@mutmutco/cli 4.3.33 → 4.3.35

package/dist/main.cjs

@@ -3679,6 +3679,8 @@ function buildErrorEnvelope(message2, payload) {
   if (payload.did_you_mean !== void 0) env.did_you_mean = payload.did_you_mean;
   if (payload.corrected_command !== void 0) env.corrected_command = payload.corrected_command;
   if (payload.current_parent !== void 0) env.current_parent = payload.current_parent;
+  if (payload.issue_ref !== void 0) env.issue_ref = payload.issue_ref;
+  if (payload.board_status !== void 0) env.board_status = payload.board_status;
   return env;
 }
 function formatErrorEnvelope(message2, payload) {
@@ -10965,6 +10967,21 @@ function boardNotFoundError(ref, board, opts = {}) {
   const remedy = opts.remedy ?? "if it lives on a different board, pass --repo <owner/repo> for the repo that owns it";
   return new Error(`${ref} ${verb} the ${board.owner} #${board.number} board; ${remedy}`);
 }
+var NotClaimableError = class extends Error {
+  /** The board item's status at refusal time, when the refusal was a status verdict. Absent for the
+   *  write-access and dependency refusals, whose cause is not the status. */
+  boardStatus;
+  issueRef;
+  constructor(message2, detail) {
+    super(message2);
+    this.name = "NotClaimableError";
+    this.issueRef = detail.ref;
+    if (detail.status !== void 0) this.boardStatus = detail.status;
+  }
+};
+function isNotClaimable(e) {
+  return e instanceof NotClaimableError;
+}
 function evaluateClaim(item, login) {
   const others = item.assignees.filter((a) => a.toLowerCase() !== login.toLowerCase());
   const mine = item.assignees.some((a) => a.toLowerCase() === login.toLowerCase());
@@ -12217,8 +12234,9 @@ async function claimOneBoardItem(ctx, selector, options) {
   const flatItem = findBoardItem(ctx.items, selector, { owner: cfg.projectOwner, number: cfg.projectNumber });
   const wouldWrite = flatItem.assignees.length === 0 && (flatItem.status === "Todo" || flatItem.status === "In Progress" || flatItem.status === "In Review");
   if (wouldWrite && !ctx.writable.has(flatItem.repository.toLowerCase())) {
-    throw new Error(
-      `${flatItem.ref} is not claimable: the token from ${describeTokenSource()} reports no write access to ${flatItem.repository}`
+    throw new NotClaimableError(
+      `${flatItem.ref} is not claimable: the token from ${describeTokenSource()} reports no write access to ${flatItem.repository}`,
+      { ref: flatItem.ref }
     );
   }
   if (flatItem.contentType === "Issue") {
@@ -12241,7 +12259,10 @@ async function claimOneBoardItem(ctx, selector, options) {
       retryCommand: `mmi-cli oracle board claim ${flatItem.number}${options.check ? " --check" : ""}`
     });
     if (gate.blocked) {
-      throw new Error(`${flatItem.ref} is not claimable: blocked on open ${gate.openDependencies.join(", ")}`);
+      throw new NotClaimableError(
+        `${flatItem.ref} is not claimable: blocked on open ${gate.openDependencies.join(", ")}`,
+        { ref: flatItem.ref }
+      );
     }
   }
   const assignee = options.assignee ?? "@me";
@@ -12261,12 +12282,12 @@ async function claimOneBoardItem(ctx, selector, options) {
   const heldReceipt = () => previousHolder ? resumeEvidence ? { outcome: "resumed", holder, previousHolder, resumeEvidence } : { outcome: "took-over", holder, previousHolder } : { outcome: "held", holder };
   if (flatItem.contentType !== "Issue") throw new Error(`${flatItem.ref} is not an issue`);
   const pre = evaluateClaim(flatItem, assignedLogin);
-  if (!pre.ok) throw new Error(pre.reason);
+  if (!pre.ok) throw new NotClaimableError(pre.reason, { ref: flatItem.ref, status: flatItem.status });
   let item = flatItem;
   const fresh = (await fetchIssueProjectItem(client, cfg, { repo: item.repository, number: item.number })).item;
   if (!fresh) throw new Error(`${item.ref} is not on this project board`);
   const verdict = evaluateClaim(fresh, assignedLogin);
-  if (!verdict.ok) throw new Error(verdict.reason);
