@mutmutco/cli 4.5.56 → 4.5.57

package/dist/main.cjs

@@ -7130,12 +7130,37 @@ function extractOnBlock(yaml) {
   }
   return block.length ? block.join("\n") : null;
 }
-function collectPullRequestWorkflowContexts(workflows) {
+function jobUsesWorkflow(job) {
+  const match = job.body.match(/^\s+uses:\s*['"]?([^'"\s#]*\.github\/workflows\/[^'"\s#@]+\.ya?ml(?:@[^'"\s#]+)?)['"]?\s*(?:#.*)?$/m);
+  return match ? match[1] : null;
+}
+function reusableWorkflowRefs(workflows) {
+  const refs = /* @__PURE__ */ new Set();
+  for (const wf of workflows) {
+    if (!workflowTriggersPullRequest(wf.body)) continue;
+    for (const job of parseWorkflowJobs(wf.body)) {
+      const uses = jobUsesWorkflow(job);
+      if (uses && jobReportsPullRequestCheck(job)) refs.add(uses);
+    }
+  }
+  return [...refs];
+}
+function parseReusableWorkflowRef(uses) {
+  const local = uses.match(/^\.\/(\.github\/workflows\/[^@]+)$/);
+  if (local) return { path: local[1] };
+  const remote = uses.match(/^([^/]+\/[^/]+)\/(\.github\/workflows\/[^@]+)@(.+)$/);
+  return remote ? { repo: remote[1], path: remote[2], ref: remote[3] } : null;
+}
+function collectPullRequestWorkflowContexts(workflows, called = {}) {
   const contexts = /* @__PURE__ */ new Set();
   for (const wf of workflows) {
     if (!workflowTriggersPullRequest(wf.body)) continue;
     for (const job of parseWorkflowJobs(wf.body)) {
-      if (jobReportsPullRequestCheck(job)) contexts.add(job.id);
+      if (!jobReportsPullRequestCheck(job)) continue;
+      const uses = jobUsesWorkflow(job);
+      const body = uses ? called[uses] : void 0;
+      if (body) for (const inner of parseWorkflowJobs(body)) contexts.add(`${job.id} / ${inner.id}`);
+      else contexts.add(job.id);
     }
   }
   return [...contexts].sort((a, b) => a.localeCompare(b));
@@ -17044,10 +17069,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.56",
-    tag: "v4.5.56",
-    commit: "7502269d51cd",
-    npm: "@mutmutco/cli@4.5.56"
+    version: "4.5.57",
+    tag: "v4.5.57",
+    commit: "d8aff7ba4689",
+    npm: "@mutmutco/cli@4.5.57"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17064,14 +17089,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.56"
+          v3Target: "v4.5.57"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.56 and redeploy the Hub Lambda from tag v4.5.56 (7502269d51cd); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.56 (@mutmutco/cli@4.5.56, tag commit 7502269d51cd \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.57 and redeploy the Hub Lambda from tag v4.5.57 (d8aff7ba4689); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.57 (@mutmutco/cli@4.5.57, tag commit d8aff7ba4689 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -27279,7 +27304,17 @@ function gateWorkflowFiles(prWorkflowPaths) {
 }
 async function resolveEmittedPrContexts(deps, repo, branch) {
   const workflows = await resolveBranchWorkflows(deps, repo, branch);
-  return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows);
+  return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows, await resolveCalledWorkflows(deps, repo, branch, workflows));
+}
+async function resolveCalledWorkflows(deps, repo, branch, workflows) {
+  const called = {};
+  for (const uses of reusableWorkflowRefs(workflows)) {
+    const ref = parseReusableWorkflowRef(uses);
+    if (!ref) continue;
+    const body = await fetchFileContent(deps, ref.repo ?? repo, ref.ref ?? branch, ref.path);
+    if (body) called[uses] = body;
+  }
+  return called;
 }
 async function resolveBranchWorkflows(deps, repo, branch) {
   const paths = await listWorkflowPaths(deps, repo, branch);
@@ -27527,7 +27562,7 @@ async function auditRepoCi(repo, deps) {
   };
   const getEmittedPrContexts = async () => {
     const workflows = await getBranchWorkflows();
-    return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows);
+    return workflows === void 0 ? void 0 : collectPullRequestWorkflowContexts(workflows, await resolveCalledWorkflows(deps, repo, baseBranch, workflows));
   };
   const committedReferenceRaw = deployableGated ? await fetchFileContent(deps, repo, baseBranch, PRODUCT_RULESET_REF) : null;
   let authoritativeRuleset = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.56",
+  "version": "4.5.57",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",