@m8t-stack/cli 0.2.119 → 0.2.120

package/dist/cli.js

@@ -1454,7 +1454,7 @@ function installFoundryDnsShim() {
 }
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.119";
+var CLI_VERSION = "0.2.120";
 
 // src/lib/render-error.ts
 init_errors();
@@ -19538,6 +19538,10 @@ var DEV_TAG = "v0.0.0-dev";
 var PINNED_INSTALLER = fromBuild('{"ref":"ghcr.io/m8t-labs/m8t-installer:v0.1.84","registry":"ghcr.io/m8t-labs","image":"m8t-installer","tag":"v0.1.84"}', "ghcr.io/m8t-labs/m8t-installer");
 var PINNED_CODING_AGENT = fromBuild('{"ref":"ghcr.io/m8t-labs/m8t-coding-agent:v0.1.5","registry":"ghcr.io/m8t-labs","image":"m8t-coding-agent","tag":"v0.1.5"}', "ghcr.io/m8t-labs/m8t-coding-agent");
 var PINNED_AZURE_EXECUTOR = fromBuild('{"ref":"ghcr.io/m8t-labs/m8t-azure-executor:v0.1.5","registry":"ghcr.io/m8t-labs","image":"m8t-azure-executor","tag":"v0.1.5"}', "ghcr.io/m8t-labs/m8t-azure-executor");
+var PINNED_PLATFORM_VERSION = (() => {
+  const raw = "0.7.7";
+  return /^\d+\.\d+\.\d+$/.test(raw) ? raw : "";
+})();
 
 // src/commands/coder/deploy.ts
 var SIZE_PRESETS = {
@@ -24531,6 +24535,9 @@ init_errors();
 // src/lib/platform-stamp-seed.ts
 var IMAGE_COMPONENTS = ["gateway", "codingAgent", "azureExecutor"];
 var BARE_SEMVER = /^\d+\.\d+\.\d+$/;
+function isBarePlatformVersion(v) {
+  return typeof v === "string" && BARE_SEMVER.test(v);
+}
 function isObj3(v) {
   return typeof v === "object" && v !== null && !Array.isArray(v);
 }
@@ -24578,7 +24585,10 @@ function validateDescriptor(raw) {
   }
   return errors;
 }
-function buildSeedStamp(d, cliVersion, nowIso) {
+function buildSeedStamp(d, cliVersion, nowIso, platformVersionOverride) {
+  if (platformVersionOverride !== void 0 && !isBarePlatformVersion(platformVersionOverride)) {
+    throw new Error(`platformVersionOverride must be a bare X.Y.Z release version, got ${JSON.stringify(platformVersionOverride)}`);
+  }
   const img = (k) => ({
     tag: d.images[k].tag,
     digest: d.images[k].digest,
@@ -24590,7 +24600,7 @@ function buildSeedStamp(d, cliVersion, nowIso) {
   }
   const stamp = {
     schemaVersion: 1,
-    platformVersion: platformTag(d.platformVersion),
+    platformVersion: platformTag(platformVersionOverride ?? d.platformVersion),
     previousPlatformVersion: null,
     updatedAt: nowIso,
     lastResult: "success",
@@ -24610,6 +24620,13 @@ function buildSeedStamp(d, cliVersion, nowIso) {
 
