@mutmutco/cli 4.5.184 → 4.5.186

package/dist/main.cjs

@@ -7356,11 +7356,12 @@ async function readAppVaultSecret(read) {
   try {
     return await read();
   } catch (e) {
-    const reason = e.message;
-    if (/^(Hub GitHub App allowance used up|rate limited)/.test(reason)) {
-      throw new AppActorError(`app actor: the vault could not read the App credentials because GitHub is rate-limited, not a denial: ${reason}`, "mint-failed");
+    const reason = e instanceof Error ? e.message : String(e);
+    const unwrapped = reason.replace(/^Hub vault read failed:\s*/, "");
+    if (/^(Hub GitHub App allowance used up|rate limited)/.test(unwrapped)) {
+      throw new AppActorError(`app actor: the vault could not read the App credentials because GitHub is rate-limited, not a denial: ${unwrapped}`, "mint-failed");
     }
-    if (/^authority refused|\(HTTP 40[14]\b/.test(reason)) return null;
+    if (/^authority refused|\(HTTP 40[134]\b/.test(unwrapped)) return null;
     throw new AppActorError(`app actor: the vault read of the App credentials failed, not a denial: ${reason}`, "mint-failed");
   }
 }
@@ -19192,10 +19193,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.184",
-    tag: "v4.5.184",
-    commit: "72e9e377ded3",
-    npm: "@mutmutco/cli@4.5.184"
+    version: "4.5.186",
+    tag: "v4.5.186",
+    commit: "f75f2099b6e1",
+    npm: "@mutmutco/cli@4.5.186"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19212,14 +19213,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.184"
+          v3Target: "v4.5.186"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.184 and redeploy the Hub Lambda from tag v4.5.184 (72e9e377ded3); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.184 (@mutmutco/cli@4.5.184, tag commit 72e9e377ded3 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.186 and redeploy the Hub Lambda from tag v4.5.186 (f75f2099b6e1); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.186 (@mutmutco/cli@4.5.186, tag commit f75f2099b6e1 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -26866,6 +26867,8 @@ function enforceBumpRules(input) {
     return decision();
   }
   if (proposal.breaking.length && effective === "patch") {
+    if (input.suite && input.revamp) return decision();
+    if (input.suite) throw new Error(`range carries breaking changes (${evidence}): suite versions auto-mint as patch (#8224), so release it as an owner-approved revamp with --owner-go --big, or ship a shim (#8666)`);
     throw new Error(input.preOneZero ? `range carries breaking changes (${evidence}): this repo is held on 0.x.y, so declare MMI_BUMP_INTENT=minor with MMI_BUMP_REASON, or ship a shim (patch) (#8499)` : `range carries breaking changes (${evidence}): ship a shim (patch) or declare an owner-gated major (MMI_BUMP_INTENT=major, MMI_BUMP_REASON, MMI_MAJOR_APPROVED=<version>) (#8499)`);
   }
   if (proposal.breaking.length && !input.preOneZero) {
@@ -29958,7 +29961,7 @@ async function resolveTrainBumpIntent(deps, env = process.env, latestRelease, pr
   }
   return "patch";
 }
-async function enforceTrainBump(deps, env, intent, preOneZero, source) {
+async function enforceTrainBump(deps, env, intent, preOneZero, source, suite = { suite: false, revamp: false }) {
   const raw = await deps.run("git", ["log", `origin/main..${source}`, RANGE_LOG_FORMAT]);
   const proposal = proposeBump(parseRangeLog(raw), { preOneZero });
   let majorTarget;
@@ -29967,7 +29970,7 @@ async function enforceTrainBump(deps, env, intent, preOneZero, source) {
     const latest = await latestLocalReleaseTag(deps, void 0, preOneZero);
     majorTarget = explicit || `${latest.major + 1}.0.0`;
   }
-  return enforceBumpRules({ intent, env, proposal, preOneZero, majorTarget });
+  return enforceBumpRules({ intent, env, proposal, preOneZero, majorTarget, ...suite });
 }
 async function resolveHotfixVersion(deps, env = process.env, preOneZero = false) {
   const latest = await latestLocalReleaseTag(deps, "origin/main", preOneZero);
@@ -30022,7 +30025,8 @@ async function runTrainApplyLocked(command, deps, options = {}) {
     process.env,
     declaredIntent,
     preOneZeroInForce(meta),
-    command === "release" && !directTrack && options.dev !== true ? "origin/rc" : "origin/development"
+    command === "release" && !directTrack && options.dev !== true ? "origin/rc" : "origin/development",
+    { suite: !!meta.suite, revamp: command === "release" && options.big === true }
   );
   const bumpIntent = bump.intent;
   const bumpReceipt = { intent: bump.intent, reason: bump.reason, proposed: bump.proposed, breaking: bump.breaking };
@@ -30486,6 +30490,7 @@ function trackUnauditableReads(deps) {
     if (reason) return;
     const err = e;
     if (err?.rateLimited) reason = `GitHub App rate-limited: ${err.message ?? "rate limit exceeded"}`;
+    else if (err?.name === "AppActorError" || err?.code === "mint-failed") reason = err.message ?? "GitHub App token mint failed";
     else if (err?.status === 403 || err?.status === 429) reason = `HTTP ${err.status}${err.message ? `: ${err.message}` : ""}`;
   };
   const client = {
@@ -57941,9 +57946,10 @@ async function reportWrite(label, res) {
   return failGraceful(`${label}: HTTP ${res.status}${detail ? ` \u2014 ${detail}` : ""}`);
 }
 var tenant = program2.command("tenant").description("tenant runtime control through Hub authority");
