cyberlegion 1.1.0 → 1.2.0

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "cyberlegion",
-	"version": "1.1.0",
+	"version": "1.2.0",
 	"description": "Agent session spawning, messaging, and dispatch — the Legion and its Legate.",
 	"author": {
 		"name": "unional"

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
 	"name": "cyberlegion",
-	"version": "1.1.0",
+	"version": "1.2.0",
 	"description": "Agent session spawning, messaging, and dispatch — the Legion and its Legate.",
 	"author": {
 		"name": "unional"

package/.plugin/pins.json

@@ -1,3 +1,3 @@
 {
-	"cyberlegion": "1.1.0"
+	"cyberlegion": "1.2.0"
 }

package/dist/cli.mjs

@@ -6139,6 +6139,7 @@ function reconcile(ctx, opts) {
 	const cur = storablePane(ctx.env ?? process.env);
 	if (!cur) return [];
 	const panes = PANE_ADAPTERS[cur.mux].listPanes(exec);
+	if (panes.length === 0) return [];
 	const live = new Set(panes.map((p) => p.id));
 	const changed = [];
 	for (const rec of listAgents(ctx.store)) {
@@ -6154,18 +6155,34 @@ function reconcile(ctx, opts) {
 	if (opts?.adopt) changed.push(...adopt(ctx, panes));
 	return changed;
 }
-/** Mark agents whose pane is gone or whose last-seen is stale as exited. Reconcile-culls against the
-* current mux's live set first, then falls through to the per-record paneExists + staleness check
-* (covers the other mux and sessions outside any multiplexer pane). */
+/**
+* Whether a record's pane is positively gone: its existence probe fails AND its mux answers with a
+* pane list that does not hold it. `paneExists` alone collapses "unreachable" into "gone", so a mux
+* that answers no list at all (server down, a failed query) leaves the pane undecided — never gone.
+* The list is read at most once per mux per call.
+*/
+function paneGone(exec, pane, lists) {
+	const adapter = PANE_ADAPTERS[pane.mux];
+	if (adapter.paneExists(exec, { id: pane.id })) return false;
+	let panes = lists.get(pane.mux);
+	if (!panes) {
+		panes = adapter.listPanes(exec);
+		lists.set(pane.mux, panes);
+	}
+	return panes.length > 0 && !panes.some((p) => p.id === pane.id);
+}
+/** Mark agents whose session is gone as exited. Reconcile-culls against the current mux's live set
+* first, then judges each remaining record (covers the other mux and sessions outside any
+* multiplexer pane): a pane-bound record by its pane alone — a live or unprobeable pane keeps it
+* whatever its last-seen — and a pane-less record by the staleness timer, its only signal. */
 function prune(ctx) {
 	const exec = ctx.exec ?? realExec;
 	const now = ctx.now?.() ?? Date.now();
 	const changed = reconcile(ctx);
+	const lists = /* @__PURE__ */ new Map();
 	for (const rec of listAgents(ctx.store)) {
 		if (!isPrunable(rec)) continue;
-		const paneGone = rec.pane ? !PANE_ADAPTERS[rec.pane.mux].paneExists(exec, { id: rec.pane.id }) : false;
-		const stale = now - new Date(rec.lastSeen).getTime() > STALE_MS;
-		if (paneGone || stale) {
+		if (rec.pane ? paneGone(exec, rec.pane, lists) : now - new Date(rec.lastSeen).getTime() > STALE_MS) {
 			rec.status = "exited";
 			saveAgent(ctx.store, rec);
 			changed.push(rec);
@@ -6880,7 +6897,10 @@ function spawn(ctx, input) {
 			assertDistinctFromPrimary(opened.worktree.root, primaryRoot);
 			ensureMarker(join(opened.worktree.root, ".agents", "cyberlegion"));
 			cwd = opened.worktree.root;
-			worktree = opened.worktree;
+			worktree = {
+				...opened.worktree,
+				primaryRoot
+			};
 			target = opened.target;
 		} else {
 			const added = gitWorktreeAdapter.add(exec, {
@@ -6891,7 +6911,10 @@ function spawn(ctx, input) {
 			assertDistinctFromPrimary(added.root, primaryRoot);
 			ensureMarker(join(added.root, ".agents", "cyberlegion"));
 			cwd = added.root;
-			worktree = added;
+			worktree = {
+				...added,
+				primaryRoot
+			};
 			target = sessionAdapter.open(exec, {
 				cwd,
 				launch: launchLine(),
@@ -7584,12 +7607,18 @@ function decommission(ctx, input) {
 	const exec = ctx.exec ?? realExec;
 	const env = ctx.env ?? process.env;
 	const worktreeRoot = rec.worktree?.root;
-	const primaryRoot = worktreeRoot ? resolvePrimaryRoot(exec) : void 0;
-	if (worktreeRoot && resolve(worktreeRoot) === resolve(primaryRoot)) throw new Error(`refusing to decommission "${input.id}" — its worktree is the primary checkout; neither --force nor --keep-worktree overrides this`);
 	const worktreeExists = worktreeRoot != null && existsSync(worktreeRoot);
+	const primaryRoot = worktreeExists ? primaryRootOf(exec, worktreeRoot) : rec.worktree?.primaryRoot;
+	if (worktreeRoot && primaryRoot && resolve(worktreeRoot) === resolve(primaryRoot)) throw new Error(`refusing to decommission "${input.id}" — its worktree is the primary checkout; neither --force nor --keep-worktree overrides this`);
