@mutmutco/cli 4.5.47 → 4.5.49

package/dist/main.cjs

@@ -17043,10 +17043,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.47",
-    tag: "v4.5.47",
-    commit: "d8722f771c7d",
-    npm: "@mutmutco/cli@4.5.47"
+    version: "4.5.49",
+    tag: "v4.5.49",
+    commit: "b572aadbcfd3",
+    npm: "@mutmutco/cli@4.5.49"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17063,14 +17063,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.47"
+          v3Target: "v4.5.49"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.47 and redeploy the Hub Lambda from tag v4.5.47 (d8722f771c7d); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.47 (@mutmutco/cli@4.5.47, tag commit d8722f771c7d \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.49 and redeploy the Hub Lambda from tag v4.5.49 (b572aadbcfd3); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.49 (@mutmutco/cli@4.5.49, tag commit b572aadbcfd3 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -35039,13 +35039,25 @@ var SCHEMA = "mmi-suite-cut/v1";
 var SHA2 = /^[a-f0-9]{40}$/i;
 var RC_TAG = /^v\d+\.\d+\.\d+-rc\.\d+$/;
 var RELEASE_TAG = /^v\d+\.\d+\.\d+$/;
-function suitePins(record) {
+function suitePins(record, bundles) {
   return record.members.map((m) => m.carried ? { module: m.id, rc: m.rcPin, main: m.mainPin } : {
     module: m.id,
     rc: `https://${m.id === "katip" ? m.rcHost ?? m.host : m.host}/${m.id === "katip" ? "" : "rc/"}module.js?v=${m.tag}`,
-    main: `https://${m.host}/module.js?v=${suiteReleaseTag(m.tag)}`
+    main: mainPinFor(m.host, bundles[m.id], suiteReleaseTag(m.tag))
   });
 }
+function mainPinFor(host, bundles, tag) {
+  const path2 = [bundles?.dev, bundles?.main].map(pathOf).find(Boolean) ?? "/module.js";
+  return `https://${host}${path2}?v=${tag}`;
+}
+function pathOf(url) {
+  try {
+    return url ? new URL(url).pathname : void 0;
+  } catch {
+    return void 0;
+  }
+}
+var bundlesOf = (members) => Object.fromEntries(members.map((m) => [m.id, m.bundles]));
 function suiteReleaseTag(rc) {
   if (!RC_TAG.test(rc)) throw new Error(`invalid rc tag ${rc}`);
   return rc.replace(/-rc\.\d+$/, "");
@@ -35091,19 +35103,24 @@ function pinVersion(url) {
 async function carriedPins(deps, member, bundles) {
   const main = bundles.main;
   if (!main || !RELEASE_TAG.test(pinVersion(main))) throw new Error(`${member.repo}: nothing new since rc, but its MM-Work main pin ${main ?? "(none)"} has no ?v=vX.Y.Z release; pin it before the suite cut`);
+  if (!await deps.tagSha(member.repo, pinVersion(main))) throw new Error(`${member.repo}: nothing new since rc, but its MM-Work main pin names ${pinVersion(main)}, which was never released; release it or pin its live release before the suite cut`);
+  const mainPin = mainPinFor(new URL(main).host, bundles, pinVersion(main));
   for (const url of [bundles.rc, main]) {
     const tag = pinVersion(url);
     if (!RC_TAG.test(tag) && !RELEASE_TAG.test(tag)) continue;
     const sha = await deps.tagSha(member.repo, tag);
-    if (sha && await deps.contains(member.repo, member.development, sha)) return { rcPin: url, mainPin: main };
+    if (sha && await deps.contains(member.repo, member.development, sha)) return { rcPin: url === main ? mainPin : url, mainPin };
   }
   throw new Error(`${member.repo}: nothing new since rc, but no pinned MM-Work bundle carries development ${member.development.slice(0, 12)}; pin it before the suite cut`);
 }
-function suiteAbandon(recordPath) {
+function suiteAbandon(recordPath, ownerGo = false) {
   const record = readSuiteCut(recordPath);
   if (!record) throw new Error("no suite cut record to abandon");
-  if (record.pinPr) {
-    throw new Error(`the cut already opened pin PR ${record.pinPr}; its pins may be visible, so resume it (suite rcand --owner-go) or release it (suite release) instead`);
+  if (record.leadReleased || record.members.some((m) => m.released)) {
