@mutmutco/codex-plugin 4.5.172 → 4.5.174

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.172",
+  "version": "4.5.174",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -14725,12 +14725,23 @@ async function markStaleClaimStamps(scope, readComments, options = {}) {
   const actor = options.actor ?? describeSessionIdentity();
   const now = options.now ?? Date.now();
   const promoted = [];
-  for (const bucket of ["userOwned", "claimable", "unownedInFlight", "taken"]) {
+  const buckets = ["userOwned", "claimable", "unownedInFlight", "taken"];
+  const issues = buckets.flatMap((bucket) => scope[bucket]).filter((item) => item.contentType === "Issue");
+  const read = /* @__PURE__ */ new Map();
+  let next = 0;
+  const worker = async () => {
+    while (next < issues.length) {
+      const item = issues[next++];
+      read.set(item, await readComments(item).catch(() => void 0));
+    }
+  };
+  await Promise.all(Array.from({ length: Math.min(WRITE_PROBE_CONCURRENCY, issues.length) }, () => worker()));
+  for (const bucket of buckets) {
     const kept = [];
     for (const item of scope[bucket]) {
       kept.push(item);
       if (item.contentType !== "Issue") continue;
-      const comments = await readComments(item).catch(() => void 0);
+      const comments = read.get(item);
       const marker = comments ? latestClaimMarker(comments) : void 0;
       if (!marker) continue;
       const prs = (options.pullRequests ?? []).filter((pr) => pr.closesIssues.some((ref) => ref.toLowerCase() === item.ref.toLowerCase()));
@@ -19093,10 +19104,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.172",
-    tag: "v4.5.172",
-    commit: "d776fa5eb182",
-    npm: "@mutmutco/cli@4.5.172"
+    version: "4.5.174",
+    tag: "v4.5.174",
+    commit: "2db083c19203",
+    npm: "@mutmutco/cli@4.5.174"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19113,14 +19124,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.172"
+          v3Target: "v4.5.174"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.172 and redeploy the Hub Lambda from tag v4.5.172 (d776fa5eb182); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.172 (@mutmutco/cli@4.5.172, tag commit d776fa5eb182 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.174 and redeploy the Hub Lambda from tag v4.5.174 (2db083c19203); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.174 (@mutmutco/cli@4.5.174, tag commit 2db083c19203 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -33199,7 +33210,7 @@ init_hub_auth();
 init_github_client();
 
 // src/project-set.ts
-var UNSET_KEYS = ["projectAdmins", "installer", "oauth", "requiredRuntimeSecrets", "requiredBuildSecrets", "tenantTasks", "secrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "releaseChannel", "releaseLanguage", "ci", "requiredChecks", "requiredCheckBranches", "ciExemptReason", "gate", "seedCanary", "notifyOnDeploy", "vercelVersionEnv", "stageAllowlist", "suiteHold", "internalPeers"];
+var UNSET_KEYS = ["projectAdmins", "installer", "oauth", "requiredRuntimeSecrets", "requiredBuildSecrets", "tenantTasks", "secrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "releaseChannel", "releaseLanguage", "ci", "requiredChecks", "requiredCheckBranches", "ciExemptReason", "gate", "seedCanary", "notifyOnDeploy", "vercelVersionEnv", "stageAllowlist", "suiteHold", "internalPeers", "previews"];
 var UNSET_KEY_SET = new Set(UNSET_KEYS);
 var RUNTIME_SECRET_STAGES = ["dev", "rc", "main"];
 var SECRET_CONSUMERS = ["runtime", "build", "lambda", "actions", "agent", "box"];
@@ -33589,6 +33600,24 @@ function parseStageAllowlistVar(raw) {
   }
   return { key: row.key, stages: row.stages };
 }
+function parsePreviewsVar(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error('org project set: previews must be JSON, e.g. {"seed":"deploy/preview-seed.sh"}');
+  }
+  const shape = "org project set: previews must be { seed, secrets? } \u2014 seed a repo-relative script path (no leading / or ..) and secrets a non-empty array (max 40) of env key names";
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error(shape);
+  const row = parsed;
+  const unknown = Object.keys(row).filter((key) => key !== "seed" && key !== "secrets");
+  if (unknown.length > 0) throw new Error(`org project set: previews has unknown field(s): ${unknown.join(", ")}`);
+  const { seed, secrets } = row;
+  if (typeof seed !== "string" || !/^[A-Za-z0-9][A-Za-z0-9._/-]{0,199}$/.test(seed) || seed.includes("..")) throw new Error(shape);
+  if (secrets === void 0) return { seed };
+  if (!Array.isArray(secrets) || secrets.length === 0 || secrets.length > 40 || !secrets.every((k) => typeof k === "string" && /^[A-Z_][A-Z0-9_]*$/.test(k))) throw new Error(shape);
+  return { seed, secrets };
+}
 function parseCiExemptReasonVar(raw) {
   const trimmed = raw.trim();
   if (!trimmed) throw new Error("org project set: ciExemptReason must be a non-empty reason (or use --unset ciExemptReason to clear it)");
@@ -33743,7 +33772,8 @@ var SETTABLE_VAR_KEYS = [
   "installer",
   "notifyOnDeploy",
   "vercelVersionEnv",
-  "stageAllowlist"
+  "stageAllowlist",
+  "previews"
 ];
 var SETTABLE_VAR_KEY_SET = new Set(SETTABLE_VAR_KEYS);
 var SETTABLE_VAR_HINTS = {
@@ -33775,6 +33805,7 @@ var SETTABLE_VAR_HINTS = {
   notifyOnDeploy: 'JSON stage array, e.g. ["dev"] \u2014 successful tenant-deploy sends <stage>-deployed to the project repo (#7358)',
   vercelVersionEnv: "JSON {project,key,team?} \u2014 train sets this Vercel env to the release tag before the main/rc push (#7362)",
   stageAllowlist: "JSON {key,stages[]} \u2014 `org access sync` writes the developer/admin company-email allowlist to <stage>/<key> for each listed stage (#7678)",
+  previews: "JSON {seed,secrets?} \u2014 per-PR preview contract; absent means previews off; clear with --unset previews (#8405)",
   ciExemptReason: "non-empty string \u2014 declares this deployable repo has no CI surface (#4265)",
   gate: "JSON {runtime,cmd,affectedCmd,workdir,cacheDepPath,pyVersion}"
 };
@@ -33970,6 +34001,8 @@ function buildProjectSetPatch(input) {
       patch[key] = parseVercelVersionEnvVar(raw);
     } else if (key === "stageAllowlist") {
       patch[key] = parseStageAllowlistVar(raw);
+    } else if (key === "previews") {
+      patch[key] = parsePreviewsVar(raw);
     } else if (key === "ciExemptReason") {
       patch[key] = parseCiExemptReasonVar(raw);
     } else if (key === "gate") {

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.172",
+  "version": "4.5.174",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.172",
+  "version": "4.5.174",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",