@mutmutco/cli 3.124.0 → 3.126.0

package/dist/main.cjs

@@ -9729,41 +9729,48 @@ function pluginReadGrantNote(login = "<your-github-login>") {
   If the reinstall 404s on ${PLUGIN_READ_REPO}, you lack read on it. An org owner must grant it (idempotent):
   gh api -X PUT repos/${PLUGIN_READ_REPO}/collaborators/${login} -f permission=pull`;
 }
-async function applyPluginHeal(surface, log, opts) {
-  const token = surfaceToken(surface);
-  if (token !== "claude" && token !== "codex" && token !== "kilo") return false;
-  const descriptor = PLUGIN_SURFACE_HEAL[token];
-  if (!descriptor || !descriptor.healSteps) return false;
-  if (token === "kilo") {
-    log("  \u21BB reinstalling the MMI plugin via `kilo plugin` (install \u2192 server() provisions the skills)\u2026");
-    for (const step of descriptor.healSteps) {
-      const ok = await runPluginCli("kilo", [...step.args], log);
-      if (healStepAborts(step, ok)) return false;
-    }
-    return true;
-  }
-  const tableSteps = descriptor.healSteps;
-  if (!tableSteps) return false;
-  const loadedCodexLauncher = token === "codex" ? captureCodexHookLauncher() : void 0;
-  const bin = token;
-  const refSupported = await marketplaceAddRefSupported(bin);
+async function runHealSteps(host, tableSteps, deps) {
+  const log = deps.log ?? (() => {
+  });
+  const loadedCodexLauncher = host === "codex" ? captureCodexHookLauncher() : void 0;
+  const needsRefProbe = tableSteps.some((step) => step.args.includes("--ref"));
+  const refSupported = needsRefProbe ? await marketplaceAddRefSupported(host) : true;
   const { steps } = adaptHealStepsForRefSupport(tableSteps, refSupported);
-  log(healBannerLine(bin, token, refSupported));
+  if (deps.banner) log(deps.banner(refSupported));
   const pinsPath = (0, import_node_path12.join)((0, import_node_os5.homedir)(), ...KNOWN_MARKETPLACES_RELATIVE);
-  const pins = token === "claude" ? captureMarketplacePins(readKnownMarketplacesFile(pinsPath), [MMI_MARKETPLACE_NAME, JERV_MARKETPLACE_NAME]) : /* @__PURE__ */ new Map();
+  const pins = host === "claude" ? captureMarketplacePins(readKnownMarketplacesFile(pinsPath), [MMI_MARKETPLACE_NAME, JERV_MARKETPLACE_NAME]) : /* @__PURE__ */ new Map();
+  let failure;
   try {
     for (const step of steps) {
-      const ok = await runPluginCli(token, [...step.args], log);
-      if (healStepAborts(step, ok)) return false;
+      const res = await deps.run(host, [...step.args]);
+      if (healStepAborts(step, res.ok)) {
+        failure = res.detail ?? `\`${host} ${step.args.join(" ")}\` failed`;
+        break;
+      }
     }
   } finally {
     if (restoreCodexHookLauncher(loadedCodexLauncher)) {
       log("  retained the windowless Codex hook bridge for the loaded session; restart removes its need");
     }
   }
-  const restored = token === "claude" ? restoreMarketplacePinsOnDisk(pinsPath, pins) : void 0;
+  if (failure !== void 0) return { ok: false, detail: failure, refSupported };
+  const restored = host === "claude" ? restoreMarketplacePinsOnDisk(pinsPath, pins) : void 0;
   if (restored) log(`  ${restored}`);
-  return true;
+  return { ok: true, refSupported };
+}
+async function applyPluginHeal(surface, log, opts) {
+  const token = surfaceToken(surface);
+  if (token !== "claude" && token !== "codex" && token !== "kilo") return false;
+  const descriptor = PLUGIN_SURFACE_HEAL[token];
+  if (!descriptor || !descriptor.healSteps) return false;
+  const outcome = await runHealSteps(token, descriptor.healSteps, {
+    run: async (bin, args) => ({ ok: await runPluginCli(bin, args, log) }),
+    log,
+    // kilo-p1: one non-interactive install verb, and the plugin's server() does the rest on the next
+    // /reload — so it names an install, not a marketplace dance.
+    banner: (refSupported) => token === "kilo" ? "  \u21BB reinstalling the MMI plugin via `kilo plugin` (install \u2192 server() provisions the skills)\u2026" : healBannerLine(token, token, refSupported)
+  });
+  return outcome.ok;
 }
 async function healClaudePluginForDoctor(surface = detectSurface(process.env), onStep) {
   if (surfaceToken(surface) !== "claude") {
@@ -9978,7 +9985,7 @@ function planUpdatePass(hasBinary) {
   const skipped = [];
   for (const host of DRIVEN_HOSTS) {
     const descriptor = PLUGIN_SURFACE_HEAL[host];
-    const steps = (descriptor.healSteps ?? []).map((step) => [...step.args]);
+    const steps = (descriptor.healSteps ?? []).map((step) => ({ args: [...step.args], gated: step.gated }));
     const label = `${host} plugin`;
     if (steps.length === 0) {
       skipped.push({ host, label, ok: true, changed: false, detail: "skipped: no non-interactive update verb declared" });
@@ -10005,14 +10012,9 @@ async function runUpdatePass(deps) {
     let ok = true;
     let detail = "updated";
     try {
-      for (const args of arm.steps) {
-        const res = await deps.run(arm.bin, args);
-        if (!res.ok) {
-          ok = false;
-          detail = res.detail ?? `\`${arm.bin} ${args.join(" ")}\` failed`;
-          break;
-        }
-      }
+      const outcome = await runHealSteps(arm.host, arm.steps, { run: deps.run });
+      ok = outcome.ok;
+      if (outcome.detail) detail = outcome.detail;
     } catch (e) {
       ok = false;
       detail = e instanceof Error ? e.message : String(e);
@@ -10037,7 +10039,7 @@ async function runUpdatePass(deps) {
 }
 function describeUpdatePlan(hasBinary) {
   const { arms, skipped } = planUpdatePass(hasBinary);
-  const lines = arms.map((arm) => `${arm.label}: ${arm.steps.map((args) => `${arm.bin} ${args.join(" ")}`).join(" && ")}`);
+  const lines = arms.map((arm) => `${arm.label}: ${arm.steps.map((step) => `${arm.bin} ${step.args.join(" ")}`).join(" && ")}`);
   for (const note of [...skipped, ...operatorOwnedHosts()]) lines.push(`${note.label}: ${note.detail}`);
   lines.push("marketplace background updates: set auto-update off (this pass is the update channel)");
   lines.push("mmi-cli: npm install -g @mutmutco/cli@<released> \u2014 the cli-version row, immediately after this pass");
@@ -15838,10 +15840,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "3.124.0",
-    tag: "v3.124.0",
-    commit: "3e0ff2b23f29",
-    npm: "@mutmutco/cli@3.124.0"
+    version: "3.126.0",
+    tag: "v3.126.0",
+    commit: "1ccba0834c2a",
+    npm: "@mutmutco/cli@3.126.0"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15858,14 +15860,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v3.124.0"
+          v3Target: "v3.126.0"
         }
       ],
       rollbackTrigger: "Any red inside the post-cut soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a v3 client refused while the compat window must still admit it (SUPPORTED_MINOR_WINDOW=2, MIN_CLIENT_VERSION 0.0.0 \u2014 D6a), or npm consumer install/doctor failure on the v4 dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 3.124.0 and redeploy the Hub Lambda from tag v3.124.0 (3e0ff2b23f29); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v3.124.0 (@mutmutco/cli@3.124.0, tag commit 3e0ff2b23f29 \u2014 the preserved latest-v3 distribution, D6b)"
+        mechanism: "npm dist-tag latest -> 3.126.0 and redeploy the Hub Lambda from tag v3.126.0 (1ccba0834c2a); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v3.126.0 (@mutmutco/cli@3.126.0, tag commit 1ccba0834c2a \u2014 the preserved latest-v3 distribution, D6b)"
       }
     },
     {
@@ -36996,6 +36998,7 @@ var surfaces_default = {
       surfaceId: "mmi-cli"
     },
     hookPolicy: {
+      consoleLauncherPath: "bin/mmi-hook-console.cmd",
       launcherPath: "bin/mmi-hook",
       ownerPath: "scripts/hook-policy.mjs",
       runnerPath: "scripts/hook-run.mjs",
@@ -37659,6 +37662,7 @@ var surfaces_default = {
           "scripts/hook-trace.mjs",
           "bin/mmi-hook",
           "bin/mmi-hook.exe",
+          "bin/mmi-hook-console.cmd",
           "native/windows-hook-launcher.c",
           "scripts/build-windows-hook-launcher.ps1",
           "scripts/probe-windows-hook-window.ps1"
@@ -39612,9 +39616,14 @@ function mmiDoctorDeps(opts = {}) {
     // background channel left to protect.
     runUpdatePass: () => runUpdatePass({
       hasBinary: binaryOnPath,
+      // #4873: `runHostBinLogged`, never a bare `execFileP`. Every host verb here is an npm global shim,
+      // which on Windows is `<bin>.cmd` — Node does no PATHEXT resolution, so a bare-name spawn is
+      // ENOENT for all three arms and the pass can never converge on that platform. That helper is the
+      // CLI's one Windows spawn path (`cmd.exe /c`), and it also carries the ignored-stdin and 16 MB
+      // maxBuffer that #4078 established for exactly these plugin verbs.
       run: async (bin, args) => {
         try {
-          await execFileP2(bin, args, { timeout: GH_MUTATION_TIMEOUT_MS });
+          await runHostBinLogged(bin, args, { timeout: GH_MUTATION_TIMEOUT_MS, step: `${bin} ${args.join(" ")}` });
           return { ok: true };
         } catch (e) {
           const err = e;
@@ -41182,10 +41191,10 @@ project.command("get [owner/repo]").description("a project's META (board ids + p
     const track = resolveReleaseTrack(m, void 0, target);
     const stages = branchesForTrack(track).join(" -> ");
     const note = track === "direct" ? " (direct \u2014 no rc; /rcand refuses, /release ships development -> main)" : track === "trunk" ? " (trunk \u2014 main only)" : "";
+    const deployNote = m.deployModel === "registry-publish" ? "\ndeploys are repository-owned publish workflows (registry-publish); no central tenant deploy runs for this repo." : "\ndeploys run centrally (tenant-deploy.yml); product repos carry no deploy files.";
     console.error(
       `${m.name ?? target} \u2014 class ${m.class ?? "?"} \u2014 deploy ${m.deployModel ?? "?"}
-release track: ${track} \u2014 stages: ${stages}${note}
-deploys run centrally (tenant-deploy.yml); product repos carry no deploy files. Inspect nonsecret DEPLOY facts with \`mmi-cli oracle org project deploy get\`; full coords remain OIDC-gated.`
+release track: ${track} \u2014 stages: ${stages}${note}` + deployNote + " Inspect nonsecret DEPLOY facts with `mmi-cli oracle org project deploy get`; full coords remain OIDC-gated."
     );
   }
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "3.124.0",
+  "version": "3.126.0",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",