@mutmutco/codex-plugin 4.5.164 → 4.5.166

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.164",
+  "version": "4.5.166",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -14631,6 +14631,15 @@ function latestClaimMarker(comments) {
   }
   return void 0;
 }
+function latestClaimRelease(comments) {
+  for (let i = comments.length - 1; i >= 0; i -= 1) {
+    const body = comments[i].body;
+    const releases = parseClaimReleases(body);
+    if (!parseClaimMarkers(body).length && !releases.length) continue;
+    return latestClaimMarker([comments[i]]) ? void 0 : releases[releases.length - 1];
+  }
+  return void 0;
+}
 function formatClaimAge(ageMs) {
   if (ageMs === void 0 || !Number.isFinite(ageMs) || ageMs < 0) return "unknown age";
   const minutes = Math.floor(ageMs / 6e4);
@@ -14838,6 +14847,7 @@ async function gatherClaimLiveness(client, repo, number, fetchOpenPulls) {
     const comments = await client.restPaginate(`repos/${repo}/issues/${number}/comments`);
     const rows = comments.map((comment) => ({ body: comment.body ?? "", login: comment.user?.login ?? void 0 }));
     out.marker = latestClaimMarker(rows);
+    if (!out.marker) out.releasedAt = latestClaimRelease(rows)?.ts;
     for (let i = comments.length - 1; i >= 0; i -= 1) {
       if (comments[i].created_at && !latestClaimMarker([rows[i]])) {
         out.lastCommentAt = comments[i].created_at;
@@ -14919,8 +14929,9 @@ function liveEvidenceLines(evidence, repo) {
       live.push(evidence.lastCommentAt && Date.parse(evidence.lastCommentAt) > Date.parse(evidence.marker.ts) ? `claim marker from ${marker} is ${formatClaimAge(evidence.markerAgeMs)} old but the issue was commented ${formatClaimAge(idleMs)} ago (session not locally probeable)` : `claim marker from ${marker} is only ${formatClaimAge(evidence.markerAgeMs)} old (session not locally probeable)`);
     }
   }
-  if (evidence.openPr && workIsLive(evidence.openPrAt)) live.push(evidence.openPr);
-  if (evidence.branch && workIsLive(evidence.branchAt)) live.push(`live branch ${evidence.branch} on ${repo}`);
+  const sinceRelease = (at) => !evidence.releasedAt || at === void 0 || Date.parse(at) > Date.parse(evidence.releasedAt);
+  if (evidence.openPr && workIsLive(evidence.openPrAt) && sinceRelease(evidence.openPrAt)) live.push(evidence.openPr);
+  if (evidence.branch && workIsLive(evidence.branchAt) && sinceRelease(evidence.branchAt)) live.push(`live branch ${evidence.branch} on ${repo}`);
   return live;
 }
 function staleWorkLines(evidence) {
@@ -16613,6 +16624,15 @@ function localRunbookBase(refExists) {
 function checkRunbookCoverage(docs, base, git3) {
   const changed = git3(["diff", "--name-only", `${base}...HEAD`]).split(/\r?\n/).filter(Boolean);
   const findings = [];
+  const usesOnly = /* @__PURE__ */ new Map();
+  const changesOnlyUses = (path2) => {
+    if (!usesOnly.has(path2)) {
+      const diff = git3(["diff", "-U0", `${base}...HEAD`, "--", path2]);
+      const content = diff.split(/\r?\n/).filter((line) => /^[+-]/.test(line) && !/^(\+\+\+|---)/.test(line));
+      usesOnly.set(path2, content.length > 0 && content.every((line) => /^[+-]\s*(-\s+)?uses:\s*\S/.test(line)));
+    }
+    return usesOnly.get(path2);
+  };
   const matches = (glob, path2) => {
     const pattern = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*\//g, "\0").replace(/\*\*/g, "
").replace(/\*/g, "[^/]*").replace(/\?/g, "[^/]").replaceAll("\0", "(?:.*/)?").replaceAll("
", ".*");
     return new RegExp(`^${pattern}$`).test(path2);
@@ -16630,7 +16650,7 @@ function checkRunbookCoverage(docs, base, git3) {
       const end = headings.slice(i + 1).find((h) => h.level <= heading.level)?.start ?? lines2.length + 1;
       const markerEnd = headings[i + 1]?.start ?? end;
       const globs = lines2.slice(heading.start, markerEnd - 1).flatMap((text) => /<!--\s*runbook-covers:\s*(.*?)\s*-->/.exec(text)?.[1].split(",").map((s) => s.trim()) ?? []);
