRepoIndex(dir, repo);
@@ -20001,7 +20114,7 @@ async function syncEstateRepoIndex(opts) {
       failed.push({ repo, error: e.message });
     } finally {
       try {
-        (0, import_node_fs23.rmSync)(dir, { recursive: true, force: true });
+        (0, import_node_fs24.rmSync)(dir, { recursive: true, force: true });
       } catch {
       }
     }
@@ -20010,7 +20123,7 @@ async function syncEstateRepoIndex(opts) {
 }
 
 // src/repo-index-health.ts
-var import_node_fs24 = require("node:fs");
+var import_node_fs25 = require("node:fs");
 
 // testdata/repo-index-golden-queries.json
 var repo_index_golden_queries_default = {
@@ -20052,7 +20165,7 @@ function assertGoldenSuite(raw, source) {
 function loadGoldenSuite(path2) {
   let text;
   try {
-    text = (0, import_node_fs24.readFileSync)(path2, "utf8");
+    text = (0, import_node_fs25.readFileSync)(path2, "utf8");
   } catch (e) {
     throw new Error(`golden suite unreadable at ${path2}: ${e.message}`);
   }
@@ -20195,9 +20308,9 @@ async function runRepoIndexHealth(opts) {
 }
 
 // src/spawn-policy-core.ts
-var import_node_child_process13 = require("node:child_process");
-var import_node_fs25 = require("node:fs");
-var import_node_path22 = require("node:path");
+var import_node_child_process14 = require("node:child_process");
+var import_node_fs26 = require("node:fs");
+var import_node_path23 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
 var CALL_SOURCE = String.raw`(^|[^.\w$])(${SPAWNERS.join("|")})\s*\(`;
 var SOURCE_EXT = /\.(ts|mts|cts|js|mjs|cjs)$/;
@@ -20266,7 +20379,7 @@ function findViolationsInSource(raw) {
   return found;
 }
 function policedFiles(root) {
-  const r = (0, import_node_child_process13.spawnSync)("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
+  const r = (0, import_node_child_process14.spawnSync)("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
     cwd: root,
     encoding: "utf8",
     windowsHide: true,
@@ -20283,7 +20396,7 @@ function runSpawnPolicy(root) {
   for (const file of files) {
     let raw;
     try {
-      raw = (0, import_node_fs25.readFileSync)((0, import_node_path22.join)(root, file), "utf8");
+      raw = (0, import_node_fs26.readFileSync)((0, import_node_path23.join)(root, file), "utf8");
     } catch {
       continue;
     }
@@ -20300,9 +20413,9 @@ function runSpawnPolicy(root) {
 }
 
 // src/test-policy-core.ts
-var import_node_child_process14 = require("node:child_process");
-var import_node_fs26 = require("node:fs");
-var import_node_path23 = require("node:path");
+var import_node_child_process15 = require("node:child_process");
+var import_node_fs27 = require("node:fs");
+var import_node_path24 = require("node:path");
 var POLICY_FILE = "test-policy.json";
 var TEST_RE = /\.(?:test|spec)\.[cm]?[jt]sx?$/;
 var PY_TEST_RE = /(?:^|\/)test_[^/]*\.py$|_test\.py$/;
@@ -20355,7 +20468,7 @@ function isTestPath(path2) {
   return TEST_RE.test(path2) || PY_TEST_RE.test(path2);
 }
 function loadPolicy(root, readFile9 = readFileOrNull2) {
-  const raw = readFile9((0, import_node_path23.join)(root, POLICY_FILE));
+  const raw = readFile9((0, import_node_path24.join)(root, POLICY_FILE));
   if (raw == null) return { mandatory: [], declared: false };
   try {
     return { ...JSON.parse(raw), declared: true };
@@ -20365,7 +20478,7 @@ function loadPolicy(root, readFile9 = readFileOrNull2) {
 }
 function readFileOrNull2(path2) {
   try {
-    return (0, import_node_fs26.readFileSync)(path2, "utf8");
+    return (0, import_node_fs27.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -20392,12 +20505,12 @@ function classify(changed, policy, present = () => false) {
   const removedProtected = [...removed].filter((p) => protectedBy.has(p)).map((p) => ({ path: p, why: protectedBy.get(p) ?? "" }));
   return { mandatoryHits, untestedHits, testChanges, addedTests, removedProtected };
 }
-function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs26.existsSync)(path2)) {
-  return (policy.protected ?? []).map((p) => p.path).filter((p) => !exists((0, import_node_path23.join)(root, p)));
+function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs27.existsSync)(path2)) {
+  return (policy.protected ?? []).map((p) => p.path).filter((p) => !exists((0, import_node_path24.join)(root, p)));
 }
-function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs26.existsSync)(path2)) {
+function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs27.existsSync)(path2)) {
   const declared = (policy.mandatory ?? []).flatMap((m) => m.satisfiedBy ?? []);
-  return [...new Set(declared)].filter((p) => !exists((0, import_node_path23.join)(root, p)));
+  return [...new Set(declared)].filter((p) => !exists((0, import_node_path24.join)(root, p)));
 }
 function evaluate(changed, policy, present = () => false) {
   const { mandatoryHits, untestedHits, testChanges, addedTests, removedProtected } = classify(changed, policy, present);
@@ -20430,14 +20543,14 @@ function evaluate(changed, policy, present = () => false) {
   return findings;
 }
 function git(args, cwd) {
-  return (0, import_node_child_process14.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
+  return (0, import_node_child_process15.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
 }
 var COAUTHOR_KEY = "Co-authored-by";
 var GH_MESSAGE_SEPARATOR = /^-{5,}$/;
 var LIFTED_KEYS = new RegExp(`^(?:${TRAILER_KEY}|${COAUTHOR_KEY}):`, "i");
 function parseTrailers(message, cwd) {
   try {
-    return (0, import_node_child_process14.execFileSync)("git", ["interpret-trailers", "--parse", "--unfold"], {
+    return (0, import_node_child_process15.execFileSync)("git", ["interpret-trailers", "--parse", "--unfold"], {
       windowsHide: true,
       cwd,
       input: message,
@@ -20579,13 +20692,13 @@ function changedFilesSince(base, cwd) {
 }
 function runTestPolicy(root, deps = {}) {
   const policy = deps.policy ?? loadPolicy(root);
-  const exists = deps.exists ?? ((path2) => (0, import_node_fs26.existsSync)(path2));
+  const exists = deps.exists ?? ((path2) => (0, import_node_fs27.existsSync)(path2));
   const counts = { mandatoryCount: (policy.mandatory ?? []).length, protectedCount: (policy.protected ?? []).length };
   const base = deps.changed ? "(injected)" : resolveBase(root, deps.base);
   const refusal = deps.changed ? null : untrustworthyRange(root, base);
   const changed = deps.changed ?? (refusal ? [] : changedFilesSince(base, root));
   const lookup = deps.override !== void 0 ? { override: deps.override, refusals: [] } : !deps.changed && !refusal ? readOverride(base, root) : { override: null, refusals: [] };
-  const present = (path2) => exists((0, import_node_path23.join)(root, path2));
+  const present = (path2) => exists((0, import_node_path24.join)(root, path2));
   const removedByThisDiff = removedPaths(changed);
   const staleFindings = [];
   const unresolved = unresolvedProtectedEntries(policy, root, exists).filter((p) => !removedByThisDiff.has(p));
@@ -20622,127 +20735,9 @@ function runTestPolicy(root, deps = {}) {
   return result;
 }
 
-// src/docs-audit-command.ts
-function serializeOutcome(outcome) {
-  switch (outcome.kind) {
-    case "clean":
-      return "clean";
-    case "refreshed":
-      return `refreshed-${outcome.count}`;
-    case "failed":
-      return "failed";
-  }
-}
-var ISO_DATE_RE = /^\d{4}-\d{2}-\d{2}$/;
-function isValidIsoDate(date) {
-  if (typeof date !== "string" || !ISO_DATE_RE.test(date)) return false;
-  const parsed = Date.parse(`${date}T00:00:00Z`);
-  if (Number.isNaN(parsed)) return false;
-  return new Date(parsed).toISOString().slice(0, 10) === date;
-}
-var OUTCOME_WIRE_RE = /^(clean|refreshed-[1-9]\d*|failed)$/;
-function isValidOutcomeWire(outcome) {
-  return typeof outcome === "string" && OUTCOME_WIRE_RE.test(outcome);
-}
-function docsAuditRecord(input) {
-  const repo = input.repo.trim();
-  const date = input.date.trim();
-  const shaRange = input.shaRange.trim();
-  const checkerVendor = input.checkerVendor.trim();
-  if (!repo) throw new Error("docs audit record: repo is required");
-  if (!date) throw new Error("docs audit record: date is required");
-  if (!isValidIsoDate(date)) throw new Error(`docs audit record: date must be a real ISO date (YYYY-MM-DD), got "${date}"`);
-  if (!shaRange) throw new Error("docs audit record: shaRange is required");
-  if (!checkerVendor) throw new Error("docs audit record: checkerVendor is required");
-  if (input.outcome.kind === "refreshed" && !(Number.isInteger(input.outcome.count) && input.outcome.count > 0)) {
-    throw new Error("docs audit record: a `refreshed` outcome must carry a positive integer count");
-  }
-  if (input.outcome.kind === "failed" && !input.outcome.reason.trim()) {
-    throw new Error("docs audit record: a `failed` outcome must carry a reason");
-  }
-  const outcome = serializeOutcome(input.outcome);
-  if (!isValidOutcomeWire(outcome)) {
-    throw new Error(`docs audit record: outcome serialized to an invalid wire form "${outcome}"`);
-  }
-  return { repo, date, shaRange, outcome, checkerVendor };
-}
-function ageInDays(verdictDate, today) {
-  const a = Date.parse(`${verdictDate}T00:00:00Z`);
-  const b = Date.parse(`${today}T00:00:00Z`);
-  return Math.max(0, Math.round((b - a) / 864e5));
-}
-function docsAuditStatus(fetch2, opts) {
-  if ("notArmed" in fetch2) {
-    return { ok: true, state: "not-armed", line: `docs audit: ${opts.repo} janitor not armed (registry route not live yet)` };
-  }
-  if (!fetch2.ok) {
-    return { ok: false, state: "error", line: `docs audit: ${opts.repo} registry read failed \u2014 ${fetch2.error}` };
-  }
-  if (!isValidIsoDate(opts.today)) {
-    throw new Error(`docs audit status: today must be a real ISO date (YYYY-MM-DD), got "${opts.today}"`);
-  }
-  if (fetch2.verdict === null) {
-    const armedAt = opts.armedAt;
-    if (armedAt && isValidIsoDate(armedAt)) {
-      const cadenceDays = opts.cadenceDays ?? 7;
-      const graceDays = opts.graceDays ?? 3;
-      const sinceArmed = ageInDays(armedAt, opts.today);
-      if (sinceArmed <= cadenceDays + graceDays) {
-        return {
-          ok: true,
-          state: "awaiting-first-tick",
-          line: `docs audit: ${opts.repo} armed ${armedAt} (${sinceArmed}d ago) \u2014 no verdict expected until the first tick`
-        };
-      }
-      return {
-        ok: false,
-        state: "missing",
-        line: `docs audit: ${opts.repo} no verdict on record ${sinceArmed}d after arming ${armedAt} \u2014 janitor blind or dead`
-      };
-    }
-    return { ok: false, state: "missing", line: `docs audit: ${opts.repo} no verdict on record \u2014 janitor blind or dead` };
-  }
-  const verdict = fetch2.verdict;
-  for (const field of ["repo", "shaRange", "checkerVendor"]) {
-    const value = verdict[field];
-    if (typeof value !== "string" || !value.trim()) {
-      const shown = typeof value === "string" ? `"${value}"` : `type ${Array.isArray(value) ? "array" : typeof value}`;
-      return {
-        ok: false,
-        state: "malformed",
-        line: `docs audit: ${opts.repo} malformed verdict ${field} (${shown}, expected a non-empty string) \u2014 registry record corrupt, treating as RED`
-      };
-    }
-  }
-  if (!isValidIsoDate(verdict.date)) {
-    return {
-      ok: false,
-      state: "malformed",
-      line: `docs audit: ${opts.repo} malformed verdict date "${verdict.date}" \u2014 registry record corrupt, treating as RED`
-    };
-  }
-  if (!isValidOutcomeWire(verdict.outcome)) {
-    return {
-      ok: false,
-      state: "malformed",
-      line: `docs audit: ${opts.repo} malformed verdict outcome "${verdict.outcome}" (expected clean|refreshed-N|failed) \u2014 registry record corrupt, treating as RED`
-    };
-  }
-  const cadence = opts.cadenceDays ?? 7;
-  const grace = opts.graceDays ?? 3;
-  const age = ageInDays(verdict.date, opts.today);
-  if (age > cadence + grace) {
-    return { ok: false, state: "stale", line: `docs audit: ${opts.repo} last verdict ${age}d old \u2014 janitor blind or dead` };
-  }
-  if (verdict.outcome === "failed") {
-    return { ok: false, state: "failed", line: `docs audit: ${opts.repo} last run FAILED (${verdict.date}) \u2014 janitor needs attention` };
-  }
-  return { ok: true, state: "clean", line: `docs audit: ${opts.repo} ${verdict.outcome} (${verdict.date}, ${verdict.checkerVendor})` };
-}
-
 // src/project-info-sync.ts
-var import_node_fs27 = require("node:fs");
-var import_node_path24 = require("node:path");
+var import_node_fs28 = require("node:fs");
+var import_node_path25 = require("node:path");
 var UPDATE_PROJECT_INFO = `mutation($projectId: ID!, $shortDescription: String!, $readme: String!) {
   updateProjectV2(input: { projectId: $projectId, shortDescription: $shortDescription, readme: $readme }) {
     projectV2 { id }
@@ -20787,14 +20782,14 @@ function sharedName(entries, fallback) {
 }
 function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   if (!project2.projectId) throw new Error(`org project sync-info: ${targetRepo2} registry META has no projectId`);
-  const readmePath = (0, import_node_path24.join)(repoRoot2, "README.md");
-  if (!(0, import_node_fs27.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
+  const readmePath = (0, import_node_path25.join)(repoRoot2, "README.md");
+  if (!(0, import_node_fs28.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
   const entries = entriesFor(project2, projects);
   const memberRepos = [...new Set(entries.flatMap((entry) => entry.repos ?? []))].filter((repo) => /^[^/]+\/[^/]+$/.test(repo)).sort((a, b) => a.localeCompare(b));
   const projectName = sharedName(entries, project2.name?.trim() || targetRepo2.split("/").pop() || targetRepo2);
   if (!memberRepos.length) throw new Error(`org project sync-info: project ${projectName} has no registered member repos`);
   const entryNames = entries.map((entry) => entry.name?.trim()).filter((name) => Boolean(name));
-  const shortDescription = memberRepos.length === 1 ? shortDescriptionFromReadme((0, import_node_fs27.readFileSync)(readmePath, "utf8")) : `Shared work across ${new Intl.ListFormat("en", { type: "conjunction" }).format(entryNames)}.`;
+  const shortDescription = memberRepos.length === 1 ? shortDescriptionFromReadme((0, import_node_fs28.readFileSync)(readmePath, "utf8")) : `Shared work across ${new Intl.ListFormat("en", { type: "conjunction" }).format(entryNames)}.`;
   const lines = [
     `# ${projectName}`,
     "",
@@ -20813,8 +20808,8 @@ function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   const targetBase = `https://github.com/${targetRepo2}`;
   const targetBranch = branchFor(targetRepo2, projects);
   const orgDocs = [
-    (0, import_node_fs27.existsSync)((0, import_node_path24.join)(repoRoot2, "docs", "org-readme.md")) ? `- [Org identity](${targetBase}/blob/${targetBranch}/docs/org-readme.md)` : "",
-    (0, import_node_fs27.existsSync)((0, import_node_path24.join)(repoRoot2, "docs", "org-architecture.md")) ? `- [Org architecture](${targetBase}/blob/${targetBranch}/docs/org-architecture.md)` : ""
+    (0, import_node_fs28.existsSync)((0, import_node_path25.join)(repoRoot2, "docs", "org-readme.md")) ? `- [Org identity](${targetBase}/blob/${targetBranch}/docs/org-readme.md)` : "",
+    (0, import_node_fs28.existsSync)((0, import_node_path25.join)(repoRoot2, "docs", "org-architecture.md")) ? `- [Org architecture](${targetBase}/blob/${targetBranch}/docs/org-architecture.md)` : ""
   ].filter(Boolean);
   if (orgDocs.length) lines.push("", "## Organisation docs", "", ...orgDocs);
   return { projectId: project2.projectId, projectName, targetRepo: targetRepo2, memberRepos, shortDescription, readme: `${lines.join("\n")}
@@ -21673,8 +21668,8 @@ function writeError(res) {
 }
 
 // src/secrets-commands.ts
-var import_node_fs28 = require("node:fs");
-var import_node_path25 = require("node:path");
+var import_node_fs29 = require("node:fs");
+var import_node_path26 = require("node:path");
 var import_node_os10 = require("node:os");
 
 // src/project-runtime.ts
@@ -21798,18 +21793,18 @@ function collectMap(value, previous = []) {
   return [...previous, value];
 }
 async function decryptRailsCredentials(input) {
-  const appDir = (0, import_node_path25.resolve)(input.appDir ?? process.cwd());
+  const appDir = (0, import_node_path26.resolve)(input.appDir ?? process.cwd());
   const credentialsFile = input.credentialsFile ?? DEFAULT_RAILS_CREDENTIALS_FILE;
   const masterKeyFile = input.masterKeyFile ?? DEFAULT_RAILS_MASTER_KEY_FILE;
-  const credentialsPath = (0, import_node_path25.resolve)(appDir, credentialsFile);
-  const masterKeyPath = (0, import_node_path25.resolve)(appDir, masterKeyFile);
+  const credentialsPath = (0, import_node_path26.resolve)(appDir, credentialsFile);
+  const masterKeyPath = (0, import_node_path26.resolve)(appDir, masterKeyFile);
   const env = {
     ...process.env,
     MMI_RAILS_CREDENTIALS_FILE: credentialsPath,
     MMI_RAILS_MASTER_KEY_FILE: masterKeyPath
   };
-  if ((0, import_node_fs28.existsSync)(masterKeyPath)) {
-    env.RAILS_MASTER_KEY = (0, import_node_fs28.readFileSync)(masterKeyPath, "utf8").trim();
+  if ((0, import_node_fs29.existsSync)(masterKeyPath)) {
+    env.RAILS_MASTER_KEY = (0, import_node_fs29.readFileSync)(masterKeyPath, "utf8").trim();
   }
   const script = [
     'require "json"',
@@ -21819,9 +21814,9 @@ async function decryptRailsCredentials(input) {
     'config = ActiveSupport::EncryptedConfiguration.new(config_path: config_path, key_path: key_path, env_key: "RAILS_MASTER_KEY", raise_if_missing_key: true)',
     "puts JSON.generate(config.config)"
   ].join("\n");
-  const scriptDir = (0, import_node_fs28.mkdtempSync)((0, import_node_path25.join)((0, import_node_os10.tmpdir)(), "mmi-rails-decrypt-"));
-  const scriptPath = (0, import_node_path25.join)(scriptDir, "decrypt.rb");
-  (0, import_node_fs28.writeFileSync)(scriptPath, script, "utf8");
+  const scriptDir = (0, import_node_fs29.mkdtempSync)((0, import_node_path26.join)((0, import_node_os10.tmpdir)(), "mmi-rails-decrypt-"));
+  const scriptPath = (0, import_node_path26.join)(scriptDir, "decrypt.rb");
+  (0, import_node_fs29.writeFileSync)(scriptPath, script, "utf8");
   try {
     const args = ["exec", "ruby", scriptPath];
     const cmd = process.platform === "win32" ? "cmd.exe" : "bundle";
@@ -21833,7 +21828,7 @@ async function decryptRailsCredentials(input) {
     });
     return JSON.parse(stdout);
   } finally {
-    (0, import_node_fs28.rmSync)(scriptDir, { recursive: true, force: true });
+    (0, import_node_fs29.rmSync)(scriptDir, { recursive: true, force: true });
   }
 }
 async function readSecretStdin() {
@@ -21923,7 +21918,7 @@ function registerSecretsCommands(program3) {
     let body;
     if (o.file) {
       try {
-        body = (0, import_node_fs28.readFileSync)((0, import_node_path25.resolve)(o.file), "utf8");
+        body = (0, import_node_fs29.readFileSync)((0, import_node_path26.resolve)(o.file), "utf8");
       } catch (e) {
         return fail(`secrets org-catalog: cannot read --file ${o.file}: ${e.message}`);
       }
@@ -22028,7 +22023,7 @@ function registerSecretsCommands(program3) {
       {
         ...d,
         decryptRailsCredentials,
-        removeFile: (path2) => (0, import_node_fs28.unlinkSync)((0, import_node_path25.resolve)(o.appDir ?? process.cwd(), path2))
+        removeFile: (path2) => (0, import_node_fs29.unlinkSync)((0, import_node_path26.resolve)(o.appDir ?? process.cwd(), path2))
       },
       {
         repo: o.repo,
@@ -22192,7 +22187,7 @@ async function activateAppActor(commandPath3, env, mint) {
 }
 
