@mutmutco/codex-plugin 4.5.87 → 4.5.88

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "mmi",
-  "version": "4.5.87",
+  "version": "4.5.88",
   "mmiCompat": "4.x",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {

package/cli/dist/main.cjs

@@ -7632,21 +7632,15 @@ function isHarbourUnmanaged(yamlText) {
 function strayCronDrifts(workflows) {
   return workflows.filter((w) => !isHarbourUnmanaged(w.yamlText)).filter((w) => workflowTriggersSchedule(w.yamlText)).map((w) => strayCronDrift(w.name)).sort((a, b) => a.name.localeCompare(b.name));
 }
-var HARBOUR_LLM_LAUNCHERS = /* @__PURE__ */ new Set(["codex-agent"]);
-function isHarbourLlmLauncher(executor) {
-  return HARBOUR_LLM_LAUNCHERS.has(executor);
-}
 function unlauncheredLlmDrift(entry) {
   if (entry.llm !== "yes") return null;
-  if (isHarbourLlmLauncher(entry.executor)) return null;
   if (entry.executor === "aws-scheduler \u2192 mmi-hub-schedule-dispatcher") return null;
-  const allowed = [...HARBOUR_LLM_LAUNCHERS].join(", ");
   return {
     class: "unlaunchered-llm",
     name: entry.name,
     executor: entry.executor,
-    detail: `llm: yes with executor outside the harbour launcher set (${allowed})`,
-    remedy: `move the lane to executor: ${allowed} and run it through the Hub harbour (docs/schedules.md rule 3)`
+    detail: "llm: yes but no scheduled-LLM executor is supported (Cursor retired, #7779; Codex executor retired, #7821)",
+    remedy: "retire the lane or set it to llm: no until the harbour redesign (#7821; docs/schedules.md rule 3)"
   };
 }
 function unlauncheredLlmDrifts(entries) {
@@ -7718,8 +7712,6 @@ var SCHEDULE_HEADER_FIELDS = ["schedule", "what", "owner", "cadence", "executor"
 var SCHEDULE_EXECUTORS = /* @__PURE__ */ new Set([
   "github-actions",
   // deterministic workflow — clocked by the harbour, fired via workflow_dispatch
-  "codex-agent",
-  // LLM lane — the harbour's ONLY scheduled-LLM launcher (docs/schedules.md rule 3, #7780)
   "lambda",
   // fleet function row — requires the `# target: mmi-fleet-*` header (#3205/#3246)
   "box systemd",
@@ -7800,8 +7792,8 @@ function scheduleRecordFromWorkflow(repo, workflowPath, yamlText) {
   if (llmFromHeader(yamlText) === "unknown") {
     throw new Error(`schedules register: ${expectedId} header \`llm: ${h.llm}\` does not classify (yes / no / embeddings) \u2014 an unreadable declaration would register a row whose LLM column lies.`);
   }
-  if (llmFromHeader(yamlText) === "yes" && h.executor !== "codex-agent") {
-    throw new Error(`schedules register: ${expectedId} header \`llm: yes\` requires the harbour launcher \`executor: codex-agent\` (declared: \`${h.executor}\`) \u2014 scheduled LLM work runs only through the Codex executor (docs/schedules.md rule 3, #7780); change the executor or the llm value.`);
+  if (llmFromHeader(yamlText) === "yes") {
+    throw new Error(`schedules register: ${expectedId} header \`llm: yes\` is refused \u2014 no scheduled-LLM executor is supported: Cursor (\`cursor-agent\`) was retired (#7779) and the Codex executor was retired (#7821). Set \`llm: no\` or retire the lane until the harbour redesign.`);
   }
   const target = header.target;
   if (target !== void 0 && h.executor !== "lambda") {
@@ -7811,7 +7803,7 @@ function scheduleRecordFromWorkflow(repo, workflowPath, yamlText) {
     throw new Error(`schedules register: ${expectedId} header \`target: ${target}\` must be a bare lambda function name in the reserved fleet namespace \`mmi-fleet-*\` (allowed after the prefix: A-Z a-z 0-9 _ -; total max 140). The dispatcher can only invoke mmi-fleet-* functions.`);
   }
   if (header.model !== void 0) {
-    throw new Error(`schedules register: ${expectedId} header \`model: ${header.model}\` is refused \u2014 the Codex executor pins its model (#7780), so no row declares one. Remove the line.`);
