@mutmutco/cli 4.3.62 → 4.3.64

package/dist/main.cjs

@@ -13772,7 +13772,7 @@ function walk(dir, root, out) {
   return out;
 }
 function defaultListDocs(root) {
-  const docs = ["docs", "skills/org-guide", "skills/mmi-help"].flatMap((path2) => {
+  const docs = ["docs", "skills/org-guide", "skills/mmi-help", "skills/brand"].flatMap((path2) => {
     const directory = (0, import_node_path12.join)(root, path2);
     return (0, import_node_fs14.existsSync)(directory) ? walk(directory, root, []) : [];
   }).filter(
@@ -15801,10 +15801,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.62",
-    tag: "v4.3.62",
-    commit: "d664b30d09d7",
-    npm: "@mutmutco/cli@4.3.62"
+    version: "4.3.64",
+    tag: "v4.3.64",
+    commit: "91fe5c009629",
+    npm: "@mutmutco/cli@4.3.64"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15821,14 +15821,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.62"
+          v3Target: "v4.3.64"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.62 and redeploy the Hub Lambda from tag v4.3.62 (d664b30d09d7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.62 (@mutmutco/cli@4.3.62, tag commit d664b30d09d7 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.64 and redeploy the Hub Lambda from tag v4.3.64 (91fe5c009629); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.64 (@mutmutco/cli@4.3.64, tag commit 91fe5c009629 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -19606,12 +19606,21 @@ function readHermesPluginEvidence(env = process.env) {
     skills = (0, import_node_fs19.existsSync)((0, import_node_path17.join)(root, "skills")) && (0, import_node_fs19.statSync)((0, import_node_path17.join)(root, "skills")).isDirectory();
   } catch {
   }
+  let provisioned = false;
+  const provisionedRoot = (0, import_node_path17.join)(host, "skills", "mmi");
+  try {
+    provisioned = (0, import_node_fs19.existsSync)(provisionedRoot) && (0, import_node_fs19.statSync)(provisionedRoot).isDirectory();
+  } catch {
+  }
+  const treeOk = (0, import_node_fs19.existsSync)((0, import_node_path17.join)(root, "__init__.py")) && skills && manifest === "valid";
+  const receipt = treeOk && !provisioned ? `hermes-skills-unprovisioned:${provisionedRoot}` : void 0;
   return {
     hostPresent: (0, import_node_fs19.existsSync)(host),
     installRecordPresent,
     manifest,
-    payloadPresent: (0, import_node_fs19.existsSync)((0, import_node_path17.join)(root, "__init__.py")) && skills && manifest === "valid",
-    ...installedVersion ? { installedVersion } : {}
+    payloadPresent: treeOk && provisioned,
+    ...installedVersion ? { installedVersion } : {},
+    ...receipt ? { receipt } : {}
   };
 }
 function installedSurfacePluginVersion(surface) {
@@ -21505,9 +21514,45 @@ async function supersedeContentCausedPublishLeg(deps, cwd) {
       throw new Error(`release --supersede-publish: could not prove ${prior.tag} live on origin (${e instanceof Error ? e.message : String(e)}) \u2014 refusing to close the leg on an unproven state; retry when origin answers (#6638)`);
     }
     if (liveSha.toLowerCase() !== prior.tagSha.toLowerCase()) {
-      throw new Error(
-        `release --supersede-publish: origin reports ${prior.tag} at ${liveSha.slice(0, 12) || "no tag"} but the ledger anchors ${prior.tagSha.slice(0, 12)} \u2014 an absent or divergent release is NOT supersedeable (release --abort --apply is the unpublished candidate's own exit); nothing was written (#6638)`
-      );
+      if (liveSha) {
+        throw new Error(
+          `release --supersede-publish: origin reports ${prior.tag} at ${liveSha.slice(0, 12)} but the ledger anchors ${prior.tagSha.slice(0, 12)} \u2014 a divergent release is NOT supersedeable; nothing was written (#6638)`
