@mutmutco/cli 4.3.33 → 4.3.34

package/dist/main.cjs

@@ -3679,6 +3679,8 @@ function buildErrorEnvelope(message2, payload) {
   if (payload.did_you_mean !== void 0) env.did_you_mean = payload.did_you_mean;
   if (payload.corrected_command !== void 0) env.corrected_command = payload.corrected_command;
   if (payload.current_parent !== void 0) env.current_parent = payload.current_parent;
+  if (payload.issue_ref !== void 0) env.issue_ref = payload.issue_ref;
+  if (payload.board_status !== void 0) env.board_status = payload.board_status;
   return env;
 }
 function formatErrorEnvelope(message2, payload) {
@@ -10965,6 +10967,21 @@ function boardNotFoundError(ref, board, opts = {}) {
   const remedy = opts.remedy ?? "if it lives on a different board, pass --repo <owner/repo> for the repo that owns it";
   return new Error(`${ref} ${verb} the ${board.owner} #${board.number} board; ${remedy}`);
 }
+var NotClaimableError = class extends Error {
+  /** The board item's status at refusal time, when the refusal was a status verdict. Absent for the
+   *  write-access and dependency refusals, whose cause is not the status. */
+  boardStatus;
+  issueRef;
+  constructor(message2, detail) {
+    super(message2);
+    this.name = "NotClaimableError";
+    this.issueRef = detail.ref;
+    if (detail.status !== void 0) this.boardStatus = detail.status;
+  }
+};
+function isNotClaimable(e) {
+  return e instanceof NotClaimableError;
+}
 function evaluateClaim(item, login) {
   const others = item.assignees.filter((a) => a.toLowerCase() !== login.toLowerCase());
   const mine = item.assignees.some((a) => a.toLowerCase() === login.toLowerCase());
@@ -12217,8 +12234,9 @@ async function claimOneBoardItem(ctx, selector, options) {
   const flatItem = findBoardItem(ctx.items, selector, { owner: cfg.projectOwner, number: cfg.projectNumber });
   const wouldWrite = flatItem.assignees.length === 0 && (flatItem.status === "Todo" || flatItem.status === "In Progress" || flatItem.status === "In Review");
   if (wouldWrite && !ctx.writable.has(flatItem.repository.toLowerCase())) {
-    throw new Error(
-      `${flatItem.ref} is not claimable: the token from ${describeTokenSource()} reports no write access to ${flatItem.repository}`
+    throw new NotClaimableError(
+      `${flatItem.ref} is not claimable: the token from ${describeTokenSource()} reports no write access to ${flatItem.repository}`,
+      { ref: flatItem.ref }
     );
   }
   if (flatItem.contentType === "Issue") {
@@ -12241,7 +12259,10 @@ async function claimOneBoardItem(ctx, selector, options) {
       retryCommand: `mmi-cli oracle board claim ${flatItem.number}${options.check ? " --check" : ""}`
     });
     if (gate.blocked) {
-      throw new Error(`${flatItem.ref} is not claimable: blocked on open ${gate.openDependencies.join(", ")}`);
+      throw new NotClaimableError(
+        `${flatItem.ref} is not claimable: blocked on open ${gate.openDependencies.join(", ")}`,
+        { ref: flatItem.ref }
+      );
     }
   }
   const assignee = options.assignee ?? "@me";
@@ -12261,12 +12282,12 @@ async function claimOneBoardItem(ctx, selector, options) {
   const heldReceipt = () => previousHolder ? resumeEvidence ? { outcome: "resumed", holder, previousHolder, resumeEvidence } : { outcome: "took-over", holder, previousHolder } : { outcome: "held", holder };
   if (flatItem.contentType !== "Issue") throw new Error(`${flatItem.ref} is not an issue`);
   const pre = evaluateClaim(flatItem, assignedLogin);
-  if (!pre.ok) throw new Error(pre.reason);
+  if (!pre.ok) throw new NotClaimableError(pre.reason, { ref: flatItem.ref, status: flatItem.status });
   let item = flatItem;
   const fresh = (await fetchIssueProjectItem(client, cfg, { repo: item.repository, number: item.number })).item;
   if (!fresh) throw new Error(`${item.ref} is not on this project board`);
   const verdict = evaluateClaim(fresh, assignedLogin);
-  if (!verdict.ok) throw new Error(verdict.reason);
+  if (!verdict.ok) throw new NotClaimableError(verdict.reason, { ref: fresh.ref, status: fresh.status });
   item = fresh;
   const refuseIfContested = async () => {
     const contest = await checkLaneContest(client, item, ctx.session, report.viewer);
@@ -12951,6 +12972,7 @@ async function waitForPrChecks(deps) {
 
 // src/bootstrap-ruleset.ts
 var PRODUCT_RULESET_NAME = "mmi-product-required-checks";
+var PRODUCT_GATE_CONTEXT = "gate";
 var PRODUCT_RULESET_PATH = ".github/rulesets/mmi-product-required-checks.json";
 function reseedProductRulesetStrictness(current, seed) {
   const parse = (raw) => {
@@ -12993,6 +13015,15 @@ function rulesetStrictPolicy(ruleset) {
   const rules = (ruleset.rules ?? []).filter((rule) => rule.type === "required_status_checks");
   return rules.length > 0 && rules.every((rule) => rule.parameters?.strict_required_status_checks_policy === true);
 }
+function committedRequiredContexts(raw) {
+  if (raw == null) return [PRODUCT_GATE_CONTEXT];
+  try {
+    const contexts = rulesetRequiredContexts(stripRulesetComment(raw));
+    return contexts.length ? [...new Set(contexts)] : [PRODUCT_GATE_CONTEXT];
+  } catch {
+    return [PRODUCT_GATE_CONTEXT];
+  }
+}
 function rulesetBranchIncludes(ruleset) {
   const raw = ruleset.conditions?.ref_name?.include;
   return Array.isArray(raw) ? [...new Set(raw.filter((ref) => typeof ref === "string" && ref.length > 0))].sort((a, b) => a.localeCompare(b)) : [];
@@ -15586,10 +15617,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.33",
-    tag: "v4.3.33",
-    commit: "1c3419ebea6e",
-    npm: "@mutmutco/cli@4.3.33"
+    version: "4.3.34",
+    tag: "v4.3.34",
+    commit: "09818c6f3de7",
+    npm: "@mutmutco/cli@4.3.34"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15606,14 +15637,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.33"
+          v3Target: "v4.3.34"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.33 and redeploy the Hub Lambda from tag v4.3.33 (1c3419ebea6e); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.33 (@mutmutco/cli@4.3.33, tag commit 1c3419ebea6e \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.34 and redeploy the Hub Lambda from tag v4.3.34 (09818c6f3de7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.34 (@mutmutco/cli@4.3.34, tag commit 09818c6f3de7 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -25657,6 +25688,20 @@ function refuseRateLimited(e, json) {
   process.exitCode = 1;
   return true;
 }
+function refuseNotClaimable(e, json) {
+  if (!isNotClaimable(e)) return false;
+  const message2 = `board claim failed: ${e.message}`;
+  if (json) {
+    console.log(formatErrorEnvelope(message2, {
+      code: ERROR_CODES.ERR_STATE_CONFLICT,
+      issue_ref: e.issueRef,
+      ...e.boardStatus === void 0 ? {} : { board_status: e.boardStatus }
+    }));
+  }
+  console.error(`mmi-cli ${message2}`);
+  process.exitCode = 1;
+  return true;
+}
 function registerBoardCommands(program3) {
   function withDiscoverMissDetail(message2) {
     const miss = lastBoardDiscoverMiss();
@@ -25741,6 +25786,7 @@ function registerBoardCommands(program3) {
         printClaimWarnings(result.warnings);
       } catch (e) {
         if (refuseRateLimited(e, o.json)) return;
+        if (refuseNotClaimable(e, o.json)) return;
         return failGraceful(`board claim failed: ${e.message}`);
       }
       return;
@@ -26939,7 +26985,6 @@ var requiredBoardSwimlaneField = "Repository";
 var requiredBoardCardFields = ["Title", "Assignees", "Status", "Labels", "Linked pull requests", "Parent issue", "Sub-issues progress", "Priority"];
 var requiredOrgRulesetTypes = ["pull_request", "non_fast_forward", "deletion"];
 var requiredHubStatusChecks = ["cli", "infra", "docs"];
-var requiredProductStatusChecks = ["gate"];
 function expectedBranches(repoClass, releaseTrack) {
   if (isReleaseTrack(releaseTrack)) return branchesForTrack(releaseTrack);
   return repoClass === "content" ? ["main"] : ["development", "rc", "main"];
@@ -27080,6 +27125,18 @@ function filledDocCheck(label, text, path2) {
   const unfilled = unfilledDocPlaceholders(text);
   return { ok: unfilled.length === 0, label, detail: unfilled.length ? `unfilled: ${unfilled.join(", ")}` : void 0 };
 }
+var NPMRC_PATHS = [".npmrc", "web/.npmrc"];
+var SCOPED_GITHUB_PACKAGES_RE = /^\s*@[A-Za-z0-9-]+:registry\s*=\s*https:\/\/npm\.pkg\.github\.com/m;
+var GITHUB_PACKAGES_AUTH_RE = /^\s*\/\/npm\.pkg\.github\.com\/:_authToken\s*=/m;
+function npmrcGitHubPackagesAuthCheck(path2, text) {
+  if (text === null || !SCOPED_GITHUB_PACKAGES_RE.test(text)) return null;
+  const ok = GITHUB_PACKAGES_AUTH_RE.test(text);
+  return {
+    ok,
+    label: `${path2} authenticates GitHub Packages`,
+    detail: ok ? void 0 : `${path2} points a scope at npm.pkg.github.com with no token line \u2014 add \`//npm.pkg.github.com/:_authToken=\${NODE_AUTH_TOKEN}\` (the value stays in the environment, never in the file) or npm ci 401s outside a setup-node CI job`
+  };
+}
 function isCentralContainerDeployModel(model) {
   return model === "tenant-container" || model === "solo-container";
 }
@@ -27188,12 +27245,25 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
   for (const path2 of requiredIssueTemplates) {
     checks.push({ ok: await contentExists2(deps, repo, baseBranch, path2), label: `issue template exists: ${path2}` });
   }
+  let productContexts = [PRODUCT_GATE_CONTEXT];
   if (repo !== HUB_REPO5 && repoClass === "deployable") {
-    for (const path2 of requiredProductWorkflows) {
-      checks.push({ ok: await contentExists2(deps, repo, baseBranch, path2), label: `gate workflow exists: ${path2}` });
+    const rulesetRaw = await contentText(deps, repo, baseBranch, requiredProductRulesetRef);
+    productContexts = committedRequiredContexts(rulesetRaw);
+    const workflowCandidates = [.../* @__PURE__ */ new Set([
+      ...productContexts.map((context) => `.github/workflows/${context}.yml`),
+      ...requiredProductWorkflows
+    ])];
+    const presentWorkflows = [];
+    for (const path2 of workflowCandidates) {
+      if (await contentExists2(deps, repo, baseBranch, path2)) presentWorkflows.push(path2);
     }
     checks.push({
-      ok: await contentExists2(deps, repo, baseBranch, requiredProductRulesetRef),
+      ok: presentWorkflows.length > 0,
+      label: "gate workflow exists",
+      detail: presentWorkflows.length ? presentDetail(presentWorkflows) : `none of: ${workflowCandidates.join(", ")}`
+    });
+    checks.push({
+      ok: rulesetRaw !== null,
       label: "product required-check ruleset reference exists",
       detail: `expected: ${requiredProductRulesetRef} (apply as an active repo ruleset after bootstrap)`
     });
@@ -27211,6 +27281,10 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
       });
     }
   }
+  for (const path2 of NPMRC_PATHS) {
+    const check = npmrcGitHubPackagesAuthCheck(path2, await contentText(deps, repo, baseBranch, path2));
+    if (check) checks.push(check);
+  }
   const portRangeCheck = centralContainerPortRangeCheck(deps.deployModel, deps.projectMeta?.portRange, repo);
   if (portRangeCheck) checks.push(portRangeCheck);
   checks.push(...deployRowChecks(
@@ -27424,7 +27498,7 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
       detail: productRuleset?.enforcement !== "active" ? `${PRODUCT_RULESET_NAME} is ${productRuleset?.enforcement ?? "missing"} \u2014 run mmi-cli devops ci reconcile --apply --repo ${repo} once the gate is green` : void 0
     });
     const statusChecks = rulesetStatusChecks2(rulesets.filter((r) => r.target === "branch" && r.enforcement === "active"));
-    const missing = requiredProductStatusChecks.filter((check) => !statusChecks.has(check));
+    const missing = productContexts.filter((check) => !statusChecks.has(check));
     checks.push({
       ok: missing.length === 0,
       label: "product required status checks configured",
@@ -45488,6 +45562,19 @@ function recoveryPointerFor(path2) {
   if (runnable === path2) return `run: mmi-cli ${canonicalPathFor(runnable)} \u2026`;
   return `'${path2}' is not a registered command \u2014 run \`mmi-cli ${canonicalPathFor(runnable)} --help\` for what lives under it`;
 }
+function refuseHouseShim(typedPath, message2) {
+  if (argvWantsJson3()) {
+    consoleIo.log(
+      formatErrorEnvelope(message2, {
+        code: ERROR_CODES.ERR_UNKNOWN_FLAG,
+        did_you_mean: canonicalPathFor(registeredPathPrefix(typedPath))
+      })
+    );
+  }
+  process.stderr.write(`${message2}
+`);
+  hardExit(2);
+}
 function resolveHouseShim(argv) {
   const houseToken = argv[2];
   if (!houseToken) return;
@@ -45496,11 +45583,10 @@ function resolveHouseShim(argv) {
     const flatPath = flatTokens.join(" ");
     const flatHouse = houseForPath(flatPath);
     if (!flatHouse || flatHouse === "core") return;
-    process.stderr.write(
-      `mmi-cli: the flat '${flatPath}' alias was removed in ${COMPAT_SHIM_DEATH_WAVE} (#4316) \u2014 ${recoveryPointerFor(flatPath)}
-`
+    refuseHouseShim(
+      flatPath,
+      `mmi-cli: the flat '${flatPath}' alias was removed in ${COMPAT_SHIM_DEATH_WAVE} (#4316) \u2014 ${recoveryPointerFor(flatPath)}`
     );
-    hardExit(2);
   }
   const remainder = argv.slice(3);
   const first = remainder[0];
@@ -45520,17 +45606,15 @@ function resolveHouseShim(argv) {
     return;
   }
   if (actual) {
-    process.stderr.write(
-      `mmi-cli ${houseToken}: '${lookupPath}' lives in house '${actual}' \u2014 ${recoveryPointerFor(lookupPath)}
-`
-    );
-  } else {
-    process.stderr.write(
-      `mmi-cli ${houseToken}: '${first}' is not a command of house '${houseToken}' \u2014 run \`mmi-cli ${houseToken} --help\` for its commands
-`
+    refuseHouseShim(
+      lookupPath,
+      `mmi-cli ${houseToken}: '${lookupPath}' lives in house '${actual}' \u2014 ${recoveryPointerFor(lookupPath)}`
     );
   }
-  hardExit(2);
+  refuseHouseShim(
+    lookupPath,
+    `mmi-cli ${houseToken}: '${first}' is not a command of house '${houseToken}' \u2014 run \`mmi-cli ${houseToken} --help\` for its commands`
+  );
 }
 function printHouseRootHelp(house) {
   const manifest = buildCommandManifest(program2);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.33",
+  "version": "4.3.34",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",