@mutmutco/cli 4.3.23 → 4.3.25

package/dist/main.cjs

@@ -6862,6 +6862,9 @@ async function tenantReconcile(payload, deps) {
 async function tenantDeploy(payload, deps) {
   return postJson("/tenant-deploy", payload, deps, "POST", { noRetry: true, timeoutMs: TENANT_DEPLOY_TIMEOUT_MS });
 }
+async function actionsCanary(payload, deps) {
+  return postJson("/actions-canary", payload, deps, "POST", { noRetry: true });
+}
 
 // src/config-discovery.ts
 function stripMutableBoardConfig(cfg) {
@@ -15519,10 +15522,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.23",
-    tag: "v4.3.23",
-    commit: "64b06ac32d90",
-    npm: "@mutmutco/cli@4.3.23"
+    version: "4.3.25",
+    tag: "v4.3.25",
+    commit: "fc9a141cca17",
+    npm: "@mutmutco/cli@4.3.25"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15539,14 +15542,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.23"
+          v3Target: "v4.3.25"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.23 and redeploy the Hub Lambda from tag v4.3.23 (64b06ac32d90); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.23 (@mutmutco/cli@4.3.23, tag commit 64b06ac32d90 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.25 and redeploy the Hub Lambda from tag v4.3.25 (fc9a141cca17); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.25 (@mutmutco/cli@4.3.25, tag commit fc9a141cca17 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -18914,6 +18917,15 @@ function interpretActionsJobStart(input) {
   }
   return "pending";
 }
+var CANARY_ACCESS_BLOCK_RE = /HTTP 404|HTTP 403|Not Found|Resource not accessible|must have admin rights|not authorized|no identity|401/i;
+function isCanaryAccessBlockText(text) {
+  return !isActionsBillingBlockText(text) && CANARY_ACCESS_BLOCK_RE.test(text);
+}
+function actionsCanaryUndispatchedRefusal(detail) {
+  return new Error(
+    `release refused: the hosted-job canary (#5604) was not dispatched, so a hosted job start is UNPROVEN \u2014 this is NOT a billing verdict. ${detail} The Hub dispatches ${CANARY_WORKFLOW} with its App token for a train-authorized caller (#6319): refresh the Hub session (\`gh auth login\`) and retry, and confirm \`mmi-cli oracle org access role <owner/repo>\` reports train authority. Nothing was tagged or pushed \u2014 see docs/Guides/train-troubleshooting.md#actions-job-start-canary`
+  );
+}
 function actionsBillingRefusal(detail) {
   return new Error(
     `release refused: GitHub Actions cannot start a hosted job (billing/spending). ${detail} Fix Billing & plans / the org spending limit, then rerun. Do not mint a new tag. If a tag is already on origin, use \`mmi-cli devops release --retry-publish <run-id> --apply\` on that exact run \u2014 never recut.`
@@ -19008,14 +19020,16 @@ async function correlateCanaryRun(deps, nonce) {
     `could not correlate ${CANARY_WORKFLOW} on ${CANARY_REPO} (nonce ${nonce}): ${lastError}`
   );
 }
-async function assertActionsJobsCanStart(deps, targetRepo2) {
-  const scanned = await scanRepoForBillingBlock(deps, targetRepo2);
-  if (scanned) throw actionsBillingRefusal(scanned);
-  if (targetRepo2.toLowerCase() !== CANARY_REPO.toLowerCase()) {
-    const hubScan = await scanRepoForBillingBlock(deps, CANARY_REPO);
-    if (hubScan) throw actionsBillingRefusal(hubScan);
+async function dispatchCanary(deps, targetRepo2, nonce) {
+  const attempts = [];
+  if (deps.dispatchActionsCanary) {
+    try {
+      await deps.dispatchActionsCanary({ repo: targetRepo2, nonce });
+      return;
+    } catch (e) {
+      attempts.push(`Hub App dispatch: ${e instanceof Error ? e.message : String(e)}`);
+    }
   }
-  const nonce = `5604-${(deps.now ?? Date.now)().toString(36)}`;
   try {
     await deps.run("gh", [
       "workflow",
@@ -19026,11 +19040,27 @@ async function assertActionsJobsCanStart(deps, targetRepo2) {
       "-f",
       `nonce=${nonce}`
     ]);
+    return;
   } catch (e) {
-    throw actionsBillingRefusal(
-      `could not dispatch ${CANARY_WORKFLOW} on ${CANARY_REPO}: ${e instanceof Error ? e.message : String(e)}. A hosted publish job may not start (the v1.54.2 class).`
-    );
+    attempts.push(`gh workflow run --repo ${CANARY_REPO}: ${e instanceof Error ? e.message : String(e)}`);
+  }
+  const detail = `could not dispatch ${CANARY_WORKFLOW} on ${CANARY_REPO} \u2014 ${attempts.join(" | ")}.`;
+  if (attempts.some((a) => isActionsBillingBlockText(a))) {
+    throw actionsBillingRefusal(`${detail} A hosted publish job may not start (the v1.54.2 class).`);
+  }
+  throw actionsCanaryUndispatchedRefusal(
+    attempts.every((a) => isCanaryAccessBlockText(a)) ? `${detail} Every door answered with an access refusal \u2014 the caller may read MMI-Hub but not start its workflows.` : detail
+  );
+}
+async function assertActionsJobsCanStart(deps, targetRepo2) {
+  const scanned = await scanRepoForBillingBlock(deps, targetRepo2);
+  if (scanned) throw actionsBillingRefusal(scanned);
+  if (targetRepo2.toLowerCase() !== CANARY_REPO.toLowerCase()) {
+    const hubScan = await scanRepoForBillingBlock(deps, CANARY_REPO);
+    if (hubScan) throw actionsBillingRefusal(hubScan);
   }
+  const nonce = `5604-${(deps.now ?? Date.now)().toString(36)}`;
+  await dispatchCanary(deps, targetRepo2, nonce);
   const runId = await correlateCanaryRun(deps, nonce);
   const sleep2 = deps.sleep ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   let last = "pending";
@@ -19111,6 +19141,7 @@ Resume it:  ${resumeCommand}
 }
 
