@mrciphersmith/keryx 0.3.26 → 0.3.27

package/dist/cli.js

@@ -12991,7 +12991,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@mrciphersmith/keryx",
-    version: "0.3.26",
+    version: "0.3.27",
     description: "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
     private: false,
     publishConfig: {
@@ -71063,7 +71063,7 @@ ${shown.join(`
         result = precomputedResult;
       } else {
         try {
-          result = await executeCall(call, toolByName, io.requestApproval, io.permissionMode, io.readOnly, io.onAutoApproved, hasInvocationCapacity, reserveInvocation, invocationBudget.maxCalls, signal, deps.busLeases, deps.hardDeny === undefined ? undefined : { check: deps.hardDeny, onDenied: io.onUnattendedDenial }, deps.hooks, untrustedOrigin);
+          result = await executeCall(call, toolByName, io.requestApproval, io.permissionMode, io.readOnly, io.onAutoApproved, hasInvocationCapacity, reserveInvocation, invocationBudget.maxCalls, signal, deps.busLeases, deps.hardDeny === undefined ? undefined : { check: deps.hardDeny, onDenied: io.onUnattendedDenial }, deps.hooks, untrustedOrigin, io.trustedMcpTools, io.mcpToolFingerprint);
         } catch (err) {
           const message = err instanceof Error ? err.message : String(err);
           result = { output: `${call.name} failed: ${message}`, isError: true };
@@ -71633,7 +71633,7 @@ function composeWithHook(toolName, rawDecision, hookResult, interactive) {
   }
   return { decision, hookTightened: true, hookAsked, ...denyMessage !== undefined ? { denyMessage } : {} };
 }
-async function executeCall(call, toolByName, requestApproval, permissionMode, readOnly, onAutoApproved, hasInvocationCapacity, reserveInvocation, maxToolCalls, signal, busLeases, hardDeny, hooks, untrustedOrigin = false) {
+async function executeCall(call, toolByName, requestApproval, permissionMode, readOnly, onAutoApproved, hasInvocationCapacity, reserveInvocation, maxToolCalls, signal, busLeases, hardDeny, hooks, untrustedOrigin = false, trustedMcpTools, mcpToolFingerprint) {
   const tool = toolByName.get(call.name);
   if (tool === undefined) {
     return { output: `unknown tool: ${call.name}`, isError: true };
@@ -71694,13 +71694,20 @@ async function executeCall(call, toolByName, requestApproval, permissionMode, re
       publishLease
     });
     const gated = composeWithHook(call.name, rawDecision, hookResult, hookInteractive);
+    const mcpFqn = call.name === "use_tool" && typeof input.tool_name === "string" ? input.tool_name : undefined;
+    const currentMcpFingerprint = mcpFqn !== undefined ? mcpToolFingerprint?.(mcpFqn) : undefined;
+    if (mcpFqn !== undefined && trustedMcpTools?.has(mcpFqn) === true && trustedMcpTools.get(mcpFqn) !== currentMcpFingerprint) {
+      trustedMcpTools.delete(mcpFqn);
+    }
+    const trustedMcp = mode === "trust" && mcpFqn !== undefined && trustedMcpTools?.has(mcpFqn) === true;
+    const mcpTrustEligible = mcpFqn !== undefined && mode === "trust" && !gated.hookAsked && currentMcpFingerprint !== undefined;
     if (gated.decision === "deny") {
       return {
         output: gated.hookTightened ? gated.denyMessage : `tool "${call.name}" is not permitted while read-only mode (/plan) is on`,
         isError: true
       };
     }
-    if (gated.decision === "auto" && !untrustedOrigin) {
+    if (gated.decision === "auto" && !untrustedOrigin || trustedMcp && !untrustedOrigin && !gated.hookAsked && !isReadOnly) {
       onAutoApproved?.(call.name, call.input, { destructive, credentials });
     } else {
       const fingerprint = toolCallHash(call.name, call.input);
@@ -71711,11 +71718,15 @@ async function executeCall(call, toolByName, requestApproval, permissionMode, re
         ...publishLease ? { publishLease } : {},
         ...publishLease && publishLeaseHolder !== undefined ? { publishLeaseDetail: `held by @${publishLeaseHolder.name} \u2014 "${publishLeaseHolder.reason}"` } : {},
         ...gated.hookAsked ? { hookAsk: true } : {},
-        ...untrustedOrigin ? { untrustedOrigin: true } : {}
+        ...untrustedOrigin ? { untrustedOrigin: true } : {},
+        ...mcpTrustEligible ? untrustedOrigin ? { mcpTrustWithheld: true } : { mcpTrustAvailable: true } : {}
       });
       if (!isApprovalFor(response, fingerprint)) {
         return { output: untrustedOrigin ? untrustedDenial : "command not approved by the user; not executed", isError: true };
       }
+      if (mcpFqn !== undefined && currentMcpFingerprint !== undefined && typeof response === "object" && response.trustMcpTool === true && mcpTrustEligible && !untrustedOrigin) {
+        trustedMcpTools?.set(mcpFqn, currentMcpFingerprint);
+      }
     }
   } else if (risk === "delegate") {
     const rawDecision = resolveApprovalDecision({
@@ -77704,6 +77715,26 @@ var init_workspace_lifecycle_tool = __esm(() => {
 });
 
 // src/mcp-servers/catalog.ts
+import { createHash as createHash54 } from "crypto";
+function canonicalJson3(value) {
+  if (value === undefined)
+    return "null";
+  if (value === null || typeof value !== "object")
+    return JSON.stringify(value);
+  if (Array.isArray(value))
+    return `[${value.map(canonicalJson3).join(",")}]`;
+  const record = value;
+  const keys = Object.keys(record).filter((key) => record[key] !== undefined).sort();
+  return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalJson3(record[key])}`).join(",")}}`;
+}
+function toolDefinitionFingerprint(entry) {
+  const canonical = canonicalJson3({
+    name: entry.fqn,
+    description: entry.description ?? null,
+    inputSchema: entry.inputSchema ?? null
+  });
+  return createHash54("sha256").update(canonical).digest("hex");
+}
 function buildFqn(server, rawName) {
   return `${server}${FQN_DELIMITER}${rawName}`;
 }
@@ -79640,7 +79671,7 @@ var init_shell_events = __esm(() => {
 // src/lib/shell-permissions.ts
 import { existsSync as existsSync32 } from "fs";
 import path192 from "path";
-import { createHash as createHash54 } from "crypto";
+import { createHash as createHash55 } from "crypto";
 function validateShellPattern(pattern) {
   const trimmed = pattern.trim();
   if (trimmed.length === 0) {
@@ -79847,7 +79878,7 @@ function shellPermissionsFingerprint(dir) {
     if (!read.ok) {
       return "";
     }
-    return createHash54("sha256").update(read.text, "utf8").digest("hex");
+    return createHash55("sha256").update(read.text, "utf8").digest("hex");
   } catch {
     return "";
   }
@@ -80716,11 +80747,23 @@ function renderUseToolApprovalLines(description, meta) {
   if (meta?.destructive === true) {
     lines.push("  this tool is treated as destructive \u2014 it is a third party's code");
   }
-  if (meta?.untrustedOrigin === true) {
-    lines.push("  \u26A0 follows untrusted external content \u2014 that content cannot authorize this call");
+  for (const notice of untrustedOriginNotices(meta)) {
+    lines.push(`  ${notice}`);
   }
   return lines;
 }
+function untrustedOriginNotices(meta) {
+  if (meta?.untrustedOrigin !== true)
+    return [];
+  const notices = ["\u26A0 follows untrusted external content \u2014 that content cannot authorize this call"];
+  if (meta.mcpTrustWithheld === true) {
+    notices.push("trust for this session is not offered: this turn contains external content");
+  }
+  return notices;
+}
+function mcpTrustOffered(meta, resolvable) {
+  return meta?.mcpTrustAvailable === true && meta.untrustedOrigin !== true && meta.fingerprint !== undefined && resolvable;
+}
 function summariseUseToolApproval(description) {
   return `${description.tool} on ${description.server}`;
 }
@@ -80733,6 +80776,7 @@ function isApprovalYes(answer) {
 async function promptUseToolApproval(io, input, meta, resolve, style, gutter = "") {
   const paint = style ?? { yellow: (t) => t, dim: (t) => t, green: (t) => t, red: (t) => t };
   const described = describeUseToolApproval(input, resolve);
+  const canTrust = mcpTrustOffered(meta, resolve?.(described.fqn) !== undefined);
   const lines = renderUseToolApprovalLines(described, meta);
   io.out(`
 `);
@@ -80741,19 +80785,29 @@ async function promptUseToolApproval(io, input, meta, resolve, style, gutter = "
 `);
   }
   io.out(`
-${gutter}${paint.dim("[y/N] ")}`);
+${gutter}${paint.dim(canTrust ? "[y/N/T=trust this tool for session] " : "[y/N] ")}`);
   const answer = await io.readLine() ?? "";
-  const approved = isApprovalYes(answer);
-  io.out(approved ? paint.green(`approved
+  const trust = canTrust && /^t(rust)?$/i.test(answer.trim());
+  const approved = trust || isApprovalYes(answer);
+  io.out(approved ? paint.green(trust ? `approved \xB7 trusted for this session
+` : `approved
 `) : paint.red(`denied
 `));
   if (!approved)
     return false;
-  return meta?.fingerprint !== undefined ? { approved: true, fingerprint: meta.fingerprint } : true;
+  return meta?.fingerprint !== undefined ? { approved: true, fingerprint: meta.fingerprint, ...trust ? { trustMcpTool: true } : {} } : true;
 }
 function isDockApproval(id) {
   return id === APPROVAL_ALLOW_ID;
 }
+function mcpDockVerdict(id, canTrust, fingerprint) {
+  if (isDockApproval(id))
+    return true;
+  if (id === "trust-mcp" && canTrust && fingerprint !== undefined) {
+    return { approved: true, fingerprint, trustMcpTool: true };
+  }
+  return false;
+}
 function catalogResolver(catalog) {
   return (fqn) => {
     if (catalog === undefined)
@@ -80762,8 +80816,15 @@ function catalogResolver(catalog) {
     return entry === undefined ? undefined : { server: entry.server, tool: entry.rawName };
   };
 }
+function catalogFingerprintResolver(catalog) {
+  return (fqn) => {
+    const entry = catalog?.entries.find((candidate) => candidate.fqn === fqn);
+    return entry === undefined ? undefined : toolDefinitionFingerprint(entry);
+  };
+}
 var FQN_SEPARATOR = "__", MAX_ARGUMENT_CHARS = 400, MAX_ARGUMENT_KEYS = 40, MAX_IDENTIFIER_CHARS = 80, APPROVAL_ALLOW_ID = "allow";
 var init_approval_render = __esm(() => {
+  init_catalog4();
   init_config9();
   init_tools2();
 });
@@ -81793,7 +81854,7 @@ var init_child_model_request = __esm(() => {
 });
 
