@mutmutco/cli 4.3.42 → 4.3.44

package/dist/main.cjs

@@ -15710,10 +15710,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.42",
-    tag: "v4.3.42",
-    commit: "d890700b4096",
-    npm: "@mutmutco/cli@4.3.42"
+    version: "4.3.44",
+    tag: "v4.3.44",
+    commit: "405d6e3283b9",
+    npm: "@mutmutco/cli@4.3.44"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15730,14 +15730,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.42"
+          v3Target: "v4.3.44"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.42 and redeploy the Hub Lambda from tag v4.3.42 (d890700b4096); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.42 (@mutmutco/cli@4.3.42, tag commit d890700b4096 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.44 and redeploy the Hub Lambda from tag v4.3.44 (405d6e3283b9); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.44 (@mutmutco/cli@4.3.44, tag commit 405d6e3283b9 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -29159,7 +29159,7 @@ function registerDeployCommands(program3) {
 }
 
 // src/project-set.ts
-var UNSET_KEYS = ["oauth", "requiredRuntimeSecrets", "requiredBuildSecrets", "tenantTasks", "secrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "dsManifestPath", "fofuEnabled", "consumesDesignSystem", "ci", "requiredChecks", "requiredCheckBranches", "ciExemptReason", "gate", "seedCanary"];
+var UNSET_KEYS = ["oauth", "requiredRuntimeSecrets", "requiredBuildSecrets", "tenantTasks", "secrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "releaseChannel", "releaseLanguage", "dsManifestPath", "fofuEnabled", "consumesDesignSystem", "ci", "requiredChecks", "requiredCheckBranches", "ciExemptReason", "gate", "seedCanary"];
 var UNSET_KEY_SET = new Set(UNSET_KEYS);
 var RUNTIME_SECRET_STAGES = ["dev", "rc", "main"];
 var SECRET_CONSUMERS = ["runtime", "build", "lambda", "actions", "agent", "box"];
@@ -29443,6 +29443,20 @@ function parsePublishDirVar(raw) {
   }
   return v;
 }
+function parseReleaseChannelVar(raw) {
+  const v = raw.trim();
+  if (!/^[CG][A-Z0-9]{8,}$/.test(v)) {
+    throw new Error("org project set: releaseChannel must be a Slack channel id (e.g. C0BE0BRGAT0); --unset releaseChannel disables release notes");
+  }
+  return v;
+}
+function parseReleaseLanguageVar(raw) {
+  const v = raw.trim();
+  if (!/^[a-z]{2}$/.test(v)) {
+    throw new Error("org project set: releaseLanguage must be a 2-letter lowercase language code (e.g. tr); --unset releaseLanguage returns to en");
+  }
+  return v;
+}
 function parseDsManifestPathVar(raw) {
   const v = raw.trim();
   if (v === "" || !/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/.test(v) || /(^|\/)\.\.(\/|$)/.test(v)) {
@@ -29559,6 +29573,8 @@ var SETTABLE_VAR_KEYS = [
   "oauth",
   "publishRequired",
   "publishDir",
+  "releaseChannel",
+  "releaseLanguage",
   "dsManifestPath",
   "fofuEnabled",
   "consumesDesignSystem",
@@ -29586,6 +29602,8 @@ var SETTABLE_VAR_HINTS = {
   projectNumber: "numeric",
   publishRequired: "true|false",
   publishDir: "relative subpath, e.g. packages/ui",
+  releaseChannel: "Slack channel id, e.g. C0BE0BRGAT0",
+  releaseLanguage: "2-letter language code for release notes, e.g. tr (default en)",
   dsManifestPath: "relative path to a package.json, e.g. web/package.json",
   fofuEnabled: "true|false",
   consumesDesignSystem: '"fofu"',
@@ -29698,6 +29716,10 @@ function buildProjectSetPatch(input) {
       patch[key] = parseConsumesDesignSystemVar(raw);
     } else if (key === "publishDir") {
       patch[key] = parsePublishDirVar(raw);
+    } else if (key === "releaseChannel") {
+      patch[key] = parseReleaseChannelVar(raw);
+    } else if (key === "releaseLanguage") {
+      patch[key] = parseReleaseLanguageVar(raw);
     } else if (key === "dsManifestPath") {
       patch[key] = parseDsManifestPathVar(raw);
     } else if (key === "ci") {
@@ -42357,7 +42379,7 @@ var SSM_REGION = "eu-central-1";
 var SSM_TOKEN_PARAM = "/mmi-future/_org/slack/SLACK_BOT_TOKEN";
 var SSM_CHANNEL_PARAM = "/mmi-future/_org/slack/SLACK_ALERTS_CHANNEL";
 var SLACK_TIMEOUT_MS = 1e4;
