@mutmutco/codex-plugin 4.5.132 → 4.5.133

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.132",
+  "version": "4.5.133",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -18274,10 +18274,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.132",
-    tag: "v4.5.132",
-    commit: "80a4c6f78d39",
-    npm: "@mutmutco/cli@4.5.132"
+    version: "4.5.133",
+    tag: "v4.5.133",
+    commit: "1b86fb08bbf0",
+    npm: "@mutmutco/cli@4.5.133"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18294,14 +18294,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.132"
+          v3Target: "v4.5.133"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.132 and redeploy the Hub Lambda from tag v4.5.132 (80a4c6f78d39); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.132 (@mutmutco/cli@4.5.132, tag commit 80a4c6f78d39 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.133 and redeploy the Hub Lambda from tag v4.5.133 (1b86fb08bbf0); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.133 (@mutmutco/cli@4.5.133, tag commit 1b86fb08bbf0 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -22897,6 +22897,15 @@ Resume it:  ${resumeCommand}
 function preOneZeroInForce(meta) {
   return !!meta?.suite && meta.preOneZero !== false;
 }
+function assertSuiteAutoVersion(repo, meta, env, namesRcCycle) {
+  if (!meta?.suite) return;
+  const intent = (env.MMI_BUMP_INTENT ?? "").trim();
+  const target = (env.MMI_RELEASE_VERSION ?? "").trim();
+  const hand = intent && intent !== "patch" ? `MMI_BUMP_INTENT=${intent}` : target && !namesRcCycle ? `MMI_RELEASE_VERSION=${target}` : "";
+  if (hand) {
+    throw new Error(`${repo} is a ${meta.suite} suite project: its versions auto-mint as the next patch and carry no meaning (#8224). Unset ${hand}. For a big change, release with \`suite release --owner-go --revamp ${repo}\`.`);
+  }
+}
 function assertPreOneZero(repo, meta, tag) {
   if (preOneZeroInForce(meta) && /^v?[1-9]\d*\./.test(tag)) {
     throw new Error(`${repo} is a ${meta.suite} suite member held on 0.x.y; ${tag} would be major >= 1. Only the owner lifts this: set registry META preOneZero to false. If the tag came from a stale scripts/next-version.mjs, propagate the current seed first (#7699).`);
@@ -28676,6 +28685,7 @@ async function runTrainApplyLocked(command, deps, options = {}) {
   const bumpIntent = await resolveTrainBumpIntent(deps, process.env, void 0, preOneZeroInForce(meta));
   const branchHints = await loadReleaseTrackBranchHints(deps);
   const directTrack = isHubControlRepo(ctx.repo) || resolveReleaseTrack(meta, branchHints) === "direct";
+  assertSuiteAutoVersion(ctx.repo, meta, process.env, command === "release" && !directTrack);
   if (command === "release" && meta.suite === "mm-work") await requireSuiteReleaseSummary(deps, options.announceSummaryFile);
   const pipelineInput = { deps, ctx, command, meta, branchHints, watch, options, bumpIntent };
   if (command === "rcand") {
@@ -37539,10 +37549,13 @@ ${failures.join("\n")}`);
   await reapplyRulesets(deps, record, "rc");
   return { plan, record };
 }
-async function suiteRelease(deps, ownerGo, big = false) {
+async function suiteRelease(deps, ownerGo, revamp = []) {
   if (!ownerGo) throw new Error("suite release requires --owner-go; nothing was written");
   const record = readSuiteCut(deps.recordPath);
   if (!record?.pinMerged || !record.leadRcTag) throw new Error("no completed suite rc cut and merged pin PR; release refused");
+  const isRevamp = (repo) => revamp.some((r) => r.toLowerCase() === repo.toLowerCase());
+  const unknown = revamp.filter((r) => r.toLowerCase() !== SUITE_REPO.toLowerCase() && !record.members.some((m) => m.repo.toLowerCase() === r.toLowerCase()));
+  if (unknown.length) throw new Error(`--revamp names repos outside this cut: ${unknown.join(", ")}; nothing was written`);
   const members = trainModules(suiteMembers(await deps.registry()));
   const { active, held } = await holdSplit(deps, members);
   if (!heldMatches(record.heldMembers ?? [], held)) throw new Error("suite hold changed after the cut; release refused");
@@ -37596,7 +37609,7 @@ Each member's live release must serve <data>/main/module.js at its main pin path
         console.warn(`${member.repo}: released as ${member.releasedAs ?? suiteReleaseTag(member.tag)} and hotfixed to ${member.hotfixedTo}, which is live; recorded as released (#7482)`);
       } else {
         if (member.releasedAs && member.releasedAs !== suiteReleaseTag(member.tag)) console.warn(`${member.repo}: its rc already shipped as ${member.releasedAs}, not ${suiteReleaseTag(member.tag)}; finishing that release (#7464)`);
-        await deps.release(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag), member.sha, { suiteTag: suiteReleaseTag(record.leadRcTag) });
+        await deps.release(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag), member.sha, { suiteTag: suiteReleaseTag(record.leadRcTag), ...isRevamp(member.repo) ? { big: true } : {} });
       }
       member.released = true;
       writeSuiteCut(deps.recordPath, record);
@@ -37609,7 +37622,7 @@ Each member's live release must serve <data>/main/module.js at its main pin path
   }
   await reapplyRulesets(deps, record, "main");
   if (!record.leadReleased) {
-    await deps.release(SUITE_REPO, suiteReleaseTag(record.leadRcTag), record.leadRcSha, { big });
+    await deps.release(SUITE_REPO, suiteReleaseTag(record.leadRcTag), record.leadRcSha, { big: isRevamp(SUITE_REPO) });
     record.leadReleased = true;
     writeSuiteCut(deps.recordPath, record);
   }
