@mutmutco/cli 4.5.81 → 4.5.83

package/dist/main.cjs

@@ -6390,6 +6390,16 @@ var RUNNER_INFRA_PRESTART_CONCLUSIONS = /* @__PURE__ */ new Set([
   "cancelled",
   "startup_failure"
 ]);
+var TEST_FAILURE_LINE = /^(?:✖|not ok\b|FAIL\b|×)|\bAssertionError\b/;
+function firstTestFailureLine(log) {
+  for (const raw of log.split(/\r?\n/)) {
+    const line = raw.replace(/^\uFEFF?\d{4}-\d\d-\d\dT[\d:.]+Z\s*/, "").replace(/\x1b\[[0-9;]*m/g, "").trim();
+    if (TEST_FAILURE_LINE.test(line)) {
+      return line.replace(/\b(?:gh[pousr]_|github_pat_|AKIA|sk-)[\w-]+/g, "[redacted]").slice(0, 200);
+    }
+  }
+  return void 0;
+}
 var BARE_CHECKS_FAILURE_MESSAGE = "GitHub reported a checks failure but exposed no per-check data.";
 function actionRunIdFromDetailsUrl(detailsUrl) {
   const match = detailsUrl?.match(/\/actions\/runs\/(\d+)(?:\/|$)/);
@@ -6430,7 +6440,7 @@ function classifyFailedChecks(failing) {
   for (const check of failing) {
     const errors = check.annotations.filter(isErrorAnnotation);
     if (errors.length > 0) {
-      const allInfra = errors.every((a) => isRunnerInfraAnnotation(a));
+      const allInfra = errors.every((a) => isRunnerInfraAnnotation(a)) && !check.testFailureLine;
       (allInfra ? infraFailures : otherFailures).push(check.name);
       continue;
     }
@@ -6449,12 +6459,14 @@ function classifyFailedChecks(failing) {
       reason: `${infraFailures.length} check(s) failed on RUNNER INFRASTRUCTURE, not your diff: ${infraFailures.join(", ")}. No test failed \u2014 the shared runner hit a wall-clock budget kill, ran out of disk, was missing a toolchain, could not acquire an mmi-live lane, or Actions returned Service Unavailable before checkout (the check annotation / conclusion names which). Re-run once the runner drains/heals (gh run rerun --failed); do not debug the diff.`
     };
   }
+  const failedTests = failing.filter((c) => c.testFailureLine);
+  const testNote = failedTests.length ? ` Test failures in the job log (first: ${failedTests[0].testFailureLine})` + (failedTests.some((c) => c.annotations.some((a) => isErrorAnnotation(a) && isRunnerInfraAnnotation(a))) ? ", followed by a runner wall-clock budget kill" : "") + "; fix the failing test(s)." : "";
   return {
     cause: "checks-failure",
     infraFailures,
     otherFailures,
     failedChecks: [],
-    reason: infraFailures.length ? `checks failed: ${otherFailures.join(", ")}; separately, ${infraFailures.join(", ")} failed on runner infrastructure, not a test.` : `checks failed: ${otherFailures.join(", ") || "unknown"}.`
+    reason: testNote && !infraFailures.length ? `checks failed: ${otherFailures.join(", ")}.${testNote}` : infraFailures.length ? `checks failed: ${otherFailures.join(", ")}; separately, ${infraFailures.join(", ")} failed on runner infrastructure, not a test.` : `checks failed: ${otherFailures.join(", ") || "unknown"}.`
   };
 }
 async function diagnoseFailedRestChecks(prNumber, repo, gh2 = defaultGhApi) {
@@ -6489,11 +6501,18 @@ async function diagnoseFailedRestChecks(prNumber, repo, gh2 = defaultGhApi) {
   if (!failing.length) return { state: "absent", reason: "no failing check-run on the current head to diagnose" };
   const failedChecks = failing.map((run) => failedCheckReceipt(run, repo));
   try {
-    const annotated = await Promise.all(failing.map(async (run) => ({
-      name: run.name ?? `check-run ${run.id}`,
-      conclusion: run.conclusion ?? null,
-      annotations: JSON.parse(await gh2([`repos/${repo}/check-runs/${run.id}/annotations`]))
-    })));
+    const annotated = await Promise.all(failing.map(async (run) => {
+      const annotations = JSON.parse(await gh2([`repos/${repo}/check-runs/${run.id}/annotations`]));
+      const errors = annotations.filter(isErrorAnnotation);
+      let testFailureLine;
+      if (errors.length && errors.every(isRunnerInfraAnnotation)) {
+        try {
+          testFailureLine = firstTestFailureLine(await gh2([`repos/${repo}/actions/jobs/${run.id}/logs`]));
+        } catch {
+        }
+      }
+      return { name: run.name ?? `check-run ${run.id}`, conclusion: run.conclusion ?? null, annotations, testFailureLine };
+    }));
     return { state: "ok", diagnosis: { ...classifyFailedChecks(annotated), failedChecks } };
   } catch (e) {
     return {
@@ -17249,10 +17268,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.81",
-    tag: "v4.5.81",
-    commit: "0c3a49536686",
-    npm: "@mutmutco/cli@4.5.81"
+    version: "4.5.83",
+    tag: "v4.5.83",
+    commit: "d092dda5d5e6",
