@mutmutco/cli 4.3.61 → 4.3.63

package/README.md

@@ -85,4 +85,8 @@ node cli/dist/index.cjs --version
 node cli/dist/index.cjs doctor --json
 ```
 
+When reproducing or verifying CLI behavior from a checkout, always run the checkout's built
+`node cli/dist/index.cjs` — the globally installed `mmi-cli` can lag or diverge from this source
+(#6629), and a reproduction against the global install misreports the fix you are validating.
+
 The Claude Code plugin also ships its own `bin/mmi-cli` launcher, so plugin-enabled Bash sessions can use the bundled command even without a global npm install. Codex and other non-Claude surfaces use the standalone npm package or this repo-local fallback.

package/dist/main.cjs

@@ -12070,12 +12070,15 @@ async function checkLaneContest(client, item, actor = describeSessionIdentity(),
     resume
   };
 }
-function laneContestMessage(ref, contest, verb) {
+function laneContestParts(contest) {
   const holder = contest.marker ? `lane ${describeClaimMarker(contest.marker)}` : contest.unverifiable.includes("comments") ? "an unreadable lane (its claim-marker comments could not be read, so no holder can be named)" : "another lane";
   const seen = contest.live.join("; ");
   const unreadable = contest.unverifiable.length ? `liveness could not be fully verified (failed to read: ${contest.unverifiable.join(", ")})` : "";
-  const why = [seen, unreadable].filter(Boolean).join("; ");
-  return verb === "claim" ? `${ref} is already claimed by ${holder} with live evidence of active work (${why}); re-run with --force to take it anyway` : `refusing to unclaim ${ref}: ${holder} shows live evidence of active work (${why}); re-run with --force to release it anyway`;
+  return { holder, why: [seen, unreadable].filter(Boolean).join("; ") };
+}
+function laneContestMessage(ref, contest, verb) {
+  const { holder, why } = laneContestParts(contest);
+  return verb === "claim" ? `${ref} is already claimed by ${holder} with live evidence of active work (${why}); re-run with --force to take it anyway` : `refusing to unclaim ${ref}: ${holder} shows live evidence of active work (${why}); re-run with --force --holder-dead once you have evidence the holder lane is dead, or wait for it to go stale (#6625)`;
 }
 function ghError(e) {
   const err = e;
@@ -12633,9 +12636,19 @@ async function unclaimBoardIssue(options, deps = {}) {
     throw boardNotFoundError(`${selector.repo}#${selector.number}`, { owner: cfg.projectOwner, number: cfg.projectNumber });
   }
   const toStatus = options.toStatus ?? "Todo";
-  if (!options.force && item.contentType === "Issue") {
+  if (item.contentType === "Issue") {
     const contest = await checkLaneContest(client, item);
-    if (contest.contested) throw new Error(withGatedWriteChainHint(laneContestMessage(item.ref, contest, "unclaim")));
+    if (contest.contested) {
+      if (!options.force) {
+        throw new Error(withGatedWriteChainHint(laneContestMessage(item.ref, contest, "unclaim")));
+      }
+      if (!options.holderDead) {
+        const { holder, why } = laneContestParts(contest);
+        throw new Error(withGatedWriteChainHint(
+          `refusing to unclaim ${item.ref} with --force: ${holder} still shows live evidence of active work (${why}); --force no longer overrides a live lane alone \u2014 re-run with --holder-dead once you have evidence the holder's session is dead, or wait for its lane to go stale (#6625)`
+        ));
+      }
+    }
   }
   try {
     await client.rest("DELETE", `repos/${item.repository}/issues/${item.number}/assignees`, {
@@ -15788,10 +15801,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.61",
-    tag: "v4.3.61",
-    commit: "f4f05eb96516",
-    npm: "@mutmutco/cli@4.3.61"
+    version: "4.3.63",
+    tag: "v4.3.63",
+    commit: "23180ae03611",
+    npm: "@mutmutco/cli@4.3.63"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15808,14 +15821,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.61"
+          v3Target: "v4.3.63"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.61 and redeploy the Hub Lambda from tag v4.3.61 (f4f05eb96516); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.61 (@mutmutco/cli@4.3.61, tag commit f4f05eb96516 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.63 and redeploy the Hub Lambda from tag v4.3.63 (23180ae03611); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.63 (@mutmutco/cli@4.3.63, tag commit 23180ae03611 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -21451,6 +21464,69 @@ async function supersedeContentCausedDeployLeg(deps, cwd) {