 	const removesWorktree = worktreeExists && !input.keepWorktree;
 	if (removesWorktree && !input.force && isDirty(exec, worktreeRoot)) throw new Error(`unit "${input.id}" has uncommitted changes in its worktree — pass --force to discard them`);
 	const pane = rec.pane?.id ?? ctx.store.findPaneByAgentId(input.id);
+	if (worktreeRoot && !worktreeExists && primaryRoot && existsSync(primaryRoot)) exec("git", [
+		"-C",
+		primaryRoot,
+		"worktree",
+		"prune"
+	]);
 	if (removesWorktree) try {
 		gitWorktreeAdapter.remove(exec, worktreeRoot, { primaryRoot });
 	} catch (err) {
@@ -7610,6 +7639,22 @@ function decommission(ctx, input) {
 	};
 }
 /**
+* The primary checkout of the repository `worktreeRoot` belongs to — `--git-common-dir` asked of the
+* worktree itself, so the answer does not depend on where the caller runs. Throws for a directory git
+* does not know: there is no repository to remove it from.
+*/
+function primaryRootOf(exec, worktreeRoot) {
+	const commonDir = exec("git", [
+		"-C",
+		worktreeRoot,
+		"rev-parse",
+		"--path-format=absolute",
+		"--git-common-dir"
+	]);
+	if (!commonDir) throw new Error(`cannot resolve the repository of worktree ${worktreeRoot} — git does not know it`);
+	return dirname(commonDir);
+}
+/**
 * Whether the worktree holds work a removal would discard. The marker `spawn` stamps into every
 * worktree it creates is cyberlegion's own file, not the unit's work: in a project that does not
 * track it, it shows as untracked in every spawned worktree, and counting it would make a plain close
@@ -7644,10 +7689,7 @@ const VENDORS = {
 	claude: {
 		file: ".claude/settings.json",
 		shape: "claude",
-		events: {
-			SessionStart: "SessionStart",
-			PostToolUse: "PostToolUse"
-		},
+		events: { SessionStart: "SessionStart" },
 		pluginHook: true
 	},
 	cursor: {
@@ -7659,13 +7701,11 @@ const VENDORS = {
 	codex: {
 		file: ".codex/hooks.json",
 		shape: "cursor",
-		events: {
-			SessionStart: "SessionStart",
-			PostToolUse: "PostToolUse"
-		},
+		events: { SessionStart: "SessionStart" },
 		pluginHook: true
 	}
 };
+const RETIRED_EVENTS = ["PostToolUse"];
 function readJson(file) {
 	if (!existsSync(file)) return {};
 	try {
@@ -7709,6 +7749,17 @@ function install(harness, projectDir = process.cwd(), pin) {
 			status
 		});
 	}
+	if (spec.pluginHook) for (const event of RETIRED_EVENTS) {
+		if (!(spec.shape === "claude" ? removeClaude(settings, event, event) : removeCursor(settings, event, event))) continue;
+		changed = true;
+		results.push({
+			harness,
+			event,
+			vendorEvent: event,
+			file,
+			status: "removed project hook"
+		});
+	}
 	if (changed) writeJson$1(file, settings);
 	return results;
 }
@@ -7723,12 +7774,10 @@ function upsertClaude(settings, event, command) {
 			return "already present";
 		}
 	}
-	const group = { hooks: [{
+	groups.push({ hooks: [{
 		type: "command",
 		command
-	}] };
-	if (event === "PostToolUse") group.matcher = "Write|Edit";
-	groups.push(group);
+	}] });
 	return "registered";
 }
 function upsertCursor(settings, event, command) {
@@ -7932,7 +7981,7 @@ function byPath(ctx, dir) {
 }
 //#endregion
 //#region src/runtime/inject-inbox.ts
-const EVENTS = ["SessionStart", "PostToolUse"];
+const EVENTS = ["SessionStart"];
 /**
 * Resolve the calling agent, gather its unread mail (and a standing owner's, when this session is
 * the hub's main pane), and return the SessionStart-style injection payload — or null when there is
@@ -7980,9 +8029,6 @@ function injectInbox(ctx, event) {
 			}
 		}
 	} catch {}
-	if (rec && !rec.spawnedBy) try {
-		if (cur ? !ctx.store.getMainPane() : !listAgents(ctx.store).some((a) => a.kind === "standing")) parts.push("## Legion setup\n\nThis pane has no owner inbox bound yet — run `cyberlegion init` to register the surfacing hook and bind this pane as the owner live presence.");
-	} catch {}
 	if (parts.length === 0) return null;
 	return { hookSpecificOutput: {
 		hookEventName: event,
@@ -9792,7 +9838,7 @@ withGlobals(mail.command("watch")).description("stream new matching mail as it a
 		});
 	});
 });
-withGlobals(mail.command("hook")).description("emit the harness hook injection payload (raw JSON on stdout, not TOON)").option("--event <event>", "SessionStart | PostToolUse", "SessionStart").action((opts) => {
+withGlobals(mail.command("hook")).description("emit the harness hook injection payload (raw JSON on stdout, not TOON)").option("--event <event>", "SessionStart", "SessionStart").action((opts) => {
 	const ctx = ctxOf(opts);
 	touch(ctx);
 	const payload = injectInbox(ctx, opts.event);

