@mnemonik/cli 7.100.0 → 7.101.3

package/dist/vendor/local-setup.js

@@ -6394,7 +6394,7 @@ init_repositoryRoot();
 
 // packages/local-setup/src/index.ts
 import { realpath, unlink as unlink2 } from "node:fs/promises";
-import { basename as basename2, dirname as dirname4, join as join4 } from "node:path";
+import { basename as basename2, dirname as dirname4, join as join5 } from "node:path";
 
 // packages/local-setup/src/contracts.ts
 var actionRequired = (state) => ({
@@ -6652,6 +6652,92 @@ $result = [UIntPtr]::Zero
   );
 }
 
+// packages/local-setup/src/automaticUpdate.ts
+import { spawn as nodeSpawn } from "node:child_process";
+import { stat as nodeStat, utimes } from "node:fs/promises";
+import { homedir as homedir2 } from "node:os";
+import { join as join4 } from "node:path";
+var DAY_MS = 864e5;
+var statePath = (stateDir) => join4(stateDir, "automatic-update.json");
+function cliLauncherPath(options = {}) {
+  const platform = options.platform ?? process.platform;
+  const home = options.home ?? homedir2();
+  return platform === "win32" ? join4(
+    options.env?.LOCALAPPDATA || join4(home, "AppData", "Local"),
+    "Mnemonik",
+    "bin",
+    "mnemonik.cmd"
+  ) : join4(home, ".local", "bin", "mnemonik");
+}
+async function readState(path) {
+  const bytes = await readBytes(path);
+  if (!bytes) return {};
+  const value = JSON.parse(bytes.toString());
+  if (!value || typeof value !== "object" || value.lastAttempt !== void 0 && (!Number.isFinite(value.lastAttempt) || value.lastAttempt < 0))
+    throw new Error("automatic_update_state_invalid");
+  return value.lastAttempt === void 0 ? {} : { lastAttempt: value.lastAttempt };
+}
+async function maybeStartAutomaticUpdate(options = {}) {
+  const stateDir = options.stateDir ?? stateDirectory(options.platform, options.env, options.home);
+  const path = statePath(stateDir);
+  try {
+    const now = (options.now ?? Date.now)();
+    const stat = options.stat ?? nodeStat;
+    try {
+      if (now - (await stat(path)).mtimeMs < DAY_MS) return false;
+    } catch (error) {
+      if (error.code !== "ENOENT") throw error;
+    }
+    if (!options.spawn && !(await stat(cliLauncherPath(options))).isFile()) return false;
+    return await withLock(path, 0, async (assertOwned) => {
+      const state = await readState(path);
+      if (state.lastAttempt !== void 0 && now - state.lastAttempt < DAY_MS) return false;
+      await atomicWrite(
+        path,
+        Buffer.from(`${JSON.stringify({ lastAttempt: now })}
+`),
+        void 0,
+        assertOwned
+      );
+      await utimes(path, now / 1e3, now / 1e3);
+      const platform = options.platform ?? process.platform;
+      const launcher = cliLauncherPath(options);
+      const command = platform === "win32" ? {
+        file: options.env?.ComSpec || "cmd.exe",
+        args: ["/d", "/s", "/c", `""${launcher}" update --automatic"`],
+        windowsVerbatimArguments: true
+      } : { file: launcher, args: ["update", "--automatic"] };
+      const child = (options.spawn ?? nodeSpawn)(command.file, command.args, {
+        detached: true,
+        stdio: "ignore",
+        windowsHide: true,
+        ..."windowsVerbatimArguments" in command ? { windowsVerbatimArguments: command.windowsVerbatimArguments } : {}
