@mutmutco/claude-plugin 4.5.227 → 4.5.229

package/cli/dist/main.cjs

@@ -982,12 +982,14 @@ function roleFromToken(token) {
 function readCache(path2, apiUrl, now, githubTokenFingerprint) {
   try {
     const session = JSON.parse((0, import_node_fs3.readFileSync)(path2, "utf8"));
-    if (!session.token || !session.expiresAt || session.apiUrl !== apiUrl) return null;
-    if (session.githubTokenFingerprint !== githubTokenFingerprint) return null;
-    if (new Date(session.expiresAt).getTime() <= now.getTime() + REFRESH_WINDOW_MS) return null;
-    return { ...session, role: roleFromToken(session.token) };
+    if (!session.token || !session.expiresAt || session.apiUrl !== apiUrl) return { session: null, stale: false };
+    if (session.githubTokenFingerprint !== githubTokenFingerprint) {
+      return { session: null, stale: true, staleLogin: typeof session.login === "string" ? session.login : void 0 };
+    }
+    if (new Date(session.expiresAt).getTime() <= now.getTime() + REFRESH_WINDOW_MS) return { session: null, stale: false };
+    return { session: { ...session, role: roleFromToken(session.token) }, stale: false };
   } catch {
-    return null;
+    return { session: null, stale: false };
   }
 }
 function writeCache(path2, session) {
@@ -1004,53 +1006,115 @@ function writeCache(path2, session) {
   } catch {
   }
 }
-async function hubAuthSession(deps) {
-  if (!deps.baseUrl) return void 0;
+function lastHubAuthFailure() {
+  return lastFailure;
+}
+function hubAuthFailureMessage(input) {
+  const r = input.refusal;
+  const said = r ? [
+    r.error ? `Hub error: ${r.error}` : `Hub error: HTTP ${r.status ?? "unknown"}`,
+    r.reason ? `reason: ${r.reason}` : "",
+    r.hint ? `hint: ${r.hint}` : ""
+  ].filter(Boolean).join(" ") : "";
+  if (input.kind === "stale-session") {
+    return `cached Hub session is stale: it was minted from a different GitHub token${input.staleLogin ? ` (cached login ${input.staleLogin})` : ""}, and the automatic re-mint was refused${said ? ` \u2014 ${said}` : ""}. Re-authenticate so ONE token source feeds both the cache and the mint (\`gh auth login\` / \`gh auth switch\`, or unset \`MMI_GH_PAT\` so the shell falls back to the gh keyring), then retry; \`mmi-cli whoami\` confirms the identity.`;
+  }
+  if (input.kind === "refused") {
+    return `Hub refused this GitHub token for a Hub session${said ? ` \u2014 ${said}` : ""} (${MEMBERSHIP_FIX}).`;
+  }
+  return `Hub session exchange failed: ${(input.transient ?? said) || "no answer from the Hub"} \u2014 the Hub is unreachable or cold-started; retry, and \`mmi-cli doctor\` reports Hub reachability.`;
+}
+async function hubAuthSessionOutcome(deps) {
+  if (!deps.baseUrl) return {};
   const apiUrl = normalizeBaseUrl(deps.baseUrl);
   const envToken = process.env.MMI_HUB_TOKEN;
   if (envToken) {
-    return { ...{ token: envToken }, expiresAt: new Date(Date.now() + 30 * 60 * 1e3).toISOString(), apiUrl, githubTokenFingerprint: "env-override" };
+    lastFailure = void 0;
+    return { session: { ...{ token: envToken }, expiresAt: new Date(Date.now() + 30 * 60 * 1e3).toISOString(), apiUrl, githubTokenFingerprint: "env-override" } };
   }
   const now = deps.now?.() ?? /* @__PURE__ */ new Date();
   const cachePath = deps.cachePath ?? defaultHubSessionCachePath();
   const ghToken = await deps.githubToken();
-  if (!ghToken) return void 0;
-  const githubTokenFingerprint = tokenFingerprint(ghToken);
-  const cached = readCache(cachePath, apiUrl, now, githubTokenFingerprint);
-  if (cached) return cached;
-  try {
-    const res = await fetchWithRetry(
-      deps.fetch ?? fetch,
-      `${apiUrl}/auth/session`,
-      { method: "POST", headers: { ...clientVersionHeaders(), Authorization: `Bearer ${ghToken}` } },
-      { attempts: EXCHANGE_ATTEMPTS, timeoutMs: EXCHANGE_TIMEOUT_MS }
-    );
-    if (!res.ok) return void 0;
-    const body = await res.json();
-    if (!body.token || !body.expiresAt) return void 0;
-    const session = {
-      token: body.token,
-      expiresAt: body.expiresAt,
-      login: typeof body.login === "string" ? body.login : void 0,
-      // #3513: from the SIGNED token, not the response body — one rule at every hop, so the cache
-      // read and the network read cannot disagree about what counts as an assertion.
-      role: roleFromToken(body.token),
-      apiUrl,
-      githubTokenFingerprint
+  if (!ghToken) {
+    lastFailure = {
+      kind: "unreachable",
+      message: "no GitHub token available for a Hub session \u2014 `gh auth login` (or set MMI_GH_PAT/GH_TOKEN), then retry."
     };
+    return { failure: lastFailure };
+  }
+  const githubTokenFingerprint = tokenFingerprint(ghToken);
+  const cache = readCache(cachePath, apiUrl, now, githubTokenFingerprint);
+  if (cache.session) {
+    lastFailure = void 0;
+    return { session: cache.session };
+  }
+  return mintSession(deps, cachePath, apiUrl, ghToken, githubTokenFingerprint, cache);
+}
+async function mintSession(deps, cachePath, apiUrl, ghToken, githubTokenFingerprint, cache) {
+  const attempts = cache.stale ? 2 : 1;
+  let refusal;
+  let transient;
+  for (let attempt = 0; attempt < attempts; attempt += 1) {
     try {
-      writeCache(cachePath, session);
-    } catch {
+      const res = await fetchWithRetry(
+        deps.fetch ?? fetch,
+        `${apiUrl}/auth/session`,
+        { method: "POST", headers: { ...clientVersionHeaders(), Authorization: `Bearer ${ghToken}` } },
+        { attempts: EXCHANGE_ATTEMPTS, timeoutMs: EXCHANGE_TIMEOUT_MS }
+      );
+      if (!res.ok) {
+        const body2 = await res.json().catch(() => ({}));
+        refusal = {
+          status: res.status,
+          error: typeof body2.error === "string" ? body2.error : void 0,
+          reason: typeof body2.reason === "string" ? body2.reason : void 0,
+          hint: typeof body2.hint === "string" ? body2.hint : void 0
+        };
+        continue;
+      }
+      const body = await res.json();
+      if (!body.token || !body.expiresAt) {
+        refusal = { status: res.status, error: "the Hub returned no session token" };
+        continue;
+      }
+      const session = {
+        token: body.token,
+        expiresAt: body.expiresAt,
+        login: typeof body.login === "string" ? body.login : void 0,
+        // #3513: from the SIGNED token, not the response body — one rule at every hop, so the cache
+        // read and the network read cannot disagree about what counts as an assertion.
+        role: roleFromToken(body.token),
+        apiUrl,
+        githubTokenFingerprint
+      };
+      try {
+        writeCache(cachePath, session);
+      } catch {
+      }
+      lastFailure = void 0;
+      return { session };
+    } catch (e) {
+      transient = e?.message || "network error";
     }
-    return session;
-  } catch {
-    return void 0;
   }
+  const kind = cache.stale ? "stale-session" : refusal ? "refused" : "unreachable";
+  const failure = {
+    kind,
+    message: hubAuthFailureMessage({ kind, staleLogin: cache.staleLogin, refusal, transient }),
+    ...refusal?.reason ? { reason: refusal.reason } : {},
+    ...refusal?.hint ? { hint: refusal.hint } : {},
+    ...kind === "stale-session" ? { exitCode: EXIT_HUB_SESSION_STALE } : kind === "refused" ? { exitCode: EXIT_HUB_SESSION_REFUSED } : {}
+  };
+  lastFailure = failure;
+  return { failure };
+}
+async function hubAuthSession(deps) {
+  return (await hubAuthSessionOutcome(deps)).session;
 }
 async function hubAuthToken(deps) {
   return (await hubAuthSession(deps))?.token;
 }
-var import_node_crypto, import_node_fs3, import_node_path3, import_node_os2, REFRESH_WINDOW_MS, EXCHANGE_TIMEOUT_MS, EXCHANGE_ATTEMPTS;
+var import_node_crypto, import_node_fs3, import_node_path3, import_node_os2, REFRESH_WINDOW_MS, EXCHANGE_TIMEOUT_MS, EXCHANGE_ATTEMPTS, EXIT_HUB_SESSION_STALE, EXIT_HUB_SESSION_REFUSED, lastFailure, MEMBERSHIP_FIX;
 var init_hub_auth = __esm({
   "src/hub-auth.ts"() {
     "use strict";
@@ -1063,6 +1127,9 @@ var init_hub_auth = __esm({
     REFRESH_WINDOW_MS = 10 * 60 * 1e3;
     EXCHANGE_TIMEOUT_MS = 8e3;
     EXCHANGE_ATTEMPTS = 2;
+    EXIT_HUB_SESSION_STALE = 76;
+    EXIT_HUB_SESSION_REFUSED = 77;
+    MEMBERSHIP_FIX = "the token needs Organization \u2192 Members: read (`read:org`) \u2014 use a classic PAT or an App carrying that permission, or `gh auth switch` to a login that has it; then `mmi-cli whoami` confirms the identity";
   }
 });
 
@@ -9359,12 +9426,22 @@ var isWin = process.platform === "win32";
 var MMI_PLUGIN_ID = "mmi@mutmutco";
 var LEGACY_MMI_MARKETPLACE = "mmi";
 var CODEX_MARKETPLACE = "mutmutco";
-function detectSurface(env) {
+function insideOpenBotAgentWorkspace(cwd, env = process.env, home = (0, import_node_os4.homedir)()) {
+  let dir = cwd;
+  try {
+    dir ??= process.cwd();
+  } catch {
+    return false;
+  }
+  const rel = (0, import_node_path4.relative)(openbotAgentsRoot(env, home), dir);
+  return !(0, import_node_path4.isAbsolute)(rel) && (rel.split(/[\\/]/)[0] ?? "").toLowerCase().startsWith("agent-");
+}
+function detectSurface(env, cwd) {
   const has = (k) => Boolean(env[k]?.trim());
+  if (env.MMI_AGENT_SURFACE === "openbot" || insideOpenBotAgentWorkspace(cwd, env)) return "openbot";
   if (env.MMI_AGENT_SURFACE === "codex" || has("CODEX_THREAD_ID") || has("CODEX_MANAGED_BY_NPM") || has("CODEX_MANAGED_PACKAGE_ROOT") || (env.CLAUDE_PLUGIN_ROOT ?? "").includes(".codex")) {
     return "codex";
   }
-  if (env.MMI_AGENT_SURFACE === "hermes" || has("HERMES_SESSION_ID") || has("HERMES_PLUGIN_ROOT")) return "hermes";
   if (env.MMI_AGENT_SURFACE === "jervcode" || has("PI_SESSION_ID")) {
     return "jervcode";
   }
@@ -9384,8 +9461,8 @@ function surfaceToken(surface) {
       return "codex";
     case "jervcode":
       return "jervcode";
-    case "hermes":
-      return "hermes";
+    case "openbot":
+      return "openbot";
     case "opencode":
       return "opencode";
     case "shell":
@@ -9403,8 +9480,8 @@ function reloadAction(surface) {
       return "restart OpenCode";
     case "jervcode":
       return "restart JervCode (the package set is read at launch)";
-    case "hermes":
-      return "start a fresh Hermes Agent process";
+    case "openbot":
+      return "start a fresh OpenBot agent run";
     case "claude-cli":
     case "shell":
     default:
@@ -9444,7 +9521,7 @@ function nonClaudeSurfaceHealMessage(surface) {
   if (surface === "codex") {
     return "Codex ships an MMI plugin (#3563). Install or repair it with:\n  codex plugin marketplace add mutmutco/MMI-Hub && codex plugin add mmi@mutmutco\n  Update the CLI too: npm i -g @mutmutco/cli";
   }
-  return "No Hub-shipped MMI plugin on this host \u2014 the Hub ships plugins for Claude, Codex, JervCode, and Hermes only.\n  Update the CLI instead: npm i -g @mutmutco/cli   (org rules ride an AGENTS.md authored outside the Hub)";
+  return "No Hub-shipped MMI plugin on this host \u2014 the Hub ships plugins for Claude, Codex, JervCode, and OpenBot only.\n  Update the CLI instead: npm i -g @mutmutco/cli   (org rules ride an AGENTS.md authored outside the Hub)";
 }
 function healStepAborts(step, ok) {
   return !ok && step.gated;
@@ -9487,14 +9564,20 @@ function runHostBin(bin, args, opts) {
   const argv = isWin ? ["/c", bin, ...args] : args;
   return step ? execFileHard(file, argv, { ...shared, step }) : execFileP(file, argv, shared);
 }
-function hermesConfigRoot(env = process.env, home = (0, import_node_os4.homedir)(), platform2 = process.platform) {
-  if (env.HERMES_HOME?.trim()) return env.HERMES_HOME.trim();
-  if (platform2 === "win32") return (0, import_node_path4.join)(env.LOCALAPPDATA?.trim() || (0, import_node_path4.join)(home, "AppData", "Local"), "hermes");
-  return (0, import_node_path4.join)(home, ".hermes");
+function openbotAgentsRoot(env = process.env, home = (0, import_node_os4.homedir)()) {
+  return env.MMI_UPDATER_OPENBOT_AGENTS_DIR?.trim() || (0, import_node_path4.join)(home, "OpenBot", "Agents");
+}
+function openbotAgentWorkspaces(env = process.env, home = (0, import_node_os4.homedir)()) {
+  const root = openbotAgentsRoot(env, home);
+  try {
+    return (0, import_node_fs7.readdirSync)(root, { withFileTypes: true }).filter((entry) => entry.isDirectory() && entry.name.startsWith("agent-")).map((entry) => (0, import_node_path4.join)(root, entry.name)).sort();
+  } catch {
+    return [];
+  }
 }
 function surfaceConfigRoot(surface, env = process.env, home = (0, import_node_os4.homedir)()) {
   if (surface === "codex") return env.CODEX_HOME?.trim() || (0, import_node_path4.join)(home, ".codex");
-  if (surface === "hermes") return hermesConfigRoot(env, home);
+  if (surface === "openbot") return openbotAgentsRoot(env, home);
   if (surface === "jervcode") {
     return env.JERVCODE_CODING_AGENT_DIR?.trim() || env.PI_CODING_AGENT_DIR?.trim() || (0, import_node_path4.join)(home, ".jerv", "agent");
   }
@@ -9518,7 +9601,7 @@ function marketplaceCloneCandidates(surface, home, env = process.env) {
       (0, import_node_path4.join)(root, "plugins", "marketplaces", CODEX_MARKETPLACE)
     ];
   }
-  if (surface === "hermes") return [];
+  if (surface === "openbot") return [];
   if (surface === "jervcode") return [];
   return [(0, import_node_path4.join)(home, ".claude", "plugins", "marketplaces", "mutmutco")];
 }
@@ -9628,13 +9711,26 @@ function mmiPiPackageHealthy(env = process.env, home = (0, import_node_os4.homed
 function piDoctorEnv(agentDir) {
   return { ...process.env, PI_CODING_AGENT_DIR: agentDir };
 }
-function hermesPluginRoot(env = process.env, home = (0, import_node_os4.homedir)()) {
-  return (0, import_node_path4.join)(hermesConfigRoot(env, home), "plugins", "mmi");
+function openbotManagedRecord(env = process.env, home = (0, import_node_os4.homedir)()) {
+  for (const workspace of openbotAgentWorkspaces(env, home)) {
+    const path2 = (0, import_node_path4.join)(workspace, ".agents", "skills", ".mmi-managed.json");
+    if (!(0, import_node_fs7.existsSync)(path2)) continue;
+    try {
+      const record2 = JSON.parse((0, import_node_fs7.readFileSync)(path2, "utf8"));
+      return { workspace, ...typeof record2.version === "string" ? { version: record2.version } : {} };
+    } catch {
+      return { workspace };
+    }
+  }
+  return null;
 }
-function hermesPluginTreeHealthy(root, exists = import_node_fs7.existsSync) {
-  if (!["plugin.yaml", "__init__.py"].every((file) => exists((0, import_node_path4.join)(root, file)))) return false;
+function openbotWorkspaceSkillsHealthy(env = process.env, home = (0, import_node_os4.homedir)()) {
+  const record2 = openbotManagedRecord(env, home);
+  if (!record2) return false;
   try {
-    return (0, import_node_fs7.statSync)((0, import_node_path4.join)(root, "skills")).isDirectory();
+    const recordFile = JSON.parse((0, import_node_fs7.readFileSync)((0, import_node_path4.join)(record2.workspace, ".agents", "skills", ".mmi-managed.json"), "utf8"));
+    const owned = Array.isArray(recordFile.skills) ? recordFile.skills : [];
+    return owned.length > 0 && owned.every((name) => typeof name === "string" && (0, import_node_fs7.existsSync)((0, import_node_path4.join)(record2.workspace, ".agents", "skills", name, "SKILL.md")));
   } catch {
     return false;
   }
@@ -9649,10 +9745,11 @@ function snapshotPluginGuardInput(surface = detectSurface(process.env), isOrgRep
     // Codex's native projection is authoritative; its legacy installed_plugins.json may be empty
     // while `plugin list --json` proves the managed plugin installed (#6111).
     installRecordPresent: surface === "codex" ? codexStatus?.installed === true : hasUserInstallRecord(installed, MMI_PLUGIN_ID) || hasProjectInstallRecord(installed, MMI_PLUGIN_ID, process.cwd()) || // #4188: jervcode's install record is the settings-file packages[] entry itself.
-    surface === "jervcode" && piEntry !== null || surface === "hermes" && (0, import_node_fs7.existsSync)(hermesPluginRoot()),
+    surface === "jervcode" && piEntry !== null || // #9130: OpenBot's install record is the workspace ownership file MMI itself writes.
+    surface === "openbot" && openbotManagedRecord() !== null,
     // JervCode's settings entry and native local surfaces have no marketplace clone.
-    marketplaceClonePresent: surface === "jervcode" || surface === "hermes" ? true : marketplaceClonePresent(surface, (0, import_node_os4.homedir)()),
-    pluginCachePresent: surface === "jervcode" ? mmiPiPackageHealthy() : surface === "hermes" ? hermesPluginTreeHealthy(hermesPluginRoot()) : surface === "codex" ? Boolean(
+    marketplaceClonePresent: surface === "jervcode" || surface === "openbot" ? true : marketplaceClonePresent(surface, (0, import_node_os4.homedir)()),
+    pluginCachePresent: surface === "jervcode" ? mmiPiPackageHealthy() : surface === "openbot" ? openbotWorkspaceSkillsHealthy() : surface === "codex" ? Boolean(
       codexStatus?.installed && codexStatus.enabled && codexStatus.version && (0, import_node_fs7.existsSync)((0, import_node_path4.join)(root, "plugins", "cache", CODEX_MARKETPLACE, "mmi", codexStatus.version))
     ) : (0, import_node_fs7.existsSync)((0, import_node_path4.join)(root, "plugins", "cache", "mutmutco", "mmi"))
   };
@@ -9951,7 +10048,6 @@ var SESSION_ID_ENV_VARS = [
   "CLAUDE_CODE_SESSION_ID",
   "CODEX_SESSION_ID",
   "CODEX_THREAD_ID",
-  "HERMES_SESSION_ID",
   "PI_SESSION_ID",
   // #6193: lane runners spawn the CLI through the host's extension shell operations, which strip
   // the PI_* session variables; the JervCode launcher's durable lane id (JERV_SESSION_ID) is what
@@ -9960,6 +10056,9 @@ var SESSION_ID_ENV_VARS = [
   // synth/shell identity and the claim guard contests the caller's OWN lane (the #3414/#3438
   // refusals of jerv_worktree_land's `devops pr create` from the claimed task worktree).
   "JERV_SESSION_ID"
+  // #9130: OpenBot exports no session variable of its own (its surface comes from the agent-workspace
+  // cwd). Merv's codex runtime carries CODEX_THREAD_ID, honoured above; otherwise an OpenBot claim's
+  // session is the per-process `synth-openbot-…` fallback — it proves the surface, never one lane.
 ];
 var SYNTH_SESSION_PREFIX = "synth-";
 function isHostSessionId(session) {
@@ -13373,7 +13472,7 @@ function useColor() {
 var program = new Command();
 
 // src/command-composition.ts
-var import_node_fs60 = require("node:fs");
+var import_node_fs61 = require("node:fs");
 init_clean_exit();
 init_cli_shared();
 
@@ -18738,6 +18837,7 @@ function shouldWithdrawSurfaceFlag(result) {
 
 // src/secrets-transport.ts
 init_client_version();
+init_hub_auth();
 var OWNER = "mutmutco";
 var SSM_ROOT = "/mmi-future";
 var ORG_INFRA_SLUG = "_org";
@@ -18899,6 +18999,17 @@ function errorDetail(body) {
   const error = typeof body.error === "string" ? body.error : "";
   return error ? `: ${error}` : "";
 }
+function hubAuthErrorDetail(body) {
+  const parts = [errorDetail(body)];
+  if (safeServerReason(body.reason)) parts.push(` (reason: ${String(body.reason)})`);
+  if (safeServerReason(body.hint)) parts.push(` \u2014 ${String(body.hint)}`);
+  return parts.join("");
+}
+function refusedLine(prefix, res, body) {
+  const local = lastHubAuthFailure();
+  if (res.status === 401 && local) return local.message;
+  return `${prefix}: HTTP ${res.status}${hubAuthErrorDetail(body)}`;
+}
 async function upgradeMessage(res, body) {
   if (res.status !== 426) return null;
   return upgradeRequiredError(res, body ?? await readJsonBody(res));
@@ -18947,7 +19058,7 @@ async function secretsList(deps, opts) {
     return;
   }
   if (!res.ok) {
-    deps.err(await upgradeMessage(res) ?? `secrets list failed: HTTP ${res.status}${await readErr(res)}`);
+    deps.err(await upgradeMessage(res) ?? refusedLine("secrets list failed", res, await readJsonBody(res)));
     return;
   }
   const { secrets } = await res.json();
@@ -19332,6 +19443,10 @@ function missingRequiredKeys(stage, required, present, declaredSecrets) {
 }
 async function secretsPreflight(deps, opts) {
   const repo = await targetRepo(deps, opts);
+  if (opts.required.length === 0 && !opts.json) {
+    deps.log(`0 required ${opts.stage} secret names`);
+    return true;
+  }
   const qs = new URLSearchParams({ repo }).toString();
   let res;
   try {
@@ -20268,7 +20383,7 @@ async function secretsRequest(deps, key, opts) {
   });
   const body = await readJsonBody(res);
   if (!res.ok) {
-    deps.err(await upgradeMessage(res, body) ?? `secrets request failed: HTTP ${res.status}${errorDetail(body)}`);
+    deps.err(await upgradeMessage(res, body) ?? refusedLine("secrets request failed", res, body));
     return false;
   }
   if (opts.json) {
@@ -20965,7 +21080,7 @@ async function fetchSecretForUse(deps, { repo, key, slug }) {
       return null;
     }
     deps.err(
-      await upgradeMessage(res, body) ?? (res.status === 403 ? `secrets use: not authorized for ${key} (HTTP 403) \u2014 ask the master for a \`secrets grant\`${errorDetail(body)}` : `secrets use failed: HTTP ${res.status}${errorDetail(body)}`)
+      await upgradeMessage(res, body) ?? (res.status === 403 ? `secrets use: not authorized for ${key} (HTTP 403) \u2014 ask the master for a \`secrets grant\`${errorDetail(body)}` : refusedLine("secrets use failed", res, body))
     );
     return null;
   }
@@ -24973,6 +25088,7 @@ function createDocsIndexDeps(repoRoot2) {
 // src/gate-budget.ts
 var BLESSED_RUN_WITH_BUDGET_SHA = "5ce541add569e54e7ca96de67a768577d3d604e4";
 var BLESSED_RUNNER_GATE_SHA = "a19e9392e5ad9b0675f02e4304d68dd933fad60f";
+var BLESSED_KIT_AGENT_FILES_SHA = "a8b273ed418e703c0aa501a53ea87228ba28b1f0";
 var BLESSED_RUNBOOK_GUARD_SHA = "e661e0aedc0e58b73c738bf6cdfeac65e5914584";
 var REMOTE_USE = /^mutmutco\/MMI-Hub\/\.github\/actions\/run-with-budget@(\S+)$/;
 var LOCAL_USE = "./.github/actions/run-with-budget";
@@ -25348,6 +25464,9 @@ function gateSeedVars(cls, releaseTrack, runtime = "node", requiredCheckBranches
     // The pin is the CLI's blessed SHA, not an operator knob — one central place to bump (#3178).
     GATE_BUDGET_SHA: BLESSED_RUN_WITH_BUDGET_SHA,
     GATE_RUNNER_SHA: BLESSED_RUNNER_GATE_SHA,
+    // #9161: the suite-only kit-file drift action arrived after the shared runner pin, so it carries its own
+    // blessed revision — bumping GATE_RUNNER_SHA for it would move every generic repo's toolchain too.
+    KIT_AGENT_FILES_SHA: BLESSED_KIT_AGENT_FILES_SHA,
     // #8129: the guard and its bundled CLI must come from the same immutable Hub revision.
     GATE_RUNBOOK_SHA: BLESSED_RUNBOOK_GUARD_SHA,
     // #7407: repo-declared service containers and extra check steps; empty renders today's gate byte-for-byte.
@@ -27091,10 +27210,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.227",
-    tag: "v4.5.227",
-    commit: "9498ff4da322",
-    npm: "@mutmutco/cli@4.5.227"
+    version: "4.5.229",
+    tag: "v4.5.229",
+    commit: "15792605c6d9",
+    npm: "@mutmutco/cli@4.5.229"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -27111,14 +27230,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.227"
+          v3Target: "v4.5.229"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.227 and redeploy the Hub Lambda from tag v4.5.227 (9498ff4da322); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.227 (@mutmutco/cli@4.5.227, tag commit 9498ff4da322 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.229 and redeploy the Hub Lambda from tag v4.5.229 (15792605c6d9); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.229 (@mutmutco/cli@4.5.229, tag commit 15792605c6d9 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -29275,7 +29394,8 @@ async function buildTrainApplyContext(deps) {
     repo,
     owner,
     slug: name.toLowerCase(),
-    login
+    login,
+    ...verdict.authenticatedDelegation === true ? { delegatedActor: login } : {}
   };
 }
 function commandAuthorityLabel(owner) {
@@ -31664,7 +31784,7 @@ function renderTenantControl(r) {
 }
 
