@mutmutco/cli 4.0.1 → 4.0.2

package/dist/main.cjs

@@ -8237,6 +8237,25 @@ function awsScheduleRefs(payload) {
   }
   return refs;
 }
+function decorateAwsModel(entries, registry2, verdicts) {
+  if (!registry2 || registry2.length === 0) return [...entries];
+  const rowById = new Map(registry2.map((r) => [r.id, r]));
+  const literalById = /* @__PURE__ */ new Map();
+  for (const v of verdicts ?? []) {
+    if (typeof v.modelId === "string" && v.modelId.trim() && !literalById.has(v.id)) {
+      literalById.set(v.id, v.modelId);
+    }
+  }
+  return entries.map((e) => {
+    if (!e.scheduleId) return e;
+    const row = rowById.get(e.scheduleId);
+    if (!row || row.executor !== "cursor-agent") return e;
+    const literal = literalById.get(e.scheduleId);
+    if (literal) return { ...e, model: literal };
+    if (row.model) return { ...e, model: `role: ${row.model}` };
+    return { ...e, model: "org-default" };
+  });
+}
 var DECLARED_ENTRIES = [
   { name: "mmi-backup (mm-central, mmi-fofu, zuber, mmi-oguz)", cadence: "17 2 * * *", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mmi-backup \u2192 /opt/mmi-control/nightly-backup.sh (verify: mmi-cli devops runtime box get <box> --ssh)" },
   // #3370: the floor under runner-hygiene.yml. That workflow runs ON the runner and needs checkout +
@@ -8247,8 +8266,16 @@ var DECLARED_ENTRIES = [
   // #4118: Listening + systemd-active ≠ GitHub online after acquirejob 503. restart.conf cannot see
   // it; an Actions workflow on mmi-live cannot heal it when half the fleet is offline. Root cron.
   { name: "mmi-runner-online-reconcile (mmi-runner)", cadence: "*/5 * * * *", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mmi-runner-online \u2192 /opt/mmi-control/runner-online-reconcile.sh; API-offline + _diag acquirejob, max 2 restarts/tick (verify: mmi-cli devops runtime box get mmi-runner --ssh)" },
-  { name: "zuber-bake", cadence: "*:05/30 (every 30 min)", executor: "zuber systemd timer", llm: "no", resolved: "declared", source: "zuber-bake.timer \u2192 rolling overlay bake, metro tier, next ~6h window (verify over ssh)" },
-  { name: "zuber-bake-full", cadence: "00:30 UTC (03:30 TRT, daily)", executor: "zuber systemd timer", llm: "no", resolved: "declared", source: "zuber-bake-full.timer \u2192 full 24h overlay rebuild, all 81 il (verify over ssh)" }
+  // #3852: the runner /tmp sweep — daily inode hygiene (03:41 UTC), deliberately the one clutter path the
+  // out-of-band disk-relief script must never touch. Verified installed 2026-08-18: the cron.d file and
+  // flock line match scripts/runner-tmp-sweep.cron exactly.
+  { name: "mmi-runner-tmp-sweep (mmi-runner)", cadence: "41 3 * * *", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mmi-runner-tmp-sweep \u2192 /opt/mmi-control/runner-tmp-sweep.sh; daily inode hygiene, flock -n (verify: mmi-cli devops runtime box get mmi-runner --ssh)" }
+  // RETIRED 2026-08-18 (MMI-Hub#5234): `zuber-bake` (every 30 min) and `zuber-bake-full` (daily 00:30 UTC)
+  // were declared as zuber systemd timers. The ZuberShade full park (#1774, 2026-08-06) stopped them: on
+  // the box (46.225.58.31) zuber-bake.timer / zuber-bake-full.timer answer not-found and
+  // zuber-bake-demand.timer is disabled — no bake/oven timer remains armed, and the notebook must not
+  // claim a job the box does not run. Re-add when the hold lifts and the demand bake re-arms
+  // (MMC-ZuberShade docs/aws-teardown-hold-2026-08-03.md).
 ];
 function sortEntries(entries) {
   return [...entries].sort(
@@ -8263,10 +8290,12 @@ function formatSchedulesTable(entries, now = /* @__PURE__ */ new Date()) {
   const cadW = w((e) => e.cadence, "CADENCE");
   const exeW = w((e) => e.executor, "EXECUTOR");
   const llmW = w((e) => e.llm, "LLM");
+  const modelOf = (e) => e.model ?? "-";
+  const modW = w((e) => modelOf(e), "MODEL");
   const resW = w((e) => resolvedOf.get(e) ?? e.resolved, "RESOLVED");
-  const row = (n, c, x, l, r, s) => `${n.padEnd(nameW)}  ${c.padEnd(cadW)}  ${x.padEnd(exeW)}  ${l.padEnd(llmW)}  ${r.padEnd(resW)}  ${s}`;
-  const lines = [row("JOB", "CADENCE", "EXECUTOR", "LLM", "RESOLVED", "SOURCE")];
-  for (const e of entries) lines.push(row(e.name, e.cadence, e.executor, e.llm, resolvedOf.get(e) ?? e.resolved, e.source));
+  const row = (n, c, x, l, m, r, s) => `${n.padEnd(nameW)}  ${c.padEnd(cadW)}  ${x.padEnd(exeW)}  ${l.padEnd(llmW)}  ${m.padEnd(modW)}  ${r.padEnd(resW)}  ${s}`;
+  const lines = [row("JOB", "CADENCE", "EXECUTOR", "LLM", "MODEL", "RESOLVED", "SOURCE")];
+  for (const e of entries) lines.push(row(e.name, e.cadence, e.executor, e.llm, modelOf(e), resolvedOf.get(e) ?? e.resolved, e.source));
   return lines.join("\n");
 }
 function withTickState(entry, now = /* @__PURE__ */ new Date()) {
@@ -8274,11 +8303,11 @@ function withTickState(entry, now = /* @__PURE__ */ new Date()) {
 }
 function renderDocSection(entries, generatedAtIso) {
   const lines = [
-    "| Job | Cadence | Executor | LLM | Resolved | Source |",
-    "|---|---|---|---|---|---|"
+    "| Job | Cadence | Executor | LLM | Model | Resolved | Source |",
+    "|---|---|---|---|---|---|---|"
   ];
   for (const e of entries) {
-    lines.push(`| ${e.name} | \`${e.cadence}\` | ${e.executor} | ${e.llm} | ${e.resolved} | ${e.source} |`);
+    lines.push(`| ${e.name} | \`${e.cadence}\` | ${e.executor} | ${e.llm} | ${e.model ?? "-"} | ${e.resolved} | ${e.source} |`);
   }
   return [
     DOC_START_MARKER,
@@ -8694,6 +8723,22 @@ async function fetchSchedulesList(deps) {
     return null;
   }
 }
+async function fetchRunVerdicts(deps) {
+  if (!deps.baseUrl) return null;
+  const token = await deps.token();
+  if (!token) return null;
+  try {
+    const res = await retriedFetch(deps, `${deps.baseUrl.replace(/\/$/, "")}/schedules/verdicts`, {
+      method: "GET",
+      headers: { Authorization: `Bearer ${token}` }
+    });
+    if (!res.ok) return null;
+    const body = await res.json();
+    return Array.isArray(body?.runVerdicts) ? body.runVerdicts : null;
+  } catch {
+    return null;
+  }
+}
 async function fetchOrgConfig(deps) {
   if (!deps.baseUrl) return null;
   const token = await deps.token();
@@ -10774,10 +10819,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.0.1",
-    tag: "v4.0.1",
-    commit: "2807e6205fab",
-    npm: "@mutmutco/cli@4.0.1"
+    version: "4.0.2",
+    tag: "v4.0.2",
+    commit: "e703fd090be7",
+    npm: "@mutmutco/cli@4.0.2"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -10794,14 +10839,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.0.1"
+          v3Target: "v4.0.2"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.0.1 and redeploy the Hub Lambda from tag v4.0.1 (2807e6205fab); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.0.1 (@mutmutco/cli@4.0.1, tag commit 2807e6205fab \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.0.2 and redeploy the Hub Lambda from tag v4.0.2 (e703fd090be7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.0.2 (@mutmutco/cli@4.0.2, tag commit e703fd090be7 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -23516,16 +23561,23 @@ async function probeRepoIndexV4ReadinessCloud(queries, deps) {
   if (!token) return { ok: false, error: "no Hub session token (run `gh auth login`)" };
   const baseUrl = deps.baseUrl.replace(/\/$/, "");
   const headers = { ...clientVersionHeaders(), Authorization: ["Bearer", token].join(" "), "content-type": "application/json" };
-  try {
+  const shadowPass = async () => {
     for (const query of queries) {
-      const res2 = await fetchWithRetry(deps.fetch ?? fetch, `${baseUrl}/repo-index/v4/shadow`, {
+      const res = await fetchWithRetry(deps.fetch ?? fetch, `${baseUrl}/repo-index/v4/shadow`, {
         method: "POST",
         headers,
         body: JSON.stringify({ q: query.query, mode: query.mode, readinessProbe: true })
       }, { attempts: RETRY_ATTEMPTS2, timeoutMs: 12e4, sleep: deps.retrySleep });
-      const body2 = await res2.json().catch(() => ({}));
-      if (!res2.ok) return { ok: false, error: `${query.id}: ${body2.error ?? `v4 readiness probe HTTP ${res2.status}`}${body2.errorClass ? ` (${body2.errorClass})` : ""}`, status: res2.status };
+      const body = await res.json().catch(() => ({}));
+      if (!res.ok) return { ok: false, error: `${query.id}: ${body.error ?? `v4 readiness probe HTTP ${res.status}`}${body.errorClass ? ` (${body.errorClass})` : ""}`, status: res.status };
     }
+    return { ok: true };
+  };
+  try {
+    const warmup = await shadowPass();
+    if (!warmup.ok) return warmup;
+    const verdict = await shadowPass();
+    if (!verdict.ok) return verdict;
     const res = await fetchWithRetry(deps.fetch ?? fetch, `${baseUrl}/repo-index/status`, {
       method: "GET",
       headers: { ...clientVersionHeaders(), Authorization: ["Bearer", token].join(" ") }
@@ -23534,8 +23586,8 @@ async function probeRepoIndexV4ReadinessCloud(queries, deps) {
     if (!res.ok) return { ok: false, error: body.error ?? `v4 readiness status HTTP ${res.status}`, status: res.status };
     const readiness = body.v4Readiness;
     const complete = !!readiness && ["ready", "not-ready"].includes(readiness.verdict) && Array.isArray(readiness.reasons) && Number.isFinite(readiness.goldenCount) && Number.isFinite(readiness.evidenceCount) && !!readiness.modes && ["lexical", "semantic", "hybrid"].every((mode) => {
-      const verdict = readiness.modes[mode]?.verdict;
-      return verdict === "ready" || verdict === "not-ready";
+      const verdict2 = readiness.modes[mode]?.verdict;
+      return verdict2 === "ready" || verdict2 === "not-ready";
     });
     if (!complete) return { ok: false, error: "Hub status omitted the explicit v4 readiness verdict/reasons/modes contract", status: res.status };
     return { ok: true, readiness };
@@ -26508,12 +26560,20 @@ async function readOrFail(read) {
 async function defaultRegistryRead() {
   return fetchSchedulesList(registryClientDeps(await loadConfig()));
 }
-async function fetchNotebook(client = defaultGitHubClient(), readRegistry = defaultRegistryRead, readProjects = defaultProjectsRead) {
-  const [gh, aws, registryRead, projectsRead] = await Promise.all([
+async function defaultRunVerdictRead() {
+  return fetchRunVerdicts(registryClientDeps(await loadConfig()));
+}
+function modelRoleKeyOf(row) {
+  const model = row.model;
+  return typeof model === "string" && model.trim() ? model : void 0;
+}
+async function fetchNotebook(client = defaultGitHubClient(), readRegistry = defaultRegistryRead, readProjects = defaultProjectsRead, readRunVerdicts = defaultRunVerdictRead) {
+  const [gh, aws, registryRead, projectsRead, runVerdictRead] = await Promise.all([
     githubEntries(client),
     awsEntries(),
     readOrFail(readRegistry),
-    readOrFail(readProjects)
+    readOrFail(readProjects),
+    readOrFail(readRunVerdicts)
   ]);
   const readFailures = [];
   if (registryRead.state === "failed") {
@@ -26523,10 +26583,16 @@ async function fetchNotebook(client = defaultGitHubClient(), readRegistry = defa
     readFailures.push(`registry: could not read the projects list \u2014 schedulesMode opt-outs unresolved (nothing suppressed) \u2014 ${projectsRead.error}`);
   }
   const registry2 = registryRead.state === "ok" ? registryRead.value : null;
+  const runVerdicts = runVerdictRead.state === "ok" ? runVerdictRead.value : null;
   const projects = projectsRead.state === "ok" ? projectsRead.value : null;
+  const decoratedAws = decorateAwsModel(
+    aws.entries,
+    registry2?.map((r) => ({ id: r.id, executor: r.executor, model: modelRoleKeyOf(r) })) ?? null,
+    runVerdicts
+  );
   const recon = assembleReconciliation(gh.entries, new Set(gh.readRepos), registry2, new Set(gh.workflowNames), {
     // #3286: the harbour side joins registry rows against the live aws-scheduler clocks by scheduleId.
-    awsEntries: aws.entries,
+    awsEntries: decoratedAws,
     schedulerRead: Boolean(aws.schedulerRead)
   }, new Set(gh.disabledWorkflowNames));
   const selfManaged = /* @__PURE__ */ new Set();
@@ -26540,7 +26606,7 @@ async function fetchNotebook(client = defaultGitHubClient(), readRegistry = defa
   );
   const driftLines = reconciliation.map(renderDrift);
   return {
-    entries: sortEntries([...gh.entries, ...aws.entries, ...DECLARED_ENTRIES]),
+    entries: sortEntries([...gh.entries, ...decoratedAws, ...DECLARED_ENTRIES]),
     incomplete: [...gh.incomplete, ...aws.incomplete, ...recon.incomplete, ...readFailures],
     drift: driftLines,
     reconciliation,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",