-      const affected = changed.filter((path2) => globs.some((glob) => matches(glob, path2)));
+      const affected = changed.filter((path2) => globs.some((glob) => matches(glob, path2)) && !changesOnlyUses(path2));
       if (affected.length && !ranges.some((r) => r.count > 0 && r.start < end && r.start + r.count > heading.start)) {
         findings.push({ kind: "runbook-section-stale", doc, line: heading.start, detail: `${heading.title}: changed ${affected.join(", ")}; update this section or declare Runbook-Unaffected: <reason>`, section: { heading: heading.title, level: heading.level, startLine: heading.start, endLine: end - 1, covers: globs }, sources: affected });
       }
@@ -19051,10 +19071,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.164",
-    tag: "v4.5.164",
-    commit: "a5f70231e564",
-    npm: "@mutmutco/cli@4.5.164"
+    version: "4.5.166",
+    tag: "v4.5.166",
+    commit: "4dbaaf17ac67",
+    npm: "@mutmutco/cli@4.5.166"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19071,14 +19091,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.164"
+          v3Target: "v4.5.166"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.164 and redeploy the Hub Lambda from tag v4.5.164 (a5f70231e564); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.164 (@mutmutco/cli@4.5.164, tag commit a5f70231e564 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.166 and redeploy the Hub Lambda from tag v4.5.166 (4dbaaf17ac67); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.166 (@mutmutco/cli@4.5.166, tag commit 4dbaaf17ac67 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -33317,7 +33337,7 @@ function parseGateVar(raw) {
 }
 var SECRET_OUTPUT_PATH_RE = /^\/[A-Za-z0-9._/-]+$/;
 var SECRET_OUTPUT_REPO_RE = /^[A-Za-z0-9][A-Za-z0-9._-]*\/[A-Za-z0-9][A-Za-z0-9._-]*$/;
-var SECRET_OUTPUT_KEY_RE = /^[A-Z][A-Z0-9_]*$/;
+var SECRET_OUTPUT_KEY_RE = /^(?:(?:dev|rc|main)\/)?[A-Z][A-Z0-9_]*$/;
 function parseTenantTaskSecretOutput(raw, label) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw)) {
     throw new Error(`org project set: ${label} must be an object {path,vault:{repo,key},overwrite?}`);
@@ -33341,7 +33361,7 @@ function parseTenantTaskSecretOutput(raw, label) {
     throw new Error(`org project set: ${label}.vault.repo must be owner/name`);
   }
   if (typeof vaultMap.key !== "string" || !SECRET_OUTPUT_KEY_RE.test(vaultMap.key)) {
-    throw new Error(`org project set: ${label}.vault.key must be UPPER_SNAKE`);
+    throw new Error(`org project set: ${label}.vault.key must be UPPER_SNAKE or <dev|rc|main>/UPPER_SNAKE`);
   }
   if (value.overwrite !== void 0 && typeof value.overwrite !== "boolean") {
     throw new Error(`org project set: ${label}.overwrite must be true or false`);
@@ -40981,11 +41001,12 @@ async function runPrLand(prNumber, options, deps) {
   if (drift) return drift;
   const hasQueue = await deps.hasMergeQueue?.(repo, resolved.base) ?? false;
   let queueSnapshot;
+  const queued = { base: resolved.base, state: "queued" };
   if (hasQueue) {
-    base.mergeQueue = { base: resolved.base, state: "queued" };
     if (!deps.readMergeQueue) throw new Error("merge queue reader unavailable");
     queueSnapshot = await deps.readMergeQueue(prNumber, repo);
     if (queueSnapshot.isInMergeQueue || queueSnapshot.state === "MERGED") {
+      base.mergeQueue = queued;
       base.mergeStatus = "auto-merge-enqueued";
       return pollPrMergeQueue(prNumber, options, deps, base, queueSnapshot);
     }
@@ -41035,6 +41056,7 @@ async function runPrLand(prNumber, options, deps) {
     return { ...base, error: merge.error ?? "merge failed" };
   }
   if (hasQueue) {
+    base.mergeQueue = queued;
     if (merge.mergeStatus === "merged") {
       return queueMerged(base, deps);
     }

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.164",
+  "version": "4.5.166",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.164",
+  "version": "4.5.166",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",