 // src/train-apply-phases.ts
-var import_node_fs30 = require("node:fs");
+var import_node_fs31 = require("node:fs");
 var import_promises4 = require("node:fs/promises");
 var import_node_path28 = require("node:path");
 
@@ -31972,6 +32092,71 @@ Resume it:  ${resumeCommand}
   );
 }
 
+// src/train-apply-pretag-hook.ts
+var import_node_fs25 = require("node:fs");
+var PRETAG_SCRIPT = "release:pretag";
+var PRETAG_TAIL_LINES = 40;
+function declaredScripts() {
+  try {
+    const parsed = JSON.parse((0, import_node_fs25.readFileSync)("package.json", "utf8"));
+    return parsed.scripts ?? {};
+  } catch {
+    return null;
+  }
+}
+function outputTail(error) {
+  const e = error;
+  const streams = [e?.stdout, e?.stderr].filter((s) => typeof s === "string" && s.trim() !== "");
+  const text = streams.length > 0 ? streams.join("\n") : error instanceof Error ? error.message : String(error);
+  const lines2 = text.replace(/\r\n/g, "\n").trimEnd().split("\n");
+  return lines2.slice(-PRETAG_TAIL_LINES).join("\n");
+}
+function porcelainPaths(output) {
+  return output.split("\n").map((line) => line.trimEnd()).filter(Boolean).map((line) => line.slice(3).trim().replace(/^"|"$/g, "").replaceAll("\\", "/"));
+}
+async function runPreTagHook(deps, input) {
+  const command = `npm run ${PRETAG_SCRIPT}`;
+  const shortSha = input.releaseSha.slice(0, 12);
+  const scripts = declaredScripts();
+  if (!scripts || !String(scripts[PRETAG_SCRIPT] ?? "").trim()) {
+    const note = `no \`${PRETAG_SCRIPT}\` script in the repo's package.json: this release's refusable checks run only in CI, AFTER the tag is pushed \u2014 a late failure then leaves a public tag (and Release) on a version that never shipped (#9189). Declare "${PRETAG_SCRIPT}": "<the checks your publish/Release has refused before>" so the train can refuse before anything reaches origin.`;
+    deps.warn?.(`Release: ${note}`);
+    return { status: "missing", command, note };
+  }
+  const headBefore = clean2(await deps.run("git", ["rev-parse", "HEAD"]));
+  if (headBefore !== input.releaseSha) {
+    throw new Error(
+      `pre-tag checks refused: the checkout is on ${headBefore.slice(0, 12)}, not the folded release commit ${shortSha} \u2014 \`${command}\` must prove the exact commit the tag would make immutable (#9189). Nothing was tagged, main was not pushed and no GitHub Release exists.`
+    );
+  }
+  deps.warn?.(`Release: Running the repo's pre-tag checks (${command})`);
+  try {
+    await deps.run("npm", ["run", PRETAG_SCRIPT]);
+  } catch (e) {
+    throw new Error(
+      `pre-tag checks refused: \`${command}\` failed on the folded release commit ${shortSha} \u2014 nothing was tagged, main was not pushed and no GitHub Release exists (#9189).
+
+--- ${command} output (tail) ---
+${outputTail(e)}
+--- end of ${command} output ---
+Remedy: fix the failing check in the release fold (or in the repo) and rerun the release. Never tag around it \u2014 the same check runs again on the v* tag, after the tag is public and un-removable without deleting a release.`
+    );
+  }
+  const headAfter = clean2(await deps.run("git", ["rev-parse", "HEAD"]));
+  if (headAfter !== input.releaseSha) {
+    throw new Error(
+      `pre-tag checks refused: \`${command}\` moved the checkout to ${headAfter.slice(0, 12)} (the release commit is ${shortSha}) \u2014 the hook must VERIFY the committed release bytes, never commit or check out. Anything it changed would ship unverified (#9189). Nothing was tagged, main was not pushed and no GitHub Release exists.`
+    );
+  }
+  const dirty = porcelainPaths(await deps.run("git", ["status", "--porcelain=v1", "--untracked-files=no"]));
+  if (dirty.length > 0) {
+    throw new Error(
+      `pre-tag checks refused: \`${command}\` modified tracked file(s) in the release checkout \u2014 ${dirty.join(", ")}. The train tags the COMMITTED fold commit, so an uncommitted regeneration would never ship and the check that produced it proves nothing (#9189). Commit the regenerated file into the fold (or make the hook read-only) and rerun: nothing was tagged, main was not pushed and no GitHub Release exists.`
+    );
+  }
+  return { status: "passed", command, note: `\`${command}\` passed on ${shortSha} before the tag` };
+}
+
 // src/pre-one-zero.ts
 function preOneZeroInForce(meta) {
   return !!meta?.suite && meta.preOneZero !== false;
@@ -31994,12 +32179,12 @@ function assertPreOneZero(repo, meta, tag) {
 
 // src/train-doctor.ts
 var import_node_child_process9 = require("node:child_process");
-var import_node_fs28 = require("node:fs");
+var import_node_fs29 = require("node:fs");
 var import_node_os16 = require("node:os");
 var import_node_path27 = require("node:path");
 
 // src/doctor-io.ts
-var import_node_fs25 = require("node:fs");
+var import_node_fs26 = require("node:fs");
 var import_node_os13 = require("node:os");
 var import_node_path22 = require("node:path");
 var import_node_child_process7 = require("node:child_process");
@@ -32014,8 +32199,8 @@ function nodeDiscardSinkPath(platform2 = process.platform) {
 var execFileP2 = (0, import_node_util4.promisify)(import_node_child_process7.execFile);
 function execFileCapture(file, args, opts = {}) {
   const sink = nodeDiscardSinkPath();
-  const inFd = (0, import_node_fs25.openSync)(sink, "r");
-  const errFd = (0, import_node_fs25.openSync)(sink, "w");
+  const inFd = (0, import_node_fs26.openSync)(sink, "r");
+  const errFd = (0, import_node_fs26.openSync)(sink, "w");
   try {
     return (0, import_node_child_process7.execFileSync)(file, args, {
       ...opts,
@@ -32023,17 +32208,17 @@ function execFileCapture(file, args, opts = {}) {
       stdio: [inFd, "pipe", errFd]
     });
   } finally {
-    (0, import_node_fs25.closeSync)(inFd);
-    (0, import_node_fs25.closeSync)(errFd);
+    (0, import_node_fs26.closeSync)(inFd);
+    (0, import_node_fs26.closeSync)(errFd);
   }
 }
 var MMI_PLUGIN_ID2 = "mmi@mutmutco";
 function stagedClaudePluginVersion() {
   try {
     const stagingRoot = (0, import_node_path22.join)((0, import_node_os13.homedir)(), ".claude", "plugins", "staging");
-    const record2 = JSON.parse((0, import_node_fs25.readFileSync)((0, import_node_path22.join)(stagingRoot, "launch-target.json"), "utf8"));
+    const record2 = JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path22.join)(stagingRoot, "launch-target.json"), "utf8"));
     if (typeof record2.target !== "string" || typeof record2.incoming !== "string") return void 0;
-    const manifest = JSON.parse((0, import_node_fs25.readFileSync)((0, import_node_path22.join)(record2.incoming, ".claude-plugin", "plugin.json"), "utf8"));
+    const manifest = JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path22.join)(record2.incoming, ".claude-plugin", "plugin.json"), "utf8"));
     if (typeof manifest.version !== "string") return void 0;
     return manifest.version === record2.target ? record2.target : void 0;
   } catch {
@@ -32043,7 +32228,7 @@ function stagedClaudePluginVersion() {
 function installedClaudePluginVersion() {
   try {
     const file = JSON.parse(
-      (0, import_node_fs25.readFileSync)((0, import_node_path22.join)((0, import_node_os13.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
+      (0, import_node_fs26.readFileSync)((0, import_node_path22.join)((0, import_node_os13.homedir)(), ".claude", "plugins", "installed_plugins.json"), "utf8")
     );
     const versions = (file.plugins?.[MMI_PLUGIN_ID2] ?? []).map((r) => r.version).filter((v) => Boolean(v));
     if (versions.length === 0) return void 0;
@@ -32052,57 +32237,24 @@ function installedClaudePluginVersion() {
     return void 0;
   }
 }
-function readHermesPluginEvidence(env = process.env) {
-  const host = hermesConfigRoot(env);
-  const root = hermesPluginRoot(env);
-  const installRecordPresent = (0, import_node_fs25.existsSync)(root);
-  const manifestPath = (0, import_node_path22.join)(root, "plugin.yaml");
-  let installedVersion;
+function readOpenBotPluginEvidence(env = process.env) {
+  const workspaces = openbotAgentWorkspaces(env);
+  const record2 = openbotManagedRecord(env);
+  const recordPath = record2 ? (0, import_node_path22.join)(record2.workspace, ".agents", "skills", ".mmi-managed.json") : void 0;
   let manifest = "missing";
-  try {
-    const text = (0, import_node_fs25.readFileSync)(manifestPath, "utf8");
-    let version;
-    try {
-      const parsed = JSON.parse(text).version;
-      if (typeof parsed === "string" && parsed.trim()) version = parsed.trim();
-    } catch {
-    }
-    if (!version) {
-      const match = /^version:\s*["']?([^\s"'#]+)["']?\s*(?:#.*)?$/m.exec(text);
-      version = match?.[1];
-    }
-    if (version) {
-      installedVersion = version;
-      manifest = "valid";
-    } else if ((0, import_node_fs25.existsSync)(manifestPath)) manifest = "invalid";
-  } catch {
-    if ((0, import_node_fs25.existsSync)(manifestPath)) manifest = "invalid";
-  }
-  let skills = false;
-  try {
-    skills = (0, import_node_fs25.existsSync)((0, import_node_path22.join)(root, "skills")) && (0, import_node_fs25.statSync)((0, import_node_path22.join)(root, "skills")).isDirectory();
-  } catch {
-  }
-  let provisioned = false;
-  const provisionedRoot = (0, import_node_path22.join)(host, "skills", "mmi");
-  try {
-    provisioned = (0, import_node_fs25.existsSync)(provisionedRoot) && (0, import_node_fs25.statSync)(provisionedRoot).isDirectory();
-  } catch {
-  }
-  const treeOk = (0, import_node_fs25.existsSync)((0, import_node_path22.join)(root, "__init__.py")) && skills && manifest === "valid";
-  const receipt = treeOk && !provisioned ? `hermes-skills-unprovisioned:${provisionedRoot}` : void 0;
+  if (recordPath) manifest = record2?.version ? "valid" : "invalid";
   return {
-    hostPresent: (0, import_node_fs25.existsSync)(host),
-    installRecordPresent,
+    hostPresent: workspaces.length > 0,
+    installRecordPresent: record2 !== null,
     manifest,
-    payloadPresent: treeOk && provisioned,
-    ...installedVersion ? { installedVersion } : {},
-    ...receipt ? { receipt } : {}
+    payloadPresent: record2 !== null && openbotWorkspaceSkillsHealthy(env),
+    ...record2?.version ? { installedVersion: record2.version } : {},
+    ...recordPath && !record2?.version ? { receipt: `openbot-ownership-unreadable:${recordPath}` } : {}
   };
 }
 function installedSurfacePluginVersion(surface) {
   const token = surfaceToken(surface);
-  if (token === "hermes") return readHermesPluginEvidence().installedVersion;
+  if (token === "openbot") return readOpenBotPluginEvidence().installedVersion;
   if (token === "jervcode") {
     return installedJervCodePackageVersion();
   }
@@ -32144,7 +32296,7 @@ function readGitignore() {
   const path2 = gitignorePath();
   if (path2 === null) return null;
   try {
-    return (0, import_node_fs25.readFileSync)(path2, "utf8");
+    return (0, import_node_fs26.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -32153,14 +32305,14 @@ function writeGitignore(content) {
   const path2 = gitignorePath();
   if (path2 === null) return false;
   try {
-    (0, import_node_fs25.writeFileSync)(path2, content, "utf8");
+    (0, import_node_fs26.writeFileSync)(path2, content, "utf8");
     return true;
   } catch {
     return false;
   }
 }
 function lineEndingState(root) {
-  const attributesPresent = (0, import_node_fs25.existsSync)((0, import_node_path22.join)(root, ".gitattributes"));
+  const attributesPresent = (0, import_node_fs26.existsSync)((0, import_node_path22.join)(root, ".gitattributes"));
   try {
     const output = execFileCapture("git", ["-C", root, "ls-files", "--eol", "--", ":(glob)**/*.sh"], {
       windowsHide: true
@@ -32203,7 +32355,7 @@ function compatHolds(range, version) {
 }
 
 // src/claude-binary-doctor.ts
-var import_node_fs26 = require("node:fs");
+var import_node_fs27 = require("node:fs");
 var import_node_os15 = require("node:os");
 var import_node_path24 = require("node:path");
 
@@ -32311,16 +32463,16 @@ function globalNodeModulesRoots(host) {
 function readHead(path2) {
   let fd;
   try {
-    fd = (0, import_node_fs26.openSync)(path2, "r");
+    fd = (0, import_node_fs27.openSync)(path2, "r");
     const buffer = new Uint8Array(MAGIC_HEAD_BYTES);
-    const read = (0, import_node_fs26.readSync)(fd, buffer, 0, MAGIC_HEAD_BYTES, 0);
+    const read = (0, import_node_fs27.readSync)(fd, buffer, 0, MAGIC_HEAD_BYTES, 0);
     return buffer.subarray(0, read);
   } catch {
     return void 0;
   } finally {
     if (fd !== void 0) {
       try {
-        (0, import_node_fs26.closeSync)(fd);
+        (0, import_node_fs27.closeSync)(fd);
       } catch {
       }
     }
@@ -32328,7 +32480,7 @@ function readHead(path2) {
 }
 function fileBytes(path2) {
   try {
-    return (0, import_node_fs26.statSync)(path2).size;
+    return (0, import_node_fs27.statSync)(path2).size;
   } catch {
     return void 0;
   }
@@ -32342,13 +32494,13 @@ function readClaudeBinaryState(host = {}) {
   const arch = host.arch ?? process.arch;
   const magic = EXECUTABLE_MAGIC[platform2];
   if (!magic) return void 0;
-  const packageRoot = globalNodeModulesRoots(host).map((root) => (0, import_node_path24.join)(root, ...PACKAGE.split("/"))).find((dir) => (0, import_node_fs26.existsSync)((0, import_node_path24.join)(dir, "package.json")));
+  const packageRoot = globalNodeModulesRoots(host).map((root) => (0, import_node_path24.join)(root, ...PACKAGE.split("/"))).find((dir) => (0, import_node_fs27.existsSync)((0, import_node_path24.join)(dir, "package.json")));
   if (!packageRoot) return void 0;
   const keys = platformPackageKeys(platform2, arch);
   const fallbackPackage = `${PACKAGE}-${keys[0]}`;
   let manifest;
   try {
-    manifest = JSON.parse((0, import_node_fs26.readFileSync)((0, import_node_path24.join)(packageRoot, "package.json"), "utf8"));
+    manifest = JSON.parse((0, import_node_fs27.readFileSync)((0, import_node_path24.join)(packageRoot, "package.json"), "utf8"));
   } catch (e) {
     return {
       state: "unreadable",
@@ -32379,7 +32531,7 @@ function readClaudeBinaryState(host = {}) {
     (0, import_node_path24.join)(packageRoot, "node_modules", ...name.split("/"), binName),
     (0, import_node_path24.join)((0, import_node_path24.dirname)((0, import_node_path24.dirname)(packageRoot)), ...name.split("/"), binName)
   ];
-  const found = published.map((name) => ({ name, path: binIn(name).find((file) => (0, import_node_fs26.existsSync)(file)) })).find((c) => c.path);
+  const found = published.map((name) => ({ name, path: binIn(name).find((file) => (0, import_node_fs27.existsSync)(file)) })).find((c) => c.path);
   const platformPackage = found?.name ?? published[0];
   let source;
   let sourceProblem;
@@ -32390,7 +32542,7 @@ function readClaudeBinaryState(host = {}) {
   } else {
     source = { path: found.path, bytes: fileBytes(found.path) ?? 0 };
   }
-  if (!(0, import_node_fs26.existsSync)(binPath)) {
+  if (!(0, import_node_fs27.existsSync)(binPath)) {
     return { state: "missing", binPath, expectedMagic: magic.name, platformPackage, ...source ? { source } : {}, ...sourceProblem ? { sourceProblem } : {} };
   }
   const head = readHead(binPath);
@@ -32433,9 +32585,9 @@ function healClaudeBinary(host = {}, onStep) {
   const platform2 = host.platform ?? process.platform;
   const aside = `${probe.binPath}.stub-${Date.now()}`;
   let renamed = false;
-  if ((0, import_node_fs26.existsSync)(probe.binPath)) {
+  if ((0, import_node_fs27.existsSync)(probe.binPath)) {
     try {
-      (0, import_node_fs26.renameSync)(probe.binPath, aside);
+      (0, import_node_fs27.renameSync)(probe.binPath, aside);
       renamed = true;
       onStep?.(`renamed the stub aside: ${aside}`);
     } catch (e) {
@@ -32444,12 +32596,12 @@ function healClaudeBinary(host = {}, onStep) {
   }
   try {
     onStep?.(`copying ${probe.source.path} \u2192 ${probe.binPath} (${(probe.source.bytes / 1e6).toFixed(0)} MB)`);
-    (0, import_node_fs26.copyFileSync)(probe.source.path, probe.binPath);
-    if (platform2 !== "win32") (0, import_node_fs26.chmodSync)(probe.binPath, 493);
+    (0, import_node_fs27.copyFileSync)(probe.source.path, probe.binPath);
+    if (platform2 !== "win32") (0, import_node_fs27.chmodSync)(probe.binPath, 493);
   } catch (e) {
     if (renamed) {
       try {
-        (0, import_node_fs26.renameSync)(aside, probe.binPath);
+        (0, import_node_fs27.renameSync)(aside, probe.binPath);
       } catch {
         return { ok: false, detail: `copy failed (${e.message}) and the stub could not be restored \u2014 the original is at ${aside}` };
       }
@@ -32463,7 +32615,7 @@ function healClaudeBinary(host = {}, onStep) {
   let kept = false;
   if (renamed) {
     try {
-      (0, import_node_fs26.rmSync)(aside);
+      (0, import_node_fs27.rmSync)(aside);
     } catch {
       kept = true;
     }
@@ -32822,7 +32974,7 @@ function checkLineEndings(probe) {
 }
 
 // src/release-ledger.ts
-var import_node_fs27 = require("node:fs");
+var import_node_fs28 = require("node:fs");
 var import_node_path26 = require("node:path");
 var import_node_crypto9 = require("node:crypto");
 