+      });
+      child.once("error", () => {
+      });
+      child.unref();
+      return true;
+    });
+  } catch {
+    return false;
+  }
+}
+async function startAutomaticUpdateForSession(start2 = maybeStartAutomaticUpdate, timeoutMs = 50) {
+  let timer;
+  try {
+    await Promise.race([
+      Promise.resolve().then(start2).catch(() => {
+      }),
+      new Promise((resolve2) => {
+        timer = setTimeout(resolve2, timeoutMs);
+      })
+    ]);
+  } catch {
+  } finally {
+    if (timer) clearTimeout(timer);
+  }
+}
+
 // packages/local-setup/src/index.ts
 var MAX_ORIGINAL_BYTES = 64 * 1024;
 var validDisplayName = (value) => typeof value === "string" && value.length <= 200 && !/[\p{C}\p{Zl}\p{Zp}@]/u.test(value);
@@ -6708,11 +6794,26 @@ function createProjectSetupExecutor(deps) {
       if (fresh.kind !== "ok" && fresh.kind !== "absent") return actionRequired(fresh.kind);
       if (await realpath(fresh.root) !== root) return actionRequired("identity_changed");
       resolution = fresh;
-      const file = join4(root, ".mnemonik.json");
+      const file = join5(root, ".mnemonik.json");
       const bytes = await readBytes(file);
       const diskHash = digest(bytes);
       const saved = await readBytes(path);
+      const freshRecord = () => ({
+        schemaVersion: 1,
+        operationId: randomUUID2(),
+        root,
+        scopeKey: hash2(deps.scopeKey),
+        owner: options.owner,
+        ...resolution.kind !== "git_unavailable" && resolution.repository.kind === "plain" && options.nonGitSelected ? { nonGitSelected: true } : {},
+        ...options.intent ? { intent: options.intent } : {},
+        before: {
+          base64: bytes && bytes.length <= MAX_ORIGINAL_BYTES ? bytes.toString("base64") : null,
+          hash: diskHash
+        },
+        steps: { remote: step(diskHash), identity: step(diskHash), rollback: step(diskHash) }
+      });
       let record;
+      let recordIsNew = !saved;
       if (saved) {
         try {
           record = JSON.parse(saved.toString());
@@ -6724,33 +6825,26 @@ function createProjectSetupExecutor(deps) {
         if (record.before.base64 !== null && record.before.hash !== hash2(Buffer.from(record.before.base64, "base64")) || record.before.base64 !== null && Buffer.from(record.before.base64, "base64").length > MAX_ORIGINAL_BYTES || record.staged && hash2(record.staged.content) !== record.staged.hash || record.remote && hash2(JSON.stringify(record.remote)) !== record.steps.remote.afterHash)
           return actionRequired("record_invalid");
         if (record.scopeKey !== hash2(deps.scopeKey) || options.owner !== void 0 && JSON.stringify(record.owner) !== JSON.stringify(options.owner) || JSON.stringify(record.intent) !== JSON.stringify(options.intent)) {
-          if (record.ignored) {
-            delete record.ignored;
-            await atomicWrite(
-              path,
-              Buffer.from(JSON.stringify(record, null, 2) + "\n"),
-              void 0,
-              assertOwned
-            );
+          const replaceable = !record.remote && !record.staged && !record.steps.remote.started && !record.steps.identity.started && !record.steps.rollback.started && diskHash === record.before.hash;