     };
   });
 }
+function supersedeablePublishLegShape(rec) {
+  return rec.state === "failed" || rec.state === "pending" && rec.runId == null;
+}
+async function supersedeContentCausedPublishLeg(deps, cwd) {
+  const path2 = releaseLedgerPath(cwd);
+  return withFileLock(`${path2}.lock`, { label: "release ledger" }, async () => {
+    let prior;
+    try {
+      prior = parseReleaseLedger((0, import_node_fs21.readFileSync)(path2, "utf8"));
+    } catch (e) {
+      throw new ReleaseLedgerError(
+        "unreadable",
+        `release --supersede-publish: the active release ledger at ${path2} could not be read (${e instanceof Error ? e.message : String(e)}) \u2014 resolve it by hand before any train; nothing was written (#6638)`
+      );
+    }
+    if (prior.phases.publish.superseded === true) {
+      throw new Error(`release --supersede-publish: the ${prior.tag} publish leg is already superseded \u2014 nothing to do; the next train runs normally`);
+    }
+    if (!supersedeablePublishLegShape(prior.phases.publish)) {
+      throw new Error(
+        `release --supersede-publish: the ${prior.tag} publish leg is ${prior.phases.publish.state}` + (prior.phases.publish.runId != null ? ` with run ${prior.phases.publish.runId} \u2014 a run-backed leg is resolved by watching/reverifying its run, never superseded` : "") + "; the supersession closes only a FAILED publish leg, or a PENDING one no run correlates (the uncorrelatable historical shape); nothing was written (#6638)"
+      );
+    }
+    const phases = { ...prior.phases };
+    if (phases.alignment.state === "pending") {
+      const closed = await alignmentLegClosedLive(deps, prior);
+      if (closed) phases.alignment = closed;
+    }
+    const unresolved = ["promotion", "ordinaryCi", "githubRelease", "deploy", "alignment"].filter((phase) => phases[phase].state === "pending" || phases[phase].state === "failed");
+    if (unresolved.length > 0) {
+      throw new Error(
+        `release --supersede-publish: ${prior.tag} has unresolved legs besides publish (${unresolved.map((p) => `${p}=${phases[p].state}`).join(", ")}) \u2014 the supersession closes only the publish leg of an otherwise-complete release; resolve those first, nothing was written (#6638)`
+      );
+    }
+    let liveSha = "";
+    try {
+      liveSha = (await deps.run("git", ["ls-remote", "origin", `refs/tags/${prior.tag}`])).trim().split(/\s+/)[0] ?? "";
+    } catch (e) {
+      throw new Error(`release --supersede-publish: could not prove ${prior.tag} live on origin (${e instanceof Error ? e.message : String(e)}) \u2014 refusing to close the leg on an unproven state; retry when origin answers (#6638)`);
+    }
+    if (liveSha.toLowerCase() !== prior.tagSha.toLowerCase()) {
+      throw new Error(
+        `release --supersede-publish: origin reports ${prior.tag} at ${liveSha.slice(0, 12) || "no tag"} but the ledger anchors ${prior.tagSha.slice(0, 12)} \u2014 an absent or divergent release is NOT supersedeable (release --abort --apply is the unpublished candidate's own exit); nothing was written (#6638)`
+      );
+    }
+    const note = `superseded: content-caused publish failure on the immutable promoted ${prior.tag} \u2014 the cause fix rides the next patch train (master-approved closure, #6638)`;
+    atomicWriteJson(path2, {
+      ...prior,
+      phases: {
+        ...phases,
+        publish: { state: "skipped", sha: prior.tagSha, superseded: true, note, updatedAt: (/* @__PURE__ */ new Date()).toISOString() }
+      },
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    });
+    return {
+      command: "release-supersede-publish",
+      repo: prior.repo,
+      tag: prior.tag,
+      tagSha: prior.tagSha,
+      note: `closed the ${prior.tag} publish leg as superseded (skipped) \u2014 the ledger is phases-green; rerun the train doctor to confirm, then run the next patch train (hotfix or release) to carry the cause fix`
+    };
+  });
+}
 async function reverifyPriorRunLegs(deps, path2, targetTag) {
   let prior;
   try {
@@ -23243,7 +23319,9 @@ Nothing was written. Inspect ${ledger.path} (or clear it only after proving the
       if (persisted.phases.deploy.superseded !== true) {
