@mutmutco/cli 4.5.84 → 4.5.86

package/dist/main.cjs

@@ -17268,10 +17268,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.84",
-    tag: "v4.5.84",
-    commit: "86b566fd9857",
-    npm: "@mutmutco/cli@4.5.84"
+    version: "4.5.86",
+    tag: "v4.5.86",
+    commit: "6485afaf5af8",
+    npm: "@mutmutco/cli@4.5.86"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17288,14 +17288,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.84"
+          v3Target: "v4.5.86"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.84 and redeploy the Hub Lambda from tag v4.5.84 (86b566fd9857); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.84 (@mutmutco/cli@4.5.84, tag commit 86b566fd9857 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.86 and redeploy the Hub Lambda from tag v4.5.86 (6485afaf5af8); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.86 (@mutmutco/cli@4.5.86, tag commit 6485afaf5af8 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -19607,6 +19607,7 @@ var TRAIN_COMMIT_STATUS_JQ = "[.statuses[]|{context:.context,state:.state,id:.id
 var TRAIN_PROTECTION_CONTEXTS_JQ = "[.contexts[]]";
 var TRAIN_RULES_CONTEXTS_JQ = '[.[]|select(.type=="required_status_checks")|.parameters.required_status_checks[].context]';
 var TRAIN_CHECK_ATTEMPTS = 40;
+var TRAIN_QUEUED_CHECK_ATTEMPTS = 80;
 var TRAIN_CHECK_DELAY_MS = 15e3;
 var TRAIN_PR_ONLY_CONTEXTS = /* @__PURE__ */ new Set(["add-to-project", "mark-merged-pr-done", "guard", "verdict"]);
 var TRAIN_PR_AUTOMATION_GRACE_ATTEMPTS = 3;
@@ -20011,10 +20012,14 @@ async function waitForRequiredTrainChecks(deps, ctx, sha, required, freshSince)
   const sleep2 = resolveSleep(deps);
   let lastStatus = "not checked";
   let lastError;
+  let workflowRunRead = "not-read";
+  let workflowRunNote = "";
+  let workflowRunEverSeen = false;
+  let hadQueuedWorkflowRun = false;
   const everObserved = /* @__PURE__ */ new Set();
   const autoSatisfied = /* @__PURE__ */ new Set();
   let fleetForeignStreak = 0;
-  for (let attempt = 0; attempt < TRAIN_CHECK_ATTEMPTS; attempt++) {
+  for (let attempt = 0; attempt < TRAIN_CHECK_ATTEMPTS || hadQueuedWorkflowRun && attempt < TRAIN_QUEUED_CHECK_ATTEMPTS; attempt++) {
     if (attempt > 0) await sleep2(TRAIN_CHECK_DELAY_MS);
     let checkRuns;
     let statuses;
@@ -20032,6 +20037,40 @@ async function waitForRequiredTrainChecks(deps, ctx, sha, required, freshSince)
       lastError = e.message || String(e);
       continue;
     }
+    try {
+      const workflowOut = await deps.run("gh", [
+        "run",
+        "list",
+        "--repo",
+        ctx.repo,
+        "--commit",
+        sha,
+        "--limit",
+        "100",
+        "--json",
+        "databaseId,status,conclusion,headSha"
+      ]);
+      const parsedWorkflowRuns = JSON.parse(workflowOut);
+      if (!Array.isArray(parsedWorkflowRuns)) throw new Error("workflow-runs response was not an array");
+      const matchingRuns = parsedWorkflowRuns.filter((run) => !run.headSha || run.headSha === sha);
+      if (matchingRuns.length) {
+        workflowRunRead = "found";
+        workflowRunEverSeen = true;
+        const activeRun = matchingRuns.find((run) => run.status === "queued" || run.status === "in_progress");
+        if (activeRun) {
+          if (activeRun.status === "queued") hadQueuedWorkflowRun = true;
+          workflowRunNote = activeRun.status === "queued" ? "Actions run is queued behind busy runners" : "Actions run is in progress";
+        } else {
+          workflowRunNote = "Actions run exists but has not produced the required check-run";
+        }
+      } else {
+        workflowRunRead = "empty";
+        workflowRunNote = "";
+      }
+    } catch (e) {
+      workflowRunRead = "failed";
+      workflowRunNote = `workflow-run lookup failed: ${e.message || String(e)}`;
+    }
