@litfamily/litclaude 1.0.13 → 1.0.15

package/bin/install-ownership.mjs

@@ -5,6 +5,7 @@ import { compareStableSemver } from "./update-notifier.mjs";
 
 const stableVersion = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/u;
 const receiptName = ".litclaude-install-receipt.json";
+const hostUseMarker = ".in_use";
 // Exact pristine trees installed from the registry-published litclaude-ai@0.4.6 tarball.
 const legacyVersion = "0.4.6";
 const legacy046 = {
@@ -44,6 +45,7 @@ function treeHash(root) {
     for (const name of readdirSync(path).sort()) {
       if (!prefix && name === receiptName) continue;
       const next = join(path, name), rel = prefix ? `${prefix}/${name}` : name, value = lstatSync(next);
+      if (!prefix && name === hostUseMarker && value.isDirectory() && readdirSync(next).length === 0) continue;
       if (value.isDirectory()) { entries.push([rel, "directory"]); walk(next, rel); }
       else if (value.isFile() && value.nlink === 1) entries.push([rel, "file", createHash("sha256").update(readFileSync(next)).digest("hex")]);
       else conflict(next);

package/docs/assets/readme/badge-version.svg

@@ -1 +1 @@
-<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.13"><title>release: 1.0.13</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.13</text></g></svg>
+<svg xmlns="http://www.w3.org/2000/svg" width="146" height="20" role="img" aria-label="release: 1.0.15"><title>release: 1.0.15</title><g shape-rendering="crispEdges"><rect width="49" height="20" fill="#080d14"/><rect x="49" width="97" height="20" fill="#ff6337"/></g><g fill="#fff" text-anchor="middle" font-family="Verdana,Geneva,DejaVu Sans,sans-serif" text-rendering="geometricPrecision" font-size="110"><text x="255" y="140" textLength="390" transform="scale(.1)">release</text><text x="965" y="140" textLength="870" transform="scale(.1)" fill="#080D14">1.0.15</text></g></svg>

package/docs/hooks.md

@@ -244,19 +244,22 @@ would be without the feature. The first such failure in a session shows one `sys
 Per-session counters live in `.litclaude/jev/session-<id>.json` under the project state
 root, with the current turn's hinted skill ID and latency in milliseconds; the prompt hook
 clears that pair at the start of every turn while the flag is on. The optional HUD status line
-(`plugins/litclaude/bin/litclaude-hud.js`) reads it and ends with `Jev ✓` while the hint is
-on, `Jev ✓ <skill> <latency>` on a hinted turn, or `Jev ⚠ key missing` when the flag is on
-without a key; it shows nothing while the flag is off and never shows the key or its length.
-While on, the HUD paints `Jev` as a rainbow whose starting hue follows the clock, so each refresh
-shifts it slightly (truecolor, 256- and 16-colour tiers; plain under `NO_COLOR`, the HUD's
-no-colour switch, or a light or unknown appearance). The session file also records that the
+(`plugins/litclaude/bin/litclaude-hud.js`) reads it and puts a badge right after the model
+label: `✦Jev` while the hint is on, `✦Jev → <skill>` on a hinted turn, or `✦Jev ⚠ key` when
+the flag is on without a key; it shows nothing while the flag is off, never shows the latency,
+and never shows the key or its length. While on, the HUD paints `✦` gold, the hinted skill green
+and the missing-key badge amber, and paints `Jev` as a rainbow whose starting hue follows the
+clock, so each refresh shifts it slightly (truecolor, 256- and 16-colour tiers; plain under
+`NO_COLOR` or the HUD's no-colour switch; a light or unknown appearance keeps the words on the
+default foreground and colours only the marks). The session file also records that the
 once-per-session `✦ Jev skill hint ON ✦` `systemMessage` was shown; the prompt hook writes that
 mark before it emits the line on the first turn with the flag and key set, puts the line ahead
 of any other visible message that turn, and shows no line when the mark cannot be written. The opt-in trace, `.litclaude/jev/trace.jsonl`, records the timestamp, the SHA-256 of the
 redacted `state` (never of the raw prompt), chosen ID, confidence, latency, HTTP status, and fallback reason; it holds no prompt text,
 key, or response body. Session and trace files are opened with `O_NOFOLLOW` (an `lstat` check
 where the platform lacks it), so a symlink planted at either path is refused rather than written
-through. Because `TYPESAFE_API_KEY` is exported in the shell that starts Claude Code, the
+through. The `.litclaude` and `.litclaude/jev` folders must be real folders too: when either one
+is a symlink, the hint reads and writes nothing there, sends no request, and shows no hint or note. Because `TYPESAFE_API_KEY` is exported in the shell that starts Claude Code, the
 agent's own tools can read it too; use a key dedicated to this feature, with a low spend limit.
 `litclaude doctor` prints `Jev skill hint: off`, `Jev skill hint: on`,
 or `Jev skill hint: flag on but TYPESAFE_API_KEY missing`. The offline regression tests,