         await recordPhase(ledger, deps, anchors, "deploy", phaseEntry(phaseInputs.deploy), { strict: true, landed: "the verified GitHub Release and origin/main at the immutable tag SHA" });
       }
-      await recordPhase(ledger, deps, anchors, "publish", phaseEntry(phaseInputs.publish), { strict: true, landed: "the verified GitHub Release and origin/main at the immutable tag SHA" });
+      if (persisted.phases.publish.superseded !== true) {
+        await recordPhase(ledger, deps, anchors, "publish", phaseEntry(phaseInputs.publish), { strict: true, landed: "the verified GitHub Release and origin/main at the immutable tag SHA" });
+      }
       await recordPhase(ledger, deps, anchors, "githubRelease", phaseEntry({ state: "complete", sha: tagSha, note: "re-verified live: the GitHub Release exists at the immutable tag SHA" }), { strict: true, landed: "the promotion (verified live)" });
       await recordPhase(ledger, deps, anchors, "promotion", phaseEntry({ state: "complete", sha: tagSha, note: "re-verified live: origin/main contains the immutable tag SHA" }), { strict: true, landed: "nothing beyond the already-public release" });
     }
@@ -23524,6 +23602,17 @@ async function runReleaseSupersedeDeploy(deps, options = {}) {
     throw new Error(message2.includes("nothing was written") || message2.includes("nothing to do") ? message2 : `${message2}; nothing was written`);
   }
 }
+async function runReleaseSupersedePublish(deps, options = {}) {
+  if (!options.approved) {
+    throw new Error("release --supersede-publish requires --apply after explicit master approval; nothing was written");
+  }
+  try {
+    return await supersedeContentCausedPublishLeg(deps, process.cwd());
+  } catch (e) {
+    const message2 = e instanceof Error ? e.message : String(e);
+    throw new Error(message2.includes("nothing was written") || message2.includes("nothing to do") ? message2 : `${message2}; nothing was written`);
+  }
+}
 async function runReleasePublishRetry(deps, runId, options = {}) {
   if (!options.approved) {
     throw new Error("release --retry-publish requires --apply after explicit approval; nothing was written");
@@ -26318,7 +26407,7 @@ function registerBoardCommands(program3) {
       return failGraceful(`board set-priority failed: ${e.message}`);
     }
   });
-  board.command("unclaim <issue>").description("clear the assignee and reset the board Status (defaults to Todo) \u2014 the inverse of claim").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--to-status <status>", `set Status after unclaim (default Todo; one of ${BOARD_STATUSES.join(", ")})`).option("--force", "release the claim even when another session shows live evidence of active work (#3727)").option("--allow-partial", "return success JSON if the assignee clear or status move fails").action(async (issueRef, o) => {
+  board.command("unclaim <issue>").description("clear the assignee and reset the board Status (defaults to Todo) \u2014 the inverse of claim").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--to-status <status>", `set Status after unclaim (default Todo; one of ${BOARD_STATUSES.join(", ")})`).option("--force", "release a claim whose lane has gone stale or shows no live evidence (#3727); a lane that still shows live evidence also needs --holder-dead (#6625)").option("--holder-dead", "acknowledge the holding lane is known dead \u2014 required with --force when the holder still shows live evidence (#6625)").option("--allow-partial", "return success JSON if the assignee clear or status move fails").action(async (issueRef, o) => {
     const toStatus = o.toStatus ? resolveBoardStatus(o.toStatus) : void 0;
     try {
       const result = await unclaimBoardIssue({
@@ -26327,6 +26416,7 @@ function registerBoardCommands(program3) {
         repo: o.repo,
         toStatus,
         force: o.force,
+        holderDead: o.holderDead,
         allowPartial: o.allowPartial
       });
       if (o.json) return console.log(JSON.stringify(result));
@@ -40329,6 +40419,19 @@ function registerCollaborationCommands(program3) {
     delete rest.number;
     return rest;
   }
+  async function resolveTransferredRef(repo, number) {
+    try {
+      const { stdout } = await execFileP("gh", ["api", `repos/${repo}/issues/${number}`], { timeout: GIT_TIMEOUT_MS });
+      const issue2 = JSON.parse(stdout);
+      const match = /^https:\/\/github\.com\/([^/]+\/[^/]+)\/issues\/(\d+)$/.exec(issue2.html_url ?? "");