     for (const c of required) {
       if (checkRuns.some((r) => r.name === c) || statuses.some((s) => s.context === c)) everObserved.add(c);
     }
@@ -20069,11 +20108,14 @@ async function waitForRequiredTrainChecks(deps, ctx, sha, required, freshSince)
       return `required checks passed: ${pending.join(", ") || "(none pending)"}${satisfiedNote}${fleetNote}`;
     }
   }
-  const waitedMin = Math.round((TRAIN_CHECK_ATTEMPTS - 1) * TRAIN_CHECK_DELAY_MS / 6e4);
+  const attempts = hadQueuedWorkflowRun ? TRAIN_QUEUED_CHECK_ATTEMPTS : TRAIN_CHECK_ATTEMPTS;
+  const waitedMin = Math.round((attempts - 1) * TRAIN_CHECK_DELAY_MS / 6e4);
   const neverMaterialized = required.filter((c) => !everObserved.has(c) && !autoSatisfied.has(c));
-  const neverNote = neverMaterialized.length ? ` Never materialized on ${sha} (no check-run or commit status ever appeared \u2014 the workflow that produces them was likely not triggered by the tag event): ${neverMaterialized.join(", ")}.` : "";
+  const noWorkflowRun = workflowRunRead === "empty" && !workflowRunEverSeen;
+  const neverNote = neverMaterialized.length && noWorkflowRun ? ` No workflow run was found on ${sha} after a successful lookup, and no check-run or commit status appeared: ${neverMaterialized.join(", ")}.` : "";
+  const runNote = workflowRunNote ? ` ${workflowRunNote}.` : "";
   throw new Error(
-    `timed out after ~${waitedMin}m (${TRAIN_CHECK_ATTEMPTS} attempts) waiting for required train checks on ${sha}.${neverNote} Last observed: ${lastError ? `error: ${lastError}` : lastStatus}`
+    `timed out after ~${waitedMin}m (${attempts} attempts) waiting for required train checks on ${sha}.${neverNote}${runNote}${lastError ? ` Last read error: ${lastError}` : ` Last observed: ${lastStatus}`}`
   );
 }
 async function probeRemoteTag(deps, tag) {
@@ -20297,6 +20339,10 @@ function validSuiteCutContext(repo, context) {
 function authorisedSuiteCut(repo, meta, context) {
   return validSuiteCutContext(repo, context) && !!meta?.suite && context.lead.toLowerCase() === suiteLeadRepo(repo, meta.suite).toLowerCase();
 }
+function acceptedSuiteContext(repo, meta, context) {
+  if (authorisedSuiteCut(repo, meta, context)) return true;
+  return !!context && context.token === SUITE_LEAD_TOKEN && !!meta?.suite && !isBundleOnlySuiteMember(repo, meta.suite) && context.repo.toLowerCase() === repo.toLowerCase();
+}
 var BUNDLE_ONLY_RC_EXCEPTION = "suite member: rc is bundle-only (no rc runtime)";
 function isBundleOnlySuiteMember(repo, suite) {
   if (!suite) return false;
@@ -21747,7 +21793,7 @@ function partialTrainRecoveryError(cause, input) {
   const causeMessage = cause instanceof Error ? cause.message : String(cause);
   const branch = input.stage;
   const releaseState = input.stage === "rc" ? "GitHub Release n/a" : "GitHub Release not created";
-  const resumeCommand = input.stage === "rc" ? "mmi-cli devops rcand --resume" : "mmi-cli devops release --resume";
+  const resumeCommand = input.stage === "rc" ? "mmi-cli devops rcand --resume" : `mmi-cli devops release --resume${input.suiteSolo ? " --suite-solo --owner-go" : ""}`;
   const tenant2 = input.deployModel === "tenant-container";
   const deployLine = tenant2 ? `  - deploy: dispatched by the train after the branch push; recover with \`mmi-cli devops runtime tenant redeploy ${input.repo} ${input.stage} --watch\` once the branch and release exist.` : `  - deploy: this repo is \`${input.deployModel ?? "not tenant-container"}\` \u2014 it has NO tenant runtime. Its own release/main-push workflows publish and deploy once the branch and Release exist. Do NOT run the tenant redeployer.`;
   const stateBlock = `partial train state for ${input.tag}:
@@ -24767,7 +24813,7 @@ async function runTrainDoctor(input) {
   const dev = input.dev === true && lane === "release";
