@mutmutco/codex-plugin 4.5.132 → 4.5.134

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.132",
+  "version": "4.5.134",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -18274,10 +18274,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.132",
-    tag: "v4.5.132",
-    commit: "80a4c6f78d39",
-    npm: "@mutmutco/cli@4.5.132"
+    version: "4.5.134",
+    tag: "v4.5.134",
+    commit: "f976ea4f8325",
+    npm: "@mutmutco/cli@4.5.134"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18294,14 +18294,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.132"
+          v3Target: "v4.5.134"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.132 and redeploy the Hub Lambda from tag v4.5.132 (80a4c6f78d39); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.132 (@mutmutco/cli@4.5.132, tag commit 80a4c6f78d39 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.134 and redeploy the Hub Lambda from tag v4.5.134 (f976ea4f8325); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.134 (@mutmutco/cli@4.5.134, tag commit f976ea4f8325 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -22897,6 +22897,15 @@ Resume it:  ${resumeCommand}
 function preOneZeroInForce(meta) {
   return !!meta?.suite && meta.preOneZero !== false;
 }
+function assertSuiteAutoVersion(repo, meta, env, namesRcCycle) {
+  if (!meta?.suite) return;
+  const intent = (env.MMI_BUMP_INTENT ?? "").trim();
+  const target = (env.MMI_RELEASE_VERSION ?? "").trim();
+  const hand = intent && intent !== "patch" ? `MMI_BUMP_INTENT=${intent}` : target && !namesRcCycle ? `MMI_RELEASE_VERSION=${target}` : "";
+  if (hand) {
+    throw new Error(`${repo} is a ${meta.suite} suite project: its versions auto-mint as the next patch and carry no meaning (#8224). Unset ${hand}. For a big change, release with \`suite release --owner-go --revamp ${repo}\`.`);
+  }
+}
 function assertPreOneZero(repo, meta, tag) {
   if (preOneZeroInForce(meta) && /^v?[1-9]\d*\./.test(tag)) {
     throw new Error(`${repo} is a ${meta.suite} suite member held on 0.x.y; ${tag} would be major >= 1. Only the owner lifts this: set registry META preOneZero to false. If the tag came from a stale scripts/next-version.mjs, propagate the current seed first (#7699).`);
@@ -26378,10 +26387,42 @@ Cut by ${formatSessionIdentity(cutBy)}
 var PLAIN_WORDS_HEADING = "## In plain words";
 var PLAIN_WORDS_HEADING_TR = "## Sade s\xF6zlerle";
 var PLAIN_WORDS_MARKER = "<!-- mmi:big -->";
-function buildPlainWordsSection(lines2, big, heading = PLAIN_WORDS_HEADING) {
+var REPORT_ID = /^[A-Za-z0-9_-]{1,64}$/;
+async function collectReleaseCredits(deps, repo, body) {
+  try {
+    const [owner, name] = repo.split("/");
+    const prs = /* @__PURE__ */ new Set();
+    let changes = false;
+    for (const line of body.split(/\r?\n/)) {
+      if (line.startsWith("## ")) changes = line === "## What's Changed";
+      if (!changes) continue;
+      const match = line.match(/\bin https:\/\/github\.com\/([^/]+\/[^/]+)\/pull\/(\d+)\s*$/);
+      if (match?.[1]?.toLowerCase() === repo.toLowerCase()) prs.add(Number(match[2]));
+    }
+    const ids = /* @__PURE__ */ new Set();
+    for (const number of [...prs].sort((a, b) => a - b)) {
+      const query = "query($owner:String!,$name:String!,$number:Int!){repository(owner:$owner,name:$name){pullRequest(number:$number){closingIssuesReferences(first:100){nodes{body} pageInfo{hasNextPage}}}}}";
+      const result = JSON.parse(clean2(await deps.run("gh", ["api", "graphql", "-f", `query=${query}`, "-f", `owner=${owner}`, "-f", `name=${name}`, "-F", `number=${number}`])));
+      const refs = result.data?.repository?.pullRequest?.closingIssuesReferences;
+      if (result.errors?.length || !Array.isArray(refs?.nodes) || refs.pageInfo?.hasNextPage !== false) throw new Error(`closing issues unavailable or truncated for PR #${number}`);