+      if (!match || typeof issue2.number !== "number") return void 0;
+      const [currentRepo, currentNumber] = [match[1], Number(match[2])];
+      if (currentRepo.toLowerCase() === repo.toLowerCase() && currentNumber === number) return void 0;
+      return { repo: currentRepo, number: currentNumber, url: issue2.html_url };
+    } catch {
+      return void 0;
+    }
+  }
   issue.command("view <ref>").aliases(["show", "get", "read"]).description('read an issue as structured JSON \u2014 the mmi-cli path for non-board issue reads (#2347). --comments folds in every comment; --context also adds linkedPrs + children (the one-shot "load the whole item" read, #2894). `show`, `get` and `read` alias view (#5483/#5706/#6078)').option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json [fields...]", 'gh --json field list (overrides the default field set). `parent` is synthetic: selectable here, composed by the wrapper via a REST parent read, never sent to gh (#5970). Accepts commas, spaces, or repeated --json flags \u2014 in PowerShell an unquoted comma list is an array literal, so QUOTE it: --json "number,title,body,url"').option("--comments", 'include every comment (body + comments in one call) \u2014 the agentic "read the whole item before working it" read (#2894)').option("--context", "full working context in one call: implies --comments and also adds linkedPrs and, for an epic, a children summary (#2894)").action(async (ref, o) => {
     let parsed;
     try {
@@ -40342,19 +40445,33 @@ function registerCollaborationCommands(program3) {
     const fields = normalizeIssueViewJsonFields(o.json);
     const gh = resolveIssueViewGhFields(fields);
     const emit = (data, parent) => console.log(JSON.stringify({ ...gh.numberIsTransport ? withoutTransportNumber(data) : data, ...parent }));
-    try {
+    const readIssue = async (targetRepo2, targetNumber) => {
       if (o.comments || o.context) {
         const boardProjectId = o.context ? await resolveBoardProjectId(o.repo) : void 0;
-        const data2 = await runIssueViewContext(queryDeps(), { number: n, repo, comments: Boolean(o.comments), context: Boolean(o.context), jsonFields: gh.ghFields, boardProjectId });
-        emit(data2, await readParentField(n, repo));
-        return;
+        const data2 = await runIssueViewContext(queryDeps(), { number: targetNumber, repo: targetRepo2, comments: Boolean(o.comments), context: Boolean(o.context), jsonFields: gh.ghFields, boardProjectId });
+        return { data: data2, parent: await readParentField(targetNumber, targetRepo2) };
       }
-      const data = await ghJson(["issue", "view", String(n), "--repo", repo, "--json", gh.ghFields]);
-      emit(data, await readParentField(n, repo));
+      const data = await ghJson(["issue", "view", String(targetNumber), "--repo", targetRepo2, "--json", gh.ghFields]);
+      return { data, parent: await readParentField(targetNumber, targetRepo2) };
+    };
+    try {
+      const { data, parent } = await readIssue(repo, n);
+      emit(data, parent);
     } catch (e) {
       const err = e;
       const raw = (err.stderr || err.message || String(e)).trim();
       const argvNote = o.json ? ` (received --json argv: ${JSON.stringify(o.json)}, normalized to "${fields}")` : "";
+      const moved = /Could not resolve to an issue/i.test(raw) ? await resolveTransferredRef(repo, n) : void 0;
+      if (moved) {
+        try {
+          const { data, parent } = await readIssue(moved.repo, moved.number);
+          emit({ ...data, transferred: { from: `${repo}#${n}`, to: `${moved.repo}#${moved.number}`, url: moved.url } }, parent);
+          return;
+        } catch (reRead) {
+          const reErr = reRead;
+          return fail(`issue view: ${repo}#${n} was transferred to ${moved.repo}#${moved.number} (${moved.url}), but re-reading it there failed: ${(reErr.stderr || reErr.message || String(reRead)).trim()}`);
+        }
+      }
       return fail(`issue view: ${raw}${argvNote}`);
     }
   });
@@ -42609,6 +42726,13 @@ function summaryFileLines(content, neutralize = true) {
     return escapeMrkdwn(neutralize ? neutralizeHubProductBrands(bare) : bare);
   }).filter(Boolean).map((l) => `\u2022 ${l}`);
 }
+function announceSummaryFidelity(lines2, rangeLog) {
+  const shipped = new Set(rangeLog.match(/#\d+/g) ?? []);
