@mutmutco/cli 4.0.10 → 4.0.11

package/dist/main.cjs

@@ -10827,10 +10827,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.0.10",
-    tag: "v4.0.10",
-    commit: "428fa5003799",
-    npm: "@mutmutco/cli@4.0.10"
+    version: "4.0.11",
+    tag: "v4.0.11",
+    commit: "5b62441055eb",
+    npm: "@mutmutco/cli@4.0.11"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -10847,14 +10847,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.0.10"
+          v3Target: "v4.0.11"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.0.10 and redeploy the Hub Lambda from tag v4.0.10 (428fa5003799); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.0.10 (@mutmutco/cli@4.0.10, tag commit 428fa5003799 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.0.11 and redeploy the Hub Lambda from tag v4.0.11 (5b62441055eb); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.0.11 (@mutmutco/cli@4.0.11, tag commit 5b62441055eb \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -17552,6 +17552,12 @@ function evaluateClosingGuard(input, opts) {
     };
   }
   const closedSkipMessage = skippedClosed.length ? alreadyClosedCommitClosingMessage(skippedClosed, opts.context) : void 0;
+  const unregistered = findClaimedButUnregisteredClosings(input.text, input.closing, input.alreadyClosed);
+  if (unregistered.length) {
+    const base = claimedClosingWarning(unregistered, opts.context);
+    return closedSkipMessage ? { blocked: false, message: `${base}
+${closedSkipMessage}` } : { blocked: false, message: base };
+  }
   if (input.closing.length === 0) {
     return closedSkipMessage ? { blocked: false, message: closedSkipMessage } : { blocked: false };
   }
@@ -17575,9 +17581,25 @@ function evaluateClosingGuard(input, opts) {
   }
   return closedSkipMessage ? { blocked: false, message: closedSkipMessage } : { blocked: false };
 }
+function findClaimedButUnregisteredClosings(text, closing, alreadyClosed = []) {
+  const registered = new Set(closing);
+  const closed = new Set(alreadyClosed);
+  const claimed = /* @__PURE__ */ new Set();
+  for (const m of findClosingMentions(text)) {
+    if (m.negated) continue;
+    claimed.add(m.issue);
+  }
+  return [...claimed].filter((n) => !registered.has(n) && !closed.has(n));
+}
+function claimedClosingWarning(unregistered, context = "pr merge") {
+  const named = unregistered.map((n) => `#${n}`).join(", ");
+  const first = `#${unregistered[0] ?? "N"}`;
+  return `${context}: WARNING \u2014 the PR text claims it will close ${named}, but GitHub has NOT registered ${named} as closing references, so the merge will NOT close ${first}. Link the issue in the PR's Development sidebar or keep the closing keyword where GitHub parses it (an already-closed issue is omitted silently \u2014 that case is fine). Otherwise ${first} stays open after the merge.`;
+}
 async function withAlreadyClosedCommitTargets(input, fetchIssueState) {
   if (!input) return void 0;
-  const candidates = (input.commitClosing ?? []).filter((n) => !input.closing.includes(n));
+  const unregistered = findClaimedButUnregisteredClosings(input.text, input.closing);
+  const candidates = [.../* @__PURE__ */ new Set([...(input.commitClosing ?? []).filter((n) => !input.closing.includes(n)), ...unregistered])];
   if (!candidates.length) return input;
   const alreadyClosed = [];
   await Promise.all(
@@ -17589,7 +17611,7 @@ async function withAlreadyClosedCommitTargets(input, fetchIssueState) {
       }
     })
   );
-  return alreadyClosed.length ? { ...input, alreadyClosed } : input;
+  return alreadyClosed.length ? { ...input, alreadyClosed: [.../* @__PURE__ */ new Set([...input.alreadyClosed ?? [], ...alreadyClosed])] } : input;
 }
 
 // src/issue-comment.ts
@@ -23444,22 +23466,32 @@ ${chunk.blurb ?? ""}`;
   }
 }
 var V4_EMBED_TIMEOUT_MS = 15 * 6e4;
-function runEmbedder(cwd, chunks, modelDirectory, createdAt) {
-  if (!chunks.length) return { embeddings: [] };
+var V4_EMBED_RETRY = 1;
+function runEmbedderOnce(cwd, chunks, modelDirectory, createdAt) {
+  if (!chunks.length) return { ok: true, embeddings: [] };
   const orchestratorRunner = (0, import_node_path23.join)(process.cwd(), "repo-indexer", "src", "batch.mjs");
   const targetRunner = (0, import_node_path23.join)(cwd, "repo-indexer", "src", "batch.mjs");
   const file = (0, import_node_fs25.existsSync)(orchestratorRunner) ? orchestratorRunner : targetRunner;
-  if (!(0, import_node_fs25.existsSync)(file)) return { embeddings: [], reason: "embeddings-unavailable" };
+  if (!(0, import_node_fs25.existsSync)(file)) return { ok: false, reason: "embeddings-unavailable" };
   const request = { texts: chunks.map((chunk) => ({ id: chunk.id, text: embeddingInput(cwd, chunk) })), maxBatch: V4_EMBED_BATCH };
   const env = { ...process.env, ...modelDirectory ? { MMI_REPO_INDEXER_MODEL_DIR: modelDirectory } : {} };
   const result = (0, import_node_child_process13.spawnSync)(process.execPath, [file], { input: JSON.stringify(request), encoding: "utf8", windowsHide: true, timeout: V4_EMBED_TIMEOUT_MS, maxBuffer: V4_MAX_ARTIFACT_BYTES, env });
   if (result.error || result.status !== 0) {
-    const detail = result.error?.message ?? result.signal ?? `exit status ${result.status ?? "unknown"}`;
-    throw new Error(`repo-index v4 embedding runner failed: ${detail}`);
+    const cleanExit2 = result.error === void 0 && result.signal === void 0 && typeof result.status === "number" && result.status !== 0;
+    let code;
+    let stderrTail;
+    if (cleanExit2) {
+      try {
+        code = JSON.parse(String(result.stdout))?.code;
+      } catch {
+      }
+      stderrTail = String(result.stderr).trim().slice(-400) || void 0;
+    }
+    return { ok: false, code, stderrTail, cleanExit: cleanExit2, detail: result.error?.message ?? result.signal ?? `exit status ${result.status ?? "unknown"}` };
   }
   try {
     const response = JSON.parse(result.stdout);
-    if (!response.ok || !response.provenance || !Array.isArray(response.embeddings)) return { embeddings: [], reason: "embeddings-unavailable" };
+    if (!response.ok || !response.provenance || !Array.isArray(response.embeddings)) return { ok: false, reason: "embeddings-unavailable" };
     const provenance = {
       provider: response.provenance.provider,
       model: response.provenance.model,
@@ -23470,11 +23502,24 @@ function runEmbedder(cwd, chunks, modelDirectory, createdAt) {
     };
     const byId = new Map(response.embeddings.map((e) => [e.id, e.vector]));
     const embeddings = chunks.map((chunk) => ({ chunkId: chunk.id, vector: byId.get(chunk.id), provenance })).filter((e) => Array.isArray(e.vector) && e.vector.length === provenance.dimensions && e.vector.every(Number.isFinite));
-    return embeddings.length === chunks.length ? { embeddings } : { embeddings: [], reason: "partial-coverage" };
+    return embeddings.length === chunks.length ? { ok: true, embeddings } : { ok: false, reason: "partial-coverage" };
   } catch {
-    return { embeddings: [], reason: "embeddings-unavailable" };
+    return { ok: false, reason: "embeddings-unavailable" };
   }
 }
+function runEmbedder(cwd, chunks, modelDirectory, createdAt) {
+  if (!chunks.length) return { embeddings: [] };
+  let last;
+  for (let attempt = 1; attempt <= V4_EMBED_RETRY + 1; attempt++) {
+    last = runEmbedderOnce(cwd, chunks, modelDirectory, createdAt);
+    if (last.ok) return { embeddings: last.embeddings, reason: last.reason };
+    if (attempt > V4_EMBED_RETRY || last.cleanExit !== true) break;
+  }
+  const runner = last;
+  const code = runner.code ? ` code=${runner.code}` : "";
+  const stderr = runner.stderrTail ? ` stderr=${runner.stderrTail}` : "";
+  throw new Error(`repo-index v4 embedding runner failed: ${runner.detail ?? "unknown"}${code}${stderr}`);
+}
 async function buildRepoIndexV4(cwd, repo, opts = {}) {
   const { commit, defaultBranch, createdAt } = gitInfo(cwd);
   const chunks = await buildStructuralChunks(cwd, repo, commit);
@@ -29480,9 +29525,25 @@ async function advanceClosedIssuesToDone(deps) {
     const issue2 = `#${ref.number}`;
     try {
       const outcome = await deps.moveIssueToDone(issue2);
-      entries.push(
-        outcome.moved ? { issue: issue2, moved: true, status: "moved" } : { issue: issue2, moved: false, status: "failed", error: outcome.error }
-      );
+      if (!outcome.moved) {
+        entries.push({ issue: issue2, moved: false, status: "failed", error: outcome.error });
+        continue;
+      }
+      if (deps.readIssueStatus) {
+        const verified = await deps.readIssueStatus(issue2);
+        if ("error" in verified) {
+          entries.push({ issue: issue2, moved: true, status: "moved", error: `advanced but could not verify on the board (${verified.error})` });
+        } else if (verified.status !== "Done") {
+          entries.push({
+            issue: issue2,
+            moved: false,
+            status: "failed",
+            error: `advanced to Done but the board reports ${verified.status} \u2014 left behind; move it to Done by hand`
+          });
+          continue;
+        }
+      }
+      entries.push({ issue: issue2, moved: true, status: "moved" });
     } catch (e) {
       entries.push({ issue: issue2, moved: false, status: "failed", error: e.message });
     }
@@ -29559,6 +29620,20 @@ async function resolveBoardAdvanceForPr(prNumber, repoOption) {
     moveIssueToDone: async (ref) => {
       const moved = await moveBoardItem({ config: await loadConfigForBoardSelector2(ref, repoOption), selector: ref, status: "Done", repo: repoOption, allowPartial: true });
       return moved.partial ? { moved: false, error: moved.warning } : { moved: true };
+    },
+    // #5317: after a successful move, re-read the board to verify Done actually holds — a move the API
+    // reported but the board did not reflect is named as left behind, never silently dropped.
+    readIssueStatus: async (ref) => {
+      const number = Number(ref.replace(/^#/, ""));
+      if (!Number.isInteger(number) || number <= 0 || !repo) return { error: `unusable ref ${ref}` };
+      try {
+        const board = await readBoard({ config: await loadConfigForBoardSelector2(ref, repoOption), repo: repoOption });
+        const buckets = [...board.primary.userOwned, ...board.primary.claimable, ...board.primary.taken, ...board.primary.unownedInFlight, ...board.secondary.userOwned, ...board.secondary.claimable, ...board.secondary.taken, ...board.secondary.unownedInFlight];
+        const item = buckets.find((candidate2) => candidate2.repository.toLowerCase() === repo.toLowerCase() && candidate2.number === number);
+        return item ? { status: item.status } : { error: `issue ${ref} not found on the board after advance` };
+      } catch (e) {
+        return { error: e.message };
+      }
     }
   });
 }
@@ -35638,6 +35713,34 @@ ${pr2.body ?? ""}`;
   }
 }
 
+// src/pr-deploy-dev.ts
+function slugOfRepo(repo) {
+  return repo.split("/")[1]?.toLowerCase() ?? "";
+}
+async function planDevDeployOnDevelopmentMerge(repo, baseRef, deps) {
+  if (baseRef !== "development") return { applicable: false, reason: "not-development-base" };
+  const slug = slugOfRepo(repo);
+  if (!slug) return { applicable: false, reason: "unreadable" };
+  let project2;
+  try {
+    project2 = await fetchProjectBySlug(slug, deps);
+  } catch {
+    return { applicable: false, reason: "unreadable" };
+  }
+  const model = project2?.deployModel;
+  if (!model || !isCentralDispatchModel(model)) return { applicable: false, reason: "not-tenant" };
+  return {
+    applicable: true,
+    // The issue's fallback ask, verbatim-shaped: the gap must be visible and actionable at the moment it opens.
+    manualPointer: `dev not redeployed \u2014 run \`mmi-cli devops runtime tenant redeploy ${repo} dev\``
+  };
+}
+async function dispatchDevDeploy(repo, deps) {
+  const res = await tenantDeploy({ repo, stage: "dev" }, deps);
+  if (res.ok) return { ok: true };
+  return { ok: false, detail: res.body?.error ?? res.error ?? `HTTP ${res.status}` };
+}
+
 // src/index.ts
 var execFileGitRun = async (file, args) => (await execFileP2(file, args, { timeout: GIT_TIMEOUT_MS })).stdout;
 async function githubRepoReachProbe() {
@@ -37107,6 +37210,43 @@ ${filelessTransitionGuide(target, o.stage)}`
   const res = await setDeployCoords(slug, body, registryClientDeps(cfg));
   return reportWrite("org project set-deploy", res);
 });
+var projectTenantTasks = project.command("tenant-tasks").description("project-admin self-declare of tenant tasks for your own repo's dev/rc stages (#5316, #5308) \u2014 new-task-only, dev/rc-only; editing an existing task or declaring a main-stage task stays master-only (`org project set --var tenantTasks=...`)");
+projectTenantTasks.command("declare <name>").description('register a NEW tenant task \u2014 becomes runnable via `runtime tenant control \u2026 run-task` on dev/rc. Body shape {service,command[],stages[],timeoutSeconds?,artifact?} \u2014 stages limited to dev/rc here; artifact "required" tasks must carry {artifact} in the command argv.').option("--service <name>", "service in the tenant runtime the task runs in (required unless --var carries it)").option("--command <argv...>", "task command as argv (repeatable; required unless --var carries it)").option("--stages <list>", "comma-separated dev,rc stages this task may run on (required unless --var carries it)").option("--timeout-seconds <n>", "optional wall-clock ceiling 1..3600").option("--artifact <none|required>", "artifact contract (default none; required tasks must contain {artifact} in argv)").option("--var <json>", "full task object {service,command[],stages[],timeoutSeconds?,artifact?} \u2014 use instead of the individual flags").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action(async (name, o) => {
+  const cfg = await loadConfig();
+  let target;
+  try {
+    target = await projectTarget("org project tenant-tasks declare", o.repo);
+  } catch (e) {
+    return fail(e.message);
+  }
+  const slug = slugOf(target);
+  let task;
+  if (o.var) {
+    try {
+      task = JSON.parse(o.var);
+    } catch {
+      return fail("org project tenant-tasks declare: --var must be valid JSON");
+    }
+  } else {
+    if (!o.service || !o.command?.length || !o.stages) {
+      return fail("org project tenant-tasks declare: pass --var <json> or all of --service, --command, --stages");
+    }
+    task = {
+      service: o.service,
+      command: o.command,
+      stages: o.stages.split(",").map((s) => s.trim()).filter(Boolean),
+      ...o.timeoutSeconds !== void 0 ? { timeoutSeconds: Number(o.timeoutSeconds) } : {},
+      ...o.artifact !== void 0 ? { artifact: o.artifact } : {}
+    };
+  }
+  const res = await postJson(`/projects/${encodeURIComponent(slug)}/tenant-tasks`, { repo: target, tenantTasks: { [name]: task } }, registryClientDeps(cfg), "POST", { noRetry: true });
+  if (o.json) {
+    console.log(JSON.stringify(res, null, 2));
+  } else {
+    reportWrite("org project tenant-tasks declare", res);
+  }
+  if (!res.ok) process.exitCode = 1;
+});
 var registry = program2.command("registry").description("the DDB org registry \u2014 org-level constants");
 registry.command("org").description("the org config (account id, region, orgProjectId, sagaApiUrl)").option("--json", "machine-readable output").action(async (_o) => {
   const cfg = await loadConfig();
@@ -38000,11 +38140,16 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
   const method = o.rebase ? "--rebase" : o.merge ? "--merge" : "--squash";
   const repoArgs = o.repo ? ["--repo", o.repo] : [];
   const repoForPostCleanup = await resolveRepo(o.repo) ?? o.repo;
-  const headRef = await execFileP2("gh", ["pr", "view", number, ...repoArgs, "--json", "headRefName", "--jq", ".headRefName"], { timeout: GC_GH_TIMEOUT_MS }).then((r) => r.stdout.trim()).catch(async (e) => {
+  const prMeta = await execFileP2("gh", ["pr", "view", number, ...repoArgs, "--json", "headRefName,baseRefName", "--jq", "{head: .headRefName, base: .baseRefName}"], { timeout: GC_GH_TIMEOUT_MS }).then((r) => JSON.parse(r.stdout)).catch(async (e) => {
     if (!isGitHubRateLimitError(e) || !repoForPostCleanup) throw e;
     console.warn(`pr merge: gh GraphQL rate-limited \u2014 reading PR #${number} via REST instead (#4588).`);
-    return (await fetchRestPrSnapshot(number, repoForPostCleanup)).headRef;
+    const snapshot = await fetchRestPrSnapshot(number, repoForPostCleanup);
+    return { head: snapshot.headRef, base: snapshot.baseRef };
   });
+  const headRef = prMeta.head;
+  const baseRef = prMeta.base;
+  const devDeployDeps = repoForPostCleanup ? registryClientDeps(await loadConfig()) : void 0;
+  const devDeployPlan = repoForPostCleanup && devDeployDeps ? await planDevDeployOnDevelopmentMerge(repoForPostCleanup, baseRef, devDeployDeps).catch(() => ({ applicable: false, reason: "unreadable" })) : { applicable: false, reason: "unreadable" };
   const closingGuardInput = await withAlreadyClosedCommitTargets(
     await readClosingGuardInput(number, repoArgs, repoForPostCleanup, "pr merge"),
     async (n) => {
@@ -38133,6 +38278,7 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
     const enqueued = describePrMergeEnqueuedReason(await pollGhPrChecks(number, repoArgs).catch(() => void 0));
     console.log(JSON.stringify({ mergeStatus: "auto-merge-enqueued", enqueuedReason: enqueued.reason, pr: number, branch: headRef, state: state || "unknown", upgradedToAuto: upgradedToAuto || void 0 }));
     console.warn(`pr merge: PR #${number} is ENQUEUED, not merged \u2014 ${enqueued.message}.`);
+    if (devDeployPlan.applicable) console.warn(`pr merge: ${devDeployPlan.manualPointer} once the merge lands (auto-merge does not redeploy the dev stage).`);
     if (upgradedToAuto && !o.auto) {
       console.warn(`pr merge: exiting ${PR_MERGE_ENQUEUED_EXIT_CODE} so a chained command does not treat this as a completed merge.`);
       process.exitCode = PR_MERGE_ENQUEUED_EXIT_CODE;
@@ -38156,6 +38302,8 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
   const boardAdvance = await advanceClosedIssuesToDone2(number, repoForPostCleanup);
   const crossRepoFilingIssue = repoForPostCleanup ? await reconcileCrossRepoFilingIssue(defaultGitHubClient(), repoForPostCleanup, Number(number)) : { status: "failed", error: "could not resolve the PR repo for cross-repo filing-issue reconciliation" };
   invalidateStatuslineBoardCache();
+  const devDeploy = devDeployPlan.applicable && devDeployDeps && remoteNotAttemptedReason !== "pr-already-merged" ? await dispatchDevDeploy(repoForPostCleanup, devDeployDeps) : void 0;
+  const devDeployManual = devDeployPlan.applicable ? devDeployPlan.manualPointer : void 0;
   console.log(JSON.stringify({
     mergeStatus: "merged",
     merged: number,
@@ -38167,10 +38315,14 @@ jsonParity(pr.command("merge <number>").description("merge a PR (squash by defau
     // tell "merged clean" from "merged, but the board did not follow" without guessing from the exit code.
     ...boardAdvance.entries.length ? { boardAdvance: boardAdvance.entries } : {},
     boardAdvanceStatus: boardAdvance.status,
-    ...crossRepoFilingIssue.status !== "not-applicable" ? { crossRepoFilingIssue } : {}
+    ...crossRepoFilingIssue.status !== "not-applicable" ? { crossRepoFilingIssue } : {},
+    ...devDeploy ? { devDeploy: devDeploy.ok ? { dispatched: true } : { dispatched: false, manual: devDeployManual } } : {}
   }));
   const boardAdvanceMessage = boardAdvanceFailureMessage(boardAdvance);
   if (boardAdvanceMessage) console.error(boardAdvanceMessage);
+  if (devDeploy && !devDeploy.ok) {
+    console.error(`pr merge: ${devDeployManual} (${devDeploy.detail})`);
+  }
   if (crossRepoFilingIssue.status === "failed") {
     console.error(`pr merge: cross-repo filing-issue reconciliation failed (${crossRepoFilingIssue.error}) \u2014 the PR MERGED, but a foreign filing issue may remain open.`);
   }

package/dist/repo-index-v4.cjs

@@ -439,22 +439,32 @@ ${chunk.blurb ?? ""}`;
   }
 }
 var V4_EMBED_TIMEOUT_MS = 15 * 6e4;
-function runEmbedder(cwd, chunks, modelDirectory, createdAt) {
-  if (!chunks.length) return { embeddings: [] };
+var V4_EMBED_RETRY = 1;
+function runEmbedderOnce(cwd, chunks, modelDirectory, createdAt) {
+  if (!chunks.length) return { ok: true, embeddings: [] };
   const orchestratorRunner = (0, import_node_path4.join)(process.cwd(), "repo-indexer", "src", "batch.mjs");
   const targetRunner = (0, import_node_path4.join)(cwd, "repo-indexer", "src", "batch.mjs");
   const file = (0, import_node_fs3.existsSync)(orchestratorRunner) ? orchestratorRunner : targetRunner;
-  if (!(0, import_node_fs3.existsSync)(file)) return { embeddings: [], reason: "embeddings-unavailable" };
+  if (!(0, import_node_fs3.existsSync)(file)) return { ok: false, reason: "embeddings-unavailable" };
   const request = { texts: chunks.map((chunk) => ({ id: chunk.id, text: embeddingInput(cwd, chunk) })), maxBatch: V4_EMBED_BATCH };
   const env = { ...process.env, ...modelDirectory ? { MMI_REPO_INDEXER_MODEL_DIR: modelDirectory } : {} };
   const result = (0, import_node_child_process3.spawnSync)(process.execPath, [file], { input: JSON.stringify(request), encoding: "utf8", windowsHide: true, timeout: V4_EMBED_TIMEOUT_MS, maxBuffer: V4_MAX_ARTIFACT_BYTES, env });
   if (result.error || result.status !== 0) {
-    const detail = result.error?.message ?? result.signal ?? `exit status ${result.status ?? "unknown"}`;
-    throw new Error(`repo-index v4 embedding runner failed: ${detail}`);
+    const cleanExit = result.error === void 0 && result.signal === void 0 && typeof result.status === "number" && result.status !== 0;
+    let code;
+    let stderrTail;
+    if (cleanExit) {
+      try {
+        code = JSON.parse(String(result.stdout))?.code;
+      } catch {
+      }
+      stderrTail = String(result.stderr).trim().slice(-400) || void 0;
+    }
+    return { ok: false, code, stderrTail, cleanExit, detail: result.error?.message ?? result.signal ?? `exit status ${result.status ?? "unknown"}` };
   }
   try {
     const response = JSON.parse(result.stdout);
-    if (!response.ok || !response.provenance || !Array.isArray(response.embeddings)) return { embeddings: [], reason: "embeddings-unavailable" };
+    if (!response.ok || !response.provenance || !Array.isArray(response.embeddings)) return { ok: false, reason: "embeddings-unavailable" };
     const provenance = {
       provider: response.provenance.provider,
       model: response.provenance.model,
@@ -465,10 +475,23 @@ function runEmbedder(cwd, chunks, modelDirectory, createdAt) {
     };
     const byId = new Map(response.embeddings.map((e) => [e.id, e.vector]));
     const embeddings = chunks.map((chunk) => ({ chunkId: chunk.id, vector: byId.get(chunk.id), provenance })).filter((e) => Array.isArray(e.vector) && e.vector.length === provenance.dimensions && e.vector.every(Number.isFinite));
-    return embeddings.length === chunks.length ? { embeddings } : { embeddings: [], reason: "partial-coverage" };
+    return embeddings.length === chunks.length ? { ok: true, embeddings } : { ok: false, reason: "partial-coverage" };
   } catch {
-    return { embeddings: [], reason: "embeddings-unavailable" };
+    return { ok: false, reason: "embeddings-unavailable" };
+  }
+}
+function runEmbedder(cwd, chunks, modelDirectory, createdAt) {
+  if (!chunks.length) return { embeddings: [] };
+  let last;
+  for (let attempt = 1; attempt <= V4_EMBED_RETRY + 1; attempt++) {
+    last = runEmbedderOnce(cwd, chunks, modelDirectory, createdAt);
+    if (last.ok) return { embeddings: last.embeddings, reason: last.reason };
+    if (attempt > V4_EMBED_RETRY || last.cleanExit !== true) break;
   }
+  const runner = last;
+  const code = runner.code ? ` code=${runner.code}` : "";
+  const stderr = runner.stderrTail ? ` stderr=${runner.stderrTail}` : "";
+  throw new Error(`repo-index v4 embedding runner failed: ${runner.detail ?? "unknown"}${code}${stderr}`);
 }
 async function buildRepoIndexV4(cwd, repo, opts = {}) {
   const { commit, defaultBranch, createdAt } = gitInfo(cwd);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.0.10",
+  "version": "4.0.11",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",