@mutmutco/codex-plugin 4.5.151 → 4.5.153

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.151",
+  "version": "4.5.153",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -7081,6 +7081,12 @@ var APP_ELIGIBLE_COMMANDS = /* @__PURE__ */ new Set([
   "read run watch",
   "read run log",
   // #8136: bounded jobs/logs REST read, same polling credential.
+  "read pr list",
+  // #8347: stored-field PR list; author/viewer-dependent filters refused.
+  "read pr diff",
+  // #8347: fixed PR diff read; no viewer fields.
+  "read pr queue",
+  // #8347: fixed mergeQueueEntry query; no generic GraphQL or viewer resolution.
   "read pr view",
   "read pr checks",
   "read issue view",
@@ -7152,7 +7158,7 @@ async function readAppVaultSecret(read) {
     if (/^(Hub GitHub App allowance used up|rate limited)/.test(reason)) {
       throw new AppActorError(`app actor: the vault could not read the App credentials because GitHub is rate-limited, not a denial: ${reason}`, "mint-failed");
     }
-    if (/^authority refused|\(HTTP 404\b/.test(reason)) return null;
+    if (/^authority refused|\(HTTP 40[14]\b/.test(reason)) return null;
     throw new AppActorError(`app actor: the vault read of the App credentials failed, not a denial: ${reason}`, "mint-failed");
   }
 }
@@ -7203,7 +7209,8 @@ async function mintInstallationToken(deps) {
   }
   return { token: body.token, expiresAt: body.expires_at, quotaScope: appQuotaScope(appId, installationId, process.env.GITHUB_API_URL) };
 }
-async function pollTokenOrUndefined(deps) {
+async function pollTokenOrUndefined(deps, env = process.env) {
+  if (env[APP_ACTOR_ENV]?.trim() === "personal") return void 0;
   try {
     return (await mintInstallationToken(deps)).token;
   } catch (e) {
@@ -7212,25 +7219,42 @@ async function pollTokenOrUndefined(deps) {
   }
 }
 var notedIneligibleCommand = false;
+var notedVaultDenied = false;
 async function activateAppActor(commandPath3, env, mint, note = (line) => process.stderr.write(`${line}
 `)) {
   activeQuotaScope = void 0;
   activeToken = void 0;
   const requested = (env[APP_ACTOR_ENV] ?? "").trim();
-  if (!requested) return "personal";
-  if (requested !== "app") {
-    throw new AppActorError(`app actor: unknown ${APP_ACTOR_ENV} value \u2014 only 'app' is supported; refusing to guess an identity`);
+  if (requested === "personal") return "personal";
+  if (requested && requested !== "app") {
+    throw new AppActorError(`app actor: unknown ${APP_ACTOR_ENV} value \u2014 only 'app' and 'personal' are supported; refusing to guess an identity`);
   }
   if (!APP_ELIGIBLE_COMMANDS.has(commandPath3)) {
-    if (!notedIneligibleCommand) {
+    if (requested === "app" && !notedIneligibleCommand) {
       notedIneligibleCommand = true;
       note(`app actor: '${commandPath3}' is personal-only (viewer/@me/authorship) \u2014 running on the personal token despite ${APP_ACTOR_ENV}=app`);
     }
     return "personal";
   }
+  const personalGh = env.GH_TOKEN;
+  const personalGithub = env.GITHUB_TOKEN;
   delete env.GH_TOKEN;
   delete env.GITHUB_TOKEN;
-  const minted = await mint();
+  let minted;
+  try {
+    minted = await mint();
+  } catch (e) {
+    if (!requested && e instanceof AppActorError && e.code === "vault-denied") {
+      if (personalGh !== void 0) env.GH_TOKEN = personalGh;
+      if (personalGithub !== void 0) env.GITHUB_TOKEN = personalGithub;
+      if (!notedVaultDenied) {
+        notedVaultDenied = true;
+        note("app actor: vault denied App credentials \u2014 running on the personal token on this host");
+      }
+      return "personal";
+    }
+    throw e;
+  }
   env.GH_TOKEN = minted.token;
   activeQuotaScope = minted.quotaScope;
   activeToken = minted.token;
@@ -7741,7 +7765,7 @@ function setPollTokenProvider(provider) {
   observedPool.clear();
 }
 async function pollToken() {
-  if (!pollTokenProvider) return void 0;
+  if (process.env.MMI_ACTOR?.trim() === "personal" || !pollTokenProvider) return void 0;
   pollTokenOnce ??= pollTokenProvider().catch((e) => {
     if (e instanceof AppActorError && e.code === "mint-failed") throw e;
     return void 0;
@@ -16397,6 +16421,33 @@ function defaultTrackedFirstSegments(root, firstSegments, exec3 = import_node_ch
