@mutmutco/codex-plugin 4.5.101 → 4.5.102

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.101",
+  "version": "4.5.102",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -6327,6 +6327,24 @@ function parseRateLimitHeaders(out) {
   };
   return { remaining: first("remaining"), limit: first("limit"), resetSec: first("reset") };
 }
+function describeRefusal(out) {
+  const header = (name) => new RegExp(`^${name}:\\s*(.+?)\\s*$`, "im").exec(out)?.[1];
+  let message2 = "";
+  const body = out.slice(out.search(/\r?\n\r?\n/) + 1).trim();
+  try {
+    message2 = String(JSON.parse(body).message ?? "");
+  } catch {
+    message2 = body;
+  }
+  const parts = [
+    ["resource", header("x-ratelimit-resource")],
+    ["remaining", header("x-ratelimit-remaining")],
+    ["reset", header("x-ratelimit-reset")],
+    ["retry-after", header("retry-after")]
+  ].filter(([, v]) => v !== void 0).map(([k, v]) => `${k}=${v}`);
+  const text = message2.replace(/\s+/g, " ").slice(0, 160);
+  return [parts.join(" "), text ? `"${text}"` : ""].filter(Boolean).join(" ") || "no rate-limit headers or message";
+}
 var etagCache = /* @__PURE__ */ new Map();
 function appPoolDetail() {
   const guard = appPollGuardSnapshot();
@@ -6360,7 +6378,7 @@ async function defaultGhApi(args) {
       }
       if (source === "app" && appToken && (status === 403 || status === 429)) {
         noteAppPollResponse(parseRateLimitHeaders(errOut), true, Date.now());
-        console.warn(`poll credential: App pool refused the read (HTTP ${status}, ${appPoolDetail()}) \u2014 REST poll reads switch to the ambient user token until the App pool resets (#7843)`);
+        console.warn(`poll credential: App pool refused the read (HTTP ${status}, ${appPoolDetail()}; response: ${describeRefusal(errOut)}) \u2014 REST poll reads switch to the ambient user token until the App pool resets (#7843)`);
         lastPollSource = "user";
         source = "user";
         continue;
@@ -17604,10 +17622,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.101",
-    tag: "v4.5.101",
-    commit: "a3c82f0f7aa3",
-    npm: "@mutmutco/cli@4.5.101"
+    version: "4.5.102",
+    tag: "v4.5.102",
+    commit: "69ad9c05771f",
+    npm: "@mutmutco/cli@4.5.102"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17624,14 +17642,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.101"
+          v3Target: "v4.5.102"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.101 and redeploy the Hub Lambda from tag v4.5.101 (a3c82f0f7aa3); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.101 (@mutmutco/cli@4.5.101, tag commit a3c82f0f7aa3 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.102 and redeploy the Hub Lambda from tag v4.5.102 (69ad9c05771f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.102 (@mutmutco/cli@4.5.102, tag commit 69ad9c05771f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -46588,8 +46606,11 @@ function trainApplyDeps() {
     // Hub-App-authority dispatch of the central tenant-control.yml (#1717) — the Hub fires the
     // workflow_dispatch with its App token. Never throws for an expected rejection: it returns the dispatch
     // outcome so runTenantControl can map a 5xx (transport-failed, retryable) vs a 4xx (rejected) vs ok.
-    dispatchTenantControl: async ({ repo, stage, action, lines: lines2, since, until, task, artifact, confirmDataLoss }) => {
-      const res = await tenantControl({ repo, stage, action, ...lines2 != null ? { lines: lines2 } : {}, ...since ? { since } : {}, ...until ? { until } : {}, ...task ? { task } : {}, ...artifact ? { artifact } : {}, ...confirmDataLoss ? { confirmDataLoss } : {} }, registryClientDeps(await loadConfig()));
+    // #7961: forward every SET field rather than re-listing them, so a new option (e.g. `edge`) cannot be
+    // dropped silently. Unset/false fields are omitted: the route rejects e.g. `edge` on a non-logs action.
+    dispatchTenantControl: async (input) => {
+      const payload = Object.fromEntries(Object.entries(input).filter(([, v]) => v != null && v !== "" && v !== false));
+      const res = await tenantControl(payload, registryClientDeps(await loadConfig()));
       if (res.ok) return { ok: true };
       const body = res.body;
       return { ok: false, category: body?.category, error: body?.error ?? res.error };

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.101",
+  "version": "4.5.102",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.101",
+  "version": "4.5.102",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",