@mutmutco/cli 2.12.0 → 2.13.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +9 -3
  2. package/dist/index.cjs +790 -139
  3. package/package.json +1 -1
package/README.md CHANGED
@@ -12,7 +12,7 @@ The CLI carries the org **Hub endpoint** intrinsically (override with the `MMI_H
12
12
  npm install -g @mutmutco/cli
13
13
  ```
14
14
 
15
- Authenticate GitHub once for saga and Project board operations:
15
+ Authenticate GitHub once for Hub session issuance and Project board operations:
16
16
 
17
17
  ```powershell
18
18
  gh auth login --hostname github.com --git-protocol https --web --scopes "project"
@@ -29,7 +29,7 @@ mmi-cli doctor --json
29
29
 
30
30
  - `mmi-cli rules sync` delivers the org-owned `AGENTS.md`, `CLAUDE.md`, and Claude settings files.
31
31
  - `mmi-cli docs sync` refreshes repo-owned `README.md` and `architecture.md` without clobbering dirty files.
32
- - `mmi-cli saga note`, `saga show`, `saga health`, `saga session`, `saga capture`, and `saga head-update` write and inspect session continuity.
32
+ - `mmi-cli saga note`, `saga show`, `saga health`, `saga session`, `saga capture`, and `saga head-update` write and inspect session continuity through a cached Hub session token.
33
33
  - `mmi-cli kb get` and `kb list` read the MM KB source (`kb list [prefix]` lists document paths, optionally under a prefix).
34
34
  - `mmi-cli northstar push|pull|list|delete|graduate` manages North Star, the per-user plan/SSOT store.
35
35
  `northstar graduate <slug> --merged-pr <url-or-number> --org-visible` marks a built-and-merged plan for
@@ -39,7 +39,7 @@ mmi-cli doctor --json
39
39
  - `mmi-cli project list|get|resolve|doctor|heal|readiness|set` reads and repairs Hub-owned v2 readiness state. `doctor --json` diagnoses central deploy/secrets readiness, `heal --apply` fixes only registry-owned defaults, and `readiness --update-issue` updates the repo's v2 readiness issue; `set` is master-only and supports explicit field unsets.
40
40
  - `mmi-cli registry org` reads org-level constants from the registry (`ORG#config`).
41
41
  - `mmi-cli oauth plan|verify` prints a repo's canonical Google OAuth URI set when the registry declares an `oauth` block and verifies the client is port-agnostic.
42
- - `mmi-cli issue create` creates typed, prioritized GitHub issues (priority sets the board field, not a label) and queues related-issue discovery.
42
+ - `mmi-cli issue create` creates typed, prioritized GitHub issues (priority sets the board field, not a label) and queues related-issue discovery. `--parent <ref>` files the new issue as a native GitHub sub-issue of a parent (works cross-repo); `mmi-cli issue link-child <parent> <child>` links two existing issues the same way.
43
43
  - `mmi-cli report` files a friction report on the Hub board with your GitHub identity, deduping against the open `report`-labeled issues (a confident duplicate becomes a +1 comment, not a new issue). No repo-local `.env`, no API key, no copied report script.
44
44
  - `mmi-cli pr create` and `pr merge` create PRs and land them with branch/worktree cleanup; `mmi-cli gc` dry-runs cleanup of merged/closed PR branches + stale tracking refs.
45
45
  - `mmi-cli board read|claim|show|move|done|backfill-priority` reads and moves GitHub Project work.
@@ -50,6 +50,12 @@ mmi-cli doctor --json
50
50
  - `mmi-cli access audit` checks collaborator roles and train-branch allowlists.
51
51
  - `mmi-cli doctor` checks GitHub auth, repo config, CLI availability, plugin install/config/version state, and stale MMI plugin cache dirs, auto-repairing the safe gaps.
52
52
 
53
+ Hub API calls do not send the raw GitHub token on every request. The CLI exchanges it at `/auth/session`
54
+ for a Hub-issued session credential, caches that credential outside repo-tracked files, and uses it for
55
+ saga, North Star, registry, secrets, train-authority, and tenant-control calls until it nears expiry.
56
+ The cache is bound to the current local GitHub token fingerprint, so switching `gh auth` users forces a
57
+ new Hub session instead of reusing the previous user's bearer credential.
58
+
53
59
  Run `mmi-cli --help` or `mmi-cli <command> --help` for the full command reference.
54
60
 
55
61
  ## Repo-Local Fallback