+    throw new Error(`schedules register: ${expectedId} header \`model: ${header.model}\` is refused \u2014 a model role key is valid only on an LLM lane, and no scheduled-LLM executor is supported (Cursor retired #7779; Codex executor retired #7821). Remove the line.`);
   }
   return {
     id: expectedId,
@@ -12396,6 +12388,7 @@ function renderBoardItem(item) {
   if (claim) {
     const who = `${claim.holder}, ${formatClaimAge(claim.ageMs)} ago`;
     lines2.push(claim.currentlyClaimed ? `Claimed by: ${who}` : `Last claimed by: ${who} (not currently claimed)`);
+    if (claim.stale) lines2.push(`Claim stamp: STALE, idle ${formatClaimAge(claim.idleMs)}; any live session may claim it`);
   }
   lines2.push(
     `Type: ${item.type ?? "item"}${item.labels.length ? ` \xB7 ${item.labels.join(", ")}` : ""}`,
@@ -12696,6 +12689,10 @@ async function readBoard(options, deps = {}) {
   if (options.includeBundleDetails || options.includeAllBodies) {
     await attachBundleDetails(report, client, options.allowPartial ?? false, { all: options.includeAllBodies });
   }
+  const readComments = claimMarkerCommentsReader(client);
+  for (const scope of ["primary", "secondary"]) {
+    await markStaleClaimStamps(report[scope], readComments, { pullRequests, writable: writableOrUnknown(writable) });
+  }
   for (const scope of ["primary", "secondary"]) {
     const filtered = await filterDependencyBlockedClaimables(report[scope].claimable, client, {
       requireBundledBody: Boolean(options.includeBundleDetails)
@@ -12704,7 +12701,7 @@ async function readBoard(options, deps = {}) {
     report.warnings.push(...filtered.warnings);
   }
   for (const scope of ["primary", "secondary"]) {
-    const demoted = await demoteLiveClaimedClaimables(report[scope], client);
+    const demoted = await demoteLiveClaimedClaimables(report[scope], client, void 0, { fetchComments: readComments });
     report.warnings.push(...demoted.warnings);
     report.partial = report.partial || demoted.partial;
   }
@@ -12994,7 +12991,7 @@ function renderClaimable(lines2, items) {
 function renderTaken(lines2, items) {
   if (!items.length) return;
   lines2.push("Taken");
-  for (const item of items) lines2.push(`  ${item.ref} \xB7 ${item.status} \xB7 @${item.assignees.join(", @")}`);
+  for (const item of items) lines2.push(`  ${item.ref} \xB7 ${item.status} \xB7 @${item.assignees.join(", @")}${renderClaimLane(item)}`);
 }
 function renderUnowned(lines2, items) {
   if (!items.length) return;
@@ -13005,7 +13002,11 @@ function renderTitledItem(item) {
   const pri = item.priority ? ` \xB7 ${item.priority}` : "";
   const loop = item.loopState ? ` \xB7 loop:${item.loopState.state}` : "";
   const stale = item.loopStaleness?.stale ? ` \xB7 stale:${formatClaimAge(item.loopStaleness.idleMs)}` : "";
-  return `${item.ref} - [${item.type ?? "item"}]${pri}${loop}${stale} ${item.title}`;
+  return `${item.ref} - [${item.type ?? "item"}]${pri}${loop}${stale}${renderClaimLane(item)} ${item.title}`;
+}
+function renderClaimLane(item) {
+  if (!item.claim) return "";
+  return item.claim.stale ? ` \xB7 stale:${formatClaimAge(item.claim.idleMs)} (${item.claim.holder})` : ` \xB7 lane ${item.claim.holder}`;
 }
 function hasItems(buckets) {
   return buckets.userOwned.length > 0 || buckets.claimable.length > 0 || buckets.taken.length > 0 || buckets.unownedInFlight.length > 0;
@@ -13130,6 +13131,7 @@ function deriveLoopStaleness(item, loopState, now = Date.now()) {
 }
 var CLAIM_MARKER_PATTERN = /<!--\s*mmi-claim:\s*(\{[\s\S]*?\})\s*-->/g;
 var CLAIM_MARKER_LIVE_MS = 24 * 60 * 6e4;
+var CLAIM_STAMP_IDLE_MS = 4 * 60 * 6e4;
 function isValidClaimMarker(parsed) {
   if (!parsed || typeof parsed !== "object") return false;
   const marker = parsed;
@@ -13166,34 +13168,86 @@ function describeClaimMarker(marker) {
 }
 function boardItemClaim(item) {
   const marker = item.details ? latestClaimMarker(item.details.comments) : void 0;
-  if (!marker) return void 0;