 // src/box-commands.ts
-var import_node_fs29 = require("node:fs");
+var import_node_fs30 = require("node:fs");
 
 // src/box.ts
 var BOX_KEYS = {
@@ -22395,7 +22390,7 @@ function registerBoxCommands(program3) {
       }
       if (o.json) console.log(JSON.stringify({ box: found, incomplete }, null, 2));
       else if (o.ssh && o.script) {
-        (0, import_node_fs29.writeFileSync)(o.script, sshRecipeScript(found), "utf8");
+        (0, import_node_fs30.writeFileSync)(o.script, sshRecipeScript(found), "utf8");
         console.log(`wrote ${o.script} \u2014 run: bash "${o.script}"`);
       } else if (o.ssh) console.log(`${formatSshRecipe(found)}
 ${SSH_RECIPE_AGENT_NOTE}`);
@@ -22410,7 +22405,7 @@ ${SSH_RECIPE_AGENT_NOTE}`);
 
 // src/schedules-commands.ts
 var import_promises4 = require("node:fs/promises");
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var import_node_util7 = require("node:util");
 
 // src/schedules.ts
@@ -22721,7 +22716,7 @@ function cadenceStale(registryCadence, liveCadence) {
   if (!liveCrons.length) return false;
   return !liveCrons.every((cron) => registered.has(cron));
 }
-function reconcileGithubActions(liveGithub, registry2, readRepos, activeWorkflowNames = /* @__PURE__ */ new Set()) {
+function reconcileGithubActions(liveGithub, registry2, readRepos, activeWorkflowNames = /* @__PURE__ */ new Set(), disabledWorkflowNames = /* @__PURE__ */ new Set()) {
   const registryGithub = registry2.filter((r) => r.executor === "github-actions");
   const liveByName = new Map(liveGithub.map((e) => [e.name, e]));
   const registryById = new Map(registryGithub.map((r) => [r.id, r]));
@@ -22752,6 +22747,18 @@ function reconcileGithubActions(liveGithub, registry2, readRepos, activeWorkflow
       continue;
     }
     if (activeWorkflowNames.has(r.id)) continue;
+    if (disabledWorkflowNames.has(r.id)) {
+      if (readRepos.has(r.repo)) {
+        drifts.push({
+          class: "registered-but-disabled",
+          name: r.id,
+          executor: r.executor || "github-actions",
+          detail: "workflow file present but DISABLED in GitHub Actions \u2014 the dispatcher cannot run it",
+          remedy: `\`gh workflow enable\` it in ${r.repo} to re-arm (or, if it was retired on purpose, re-run schedules register so the replace prunes the SCHEDULE# row) \u2014 never prune a lane parked on purpose`
+        });
+      }
+      continue;
+    }
     if (readRepos.has(r.repo)) {
       drifts.push({
         class: "registered-but-dead",
@@ -22827,7 +22834,7 @@ function registeredButUnarmedDrifts(registry2, liveEntries, opts) {
   }
   return drifts.sort((a, b) => a.name.localeCompare(b.name));
 }
-function assembleReconciliation(githubEntries2, readRepos, registry2, activeWorkflowNames = /* @__PURE__ */ new Set(), harbour = {}) {
+function assembleReconciliation(githubEntries2, readRepos, registry2, activeWorkflowNames = /* @__PURE__ */ new Set(), harbour = {}, disabledWorkflowNames = /* @__PURE__ */ new Set()) {
   if (registry2 === null) {
     return {
       reconciliation: [],
@@ -22837,7 +22844,7 @@ function assembleReconciliation(githubEntries2, readRepos, registry2, activeWork
   }
   const live = githubEntries2.filter((e) => e.executor === "github-actions");
   const drifts = [
-    ...reconcileGithubActions(live, registry2, readRepos, activeWorkflowNames),
+    ...reconcileGithubActions(live, registry2, readRepos, activeWorkflowNames, disabledWorkflowNames),
     ...registeredButUnarmedDrifts(registry2, harbour.awsEntries ?? [], {
       schedulerRead: Boolean(harbour.schedulerRead),
       now: harbour.now
@@ -22847,7 +22854,7 @@ function assembleReconciliation(githubEntries2, readRepos, registry2, activeWork
 }
 
 // src/schedules-commands.ts
-var execFileP5 = (0, import_node_util7.promisify)(import_node_child_process15.execFile);
+var execFileP5 = (0, import_node_util7.promisify)(import_node_child_process16.execFile);
 var AWS_REGION = "eu-central-1";
 var AWS_TIMEOUT_MS = 3e4;
 var AWS_RETRY_DELAY_MS = 1500;
@@ -22871,9 +22878,15 @@ async function repoWorkflowEntries(client, repo) {
   const entries = [];
   const failures = [];
   const workflows = [];
+  const disabled = [];
   for (const wf of workflowsList) {
-    if (wf?.state !== "active" || typeof wf.path !== "string" || !wf.path) continue;
+    if (typeof wf?.path !== "string" || !wf.path) continue;
     if (!wf.path.startsWith(".github/workflows/")) continue;
+    if (wf.state !== "active") {
+      const basename5 = wf.path.split("/").pop() ?? wf.path;
+      disabled.push(`${repo}/${basename5.replace(/\.ya?ml$/, "")}`);
+      continue;
+    }
     try {
       const contents = await client.rest(
         "GET",
@@ -22892,7 +22905,7 @@ async function repoWorkflowEntries(client, repo) {
       else throw e;
     }
   }
-  return { entries, failures, workflows };
+  return { entries, failures, workflows, disabled };
 }
 async function githubEntries(client) {
   const entries = [];
@@ -22900,12 +22913,13 @@ async function githubEntries(client) {
   const drift = [];
   const readRepos = [];
   const workflows = [];
+  const disabledWorkflowNames = [];
   let repos;
   try {
     const listing = await client.restPaginate(`/orgs/${ORG}/repos?per_page=100`);
     repos = listing.filter((r) => typeof r?.name === "string" && r.archived !== true).map((r) => r.name).sort();
   } catch (e) {
-    return { entries, incomplete: [`github: could not list ${ORG} repos \u2014 ${e.message}`], drift, reconciliation: [], readRepos, workflowNames: [] };
+    return { entries, incomplete: [`github: could not list ${ORG} repos \u2014 ${e.message}`], drift, reconciliation: [], readRepos, workflowNames: [], disabledWorkflowNames: [] };
   }
   const results = await Promise.all(
     repos.map(async (repo) => {
@@ -22922,6 +22936,7 @@ async function githubEntries(client) {
       readRepos.push(r.repo);
       entries.push(...r.entries);
       workflows.push(...r.workflows);
+      disabledWorkflowNames.push(...r.disabled);
       if (r.failures.length) {
         drift.push(`${r.repo}: ${r.failures.length} workflow record(s) listed active with no file on the default branch (deleted one-offs?) \u2014 deregister them: ${r.failures.map((f) => f.split(": ")[1]).join(", ")}`);
       }
@@ -22929,7 +22944,7 @@ async function githubEntries(client) {
   }
   const reconciliation = [...strayCronDrifts(workflows), ...unlauncheredLlmDrifts(entries)];
   drift.push(...reconciliation.map(renderDrift));
-  return { entries, incomplete, drift, reconciliation, readRepos, workflowNames: workflows.map((w) => w.name) };
+  return { entries, incomplete, drift, reconciliation, readRepos, workflowNames: workflows.map((w) => w.name), disabledWorkflowNames };
 }
 async function awsJson(args) {
   const run = async () => {
@@ -22984,7 +22999,7 @@ async function fetchNotebook(client = defaultGitHubClient(), readRegistry = defa
     // #3286: the harbour side joins registry rows against the live aws-scheduler clocks by scheduleId.
     awsEntries: aws.entries,
     schedulerRead: Boolean(aws.schedulerRead)
-  });
+  }, new Set(gh.disabledWorkflowNames));
   const selfManaged = /* @__PURE__ */ new Set();
   for (const proj of projects ?? []) {
     if (proj?.schedulesMode !== "self-managed") continue;
@@ -23084,7 +23099,7 @@ function registerSchedulesCommands(program3) {
 
 // src/file-lock.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_path26 = require("node:path");
+var import_node_path27 = require("node:path");
 var sleep = (ms) => new Promise((resolve5) => setTimeout(resolve5, ms));
 var IMMEDIATE_RETRY_BUDGET = 3;
 var FileLockBusyError = class extends Error {
@@ -23169,7 +23184,7 @@ async function releaseFileLock(lockPath, guard) {
 }
 async function withFileLock(lockPath, opts, fn) {
   const resolved = resolveFileLockOpts(opts);
-  await (0, import_promises5.mkdir)((0, import_node_path26.dirname)(lockPath), { recursive: true }).catch(() => void 0);
+  await (0, import_promises5.mkdir)((0, import_node_path27.dirname)(lockPath), { recursive: true }).catch(() => void 0);
   const guard = await acquireFileLock(lockPath, resolved, Date.now() + resolved.maxWaitMs);
   try {
     return await fn();
@@ -23180,7 +23195,7 @@ async function withFileLock(lockPath, opts, fn) {
 
 // src/schedules-lift-command.ts
 var import_promises6 = require("node:fs/promises");
-var import_node_path27 = require("node:path");
+var import_node_path28 = require("node:path");
 
 // src/schedules-lift.ts
 var SCHEDULE_HEADER_FIELDS = ["schedule", "what", "owner", "cadence", "executor", "llm", "output", "breaks", "kill"];
@@ -23286,7 +23301,7 @@ async function readWorkflowFiles(dir) {
   const files = [];
   for (const name of names.sort()) {
     if (!/\.ya?ml$/.test(name)) continue;
-    files.push({ path: `.github/workflows/${name}`, text: await (0, import_promises6.readFile)((0, import_node_path27.join)(dir, name), "utf8") });
+    files.push({ path: `.github/workflows/${name}`, text: await (0, import_promises6.readFile)((0, import_node_path28.join)(dir, name), "utf8") });
   }
   return files;
 }
@@ -23828,11 +23843,12 @@ function registerQueryCommands(program3) {
 }
 
 // src/bootstrap-commands.ts
-var import_node_fs30 = require("node:fs");
+var import_node_fs31 = require("node:fs");
 var import_node_os11 = require("node:os");
-var import_node_path28 = require("node:path");
+var import_node_path29 = require("node:path");
 
 // src/bootstrap-drift.ts
+var import_node_crypto6 = require("node:crypto");
 function byteComparableSeeds(manifest, cls) {
   return manifest.seeds.filter((s) => s.ownership === "org" && s.source === "self" && s.classes.includes(cls));
 }
@@ -23841,6 +23857,9 @@ function compareSeedBytes(hubContent, repoContent) {
   const normalize = (s) => s.replace(/\r\n/g, "\n");
   return normalize(hubContent) === normalize(repoContent) ? "match" : "drift";
 }
+function seedContentHash(content) {
+  return (0, import_node_crypto6.createHash)("sha256").update(content.replace(/\r\n/g, "\n"), "utf8").digest("hex");
+}
 function auditRepoSeedDrift(repo, seeds, hubContents, repoReads) {
   const byTarget = new Map(repoReads.map((r) => [r.target, r.content]));
   const slug = repo.includes("/") ? repo.slice(repo.indexOf("/") + 1).toLowerCase() : repo.toLowerCase();
@@ -23863,11 +23882,14 @@ function auditRepoSeedDrift(repo, seeds, hubContents, repoReads) {
       findings.push({ repo, target: seed.target, state: "waived", detail: `${state} \u2014 waived: ${why}` });
       continue;
     }
+    const repoContent = byTarget.get(seed.target);
     findings.push({
       repo,
       target: seed.target,
       state,
-      detail: state === "absent" ? "declared org-owned in the manifest but not present on the base branch" : "differs from MMI-Hub's copy \u2014 propagate with `mmi-cli bootstrap apply <repo> --only <target> --execute`, or, if this repo is RIGHT to differ, declare a waiver for it on the seed in the manifest (#3842)"
+      detail: state === "absent" ? "declared org-owned in the manifest but not present on the base branch" : "differs from MMI-Hub's copy \u2014 fix this in MMI-Hub and let it propagate (#4233); `mmi-cli bootstrap apply <repo> --only <target> --execute` remains for THIS repo's own bootstrap/onboarding, never a fleet-wide fan-out (#4241 fails a hand-edited fleet copy at the merge gate on repos carrying the new seed), or, if this repo is RIGHT to differ, declare a waiver for it on the seed in the manifest (#3842)",
+      // #4242: only a real 'drift' has bytes worth hashing — 'absent' has none to compare against history.
+      ...state === "drift" && repoContent != null ? { contentHash: seedContentHash(repoContent) } : {}
     });
   }
   return findings;
@@ -23886,6 +23908,115 @@ function renderSeedDriftReport(findings, reposAudited, seedsPerRepo) {
   return lines.join("\n");
 }
 
