@mutmutco/codex-plugin 4.5.210 → 4.5.211

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.210",
+  "version": "4.5.211",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -10608,6 +10608,10 @@ async function fetchTrainAuthority(repo, deps) {
     }
     const body = await res.json();
     if (typeof body?.train !== "boolean" || !body.role) return { ok: false, error: "malformed train-authority response" };
+    if (body.authenticatedDelegation !== void 0 && (body.authenticatedDelegation !== true || !body.train || body.repo !== repo || body.delegatedActor !== body.login || !/^[A-Za-z0-9-]{1,39}$/.test(body.delegatedActor ?? ""))) {
+      return { ok: false, error: "malformed delegated train-authority response" };
+    }
+    if (body.delegatedActor !== void 0 && body.authenticatedDelegation !== true) return { ok: false, error: "unverified delegated actor" };
     return { ok: true, authority: body };
   } catch (e) {
     return { ok: false, error: e.message };
@@ -15805,12 +15809,16 @@ function isUnknownHold(contest) {
   return !contest.marker && contest.live.length === 0 && contest.unverifiable.length > 0;
 }
 var CONTESTED_CLAIM_RECOVERY = "leave the holder's work untouched and choose another unclaimed item or coordinate a handoff (use --force only for an intentional takeover)";
+function contestedClaimRecovery(ref) {
+  const repo = /^([^/\s#]+\/[^/\s#]+)#\d+$/.exec(ref)?.[1];
+  return `${CONTESTED_CLAIM_RECOVERY}; list free items with: mmi-cli oracle board read --json${repo ? ` --repo ${repo}` : ""} and pick from its claimable list`;
+}
 function laneContestMessage(ref, contest, verb) {
   const { holder, why } = laneContestParts(contest);
   if (isUnknownHold(contest)) {
-    return verb === "claim" ? `${ref} cannot be verified as free: ${holder} (${why}); the liveness reads failed so the claim is refused fail-closed \u2014 ${CONTESTED_CLAIM_RECOVERY}` : `refusing to unclaim ${ref}: ${holder} (${why}); the liveness reads failed so the unclaim is refused fail-closed \u2014 re-run with --force --holder-dead once you have evidence the holder lane is dead, or wait for it to go stale (#6625)`;
+    return verb === "claim" ? `${ref} cannot be verified as free: ${holder} (${why}); the liveness reads failed so the claim is refused fail-closed \u2014 ${contestedClaimRecovery(ref)}` : `refusing to unclaim ${ref}: ${holder} (${why}); the liveness reads failed so the unclaim is refused fail-closed \u2014 re-run with --force --holder-dead once you have evidence the holder lane is dead, or wait for it to go stale (#6625)`;
   }
-  return verb === "claim" ? `${ref} is already claimed by ${holder} with live evidence of active work (${why}); ${CONTESTED_CLAIM_RECOVERY}` : `refusing to unclaim ${ref}: ${holder} shows live evidence of active work (${why}); re-run with --force --holder-dead once you have evidence the holder lane is dead, or wait for it to go stale (#6625)`;
+  return verb === "claim" ? `${ref} is already claimed by ${holder} with live evidence of active work (${why}); ${contestedClaimRecovery(ref)}` : `refusing to unclaim ${ref}: ${holder} shows live evidence of active work (${why}); re-run with --force --holder-dead once you have evidence the holder lane is dead, or wait for it to go stale (#6625)`;
 }
 function ghError(e) {
   const err = e;
@@ -19653,10 +19661,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.210",
-    tag: "v4.5.210",
-    commit: "a9e5d838bc19",
-    npm: "@mutmutco/cli@4.5.210"
+    version: "4.5.211",
+    tag: "v4.5.211",
+    commit: "cbbcc24fc015",
+    npm: "@mutmutco/cli@4.5.211"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -19673,14 +19681,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.210"
