@mutmutco/cli 4.5.11 → 4.5.13

package/dist/main.cjs

@@ -6985,6 +6985,9 @@ async function retireProject(slug, deps) {
 async function setDeployCoords(slug, payload, deps) {
   return postJson(`/projects/${encodeURIComponent(slug)}/deploy`, payload, deps);
 }
+async function retireDeployCoords(slug, stage, deps) {
+  return postJson(`/projects/${encodeURIComponent(slug)}/deploy/${encodeURIComponent(stage)}`, {}, deps, "DELETE", { noRetry: true });
+}
 async function postSchedulesLift(repo, schedules, deps) {
   const res = await postJson("/schedules/lift", { repo, schedules }, deps);
   if (!res.ok && res.status === 404) return { ...res, unreachable: "route-absent" };
@@ -15998,10 +16001,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.11",
-    tag: "v4.5.11",
-    commit: "3e598c9aa265",
-    npm: "@mutmutco/cli@4.5.11"
+    version: "4.5.13",
+    tag: "v4.5.13",
+    commit: "33eeee1ae7f6",
+    npm: "@mutmutco/cli@4.5.13"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -16018,14 +16021,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.11"
+          v3Target: "v4.5.13"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.11 and redeploy the Hub Lambda from tag v4.5.11 (3e598c9aa265); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.11 (@mutmutco/cli@4.5.11, tag commit 3e598c9aa265 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.13 and redeploy the Hub Lambda from tag v4.5.13 (33eeee1ae7f6); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.13 (@mutmutco/cli@4.5.13, tag commit 33eeee1ae7f6 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -24796,7 +24799,6 @@ async function runReleaseResumePipeline(deps, options, prepared) {
 Live origin/tag/Release proof stays authoritative; nothing was written. Inspect ${ledger.path} before retrying.`
     );
   }
-  const shippedBefore = shipLegsGreen(persisted?.phases.deploy, persisted?.phases.publish);
   if (persisted?.lane && persisted.lane !== "release") {
     throw new Error(`release --resume refused: the ${tag} ledger belongs to the ${persisted.lane} lane \u2014 finish it with ${ledgerLaneResumeCommand(persisted)} (#6068). Nothing was written.`);
   }
@@ -24884,7 +24886,7 @@ Nothing was written. Inspect ${ledger.path} (or clear it only after proving the
     Object.assign(dispatch2, shippedDispatch);
     if (isJervHubRepo(ctx.repo)) steps2.push(dispatch2.note);
     const settledBySupersede = persisted?.phases.deploy.superseded === true || persisted?.phases.publish.superseded === true;
-    const announceNote2 = persisted && !shippedBefore && !settledBySupersede && (prodReleaseTargets(deployModel).length > 0 || deployModel === "vercel" || companion !== null) ? await announceShippedRelease(
+    const announceNote2 = persisted && !settledBySupersede && (prodReleaseTargets(deployModel).length > 0 || deployModel === "vercel" || companion !== null) ? await announceShippedRelease(
       deps,
       { repo: ctx.repo, tag, summaryFile: options.announceSummaryFile },
       deployModel,
@@ -37330,6 +37332,41 @@ function writeError(res) {
   return `HTTP ${res.status}${detail ? ` \u2014 ${detail}` : ""}`;
 }
 
