@mutmutco/cli 4.5.34 → 4.5.35

package/dist/main.cjs

@@ -16840,10 +16840,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.34",
-    tag: "v4.5.34",
-    commit: "fe244fb48abc",
-    npm: "@mutmutco/cli@4.5.34"
+    version: "4.5.35",
+    tag: "v4.5.35",
+    commit: "f10f5c65382f",
+    npm: "@mutmutco/cli@4.5.35"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -16860,14 +16860,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.34"
+          v3Target: "v4.5.35"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.34 and redeploy the Hub Lambda from tag v4.5.34 (fe244fb48abc); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.34 (@mutmutco/cli@4.5.34, tag commit fe244fb48abc \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.35 and redeploy the Hub Lambda from tag v4.5.35 (f10f5c65382f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.35 (@mutmutco/cli@4.5.35, tag commit f10f5c65382f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -34313,12 +34313,13 @@ var import_node_crypto11 = require("node:crypto");
 var SCHEMA = "mmi-suite-cut/v1";
 var SHA2 = /^[a-f0-9]{40}$/i;
 var RC_TAG = /^v\d+\.\d+\.\d+-rc\.\d+$/;
+var RELEASE_TAG = /^v\d+\.\d+\.\d+$/;
 function suitePins(record) {
-  return record.members.map((m) => ({
+  return record.members.map((m) => m.carried ? { module: m.id, rc: m.rcPin, main: m.mainPin } : {
     module: m.id,
     rc: `https://${m.id === "katip" ? m.rcHost ?? m.host : m.host}/${m.id === "katip" ? "" : "rc/"}module.js?v=${m.tag}`,
     main: `https://${m.host}/module.js?v=${suiteReleaseTag(m.tag)}`
-  }));
+  });
 }
 function suiteReleaseTag(rc) {
   if (!RC_TAG.test(rc)) throw new Error(`invalid rc tag ${rc}`);
@@ -34338,7 +34339,7 @@ function readSuiteCut(path2) {
   } catch {
     throw new Error(`suite cut record unreadable at ${path2}; repair it, never recut`);
   }
-  if (record.schema !== SCHEMA || record.lead !== SUITE_REPO || !SHA2.test(record.leadDevelopment) || !SHA2.test(record.leadPreviousRc) || !Array.isArray(record.members) || record.members.length === 0 || record.pinPr !== void 0 && (typeof record.pinPr !== "string" || !record.pinPr.startsWith("https://github.com/mutmutco/MM-Work/pull/")) || record.pinMerged !== void 0 && (record.pinMerged !== true && record.pinMerged !== false || !record.pinPr) || record.leadRcTag !== void 0 && (!RC_TAG.test(record.leadRcTag) || !SHA2.test(record.leadRcSha ?? "") || !record.pinMerged) || record.leadReleased !== void 0 && (record.leadReleased !== true || !record.leadRcTag) || record.announcement !== void 0 && (!["pending", "sent"].includes(record.announcement) || !record.leadReleased) || record.members.some((m) => !m.id || !m.repo || !m.backend || !m.host || !SHA2.test(m.development) || !SHA2.test(m.previousRc) || m.rcWasAbsent !== void 0 && m.rcWasAbsent !== true || m.tag !== void 0 && (!RC_TAG.test(m.tag) || !SHA2.test(m.sha ?? "")) || m.published !== void 0 && (m.published !== true || !m.tag) || m.released !== void 0 && (m.released !== true || !m.published) || m.backendAfterRelease !== void 0 && (!m.released || typeof m.backendAfterRelease !== "string")))
+  if (record.schema !== SCHEMA || record.lead !== SUITE_REPO || !SHA2.test(record.leadDevelopment) || !SHA2.test(record.leadPreviousRc) || !Array.isArray(record.members) || record.members.length === 0 || record.pinPr !== void 0 && (typeof record.pinPr !== "string" || !record.pinPr.startsWith("https://github.com/mutmutco/MM-Work/pull/")) || record.pinMerged !== void 0 && (record.pinMerged !== true && record.pinMerged !== false || !record.pinPr) || record.leadRcTag !== void 0 && (!RC_TAG.test(record.leadRcTag) || !SHA2.test(record.leadRcSha ?? "") || !record.pinMerged) || record.leadReleased !== void 0 && (record.leadReleased !== true || !record.leadRcTag) || record.announcement !== void 0 && (!["pending", "sent"].includes(record.announcement) || !record.leadReleased) || record.members.some((m) => !m.id || !m.repo || !m.backend || !m.host || !SHA2.test(m.development) || !SHA2.test(m.previousRc) || m.rcWasAbsent !