@mutmutco/cli 4.3.40 → 4.3.42

package/dist/main.cjs

@@ -13692,8 +13692,10 @@ function walk(dir, root, out) {
   return out;
 }
 function defaultListDocs(root) {
-  const docsDir = (0, import_node_path12.join)(root, "docs");
-  const docs = ((0, import_node_fs14.existsSync)(docsDir) ? walk(docsDir, root, []) : []).filter(
+  const docs = ["docs", "skills/org-guide", "skills/mmi-help"].flatMap((path2) => {
+    const directory = (0, import_node_path12.join)(root, path2);
+    return (0, import_node_fs14.existsSync)(directory) ? walk(directory, root, []) : [];
+  }).filter(
     (rel) => !SKIP_WALK.some((skip) => rel.startsWith(skip))
   );
   return [...ROOT_DOCS.filter((rel) => (0, import_node_fs14.existsSync)((0, import_node_path12.join)(root, rel))), ...docs];
@@ -14099,7 +14101,7 @@ function expectedHosts(cfg) {
   if (cfg.fofuSubdomain !== void 0) {
     out.push(cfg.fofuSubdomain ? `${cfg.fofuSubdomain}.fofu.ai` : "fofu.ai");
   }
-  return uniq(out);
+  return uniq([...out, ...cfg.edgeHosts ?? []]);
 }
 function expectedJsOrigins(cfg) {
   return uniq([...expectedHosts(cfg).map((h) => `https://${h}`), ...LOOPBACK]);
@@ -14166,7 +14168,7 @@ function parseOauthConfig(mmiConfig, slug) {
   const meta = mmiConfig ?? {};
   const rawFofuSub = raw.fofuSubdomain;
   const fofuSubdomain = meta.fofuEnabled === true ? typeof rawFofuSub === "string" ? rawFofuSub : defaultSubdomain(slug) : void 0;
-  return { subdomains, domains, callbackPath, extraCallbackPaths, fofuSubdomain };
+  return { subdomains, domains, callbackPath, extraCallbackPaths, fofuSubdomain, edgeHosts: Object.values(edgeDomainsByStage(mmiConfig)) };
 }
 function probeRedirectUri(callbackPath, port = 9123) {
   return `http://localhost:${port}${callbackPath}`;
@@ -14185,6 +14187,20 @@ function buildAuthorizeProbeUrl(clientId, redirectUri) {
 function authorizeBodyHasMismatch(body) {
   return /redirect_uri_mismatch/i.test(body);
 }
+async function probeOauthRedirects(cfg, clientId, request = fetch) {
+  const uris = uniq([probeRedirectUri(cfg.callbackPath), ...expectedRedirectUris(cfg)]);
+  const signal = AbortSignal.timeout(1e4);
+  const results = [];
+  for (let i = 0; i < uris.length; i += 4) {
+    results.push(...await Promise.all(uris.slice(i, i + 4).map(async (redirectUri) => {
+      const response = await request(buildAuthorizeProbeUrl(clientId, redirectUri), { redirect: "follow", signal });
+      const mismatch = authorizeBodyHasMismatch(await response.text());
+      if (!mismatch && !response.ok) throw new Error(`authorize probe returned HTTP ${response.status}`);
+      return { redirectUri, mismatch };
+    })));
+  }
+  return results;
+}
 