+          if (replaceable) {
+            record = freshRecord();
+            recordIsNew = true;
+          } else {
+            if (record.ignored) {
+              delete record.ignored;
+              await atomicWrite(
+                path,
+                Buffer.from(JSON.stringify(record, null, 2) + "\n"),
+                void 0,
+                assertOwned
+              );
+            }
+            return actionRequired("operation_context_changed");
           }
-          return actionRequired("operation_context_changed");
         }
       } else {
         if (mode === "apply" || mode === "rollback") return actionRequired("record_missing");
-        record = {
-          schemaVersion: 1,
-          operationId: randomUUID2(),
-          root,
-          scopeKey: hash2(deps.scopeKey),
-          owner: options.owner,
-          ...resolution.repository.kind === "plain" && options.nonGitSelected ? { nonGitSelected: true } : {},
-          ...options.intent ? { intent: options.intent } : {},
-          before: {
-            base64: bytes && bytes.length <= MAX_ORIGINAL_BYTES ? bytes.toString("base64") : null,
-            hash: diskHash
-          },
-          steps: { remote: step(diskHash), identity: step(diskHash), rollback: step(diskHash) }
-        };
+        record = freshRecord();
       }
       if (resolution.repository.kind === "plain" && record.nonGitSelected !== true) {
         return nonGitSelectionRequired();
@@ -6797,7 +6891,7 @@ function createProjectSetupExecutor(deps) {
         return response;
       };
       if (bytes && bytes.length > MAX_ORIGINAL_BYTES || record.before.base64 === null && record.before.hash !== null) {
-        if (!saved) await save();
+        if (recordIsNew) await save();
         return actionRequired("identity_too_large");
       }
       if (record.ignored && record.ignored.identityHash !== diskHash) {
@@ -6849,7 +6943,7 @@ function createProjectSetupExecutor(deps) {
       }
       if (!resumingWithoutIdentity && record.steps.identity.complete && diskHash !== record.staged?.hash)
         return actionRequired("identity_changed");
-      if (!saved) await save();
+      if (recordIsNew) await save();
       if (record.evidence && JSON.stringify(record.evidence) !== JSON.stringify(evidence))
         return actionRequired("operation_context_changed");
       if (record.steps.identity.complete && mode === "ensure" && record.remote) {
@@ -6957,11 +7051,14 @@ export {
   actionRequired,
   appendWindowsPath,
   atomicWrite,
+  cliLauncherPath,
   createProjectSetupExecutor,
+  maybeStartAutomaticUpdate,
   protectStateFile,
   readWindowsUserPath,
   recordPath,
   removeWindowsPathEntry,
+  startAutomaticUpdateForSession,
   stateDirectory,
   windowsCurrentAccount,
   windowsCurrentUserAcl,

package/dist/vendor/shared/runtimeSigners.js

@@ -21,11 +21,9 @@ function decodeBase64(text, length) {
         throw new Error('unsigned');
     return bytes;
 }
-async function verifyMinisign(path, signaturePath, identity) {
-    const [message, signatureText] = await Promise.all([
-        readFile(path),
-        readFile(signaturePath, 'utf8'),
-    ]);
+/** Pinned release identity; a downloaded manifest can never replace its own trust anchor. */
+export const RELEASE_MINISIGN_PUBLIC_KEY = 'RWSBYwgbjz0qKB4/ToA3dywBiAlQeBjoQpib4OHdjP2nDbpQnOVqpPm0';
+export function verifyMinisign(message, signatureText, identity = RELEASE_MINISIGN_PUBLIC_KEY) {
     const publicPacket = decodeBase64(identity, 42);
     const lines = signatureText.trimEnd().split(/\r?\n/);
     const [untrustedComment, encodedSignature, trustedLine, encodedGlobalSignature] = lines;
@@ -54,6 +52,13 @@ async function verifyMinisign(path, signaturePath, identity) {
         !verifySignature(null, Buffer.concat([fileSignature, Buffer.from(trustedComment)]), publicKey, globalSignature))
         throw new Error('unsigned');
 }
+async function verifyMinisignFile(path, signaturePath, identity) {
+    const [message, signatureText] = await Promise.all([
+        readFile(path),
+        readFile(signaturePath, 'utf8'),
+    ]);
+    verifyMinisign(message, signatureText, identity);
+}
 /** Release tooling supplies the real identity and artifacts. These checks do not sign anything. */
 export async function verifySigner(path, signer, run = execute) {
     if (signer.platform === 'darwin' && /^[A-Z0-9]{10}$/.test(signer.identity)) {
@@ -81,7 +86,7 @@ export async function verifySigner(path, signer, run = execute) {
     }
     else if (signer.platform === 'linux') {
         try {
-            await verifyMinisign(path, signer.signature, signer.identity);
+            await verifyMinisignFile(path, signer.signature, signer.identity);
         }
         catch {
             throw new Error('unsigned');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mnemonik/cli",
-  "version": "7.100.0",
+  "version": "7.101.3",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/JayDeeCo-Limited/mnemonik-cli.git"
@@ -34,27 +34,27 @@
     "hosts": {
       "claude-code": {
         "package": "@mnemonik/claude-code-hooks",
-        "version": "0.9.197",
+        "version": "0.9.201",
         "closure": [
           {
             "name": "@mnemonik/claude-code-hooks",
-            "version": "0.9.197",
-            "integrity": "sha512-CKWyYJ20e6y4f/xilqtEPcWZ+EaZ9NTBBSsKz4H/mvWJMxcLWLUW6p+PfWWnyM5XB6jmnhErfxjlOLfSs4uTxg=="
+            "version": "0.9.201",
+            "integrity": "sha512-AZiSZt9UOY7epQSYYhcPkevYW/Ji+vl4KUejnVTKGj9YJFnydepSw+7w+jXrMCYrKP9WHsXqQDq47rPGB2TqGw=="
           },
           {
             "name": "@mnemonik/credentials",
-            "version": "0.1.18",
-            "integrity": "sha512-zibbf7R+ECl7I9lSICVwqgGk/43GPtaEOHDHna7+i9LEXjnvqnzCv93+l/yJvYSFtVOr3qdGZh9IroC8pEaQLQ=="
+            "version": "0.1.22",
+            "integrity": "sha512-cKMqN9U5wNAisriyf/gd5mVQ5V6tPu13qjiv3lB1PvUin31SijrwOH7LEKttK3aIVhdFh7CJ784fA0AGigHeLQ=="
           },
           {
             "name": "@mnemonik/local-setup",
-            "version": "0.1.18",
-            "integrity": "sha512-8xN9Yr/bmvcWJGqOa91cRO4Bu1D+ynaM3ep0foRndcnT9hIDiFVr5gedGAZ2yMIgFowaFY2hebB4hBjpeKqsug=="
+            "version": "0.1.22",
+            "integrity": "sha512-IyCFDUuE9+6y7uJKJRVDPgBbqp79givfeSsDUXi61JCI30dID72MT4BC0pQqRy1gWWafPcPohB/iVD4FzWAYcw=="
           },
           {
             "name": "@mnemonik/shared",