package/docs/privacy.md

@@ -43,8 +43,8 @@ ledgers, saved knowledge, and other feature-specific records. SessionStart
 context-pressure detection can inspect a supplied transcript path up to 256 KiB
 for a fixed set of pressure markers; it returns only a bounded advisory. No skill
 review reads transcript excerpts or sends them to a model. The optional Jev skill hint keeps
-per-session request counts, the current turn's hinted skill ID and latency (shown by the
-HUD), and whether the once-per-session "on" line was shown in `.litclaude/jev/` and, only with `LITCLAUDE_JEV_TRACE=1`, a trace
+per-session request counts, the current turn's hinted skill ID (shown by the HUD) and
+latency, and whether the once-per-session "on" line was shown in `.litclaude/jev/` and, only with `LITCLAUDE_JEV_TRACE=1`, a trace
 of hashes of the redacted prompt, timings, and status codes without prompt text. Existing
 `pending-review.json` and `skill-loop-state.json` files are inert after the
 automatic review feature's removal and may be deleted. No other state is affected.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@litfamily/litclaude",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "description": "Claude Code-native workflow distribution.",
   "type": "module",
   "bin": {
@@ -53,6 +53,9 @@
   ],
   "scripts": {
     "prepublishOnly": "node scripts/prepublish-test-gate.mjs",
+    "prepack": "node tools/readme-for-npm.mjs apply",
+    "postpack": "node tools/readme-for-npm.mjs restore",
+    "check:npm-readme": "node tools/readme-for-npm.mjs check",
     "postinstall": "node scripts/postinstall.mjs",
     "test": "node --test --test-concurrency=1 --import ./test/helpers/motion-offline-prewarm.mjs test/*.test.mjs",
     "validate:plugin": "node scripts/validate-plugin.mjs",

package/plugins/litclaude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "litclaude",
   "description": "Claude Code-native workflow plugin with a bounded-authority start-work lifecycle.",
-  "version": "1.0.13",
+  "version": "1.0.15",
   "author": {
     "name": "LitClaude contributors"
   },

package/plugins/litclaude/bin/litclaude-hud.js

@@ -11,10 +11,11 @@ import {
   litBrandPrefix,
   normalizeHudAppearance,
   rainbowText,
+  toneText,
 } from "../lib/hud-accent-palette.mjs";
 import { latestUsageTokens } from "../lib/cache-measurement.mjs";
 import { readIgnitionState, renderIgnitionSegment } from "../lib/hud-ignition.mjs";
-import { formatJevLatency, jevHudState } from "../lib/jev-skill-hint.mjs";
+import { jevHudState } from "../lib/jev-skill-hint.mjs";
 import { resolveProjectStateRoot } from "../lib/project-state-root.mjs";
 
 const pluginRoot = dirname(dirname(fileURLToPath(import.meta.url)));
@@ -246,8 +247,14 @@ const formatUsageSegment = (label, value, reset) => {
   return `${labelText} ${accent("[")}${makeBlockBar(pct, 2)}${accent("]")} ${pctText}${resetText ? ` ${text(resetText)}` : ""}`;
 };
 
-// Optional Jev skill hint: nothing while LITCLAUDE_JEV is off, and never the key or its length.
-const jevSegment = (status) => {
+// Optional Jev skill hint badge, attached to the model label: nothing while LITCLAUDE_JEV is
+// off, and never the key or its length.
+const JEV_GOLD = [255, 215, 90];
+const JEV_GREEN = [110, 235, 120];
+const JEV_AMBER = [255, 175, 60];
+const tone = (value, rgb, ansi16) => toneText(value, rgb, { depth: colorDepth, ansi16 });
+
+const jevBadge = (status) => {
   let state;
   try {
     const cwd = typeof status.cwd === "string" && status.cwd ? status.cwd : null;
@@ -260,14 +267,19 @@ const jevSegment = (status) => {
     return "";
   }
   if (!state) return "";
-  if (state.keyMissing) return `${text("Jev")} ${colors.yellow}⚠${colors.reset} ${text("key missing")}`;
+  // Light and unknown appearances keep the words on the default foreground; only the marks
+  // keep their colour, as the rest of the HUD does.
+  if (state.keyMissing) {
+    return coloredText ? tone("✦Jev ⚠ key", JEV_AMBER, 33) : `${tone("✦", JEV_AMBER, 33)}Jev ${tone("⚠", JEV_AMBER, 33)} key`;
+  }
   // While on, the word shimmers: each refresh starts the rainbow at a hue taken from the clock.
-  // Light and unknown appearances keep it on the default foreground like the rest of the text.
   const now = Number(process.env.LITCLAUDE_HUD_TEST_NOW);
   const phase = Math.floor((Number.isFinite(now) && now > 0 ? now : Date.now()) / 100) % 360;
-  const word = coloredText ? rainbowText("Jev", { depth: colorDepth, phase }) : text("Jev");
-  const mark = `${word} ${colors.green}✓${colors.reset}`;
-  return state.last ? `${mark} ${text(state.last.skill)} ${text(formatJevLatency(state.last.latency_ms))}` : mark;
+  const word = coloredText ? rainbowText("Jev", { depth: colorDepth, phase }) : "Jev";
+  const badge = `${tone("✦", JEV_GOLD, 93)}${word}`;
+  if (!state.last) return badge;
+  const skill = coloredText ? tone(state.last.skill, JEV_GREEN, 92) : state.last.skill;
+  return `${badge} ${colors.dim}→${colors.reset} ${skill}`;
 };
 
 const main = async () => {
@@ -294,8 +306,8 @@ const main = async () => {
   const ignition = renderIgnitionSegment(readIgnitionState(status.session_id), {
     depth: plainOutput ? "plain" : colorDepth,
   });
-  const jev = jevSegment(status);
-  const line = `${prefix}${ignition ? ` ${ignition}` : ""} ${accent("|")} ${text(model)} ${accent(sep)} ${contextText}${usageText}${git ? ` ${accent(sep)} ${text("git")} ${text(git)}` : ""}${jev ? ` ${accent(sep)} ${jev}` : ""}`;
+  const jev = jevBadge(status);
+  const line = `${prefix}${ignition ? ` ${ignition}` : ""} ${accent("|")} ${text(model)}${jev ? ` ${jev}` : ""} ${accent(sep)} ${contextText}${usageText}${git ? ` ${accent(sep)} ${text("git")} ${text(git)}` : ""}`;
   process.stdout.write(`${line}\n`);
 
   const lastMessage = latestUserMessage(status.transcript_path);

package/plugins/litclaude/bin/litclaude-mcp.js

@@ -9,7 +9,7 @@ import {
 } from "../lib/wikify-knowledge.mjs";
 
 const protocolVersion = "2024-11-05";
-const serverVersion = "1.0.13";
+const serverVersion = "1.0.15";
 
