@mutmutco/claude-plugin 4.5.118 → 4.5.120

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mmi",
   "displayName": "MMI",
-  "version": "4.5.118",
+  "version": "4.5.120",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -1178,7 +1178,9 @@ function commandFromFailMessage(msg) {
   const head = msg.split(":", 1)[0].trim();
   if (!head || head.startsWith("-")) return "mmi-cli";
   if (!/^[a-z][a-z0-9-]*(?: [a-z][a-z0-9-]*){0,5}$/.test(head)) return "mmi-cli";
-  return canonicalPathFor(head) ?? head;
+  const canonical = canonicalPathFor(head);
+  if (canonical) return canonical;
+  return HOUSE_ROOTS.includes(head.split(" ")[0]) ? head : "mmi-cli";
 }
 function canonicalFailMessage(msg) {
   const colon = msg.indexOf(":");
@@ -5846,6 +5848,10 @@ var activeQuotaScope;
 function activeAppQuotaScope() {
   return activeQuotaScope;
 }
+var activeToken;
+function activeAppToken() {
+  return activeToken;
+}
 async function readAppVaultSecret(read) {
   try {
     return await read();
@@ -5917,6 +5923,7 @@ var notedIneligibleCommand = false;
 async function activateAppActor(commandPath3, env, mint, note = (line) => process.stderr.write(`${line}
 `)) {
   activeQuotaScope = void 0;
+  activeToken = void 0;
   const requested = (env[APP_ACTOR_ENV] ?? "").trim();
   if (!requested) return "personal";
   if (requested !== "app") {
@@ -5934,6 +5941,7 @@ async function activateAppActor(commandPath3, env, mint, note = (line) => proces
   const minted = await mint();
   env.GH_TOKEN = minted.token;
   activeQuotaScope = minted.quotaScope;
+  activeToken = minted.token;
   return "app";
 }
 
@@ -18085,10 +18093,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.118",
-    tag: "v4.5.118",
-    commit: "4dc2fb2beb2b",
-    npm: "@mutmutco/cli@4.5.118"
+    version: "4.5.120",
+    tag: "v4.5.120",
+    commit: "535bdf82416b",
+    npm: "@mutmutco/cli@4.5.120"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18105,14 +18113,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.118"
+          v3Target: "v4.5.120"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.118 and redeploy the Hub Lambda from tag v4.5.118 (4dc2fb2beb2b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.118 (@mutmutco/cli@4.5.118, tag commit 4dc2fb2beb2b \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.120 and redeploy the Hub Lambda from tag v4.5.120 (535bdf82416b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.120 (@mutmutco/cli@4.5.120, tag commit 535bdf82416b \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -52090,6 +52098,12 @@ function buildRunViewSpec(id, o) {
   if (o.exitStatus) args.push("--exit-status");
   return { program: "gh", args, timeoutMs: SINGLE_SHOT_TIMEOUT_MS };
 }
+var CREATED_RE = /^(?:(?:>=|<=|>|<)?\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}(?::\d{2})?Z)?|\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}(?::\d{2})?Z)?\.\.\d{4}-\d{2}-\d{2}(?:T\d{2}:\d{2}(?::\d{2})?Z)?)$/;
+function parseBrokerCreated(v) {
+  if (v === void 0) return void 0;
+  if (!CREATED_RE.test(v)) throw new Error(`--created must be a GitHub created filter like ">=2026-10-11T00:30:00Z" (got ${JSON.stringify(v)})`);
+  return v;
+}
 function buildRunListSpec(o) {
   const args = withJson(withRepo(["run", "list"], parseBrokerRepo(o.repo, "--repo")), parseBrokerJsonFields(o.json), o.json);
   const workflow = parseBrokerWorkflow(o.workflow);
@@ -52098,6 +52112,8 @@ function buildRunListSpec(o) {
   if (branch) args.push("--branch", branch);
   const status = parseBrokerRunStatus(o.status);
   if (status) args.push("--status", status);
+  const created = parseBrokerCreated(o.created);
+  if (created) args.push("--created", created);
   if (o.limit !== void 0) args.push("--limit", String(parseBrokerInt(o.limit, "--limit", 1, 100)));
   return { program: "gh", args, timeoutMs: SINGLE_SHOT_TIMEOUT_MS };
 }
@@ -52295,7 +52311,7 @@ function registerAppReadBrokerCommands(program3, resolveRepo2, overrides) {
     }
     await dispatchGh(spec, "read run view");
   });
-  run.command("list").description("list workflow runs (workflow/branch/status/limit/json; formatters refused)").option("--repo <owner/repo>", "target repo (defaults to the current repo)", repoOpt).option("--json [fields]", "machine-readable output (comma-separated gh fields)", jsonOpt).option("--workflow <name>", "filter by workflow name or file", workflowOpt).option("--branch <name>", "filter by branch", branchOpt).option("--status <status>", "filter by run status", runStatusOpt).option("--limit <n>", "maximum runs to fetch (1-100)", intOpt("--limit", 1, 100)).action(async (o) => {
+  run.command("list").description("list workflow runs (workflow/branch/status/created/limit/json; formatters refused)").option("--repo <owner/repo>", "target repo (defaults to the current repo)", repoOpt).option("--json [fields]", "machine-readable output (comma-separated gh fields)", jsonOpt).option("--workflow <name>", "filter by workflow name or file", workflowOpt).option("--branch <name>", "filter by branch", branchOpt).option("--status <status>", "filter by run status", runStatusOpt).option("--created <filter>", 'only runs created in this window, e.g. ">=2026-10-11T00:30:00Z" (#8096)', (v) => parseBrokerCreated(v)).option("--limit <n>", "maximum runs to fetch (1-100)", intOpt("--limit", 1, 100)).action(async (o) => {
     let spec;
     try {
       spec = buildRunListSpec(o);
@@ -55387,7 +55403,7 @@ function appActorDeps() {
     fetch: (url, init) => fetch(url, init)
   };
 }
-setPollTokenProvider(() => pollTokenOrUndefined(appActorDeps()));
+setPollTokenProvider(async () => activeAppToken() ?? pollTokenOrUndefined(appActorDeps()));
 var registerPreAction = Reflect.get(program2, ["h", "ook"].join(""));
 registerPreAction.call(program2, "preAction", async (_thisCommand, actionCommand) => {
   const commandPath3 = commandPathOf(actionCommand);

