@mutmutco/codex-plugin 4.5.99 → 4.5.100

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.99",
+  "version": "4.5.100",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -8288,6 +8288,28 @@ async function postJson(pathSuffix, payload, deps, method = "POST", opts = {}) {
     return { ok: false, status: 0, body: null, error: e.message, unreachable: "transport" };
   }
 }
+async function edgeDnsForStage(slug, stage, deps, ensure = false) {
+  if (!deps.baseUrl) throw new Error("Hub API URL unavailable");
+  const token = await deps.token();
+  if (!token) throw new Error("Hub session token unavailable");
+  const path2 = `/projects/${encodeURIComponent(slug)}/edge-dns/${stage}`;
+  let body;
+  if (ensure) {
+    const write = await postJson(path2, {}, deps, "POST", { noRetry: true });
+    if (!write.ok) throw new Error(`Hub edge dns ensure failed: ${write.error ?? `HTTP ${write.status}`}`);
+    body = write.body;
+  } else {
+    const res = await retriedFetch(
+      deps,
+      `${deps.baseUrl.replace(/\/$/, "")}${path2}`,
+      { method: "GET", headers: { Authorization: `Bearer ${token}` } }
+    );
+    if (!res.ok) throw new Error(`Hub edge dns read failed: HTTP ${res.status}`);
+    body = await res.json();
+  }
+  if (typeof body?.required !== "boolean") throw new Error("Hub edge dns response invalid");
+  return body;
+}
 async function edgeCertificateForStage(slug, stage, deps, ensure = false) {
   if (!deps.baseUrl) throw new Error("Hub API URL unavailable");
   const token = await deps.token();
@@ -15861,8 +15883,11 @@ function edgeDomainsByStage(meta) {
   }
   return out;
 }
-function inferEdgeDomainsForWrite(slug) {
+function inferEdgeDomainsForWrite(slug, suite) {
   const subdomain = defaultSubdomain(slug);
+  if (suite === "mm-work" && slug !== suite) {
+    return { dev: `dev.${subdomain}.mutmut.work`, main: `${subdomain}.mutmut.work` };
+  }
   return {
     dev: `dev.${subdomain}.mutatismutandis.co`,
     rc: `rc.${subdomain}.mutatismutandis.co`,
@@ -16236,10 +16261,11 @@ function buildRegisterPayload(repo, cls, vars, options = {}) {
   }
   const deployModel = inferDeployModelForWrite({ ...shape, projectType }, parsedRepo.fullName);
   const releaseTrack = (isReleaseTrack(options.releaseTrack) ? options.releaseTrack : void 0) ?? (isReleaseTrack(options.existing?.releaseTrack) ? options.existing.releaseTrack : void 0) ?? resolveBootstrapReleaseTrack(cls, void 0);
-  const inferredDomains = inferEdgeDomainsForWrite(slug);
-  const derivedDomains = Object.fromEntries(branchesForTrack(releaseTrack).map((branch) => {
+  const suite = vars.SUITE || options.existing?.suite || void 0;
+  const inferredDomains = inferEdgeDomainsForWrite(slug, suite);
+  const derivedDomains = Object.fromEntries(branchesForTrack(releaseTrack).flatMap((branch) => {
     const stage = branch === "development" ? "dev" : branch;
-    return [stage, inferredDomains[stage]];
+    return inferredDomains[stage] ? [[stage, inferredDomains[stage]]] : [];
   }));
   const num = (v) => {
     if (v == null || v === "") return void 0;
@@ -16263,6 +16289,7 @@ function buildRegisterPayload(repo, cls, vars, options = {}) {
     // Identity. name/division default off the repo name when the skill didn't pass them.
     name: vars.NAME || parsedRepo.name,
     division: vars.DIVISION || parsedRepo.name.split("-")[0] || void 0,
+    suite: vars.SUITE || void 0,
     repos: [`${parsedRepo.owner}/${slug}`],
     branch: vars.BRANCH || (cls === "content" ? "main" : "development"),
     class: cls,
@@ -16362,6 +16389,11 @@ function decideSeedPrAction(openPrs) {
   }
   return { action: "create" };
 }
+function decideFirstDevDeploy(input) {
+  if (!input.devRowWritten) return "skip";
+  if (input.seedMode === "direct") return "dispatch";
+  return (input.seedPrs ?? []).some((pr) => typeof pr?.mergedAt === "string" && pr.mergedAt !== "") ? "dispatch" : "defer";
+}
 function decideSeedDelivery(branchRules) {
   const rules = Array.isArray(branchRules) ? branchRules : [];
   const types = new Set(
@@ -17572,10 +17604,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.99",
-    tag: "v4.5.99",
-    commit: "44a40b83250e",
-    npm: "@mutmutco/cli@4.5.99"
+    version: "4.5.100",
+    tag: "v4.5.100",