+          v3Target: "v4.5.211"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.210 and redeploy the Hub Lambda from tag v4.5.210 (a9e5d838bc19); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.210 (@mutmutco/cli@4.5.210, tag commit a9e5d838bc19 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.211 and redeploy the Hub Lambda from tag v4.5.211 (cbbcc24fc015); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.211 (@mutmutco/cli@4.5.211, tag commit cbbcc24fc015 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -21824,9 +21832,12 @@ async function buildTrainApplyContext(deps) {
   const repo = requireValue(clean2(await deps.run("gh", ["repo", "view", "--json", "nameWithOwner", "--jq", ".nameWithOwner"])), "repo");
   const [owner, name] = repo.split("/");
   if (!owner || !name) throw new Error(`repo must be owner/name, got ${repo}`);
-  const login = await readTrainLogin(deps);
   const verdict = await deps.trainAuthority(repo);
   if (!verdict.ok) throw new Error(`${commandAuthorityLabel(owner)}: train authority could not be verified (${verdict.error})`);
+  if (verdict.authenticatedDelegation === true && (!verdict.train || !/^[A-Za-z0-9-]{1,39}$/.test(verdict.delegatedActor ?? ""))) {
+    throw new Error("invalid delegated train authority");
+  }
+  const login = verdict.authenticatedDelegation === true ? verdict.delegatedActor : await readTrainLogin(deps);
   if (!verdict.train) {
     throw new Error(`${commandAuthorityLabel(owner)}: @${login} is ${verdict.role} \u2014 no train authority on ${repo}`);
   }
@@ -24202,6 +24213,12 @@ function classifyRunnerCost(selector) {
   const labels = /^\[[^\[\]]+\]$/.test(raw) ? raw.slice(1, -1).split(",").map((s) => s.trim().replace(/^(['"])(.*)\1$/, "$2")) : /^(?:-\s*[^\n]+\s*)+$/.test(raw) ? raw.split("\n").map((s) => s.trim().replace(/^-\s*/, "").replace(/^(['"])(.*)\1$/, "$2")) : [raw.replace(/^(['"])(.*)\1$/, "$2")];
   return labels.every((l) => /^[\w-]+$/.test(l)) && labels.some((l) => l.toLowerCase() === "self-hosted") ? "self-hosted" : "unknown";
 }
+var STANDARD_HOSTED_ALLOWLIST = [
+  ["mutmutco/MMI-Hub", ".github/workflows/launcher-build.yml", "build", "windows-latest"]
+];
+function standardHostedLabelFor(repo, path2, jobId) {
+  return STANDARD_HOSTED_ALLOWLIST.find(([r, p, j]) => r === repo && p === path2 && j === jobId)?.[3];
+}
 function classifyJobRunnerCost(selector, jobBody, standardHostedLabel) {
   const direct = classifyRunnerCost(selector);
   const matrix = /^\$\{\{\s*matrix\.([\w-]+)\s*\}\}$/.exec(selector.trim());
@@ -24230,14 +24247,15 @@ function parseJson(raw, label) {
     throw new Error(`${label} was not valid JSON`);
   }
 }
-function workflowNeedsHostedRunner(yaml, localWorkflows = /* @__PURE__ */ new Set()) {
+function workflowNeedsHostedRunner(yaml, localWorkflows = /* @__PURE__ */ new Set(), where) {
   const jobs = parseWorkflowJobs(yaml.split(/\r?\n/).filter((l) => !/^\s*#/.test(l)).join("\n"));
   return !jobs.length || jobs.some((job) => {
     const callee = /^    uses:\s*\.\/(.+)$/m.exec(job.body)?.[1];
     if (callee && localWorkflows.has(callee)) return false;
     const section = /^    runs-on:([^\n]*(?:\n {6,}[^\n]*)*)/m.exec(job.body)?.[1] ?? "";
     const selector = section.split("\n").map((line) => line.trim()).join("\n");
-    return classifyJobRunnerCost(selector, job.body) !== "self-hosted";
+    const cost = classifyJobRunnerCost(selector, job.body, where && standardHostedLabelFor(where.repo, where.path, job.id));
+    return cost !== "self-hosted" && cost !== "standard-hosted";
   });
 }
 async function hostedWorkflowsOf(deps, repo) {
@@ -24253,7 +24271,7 @@ async function hostedWorkflowsOf(deps, repo) {
     workflows.push({ path: f.path, body: Buffer.from(raw.content ?? "", "base64").toString("utf8") });
   }
   const local = new Set(workflows.map((file) => file.path));