 // src/train-doctor.ts
+var import_node_child_process9 = require("node:child_process");
 var import_node_fs23 = require("node:fs");
 var import_node_os13 = require("node:os");
 var import_node_path22 = require("node:path");
@@ -21202,19 +21233,18 @@ var TRAIN_LANES = ["release", "rcand", "hotfix"];
 var TROUBLESHOOTING_GUIDE = "docs/Guides/train-troubleshooting.md";
 var SCRATCH_BRANCH_GLOBS = ["train/check/*", "hotfix-fold/*--port-*"];
 var COMPOSE_GUARD_HARD_FAIL = /^secrets preflight: .*noEnvFile is (not )?true.*$/m;
-function readLocalWorkflowsDefault(root) {
-  const dir = (0, import_node_path22.join)(root, ".github", "workflows");
-  let names;
+function readOriginWorkflowsDefault(root, ref) {
+  const git3 = (args) => (0, import_node_child_process9.execFileSync)("git", args, { cwd: root, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+  let paths;
   try {
-    names = (0, import_node_fs23.readdirSync)(dir);
-  } catch (e) {
-    if (e.code === "ENOENT") return [];
+    paths = git3(["ls-tree", "--name-only", ref, ".github/workflows/"]).split("\n").map((l) => l.trim()).filter((l) => /\.ya?ml$/i.test(l));
+  } catch {
     return null;
   }
   const files = [];
-  for (const name of names.filter((n) => /\.ya?ml$/i.test(n))) {
+  for (const path2 of paths) {
     try {
-      files.push({ path: `.github/workflows/${name}`, body: (0, import_node_fs23.readFileSync)((0, import_node_path22.join)(dir, name), "utf8") });
+      files.push({ path: path2, body: git3(["show", `${ref}:${path2}`]) });
     } catch {
     }
   }
@@ -21250,7 +21280,7 @@ var defaultDeps2 = {
   selfConverge: selfConvergeTrainCli,
   readGitignore,
   writeGitignore,
-  readWorkflows: readLocalWorkflowsDefault,
+  readWorkflows: readOriginWorkflowsDefault,
   ledgerPath: releaseLedgerPath,
   readLedgerRaw: (path2) => {
     try {
@@ -21277,10 +21307,10 @@ function message(e) {
 function laneStage(lane) {
   return lane === "rcand" ? "rc" : "main";
 }
-function laneStartBranch(lane, track) {
+function laneStartBranch(lane, track, dev) {
   if (lane === "hotfix") return void 0;
   if (lane === "rcand") return "development";
-  return track === "full" ? "rc" : "development";
+  return track === "full" && !dev ? "rc" : "development";
 }
 function defaultLane(track, currentBranch2) {
   if (track === "full") return currentBranch2 === "rc" ? "release" : "rcand";
@@ -21361,7 +21391,8 @@ async function runTrainDoctor(input) {
   } catch {
     currentBranch2 = "";
   }
-  const lane = input.lane ?? defaultLane(track, currentBranch2);
+  const lane = input.lane ?? (input.dev === true ? "release" : defaultLane(track, currentBranch2));
+  const dev = input.dev === true && lane === "release";
   if (lane === "rcand" && track === "direct") {
     add({ code: "lane-mismatch", severity: "blocker", source: "origin", title: `${repo} is direct-track (no rc) \u2014 rcand does not apply`, remedy: "run `mmi-cli devops release --apply` from development instead of rcand" });
   } else if (track === "trunk") {
@@ -21449,7 +21480,7 @@ async function runTrainDoctor(input) {
     if (restored.length) add({ code: "tree-churn", severity: "healed", source: "local", title: `restored content-identical churn: ${restored.join(", ")}`, remedy: "nothing \u2014 the paths carried no content change (mode/EOL churn)" });
     if (left.length) add({ code: "tree-churn", severity: "blocker", source: "local", title: `content-identical churn blocks the clean-tree gate: ${left.join(", ")}`, remedy: `run \`mmi-cli devops train doctor --heal\` or \`git checkout -- ${left.join(" ")}\`` });
   }
-  const startBranch = laneStartBranch(lane, track);
+  const startBranch = laneStartBranch(lane, track, dev);
   if (startBranch && currentBranch2 !== startBranch) {
     let linked = false;
     try {
@@ -21460,15 +21491,17 @@ async function runTrainDoctor(input) {
     add(linked ? { code: "worktree-isolated", severity: "blocker", source: "local", title: `this is a linked worktree on ${currentBranch2 || "(detached)"}, not the lane's start branch ${startBranch} (#2770)`, remedy: `run the ${lane} lane from the primary checkout on ${startBranch}; a linked worktree never carries the train` } : { code: "branch-mismatch", severity: "blocker", source: "local", title: `on ${currentBranch2 || "(detached)"}; the ${lane} lane starts from ${startBranch}`, remedy: `git checkout ${startBranch}, then rerun` });
   }
   const stage = laneStage(lane);
-  const workflows = deps.readWorkflows(cwd);
+  const workflowsRef = `origin/${startBranch ?? "main"}`;
+  const workflows = deps.readWorkflows(cwd, workflowsRef);
   if (workflows === null) {
-    add({ code: "workflows-unreadable", severity: "blocker", source: "local", title: `.github/workflows under ${cwd} could not be read \u2014 the tag-addressability (#5428) and npm-major (#5666) preflights did not run`, remedy: "run from a checkout whose .github/workflows directory is readable, then rerun; an unread workflow set is unverified, not green" });
+    add({ code: "workflows-unreadable", severity: "blocker", source: "local", title: `.github/workflows at ${workflowsRef} could not be read from ${cwd} \u2014 the tag-addressability (#5428) and npm-major (#5666) preflights did not run`, remedy: `run from a checkout whose git can read ${workflowsRef} (fetch origin first), then rerun; an unread workflow set is unverified, not green` });
   }
   if (hints) {
     const missing = [
       ...!hints.hasDevelopmentBranch && lane !== "hotfix" ? ["development"] : [],
       ...!hints.hasMainBranch ? ["main"] : [],
-      ...!hints.hasRcBranch && track === "full" ? ["rc"] : []
+      // #6318: a `--dev` release never reads, merges or tags rc — a missing rc branch cannot block it.
+      ...!hints.hasRcBranch && track === "full" && !dev ? ["rc"] : []
     ];
     if (missing.length) add({ code: "bootstrap-gap", severity: "blocker", source: "origin", title: `train branch(es) missing on origin: ${missing.join(", ")}`, remedy: `bootstrap the repo train: \`mmi-cli devops bootstrap apply ${repo} --execute\` (from the MMI-Hub root), then rerun` });
   }
@@ -23410,7 +23443,7 @@ async function resolveHotfixVersion(deps, env = process.env) {
 }
 async function runTrainApply(command, deps, options = {}) {
   const watch = options.watch ?? false;
-  await runTrainDoctor({ lane: command === "rcand" ? "rcand" : "release", heal: true, train: deps, refuse: true });
+  await runTrainDoctor({ lane: command === "rcand" ? "rcand" : "release", dev: command === "release" && options.dev === true, heal: true, train: deps, refuse: true });
   const ctx = await buildTrainApplyContext(deps);
   await requireCleanTree(deps);
   await runGitRemoteRead(deps, ["fetch", "origin"]);
@@ -23458,6 +23491,7 @@ var GATE_GREEN_ON_BASE_LABEL = "gate is green on the default branch (#3819)";
 var REQUIRED_CONTEXTS_EMITTED_LABEL = "required check contexts match PR workflows";
 var TAG_ADDRESSABLE_CONTEXTS_LABEL = "rc/main required contexts are tag-addressable (#3880)";
 var RELEASE_BRANCH_REACHABLE_LABEL = "rc/main required contexts are reachable from a release-base head (#5193)";
+var RULESET_TRACK_SCOPE_LABEL = "product ruleset branch scope covers the release track (#6327)";
 var RECONCILE_SEED_BRANCH_PREFIX = "bootstrap-seed-ruleset-ref";
 function slugFromRepo(repo) {
   return (repo.includes("/") ? repo.split("/")[1] : repo).toLowerCase();
@@ -23524,6 +23558,10 @@ function gateWorkflowFiles(prWorkflowPaths) {
   return files.length ? files : DEFAULT_GATE_FILES;
 }
 async function resolveEmittedPrContexts(deps, repo, branch) {
+  const workflows = await resolveBranchWorkflows(deps, repo, branch);
+  return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows);
+}
+async function resolveBranchWorkflows(deps, repo, branch) {
   const paths = await listWorkflowPaths(deps, repo, branch);
   if (paths === void 0) return void 0;
   const workflows = [];
@@ -23531,7 +23569,7 @@ async function resolveEmittedPrContexts(deps, repo, branch) {
     const body = await fetchFileContent(deps, repo, branch, path2);
     if (body) workflows.push({ path: path2, body });
   }
-  return collectPullRequestWorkflowContexts(workflows);
+  return workflows;
 }
 function registryRequiredContexts(meta) {
   const raw = meta?.requiredChecks;
@@ -23544,6 +23582,9 @@ function refPatternCovers(pattern, ref) {
   const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&").replace(/\*/g, ".*");
   return new RegExp(`^${escaped}$`).test(ref);
 }
+function uncoveredTrackBranches(liveIncludes, trackBranches) {
+  return trackBranches.filter((branch) => !liveIncludes.some((pattern) => refPatternCovers(pattern, `refs/heads/${branch}`)));
+}
 function rulesetCoversReleaseBranches(payload, track) {
   const conditions = payload.conditions;
   const include = conditions?.ref_name?.include;
@@ -23753,10 +23794,14 @@ async function auditRepoCi(repo, deps) {
     prWorkflowPaths = listedWorkflowPaths === void 0 ? [] : await filterPullRequestTriggered(deps, repo, baseBranch, listedWorkflowPaths);
   }
   const hasGateWorkflow = hasCanonicalGateWorkflow || prWorkflowPaths.length > 0;
-  let emittedPrContexts;
+  let branchWorkflows;
+  const getBranchWorkflows = async () => {
+    branchWorkflows ??= await resolveBranchWorkflows(deps, repo, baseBranch);
+    return branchWorkflows;
+  };
   const getEmittedPrContexts = async () => {
-    emittedPrContexts ??= await resolveEmittedPrContexts(deps, repo, baseBranch);
-    return emittedPrContexts;
+    const workflows = await getBranchWorkflows();
+    return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows);
   };
   const committedReferenceRaw = deployableGated ? await fetchFileContent(deps, repo, baseBranch, PRODUCT_RULESET_REF) : null;
   let authoritativeRuleset = null;
@@ -23840,6 +23885,18 @@ async function auditRepoCi(repo, deps) {
         });
       }
     }
+    if (productRuleset != null) {
+      const missingTrackBranches = [];
+      for (const branch of uncoveredTrackBranches(liveBranchIncludes, branchesForTrack(resolveReleaseTrack(meta, void 0, repo)))) {
+        if (await branchPresence(deps, repo, branch) === true) missingTrackBranches.push(branch);
+      }
+      checks.push({
+        ok: missingTrackBranches.length === 0,
+        label: RULESET_TRACK_SCOPE_LABEL,
+        detail: missingTrackBranches.length ? `live ${PRODUCT_RULESET_NAME} includes [${liveBranchIncludes.join(", ")}] but the release track also requires [${missingTrackBranches.join(", ")}] \u2014 those branches tag and merge with no required check` : void 0,
+        remediation: missingTrackBranches.length ? `mmi-cli oracle org project set ${repo} --var requiredCheckBranches=${JSON.stringify(branchesForTrack(resolveReleaseTrack(meta, void 0, repo)))} then mmi-cli devops bootstrap apply ${repo} --execute` : void 0
+      });
+    }
     const contextAuthority = authoritativeRuleset ?? registryAuthorityWithoutReference(meta, repo);
     if (contextAuthority != null) {
       const emitted = await getEmittedPrContexts();
@@ -23854,11 +23911,12 @@ async function auditRepoCi(repo, deps) {
         });
       }
       const prOnly = contextAuthority.coversReleaseBranches ? contextAuthority.contexts.filter((context) => TRAIN_PR_ONLY_CONTEXTS.has(context)) : [];
+      const tagBlind = contextAuthority.coversReleaseBranches ? contextsUnreachableOnTagPush(contextAuthority.contexts, await getBranchWorkflows() ?? [], TRAIN_PR_ONLY_CONTEXTS) : [];
       checks.push({
-        ok: prOnly.length === 0,
+        ok: prOnly.length === 0 && tagBlind.length === 0,
         label: TAG_ADDRESSABLE_CONTEXTS_LABEL,
-        detail: prOnly.length ? `${contextAuthority.source} requires [${prOnly.join(", ")}] on rc/main, but those contexts can only materialize for pull_request` : void 0,
-        remediation: prOnly.length ? `Remove [${prOnly.join(", ")}] from rc/main requirements in registry META or ${PRODUCT_RULESET_REF}` : void 0
+        detail: prOnly.length ? `${contextAuthority.source} requires [${prOnly.join(", ")}] on rc/main, but those contexts can only materialize for pull_request` : tagBlind.length ? `${contextAuthority.source} requires [${tagBlind.join(", ")}] on rc/main, but their workflows never trigger on a v* tag push (#5428) \u2014 the train would tag and wait forever` : void 0,
+        remediation: prOnly.length ? `Remove [${prOnly.join(", ")}] from rc/main requirements in registry META or ${PRODUCT_RULESET_REF}` : tagBlind.length ? `Add push: tags: ['v*'] to the workflow(s) emitting [${tagBlind.join(", ")}] on ${baseBranch} (MMI-Hub .github/workflows/gate.yml is the shape)` : void 0
       });
       if (productRuleset != null && liveContexts.length > 0) {
         const releaseBranches = releaseBranchRefsCovered(productRuleset.conditions, resolveReleaseTrack(meta, void 0, repo));
@@ -25448,10 +25506,10 @@ async function loadConfigForBoardSelector2(selector, repoOption) {
 }
 