+  return marker ? claimFromMarker(item, marker) : void 0;
+}
+function claimStampStaleness(marker, evidence = {}, now = Date.now()) {
+  const times = [marker.ts, ...evidence.activityAt ?? []].map((t) => t ? Date.parse(t) : Number.NaN);
+  const idleMs = now - Math.max(...times.filter(Number.isFinite));
+  return { stale: !evidence.linkedWork && idleMs >= CLAIM_STAMP_IDLE_MS, idleMs };
+}
+function workIsLive(at, now = Date.now()) {
+  const idle = now - Date.parse(at ?? "");
+  return !Number.isFinite(idle) || idle < CLAIM_STAMP_IDLE_MS;
+}
+function claimFromMarker(item, marker, linked = {}, now = Date.now()) {
   return {
     marker,
     holder: describeClaimMarker(marker),
-    ageMs: Date.now() - Date.parse(marker.ts),
-    currentlyClaimed: item.assignees.length > 0 && item.status === "In Progress"
+    ageMs: now - Date.parse(marker.ts),
+    currentlyClaimed: item.assignees.length > 0 && item.status === "In Progress",
+    ...claimStampStaleness(marker, { activityAt: [item.updatedAt, ...linked.activityAt ?? []], linkedWork: linked.linkedWork }, now)
   };
 }
-function classifyClaimableMarker(comments, actor, now = Date.now()) {
+function classifyClaimableMarker(comments, actor, now = Date.now(), activityAt = []) {
   const marker = comments ? latestClaimMarker(comments) : void 0;
   if (!marker) return { verdict: "claimable" };
   const ownership = laneOwnership(marker, actor);
   if (ownership === "mine") return { verdict: "owned", holder: describeClaimMarker(marker) };
-  const age = now - Date.parse(marker.ts);
-  if (Number.isFinite(age) && age >= 0 && age < CLAIM_MARKER_LIVE_MS) {
+  if (!claimStampStaleness(marker, { activityAt }, now).stale) {
     return { verdict: "taken", holder: describeClaimMarker(marker) };
   }
   return { verdict: "claimable" };
 }
+function claimMarkerCommentsReader(client) {
+  const cache = /* @__PURE__ */ new Map();
+  return (item) => {
+    let read = cache.get(item);
+    if (!read) {
+      read = (async () => {
+        if (item.detailsUnavailable) return void 0;
+        if (item.details && !item.details.commentsUnread && !item.details.omittedComments) return item.details.comments;
+        const comments = await client.restPaginate(`repos/${item.repository}/issues/${item.number}/comments`);
+        return comments.map((comment) => ({ body: comment.body ?? "" }));
+      })();
+      cache.set(item, read);
+    }
+    return read;
+  };
+}
+async function markStaleClaimStamps(scope, readComments, options = {}) {
+  const actor = options.actor ?? describeSessionIdentity();
+  const now = options.now ?? Date.now();
+  const promoted = [];
+  for (const bucket of ["userOwned", "claimable", "unownedInFlight", "taken"]) {
+    const kept = [];
+    for (const item of scope[bucket]) {
+      kept.push(item);
+      if (item.contentType !== "Issue") continue;
+      const comments = await readComments(item).catch(() => void 0);
+      const marker = comments ? latestClaimMarker(comments) : void 0;
+      if (!marker) continue;
+      const prs = (options.pullRequests ?? []).filter((pr) => pr.closesIssues.some((ref) => ref.toLowerCase() === item.ref.toLowerCase()));
+      item.claim = claimFromMarker(item, marker, {
+        activityAt: prs.map((pr) => pr.updatedAt),
+        linkedWork: prs.some((pr) => !pr.updatedAt)
+      }, now);
+      const movable = bucket === "userOwned" || bucket === "unownedInFlight";
+      if (movable && item.claim.stale && laneOwnership(marker, actor) !== "mine" && (!options.writable || options.writable.has(item.repository.toLowerCase()))) {
+        kept.pop();
+        promoted.push(item);
+      }
+    }
+    scope[bucket] = kept;
+  }
+  if (promoted.length) {
+    scope.claimable.push(...promoted);
+    scope.claimable.sort(compareItems);
+  }
+}
 async function demoteLiveClaimedClaimables(scope, client, actor = describeSessionIdentity(), deps = {}) {
   const warnings = [];
