@mutmutco/cli 4.3.63 → 4.3.65

package/dist/main.cjs

@@ -13772,7 +13772,7 @@ function walk(dir, root, out) {
   return out;
 }
 function defaultListDocs(root) {
-  const docs = ["docs", "skills/org-guide", "skills/mmi-help"].flatMap((path2) => {
+  const docs = ["docs", "skills/org-guide", "skills/mmi-help", "skills/brand"].flatMap((path2) => {
     const directory = (0, import_node_path12.join)(root, path2);
     return (0, import_node_fs14.existsSync)(directory) ? walk(directory, root, []) : [];
   }).filter(
@@ -15801,10 +15801,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.63",
-    tag: "v4.3.63",
-    commit: "23180ae03611",
-    npm: "@mutmutco/cli@4.3.63"
+    version: "4.3.65",
+    tag: "v4.3.65",
+    commit: "6f1cb5bc31b9",
+    npm: "@mutmutco/cli@4.3.65"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15821,14 +15821,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.63"
+          v3Target: "v4.3.65"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.63 and redeploy the Hub Lambda from tag v4.3.63 (23180ae03611); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.63 (@mutmutco/cli@4.3.63, tag commit 23180ae03611 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.65 and redeploy the Hub Lambda from tag v4.3.65 (6f1cb5bc31b9); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.65 (@mutmutco/cli@4.3.65, tag commit 6f1cb5bc31b9 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -19606,12 +19606,21 @@ function readHermesPluginEvidence(env = process.env) {
     skills = (0, import_node_fs19.existsSync)((0, import_node_path17.join)(root, "skills")) && (0, import_node_fs19.statSync)((0, import_node_path17.join)(root, "skills")).isDirectory();
   } catch {
   }
+  let provisioned = false;
+  const provisionedRoot = (0, import_node_path17.join)(host, "skills", "mmi");
+  try {
+    provisioned = (0, import_node_fs19.existsSync)(provisionedRoot) && (0, import_node_fs19.statSync)(provisionedRoot).isDirectory();
+  } catch {
+  }
+  const treeOk = (0, import_node_fs19.existsSync)((0, import_node_path17.join)(root, "__init__.py")) && skills && manifest === "valid";
+  const receipt = treeOk && !provisioned ? `hermes-skills-unprovisioned:${provisionedRoot}` : void 0;
   return {
     hostPresent: (0, import_node_fs19.existsSync)(host),
     installRecordPresent,
     manifest,
-    payloadPresent: (0, import_node_fs19.existsSync)((0, import_node_path17.join)(root, "__init__.py")) && skills && manifest === "valid",
-    ...installedVersion ? { installedVersion } : {}
+    payloadPresent: treeOk && provisioned,
+    ...installedVersion ? { installedVersion } : {},
+    ...receipt ? { receipt } : {}
   };
 }
 function installedSurfacePluginVersion(surface) {
@@ -21505,9 +21514,45 @@ async function supersedeContentCausedPublishLeg(deps, cwd) {
       throw new Error(`release --supersede-publish: could not prove ${prior.tag} live on origin (${e instanceof Error ? e.message : String(e)}) \u2014 refusing to close the leg on an unproven state; retry when origin answers (#6638)`);
     }
     if (liveSha.toLowerCase() !== prior.tagSha.toLowerCase()) {
-      throw new Error(
-        `release --supersede-publish: origin reports ${prior.tag} at ${liveSha.slice(0, 12) || "no tag"} but the ledger anchors ${prior.tagSha.slice(0, 12)} \u2014 an absent or divergent release is NOT supersedeable (release --abort --apply is the unpublished candidate's own exit); nothing was written (#6638)`
-      );
+      if (liveSha) {
+        throw new Error(
+          `release --supersede-publish: origin reports ${prior.tag} at ${liveSha.slice(0, 12)} but the ledger anchors ${prior.tagSha.slice(0, 12)} \u2014 a divergent release is NOT supersedeable; nothing was written (#6638)`
+        );
+      }
+      let repository;
+      try {
+        repository = JSON.parse(await deps.run("gh", ["repo", "view", prior.repo, "--json", "nameWithOwner"]));
+      } catch (e) {
+        throw new Error(`release --supersede-publish: could not prove repository access for ${prior.repo} (${e instanceof Error ? e.message.split("\n")[0] : String(e)}) \u2014 a Release 404 is untrusted without that proof; nothing was written (#6638)`);
+      }
+      if (repository.nameWithOwner !== prior.repo) {