+  if (!verdict.ok) throw new NotClaimableError(verdict.reason, { ref: fresh.ref, status: fresh.status });
   item = fresh;
   const refuseIfContested = async () => {
     const contest = await checkLaneContest(client, item, ctx.session, report.viewer);
@@ -12951,6 +12972,7 @@ async function waitForPrChecks(deps) {
 
 // src/bootstrap-ruleset.ts
 var PRODUCT_RULESET_NAME = "mmi-product-required-checks";
+var PRODUCT_GATE_CONTEXT = "gate";
 var PRODUCT_RULESET_PATH = ".github/rulesets/mmi-product-required-checks.json";
 function reseedProductRulesetStrictness(current, seed) {
   const parse = (raw) => {
@@ -12993,6 +13015,15 @@ function rulesetStrictPolicy(ruleset) {
   const rules = (ruleset.rules ?? []).filter((rule) => rule.type === "required_status_checks");
   return rules.length > 0 && rules.every((rule) => rule.parameters?.strict_required_status_checks_policy === true);
 }
+function committedRequiredContexts(raw) {
+  if (raw == null) return [PRODUCT_GATE_CONTEXT];
+  try {
+    const contexts = rulesetRequiredContexts(stripRulesetComment(raw));
+    return contexts.length ? [...new Set(contexts)] : [PRODUCT_GATE_CONTEXT];
+  } catch {
+    return [PRODUCT_GATE_CONTEXT];
+  }
+}
 function rulesetBranchIncludes(ruleset) {
   const raw = ruleset.conditions?.ref_name?.include;
   return Array.isArray(raw) ? [...new Set(raw.filter((ref) => typeof ref === "string" && ref.length > 0))].sort((a, b) => a.localeCompare(b)) : [];
@@ -15586,10 +15617,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.33",
-    tag: "v4.3.33",
-    commit: "1c3419ebea6e",
-    npm: "@mutmutco/cli@4.3.33"
+    version: "4.3.35",
+    tag: "v4.3.35",
+    commit: "837f809456ec",
+    npm: "@mutmutco/cli@4.3.35"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15606,14 +15637,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.33"
+          v3Target: "v4.3.35"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.33 and redeploy the Hub Lambda from tag v4.3.33 (1c3419ebea6e); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.33 (@mutmutco/cli@4.3.33, tag commit 1c3419ebea6e \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.35 and redeploy the Hub Lambda from tag v4.3.35 (837f809456ec); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.35 (@mutmutco/cli@4.3.35, tag commit 837f809456ec \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -25653,7 +25684,21 @@ function invalidateStatuslineBoardCache() {
 function refuseRateLimited(e, json) {
   if (!isRateLimitedError(e)) return false;
   if (json) console.log(JSON.stringify(e.receipt));
-  else console.error(`mmi-cli board claim failed: ${e.receipt.message} \u2014 retry: ${e.receipt.retryCommand}`);
+  else console.error(`mmi-cli oracle board claim failed: ${e.receipt.message} \u2014 retry: ${e.receipt.retryCommand}`);
+  process.exitCode = 1;
+  return true;
+}
+function refuseNotClaimable(e, json) {
+  if (!isNotClaimable(e)) return false;
+  const message2 = `oracle board claim failed: ${e.message}`;
+  if (json) {
+    console.log(formatErrorEnvelope(message2, {
+      code: ERROR_CODES.ERR_STATE_CONFLICT,
+      issue_ref: e.issueRef,
+      ...e.boardStatus === void 0 ? {} : { board_status: e.boardStatus }
+    }));
+  }
+  console.error(`mmi-cli ${message2}`);
   process.exitCode = 1;
   return true;
 }
@@ -25720,7 +25765,7 @@ function registerBoardCommands(program3) {
   board.command("read", { isDefault: true }).alias("list").description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--direct", "bypass the Hub snapshot and read the live board through direct GitHub GraphQL").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").option("--out <path>", "write the output to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5802)").addHelpText("after", "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--direct skips the Hub snapshot and uses the existing direct GitHub GraphQL read immediately.\n--allow-partial applies to the paginated path and detail reads.\n\nNever capture the JSON with a shell redirect on Windows: PowerShell 5.1's `> file.json` is Out-File,\nwhich writes UTF-16LE with a BOM, and Node reading it as 'utf8' then fails JSON.parse at position 1\n(#5802). Use --out instead \u2014 the CLI writes the file itself as UTF-8:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n").action((o) => runBoardRead(o));