+  if (shipped.size === 0) return null;
+  const invented = [...new Set(lines2.flatMap((l) => l.match(/#\d+/g) ?? []))].filter((ref) => !shipped.has(ref));
+  if (invented.length === 0) return null;
+  return `--announce-summary-file cites ${invented.join(", ")}, which ship in no commit of this release range \u2014 a summary line must describe work that actually shipped. Rebuild the summary from \`git log origin/main..HEAD\` (read commit BODIES too: a bundled PR closes issues its subject never names), then rerun the same release command \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
+}
 async function resolveAnnounceTarget(deps, repo) {
   if (repo.toLowerCase() === ANNOUNCE_REPO.toLowerCase()) return { kind: "alerts" };
   const target = deps.fetchReleaseTarget ? await deps.fetchReleaseTarget(slugOf(repo)) : { channel: null, language: "en" };
@@ -43332,6 +43456,14 @@ async function runHotfixRelease(deps, versionInput, options = {}, doctor = runTr
     if (lines2.length < 3 || lines2.length > 6) {
       throw new Error(`--announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`);
     }
+    let rangeLog;
+    try {
+      rangeLog = await deps.run("git", ["log", "--format=%B", "origin/main..HEAD"]);
+    } catch (e) {
+      throw new Error(`could not read the hotfix commit range (git log origin/main..HEAD: ${e.message}) \u2014 the --announce-summary-file lines cannot be checked against what actually ships; fix the checkout, then rerun`);
+    }
+    const invented = announceSummaryFidelity(lines2, rangeLog);
+    if (invented) throw new Error(invented);
   }
   const anchors = { repo: ctx.repo, tag, tagSha: mergedSha };
   const start = await startReleaseLedger(ledger, anchors, { lane: "hotfix" });
@@ -44056,7 +44188,25 @@ async function announceSummaryRefusal(path2) {
   if (lines2.length < 3 || lines2.length > 6) {
     return `release: --announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
   }
-  return null;
+  try {
+    await execFileP("git", ["fetch", "origin"], { timeout: GIT_TIMEOUT_MS });
+  } catch (e) {
+    return `release: could not fetch origin to check the --announce-summary-file lines (git fetch origin: ${e.message}) \u2014 the lines cannot be checked against what actually ships; fix the checkout, then rerun the same release command`;
+  }
+  const revs = ["HEAD"];
+  try {
+    const upstream = await execFileP("git", ["rev-parse", "--verify", "--quiet", "@{upstream}"], { timeout: GIT_TIMEOUT_MS });
+    if (upstream.stdout.trim()) revs.push("@{upstream}");
+  } catch {
+  }
+  let rangeLog;
+  try {
+    rangeLog = (await execFileP("git", ["log", "--format=%B", ...revs, "--not", "origin/main"], { timeout: GIT_TIMEOUT_MS })).stdout;
+  } catch (e) {
+    return `release: could not read the release commit range (git log ${revs.join(" ")} --not origin/main: ${e.message}) \u2014 the --announce-summary-file lines cannot be checked against what actually ships; fix the checkout, then rerun`;
+  }
+  const invented = announceSummaryFidelity(lines2, rangeLog);
+  return invented ? `release: ${invented}` : null;
 }
 function trainApplyDeps() {
   return {
@@ -44206,6 +44356,9 @@ function renderReleaseAbort(r) {
 function renderReleaseSupersedeDeploy(r) {
   return `mmi-cli devops release --supersede-deploy --apply: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}`;
 }
+function renderReleaseSupersedePublish(r) {
+  return `mmi-cli devops release --supersede-publish --apply: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}`;
+}
 function renderReleasePublishRetry(r) {
   return `mmi-cli devops release --retry-publish: ${r.repo} ${r.tag} (${r.tagSha.slice(0, 12)}) \u2014 ${r.note}; ${r.runUrl}`;
 }
@@ -44431,6 +44584,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       { flags: "--dev", description: "full-track repos release development -> main directly, skipping rc (refuses if rc carries content not in development; no-op on direct-track repos) (#1062)" },
       { flags: "--abort", description: "with --apply, delete only a proven unpublished failed release candidate on any registered deploy model and restore local main for a same-version recut (#3944/#5650/#5657)" },
       { flags: "--supersede-deploy", description: "with --apply, master-approved closure of a content-caused failed deploy leg on a PUBLISHED release whose immutable tag can never deploy green \u2014 the next patch train then carries the fix (#6553)" },
