@mutmutco/cli 4.5.157 → 4.5.158

package/dist/main.cjs

@@ -16372,6 +16372,38 @@ function checkRunbookCoverage(docs, base, git3) {
   }
   return findings;
 }
+function checkSeedRunbookReview(root, base, readFile10, git3) {
+  const manifestJson = readFile10((0, import_node_path15.join)(root, "skills/bootstrap/seeds/manifest.json"));
+  if (!manifestJson) return [];
+  const changed = new Set(git3(["diff", "--name-only", `${base}...HEAD`]).split(/\r?\n/).filter(Boolean));
+  const touched = loadBootstrapSeeds(manifestJson).seeds.filter((seed) => isPropagatableSeed(seed) && changed.has(seedSourcePath(seed)));
+  if (!touched.length) return [];
+  let declarations = null;
+  try {
+    declarations = JSON.parse(readFile10((0, import_node_path15.join)(root, RUNBOOK_UNAFFECTED_PATH)) ?? "null");
+  } catch {
+    declarations = null;
+  }
+  const findings = [];
+  for (const seed of touched) {
+    const source = seedSourcePath(seed);
+    let blob;
+    try {
+      blob = git3(["rev-parse", `HEAD:${source}`]).trim();
+    } catch {
+      continue;
+    }
+    if (!runbookUnaffectedReason(declarations, seed.target, blob)) {
+      findings.push({
+        kind: "seed-runbook-unreviewed",
+        doc: source,
+        line: 0,
+        detail: `${seed.target} (source blob ${blob}): propagatable seed changed without a runbook impact decision; add "${seed.target}": { "blob": "${blob}", "reason": "<why>" } to ${RUNBOOK_UNAFFECTED_PATH} or declare Seed-Runbook-Affected: <reason> in a commit message`
+      });
+    }
+  }
+  return findings;
+}
 function readFileOrNull(path2) {
   return (0, import_node_fs17.existsSync)(path2) ? (0, import_node_fs17.readFileSync)(path2, "utf8") : null;
 }
@@ -16505,11 +16537,14 @@ function runDocRefs(root, deps = {}) {
   if (deps.base) {
     const git3 = deps.git ?? ((args) => (0, import_node_child_process6.execFileSync)("git", args, { cwd: root, encoding: "utf8", maxBuffer: CHECK_IGNORE_MAX_BUFFER, windowsHide: true }));
     const stale = checkRunbookCoverage(runbooks, deps.base, git3);
+    const seedStale = checkSeedRunbookReview(root, deps.base, readFile10, git3);
     const messages = git3(["log", "--format=%B", `${deps.base}..HEAD`]);
-    const sourceMessages = stale.length ? mergeGroupRunbookMessages(root, deps, readFile10, warnings) : "";
-    const override = /^Runbook-Unaffected:[ \t]*\S.*$/m.test(`${messages}
-${sourceMessages}`);
+    const sourceMessages = stale.length || seedStale.length ? mergeGroupRunbookMessages(root, deps, readFile10, warnings) : "";
+    const allMessages = `${messages}
+${sourceMessages}`;
+    const override = /^Runbook-Unaffected:[ \t]*\S.*$/m.test(allMessages);
     (override ? warnings : findings).push(...stale);
+    if (!/^Seed-Runbook-Affected:[ \t]*\S.*$/m.test(allMessages)) findings.push(...seedStale);
   }
   return {
     ok: findings.length === 0,
@@ -18741,10 +18776,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.157",
-    tag: "v4.5.157",
-    commit: "a6662d29e5ff",
-    npm: "@mutmutco/cli@4.5.157"
+    version: "4.5.158",
+    tag: "v4.5.158",
+    commit: "21733e84802e",
+    npm: "@mutmutco/cli@4.5.158"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18761,14 +18796,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.157"
+          v3Target: "v4.5.158"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.157 and redeploy the Hub Lambda from tag v4.5.157 (a6662d29e5ff); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.157 (@mutmutco/cli@4.5.157, tag commit a6662d29e5ff \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.158 and redeploy the Hub Lambda from tag v4.5.158 (21733e84802e); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.158 (@mutmutco/cli@4.5.158, tag commit 21733e84802e \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {

package/dist/runbook-sweep.cjs

@@ -334,6 +334,53 @@ module.exports = __toCommonJS(runbook_sweep_entry_exports);
 var import_node_child_process = require("node:child_process");
 var import_node_fs = require("node:fs");
 var import_node_path = require("node:path");
+
+// src/bootstrap-seeds.ts
+function loadBootstrapSeeds(manifestJson) {
+  let parsed;
+  try {
+    parsed = JSON.parse(manifestJson);
+  } catch {
+    throw new Error("bootstrap seed manifest is not valid JSON");
+  }
+  const obj = parsed ?? {};
+  const seeds = obj.seeds ?? [];
+  for (const s of seeds) {
+    if (!s || !s.target || !s.source || !Array.isArray(s.classes)) {
+      throw new Error(`invalid seed entry (needs target, source, classes): ${JSON.stringify(s)}`);
+    }
+    if (s.ownership !== "org" && s.ownership !== "repo") {
+      throw new Error(`invalid seed ownership '${s.ownership}' for ${s.target} (must be 'org' or 'repo')`);
+    }
+    if (s.managedBlock) {
+      const block = s.managedBlock;
+      if (!block.source || !block.begin || !block.end || block.begin === block.end || /[\r\n]/.test(block.begin + block.end)) {
+        throw new Error(`invalid managedBlock for ${s.target} (needs source and distinct single-line begin/end markers)`);
+      }
+    }
+  }
+  return {
+    seeds,
+    labels: obj.labels ?? [],
+    placeholders: obj.placeholders ?? []
+  };
+}
+function isPropagatableSeed(seed) {
+  return seed.ownership === "org" && seed.source === "self" || seed.managedBlock != null;
+}
+function seedSourcePath(seed) {
+  const source = seed.managedBlock?.source ?? seed.source;
+  return source.startsWith("seed:") ? `skills/bootstrap/seeds/${source.slice(5)}` : seed.target;
+}
+var RUNBOOK_UNAFFECTED_PATH = "skills/bootstrap/seeds/runbook-unaffected.json";
+function runbookUnaffectedReason(declarations, target, sourceBlob) {
+  const entry = declarations?.[target];
+  if (!entry || entry.blob !== sourceBlob || typeof entry.reason !== "string") return void 0;
+  const reason = entry.reason.trim();
+  return reason && !/[\r\n]/.test(reason) ? reason : void 0;
+}
+
+// src/doc-refs-core.ts
 var PIN_RE = /<!--\s*pinned by\s+([^:]+?)\s*:\s*"([^"]+)"[^"]*-->/;
 var PIN_MENTION_RE = /<!--\s*pinned by\b/;
 var FWD_RE = /<!--\s*forward-ref:\s*(\S+?)\s*-->/;
@@ -669,6 +716,38 @@ function checkRunbookCoverage(docs, base, git) {
   }
   return findings;
 }
+function checkSeedRunbookReview(root, base, readFile2, git) {
+  const manifestJson = readFile2((0, import_node_path.join)(root, "skills/bootstrap/seeds/manifest.json"));
+  if (!manifestJson) return [];
+  const changed = new Set(git(["diff", "--name-only", `${base}...HEAD`]).split(/\r?\n/).filter(Boolean));
+  const touched = loadBootstrapSeeds(manifestJson).seeds.filter((seed) => isPropagatableSeed(seed) && changed.has(seedSourcePath(seed)));
+  if (!touched.length) return [];
+  let declarations = null;
+  try {
+    declarations = JSON.parse(readFile2((0, import_node_path.join)(root, RUNBOOK_UNAFFECTED_PATH)) ?? "null");
+  } catch {
+    declarations = null;
+  }
+  const findings = [];
+  for (const seed of touched) {
+    const source = seedSourcePath(seed);
+    let blob;
+    try {
+      blob = git(["rev-parse", `HEAD:${source}`]).trim();
+    } catch {
+      continue;
+    }
+    if (!runbookUnaffectedReason(declarations, seed.target, blob)) {
+      findings.push({
+        kind: "seed-runbook-unreviewed",
+        doc: source,
+        line: 0,
+        detail: `${seed.target} (source blob ${blob}): propagatable seed changed without a runbook impact decision; add "${seed.target}": { "blob": "${blob}", "reason": "<why>" } to ${RUNBOOK_UNAFFECTED_PATH} or declare Seed-Runbook-Affected: <reason> in a commit message`
+      });
+    }
+  }
+  return findings;
+}
 function readFileOrNull(path2) {
   return (0, import_node_fs.existsSync)(path2) ? (0, import_node_fs.readFileSync)(path2, "utf8") : null;
 }
@@ -802,11 +881,14 @@ function runDocRefs(root, deps = {}) {
   if (deps.base) {
     const git = deps.git ?? ((args) => (0, import_node_child_process.execFileSync)("git", args, { cwd: root, encoding: "utf8", maxBuffer: CHECK_IGNORE_MAX_BUFFER, windowsHide: true }));
     const stale = checkRunbookCoverage(runbooks, deps.base, git);
+    const seedStale = checkSeedRunbookReview(root, deps.base, readFile2, git);
     const messages = git(["log", "--format=%B", `${deps.base}..HEAD`]);
-    const sourceMessages = stale.length ? mergeGroupRunbookMessages(root, deps, readFile2, warnings) : "";
-    const override = /^Runbook-Unaffected:[ \t]*\S.*$/m.test(`${messages}
-${sourceMessages}`);
+    const sourceMessages = stale.length || seedStale.length ? mergeGroupRunbookMessages(root, deps, readFile2, warnings) : "";
+    const allMessages = `${messages}
+${sourceMessages}`;
+    const override = /^Runbook-Unaffected:[ \t]*\S.*$/m.test(allMessages);
     (override ? warnings : findings).push(...stale);
+    if (!/^Seed-Runbook-Affected:[ \t]*\S.*$/m.test(allMessages)) findings.push(...seedStale);
   }
   return {
     ok: findings.length === 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.157",
+  "version": "4.5.158",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",