package/dist/index.d.mts

@@ -25,9 +25,13 @@ interface AgentRecord {
   /** Absent for a standing record (a human/owner principal — no claude/cursor/codex harness). */
   harness?: Harness;
   cwd: string;
+  /** `primaryRoot` is the primary checkout of the repository the worktree belongs to, recorded by
+   * spawn — the one place to find git's registration of a worktree whose directory is gone. Absent
+   * on a registered session and on records from before it was recorded. */
   worktree?: {
     root: string;
     branch?: string;
+    primaryRoot?: string;
   } | null;
   /** Where this session lives, tagged with its multiplexer so `prune` runs the right liveness check.
    * `null` for a session in no pane and for a standing record. `window`/`session` are tmux-only. */
@@ -220,9 +224,10 @@ export declare function resolveAgent(store: Store, ref: string): AgentRecord;
 export declare function bumpLastSeen(ctx: IdContext, id: string): void;
 /** Refresh this session's own last-seen if it is registered — best-effort, never throws. */
 export declare function touch(ctx: IdContext): void;
-/** Mark agents whose pane is gone or whose last-seen is stale as exited. Reconcile-culls against the
- * current mux's live set first, then falls through to the per-record paneExists + staleness check
- * (covers the other mux and sessions outside any multiplexer pane). */
+/** Mark agents whose session is gone as exited. Reconcile-culls against the current mux's live set
+ * first, then judges each remaining record (covers the other mux and sessions outside any
+ * multiplexer pane): a pane-bound record by its pane alone — a live or unprobeable pane keeps it
+ * whatever its last-seen — and a pane-less record by the staleness timer, its only signal. */
 export declare function prune(ctx: IdContext): AgentRecord[];
 //#endregion
 //#region src/agentdef/resolve.d.ts
@@ -328,7 +333,7 @@ interface DecommissionResult {
 export declare function decommission(ctx: IdContext, input: DecommissionInput): DecommissionResult;
 //#endregion
 //#region src/runtime/inject-inbox.d.ts
-type HookEvent = 'SessionStart' | 'PostToolUse';
+type HookEvent = 'SessionStart';
 interface InjectPayload {
   hookSpecificOutput: {
     hookEventName: HookEvent;
@@ -347,10 +352,11 @@ interface InjectPayload {
 export declare function injectInbox(ctx: IdContext, event: string): InjectPayload | null;
 //#endregion
 //#region src/install.d.ts
+type RetiredEvent = 'PostToolUse';
 type InstallStatus = 'registered' | 'already present' | 'provided by plugin' | 'removed project hook';
 interface InstallResult {
   harness: Harness;
-  event: HookEvent;
+  event: HookEvent | RetiredEvent;
   vendorEvent: string;
   file: string;
   status: InstallStatus;

