@arjunkhera/atlas 0.4.57 → 0.4.58

package/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "atlas",
-  "version": "0.4.57",
+  "version": "0.4.58",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, for any repository.",
   "author": {
     "name": "Arjun Khera"

package/door/lib/runner.mjs

@@ -234,10 +234,12 @@ export function runnerClaim({ repo, issue, holder, gh = ghApi, now = Date.now()
 export const YOU = Object.freeze([/^sign #[1-9][0-9]{0,8}$/, /^read #[1-9][0-9]{0,8}$/, /^read item [0-9a-f]{8}$/, /^the merge door is off in the runner$/, /^start stopped$/]);
 const PR_NUMBER = /^[1-9][0-9]{0,8}$/;
 const RELEASE = /^[0-9]+\.[0-9]+\.[0-9]+$/;
+// A date alone read as midnight on 10 Nov 2026, so the line said 00:00 UTC.
+const UTC_TIME = /^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}(:[0-9]{2}(\.[0-9]{1,3})?)?Z$/;
 const refuseLine = (why) => { throw usage(`the run file ${why}`); };
 export function runLine({ repo, at, you = [], landed = [], opened = [], open_jobs = 0, release = null }) {
   if (!repoOk(repo)) refuseLine('needs repo as owner/name');
-  if (!Number.isFinite(new Date(at).getTime())) refuseLine('needs at as a time');
+  if (!(typeof at === 'number' || UTC_TIME.test(String(at))) || !Number.isFinite(new Date(at).getTime())) refuseLine('needs at as a full UTC time, such as 2026-11-10T03:48:00Z');
   for (const one of you) if (!YOU.some((form) => form.test(String(one)))) refuseLine(`holds a "you" entry that is not a known form: ${JSON.stringify(String(one).slice(0, 40))}`);
   for (const pull of [...landed, ...opened]) if (!PR_NUMBER.test(String(pull?.number))) refuseLine('holds a pull request with no number');
   for (const pull of landed) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arjunkhera/atlas",
-  "version": "0.4.57",
+  "version": "0.4.58",
   "description": "Atlas: the delivery lifecycle, its crews and the Atlas tools, as a Claude Code plugin for any repository.",
   "type": "module",
   "license": "UNLICENSED",

package/skills/runner/SKILL.md

@@ -67,7 +67,8 @@ its environment come from `trigger.yaml` beside this file.
    from this session starts the checks again. A push from an Actions job
    would not.
 7. Write the run facts to a file as JSON: `repo`, `at`, `you`, `landed`,
-   `opened`, `open_jobs` and `release`. Ids and counts only, no prose. Each
+   `opened`, `open_jobs` and `release`. Ids and counts only, no prose. Take
+   `at` from `date -u +%Y-%m-%dT%H:%M:%SZ`; a date with no time is refused. Each
    `you` entry is one of: `sign #<pr>`, `read #<issue>`, `read item <id>`,
    `the merge door is off in the runner`, `start stopped`. A landed pull
    request carries its `number`, its `release`, and the id of its proof
@@ -76,8 +77,9 @@ its environment come from `trigger.yaml` beside this file.
    word, as one comment on the repo's notice issue (label `atlas-notice`).
    The notice workflow reads the facts and posts the run line as the bot,
    so GitHub tells the owner.
-9. Run `atlas runner line --from <file>`. Its output is the last message of
-   the run, word for word.
+9. Run `atlas runner line --from <file>`. Copy its output, word for word,
+   as the last message of the run. Do not type the line again from memory,
+   and do not change a version or a time in it.
 
 ## Until the exit test