+// src/deploy-retire.ts
+function buildDeployRetirePlan(input) {
+  const target = input.target?.trim();
+  if (!target) {
+    throw new Error("org project deploy retire: pass <owner/repo> or a slug");
+  }
+  const slug = (target.includes("/") ? target.split("/").pop() : target).toLowerCase();
+  if (!/^[a-z0-9][a-z0-9-]*$/.test(slug)) {
+    throw new Error(`org project deploy retire: "${target}" does not resolve to a valid slug`);
+  }
+  if (!["dev", "rc", "main"].includes(input.stage)) {
+    throw new Error("org project deploy retire: --stage must be dev, rc, or main");
+  }
+  return { slug, stage: input.stage, apply: Boolean(input.apply) };
+}
+async function runDeployRetire(input, deps) {
+  const plan = buildDeployRetirePlan(input);
+  const facts = await fetchDeployFactsBySlug(plan.slug, deps.registry);
+  const existing = facts ? facts.stages[plan.stage] ?? null : void 0;
+  if (!plan.apply) {
+    return { slug: plan.slug, stage: plan.stage, applied: false, ok: facts !== null, existing };
+  }
+  const res = await retireDeployCoords(plan.slug, plan.stage, deps.registry);
+  if (!res.ok) {
+    return { slug: plan.slug, stage: plan.stage, applied: true, ok: false, existing, error: writeError2(res) };
+  }
+  const removed = res.body?.removed;
+  return { slug: plan.slug, stage: plan.stage, applied: true, ok: true, existing, removed };
+}
+function writeError2(res) {
+  if (res.error) return res.error;
+  const detail = res.body?.error ?? "";
+  return `HTTP ${res.status}${detail ? ` \u2014 ${detail}` : ""}`;
+}
+
 // src/schedules-commands.ts
 var import_promises5 = require("node:fs/promises");
 init_clean_exit();
@@ -47958,7 +47995,7 @@ async function runProjectDeployGet(repoOrSlug, o) {
   console.log(JSON.stringify(payload));
 }
 var projectDeploy = project.command("deploy").description("read nonsecret DEPLOY# facts (domain, port, deploy path, substrate, host presence)").argument("[ownerRepo]", "shorthand for `get <owner/repo>`").addOption(new Option("--stage <stage>", "dev | rc | main").choices(["dev", "rc", "main"])).option("--json", "machine-readable output").action(async (ownerRepo, o) => runProjectDeployGet(ownerRepo, o));
-projectDeploy.command("get [owner/repo]").description("read nonsecret DEPLOY# facts for one project; defaults to the current repo").addOption(new Option("--stage <stage>", "dev | rc | main").choices(["dev", "rc", "main"])).option("--json", "machine-readable output").action(async (repoOrSlug, o) => runProjectDeployGet(repoOrSlug, o));
+projectDeploy.command("get [owner/repo]").description("read nonsecret DEPLOY# facts for one project; defaults to the current repo").addOption(new Option("--stage <stage>", "dev | rc | main").choices(["dev", "rc", "main"])).option("--json", "machine-readable output").action(async (repoOrSlug, o) => runProjectDeployGet(repoOrSlug, { stage: projectDeploy.opts().stage, json: o.json }));
 projectDeploy.command("doctor").description("read-only estate scan for duplicate Hetzner (sshHost, port) DEPLOY# coordinates (#5431); master-only; never auto-reassigns ports").option("--json", "machine-readable output").action(async (o) => {
   const cfg = await loadConfig();
   const report = await fetchDeployPortCollisions(registryClientDeps(cfg));
@@ -47970,6 +48007,40 @@ projectDeploy.command("doctor").description("read-only estate scan for duplicate
   if (report.error && report.status !== 403) return failGraceful(`org project deploy doctor: ${report.error}`);
   if (!report.ok && !report.error) process.exitCode = 1;
 });
+projectDeploy.command("retire [owner/repo]").description("retire (tombstone) one stage's DEPLOY# row for a project that no longer deploys through it (#7095, master-only). --stage is required. DRY-RUN by default \u2014 pass --apply to actually write; defaults to the current repo. Refuses a tenant-container project's live main row.").addOption(new Option("--stage <stage>", "dev | rc | main (required)").choices(["dev", "rc", "main"])).option("--apply", "actually retire (default is a dry-run preview of the row that would be retired)").option("--json", "machine-readable output").action(async (repoOrSlug, o) => {
+  const stage = projectDeploy.opts().stage;
+  if (!stage) return fail("org project deploy retire: --stage is required (dev | rc | main)");
+  const cfg = await loadConfig();
+  let target;
+  try {
+    target = await projectTarget("org project deploy retire", repoOrSlug);
+  } catch (e) {
+    return fail(e.message);
+  }
+  let result;
+  try {
+    result = await runDeployRetire(
+      { target, stage, apply: Boolean(o.apply) },
+      { registry: registryClientDeps(cfg) }
+    );
+  } catch (e) {
+    return fail(e.message);
+  }
+  if (o.json) {
+    printLine(JSON.stringify(result));
+  } else {
+    const verb = result.applied ? "retired" : "WOULD retire (dry-run; pass --apply to write)";
+    printLine(`org project deploy retire: ${verb} DEPLOY#${result.stage} for ${result.slug}`);
+    if (!result.ok) {
+      printLine(`  FAILED \u2014 ${result.error}`);
+    } else if (result.applied) {
+      printLine(`  removed=${result.removed ?? "unknown"}`);
+    } else {
+      printLine(`  ${result.existing ? "live row present \u2014 would be tombstoned" : "no live row (already absent/tombstoned)"}`);
+    }
+  }
+  if (!result.ok) return failGraceful(`org project deploy retire: ${result.error ?? "read failed"}`);
+});
 project.command("set [owner/repo]").description("upsert project META (idempotent merge; master-gated)").addOption(new Option("--class <class>", "deployable | content").choices(["deployable", "content"])).addOption(new Option("--project-type <type>", `${PROJECT_TYPES.join(" | ")} (capability shape)`).choices([...PROJECT_TYPES])).addOption(new Option("--deploy-model <model>", `${DEPLOY_MODELS.join(" | ")} (release/deploy path; none means no Hub deploy registration)`).choices([...DEPLOY_MODELS])).addOption(new Option("--release-track <track>", `${RELEASE_TRACKS.join(" | ")} (branch topology; direct skips rc)`).choices([...RELEASE_TRACKS])).option("--var <KEY=VALUE...>", settableVarHelp()).option("--set <KEY=VALUE...>", "alias of --var (one KEY=VALUE per flag; repeat the flag to set several)").option("--secrets-file <path>", 'read the #2244 secrets catalog map (JSON) from a file and merge it per entry into the existing catalog (drop ONE entry with --unset-secret KEY; clear ALL with --unset secrets --confirm-clear-secrets). SHAPE: a JSON object keyed by env name, each entry {"key":"UPPER_SNAKE" (repeat the env name), "purpose":"<non-empty>", "group":"<e.g. auth|database>", "owner":"<github login>", "stages":[] (empty = the one stageless shared value; else any of dev/rc/main), "consumers":["runtime"|"box"|?], "provider":"<optional>"}').option("--unset-secret <KEY...>", "remove exactly these #2244 catalog entries (repeatable; KEY or KEY@dev|rc|main). Refuses while a stage still requires the key \u2014 drop it from requiredRuntimeSecrets/requiredBuildSecrets first").option("--confirm-clear-secrets", "required to let --unset secrets wipe the WHOLE catalog (the refusal names how many entries that removes)").option("--unset <KEY...>", "META field to remove (repeatable): oauth, requiredRuntimeSecrets, requiredBuildSecrets, secrets (the WHOLE catalog \u2014 needs --confirm-clear-secrets), edgeDomains, requiredGcpApis, publishRequired, releaseChannel, releaseLanguage").option("--clear-web-profile", "remove web-only registry fields (oauth, edgeDomains) for non-web/content projects").option("--json", "machine-readable output").action(async (repoOrSlug, o) => {
   const cfg = await loadConfig();
   let target;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.11",
+  "version": "4.5.13",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",