@mutmutco/codex-plugin 4.5.92 → 4.5.94

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.92",
+  "version": "4.5.94",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -6347,6 +6347,9 @@ async function pollRestPrChecks(prNumber, repo, gh2 = defaultGhApi, requiredCont
   const { relevant } = partitionByRequired(entries, requiredContexts);
   return derivePollState(relevant);
 }
+async function pollRestCommitChecks(sha, repo, gh2 = defaultGhApi) {
+  return derivePollState(partitionByRequired(await fetchHeadCheckEntries(sha, repo, gh2), null).relevant);
+}
 async function pollRestPrMergeable(prNumber, repo, gh2 = defaultGhApi) {
   try {
     return (await fetchRestPrSnapshot(prNumber, repo, gh2)).mergeable;
@@ -17252,10 +17255,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.92",
-    tag: "v4.5.92",
-    commit: "b89a882ab027",
-    npm: "@mutmutco/cli@4.5.92"
+    version: "4.5.94",
+    tag: "v4.5.94",
+    commit: "f01a89cb9110",
+    npm: "@mutmutco/cli@4.5.94"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17272,14 +17275,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.92"
+          v3Target: "v4.5.94"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.92 and redeploy the Hub Lambda from tag v4.5.92 (b89a882ab027); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.92 (@mutmutco/cli@4.5.92, tag commit b89a882ab027 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.94 and redeploy the Hub Lambda from tag v4.5.94 (f01a89cb9110); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.94 (@mutmutco/cli@4.5.94, tag commit f01a89cb9110 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -36067,7 +36070,7 @@ function readSuiteCut(path2) {
   } catch {
     throw new Error(`suite cut record unreadable at ${path2}; repair it, never recut`);
   }
-  if (record.schema !== SCHEMA || record.lead !== SUITE_REPO || !SHA2.test(record.leadDevelopment) || !SHA2.test(record.leadPreviousRc) || !Array.isArray(record.members) || record.members.length === 0 || record.pinPr !== void 0 && (typeof record.pinPr !== "string" || !record.pinPr.startsWith("https://github.com/mutmutco/MM-Work/pull/")) || record.pinMerged !== void 0 && (record.pinMerged !== true && record.pinMerged !== false || !record.pinPr) || record.leadRcTag !== void 0 && (!RC_TAG.test(record.leadRcTag) || !SHA2.test(record.leadRcSha ?? "") || !record.pinMerged) || record.leadReleased !== void 0 && (record.leadReleased !== true || !record.leadRcTag) || record.announcement !== void 0 && (!["pending", "sent", "skipped"].includes(record.announcement) || !record.leadReleased) || record.heldMembers !== void 0 && (!Array.isArray(record.heldMembers) || record.heldMembers.some((h) => !h.id || !h.repo || typeof h.reason !== "string" || !h.reason.trim() || h.since !== void 0 && typeof h.since !== "string" || record.members.some((m) => m.id === h.id))) || record.members.some((m) => !m.id || !m.repo || !m.backend || !m.host || !SHA2.test(m.development) || !SHA2.test(m.previousRc) || m.rcWasAbsent !== void 0 && m.rcWasAbsent !== true || m.tag !== void 0 && (!RC_TAG.test(m.tag) || !SHA2.test(m.sha ?? "")) || m.published !== void 0 && (m.published !== true || !m.tag) || m.released !== void 0 && (m.released !== true || !m.published) || m.mainPublished !== void 0 && (m.mainPublished !== true || !m.released || !!m.carried) || m.backendAfterRelease !== void 0 && (!m.released || typeof m.backendAfterRelease !== "string") || m.carried !== void 0 && (m.carried !== true || m.tag !== void 0 || m.published !== void 0 || !isPin(m.rcPin) || !isPin(m.mainPin)) || m.carried === void 0 && (m.rcPin !== void 0 || m.mainPin !== void 0)))
+  if (record.schema !== SCHEMA || record.lead !== SUITE_REPO || !SHA2.test(record.leadDevelopment) || !SHA2.test(record.leadPreviousRc) || !Array.isArray(record.members) || record.members.length === 0 || record.pinPr !== void 0 && (typeof record.pinPr !== "string" || !record.pinPr.startsWith("https://github.com/mutmutco/MM-Work/pull/")) || record.pinsUnchanged !== void 0 && (record.pinsUnchanged !== true || record.pinPr !== void 0) || record.pinMerged !== void 0 && (record.pinMerged !== true && record.pinMerged !== false || !record.pinPr && !record.pinsUnchanged) || record.leadRcTag !== void 0 && (!RC_TAG.test(record.leadRcTag) || !SHA2.test(record.leadRcSha ?? "") || !record.pinMerged) || record.leadReleased !== void 0 && (record.leadReleased !== true || !record.leadRcTag) || record.announcement !== void 0 && (!["pending", "sent", "skipped"].includes(record.announcement) || !record.leadReleased) || record.heldMembers !== void 0 && (!Array.isArray(record.heldMembers) || record.heldMembers.some((h) => !h.id || !h.repo || typeof h.reason !== "string" || !h.reason.trim() || h.since !== void 0 && typeof h.since !== "string" || record.members.some((m) => m.id === h.id))) || record.members.some((m) => !m.id || !m.repo || !m.backend || !m.host || !SHA2.test(m.development) || !SHA2.test(m.previousRc) || m.rcWasAbsent !== void 0 && m.rcWasAbsent !== true || m.tag !== void 0 && (!RC_TAG.test(m.tag) || !SHA2.test(m.sha ?? "")) || m.published !== void 0 && (m.published !== true || !m.tag) || m.released !== void 0 && (m.released !== true || !m.published) || m.mainPublished !== void 0 && (m.mainPublished !== true || !m.released || !!m.carried) || m.backendAfterRelease !== void 0 && (!m.released || typeof m.backendAfterRelease !== "string") || m.carried !== void 0 && (m.carried !== true || m.tag !== void 0 || m.published !== void 0 || !isPin(m.rcPin) || !isPin(m.mainPin)) || m.carried === void 0 && (m.rcPin !== void 0 || m.mainPin !== void 0)))
     throw new Error(`suite cut record has unknown or invalid state at ${path2}; repair it, never recut`);
   return record;
 }
@@ -36198,7 +36201,7 @@ async function suiteRcand(deps, opts) {
     (0, import_node_fs29.renameSync)(deps.recordPath, archive);
     record = void 0;
   }
-  if (record && !record.pinPr && record.members.every((m) => !m.tag)) {
+  if (record && !record.pinPr && !record.leadRcTag && record.members.every((m) => !m.tag)) {
     (0, import_node_fs29.rmSync)(deps.recordPath, { force: true });
     record = void 0;
   }
@@ -36314,13 +36317,18 @@ Each module must ship a live release that bind-mounts <deployPath>/data read-onl
     if (!member.carried && !member.priorMain && prior && pinVersion(prior) !== suiteReleaseTag(member.tag)) member.priorMain = prior;
   }
   writeSuiteCut(deps.recordPath, record);
-  const pr = await deps.pin({ cut: record.leadDevelopment, pins, heldIds: record.heldMembers?.map((h) => h.id) });
+  const pr = await deps.pin({ cut: record.leadDevelopment, pins, heldIds: record.heldMembers?.map((h) => h.id), carriedOnly: record.members.every((m) => m.carried) });
   await deps.verifyLeadCut(record.leadDevelopment);
-  if (record.pinPr && record.pinPr !== pr.pr) throw new Error(`pin PR changed from ${record.pinPr} to ${pr.pr}; stop`);
-  record.pinPr = pr.pr;
-  record.pinMerged = pr.status === "merged";
+  if (pr.status === "unchanged") {
+    record.pinsUnchanged = true;
+    record.pinMerged = true;
+  } else {
+    if (record.pinPr && record.pinPr !== pr.pr) throw new Error(`pin PR changed from ${record.pinPr} to ${pr.pr}; stop`);
+    record.pinPr = pr.pr;
+    record.pinMerged = pr.status === "merged";
+  }
   writeSuiteCut(deps.recordPath, record);
-  if (!record.pinMerged) throw new Error(`suite pin PR ${pr.pr} is pending; merge it on development, then rerun suite rcand --owner-go (member tags are reused)`);
