@hraness/peopleblade 0.2.1 → 0.3.0

package/README.md

@@ -15,7 +15,7 @@ Installation includes the pinned runtime dependencies Zod 4.4.3 and Effect 3.22.
 ## Install
 
 ```bash
-bun add --global @hraness/peopleblade@0.2.1
+bun add --global @hraness/peopleblade@0.3.0
 peopleblade --version
 peopleblade init
 peopleblade stats --json
@@ -37,33 +37,66 @@ authorized devices, `peopleblade cloud revoke DEVICE_ID` for a lost device, and
 token. The signed-in dashboard provides the lost-device recovery path when no CLI
 token remains available.
 
-### Optional Wrench-backed sources
+### Optional Ghostget-backed sources
 
-The package does not install Wrench, browser automation, KB, native model runtimes,
-or provider credentials. Beeper, Google, and WhatsApp live sync commands delegate
-through a separately reviewed `wrench` executable on `PATH` (or the absolute
-`PEOPLEBLADE_WRENCH_EXECUTABLE` path). PeopleBlade bundles only the pinned Wrench
-0.16.8 client validators needed to fence requests and receipts; it does not bundle
-or silently download Wrench's execution runtime.
+The package does not install Ghostget, browser automation, KB, native model runtimes,
+or provider credentials. Beeper, Google, and WhatsApp live sync commands and the
+LinkedIn Contact-info read delegate through a separately reviewed `ghostget`
+executable on `PATH` (or the absolute `PEOPLEBLADE_GHOSTGET_EXECUTABLE` path).
+PeopleBlade bundles only the pinned Ghostget 0.17.3 client validators needed to
+fence requests and receipts; it does not bundle or silently download Ghostget's
+execution runtime.
 
-PeopleBlade 0.2.1 contains the reviewed Wrench-backed Beeper, Google, and WhatsApp
+`PEOPLEBLADE_WRENCH_EXECUTABLE` remains a compatibility alias for the explicit
+path. When both variables are set, they must name the same executable. The
+bridge still requires exact Ghostget 0.17.3 before invoking a provider operation.
+
+PeopleBlade 0.3.0 contains the reviewed Ghostget-backed Beeper, Google, and WhatsApp
 live sync commands. Running them requires the separately installed public
-`@hraness/wrench` 0.16.8 package. Beeper support is bounded to account-aware
+`@hraness/ghostget` 0.17.3 package. Beeper support is bounded to account-aware
 `contacts.list@3` reads, `contacts.search@1`, `messaging.search@2`, and the separate
 body-free interaction exporter. `contacts.search@1` executes the official Beeper
-CLI 0.6.2 executable pinned by Wrench; `contacts.list@3` and `messaging.search@2`
-use Wrench's bounded Desktop-loopback read paths. The exporter is macOS arm64 only
+CLI 0.6.2 executable pinned by Ghostget; `contacts.list@3` and `messaging.search@2`
+use Ghostget's bounded Desktop-loopback read paths. The exporter is macOS arm64 only
 and reports lower-bound interaction counts from complete one-to-one conversations
 only. See
 [peopleblade.com/sources](https://peopleblade.com/sources) for the complete provider
 guide. A database previously synced by PeopleBlade 0.1.1 through Wrench 0.16.7
 must run `peopleblade beeper rebind --auth beeper-main --confirm --json` once after
-installing Wrench 0.16.8. The command appends reviewed metadata for the same source
+installing Ghostget 0.17.3. The command appends reviewed metadata for the same source
 identity only after both complete account inventories match. Do not force-bind
-Wrench unless its authenticated Desktop target changed. PeopleBlade calls no
-Beeper interface directly and exposes none of Wrench's Beeper send or action
+Ghostget unless its authenticated Desktop target changed. PeopleBlade calls no
+Beeper interface directly and exposes none of Ghostget's Beeper send or action
 operations. Archive imports, Apple Contacts, iMessage, notes, identity review,
-backups, and optional PeopleBlade cloud commands do not require Wrench.
+backups, and optional PeopleBlade cloud commands do not require Ghostget.
+
+### LinkedIn Contact info through Ghostget
+
+```bash
+peopleblade linkedin contact-info --person-id ID [--account KEY] [--auth ID]
+```
+
+`linkedin contact-info` reads the Contact info panel (email, phone numbers,
+websites, birthday, and connected-since date) of one first-degree LinkedIn
+connection that `linkedin import` already imported from the official LinkedIn
+data export. The command records the read as exact, provider-attributed evidence
+for that person; repeating an identical read changes nothing.
+
+The read runs through Ghostget, Wrench's renamed successor, published as the
+`@hraness/ghostget` package. The package does not install Ghostget. The command
+delegates to a separately installed `ghostget` executable on `PATH` (or the
+absolute `PEOPLEBLADE_GHOSTGET_EXECUTABLE` path) and refuses any executable
+that does not report exactly version 0.17.3. It needs a Ghostget path-backed
+auth binding for a signed-in LinkedIn browser profile; the default binding id
+is `linkedin-main`, and `--auth ID` selects another. Beeper, Google, and
+WhatsApp delegate through the same `ghostget` executable.
