@mutmutco/cli 4.5.37 → 4.5.39

package/dist/main.cjs

@@ -16871,10 +16871,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.37",
-    tag: "v4.5.37",
-    commit: "75086128c3ba",
-    npm: "@mutmutco/cli@4.5.37"
+    version: "4.5.39",
+    tag: "v4.5.39",
+    commit: "ad6bde0e522f",
+    npm: "@mutmutco/cli@4.5.39"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -16891,14 +16891,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.37"
+          v3Target: "v4.5.39"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.37 and redeploy the Hub Lambda from tag v4.5.37 (75086128c3ba); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.37 (@mutmutco/cli@4.5.37, tag commit 75086128c3ba \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.39 and redeploy the Hub Lambda from tag v4.5.39 (ad6bde0e522f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.39 (@mutmutco/cli@4.5.39, tag commit ad6bde0e522f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -19805,6 +19805,26 @@ function installerPageError(value) {
   if (url.search || url.hash) return "installer.page must not carry a query string or fragment";
   return null;
 }
+var INSTALLER_VERIFY_HOSTS = ["mutmut.work", "dev.mutmut.work", "rc.mutmut.work"];
+var INSTALLER_VERIFY_STAGES = ["dev", "rc", "main"];
+function installerVerifyError(value) {
+  const shape = `installer.verify must be {dev?, rc?, main?} with at least one https URL on ${INSTALLER_VERIFY_HOSTS.join(", ")}`;
+  if (!value || typeof value !== "object" || Array.isArray(value)) return shape;
+  const entries = Object.entries(value);
+  if (entries.length === 0) return shape;
+  for (const [stage, url] of entries) {
+    if (!INSTALLER_VERIFY_STAGES.includes(stage)) return `installer.verify.${stage} is not a stage \u2014 expected dev, rc or main`;
+    let parsed;
+    try {
+      parsed = typeof url === "string" && url.trim() === url ? new URL(url) : null;
+    } catch {
+      parsed = null;
+    }
+    if (!parsed || parsed.protocol !== "https:" || parsed.username || parsed.password || !INSTALLER_VERIFY_HOSTS.includes(parsed.hostname)) return shape;
+    if (parsed.search || parsed.hash) return `installer.verify.${stage} must not carry a query string or fragment`;
+  }
+  return null;
+}
 function installerVersionUrl(installer) {
   if (typeof installer.gate === "string" && installer.gate) return `${installer.gate.replace(/\/+$/, "")}/release/version`;
   return `https://${INSTALLER_FAMILY_HOSTS[installer.family]}/${installer.product}/release/version`;
@@ -19812,14 +19832,14 @@ function installerVersionUrl(installer) {
 function installerDeclarationError(value, division) {
   if (value === void 0 || value === null) return null;
   if (typeof value !== "object" || Array.isArray(value)) {
-    return "installer must be an object {product, family, login?, gate?}";
+    return "installer must be an object {product, family, login?, gate?, page?, verify?}";
   }
   const record = (
     /** @type {Record<string, unknown>} */
     value
   );
   for (const key of Object.keys(record)) {
-    if (!["product", "family", "login", "gate", "page"].includes(key)) return `installer.${key} is not a field \u2014 expected product, family and optionally login, gate and page`;
+    if (!["product", "family", "login", "gate", "page", "verify"].includes(key)) return `installer.${key} is not a field \u2014 expected product, family and optionally login, gate, page and verify`;
   }
   if (typeof record.product !== "string" || !PRODUCT_RE.test(record.product)) {
     return "installer.product must be a lowercase kebab name (e.g. mm-strategy) \u2014 it is the /<product> path on the family host";
@@ -19843,6 +19863,10 @@ function installerDeclarationError(value, division) {
     const pageError = installerPageError(record.page);
     if (pageError) return pageError;
   }
+  if (record.verify !== void 0) {
+    const verifyError = installerVerifyError(record.verify);
+    if (verifyError) return verifyError;
+  }
   const expected = expectedInstallerLogin(
     /** @type {'jerv' | 'mmi'} */
     record.family,
@@ -20350,6 +20374,7 @@ function servedChannelRow(product, conclusion, evidence) {
 function servedChannelFor(repo, installer) {
   if (!installer) return void 0;
   if (isHubControlRepo(repo)) return void 0;
+  if (installer.verify) return void 0;
   return {
     product: installer.product,
     url: installerVersionUrl(installer),
@@ -20402,6 +20427,7 @@ async function appendServedChannelProof(deps, input, dispatch) {
 }
 async function appendInstallHomePublish(deps, input, dispatch) {
   if (isHubControlRepo(input.repo) || !input.installer || input.installer.family !== "mmi") return dispatch;
+  if (input.installer.verify) return dispatch;
   const product = input.installer.product;
   const remedy = getPublishDispatchCommand(HUB_REPO2, product);
   const note = (text) => `${dispatch.note}; ${text}`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.37",
+  "version": "4.5.39",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",