-async function ssmParameter(deps, name, decrypt) {
+async function readSsmParameter(deps, name, decrypt) {
   const args = [
     "ssm",
     "get-parameter",
@@ -42375,18 +42397,24 @@ async function ssmParameter(deps, name, decrypt) {
   if (!value || value === "None") throw new Error(`SSM parameter ${name} is empty`);
   return value;
 }
-async function postToAlertsChannel(deps, text) {
-  const token = await ssmParameter(deps, SSM_TOKEN_PARAM, true);
-  const channel = await ssmParameter(deps, SSM_CHANNEL_PARAM, false);
+async function postToChannel(deps, channel, text) {
+  const resolved = channel.trim();
+  if (!resolved || resolved === "None") throw new Error("no Slack channel resolved");
+  const token = await readSsmParameter(deps, SSM_TOKEN_PARAM, true);
   const fetchImpl = deps.fetchImpl ?? fetch;
   const res = await fetchImpl("https://slack.com/api/chat.postMessage", {
     method: "POST",
     headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json; charset=utf-8" },
-    body: JSON.stringify({ channel, text, unfurl_links: false }),
+    body: JSON.stringify({ channel: resolved, text, unfurl_links: false }),
     signal: AbortSignal.timeout(SLACK_TIMEOUT_MS)
   });
   const json = await res.json().catch(() => ({}));
   if (!json.ok) throw new Error(`slack postMessage failed: ${json.error ?? `http ${res.status}`}`);
+  return { status: "posted", note: "posted" };
+}
+async function postToAlertsChannel(deps, text) {
+  const channel = await readSsmParameter(deps, SSM_CHANNEL_PARAM, false);
+  await postToChannel(deps, channel, text);
   return { status: "posted", note: "posted to the alerts channel" };
 }
 
@@ -42402,7 +42430,7 @@ function neutralizeHubProductBrands(text) {
 function escapeMrkdwn(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
 }
-function bulletToLine(raw) {
+function bulletToLine(raw, neutralize) {
   const m = /^[*-]\s+(.*)$/.exec(raw.trim());
   if (!m) return null;
   let text = m[1].trim();
@@ -42417,9 +42445,9 @@ function bulletToLine(raw) {
     text = text.slice(0, tail.index).trim();
   }
   if (!text) return null;
-  return `\u2022 ${escapeMrkdwn(neutralizeHubProductBrands(text))}${link}`;
+  return `\u2022 ${escapeMrkdwn(neutralize ? neutralizeHubProductBrands(text) : text)}${link}`;
 }
-function curateReleaseNotes(notesMd, maxBullets = MAX_BULLETS) {
+function curateReleaseNotes(notesMd, maxBullets = MAX_BULLETS, neutralize = true) {
   const lines2 = [];
   let bullets = 0;
   let dropped = 0;
@@ -42437,7 +42465,7 @@ function curateReleaseNotes(notesMd, maxBullets = MAX_BULLETS) {
       continue;
     }
     if (/new contributors/i.test(section)) continue;
-    const line = bulletToLine(raw);
+    const line = bulletToLine(raw, neutralize);
     if (!line) continue;
     if (bullets >= maxBullets) {
       dropped += 1;
@@ -42453,31 +42481,49 @@ function curateReleaseNotes(notesMd, maxBullets = MAX_BULLETS) {
   if (dropped > 0) lines2.push(`\u2026and ${dropped} more`);
   return lines2;
 }
+var ANNOUNCE_FRAMES = {
+  en: { released: "released", notes: "Release notes" },
+  tr: { released: "yay\u0131nda", notes: "S\xFCr\xFCm notlar\u0131" }
+};
 function formatAnnouncement(args) {
   const name = args.repo.split("/")[1] ?? args.repo;
+  const code = args.language ?? "en";
+  const frame = Object.hasOwn(ANNOUNCE_FRAMES, code) ? ANNOUNCE_FRAMES[code] : ANNOUNCE_FRAMES.en;
   return [
-    `:rocket: *${name} ${args.tag} released*`,
+    `:rocket: *${name} ${args.tag} ${frame.released}*`,
     "",
     ...args.lines,
     "",
-    `<${args.releaseUrl}|Release notes>`
+    `<${args.releaseUrl}|${frame.notes}>`
   ].join("\n");
 }
-function summaryFileLines(content) {
-  return content.split("\n").map((l) => l.trim()).filter(Boolean).slice(0, MAX_SUMMARY_LINES).map((l) => escapeMrkdwn(neutralizeHubProductBrands(l.replace(/^[•*-]\s*/, "")))).filter(Boolean).map((l) => `\u2022 ${l}`);
+function summaryFileLines(content, neutralize = true) {
+  return content.split("\n").map((l) => l.trim()).filter(Boolean).slice(0, MAX_SUMMARY_LINES).map((l) => {
+    const bare = l.replace(/^[•*-]\s*/, "");
