@mutmutco/codex-plugin 4.5.93 → 4.5.95

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.93",
+  "version": "4.5.95",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -6347,6 +6347,9 @@ async function pollRestPrChecks(prNumber, repo, gh2 = defaultGhApi, requiredCont
   const { relevant } = partitionByRequired(entries, requiredContexts);
   return derivePollState(relevant);
 }
+async function pollRestCommitChecks(sha, repo, gh2 = defaultGhApi) {
+  return derivePollState(partitionByRequired(await fetchHeadCheckEntries(sha, repo, gh2), null).relevant);
+}
 async function pollRestPrMergeable(prNumber, repo, gh2 = defaultGhApi) {
   try {
     return (await fetchRestPrSnapshot(prNumber, repo, gh2)).mergeable;
@@ -17252,10 +17255,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.93",
-    tag: "v4.5.93",
-    commit: "f0c54c59980d",
-    npm: "@mutmutco/cli@4.5.93"
+    version: "4.5.95",
+    tag: "v4.5.95",
+    commit: "d6d4a135bce9",
+    npm: "@mutmutco/cli@4.5.95"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17272,14 +17275,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.93"
+          v3Target: "v4.5.95"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.93 and redeploy the Hub Lambda from tag v4.5.93 (f0c54c59980d); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.93 (@mutmutco/cli@4.5.93, tag commit f0c54c59980d \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.95 and redeploy the Hub Lambda from tag v4.5.95 (d6d4a135bce9); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.95 (@mutmutco/cli@4.5.95, tag commit d6d4a135bce9 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -36124,6 +36127,21 @@ async function suiteMarkAbandoned(deps, ownerGo = false) {
   for (const t of tags) await deps.markAbandoned(t.repo, t.tag, t.sha);
   return tags.map((t) => `${t.repo}@${t.tag}`);
 }
+async function retireFailedLeadRcLedger(deps, ownerGo) {
+  if (!(0, import_node_fs29.existsSync)(deps.ledgerPath)) return void 0;
+  return withLedgerLock(deps.ledgerPath, async (fence) => {
+    const ledger = parseReleaseLedger((0, import_node_fs29.readFileSync)(deps.ledgerPath, "utf8"));
+    const states = Object.values(ledger.phases).map((p) => p.state);
+    if (ledger.repo !== SUITE_REPO || ledger.lane !== "rcand" || ledger.phases.promotion.state === "complete" || !states.includes("failed")) return void 0;
+    if (!ownerGo) throw new Error(`the lead's failed rcand ledger for ${ledger.tag} blocks every train; retire it with suite abandon --owner-go`);
+    if ((await deps.rcHead())?.toLowerCase() === ledger.tagSha.toLowerCase()) throw new Error(`origin rc already points at ${ledger.tag}; it was promoted, so its ledger is not retired`);
+    const archive = (0, import_node_path29.join)((0, import_node_path29.dirname)(deps.ledgerPath), `phases.archive-${ledger.tag}.json`);
+    if ((0, import_node_fs29.existsSync)(archive)) throw new Error(`ledger archive already exists at ${archive}; inspect before retiring again`);
+    await deps.markAbandoned(SUITE_REPO, ledger.tag, ledger.tagSha);
+    await fence(() => (0, import_node_fs29.renameSync)(deps.ledgerPath, archive));
+    return `${ledger.tag} (ledger archived to ${archive})`;
+  });
+}
 function suiteAbandon(recordPath, ownerGo = false, now = /* @__PURE__ */ new Date()) {
   const record = abandonableCut(recordPath, ownerGo);
   const archive = `${recordPath}.abandoned-${record.leadDevelopment.slice(0, 12)}-${now.toISOString().replace(/[:.]/g, "")}.json`;
@@ -45202,6 +45220,30 @@ ${list}`);
     if (wait.checksUrl) lines2.push(`${context}: PR checks: ${wait.checksUrl}`);
     return lines2;
   }
+  function printChecksWaitResult(label, result, json) {
+    if (json) printLine(JSON.stringify(result));
+    else if (result.status === "conflicting") {
+      printLine(`${label}: conflicting \u2014 ${result.reason}`);
+    } else if (result.status === "timeout") {
+      const stuckQueuing = /no-checks-reported/i.test(result.detail ?? "");
+      printLine(
+        `${label}: timeout \u2014 waited ${Math.round((result.waitedMs ?? 0) / 6e4)}m, last state: ${result.detail ?? "pending"}. No check failed; re-run to keep waiting, or pass --timeout <minutes>.` + (stuckQueuing ? " Tip: check-runs never appeared \u2014 if `gh api repos/<owner>/<repo>/actions/runs?head_sha=<sha>` shows total_count=0, see docs/Guides/gh-runner-runbook.md \xA7 Zero workflow runs; otherwise mmi-live may be saturated or Actions may be failing before checkout (docs/Guides/gh-runner-runbook.md)." : "")
+      );
+    } else if (result.status === "rate-limited") {
+      printLine(`${label}: rate-limited \u2014 ${result.reason ?? "REST pool below floor"}. No check failed; re-run after the pool resets.`);
+    } else if (result.detail === "runner-infra") {
+      printLine(`${label}: failure (runner infrastructure, NOT a test failure) \u2014 ${result.reason}`);
+    } else if (result.detail === "stale-head") {
+      printLine(`${label}: failure (stale PR head, NOT a test failure) \u2014 ${result.reason}`);
+    } else if (result.detail === "zero-runs") {
+      printLine(`${label}: failure (zero workflow runs delivered, NOT pending checks) \u2014 ${result.reason}`);
+    } else {
+      printLine(`${label}: ${result.status}${result.reason ? ` \u2014 ${result.reason}` : ""}${result.detail ? ` (${result.detail})` : ""}`);
+      for (const line of failedChecksReceiptLines(label, result)) printLine(line);
+    }
+    if (result.status === "failure" || result.status === "conflicting") process.exitCode = 1;
+    if (result.status === "timeout" || result.status === "rate-limited") process.exitCode = PR_CHECKS_TIMEOUT_EXIT_CODE;
+  }
   async function waitLoopHeadWorkflowRunCount(label, prNumber, repo) {
     let snapshot;
     try {
@@ -45267,28 +45309,7 @@ ${list}`);
       // an agent harness kills it on its own (shorter) deadline before the verdict ever prints (#2940).
       progress: ({ state, elapsedMs, remainingMs }) => console.warn(`pr checks-wait: ${state} \u2014 ${Math.round(elapsedMs / 1e3)}s elapsed, ${Math.round(remainingMs / 6e4)}m left`)
     });
-    if (o.json) printLine(JSON.stringify(result));
-    else if (result.status === "conflicting") {
-      printLine(`pr checks-wait: conflicting \u2014 ${result.reason}`);
-    } else if (result.status === "timeout") {
-      const stuckQueuing = /no-checks-reported/i.test(result.detail ?? "");
-      printLine(
-        `pr checks-wait: timeout \u2014 waited ${Math.round((result.waitedMs ?? 0) / 6e4)}m, last state: ${result.detail ?? "pending"}. No check failed; re-run to keep waiting, or pass --timeout <minutes>.` + (stuckQueuing ? " Tip: check-runs never appeared \u2014 if `gh api repos/<owner>/<repo>/actions/runs?head_sha=<sha>` shows total_count=0, see docs/Guides/gh-runner-runbook.md \xA7 Zero workflow runs; otherwise mmi-live may be saturated or Actions may be failing before checkout (docs/Guides/gh-runner-runbook.md)." : "")
-      );
-    } else if (result.status === "rate-limited") {
-      printLine(`pr checks-wait: rate-limited \u2014 ${result.reason ?? "REST pool below floor"}. No check failed; re-run after the pool resets.`);
-    } else if (result.detail === "runner-infra") {
-      printLine(`pr checks-wait: failure (runner infrastructure, NOT a test failure) \u2014 ${result.reason}`);
-    } else if (result.detail === "stale-head") {
-      printLine(`pr checks-wait: failure (stale PR head, NOT a test failure) \u2014 ${result.reason}`);
-    } else if (result.detail === "zero-runs") {
-      printLine(`pr checks-wait: failure (zero workflow runs delivered, NOT pending checks) \u2014 ${result.reason}`);
-    } else {
-      printLine(`pr checks-wait: ${result.status}${result.reason ? ` \u2014 ${result.reason}` : ""}${result.detail ? ` (${result.detail})` : ""}`);
-      for (const line of failedChecksReceiptLines("pr checks-wait", result)) printLine(line);
-    }
-    if (result.status === "failure" || result.status === "conflicting") process.exitCode = 1;
-    if (result.status === "timeout" || result.status === "rate-limited") process.exitCode = PR_CHECKS_TIMEOUT_EXIT_CODE;
+    printChecksWaitResult("pr checks-wait", result, o.json);
   });
   pr.command("review-check <number>").description("read-only trusted review verdict check for an exact PR head").requiredOption("--repo <owner/repo>", "target repository").requiredOption("--head <sha>", "exact expected head SHA").option("--json", "machine-readable output").action(async (number, o) => {
     const result = await checkPrReview(number, o.repo, o.head);
@@ -45950,6 +45971,37 @@ ${list}`);
     }
     process.exitCode = (partialCleanup.length ? 1 : void 0) ?? prMergeLocalCleanupExitCode(localCleanup) ?? postMergeReconExitCode({ boardAdvance, crossRepoFilingIssue }) ?? process.exitCode;
   });
+  return (ci2) => {
+    ci2.command("checks-wait").description(`bounded wait for ALL check runs and commit statuses on one commit SHA \u2014 replaces raw \`gh run watch\` / \`gh pr checks --watch\` loops, which charge a request per tick and exhausted the shared 5,000/hr token (#7843). REST-only polling with ETag-cached reads and a pool floor (#3024); fails early on a confirmed zero-workflow-runs commit (#5400). Default budget ${PR_CHECKS_TIMEOUT_MS / 6e4}m; --timeout raises it. Exit 1 = a check FAILED or GitHub delivered zero runs; exit ${PR_CHECKS_TIMEOUT_EXIT_CODE} = the wait window expired or the API pool ran dry (re-arm)`).requiredOption("--sha <sha>", "full 40-hex commit SHA to wait on").option("--json", "machine-readable output").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--timeout <minutes>", `wait budget in minutes (default ${PR_CHECKS_TIMEOUT_MS / 6e4})`).action(async (o) => {
+      if (!/^[0-9a-f]{40}$/i.test(o.sha)) return fail("ci checks-wait: --sha must be a full 40-hex commit SHA");
+      let timeoutMs;
+      if (o.timeout !== void 0) {
+        const minutes = Number(o.timeout);
+        if (!Number.isFinite(minutes) || minutes <= 0) return fail("ci checks-wait: --timeout must be a positive number of minutes");
+        timeoutMs = Math.round(minutes * 6e4);
+      }
+      const repo = await requireRepo(o.repo);
+      const sha = o.sha.toLowerCase();
+      const result = await waitForPrChecks({
+        resolvePolicy: () => resolveMergeCiPolicyForCheckout(o.repo),
+        pollChecks: () => pollRestCommitChecks(sha, repo),
+        pollRateLimit: () => waitLoopCorePool("ci checks-wait"),
+        checksUrl: `https://github.com/${repo}/commit/${sha}/checks`,
+        checksDiagnosticCommand: `gh api repos/${repo}/commits/${sha}/check-runs`,
+        pollHeadWorkflowRunCount: async () => {
+          const read = await countHeadWorkflowRuns(sha, repo);
+          if (read.state === "ok") return read.count;
+          console.warn(`ci checks-wait: zero-runs probe FAILED (${read.error}) \u2014 not treating as delivery failure this cycle`);
+          return null;
+        },
+        sleep: (ms) => new Promise((resolve7) => setTimeout(resolve7, ms)),
+        log: (message2) => console.warn(message2),
+        timeoutMs: timeoutMs ?? PR_CHECKS_TIMEOUT_MS,
+        progress: ({ state, elapsedMs, remainingMs }) => console.warn(`ci checks-wait: ${state} \u2014 ${Math.round(elapsedMs / 1e3)}s elapsed, ${Math.round(remainingMs / 6e4)}m left`)
+      });
+      printChecksWaitResult("ci checks-wait", result, o.json);
+    });
+  };
 }
 
 // src/command-register-train-operations.ts
@@ -47443,8 +47495,14 @@ function registerSuiteCommands(program3) {
       let result;
       let restored;
       let marked;
+      let retired;
       try {
         const io = suiteTrainIo(root);
+        retired = await retireFailedLeadRcLedger({ ledgerPath: releaseLedgerPath(root), rcHead: () => io.head(SUITE_REPO, "rc").then((h) => h ?? void 0), markAbandoned: io.markAbandoned }, o.ownerGo === true);
+        if (retired && !(0, import_node_fs44.existsSync)(io.recordPath)) {
+          console.log(o.json ? JSON.stringify({ retiredLeadRc: retired }, null, 2) : `suite abandon: retired the lead's failed, never-promoted rc candidate ${retired}; marked abandoned on origin (#7854)`);
+          return;
+        }
         restored = o.ownerGo === true ? await suiteRestoreMainPins(io) : void 0;
         marked = await suiteMarkAbandoned(io, o.ownerGo === true);
         result = suiteAbandon(io.recordPath, o.ownerGo === true);
@@ -47455,6 +47513,7 @@ function registerSuiteCommands(program3) {
         `suite abandon: archived the cut record to ${result.archive}`,
         ...result.orphanTags.length ? ["  member rc tags left in place (immutable; the next cut reuses one still unreleased on its rc head, #7450):", ...result.orphanTags.map((t) => `  - ${t}`)] : ["  no member rc tag was minted"],
         ...restored ? [`  main pins the cut planned for unreleased tags are restored by ${restored.pr} (${restored.status}, #7758)`] : [],
+        ...retired ? [`  retired the lead's failed, never-promoted rc candidate ${retired} (#7854)`] : [],
         ...marked.length ? [`  marked abandoned on origin, so the hotfix guard stops counting them as active (#7801): ${marked.join(", ")}`] : [],
         "  the next suite rcand --owner-go re-snapshots every member"
       ].join("\n"));
@@ -54494,7 +54553,7 @@ oauth.command("verify").description("probe Google authorize with an arbitrary po
   }
   if (mismatches.length) process.exitCode = 1;
 });
-registerCollaborationCommands(program2);
+var registerCiChecksWait = registerCollaborationCommands(program2);
 function ciAuditDeps2() {
   const cfgPromise = loadConfig();
   const root = hubRoot2();
@@ -54546,6 +54605,7 @@ ci.command("audit").description("read-only fleet scan: gate workflow, ruleset co
   else console.log(renderCiAuditText(report));
   if (!report.ok) process.exitCode = 1;
 });
+registerCiChecksWait(ci);
 ci.command("reconcile").description("audit + optionally apply merge settings and product ruleset activation (master-admin)").option("--json", "machine-readable output").option("--repo <owner/repo>", "reconcile one repo instead of the full registry").option("--apply", "PATCH merge settings + activate product ruleset when missing (master role required); activation is skipped while the repo's gate has never passed (#3694)").option("--park-ruleset", "stop the product ruleset enforcing without deleting it \u2014 keeps its required contexts (master role required)").action(async (o) => {
   if (o.apply && o.parkRuleset) {
     return fail("ci reconcile: --apply and --park-ruleset ask for opposite things; pass one");

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.93",
+  "version": "4.5.95",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.93",
+  "version": "4.5.95",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",