codebyplan 1.9.0 → 1.10.0

package/dist/cli.js

@@ -14,7 +14,7 @@ var VERSION, PACKAGE_NAME;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    VERSION = "1.9.0";
+    VERSION = "1.10.0";
     PACKAGE_NAME = "codebyplan";
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebyplan",
-  "version": "1.9.0",
+  "version": "1.10.0",
   "description": "CLI for CodeByPlan — AI-powered development planning and tracking",
   "type": "module",
   "bin": {

package/templates/skills/cbp-git-worktree-create/SKILL.md

@@ -23,6 +23,7 @@ Examples:
 - Must run from the **main repo** (the non-worktree checkout)
 - Working tree should be clean
 - Branch should not already exist as a worktree
+- New branches are always rooted at `origin/{production}` (read from `.codebyplan/git.json`), independent of the main repo's currently checked-out branch
 
 ## Instructions
 
@@ -87,18 +88,23 @@ If it exists, stop and inform the user.
 
 ### Step 4: Create Branch If Needed
 
+Resolve the production branch: read `.codebyplan/git.json` and take `branch_config.production` (fall back to `main` if the file or field is absent). Call this `$PRODUCTION`.
+
 Check if branch exists:
 
 ```bash
 git branch --list "$BRANCH_NAME"
 ```
 
-If branch does NOT exist, create it from current HEAD:
+If branch does NOT exist, create it from the freshest production tip — **not** from the main repo's ambient HEAD (which is often a stale home branch such as `codebyplan-main`):
 
 ```bash
-git branch "$BRANCH_NAME"
+git fetch origin "$PRODUCTION" 2>/dev/null || true
+git branch "$BRANCH_NAME" "origin/$PRODUCTION"
 ```
 
