chore(cli): promote checked provider handoff repair to main

[adrianwebb]

Outcome

Promote checked CLI provider-handoff repair from staging to main without changing source bytes or commit history.

Work authority

• Work item / Issue: Current cli backlog: retained requirements after issue consolidation #274; actual provider maintenance failure Agent #368 / SDK #376.

• Proposal / decision: Direct human approval to repair the handoff and start a separate fresh exploratory SDK run after prerequisites; no fabricated governance record.

• Assignment / checkpoint: Checked PR290 ordinary staging merge fef3f37.

• Actor: Codex coding agent.

• Human authority: Adrian Webb; direct capacity-provider and Agent execution acceptance/branch cleanup request.

• Agent / capacity provider: Codex under human authority; no provider execution for this promotion.

• Exact base ref: main ee4541b

• Exact head ref: staging fef3f37

• Agent-authored under human authority

Plan

Retain all four ordinary test-first/fix commits, verify exact staging/main refs, run required PR Actions, merge ordinarily and delete only temporary codex/provider-handoff274 after verified main ancestry. No local branch/worktree, tag or deployment.

Changes and commits

PR290 test-first8bff508, owning drain fixture6cbc1ac, product7c0f798, original inventory/fixture cce850d, ordinary staging mergefef3f375e241ae5946d89b88ab87bfc5b967347f. Exact source treeffbb93c7121403365654836fd5199cfffc86be79 unchanged. Original CLI managed rebuild/start now delegates replacement once to the owning manager without transient released-code stop; explicit use=released retained. Three unit/native caller-build verifier/scene mappings retained, all older negatives preserved.

Verification

PR290 Verify37870798358/job113628189580 PASS8m11; exact testmerge56cfc519aab9fb4a30a35e12717fe396d5e4412b tree equals source. Independently audited fresh363/363 full prerequisites FIRST then162 original component steps, zero fail/skip/todo/blocked. Artifact11590911326 ZIPc1d2718ff29ebacd1239b0e3c7aa39d50d2b9639ff91afa029c0e86fc69523f7; report0fc3629c2736008e783cb6348340fc7f95aa675f47b5901f6518ef072db303bc; auditorbf0f8fe7c99eca4c381192f423f6ae1bae2485137fe2bfbb1950667417197101. Source strict/layout PASS; local focused32/32/full363/363 PASS. Every test-first/setup/environment/fixture failure retained in Issue274/PR290, not relabeled. This promotion requires its own fresh required Actions. Separate workflow_dispatch runs fresh staging prerequisites for new SDK invocation, not reuse of PR receipts.

Risk and rollback

No source change in promotion. Reject merge if exact refs/required checks drift or fail. Ordinary revert through checked staging PR restores source lineage if required; never force-reset or start old released provider while unresolved custody exists. Old lost claim is not reconstructed, accounting/holds untouched, no inferred usage. Human authorized separate fresh exploratory attempt; old attempt remains failed/unverified.

Completion summary

Staging repair complete and primary clean. Main promotion and temporary remote branch cleanup pending required checks. Component manager replies are controlled, not physical claim-restoration proof. SDK golden remains unpassed,179 unbound criteria retained. No new workday/model yet.

Submission checklist

• The change is bounded to the stated work item and target repository.
• Exact base and head refs are recorded and the branch is ready for review.
• Verification and compatibility evidence are recorded above.
• No plaintext secrets, credentials, machine state, or unrelated residue are included.
• Plan, status, commits, and completion summary form a complete durable record.
• Rollback or recovery steps are documented and executable.

Fresh main-promotion verification audited

Verify37871614205/job113630774189 PASS on test merge2671edc075c2bbf23a92a22d8d569b017eebfe22/source stagingfef3f375e241ae5946d89b88ab87bfc5b967347f exact same tree. Complete363/363 first, all162 original component steps; artifact11590229351 ZIPb90060f7170ff93d8780d989460d3e52c4b0a82cdd2533124f6432514c025b99. Every bound identity/raw source hash/check/exit and original whole prerequisite command audited. Staging verify37871569068 also PASS; original validation PASS. No tags/host activation. Separate fresh SDK invocation37871569979 independently passed363+162 on heldfef3; not prior delivery evidence reused. Deployment fresh prerequisite remains failed and blocks SDK.