@mutmutco/cli 4.5.161 → 4.5.163

package/dist/runbook-sweep.cjs

@@ -191,6 +191,11 @@ var init_error_codes = __esm({
 });
 
 // src/gh-read-route.ts
+function isAppFilingWrite(args) {
+  if (args.some((a) => VIEWER.test(a))) return false;
+  const [group, verb] = args;
+  return (group === "issue" || group === "label") && verb === "create";
+}
 function isViewerFreeGhRead(args) {
   if (args.some((a) => VIEWER.test(a))) return false;
   const [group, verb] = args;
@@ -238,6 +243,44 @@ var init_gh_read_route = __esm({
   }
 });
 
+// src/gh-usage.ts
+function commandPath() {
+  if (cachedCommand !== void 0) return cachedCommand;
+  const words = [];
+  for (const arg of process.argv.slice(2)) {
+    if (arg.startsWith("-") || words.length === 3) break;
+    words.push(arg);
+  }
+  return cachedCommand = words.join(" ") || "(none)";
+}
+function shapeOp(op) {
+  return op.split("?")[0].replace(/\b[0-9a-f]{7,40}\b/gi, "N").replace(/\d+/g, "N").split("/").slice(0, 5).join("/");
+}
+function ambientPool(env = process.env) {
+  return env.MMI_GH_POOL === "app" ? "app" : "personal";
+}
+function recordGhUsage(via, pool, op) {
+  if (process.env.MMI_GH_USAGE === "off" || process.env.VITEST && !process.env.MMI_GH_USAGE_DIR) return;
+  try {
+    const dir = usageDir();
+    (0, import_node_fs3.mkdirSync)(dir, { recursive: true });
+    const row = { t: Date.now(), cmd: commandPath(), via, pool, op: shapeOp(op) };
+    (0, import_node_fs3.appendFileSync)((0, import_node_path3.join)(dir, `${new Date(row.t).toISOString().slice(0, 13)}.jsonl`), `${JSON.stringify(row)}
+`);
+  } catch {
+  }
+}
+var import_node_fs3, import_node_os, import_node_path3, usageDir, cachedCommand;
+var init_gh_usage = __esm({
+  "src/gh-usage.ts"() {
+    "use strict";
+    import_node_fs3 = require("node:fs");
+    import_node_os = require("node:os");
+    import_node_path3 = require("node:path");
+    usageDir = (env = process.env) => env.MMI_GH_USAGE_DIR || (0, import_node_path3.join)((0, import_node_os.homedir)(), ".mmi", "gh-usage");
+  }
+});
+
 // src/github-quota.ts
 var init_github_quota = __esm({
   "src/github-quota.ts"() {
@@ -285,6 +328,12 @@ var init_stdin_inject = __esm({
 });
 
 // src/cli-shared.ts
+async function ghFilingAppEnv(file, args) {
+  if (!ghWriteTokenProvider || !/(^|[\\/])gh(\.exe)?$/i.test(file) || process.env.MMI_ACTOR?.trim() === "personal") return void 0;
+  if (!isAppFilingWrite(args)) return void 0;
+  const token = await ghWriteTokenProvider().catch(() => void 0);
+  return token ? { ...process.env, GH_TOKEN: token } : void 0;
+}
 async function ghReadAppEnv(file, args) {
   if (!ghReadTokenProvider || !/(^|[\\/])gh(\.exe)?$/i.test(file) || process.env.MMI_ACTOR?.trim() === "personal") return void 0;
   if (!isViewerFreeGhRead(args)) return void 0;
@@ -325,7 +374,7 @@ function execFileHard(file, args, options) {
     timer.unref?.();
   });
 }
-var import_node_child_process3, import_node_util2, rawExecFileP, DEFAULT_EXEC_TIMEOUT_MS, execFileP, ghReadTokenProvider, ExecDeadlineError;
+var import_node_child_process3, import_node_util2, rawExecFileP, DEFAULT_EXEC_TIMEOUT_MS, execFileP, ghReadTokenProvider, ghWriteTokenProvider, ExecDeadlineError;
 var init_cli_shared = __esm({
   "src/cli-shared.ts"() {
     "use strict";
@@ -337,6 +386,7 @@ var init_cli_shared = __esm({
     init_error_codes();
     init_github_client();
     init_gh_read_route();
+    init_gh_usage();
     init_hub_auth();
     init_house_map();
     init_stdin_inject();
@@ -348,7 +398,12 @@ var init_cli_shared = __esm({
         // promisify(execFile)'s overloads widen to string|Buffer when options is spread in.
         rawExecFileP(file, args, { encoding: "utf8", windowsHide: true, timeout: DEFAULT_EXEC_TIMEOUT_MS, killSignal: "SIGTERM", ...options, ...env ? { env } : {} })
       );
-      const appEnv = options.env ? void 0 : await ghReadAppEnv(file, args);
+      const appEnv = options.env ? void 0 : await ghReadAppEnv(file, args) ?? await ghFilingAppEnv(file, args);
+      if (/(^|[\\/])gh(\.exe)?$/i.test(file) && args[0] !== "auth") {
+        const callerEnv = options.env;
+        const pool = appEnv ? "app" : !callerEnv ? ambientPool() : !callerEnv.GH_TOKEN ? "personal" : callerEnv.MMI_GH_POOL === "app" ? "app" : callerEnv.GH_TOKEN === process.env.GH_TOKEN ? ambientPool() : "caller";
+        recordGhUsage("gh", pool, args.filter((a) => !a.startsWith("-")).slice(0, 2).join(" "));
+      }
       if (!appEnv) return run();
       try {
         return await run(appEnv);
@@ -381,6 +436,8 @@ var init_github_client = __esm({
   "src/github-client.ts"() {
     "use strict";
     init_cli_shared();
+    init_gh_read_route();
+    init_gh_usage();
   }
 });
 
@@ -775,7 +832,7 @@ function checkRunbookCoverage(docs, base, git) {
       const globs = lines.slice(heading.start, markerEnd - 1).flatMap((text) => /<!--\s*runbook-covers:\s*(.*?)\s*-->/.exec(text)?.[1].split(",").map((s) => s.trim()) ?? []);
       const affected = changed.filter((path2) => globs.some((glob) => matches(glob, path2)));
       if (affected.length && !ranges.some((r) => r.count > 0 && r.start < end && r.start + r.count > heading.start)) {
-        findings.push({ kind: "runbook-section-stale", doc, line: heading.start, detail: `${heading.title}: changed ${affected.join(", ")}; update this section or declare Runbook-Unaffected: <reason>` });
+        findings.push({ kind: "runbook-section-stale", doc, line: heading.start, detail: `${heading.title}: changed ${affected.join(", ")}; update this section or declare Runbook-Unaffected: <reason>`, section: { heading: heading.title, level: heading.level, startLine: heading.start, endLine: end - 1, covers: globs }, sources: affected });
       }
     }
   }
@@ -1143,23 +1200,23 @@ init_github_quota();
 init_cli_shared();
 
 // src/repo-runtime-state.ts
-var import_node_fs3 = require("node:fs");
-var import_node_path3 = require("node:path");
+var import_node_fs4 = require("node:fs");
+var import_node_path4 = require("node:path");
 function resolveGitDir(cwd) {
-  const dotGit = (0, import_node_path3.join)(cwd, ".git");
+  const dotGit = (0, import_node_path4.join)(cwd, ".git");
   try {
-    const st = (0, import_node_fs3.statSync)(dotGit);
+    const st = (0, import_node_fs4.statSync)(dotGit);
     if (st.isDirectory()) return dotGit;
     if (!st.isFile()) return void 0;
   } catch {
     return void 0;
   }
   try {
-    const raw = (0, import_node_fs3.readFileSync)(dotGit, "utf8").trim();
+    const raw = (0, import_node_fs4.readFileSync)(dotGit, "utf8").trim();
     const match = /^gitdir:\s*(.+)$/i.exec(raw);
     if (!match) return void 0;
     const gitdir = match[1].trim();
-    return (0, import_node_path3.isAbsolute)(gitdir) ? gitdir : (0, import_node_path3.resolve)(cwd, gitdir);
+    return (0, import_node_path4.isAbsolute)(gitdir) ? gitdir : (0, import_node_path4.resolve)(cwd, gitdir);
   } catch {
     return void 0;
   }
@@ -1387,8 +1444,8 @@ function humanReadableArgName(arg) {
 // node_modules/commander/lib/command.js
 var import_node_events = require("node:events");
 var import_node_child_process4 = __toESM(require("node:child_process"), 1);
-var import_node_path4 = __toESM(require("node:path"), 1);
-var import_node_fs4 = __toESM(require("node:fs"), 1);
+var import_node_path5 = __toESM(require("node:path"), 1);
+var import_node_fs5 = __toESM(require("node:fs"), 1);
 var import_node_process = __toESM(require("node:process"), 1);
 var import_node_util4 = require("node:util");
 
@@ -3356,7 +3413,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} subcommandName
    */
   _checkForMissingExecutable(executableFile, executableDir, subcommandName) {
-    if (import_node_fs4.default.existsSync(executableFile)) return;
+    if (import_node_fs5.default.existsSync(executableFile)) return;
     const executableDirMessage = executableDir ? `searched for local subcommand relative to directory '${executableDir}'` : "no directory for search for local subcommand, use .executableDir() to supply a custom directory";
     const executableMissing = `'${executableFile}' does not exist
  - if '${subcommandName}' is not meant to be an executable command, remove description parameter from '.command()' and use '.description()' instead
@@ -3373,11 +3430,11 @@ Expecting one of '${allowedValues.join("', '")}'`);
     args = args.slice();
     const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
     function findFile(baseDir, baseName) {
-      const localBin = import_node_path4.default.resolve(baseDir, baseName);
-      if (import_node_fs4.default.existsSync(localBin)) return localBin;
-      if (sourceExt.includes(import_node_path4.default.extname(baseName))) return void 0;
+      const localBin = import_node_path5.default.resolve(baseDir, baseName);
+      if (import_node_fs5.default.existsSync(localBin)) return localBin;
+      if (sourceExt.includes(import_node_path5.default.extname(baseName))) return void 0;
       const foundExt = sourceExt.find(
-        (ext) => import_node_fs4.default.existsSync(`${localBin}${ext}`)
+        (ext) => import_node_fs5.default.existsSync(`${localBin}${ext}`)
       );
       if (foundExt) return `${localBin}${foundExt}`;
       return void 0;
@@ -3389,21 +3446,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
     if (this._scriptPath) {
       let resolvedScriptPath;
       try {
-        resolvedScriptPath = import_node_fs4.default.realpathSync(this._scriptPath);
+        resolvedScriptPath = import_node_fs5.default.realpathSync(this._scriptPath);
       } catch {
         resolvedScriptPath = this._scriptPath;
       }
-      executableDir = import_node_path4.default.resolve(
-        import_node_path4.default.dirname(resolvedScriptPath),
+      executableDir = import_node_path5.default.resolve(
+        import_node_path5.default.dirname(resolvedScriptPath),
         executableDir
       );
     }
     if (executableDir) {
       let localFile = findFile(executableDir, executableFile);
       if (!localFile && !subcommand._executableFile && this._scriptPath) {
-        const legacyName = import_node_path4.default.basename(
+        const legacyName = import_node_path5.default.basename(
           this._scriptPath,
-          import_node_path4.default.extname(this._scriptPath)
+          import_node_path5.default.extname(this._scriptPath)
         );
         if (legacyName !== this._name) {
           localFile = findFile(
@@ -3414,7 +3471,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
       }
       executableFile = localFile || executableFile;
     }
-    const launchWithNode = sourceExt.includes(import_node_path4.default.extname(executableFile));
+    const launchWithNode = sourceExt.includes(import_node_path5.default.extname(executableFile));
     let proc;
     if (import_node_process.default.platform !== "win32") {
       if (launchWithNode) {
@@ -4331,7 +4388,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @return {Command}
    */
   nameFromFilename(filename) {
-    this._name = import_node_path4.default.basename(filename, import_node_path4.default.extname(filename));
+    this._name = import_node_path5.default.basename(filename, import_node_path5.default.extname(filename));
     return this;
   }
   /**
@@ -4847,13 +4904,13 @@ async function discoverShaWorkflowRuns(deps, repo, headSha, seenRunIds) {
 
