tools: dist export no longer cuts the dist export record out of the shipped tools/CONTRACT.md (#121)

Files changed:
- CHANGES.md
- VERSION
- tools/CONTRACT.md
- tools/chemenu/commands/dist_cmd.py
- tools/chemenu/tests/test_docs_verify.py

tools/CONTRACT.md

@@ -1469,7 +1469,7 @@ Write a contentless, distributable copy of this repo's machinery.
 
 **NOTES**
 
-Write a contentless, distributable copy of this repo's machinery into an empty `<target>` directory: `AGENTS.md`/`README.md`/`EVALS.md` with any `<!-- dist:strip-start -->...<!-- dist:strip-end -->` region removed, `instructions/` (minus `instructions/dev/`), `types/` (the `root: kb` page type-specs and their schemas re-keyed as `.template`, the stack's own verbatim), `docs/` verbatim, `tools/` (no venv/caches), the `.github/hooks/`+`.vibe/` session-tracing config plus `.claude/settings.json`, `kb/CONTRACT.md` (no pages, no areas), the two flat anchors `raw/.gitkeep` and `incoming/.gitkeep` (both roots are flat now that a file's location under `raw/` is a date shard rather than a hand-picked type, so a fresh export no longer creates any type subdirectories under either root; `incoming/.gitkeep` is trackable and survives becoming a git repository, so a plain clone gets the directory without any bootstrap step re-creating it), `VERSION`, `USER.md.template`/`SOUL.md.template` plus `kb/CONVENTIONS.md.template` and each collection's contract re-keyed as `kb/<name>/COLLECTION.md.template` (the templates ship; the filled `USER.md`/`SOUL.md`/`kb/CONVENTIONS.md`/`kb/<name>/COLLECTION.md`/`types/<page-type>.md` never do - all of them bind their instance and none are the stack's to decide, and `find_leaks` refuses a plan carrying one), and a generated `.wikitool-release.json` stamp (version, export date, origin, and a sha256 per exported file - the base a later upgrade would compare against). The four origin options only fill stamp fields: `export` never calls git and cannot discover them. Refuses a non-empty target, and a tree with no `VERSION`. See `instructions/setup-instance.md`. One-way: there is no command that reconstructs a distributed instance into a dev instance - work on the stack in the origin repo (or a new dev instance exported from it) instead
+Write a contentless, distributable copy of this repo's machinery into an empty `<target>` directory: `AGENTS.md`/`README.md`/`EVALS.md` with any `dist:strip-start`...`dist:strip-end` marker region removed, `instructions/` (minus `instructions/dev/`), `types/` (the `root: kb` page type-specs and their schemas re-keyed as `.template`, the stack's own verbatim), `docs/` verbatim, `tools/` (no venv/caches), the `.github/hooks/`+`.vibe/` session-tracing config plus `.claude/settings.json`, `kb/CONTRACT.md` (no pages, no areas), the two flat anchors `raw/.gitkeep` and `incoming/.gitkeep` (both roots are flat now that a file's location under `raw/` is a date shard rather than a hand-picked type, so a fresh export no longer creates any type subdirectories under either root; `incoming/.gitkeep` is trackable and survives becoming a git repository, so a plain clone gets the directory without any bootstrap step re-creating it), `VERSION`, `USER.md.template`/`SOUL.md.template` plus `kb/CONVENTIONS.md.template` and each collection's contract re-keyed as `kb/<name>/COLLECTION.md.template` (the templates ship; the filled `USER.md`/`SOUL.md`/`kb/CONVENTIONS.md`/`kb/<name>/COLLECTION.md`/`types/<page-type>.md` never do - all of them bind their instance and none are the stack's to decide, and `find_leaks` refuses a plan carrying one), and a generated `.wikitool-release.json` stamp (version, export date, origin, and a sha256 per exported file - the base a later upgrade would compare against). The four origin options only fill stamp fields: `export` never calls git and cannot discover them. Refuses a non-empty target, and a tree with no `VERSION`. See `instructions/setup-instance.md`. One-way: there is no command that reconstructs a distributed instance into a dev instance - work on the stack in the origin repo (or a new dev instance exported from it) instead
 
 #### `dist upgrade`
 

tools/chemenu/commands/dist_cmd.py

@@ -585,7 +585,7 @@ def _write_plan(target: Path, plan: dict[str, PlannedFile]) -> None:
     ),
     notes="Write a contentless, distributable copy of this repo's machinery into an empty "
     "`<target>` directory: `AGENTS.md`/`README.md`/`EVALS.md` with any "
-    "`<!-- dist:strip-start -->...<!-- dist:strip-end -->` region removed, `instructions/` "
+    "`dist:strip-start`...`dist:strip-end` marker region removed, `instructions/` "
     "(minus `instructions/dev/`), `types/` (the `root: kb` page type-specs and their schemas "
     "re-keyed as `.template`, the stack's own verbatim), `docs/` verbatim, `tools/` (no "
     "venv/caches), the `.github/hooks/`+`.vibe/` session-tracing config plus "

tools/chemenu/tests/test_docs_verify.py

@@ -107,6 +107,18 @@ def test_the_real_commands_region_is_current():
     assert docs_verify.check_commands_region() == []
 
 
+def test_the_commands_region_survives_dist_export_unchanged():
+    """`dist export` removes `dist:strip` marker spans from shipped files, so a
+    record whose prose quotes the literal marker pair gets cut in the
+    exported `tools/CONTRACT.md` - and the fresh instance's own `docs verify`
+    then reports its generated region stale. That is what failed CI's
+    fresh-instance step the first time this region shipped; this pins it
+    without needing the full replay."""
+    plan = dist_cmd.build_plan()
+    shipped = plan["tools/CONTRACT.md"].content
+    assert shipped == (config.ROOT / "tools" / "CONTRACT.md").read_text(encoding="utf-8")
+
+
 def test_every_registered_commands_flags_are_documented():
     """Forward direction against the real tree and the real Click app: every
     non-hidden flag of every command must appear in its cli_contract