+// src/bootstrap-propagate.ts
+function assertPropagationCoverage(rosterCount, independentRegistryCount) {
+  if (rosterCount === 0) {
+    throw new Error("bootstrap propagate: roster read 0 repos \u2014 refusing to report a plan from a roster this command could not establish (#4232 coverage invariant)");
+  }
+  if (rosterCount < independentRegistryCount) {
+    throw new Error(
+      `bootstrap propagate: roster read ${rosterCount} repo(s) but the independent registry count is ${independentRegistryCount} \u2014 this read did not cover the fleet (#4232 coverage invariant)`
+    );
+  }
+}
+function assignWaves(repos, canarySlug) {
+  const waves = /* @__PURE__ */ new Map();
+  if (!canarySlug) return waves;
+  const rest = repos.filter((r) => r.slug !== canarySlug).slice().sort((a, b) => a.slug < b.slug ? -1 : a.slug > b.slug ? 1 : 0);
+  const canary = repos.find((r) => r.slug === canarySlug);
+  if (canary) waves.set(canary.repo, 0);
+  const wave1Count = Math.ceil(rest.length * 0.25);
+  rest.forEach((r, i) => waves.set(r.repo, i < wave1Count ? 1 : 2));
+  return waves;
+}
+function statusFor(read) {
+  if (!read) return { status: "pending", record: {} };
+  if (read.drift === "match") return { status: "match", record: { mergeSha: read.pr?.mergeSha } };
+  const pr2 = read.pr;
+  if (!pr2) return { status: "pending", record: {} };
+  if (pr2.state === "closed") return { status: "closed-unmerged", record: { prNumber: pr2.number, prUrl: pr2.url } };
+  if (pr2.checks === "red") return { status: "red", record: { prNumber: pr2.number, prUrl: pr2.url } };
+  return { status: "open-pending", record: { prNumber: pr2.number, prUrl: pr2.url, mergeSha: pr2.mergeSha } };
+}
+var HALTING_STATUSES = /* @__PURE__ */ new Set(["red", "closed-unmerged"]);
+function planPropagationTick(input) {
+  const { target, repos, canarySlug, reads, isWorkflowSeed, functionGateSatisfied } = input;
+  const readByRepo = new Map(reads.map((r) => [r.repo, r]));
+  const records = [];
+  const opened = [];
+  const waived = repos.filter((r) => r.waiver);
+  for (const r of waived) {
+    records.push({ repo: r.repo, target, wave: null, status: "skipped-waived", action: "none", detail: `waived: ${r.waiver}` });
+  }
+  const eligible = repos.filter((r) => !r.waiver);
+  const refusedNoCanary = !canarySlug || !eligible.some((r) => r.slug === canarySlug);
+  if (refusedNoCanary) {
+    for (const r of eligible) {
+      records.push({ repo: r.repo, target, wave: null, status: "not-yet-reached", action: "none", detail: "no canary declared for this target \u2014 refusing to plan any wave (#4238 canary requirement)" });
+    }
+    return { target, reposInScope: repos.length, canary: null, refusedNoCanary: true, halted: false, haltReason: null, opened, records };
+  }
+  const waveOf = assignWaves(eligible, canarySlug);
+  const byWave = { 0: [], 1: [], 2: [] };
+  for (const r of eligible) byWave[waveOf.get(r.repo) ?? 2].push(r);
+  let halted = false;
+  let haltReason = null;
+  let waveGateOpen = true;
+  for (const waveNum of [0, 1, 2]) {
+    const waveRepos = byWave[waveNum];
+    if (!waveRepos.length) continue;
+    if (!waveGateOpen || halted) {
+      for (const r of waveRepos) {
+        records.push({ repo: r.repo, target, wave: waveNum, status: "not-yet-reached", action: "none", detail: "prior wave not yet converged" });
+      }
+      continue;
+    }
+    let waveAllMatch = true;
+    let waveHasRed = false;
+    for (const r of waveRepos) {
+      const { status, record } = statusFor(readByRepo.get(r.repo));
+      const shouldOpen = status === "pending";
+      if (shouldOpen) opened.push(r.repo);
+      records.push({
+        repo: r.repo,
+        target,
+        wave: waveNum,
+        status,
+        action: shouldOpen ? "open-pr" : "none",
+        detail: shouldOpen ? "no open propagation PR and not yet matching \u2014 opening this tick" : status,
+        ...record
+      });
+      if (status !== "match") waveAllMatch = false;
+      if (HALTING_STATUSES.has(status)) waveHasRed = true;
+    }
+    if (waveHasRed) {
+      halted = true;
+      haltReason = `wave ${waveNum} has a red or closed-unmerged PR \u2014 halting; no further wave opens (#4238 halt-and-alarm)`;
+      waveGateOpen = false;
+      continue;
+    }
+    if (waveNum === 0 && isWorkflowSeed && !functionGateSatisfied) {
+      waveGateOpen = false;
+      continue;
+    }
+    waveGateOpen = waveAllMatch;
+  }
+  return { target, reposInScope: repos.length, canary: canarySlug, refusedNoCanary: false, halted, haltReason, opened, records };
+}
+function renderPropagationReport(plan) {
+  const lines = [`bootstrap propagate \u2014 target ${plan.target}: ${plan.reposInScope} repo(s) in scope, canary=${plan.canary ?? "NONE"}`];
+  if (plan.refusedNoCanary) {
+    lines.push("  REFUSED \u2014 no canary declared for this target; plan every repo not-yet-reached");
+    return lines.join("\n");
+  }
+  for (const r of plan.records) {
+    const wave2 = r.wave == null ? "-" : String(r.wave);
+    lines.push(`  wave${wave2.padEnd(2)} ${r.status.padEnd(16)} ${r.repo}${r.prNumber ? ` PR#${r.prNumber}` : ""} \u2014 ${r.detail}`);
+  }
+  lines.push(plan.halted ? `  HALTED \u2014 ${plan.haltReason}` : `  opened this tick: ${plan.opened.length ? plan.opened.join(", ") : "(none)"}`);
+  return lines.join("\n");
+}
+
 // src/bootstrap-verify.ts
 var TRAIN_BRANCHES2 = ["development", "rc", "main"];
 var requiredDocs = ["README.md", "architecture.md", "docs/decisions/README.md", "docs/index.md"];
@@ -24102,6 +24233,11 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
   const repoInfo = await restJson3(deps, `repos/${repo}`, {});
   checks.push({ ok: Boolean(repoInfo.default_branch), label: "repo exists" });
   checks.push({ ok: repoInfo.default_branch === baseBranch, label: `default branch is ${baseBranch}`, detail: repoInfo.default_branch || "missing" });
+  checks.push({
+    ok: repoInfo.has_wiki === false,
+    label: "has_wiki disabled",
+    detail: repoInfo.has_wiki === false ? void 0 : `wikis are retired org-wide \u2014 gh api -X PATCH repos/${repo} -F has_wiki=false`
+  });
   const branchList = await restPagedJson2(deps, `repos/${repo}/branches`, []);
   const branchNames = new Set(branchList.map((b) => b.name));
   for (const branch of branchesWanted) {
@@ -24543,13 +24679,13 @@ function registerBootstrapCommands(program3) {
       client: defaultGitHubClient(),
       projectMeta: meta,
       deployModel: typeof meta?.deployModel === "string" ? meta.deployModel : void 0,
-      readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs30.existsSync)(path2) ? (0, import_node_fs30.readFileSync)(path2, "utf8") : null,
+      readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs31.existsSync)(path2) ? (0, import_node_fs31.readFileSync)(path2, "utf8") : null,
       // requiredGcpApis is stored as an array by a JSON write, but `org project set --var KEY=VALUE` stores a raw
       // comma-string — accept either so the seeded value verifies regardless of how it was written.
       // #3689: the same committed map the org access audit reads (#3664), so a sanctioned admin is not a
       // permanent bootstrap failure on one surface and an intended state on the other. Absent file → no
       // sanction, which is the pre-#3664 behaviour.
-      sanctionedAdmins: (0, import_node_fs30.existsSync)("access-matrix.json") ? entriesValueByCanonicalRepo(loadSanctionedAdmins((0, import_node_fs30.readFileSync)("access-matrix.json", "utf8")), repo) : void 0,
+      sanctionedAdmins: (0, import_node_fs31.existsSync)("access-matrix.json") ? entriesValueByCanonicalRepo(loadSanctionedAdmins((0, import_node_fs31.readFileSync)("access-matrix.json", "utf8")), repo) : void 0,
       requiredGcpApis: (() => {
         const v = meta?.requiredGcpApis;
         if (Array.isArray(v)) return v;
@@ -24602,12 +24738,12 @@ function registerBootstrapCommands(program3) {
   bootstrap.command("drift").description("#3818: compare every org-owned whole-file seed against MMI-Hub's copy across the registry roster; read-only").option("--repo <owner/repo>", "audit one repo instead of the roster (never a fleet verdict)").option("--json", "machine-readable output").action(async () => {
     const o = { repo: rawValue("--repo", ""), json: rawFlag("--json") };
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs30.existsSync)(manifestPath)) return fail(`bootstrap drift: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the reference this compares against`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs30.readFileSync)(manifestPath, "utf8"));
+    if (!(0, import_node_fs31.existsSync)(manifestPath)) return fail(`bootstrap drift: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the reference this compares against`);
+    const manifest = loadBootstrapSeeds((0, import_node_fs31.readFileSync)(manifestPath, "utf8"));
     const hubContents = /* @__PURE__ */ new Map();
     for (const s of manifest.seeds) {
       if (s.ownership !== "org" || s.source !== "self") continue;
-      hubContents.set(s.target, (0, import_node_fs30.existsSync)(s.target) ? (0, import_node_fs30.readFileSync)(s.target, "utf8") : null);
+      hubContents.set(s.target, (0, import_node_fs31.existsSync)(s.target) ? (0, import_node_fs31.readFileSync)(s.target, "utf8") : null);
     }
     let targets;
     let classOf = (_repo) => "deployable";
@@ -24684,8 +24820,8 @@ function registerBootstrapCommands(program3) {
       return fail(`bootstrap apply: ${e.message}`);
     }
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs30.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; bootstrap runs from the MMI-Hub repo root by design \u2014 it stamps org-level resources (Project, Ruleset, secrets, access) through the GitHub App, which is only authorized from the Hub checkout`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs30.readFileSync)(manifestPath, "utf8"));
+    if (!(0, import_node_fs31.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; bootstrap runs from the MMI-Hub repo root by design \u2014 it stamps org-level resources (Project, Ruleset, secrets, access) through the GitHub App, which is only authorized from the Hub checkout`);
+    const manifest = loadBootstrapSeeds((0, import_node_fs31.readFileSync)(manifestPath, "utf8"));
     const baseBranch = o.class === "content" ? "main" : "development";
     const slug = parsedRepo.slug;
     const onlyTarget = o.only.trim();
@@ -24696,16 +24832,16 @@ function registerBootstrapCommands(program3) {
   ${known}`);
     }
     const gh = async (args) => execFileP2("gh", args, { timeout: 2e4 });
-    const readFile9 = (p) => (0, import_node_fs30.existsSync)(p) ? (0, import_node_fs30.readFileSync)(p, "utf8") : null;
+    const readFile9 = (p) => (0, import_node_fs31.existsSync)(p) ? (0, import_node_fs31.readFileSync)(p, "utf8") : null;
     const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
     const putSeed = async (target, content, ref, sha) => {
-      const tmp = (0, import_node_path28.join)((0, import_node_os11.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
-      (0, import_node_fs30.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
+      const tmp = (0, import_node_path29.join)((0, import_node_os11.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
+      (0, import_node_fs31.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
       try {
         await gh(contentPutInputArgs(repo, target, tmp));
       } finally {
         try {
-          (0, import_node_fs30.unlinkSync)(tmp);
+          (0, import_node_fs31.unlinkSync)(tmp);
         } catch {
         }
       }
@@ -24879,6 +25015,14 @@ function registerBootstrapCommands(program3) {
       });
       applied.push(autoMergeEnabled ? `seed: PR ${seedPrUrl} (base ${baseBranch} protected; auto-merge enabled)` : `seed: PR ${seedPrUrl} (base ${baseBranch} protected; auto-merge refused \u2014 PR is already clean. Land it: mmi-cli pr land <n> --repo ${repo})`);
     }
+    if (o.execute && !onlyTarget) {
+      try {
+        await gh(["api", "-X", "PATCH", `repos/${repo}`, "-F", "has_wiki=false"]);
+        applied.push("has_wiki=false (wikis retired org-wide)");
+      } catch (e) {
+        applied.push(`has_wiki=false (failed: ${e.message})`);
+      }
+    }
     if (o.execute && !onlyTarget && o.class === "deployable") {
       try {
         await gh(["api", "-X", "PATCH", `repos/${repo}`, "-f", "allow_auto_merge=true", "-f", "allow_squash_merge=true", "-f", "delete_branch_on_merge=true"]);
@@ -24959,15 +25103,183 @@ LIVE apply to ${repo}:
   ${applied.join("\n  ")}`);
     }
   });
+  bootstrap.command("propagate").description("#4238: re-entrant canary\u2192wave tick \u2014 plan (or, with --execute, open) per-repo PRs fanning an org-owned seed out to the fleet").option("--target <path>", "the manifest target to propagate (an ownership:org + source:self seed, e.g. .github/workflows/agent-pr.yml)").option("--execute", "LIVE tick via gh (master-gated) \u2014 opens/reuses per-repo seed-propagate PRs; dry-run prints the plan only").option("--json", "machine-readable output").action(async () => {
+    const o = { target: rawValue("--target", ""), execute: rawFlag("--execute"), json: rawFlag("--json") };
+    const manifestPath = "skills/bootstrap/seeds/manifest.json";
+    if (!(0, import_node_fs31.existsSync)(manifestPath)) return fail(`bootstrap propagate: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the desired state this tick propagates`);
+    const manifest = loadBootstrapSeeds((0, import_node_fs31.readFileSync)(manifestPath, "utf8"));
+    const propagatable = manifest.seeds.filter((s) => s.ownership === "org" && s.source === "self");
+    if (!o.target) {
+      return fail(`bootstrap propagate: --target <path> is required \u2014 one of:
+  ${propagatable.map((s) => s.target).join("\n  ")}`);
+    }
+    const seed = propagatable.find((s) => s.target === o.target);
+    if (!seed) return fail(`bootstrap propagate: --target '${o.target}' names no ownership:org + source:self seed in ${manifestPath}. Propagatable targets:
+  ${propagatable.map((s) => s.target).join("\n  ")}`);
+    if (!(0, import_node_fs31.existsSync)(seed.target)) return fail(`bootstrap propagate: the Hub's own copy of '${seed.target}' is missing \u2014 nothing to propagate`);
+    const hubContent = (0, import_node_fs31.readFileSync)(seed.target, "utf8");
+    const isWorkflowSeed = seed.target.startsWith(".github/workflows/");
+    const cfg = await loadConfig();
+    const projects = await fetchProjectsList(registryClientDeps(cfg));
+    if (!projects || projects.length === 0) {
+      return failGraceful("bootstrap propagate: the registry roster is unreadable or empty \u2014 refusing to plan a tick from a scope this command could not establish (#4232 coverage invariant)");
+    }
+    const rosterRepos2 = collectRegistryRepos(projects).filter((r) => r.toLowerCase() !== "mutmutco/mmi-hub");
+    let independentCount = rosterRepos2.length;
+    if ((0, import_node_fs31.existsSync)("projects.json")) {
+      try {
+        const local = JSON.parse((0, import_node_fs31.readFileSync)("projects.json", "utf8"));
+        const localRepos = /* @__PURE__ */ new Set();
+        for (const p of local.projects ?? []) for (const r of p.repos ?? []) {
+          const full = (r.includes("/") ? r : `mutmutco/${r}`).toLowerCase();
+          if (full !== "mutmutco/mmi-hub") localRepos.add(full);
+        }
+        if (localRepos.size > 0) independentCount = localRepos.size;
+      } catch {
+      }
+    }
+    try {
+      assertPropagationCoverage(rosterRepos2.length, independentCount);
+    } catch (e) {
+      return fail(e.message);
+    }
+    const bySlugMeta = new Map(projects.flatMap((p) => (p.repos ?? []).map((r) => [(r.includes("/") ? r : `mutmutco/${r}`).toLowerCase(), p])));
+    const classOf = (repo) => bySlugMeta.get(repo.toLowerCase())?.class ?? "deployable";
+    const canaryProject = projects.find((p) => p.seedCanary === true);
+    const canarySlug = canaryProject ? (canaryProject.repos ?? [])[0]?.split("/").pop()?.toLowerCase() ?? null : null;
+    const repos = rosterRepos2.map((repo) => {
+      const slug = repo.split("/").pop().toLowerCase();
+      const waiver = seed.waivers?.[slug];
+      return { repo, slug, waiver };
+    });
+    const gh = async (args) => execFileP2("gh", args, { timeout: 2e4 });
+    const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
+    const branchPrefix = "seed-propagate";
+    const reads = [];
+    for (const r of repos) {
+      if (r.waiver) continue;
+      const baseBranch = classOf(r.repo) === "content" ? "main" : "development";
+      let content = null;
+      try {
+        const resp = await gh(["api", `repos/${r.repo}/contents/${enc(seed.target)}?ref=${baseBranch}`]);
+        const parsed = JSON.parse(resp.stdout);
+        content = parsed.encoding === "base64" && typeof parsed.content === "string" ? Buffer.from(parsed.content, "base64").toString("utf8") : null;
+      } catch {
+        content = null;
+      }
+      const drift = compareSeedBytes(hubContent, content);
+      let pr2;
+      try {
+        const branch = `${branchPrefix}-${r.slug}`;
+        const listed = await gh(["pr", "list", "--repo", r.repo, "--head", branch, "--base", baseBranch, "--state", "all", "--json", "number,url,state,statusCheckRollup,mergeCommit", "--limit", "1"]);
+        const arr = JSON.parse(listed.stdout || "[]");
+        const p = arr[0];
+        if (p) {
+          const rollup = p.statusCheckRollup ?? [];
+          const checks = rollup.length === 0 ? "none" : rollup.some((c) => c.conclusion === "FAILURE" || c.state === "FAILURE") ? "red" : rollup.every((c) => c.conclusion === "SUCCESS" || c.state === "SUCCESS") ? "success" : "pending";
+          pr2 = { number: p.number, url: p.url, state: p.state === "MERGED" ? "merged" : p.state === "CLOSED" ? "closed" : "open", checks, mergeSha: p.mergeCommit?.oid };
+        }
+      } catch {
+        pr2 = void 0;
+      }
+      reads.push({ repo: r.repo, drift: drift === "waived" ? "match" : drift, pr: pr2 });
+    }
+    let functionGateSatisfied = !isWorkflowSeed;
+    if (isWorkflowSeed && canarySlug) {
+      const canaryRepo = repos.find((r) => r.slug === canarySlug)?.repo;
+      const canaryRead = reads.find((r) => r.repo === canaryRepo);
+      if (canaryRead?.drift === "match") {
+        try {
+          const workflowFile = seed.target.split("/").pop();
+          const runs = await gh(["api", `repos/${canaryRepo}/actions/workflows/${workflowFile}/runs?status=success&per_page=1`]);
+          const parsed = JSON.parse(runs.stdout);
+          functionGateSatisfied = Array.isArray(parsed.workflow_runs) && parsed.workflow_runs.length > 0;
+        } catch {
+          functionGateSatisfied = false;
+        }
+      }
+    }
+    const plan = planPropagationTick({ target: seed.target, repos, canarySlug, reads, isWorkflowSeed, functionGateSatisfied });
+    if (o.execute) {
+      if (plan.refusedNoCanary) return fail("bootstrap propagate --execute: no canary declared for this target \u2014 refusing to write (set seedCanary:true on exactly one registry repo)");
+      const headSha = (await gh(["api", "repos/mutmutco/MMI-Hub/commits/development", "--jq", ".sha"])).stdout.trim();
+      for (const rec of plan.records) {
+        if (rec.action !== "open-pr") continue;
+        const repoEntry = repos.find((r) => r.repo === rec.repo);
+        const baseBranch = classOf(rec.repo) === "content" ? "main" : "development";
+        const branch = `${branchPrefix}-${repoEntry.slug}`;
+        const baseRef = await gh(["api", `repos/${rec.repo}/git/ref/heads/${baseBranch}`, "--jq", ".object.sha"]);
+        const baseSha = baseRef.stdout.trim();
+        let branchExists = true;
+        try {
+          await gh(["api", `repos/${rec.repo}/git/ref/heads/${branch}`]);
+        } catch {
+          branchExists = false;
+        }
+        if (!branchExists) await gh(["api", `repos/${rec.repo}/git/refs`, "-f", `ref=refs/heads/${branch}`, "-f", `sha=${baseSha}`]);
+        let existingSha;
+        try {
+          const cur = await gh(["api", `repos/${rec.repo}/contents/${enc(seed.target)}?ref=${branch}`]);
+          existingSha = JSON.parse(cur.stdout).sha;
+        } catch {
+          existingSha = void 0;
+        }
+        const tmp = (0, import_node_path29.join)((0, import_node_os11.tmpdir)(), `mmi-propagate-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
+        (0, import_node_fs31.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, hubContent, branch, existingSha)), "utf8");
+        try {
+          await gh(contentPutInputArgs(rec.repo, seed.target, tmp));
+        } finally {
+          try {
+            (0, import_node_fs31.unlinkSync)(tmp);
+          } catch {
+          }
+        }
+        const openPrs = await gh(["pr", "list", "--repo", rec.repo, "--head", branch, "--base", baseBranch, "--state", "open", "--json", "number,url"]);
+        const prDecision = decideSeedPrAction(JSON.parse(openPrs.stdout || "[]"));
+        let prUrl;
+        if (prDecision.action === "reuse") {
+          prUrl = prDecision.url;
+        } else {
+          const created = await ghCreate([
+            "pr",
+            "create",
+            "--repo",
+            rec.repo,
+            "--base",
+            baseBranch,
+            "--head",
+            branch,
+            "--title",
+            `chore: propagate org-owned ${seed.target} from MMI-Hub (wave ${rec.wave})`,
+            "--body",
+            `Auto-opened by \`mmi-cli bootstrap propagate --target ${seed.target} --execute\` (#4238), wave ${rec.wave}.
+
+Propagates MMI-Hub@${headSha} 's copy of \`${seed.target}\` to this repo \u2014 the file this PR carries and nothing else.
+
+Rollback: \`mmi-cli bootstrap rollback ${rec.repo} --target ${seed.target} --execute\` (#4240) reverts this PR's merge commit; never re-run propagate with old bytes.`
+          ]);
+          prUrl = created.url;
+        }
+        if (rec.wave !== 0) {
+          await gh(["pr", "merge", prUrl, "--repo", rec.repo, "--auto", "--squash"]).catch(() => {
+          });
+        }
+        rec.prUrl = prUrl;
+      }
+    }
+    if (o.json) console.log(JSON.stringify(plan, null, 2));
+    else console.log(renderPropagationReport(plan));
+    if (plan.halted) process.exitCode = 1;
+  });
 }
 
 // src/stage-commands.ts
-var import_node_fs32 = require("node:fs");
-var import_node_path30 = require("node:path");
+var import_node_fs33 = require("node:fs");
+var import_node_path31 = require("node:path");
 
 // src/port-registry.ts
-var import_node_fs31 = require("node:fs");
-var import_node_path29 = require("node:path");
+var import_node_fs32 = require("node:fs");
+var import_node_path30 = require("node:path");
 
