@mutmutco/cli 4.4.2 → 4.4.4

package/dist/main.cjs

@@ -15870,10 +15870,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.4.2",
-    tag: "v4.4.2",
-    commit: "678e071c6859",
-    npm: "@mutmutco/cli@4.4.2"
+    version: "4.4.4",
+    tag: "v4.4.4",
+    commit: "d35da22e2e0b",
+    npm: "@mutmutco/cli@4.4.4"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15890,14 +15890,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.4.2"
+          v3Target: "v4.4.4"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.4.2 and redeploy the Hub Lambda from tag v4.4.2 (678e071c6859); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.4.2 (@mutmutco/cli@4.4.2, tag commit 678e071c6859 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.4.4 and redeploy the Hub Lambda from tag v4.4.4 (d35da22e2e0b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.4.4 (@mutmutco/cli@4.4.4, tag commit d35da22e2e0b \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -18813,20 +18813,64 @@ function tenantPublishRecoveryCommand(slug, repo, ref, stage, publishDir) {
   if (publishDir && publishDir !== ".") parts.push(`-f publishDir=${publishDir}`);
   return parts.join(" ");
 }
-var PUBLISH_IDEMPOTENT_MARKER = /already on npm/i;
+var PUBLISH_CONFLICT_SIGNAL = /E409|cannot publish over|previously published|\b(?:HTTP|status|code)\s*[:=]?\s*409\b|\b409\s+Conflict\b/i;
 var PUBLISH_LOG_RETRY_ATTEMPTS = 4;
 var PUBLISH_LOG_RETRY_DELAY_MS = 6e3;
-async function reconcilePublishFailure(deps, runId) {
-  if (runId == null) return "failure";
+function publishRegistryTarget(meta, repo, publishRef) {
+  const version = publishRef.replace(/^v/, "");
+  if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(version)) return void 0;
+  try {
+    return { name: resolveReleaseAbortNpmPackage(meta, repo), version };
+  } catch {
+    return void 0;
+  }
+}
+async function provePublishedVersion(deps, target) {
+  try {
+    return clean2(await deps.run("npm", ["view", `${target.name}@${target.version}`, "version"])) === target.version;
+  } catch {
+    return false;
+  }
+}
+function publishReconcileFailureNote(input) {
+  if (input.signal && input.target) {
+    return `run FAILED and its log shows a publish conflict (${input.signal}) but the registry does not report ${input.target.name}@${input.target.version} live \u2014 the failure stands (verify with an authenticated registry read, never a bare npm view \u2014 see docs/Guides/train-troubleshooting.md#publish-private-package)`;
+  }
+  if (input.signal) {
+    return `run FAILED and its log shows a publish conflict (${input.signal}) but no npm package name could be resolved to prove the exact version live \u2014 the failure stands`;
+  }
+  if (input.readError) {
+    return `run FAILED and its log could not be read (${input.readError}) \u2014 the failure stands`;
+  }
+  return 'run FAILED and its log shows no publish-conflict signal (E409, "cannot publish over", "previously published", or a 409 status) \u2014 the failure stands';
+}
+async function reconcilePublishFailure(deps, runId, target) {
+  if (runId == null) {
+    return { status: "failure", note: "the failed publish run had no run id to re-read \u2014 the failure stands" };
+  }
   const sleep2 = resolveSleep(deps);
+  let signal;
+  let readError;
   for (let attempt = 0; attempt < PUBLISH_LOG_RETRY_ATTEMPTS; attempt++) {
     if (attempt > 0) await sleep2(PUBLISH_LOG_RETRY_DELAY_MS);
     const log = await fetchControlRunLog(deps, runId);
-    if (log.ok && PUBLISH_IDEMPOTENT_MARKER.test(log.log)) return "success";
+    if (!log.ok) {
+      readError = log.error;
+      continue;
+    }
+    const match = log.log.match(PUBLISH_CONFLICT_SIGNAL);
+    if (!match) continue;
+    signal = match[0];
+    if (target && await provePublishedVersion(deps, target)) {
+      return {
+        status: "success",
+        note: `registry reports ${target.name}@${target.version} live; run failed with a publish conflict (${signal}) \u2014 #2428/#6777`
+      };
+    }
   }
-  return "failure";
+  return { status: "failure", note: publishReconcileFailureNote({ signal, readError, target }) };
 }
-async function dispatchTenantPublish(deps, ctx, stage, ref, watch, dispatchFailure = "throw", publishDir) {
+async function dispatchTenantPublish(deps, ctx, stage, ref, watch, dispatchFailure = "throw", publishDir, publishTarget) {
   deps.warn?.("Release: Starting package publishing");
   const since = (deps.now ?? Date.now)();
   const dispatchArgs = [
@@ -18867,20 +18911,25 @@ async function dispatchTenantPublish(deps, ctx, stage, ref, watch, dispatchFailu
   let deployStatus = watch ? await watchTenantRun(deps, runId) : "pending";
   let note = `dispatched tenant-publish.yml (slug=${ctx.slug}, ref=${ref}, stage=${stage})`;
   if (deployStatus === "failure") {
-    const reconciled = await reconcilePublishFailure(deps, runId);
-    if (reconciled === "success") {
-      deployStatus = "success";
-      note = `${note}; run reported failure but its log confirms the version is already on npm (idempotent E409 \u2014 #2428)`;
-    } else {
-      note = `${note}; run FAILED and its log never confirmed the version landed \u2014 verify from the run log or an authenticated registry read, never a bare npm view \u2014 see docs/Guides/train-troubleshooting.md#publish-private-package`;
-    }
+    const reconciled = await reconcilePublishFailure(deps, runId, publishTarget);
+    deployStatus = reconciled.status;
+    note = `${note}; ${reconciled.note}`;
   }
   return { note, runId, runUrl, deployStatus };
 }
 async function dispatchPublishIfRequired(deps, ctx, meta, model, stage, publishRef, watch, dispatchFailure) {
   if (!meta.publishRequired || stage !== "main") return null;
   if (model !== "tenant-container" && model !== "solo-container") return null;
-  return dispatchTenantPublish(deps, ctx, stage, publishRef, watch, dispatchFailure, meta.publishDir);
+  return dispatchTenantPublish(
+    deps,
+    ctx,
+    stage,
+    publishRef,
+    watch,
+    dispatchFailure,
+    meta.publishDir,
+    publishRegistryTarget(meta, ctx.repo, publishRef)
+  );
 }
 function appendPublishDispatch(deploy, publish) {
   if (!publish) return deploy;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.4.2",
+  "version": "4.4.4",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",