== void 0 && m.rcWasAbsent !== true || m.tag !== void 0 && (!RC_TAG.test(m.tag) || !SHA2.test(m.sha ?? "")) || m.published !== void 0 && (m.published !== true || !m.tag) || m.released !== void 0 && (m.released !== true || !m.published) || m.backendAfterRelease !== void 0 && (!m.released || typeof m.backendAfterRelease !== "string") || m.carried !== void 0 && (m.carried !== true || m.tag !== void 0 || m.published !== void 0 || !isPin(m.rcPin) || !isPin(m.mainPin)) || m.carried === void 0 && (m.rcPin !== void 0 || m.mainPin !== void 0)))
     throw new Error(`suite cut record has unknown or invalid state at ${path2}; repair it, never recut`);
   return record;
 }
@@ -34352,6 +34353,27 @@ function writeSuiteCut(path2, record) {
     throw new Error(`suite cut record write failed at ${path2}: ${e.message}; stop, verify the file before retrying`);
   }
 }
+function isPin(url) {
+  return typeof url === "string" && url.startsWith("https://");
+}
+function pinVersion(url) {
+  try {
+    return url ? new URL(url).searchParams.get("v") ?? "" : "";
+  } catch {
+    return "";
+  }
+}
+async function carriedPins(deps, member, bundles) {
+  const main = bundles.main;
+  if (!main || !RELEASE_TAG.test(pinVersion(main))) throw new Error(`${member.repo}: nothing new since rc, but its MM-Work main pin ${main ?? "(none)"} has no ?v=vX.Y.Z release; pin it before the suite cut`);
+  for (const url of [bundles.rc, main]) {
+    const tag = pinVersion(url);
+    if (!RC_TAG.test(tag) && !RELEASE_TAG.test(tag)) continue;
+    const sha = await deps.tagSha(member.repo, tag);
+    if (sha && await deps.contains(member.repo, member.development, sha)) return { rcPin: url, mainPin: main };
+  }
+  throw new Error(`${member.repo}: nothing new since rc, but no pinned MM-Work bundle carries development ${member.development.slice(0, 12)}; pin it before the suite cut`);
+}
 async function suiteRcand(deps, opts) {
   if (!opts.ownerGo) throw new Error("suite rcand requires --owner-go (rc uses live data); nothing was written");
   const members = suiteMembers(await deps.registry());
@@ -34364,8 +34386,6 @@ async function suiteRcand(deps, opts) {
   if (opts.dryRun) return { plan };
   let record = readSuiteCut(deps.recordPath);
   if (record?.announcement === "sent" && record.leadReleased) {
-    const heads = await Promise.all(modules.map(async (m) => [await deps.head(m.repo, "development"), await deps.head(m.repo, "rc")]));
-    if (heads.some(([dev, rc]) => dev === rc)) throw new Error("a member has no new development commits since rc; no new suite cut started");
     const archive = `${deps.recordPath}.${record.leadRcTag}.json`;
     if ((0, import_node_fs29.existsSync)(archive)) throw new Error(`suite cut archive already exists at ${archive}; inspect before a new cut`);
     (0, import_node_fs29.renameSync)(deps.recordPath, archive);
@@ -34390,9 +34410,22 @@ async function suiteRcand(deps, opts) {
   if (!record) throw new Error("suite cut record unavailable after initialization");
   if (record.members.length !== modules.length || modules.some((m) => !record.members.some((r) => r.repo === m.repo && r.id === m.id)))
     throw new Error("suite roster changed since cut began; refuse to omit or add a member");
+  const quiet = [];
+  for (const member of record.members) {
+    if (!member.tag && !member.carried && await deps.contains(member.repo, member.development, member.previousRc)) quiet.push(member);
+  }
+  if (record.members.every((m) => m.carried || quiet.includes(m))) {
+    (0, import_node_fs29.rmSync)(deps.recordPath, { force: true });
+    throw new Error("nothing to promote: no MM-Work module has new development commits since its rc; no suite cut started");
+  }
+  for (const member of quiet) {
+    Object.assign(member, { carried: true }, await carriedPins(deps, member, modules.find((m) => m.repo === member.repo).bundles));
+    writeSuiteCut(deps.recordPath, record);