+    commit: "ba367dd0d814",
+    npm: "@mutmutco/cli@4.5.100"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17592,14 +17624,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.99"
+          v3Target: "v4.5.100"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.99 and redeploy the Hub Lambda from tag v4.5.99 (44a40b83250e); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.99 (@mutmutco/cli@4.5.99, tag commit 44a40b83250e \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.100 and redeploy the Hub Lambda from tag v4.5.100 (ba367dd0d814); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.100 (@mutmutco/cli@4.5.100, tag commit ba367dd0d814 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -33890,6 +33922,28 @@ function edgeCertificateChecks(results) {
     }];
   });
 }
+function edgeDnsChecks(results, repo) {
+  return results.flatMap(({ stage, status, error }) => {
+    if (!error && status?.required === false) return [];
+    const bad = (status?.hosts ?? []).filter((h) => h.status === "missing" || h.status === "conflict");
+    const ok = !error && status?.complete !== false && bad.length === 0;
+    return [{
+      ok,
+      label: `Cloudflare edge DNS: ${stage}`,
+      detail: ok ? void 0 : error ? `DNS records unreadable (${error})` : `${bad.map((h) => `${h.host} ${h.status}${h.hint ? ` (${h.hint})` : ""}`).join("; ")} \u2014 run: mmi-cli devops runtime edge dns ensure ${repo} ${stage}`
+    }];
+  });
+}
+function firstDevDeployCheck(repo, facts, factsRead) {
+  const dev = facts?.stages?.dev;
+  if (!factsRead || dev?.present !== true) return [];
+  const ok = Boolean(dev.deployedAt || dev.deployedTag);
+  return [{
+    ok,
+    label: "first dev deploy happened",
+    detail: ok ? void 0 : `DEPLOY#dev has never deployed \u2014 run: mmi-cli devops runtime tenant redeploy ${repo} dev --watch`
+  }];
+}
 async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
   const branchesWanted = expectedBranches(repoClass, releaseTrack);
   const baseBranch = releaseTrack === "trunk" || repoClass === "content" ? "main" : "development";
@@ -34012,6 +34066,7 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
     if (check) checks.push(check);
   }
   checks.push(...edgeCertificateChecks(deps.edgeCertificates ?? []));
+  checks.push(...edgeDnsChecks(deps.edgeDns ?? [], repo));
   const portRangeCheck = centralContainerPortRangeCheck(deps.deployModel, deps.projectMeta?.portRange, repo);
   if (portRangeCheck) checks.push(portRangeCheck);
   checks.push(...deployRowChecks(
@@ -34022,6 +34077,7 @@ async function verifyBootstrap(repo, repoClass, deps, releaseTrack) {
     deps.deployFactsRead === true,
     deps.projectMeta?.suite
   ));
+  checks.push(...firstDevDeployCheck(repo, deps.deployFacts, deps.deployFactsRead === true));
   const readme = await contentText(deps, repo, baseBranch, "README.md");
   checks.push({
     ok: readme !== null && readme.includes("## Agent context"),
@@ -34460,6 +34516,13 @@ function registerBootstrapCommands(program3) {
           return { stage, error: e.message };
         }
       })),
+      edgeDns: await Promise.all(["dev", "rc", "main"].filter((stage) => deployFacts?.stages?.[stage]?.present).map(async (stage) => {
+        try {
+          return { stage, status: await edgeDnsForStage(slug, stage, reg) };
+        } catch (e) {
+          return { stage, error: e.message };
+        }
+      })),
       pushAllowlistOwners: verifyOwners,
       pushAllowlistOwnersRead: verifyOwnersRead,
       readLocalFile: (path2) => path2 === "projects.json" && apiProjects != null ? apiProjects : (0, import_node_fs28.existsSync)(path2) ? (0, import_node_fs28.readFileSync)(path2, "utf8") : null,
@@ -34857,7 +34920,7 @@ function registerBootstrapCommands(program3) {
         github,
         deployFacts: controlDeployFacts,
         deployFactsRead: controlDeployFacts !== null,
-        plannedMainDomain: registryMeta?.edgeDomains?.main ?? inferEdgeDomainsForWrite(slug).main
+        plannedMainDomain: registryMeta?.edgeDomains?.main ?? inferEdgeDomainsForWrite(slug, suiteSlug || vars.SUITE).main
       });
       if (o.box) {
         if (applyDeployModel !== "tenant-container" && applyDeployModel !== "solo-container")
@@ -34878,7 +34941,7 @@ function registerBootstrapCommands(program3) {
             host: found.box.address,
             box: found.box.name,
             owners: scan.rows,
-            domains: { ...inferEdgeDomainsForWrite(slug), ...domains, ...boxDomains },
+            domains: { ...inferEdgeDomainsForWrite(slug, suiteSlug || vars.SUITE), ...domains, ...boxDomains },
             fileless: applyDeployModel === "tenant-container"
           });
           controlRows = planned.rows;
@@ -35309,6 +35372,42 @@ ${onlyManagedBlock ? `Only the marker-bounded Hub-managed block inside repo-owne
           ddbWrites.push({ slug, action: `deploy-${coord.stage}`, record: payload });
           applied.push(`DEPLOY#${coord.stage} ${coord.host}:${coord.port}${coord.domain ? ` ${coord.domain}` : ""}`);
         }
+        for (const coord of boxDeployPlan) {
+          try {
+            const dns = await edgeDnsForStage(slug, coord.stage, registryClientDeps(await loadConfig()), true);
+            const bad = (dns.hosts ?? []).filter((h) => h.status === "conflict");
+            applied.push(`edge dns ${coord.stage}: ${dns.required ? (dns.hosts ?? []).map((h) => `${h.host} ${h.status}`).join(", ") : "not required"}`);
+            for (const h of bad) deferredFailures.push(`edge dns ${coord.stage} ${h.host}: ${h.hint}`);
+          } catch (e) {
+            applied.push(`edge dns ${coord.stage} (failed: ${e.message})`);
+            deferredFailures.push(`edge dns ${coord.stage} not ensured: ${e.message}; re-run: mmi-cli devops runtime edge dns ensure ${repo} ${coord.stage}`);
+          }
+        }
+        let seedPrs = [];
+        if (seedPlan.mode === "pr" && seedPlan.branch) {
+          try {
+            seedPrs = JSON.parse((await gh2(["pr", "list", "--repo", repo, "--head", seedPlan.branch, "--base", baseBranch, "--state", "all", "--json", "number,url,state,mergedAt"])).stdout || "[]");
+          } catch {
+            seedPrs = [];
+          }
+        }
+        const firstDeploy = decideFirstDevDeploy({ devRowWritten: boxDeployPlan.some((c) => c.stage === "dev"), seedMode: seedPlan.mode, seedPrs });
+        if (firstDeploy === "defer") {
+          applied.push("first dev deploy: deferred \u2014 the seed PR is not merged; the Hub dev auto-deploy runs on its merge (DEPLOY#dev now exists)");
+        } else if (firstDeploy === "dispatch") {
+          try {
+            const out = await execFileP(process.execPath, [process.argv[1], ...canonicalArgvFor(["runtime", "tenant", "redeploy", repo, "dev", "--json"])], { timeout: 12e4 });
+            let run = {};
+            try {
+              run = JSON.parse(out.stdout);
+            } catch {
+            }
+            applied.push(`first dev deploy dispatched at development: ${run.runUrl ?? run.dispatch ?? "run not yet correlated"}`);
+          } catch (e) {
+            applied.push(`first dev deploy (failed: ${e.message.split("\n")[0]})`);
+            deferredFailures.push(`first dev deploy not dispatched; run: mmi-cli devops runtime tenant redeploy ${repo} dev --watch`);
+          }
+        }
         controlRows = controlRows.map((row) => {
           const coord = boxDeployPlan.find((p) => row.target === `DEPLOY#${p.stage}`);
           return coord ? {
@@ -53143,6 +53242,17 @@ function registerEdgeCommands(program3) {
       process.exitCode = 1;
     }
   });
+  edge.command("dns <action> <owner/repo> <stage>").description("read (`status`) or create-when-missing (`ensure`, master-only) the proxied Cloudflare A records for a registered DEPLOY# row; existing records are never modified").action(async (action, repo, stage) => {
+    if (action !== "status" && action !== "ensure") return fail("runtime edge dns: <action> must be status or ensure");
+    if (stage !== "dev" && stage !== "rc" && stage !== "main") return fail("runtime edge dns: <stage> must be dev, rc, or main");
+    try {
+      const result = await edgeDnsForStage(slugOf(repo), stage, registryClientDeps(await loadConfig()), action === "ensure");
+      console.log(JSON.stringify(result, null, 2));
+      if (result.required && result.complete === false) process.exitCode = 1;
+    } catch (e) {
+      fail(`runtime edge dns: ${e.message}`);
+    }
+  });
 }
 
