@mutmutco/codex-plugin 4.5.168 → 4.5.170

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.168",
+  "version": "4.5.170",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -10145,6 +10145,19 @@ function retriedFetch(deps, url, init) {
     sleep: deps.retrySleep
   });
 }
+async function backfillDeployHistory(since, apply, deps) {
+  if (!deps.baseUrl) throw new Error("Hub API URL not configured");
+  const token = await deps.token();
+  if (!token) throw new Error("no Hub session token (run `gh auth login`)");
+  const res = await retriedFetch({ ...deps, timeoutMs: TENANT_DEPLOY_TIMEOUT_MS }, `${deps.baseUrl.replace(/\/$/, "")}/deploy-history/backfill`, {
+    method: "POST",
+    headers: { Authorization: `Bearer ${token}`, "Content-Type": "application/json" },
+    body: JSON.stringify({ since, dryRun: !apply })
+  });
+  const body = await res.json();
+  if (!res.ok) throw new Error(`deploy history backfill HTTP ${res.status}: ${body.error ?? res.statusText}`);
+  return body;
+}
 async function fetchTrainAuthority(repo, deps) {
   if (!deps.baseUrl) return { ok: false, error: "Hub API URL not configured" };
   const token = await deps.token();
@@ -19074,10 +19087,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.168",
-    tag: "v4.5.168",
-    commit: "de9709373c8b",
-    npm: "@mutmutco/cli@4.5.168"
+    version: "4.5.170",
+    tag: "v4.5.170",
+    commit: "db6d0ad102a1",
+    npm: "@mutmutco/cli@4.5.170"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19094,14 +19107,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.168"
+          v3Target: "v4.5.170"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.168 and redeploy the Hub Lambda from tag v4.5.168 (de9709373c8b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.168 (@mutmutco/cli@4.5.168, tag commit de9709373c8b \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.170 and redeploy the Hub Lambda from tag v4.5.170 (db6d0ad102a1); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.170 (@mutmutco/cli@4.5.170, tag commit db6d0ad102a1 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -23272,7 +23285,11 @@ async function runTenantRedeploy(deps, options) {
   const ctx = { repo, owner, slug: name.toLowerCase(), login };
   const meta = requireProjectMetaForTrain(await loadProjectMeta(deps, ctx), repo);
   const deployModel = requireDeployModel(meta, repo);
-  const ref = options.ref ?? (stage === "dev" || stage === "main" && meta.releaseTrack === "single" ? "development" : stage);
+  const singleTrackMain = stage === "main" && meta.releaseTrack === "single";
+  if (singleTrackMain && options.ref === "main") {
+    throw new Error(`${repo} is single-track: its \`main\` branch is stale, so --ref main would roll main back. Pin --ref <last good deployed SHA or development head>, or omit --ref to deploy development.`);
+  }
+  const ref = options.ref ?? (stage === "dev" || singleTrackMain ? "development" : stage);
   if (!isCentralDispatchModel(deployModel)) {
     throw new Error(`${repo} is ${deployModel}, not a centrally-dispatched model (tenant-container/solo-container/static-cdn) \u2014 there is no central tenant-deploy run to retry (its deploy fires from its own workflow)`);
   }
@@ -31072,6 +31089,7 @@ function consolidateCommandNamespaces(program3) {
   const runtimeDeploy = runtime.command("deploy").description("runtime deployment status");
   const deploy = child(program3, "deploy");
   move(deploy, runtimeDeploy, "status");
+  move(deploy, runtimeDeploy, "history-backfill");
   remove(program3, "deploy");
   move(program3, runtime, "box");
   move(program3, runtime, "edge");
@@ -37879,6 +37897,19 @@ function formatDeployStatus(r) {
 var STAGES2 = ["dev", "rc", "main"];
 function registerDeployCommands(program3) {
   const deploy = program3.command("deploy").description("per-stage deploy observability \u2014 last run, health, and running version (#2688)");
+  deploy.command("history-backfill").description("master-only registry history backfill from Hub tenant-deploy runs (dry-run by default; no dispatch)").requiredOption("--since <ISO>", "include runs created at or after this timestamp").option("--apply", "write successful runs to Hub deploy history").option("--json", "machine-readable counts").action(async (o) => {
+    try {
+      const report = await backfillDeployHistory(o.since, o.apply === true, registryClientDeps(await loadConfig()));
+      if (o.json) console.log(JSON.stringify(report, null, 2));
+      else {
+        console.log(`${report.dryRun ? "Dry-run" : "Applied"} since ${report.since}: ${report.totalRuns} runs, ${report.written} written`);
+        for (const [repo, counts] of Object.entries(report.perRepo)) console.log(`${repo}: ${counts.success} success, ${counts.failed} failed, ${counts.cancelled} cancelled, ${counts.other} other`);
+        console.log(`Skipped: ${report.skipped.nonSha} non-SHA, ${report.skipped.unregistered} unregistered/ambiguous, ${report.skipped.badTitle} bad title`);
+      }
+    } catch (e) {
+      return failGraceful(`deploy history-backfill: ${e.message}`);
+    }
+  });
   deploy.command("status <stage>").description("last deploy run + runtime health probe + running version for a stage (defaults to the current repo); a root answering 401/403/404 is re-probed at /health and the `url` field names the endpoint that answered (#6137)").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action(async (stage, o) => {
     if (!STAGES2.includes(stage)) {
       return fail(`runtime deploy status: <stage> must be dev, rc, or main`);
@@ -57405,7 +57436,7 @@ tenant.command("status <owner/repo> <stage>").description("read tenant runtime r
   console.log(JSON.stringify(result, null, 2));
   if (result.publicProbe?.ok === false || result.edgeCertificate?.missing) process.exitCode = 1;
 });
-tenant.command("redeploy <owner/repo> <stage>").description("re-dispatch the central tenant-deploy.yml for an already-promoted ref (no re-tag/merge); train-authority gated").option("--ref <ref>", "ref to deploy (defaults to the stage branch rc/main, or `development` for dev and for a single-track repo's main)").option("--watch", "block on the dispatched run and report its outcome (gh run watch --exit-status)").option("--json", "machine-readable output").action(async (repo, stage, o) => {
+tenant.command("redeploy <owner/repo> <stage>").description("re-dispatch the central tenant-deploy.yml for an already-promoted ref (no re-tag/merge); train-authority gated").option("--ref <ref>", "ref to deploy (defaults to the stage branch rc/main, or `development` for dev and for a single-track repo's main, where --ref main is refused)").option("--watch", "block on the dispatched run and report its outcome (gh run watch --exit-status)").option("--json", "machine-readable output").action(async (repo, stage, o) => {
   if (stage !== "dev" && stage !== "rc" && stage !== "main") return fail("runtime tenant redeploy: <stage> must be dev, rc, or main");
   try {
     const raw = await runTenantRedeploy(trainApplyDeps(), { repo, stage, ref: o.ref, watch: o.watch });

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.168",
+  "version": "4.5.170",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.168",
+  "version": "4.5.170",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",