package/dist/index.mjs

@@ -462,6 +462,7 @@ function reconcile(ctx, opts) {
 	const cur = storablePane(ctx.env ?? process.env);
 	if (!cur) return [];
 	const panes = PANE_ADAPTERS[cur.mux].listPanes(exec);
+	if (panes.length === 0) return [];
 	const live = new Set(panes.map((p) => p.id));
 	const changed = [];
 	for (const rec of listAgents(ctx.store)) {
@@ -477,18 +478,34 @@ function reconcile(ctx, opts) {
 	if (opts?.adopt) changed.push(...adopt(ctx, panes));
 	return changed;
 }
-/** Mark agents whose pane is gone or whose last-seen is stale as exited. Reconcile-culls against the
-* current mux's live set first, then falls through to the per-record paneExists + staleness check
-* (covers the other mux and sessions outside any multiplexer pane). */
+/**
+* Whether a record's pane is positively gone: its existence probe fails AND its mux answers with a
+* pane list that does not hold it. `paneExists` alone collapses "unreachable" into "gone", so a mux
+* that answers no list at all (server down, a failed query) leaves the pane undecided — never gone.
+* The list is read at most once per mux per call.
+*/
+function paneGone(exec, pane, lists) {
+	const adapter = PANE_ADAPTERS[pane.mux];
+	if (adapter.paneExists(exec, { id: pane.id })) return false;
+	let panes = lists.get(pane.mux);
+	if (!panes) {
+		panes = adapter.listPanes(exec);
+		lists.set(pane.mux, panes);
+	}
+	return panes.length > 0 && !panes.some((p) => p.id === pane.id);
+}
+/** Mark agents whose session is gone as exited. Reconcile-culls against the current mux's live set
+* first, then judges each remaining record (covers the other mux and sessions outside any
+* multiplexer pane): a pane-bound record by its pane alone — a live or unprobeable pane keeps it
+* whatever its last-seen — and a pane-less record by the staleness timer, its only signal. */
 function prune(ctx) {
 	const exec = ctx.exec ?? realExec;
 	const now = ctx.now?.() ?? Date.now();
 	const changed = reconcile(ctx);
+	const lists = /* @__PURE__ */ new Map();
 	for (const rec of listAgents(ctx.store)) {
 		if (!isPrunable(rec)) continue;
-		const paneGone = rec.pane ? !PANE_ADAPTERS[rec.pane.mux].paneExists(exec, { id: rec.pane.id }) : false;
-		const stale = now - new Date(rec.lastSeen).getTime() > STALE_MS;
-		if (paneGone || stale) {
+		if (rec.pane ? paneGone(exec, rec.pane, lists) : now - new Date(rec.lastSeen).getTime() > STALE_MS) {
 			rec.status = "exited";
 			saveAgent(ctx.store, rec);
 			changed.push(rec);
@@ -1099,7 +1116,10 @@ function spawn(ctx, input) {
 			assertDistinctFromPrimary$1(opened.worktree.root, primaryRoot);
 			ensureMarker(join(opened.worktree.root, ".agents", "cyberlegion"));
 			cwd = opened.worktree.root;
-			worktree = opened.worktree;
+			worktree = {
+				...opened.worktree,
+				primaryRoot
+			};
 			target = opened.target;
 		} else {
 			const added = gitWorktreeAdapter$1.add(exec, {
@@ -1110,7 +1130,10 @@ function spawn(ctx, input) {
 			assertDistinctFromPrimary$1(added.root, primaryRoot);
 			ensureMarker(join(added.root, ".agents", "cyberlegion"));
 			cwd = added.root;
-			worktree = added;
+			worktree = {
+				...added,
+				primaryRoot
+			};
 			target = sessionAdapter.open(exec, {
 				cwd,
 				launch: launchLine(),
@@ -1577,12 +1600,18 @@ function decommission(ctx, input) {
 	const exec = ctx.exec ?? realExec;
 	const env = ctx.env ?? process.env;
 	const worktreeRoot = rec.worktree?.root;
-	const primaryRoot = worktreeRoot ? resolvePrimaryRoot$1(exec) : void 0;
-	if (worktreeRoot && resolve(worktreeRoot) === resolve(primaryRoot)) throw new Error(`refusing to decommission "${input.id}" — its worktree is the primary checkout; neither --force nor --keep-worktree overrides this`);
 	const worktreeExists = worktreeRoot != null && existsSync(worktreeRoot);
+	const primaryRoot = worktreeExists ? primaryRootOf(exec, worktreeRoot) : rec.worktree?.primaryRoot;
+	if (worktreeRoot && primaryRoot && resolve(worktreeRoot) === resolve(primaryRoot)) throw new Error(`refusing to decommission "${input.id}" — its worktree is the primary checkout; neither --force nor --keep-worktree overrides this`);