+        );
+      }
+      let repository;
+      try {
+        repository = JSON.parse(await deps.run("gh", ["repo", "view", prior.repo, "--json", "nameWithOwner"]));
+      } catch (e) {
+        throw new Error(`release --supersede-publish: could not prove repository access for ${prior.repo} (${e instanceof Error ? e.message.split("\n")[0] : String(e)}) \u2014 a Release 404 is untrusted without that proof; nothing was written (#6638)`);
+      }
+      if (repository.nameWithOwner !== prior.repo) {
+        throw new Error(`release --supersede-publish: repository access proof named ${String(repository.nameWithOwner || "(missing)")}, not ${prior.repo} \u2014 nothing was written (#6638)`);
+      }
+      let releaseAbsent = false;
+      try {
+        await deps.run("gh", ["release", "view", prior.tag, "--repo", prior.repo, "--json", "tagName"]);
+      } catch (e) {
+        const detail = `${e instanceof Error ? e.message : String(e)} ${String(e.stderr ?? "")}`;
+        releaseAbsent = /release not found|HTTP 404|\(404\)/i.test(detail);
+        if (!releaseAbsent) {
+          throw new Error(`release --supersede-publish: could not prove the GitHub Release for ${prior.tag} absent (${detail.split("\n")[0]}) \u2014 refusing to close on an unproven state; nothing was written (#6638)`);
+        }
+      }
+      if (!releaseAbsent) {
+        throw new Error(`release --supersede-publish: origin no longer has ${prior.tag} but its GitHub Release still exists \u2014 resolve the mixed external state before closing the ledger; nothing was written (#6638)`);
+      }
+      const archivePath = (0, import_node_path21.join)((0, import_node_path21.dirname)(path2), `phases.archive-${prior.tag}.json`);
+      if ((0, import_node_fs21.existsSync)(archivePath)) {
+        throw new Error(`release --supersede-publish: archive already exists at ${archivePath} \u2014 preserving both ledger records; resolve the collision by hand; nothing was written (#6638)`);
+      }
+      (0, import_node_fs21.renameSync)(path2, archivePath);
+      return {
+        command: "release-supersede-publish",
+        repo: prior.repo,
+        tag: prior.tag,
+        tagSha: prior.tagSha,
+        note: `closed the deleted ${prior.tag} publish failure by archiving its ledger after origin and GitHub both proved absent; start a fresh release train to carry the cause fix`
+      };
     }
     const note = `superseded: content-caused publish failure on the immutable promoted ${prior.tag} \u2014 the cause fix rides the next patch train (master-approved closure, #6638)`;
     atomicWriteJson(path2, {
@@ -31877,7 +31922,7 @@ var surfaces_default = {
       },
       enforcementCeilings: [
         "MMI ships no Hermes hooks (#5908): the plugin contributes skills and the /mmi command only; enforcement is host-side.",
-        "Hermes user plugins are opt-in through plugins.enabled; operator consent and host process isolation remain Hermes-owned.",
+        "Hermes user plugins are opt-in through plugins.enabled (#6656): after a verified converge MMI-Hub enables its OWN mmi key through Hermes' own `hermes plugins enable mmi --no-allow-tool-override` command, and never reads, reorders, or writes another operator entry. Built-in tool override is explicitly declined, since MMI ships no Hermes hooks. Host process isolation remains Hermes-owned.",
         "npm is MMI transport only: MMI-Hub extracts @mutmutco/hermes-plugin into $HERMES_HOME/plugins/mmi and provisions the canonical skills into $HERMES_HOME/skills/mmi/; a fresh Hermes Agent process is required for discovery."
       ]
     }
@@ -42726,6 +42771,13 @@ function summaryFileLines(content, neutralize = true) {
     return escapeMrkdwn(neutralize ? neutralizeHubProductBrands(bare) : bare);
   }).filter(Boolean).map((l) => `\u2022 ${l}`);
 }
+function announceSummaryFidelity(lines2, rangeLog) {
+  const shipped = new Set(rangeLog.match(/#\d+/g) ?? []);
+  if (shipped.size === 0) return null;
+  const invented = [...new Set(lines2.flatMap((l) => l.match(/#\d+/g) ?? []))].filter((ref) => !shipped.has(ref));
+  if (invented.length === 0) return null;
+  return `--announce-summary-file cites ${invented.join(", ")}, which ship in no commit of this release range \u2014 a summary line must describe work that actually shipped. Rebuild the summary from \`git log origin/main..HEAD\` (read commit BODIES too: a bundled PR closes issues its subject never names), then rerun the same release command \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
+}
 async function resolveAnnounceTarget(deps, repo) {
   if (repo.toLowerCase() === ANNOUNCE_REPO.toLowerCase()) return { kind: "alerts" };
   const target = deps.fetchReleaseTarget ? await deps.fetchReleaseTarget(slugOf(repo)) : { channel: null, language: "en" };
@@ -43449,6 +43501,14 @@ async function runHotfixRelease(deps, versionInput, options = {}, doctor = runTr
     if (lines2.length < 3 || lines2.length > 6) {
       throw new Error(`--announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`);
     }
+    let rangeLog;
+    try {
+      rangeLog = await deps.run("git", ["log", "--format=%B", "origin/main..HEAD"]);
+    } catch (e) {
+      throw new Error(`could not read the hotfix commit range (git log origin/main..HEAD: ${e.message}) \u2014 the --announce-summary-file lines cannot be checked against what actually ships; fix the checkout, then rerun`);
+    }
+    const invented = announceSummaryFidelity(lines2, rangeLog);
+    if (invented) throw new Error(invented);
   }
   const anchors = { repo: ctx.repo, tag, tagSha: mergedSha };
   const start = await startReleaseLedger(ledger, anchors, { lane: "hotfix" });
@@ -44173,7 +44233,25 @@ async function announceSummaryRefusal(path2) {
   if (lines2.length < 3 || lines2.length > 6) {
     return `release: --announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
   }
-  return null;
+  try {
+    await execFileP("git", ["fetch", "origin"], { timeout: GIT_TIMEOUT_MS });
+  } catch (e) {
+    return `release: could not fetch origin to check the --announce-summary-file lines (git fetch origin: ${e.message}) \u2014 the lines cannot be checked against what actually ships; fix the checkout, then rerun the same release command`;
+  }
+  const revs = ["HEAD"];
+  try {
+    const upstream = await execFileP("git", ["rev-parse", "--verify", "--quiet", "@{upstream}"], { timeout: GIT_TIMEOUT_MS });
+    if (upstream.stdout.trim()) revs.push("@{upstream}");
+  } catch {
+  }
+  let rangeLog;
+  try {
+    rangeLog = (await execFileP("git", ["log", "--format=%B", ...revs, "--not", "origin/main"], { timeout: GIT_TIMEOUT_MS })).stdout;
+  } catch (e) {
+    return `release: could not read the release commit range (git log ${revs.join(" ")} --not origin/main: ${e.message}) \u2014 the --announce-summary-file lines cannot be checked against what actually ships; fix the checkout, then rerun`;
+  }
+  const invented = announceSummaryFidelity(lines2, rangeLog);
+  return invented ? `release: ${invented}` : null;
 }
 function trainApplyDeps() {
   return {
@@ -44999,7 +45077,8 @@ function mmiDoctorDeps(opts = {}) {
       manifest: hermes?.manifest ?? (installedVersion ? "valid" : snapshot.installRecordPresent ? "invalid" : "missing"),
       guardState: buildPluginGuardDecision(snapshot).state,
       ...installedVersion ? { installedVersion } : {},
-      ...stagedVersion ? { stagedVersion } : {}
+      ...stagedVersion ? { stagedVersion } : {},
+      ...hermes?.receipt ? { receipt: hermes.receipt } : {}
     };
     return surfaceEvidence;
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.62",
+  "version": "4.3.64",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",