@mnemonik/cli 7.140.1 → 7.140.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (73) hide show
  1. package/dist/auth/credentials.js +41 -8
  2. package/dist/auth/index.js +41 -8
  3. package/dist/auth/installSession.js +1 -1
  4. package/dist/auth/status.js +1 -1
  5. package/dist/authorizationWords.js +1 -1
  6. package/dist/diagnostics.js +41 -8
  7. package/dist/digests.json +71 -67
  8. package/dist/help.d.ts.map +1 -1
  9. package/dist/help.js +50 -4
  10. package/dist/help.js.map +1 -1
  11. package/dist/hooksLog.d.ts +61 -0
  12. package/dist/hooksLog.d.ts.map +1 -0
  13. package/dist/hooksLog.js +350 -0
  14. package/dist/hooksLog.js.map +1 -0
  15. package/dist/humanReason.d.ts +7 -0
  16. package/dist/humanReason.d.ts.map +1 -1
  17. package/dist/humanReason.js +12 -4
  18. package/dist/humanReason.js.map +1 -1
  19. package/dist/identity/migrate.js +102 -69
  20. package/dist/install/hosts.js +1 -1
  21. package/dist/install/journal.js +41 -8
  22. package/dist/install/journey.d.ts.map +1 -1
  23. package/dist/install/journey.js +41 -11
  24. package/dist/install/journey.js.map +1 -1
  25. package/dist/install/ownership.js +41 -8
  26. package/dist/install/transaction.d.ts.map +1 -1
  27. package/dist/install/transaction.js +42 -10
  28. package/dist/install/transaction.js.map +1 -1
  29. package/dist/install/ui.js +41 -8
  30. package/dist/installSession.js +1 -1
  31. package/dist/installation.js +41 -8
  32. package/dist/launcher.js +41 -8
  33. package/dist/preflight.js +201 -164
  34. package/dist/project/eligibility.js +41 -8
  35. package/dist/project/records.js +41 -8
  36. package/dist/project.d.ts +35 -1
  37. package/dist/project.d.ts.map +1 -1
  38. package/dist/project.js +294 -231
  39. package/dist/project.js.map +1 -1
  40. package/dist/router.d.ts +7 -0
  41. package/dist/router.d.ts.map +1 -1
  42. package/dist/router.js +340 -182
  43. package/dist/router.js.map +1 -1
  44. package/dist/runtime/bootstrap.d.ts +22 -1
  45. package/dist/runtime/bootstrap.d.ts.map +1 -1
  46. package/dist/runtime/bootstrap.js +61 -8
  47. package/dist/runtime/bootstrap.js.map +1 -1
  48. package/dist/runtime/releaseSource.js +41 -8
  49. package/dist/runtime/selfUpdate.js +41 -8
  50. package/dist/runtime/signers.js +789 -183
  51. package/dist/runtime/store.d.ts +1 -1
  52. package/dist/runtime/store.d.ts.map +1 -1
  53. package/dist/runtime/store.js +54 -5
  54. package/dist/runtime/store.js.map +1 -1
  55. package/dist/runtime/updateCheck.js +41 -8
  56. package/dist/sbom.json +21 -21
  57. package/dist/scanner/control.js +41 -8
  58. package/dist/scanner/data.js +1 -1
  59. package/dist/scanner/discover.d.ts.map +1 -1
  60. package/dist/scanner/discover.js +211 -171
  61. package/dist/scanner/discover.js.map +1 -1
  62. package/dist/scanner/enable.d.ts.map +1 -1
  63. package/dist/scanner/enable.js +440 -57
  64. package/dist/scanner/enable.js.map +1 -1
  65. package/dist/scanner/picker.d.ts.map +1 -1
  66. package/dist/scanner/picker.js +12 -4
  67. package/dist/scanner/picker.js.map +1 -1
  68. package/dist/scanner/service.js +41 -8
  69. package/dist/scanner/update.js +41 -8
  70. package/dist/scanner-release.json +24 -24
  71. package/dist/status.js +41 -8
  72. package/dist/vendor/local-setup.js +44 -11
  73. package/package.json +31 -31
@@ -885,6 +885,27 @@ var require_ignore = __commonJS({
885
885
  }
886
886
  });
887
887
 
888
+ // packages/shared/dist/secretPatterns.js
889
+ var init_secretPatterns = __esm({
890
+ "packages/shared/dist/secretPatterns.js"() {
891
+ "use strict";
892
+ }
893
+ });
894
+
895
+ // packages/shared/dist/protectedPaths.js
896
+ var init_protectedPaths = __esm({
897
+ "packages/shared/dist/protectedPaths.js"() {
898
+ "use strict";
899
+ }
900
+ });
901
+
902
+ // packages/shared/dist/projectIdentityFile.js
903
+ var init_projectIdentityFile = __esm({
904
+ "packages/shared/dist/projectIdentityFile.js"() {
905
+ "use strict";
906
+ }
907
+ });
908
+
888
909
  // packages/shared/dist/hookTimeouts.js
889
910
  var init_hookTimeouts = __esm({
890
911
  "packages/shared/dist/hookTimeouts.js"() {
@@ -1111,13 +1132,6 @@ var init_repositoryFingerprint = __esm({
1111
1132
  }
1112
1133
  });
1113
1134
 
1114
- // packages/shared/dist/projectIdentityFile.js
1115
- var init_projectIdentityFile = __esm({
1116
- "packages/shared/dist/projectIdentityFile.js"() {
1117
- "use strict";
1118
- }
1119
- });
1120
-
1121
1135
  // packages/shared/dist/repositoryRoot.js
1122
1136
  var init_repositoryRoot = __esm({
1123
1137
  "packages/shared/dist/repositoryRoot.js"() {
@@ -1126,6 +1140,18 @@ var init_repositoryRoot = __esm({
1126
1140
  }
1127
1141
  });
1128
1142
 
1143
+ // packages/shared/dist/hookTrace.js
1144
+ var HOOK_TRACE_MAX_BYTES;
1145
+ var init_hookTrace = __esm({
1146
+ "packages/shared/dist/hookTrace.js"() {
1147
+ "use strict";
1148
+ init_protectedPaths();
1149
+ init_runtimeSigners();
1150
+ init_secretPatterns();
1151
+ HOOK_TRACE_MAX_BYTES = 2 * 1024 * 1024;
1152
+ }
1153
+ });
1154
+
1129
1155
  // packages/shared/dist/runtimeReader.js
1130
1156
  var RuntimeError;
1131
1157
  var init_runtimeReader = __esm({
@@ -1197,10 +1223,12 @@ var init_hookRuntime = __esm({
1197
1223
  init_runtimeSigners();
1198
1224
  init_hookTimeouts();
1199
1225
  init_repositoryRoot();
1226
+ init_hookTrace();
1200
1227
  init_runtimeReader();
1201
1228
  init_runtimeSigners();
1202
1229
  init_projectSetupHandoff();
1203
1230
  init_hookConversation();
1231
+ init_hookTrace();
1204
1232
  }
1205
1233
  });
1206
1234
 
@@ -2787,7 +2815,7 @@ import { realpath } from "node:fs/promises";
2787
2815
  import { basename as basename3, dirname as dirname5, join as join6 } from "node:path";
2788
2816
 
2789
2817
  // packages/shared/dist/instructions.js
2790
- var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({ cwd }) loads project context when cwd is the real absolute path of the project root; a placeholder or relative path fails. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
2818
+ var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({}) loads project context; installed hooks supply the project. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
2791
2819
 
2792
2820
  What I learn about you belongs in Companion; what I learn about this project belongs here.
2793
2821
 
@@ -2824,6 +2852,9 @@ var MCP_INSTRUCTIONS = getMcpInstructions();
2824
2852
 
2825
2853
  // packages/shared/dist/codeScanner.js
2826
2854
  var import_ignore = __toESM(require_ignore(), 1);
2855
+ init_secretPatterns();
2856
+ init_protectedPaths();
2857
+ init_projectIdentityFile();
2827
2858
 
