@mutmutco/cli 4.3.60 → 4.3.62

package/README.md

@@ -85,4 +85,8 @@ node cli/dist/index.cjs --version
 node cli/dist/index.cjs doctor --json
 ```
 
+When reproducing or verifying CLI behavior from a checkout, always run the checkout's built
+`node cli/dist/index.cjs` — the globally installed `mmi-cli` can lag or diverge from this source
+(#6629), and a reproduction against the global install misreports the fix you are validating.
+
 The Claude Code plugin also ships its own `bin/mmi-cli` launcher, so plugin-enabled Bash sessions can use the bundled command even without a global npm install. Codex and other non-Claude surfaces use the standalone npm package or this repo-local fallback.

package/dist/main.cjs

@@ -12070,12 +12070,15 @@ async function checkLaneContest(client, item, actor = describeSessionIdentity(),
     resume
   };
 }
-function laneContestMessage(ref, contest, verb) {
+function laneContestParts(contest) {
   const holder = contest.marker ? `lane ${describeClaimMarker(contest.marker)}` : contest.unverifiable.includes("comments") ? "an unreadable lane (its claim-marker comments could not be read, so no holder can be named)" : "another lane";
   const seen = contest.live.join("; ");
   const unreadable = contest.unverifiable.length ? `liveness could not be fully verified (failed to read: ${contest.unverifiable.join(", ")})` : "";
-  const why = [seen, unreadable].filter(Boolean).join("; ");
-  return verb === "claim" ? `${ref} is already claimed by ${holder} with live evidence of active work (${why}); re-run with --force to take it anyway` : `refusing to unclaim ${ref}: ${holder} shows live evidence of active work (${why}); re-run with --force to release it anyway`;
+  return { holder, why: [seen, unreadable].filter(Boolean).join("; ") };
+}
+function laneContestMessage(ref, contest, verb) {
+  const { holder, why } = laneContestParts(contest);
+  return verb === "claim" ? `${ref} is already claimed by ${holder} with live evidence of active work (${why}); re-run with --force to take it anyway` : `refusing to unclaim ${ref}: ${holder} shows live evidence of active work (${why}); re-run with --force --holder-dead once you have evidence the holder lane is dead, or wait for it to go stale (#6625)`;
 }
 function ghError(e) {
   const err = e;
@@ -12633,9 +12636,19 @@ async function unclaimBoardIssue(options, deps = {}) {
     throw boardNotFoundError(`${selector.repo}#${selector.number}`, { owner: cfg.projectOwner, number: cfg.projectNumber });
   }
   const toStatus = options.toStatus ?? "Todo";
-  if (!options.force && item.contentType === "Issue") {
+  if (item.contentType === "Issue") {
     const contest = await checkLaneContest(client, item);
-    if (contest.contested) throw new Error(withGatedWriteChainHint(laneContestMessage(item.ref, contest, "unclaim")));
+    if (contest.contested) {
+      if (!options.force) {
+        throw new Error(withGatedWriteChainHint(laneContestMessage(item.ref, contest, "unclaim")));
+      }
+      if (!options.holderDead) {
+        const { holder, why } = laneContestParts(contest);
+        throw new Error(withGatedWriteChainHint(
+          `refusing to unclaim ${item.ref} with --force: ${holder} still shows live evidence of active work (${why}); --force no longer overrides a live lane alone \u2014 re-run with --holder-dead once you have evidence the holder's session is dead, or wait for its lane to go stale (#6625)`
+        ));
+      }
+    }
   }
   try {
     await client.rest("DELETE", `repos/${item.repository}/issues/${item.number}/assignees`, {
@@ -15788,10 +15801,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.60",
-    tag: "v4.3.60",
-    commit: "7602c0b24dc9",
-    npm: "@mutmutco/cli@4.3.60"
+    version: "4.3.62",
+    tag: "v4.3.62",
+    commit: "d664b30d09d7",
+    npm: "@mutmutco/cli@4.3.62"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15808,14 +15821,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.60"
+          v3Target: "v4.3.62"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.60 and redeploy the Hub Lambda from tag v4.3.60 (7602c0b24dc9); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.60 (@mutmutco/cli@4.3.60, tag commit 7602c0b24dc9 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.62 and redeploy the Hub Lambda from tag v4.3.62 (d664b30d09d7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.62 (@mutmutco/cli@4.3.62, tag commit d664b30d09d7 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -21451,6 +21464,69 @@ async function supersedeContentCausedDeployLeg(deps, cwd) {
