@mutmutco/cli 4.3.19 → 4.3.20

package/dist/main.cjs

@@ -5227,7 +5227,7 @@ function unknownCommandDomainGuide(parentPath, token) {
 
 // src/command-composition.ts
 var import_node_os22 = require("node:os");
-var import_node_path47 = require("node:path");
+var import_node_path48 = require("node:path");
 
 // src/board-read.ts
 var import_node_fs13 = require("node:fs");
@@ -13353,7 +13353,7 @@ function extractForwardRefs(markdown) {
   });
   return refs;
 }
-function checkPins(root, readFile9, docs) {
+function checkPins(root, readFile10, docs) {
   const findings = [];
   for (const [doc, markdown] of Object.entries(docs)) {
     for (const pin of extractPins(markdown)) {
@@ -13361,7 +13361,7 @@ function checkPins(root, readFile9, docs) {
         findings.push({ kind: "malformed-pin", doc, line: pin.line, detail: pin.text });
         continue;
       }
-      const source = readFile9((0, import_node_path12.join)(root, pin.file));
+      const source = readFile10((0, import_node_path12.join)(root, pin.file));
       if (source == null) {
         findings.push({ kind: "missing-test", doc, line: pin.line, detail: pin.file });
         continue;
@@ -13576,7 +13576,7 @@ function defaultTrackedFirstSegments(root, firstSegments, exec = import_node_chi
   }
 }
 function runDocRefs(root, deps = {}) {
-  const readFile9 = deps.readFile ?? readFileOrNull;
+  const readFile10 = deps.readFile ?? readFileOrNull;
   const exists = deps.exists ?? import_node_fs14.existsSync;
   const listDocs = deps.listDocs ?? defaultListDocs;
   const isIgnored = deps.isIgnored ?? ((paths) => defaultIsIgnored(root, paths));
@@ -13585,11 +13585,11 @@ function runDocRefs(root, deps = {}) {
   const walked = listDocs(root);
   const ignoredDocs = walked.length ? isIgnored(walked) : /* @__PURE__ */ new Set();
   const docs = Object.fromEntries(
-    walked.filter((rel) => !ignoredDocs.has(rel)).map((rel) => [rel, readFile9((0, import_node_path12.join)(root, rel))]).filter(([, body]) => body != null)
+    walked.filter((rel) => !ignoredDocs.has(rel)).map((rel) => [rel, readFile10((0, import_node_path12.join)(root, rel))]).filter(([, body]) => body != null)
   );
   const refResult = checkRefs(root, { exists, isIgnored, trackedFirstSegments }, docs);
   const findings = [
-    ...checkPins(root, readFile9, docs).findings,
+    ...checkPins(root, readFile10, docs).findings,
     ...refResult.findings
   ];
   if (commandPaths == null) {
@@ -14186,22 +14186,22 @@ function labelsToPrune(orgLabelNames) {
   const org = new Set(orgLabelNames);
   return GITHUB_DEFAULT_LABELS.filter((name) => !org.has(name));
 }
-function resolveSeedContent(seed, vars, readFile9) {
-  if (seed.source === "self") return readFile9(seed.target);
+function resolveSeedContent(seed, vars, readFile10) {
+  if (seed.source === "self") return readFile10(seed.target);
   if (seed.source.startsWith("seed:")) {
-    const tmpl = readFile9(`skills/bootstrap/seeds/${seed.source.slice("seed:".length)}`);
+    const tmpl = readFile10(`skills/bootstrap/seeds/${seed.source.slice("seed:".length)}`);
     return tmpl == null ? null : renderSeed(tmpl, vars);
   }
   return null;
 }
-function resolveSeedWriteContent(seed, vars, readFile9, remoteContent) {
+function resolveSeedWriteContent(seed, vars, readFile10, remoteContent) {
   if (!seed.managedBlock) {
-    return { ok: true, content: resolveSeedContent(seed, vars, readFile9), managed: seed.source === "managed-block" };
+    return { ok: true, content: resolveSeedContent(seed, vars, readFile10), managed: seed.source === "managed-block" };
   }
-  const base = remoteContent ?? resolveSeedContent(seed, vars, readFile9);
+  const base = remoteContent ?? resolveSeedContent(seed, vars, readFile10);
   if (base == null) return { ok: true, content: null, managed: true };
   const blockSeed = { ...seed, source: seed.managedBlock.source, managedBlock: void 0 };
-  const desired = resolveSeedContent(blockSeed, vars, readFile9);
+  const desired = resolveSeedContent(blockSeed, vars, readFile10);
   if (desired == null) return { ok: true, content: null, managed: true };
   const result = upsertManagedSeedBlock(base, desired, seed.managedBlock.begin, seed.managedBlock.end);
   return result.ok ? { ok: true, content: result.content, managed: true } : { ok: false, reason: result.reason, managed: true };
@@ -15502,10 +15502,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.19",
-    tag: "v4.3.19",
-    commit: "5776052e13af",
-    npm: "@mutmutco/cli@4.3.19"
+    version: "4.3.20",
+    tag: "v4.3.20",
+    commit: "f33217850417",
+    npm: "@mutmutco/cli@4.3.20"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15522,14 +15522,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.19"
+          v3Target: "v4.3.20"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.19 and redeploy the Hub Lambda from tag v4.3.19 (5776052e13af); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.19 (@mutmutco/cli@4.3.19, tag commit 5776052e13af \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.20 and redeploy the Hub Lambda from tag v4.3.20 (f33217850417); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.20 (@mutmutco/cli@4.3.20, tag commit f33217850417 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -27537,7 +27537,7 @@ function registerBootstrapCommands(program3) {
     }
     const onlyManagedBlock = onlyTarget ? seedsToApply[0]?.managedBlock != null : false;
     const gh = async (args) => execFileP("gh", args, { timeout: 2e4 });
-    const readFile9 = (p) => (0, import_node_fs26.existsSync)(p) ? (0, import_node_fs26.readFileSync)(p, "utf8") : null;
+    const readFile10 = (p) => (0, import_node_fs26.existsSync)(p) ? (0, import_node_fs26.readFileSync)(p, "utf8") : null;
     const enc = (p) => p.split("/").map(encodeURIComponent).join("/");
     const putSeed = async (target, content, ref, sha) => {
       const tmp = (0, import_node_path25.join)((0, import_node_os14.tmpdir)(), `mmi-seed-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
@@ -27686,7 +27686,7 @@ function registerBootstrapCommands(program3) {
         if (isLegacyBlock) {
           content = upsertManagedGitignoreBlock(remoteContent).content;
         } else {
-          const writeContent = resolveSeedWriteContent(resolved, vars, readFile9, remoteContent);
+          const writeContent = resolveSeedWriteContent(resolved, vars, readFile10, remoteContent);
           if (!writeContent.ok) {
             return fail(`bootstrap apply: ${resolved.target}: ${writeContent.reason} \u2014 refusing to overwrite repo-owned content`);
           }
@@ -27823,7 +27823,7 @@ ${onlyManagedBlock ? `Only the marker-bounded Hub-managed block inside repo-owne
       }
       const rulesetSeed = repo.toLowerCase() === "mutmutco/mmi-hub" ? void 0 : manifest.seeds.find((s) => s.target === ".github/rulesets/mmi-product-required-checks.json");
       if (rulesetSeed) {
-        const rulesetContent = resolveSeedContent({ ...rulesetSeed, target: rulesetSeed.target.replace("{{REPO_SLUG}}", slug) }, vars, readFile9);
+        const rulesetContent = resolveSeedContent({ ...rulesetSeed, target: rulesetSeed.target.replace("{{REPO_SLUG}}", slug) }, vars, readFile10);
         if (rulesetContent) {
           try {
             const client = controlClient;
@@ -35940,7 +35940,7 @@ function renderVerifySecrets(body) {
 // src/command-register-collaboration.ts
 var import_node_child_process16 = require("node:child_process");
 var import_node_fs43 = require("node:fs");
-var import_promises7 = require("node:fs/promises");
+var import_promises8 = require("node:fs/promises");
 