+This guarantees every worktree starts at `origin/{production}` regardless of which branch the main repo currently has checked out.
+
 ### Step 5: Create Worktree
 
 ```bash
@@ -204,6 +210,7 @@ No need to mark as `skip-worktree` — the committed files are merge-safe per CH
 **Branch**: [branch-name]
 **Path**: [worktree-path]
 **Main repo**: [main-repo-path]
+**Base**: origin/[production] ([sha])
 **CodeByPlan**: Registered (worktree ID: [id])
 
 ### Setup

package/templates/skills/cbp-session-end/SKILL.md

@@ -74,6 +74,31 @@ Same rule as `/cbp-session-start` Step 5.7 — only commit files that are **not*
 
 Non-blocking — session end proceeds either way.
 
+### Step 1.6: Home-Branch Fast-Forward
+
+Keep this worktree's **home branch** rooted at the freshest production tip — no prompt, fully non-blocking. Home branches are the folder-named placeholder branches each worktree rests on (e.g. `codebyplan-web`); `feat/*` branches are deliberately skipped — they integrate via `/cbp-merge-main` with QA, never an auto fast-forward.
+
+Runs after Step 1.5 so any infra commits land first, and before Step 1.7 so the asset-update CLIs operate on the freshest tree.
+
+Resolve the production branch: read `.codebyplan/git.json` and take `branch_config.production` (fall back to `main` if the file or field is absent). Call this `$PRODUCTION`. Then compare the current branch against the worktree's folder name:
+
+```bash
+FOLDER="$(basename "$(git rev-parse --show-toplevel)")"
+CURRENT="$(git rev-parse --abbrev-ref HEAD)"
+```
+
+- **`$CURRENT` != `$FOLDER`** (a `feat/*` or any non-home branch): skip silently — no fetch, no output.
+- **`$CURRENT` == `$FOLDER`** (home branch): fast-forward to `origin/$PRODUCTION`, warning once per failure and continuing:
+
+  ```bash
+  git fetch origin "$PRODUCTION" 2>/dev/null \
+    || echo "⚠ home-branch ff: fetch failed — staying on local $CURRENT"
+  git merge --ff-only "origin/$PRODUCTION" 2>/dev/null \
+    || echo "⚠ home-branch ff: $CURRENT not fast-forwardable (ahead/diverged) — left untouched"
+  ```
+
+Never rebase, reset, force-push, or stash. A non-fast-forwardable home branch is a signal to reconcile manually, not to overwrite.
+
 ### Step 1.7: Auto-Update CodeByPlan Assets
 
 Run the latest published CLIs to pull any asset or config changes. Sub-block A runs first, then Sub-block B. A failure in A does **not** skip B — each sub-block has its own retry-and-warn lane.
@@ -179,7 +204,7 @@ You can close this window.
 ## Integration
 
 - **Triggered by**: user invocation (prompted by `/cbp-todo` when no work remains)
-- **Reads**: `.codebyplan/repo.json`, MCP `get_session_logs` (resolve current log), MCP `get_current_task`, MCP `get_rounds`, MCP `get_next_action` (Step 1.3 handoff snapshot)
+- **Reads**: `.codebyplan/repo.json`, `.codebyplan/git.json` (`branch_config.production` for the Step 1.6 home-branch fast-forward), MCP `get_session_logs` (resolve current log), MCP `get_current_task`, MCP `get_rounds`, MCP `get_next_action` (Step 1.3 handoff snapshot)
 - **Writes**: MCP `update_session_log` (with `ended_at` + `handoff` per TASK-2 alias surface; or `create_session_log` fallback), MCP `update_session_state` (deactivate)
 - **Spawns**: none
 - **Triggers**: none at the skill-contract level. Steps 1.5 and 1.7 may invoke `/cbp-git-commit` inline on user approval.

package/templates/skills/cbp-session-start/SKILL.md

@@ -12,7 +12,7 @@ Activate the session, open a fresh session log, and surface the previous log's p
 
 ## Instructions
 
-Do Steps 0–5 and Step 4.5 silently (no intermediate output). Step 5.7 may surface an approval gate. Produce ONE output block at Step 6, then auto-trigger `/cbp-todo`.
+Do Steps 0–5 and Step 4.5 silently (no intermediate output). Step 1.4 may surface a one-line fast-forward note or warning, and Step 5.7 may surface an approval gate. Produce ONE output block at Step 6, then auto-trigger `/cbp-todo`.
 
 ### Step 0: MCP Health Check
 
@@ -50,6 +50,29 @@ Pass `WORKTREE_ID` to MCP tools that support it. Empty output means the (device,
 
 **If `worktree_id` resolves to empty** (the (device, path, branch) tuple does not match any registered worktree row): the session continues, but downstream MCP calls treat this caller as untagged — every hard-lock pre-guard sees a NULL `caller_worktree_id` and may reject mutations on assigned rows. Surface a one-line note in the Step 6 output instructing the user to run `npx codebyplan setup` from this directory to register the worktree.
 
+### Step 1.4: Home-Branch Fast-Forward
+
+Keep this worktree's **home branch** rooted at the freshest production tip — no prompt, fully non-blocking. Home branches are the folder-named placeholder branches each worktree rests on (e.g. `codebyplan-web`); `feat/*` branches are deliberately skipped — they integrate via `/cbp-merge-main` with QA, never an auto fast-forward.
+
+Resolve the production branch: read `.codebyplan/git.json` and take `branch_config.production` (fall back to `main` if the file or field is absent). Call this `$PRODUCTION`. Then compare the current branch against the worktree's folder name:
+
+```bash
+FOLDER="$(basename "$(git rev-parse --show-toplevel)")"
+CURRENT="$(git rev-parse --abbrev-ref HEAD)"
+```
+
+- **`$CURRENT` != `$FOLDER`** (a `feat/*` or any non-home branch): skip silently — no fetch, no output.
+- **`$CURRENT` == `$FOLDER`** (home branch): fast-forward to `origin/$PRODUCTION`, warning once per failure and continuing:
+
+  ```bash
+  git fetch origin "$PRODUCTION" 2>/dev/null \
+    || echo "⚠ home-branch ff: fetch failed — staying on local $CURRENT"
+  git merge --ff-only "origin/$PRODUCTION" 2>/dev/null \
+    || echo "⚠ home-branch ff: $CURRENT not fast-forwardable (ahead/diverged) — left untouched"
+  ```
+
+Never rebase, reset, force-push, or stash. A non-fast-forwardable home branch is a signal to reconcile manually, not to overwrite.
+
 ### Step 2: Check Dev Server
 
 **Skip if `server_type` is `"none"`.**
@@ -147,7 +170,7 @@ Trigger `/cbp-todo` to determine what to work on.
 ## Integration
 
 - **Triggered by**: user invocation, `/clear` recovery
-- **Reads**: `.codebyplan/repo.json`, MCP `get_session_logs` (worktree-filtered, limit 1 — single call shared by Step 4 and Step 4.5), MCP `health_check`, MCP `get_current_task`, MCP `get_rounds`, MCP `get_checkpoints` / `get_tasks` / `get_rounds` for freshness probe (Step 4.5)
+- **Reads**: `.codebyplan/repo.json`, `.codebyplan/git.json` (`branch_config.production` for the Step 1.4 home-branch fast-forward), MCP `get_session_logs` (worktree-filtered, limit 1 — single call shared by Step 4 and Step 4.5), MCP `health_check`, MCP `get_current_task`, MCP `get_rounds`, MCP `get_checkpoints` / `get_tasks` / `get_rounds` for freshness probe (Step 4.5)
 - **Writes**: MCP `create_session_log` (new, possibly empty), MCP `update_session_state` (activate)
 - **Spawns**: none
 - **Triggers**: `/cbp-git-commit` (conditional, on user approval), `handoff.command` (on fresh handoff hit at Step 4.5), `/cbp-todo` (auto fall-through)