 const publicSourceReadTool = {
   name: "public_source_read",

package/plugins/litclaude/lib/canonical-skill-resources.mjs

@@ -14,7 +14,7 @@ export const canonicalSkillResourceManifest = Object.freeze(
     ["lib/office-runtime-lock/package-lock.json", "4b9552dba69bf2803cecdf71996d26de0497004c00d1e1f5753a5b299f85d8ba"],
     ["lib/office-runtime-lock/package.json", "edf7fee2ba78d6ad42bf5761678b2a2210adb7282108864360f83c46adb59708"],
     ["lib/office-runtime-lock/requirements.lock", "7c63ce0de1ae9a912d1e546e9c01dd99a705d4a50435f36040d351cc3e6e6014"],
-    ["lib/office-runtime.mjs", "463248cf341d0115da5d49c6d30fcb16e2d6e118f4d1e9d739844d6ff0c8cbdc"],
+    ["lib/office-runtime.mjs", "268e8ca9bb6a08dcb43ea2b40c899e776db850adfcb284a89d315d3c1a535438"],
     ["lib/office_data.py", "0f4c2449622b6d59630e60508594d181279052c41918df4370e11a68df1ee239"],
     ["lib/office_runtime_bootstrap.py", "28812ef485f73f413c6d08cfff326290b301a0d7358260a2a0496edd8f71f4e9"],
     ["lib/ooxml_integrity.py", "85e5cba28aa3b9f4f4c28f59c6118439a985fe4f29e25274ae63e9ef1edf15e3"],
@@ -32,7 +32,7 @@ export const canonicalSkillResourceManifest = Object.freeze(
     ["lib/rules/ordering.mjs", "c6da1ef0b228b8f0932b54422d2bc9744eb6bfbb8f5bb70b30b8f1a798765d1c"],
     ["lib/rules/scanner.mjs", "c62d672a66af25f29fe1d05b09288583425a2bf55f20d788f81d1578035f79f9"],
     ["lib/rules/session-state.mjs", "ad660cadf147b102437da95a771bae19ee2140bf39c58915b8cb498e8d04f2af"],
-    ["lib/secret-shapes.mjs", "73733bb5927d6d1e00c529acc847b79d8664d10f94100bcc7452824615ab87ba"],
+    ["lib/secret-shapes.mjs", "7dc58f1caa6d5fc9dc43797a703911e1ec26689a082bb6972f6ed71722a01d57"],
     ["lib/secure-path-read.mjs", "c2991d0279f7399c3022c78babe28e653260f2a2e9ff4a5df692883ccf8807fd"],
     ["lib/strict-json.mjs", "d941f327aabce5ffc212770852cfbc7e08dd03471e4e9bc9560eff54f06d489a"],
     ["lib/wikify-knowledge-cli.mjs", "6835f8d6d98a3dd26266409366c23b2da437c0cd41e63537f0f200667655132b"],
@@ -699,7 +699,7 @@ export const canonicalSkillResourceManifest = Object.freeze(
     ["skills/lit-typographic-motion/engine/node/pipeline.mjs", "fef77c5190c604fbdf360bd1d38d750587562ca0974a8b1aacccb6ad57411206"],
     ["skills/lit-typographic-motion/engine/node/png.mjs", "fa34ab36a17f614064d8f00e3540c3bd13b06fc61036981d44fe57ba8ec86d4a"],
     ["skills/lit-typographic-motion/engine/node/report.mjs", "6de1d1a1e81963a5d97da4c71f4d22a379d145ac3d3fb5aa7a7ba6b044811329"],
-    ["skills/lit-typographic-motion/engine/node/runtime.mjs", "47a585b4b8762474ae1db30dcd8b25b3093da6da0f05ff0dd20643ae669a3a27"],
+    ["skills/lit-typographic-motion/engine/node/runtime.mjs", "e246f0b00b6859ee6793faf3927740d8d04e8c94f62b091c81e121ce6aa8b707"],
     ["skills/lit-typographic-motion/engine/node/session.mjs", "e013dfd801ba8503038233efd4625d78f4e48331564612eecb2034e9062c414f"],
     ["skills/lit-typographic-motion/engine/node/sound-cli.mjs", "e10cf22b8ec9d761e3e6e9279330520ed33b1b2b9e68fd46d7672ac8e98b5eae"],
     ["skills/lit-typographic-motion/engine/node/sound.mjs", "7b585b47f36c58cf4959310e59363fb321e04586193430b3ad09a9efd5bc9bd3"],

package/plugins/litclaude/lib/hud-accent-palette.mjs

@@ -129,6 +129,21 @@ const hueToRgb = (hue) => {
   return [r, g, b].map((channel) => Math.round(255 * (1 - s + s * channel)));
 };
 