 // src/statusline-invalidate.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 function invalidateStatuslineBoardCache() {
   try {
-    const child2 = (0, import_node_child_process9.spawn)("jerv-cli", ["lane", "ops", "invalidate-board"], {
+    const child2 = (0, import_node_child_process10.spawn)("jerv-cli", ["lane", "ops", "invalidate-board"], {
       detached: true,
       stdio: "ignore",
       windowsHide: true
@@ -28326,6 +28384,7 @@ LIVE apply to ${repo}:
           branchExists = false;
         }
         if (!branchExists) await gh(["api", `repos/${rec.repo}/git/refs`, "-f", `ref=refs/heads/${branch}`, "-f", `sha=${baseSha}`]);
+        else await gh(["api", "-X", "PATCH", `repos/${rec.repo}/git/refs/heads/${branch}`, "-f", `sha=${baseSha}`, "-F", "force=true"]);
         let existingSha;
         try {
           const cur = await gh(["api", `repos/${rec.repo}/contents/${enc(seed.target)}?ref=${branch}`]);
@@ -29525,7 +29584,7 @@ function deriveComposeProjectName(worktreePath) {
 }
 
 // src/stage-runner.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 var import_node_fs28 = require("node:fs");
 var import_node_path27 = require("node:path");
 var import_node_net = require("node:net");
@@ -29574,7 +29633,7 @@ function findEnvFiles(root) {
 }
 
 // src/stage-runner.ts
-var execFileP3 = (0, import_node_util5.promisify)(import_node_child_process10.execFile);
+var execFileP3 = (0, import_node_util5.promisify)(import_node_child_process11.execFile);
 var DOCKER_TIMEOUT_MS = 15e3;
 var EARLY_EXIT_GRACE_MS = 2e3;
 function earlyExitGraceMs() {
@@ -30092,7 +30151,7 @@ async function startStage(config = {}, opts = {}) {
   let up = sub(config.up.trim());
   if (opts.forceRecreate) up = appendForceRecreate(up);
   const identity = await resolveStageIdentity(cwd);
-  const child2 = (0, import_node_child_process10.spawn)(up, {
+  const child2 = (0, import_node_child_process11.spawn)(up, {
     cwd,
     shell: true,
     // POSIX-only: the process group exists for the group-kill in stopStage. On win32 teardown is
@@ -34612,9 +34671,9 @@ function writeError(res) {
 
 // src/schedules-commands.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 var import_node_util6 = require("node:util");
-var execFileP4 = (0, import_node_util6.promisify)(import_node_child_process11.execFile);
+var execFileP4 = (0, import_node_util6.promisify)(import_node_child_process12.execFile);
 var AWS_REGION = "eu-central-1";
 var AWS_TIMEOUT_MS = 3e4;
 var AWS_RETRY_DELAY_MS = 1500;
@@ -36134,7 +36193,7 @@ function renderVerifySecrets(body) {
 }
 
 // src/command-register-collaboration.ts
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 var import_node_fs43 = require("node:fs");
 var import_promises7 = require("node:fs/promises");
 
@@ -36349,14 +36408,6 @@ async function runPrLand(prNumber, options, deps) {
       };
     }
   }
-  const queue = await deps.queueMerge?.(prNumber, repo);
-  if (queue) return {
-    ...base,
-    queue,
-    status: queue.state === "merged" ? "merged" : "failed",
-    mergeStatus: queue.state === "merged" ? "merged" : "failed",
-    ...queue.state === "merged" ? {} : { error: queue.detail }
-  };
   const ciPolicy = await deps.resolveCiPolicy(repo);
   base.ciPolicy = ciPolicy;
   const checksWaitError = (checksWait) => {
@@ -36516,12 +36567,12 @@ function boardAdvanceFailureMessage(result) {
 }
 
 // src/test-policy-core.ts
-var import_node_child_process13 = require("node:child_process");
+var import_node_child_process14 = require("node:child_process");
 var import_node_fs36 = require("node:fs");
 var import_node_path33 = require("node:path");
 
 // src/test-command-policy-shared.mjs
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var TEST_COMMAND_CLASS = "test";
 var TRAILER_KEY = "Test-Policy-Override";
 var OVERRIDE_RE = /^Test-Policy-Override:\s*(.+)$/im;
@@ -36621,7 +36672,7 @@ function evaluateTestCommandPolicy({ paths, mandatory, regulated = true, overrid
   };
 }
 function git(args, cwd) {
-  return (0, import_node_child_process12.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
+  return (0, import_node_child_process13.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
 }
 function parseScope(value) {
   const scoped = /^\[([^\]]*)\]\s*([\s\S]*)$/.exec(value);
@@ -37120,14 +37171,14 @@ function evaluate(changed, policy, present = () => false) {
   return findings;
 }
 function git2(args, cwd) {
-  return (0, import_node_child_process13.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
+  return (0, import_node_child_process14.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
 }
 var COAUTHOR_KEY = "Co-authored-by";
 var GH_MESSAGE_SEPARATOR = /^-{5,}$/;
 var LIFTED_KEYS = new RegExp(`^(?:${TRAILER_KEY}|${COAUTHOR_KEY}):`, "i");
 function parseTrailers(message2, cwd) {
   try {
-    return (0, import_node_child_process13.execFileSync)("git", ["interpret-trailers", "--parse", "--unfold"], {
+    return (0, import_node_child_process14.execFileSync)("git", ["interpret-trailers", "--parse", "--unfold"], {
       windowsHide: true,
       cwd,
       input: message2,
@@ -37668,287 +37719,9 @@ async function deleteMergedRemoteBranch(options) {
   };
 }
 