+        throw new Error(`release --supersede-publish: repository access proof named ${String(repository.nameWithOwner || "(missing)")}, not ${prior.repo} \u2014 nothing was written (#6638)`);
+      }
+      let releaseAbsent = false;
+      try {
+        await deps.run("gh", ["release", "view", prior.tag, "--repo", prior.repo, "--json", "tagName"]);
+      } catch (e) {
+        const detail = `${e instanceof Error ? e.message : String(e)} ${String(e.stderr ?? "")}`;
+        releaseAbsent = /release not found|HTTP 404|\(404\)/i.test(detail);
+        if (!releaseAbsent) {
+          throw new Error(`release --supersede-publish: could not prove the GitHub Release for ${prior.tag} absent (${detail.split("\n")[0]}) \u2014 refusing to close on an unproven state; nothing was written (#6638)`);
+        }
+      }
+      if (!releaseAbsent) {
+        throw new Error(`release --supersede-publish: origin no longer has ${prior.tag} but its GitHub Release still exists \u2014 resolve the mixed external state before closing the ledger; nothing was written (#6638)`);
+      }
+      const archivePath = (0, import_node_path21.join)((0, import_node_path21.dirname)(path2), `phases.archive-${prior.tag}.json`);
+      if ((0, import_node_fs21.existsSync)(archivePath)) {
+        throw new Error(`release --supersede-publish: archive already exists at ${archivePath} \u2014 preserving both ledger records; resolve the collision by hand; nothing was written (#6638)`);
+      }
+      (0, import_node_fs21.renameSync)(path2, archivePath);
+      return {
+        command: "release-supersede-publish",
+        repo: prior.repo,
+        tag: prior.tag,
+        tagSha: prior.tagSha,
+        note: `closed the deleted ${prior.tag} publish failure by archiving its ledger after origin and GitHub both proved absent; start a fresh release train to carry the cause fix`
+      };
     }
     const note = `superseded: content-caused publish failure on the immutable promoted ${prior.tag} \u2014 the cause fix rides the next patch train (master-approved closure, #6638)`;
     atomicWriteJson(path2, {
@@ -31877,8 +31922,9 @@ var surfaces_default = {
       },
       enforcementCeilings: [
         "MMI ships no Hermes hooks (#5908): the plugin contributes skills and the /mmi command only; enforcement is host-side.",
-        "Hermes user plugins are opt-in through plugins.enabled; operator consent and host process isolation remain Hermes-owned.",
-        "npm is MMI transport only: MMI-Hub extracts @mutmutco/hermes-plugin into $HERMES_HOME/plugins/mmi and provisions the canonical skills into $HERMES_HOME/skills/mmi/; a fresh Hermes Agent process is required for discovery."
+        "Hermes user plugins are opt-in through plugins.enabled (#6656): after a verified converge MMI-Hub enables its OWN mmi key through Hermes' own `hermes plugins enable mmi --no-allow-tool-override` command, and never reads, reorders, or writes another operator entry. Built-in tool override is explicitly declined, since MMI ships no Hermes hooks. Host process isolation remains Hermes-owned.",
+        "npm is MMI transport only: MMI-Hub extracts @mutmutco/hermes-plugin into $HERMES_HOME/plugins/mmi and provisions the canonical skills into $HERMES_HOME/skills/mmi/; a fresh Hermes Agent process is required for discovery.",
+        "Every Hermes home is covered per home (#6672): a profile under $HERMES_HOME/profiles/<name> is a full sibling home and Hermes scans only the active home's plugins/, so MMI-Hub repeats the same single-home install, skills provisioning, and host-command enable in the resolved home and in each profile home with HERMES_HOME bound to it. No profile is enumerated for any other purpose, and nothing outside those per-home MMI paths is read or written."
       ]
     }
   ],
@@ -45032,7 +45078,8 @@ function mmiDoctorDeps(opts = {}) {
       manifest: hermes?.manifest ?? (installedVersion ? "valid" : snapshot.installRecordPresent ? "invalid" : "missing"),
       guardState: buildPluginGuardDecision(snapshot).state,
       ...installedVersion ? { installedVersion } : {},
-      ...stagedVersion ? { stagedVersion } : {}
+      ...stagedVersion ? { stagedVersion } : {},
+      ...hermes?.receipt ? { receipt: hermes.receipt } : {}
     };
     return surfaceEvidence;
   };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.63",
+  "version": "4.3.65",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",