@mutmutco/codex-plugin 4.5.160 → 4.5.161

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.160",
+  "version": "4.5.161",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -10312,7 +10312,7 @@ init_github_client();
 // src/project-model.ts
 var PROJECT_TYPES = ["web-app", "hub-service", "content", "desktop-app", "desktop-game", "mobile-app", "non-deployable", "cli-tool", "worker"];
 var DEPLOY_MODELS = ["hub-serverless", "serverless", "tenant-container", "solo-container", "static-cdn", "registry-publish", "content", "none", "vercel"];
-var RELEASE_TRACKS = ["full", "direct", "trunk"];
+var RELEASE_TRACKS = ["full", "direct", "trunk", "single"];
 var REQUIRED_CHECK_BRANCHES = ["development", "rc", "main"];
 var PROJECT_TYPE_SET = new Set(PROJECT_TYPES);
 var DEPLOY_MODEL_SET = new Set(DEPLOY_MODELS);
@@ -10395,6 +10395,7 @@ function metaWithDeclaredClass(meta, declaredClass) {
 }
 function branchesForTrack(track) {
   if (track === "trunk") return ["main"];
+  if (track === "single") return ["development"];
   if (track === "direct") return ["development", "main"];
   return ["development", "rc", "main"];
 }
@@ -10406,7 +10407,7 @@ function resolveRequiredCheckBranches(meta, repo) {
   return branchesForTrack(resolveReleaseTrack(meta, void 0, repo));
 }
 function promotionBranchesForTrack(track) {
-  if (track === "trunk") return [];
+  if (track === "trunk" || track === "single") return [];
   if (track === "direct") return ["main"];
   return ["rc", "main"];
 }
@@ -17182,7 +17183,7 @@ function gateSeedVars(cls, releaseTrack, runtime = "node", requiredCheckBranches
     GATE_EXTRA_STEPS_YAML: ""
   };
   const track = releaseTrack ?? (cls === "content" ? "trunk" : "full");
-  const trackBranches = track === "trunk" ? ["main"] : track === "direct" ? ["development", "main"] : ["development", "rc", "main"];
+  const trackBranches = track === "trunk" ? ["main"] : track === "single" ? ["development"] : track === "direct" ? ["development", "main"] : ["development", "rc", "main"];
   const rulesetBranches = requiredCheckBranches?.length ? [...requiredCheckBranches] : trackBranches;
   const rulesetRefs = JSON.stringify(rulesetBranches.map((branch) => `refs/heads/${branch}`));
   const rulesetContexts = JSON.stringify((requiredChecks?.length ? requiredChecks : ["gate"]).map((context) => ({ context })));
@@ -17195,6 +17196,15 @@ function gateSeedVars(cls, releaseTrack, runtime = "node", requiredCheckBranches
       GATE_RULESET_CONTEXTS_JSON: rulesetContexts
     };
   }
+  if (track === "single") {
+    return {
+      ...runtimeVars,
+      GATE_PUSH_BRANCHES_YAML: "[development]",
+      GATE_FULL_RUN_BRANCH: "development",
+      GATE_RULESET_BRANCH_REFS_JSON: rulesetRefs,
+      GATE_RULESET_CONTEXTS_JSON: rulesetContexts
+    };
+  }
   if (track === "direct") {
     return {
       ...runtimeVars,
@@ -17519,7 +17529,7 @@ function buildRegisterPayload(repo, cls, vars, options = {}) {
     throw new Error(`deployModel must be one of: ${DEPLOY_MODELS.join(", ")}`);
   }
   if (options.releaseTrack && !isReleaseTrack(options.releaseTrack)) {
-    throw new Error("releaseTrack must be full, direct, or trunk");
+    throw new Error("releaseTrack must be full, direct, trunk, or single");
   }
   const shape = {
     class: cls,
@@ -18647,7 +18657,7 @@ function classifyRow(row) {
   } else if (row.onboarding.status === "unknown") {
     reasons.add(`canonical onboarding link evidence unknown: ${row.onboarding.detail}`);
   }
-  const releaseRequired = row.track !== "trunk" && !row.classifications.includes("no-deploy-surface");
+  const releaseRequired = row.track !== "trunk" && row.track !== "single" && !row.classifications.includes("no-deploy-surface");
   const tagIsVersion = Boolean(row.release.version) && row.unknowns.some((u) => u.startsWith(NO_VERSION_LOCK_PREFIX));
   for (const unknown of row.unknowns) {
     if (!releaseRequired && unknown === NO_RELEASE_UNKNOWN) continue;
@@ -18909,10 +18919,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.160",
-    tag: "v4.5.160",
-    commit: "05c3cc8d56ee",
-    npm: "@mutmutco/cli@4.5.160"
+    version: "4.5.161",
+    tag: "v4.5.161",
+    commit: "236dbfae4af2",
+    npm: "@mutmutco/cli@4.5.161"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18929,14 +18939,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.160"
+          v3Target: "v4.5.161"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.160 and redeploy the Hub Lambda from tag v4.5.160 (05c3cc8d56ee); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.160 (@mutmutco/cli@4.5.160, tag commit 05c3cc8d56ee \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.161 and redeploy the Hub Lambda from tag v4.5.161 (236dbfae4af2); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.161 (@mutmutco/cli@4.5.161, tag commit 236dbfae4af2 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -20227,7 +20237,7 @@ function buildFleetTrackInventory(projects, releaseProbes, pluginProbes, generat
       unknowns
     };
   });
-  const tracks = { full: 0, direct: 0, trunk: 0 };
+  const tracks = { full: 0, direct: 0, trunk: 0, single: 0 };
   for (const row of repos) tracks[row.track] += 1;