-  return workflows.filter((file) => workflowNeedsHostedRunner(file.body, local)).map((file) => file.path);
+  return workflows.filter((file) => workflowNeedsHostedRunner(file.body, local, { repo, path: file.path })).map((file) => file.path);
 }
 async function assertActionsJobsCanStart(deps, targetRepo2) {
   let hosted;
@@ -25803,6 +25821,9 @@ function failedRunIdentity(run, repo) {
 function manualRunAction(run, repo) {
   return `safe next action: diagnose with gh run view ${run.runId} --repo ${repo} --log-failed; rerun by hand only when the cause is fixed: gh run rerun ${run.runId} --repo ${repo} --failed (never re-tag)`;
 }
+function runsOnShaAction(repo, sha) {
+  return `safe next action: mmi-cli devops read run list --repo ${repo} --commit ${sha} --json databaseId,workflowName,event,status,conclusion to identify the run`;
+}
 async function readFailedRunsOnSha(deps, repo, sha) {
   try {
     const rows = JSON.parse(await deps.run("gh", [
@@ -25878,7 +25899,7 @@ async function correlateCandidateRunsToRequiredContexts(deps, repo, sha, candida
   if (contexts.length === 0) {
     return {
       unique: false,
-      note: `the failure names no failed required context \u2014 rerunning the first failed run could rerun an unrelated workflow; manual intervention required; safe next action: gh run list --repo ${repo} --commit ${sha.slice(0, 12)} to identify the run`
+      note: `the failure names no failed required context \u2014 rerunning the first failed run could rerun an unrelated workflow; manual intervention required; ${runsOnShaAction(repo, sha)}`
     };
   }
   const failedChecks = await readFailedCheckRunsOnSha(deps, repo, sha);
@@ -25931,7 +25952,7 @@ async function transientRecoveryForFailedPhase(deps, input) {
     };
   }
   if (candidates.length === 0) {
-    return { reran: false, recovered: false, note: `no failed run with an id could be classified on ${sha.slice(0, 12)} \u2014 manual intervention required (no marker proof, no automatic rerun); safe next action: gh run list --repo ${input.repo} --commit ${sha.slice(0, 12)} to identify the run` };
+    return { reran: false, recovered: false, note: `no failed run with an id could be classified on ${sha.slice(0, 12)} \u2014 manual intervention required (no marker proof, no automatic rerun); ${runsOnShaAction(input.repo, sha)}` };
   }
   if (enumerated && phase === "ordinaryCi") {
     const correlation = await correlateCandidateRunsToRequiredContexts(deps, input.repo, sha, candidates, extractFailedRequiredContexts(failure));
@@ -30429,9 +30450,6 @@ var NPM_PUBLISH_SAFE_FLOOR_SHA = "b5632c8b940d8025fdb5630e576502e1397c4552";
 var SHARED_ACTION_PINS = [
   { path: "npm-publish", floor: NPM_PUBLISH_SAFE_FLOOR_SHA }
 ];
-var STANDARD_HOSTED_ALLOWLIST = [
-  ["mutmutco/MMI-Hub", ".github/workflows/launcher-build.yml", "build", "windows-latest"]
-];
 function auditRunnerFallbacks(repo, files) {
   const checks = [];
   for (const { path: path2, body } of files) {
@@ -30441,9 +30459,7 @@ function auditRunnerFallbacks(repo, files) {
       const callee = /^    uses:\s*(.+)$/m.exec(job.body)?.[1];
       if (callee?.startsWith("./") && files.some((file) => file.path === callee.slice(2))) continue;
       if (callee && /^mutmutco\/MMI-Hub\/\.github\/workflows\/[\w.-]+\.ya?ml@[\w./-]+$/.test(callee)) continue;
-      const standardHostedLabel = STANDARD_HOSTED_ALLOWLIST.find(
-        ([allowedRepo, allowedPath, allowedJob]) => repo === allowedRepo && path2 === allowedPath && job.id === allowedJob
-      )?.[3];
+      const standardHostedLabel = standardHostedLabelFor(repo, path2, job.id);
       const cost = classifyJobRunnerCost(runnerSection.split("\n").map((line) => line.trim()).join("\n"), job.body, standardHostedLabel);
       const ok = !callee && (cost === "self-hosted" || cost === "standard-hosted");