   let partial = false;
-  const fetchComments = deps.fetchComments ?? (async (item) => {
-    if (item.detailsUnavailable) return void 0;
-    if (item.details && !item.details.commentsUnread && !item.details.omittedComments) return item.details.comments;
-    const comments = await client.restPaginate(`repos/${item.repository}/issues/${item.number}/comments`);
-    return comments.map((comment) => ({ body: comment.body ?? "" }));
-  });
+  const fetchComments = deps.fetchComments ?? claimMarkerCommentsReader(client);
   const stillClaimable = [];
   const movedTaken = [];
   const movedOwned = [];
@@ -13213,7 +13267,7 @@ async function demoteLiveClaimedClaimables(scope, client, actor = describeSessio
       warnings.push(`${item.ref} left claimable: claim-marker evidence could not be read`);
       continue;
     }
-    const verdict = classifyClaimableMarker(comments, actor, deps.now);
+    const verdict = classifyClaimableMarker(comments, actor, deps.now, [item.updatedAt]);
     if (verdict.verdict === "claimable") {
       stillClaimable.push(item);
     } else if (verdict.verdict === "owned") {
@@ -13308,6 +13362,12 @@ async function gatherClaimLiveness(client, repo, number, fetchOpenPulls) {
     const comments = await client.restPaginate(`repos/${repo}/issues/${number}/comments`);
     const rows = comments.map((comment) => ({ body: comment.body ?? "", login: comment.user?.login ?? void 0 }));
     out.marker = latestClaimMarker(rows);
+    for (let i = comments.length - 1; i >= 0; i -= 1) {
+      if (comments[i].created_at && !latestClaimMarker([rows[i]])) {
+        out.lastCommentAt = comments[i].created_at;
+        break;
+      }
+    }
     if (out.marker) {
       for (let i = rows.length - 1; i >= 0; i -= 1) {
         if (latestClaimMarker([rows[i]])) {
@@ -13334,7 +13394,10 @@ async function gatherClaimLiveness(client, repo, number, fetchOpenPulls) {
       if (from && from.toLowerCase() !== repo.toLowerCase()) return false;
       return pullClosesIssue(source, number);
     });
-    if (pr?.source?.issue?.number) out.openPr = `open PR #${pr.source.issue.number} would close it on merge`;
+    if (pr?.source?.issue?.number) {
+      out.openPr = `open PR #${pr.source.issue.number} would close it on merge`;
+      out.openPrAt = pr.source.issue.updated_at ?? void 0;
+    }
   } catch {
     out.failed.push("timeline");
   }
@@ -13345,11 +13408,24 @@ async function gatherClaimLiveness(client, repo, number, fetchOpenPulls) {
   } catch {
     out.failed.push("branches");
   }
+  if (out.branch) {
+    try {
+      const head = await client.rest(
+        "GET",
+        `repos/${repo}/branches/${encodeURIComponent(out.branch)}`
+      );
+      out.branchAt = head?.commit?.commit?.committer?.date ?? void 0;
+    } catch {
+    }
+  }
   if (!out.branch) {
     try {
       const pulls = await fetchOpenPulls(repo);
       const hit = pulls.find((pr) => pullClosesIssue(pr, number));
-      if (hit?.head?.ref) out.branch = `${hit.head.ref} (head of open PR #${hit.number} closing #${number})`;
+      if (hit?.head?.ref) {
+        out.branch = `${hit.head.ref} (head of open PR #${hit.number} closing #${number})`;
+        out.branchAt = hit.updated_at ?? void 0;
+      }
     } catch {
       out.failed.push("pulls");
     }
@@ -13360,13 +13436,24 @@ function liveEvidenceLines(evidence, repo) {
   const live = [];
   if (evidence.marker && evidence.sessionState === "live") {
     live.push(`claim session ${describeClaimMarker(evidence.marker)} has recent local transcript activity`);
-  } else if (evidence.marker && evidence.sessionState !== "dead" && evidence.markerAgeMs !== void 0 && evidence.markerAgeMs < CLAIM_MARKER_LIVE_MS) {
-    live.push(`claim marker from ${describeClaimMarker(evidence.marker)} is only ${formatClaimAge(evidence.markerAgeMs)} old (session not locally probeable)`);
+  } else if (evidence.marker && evidence.sessionState !== "dead") {
+    const { stale, idleMs } = claimStampStaleness(evidence.marker, { activityAt: [evidence.lastCommentAt] });
+    const marker = describeClaimMarker(evidence.marker);
+    if (!stale) {
+      live.push(evidence.lastCommentAt && Date.parse(evidence.lastCommentAt) > Date.parse(evidence.marker.ts) ? `claim marker from ${marker} is ${formatClaimAge(evidence.markerAgeMs)} old but the issue was commented ${formatClaimAge(idleMs)} ago (session not locally probeable)` : `claim marker from ${marker} is only ${formatClaimAge(evidence.markerAgeMs)} old (session not locally probeable)`);
+    }
   }
-  if (evidence.openPr) live.push(evidence.openPr);
-  if (evidence.branch) live.push(`live branch ${evidence.branch} on ${repo}`);
+  if (evidence.openPr && workIsLive(evidence.openPrAt)) live.push(evidence.openPr);
+  if (evidence.branch && workIsLive(evidence.branchAt)) live.push(`live branch ${evidence.branch} on ${repo}`);
   return live;
 }
+function staleWorkLines(evidence) {
+  const age = (at) => formatClaimAge(Date.now() - Date.parse(at ?? ""));
+  return [
+    evidence.branch && !workIsLive(evidence.branchAt) ? `branch ${evidence.branch} (last commit ${age(evidence.branchAt)} ago)` : void 0,
+    evidence.openPr && !workIsLive(evidence.openPrAt) ? `${evidence.openPr.replace(/ would close it on merge$/, "")} (updated ${age(evidence.openPrAt)} ago)` : void 0
+  ].filter((line) => Boolean(line));
+}
 function sameClaimHost(a, b) {
   return Boolean(a && b && a.toLowerCase() === b.toLowerCase());
 }
@@ -13399,13 +13486,17 @@ async function checkLaneContest(client, item, actor = describeSessionIdentity(),
   const resume = ownership !== "mine" && sameOwner ? laneResumeEvidence(evidence) : void 0;
   const live = ownership === "mine" ? [] : liveEvidenceLines(evidence, item.repository);
   const unverifiable = ownership === "mine" ? [] : evidence.failed;
+  const contested = ownership !== "mine" && !resume && (live.length > 0 || unverifiable.length > 0);
+  const carry = staleWorkLines(evidence);
+  const staleStamp = !contested && !resume && ownership !== "mine" && evidence.marker ? `stale claim stamp ${describeClaimMarker(evidence.marker)} (idle ${formatClaimAge(claimStampStaleness(evidence.marker, { activityAt: [evidence.lastCommentAt] }).idleMs)})${carry.length ? `; continue its ${carry.join(" and ")}` : ""}` : void 0;
   return {
-    contested: ownership !== "mine" && !resume && (live.length > 0 || unverifiable.length > 0),
+    contested,
     live,
     unverifiable,
     ownership,
     marker: evidence.marker,
-    resume
+    resume,
+    ...staleStamp ? { staleStamp } : {}
   };
 }
 function laneContestParts(contest) {
@@ -13849,11 +13940,13 @@ async function claimOneBoardItem(ctx, selector, options) {
   };
   let previousHolder;
   let resumeEvidence;
+  let staleStamp;
+  const tookOver = () => ({ outcome: "took-over", holder, previousHolder, ...staleStamp ? { staleStamp } : {} });
   const claimedReceipt = () => ({
     ...item.status === "In Review" ? { reclaimedFrom: "In Review" } : {},
-    ...previousHolder ? resumeEvidence ? { outcome: "resumed", holder, previousHolder, resumeEvidence } : { outcome: "took-over", holder, previousHolder } : { outcome: "claimed", holder }
+    ...previousHolder ? resumeEvidence ? { outcome: "resumed", holder, previousHolder, resumeEvidence } : tookOver() : { outcome: "claimed", holder }
   });
-  const heldReceipt = () => previousHolder ? resumeEvidence ? { outcome: "resumed", holder, previousHolder, resumeEvidence } : { outcome: "took-over", holder, previousHolder } : { outcome: "held", holder };
+  const heldReceipt = () => previousHolder ? resumeEvidence ? { outcome: "resumed", holder, previousHolder, resumeEvidence } : tookOver() : { outcome: "held", holder };
   if (flatItem.contentType !== "Issue") throw new Error(`${flatItem.ref} is not an issue`);