     throw error;
   }
 }
+function mergeGroupRunbookMessages(root, deps, readFile10, warnings) {
+  const env = deps.env ?? process.env;
+  if (env.GITHUB_EVENT_NAME !== "merge_group") return "";
+  let source = "merge_group event payload";
+  try {
+    const event = JSON.parse(readFile10(env.GITHUB_EVENT_PATH ?? "") ?? "");
+    const match = /^refs\/heads\/gh-readonly-queue\/.+\/pr-([1-9]\d*)-[a-f0-9]+$/.exec(event.merge_group?.head_ref ?? "");
+    const repo = env.GITHUB_REPOSITORY;
+    if (!match || !repo || !/^[\w.-]+\/[\w.-]+$/.test(repo)) throw new Error("invalid queue source");
+    source = `repos/${repo}/pulls/${match[1]}/commits`;
+    const gh2 = deps.gh ?? ((args) => (0, import_node_child_process6.execFileSync)("gh", args, {
+      cwd: root,
+      encoding: "utf8",
+      windowsHide: true,
+      timeout: 3e4,
+      maxBuffer: CHECK_IGNORE_MAX_BUFFER,
+      env: { ...env, GH_TOKEN: env.GH_TOKEN || env.GITHUB_TOKEN },
+      stdio: ["ignore", "pipe", "pipe"]
+    }));
+    const pages = JSON.parse(gh2(["api", source, "--paginate", "--slurp"]));
+    if (!Array.isArray(pages) || !pages.every((page) => Array.isArray(page) && page.every((commit) => typeof commit?.commit?.message === "string"))) throw new Error("invalid commit response");
+    return pages.flat().map((commit) => commit.commit.message).join("\n");
+  } catch {
+    warnings.push({ kind: "runbook-source-unverified", doc: source, line: 0, detail: `failed to read ${source}; using git-log Runbook-Unaffected declarations only` });
+    return "";
+  }
+}
 function runDocRefs(root, deps = {}) {
   const readFile10 = deps.readFile ?? readFileOrNull;
   const exists = deps.exists ?? import_node_fs17.existsSync;
@@ -16433,7 +16484,10 @@ function runDocRefs(root, deps = {}) {
   if (deps.base) {
     const git3 = deps.git ?? ((args) => (0, import_node_child_process6.execFileSync)("git", args, { cwd: root, encoding: "utf8", maxBuffer: CHECK_IGNORE_MAX_BUFFER, windowsHide: true }));
     const stale = checkRunbookCoverage(runbooks, deps.base, git3);
-    const override = /^Runbook-Unaffected:[ \t]*\S.*$/m.test(git3(["log", "--format=%B", `${deps.base}..HEAD`]));
+    const messages = git3(["log", "--format=%B", `${deps.base}..HEAD`]);
+    const sourceMessages = stale.length ? mergeGroupRunbookMessages(root, deps, readFile10, warnings) : "";
+    const override = /^Runbook-Unaffected:[ \t]*\S.*$/m.test(`${messages}
+${sourceMessages}`);
     (override ? warnings : findings).push(...stale);
   }
   return {
@@ -18666,10 +18720,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.151",
-    tag: "v4.5.151",
-    commit: "c80d8f0f8b26",
-    npm: "@mutmutco/cli@4.5.151"
+    version: "4.5.153",
+    tag: "v4.5.153",
+    commit: "57b23d8d7d5f",
+    npm: "@mutmutco/cli@4.5.153"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -18686,14 +18740,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.151"
+          v3Target: "v4.5.153"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.151 and redeploy the Hub Lambda from tag v4.5.151 (c80d8f0f8b26); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.151 (@mutmutco/cli@4.5.151, tag commit c80d8f0f8b26 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.153 and redeploy the Hub Lambda from tag v4.5.153 (57b23d8d7d5f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.153 (@mutmutco/cli@4.5.153, tag commit 57b23d8d7d5f \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -22984,6 +23038,14 @@ async function runTenantControl(deps, options) {
       if (output) result.taskOutput = clampTaskOutput(output);
     }
   }
+  if (watch && runId != null && action === "run-task" && conclusion === "success") {
+    try {
+      const pages = JSON.parse(await deps.run("gh", ["api", `repos/${HUB_REPO2}/actions/runs/${runId}/artifacts`, "--paginate", "--slurp"]));
+      result.outputArtifacts = pages.flatMap((page) => page.artifacts ?? []).filter((a) => a.name.startsWith("task-output-") && Number.isSafeInteger(a.id) && a.id > 0).map((a) => ({ id: a.id, name: a.name, runId, downloadCommand: `MMI_ACTOR=app mmi-cli devops api get repos/${HUB_REPO2}/actions/artifacts/${a.id}/zip --out tmp/task-output-${runId}-${a.id}.zip` }));
+    } catch {
