cli-jaw 2.17.5-preview.20260819090409 → 2.17.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cli-jaw",
-  "version": "2.17.5-preview.20260819090409",
+  "version": "2.17.5",
   "description": "Personal AI assistant powered by Pi, Antigravity, AI-E, Claude, Claude E, Codex, Codex App, Cursor, Grok, Kiro, OpenCode, and Copilot — Web, Terminal, Telegram, and Discord interfaces with 107 built-in skills",
   "type": "module",
   "keywords": [

package/scripts/promote-to-main.sh

@@ -104,7 +104,27 @@ PR_URL="$(gh pr create \
   --title "chore: promote v$STABLE_VERSION" \
   --body "Promotes certified preview $PREVIEW_VERSION at $PREVIEW_SHA. Tests: $TESTS_URL")"
 
-gh pr checks "$PR_URL" --required --watch --fail-fast
+# GitHub materializes required checks on a fresh PR asynchronously; when
+# `--watch` lands in that window it exits immediately with "no checks
+# reported" / "no required checks reported" and the whole promotion dies
+# (observed: PRs #386-#388, killed while checks were queueing). The required
+# context here is ci-aggregate, which is REPORTED ONLY AFTER node-tests
+# finishes (~7-8 min), so the deadline must comfortably exceed a full test.yml
+# run, not just the registration lag. Retry the watch while that startup
+# condition holds; real check failures still fail fast.
+CHECKS_DEADLINE=$((SECONDS + 1800))
+while true; do
+  CHECKS_STATUS=0
+  CHECKS_OUTPUT="$(gh pr checks "$PR_URL" --required --watch --fail-fast 2>&1)" || CHECKS_STATUS=$?
+  printf '%s\n' "$CHECKS_OUTPUT"
+  [ "$CHECKS_STATUS" -eq 0 ] && break
+  if printf '%s' "$CHECKS_OUTPUT" | grep -qiE 'no (required )?checks reported' \
+    && [ "$SECONDS" -lt "$CHECKS_DEADLINE" ]; then
+    sleep 15
+    continue
+  fi
+  exit "$CHECKS_STATUS"
+done
 gh pr merge "$PR_URL" --squash --match-head-commit "$PROMOTION_COMMIT"
 # From here the branch belongs to GitHub's delete_branch_on_merge. Racing that
 # auto-delete only produces confusing errors, and a later verification failure

package/scripts/require-release-evidence.mjs

@@ -412,12 +412,18 @@ if (!macosEvidence || !wslEvidence) {
       'run', 'list',
       '--workflow', 'postinstall-platform.yml',
       '--commit', headSha,
-      '--event', 'push',
       '--status', 'success',
       '--limit', '1',
       '--json', 'url',
       '--jq', '.[0].url // ""',
     ], { cwd: repoRoot, encoding: 'utf8', shell: false });
+    // No --event filter, mirroring bc7c19ba which already made publish.yml
+    // accept any-event Postinstall Platform Checks. A merge commit whose diff
+    // is empty (e.g. main merged back into preview after a promotion) never
+    // produces a push run for its own SHA, so requiring the push event made
+    // this gate unpassable for exactly the SHA a promotion certifies. Any
+    // successful run of the pinned workflow on this commit is the same
+    // evidence regardless of the event that started it.
     const ciUrl = (ciCheck.stdout || '').trim();
     if (ciUrl) {
       console.log(`[release-evidence-required] PASS CI postinstall-platform evidence: ${ciUrl}`);