+    npm: "@mutmutco/cli@4.5.83"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17269,14 +17288,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.81"
+          v3Target: "v4.5.83"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.81 and redeploy the Hub Lambda from tag v4.5.81 (0c3a49536686); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.81 (@mutmutco/cli@4.5.81, tag commit 0c3a49536686 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.83 and redeploy the Hub Lambda from tag v4.5.83 (d092dda5d5e6); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.83 (@mutmutco/cli@4.5.83, tag commit d092dda5d5e6 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -21627,7 +21646,51 @@ async function dispatchCanary(deps, targetRepo2, nonce) {
     attempts.every((a) => isCanaryAccessBlockText(a)) ? `${detail} Every door answered with an access refusal \u2014 the caller may read MMI-Hub but not start its workflows.` : detail
   );
 }
+var HOSTED_LABEL_RE = /\b(?:ubuntu|windows|macos)-(?:latest|\d[\w.-]*)\b/;
+var AUTOMATIC_TRIGGERS = /* @__PURE__ */ new Set(["push", "pull_request", "pull_request_target", "release", "schedule", "workflow_run", "merge_group", "create", "deployment", "repository_dispatch", "check_run", "check_suite", "issues", "issue_comment"]);
+function workflowTriggers(yaml) {
+  const lines2 = yaml.split(/\r?\n/);
+  const i = lines2.findIndex((l) => /^(?:on|"on"|'on'):(?:\s|$)/.test(l));
+  if (i < 0) return [];
+  const inline = lines2[i].replace(/^[^:]+:\s*/, "").replace(/\s+#.*$/, "").trim();
+  if (inline) return inline.replace(/^\[|\]$/g, "").split(",").map((s) => s.trim().replace(/^['"]|['"]$/g, "")).filter(Boolean);
+  const out = [];
+  for (const line of lines2.slice(i + 1)) {
+    if (/^\S/.test(line)) break;
+    const m = /^ {2}([A-Za-z_]+):/.exec(line) ?? /^ {2}- ([A-Za-z_]+)\s*$/.exec(line);
+    if (m) out.push(m[1]);
+  }
+  return out;
+}
+function workflowNeedsHostedRunner(yaml) {
+  const body = yaml.split(/\r?\n/).filter((l) => !/^\s*#/.test(l)).join("\n");
+  return HOSTED_LABEL_RE.test(body) && workflowTriggers(yaml).some((t) => AUTOMATIC_TRIGGERS.has(t));
+}
+async function hostedWorkflowsOf(deps, repo) {
+  const list = parseJson(
+    await deps.run("gh", ["api", `repos/${repo}/contents/.github/workflows`]),
+    `${repo} workflow listing`
+  );
+  const hosted = [];
+  for (const f of list) {
+    if (f.type !== "file" || !f.path || !/\.ya?ml$/.test(f.path) || f.name === CANARY_WORKFLOW) continue;
+    const raw = parseJson(await deps.run("gh", ["api", `repos/${repo}/contents/${f.path}`]), `${repo} ${f.path}`);
+    if (workflowNeedsHostedRunner(Buffer.from(raw.content ?? "", "base64").toString("utf8"))) hosted.push(f.path);
+  }
+  return hosted;
+}
 async function assertActionsJobsCanStart(deps, targetRepo2) {
+  let hosted;
+  try {
+    hosted = await hostedWorkflowsOf(deps, targetRepo2);
+  } catch {
+    hosted = void 0;
+  }
+  if (hosted && hosted.length === 0) {
+    process.stderr.write(`actions preflight: ${targetRepo2} has no automatically triggered GitHub-hosted job; hosted canary skipped (#7721)
+`);
+    return;
+  }
   const scanned = await scanRepoForBillingBlock(deps, targetRepo2);
   if (scanned) throw actionsBillingRefusal(scanned);
   if (targetRepo2.toLowerCase() !== CANARY_REPO.toLowerCase()) {
@@ -26834,6 +26897,7 @@ async function runReleaseResume(deps, options = {}) {
 async function runReleaseResumeLocked(deps, options) {
   const ctx = await buildTrainApplyContext(deps);
   await requireCleanTree(deps);
+  const entryBranch = await currentBranch(deps).catch(() => "");
   await runGitRemoteRead(deps, ["fetch", "origin", "--tags"]);
   const meta = requireProjectMetaForTrain(await loadProjectMeta(deps, ctx), ctx.repo);
   const suiteRefusal = suiteMemberRefusal(ctx.repo, meta, "release", options.suiteSolo === true, deps.suiteCut);
@@ -26841,7 +26905,7 @@ async function runReleaseResumeLocked(deps, options) {
   const branchHints = await loadReleaseTrackBranchHints(deps);
   const directTrack = isHubControlRepo(ctx.repo) || resolveReleaseTrack(meta, branchHints) === "direct";
   const deployModel = await preflight(deps, ctx, "main", meta);
-  const startBranch = directTrack ? "development" : "rc";
+  const startBranch = TRAIN_BRANCHES.includes(entryBranch) ? entryBranch : directTrack ? "development" : "rc";
   return withCheckoutRestoredAfterReleaseResume(
     deps,
     startBranch,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.81",
+  "version": "4.5.83",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",