@link-assistant/hive-mind 1.78.0 → 1.78.2

package/src/telegram-bot.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Early exit for --version (issue #1318: avoid dotenvx MISSING_ENV_FILE warnings)
 if (process.argv.includes('--version')) {
   const v = await import('./version.lib.mjs').then(m => m.getVersion()).catch(() => 'unknown');
@@ -7,7 +8,7 @@ if (process.argv.includes('--version')) {
 }
 
 if (typeof use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 const { lino } = await import('./lino.lib.mjs');

package/src/token-sanitization.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 /**
  * Token sanitization utilities for log content
  * Dual approach: Uses both secretlint AND custom patterns for comprehensive coverage
@@ -240,7 +241,7 @@ export const getGitHubTokensFromFiles = async () => {
  */
 export const getGitHubTokensFromCommand = async () => {
   if (typeof globalThis.use === 'undefined') {
-    globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+    await ensureUseM();
   }
   const { $ } = await globalThis.use('command-stream');
   const tokens = [];

package/src/tool-comments.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 
 /**
  * Centralized definitions for GitHub comments posted by solve.mjs itself
@@ -290,7 +291,7 @@ export const postTrackedCommentFromFile = async ({ $, owner, repo, targetNumber,
     throw new Error('postTrackedCommentFromFile requires a command-stream $ helper');
   }
   if (typeof globalThis.use === 'undefined') {
-    globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+    await ensureUseM();
   }
   const fs = (await globalThis.use('fs')).promises;
   let body;

package/src/use-m-bootstrap.lib.mjs

@@ -0,0 +1,23 @@
+#!/usr/bin/env node
+
+import { ensureWritableNpmGlobalPrefix } from './npm-global-prefix.lib.mjs';
+
+const defaultFetchUseMCode = async () => (await fetch('https://unpkg.com/use-m/use.js')).text();
+
+/**
+ * Load the use-m bootstrap after npm's global prefix has been made safe for
+ * use-m's Node resolver.
+ *
+ * @param {object} [options]
+ * @param {(message: string) => void} [options.log]
+ * @param {() => Promise<string>} [options.fetchUseMCode]
+ * @returns {Promise<Function>} The global use-m `use` function.
+ */
+export const ensureUseM = async (options = {}) => {
+  const { log = message => console.log(message), fetchUseMCode = defaultFetchUseMCode } = options;
+  await ensureWritableNpmGlobalPrefix({ log });
+  if (typeof globalThis.use === 'undefined') {
+    globalThis.use = (await eval(await fetchUseMCode())).use;
+  }
+  return globalThis.use;
+};

package/src/useless-tools.lib.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { ensureUseM } from './use-m-bootstrap.lib.mjs';
 // Useless Claude Code tools and MCP servers for autonomous headless workflows.
 //
 // Hive-mind runs `claude` inside Docker with `--print --dangerously-skip-permissions`
@@ -17,7 +18,7 @@
 // Related issue: https://github.com/link-assistant/hive-mind/issues/1627
 
 if (typeof globalThis.use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 const fs = (await use('fs')).promises;
 const os = await use('os');

package/src/youtrack/youtrack.lib.mjs

@@ -1,10 +1,11 @@
 #!/usr/bin/env node
+import { ensureUseM } from '../use-m-bootstrap.lib.mjs';
 // YouTrack-related utility functions
 
 // Check if use is already defined (when imported from other modules)
 // If not, fetch it (when running standalone)
 if (typeof use === 'undefined') {
-  globalThis.use = (await eval(await (await fetch('https://unpkg.com/use-m/use.js')).text())).use;
+  await ensureUseM();
 }
 
 // Import log and other utilities from general lib