+    return escapeMrkdwn(neutralize ? neutralizeHubProductBrands(bare) : bare);
+  }).filter(Boolean).map((l) => `\u2022 ${l}`);
+}
+async function resolveAnnounceTarget(deps, repo) {
+  if (repo.toLowerCase() === ANNOUNCE_REPO.toLowerCase()) return { kind: "alerts" };
+  const target = deps.fetchReleaseTarget ? await deps.fetchReleaseTarget(slugOf(repo)) : { channel: null, language: "en" };
+  return target.channel ? { kind: "channel", channel: target.channel, language: target.language } : { kind: "none" };
+}
+function missingChannelNote(repo) {
+  const slug = slugOf(repo);
+  return `no releaseChannel configured for ${slug} \u2014 enable release notes with \`mmi-cli oracle org project set --var releaseChannel=<slack channel id> ${repo}\``;
 }
 async function announceRelease(deps, args) {
-  if (args.repo !== ANNOUNCE_REPO) {
-    return { status: "skipped", note: `announce is Hub-only \u2014 ${args.repo} skipped` };
-  }
+  const neutralize = args.repo.toLowerCase() === ANNOUNCE_REPO.toLowerCase();
   try {
+    const target = await resolveAnnounceTarget(deps, args.repo);
+    if (target.kind === "none") return { status: "skipped", note: missingChannelNote(args.repo) };
     const viewRaw = await deps.run("gh", ["release", "view", args.tag, "--repo", args.repo, "--json", "body,url"]);
     const view = JSON.parse(viewRaw);
     const releaseUrl = view.url ?? `https://github.com/${args.repo}/releases/tag/${args.tag}`;
     let lines2 = [];
     if (args.summaryFile) {
       if (!deps.readFile) throw new Error("summary file given but deps.readFile is missing");
-      lines2 = summaryFileLines(await deps.readFile(args.summaryFile));
+      lines2 = summaryFileLines(await deps.readFile(args.summaryFile), neutralize);
       if (deps.removeFile) {
         try {
           await deps.removeFile(args.summaryFile);
@@ -42485,11 +42531,26 @@ async function announceRelease(deps, args) {
         }
       }
     }
-    if (lines2.length === 0) lines2 = curateReleaseNotes(view.body ?? "");
+    if (lines2.length === 0) {
+      if (target.kind !== "alerts") {
+        return { status: "skipped", note: "no --announce-summary-file given \u2014 raw release notes are never posted to a project channel" };
+      }
+      lines2 = curateReleaseNotes(view.body ?? "", MAX_BULLETS, neutralize);
+    }
     if (lines2.length === 0) lines2 = ["\u2022 maintenance release \u2014 see the notes for details"];
-    const text = formatAnnouncement({ repo: args.repo, tag: args.tag, lines: lines2, releaseUrl });
-    await postToAlertsChannel(deps, text);
-    return { status: "announced", note: `announced ${args.tag} to the alerts channel` };
+    const text = formatAnnouncement({
+      repo: args.repo,
+      tag: args.tag,
+      lines: lines2,
+      releaseUrl,
+      ...target.kind === "channel" ? { language: target.language } : {}
+    });
+    if (target.kind === "alerts") {
+      await postToAlertsChannel(deps, text);
+      return { status: "announced", note: `announced ${args.tag} to the alerts channel` };
+    }
+    await postToChannel(deps, target.channel, text);
+    return { status: "announced", note: `announced ${args.tag} to the project release channel` };
   } catch (e) {
     return { status: "failed", note: `announce failed (release unaffected): ${e.message}` };
   }
@@ -43842,6 +43903,18 @@ var NODE_PREPARE_TIMEOUT_MS = 10 * 6e4;
 var NODE_VERIFY_TIMEOUT_MS = 5 * 6e4;
 var NPM_TRAIN_TIMEOUT_MS = 6e4;
 var JERV_GATEWAY_DEPLOY_TIMEOUT_MS = 20 * 6e4;
+async function announceSummaryRefusal(path2) {
+  let lines2;
+  try {
+    lines2 = summaryFileLines(await (0, import_promises10.readFile)(path2, "utf8"));
+  } catch (e) {
+    return `release: could not read --announce-summary-file ${path2}: ${e.message} \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
+  }
+  if (lines2.length < 3 || lines2.length > 6) {
+    return `release: --announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
+  }
+  return null;
+}
 function trainApplyDeps() {
   return {
     run: async (file, args) => {
@@ -43904,11 +43977,25 @@ function trainApplyDeps() {