   withExamples(mutating(
     board.command("claim <issues...>").description("claim issues: assign them and move their Project v2 Status to In Progress \u2014 idempotent, so an item already yours and In Progress succeeds unchanged (one or more refs); the board scan rides the Hub snapshot, same as board read").addHelpText("after", "\nclaim reads the board through the same Hub snapshot leg as `board read` (the App-installation\ncredential, never your personal GraphQL pool); the direct user-auth read is an emergency fallback\nand is named in a Warning line after the verdict (#6162).\n\nevery claim stamps a lane-identity marker comment on the issue (`<!-- mmi-claim: \u2026 -->`,\nsurface/session@host) so other agents can attribute the hold (#3727). The session is the\nhost-exported id when the surface provides one, otherwise a per-process `synth-` fallback \u2014\na claim is never anonymous (#5245). `board show`, doctor and unclaim read the latest marker.\n\nsame-owner resume (#6035): when the prior marker was posted by YOUR login on THIS host and its\nlocal session is verifiably dead (transcript probe), the claim proceeds as a resume without\n--force and names the evidence. A live, foreign-host, or unprobeable prior lane still refuses.\n\nreclaim from In Review (#6339): an In Review item with no holder, or one held by the claiming\nlogin, is claimable \u2014 it moves back to In Progress and the receipt names the status it came from.\nAn In Review item another login holds is refused (ask the holder, or wait for the review to land),\nand Done stays refused. The board status is the authority; no PR state is consulted.\n").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--for <login>", "assign to this login instead of @me \u2014 agent claims on behalf of the master").option("--force", "take an item already claimed by another lane that shows live evidence of active work (#3727)").option("--check", "read-only: run every claim gate and report the verdict, writing nothing \u2014 exits 1 with the same refusal a real claim would raise (#4511)").option("--allow-partial", "return success JSON if assignment succeeds but the status move fails"),
-    (_opts, args) => ({ command: "board claim", issues: args[0] ?? [] })
+    (_opts, args) => ({ command: "oracle board claim", issues: args[0] ?? [] })
   ).action(async (issueRefs, o) => {
     if (issueRefs.length === 1) {
       const issueRef = issueRefs[0];
@@ -25741,7 +25786,8 @@ function registerBoardCommands(program3) {
         printClaimWarnings(result.warnings);
       } catch (e) {
         if (refuseRateLimited(e, o.json)) return;
-        return failGraceful(`board claim failed: ${e.message}`);
+        if (refuseNotClaimable(e, o.json)) return;
+        return failGraceful(`oracle board claim failed: ${e.message}`);
       }
       return;
     }
@@ -25769,7 +25815,7 @@ function registerBoardCommands(program3) {
       if (bulk.failed > 0) process.exitCode = 1;
     } catch (e) {
       if (refuseRateLimited(e, o.json)) return;
-      return failGraceful(`board claim failed: ${e.message}`);
+      return failGraceful(`oracle board claim failed: ${e.message}`);
     }
   }), [
     "mmi-cli oracle board claim 2680",
@@ -25781,7 +25827,9 @@ function registerBoardCommands(program3) {
     "Multiple refs are handled as a batch and return per-item results.",
     "--check is the live gate read (it calls GitHub); --dry-run only echoes the parsed argv plan.",
     // #5552: agents guess `oracle issue claim`; that route does not exist — board claim is the only write.
-    "Never run `oracle issue claim` \u2014 claims are board mutations; only `oracle board claim <ref>` is valid."
+    "Never run `oracle issue claim` \u2014 claims are board mutations; only `oracle board claim <ref>` is valid.",
+    // Flat Wave 0 alias: agents still type `mmi-cli board claim` and treat the refusal as a tool fault.
+    "Never run the flat `board claim` \u2014 that Wave 0 alias was removed; only `mmi-cli oracle board claim <ref>` parses."
   ]);
   board.command("show <issue>").description("print one board item (status, assignees, type, url) with its body and comments").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--allow-partial", "return the item even if its body/comments fetch fails").option("--out <path>", "write the output to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5802)").action(async (issueRef, o) => {
     try {
@@ -26939,7 +26987,6 @@ var requiredBoardSwimlaneField = "Repository";
 var requiredBoardCardFields = ["Title", "Assignees", "Status", "Labels", "Linked pull requests", "Parent issue", "Sub-issues progress", "Priority"];
 var requiredOrgRulesetTypes = ["pull_request", "non_fast_forward", "deletion"];
 var requiredHubStatusChecks = ["cli", "infra", "docs"];
-var requiredProductStatusChecks = ["gate"];
 function expectedBranches(repoClass, releaseTrack) {
   if (isReleaseTrack(releaseTrack)) return branchesForTrack(releaseTrack);
   return repoClass === "content" ? ["main"] : ["development", "rc", "main"];
@@ -27080,6 +27127,18 @@ function filledDocCheck(label, text, path2) {
   const unfilled = unfilledDocPlaceholders(text);
   return { ok: unfilled.length === 0, label, detail: unfilled.length ? `unfilled: ${unfilled.join(", ")}` : void 0 };
 }
+var NPMRC_PATHS = [".npmrc", "web/.npmrc"];
+var SCOPED_GITHUB_PACKAGES_RE = /^\s*@[A-Za-z0-9-]+:registry\s*=\s*https:\/\/npm\.pkg\.github\.com/m;
+var GITHUB_PACKAGES_AUTH_RE = /^\s*\/\/npm\.pkg\.github\.com\/:_authToken\s*=/m;
+function npmrcGitHubPackagesAuthCheck(path2, text) {
+  if (text === null || !SCOPED_GITHUB_PACKAGES_RE.test(text)) return null;
+  const ok = GITHUB_PACKAGES_AUTH_RE.test(text);
+  return {
+    ok,
+    label: `${path2} authenticates GitHub Packages`,
+    detail: ok ? void 0 : `${path2} points a scope at npm.pkg.github.com with no token line \u2014 add \`//npm.pkg.github.com/:_authToken=\${NODE_AUTH_TOKEN}\` (the value stays in the environment, never in the file) or npm ci 401s outside a setup-node CI job`
+  };
+}
 function isCentralContainerDeployModel(model) {
   return model === "tenant-container" || model === "solo-container";
 }
@@ -27188,12 +27247,25 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
   for (const path2 of requiredIssueTemplates) {
     checks.push({ ok: await contentExists2(deps, repo, baseBranch, path2), label: `issue template exists: ${path2}` });
   }
+  let productContexts = [PRODUCT_GATE_CONTEXT];
   if (repo !== HUB_REPO5 && repoClass === "deployable") {
-    for (const path2 of requiredProductWorkflows) {
-      checks.push({ ok: await contentExists2(deps, repo, baseBranch, path2), label: `gate workflow exists: ${path2}` });
+    const rulesetRaw = await contentText(deps, repo, baseBranch, requiredProductRulesetRef);
+    productContexts = committedRequiredContexts(rulesetRaw);
+    const workflowCandidates = [.../* @__PURE__ */ new Set([
+      ...productContexts.map((context) => `.github/workflows/${context}.yml`),
+      ...requiredProductWorkflows
+    ])];
+    const presentWorkflows = [];
+    for (const path2 of workflowCandidates) {
+      if (await contentExists2(deps, repo, baseBranch, path2)) presentWorkflows.push(path2);
     }
     checks.push({
-      ok: await contentExists2(deps, repo, baseBranch, requiredProductRulesetRef),
+      ok: presentWorkflows.length > 0,
+      label: "gate workflow exists",
+      detail: presentWorkflows.length ? presentDetail(presentWorkflows) : `none of: ${workflowCandidates.join(", ")}`
+    });
+    checks.push({
+      ok: rulesetRaw !== null,
       label: "product required-check ruleset reference exists",