+      { flags: "--supersede-publish", description: "with --apply, master-approved closure of a content-caused failed publish leg on a fully PROMOTED release whose immutable tag can never publish green \u2014 the next patch train then carries the fix (#6638)" },
       { flags: "--retry-publish <run-id>", description: "with --apply, retry one proven failed or cancelled Hub publish release run (#3949/#5797)" }
     ];
     for (const f of RELEASE_ONLY_FLAGS) {
@@ -44461,6 +44615,9 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       if (o.supersedeDeploy && commandName !== "release") {
         return fail(`${commandName}: --supersede-deploy applies only to release \u2014 it closes a content-caused failed deploy leg on a published release's ledger. Run: mmi-cli devops release --supersede-deploy --apply`);
       }
+      if (o.supersedePublish && commandName !== "release") {
+        return fail(`${commandName}: --supersede-publish applies only to release \u2014 it closes a content-caused failed publish leg on a promoted release's ledger. Run: mmi-cli devops release --supersede-publish --apply`);
+      }
       if (o.retryPublish && commandName !== "release") {
         return fail(`${commandName}: --retry-publish applies only to release. Run: mmi-cli devops release --retry-publish <run-id> --apply --watch`);
       }
@@ -44508,6 +44665,9 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
           return failGraceful(`release --abort: ${e.message}`);
         }
       }
+      if (o.supersedeDeploy && o.supersedePublish) {
+        return fail("release: --supersede-deploy and --supersede-publish are mutually exclusive \u2014 close the one leg that failed content-caused; the other leg has its own resolution paths");
+      }
       if (o.supersedeDeploy) {
         if (o.resume) return fail("release: --supersede-deploy and --resume are mutually exclusive \u2014 the closure settles the ledger so a NEW train can run, resume re-derives the very leg it closes");
         if (o.abort) return fail("release: --supersede-deploy and --abort are mutually exclusive \u2014 the closure is for a PUBLISHED release, abort only ever deletes a proven unpublished candidate");
@@ -44527,6 +44687,25 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
           return failGraceful(`release --supersede-deploy: ${e.message}`);
         }
       }
+      if (o.supersedePublish) {
+        if (o.resume) return fail("release: --supersede-publish and --resume are mutually exclusive \u2014 the closure settles the ledger so a NEW train can run, resume re-reads the very failed run it closes");
+        if (o.abort) return fail("release: --supersede-publish and --abort are mutually exclusive \u2014 the closure is for a PROMOTED release, abort only ever deletes a proven unpublished candidate");
+        if (o.retryPublish) return fail("release: --supersede-publish cannot be combined with --retry-publish \u2014 a content-caused failure on the immutable tag cannot be retried green");
+        if (!o.apply) return fail("release: --supersede-publish requires --apply after explicit master approval; nothing was written");
+        if (o.watch || o.announceSummaryFile || o.ack || o.dev) {
+          return fail("release: --supersede-publish accepts only --apply, --repo, --json and --out; it closes a ledger leg and dispatches nothing");
+        }
+        if (o.repo) {
+          const guard = planTrainApplyRepoGuard(o.repo, await resolveRepo(), "mmi-cli devops release --supersede-publish --apply");
+          if (!guard.ok) return fail(`release: ${guard.message}`);
+        }
+        try {
+          const result = await runReleaseSupersedePublish(trainApplyDeps(), { approved: true });
+          return emitTrainResult("release --supersede-publish", o.json ? JSON.stringify(result, null, 2) : renderReleaseSupersedePublish(result), o.out);
+        } catch (e) {
+          return failGraceful(`release --supersede-publish: ${e.message}`);
+        }
+      }
       if (o.resume) {
         if (o.apply) return fail(`${commandName}: --resume and --apply are mutually exclusive \u2014 --apply cuts the NEXT version, --resume finishes the immutable tag already on origin`);
         try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.61",
+  "version": "4.3.63",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",