 // src/train-doctor.ts
 var import_node_child_process7 = require("node:child_process");
-var import_node_fs7 = require("node:fs");
-var import_node_os = require("node:os");
+var import_node_fs8 = require("node:fs");
+var import_node_os2 = require("node:os");
 var import_node_path9 = require("node:path");
 
 // src/doctor-io.ts
-var import_node_fs5 = require("node:fs");
-var import_node_path5 = require("node:path");
+var import_node_fs6 = require("node:fs");
+var import_node_path6 = require("node:path");
 var import_node_child_process5 = require("node:child_process");
 var import_node_util5 = require("node:util");
 
@@ -4892,8 +4949,8 @@ function nodeDiscardSinkPath(platform = process.platform) {
 var execFileP2 = (0, import_node_util5.promisify)(import_node_child_process5.execFile);
 function execFileCapture(file, args, opts = {}) {
   const sink = nodeDiscardSinkPath();
-  const inFd = (0, import_node_fs5.openSync)(sink, "r");
-  const errFd = (0, import_node_fs5.openSync)(sink, "w");
+  const inFd = (0, import_node_fs6.openSync)(sink, "r");
+  const errFd = (0, import_node_fs6.openSync)(sink, "w");
   try {
     return (0, import_node_child_process5.execFileSync)(file, args, {
       ...opts,
@@ -4901,8 +4958,8 @@ function execFileCapture(file, args, opts = {}) {
       stdio: [inFd, "pipe", errFd]
     });
   } finally {
-    (0, import_node_fs5.closeSync)(inFd);
-    (0, import_node_fs5.closeSync)(errFd);
+    (0, import_node_fs6.closeSync)(inFd);
+    (0, import_node_fs6.closeSync)(errFd);
   }
 }
 function worktreeRootSync() {
@@ -4917,13 +4974,13 @@ function worktreeRootSync() {
 }
 var gitignorePath = () => {
   const root = worktreeRootSync();
-  return root === null ? null : (0, import_node_path5.join)(root, ".gitignore");
+  return root === null ? null : (0, import_node_path6.join)(root, ".gitignore");
 };
 function readGitignore() {
   const path2 = gitignorePath();
   if (path2 === null) return null;
   try {
-    return (0, import_node_fs5.readFileSync)(path2, "utf8");
+    return (0, import_node_fs6.readFileSync)(path2, "utf8");
   } catch {
     return null;
   }
@@ -4932,7 +4989,7 @@ function writeGitignore(content) {
   const path2 = gitignorePath();
   if (path2 === null) return false;
   try {
-    (0, import_node_fs5.writeFileSync)(path2, content, "utf8");
+    (0, import_node_fs6.writeFileSync)(path2, content, "utf8");
     return true;
   } catch {
     return false;
@@ -4942,17 +4999,12 @@ function writeGitignore(content) {
 // src/doctor-fleet-drift.ts
 var JOURNAL_TAIL_BYTES = 256 * 1024;
 