+
+Each command reads one bounded profile. It never lists connections, reads
+messages or feeds, or sends invitations, and it fails without writing anything
+when the profile belongs to the account owner or is not a first-degree
+connection. PeopleBlade bundles only the pinned Ghostget 0.17.3 client
+validators that fence the request and receipt; it does not bundle or download
+Ghostget's execution runtime or browser automation.
 
 ## Browse and edit locally
 
@@ -118,9 +151,9 @@ message text. The optional cloud projection excludes source records, raw archive
 local paths, provider credentials, note bodies and revisions, and message bodies. Ambiguous identity links
 remain reviewable instead of being silently merged.
 
-This npm artifact contains only the bundled local CLI, its pinned Wrench client
+This npm artifact contains only the bundled local CLI, its pinned Ghostget client
 validators and executable bridge, SQLite migrations, and package documentation.
-It includes the self-contained loopback workspace, but not the Wrench execution
+It includes the self-contained loopback workspace, but not the Ghostget execution
 runtime, hosted PeopleBlade web server, billing
 implementation, operational tooling, tests, or private product documentation.
 

package/THIRD_PARTY_NOTICES.md

@@ -1,8 +1,8 @@
 # Third-party notices
 
 The PeopleBlade CLI bundle includes reviewed client-boundary code from
-`@hraness/wrench` 0.16.8 (commit
-`b0cf2ecbc1113fcc8ef673a824be475c3d7bbb46`) and message-bundle contract code
+`@hraness/ghostget` 0.17.3 (commit
+`67b53cc1917bb09a48b22042cc988c3afbc0aaf8`) and message-bundle contract code
 from `@hraness/message-like-me` 0.7.0. Those portions are provided under the
 following license. The PeopleBlade CLI package has its own MIT grant in
 `LICENSE`; this notice preserves the attribution for the bundled portions.

package/dist/cli.ts

@@ -3,10 +3,20 @@
 import { accessSync, constants, realpathSync } from "node:fs";
 import { isAbsolute, resolve } from "node:path";
 
-const reviewedWrenchVersion = "0.16.8";
-const configured = process.env.PEOPLEBLADE_WRENCH_EXECUTABLE;
+const reviewedGhostgetVersion = "0.17.3";
+const canonicalConfigured = process.env.PEOPLEBLADE_GHOSTGET_EXECUTABLE;
+const legacyConfigured = process.env.PEOPLEBLADE_WRENCH_EXECUTABLE;
+if (
+  canonicalConfigured !== undefined
+  && legacyConfigured !== undefined
+  && canonicalConfigured !== legacyConfigured
+) {
+  console.error("PEOPLEBLADE_GHOSTGET_EXECUTABLE and PEOPLEBLADE_WRENCH_EXECUTABLE must name the same executable when both are set.");
+  process.exit(127);
+}
+const configured = canonicalConfigured ?? legacyConfigured;
 const executable = configured === undefined
-  ? Bun.which("wrench")
+  ? Bun.which("ghostget")
   : isAbsolute(configured)
     ? resolve(configured)
     : null;
@@ -14,8 +24,8 @@ const executable = configured === undefined
 if (executable === null) {
   console.error(
     configured === undefined
-      ? "PeopleBlade Wrench-backed sources require a separately reviewed `wrench` executable on PATH."
-      : "PEOPLEBLADE_WRENCH_EXECUTABLE must be an absolute executable path.",
+      ? "PeopleBlade Ghostget-backed sources require a separately reviewed `ghostget` executable on PATH."
+      : "PEOPLEBLADE_GHOSTGET_EXECUTABLE must be an absolute executable path.",
   );
   process.exit(127);
 }
@@ -25,11 +35,11 @@ try {
   accessSync(executable, constants.X_OK);
   canonicalExecutable = realpathSync(executable);
 } catch {
-  console.error("The configured PeopleBlade Wrench executable is unavailable or not executable.");
+  console.error("The configured PeopleBlade Ghostget executable is unavailable or not executable.");
   process.exit(127);
 }
 if (process.argv[1] !== undefined && canonicalExecutable === realpathSync(process.argv[1])) {
-  console.error("The PeopleBlade Wrench executable bridge cannot delegate to itself.");
+  console.error("The PeopleBlade Ghostget executable bridge cannot delegate to itself.");
   process.exit(127);
 }
 
@@ -54,11 +64,11 @@ if (
   || versionProbe.signalCode !== undefined
   || versionProbe.exitedDueToTimeout === true
   || versionProbe.exitedDueToMaxBuffer === true
-  || versionProbe.stdout?.toString() !== `${reviewedWrenchVersion}\n`
+  || versionProbe.stdout?.toString() !== `${reviewedGhostgetVersion}\n`
   || versionProbe.stderr?.byteLength !== 0
 ) {
   console.error(
-    `PeopleBlade Wrench-backed sources require the exact reviewed Wrench ${reviewedWrenchVersion} executable.`,
+    `PeopleBlade Ghostget-backed sources require the exact reviewed Ghostget ${reviewedGhostgetVersion} executable.`,
   );
   process.exit(126);
 }