@mutmutco/cli 4.3.62 → 4.3.63

package/dist/main.cjs

@@ -15801,10 +15801,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.3.62",
-    tag: "v4.3.62",
-    commit: "d664b30d09d7",
-    npm: "@mutmutco/cli@4.3.62"
+    version: "4.3.63",
+    tag: "v4.3.63",
+    commit: "23180ae03611",
+    npm: "@mutmutco/cli@4.3.63"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15821,14 +15821,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.3.62"
+          v3Target: "v4.3.63"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.3.62 and redeploy the Hub Lambda from tag v4.3.62 (d664b30d09d7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.3.62 (@mutmutco/cli@4.3.62, tag commit d664b30d09d7 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.3.63 and redeploy the Hub Lambda from tag v4.3.63 (23180ae03611); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.3.63 (@mutmutco/cli@4.3.63, tag commit 23180ae03611 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -42726,6 +42726,13 @@ function summaryFileLines(content, neutralize = true) {
     return escapeMrkdwn(neutralize ? neutralizeHubProductBrands(bare) : bare);
   }).filter(Boolean).map((l) => `\u2022 ${l}`);
 }
+function announceSummaryFidelity(lines2, rangeLog) {
+  const shipped = new Set(rangeLog.match(/#\d+/g) ?? []);
+  if (shipped.size === 0) return null;
+  const invented = [...new Set(lines2.flatMap((l) => l.match(/#\d+/g) ?? []))].filter((ref) => !shipped.has(ref));
+  if (invented.length === 0) return null;
+  return `--announce-summary-file cites ${invented.join(", ")}, which ship in no commit of this release range \u2014 a summary line must describe work that actually shipped. Rebuild the summary from \`git log origin/main..HEAD\` (read commit BODIES too: a bundled PR closes issues its subject never names), then rerun the same release command \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
+}
 async function resolveAnnounceTarget(deps, repo) {
   if (repo.toLowerCase() === ANNOUNCE_REPO.toLowerCase()) return { kind: "alerts" };
   const target = deps.fetchReleaseTarget ? await deps.fetchReleaseTarget(slugOf(repo)) : { channel: null, language: "en" };
@@ -43449,6 +43456,14 @@ async function runHotfixRelease(deps, versionInput, options = {}, doctor = runTr
     if (lines2.length < 3 || lines2.length > 6) {
       throw new Error(`--announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`);
     }
+    let rangeLog;
+    try {
+      rangeLog = await deps.run("git", ["log", "--format=%B", "origin/main..HEAD"]);
+    } catch (e) {
+      throw new Error(`could not read the hotfix commit range (git log origin/main..HEAD: ${e.message}) \u2014 the --announce-summary-file lines cannot be checked against what actually ships; fix the checkout, then rerun`);
+    }
+    const invented = announceSummaryFidelity(lines2, rangeLog);
+    if (invented) throw new Error(invented);
   }
   const anchors = { repo: ctx.repo, tag, tagSha: mergedSha };
   const start = await startReleaseLedger(ledger, anchors, { lane: "hotfix" });
@@ -44173,7 +44188,25 @@ async function announceSummaryRefusal(path2) {
   if (lines2.length < 3 || lines2.length > 6) {
     return `release: --announce-summary-file must contain 3-6 non-empty LLM-curated lines (found ${lines2.length}) \u2014 see docs/Guides/train-troubleshooting.md#announce-summary-missing`;
   }
-  return null;
+  try {
+    await execFileP("git", ["fetch", "origin"], { timeout: GIT_TIMEOUT_MS });
+  } catch (e) {
+    return `release: could not fetch origin to check the --announce-summary-file lines (git fetch origin: ${e.message}) \u2014 the lines cannot be checked against what actually ships; fix the checkout, then rerun the same release command`;
+  }
+  const revs = ["HEAD"];
+  try {
+    const upstream = await execFileP("git", ["rev-parse", "--verify", "--quiet", "@{upstream}"], { timeout: GIT_TIMEOUT_MS });
+    if (upstream.stdout.trim()) revs.push("@{upstream}");
+  } catch {
+  }
+  let rangeLog;
+  try {
+    rangeLog = (await execFileP("git", ["log", "--format=%B", ...revs, "--not", "origin/main"], { timeout: GIT_TIMEOUT_MS })).stdout;
+  } catch (e) {
+    return `release: could not read the release commit range (git log ${revs.join(" ")} --not origin/main: ${e.message}) \u2014 the --announce-summary-file lines cannot be checked against what actually ships; fix the checkout, then rerun`;
+  }
+  const invented = announceSummaryFidelity(lines2, rangeLog);
+  return invented ? `release: ${invented}` : null;
 }
 function trainApplyDeps() {
   return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.3.62",
+  "version": "4.3.63",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",