 // src/harness/tool/builtin/spawn-subagent-tool.ts
-import { createHash as createHash55, randomUUID as randomUUID24 } from "crypto";
+import { createHash as createHash56, randomUUID as randomUUID24 } from "crypto";
 import { execFile as execFile7 } from "child_process";
 import { lstat as lstat13, mkdtemp as mkdtemp2, readFile as readFile91, realpath as realpath14, rm as rm13 } from "fs/promises";
 import { tmpdir as tmpdir6 } from "os";
@@ -81871,7 +81932,7 @@ function readExternalRuntimeRequest(input) {
   return raw.kind === "external" ? raw : undefined;
 }
 function sha2568(text) {
-  return createHash55("sha256").update(text).digest("hex");
+  return createHash56("sha256").update(text).digest("hex");
 }
 async function resolveSubagentCwd(rawCwd, parentCwd) {
   if (rawCwd === undefined) {
@@ -87253,7 +87314,7 @@ var init_http_headers = __esm(() => {
 });
 
 // src/mcp-servers/trust.ts
-import { createHash as createHash56 } from "crypto";
+import { createHash as createHash57 } from "crypto";
 import path203 from "path";
 function trustFile(configDir) {
   return path203.join(configDir ?? ensureKeryxConfigDir(), "mcp-servers-trust.json");
@@ -87276,7 +87337,7 @@ function serverFingerprint(server) {
       }
     }
   });
-  return createHash56("sha256").update(material).digest("hex").slice(0, 32);
+  return createHash57("sha256").update(material).digest("hex").slice(0, 32);
 }
 function sortedKeys(values) {
   return Object.entries(values ?? {}).sort(([a], [b]) => a.localeCompare(b));
@@ -114162,12 +114223,12 @@ var init_config11 = __esm(() => {
 });
 
 // src/wiki/deep-enrich.ts
-import { randomUUID as randomUUID31, createHash as createHash57 } from "crypto";
+import { randomUUID as randomUUID31, createHash as createHash58 } from "crypto";
 function errorMessage2(cause) {
   return cause instanceof Error ? cause.message : String(cause);
 }
 function sha256Hex7(text) {
-  return createHash57("sha256").update(text).digest("hex");
+  return createHash58("sha256").update(text).digest("hex");
 }
 function buildDeepEnrichTools(port) {
   const deepOps = METAPROJECT_OPERATIONS.filter((op) => DEEP_ENRICH_OPS.includes(op.name));
@@ -115768,7 +115829,10 @@ function createForegroundAgentIoFacade(owner, token, io) {
       if (accepts())
         io.onAutoApproved?.(tool, input, meta);
     },
-    permissionMode: () => accepts() ? io.permissionMode?.() ?? "ask" : "ask"
+    permissionMode: () => accepts() ? io.permissionMode?.() ?? "ask" : "ask",
+    ...io.trustedMcpTools === undefined ? {} : { trustedMcpTools: io.trustedMcpTools },
+    ...io.mcpToolFingerprint === undefined ? {} : { mcpToolFingerprint: io.mcpToolFingerprint },
+    readOnly: () => !accepts() || (io.readOnly?.() ?? false)
   };
 }
 
@@ -126594,6 +126658,7 @@ async function launchTuiAgentShell(opts) {
       }
       if (isMcpToolCall(tool)) {
         const described = describeUseToolApproval(inputJson, catalogResolver(deps.mcpRuntime?.()?.catalog()));
+        const canTrustMcp = mcpTrustOffered(meta, catalogResolver(deps.mcpRuntime?.()?.catalog())(described.fqn) !== undefined);
         transcript.add(new otui.TextRenderable(r, {
           id: `ap${uid++}`,
           content: otui.t`${roleChunk(otui, "attention", `\u2699 ${described.server} wants to run ${described.tool}`)}`
@@ -126607,6 +126672,9 @@ async function launchTuiAgentShell(opts) {
             content: otui.t`${dimChunk(otui, `  \u2026 arguments truncated at ${MAX_ARGUMENT_CHARS} characters`)}`
           }));
         }
+        for (const notice of untrustedOriginNotices(meta)) {
+          transcript.add(new otui.TextRenderable(r, { id: `ap${uid++}`, content: otui.t`${dimChunk(otui, `  ${notice}`)}` }));
+        }
         chrome.hideMenu();
         setMainAgent("blocked", "approval");
         const id = await chrome.withOverlay(() => showComposerChoice(otui, r, chrome.dock, {
@@ -126617,17 +126685,19 @@ async function launchTuiAgentShell(opts) {
           signal: foregroundOperation.signal,
           options: [
             { id: APPROVAL_ALLOW_ID, label: "Approve", description: `run ${described.tool} on ${described.server}` },
+            ...canTrustMcp ? [{ id: "trust-mcp", label: "Trust this tool (this session)", description: `Skip future approvals for ${described.fqn} in trust mode` }] : [],
             { id: "deny", label: "Deny", description: "the tool call is refused", recommended: true }
           ]
         }));
         input.focus();
-        const allowed = isDockApproval(id);
+        const verdict = mcpDockVerdict(id, canTrustMcp, meta?.fingerprint);
+        const allowed = verdict !== false;
         setMainAgent("running", allowed ? "write" : "denied");
         transcript.add(new otui.TextRenderable(r, {
           id: `ap${uid++}`,
           content: allowed ? otui.t`${roleChunk(otui, "ok", `\u25C7 ${described.fqn} approved`)}` : otui.t`${roleChunk(otui, "error", `\u25C7 ${described.fqn} denied`)}`
         }));
-        return allowed;
+        return verdict;
       }
       if (tool.startsWith(MCP_ELICITATION_TOOL_PREFIX)) {
         const described = describeElicitationPrompt(tool, inputJson) ?? { message: inputJson, command: undefined };
@@ -126826,6 +126896,8 @@ async function launchTuiAgentShell(opts) {
     const sessionCwd = opts.session?.cwd ?? process.cwd();
     let permissionMode = opts.initialPermissionMode ?? getProjectPermissionMode(sessionCwd) ?? DEFAULT_PERMISSION_MODE;
     io.permissionMode = () => permissionMode;
+    io.trustedMcpTools = new Map;
+    io.mcpToolFingerprint = (fqn) => catalogFingerprintResolver(deps.mcpRuntime?.()?.catalog())(fqn);
     let readOnly = false;
     io.readOnly = () => readOnly;
     const paintModeRow = () => {
@@ -126872,6 +126944,7 @@ async function launchTuiAgentShell(opts) {
         splash?.removeIfShown();
       }
       liveSession = opened.handle;
+      io.trustedMcpTools?.clear();
       history = previewHistory === true ? opened.history.slice(-SESSION_PREVIEW_MESSAGE_COUNT) : opened.history;
       archive = opened.archive.length > 0 ? [...opened.archive] : [...opened.history];
       nextArchiveIndex = history.length;
@@ -131492,6 +131565,8 @@ ${text.trim()}`;
   const sessionsOn = sessionOpts !== undefined && sessionOpts.enabled !== false;
   let permissionMode = initialPermissionMode ?? getProjectPermissionMode(sessionCwd) ?? DEFAULT_PERMISSION_MODE;
   agentIo.permissionMode = () => permissionMode;
+  agentIo.trustedMcpTools = new Map;
+  agentIo.mcpToolFingerprint = (fqn) => catalogFingerprintResolver(deps.mcpRuntime?.()?.catalog())(fqn);
   let reasoningSessionOverride;
   let readOnly = false;
   agentIo.readOnly = () => readOnly;
@@ -131549,6 +131624,7 @@ ${text.trim()}`;
     try {
       const next = switchLeasedSession(lease, () => openLeased({ cwd: sessionCwd, provider: deps.providerId, model: deps.modelId }));
       holdLease(next.lease);
+      agentIo.trustedMcpTools?.clear();
       return next.handle;
     } catch (cause) {
       agentIo.onSystem?.(`${cause instanceof Error ? cause.message : String(cause)}
@@ -131893,6 +131969,7 @@ ${GUTTER}${turnSeparator()}
           } else {
             history = [];
             archive = [];
+            agentIo.trustedMcpTools?.clear();
             agentIo.onSystem?.(`Conversation cleared.
 `);
           }
@@ -132822,6 +132899,7 @@ Example: keryx shell --provider ollama --model llama3.1:latest`);
         }),
         idSeq: () => randomUUID34(),
         askUser: invokeAskUserHost,
+        mcpRuntime: () => mcpRuntime,
         sweepBackgroundJobs: () => jobRegistry.sweepAll(),
         ...resetSubagentBudget !== undefined ? { resetSubagentBudget } : {},
         ...Object.keys(initialModelParams).length > 0 ? { modelParams: initialModelParams } : {},
@@ -133361,7 +133439,7 @@ var init_retired_rules = __esm(() => {
 // src/gdskills/guarded-fs-ops.ts
 import { cp, lstat as lstat14, readFile as readFile129, readdir as readdir44, realpath as realpath15, unlink as unlink2 } from "fs/promises";
 import { existsSync as existsSync42 } from "fs";
-import { createHash as createHash58 } from "crypto";
+import { createHash as createHash59 } from "crypto";
 import path258 from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
 function isErrnoException(error) {
@@ -133555,7 +133633,7 @@ async function removeUnmodifiedRetiredRules(rulesTarget, fsOps = { unlink: unlin
       }
       stage = "read";
       const content = await readFile129(installedPath);
-      const hash = createHash58("sha256").update(normalizeRetiredRuleContent(content)).digest("hex");
+      const hash = createHash59("sha256").update(normalizeRetiredRuleContent(content)).digest("hex");
       if (retired.shippedSha256.includes(hash)) {
         stage = "unlink";
         await fsOps.unlink(installedPath);
@@ -144007,7 +144085,7 @@ var init_authoring_lint = __esm(() => {
 });
 