+      for (const issue of refs.nodes) {
+        if (typeof issue?.body !== "string") throw new Error(`issue body unavailable for PR #${number}`);
+        const footer = issue.body.trim().match(/(?:^|\n)---\r?\nReported by a person in MM-Work \((?:dev|rc|main)\), module `[^`\r\n]+`, report `([A-Za-z0-9_-]{1,64})`\. Filed by the Hub \(#7389\)\.$/);
+        if (footer?.[1]) ids.add(footer[1]);
+      }
+    }
+    return [...ids].sort().slice(0, 20);
+  } catch (e) {
+    (deps.warn ?? console.warn)(`release credits omitted for ${repo}: ${e.message}`);
+    return [];
+  }
+}
+function buildPlainWordsSection(lines2, big, heading = PLAIN_WORDS_HEADING, credits = []) {
   const [title, ...notes] = lines2;
   const body = [heading, title ?? "", ...notes.slice(0, 5).map((n) => `- ${n}`)];
   if (big) body.push(PLAIN_WORDS_MARKER);
+  const ids = [...new Set(credits.filter((id) => REPORT_ID.test(id)))].sort().slice(0, 20);
+  if (ids.length) body.push(`<!-- mmi:credits ${ids.join(",")} -->`);
   return body.join("\n");
 }
 var SUMMARY_GUIDE = "https://github.com/mutmutco/MMI-Hub/blob/development/docs/Guides/train-troubleshooting.md#announce-summary-missing";
@@ -26453,13 +26494,15 @@ async function writePlainWordsIfSuiteMember(deps, args) {
   try {
     if (!args.summaryLines?.length) return;
     const lines2 = args.summaryLines;
+    const body = clean2(await deps.run("gh", ["release", "view", args.tag, "--repo", args.repo, "--json", "body", "-q", ".body"]));
+    const credits = await collectReleaseCredits(deps, args.repo, body);
     const section = [
-      buildPlainWordsSection(lines2, args.big === true),
+      buildPlainWordsSection(lines2, args.big === true, PLAIN_WORDS_HEADING, credits),
       ...args.summaryLinesTr?.length ? [buildPlainWordsSection(args.summaryLinesTr, false, PLAIN_WORDS_HEADING_TR)] : []
     ].join("\n\n");
-    const body = clean2(await deps.run("gh", ["release", "view", args.tag, "--repo", args.repo, "--json", "body", "-q", ".body"]));
     await deps.run("gh", ["release", "edit", args.tag, "--repo", args.repo, "--notes", upsertPlainWordsSection(body, section)]);
-  } catch {
+  } catch (e) {
+    (deps.warn ?? console.warn)(`plain-words write failed for ${args.repo}@${args.tag}: ${e.message}`);
   }
 }
 async function writePlainWordsSection(deps, options, repo, meta, tag) {
@@ -28676,6 +28719,7 @@ async function runTrainApplyLocked(command, deps, options = {}) {
   const bumpIntent = await resolveTrainBumpIntent(deps, process.env, void 0, preOneZeroInForce(meta));
   const branchHints = await loadReleaseTrackBranchHints(deps);
   const directTrack = isHubControlRepo(ctx.repo) || resolveReleaseTrack(meta, branchHints) === "direct";
+  assertSuiteAutoVersion(ctx.repo, meta, process.env, command === "release" && !directTrack);
   if (command === "release" && meta.suite === "mm-work") await requireSuiteReleaseSummary(deps, options.announceSummaryFile);
   const pipelineInput = { deps, ctx, command, meta, branchHints, watch, options, bumpIntent };
   if (command === "rcand") {
@@ -37539,10 +37583,13 @@ ${failures.join("\n")}`);
   await reapplyRulesets(deps, record, "rc");
   return { plan, record };
 }
-async function suiteRelease(deps, ownerGo, big = false) {
+async function suiteRelease(deps, ownerGo, revamp = []) {
   if (!ownerGo) throw new Error("suite release requires --owner-go; nothing was written");
   const record = readSuiteCut(deps.recordPath);
   if (!record?.pinMerged || !record.leadRcTag) throw new Error("no completed suite rc cut and merged pin PR; release refused");
+  const isRevamp = (repo) => revamp.some((r) => r.toLowerCase() === repo.toLowerCase());
+  const unknown = revamp.filter((r) => r.toLowerCase() !== SUITE_REPO.toLowerCase() && !record.members.some((m) => m.repo.toLowerCase() === r.toLowerCase()));
