@mutmutco/codex-plugin 4.5.165 → 4.5.167

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.165",
+  "version": "4.5.167",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -16624,6 +16624,15 @@ function localRunbookBase(refExists) {
 function checkRunbookCoverage(docs, base, git3) {
   const changed = git3(["diff", "--name-only", `${base}...HEAD`]).split(/\r?\n/).filter(Boolean);
   const findings = [];
+  const usesOnly = /* @__PURE__ */ new Map();
+  const changesOnlyUses = (path2) => {
+    if (!usesOnly.has(path2)) {
+      const diff = git3(["diff", "-U0", `${base}...HEAD`, "--", path2]);
+      const content = diff.split(/\r?\n/).filter((line) => /^[+-]/.test(line) && !/^(\+\+\+|---)/.test(line));
+      usesOnly.set(path2, content.length > 0 && content.every((line) => /^[+-]\s*(-\s+)?uses:\s*\S/.test(line)));
+    }
+    return usesOnly.get(path2);
+  };
   const matches = (glob, path2) => {
     const pattern = glob.replace(/[.+^${}()|[\]\\]/g, "\\$&").replace(/\*\*\//g, "\0").replace(/\*\*/g, "
").replace(/\*/g, "[^/]*").replace(/\?/g, "[^/]").replaceAll("\0", "(?:.*/)?").replaceAll("
", ".*");
     return new RegExp(`^${pattern}$`).test(path2);
@@ -16641,7 +16650,7 @@ function checkRunbookCoverage(docs, base, git3) {
       const end = headings.slice(i + 1).find((h) => h.level <= heading.level)?.start ?? lines2.length + 1;
       const markerEnd = headings[i + 1]?.start ?? end;
       const globs = lines2.slice(heading.start, markerEnd - 1).flatMap((text) => /<!--\s*runbook-covers:\s*(.*?)\s*-->/.exec(text)?.[1].split(",").map((s) => s.trim()) ?? []);
-      const affected = changed.filter((path2) => globs.some((glob) => matches(glob, path2)));
+      const affected = changed.filter((path2) => globs.some((glob) => matches(glob, path2)) && !changesOnlyUses(path2));
       if (affected.length && !ranges.some((r) => r.count > 0 && r.start < end && r.start + r.count > heading.start)) {
         findings.push({ kind: "runbook-section-stale", doc, line: heading.start, detail: `${heading.title}: changed ${affected.join(", ")}; update this section or declare Runbook-Unaffected: <reason>`, section: { heading: heading.title, level: heading.level, startLine: heading.start, endLine: end - 1, covers: globs }, sources: affected });
       }
@@ -19062,10 +19071,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.165",
-    tag: "v4.5.165",
-    commit: "e50afbd193c3",
-    npm: "@mutmutco/cli@4.5.165"
+    version: "4.5.167",
+    tag: "v4.5.167",
+    commit: "75accc753c8f",
+    npm: "@mutmutco/cli@4.5.167"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19082,14 +19091,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.165"
+          v3Target: "v4.5.167"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.165 and redeploy the Hub Lambda from tag v4.5.165 (e50afbd193c3); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.165 (@mutmutco/cli@4.5.165, tag commit e50afbd193c3 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.167 and redeploy the Hub Lambda from tag v4.5.167 (75accc753c8f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.167 (@mutmutco/cli@4.5.167, tag commit 75accc753c8f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -23249,7 +23258,6 @@ async function retireRcRuntime(deps, ctx, model, deployStatus, releasedRcSha) {
 }
 async function runTenantRedeploy(deps, options) {
   const { stage } = options;
-  const ref = options.ref ?? (stage === "dev" ? "development" : stage);
   const watch = options.watch ?? false;
   const repo = options.repo;
   const [owner, name] = repo.split("/");
@@ -23261,6 +23269,7 @@ async function runTenantRedeploy(deps, options) {
   const ctx = { repo, owner, slug: name.toLowerCase(), login };
   const meta = requireProjectMetaForTrain(await loadProjectMeta(deps, ctx), repo);
   const deployModel = requireDeployModel(meta, repo);
+  const ref = options.ref ?? (stage === "dev" || stage === "main" && meta.releaseTrack === "single" ? "development" : stage);
   if (!isCentralDispatchModel(deployModel)) {
     throw new Error(`${repo} is ${deployModel}, not a centrally-dispatched model (tenant-container/solo-container/static-cdn) \u2014 there is no central tenant-deploy run to retry (its deploy fires from its own workflow)`);
   }
@@ -57393,7 +57402,7 @@ tenant.command("status <owner/repo> <stage>").description("read tenant runtime r
   console.log(JSON.stringify(result, null, 2));
   if (result.publicProbe?.ok === false || result.edgeCertificate?.missing) process.exitCode = 1;
 });
-tenant.command("redeploy <owner/repo> <stage>").description("re-dispatch the central tenant-deploy.yml for an already-promoted ref (no re-tag/merge); train-authority gated").option("--ref <ref>", "ref to deploy (defaults to the stage branch rc/main, or `development` for dev \u2014 the promoted/staging ref)").option("--watch", "block on the dispatched run and report its outcome (gh run watch --exit-status)").option("--json", "machine-readable output").action(async (repo, stage, o) => {
+tenant.command("redeploy <owner/repo> <stage>").description("re-dispatch the central tenant-deploy.yml for an already-promoted ref (no re-tag/merge); train-authority gated").option("--ref <ref>", "ref to deploy (defaults to the stage branch rc/main, or `development` for dev and for a single-track repo's main)").option("--watch", "block on the dispatched run and report its outcome (gh run watch --exit-status)").option("--json", "machine-readable output").action(async (repo, stage, o) => {
   if (stage !== "dev" && stage !== "rc" && stage !== "main") return fail("runtime tenant redeploy: <stage> must be dev, rc, or main");
   try {
     const raw = await runTenantRedeploy(trainApplyDeps(), { repo, stage, ref: o.ref, watch: o.watch });

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.165",
+  "version": "4.5.167",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.165",
+  "version": "4.5.167",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",