🐛 fix(ipc): resolve socket path mismatch for CLI inside .app bundle

[0xbentang]

Fix: mori CLI IPC socket path mismatch

Problem

The mori CLI could not communicate with the running Mori.app. Commands like mori project list failed with:

Launching Mori.app…
Error: Mori.app launched but IPC socket not ready after 10s.

The IPC server was healthy (direct socket connection worked), but the CLI was looking for the socket in the wrong directory.

Root Cause

MoriPaths.isBundledApp relied on Bundle.main.bundlePath.hasSuffix(".app") to decide whether to use the production directory (~/Library/Application Support/Mori/) or the dev directory (~/Library/Application Support/Mori-Dev/).

This works for the main app executable (/Applications/Mori.app/Contents/MacOS/Mori), where Bundle.main.bundlePath correctly returns /Applications/Mori.app. But for the mori CLI binary at /Applications/Mori.app/Contents/MacOS/bin/mori, macOS sets Bundle.main.bundlePath to the directory containing the executable (.../Contents/MacOS/bin/), not the .app bundle root. Since that path does not end with .app, isBundledApp returned false, and the CLI resolved the socket to ~/Library/Application Support/Mori-Dev/mori.sock — which does not exist.

Fix

Restructured isBundledApp to also walk up the executable path (with symlinks resolved) looking for a .app ancestor directory. This correctly identifies both the main app and secondary executables (like the CLI) shipped inside the bundle, while still excluding dev builds in .build, .build-cli, and DerivedData.

Changes

• MoriIPC/MoriPaths.swift — Rewrote isBundledApp to check executable path ancestors in addition to Bundle.main.bundlePath. Extracted isInAppBundle(_:) and isInBuildDirectory(_:) as internal helpers.
• MoriIPCTests/main.swift — Added 14 assertions covering isInAppBundle, isInBuildDirectory, env-var overrides, and the bug scenario (CLI at Contents/MacOS/bin/mori).

Testing

mise run test     # All 1,115 assertions pass (76 IPC, 678 Core, 249 Tmux, 64 Persistence, 48 Keybindings)

[vaayne]

Looks good. I verified the bundle-path root cause, checked the updated MoriPaths detection logic, and ran mise run test:ipc locally. The fix correctly handles secondary executables inside Mori.app while preserving dev-build exclusion behavior.