 // src/gdskills/governance/stocktake.ts
-import { createHash as createHash59 } from "crypto";
+import { createHash as createHash60 } from "crypto";
 import { existsSync as existsSync46, readdirSync as readdirSync11, readFileSync as readFileSync22, statSync as statSync16 } from "fs";
 import path279 from "path";
 function cacheKeyMatches(cached, inputs, quick) {
@@ -144015,7 +144093,7 @@ function cacheKeyMatches(cached, inputs, quick) {
 }
 function catalogFingerprint(catalog) {
   const parts = [...catalog].map((entry) => `${entry.id}:${entry.sha256}`).sort();
-  return createHash59("sha256").update(parts.join(`
+  return createHash60("sha256").update(parts.join(`
 `)).digest("hex");
 }
 function verificationReportHash(root, entry) {
@@ -144023,7 +144101,7 @@ function verificationReportHash(root, entry) {
   if (!existsSync46(reportPath))
     return null;
   try {
-    return createHash59("sha256").update(readFileSync22(reportPath, "utf8")).digest("hex");
+    return createHash60("sha256").update(readFileSync22(reportPath, "utf8")).digest("hex");
   } catch {
     return null;
   }
@@ -144045,7 +144123,7 @@ function referencesHash(entry) {
     }
   };
   walk(referencesDir, "");
-  const hash = createHash59("sha256");
+  const hash = createHash60("sha256");
   for (const rel of files) {
     hash.update(rel);
     hash.update("\x00");
@@ -145492,7 +145570,7 @@ var init_glob = __esm(() => {
 });
 
 // src/gdskills/manifest/plan.ts
-import { createHash as createHash60 } from "crypto";
+import { createHash as createHash61 } from "crypto";
 import path283 from "path";
 function destinationRootsForTarget(target) {
   if (target === "claude")
@@ -145504,7 +145582,7 @@ function destinationRootsForTarget(target) {
 }
 function stackInputsSha256(stack) {
   const { detectedAt: _detectedAt, ...rest } = stack;
-  return createHash60("sha256").update(stableStringify3(rest)).digest("hex");
+  return createHash61("sha256").update(stableStringify3(rest)).digest("hex");
 }
 function stableStringify3(value) {
   if (Array.isArray(value)) {
@@ -163952,7 +164030,7 @@ var init_detect3 = __esm(() => {
 });
 