 // ../infra/port-geometry.mjs
 var PORT_BLOCK = 100;
@@ -24981,8 +25293,8 @@ function nextPortBlock(registry2) {
   return [base, base + PORT_SPAN];
 }
 function loadPortRegistry(path2) {
-  if (!(0, import_node_fs31.existsSync)(path2)) return {};
-  const raw = JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8"));
+  if (!(0, import_node_fs32.existsSync)(path2)) return {};
+  const raw = JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8"));
   const out = {};
   for (const [key, value] of Object.entries(raw)) {
     if (Array.isArray(value) && value.length === 2 && value.every((n) => typeof n === "number")) {
@@ -24996,9 +25308,9 @@ function ensurePortRange(repo, path2) {
   const existing = registry2[repo];
   if (existing) return existing;
   const range = nextPortBlock(registry2);
-  const raw = (0, import_node_fs31.existsSync)(path2) ? JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8")) : {};
+  const raw = (0, import_node_fs32.existsSync)(path2) ? JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8")) : {};
   raw[repo] = range;
-  (0, import_node_fs31.writeFileSync)(path2, JSON.stringify(raw, null, 2) + "\n", "utf8");
+  (0, import_node_fs32.writeFileSync)(path2, JSON.stringify(raw, null, 2) + "\n", "utf8");
   return range;
 }
 function portCursorSeed(registry2) {
@@ -25020,22 +25332,22 @@ function existingPortRange(repo, registry2) {
   return registry2[repo] ?? null;
 }
 function portRangeInfraAt(root, source) {
-  const registryPath = (0, import_node_path29.join)(root, "infra", "port-ranges.json");
-  const ddbScriptPath = (0, import_node_path29.join)(root, "infra", "port-ddb.mjs");
-  if (!(0, import_node_fs31.existsSync)(registryPath) || !(0, import_node_fs31.existsSync)(ddbScriptPath)) return null;
+  const registryPath = (0, import_node_path30.join)(root, "infra", "port-ranges.json");
+  const ddbScriptPath = (0, import_node_path30.join)(root, "infra", "port-ddb.mjs");
+  if (!(0, import_node_fs32.existsSync)(registryPath) || !(0, import_node_fs32.existsSync)(ddbScriptPath)) return null;
   return { root, source, registryPath, ddbScriptPath };
 }
 function resolvePortRangeInfra(cwd, packageDir) {
   const direct = portRangeInfraAt(cwd, "cwd");
   if (direct) return direct;
-  for (let dir = cwd; ; dir = (0, import_node_path29.dirname)(dir)) {
-    const sibling = portRangeInfraAt((0, import_node_path29.join)(dir, "MMI-Hub"), "sibling-hub");
+  for (let dir = cwd; ; dir = (0, import_node_path30.dirname)(dir)) {
+    const sibling = portRangeInfraAt((0, import_node_path30.join)(dir, "MMI-Hub"), "sibling-hub");
     if (sibling) return sibling;
-    const parent = (0, import_node_path29.dirname)(dir);
+    const parent = (0, import_node_path30.dirname)(dir);
     if (parent === dir) break;
   }
   if (packageDir) {
-    const pkgRoot = (0, import_node_path29.join)(packageDir, "..", "..");
+    const pkgRoot = (0, import_node_path30.join)(packageDir, "..", "..");
     const pkgFrom = portRangeInfraAt(pkgRoot, "pkg-root");
     if (pkgFrom) return pkgFrom;
   }
@@ -25229,8 +25541,8 @@ function registerStageCommands(program3) {
     const portRange = portRangeMeta && typeof portRangeMeta.start === "number" && typeof portRangeMeta.end === "number" ? [portRangeMeta.start, portRangeMeta.end] : void 0;
     return decideStage({
       registry: { deployModel: project2?.deployModel, portRange, error: read.ok ? void 0 : read.error },
-      hasCompose: (0, import_node_fs32.existsSync)((0, import_node_path30.join)(process.cwd(), "docker-compose.yml")),
-      hasEnvExample: (0, import_node_fs32.existsSync)((0, import_node_path30.join)(process.cwd(), ".env.example"))
+      hasCompose: (0, import_node_fs33.existsSync)((0, import_node_path31.join)(process.cwd(), "docker-compose.yml")),
+      hasEnvExample: (0, import_node_fs33.existsSync)((0, import_node_path31.join)(process.cwd(), ".env.example"))
     });
   }
   async function fetchStageVaultEnvMerge() {
@@ -25499,6 +25811,7 @@ function registerBoardCommands(program3) {
           force: o.force,
           allowPartial: o.allowPartial
         });
+        invalidateStatuslineBoardCache();
         if (o.json) return console.log(JSON.stringify(result));
         console.log(result.partial ? `Partially claimed ${result.item.ref}: ${result.warning}` : result.alreadyClaimed ? `Already claimed ${result.item.ref} - In Progress (no change)` : `Claimed ${result.item.ref} - In Progress`);
       } catch (e) {
@@ -25515,6 +25828,7 @@ function registerBoardCommands(program3) {
         force: o.force,
         allowPartial: o.allowPartial
       });
+      if (bulk.results.some((r) => r.claimed)) invalidateStatuslineBoardCache();
       if (o.json) {
         console.log(JSON.stringify(bulk.results));
       } else {
@@ -25559,6 +25873,7 @@ function registerBoardCommands(program3) {
         repo: o.repo,
         allowPartial: o.allowPartial
       });
+      if (bulk.results.some((r) => r.moved)) invalidateStatuslineBoardCache();
       if (o.json) {
         console.log(JSON.stringify(bulk.results));
       } else {
@@ -25583,6 +25898,7 @@ function registerBoardCommands(program3) {
     if (issueRefs.length === 1) {
       try {
         const result = await moveBoardItem({ config: await loadConfigForBoardSelector2(issueRefs[0], o.repo), selector: issueRefs[0], status: canonicalStatus, repo: o.repo, allowPartial: o.allowPartial });
+        invalidateStatuslineBoardCache();
         if (o.json) return console.log(JSON.stringify(result));
         console.log(result.partial ? `Partially moved ${result.item.ref}: ${result.warning}` : `Moved ${result.item.ref} -> ${result.status}`);
       } catch (e) {
@@ -25634,6 +25950,7 @@ function registerBoardCommands(program3) {
         force: o.force,
         allowPartial: o.allowPartial
       });
+      invalidateStatuslineBoardCache();
       if (o.json) return console.log(JSON.stringify(result));
       console.log(result.partial ? `Partially unclaimed ${result.item.ref}: ${result.warning}` : `Unclaimed ${result.item.ref} -> ${result.status}`);
     } catch (e) {
@@ -25668,11 +25985,11 @@ function registerBoardCommands(program3) {
 }
 
 // src/merge-cleanup.ts
-var import_node_fs33 = require("node:fs");
+var import_node_fs34 = require("node:fs");
 var import_promises8 = require("node:fs/promises");
-var import_node_path32 = require("node:path");
+var import_node_path33 = require("node:path");
 var import_node_os12 = require("node:os");
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 
 // src/board-advance.ts
 function repoOf2(ref) {
@@ -25758,7 +26075,7 @@ function boardAdvanceFailureMessage(result) {
 
 // src/deferred-registry-store.ts
 var import_promises7 = require("node:fs/promises");
-var import_node_path31 = require("node:path");
+var import_node_path32 = require("node:path");
 var sleep2 = (ms) => new Promise((resolve5) => setTimeout(resolve5, ms));
 async function atomicWrite(target, contents) {
   const tmp = `${target}.tmp-${process.pid}-${Math.random().toString(36).slice(2)}`;
@@ -25809,12 +26126,12 @@ function makeDeferredWorktreeStore(registryPath, lockOpts = {}) {
     },
     // Standalone atomic write — THROWS on failure (no best-effort swallow, #2846).
     write: async (entries) => {
-      await (0, import_promises7.mkdir)((0, import_node_path31.dirname)(registryPath), { recursive: true });
+      await (0, import_promises7.mkdir)((0, import_node_path32.dirname)(registryPath), { recursive: true });
       await atomicWrite(registryPath, serializeDeferredWorktrees(entries));
     },
     // Serialized read-modify-write under the repo-wide lock (#2846).
     update: async (mutate) => {
-      await (0, import_promises7.mkdir)((0, import_node_path31.dirname)(registryPath), { recursive: true });
+      await (0, import_promises7.mkdir)((0, import_node_path32.dirname)(registryPath), { recursive: true });
       const deadline = Date.now() + opts.maxWaitMs;
       for (; ; ) {
         const guard = await acquireLock(lockPath, opts, deadline);
@@ -25955,6 +26272,22 @@ function assertPrMergeHousekeepingClean(startingPath, context, options = {}) {
   if (verdict.blocked) throw new Error(verdict.reason);
   return housekeeping;
 }
+async function bestEffortLeaseClose(wtPath, exec = (cmd, args) => execFileP2(cmd, args, { timeout: GIT_TIMEOUT_MS })) {
+  const step = "close jerv worktree lease";
+  try {
+    await exec("jerv-cli", ["lease", "close", "--ref", wtPath]);
+    return { step, status: "done" };
+  } catch (e) {
+    const err = e;
+    const detail = `${err.message}
+${err.stderr ?? ""}`;
+    if (/ENOENT|not found|not recognized/i.test(detail)) {
+      return { step, status: "skipped: jerv-cli not on PATH" };
+    }
+    const msg = (err.stderr?.trim() || err.message).split("\n")[0];
+    return { step, status: `failed: ${msg}` };
+  }
+}
 async function applyGcPlan(plan, remote, opts = {}) {
   const result = { removedBranches: [], removedRemoteBranches: [], removedTrackingRefs: [], removedWorktreeDirs: [], refused: [], failed: [], pruned: false };
   const beforeWorktrees = parseWorktreePorcelain(
@@ -25962,7 +26295,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
   );
   const repoRoot2 = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path32.dirname)((0, import_node_path32.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path33.dirname)((0, import_node_path33.dirname)(worktreeGitRoot)) : repoRoot2;
   const gcActor = describeActor({ env: process.env, surface: detectSurface(process.env), cwd: process.cwd() });
   const owners = readWorktreeOwners(primaryRepoRoot);
   const removalNow = Date.now();
@@ -25993,7 +26326,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
       const cleanup = await cleanupPrMergeLocalBranch(branch.branch, {
         beforeWorktrees,
         startingPath: branch.worktreePath,
-        pathExists: (p) => (0, import_node_fs33.existsSync)(p),
+        pathExists: (p) => (0, import_node_fs34.existsSync)(p),
         execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
         teardownWorktreeStage,
         deferredStore,
@@ -26003,6 +26336,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
         removeWorktreeDir: wtDeps.removeWorktreeDir,
         removalContext: { primaryRoot: primaryRepoRoot, actor: gcActor, command: "worktree gc", force: opts.force }
       });
+      if (cleanup.worktree?.status === "removed") await bestEffortLeaseClose(cleanup.worktree.path);
       return cleanup;
     },
     cleanupRemoteBranch: (branch, expectedHeadOid) => deleteReviewedRemoteBranch(remote, branch.branch, expectedHeadOid),
@@ -26021,7 +26355,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
     let removalAttempted = false;
     try {
       const cleanupTarget = resolveSafeSiblingWorktreeCleanupTarget(wt.path, siblingRoot, {
-        realpath: (path2) => (0, import_node_fs33.realpathSync)(path2)
+        realpath: (path2) => (0, import_node_fs34.realpathSync)(path2)
       });
       if (!cleanupTarget.ok) {
         result.failed.push(`${wt.path}: ${cleanupTarget.reason}`);
@@ -26049,6 +26383,7 @@ async function applyGcPlan(plan, remote, opts = {}) {
         owner,
         reason: owner ? "branch merged/closed or directory dead; owner registration was stale" : "branch merged/closed or directory dead; no owner registered"
       });
+      await bestEffortLeaseClose(wt.path);
     } catch (e) {
       const error = e.message.split("\n")[0];
       result.failed.push(`${wt.path}: ${error}`);
@@ -26107,13 +26442,13 @@ async function composeOverrideBodyFile(prNumber, repoArgs, gh) {
     const commits = JSON.parse(raw).commits ?? [];
     const body = squashBodyWithOverride(commits.map((c) => ({ headline: c.messageHeadline ?? "", body: c.messageBody ?? "" })), process.cwd());
     if (!body) return void 0;
-    const dir = (0, import_node_fs33.mkdtempSync)((0, import_node_path32.join)((0, import_node_os12.tmpdir)(), "mmi-squash-body-"));
-    const path2 = (0, import_node_path32.join)(dir, "body.txt");
-    (0, import_node_fs33.writeFileSync)(path2, `${body}
+    const dir = (0, import_node_fs34.mkdtempSync)((0, import_node_path33.join)((0, import_node_os12.tmpdir)(), "mmi-squash-body-"));
+    const path2 = (0, import_node_path33.join)(dir, "body.txt");
+    (0, import_node_fs34.writeFileSync)(path2, `${body}
 `, "utf8");
     return { path: path2, cleanup: () => {
       try {
-        (0, import_node_fs33.rmSync)(dir, { recursive: true, force: true });
+        (0, import_node_fs34.rmSync)(dir, { recursive: true, force: true });
       } catch {
       }
     } };
@@ -26221,7 +26556,7 @@ async function remoteBranchExists2(branch, options = {}) {
 }
 var COMPOSE_TIMEOUT_MS = 12e4;
 function spawnDeferredGcSweep() {
-  spawnDetachedSelf(["worktree", "gc", "sweep-deferred", "--quiet"], { spawn: import_node_child_process16.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
+  spawnDetachedSelf(["worktree", "gc", "sweep-deferred", "--quiet"], { spawn: import_node_child_process17.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
 }
 async function createDeferredWorktreeStore() {
   try {
@@ -26235,13 +26570,13 @@ var realWorktreeDirRemover = {
   probe: (p) => {
     let st;
     try {
-      st = (0, import_node_fs33.lstatSync)(p);
+      st = (0, import_node_fs34.lstatSync)(p);
     } catch {
       return null;
     }
     if (st.isSymbolicLink()) return "link";
     try {
-      (0, import_node_fs33.readlinkSync)(p);
+      (0, import_node_fs34.readlinkSync)(p);
       return "link";
     } catch {
     }
@@ -26249,7 +26584,7 @@ var realWorktreeDirRemover = {
   },
   readdir: (p) => {
     try {
-      return (0, import_node_fs33.readdirSync)(p);
+      return (0, import_node_fs34.readdirSync)(p);
     } catch {
       return [];
     }
@@ -26258,9 +26593,9 @@ var realWorktreeDirRemover = {
   // leaving the target); a file symlink with unlink. rmdir first, fall back to unlink.
   detachLink: (p) => {
     try {
-      (0, import_node_fs33.rmdirSync)(p);
+      (0, import_node_fs34.rmdirSync)(p);
     } catch {
-      (0, import_node_fs33.unlinkSync)(p);
+      (0, import_node_fs34.unlinkSync)(p);
     }
   },
   removeTree: (p) => (0, import_promises8.rm)(p, { recursive: true, force: true, maxRetries: 5, retryDelay: 200 })
@@ -26293,9 +26628,9 @@ async function worktreeHasStageState(worktreePath) {
   }
 }
 function stageStateFileBelongsToWorktree(statePath, worktreePath) {
-  if (!(0, import_node_fs33.existsSync)(statePath)) return false;
+  if (!(0, import_node_fs34.existsSync)(statePath)) return false;
   try {
-    const state = JSON.parse((0, import_node_fs33.readFileSync)(statePath, "utf8"));
+    const state = JSON.parse((0, import_node_fs34.readFileSync)(statePath, "utf8"));
     const recordedCwd = typeof state.identity?.cwd === "string" ? state.identity.cwd : typeof state.cwd === "string" ? state.cwd : "";
     return Boolean(recordedCwd && isPathUnderDirectory(recordedCwd, worktreePath));
   } catch {
@@ -26626,10 +26961,11 @@ async function checkDocsIndexAtHead(opts, deps) {
 }
 