 	const removesWorktree = worktreeExists && !input.keepWorktree;
 	if (removesWorktree && !input.force && isDirty(exec, worktreeRoot)) throw new Error(`unit "${input.id}" has uncommitted changes in its worktree — pass --force to discard them`);
 	const pane = rec.pane?.id ?? ctx.store.findPaneByAgentId(input.id);
+	if (worktreeRoot && !worktreeExists && primaryRoot && existsSync(primaryRoot)) exec("git", [
+		"-C",
+		primaryRoot,
+		"worktree",
+		"prune"
+	]);
 	if (removesWorktree) try {
 		gitWorktreeAdapter$1.remove(exec, worktreeRoot, { primaryRoot });
 	} catch (err) {
@@ -1603,6 +1632,22 @@ function decommission(ctx, input) {
 	};
 }
 /**
+* The primary checkout of the repository `worktreeRoot` belongs to — `--git-common-dir` asked of the
+* worktree itself, so the answer does not depend on where the caller runs. Throws for a directory git
+* does not know: there is no repository to remove it from.
+*/
+function primaryRootOf(exec, worktreeRoot) {
+	const commonDir = exec("git", [
+		"-C",
+		worktreeRoot,
+		"rev-parse",
+		"--path-format=absolute",
+		"--git-common-dir"
+	]);
+	if (!commonDir) throw new Error(`cannot resolve the repository of worktree ${worktreeRoot} — git does not know it`);
+	return dirname(commonDir);
+}
+/**
 * Whether the worktree holds work a removal would discard. The marker `spawn` stamps into every
 * worktree it creates is cyberlegion's own file, not the unit's work: in a project that does not
 * track it, it shows as untracked in every spawned worktree, and counting it would make a plain close
@@ -1637,10 +1682,7 @@ const VENDORS = {
 	claude: {
 		file: ".claude/settings.json",
 		shape: "claude",
-		events: {
-			SessionStart: "SessionStart",
-			PostToolUse: "PostToolUse"
-		},
+		events: { SessionStart: "SessionStart" },
 		pluginHook: true
 	},
 	cursor: {
@@ -1652,13 +1694,11 @@ const VENDORS = {
 	codex: {
 		file: ".codex/hooks.json",
 		shape: "cursor",
-		events: {
-			SessionStart: "SessionStart",
-			PostToolUse: "PostToolUse"
-		},
+		events: { SessionStart: "SessionStart" },
 		pluginHook: true
 	}
 };
+const RETIRED_EVENTS = ["PostToolUse"];
 function readJson(file) {
 	if (!existsSync(file)) return {};
 	try {
@@ -1702,6 +1742,17 @@ function install(harness, projectDir = process.cwd(), pin) {
 			status
 		});
 	}
+	if (spec.pluginHook) for (const event of RETIRED_EVENTS) {
+		if (!(spec.shape === "claude" ? removeClaude(settings, event, event) : removeCursor(settings, event, event))) continue;
+		changed = true;
+		results.push({
+			harness,
+			event,
+			vendorEvent: event,
+			file,
+			status: "removed project hook"
+		});
+	}
 	if (changed) writeJson$1(file, settings);
 	return results;
 }
@@ -1716,12 +1767,10 @@ function upsertClaude(settings, event, command) {
 			return "already present";
 		}
 	}
-	const group = { hooks: [{
+	groups.push({ hooks: [{
 		type: "command",
 		command
-	}] };
-	if (event === "PostToolUse") group.matcher = "Write|Edit";
-	groups.push(group);
+	}] });
 	return "registered";
 }
 function upsertCursor(settings, event, command) {
@@ -1925,7 +1974,7 @@ function byPath(ctx, dir) {
 }
 //#endregion
 //#region src/runtime/inject-inbox.ts
-const EVENTS = ["SessionStart", "PostToolUse"];
+const EVENTS = ["SessionStart"];
 /**
 * Resolve the calling agent, gather its unread mail (and a standing owner's, when this session is
 * the hub's main pane), and return the SessionStart-style injection payload — or null when there is
@@ -1973,9 +2022,6 @@ function injectInbox(ctx, event) {
 			}
 		}
 	} catch {}
-	if (rec && !rec.spawnedBy) try {
-		if (cur ? !ctx.store.getMainPane() : !listAgents(ctx.store).some((a) => a.kind === "standing")) parts.push("## Legion setup\n\nThis pane has no owner inbox bound yet — run `cyberlegion init` to register the surfacing hook and bind this pane as the owner live presence.");
-	} catch {}
 	if (parts.length === 0) return null;
 	return { hookSpecificOutput: {
 		hookEventName: event,