-            "version": "7.100.0",
-            "integrity": "sha512-cdBoMnpxl+jqI93/gz7gTpLJliJj92mtRBh7VvedaG7z13Im9aI9cfgsg2ZO8hfry5t0+q8satuToWQQkPIdQA=="
+            "version": "7.101.3",
+            "integrity": "sha512-VFILvz9A6eDRrmKFIDq1wRH2+0mzVAVZSFZFyTDpg2BzqigzD3MpdUr/oOpf5HncrSQF5cUuWHAr9F8adxUKdQ=="
           },
           {
             "name": "ignore",
@@ -86,31 +86,32 @@
             "version": "3.0.7",
             "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="
           }
-        ]
+        ],
+        "releaseVersion": "7.101.3"
       },
       "codex": {
         "package": "@mnemonik/codex-hooks",
-        "version": "0.8.166",
+        "version": "0.8.170",
         "closure": [
           {
             "name": "@mnemonik/codex-hooks",
-            "version": "0.8.166",
-            "integrity": "sha512-Ptjf8n8f0OUM296WMWQtBUKmylsJy574fQCB3BhD2NauBM5m3SkQb51O5eSORL4sSY558nxY6gaqWZgDySpFrA=="
+            "version": "0.8.170",
+            "integrity": "sha512-LL8FFUaG8awYe0UHnFWCDF6YoFwlyKVQ7JdVI3XC2CIdb1vyP/nudi7eiusk1iGB3Vr7T7DnN/AoJ28hYO2jyw=="
           },
           {
             "name": "@mnemonik/credentials",
-            "version": "0.1.18",
-            "integrity": "sha512-zibbf7R+ECl7I9lSICVwqgGk/43GPtaEOHDHna7+i9LEXjnvqnzCv93+l/yJvYSFtVOr3qdGZh9IroC8pEaQLQ=="
+            "version": "0.1.22",
+            "integrity": "sha512-cKMqN9U5wNAisriyf/gd5mVQ5V6tPu13qjiv3lB1PvUin31SijrwOH7LEKttK3aIVhdFh7CJ784fA0AGigHeLQ=="
           },
           {
             "name": "@mnemonik/local-setup",
-            "version": "0.1.18",
-            "integrity": "sha512-8xN9Yr/bmvcWJGqOa91cRO4Bu1D+ynaM3ep0foRndcnT9hIDiFVr5gedGAZ2yMIgFowaFY2hebB4hBjpeKqsug=="
+            "version": "0.1.22",
+            "integrity": "sha512-IyCFDUuE9+6y7uJKJRVDPgBbqp79givfeSsDUXi61JCI30dID72MT4BC0pQqRy1gWWafPcPohB/iVD4FzWAYcw=="
           },
           {
             "name": "@mnemonik/shared",
-            "version": "7.100.0",
-            "integrity": "sha512-cdBoMnpxl+jqI93/gz7gTpLJliJj92mtRBh7VvedaG7z13Im9aI9cfgsg2ZO8hfry5t0+q8satuToWQQkPIdQA=="
+            "version": "7.101.3",
+            "integrity": "sha512-VFILvz9A6eDRrmKFIDq1wRH2+0mzVAVZSFZFyTDpg2BzqigzD3MpdUr/oOpf5HncrSQF5cUuWHAr9F8adxUKdQ=="
           },
           {
             "name": "ignore",
@@ -142,31 +143,32 @@
             "version": "3.0.7",
             "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="
           }
-        ]
+        ],
+        "releaseVersion": "7.101.3"
       },
       "cursor": {
         "package": "@mnemonik/cursor-hooks",
-        "version": "0.7.153",
+        "version": "0.7.157",
         "closure": [
           {
             "name": "@mnemonik/cursor-hooks",
-            "version": "0.7.153",
-            "integrity": "sha512-h3SlYqpinGcpwHKthzOZQJjB5dR4aNx8zijBfM9Hm1orXzIr6Ek8EAAtWWVh4lrAERPBx6PR5EWVZNPfk5d6lA=="
+            "version": "0.7.157",
+            "integrity": "sha512-WkTrJfh4bEhpxRRz4EUfO2VVWAOJuDpVcYTLSzYF1Ch0a2fQ1x7AVu6rmcALKeDxC+2ixmCxCMyDDk98Pt6VgQ=="
           },
           {
             "name": "@mnemonik/credentials",
-            "version": "0.1.18",