-// src/review-verdict.ts
-var import_node_child_process14 = require("node:child_process");
+// src/post-merge-recon.ts
 var import_node_fs38 = require("node:fs");
-var import_node_os19 = require("node:os");
 var import_node_path35 = require("node:path");
-var REVIEW_VERDICT_MARKER = "<!-- zeroci-review v1 -->";
-var REVIEW_VERDICTS = ["PROCEED", "CORRECT", "ESCALATE"];
-function isReviewVerdict(value) {
-  return typeof value === "string" && REVIEW_VERDICTS.includes(value);
-}
-function renderReviewVerdictComment(input) {
-  const payload = {
-    v: 1,
-    patch: input.patch,
-    head: input.head,
-    verdict: input.verdict,
-    scope: input.scope,
-    risk: input.risk,
-    unverified: input.unverified,
-    reviewer: input.reviewer
-  };
-  const findings = input.findings?.trim();
-  return `${REVIEW_VERDICT_MARKER}
-\`\`\`json
-${JSON.stringify(payload, null, 2)}
-\`\`\`
-${findings ? `
-${findings}
-` : ""}`;
-}
-function isReviewVerdictComment(body) {
-  return body.trimStart().startsWith(REVIEW_VERDICT_MARKER);
-}
-var FENCE_RE = /^(?:`{3,}|~{3,})[^\n]*\n([\s\S]*?)\n(?:`{3,}|~{3,})\s*$/m;
-function parseReviewVerdictComment(body) {
-  if (!isReviewVerdictComment(body)) return void 0;
-  const rest = body.trimStart().slice(REVIEW_VERDICT_MARKER.length);
-  const fence = FENCE_RE.exec(rest);
-  if (!fence) return void 0;
-  let parsed;
-  try {
-    parsed = JSON.parse(fence[1]);
-  } catch {
-    return void 0;
-  }
-  if (!parsed || typeof parsed !== "object") return void 0;
-  const p = parsed;
-  if (p.v !== 1 || !isReviewVerdict(p.verdict)) return void 0;
-  if (typeof p.patch !== "string" || !/^[0-9a-f]{40}$/.test(p.patch)) return void 0;
-  if (typeof p.head !== "string" || typeof p.scope !== "string" || typeof p.risk !== "string" || typeof p.reviewer !== "string") return void 0;
-  const unverified = Array.isArray(p.unverified) ? p.unverified.filter((u) => typeof u === "string") : [];
-  return { v: 1, patch: p.patch, head: p.head, verdict: p.verdict, scope: p.scope, risk: p.risk, unverified, reviewer: p.reviewer };
-}
-function latestReviewComment(comments) {
-  let latest;
-  for (const c of comments) {
-    if (!isReviewVerdictComment(c.body)) continue;
-    if (!latest || c.createdAt > latest.createdAt || c.createdAt === latest.createdAt && (c.id ?? 0) >= (latest.id ?? 0)) latest = c;
-  }
-  return latest;
-}
-function evaluateReviewVerdict(comments, currentPatchId) {
-  const latest = latestReviewComment(comments);
-  if (!latest) return { ok: false, reason: "none" };
-  const payload = parseReviewVerdictComment(latest.body);
-  if (!payload) return { ok: false, reason: "malformed" };
-  if (payload.verdict !== "PROCEED") return { ok: false, reason: "not-proceed", verdict: payload.verdict, patch: payload.patch };
-  if (payload.patch !== currentPatchId) return { ok: false, reason: "stale", verdict: payload.verdict, patch: payload.patch };
-  return { ok: true, reason: "proceed", verdict: payload.verdict, patch: payload.patch };
-}
-function evaluateTrustedReviewVerdict(comments, patch, head) {
-  const latest = latestReviewComment(comments);
-  if (!latest) return { ok: false, reason: "none" };
-  const identity = { commentId: latest.id, commentCreatedAt: latest.createdAt };
-  if (latest.author?.toLowerCase() !== "jervaise") return { ...identity, ok: false, reason: "untrusted-author" };
-  const evaluation = evaluateReviewVerdict([latest], patch);
-  if (!evaluation.ok) return { ...identity, ok: false, reason: evaluation.reason };
-  if (parseReviewVerdictComment(latest.body)?.head !== head) return { ...identity, ok: false, reason: "stale-head" };
-  return { ...identity, ok: true, reason: "proceed" };
-}
-async function checkPrReview(number, repo, head, deps = {
-  readHead: readPrHeadSha,
-  readComments: readPrIssueComments,
-  computePatch: computePrPatchId
-}) {
-  const base = { repo, number, head };
-  if (!/^[1-9][0-9]*$/.test(number) || !/^[\w.-]+\/[\w.-]+$/.test(repo) || !/^[0-9a-f]{40}$/.test(head)) {
-    return { ...base, ok: false, reason: "invalid-input", detail: "expected a PR number, owner/repo and exact lowercase 40-character head SHA" };
-  }
-  try {
-    if (await deps.readHead(number, repo) !== head) return { ...base, ok: false, reason: "stale-head" };
-    const [comments, patch] = await Promise.all([deps.readComments(number, repo), deps.computePatch(number, repo)]);
-    if (await deps.readHead(number, repo) !== head) return { ...base, ok: false, reason: "stale-head" };
-    return { ...base, patch, ...evaluateTrustedReviewVerdict(comments, patch, head) };
-  } catch (e) {
-    return { ...base, ok: false, reason: "unreadable", detail: e.message };
-  }
-}
-function computePrPatchId(number, repo) {
-  return new Promise((resolve7, reject) => {
-    const gh = (0, import_node_child_process14.spawn)("gh", ["pr", "diff", number, "--repo", repo], { windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
-    const git3 = (0, import_node_child_process14.spawn)("git", ["patch-id", "--stable"], { windowsHide: true, stdio: ["pipe", "pipe", "pipe"] });
-    let out = "";
-    let ghErr = "";
-    let gitErr = "";
-    const timer = setTimeout(() => {
-      gh.kill();
-      git3.kill();
-      reject(new Error(`patch-id: timed out after ${GC_GH_TIMEOUT_MS4}ms`));
-    }, GC_GH_TIMEOUT_MS4);
-    gh.stdout.pipe(git3.stdin);
-    gh.stderr.on("data", (d) => {
-      ghErr += d.toString();
-    });
-    git3.stderr.on("data", (d) => {
-      gitErr += d.toString();
-    });
-    git3.stdout.on("data", (d) => {
-      out += d.toString();
-    });
-    gh.on("error", (e) => {
-      clearTimeout(timer);
-      reject(e);
-    });
-    git3.on("error", (e) => {
-      clearTimeout(timer);
-      reject(e);
-    });
-    let ghCode;
-    let gitCode;
-    const finish = () => {
-      if (ghCode === void 0 || gitCode === void 0) return;
-      clearTimeout(timer);
-      if (ghCode !== 0) return reject(Object.assign(new Error(`gh pr diff ${number} --repo ${repo} exited ${ghCode}: ${ghErr.trim()}`), { stderr: ghErr }));
-      if (gitCode !== 0) return reject(new Error(`git patch-id --stable exited ${gitCode}: ${gitErr.trim()}`));
-      const id = out.trim().split(/\s+/)[0];
-      if (!/^[0-9a-f]{40}$/.test(id ?? "")) return reject(new Error(`patch-id: PR #${number} diff is empty or unreadable (gh: ${ghErr.trim() || "no stderr"})`));
-      resolve7(id);
-    };
-    gh.on("close", (code) => {
-      ghCode = code;
-      finish();
-    });
-    git3.on("close", (code) => {
-      gitCode = code;
-      finish();
-    });
-    git3.stdin.on("error", (e) => {
-      clearTimeout(timer);
-      gh.kill();
-      git3.kill();
-      reject(e);
-    });
-  });
-}
-async function readPrHeadSha(number, repo) {
-  const { stdout } = await execFileP("gh", ["api", `repos/${repo}/pulls/${number}`, "--jq", ".head.sha"], { timeout: GC_GH_TIMEOUT_MS4 });
-  const sha = stdout.trim();
-  if (!/^[0-9a-f]{40}$/.test(sha)) throw new Error(`could not read PR #${number} head sha`);
-  return sha;
-}
-async function readPrIssueComments(number, repo) {
-  const { stdout } = await execFileP("gh", ["api", "--paginate", `repos/${repo}/issues/${number}/comments?per_page=100`, "--jq", ".[] | {id, body, createdAt: .created_at, author: .user.login}"], { timeout: GC_GH_TIMEOUT_MS4 });
-  const comments = parseNdjsonLines(stdout);
-  if (comments.some((c) => !c || !Number.isSafeInteger(c.id) || c.id <= 0 || typeof c.body !== "string" || typeof c.createdAt !== "string" || !Number.isFinite(Date.parse(c.createdAt)) || c.author !== null && typeof c.author !== "string")) throw new Error("unreadable PR comment identity");
-  return comments;
-}
-async function postPrCommentFromFile(number, repo, body) {
-  const dir = (0, import_node_fs38.mkdtempSync)((0, import_node_path35.join)((0, import_node_os19.tmpdir)(), "mmi-review-verdict-"));
-  const path2 = (0, import_node_path35.join)(dir, "body.md");
-  try {
-    (0, import_node_fs38.writeFileSync)(path2, body, "utf8");
-    const { stdout } = await execFileP("gh", ["pr", "comment", number, "--repo", repo, "--body-file", path2], { timeout: GH_MUTATION_TIMEOUT_MS });
-    return stdout.trim();
-  } finally {
-    try {
-      (0, import_node_fs38.rmSync)(dir, { recursive: true, force: true });
-    } catch {
-    }
-  }
-}
-
-// src/pr-mergify-queue.ts
-var MERGIFY_PILOT_REPO = "mutmutco/Jerv-JervCode";
-var MERGIFY_PILOT_VARIABLE = "JERV_BATCH_QUEUE_PILOT";
-var MERGIFY_READY_LABEL = "ready-to-merge";
-async function ghJson(args) {
-  return JSON.parse((await execFileP("gh", ["api", ...args], { timeout: GC_GH_TIMEOUT_MS4 })).stdout);
-}
-async function usesMergifyPilot(repo, base, readVariable = async () => ghJson([`repos/${repo}/actions/variables/${MERGIFY_PILOT_VARIABLE}`])) {
-  if (repo.toLowerCase() !== MERGIFY_PILOT_REPO.toLowerCase() || base !== "development") return false;
-  const variable = await readVariable();
-  if (variable?.value === "true") return true;
-  if (variable?.value === "false") return false;
-  throw new Error(`Mergify pilot activation is missing or malformed on ${repo}; refusing native merge`);
-}
-function queueCheckState(checks, head) {
-  const check = checks.filter((c) => c.name === "Mergify Merge Queue" && c.head_sha === head && c.app?.id === 10562 && c.app.slug === "mergify").sort((a, b) => b.id - a.id)[0];
-  if (!check) return "refused";
-  if (check.conclusion && !["success", "neutral"].includes(check.conclusion)) return "refused";
-  if (["In merge queue", "Running merge queue checks"].includes(check.output?.title ?? "")) return "pending";
-  return "requested";
-}
-async function requestMergifyMerge(number, repo, guardedText, expectedHead, deps = {
-  readPull: () => ghJson([`repos/${repo}/pulls/${number}`]),
-  readChecks: async (head) => parseNdjsonLines((await execFileP("gh", [
-    "api",
-    "--paginate",
-    `repos/${repo}/commits/${head}/check-runs?per_page=100`,
-    "--jq",
-    ".check_runs[]"
-  ], { timeout: GC_GH_TIMEOUT_MS4 })).stdout),
-  addLabel: async () => {
-    await ghJson([`repos/${repo}/issues/${number}/labels`, "--method", "POST", "-f", `labels[]=${MERGIFY_READY_LABEL}`]);
-  },
-  review: (head) => checkPrReview(number, repo, head),
-  now: () => Date.now(),
-  sleep: (ms) => new Promise((resolve7) => setTimeout(resolve7, ms))
-}, timeoutMs = 6e5) {
-  let head = expectedHead ?? "";
-  let state = "refused";
-  const receipt = (detail) => ({ provider: "mergify", state, head, detail });
-  try {
-    if (repo.toLowerCase() !== MERGIFY_PILOT_REPO.toLowerCase()) return receipt("repository is outside the Mergify pilot");
-    const initial = await deps.readPull();
-    head = expectedHead ?? initial.head.sha;
-    const sameTarget = (pr) => /^[0-9a-f]{40}$/.test(head) && pr.head.sha === head && pr.base.ref === "development";
-    if (!sameTarget(initial)) return receipt("PR head or target base changed");
-    if (initial.merged === true) {
-      state = "merged";
-      return receipt("GitHub confirms the PR merged");
-    }
-    const validate = (pr) => pr.state === "open" && sameTarget(pr) && `${pr.title}
-${pr.body ?? ""}` === guardedText;
-    if (!validate(initial)) return receipt("PR state, head, base or guarded title/body changed");
-    const initialState = queueCheckState(await deps.readChecks(head), head);
-    if (initialState === "refused") return receipt("trusted current-head Mergify check is absent or failed");
-    if (!(await deps.review(head)).ok) return receipt("current trusted review verdict does not permit queue admission");
-    if (!validate(await deps.readPull())) return receipt("PR changed before queue request");
-    let mutationDetail = "";
-    if (!initial.labels.some((label) => label.name === MERGIFY_READY_LABEL)) {
-      try {
-        await deps.addLabel();
-      } catch {
-        mutationDetail = "Label response was ambiguous; no replay was attempted. ";
-      }
-    }
-    state = "requested";
-    const deadline = deps.now() + timeoutMs;
-    while (true) {
-      const pr = await deps.readPull();
-      if (!sameTarget(pr)) {
-        state = "refused";
-        return receipt("PR head or target base changed while queued");
-      }
-      if (pr.merged === true) {
-        state = "merged";
-        return receipt("GitHub confirms the PR merged");
-      }
-      if (!validate(pr)) {
-        state = "refused";
-        return receipt("PR state, head, base or guarded title/body changed while queued");
-      }
-      state = queueCheckState(await deps.readChecks(head), head);
-      if (state === "refused") return receipt("trusted current-head Mergify check is absent or failed");
-      if (!pr.labels.some((label) => label.name === MERGIFY_READY_LABEL)) {
-        state = "refused";
-        return receipt(`${mutationDetail}Queue request label is absent`);
-      }
-      if (deps.now() >= deadline) return receipt(`${mutationDetail}${state === "pending" ? "Mergify confirms queue admission" : "Queue requested; Mergify has not confirmed admission"}; PR has not merged within the wait window`);
-      await deps.sleep(3e4);
-    }
-  } catch {
-    state = "refused";
-    return receipt("Mergify or GitHub state is unreadable; no native merge was attempted");
-  }
-}
-
-// src/post-merge-recon.ts
-var import_node_fs39 = require("node:fs");
-var import_node_path36 = require("node:path");
 