@@ -32997,8 +33149,8 @@ function attachOutputNote(note, suffix) {
 }
 function writeFailingLegOutput(artifactPath, output) {
   const fileLines = lastNonEmptyLines(output, LEDGER_OUTPUT_FILE_LINES);
-  (0, import_node_fs27.mkdirSync)((0, import_node_path26.dirname)(artifactPath), { recursive: true });
-  (0, import_node_fs27.writeFileSync)(artifactPath, `${fileLines.join("\n")}
+  (0, import_node_fs28.mkdirSync)((0, import_node_path26.dirname)(artifactPath), { recursive: true });
+  (0, import_node_fs28.writeFileSync)(artifactPath, `${fileLines.join("\n")}
 `, "utf8");
   const tail = fileLines.slice(-LEDGER_OUTPUT_NOTE_LINES).join("\n");
   const noteSuffix = truncate(`failing-leg output: ${artifactPath}
@@ -33166,7 +33318,7 @@ function resolvePrimaryGitDir(cwd) {
   }
   let common;
   try {
-    common = (0, import_node_fs27.readFileSync)((0, import_node_path26.join)(gitDir, "commondir"), "utf8").trim();
+    common = (0, import_node_fs28.readFileSync)((0, import_node_path26.join)(gitDir, "commondir"), "utf8").trim();
   } catch (e) {
     if (e.code !== "ENOENT") {
       throw new ReleaseLedgerError("unreadable", `release ledger: the worktree gitdir's commondir pointer could not be READ (${e instanceof Error ? e.message : String(e)}) \u2014 a failed read is unverified, not primary (#5987/#4713)`);
@@ -33175,7 +33327,7 @@ function resolvePrimaryGitDir(cwd) {
   if (!common) return gitDir;
   const commonDir = (0, import_node_path26.isAbsolute)(common) ? common : (0, import_node_path26.resolve)(gitDir, common);
   try {
-    (0, import_node_fs27.readFileSync)((0, import_node_path26.join)(commonDir, "HEAD"), "utf8");
+    (0, import_node_fs28.readFileSync)((0, import_node_path26.join)(commonDir, "HEAD"), "utf8");
   } catch (e) {
     throw new ReleaseLedgerError("no-checkout", `release ledger: the worktree's commondir pointer names ${commonDir}, which has no readable HEAD (${e instanceof Error ? e.message : String(e)}) \u2014 the primary checkout may have been removed; refusing to write the ledger into a doomed location`);
   }
@@ -33185,11 +33337,11 @@ function releaseLedgerPath(cwd) {
   return (0, import_node_path26.join)(resolvePrimaryGitDir(cwd), "mmi-runtime", "release", "phases.json");
 }
 function atomicWriteJson(path2, ledger) {
-  (0, import_node_fs27.mkdirSync)((0, import_node_path26.dirname)(path2), { recursive: true });
+  (0, import_node_fs28.mkdirSync)((0, import_node_path26.dirname)(path2), { recursive: true });
   const tmp = `${path2}.tmp-${process.pid}-${(0, import_node_crypto9.randomBytes)(4).toString("hex")}`;
-  (0, import_node_fs27.writeFileSync)(tmp, `${JSON.stringify(ledger, null, 2)}
+  (0, import_node_fs28.writeFileSync)(tmp, `${JSON.stringify(ledger, null, 2)}
 `, "utf8");
-  (0, import_node_fs27.renameSync)(tmp, path2);
+  (0, import_node_fs28.renameSync)(tmp, path2);
 }
 var LEDGER_LOCK_OPTS = { label: "release ledger", staleMs: 18e4, deadHolderSteal: true };
 async function withLedgerLock(path2, fn, opts = {}) {
@@ -33236,7 +33388,7 @@ function describeTrainWriterToken(token) {
 function liveTrainWriterHolder(cwd) {
   let token;
   try {
-    token = (0, import_node_fs27.readFileSync)(trainWriterLockPath(cwd), "utf8");
+    token = (0, import_node_fs28.readFileSync)(trainWriterLockPath(cwd), "utf8");
   } catch {
     return void 0;
   }
@@ -33258,7 +33410,7 @@ async function acquireTrainWriterLock(cwd, verb) {
       if (heldTrainWriter) heldTrainWriter.depth -= 1;
     };
   }
-  (0, import_node_fs27.mkdirSync)((0, import_node_path26.dirname)(lockPath), { recursive: true });
+  (0, import_node_fs28.mkdirSync)((0, import_node_path26.dirname)(lockPath), { recursive: true });
   const opts = resolveFileLockOpts({ label: "train writer", staleMs: TRAIN_WRITER_STALE_MS, deadHolderSteal: true, maxWaitMs: 0, holder: verb });
   let guard;
   try {
@@ -33267,7 +33419,7 @@ async function acquireTrainWriterLock(cwd, verb) {
     if (!(e instanceof FileLockBusyError)) throw e;
     let token = "";
     try {
-      token = (0, import_node_fs27.readFileSync)(lockPath, "utf8");
+      token = (0, import_node_fs28.readFileSync)(lockPath, "utf8");
     } catch {
       token = "";
     }
@@ -33302,7 +33454,7 @@ async function withReleaseLedger(path2, expected, fn, opts = {}) {
     let current;
     let raw;
     try {
-      raw = (0, import_node_fs27.readFileSync)(path2, "utf8");
+      raw = (0, import_node_fs28.readFileSync)(path2, "utf8");
     } catch (e) {
       if (e.code !== "ENOENT") {
         throw new ReleaseLedgerError("unreadable", `release ledger at ${path2} could not be READ (${e instanceof Error ? e.message : String(e)}) \u2014 a failed read is unverified, not absent (#5987)`);
@@ -33969,7 +34121,7 @@ async function clearLedgerFile(path2, anchors, maxWaitMs) {
   return withLedgerLock(path2, async (fence) => {
     let raw;
     try {
-      raw = (0, import_node_fs27.readFileSync)(path2, "utf8");
+      raw = (0, import_node_fs28.readFileSync)(path2, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") return { cleared: false };
       return { cleared: false, note: `release ledger at ${path2} could not be read for clearing (${e instanceof Error ? e.message : String(e)}) \u2014 left in place` };
@@ -33985,7 +34137,7 @@ async function clearLedgerFile(path2, anchors, maxWaitMs) {
     } catch (e) {
       return { cleared: false, note: `release ledger at ${path2} belongs to ${ledger.tag} @ ${ledger.tagSha.slice(0, 12)} \u2014 not this release; left in place (${e instanceof Error ? e.message : String(e)})` };
     }
-    await fence(() => (0, import_node_fs27.unlinkSync)(path2));
+    await fence(() => (0, import_node_fs28.unlinkSync)(path2));
     return { cleared: true, note: `cleared the release ledger at ${path2} for the live-proven aborted ${anchors.tag}` };
   }, { maxWaitMs });
 }
@@ -34145,7 +34297,7 @@ async function healStaleAlignmentLeg(deps, cwd, expected) {
   return withLedgerLock(path2, async (fence) => {
     let prior;
     try {
-      prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+      prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
     } catch {
       return void 0;
     }
@@ -34170,7 +34322,7 @@ async function healUnfoldedRunLegs(deps, cwd, model) {
   const path2 = releaseLedgerPath(cwd);
   let prior;
   try {
-    prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+    prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
   } catch {
     return void 0;
   }
@@ -34239,7 +34391,7 @@ async function supersedeContentCausedDeployLeg(deps, cwd) {
   return withLedgerLock(path2, async (fence) => {
     let prior;
     try {
-      prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+      prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
     } catch (e) {
       throw new ReleaseLedgerError(
         "unreadable",
@@ -34301,6 +34453,22 @@ function supersedeablePublishLegShape(rec) {
 function deferredGatewayDeployLegShape(rec) {
   return rec.state === "pending" && rec.runId == null && rec.workflow === "jerv-gateway";
 }
+function releaseAssetsCarryInstallerPayload(assets, tag) {
+  const version = tag.replace(/^v/, "");
+  return assets.some((asset) => typeof asset.name === "string" && asset.name.startsWith("installer-payload-") && asset.name.endsWith(`-${version}.tar.gz`));
+}
+async function proveInstallerPayloadPresence(deps, prior, label, ref) {
+  let assets;
+  try {
+    const parsed = JSON.parse(await deps.run("gh", ["release", "view", prior.tag, "--repo", prior.repo, "--json", "assets"]));
+    assets = Array.isArray(parsed.assets) ? parsed.assets : [];
+  } catch (e) {
+    throw new Error(
+      `${label}: could not read the ${prior.tag} GitHub Release asset list (${e instanceof Error ? e.message.split("\n")[0] : String(e)}) \u2014 whether the installer payload exists is unproven, so the deploy leg cannot be closed; retry when GitHub answers; nothing was written (${ref})`
+    );
+  }
+  return releaseAssetsCarryInstallerPayload(assets, prior.tag) ? "present" : "absent";
+}
 async function proveOriginPromotionOrArchived(deps, prior, path2, label, ref, fence) {
   let liveSha = "";
   try {
@@ -34337,10 +34505,10 @@ async function proveOriginPromotionOrArchived(deps, prior, path2, label, ref, fe
     throw new Error(`${label}: origin no longer has ${prior.tag} but its GitHub Release still exists \u2014 resolve the mixed external state before closing the ledger; nothing was written (${ref})`);
   }
   const archivePath = (0, import_node_path26.join)((0, import_node_path26.dirname)(path2), `phases.archive-${prior.tag}.json`);
-  if ((0, import_node_fs27.existsSync)(archivePath)) {
+  if ((0, import_node_fs28.existsSync)(archivePath)) {
     throw new Error(`${label}: archive already exists at ${archivePath} \u2014 preserving both ledger records; resolve the collision by hand; nothing was written (${ref})`);
   }
-  await fence(() => (0, import_node_fs27.renameSync)(path2, archivePath));
+  await fence(() => (0, import_node_fs28.renameSync)(path2, archivePath));
   return "deleted";
 }
 async function supersedeContentCausedPublishLeg(deps, cwd) {
@@ -34348,7 +34516,7 @@ async function supersedeContentCausedPublishLeg(deps, cwd) {
   return withLedgerLock(path2, async (fence) => {
     let prior;
     try {
-      prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+      prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
     } catch (e) {
       throw new ReleaseLedgerError(
         "unreadable",
@@ -34386,23 +34554,29 @@ async function supersedeContentCausedPublishLeg(deps, cwd) {
       };
     }
     if (deferredGateway) {
-      const dispatch = await appendJervGatewayReleaseDeploy(
-        deps,
-        prior.repo,
-        prior.tag,
-        prior.tagSha,
-        { note: `Jerv Gateway operator-host deploy leg for ${prior.tag} run during the publish supersession`, deployStatus: "success" }
-      );
-      phases.deploy = {
-        ...phaseEntry(deployPhaseInput("registry-publish", dispatch, { releaseSha: prior.tagSha })),
-        updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-      };
-      if (dispatch.deployStatus !== "success") {
-        throw new Error(
-          `release --supersede-publish: the deferred ${prior.tag} Jerv Gateway operator-host deploy leg did not verify (${dispatch.note}) \u2014 run \`scripts/jerv-gateway-release-deploy.sh --tag ${prior.tag}\` to a healthy receipt naming the released tag and commit, then retry; nothing was written (#6742)`
+      if (prior.phases.publish.state === "failed" && await proveInstallerPayloadPresence(deps, prior, "release --supersede-publish", "#9182") === "absent") {
+        const payloadNote = `superseded: the ${prior.tag} publish never produced the installer payload (the live release carries no installer-payload asset for this version) \u2014 the deferred Jerv Gateway operator-host deploy leg was skipped, nothing was deployable from this tag; the cause fix rides the next patch train (#9182)`;
+        phases.deploy = { state: "skipped", sha: prior.tagSha, superseded: true, note: payloadNote, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+        gatewayDeploy = { workflow: "jerv-gateway", state: "skipped", note: payloadNote };
+      } else {
+        const dispatch = await appendJervGatewayReleaseDeploy(
+          deps,
+          prior.repo,
+          prior.tag,
+          prior.tagSha,
+          { note: `Jerv Gateway operator-host deploy leg for ${prior.tag} run during the publish supersession`, deployStatus: "success" }
         );
+        phases.deploy = {
+          ...phaseEntry(deployPhaseInput("registry-publish", dispatch, { releaseSha: prior.tagSha })),
+          updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+        };
+        if (dispatch.deployStatus !== "success") {
+          throw new Error(
+            `release --supersede-publish: the deferred ${prior.tag} Jerv Gateway operator-host deploy leg did not verify (${dispatch.note}) \u2014 run \`scripts/jerv-gateway-release-deploy.sh --tag ${prior.tag}\` to a healthy receipt naming the released tag and commit, then retry; nothing was written (#6742)`
+          );
+        }
+        gatewayDeploy = { workflow: "jerv-gateway", state: "complete", note: dispatch.note };
       }
-      gatewayDeploy = { workflow: "jerv-gateway", state: "complete", note: dispatch.note };
     }
     const note = `superseded: content-caused publish failure on the immutable promoted ${prior.tag} \u2014 the cause fix rides the next patch train (master-approved closure, #6638)`;
     await fence(() => atomicWriteJson(path2, {
@@ -34430,7 +34604,7 @@ async function supersedeContentCausedDeployAndPublishLegs(deps, cwd) {
   return withLedgerLock(path2, async (fence) => {
     let prior;
     try {
-      prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+      prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
     } catch (e) {
       throw new ReleaseLedgerError(
         "unreadable",
@@ -34486,7 +34660,11 @@ async function supersedeContentCausedDeployAndPublishLegs(deps, cwd) {
     }
     let deployEntry;
     let gatewayDeploy;
-    if (deferredGateway) {
+    if (deferredGateway && publish.state === "failed" && await proveInstallerPayloadPresence(deps, prior, label, "#9182") === "absent") {
+      const payloadNote = `superseded: the ${prior.tag} publish never produced the installer payload (the live release carries no installer-payload asset for this version) \u2014 the deferred Jerv Gateway operator-host deploy leg was skipped, nothing was deployable from this tag; the cause fix rides the next patch train (#9182)`;
+      deployEntry = { state: "skipped", sha: prior.tagSha, superseded: true, note: payloadNote, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+      gatewayDeploy = { workflow: "jerv-gateway", state: "skipped", note: payloadNote };
+    } else if (deferredGateway) {
       const dispatch = await appendJervGatewayReleaseDeploy(
         deps,
         prior.repo,
@@ -34535,7 +34713,7 @@ async function supersedeContentCausedDeployAndPublishLegs(deps, cwd) {
 async function reverifyPriorRunLegs(deps, path2, targetTag) {
   let prior;
   try {
-    prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+    prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
   } catch {
     return;
   }
@@ -34555,7 +34733,7 @@ async function beginReleaseLedger(deps, cwd, targetTag) {
   return withLedgerLock(path2, async (fence) => {
     let raw;
     try {
-      raw = (0, import_node_fs27.readFileSync)(path2, "utf8");
+      raw = (0, import_node_fs28.readFileSync)(path2, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") return { ok: true };
       return { ok: false, error: `the release ledger at ${path2} could not be READ (${e instanceof Error ? e.message : String(e)}) \u2014 a failed read is unverified, not absent (#5987/#4713)` };
@@ -34595,13 +34773,13 @@ async function beginReleaseLedger(deps, cwd, targetTag) {
     }
     const archivePath = (0, import_node_path26.join)((0, import_node_path26.dirname)(path2), `phases.archive-${prior.tag}.json`);
     try {
-      await fence(() => (0, import_node_fs27.unlinkSync)(archivePath));
+      await fence(() => (0, import_node_fs28.unlinkSync)(archivePath));
     } catch (e) {
       if (e.code !== "ENOENT") {
         return { ok: false, error: `could not clear the stale archive at ${archivePath} (${e instanceof Error ? e.message : String(e)}) \u2014 the ledger for ${prior.tag} stays active (#5987)` };
       }
     }
-    await fence(() => (0, import_node_fs27.renameSync)(path2, archivePath));
+    await fence(() => (0, import_node_fs28.renameSync)(path2, archivePath));
     return { ok: true, note: `archived the completed release ledger ${prior.tag} to ${archivePath} (live-proven at ${prior.tagSha.slice(0, 12)})` };
   });
 }
@@ -34629,7 +34807,7 @@ async function retryHotfixDeployLegs(deps, cwd, opts = {}) {
   return withLedgerLock(path2, async (fence) => {
     let prior;
     try {
-      prior = parseReleaseLedger((0, import_node_fs27.readFileSync)(path2, "utf8"));
+      prior = parseReleaseLedger((0, import_node_fs28.readFileSync)(path2, "utf8"));
     } catch (e) {
       throw new ReleaseLedgerError(
         "unreadable",
@@ -34871,10 +35049,10 @@ function readOriginWorkflowsDefault(root, ref) {
 }
 var NPM_REGISTRY = "https://registry.npmjs.org";
 async function probeRegistryWhoami(train) {
-  const dir = (0, import_node_fs28.mkdtempSync)((0, import_node_path27.join)((0, import_node_os16.tmpdir)(), "mmi-npmrc-"));
+  const dir = (0, import_node_fs29.mkdtempSync)((0, import_node_path27.join)((0, import_node_os16.tmpdir)(), "mmi-npmrc-"));
   const rc = (0, import_node_path27.join)(dir, "npmrc");
   try {
-    (0, import_node_fs28.writeFileSync)(rc, "//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n");
+    (0, import_node_fs29.writeFileSync)(rc, "//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n");
     await train.runSelf(["secrets", "use", "npm/NPM_TOKEN", "--slug", "_org", "--", "npm", "whoami", "--registry", NPM_REGISTRY, "--userconfig", rc]);
     return { kind: "ok", detail: "the registry answered a login" };
   } catch (e) {
@@ -34885,7 +35063,7 @@ async function probeRegistryWhoami(train) {
     if (/\bE401\b|401 Unauthorized/.test(stderr)) return { kind: "rejected", detail: "npm whoami answered 401 Unauthorized" };
     return { kind: "unverified", detail: first };
   } finally {
-    (0, import_node_fs28.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs29.rmSync)(dir, { recursive: true, force: true });
   }
 }
 var REGISTRY_TOKEN_ENV = /\b(NODE_AUTH_TOKEN|NPM_TOKEN)\b/;
@@ -34903,7 +35081,7 @@ var defaultDeps2 = {
   ledgerPath: releaseLedgerPath,
   readLedgerRaw: (path2) => {
     try {
-      return (0, import_node_fs28.readFileSync)(path2, "utf8");
+      return (0, import_node_fs29.readFileSync)(path2, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") return void 0;
       throw e;
@@ -34914,7 +35092,7 @@ var defaultDeps2 = {
   trainWriterHolder: liveTrainWriterHolder,
   readSurfacesRaw: (cwd) => {
     try {
-      return (0, import_node_fs28.readFileSync)((0, import_node_path27.join)(cwd, "surfaces.json"), "utf8");
+      return (0, import_node_fs29.readFileSync)((0, import_node_path27.join)(cwd, "surfaces.json"), "utf8");
     } catch {
       return void 0;
     }
@@ -35564,7 +35742,7 @@ function formatTrainDoctor(v) {
 
 // src/release-plain-words.ts
 var import_promises3 = require("node:fs/promises");
-var import_node_fs29 = require("node:fs");
+var import_node_fs30 = require("node:fs");
 function releaseCutByNotes(cutBy) {
   return `## Internal
 Cut by ${formatSessionIdentity(cutBy)}
@@ -35670,7 +35848,7 @@ function validateSuiteReleaseSummary(path2, pathTr) {
   for (const [lang, file] of files) {
     let content;
     try {
-      content = (0, import_node_fs29.readFileSync)(file, "utf8");
+      content = (0, import_node_fs30.readFileSync)(file, "utf8");
     } catch (e) {
       throw new Error(`could not read summary file ${file}: ${e.message} \u2014 see ${SUMMARY_GUIDE}`);
     }
@@ -35885,14 +36063,14 @@ function readLocalGateWorkflows() {
   const dir = (0, import_node_path28.join)(".github", "workflows");
   let names;
   try {
-    names = (0, import_node_fs30.readdirSync)(dir);
+    names = (0, import_node_fs31.readdirSync)(dir);
   } catch {
     return null;
   }
   const files = [];
   for (const name of names.filter(isGateWorkflowPath)) {
     try {
-      files.push({ path: `${dir}/${name}`.replace(/\\/g, "/"), body: (0, import_node_fs30.readFileSync)((0, import_node_path28.join)(dir, name), "utf8") });
+      files.push({ path: `${dir}/${name}`.replace(/\\/g, "/"), body: (0, import_node_fs31.readFileSync)((0, import_node_path28.join)(dir, name), "utf8") });
     } catch {
     }
   }
@@ -35902,14 +36080,14 @@ function readLocalWorkflows() {
   const dir = (0, import_node_path28.join)(".github", "workflows");
   let names;
   try {
-    names = (0, import_node_fs30.readdirSync)(dir);
+    names = (0, import_node_fs31.readdirSync)(dir);
   } catch {
     return null;
   }
   const files = [];
   for (const name of names.filter((n) => /\.ya?ml$/i.test(n))) {
     try {
-      files.push({ path: `${dir}/${name}`.replace(/\\/g, "/"), body: (0, import_node_fs30.readFileSync)((0, import_node_path28.join)(dir, name), "utf8") });
+      files.push({ path: `${dir}/${name}`.replace(/\\/g, "/"), body: (0, import_node_fs31.readFileSync)((0, import_node_path28.join)(dir, name), "utf8") });
     } catch {
     }
   }
@@ -36581,6 +36759,12 @@ async function pushAfterVercelVersionEnv(deps, meta, stage, tag, pushArgs) {
 }
 async function completeMainRelease(deps, ctx, meta, deployModel, watch, options, tag, releaseSha, startBranch, preFold, tagProbe, branchHints, ledger, alignEarly) {
   const resumeCommand = options.dev ? "mmi-cli devops release --dev --apply" : "mmi-cli devops release --apply";
+  let pretag;
+  try {
+    pretag = await runPreTagHook(deps, { releaseSha });
+  } catch (e) {
+    throw await recoverFailedFold(deps, e, startBranch, preFold.mainSha, resumeCommand);
+  }
   const ledgerAnchors = { repo: ctx.repo, tag, tagSha: releaseSha };
   try {
     deps.warn?.("Release: Checking the package before publishing");
@@ -36756,7 +36940,7 @@ ${recovery.note}`), recoveryInput);
   });
   alignment = await aligning;
   const announceNote = annotateVersionEnvAnnounce(await announcing, versionEnv);
-  return { checks, releaseUrl, announceNote, localInstall, dispatch, ledgerAnchors, ...alignment ? { alignment } : {} };
+  return { checks, releaseUrl, announceNote, localInstall, dispatch, ledgerAnchors, pretag, ...alignment ? { alignment } : {} };
 }
 function resumeStateOf(status) {
   return status === "complete" ? "aligned" : status;
@@ -36798,7 +36982,7 @@ async function activeRcandLedgerCandidate(deps, cwd) {
   }
   let prior;
   try {
-    prior = parseReleaseLedger((0, import_node_fs30.readFileSync)(path2, "utf8"));
+    prior = parseReleaseLedger((0, import_node_fs31.readFileSync)(path2, "utf8"));
   } catch {
     return void 0;
   }
@@ -37404,7 +37588,15 @@ async function runReleaseAbortLocked(deps, options) {
     );
   }
   await requireCleanTree(deps);
-  if (await currentBranch(deps) !== "main") {
+  const ciCheckout = options.ciCheckout === true;
+  if (ciCheckout) {
+    if (!isHubControlRepo(ctx.repo)) {
+      throw new Error(`release --abort: the CI checkout path aborts ${ctx.repo} never; it is for the Hub release workflow only; nothing was written`);
+    }
+    if (!ctx.delegatedActor) {
+      throw new Error("release --abort: the CI checkout path needs the run's proven org-owner trigger (hub release workflow authority); nothing was written");
+    }
+  } else if (await currentBranch(deps) !== "main") {
     throw new Error("release --abort must run from the primary checkout left on main by the failed train; nothing was written");
   }
   await runGitRemoteRead(deps, ["fetch", "origin", "--tags"]);
@@ -37414,7 +37606,7 @@ async function runReleaseAbortLocked(deps, options) {
   const tagSha = await probeRemoteTag(deps, tag);
   if (!tagSha) throw new Error(`release --abort: ${tag} is not on origin; nothing was written`);
   const localTagSha = clean2(await deps.run("git", ["rev-parse", "--verify", `refs/tags/${tag}^{commit}`]));
-  const localMainSha = clean2(await deps.run("git", ["rev-parse", "main"]));
+  const localMainSha = ciCheckout ? tagSha : clean2(await deps.run("git", ["rev-parse", "main"]));
   const originMainSha = clean2(await deps.run("git", ["rev-parse", "origin/main"]));
   if (localTagSha !== tagSha || localMainSha !== tagSha) {
     throw new Error(
@@ -37445,6 +37637,17 @@ async function runReleaseAbortLocked(deps, options) {
     throw new Error(`release --abort: origin still reports ${tag} after deletion; local state was preserved`);
   }
   await deps.run("git", ["tag", "-d", tag]);
+  if (ciCheckout) {
+    const ciLedgerNote = await clearReleaseLedger(process.cwd(), { repo: ctx.repo, tag, tagSha });
+    return {
+      command: "release-abort",
+      repo: ctx.repo,
+      tag,
+      tagSha,
+      restoredMainSha: originMainSha,
+      note: `removed the unpublished ${tag} candidate from the Hub release workflow; destructive approval: @${ctx.delegatedActor} triggered this run and is a proven active org owner; origin/main stays ${originMainSha.slice(0, 12)}; repair development before recutting` + (ciLedgerNote ? `; ${ciLedgerNote}` : "")
+    };
+  }
   await deps.run("git", ["checkout", "development"]);
   await ffOnlyPull(deps, "development");
   await deps.run("git", ["branch", "-f", "main", "origin/main"]);
@@ -37716,7 +37919,7 @@ ${spent.note}`), rcandRecovery(tag2));
       const releaseSha3 = requireValue(clean2(await deps.run("git", ["rev-parse", "main"])), "release sha");
       return { versionFold: versionFold3, releaseSha: releaseSha3 };
     });
-    const { checks: checks2, releaseUrl: releaseUrl2, announceNote: announceNote2, localInstall: localInstall2, dispatch: d2, ledgerAnchors: ledgerAnchors2, alignment: alignment2 } = await completeMainRelease(
+    const { checks: checks2, releaseUrl: releaseUrl2, announceNote: announceNote2, localInstall: localInstall2, dispatch: d2, ledgerAnchors: ledgerAnchors2, pretag: pretag2, alignment: alignment2 } = await completeMainRelease(
       deps,
       ctx,
       meta,
@@ -37748,6 +37951,7 @@ ${spent.note}`), rcandRecovery(tag2));
         promoted: true,
         checks: checks2,
         versionFold: versionFold2,
+        pretag: pretag2,
         dispatch: d2.note,
         runId: d2.runId,
         runUrl: d2.runUrl,
@@ -37778,6 +37982,7 @@ ${spent.note}`), rcandRecovery(tag2));
       promoted: true,
       checks: checks2,
       versionFold: versionFold2,
+      pretag: pretag2,
       dispatch: d2.note,
       runId: d2.runId,
       runUrl: d2.runUrl,
@@ -37827,7 +38032,7 @@ ${spent.note}`), rcandRecovery(tag2));
     const releaseSha2 = requireValue(clean2(await deps.run("git", ["rev-parse", "main"])), "release sha");
     return { versionFold: versionFold2, releaseSha: releaseSha2 };
   });
-  const { checks, releaseUrl, announceNote, localInstall, dispatch: d, ledgerAnchors, alignment } = await completeMainRelease(
+  const { checks, releaseUrl, announceNote, localInstall, dispatch: d, ledgerAnchors, pretag, alignment } = await completeMainRelease(
     deps,
     ctx,
     meta,
@@ -37861,6 +38066,7 @@ ${spent.note}`), rcandRecovery(tag2));
     promoted: true,
     checks,
     versionFold,
+    pretag,
     dispatch: d.note,
     runId: d.runId,
     runUrl: d.runUrl,
@@ -40786,7 +40992,7 @@ function registerBoardCommands(program3) {
     return `Claimed ${ref} for ${holder} - In Progress${reclaimed}`;
   }
   const board = program3.command("board").description("read, claim, show, and move Project v2 work items for the current repo");
-  board.command("read", { isDefault: true }).alias("list").description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--direct", "bypass the Hub snapshot and read the live board through direct GitHub GraphQL").option("--snapshot-only", "never fall back to your personal GraphQL pool; failure exits: 20 hub-unreachable, 21 app-quota-exhausted, 22 refused. With --json, stdout is {ok:false,outcome,reason[,resetAt,pool]} (pool is rest or graphql when known); success is unchanged").option("--min-cursor <n>", "board-event cursor (from `oracle board events`) the Hub snapshot must postdate; a cached snapshot older than that event is rebuilt (#7240)").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").option("--out <path>", "write the output to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5802)").addHelpText("after", "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--direct skips the Hub snapshot and uses the existing direct GitHub GraphQL read immediately.\n--allow-partial applies to the paginated path and detail reads.\n\nWhen using Windows PowerShell 5.1, avoid shell redirects: PowerShell 5.1's `> file.json` is Out-File,\nwhich writes UTF-16LE with a BOM, and Node reading it as 'utf8' then fails JSON.parse at position 1\n(#5802). Use --out instead \u2014 the CLI writes the file itself as UTF-8:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n").action((o) => runBoardRead(o));
+  board.command("read", { isDefault: true }).alias("list").description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--direct", "bypass the Hub snapshot and read the live board through direct GitHub GraphQL").option("--snapshot-only", "never fall back to your personal GraphQL pool; failure exits: 20 hub-unreachable, 21 app-quota-exhausted, 22 refused. With --json, stdout is {ok:false,outcome,reason[,resetAt,pool]} (pool is rest or graphql when known) and the human-readable reason goes to stderr; success is unchanged").option("--min-cursor <n>", "board-event cursor (from `oracle board events`) the Hub snapshot must postdate; a cached snapshot older than that event is rebuilt (#7240)").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").option("--out <path>", "write the output to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5802)").addHelpText("after", "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--direct skips the Hub snapshot and uses the existing direct GitHub GraphQL read immediately.\n--allow-partial applies to the paginated path and detail reads.\n\nWhen using Windows PowerShell 5.1, avoid shell redirects: PowerShell 5.1's `> file.json` is Out-File,\nwhich writes UTF-16LE with a BOM, and Node reading it as 'utf8' then fails JSON.parse at position 1\n(#5802). Use --out instead \u2014 the CLI writes the file itself as UTF-8:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n\nUnder --json, parse stdout ONLY and check the exit code first. A failure still prints a\nhuman-readable reason on stderr, so never pipe 2>&1 into a JSON parser (#9151) \u2014 the merged\ntext is not JSON and hides the real board failure.\n").action((o) => runBoardRead(o));
   board.command("events").description("content-free board/CI change records after a cursor, from the Hub event feed (no GitHub call) \u2014 for real-time sidebars (#7235)").option("--since <cursor>", "cursor from the previous answer; omit on first read (answers the head cursor with resync:true)").option("--wait <seconds>", "hold up to this long (max 120), polling every 2s, and return on the first event or resync", "0").option("--repo <owner/repo>", "repo whose Hub config to use (defaults to git origin)").option("--json", "machine-readable output (already the default)").addHelpText("after", "\nPrints {cursor, events, resync, more[, hidden]}. Pass the returned cursor as the next --since.\nresync:true means records were missed (retention ~1h, or a gap): re-read the board with\n`mmi-cli oracle board read --snapshot-only --json`.\n").action(async (o) => {
     try {
       if (o.since !== void 0 && !/^\d{1,15}$/.test(o.since)) throw new Error("--since must be a non-negative integer cursor");
@@ -41032,7 +41238,7 @@ function registerBoardCommands(program3) {
 }
 
 // src/bootstrap-commands.ts
-var import_node_fs34 = require("node:fs");
+var import_node_fs35 = require("node:fs");
 var import_node_os19 = require("node:os");
 var import_node_path32 = require("node:path");
 init_cli_shared();
@@ -41219,7 +41425,7 @@ init_github_client();
 init_cli_shared();
 
 // src/port-registry.ts
-var import_node_fs31 = require("node:fs");
+var import_node_fs32 = require("node:fs");
 var import_node_path29 = require("node:path");
 
