@mutmutco/hermes-plugin 4.2.4 → 4.2.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/hermes-plugin",
-  "version": "4.2.4",
+  "version": "4.2.5",
   "description": "MMI canonical skills transported as a Hermes Agent native plugin.",
   "author": {
     "name": "MMI Future",

package/plugin.yaml

@@ -1,7 +1,7 @@
 {
   "manifest_version": 1,
   "name": "mmi",
-  "version": "4.2.4",
+  "version": "4.2.5",
   "description": "MMI canonical workflow skills and fail-closed pre-tool policy gates.",
   "provides_hooks": [
     "pre_tool_call"

package/scripts/command-ladder-core.mjs

@@ -322,7 +322,12 @@ export function analyzeGhLadder(command) {
         replacement: hit.replacement,
         mapped,
         reason:
-          `Command ladder (#2347): use \`${hit.replacement}\` instead of raw \`gh ${hit.object} ${hit.verb}\`. ` +
+          `Command ladder (#2347): use \`${hit.replacement}\` instead of raw \`gh ${hit.object} ${hit.verb}\` — ` +
+          // #5858: the deny aborts the ENTIRE tool call, and the remedy line below invites retrying only
+          // the corrected verb — the one retry that cannot work when a heredoc wrote the body file in the
+          // same call. It fails with ENOENT, which reads as a path bug, not as a discarded write. Same
+          // sentence, same position, as the test-policy guard (#5726).
+          'the ENTIRE command was aborted before execution; no segment ran, so any file write or other step batched into the same call was NOT applied — re-run those steps separately. ' +
           runLine +
           'mmi-cli is the required path for covered board/issue/PR writes in org repos. ' +
           'Genuine gaps stay allowed: gh api reads, gh project, gh issue/pr view|list|close|edit, gh pr checks, gh auth/repo/workflow/run. ' +

package/scripts/edit-tool-paths.mjs

@@ -8,8 +8,10 @@
 //
 // One extractor, used by every edit-shaped hook, so a new host contract is taught in one place.
 
-/** Tool names that mean "this call writes files". */
-export const EDIT_TOOL_NAMES = new Set(['Edit', 'Write', 'apply_patch', 'ApplyPatch']);
+/** Tool names that mean "this call writes files". `StrReplace` is Cursor's in-place edit tool: it
+ *  carries its target in `tool_input.path` and was outside this set, so even once the adapter matched
+ *  it the gate would have read a non-edit tool and allowed (#5852). */
+export const EDIT_TOOL_NAMES = new Set(['Edit', 'Write', 'apply_patch', 'ApplyPatch', 'StrReplace']);
 
 export function isEditTool(toolName) {
   return typeof toolName === 'string' && EDIT_TOOL_NAMES.has(toolName);