@mutmutco/cli 2.27.0 → 2.28.1

package/README.md

@@ -44,6 +44,7 @@ mmi-cli doctor --json
 - `mmi-cli oauth plan|verify` prints a repo's canonical Google OAuth URI set when the registry declares an `oauth` block and verifies the client is port-agnostic.
 - `mmi-cli issue create` creates typed, prioritized GitHub issues (priority sets the board field, not a label) and queues related-issue discovery. `--parent <ref>` files the new issue as a native GitHub sub-issue of a parent (works cross-repo); `mmi-cli issue link-child <parent> <child>` links two existing issues the same way.
 - `mmi-cli report` files a friction report on the Hub board with your GitHub identity, deduping against the open `report`-labeled issues (a confident duplicate becomes a +1 comment, not a new issue). No repo-local `.env`, no API key, no copied report script.
+- `mmi-cli skill-lesson --skill <name>` files a **skill-lesson** on the Hub board when a skill's own instructions misfire — the cross-skill generalization of grind's Retro. GitHub identity, its own `skill-lesson` label + dedup pool (a confident duplicate becomes a +1 comment), and a footer pinning the source checkout + plugin SHA. Advisory: the fix lands via a reviewed PR to the skill in MMI-Hub, never a live edit.
 - `mmi-cli pr create` and `pr merge` create PRs and land them with branch/worktree cleanup; `mmi-cli gc` dry-runs cleanup of merged/closed PR branches + stale tracking refs.
 - `mmi-cli board read|claim|show|move|done|backfill-priority` reads and moves GitHub Project work.
 - `mmi-cli tenant control <owner/repo> <stage> <status|start|stop|restart>` runs bounded dev/rc box control for project-admins through the Hub API; main remains master-only.

package/dist/main.cjs

@@ -5038,6 +5038,38 @@ function buildDupComment(duplicateNumber, body, sourceRepo) {
 ${buildReportBody(body, sourceRepo)}`;
 }
 
+// src/skill-lesson.ts
+var SKILL_LESSON_LABEL = "skill-lesson";
+var SKILL_NAMES = ["bootstrap", "grind", "hotfix", "mmi", "rcand", "release", "secrets", "stage"];
+function assertSkillName(name) {
+  const match = SKILL_NAMES.find((skill) => skill === name);
+  if (!match) throw new Error(`unknown skill "${name}" \u2014 expected one of: ${SKILL_NAMES.join(", ")}`);
+  return match;
+}
+function buildSkillLessonTitle(skill, what) {
+  return `skill-lesson(${skill}): ${what.trim()}`;
+}
+function buildSkillLessonBody(body, sourceRepo, pluginSha) {
+  const where = sourceRepo ?? "an unidentified checkout";
+  const at = pluginSha ? ` @ ${pluginSha}` : "";
+  return `${body.trimEnd()}
+
+---
+Filed via \`mmi-cli skill-lesson\` from ${where}${at}.`;
+}
+function skillLessonDupMarker(duplicateNumber) {
+  return `<!-- mmi-skill-lesson-dup:${duplicateNumber} -->`;
+}
+function buildSkillLessonDupComment(duplicateNumber, body, sourceRepo, pluginSha) {
+  return `${skillLessonDupMarker(duplicateNumber)}
++1 \u2014 same lesson surfaced again:
+
+${buildSkillLessonBody(body, sourceRepo, pluginSha)}`;
+}
+function findDuplicateLesson(source, openLessons) {
+  return findDuplicateReport(source, openLessons);
+}
+
 // src/board.ts
 var import_node_child_process5 = require("node:child_process");
 var import_node_util5 = require("node:util");
@@ -6711,6 +6743,28 @@ function buildMmiPluginCacheCleanupCheck(input) {
     }))
   };
 }
+var NESTED_PLUGIN_TREE_LABEL = "self-nested MMI plugin cache tree (#1126)";
+var NESTED_PLUGIN_TREE_FIX = "run `mmi-cli doctor` to surface the MAX_PATH-safe robocopy cleanup for a self-nested MMI plugin cache tree (#1126)";
+function nestedPluginTreeCleanupCommand(paths, isWindows) {