+  if (!record.pinMerged) throw new Error(`suite pin PR ${record.pinPr} is pending; merge it on development, then rerun suite rcand --owner-go (member tags are reused)`);
   if (!record.leadRcTag) {
     const leadCut = await deps.rcand(SUITE_REPO, record.leadPreviousRc);
     if (!RC_TAG.test(leadCut.tag) || !SHA2.test(leadCut.sha) || !await deps.contains(SUITE_REPO, record.leadDevelopment, leadCut.sha))
@@ -40241,7 +40249,10 @@ async function openSuiteCutPinPr(deps, input) {
       return row?.bundles.rc === p.rc && row?.bundles.main === p.main;
     });
     if (prs.length && matches(await registry2(branch))) return { status: "pending", pr: prs[0].url };
-    if (!prs.length && matches(rows)) throw new Error("pins already match without a merged cut PR \u2014 provenance unverified");
+    if (!prs.length && matches(rows)) {
+      if (input.carriedOnly) return { status: "unchanged" };
+      throw new Error("pins already match without a merged cut PR \u2014 provenance unverified");
+    }
     await (0, import_promises6.mkdir)((0, import_node_path34.join)(deps.root, "tmp"), { recursive: true });
     scratch = await (0, import_promises6.mkdtemp)((0, import_node_path34.join)(deps.root, "tmp", "suite-pin-"));
     const run = (file, args) => deps.run(file, args, scratch);
@@ -45194,6 +45205,30 @@ ${list}`);
     if (wait.checksUrl) lines2.push(`${context}: PR checks: ${wait.checksUrl}`);
     return lines2;
   }
+  function printChecksWaitResult(label, result, json) {
+    if (json) printLine(JSON.stringify(result));
+    else if (result.status === "conflicting") {
+      printLine(`${label}: conflicting \u2014 ${result.reason}`);
+    } else if (result.status === "timeout") {
+      const stuckQueuing = /no-checks-reported/i.test(result.detail ?? "");
+      printLine(
+        `${label}: timeout \u2014 waited ${Math.round((result.waitedMs ?? 0) / 6e4)}m, last state: ${result.detail ?? "pending"}. No check failed; re-run to keep waiting, or pass --timeout <minutes>.` + (stuckQueuing ? " Tip: check-runs never appeared \u2014 if `gh api repos/<owner>/<repo>/actions/runs?head_sha=<sha>` shows total_count=0, see docs/Guides/gh-runner-runbook.md \xA7 Zero workflow runs; otherwise mmi-live may be saturated or Actions may be failing before checkout (docs/Guides/gh-runner-runbook.md)." : "")
+      );
+    } else if (result.status === "rate-limited") {
+      printLine(`${label}: rate-limited \u2014 ${result.reason ?? "REST pool below floor"}. No check failed; re-run after the pool resets.`);
+    } else if (result.detail === "runner-infra") {
+      printLine(`${label}: failure (runner infrastructure, NOT a test failure) \u2014 ${result.reason}`);
+    } else if (result.detail === "stale-head") {
+      printLine(`${label}: failure (stale PR head, NOT a test failure) \u2014 ${result.reason}`);
+    } else if (result.detail === "zero-runs") {
+      printLine(`${label}: failure (zero workflow runs delivered, NOT pending checks) \u2014 ${result.reason}`);
+    } else {
+      printLine(`${label}: ${result.status}${result.reason ? ` \u2014 ${result.reason}` : ""}${result.detail ? ` (${result.detail})` : ""}`);
+      for (const line of failedChecksReceiptLines(label, result)) printLine(line);
+    }
+    if (result.status === "failure" || result.status === "conflicting") process.exitCode = 1;
+    if (result.status === "timeout" || result.status === "rate-limited") process.exitCode = PR_CHECKS_TIMEOUT_EXIT_CODE;
+  }
   async function waitLoopHeadWorkflowRunCount(label, prNumber, repo) {
     let snapshot;
     try {
@@ -45259,28 +45294,7 @@ ${list}`);
       // an agent harness kills it on its own (shorter) deadline before the verdict ever prints (#2940).
       progress: ({ state, elapsedMs, remainingMs }) => console.warn(`pr checks-wait: ${state} \u2014 ${Math.round(elapsedMs / 1e3)}s elapsed, ${Math.round(remainingMs / 6e4)}m left`)
     });
-    if (o.json) printLine(JSON.stringify(result));
-    else if (result.status === "conflicting") {
-      printLine(`pr checks-wait: conflicting \u2014 ${result.reason}`);
-    } else if (result.status === "timeout") {
-      const stuckQueuing = /no-checks-reported/i.test(result.detail ?? "");
-      printLine(
-        `pr checks-wait: timeout \u2014 waited ${Math.round((result.waitedMs ?? 0) / 6e4)}m, last state: ${result.detail ?? "pending"}. No check failed; re-run to keep waiting, or pass --timeout <minutes>.` + (stuckQueuing ? " Tip: check-runs never appeared \u2014 if `gh api repos/<owner>/<repo>/actions/runs?head_sha=<sha>` shows total_count=0, see docs/Guides/gh-runner-runbook.md \xA7 Zero workflow runs; otherwise mmi-live may be saturated or Actions may be failing before checkout (docs/Guides/gh-runner-runbook.md)." : "")
-      );
-    } else if (result.status === "rate-limited") {
-      printLine(`pr checks-wait: rate-limited \u2014 ${result.reason ?? "REST pool below floor"}. No check failed; re-run after the pool resets.`);
-    } else if (result.detail === "runner-infra") {
-      printLine(`pr checks-wait: failure (runner infrastructure, NOT a test failure) \u2014 ${result.reason}`);
-    } else if (result.detail === "stale-head") {
-      printLine(`pr checks-wait: failure (stale PR head, NOT a test failure) \u2014 ${result.reason}`);
-    } else if (result.detail === "zero-runs") {
-      printLine(`pr checks-wait: failure (zero workflow runs delivered, NOT pending checks) \u2014 ${result.reason}`);
-    } else {
-      printLine(`pr checks-wait: ${result.status}${result.reason ? ` \u2014 ${result.reason}` : ""}${result.detail ? ` (${result.detail})` : ""}`);
-      for (const line of failedChecksReceiptLines("pr checks-wait", result)) printLine(line);
-    }
-    if (result.status === "failure" || result.status === "conflicting") process.exitCode = 1;
-    if (result.status === "timeout" || result.status === "rate-limited") process.exitCode = PR_CHECKS_TIMEOUT_EXIT_CODE;
+    printChecksWaitResult("pr checks-wait", result, o.json);
   });
   pr.command("review-check <number>").description("read-only trusted review verdict check for an exact PR head").requiredOption("--repo <owner/repo>", "target repository").requiredOption("--head <sha>", "exact expected head SHA").option("--json", "machine-readable output").action(async (number, o) => {
     const result = await checkPrReview(number, o.repo, o.head);
@@ -45942,6 +45956,37 @@ ${list}`);
     }
     process.exitCode = (partialCleanup.length ? 1 : void 0) ?? prMergeLocalCleanupExitCode(localCleanup) ?? postMergeReconExitCode({ boardAdvance, crossRepoFilingIssue }) ?? process.exitCode;
   });
+  return (ci2) => {
+    ci2.command("checks-wait").description(`bounded wait for ALL check runs and commit statuses on one commit SHA \u2014 replaces raw \`gh run watch\` / \`gh pr checks --watch\` loops, which charge a request per tick and exhausted the shared 5,000/hr token (#7843). REST-only polling with ETag-cached reads and a pool floor (#3024); fails early on a confirmed zero-workflow-runs commit (#5400). Default budget ${PR_CHECKS_TIMEOUT_MS / 6e4}m; --timeout raises it. Exit 1 = a check FAILED or GitHub delivered zero runs; exit ${PR_CHECKS_TIMEOUT_EXIT_CODE} = the wait window expired or the API pool ran dry (re-arm)`).requiredOption("--sha <sha>", "full 40-hex commit SHA to wait on").option("--json", "machine-readable output").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--timeout <minutes>", `wait budget in minutes (default ${PR_CHECKS_TIMEOUT_MS / 6e4})`).action(async (o) => {
+      if (!/^[0-9a-f]{40}$/i.test(o.sha)) return fail("ci checks-wait: --sha must be a full 40-hex commit SHA");
+      let timeoutMs;
+      if (o.timeout !== void 0) {
+        const minutes = Number(o.timeout);
+        if (!Number.isFinite(minutes) || minutes <= 0) return fail("ci checks-wait: --timeout must be a positive number of minutes");
+        timeoutMs = Math.round(minutes * 6e4);
+      }
+      const repo = await requireRepo(o.repo);
+      const sha = o.sha.toLowerCase();
+      const result = await waitForPrChecks({
+        resolvePolicy: () => resolveMergeCiPolicyForCheckout(o.repo),
+        pollChecks: () => pollRestCommitChecks(sha, repo),
+        pollRateLimit: () => waitLoopCorePool("ci checks-wait"),
+        checksUrl: `https://github.com/${repo}/commit/${sha}/checks`,
+        checksDiagnosticCommand: `gh api repos/${repo}/commits/${sha}/check-runs`,
+        pollHeadWorkflowRunCount: async () => {
+          const read = await countHeadWorkflowRuns(sha, repo);
+          if (read.state === "ok") return read.count;
+          console.warn(`ci checks-wait: zero-runs probe FAILED (${read.error}) \u2014 not treating as delivery failure this cycle`);
+          return null;
+        },
+        sleep: (ms) => new Promise((resolve7) => setTimeout(resolve7, ms)),
+        log: (message2) => console.warn(message2),
+        timeoutMs: timeoutMs ?? PR_CHECKS_TIMEOUT_MS,
+        progress: ({ state, elapsedMs, remainingMs }) => console.warn(`ci checks-wait: ${state} \u2014 ${Math.round(elapsedMs / 1e3)}s elapsed, ${Math.round(remainingMs / 6e4)}m left`)
+      });
+      printChecksWaitResult("ci checks-wait", result, o.json);
+    });
+  };
 }
 
 // src/command-register-train-operations.ts
@@ -47014,9 +47059,10 @@ function rcRunCauseFromLog(log) {
 function memberAnnounceSummaryFile(repo, summaryFile, memberSummaryFiles) {
   return repo === SUITE_REPO ? summaryFile : memberSummaryFiles[repo];
 }
+var suiteStateDir = (root) => (0, import_node_path43.join)(resolvePrimaryGitDir(root), "mmi-runtime", "suite");
 function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}) {
-  const recordPath = repoRuntimeStatePath(root, "suite", "cut.json");
-  const base = (0, import_node_path43.join)(repoRuntimeStatePath(root, "suite"), "checkouts");
+  const recordPath = (0, import_node_path43.join)(suiteStateDir(root), "cut.json");
+  const base = (0, import_node_path43.join)(suiteStateDir(root), "checkouts");
   const checkout = async (repo) => {
     if (repo === SUITE_REPO) return root;
     const target = (0, import_node_path43.join)(base, repo.split("/")[1]);
@@ -47326,7 +47372,7 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}) {
     recordMapping: async (leadTag, mapping) => {
       const body = await gh(["release", "view", leadTag, "--repo", SUITE_REPO, "--json", "body", "--jq", ".body"]);
       if (parseSuiteMapping(body)) return;
-      const dir = repoRuntimeStatePath(root, "suite");
+      const dir = suiteStateDir(root);
       (0, import_node_fs43.mkdirSync)(dir, { recursive: true });
       const file = (0, import_node_path43.join)(dir, `notes-${leadTag}.md`);
       (0, import_node_fs43.writeFileSync)(file, `${body}
@@ -54485,7 +54531,7 @@ oauth.command("verify").description("probe Google authorize with an arbitrary po
   }
   if (mismatches.length) process.exitCode = 1;
 });
-registerCollaborationCommands(program2);
+var registerCiChecksWait = registerCollaborationCommands(program2);
 function ciAuditDeps2() {
   const cfgPromise = loadConfig();
   const root = hubRoot2();
@@ -54537,6 +54583,7 @@ ci.command("audit").description("read-only fleet scan: gate workflow, ruleset co
   else console.log(renderCiAuditText(report));
   if (!report.ok) process.exitCode = 1;
 });
+registerCiChecksWait(ci);
 ci.command("reconcile").description("audit + optionally apply merge settings and product ruleset activation (master-admin)").option("--json", "machine-readable output").option("--repo <owner/repo>", "reconcile one repo instead of the full registry").option("--apply", "PATCH merge settings + activate product ruleset when missing (master role required); activation is skipped while the repo's gate has never passed (#3694)").option("--park-ruleset", "stop the product ruleset enforcing without deleting it \u2014 keeps its required contexts (master role required)").action(async (o) => {
   if (o.apply && o.parkRuleset) {
     return fail("ci reconcile: --apply and --park-ruleset ask for opposite things; pass one");

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.92",
+  "version": "4.5.94",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.92",
+  "version": "4.5.94",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",