+  if (unknown.length) throw new Error(`--revamp names repos outside this cut: ${unknown.join(", ")}; nothing was written`);
   const members = trainModules(suiteMembers(await deps.registry()));
   const { active, held } = await holdSplit(deps, members);
   if (!heldMatches(record.heldMembers ?? [], held)) throw new Error("suite hold changed after the cut; release refused");
@@ -37596,7 +37643,7 @@ Each member's live release must serve <data>/main/module.js at its main pin path
         console.warn(`${member.repo}: released as ${member.releasedAs ?? suiteReleaseTag(member.tag)} and hotfixed to ${member.hotfixedTo}, which is live; recorded as released (#7482)`);
       } else {
         if (member.releasedAs && member.releasedAs !== suiteReleaseTag(member.tag)) console.warn(`${member.repo}: its rc already shipped as ${member.releasedAs}, not ${suiteReleaseTag(member.tag)}; finishing that release (#7464)`);
-        await deps.release(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag), member.sha, { suiteTag: suiteReleaseTag(record.leadRcTag) });
+        await deps.release(member.repo, member.releasedAs ?? suiteReleaseTag(member.tag), member.sha, { suiteTag: suiteReleaseTag(record.leadRcTag), ...isRevamp(member.repo) ? { big: true } : {} });
       }
       member.released = true;
       writeSuiteCut(deps.recordPath, record);
@@ -37609,7 +37656,7 @@ Each member's live release must serve <data>/main/module.js at its main pin path
   }
   await reapplyRulesets(deps, record, "main");
   if (!record.leadReleased) {
-    await deps.release(SUITE_REPO, suiteReleaseTag(record.leadRcTag), record.leadRcSha, { big });
+    await deps.release(SUITE_REPO, suiteReleaseTag(record.leadRcTag), record.leadRcSha, { big: isRevamp(SUITE_REPO) });
     record.leadReleased = true;
     writeSuiteCut(deps.recordPath, record);
   }
@@ -47910,7 +47957,7 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       { flags: "--supersede-deploy", description: "with --apply, master-approved closure of a content-caused failed deploy leg on a PUBLISHED release whose immutable tag can never deploy green \u2014 the next patch train then carries the fix (#6553); combined with --supersede-publish it closes BOTH content-caused legs in one approved closure (#6752)" },
       { flags: "--supersede-publish", description: "with --apply, master-approved closure of a content-caused failed publish leg on a fully PROMOTED release whose immutable tag can never publish green \u2014 a deferred Jerv-Hub operator-host Gateway deploy leg is run and verified as part of the closure \u2014 the next patch train then carries the fix (#6638/#6742); combined with --supersede-deploy it closes BOTH content-caused legs in one approved closure (#6752)" },
       { flags: "--retry-publish <run-id>", description: "with --apply, retry one proven failed or cancelled Hub publish release run (#3949/#5797)" },
-      { flags: "--big", description: "marks this release big for the mm-work suite `## In plain words` section even though its patch tag alone would not read as one (#7510); automatic for a minor/major bump \u2014 this is only for a patch a project-admin wants surfaced as big" }
+      { flags: "--big", description: "marks this release an owner-approved revamp in the mm-work suite `## In plain words` section (#7510); the only big signal, since suite versions carry no meaning (#8224); requires --owner-go" }
     ];
     for (const f of RELEASE_ONLY_FLAGS) {
       if (commandName === "release") {
@@ -47945,6 +47992,9 @@ function registerTrainOperationsCommands(program3, runProjectInfoSyncCallback) {
       if (o.big && commandName !== "release") {
         return fail(`${commandName}: --big applies only to release \u2014 it marks the mm-work suite plain-words section, which only a Release carries. Run: mmi-cli devops release --big`);