+  if (paths.length === 0) return "";
+  if (isWindows) {
+    const clears = paths.map((p) => `robocopy $e "${p}" /MIR /NJH /NJS /NFL /NDL | Out-Null; Remove-Item -LiteralPath "${p}" -Recurse -Force`).join("; ");
+    return `$e=Join-Path $env:TEMP 'mmi-empty'; New-Item -ItemType Directory -Force $e | Out-Null; ${clears}; Remove-Item -LiteralPath $e -Recurse -Force; ${CLAUDE_PLUGIN_RECOVERY}`;
+  }
+  return `${paths.map((p) => `rm -rf "${p}"`).join(" && ")} && ${CLAUDE_PLUGIN_RECOVERY}`;
+}
+function buildNestedPluginTreeCheck(input) {
+  const base = { ok: true, label: NESTED_PLUGIN_TREE_LABEL, fix: NESTED_PLUGIN_TREE_FIX };
+  if (!input.isOrgRepo) return base;
+  const nested = input.entries.filter((e) => e.nested).map((e) => ({ surface: e.surface, path: e.path }));
+  if (nested.length === 0) return base;
+  return {
+    ...base,
+    ok: false,
+    nested,
+    fix: `${nested.length} self-nested MMI plugin cache tree(s) (#1126) exceed MAX_PATH and can't self-clean \u2014 run: ${nestedPluginTreeCleanupCommand(nested.map((n) => n.path), input.isWindows)}`
+  };
+}
 function detectSurface(env) {
   const has = (k) => Boolean(env[k]?.trim());
   if (env.MMI_AGENT_SURFACE === "codex" || has("CODEX_HOME") || (env.CLAUDE_PLUGIN_ROOT ?? "").includes(".codex")) {
@@ -6739,8 +6793,18 @@ function reloadAction(surface) {
       return "restart Claude Code (or run /reload-plugins)";
   }
 }
+var CLAUDE_PLUGIN_RECOVERY = "claude plugin marketplace remove mmi && claude plugin marketplace add mutmutco/MMI-Hub && claude plugin install mmi@mmi";
+var CLAUDE_PLUGIN_HEAL_STEPS = [
+  { args: ["plugin", "marketplace", "remove", "mmi"], gated: false },
+  { args: ["plugin", "marketplace", "add", "mutmutco/MMI-Hub"], gated: true },
+  { args: ["plugin", "install", "mmi@mmi"], gated: true },
+  { args: ["plugin", "enable", "mmi@mmi"], gated: false }
+];
+function healStepAborts(step, ok) {
+  return !ok && step.gated;
+}
 function pluginRecoveryFix(surface) {
-  const claude = "claude plugin marketplace update mmi && claude plugin update mmi@mmi && claude plugin enable mmi@mmi";
+  const claude = CLAUDE_PLUGIN_RECOVERY;
   switch (surface) {
     case "claude-vscode":
     case "claude-cli":
@@ -6755,7 +6819,7 @@ function pluginRecoveryFix(surface) {
   }
 }
 var PLUGIN_UPDATE_RECIPES = {
-  claude: ["claude plugin update mmi@mmi"],
+  claude: [CLAUDE_PLUGIN_RECOVERY],
   codex: ["codex plugin marketplace upgrade mmi", "codex plugin list   # verify mmi@mmi shows the new version"],
   cli: ["npm install -g @mutmutco/cli@latest"]
 };
@@ -6810,7 +6874,7 @@ function isSemverVersion(v) {
   return typeof v === "string" && /^v?\d+\.\d+\.\d+/.test(v.trim());
 }
 function staleRecordCommand(surface) {
-  return surface === "codex" ? "codex plugin marketplace upgrade mmi && codex plugin add mmi@mmi" : "claude plugin marketplace update mmi && claude plugin update mmi@mmi";
+  return surface === "codex" ? "codex plugin marketplace upgrade mmi && codex plugin add mmi@mmi" : CLAUDE_PLUGIN_RECOVERY;
 }
 function staleSurfacesFix(stale, releasedVersion) {
   const parts = stale.map((s) => {
@@ -7533,6 +7597,51 @@ async function discoverRequiredCheckContexts(deps, ctx, branch) {
   }
   return [...contexts];
 }
+async function findOpenAlignmentPr(deps, ctx) {
+  const out = clean(await deps.run("gh", ["pr", "list", "--repo", ctx.repo, "--base", "development", "--head", "main", "--state", "open", "--json", "number,url"]));
+  if (!out) return void 0;
+  const rows = JSON.parse(out);
+  const row = rows.find((r) => typeof r.number === "number" && typeof r.url === "string");
+  return row ? { number: row.number, url: row.url } : void 0;
+}
+function parsePrNumber(url) {
+  const n = Number.parseInt(url.split("/").pop() ?? "", 10);
+  return Number.isFinite(n) ? n : void 0;
+}
+async function rollDevelopmentForward(deps, ctx, tag) {
+  const required = await discoverRequiredCheckContexts(deps, ctx, "development");
+  if (required.length === 0) {
+    await deps.run("git", ["checkout", "development"]);
+    await deps.run("git", ["pull", "--ff-only", "origin", "development"]);
+    await deps.run("git", ["merge", "main", "--no-edit"]);
+    await deps.run("git", ["push", "origin", "development"]);
+    return { status: "pushed", note: "development rolled forward to the released main (development has no required checks)" };
+  }
+  const existing = await findOpenAlignmentPr(deps, ctx);
+  if (existing) {
+    return {
+      status: "pr-pending",
+      prNumber: existing.number,
+      prUrl: existing.url,
+      note: `alignment PR already open: ${existing.url} \u2014 land it with \`gh pr merge ${existing.number} --merge\``
+    };
+  }
+  const ahead = clean(await deps.run("git", ["rev-list", "--count", "origin/development..main"]));
+  if (ahead === "0") {
+    return { status: "aligned", note: "development already contains the released main; nothing to roll forward" };
+  }
+  const body = `Carries the ${tag} release (including the version fold) from \`main\` back to \`development\`.
+
+\`development\` requires status checks, so the release train opens this alignment PR instead of a direct push of the un-checked merge commit (#1143). Land it with a **true merge** (\`gh pr merge --merge\`, not squash) so the merge parentage survives and the misalignment guard stays satisfied.`;
+  const url = clean(await deps.run("gh", ["pr", "create", "--repo", ctx.repo, "--base", "development", "--head", "main", "--title", `chore(release): align development to ${tag}`, "--body", body]));
+  const number = parsePrNumber(url);
+  return {
+    status: "pr-pending",
+    prNumber: number,
+    prUrl: url || void 0,
+    note: `development requires checks (${required.join(", ")}); opened alignment PR ${url || "(url unavailable)"} \u2014 land it with \`gh pr merge ${number ?? "<number>"} --merge\``
+  };
+}
 function resolveContextState(context, checkRuns, statuses) {
   let sawFailure = false;
   for (const r of checkRuns) {
@@ -7791,10 +7900,7 @@ async function runTrainApply(command, deps, options = {}) {
     const announceNote2 = deps.announce ? (await deps.announce({ repo: ctx.repo, tag: tag2, summaryFile: options.announceSummaryFile })).note : void 0;
     const autoRunSince2 = (deps.now ?? Date.now)();
     const d2 = await dispatchDeploy(deps, ctx, "main", "main", deployModel2, watch, autoRunSince2, releaseSha2, "report");
-    await deps.run("git", ["checkout", "development"]);
-    await deps.run("git", ["pull", "--ff-only", "origin", "development"]);
-    await deps.run("git", ["merge", "main", "--no-edit"]);
-    await deps.run("git", ["push", "origin", "development"]);
+    const devRollForward2 = await rollDevelopmentForward(deps, ctx, tag2);
     return {
       ...ctx,
       command,
@@ -7812,6 +7918,7 @@ async function runTrainApply(command, deps, options = {}) {
       deployStatus: d2.deployStatus,
       rcRetirement: "not-applicable",
       rcRetirementNote: "direct-track release skips rc; no rc runtime to retire",
+      devRollForward: devRollForward2,
       announceNote: announceNote2,
       // #1062: --dev on a direct-track repo is a friendly no-op — it already releases from development.
       devNote: options.dev ? "--dev is a no-op on a direct-track repo \u2014 it already releases development -> main" : void 0,
@@ -7863,10 +7970,7 @@ async function runTrainApply(command, deps, options = {}) {
     const autoRunSince2 = (deps.now ?? Date.now)();
     const d2 = await dispatchDeploy(deps, ctx, "main", "main", deployModel2, watch, autoRunSince2, releaseSha2, "report");
     const retirement2 = await retireRcRuntime(deps, ctx, deployModel2, d2.deployStatus, rcShaAtRelease);
-    await deps.run("git", ["checkout", "development"]);
-    await deps.run("git", ["pull", "--ff-only", "origin", "development"]);
-    await deps.run("git", ["merge", "main", "--no-edit"]);
-    await deps.run("git", ["push", "origin", "development"]);
+    const devRollForward2 = await rollDevelopmentForward(deps, ctx, tag2);
     let rcAlignment2;
     try {
       await deps.run("git", ["push", "origin", "main:rc"]);
@@ -7894,6 +7998,7 @@ async function runTrainApply(command, deps, options = {}) {
       rcRetirementNote: retirement2.note,
       rcRetirementCategory: retirement2.category,
       rcAlignment: rcAlignment2,
+      devRollForward: devRollForward2,
       announceNote: announceNote2,
       devNote: "released development -> main (--dev), skipping the rc candidate",
       release: { tag: tag2, url: releaseUrl2, targetSha: releaseSha2 },
@@ -7943,10 +8048,7 @@ async function runTrainApply(command, deps, options = {}) {
   const announceNote = deps.announce ? (await deps.announce({ repo: ctx.repo, tag, summaryFile: options.announceSummaryFile })).note : void 0;
   const d = await dispatchDeploy(deps, ctx, "main", "main", deployModel, watch, autoRunSince, releaseSha, "report");
   const retirement = await retireRcRuntime(deps, ctx, deployModel, d.deployStatus, releasedRcSha);
-  await deps.run("git", ["checkout", "development"]);
-  await deps.run("git", ["pull", "--ff-only", "origin", "development"]);
-  await deps.run("git", ["merge", "main", "--no-edit"]);
-  await deps.run("git", ["push", "origin", "development"]);
+  const devRollForward = await rollDevelopmentForward(deps, ctx, tag);
   let rcAlignment;
   try {
     await deps.run("git", ["push", "origin", "main:rc"]);
@@ -7974,6 +8076,7 @@ async function runTrainApply(command, deps, options = {}) {
     rcRetirementNote: retirement.note,
     rcRetirementCategory: retirement.category,
     rcAlignment,
+    devRollForward,
     announceNote,
     release: { tag, url: releaseUrl, targetSha: releaseSha },
     environments
@@ -11635,10 +11738,10 @@ async function runClaudePlugin(args) {
 }
 async function applyClaudePluginHeal(surface, log) {
   if (surface !== "claude-cli" && surface !== "claude-vscode") return false;
-  log("  \u21BB updating the MMI plugin via `claude plugin` (marketplace \u2192 update \u2192 enable)\u2026");
-  if (!await runClaudePlugin(["plugin", "marketplace", "update", "mmi"])) return false;
-  if (!await runClaudePlugin(["plugin", "update", "mmi@mmi"])) return false;
-  await runClaudePlugin(["plugin", "enable", "mmi@mmi"]);
+  log("  \u21BB reinstalling the MMI plugin via `claude plugin` (marketplace remove \u2192 add \u2192 install)\u2026");
+  for (const step of CLAUDE_PLUGIN_HEAL_STEPS) {
+    if (healStepAborts(step, await runClaudePlugin([...step.args]))) return false;
+  }
   return true;
 }
 var program2 = new Command();
@@ -12584,6 +12687,74 @@ program2.command("report").description("file a friction report on the Hub board
   const projectItemId = await attachToProject(created.number, targetRepo2, priority);
   console.log(JSON.stringify({ ...created, deduped: false, label: REPORT_LABEL, priority, projectItemId }));
 });
+async function resolvePluginSha() {
+  const root = process.env.CLAUDE_PLUGIN_ROOT;
+  if (!root) return void 0;
+  try {
+    const { stdout } = await execFileP2("git", ["-C", root, "rev-parse", "--short", "HEAD"], { timeout: 5e3 });
+    return stdout.trim() || void 0;
+  } catch {
+    return void 0;
+  }
+}
+program2.command("skill-lesson").description("file a skill-lesson on the Hub board (GitHub auth, dedups open lessons) and print {number,url} JSON").requiredOption("--skill <name>", `which skill misfired (${SKILL_NAMES.join(" | ")})`).requiredOption("--title <title>", "one-line summary of what misfired").option("--body <body>", "lesson body: what misfired, the evidence, and the proposed amendment (markdown)").option("--body-file <path|->", "read the lesson body from a UTF-8 file, or from stdin with -").option("--priority <priority>", "urgent | high | medium | low (board Priority field when configured)", "medium").option("--repo <owner/repo>", `target repo (defaults to the org Hub: ${HUB_REPO})`).option("--force", "file a new issue even when an open lesson looks like a duplicate").option("--json", "machine-readable output (already the default \u2014 skill-lesson always prints JSON)").action(async (o) => {
+  const targetRepo2 = o.repo ?? HUB_REPO;
+  const sourceRepo = await resolveRepo(void 0);
+  const pluginSha = await resolvePluginSha();
+  let skill;
+  let rawBody;
+  let title;
+  let priority;
+  let body;
+  let args;
+  try {
+    skill = assertSkillName(o.skill);
+    rawBody = await resolveIssueBody({ body: o.body, bodyFile: o.bodyFile }, { readFile: import_promises3.readFile, readStdin });
+    title = buildSkillLessonTitle(skill, o.title);
+    priority = normalizePriority(o.priority);
+    body = buildSkillLessonBody(rawBody, sourceRepo, pluginSha);
+    args = buildIssueArgs({ type: "task", title, body, priority, repo: targetRepo2, labels: [SKILL_LESSON_LABEL] });
+  } catch (e) {
+    return fail(`skill-lesson: ${e.message}`);
+  }
+  if (!o.force) {
+    let openLessons = [];
+    try {
+      openLessons = await ghJson([
+        "issue",
+        "list",
+        "--repo",
+        targetRepo2,
+        "--state",
+        "open",
+        "--label",
+        SKILL_LESSON_LABEL,
+        "--limit",
+        "100",
+        "--json",
+        "number,title,body,url"
+      ]);
+    } catch {
+    }
+    const dup = findDuplicateLesson({ title, body: rawBody }, openLessons);
+    if (dup) {
+      try {
+        await execFileP2("gh", ["issue", "comment", String(dup.number), "--repo", targetRepo2, "--body", buildSkillLessonDupComment(dup.number, rawBody, sourceRepo, pluginSha)], { timeout: GH_MUTATION_TIMEOUT_MS });
+      } catch (e) {
+        const err = e;
+        return fail(`skill-lesson: duplicate of #${dup.number} (${dup.url}) but the +1 comment failed: ${(err.stderr || err.message || String(e)).trim()}`);
+      }
+      return console.log(JSON.stringify({ deduped: true, number: dup.number, url: dup.url, score: dup.score }));
+    }
+  }
+  try {
+    await execFileP2("gh", ["label", "create", SKILL_LESSON_LABEL, "--color", "c2e0c6", "--repo", targetRepo2], { timeout: GH_MUTATION_TIMEOUT_MS });
+  } catch {
+  }
+  const created = await ghCreate(args);
+  const projectItemId = await attachToProject(created.number, targetRepo2, priority);
+  console.log(JSON.stringify({ ...created, deduped: false, label: SKILL_LESSON_LABEL, skill, priority, projectItemId }));
+});
 var pr = program2.command("pr").description("pull requests \u2014 reliable create with structured output");
 pr.command("create").description("create a PR and print {number,url} JSON").requiredOption("--title <title>", "PR title").option("--body <body>", "PR body (markdown)").option("--body-file <path|->", "read PR body from a UTF-8 file, or from stdin with -").option("--base <branch>", "base branch (defaults to the repo default)").option("--head <branch>", "head branch (defaults to the current branch)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").action(async (o) => {
   let body;
@@ -13080,6 +13251,10 @@ function renderTrainApply(commandName, r) {
   if (r.resumeNote) base = `${base}; ${r.resumeNote}`;
   if (r.devNote) base = `${base}; ${r.devNote}`;
   if (r.rcRetirement) base = `${base}; rc retirement: ${r.rcRetirement.toUpperCase()} (${r.rcRetirementNote ?? ""})`;
+  if (r.devRollForward) {
+    const f = r.devRollForward;
+    base = f.status === "pr-pending" ? `${base}; dev roll-forward: ALIGNMENT PR PENDING \u2014 land it with \`gh pr merge ${f.prNumber ?? "<number>"} --merge\`${f.prUrl ? ` (${f.prUrl})` : ""}` : `${base}; dev roll-forward: ${f.note}`;
+  }
   return r.announceNote ? `${base}; announce: ${r.announceNote}` : base;
 }
 function renderTenantRedeploy(r) {
@@ -13576,6 +13751,18 @@ function mmiPluginCacheRootSnapshots() {
     }
   });
 }
+function hasNestedMmiChild(versionDir) {
+  try {
+    return (0, import_node_fs11.statSync)((0, import_node_path10.join)(versionDir, "mmi")).isDirectory();
+  } catch {
+    return false;
+  }
+}
+function nestedPluginTreeSnapshot() {
+  return mmiPluginCacheRootSnapshots().filter((root) => root.surface === "claude").flatMap(
+    (root) => root.entries.filter((e) => e.isDirectory && /^v?\d+\.\d+\.\d+/.test(e.name)).map((e) => ({ surface: "claude", path: e.path, nested: hasNestedMmiChild(e.path) }))
+  );
+}
 function uniqueQuarantineTarget(path2) {
   if (!(0, import_node_fs11.existsSync)(path2)) return path2;
   for (let i = 1; i < 100; i += 1) {
@@ -13768,6 +13955,13 @@ async function runDoctor(opts, io = consoleIo) {
     };
   }
   checks.push(cacheCleanupCheck);
+  checks.push(
+    buildNestedPluginTreeCheck({
+      isOrgRepo: Boolean(cfg.sagaApiUrl),
+      isWindows: isWin,
+      entries: nestedPluginTreeSnapshot()
+    })
+  );
   const cursorCacheRoot = cursorPluginCacheRoot();
   checks.push(
     buildCursorPluginInstallCheck({

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "2.27.0",
+  "version": "2.28.1",
   "description": "MMI Future CLI — delivers the org rules (whole-file), plus saga and KB access. The cross-IDE engine the plugin's SessionStart hook drives.",
   "type": "module",
   "license": "UNLICENSED",