-// src/jerv-cli-spawn.ts
-var import_node_path6 = require("node:path");
-init_cli_shared();
-var JERV_CLI_ENTRY = (0, import_node_path6.join)("node_modules", "@jervaise", "jerv-cli", "dist", "index.cjs");
-
 // src/claude-binary-doctor.ts
 var PACKAGE = "@anthropic-ai/claude-code";
 var CLAUDE_BINARY_INSTALL_COMMAND = `npm install -g ${PACKAGE}`;
 
 // src/release-ledger.ts
-var import_node_fs6 = require("node:fs");
+var import_node_fs7 = require("node:fs");
 var import_node_path8 = require("node:path");
 var import_node_crypto = require("node:crypto");
 
@@ -5228,7 +5280,7 @@ function resolvePrimaryGitDir(cwd) {
   }
   let common;
   try {
-    common = (0, import_node_fs6.readFileSync)((0, import_node_path8.join)(gitDir, "commondir"), "utf8").trim();
+    common = (0, import_node_fs7.readFileSync)((0, import_node_path8.join)(gitDir, "commondir"), "utf8").trim();
   } catch (e) {
     if (e.code !== "ENOENT") {
       throw new ReleaseLedgerError("unreadable", `release ledger: the worktree gitdir's commondir pointer could not be READ (${e instanceof Error ? e.message : String(e)}) \u2014 a failed read is unverified, not primary (#5987/#4713)`);
@@ -5237,7 +5289,7 @@ function resolvePrimaryGitDir(cwd) {
   if (!common) return gitDir;
   const commonDir = (0, import_node_path8.isAbsolute)(common) ? common : (0, import_node_path8.resolve)(gitDir, common);
   try {
-    (0, import_node_fs6.readFileSync)((0, import_node_path8.join)(commonDir, "HEAD"), "utf8");
+    (0, import_node_fs7.readFileSync)((0, import_node_path8.join)(commonDir, "HEAD"), "utf8");
   } catch (e) {
     throw new ReleaseLedgerError("no-checkout", `release ledger: the worktree's commondir pointer names ${commonDir}, which has no readable HEAD (${e instanceof Error ? e.message : String(e)}) \u2014 the primary checkout may have been removed; refusing to write the ledger into a doomed location`);
   }
@@ -5247,11 +5299,11 @@ function releaseLedgerPath(cwd) {
   return (0, import_node_path8.join)(resolvePrimaryGitDir(cwd), "mmi-runtime", "release", "phases.json");
 }
 function atomicWriteJson(path2, ledger) {
-  (0, import_node_fs6.mkdirSync)((0, import_node_path8.dirname)(path2), { recursive: true });
+  (0, import_node_fs7.mkdirSync)((0, import_node_path8.dirname)(path2), { recursive: true });
   const tmp = `${path2}.tmp-${process.pid}-${(0, import_node_crypto.randomBytes)(4).toString("hex")}`;
-  (0, import_node_fs6.writeFileSync)(tmp, `${JSON.stringify(ledger, null, 2)}
+  (0, import_node_fs7.writeFileSync)(tmp, `${JSON.stringify(ledger, null, 2)}
 `, "utf8");
-  (0, import_node_fs6.renameSync)(tmp, path2);
+  (0, import_node_fs7.renameSync)(tmp, path2);
 }
 var LEDGER_LOCK_OPTS = { label: "release ledger", staleMs: 18e4, deadHolderSteal: true };
 async function withLedgerLock(path2, fn, opts = {}) {
@@ -5286,7 +5338,7 @@ function describeTrainWriterToken(token) {
 function liveTrainWriterHolder(cwd) {
   let token;
   try {
-    token = (0, import_node_fs6.readFileSync)(trainWriterLockPath(cwd), "utf8");
+    token = (0, import_node_fs7.readFileSync)(trainWriterLockPath(cwd), "utf8");
   } catch {
     return void 0;
   }
@@ -5299,7 +5351,7 @@ async function withReleaseLedger(path2, expected, fn, opts = {}) {
     let current;
     let raw;
     try {
