@mutmutco/cli 4.5.78 → 4.5.79

package/dist/main.cjs

@@ -14366,7 +14366,7 @@ var PRODUCT_PENDING_RULESET_PREFIX = "mmi-product-required-checks-pending-";
 var PRODUCT_GATE_CONTEXT = "gate";
 var PRODUCT_RULESET_PATH = ".github/rulesets/mmi-product-required-checks.json";
 function reseedProductRulesetStrictness(current, seed, declared = {}) {
-  const parse = (raw) => {
+  const parse2 = (raw) => {
     const policy2 = JSON.parse(raw);
     if (!policy2 || typeof policy2 !== "object" || Array.isArray(policy2) || policy2.name !== PRODUCT_RULESET_NAME || policy2.target !== "branch" || !Array.isArray(policy2.rules) || policy2.rules.some((r) => !r || typeof r !== "object" || Array.isArray(r) || typeof r.type !== "string")) {
       throw new Error("product ruleset must be a branch ruleset object with well-formed rules");
@@ -14378,11 +14378,11 @@ function reseedProductRulesetStrictness(current, seed, declared = {}) {
     }
     return { policy: policy2, parameters: parameters2 };
   };
-  const canonical = parse(seed);
+  const canonical = parse2(seed);
   const strict = canonical.parameters.strict_required_status_checks_policy;
   if (typeof strict !== "boolean") throw new Error("canonical product ruleset must declare boolean strictness");
   if (current === null) return seed;
-  const { policy, parameters } = parse(current);
+  const { policy, parameters } = parse2(current);
   let changed = parameters.strict_required_status_checks_policy !== strict;
   parameters.strict_required_status_checks_policy = strict;
   if (declared.requiredChecks) {
@@ -17249,10 +17249,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.78",
-    tag: "v4.5.78",
-    commit: "55782d939329",
-    npm: "@mutmutco/cli@4.5.78"
+    version: "4.5.79",
+    tag: "v4.5.79",
+    commit: "542d3fde121b",
+    npm: "@mutmutco/cli@4.5.79"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17269,14 +17269,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.78"
+          v3Target: "v4.5.79"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.78 and redeploy the Hub Lambda from tag v4.5.78 (55782d939329); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.78 (@mutmutco/cli@4.5.78, tag commit 55782d939329 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.79 and redeploy the Hub Lambda from tag v4.5.79 (542d3fde121b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.79 (@mutmutco/cli@4.5.79, tag commit 542d3fde121b \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -20071,12 +20071,12 @@ async function isStrayUnreleasedTag(deps, tag, remoteSha, repo) {
   return deps.run("gh", ["release", "view", tag, "--repo", repo, "--json", "tagName"]).then(() => false).catch((e) => /not found|HTTP 404/i.test(e instanceof Error ? e.message : String(e)));
 }
 function cmpReleaseTag(a, b) {
-  const parse = (t) => {
+  const parse2 = (t) => {
     const m = /^v(\d+)\.(\d+)\.(\d+)$/.exec(t.trim());
     return m ? { major: +m[1], minor: +m[2], patch: +m[3] } : null;
   };
-  const left = parse(a);
-  const right = parse(b);
+  const left = parse2(a);
+  const right = parse2(b);
   if (!left || !right) throw new Error(`cmpReleaseTag expects vX.Y.Z tags, got ${a} vs ${b}`);
   return left.major - right.major || left.minor - right.minor || left.patch - right.patch;
 }
@@ -26229,12 +26229,12 @@ function resumeFollowUpOf(state) {
   return state === "aligned" ? "complete" : state;
 }
 function compareRcTagsNewestFirst(a, b) {
-  const parse = (tag) => {
+  const parse2 = (tag) => {
     const match = /^v(\d+)\.(\d+)\.(\d+)-rc\.(\d+)$/.exec(tag);
     return match ? match.slice(1).map(Number) : [];
   };
-  const left = parse(a);
-  const right = parse(b);
+  const left = parse2(a);
+  const right = parse2(b);
   for (let i = 0; i < 4; i++) {
     const delta = (right[i] ?? 0) - (left[i] ?? 0);
     if (delta !== 0) return delta;
@@ -32638,6 +32638,7 @@ function assignWaves(repos, canarySlug) {
 function statusFor(read, currentSha) {
   if (!read) return { status: "pending", record: {} };
   if (read.drift === "match") return { status: "match", record: { mergeSha: read.pr?.mergeSha } };
+  if (read.prUnread) return { status: "red", record: {} };
   const pr = read.pr;
   if (!pr) return { status: "pending", record: {} };
   if (pr.sourceSha && pr.sourceSha !== currentSha) return { status: "pending", record: {} };
@@ -35090,9 +35091,10 @@ LIVE apply to ${repo}:
       desiredByRepo.set(r.repo, desired);
       const drift = compareSeedBytes(desired, content);
       let pr;
+      let prUnread = false;
       try {
         const listBranchPrs = async (branch) => {
-          const listed = await gh2(["pr", "list", "--repo", r.repo, "--head", branch, "--base", baseBranch, "--state", "all", "--json", "number,url,state,statusCheckRollup,mergeCommit,body,files", "--limit", "100"]);
+          const listed = await gh2(["pr", "list", "--repo", r.repo, "--head", branch, "--base", baseBranch, "--state", "all", "--json", "number,url,state,statusCheckRollup,mergeCommit,body,files,headRefName", "--limit", "100"]);
           return JSON.parse(listed.stdout || "[]");
         };
         const targetSpecific = (await listBranchPrs(propagationBranch(r.repo, seed.target))).map((p2) => ({ ...p2, files: p2.files?.map((f) => f.path) }));
@@ -35107,11 +35109,19 @@ LIVE apply to ${repo}:
           const checks = rollup.length === 0 ? "none" : rollup.some((c) => c.conclusion === "FAILURE" || c.state === "FAILURE") ? "red" : rollup.every((c) => c.conclusion === "SUCCESS" || c.state === "SUCCESS") ? "success" : "pending";
           const sourceSha = p.body?.match(/Propagates MMI-Hub@([0-9a-fA-F]{7,40})/)?.[1];
           pr = { number: p.number, url: p.url, state: p.state === "MERGED" ? "merged" : p.state === "CLOSED" ? "closed" : "open", checks, mergeSha: p.mergeCommit?.oid, sourceSha };
+          if (pr.state === "open" && sourceSha && sourceSha !== seedSource.sha && p.headRefName) {
+            const head = await gh2(["api", `repos/${r.repo}/contents/${enc(seed.target)}?ref=${encodeURIComponent(p.headRefName)}`]);
+            const parsedHead = JSON.parse(head.stdout);
+            const headContent = parsedHead.encoding === "base64" && typeof parsedHead.content === "string" ? decodeGitHubContents(parsedHead.content) : null;
+            if (compareSeedBytes(desired, headContent) === "match") pr.sourceSha = seedSource.sha;
+          }
         }
-      } catch {
-        pr = void 0;
+      } catch (e) {
+        prUnread = true;
+        process.stderr.write(`bootstrap propagate: could not read ${r.repo}'s propagation PRs for ${seed.target}: ${e.message}
+`);
       }
-      reads.push({ repo: r.repo, drift: drift === "waived" ? "match" : drift, pr });
+      reads.push({ repo: r.repo, drift: drift === "waived" ? "match" : drift, pr, prUnread });
     }
     let functionGateSatisfied = !isWorkflowSeed;
     if (isWorkflowSeed && canarySlug) {
@@ -35627,10 +35637,41 @@ function formatSuiteStatus(report) {
 var import_node_fs29 = require("node:fs");
 var import_node_path29 = require("node:path");
 var import_node_crypto13 = require("node:crypto");
+
+// src/kit-version.ts
+var parse = (v) => /^(\d+)\.(\d+)\.(\d+)(-.+)?$/.exec(typeof v === "string" ? v.trim() : "");
+function kitSatisfies(shell2, module2) {
+  const s = parse(shell2);
+  const m = parse(module2);
+  if (!s || !m) return true;
+  for (let i = 1; i <= 3; i++) if (Number(s[i]) !== Number(m[i])) return Number(s[i]) > Number(m[i]);
+  return !s[4] || Boolean(m[4]);
+}
+function kitFromBundle(js) {
+  const direct = /export\s+(?:const|let|var)\s+__kit\s*=\s*["']([^"']+)["']/.exec(js);
+  if (direct) return direct[1];
+  const local = /[{,]\s*([\w$]+)\s+as\s+__kit\b/.exec(js)?.[1];
+  if (!local) return void 0;
+  const name = local.replace(/[$]/g, "\\$&");
+  return new RegExp(`(?:^|[\\s;,{}])(?:const|let|var)?\\s*${name}\\s*=\\s*["']([^"']+)["']`).exec(js)?.[1];
+}
+function kitRefusals(shell2, modules) {
+  return modules.filter((m) => !kitSatisfies(shell2, m.kit)).map((m) => `${m.id}: built on kit ${m.kit}, newer than the MM-Work shell's kit ${shell2}`);
+}
+
+// src/suite-train.ts
 var SCHEMA = "mmi-suite-cut/v1";
 var SHA2 = /^[a-f0-9]{40}$/i;
 var RC_TAG = /^v\d+\.\d+\.\d+-rc\.\d+$/;
 var RELEASE_TAG = /^v\d+\.\d+\.\d+$/;
+async function kitCheck(deps, shellSha, bundles, where) {
+  const shell2 = shellSha ? await deps.shellKit(shellSha) : void 0;
+  const kits = await Promise.all(bundles.map(async (b) => ({ id: b.id, kit: b.url ? await deps.bundleKit(b.url) : void 0 })));
+  const refused = kitRefusals(shell2, kits);
+  if (refused.length) throw new Error(`kit check (${where}) refused; a module built on a newer kit crashes the older shell. Release the newer kit to MM-Work first (or rebuild the module on the shell's kit):
+${refused.join("\n")}`);
+  return `kit check (${where}): shell kit ${shell2 ?? "unknown"}; ${kits.map((k) => `${k.id} __kit ${k.kit ?? "none"}`).join(", ") || "no modules"}`;
+}
 function suitePins(record, bundles) {
   return record.members.map((m) => m.carried ? { module: m.id, rc: m.rcPin, main: m.mainPin } : {
     module: m.id,
@@ -35742,6 +35783,8 @@ async function suiteRcand(deps, opts) {
     `${SUITE_REPO}: one PR for both rc/main pins, wait for merge`,
     `${SUITE_REPO}: rcand`
   ];
+  const lead = await deps.head(SUITE_REPO, "development");
+  plan.push(await kitCheck(deps, lead, active.map((m) => ({ id: m.id, url: m.bundles.dev })), "dev bundles"));
   if (opts.dryRun) return { plan };
   let record = readSuiteCut(deps.recordPath);
   if (record?.leadReleased && record.announcement === "pending") {
@@ -35863,6 +35906,7 @@ Each module must ship a live release that bind-mounts <deployPath>/data read-onl
       throw new Error(`${member.repo}: live backend or development changed during the cut; pins unchanged`);
   }
   const pins = suitePins(record, bundlesOf(modules));
+  await kitCheck(deps, record.leadDevelopment, pins.map((p) => ({ id: p.module, url: p.rc })), "rc bundles");
   await deps.verifyLeadCut(record.leadDevelopment);
   const pr = await deps.pin({ cut: record.leadDevelopment, pins, heldIds: record.heldMembers?.map((h) => h.id) });
   await deps.verifyLeadCut(record.leadDevelopment);
@@ -46200,9 +46244,9 @@ function isMissingRef(message2) {
   return /404|Not Found|No commit found for SHA/.test(message2);
 }
 function releaseTagsFrom(out) {
-  const parse = (t) => t.slice(1).split(".").map(Number);
+  const parse2 = (t) => t.slice(1).split(".").map(Number);
   return out.split(/\s+/).filter((t) => /^v\d+\.\d+\.\d+$/.test(t)).sort((a, b) => {
-    const [x, y] = [parse(a), parse(b)];
+    const [x, y] = [parse2(a), parse2(b)];
     return x[0] - y[0] || x[1] - y[1] || x[2] - y[2];
   });
 }
@@ -46493,6 +46537,22 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}) {
           throw new Error(`${pin.module}: MM-Work ${ref} pins do not equal the tested cut (${row?.bundles.main ?? "no main pin"} vs ${pin.main}); release refused`);
       }
     },
+    shellKit: async (sha) => {
+      await exec("git", ["fetch", "--quiet", "origin", "--tags"], root, WATCH_TIMEOUT);
+      try {
+        return (await exec("git", ["describe", "--tags", "--match", "ds-v[0-9]*", "--abbrev=0", sha], root)).replace(/^ds-v/, "") || void 0;
+      } catch {
+        return void 0;
+      }
+    },
+    bundleKit: async (url) => {
+      try {
+        const res = await fetch(url, { signal: AbortSignal.timeout(GH_TIMEOUT) });
+        return res.ok ? kitFromBundle(await res.text()) : void 0;
+      } catch {
+        return void 0;
+      }
+    },
     release,
     shippedTag,
     sameContent: sameContent2,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.78",
+  "version": "4.5.79",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",