@mutmutco/cli 4.5.55 → 4.5.57

package/dist/main.cjs

@@ -5516,7 +5516,7 @@ function isSnapshotShape(body) {
   const staleValid = b?.stale === void 0 || typeof b.stale === "object" && b.stale !== null && Number.isFinite(b.stale.ageMs) && b.stale.ageMs >= 0;
   const githubValid = b?.github === void 0 || b.github.credential === "app_installation" && (rate === void 0 || Number.isFinite(rate?.limit) && Number.isFinite(rate?.remaining) && Number.isFinite(rate?.cost) && typeof rate?.resetAt === "string");
   return Boolean(
-    b && typeof b === "object" && typeof b.project?.id === "string" && typeof b.project?.title === "string" && typeof b.viewer === "string" && b.viewer.length > 0 && Array.isArray(b.nodes) && Array.isArray(b.writableRepos) && Array.isArray(b.unreadableRepos) && Array.isArray(b.pullRequests) && Array.isArray(b.warnings) && typeof b.partial === "boolean" && (b.eventCursor === void 0 || Number.isInteger(b.eventCursor) && b.eventCursor >= 0) && githubValid && staleValid
+    b && typeof b === "object" && typeof b.project?.id === "string" && typeof b.project?.title === "string" && typeof b.viewer === "string" && b.viewer.length > 0 && Array.isArray(b.nodes) && Array.isArray(b.writableRepos) && Array.isArray(b.unreadableRepos) && Array.isArray(b.pullRequests) && Array.isArray(b.warnings) && typeof b.partial === "boolean" && (b.source === void 0 || b.source === "live" || b.source === "cache") && (b.builtAt === void 0 || typeof b.builtAt === "string" && Number.isFinite(Date.parse(b.builtAt))) && (b.eventCursor === void 0 || Number.isInteger(b.eventCursor) && b.eventCursor >= 0) && githubValid && staleValid
   );
 }
 async function fetchHubBoardSnapshot(request, deps) {
@@ -7130,12 +7130,37 @@ function extractOnBlock(yaml) {
   }
   return block.length ? block.join("\n") : null;
 }
-function collectPullRequestWorkflowContexts(workflows) {
+function jobUsesWorkflow(job) {
+  const match = job.body.match(/^\s+uses:\s*['"]?([^'"\s#]*\.github\/workflows\/[^'"\s#@]+\.ya?ml(?:@[^'"\s#]+)?)['"]?\s*(?:#.*)?$/m);
+  return match ? match[1] : null;
+}
+function reusableWorkflowRefs(workflows) {
+  const refs = /* @__PURE__ */ new Set();
+  for (const wf of workflows) {
+    if (!workflowTriggersPullRequest(wf.body)) continue;
+    for (const job of parseWorkflowJobs(wf.body)) {
+      const uses = jobUsesWorkflow(job);
+      if (uses && jobReportsPullRequestCheck(job)) refs.add(uses);
+    }
+  }
+  return [...refs];
+}
+function parseReusableWorkflowRef(uses) {
+  const local = uses.match(/^\.\/(\.github\/workflows\/[^@]+)$/);
+  if (local) return { path: local[1] };
+  const remote = uses.match(/^([^/]+\/[^/]+)\/(\.github\/workflows\/[^@]+)@(.+)$/);
+  return remote ? { repo: remote[1], path: remote[2], ref: remote[3] } : null;
+}
+function collectPullRequestWorkflowContexts(workflows, called = {}) {
   const contexts = /* @__PURE__ */ new Set();
   for (const wf of workflows) {
     if (!workflowTriggersPullRequest(wf.body)) continue;
     for (const job of parseWorkflowJobs(wf.body)) {
-      if (jobReportsPullRequestCheck(job)) contexts.add(job.id);
+      if (!jobReportsPullRequestCheck(job)) continue;
+      const uses = jobUsesWorkflow(job);
+      const body = uses ? called[uses] : void 0;
+      if (body) for (const inner of parseWorkflowJobs(body)) contexts.add(`${job.id} / ${inner.id}`);
+      else contexts.add(job.id);
     }
   }
   return [...contexts].sort((a, b) => a.localeCompare(b));
@@ -12358,7 +12383,7 @@ function renderBoardItem(item) {
   return lines2.join("\n");
 }
 function renderBoardReport(report) {
-  const lines2 = [`Board \xB7 ${report.project.title} \xB7 @${report.viewer}`, renderBoardSource()];
+  const lines2 = [`Board \xB7 ${report.project.title} \xB7 @${report.viewer}`, report.source === "cache" ? "source: cache" : renderBoardSource()];