+    throw new Error("the cut already released a member or the lead; finish it with suite release --owner-go, never abandon it");
+  }
+  if (record.pinPr && !ownerGo) {
+    throw new Error(`the cut already opened pin PR ${record.pinPr}; its pins may be visible, so resume it (suite rcand --owner-go), release it (suite release), or retire it with suite abandon --owner-go`);
   }
   const archive = `${recordPath}.abandoned-${record.leadDevelopment.slice(0, 12)}.json`;
   if ((0, import_node_fs29.existsSync)(archive)) throw new Error(`abandoned-cut archive already exists at ${archive}; inspect before abandoning again`);
@@ -35152,7 +35169,15 @@ async function suiteRcand(deps, opts) {
     throw new Error("suite roster changed since cut began; refuse to omit or add a member");
   const quiet = [];
   for (const member of record.members) {
-    if (!member.tag && !member.carried && await deps.contains(member.repo, member.development, member.previousRc)) quiet.push(member);
+    if (member.tag || member.carried || !await deps.contains(member.repo, member.development, member.previousRc)) continue;
+    const rcTag = pinVersion(modules.find((m) => m.repo === member.repo).bundles.rc);
+    if (RC_TAG.test(rcTag) && (await deps.tagSha(member.repo, rcTag))?.toLowerCase() === member.previousRc.toLowerCase() && !await deps.tagSha(member.repo, suiteReleaseTag(rcTag))) {
+      member.tag = rcTag;
+      member.sha = member.previousRc;
+      writeSuiteCut(deps.recordPath, record);
+      continue;
+    }
+    quiet.push(member);
   }
   if (record.members.every((m) => m.carried || quiet.includes(m))) {
     (0, import_node_fs29.rmSync)(deps.recordPath, { force: true });
@@ -35164,7 +35189,7 @@ async function suiteRcand(deps, opts) {
   }
   const refusals = [];
   for (const member of record.members) {
-    if (member.carried || member.published || member.id === "katip") continue;
+    if (member.published || member.id === "katip") continue;
     try {
       await deps.preflight(member.repo);
     } catch (e) {
@@ -35181,7 +35206,10 @@ Each module must ship a live release that bind-mounts <deployPath>/data read-onl
   for (const member of record.members) {
     if ((await deps.head(member.repo, "development"))?.toLowerCase() !== member.development.toLowerCase())
       throw new Error(`${member.repo}: development moved after the cut snapshot; refuse to add untested code`);
-    if (member.carried) continue;
+    if (member.carried) {
+      if (member.id !== "katip") await deps.publish(member.repo, pinVersion(member.rcPin));
+      continue;
+    }
     if (!member.tag) {
       const cut = await deps.rcand(member.repo, member.previousRc, member.rcWasAbsent);
       if (!RC_TAG.test(cut.tag) || !SHA2.test(cut.sha) || cut.sha.toLowerCase() === member.previousRc.toLowerCase()) throw new Error(`${member.repo}: rcand did not return a new immutable rc tag/SHA`);
@@ -35205,7 +35233,7 @@ Each module must ship a live release that bind-mounts <deployPath>/data read-onl
     if (live.version !== member.backend || devHead?.toLowerCase() !== member.development.toLowerCase())
       throw new Error(`${member.repo}: live backend or development changed during the cut; pins unchanged`);
   }
-  const pins = suitePins(record);
+  const pins = suitePins(record, bundlesOf(modules));
   await deps.verifyLeadCut(record.leadDevelopment);
   const pr = await deps.pin({ cut: record.leadDevelopment, pins });
   await deps.verifyLeadCut(record.leadDevelopment);
@@ -35230,7 +35258,7 @@ async function suiteRelease(deps, ownerGo) {
   if (!record?.pinMerged || !record.leadRcTag) throw new Error("no completed suite rc cut and merged pin PR; release refused");
   const members = suiteMembers(await deps.registry()).filter((m) => m.repo !== SUITE_REPO);
   if (members.length !== record.members.length || members.some((m) => !record.members.some((r) => r.repo === m.repo && r.id === m.id))) throw new Error("suite roster changed after the cut; release refused");