     };
   });
 }
+function supersedeablePublishLegShape(rec) {
+  return rec.state === "failed" || rec.state === "pending" && rec.runId == null;
+}
+async function supersedeContentCausedPublishLeg(deps, cwd) {
+  const path2 = releaseLedgerPath(cwd);
+  return withFileLock(`${path2}.lock`, { label: "release ledger" }, async () => {
+    let prior;
+    try {
+      prior = parseReleaseLedger((0, import_node_fs21.readFileSync)(path2, "utf8"));
+    } catch (e) {
+      throw new ReleaseLedgerError(
+        "unreadable",
+        `release --supersede-publish: the active release ledger at ${path2} could not be read (${e instanceof Error ? e.message : String(e)}) \u2014 resolve it by hand before any train; nothing was written (#6638)`
+      );
+    }
+    if (prior.phases.publish.superseded === true) {
+      throw new Error(`release --supersede-publish: the ${prior.tag} publish leg is already superseded \u2014 nothing to do; the next train runs normally`);
+    }
+    if (!supersedeablePublishLegShape(prior.phases.publish)) {
+      throw new Error(
+        `release --supersede-publish: the ${prior.tag} publish leg is ${prior.phases.publish.state}` + (prior.phases.publish.runId != null ? ` with run ${prior.phases.publish.runId} \u2014 a run-backed leg is resolved by watching/reverifying its run, never superseded` : "") + "; the supersession closes only a FAILED publish leg, or a PENDING one no run correlates (the uncorrelatable historical shape); nothing was written (#6638)"
+      );
+    }
+    const phases = { ...prior.phases };
+    if (phases.alignment.state === "pending") {
+      const closed = await alignmentLegClosedLive(deps, prior);
+      if (closed) phases.alignment = closed;
+    }
+    const unresolved = ["promotion", "ordinaryCi", "githubRelease", "deploy", "alignment"].filter((phase) => phases[phase].state === "pending" || phases[phase].state === "failed");
+    if (unresolved.length > 0) {
+      throw new Error(
+        `release --supersede-publish: ${prior.tag} has unresolved legs besides publish (${unresolved.map((p) => `${p}=${phases[p].state}`).join(", ")}) \u2014 the supersession closes only the publish leg of an otherwise-complete release; resolve those first, nothing was written (#6638)`
+      );
+    }
+    let liveSha = "";
+    try {
+      liveSha = (await deps.run("git", ["ls-remote", "origin", `refs/tags/${prior.tag}`])).trim().split(/\s+/)[0] ?? "";
+    } catch (e) {
+      throw new Error(`release --supersede-publish: could not prove ${prior.tag} live on origin (${e instanceof Error ? e.message : String(e)}) \u2014 refusing to close the leg on an unproven state; retry when origin answers (#6638)`);
+    }
+    if (liveSha.toLowerCase() !== prior.tagSha.toLowerCase()) {
+      throw new Error(
+        `release --supersede-publish: origin reports ${prior.tag} at ${liveSha.slice(0, 12) || "no tag"} but the ledger anchors ${prior.tagSha.slice(0, 12)} \u2014 an absent or divergent release is NOT supersedeable (release --abort --apply is the unpublished candidate's own exit); nothing was written (#6638)`
+      );
+    }
+    const note = `superseded: content-caused publish failure on the immutable promoted ${prior.tag} \u2014 the cause fix rides the next patch train (master-approved closure, #6638)`;
+    atomicWriteJson(path2, {
+      ...prior,
+      phases: {
+        ...phases,
+        publish: { state: "skipped", sha: prior.tagSha, superseded: true, note, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }
+      },
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    return {
+      command: "release-supersede-publish",
+      repo: prior.repo,
+      tag: prior.tag,
+      tagSha: prior.tagSha,
+      note: `closed the ${prior.tag} publish leg as superseded (skipped) \u2014 the ledger is phases-green; rerun the train doctor to confirm, then run the next patch train (hotfix or release) to carry the cause fix`
+    };
+  });
+}
 async function reverifyPriorRunLegs(deps, path2, targetTag) {
   let prior;
   try {
@@ -23243,7 +23319,9 @@ Nothing was written. Inspect ${ledger.path} (or clear it only after proving the
       if (persisted.phases.deploy.superseded !== true) {