 // src/stack/service.ts
-import { createHash as createHash61 } from "crypto";
+import { createHash as createHash62 } from "crypto";
 import { readFile as readFile162 } from "fs/promises";
 import path316 from "path";
 function stackJsonPath(root) {
@@ -163978,7 +164056,7 @@ function serializeStackDetection(doc) {
 }
 function fingerprintOf(core) {
   const canonical = JSON.stringify(canonicalize2(core));
-  return createHash61("sha256").update(canonical, "utf8").digest("hex");
+  return createHash62("sha256").update(canonical, "utf8").digest("hex");
 }
 async function readStackDetection(root) {
   try {
@@ -164252,9 +164330,9 @@ function evaluateCompletion(input, deps) {
 var SCHEMA_VERSION3 = 1;
 
 // src/harness/evidence/redaction.ts
-import { createHash as createHash62 } from "crypto";
+import { createHash as createHash63 } from "crypto";
 function hashContent(content) {
-  return createHash62("sha256").update(content, "utf8").digest("hex");
+  return createHash63("sha256").update(content, "utf8").digest("hex");
 }
 function redactForPersistence(content, deps) {
   const scan = deps.scan(content);
@@ -164304,7 +164382,7 @@ async function metaprojectBlastRadius(port, target) {
 }
 
 // src/harness/session/session.ts
-import { createHash as createHash63 } from "crypto";
+import { createHash as createHash64 } from "crypto";
 function canonicalStringify(value) {
   if (Array.isArray(value)) {
     return `[${value.map(canonicalStringify).join(",")}]`;
@@ -164317,7 +164395,7 @@ function canonicalStringify(value) {
   return JSON.stringify(value) ?? "null";
 }
 function sha2569(input) {
-  return createHash63("sha256").update(input, "utf8").digest("hex");
+  return createHash64("sha256").update(input, "utf8").digest("hex");
 }
 function deepFreeze(value) {
   if (value !== null && typeof value === "object") {
@@ -164461,7 +164539,7 @@ var init_startup = __esm(() => {
 });
 
 // src/harness/run/run.ts
-import { createHash as createHash64 } from "crypto";
+import { createHash as createHash65 } from "crypto";
 function aliasRunHookToolName(keryxToolName) {
   return RUN_HOOK_TOOL_NAME_ALIASES[keryxToolName] ?? keryxToolName;
 }
@@ -164477,7 +164555,7 @@ function canonicalize3(value) {
   return `{${keys.map((key) => `${JSON.stringify(key)}:${canonicalize3(record[key])}`).join(",")}}`;
 }
 function sha25610(input) {
-  return createHash64("sha256").update(input, "utf8").digest("hex");
+  return createHash65("sha256").update(input, "utf8").digest("hex");
 }
 function uniqueInOrder2(values) {
   const seen = new Set;
@@ -165052,7 +165130,7 @@ var init_replay = __esm(() => {
 });
 
 // src/harness/tool/registry.ts
-import { createHash as createHash65 } from "crypto";
+import { createHash as createHash66 } from "crypto";
 function canonicalize4(value) {
   if (value === null || typeof value !== "object") {
     return JSON.stringify(value) ?? "null";
@@ -165066,7 +165144,7 @@ function canonicalize4(value) {
   return `{${entries.join(",")}}`;
 }
 function sha25611(input) {
-  return createHash65("sha256").update(input, "utf8").digest("hex");
+  return createHash66("sha256").update(input, "utf8").digest("hex");
 }
 function definitionHash(definition) {
   return sha25611(canonicalize4(definition));
@@ -165219,9 +165297,9 @@ var init_executor = __esm(() => {
 