@@ -47910,7 +47923,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       { flags: "--supersede-deploy", description: "with --apply, master-approved closure of a content-caused failed deploy leg on a PUBLISHED release whose immutable tag can never deploy green \u2014 the next patch train then carries the fix (#6553); combined with --supersede-publish it closes BOTH content-caused legs in one approved closure (#6752)" },
       { flags: "--supersede-publish", description: "with --apply, master-approved closure of a content-caused failed publish leg on a fully PROMOTED release whose immutable tag can never publish green \u2014 a deferred Jerv-Hub operator-host Gateway deploy leg is run and verified as part of the closure \u2014 the next patch train then carries the fix (#6638/#6742); combined with --supersede-deploy it closes BOTH content-caused legs in one approved closure (#6752)" },
       { flags: "--retry-publish <run-id>", description: "with --apply, retry one proven failed or cancelled Hub publish release run (#3949/#5797)" },
-      { flags: "--big", description: "marks this release big for the mm-work suite `## In plain words` section even though its patch tag alone would not read as one (#7510); automatic for a minor/major bump \u2014 this is only for a patch a project-admin wants surfaced as big" }
+      { flags: "--big", description: "marks this release an owner-approved revamp in the mm-work suite `## In plain words` section (#7510); the only big signal, since suite versions carry no meaning (#8224); requires --owner-go" }
     ];
     for (const f of RELEASE_ONLY_FLAGS) {
       if (commandName === "release") {
@@ -47945,6 +47958,9 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       if (o.big && commandName !== "release") {
         return fail(`${commandName}: --big applies only to release \u2014 it marks the mm-work suite plain-words section, which only a Release carries. Run: mmi-cli devops release --big`);
       }
+      if (o.big && !o.ownerGo) {
+        return fail(`${commandName}: --big marks an owner-approved revamp and requires --owner-go (#8224)`);
+      }
       if (o.abort && commandName !== "release") {
         return fail(`${commandName}: --abort applies only to release \u2014 it rolls back a proven unpublished release tag. Run: mmi-cli devops release --abort --apply`);
       }
@@ -48973,7 +48989,7 @@ function registerSuiteCommands(program3) {
       return fail(`suite abandon: ${e.message}`);
     }
   });
-  suite.command("release").description("verify the cut and unchanged live backends, ship members then MM-Work, announce once").option("--owner-go", "explicit owner approval to release the tested candidate").option("--announce-summary-file <path>", "curated suite announcement, posted once after the train; also this cut's plain-words summary for MM-Work itself").option("--member-summary-file <owner/repo=path>", "repeatable: required title + 2\u20135 notes for each member being released; carried members need none", (val, prev = []) => [...prev, val], []).option("--announce-summary-file-tr <path>", "Turkish plain-words summary for MM-Work itself").option("--member-summary-file-tr <owner/repo=path>", "repeatable: a member's own Turkish plain-words summary", (val, prev = []) => [...prev, val], []).option("--big", "marks MM-Work's own release big for the plain-words section (#7510); a member is never marked big through this flag \u2014 it is big only via the read route's automatic minor/major detection").option("--json", "structured receipt").action(async (o) => {
+  suite.command("release").description("verify the cut and unchanged live backends, ship members then MM-Work, announce once").option("--owner-go", "explicit owner approval to release the tested candidate").option("--announce-summary-file <path>", "curated suite announcement, posted once after the train; also this cut's plain-words summary for MM-Work itself").option("--member-summary-file <owner/repo=path>", "repeatable: required title + 2\u20135 notes for each member being released; carried members need none", (val, prev = []) => [...prev, val], []).option("--announce-summary-file-tr <path>", "Turkish plain-words summary for MM-Work itself").option("--member-summary-file-tr <owner/repo=path>", "repeatable: a member's own Turkish plain-words summary", (val, prev = []) => [...prev, val], []).option("--revamp <owner/repo>", `repeatable: marks that repo's release an owner-approved revamp in the plain-words section \u2014 the only "big" signal; versions carry no meaning (#8224)`, (val, prev = []) => [...prev, val], []).option("--big", "alias for --revamp mutmutco/MM-Work (#7510)").option("--json", "structured receipt").action(async (o) => {
     try {
       if (!o.ownerGo) throw new Error("suite release requires --owner-go; nothing was written");
       const memberSummaryFiles = parseMemberSummaryFiles(o.memberSummaryFile ?? []);
@@ -48982,7 +48998,7 @@ function registerSuiteCommands(program3) {
       const unlock = await acquireTrainWriterLock(root, "suite release");
       let result;
       try {
-        result = await suiteRelease(suiteTrainIo(root, o.announceSummaryFile, memberSummaryFiles, o.announceSummaryFileTr, memberSummaryFilesTr), true, o.big === true);
+        result = await suiteRelease(suiteTrainIo(root, o.announceSummaryFile, memberSummaryFiles, o.announceSummaryFileTr, memberSummaryFilesTr), true, [...o.revamp ?? [], ...o.big ? ["mutmutco/MM-Work"] : []]);
       } finally {
         await unlock();
       }

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.132",
+  "version": "4.5.133",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.132",
+  "version": "4.5.133",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",