       detail: `expected: ${requiredProductRulesetRef} (apply as an active repo ruleset after bootstrap)`
     });
@@ -27211,6 +27283,10 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
       });
     }
   }
+  for (const path2 of NPMRC_PATHS) {
+    const check = npmrcGitHubPackagesAuthCheck(path2, await contentText(deps, repo, baseBranch, path2));
+    if (check) checks.push(check);
+  }
   const portRangeCheck = centralContainerPortRangeCheck(deps.deployModel, deps.projectMeta?.portRange, repo);
   if (portRangeCheck) checks.push(portRangeCheck);
   checks.push(...deployRowChecks(
@@ -27424,7 +27500,7 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
       detail: productRuleset?.enforcement !== "active" ? `${PRODUCT_RULESET_NAME} is ${productRuleset?.enforcement ?? "missing"} \u2014 run mmi-cli devops ci reconcile --apply --repo ${repo} once the gate is green` : void 0
     });
     const statusChecks = rulesetStatusChecks2(rulesets.filter((r) => r.target === "branch" && r.enforcement === "active"));
-    const missing = requiredProductStatusChecks.filter((check) => !statusChecks.has(check));
+    const missing = productContexts.filter((check) => !statusChecks.has(check));
     checks.push({
       ok: missing.length === 0,
       label: "product required status checks configured",
@@ -32394,7 +32470,7 @@ var LOOP_PLAYBOOKS = {
       { label: "Read the next board item", command: "mmi-cli oracle board read" },
       // #5552: claim is a board mutation only — never guess `oracle issue claim`. Ground unknown write
       // routes with `mmi-cli commands` / `mmi-cli explain` before invoking them.
-      { label: "Claim board work (board mutation only \u2014 never `oracle issue claim`; ground unknown write routes via `commands` / `explain` first)", command: "mmi-cli oracle board claim <ref>" },
+      { label: "Claim board work (board mutation only \u2014 never `oracle issue claim` or the flat `board claim`; ground unknown write routes via `commands` / `explain` first)", command: "mmi-cli oracle board claim <ref>" },
       { label: "Prepare the local workspace through the host surface" },
       { label: "Before broad docs rewrites, follow docs/Guides/doc-ceremony-cut.md" },
       { label: "Apply the repository test policy, then build the touched package", command: "mmi-cli tests policy --base origin/development && npm run build" },
@@ -32411,7 +32487,7 @@ var LOOP_PLAYBOOKS = {
     steps: [
       { label: "Orient in the current repository", command: "mmi-cli onboard" },
       { label: "Read the board item", command: "mmi-cli oracle board show <issue-number>" },
-      { label: "Claim the item (board mutation only \u2014 never `oracle issue claim`)", command: "mmi-cli oracle board claim <issue-number>" },
+      { label: "Claim the item (board mutation only \u2014 never `oracle issue claim` or the flat `board claim`)", command: "mmi-cli oracle board claim <issue-number>" },
       { label: "Prepare the local workspace through the host surface" },
       { label: "Start a local stage (deployable repos)", command: "mmi-cli stage run --apply" }
     ]
@@ -39633,7 +39709,7 @@ function registerCollaborationCommands(program3) {
   function surfaceWaived() {
     return rawFlag("--no-surface");
   }
-  const issue = program3.command("issue").description("issues \u2014 create and view with structured JSON (view; show, get and read alias view for board-verb/gh-shaped callers). Claims are board mutations: use `oracle board claim`, never `oracle issue claim`");
+  const issue = program3.command("issue").description("issues \u2014 create and view with structured JSON (view; show, get and read alias view for board-verb/gh-shaped callers). Claims are board mutations: use `oracle board claim`, never `oracle issue claim` or the flat `board claim`");
   withExamples(mutating(
     issue.command("create").description("create an issue (type \u2014 label) and print {number,url,label} JSON").addOption(new Option("--type <type>", "bug | feature | task (sets the matching label; required unless --batch)").choices([...ISSUE_TYPES])).option("--title <title>", "issue title").option("--title-file <path|->", "read the issue title from a UTF-8 file, or from stdin with -").option("--body <body>", "issue body (markdown)").option("--body-file <path|->", "read issue body from a UTF-8 file. `-` (stdin) needs a heredoc, which the agent inline-body guard denies (#1473/#2125) \u2014 prefer a real path; a title with backticks needs --title-file for the same reason (#3381)").option("--priority <priority>", "urgent | high | medium | low (defaults to medium; sets the board Priority field only \u2014 never a priority:* label, #416)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--label <label...>", "extra label(s) to attach (repeatable; auto-created if missing)").option("--surface <surface>", "issue surface, with or without the surface: prefix (#3789). Required when the target repo runs the one-surface-label board rule; any value satisfies it, so this is not a closed enum").option("--no-surface", "file without a surface label on a repo that requires one \u2014 for a genuinely exempt filing (e.g. a coop proof issue that spans every surface)").option("--parent <ref>", "file as a native sub-issue of this parent (#123, owner/repo#123, or URL)").option("--no-related", "skip the auto related-issues comment"),
     // --dry-run/--validate-only plan: resolve the same title source and validate the same type, priority,
@@ -45488,6 +45564,19 @@ function recoveryPointerFor(path2) {
   if (runnable === path2) return `run: mmi-cli ${canonicalPathFor(runnable)} \u2026`;
   return `'${path2}' is not a registered command \u2014 run \`mmi-cli ${canonicalPathFor(runnable)} --help\` for what lives under it`;
 }
+function refuseHouseShim(typedPath, message2) {
+  if (argvWantsJson3()) {
+    consoleIo.log(
+      formatErrorEnvelope(message2, {
+        code: ERROR_CODES.ERR_UNKNOWN_FLAG,
+        did_you_mean: canonicalPathFor(registeredPathPrefix(typedPath))
+      })
+    );
+  }
+  process.stderr.write(`${message2}
+`);
+  hardExit(2);
+}
 function resolveHouseShim(argv) {
   const houseToken = argv[2];
   if (!houseToken) return;
@@ -45496,11 +45585,10 @@ function resolveHouseShim(argv) {
     const flatPath = flatTokens.join(" ");
     const flatHouse = houseForPath(flatPath);
     if (!flatHouse || flatHouse === "core") return;
-    process.stderr.write(
-      `mmi-cli: the flat '${flatPath}' alias was removed in ${COMPAT_SHIM_DEATH_WAVE} (#4316) \u2014 ${recoveryPointerFor(flatPath)}
-`
+    refuseHouseShim(
+      flatPath,
+      `mmi-cli: the flat '${flatPath}' alias was removed in ${COMPAT_SHIM_DEATH_WAVE} (#4316) \u2014 ${recoveryPointerFor(flatPath)}`
     );
-    hardExit(2);
   }
   const remainder = argv.slice(3);
   const first = remainder[0];
@@ -45520,17 +45608,15 @@ function resolveHouseShim(argv) {
     return;
   }
   if (actual) {
-    process.stderr.write(
-      `mmi-cli ${houseToken}: '${lookupPath}' lives in house '${actual}' \u2014 ${recoveryPointerFor(lookupPath)}
-`
-    );
-  } else {
-    process.stderr.write(
-      `mmi-cli ${houseToken}: '${first}' is not a command of house '${houseToken}' \u2014 run \`mmi-cli ${houseToken} --help\` for its commands
-`
+    refuseHouseShim(
+      lookupPath,
+      `mmi-cli ${houseToken}: '${lookupPath}' lives in house '${actual}' \u2014 ${recoveryPointerFor(lookupPath)}`
     );
   }
-  hardExit(2);
+  refuseHouseShim(
+    lookupPath,
+    `mmi-cli ${houseToken}: '${first}' is not a command of house '${houseToken}' \u2014 run \`mmi-cli ${houseToken} --help\` for its commands`
+  );
 }
 function printHouseRootHelp(house) {
   const manifest = buildCommandManifest(program2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.33",
+  "version": "4.3.35",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",