 // src/command-register-developer.ts

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.99",
+  "version": "4.5.100",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.99",
+  "version": "4.5.100",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/bootstrap/SKILL.md

@@ -481,6 +481,9 @@ web tenants, `--project-type desktop-game --deploy-model none --clear-web-profil
 `--project-type mobile-app --deploy-model none --clear-web-profile` for a phone app distributed through the
 app stores, and
 `--class content --project-type content --deploy-model content --clear-web-profile` for a content/KB repo.
+An **MM-Work module** adds `--var SUITE=mm-work` (#7944): it registers `suite: mm-work` and derives its
+own `dev.<sub>.mutmut.work` + `<sub>.mutmut.work` hosts, with no rc host (the suite serves its rc from the
+live host). Without it, apply derives the `*.mutatismutandis.co` web-app hosts, which a module never uses.
 Run the apply path with the board variables discovered above, or register the same values with
 `mmi-cli oracle org project set` from the Hub or from the target project checkout:
 

package/skills/org-guide/references/domains-and-oauth.md

@@ -4,9 +4,13 @@ MMI owns the central project registry and provisioning workflows. Read
 `mmi-cli oracle org project get <owner/repo> --json` before changing hostnames or login settings.
 Use the declared edge domains for each stage; do not guess hostnames from a slug or create a
 second DNS/deployment control plane in a product repository. New project setup goes through
-[bootstrap](../../bootstrap/SKILL.md).
+[bootstrap](../../bootstrap/SKILL.md). An MM-Work suite module serves from its own
+`dev.<name>.mutmut.work` and `<name>.mutmut.work` hosts, with no rc host; bootstrap declares them
+with `--var SUITE=mm-work`.
 
 Cloudflare owns public DNS and edge TLS. Preserve unrelated records during an authorized change.
+The Hub creates each registered host's proxied record during bootstrap and never edits an existing
+one; check or re-run it with `mmi-cli devops runtime edge dns status|ensure <owner/repo> <stage>`.
 A dev stage is private only after its independent edge-block check succeeds. A configured record
 or successful deployment alone does not prove access control. Use [stage](../../stage/SKILL.md)
 for the supported private live workflow.