     // train lands the back-merge itself instead of leaving a manual step. Same enqueue path `pr land` uses,
     // but method `--merge` (NOT squash): the misalignment guard needs the merge parentage to survive.
     mergeAuto: (prNumber, repo) => ghMergeAutoEnqueue(prNumber, repo, "--merge"),
-    // Slack release announcement (#883): Hub-only + best-effort inside announceRelease itself.
+    // Slack release announcement (#883/#6521/#6523): the org alerts channel for the Hub, the project's own
+    // registry releaseChannel META for a product repo — best-effort inside announceRelease itself.
     announce: (args) => announceRelease({
       run: async (file, cmdArgs) => (await execFileP(file, cmdArgs, { timeout: GH_TRAIN_TIMEOUT_MS })).stdout,
       readFile: (path2) => (0, import_promises10.readFile)(path2, "utf8"),
-      removeFile: (path2) => (0, import_promises10.unlink)(path2)
+      removeFile: (path2) => (0, import_promises10.unlink)(path2),
+      // #6521/#6523: the project's own release channel AND releaseLanguage, read from registry META in ONE
+      // checked read. Same shape as fetchEdgeDomains below: a FAILED read refuses by name so the announce
+      // note reports a failed read, never a project that configured nothing.
+      fetchReleaseTarget: async (slug) => {
+        const read = await fetchProjectBySlugChecked(slug, registryClientDeps(await loadConfig()));
+        if (!read.ok) {
+          throw new Error(`release announcement: Hub registry read FAILED for ${slug} (${read.error}) \u2014 releaseChannel is UNREAD, not unset`);
+        }
+        return {
+          channel: read.project?.releaseChannel?.trim() || null,
+          language: read.project?.releaseLanguage?.trim() || "en"
+        };
+      }
     }, args),
     // #4713 (I/O-boundary census): `null` used to mean BOTH "this project configures no edge domains"
     // (a real answer) and "the registry read missed" — so a release verdict printed an environments block
@@ -44168,7 +44255,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
   for (const commandName of ["rcand", "release"]) {
     const trainCmd = program3.command(commandName).description(`plan ${commandName} train operations; mutations require explicit master-admin approval`).option("--json", "machine-readable output").option("--watch", "block on the deploy/publish workflow runs and report their outcomes").option("--apply", "execute the guarded master-only train after explicit approval").option("--resume", commandName === "rcand" ? "finish a candidate whose immutable public rc tag passed policy but origin/rc was not pushed (#3881)" : "finish a partial release or its protected post-release alignment without re-cutting, republishing, or redeploying (#3851/#3885)").option("--out <path>", "write the terminal result (--apply, --resume, --abort, --retry-publish) to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5983/#6068)");
     const RELEASE_ONLY_FLAGS = [
-      { flags: "--announce-summary-file <path>", description: "agent-curated 3-6 line Hub Slack summary; required for a new MMI-Hub --apply (#883/#3901)" },
+      { flags: "--announce-summary-file <path>", description: "agent-curated 3-6 line release Slack summary; required for a new MMI-Hub --apply (#883/#3901) and for a product repo whose registry META sets `releaseChannel` (#6523), in its `releaseLanguage`; nothing is posted to a project channel without it" },
       { flags: "--ack <shas>", description: "comma-separated dev shas a human verified are in the candidate, overriding the hotfix-coverage guard for a conflicted port whose -x trailer was lost (#958)" },
       { flags: "--dev", description: "full-track repos release development -> main directly, skipping rc (refuses if rc carries content not in development; no-op on direct-track repos) (#1062)" },
       { flags: "--abort", description: "with --apply, delete only a proven unpublished failed release candidate on any registered deploy model and restore local main for a same-version recut (#3944/#5650/#5657)" },