         await recordPhase(ledger, deps, anchors, "deploy", phaseEntry(phaseInputs.deploy), { strict: true, landed: "the verified GitHub Release and origin/main at the immutable tag SHA" });
       }
-      await recordPhase(ledger, deps, anchors, "publish", phaseEntry(phaseInputs.publish), { strict: true, landed: "the verified GitHub Release and origin/main at the immutable tag SHA" });
+      if (persisted.phases.publish.superseded !== true) {
+        await recordPhase(ledger, deps, anchors, "publish", phaseEntry(phaseInputs.publish), { strict: true, landed: "the verified GitHub Release and origin/main at the immutable tag SHA" });
+      }
       await recordPhase(ledger, deps, anchors, "githubRelease", phaseEntry({ state: "complete", sha: tagSha, note: "re-verified live: the GitHub Release exists at the immutable tag SHA" }), { strict: true, landed: "the promotion (verified live)" });
       await recordPhase(ledger, deps, anchors, "promotion", phaseEntry({ state: "complete", sha: tagSha, note: "re-verified live: origin/main contains the immutable tag SHA" }), { strict: true, landed: "nothing beyond the already-public release" });
     }
@@ -23524,6 +23602,17 @@ async function runReleaseSupersedeDeploy(deps, options = {}) {
     throw new Error(message2.includes("nothing was written") || message2.includes("nothing to do") ? message2 : `${message2}; nothing was written`);
   }
 }
+async function runReleaseSupersedePublish(deps, options = {}) {
+  if (!options.approved) {
+    throw new Error("release --supersede-publish requires --apply after explicit master approval; nothing was written");
+  }
+  try {
+    return await supersedeContentCausedPublishLeg(deps, process.cwd());
+  } catch (e) {
+    const message2 = e instanceof Error ? e.message : String(e);
+    throw new Error(message2.includes("nothing was written") || message2.includes("nothing to do") ? message2 : `${message2}; nothing was written`);
+  }
+}
 async function runReleasePublishRetry(deps, runId, options = {}) {
   if (!options.approved) {
     throw new Error("release --retry-publish requires --apply after explicit approval; nothing was written");
@@ -26318,7 +26407,7 @@ function registerBoardCommands(program3) {
       return failGraceful(`board set-priority failed: ${e.message}`);
     }
   });
-  board.command("unclaim <issue>").description("clear the assignee and reset the board Status (defaults to Todo) \u2014 the inverse of claim").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--to-status <status>", `set Status after unclaim (default Todo; one of ${BOARD_STATUSES.join(", ")})`).option("--force", "release the claim even when another session shows live evidence of active work (#3727)").option("--allow-partial", "return success JSON if the assignee clear or status move fails").action(async (issueRef, o) => {
+  board.command("unclaim <issue>").description("clear the assignee and reset the board Status (defaults to Todo) \u2014 the inverse of claim").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--to-status <status>", `set Status after unclaim (default Todo; one of ${BOARD_STATUSES.join(", ")})`).option("--force", "release a claim whose lane has gone stale or shows no live evidence (#3727); a lane that still shows live evidence also needs --holder-dead (#6625)").option("--holder-dead", "acknowledge the holding lane is known dead \u2014 required with --force when the holder still shows live evidence (#6625)").option("--allow-partial", "return success JSON if the assignee clear or status move fails").action(async (issueRef, o) => {
     const toStatus = o.toStatus ? resolveBoardStatus(o.toStatus) : void 0;
     try {
       const result = await unclaimBoardIssue({
@@ -26327,6 +26416,7 @@ function registerBoardCommands(program3) {
         repo: o.repo,
         toStatus,
         force: o.force,
+        holderDead: o.holderDead,
         allowPartial: o.allowPartial
       });
       if (o.json) return console.log(JSON.stringify(result));
@@ -33190,19 +33280,23 @@ function findCommandInManifest(manifest, commandPath3) {
   return visit(manifest.tree);
 }
 function registerExplainCommand(program3) {
