@massu/core 1.16.0 → 1.16.1

package/dist/hooks/session-end.js

@@ -4156,10 +4156,11 @@ function verifyEd25519SignedEnvelope(key, payload) {
 }
 
 // src/security/license-pubkey.generated.ts
-var LICENSE_PUBKEY_ED25519 = new Uint8Array([39, 136, 108, 146, 85, 233, 119, 252, 223, 226, 123, 155, 234, 168, 200, 150, 36, 249, 174, 6, 130, 146, 125, 196, 136, 224, 202, 150, 53, 228, 114, 15]);
-var LICENSE_PUBKEY_FINGERPRINT_HEX = "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475";
+var LICENSE_PUBKEY_ED25519 = new Uint8Array([254, 188, 221, 150, 111, 252, 154, 100, 253, 247, 113, 192, 144, 224, 127, 160, 202, 111, 75, 40, 35, 169, 108, 89, 252, 250, 255, 233, 250, 120, 47, 160]);
+var LICENSE_PUBKEY_FINGERPRINT_HEX = "18c0456789a70eeee28012719f04725f43f59e693f735227ff73f0475f2290e3";
 var KNOWN_LICENSE_PUBKEY_FINGERPRINTS = /* @__PURE__ */ new Set([
-  "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475"
+  "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475",
+  "18c0456789a70eeee28012719f04725f43f59e693f735227ff73f0475f2290e3"
 ]);
 
 // src/security/license-response-verifier.ts
@@ -4410,10 +4411,11 @@ async function pullTeamPromotions(db, opts = {}) {
       headers: { Authorization: `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(timeoutMs)
     });
-    if (!res.ok) return { ...ZERO };
+    if (!res.ok) return failSync(db, `http_${res.status}`);
     envelope = await res.json();
-  } catch {
-    return { ...ZERO };
+  } catch (err) {
+    const reason = err instanceof Error && err.name === "TimeoutError" ? "timeout" : "network";
+    return failSync(db, reason);
   }
   const verdict = verifyPromotionEnvelope(envelope);
   if (verdict.kind !== "valid") {
@@ -4599,6 +4601,14 @@ function emitDropTelemetry(db, eventType, data) {
 `
   );
 }
+function failSync(db, reason) {
+  recordTelemetry(db, "team_promotion_sync_failed", { reason });
+  process.stderr.write(
+    `[massu] team-shared promotion pull FAILED (${reason}). This is NOT "nothing to sync" \u2014 the cloud was unreachable or rejected the request; promotions were NOT refreshed this run.
+`
+  );
+  return { ...ZERO, sync_error: reason };
+}
 
 // src/hooks/session-end.ts
 init_config();

package/dist/hooks/session-start.js

@@ -12799,10 +12799,11 @@ function verifyEd25519SignedEnvelope(key, payload) {
 }
 
 // src/security/license-pubkey.generated.ts
-var LICENSE_PUBKEY_ED25519 = new Uint8Array([39, 136, 108, 146, 85, 233, 119, 252, 223, 226, 123, 155, 234, 168, 200, 150, 36, 249, 174, 6, 130, 146, 125, 196, 136, 224, 202, 150, 53, 228, 114, 15]);
-var LICENSE_PUBKEY_FINGERPRINT_HEX = "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475";
+var LICENSE_PUBKEY_ED25519 = new Uint8Array([254, 188, 221, 150, 111, 252, 154, 100, 253, 247, 113, 192, 144, 224, 127, 160, 202, 111, 75, 40, 35, 169, 108, 89, 252, 250, 255, 233, 250, 120, 47, 160]);
+var LICENSE_PUBKEY_FINGERPRINT_HEX = "18c0456789a70eeee28012719f04725f43f59e693f735227ff73f0475f2290e3";
 var KNOWN_LICENSE_PUBKEY_FINGERPRINTS = /* @__PURE__ */ new Set([
-  "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475"
+  "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475",
+  "18c0456789a70eeee28012719f04725f43f59e693f735227ff73f0475f2290e3"
 ]);
 
 // src/security/license-response-verifier.ts
@@ -13076,10 +13077,11 @@ async function pullTeamPromotions(db, opts = {}) {
       headers: { Authorization: `Bearer ${apiKey}` },
       signal: AbortSignal.timeout(timeoutMs)
     });
-    if (!res.ok) return { ...ZERO };
+    if (!res.ok) return failSync(db, `http_${res.status}`);
     envelope = await res.json();
-  } catch {
-    return { ...ZERO };
+  } catch (err) {
+    const reason = err instanceof Error && err.name === "TimeoutError" ? "timeout" : "network";
+    return failSync(db, reason);
   }
   const verdict = verifyPromotionEnvelope(envelope);
   if (verdict.kind !== "valid") {
@@ -13265,6 +13267,14 @@ function emitDropTelemetry(db, eventType, data) {
 `
   );
 }
+function failSync(db, reason) {
+  recordTelemetry(db, "team_promotion_sync_failed", { reason });
+  process.stderr.write(
+    `[massu] team-shared promotion pull FAILED (${reason}). This is NOT "nothing to sync" \u2014 the cloud was unreachable or rejected the request; promotions were NOT refreshed this run.
+`
+  );
+  return { ...ZERO, sync_error: reason };
+}
 
 // src/hooks/session-start.ts
 init_memory_file_ingest();

package/dist/hooks/user-prompt.js

@@ -3615,10 +3615,11 @@ function verifyEd25519SignedEnvelope(key, payload) {
 }
 
 // src/security/license-pubkey.generated.ts
-var LICENSE_PUBKEY_ED25519 = new Uint8Array([39, 136, 108, 146, 85, 233, 119, 252, 223, 226, 123, 155, 234, 168, 200, 150, 36, 249, 174, 6, 130, 146, 125, 196, 136, 224, 202, 150, 53, 228, 114, 15]);
-var LICENSE_PUBKEY_FINGERPRINT_HEX = "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475";
+var LICENSE_PUBKEY_ED25519 = new Uint8Array([254, 188, 221, 150, 111, 252, 154, 100, 253, 247, 113, 192, 144, 224, 127, 160, 202, 111, 75, 40, 35, 169, 108, 89, 252, 250, 255, 233, 250, 120, 47, 160]);
+var LICENSE_PUBKEY_FINGERPRINT_HEX = "18c0456789a70eeee28012719f04725f43f59e693f735227ff73f0475f2290e3";
 var KNOWN_LICENSE_PUBKEY_FINGERPRINTS = /* @__PURE__ */ new Set([
-  "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475"
+  "18a63d64fdec9e5a368fc45feaa49bed6ced815967e582bc7b8af534f22a9475",
+  "18c0456789a70eeee28012719f04725f43f59e693f735227ff73f0475f2290e3"
 ]);
 
 // src/security/license-response-verifier.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@massu/core",
-  "version": "1.16.0",
+  "version": "1.16.1",
   "type": "module",
   "description": "AI Engineering Governance MCP Server - Session memory, knowledge system, feature registry, code intelligence, rule enforcement, tiered tooling (12 free / 73 total), 56 workflow commands, 11 agents, 20+ patterns",
   "main": "./dist/cli.js",