       checks.push({
@@ -49845,7 +49861,12 @@ function trainApplyDeps() {
     runSelf: async (args) => (await execFileP(process.execPath, [process.argv[1], ...canonicalArgvFor(args)], { timeout: 3e4 })).stdout,
     trainAuthority: async (repo) => {
       const verdict = await fetchTrainAuthority(repo, registryClientDeps(await loadConfig()));
-      return verdict.ok ? { ok: true, role: verdict.authority.role, train: verdict.authority.train } : verdict;
+      return verdict.ok ? {
+        ok: true,
+        role: verdict.authority.role,
+        train: verdict.authority.train,
+        ...verdict.authority.authenticatedDelegation === true ? { authenticatedDelegation: true, delegatedActor: verdict.authority.delegatedActor } : {}
+      } : verdict;
     },
     // Hub-App-authority dispatch of the central tenant deploy (#953) — the Hub fires the
     // workflow_dispatch with its App token, so the caller needs no MMI-Hub Actions write.
@@ -54899,12 +54920,19 @@ function parseBrokerCreated(v) {
   if (!CREATED_RE.test(v)) throw new Error(`--created must be a GitHub created filter like ">=2026-10-11T00:30:00Z" (got ${JSON.stringify(v)})`);
   return v;
 }
+function parseBrokerCommit(v) {
+  if (v === void 0) return void 0;
+  if (!/^[0-9a-f]{40}$/i.test(v)) throw new Error(`read: --commit must be a full 40-character commit SHA (received '${v}')`);
+  return v;
+}
 function buildRunListSpec(o) {
   const args = withJson(withRepo(["run", "list"], parseBrokerRepo(o.repo, "--repo")), parseBrokerJsonFields(o.json), o.json);
   const workflow = parseBrokerWorkflow(o.workflow);
   if (workflow) args.push("--workflow", workflow);
   const branch = parseBrokerBranch(o.branch);
   if (branch) args.push("--branch", branch);
+  const commit = parseBrokerCommit(o.commit);
+  if (commit) args.push("--commit", commit);
   const status = parseBrokerRunStatus(o.status);
   if (status) args.push("--status", status);
   const created = parseBrokerCreated(o.created);
@@ -55108,7 +55136,7 @@ function registerAppReadBrokerCommands(program3, resolveRepo2, overrides) {
     }
     await dispatchGh(spec, "read run view");
   });
-  run.command("list").description("list workflow runs (workflow/branch/status/created/limit/json; formatters refused)").option("--repo <owner/repo>", "target repo (defaults to the current repo)", repoOpt).option("--json [fields]", "machine-readable output (comma-separated gh fields)", jsonOpt).option("--workflow <name>", "filter by workflow name or file", workflowOpt).option("--branch <name>", "filter by branch", branchOpt).option("--status <status>", "filter by run status", runStatusOpt).option("--created <filter>", 'only runs created in this window, e.g. ">=2026-10-11T00:30:00Z" (#8096)', (v) => parseBrokerCreated(v)).option("--limit <n>", "maximum runs to fetch (1-100)", intOpt("--limit", 1, 100)).action(async (o) => {
+  run.command("list").description("list workflow runs (workflow/branch/commit/status/created/limit/json; formatters refused)").option("--repo <owner/repo>", "target repo (defaults to the current repo)", repoOpt).option("--json [fields]", "machine-readable output (comma-separated gh fields)", jsonOpt).option("--workflow <name>", "filter by workflow name or file", workflowOpt).option("--branch <name>", "filter by branch", branchOpt).option("--commit <sha>", "filter by the full 40-character head commit SHA (#8937)", (v) => parseBrokerCommit(v)).option("--status <status>", "filter by run status", runStatusOpt).option("--created <filter>", 'only runs created in this window, e.g. ">=2026-10-11T00:30:00Z" (#8096)', (v) => parseBrokerCreated(v)).option("--limit <n>", "maximum runs to fetch (1-100)", intOpt("--limit", 1, 100)).action(async (o) => {
     let spec;
     try {
       spec = buildRunListSpec(o);