-  program3.command("explain").description("print a command's purpose, flags, and examples from the live schema \u2014 one grounding call replaces trial-and-error").argument("[command...]", 'the command path to explain (e.g. "issue create")').addOption(new Option("--loop <name>", "print the canonical command sequence: agent | start-work | ship-pr | hotfix").choices(Object.keys(LOOP_PLAYBOOKS))).option("--json", "machine-readable focused command, route, or loop detail").option("--recursive", "include full schemas for immediate children (default: compact child index)").option("--full", "alias for --recursive").action((commandArgs, opts) => {
+  program3.command("explain").description("print a command's purpose, flags, and examples from the live schema \u2014 one grounding call replaces trial-and-error").argument("[command...]", 'the command path to explain (e.g. "issue create")').addOption(new Option("--loop <name>", "print the canonical command sequence: agent | start-work | ship-pr | hotfix").choices(Object.keys(LOOP_PLAYBOOKS))).option("--json", "machine-readable focused command, route, or loop detail").option("--out <path>", "write the output to a UTF-8 file instead of stdout (#5802 byte contract)").option("--recursive", "include full schemas for immediate children (default: compact child index)").option("--full", "alias for --recursive").action((commandArgs, opts) => {
+    const emit = (output) => {
+      if (!opts.out) console.log(output);
+      else console.log(`Wrote explain output to ${opts.out} (UTF-8, ${writeUtf8Receipt(opts.out, output)} bytes)`);
+    };
     if (opts.loop) {
       if (!LOOP_PLAYBOOKS[opts.loop]) {
         const valid = Object.keys(LOOP_PLAYBOOKS).join(", ");
         fail(`explain --loop: unknown loop "${opts.loop}"; expected one of: ${valid}`, { code: ERROR_CODES.ERR_BAD_ENUM, expected: Object.keys(LOOP_PLAYBOOKS) });
         return;
       }
-      console.log(opts.json ? JSON.stringify({ schema_version: 1, scope: "loop", name: opts.loop, playbook: LOOP_PLAYBOOKS[opts.loop] }, null, 2) : formatExplainLoop(LOOP_PLAYBOOKS[opts.loop]));
+      emit(opts.json ? JSON.stringify({ schema_version: 1, scope: "loop", name: opts.loop, playbook: LOOP_PLAYBOOKS[opts.loop] }, null, 2) : formatExplainLoop(LOOP_PLAYBOOKS[opts.loop]));
       return;
     }
     const manifest = buildCommandManifest(program3);
     if (!commandArgs.length) {
-      console.log(opts.json ? JSON.stringify(compactRouteManifest(manifest), null, 2) : formatManifestHuman(manifest));
+      emit(opts.json ? JSON.stringify(compactRouteManifest(manifest), null, 2) : formatManifestHuman(manifest));
       return;
     }
     const commandPath3 = commandArgs.join(" ");
@@ -33225,7 +33319,7 @@ function registerExplainCommand(program3) {
       return;
     }
     const recursive = Boolean(opts.recursive || opts.full);
-    console.log(opts.json ? JSON.stringify(explainCommandManifest(manifest, command, { recursive }), null, 2) : command.subcommands.length ? formatExplainGroup(command, manifest.name) : formatExplainCommand(command, manifest.name));
+    emit(opts.json ? JSON.stringify(explainCommandManifest(manifest, command, { recursive }), null, 2) : command.subcommands.length ? formatExplainGroup(command, manifest.name) : formatExplainCommand(command, manifest.name));
   });
 }
 
@@ -40325,6 +40419,19 @@ function registerCollaborationCommands(program3) {
     delete rest.number;
     return rest;
   }
+  async function resolveTransferredRef(repo, number) {
+    try {
+      const { stdout } = await execFileP("gh", ["api", `repos/${repo}/issues/${number}`], { timeout: GIT_TIMEOUT_MS });
+      const issue2 = JSON.parse(stdout);
+      const match = /^https:\/\/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)$/.exec(issue2.html_url ?? "");
+      if (!match || typeof issue2.number !== "number") return void 0;
+      const [currentRepo, currentNumber] = [match[1], Number(match[2])];
+      if (currentRepo.toLowerCase() === repo.toLowerCase() && currentNumber === number) return void 0;
+      return { repo: currentRepo, number: currentNumber, url: issue2.html_url };
+    } catch {
+      return void 0;
+    }
+  }
