@mutmutco/codex-plugin 4.5.100 → 4.5.102

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.100",
+  "version": "4.5.102",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -6043,7 +6043,7 @@ function isRetryableGitHubWaitReadError(e) {
   const codes = /* @__PURE__ */ new Set();
   if (typeof status === "number" && status > 0) codes.add(status);
   for (const m of text.matchAll(/\bHTTP\/?\d*(?:\.\d)?\s+(\d{3})\b/g)) codes.add(Number(m[1]));
-  const rateLimited = e?.rateLimited === true || /API rate limit already exceeded|rate limit already exceeded|RATE_LIMITED|secondary rate|abuse detection/i.test(text);
+  const rateLimited = e?.rateLimited === true || /rate limit (?:already )?exceeded|RATE_LIMITED|secondary rate|abuse detection/i.test(text);
   if ([401, 404, 409, 422].some((c) => codes.has(c))) return false;
   if (codes.has(403) && !rateLimited) return false;
   if (codes.has(429) || rateLimited) return true;
@@ -6327,6 +6327,24 @@ function parseRateLimitHeaders(out) {
   };
   return { remaining: first("remaining"), limit: first("limit"), resetSec: first("reset") };
 }
+function describeRefusal(out) {
+  const header = (name) => new RegExp(`^${name}:\\s*(.+?)\\s*$`, "im").exec(out)?.[1];
+  let message2 = "";
+  const body = out.slice(out.search(/\r?\n\r?\n/) + 1).trim();
+  try {
+    message2 = String(JSON.parse(body).message ?? "");
+  } catch {
+    message2 = body;
+  }
+  const parts = [
+    ["resource", header("x-ratelimit-resource")],
+    ["remaining", header("x-ratelimit-remaining")],
+    ["reset", header("x-ratelimit-reset")],
+    ["retry-after", header("retry-after")]
+  ].filter(([, v]) => v !== void 0).map(([k, v]) => `${k}=${v}`);
+  const text = message2.replace(/\s+/g, " ").slice(0, 160);
+  return [parts.join(" "), text ? `"${text}"` : ""].filter(Boolean).join(" ") || "no rate-limit headers or message";
+}
 var etagCache = /* @__PURE__ */ new Map();
 function appPoolDetail() {
   const guard = appPollGuardSnapshot();
@@ -6360,7 +6378,7 @@ async function defaultGhApi(args) {
       }
       if (source === "app" && appToken && (status === 403 || status === 429)) {
         noteAppPollResponse(parseRateLimitHeaders(errOut), true, Date.now());
-        console.warn(`poll credential: App pool refused the read (HTTP ${status}, ${appPoolDetail()}) \u2014 REST poll reads switch to the ambient user token until the App pool resets (#7843)`);
+        console.warn(`poll credential: App pool refused the read (HTTP ${status}, ${appPoolDetail()}; response: ${describeRefusal(errOut)}) \u2014 REST poll reads switch to the ambient user token until the App pool resets (#7843)`);
         lastPollSource = "user";
         source = "user";
         continue;
@@ -17604,10 +17622,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.100",
-    tag: "v4.5.100",
-    commit: "ba367dd0d814",
-    npm: "@mutmutco/cli@4.5.100"
+    version: "4.5.102",
+    tag: "v4.5.102",
+    commit: "69ad9c05771f",
+    npm: "@mutmutco/cli@4.5.102"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17624,14 +17642,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.100"
+          v3Target: "v4.5.102"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.100 and redeploy the Hub Lambda from tag v4.5.100 (ba367dd0d814); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.100 (@mutmutco/cli@4.5.100, tag commit ba367dd0d814 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.102 and redeploy the Hub Lambda from tag v4.5.102 (69ad9c05771f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.102 (@mutmutco/cli@4.5.102, tag commit 69ad9c05771f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -21823,7 +21841,7 @@ async function runTenantControl(deps, options) {
   const watch = options.watch ?? tenantControlWatches(action);
   const base = { command: "tenant-control", repo, stage, action };
   const since = (deps.now ?? Date.now)();
-  const d = await deps.dispatchTenantControl({ repo, stage, action, lines: options.lines, since: options.logSince, until: options.logUntil, task: options.task, artifact: options.artifact, confirmDataLoss: options.confirmDataLoss });
+  const d = await deps.dispatchTenantControl({ repo, stage, action, lines: options.lines, edge: options.edge, since: options.logSince, until: options.logUntil, task: options.task, artifact: options.artifact, confirmDataLoss: options.confirmDataLoss });
