@mutmutco/codex-plugin 4.5.97 → 4.5.98

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.97",
+  "version": "4.5.98",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -17345,10 +17345,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.97",
-    tag: "v4.5.97",
-    commit: "72af9cdfc1b7",
-    npm: "@mutmutco/cli@4.5.97"
+    version: "4.5.98",
+    tag: "v4.5.98",
+    commit: "125c59187d10",
+    npm: "@mutmutco/cli@4.5.98"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17365,14 +17365,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.97"
+          v3Target: "v4.5.98"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.97 and redeploy the Hub Lambda from tag v4.5.97 (72af9cdfc1b7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.97 (@mutmutco/cli@4.5.97, tag commit 72af9cdfc1b7 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.98 and redeploy the Hub Lambda from tag v4.5.98 (125c59187d10); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.98 (@mutmutco/cli@4.5.98, tag commit 125c59187d10 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -30962,7 +30962,7 @@ init_hub_auth();
 init_github_client();
 
 // src/project-set.ts
-var UNSET_KEYS = ["projectAdmins", "installer", "oauth", "requiredRuntimeSecrets", "requiredBuildSecrets", "tenantTasks", "secrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "releaseChannel", "releaseLanguage", "dsManifestPath", "consumesDesignSystem", "ci", "requiredChecks", "requiredCheckBranches", "ciExemptReason", "gate", "seedCanary", "notifyOnDeploy", "vercelVersionEnv", "stageAllowlist", "suiteHold"];
+var UNSET_KEYS = ["projectAdmins", "installer", "oauth", "requiredRuntimeSecrets", "requiredBuildSecrets", "tenantTasks", "secrets", "edgeDomains", "requiredGcpApis", "publishRequired", "publishDir", "releaseChannel", "releaseLanguage", "dsManifestPath", "consumesDesignSystem", "ci", "requiredChecks", "requiredCheckBranches", "ciExemptReason", "gate", "seedCanary", "notifyOnDeploy", "vercelVersionEnv", "stageAllowlist", "suiteHold", "internalPeers"];
 var UNSET_KEY_SET = new Set(UNSET_KEYS);
 var RUNTIME_SECRET_STAGES = ["dev", "rc", "main"];
 var SECRET_CONSUMERS = ["runtime", "build", "lambda", "actions", "agent", "box"];
@@ -31497,6 +31497,7 @@ var SETTABLE_VAR_KEYS = [
   "requiredRuntimeSecrets",
   "requiredBuildSecrets",
   "tenantTasks",
+  "internalPeers",
   "edgeDomains",
   "statusFieldId",
   "statusOptions",
@@ -31535,6 +31536,7 @@ var SETTABLE_VAR_HINTS = {
   requiredRuntimeSecrets: 'JSON stage map, e.g. {"dev":["KEY"],"rc":["KEY"],"main":["KEY"]}',
   requiredBuildSecrets: 'JSON flat array, e.g. ["NODE_AUTH_TOKEN=@github-packages-token"]',
   tenantTasks: 'JSON map {name:{service,command[],stages[],timeoutSeconds?,artifact?:"required",secretOutput?:{path,vault:{repo,key},overwrite?}}} \u2014 merged per entry, at most 20 stored in total; retire ONE task with --unset-task NAME; use {artifact} in argv when required; a secretOutput is master-only',
+  internalPeers: "JSON {owner/repo:[dev|rc|main]} \u2014 same-box suite peers via the box Caddy; clear with --unset internalPeers (#7886)",
   secrets: "JSON catalog map keyed by KEY {key,purpose,group,owner,stages[],consumers[]} \u2014 merged per entry; drop ONE entry with --unset-secret KEY; clear ALL with --unset secrets --confirm-clear-secrets; prefer --secrets-file",
   edgeDomains: "JSON {dev,rc,main} domain map",
   statusOptions: "JSON name\u2192id map",
@@ -31611,6 +31613,26 @@ function clearSecretsConfirmationError(unsets, existing, confirmed) {
   if (confirmed) return null;
   return `org project set: --unset secrets clears the WHOLE catalog for ${existing?.slug ?? "this project"} (${count} declared entr${count === 1 ? "y" : "ies"} would be removed). To drop ONE entry use --unset-secret <KEY>; re-run with --confirm-clear-secrets to wipe all ${count}.`;
 }
+function parseInternalPeersVar(raw) {
+  let parsed;
+  try {
+    parsed = JSON.parse(raw);
+  } catch {
+    throw new Error("org project set: internalPeers must be valid JSON");
+  }
+  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("org project set: internalPeers must be a JSON object");
+  const entries = Object.entries(parsed);
+  if (entries.length < 1 || entries.length > 20) throw new Error("org project set: internalPeers holds 1-20 peer declarations");