   if (report.github?.rateLimit) {
     const { limit, remaining, cost, resetAt } = report.github.rateLimit;
     lines2.push(`github: app installation \xB7 GraphQL ${remaining}/${limit} remaining \xB7 cost ${cost} \xB7 resets ${resetAt}`);
@@ -12631,7 +12656,8 @@ async function readBoard(options, deps = {}) {
     ...groups,
     warnings: collected.warnings,
     partial: collected.partial,
-    source: "live",
+    source: snapshot?.source ?? "live",
+    ...snapshot?.builtAt ? { builtAt: snapshot.builtAt } : {},
     ...pullRequests ? { pullRequests } : {},
     ...eventCursor !== void 0 ? { eventCursor } : {},
     ...github ? { github } : {}
@@ -17043,10 +17069,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.55",
-    tag: "v4.5.55",
-    commit: "ed1c9586cbdd",
-    npm: "@mutmutco/cli@4.5.55"
+    version: "4.5.57",
+    tag: "v4.5.57",
+    commit: "d8aff7ba4689",
+    npm: "@mutmutco/cli@4.5.57"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17063,14 +17089,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.55"
+          v3Target: "v4.5.57"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.55 and redeploy the Hub Lambda from tag v4.5.55 (ed1c9586cbdd); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.55 (@mutmutco/cli@4.5.55, tag commit ed1c9586cbdd \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.57 and redeploy the Hub Lambda from tag v4.5.57 (d8aff7ba4689); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.57 (@mutmutco/cli@4.5.57, tag commit d8aff7ba4689 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -27278,7 +27304,17 @@ function gateWorkflowFiles(prWorkflowPaths) {
 }
 async function resolveEmittedPrContexts(deps, repo, branch) {
   const workflows = await resolveBranchWorkflows(deps, repo, branch);
-  return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows);
+  return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows, await resolveCalledWorkflows(deps, repo, branch, workflows));
+}
+async function resolveCalledWorkflows(deps, repo, branch, workflows) {
+  const called = {};
+  for (const uses of reusableWorkflowRefs(workflows)) {
+    const ref = parseReusableWorkflowRef(uses);
+    if (!ref) continue;
+    const body = await fetchFileContent(deps, ref.repo ?? repo, ref.ref ?? branch, ref.path);
+    if (body) called[uses] = body;
+  }
+  return called;
 }
 async function resolveBranchWorkflows(deps, repo, branch) {
   const paths = await listWorkflowPaths(deps, repo, branch);
@@ -27526,7 +27562,7 @@ async function auditRepoCi(repo, deps) {
   };
   const getEmittedPrContexts = async () => {
     const workflows = await getBranchWorkflows();
-    return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows);
+    return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows, await resolveCalledWorkflows(deps, repo, baseBranch, workflows));
   };
   const committedReferenceRaw = deployableGated ? await fetchFileContent(deps, repo, baseBranch, PRODUCT_RULESET_REF) : null;
   let authoritativeRuleset = null;
@@ -35281,7 +35317,13 @@ async function suiteRelease(deps, ownerGo) {
       else rcAligned = await deps.sameContent(member.repo, member.sha, rcHead);
     }
     if (!sha || sha.toLowerCase() !== member.sha?.toLowerCase() || !member.released && !member.releasedAs && !rcAligned && rcHead?.toLowerCase() !== member.sha?.toLowerCase()) throw new Error(`${member.repo}: rc tag/branch ${member.tag} changed after the cut; release refused`);
-    const katipReleaseSha = member.id === "katip" ? await deps.tagSha(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag)) : void 0;
+    const planned = member.releasedAs ?? suiteReleaseTag(member.tag);
+    if (!member.released && !member.hotfixedTo && live.version !== member.backend && await deps.tagSha(member.repo, planned)) {
