@aspectlylabs/mikka 0.0.223 → 0.0.225

package/cli.js

@@ -4519,7 +4519,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4580,7 +4580,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts
@@ -7312,16 +7312,18 @@ async function agentPublishedReceipt(input) {
     }
     try {
       const gh = (args) => execa4(join9(receiptDir, "github", "bin", "gh"), args, { cwd: input.worktree, env, extendEnv: false, stdin: "ignore" });
-      if (input.hosted) {
-        const object = JSON.parse((await gh(["api", `repos/${input.github.repository}/git/commits/${commit}`])).stdout);
-        if (object.sha !== commit || object.tree?.sha !== input.tree) throw new Error("Uncommitted hosted changes");
-      }
-      const pr = JSON.parse((await gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"])).stdout);
-      if (pr.headRefOid !== commit || typeof pr.body !== "string" || !pr.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
       const [owner, repository2] = input.github.repository.split("/");
       const query3 = "query($owner:String!,$repository:String!,$commit:GitObjectID!){repository(owner:$owner,name:$repository){object(oid:$commit){... on Commit {oid statusCheckRollup{state}}}}}";
-      const checks = JSON.parse((await gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`])).stdout);
-      const checked2 = checks.data?.repository?.object;
+      const [object, pr, checks] = await Promise.allSettled([
+        // Hosted runs verify GitHub's tree, never the writable clone's config.
+        input.hosted ? gh(["api", `repos/${input.github.repository}/git/commits/${commit}`]).then((result) => JSON.parse(result.stdout)) : null,
+        gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"]).then((result) => JSON.parse(result.stdout)),
+        gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`]).then((result) => JSON.parse(result.stdout))
+      ]);
+      if (object.status === "rejected" || pr.status === "rejected" || checks.status === "rejected") throw new Error("GitHub receipt lookup failed");
+      if (input.hosted && (object.value.sha !== commit || object.value.tree?.sha !== input.tree)) throw new Error("Uncommitted hosted changes");
+      if (pr.value.headRefOid !== commit || typeof pr.value.body !== "string" || !pr.value.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
+      const checked2 = checks.value.data?.repository?.object;
       if (checked2?.oid !== commit || checked2.statusCheckRollup?.state !== "SUCCESS") throw new Error("Incomplete CI");
     } catch {
       throw new Error("The task pull request and successful CI must match the submitted commit");

package/client.js

@@ -3763,7 +3763,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3824,7 +3824,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts

package/http-link.js

@@ -4262,7 +4262,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4323,7 +4323,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts

package/login.js

@@ -3770,7 +3770,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3831,7 +3831,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts

package/main.js

@@ -3434,16 +3434,18 @@ async function agentPublishedReceipt(input) {
     }
     try {
       const gh = (args) => execa4(join4(receiptDir, "github", "bin", "gh"), args, { cwd: input.worktree, env, extendEnv: false, stdin: "ignore" });
-      if (input.hosted) {
-        const object = JSON.parse((await gh(["api", `repos/${input.github.repository}/git/commits/${commit}`])).stdout);
-        if (object.sha !== commit || object.tree?.sha !== input.tree) throw new Error("Uncommitted hosted changes");
-      }
-      const pr = JSON.parse((await gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"])).stdout);
-      if (pr.headRefOid !== commit || typeof pr.body !== "string" || !pr.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
       const [owner, repository2] = input.github.repository.split("/");
       const query3 = "query($owner:String!,$repository:String!,$commit:GitObjectID!){repository(owner:$owner,name:$repository){object(oid:$commit){... on Commit {oid statusCheckRollup{state}}}}}";
-      const checks = JSON.parse((await gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`])).stdout);
-      const checked2 = checks.data?.repository?.object;
+      const [object, pr, checks] = await Promise.allSettled([
+        // Hosted runs verify GitHub's tree, never the writable clone's config.
+        input.hosted ? gh(["api", `repos/${input.github.repository}/git/commits/${commit}`]).then((result) => JSON.parse(result.stdout)) : null,
+        gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"]).then((result) => JSON.parse(result.stdout)),
+        gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`]).then((result) => JSON.parse(result.stdout))
+      ]);
+      if (object.status === "rejected" || pr.status === "rejected" || checks.status === "rejected") throw new Error("GitHub receipt lookup failed");
+      if (input.hosted && (object.value.sha !== commit || object.value.tree?.sha !== input.tree)) throw new Error("Uncommitted hosted changes");
+      if (pr.value.headRefOid !== commit || typeof pr.value.body !== "string" || !pr.value.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
+      const checked2 = checks.value.data?.repository?.object;
       if (checked2?.oid !== commit || checked2.statusCheckRollup?.state !== "SUCCESS") throw new Error("Incomplete CI");
     } catch {
       throw new Error("The task pull request and successful CI must match the submitted commit");
@@ -3879,7 +3881,7 @@ import { join as join5 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3940,7 +3942,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts

package/mikka-release-manifest.json

@@ -1,11 +1,11 @@
 {
   "version": 1,
-  "sourceSha": "ae7a2460d5e4d9465a0a4f0913782ef738749e11",
+  "sourceSha": "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec",
   "repository": "alexj11324/Mikka",
-  "buildRunId": "41360174331",
+  "buildRunId": "41360718390",
   "buildKind": "github-actions-main",
   "sourceLockSha256": "02117c604efb3fc186cc8e19b0f42d24f0da0e2bc2d65fc7c502c209b35aff30",
-  "createdAt": "2026-11-01T23:35:58.745Z",
+  "createdAt": "2026-11-01T23:45:24.809Z",
   "sbom": "sbom.cdx.json",
   "files": [
     {
@@ -45,13 +45,13 @@
     },
     {
       "path": "cli.js",
-      "size": 655147,
-      "sha256": "989a7305b5adb3a578d103b3107780b4745d78b99ebea288b84301f8c0c184dd"
+      "size": 655501,
+      "sha256": "7b142d23393287befec28e2917e3cf28dca5af3f6cded8c11c565244c968b81d"
     },
     {
       "path": "client.js",
       "size": 142852,
-      "sha256": "89aed60b7a6a86fecdb241668c38152c0003d1d5b5db87f17f45cd2b66bfa89d"
+      "sha256": "fd01995437050df6128bb7d643289701829e939b097a8862004f4d23e24acea2"
     },
     {
       "path": "computer/driver.mjs",
@@ -181,7 +181,7 @@
     {
       "path": "http-link.js",
       "size": 189536,
-      "sha256": "e49e288fe53fb93c5cf8aeb216571ee166dfadec0325209ecab52467bb4df544"
+      "sha256": "f5c510e12eda3fb60b7c40ae8d6918f61b37282710b1eb91848d8ef2d9f6e17d"
     },
     {
       "path": "log.js",
@@ -191,12 +191,12 @@
     {
       "path": "login.js",
       "size": 147707,
-      "sha256": "f320086133db05f17fbefa9dda40439cdb3d1adbc55698fdf6bc5b3e18a3530f"
+      "sha256": "67f09171a0866dcb461893b698176c68854038d84d14fd472d91993c03df3d85"
     },
     {
       "path": "main.js",
-      "size": 597357,
-      "sha256": "a4b631de39d6492701cf5e803d471ecb76e45ed2b3b18fdbe8a30c68a6094ac5"
+      "size": 597711,
+      "sha256": "3f2b71febe67243de3e9fdf247f52ecf91ec4e286af660f991f4e2d2d07e68bd"
     },
     {
       "path": "mikka-mcp.mjs",
@@ -205,23 +205,23 @@
     },
     {
       "path": "mikka.js",
-      "size": 655163,
-      "sha256": "ea0e78279a9781755a21b608be16527a84c6e9d6f21e5e7e71f54ea16f9d328a"
+      "size": 655517,
+      "sha256": "6954fbdeb81c86c1a53686cee7533efcb2db8d174b6c45bb228591282700d7a3"
     },
     {
       "path": "npm-shrinkwrap.json",
       "size": 78117,
-      "sha256": "fb57c0c604c6ed6f5142d4d49ca8e04ec792bbc14804a977bc5c6fa9aa29e205"
+      "sha256": "9cea9a0cef2935dad5c1395918d48fa366f530af9558eb4c91ff9b8ab7571fe5"
     },
     {
       "path": "package.json",
       "size": 1247,
-      "sha256": "d508ee84503c8aa369858c8ca02336183dc28b28e8b7e7102926213ef275374b"
+      "sha256": "d40350905a3dffe6a53684f71892d2ebaedc293eb07b8c784c6c3a311ea16869"
     },
     {
       "path": "paths.js",
       "size": 4300,
-      "sha256": "40ea08783cb784c26f8b8b2631ff7cf97e8256bd3da1278ab757cd1c3c2ca4ee"
+      "sha256": "3d0dea3f805265d39a5681569e1f4cef2ff0a9fb0e7ccb1e1ac7dbe71f6eb981"
     },
     {
       "path": "run-sandbox-worker.mjs",
@@ -236,7 +236,7 @@
     {
       "path": "sbom.cdx.json",
       "size": 144314,
-      "sha256": "c57d57a4ccab74b248dfa99bf44eec6271fdbc2d882c12bb0289673dced7cbe1"
+      "sha256": "7170ef3d58d8c6d0333c88b7de77f80b1f591de787bf32c64048fd3b67804d25"
     }
   ]
 }

package/mikka.js

@@ -4520,7 +4520,7 @@ import { join as join4 } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4581,7 +4581,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts
@@ -7313,16 +7313,18 @@ async function agentPublishedReceipt(input) {
     }
     try {
       const gh = (args) => execa4(join9(receiptDir, "github", "bin", "gh"), args, { cwd: input.worktree, env, extendEnv: false, stdin: "ignore" });
-      if (input.hosted) {
-        const object = JSON.parse((await gh(["api", `repos/${input.github.repository}/git/commits/${commit}`])).stdout);
-        if (object.sha !== commit || object.tree?.sha !== input.tree) throw new Error("Uncommitted hosted changes");
-      }
-      const pr = JSON.parse((await gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"])).stdout);
-      if (pr.headRefOid !== commit || typeof pr.body !== "string" || !pr.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
       const [owner, repository2] = input.github.repository.split("/");
       const query3 = "query($owner:String!,$repository:String!,$commit:GitObjectID!){repository(owner:$owner,name:$repository){object(oid:$commit){... on Commit {oid statusCheckRollup{state}}}}}";
-      const checks = JSON.parse((await gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`])).stdout);
-      const checked2 = checks.data?.repository?.object;
+      const [object, pr, checks] = await Promise.allSettled([
+        // Hosted runs verify GitHub's tree, never the writable clone's config.
+        input.hosted ? gh(["api", `repos/${input.github.repository}/git/commits/${commit}`]).then((result) => JSON.parse(result.stdout)) : null,
+        gh(["pr", "view", input.github.branch, "--repo", input.github.repository, "--json", "headRefOid,body"]).then((result) => JSON.parse(result.stdout)),
+        gh(["api", "graphql", "-f", `query=${query3}`, "-f", `owner=${owner}`, "-f", `repository=${repository2}`, "-f", `commit=${commit}`]).then((result) => JSON.parse(result.stdout))
+      ]);
+      if (object.status === "rejected" || pr.status === "rejected" || checks.status === "rejected") throw new Error("GitHub receipt lookup failed");
+      if (input.hosted && (object.value.sha !== commit || object.value.tree?.sha !== input.tree)) throw new Error("Uncommitted hosted changes");
+      if (pr.value.headRefOid !== commit || typeof pr.value.body !== "string" || !pr.value.body.trimEnd().endsWith(`<!-- mikka-issue:${input.github.issueId} -->`)) throw new Error("Unbound pull request");
+      const checked2 = checks.value.data?.repository?.object;
       if (checked2?.oid !== commit || checked2.statusCheckRollup?.state !== "SUCCESS") throw new Error("Incomplete CI");
     } catch {
       throw new Error("The task pull request and successful CI must match the submitted commit");

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.223",
+  "version": "0.0.225",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@aspectlylabs/mikka",
-      "version": "0.0.223",
+      "version": "0.0.225",
       "license": "AGPL-3.0-only",
       "dependencies": {
         "@agentclientprotocol/sdk": "1.9.0",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@aspectlylabs/mikka",
-  "version": "0.0.223",
+  "version": "0.0.225",
   "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-  "gitHead": "ae7a2460d5e4d9465a0a4f0913782ef738749e11",
+  "gitHead": "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec",
   "type": "module",
   "private": false,
   "license": "AGPL-3.0-only",

package/paths.js

@@ -6,7 +6,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.223",
+  version: "0.0.225",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -67,7 +67,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "ae7a2460d5e4d9465a0a4f0913782ef738749e11"
+  gitHead: "e1706f1f9700782c3e0bc1bf63e4115ff25af7ec"
 };
 
 // src/paths.ts

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:34ba4caf-e703-4ab9-a519-d159d7f0b3f1",
+  "serialNumber": "urn:uuid:94acd747-13d7-4a04-a5d7-f6dc67a16421",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-11-01T23:35:58.032Z",
+    "timestamp": "2026-11-01T23:45:23.896Z",
     "lifecycles": [
       {
         "phase": "pre-build"
@@ -19,13 +19,13 @@
       }
     ],
     "component": {
-      "bom-ref": "@aspectlylabs/mikka@0.0.223",
+      "bom-ref": "@aspectlylabs/mikka@0.0.225",
       "type": "library",
-      "name": ".retained-build-Bv5Pzd",
-      "version": "0.0.223",
+      "name": ".retained-build-JjC7zx",
+      "version": "0.0.225",
       "scope": "required",
       "description": "Local Mikka daemon: runs agents through the user's own CLIs",
-      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.223",
+      "purl": "pkg:npm/%40aspectlylabs/mikka@0.0.225",
       "properties": [],
       "externalReferences": [
         {
@@ -4627,7 +4627,7 @@
   ],
   "dependencies": [
     {
-      "ref": "@aspectlylabs/mikka@0.0.223",
+      "ref": "@aspectlylabs/mikka@0.0.225",
       "dependsOn": [
         "@agentclientprotocol/sdk@1.9.0",
         "@anthropic-ai/claude-agent-sdk@0.3.305",