@mutmutco/cli 4.5.128 → 4.5.130

package/dist/main.cjs

@@ -15380,6 +15380,17 @@ function missingPlaceholders(rendered) {
 function isPropagatableSeed(seed) {
   return seed.ownership === "org" && seed.source === "self" || seed.managedBlock != null;
 }
+function seedSourcePath(seed) {
+  const source = seed.managedBlock?.source ?? seed.source;
+  return source.startsWith("seed:") ? `skills/bootstrap/seeds/${source.slice(5)}` : seed.target;
+}
+var RUNBOOK_UNAFFECTED_PATH = "skills/bootstrap/seeds/runbook-unaffected.json";
+function runbookUnaffectedReason(declarations, target, sourceBlob) {
+  const entry = declarations?.[target];
+  if (!entry || entry.blob !== sourceBlob || typeof entry.reason !== "string") return void 0;
+  const reason = entry.reason.trim();
+  return reason && !/[\r\n]/.test(reason) ? reason : void 0;
+}
 function sourceLines(content) {
   const lines2 = [];
   const newline = /\r\n|\n|\r/g;
@@ -17037,9 +17048,12 @@ function planSeedDelivery(branchRules, slug, baseBranch, branchPrefix = "bootstr
   }
   return { mode: "direct", ref: baseBranch, reason: decision.reason };
 }
-function contentPutBody(path2, content, branch, sha) {
+function contentPutBody(path2, content, branch, sha, runbookUnaffected) {
   const body = {
-    message: `bootstrap: seed ${path2}`,
+    // #8169: a reviewed seed revision may declare it leaves runbooks correct; the tenant guard reads the trailer.
+    message: `bootstrap: seed ${path2}${runbookUnaffected ? `
+
+Runbook-Unaffected: ${runbookUnaffected}` : ""}`,
     content: encodeGitHubContents(content),
     branch
   };
@@ -18244,10 +18258,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.128",
-    tag: "v4.5.128",
-    commit: "6031fb363b3e",
-    npm: "@mutmutco/cli@4.5.128"
+    version: "4.5.130",
+    tag: "v4.5.130",
+    commit: "6564bc03d8ee",
+    npm: "@mutmutco/cli@4.5.130"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18264,14 +18278,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.128"
+          v3Target: "v4.5.130"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.128 and redeploy the Hub Lambda from tag v4.5.128 (6031fb363b3e); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.128 (@mutmutco/cli@4.5.128, tag commit 6031fb363b3e \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.130 and redeploy the Hub Lambda from tag v4.5.130 (6564bc03d8ee); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.130 (@mutmutco/cli@4.5.130, tag commit 6564bc03d8ee \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -28689,6 +28703,7 @@ var UNBLOCKING_GATE_JOBS_LABEL = "every gate job can block a merge (#7012)";
 var TAG_ADDRESSABLE_CONTEXTS_LABEL = "rc/main required contexts are tag-addressable (#3880)";
 var RELEASE_BRANCH_REACHABLE_LABEL = "rc/main required contexts are reachable from a release-base head (#5193)";
 var DEV_STAGE_FRESH_LABEL = "tenant dev stage runs the development tip (#7536)";
+var NO_CANCEL_WAIVER = /ci-audit:\s*allow-no-cancel-in-progress\b[^\n]*#\d+/i;
 var DEV_STAGE_STALE_TOLERANCE_MS = 30 * 60 * 1e3;
 function devStageFreshnessCheck(input) {
   const { repo, deployedTag, tipSha, tipCommittedAt, nowMs } = input;
@@ -29372,7 +29387,6 @@ async function auditRepoCi(repo, callerDeps) {
       detail: `${policy} (${reason})`
     });
   }
-  const NO_CANCEL_WAIVER = /ci-audit:\s*allow-no-cancel-in-progress\b[^\n]*#\d+/i;
   if (deployableGated || repoClass === "hub") {
     const allPaths = await listWorkflowPaths(deps, repo, baseBranch) ?? [];
     const prPaths = await filterPullRequestTriggered(deps, repo, baseBranch, allPaths);
@@ -36404,6 +36418,8 @@ LIVE apply to ${repo}:
     if (o.execute) {
       if (plan.refusedNoCanary) return fail("bootstrap propagate --execute: no canary declared for this target \u2014 refusing to write (set seedCanary:true on exactly one registry repo)");
       const headSha = seedSource.sha;
+      const sourceBlob = (await execGitForSeedSource(["rev-parse", `${headSha}:${seedSourcePath(seed)}`])).trim();
+      const runbookUnaffected = (0, import_node_fs30.existsSync)(RUNBOOK_UNAFFECTED_PATH) ? runbookUnaffectedReason(JSON.parse((0, import_node_fs30.readFileSync)(RUNBOOK_UNAFFECTED_PATH, "utf8")), seed.target, sourceBlob) : void 0;
       for (const rec of plan.records) {
         if (rec.action !== "open-pr") continue;
         const baseBranch = classOf(rec.repo) === "content" ? "main" : "development";
@@ -36428,7 +36444,7 @@ LIVE apply to ${repo}:
         const tmp = (0, import_node_path29.join)((0, import_node_os18.tmpdir)(), `mmi-propagate-${process.pid}-${Date.now().toString(36)}-${Math.random().toString(36).slice(2)}.json`);
         const desiredContent = desiredByRepo.get(rec.repo);
         if (desiredContent == null) return fail(`bootstrap propagate: no resolved content for ${rec.repo} ${seed.target} \u2014 refusing to write`);
-        (0, import_node_fs30.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, desiredContent, branch, existingSha)), "utf8");
+        (0, import_node_fs30.writeFileSync)(tmp, JSON.stringify(contentPutBody(seed.target, desiredContent, branch, existingSha, runbookUnaffected)), "utf8");
         try {
           await gh2(contentPutInputArgs(rec.repo, seed.target, tmp));
         } finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.128",
+  "version": "4.5.130",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",