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.118",
+  "version": "4.5.120",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/claude-plugin",
-  "version": "4.5.118",
+  "version": "4.5.120",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/release/SKILL.md

@@ -90,7 +90,7 @@ Read the saved result, never the exit code (exit `1` = a follow-up failed after
 
 Then verify Latest with this bounded one-row read; require `isLatest: true` and `tagName` equal to the resolved tag: `gh release list --repo {owner}/{repo} --limit 1 --json tagName,isLatest,publishedAt`.
 
-For the independent run recheck, run `gh run list --repo {owner}/{repo} --limit 100 --json databaseId,headSha,workflowName,status,conclusion,url > .jerv/tmp/release-runs.json`, then filter locally by the exact SHA from the saved receipt with `node -e 'const rows = require("./.jerv/tmp/release-runs.json"); const sha = process.argv[1]; const matches = rows.filter((run) => run.headSha === sha); if (rows.length >= 100 || !matches.length) throw new Error("release run set is incomplete or absent"); console.log(JSON.stringify(matches, null, 2));' "<release-sha>"`.
+For the independent run recheck, scope the read to the release window, so a busy repo's unrelated runs cannot fill the cap: note the UTC instant you started `--apply` (`date -u +%Y-%m-%dT%H:%M:%SZ`), then run `gh run list --repo {owner}/{repo} --created ">=<apply-start-utc>" --limit 100 --json databaseId,headSha,workflowName,status,conclusion,url > .jerv/tmp/release-runs.json`, then filter locally by the exact SHA from the saved receipt with `node -e 'const rows = require("./.jerv/tmp/release-runs.json"); const sha = process.argv[1]; const matches = rows.filter((run) => run.headSha === sha); if (rows.length >= 100 || !matches.length) throw new Error("release run set is incomplete or absent"); console.log(JSON.stringify(matches, null, 2));' "<release-sha>"`.
 
 Do not use the raw `releases/latest` API route, a `--jq` formatter, or `gh run list --commit`; if the bounded list reaches 100 rows or has no SHA match, the run set is unverified and must not be called green.