+      result.outputArtifactReadError = `Could not read output artifacts; retry with --resume ${runId} --watch (no re-dispatch)`;
+    }
+  }
   result.note = conclusion === "success" ? `tenant-control ${action} run succeeded` : conclusion === "failure" ? `tenant-control ${action} run failed \u2014 inspect the run` : runId == null ? `dispatched tenant-control.yml (${action}) \u2014 run not correlated; check the Actions tab` : `dispatched tenant-control.yml (${action}) \u2014 not watched`;
   if (conclusion === "pending" && runId != null && action === "run-task") {
     result.note += `; run ${runId} \u2014 resume without re-dispatching: mmi-cli devops runtime tenant control ${repo} ${stage} run-task --resume ${runId} --watch`;
@@ -22998,6 +23060,8 @@ function renderTenantControl(r) {
   if (r.secrets?.length) {
     for (const s of r.secrets) lines2.push(`  ${s.key}: ${s.status}`);
   }
+  for (const a of r.outputArtifacts ?? []) lines2.push(`  output artifact: ${a.name} (id ${a.id}, run ${a.runId})`, `  ${a.downloadCommand}`);
+  if (r.outputArtifactReadError) lines2.push(`  ${r.outputArtifactReadError}`);
   if (r.taskOutput) {
     lines2.push("  task output:");
     for (const l of r.taskOutput.split("\n")) lines2.push(`    ${l}`);
@@ -32898,7 +32962,7 @@ function parseTenantTasksVar(raw) {
     if (!nameRe.test(name)) throw new Error(`org project set: tenantTasks name ${JSON.stringify(name)} must be lowercase kebab-case`);
     if (!rawTask || typeof rawTask !== "object" || Array.isArray(rawTask)) throw new Error(`org project set: tenantTasks.${name} must be an object`);
     const task = rawTask;
-    if (Object.keys(task).some((key) => !["service", "command", "stages", "timeoutSeconds", "artifact", "secretOutput"].includes(key))) throw new Error(`org project set: tenantTasks.${name} has an unknown field`);
+    if (Object.keys(task).some((key) => !["service", "command", "stages", "timeoutSeconds", "artifact", "output", "secretOutput"].includes(key))) throw new Error(`org project set: tenantTasks.${name} has an unknown field`);
     if (typeof task.service !== "string" || !serviceRe.test(task.service)) throw new Error(`org project set: tenantTasks.${name}.service has an unsafe shape`);
     if (!Array.isArray(task.command) || task.command.length < 1 || task.command.length > 32 || task.command.some((arg) => typeof arg !== "string" || arg.length < 1 || arg.length > 256 || /[\u0000\r\n]/.test(arg))) throw new Error(`org project set: tenantTasks.${name}.command must be 1-32 bounded argv strings`);
     if (!Array.isArray(task.stages) || task.stages.length < 1 || task.stages.length > 3 || task.stages.some((stage) => typeof stage !== "string" || !validStages.has(stage)) || new Set(task.stages).size !== task.stages.length) throw new Error(`org project set: tenantTasks.${name}.stages must be unique dev/rc/main values`);
@@ -32908,12 +32972,16 @@ function parseTenantTasksVar(raw) {
     if (artifact !== "none" && artifact !== "required") throw new Error(`org project set: tenantTasks.${name}.artifact must be none or required`);
     const carriesPlaceholder = task.command.some((arg) => arg.includes("{artifact}"));
     if (artifact === "required" !== carriesPlaceholder) throw new Error(`org project set: tenantTasks.${name} must use {artifact} exactly when artifact is required`);
+    if (task.output !== void 0 && task.output !== "file") throw new Error(`org project set: tenantTasks.${name}.output must be file, use {output}, and cannot combine with secretOutput`);
+    const outputPlaceholder = task.command.some((arg) => arg.includes("{output}"));
+    if (task.output === "file" !== outputPlaceholder || task.output !== void 0 && task.secretOutput !== void 0) throw new Error(`org project set: tenantTasks.${name}.output must be file, use {output}, and cannot combine with secretOutput`);
     out[name] = {
       service: task.service,
       command: task.command,
       stages: task.stages,
       ...task.timeoutSeconds !== void 0 ? { timeoutSeconds: task.timeoutSeconds } : {},
       ...artifact !== "none" ? { artifact } : {},
+      ...task.output === "file" ? { output: "file" } : {},
       ...task.secretOutput !== void 0 ? { secretOutput: parseTenantTaskSecretOutput(task.secretOutput, `tenantTasks.${name}.secretOutput`) } : {}
