@mutmutco/cli 4.5.17 → 4.5.19

package/dist/main.cjs

@@ -9544,11 +9544,16 @@ function resolveUseEnvNames(keys, name) {
 function referencesDollarEnv(arg, name) {
   return arg.includes(`\${${name}}`) || new RegExp(`\\$${name}(?![A-Za-z0-9_])`).test(arg);
 }
+function isShellScriptCommand(command) {
+  const exe = (command[0] ?? "").split(/[/\\]/).pop()?.toLowerCase().replace(/\.exe$/, "") ?? "";
+  return /^(?:ba|z|da|k)?sh$/.test(exe) && command.slice(1).some((a) => /^-[a-z]*c[a-z]*$/i.test(a));
+}
 function secretsUseDollarHint(command, envNames) {
+  if (isShellScriptCommand(command)) return null;
   for (const arg of command) {
     for (const name of envNames) {
       if (!referencesDollarEnv(arg, name)) continue;
-      return `secrets use: $${name} is injected into the CHILD's env, not your shell \u2014 the caller expanded it (empty) before this ran. Wrap the consumer so expansion happens inside: bash -c 'your-command "$${name}"'`;
+      return `secrets use: ${command[0]} receives the literal text $${name} \u2014 the value is injected into the CHILD's env, and ${command[0]} does not expand variables in its arguments. Wrap the consumer in a shell so expansion happens inside: bash -c 'your-command "$${name}"'`;
     }
   }
   return null;
@@ -10865,6 +10870,9 @@ function readSessionId(env) {
   }
   return void 0;
 }
+function readSessionIdSource(env) {
+  return SESSION_ID_ENV_VARS.find((key) => Boolean(env[key]?.trim()));
+}
 var synthesizedSessionId;
 function fallbackSessionId(surface) {
   if (!synthesizedSessionId) {
@@ -12581,15 +12589,36 @@ async function moveBoardItem(options, deps = {}) {
     ({ credential } = await updateItemSingleSelect(client, cfg.projectId, item.itemId, cfg.statusFieldId, optionId));
   } catch (e) {
     if (options.status === "Done" && isArchivedItemRefusal(ghError(e))) {
-      return {
-        item,
-        viewer: lookup.viewer,
-        repo: currentRepo,
-        status: item.status,
-        partial: false,
-        archived: true,
-        warning: `${item.ref} is archived (already terminal \u2014 its close archived the card); no ${options.status} move was performed`
-      };
+      if (item.status === "Done") {
+        return {
+          item,
+          viewer: lookup.viewer,
+          repo: currentRepo,
+          status: "Done",
+          partial: false,
+          archived: true,
+          warning: `${item.ref} is archived and already Done; no status write was needed`
+        };
+      }
+      try {
+        await client.graphql(
+          `mutation($projectId: ID!, $itemId: ID!) { unarchiveProjectV2Item(input: { projectId: $projectId, itemId: $itemId }) { item { id } } }`,
+          { projectId: cfg.projectId, itemId: item.itemId }
+        );
+        ({ credential } = await updateItemSingleSelect(client, cfg.projectId, item.itemId, cfg.statusFieldId, optionId));
+        return {
+          item: { ...item, status: "Done", statusOptionId: optionId },
+          viewer: lookup.viewer,
+          repo: currentRepo,
+          status: "Done",
+          partial: false,
+          credential
+        };
+      } catch (recoveryError) {
+        const warning2 = `partial move: ${item.ref} was archived at '${item.status}' and could not be unarchived and moved to Done (${ghError(recoveryError)})`;
+        if (!options.allowPartial) throw new Error(warning2);
+        return { item, viewer: lookup.viewer, repo: currentRepo, status: item.status, partial: true, warning: warning2 };
+      }
     }
     const warning = `partial move: ${item.ref} status was not changed to ${options.status} (${ghError(e)})`;
     if (!options.allowPartial) throw new Error(warning);
@@ -12663,9 +12692,26 @@ async function prepareClaimContext(options, selectors, deps, collected, snapshot
     items: collected.items,
     writable: writableOrUnknown(writable),
     report,
-    session: deps.session ?? describeSessionIdentity()
+    session: deps.session ?? describeSessionIdentity(),
+    ...deps.snapshot ? {
+      freshAppItem: async (selector) => {
+        const fresh = await collectBoardPreferringSnapshot(cfg, { repo: options.repo }, deps);
+        if (!fresh.snapshot || fresh.collected.partial) return void 0;
+        return fresh.collected.items.find((candidate) => candidate.repository.toLowerCase() === selector.repo.toLowerCase() && candidate.number === selector.number);
+      }
+    } : {}
   };
 }
+async function freshClaimItem(ctx, selector) {
+  try {
+    return (await fetchIssueProjectItem(ctx.client, ctx.cfg, selector)).item;
+  } catch (e) {
+    if (!isRateLimitRefusal(e) || !ctx.freshAppItem) throw e;
+    const item = await ctx.freshAppItem(selector).catch(() => void 0);
+    if (!item) throw e;
+    return item;
+  }
+}
 async function claimOneBoardItem(ctx, selector, options) {
   const { cfg, client, report } = ctx;
   const flatItem = findBoardItem(ctx.items, selector, { owner: cfg.projectOwner, number: cfg.projectNumber });
@@ -12721,7 +12767,7 @@ async function claimOneBoardItem(ctx, selector, options) {
   const pre = evaluateClaim(flatItem, assignedLogin);
   if (!pre.ok) throw new NotClaimableError(pre.reason, { ref: flatItem.ref, status: flatItem.status });
   let item = flatItem;
-  const fresh = (await fetchIssueProjectItem(client, cfg, { repo: item.repository, number: item.number })).item;
+  const fresh = await freshClaimItem(ctx, { repo: item.repository, number: item.number });
   if (!fresh) throw new Error(`${item.ref} is not on this project board`);
   const verdict = evaluateClaim(fresh, assignedLogin);
   if (!verdict.ok) throw new NotClaimableError(verdict.reason, { ref: fresh.ref, status: fresh.status });
@@ -14838,9 +14884,10 @@ function buildRegisterPayload(repo, cls, vars, options = {}) {
     deployModel,
     // Persist the canonical stage hosts at the same write-time boundary as deployModel. Read paths never
     // infer from an absent edgeDomains field.
