@mutmutco/cli 4.1.17 → 4.1.18

package/dist/main.cjs

@@ -13181,10 +13181,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.1.17",
-    tag: "v4.1.17",
-    commit: "65f193ccd344",
-    npm: "@mutmutco/cli@4.1.17"
+    version: "4.1.18",
+    tag: "v4.1.18",
+    commit: "6a8f41433f0f",
+    npm: "@mutmutco/cli@4.1.18"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -13201,14 +13201,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.1.17"
+          v3Target: "v4.1.18"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.1.17 and redeploy the Hub Lambda from tag v4.1.17 (65f193ccd344); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.1.17 (@mutmutco/cli@4.1.17, tag commit 65f193ccd344 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.1.18 and redeploy the Hub Lambda from tag v4.1.18 (6a8f41433f0f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.1.18 (@mutmutco/cli@4.1.18, tag commit 6a8f41433f0f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -26939,9 +26939,9 @@ function buildGraphEdges(cwd, repo, commit, rosterRepos2) {
 }
 
 // src/repo-index-sync.ts
-function execFileUtf8(file, args, env) {
+function execFileUtf8(file, args, env, cwd) {
   return new Promise((resolve6, reject) => {
-    (0, import_node_child_process15.execFile)(file, args, { encoding: "utf8", windowsHide: true, ...env ? { env } : {} }, (error, stdout) => {
+    (0, import_node_child_process15.execFile)(file, args, { encoding: "utf8", windowsHide: true, ...env ? { env } : {}, ...cwd ? { cwd } : {} }, (error, stdout) => {
       if (error) reject(error);
       else resolve6(String(stdout ?? ""));
     });
@@ -27030,8 +27030,26 @@ async function remoteHead(repo, token) {
   try {
     stdout = await execFileUtf8(
       "git",
-      ["-c", "credential.helper=", "-c", `http.extraHeader=Authorization: Basic ${basic}`, "ls-remote", "--exit-code", `https://github.com/${repo}.git`, "HEAD"],
-      headProbeEnv()
+      [
+        "-c",
+        "credential.helper=",
+        // #5750: actions/checkout persists its token as a URL-scoped extraheader in the checked-out
+        // repo's .git/config — repo-local config that env sanitization cannot reach. Run from a
+        // neutral cwd so no repo config applies, and blank both extraheader scopes so the ONLY
+        // credential is the app token below. Credential values are never copied or logged.
+        "-c",
+        "http.extraheader=",
+        "-c",
+        "http.https://github.com/.extraheader=",
+        "-c",
+        `http.extraHeader=Authorization: Basic ${basic}`,
+        "ls-remote",
+        "--exit-code",
+        `https://github.com/${repo}.git`,
+        "HEAD"
+      ],
+      headProbeEnv(),
+      (0, import_node_os14.tmpdir)()
     );
   } catch (error) {
     throw toHeadProbeError(error, repo);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.1.17",
+  "version": "4.1.18",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",