 // src/project-runtime.ts
 function hasRuntimeSecretContract(contract) {
@@ -15694,10 +15710,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.40",
-    tag: "v4.3.40",
-    commit: "487948fabf28",
-    npm: "@mutmutco/cli@4.3.40"
+    version: "4.3.42",
+    tag: "v4.3.42",
+    commit: "d890700b4096",
+    npm: "@mutmutco/cli@4.3.42"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15714,14 +15730,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.40"
+          v3Target: "v4.3.42"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.40 and redeploy the Hub Lambda from tag v4.3.40 (487948fabf28); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.40 (@mutmutco/cli@4.3.40, tag commit 487948fabf28 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.42 and redeploy the Hub Lambda from tag v4.3.42 (d890700b4096); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.42 (@mutmutco/cli@4.3.42, tag commit d890700b4096 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -31040,7 +31056,16 @@ async function collectOnboardStatus(opts = {}) {
     readKnown: () => readFileSyncSafe((0, import_node_path28.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs30.readFileSync),
     readSettings: () => readFileSyncSafe((0, import_node_path28.join)(home, ".claude", "settings.json"), import_node_fs30.readFileSync)
   });
-  return { track, board, registry: registry2, secrets, plugin, doors: opts.doors ?? [], nextCommand };
+  return {
+    guide: "Read the MMI org-guide skill before project work; load only the relevant topic. Use mmi-help for a short introduction.",
+    track,
+    board,
+    registry: registry2,
+    secrets,
+    plugin,
+    doors: opts.doors ?? [],
+    nextCommand
+  };
 }
 function registerDiscoveryCommands(program3) {
   program3.command("status").description("unified repo snapshot: branch, worktrees, open PRs (yours), claimed board items, stage state").option("--json", "machine-readable output").action(async (o) => {
@@ -31090,6 +31115,7 @@ function registerDiscoveryCommands(program3) {
       if (o.json) {
         console.log(JSON.stringify(report, null, 2));
       } else {
+        console.log(`Guide: ${report.guide}`);
         console.log(`Track: ${report.track}`);
         console.log(`Board: ${report.board.ok ? "\u2713" : "\u2717"} ${report.board.detail}`);
         console.log(`Registry: ${report.registry.ok ? "\u2713" : "\u2717"} ${report.registry.detail}`);
@@ -42207,7 +42233,7 @@ function registerDeveloperCommands(program3) {
       await failGraceful(e.message);
     }
   });
-  docs.command("refs").description("deterministic doc reference gate: every backticked repo path, relative .md link, `mmi-cli` command ref, and `<!-- pinned by \u2014 -->` comment across docs/** + README.md + architecture.md must resolve, or exit 1 (#3339)").option("--json", "machine-readable findings list: { ok, docCount, findings[], warnings[] }").addOption(new Option("--repo <owner/repo>", "not accepted \u2014 docs refs reads the current checkout").hideHelp()).action(async (o) => {
+  docs.command("refs").description("deterministic doc reference gate: repo paths, markdown links, mmi-cli command refs, and pins across docs, org-guide, mmi-help, README and architecture must resolve, or exit 1").option("--json", "machine-readable findings list: { ok, docCount, findings[], warnings[] }").addOption(new Option("--repo <owner/repo>", "not accepted \u2014 docs refs reads the current checkout").hideHelp()).action(async (o) => {
     try {
       if (o.repo) {
         const guard = planTrainApplyRepoGuard(o.repo, await resolveRepo(), `mmi-cli oracle docs refs${o.json ? " --json" : ""}`, "docs refs");
@@ -45559,22 +45585,22 @@ oauth.command("verify").description("probe Google authorize with an arbitrary po
     return failGraceful("org oauth verify: no client_id (pass --client-id, or provision the repo so GOOGLE_CLIENT_ID exists)");
   }
   const redirectUri = probeRedirectUri(oc.callbackPath);
-  let body = "";
+  let probes;
   try {
-    const res = await fetch(buildAuthorizeProbeUrl(clientId, redirectUri), { redirect: "follow", signal: AbortSignal.timeout(1e4) });
-    body = await res.text();
+    probes = await probeOauthRedirects(oc, clientId);
   } catch (e) {
     return failGraceful(`org oauth verify: probe request failed: ${e.message}`);
   }
-  const mismatch = authorizeBodyHasMismatch(body);
+  const portAgnostic = !probes[0].mismatch;
+  const mismatches = probes.filter((probe) => probe.mismatch);
   if (o.json) {
-    console.log(JSON.stringify({ slug, redirectUri, portAgnostic: !mismatch }));
-  } else if (mismatch) {
-    console.error(`FAIL ${slug}: redirect_uri_mismatch for ${redirectUri} \u2014 client is not port-agnostic (run /oauth-provision)`);
+    console.log(JSON.stringify({ slug, redirectUri, portAgnostic, probes }));
+  } else if (mismatches.length) {
+    for (const probe of mismatches) console.error(`FAIL ${slug}: redirect_uri_mismatch for ${probe.redirectUri} \u2014 run /oauth-provision`);
   } else {
-    console.log(`PASS ${slug}: ${redirectUri} accepted \u2014 port-agnostic OAuth is live`);
+    console.log(`PASS ${slug}: no redirect_uri_mismatch across ${probes.length} callbacks, including the arbitrary-port loopback`);
   }
-  if (mismatch) process.exitCode = 1;
+  if (mismatches.length) process.exitCode = 1;
 });
 registerCollaborationCommands(program2);
 function ciAuditDeps2() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.40",
+  "version": "4.3.42",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",