+  const repoRe = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+  const validStages = /* @__PURE__ */ new Set(["dev", "rc", "main"]);
+  const out = {};
+  for (const [repo, rawStages] of entries) {
+    if (!repoRe.test(repo)) throw new Error("org project set: internalPeers key must look like owner/name \u2014 got " + JSON.stringify(repo));
+    if (!Array.isArray(rawStages) || rawStages.length < 1 || rawStages.length > 3 || rawStages.some((stg) => typeof stg !== "string" || !validStages.has(stg)) || new Set(rawStages).size !== rawStages.length) throw new Error("org project set: internalPeers stages must be a non-empty array of unique dev/rc/main values");
+    out[repo] = rawStages;
+  }
+  return out;
+}
 function parseSuiteHoldVar(raw) {
   let parsed;
   try {
@@ -31673,6 +31695,8 @@ function buildProjectSetPatch(input) {
       patch[key] = parseBuildSecretsVar(raw);
     } else if (key === "tenantTasks") {
       patch[key] = parseTenantTasksVar(raw);
+    } else if (key === "internalPeers") {
+      patch[key] = parseInternalPeersVar(raw);
     } else if (key === "secrets") {
       patch[key] = parseSecretsCatalogVar(raw);
     } else if (key === "edgeDomains") {
@@ -36547,7 +36571,7 @@ function readSuiteHotfix(path2) {
   } catch {
     throw new Error(`suite hotfix record unreadable at ${path2}; repair it, never restart`);
   }
-  if (r.schema !== "mmi-suite-hotfix/v1" || !r.repo || !r.member || !r.from || r.tag !== void 0 && !RELEASE_TAG.test(r.tag) || r.released && !r.tag || r.pinMerged && !r.released || r.leadTag !== void 0 && (!RELEASE_TAG.test(r.leadTag) || !r.pinMerged) || r.leadReleased && !r.leadTag || r.mapped && !r.leadReleased)
+  if (r.schema !== "mmi-suite-hotfix/v1" || !r.repo || !r.member || !r.from || r.tag !== void 0 && !RELEASE_TAG.test(r.tag) || r.released && !r.tag || r.pinMerged && !r.released || r.mainPublished && !r.released || r.leadTag !== void 0 && (!RELEASE_TAG.test(r.leadTag) || !r.pinMerged) || r.leadReleased && !r.leadTag || r.mapped && !r.leadReleased)
     throw new Error(`suite hotfix record has unknown or invalid state at ${path2}; repair it, never restart`);
   return r;
 }
@@ -36562,8 +36586,10 @@ async function suiteHotfix(deps, opts) {
   if (found.repo === SUITE_REPO) throw new Error(`${SUITE_REPO} is the suite lead; hotfix a member, this command cuts the lead; nothing was written`);
   const held = await deps.hold(found);
   if (held) throw new Error(`${found.repo} is HELD (${held.reason}); clear it with suite hold clear before a suite hotfix; nothing was written`);
+  const mainPath = mainBundlePath(found.bundles);
   const plan = [
     `${found.repo}: hotfix start --from ${opts.from} + release (suite-solo, in-process)`,
+    `${found.repo}: publish main bundle (module-rc-publish channel=main) at ${mainPath}`,
     `${SUITE_REPO}: main pin PR for ${found.id}, wait for merge`,
     `${SUITE_REPO}: hotfix (patch) carrying only the merged pin PR onto main`,
     `${SUITE_REPO}: record suite version -> member versions on its release`
@@ -36582,6 +36608,7 @@ async function suiteHotfix(deps, opts) {
   const save = () => writeSuiteHotfix(path2, rec);
   save();
   const resume = `rerun suite hotfix ${found.id} --from ${rec.from} --owner-go to resume`;
+  if (!rec.released) await deps.preflightMain(found.repo, mainPath);
   if (!rec.tag) {
     const started = await deps.hotfixStart(found.repo, { from: rec.from, ack: rec.ack });
     if (!RELEASE_TAG.test(started.tag)) throw new Error(`${found.repo}: hotfix start returned no vX.Y.Z tag`);
@@ -36599,6 +36626,15 @@ async function suiteHotfix(deps, opts) {
     rec.released = true;
     save();
   }
+  if (!rec.mainPublished) {
+    try {
+      await deps.publishMain(found.repo, rec.tag, mainPath);
+    } catch (e) {
+      throw new Error(`${found.repo}: main bundle publish failed (${e.message}); ${rec.tag} is released: ${resume}`);
+    }
+    rec.mainPublished = true;
+    save();
+  }
   if (!rec.pinMerged) {
     const pin = await deps.soloPin(found.repo, rec.tag);
     if (pin.status === "superseded") throw new Error(`${found.id} pin at ${rec.tag} is superseded by ${pin.pr}; a newer ${found.id} release owns the pin; stop`);

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.97",
+  "version": "4.5.98",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.97",
+  "version": "4.5.98",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",