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.210",
+  "version": "4.5.211",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.210",
+  "version": "4.5.211",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/board/SKILL.md

@@ -21,6 +21,8 @@ accepts an incomplete board. The CLI partitions rows into **Yours**, **Free to c
 stamps (4 hours without work) hold nothing. Partition rules, stamp details and `--out` rationale:
 [reference.md](reference.md).
 
+Read single issues/PRs with `MMI_ACTOR=app mmi-cli devops read issue view <n> --repo <owner/repo> --json <fields>` (or `issue list`, `pr view`, `run view`) and filter the JSON locally: under the App pool, gh `--jq`/`-q`/`--template`/`--web` are refused.
+
 ## Step 2 — render it
 
 Plain markdown, never a fenced block. Flat `-` lists under bold heads, never `##` headings, never tables.
@@ -62,6 +64,8 @@ Follow printed owner rulings; record new ones with `mmi-cli oracle issue decisio
 
 With several task lanes in one session, pass `worktree: <the mmi-worktrees/<Repo>/<issue>-<slug> path jerv_worktree_create reported>` to `jerv_worktree_exec` / `jerv_worktree_land` every time; they refuse to guess (#5629).
 
+A fresh mmi worktree has no `.jerv/`: run `mkdir -p .jerv/tmp` before writing scratch files there (PR bodies, batches) or listing it.
+
 ## Step 5 — land one PR per batch
 
 No `--issues` or `--closes` flag; put `Closes #6395, #6396, #6397` in the **body**. After merge, board

package/skills/epic/SKILL.md

@@ -29,7 +29,7 @@ Inspect existing children first:
 mmi-cli oracle issue children <owner/repo#N>
 ```
 
-Write a JSON array, one object per child, to `.jerv/tmp/epic-<parentNumber>-children.json` (unique per epic; a leftover batch from another epic collides with the new rows):
+Write a JSON array, one object per child, to `.jerv/tmp/epic-<parentNumber>-children.json` (unique per epic; a leftover batch from another epic collides with the new rows). A fresh mmi worktree has no `.jerv/`; run `mkdir -p .jerv/tmp` first:
 
 ```json
 [

package/skills/hotfix/SKILL.md

@@ -29,6 +29,8 @@ mmi-cli devops train doctor --lane hotfix --heal --json
 
 Parse stdout only; never `2>&1`. `ready` false → stop and quote every blocker's `code` and `remedy`; an unread origin is never green. Findings carry `code`, `severity`, `source`, `remedy`, `anchor`.
 
+Piping `mmi-cli devops api get` into a JSON parser: a refusal exits 1 with empty stdout, so guard both: `out=$(MMI_ACTOR=app mmi-cli devops api get <path>) && [ -n "$out" ] && printf '%s' "$out" | node -e '…'`. One job's metadata: read the allowlisted `repos/{owner}/{repo}/actions/runs/{id}/jobs` and filter `jobs[]` by `id`; `actions/jobs/{id}` is refused (only its `/logs`, with `--out`).
+
 ## Apply
 
 From the primary checkout.

package/skills/org-guide/references/work-and-releases.md

@@ -19,6 +19,10 @@ Under the App pool,
 `--jq`/`-q`/`--template`/`--web` are refused: use
 `MMI_ACTOR=app mmi-cli devops read issue view <id> --repo <owner/repo> --json comments`
 (or `pr`/`run view` with their fields); filter returned JSON locally.
+For run logs, never native `gh run view --log`/`--log-failed`: use
+`MMI_ACTOR=app mmi-cli devops read run log <runId> --repo <owner/repo> [--failed | --job <name>] [--tail N]`.
+A refused command writes no output, so a `> file` redirect leaves it empty or missing: read the
+refusal, then rerun the typed form.
 
 Read the issue, implementation, callers, and repository policy before editing.
 Run `mmi-cli tests policy --base <comparison-base>` to determine required checks against your target