 // src/cross-repo-filing-issue.ts
 function crossRepoFilingRetryCommand(prRepo, prNumber) {
@@ -38114,16 +37887,16 @@ function buildPostMergeReconRecovery(input) {
 }
 function writePostMergeReconRecovery(cwd, recovery) {
   const path2 = postMergeReconStatePath(cwd, recovery.repo, recovery.pr);
-  (0, import_node_fs39.mkdirSync)((0, import_node_path36.dirname)(path2), { recursive: true });
-  (0, import_node_fs39.writeFileSync)(path2, `${JSON.stringify(recovery, null, 2)}
+  (0, import_node_fs38.mkdirSync)((0, import_node_path35.dirname)(path2), { recursive: true });
+  (0, import_node_fs38.writeFileSync)(path2, `${JSON.stringify(recovery, null, 2)}
 `, "utf8");
   return path2;
 }
 function clearPostMergeReconRecovery(cwd, repo, pr) {
   const path2 = postMergeReconStatePath(cwd, repo, pr);
-  if (!(0, import_node_fs39.existsSync)(path2)) return;
+  if (!(0, import_node_fs38.existsSync)(path2)) return;
   try {
-    (0, import_node_fs39.unlinkSync)(path2);
+    (0, import_node_fs38.unlinkSync)(path2);
   } catch {
   }
 }
@@ -38153,15 +37926,197 @@ function postMergeReconWarnings(input) {
   return lines2;
 }
 
-// src/pr-create-docs-check.ts
+// src/review-verdict.ts
 var import_node_child_process15 = require("node:child_process");
+var import_node_fs39 = require("node:fs");
+var import_node_os19 = require("node:os");
+var import_node_path36 = require("node:path");
+var REVIEW_VERDICT_MARKER = "<!-- zeroci-review v1 -->";
+var REVIEW_VERDICTS = ["PROCEED", "CORRECT", "ESCALATE"];
+function isReviewVerdict(value) {
+  return typeof value === "string" && REVIEW_VERDICTS.includes(value);
+}
+function renderReviewVerdictComment(input) {
+  const payload = {
+    v: 1,
+    patch: input.patch,
+    head: input.head,
+    verdict: input.verdict,
+    scope: input.scope,
+    risk: input.risk,
+    unverified: input.unverified,
+    reviewer: input.reviewer
+  };
+  const findings = input.findings?.trim();
+  return `${REVIEW_VERDICT_MARKER}
+\`\`\`json
+${JSON.stringify(payload, null, 2)}
+\`\`\`
+${findings ? `
+${findings}
+` : ""}`;
+}
+function isReviewVerdictComment(body) {
+  return body.trimStart().startsWith(REVIEW_VERDICT_MARKER);
+}
+var FENCE_RE = /^(?:`{3,}|~{3,})[^\n]*\n([\s\S]*?)\n(?:`{3,}|~{3,})\s*$/m;
+function parseReviewVerdictComment(body) {
+  if (!isReviewVerdictComment(body)) return void 0;
+  const rest = body.trimStart().slice(REVIEW_VERDICT_MARKER.length);
+  const fence = FENCE_RE.exec(rest);
+  if (!fence) return void 0;
+  let parsed;
+  try {
+    parsed = JSON.parse(fence[1]);
+  } catch {
+    return void 0;
+  }
+  if (!parsed || typeof parsed !== "object") return void 0;
+  const p = parsed;
+  if (p.v !== 1 || !isReviewVerdict(p.verdict)) return void 0;
+  if (typeof p.patch !== "string" || !/^[0-9a-f]{40}$/.test(p.patch)) return void 0;
+  if (typeof p.head !== "string" || typeof p.scope !== "string" || typeof p.risk !== "string" || typeof p.reviewer !== "string") return void 0;
+  const unverified = Array.isArray(p.unverified) ? p.unverified.filter((u) => typeof u === "string") : [];
+  return { v: 1, patch: p.patch, head: p.head, verdict: p.verdict, scope: p.scope, risk: p.risk, unverified, reviewer: p.reviewer };
+}
+function latestReviewComment(comments) {
+  let latest;
+  for (const c of comments) {
+    if (!isReviewVerdictComment(c.body)) continue;
+    if (!latest || c.createdAt > latest.createdAt || c.createdAt === latest.createdAt && (c.id ?? 0) >= (latest.id ?? 0)) latest = c;
+  }
+  return latest;
+}
+function evaluateReviewVerdict(comments, currentPatchId) {
+  const latest = latestReviewComment(comments);
+  if (!latest) return { ok: false, reason: "none" };
+  const payload = parseReviewVerdictComment(latest.body);
+  if (!payload) return { ok: false, reason: "malformed" };
+  if (payload.verdict !== "PROCEED") return { ok: false, reason: "not-proceed", verdict: payload.verdict, patch: payload.patch };
+  if (payload.patch !== currentPatchId) return { ok: false, reason: "stale", verdict: payload.verdict, patch: payload.patch };
+  return { ok: true, reason: "proceed", verdict: payload.verdict, patch: payload.patch };
+}
+function evaluateTrustedReviewVerdict(comments, patch, head) {
+  const latest = latestReviewComment(comments);
+  if (!latest) return { ok: false, reason: "none" };
+  const identity = { commentId: latest.id, commentCreatedAt: latest.createdAt };
+  if (latest.author?.toLowerCase() !== "jervaise") return { ...identity, ok: false, reason: "untrusted-author" };
+  const evaluation = evaluateReviewVerdict([latest], patch);
+  if (!evaluation.ok) return { ...identity, ok: false, reason: evaluation.reason };
+  if (parseReviewVerdictComment(latest.body)?.head !== head) return { ...identity, ok: false, reason: "stale-head" };
+  return { ...identity, ok: true, reason: "proceed" };
+}
+async function checkPrReview(number, repo, head, deps = {
+  readHead: readPrHeadSha,
+  readComments: readPrIssueComments,
+  computePatch: computePrPatchId
+}) {
+  const base = { repo, number, head };
+  if (!/^[1-9][0-9]*$/.test(number) || !/^[\w.-]+\/[\w.-]+$/.test(repo) || !/^[0-9a-f]{40}$/.test(head)) {
+    return { ...base, ok: false, reason: "invalid-input", detail: "expected a PR number, owner/repo and exact lowercase 40-character head SHA" };
+  }
+  try {
+    if (await deps.readHead(number, repo) !== head) return { ...base, ok: false, reason: "stale-head" };
+    const [comments, patch] = await Promise.all([deps.readComments(number, repo), deps.computePatch(number, repo)]);
+    if (await deps.readHead(number, repo) !== head) return { ...base, ok: false, reason: "stale-head" };
+    return { ...base, patch, ...evaluateTrustedReviewVerdict(comments, patch, head) };
+  } catch (e) {
+    return { ...base, ok: false, reason: "unreadable", detail: e.message };
+  }
+}
+function computePrPatchId(number, repo) {
+  return new Promise((resolve7, reject) => {
+    const gh = (0, import_node_child_process15.spawn)("gh", ["pr", "diff", number, "--repo", repo], { windowsHide: true, stdio: ["ignore", "pipe", "pipe"] });
+    const git3 = (0, import_node_child_process15.spawn)("git", ["patch-id", "--stable"], { windowsHide: true, stdio: ["pipe", "pipe", "pipe"] });
+    let out = "";
+    let ghErr = "";
+    let gitErr = "";
+    const timer = setTimeout(() => {
+      gh.kill();
+      git3.kill();
+      reject(new Error(`patch-id: timed out after ${GC_GH_TIMEOUT_MS4}ms`));
+    }, GC_GH_TIMEOUT_MS4);
+    gh.stdout.pipe(git3.stdin);
+    gh.stderr.on("data", (d) => {
+      ghErr += d.toString();
+    });
+    git3.stderr.on("data", (d) => {
+      gitErr += d.toString();
+    });
+    git3.stdout.on("data", (d) => {
+      out += d.toString();
+    });
+    gh.on("error", (e) => {
+      clearTimeout(timer);
+      reject(e);
+    });
+    git3.on("error", (e) => {
+      clearTimeout(timer);
+      reject(e);
+    });
+    let ghCode;
+    let gitCode;
+    const finish = () => {
+      if (ghCode === void 0 || gitCode === void 0) return;
+      clearTimeout(timer);
+      if (ghCode !== 0) return reject(Object.assign(new Error(`gh pr diff ${number} --repo ${repo} exited ${ghCode}: ${ghErr.trim()}`), { stderr: ghErr }));
+      if (gitCode !== 0) return reject(new Error(`git patch-id --stable exited ${gitCode}: ${gitErr.trim()}`));
+      const id = out.trim().split(/\s+/)[0];
+      if (!/^[0-9a-f]{40}$/.test(id ?? "")) return reject(new Error(`patch-id: PR #${number} diff is empty or unreadable (gh: ${ghErr.trim() || "no stderr"})`));
+      resolve7(id);
+    };
+    gh.on("close", (code) => {
+      ghCode = code;
+      finish();
+    });
+    git3.on("close", (code) => {
+      gitCode = code;
+      finish();
+    });
+    git3.stdin.on("error", (e) => {
+      clearTimeout(timer);
+      gh.kill();
+      git3.kill();
+      reject(e);
+    });
+  });
+}
+async function readPrHeadSha(number, repo) {
+  const { stdout } = await execFileP("gh", ["api", `repos/${repo}/pulls/${number}`, "--jq", ".head.sha"], { timeout: GC_GH_TIMEOUT_MS4 });
+  const sha = stdout.trim();
+  if (!/^[0-9a-f]{40}$/.test(sha)) throw new Error(`could not read PR #${number} head sha`);
+  return sha;
+}
+async function readPrIssueComments(number, repo) {
+  const { stdout } = await execFileP("gh", ["api", "--paginate", `repos/${repo}/issues/${number}/comments?per_page=100`, "--jq", ".[] | {id, body, createdAt: .created_at, author: .user.login}"], { timeout: GC_GH_TIMEOUT_MS4 });
+  const comments = parseNdjsonLines(stdout);
+  if (comments.some((c) => !c || !Number.isSafeInteger(c.id) || c.id <= 0 || typeof c.body !== "string" || typeof c.createdAt !== "string" || !Number.isFinite(Date.parse(c.createdAt)) || c.author !== null && typeof c.author !== "string")) throw new Error("unreadable PR comment identity");
+  return comments;
+}
+async function postPrCommentFromFile(number, repo, body) {
+  const dir = (0, import_node_fs39.mkdtempSync)((0, import_node_path36.join)((0, import_node_os19.tmpdir)(), "mmi-review-verdict-"));
+  const path2 = (0, import_node_path36.join)(dir, "body.md");
+  try {
+    (0, import_node_fs39.writeFileSync)(path2, body, "utf8");
+    const { stdout } = await execFileP("gh", ["pr", "comment", number, "--repo", repo, "--body-file", path2], { timeout: GH_MUTATION_TIMEOUT_MS });
+    return stdout.trim();
+  } finally {
+    try {
+      (0, import_node_fs39.rmSync)(dir, { recursive: true, force: true });
+    } catch {
+    }
+  }
+}
+
+// src/pr-create-docs-check.ts
+var import_node_child_process16 = require("node:child_process");
 var GIT_TIMEOUT_MS2 = 15e3;
 function catFileBatch(root, ref, paths) {
   if (paths.length === 0) return Promise.resolve([]);
   return new Promise((resolve7) => {
     const chunks = [];
     let settled = false;
-    const child2 = (0, import_node_child_process15.spawn)("git", ["-C", root, "cat-file", "--batch", "--buffer"], { windowsHide: true });
+    const child2 = (0, import_node_child_process16.spawn)("git", ["-C", root, "cat-file", "--batch", "--buffer"], { windowsHide: true });
     const finish = () => {
       if (settled) return;
       settled = true;
@@ -39277,7 +39232,7 @@ function ciAuditDeps() {
     }
   };
 }
-async function ghJson2(args, timeout = 1e4) {
+async function ghJson(args, timeout = 1e4) {