+      const hotfix = await deps.hotfixOver(member.repo, planned, live.version);
+      if (hotfix) member.hotfixedTo = hotfix;
+    }
+    if (member.hotfixedTo && !member.released) continue;
+    const katipReleaseSha = member.id === "katip" ? await deps.tagSha(member.repo, planned) : void 0;
     const expectedBackend = member.id === "katip" && member.released ? member.backendAfterRelease ?? katipReleaseSha : member.backend;
     if (live.version !== expectedBackend && !(member.id === "katip" && !member.released && katipReleaseSha && live.version === katipReleaseSha))
       throw new Error(`${member.repo}: live backend changed after the cut (${expectedBackend} \u2192 ${live.version}); release refused`);
@@ -35289,7 +35331,14 @@ async function suiteRelease(deps, ownerGo) {
   if ((await deps.tagSha(SUITE_REPO, record.leadRcTag))?.toLowerCase() !== record.leadRcSha?.toLowerCase()) throw new Error("MM-Work rc tag changed after the cut; release refused");
   for (const member of record.members) {
     if (member.released || member.carried) continue;
-    if (member.releasedAs) console.warn(`${member.repo}: its rc already shipped as ${member.releasedAs}, not ${suiteReleaseTag(member.tag)}; finishing that release (#7464)`);
+    if (member.hotfixedTo) {
+      console.warn(`${member.repo}: released as ${member.releasedAs ?? suiteReleaseTag(member.tag)} and hotfixed to ${member.hotfixedTo}, which is live; recorded as released (#7482)`);
+      member.backendAfterRelease = (await deps.backend({ repo: member.repo, id: member.id, bundles: {} })).version;
+      member.released = true;
+      writeSuiteCut(deps.recordPath, record);
+      continue;
+    }
+    if (member.releasedAs && member.releasedAs !== suiteReleaseTag(member.tag)) console.warn(`${member.repo}: its rc already shipped as ${member.releasedAs}, not ${suiteReleaseTag(member.tag)}; finishing that release (#7464)`);
     await deps.release(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag), member.sha);
     if (member.id === "katip") {
       const expected = await deps.tagSha(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag));
@@ -45366,6 +45415,15 @@ function suiteTrainIo(root, summaryFile) {
     const [a, b] = (await exec("git", ["rev-parse", `${candidate}^{tree}`, `${head}^{tree}`], target)).trim().split(/\s+/);
     return !!a && a === b;
   };
+  const hotfixOver = async (repo, planned, liveSha) => {
+    const target = await checkout(repo);
+    await exec("git", ["fetch", "origin", "--tags"], target);
+    const later = releaseTagsFrom(await exec("git", ["tag", "--contains", planned, "--list", "v*"], target)).filter((t) => t !== planned);
+    for (const tag of later) {
+      if ((await exec("git", ["rev-parse", `${tag}^{commit}`], target)).trim().toLowerCase() === liveSha.toLowerCase()) return tag;
+    }
+    return void 0;
+  };
   const rcRuns = async () => JSON.parse(await gh(["run", "list", "--repo", "mutmutco/MMI-Hub", "--workflow", "module-rc-publish.yml", "--event", "workflow_dispatch", "--limit", "100", "--json", "databaseId,displayTitle,conclusion,status,createdAt"]));
   const watchRcRun = async (title, fields, reuse) => {
     const since = Date.now() - 1e4;
@@ -45454,6 +45512,7 @@ function suiteTrainIo(root, summaryFile) {
     release,
     shippedTag,
     sameContent: sameContent2,
+    hotfixOver,
     announce: async (record) => {
       if (!summaryFile) throw new Error("suite announcement requires --announce-summary-file; outcome was not posted");
       const result = await trainApplyDeps().announce?.({ repo: SUITE_REPO, tag: record.leadRcTag.replace(/-rc\.\d+$/, ""), summaryFile });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.55",
+  "version": "4.5.57",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",