@mutmutco/codex-plugin 4.5.93 → 4.5.94

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.93",
+  "version": "4.5.94",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -6347,6 +6347,9 @@ async function pollRestPrChecks(prNumber, repo, gh2 = defaultGhApi, requiredCont
   const { relevant } = partitionByRequired(entries, requiredContexts);
   return derivePollState(relevant);
 }
+async function pollRestCommitChecks(sha, repo, gh2 = defaultGhApi) {
+  return derivePollState(partitionByRequired(await fetchHeadCheckEntries(sha, repo, gh2), null).relevant);
+}
 async function pollRestPrMergeable(prNumber, repo, gh2 = defaultGhApi) {
   try {
     return (await fetchRestPrSnapshot(prNumber, repo, gh2)).mergeable;
@@ -17252,10 +17255,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.93",
-    tag: "v4.5.93",
-    commit: "f0c54c59980d",
-    npm: "@mutmutco/cli@4.5.93"
+    version: "4.5.94",
+    tag: "v4.5.94",
+    commit: "f01a89cb9110",
+    npm: "@mutmutco/cli@4.5.94"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17272,14 +17275,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.93"
+          v3Target: "v4.5.94"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.93 and redeploy the Hub Lambda from tag v4.5.93 (f0c54c59980d); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.93 (@mutmutco/cli@4.5.93, tag commit f0c54c59980d \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.94 and redeploy the Hub Lambda from tag v4.5.94 (f01a89cb9110); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.94 (@mutmutco/cli@4.5.94, tag commit f01a89cb9110 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -45202,6 +45205,30 @@ ${list}`);
     if (wait.checksUrl) lines2.push(`${context}: PR checks: ${wait.checksUrl}`);
     return lines2;
   }
+  function printChecksWaitResult(label, result, json) {
+    if (json) printLine(JSON.stringify(result));
+    else if (result.status === "conflicting") {
+      printLine(`${label}: conflicting \u2014 ${result.reason}`);
+    } else if (result.status === "timeout") {
+      const stuckQueuing = /no-checks-reported/i.test(result.detail ?? "");
+      printLine(
+        `${label}: timeout \u2014 waited ${Math.round((result.waitedMs ?? 0) / 6e4)}m, last state: ${result.detail ?? "pending"}. No check failed; re-run to keep waiting, or pass --timeout <minutes>.` + (stuckQueuing ? " Tip: check-runs never appeared \u2014 if `gh api repos/<owner>/<repo>/actions/runs?head_sha=<sha>` shows total_count=0, see docs/Guides/gh-runner-runbook.md \xA7 Zero workflow runs; otherwise mmi-live may be saturated or Actions may be failing before checkout (docs/Guides/gh-runner-runbook.md)." : "")
+      );
+    } else if (result.status === "rate-limited") {
+      printLine(`${label}: rate-limited \u2014 ${result.reason ?? "REST pool below floor"}. No check failed; re-run after the pool resets.`);
+    } else if (result.detail === "runner-infra") {
+      printLine(`${label}: failure (runner infrastructure, NOT a test failure) \u2014 ${result.reason}`);
+    } else if (result.detail === "stale-head") {
+      printLine(`${label}: failure (stale PR head, NOT a test failure) \u2014 ${result.reason}`);
+    } else if (result.detail === "zero-runs") {
+      printLine(`${label}: failure (zero workflow runs delivered, NOT pending checks) \u2014 ${result.reason}`);
+    } else {
+      printLine(`${label}: ${result.status}${result.reason ? ` \u2014 ${result.reason}` : ""}${result.detail ? ` (${result.detail})` : ""}`);
+      for (const line of failedChecksReceiptLines(label, result)) printLine(line);
+    }
+    if (result.status === "failure" || result.status === "conflicting") process.exitCode = 1;
+    if (result.status === "timeout" || result.status === "rate-limited") process.exitCode = PR_CHECKS_TIMEOUT_EXIT_CODE;
+  }
   async function waitLoopHeadWorkflowRunCount(label, prNumber, repo) {
     let snapshot;
     try {
@@ -45267,28 +45294,7 @@ ${list}`);
       // an agent harness kills it on its own (shorter) deadline before the verdict ever prints (#2940).
       progress: ({ state, elapsedMs, remainingMs }) => console.warn(`pr checks-wait: ${state} \u2014 ${Math.round(elapsedMs / 1e3)}s elapsed, ${Math.round(remainingMs / 6e4)}m left`)
     });
-    if (o.json) printLine(JSON.stringify(result));
-    else if (result.status === "conflicting") {
-      printLine(`pr checks-wait: conflicting \u2014 ${result.reason}`);
-    } else if (result.status === "timeout") {
-      const stuckQueuing = /no-checks-reported/i.test(result.detail ?? "");
-      printLine(
-        `pr checks-wait: timeout \u2014 waited ${Math.round((result.waitedMs ?? 0) / 6e4)}m, last state: ${result.detail ?? "pending"}. No check failed; re-run to keep waiting, or pass --timeout <minutes>.` + (stuckQueuing ? " Tip: check-runs never appeared \u2014 if `gh api repos/<owner>/<repo>/actions/runs?head_sha=<sha>` shows total_count=0, see docs/Guides/gh-runner-runbook.md \xA7 Zero workflow runs; otherwise mmi-live may be saturated or Actions may be failing before checkout (docs/Guides/gh-runner-runbook.md)." : "")
-      );
-    } else if (result.status === "rate-limited") {
-      printLine(`pr checks-wait: rate-limited \u2014 ${result.reason ?? "REST pool below floor"}. No check failed; re-run after the pool resets.`);
-    } else if (result.detail === "runner-infra") {
-      printLine(`pr checks-wait: failure (runner infrastructure, NOT a test failure) \u2014 ${result.reason}`);
-    } else if (result.detail === "stale-head") {
-      printLine(`pr checks-wait: failure (stale PR head, NOT a test failure) \u2014 ${result.reason}`);
-    } else if (result.detail === "zero-runs") {
-      printLine(`pr checks-wait: failure (zero workflow runs delivered, NOT pending checks) \u2014 ${result.reason}`);
-    } else {
-      printLine(`pr checks-wait: ${result.status}${result.reason ? ` \u2014 ${result.reason}` : ""}${result.detail ? ` (${result.detail})` : ""}`);
-      for (const line of failedChecksReceiptLines("pr checks-wait", result)) printLine(line);
-    }
-    if (result.status === "failure" || result.status === "conflicting") process.exitCode = 1;
-    if (result.status === "timeout" || result.status === "rate-limited") process.exitCode = PR_CHECKS_TIMEOUT_EXIT_CODE;
+    printChecksWaitResult("pr checks-wait", result, o.json);
   });
   pr.command("review-check <number>").description("read-only trusted review verdict check for an exact PR head").requiredOption("--repo <owner/repo>", "target repository").requiredOption("--head <sha>", "exact expected head SHA").option("--json", "machine-readable output").action(async (number, o) => {
     const result = await checkPrReview(number, o.repo, o.head);
@@ -45950,6 +45956,37 @@ ${list}`);
     }
     process.exitCode = (partialCleanup.length ? 1 : void 0) ?? prMergeLocalCleanupExitCode(localCleanup) ?? postMergeReconExitCode({ boardAdvance, crossRepoFilingIssue }) ?? process.exitCode;
   });
+  return (ci2) => {
+    ci2.command("checks-wait").description(`bounded wait for ALL check runs and commit statuses on one commit SHA \u2014 replaces raw \`gh run watch\` / \`gh pr checks --watch\` loops, which charge a request per tick and exhausted the shared 5,000/hr token (#7843). REST-only polling with ETag-cached reads and a pool floor (#3024); fails early on a confirmed zero-workflow-runs commit (#5400). Default budget ${PR_CHECKS_TIMEOUT_MS / 6e4}m; --timeout raises it. Exit 1 = a check FAILED or GitHub delivered zero runs; exit ${PR_CHECKS_TIMEOUT_EXIT_CODE} = the wait window expired or the API pool ran dry (re-arm)`).requiredOption("--sha <sha>", "full 40-hex commit SHA to wait on").option("--json", "machine-readable output").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--timeout <minutes>", `wait budget in minutes (default ${PR_CHECKS_TIMEOUT_MS / 6e4})`).action(async (o) => {
+      if (!/^[0-9a-f]{40}$/i.test(o.sha)) return fail("ci checks-wait: --sha must be a full 40-hex commit SHA");
+      let timeoutMs;
+      if (o.timeout !== void 0) {
+        const minutes = Number(o.timeout);
+        if (!Number.isFinite(minutes) || minutes <= 0) return fail("ci checks-wait: --timeout must be a positive number of minutes");
+        timeoutMs = Math.round(minutes * 6e4);
+      }
+      const repo = await requireRepo(o.repo);
+      const sha = o.sha.toLowerCase();
+      const result = await waitForPrChecks({
+        resolvePolicy: () => resolveMergeCiPolicyForCheckout(o.repo),
+        pollChecks: () => pollRestCommitChecks(sha, repo),
+        pollRateLimit: () => waitLoopCorePool("ci checks-wait"),
+        checksUrl: `https://github.com/${repo}/commit/${sha}/checks`,
+        checksDiagnosticCommand: `gh api repos/${repo}/commits/${sha}/check-runs`,
+        pollHeadWorkflowRunCount: async () => {
+          const read = await countHeadWorkflowRuns(sha, repo);
+          if (read.state === "ok") return read.count;
+          console.warn(`ci checks-wait: zero-runs probe FAILED (${read.error}) \u2014 not treating as delivery failure this cycle`);
+          return null;
+        },
+        sleep: (ms) => new Promise((resolve7) => setTimeout(resolve7, ms)),
+        log: (message2) => console.warn(message2),
+        timeoutMs: timeoutMs ?? PR_CHECKS_TIMEOUT_MS,
+        progress: ({ state, elapsedMs, remainingMs }) => console.warn(`ci checks-wait: ${state} \u2014 ${Math.round(elapsedMs / 1e3)}s elapsed, ${Math.round(remainingMs / 6e4)}m left`)
+      });
+      printChecksWaitResult("ci checks-wait", result, o.json);
+    });
+  };
 }
 
 // src/command-register-train-operations.ts
@@ -54494,7 +54531,7 @@ oauth.command("verify").description("probe Google authorize with an arbitrary po
   }
   if (mismatches.length) process.exitCode = 1;
 });
-registerCollaborationCommands(program2);
+var registerCiChecksWait = registerCollaborationCommands(program2);
 function ciAuditDeps2() {
   const cfgPromise = loadConfig();
   const root = hubRoot2();
@@ -54546,6 +54583,7 @@ ci.command("audit").description("read-only fleet scan: gate workflow, ruleset co
   else console.log(renderCiAuditText(report));
   if (!report.ok) process.exitCode = 1;
 });
+registerCiChecksWait(ci);
 ci.command("reconcile").description("audit + optionally apply merge settings and product ruleset activation (master-admin)").option("--json", "machine-readable output").option("--repo <owner/repo>", "reconcile one repo instead of the full registry").option("--apply", "PATCH merge settings + activate product ruleset when missing (master role required); activation is skipped while the repo's gate has never passed (#3694)").option("--park-ruleset", "stop the product ruleset enforcing without deleting it \u2014 keeps its required contexts (master role required)").action(async (o) => {
   if (o.apply && o.parkRuleset) {
     return fail("ci reconcile: --apply and --park-ruleset ask for opposite things; pass one");

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.93",
+  "version": "4.5.94",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.93",
+  "version": "4.5.94",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",