package/hooks/hooks.json

@@ -9,17 +9,6 @@
 					}
 				]
 			}
-		],
-		"PostToolUse": [
-			{
-				"matcher": "Write|Edit",
-				"hooks": [
-					{
-						"type": "command",
-						"command": "node \"${CLAUDE_PLUGIN_ROOT}/bin/cyberlegion.mjs\" mail hook --event PostToolUse"
-					}
-				]
-			}
 		]
 	}
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cyberlegion",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Harness-agnostic agent session spawning and messaging over the filesystem",
   "keywords": [
     "agent",

package/plugin.json

@@ -1,7 +1,7 @@
 {
 	"$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
 	"name": "cyberlegion",
-	"version": "1.1.0",
+	"version": "1.2.0",
 	"description": "Agent session spawning, messaging, and dispatch — the Legion and its Legate.",
 	"author": {
 		"name": "unional"

package/skills/dispatch-governance/SKILL.md

@@ -17,7 +17,7 @@ satisfies verdict schema `V`.
 > **Running the CLI.** Every `node scripts/cyberlegion.mjs …` command below runs the `cyberlegion` CLI
 > this plugin ships. The path is relative to this skill's own directory, not the working directory.
 > If you cannot resolve it, run the published CLI of the version that shipped this skill instead,
-> with the same arguments: `npx -y cyberlegion@1.1.0`.
+> with the same arguments: `npx -y cyberlegion@1.2.0`.
 
 ## 1. Resolve the agent definition
 

package/skills/dispatch-governance/scripts/cyberlegion.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 
-const FALLBACK = 'npx -y cyberlegion@1.1.0'
+const FALLBACK = 'npx -y cyberlegion@1.2.0'
 const bin = new URL('../../../bin/cyberlegion.mjs', import.meta.url)
 
 if (existsSync(fileURLToPath(bin))) {

package/skills/init-cyberlegion/scripts/cyberlegion.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 
-const FALLBACK = 'npx -y cyberlegion@1.1.0'
+const FALLBACK = 'npx -y cyberlegion@1.2.0'
 const bin = new URL('../../../bin/cyberlegion.mjs', import.meta.url)
 
 if (existsSync(fileURLToPath(bin))) {

package/skills/legate/SKILL.md

@@ -13,7 +13,7 @@ logic, loads no other governance, and writes no state of its own.
 > **Running the CLI.** Every `node scripts/cyberlegion.mjs …` command below runs the `cyberlegion` CLI
 > this plugin ships. The path is relative to this skill's own directory, not the working directory.
 > If you cannot resolve it, run the published CLI of the version that shipped this skill instead,
-> with the same arguments: `npx -y cyberlegion@1.1.0`.
+> with the same arguments: `npx -y cyberlegion@1.2.0`.
 
 ## Doorbell vs mailbox
 

package/skills/legate/scripts/cyberlegion.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 
-const FALLBACK = 'npx -y cyberlegion@1.1.0'
+const FALLBACK = 'npx -y cyberlegion@1.2.0'
 const bin = new URL('../../../bin/cyberlegion.mjs', import.meta.url)
 
 if (existsSync(fileURLToPath(bin))) {

package/skills/manage-inbox/SKILL.md

@@ -13,7 +13,7 @@ the one owner mailbox from wherever they are.
 > **Running the CLI.** Every `node scripts/cyberlegion.mjs …` command below runs the `cyberlegion` CLI
 > this plugin ships. The path is relative to this skill's own directory, not the working directory.
 > If you cannot resolve it, run the published CLI of the version that shipped this skill instead,
-> with the same arguments: `npx -y cyberlegion@1.1.0`.
+> with the same arguments: `npx -y cyberlegion@1.2.0`.
 
 ## Resolve the owner handle
 

package/skills/manage-inbox/scripts/cyberlegion.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 
-const FALLBACK = 'npx -y cyberlegion@1.1.0'
+const FALLBACK = 'npx -y cyberlegion@1.2.0'
 const bin = new URL('../../../bin/cyberlegion.mjs', import.meta.url)
 
 if (existsSync(fileURLToPath(bin))) {

package/skills/relay-governance/SKILL.md

@@ -15,7 +15,7 @@ agent (`headless-legate`, `sdd-automaton`, the cold judges) to know how *it* rep
 > **Running the CLI.** Every `node scripts/cyberlegion.mjs …` command below runs the `cyberlegion` CLI
 > this plugin ships. The path is relative to this skill's own directory, not the working directory.
 > If you cannot resolve it, run the published CLI of the version that shipped this skill instead,
-> with the same arguments: `npx -y cyberlegion@1.1.0`.
+> with the same arguments: `npx -y cyberlegion@1.2.0`.
 
 ## The one probe: who, if anyone, collects my return?
 

package/skills/relay-governance/scripts/cyberlegion.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 
-const FALLBACK = 'npx -y cyberlegion@1.1.0'
+const FALLBACK = 'npx -y cyberlegion@1.2.0'
 const bin = new URL('../../../bin/cyberlegion.mjs', import.meta.url)
 
 if (existsSync(fileURLToPath(bin))) {

package/skills/subagent-backend-governance/SKILL.md

@@ -14,7 +14,7 @@ the unit's **role** — see *Mid-turn messaging is scoped by role*, below.
 > **Running the CLI.** Every `node scripts/cyberlegion.mjs …` command below runs the `cyberlegion` CLI
 > this plugin ships. The path is relative to this skill's own directory, not the working directory.
 > If you cannot resolve it, run the published CLI of the version that shipped this skill instead,
-> with the same arguments: `npx -y cyberlegion@1.1.0`.
+> with the same arguments: `npx -y cyberlegion@1.2.0`.
 
 ## 1. Resolve the agent def
 

package/skills/subagent-backend-governance/scripts/cyberlegion.mjs

@@ -11,7 +11,7 @@ import { spawnSync } from 'node:child_process'
 import { existsSync } from 'node:fs'
 import { fileURLToPath } from 'node:url'
 
-const FALLBACK = 'npx -y cyberlegion@1.1.0'
+const FALLBACK = 'npx -y cyberlegion@1.2.0'
 const bin = new URL('../../../bin/cyberlegion.mjs', import.meta.url)
 
 if (existsSync(fileURLToPath(bin))) {