-      raw = (0, import_node_fs6.readFileSync)(path2, "utf8");
+      raw = (0, import_node_fs7.readFileSync)(path2, "utf8");
     } catch (e) {
       if (e.code !== "ENOENT") {
         throw new ReleaseLedgerError("unreadable", `release ledger at ${path2} could not be READ (${e instanceof Error ? e.message : String(e)}) \u2014 a failed read is unverified, not absent (#5987)`);
@@ -5488,7 +5540,7 @@ async function healStaleAlignmentLeg(deps, cwd, expected) {
   return withLedgerLock(path2, async (fence) => {
     let prior;
     try {
-      prior = parseReleaseLedger((0, import_node_fs6.readFileSync)(path2, "utf8"));
+      prior = parseReleaseLedger((0, import_node_fs7.readFileSync)(path2, "utf8"));
     } catch {
       return void 0;
     }
@@ -5513,7 +5565,7 @@ async function healUnfoldedRunLegs(deps, cwd, model) {
   const path2 = releaseLedgerPath(cwd);
   let prior;
   try {
-    prior = parseReleaseLedger((0, import_node_fs6.readFileSync)(path2, "utf8"));
+    prior = parseReleaseLedger((0, import_node_fs7.readFileSync)(path2, "utf8"));
   } catch {
     return void 0;
   }
@@ -5663,10 +5715,10 @@ function readOriginWorkflowsDefault(root, ref) {
 }
 var NPM_REGISTRY = "https://registry.npmjs.org";
 async function probeRegistryWhoami(train) {
-  const dir = (0, import_node_fs7.mkdtempSync)((0, import_node_path9.join)((0, import_node_os.tmpdir)(), "mmi-npmrc-"));
+  const dir = (0, import_node_fs8.mkdtempSync)((0, import_node_path9.join)((0, import_node_os2.tmpdir)(), "mmi-npmrc-"));
   const rc = (0, import_node_path9.join)(dir, "npmrc");
   try {
-    (0, import_node_fs7.writeFileSync)(rc, "//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n");
+    (0, import_node_fs8.writeFileSync)(rc, "//registry.npmjs.org/:_authToken=${NPM_TOKEN}\n");
     await train.runSelf(["secrets", "use", "npm/NPM_TOKEN", "--slug", "_org", "--", "npm", "whoami", "--registry", NPM_REGISTRY, "--userconfig", rc]);
     return { kind: "ok", detail: "the registry answered a login" };
   } catch (e) {
@@ -5677,7 +5729,7 @@ async function probeRegistryWhoami(train) {
     if (/\bE401\b|401 Unauthorized/.test(stderr)) return { kind: "rejected", detail: "npm whoami answered 401 Unauthorized" };
     return { kind: "unverified", detail: first };
   } finally {
-    (0, import_node_fs7.rmSync)(dir, { recursive: true, force: true });
+    (0, import_node_fs8.rmSync)(dir, { recursive: true, force: true });
   }
 }
 var defaultDeps2 = {
@@ -5690,7 +5742,7 @@ var defaultDeps2 = {
   ledgerPath: releaseLedgerPath,
   readLedgerRaw: (path2) => {
     try {
-      return (0, import_node_fs7.readFileSync)(path2, "utf8");
+      return (0, import_node_fs8.readFileSync)(path2, "utf8");
     } catch (e) {
       if (e.code === "ENOENT") return void 0;
       throw e;
@@ -5701,7 +5753,7 @@ var defaultDeps2 = {
   trainWriterHolder: liveTrainWriterHolder,
   readSurfacesRaw: (cwd) => {
     try {
-      return (0, import_node_fs7.readFileSync)((0, import_node_path9.join)(cwd, "surfaces.json"), "utf8");
+      return (0, import_node_fs8.readFileSync)((0, import_node_path9.join)(cwd, "surfaces.json"), "utf8");
     } catch {
       return void 0;
     }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.161",
+  "version": "4.5.163",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",