@mutmutco/claude-plugin 4.5.24 → 4.5.26

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (4) hide show
  1. package/.claude-plugin/plugin.json +1 -1
  2. package/package.json +1 -1
  3. package/skills/org-guide/SKILL.md +1 -0
  4. package/skills/org-guide/references/vault.md +5 -0
package/.claude-plugin/plugin.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "mmi",
3
3
  "displayName": "MMI",
4
- "version": "4.5.24",
4
+ "version": "4.5.26",
5
5
  "mmiCompat": "4.x",
6
6
  "description": "MMI workflow skills and org gates delivery.",
7
7
  "author": {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@mutmutco/claude-plugin",
3
- "version": "4.5.24",
3
+ "version": "4.5.26",
4
4
  "description": "MMI workflow skills and org gates delivery.",
5
5
  "author": {
6
6
  "name": "MMI Future",
package/skills/org-guide/SKILL.md CHANGED
@@ -35,6 +35,7 @@ the [MMI help skill](../mmi-help/SKILL.md).
35
35
  | Consume, declare, rotate, or request a secret | [Vault and keyless access](references/vault.md) |
36
36
  | Register domains or configure Google OAuth | [Domains and OAuth](references/domains-and-oauth.md) |
37
37
  | Decide what belongs in a product repository | [Repository rules](references/repository-rules.md) |
38
+ | Build an MM-Work module | not bundled — [MM-Work module guide](https://github.com/mutmutco/MM-Work/blob/development/packages/mmwork-ds/GUIDE.md) in `@mutmutco/mmwork-ds` |
38
39
  | Produce company-facing documents in the MM brand | not bundled — the MM-Strategy MCP serves the brand kit (`mm_brand_guide`); strategists install `@mutmutco/strategy` |
39
40
 
40
41
  This is MMI organization guidance, not Jerv or JervCode operating instructions.
package/skills/org-guide/references/vault.md CHANGED
@@ -28,6 +28,11 @@ value at runtime. Do not print it, save it to a repository environment file, pas
28
28
  or pass it as a command argument. Keyless means using the authorized runtime injection or workload
29
29
  identity; developers do not need standing cloud keys to perform supported MMI vault operations.
30
30
 
31
+ A secret minted inside a live tenant reaches a vault without anyone seeing it through a declared
32
+ tenant task `secretOutput` (`{path, vault:{repo,key}, overwrite?}`, master-declared). The target
33
+ project consents by declaring that key in its own catalog. `run-task` then delivers the file once,
34
+ value-free, and the run log names only the key and a fingerprint. Do not hand-carry such a value.
35
+
31
36
  For declarations, writes, grants, rotation, and verification, read the
32
37
  [secrets skill](../../secrets/SKILL.md). Writes take values through stdin, never argv.
33
38
  An access denial or failed provider probe is a fact to resolve, not permission to bypass the vault.