@mutmutco/cli 4.5.80 → 4.5.82

package/dist/main.cjs

@@ -17249,10 +17249,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.80",
-    tag: "v4.5.80",
-    commit: "a3829824b3c6",
-    npm: "@mutmutco/cli@4.5.80"
+    version: "4.5.82",
+    tag: "v4.5.82",
+    commit: "d9d21d149b66",
+    npm: "@mutmutco/cli@4.5.82"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17269,14 +17269,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.80"
+          v3Target: "v4.5.82"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.80 and redeploy the Hub Lambda from tag v4.5.80 (a3829824b3c6); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.80 (@mutmutco/cli@4.5.80, tag commit a3829824b3c6 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.82 and redeploy the Hub Lambda from tag v4.5.82 (d9d21d149b66); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.82 (@mutmutco/cli@4.5.82, tag commit d9d21d149b66 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -21627,7 +21627,51 @@ async function dispatchCanary(deps, targetRepo2, nonce) {
     attempts.every((a) => isCanaryAccessBlockText(a)) ? `${detail} Every door answered with an access refusal \u2014 the caller may read MMI-Hub but not start its workflows.` : detail
   );
 }
+var HOSTED_LABEL_RE = /\b(?:ubuntu|windows|macos)-(?:latest|\d[\w.-]*)\b/;
+var AUTOMATIC_TRIGGERS = /* @__PURE__ */ new Set(["push", "pull_request", "pull_request_target", "release", "schedule", "workflow_run", "merge_group", "create", "deployment", "repository_dispatch", "check_run", "check_suite", "issues", "issue_comment"]);
+function workflowTriggers(yaml) {
+  const lines2 = yaml.split(/\r?\n/);
+  const i = lines2.findIndex((l) => /^(?:on|"on"|'on'):(?:\s|$)/.test(l));
+  if (i < 0) return [];
+  const inline = lines2[i].replace(/^[^:]+:\s*/, "").replace(/\s+#.*$/, "").trim();
+  if (inline) return inline.replace(/^\[|\]$/g, "").split(",").map((s) => s.trim().replace(/^['"]|['"]$/g, "")).filter(Boolean);
+  const out = [];
+  for (const line of lines2.slice(i + 1)) {
+    if (/^\S/.test(line)) break;
+    const m = /^ {2}([A-Za-z_]+):/.exec(line) ?? /^ {2}- ([A-Za-z_]+)\s*$/.exec(line);
+    if (m) out.push(m[1]);
+  }
+  return out;
+}
+function workflowNeedsHostedRunner(yaml) {
+  const body = yaml.split(/\r?\n/).filter((l) => !/^\s*#/.test(l)).join("\n");
+  return HOSTED_LABEL_RE.test(body) && workflowTriggers(yaml).some((t) => AUTOMATIC_TRIGGERS.has(t));
+}
+async function hostedWorkflowsOf(deps, repo) {
+  const list = parseJson(
+    await deps.run("gh", ["api", `repos/${repo}/contents/.github/workflows`]),
+    `${repo} workflow listing`
+  );
+  const hosted = [];
+  for (const f of list) {
+    if (f.type !== "file" || !f.path || !/\.ya?ml$/.test(f.path) || f.name === CANARY_WORKFLOW) continue;
+    const raw = parseJson(await deps.run("gh", ["api", `repos/${repo}/contents/${f.path}`]), `${repo} ${f.path}`);
+    if (workflowNeedsHostedRunner(Buffer.from(raw.content ?? "", "base64").toString("utf8"))) hosted.push(f.path);
+  }
+  return hosted;
+}
 async function assertActionsJobsCanStart(deps, targetRepo2) {
+  let hosted;
+  try {
+    hosted = await hostedWorkflowsOf(deps, targetRepo2);
+  } catch {
+    hosted = void 0;
+  }
+  if (hosted && hosted.length === 0) {
+    process.stderr.write(`actions preflight: ${targetRepo2} has no automatically triggered GitHub-hosted job; hosted canary skipped (#7721)
+`);
+    return;
+  }
   const scanned = await scanRepoForBillingBlock(deps, targetRepo2);
   if (scanned) throw actionsBillingRefusal(scanned);
   if (targetRepo2.toLowerCase() !== CANARY_REPO.toLowerCase()) {
@@ -39718,42 +39762,57 @@ async function openSuitePinPr(deps, input) {
     const url = new URL(old);
     url.searchParams.set("v", tag);
     const pin = url.toString();
-    const branch = `suite-pin/${stage}-${member.id}-${tag}`;
+    const branch = `suite-pin/${stage}-${member.id}`;
+    const legacy = `${branch}-${tag}`;
+    const title = `Pin ${member.id} ${stage} at ${tag}`;
+    const tagOf = (t) => t.startsWith(`Pin ${member.id} ${stage} at `) ? t.slice(`Pin ${member.id} ${stage} at `.length) : void 0;
+    const list = async (head) => JSON.parse(await deps.run("gh", ["pr", "list", "--repo", SUITE_REPO, "--head", head, "--state", "all", "--json", "url,state,title"], scratch || void 0));
+    const onBranch = await list(branch);
+    const legacyOpen = JSON.parse(await deps.run("gh", ["pr", "list", "--repo", SUITE_REPO, "--state", "open", "--limit", "200", "--json", "url,headRefName"])).flatMap((p) => {
+      const t = p.headRefName.startsWith(`${branch}-v`) ? p.headRefName.slice(branch.length + 1) : void 0;
+      return t ? [{ url: p.url, tag: t }] : [];
+    });
+    const newer = [
+      ...onBranch.filter((p) => p.state !== "CLOSED").flatMap((p) => {
+        const t = tagOf(p.title ?? "");
+        return t && compareVersions(t, tag) > 0 ? [p] : [];
+      }),
+      ...legacyOpen.filter((p) => compareVersions(p.tag, tag) > 0).map((p) => ({ url: p.url, state: "OPEN" }))
+    ];
+    const exact = [...onBranch.filter((p) => tagOf(p.title ?? "") === tag), ...await list(legacy)];
+    if (exact.some((p) => p.state === "CLOSED")) {
+      if (newer.length) return { status: "superseded", pr: newer[0].url, url: pin };
+      throw new Error(`${branch} for ${tag} was closed without landing`);
+    }
+    if (exact.some((p) => p.state === "MERGED")) {
+      if (old !== pin) throw new Error(`${branch} merged but development still carries ${old}`);
+      return { status: "merged", pr: exact[0].url, url: pin };
+    }
+    if (old === pin) return { status: "merged", pr: exact[0]?.url ?? `${SUITE_REPO} development already pinned`, url: pin };
+    if (newer.length) return { status: "superseded", pr: newer[0].url, url: pin };
+    const open2 = onBranch.find((p) => p.state === "OPEN");
+    if (open2 && tagOf(open2.title ?? "") === tag) return { status: "pending", pr: open2.url, url: pin };
     await (0, import_promises6.mkdir)((0, import_node_path34.join)(deps.root, "tmp"), { recursive: true });
     scratch = await (0, import_promises6.mkdtemp)((0, import_node_path34.join)(deps.root, "tmp", "suite-pin-"));
     const run = (file, args) => deps.run(file, args, scratch);
     await run("git", ["clone", "--quiet", "--branch", "development", "--single-branch", `https://github.com/${SUITE_REPO}.git`, "."]);
-    const existing = JSON.parse(await run("gh", ["pr", "list", "--repo", SUITE_REPO, "--head", branch, "--state", "all", "--json", "url,state"]));
-    if (existing.some((pr2) => pr2.state === "CLOSED")) throw new Error(`${branch} was closed without landing`);
-    if (existing.some((pr2) => pr2.state === "MERGED")) {
-      if (old !== pin) throw new Error(`${branch} merged but development still carries ${old}`);
-      return { status: "merged", pr: existing[0].url, url: pin };
-    }
-    if (old === pin) return { status: "merged", pr: existing[0]?.url ?? `${SUITE_REPO} development already pinned`, url: pin };
-    if (existing.length) {
-      return { status: "pending", pr: existing[0].url, url: pin };
-    }
     await run("git", ["switch", "-c", branch]);
     await run("node", ["scripts/pin-modules.mjs", "--stage", stage, "--module", member.id, "--url", pin]);
     await run("git", ["add", "seed/modules.json"]);
     await run("git", ["commit", "-m", `Pin ${member.id} ${stage} at ${tag} (#7266)`]);
-    await run("git", ["push", "origin", branch]);
-    const pr = (await run("gh", [
-      "pr",
-      "create",
-      "--repo",
-      SUITE_REPO,
-      "--base",
-      "development",
-      "--head",
-      branch,
-      "--title",
-      `Pin ${member.id} ${stage} at ${tag}`,
-      "--body",
-      `Solo ${repo} release ${tag} (#7266). Pin ${stage} to the released bundle.`
-    ])).trim();
+    await run("git", ["push", "--force", "origin", branch]);
+    const body = `Solo ${repo} release ${tag} (#7266, #7714). Pin ${stage} to the released bundle.`;
+    let pr;
+    if (open2) {
+      pr = open2.url;
+      await run("gh", ["pr", "edit", pr, "--repo", SUITE_REPO, "--title", title, "--body", body]);
+    } else {
+      pr = (await run("gh", ["pr", "create", "--repo", SUITE_REPO, "--base", "development", "--head", branch, "--title", title, "--body", body])).trim();
+    }
     if (!pr.includes("/pull/")) throw new Error(`gh pr create returned no PR URL: ${pr}`);
     await run("gh", ["pr", "merge", pr, "--repo", SUITE_REPO, "--auto", "--squash"]);
+    for (const old2 of legacyOpen.filter((p) => compareVersions(p.tag, tag) < 0))
+      await run("gh", ["pr", "close", old2.url, "--repo", SUITE_REPO, "--comment", `Superseded by ${pr} (${member.id} ${stage} at ${tag}).`]);
     return { status: "pending", pr, url: pin };
   } catch (e) {
     throw new Error(`suite pin PR FAILED for ${repo} ${tag}: ${e.message}; remedy: ${remedy}`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.80",
+  "version": "4.5.82",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",