@mutmutco/cli 4.5.28 → 4.5.30

package/dist/main.cjs

@@ -16818,10 +16818,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.28",
-    tag: "v4.5.28",
-    commit: "7b61e100e4df",
-    npm: "@mutmutco/cli@4.5.28"
+    version: "4.5.30",
+    tag: "v4.5.30",
+    commit: "058d754e0aae",
+    npm: "@mutmutco/cli@4.5.30"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -16838,14 +16838,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.28"
+          v3Target: "v4.5.30"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.28 and redeploy the Hub Lambda from tag v4.5.28 (7b61e100e4df); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.28 (@mutmutco/cli@4.5.28, tag commit 7b61e100e4df \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.30 and redeploy the Hub Lambda from tag v4.5.30 (058d754e0aae); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.30 (@mutmutco/cli@4.5.30, tag commit 058d754e0aae \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -19158,7 +19158,7 @@ async function correlateRun(deps, args) {
     });
     const tokens2 = args.mode === "dispatch" ? args.titleIncludes : void 0;
     const titleMatch = tokens2 && tokens2.length ? candidates.find((c) => tokens2.every((t) => (c.row.displayTitle ?? "").includes(t))) : void 0;
-    const match = titleMatch ?? (args.mode === "workflow" || windowProvenWhole ? candidates[0] : void 0);
+    const match = titleMatch ?? (!("requireTitleMatch" in args && args.requireTitleMatch) && (args.mode === "workflow" || windowProvenWhole) ? candidates[0] : void 0);
     if (match) return { runId: match.row.databaseId, runUrl: match.row.url, read: "found" };
     if (!windowProvenWhole) truncatedWindow = true;
   }
@@ -19179,8 +19179,8 @@ async function correlateRun(deps, args) {
 function correlateTenantRun(deps, since, titleIncludes) {
   return correlateRun(deps, { workflow: "tenant-deploy.yml", since, mode: "dispatch", titleIncludes });
 }
-function correlateGetPublishRun(deps, since, product) {
-  return correlateRun(deps, { workflow: "get-publish.yml", since, mode: "dispatch", titleIncludes: [product] });
+function correlateGetPublishRun(deps, since, product, mode) {
+  return correlateRun(deps, { workflow: "get-publish.yml", since, mode: "dispatch", titleIncludes: [product, ...mode ? [mode] : []], ...mode ? { requireTitleMatch: true } : {} });
 }
 function correlateControlRun(deps, since, titleIncludes) {
   return correlateRun(deps, { workflow: "tenant-control.yml", since, mode: "dispatch", titleIncludes });
@@ -20063,10 +20063,50 @@ async function appendMmiGetRedeploy(deps, input, dispatch) {
     workflowRuns: [...dispatch.workflowRuns ?? [], { ...runRow, conclusion: "success" }]
   };
 }
+async function appendServedChannelStage(deps, input, dispatch) {
+  if (!isHubControlRepo(input.repo)) return dispatch;
+  const remedy = `${getPublishDispatchCommand(input.repo)} -f mode=stage`;
+  const prior = await findPriorGreenDispatch(deps, input.repo, "get-publish.yml", input.releaseSha, [HUB_SERVED_PRODUCT, "stage"]);
+  let row;
+  if (prior) {
+    row = { workflow: "get-publish.yml", runId: prior.runId, ...prior.runUrl ? { runUrl: prior.runUrl } : {}, conclusion: "success" };
+  } else {
+    const since = (deps.now ?? Date.now)();
+    try {
+      await deps.run("gh", ["workflow", "run", "get-publish.yml", "--repo", input.repo, "--ref", "main", "-f", `product=${HUB_SERVED_PRODUCT}`, "-f", "mode=stage"]);
+    } catch (e) {
+      const why = e instanceof Error ? e.message : String(e);
+      return {
+        ...dispatch,
+        note: `${dispatch.note}; get-publish stage dispatch FAILED: ${why} \u2014 recover with \`${remedy}\``,
+        deployStatus: "failure",
+        workflowRuns: [...dispatch.workflowRuns ?? [], planeFailureRow("get-publish.yml", `stage dispatch refused: ${why}`)]
+      };
+    }
+    const correlated = await correlateGetPublishRun(deps, since, HUB_SERVED_PRODUCT, "stage");
+    if (correlated.read !== "found") {
+      return {
+        ...dispatch,
+        note: `${dispatch.note}; get-publish stage dispatched but its run could not be READ \u2014 check Actions; recover with \`${remedy}\``,
+        deployStatus: "failure",
+        workflowRuns: [...dispatch.workflowRuns ?? [], planeFailureRow("get-publish.yml", "stage dispatched, but its run could not be read")]
+      };
+    }
+    row = { workflow: "get-publish.yml", runId: correlated.runId, ...correlated.runUrl ? { runUrl: correlated.runUrl } : {}, conclusion: "pending" };
+    if (input.watch) row.conclusion = await watchTenantRun(deps, correlated.runId, input.repo);
+  }
+  return {
+    ...dispatch,
+    note: `${dispatch.note}; get-publish stage ${row.conclusion}${row.conclusion === "failure" ? ` \u2014 recover with \`${remedy}\`` : ""}`,
+    workflowRuns: [...dispatch.workflowRuns ?? [], row],
+    ...row.conclusion === "failure" ? { deployStatus: "failure" } : {}
+  };
+}
 async function appendServedChannelPublish(deps, input, dispatch, redeployed) {
   if (!isHubControlRepo(input.repo)) return dispatch;
   const channelUrl = input.channelUrl ?? readServedChannelUrl();
   const remedy = getPublishDispatchCommand(input.repo);
+  const pointerRemedy = input.tag ? `${remedy} -f mode=pointer -f version=${input.tag.replace(/^v/, "")}` : remedy;
   const withNote = (note, deployStatus, row) => ({
     ...dispatch,
     note: `${dispatch.note}; ${note}`,
@@ -20076,23 +20116,25 @@ async function appendServedChannelPublish(deps, input, dispatch, redeployed) {
   if (input.publishStatus !== "success") {
     return withNote(`served channel NOT moved (publish did not succeed) \u2014 after the publish is green, run \`${remedy}\``);
   }
-  const prior = input.releaseSha ? await findPriorGreenDispatch(deps, input.repo, "get-publish.yml", input.releaseSha, [HUB_SERVED_PRODUCT]) : void 0;
+  const prior = input.releaseSha ? await findPriorGreenDispatch(deps, input.repo, "get-publish.yml", input.releaseSha, [HUB_SERVED_PRODUCT, "pointer"]) : void 0;
   let runRow;
   let runStatus;
   if (prior) {
     runRow = { workflow: "get-publish.yml", runId: prior.runId, ...prior.runUrl ? { runUrl: prior.runUrl } : {} };
     runStatus = "success";
   } else {
+    const version = input.tag?.replace(/^v/, "") ?? (deps.readLauncherVersion ?? readLocalLauncherVersion)();
+    if (!version) return withNote("the local launcher version could not be read \u2014 nothing was compared, so the move is unverified");
     const since = (deps.now ?? Date.now)();
     try {
-      await deps.run("gh", ["workflow", "run", "get-publish.yml", "--repo", input.repo, "--ref", "main", "-f", `product=${HUB_SERVED_PRODUCT}`]);
+      await deps.run("gh", ["workflow", "run", "get-publish.yml", "--repo", input.repo, "--ref", "main", "-f", `product=${HUB_SERVED_PRODUCT}`, "-f", "mode=pointer", "-f", `version=${version}`]);
     } catch (e) {
       const msg = e instanceof Error ? e.message : String(e);
-      return withNote(`get-publish dispatch FAILED: ${msg}. The release itself landed, but the SERVED CHANNEL IS UNCHANGED \u2014 recover with \`${remedy}\``, "failure", planeFailureRow("get-publish.yml", `dispatch refused: ${msg}`));