 // ../infra/port-geometry.mjs
@@ -41234,8 +41440,8 @@ function nextPortBlock(registry2) {
   return [base, base + PORT_SPAN];
 }
 function loadPortRegistry(path2) {
-  if (!(0, import_node_fs31.existsSync)(path2)) return {};
-  const raw = JSON.parse((0, import_node_fs31.readFileSync)(path2, "utf8"));
+  if (!(0, import_node_fs32.existsSync)(path2)) return {};
+  const raw = JSON.parse((0, import_node_fs32.readFileSync)(path2, "utf8"));
   const out = {};
   for (const [key, value] of Object.entries(raw)) {
     if (Array.isArray(value) && value.length === 2 && value.every((n) => typeof n === "number")) {
@@ -41265,7 +41471,7 @@ function existingPortRange(repo, registry2) {
 function portRangeInfraAt(root, source) {
   const registryPath = (0, import_node_path29.join)(root, "infra", "port-ranges.json");
   const ddbScriptPath = (0, import_node_path29.join)(root, "infra", "port-ddb.mjs");
-  if (!(0, import_node_fs31.existsSync)(registryPath) || !(0, import_node_fs31.existsSync)(ddbScriptPath)) return null;
+  if (!(0, import_node_fs32.existsSync)(registryPath) || !(0, import_node_fs32.existsSync)(ddbScriptPath)) return null;
   return { root, source, registryPath, ddbScriptPath };
 }
 function resolvePortRangeInfra(cwd, packageDir) {
@@ -41347,7 +41553,7 @@ async function assignPersistedPortRange(repo, slug, reg, opts) {
 }
 
 // src/box-commands.ts
-var import_node_fs33 = require("node:fs");
+var import_node_fs34 = require("node:fs");
 var import_node_child_process10 = require("node:child_process");
 var import_node_os18 = require("node:os");
 var import_node_path31 = require("node:path");
@@ -41520,7 +41726,7 @@ init_clean_exit();
 init_cli_shared();
 
 // src/secrets-commands.ts
-var import_node_fs32 = require("node:fs");
+var import_node_fs33 = require("node:fs");
 var import_node_path30 = require("node:path");
 var import_node_os17 = require("node:os");
 init_cli_shared();
@@ -42728,8 +42934,8 @@ async function decryptRailsCredentials(input) {
     MMI_RAILS_CREDENTIALS_FILE: credentialsPath,
     MMI_RAILS_MASTER_KEY_FILE: masterKeyPath
   };
-  if ((0, import_node_fs32.existsSync)(masterKeyPath)) {
-    env.RAILS_MASTER_KEY = (0, import_node_fs32.readFileSync)(masterKeyPath, "utf8").trim();
+  if ((0, import_node_fs33.existsSync)(masterKeyPath)) {
+    env.RAILS_MASTER_KEY = (0, import_node_fs33.readFileSync)(masterKeyPath, "utf8").trim();
   }
   const script = [
     'require "json"',
@@ -42739,9 +42945,9 @@ async function decryptRailsCredentials(input) {
     'config = ActiveSupport::EncryptedConfiguration.new(config_path: config_path, key_path: key_path, env_key: "RAILS_MASTER_KEY", raise_if_missing_key: true)',
     "puts JSON.generate(config.config)"
   ].join("\n");
-  const scriptDir = (0, import_node_fs32.mkdtempSync)((0, import_node_path30.join)((0, import_node_os17.tmpdir)(), "mmi-rails-decrypt-"));
+  const scriptDir = (0, import_node_fs33.mkdtempSync)((0, import_node_path30.join)((0, import_node_os17.tmpdir)(), "mmi-rails-decrypt-"));
   const scriptPath = (0, import_node_path30.join)(scriptDir, "decrypt.rb");
-  (0, import_node_fs32.writeFileSync)(scriptPath, script, "utf8");
+  (0, import_node_fs33.writeFileSync)(scriptPath, script, "utf8");
   try {
     const args = ["exec", "ruby", scriptPath];
     const cmd = process.platform === "win32" ? "cmd.exe" : "bundle";
@@ -42753,7 +42959,7 @@ async function decryptRailsCredentials(input) {
     });
     return JSON.parse(stdout);
   } finally {
-    (0, import_node_fs32.rmSync)(scriptDir, { recursive: true, force: true });
+    (0, import_node_fs33.rmSync)(scriptDir, { recursive: true, force: true });
   }
 }
 async function readSecretStdin() {
@@ -42843,7 +43049,7 @@ function registerSecretsCommands(program3) {
     let body;
     if (o.file) {
       try {
-        body = (0, import_node_fs32.readFileSync)((0, import_node_path30.resolve)(o.file), "utf8");
+        body = (0, import_node_fs33.readFileSync)((0, import_node_path30.resolve)(o.file), "utf8");
       } catch (e) {
         return fail(`secrets org-catalog: cannot read --file ${o.file}: ${e.message}`);
       }
@@ -42979,7 +43185,7 @@ function registerSecretsCommands(program3) {
       {
         ...d,
         decryptRailsCredentials,
-        removeFile: (path2) => (0, import_node_fs32.unlinkSync)((0, import_node_path30.resolve)(o.appDir ?? process.cwd(), path2))
+        removeFile: (path2) => (0, import_node_fs33.unlinkSync)((0, import_node_path30.resolve)(o.appDir ?? process.cwd(), path2))
       },
       {
         repo: o.repo,
@@ -43006,7 +43212,7 @@ function registerSecretsCommands(program3) {
       }
       const { keys, command, ...o } = parsed.value;
       const code = secretsUseExitCode(await secretsUse(d, keys, { ...o, command }));
-      if (code !== void 0) process.exitCode = code;
+      if (code !== void 0) process.exitCode = lastHubAuthFailure()?.exitCode ?? code;
     });
   });
   withDeclaredOptions(
@@ -43235,7 +43441,7 @@ function registerBoxCommands(program3) {
       }
       const remote = command && command.length ? command.join(" ") : void 0;
       const wroteScript = o.ssh && o.script ? o.script : null;
-      if (wroteScript) (0, import_node_fs33.writeFileSync)(wroteScript, sshRecipeScript(found, remote), "utf8");
+      if (wroteScript) (0, import_node_fs34.writeFileSync)(wroteScript, sshRecipeScript(found, remote), "utf8");
       if (o.json) {
         console.log(JSON.stringify({
           box: found,
@@ -43359,17 +43565,17 @@ function hubGitShow(ref) {
   return (path2) => git3(["show", `${ref}:${path2}`]);
 }
 function runOnBox(found, script) {
-  const dir = (0, import_node_fs33.mkdtempSync)((0, import_node_path31.join)((0, import_node_os18.tmpdir)(), "mmi-box-control-"));
+  const dir = (0, import_node_fs34.mkdtempSync)((0, import_node_path31.join)((0, import_node_os18.tmpdir)(), "mmi-box-control-"));
   try {
     const recipe = (0, import_node_path31.join)(dir, "recipe.sh");
-    (0, import_node_fs33.writeFileSync)(recipe, sshRecipeScript(found, "sh -s"), "utf8");
+    (0, import_node_fs34.writeFileSync)(recipe, sshRecipeScript(found, "sh -s"), "utf8");
     const r = (0, import_node_child_process10.spawnSync)("bash", [recipe], { input: script, encoding: "utf8", maxBuffer: 16 * 1024 * 1024, timeout: 18e4, windowsHide: true });
     if (r.status !== 0) {
       throw new UnreadableError(`box control: the ssh session to ${found.name} failed (exit ${r.status ?? r.signal}): ${(r.stderr || "").trim().split("\n").slice(-3).join(" | ")}`);
     }
     return r.stdout;
   } finally {
-    (0, import_node_fs33.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs34.rmSync)(dir, { recursive: true, force: true });
   }
 }
 function formatControl(mode, box, rows) {
@@ -45012,12 +45218,12 @@ async function verifyTargetedSeedPr(repo, number, plan, target, expected, client
 // src/bootstrap-commands.ts
 var execGitForSeedSource = async (args) => (await execFileP("git", args, { timeout: GIT_TIMEOUT_MS })).stdout;
 async function gateRenderDiff(current, rendered) {
-  const dir = (0, import_node_fs34.mkdtempSync)((0, import_node_path32.join)((0, import_node_os19.tmpdir)(), "mmi-gate-diff-"));
+  const dir = (0, import_node_fs35.mkdtempSync)((0, import_node_path32.join)((0, import_node_os19.tmpdir)(), "mmi-gate-diff-"));
   const before = (0, import_node_path32.join)(dir, "committed-gate.yml");
   const after = (0, import_node_path32.join)(dir, "registry-render.yml");
   try {
-    (0, import_node_fs34.writeFileSync)(before, current);
-    (0, import_node_fs34.writeFileSync)(after, rendered);
+    (0, import_node_fs35.writeFileSync)(before, current);
+    (0, import_node_fs35.writeFileSync)(after, rendered);
     try {
       return (await execFileP("git", ["diff", "--no-index", "--", before, after], { timeout: GIT_TIMEOUT_MS })).stdout;
     } catch (e) {
@@ -45026,7 +45232,7 @@ async function gateRenderDiff(current, rendered) {
       throw e;
     }
   } finally {
-    (0, import_node_fs34.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs35.rmSync)(dir, { recursive: true, force: true });
   }
 }
 function bootstrapTrainDoctorDeps() {
@@ -45086,13 +45292,13 @@ function registerBootstrapCommands(program3) {
       })),
       pushAllowlistOwners: verifyOwners,
       pushAllowlistOwnersRead: verifyOwnersRead,
-      readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs34.existsSync)(path2) ? (0, import_node_fs34.readFileSync)(path2, "utf8") : null,
+      readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs35.existsSync)(path2) ? (0, import_node_fs35.readFileSync)(path2, "utf8") : null,
       // requiredGcpApis is stored as an array by a JSON write, but `org project set --var KEY=VALUE` stores a raw
       // comma-string — accept either so the seeded value verifies regardless of how it was written.
       // #3689: the same committed map the org access audit reads (#3664), so a sanctioned admin is not a
       // permanent bootstrap failure on one surface and an intended state on the other. Absent file → no
       // sanction, which is the pre-#3664 behaviour.
-      sanctionedAdmins: (0, import_node_fs34.existsSync)("access-matrix.json") ? entriesValueByCanonicalRepo(loadSanctionedAdmins((0, import_node_fs34.readFileSync)("access-matrix.json", "utf8")), repo) : void 0,
+      sanctionedAdmins: (0, import_node_fs35.existsSync)("access-matrix.json") ? entriesValueByCanonicalRepo(loadSanctionedAdmins((0, import_node_fs35.readFileSync)("access-matrix.json", "utf8")), repo) : void 0,
       requiredGcpApis: (() => {
         const v = meta?.requiredGcpApis;
         if (Array.isArray(v)) return v;
@@ -45170,14 +45376,14 @@ function registerBootstrapCommands(program3) {
   bootstrap.command("drift").description("#3818: compare every org-owned whole-file seed against MMI-Hub's copy across the registry roster; read-only").option("--repo <owner/repo>", "audit one repo instead of the roster (never a fleet verdict)").option("--json", "machine-readable output").action(async () => {
     const o = { repo: rawValue("--repo", ""), json: rawFlag("--json") };
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs34.existsSync)(manifestPath)) return fail(`bootstrap drift: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the reference this compares against`);
+    if (!(0, import_node_fs35.existsSync)(manifestPath)) return fail(`bootstrap drift: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the reference this compares against`);
     const seedSource = await resolveHubSeedSource(execGitForSeedSource);
     if (!seedSource.ok) return fail(`bootstrap drift: ${seedSource.reason}`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs34.readFileSync)(manifestPath, "utf8"));
+    const manifest = loadBootstrapSeeds((0, import_node_fs35.readFileSync)(manifestPath, "utf8"));
     const hubContents = /* @__PURE__ */ new Map();
     for (const s of manifest.seeds) {
       if (s.ownership !== "org" || s.source !== "self") continue;
-      hubContents.set(s.target, (0, import_node_fs34.existsSync)(s.target) ? (0, import_node_fs34.readFileSync)(s.target, "utf8") : null);
+      hubContents.set(s.target, (0, import_node_fs35.existsSync)(s.target) ? (0, import_node_fs35.readFileSync)(s.target, "utf8") : null);
     }
     let targets;
     let classOf = (_repo) => "deployable";
@@ -45385,24 +45591,24 @@ function registerBootstrapCommands(program3) {
       return;
     }
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs34.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; bootstrap runs from the MMI-Hub repo root by design \u2014 it stamps org-level resources (Project, Ruleset, secrets, access) through the GitHub App, which is only authorized from the Hub checkout`);
+    if (!(0, import_node_fs35.existsSync)(manifestPath)) return fail(`bootstrap apply: ${manifestPath} not found; bootstrap runs from the MMI-Hub repo root by design \u2014 it stamps org-level resources (Project, Ruleset, secrets, access) through the GitHub App, which is only authorized from the Hub checkout`);
     const seedSource = await resolveHubSeedSource(execGitForSeedSource);
     if (!seedSource.ok) return fail(`bootstrap apply: ${seedSource.reason}`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs34.readFileSync)(manifestPath, "utf8"));
+    const manifest = loadBootstrapSeeds((0, import_node_fs35.readFileSync)(manifestPath, "utf8"));
     const baseBranch = o.class === "content" ? "main" : "development";
     const slug = parsedRepo.slug;
     const onlyTarget = o.fromConfig && o.only.trim() === "gate.yml" ? ".github/workflows/gate.yml" : o.only.trim();
     const gh2 = async (args) => execFileP("gh", args, { timeout: 2e4 });
-    const readFile10 = (p) => (0, import_node_fs34.existsSync)(p) ? (0, import_node_fs34.readFileSync)(p, "utf8") : null;
+    const readFile10 = (p) => (0, import_node_fs35.existsSync)(p) ? (0, import_node_fs35.readFileSync)(p, "utf8") : null;
     const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
     const putSeed = async (target, content, ref, sha) => {
       const tmp = (0, import_node_path32.join)((0, import_node_os19.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
-      (0, import_node_fs34.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
+      (0, import_node_fs35.writeFileSync)(tmp, JSON.stringify(contentPutBody(target, content, ref, sha)), "utf8");
       try {
         await gh2(contentPutInputArgs(repo, target, tmp));
       } finally {
         try {
-          (0, import_node_fs34.unlinkSync)(tmp);
+          (0, import_node_fs35.unlinkSync)(tmp);
         } catch {
         }
       }
@@ -46038,10 +46244,10 @@ LIVE apply to ${repo}:
   bootstrap.command("propagate").description("#4238: re-entrant canary\u2192wave tick \u2014 plan (or, with --execute, open) per-repo PRs fanning an org-owned seed out to the fleet").option("--target <path>", "the manifest target to propagate (an org-owned whole file or declared Hub-managed block)").option("--execute", "LIVE tick via gh (master-gated) \u2014 opens/reuses per-repo seed-propagate PRs; dry-run prints the plan only").option("--json", "machine-readable output").action(async () => {
     const o = { target: rawValue("--target", ""), execute: rawFlag("--execute"), json: rawFlag("--json") };
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs34.existsSync)(manifestPath)) return fail(`bootstrap propagate: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the desired state this tick propagates`);
+    if (!(0, import_node_fs35.existsSync)(manifestPath)) return fail(`bootstrap propagate: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the desired state this tick propagates`);
     const seedSource = await resolveHubSeedSource(execGitForSeedSource);
     if (!seedSource.ok) return fail(`bootstrap propagate: ${seedSource.reason}`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs34.readFileSync)(manifestPath, "utf8"));
+    const manifest = loadBootstrapSeeds((0, import_node_fs35.readFileSync)(manifestPath, "utf8"));
     const propagatable = manifest.seeds.filter(isPropagatableSeed);
     if (!o.target) {
       return fail(`bootstrap propagate: --target <path> is required \u2014 one of:
@@ -46050,9 +46256,9 @@ LIVE apply to ${repo}:
     const seed = propagatable.find((s) => s.target === o.target);
     if (!seed) return fail(`bootstrap propagate: --target '${o.target}' names no centrally propagatable seed in ${manifestPath}. Propagatable targets:
   ${propagatable.map((s) => s.target).join("\n  ")}`);
-    if (!seed.managedBlock && !(0, import_node_fs34.existsSync)(seed.target)) return fail(`bootstrap propagate: the Hub's own copy of '${seed.target}' is missing \u2014 nothing to propagate`);
-    const hubContent = seed.managedBlock ? null : (0, import_node_fs34.readFileSync)(seed.target, "utf8");
-    const readSeedFile2 = (path2) => (0, import_node_fs34.existsSync)(path2) ? (0, import_node_fs34.readFileSync)(path2, "utf8") : null;
+    if (!seed.managedBlock && !(0, import_node_fs35.existsSync)(seed.target)) return fail(`bootstrap propagate: the Hub's own copy of '${seed.target}' is missing \u2014 nothing to propagate`);
+    const hubContent = seed.managedBlock ? null : (0, import_node_fs35.readFileSync)(seed.target, "utf8");
+    const readSeedFile2 = (path2) => (0, import_node_fs35.existsSync)(path2) ? (0, import_node_fs35.readFileSync)(path2, "utf8") : null;
     const isWorkflowSeed = seed.target.startsWith(".github/workflows/");
     const cfg = await loadConfig();
     const projects = await fetchProjectsList(registryClientDeps(cfg));
@@ -46061,9 +46267,9 @@ LIVE apply to ${repo}:
     }
     const rosterRepos = collectRegistryRepos(projects).filter((r) => r.toLowerCase() !== "mutmutco/mmi-hub");
     let independentCount = rosterRepos.length;
-    if ((0, import_node_fs34.existsSync)("projects.json")) {
+    if ((0, import_node_fs35.existsSync)("projects.json")) {
       try {
-        const local = JSON.parse((0, import_node_fs34.readFileSync)("projects.json", "utf8"));
+        const local = JSON.parse((0, import_node_fs35.readFileSync)("projects.json", "utf8"));
         const localRepos = /* @__PURE__ */ new Set();
         for (const p of local.projects ?? []) for (const r of p.repos ?? []) {
           const full = (r.includes("/") ? r : `mutmutco/${r}`).toLowerCase();
@@ -46219,7 +46425,7 @@ LIVE apply to ${repo}:
       if (plan.refusedNoCanary) return fail("bootstrap propagate --execute: no canary declared for this target \u2014 refusing to write (set seedCanary:true on exactly one registry repo)");
       const headSha = seedSource.sha;
       const sourceBlob = (await execGitForSeedSource(["rev-parse", `${headSha}:${seedSourcePath(seed)}`])).trim();
-      const runbookUnaffected = (0, import_node_fs34.existsSync)(RUNBOOK_UNAFFECTED_PATH) ? runbookUnaffectedReason(JSON.parse((0, import_node_fs34.readFileSync)(RUNBOOK_UNAFFECTED_PATH, "utf8")), seed.target, sourceBlob) : void 0;
+      const runbookUnaffected = (0, import_node_fs35.existsSync)(RUNBOOK_UNAFFECTED_PATH) ? runbookUnaffectedReason(JSON.parse((0, import_node_fs35.readFileSync)(RUNBOOK_UNAFFECTED_PATH, "utf8")), seed.target, sourceBlob) : void 0;
       for (const rec of plan.records) {
         if (rec.action !== "open-pr") continue;
         const baseBranch = classOf(rec.repo) === "content" ? "main" : "development";
@@ -46244,12 +46450,12 @@ LIVE apply to ${repo}:
         const tmp = (0, import_node_path32.join)((0, import_node_os19.tmpdir)(), `mmi-propagate-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
         const desiredContent = desiredByRepo.get(rec.repo);
         if (desiredContent == null) return fail(`bootstrap propagate: no resolved content for ${rec.repo} ${seed.target} \u2014 refusing to write`);
-        (0, import_node_fs34.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, desiredContent, branch, existingSha, runbookUnaffected)), "utf8");
+        (0, import_node_fs35.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, desiredContent, branch, existingSha, runbookUnaffected)), "utf8");
         try {
           await gh2(contentPutInputArgs(rec.repo, seed.target, tmp));
         } finally {
           try {
-            (0, import_node_fs34.unlinkSync)(tmp);
+            (0, import_node_fs35.unlinkSync)(tmp);
           } catch {
           }
         }
@@ -46318,10 +46524,10 @@ Rollback: \`mmi-cli devops bootstrap rollback ${rec.repo} --target ${seed.target
       return fail(`bootstrap rollback: ${e.message}`);
     }
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
-    if (!(0, import_node_fs34.existsSync)(manifestPath)) return fail(`bootstrap rollback: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the manifest names which targets are org-owned and therefore propagated (and rollback-able)`);
+    if (!(0, import_node_fs35.existsSync)(manifestPath)) return fail(`bootstrap rollback: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the manifest names which targets are org-owned and therefore propagated (and rollback-able)`);
     const seedSource = await resolveHubSeedSource(execGitForSeedSource);
     if (!seedSource.ok) return fail(`bootstrap rollback: ${seedSource.reason}`);
-    const manifest = loadBootstrapSeeds((0, import_node_fs34.readFileSync)(manifestPath, "utf8"));
+    const manifest = loadBootstrapSeeds((0, import_node_fs35.readFileSync)(manifestPath, "utf8"));
     const propagatable = manifest.seeds.filter(isPropagatableSeed);
     if (!o.target) {
       return fail(`bootstrap rollback: --target <path> is required \u2014 one of:
@@ -46338,10 +46544,10 @@ Rollback: \`mmi-cli devops bootstrap rollback ${rec.repo} --target ${seed.target
     const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
     let candidates;
     if (o.record) {
-      if (!(0, import_node_fs34.existsSync)(o.record)) return fail(`bootstrap rollback: --record '${o.record}' not found`);
+      if (!(0, import_node_fs35.existsSync)(o.record)) return fail(`bootstrap rollback: --record '${o.record}' not found`);
       let parsed;
       try {
-        parsed = JSON.parse((0, import_node_fs34.readFileSync)(o.record, "utf8"));
+        parsed = JSON.parse((0, import_node_fs35.readFileSync)(o.record, "utf8"));
       } catch (e) {
         return fail(`bootstrap rollback: --record '${o.record}' is not valid JSON: ${e.message}`);
       }
@@ -46419,12 +46625,12 @@ Rollback: \`mmi-cli devops bootstrap rollback ${rec.repo} --target ${seed.target
         existingSha = void 0;
       }
       const tmp = (0, import_node_path32.join)((0, import_node_os19.tmpdir)(), `mmi-rollback-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
-      (0, import_node_fs34.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, preSeedContent, plan.branch, existingSha)), "utf8");
+      (0, import_node_fs35.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, preSeedContent, plan.branch, existingSha)), "utf8");
       try {
         await gh2(contentPutInputArgs(repo, seed.target, tmp));
       } finally {
         try {
-          (0, import_node_fs34.unlinkSync)(tmp);
+          (0, import_node_fs35.unlinkSync)(tmp);
         } catch {
         }
       }
@@ -46896,7 +47102,7 @@ async function waitSuiteDev(deps, opts) {
 }
 
 // src/suite-train.ts
-var import_node_fs35 = require("node:fs");
+var import_node_fs36 = require("node:fs");
 var import_node_path33 = require("node:path");
 var import_node_crypto15 = require("node:crypto");
 
@@ -46983,7 +47189,7 @@ function suiteReleaseTag(rc) {
 function readSuiteCut(path2) {
   let raw;
   try {
-    raw = (0, import_node_fs35.readFileSync)(path2, "utf8");
+    raw = (0, import_node_fs36.readFileSync)(path2, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") return void 0;
     throw e;
@@ -46999,11 +47205,11 @@ function readSuiteCut(path2) {
   return record2;
 }
 function writeSuiteCut(path2, record2) {
-  (0, import_node_fs35.mkdirSync)((0, import_node_path33.dirname)(path2), { recursive: true });
+  (0, import_node_fs36.mkdirSync)((0, import_node_path33.dirname)(path2), { recursive: true });
   const temp = `${path2}.${(0, import_node_crypto15.randomBytes)(8).toString("hex")}.tmp`;
   try {
-    (0, import_node_fs35.writeFileSync)(temp, JSON.stringify(record2, null, 2), { flag: "wx" });
-    (0, import_node_fs35.renameSync)(temp, path2);
+    (0, import_node_fs36.writeFileSync)(temp, JSON.stringify(record2, null, 2), { flag: "wx" });
+    (0, import_node_fs36.renameSync)(temp, path2);
   } catch (e) {
     throw new Error(`suite cut record write failed at ${path2}: ${e.message}; stop, verify the file before retrying`);
   }
@@ -47052,25 +47258,25 @@ async function suiteMarkAbandoned(deps, ownerGo = false) {
   return tags.map((t) => `${t.repo}@${t.tag}`);
 }
 async function retireFailedLeadRcLedger(deps, ownerGo) {
-  if (!(0, import_node_fs35.existsSync)(deps.ledgerPath)) return void 0;
+  if (!(0, import_node_fs36.existsSync)(deps.ledgerPath)) return void 0;
   return withLedgerLock(deps.ledgerPath, async (fence) => {
-    const ledger = parseReleaseLedger((0, import_node_fs35.readFileSync)(deps.ledgerPath, "utf8"));
+    const ledger = parseReleaseLedger((0, import_node_fs36.readFileSync)(deps.ledgerPath, "utf8"));
     const states = Object.values(ledger.phases).map((p) => p.state);
     if (ledger.repo !== SUITE_REPO || ledger.lane !== "rcand" || ledger.phases.promotion.state === "complete" || !states.includes("failed")) return void 0;
     if (!ownerGo) throw new Error(`the lead's failed rcand ledger for ${ledger.tag} blocks every train; retire it with suite abandon --owner-go`);
     if ((await deps.rcHead())?.toLowerCase() === ledger.tagSha.toLowerCase()) throw new Error(`origin rc already points at ${ledger.tag}; it was promoted, so its ledger is not retired`);
     const archive = (0, import_node_path33.join)((0, import_node_path33.dirname)(deps.ledgerPath), `phases.archive-${ledger.tag}.json`);
-    if ((0, import_node_fs35.existsSync)(archive)) throw new Error(`ledger archive already exists at ${archive}; inspect before retiring again`);
+    if ((0, import_node_fs36.existsSync)(archive)) throw new Error(`ledger archive already exists at ${archive}; inspect before retiring again`);
     await deps.markAbandoned(SUITE_REPO, ledger.tag, ledger.tagSha);
-    await fence(() => (0, import_node_fs35.renameSync)(deps.ledgerPath, archive));
+    await fence(() => (0, import_node_fs36.renameSync)(deps.ledgerPath, archive));
     return `${ledger.tag} (ledger archived to ${archive})`;
   });
 }
 function suiteAbandon(recordPath, ownerGo = false, now = /* @__PURE__ */ new Date()) {
   const record2 = abandonableCut(recordPath, ownerGo);
   const archive = `${recordPath}.abandoned-${record2.leadDevelopment.slice(0, 12)}-${now.toISOString().replace(/[:.]/g, "")}.json`;
-  if ((0, import_node_fs35.existsSync)(archive)) throw new Error(`abandoned-cut archive already exists at ${archive}; inspect before abandoning again`);
-  (0, import_node_fs35.renameSync)(recordPath, archive);
+  if ((0, import_node_fs36.existsSync)(archive)) throw new Error(`abandoned-cut archive already exists at ${archive}; inspect before abandoning again`);
+  (0, import_node_fs36.renameSync)(recordPath, archive);
   return { archive, orphanTags: record2.members.filter((m) => m.tag).map((m) => `${m.repo}@${m.tag}`) };
 }
 async function suiteRestoreMainPins(deps) {
@@ -47157,12 +47363,12 @@ async function suiteRcandRun(deps, opts) {
   }
   if ((record2?.announcement === "sent" || record2?.announcement === "skipped") && record2.leadReleased) {
     const archive = `${deps.recordPath}.${record2.leadRcTag}.json`;
-    if ((0, import_node_fs35.existsSync)(archive)) throw new Error(`suite cut archive already exists at ${archive}; inspect before a new cut`);
-    (0, import_node_fs35.renameSync)(deps.recordPath, archive);
+    if ((0, import_node_fs36.existsSync)(archive)) throw new Error(`suite cut archive already exists at ${archive}; inspect before a new cut`);
+    (0, import_node_fs36.renameSync)(deps.recordPath, archive);
     record2 = void 0;
   }
   if (record2 && !record2.pinPr && !record2.leadRcTag && record2.members.every((m) => !m.tag)) {
-    (0, import_node_fs35.rmSync)(deps.recordPath, { force: true });
+    (0, import_node_fs36.rmSync)(deps.recordPath, { force: true });
     record2 = void 0;
   }
   if (!record2) {
@@ -47216,7 +47422,7 @@ async function suiteRcandRun(deps, opts) {
     quiet.push(member);
   }
   if (record2.members.every((m) => m.carried || quiet.includes(m)) && await deps.contains(SUITE_REPO, record2.leadDevelopment, record2.leadPreviousRc)) {
-    (0, import_node_fs35.rmSync)(deps.recordPath, { force: true });
+    (0, import_node_fs36.rmSync)(deps.recordPath, { force: true });
     throw new Error("nothing to promote: neither MM-Work nor any module has new development commits since its rc; no suite cut started");
   }
   for (const member of quiet) {
@@ -47234,7 +47440,7 @@ async function suiteRcandRun(deps, opts) {
   }
   if (refusals.length) {
     const untouched = record2.members.every((m) => !m.tag) && !record2.pinPr;
-    if (untouched) (0, import_node_fs35.rmSync)(deps.recordPath, { force: true });
+    if (untouched) (0, import_node_fs36.rmSync)(deps.recordPath, { force: true });
     throw new Error(`module rc serving is not ready; ${untouched ? "no suite cut started" : "no new tag was cut"}:
 ${refusals.join("\n")}
 Each module must ship a live release that bind-mounts <deployPath>/data read-only and serves <data>/rc/module.js at /rc/module.js (docs/Guides/suite-trains.md).`);
@@ -47430,7 +47636,7 @@ var hotfixRecordPath = (deps) => (0, import_node_path33.join)((0, import_node_pa
 function readSuiteHotfix(path2) {
   let raw;
   try {
-    raw = (0, import_node_fs35.readFileSync)(path2, "utf8");
+    raw = (0, import_node_fs36.readFileSync)(path2, "utf8");
   } catch (e) {
     if (e.code === "ENOENT") return void 0;
     throw e;
@@ -47473,7 +47679,7 @@ async function suiteHotfix(deps, opts) {
   if (completed) record2 = void 0;
   if (record2 && record2.repo !== found.repo) throw new Error(`an unfinished suite hotfix for ${record2.repo} is recorded; finish it (rerun with that member) first`);
   if (!record2?.tag) await deps.validateHotfixSummary();
-  if (completed) (0, import_node_fs35.renameSync)(path2, `${path2}.${completed.leadTag}.json`);
+  if (completed) (0, import_node_fs36.renameSync)(path2, `${path2}.${completed.leadTag}.json`);
   const rec = record2 ?? { schema: "mmi-suite-hotfix/v1", member: found.id, repo: found.repo, from: opts.from, ...opts.ack?.length ? { ack: opts.ack } : {} };
   const save = () => writeSuiteHotfix(path2, rec);
   save();
@@ -47742,7 +47948,7 @@ async function runRcDataSwitch(deps, opts) {
 // src/suite-train-io.ts
 var import_node_child_process18 = require("node:child_process");
 var import_node_path46 = require("node:path");
-var import_node_fs48 = require("node:fs");
+var import_node_fs49 = require("node:fs");
 var import_node_path47 = require("node:path");
 init_cli_shared();
 
@@ -48828,6 +49034,15 @@ async function runHotfixReleaseLocked(deps, versionInput, options, doctor) {
     const invented = announceSummaryFidelity(lines2, rangeLog);
     if (invented) throw new Error(invented);
   }
+  try {
+    await runPreTagHook(deps, { releaseSha: mergedSha });
+  } catch (e) {
+    throw new Error(
+      `${e instanceof Error ? e.message : String(e)}
+
+hotfix: origin/main already carries ${mergedSha.slice(0, 12)} (the hotfix PR merged), but nothing was tagged, no Release was created and nothing was published \u2014 fix the check above and rerun \`mmi-cli devops hotfix release ${tag}\`.`
+    );
+  }
   const anchors = { repo: ctx.repo, tag, tagSha: mergedSha };
   const start = await startReleaseLedger(ledger, anchors, { lane: "hotfix" });
   if (!start.ok) {
@@ -49426,7 +49641,7 @@ function checkHotfixCarries(options) {
 }
 
 // src/merge-cleanup.ts
-var import_node_fs37 = require("node:fs");
+var import_node_fs38 = require("node:fs");
 var import_node_path35 = require("node:path");
 var import_node_os20 = require("node:os");
 init_cli_shared();
@@ -49915,7 +50130,7 @@ function renderPrLandTable(entries) {
 
 // src/test-policy-core.ts
 var import_node_child_process13 = require("node:child_process");
-var import_node_fs36 = require("node:fs");
+var import_node_fs37 = require("node:fs");
 var import_node_path34 = require("node:path");
 
 // src/test-command-policy-shared.mjs
@@ -50485,7 +50700,7 @@ function loadPolicySource(root, explicitRef, diffBase) {
 }
 function readFileOrNull2(path2) {
   try {
-    return (0, import_node_fs36.readFileSync)(path2, "utf8");
+    return (0, import_node_fs37.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -50513,10 +50728,10 @@ function classify(changed, policy, present = () => false) {
   const removedProtected = [...removed].filter((p) => protectedBy.has(p)).map((p) => ({ path: p, why: protectedBy.get(p) ?? "" }));
   return { mandatoryHits, untestedHits, testChanges, meaningfulTestChanges, addedTests, removedProtected };
 }
-function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs36.existsSync)(path2)) {
+function unresolvedProtectedEntries(policy, root, exists = (path2) => (0, import_node_fs37.existsSync)(path2)) {
   return (policy.protected ?? []).map((p) => p.path).filter((p) => !exists((0, import_node_path34.join)(root, p)));
 }
-function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs36.existsSync)(path2)) {
+function unresolvedSatisfiers(policy, root, exists = (path2) => (0, import_node_fs37.existsSync)(path2)) {
   const declared = (policy.mandatory ?? []).flatMap((m) => m.satisfiedBy ?? []);
   return [...new Set(declared)].filter((p) => !exists((0, import_node_path34.join)(root, p)));
 }
@@ -50657,7 +50872,7 @@ function runTestPolicy(root, deps = {}) {
   }
   const loaded = deps.policy ? { policy: deps.policy, source: { ref: null, sha: null, path: POLICY_FILE } } : loadPolicySource(root, deps.policyRef, deps.base);
   const { policy, source: policySource } = loaded;
-  const exists = deps.exists ?? ((path2) => (0, import_node_fs36.existsSync)(path2));
+  const exists = deps.exists ?? ((path2) => (0, import_node_fs37.existsSync)(path2));
   const counts = { mandatoryCount: (policy.mandatory ?? []).length, protectedCount: (policy.protected ?? []).length };
   const base = deps.changed ? "(injected)" : deps.policyRef ? resolveHotfixBase(root) : resolveBase(root, deps.base);
   const refusal = deps.changed ? null : untrustworthyRange(root, base);
@@ -50954,13 +51169,13 @@ function resolveSquashMergeBodyText(commits, allowedClosing, cwd) {
   return rewritten === base ? null : rewritten;
 }
 function writeSquashBodyFile(body) {
-  const dir = (0, import_node_fs37.mkdtempSync)((0, import_node_path35.join)((0, import_node_os20.tmpdir)(), "mmi-squash-body-"));
+  const dir = (0, import_node_fs38.mkdtempSync)((0, import_node_path35.join)((0, import_node_os20.tmpdir)(), "mmi-squash-body-"));
   const path2 = (0, import_node_path35.join)(dir, "body.txt");
-  (0, import_node_fs37.writeFileSync)(path2, body.endsWith("\n") ? body : `${body}
+  (0, import_node_fs38.writeFileSync)(path2, body.endsWith("\n") ? body : `${body}
 `, "utf8");
   return { path: path2, cleanup: () => {
     try {
-      (0, import_node_fs37.rmSync)(dir, { recursive: true, force: true });
+      (0, import_node_fs38.rmSync)(dir, { recursive: true, force: true });
     } catch {
     }
   } };
@@ -51246,8 +51461,63 @@ function prMergeQueueLine(result) {
 // src/command-register-train-operations.ts
 init_github_client();
 
+// src/hub-release-ci-authority.ts
+var HUB_RELEASE_REPO = "mutmutco/MMI-Hub";
+var HUB_RELEASE_WORKFLOW = ".github/workflows/hub-release.yml";
+var HUB_RELEASE_REF = "refs/heads/development";
+var WORKFLOW_REF = `${HUB_RELEASE_REPO}/${HUB_RELEASE_WORKFLOW}@${HUB_RELEASE_REF}`;
+var LOGIN = /^[A-Za-z0-9-]{1,39}$/;
+var ID = /^[1-9][0-9]*$/;
+function hubReleaseCiRun(env) {
+  if (env.MMI_HUB_RELEASE_CI !== "1" || env.GITHUB_ACTIONS !== "true") return null;
+  if (env.GITHUB_REPOSITORY !== HUB_RELEASE_REPO || env.GITHUB_EVENT_NAME !== "workflow_dispatch") return null;
+  if (env.GITHUB_WORKFLOW_REF !== WORKFLOW_REF || env.GITHUB_REF !== HUB_RELEASE_REF) return null;
+  const runId = env.GITHUB_RUN_ID ?? "";
+  const runAttempt = env.GITHUB_RUN_ATTEMPT ?? "";
+  if (!ID.test(runId) || !ID.test(runAttempt)) return null;
+  return { runId: Number(runId), runAttempt: Number(runAttempt) };
+}
+async function hubReleaseCiAuthority(repo, deps) {
+  const run = hubReleaseCiRun(deps.env);
+  if (!run) return null;
+  const refuse = (check) => ({ ok: false, error: `hub release workflow authority refused: ${check}` });
+  if (repo.toLowerCase() !== HUB_RELEASE_REPO.toLowerCase()) return refuse(`this workflow releases ${HUB_RELEASE_REPO} only`);
+  let live;
+  try {
+    live = await deps.getJson(`repos/${HUB_RELEASE_REPO}/actions/runs/${run.runId}`);
+  } catch (e) {
+    return refuse(`live run read failed (${e instanceof Error ? e.message : String(e)})`);
+  }
+  const login = live?.triggering_actor?.login ?? "";
+  const bound = live?.id === run.runId && live.run_attempt === run.runAttempt && live.status === "in_progress" && live.event === "workflow_dispatch" && live.path === HUB_RELEASE_WORKFLOW && live.head_branch === "development" && live.repository?.full_name === HUB_RELEASE_REPO;
+  if (!bound) return refuse("live run binding");
+  if (live.triggering_actor?.type !== "User" || !LOGIN.test(login)) return refuse("the run was not triggered by a person");
+  let membership;
+  try {
+    membership = await deps.getJson(`orgs/mutmutco/memberships/${login}`);
+  } catch (e) {
+    return refuse(`org membership read for ${login} failed (${e instanceof Error ? e.message : String(e)})`);
+  }
+  if (membership?.role !== "admin" || membership?.state !== "active") return refuse(`${login} is not an active org owner`);
+  return { ok: true, role: "master", train: true, authenticatedDelegation: true, delegatedActor: login };
+}
+var GITHUB_API = "https://api.github.com";
+function pinnedGitHubGetJson(token, fetchImpl = fetch) {
+  return async (path2) => {
+    if (!token) throw new Error("GH_TOKEN is not set in this run");
+    if (!/^[A-Za-z0-9_.\/-]+$/.test(path2) || path2.includes("..")) throw new Error("refusing an unexpected API path");
+    const res = await fetchImpl(`${GITHUB_API}/${path2}`, {
+      headers: { Authorization: `Bearer ${token}`, Accept: "application/vnd.github+json", "X-GitHub-Api-Version": "2022-11-28" },
+      signal: AbortSignal.timeout(15e3)
+    });
+    if (!res.ok) throw new Error(`HTTP ${res.status}`);
+    return res.json();
+  };
+}
+var HUB_RELEASE_CI_ANNOUNCE_DEFERRED = "announcement deferred: the Hub cannot authorize a release-workflow session to post yet (#9138); the curated summary is in this run's step summary";
+
 // src/project-info-sync.ts
-var import_node_fs38 = require("node:fs");
+var import_node_fs39 = require("node:fs");
 var import_node_path36 = require("node:path");
 var UPDATE_PROJECT_INFO = `mutation($projectId: ID!, $shortDescription: String!, $readme: String!) {
   updateProjectV2(input: { projectId: $projectId, shortDescription: $shortDescription, readme: $readme }) {
@@ -51296,13 +51566,13 @@ function sharedName(entries, fallback) {
 function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   if (!project2.projectId) throw new Error(`org project sync-info: ${targetRepo2} registry META has no projectId`);
   const readmePath = (0, import_node_path36.join)(repoRoot2, "README.md");
-  if (!(0, import_node_fs38.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
+  if (!(0, import_node_fs39.existsSync)(readmePath)) throw new Error(`org project sync-info: ${targetRepo2} has no README.md`);
   const entries = entriesFor(project2, projects);
   const memberRepos = [...new Set(entries.flatMap((entry) => entry.repos ?? []))].filter((repo) => /^[^/]+\/[^/]+$/.test(repo)).sort((a, b) => a.localeCompare(b));
   const projectName = sharedName(entries, project2.name?.trim() || targetRepo2.split("/").pop() || targetRepo2);
   if (!memberRepos.length) throw new Error(`org project sync-info: project ${projectName} has no registered member repos`);
   const entryNames = entries.map((entry) => entry.name?.trim()).filter((name) => Boolean(name));
-  const shortDescription = memberRepos.length === 1 ? shortDescriptionFromReadme((0, import_node_fs38.readFileSync)(readmePath, "utf8")) : `Shared work across ${new Intl.ListFormat("en", { type: "conjunction" }).format(entryNames)}.`;
+  const shortDescription = memberRepos.length === 1 ? shortDescriptionFromReadme((0, import_node_fs39.readFileSync)(readmePath, "utf8")) : `Shared work across ${new Intl.ListFormat("en", { type: "conjunction" }).format(entryNames)}.`;
   const lines2 = [
     `# ${projectName}`,
     "",
@@ -51321,8 +51591,8 @@ function buildProjectInfoSyncPlan(targetRepo2, project2, projects, repoRoot2) {
   const targetBase = `https://github.com/${targetRepo2}`;
   const targetBranch = branchFor(targetRepo2, projects);
   const orgDocs = [
-    (0, import_node_fs38.existsSync)((0, import_node_path36.join)(repoRoot2, "architecture.md")) ? `- [Hub architecture](${targetBase}/blob/${targetBranch}/architecture.md)` : "",
-    (0, import_node_fs38.existsSync)((0, import_node_path36.join)(repoRoot2, "docs", "Architecture", "agentic-dev-environment.md")) ? `- [Agentic development environment](${targetBase}/blob/${targetBranch}/docs/Architecture/agentic-dev-environment.md)` : ""
+    (0, import_node_fs39.existsSync)((0, import_node_path36.join)(repoRoot2, "architecture.md")) ? `- [Hub architecture](${targetBase}/blob/${targetBranch}/architecture.md)` : "",
+    (0, import_node_fs39.existsSync)((0, import_node_path36.join)(repoRoot2, "docs", "Architecture", "agentic-dev-environment.md")) ? `- [Agentic development environment](${targetBase}/blob/${targetBranch}/docs/Architecture/agentic-dev-environment.md)` : ""
   ].filter(Boolean);
   if (orgDocs.length) lines2.push("", "## Organisation docs", "", ...orgDocs);
   return { projectId: project2.projectId, projectName, targetRepo: targetRepo2, memberRepos, shortDescription, readme: `${lines2.join("\n")}
@@ -51344,7 +51614,7 @@ async function syncProjectInfo(plan, client, apply) {
 }
 
 // src/train-commands.ts
-var import_node_fs39 = require("node:fs");
+var import_node_fs40 = require("node:fs");
 var import_node_path37 = require("node:path");
 init_cli_shared();
 init_clean_exit();
@@ -51360,7 +51630,7 @@ function resolveReleaseBumpIntent(raw) {
 }
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs39.readFileSync)((0, import_node_path37.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs40.readFileSync)((0, import_node_path37.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -51734,7 +52004,7 @@ function prTitleRefusal(title) {
 
 // src/command-register-collaboration.ts
 var import_node_child_process17 = require("node:child_process");
-var import_node_fs47 = require("node:fs");
+var import_node_fs48 = require("node:fs");
 var import_promises8 = require("node:fs/promises");
 init_clean_exit();
 init_cli_shared();
@@ -51875,7 +52145,7 @@ init_github_client();
 init_github_quota();
 
 // src/issue-commands.ts
-var import_node_fs40 = require("node:fs");
+var import_node_fs41 = require("node:fs");
 var import_node_crypto16 = require("node:crypto");
 init_cli_shared();
 init_clean_exit();
@@ -52068,7 +52338,7 @@ async function editIssue(client, options, deps = {}) {
   const url = `https://github.com/${repo}/issues/${parsed.number}`;
   const patch = {};
   let bodyChanged = false;
-  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs40.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
+  const textDeps = () => deps.textDeps ?? { readFile: (p, e) => Promise.resolve((0, import_node_fs41.readFileSync)(p, e)), readStdin: () => Promise.resolve("") };
   if (options.titleFile !== void 0) {
     patch.title = await resolveIssueTitle({ title: options.title, titleFile: options.titleFile }, textDeps());
   } else if (options.title !== void 0) {
@@ -52731,7 +53001,7 @@ function extendCreateCommand(issue, batchAttach) {
     if (opts.batch) {
       let specs;
       try {
-        const raw = (0, import_node_fs40.readFileSync)(opts.batch, "utf8");
+        const raw = (0, import_node_fs41.readFileSync)(opts.batch, "utf8");
         specs = JSON.parse(raw);
         if (!Array.isArray(specs)) {
           const top = specs === null ? "null" : typeof specs === "object" ? `an object with keys: ${Object.keys(specs).join(", ") || "(none)"}` : `a ${typeof specs}`;
@@ -52808,7 +53078,7 @@ ${lines2}`, {
 }
 
 // src/post-merge-recon.ts
-var import_node_fs41 = require("node:fs");
+var import_node_fs42 = require("node:fs");
 var import_node_path39 = require("node:path");
 
 // src/cross-repo-filing-issue.ts
@@ -52978,16 +53248,16 @@ function buildPostMergeReconRecovery(input) {
 }
 function writePostMergeReconRecovery(cwd, recovery) {
   const path2 = postMergeReconStatePath(cwd, recovery.repo, recovery.pr);
-  (0, import_node_fs41.mkdirSync)((0, import_node_path39.dirname)(path2), { recursive: true });
-  (0, import_node_fs41.writeFileSync)(path2, `${JSON.stringify(recovery, null, 2)}
+  (0, import_node_fs42.mkdirSync)((0, import_node_path39.dirname)(path2), { recursive: true });
+  (0, import_node_fs42.writeFileSync)(path2, `${JSON.stringify(recovery, null, 2)}
 `, "utf8");
   return path2;
 }
 function clearPostMergeReconRecovery(cwd, repo, pr) {
   const path2 = postMergeReconStatePath(cwd, repo, pr);
-  if (!(0, import_node_fs41.existsSync)(path2)) return;
+  if (!(0, import_node_fs42.existsSync)(path2)) return;
   try {
-    (0, import_node_fs41.unlinkSync)(path2);
+    (0, import_node_fs42.unlinkSync)(path2);
   } catch {
   }
 }
@@ -53463,7 +53733,7 @@ function registerPrLifecycleCommands(program3) {
 
 // src/review-verdict.ts
 var import_node_child_process14 = require("node:child_process");
-var import_node_fs42 = require("node:fs");
+var import_node_fs43 = require("node:fs");
 var import_node_os22 = require("node:os");
 var import_node_path40 = require("node:path");
 init_cli_shared();
@@ -53630,15 +53900,15 @@ async function readPrIssueComments(number, repo) {
   return comments;
 }
 async function postPrCommentFromFile(number, repo, body) {
-  const dir = (0, import_node_fs42.mkdtempSync)((0, import_node_path40.join)((0, import_node_os22.tmpdir)(), "mmi-review-verdict-"));
+  const dir = (0, import_node_fs43.mkdtempSync)((0, import_node_path40.join)((0, import_node_os22.tmpdir)(), "mmi-review-verdict-"));
   const path2 = (0, import_node_path40.join)(dir, "body.md");
   try {
-    (0, import_node_fs42.writeFileSync)(path2, body, "utf8");
+    (0, import_node_fs43.writeFileSync)(path2, body, "utf8");
     const { stdout } = await execFileP("gh", ["pr", "comment", number, "--repo", repo, "--body-file", path2], { timeout: GH_MUTATION_TIMEOUT_MS });
     return stdout.trim();
   } finally {
     try {
-      (0, import_node_fs42.rmSync)(dir, { recursive: true, force: true });
+      (0, import_node_fs43.rmSync)(dir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -53876,17 +54146,17 @@ async function prCreateClaimRefusal(body, repoOption, deps = {}) {
 }
 
 // src/worktree-residue-sweep.ts
-var import_node_fs46 = require("node:fs");
+var import_node_fs47 = require("node:fs");
 var import_node_path44 = require("node:path");
 
 // src/worktree-merge-cleanup.ts
-var import_node_fs45 = require("node:fs");
+var import_node_fs46 = require("node:fs");
 var import_node_path43 = require("node:path");
 init_cli_shared();
 
 // src/stage-runner.ts
 var import_node_child_process16 = require("node:child_process");
-var import_node_fs44 = require("node:fs");
+var import_node_fs45 = require("node:fs");
 var import_node_path42 = require("node:path");
 var import_node_net = require("node:net");
 var import_node_util5 = require("node:util");
@@ -53897,7 +54167,7 @@ function normalizeEol2(s) {
 }
 
 // src/env-detection.ts
-var import_node_fs43 = require("node:fs");
+var import_node_fs44 = require("node:fs");
 var import_node_path41 = require("node:path");
 var SKIPPED_DIRS = /* @__PURE__ */ new Set([".git", "node_modules", "dist", ".jerv", ".pi", ".venv", "venv"]);
 function isEnvBaseName(name) {
@@ -53908,7 +54178,7 @@ function findEnvFiles(root) {
   const walk2 = (dir, rel) => {
     let entries;
     try {
-      entries = (0, import_node_fs43.readdirSync)(dir, { withFileTypes: true });
+      entries = (0, import_node_fs44.readdirSync)(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -53922,7 +54192,7 @@ function findEnvFiles(root) {
       if (isEnvBaseName(entry.name)) {
         let isDir = false;
         try {
-          isDir = (0, import_node_fs43.lstatSync)((0, import_node_path41.join)(dir, entry.name)).isDirectory();
+          isDir = (0, import_node_fs44.lstatSync)((0, import_node_path41.join)(dir, entry.name)).isDirectory();
         } catch {
         }
         if (!isDir) found.push(relPath);
@@ -54061,12 +54331,12 @@ var DOCKER_TIMEOUT_MS = 15e3;
 function stageBash() {
   if (process.platform !== "win32") return "bash";
   const configured = process.env.SHELL;
-  if (configured && (0, import_node_path42.isAbsolute)(configured) && /[/\\]bash(?:\.exe)?$/i.test(configured) && !/[/\\](?:System32|Sysnative)[/\\]bash(?:\.exe)?$/i.test(configured) && (0, import_node_fs44.existsSync)(configured)) return configured;
+  if (configured && (0, import_node_path42.isAbsolute)(configured) && /[/\\]bash(?:\.exe)?$/i.test(configured) && !/[/\\](?:System32|Sysnative)[/\\]bash(?:\.exe)?$/i.test(configured) && (0, import_node_fs45.existsSync)(configured)) return configured;
   const candidates = [
     (0, import_node_path42.join)(process.env.ProgramFiles || "C:\\Program Files", "Git", "bin", "bash.exe"),
     ...process.env.LOCALAPPDATA ? [(0, import_node_path42.join)(process.env.LOCALAPPDATA, "Programs", "Git", "bin", "bash.exe")] : []
   ];
-  const bash = candidates.find((path2) => (0, import_node_fs44.existsSync)(path2));
+  const bash = candidates.find((path2) => (0, import_node_fs45.existsSync)(path2));
   if (!bash) throw new Error("Local stages require Git Bash on Windows. Install Git for Windows or set SHELL to its absolute bash.exe path.");
   return bash;
 }
@@ -54422,7 +54692,7 @@ function stageProcessEnv(stagePort, extraEnv) {
 function composeResolvesPort(cwd) {
   if (process.env.PORT) return true;
   const envFile = (0, import_node_path42.join)(cwd, ".env");
-  return (0, import_node_fs44.existsSync)(envFile) && envFileKeys((0, import_node_fs44.readFileSync)(envFile, "utf8")).has("PORT");
+  return (0, import_node_fs45.existsSync)(envFile) && envFileKeys((0, import_node_fs45.readFileSync)(envFile, "utf8")).has("PORT");
 }
 function stageComposeEnv(config, stagePort, vaultEnvMerge, cwd) {
   const composeProject = config.env?.COMPOSE_PROJECT_NAME ?? vaultEnvMerge?.COMPOSE_PROJECT_NAME ?? stageComposeProjectName(cwd);
@@ -54437,13 +54707,13 @@ function stageComposeEnv(config, stagePort, vaultEnvMerge, cwd) {
 function stageComposeFiles(cwd) {
   const files = ["docker-compose.yml"];
   for (const conventional of ["docker-compose.override.yml", "docker-compose.override.yaml"]) {
-    if ((0, import_node_fs44.existsSync)((0, import_node_path42.join)(cwd, conventional))) files.push(conventional);
+    if ((0, import_node_fs45.existsSync)((0, import_node_path42.join)(cwd, conventional))) files.push(conventional);
   }
   return [...files, RUNTIME_ENV_OVERRIDE_RELPATH];
 }
 async function prepareRuntimeEnvPassthrough(cwd, composeEnv, vaultEnvMerge) {
   const keys = Object.keys(vaultEnvMerge ?? {});
-  if (!keys.length || !(0, import_node_fs44.existsSync)((0, import_node_path42.join)(cwd, "docker-compose.yml"))) return {};
+  if (!keys.length || !(0, import_node_fs45.existsSync)((0, import_node_path42.join)(cwd, "docker-compose.yml"))) return {};
   let configJson;
   try {
     const { stdout } = await execFileP3("docker", ["compose", "config", "--format", "json"], {
@@ -54460,20 +54730,20 @@ async function prepareRuntimeEnvPassthrough(cwd, composeEnv, vaultEnvMerge) {
   const body = renderRuntimeEnvOverride(runtimeEnvMarkedServices(configJson), keys, runtimeEnvExcludes(configJson), runtimeEnvSelects(configJson));
   if (!body) return {};
   const overridePath = (0, import_node_path42.join)(cwd, RUNTIME_ENV_OVERRIDE_RELPATH);
-  (0, import_node_fs44.mkdirSync)((0, import_node_path42.join)(cwd, "tmp", "stage"), { recursive: true });
-  (0, import_node_fs44.writeFileSync)(overridePath, body, "utf8");
+  (0, import_node_fs45.mkdirSync)((0, import_node_path42.join)(cwd, "tmp", "stage"), { recursive: true });
+  (0, import_node_fs45.writeFileSync)(overridePath, body, "utf8");
   return stageComposeFileEnv(stageComposeFiles(cwd));
 }
 async function ensureStageRuntimeEnv(config, opts, cwd) {
   if (!config.ensureEnv) return;
   const target = (0, import_node_path42.join)(cwd, config.ensureEnv.target);
   const example = (0, import_node_path42.join)(cwd, config.ensureEnv.example);
-  if (!(0, import_node_fs44.existsSync)(target) && (0, import_node_fs44.existsSync)(example)) {
-    (0, import_node_fs44.copyFileSync)(example, target);
-  } else if ((0, import_node_fs44.existsSync)(target) && (0, import_node_fs44.existsSync)(example)) {
-    const stale = detectStaleEnvFile((0, import_node_fs44.readFileSync)(example, "utf8"), (0, import_node_fs44.readFileSync)(target, "utf8"), {
-      exampleMtimeMs: (0, import_node_fs44.statSync)(example).mtimeMs,
-      targetMtimeMs: (0, import_node_fs44.statSync)(target).mtimeMs
+  if (!(0, import_node_fs45.existsSync)(target) && (0, import_node_fs45.existsSync)(example)) {
+    (0, import_node_fs45.copyFileSync)(example, target);
+  } else if ((0, import_node_fs45.existsSync)(target) && (0, import_node_fs45.existsSync)(example)) {
+    const stale = detectStaleEnvFile((0, import_node_fs45.readFileSync)(example, "utf8"), (0, import_node_fs45.readFileSync)(target, "utf8"), {
+      exampleMtimeMs: (0, import_node_fs45.statSync)(example).mtimeMs,
+      targetMtimeMs: (0, import_node_fs45.statSync)(target).mtimeMs
     });
     if (stale) {
       const msg = `stale ${config.ensureEnv.target} (${stale}) \u2014 delete it or refresh from ${config.ensureEnv.example} before re-running mmi-cli stage`;
@@ -54481,8 +54751,8 @@ async function ensureStageRuntimeEnv(config, opts, cwd) {
       console.error(`mmi-cli stage: ${msg} (allowed via --allow-stale-env)`);
     }
   }
-  if (opts.vaultEnvMerge && Object.keys(opts.vaultEnvMerge).length && (0, import_node_fs44.existsSync)(target)) {
-    (0, import_node_fs44.writeFileSync)(target, mergeEnvSecretsIntoFile((0, import_node_fs44.readFileSync)(target, "utf8"), opts.vaultEnvMerge), "utf8");
+  if (opts.vaultEnvMerge && Object.keys(opts.vaultEnvMerge).length && (0, import_node_fs45.existsSync)(target)) {
+    (0, import_node_fs45.writeFileSync)(target, mergeEnvSecretsIntoFile((0, import_node_fs45.readFileSync)(target, "utf8"), opts.vaultEnvMerge), "utf8");
   }
 }
 async function gitText(cwd, args) {
@@ -54512,20 +54782,20 @@ async function resolveGlobalStatePath(cwd, explicit) {
   return void 0;
 }
 function readState(path2) {
-  if (!(0, import_node_fs44.existsSync)(path2)) return null;
+  if (!(0, import_node_fs45.existsSync)(path2)) return null;
   try {
-    return JSON.parse((0, import_node_fs44.readFileSync)(path2, "utf8"));
+    return JSON.parse((0, import_node_fs45.readFileSync)(path2, "utf8"));
   } catch {
     return null;
   }
 }
 function mkdirFor(path2) {
   const dir = path2.slice(0, Math.max(path2.lastIndexOf("/"), path2.lastIndexOf("\\")));
-  (0, import_node_fs44.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs45.mkdirSync)(dir, { recursive: true });
 }
 function writeState(path2, state) {
   mkdirFor(path2);
-  (0, import_node_fs44.writeFileSync)(path2, JSON.stringify(state, null, 2), "utf8");
+  (0, import_node_fs45.writeFileSync)(path2, JSON.stringify(state, null, 2), "utf8");
 }
 function writeStagePortReservation(port, cwd, statePath, globalStatePath, now) {
   const reservation = {
@@ -54554,7 +54824,7 @@ async function cleanupStageState(state, paths, timeoutMs, fallbackCwd, currentEn
     );
   }
   for (const path2 of [...new Set(paths.filter((p) => Boolean(p)))]) {
-    (0, import_node_fs44.rmSync)(path2, { force: true });
+    (0, import_node_fs45.rmSync)(path2, { force: true });
   }
 }
 async function killTree(pid) {
@@ -54801,8 +55071,8 @@ async function runStage(config = {}, opts = {}) {
       });
     }
   } catch (e) {
-    (0, import_node_fs44.rmSync)(statePath, { force: true });
-    if (globalStatePath && globalStatePath !== statePath) (0, import_node_fs44.rmSync)(globalStatePath, { force: true });
+    (0, import_node_fs45.rmSync)(statePath, { force: true });
+    if (globalStatePath && globalStatePath !== statePath) (0, import_node_fs45.rmSync)(globalStatePath, { force: true });
     throw e;
   }
   const started = await startStage(config, {
@@ -54823,7 +55093,7 @@ function normPath2(p) {
 function unlinkNodeModulesJunction(wtPath) {
   const nm = (0, import_node_path43.join)(wtPath, "node_modules");
   try {
-    if ((0, import_node_fs45.lstatSync)(nm).isSymbolicLink()) (0, import_node_fs45.rmdirSync)(nm);
+    if ((0, import_node_fs46.lstatSync)(nm).isSymbolicLink()) (0, import_node_fs46.rmdirSync)(nm);
     return { ok: true };
   } catch (e) {
     if (e.code === "ENOENT") return { ok: true };
@@ -54834,8 +55104,8 @@ function defaultSleep2(ms) {
   return new Promise((resolve7) => setTimeout(resolve7, ms));
 }
 async function removeResidueDirectory(wtPath, options = {}) {
-  const { sleep: sleep2 = defaultSleep2, removeEmptyDir = import_node_fs45.rmdirSync, exists = import_node_fs45.existsSync } = options;
-  const removeRecursive = options.removeRecursive ?? ((path2) => (0, import_node_fs45.rmSync)(path2, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }));
+  const { sleep: sleep2 = defaultSleep2, removeEmptyDir = import_node_fs46.rmdirSync, exists = import_node_fs46.existsSync } = options;
+  const removeRecursive = options.removeRecursive ?? ((path2) => (0, import_node_fs46.rmSync)(path2, { recursive: true, force: true, maxRetries: 10, retryDelay: 100 }));
   const junction = unlinkNodeModulesJunction(wtPath);
   if (!junction.ok) return junction;
   try {
@@ -54961,21 +55231,21 @@ async function listNestedIgnoredNodeModules(wtPath, execGit) {
   return out.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.endsWith("node_modules/") && line !== "node_modules/").map((line) => (0, import_node_path43.join)(wtPath, line.slice(0, -1)));
 }
 function safeRemoveTree(path2) {
-  const stat4 = (0, import_node_fs45.lstatSync)(path2);
+  const stat4 = (0, import_node_fs46.lstatSync)(path2);
   if (stat4.isSymbolicLink()) {
     try {
-      (0, import_node_fs45.rmdirSync)(path2);
+      (0, import_node_fs46.rmdirSync)(path2);
     } catch {
-      (0, import_node_fs45.unlinkSync)(path2);
+      (0, import_node_fs46.unlinkSync)(path2);
     }
     return;
   }
   if (stat4.isDirectory()) {
-    for (const entry of (0, import_node_fs45.readdirSync)(path2)) safeRemoveTree((0, import_node_path43.join)(path2, entry));
-    (0, import_node_fs45.rmdirSync)(path2);
+    for (const entry of (0, import_node_fs46.readdirSync)(path2)) safeRemoveTree((0, import_node_path43.join)(path2, entry));
+    (0, import_node_fs46.rmdirSync)(path2);
     return;
   }
-  (0, import_node_fs45.unlinkSync)(path2);
+  (0, import_node_fs46.unlinkSync)(path2);
 }
 async function removeWorktreeNodeModules(wtPath) {
   try {
@@ -54991,7 +55261,7 @@ function errorMessage(e) {
 }
 function resolvedOrRaw(path2) {
   try {
-    return normPath2((0, import_node_fs45.realpathSync)(path2));
+    return normPath2((0, import_node_fs46.realpathSync)(path2));
   } catch {
     return normPath2(path2);
   }
@@ -54999,10 +55269,10 @@ function resolvedOrRaw(path2) {
 function unlinkEscapingReparsePoints(root, primaryRoot) {
   let realRoot;
   try {
-    if ((0, import_node_fs45.lstatSync)(root).isSymbolicLink()) {
+    if ((0, import_node_fs46.lstatSync)(root).isSymbolicLink()) {
       return { ok: false, error: `delete root ${normPath2(root)} is a reparse point resolving to ${resolvedOrRaw(root)}` };
     }
-    realRoot = normPath2((0, import_node_fs45.realpathSync)(root));
+    realRoot = normPath2((0, import_node_fs46.realpathSync)(root));
   } catch (e) {
     if (e.code === "ENOENT") return { ok: true, unlinked: [] };
     return { ok: false, error: `cannot resolve delete root ${normPath2(root)}: ${errorMessage(e)}` };
@@ -55018,7 +55288,7 @@ function unlinkEscapingReparsePoints(root, primaryRoot) {
     const dir = stack.pop();
     let entries;
     try {
-      entries = (0, import_node_fs45.readdirSync)(dir, { withFileTypes: true });
+      entries = (0, import_node_fs46.readdirSync)(dir, { withFileTypes: true });
     } catch (e) {
       if (e.code === "ENOENT") continue;
       return { ok: false, error: `cannot scan ${normPath2(dir)} for reparse points: ${errorMessage(e)}` };
@@ -55028,7 +55298,7 @@ function unlinkEscapingReparsePoints(root, primaryRoot) {
       if (entry.isSymbolicLink()) {
         let target = "";
         try {
-          target = normPath2((0, import_node_fs45.realpathSync)(child2));
+          target = normPath2((0, import_node_fs46.realpathSync)(child2));
         } catch {
           target = "";
         }
@@ -55211,7 +55481,7 @@ async function cleanupPrMergeLocalBranch(branch, options) {
     return report;
   }
   const execGit = options.execGit ?? (async (args) => (await execFileP("git", args, { timeout: GIT_TIMEOUT_MS })).stdout);
-  const pathExists = options.pathExists ?? import_node_fs45.existsSync;
+  const pathExists = options.pathExists ?? import_node_fs46.existsSync;
   let afterWorktrees = [];
   try {
     afterWorktrees = parseGitWorktreePorcelain(await execGit(["worktree", "list", "--porcelain"]));
@@ -55498,7 +55768,7 @@ function residueLedgerPath(gitCommonDir) {
 }
 function readPaths(file, deps) {
   try {
-    const parsed = JSON.parse((deps.readLedger ?? ((f) => (0, import_node_fs46.readFileSync)(f, "utf8")))(file));
+    const parsed = JSON.parse((deps.readLedger ?? ((f) => (0, import_node_fs47.readFileSync)(f, "utf8")))(file));
     return Array.isArray(parsed) ? parsed.filter((p) => typeof p === "string") : [];
   } catch {
     return [];
@@ -55507,8 +55777,8 @@ function readPaths(file, deps) {
 function writePaths(file, paths, deps) {
   try {
     const write = deps.writeLedger ?? ((f, t) => {
-      (0, import_node_fs46.mkdirSync)((0, import_node_path44.dirname)(f), { recursive: true });
-      (0, import_node_fs46.writeFileSync)(f, t, "utf8");
+      (0, import_node_fs47.mkdirSync)((0, import_node_path44.dirname)(f), { recursive: true });
+      (0, import_node_fs47.writeFileSync)(f, t, "utf8");
     });
     write(file, `${JSON.stringify([...new Set(paths)], null, 1)}
 `);
@@ -55522,17 +55792,17 @@ function recordResidue(gitCommonDir, path2, deps = {}) {
   writePaths(file, paths, deps);
 }
 async function sweepWorktreeResidue(gitCommonDir, registered, deps = {}) {
-  const exists = deps.exists ?? import_node_fs46.existsSync;
-  const readDir = deps.readDir ?? ((p) => (0, import_node_fs46.readdirSync)(p));
+  const exists = deps.exists ?? import_node_fs47.existsSync;
+  const readDir = deps.readDir ?? ((p) => (0, import_node_fs47.readdirSync)(p));
   const isDir = deps.isDir ?? ((p) => {
     try {
-      return (0, import_node_fs46.statSync)(p).isDirectory();
+      return (0, import_node_fs47.statSync)(p).isDirectory();
     } catch {
       return false;
     }
   });
   const removeRecorded = deps.removeRecorded ?? ((p) => removeResidueDirectory(p));
-  const removeEmpty = deps.removeEmpty ?? ((p) => (0, import_node_fs46.rmdirSync)(p));
+  const removeEmpty = deps.removeEmpty ?? ((p) => (0, import_node_fs47.rmdirSync)(p));
   const report = { swept: [], kept: [], dropped: [], emptyRemoved: [], unrecorded: [] };
   const live = new Set(registered.map(norm));
   const primary = registered[0] ? norm(registered[0]) : void 0;
@@ -55612,8 +55882,8 @@ function argvWantsJson2() {
 function hubRoot() {
   const fromPkg = (0, import_node_path45.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs47.existsSync)((0, import_node_path45.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs47.existsSync)((0, import_node_path45.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs48.existsSync)((0, import_node_path45.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs48.existsSync)((0, import_node_path45.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 function ciAuditDeps() {
@@ -55626,7 +55896,7 @@ function ciAuditDeps() {
     readSeedFile: (path2) => {
       if (!root) return null;
       const fullPath = (0, import_node_path45.join)(root, path2);
-      return (0, import_node_fs47.existsSync)(fullPath) ? (0, import_node_fs47.readFileSync)(fullPath, "utf8") : null;
+      return (0, import_node_fs48.existsSync)(fullPath) ? (0, import_node_fs48.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
@@ -56440,10 +56710,10 @@ ${list}`);
   });
   async function listCiWorkflowPaths(cwd = process.cwd()) {
     const wfDir = (0, import_node_path45.join)(cwd, ".github", "workflows");
-    if (!(0, import_node_fs47.existsSync)(wfDir)) return [];
-    return (0, import_node_fs47.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
+    if (!(0, import_node_fs48.existsSync)(wfDir)) return [];
+    return (0, import_node_fs48.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
       try {
-        return workflowReportsPrChecks((0, import_node_fs47.readFileSync)((0, import_node_path45.join)(wfDir, name), "utf8"));
+        return workflowReportsPrChecks((0, import_node_fs48.readFileSync)((0, import_node_path45.join)(wfDir, name), "utf8"));
       } catch {
         return true;
       }
@@ -56648,7 +56918,7 @@ ${list}`);
   jsonParity(pr.command("review-verdict <number>").description("post an explicit review verdict comment: computes the PR diff patch-id and head sha, renders the v1 contract body, and posts it as a PR comment").requiredOption("--repo <owner/repo>", "target repo").requiredOption("--verdict <verdict>", `one of ${REVIEW_VERDICTS.join("|")}`).requiredOption("--scope <text>", "one line: what was reviewed").requiredOption("--risk <text>", "one line: the residual risk").option("--unverified <text>", "a claim the reviewer could not verify (repeatable)", (v, acc) => [...acc, v], []).requiredOption("--reviewer <id>", "reviewer seat or model id").option("--findings-file <path>", "Markdown findings appended after the JSON block")).action(async (number, o) => {
     if (!isReviewVerdict(o.verdict)) return fail(`pr review-verdict: --verdict must be one of ${REVIEW_VERDICTS.join("|")} (got ${o.verdict})`);
     const verdict = o.verdict;
-    const findings = o.findingsFile ? (0, import_node_fs47.readFileSync)(o.findingsFile, "utf8") : void 0;
+    const findings = o.findingsFile ? (0, import_node_fs48.readFileSync)(o.findingsFile, "utf8") : void 0;
     let patch;
     let head;
     try {
@@ -56862,21 +57132,21 @@ ${list}`);
         // #8456: a pinned land has no update lane at all.
         ...o.expectHead ? {} : { updateBranch: (prNumber, repo) => prLandUpdateBranch(prNumber, repo, Boolean(o.repo)) },
         pollMerged: async (prNumber, repo, deadlineMs) => {
-          let lastFailure;
+          let lastFailure2;
           while (Date.now() < deadlineMs) {
             const read = await pollRestPrMerged(prNumber, repo);
             if (read.state === "merged") return true;
             if (read.state === "failed") {
-              lastFailure = read.error;
+              lastFailure2 = read.error;
               console.warn(`pr land: merged-state read FAILED (${read.error}) \u2014 retrying; this is not evidence the PR is unmerged`);
             } else {
-              lastFailure = void 0;
+              lastFailure2 = void 0;
             }
             await new Promise((resolve7) => setTimeout(resolve7, PR_LAND_POLL_MS));
           }
-          if (lastFailure) {
+          if (lastFailure2) {
             throw new Error(
-              `pr land: could not verify whether PR #${prNumber} merged \u2014 the last merged-state read FAILED (${lastFailure}). The auto-merge enqueue stands; read the PR directly (gh pr view ${prNumber} --repo ${repo} --json merged,state) and rerun cleanup if it merged.`
+              `pr land: could not verify whether PR #${prNumber} merged \u2014 the last merged-state read FAILED (${lastFailure2}). The auto-merge enqueue stands; read the PR directly (gh pr view ${prNumber} --repo ${repo} --json merged,state) and rerun cleanup if it merged.`
             );
           }
           return false;
@@ -56923,7 +57193,7 @@ ${list}`);
     const cleanupMerged = async (r) => {
       if (opts.preserveWorktree) return "cleanup skipped (--preserve-worktree)";
       const ran = await execFileP(process.execPath, [process.argv[1], ...canonicalArgvFor(["pr", "merge", r.pr, "--repo", r.repo])], {
-        cwd: (0, import_node_fs47.existsSync)(cwd0) ? cwd0 : primaryRoot0,
+        cwd: (0, import_node_fs48.existsSync)(cwd0) ? cwd0 : primaryRoot0,
         timeout: GH_MUTATION_TIMEOUT_MS * 3
       }).then((x) => ({ stdout: x.stdout, stderr: x.stderr }), (e) => ({ stdout: e.stdout ?? "", stderr: e.stderr ?? "" }));
       const json = ran.stdout.split("\n").reverse().find((l) => l.startsWith("{"));
@@ -56993,7 +57263,7 @@ ${list}`);
     const mergeSquashBody = squashBodyTextForMerge(
       closingGuardInput,
       method === "--squash",
-      o.squashBodyFile ? (0, import_node_fs47.readFileSync)(o.squashBodyFile, "utf8") : void 0
+      o.squashBodyFile ? (0, import_node_fs48.readFileSync)(o.squashBodyFile, "utf8") : void 0
     );
     if (!o.squashBodyFile) warnSquashBodyClosingStrip("pr merge", closingGuardInput, mergeSquashBody);
     const closingGuardVerdict = evaluateClosingGuard(closingGuardInput, {
@@ -57144,7 +57414,7 @@ ${list}`);
         }
         if (!repoForPostCleanup) throw e;
         console.warn(`pr merge: gh GraphQL rate-limited \u2014 merging PR #${number} via REST PUT instead (#4588).`);
-        const commitMessage = bodyFile ? (0, import_node_fs47.readFileSync)(bodyFile, "utf8") : void 0;
+        const commitMessage = bodyFile ? (0, import_node_fs48.readFileSync)(bodyFile, "utf8") : void 0;
         await defaultGitHubClient().rest("PUT", `repos/${repoForPostCleanup}/pulls/${number}/merge`, {
           body: { merge_method: method.slice(2), ...commitMessage ? { commit_message: commitMessage } : {} },
           timeoutMs: GH_MUTATION_TIMEOUT_MS
@@ -57277,7 +57547,7 @@ ${list}`);
           preserveWorktree: o.preserveWorktree,
           gcAcknowledged: o.gc,
           expectedHeadOid: headRefOid,
-          pathExists: (p) => (0, import_node_fs47.existsSync)(p),
+          pathExists: (p) => (0, import_node_fs48.existsSync)(p),
           // #5899: pin cleanup git calls to the main checkout — the task worktree this process may be
           // standing in is removed mid-cleanup, so a cwd-relative invocation fails with
           // 'fatal: not a git repository' and leaves a spurious partial-cleanup exit.
@@ -57539,6 +57809,8 @@ function trainApplyDeps() {
     // parses, so the ONE self-spawn seam derives the prefix through the same rule the refusal names.
     runSelf: async (args) => (await execFileP(process.execPath, [process.argv[1], ...canonicalArgvFor(args)], { timeout: 3e4 })).stdout,
     trainAuthority: async (repo) => {
+      const ci2 = await hubReleaseCiAuthority(repo, { env: process.env, getJson: pinnedGitHubGetJson(process.env.GH_TOKEN) });
+      if (ci2) return ci2;
       const verdict = await fetchTrainAuthority(repo, registryClientDeps(await loadConfig()));
       return verdict.ok ? {
         ok: true,
@@ -57609,6 +57881,7 @@ function trainApplyDeps() {
         return (await execFileP(file, cmdArgs, { timeout: GH_TRAIN_TIMEOUT_MS, ...env ? { env } : {} })).stdout;
       },
       postAnnouncement: async (payload) => {
+        if (hubReleaseCiRun(process.env)) throw new Error(HUB_RELEASE_CI_ANNOUNCE_DEFERRED);
         const res = await releaseAnnouncement(payload, registryClientDeps(await loadConfig()));
         const body = res.body;
         if (!res.ok) throw new Error(body?.error ?? `Hub announcement failed (HTTP ${res.status}); verify delivery before retrying`);
@@ -57692,11 +57965,13 @@ function renderReleaseSupersedeDeploy(r) {
 }
 function renderReleaseSupersedePublish(r) {
   const base = `mmi-cli devops release --supersede-publish --apply: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}`;
-  return r.gatewayDeploy ? `${base}; the deferred Jerv Gateway operator-host deploy leg was run and verified during the supersession (jerv-gateway=complete): ${r.gatewayDeploy.note}` : base;
+  if (!r.gatewayDeploy) return base;
+  return r.gatewayDeploy.state === "skipped" ? `${base}; the deferred Jerv Gateway operator-host deploy leg was SKIPPED because the failed publish never produced an installer payload (jerv-gateway=skipped, superseded): ${r.gatewayDeploy.note}` : `${base}; the deferred Jerv Gateway operator-host deploy leg was run and verified during the supersession (jerv-gateway=complete): ${r.gatewayDeploy.note}`;
 }
 function renderReleaseSupersedeDeployAndPublish(r) {
   const base = `mmi-cli devops release --supersede-deploy --supersede-publish --apply: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}`;
-  return r.gatewayDeploy ? `${base}; the deferred Jerv Gateway operator-host deploy leg was run and verified during the closure (jerv-gateway=complete): ${r.gatewayDeploy.note}` : base;
+  if (!r.gatewayDeploy) return base;
+  return r.gatewayDeploy.state === "skipped" ? `${base}; the deferred Jerv Gateway operator-host deploy leg was SKIPPED because the failed publish never produced an installer payload (jerv-gateway=skipped, superseded): ${r.gatewayDeploy.note}` : `${base}; the deferred Jerv Gateway operator-host deploy leg was run and verified during the closure (jerv-gateway=complete): ${r.gatewayDeploy.note}`;
 }
 function renderReleasePublishRetry(r) {
   return `mmi-cli devops release --retry-publish: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}; ${r.runUrl}`;
@@ -58118,7 +58393,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
           if (!guard.ok) return fail(`release: ${guard.message}`);
         }
         try {
-          const result = await runReleaseAbort(trainApplyDeps(), { approved: true });
+          const result = await runReleaseAbort(trainApplyDeps(), { approved: true, ciCheckout: hubReleaseCiRun(process.env) !== null });
           return emitTrainResult("release --abort", o.json ? JSON.stringify(result, null, 2) : renderReleaseAbort(result), o.out);
         } catch (e) {
           return failGraceful(`release --abort: ${e.message}`);
@@ -58587,11 +58862,11 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}, summaryFileTr,
   const checkout = async (repo) => {
     if (repo === SUITE_REPO) return root;
     const target = (0, import_node_path47.join)(base, repo.split("/")[1]);
-    if (!(0, import_node_fs48.existsSync)(target)) {
-      (0, import_node_fs48.mkdirSync)(base, { recursive: true });
+    if (!(0, import_node_fs49.existsSync)(target)) {
+      (0, import_node_fs49.mkdirSync)(base, { recursive: true });
       await exec("git", ["clone", "--quiet", "--branch", "development", `https://github.com/${repo}.git`, target], root, WATCH_TIMEOUT);
     }
-    if (!(0, import_node_fs48.existsSync)((0, import_node_path47.join)(target, ".git"))) throw new Error(`${repo}: suite checkout has no .git at ${target}; stop`);
+    if (!(0, import_node_fs49.existsSync)((0, import_node_path47.join)(target, ".git"))) throw new Error(`${repo}: suite checkout has no .git at ${target}; stop`);
     const origin = await exec("git", ["remote", "get-url", "origin"], target);
     if (!origin.toLowerCase().endsWith(`/${repo.toLowerCase()}.git`) && !origin.toLowerCase().endsWith(`/${repo.toLowerCase()}`))
       throw new Error(`${repo}: suite checkout origin mismatch at ${target}; stop`);
@@ -58898,9 +59173,9 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}, summaryFileTr,
       const body = await gh(["release", "view", leadTag, "--repo", SUITE_REPO, "--json", "body", "--jq", ".body"]);
       if (parseSuiteMapping(body)) return;
       const dir = suiteStateDir(root);
-      (0, import_node_fs48.mkdirSync)(dir, { recursive: true });
+      (0, import_node_fs49.mkdirSync)(dir, { recursive: true });
       const file = (0, import_node_path47.join)(dir, `notes-${leadTag}.md`);
-      (0, import_node_fs48.writeFileSync)(file, `${body}
+      (0, import_node_fs49.writeFileSync)(file, `${body}
 
 ${suiteMappingBlock(leadTag, mapping)}`);
       await gh(["release", "edit", leadTag, "--repo", SUITE_REPO, "--notes-file", file]);
@@ -58941,7 +59216,7 @@ ${suiteMappingBlock(leadTag, mapping)}`);
 
 // src/suite-commands.ts
 init_cli_shared();
-var import_node_fs49 = require("node:fs");
+var import_node_fs50 = require("node:fs");
 function parseMemberSummaryFiles(entries) {
   const memberSummaryFiles = {};
   for (const entry of entries) {
@@ -59035,7 +59310,7 @@ function registerSuiteCommands(program3) {
       try {
         const io = suiteTrainIo(root);
         retired = await retireFailedLeadRcLedger({ ledgerPath: releaseLedgerPath(root), rcHead: () => io.head(SUITE_REPO, "rc").then((h) => h ?? void 0), markAbandoned: io.markAbandoned }, o.ownerGo === true);
-        if (retired && !(0, import_node_fs49.existsSync)(io.recordPath)) {
+        if (retired && !(0, import_node_fs50.existsSync)(io.recordPath)) {
           console.log(o.json ? JSON.stringify({ retiredLeadRc: retired }, null, 2) : `suite abandon: retired the lead's failed, never-promoted rc candidate ${retired}; marked abandoned on origin (#7854)`);
           return;
         }
@@ -59229,7 +59504,7 @@ function suiteStatusDeps(github, registry2) {
 
 // src/packages-adopt-export.ts
 var import_node_child_process19 = require("node:child_process");
-var import_node_fs50 = require("node:fs");
+var import_node_fs51 = require("node:fs");
 var import_node_os23 = require("node:os");
 var import_node_path48 = require("node:path");
 var import_node_util6 = require("node:util");
@@ -59853,36 +60128,36 @@ async function adoptExport(opts, deps) {
   if (!/^sha256:[0-9a-f]{64}$/.test(opts.digest)) throw new Error("--digest must be sha256:<64 hex>, from the export run summary");
   const packagePath = (0, import_node_path48.join)(opts.dir, "package.json");
   const lockPath = (0, import_node_path48.join)(opts.dir, "package-lock.json");
-  const packageText = (0, import_node_fs50.readFileSync)(packagePath, "utf8");
-  const lockText = (0, import_node_fs50.readFileSync)(lockPath, "utf8");
-  const work = (0, import_node_fs50.mkdtempSync)((0, import_node_path48.join)((0, import_node_os23.tmpdir)(), "mmi-adopt-export-"));
+  const packageText = (0, import_node_fs51.readFileSync)(packagePath, "utf8");
+  const lockText = (0, import_node_fs51.readFileSync)(lockPath, "utf8");
+  const work = (0, import_node_fs51.mkdtempSync)((0, import_node_path48.join)((0, import_node_os23.tmpdir)(), "mmi-adopt-export-"));
   try {
     const run = JSON.parse((await deps.ghApi(`repos/${EXPORT_REPO}/actions/runs/${opts.run}`)).toString("utf8"));
-    (0, import_node_fs50.writeFileSync)((0, import_node_path48.join)(work, "expected.json"), JSON.stringify(expectedFromRun(run, opts)));
-    (0, import_node_fs50.writeFileSync)((0, import_node_path48.join)(work, "provider.json"), await deps.ghApi(`repos/${EXPORT_REPO}/actions/artifacts/${opts.artifact}`));
-    (0, import_node_fs50.writeFileSync)((0, import_node_path48.join)(work, "artifact.zip"), await deps.ghApi(`repos/${EXPORT_REPO}/actions/artifacts/${opts.artifact}/zip`));
+    (0, import_node_fs51.writeFileSync)((0, import_node_path48.join)(work, "expected.json"), JSON.stringify(expectedFromRun(run, opts)));
+    (0, import_node_fs51.writeFileSync)((0, import_node_path48.join)(work, "provider.json"), await deps.ghApi(`repos/${EXPORT_REPO}/actions/artifacts/${opts.artifact}`));
+    (0, import_node_fs51.writeFileSync)((0, import_node_path48.join)(work, "artifact.zip"), await deps.ghApi(`repos/${EXPORT_REPO}/actions/artifacts/${opts.artifact}/zip`));
     const script = (0, import_node_path48.join)(work, "package_export.py");
-    (0, import_node_fs50.writeFileSync)(script, package_export_default);
+    (0, import_node_fs51.writeFileSync)(script, package_export_default);
     await deps.python(script, ["verify", work, opts.ds, opts.screens]);
     const verified = (0, import_node_path48.join)(work, "verified");
-    const metadata = Object.fromEntries(PACKAGES.map(({ name, short: short3 }) => [name, JSON.parse((0, import_node_fs50.readFileSync)((0, import_node_path48.join)(verified, `${short3}.metadata.json`), "utf8"))]));
+    const metadata = Object.fromEntries(PACKAGES.map(({ name, short: short3 }) => [name, JSON.parse((0, import_node_fs51.readFileSync)((0, import_node_path48.join)(verified, `${short3}.metadata.json`), "utf8"))]));
     const plan = planAdoption(packageText, lockText, metadata);
     for (const { name } of plan.result.adopted) {
       const short3 = PACKAGES.find((p) => p.name === name).short;
       await deps.npm(["cache", "add", (0, import_node_path48.join)(verified, `${short3}.tgz`)], opts.dir);
     }
-    (0, import_node_fs50.writeFileSync)(packagePath, plan.packageText);
-    (0, import_node_fs50.writeFileSync)(lockPath, plan.lockText);
+    (0, import_node_fs51.writeFileSync)(packagePath, plan.packageText);
+    (0, import_node_fs51.writeFileSync)(lockPath, plan.lockText);
     try {
       await deps.npm(["ci", "--offline", "--ignore-scripts", "--no-audit", "--no-fund"], opts.dir);
     } catch (error) {
-      (0, import_node_fs50.writeFileSync)(packagePath, packageText);
-      (0, import_node_fs50.writeFileSync)(lockPath, lockText);
+      (0, import_node_fs51.writeFileSync)(packagePath, packageText);
+      (0, import_node_fs51.writeFileSync)(lockPath, lockText);
       throw new Error(`npm ci --offline failed, package.json and package-lock.json restored: ${error.message}`);
     }
     return plan.result;
   } finally {
-    (0, import_node_fs50.rmSync)(work, { recursive: true, force: true });
+    (0, import_node_fs51.rmSync)(work, { recursive: true, force: true });
   }
 }
 var execFileBuffer = (0, import_node_util6.promisify)(import_node_child_process19.execFile);
@@ -59947,12 +60222,12 @@ function registerPackagesCommands(program3) {
 init_cli_shared();
 
 // src/wave-status.ts
-var import_node_fs51 = require("node:fs");
+var import_node_fs52 = require("node:fs");
 function readStageSummary(worktreePath) {
   const statePath = stageStatePath(worktreePath);
-  if (!(0, import_node_fs51.existsSync)(statePath)) return void 0;
+  if (!(0, import_node_fs52.existsSync)(statePath)) return void 0;
   try {
-    const state = JSON.parse((0, import_node_fs51.readFileSync)(statePath, "utf8"));
+    const state = JSON.parse((0, import_node_fs52.readFileSync)(statePath, "utf8"));
     const port = typeof state.port === "number" ? state.port : void 0;
     if (port == null || !Number.isInteger(port) || port <= 0) return void 0;
     return { port, url: typeof state.url === "string" ? state.url : void 0 };
@@ -60009,7 +60284,7 @@ async function collectWaveStatus(deps) {
 // src/discovery-commands.ts
 init_github_client();
 init_cli_shared();
-var import_node_fs52 = require("node:fs");
+var import_node_fs53 = require("node:fs");
 var import_node_os24 = require("node:os");
 var import_node_path49 = require("node:path");
 var GC_GH_TIMEOUT_MS3 = 2e4;
@@ -60202,8 +60477,8 @@ async function collectOnboardStatus(opts = {}) {
   }
   const home = (0, import_node_os24.homedir)();
   const plugin = onboardPluginGate({
-    readKnown: () => readFileSyncSafe((0, import_node_path49.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs52.readFileSync),
-    readSettings: () => readFileSyncSafe((0, import_node_path49.join)(home, ".claude", "settings.json"), import_node_fs52.readFileSync)
+    readKnown: () => readFileSyncSafe((0, import_node_path49.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs53.readFileSync),
+    readSettings: () => readFileSyncSafe((0, import_node_path49.join)(home, ".claude", "settings.json"), import_node_fs53.readFileSync)
   });
   return {
     guide: "Read the MMI org-guide skill before project work; load only the relevant topic. Use mmi-help for a short introduction.",
@@ -60582,29 +60857,23 @@ var surfaces_default = {
       ]
     },
     {
-      token: "hermes",
-      displayName: "Hermes Agent",
+      token: "openbot",
+      displayName: "OpenBot",
       lifecycle: "active",
       artifactIds: [
-        "mmi-hermes-plugin",
+        "mmi-openbot-plugin",
         "mmi-skills",
         "mmi-cli"
       ],
       plannedArtifactIds: [],
       assembly: {
-        mode: "package-directory",
-        rootPath: "packages/hermes-plugin",
-        sync: [
-          {
-            mode: "directories",
-            sourcePath: "skills",
-            targetPath: "packages/hermes-plugin/skills"
-          }
-        ]
+        mode: "source-tree",
+        rootPath: ".pi-plugin",
+        sync: []
       },
       install: {
         mechanism: "npm",
-        locator: "@mutmutco/hermes-plugin (npm transport; MMI-Hub extracts the package into $HERMES_HOME/plugins/mmi)"
+        locator: "@mutmutco/pi-plugin (npm transport; MMI-Hub extracts its skills into each OpenBot agent workspace at <home>/OpenBot/Agents/agent-<uuid>/.agents/skills)"
       },
       upgrade: {
         mechanism: "package-manager",
@@ -60613,10 +60882,10 @@ var surfaces_default = {
       skills: {
         delivery: "provisioned",
         sourceSurfaceId: "mmi-skills",
-        artifactId: "mmi-hermes-plugin",
+        artifactId: "mmi-skills",
         invocation: {
-          entry: "/epic",
-          any: "skill_view(name='<skill>')"
+          entry: "use the epic skill",
+          any: "use the <skill> skill"
         }
       },
       cli: {
@@ -60629,20 +60898,19 @@ var surfaces_default = {
         repair: "mmi-hub"
       },
       certification: {
-        hostCommand: "hermes",
-        versionArgs: [
-          "--version"
-        ]
+        hostProbe: "none",
+        hostCommand: null,
+        versionArgs: []
       },
       compatibility: {
-        hostVersion: "0.20.1",
-        certification: "Hermes Agent v0.20.1 release v2026.8.13, upstream f80f453ae0679347e38abc917c7f94f717bf96c5 (#5053)"
+        hostVersion: "0.53.2",
+        certification: "OpenBot desktop 0.53.2 ships no host CLI: surface presence is the agent workspace root (<home>/OpenBot/Agents/agent-*), never a --version probe"
       },
       enforcementCeilings: [
-        "MMI ships no Hermes hooks (#5908): the plugin contributes skills and the /mmi command only; enforcement is host-side.",
-        "Hermes user plugins are opt-in through plugins.enabled (#6656): after a verified converge MMI-Hub enables its OWN mmi key through Hermes' own `hermes plugins enable mmi --no-allow-tool-override` command, and never reads, reorders, or writes another operator entry. Built-in tool override is explicitly declined, since MMI ships no Hermes hooks. Host process isolation remains Hermes-owned.",
-        "npm is MMI transport only: MMI-Hub extracts @mutmutco/hermes-plugin into $HERMES_HOME/plugins/mmi and provisions the canonical skills into $HERMES_HOME/skills/mmi/; a fresh Hermes Agent process is required for discovery.",
-        "Every Hermes home is covered per home (#6672): a profile under $HERMES_HOME/profiles/<name> is a full sibling home and Hermes scans only the active home's plugins/, so MMI-Hub repeats the same single-home install, skills provisioning, and host-command enable in the resolved home and in each profile home with HERMES_HOME bound to it. No profile is enumerated for any other purpose, and nothing outside those per-home MMI paths is read or written."
+        "OpenBot ships no MMI hooks: this surface contributes the provisioned skills and a standalone mmi-cli only; enforcement is host-side.",
+        "OpenBot's agent registry (%APPDATA%/OpenBot/openbot.db) is event-sourced and host-owned: MMI-Hub never reads or writes it, and enumerates agent workspaces by directory instead.",
+        "OpenBot agent shells inherit the user PATH, so the standalone mmi-cli resolves; MMI provisions the skill payload, never the shell environment. OpenBot exports no identifying variable: mmi-cli recognizes an OpenBot session by a working directory inside <home>/OpenBot/Agents/agent-<uuid> (or an explicit MMI_AGENT_SURFACE=openbot), and a session working elsewhere is classified by its runtime.",
+        "Every Agent workspace holds its own skills tree: MMI-Hub writes only <workspace>/.agents/skills/<skill> folders it recorded in .agents/skills/.mmi-managed.json, and never .claude/skills, an unrecorded folder, or a skill it does not own."
       ]
     }
   ],
@@ -61006,41 +61274,36 @@ var surfaces_default = {
       publishVisibility: "public"
     },
     {
-      id: "mmi-hermes-plugin",
+      id: "mmi-openbot-plugin",
       classification: "packaging",
       kind: "plugin",
-      ownerPath: "packages/hermes-plugin/package.json",
-      deliveryPath: "packages/hermes-plugin/package.json",
+      ownerPath: ".pi-plugin/package.json",
+      deliveryPath: ".pi-plugin/package.json",
       delivery: "npm",
-      applicability: "Hermes Agent native directory plugin transported as npm package @mutmutco/hermes-plugin; MMI-Hub extracts its package bytes into $HERMES_HOME/plugins/mmi, where Hermes v0.20.1 discovers it as an enabled user plugin.",
+      applicability: "OpenBot desktop agent workspaces; the SAME npm package as JervCode (@mutmutco/pi-plugin, surfaceToken jervcode) re-declared as OpenBot's transport so the registry can name a token-owned plugin artifact for a host that has no CLI of its own. No OpenBot-specific package exists or is planned.",
       versionCoordinated: true,
-      surfaceToken: "hermes",
+      surfaceToken: "openbot",
       versionPaths: [
         {
-          path: "packages/hermes-plugin/package.json",
-          pointer: "version"
-        },
-        {
-          path: "packages/hermes-plugin/plugin.yaml",
+          path: ".pi-plugin/package.json",
           pointer: "version"
         }
       ],
       additionalPaths: [
-        "packages/hermes-plugin/plugin.yaml",
-        "packages/hermes-plugin/__init__.py",
-        "packages/hermes-plugin/skills"
+        ".pi-plugin/skills"
       ],
       artifactIdentity: {
         kind: "npm-pack",
-        packagePath: "packages/hermes-plugin"
+        packagePath: ".pi-plugin"
       },
-      publishVisibility: "public"
+      publishVisibility: "n/a"
     }
   ]
 };
 
 // src/surface-doctor.ts
-var TOKENS = /* @__PURE__ */ new Set(["claude", "codex", "jervcode", "hermes"]);
+var TOKENS = /* @__PURE__ */ new Set(["claude", "codex", "jervcode", "openbot"]);
+var FRESH_PROCESS_SURFACES = /* @__PURE__ */ new Set(["openbot"]);
 function isActiveToken(value) {
   return TOKENS.has(value);
 }
@@ -61091,7 +61354,7 @@ function diagnoseSurface(evidence) {
   return { ...base, state: "clean" };
 }
 function reloadInstruction(descriptor) {
-  if (descriptor.token === "hermes") return "start a fresh Hermes Agent process";
+  if (descriptor.token === "openbot") return "start a fresh OpenBot agent run";
   const verb = descriptor.reload === "workspace" ? "reload" : "restart";
   return `${verb} ${descriptor.displayName}`;
 }
@@ -61103,7 +61366,7 @@ function planSurfaceRepair(diagnosis) {
       supported: false,
       owner: "mmi-hub",
       changes: [],
-      // #5833: name the SURFACE this row is about — the literal "Hermes plugin" sent every other
+      // #5833: name the SURFACE this row is about — a hard-coded host name sent every other
       // mmi-hub-owned surface (Claude Code included) chasing a different host that was already current.
       instruction: `run \`mmi-hub update\` to converge the MMI-managed ${descriptor.displayName} plugin, then ${reloadInstruction(descriptor)}`
     };
@@ -61131,9 +61394,9 @@ function buildSurfaceDoctorCheck(diagnosis) {
   const detailByState = {
     skipped: "skipped \u2014 host not active",
     clean: diagnosis.repairDetail ? `clean \u2014 repaired and verified (${diagnosis.repairDetail})` : `clean${versions ? ` \u2014 ${versions}` : ""}`,
-    "pending-reload": `pending ${descriptor.token === "hermes" ? "fresh process" : descriptor.reload === "workspace" ? "reload" : "restart"} \u2014 repaired to ${diagnosis.releasedVersion}, but ${diagnosis.installedVersion} is still the version this host has loaded${diagnosis.repairDetail ? ` (${diagnosis.repairDetail})` : ""}`,
+    "pending-reload": `pending ${FRESH_PROCESS_SURFACES.has(descriptor.token) ? "fresh process" : descriptor.reload === "workspace" ? "reload" : "restart"} \u2014 repaired to ${diagnosis.releasedVersion}, but ${diagnosis.installedVersion} is still the version this host has loaded${diagnosis.repairDetail ? ` (${diagnosis.repairDetail})` : ""}`,
     // #5833: the update already staged the released tree; the wording mirrors `mmi-hub status`.
-    staged: `loaded ${diagnosis.installedVersion}; staged ${diagnosis.releasedVersion} for next launch \u2014 ${descriptor.token === "hermes" ? "start a fresh process" : descriptor.reload === "workspace" ? "reload" : "restart"} ${descriptor.displayName} to converge`,
+    staged: `loaded ${diagnosis.installedVersion}; staged ${diagnosis.releasedVersion} for next launch \u2014 ${FRESH_PROCESS_SURFACES.has(descriptor.token) ? "start a fresh process" : descriptor.reload === "workspace" ? "reload" : "restart"} ${descriptor.displayName} to converge`,
     "freshness-unknown": `${diagnosis.installedVersion ?? "installed"} \u2014 freshness UNKNOWN, the published version could not be read`,
     stale: `stale${versions ? ` \u2014 ${versions}` : ""}`,
     missing: "missing \u2014 no install record",
@@ -62405,7 +62668,7 @@ function registerOrgHealthQuery(program3, deps = defaultOrgHealthQueryDeps()) {
 }
 
 // src/api-read.ts
-var import_node_fs53 = require("node:fs");
+var import_node_fs54 = require("node:fs");
 
 // src/run-log-read.ts
 init_cli_shared();
@@ -62679,8 +62942,17 @@ function buildRunWatchSpec(id, o) {
   const timeoutMin = o.timeoutMin !== void 0 ? parseBrokerInt(o.timeoutMin, "--timeout", 1, 120) : 30;
   return { program: "gh", args, timeoutMs: timeoutMin * 6e4 };
 }
+function rejectPrViewQueueFields(fields, number) {
+  if (!fields || !fields.split(",").includes("mergeQueueEntry")) return;
+  throw new Error(
+    `read pr view: 'mergeQueueEntry' is not a gh pr view --json field \u2014 read the merge queue with \`mmi-cli devops read pr queue ${number} --repo <owner/repo> --json\` and drop it from --json`
+  );
+}
 function buildPrViewSpec(ref, o) {
-  const args = withJson(withRepo(["pr", "view", parseBrokerId(ref, "PR number")], parseBrokerRepo(o.repo, "--repo")), parseBrokerJsonFields(o.json), o.json);
+  const number = parseBrokerId(ref, "PR number");
+  const jsonFields = parseBrokerJsonFields(o.json);
+  rejectPrViewQueueFields(jsonFields, number);
+  const args = withJson(withRepo(["pr", "view", number], parseBrokerRepo(o.repo, "--repo")), jsonFields, o.json);
   if (o.comments) args.push("--comments");
   return { program: "gh", args, timeoutMs: SINGLE_SHOT_TIMEOUT_MS };
 }
@@ -62753,6 +63025,20 @@ function ghExitCodeOf(error) {
   const code = error.code;
   return typeof code === "number" ? code : null;
 }
+function brokerGhFailureHint(failureText, args) {
+  const target = args[0] === "pr" && args[1] === "view" ? args[2] : void 0;
+  const unknownField = /Unknown JSON field: "([^"]+)"/.exec(failureText)?.[1] ?? /Unknown JSON field: ([A-Za-z][A-Za-z0-9]*)/.exec(failureText)?.[1];
+  if (unknownField === "mergeQueueEntry") {
+    return `'mergeQueueEntry' is not a gh pr view --json field \u2014 read the merge queue with \`mmi-cli devops read pr queue ${target ?? "<number>"} --repo <owner/repo> --json\` and drop it from --json; repeating this read cannot succeed`;
+  }
+  if (unknownField) {
+    return `gh rejected --json field '${unknownField}' \u2014 drop it or use the typed read whose fields cover it (the "Available fields" list gh printed is its own vocabulary)`;
+  }
+  if (/Could not resolve to a PullRequest/i.test(failureText)) {
+    return `GitHub could not resolve the PR${target ? ` #${target}` : ""} \u2014 verify the number and that --repo names the repo that owns it before retrying; an identical re-run fails the same way`;
+  }
+  return void 0;
+}
 async function runBrokerGh(run, spec, write = (chunk) => process.stdout.write(chunk)) {
   const env = brokerChildEnv();
   let output;
@@ -62764,7 +63050,9 @@ async function runBrokerGh(run, spec, write = (chunk) => process.stdout.write(ch
     const code = ghExitCodeOf(e);
     if (code !== null) {
       if (typeof err.stderr === "string" && err.stderr) process.stderr.write(redactPrivateCredential(err.stderr, env));
-      process.stderr.write(`read: gh ${spec.args.slice(0, 2).join(" ")} failed on the App pool (exit ${code}) \u2014 inspect stderr; retry the same typed read and only parse stdout after success
+      const failure = `${typeof err.stdout === "string" ? err.stdout : ""}${typeof err.stderr === "string" ? err.stderr : ""}`;
+      const recovery = brokerGhFailureHint(failure, spec.args) ?? "inspect stderr; retry the same typed read and only parse stdout after success";
+      process.stderr.write(`read: gh ${spec.args.slice(0, 2).join(" ")} failed on the App pool (exit ${code}) \u2014 ${recovery}
 `);
       return code;
     }
@@ -63068,11 +63356,33 @@ var RELEASE_TAG_RE = new RegExp(`^repos/${NAME}/${NAME}/releases/tags/(${NAME})$
 var RELEASE_ASSET_RE = new RegExp(`^repos/${NAME}/${NAME}/releases/assets/\\d+$`);
 var API_GET_ALLOWED_SHAPES = "repos/{owner}/{repo}/pulls/{n}/files, repos/{owner}/{repo}/compare/{a}...{b}, repos/{owner}/{repo}/contents/{path}[?ref=<branch>], repos/{owner}/{repo}/actions/runs[?per_page=1-100&page=<n>&status=&branch=&event=&head_sha=<40-hex>&created=<date-range>&actor=, each key at most once], repos/{owner}/{repo}/actions/runs/{id}, repos/{owner}/{repo}/actions/runs/{id}/jobs, repos/{owner}/{repo}/actions/runs/{id}/attempts/{n}/jobs, repos/{owner}/{repo}/actions/runs/{id}/artifacts, repos/{owner}/{repo}/actions/artifacts/{id}/zip (needs --out <file>), repos/{owner}/{repo}/actions/jobs/{id}/logs (needs --out <file>), repos/{owner}/{repo}/releases[?per_page=1-100&page=<n>, each key at most once], repos/{owner}/{repo}/releases/latest, repos/{owner}/{repo}/releases/tags/{tag}, repos/{owner}/{repo}/releases/assets/{id} (needs --out <file>)";
 var API_GET_RECOVERY = " No other GET read exists \u2014 do not retry path variants; use a dedicated mmi-cli subcommand or ask a human token holder. This refusal exits 1 on stderr with nothing on stdout: check the exit code and never merge stderr into stdout (2>&1) before JSON-parsing.";
+var TYPED_READ_ROUTE_RE = new RegExp(`^repos/(${NAME})/(${NAME})/(issues|pulls)(?:/(comments/\\d+|\\d+)(?:/([a-z_]+))?)?$`);
+function typedReadHint(path2) {
+  const match = TYPED_READ_ROUTE_RE.exec(path2.split("?")[0]);
+  if (!match) return "";
+  const [, owner, repo, kind, item, sub] = match;
+  const slug = `${owner}/${repo}`;
+  const say = (command, note = "") => ` Typed read for this route: \`${command}\`${note}.`;
+  if (kind === "issues") {
+    if (!item) return say(`mmi-cli devops read issue list --repo ${slug} --json number,title,state,labels`);
+    if (item.startsWith("comments/")) {
+      const id = item.slice("comments/".length);
+      return say(`mmi-cli devops read issue view <issue> --repo ${slug} --json comments`, `; a comment is read through its issue, so match the comment whose url ends in issuecomment-${id}`);
+    }
+    if (sub === "events" || sub === "timeline") {
+      return say(`mmi-cli devops read issue view ${item} --repo ${slug} --json state,stateReason,closedAt,labels,assignees,comments`, "; the raw event/timeline history itself has no read");
+    }
+    return say(`mmi-cli devops read issue view ${item} --repo ${slug} --json title,body,state,labels,comments`);
+  }
+  if (!item) return say(`mmi-cli devops read pr list --repo ${slug} --json number,title,state,headRefName`);
+  if (item.startsWith("comments/")) return say(`mmi-cli devops read pr view <pr> --repo ${slug} --json comments,reviews`);
+  return say(`mmi-cli devops read pr view ${item} --repo ${slug} --json title,state,comments,reviews,commits,statusCheckRollup`);
+}
 function parseApiGetPath(rawPath) {
   const path2 = rawPath.trim();
   const refuse = () => {
     const hint = /^[A-Za-z]:[/\\]/.test(path2) ? " Git Bash/MSYS may have rewritten a leading-slash argument; retry with MSYS_NO_PATHCONV=1 and the slash-free repos/... path. The endpoint must still be allowlisted." : "";
-    return new Error(`api get: refusing '${rawPath}' \u2014 only these GET reads are allowed (#7219): ${API_GET_ALLOWED_SHAPES}.${API_GET_RECOVERY}${hint}`);
+    return new Error(`api get: refusing '${rawPath}' \u2014 only these GET reads are allowed (#7219): ${API_GET_ALLOWED_SHAPES}.${API_GET_RECOVERY}${typedReadHint(path2)}${hint}`);
   };
   if (/[%#\\]/.test(path2) || path2.split("?")[0].split("/").some((seg) => seg === "." || seg === ".." || seg === "")) throw refuse();
   const q = path2.indexOf("?");
@@ -63138,7 +63448,7 @@ function registerApiReadCommands(program3, overrides) {
         o.accept
       );
       if (zip) {
-        (0, import_node_fs53.writeFileSync)(o.out, body, "latin1");
+        (0, import_node_fs54.writeFileSync)(o.out, body, "latin1");
         return;
       }
     } catch (e) {
@@ -64032,7 +64342,7 @@ function registerSessionReport(program3) {
 }
 
 // src/stage-commands.ts
-var import_node_fs54 = require("node:fs");
+var import_node_fs55 = require("node:fs");
 var import_node_path50 = require("node:path");
 init_cli_shared();
 init_clean_exit();
@@ -64281,8 +64591,8 @@ function registerStageCommands(program3) {
     const repo = Array.isArray(project2?.repos) && typeof project2.repos[0] === "string" ? project2.repos[0] : slug;
     const resolution = decideStage({
       registry: { deployModel: project2?.deployModel, portRange, error: read.ok ? void 0 : read.error },
-      hasCompose: (0, import_node_fs54.existsSync)((0, import_node_path50.join)(process.cwd(), "docker-compose.yml")),
-      hasEnvExample: (0, import_node_fs54.existsSync)((0, import_node_path50.join)(process.cwd(), ".env.example")),
+      hasCompose: (0, import_node_fs55.existsSync)((0, import_node_path50.join)(process.cwd(), "docker-compose.yml")),
+      hasEnvExample: (0, import_node_fs55.existsSync)((0, import_node_path50.join)(process.cwd(), ".env.example")),
       repo
     });
     if (resolution.source === "derived" && resolution.derived) {
@@ -64575,14 +64885,14 @@ vercel preview (${preview.branch}): ${d.state}${d.url ? ` \u2014 ${d.url}` : ""}
 
 // src/tenant-artifact.ts
 var import_node_crypto17 = require("node:crypto");
-var import_node_fs55 = require("node:fs");
+var import_node_fs56 = require("node:fs");
 var import_promises11 = require("node:fs/promises");
 var import_node_path51 = require("node:path");
 var ARTIFACT_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
 var MAX_BYTES2 = 5 * 1024 * 1024 * 1024;
 async function sha256File(path2) {
   const hash = (0, import_node_crypto17.createHash)("sha256");
-  for await (const chunk of (0, import_node_fs55.createReadStream)(path2)) hash.update(chunk);
+  for await (const chunk of (0, import_node_fs56.createReadStream)(path2)) hash.update(chunk);
   return hash.digest("hex");
 }
 async function putTenantArtifact(repo, stage, inputPath, deps) {
@@ -64605,7 +64915,7 @@ async function putTenantArtifact(repo, stage, inputPath, deps) {
     return [key, value];
   }));
   headers["content-length"] = String(info.size);
-  const stream = (0, import_node_fs55.createReadStream)(path2);
+  const stream = (0, import_node_fs56.createReadStream)(path2);
   let uploaded;
   try {
     uploaded = await fetch(body.uploadUrl, {
@@ -64746,7 +65056,7 @@ function renderVerifySecrets(body) {
 }
 
 // src/command-register-developer.ts
-var import_node_fs59 = require("node:fs");
+var import_node_fs60 = require("node:fs");
 init_clean_exit();
 init_cli_shared();
 init_error_codes();
@@ -64814,13 +65124,13 @@ async function executeWaveLand(plan, deps) {
 // src/dist-drift.ts
 var import_node_child_process21 = require("node:child_process");
 var import_node_crypto19 = require("node:crypto");
-var import_node_fs57 = require("node:fs");
+var import_node_fs58 = require("node:fs");
 var import_node_os25 = require("node:os");
 var import_node_path53 = require("node:path");
 
 // ../scripts/distribution-digest.mjs
 var import_node_crypto18 = require("node:crypto");
-var import_node_fs56 = require("node:fs");
+var import_node_fs57 = require("node:fs");
 var import_node_path52 = require("node:path");
 var slash = (value) => value.replaceAll("\\", "/");
 function repoPath(root, declaredPath, label) {
@@ -64834,7 +65144,7 @@ function repoPath(root, declaredPath, label) {
 function digestFiles(files) {
   const hash = (0, import_node_crypto18.createHash)("sha256");
   for (const file of [...files].sort((a, b) => a.relative.localeCompare(b.relative))) {
-    const content = file.stat.isSymbolicLink() ? Buffer.from((0, import_node_fs56.readlinkSync)(file.absolute), "utf8") : (0, import_node_fs56.readFileSync)(file.absolute);
+    const content = file.stat.isSymbolicLink() ? Buffer.from((0, import_node_fs57.readlinkSync)(file.absolute), "utf8") : (0, import_node_fs57.readFileSync)(file.absolute);
     hash.update(file.relative, "utf8");
     hash.update("\0");
     hash.update(file.stat.isSymbolicLink() ? "symlink" : "file", "utf8");
@@ -64849,8 +65159,8 @@ function digestFiles(files) {
 function digestPackedFiles(packageRoot, packedFiles) {
   return digestFiles(packedFiles.map((path2) => {
     const absolute = repoPath(packageRoot, path2, "packed artifact identity path");
-    if (!(0, import_node_fs56.existsSync)(absolute)) throw new Error(`packed artifact identity path ${path2} does not exist`);
-    return { absolute, relative: slash(path2), stat: (0, import_node_fs56.lstatSync)(absolute) };
+    if (!(0, import_node_fs57.existsSync)(absolute)) throw new Error(`packed artifact identity path ${path2} does not exist`);
+    return { absolute, relative: slash(path2), stat: (0, import_node_fs57.lstatSync)(absolute) };
   }));
 }
 
@@ -64935,12 +65245,12 @@ function renderDistDriftReceipt(receipt) {
   return lines2;
 }
 function readOrNull(path2) {
-  return (0, import_node_fs57.existsSync)(path2) ? (0, import_node_fs57.readFileSync)(path2) : null;
+  return (0, import_node_fs58.existsSync)(path2) ? (0, import_node_fs58.readFileSync)(path2) : null;
 }
 function walkFiles(root) {
   const files = [];
   const walk2 = (directory) => {
-    for (const entry of (0, import_node_fs57.readdirSync)(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
+    for (const entry of (0, import_node_fs58.readdirSync)(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
       const child2 = (0, import_node_path53.join)(directory, entry.name);
       if (entry.isDirectory()) walk2(child2);
       else files.push(child2);
@@ -64951,7 +65261,7 @@ function walkFiles(root) {
 }
 function bomPathFor(root) {
   try {
-    const registry2 = JSON.parse((0, import_node_fs57.readFileSync)((0, import_node_path53.join)(root, "surfaces.json"), "utf8"));
+    const registry2 = JSON.parse((0, import_node_fs58.readFileSync)((0, import_node_path53.join)(root, "surfaces.json"), "utf8"));
     return (0, import_node_path53.join)(root, registry2?.sharedAgentCore?.releaseMetadata?.bomPath ?? "distribution-bom.json");
   } catch {
     return (0, import_node_path53.join)(root, "distribution-bom.json");
@@ -64967,7 +65277,7 @@ function rebuildTo(packageRoot, outDir) {
   });
 }
 function runDistStatus(root) {
-  const stage = (0, import_node_fs57.mkdtempSync)((0, import_node_path53.join)((0, import_node_os25.tmpdir)(), "mmi-dist-drift-"));
+  const stage = (0, import_node_fs58.mkdtempSync)((0, import_node_path53.join)((0, import_node_os25.tmpdir)(), "mmi-dist-drift-"));
   let overlayCount = 0;
   try {
     const cliOut = (0, import_node_path53.join)(stage, "cli-dist");
@@ -64983,19 +65293,19 @@ function runDistStatus(root) {
     const tree = (path2) => readOrNull((0, import_node_path53.join)(root, path2));
     const distRoot = (0, import_node_path53.join)(root, "cli", "dist");
     const distTree = () => walkFiles(distRoot).map((absolute) => `cli/dist/${(0, import_node_path53.relative)(distRoot, absolute).replaceAll("\\", "/")}`);
-    const bom = JSON.parse((0, import_node_fs57.readFileSync)(bomPathFor(root), "utf8"));
+    const bom = JSON.parse((0, import_node_fs58.readFileSync)(bomPathFor(root), "utf8"));
     const digest = (entries) => {
       const overlay = (0, import_node_path53.join)(stage, `overlay-${overlayCount++}`);
       for (const entry of entries) {
         const target = (0, import_node_path53.join)(overlay, entry.path);
-        (0, import_node_fs57.mkdirSync)((0, import_node_path53.dirname)(target), { recursive: true });
-        (0, import_node_fs57.writeFileSync)(target, entry.bytes);
+        (0, import_node_fs58.mkdirSync)((0, import_node_path53.dirname)(target), { recursive: true });
+        (0, import_node_fs58.writeFileSync)(target, entry.bytes);
       }
       return digestPackedFiles(overlay, entries.map((entry) => entry.path));
     };
     return computeDistDriftReceipt({ committed, tree, rebuilt, distTree, bom, digest });
   } finally {
-    (0, import_node_fs57.rmSync)(stage, { recursive: true, force: true });
+    (0, import_node_fs58.rmSync)(stage, { recursive: true, force: true });
   }
 }
 
@@ -65327,7 +65637,7 @@ function registerSchedulesLiftCommand(program3, deps = {}) {
 
 // src/spawn-policy-core.ts
 var import_node_child_process23 = require("node:child_process");
-var import_node_fs58 = require("node:fs");
+var import_node_fs59 = require("node:fs");
 var import_node_path56 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
 var CALL_SOURCE = String.raw`(^|[^.\w$])(${SPAWNERS.join("|")})\s*\(`;
@@ -65414,7 +65724,7 @@ function runSpawnPolicy(root) {
   for (const file of files) {
     let raw;
     try {
-      raw = (0, import_node_fs58.readFileSync)((0, import_node_path56.join)(root, file), "utf8");
+      raw = (0, import_node_fs59.readFileSync)((0, import_node_path56.join)(root, file), "utf8");
     } catch {
       continue;
     }
@@ -65435,18 +65745,18 @@ function registerDeveloperCommands(program3) {
   const rules = program3.command("rules").description("org-managed .gitignore delivery");
   rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").option("--json", "machine-readable output").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
     const path2 = (0, import_node_path57.join)(process.cwd(), ".gitignore");
-    const current = (0, import_node_fs59.existsSync)(path2) ? (0, import_node_fs59.readFileSync)(path2, "utf8") : null;
+    const current = (0, import_node_fs60.existsSync)(path2) ? (0, import_node_fs60.readFileSync)(path2, "utf8") : null;
     const plan = planManagedGitignore(current);
     const drift = [...plan.added.map((l) => `+${l}`), ...plan.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
     if (opts.json) {
-      if (opts.write && plan.changed) (0, import_node_fs59.writeFileSync)(path2, plan.content, "utf8");
+      if (opts.write && plan.changed) (0, import_node_fs60.writeFileSync)(path2, plan.content, "utf8");
       console.log(JSON.stringify(plan, null, 2));
       if (!opts.write && plan.changed) process.exitCode = 1;
       return;
     }
     if (opts.write) {
       if (plan.changed) {
-        (0, import_node_fs59.writeFileSync)(path2, plan.content, "utf8");
+        (0, import_node_fs60.writeFileSync)(path2, plan.content, "utf8");
         console.log(`mmi-cli devops org rules gitignore: updated .gitignore (${drift})`);
       } else {
         console.log("mmi-cli devops org rules gitignore: up to date");
@@ -65773,22 +66083,23 @@ function mmiDoctorDeps(opts = {}) {
     if (!token || token === "opencode") return void 0;
     const descriptor = doctorSurface(token);
     const snapshot = snapshotPluginGuardInput(runtimeSurface, isOrgRepo);
-    const hermes = token === "hermes" ? readHermesPluginEvidence(process.env) : void 0;
-    const installedVersion = hermes?.installedVersion ?? installedSurfacePluginVersion(runtimeSurface);
+    const native = token === "openbot" ? readOpenBotPluginEvidence(process.env) : void 0;
+    const installedVersion = native?.installedVersion ?? installedSurfacePluginVersion(runtimeSurface);
     const stagedVersion = token === "claude" ? stagedClaudePluginVersion() : void 0;
     surfaceEvidence = {
       descriptor,
-      // Hermes' root is the host evidence: a configured but uninstalled MMI tree is missing, while an
-      // absent root is skipped. Other mature surfaces retain their established org/install applicability.
-      applicable: hermes ? hermes.hostPresent : isOrgRepo || snapshot.installRecordPresent || snapshot.pluginCachePresent,
-      installRecordPresent: hermes?.installRecordPresent ?? snapshot.installRecordPresent,
-      deliveryPresent: hermes ? hermes.installRecordPresent : snapshot.marketplaceClonePresent,
-      payloadPresent: hermes?.payloadPresent ?? snapshot.pluginCachePresent,
-      manifest: hermes?.manifest ?? (installedVersion ? "valid" : snapshot.installRecordPresent ? "invalid" : "missing"),
+      // A native evidence reader IS the host evidence: a configured but uninstalled MMI tree is missing,
+      // while an absent root is skipped. Other mature surfaces retain their established org/install
+      // applicability.
+      applicable: native ? native.hostPresent : isOrgRepo || snapshot.installRecordPresent || snapshot.pluginCachePresent,
+      installRecordPresent: native?.installRecordPresent ?? snapshot.installRecordPresent,
+      deliveryPresent: native ? native.installRecordPresent : snapshot.marketplaceClonePresent,
+      payloadPresent: native?.payloadPresent ?? snapshot.pluginCachePresent,
+      manifest: native?.manifest ?? (installedVersion ? "valid" : snapshot.installRecordPresent ? "invalid" : "missing"),
       guardState: buildPluginGuardDecision(snapshot).state,
       ...installedVersion ? { installedVersion } : {},
       ...stagedVersion ? { stagedVersion } : {},
-      ...hermes?.receipt ? { receipt: hermes.receipt } : {}
+      ...native?.receipt ? { receipt: native.receipt } : {}
     };
     return surfaceEvidence;
   };
@@ -65864,7 +66175,7 @@ function mmiDoctorDeps(opts = {}) {
       );
       const result = applyPluginCachePlan(
         plan,
-        (p) => (0, import_node_fs60.rmSync)(p, { recursive: true }),
+        (p) => (0, import_node_fs61.rmSync)(p, { recursive: true }),
         stagingApplyFsGuard(configRoot)
       );
       return {
@@ -65899,7 +66210,7 @@ function mmiDoctorDeps(opts = {}) {
     // has no generated routing index would
     // get a permanent — demanding an artifact it never asked for.
     docsIndexState: (root) => {
-      if (!(0, import_node_fs60.existsSync)((0, import_node_path58.join)(root, DOCS_INDEX_PATH))) return void 0;
+      if (!(0, import_node_fs61.existsSync)((0, import_node_path58.join)(root, DOCS_INDEX_PATH))) return void 0;
       const real = createDocsIndexDeps(root);
       let docs;
       const listDocs = () => docs ??= real.listDocs();
@@ -65908,7 +66219,7 @@ function mmiDoctorDeps(opts = {}) {
     },
     // #4168: working-tree heal — write if drifted, then re-check. Commit remains the operator's step.
     healDocsIndex: (root) => {
-      if (!(0, import_node_fs60.existsSync)((0, import_node_path58.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
+      if (!(0, import_node_fs61.existsSync)((0, import_node_path58.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
       const real = createDocsIndexDeps(root);
       let docs;
       const listDocs = () => docs ??= real.listDocs();
@@ -66663,7 +66974,7 @@ project.command("set [owner/repo]").description("upsert project META (idempotent
   if (dupe) return fail(`org project set: KEY "${dupe}" was passed to both --var and --set; --set is an alias of --var, so pass each KEY once`);
   if (o.secretsFile) {
     try {
-      vars.push(`secrets=${(0, import_node_fs60.readFileSync)(o.secretsFile, "utf8")}`);
+      vars.push(`secrets=${(0, import_node_fs61.readFileSync)(o.secretsFile, "utf8")}`);
     } catch (e) {
       return fail(`org project set: cannot read --secrets-file ${o.secretsFile}: ${e.message}`);
     }
@@ -67056,15 +67367,15 @@ function ciAuditDeps2() {
     readSeedFile: (path2) => {
       if (!root) return null;
       const fullPath = (0, import_node_path58.join)(root, path2);
-      return (0, import_node_fs60.existsSync)(fullPath) ? (0, import_node_fs60.readFileSync)(fullPath, "utf8") : null;
+      return (0, import_node_fs61.existsSync)(fullPath) ? (0, import_node_fs61.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
 function hubRoot2() {
   const fromPkg = (0, import_node_path58.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs60.existsSync)((0, import_node_path58.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs60.existsSync)((0, import_node_path58.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs61.existsSync)((0, import_node_path58.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs61.existsSync)((0, import_node_path58.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 registerQueryCommands(program2);
@@ -67195,10 +67506,10 @@ access.command("audit").description("audit collaborator roles + train-branch pus
     targets = resolution.targets;
   }
   const derivedMatrix = registryProjects ? accessMatrixFromProjects(registryProjects) : {};
-  const fileMatrix = (0, import_node_fs60.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs60.readFileSync)("access-matrix.json", "utf8")) : {};
+  const fileMatrix = (0, import_node_fs61.existsSync)("access-matrix.json") ? loadAccessMatrix((0, import_node_fs61.readFileSync)("access-matrix.json", "utf8")) : {};
   const matrix = mergeAccessMatrix(fileMatrix, derivedMatrix);
   const dataAccess = registryProjects ? dataAccessContractsFromProjects(registryProjects) : { consumers: {} };
-  const sanctioned = (0, import_node_fs60.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs60.readFileSync)("access-matrix.json", "utf8")) : {};
+  const sanctioned = (0, import_node_fs61.existsSync)("access-matrix.json") ? loadSanctionedAdmins((0, import_node_fs61.readFileSync)("access-matrix.json", "utf8")) : {};
   const report = await auditOrgAccess(targets, deps, matrix, dataAccess, sanctioned);
   console.log(o.json ? JSON.stringify(report, null, 2) : renderAccessReport(report));
   if (!report.ok) process.exitCode = 1;
@@ -67229,7 +67540,7 @@ function directoryBytes(path2) {
   let total = 0;
   let entries;
   try {
-    entries = (0, import_node_fs60.readdirSync)(path2, { withFileTypes: true });
+    entries = (0, import_node_fs61.readdirSync)(path2, { withFileTypes: true });
   } catch {
     return 0;
   }
@@ -67238,7 +67549,7 @@ function directoryBytes(path2) {
     if (entry.isDirectory()) total += directoryBytes(child2);
     else {
       try {
-        total += (0, import_node_fs60.statSync)(child2).size;
+        total += (0, import_node_fs61.statSync)(child2).size;
       } catch {
       }
     }
@@ -67246,25 +67557,25 @@ function directoryBytes(path2) {
   return total;
 }
 function listDirEntries(dir) {
-  return (0, import_node_fs60.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
+  return (0, import_node_fs61.readdirSync)(dir, { withFileTypes: true }).map((d) => ({ name: d.name, isDirectory: d.isDirectory() }));
 }
 function readInstalledPluginRefs(configRoot) {
   const p = installedPluginsPathForConfig(configRoot);
-  if (!(0, import_node_fs60.existsSync)(p)) return [];
+  if (!(0, import_node_fs61.existsSync)(p)) return [];
   try {
-    return installedPluginPaths((0, import_node_fs60.readFileSync)(p, "utf8"));
+    return installedPluginPaths((0, import_node_fs61.readFileSync)(p, "utf8"));
   } catch {
     return null;
   }
 }
 function pluginCacheFsDeps(configRoot, dirBytes) {
   return {
-    exists: (p) => (0, import_node_fs60.existsSync)(p),
-    listVersionDirs: (root) => (0, import_node_fs60.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
+    exists: (p) => (0, import_node_fs61.existsSync)(p),
+    listVersionDirs: (root) => (0, import_node_fs61.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => d.name),
     dirBytes,
-    listStagingDirs: (root) => (0, import_node_fs60.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
+    listStagingDirs: (root) => (0, import_node_fs61.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
       try {
-        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path58.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs60.statSync)(p).mtimeMs) };
+        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path58.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs61.statSync)(p).mtimeMs) };
       } catch {
         return { name: d.name, mtimeMs: Date.now() };
       }
@@ -67279,9 +67590,9 @@ function stagingApplyFsGuard(configRoot) {
     referencedPaths: () => readInstalledPluginRefs(configRoot),
     mtimeMs: (name) => {
       const p = (0, import_node_path58.join)(stagingRoot, name);
-      if (!(0, import_node_fs60.existsSync)(p)) return null;
+      if (!(0, import_node_fs61.existsSync)(p)) return null;
       try {
-        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs60.statSync)(q).mtimeMs);
+        return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs61.statSync)(q).mtimeMs);
       } catch {
         return null;
       }
@@ -67307,7 +67618,7 @@ program2.command("plugin-prune").description(`prune stale cached MMI plugin vers
     { withBytes: true, configRoot, includeStaging: surface !== "codex" }
   );
   const anythingToDelete = plan.prune.length > 0 || plan.staging.length > 0;
-  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs60.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
+  const result = o.apply && anythingToDelete ? applyPluginCachePlan(plan, (p) => (0, import_node_fs61.rmSync)(p, { recursive: true, force: true }), stagingApplyFsGuard(configRoot)) : void 0;
   const warnings = plan.prune.length > 0 ? [CONCURRENT_SESSION_WARNING] : [];
   if (o.json) console.log(JSON.stringify({ ...plan, warnings, applied: result ?? null }));
   else console.log(renderPluginCachePlan(plan, result));