 // src/worktree-lifecycle-commands.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_promises9 = require("node:fs/promises");
-var import_node_path33 = require("node:path");
+var import_node_path34 = require("node:path");
 var GH_TIMEOUT_MS = 2e4;
+var STALE_PR_LOOKUP_LIMIT = 20;
 var DEFAULT_BASE = "origin/development";
 var DEFAULT_REMOTE = "origin";
 var PROTECTED_BRANCHES2 = /* @__PURE__ */ new Set(["development", "main", "master", "rc"]);
@@ -26774,7 +27110,7 @@ function classifyStaleLeaks(input) {
 var defaultOrphanDirScanDeps = {
   listDirs: (root) => {
     try {
-      return (0, import_node_fs34.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path33.join)(root, e.name));
+      return (0, import_node_fs35.readdirSync)(root, { withFileTypes: true }).filter((e) => e.isDirectory()).map((e) => (0, import_node_path34.join)(root, e.name));
     } catch {
       return [];
     }
@@ -26789,13 +27125,16 @@ function scanOrphanDirs(worktreesRoot, worktreeGitRoot, deps = defaultOrphanDirS
   }
   return candidates;
 }
-function formatStaleLeaks(leaks) {
-  if (!leaks.length) return "worktree list --stale: no leaks found";
-  const lines = [`worktree list --stale: ${leaks.length} leak(s)`];
+function formatStaleLeaks(leaks, prLookupFailures = []) {
+  const lines = leaks.length ? [`worktree list --stale: ${leaks.length} leak(s)`] : ["worktree list --stale: no leaks found"];
   for (const leak of leaks) {
     lines.push(`  [${leak.kind}] ${leak.ref} \u2014 ${leak.detail}`);
     lines.push(`      fix: ${leak.remediation}`);
   }
+  if (prLookupFailures.length) {
+    lines.push(`  INCOMPLETE: merge state could not be read for ${prLookupFailures.length} branch(es) \u2014 they are NOT covered above`);
+    for (const f of prLookupFailures) lines.push(`      ${f.branch}${f.detail ? ` \u2014 ${f.detail}` : ""}`);
+  }
   return lines.join("\n");
 }
 async function repoRootOf() {
@@ -26927,13 +27266,13 @@ function registerWorktreeCommands(program3) {
       const detached = headBorn && !symbolicBranch;
       const branch = symbolicBranch || (detached ? "HEAD" : "");
       if (!wtPath || !branch) return fail("worktree land: not inside a git worktree");
-      const gitFile = (0, import_node_path33.join)(wtPath, ".git");
-      const isLinked = (0, import_node_fs34.existsSync)(gitFile) && (0, import_node_fs34.statSync)(gitFile).isFile();
+      const gitFile = (0, import_node_path34.join)(wtPath, ".git");
+      const isLinked = (0, import_node_fs35.existsSync)(gitFile) && (0, import_node_fs35.statSync)(gitFile).isFile();
       if (apply && !isLinked) {
         return fail("worktree land: run from inside the linked worktree you want to land (this is the primary checkout)");
       }
       const commonDir = (await execFileP2("git", ["rev-parse", "--git-common-dir"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim();
-      const primaryCheckout = commonDir ? (0, import_node_path33.dirname)(commonDir) : wtPath;
+      const primaryCheckout = commonDir ? (0, import_node_path34.dirname)(commonDir) : wtPath;
       const localBranchNames = await execFileP2("git", ["-C", primaryCheckout, "for-each-ref", "--format=%(refname:short)", "refs/heads"], { timeout: GIT_TIMEOUT_MS }).then(({ stdout }) => new Set((stdout || "").split("\n").map((l) => l.trim()).filter(Boolean))).catch(() => void 0);
       const orphan = classifyOrphanedWorktree({
         branch,
@@ -27066,6 +27405,7 @@ function registerWorktreeCommands(program3) {
         }
       }
       report.push(await bestEffortGit(["worktree", "prune"], primaryCheckout, "prune worktree metadata"));
+      report.push(await bestEffortLeaseClose(wtPath));
       const result = {
         dryRun: false,
         ...plan,
@@ -27096,8 +27436,9 @@ function registerWorktreeCommands(program3) {
       const ctx = await gatherWorktreeContext();
       if (o.stale) {
         const leaks = classifyStaleLeaks(ctx);
-        if (o.json) return console.log(JSON.stringify({ stale: leaks, count: leaks.length }, null, 2));
-        return console.log(formatStaleLeaks(leaks));
+        const failures = ctx.prLookupFailures ?? [];
+        if (o.json) return console.log(JSON.stringify({ stale: leaks, count: leaks.length, prLookupFailures: failures, complete: failures.length === 0 }, null, 2));
+        return console.log(formatStaleLeaks(leaks, failures));
       }
       if (o.json) return console.log(JSON.stringify({ worktrees: ctx.worktrees }, null, 2));
       if (!ctx.worktrees.length) return console.log("worktree list: no worktrees");
@@ -27121,22 +27462,18 @@ async function gatherWorktreeContext() {
   const branchOut = (await execFileP2("git", ["branch", "--format=%(refname:short)"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
   const localBranches = branchOut.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
   const currentBranch2 = (await execFileP2("git", ["rev-parse", "--abbrev-ref", "HEAD"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || void 0;
+  const { prs, failures: prLookupFailures } = await resolveBranchPrs(localBranches.filter((b) => !PROTECTED_BRANCHES2.has(b)), STALE_PR_LOOKUP_LIMIT);
   const openPrBranches = /* @__PURE__ */ new Set();
   const closedBranches = /* @__PURE__ */ new Set();
-  try {
-    const { stdout } = await execFileP2("gh", ["pr", "list", "--state", "all", "--limit", "200", "--json", "headRefName,state"], { timeout: GH_TIMEOUT_MS });
-    const prs = JSON.parse(stdout || "[]");
-    const byBranch = /* @__PURE__ */ new Map();
-    for (const pr2 of prs) {
-      const arr = byBranch.get(pr2.headRefName) ?? [];
-      arr.push(pr2.state);
-      byBranch.set(pr2.headRefName, arr);
-    }
-    for (const [br, states] of byBranch) {
-      if (states.some((s) => s === "OPEN")) openPrBranches.add(br);
-      else if (states.some((s) => s === "MERGED" || s === "CLOSED")) closedBranches.add(br);
-    }
-  } catch {
+  const byBranch = /* @__PURE__ */ new Map();
+  for (const pr2 of prs) {
+    const arr = byBranch.get(pr2.headRefName) ?? [];
+    arr.push(pr2.state);
+    byBranch.set(pr2.headRefName, arr);
+  }
+  for (const [br, states] of byBranch) {
+    if (states.some((s) => s === "OPEN")) openPrBranches.add(br);
+    else if (states.some((s) => s === "MERGED" || s === "CLOSED")) closedBranches.add(br);
   }
   const stages = [];
   for (const wt of worktrees) {
@@ -27144,16 +27481,16 @@ async function gatherWorktreeContext() {
     if (s) stages.push({ path: wt.path, port: s.port });
   }
   const worktreeGitRoot = await currentRepoWorktreeGitRoot(repoRoot2);
-  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path33.dirname)((0, import_node_path33.dirname)(worktreeGitRoot)) : repoRoot2;
+  const primaryRepoRoot = worktreeGitRoot ? (0, import_node_path34.dirname)((0, import_node_path34.dirname)(worktreeGitRoot)) : repoRoot2;
   const wtRoot = siblingMmiWorktreesRoot(primaryRepoRoot);
   let orphanDirs = [];
-  if ((0, import_node_fs34.existsSync)(wtRoot)) {
+  if ((0, import_node_fs35.existsSync)(wtRoot)) {
     orphanDirs = scanOrphanDirs(wtRoot, worktreeGitRoot, {
       ...defaultOrphanDirScanDeps,
       listDirs: (root) => worktreeScanDirs(root, primaryRepoRoot, defaultOrphanDirScanDeps.listDirs, isRepoCheckoutDir)
     });
   }
-  return { worktrees, localBranches, currentBranch: currentBranch2, openPrBranches, closedBranches, stages, orphanDirs };
+  return { worktrees, localBranches, currentBranch: currentBranch2, openPrBranches, closedBranches, stages, orphanDirs, prLookupFailures };
 }
 async function bestEffortGit(args, cwd, step, timeoutMs = GIT_TIMEOUT_MS) {
   try {
@@ -27173,8 +27510,8 @@ ${err.stderr ?? ""}`;
 }
 
 // src/issue-commands.ts
-var import_node_fs35 = require("node:fs");
-var import_node_crypto6 = require("node:crypto");
+var import_node_fs36 = require("node:fs");
+var import_node_crypto7 = require("node:crypto");
 var ghRunner = async (args, timeoutMs) => (await execFileP2("gh", args, { timeout: timeoutMs })).stdout;
 var ReparentConflictError = class extends Error {
   constructor(message, payload) {
@@ -27191,7 +27528,7 @@ async function editIssue(client, options, deps = {}) {
   const url = `https://github.com/${repo}/issues/${parsed.number}`;
   const patch = {};
   let bodyChanged = false;
-  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs35.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
+  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs36.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
   if (options.titleFile !== void 0) {
     patch.title = await resolveIssueTitle({ title: options.title, titleFile: options.titleFile }, textDeps());
   } else if (options.title !== void 0) {
@@ -27250,6 +27587,44 @@ async function editIssue(client, options, deps = {}) {
     ...parentResult ? { parent: parentResult } : {}
   };
 }
+var EVIDENCE_COMMENT_URL_RE = /^https:\/\/github\.com\/([\w.-]+\/[\w.-]+)\/issues\/(\d+)#issuecomment-(\d+)$/;
+async function verifyCloseEvidence(client, evidence, repo, issueNumber, duplicateOf) {
+  const match = evidence.trim().match(EVIDENCE_COMMENT_URL_RE);
+  if (!match) {
+    throw new Error(
+      `--evidence must be a canonical issue-comment URL (https://github.com/<owner>/<repo>/issues/<n>#issuecomment-<id>), got: ${evidence}`
+    );
+  }
+  const [, evidenceRepo, evidenceIssue, commentId] = match;
+  if (evidenceRepo.toLowerCase() !== repo.toLowerCase() || Number(evidenceIssue) !== issueNumber) {
+    throw new Error(
+      `--evidence comment belongs to ${evidenceRepo}#${evidenceIssue}, not the issue being closed (${repo}#${issueNumber})`
+    );
+  }
+  let comment;
+  try {
+    comment = await client.rest(
+      "GET",
+      `repos/${repo}/issues/comments/${commentId}`
+    );
+  } catch (e) {
+    if (e instanceof GitHubApiError && e.status === 404) {
+      throw new Error(`--evidence comment ${commentId} does not exist on ${repo} \u2014 nothing to anchor the close to`);
+    }
+    throw e;
+  }
+  const expectedAnchor = `/issues/${issueNumber}#issuecomment-${commentId}`;
+  if (!comment.html_url || !comment.html_url.toLowerCase().endsWith(expectedAnchor.toLowerCase())) {
+    throw new Error(
+      `--evidence comment ${commentId} is not a comment on ${repo}#${issueNumber} (it lives at ${comment.html_url ?? "unknown"})`
+    );
+  }
+  if (duplicateOf !== void 0 && !new RegExp(`#${duplicateOf}\\b`).test(comment.body ?? "")) {
+    throw new Error(
+      `--reason duplicate-of ${duplicateOf}: the --evidence comment must cite #${duplicateOf} so the duplicate has an auditable destination`
+    );
+  }
+}
 async function closeIssue(client, options, deps = {}) {
   const parsed = parseIssueRef(options.ref);
   const repo = parsed.repo ?? options.defaultRepo;
@@ -27257,6 +27632,9 @@ async function closeIssue(client, options, deps = {}) {
   const url = `https://github.com/${repo}/issues/${parsed.number}`;
   const reason = options.reason ?? "completed";
   const stateReason = reason === "duplicate-of" ? "not_planned" : reason === "not-planned" ? "not_planned" : "completed";
+  if (options.evidence !== void 0) {
+    await verifyCloseEvidence(client, options.evidence, repo, parsed.number, reason === "duplicate-of" ? options.duplicateOf : void 0);
+  }
   await client.rest("PATCH", `repos/${repo}/issues/${parsed.number}`, {
     body: { state: "closed", state_reason: stateReason }
   });
@@ -27424,7 +27802,7 @@ function rowIdempotencyKey(batchKey, spec) {
   const identity = `${spec.type}
 ${spec.title.trim()}
 ${spec.body ?? ""}`;
-  const hash = (0, import_node_crypto6.createHash)("sha256").update(identity).digest("hex").slice(0, 16);
+  const hash = (0, import_node_crypto7.createHash)("sha256").update(identity).digest("hex").slice(0, 16);
   return `${batchKey}:${hash}`;
 }
 var BATCH_SPEC_KEYS = /* @__PURE__ */ new Set(["type", "title", "body", "priority", "labels", "label", "parent", "repo", "surface"]);
@@ -27643,7 +28021,7 @@ function registerIssueLifecycleCommands(program3, deps = {}) {
     }
   });
   mutating(
-    issue2.command("close <ref>").description("close an issue and move its board item to Done (--reason completed|not-planned|duplicate-of --duplicate-of <n>)").option("--reason <reason>", "completed | not-planned | duplicate-of (defaults to completed)").option("--duplicate-of <number>", "the issue number this duplicates (use with --reason duplicate-of)").option("--comment <text>", "a closing comment to post").option("--repo <owner/repo>", "repo for a bare ref (defaults to the current repo)"),
+    issue2.command("close <ref>").description("close an issue and move its board item to Done (--reason completed|not-planned|duplicate-of --duplicate-of <n>)").option("--reason <reason>", "completed | not-planned | duplicate-of (defaults to completed)").option("--duplicate-of <number>", "the issue number this duplicates (use with --reason duplicate-of)").option("--comment <text>", "a closing comment to post").option("--evidence <comment-url>", "URL of an existing comment on this issue carrying the close evidence \u2014 verified before closing (JPT#4668; the sanctioned agent-shell close shape)").option("--repo <owner/repo>", "repo for a bare ref (defaults to the current repo)"),
     (opts, args) => {
       let reason;
       try {
@@ -27672,7 +28050,8 @@ function registerIssueLifecycleCommands(program3, deps = {}) {
         defaultRepo,
         reason: parsed.reason,
         duplicateOf: o.duplicateOf ? Number(o.duplicateOf) : void 0,
-        comment: o.comment
+        comment: o.comment,
+        evidence: o.evidence
       });
       console.log(JSON.stringify(result));
     } catch (e) {
@@ -27754,7 +28133,7 @@ function extendCreateCommand(issue2, batchAttach) {
     if (opts.batch) {
       let specs;
       try {
-        const raw = (0, import_node_fs35.readFileSync)(opts.batch, "utf8");
+        const raw = (0, import_node_fs36.readFileSync)(opts.batch, "utf8");
         specs = JSON.parse(raw);
         if (!Array.isArray(specs)) throw new Error("batch file must contain a JSON array");
       } catch (e) {
@@ -27803,6 +28182,7 @@ ${lines}`, {
           surface: batchSurface,
           noSurface: batchNoSurface
         }, { attach: batchAttach });
+        if (result.created.some((row) => !row.idempotent)) invalidateStatuslineBoardCache();
         console.log(JSON.stringify(result));
         if (result.failures.length) process.exitCode = 1;
       } catch (e) {
@@ -27828,8 +28208,8 @@ ${lines}`, {
 }
 
 // src/train-commands.ts
-var import_node_fs36 = require("node:fs");
-var import_node_path34 = require("node:path");
+var import_node_fs37 = require("node:fs");
+var import_node_path35 = require("node:path");
 
 // src/train-status.ts
 function buildTrainStatusReport(input) {
@@ -27869,7 +28249,7 @@ function formatTrainStatus(r) {
 // src/train-commands.ts
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs36.readFileSync)((0, import_node_path34.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs37.readFileSync)((0, import_node_path35.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -28015,9 +28395,9 @@ function registerDeployCommands(program3) {
 }
 
 // src/discovery-commands.ts
-var import_node_fs37 = require("node:fs");
+var import_node_fs38 = require("node:fs");
 var import_node_os13 = require("node:os");
-var import_node_path35 = require("node:path");
+var import_node_path36 = require("node:path");
 var GC_GH_TIMEOUT_MS3 = 2e4;
 async function collectStatus() {
   const repo = await resolveRepo();
@@ -28207,8 +28587,8 @@ async function collectOnboardStatus(opts = {}) {
   }
   const home = (0, import_node_os13.homedir)();
   const plugin = onboardPluginGate({
-    readKnown: () => readFileSyncSafe((0, import_node_path35.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs37.readFileSync),
-    readSettings: () => readFileSyncSafe((0, import_node_path35.join)(home, ".claude", "settings.json"), import_node_fs37.readFileSync)
+    readKnown: () => readFileSyncSafe((0, import_node_path36.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs38.readFileSync),
+    readSettings: () => readFileSyncSafe((0, import_node_path36.join)(home, ".claude", "settings.json"), import_node_fs38.readFileSync)
   });
   return { track, board, registry: registry2, secrets, plugin, estateCli, nextCommand };
 }
@@ -29985,6 +30365,10 @@ function surfaceRestartAction(descriptor) {
 }
 