@@ -44194,7 +44281,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
         return fail(`${commandName}: --dev applies only to release \u2014 it ships development -> main skipping rc, which rcand cannot do. Run: mmi-cli devops release --dev`);
       }
       if (o.announceSummaryFile && commandName !== "release") {
-        return fail(`${commandName}: --announce-summary-file applies only to release \u2014 rcand posts no Hub Slack announcement. Run: mmi-cli devops release --announce-summary-file <path>`);
+        return fail(`${commandName}: --announce-summary-file applies only to release \u2014 rcand posts no release announcement. Run: mmi-cli devops release --announce-summary-file <path>`);
       }
       if (o.abort && commandName !== "release") {
         return fail(`${commandName}: --abort applies only to release \u2014 it rolls back a proven unpublished release tag. Run: mmi-cli devops release --abort --apply`);
@@ -44286,22 +44373,35 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
         const guard = planTrainApplyRepoGuard(o.repo, await resolveRepo(), rerun);
         if (!guard.ok) return fail(`${commandName}: ${guard.message}`);
       }
-      if (o.apply && commandName === "release" && (await resolveRepo())?.toLowerCase() === ANNOUNCE_REPO.toLowerCase()) {
-        if (!o.announceSummaryFile) {
-          return fail(
-            "release: a new MMI-Hub release requires --announce-summary-file <path> with 3-6 short LLM-curated lines; create the summary file, then rerun the same release command \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing"
-          );
-        }
-        let summaryLines;
-        try {
-          summaryLines = summaryFileLines(await (0, import_promises10.readFile)(o.announceSummaryFile, "utf8"));
-        } catch (e) {
-          return fail(`release: could not read --announce-summary-file ${o.announceSummaryFile}: ${e.message} \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`);
+      if (o.apply && commandName === "release") {
+        const applyingRepo = await resolveRepo();
+        const slug = applyingRepo ? slugOf(applyingRepo) : "";
+        const isHub = applyingRepo?.toLowerCase() === ANNOUNCE_REPO.toLowerCase();
+        let announcesToChannel = isHub;
+        let releaseLanguage2 = "en";
+        if (!isHub && slug) {
+          let read;
+          try {
+            read = await fetchProjectBySlugChecked(slug, registryClientDeps(await loadConfig()));
+          } catch (e) {
+            read = { ok: false, error: e.message };
+          }
+          if (!read.ok) {
+            return fail(
+              `release: Hub registry read failed for ${slug} (${read.error}) \u2014 whether ${slug} announces to a project release channel is UNREAD, so the --announce-summary-file requirement is unproven. Likely transient (cold start, network, or auth blip); retry shortly.`
+            );
+          }
+          announcesToChannel = Boolean(read.project?.releaseChannel?.trim());
+          releaseLanguage2 = read.project?.releaseLanguage?.trim() || "en";
         }
-        if (summaryLines.length < 3 || summaryLines.length > 6) {
-          return fail(
-            `release: --announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${summaryLines.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`
-          );
+        if (announcesToChannel) {
+          if (!o.announceSummaryFile) {
+            return fail(
+              isHub ? "release: a new MMI-Hub release requires --announce-summary-file <path> with 3-6 short LLM-curated lines; create the summary file, then rerun the same release command \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing" : `release: ${slug} announces to its project release channel, so a new release requires --announce-summary-file <path> with 3-6 short plain-language lines in the project's releaseLanguage (${releaseLanguage2}); create the summary file, then rerun the same release command \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`
+            );
+          }
+          const refusal = await announceSummaryRefusal(o.announceSummaryFile);
+          if (refusal) return fail(refusal);
         }
       }
       if (o.apply) {
@@ -44333,6 +44433,8 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       const repo = o.repo ?? await resolveRepo();
       const targets = commandName === "rcand" && !o.repo ? await resolveRcandPlanTargets() : void 0;
       let releaseTrack;
+      let releaseChannel = null;
+      let releaseLanguage = "en";
       if (repo) {
         let read;
         try {
@@ -44347,6 +44449,8 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
         }
         const raw = read.project?.releaseTrack;
         if (isReleaseTrack(raw)) releaseTrack = raw;
+        releaseChannel = read.project?.releaseChannel?.trim() || null;
+        releaseLanguage = read.project?.releaseLanguage?.trim() || "en";
       }
       const steps = trainPlan(commandName, { ...targets ?? {}, repo, dev: o.dev, releaseTrack });
       let doctor;
@@ -44358,7 +44462,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
         }
       }
       console.log(
-        o.json ? JSON.stringify({ command: commandName, ...targets ?? {}, repo, steps, ...doctor ? { doctor } : {} }, null, 2) : [renderSteps(`mmi-cli ${commandName}: dry-run plan`, steps), ...doctor ? ["", formatTrainDoctor(doctor)] : []].join("\n")
+        o.json ? JSON.stringify({ command: commandName, ...targets ?? {}, repo, steps, ...commandName === "release" ? { releaseChannel, releaseLanguage } : {}, ...doctor ? { doctor } : {} }, null, 2) : [renderSteps(`mmi-cli ${commandName}: dry-run plan`, steps), ...doctor ? ["", formatTrainDoctor(doctor)] : []].join("\n")
       );
     });
   }
@@ -44446,7 +44550,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
     console.log(o.json ? JSON.stringify({ command: "hotfix", steps }, null, 2) : renderSteps("mmi-cli devops hotfix: dry-run plan", steps));
   });
   hotfixCmd.command("start").description("cherry-pick one or more merged development PRs (or SHAs) onto hotfix/vX.Y.Z from origin/main, bump the distribution, open the main-base PR").requiredOption("--from <pr#|sha[,pr#|sha...]>", "merged development PR number(s) or commit SHA(s) to cherry-pick, in pick order \u2014 one hotfix cycle carries as many fixes as you name (#4411)").option("--json", "machine-readable output").option("--out <path>", "write the result to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5983/#6068)").action(async (o) => runHotfixSub("start", () => runHotfixStart(trainApplyDeps(), { from: o.from }), o, renderHotfixStart));
-  hotfixCmd.command("release <version>").description("after the hotfix PR is merged + checks green: tag, GitHub Release, watch deploy/publish, verify distribution (idempotent)").option("--json", "machine-readable output").option("--announce-summary-file <path>", "agent-curated 3-6 line Hub Slack summary; required for a NEW MMI-Hub hotfix Release (#883/#3901/#6068)").option("--carries <pr#|sha[,pr#|sha...]>", "declared fix target(s) this hotfix must carry; each must be proven present before tagging (#3056)").option("--out <path>", "write the result to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5983/#6068)").action(async (version, o) => runHotfixSub("release", async () => {
+  hotfixCmd.command("release <version>").description("after the hotfix PR is merged + checks green: tag, GitHub Release, watch deploy/publish, verify distribution (idempotent)").option("--json", "machine-readable output").option("--announce-summary-file <path>", "agent-curated 3-6 line release Slack summary; required for a NEW MMI-Hub hotfix Release (#883/#3901/#6068), optional for a product repo announcing to its project release channel (#6517)").option("--carries <pr#|sha[,pr#|sha...]>", "declared fix target(s) this hotfix must carry; each must be proven present before tagging (#3056)").option("--out <path>", "write the result to this file as UTF-8 (no BOM) instead of stdout \u2014 the shell-free receipt path (#5983/#6068)").action(async (version, o) => runHotfixSub("release", async () => {
     const result = await runHotfixRelease(trainApplyDeps(), version, { announceSummaryFile: o.announceSummaryFile, carries: o.carries ? [o.carries] : [] });
     const postReleaseJervDoctor = await runPostReleaseJervDoctor(result.repo);
     const projectInfoSync = await runProjectInfoSyncLeg(runProjectInfoSyncCallback, result.repo);
@@ -45278,7 +45382,7 @@ projectDeploy.command("doctor").description("read-only estate scan for duplicate
   if (report.error && report.status !== 403) return failGraceful(`org project deploy doctor: ${report.error}`);
   if (!report.ok && !report.error) process.exitCode = 1;
 });
-project.command("set [owner/repo]").description("upsert project META (idempotent merge; master-gated)").addOption(new Option("--class <class>", "deployable | content").choices(["deployable", "content"])).addOption(new Option("--project-type <type>", `${PROJECT_TYPES.join(" | ")} (capability shape)`).choices([...PROJECT_TYPES])).addOption(new Option("--deploy-model <model>", `${DEPLOY_MODELS.join(" | ")} (release/deploy path; none means no Hub deploy registration)`).choices([...DEPLOY_MODELS])).addOption(new Option("--release-track <track>", `${RELEASE_TRACKS.join(" | ")} (branch topology; direct skips rc)`).choices([...RELEASE_TRACKS])).option("--var <KEY=VALUE...>", settableVarHelp()).option("--set <KEY=VALUE...>", "alias of --var (one KEY=VALUE per flag; repeat the flag to set several)").option("--secrets-file <path>", 'read the #2244 secrets catalog map (JSON) from a file and merge it per entry into the existing catalog (clear all with --unset secrets). SHAPE: a JSON object keyed by env name, each entry {"key":"UPPER_SNAKE" (repeat the env name), "purpose":"<non-empty>", "group":"<e.g. auth|database>", "owner":"<github login>", "stages":[] (empty = the one stageless shared value; else any of dev/rc/main), "consumers":["runtime"|"box"|?], "provider":"<optional>"}').option("--unset <KEY...>", "META field to remove (repeatable): oauth, requiredRuntimeSecrets, requiredBuildSecrets, secrets, edgeDomains, requiredGcpApis, publishRequired").option("--clear-web-profile", "remove web-only registry fields (oauth, edgeDomains) for non-web/content projects").option("--json", "machine-readable output").action(async (repoOrSlug, o) => {
+project.command("set [owner/repo]").description("upsert project META (idempotent merge; master-gated)").addOption(new Option("--class <class>", "deployable | content").choices(["deployable", "content"])).addOption(new Option("--project-type <type>", `${PROJECT_TYPES.join(" | ")} (capability shape)`).choices([...PROJECT_TYPES])).addOption(new Option("--deploy-model <model>", `${DEPLOY_MODELS.join(" | ")} (release/deploy path; none means no Hub deploy registration)`).choices([...DEPLOY_MODELS])).addOption(new Option("--release-track <track>", `${RELEASE_TRACKS.join(" | ")} (branch topology; direct skips rc)`).choices([...RELEASE_TRACKS])).option("--var <KEY=VALUE...>", settableVarHelp()).option("--set <KEY=VALUE...>", "alias of --var (one KEY=VALUE per flag; repeat the flag to set several)").option("--secrets-file <path>", 'read the #2244 secrets catalog map (JSON) from a file and merge it per entry into the existing catalog (clear all with --unset secrets). SHAPE: a JSON object keyed by env name, each entry {"key":"UPPER_SNAKE" (repeat the env name), "purpose":"<non-empty>", "group":"<e.g. auth|database>", "owner":"<github login>", "stages":[] (empty = the one stageless shared value; else any of dev/rc/main), "consumers":["runtime"|"box"|?], "provider":"<optional>"}').option("--unset <KEY...>", "META field to remove (repeatable): oauth, requiredRuntimeSecrets, requiredBuildSecrets, secrets, edgeDomains, requiredGcpApis, publishRequired, releaseChannel, releaseLanguage").option("--clear-web-profile", "remove web-only registry fields (oauth, edgeDomains) for non-web/content projects").option("--json", "machine-readable output").action(async (repoOrSlug, o) => {
   const cfg = await loadConfig();
   let target;
   try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.42",
+  "version": "4.3.44",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",