2828
2859
  // node_modules/web-tree-sitter/web-tree-sitter.js
2829
2860
  var __defProp2 = Object.defineProperty;
@@ -7049,6 +7080,7 @@ var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
7049
7080
  var import_ignore2 = __toESM(require_ignore(), 1);
7050
7081
 
7051
7082
  // packages/shared/dist/index.js
7083
+ init_secretPatterns();
7052
7084
  init_hookTimeouts();
7053
7085
 
7054
7086
  // packages/shared/dist/jitDeliveryAck.js
@@ -7064,6 +7096,7 @@ init_settingsIo();
7064
7096
  init_repositoryFingerprint();
7065
7097
  init_projectIdentityFile();
7066
7098
  init_repositoryRoot();
7099
+ init_protectedPaths();
7067
7100
 
7068
7101
  // packages/local-setup/dist/storage.js
7069
7102
  init_hookRuntime();
@@ -885,6 +885,27 @@ var require_ignore = __commonJS({
885
885
  }
886
886
  });
887
887
 
888
+ // packages/shared/dist/secretPatterns.js
889
+ var init_secretPatterns = __esm({
890
+ "packages/shared/dist/secretPatterns.js"() {
891
+ "use strict";
892
+ }
893
+ });
894
+
895
+ // packages/shared/dist/protectedPaths.js
896
+ var init_protectedPaths = __esm({
897
+ "packages/shared/dist/protectedPaths.js"() {
898
+ "use strict";
899
+ }
900
+ });
901
+
902
+ // packages/shared/dist/projectIdentityFile.js
903
+ var init_projectIdentityFile = __esm({
904
+ "packages/shared/dist/projectIdentityFile.js"() {
905
+ "use strict";
906
+ }
907
+ });
908
+
888
909
  // packages/shared/dist/hookTimeouts.js
889
910
  var init_hookTimeouts = __esm({
890
911
  "packages/shared/dist/hookTimeouts.js"() {
@@ -982,13 +1003,6 @@ var init_repositoryFingerprint = __esm({
982
1003
  }
983
1004
  });
984
1005
 
985
- // packages/shared/dist/projectIdentityFile.js
986
- var init_projectIdentityFile = __esm({
987
- "packages/shared/dist/projectIdentityFile.js"() {
988
- "use strict";
989
- }
990
- });
991
-
992
1006
  // packages/shared/dist/repositoryRoot.js
993
1007
  var init_repositoryRoot = __esm({
994
1008
  "packages/shared/dist/repositoryRoot.js"() {
@@ -997,6 +1011,18 @@ var init_repositoryRoot = __esm({
997
1011
  }
998
1012
  });
999
1013
 
1014
+ // packages/shared/dist/hookTrace.js
1015
+ var HOOK_TRACE_MAX_BYTES;
1016
+ var init_hookTrace = __esm({
1017
+ "packages/shared/dist/hookTrace.js"() {
1018
+ "use strict";
1019
+ init_protectedPaths();
1020
+ init_runtimeSigners();
1021
+ init_secretPatterns();
1022
+ HOOK_TRACE_MAX_BYTES = 2 * 1024 * 1024;
1023
+ }
1024
+ });
1025
+
1000
1026
  // packages/shared/dist/runtimeReader.js
1001
1027
  var RuntimeError;
1002
1028
  var init_runtimeReader = __esm({
@@ -1068,10 +1094,12 @@ var init_hookRuntime = __esm({
1068
1094
  init_runtimeSigners();
1069
1095
  init_hookTimeouts();
1070
1096
  init_repositoryRoot();
1097
+ init_hookTrace();
1071
1098
  init_runtimeReader();
1072
1099
  init_runtimeSigners();
1073
1100
  init_projectSetupHandoff();
1074
1101
  init_hookConversation();
1102
+ init_hookTrace();
1075
1103
  }
1076
1104
  });
1077
1105
 
@@ -2653,7 +2681,7 @@ var require_proper_lockfile = __commonJS({
2653
2681
  });
2654
2682
 
2655
2683
  // packages/shared/dist/instructions.js
2656
- var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({ cwd }) loads project context when cwd is the real absolute path of the project root; a placeholder or relative path fails. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
2684
+ var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({}) loads project context; installed hooks supply the project. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
2657
2685
 
2658
2686
  What I learn about you belongs in Companion; what I learn about this project belongs here.
2659
2687
 
@@ -2690,6 +2718,9 @@ var MCP_INSTRUCTIONS = getMcpInstructions();
2690
2718
 
2691
2719
  // packages/shared/dist/codeScanner.js
2692
2720
  var import_ignore = __toESM(require_ignore(), 1);
2721
+ init_secretPatterns();
2722
+ init_protectedPaths();
2723
+ init_projectIdentityFile();
2693
2724
 
2694
2725
  // node_modules/web-tree-sitter/web-tree-sitter.js
2695
2726
  var __defProp2 = Object.defineProperty;
@@ -6915,6 +6946,7 @@ var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
6915
6946
  var import_ignore2 = __toESM(require_ignore(), 1);
6916
6947
 
6917
6948
  // packages/shared/dist/index.js
6949
+ init_secretPatterns();
6918
6950
  init_hookTimeouts();
6919
6951
 
6920
6952
  // packages/shared/dist/jitDeliveryAck.js
@@ -6930,6 +6962,7 @@ init_settingsIo();
6930
6962
  init_repositoryFingerprint();
6931
6963
  init_projectIdentityFile();
6932
6964
  init_repositoryRoot();
6965
+ init_protectedPaths();
6933
6966
 
6934
6967
  // packages/local-setup/dist/storage.js
6935
6968
  init_hookRuntime();
@@ -872,7 +872,7 @@ var require_ignore = __commonJS({
872
872
  });
873
873
 
874
874
  // packages/shared/dist/instructions.js
875
- var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({ cwd }) loads project context when cwd is the real absolute path of the project root; a placeholder or relative path fails. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
875
+ var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({}) loads project context; installed hooks supply the project. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
876
876
 
877
877
  What I learn about you belongs in Companion; what I learn about this project belongs here.
878
878
 
@@ -872,7 +872,7 @@ var require_ignore = __commonJS({
872
872
  });
873
873
 
874
874
  // packages/shared/dist/instructions.js
875
- var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({ cwd }) loads project context when cwd is the real absolute path of the project root; a placeholder or relative path fails. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
875
+ var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({}) loads project context; installed hooks supply the project. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
876
876
 
877
877
  What I learn about you belongs in Companion; what I learn about this project belongs here.
878
878
 
@@ -872,7 +872,7 @@ var require_ignore = __commonJS({
872
872
  });
873
873
 
874
874
  // packages/shared/dist/instructions.js
875
- var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({ cwd }) loads project context when cwd is the real absolute path of the project root; a placeholder or relative path fails. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
875
+ var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({}) loads project context; installed hooks supply the project. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
876
876
 
877
877
  What I learn about you belongs in Companion; what I learn about this project belongs here.
878
878
 
@@ -885,6 +885,27 @@ var require_ignore = __commonJS({
885
885
  }
886
886
  });
887
887
 
888
+ // packages/shared/dist/secretPatterns.js
889
+ var init_secretPatterns = __esm({
890
+ "packages/shared/dist/secretPatterns.js"() {
891
+ "use strict";
892
+ }
893
+ });
894
+
895
+ // packages/shared/dist/protectedPaths.js
896
+ var init_protectedPaths = __esm({
897
+ "packages/shared/dist/protectedPaths.js"() {
898
+ "use strict";
899
+ }
900
+ });
901
+
902
+ // packages/shared/dist/projectIdentityFile.js
903
+ var init_projectIdentityFile = __esm({
904
+ "packages/shared/dist/projectIdentityFile.js"() {
905
+ "use strict";
906
+ }
907
+ });
908
+
888
909
  // packages/shared/dist/hookTimeouts.js
889
910
  var init_hookTimeouts = __esm({
890
911
  "packages/shared/dist/hookTimeouts.js"() {
@@ -1111,13 +1132,6 @@ var init_repositoryFingerprint = __esm({
1111
1132
  }
1112
1133
  });
1113
1134
 
1114
- // packages/shared/dist/projectIdentityFile.js
1115
- var init_projectIdentityFile = __esm({
1116
- "packages/shared/dist/projectIdentityFile.js"() {
1117
- "use strict";
1118
- }
1119
- });
1120
-
1121
1135
  // packages/shared/dist/repositoryRoot.js
1122
1136
  var init_repositoryRoot = __esm({
1123
1137
  "packages/shared/dist/repositoryRoot.js"() {
@@ -1126,6 +1140,18 @@ var init_repositoryRoot = __esm({
1126
1140
  }
1127
1141
  });
1128
1142
 
1143
+ // packages/shared/dist/hookTrace.js
1144
+ var HOOK_TRACE_MAX_BYTES;
1145
+ var init_hookTrace = __esm({
1146
+ "packages/shared/dist/hookTrace.js"() {
1147
+ "use strict";
1148
+ init_protectedPaths();
1149
+ init_runtimeSigners();
1150
+ init_secretPatterns();
1151
+ HOOK_TRACE_MAX_BYTES = 2 * 1024 * 1024;
1152
+ }
1153
+ });
1154
+
1129
1155
  // packages/shared/dist/runtimeReader.js
1130
1156
  var RuntimeError;
1131
1157
  var init_runtimeReader = __esm({
@@ -1197,10 +1223,12 @@ var init_hookRuntime = __esm({
1197
1223
  init_runtimeSigners();
1198
1224
  init_hookTimeouts();
1199
1225
  init_repositoryRoot();
1226
+ init_hookTrace();
1200
1227
  init_runtimeReader();
1201
1228
  init_runtimeSigners();
1202
1229
  init_projectSetupHandoff();
1203
1230
  init_hookConversation();
1231
+ init_hookTrace();
1204
1232
  }
1205
1233
  });
1206
1234
 
@@ -2793,7 +2821,7 @@ import { realpath } from "node:fs/promises";
2793
2821
  import { basename as basename3, dirname as dirname5, join as join6 } from "node:path";
2794
2822
 
2795
2823
  // packages/shared/dist/instructions.js
2796
- var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({ cwd }) loads project context when cwd is the real absolute path of the project root; a placeholder or relative path fails. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
2824
+ var INSTRUCTIONS_CONTENT = `Mnemonik provides persistent project memory: decisions, rationale, tasks, and policies across sessions. If no block begins "PROJECT_CONTEXT schemaVersion=", session_bootstrap({}) loads project context; installed hooks supply the project. With that block, context is loaded and no session_bootstrap call is needed. Code and docs show current artifacts, git shows changes, and memory carries the why; memory_search recalls rationale or intent, then Grep or Read verifies current source.
2797
2825
 
2798
2826
  What I learn about you belongs in Companion; what I learn about this project belongs here.
2799
2827
 
@@ -2830,6 +2858,9 @@ var MCP_INSTRUCTIONS = getMcpInstructions();
2830
2858
 
2831
2859
  // packages/shared/dist/codeScanner.js
2832
2860
  var import_ignore = __toESM(require_ignore(), 1);
2861
+ init_secretPatterns();
2862
+ init_protectedPaths();
2863
+ init_projectIdentityFile();
2833
2864
 
2834
2865
  // node_modules/web-tree-sitter/web-tree-sitter.js
2835
2866
  var __defProp2 = Object.defineProperty;
@@ -7055,6 +7086,7 @@ var BUILT_IN_IGNORE_DIR_SET = new Set(BUILT_IN_IGNORE_DIRS);
7055
7086
  var import_ignore2 = __toESM(require_ignore(), 1);
7056
7087
 
7057
7088
  // packages/shared/dist/index.js
7089
+ init_secretPatterns();
7058
7090
  init_hookTimeouts();
7059
7091
 
7060
7092
  // packages/shared/dist/jitDeliveryAck.js
@@ -7070,6 +7102,7 @@ init_settingsIo();
7070
7102
  init_repositoryFingerprint();
7071
7103
  init_projectIdentityFile();
7072
7104
  init_repositoryRoot();
7105
+ init_protectedPaths();
7073
7106
 
7074
7107
  // packages/local-setup/dist/storage.js
7075
7108
  init_hookRuntime();