   if (!d.ok) {
     const transport = d.category === "transport-failed";
     return {
@@ -25676,29 +25694,33 @@ Cut by ${formatSessionIdentity(cutBy)}
 `;
 }
 var PLAIN_WORDS_HEADING = "## In plain words";
+var PLAIN_WORDS_HEADING_TR = "## Sade s\xF6zlerle";
 var PLAIN_WORDS_MARKER = "<!-- mmi:big -->";
-function buildPlainWordsSection(lines2, big) {
+function buildPlainWordsSection(lines2, big, heading = PLAIN_WORDS_HEADING) {
   const [title, ...notes] = lines2;
-  const body = [PLAIN_WORDS_HEADING, title ?? "", ...notes.slice(0, 5).map((n) => `- ${n}`)];
+  const body = [heading, title ?? "", ...notes.slice(0, 5).map((n) => `- ${n}`)];
   if (big) body.push(PLAIN_WORDS_MARKER);
   return body.join("\n");
 }
 function noChangePlainWordsLine(suiteTag) {
-  return `No changes to this module in this release; ships with the MM-Work suite ${suiteTag}.`;
+  return suiteTag ? `No changes to this module in this release; ships with the MM-Work suite ${suiteTag}.` : "No changes to this module in this release.";
 }
 function upsertPlainWordsSection(body, section) {
-  const lines2 = body.split(/\r?\n/);
-  const at = lines2.findIndex((l) => l.trim() === PLAIN_WORDS_HEADING);
   let rest = body;
-  if (at >= 0) {
-    let end = lines2.length;
-    for (let i = at + 1; i < lines2.length; i++) {
-      if (lines2[i].trim().startsWith("## ")) {
-        end = i;
-        break;
+  for (const heading of [PLAIN_WORDS_HEADING, PLAIN_WORDS_HEADING_TR]) {
+    const lines2 = rest.split(/\r?\n/);
+    let stripping = false;
+    let found = false;
+    const kept = lines2.filter((line) => {
+      if (line.trim() === heading) {
+        stripping = true;
+        found = true;
+        return false;
       }
-    }
-    rest = [...lines2.slice(0, at), ...lines2.slice(end)].join("\n");
+      if (line.trim().startsWith("## ")) stripping = false;
+      return !stripping;
+    });
+    if (found) rest = kept.join("\n");
   }
   const trimmedRest = rest.trim();
   return trimmedRest ? `${section}
@@ -25711,8 +25733,11 @@ function plainWordsSummaryLines(content) {
 async function writePlainWordsIfSuiteMember(deps, args) {
   if (args.meta?.suite !== "mm-work") return;
   try {
-    const lines2 = args.summaryLines && args.summaryLines.length > 0 ? args.summaryLines : [noChangePlainWordsLine(args.suiteTag ?? args.tag)];
-    const section = buildPlainWordsSection(lines2, args.big === true);
+    const lines2 = args.summaryLines && args.summaryLines.length > 0 ? args.summaryLines : [noChangePlainWordsLine(args.suiteTag)];
+    const section = [
+      buildPlainWordsSection(lines2, args.big === true),
+      ...args.summaryLinesTr?.length ? [buildPlainWordsSection(args.summaryLinesTr, false, PLAIN_WORDS_HEADING_TR)] : []
+    ].join("\n\n");
     const body = clean2(await deps.run("gh", ["release", "view", args.tag, "--repo", args.repo, "--json", "body", "-q", ".body"]));
     await deps.run("gh", ["release", "edit", args.tag, "--repo", args.repo, "--notes", upsertPlainWordsSection(body, section)]);
   } catch {
@@ -25721,7 +25746,8 @@ async function writePlainWordsIfSuiteMember(deps, args) {
 async function writePlainWordsSection(deps, options, repo, meta, tag) {
   try {
     const summaryLines = options.announceSummaryFile ? plainWordsSummaryLines(await (deps.readFile ?? ((p) => (0, import_promises3.readFile)(p, "utf8")))(options.announceSummaryFile)) : void 0;
-    await writePlainWordsIfSuiteMember(deps, { repo, tag, meta, summaryLines, big: options.big, suiteTag: options.suiteTag });
+    const summaryLinesTr = options.announceSummaryFileTr ? plainWordsSummaryLines(await (deps.readFile ?? ((p) => (0, import_promises3.readFile)(p, "utf8")))(options.announceSummaryFileTr)) : void 0;
+    await writePlainWordsIfSuiteMember(deps, { repo, tag, meta, summaryLines, summaryLinesTr, big: options.big, suiteTag: options.suiteTag });
   } catch {
   }
 }
@@ -46580,8 +46606,11 @@ function trainApplyDeps() {
     // Hub-App-authority dispatch of the central tenant-control.yml (#1717) — the Hub fires the
     // workflow_dispatch with its App token. Never throws for an expected rejection: it returns the dispatch
     // outcome so runTenantControl can map a 5xx (transport-failed, retryable) vs a 4xx (rejected) vs ok.
