@newtype-ai/nit 0.2.4 → 0.2.6

package/README.md

@@ -57,7 +57,7 @@ nit push --all
 | `nit checkout <branch>` | Switch branch (overwrites agent-card.json) |
 | `nit push [--all]` | Push branch(es) to remote |
 | `nit sign "msg"` | Sign a message with your Ed25519 key |
-| `nit sign --login <domain>` | Generate login payload for an app |
+| `nit sign --login <domain>` | Auto-switch to domain branch + generate login payload |
 | `nit remote` | Show remote URL and credential status |
 | `nit remote add <name> <url>` | Add a new remote |
 | `nit remote set-url <name> <url>` | Change a remote's URL |
@@ -84,7 +84,9 @@ Each branch is a different agent card for a different platform. Branch name = ro
 
 ### Skill Resolution
 
-At commit time, nit discovers SKILL.md files from all major agent frameworks:
+Your card can store skills as **pointers** — just `{ "id": "skill-name" }` — resolved from SKILL.md files at commit time. SKILL.md is the single source of truth when present.
+
+nit auto-discovers your skills directory from all major agent frameworks:
 
 - `.claude/skills/` — Claude Code
 - `.cursor/skills/` — Cursor
@@ -92,7 +94,7 @@ At commit time, nit discovers SKILL.md files from all major agent frameworks:
 - `.codex/skills/` — OpenAI Codex
 - `.agents/skills/` — Generic
 
-Skills referenced in your card are resolved against these files, and the committed card contains a self-contained snapshot.
+The discovered path is stored in `.nit/config`. When `nit sign --login <domain>` creates a new branch, it auto-creates a SKILL.md template and adds a pointer to the card. The committed card always contains fully resolved, self-contained skill data.
 
 ### Remote Protocol
 
@@ -116,10 +118,11 @@ nit remote set-url origin https://my-server.com
 your-project/
 ├── .nit/                    # nit repository (gitignored)
 │   ├── HEAD                 # Current branch ref
-│   ├── config               # Remote URL and credentials
+│   ├── config               # Remote URL, credentials, skills directory
 │   ├── identity/
 │   │   ├── agent.pub        # Ed25519 public key
-│   │   └── agent.key        # Ed25519 private key (0600)
+│   │   ├── agent.key        # Ed25519 private key (0600)
+│   │   └── agent-id         # UUIDv5 derived from public key
 │   ├── objects/              # Content-addressable store
 │   └── refs/heads/           # Branch pointers
 ├── agent-card.json          # Working copy (changes with checkout)
@@ -129,12 +132,15 @@ your-project/
 ## Programmatic API
 
 ```typescript
-import { init, commit, checkout, branch, push, status } from '@newtype-ai/nit';
+import { init, commit, checkout, branch, push, status, sign, loginPayload } from '@newtype-ai/nit';
 
 await init();
-await branch('faam.io');
-await checkout('faam.io');
-// modify agent-card.json...
+
+// Log into an app (auto-creates and switches to domain branch)
+const payload = await loginPayload('faam.io');
+// → { agent_id, domain, timestamp, signature, switchedBranch, createdSkill }
+
+// Customize card, then commit & push
 await commit('FAAM config');
 await push({ all: true });
 ```

package/dist/{chunk-U6PEH4IJ.js → chunk-3RRHLPAC.js}

@@ -249,19 +249,6 @@ async function signChallenge(nitDir, challenge) {
   const sig = sign(null, Buffer.from(challenge, "utf-8"), privateKey);
   return sig.toString("base64");
 }
-function verifySignature(pubBase64, challenge, signatureBase64) {
-  const xB64url = base64ToBase64url(pubBase64);
-  const publicKeyObj = createPublicKey({
-    key: { kty: "OKP", crv: "Ed25519", x: xB64url },
-    format: "jwk"
-  });
-  return verify(
-    null,
-    Buffer.from(challenge, "utf-8"),
-    publicKeyObj,
-    Buffer.from(signatureBase64, "base64")
-  );
-}
 async function signMessage(nitDir, message) {
   const privateKey = await loadPrivateKey(nitDir);
   const sig = sign(null, Buffer.from(message, "utf-8"), privateKey);
@@ -1153,7 +1140,6 @@ export {
   formatPublicKeyField,
   parsePublicKeyField,
   signChallenge,
-  verifySignature,
   signMessage,
   NIT_NAMESPACE,
   deriveAgentId,

package/dist/cli.js

@@ -15,7 +15,7 @@ import {
   remoteSetUrl,
   sign,
   status
-} from "./chunk-U6PEH4IJ.js";
+} from "./chunk-3RRHLPAC.js";
 
 // src/cli.ts
 var bold = (s) => `\x1B[1m${s}\x1B[0m`;

package/dist/index.d.ts

@@ -149,12 +149,6 @@ declare function parsePublicKeyField(field: string): string;
  * Returns a standard base64-encoded signature.
  */
 declare function signChallenge(nitDir: string, challenge: string): Promise<string>;
-/**
- * Verify a signature against a challenge using the raw base64 public key.
- * This is a utility for consumers; nit itself uses it in the remote module
- * for challenge-response flows.
- */
-declare function verifySignature(pubBase64: string, challenge: string, signatureBase64: string): boolean;
 /**
  * Sign an arbitrary message with the agent's private key.
  * Returns a standard base64-encoded signature.
@@ -311,4 +305,4 @@ declare function remoteSetUrl(name: string, url: string, options?: {
     projectDir?: string;
 }): Promise<void>;
 
-export { type AgentCard, type AgentCardSkill, type DiffResult, type FieldDiff, type InitResult, type LoginPayload, NIT_NAMESPACE, type NitBranch, type NitCommit, type NitConfig, type NitHead, type NitRemoteConfig, type PushResult, type RemoteInfo, type SkillMetadata, type StatusResult, branch, checkout, commit, deriveAgentId, diff, diffCards, fetchBranchCard, findNitDir, formatDiff, formatPublicKeyField, init, loadAgentId, log, loginPayload, parsePublicKeyField, push, remote, remoteAdd, remoteSetUrl, sign, signChallenge, signMessage, status, verifySignature };
+export { type AgentCard, type AgentCardSkill, type DiffResult, type FieldDiff, type InitResult, type LoginPayload, NIT_NAMESPACE, type NitBranch, type NitCommit, type NitConfig, type NitHead, type NitRemoteConfig, type PushResult, type RemoteInfo, type SkillMetadata, type StatusResult, branch, checkout, commit, deriveAgentId, diff, diffCards, fetchBranchCard, findNitDir, formatDiff, formatPublicKeyField, init, loadAgentId, log, loginPayload, parsePublicKeyField, push, remote, remoteAdd, remoteSetUrl, sign, signChallenge, signMessage, status };

package/dist/index.js

@@ -23,9 +23,8 @@ import {
   sign,
   signChallenge,
   signMessage,
-  status,
-  verifySignature
-} from "./chunk-U6PEH4IJ.js";
+  status
+} from "./chunk-3RRHLPAC.js";
 export {
   NIT_NAMESPACE,
   branch,
@@ -50,6 +49,5 @@ export {
   sign,
   signChallenge,
   signMessage,
-  status,
-  verifySignature
+  status
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@newtype-ai/nit",
-  "version": "0.2.4",
+  "version": "0.2.6",
   "description": "Version control for agent cards",
   "type": "module",
   "bin": {