feat(DEN-1439): import and verify mise on current main

[ORESoftware]

Purpose

Implements the reviewed static mise adapter directly on current main, without carrying the stale history or unrelated platform-test changes from legacy PR #38.

zed-pkg is an independent multi-language package manager and is unrelated to the Zed editor. Here, zed refers only to the zed-pkg CLI.

Shipped Tier-1 surface

• zed env import mise;
• zed env verify mise --frozen;
• explicit or unambiguous project-local mise.toml, .mise.toml, or .tool-versions selection;
• current mise lock naming (mise.toml and .mise.toml both map to mise.lock);
• authoring-mode normalized EnvironmentPlan output;
• fail-closed frozen verification of exact tool-name coverage;
• rejection of unresolved, moving, and nonportable resolved identities through the shared environment contract;
• at least one checksummed platform artifact for every locked tool, with every imported artifact required to carry a cryptographic checksum;
• stable human and JSON verification output;
• parent/global leakage prevention, symlink/root-escape checks, and read-only operation; and
• flags-2-env, README, typed CLI routing, module export, documentation, and real binary integration tests.

The adapter parses committed manager state directly. It does not invoke mise, install tools, evaluate tasks/hooks/templates/plugins, read parent or user-global configuration, or mutate mise/Zed files.

Deliberate claim boundary

This is the certified common read-only subset, not complete mise.lock parity. Broader claims remain blocked until DEN-1481 and DEN-1461 add and certify:

• completeness against every requested settings.lockfile_platforms platform;
• configured-backend versus locked-backend equality;
• proof that a resolved identity satisfies the authored exact/prefix/range requirement;
• multiple option-dependent identities and complete current mise provenance fields; and
• deterministic export and round-trip behavior.

Those limitations are explicit rather than silently normalized away.

Relationship to runtime activation

Runtime zed dev --mise auto|never|required composition is merged through #70 and certified through merged zed-pkg-test/zed-pkg-e2e#25. This PR supplies the complementary read-only import and verification plane. docs/mise-interop.md describes both surfaces and their ownership boundary.

Exact candidate and clean diff

Exact head:

93ff1cce4a0ed1a29a8172e1ba01c1cc12fddd01

The branch semantically incorporates both Windows portability prerequisites present on main:

• fix: keep secure auth file mode warning-free on Windows #92: warning-free cross-platform auth helper;
• fix: gate Unix-only test helpers on Windows #94: Unix-only test helper and shell-script fixture boundaries.

Relative to updated main, the pull request contains exactly eight feature files:

• .cli-flags.toml
• README.md
• docs/mise-interop.md
• src/cli.rs
• src/environment.rs
• src/lib.rs
• src/main.rs
• tests/mise_environment_cli.rs

No temporary materialization or self-mutating workflow remains.

Final validation

Every exact-head zed-cli workflow is green:

• CI and all host/OCI package fixtures;
• polyglot publication and install checks;
• repository hardening;
• formal review/methods and agents policy;
• development-shell and copy-mode OCI contracts;
• durable and manifestless first-install behavior;
• Nix interop, export bundle, and fetch bundle; and
• browser release-plan reporting.

Independent zed-pkg-test/zed-pkg-e2e#7 pins this exact head and is fully green on Ubuntu 24.04, macOS 15, and Windows Server 2025. Each platform passed formatting, environment unit tests, real CLI integration tests, all-target Clippy with warnings denied, the locked release build, and both black-box harnesses. The aggregate gate and all ordinary E2E workflows are green.

Supersedes

Legacy PR #38 is superseded by this clean current-main implementation.

Static E2E: zed-pkg-test/zed-pkg-e2e#7
Merged Windows test prerequisite: #94
Merged Windows auth prerequisite: #92
Merged runtime implementation: #70
Merged runtime E2E: zed-pkg-test/zed-pkg-e2e#25
Linear: DEN-1439, DEN-1420, DEN-1449, DEN-1481, DEN-1461

[linear-code]

DEN-1439