+      return withNote(`get-publish dispatch FAILED: ${msg}. The release itself landed, but the SERVED CHANNEL IS UNCHANGED \u2014 recover with \`${pointerRemedy}\``, "failure", planeFailureRow("get-publish.yml", `dispatch refused: ${msg}`));
     }
-    const correlated = await correlateGetPublishRun(deps, since, HUB_SERVED_PRODUCT);
-    if (correlated.read === "failed") {
-      return withNote(`get-publish dispatched but its run could not be READ: ${correlated.error}. Check the Actions tab; if it never ran, recover with \`${remedy}\``, "failure", planeFailureRow("get-publish.yml", `dispatched, but its run could not be read`));
+    const correlated = await correlateGetPublishRun(deps, since, HUB_SERVED_PRODUCT, "pointer");
+    if (correlated.read !== "found") {
+      return withNote(`get-publish dispatched but its run could not be READ: ${correlated.error ?? "no matching run appeared"}. Check the Actions tab; if it never ran, recover with \`${pointerRemedy}\``, "failure", planeFailureRow("get-publish.yml", `dispatched, but its run could not be read`));
     }
     const { runId, runUrl } = correlated;
     runRow = { workflow: "get-publish.yml", ...runId ? { runId } : {}, ...runUrl ? { runUrl } : {} };
@@ -20108,7 +20150,7 @@ async function appendServedChannelPublish(deps, input, dispatch, redeployed) {
   if (runStatus !== "success") {
     return {
       ...dispatch,
-      note: `${dispatch.note}; get-publish.yml ${runStatus} \u2014 the SERVED CHANNEL IS UNCHANGED; recover with \`${remedy}\``,
+      note: `${dispatch.note}; get-publish.yml ${runStatus} \u2014 the SERVED CHANNEL IS UNCHANGED; recover with \`${pointerRemedy}\``,
       workflowRuns: [...dispatch.workflowRuns ?? [], { ...runRow, conclusion: runStatus }],
       deployStatus: "failure"
     };
@@ -20145,7 +20187,7 @@ async function appendServedChannelPublish(deps, input, dispatch, redeployed) {
   if (expected && probe.version !== expected) {
     return {
       ...dispatch,
-      note: `${dispatch.note}; get-publish.yml succeeded but the served channel still reports ${probe.version} (expected launcher ${expected}) \u2014 THE CHANNEL DID NOT MOVE; recover with \`${remedy}\``,
+      note: `${dispatch.note}; get-publish.yml succeeded but the served channel still reports ${probe.version} (expected launcher ${expected}) \u2014 THE CHANNEL DID NOT MOVE; recover with \`${pointerRemedy}\``,
       workflowRuns: evidence("failure", `${channelUrl} reports ${probe.version}, expected ${expected}`),
       deployStatus: "failure"
     };
@@ -20286,14 +20328,33 @@ function mergeServedLegs(base, first, second) {
     ...first.deployStatus === "failure" || second.deployStatus === "failure" ? { deployStatus: "failure" } : {}
   };
 }
+function prepareServedChannel(deps, input) {
+  const base = { note: "", deployStatus: "success", workflowRuns: [] };
+  const prepared = Promise.all([
+    appendMmiGetRedeploy(deps, { ...input, publishStatus: "success" }, base),
+    appendServedChannelStage(deps, input, base)
+  ]).then(([box, stage]) => mergeServedLegs(base, box, stage));
+  prepared.catch(() => void 0);
+  return prepared;
+}
 async function appendServedChannelLegs(deps, input, dispatch) {
   const publishStatus = input.publish?.state === "complete" ? "success" : "failure";
-  const redeployed = appendMmiGetRedeploy(deps, { repo: input.repo, publishStatus, watch: input.watch, releaseSha: input.releaseSha }, dispatch);
-  const [box, channel] = await Promise.all([
-    redeployed,
