@mutmutco/codex-plugin 4.5.168 → 4.5.169

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.168",
+  "version": "4.5.169",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -19074,10 +19074,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.168",
-    tag: "v4.5.168",
-    commit: "de9709373c8b",
-    npm: "@mutmutco/cli@4.5.168"
+    version: "4.5.169",
+    tag: "v4.5.169",
+    commit: "4732697958bc",
+    npm: "@mutmutco/cli@4.5.169"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19094,14 +19094,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.168"
+          v3Target: "v4.5.169"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.168 and redeploy the Hub Lambda from tag v4.5.168 (de9709373c8b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.168 (@mutmutco/cli@4.5.168, tag commit de9709373c8b \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.169 and redeploy the Hub Lambda from tag v4.5.169 (4732697958bc); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.169 (@mutmutco/cli@4.5.169, tag commit 4732697958bc \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -23272,7 +23272,11 @@ async function runTenantRedeploy(deps, options) {
   const ctx = { repo, owner, slug: name.toLowerCase(), login };
   const meta = requireProjectMetaForTrain(await loadProjectMeta(deps, ctx), repo);
   const deployModel = requireDeployModel(meta, repo);
-  const ref = options.ref ?? (stage === "dev" || stage === "main" && meta.releaseTrack === "single" ? "development" : stage);
+  const singleTrackMain = stage === "main" && meta.releaseTrack === "single";
+  if (singleTrackMain && options.ref === "main") {
+    throw new Error(`${repo} is single-track: its \`main\` branch is stale, so --ref main would roll main back. Pin --ref <last good deployed SHA or development head>, or omit --ref to deploy development.`);
+  }
+  const ref = options.ref ?? (stage === "dev" || singleTrackMain ? "development" : stage);
   if (!isCentralDispatchModel(deployModel)) {
     throw new Error(`${repo} is ${deployModel}, not a centrally-dispatched model (tenant-container/solo-container/static-cdn) \u2014 there is no central tenant-deploy run to retry (its deploy fires from its own workflow)`);
   }
@@ -57405,7 +57409,7 @@ tenant.command("status <owner/repo> <stage>").description("read tenant runtime r
   console.log(JSON.stringify(result, null, 2));
   if (result.publicProbe?.ok === false || result.edgeCertificate?.missing) process.exitCode = 1;
 });
-tenant.command("redeploy <owner/repo> <stage>").description("re-dispatch the central tenant-deploy.yml for an already-promoted ref (no re-tag/merge); train-authority gated").option("--ref <ref>", "ref to deploy (defaults to the stage branch rc/main, or `development` for dev and for a single-track repo's main)").option("--watch", "block on the dispatched run and report its outcome (gh run watch --exit-status)").option("--json", "machine-readable output").action(async (repo, stage, o) => {
+tenant.command("redeploy <owner/repo> <stage>").description("re-dispatch the central tenant-deploy.yml for an already-promoted ref (no re-tag/merge); train-authority gated").option("--ref <ref>", "ref to deploy (defaults to the stage branch rc/main, or `development` for dev and for a single-track repo's main, where --ref main is refused)").option("--watch", "block on the dispatched run and report its outcome (gh run watch --exit-status)").option("--json", "machine-readable output").action(async (repo, stage, o) => {
   if (stage !== "dev" && stage !== "rc" && stage !== "main") return fail("runtime tenant redeploy: <stage> must be dev, rc, or main");
   try {
     const raw = await runTenantRedeploy(trainApplyDeps(), { repo, stage, ref: o.ref, watch: o.watch });

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.168",
+  "version": "4.5.169",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.168",
+  "version": "4.5.169",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",