@mutmutco/pi-plugin 4.5.225 → 4.5.227

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/pi-plugin",
-  "version": "4.5.225",
+  "version": "4.5.227",
   "description": "MMI workflow skills and org gates delivery.",
   "author": {
     "name": "MMI Future",

package/skills/hotfix/SKILL.md

@@ -29,7 +29,15 @@ mmi-cli devops train doctor --lane hotfix --heal --json
 
 Parse stdout only; never `2>&1`. `ready` false → stop and quote every blocker's `code` and `remedy`; an unread origin is never green. Findings carry `code`, `severity`, `source`, `remedy`, `anchor`.
 
-Piping `mmi-cli devops api get` into a JSON parser: a refusal exits 1 with empty stdout, so guard both: `out=$(MMI_ACTOR=app mmi-cli devops api get <path>) && [ -n "$out" ] && printf '%s' "$out" | node -e '…'`. One job's metadata: read the allowlisted `repos/{owner}/{repo}/actions/runs/{id}/jobs` and filter `jobs[]` by `id`; `actions/jobs/{id}` is refused (only its `/logs`, with `--out`).
+Piping `mmi-cli devops api get` into a JSON parser: a refusal exits 1 with empty stdout, so guard both exit status and nonempty output. For one job's runner and timestamps, read the allowlisted `repos/{owner}/{repo}/actions/runs/{id}/jobs` and filter `jobs[]` by `id`; `actions/jobs/{id}` is refused (only its `/logs`, with `--out`). Do not retry that refused endpoint or broaden the allowlist.
+
+```bash
+# Set repo, run_id and job_id to the target repository, run and job.
+out=$(MMI_ACTOR=app mmi-cli devops api get "repos/$repo/actions/runs/$run_id/jobs") &&
+  [ -n "$out" ] && printf '%s' "$out" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>{const j=JSON.parse(s).jobs.find(j=>String(j.id)===process.argv[1]);if(!j)throw new Error("Job not found in run jobs");console.log(JSON.stringify({runner_name:j.runner_name,started_at:j.started_at,completed_at:j.completed_at,conclusion:j.conclusion}))})' "$job_id"
+```
+
+Do not parse stdout after a failing read, suppress its stderr, or merge stderr into the JSON.
 
 ## Apply
 

package/skills/org-guide/references/work-and-releases.md

@@ -18,11 +18,15 @@ Use host worktrees and MMI cleanup; no personal Jerv is required. At handoff, st
 session; never copy them forward from an earlier handoff, even labelled unverified (#9039).
 Report skill misfires to Hub
 with `mmi-cli learning skill-lesson --skill <name> --title <summary> --body-file <path>`.
-Under the App pool,
+Under the App pool, on raw `gh`
 `--jq`/`-q`/`--template`/`--web` are refused: use
 `MMI_ACTOR=app mmi-cli devops read issue view <id> --repo <owner/repo> --json comments`
 (or `pr`/`run view` with their fields); filter returned JSON locally, e.g. by adding
 `--jq '<expr>'` to that typed read (runs the local jq, never inside gh).
+For the last N comments (here, 3), use the typed JSON read with local filtering, not raw gh formatters:
+```bash
+MMI_ACTOR=app mmi-cli devops read issue view <id> --repo <owner/repo> --json comments --jq '.comments[-3:][] | {createdAt, body}'
+```
 For run logs, never native `gh run view --log`/`--log-failed`: use
 `MMI_ACTOR=app mmi-cli devops read run log <runId> --repo <owner/repo> [--failed | --job <name>] [--tail N]`.
 A refused command writes no output, so a `> file` redirect leaves it empty or missing: read the