fix: carry config.json into worktrees, anchor the routine-health reader, and stop the worktree copy capturing the fleet resolvers

[gtapps]

Summary

Two cwd/worktree correctness fixes in core, plus a fleet-wide resolver guard the first fix turned out to require.

The worktree state-dir template shipped only OPERATOR.md and compiled/, so a worktree session got a state dir the dev hermit could not read: /dev-pr hard-failed Gate 0 and told the operator to re-run /claude-code-dev-hermit:hatch — the wrong diagnosis, since the hatch was fine and commands.pr_create simply was not in the copy, while /dev-quality silently skipped its test step. Gate 0 is a skill-level Read .claude-code-hermit/config.json relative to cwd, so the file genuinely has to be present in the worktree.

Separately, routines.ts health resolved a relative hermit-dir argv against the process cwd while both documented callers (reflect, hermit-evolution) pass the relative .claude-code-hermit. Any earlier cd turned a real ledger into source: missing, which both skills read as "no candidates" — a silent skip rather than a visible failure.

The two halves fought each other — third commit fixes that

config.json is also the state-dir resolver sentinel, so copying it into a worktree made the projected copy resolve as its own hermit root. Reproduced live from a worktree session: routines.ts health .claude-code-hermit returned source: missing; moving the projected config.json aside returned source: ok. That is the same silent skip the routine-health half of this branch fixes, reintroduced for every worktree session. Bash-tool-invoked scripts carry no CLAUDE_PROJECT_DIR (verified in this environment), so the walk-up is the live path there.

A projection is identified as the sentinel without state/, which .worktreeinclude never copies. All three state-dir resolvers now walk past it to the main checkout:

• core cc-compat.ts hermitDir()/findHermitDir()
• dev find-hermit-dir.ts (both the env branch and the walk)
• HA config.ts projectRoot()

Both halves then hold at once: the skill still Reads config.json at the relative path, and ledgers stay main-rooted. The discriminator stays true because no resolver returns a projection, so nothing ever mkdirs state/ inside one — dev's record-test-result writer resolves through the same function. This also closes the pre-existing case where an ambient CLAUDE_PROJECT_DIR naming the worktree anchored hook-driven writers to the partial copy.

feed-hermit's projectRoot keeps the walk without the skip, now documented in-place: it resolves which project the session is in so it can read tracked feed-sources.md at the root, where the worktree's branch copy is the correct answer, not main's. Different intent, same walk — flagged so nobody "aligns" it later.

Changes

• state-templates/WORKTREEINCLUDE-APPEND.txt — add .claude-code-hermit/config.json; hatch/SKILL.md describes the block accordingly. No .gitignore change needed.
• scripts/lib/routines/health.ts — an absolute argv is honoured verbatim; relative or absent anchors through resolveHermitDir(), matching weekly-review.ts:20.
• cc-compat.ts, find-hermit-dir.ts, HA config.ts — isWorktreeProjection() guard; stale comments in pinnedRoot() and dev's INVARIANT block corrected (both described the pre-config.json decoy behavior).
• CHANGELOGs — core, dev, and HA each get a Fixed bullet; core keeps the idempotent ### Upgrade Instructions step for hermit-evolve. The dev bullet notes the version coupling: a dev plugin without the guard, paired with a core that ships the copy, would read an empty config in worktrees and drop operator protected_branches.
• Tests — template contract; cwd-drift regressions; projection-skip cases in core (findHermitDir walk + CLAUDE_PROJECT_DIR branch) and dev (git-push-guard walk-up + env); fixtures across core/dev updated to include state/ so they model a real root.

Test plan

• core bun test → 3790 pass, 0 fail · dev run-all.sh → 75 pass · HA bun test → 677 pass · fitness 129 · scribe 8 · feed 60 · forge 13
• bunx tsc --noEmit from the repo root → exit 0
• Red-first / mutation-checked: the template-contract and drift cases each failed against unfixed code; the four new projection-skip tests were confirmed red by stubbing isWorktreeProjection() to false in core and dev.
• Live end-to-end: routines.ts health .claude-code-hermit from this worktree now returns source: ok with the projected config.json in place.

Follow-up (not in this PR)

The absolute-or-anchor ternary now exists three times — weekly-review.ts:20, reflect-precheck.ts:261, and health.ts. Worth extracting a shared resolveHermitArg() into cc-compat.ts, but that means migrating all three call sites, which does not belong in a bug fix.