-    appendServedChannelPublish(deps, { repo: input.repo, publishStatus, watch: input.watch, releaseSha: input.releaseSha, tag: input.tag }, dispatch, redeployed)
-  ]);
-  const out = mergeServedLegs(dispatch, box, channel);
+  const prepared = await (input.prepared ?? prepareServedChannel(deps, input));
+  if (!isHubControlRepo(input.repo)) {
+    const [home2, proof2] = await Promise.all([
+      appendInstallHomePublish(deps, { repo: input.repo, installer: input.installer, publishStatus, watch: input.watch }, dispatch),
+      appendServedChannelProof(deps, { repo: input.repo, tag: input.tag, shipped: shipLegsGreen(input.deploy, input.publish), installer: input.installer }, dispatch)
+    ]);
+    return mergeServedLegs(dispatch, home2, proof2);
+  }
+  const stageGreen = (prepared.workflowRuns ?? []).filter((r) => r.workflow === "get-publish.yml").every((r) => r.conclusion === "success");
+  const channel = stageGreen || !isHubControlRepo(input.repo) || publishStatus !== "success" ? await appendServedChannelPublish(deps, { repo: input.repo, publishStatus, watch: input.watch, releaseSha: input.releaseSha, tag: input.tag }, dispatch, Promise.resolve(prepared)) : { ...dispatch, note: `${dispatch.note}; served channel NOT moved (stage not green) \u2014 recover with \`${getPublishDispatchCommand(input.repo)} -f mode=stage\`, then \`${getPublishDispatchCommand(input.repo)} -f mode=pointer -f version=${input.tag.replace(/^v/, "")}\`` };
+  const out = mergeServedLegs(dispatch, {
+    ...dispatch,
+    note: dispatch.note + prepared.note,
+    workflowRuns: [...dispatch.workflowRuns ?? [], ...prepared.workflowRuns ?? []],
+    ...prepared.deployStatus === "failure" ? { deployStatus: "failure" } : {}
+  }, channel);
   const [home, proof] = await Promise.all([
     appendInstallHomePublish(deps, { repo: input.repo, installer: input.installer, publishStatus, watch: input.watch }, out),
     appendServedChannelProof(deps, { repo: input.repo, tag: input.tag, shipped: shipLegsGreen(input.deploy, input.publish), installer: input.installer }, out)
@@ -25317,6 +25378,7 @@ ${recovery.note}`), recoveryInput);
   await verifyPublishedRelease(deps, ctx.repo, tag, "main", releaseSha);
   await recordPhase(ledger, deps, ledgerAnchors, "githubRelease", phaseEntry({ state: "complete", sha: releaseSha, runUrl: releaseUrl, note: `verified GitHub Release ${tag} against ${releaseSha.slice(0, 12)}` }), { landed: "the immutable tag, the green required-check wall, and the origin/main fast-forward" });
   let alignment = alignEarly ? await alignEarly() : void 0;
+  const prepared = prepareServedChannel(deps, { repo: ctx.repo, releaseSha, watch });
   const [deployDispatch0, publishDispatch0] = await joinDeployAndPublish(
     dispatchDeploy(deps, ctx, "main", "main", deployModel, watch, autoRunSince, releaseSha, "report", meta.publishDir),
     observePublishIfRequired(deps, ctx, meta, deployModel, "main", releaseSha, watch)
@@ -25367,7 +25429,7 @@ ${recovery.note}`), recoveryInput);
   const aligning = watch && alignment ? awaitAlignmentsLanded(deps, ctx, alignment) : Promise.resolve(alignment);
   const dispatch = await appendServedChannelLegs(
     deps,
-    { repo: ctx.repo, tag, releaseSha, watch, deploy: deployLeg, publish: publishLeg, installer: meta.installer },
+    { repo: ctx.repo, tag, releaseSha, watch, deploy: deployLeg, publish: publishLeg, installer: meta.installer, prepared },
     appendPublishDispatch(deployDispatch, publishDispatch)
   );
   alignment = await aligning;
@@ -25859,6 +25921,7 @@ ${recovery.note}`), recoveryInput);
