@mutmutco/codex-plugin 4.3.3 → 4.3.4

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "mmi",
3
- "version": "4.3.3",
3
+ "version": "4.3.4",
4
4
  "mmiCompat": "4.x",
5
5
  "description": "MMI workflow skills and org gates delivery.",
6
6
  "author": {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mutmutco/codex-plugin",
3
- "version": "4.3.3",
3
+ "version": "4.3.4",
4
4
  "description": "MMI workflow skills and org gates delivery.",
5
5
  "author": {
6
6
  "name": "MMI Future",
@@ -86,6 +86,15 @@ mmi-cli vault secrets rm SCRAPER_API_KEY
86
86
  **Never** pass a value as an argument (`secrets set KEY thevalue` is wrong — there is no value arg). The
87
87
  confirmation prints the **name and tier only**, never the value.
88
88
 
89
+ **Windows: a multiline wrapped command must be file-backed (#6048).** `cmd.exe` truncates at the first
90
+ newline, so an inline `node -e "<multiline script>"` after `--` reaches the child truncated and fails
91
+ before your code runs. Write the script to a **project-local ignored file** (e.g. `tmp/fetch-models.mjs`
92
+ — git-ignored, never tracked) and wrap the file instead; the key is still injected into the child's env:
93
+
94
+ ```bash
95
+ mmi-cli vault secrets use GEMINI_API_KEY -- node tmp/fetch-models.mjs
96
+ ```
97
+
89
98
  ## Rotation checklist
90
99
 
91
100
  Before rotating, enumerate every copy of the key so no tier stays stale: