@aspectlylabs/mikka 0.0.223 → 0.0.224

package/cli.js

@@ -4519,7 +4519,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4580,7 +4580,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts
@@ -7312,16 +7312,18 @@ async function agentPublishedReceipt(input) {
     }
     try {
       const gh = (args) => execa4(join9(receiptDir, "github", "bin", "gh"), args, { cwd: input.worktree, env, extendEnv: false, stdin: "ignore" });
-      if (input.hosted) {
-        const object = JSON.parse((await gh(["api", `repos/${input.github.repository}/git/commits/${commit}`])).stdout);
-        if (object.sha !== commit || object.tree?.sha !== input.tree) throw new Error("Uncommitted hosted changes");
-      }
-      const pr = JSON.parse((await gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"])).stdout);
-      if (pr.headRefOid !== commit || typeof pr.body !== "string" || !pr.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
       const [owner, repository2] = input.github.repository.split("/");
       const query3 = "query($owner:String!,$repository:String!,$commit:GitObjectID!){repository(owner:$owner,name:$repository){object(oid:$commit){... on Commit {oid statusCheckRollup{state}}}}}";
-      const checks = JSON.parse((await gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`])).stdout);
-      const checked2 = checks.data?.repository?.object;
+      const [object, pr, checks] = await Promise.allSettled([
+        // Hosted runs verify GitHub's tree, never the writable clone's config.
+        input.hosted ? gh(["api", `repos/${input.github.repository}/git/commits/${commit}`]).then((result) => JSON.parse(result.stdout)) : null,
+        gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"]).then((result) => JSON.parse(result.stdout)),
+        gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`]).then((result) => JSON.parse(result.stdout))
+      ]);
+      if (object.status === "rejected" || pr.status === "rejected" || checks.status === "rejected") throw new Error("GitHub receipt lookup failed");
+      if (input.hosted && (object.value.sha !== commit || object.value.tree?.sha !== input.tree)) throw new Error("Uncommitted hosted changes");
+      if (pr.value.headRefOid !== commit || typeof pr.value.body !== "string" || !pr.value.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
+      const checked2 = checks.value.data?.repository?.object;
       if (checked2?.oid !== commit || checked2.statusCheckRollup?.state !== "SUCCESS") throw new Error("Incomplete CI");
     } catch {
       throw new Error("The task pull request and successful CI must match the submitted commit");

package/client.js

@@ -3763,7 +3763,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3824,7 +3824,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts

package/http-link.js

@@ -4262,7 +4262,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4323,7 +4323,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts

package/login.js

@@ -3770,7 +3770,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3831,7 +3831,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts

package/main.js

@@ -3434,16 +3434,18 @@ async function agentPublishedReceipt(input) {
     }
     try {
       const gh = (args) => execa4(join4(receiptDir, "github", "bin", "gh"), args, { cwd: input.worktree, env, extendEnv: false, stdin: "ignore" });
-      if (input.hosted) {
-        const object = JSON.parse((await gh(["api", `repos/${input.github.repository}/git/commits/${commit}`])).stdout);
-        if (object.sha !== commit || object.tree?.sha !== input.tree) throw new Error("Uncommitted hosted changes");
-      }
-      const pr = JSON.parse((await gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"])).stdout);
-      if (pr.headRefOid !== commit || typeof pr.body !== "string" || !pr.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
       const [owner, repository2] = input.github.repository.split("/");
       const query3 = "query($owner:String!,$repository:String!,$commit:GitObjectID!){repository(owner:$owner,name:$repository){object(oid:$commit){... on Commit {oid statusCheckRollup{state}}}}}";
-      const checks = JSON.parse((await gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`])).stdout);
-      const checked2 = checks.data?.repository?.object;
+      const [object, pr, checks] = await Promise.allSettled([
+        // Hosted runs verify GitHub's tree, never the writable clone's config.
+        input.hosted ? gh(["api", `repos/${input.github.repository}/git/commits/${commit}`]).then((result) => JSON.parse(result.stdout)) : null,
+        gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"]).then((result) => JSON.parse(result.stdout)),
+        gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`]).then((result) => JSON.parse(result.stdout))
+      ]);
+      if (object.status === "rejected" || pr.status === "rejected" || checks.status === "rejected") throw new Error("GitHub receipt lookup failed");
+      if (input.hosted && (object.value.sha !== commit || object.value.tree?.sha !== input.tree)) throw new Error("Uncommitted hosted changes");
+      if (pr.value.headRefOid !== commit || typeof pr.value.body !== "string" || !pr.value.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
+      const checked2 = checks.value.data?.repository?.object;
       if (checked2?.oid !== commit || checked2.statusCheckRollup?.state !== "SUCCESS") throw new Error("Incomplete CI");
     } catch {
       throw new Error("The task pull request and successful CI must match the submitted commit");
@@ -3879,7 +3881,7 @@ import { join as join5 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3940,7 +3942,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts

package/mikka-release-manifest.json

@@ -1,11 +1,11 @@
 {
   "version": 1,
-  "sourceSha": "ae7a2460d5e4d9465a0a4f0913782ef738749e11",
+  "sourceSha": "357b699ba1a385f20dd66d81d73e1b0c5ad567bc",
   "repository": "alexj11324/Mikka",
-  "buildRunId": "41360174331",
+  "buildRunId": "41360557162",
   "buildKind": "github-actions-main",
   "sourceLockSha256": "02117c604efb3fc186cc8e19b0f42d24f0da0e2bc2d65fc7c502c209b35aff30",
-  "createdAt": "2026-11-01T23:35:58.745Z",
+  "createdAt": "2026-11-01T23:41:42.835Z",
   "sbom": "sbom.cdx.json",
   "files": [
     {
@@ -45,13 +45,13 @@
     },
     {
       "path": "cli.js",
-      "size": 655147,
-      "sha256": "989a7305b5adb3a578d103b3107780b4745d78b99ebea288b84301f8c0c184dd"
+      "size": 655501,
+      "sha256": "69ee4b3dabc476e48998bc317b7b557d3d396f57352b0c0f126cb4ab4a0da272"
     },
     {
       "path": "client.js",
       "size": 142852,
-      "sha256": "89aed60b7a6a86fecdb241668c38152c0003d1d5b5db87f17f45cd2b66bfa89d"
+      "sha256": "01d7d685e803bf99d4757c2c359f5a3ea16033e5f159300c49205a6ce3e839e2"
     },
     {
       "path": "computer/driver.mjs",
@@ -181,7 +181,7 @@
     {
       "path": "http-link.js",
       "size": 189536,
-      "sha256": "e49e288fe53fb93c5cf8aeb216571ee166dfadec0325209ecab52467bb4df544"
+      "sha256": "eddd81d82b422d4c20f4d32057ba058b0abfffce08a1d8a8e39d7eb20c9d29cb"
     },
     {
       "path": "log.js",
@@ -191,12 +191,12 @@
     {
       "path": "login.js",
       "size": 147707,
-      "sha256": "f320086133db05f17fbefa9dda40439cdb3d1adbc55698fdf6bc5b3e18a3530f"
+      "sha256": "9f095971693e5ceae51318a8bcf4658e0f236ac65e6b31bff32c7303a7e3dd09"
     },
     {
       "path": "main.js",
-      "size": 597357,
-      "sha256": "a4b631de39d6492701cf5e803d471ecb76e45ed2b3b18fdbe8a30c68a6094ac5"
+      "size": 597711,
+      "sha256": "074ff4018b3edbde9073540d95bc8de3bc0de12586c9c7ba62ac9eee6260442d"
     },
     {
       "path": "mikka-mcp.mjs",
@@ -205,23 +205,23 @@
     },
     {
       "path": "mikka.js",
-      "size": 655163,
-      "sha256": "ea0e78279a9781755a21b608be16527a84c6e9d6f21e5e7e71f54ea16f9d328a"
+      "size": 655517,
+      "sha256": "08e16e2dea8b1c6a480d66840a980aaa52b641e66fd20f5c5490abc02542ea19"
     },
     {
       "path": "npm-shrinkwrap.json",
       "size": 78117,
-      "sha256": "fb57c0c604c6ed6f5142d4d49ca8e04ec792bbc14804a977bc5c6fa9aa29e205"
+      "sha256": "698bc79c3edd80c3e7b1fbad4ae149d9588e9d2646ce0c45eeffcdb6ec8d9dc2"
     },
     {
       "path": "package.json",
       "size": 1247,
-      "sha256": "d508ee84503c8aa369858c8ca02336183dc28b28e8b7e7102926213ef275374b"
+      "sha256": "d1f62dc30d241286b55c6c6fec97eb3dd04f0b73c8b60cb5e2151b024a0a6284"
     },
     {
       "path": "paths.js",
       "size": 4300,
-      "sha256": "40ea08783cb784c26f8b8b2631ff7cf97e8256bd3da1278ab757cd1c3c2ca4ee"
+      "sha256": "646f008f06af612af01c411021f9639b14676746664925a49fac466d38efc29b"
     },
     {
       "path": "run-sandbox-worker.mjs",
@@ -236,7 +236,7 @@
     {
       "path": "sbom.cdx.json",
       "size": 144314,
-      "sha256": "c57d57a4ccab74b248dfa99bf44eec6271fdbc2d882c12bb0289673dced7cbe1"
+      "sha256": "9c56e71aeb864c58e7141c75a23a3c8512ae0e359616ab3ff53cced395567e6f"
     }
   ]
 }

package/mikka.js

@@ -4520,7 +4520,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4581,7 +4581,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts
@@ -7313,16 +7313,18 @@ async function agentPublishedReceipt(input) {
     }
     try {
       const gh = (args) => execa4(join9(receiptDir, "github", "bin", "gh"), args, { cwd: input.worktree, env, extendEnv: false, stdin: "ignore" });
-      if (input.hosted) {
-        const object = JSON.parse((await gh(["api", `repos/${input.github.repository}/git/commits/${commit}`])).stdout);
-        if (object.sha !== commit || object.tree?.sha !== input.tree) throw new Error("Uncommitted hosted changes");
-      }
-      const pr = JSON.parse((await gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"])).stdout);
-      if (pr.headRefOid !== commit || typeof pr.body !== "string" || !pr.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
       const [owner, repository2] = input.github.repository.split("/");
       const query3 = "query($owner:String!,$repository:String!,$commit:GitObjectID!){repository(owner:$owner,name:$repository){object(oid:$commit){... on Commit {oid statusCheckRollup{state}}}}}";
-      const checks = JSON.parse((await gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`])).stdout);
-      const checked2 = checks.data?.repository?.object;
+      const [object, pr, checks] = await Promise.allSettled([
+        // Hosted runs verify GitHub's tree, never the writable clone's config.
+        input.hosted ? gh(["api", `repos/${input.github.repository}/git/commits/${commit}`]).then((result) => JSON.parse(result.stdout)) : null,
+        gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"]).then((result) => JSON.parse(result.stdout)),
+        gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`]).then((result) => JSON.parse(result.stdout))
+      ]);
+      if (object.status === "rejected" || pr.status === "rejected" || checks.status === "rejected") throw new Error("GitHub receipt lookup failed");
+      if (input.hosted && (object.value.sha !== commit || object.value.tree?.sha !== input.tree)) throw new Error("Uncommitted hosted changes");
+      if (pr.value.headRefOid !== commit || typeof pr.value.body !== "string" || !pr.value.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
+      const checked2 = checks.value.data?.repository?.object;
       if (checked2?.oid !== commit || checked2.statusCheckRollup?.state !== "SUCCESS") throw new Error("Incomplete CI");
     } catch {
       throw new Error("The task pull request and successful CI must match the submitted commit");

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.223",
+  "version": "0.0.224",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@aspectlylabs/mikka",
-      "version": "0.0.223",
+      "version": "0.0.224",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@agentclientprotocol/sdk": "1.9.0",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.223",
+  "version": "0.0.224",
   "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-  "gitHead": "ae7a2460d5e4d9465a0a4f0913782ef738749e11",
+  "gitHead": "357b699ba1a385f20dd66d81d73e1b0c5ad567bc",
   "type": "module",
   "private": false,
   "license": "AGPL-3.0-only",

package/paths.js

@@ -6,7 +6,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.224",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -67,7 +67,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "357b699ba1a385f20dd66d81d73e1b0c5ad567bc"
 };
 
 // src/paths.ts

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:34ba4caf-e703-4ab9-a519-d159d7f0b3f1",
+  "serialNumber": "urn:uuid:d55b3998-1779-4866-89c4-b1e823167eb6",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-11-01T23:35:58.032Z",
+    "timestamp": "2026-11-01T23:41:41.824Z",
     "lifecycles": [
       {
         "phase": "pre-build"
@@ -19,13 +19,13 @@
       }
     ],
     "component": {
-      "bom-ref": "@aspectlylabs/mikka@0.0.223",
+      "bom-ref": "@aspectlylabs/mikka@0.0.224",
       "type": "library",
-      "name": ".retained-build-Bv5Pzd",
-      "version": "0.0.223",
+      "name": ".retained-build-HlHtmV",
+      "version": "0.0.224",
       "scope": "required",
       "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.223",
+      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.224",
       "properties": [],
       "externalReferences": [
         {
@@ -4627,7 +4627,7 @@
   ],
   "dependencies": [
     {
-      "ref": "@aspectlylabs/mikka@0.0.223",
+      "ref": "@aspectlylabs/mikka@0.0.224",
       "dependsOn": [
         "@agentclientprotocol/sdk@1.9.0",
         "@anthropic-ai/claude-agent-sdk@0.3.305",