+// Nearest 6x6x6 cube entry of the 256-colour palette.
+const rgbTo256 = ([r, g, b]) => {
+  const cube = (value) => Math.round((value / 255) * 5);
+  return 16 + 36 * cube(r) + 6 * cube(g) + cube(b);
+};
+
+// One fixed colour for `text`: the exact RGB on truecolor, its cube entry on 256 colours, the
+// given ANSI code on 16 colours, and the text untouched on plain.
+export const toneText = (text, rgb, { depth = "plain", ansi16 = 37 } = {}) => {
+  if (depth === "truecolor") return `\x1b[38;2;${rgb.join(";")}m${text}\x1b[0m`;
+  if (depth === "256") return `\x1b[38;5;${rgbTo256(rgb)}m${text}\x1b[0m`;
+  if (depth === "16") return `\x1b[${ansi16}m${text}\x1b[0m`;
+  return text;
+};
+
 export const rainbowText = (text, { depth = "plain", phase = 0 } = {}) => {
   if (!["truecolor", "256", "16"].includes(depth)) return text;
   const chars = [...text];
@@ -138,10 +153,7 @@ export const rainbowText = (text, { depth = "plain", phase = 0 } = {}) => {
     const hue = (((phase + index * step) % 360) + 360) % 360;
     if (depth === "16") return `\x1b[${RAINBOW_ANSI16[Math.floor(((hue + 30) % 360) / 60)]}m${char}`;
     const [r, g, b] = hueToRgb(hue);
-    if (depth === "256") {
-      const cube = (value) => Math.round((value / 255) * 5);
-      return `\x1b[38;5;${16 + 36 * cube(r) + 6 * cube(g) + cube(b)}m${char}`;
-    }
+    if (depth === "256") return `\x1b[38;5;${rgbTo256([r, g, b])}m${char}`;
     return `\x1b[38;2;${r};${g};${b}m${char}`;
   });
   return `\x1b[1m${painted.join("")}\x1b[0m`;

package/plugins/litclaude/lib/jev-skill-hint.mjs

@@ -232,7 +232,29 @@ const safeSessionId = (sessionId) => {
   return cleaned || "unknown";
 };
 
-const jevStateDirectory = (stateRoot) => join(stateRoot, ".litclaude", "jev");
+// The `.litclaude` folder and its `jev` folder must both be real folders inside the project. A
+// symlink at either level would carry every read and write outside it, so the whole state path is
+// refused and the caller falls back to its silent no-hint path. `create` makes missing levels.
+const jevStateDirectory = (stateRoot, { create = false } = {}) => {
+  let directory = stateRoot;
+  for (const part of [".litclaude", "jev"]) {
+    directory = join(directory, part);
+    let stat;
+    try {
+      stat = lstatSync(directory);
+    } catch (error) {
+      if (error?.code !== "ENOENT" || !create) throw error;
+      try {
+        mkdirSync(directory, { mode: 0o700 });
+      } catch (mkdirError) {
+        if (mkdirError?.code !== "EEXIST") throw mkdirError;
+      }
+      stat = lstatSync(directory);
+    }
+    if (!stat.isDirectory()) throw new Error("state folder is not a real folder");
+  }
+  return directory;
+};
 
