@fungi.computer/spore 0.2.0 → 0.3.0

package/dist/fungi.cjs

@@ -49,28 +49,41 @@ if (!supported) {
   process.exit(1);
 }
 const nativePackage = `@fungi.computer/spore-native-${platform}`;
-let bun;
-try {
-  require.resolve(`${nativePackage}/bin/fungi-apply-patch`);
-  bun = require.resolve(runtimes[platform]);
-} catch (cause) {
-  throw new Error(
-    "Fungi CLI could not load its native dependencies. Reinstall with npm install -g @fungi.computer/spore --include=optional.",
-    { cause },
+const sporeVersion = require("../package.json").version;
+function nativeResolution() {
+  try {
+    require.resolve(`${nativePackage}/bin/fungi-apply-patch`);
+    return { kind: "ready" };
+  } catch {
+    return { kind: "missing" };
+  }
+}
+if (nativeResolution().kind === "missing") {
+  console.error(
+    `Fungi's native package for ${platform} is missing or doesn't match this version. Reinstall: npm i -g @fungi.computer/spore@${sporeVersion}`,
   );
+  process.exit(1);
 }
+const bun = require.resolve(runtimes[platform]);
 const cli = resolve(__dirname, "cli.js");
 const buildId = createHash("sha256").update(readFileSync(cli)).digest("hex");
-const child = spawnSync(bun, [cli, ...process.argv.slice(2)], {
-  stdio: "inherit",
-  env: {
-    ...process.env,
-    FUNGI_BUNDLED_CLI: cli,
-    FUNGI_BUNDLED_BUILD_ID: buildId,
-    FUNGI_LAUNCHER: __filename,
-    FUNGI_LAUNCHER_NODE: process.execPath,
+// Bun otherwise loads the project's bunfig.toml preload and .env into this
+// unsandboxed host process before the CLI can establish Agent authority.
+const child = spawnSync(
+  bun,
+  ["--config=/dev/null", "--no-env-file", cli, ...process.argv.slice(2)],
+  {
+    stdio: "inherit",
+    env: {
+      ...process.env,
+      FUNGI_BUNDLED_CLI: cli,
+      FUNGI_BUNDLED_BUILD_ID: buildId,
+      FUNGI_SPORE_VERSION: sporeVersion,
+      FUNGI_LAUNCHER: __filename,
+      FUNGI_LAUNCHER_NODE: process.execPath,
+    },
   },
-});
+);
 if (child.error) throw child.error;
 if (child.signal) process.kill(process.pid, child.signal);
 process.exitCode = child.status ?? 1;

package/dist/seatbelt/safe-base.sbpl

@@ -3,8 +3,8 @@
 ; rust-v0.162.1 (7a078f6bb4).
 ; Changed by Botanical: no network fragments, PTY/device write grants, shared
 ; memory or power-management grants. Reads and parameterized folder/temp writes
-; are composed by private-local-seatbelt.ts. Protect .fungi and Git hooks/config,
-; not all of .git. Denials carry fungi-safe for diagnostic correlation.
+; are composed by private-local-seatbelt.ts. Protect .fungi and the whole
+; existing .git administration. Denials carry fungi-safe for diagnostic correlation.
 ;
 ; inspired by Chrome's sandbox policy:
 ; https://source.chromium.org/chromium/chromium/src/+/main:sandbox/policy/mac/common.sb;l=273-319;drc=7b3962fe2e5fc9e2ee58000dc8fbf3429d84d3bd

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fungi.computer/spore",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Fungi local agent for terminals and ACP editors",
   "homepage": "https://docs.fungi.computer/guides/use-fungi-in-your-editor/",
   "bin": {
@@ -29,13 +29,14 @@
   "dependencies": {
     "miniflare": "5.20260828.0-alpha",
     "@opentui/core": "0.5.10",
+    "@napi-rs/keyring": "2.1.2",
     "@opencode-ai/pty": "0.3.0"
   },
   "optionalDependencies": {
-    "@fungi.computer/spore-native-linux-x64": "0.2.0",
-    "@fungi.computer/spore-native-linux-arm64": "0.2.0",
-    "@fungi.computer/spore-native-darwin-arm64": "0.2.0",
-    "@fungi.computer/spore-native-darwin-x64": "0.2.0",
+    "@fungi.computer/spore-native-linux-x64": "0.3.0",
+    "@fungi.computer/spore-native-linux-arm64": "0.3.0",
+    "@fungi.computer/spore-native-darwin-arm64": "0.3.0",
+    "@fungi.computer/spore-native-darwin-x64": "0.3.0",
     "@oven/bun-darwin-x64": "1.4.2",
     "@oven/bun-darwin-aarch64": "1.4.2",
     "@oven/bun-linux-x64": "1.4.2",