-    edgeDomains: inferEdgeDomainsForWrite(slug),
+    edgeDomains: options.existing?.edgeDomains ?? inferEdgeDomainsForWrite(slug),
     // #1359: always persist an explicit track so release tooling never guesses from absence alone.
-    releaseTrack: resolveBootstrapReleaseTrack(cls, options.releaseTrack),
+    // #7134: an explicit flag wins, then the registered track, then the class default (first bootstrap).
+    releaseTrack: options.releaseTrack ?? (isReleaseTrack(options.existing?.releaseTrack) ? options.existing.releaseTrack : void 0) ?? resolveBootstrapReleaseTrack(cls, void 0),
     // Board coords (from GraphQL at bootstrap, passed as --var by the skill).
     projectOwner: vars.PROJECT_OWNER || void 0,
     projectNumber: num(vars.PROJECT_NUMBER),
@@ -16115,10 +16162,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.17",
-    tag: "v4.5.17",
-    commit: "be54d6077479",
-    npm: "@mutmutco/cli@4.5.17"
+    version: "4.5.19",
+    tag: "v4.5.19",
+    commit: "513a4686091e",
+    npm: "@mutmutco/cli@4.5.19"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -16135,14 +16182,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.17"
+          v3Target: "v4.5.19"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.17 and redeploy the Hub Lambda from tag v4.5.17 (be54d6077479); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.17 (@mutmutco/cli@4.5.17, tag commit be54d6077479 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.19 and redeploy the Hub Lambda from tag v4.5.19 (513a4686091e); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.19 (@mutmutco/cli@4.5.19, tag commit 513a4686091e \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -18473,14 +18520,14 @@ async function watchTenantRun(deps, runId, repo = HUB_REPO2) {
       confirmError = e;
     }
   }
-  if (!watchSaidSuccess) return "failure";
   if (confirmError) {
     deps.warn?.(
-      `run ${runId} (${repo}): the confirming \`gh run view --json status,conclusion\` read FAILED (${describeReadError(confirmError)}) \u2014 \`gh run watch\` exited green, but an unconfirmed green is the false success #2561 proved; reporting the run as PENDING. Re-check: gh run view ${runId} --repo ${repo} (#4713).`
+      `run ${runId} (${repo}): the confirming \`gh run view --json status,conclusion\` read FAILED (${describeReadError(confirmError)}) \u2014 \`gh run watch\` exited ${watchSaidSuccess ? "green" : "non-zero"}, but an unconfirmed verdict is not a result (#2561, #7136); reporting the run as PENDING. Re-check: gh run view ${runId} --repo ${repo} (#4713).`
     );
     return "pending";
   }
-  return "success";
+  deps.warn?.(`run ${runId} (${repo}): \`gh run watch\` exited ${watchSaidSuccess ? "green" : "non-zero"} while the run is still in progress, reporting PENDING (#7136)`);
+  return "pending";
 }
 async function fetchControlRunLog(deps, runId) {
   try {
@@ -30218,14 +30265,18 @@ function registerBootstrapCommands(program3) {
     }
     let registryRequiredCheckBranches;
     let registryMeta = null;
-    try {
-      const meta = await fetchProjectBySlug(slug, registryClientDeps(await loadConfig()));
+    const metaRead = await fetchProjectBySlugChecked(slug, registryClientDeps(await loadConfig()));
+    if (metaRead.ok) {
+      const meta = metaRead.project;
       registryMeta = meta;
       registryRequiredCheckBranches = meta?.requiredCheckBranches;
       for (const [k, v] of Object.entries(gateConfigToVars(meta?.gate))) if (rawVars[k] == null) rawVars[k] = v;
-    } catch {
+    } else if (o.execute && !onlyTarget) {
+      return failGraceful(`bootstrap apply: registry META unreadable (${metaRead.error}); refusing the live registry write, which would reset a registered project's releaseTrack and edgeDomains to class defaults (#7138)`);
+    } else {
+      console.error(`bootstrap apply: registry META unreadable (${metaRead.error}); this plan assumes an unregistered project and --execute will refuse (#7138)`);
     }
-    const vars = withDerivedRepoVars(rawVars, parsedRepo, o.class, bootstrapReleaseTrack, registryRequiredCheckBranches, registryMeta?.requiredChecks);
+    const vars = withDerivedRepoVars(rawVars, parsedRepo, o.class, effectiveTrack, registryRequiredCheckBranches, registryMeta?.requiredChecks);
     if (!vars.PROJECT_ID) {
       try {
         const r = await gh(linkedProjectsQueryArgs(parsedRepo.owner, parsedRepo.name));
@@ -30591,7 +30642,9 @@ ${onlyManagedBlock ? `Only the marker-bounded Hub-managed block inside repo-owne
           projectType: o.projectType || registryMeta?.projectType || void 0,
           // #6090: META is authoritative on a rerun
           deployModel: o.deployModel || registryMeta?.deployModel || void 0,
-          releaseTrack: bootstrapReleaseTrack
+          // #7134: explicit flag only; the registered track and edge domains win on a re-run.