 // Opening with O_NOFOLLOW refuses a symlink planted at a state or trace path, so a write never
 // lands outside the state folder. Where the platform lacks the flag, lstat refuses it instead.
@@ -274,8 +296,7 @@ const readSession = (stateRoot, sessionId) => {
 
 const writeSession = (stateRoot, sessionId, session) => {
   try {
-    const directory = jevStateDirectory(stateRoot);
-    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const directory = jevStateDirectory(stateRoot, { create: true });
     const target = join(directory, `session-${safeSessionId(sessionId)}.json`);
     const temporary = `${target}.${process.pid}.tmp`;
     refuseSymlink(temporary);
@@ -293,8 +314,7 @@ const writeSession = (stateRoot, sessionId, session) => {
 
 const writeTrace = (stateRoot, record) => {
   try {
-    const directory = jevStateDirectory(stateRoot);
-    mkdirSync(directory, { recursive: true, mode: 0o700 });
+    const directory = jevStateDirectory(stateRoot, { create: true });
     const target = join(directory, "trace.jsonl");
     refuseSymlink(target);
     const fd = openSync(target, constants.O_WRONLY | constants.O_APPEND | constants.O_CREAT | NO_FOLLOW, 0o600);
@@ -341,8 +361,6 @@ export const jevHudState = ({ env = process.env, stateRoot, sessionId } = {}) =>
   return { keyMissing: false, last: stateRoot ? readSession(stateRoot, sessionId).last : null };
 };
 
-export const formatJevLatency = (latencyMs) => `${(latencyMs / 1000).toFixed(2)}s`;
-
 /** Host-side eligibility that needs no router: a leading command character or too little text. */
 export const isJevEligibleText = (text) => {
   if (typeof text !== "string") return false;

package/plugins/litclaude/lib/office-runtime.mjs

@@ -42,6 +42,19 @@ const HOST_TOOLS = [
 
 const run = (command, args, options = {}) => spawnSync(command, args, { encoding: "utf8", ...options });
 
+// npm exports its own settings as npm_config_* to every script it runs, so a caller started under
+// `npm install -g` would hand `global=true` to this child, and npm refuses `npm ci` in global mode
+// (ECIGLOBAL). Drop the inherited settings that change where or what `npm ci` installs; registry,
+// proxy and cache settings pass through.
+const NPM_INSTALL_SHAPE_SETTINGS = new Set([
+  "global", "location", "prefix", "dry_run", "package_lock_only", "include", "production",
+  "workspace", "workspaces", "include_workspace_root", "install_strategy", "global_style", "legacy_bundling",
+]);
+const npmChildEnv = (env) => Object.fromEntries(Object.entries(env).filter(([key]) => {
+  const setting = /^npm_config_(.+)$/iu.exec(key)?.[1].toLowerCase().replaceAll("-", "_");
+  return !NPM_INSTALL_SHAPE_SETTINGS.has(setting);
+}));
+
 export function pythonCommand() {
   return process.env.LITCLAUDE_OFFICE_PYTHON || "python3";
 }
@@ -136,6 +149,7 @@ export function ensureNode() {
     const result = run(npm, ["ci", "--omit=dev", "--ignore-scripts", "--no-audit", "--no-fund", "--loglevel=error"], {
       cwd: status.dir,
       stdio: ["ignore", "pipe", "pipe"],
+      env: npmChildEnv(process.env),
     });
     if (result.error || result.status !== 0) {
       throw new Error(`OFFICE_RUNTIME_NODE_INSTALL_FAILED: npm ci exited ${result.status}: ${(result.stderr || result.error?.message || "").trim().slice(-600)}`);

package/plugins/litclaude/lib/secret-shapes.mjs

@@ -24,7 +24,11 @@ export const SECRET_SHAPE_PATTERNS = Object.freeze([
   /(?<![A-Za-z0-9_])SG\.[A-Za-z0-9_-]{16,}\.[A-Za-z0-9_-]{16,}(?![A-Za-z0-9_])/u,
   /(?<![A-Za-z0-9_])(?:glpat|gldt|glrt)-[A-Za-z0-9_-]{8,}(?![A-Za-z0-9_])/u,
   /(?<![A-Za-z0-9_])eyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+(?![A-Za-z0-9_])/u,
-  /\b(?:bearer|basic)\s+[A-Za-z0-9._~+/=-]{12,}(?=$|[^A-Za-z0-9._~+/=-])/iu,
+  /\bbearer\s+[A-Za-z0-9._~+/=-]{12,}(?=$|[^A-Za-z0-9._~+/=-])/iu,
+  // A Basic credential is standard base64 of at least 8 characters in whole 4-character groups,
+  // carrying a digit, `+`, `/`, padding, or mixed case with an inner capital. The scheme matches
+  // in any case; the credential is case-sensitive, so "basic understanding" is not a credential.
+  /\b[Bb][Aa][Ss][Ii][Cc]\s+(?=[A-Za-z0-9+/=]{8})(?=[A-Za-z0-9+/=]*[0-9+/=]|(?=[A-Za-z0-9+/=]*[a-z])[A-Za-z0-9+/=]+[A-Z])(?:[A-Za-z0-9+/]{4})+(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?(?![A-Za-z0-9._~+/=-])/u,
   /(?<![A-Za-z0-9-])(?:proxy-)?authorization\s*:\s*[!#$%&'*+\-.^_`|~0-9A-Za-z]+\s+(?:[!#$%&'*+\-.^_`|~0-9A-Za-z]+\s*=\s*\S+|\S{12,})/iu,
   /\b(?:password|passwd|secret|token|api[_-]?key|access[_-]?token)\s*[:=]\s*[^\s,;]+/iu,
   /\b[A-Za-z][A-Za-z0-9]*(?:[_-][A-Za-z0-9]+)*[_-](?:token|secret|key)(?:[_-][A-Za-z0-9]+)*\s*[:=]\s*[^\s,;]+/iu,

package/plugins/litclaude/skills/lit-typographic-motion/engine/node/runtime.mjs

@@ -237,9 +237,22 @@ export async function installFonts({ env = process.env, log = () => {} } = {}) {
   return done;
 }
 
-function npm(args, options) {
+// npm exports its own settings to lifecycle scripts as npm_config_*, so an install started by the
+// postinstall of `npm install -g` would hand `global=true` to this child, and npm refuses `npm ci`
+// in global mode (ECIGLOBAL). Drop the inherited settings that change where or what `npm ci`
+// installs; registry, proxy and cache settings pass through.
+const NPM_INSTALL_SHAPE_SETTINGS = new Set([
+  "global", "location", "prefix", "dry_run", "package_lock_only", "include", "production",
+  "workspace", "workspaces", "include_workspace_root", "install_strategy", "global_style", "legacy_bundling",
+]);
+const npmChildEnv = (env) => Object.fromEntries(Object.entries(env).filter(([key]) => {
+  const setting = /^npm_config_(.+)$/iu.exec(key)?.[1].toLowerCase().replaceAll("-", "_");
+  return !NPM_INSTALL_SHAPE_SETTINGS.has(setting);
+}));
+
+function npm(args, { env, ...options }) {
   const bin = process.platform === "win32" ? "npm.cmd" : "npm";
-  return spawnSync(bin, args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], ...options });
+  return spawnSync(bin, args, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], ...options, env: npmChildEnv(env) });
 }
 
 export async function installNode({ env = process.env, log = () => {} } = {}) {
@@ -264,12 +277,12 @@ export async function installNode({ env = process.env, log = () => {} } = {}) {
       if (createHash("sha512").update(bytes).digest("hex") !== integrity) throw new Error(`integrity mismatch for ${name}`);
       const tarball = path.join(cache, path.basename(new URL(pkg.resolved).pathname));
       writeAtomic(tarball, bytes);
-      const add = npm(["cache", "add", tarball, "--cache", cache], { env: { ...env } });
+      const add = npm(["cache", "add", tarball, "--cache", cache], { env });
       if (add.status !== 0) throw new Error(`npm cache add failed: ${add.stderr.trim().slice(-400)}`);
     }
     args.push("--offline", "--cache", cache);
   }
-  const result = npm(args, { cwd: dir, env: { ...env } });
+  const result = npm(args, { cwd: dir, env });
   if (cache) rmSync(cache, { recursive: true, force: true });
   if (result.error || result.status !== 0) {
     rmSync(dir, { recursive: true, force: true });