@mutmutco/claude-plugin 4.6.44 → 4.6.46

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mmi",
   "displayName": "MMI",
-  "version": "4.6.44",
+  "version": "4.6.46",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -28556,10 +28556,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.6.44",
-    tag: "v4.6.44",
-    commit: "2ce6b7e5afc3",
-    npm: "@mutmutco/cli@4.6.44"
+    version: "4.6.46",
+    tag: "v4.6.46",
+    commit: "4623316e6c45",
+    npm: "@mutmutco/cli@4.6.46"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -28576,14 +28576,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.6.44"
+          v3Target: "v4.6.46"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.6.44 and redeploy the Hub Lambda from tag v4.6.44 (2ce6b7e5afc3); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.6.44 (@mutmutco/cli@4.6.44, tag commit 2ce6b7e5afc3 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.6.46 and redeploy the Hub Lambda from tag v4.6.46 (4623316e6c45); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.6.46 (@mutmutco/cli@4.6.46, tag commit 4623316e6c45 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -48479,6 +48479,7 @@ var DEPLOY_BUCKET_RE = /^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$/;
 var DEPLOY_DISTRIBUTION_ID_RE = /^[A-Z0-9]{5,32}$/;
 var COMPOSE_PROFILE_RE = /^[a-z0-9][a-z0-9_-]{0,62}$/;
 var MAX_COMPOSE_PROFILES = 8;
+var READINESS_PATH_RE = /^\/[A-Za-z0-9/._~-]*$/;
 function buildSetDeployPatch(_slug, input) {
   const clean4 = (v) => typeof v === "string" && v.trim() !== "" ? v.trim() : void 0;
   const stage = clean4(input.stage);
@@ -48547,6 +48548,29 @@ function buildSetDeployPatch(_slug, input) {
     }
     composeProfiles = [...seen];
   }
+  const healthUrl = clean4(input.healthUrl);
+  if (input.clearHealthUrl && healthUrl !== void 0) {
+    throw new Error("org project set-deploy: --clear-health-url cannot be combined with --health-url (they contradict)");
+  }
+  if (healthUrl !== void 0) {
+    let u;
+    try {
+      u = new URL(healthUrl);
+    } catch {
+      u = void 0;
+    }
+    const loopback = u?.hostname === "127.0.0.1" || u?.hostname === "localhost";
+    if (!DEPLOY_SHELL_SAFE_RE.test(healthUrl) || !u || u.protocol !== "https:" && !(u.protocol === "http:" && loopback)) {
+      throw new Error(`org project set-deploy: --health-url must be a shell-safe https URL (or loopback http), got ${JSON.stringify(input.healthUrl)}`);
+    }
+  }
+  const readinessPath = clean4(input.readinessPath);
+  if (input.clearReadinessPath && readinessPath !== void 0) {
+    throw new Error("org project set-deploy: --clear-readiness-path cannot be combined with --readiness-path (they contradict)");
+  }
+  if (readinessPath !== void 0 && !READINESS_PATH_RE.test(readinessPath)) {
+    throw new Error(`org project set-deploy: --readiness-path must be an absolute path of [A-Za-z0-9/._~-], got ${JSON.stringify(input.readinessPath)}`);
+  }
   return {
     stage,
     ...substrate !== void 0 ? { substrate } : {},
@@ -48567,7 +48591,10 @@ function buildSetDeployPatch(_slug, input) {
     ...input.noEnvFile !== void 0 ? { noEnvFile: input.noEnvFile } : {},
     // #7353: an explicit `[]` is what the route reads as "clear them"; omitting the key is what it reads as
     // "keep them" — same patch contract as aliases (#2986/#2984).
-    ...composeProfiles !== void 0 ? { composeProfiles } : {}
+    ...composeProfiles !== void 0 ? { composeProfiles } : {},
+    // #10096: an explicit null is what the route reads as "remove it"; omitting the key keeps it.
+    ...input.clearHealthUrl ? { healthUrl: null } : healthUrl !== void 0 ? { healthUrl } : {},
+    ...input.clearReadinessPath ? { readinessPath: null } : readinessPath !== void 0 ? { readinessPath } : {}
   };
 }
 var DEPLOY_STAGE_BRANCH = { dev: "development", rc: "rc", main: "main" };
@@ -75246,7 +75273,7 @@ fullTrack.command("readiness <owner/repo>").description("aggregate branch topolo
   console.log(JSON.stringify(report, null, 2));
   if (!report.rcand.canApply) process.exitCode = 1;
 });
-project.command("set-deploy [owner/repo]").description("patch a tenant DEPLOY row \u2014 project-admin may set only --no-env-file/--compose-profiles on their own existing dev/rc row; master may seed/change all coords and main; defaults to the current repo").addOption(new Option("--stage <stage>", "dev | rc | main").makeOptionMandatory().choices(["dev", "rc", "main"])).option("--ssh-host <host>", "the box address the deploy ssh-es into; omit to keep the stored value (required only for a NEW hetzner-ssh row \u2014 `mmi-cli devops runtime box list` finds it)").option("--ssh-user <user>", "ssh user; omit to leave the row unchanged (default root on a new row)").option("--port <port>", "loopback port the container binds / Caddy upstream (1..65535); omit to leave the row unchanged").addOption(new Option("--substrate <substrate>", "hetzner-ssh | s3-cloudfront; omit to leave the row unchanged").choices([...DEPLOY_SUBSTRATES])).option("--deploy-role-arn <arn>", "s3-cloudfront: the scoped OIDC deployer role tenant-deploy.yml assumes for this stage").option("--app-bucket <bucket>", "s3-cloudfront: the S3 bucket the built dist/ is synced into").option("--distribution-id <id>", "s3-cloudfront: the CloudFront distribution invalidated after the sync").option("--distribution-domain <domain>", "s3-cloudfront: the host the post-deploy security-header proof is measured against").option("--deploy-path <path>", "on-box per-stage release root; omit to leave the row unchanged (default /opt/mmi/<slug>/<stage> on a new row)").option("--service <name>", "systemd/compose service name; omit to leave the row unchanged (default the slug on a new row)").option("--domain <domain>", "canonical serving host; omit to leave the row unchanged").option("--alias <domain...>", "extra serving hostname the box Caddy answers (repeatable); omit to leave the stored aliases unchanged").option("--redirect-from <host>", "permanent redirect host or host=target (primary or alias); repeatable", (host, hosts) => [...hosts, host], []).option("--clear-aliases", "remove EVERY serving alias from the row (#2986) \u2014 omitting --alias preserves them, so clearing needs saying out loud").option("--no-env-file <bool>", "set the DEPLOY# fileless flag (true|false) \u2014 own-repo project-admin dev/rc; master main; true = env passthrough with no .env symlink").option("--compose-profiles <profiles>", "comma-separated compose profiles to enable for this stage (e.g. huddles,slack-bridge); omit to leave unchanged").option("--clear-compose-profiles", "remove EVERY compose profile from the row \u2014 omitting --compose-profiles preserves them, so clearing needs saying out loud").option("--force", "explicit recovery override: skip fileless-compose verification only after independent proof").option("--json", "machine-readable output").action(async (repoOrSlug, o) => {
+project.command("set-deploy [owner/repo]").description("patch a tenant DEPLOY row \u2014 project-admin may set only --no-env-file/--compose-profiles on their own existing dev/rc row; master may seed/change all coords and main; defaults to the current repo").addOption(new Option("--stage <stage>", "dev | rc | main").makeOptionMandatory().choices(["dev", "rc", "main"])).option("--ssh-host <host>", "the box address the deploy ssh-es into; omit to keep the stored value (required only for a NEW hetzner-ssh row \u2014 `mmi-cli devops runtime box list` finds it)").option("--ssh-user <user>", "ssh user; omit to leave the row unchanged (default root on a new row)").option("--port <port>", "loopback port the container binds / Caddy upstream (1..65535); omit to leave the row unchanged").addOption(new Option("--substrate <substrate>", "hetzner-ssh | s3-cloudfront; omit to leave the row unchanged").choices([...DEPLOY_SUBSTRATES])).option("--deploy-role-arn <arn>", "s3-cloudfront: the scoped OIDC deployer role tenant-deploy.yml assumes for this stage").option("--app-bucket <bucket>", "s3-cloudfront: the S3 bucket the built dist/ is synced into").option("--distribution-id <id>", "s3-cloudfront: the CloudFront distribution invalidated after the sync").option("--distribution-domain <domain>", "s3-cloudfront: the host the post-deploy security-header proof is measured against").option("--deploy-path <path>", "on-box per-stage release root; omit to leave the row unchanged (default /opt/mmi/<slug>/<stage> on a new row)").option("--service <name>", "systemd/compose service name; omit to leave the row unchanged (default the slug on a new row)").option("--domain <domain>", "canonical serving host; omit to leave the row unchanged").option("--alias <domain...>", "extra serving hostname the box Caddy answers (repeatable); omit to leave the stored aliases unchanged").option("--redirect-from <host>", "permanent redirect host or host=target (primary or alias); repeatable", (host, hosts) => [...hosts, host], []).option("--clear-aliases", "remove EVERY serving alias from the row (#2986) \u2014 omitting --alias preserves them, so clearing needs saying out loud").option("--no-env-file <bool>", "set the DEPLOY# fileless flag (true|false) \u2014 own-repo project-admin dev/rc; master main; true = env passthrough with no .env symlink").option("--compose-profiles <profiles>", "comma-separated compose profiles to enable for this stage (e.g. huddles,slack-bridge); omit to leave unchanged").option("--clear-compose-profiles", "remove EVERY compose profile from the row \u2014 omitting --compose-profiles preserves them, so clearing needs saying out loud").option("--health-url <url>", "master-only: stage health URL (https, or loopback http) the box health gate probes; omit to leave unchanged").option("--clear-health-url", "master-only: remove the stored health URL from the row").option("--readiness-path <path>", "master-only: readiness path Caddy actively probes (health_uri, e.g. /healthz); omit to leave unchanged").option("--clear-readiness-path", "master-only: remove the stored readiness path from the row").option("--force", "explicit recovery override: skip fileless-compose verification only after independent proof").option("--json", "machine-readable output").action(async (repoOrSlug, o) => {
   const cfg = await loadConfig();
   let target;
   try {
@@ -75305,7 +75332,11 @@ ${filelessTransitionGuide(target, o.stage)}`
       clearAliases: o.clearAliases,
       noEnvFile,
       composeProfiles,
-      clearComposeProfiles: o.clearComposeProfiles
+      clearComposeProfiles: o.clearComposeProfiles,
+      healthUrl: o.healthUrl,
+      clearHealthUrl: o.clearHealthUrl,
+      readinessPath: o.readinessPath,
+      clearReadinessPath: o.clearReadinessPath
     });
     if (target.includes("/")) body.repo = target;
   } catch (e) {

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.6.44",
+  "version": "4.6.46",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/claude-plugin",
-  "version": "4.6.44",
+  "version": "4.6.46",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/org-guide/references/design.md

@@ -309,7 +309,10 @@ requests like this should follow this structure, not prose guide."
      Option C, each its own full-resolution `1440x900` live HTML board in one MM Artifact A/B canvas
      (Part 3 rules: content-only `Ctrl + Mousewheel` zoom, 1:1 or side-by-side live comparison). Serve
      the verified canvas on the live loopback HTTP review server without opening a browser from the
-     seat, so the owner's `Send answers` posts straight back to `POST /answers`. Once review passes,
+     seat, so the owner's `Send answers` posts straight back to `POST /answers`. Set `artifact.json`
+     `review: { issue, requester }` first: without it the page still opens, but shows the owner a red
+     routing alert and answers reach only the serving session. Confirm no routing warning renders
+     before sending the URL. Once review passes,
      send the orchestrator only the review URL and issue number, and keep the server running through
      Stage 2; the orchestrator opens it on the owner's screen (#8987, relay wording). Never open a
      `--standalone` `file://` export (`Download answers.json`) for an