 // src/session-runtime.ts
 var WIN32_TRAMPOLINE = "const{spawn}=require('node:child_process');const a=JSON.parse(process.argv[1]);const c=spawn(a.cmd,a.args,{stdio:'ignore',windowsHide:true,cwd:a.cwd});c.on('exit',x=>process.exit(x??0));c.on('error',()=>process.exit(1));";
@@ -35959,7 +35959,7 @@ function spawnDetachedSelf(args, deps, opts = {}) {
 }
 
 // src/command-register-collaboration.ts
-var import_node_path40 = require("node:path");
+var import_node_path41 = require("node:path");
 
 // src/attach-to-project.ts
 function boardAttachRateLimitedReceipt(resetEpochSeconds) {
@@ -36762,8 +36762,8 @@ function annotateChangeMeaning(changed, policy, read) {
 function isMeaningfulRow(file) {
   return file.meaningful !== false;
 }
-function loadPolicy(root, readFile9 = readFileOrNull2) {
-  const raw = readFile9((0, import_node_path33.join)(root, POLICY_FILE));
+function loadPolicy(root, readFile10 = readFileOrNull2) {
+  const raw = readFile10((0, import_node_path33.join)(root, POLICY_FILE));
   if (raw == null) return { mandatory: [], declared: false };
   return parsePolicy(raw, POLICY_FILE);
 }
@@ -37960,6 +37960,120 @@ async function checkDocsIndexAtHead(opts, deps) {
   };
 }
 
+// src/pr-create-zeroci.ts
+var import_promises7 = require("node:fs/promises");
+var import_node_path38 = require("node:path");
+
+// src/jervcode-node-modules-cleanup.ts
+var import_node_fs40 = require("node:fs");
+var import_node_os20 = require("node:os");
+var import_node_path37 = require("node:path");
+var JERVCODE_PACKAGE_ENTRY = (0, import_node_path37.join)("node_modules", "@jervaise", "jervcode", "dist", "launcher-entry.js");
+var WIN_NAMES2 = ["jervcode.cmd", "jervcode"];
+var POSIX_NAMES2 = ["jervcode"];
+var NODE_MODULES_CLEANUP_TIMEOUT_MS = 3e5;
+function jervcodeCandidatePaths(env = process.env, home = (0, import_node_os20.homedir)(), platform2 = process.platform) {
+  const names = platform2 === "win32" ? WIN_NAMES2 : POSIX_NAMES2;
+  const out = [];
+  for (const dir of jervCliCandidateDirs(env, home, platform2)) {
+    for (const name of names) out.push((0, import_node_path37.join)(dir, name));
+  }
+  return out;
+}
+function resolveJervcodePath(env = process.env, home = (0, import_node_os20.homedir)(), platform2 = process.platform, exists = import_node_fs40.existsSync) {
+  for (const candidate of jervcodeCandidatePaths(env, home, platform2)) {
+    if (exists(candidate)) return candidate;
+  }
+  return void 0;
+}
+function jervcodeExecFileArgs(args, opts = {}) {
+  const platform2 = opts.platform ?? process.platform;
+  const exists = opts.exists ?? import_node_fs40.existsSync;
+  const resolved = resolveJervcodePath(opts.env ?? process.env, opts.home ?? (0, import_node_os20.homedir)(), platform2, exists);
+  if (resolved) {
+    const entry = (0, import_node_path37.join)((0, import_node_path37.join)(resolved, ".."), JERVCODE_PACKAGE_ENTRY);
+    if (exists(entry)) {
+      return { file: opts.execPath ?? process.execPath, args: [entry, ...args], via: "node-entry" };
+    }
+  }
+  const bin = resolved ?? "jervcode";
+  if (platform2 === "win32") {
+    return { file: "cmd.exe", args: ["/c", bin, ...args], via: resolved ? "cmd-shim" : "bare" };
+  }
+  return { file: bin, args: [...args], via: resolved ? "posix" : "bare" };
+}
+async function removeWorktreeNodeModulesViaHelper(wtPath, opts = {}) {
+  const { cwd, timeoutMs = NODE_MODULES_CLEANUP_TIMEOUT_MS } = opts;
+  const env = opts.env ?? process.env;
+  const exec = opts.exec ?? execFileP;
+  const candidates = jervcodeCandidatePaths(env, opts.home, opts.platform ?? process.platform);
+  const plan = jervcodeExecFileArgs(["worktree-node-modules-cleanup", "--worktree", wtPath], opts);
+  const execOptions = { timeout: timeoutMs, ...cwd ? { cwd } : {} };
+  try {
+    await exec(plan.file, plan.args, execOptions);
+    return { ok: true };
+  } catch (e) {
+    const err = e;
+    const base = formatJervCliSpawnFailure(err, plan, candidates);
+    const stderr = typeof err.stderr === "string" ? err.stderr.trim() : "";
+    const detail = stderr.split("\n")[0] || base;
+    return { ok: false, error: `jervcode worktree-node-modules-cleanup failed: ${detail}` };
+  }
+}
+
+// src/pr-create-zeroci.ts
+var GATE_WORKFLOW_PATH = ".github/workflows/gate.yml";
+var ZEROCI_MINT_MARKER = "zeroci-mint: seat";
+var ZEROCI_MINT_TIMEOUT_MS = 18e5;
+var ZEROCI_MINT_MAX_BUFFER = 32 * 1024 * 1024;
+function createPrCreateZeroCiDeps() {
+  const git3 = createPrCreateDocsIndexDeps();
+  return {
+    worktreeRoot: git3.worktreeRoot,
+    originRepo: git3.originRepo,
+    readGateWorkflow: async (root) => {
+      try {
+        return await (0, import_promises7.readFile)((0, import_node_path38.join)(root, GATE_WORKFLOW_PATH), "utf8");
+      } catch {
+        return void 0;
+      }
+    },
+    mint: async (root) => {
+      const plan = jervcodeExecFileArgs(["zeroci-receipt", "--from-gate"]);
+      try {
+        await execFileHard(plan.file, plan.args, {
+          cwd: root,
+          timeout: ZEROCI_MINT_TIMEOUT_MS,
+          maxBuffer: ZEROCI_MINT_MAX_BUFFER,
+          step: "jervcode zeroci-receipt --from-gate"
+        });
+      } catch (e) {
+        const err = e;
+        const stderr = typeof err.stderr === "string" ? err.stderr.trim() : "";
+        throw new Error(stderr.split("\n").filter(Boolean).pop() || formatJervCliSpawnFailure(err, plan, jervcodeCandidatePaths()));
+      }
+    }
+  };
+}
+async function mintZeroCiReceipt(opts, deps) {
+  if (opts.zeroci === false) return void 0;
+  const root = await deps.worktreeRoot();
+  if (!root) return void 0;
+  if (opts.repo) {
+    const origin = await deps.originRepo(root);
+    if (!origin || origin.toLowerCase() !== opts.repo.toLowerCase()) return void 0;
+  }
+  const gate = await deps.readGateWorkflow(root);
+  if (!gate || !gate.includes("zeroci-verify")) return void 0;
+  if (!gate.includes(ZEROCI_MINT_MARKER)) return void 0;
+  try {
+    await deps.mint(root);
+    return void 0;
+  } catch (e) {
+    return `pr create: WARNING \u2014 ZeroCI receipt not minted, opening the PR anyway (the gate runs in full): ${e.message}`;
+  }
+}
+
 // src/pr-create-claim-guard.ts
 var CLAIM_GUARD_RATE_LIMIT_WAIT_CAP_MS = 3e4;
 function withRateLimitRetry(client, seams = {}) {
@@ -38018,68 +38132,11 @@ async function prCreateClaimRefusal(body, repoOption, deps = {}) {
 