 // src/harness/process/real-process-adapter.ts
 import { spawnSync as spawnSync8 } from "child_process";
-import { createHash as createHash66 } from "crypto";
+import { createHash as createHash67 } from "crypto";
 function sha256Hex8(input) {
-  return createHash66("sha256").update(input, "utf8").digest("hex");
+  return createHash67("sha256").update(input, "utf8").digest("hex");
 }
 function byteLength2(chunk) {
   if (chunk === null || chunk === undefined)
@@ -166979,7 +167057,7 @@ var init_session3 = __esm(() => {
 });
 
 // src/acp/session-mcp.ts
-import { createHash as createHash67 } from "crypto";
+import { createHash as createHash68 } from "crypto";
 function isRecord6(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -167106,7 +167184,7 @@ function acpMcpSetKey(parsed) {
     })),
     refused: parsed.refused
   };
-  return createHash67("sha256").update(JSON.stringify(canonical)).digest("hex");
+  return createHash68("sha256").update(JSON.stringify(canonical)).digest("hex");
 }
 function startAcpSessionMcp(parsed, options = {}) {
   const refused = parsed.refused.map((problem) => ({ name: problem.name, reason: scrub(problem.reason, parsed.secrets) }));
@@ -168985,7 +169063,7 @@ var init_modules = __esm(() => {
 });
 
 // src/lib/serve-credential.ts
-import { createHash as createHash68, randomBytes as randomBytes11, randomUUID as randomUUID43 } from "crypto";
+import { createHash as createHash69, randomBytes as randomBytes11, randomUUID as randomUUID43 } from "crypto";
 import {
   chmodSync as chmodSync5,
   closeSync as closeSync7,
@@ -169012,10 +169090,10 @@ function constantTimeEqual(a, b) {
   return difference === 0;
 }
 function hashToken(salt, token) {
-  return createHash68("sha256").update(Buffer.from(salt, "hex")).update(Buffer.from(token, "utf8")).digest("hex");
+  return createHash69("sha256").update(Buffer.from(salt, "hex")).update(Buffer.from(token, "utf8")).digest("hex");
 }
 function credentialFingerprint(record) {
-  return createHash68("sha256").update(`keryx-serve-fingerprint:${record.hash}`).digest("hex").slice(0, 8);
+  return createHash69("sha256").update(`keryx-serve-fingerprint:${record.hash}`).digest("hex").slice(0, 8);
 }
 function isValidRecord(value) {
   if (typeof value !== "object" || value === null) {
@@ -169229,7 +169307,7 @@ var init_serve_throttle = __esm(() => {
 });
 
 // src/lib/serve-turn-store.ts
-import { createHash as createHash69 } from "crypto";
+import { createHash as createHash70 } from "crypto";
 import { existsSync as existsSync50, readdirSync as readdirSync12, rmSync as rmSync4 } from "fs";
 import path321 from "path";
 function turnsRoot(dir) {
@@ -169240,11 +169318,11 @@ function turnDir(turnId, dir) {
 }
 function keyPath(project, idempotencyKey, dir) {
   const projectBytes = Buffer.byteLength(project, "utf8");
-  const digest = createHash69("sha256").update(`${projectBytes}:${project}\x00${idempotencyKey}`, "utf8").digest("hex");
+  const digest = createHash70("sha256").update(`${projectBytes}:${project}\x00${idempotencyKey}`, "utf8").digest("hex");
   return path321.join(turnsRoot(dir), "keys", `${digest}.json`);
 }
 function legacyKeyPath(idempotencyKey, dir) {
-  const digest = createHash69("sha256").update(idempotencyKey, "utf8").digest("hex");
+  const digest = createHash70("sha256").update(idempotencyKey, "utf8").digest("hex");
   return path321.join(turnsRoot(dir), "keys", `${digest}.json`);
 }
 function adoptLegacyClaim(project, idempotencyKey, dir) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.26",
+  "version": "0.3.27",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {