@mutmutco/cli 4.1.4 → 4.1.6

package/dist/main.cjs

@@ -8220,6 +8220,7 @@ function createDocsIndexDeps(repoRoot2) {
 
 // src/gate-budget.ts
 var BLESSED_RUN_WITH_BUDGET_SHA = "ea2cf8710949dec53566c29836e29cd7515a4e23";
+var BLESSED_RUNNER_GATE_SHA = "dfe45da73f05190fb721563a1411e0bcd47093f4";
 var REMOTE_USE = /^mutmutco\/MMI-Hub\/\.github\/actions\/run-with-budget@(\S+)$/;
 var LOCAL_USE = "./.github/actions/run-with-budget";
 var FULL_SHA = /^[0-9a-f]{40}$/;
@@ -8668,7 +8669,8 @@ function gateSeedVars(cls, releaseTrack, runtime = "node", requiredCheckBranches
     GATE_PY_VERSION: DEFAULT_GATE_PY_VERSION,
     GATE_MAX_SECONDS: DEFAULT_GATE_MAX_SECONDS,
     // The pin is the CLI's blessed SHA, not an operator knob — one central place to bump (#3178).
-    GATE_BUDGET_SHA: BLESSED_RUN_WITH_BUDGET_SHA
+    GATE_BUDGET_SHA: BLESSED_RUN_WITH_BUDGET_SHA,
+    GATE_RUNNER_SHA: BLESSED_RUNNER_GATE_SHA
   };
   const track = releaseTrack ?? (cls === "content" ? "trunk" : "full");
   const trackBranches = track === "trunk" ? ["main"] : track === "direct" ? ["development", "main"] : ["development", "rc", "main"];
@@ -9034,6 +9036,25 @@ function parseVerifyBroker(stdout) {
   return out;
 }
 
+// src/release-auxiliary-workflows.ts
+var AUXILIARY_RELEASE_WORKFLOW_NAMES = /* @__PURE__ */ new Set([
+  "Wake Merv on hub release",
+  "Wake Merv on learning issues"
+]);
+var AUXILIARY_RELEASE_CHECK_CONTEXTS = /* @__PURE__ */ new Set([
+  ...AUXILIARY_RELEASE_WORKFLOW_NAMES,
+  "wake-merv"
+]);
+function isAuxiliaryReleaseWorkflowRun(row) {
+  return AUXILIARY_RELEASE_WORKFLOW_NAMES.has(row.workflowName ?? "");
+}
+function isReleaseShaDeployEnumerationCandidate(row, nonDeployEvents) {
+  if (nonDeployEvents.has(row.event ?? "")) return false;
+  if (isAuxiliaryReleaseWorkflowRun(row)) return false;
+  if (row.event === "release") return false;
+  return true;
+}
+
 // src/train-apply.ts
 var import_node_fs15 = require("node:fs");
 var import_promises2 = require("node:fs/promises");
@@ -13131,10 +13152,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.1.4",
-    tag: "v4.1.4",
-    commit: "5b2b9ef75abf",
-    npm: "@mutmutco/cli@4.1.4"
+    version: "4.1.6",
+    tag: "v4.1.6",
+    commit: "45c61a1dd6f6",
+    npm: "@mutmutco/cli@4.1.6"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -13151,14 +13172,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.1.4"
+          v3Target: "v4.1.6"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.1.4 and redeploy the Hub Lambda from tag v4.1.4 (5b2b9ef75abf); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.1.4 (@mutmutco/cli@4.1.4, tag commit 5b2b9ef75abf \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.1.6 and redeploy the Hub Lambda from tag v4.1.6 (45c61a1dd6f6); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.1.6 (@mutmutco/cli@4.1.6, tag commit 45c61a1dd6f6 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -16702,7 +16723,7 @@ async function discoverShaWorkflowRuns(deps, repo, headSha, seenRunIds) {
   if (rows.length >= SHA_ENUM_LIMIT) extra.push({ workflow: `${marker} truncated`, conclusion: "pending" });
   for (const row of rows) {
     if (typeof row.databaseId !== "number" || seenRunIds.has(row.databaseId)) continue;
-    if (NON_DEPLOY_EVENTS.has(row.event ?? "")) continue;
+    if (!isReleaseShaDeployEnumerationCandidate(row, NON_DEPLOY_EVENTS)) continue;
     extra.push({
       workflow: row.workflowName ?? `run:${row.databaseId}`,
       runId: row.databaseId,
@@ -17080,6 +17101,68 @@ async function runFoldStage(deps, startBranch, preFold, resumeCommand, fn) {
     throw await recoverFailedFold(deps, e, startBranch, preFold.mainSha, resumeCommand);
   }
 }
+var GATE_NODE_BUNDLED_NPM = {
+  "24.19.0": "11.17.0"
+};
+function parseGateNodeVersionPins(workflowBody) {
+  if (!/runner-node-toolchain/.test(workflowBody)) return [];
+  const pins = [];
+  for (const match of workflowBody.matchAll(/^\s*node-version:\s*['"]?([^'"\s#]+)/gm)) {
+    pins.push(match[1].replace(/^['"]|['"]$/g, ""));
+  }
+  return pins;
+}
+function preferGateNodePin(pins) {
+  const exact = pins.filter((pin) => /^\d+\.\d+\.\d+/.test(pin));
+  if (exact.length) return [...exact].sort().at(-1);
+  return pins[0];
+}
+function bundledNpmForNodePin(nodePin) {
+  return GATE_NODE_BUNDLED_NPM[nodePin];
+}
+function resolveGreenGateNpmFromGateWorkflows(files) {
+  if (!files?.length) return void 0;
+  const pin = preferGateNodePin(files.flatMap((file) => parseGateNodeVersionPins(file.body)));
+  return pin ? bundledNpmForNodePin(pin) : void 0;
+}
+function npmMajor(version) {
+  const match = /^(\d+)/.exec(version.trim());
+  return match ? Number(match[1]) : void 0;
+}
+function subprocessFailureDetail(e) {
+  if (!(e instanceof Error)) return String(e);
+  const err = e;
+  const parts = [err.message];
+  if (typeof err.stderr === "string" && err.stderr.trim()) parts.push(err.stderr.trim());
+  if (typeof err.stdout === "string" && err.stdout.trim()) parts.push(err.stdout.trim());
+  return parts.join("\n");
+}
+function isNpmInternalModuleNotFound(detail) {
+  if (!/(?:MODULE_NOT_FOUND|Cannot find module)/i.test(detail)) return false;
+  return /(?:node_modules\/(?:npm|libnpmpublish|@npmcli)\/|Require stack:[\s\S]*node_modules\/npm\/)/i.test(detail);
+}
+function classifyPublishDryRunFailure(opts) {
+  const underlying = subprocessFailureDetail(opts.underlying);
+  const cmd = `npm ${opts.publishArgs.join(" ")}`;
+  if (isNpmInternalModuleNotFound(underlying)) {
+    const gateNpm = opts.gateNpm?.trim();
+    const localNpm = opts.localNpm.trim();
+    if (gateNpm && localNpm && localNpm !== gateNpm) {
+      const localMajor = npmMajor(localNpm);
+      const gateMajor = npmMajor(gateNpm);
+      const majorNote = localMajor !== void 0 && gateMajor !== void 0 && localMajor !== gateMajor ? ` (npm major ${localMajor} locally vs ${gateMajor} on the green gate)` : "";
+      return new Error(
+        `${opts.repo}: pre-tag publish dry run failed inside npm internals (${cmd}) \u2014 local npm ${localNpm} \u2260 green-gate npm ${gateNpm}${majorNote}. This is toolchain corruption / an npm-major mismatch (#5616/#4578), NOT a malformed publish surface. Compare toolchains BEFORE inspecting package contents: align local npm to the green gate (\`npm install -g npm@${gateNpm}\`), then rerun. Underlying error: ${underlying}`
+      );
+    }
+    return new Error(
+      `${opts.repo}: pre-tag publish dry run failed inside npm internals (${cmd}) \u2014 local npm ${localNpm}${gateNpm ? ` (green-gate npm ${gateNpm} when known)` : ""}. This is toolchain corruption, NOT a malformed publish surface (#5616). Compare \`npm -v\` with the green gate log's toolchain-preflight line (#3446) BEFORE inspecting package contents; repair or align the local npm install, then rerun. Underlying error: ${underlying}`
+    );
+  }
+  return new Error(
+    `${opts.repo}: pre-tag publish dry run failed for '${opts.publishDir}' (${cmd}) \u2014 refusing to tag a release that would fail to publish (#2753). Fix the publish surface (deleted dir, malformed package.json, missing files), then rerun. Underlying error: ${underlying}`
+  );
+}
 async function verifyPublishDryRun(deps, ctx, meta, deployModel) {
   if (!(deployModel === "registry-publish" || meta.publishRequired === true)) return;
   const publishDir = typeof meta.publishDir === "string" && meta.publishDir.trim() ? meta.publishDir.trim() : ".";
@@ -17087,9 +17170,20 @@ async function verifyPublishDryRun(deps, ctx, meta, deployModel) {
   try {
     await deps.run("npm", publishArgs);
   } catch (e) {
-    throw new Error(
-      `${ctx.repo}: pre-tag publish dry run failed for '${publishDir}' (npm ${publishArgs.join(" ")}) \u2014 refusing to tag a release that would fail to publish (#2753). Fix the publish surface (deleted dir, malformed package.json, missing files), then rerun. Underlying error: ${e instanceof Error ? e.message : String(e)}`
-    );
+    let localNpm = "version-unreadable";
+    try {
+      localNpm = clean2(await deps.run("npm", ["-v"]));
+    } catch {
+    }
+    const gateNpm = resolveGreenGateNpmFromGateWorkflows((deps.readGateWorkflows ?? readLocalGateWorkflows)());
+    throw classifyPublishDryRunFailure({
+      repo: ctx.repo,
+      publishDir,
+      publishArgs,
+      underlying: e,
+      localNpm,
+      gateNpm
+    });
   }
 }
 var TRUE_MERGE_GATE_BRANCH_PREFIX = "train/check/";
@@ -26287,17 +26381,28 @@ async function gcRepoIndexCloud(deps) {
       { attempts: 1, timeoutMs, sleep: deps.retrySleep }
     );
     const body = await res.json().catch(() => ({}));
-    if (!res.ok) return { ok: false, error: body.error ?? `gc HTTP ${res.status}` };
+    if (!res.ok) {
+      const detail = typeof body.error === "string" ? body.error : `gc HTTP ${res.status}`;
+      return { ok: false, error: detail };
+    }
+    if (body.ok === false) {
+      return { ok: false, error: typeof body.error === "string" ? body.error : "repo-index gc failed" };
+    }
     const removed = Array.isArray(body.removed) ? body.removed.filter((repo) => typeof repo === "string") : [];
     const kept = Number(body.kept);
+    const pendingRepos = Array.isArray(body.pendingRepos) ? body.pendingRepos.filter((repo) => typeof repo === "string") : void 0;
+    const repoErrors = body.repoErrors && typeof body.repoErrors === "object" && !Array.isArray(body.repoErrors) ? Object.fromEntries(Object.entries(body.repoErrors).filter((entry) => typeof entry[1] === "string")) : void 0;
     return {
       ok: true,
+      ...body.partial === true ? { partial: true } : {},
       removed,
       kept: Number.isFinite(kept) ? kept : 0,
       v4: {
         dryRun: body.v4?.dryRun === true,
         repos: normalizeGcV4Repos(body.v4?.repos)
-      }
+      },
+      ...pendingRepos?.length ? { pendingRepos } : {},
+      ...repoErrors && Object.keys(repoErrors).length ? { repoErrors } : {}
     };
   } catch (e) {
     const msg = e.message || String(e);
@@ -33307,7 +33412,7 @@ function registerBoardCommands(program3) {
         includeBundleDetails: o.bundleDetails,
         includeAllBodies: o.bodies,
         allowPartial: o.allowPartial
-      }, { snapshot: registryClientDeps(config) });
+      }, o.direct ? {} : { snapshot: registryClientDeps(config) });
       console.log(o.json ? JSON.stringify(report) : renderBoardReport(report));
     } catch (e) {
       return failGraceful(`board read failed: ${withDiscoverMissDetail(e.message)}`);
@@ -33317,7 +33422,7 @@ function registerBoardCommands(program3) {
     return alreadyClaimed ? `Check ${ref}: claimed and In Progress, no live contest - claim would renew the lease (nothing written)` : `Check ${ref}: free - claim would proceed (nothing written)`;
   }
   const board = program3.command("board").description("read, claim, show, and move Project v2 work items for the current repo");
-  board.command("read", { isDefault: true }).description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").addHelpText("after", "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--allow-partial applies to the paginated path and detail reads.\n").action((o) => runBoardRead(o));
+  board.command("read", { isDefault: true }).description("read the board and print user-owned, claimable, and taken items").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo (defaults to git origin)").option("--direct", "bypass the Hub snapshot and read the live board through direct GitHub GraphQL").option("--bundle-details", "fetch body/comments only for user-owned and claimable issues").option("--bodies", "fetch body/comments for EVERY scoped row, including taken and unowned in-flight ones \u2014 for consumers that scope by Status rather than ownership (#4861); implies --bundle-details and costs one extra read per row").option("--allow-partial", "return partial board results when later page/detail reads fail").addHelpText("after", "\nread is always the authoritative live GitHub Project v2 board (#4926).\n--direct skips the Hub snapshot and uses the existing direct GitHub GraphQL read immediately.\n--allow-partial applies to the paginated path and detail reads.\n").action((o) => runBoardRead(o));
   withExamples(mutating(
     board.command("claim <issues...>").description("claim issues: assign them and move their Project v2 Status to In Progress \u2014 idempotent, so an item already yours and In Progress succeeds unchanged (one or more refs)").addHelpText("after", "\nevery claim stamps a lane-identity marker comment on the issue (`<!-- mmi-claim: \u2026 -->`,\nsurface/session@host) so other agents can attribute the hold (#3727). The session is the\nhost-exported id when the surface provides one, otherwise a per-process `synth-` fallback \u2014\na claim is never anonymous (#5245). `board show`, doctor and unclaim read the latest marker.\n").option("--json", "machine-readable output").option("--repo <owner/repo>", "current repo for local issue numbers (defaults to git origin)").option("--for <login>", "assign to this login instead of @me \u2014 agent claims on behalf of the master").option("--force", "take an item already claimed by another lane that shows live evidence of active work (#3727)").option("--check", "read-only: run every claim gate and report the verdict, writing nothing \u2014 exits 1 with the same refusal a real claim would raise (#4511)").option("--allow-partial", "return success JSON if assignment succeeds but the status move fails"),
     (_opts, args) => ({ command: "board claim", issues: args[0] ?? [] })
@@ -33598,12 +33703,13 @@ function derivePollState(buckets) {
   return anyPending ? "pending" : "success";
 }
 function partitionByRequired(entries, requiredContexts) {
+  const scoped = entries.filter((entry) => !AUXILIARY_RELEASE_CHECK_CONTEXTS.has(entry.name));
   if (!requiredContexts || requiredContexts.size === 0) {
-    return { relevant: entries.map((e) => e.bucket), ignoredFailures: [] };
+    return { relevant: scoped.map((e) => e.bucket), ignoredFailures: [] };
   }
   const relevant = [];
   const ignoredFailures = [];
-  for (const entry of entries) {
+  for (const entry of scoped) {
     if (requiredContexts.has(entry.name)) {
       relevant.push(entry.bucket);
     } else if (entry.bucket === "fail") {
@@ -33709,8 +33815,8 @@ async function fetchHeadCheckEntries(headSha, repo, gh) {
   ]);
   const statuses = parseNdjsonLines(statusesOut);
   return [
-    ...runs.map((run) => ({ name: run.name ?? `check-run ${run.id ?? "unknown"}`, bucket: classifyCheckRun(run) })),
-    ...statuses.map((s) => ({ name: s.context ?? "unknown-status", bucket: classifyCommitStatus(s.state) }))
+    ...runs.filter((run) => !AUXILIARY_RELEASE_CHECK_CONTEXTS.has(run.name ?? "")).map((run) => ({ name: run.name ?? `check-run ${run.id ?? "unknown"}`, bucket: classifyCheckRun(run) })),
+    ...statuses.filter((s) => !AUXILIARY_RELEASE_CHECK_CONTEXTS.has(s.context ?? "")).map((s) => ({ name: s.context ?? "unknown-status", bucket: classifyCommitStatus(s.state) }))
   ];
 }
 async function pollRestPrChecks(prNumber, repo, gh = defaultGhApi, requiredContexts) {
@@ -35328,6 +35434,7 @@ Next command: ${report.nextCommand}`);
 // src/explain-command.ts
 init_cli_shared();
 init_error_codes();
+init_house_map();
 var LOOP_PLAYBOOKS = {
   agent: {
     title: "Agent",
@@ -35518,7 +35625,50 @@ function explainCommandManifest(manifest, command, opts = {}) {
     }
   };
 }
+function houseEntryAsChild(entry, house) {
+  return {
+    name: entry.path.split(" ").pop() ?? entry.path,
+    path: entry.canonical,
+    flat_path: entry.path,
+    house,
+    canonical: entry.canonical,
+    ...entry.description ? { description: entry.description } : {},
+    arguments: [],
+    options: [],
+    subcommands: [],
+    category: "core",
+    discovery: "primary",
+    help_group: "Plan and work",
+    module_owner: "unclassified",
+    consumer: "unclassified"
+  };
+}
+function houseRootAsParent(manifest, house) {
+  const subcommands = house.commands.map(
+    (entry) => findCommandInManifest(manifest, entry.canonical) ?? houseEntryAsChild(entry, house.root)
+  );
+  return {
+    name: house.root,
+    path: house.root,
+    flat_path: house.root,
+    house: house.root,
+    canonical: house.root,
+    description: HOUSE_QUESTIONS[house.root],
+    arguments: [],
+    options: [],
+    subcommands,
+    category: "core",
+    discovery: "primary",
+    help_group: "Plan and work",
+    module_owner: "unclassified",
+    consumer: "unclassified"
+  };
+}
 function findCommandInManifest(manifest, commandPath3) {
+  if (isHouseRoot(commandPath3)) {
+    const house = manifest.houses.find((entry) => entry.root === commandPath3);
+    return house ? houseRootAsParent(manifest, house) : void 0;
+  }
   const visit = (command) => {
     if (command.path === commandPath3 || command.flat_path === commandPath3) return command;
     for (const child2 of command.subcommands) {
@@ -40592,6 +40742,13 @@ repoIndex.command("gc").description("remove v4 cloud authority material for repo
     console.log(
       `repo-index: gc tombstoned ${res.removed.length} orphan authorit${res.removed.length === 1 ? "y" : "ies"}, removed ${artifactsRemoved} artifact(s); kept ${res.kept} authorit${res.kept === 1 ? "y" : "ies"}, ${artifactsKept} artifact(s)`
     );
+    if (res.partial) {
+      const pending = res.pendingRepos?.length ?? 0;
+      const errors = res.repoErrors ? Object.keys(res.repoErrors).length : 0;
+      console.warn(
+        `repo-index: gc partial \u2014 ${pending} repo(s) pending${errors ? `, ${errors} repo error(s)` : ""}; retry gc until pendingRepos is empty`
+      );
+    }
   } catch (e) {
     return await failGraceful(e.message);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.1.4",
+  "version": "4.1.6",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",