 // src/doctor-clean.ts
+function doctorSnapshotFingerprint(checks) {
+  const rows = [...checks].sort((a, b) => `${a.id ?? a.label}`.localeCompare(`${b.id ?? b.label}`)).map((c) => [c.id ?? c.label, c.ok, c.verified ?? null, c.detail ?? null]);
+  return JSON.stringify(rows);
+}
 function checkGithubAuth(probe) {
   const login = probe.login?.trim();
   const authed = Boolean(login);
@@ -30351,7 +30735,7 @@ function gcReapable(plan) {
 }
 async function runDoctorClean(opts, io, deps) {
   const full = !opts.fast && !opts.banner && !opts.preflight;
-  const applyEnv = full || Boolean(opts.preflight);
+  const applyEnv = full;
   const applyRepo = full && opts.repoWrites !== false;
   const lane = {
     banner: Boolean(opts.banner),
@@ -30378,11 +30762,14 @@ async function runDoctorClean(opts, io, deps) {
   const checks = [];
   let restartPending = false;
   const streamed = /* @__PURE__ */ new Set();
+  const streamedLines = /* @__PURE__ */ new Set();
+  const alreadyShown = (c) => streamed.has(c) || streamedLines.has(renderCheckLine(c));
   const worthPrinting = (c) => Boolean(opts.verbose) || !c.ok || Boolean(c.warn);
   const emitNow = (check) => {
     checks.push(check);
-    if (opts.json || !worthPrinting(check)) return;
+    if (opts.json || !streamingPass || !worthPrinting(check)) return;
     streamed.add(check);
+    streamedLines.add(renderCheckLine(check));
     io.log(renderCheckLine(check));
     if (opts.verbose) for (const evidence of check.verbose ?? []) io.log(`${VERBOSE_INDENT}${evidence}`);
   };
@@ -30394,13 +30781,35 @@ async function runDoctorClean(opts, io, deps) {
   };
   const releasedNote = deps.releasedVersionNote?.();
   let pluginHealed = false;
+  const spentHeals = /* @__PURE__ */ new Set();
+  let healChangedThisPass = false;
+  const markHealChanged = () => {
+    healChangedThisPass = true;
+  };
+  const traceHeal = (kind) => opts.healTrace?.(kind);
+  const spendOnce = (kind) => {
+    if (spentHeals.has(kind)) return false;
+    spentHeals.add(kind);
+    return true;
+  };
+  const spentRows = /* @__PURE__ */ new Map();
   async function runPluginRow() {
     if (!registryEvidence) return;
+    const spentRow = spentRows.get("plugin-chain");
+    if (spentRow) {
+      emitNow(spentRow);
+      if (registryEvidence.descriptor.trustOwner === "operator" && (registryEvidence.guardState === "healthy" || pluginHealed)) {
+        const trust = checkCodexHookTrust(deps.pluginTrustState?.(), registryEvidence.descriptor.displayName);
+        if (trust) emitNow(trust);
+      }
+      return;
+    }
     const diagnosis = diagnoseSurface({ ...registryEvidence, releasedVersion: released });
     const repair = planSurfaceRepair(diagnosis);
-    if (applyEnv && deps.healPlugin && repair?.supported) {
+    if (applyEnv && deps.healPlugin && repair?.supported && spendOnce("plugin-chain")) {
       const { descriptor } = registryEvidence;
       healIntent(`${descriptor.displayName} plugin \u2014 healing via ${descriptor.installMechanism} (${descriptor.installLocator})`);
+      traceHeal("plugin-chain");
       const heal = await deps.healPlugin(healStep);
       pluginHealed = heal.ok;
       const row = buildSurfaceDoctorCheck(diagnoseSurface({
@@ -30413,7 +30822,12 @@ async function runDoctorClean(opts, io, deps) {
         row.fix = `${heal.detail} \u2014 another doctor on this machine is healing it now; re-run once it finishes`;
       }
       emitNow(row);
+      if (heal.skipped) spentHeals.delete("plugin-chain");
       if (!heal.skipped) restartPending = true;
+      if (heal.ok && !heal.skipped) {
+        markHealChanged();
+        spentRows.set("plugin-chain", row);
+      }
     } else if (diagnosis.state !== "skipped") {
       const row = buildSurfaceDoctorCheck(diagnosis);
       emitNow(row);
@@ -30425,13 +30839,18 @@ async function runDoctorClean(opts, io, deps) {
     }
   }
   async function runCliRow() {
+    const spentRow = spentRows.get("cli-self-update");
+    if (spentRow) {
+      emitNow(spentRow);
+      return;
+    }
     const missing = deps.missingCliCommands?.() ?? [];
     const cliInput = { currentVersion: deps.currentCliVersion(), releasedVersion: released };
     const cliReport = buildVersionLagReport(cliInput);
     const capabilityGap = missing.length > 0 && Boolean(cliReport.releasedVersion);
     const shouldUpdate = Boolean(
       applyEnv && deps.updateCli && (versionAutoUpdateAction(cliReport) === "npm" || capabilityGap)
-    );
+    ) && spendOnce("cli-self-update");
     if (!shouldUpdate) {
       const cli = checkCliVersion(cliInput, releasedNote);
       if (cli) {
@@ -30461,29 +30880,40 @@ async function runDoctorClean(opts, io, deps) {
     const target = cliReport.releasedVersion;
     const intent = capabilityGap && cliReport.ok ? `mmi-cli \u2014 self-updating to ${target} via npm install -g (missing commands: ${missing.join(", ")})` : `mmi-cli \u2014 self-updating ${cliReport.currentVersion} \u2192 ${target} via npm install -g`;
     healIntent(intent);
+    traceHeal("cli-self-update");
     const heal = await deps.updateCli(target, healStep);
+    if (heal.skipped) spentHeals.delete("cli-self-update");
+    if (heal.ok && !heal.skipped) markHealChanged();
     const healEvidence = [
       `running:  ${cliReport.currentVersion}`,
       `published: ${target ?? "(unknown)"}`,
       `heal: ${heal.detail}`,
       ...missing.length ? [`missing commands before heal: ${missing.join(", ")}`] : []
     ];
-    emitNow(heal.ok ? {
-      id: "cli-version",
-      ok: true,
-      label: "mmi-cli",
-      detail: capabilityGap && cliReport.ok ? `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g (was missing: ${missing.join(", ")}); the next mmi-cli invocation runs the new version` : `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g; the next mmi-cli invocation runs the new version`,
-      verbose: healEvidence
-    } : {
-      id: "cli-version",
-      ok: false,
-      label: "mmi-cli",
-      detail: capabilityGap && cliReport.ok ? `missing commands: ${missing.join(", ")}` : `${cliReport.currentVersion} \u2192 ${target}`,
-      // #3489: same split as the plugin heal above — a lock-contention skip is not this run's gap.
-      ...heal.skipped ? { reportOnly: true } : {},
-      fix: heal.skipped ? `${heal.detail} \u2014 another doctor on this machine is updating it now; re-run once it finishes` : `self-update failed (${heal.detail}) \u2014 run \`${cliUpdateCommand(target)}\``,
-      verbose: healEvidence
-    });
+    if (heal.ok) {
+      const healedRow = {
+        id: "cli-version",
+        ok: true,
+        label: "mmi-cli",
+        detail: capabilityGap && cliReport.ok ? `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g (was missing: ${missing.join(", ")}); the next mmi-cli invocation runs the new version` : `${cliReport.currentVersion} \u2192 ${target} \u2014 self-updated via npm install -g; the next mmi-cli invocation runs the new version`,
+        verbose: healEvidence
+      };
+      spentRows.set("cli-self-update", healedRow);
+      emitNow(healedRow);
+      return;
+    }
+    emitNow(
+      {
+        id: "cli-version",
+        ok: false,
+        label: "mmi-cli",
+        detail: capabilityGap && cliReport.ok ? `missing commands: ${missing.join(", ")}` : `${cliReport.currentVersion} \u2192 ${target}`,
+        // #3489: same split as the plugin heal above — a lock-contention skip is not this run's gap.
+        ...heal.skipped ? { reportOnly: true } : {},
+        fix: heal.skipped ? `${heal.detail} \u2014 another doctor on this machine is updating it now; re-run once it finishes` : `self-update failed (${heal.detail}) \u2014 run \`${cliUpdateCommand(target)}\``,
+        verbose: healEvidence
+      }
+    );
   }
   async function runGithubAuthRow() {
     emitNow(checkGithubAuth({ login, ghInstalled: ghInstalled2, reach }));
@@ -30505,6 +30935,8 @@ async function runDoctorClean(opts, io, deps) {
     if (gi.ok) {
       emitNow({ ok: true, id: "gitignore-block", label: "gitignore block", verbose: giEvidence });
     } else if (applyRepo && gi.content && deps.writeGitignore(gi.content)) {
+      traceHeal("repo-cleans");
+      markHealChanged();
       emitNow({ ok: true, id: "gitignore-block", label: "gitignore block", detail: "rewrote managed block", verbose: giEvidence });
       restartPending = true;
     } else {
@@ -30512,8 +30944,100 @@ async function runDoctorClean(opts, io, deps) {
     }
   }
   async function runPluginCacheRow() {
+    if (applyEnv && deps.prunePluginCache && spendOnce("cache-prune")) {
+      const cache = deps.pluginCache();
+      if (cache.stale.length === 0 && cache.staging.length === 0) {
+        emitNow(checkPluginCache(cache));
+        return;
+      }
+      healIntent(`plugin cache \u2014 pruning ${cache.stale.length} superseded version(s) (guarded)`);
+      traceHeal("cache-prune");
+      const outcome = deps.prunePluginCache();
+      if (outcome.removed.length) markHealChanged();
+      const evidence = [
+        ...outcome.removed.map((v) => `pruned: ${v}`),
+        ...outcome.held.map((h) => `still held: ${h.version} (${h.error}) \u2014 never forced`),
+        ...outcome.kept.map((k) => `kept: ${k.version} \u2014 ${k.reason}`)
+      ];
+      if (outcome.held.length === 0) {
+        emitNow({
+          id: "plugin-cache",
+          ok: true,
+          label: "plugin cache",
+          detail: outcome.removed.length ? `pruned ${outcome.removed.length} superseded version(s)` : "nothing provably superseded (guards kept every candidate)",
+          verbose: evidence
+        });
+      } else {
+        emitNow({
+          id: "plugin-cache",
+          ok: false,
+          reportOnly: true,
+          label: "plugin cache",
+          detail: `${outcome.removed.length} pruned; ${outcome.held.length} still held by a live session`,
+          fix: "close the session holding it and re-run `mmi-cli doctor`",
+          verbose: evidence
+        });
+      }
+      return;
+    }
     emitNow(checkPluginCache(deps.pluginCache()));
   }
+  async function runPiPluginRow() {
+    const state = deps.piPluginState?.();
+    if (!state) return;
+    if (!state.settingsReadable) {
+      emitNow({
+        id: "pi-plugin",
+        ok: false,
+        reportOnly: true,
+        label: "pi plugin",
+        detail: "settings.json unreadable",
+        fix: "repair ~/.pi/agent/settings.json, then re-run doctor",
+        verbose: ["~/.pi/agent exists but settings.json could not be parsed \u2014 fail closed, nothing written"]
+      });
+      return;
+    }
+    const current = state.registeredPath === state.expectedPath;
+    if (current) {
+      emitNow({
+        id: "pi-plugin",
+        ok: true,
+        label: "pi plugin",
+        detail: "package registered in settings.json",
+        verbose: [`registered: ${state.registeredPath}`]
+      });
+      return;
+    }
+    if (applyEnv && deps.healPiPlugin) {
+      healIntent(`pi plugin \u2014 registering ${state.expectedPath}`);
+      traceHeal("env-heals");
+      const heal = deps.healPiPlugin();
+      if (heal.ok) markHealChanged();
+      emitNow(heal.ok ? {
+        id: "pi-plugin",
+        ok: true,
+        label: "pi plugin",
+        detail: state.registeredPath ? "replaced stale package path" : "registered package in settings.json",
+        verbose: [`was: ${state.registeredPath ?? "(absent)"}`, `now: ${state.expectedPath}`, `heal: ${heal.detail}`]
+      } : {
+        id: "pi-plugin",
+        ok: false,
+        label: "pi plugin",
+        detail: state.registeredPath ? "stale package path" : "package not registered",
+        fix: `heal failed (${heal.detail}) \u2014 add ${state.expectedPath} to packages[] in ~/.pi/agent/settings.json`,
+        verbose: [`expected: ${state.expectedPath}`]
+      });
+      return;
+    }
+    emitNow({
+      id: "pi-plugin",
+      ok: false,
+      label: "pi plugin",
+      detail: state.registeredPath ? "stale package path" : "package not registered",
+      fix: "run `mmi-cli doctor` to register the mmi .pi-plugin in ~/.pi/agent/settings.json",
+      verbose: [`expected: ${state.expectedPath}`, `registered: ${state.registeredPath ?? "(absent)"}`]
+    });
+  }
   async function runSessionPayloadRow() {
     const payload = checkSessionPayload(deps.sessionPayload());
     if (payload) emitNow(payload);
@@ -30523,7 +31047,11 @@ async function runDoctorClean(opts, io, deps) {
       const healed = deps.healMarketplacePins();
       if (healed) {
         healIntent(`marketplace pins \u2014 ${healed.detail}`);
-        if (healed.wrote) restartPending = true;
+        if (healed.wrote) {
+          traceHeal("env-heals");
+          markHealChanged();
+          restartPending = true;
+        }
       }
     }
     for (const row of deps.marketplaceRows()) emitNow(row);
@@ -30566,6 +31094,8 @@ async function runDoctorClean(opts, io, deps) {
     let healedWrite = false;
     if (applyRepo && probe?.drift && deps.healDocsIndex) {
       healIntent("docs index \u2014 regenerating docs/index.md");
+      traceHeal("repo-cleans");
+      markHealChanged();
       try {
         probe = deps.healDocsIndex(root);
         healedWrite = !probe.drift;
@@ -30786,7 +31316,11 @@ async function runDoctorClean(opts, io, deps) {
             `skipped: ${sweep.skipped}`
           ]
         });
-        if (sweep.removed.length) restartPending = true;
+        if (sweep.removed.length) {
+          traceHeal("repo-cleans");
+          markHealChanged();
+          restartPending = true;
+        }
       } catch (e) {
         const message = e instanceof Error ? e.message : String(e);
         emitNow({
@@ -30824,7 +31358,11 @@ async function runDoctorClean(opts, io, deps) {
             ...r.failed.map((f) => `FAILED: ${f}`)
           ] : ["nothing reapable"]
         });
-        if (reaped) restartPending = true;
+        if (reaped) {
+          traceHeal("repo-cleans");
+          markHealChanged();
+          restartPending = true;
+        }
       } else {
         const n = gcReapable(plan);
         const gcEvidence = [
@@ -30851,36 +31389,62 @@ async function runDoctorClean(opts, io, deps) {
       const applied = deps.executeScratchGc(repoRoot2, { apply: true });
       const pruned = applied.applied?.pruned.length ?? 0;
       emitNow({ id: "scratch", ok: true, label: "scratch", detail: pruned ? `removed ${pruned} aged item(s)` : "nothing stale", verbose: scratchEvidence });
-      if (pruned) restartPending = true;
+      if (pruned) {
+        traceHeal("repo-cleans");
+        markHealChanged();
+        restartPending = true;
+      }
     } else {
       emitNow(scratch.plan.safeAuto.length === 0 ? { id: "scratch", ok: true, label: "scratch", verbose: scratchEvidence } : { id: "scratch", ok: false, label: "scratch", detail: `${scratch.plan.safeAuto.length} aged item(s)`, fix: "run `mmi-cli doctor` (without --no-repo-writes)", verbose: scratchEvidence });
     }
   }
   const prefix = [
-    { id: "plugin", when: true, run: runPluginRow },
     { id: "cli-version", when: true, run: runCliRow },
+    { id: "plugin", when: true, run: runPluginRow },
+    { id: "plugin-cache", when: true, run: runPluginCacheRow },
     { id: "github-auth", when: true, run: runGithubAuthRow },
     { id: "aws-identity", when: true, run: runAwsRow },
     { id: "repo-worktrees", when: true, run: runRepoWorktreesRow },
-    { id: "gitignore-block", when: isOrgRepo, run: runGitignoreRow },
-    { id: "plugin-cache", when: true, run: runPluginCacheRow },
     { id: "sessionstart-payload", when: true, run: runSessionPayloadRow },
-    { id: "marketplace", when: true, run: runMarketplaceRows }
+    { id: "marketplace", when: true, run: runMarketplaceRows },
+    { id: "pi-plugin", when: true, run: runPiPluginRow },
+    { id: "gitignore-block", when: isOrgRepo, run: runGitignoreRow }
   ];
-  for (const entry of prefix) if (entry.when) await entry.run();
-  const parallel = [
-    { id: "docs-index", when: isOrgRepo && lane.full, run: runDocsIndexRow },
-    // Hub cloud probe (short timeout). Full lane + `--self`; `--preflight` may emit command-absent only (#4156).
-    { id: "repo-index", when: isOrgRepo && (lane.full || Boolean(opts.self) || lane.preflight), run: runRepoIndexRow },
-    { id: "board-doctor", when: isOrgRepo && lane.full, run: runBoardDoctorRow },
-    { id: "schedules-drift", when: isOrgRepo && lane.full, run: runSchedulesDriftRow }
-  ];
-  await Promise.all(parallel.filter((entry) => entry.when).map((entry) => entry.run()));
-  const suffix = [
-    { id: "train-branches", when: isOrgRepo && lane.full, run: runTrainSyncRow },
-    { id: "housekeeper", when: isOrgRepo && lane.full, run: runHousekeeperRows }
-  ];
-  for (const entry of suffix) if (entry.when) await entry.run();
+  const maxPasses = 3;
+  let passes = 0;
+  let prevFingerprint;
+  let streamingPass = true;
+  for (; ; ) {
+    passes += 1;
+    opts.onPass?.(passes);
+    checks.length = 0;
+    healChangedThisPass = false;
+    for (const entry of prefix) if (entry.when) await entry.run();
+    const parallelRows = [
+      { id: "docs-index", when: isOrgRepo && lane.full, run: runDocsIndexRow },
+      // Hub cloud probe (short timeout). Full lane + `--self`; `--preflight` may emit command-absent only (#4156).
+      { id: "repo-index", when: isOrgRepo && (lane.full || Boolean(opts.self) || lane.preflight), run: runRepoIndexRow },
+      { id: "board-doctor", when: isOrgRepo && lane.full, run: runBoardDoctorRow },
+      { id: "schedules-drift", when: isOrgRepo && lane.full, run: runSchedulesDriftRow }
+    ];
+    await Promise.all(parallelRows.filter((entry) => entry.when).map((entry) => entry.run()));
+    const suffix = [
+      { id: "train-branches", when: isOrgRepo && lane.full, run: runTrainSyncRow },
+      { id: "housekeeper", when: isOrgRepo && lane.full, run: runHousekeeperRows }
+    ];
+    for (const entry of suffix) if (entry.when) await entry.run();
+    if (!lane.full) break;
+    const fingerprint = doctorSnapshotFingerprint(checks);
+    const stillActionable = checks.some((c) => !c.ok && !c.reportOnly);
+    if (!healChangedThisPass || !stillActionable || fingerprint === prevFingerprint) break;
+    if (passes >= maxPasses) {
+      healIntent(`convergence \u2014 pass bound (${maxPasses}) reached with rows still moving; re-run doctor to continue`);
+      break;
+    }
+    prevFingerprint = fingerprint;
+    streamingPass = false;
+    healIntent(`convergence \u2014 pass ${passes} healed; re-measuring (pass ${passes + 1}/${maxPasses})`);
+  }
   const exitCode = doctorReportExitCode(checks);
   if (opts.json) {
     const payload = opts.verbose ? checks : checks.map(({ verbose: _evidence, ...check }) => check);
@@ -30893,7 +31457,7 @@ async function runDoctorClean(opts, io, deps) {
     return exitCode;
   }
   if (opts.banner) {
-    const actionable = checks.filter((c) => (!c.ok || c.warn) && !streamed.has(c));
+    const actionable = checks.filter((c) => (!c.ok || c.warn) && !alreadyShown(c));
     for (const c of actionable) {
       io.log(renderReport([c], { restartPending: false }));
       if (opts.verbose) for (const evidence of c.verbose ?? []) io.log(`${VERBOSE_INDENT}${evidence}`);
@@ -30901,7 +31465,7 @@ async function runDoctorClean(opts, io, deps) {
     if (restartPending) io.log(`\u21BB ${restartAction.charAt(0).toUpperCase()}${restartAction.slice(1)} to finish.`);
     return 0;
   }
-  const rest = checks.filter((c) => !streamed.has(c));
+  const rest = checks.filter((c) => !alreadyShown(c));
   const shown = opts.verbose ? rest : rest.filter((c) => !c.ok || c.warn);
   const lines = [];
   for (const check of shown) {
@@ -30933,17 +31497,17 @@ function parseOriginRepo(remoteUrl) {
 }
 function ghHostsConfigPath(env, platform2) {
   const sep3 = platform2 === "win32" ? "\\" : "/";
-  const join33 = (...parts) => parts.join(sep3);
+  const join34 = (...parts) => parts.join(sep3);
   const explicit = env.GH_CONFIG_DIR?.trim();
-  if (explicit) return join33(explicit, "hosts.yml");
+  if (explicit) return join34(explicit, "hosts.yml");
   if (platform2 === "win32") {
     const appData = (env.AppData ?? env.APPDATA)?.trim();
-    return appData ? join33(appData, "GitHub CLI", "hosts.yml") : void 0;
+    return appData ? join34(appData, "GitHub CLI", "hosts.yml") : void 0;
   }
   const xdg = env.XDG_CONFIG_HOME?.trim();
-  if (xdg) return join33(xdg, "gh", "hosts.yml");
+  if (xdg) return join34(xdg, "gh", "hosts.yml");
   const home = env.HOME?.trim();
-  return home ? join33(home, ".config", "gh", "hosts.yml") : void 0;
+  return home ? join34(home, ".config", "gh", "hosts.yml") : void 0;
 }
 function parseGhHostsAccounts(yaml, host = "github.com") {
   let hostIndent = null;
@@ -30993,17 +31557,17 @@ function ghAccountCaveat(announcedLogin, accounts) {
 }
 
 // src/doctor-io.ts
-var import_node_fs38 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_os14 = require("node:os");
-var import_node_path36 = require("node:path");
-var import_node_child_process17 = require("node:child_process");
+var import_node_path37 = require("node:path");
+var import_node_child_process18 = require("node:child_process");
 var import_node_util8 = require("node:util");
-var execFileP6 = (0, import_node_util8.promisify)(import_node_child_process17.execFile);
+var execFileP6 = (0, import_node_util8.promisify)(import_node_child_process18.execFile);
 var MMI_PLUGIN_ID2 = "mmi@mutmutco";
 function installedClaudePluginVersion() {
   try {
     const file = JSON.parse(
-      (0, import_node_fs38.readFileSync)((0, import_node_path36.join)((0, import_node_os14.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
+      (0, import_node_fs39.readFileSync)((0, import_node_path37.join)((0, import_node_os14.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
     );
     const versions = (file.plugins?.[MMI_PLUGIN_ID2] ?? []).map((r) => r.version).filter((v) => Boolean(v));
     if (versions.length === 0) return void 0;
@@ -31014,7 +31578,7 @@ function installedClaudePluginVersion() {
 }
 function manifestVersion(path2) {
   try {
-    const manifest = JSON.parse((0, import_node_fs38.readFileSync)(path2, "utf8"));
+    const manifest = JSON.parse((0, import_node_fs39.readFileSync)(path2, "utf8"));
     return typeof manifest.version === "string" && manifest.version.trim() ? manifest.version.trim() : void 0;
   } catch {
     return void 0;
@@ -31024,32 +31588,32 @@ function installedSurfacePluginVersion(surface) {
   const token = surfaceToken(surface);
   if (token === "kilo") {
     try {
-      const stamp = (0, import_node_fs38.readFileSync)((0, import_node_path36.join)((0, import_node_os14.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
+      const stamp = (0, import_node_fs39.readFileSync)((0, import_node_path37.join)((0, import_node_os14.homedir)(), ".kilo", ".mmi-kilo-version"), "utf8").trim();
       return stamp || void 0;
     } catch {
       return void 0;
     }
   }
   if (token === "cursor") {
-    return manifestVersion((0, import_node_path36.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
+    return manifestVersion((0, import_node_path37.join)(cursorLocalPluginRoot(), ".cursor-plugin", "plugin.json"));
   }
   if (token === "jervcode") {
     const entry = mmiPiWrapperEntry();
     if (!entry) return void 0;
-    return manifestVersion((0, import_node_path36.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
+    return manifestVersion((0, import_node_path37.join)(decodeURIComponent(entry.replace(/^file:\/\/\/?/, "")), "package.json"));
   }
   if (token === "kimi") {
-    return manifestVersion((0, import_node_path36.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
+    return manifestVersion((0, import_node_path37.join)(surfaceConfigRoot(surface), "plugins", "managed", "mmi", ".kimi-plugin", "plugin.json"));
   }
   if (token === "claude") return installedClaudePluginVersion();
   if (token !== "codex") return void 0;
   try {
-    const raw = process.platform === "win32" ? (0, import_node_child_process17.execFileSync)("cmd.exe", ["/c", "codex", "plugin", "list", "--json"], {
+    const raw = process.platform === "win32" ? (0, import_node_child_process18.execFileSync)("cmd.exe", ["/c", "codex", "plugin", "list", "--json"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
       windowsHide: true
-    }) : (0, import_node_child_process17.execFileSync)("codex", ["plugin", "list", "--json"], {
+    }) : (0, import_node_child_process18.execFileSync)("codex", ["plugin", "list", "--json"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
@@ -31067,7 +31631,7 @@ function installedActivePluginVersion(surface = detectSurface(process.env)) {
 }
 function worktreeRootSync() {
   try {
-    const out = (0, import_node_child_process17.execFileSync)("git", ["rev-parse", "--show-toplevel"], { windowsHide: true, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    const out = (0, import_node_child_process18.execFileSync)("git", ["rev-parse", "--show-toplevel"], { windowsHide: true, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     let root = out.endsWith("\n") ? out.slice(0, -1) : out;
     if (process.platform === "win32" && root.endsWith("\r")) root = root.slice(0, -1);
     return root || null;
@@ -31077,13 +31641,13 @@ function worktreeRootSync() {
 }
 var gitignorePath = () => {
   const root = worktreeRootSync();
-  return root === null ? null : (0, import_node_path36.join)(root, ".gitignore");
+  return root === null ? null : (0, import_node_path37.join)(root, ".gitignore");
 };
 function readGitignore() {
   const path2 = gitignorePath();
   if (path2 === null) return null;
   try {
-    return (0, import_node_fs38.readFileSync)(path2, "utf8");
+    return (0, import_node_fs39.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -31092,7 +31656,7 @@ function writeGitignore(content) {
   const path2 = gitignorePath();
   if (path2 === null) return false;
   try {
-    (0, import_node_fs38.writeFileSync)(path2, content, "utf8");
+    (0, import_node_fs39.writeFileSync)(path2, content, "utf8");
     return true;
   } catch {
     return false;
@@ -31116,28 +31680,11 @@ async function repoRoot() {
 }
 function hasRepoLocalWorktrees() {
   const root = worktreeRootSync();
-  return root !== null && (0, import_node_fs38.existsSync)((0, import_node_path36.join)(root, ".worktrees"));
+  return root !== null && (0, import_node_fs39.existsSync)((0, import_node_path37.join)(root, ".worktrees"));
 }
 