-  await deps.verifyPins(suitePins(record));
+  await deps.verifyPins(suitePins(record, bundlesOf(members)), record.leadRcTag);
   for (const member of record.members) {
     if (member.carried) {
       const live2 = await deps.backend({ repo: member.repo, id: member.id, bundles: {} });
@@ -38586,8 +38614,8 @@ async function openSuiteCutPinPr(deps, input) {
   const ids = input.pins.map((p) => p.module);
   if (new Set(ids).size !== ids.length) throw new Error("suite pin PR contains a duplicate module");
   const branch = `suite-pin/cut-${input.cut.slice(0, 16)}`;
-  const registry2 = async () => {
-    const get = JSON.parse(await deps.run("gh", ["api", `repos/${SUITE_REPO}/contents/seed/modules.json?ref=development`]));
+  const registry2 = async (ref = "development") => {
+    const get = JSON.parse(await deps.run("gh", ["api", `repos/${SUITE_REPO}/contents/seed/modules.json?ref=${encodeURIComponent(ref)}`]));
     if (!get.content) throw new Error("MM-Work seed/modules.json is unreadable");
     return JSON.parse(Buffer.from(get.content, "base64").toString("utf8"));
   };
@@ -38611,25 +38639,35 @@ async function openSuiteCutPinPr(deps, input) {
       })) throw new Error(`${branch} merged but development pins differ from this cut`);
       return { status: "merged", pr: prs[0].url };
     }
-    if (prs.length) return { status: "pending", pr: prs[0].url };
-    if (input.pins.every((p) => {
-      const row = rows.find((r) => r.id === p.module);
+    const matches = (r) => input.pins.every((p) => {
+      const row = r.find((x) => x.id === p.module);
       return row?.bundles.rc === p.rc && row?.bundles.main === p.main;
-    })) throw new Error("pins already match without a merged cut PR \u2014 provenance unverified");
+    });
+    if (prs.length && matches(await registry2(branch))) return { status: "pending", pr: prs[0].url };
+    if (!prs.length && matches(rows)) throw new Error("pins already match without a merged cut PR \u2014 provenance unverified");
     await (0, import_promises5.mkdir)((0, import_node_path34.join)(deps.root, "tmp"), { recursive: true });
     scratch = await (0, import_promises5.mkdtemp)((0, import_node_path34.join)(deps.root, "tmp", "suite-pin-"));
     const run = (file, args) => deps.run(file, args, scratch);
-    await run("git", ["clone", "--quiet", "--branch", "development", "--single-branch", `https://github.com/${SUITE_REPO}.git`, "."]);
-    if ((await run("git", ["rev-parse", "HEAD"])).trim().toLowerCase() !== input.cut.toLowerCase())
-      throw new Error("MM-Work development moved after the suite snapshot; no pin PR opened");
-    await run("git", ["switch", "-c", branch]);
+    await run("git", ["clone", "--quiet", "--branch", prs.length ? branch : "development", "--single-branch", `https://github.com/${SUITE_REPO}.git`, "."]);
+    if (prs.length) {
+      if ((await run("git", ["merge-base", "HEAD", `${input.cut}`]).catch(() => "")).trim().toLowerCase() !== input.cut.toLowerCase())
+        throw new Error(`${branch} no longer builds on the cut ${input.cut.slice(0, 12)}; pin PR left unchanged`);
+    } else {
+      if ((await run("git", ["rev-parse", "HEAD"])).trim().toLowerCase() !== input.cut.toLowerCase())
+        throw new Error("MM-Work development moved after the suite snapshot; no pin PR opened");
+      await run("git", ["switch", "-c", branch]);
+    }
     for (const stage of ["rc", "main"]) {
       const path2 = (0, import_node_path34.join)(scratch, `${stage}-pins.json`);
       await (0, import_promises5.writeFile)(path2, JSON.stringify(input.pins.map((p) => ({ module: p.module, url: p[stage] }))));
       await run("node", ["scripts/pin-modules.mjs", "--stage", stage, "--pins", path2]);
     }
     await run("git", ["add", "seed/modules.json"]);
-    await run("git", ["commit", "-m", `Pin MM-Work suite candidate ${input.cut.slice(0, 12)} (#7262)`]);
