@m8t-stack/cli 0.2.85 → 0.2.86

package/dist/cli.js

@@ -1462,7 +1462,7 @@ var init_enable_hosted_brain = __esm({
 import { Builtins, Cli } from "clipanion";
 
 // src/lib/package-version.ts
-var CLI_VERSION = "0.2.85";
+var CLI_VERSION = "0.2.86";
 
 // src/lib/render-error.ts
 init_errors();
@@ -22043,6 +22043,13 @@ async function buildConvergeDeps(args) {
       const target = infraTargetSha(ctx.manifest, args.tree);
       const infraTable = await openInfraParamsTable({ credential: args.credential, subscriptionId: args.subscriptionId, resourceGroup: args.resourceGroup });
       const stamped = (await readInfraParams(infraTable))?.bicep;
+      if (!stamped) {
+        throw new LocalCliError({
+          code: "PLATFORM_INFRA_PARAMS_MISSING",
+          message: "This install has no stamped system/infra-params row, so the updater cannot converge infra: the row is the only place the real tenantId/clientId/Foundry endpoint survive, and they cannot be reconstructed from scratch.",
+          hint: "Run `m8t platform enable-auto-update` against this deployment (it captures the full bicep parameter set), then let the next tick retry."
+        });
+      }
       args.onProgress?.("subscription-scoped modules skipped: updater is RG-scoped; sub-level changes require a founder-run CLI converge.");
       const gatewayName = args.suffix ? `m8t-gateway-${args.suffix}` : void 0;
       const voiceInternalSecret = gatewayName ? await readLiveVoiceInternalSecret({
@@ -22058,17 +22065,18 @@ async function buildConvergeDeps(args) {
       const opts = {
         suffix: args.suffix,
         assignSubscriptionRoles: false,
-        ...stamped ? {
-          tenantId: stamped.tenantId,
-          clientId: stamped.clientId,
-          foundryEndpoint: stamped.foundryProjectEndpoint,
-          foundryResourceId: stamped.foundryResourceId,
-          acrPullIdentity: stamped.acrPullIdentityResourceId,
-          acrResourceId: stamped.acrResourceId,
-          ...stamped.foundryTracingMode ? { foundryTracingMode: stamped.foundryTracingMode } : {},
-          ...stamped.channelUrl ? { channelUrl: stamped.channelUrl } : {},
-          ...stamped.location ? { location: stamped.location } : {}
-        } : {},
+        // Unconditional: the guard above has already refused an absent row. The
+        // ternary that used to be here read as "these are optional" — which is
+        // how the empty-endpoint death got written in the first place.
+        tenantId: stamped.tenantId,
+        clientId: stamped.clientId,
+        foundryEndpoint: stamped.foundryProjectEndpoint,
+        foundryResourceId: stamped.foundryResourceId,
+        acrPullIdentity: stamped.acrPullIdentityResourceId,
+        acrResourceId: stamped.acrResourceId,
+        ...stamped.foundryTracingMode ? { foundryTracingMode: stamped.foundryTracingMode } : {},
+        ...stamped.channelUrl ? { channelUrl: stamped.channelUrl } : {},
+        ...stamped.location ? { location: stamped.location } : {},
         ...voiceInternalSecret ? { voiceInternalSecret } : {}
       };
       return applyInfraDeploy(a, ctx, target, opts);
@@ -22619,7 +22627,21 @@ async function rollbackOrHold(args, notify, error) {
     return "held";
   }
   if (rollbackTarget) {
-    await reconvergeToPrevious(args, rollbackTarget);
+    try {
+      await reconvergeToPrevious(args, rollbackTarget);
+    } catch (e) {
+      const clip = (s) => s.length > 4e3 ? `${s.slice(0, 4e3)} \u2026[truncated]` : s;
+      const combined = `${clip(error)} \u2014 and the rollback to ${rollbackTarget} failed: ${clip(e.message)} \u2014 the rollback may have partially applied; check the installed stamp's components before retrying.`;
+      await patchApplyRequest(args.client, (r) => ({
+        ...r,
+        status: "held",
+        breaker: "held",
+        result: { appliedVersion: r.result?.appliedVersion ?? null, error: combined },
+        updatedAt: args.now().toISOString()
+      }));
+      await notify({ outcome: "held", target, error: combined });
+      return "held";
+    }
   }
   await patchApplyRequest(args.client, (r) => ({
     ...r,
@@ -22860,6 +22882,9 @@ var PlatformConvergeCommand = class extends M8tCommand {
       channelUrl: ctx.channelUrl,
       repoRoot,
       now: () => /* @__PURE__ */ new Date()
+    }).catch(async (e) => {
+      await failIfStillInFlight(client, now, e.message);
+      throw e;
     });
     log(`converge outcome: ${outcome}.`);
     return outcome === "success" ? 0 : 1;
@@ -30827,7 +30852,7 @@ ${colors.error("\u2717")} The GitHub App on disk is installed on ${colors.field(
 // src/commands/bootstrap/launch.ts
 var DEFAULT_RG = "rg-m8t-stack";
 var DEFAULT_INSTALLER = "ghcr.io/m8t-labs/m8t-installer";
-var DEFAULT_INSTALLER_TAG = "v0.1.62";
+var DEFAULT_INSTALLER_TAG = "v0.1.63";
 var ACI_NAME = "m8t-installer";
 var MI_NAME = "m8t-installer-mi";
 var BootstrapLaunchCommand = class extends M8tCommand {