   const pre = evaluateClaim(flatItem, assignedLogin);
   if (!pre.ok) throw new NotClaimableError(pre.reason, { ref: flatItem.ref, status: flatItem.status });
@@ -13866,6 +13959,7 @@ async function claimOneBoardItem(ctx, selector, options) {
   const refuseIfContested = async () => {
     const contest = await checkLaneContest(client, item, ctx.session, report.viewer);
     resumeEvidence = void 0;
+    staleStamp = void 0;
     const displaced = () => ({
       login: assignedLogin,
       ...contest.marker ? {
@@ -13878,6 +13972,9 @@ async function claimOneBoardItem(ctx, selector, options) {
       if (contest.resume && contest.marker) {
         resumeEvidence = contest.resume;
         previousHolder = displaced();
+      } else if (contest.staleStamp) {
+        staleStamp = contest.staleStamp;
+        previousHolder = displaced();
       }
       return;
     }
@@ -13892,7 +13989,7 @@ async function claimOneBoardItem(ctx, selector, options) {
     if (options.check) {
       return { item, viewer: report.viewer, repo: report.repo, status: "In Progress", partial: false, ...heldReceipt(), alreadyClaimed: true, checked: true };
     }
-    const renewed = await postClaimMarkerComment(client, item, ctx.session);
+    const renewed = await postClaimMarkerComment(client, item, ctx.session, staleStamp);
     return { item, viewer: report.viewer, repo: report.repo, status: "In Progress", partial: false, ...heldReceipt(), alreadyClaimed: true, renewed };
   }
   if (options.check) {
@@ -13904,7 +14001,7 @@ async function claimOneBoardItem(ctx, selector, options) {
   } catch (e) {
     throw new Error(`claim failed before board status changed: ${ghError(e)}`);
   }
-  await postClaimMarkerComment(client, item, ctx.session);
+  await postClaimMarkerComment(client, item, ctx.session, staleStamp);
   let credential = "user";
   try {
     ({ credential } = await updateItemSingleSelect(client, cfg.projectId, item.itemId, cfg.statusFieldId, cfg.statusOptions["In Progress"]));
@@ -13958,7 +14055,7 @@ async function claimBoardIssues(options, deps = {}) {
       const ref = `${selector.repo}#${selector.number}`;
       try {
         const result = await claimOneBoardItem(ctx, selector, { ...options, bulk: true });
-        results[index] = { ref: result.item.ref, claimed: true, item: result.item, status: result.status, partial: result.partial, warning: result.warning, outcome: result.outcome, holder: result.holder, previousHolder: result.previousHolder, resumeEvidence: result.resumeEvidence, reclaimedFrom: result.reclaimedFrom, alreadyClaimed: result.alreadyClaimed, renewed: result.renewed, checked: result.checked, credential: result.credential };
+        results[index] = { ref: result.item.ref, claimed: true, item: result.item, status: result.status, partial: result.partial, warning: result.warning, outcome: result.outcome, holder: result.holder, previousHolder: result.previousHolder, resumeEvidence: result.resumeEvidence, staleStamp: result.staleStamp, reclaimedFrom: result.reclaimedFrom, alreadyClaimed: result.alreadyClaimed, renewed: result.renewed, checked: result.checked, credential: result.credential };
       } catch (e) {
         results[index] = { ref, claimed: false, reason: e.message };
       }
@@ -14146,7 +14243,7 @@ async function setBoardPriorityForSelector(options, deps = {}) {
   }
   return { ref: `${options.selector.repo}#${options.selector.number}`, itemId, priority };
 }
-async function postClaimMarkerComment(client, item, actor = describeSessionIdentity()) {
+async function postClaimMarkerComment(client, item, actor = describeSessionIdentity(), staleStamp) {
   try {
     const marker = {
       v: 1,
@@ -14157,7 +14254,7 @@ async function postClaimMarkerComment(client, item, actor = describeSessionIdent
     };
     await postIssueComment(client, {
       ref: item.ref,
-      body: `Claimed by \`${describeClaimMarker(marker)}\` at ${marker.ts}.
