@mutmutco/cli 4.5.130 → 4.5.131

package/dist/main.cjs

@@ -8162,6 +8162,11 @@ var DECLARED_ENTRIES = [
   // archived stage (including a stage whose containers are down) into scratch Postgres and compare
   // row counts, and read-verify every storage archive against its listing; per-stage PASS/FAIL.
   { name: "mmi-backup-restore-check (mm-central, mm-work)", cadence: "0 3 1 * *", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mmi-backup-restore-check \u2192 /opt/mmi-control/nightly-backup-restore-check.sh; monthly restore proof for every archived stage (#7148; source scripts/nightly-backup-restore-check.sh); owner-approved mmi-oguz rebuild as CI-only mmi-runner2 with full erasure and no backups (#7859); zuber (46.225.58.31) is gone: deleted 2026-09-18 by the owner-approved ZuberShade decommission (MMC-ZuberShade#1838, snapshot kept); Hetzner has since reassigned that IP to another machine (#7351)" },
+  // #8176: continuous WAL archiving of the mm-work dev Postgres (owner targets RPO <= 5 min, RTO <= 1 h). Postgres copies each
+  // finished WAL file into a host spool (MM-Work#4170); this timer ships it encrypted to the Storage Box with WAL-G.
+  { name: "mmi-walg-ship@mm-work-dev (mm-work)", cadence: "every 30s (systemd OnUnitInactiveSec=30s)", executor: "box systemd", llm: "no", resolved: "declared", source: "/etc/systemd/system/mmi-walg-ship@.timer \u2192 /opt/mmi-control/walg-ship.sh mm-work-dev; spool /srv/mm-work/walspool/mm-work-dev \u2192 Storage Box backups/walg/mmi-tools/mm-work-dev, libsodium-encrypted (#8176; source scripts/walg/; status /var/lib/mmi-backup-status/mm-work-dev.ship.json)" },
+  { name: "mmi-walg-base (mm-work)", cadence: "30 3 * * 0", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mmi-walg-base \u2192 /opt/mmi-control/walg-base.sh mm-work-dev; weekly WAL-G base backup + age-based retention (keep the base at or before now-7d and everything after, #8193) (#8176; source scripts/walg/; log /var/log/mmi-walg.log; status /var/lib/mmi-backup-status/mm-work-dev.base.json)" },
+  { name: "mmi-walg-drill (mm-work)", cadence: "0 4 2 * *", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mmi-walg-drill \u2192 /opt/mmi-control/walg-drill.sh mm-work-dev; monthly restore drill measuring RPO/RTO against the owner targets (300s/3600s) into a throwaway --network none container (#8177; source scripts/walg/; status /var/lib/mmi-backup-status/mm-work-dev.drill.json; alarm: backup-health.yml)" },
   // #7662 (MM-Work#1520): Vercel Cron's 15-minute central mail call, moved to the box with MM-Work. The app
   // calls its own endpoint with its own CRON_SECRET via docker exec, so the secret stays in the container.
   { name: "mm-work-mail-tick (mm-work)", cadence: "*/15 * * * *", executor: "box cron.d", llm: "no", resolved: "declared", source: "/etc/cron.d/mm-work-mail-tick \u2192 /opt/mmi-control/mm-work-mail-tick.sh; GET /api/internal/mail per stage listed in MM_WORK_MAIL_STAGES (source scripts/mm-work-mail-tick.sh; log /var/log/mm-work-mail-tick.log)" },
@@ -16681,6 +16686,7 @@ function gateExtraStepsYaml(steps) {
   return steps.map((step) => [
     `
       - name: ${yamlScalar(step.name)}`,
+    "\n        if: ${{ steps.development-gate.outputs.reuse != 'true' }}",
     step.env && Object.keys(step.env).length ? `
         env:${envYaml(step.env, "          ")}` : "",
     "\n        uses: mutmutco/MMI-Hub/.github/actions/run-with-budget@{{GATE_BUDGET_SHA}}",
@@ -17240,23 +17246,33 @@ async function installAppFoldDeps(deps) {
 }
 var SHARED_INSTALLER_PACKAGES = ["@mutmutco/installer-face", "@mutmutco/installer-launcher", "@mutmutco/installer-gate"];
 async function refreshSharedInstallerDeps(deps) {
-  let declared;
+  let lockPaths;
   try {
-    const lock = JSON.parse(await deps.run("git", ["show", "HEAD:package-lock.json"]));
-    const present = Object.keys(lock.packages ?? {});
-    declared = SHARED_INSTALLER_PACKAGES.filter((name) => present.some((key) => key === `node_modules/${name}` || key.endsWith(`/node_modules/${name}`)));
-  } catch {
-    return null;
-  }
-  if (declared.length === 0) return null;
-  try {
-    await deps.run("npm", ["update", ...declared, "--package-lock-only", "--no-audit", "--no-fund"]);
+    lockPaths = (await deps.run("git", ["ls-tree", "-r", "--name-only", "HEAD"])).split("\n").filter((path2) => path2 === "package-lock.json" || path2.endsWith("/package-lock.json"));
   } catch (e) {
