@mutmutco/claude-plugin 4.6.37 → 4.6.38

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mmi",
   "displayName": "MMI",
-  "version": "4.6.37",
+  "version": "4.6.38",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -15691,6 +15691,9 @@ var APP_SUBPROCESS_ROUTED_COMMANDS = /* @__PURE__ */ new Set([
   // #9871: queue enqueue + auto-merge fallback ride ghFilingAppEnv (#9490/#9528; receipt credential app_installation).
   "pr land"
 ]);
+function ineligibleActorNote(commandPath4) {
+  return commandPath4 === "board move" ? "app actor: board move retains the existing process identity; status-write credential is selected separately and reported in its receipt" : `app actor: note, not a failure \u2014 '${commandPath4}' is personal-only (viewer/@me/authorship), so it ran on the personal token despite ${APP_ACTOR_ENV}=app`;
+}
 async function activateAppActor(commandPath4, env, mint, note = (line) => process.stderr.write(`${line}
 `)) {
   activeQuotaScope = void 0;
@@ -15703,7 +15706,7 @@ async function activateAppActor(commandPath4, env, mint, note = (line) => proces
   if (!APP_ELIGIBLE_COMMANDS.has(commandPath4) && !APP_WRITE_COMMANDS.has(commandPath4)) {
     if (requested === "app" && !notedIneligibleCommand && !APP_SUBPROCESS_ROUTED_COMMANDS.has(commandPath4)) {
       notedIneligibleCommand = true;
-      note(`app actor: note, not a failure \u2014 '${commandPath4}' is personal-only (viewer/@me/authorship), so it ran on the personal token despite ${APP_ACTOR_ENV}=app`);
+      note(ineligibleActorNote(commandPath4));
     }
     return "personal";
   }
@@ -22767,23 +22770,8 @@ var BOARD_WRITE_REFUSAL_TYPES = /* @__PURE__ */ new Set(["INSUFFICIENT_SCOPES",
 async function updateItemSingleSelect(client, projectId, itemId, fieldId, optionId) {
   if (process.env.MMI_ACTOR?.trim() === "app") {
     const { writeHubBoardField: writeHubBoardField2 } = await Promise.resolve().then(() => (init_board_write(), board_write_exports));
-    try {
-      await writeHubBoardField2({ projectId, itemId, fieldId, optionId });
-      return { credential: "app_installation" };
-    } catch (error) {
-      const refusal = error;
-      if (refusal?.rateLimited !== true || refusal.status !== 503 && refusal.status !== 429) throw error;
-      try {
-        const identity = await githubKeyringTokenRead();
-        if (identity.state !== "ok") throw error;
-        const owner = createGitHubClient({ token: async () => identity.token });
-        await owner.graphql(UPDATE_ITEM_FIELD_MUTATION, { projectId, itemId, fieldId, optionId });
-      } catch {
-        throw error;
-      }
-      process.stderr.write("board write: Hub App allowance exhausted \u2014 wrote with your own GitHub login (#9053)\n");
-      return { credential: "user" };
-    }
+    await writeHubBoardField2({ projectId, itemId, fieldId, optionId });
+    return { credential: "app_installation" };
   }
   try {
     await client.graphql(UPDATE_ITEM_FIELD_MUTATION, { projectId, itemId, fieldId, optionId });
@@ -22928,19 +22916,20 @@ function renderBoardItem(item) {
   }
   return lines2.join("\n");
 }
+var CACHED_CONFIRM_CLAUSE = " \xB7 items closed/created after the build may still differ \u2014 confirm with --direct";
 function renderCachedBoardSource(report) {
   if (typeof report.stale?.ageMs === "number") {
     const ageSeconds = Math.floor(report.stale.ageMs / 1e3);
-    return `source: cache \xB7 built ${report.builtAt ? `${report.builtAt} (${ageSeconds}s old)` : `${ageSeconds}s ago`} \xB7 stale`;
+    return `source: cache \xB7 built ${report.builtAt ? `${report.builtAt} (${ageSeconds}s old)` : `${ageSeconds}s ago`} \xB7 stale${CACHED_CONFIRM_CLAUSE}`;
   }
   if (report.builtAt) {
     const builtMs = Date.parse(report.builtAt);
     if (Number.isFinite(builtMs)) {
-      return `source: cache \xB7 built ${report.builtAt} (${Math.max(0, Math.floor((Date.now() - builtMs) / 1e3))}s old) \xB7 fresh`;
+      return `source: cache \xB7 built ${report.builtAt} (${Math.max(0, Math.floor((Date.now() - builtMs) / 1e3))}s old) \xB7 fresh${CACHED_CONFIRM_CLAUSE}`;
     }
-    return `source: cache \xB7 built ${report.builtAt} \xB7 fresh`;
+    return `source: cache \xB7 built ${report.builtAt} \xB7 fresh${CACHED_CONFIRM_CLAUSE}`;
