kylon-cli 0.7.10-next.1386 → 0.7.10-next.1390

package/README.md

@@ -1291,6 +1291,30 @@ new production CLI build must be published. Service deployment alone leaves
   a fresh CLI-only PR from the current `main`, merge it, and dispatch stable
   on that commit, keeping `main` still until the CLI is published.
 
+- **Run the stable preflight before every stable dispatch.** A stable run
+  needs about an hour and a human approval before it reaches the gates that
+  most often fail, so check them first, read-only:
+
+  ```bash
+  node scripts/ci/cli-stable-preflight.mjs --mac-host p2compat@autodeploy-bj
+  ```
+
+  It takes the current `main` head (or `--sha <main sha>`) and prints one
+  pass/fail row per gate: the merged main PR behind that commit, the newest
+  production deploy and every changed file since it that is not CLI-only, the
+  merged PR's latest `preview-deploy.yml` run (completed, successful, and
+  merged onto `main`'s exact tree), the package version against npm `@latest`,
+  any stable `cli-publish.yml` run still queued or running, the
+  `p2-external-compat` macOS runner (online and idle; reading runners needs repo
+  admin), and, over SSH with `--mac-host`, the harness `active-run` lock. The
+  harness never steals that lock, so a held or stale one fails the row; recover
+  a stale lock through `external-agent-compat-harness.yml` `recovery_run`,
+  never by deleting it. The preflight dispatches, reruns and deletes nothing,
+  and exits non-zero when any row fails. It cannot see qualification failures,
+  Windows host state, or macOS privacy (TCC) denials for the runner service.
+  On the `publish_cli=true` and `release:cli` paths the production row passes
+  only after that Deploy completes; check the other rows before requesting it.
+
 Do not `npm publish` ad hoc: use the stable workflow and its OIDC provenance.
 Pushing a version tag alone does not publish.
 

package/dist/kylon-bundle.manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.10-next.1386",
-  "fingerprint": "3cc1940cc4a4b94f1ec67bfe3d2162e2db064474ad0ec55cd8b9d7fdecb265bb",
-  "source_commit": "606ef3a61ee1940ed4e464759f3d1b4a8806815b"
+  "version": "0.7.10-next.1390",
+  "fingerprint": "2cc0bbe1dd38eb899797b48ac9f66ce0c416b1b27cac86f6fd61d9a4f711f1bb",
+  "source_commit": "ec4323a86276770e5d84777f1b4efc11fcf9ba89"
 }