     };
   }
@@ -32976,7 +33044,7 @@ var SETTABLE_VAR_HINTS = {
   requiredGcpApis: "comma-string",
   requiredRuntimeSecrets: 'JSON stage map, e.g. {"dev":["KEY"],"rc":["KEY"],"main":["KEY"]}',
   requiredBuildSecrets: 'JSON flat array, e.g. ["NODE_AUTH_TOKEN=@github-packages-token"]',
-  tenantTasks: 'JSON map {name:{service,command[],stages[],timeoutSeconds?,artifact?:"required",secretOutput?:{path,vault:{repo,key},overwrite?}}} \u2014 merged per entry, at most 20 stored in total; retire ONE task with --unset-task NAME; use {artifact} in argv when required; a secretOutput is master-only',
+  tenantTasks: 'JSON map {name:{service,command[],stages[],timeoutSeconds?,artifact?:"required",output?:"file",secretOutput?:{path,vault:{repo,key},overwrite?}}} \u2014 merged per entry, at most 20 stored in total; retire ONE task with --unset-task NAME; use {artifact} in argv when required; a secretOutput is master-only',
   internalPeers: "JSON {owner/repo:[dev|rc|main]} \u2014 same-box suite peers via the box Caddy; clear with --unset internalPeers (#7886)",
   secrets: "JSON catalog map keyed by KEY {key,purpose,group,owner,stages[],consumers[]} \u2014 merged per entry; drop ONE entry with --unset-secret KEY; clear ALL with --unset secrets --confirm-clear-secrets; prefer --secrets-file",
   edgeDomains: "JSON {dev,rc,main} domain map",
@@ -53108,6 +53176,46 @@ function parseBrokerAssignee(raw) {
   return v;
 }
 var SINGLE_SHOT_TIMEOUT_MS = 6e4;
+var BROKER_MAX_BUFFER = 64 * 1024 * 1024;
+var PR_QUEUE_QUERY = "query($owner:String!,$name:String!,$number:Int!){repository(owner:$owner,name:$name){pullRequest(number:$number){mergeQueueEntry{state position enqueuedAt estimatedTimeToMerge headCommit{oid}}}}}";
+function buildPrQueueSpec(number, o) {
+  const repo = parseBrokerRepo(o.repo, "--repo");
+  if (!repo) throw new Error("read pr queue: --repo is required");
+  const [owner, name] = repo.split("/");
+  return { program: "gh", args: ["api", "graphql", "-f", `query=${PR_QUEUE_QUERY}`, "-f", `owner=${owner}`, "-f", `name=${name}`, "-F", `number=${parseBrokerId(number, "PR number")}`], timeoutMs: SINGLE_SHOT_TIMEOUT_MS };
+}
+function buildPrDiffSpec(number, o) {
+  const args = withRepo(["pr", "diff", parseBrokerId(number, "PR number")], parseBrokerRepo(o.repo, "--repo"));
+  if (o.nameOnly) args.push("--name-only");
+  return { program: "gh", args, timeoutMs: SINGLE_SHOT_TIMEOUT_MS };
+}
+function parseBrokerPrSearch(raw) {
+  const search = parseBrokerSearch(raw);
+  if (search && /@me/i.test(search)) throw new Error("read: --search resolves the viewer \u2014 viewer-scoped reads stay personal");
+  return search;
+}
+function parseBrokerPrState(raw) {
+  if (raw === void 0) return void 0;
+  if (!["open", "closed", "merged", "all"].includes(raw)) throw new Error("read: --state must be one of: open, closed, merged, all");
+  return raw;
+}
+function buildPrListSpec(o) {
+  const args = withJson(withRepo(["pr", "list"], parseBrokerRepo(o.repo, "--repo")), parseBrokerJsonFields(o.json), o.json);
+  const state = parseBrokerPrState(o.state);
+  if (state) args.push("--state", state);
+  for (const flag of ["base", "head"]) {
+    const branch = parseBrokerBranch(o[flag]);
+    if (branch) args.push(`--${flag}`, branch);
+  }
+  const label = parseBrokerLabel(o.label);
+  if (label !== void 0) args.push("--label", label);
+  const search = parseBrokerPrSearch(o.search);
+  if (search !== void 0) args.push("--search", search);
+  const assignee = parseBrokerAssignee(o.assignee);
+  if (assignee) args.push("--assignee", assignee);
+  if (o.limit !== void 0) args.push("--limit", String(parseBrokerInt(o.limit, "--limit", 1, 100)));
+  return { program: "gh", args, timeoutMs: SINGLE_SHOT_TIMEOUT_MS };
+}
 function withRepo(args, repo) {
   return repo ? [...args, "--repo", repo] : args;
 }
@@ -53256,8 +53364,9 @@ async function runBrokerRestChecks(deps, spec, resolveRepo2) {
   return { rows: read.rows, state: read.state, exitCode: checkRowsExitCode(read.state) };
 }
 function requireBrokerApp(label) {
-  if (process.env.MMI_ACTOR !== "app") {
-    fail(`${label}: App-only read \u2014 re-run with spawn-scoped MMI_ACTOR=app (reads never fall back to personal; interactive use keeps gh and the human commands)`);
+  const actor = (process.env.MMI_ACTOR ?? "").trim();
+  if (actor && actor !== "app") {
+    fail(`${label}: App-only read \u2014 re-run with spawn-scoped MMI_ACTOR=app (explicit personal opt-out uses gh and the human commands instead)`);
   }
 }
 function registerPrChecksRequiredCommand(prRoot, resolveRepo2, overrides) {
@@ -53299,7 +53408,7 @@ async function dispatchRestChecksRead(deps, resolveRepo2, label, spec, json) {
   process.exitCode = result.exitCode;
 }
 function registerAppReadBrokerCommands(program3, resolveRepo2, overrides) {
-  const ghRun = overrides?.ghRunner ?? (async (args, opts) => (await execFileP("gh", args, { timeout: opts.timeoutMs, env: opts.env })).stdout);
+  const ghRun = overrides?.ghRunner ?? (async (args, opts) => (await execFileP("gh", args, { timeout: opts.timeoutMs, env: opts.env, maxBuffer: BROKER_MAX_BUFFER })).stdout);
   const restGhApi = overrides?.restGhApi ?? ((env) => ghApiWithEnv(env));
   const deps = { readRequired: readRequiredCheckRows, fetchSnapshot: fetchRestPrSnapshot, fetchRows: fetchHeadCheckRows, restGhApi };
   const dispatchGh = (spec, label) => (async () => {
@@ -53352,7 +53461,28 @@ function registerAppReadBrokerCommands(program3, resolveRepo2, overrides) {
     }
     await dispatchGh(spec, "read run watch");
   });
-  const pr = read.command("pr").description("pull-request reads \u2014 view rides gh; checks is REST-backed (deterministic closed-custody adapter; native was EMPTY only on the historical #3035 fixture)");
+  const pr = read.command("pr").description("pull-request reads \u2014 view/list/diff ride gh; queue uses fixed GraphQL; checks is REST-backed (deterministic closed-custody adapter; native was EMPTY only on the historical #3035 fixture)");
+  pr.command("list").description("list viewer-free PRs (author/viewer filters stay personal)").requiredOption("--repo <owner/repo>", "target repo", repoOpt).option("--json [fields]", "native gh JSON fields", jsonOpt).addOption(new Option("--state <state>", "open|closed|merged|all").choices(["open", "closed", "merged", "all"])).option("--base <branch>", "base branch", branchOpt).option("--head <branch>", "head branch", branchOpt).option("--label <label>", "filter by label", labelOpt).option("--search <query>", "viewer-free search", (v) => parseBrokerPrSearch(v)).option("--assignee <login>", "explicit assignee (viewer refused)", assigneeOpt).option("--limit <n>", "maximum PRs (1-100)", intOpt("--limit", 1, 100)).action(async (o) => {
+    await dispatchGh(buildPrListSpec(o), "read pr list");
+  });
+  pr.command("diff").description("read a bounded PR diff on the App pool").requiredOption("--repo <owner/repo>", "target repo", repoOpt).option("--name-only", "only changed file names").argument("<number>", "PR number", idOpt("PR number")).action(async (number, o) => {
+    await dispatchGh(buildPrDiffSpec(number, o), "read pr diff");
+  });
+  pr.command("queue").description("read one PR mergeQueueEntry (fixed GraphQL query, no permission widening)").requiredOption("--repo <owner/repo>", "target repo", repoOpt).option("--json", "machine-readable mergeQueueEntry (null when not queued)").argument("<number>", "PR number", idOpt("PR number")).action(async (number, o) => {
+    const spec = buildPrQueueSpec(number, o);
+    requireBrokerApp("read pr queue");
+    try {
+      process.exitCode = await runBrokerGh(async (args, opts) => {
+        const result = JSON.parse(await ghRun(args, opts));
+        if (result.errors?.length) throw new Error(JSON.stringify(result.errors));
+        const pr2 = result.data?.repository?.pullRequest;
+        if (!pr2) throw new Error("PR not found or not accessible on the App pool");
+        return JSON.stringify(pr2.mergeQueueEntry) + "\n";
+      }, spec);
+    } catch (e) {
+      return fail(`read pr queue: ${e.message}`);
+    }
+  });
   pr.command("view").description("read a PR as gh JSON (comments/json; --json supports statusCheckRollup selection; formatters refused)").option("--repo <owner/repo>", "target repo (defaults to the current repo)", repoOpt).option("--json [fields]", "machine-readable output (comma-separated gh fields)", jsonOpt).option("--comments", "include PR comments").argument("<number>", "PR number", idOpt("PR number")).action(async (number, o) => {