+      body: `Claimed by \`${describeClaimMarker(marker)}\` at ${marker.ts}.${staleStamp ? ` Took over from ${staleStamp}.` : ""}
 
 <!-- mmi-claim: ${JSON.stringify(marker)} -->`
     });
@@ -17128,10 +17225,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "4.5.87",
-    tag: "v4.5.87",
-    commit: "c8eaaec639a7",
-    npm: "@mutmutco/cli@4.5.87"
+    version: "4.5.88",
+    tag: "v4.5.88",
+    commit: "6e198cd64755",
+    npm: "@mutmutco/cli@4.5.88"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -17148,14 +17245,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v4.5.87"
+          v3Target: "v4.5.88"
         }
       ],
       rollbackTrigger: "Any red inside the post-contract soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a pre-v4 client admitted instead of receiving actionable HTTP 426, or npm consumer install/doctor failure on the v4-only dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 4.5.87 and redeploy the Hub Lambda from tag v4.5.87 (c8eaaec639a7); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v4.5.87 (@mutmutco/cli@4.5.87, tag commit c8eaaec639a7 \u2014 last known-good release carrying the repo-index v4-only contract)"
+        mechanism: "npm dist-tag latest -> 4.5.88 and redeploy the Hub Lambda from tag v4.5.88 (6e198cd64755); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v4.5.88 (@mutmutco/cli@4.5.88, tag commit 6e198cd64755 \u2014 last known-good release carrying the repo-index v4-only contract)"
       }
     },
     {
@@ -23182,7 +23279,12 @@ var TRANSIENT_TRANSPORT_MARKERS = [
 ];
 function classifyTransientTransportFailure(evidence) {
   if (!evidence) return false;
-  return TRANSIENT_TRANSPORT_MARKERS.some((marker) => marker.test(evidence));
+  return TRANSIENT_TRANSPORT_MARKERS.some((marker) => marker.test(evidence)) || isSetupBunSpawnEtxtbsy(evidence);
+}
+function isSetupBunSpawnEtxtbsy(evidence) {
+  if (!/\bspawn ETXTBSY\b/.test(evidence)) return false;
+  const steps = [...evidence.matchAll(/"steps":\[([^\]]*)\]/g)].flatMap((m) => [...m[1].matchAll(/"((?:[^"\\]|\\.)*)"/g)].map((s) => s[1]));
+  return steps.length > 0 && steps.every((name) => /\bsetup[- ]bun\b|oven-sh\/setup-bun/i.test(name));
 }
 var TRANSIENT_EVIDENCE_MAX_CHARS = 16e3;
 var AUTO_RERUN_MAX_RETRIES = 1;
@@ -23229,8 +23331,16 @@ async function transientEvidenceForRun(deps, repo, runId) {
     parts.push(await deps.run("gh", ["run", "view", String(runId), "--repo", repo, "--log-failed"]));
   } catch {
   }
-  const evidence = parts.filter(Boolean).join("\n");
-  return evidence.length > TRANSIENT_EVIDENCE_MAX_CHARS ? evidence.slice(-TRANSIENT_EVIDENCE_MAX_CHARS) : evidence;
+  const [head, ...rest] = parts.filter(Boolean);
+  if (rest.length === 0 || !head?.startsWith("[")) {
+    const evidence = parts.filter(Boolean).join("\n");
+    return evidence.length > TRANSIENT_EVIDENCE_MAX_CHARS ? evidence.slice(-TRANSIENT_EVIDENCE_MAX_CHARS) : evidence;
+  }
+  const header = head.slice(0, TRANSIENT_EVIDENCE_MAX_CHARS / 4);
+  const log = rest.join("\n");
+  const room = TRANSIENT_EVIDENCE_MAX_CHARS - header.length - 1;
+  return `${header}
+${log.length > room ? log.slice(-room) : log}`;
 }
 function extractFailedRequiredContexts(failure) {
   const match = /required train check failed:\s*([^\n(]+)/.exec(failure);
@@ -30012,11 +30122,13 @@ function registerBoardCommands(program3) {
   }
   function claimVerdict(ref, result) {
     const holder = formatClaimHolder(result.holder);
-    const previousHolder = result.previousHolder ? formatClaimHolder(result.previousHolder) : "another lane";
+    const previousHolder = result.staleStamp ?? (result.previousHolder ? formatClaimHolder(result.previousHolder) : "another lane");
     const reclaimed = result.reclaimedFrom ? ` (reclaimed from ${result.reclaimedFrom})` : "";
     if (result.checked) {
       if (result.outcome === "held") return `Check ${ref}: held by ${holder} - claim would renew the lease (nothing written)`;
-      if (result.outcome === "took-over") return `Check ${ref}: held by ${previousHolder} - --force claim would take it over for ${holder} (nothing written)`;
+      if (result.outcome === "took-over") {
+        return result.staleStamp ? `Check ${ref}: ${previousHolder} - claim would take it over for ${holder} (nothing written)` : `Check ${ref}: held by ${previousHolder} - --force claim would take it over for ${holder} (nothing written)`;
+      }
       if (result.outcome === "resumed") return `Check ${ref}: prior lane ${previousHolder} is verifiably dead - claim would resume its work for ${holder} (nothing written; ${result.resumeEvidence})`;
       return `Check ${ref}: free - claim would proceed for ${holder}${reclaimed} (nothing written)`;
     }

package/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "4.5.87",
+  "version": "4.5.88",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/codex-plugin",
-  "version": "4.5.87",
+  "version": "4.5.88",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/board/SKILL.md

@@ -27,9 +27,16 @@ Project. Partial reads exit nonzero; pass `--allow-partial` only when the dev ac
 Partition, as the CLI computes it:
 
 - **Yours** — assignee includes the viewer, status in `Todo · In Progress · In Review`.
-- **Free to claim** — status `Todo`, unassigned, and the viewer has push on the repo.
+- **Free to claim** — status `Todo`, unassigned, and the viewer has push on the repo. Also any item in
+  any status whose claim stamp is stale: its session has done no work on it for 4 hours. A stale stamp
+  holds nothing; `board claim` takes it over without `--force` and names the old stamp.
 - **Taken** — someone else's, any active status.
 
+Every stamped row names its session (`lane surface/session@host`), or `stale:<age>` when the stamp is
+stale. Work means the stamp, an issue comment, a commit on the issue's branch, or an update to an open
+PR that closes it. Any of these in the last 4 hours keeps the hold; a date that cannot be read counts as
+work. A takeover keeps the old branch and PR and names them, so the new session continues them.
+
 ## Step 2 — render it
 
 Plain markdown, never a fenced block. Flat `-` lists under bold heads, never `##` headings, never tables.
@@ -100,8 +107,9 @@ Claim a whole batch in one call — it shares setup cost and returns per-item re
 mmi-cli oracle board claim <ref> <ref> <ref> --json
 ```
 
-Claiming validates `Todo` + unassigned, assigns the viewer, moves Status to `In Progress`, and stamps a
-lane-identity comment so other agents can attribute the hold. Any per-item failure exits nonzero — read
+Claiming takes a card that is unassigned or assigned to the viewer, in `Todo`, `In Progress` or
+`In Review`, unless another session still shows work on it in the last 4 hours (then it refuses). It assigns the viewer, moves Status to
+`In Progress`, and stamps a lane-identity comment so other agents can attribute the hold. Any per-item failure exits nonzero — read
 the per-item results rather than assuming the batch took. **Route is `oracle board claim` only**; there is
 no `oracle issue claim` and no flat `board claim` — both refuse. Guessing either burns a call.