   }
-  return "source: cache";
+  return `source: cache${CACHED_CONFIRM_CLAUSE}`;
 }
 function renderBoardReport(report) {
   const lines2 = [`Board \xB7 ${report.project.title} \xB7 @${report.viewer}`, report.source === "cache" ? renderCachedBoardSource(report) : renderBoardSource()];
@@ -25235,6 +25224,20 @@ function upsertManagedSeedBlock(current, desired, begin, end) {
     action: "replace"
   };
 }
+async function headStrictlyBehind(execGit, head, remoteSha, defaultBranch) {
+  try {
+    await execGit(["fetch", "--no-tags", "--quiet", "origin", `refs/heads/${defaultBranch}`]);
+  } catch (e) {
+    return { superseded: false, unknown: `could not fetch origin/${defaultBranch} to check ancestry (${e.message})` };
+  }
+  try {
+    await execGit(["merge-base", "--is-ancestor", head, remoteSha]);
+    return { superseded: true };
+  } catch (e) {
+    if (e.code === 1) return { superseded: false };
+    return { superseded: false, unknown: `could not prove whether this checkout is an ancestor of origin/${defaultBranch} (${e.message}) \u2014 a shallow checkout cannot prove ancestry, so fetch full history` };
+  }
+}
 async function resolveHubSeedSource(execGit, defaultBranch = "development") {
   let status;
   try {
@@ -25262,9 +25265,19 @@ remedy (non-destructive): run this command from a clean dedicated worktree \u201
     return { ok: false, reason: `\`git ls-remote origin refs/heads/${defaultBranch}\` returned nothing \u2014 refusing to read seeds without a known upstream revision` };
   }
   if (head !== remoteSha) {
+    const behind = await headStrictlyBehind(execGit, head, remoteSha, defaultBranch);
+    if (behind.superseded) {
+      return {
+        ok: false,
+        superseded: true,
+        head,
+        remoteSha,
+        reason: `this checkout (${head}) is behind origin/${defaultBranch} (${remoteSha}) \u2014 a newer commit overtook this run, whose own queued run owns the tick; seeding nothing and exiting green`
+      };
+    }
     return {
       ok: false,
-      reason: `this checkout (${head}) is not origin/${defaultBranch} (${remoteSha}) \u2014 fast-forward to origin/${defaultBranch} first; a stale or ahead checkout must not seed the fleet`
+      reason: `this checkout (${head}) is not origin/${defaultBranch} (${remoteSha}) \u2014 fast-forward to origin/${defaultBranch} first; a stale or ahead checkout must not seed the fleet${behind.unknown ? ` (${behind.unknown})` : ""}`
     };
   }
   return { ok: true, sha: head };
@@ -28392,10 +28405,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.6.37",
-    tag: "v4.6.37",
-    commit: "94211a24e48a",
-    npm: "@mutmutco/cli@4.6.37"
+    version: "4.6.38",
+    tag: "v4.6.38",
+    commit: "975581f0f6ce",
+    npm: "@mutmutco/cli@4.6.38"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -28412,14 +28425,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.6.37"
+          v3Target: "v4.6.38"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.6.37 and redeploy the Hub Lambda from tag v4.6.37 (94211a24e48a); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.6.37 (@mutmutco/cli@4.6.37, tag commit 94211a24e48a \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.6.38 and redeploy the Hub Lambda from tag v4.6.38 (975581f0f6ce); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.6.38 (@mutmutco/cli@4.6.38, tag commit 975581f0f6ce \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -46446,7 +46459,7 @@ function refuseNotClaimable(e, json) {
   process.exitCode = 1;
   return true;
 }
-var BOARD_READ_HELP = "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--direct skips the Hub snapshot and uses the existing direct GitHub GraphQL read immediately.\n--allow-partial applies to the paginated path and detail reads.\n\nWhen using Windows PowerShell 5.1, avoid shell redirects: PowerShell 5.1's `> file.json` is Out-File,\nwhich writes UTF-16LE with a BOM, and Node reading it as 'utf8' then fails JSON.parse at position 1\n(#5802). Use --out instead \u2014 the CLI writes the file itself as UTF-8:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n\nThe --json report is an OBJECT \u2014 never an array:\n  {project, viewer, repo, primary, secondary, items, warnings, partial[, source, builtAt, eventCursor, ...]}\n`primary` is this repo and `secondary` the other repos in scope; each is a bucket object\n  {userOwned, claimable, taken, unownedInFlight}\nand each bucket is an array of items. Filter the BUCKET for ownership context:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n  node -e \"const b=require('./.jerv/tmp/board.json');console.log(b.primary.claimable.length)\"\n\n`items` (#9974) is that same flat row array, already on the full report: {ref,number,title,status,assignees,labels,bucket,claim,openPullRequests}\n  node -e \"const b=require('./.jerv/tmp/board.json');for(const i of b.items)console.log(i.number,i.status,i.title)\"\nIt is built from the same flattener as --flat, so `const rows = j.items || j` is now safe on either form.\n\nAdd --flat with --json for that array as the WHOLE output (no project/viewer/warnings envelope):\n(#9595: claim is the parsed mmi-claim evidence object, null when unclaimed; openPullRequests lists the OPEN\n PRs whose closing-issue body links name the item. On the FULL JSON object that list lives at\n `report.pullRequests` \u2014 there is no top-level `openPullRequests`, and #9596 hand-written projections\n that assume one crash on `.filter`.)\n\nNever sniff the envelope \u2014 read `report.items` (or `primary`/`secondary`) by name. `j.items ?? j.rows ?? j`,\n`Object.values(j)` and any generic \"find the list\" wrapper are still guesses: before `items` existed they\nthrew `items is not iterable` before any row was read (#9956), and `j.rows` has never been a key. For a\nnumber|status|claim|title projection across non-Done rows, read --json --flat --out .jerv/tmp/board.json\nand filter that array locally (identical rows to `report.items`):\n  mmi-cli oracle board read --json --flat --out .jerv/tmp/board.json\n\nA cached snapshot read renders `source: cache \xB7 built <timestamp> \xB7 fresh|stale` (#9584) and carries\n`builtAt` under --json, so a same-turn re-read of the same builtAt buys nothing new.\n\nUnder --json, parse stdout ONLY and check the exit code first. A failure still prints a\nhuman-readable reason on stderr, so never pipe 2>&1 into a JSON parser (#9151) \u2014 the merged\ntext is not JSON and hides the real board failure.\n\nA zero-byte or empty .jerv/tmp/*.json means the read FAILED \u2014 `Unexpected end of JSON input` is\nthe symptom of shell-redirected empty stdout, not malformed JSON \u2014 re-run with --out (which writes\nthe file only on success) and check the exit code before parsing.\n\nChanging an existing item's Status is a move, never a hand-written `gh api graphql`\n`updateProjectV2ItemFieldValue` mutation with copied `PVT_`/`PVTI_` node ids and a manual Status\nfield-id lookup:\n  mmi-cli oracle board move <status> <ref>\n";
+var BOARD_READ_HELP = "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--direct skips the Hub snapshot and uses the existing direct GitHub GraphQL read immediately.\n--allow-partial applies to the paginated path and detail reads.\n\nWhen using Windows PowerShell 5.1, avoid shell redirects: PowerShell 5.1's `> file.json` is Out-File,\nwhich writes UTF-16LE with a BOM, and Node reading it as 'utf8' then fails JSON.parse at position 1\n(#5802). Use --out instead \u2014 the CLI writes the file itself as UTF-8:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n\nThe --json report is an OBJECT \u2014 never an array:\n  {project, viewer, repo, primary, secondary, items, warnings, partial[, source, builtAt, eventCursor, ...]}\n`primary` is this repo and `secondary` the other repos in scope; each is a bucket object\n  {userOwned, claimable, taken, unownedInFlight}\nand each bucket is an array of items. Filter the BUCKET for ownership context:\n  mmi-cli oracle board read --json --out .jerv/tmp/board.json\n  node -e \"const b=require('./.jerv/tmp/board.json');console.log(b.primary.claimable.length)\"\n\n`items` (#9974) is that same flat row array, already on the full report: {ref,number,title,status,assignees,labels,bucket,claim,openPullRequests}\n  node -e \"const b=require('./.jerv/tmp/board.json');for(const i of b.items)console.log(i.number,i.status,i.title)\"\nIt is built from the same flattener as --flat, so `const rows = j.items || j` is now safe on either form.\n\nAdd --flat with --json for that array as the WHOLE output (no project/viewer/warnings envelope):\n(#9595: claim is the parsed mmi-claim evidence object, null when unclaimed; openPullRequests lists the OPEN\n PRs whose closing-issue body links name the item. On the FULL JSON object that list lives at\n `report.pullRequests` \u2014 there is no top-level `openPullRequests`, and #9596 hand-written projections\n that assume one crash on `.filter`.)\n\nNever sniff the envelope \u2014 read `report.items` (or `primary`/`secondary`) by name. `j.items ?? j.rows ?? j`,\n`Object.values(j)` and any generic \"find the list\" wrapper are still guesses: before `items` existed they\nthrew `items is not iterable` before any row was read (#9956), and `j.rows` has never been a key. For a\nnumber|status|claim|title projection across non-Done rows, read --json --flat --out .jerv/tmp/board.json\nand filter that array locally (identical rows to `report.items`):\n  mmi-cli oracle board read --json --flat --out .jerv/tmp/board.json\n\nA cached snapshot read renders `source: cache \xB7 built <timestamp> \xB7 fresh|stale` (#9584) and carries\n`builtAt` under --json, so a same-turn re-read of the same builtAt buys nothing new. That age grades the\nCOPY, not its content: the line ends `\xB7 items closed/created after the build may still differ \u2014 confirm\nwith --direct` (#10028), so re-read with --direct before treating a row as still open or still present.\n\nUnder --json, parse stdout ONLY and check the exit code first. A failure still prints a\nhuman-readable reason on stderr, so never pipe 2>&1 into a JSON parser (#9151) \u2014 the merged\ntext is not JSON and hides the real board failure.\n\nA zero-byte or empty .jerv/tmp/*.json means the read FAILED \u2014 `Unexpected end of JSON input` is\nthe symptom of shell-redirected empty stdout, not malformed JSON \u2014 re-run with --out (which writes\nthe file only on success) and check the exit code before parsing.\n\nChanging an existing item's Status is a move, never a hand-written `gh api graphql`\n`updateProjectV2ItemFieldValue` mutation with copied `PVT_`/`PVTI_` node ids and a manual Status\nfield-id lookup:\n  mmi-cli oracle board move <status> <ref>\n";
 function flattenBoardReport(report) {
   const closingByRef = /* @__PURE__ */ new Map();
   for (const pull of report.pullRequests ?? []) {
@@ -51148,6 +51161,13 @@ var declaredProjectAdmins = (meta) => {
   return Array.isArray(list) ? list.filter((entry) => typeof entry === "string") : [];
 };
 var execGitForSeedSource = async (args) => (await execFileP("git", args, { timeout: GIT_TIMEOUT_MS })).stdout;
+function reportSuperseded(prefix, source, json) {
+  const head = source.head.slice(0, 8);
+  const remote = source.remoteSha.slice(0, 8);
+  const summary = `${prefix}: superseded \u2014 this checkout (${head}) is behind origin/development (${remote}); a newer run owns this tick, nothing seeded`;
+  if (json) console.log(JSON.stringify({ status: "superseded", checkoutSha: source.head, remoteSha: source.remoteSha, summary }, null, 2));
+  else console.log(summary);
+}
 async function gateRenderDiff(current, rendered) {
   const dir = (0, import_node_fs40.mkdtempSync)((0, import_node_path37.join)((0, import_node_os21.tmpdir)(), "mmi-gate-diff-"));
   const before = (0, import_node_path37.join)(dir, "committed-gate.yml");
@@ -51235,7 +51255,10 @@ async function propagationScope(classes, what) {
 }
 async function propagatePins(apply, json) {
   const source = await resolveHubSeedSource(execGitForSeedSource);
-  if (apply && !source.ok) return fail(`bootstrap propagate --pins --apply: ${source.reason}`);
+  if (apply && !source.ok) {
+    if (source.superseded) return reportSuperseded("bootstrap propagate --pins --apply", source, json);
+    return fail(`bootstrap propagate --pins --apply: ${source.reason}`);
+  }
   const { classOf, inClassRepos, canarySlug, sourcePilot } = await propagationScope(null, "hub action pins");
   const gh2 = async (args) => execFileP("gh", args, { timeout: 2e4 });
   const repos = [];
@@ -52360,7 +52383,10 @@ LIVE apply to ${repo}:
     const manifestPath = "skills/bootstrap/seeds/manifest.json";
     if (!(0, import_node_fs40.existsSync)(manifestPath)) return fail(`bootstrap propagate: ${manifestPath} not found; run from the MMI-Hub repo root \u2014 the Hub's copies ARE the desired state this tick propagates`);
     const seedSource = await resolveHubSeedSource(execGitForSeedSource);
-    if (!seedSource.ok) return fail(`bootstrap propagate: ${seedSource.reason}`);
+    if (!seedSource.ok) {
+      if (seedSource.superseded) return reportSuperseded("bootstrap propagate", seedSource, o.json);
+      return fail(`bootstrap propagate: ${seedSource.reason}`);
+    }
     const manifest = loadBootstrapSeeds((0, import_node_fs40.readFileSync)(manifestPath, "utf8"));
     const propagatable = manifest.seeds.filter(isPropagatableSeed);
     if (!o.target) {
@@ -53359,7 +53385,7 @@ async function stageStatus(member, stage, deps) {
   if (pin) {
     served = pin;
     source = "registry-pin";
-  } else if (stage === "dev" || !member.bundles[stage]) {
+  } else {
     try {
       const status = await deps.deploy(member.repo, stage);
       deployStatus = status;
@@ -53505,10 +53531,12 @@ async function newestGreen(deps, repo) {
 async function readSuiteDev(deps) {
   const report = await deps.status();
   return Promise.all(report.members.map(async (m) => {
-    const st = m.stages.find((s) => s.stage === "dev");
+    const track = deps.releaseTrack ? await deps.releaseTrack(m.repo).catch(() => void 0) : void 0;
+    const stage = track === "single" ? "main" : "dev";
+    const st = m.stages.find((s) => s.stage === stage);
     const row = { repo: m.repo, head: st.head, served: st.served };
-    if (st.source === "n/a") return { ...row, state: "converged", note: "no dev stage" };
-    if (st.lag === false) return { ...row, state: "converged", note: "dev serves the development head" };
+    if (st.source === "n/a") return { ...row, state: "converged", note: `no ${stage} stage` };
+    if (st.lag === false) return { ...row, state: "converged", note: `${stage} serves the development head` };
     let green;
     try {
       green = await newestGreen(deps, m.repo);
@@ -53516,10 +53544,10 @@ async function readSuiteDev(deps) {
       return { ...row, state: "unknown", note: `checks unreadable (${e.message})` };
     }
     const last = st.deployStatus?.lastRun;
-    if (st.served === "unknown") return { ...row, green, state: "unknown", note: `dev version unproven (health probe failed or no deploy record)${last?.url ? `; last deploy ${last.conclusion ?? last.status}: ${last.url}` : ""}` };
-    if (same(st.served, green)) return { ...row, green, state: "converged", note: `dev serves the newest green SHA; head ${short2(st.head)} is not green yet` };
+    if (st.served === "unknown") return { ...row, green, state: "unknown", note: `${stage} version unproven (health probe failed or no deploy record)${last?.url ? `; last deploy ${last.conclusion ?? last.status}: ${last.url}` : ""}` };
+    if (same(st.served, green)) return { ...row, green, state: "converged", note: `${stage} serves the newest green SHA; head ${short2(st.head)} is not green yet` };
     if (!green) return { ...row, state: "blocked", note: `no green SHA in the last ${WALK} development commits` };
-    if (last?.conclusion === "failure") return { ...row, green, state: "blocked", note: `last dev deploy failed: ${last.url ?? "no run url"}` };
+    if (last?.conclusion === "failure") return { ...row, green, state: "blocked", note: `last ${stage} deploy failed: ${last.url ?? "no run url"}` };
     return { ...row, green, state: "lagging", note: `newest green ${short2(green)} not deployed yet; the dev auto-deploy sweep (every 15 min) picks it up` };
   }));
 }
@@ -58738,6 +58766,11 @@ ${lines2}`);
       if (deps.attach) {
         const attached = await deps.attach(row.number, rowRepo(spec), rowPriority);
         row.onBoard = attached.onBoard;
+        if (attached.prioritySet === false) {
+          row.status = "partial";
+          row.prioritySet = false;
+          row.priorityError = attached.priorityError;
+        }
         if (attached.projectItemId) row.projectItemId = attached.projectItemId;
         if (attached.boardAttach) {
           row.boardAttach = attached.boardAttach;
@@ -63536,8 +63569,10 @@ async function attachToProject(issueNumber, repo, priority) {
           await setBoardItemPriority(defaultGitHubClient(), cfg, projectItemId2, priority);
         } catch (e) {
           const err = e;
-          process.stderr.write(`warning: issue #${issueNumber} board Priority not set: ${(err.stderr || err.message || String(e)).trim()}
+          const priorityError = (err.stderr || err.message || String(e)).trim();
+          process.stderr.write(`warning: issue #${issueNumber} board Priority not set: ${priorityError}; issue and board attachment already exist; do not recreate the issue
 `);
+          return { projectItemId: projectItemId2, onBoard: true, credential: "app_installation", prioritySet: false, priorityError };
         }
       }
       return { projectItemId: projectItemId2, onBoard: true, credential: "app_installation" };
@@ -63887,12 +63922,13 @@ function registerCollaborationCommands(program3) {
 `);
     const linkRecovery = parentRecoveryRef !== void 0 && !parent ? `mmi-cli oracle issue link-child ${parentRecoveryRef} ${childRef}` : void 0;
     console.log(JSON.stringify({
-      status: boardRecovery || linkRecovery ? "partial" : "created",
+      status: boardRecovery || linkRecovery || attached.prioritySet === false ? "partial" : "created",
       ...created,
       label: issueType,
       priority,
       projectItemId,
       onBoard,
+      ...attached.prioritySet === false ? { prioritySet: false, priorityError: attached.priorityError } : {},
       ...attachCredential ? { credential: attachCredential } : {},
       // #5489: partial receipt when the GitHub issue landed but Project v2 attach hit GraphQL quota.
       ...!onBoard ? {
@@ -64279,8 +64315,9 @@ ${list}`);
       }
     }
     const created = requireGhCreateOk(await ghCreate(args), "skill-lesson");
-    const { projectItemId, onBoard } = await attachToProject(created.number, targetRepo2, priority);
-    console.log(JSON.stringify({ ...created, projectItemId, onBoard }));
+    const attached = await attachToProject(created.number, targetRepo2, priority);
+    const { projectItemId, onBoard } = attached;
+    console.log(JSON.stringify({ ...created, projectItemId, onBoard, ...attached.prioritySet === false ? { status: "partial", prioritySet: false, priorityError: attached.priorityError } : {} }));
   });
   const pr = program3.command("pr").description("pull requests \u2014 reliable create with structured output");
   withExamples(pr.command("create").description("create a PR and print {number,url} JSON").option("--title <title>", "PR title").option("--title-file <path|->", "read the PR title from a UTF-8 file, or from stdin with -").option("--body <body>", "PR body (markdown)").option("--body-file <path|->", "read PR body from a UTF-8 file, or from stdin with -").option("--base <branch>", "base branch (defaults to the repo default)").option("--head <branch>", "head branch (defaults to the current branch)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--draft", "open the PR in draft state (#2667)").option("--no-zeroci", "compatibility option; pr create does not mint receipts").option("--json", "machine-readable output (default; accepted for parity)").action(async (o) => {
@@ -67123,6 +67160,8 @@ function registerSuiteCommands(program3) {
     const status = suiteStatusDeps(github, registry2);
     const deps = {
       status: () => readSuiteStatus(status),
+      // #10020: a single-track member's one live stage is `main`; judge that row instead of the dev one.
+      releaseTrack: status.releaseTrack,
       commits: async (repo, limit) => (await github.rest("GET", `repos/${repo}/commits?sha=development&per_page=${limit}`) ?? []).map((c) => c.sha),
       checkRuns: async (repo, sha) => (await github.rest("GET", `repos/${repo}/commits/${sha}/check-runs?per_page=100`))?.check_runs ?? [],
       requiredChecks: async (repo) => {

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.6.37",
+  "version": "4.6.38",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/claude-plugin",
-  "version": "4.6.37",
+  "version": "4.6.38",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",