     let spec;
     try {
@@ -53423,14 +53553,14 @@ var RUNS_QUERY_VALUE = {
   created: /^[0-9:TZ.<>=-]+$/,
   actor: /^[A-Za-z0-9_.\[\]-]+$/
 };
-function validRunsQuery(query) {
+function validRunsQuery(query, allowed = RUNS_QUERY_VALUE) {
   const seen = /* @__PURE__ */ new Set();
   for (const pair of query.split("&")) {
     const eq = pair.indexOf("=");
     if (eq < 1) return false;
     const key = pair.slice(0, eq);
     const value = pair.slice(eq + 1);
-    const re = Object.prototype.hasOwnProperty.call(RUNS_QUERY_VALUE, key) ? RUNS_QUERY_VALUE[key] : void 0;
+    const re = Object.prototype.hasOwnProperty.call(allowed, key) ? allowed[key] : void 0;
     if (!re || seen.has(key) || !re.test(value)) return false;
     seen.add(key);
   }
@@ -53442,7 +53572,12 @@ var ACTIONS_JOBS_RE = new RegExp(`^repos/${NAME}/${NAME}/actions/runs/\\d+(?:/at
 var ACTIONS_ARTIFACTS_RE = new RegExp(`^repos/${NAME}/${NAME}/actions/runs/\\d+/artifacts$`);
 var ACTIONS_ARTIFACT_ZIP_RE = new RegExp(`^repos/${NAME}/${NAME}/actions/artifacts/\\d+/zip$`);
 var ACTIONS_JOB_LOGS_RE = new RegExp(`^repos/${NAME}/${NAME}/actions/jobs/\\d+/logs$`);
-var API_GET_ALLOWED_SHAPES = "repos/{owner}/{repo}/pulls/{n}/files, repos/{owner}/{repo}/compare/{a}...{b}, repos/{owner}/{repo}/contents/{path}[?ref=<branch>], repos/{owner}/{repo}/actions/runs[?per_page=1-100&page=<n>&status=&branch=&event=&head_sha=<40-hex>&created=<date-range>&actor=, each key at most once], repos/{owner}/{repo}/actions/runs/{id}, repos/{owner}/{repo}/actions/runs/{id}/jobs, repos/{owner}/{repo}/actions/runs/{id}/attempts/{n}/jobs, repos/{owner}/{repo}/actions/runs/{id}/artifacts, repos/{owner}/{repo}/actions/artifacts/{id}/zip (needs --out <file>), repos/{owner}/{repo}/actions/jobs/{id}/logs (needs --out <file>)";
+var RELEASE_LIST_RE = new RegExp(`^repos/${NAME}/${NAME}/releases$`);
+var RELEASE_LIST_QUERY_VALUE = { per_page: RUNS_QUERY_VALUE.per_page, page: RUNS_QUERY_VALUE.page };
+var RELEASE_LATEST_RE = new RegExp(`^repos/${NAME}/${NAME}/releases/latest$`);
+var RELEASE_TAG_RE = new RegExp(`^repos/${NAME}/${NAME}/releases/tags/(${NAME})$`);
+var RELEASE_ASSET_RE = new RegExp(`^repos/${NAME}/${NAME}/releases/assets/\\d+$`);
+var API_GET_ALLOWED_SHAPES = "repos/{owner}/{repo}/pulls/{n}/files, repos/{owner}/{repo}/compare/{a}...{b}, repos/{owner}/{repo}/contents/{path}[?ref=<branch>], repos/{owner}/{repo}/actions/runs[?per_page=1-100&page=<n>&status=&branch=&event=&head_sha=<40-hex>&created=<date-range>&actor=, each key at most once], repos/{owner}/{repo}/actions/runs/{id}, repos/{owner}/{repo}/actions/runs/{id}/jobs, repos/{owner}/{repo}/actions/runs/{id}/attempts/{n}/jobs, repos/{owner}/{repo}/actions/runs/{id}/artifacts, repos/{owner}/{repo}/actions/artifacts/{id}/zip (needs --out <file>), repos/{owner}/{repo}/actions/jobs/{id}/logs (needs --out <file>), repos/{owner}/{repo}/releases[?per_page=1-100&page=<n>, each key at most once], repos/{owner}/{repo}/releases/latest, repos/{owner}/{repo}/releases/tags/{tag}, repos/{owner}/{repo}/releases/assets/{id} (needs --out <file>)";
 function parseApiGetPath(rawPath) {
   const path2 = rawPath.trim();
   const refuse = () => new Error(`api get: refusing '${rawPath}' \u2014 only these GET reads are allowed (#7219): ${API_GET_ALLOWED_SHAPES}`);
@@ -53458,6 +53593,11 @@ function parseApiGetPath(rawPath) {
   if (ACTIONS_ARTIFACTS_RE.test(path2)) return { kind: "actions-artifacts", path: path2, paginate: true };
   if (ACTIONS_ARTIFACT_ZIP_RE.test(path2)) return { kind: "actions-artifact-zip", path: path2, paginate: false };
   if (ACTIONS_JOB_LOGS_RE.test(path2)) return { kind: "actions-job-logs", path: path2, paginate: false };
+  if (RELEASE_LIST_RE.test(base) && (q === -1 || validRunsQuery(query, RELEASE_LIST_QUERY_VALUE))) return { kind: "release-list", path: path2, paginate: false };
+  if (RELEASE_LATEST_RE.test(path2)) return { kind: "release-latest", path: path2, paginate: false };
+  const tag = RELEASE_TAG_RE.exec(path2)?.[1];
+  if (tag && !tag.includes("..")) return { kind: "release-tag", path: path2, paginate: false };
+  if (RELEASE_ASSET_RE.test(path2)) return { kind: "release-asset", path: path2, paginate: false };