 // src/index.ts
 var execFileGitRun = async (file, args) => (await execFileP2(file, args, { timeout: GIT_TIMEOUT_MS })).stdout;
-async function currentRepoFullName() {
-  const remote = (await gitOut(["remote", "get-url", "origin"])).replace(/\.git$/, "");
-  const parts = remote.split(/[:/]/).filter(Boolean);
-  if (parts.length >= 2) return `${parts[parts.length - 2]}/${parts[parts.length - 1]}`;
-  return `mutmutco/${await repoSlug()}`;
-}
-async function readDocsAuditFetch(repo) {
-  const list = await fetchDocsAuditList(registryClientDeps(await loadConfig()));
-  if ("notArmed" in list) return { notArmed: true };
-  if (!list.ok) return { ok: false, error: list.error };
-  const wanted = repo.toLowerCase();
-  const row = list.rows.find((r) => String(r.repo ?? "").toLowerCase() === wanted);
-  return {
-    ok: true,
-    verdict: row ? { repo: row.repo, date: row.date, shaRange: row.shaRange, outcome: row.outcome, checkerVendor: row.checkerVendor } : null
-  };
-}
 async function githubRepoReachProbe() {
   const remote = await execFileP2("git", ["remote", "get-url", "origin"], { timeout: GIT_TIMEOUT_MS }).then((r) => r.stdout).catch(() => "");
   const repo = parseOriginRepo(remote);
@@ -31152,8 +31699,8 @@ ${r.stderr ?? ""}`).catch(() => "");
 function ghMultiAccountCaveat(announcedLogin) {
   try {
     const hostsPath = ghHostsConfigPath(process.env, process.platform);
-    if (!hostsPath || !(0, import_node_fs39.existsSync)(hostsPath)) return void 0;
-    return ghAccountCaveat(announcedLogin, parseGhHostsAccounts((0, import_node_fs39.readFileSync)(hostsPath, "utf8")));
+    if (!hostsPath || !(0, import_node_fs40.existsSync)(hostsPath)) return void 0;
+    return ghAccountCaveat(announcedLogin, parseGhHostsAccounts((0, import_node_fs40.readFileSync)(hostsPath, "utf8")));
   } catch {
     return void 0;
   }
@@ -31161,7 +31708,7 @@ function ghMultiAccountCaveat(announcedLogin) {
 var ENV_HEAL_LOCK_STALE_MS = 10 * 6e4;
 var ENV_HEAL_LOCK_MAX_WAIT_MS = 2 * 6e4;
 function envHealLockPath(home) {
-  return (0, import_node_path37.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
+  return (0, import_node_path38.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
 }
 async function withEnvHealLock(what, run) {
   try {
@@ -31276,6 +31823,45 @@ function mmiDoctorDeps(opts = {}) {
         stagingBytes: plan.stagingBytes
       };
     },
+    // #4199: guarded auto-prune (docs/doctor-contract.md § Guarded cache prune). The plan is rebuilt
+    // HERE, from live evidence, immediately before the delete — plan is the revalidation. Guards live in
+    // `selectPrunablePluginVersions` (never running/newest/installed; unreadable evidence keeps the dir,
+    // named). No `force`: a dir whose delete refuses (a session holds it) surfaces as `held`, never freed
+    // out from under the holder.
+    prunePluginCache: () => {
+      const surface = detectSurface(process.env);
+      const configRoot = surfaceConfigRoot(surface);
+      const running = surface === "codex" ? installedActivePluginVersion(surface) : runningPluginVersion(process.env, resolveClientVersion());
+      const installed = installedActivePluginVersion(surface);
+      const plan = buildPluginCachePlan(
+        (0, import_node_os15.homedir)(),
+        running,
+        pluginCacheFsDeps(configRoot, () => 0),
+        { configRoot, includeStaging: surface !== "codex", installedVersion: installed }
+      );
+      const result = applyPluginCachePlan(
+        plan,
+        (p) => (0, import_node_fs40.rmSync)(p, { recursive: true }),
+        stagingApplyFsGuard(configRoot)
+      );
+      return {
+        removed: [...result.removed, ...result.removedStaging],
+        held: [
+          ...result.failed,
+          ...result.failedStaging.map((f) => ({ version: f.name, error: f.error }))
+        ],
+        kept: [
+          ...plan.keep.map((version) => ({
+            version,
+            reason: version === running ? "running" : version === installed ? "installed" : "newest / keep policy"
+          })),
+          ...result.skippedStaging.map((s) => ({ version: s.name, reason: s.reason }))
+        ]
+      };
+    },
+    // #4201: mmi `.pi-plugin` registration in ~/.pi/agent/settings.json — mirror of jerv-cli's own heal.
+    piPluginState: () => readPiPluginState((0, import_node_os15.homedir)(), process.env),
+    healPiPlugin: () => healPiPluginRegistration((0, import_node_os15.homedir)(), process.env),
     // #3470: what the SessionStart hook LAST emitted, measured at emission by the session-start verb below.
     // A local record read ? cheap enough for every lane, including the banner.
     sessionPayload: () => readSessionPayload(process.cwd()),
@@ -31287,14 +31873,14 @@ function mmiDoctorDeps(opts = {}) {
         const home = (0, import_node_os15.homedir)();
         const rows = marketplaceRows(
           MMI_MARKETPLACE_NAME,
-          readFileSyncSafe((0, import_node_path37.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs39.readFileSync),
-          readFileSyncSafe((0, import_node_path37.join)(home, ".claude", "settings.json"), import_node_fs39.readFileSync),
+          readFileSyncSafe((0, import_node_path38.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs40.readFileSync),
+          readFileSyncSafe((0, import_node_path38.join)(home, ".claude", "settings.json"), import_node_fs40.readFileSync),
           // #3974: this CLI heals these rows, so report mode names the doctor run rather than the hand
           // edit. Unconditional ? it is a fact about mmi-cli, not about the lane this run is on.
           true
         );
         const pending = readMarketplacePinPending(
-          (0, import_node_path37.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"),
+          (0, import_node_path38.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"),
           MMI_MARKETPLACE_NAME
         );
         if (!pending) return rows;
@@ -31320,9 +31906,9 @@ function mmiDoctorDeps(opts = {}) {
         if (detectSurface(process.env) === "codex") return void 0;
         const home = (0, import_node_os15.homedir)();
         const names = [MMI_MARKETPLACE_NAME];
-        const result = applyOrgMarketplacePins((0, import_node_path37.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), names);
+        const result = applyOrgMarketplacePins((0, import_node_path38.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), names);
         if (result?.wrote) {
-          writeMarketplacePinPending((0, import_node_path37.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"), names);
+          writeMarketplacePinPending((0, import_node_path38.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"), names);
         }
         return result;
       } catch {
@@ -31338,7 +31924,7 @@ function mmiDoctorDeps(opts = {}) {
     // adopted the generated routing index (MMG-Unlive: `docs/Archive/**` only, no index, no gate.yml) would
     // get a permanent ? demanding an artifact it never asked for.
     docsIndexState: (root) => {
-      if (!(0, import_node_fs39.existsSync)((0, import_node_path37.join)(root, DOCS_INDEX_PATH))) return void 0;
+      if (!(0, import_node_fs40.existsSync)((0, import_node_path38.join)(root, DOCS_INDEX_PATH))) return void 0;
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -31347,7 +31933,7 @@ function mmiDoctorDeps(opts = {}) {
     },
     // #4168: working-tree heal — write if drifted, then re-check. Commit remains the operator's step.
     healDocsIndex: (root) => {
-      if (!(0, import_node_fs39.existsSync)((0, import_node_path37.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
+      if (!(0, import_node_fs40.existsSync)((0, import_node_path38.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
       const real = createDocsIndexDeps(root);
       let docs2;
       const listDocs = () => docs2 ??= real.listDocs();
@@ -31365,6 +31951,7 @@ function mmiDoctorDeps(opts = {}) {
         worktreeRemoveDeps(async (args) => (await execFileP2("git", ["-c", "core.fsmonitor=false", ...args], { timeout: GIT_TIMEOUT_MS })).stdout),
         removalContext
       );
+      for (const removedPath of result.removed) await bestEffortLeaseClose(removedPath);
       return {
         removed: result.removed,
         stillQueued: result.stillDeferred.length,
@@ -31681,19 +32268,19 @@ program2.hook("preAction", async (_thisCommand, actionCommand) => {
 });
 var rules = program2.command("rules").description("org-managed .gitignore delivery");
 rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").option("--json", "machine-readable output").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
-  const path2 = (0, import_node_path37.join)(process.cwd(), ".gitignore");
-  const current = (0, import_node_fs39.existsSync)(path2) ? (0, import_node_fs39.readFileSync)(path2, "utf8") : null;
+  const path2 = (0, import_node_path38.join)(process.cwd(), ".gitignore");
+  const current = (0, import_node_fs40.existsSync)(path2) ? (0, import_node_fs40.readFileSync)(path2, "utf8") : null;
   const plan = planManagedGitignore(current);
   const drift = [...plan.added.map((l) => `+${l}`), ...plan.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
   if (opts.json) {
-    if (opts.write && plan.changed) (0, import_node_fs39.writeFileSync)(path2, plan.content, "utf8");
+    if (opts.write && plan.changed) (0, import_node_fs40.writeFileSync)(path2, plan.content, "utf8");
     console.log(JSON.stringify(plan, null, 2));
     if (!opts.write && plan.changed) process.exitCode = 1;
     return;
   }
   if (opts.write) {
     if (plan.changed) {
-      (0, import_node_fs39.writeFileSync)(path2, plan.content, "utf8");
+      (0, import_node_fs40.writeFileSync)(path2, plan.content, "utf8");
       console.log(`mmi-cli org rules gitignore: updated .gitignore (${drift})`);
     } else {
       console.log("mmi-cli org rules gitignore: up to date");
@@ -31819,6 +32406,7 @@ gcCmd.command("sweep-deferred").description("retry IDE-locked deferred worktree
         worktreeRemoveDeps(async (args) => (await execFileP2("git", ["-c", "core.fsmonitor=false", ...args], { timeout: GIT_TIMEOUT_MS })).stdout),
         { removalContext }
       );
+      for (const removedPath of result.removed) await bestEffortLeaseClose(removedPath);
       if (o.json) return console.log(JSON.stringify(result));
       if (!o.quiet || result.removed.length || result.stillDeferred.length || result.skipped.length) {
         if (result.removed.length) console.log(`worktree gc sweep-deferred: removed ${result.removed.length} worktree(s)`);
@@ -31834,7 +32422,7 @@ gcCmd.command("sweep-deferred").description("retry IDE-locked deferred worktree
     process.exit(process.exitCode ?? 0);
   });
 });
-gcCmd.option("--dry-run", "show what would be deleted (default)").option("--apply", "delete only the listed clean merged/closed PR local+remote branches, linked worktrees, and stale tracking refs").option("--json", "machine-readable output").option("--scratch", "prune safe local scratch (#1864) instead of git branches/refs; local plans are surfaced advisory-only, never auto-pruned").option("--remote <name>", "remote name", "origin").option("--limit <n>", "PRs to inspect per state", "200").option("--force", "remove worktrees even when the ownership registry shows another session created or worked in them recently (#3580)").option("--root <path>", "sweep an explicitly named worktrees root instead of the authoritative ../mmi-worktrees (#3471) ? descends into this repo container when present; ownership, dead-dir, and content guards still apply").action(async (o) => {
+gcCmd.option("--dry-run", "show what would be deleted (default)").option("--apply", "delete only the listed clean merged/closed PR local+remote branches, linked worktrees, and stale tracking refs").option("--json", "machine-readable output").option("--scratch", "prune safe local scratch (#1864) instead of git branches/refs; local plans are surfaced advisory-only, never auto-pruned").option("--remote <name>", "remote name", "origin").option("--limit <n>", "PRs to read PER BRANCH ? an effort bound, not a correctness one: merge state is resolved per branch, so no branch is ever skipped for being old (#4227)", "200").option("--force", "remove worktrees even when the ownership registry shows another session created or worked in them recently (#3580)").option("--root <path>", "sweep an explicitly named worktrees root instead of the authoritative ../mmi-worktrees (#3471) ? descends into this repo container when present; ownership, dead-dir, and content guards still apply").action(async (o) => {
   if (o.apply && o.dryRun) return fail("worktree gc: choose either --dry-run or --apply");
   if (o.scratch) {
     try {
@@ -31850,8 +32438,8 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
   if (!Number.isFinite(limit) || limit < 1) return fail("worktree gc: --limit must be a positive integer");
   let root;
   if (o.root !== void 0) {
-    root = (0, import_node_path37.resolve)(o.root);
-    if (!(0, import_node_fs39.existsSync)(root) || !(0, import_node_fs39.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
+    root = (0, import_node_path38.resolve)(o.root);
+    if (!(0, import_node_fs40.existsSync)(root) || !(0, import_node_fs40.statSync)(root).isDirectory()) return fail(`worktree gc: --root ${o.root} is not a directory`);
     const gcRepoRoot = (await execFileP2("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout.trim() || process.cwd();
     if (isPathUnderDirectory(gcRepoRoot, root)) {
       return fail(`worktree gc: --root ${root} contains this checkout ? name a worktrees root, not the repo or an ancestor of it`);
@@ -31866,13 +32454,14 @@ gcCmd.option("--dry-run", "show what would be deleted (default)").option("--appl
     if (o.apply) {
       const deferredStore = await createDeferredWorktreeStore();
       const removalContext = await currentWorktreeRemovalContext("worktree gc", o.force);
-      await sweepDeferredWorktrees(
+      const sweepResult = await sweepDeferredWorktrees(
         deferredStore,
         // #2841: same `-c core.fsmonitor=false` guard as the detached `gc sweep-deferred` worker ? keep a
         // git fsmonitor daemon from inheriting this sweep's stdio pipe and wedging the git call on Windows.
         worktreeRemoveDeps(async (args) => (await execFileP2("git", ["-c", "core.fsmonitor=false", ...args], { timeout: GIT_TIMEOUT_MS })).stdout),
         removalContext
       ).catch(() => void 0);
+      for (const removedPath of sweepResult?.removed ?? []) await bestEffortLeaseClose(removedPath);
       applyResult = await applyGcPlan(plan, o.remote, { root, force: o.force });
     }
     if (o.json) {
@@ -31893,11 +32482,11 @@ var WORKTREE_SETUP_LOCK_TTL_MS = 10 * 6e4;
 function runWorktreeInstall(command, cwd, quiet, opts) {
   const stdio = quiet ? "ignore" : "inherit";
   return new Promise((resolve5, reject) => {
-    const child2 = opts?.shell ? (0, import_node_child_process18.spawn)(command, { cwd, stdio, windowsHide: true, shell: true }) : (() => {
+    const child2 = opts?.shell ? (0, import_node_child_process19.spawn)(command, { cwd, stdio, windowsHide: true, shell: true }) : (() => {
       const [bin, ...args] = command.split(" ");
       const file = isWin2 ? "cmd.exe" : bin;
       const spawnArgs = isWin2 ? ["/c", bin, ...args] : args;
-      return (0, import_node_child_process18.spawn)(file, spawnArgs, { cwd, stdio, windowsHide: true });
+      return (0, import_node_child_process19.spawn)(file, spawnArgs, { cwd, stdio, windowsHide: true });
     })();
     const timer = setTimeout(() => {
       try {
@@ -31930,7 +32519,7 @@ async function currentWorktreeRemovalContext(command, force) {
   };
 }
 async function unprovenWorktreeReason(wtPath, repoRoot2) {
-  if (!(0, import_node_fs39.existsSync)(wtPath)) return `${wtPath} does not exist on disk`;
+  if (!(0, import_node_fs40.existsSync)(wtPath)) return `${wtPath} does not exist on disk`;
   const porcelain = (await execFileP2("git", ["-C", repoRoot2, "worktree", "list", "--porcelain"], { timeout: GIT_TIMEOUT_MS }).catch(() => ({ stdout: "" }))).stdout;
   const registered = parseWorktreePorcelainEntries(porcelain);
   if (!registered.length) {
@@ -31952,26 +32541,26 @@ function makeProvisionDeps(worktreeRoot, quiet, log) {
 function acquireWorktreeSetupLock(worktreeRoot) {
   const lockPath = repoRuntimeStatePath(worktreeRoot, "worktree-setup.lock");
   const take = () => {
-    const fd = (0, import_node_fs39.openSync)(lockPath, "wx");
+    const fd = (0, import_node_fs40.openSync)(lockPath, "wx");
     try {
-      (0, import_node_fs39.writeSync)(fd, String(Date.now()));
+      (0, import_node_fs40.writeSync)(fd, String(Date.now()));
     } finally {
-      (0, import_node_fs39.closeSync)(fd);
+      (0, import_node_fs40.closeSync)(fd);
     }
     return () => {
       try {
-        (0, import_node_fs39.rmSync)(lockPath, { force: true });
+        (0, import_node_fs40.rmSync)(lockPath, { force: true });
       } catch {
       }
     };
   };
   try {
-    (0, import_node_fs39.mkdirSync)((0, import_node_path37.dirname)(lockPath), { recursive: true });
+    (0, import_node_fs40.mkdirSync)((0, import_node_path38.dirname)(lockPath), { recursive: true });
     return take();
   } catch {
     try {
-      if (Date.now() - (0, import_node_fs39.statSync)(lockPath).mtimeMs > WORKTREE_SETUP_LOCK_TTL_MS) {
-        (0, import_node_fs39.rmSync)(lockPath, { force: true });
+      if (Date.now() - (0, import_node_fs40.statSync)(lockPath).mtimeMs > WORKTREE_SETUP_LOCK_TTL_MS) {
+        (0, import_node_fs40.rmSync)(lockPath, { force: true });
         return take();
       }
     } catch {
@@ -32108,6 +32697,34 @@ withExamples(mutating(
     const owner = { path: wtPath, branch, createdAt, lastSeenAt: createdAt, actor: createActor };
     recordWorktreeOwner(repoRoot2, owner);
     appendWorktreeEvent(repoRoot2, { action: "created", command: "worktree create", target: wtPath, branch, actor: owner.actor });
+    let lease;
+    try {
+      await execFileP2("jerv-cli", [
+        "lease",
+        "open",
+        "--kind",
+        "worktree",
+        "--ref",
+        wtPath,
+        ...selector ? ["--repo", selector.repo] : [],
+        // 72h, not the 24h default: a feature worktree routinely sits untouched over a weekend, and
+        // an expired lease is what makes a CLEAN, unheld tree reapable. Erring long costs disk;
+        // erring short reaps a tree someone is still using between sessions.
+        "--ttl",
+        "72",
+        "--note",
+        `${branch} via mmi-cli worktree create`
+      ], { timeout: GIT_TIMEOUT_MS });
+      lease = { ok: true };
+    } catch (e) {
+      const detail = (e.stderr?.trim() || e.message.trim()).split("\n")[0];
+      lease = { ok: false, error: detail };
+      if (!o.json) {
+        console.error(
+          `  worktree created, but no jerv lease was opened for it: ${detail} \u2014 nothing on the lease plane can expire this tree, so it will need manual cleanup (MMI-Hub#4231).`
+        );
+      }
+    }
     if (o.json) {