 // src/commands/platform/seed-stamp.ts
 async function seedStamp2(args) {
+  if (args.platformVersion !== void 0 && !isBarePlatformVersion(args.platformVersion)) {
+    throw new LocalCliError({
+      code: "PLATFORM_SEED_VERSION_INVALID",
+      message: `--platform-version must be a bare X.Y.Z release version, got ${JSON.stringify(args.platformVersion)}.`,
+      hint: "Pass the platform release this install is deploying, e.g. --platform-version 0.7.8. Omit the flag to stamp the version baked into the installer image."
+    });
+  }
   const readFileImpl = args.readFileImpl ?? ((p) => readFileSync20(p, "utf8"));
   const readStampImpl = args.readStampImpl ?? readStamp;
   const writeStampImpl = args.writeStampImpl ?? ((stamp2, o) => writeStamp({ ...o, stamp: stamp2 }));
@@ -24641,7 +24658,7 @@ async function seedStamp2(args) {
     args.onProgress?.(`platform stamp already present (${existing.platformVersion}) \u2014 leaving it untouched.`);
     return { outcome: "already-stamped", platformVersion: existing.platformVersion, storageAccount: accountName };
   }
-  const stamp = buildSeedStamp(descriptor, CLI_VERSION, args.nowIso ?? (/* @__PURE__ */ new Date()).toISOString());
+  const stamp = buildSeedStamp(descriptor, CLI_VERSION, args.nowIso ?? (/* @__PURE__ */ new Date()).toISOString(), args.platformVersion);
   await writeStampImpl(stamp, { ...ctx, onProgress: args.onProgress });
   return {
     outcome: descriptor.content ? "seeded" : "seeded-partial",
@@ -24661,6 +24678,7 @@ var PlatformSeedStampCommand = class extends M8tCommand {
     details: "Used by the cloud installer at the end of a from-zero install so the platform records which release it is running. Writes the stamp ONLY IF ABSENT \u2014 it never overwrites a stamp written by the converge engine, so a re-run or a container restart is harmless. Not a founder-facing command: to change what is installed, use 'm8t platform update'."
   });
   descriptor = Option36.String("--descriptor", { description: "Path to install-descriptor.json (baked into the installer image)." });
+  platformVersion = Option36.String("--platform-version", { description: "Bare X.Y.Z release this install is deploying. Overrides the descriptor's baked version, which lags by one declaration under publish->select. Omit to use the baked value." });
   subscription = Option36.String("--subscription");
   resourceGroup = Option36.String("--resource-group");
   miClientId = Option36.String("--mi-client-id", { description: "Authenticate as this user-assigned managed identity instead of the ambient credential." });
@@ -24680,6 +24698,12 @@ var PlatformSeedStampCommand = class extends M8tCommand {
     const credential2 = typeof this.miClientId === "string" && this.miClientId.trim().length > 0 ? new ManagedIdentityCredential4({ clientId: this.miClientId.trim() }) : new DefaultAzureCredential20();
     const result2 = await seedStamp2({
       descriptorPath: need(this.descriptor, "--descriptor"),
+      // Absent flag ⇒ undefined ⇒ the descriptor's baked value. A flag PASSED but
+      // empty is not the same thing and is refused below, deliberately: the
+      // installer omits the flag entirely when it has nothing to say
+      // (installer/lib.sh), so an empty one means a launcher computed a version and
+      // got nothing — which should be loud, not silently absorbed by the fallback.
+      platformVersion: typeof this.platformVersion === "string" ? this.platformVersion.trim() : void 0,
       credential: credential2,
       subscriptionId: need(this.subscription, "--subscription"),
       resourceGroup: need(this.resourceGroup, "--resource-group"),
@@ -32564,6 +32588,7 @@ function buildAciCreateArgs(s) {
     // pin, which can name an installer several versions behind the running one.
     `INSTALLER_IMAGE_REF=${s.image}`
   ];
+  if (s.platformVersion) env.push(`M8T_PLATFORM_VERSION=${s.platformVersion}`);
   if (s.gatewayImageRef) env.push(`GATEWAY_IMAGE_REF=${s.gatewayImageRef}`);
   if (s.foundryTracing) env.push(`FOUNDRY_TRACING=${s.foundryTracing}`);
   if (s.skipBrains) env.push("SKIP_BRAINS=true");
@@ -32997,6 +33022,7 @@ var BootstrapLaunchCommand = class extends M8tCommand {
     } catch (e) {
       out(`warning: could not determine your Azure object id (${e.message}) \u2014 the install will not grant you data-plane access; run 'm8t prereqs --fix' afterwards`);
     }
+    const platformVersion = installerImage === PINNED_INSTALLER.ref ? PINNED_PLATFORM_VERSION : "";
     out("launching the cloud installer (ACI)\u2026");
     await kickInstaller({
       aciName: ACI_NAME,
@@ -33010,6 +33036,7 @@ var BootstrapLaunchCommand = class extends M8tCommand {
       gatewayImageRef,
       foundryTracing,
       githubApp,
+      ...platformVersion ? { platformVersion } : {},
       ...founderObjectId ? { founderObjectId } : {},
       ...skipBrains ? { skipBrains: true } : {},
       // Opt-in only. The signed-in UPN was previously seeded here automatically;