-tenant.command("control <owner/repo> <stage> <action>").description("bounded tenant control plus value-free vault/broker verification; dev/main retire needs master and exact data-loss confirmation").option("--watch", "block on the dispatched run and report its conclusion (status/retire/verify-secrets/verify-broker/logs watch by default)").option("--lines <n>", "logs only: trailing lines of the tenant service to return (1-2000, default 200)").option("--since <utc>", "logs only: read the journal from this UTC time, e.g. 2026-10-07T13:10Z (includes replaced containers)").option("--until <utc>", "logs only: read the journal up to this UTC time").option("--edge", "logs only: Caddy journal for this stage\u2019s hosts (default window: last 15 minutes)").option("--task <name>", "run-task only: registry-declared task name (never a command)").option("--artifact <id>", "run-task only: opaque id returned by tenant artifact put").option("--resume <run-id>", "run-task only: re-attach to an already-dispatched run (read-only, never re-dispatches) and print its receipt").option("--confirm-data-loss <owner/repo/stage>", "dev/main retire only: exact target to decommission; without it show the dry-run plan").option("--json", "machine-readable output").action(async (repo, stage, action, o) => {
+tenant.command("control <owner/repo> <stage> <action>").description("bounded tenant control plus value-free vault/broker verification; dev/main retire needs master and exact data-loss confirmation").option("--watch", "block on the dispatched run and report its conclusion (status/retire/verify-secrets/verify-broker/logs watch by default)").option("--lines <n>", "logs only: trailing lines of the tenant service to return (1-2000, default 200)").option("--since <utc>", "logs only: read the journal from this UTC time, e.g. 2026-10-07T13:10Z (includes replaced containers)").option("--until <utc>", "logs only: read the journal up to this UTC time").option("--edge", "logs only: Caddy journal for this stage\u2019s hosts (default window: last 15 minutes)").option("--task <name>", "run-task only: registry-declared task name (never a command)").option("--artifact <id>", "run-task only: opaque id returned by tenant artifact put").option("--input <file>", "run-task only: upload this file as the task artifact (same as tenant artifact put), then run with its id").option("--resume <run-id>", "run-task only: re-attach to an already-dispatched run (read-only, never re-dispatches) and print its receipt").option("--confirm-data-loss <owner/repo/stage>", "dev/main retire only: exact target to decommission; without it show the dry-run plan").option("--json", "machine-readable output").action(async (repo, stage, action, o) => {
   try {
-    if (o.resume !== void 0 && (action !== "run-task" || !/^\d+$/.test(o.resume) || o.task || o.artifact)) return fail("runtime tenant control: --resume <run-id> is run-task-only, takes a numeric run id, and cannot be combined with --task/--artifact");
+    if (o.resume !== void 0 && (action !== "run-task" || !/^\d+$/.test(o.resume) || o.task || o.artifact || o.input)) return fail("runtime tenant control: --resume <run-id> is run-task-only, takes a numeric run id, and cannot be combined with --task/--artifact/--input");
+    if (o.input !== void 0 && o.artifact !== void 0) return fail("runtime tenant control: pass --input <file> or --artifact <id>, not both");
     if (o.confirmDataLoss !== void 0 && (action !== "retire" || stage === "rc")) return fail("runtime tenant control: --confirm-data-loss is dev/main retire-only");
     if (action === "retire" && (stage === "dev" || stage === "main")) {
       if (o.confirmDataLoss !== void 0 && o.confirmDataLoss !== `${repo}/${stage}`) return fail(`runtime tenant control: --confirm-data-loss must match ${repo}/${stage} exactly`);
@@ -57969,10 +57975,11 @@ Dry run: pass --confirm-data-loss ${repo}/${stage} to decommission.`);
     }
     if (action === "run-task") {
       if (!o.task && o.resume === void 0) return fail("runtime tenant control: run-task requires --task <declared-name>");
-    } else if (o.task || o.artifact) {
-      return fail("runtime tenant control: --task/--artifact are valid only for run-task");
+    } else if (o.task || o.artifact || o.input) {
+      return fail("runtime tenant control: --task/--artifact/--input are valid only for run-task");
     }
-    const result = await runTenantControl(trainApplyDeps(), { repo, stage, action, watch: o.watch, lines: lines2, edge: o.edge, logSince: o.since, logUntil: o.until, task: o.task, artifact: o.artifact, confirmDataLoss: o.confirmDataLoss, resume: o.resume === void 0 ? void 0 : Number(o.resume) });
+    const artifact = o.input === void 0 ? o.artifact : (await putTenantArtifact(repo, stage, o.input, registryClientDeps(await loadConfig()))).artifactId;
+    const result = await runTenantControl(trainApplyDeps(), { repo, stage, action, watch: o.watch, lines: lines2, edge: o.edge, logSince: o.since, logUntil: o.until, task: o.task, artifact, confirmDataLoss: o.confirmDataLoss, resume: o.resume === void 0 ? void 0 : Number(o.resume) });
     if (!o.json && action === "verify-secrets" && result.secrets) {
       const body = { ok: result.conclusion === "success", secrets: result.secrets, ssmStatus: result.conclusion === "success" ? "Success" : "Failed", raw: result.secretsRaw };
       const { lines: lines3, failure } = renderVerifySecrets(body);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.184",
+  "version": "4.5.186",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",