@mutmutco/claude-plugin 4.5.218 → 4.5.220

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "mmi",
   "displayName": "MMI",
-  "version": "4.5.218",
+  "version": "4.5.220",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -27056,10 +27056,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.218",
-    tag: "v4.5.218",
-    commit: "3847ee21a247",
-    npm: "@mutmutco/cli@4.5.218"
+    version: "4.5.220",
+    tag: "v4.5.220",
+    commit: "0a675c7c17a2",
+    npm: "@mutmutco/cli@4.5.220"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -27076,14 +27076,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.218"
+          v3Target: "v4.5.220"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.218 and redeploy the Hub Lambda from tag v4.5.218 (3847ee21a247); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.218 (@mutmutco/cli@4.5.218, tag commit 3847ee21a247 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.220 and redeploy the Hub Lambda from tag v4.5.220 (0a675c7c17a2); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.220 (@mutmutco/cli@4.5.220, tag commit 0a675c7c17a2 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -46641,6 +46641,7 @@ function suiteMembers(raw) {
   for (const item of raw) {
     if (!item || typeof item !== "object") throw new Error("invalid MM-Work module registry row");
     const row = item;
+    if (row.repository === void 0 && row.bundles === void 0) continue;
     const repo = typeof row.repository === "string" && /^[\w.-]+\/[\w.-]+$/.test(row.repository) ? row.repository : typeof row.id === "string" ? REPOS[row.id] : void 0;
     if (!repo || !row.bundles || typeof row.bundles !== "object") throw new Error(`unknown MM-Work module registry id: ${String(row.id)}`);
     members.push({ repo, id: row.id, bundles: row.bundles });
@@ -47100,6 +47101,10 @@ async function suiteRcandRun(deps, opts) {
   if (opts.dryRun) {
     const existing = readSuiteCut(deps.recordPath);
     if (existing) plan.push(`existing cut record: ${deps.recordPath} (${existingCutDescription(existing)})`);
+    if (existing && !existing.leadReleased && (existing.pinPr || existing.leadRcTag || existing.members.some((m) => m.tag))) {
+      const why = !heldMatches(existing.heldMembers ?? [], held) ? "suite hold changed since cut began" : existing.members.length !== active.length || active.some((m) => !existing.members.some((r) => r.repo === m.repo && r.id === m.id)) ? "suite roster changed since cut began" : "";
+      if (why) plan.push(`the real run resumes that record and refuses (${why}); retire it first with mmi-cli devops suite abandon --owner-go`);
+    }
     plan.push(...await Promise.all(modules.map(async (m) => `${m.repo}: ${heldById.has(m.id) ? "HELD" : await dryRunStatus(deps, m)}`)));
     return { plan };
   }
@@ -58805,9 +58810,9 @@ function suiteTrainIo(root, summaryFile, memberSummaryFiles = {}, summaryFileTr,
     bundleKit: async (url) => {
       try {
         const res = await fetch(url, { signal: AbortSignal.timeout(GH_TIMEOUT) });
-        return res.ok ? kitFromBundle(await res.text()) : void 0;
+        return res.ok ? kitFromBundle(await res.text()) : `unreadable (HTTP ${res.status})`;
       } catch {
-        return void 0;
+        return "unreadable (unreachable)";
       }
     },
     // #7738: a member hotfixes as suite-solo; the lead hotfixes under its suite-lead capability (inTrain sets it).
@@ -62379,7 +62384,11 @@ async function readRunLog(id, o, runner) {
   const jobs = pages.flatMap((page) => page.jobs);
   const selected = jobs.filter((job) => jobName === void 0 ? FAILED2.has(job.conclusion ?? "") : job.name === jobName);
   const result = { runId, repo, jobs: [] };
-  if (!selected.length) return { result, exitCode: 1, message: `read run log: no matching job for run ${runId} in ${repo}; conclusions seen: ${[...new Set(jobs.map((j) => j.conclusion ?? "pending"))].join(", ") || "none"}` };
+  if (!selected.length && jobName === void 0) return { result, exitCode: 1, message: `read run log: no matching job for run ${runId} in ${repo}; conclusions seen: ${[...new Set(jobs.map((j) => j.conclusion ?? "pending"))].join(", ") || "none"}` };
+  if (!selected.length) {
+    const listed = jobs.slice(0, 30).map((j) => `${j.name} (${j.id})`).join(", ");
+    return { result, exitCode: 1, message: `read run log: --job takes the exact job name, not its id; jobs in run ${runId}: ${listed || "none"}${jobs.length > 30 ? `, \u2026+${jobs.length - 30} more` : ""}` };
+  }
   for (const job of selected) {
     const text = await readAppApi(`repos/${repo}/actions/jobs/${parseBrokerId(String(job.id), "job id")}/logs`, runner);
     result.jobs.push({ id: job.id, name: job.name, conclusion: job.conclusion, failedStep: job.steps?.find((s) => s.conclusion === "failure")?.name ?? null, ...sliceRunLog(text, tail) });

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.218",
+  "version": "4.5.220",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/claude-plugin",
-  "version": "4.5.218",
+  "version": "4.5.220",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/board/SKILL.md

@@ -21,7 +21,7 @@ accepts an incomplete board. The CLI partitions rows into **Yours**, **Free to c
 stamps (4 hours without work) hold nothing. Partition rules, stamp details and `--out` rationale:
 [reference.md](reference.md).
 