   issue.command("view <ref>").aliases(["show", "get", "read"]).description('read an issue as structured JSON \u2014 the mmi-cli path for non-board issue reads (#2347). --comments folds in every comment; --context also adds linkedPrs + children (the one-shot "load the whole item" read, #2894). `show`, `get` and `read` alias view (#5483/#5706/#6078)').option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json [fields...]", 'gh --json field list (overrides the default field set). `parent` is synthetic: selectable here, composed by the wrapper via a REST parent read, never sent to gh (#5970). Accepts commas, spaces, or repeated --json flags \u2014 in PowerShell an unquoted comma list is an array literal, so QUOTE it: --json "number,title,body,url"').option("--comments", 'include every comment (body + comments in one call) \u2014 the agentic "read the whole item before working it" read (#2894)').option("--context", "full working context in one call: implies --comments and also adds linkedPrs and, for an epic, a children summary (#2894)").action(async (ref, o) => {
     let parsed;
     try {
@@ -40338,19 +40445,33 @@ function registerCollaborationCommands(program3) {
     const fields = normalizeIssueViewJsonFields(o.json);
     const gh = resolveIssueViewGhFields(fields);
     const emit = (data, parent) => console.log(JSON.stringify({ ...gh.numberIsTransport ? withoutTransportNumber(data) : data, ...parent }));
-    try {
+    const readIssue = async (targetRepo2, targetNumber) => {
       if (o.comments || o.context) {
         const boardProjectId = o.context ? await resolveBoardProjectId(o.repo) : void 0;
-        const data2 = await runIssueViewContext(queryDeps(), { number: n, repo, comments: Boolean(o.comments), context: Boolean(o.context), jsonFields: gh.ghFields, boardProjectId });
-        emit(data2, await readParentField(n, repo));
-        return;
+        const data2 = await runIssueViewContext(queryDeps(), { number: targetNumber, repo: targetRepo2, comments: Boolean(o.comments), context: Boolean(o.context), jsonFields: gh.ghFields, boardProjectId });
+        return { data: data2, parent: await readParentField(targetNumber, targetRepo2) };
       }
-      const data = await ghJson(["issue", "view", String(n), "--repo", repo, "--json", gh.ghFields]);
-      emit(data, await readParentField(n, repo));
+      const data = await ghJson(["issue", "view", String(targetNumber), "--repo", targetRepo2, "--json", gh.ghFields]);
+      return { data, parent: await readParentField(targetNumber, targetRepo2) };
+    };
+    try {
+      const { data, parent } = await readIssue(repo, n);
+      emit(data, parent);
     } catch (e) {
       const err = e;
       const raw = (err.stderr || err.message || String(e)).trim();
       const argvNote = o.json ? ` (received --json argv: ${JSON.stringify(o.json)}, normalized to "${fields}")` : "";
+      const moved = /Could not resolve to an issue/i.test(raw) ? await resolveTransferredRef(repo, n) : void 0;
+      if (moved) {
+        try {
+          const { data, parent } = await readIssue(moved.repo, moved.number);
+          emit({ ...data, transferred: { from: `${repo}#${n}`, to: `${moved.repo}#${moved.number}`, url: moved.url } }, parent);
+          return;
+        } catch (reRead) {
+          const reErr = reRead;
+          return fail(`issue view: ${repo}#${n} was transferred to ${moved.repo}#${moved.number} (${moved.url}), but re-reading it there failed: ${(reErr.stderr || reErr.message || String(reRead)).trim()}`);
+        }
+      }
       return fail(`issue view: ${raw}${argvNote}`);
     }
   });
@@ -44202,6 +44323,9 @@ function renderReleaseAbort(r) {
 function renderReleaseSupersedeDeploy(r) {
   return `mmi-cli devops release --supersede-deploy --apply: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}`;
 }
+function renderReleaseSupersedePublish(r) {
+  return `mmi-cli devops release --supersede-publish --apply: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}`;
+}
 function renderReleasePublishRetry(r) {
   return `mmi-cli devops release --retry-publish: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}; ${r.runUrl}`;
 }
@@ -44427,6 +44551,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       { flags: "--dev", description: "full-track repos release development -> main directly, skipping rc (refuses if rc carries content not in development; no-op on direct-track repos) (#1062)" },
       { flags: "--abort", description: "with --apply, delete only a proven unpublished failed release candidate on any registered deploy model and restore local main for a same-version recut (#3944/#5650/#5657)" },
       { flags: "--supersede-deploy", description: "with --apply, master-approved closure of a content-caused failed deploy leg on a PUBLISHED release whose immutable tag can never deploy green \u2014 the next patch train then carries the fix (#6553)" },