-    dispatchTenantControl: async ({ repo, stage, action, lines: lines2, since, until, task, artifact, confirmDataLoss }) => {
-      const res = await tenantControl({ repo, stage, action, ...lines2 != null ? { lines: lines2 } : {}, ...since ? { since } : {}, ...until ? { until } : {}, ...task ? { task } : {}, ...artifact ? { artifact } : {}, ...confirmDataLoss ? { confirmDataLoss } : {} }, registryClientDeps(await loadConfig()));
+    // #7961: forward every SET field rather than re-listing them, so a new option (e.g. `edge`) cannot be
+    // dropped silently. Unset/false fields are omitted: the route rejects e.g. `edge` on a non-logs action.
+    dispatchTenantControl: async (input) => {
+      const payload = Object.fromEntries(Object.entries(input).filter(([, v]) => v != null && v !== "" && v !== false));
+      const res = await tenantControl(payload, registryClientDeps(await loadConfig()));
       if (res.ok) return { ok: true };
       const body = res.body;
       return { ok: false, category: body?.category, error: body?.error ?? res.error };
@@ -47518,7 +47547,7 @@ function memberAnnounceSummaryFile(repo, summaryFile, memberSummaryFiles) {
   return repo === SUITE_REPO ? summaryFile : memberSummaryFiles[repo];
 }
 var suiteStateDir = (root) => (0, import_node_path43.join)(resolvePrimaryGitDir(root), "mmi-runtime", "suite");
-function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}) {
+function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}, summaryFileTr, memberSummaryFilesTr = {}) {
   const recordPath = (0, import_node_path43.join)(suiteStateDir(root), "cut.json");
   const base = (0, import_node_path43.join)(suiteStateDir(root), "checkouts");
   const checkout = async (repo) => {
@@ -47629,7 +47658,12 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}) {
   });
   const release = async (repo, expected, rcSha, opts) => inTrain(repo, async (deps) => {
     await prepareRcCheckout((args) => deps.run("git", args), repo);
-    const plainWords = { announceSummaryFile: memberAnnounceSummaryFile(repo, summaryFile, memberSummaryFiles), big: opts?.big, suiteTag: opts?.suiteTag };
+    const plainWords = {
+      announceSummaryFile: memberAnnounceSummaryFile(repo, summaryFile, memberSummaryFiles),
+      announceSummaryFileTr: memberAnnounceSummaryFile(repo, summaryFileTr, memberSummaryFilesTr),
+      big: opts?.big,
+      suiteTag: opts?.suiteTag
+    };
     const current = await tagSha(repo, expected);
     if (current) {
       await deps.run("git", ["fetch", "origin", "--tags"]);
@@ -47870,6 +47904,12 @@ function parseMemberSummaryFiles(entries) {
   }
   return memberSummaryFiles;
 }
+function validateSuiteReleaseSummary(path2) {
+  if (!path2) throw new Error("suite release requires --announce-summary-file before promoting any member");
+  const lines2 = (0, import_node_fs44.readFileSync)(path2, "utf8").split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
+  if (lines2[0]?.startsWith("No changes to this module")) throw new Error("suite release requires a real MM-Work title, not the no-change placeholder");
+  if (lines2.length < 3 || lines2.length > 6) throw new Error("suite release announcement needs 3\u20136 curated lines before promoting any member");
+}
 function suiteRcDataProdDeps() {
   return {
     fetch: async (url, init) => {
@@ -47964,18 +48004,17 @@ function registerSuiteCommands(program3) {
       return fail(`suite abandon: ${e.message}`);
     }
   });
-  suite.command("release").description("verify the cut and unchanged live backends, ship members then MM-Work, announce once").option("--owner-go", "explicit owner approval to release the tested candidate").option("--announce-summary-file <path>", "curated suite announcement, posted once after the train; also this cut's plain-words summary for MM-Work itself").option("--member-summary-file <owner/repo=path>", "repeatable: a member's OWN plain-words summary (#7510) \u2014 never the suite lead's summary reused; a member with no entry still ships, with the coordinator-ruled no-change line", (val, prev = []) => [...prev, val], []).option("--big", "marks MM-Work's own release big for the plain-words section (#7510); a member is never marked big through this flag \u2014 it is big only via the read route's automatic minor/major detection").option("--json", "structured receipt").action(async (o) => {
+  suite.command("release").description("verify the cut and unchanged live backends, ship members then MM-Work, announce once").option("--owner-go", "explicit owner approval to release the tested candidate").option("--announce-summary-file <path>", "curated suite announcement, posted once after the train; also this cut's plain-words summary for MM-Work itself").option("--member-summary-file <owner/repo=path>", "repeatable: a member's OWN plain-words summary (#7510) \u2014 never the suite lead's summary reused; a member with no entry still ships, with the coordinator-ruled no-change line", (val, prev = []) => [...prev, val], []).option("--announce-summary-file-tr <path>", "Turkish plain-words summary for MM-Work itself").option("--member-summary-file-tr <owner/repo=path>", "repeatable: a member's own Turkish plain-words summary", (val, prev = []) => [...prev, val], []).option("--big", "marks MM-Work's own release big for the plain-words section (#7510); a member is never marked big through this flag \u2014 it is big only via the read route's automatic minor/major detection").option("--json", "structured receipt").action(async (o) => {
     try {
       if (!o.ownerGo) throw new Error("suite release requires --owner-go; nothing was written");
-      if (!o.announceSummaryFile) throw new Error("suite release requires --announce-summary-file before promoting any member");
-      const lines2 = (0, import_node_fs44.readFileSync)(o.announceSummaryFile, "utf8").split(/\r?\n/).map((s) => s.trim()).filter(Boolean);
-      if (lines2.length < 3 || lines2.length > 6) throw new Error("suite release announcement needs 3\u20136 curated lines before promoting any member");
+      validateSuiteReleaseSummary(o.announceSummaryFile);
       const memberSummaryFiles = parseMemberSummaryFiles(o.memberSummaryFile ?? []);
+      const memberSummaryFilesTr = parseMemberSummaryFiles(o.memberSummaryFileTr ?? []);
       const root = await leadRoot();
       const unlock = await acquireTrainWriterLock(root, "suite release");
       let result;
       try {
-        result = await suiteRelease(suiteTrainIo(root, o.announceSummaryFile, memberSummaryFiles), true, o.big === true);
+        result = await suiteRelease(suiteTrainIo(root, o.announceSummaryFile, memberSummaryFiles, o.announceSummaryFileTr, memberSummaryFilesTr), true, o.big === true);
       } finally {
         await unlock();
       }
@@ -54316,7 +54355,7 @@ async function reportWrite(label, res) {
   return failGraceful(`${label}: HTTP ${res.status}${detail ? ` \u2014 ${detail}` : ""}`);
 }
 var tenant = program2.command("tenant").description("tenant runtime control through Hub authority");
-tenant.command("control <owner/repo> <stage> <action>").description("bounded tenant control plus value-free vault/broker verification; dev/main retire needs master and exact data-loss confirmation").option("--watch", "block on the dispatched run and report its conclusion (status/retire/verify-secrets/verify-broker/logs watch by default)").option("--lines <n>", "logs only: trailing lines of the tenant service to return (1-2000, default 200)").option("--since <utc>", "logs only: read the journal from this UTC time, e.g. 2026-10-07T13:10Z (includes replaced containers)").option("--until <utc>", "logs only: read the journal up to this UTC time").option("--task <name>", "run-task only: registry-declared task name (never a command)").option("--artifact <id>", "run-task only: opaque id returned by tenant artifact put").option("--confirm-data-loss <owner/repo/stage>", "dev/main retire only: exact target to decommission; without it show the dry-run plan").option("--json", "machine-readable output").action(async (repo, stage, action, o) => {
+tenant.command("control <owner/repo> <stage> <action>").description("bounded tenant control plus value-free vault/broker verification; dev/main retire needs master and exact data-loss confirmation").option("--watch", "block on the dispatched run and report its conclusion (status/retire/verify-secrets/verify-broker/logs watch by default)").option("--lines <n>", "logs only: trailing lines of the tenant service to return (1-2000, default 200)").option("--since <utc>", "logs only: read the journal from this UTC time, e.g. 2026-10-07T13:10Z (includes replaced containers)").option("--until <utc>", "logs only: read the journal up to this UTC time").option("--edge", "logs only: Caddy journal for this stage\u2019s hosts (default window: last 15 minutes)").option("--task <name>", "run-task only: registry-declared task name (never a command)").option("--artifact <id>", "run-task only: opaque id returned by tenant artifact put").option("--confirm-data-loss <owner/repo/stage>", "dev/main retire only: exact target to decommission; without it show the dry-run plan").option("--json", "machine-readable output").action(async (repo, stage, action, o) => {
   try {
     if (o.confirmDataLoss !== void 0 && (action !== "retire" || stage === "rc")) return fail("runtime tenant control: --confirm-data-loss is dev/main retire-only");
     if (action === "retire" && (stage === "dev" || stage === "main")) {
@@ -54329,6 +54368,7 @@ Dry run: pass --confirm-data-loss ${repo}/${stage} to decommission.`);
         return;
       }
     }
+    if (o.edge && action !== "logs") return fail("runtime tenant control: --edge is valid only for the logs action");
     let lines2;
     if (o.lines !== void 0) {
       if (action !== "logs") return fail("runtime tenant control: --lines is valid only for the logs action");
@@ -54345,7 +54385,7 @@ Dry run: pass --confirm-data-loss ${repo}/${stage} to decommission.`);
     } else if (o.task || o.artifact) {
       return fail("runtime tenant control: --task/--artifact are valid only for run-task");
     }
-    const result = await runTenantControl(trainApplyDeps(), { repo, stage, action, watch: o.watch, lines: lines2, logSince: o.since, logUntil: o.until, task: o.task, artifact: o.artifact, confirmDataLoss: o.confirmDataLoss });
+    const result = await runTenantControl(trainApplyDeps(), { repo, stage, action, watch: o.watch, lines: lines2, edge: o.edge, logSince: o.since, logUntil: o.until, task: o.task, artifact: o.artifact, confirmDataLoss: o.confirmDataLoss });
     if (!o.json && action === "verify-secrets" && result.secrets) {
       const body = { ok: result.conclusion === "success", secrets: result.secrets, ssmStatus: result.conclusion === "success" ? "Success" : "Failed", raw: result.secretsRaw };
       const { lines: lines3, failure } = renderVerifySecrets(body);

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.100",
+  "version": "4.5.102",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.100",
+  "version": "4.5.102",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/org-guide/references/work-and-releases.md

@@ -109,6 +109,7 @@ commit, so build and verify the lines from one pass over that range —
 subject, body and changed files — never from subjects, PR titles or memory; a line whose claim is not
 in that output does not go in the file. A Hub summary never mentions a Jerv-side project; the train
 refuses such a line.
+MM-Work suite release also requires a real `--announce-summary-file` title (never `No changes to this module`); optional `--announce-summary-file-tr` and repeatable `--member-summary-file-tr owner/repo=path` add Turkish plain words alongside English member files supplied with `--member-summary-file`.
 
 Announcement delivery uses the developer's GitHub-authenticated Hub session. The Hub checks project
 authority, resolves the registered channel, and reads the MMI Future Slack key inside its vault boundary.

package/skills/release/SKILL.md

@@ -15,6 +15,9 @@ Full-track repos ship exactly what is on `rc` (never `development`): merge `rc
 
 In the suite lead (MM-Work) a plain rcand, release or hotfix refuses: run `mmi-cli devops suite rcand --owner-go` or `mmi-cli devops suite release --owner-go` instead (a lead-only cut needs `--suite-solo --owner-go`). A suite member cannot run standalone rcand, release or hotfix: cut from the suite lead; only a backward-compatible solo backend release/hotfix with explicit owner approval may pass `--suite-solo --owner-go`, and its MM-Work development pin PR must land before the suite is in sync.
 
+Suite release requires `--announce-summary-file <path>` with 3–6 curated lines and refuses before promotion when it is missing or its title starts with `No changes to this module`.
+Use `--member-summary-file <owner/repo=path>` for English member notes, `--announce-summary-file-tr <path>` for MM-Work's Turkish notes and repeatable `--member-summary-file-tr <owner/repo=path>` for Turkish member notes; members without English files keep the no-change line.
+
 Read META and name the lane before describing or executing anything:
 
 ```bash