-            "integrity": "sha512-zibbf7R+ECl7I9lSICVwqgGk/43GPtaEOHDHna7+i9LEXjnvqnzCv93+l/yJvYSFtVOr3qdGZh9IroC8pEaQLQ=="
+            "version": "0.1.22",
+            "integrity": "sha512-cKMqN9U5wNAisriyf/gd5mVQ5V6tPu13qjiv3lB1PvUin31SijrwOH7LEKttK3aIVhdFh7CJ784fA0AGigHeLQ=="
           },
           {
             "name": "@mnemonik/local-setup",
-            "version": "0.1.18",
-            "integrity": "sha512-8xN9Yr/bmvcWJGqOa91cRO4Bu1D+ynaM3ep0foRndcnT9hIDiFVr5gedGAZ2yMIgFowaFY2hebB4hBjpeKqsug=="
+            "version": "0.1.22",
+            "integrity": "sha512-IyCFDUuE9+6y7uJKJRVDPgBbqp79givfeSsDUXi61JCI30dID72MT4BC0pQqRy1gWWafPcPohB/iVD4FzWAYcw=="
           },
           {
             "name": "@mnemonik/shared",
-            "version": "7.100.0",
-            "integrity": "sha512-cdBoMnpxl+jqI93/gz7gTpLJliJj92mtRBh7VvedaG7z13Im9aI9cfgsg2ZO8hfry5t0+q8satuToWQQkPIdQA=="
+            "version": "7.101.3",
+            "integrity": "sha512-VFILvz9A6eDRrmKFIDq1wRH2+0mzVAVZSFZFyTDpg2BzqigzD3MpdUr/oOpf5HncrSQF5cUuWHAr9F8adxUKdQ=="
           },
           {
             "name": "ignore",
@@ -198,31 +200,32 @@
             "version": "3.0.7",
             "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="
           }
-        ]
+        ],
+        "releaseVersion": "7.101.3"
       },
       "grok": {
         "package": "@mnemonik/grok-hooks",
-        "version": "0.1.39",
+        "version": "0.1.43",
         "closure": [
           {
             "name": "@mnemonik/grok-hooks",
-            "version": "0.1.39",
-            "integrity": "sha512-MhFW7de0sdHGlY8sLThVTVXcyNo1+vYFMCFhYVCNxnLscHRTCU6PAgPGkqz9ME1jp2cMXydAOMEhvTP6VtPfww=="
+            "version": "0.1.43",
+            "integrity": "sha512-A7WiXDMIIwwA9tABr/J/9x0fWTrCgOXAP7Iy7jAWv6zNDAjnQM89g9jBMbzibqrYvw9+JEG38DGFk3Ax4PlN/w=="
           },
           {
             "name": "@mnemonik/credentials",
-            "version": "0.1.18",
-            "integrity": "sha512-zibbf7R+ECl7I9lSICVwqgGk/43GPtaEOHDHna7+i9LEXjnvqnzCv93+l/yJvYSFtVOr3qdGZh9IroC8pEaQLQ=="
+            "version": "0.1.22",
+            "integrity": "sha512-cKMqN9U5wNAisriyf/gd5mVQ5V6tPu13qjiv3lB1PvUin31SijrwOH7LEKttK3aIVhdFh7CJ784fA0AGigHeLQ=="
           },
           {
             "name": "@mnemonik/local-setup",
-            "version": "0.1.18",
-            "integrity": "sha512-8xN9Yr/bmvcWJGqOa91cRO4Bu1D+ynaM3ep0foRndcnT9hIDiFVr5gedGAZ2yMIgFowaFY2hebB4hBjpeKqsug=="
+            "version": "0.1.22",
+            "integrity": "sha512-IyCFDUuE9+6y7uJKJRVDPgBbqp79givfeSsDUXi61JCI30dID72MT4BC0pQqRy1gWWafPcPohB/iVD4FzWAYcw=="
           },
           {
             "name": "@mnemonik/shared",
-            "version": "7.100.0",
-            "integrity": "sha512-cdBoMnpxl+jqI93/gz7gTpLJliJj92mtRBh7VvedaG7z13Im9aI9cfgsg2ZO8hfry5t0+q8satuToWQQkPIdQA=="
+            "version": "7.101.3",
+            "integrity": "sha512-VFILvz9A6eDRrmKFIDq1wRH2+0mzVAVZSFZFyTDpg2BzqigzD3MpdUr/oOpf5HncrSQF5cUuWHAr9F8adxUKdQ=="
           },
           {
             "name": "ignore",
@@ -254,7 +257,8 @@
             "version": "3.0.7",
             "integrity": "sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ=="
           }
-        ]
+        ],
+        "releaseVersion": "7.101.3"
       }
     }
   }