 // src/worktree-merge-cleanup.ts
 var import_node_fs42 = require("node:fs");
-var import_node_path39 = require("node:path");
-
-// src/jervcode-node-modules-cleanup.ts
-var import_node_fs40 = require("node:fs");
-var import_node_os20 = require("node:os");
-var import_node_path37 = require("node:path");
-var JERVCODE_PACKAGE_ENTRY = (0, import_node_path37.join)("node_modules", "@jervaise", "jervcode", "dist", "launcher-entry.js");
-var WIN_NAMES2 = ["jervcode.cmd", "jervcode"];
-var POSIX_NAMES2 = ["jervcode"];
-var NODE_MODULES_CLEANUP_TIMEOUT_MS = 3e5;
-function jervcodeCandidatePaths(env = process.env, home = (0, import_node_os20.homedir)(), platform2 = process.platform) {
-  const names = platform2 === "win32" ? WIN_NAMES2 : POSIX_NAMES2;
-  const out = [];
-  for (const dir of jervCliCandidateDirs(env, home, platform2)) {
-    for (const name of names) out.push((0, import_node_path37.join)(dir, name));
-  }
-  return out;
-}
-function resolveJervcodePath(env = process.env, home = (0, import_node_os20.homedir)(), platform2 = process.platform, exists = import_node_fs40.existsSync) {
-  for (const candidate of jervcodeCandidatePaths(env, home, platform2)) {
-    if (exists(candidate)) return candidate;
-  }
-  return void 0;
-}
-function jervcodeExecFileArgs(args, opts = {}) {
-  const platform2 = opts.platform ?? process.platform;
-  const exists = opts.exists ?? import_node_fs40.existsSync;
-  const resolved = resolveJervcodePath(opts.env ?? process.env, opts.home ?? (0, import_node_os20.homedir)(), platform2, exists);
-  if (resolved) {
-    const entry = (0, import_node_path37.join)((0, import_node_path37.join)(resolved, ".."), JERVCODE_PACKAGE_ENTRY);
-    if (exists(entry)) {
-      return { file: opts.execPath ?? process.execPath, args: [entry, ...args], via: "node-entry" };
-    }
-  }
-  const bin = resolved ?? "jervcode";
-  if (platform2 === "win32") {
-    return { file: "cmd.exe", args: ["/c", bin, ...args], via: resolved ? "cmd-shim" : "bare" };
-  }
-  return { file: bin, args: [...args], via: resolved ? "posix" : "bare" };
-}
-async function removeWorktreeNodeModulesViaHelper(wtPath, opts = {}) {
-  const { cwd, timeoutMs = NODE_MODULES_CLEANUP_TIMEOUT_MS } = opts;
-  const env = opts.env ?? process.env;
-  const exec = opts.exec ?? execFileP;
-  const candidates = jervcodeCandidatePaths(env, opts.home, opts.platform ?? process.platform);
-  const plan = jervcodeExecFileArgs(["worktree-node-modules-cleanup", "--worktree", wtPath], opts);
-  const execOptions = { timeout: timeoutMs, ...cwd ? { cwd } : {} };
-  try {
-    await exec(plan.file, plan.args, execOptions);
-    return { ok: true };
-  } catch (e) {
-    const err = e;
-    const base = formatJervCliSpawnFailure(err, plan, candidates);
-    const stderr = typeof err.stderr === "string" ? err.stderr.trim() : "";
-    const detail = stderr.split("\n")[0] || base;
-    return { ok: false, error: `jervcode worktree-node-modules-cleanup failed: ${detail}` };
-  }
-}
+var import_node_path40 = require("node:path");
 