+      { flags: "--supersede-publish", description: "with --apply, master-approved closure of a content-caused failed publish leg on a fully PROMOTED release whose immutable tag can never publish green \u2014 the next patch train then carries the fix (#6638)" },
       { flags: "--retry-publish <run-id>", description: "with --apply, retry one proven failed or cancelled Hub publish release run (#3949/#5797)" }
     ];
     for (const f of RELEASE_ONLY_FLAGS) {
@@ -44457,6 +44582,9 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       if (o.supersedeDeploy && commandName !== "release") {
         return fail(`${commandName}: --supersede-deploy applies only to release \u2014 it closes a content-caused failed deploy leg on a published release's ledger. Run: mmi-cli devops release --supersede-deploy --apply`);
       }
+      if (o.supersedePublish && commandName !== "release") {
+        return fail(`${commandName}: --supersede-publish applies only to release \u2014 it closes a content-caused failed publish leg on a promoted release's ledger. Run: mmi-cli devops release --supersede-publish --apply`);
+      }
       if (o.retryPublish && commandName !== "release") {
         return fail(`${commandName}: --retry-publish applies only to release. Run: mmi-cli devops release --retry-publish <run-id> --apply --watch`);
       }
@@ -44504,6 +44632,9 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
           return failGraceful(`release --abort: ${e.message}`);
         }
       }
+      if (o.supersedeDeploy && o.supersedePublish) {
+        return fail("release: --supersede-deploy and --supersede-publish are mutually exclusive \u2014 close the one leg that failed content-caused; the other leg has its own resolution paths");
+      }
       if (o.supersedeDeploy) {
         if (o.resume) return fail("release: --supersede-deploy and --resume are mutually exclusive \u2014 the closure settles the ledger so a NEW train can run, resume re-derives the very leg it closes");
         if (o.abort) return fail("release: --supersede-deploy and --abort are mutually exclusive \u2014 the closure is for a PUBLISHED release, abort only ever deletes a proven unpublished candidate");
@@ -44523,6 +44654,25 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
           return failGraceful(`release --supersede-deploy: ${e.message}`);
         }
       }
+      if (o.supersedePublish) {
+        if (o.resume) return fail("release: --supersede-publish and --resume are mutually exclusive \u2014 the closure settles the ledger so a NEW train can run, resume re-reads the very failed run it closes");
+        if (o.abort) return fail("release: --supersede-publish and --abort are mutually exclusive \u2014 the closure is for a PROMOTED release, abort only ever deletes a proven unpublished candidate");
+        if (o.retryPublish) return fail("release: --supersede-publish cannot be combined with --retry-publish \u2014 a content-caused failure on the immutable tag cannot be retried green");
+        if (!o.apply) return fail("release: --supersede-publish requires --apply after explicit master approval; nothing was written");
+        if (o.watch || o.announceSummaryFile || o.ack || o.dev) {
+          return fail("release: --supersede-publish accepts only --apply, --repo, --json and --out; it closes a ledger leg and dispatches nothing");
+        }
+        if (o.repo) {
+          const guard = planTrainApplyRepoGuard(o.repo, await resolveRepo(), "mmi-cli devops release --supersede-publish --apply");
+          if (!guard.ok) return fail(`release: ${guard.message}`);
+        }
+        try {
+          const result = await runReleaseSupersedePublish(trainApplyDeps(), { approved: true });
+          return emitTrainResult("release --supersede-publish", o.json ? JSON.stringify(result, null, 2) : renderReleaseSupersedePublish(result), o.out);
+        } catch (e) {
+          return failGraceful(`release --supersede-publish: ${e.message}`);
+        }
+      }
       if (o.resume) {
         if (o.apply) return fail(`${commandName}: --resume and --apply are mutually exclusive \u2014 --apply cuts the NEXT version, --resume finishes the immutable tag already on origin`);
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.60",
+  "version": "4.3.62",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",