   const suiteRefusal = suiteMemberRefusal(repo, meta, lane, input.suiteSolo === true, input.suiteCut);
   if (suiteRefusal) add({ code: "suite-member-solo", severity: "blocker", source: "origin", title: suiteRefusal, remedy: suiteRefusal });
-  if (input.suiteCut && !authorisedSuiteCut(repo, meta, input.suiteCut))
+  if (input.suiteCut && !acceptedSuiteContext(repo, meta, input.suiteCut))
     add({ code: "suite-cut-context-invalid", severity: "blocker", source: "origin", title: "suite cut context does not match this member and its registered lead", remedy: "run from the MM-Work suite command with the member registered in META" });
   if (lane === "rcand" && track === "direct") {
     add({ code: "lane-mismatch", severity: "blocker", source: "origin", title: `${repo} is direct-track (no rc) \u2014 rcand does not apply`, remedy: "run `mmi-cli devops release --apply` from development instead of rcand" });
@@ -25485,7 +25531,7 @@ function enforceGateBudget(deps, repo) {
 async function preflight(deps, ctx, stage, meta, lane) {
   assertGitBashOnWindowsForJervHubRelease(ctx.repo);
   deps.warn?.("Release: Checking release prerequisites");
-  if (deps.suiteCut && !authorisedSuiteCut(ctx.repo, meta, deps.suiteCut))
+  if (deps.suiteCut && !acceptedSuiteContext(ctx.repo, meta, deps.suiteCut))
     throw new Error(`${ctx.repo}: suite cut context does not match registry META; no deployment or tag was changed`);
   const model = requireDeployModel(meta, ctx.repo);
   if (model === "content") {
@@ -26154,7 +26200,7 @@ async function completeMainRelease(deps, ctx, meta, deployModel, watch, options,
   }
   let tagPush;
   let tagLedgerStarted = false;
-  const recoveryInput = { repo: ctx.repo, tag, stage: "main", deployModel, meta, branchHints };
+  const recoveryInput = { repo: ctx.repo, tag, stage: "main", deployModel, suiteSolo: options.suiteSolo, meta, branchHints };
   try {
     await assertComputedReleaseTagStillNext(deps, tag, preOneZeroInForce(meta));
     if (deployModel === "hub-serverless") {
@@ -26745,7 +26791,7 @@ Nothing was written. Inspect ${ledger.path} (or clear it only after proving the
   }
   const steps = [];
   let requiredChecks;
-  const recoveryInput = { repo: ctx.repo, tag, stage: "main", deployModel, meta, branchHints };
+  const recoveryInput = { repo: ctx.repo, tag, stage: "main", deployModel, suiteSolo: options.suiteSolo, meta, branchHints };
   try {
     requiredChecks = await discoverRequiredCheckContexts(deps, ctx, "main");
   } catch (e) {
@@ -46729,6 +46775,17 @@ async function prepareLaneCheckout(git3, repo, branch, lane) {
   const [head, origin] = (await git3(["rev-parse", "HEAD", `origin/${branch}`])).trim().split(/\s+/);
   if (!head || head !== origin) throw new Error(`${repo}: local ${branch} ${head?.slice(0, 12)} is not origin/${branch} ${origin?.slice(0, 12)}; stop`);
 }
+async function refreshSuiteCheckout(git3) {
+  await git3(["fetch", "--prune", "origin"]);
+  if ((await git3(["branch", "--remotes", "--list", "origin/rc"])).trim()) return;
+  if (!(await git3(["branch", "--list", "rc"])).trim()) return;
+  const upstream = (await git3(["for-each-ref", "--format=%(upstream:short)", "refs/heads/rc"])).trim();
+  if (upstream !== "origin/rc") return;
+  const sha = (await git3(["rev-parse", "--short=12", "refs/heads/rc"])).trim();
+  let stale = `stale-rc-${sha}`;
+  for (let suffix = 1; (await git3(["branch", "--list", stale])).trim(); suffix++) stale = `stale-rc-${sha}-${suffix}`;
+  await git3(["branch", "--move", "rc", stale]);
+}
 function rcRunCauseFromLog(log) {
   const causes = [...new Set([...log.matchAll(/##\[error\](?!Process completed with exit code)([^\r\n]+)/g)].map((m) => m[1].trim()).filter(Boolean))];
   return causes.length ? `: ${causes.join("; ")}` : "";
@@ -46750,6 +46807,7 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}) {
     const origin = await exec("git", ["remote", "get-url", "origin"], target);
     if (!origin.toLowerCase().endsWith(`/${repo.toLowerCase()}.git`) && !origin.toLowerCase().endsWith(`/${repo.toLowerCase()}`))
       throw new Error(`${repo}: suite checkout origin mismatch at ${target}; stop`);
+    await refreshSuiteCheckout((args) => exec("git", args, target, WATCH_TIMEOUT));
     return target;
   };
   const inTrain = async (repo, action, solo = false) => {
@@ -47766,6 +47824,16 @@ var surfaces_default = {
               "mmi-cli.cmd"
             ]
           },
+          {
+            mode: "files",
+            sourcePath: "cli",
+            targetPath: "packages/claude-plugin/cli",
+            include: [
+              "dist/index.cjs",
+              "dist/main.cjs",
+              "package.json"
+            ]
+          },
           {
             mode: "files",
             sourcePath: ".claude-plugin",
@@ -47841,6 +47909,16 @@ var surfaces_default = {
               "mmi-cli.cmd"
             ]
           },
+          {
+            mode: "files",
+            sourcePath: "cli",
+            targetPath: "packages/codex-plugin/cli",
+            include: [
+              "dist/index.cjs",
+              "dist/main.cjs",
+              "package.json"
+            ]
+          },
           {
             mode: "files",
             sourcePath: ".codex-plugin",
@@ -47916,6 +47994,16 @@ var surfaces_default = {
               "mmi-cli.cmd"
             ]
           },
+          {
+            mode: "files",
+            sourcePath: "cli",
+            targetPath: "packages/cursor-plugin/cli",
+            include: [
+              "dist/index.cjs",
+              "dist/main.cjs",
+              "package.json"
+            ]
+          },
           {
             mode: "files",
             sourcePath: ".cursor-plugin",
@@ -48132,7 +48220,7 @@ var surfaces_default = {
       ownerPath: "packages/claude-plugin/package.json",
       deliveryPath: "packages/claude-plugin/package.json",
       delivery: "npm",
-      applicability: "Claude Code plugin; npm package @mutmutco/claude-plugin carrying the plugin manifest, skills, hooks, gate scripts, and launchers. The thin git catalog stays in .claude-plugin/marketplace.json (#4945).",
+      applicability: "Claude Code plugin; npm package @mutmutco/claude-plugin carrying the plugin manifest, skills, hooks, gate scripts, launchers, and the bundled mmi-cli engine the launchers run. The thin git catalog stays in .claude-plugin/marketplace.json (#4945).",
       versionCoordinated: true,
       surfaceToken: "claude",
       versionPaths: [
@@ -48148,7 +48236,8 @@ var surfaces_default = {
       additionalPaths: [
         "packages/claude-plugin/.claude-plugin",
         "packages/claude-plugin/skills",
-        "packages/claude-plugin/bin"
+        "packages/claude-plugin/bin",
+        "packages/claude-plugin/cli"
       ],
       artifactIdentity: {
         kind: "npm-pack",
@@ -48183,7 +48272,8 @@ var surfaces_default = {
       additionalPaths: [
         "packages/codex-plugin/.codex-plugin",
         "packages/codex-plugin/skills",
-        "packages/codex-plugin/bin"
+        "packages/codex-plugin/bin",
+        "packages/codex-plugin/cli"
       ],
       artifactIdentity: {
         kind: "npm-pack",
@@ -48214,7 +48304,8 @@ var surfaces_default = {
       additionalPaths: [
         "packages/cursor-plugin/.cursor-plugin",
         "packages/cursor-plugin/skills",
-        "packages/cursor-plugin/bin"
+        "packages/cursor-plugin/bin",
+        "packages/cursor-plugin/cli"
       ],
       artifactIdentity: {
         kind: "npm-pack",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.84",
+  "version": "4.5.86",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",