+          releaseTrack: o.releaseTrack || void 0,
+          existing: registryMeta
         });
       } catch (e) {
         return fail(`bootstrap apply: ${e.message}`);
@@ -33115,7 +33168,8 @@ async function collectOnboardStatus(opts = {}) {
   let board = { ok: false, detail: "no config" };
   try {
     if (cfg.sagaApiUrl) {
-      const report = await readBoard({ config: cfg }, { snapshot: registryClientDeps(cfg) });
+      const boardCfg = await loadConfigOrDiscover();
+      const report = await readBoard({ config: boardCfg }, { snapshot: registryClientDeps(boardCfg) });
       const total = report.primary.claimable.length + report.primary.userOwned.length + report.primary.taken.length;
       board = { ok: true, detail: `board has ${total} active items (${report.primary.claimable.length} claimable, ${report.primary.userOwned.length} yours)` };
     } else {
@@ -41149,6 +41203,8 @@ async function prCreateClaimRefusal(body, repoOption, deps = {}) {
   const repo = await requireRepo(repoOption);
   const { client, throttledPaths } = withRateLimitRetry(deps.client ?? defaultGitHubClient(), deps);
   const actor = deps.actor ?? describeSessionIdentity();
+  const source = deps.actorSource ?? (deps.actor ? "the caller-supplied identity" : readSessionIdSource(process.env) ?? "a synthesized fallback");
+  const requester = `requesting lane: ${actor.surface}/${actor.session}@${actor.host} (session id from ${source})`;
   const checkContest = deps.checkContest ?? checkLaneContest;
   for (const number of issues) {
     const state = await client.rest("GET", `repos/${repo}/issues/${number}`).then((issue) => issue?.state, () => void 0);
@@ -41166,10 +41222,10 @@ async function prCreateClaimRefusal(body, repoOption, deps = {}) {
       contest.unverifiable.length ? `liveness could not be fully verified (failed to read: ${contest.unverifiable.join(", ")})` : ""
     ].filter(Boolean).join("; ");
     if (!contest.marker && !contest.unverifiable.includes("comments")) {
-      return `pr create: REFUSED \u2014 ${ref} carries no claim marker (its claim-marker comments were read from ${commentsPath} and name no holder) and shows ${kinds} work evidence (${why}); if this work is yours, \`mmi-cli oracle board claim ${ref} --force\` re-stamps your lane's marker and clears the refusal (move it to In Progress first if it sits In Review), or drop the closing line before creating this PR`;
+      return `pr create: REFUSED \u2014 ${ref} carries no claim marker (its claim-marker comments were read from ${commentsPath} and name no holder) and shows ${kinds} work evidence (${why}); if this work is yours, \`mmi-cli oracle board claim ${ref} --force\` re-stamps your lane's marker and clears the refusal (move it to In Progress first if it sits In Review), or drop the closing line before creating this PR; ${requester}`;
     }
     const holder = contest.marker ? `lane ${describeClaimMarker(contest.marker)} (claim marker read from ${commentsPath}${posted})` : `an unreadable lane (its claim-marker comments could not be read${throttledPaths.has(commentsPath) ? " \u2014 GitHub rate-limited the read (HTTP 403) and the bounded reset-aware retry could not clear it" : ""}; the holder may be this very lane)`;
-    return `pr create: REFUSED \u2014 ${ref} is held by ${holder} with ${kinds} work evidence (${why}); run \`mmi-cli oracle board claim ${ref} --force\` (move it to In Progress first if it sits In Review) or drop the closing line before creating this PR`;
+    return `pr create: REFUSED \u2014 ${ref} is held by ${holder} with ${kinds} work evidence (${why}); run \`mmi-cli oracle board claim ${ref} --force\` (move it to In Progress first if it sits In Review) or drop the closing line before creating this PR; ${requester}`;
   }
   return void 0;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.17",
+  "version": "4.5.19",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",