-    const why = e instanceof Error ? e.message.split("\n")[0] : String(e);
-    deps.warn?.(`shared installer refresh skipped (${why}) \u2014 shipping the locked versions`);
-    return `shared installer refresh skipped (${why}); the locked ${declared.join(", ")} still satisfy their ranges`;
+    throw trainReadFailure(
+      "shared installer refresh: `git ls-tree -r --name-only HEAD`",
+      e,
+      "rerun in a readable checkout \u2014 lockfile roots must be discovered, never guessed"
+    );
+  }
+  const notes = [];
+  for (const lockPath of lockPaths) {
+    const lock = JSON.parse(await deps.run("git", ["show", `HEAD:${lockPath}`]));
+    const present = Object.keys(lock.packages ?? {});
+    const declared = SHARED_INSTALLER_PACKAGES.filter((name) => present.some((key) => key === `node_modules/${name}` || key.endsWith(`/node_modules/${name}`)));
+    if (declared.length === 0) continue;
+    const prefix = lockPath.includes("/") ? lockPath.slice(0, lockPath.lastIndexOf("/")) : null;
+    try {
+      await deps.run("npm", [...prefix ? ["--prefix", prefix] : [], "update", ...declared, "--package-lock-only", "--no-audit", "--no-fund"]);
+      notes.push(`shared installer deps refreshed in ${prefix ?? "."} (${declared.join(", ")})`);
+    } catch (e) {
+      const why = e instanceof Error ? e.message.split("\n")[0] : String(e);
+      deps.warn?.(`shared installer refresh skipped for ${prefix ?? "."} (${why}) \u2014 shipping the locked versions`);
+      notes.push(`shared installer refresh skipped for ${prefix ?? "."} (${why}); the locked ${declared.join(", ")} still satisfy their ranges`);
+    }
   }
-  return `shared installer deps refreshed to the newest their ranges allow (${declared.join(", ")})`;
+  return notes.length > 0 ? notes.join("; ") : null;
 }
 async function restoreMainNpmPackIdentities(deps, version) {
   const bomPath = "distribution-bom.json";
@@ -18258,10 +18274,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.130",
-    tag: "v4.5.130",
-    commit: "6564bc03d8ee",
-    npm: "@mutmutco/cli@4.5.130"
+    version: "4.5.131",
+    tag: "v4.5.131",
+    commit: "1070f097f90f",
+    npm: "@mutmutco/cli@4.5.131"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18278,14 +18294,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.130"
+          v3Target: "v4.5.131"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.130 and redeploy the Hub Lambda from tag v4.5.130 (6564bc03d8ee); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.130 (@mutmutco/cli@4.5.130, tag commit 6564bc03d8ee \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.131 and redeploy the Hub Lambda from tag v4.5.131 (1070f097f90f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.131 (@mutmutco/cli@4.5.131, tag commit 1070f097f90f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -29517,10 +29533,17 @@ ${r.repo} (${r.class}, policy=${r.mergePolicy}) ${verdict}`);
   }
   return lines2.join("\n");
 }
+function unauditedReconcileError(reason) {
+  return `cannot audit \u2014 ${reason}; no reconcile change made (unaudited, not canonical)`;
+}
 async function applyCiReconcileMergeSettingsFromReport(repo, deps, report) {
   const applied = [];
   const skipped = [];
   const errors = [];
+  if (report.unauditedReason) {
+    errors.push(unauditedReconcileError(report.unauditedReason));
+    return { repo, applied, skipped, errors };
+  }
   const mergeChecks = report.checks.filter((c) => c.label.startsWith("allow_") || c.label.startsWith("delete_branch") || c.label.startsWith("has_wiki"));
   const needsPatch = mergeChecks.some((c) => !c.ok);
   if (!needsPatch) {
@@ -29824,6 +29847,9 @@ async function applyCiReconcileRepo(repo, deps, options = {}) {
     return { repo, applied: [], skipped: [], errors: ["product-ruleset requires registry META requiredChecks"] };
   }
   const report = await auditRepoCi(repo, deps);
+  if (report.unauditedReason) {
+    return { repo, applied: [], skipped: [], errors: [unauditedReconcileError(report.unauditedReason)] };
+  }
   const finish = (result2, pendingReason) => options.productRulesetOnly ? Promise.resolve(result2) : finalizeCiReconcile(repo, deps, result2, report, pendingReason);
   const baseBranch = "development";
   let raw = report.class === "deployable" && !report.explicitNoCi ? await fetchRulesetSeedBody(deps, repo) : null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.130",
+  "version": "4.5.131",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",