       }
+      if (o.big && !o.ownerGo) {
+        return fail(`${commandName}: --big marks an owner-approved revamp and requires --owner-go (#8224)`);
+      }
       if (o.abort && commandName !== "release") {
         return fail(`${commandName}: --abort applies only to release \u2014 it rolls back a proven unpublished release tag. Run: mmi-cli devops release --abort --apply`);
       }
@@ -48973,7 +49023,7 @@ function registerSuiteCommands(program3) {
       return fail(`suite abandon: ${e.message}`);
     }
   });
-  suite.command("release").description("verify the cut and unchanged live backends, ship members then MM-Work, announce once").option("--owner-go", "explicit owner approval to release the tested candidate").option("--announce-summary-file <path>", "curated suite announcement, posted once after the train; also this cut's plain-words summary for MM-Work itself").option("--member-summary-file <owner/repo=path>", "repeatable: required title + 2\u20135 notes for each member being released; carried members need none", (val, prev = []) => [...prev, val], []).option("--announce-summary-file-tr <path>", "Turkish plain-words summary for MM-Work itself").option("--member-summary-file-tr <owner/repo=path>", "repeatable: a member's own Turkish plain-words summary", (val, prev = []) => [...prev, val], []).option("--big", "marks MM-Work's own release big for the plain-words section (#7510); a member is never marked big through this flag \u2014 it is big only via the read route's automatic minor/major detection").option("--json", "structured receipt").action(async (o) => {
+  suite.command("release").description("verify the cut and unchanged live backends, ship members then MM-Work, announce once").option("--owner-go", "explicit owner approval to release the tested candidate").option("--announce-summary-file <path>", "curated suite announcement, posted once after the train; also this cut's plain-words summary for MM-Work itself").option("--member-summary-file <owner/repo=path>", "repeatable: required title + 2\u20135 notes for each member being released; carried members need none", (val, prev = []) => [...prev, val], []).option("--announce-summary-file-tr <path>", "Turkish plain-words summary for MM-Work itself").option("--member-summary-file-tr <owner/repo=path>", "repeatable: a member's own Turkish plain-words summary", (val, prev = []) => [...prev, val], []).option("--revamp <owner/repo>", `repeatable: marks that repo's release an owner-approved revamp in the plain-words section \u2014 the only "big" signal; versions carry no meaning (#8224)`, (val, prev = []) => [...prev, val], []).option("--big", "alias for --revamp mutmutco/MM-Work (#7510)").option("--json", "structured receipt").action(async (o) => {
     try {
       if (!o.ownerGo) throw new Error("suite release requires --owner-go; nothing was written");
       const memberSummaryFiles = parseMemberSummaryFiles(o.memberSummaryFile ?? []);
@@ -48982,7 +49032,7 @@ function registerSuiteCommands(program3) {
       const unlock = await acquireTrainWriterLock(root, "suite release");
       let result;
       try {
-        result = await suiteRelease(suiteTrainIo(root, o.announceSummaryFile, memberSummaryFiles, o.announceSummaryFileTr, memberSummaryFilesTr), true, o.big === true);
+        result = await suiteRelease(suiteTrainIo(root, o.announceSummaryFile, memberSummaryFiles, o.announceSummaryFileTr, memberSummaryFilesTr), true, [...o.revamp ?? [], ...o.big ? ["mutmutco/MM-Work"] : []]);
       } finally {
         await unlock();
       }

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.132",
+  "version": "4.5.134",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.132",
+  "version": "4.5.134",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",