-**Under the App pool, never type raw `gh` for a read** (`gh issue list/view --jq`, `gh run view --jq`, `gh api -q` all bounce). Use `MMI_ACTOR=app mmi-cli devops read issue view <n> --repo <owner/repo> --json <fields>` (or `issue list`, `pr view`, `run view`); `--jq '<expr>'` on that typed read filters locally. Filter in a pipe or save output (`>`, `2>&1`, `--out`) under this worktree's `.jerv/tmp/` (`mkdir -p .jerv/tmp` first), never `../` or a sibling path: the workspace output guard refuses those.
+**Under the App pool, never type raw `gh` for a read** (`gh issue list/view --jq`, `gh run view --jq`, `gh api -q` all bounce). Use `MMI_ACTOR=app mmi-cli devops read issue view <n> --repo <owner/repo> --json <fields>` (or `issue list`, `pr view`, `run view`); `--jq '<expr>'` on that typed read filters locally. Filter in a pipe or save output (`>`, `2>&1`, `--out`) under this worktree's `.jerv/tmp/` (`mkdir -p .jerv/tmp` first), never `../` or a sibling path: the workspace output guard refuses those. Body edits are read-then-edit: `MMI_ACTOR=app mmi-cli devops read issue view <n> --repo <owner/repo> --json body > .jerv/tmp/issue-body.json`, append or filter the JSON locally (`node -e`; the typed read's own `--jq` also filters locally), then write back with `gh issue edit <n> --repo <owner/repo> --body-file .jerv/tmp/issue-body.md` — `gh` writes pass under the pool.
 
 ## Step 2 — render it
 
@@ -62,7 +62,7 @@ Announce issue/PR counts; refresh `mmi-cli oracle board read` this session and s
 
 Follow printed owner rulings; record new ones with `mmi-cli oracle issue decision`. One concurrent worktree per batch: [reference.md](reference.md).
 
-With several task lanes in one session, pass `worktree: <the mmi-worktrees/<Repo>/<issue>-<slug> path jerv_worktree_create reported>` to `jerv_worktree_exec` / `jerv_worktree_land` every time; they refuse to guess (#5629).
+With several task lanes in one session, pass `worktree: <the mmi-worktrees/<Repo>/<issue>-<slug> path jerv_worktree_create reported>` to `jerv_worktree_exec` / `jerv_worktree_land` every time; they refuse to guess (#5629). While any mmi-worktrees lane is registered for this repo, run focused tests/gates from the task-worktree root `jerv_worktree_create` reported — never the primary checkout; the test policy refuses it (`test-command-untrusted-worktree-cwd`).
 
 A fresh mmi worktree has no `.jerv/`: run `mkdir -p .jerv/tmp` before writing scratch files there (PR bodies, batches) or listing it.
 

package/skills/epic/SKILL.md

@@ -70,7 +70,7 @@ This JSON is the placement authority: every intended child must be linked and on
 mmi-cli oracle issue link-child <parent> <child>
 ```
 
-Each child is now a parallel item: one worktree + PR each. With several task lanes in one session, pass `worktree: <the mmi-worktrees/<Repo>/<issue>-<slug> path jerv_worktree_create reported>` to `jerv_worktree_exec` / `jerv_worktree_land` every time; they refuse to guess (#5629). On Windows set `git config core.longpaths true` on the main checkout before the first `git worktree add`. When linked worktrees share a clone, serialize `git branch -m` and other ref renames (or retry serially on `.tmp-renamed-log`). **When the last child merges, close the umbrella** (board `Done` follows).
+Each child is now a parallel item: one worktree + PR each. With several task lanes in one session, pass `worktree: <the mmi-worktrees/<Repo>/<issue>-<slug> path jerv_worktree_create reported>` to `jerv_worktree_exec` / `jerv_worktree_land` every time; they refuse to guess (#5629). While any mmi-worktrees lane is registered for this repo, run focused tests/gates from the task-worktree root `jerv_worktree_create` reported — never the primary checkout; the test policy refuses it (`test-command-untrusted-worktree-cwd`). On Windows set `git config core.longpaths true` on the main checkout before the first `git worktree add`. When linked worktrees share a clone, serialize `git branch -m` and other ref renames (or retry serially on `.tmp-renamed-log`). **When the last child merges, close the umbrella** (board `Done` follows).
 
 Never free-type children with raw `gh issue create`: the batch path carries validation, board attach and structured output.
 

package/skills/org-guide/references/work-and-releases.md

@@ -42,6 +42,9 @@ in one command (#3243). Complete the documentation preflight below before pushin
 Open a PR through `mmi-cli devops pr create` with a closing issue link, and land through
 `mmi-cli devops pr land`. Verify required checks, merge, issue closure, and cleanup before calling
 the implementation complete. A merged implementation is not a production release.
+Never defer a live check waiting for real data (owner ruling 2026-10-27T20:04Z, #9009): create the
+state it verifies with the module's dev/admin tools (MDT verbs, admin endpoints, module CLI,
+synthetic accounts); if a needed verb is missing, add it in the same lane, then verify now.
 
 Owner ruling 2026-10-25 (#8814, #8816, MM-Work#7629; `docs/decisions/2026-10-06-browser-checks-nightly.md`):
 the required `gate` holds fast deterministic checks only; UI/design uses `@mutmutco/mmwork-ds`