+    await run("git", ["commit", "-m", prs.length ? `Correct MM-Work suite candidate pins ${input.cut.slice(0, 12)} (#7450)` : `Pin MM-Work suite candidate ${input.cut.slice(0, 12)} (#7262)`]);
+    if (prs.length) {
+      await run("git", ["push", "origin", branch]);
+      return { status: "pending", pr: prs[0].url };
+    }
     await run("git", ["push", "origin", branch]);
     const pr = (await run("gh", [
       "pr",
@@ -45303,8 +45341,8 @@ function suiteTrainIo(root, summaryFile) {
       return "";
     }
   };
-  const registry2 = async () => {
-    const file = await defaultGitHubClient().rest("GET", `repos/${SUITE_REPO}/contents/seed/modules.json?ref=development`);
+  const registry2 = async (ref = "development") => {
+    const file = await defaultGitHubClient().rest("GET", `repos/${SUITE_REPO}/contents/seed/modules.json?ref=${encodeURIComponent(ref)}`);
     if (!file?.content) throw new Error("MM-Work registry unreadable");
     const parsed = JSON.parse(decodeGitHubContents(file.content));
     suiteMembers(parsed);
@@ -45344,12 +45382,12 @@ function suiteTrainIo(root, summaryFile) {
       if (delta.ahead_by !== 1 || delta.behind_by !== 0 || delta.files?.length !== 1 || delta.files[0] !== "seed/modules.json")
         throw new Error("MM-Work development changed outside the one suite pin commit after the cut snapshot; refuse to cut an untested lead");
     },
-    verifyPins: async (pins) => {
-      const rows = await registry2();
+    verifyPins: async (pins, ref) => {
+      const rows = await registry2(ref);
       for (const pin of pins) {
         const row = rows.find((r) => r.id === pin.module);
         if (row?.bundles.rc !== pin.rc || row?.bundles.main !== pin.main)
-          throw new Error(`${pin.module}: MM-Work development pins no longer equal the tested cut; release refused`);
+          throw new Error(`${pin.module}: MM-Work ${ref} pins do not equal the tested cut (${row?.bundles.main ?? "no main pin"} vs ${pin.main}); release refused`);
       }
     },
     release,
@@ -45392,19 +45430,19 @@ function registerSuiteCommands(program3) {
       return fail(`suite rcand: ${e.message}`);
     }
   });
-  suite.command("abandon").description("retire an unfinished cut that opened no pin PR: archive the record; member rc tags stay (#7396)").option("--json", "structured receipt").action(async (o) => {
+  suite.command("abandon").description("retire an unfinished cut: archive the record; member rc tags stay (#7396). A cut whose pin PR landed but released nothing needs --owner-go (#7450)").option("--owner-go", "explicit owner approval to retire a cut whose pin PR already landed").option("--json", "structured receipt").action(async (o) => {
     try {
       const root = await leadRoot();
       const unlock = await acquireTrainWriterLock(root, "suite abandon");
       let result;
       try {
-        result = suiteAbandon(suiteTrainIo(root).recordPath);
+        result = suiteAbandon(suiteTrainIo(root).recordPath, o.ownerGo === true);
       } finally {
         await unlock();
       }
       console.log(o.json ? JSON.stringify(result, null, 2) : [
         `suite abandon: archived the cut record to ${result.archive}`,
-        ...result.orphanTags.length ? ["  member rc tags left in place (immutable; the next rc supersedes them):", ...result.orphanTags.map((t) => `  - ${t}`)] : ["  no member rc tag was minted"],
+        ...result.orphanTags.length ? ["  member rc tags left in place (immutable; the next cut reuses one still unreleased on its rc head, #7450):", ...result.orphanTags.map((t) => `  - ${t}`)] : ["  no member rc tag was minted"],
         "  the next suite rcand --owner-go re-snapshots every member"
       ].join("\n"));
     } catch (e) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.47",
+  "version": "4.5.49",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",