+  }
   for (const member of record.members) {
     if ((await deps.head(member.repo, "development"))?.toLowerCase() !== member.development.toLowerCase())
       throw new Error(`${member.repo}: development moved after the cut snapshot; refuse to add untested code`);
+    if (member.carried) continue;
     if (!member.tag) {
       const cut = await deps.rcand(member.repo, member.previousRc, member.rcWasAbsent);
       if (!RC_TAG.test(cut.tag) || !SHA2.test(cut.sha) || cut.sha.toLowerCase() === member.previousRc.toLowerCase()) throw new Error(`${member.repo}: rcand did not return a new immutable rc tag/SHA`);
@@ -34443,6 +34476,11 @@ async function suiteRelease(deps, ownerGo) {
   if (members.length !== record.members.length || members.some((m) => !record.members.some((r) => r.repo === m.repo && r.id === m.id))) throw new Error("suite roster changed after the cut; release refused");
   await deps.verifyPins(suitePins(record));
   for (const member of record.members) {
+    if (member.carried) {
+      const live2 = await deps.backend({ repo: member.repo, id: member.id, bundles: {} });
+      if (live2.version !== member.backend) throw new Error(`${member.repo}: live backend changed after the cut (${member.backend} \u2192 ${live2.version}); release refused`);
+      continue;
+    }
     const [sha, live, rcHead] = await Promise.all([deps.tagSha(member.repo, member.tag), deps.backend({ repo: member.repo, id: member.id, bundles: {} }), deps.head(member.repo, "rc")]);
     if (!sha || sha.toLowerCase() !== member.sha?.toLowerCase() || !member.released && rcHead?.toLowerCase() !== member.sha?.toLowerCase()) throw new Error(`${member.repo}: rc tag/branch ${member.tag} changed after the cut; release refused`);
     const katipReleaseSha = member.id === "katip" ? await deps.tagSha(member.repo, suiteReleaseTag(member.tag)) : void 0;
@@ -34452,7 +34490,7 @@ async function suiteRelease(deps, ownerGo) {
   }
   if ((await deps.tagSha(SUITE_REPO, record.leadRcTag))?.toLowerCase() !== record.leadRcSha?.toLowerCase()) throw new Error("MM-Work rc tag changed after the cut; release refused");
   for (const member of record.members) {
-    if (member.released) continue;
+    if (member.released || member.carried) continue;
     await deps.release(member.repo, suiteReleaseTag(member.tag), member.sha);
     if (member.id === "katip") {
       const expected = await deps.tagSha(member.repo, suiteReleaseTag(member.tag));
@@ -44471,7 +44509,7 @@ function registerSuiteCommands(program3) {
       console.log(o.json ? JSON.stringify(result, null, 2) : [
         `suite rcand ${o.dryRun ? "dry-run" : "receipt"}:`,
         ...result.plan.map((line) => `  - ${line}`),
-        ...result.record?.members.map((m) => `  - ${m.repo}: ${m.tag} (${m.sha?.slice(0, 12)}) ${m.published ? "served" : "pending"}`) ?? [],
+        ...result.record?.members.map((m) => m.carried ? `  - ${m.repo}: carried (nothing new) at ${m.mainPin}` : `  - ${m.repo}: ${m.tag} (${m.sha?.slice(0, 12)}) ${m.published ? "served" : "pending"}`) ?? [],
         ...result.record ? [`  - pin PR ${result.record.pinPr}: merged; MM-Work ${result.record.leadRcTag}`] : []
       ].join("\n"));
     } catch (e) {
@@ -44494,7 +44532,7 @@ function registerSuiteCommands(program3) {
       }
       console.log(o.json ? JSON.stringify(result, null, 2) : [
         `suite release: ${result.leadRcTag} \u2192 main`,
-        ...result.members.map((m) => `  - ${m.repo}: ${m.tag} \u2192 main ${m.released ? "released" : "pending"}`),
+        ...result.members.map((m) => m.carried ? `  - ${m.repo}: carried, untouched` : `  - ${m.repo}: ${m.tag} \u2192 main ${m.released ? "released" : "pending"}`),
         `  - MM-Work: ${result.leadReleased ? "released" : "pending"}; announcement: ${result.announcement}`
       ].join("\n"));
     } catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.34",
+  "version": "4.5.35",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",