   return {
     generatedAt,
@@ -20420,13 +20430,13 @@ var FLEET_LOCKSTEP_REF_INCLUDE = ["refs/heads/rc", "refs/heads/main"];
 var STATUS_DESCRIPTION_MAX = 140;
 function classifyFleetEnrollment(rows) {
   return rows.map((row) => {
-    if (row.track === "trunk") {
+    if (row.track === "trunk" || row.track === "single") {
       return {
         repo: row.repo,
         track: row.track,
         deployModel: row.deployModel,
         enrolled: false,
-        reason: "excluded: trunk track has no release train \u2014 no rc/main surface exists to gate (declared shape, not an exemption from conformance: the fleet verdict still counts this repo)"
+        reason: "excluded: trunk/single track has no release train \u2014 no rc/main surface exists to gate (declared shape, not an exemption from conformance: the fleet verdict still counts this repo)"
       };
     }
     const noDeploy = row.classifications.includes("no-deploy-surface");
@@ -27479,6 +27489,7 @@ async function preflight(deps, ctx, stage, meta, lane) {
   if (model === "content") {
     throw new Error(`${ctx.repo} is a content repo (deployModel=content) \u2014 the release train does not apply (trunk-based; PR to main)`);
   }
+  if (meta.releaseTrack === "single") throw new Error("single-track repos ship on merge; there is no release train");
   if (model === "none") {
     throw new Error(`${ctx.repo} is not Hub-deployed (deployModel=none) \u2014 the release train does not apply; use the project's own release path`);
   }
@@ -29727,9 +29738,9 @@ function rulesetCoversReleaseBranches(payload, track) {
   const conditions = payload.conditions;
   const include = conditions?.ref_name?.include;
   if (!Array.isArray(include)) {
-    return track === "full" || track === "direct" || track === "trunk";
+    return track === "full" || track === "direct" || track === "trunk" || track === "single";
   }
-  const releaseRefs = track === "full" ? ["refs/heads/rc", "refs/heads/main"] : ["refs/heads/main"];
+  const releaseRefs = track === "full" ? ["refs/heads/rc", "refs/heads/main"] : track === "single" ? ["refs/heads/development"] : ["refs/heads/main"];
   return include.some((entry) => typeof entry === "string" && (entry === "~DEFAULT_BRANCH" ? track === "trunk" : releaseRefs.some((ref) => refPatternCovers(entry, ref))));
 }
 function releaseBranchRefsCovered(conditions, track) {
@@ -34905,6 +34916,10 @@ function classifyEnvironmentDrift(drift) {
 }
 var TRACK_ENVIRONMENT_EXCEPTIONS = {
   direct: { rc: "direct release track has no rc stage" },
+  single: {
+    rc: "single release track has no rc stage",
+    main: "single release track has no main branch; merges deploy the one stage"
+  },
   trunk: {
     dev: "trunk release track has no dev stage",
     rc: "trunk release track has no rc stage"
@@ -35073,6 +35088,7 @@ function branchProtectionPayload(current, owners, app = LOCKED_APP) {
 }
 function deployStagesForBootstrap(deployModel, track) {
   if (deployModel !== "tenant-container" && deployModel !== "solo-container") return [];
+  if (track === "single") return ["main"];
   return branchesForTrack(track).map((branch) => branch === "development" ? "dev" : branch);
 }
 function bootstrapSetDeployCommand(repo, stage, deployModel) {
@@ -42191,6 +42207,7 @@ var readApi = async (args) => {
   const env = await ghReadEnv();
   return (await execFileP("gh", ["api", ...args], {
     timeout: 2e4,
+    maxBuffer: 16 * 1024 * 1024,
     ...env ? { env } : {}
   })).stdout;
 };
@@ -42220,7 +42237,7 @@ async function readPrMergeQueue(pr, repo, gh2 = readApi) {
   return result.pullRequest;
 }
 async function findPrMergeGroupRun(pr, repo, base, gh2 = readApi) {
-  const pages = JSON.parse(await gh2([`repos/${repo}/actions/runs?event=merge_group&per_page=100`, "--paginate", "--slurp"]));
+  const pages = [JSON.parse(await gh2([`repos/${repo}/actions/runs?event=merge_group&per_page=100&exclude_pull_requests=true`]))];
   const prefix = `gh-readonly-queue/${base}/pr-${pr}-`;
   const run = pages.flatMap((page) => page.workflow_runs).filter((run2) => run2.head_branch?.startsWith(prefix)).sort((a, b) => b.created_at.localeCompare(a.created_at) || b.id - a.id)[0];
   return run ? { id: run.id, url: run.html_url, conclusion: run.conclusion } : void 0;

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.160",
+  "version": "4.5.161",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.160",
+  "version": "4.5.161",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/org-guide/references/work-and-releases.md

@@ -91,6 +91,8 @@ development. A trunk repository follows its single branch and declared workflow
   No box stage.
 - Trunk track: one main branch, without an rc/development promotion train. Follow the repository's
   declared publishing workflow rather than manufacturing train branches.
+- Single track (MM-Work and its modules): one environment. Every merge to development auto-deploys
+  the `main` stage; there is no rc, dev stage or release train, and release, rcand and hotfix refuse.
 - Urgent already-merged fixes: use [hotfix](../../hotfix/SKILL.md), which carries selected development
   fixes directly to main on either track.