   const { stdout } = await execFileP("gh", args, { timeout });
   return JSON.parse(stdout);
 }
@@ -39355,7 +39310,7 @@ function scheduleRelatedDiscovery(o) {
   try {
     const args = ["issue", "discover-related", "--number", String(o.number), "--title", o.title, "--body", o.body, "--fail-soft"];
     if (o.repo) args.push("--repo", o.repo);
-    spawnDetachedSelf(args, { spawn: import_node_child_process16.spawn, execPath: process.execPath, scriptPath: process.argv[1] }, { cwd: process.cwd() });
+    spawnDetachedSelf(args, { spawn: import_node_child_process17.spawn, execPath: process.execPath, scriptPath: process.argv[1] }, { cwd: process.cwd() });
   } catch {
   }
 }
@@ -39564,7 +39519,7 @@ function registerCollaborationCommands(program3) {
   async function readParentField(number, repo) {
     let payload;
     try {
-      payload = await ghJson2(["api", `repos/${repo}/issues/${number}`]);
+      payload = await ghJson(["api", `repos/${repo}/issues/${number}`]);
     } catch (e) {
       const err = e;
       return { parentReadError: (err.stderr || err.message || String(e)).trim() };
@@ -39596,7 +39551,7 @@ function registerCollaborationCommands(program3) {
         emit(data2, await readParentField(n, repo));
         return;
       }
-      const data = await ghJson2(["issue", "view", String(n), "--repo", repo, "--json", gh.ghFields]);
+      const data = await ghJson(["issue", "view", String(n), "--repo", repo, "--json", gh.ghFields]);
       emit(data, await readParentField(n, repo));
     } catch (e) {
       const err = e;
@@ -39611,7 +39566,7 @@ function registerCollaborationCommands(program3) {
     const repo = await resolveRepo(o.repo);
     if (!repo) return fail("issue discover-related: could not resolve repo");
     try {
-      const issues = await ghJson2([
+      const issues = await ghJson([
         "issue",
         "list",
         "--repo",
@@ -39626,7 +39581,7 @@ function registerCollaborationCommands(program3) {
       const candidates = findRelatedIssues({ number, title: o.title, body: o.body }, issues);
       if (o.json) return console.log(JSON.stringify({ number, repo, candidates }, null, 2));
       if (!candidates.length) return;
-      const viewed = await ghJson2([
+      const viewed = await ghJson([
         "issue",
         "view",
         String(number),
@@ -39700,7 +39655,7 @@ function registerCollaborationCommands(program3) {
     const checked = o.off !== true;
     let body;
     try {
-      const viewed = await ghJson2(["issue", "view", String(parsed.number), "--repo", repo, "--json", "body"]);
+      const viewed = await ghJson(["issue", "view", String(parsed.number), "--repo", repo, "--json", "body"]);
       body = viewed.body ?? "";
     } catch (e) {
       return fail(`issue check: could not read ${repo}#${parsed.number}: ${e.message}`);
@@ -39802,7 +39757,7 @@ ${list}`);
     if (!o.force) {
       let openLessons = [];
       try {
-        openLessons = await ghJson2([
+        openLessons = await ghJson([
           "issue",
           "list",
           "--repo",
@@ -39908,7 +39863,7 @@ ${list}`);
         console.log(JSON.stringify(data2));
         return;
       }
-      const data = await ghJson2(["pr", "view", String(n), "--repo", repo, "--json", effective]);
+      const data = await ghJson(["pr", "view", String(n), "--repo", repo, "--json", effective]);
       console.log(JSON.stringify(data));
     } catch (e) {
       const err = e;
@@ -40173,7 +40128,7 @@ ${list}`);
       await readClosingGuardInput(number, repoArgs, landRepoForGuard, "pr land"),
       async (n) => {
         if (!landRepoForGuard) return void 0;
-        const viewed = await ghJson2(["issue", "view", String(n), "--repo", landRepoForGuard, "--json", "state"]);
+        const viewed = await ghJson(["issue", "view", String(n), "--repo", landRepoForGuard, "--json", "state"]);
         return typeof viewed.state === "string" ? viewed.state : void 0;
       }
     );
@@ -40191,14 +40146,6 @@ ${list}`);
     }
     if (landClosingGuardVerdict.message) console.warn(landClosingGuardVerdict.message);
     const result = await runPrLand(number, { repo: o.repo, requireTrain: o.requireTrain !== false }, {
-      queueMerge: async (prNumber, repo) => {
-        const meta = await ghJson2(["pr", "view", prNumber, "--repo", repo, "--json", "baseRefName,headRefOid"]);
-        if (!await usesMergifyPilot(repo, meta.baseRefName)) return void 0;
-        if (!landClosingGuardInput) throw new Error("pr land: Mergify requires a readable closing-keyword guard");
-        const guard = evaluateClosingGuard(landClosingGuardInput, { force: o.force, context: "pr land", squashBodyText: landClosingGuardInput.text });
-        if (guard.blocked) throw new Error(guard.message);
-        return requestMergifyMerge(prNumber, repo, landClosingGuardInput.text, meta.headRefOid);
-      },
       resolveRepo: async (prNumber, repoOpt) => {
         const args = repoOpt ? ["--repo", repoOpt] : repoArgs;
         const viewed = (await execFileP("gh", ["pr", "view", prNumber, ...args, "--json", "headRepository,baseRefName", "--jq", '.headRepository.nameWithOwner + " " + .baseRefName'], { timeout: GC_GH_TIMEOUT_MS4 })).stdout.trim();
@@ -40356,23 +40303,20 @@ ${list}`);
     const baseRef = prMeta.base;
     const headRefOid = (prMeta.oid ?? "").trim() || void 0;
     if (!repoForPostCleanup) throw new Error("pr merge: cannot resolve target repository");
-    const mergifyPilot = await usesMergifyPilot(repoForPostCleanup, baseRef);
-    if (mergifyPilot && (method !== "--squash" || o.squashBodyFile)) throw new Error("pr merge: Mergify pilot uses the protected squash title/body policy; custom merge methods and body files are unsupported");
     const devDeployDeps = repoForPostCleanup ? registryClientDeps(await loadConfig()) : void 0;
     const devDeployPlan = repoForPostCleanup && devDeployDeps ? await planDevDeployOnDevelopmentMerge(repoForPostCleanup, baseRef, devDeployDeps).catch(() => ({ applicable: false, reason: "unreadable" })) : { applicable: false, reason: "unreadable" };
     const closingGuardInput = await withAlreadyClosedCommitTargets(
       await readClosingGuardInput(number, repoArgs, repoForPostCleanup, "pr merge"),
       async (n) => {
         if (!repoForPostCleanup) return void 0;
-        const viewed = await ghJson2(["issue", "view", String(n), "--repo", repoForPostCleanup, "--json", "state"]);
+        const viewed = await ghJson(["issue", "view", String(n), "--repo", repoForPostCleanup, "--json", "state"]);
         return typeof viewed.state === "string" ? viewed.state : void 0;
       }
     );
     if (o.squashBodyFile && method !== "--squash") {
       throw new Error("pr merge: --squash-body-file applies only to squash merges");
     }
-    if (mergifyPilot && !closingGuardInput) throw new Error("pr merge: Mergify requires a readable closing-keyword guard");
-    const mergeSquashBody = mergifyPilot ? closingGuardInput.text : squashBodyTextForMerge(
+    const mergeSquashBody = squashBodyTextForMerge(
       closingGuardInput,
       method === "--squash",
       o.squashBodyFile ? (0, import_node_fs43.readFileSync)(o.squashBodyFile, "utf8") : void 0
@@ -40470,7 +40414,7 @@ ${list}`);
       }
       return true;
     };
-    if (!mergifyPilot && o.wait && !await runWaitGate()) return;
+    if (o.wait && !await runWaitGate()) return;
     if (ciPolicy.policy === "no-ci") {
       const guard = decidePrMergeNoCiGuard(await pollGhPrChecks(number, repoArgs), ciPolicy.reason);
       if (guard.action === "refuse") throw new Error(`gh pr merge ${number}: ${guard.message}`);
@@ -40479,7 +40423,7 @@ ${list}`);
     const remoteBefore = await remoteBranchExists2(headRef, { remote });
     let upgradedToAuto = false;
     let remoteNotAttemptedReason = "preserved-delayed-cleanup";
-    const overrideBody = mergifyPilot ? void 0 : mergeSquashBody ? { ...writeSquashBodyFile(mergeSquashBody), text: mergeSquashBody } : await composeOverrideBodyFile(
+    const overrideBody = mergeSquashBody ? { ...writeSquashBodyFile(mergeSquashBody), text: mergeSquashBody } : await composeOverrideBodyFile(
       number,
       repoArgs,
       async (a, t) => (await execFileP("gh", a, { timeout: t })).stdout,
@@ -40559,15 +40503,7 @@ ${list}`);
     });
     try {
       try {
-        if (mergifyPilot) {
-          const queue = await requestMergifyMerge(number, repoForPostCleanup, closingGuardInput.text, headRefOid);
-          if (queue.state !== "merged") {
-            console.log(JSON.stringify({ mergeStatus: "failed", pr: number, repo: repoForPostCleanup, queue }));
-            process.exitCode = queue.state === "refused" ? 1 : PR_CHECKS_TIMEOUT_EXIT_CODE;
-            return;
-          }
-          remoteNotAttemptedReason = "pr-already-merged";
-        } else await mergeOnce();
+        await mergeOnce();
       } catch (e) {
         if (!(e instanceof PrHeadBehindBaseError)) throw e;
         const localCheckedOut = !foreignCwd && await prHeadCheckedOutHere(headRef, targetRepo2, Boolean(o.repo));
@@ -41038,7 +40974,7 @@ ${SSH_RECIPE_AGENT_NOTE}`);
 }
 
 // src/dist-drift.ts
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 var import_node_crypto13 = require("node:crypto");
 var import_node_fs46 = require("node:fs");
 var import_node_os21 = require("node:os");
@@ -41183,7 +41119,7 @@ function bomPathFor(root) {
   }
 }
 function rebuildTo(packageRoot, outDir) {
-  (0, import_node_child_process17.execFileSync)(process.execPath, ["build.mjs"], {
+  (0, import_node_child_process18.execFileSync)(process.execPath, ["build.mjs"], {
     cwd: packageRoot,
     env: { ...process.env, MMI_DIST_OUTDIR: outDir },
     windowsHide: true,
@@ -41401,7 +41337,7 @@ function registerSchedulesLiftCommand(program3, deps = {}) {
 }
 
 // src/spawn-policy-core.ts
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var import_node_fs47 = require("node:fs");
 var import_node_path44 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
@@ -41472,7 +41408,7 @@ function findViolationsInSource(raw) {
   return found;
 }
 function policedFiles(root) {
-  const r = (0, import_node_child_process18.spawnSync)("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
+  const r = (0, import_node_child_process19.spawnSync)("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
     cwd: root,
     encoding: "utf8",
     windowsHide: true,
@@ -43009,12 +42945,12 @@ async function findInFlightHotfixVersion(deps, ctx, latestMainTag, workflows = H
 }
 
 // src/hotfix-coverage.ts
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 var CHERRY_TRAILER = /\(cherry picked from commit ([0-9a-f]{7,40})\)/g;
 function checkHotfixCoverage(options = {}) {
   const { cwd = process.cwd(), mainRef = "origin/main", rcRef = "origin/rc", manifestPaths = [] } = options;
   const ack = (options.ack ?? []).filter(Boolean);
-  const git3 = options.git ?? ((args, opts) => (0, import_node_child_process19.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git3 = options.git ?? ((args, opts) => (0, import_node_child_process20.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const revList = (range) => {
     const out = git3(["rev-list", "--no-merges", range]).trim();
     return out ? out.split("\n") : [];
@@ -43082,7 +43018,7 @@ function checkHotfixCoverage(options = {}) {
 }
 function checkHotfixCarries(options) {
   const { cwd = process.cwd(), branch, baseRef, targets } = options;
-  const git3 = options.git ?? ((args, opts) => (0, import_node_child_process19.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git3 = options.git ?? ((args, opts) => (0, import_node_child_process20.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const isAncestor = (sha, ref) => {
     try {
       git3(["merge-base", "--is-ancestor", sha, ref]);
@@ -43134,10 +43070,13 @@ function readRepoVersion() {
 }
 function registerTrainCommands(program3, trainDeps) {
   const train = program3.command("train").description("release-train observability \u2014 track position, version lag, and the shared preflight-and-heal doctor (#2688, #6067)");
-  train.command("doctor").description("one shared preflight-and-heal verdict for the release, rcand and hotfix lanes; read-only unless --heal (#6067)").addOption(new Option("--lane <lane>", "train lane to check (defaults from the release track: direct \u2192 release)").choices([...TRAIN_LANES])).option("--heal", "repair safe local reconstructible state (scratch gitignore, churn, stray local tags, ff-only branch lag, finished scratch branches, stale alignment ledger leg)").option("--repo <owner/repo>", "target repo (defaults to the current checkout)").option("--json", "machine-readable output").addHelpText("after", "\nExit codes:\n  0  ready \u2014 no blocker and origin verified\n  1  a blocker remains, or origin could not be verified (never green on an unread origin)\n\nEvery finding carries code, severity (blocker|warning|healed|info), source (local|origin), remedy and a\ndocs/Guides/train-troubleshooting.md#<code> anchor. `release --apply` and `rcand --apply` run this at step 0 with --heal.\n").action(async (o) => {
+  train.command("doctor").description("one shared preflight-and-heal verdict for the release, rcand and hotfix lanes; read-only unless --heal (#6067)").addOption(new Option("--lane <lane>", "train lane to check (defaults from the release track: direct \u2192 release)").choices([...TRAIN_LANES])).option("--dev", "judge the `release --dev` lane (development -> main, skipping rc): the lane starts from development and is read on development's workflows (#6318)").option("--heal", "repair safe local reconstructible state (scratch gitignore, churn, stray local tags, ff-only branch lag, finished scratch branches, stale alignment ledger leg)").option("--repo <owner/repo>", "target repo (defaults to the current checkout)").option("--json", "machine-readable output").addHelpText("after", "\nExit codes:\n  0  ready \u2014 no blocker and origin verified\n  1  a blocker remains, or origin could not be verified (never green on an unread origin)\n\nEvery finding carries code, severity (blocker|warning|healed|info), source (local|origin), remedy and a\ndocs/Guides/train-troubleshooting.md#<code> anchor. `release --apply` and `rcand --apply` run this at step 0 with --heal.\n").action(async (o) => {
     try {
+      if (o.dev && o.lane && o.lane !== "release") {
+        return failGraceful(`train doctor: --dev applies only to the release lane \u2014 it names the development -> main variant that skips rc, which the ${o.lane} lane does not have`);
+      }
       if (o.repo) {
-        const guard = planTrainApplyRepoGuard(o.repo, await resolveRepo(), `mmi-cli devops train doctor${o.lane ? ` --lane ${o.lane}` : ""}${o.heal ? " --heal" : ""}${o.json ? " --json" : ""}`, "train doctor");
+        const guard = planTrainApplyRepoGuard(o.repo, await resolveRepo(), `mmi-cli devops train doctor${o.lane ? ` --lane ${o.lane}` : ""}${o.dev ? " --dev" : ""}${o.heal ? " --heal" : ""}${o.json ? " --json" : ""}`, "train doctor");
         if (!guard.ok) return failGraceful(`train doctor: ${guard.message}`);
       }
       const root = (await execFileP("git", ["rev-parse", "--show-toplevel"], { timeout: GIT_TIMEOUT_MS })).stdout.trim();
@@ -43153,7 +43092,7 @@ function registerTrainCommands(program3, trainDeps) {
           }
         }
       };
-      const verdict = await runTrainDoctor({ lane: o.lane, heal: o.heal === true, train: deps, repo: o.repo, cwd: root, argv: INVOKED_ARGV });
+      const verdict = await runTrainDoctor({ lane: o.lane, dev: o.dev === true, heal: o.heal === true, train: deps, repo: o.repo, cwd: root, argv: INVOKED_ARGV });
       if (verdict.reexecCode !== void 0) return process.exit(verdict.reexecCode);
       console.log(o.json ? JSON.stringify(verdict, null, 2) : formatTrainDoctor(verdict));
       if (!verdict.ready) process.exitCode = 1;
@@ -43262,6 +43201,16 @@ function trainApplyDeps() {
         throw new Error(`tenant deploy dispatch failed: ${detail}`);
       }
     },
+    // Hub-App-authority dispatch of the #5604 hosted-job canary (#6319) — the Hub fires the
+    // workflow_dispatch with its App token, so a train-authorized project-admin (pull-only on MMI-Hub)
+    // runs the probe instead of being refused with a 404 misread as a billing block (#6320).
+    dispatchActionsCanary: async ({ repo, nonce }) => {
+      const res = await actionsCanary({ repo, nonce }, registryClientDeps(await loadConfig()));
+      if (!res.ok) {
+        const detail = res.body?.error ?? res.error ?? `HTTP ${res.status}`;
+        throw new Error(`Hub /actions-canary refused: ${detail}`);
+      }
+    },
     // Hub-App-authority dispatch of the central tenant-control.yml (#1717) — the Hub fires the
     // workflow_dispatch with its App token. Never throws for an expected rejection: it returns the dispatch
     // outcome so runTenantControl can map a 5xx (transport-failed, retryable) vs a 4xx (rejected) vs ok.
@@ -43735,7 +43684,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       let doctor;
       if (repo && (!o.repo || (await resolveRepo())?.toLowerCase() === repo.toLowerCase())) {
         try {
-          doctor = await runTrainDoctor({ lane: commandName, heal: false, train: trainApplyDeps(), repo });
+          doctor = await runTrainDoctor({ lane: commandName, dev: commandName === "release" && o.dev === true, heal: false, train: trainApplyDeps(), repo });
         } catch (e) {
           consoleIo.err(`mmi-cli: train doctor did not complete: ${e.message}`);
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.23",
+  "version": "4.3.25",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",