@mutmutco/codex-plugin 4.5.154 → 4.5.156

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.154",
+  "version": "4.5.156",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -18741,10 +18741,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.154",
-    tag: "v4.5.154",
-    commit: "045e47363357",
-    npm: "@mutmutco/cli@4.5.154"
+    version: "4.5.156",
+    tag: "v4.5.156",
+    commit: "1339f04aeec9",
+    npm: "@mutmutco/cli@4.5.156"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18761,14 +18761,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.154"
+          v3Target: "v4.5.156"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.154 and redeploy the Hub Lambda from tag v4.5.154 (045e47363357); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.154 (@mutmutco/cli@4.5.154, tag commit 045e47363357 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.156 and redeploy the Hub Lambda from tag v4.5.156 (1339f04aeec9); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.156 (@mutmutco/cli@4.5.156, tag commit 1339f04aeec9 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -53088,7 +53088,7 @@ function sliceRunLog(text, tail) {
   if (lines2.at(-1) === "") lines2.pop();
   const context = /* @__PURE__ */ new Set();
   lines2.forEach((line, i) => {
-    if (line.includes("##[error]")) for (let j = Math.max(0, i - 3); j <= Math.min(lines2.length - 1, i + 3); j++) context.add(j);
+    if (/##\[(error|warning)\]|failed to solve:/.test(line)) for (let j = Math.max(0, i - 3); j <= Math.min(lines2.length - 1, i + 3); j++) context.add(j);
   });
   return { errorLines: lines2.filter((_, i) => context.has(i)), tail: lines2.slice(-tail) };
 }

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.154",
+  "version": "4.5.156",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.154",
+  "version": "4.5.156",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/bootstrap/seeds/browser-pass.template.yml

@@ -0,0 +1,37 @@
+name: browser-pass
+# OPT-IN: copy to .github/workflows/browser-pass.yml, edit the dev URL, and replace
+# {{BROWSER_PASS_SHA}} with a reviewed 40-character Hub commit containing browser-pass.yml.
+# Never add PR, push, merge_group or gate callers. Not installed by bootstrap/propagation.
+on:
+  workflow_dispatch:
+    inputs:
+      base-url:
+        description: Dev URL to exercise
+        required: true
+        type: string
+        default: https://dev.<app>.mutmut.work
+      spec:
+        description: Space-separated Playwright spec filters (empty runs all tests)
+        type: string
+        default: ''
+      grep:
+        description: Playwright title regex
+        type: string
+        default: ''
+
+concurrency:
+  group: browser-pass
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+  packages: read # #8363: npm ci of @mutmutco/* packages in the reusable's setup.
+  id-token: write # Required by the reusable's optional dev vault-env step.
+
+jobs:
+  browser-pass:
+    uses: mutmutco/MMI-Hub/.github/workflows/browser-pass.yml@{{BROWSER_PASS_SHA}}
+    with:
+      base-url: ${{ inputs.base-url }}
+      spec: ${{ inputs.spec }}
+      grep: ${{ inputs.grep }}

package/skills/bootstrap/seeds/gate.template.yml

@@ -102,10 +102,10 @@ jobs:
           lockfile-path: {{GATE_CACHE_DEP_PATH}}
           fetch-depth: 0 # #8129: runbook freshness needs the PR merge-base history.
       - name: Runbook guard
-        if: ${{ steps.development-gate.outputs.reuse != 'true' && (github.event_name == 'pull_request' || github.event_name == 'merge_group') }}
+        if: ${{ steps.development-gate.outputs.reuse != 'true' && github.event_name == 'pull_request' }}
         uses: mutmutco/MMI-Hub/.github/actions/runbook-guard@{{GATE_RUNBOOK_SHA}}
         with:
-          base-ref: ${{ github.event_name == 'merge_group' && github.event.merge_group.base_sha || format('origin/{0}', github.base_ref) }}
+          base-ref: ${{ format('origin/{0}', github.base_ref) }}
       # #5427: per-job npm cache under $RUNNER_TEMP — never the shared ~/.npm. Twelve mmi-live lanes
       # share the gha-runner home; npm hardlinks from that cache into node_modules, so one job's
       # `npm ci` can make another job's vitest/dist/workers/forks.js vanish mid-suite (Cannot find

package/skills/bootstrap/seeds/suite-gate.template.yml

@@ -52,10 +52,10 @@ jobs:
           lockfile-path: package-lock.json
           fetch-depth: 0 # #8129: runbook freshness needs the PR merge-base history.
       - name: Runbook guard
-        if: ${{ steps.development-gate.outputs.reuse != 'true' && (github.event_name == 'pull_request' || github.event_name == 'merge_group') }}
+        if: ${{ steps.development-gate.outputs.reuse != 'true' && github.event_name == 'pull_request' }}
         uses: mutmutco/MMI-Hub/.github/actions/runbook-guard@{{GATE_RUNBOOK_SHA}}
         with:
-          base-ref: ${{ github.event_name == 'merge_group' && github.event.merge_group.base_sha || format('origin/{0}', github.base_ref) }}
+          base-ref: ${{ format('origin/{0}', github.base_ref) }}
       - name: Isolate npm cache
         if: ${{ steps.development-gate.outputs.reuse != 'true' }}
         run: echo "NPM_CONFIG_CACHE=$RUNNER_TEMP/npm-cache" >> "$GITHUB_ENV"