v4.141.0

App repo tokens

A short-lived credential for one app repo, read or write, for handing someone git over that repo and nothing else. It is the git password (any username) and a Bearer on that repo's read and commit routes. Only the project's service key mints or revokes one.

CLI

• run402 app-repos tokens create <name> --access read|write [--ttl <seconds>] prints the token once.
• run402 app-repos tokens revoke <token_id> --repo <name> stops it at once.

SDK

• r.appRepos.createToken(projectId, repoName, { access, ttl_seconds? }) and r.appRepos.revokeToken(projectId, repoName, tokenId). Both send the project's service key, even when the client holds a principal.

MCP

• createToken returns a one-time secret, so a run snippet refuses it with SECRET_REQUIRES_CLI and names the CLI command.

Git shows why it refused

A refusal on a git route now reaches you as remote: lines, with what to do next: a wrong repo, a push with a read token, a revoked or expired token.