 // src/worktree-evidence-archive.ts
 var import_node_fs41 = require("node:fs");
-var import_node_path38 = require("node:path");
+var import_node_path39 = require("node:path");
 var JERV_ARTIFACT_RUN_SCOPE_ENV_VARS = ["JERV_RUN_ID", ...SESSION_ID_ENV_VARS];
 function sanitizeArchiveSegment(value, max = 80) {
   const scrubbed = value.replace(/[^A-Za-z0-9._@+-]+/g, "-").replace(/^-+|-+$/g, "");
@@ -38111,7 +38168,7 @@ function archiveWorktreeJervArtifacts(args, deps = {}) {
   const resolveRoot = deps.resolveArchiveRoot ?? repoRuntimeStatePath;
   if (!args.primaryRoot?.trim()) return { status: "skipped", reason: "missing-primary-root" };
   if (!args.worktreePath?.trim()) return { status: "skipped", reason: "missing-worktree-path" };
-  const source = (0, import_node_path38.join)(args.worktreePath, ".jerv");
+  const source = (0, import_node_path39.join)(args.worktreePath, ".jerv");
   if (!exists(source)) return { status: "absent" };
   if (!isDirectory(source)) return { status: "skipped", reason: "jerv-not-a-directory" };
   const runScope = resolveArtifactRunScope(env);
@@ -38119,7 +38176,7 @@ function archiveWorktreeJervArtifacts(args, deps = {}) {
   const stamp = now().toISOString().replace(/[:.]/g, "-");
   const dest = resolveRoot(args.primaryRoot, "jerv-artifacts", runScope, branchSlug, stamp, ".jerv");
   try {
-    mkdirp((0, import_node_path38.dirname)(dest));
+    mkdirp((0, import_node_path39.dirname)(dest));
     copyDir(source, dest);
     if (!exists(dest)) return { status: "failed", error: `archive write left no directory at ${dest}` };
     return { status: "archived", path: dest, runScope };
@@ -38135,7 +38192,7 @@ function scanWorktreeTmpEvidence(worktreePath, newerThanMs, deps = {}) {
   const exists = deps.exists ?? import_node_fs41.existsSync;
   const stat4 = deps.stat ?? defaultStat;
   const readdir2 = deps.readdir ?? import_node_fs41.readdirSync;
-  const tmpRoot = (0, import_node_path38.join)(worktreePath, "tmp");
+  const tmpRoot = (0, import_node_path39.join)(worktreePath, "tmp");
   if (!exists(tmpRoot)) return [];
   const entries = [];
   const walk2 = (dir) => {
@@ -38146,14 +38203,14 @@ function scanWorktreeTmpEvidence(worktreePath, newerThanMs, deps = {}) {
       return;
     }
     for (const name of names) {
-      const full = (0, import_node_path38.join)(dir, name);
+      const full = (0, import_node_path39.join)(dir, name);
       let st;
       try {
         st = stat4(full);
       } catch {
         continue;
       }
-      const relPath = (0, import_node_path38.relative)(worktreePath, full).replace(/\\/g, "/");
+      const relPath = (0, import_node_path39.relative)(worktreePath, full).replace(/\\/g, "/");
       if (st.isDirectory()) {
         if (st.mtimeMs > newerThanMs) entries.push({ relPath, bytes: 0, mtimeMs: st.mtimeMs });
         walk2(full);
@@ -38178,7 +38235,7 @@ function archiveWorktreeTmpArtifacts(args, deps = {}) {
   if (!args.primaryRoot?.trim()) return { status: "skipped", reason: "missing-primary-root" };
   if (!args.worktreePath?.trim()) return { status: "skipped", reason: "missing-worktree-path" };
   const scanned = scanWorktreeTmpEvidence(args.worktreePath, args.newerThanMs, deps);
-  const source = (0, import_node_path38.join)(args.worktreePath, "tmp");
+  const source = (0, import_node_path39.join)(args.worktreePath, "tmp");
   if (!scanned.length) return { status: "absent" };
   if (!exists(source)) return { status: "absent" };
   const runScope = resolveArtifactRunScope(env);
@@ -38186,7 +38243,7 @@ function archiveWorktreeTmpArtifacts(args, deps = {}) {
   const stamp = now().toISOString().replace(/[:.]/g, "-");
   const dest = resolveRoot(args.primaryRoot, "worktree-artifacts", runScope, branchSlug, stamp, "tmp");
   try {
-    mkdirp((0, import_node_path38.dirname)(dest));
+    mkdirp((0, import_node_path39.dirname)(dest));
     copyDir(source, dest);
     if (!exists(dest)) return { status: "failed", error: `archive write left no directory at ${dest}` };
     const bytes = scanned.reduce((sum, e) => sum + e.bytes, 0);
@@ -38255,7 +38312,7 @@ function normPath2(p) {
   return p.replace(/\\/g, "/").replace(/\/+$/, "");
 }
 function unlinkNodeModulesJunction(wtPath) {
-  const nm = (0, import_node_path39.join)(wtPath, "node_modules");
+  const nm = (0, import_node_path40.join)(wtPath, "node_modules");
   try {
     if ((0, import_node_fs42.lstatSync)(nm).isSymbolicLink()) (0, import_node_fs42.rmdirSync)(nm);
     return { ok: true };
@@ -38392,7 +38449,7 @@ async function preCleanWorktreeForRemoval(wtPath, execGit) {
 }
 async function listNestedIgnoredNodeModules(wtPath, execGit) {
   const out = await execGit(["-C", wtPath, "ls-files", "--others", "--ignored", "--exclude-standard", "--directory"]).catch(() => "");
-  return out.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.endsWith("node_modules/") && line !== "node_modules/").map((line) => (0, import_node_path39.join)(wtPath, line.slice(0, -1)));
+  return out.split(/\r?\n/).map((line) => line.trim()).filter((line) => line.endsWith("node_modules/") && line !== "node_modules/").map((line) => (0, import_node_path40.join)(wtPath, line.slice(0, -1)));
 }
 function safeRemoveTree(path2) {
   const stat4 = (0, import_node_fs42.lstatSync)(path2);
@@ -38405,7 +38462,7 @@ function safeRemoveTree(path2) {
     return;
   }
   if (stat4.isDirectory()) {
-    for (const entry of (0, import_node_fs42.readdirSync)(path2)) safeRemoveTree((0, import_node_path39.join)(path2, entry));
+    for (const entry of (0, import_node_fs42.readdirSync)(path2)) safeRemoveTree((0, import_node_path40.join)(path2, entry));
     (0, import_node_fs42.rmdirSync)(path2);
     return;
   }
@@ -38448,7 +38505,7 @@ function unlinkEscapingReparsePoints(root, primaryRoot) {
       return { ok: false, error: `cannot scan ${normPath2(dir)} for reparse points: ${errorMessage(e)}` };
     }
     for (const entry of entries) {
-      const child2 = (0, import_node_path39.join)(dir, entry.name);
+      const child2 = (0, import_node_path40.join)(dir, entry.name);
       if (entry.isSymbolicLink()) {
         let target = "";
         try {
@@ -38482,7 +38539,7 @@ async function describePreCleanFailure(wtPath, execGit, error) {
   const more = remaining.length > 10 ? ` (+${remaining.length - 10} more)` : "";
   const quote = (path2) => path2.replace(/'/g, "''");
   const nested = remaining.find((path2) => path2.endsWith("node_modules/") && path2 !== "node_modules/");
-  const remediation = remaining.includes("node_modules/") ? `jervcode worktree-node-modules-cleanup --worktree '${quote(wtPath)}'` : nested ? `Remove-Item -LiteralPath '${quote((0, import_node_path39.join)(wtPath, nested.slice(0, -1)))}' -Recurse -Force` : void 0;
+  const remediation = remaining.includes("node_modules/") ? `jervcode worktree-node-modules-cleanup --worktree '${quote(wtPath)}'` : nested ? `Remove-Item -LiteralPath '${quote((0, import_node_path40.join)(wtPath, nested.slice(0, -1)))}' -Recurse -Force` : void 0;
   return { ok: false, error: `${error}; remaining ignored paths: ${shown}${more}`, ...remediation ? { remediation } : {} };
 }
 function formatWorktreeRemovalFailureDetail(options) {
@@ -38776,7 +38833,7 @@ async function cleanupPrMergeLocalBranch(branch, options) {
   const preHelperGuard = unlinkEscapingReparsePoints(wtPath, options.primaryRoot);
   if (!preHelperGuard.ok) return refuseReparseEscape(preHelperGuard.error);
   unlinkedReparsePoints.push(...preHelperGuard.unlinked);
-  if (pathExists((0, import_node_path39.join)(wtPath, "node_modules"))) {
+  if (pathExists((0, import_node_path40.join)(wtPath, "node_modules"))) {
     const nmRemoved = await (options.removeRealNodeModules ?? ((p) => removeWorktreeNodeModulesViaHelper(p, { cwd: mainWorktreePath })))(wtPath);
     if (!nmRemoved.ok) {
       report.worktree = {
@@ -38943,10 +39000,10 @@ function argvWantsJson2() {
   return process.argv.some((a) => a === "--json" || a.startsWith("--json="));
 }
 function hubRoot() {
-  const fromPkg = (0, import_node_path40.join)(__dirname, "..", "..");
+  const fromPkg = (0, import_node_path41.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs43.existsSync)((0, import_node_path40.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs43.existsSync)((0, import_node_path40.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs43.existsSync)((0, import_node_path41.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs43.existsSync)((0, import_node_path41.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 function ciAuditDeps() {
@@ -38958,7 +39015,7 @@ function ciAuditDeps() {
     getProjectMeta: async (slug) => fetchProjectBySlug(slug, registryClientDeps(await cfgPromise)),
     readSeedFile: (path2) => {
       if (!root) return null;
-      const fullPath = (0, import_node_path40.join)(root, path2);
+      const fullPath = (0, import_node_path41.join)(root, path2);
       return (0, import_node_fs43.existsSync)(fullPath) ? (0, import_node_fs43.readFileSync)(fullPath, "utf8") : null;
     }
   };
@@ -39109,7 +39166,7 @@ function registerCollaborationCommands(program3) {
       try {
         title = await resolveIssueTitle(
           { title: opts.title, titleFile: opts.titleFile },
-          { readFile: import_promises7.readFile, readStdin }
+          { readFile: import_promises8.readFile, readStdin }
         );
       } catch (e) {
         return fail(
@@ -39151,8 +39208,8 @@ function registerCollaborationCommands(program3) {
     let surfaceFlagLabel;
     try {
       issueType = resolveCreateType(o.type, "issue create", o.label);
-      title = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises7.readFile, readStdin });
-      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises7.readFile, readStdin });
+      title = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises8.readFile, readStdin });
+      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises8.readFile, readStdin });
       if (o.idempotencyKey) body = appendIdempotencyMarker(body, o.idempotencyKey);
       priority = resolveCreatePriority(o.priority, "issue create");
       extraLabels = [...o.label ?? []];
@@ -39360,7 +39417,7 @@ function registerCollaborationCommands(program3) {
     }
     let body;
     try {
-      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises7.readFile, readStdin });
+      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises8.readFile, readStdin });
     } catch (e) {
       return fail(`issue comment: ${e.message}`);
     }
@@ -39420,8 +39477,8 @@ ${list}`);
     let title;
     const sourceRepo = o.repo ?? await resolveRepo(void 0);
     try {
-      title = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises7.readFile, readStdin });
-      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises7.readFile, readStdin });
+      title = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises8.readFile, readStdin });
+      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises8.readFile, readStdin });
       priority = resolveCreatePriority(o.priority, "report");
       if (!ISSUE_TYPES.includes(o.type)) {
         throw new Error(`unknown issue type "${o.type}" \u2014 expected one of: ${ISSUE_TYPES.join(", ")}`);
@@ -39476,8 +39533,8 @@ ${list}`);
     let args;
     try {
       skill = assertSkillName(o.skill);
-      rawBody = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises7.readFile, readStdin });
-      const rawTitle = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises7.readFile, readStdin });
+      rawBody = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises8.readFile, readStdin });
+      const rawTitle = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises8.readFile, readStdin });
       title = buildSkillLessonTitle(skill, rawTitle);
       priority = resolveCreatePriority(o.priority, "skill-lesson");
       body = buildSkillLessonBody(rawBody, sourceRepo, pluginSha);
@@ -39534,12 +39591,12 @@ ${list}`);
     console.log(JSON.stringify({ ...created, projectItemId, onBoard }));
   });
   const pr = program3.command("pr").description("pull requests \u2014 reliable create with structured output");
-  withExamples(pr.command("create").description("create a PR and print {number,url} JSON").option("--title <title>", "PR title").option("--title-file <path|->", "read the PR title from a UTF-8 file, or from stdin with -").option("--body <body>", "PR body (markdown)").option("--body-file <path|->", "read PR body from a UTF-8 file, or from stdin with -").option("--base <branch>", "base branch (defaults to the repo default)").option("--head <branch>", "head branch (defaults to the current branch)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--draft", "open the PR in draft state (#2667)").option("--json", "machine-readable output (default; accepted for parity)").action(async (o) => {
+  withExamples(pr.command("create").description("create a PR and print {number,url} JSON").option("--title <title>", "PR title").option("--title-file <path|->", "read the PR title from a UTF-8 file, or from stdin with -").option("--body <body>", "PR body (markdown)").option("--body-file <path|->", "read PR body from a UTF-8 file, or from stdin with -").option("--base <branch>", "base branch (defaults to the repo default)").option("--head <branch>", "head branch (defaults to the current branch)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--draft", "open the PR in draft state (#2667)").option("--no-zeroci", "skip minting the ZeroCI receipt. By default pr create mints it first, which runs the gate commands locally \u2014 pr create then takes as long as this seat needs for its own gate run, and the CI gate skips them (#6284)").option("--json", "machine-readable output (default; accepted for parity)").action(async (o) => {
     let body;
     let title;
     try {
-      title = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises7.readFile, readStdin });
-      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises7.readFile, readStdin });
+      title = await resolveIssueTitle({ title: o.title, titleFile: o.titleFile }, { readFile: import_promises8.readFile, readStdin });
+      body = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises8.readFile, readStdin });
     } catch (e) {
       return fail(`pr create: ${e.message}`, e instanceof TextArgError ? { code: e.code, offending_flag: e.offendingFlag } : void 0);
     }
@@ -39559,6 +39616,9 @@ ${list}`);
     }
     const claimRefusal = await prCreateClaimRefusal(body, o.repo);
     if (claimRefusal) return fail(claimRefusal);
+    const zeroCiWarn = await mintZeroCiReceipt({ repo: o.repo, zeroci: o.zeroci }, createPrCreateZeroCiDeps());
+    if (zeroCiWarn) process.stderr.write(`${zeroCiWarn}
+`);
     const created = await ghCreate(buildPrArgs({ title, body, base: o.base, head: o.head, repo: o.repo, draft: o.draft }));
     if (isGhCreateRateLimited(created)) {
       console.log(JSON.stringify(created));
@@ -39602,11 +39662,11 @@ ${list}`);
     }
   });
   async function listCiWorkflowPaths(cwd = process.cwd()) {
-    const wfDir = (0, import_node_path40.join)(cwd, ".github", "workflows");
+    const wfDir = (0, import_node_path41.join)(cwd, ".github", "workflows");
     if (!(0, import_node_fs43.existsSync)(wfDir)) return [];
     return (0, import_node_fs43.readdirSync)(wfDir).filter((name) => /\.(ya?ml)$/i.test(name)).filter((name) => {
       try {
-        return workflowReportsPrChecks((0, import_node_fs43.readFileSync)((0, import_node_path40.join)(wfDir, name), "utf8"));
+        return workflowReportsPrChecks((0, import_node_fs43.readFileSync)((0, import_node_path41.join)(wfDir, name), "utf8"));
       } catch {
         return true;
       }
@@ -40094,7 +40154,7 @@ ${list}`);
     const remote = foreignCwd ? `https://github.com/${targetRepo2}.git` : "origin";
     let foreignCheckout;
     if (foreignCwd) {
-      const sibling = (0, import_node_path40.join)((0, import_node_path40.dirname)(beforeWorktrees[0]?.path || startingPath || process.cwd()), targetRepo2.split("/")[1]);
+      const sibling = (0, import_node_path41.join)((0, import_node_path41.dirname)(beforeWorktrees[0]?.path || startingPath || process.cwd()), targetRepo2.split("/")[1]);
       const siblingRepo = repoFromRemoteUrl(await gitOut(["-C", sibling, "remote", "get-url", "origin"]).catch(() => ""));
       if (siblingRepo?.toLowerCase() === targetRepo2.toLowerCase()) {
         const siblingWorktrees = await execFileP("git", ["-C", sibling, "worktree", "list", "--porcelain"], { timeout: GIT_TIMEOUT_MS }).then((r) => parseGitWorktreePorcelain(r.stdout)).catch(() => void 0);
@@ -40464,7 +40524,7 @@ async function resolveWhoami(deps) {
 }
 
 // src/command-register-developer.ts
-var import_node_path45 = require("node:path");
+var import_node_path46 = require("node:path");
 
 // src/wave-land.ts
 function planWaveLand(prs) {
@@ -40721,17 +40781,17 @@ var import_node_child_process17 = require("node:child_process");
 var import_node_crypto12 = require("node:crypto");
 var import_node_fs46 = require("node:fs");
 var import_node_os21 = require("node:os");
-var import_node_path42 = require("node:path");
+var import_node_path43 = require("node:path");
 
 // ../scripts/distribution-digest.mjs
 var import_node_crypto11 = require("node:crypto");
 var import_node_fs45 = require("node:fs");
-var import_node_path41 = require("node:path");
+var import_node_path42 = require("node:path");
 var slash = (value) => value.replaceAll("\\", "/");
 function repoPath(root, declaredPath, label) {
-  const absoluteRoot = (0, import_node_path41.resolve)(root);
-  const target = (0, import_node_path41.resolve)(root, declaredPath);
-  if (target !== absoluteRoot && !target.startsWith(`${absoluteRoot}${import_node_path41.sep}`)) {
+  const absoluteRoot = (0, import_node_path42.resolve)(root);
+  const target = (0, import_node_path42.resolve)(root, declaredPath);
+  if (target !== absoluteRoot && !target.startsWith(`${absoluteRoot}${import_node_path42.sep}`)) {
     throw new Error(`${label} ${declaredPath} escapes the repository root`);
   }
   return target;
@@ -40845,7 +40905,7 @@ function walkFiles(root) {
   const files = [];
   const walk2 = (directory) => {
     for (const entry of (0, import_node_fs46.readdirSync)(directory, { withFileTypes: true }).sort((a, b) => a.name.localeCompare(b.name))) {
-      const child2 = (0, import_node_path42.join)(directory, entry.name);
+      const child2 = (0, import_node_path43.join)(directory, entry.name);
       if (entry.isDirectory()) walk2(child2);
       else files.push(child2);
     }
@@ -40855,10 +40915,10 @@ function walkFiles(root) {
 }
 function bomPathFor(root) {
   try {
-    const registry2 = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path42.join)(root, "surfaces.json"), "utf8"));
-    return (0, import_node_path42.join)(root, registry2?.sharedAgentCore?.releaseMetadata?.bomPath ?? "distribution-bom.json");
+    const registry2 = JSON.parse((0, import_node_fs46.readFileSync)((0, import_node_path43.join)(root, "surfaces.json"), "utf8"));
+    return (0, import_node_path43.join)(root, registry2?.sharedAgentCore?.releaseMetadata?.bomPath ?? "distribution-bom.json");
   } catch {
-    return (0, import_node_path42.join)(root, "distribution-bom.json");
+    return (0, import_node_path43.join)(root, "distribution-bom.json");
   }
 }
 function rebuildTo(packageRoot, outDir) {
@@ -40871,28 +40931,28 @@ function rebuildTo(packageRoot, outDir) {
   });
 }
 function runDistStatus(root) {
-  const stage = (0, import_node_fs46.mkdtempSync)((0, import_node_path42.join)((0, import_node_os21.tmpdir)(), "mmi-dist-drift-"));
+  const stage = (0, import_node_fs46.mkdtempSync)((0, import_node_path43.join)((0, import_node_os21.tmpdir)(), "mmi-dist-drift-"));
   let overlayCount = 0;
   try {
-    const cliOut = (0, import_node_path42.join)(stage, "cli-dist");
-    const hubOut = (0, import_node_path42.join)(stage, "hub-dist");
-    rebuildTo((0, import_node_path42.join)(root, "cli"), cliOut);
-    rebuildTo((0, import_node_path42.join)(root, "updater"), hubOut);
+    const cliOut = (0, import_node_path43.join)(stage, "cli-dist");
+    const hubOut = (0, import_node_path43.join)(stage, "hub-dist");
+    rebuildTo((0, import_node_path43.join)(root, "cli"), cliOut);
+    rebuildTo((0, import_node_path43.join)(root, "updater"), hubOut);
     const outDirFor = (packageDir) => packageDir === "cli" ? cliOut : hubOut;
     const rebuilt = (path2) => {
       const spec = DIST_ARTIFACTS.find((entry) => entry.path === path2);
-      return spec ? readOrNull((0, import_node_path42.join)(outDirFor(spec.packageDir), spec.output)) : null;
+      return spec ? readOrNull((0, import_node_path43.join)(outDirFor(spec.packageDir), spec.output)) : null;
     };
-    const committed = (path2) => readOrNull((0, import_node_path42.join)(root, path2));
-    const tree = (path2) => readOrNull((0, import_node_path42.join)(root, path2));
-    const distRoot = (0, import_node_path42.join)(root, "cli", "dist");
-    const distTree = () => walkFiles(distRoot).map((absolute) => `cli/dist/${(0, import_node_path42.relative)(distRoot, absolute).replaceAll("\\", "/")}`);
+    const committed = (path2) => readOrNull((0, import_node_path43.join)(root, path2));
+    const tree = (path2) => readOrNull((0, import_node_path43.join)(root, path2));
+    const distRoot = (0, import_node_path43.join)(root, "cli", "dist");
+    const distTree = () => walkFiles(distRoot).map((absolute) => `cli/dist/${(0, import_node_path43.relative)(distRoot, absolute).replaceAll("\\", "/")}`);
     const bom = JSON.parse((0, import_node_fs46.readFileSync)(bomPathFor(root), "utf8"));
     const digest = (entries) => {
-      const overlay = (0, import_node_path42.join)(stage, `overlay-${overlayCount++}`);
+      const overlay = (0, import_node_path43.join)(stage, `overlay-${overlayCount++}`);
       for (const entry of entries) {
-        const target = (0, import_node_path42.join)(overlay, entry.path);
-        (0, import_node_fs46.mkdirSync)((0, import_node_path42.dirname)(target), { recursive: true });
+        const target = (0, import_node_path43.join)(overlay, entry.path);
+        (0, import_node_fs46.mkdirSync)((0, import_node_path43.dirname)(target), { recursive: true });
         (0, import_node_fs46.writeFileSync)(target, entry.bytes);
       }
       return digestPackedFiles(overlay, entries.map((entry) => entry.path));
@@ -40970,8 +41030,8 @@ function registerEdgeCommands(program3) {
 }
 
 // src/schedules-lift-command.ts
-var import_promises8 = require("node:fs/promises");
-var import_node_path43 = require("node:path");
+var import_promises9 = require("node:fs/promises");
+var import_node_path44 = require("node:path");
 var DEFAULT_WORKFLOWS_DIR = ".github/workflows";
 var SCHEDULE_REPO_RE = /^[A-Za-z0-9_.-]+$/;
 var SchedulesLiftUsageError = class extends Error {
@@ -40991,14 +41051,14 @@ var RegistryUnreachableError = class extends Error {
 async function readWorkflowFiles(dir) {
   let names;
   try {
-    names = await (0, import_promises8.readdir)(dir);
+    names = await (0, import_promises9.readdir)(dir);
   } catch {
     return [];
   }
   const files = [];
   for (const name of names.sort()) {
     if (!/\.ya?ml$/.test(name)) continue;
-    files.push({ path: `.github/workflows/${name}`, text: await (0, import_promises8.readFile)((0, import_node_path43.join)(dir, name), "utf8") });
+    files.push({ path: `.github/workflows/${name}`, text: await (0, import_promises9.readFile)((0, import_node_path44.join)(dir, name), "utf8") });
   }
   return files;
 }
@@ -41082,7 +41142,7 @@ function registerSchedulesLiftCommand(program3, deps = {}) {
 // src/spawn-policy-core.ts
 var import_node_child_process18 = require("node:child_process");
 var import_node_fs47 = require("node:fs");
-var import_node_path44 = require("node:path");
+var import_node_path45 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
 var CALL_SOURCE = String.raw`(^|[^.\w$])(${SPAWNERS.join("|")})\s*\(`;
 var SOURCE_EXT = /\.(ts|mts|cts|js|mjs|cjs)$/;
@@ -41168,7 +41228,7 @@ function runSpawnPolicy(root) {
   for (const file of files) {
     let raw;
     try {
-      raw = (0, import_node_fs47.readFileSync)((0, import_node_path44.join)(root, file), "utf8");
+      raw = (0, import_node_fs47.readFileSync)((0, import_node_path45.join)(root, file), "utf8");
     } catch {
       continue;
     }
@@ -41188,7 +41248,7 @@ function runSpawnPolicy(root) {
 function registerDeveloperCommands(program3) {
   const rules = program3.command("rules").description("org-managed .gitignore delivery");
   rules.command("gitignore").option("--write", "upsert the managed block into .gitignore (default: check only, non-zero exit on drift)").option("--json", "machine-readable output").description("verify (or --write) this repo's org-managed .gitignore block matches the SSOT").action((opts) => {
-    const path2 = (0, import_node_path45.join)(process.cwd(), ".gitignore");
+    const path2 = (0, import_node_path46.join)(process.cwd(), ".gitignore");
     const current = (0, import_node_fs48.existsSync)(path2) ? (0, import_node_fs48.readFileSync)(path2, "utf8") : null;
     const plan = planManagedGitignore(current);
     const drift = [...plan.added.map((l) => `+${l}`), ...plan.removed.map((l) => `-${l}`)].join(", ") || "block normalize";
@@ -41448,10 +41508,10 @@ function registerDeveloperCommands(program3) {
 }
 
 // src/command-register-train-operations.ts
-var import_promises10 = require("node:fs/promises");
+var import_promises11 = require("node:fs/promises");
 
 // src/hotfix-apply.ts
-var import_promises9 = require("node:fs/promises");
+var import_promises10 = require("node:fs/promises");
 
 // src/slack-alert.ts
 var SSM_REGION = "eu-central-1";
@@ -42235,7 +42295,7 @@ async function runHotfixRelease(deps, versionInput, options = {}, doctor = runTr
     }
     let lines2;
     try {
-      lines2 = summaryFileLines(await (deps.readFile ?? ((p) => (0, import_promises9.readFile)(p, "utf8")))(options.announceSummaryFile));
+      lines2 = summaryFileLines(await (deps.readFile ?? ((p) => (0, import_promises10.readFile)(p, "utf8")))(options.announceSummaryFile));
     } catch (e) {
       throw new Error(`could not read --announce-summary-file ${options.announceSummaryFile}: ${e.message} \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`);
     }
@@ -42794,7 +42854,7 @@ function checkHotfixCarries(options) {
 
 // src/train-commands.ts
 var import_node_fs49 = require("node:fs");
-var import_node_path46 = require("node:path");
+var import_node_path47 = require("node:path");
 var INVOKED_ARGV = process.argv.slice(2);
 var RELEASE_BUMP_INTENTS = ["major", "minor", "patch"];
 function resolveReleaseBumpIntent(raw) {
@@ -42806,7 +42866,7 @@ function resolveReleaseBumpIntent(raw) {
 }
 function readRepoVersion() {
   try {
-    return JSON.parse((0, import_node_fs49.readFileSync)((0, import_node_path46.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
+    return JSON.parse((0, import_node_fs49.readFileSync)((0, import_node_path47.join)(process.cwd(), ".claude-plugin", "plugin.json"), "utf8")).version || void 0;
   } catch {
     return void 0;
   }
@@ -42969,8 +43029,8 @@ function trainApplyDeps() {
     // Slack release announcement (#883): Hub-only + best-effort inside announceRelease itself.
     announce: (args) => announceRelease({
       run: async (file, cmdArgs) => (await execFileP(file, cmdArgs, { timeout: GH_TRAIN_TIMEOUT_MS })).stdout,
-      readFile: (path2) => (0, import_promises10.readFile)(path2, "utf8"),
-      removeFile: (path2) => (0, import_promises10.unlink)(path2)
+      readFile: (path2) => (0, import_promises11.readFile)(path2, "utf8"),
+      removeFile: (path2) => (0, import_promises11.unlink)(path2)
     }, args),
     // #4713 (I/O-boundary census): `null` used to mean BOTH "this project configures no edge domains"
     // (a real answer) and "the registry read missed" — so a release verdict printed an environments block
@@ -43356,7 +43416,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
         }
         let summaryLines;
         try {
-          summaryLines = summaryFileLines(await (0, import_promises10.readFile)(o.announceSummaryFile, "utf8"));
+          summaryLines = summaryFileLines(await (0, import_promises11.readFile)(o.announceSummaryFile, "utf8"));
         } catch (e) {
           return fail(`release: could not read --announce-summary-file ${o.announceSummaryFile}: ${e.message} \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`);
         }
@@ -43550,7 +43610,7 @@ ${r.stderr ?? ""}`).catch(() => "");
 var ENV_HEAL_LOCK_STALE_MS = 10 * 6e4;
 var ENV_HEAL_LOCK_MAX_WAIT_MS = 2 * 6e4;
 function envHealLockPath(home) {
-  return (0, import_node_path47.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
+  return (0, import_node_path48.join)(home, ".claude", "plugins", ".mmi-env-heal.lock");
 }
 async function withEnvHealLock(what, run) {
   try {
@@ -43721,7 +43781,7 @@ function mmiDoctorDeps(opts = {}) {
     // has no generated routing index would
     // get a permanent — demanding an artifact it never asked for.
     docsIndexState: (root) => {
-      if (!(0, import_node_fs50.existsSync)((0, import_node_path47.join)(root, DOCS_INDEX_PATH))) return void 0;
+      if (!(0, import_node_fs50.existsSync)((0, import_node_path48.join)(root, DOCS_INDEX_PATH))) return void 0;
       const real = createDocsIndexDeps(root);
       let docs;
       const listDocs = () => docs ??= real.listDocs();
@@ -43730,7 +43790,7 @@ function mmiDoctorDeps(opts = {}) {
     },
     // #4168: working-tree heal — write if drifted, then re-check. Commit remains the operator's step.
     healDocsIndex: (root) => {
-      if (!(0, import_node_fs50.existsSync)((0, import_node_path47.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
+      if (!(0, import_node_fs50.existsSync)((0, import_node_path48.join)(root, DOCS_INDEX_PATH))) return { drift: false, docCount: 0 };
       const real = createDocsIndexDeps(root);
       let docs;
       const listDocs = () => docs ??= real.listDocs();
@@ -44609,16 +44669,16 @@ function ciAuditDeps2() {
     // gate re-seed step is skipped gracefully rather than failing mid-run.
     readSeedFile: (path2) => {
       if (!root) return null;
-      const fullPath = (0, import_node_path47.join)(root, path2);
+      const fullPath = (0, import_node_path48.join)(root, path2);
       return (0, import_node_fs50.existsSync)(fullPath) ? (0, import_node_fs50.readFileSync)(fullPath, "utf8") : null;
     }
   };
 }
 function hubRoot2() {
-  const fromPkg = (0, import_node_path47.join)(__dirname, "..", "..");
+  const fromPkg = (0, import_node_path48.join)(__dirname, "..", "..");
   const marker = "skills/bootstrap/seeds/manifest.json";
-  if ((0, import_node_fs50.existsSync)((0, import_node_path47.join)(fromPkg, marker))) return fromPkg;
-  if ((0, import_node_fs50.existsSync)((0, import_node_path47.join)(process.cwd(), marker))) return process.cwd();
+  if ((0, import_node_fs50.existsSync)((0, import_node_path48.join)(fromPkg, marker))) return fromPkg;
+  if ((0, import_node_fs50.existsSync)((0, import_node_path48.join)(process.cwd(), marker))) return process.cwd();
   return null;
 }
 registerQueryCommands(program2);
@@ -44757,7 +44817,7 @@ function directoryBytes(path2) {
     return 0;
   }
   for (const entry of entries) {
-    const child2 = (0, import_node_path47.join)(path2, entry.name);
+    const child2 = (0, import_node_path48.join)(path2, entry.name);
     if (entry.isDirectory()) total += directoryBytes(child2);
     else {
       try {
@@ -44787,7 +44847,7 @@ function pluginCacheFsDeps(configRoot, dirBytes) {
     dirBytes,
     listStagingDirs: (root) => (0, import_node_fs50.readdirSync)(root, { withFileTypes: true }).filter((d) => d.isDirectory()).map((d) => {
       try {
-        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path47.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs50.statSync)(p).mtimeMs) };
+        return { name: d.name, mtimeMs: newestMtimeMs((0, import_node_path48.join)(root, d.name), listDirEntries, (p) => (0, import_node_fs50.statSync)(p).mtimeMs) };
       } catch {
         return { name: d.name, mtimeMs: Date.now() };
       }
@@ -44801,7 +44861,7 @@ function stagingApplyFsGuard(configRoot) {
   return {
     referencedPaths: () => readInstalledPluginRefs(configRoot),
     mtimeMs: (name) => {
-      const p = (0, import_node_path47.join)(stagingRoot, name);
+      const p = (0, import_node_path48.join)(stagingRoot, name);
       if (!(0, import_node_fs50.existsSync)(p)) return null;
       try {
         return newestMtimeMs(p, listDirEntries, (q) => (0, import_node_fs50.statSync)(q).mtimeMs);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.19",
+  "version": "4.3.20",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",