       return console.log(JSON.stringify({
         branch,
@@ -32115,6 +32732,7 @@ withExamples(mutating(
         base,
         resumed,
         ...report,
+        lease,
         ...issueForm && selector ? { issue: `${selector.repo}#${selector.number}` } : {},
         ...issueForm && o.claim ? { claim: claimError ? { ok: false, error: claimError } : claim } : {}
       }, null, 2));
@@ -32226,7 +32844,7 @@ function scheduleRelatedDiscovery(o) {
   try {
     const args = ["issue", "discover-related", "--number", String(o.number), "--title", o.title, "--body", o.body, "--fail-soft"];
     if (o.repo) args.push("--repo", o.repo);
-    spawnDetachedSelf(args, { spawn: import_node_child_process18.spawn, execPath: process.execPath, scriptPath: process.argv[1] }, { cwd: process.cwd() });
+    spawnDetachedSelf(args, { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] }, { cwd: process.cwd() });
   } catch {
   }
 }
@@ -32554,48 +33172,6 @@ tests.command("policy").description("enforce this repo's test-policy.json agains
     await failGraceful(e.message);
   }
 });
-var docsAudit = program2.command("docs-audit").description("the docs janitor verdict ledger ? record a dated run verdict, or read the dead-man status back");
-docsAudit.command("record").description("write a dated janitor verdict for one repo to the registry ledger (master-only server-side)").option("--repo <owner/name>", "the repo the verdict is for (default: the current repo)").option("--date <YYYY-MM-DD>", "the ISO day the run examined (default: today)").requiredOption("--sha-range <a..b>", "the git range the janitor read (e.g. <lastVerdictSha>..HEAD)").addOption(new Option("--outcome <kind>", "clean | refreshed | failed").makeOptionMandatory().choices(["clean", "refreshed", "failed"])).option("--count <n>", "docs refreshed (required when --outcome refreshed)").option("--reason <text>", "why the run failed (required when --outcome failed)").requiredOption("--checker-vendor <vendor>", "which vendor's model actually ran the check").action(async (o) => {
-  try {
-    const repo = o.repo ?? await currentRepoFullName();
-    const date = o.date ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    let outcome;
-    if (o.outcome === "clean") outcome = { kind: "clean" };
-    else if (o.outcome === "refreshed") outcome = { kind: "refreshed", count: Number(o.count) };
-    else if (o.outcome === "failed") outcome = { kind: "failed", reason: o.reason ?? "" };
-    else return failGraceful(`docs audit record: --outcome must be clean|refreshed|failed, got "${o.outcome}"`);
-    const verdict = docsAuditRecord({ repo, date, shaRange: o.shaRange, outcome, checkerVendor: o.checkerVendor });
-    await reportWrite("docs-audit record", await recordDocsAudit(verdict, registryClientDeps(await loadConfig())));
-  } catch (e) {
-    await failGraceful(e.message);
-  }
-});
-docsAudit.command("status").description("read the janitor dead-man verdict back for one repo ? missing/stale/failed is RED; a not-yet-armed registry route is an informational exit 0").option("--repo <owner/name>", "the repo to check (default: the current repo)").option("--json", "machine-readable output ? the discrete state rather than the sentence").action(async (o) => {
-  try {
-    const repo = o.repo ?? await currentRepoFullName();
-    const today = (/* @__PURE__ */ new Date()).toISOString().slice(0, 10);
-    const fetched = await readDocsAuditFetch(repo);
-    const result = docsAuditStatus(fetched, { repo, today });
-    if (o.json) {
-      const verdict = "ok" in fetched && fetched.ok ? fetched.verdict : null;
-      console.log(JSON.stringify({
-        repo,
-        armed: !("notArmed" in fetched),
-        ok: result.ok,
-        state: result.state,
-        date: verdict?.date ?? null,
-        outcome: verdict?.outcome ?? null,
-        checkerVendor: verdict?.checkerVendor ?? null,
-        line: result.line
-      }, null, 2));
-    } else {
-      console.log(result.line);
-    }
-    if (!result.ok) process.exitCode = 1;
-  } catch (e) {
-    await failGraceful(e.message);
-  }
-});
 async function reportWrite(label, res) {
   if (res.ok) {
     console.log(JSON.stringify(res.body));
@@ -32832,7 +33408,7 @@ project.command("set [owner/repo]").description("upsert project META (idempotent
   if (dupe) return fail(`org project set: KEY "${dupe}" was passed to both --var and --set; --set is an alias of --var, so pass each KEY once`);
   if (o.secretsFile) {
     try {
-      vars.push(`secrets=${(0, import_node_fs39.readFileSync)(o.secretsFile, "utf8")}`);
+      vars.push(`secrets=${(0, import_node_fs40.readFileSync)(o.secretsFile, "utf8")}`);
     } catch (e) {
       return fail(`org project set: cannot read --secrets-file ${o.secretsFile}: ${e.message}`);
     }
@@ -33255,6 +33831,7 @@ withExamples(mutating(
     }
   }
   if (o.related !== false) scheduleRelatedDiscovery({ repo: o.repo, number: created.number, title, body });
+  invalidateStatuslineBoardCache();
   console.log(JSON.stringify({
     ...created,
     label: issueType,
@@ -33555,6 +34132,7 @@ withExamples(pr.command("create").description("create a PR and print {number,url
     return fail(`pr create: ${docsCheck.detail} ? ${docsCheck.fix}`);
   }
   const created = await ghCreate(buildPrArgs({ title, body, base: o.base, head: o.head, repo: o.repo, draft: o.draft }));
+  invalidateStatuslineBoardCache();
   console.log(JSON.stringify(created));
 }), [
   'mmi-cli pr create --title "Add the schema" --body "Closes #2680"',
@@ -33584,11 +34162,11 @@ pr.command("view <number>").description("read a PR as structured JSON (merged st
   }
 });
 async function listCiWorkflowPaths(cwd = process.cwd()) {
-  const wfDir = (0, import_node_path37.join)(cwd, ".github", "workflows");
-  if (!(0, import_node_fs39.existsSync)(wfDir)) return [];
-  return (0, import_node_fs39.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
+  const wfDir = (0, import_node_path38.join)(cwd, ".github", "workflows");
+  if (!(0, import_node_fs40.existsSync)(wfDir)) return [];
+  return (0, import_node_fs40.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
     try {
-      return workflowReportsPrChecks((0, import_node_fs39.readFileSync)((0, import_node_path37.join)(wfDir, name), "utf8"));
+      return workflowReportsPrChecks((0, import_node_fs40.readFileSync)((0, import_node_path38.join)(wfDir, name), "utf8"));
     } catch {
       return true;
     }
@@ -33620,16 +34198,16 @@ function ciAuditDeps() {
     // gate re-seed step is skipped gracefully rather than failing mid-run.
     readSeedFile: (path2) => {
       if (!root) return null;
-      const fullPath = (0, import_node_path37.join)(root, path2);
-      return (0, import_node_fs39.existsSync)(fullPath) ? (0, import_node_fs39.readFileSync)(fullPath, "utf8") : null;
+      const fullPath = (0, import_node_path38.join)(root, path2);
+      return (0, import_node_fs40.existsSync)(fullPath) ? (0, import_node_fs40.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
 function hubRoot() {
-  const fromPkg = (0, import_node_path37.join)(__dirname, "..", "..");
+  const fromPkg = (0, import_node_path38.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs39.existsSync)((0, import_node_path37.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs39.existsSync)((0, import_node_path37.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs40.existsSync)((0, import_node_path38.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs40.existsSync)((0, import_node_path38.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 pr.command("ci-policy").description("report merge CI policy: wait-for-checks vs no-ci (for grind/build agents)").option("--json", "machine-readable output").option("--repo <owner/repo>", "target repo (defaults to the current checkout)").action(async (o) => {
@@ -33940,7 +34518,7 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
     localCleanup = await cleanupPrMergeLocalBranch(headRef, {
       beforeWorktrees,
       startingPath,
-      pathExists: (p) => (0, import_node_fs39.existsSync)(p),
+      pathExists: (p) => (0, import_node_fs40.existsSync)(p),
       execGit: async (args) => (await execFileP2("git", args, { timeout: GIT_TIMEOUT_MS })).stdout,
       teardownWorktreeStage,
       deferredStore,
@@ -33954,6 +34532,7 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
       preserveWorktree: o.preserveWorktree,
       removalContext
     });
+    if (localCleanup.worktree?.status === "removed") await bestEffortLeaseClose(localCleanup.worktree.path);
   } catch (e) {
     localCleanup = {
       branch: headRef,
@@ -33966,6 +34545,7 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
     };
   }
   const boardAdvance = await advanceClosedIssuesToDone2(number, repoForPostCleanup);
+  invalidateStatuslineBoardCache();
   console.log(JSON.stringify({
     ...buildPrMergeResultPayload({
       number,
@@ -34434,19 +35014,19 @@ access.command("audit").description("audit collaborator roles + train-branch pus
     targets = resolution.targets;
   }
   const derivedMatrix = registryProjects ? accessMatrixFromProjects(registryProjects) : {};
-  const fileMatrix = (0, import_node_fs39.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs39.readFileSync)("access-matrix.json", "utf8")) : {};
+  const fileMatrix = (0, import_node_fs40.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs40.readFileSync)("access-matrix.json", "utf8")) : {};
   const matrix = mergeAccessMatrix(fileMatrix, derivedMatrix);
   const derivedContracts = registryProjects ? dataAccessContractsFromProjects(registryProjects) : { consumers: {} };
-  const fileContracts = (0, import_node_fs39.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs39.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
+  const fileContracts = (0, import_node_fs40.existsSync)("data-access-contracts.json") ? loadDataAccessContracts((0, import_node_fs40.readFileSync)("data-access-contracts.json", "utf8")) : { consumers: {} };
   const dataAccess = mergeDataAccessContracts(fileContracts, derivedContracts);
-  const sanctioned = (0, import_node_fs39.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs39.readFileSync)("access-matrix.json", "utf8")) : {};
+  const sanctioned = (0, import_node_fs40.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs40.readFileSync)("access-matrix.json", "utf8")) : {};
   const report = await auditOrgAccess(targets, deps, matrix, dataAccess, sanctioned);
   console.log(o.json ? JSON.stringify(report, null, 2) : renderAccessReport(report));
   if (!report.ok) process.exitCode = 1;
 });
 access.command("capabilities").description("enumerate your effective vault reach ? every credential NAME + tier + scope you can read/use across project + org/master tiers (names only, no values) (#1615)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action((o) => withSecrets((d) => secretsCapabilities(d, o)));
 var isWin2 = process.platform === "win32";
-program2.command("doctor").description("heal CLI/plugin wiring and clean up repo cruft ? repairs run by default (#3975); use --verbose for the full audit checklist").option("--banner", "one-line resume summary; silent when all gates pass").option("--fast", "offline-safe fast lane; read-only, skips slow checks and network probes").option("--preflight", "eager version/plugin-heal (env repairs only ? never the repo working tree) with upfront notice when stale; silent when healthy (#1871)").option("--verbose", "print the evidence behind every check ? probes, resolved paths, versions compared, and the names behind each count (#2977)").option("--guide", "print the MMI Agentic Onboarding guide URL").option("--json", "machine-readable output (an output format ? repairs still run by lane)").option("--apply", "deprecated no-op: repairs run by default now (#3975); kept so older instructions still parse").option("--no-repo-writes", "env/plugin repairs only ? never mutate the repo working tree; report pending managed .gitignore repairs with the follow-up command (for train preflights)").option("--self", "verify CLI/plugin version parity and gh auth reach; suggests plugin-heal on a hard gap (reads the published version, so not offline-safe) (#2689)").addHelpText("after", "\nExit codes:\n  0  no hard gaps remain; advisory gaps may exist\n  1  one or more included hard checks failed\n\nA plain run heals env drift (CLI, plugin, marketplace pins) and cleans repo cruft (gitignore block,\nmerged branches, dead worktrees, aged scratch) automatically (#3975). --no-repo-writes keeps the\nworking tree untouched for train preflights; --banner/--fast/--self are read-only lanes.\n\n--banner keeps the legacy SessionStart contract and returns 0 unless the process crashes.\n").action(async (opts) => {
+program2.command("doctor").description("heal CLI/plugin wiring and clean up repo cruft ? repairs run by default (#3975); use --verbose for the full audit checklist").option("--banner", "one-line resume summary; silent when all gates pass").option("--fast", "offline-safe fast lane; read-only, skips slow checks and network probes").option("--preflight", "read-only fast gate for automation: measures and reports with the shared exit code, zero writes (#4199, canon); heal env drift with a plain run or --no-repo-writes").option("--verbose", "print the evidence behind every check ? probes, resolved paths, versions compared, and the names behind each count (#2977)").option("--guide", "print the MMI Agentic Onboarding guide URL").option("--json", "machine-readable output (an output format ? repairs still run by lane)").option("--apply", "deprecated no-op: repairs run by default now (#3975); kept so older instructions still parse").option("--no-repo-writes", "env/plugin repairs only ? never mutate the repo working tree; report pending managed .gitignore repairs with the follow-up command (for train preflights)").option("--self", "verify CLI/plugin version parity and gh auth reach; suggests plugin-heal on a hard gap (reads the published version, so not offline-safe) (#2689)").addHelpText("after", "\nExit codes:\n  0  no hard gaps remain; advisory gaps may exist\n  1  one or more included hard checks failed\n\nA plain run heals env drift (CLI, plugin, marketplace pins) and cleans repo cruft (gitignore block,\nmerged branches, dead worktrees, aged scratch) automatically (#3975). --no-repo-writes keeps the\nworking tree untouched for train preflights; --banner/--fast/--self are read-only lanes.\n\n--banner keeps the legacy SessionStart contract and returns 0 unless the process crashes.\n").action(async (opts) => {
   if (opts.guide) {
     consoleIo.log("MMI Agentic Onboarding: docs/Architecture/agentic-dev-environment.md");
     return;
@@ -34471,16 +35051,16 @@ function directoryBytes(path2) {
   let total = 0;
   let entries;
   try {
-    entries = (0, import_node_fs39.readdirSync)(path2, { withFileTypes: true });
+    entries = (0, import_node_fs40.readdirSync)(path2, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const entry of entries) {
-    const child2 = (0, import_node_path37.join)(path2, entry.name);
+    const child2 = (0, import_node_path38.join)(path2, entry.name);
     if (entry.isDirectory()) total += directoryBytes(child2);
     else {
       try {
-        total += (0, import_node_fs39.statSync)(child2).size;
+        total += (0, import_node_fs40.statSync)(child2).size;
       } catch {
       }
     }
@@ -34488,25 +35068,25 @@ function directoryBytes(path2) {
   return total;
 }
 function listDirEntries(dir) {
-  return (0, import_node_fs39.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
+  return (0, import_node_fs40.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
 }
 function readInstalledPluginRefs(configRoot) {
   const p = installedPluginsPathForConfig(configRoot);
-  if (!(0, import_node_fs39.existsSync)(p)) return [];
+  if (!(0, import_node_fs40.existsSync)(p)) return [];
   try {
-    return installedPluginPaths((0, import_node_fs39.readFileSync)(p, "utf8"));
+    return installedPluginPaths((0, import_node_fs40.readFileSync)(p, "utf8"));
   } catch {
     return null;
   }
 }
 function pluginCacheFsDeps(configRoot, dirBytes) {
   return {
-    exists: (p) => (0, import_node_fs39.existsSync)(p),
-    listVersionDirs: (root) => (0, import_node_fs39.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
+    exists: (p) => (0, import_node_fs40.existsSync)(p),
+    listVersionDirs: (root) => (0, import_node_fs40.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
     dirBytes,
-    listStagingDirs: (root) => (0, import_node_fs39.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
+    listStagingDirs: (root) => (0, import_node_fs40.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
       try {
-        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path37.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs39.statSync)(p).mtimeMs) };
+        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path38.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs40.statSync)(p).mtimeMs) };
       } catch {
         return { name: d.name, mtimeMs: Date.now() };
       }
@@ -34520,10 +35100,10 @@ function stagingApplyFsGuard(configRoot) {
   return {
     referencedPaths: () => readInstalledPluginRefs(configRoot),
     mtimeMs: (name) => {
-      const p = (0, import_node_path37.join)(stagingRoot, name);
-      if (!(0, import_node_fs39.existsSync)(p)) return null;
+      const p = (0, import_node_path38.join)(stagingRoot, name);
+      if (!(0, import_node_fs40.existsSync)(p)) return null;
       try {
-        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs39.statSync)(q).mtimeMs);
+        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs40.statSync)(q).mtimeMs);
       } catch {
         return null;
       }
@@ -34549,7 +35129,7 @@ program2.command("plugin-prune").description(`prune stale cached MMI plugin vers
     { withBytes: true, configRoot, includeStaging: surface !== "codex" }
   );
   const anythingToDelete = plan.prune.length > 0 || plan.staging.length > 0;
-  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs39.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
+  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs40.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
   const warnings = plan.prune.length > 0 ? [CONCURRENT_SESSION_WARNING] : [];
   if (o.json) console.log(JSON.stringify({ ...plan, warnings, applied: result ?? null }));
   else console.log(renderPluginCachePlan(plan, result));
@@ -34612,7 +35192,7 @@ program2.command("session-start").description("run the SessionStart verbs (whoam
   for (const line of scratchGcLines(process.cwd())) bannerIo.log(line);
   const worktreeBanner = worktreeAutoProvisionBanner(process.cwd());
   if (worktreeBanner) {
-    spawnDetachedSelf(["worktree", "setup", "--quiet"], { spawn: import_node_child_process18.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
+    spawnDetachedSelf(["worktree", "setup", "--quiet"], { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
     bannerIo.log(worktreeBanner);
   }
   if (isLinkedWorktree(process.cwd())) {