   await recordPhase(ledger, deps, anchors, "githubRelease", phaseEntry({ state: "complete", sha: tagSha, runUrl: releaseUrl, note: "verified the Release published against the tagged commit" }), { strict: ledgerMode === "strict", landed: "the immutable tag, the re-proven wall, and the origin/main push" });
   let devRollForward = await rollDevelopmentForward(deps, ctx, tag);
   let rcAlignment = !directTrack && branchHints.hasRcBranch ? await alignRcForward(deps, ctx, tag) : void 0;
+  const channelPreparation = prepareServedChannel(deps, { repo: ctx.repo, releaseSha: tagSha, watch });
   const [deployDispatch0, publishDispatch0] = await joinDeployAndPublish(
     dispatchDeploy(deps, ctx, "main", "main", deployModel, watch, autoRunSince, tagSha, "report", meta.publishDir),
     observePublishIfRequired(deps, ctx, meta, deployModel, "main", tagSha, watch)
@@ -25902,7 +25965,7 @@ ${recovery.note}`), recoveryInput);
   }
   const dispatch = await appendServedChannelLegs(
     deps,
-    { repo: ctx.repo, tag, releaseSha: tagSha, watch, deploy: deployLeg, publish: publishLeg, installer: meta.installer },
+    { repo: ctx.repo, tag, releaseSha: tagSha, watch, deploy: deployLeg, publish: publishLeg, installer: meta.installer, prepared: channelPreparation },
     appendPublishDispatch(deployDispatch, publishDispatch)
   );
   const announcing = announceShippedRelease(
@@ -46640,7 +46703,7 @@ async function appendHotfixServedChannel(deps, input, runs, note) {
   const before = hotfixDispatchFromRuns(runs, note);
   const after = await appendServedChannelLegs(
     deps,
-    { repo: input.repo, tag: input.tag, releaseSha: input.sha, watch: true, deploy: input.deploy, publish: input.publish, installer: input.installer },
+    { repo: input.repo, tag: input.tag, releaseSha: input.sha, watch: true, deploy: input.deploy, publish: input.publish, installer: input.installer, prepared: input.prepared },
     before
   );
   for (const row of servedChannelRowsAfter(before, after)) {
@@ -46873,6 +46936,7 @@ ${decision.note}`);
     releaseNote = `Release ${tag} created (target main)`;
   }
   await recordHotfixPhase(ledger, anchors, "githubRelease", { state: "complete", sha: mergedSha, note: releaseNote }, "the immutable tag, the green wall, and origin/main");
+  const prepared = prepareServedChannel(deps, { repo: ctx.repo, releaseSha: mergedSha, watch: true });
   const runs = [];
   let deployNote;
   let tenantPublishDispatch = null;
@@ -46931,7 +46995,7 @@ ${decision.note}`);
   );
   await recordHotfixPhase(ledger, anchors, "deploy", ledgerInputs.deploy, "the immutable tag, the green wall, origin/main, and the GitHub Release");
   await recordHotfixPhase(ledger, anchors, "publish", ledgerInputs.publish, "the immutable tag, the green wall, origin/main, the GitHub Release, and the deploy path");
-  deployNote = await appendHotfixServedChannel(deps, { repo: ctx.repo, tag, sha: mergedSha, deploy: ledgerInputs.deploy, publish: ledgerInputs.publish, installer: meta.installer }, runs, deployNote);
+  deployNote = await appendHotfixServedChannel(deps, { repo: ctx.repo, tag, sha: mergedSha, deploy: ledgerInputs.deploy, publish: ledgerInputs.publish, installer: meta.installer, prepared }, runs, deployNote);
   const announceNote = releaseExists ? void 0 : await announceShippedRelease(
     deps,
     { repo: ctx.repo, tag, summaryFile: options.announceSummaryFile },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.28",
+  "version": "4.5.30",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",