   if (CONTENTS_BASE_RE.test(base) && (query === "" || CONTENTS_QUERY_RE.test(query))) {
     return { kind: "contents", path: path2, paginate: false };
   }
@@ -53469,7 +53609,8 @@ function buildApiGetArgs(path2, accept) {
   const req = parseApiGetPath(path2);
   const args = ["api", req.path];
   if (req.paginate) args.push("--paginate");
-  const header = acceptHeaderFor(accept);
+  const requestedHeader = acceptHeaderFor(accept);
+  const header = req.kind === "release-asset" ? "application/octet-stream" : requestedHeader;
   if (header !== API_ACCEPT_HEADERS.json) args.push("-H", `Accept: ${header}`);
   return args;
 }
@@ -53486,16 +53627,16 @@ async function readAppApi(path2, runner = apiReadRunner) {
 }
 function registerApiReadCommands(program3, overrides) {
   const spawn6 = overrides?.runner ?? apiReadRunner;
-  const api = program3.command("api").description("bounded GitHub REST reads for automation \u2014 GET only, allowlisted paths (pull files, compare, contents, actions runs/jobs/artifacts)");
+  const api = program3.command("api").description("bounded GitHub REST reads for automation \u2014 GET only, allowlisted paths (pull files, compare, contents, actions runs/jobs/artifacts, releases)");
   api.command("get").description("GET one allowlisted REST path and print the response body to stdout (JSON, or raw file bytes with --accept raw); refuses everything outside the allowlist").option("--accept <type>", "response media type: json (default) or raw (file bytes)", (v) => {
     acceptHeaderFor(v);
     return v.trim().toLowerCase();
-  }, "json").option("--out <file>", "write the response bytes to this file instead of stdout (required for, and only valid with, actions/artifacts/{id}/zip)").argument("<path>", "allowlisted GET path (shapes named on refusal)", (v) => parseApiGetPath(v)).action(async (req, o) => {
-    const zip = req.kind === "actions-artifact-zip" || req.kind === "actions-job-logs";
-    if (zip !== (o.out !== void 0)) return fail(`api get: --out <file> is required for, and only valid with, repos/{owner}/{repo}/actions/artifacts/{id}/zip and repos/{owner}/{repo}/actions/jobs/{id}/logs`);
-    const actionsRoute = req.kind.startsWith("actions-");
-    if (actionsRoute) requireBrokerApp("api get");
-    const env = actionsRoute || process.env.MMI_ACTOR === "app" ? brokerChildEnv() : void 0;
+  }, "json").option("--out <file>", "write response bytes to a file (required for, and only valid with, actions artifact zips, job logs, and release assets)").argument("<path>", "allowlisted GET path (shapes named on refusal)", (v) => parseApiGetPath(v)).action(async (req, o) => {
+    const zip = req.kind === "actions-artifact-zip" || req.kind === "actions-job-logs" || req.kind === "release-asset";
+    if (zip !== (o.out !== void 0)) return fail(`api get: --out <file> is required for, and only valid with, repos/{owner}/{repo}/actions/artifacts/{id}/zip and repos/{owner}/{repo}/actions/jobs/{id}/logs and repos/{owner}/{repo}/releases/assets/{id}`);
+    const appRoute = req.kind.startsWith("actions-") || req.kind.startsWith("release-");
+    if (appRoute) requireBrokerApp("api get");
+    const env = appRoute || process.env.MMI_ACTOR?.trim() !== "personal" ? brokerChildEnv() : void 0;
     let body;
     try {
       body = await runApiGet(
@@ -57203,7 +57344,7 @@ ${filelessTransitionGuide(target, o.stage)}`
   return reportWrite("org project set-deploy", res);
 });
 var projectTenantTasks = project.command("tenant-tasks").description("project-admin self-declare of tenant tasks for every stage of your own repo \u2014 new-task-only; editing an existing task stays master-only (`org project set --var tenantTasks=...`)");
-projectTenantTasks.command("declare <name>").description("register a NEW tenant task \u2014 becomes runnable via `runtime tenant control \u2026 run-task` on its declared dev/rc/main stages. Body shape {service,command[],stages[],timeoutSeconds?,artifact?}; required artifact tasks must carry {artifact} in the command argv.").option("--service <name>", "service in the tenant runtime the task runs in (required unless --var carries it)").option("--command <argv...>", `task command as argv (repeatable; required unless --var carries it). An argv token that starts with "-" (python -m mod) is read as an option and the whole call fails to parse: declare such a command with --var '{"service":"<svc>","command":["python","-m","mod"],"stages":["dev"]}' instead (#7668)`).option("--stages <list>", "comma-separated dev,rc,main stages this task may run on (required unless --var carries it)").option("--timeout-seconds <n>", "optional wall-clock ceiling 1..10800 (1..3600 with a secretOutput)").option("--artifact <none|required>", "artifact contract (default none; required tasks must contain {artifact} in argv)").option("--var <json>", "full task object {service,command[],stages[],timeoutSeconds?,artifact?} \u2014 use instead of the individual flags. A task carrying secretOutput:{path,vault:{repo,key},overwrite?} is master-only; declare that via `org project set --var tenantTasks=...`").option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action(async (name, o) => {
+projectTenantTasks.command("declare <name>").description('register a NEW tenant task \u2014 becomes runnable via `runtime tenant control \u2026 run-task` on its declared dev/rc/main stages. Body shape {service,command[],stages[],timeoutSeconds?,artifact?,output?:"file"}; required artifact tasks must carry {artifact} in the command argv.').option("--service <name>", "service in the tenant runtime the task runs in (required unless --var carries it)").option("--command <argv...>", `task command as argv (repeatable; required unless --var carries it). An argv token that starts with "-" (python -m mod) is read as an option and the whole call fails to parse: declare such a command with --var '{"service":"<svc>","command":["python","-m","mod"],"stages":["dev"]}' instead (#7668)`).option("--stages <list>", "comma-separated dev,rc,main stages this task may run on (required unless --var carries it)").option("--timeout-seconds <n>", "optional wall-clock ceiling 1..10800 (1..3600 with a secretOutput)").option("--output <file>", "return {output} as a private 1-day Actions artifact (cannot combine with secretOutput)").option("--artifact <none|required>", "artifact contract (default none; required tasks must contain {artifact} in argv)").option("--var <json>", 'full task object {service,command[],stages[],timeoutSeconds?,artifact?,output?:"file"} \u2014 use instead of the individual flags. A task carrying secretOutput:{path,vault:{repo,key},overwrite?} is master-only; declare that via `org project set --var tenantTasks=...`').option("--repo <owner/repo>", "target repo (defaults to the current repo)").option("--json", "machine-readable output").action(async (name, o) => {
   const cfg = await loadConfig();
   let target;
   try {
@@ -57228,7 +57369,8 @@ projectTenantTasks.command("declare <name>").description("register a NEW tenant
       command: o.command,
       stages: o.stages.split(",").map((s) => s.trim()).filter(Boolean),
       ...o.timeoutSeconds !== void 0 ? { timeoutSeconds: Number(o.timeoutSeconds) } : {},
-      ...o.artifact !== void 0 ? { artifact: o.artifact } : {}
+      ...o.artifact !== void 0 ? { artifact: o.artifact } : {},
+      ...o.output !== void 0 ? { output: o.output } : {}
     };
   }
   if (task && typeof task === "object" && task.secretOutput !== void 0) {

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.151",
+  "version": "4.5.153",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.151",
+  "version": "4.5.153",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/bootstrap/seeds/gate.template.yml

@@ -54,6 +54,7 @@ concurrency:
 permissions:
   actions: read # #8206: exact-SHA development workflow verdict
   contents: read
+  pull-requests: read # #8343: source commit declarations omitted by queue squashes
   # MMI-Hub#7542: the product image build below reads org private packages with the workflow's
   # own ephemeral token (NODE_AUTH_TOKEN) — the same reader the central deploy uses.
   packages: read

package/skills/bootstrap/seeds/suite-gate.template.yml

@@ -12,6 +12,7 @@ concurrency:
 permissions:
   actions: read # #8206: exact-SHA development workflow verdict
   contents: read
+  pull-requests: read # #8343: source commit declarations omitted by queue squashes
   packages: read
 jobs:
   gate: