@rozoai/checkout 0.1.7 → 0.1.10

package/README.md

@@ -33,7 +33,7 @@ npx @rozoai/checkout pay <coinbase-link> --with usdt-solana
 | Base | `usdc-base` | `8453` | 6 decimals |
 | Solana | `usdt-solana` `usdc-solana` | `900` | SPL; native SOL not supported |
 | Stellar | `usdc-stellar` | `1500` | `MEMO_TEXT` memo required — shown in the deposit block |
-| Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11; amounts in satoshis |
+| Bitcoin Lightning | `btc-lightning` | `lightning` | BOLT11; amounts in satoshis. Any wallet that can pay an invoice works, including Cashu/ecash wallets — the mint melts your ecash into the Lightning payment. |
 
 Native gas coins (SOL, BNB, ETH, MATIC) and on-chain BTC are not accepted.
 
@@ -52,7 +52,10 @@ already hold and pay from wherever it already lives.
   address plus `receiverMemo`, so whatever you send from — exchange or wallet —
   must let you set a memo. Omit it and the payment is lost.
 - **Lightning pays an invoice, not an address.** Scan or paste
-  `deposit.lnInvoice`; there is no address to send to.
+  `deposit.lnInvoice`; there is no address to send to. A Cashu/ecash wallet
+  works here too — paying the invoice melts the ecash on your behalf, and this
+  route settles against ROZO's own Lightning node rather than a third-party
+  swap, so no special handling is needed on our side.
 - **Only `--send` needs a private key**, read from `ROZO_CHECKOUT_EVM_KEY` or
   `ROZO_CHECKOUT_SOL_KEY`, and it covers EVM chains and Solana only. Everything
   else is keyless.
@@ -70,6 +73,8 @@ environment (or a gitignored `.env`) still works for unattended automation.
 <details>
 <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary>
 
+You very likely do not need any of this: the default path needs no key, and for Stellar the `stellar-agent-wallet` skill sends with its own key handling — this `.env` setup is only for unattended EVM/Solana automation with a dedicated low-balance hot wallet.
+
 **None of this is needed for the default path.** Paying from your own wallet
 needs no key and no configuration, and works with wallets that can never be
 used here — including hardware wallets and exchange accounts.

package/docs/QUICKSTART.es.md

@@ -224,6 +224,8 @@ Un archivo de claves o un `.env` no debe ser legible por otros usuarios
 <details>
 <summary><b>Configurar una billetera local para <code>--send</code></b> — plantilla .env y pasos de exportación por billetera</summary>
 
+Muy probablemente no necesites nada de esto: la ruta por defecto no requiere ninguna clave, y para Stellar la skill `stellar-agent-wallet` envía con su propio manejo de claves — esta configuración `.env` es solo para automatización desatendida en EVM/Solana con una billetera caliente dedicada de saldo bajo.
+
 **Nada de esto hace falta para la ruta por defecto.** Pagar desde la propia
 billetera no necesita clave ni configuración, y funciona con billeteras que aquí
 nunca se pueden usar, incluidas las de hardware y las cuentas de exchange.

package/docs/QUICKSTART.ja.md

@@ -202,6 +202,8 @@ ROZO_CHECKOUT_EVM_KEYSTORE=~/wallets/hot.json \
 <details>
 <summary><b><code>--send</code> 用のローカルウォレット設定</b> — .env テンプレートとウォレット別の書き出し手順</summary>
 
+おそらくこれらは一切不要です。既定の経路に鍵は不要で、Stellar なら `stellar-agent-wallet` スキルが独自の鍵管理で送金します — この `.env` 設定は、残高を低く抑えた専用ホットウォレットによる EVM/Solana の無人自動化専用です。
+
 **既定の経路ではここに書かれたものは一切不要です。** 自分のウォレットから支払う場合、
 鍵も設定も要りません。しかもここでは決して使えないウォレット — ハードウェアウォレットや
 取引所アカウントを含む — でも支払えます。

package/docs/QUICKSTART.md

@@ -217,6 +217,8 @@ not be tracked by git. Both are refused rather than warned about.
 <details>
 <summary><b>Set up a local wallet for <code>--send</code></b> — .env template and per-wallet export steps</summary>
 
+You very likely do not need any of this: the default path needs no key, and for Stellar the `stellar-agent-wallet` skill sends with its own key handling — this `.env` setup is only for unattended EVM/Solana automation with a dedicated low-balance hot wallet.
+
 **None of this is needed for the default path.** Paying from your own wallet
 needs no key and no configuration, and works with wallets that can never be
 used here — including hardware wallets and exchange accounts.

package/docs/QUICKSTART.zh.md

@@ -185,6 +185,8 @@ ROZO_CHECKOUT_EVM_KEYSTORE=~/wallets/hot.json \
 <details>
 <summary><b>为 <code>--send</code> 配置本地钱包</b> —— .env 模板与各钱包导出步骤</summary>
 
+你很可能完全不需要这些：默认路径不需要任何私钥；Stellar 来源可用 `stellar-agent-wallet` skill，它有自己的密钥管理来完成发送 —— 这份 `.env` 配置只用于无人值守的 EVM/Solana 自动化，且应使用余额很低的专用热钱包。
+
 **默认路径不需要这里的任何东西。** 用你自己的钱包付款既不需要私钥也不需要任何配置，
 而且支持那些在这里根本用不了的钱包 —— 包括硬件钱包和交易所账户。
 

package/docs/README.es.md

@@ -239,6 +239,8 @@ Billetera: cualquier billetera, **sin clave**. Solo `--send` la necesita: firma
 <details>
 <summary><b>Configurar una billetera local para <code>--send</code></b> — plantilla .env y pasos de exportación por billetera</summary>
 
+Muy probablemente no necesites nada de esto: la ruta por defecto no requiere ninguna clave, y para Stellar la skill `stellar-agent-wallet` envía con su propio manejo de claves — esta configuración `.env` es solo para automatización desatendida en EVM/Solana con una billetera caliente dedicada de saldo bajo.
+
 **Nada de esto hace falta para la ruta por defecto.** Pagar desde la propia
 billetera no necesita clave ni configuración, y funciona con billeteras que aquí
 nunca se pueden usar, incluidas las de hardware y las cuentas de exchange.

package/docs/README.ja.md

@@ -232,6 +232,8 @@ https://checkout.rozo.ai/llms.txt を自分のコンテキストに読み込み
 <details>
 <summary><b><code>--send</code> 用のローカルウォレット設定</b> — .env テンプレートとウォレット別の書き出し手順</summary>
 
+おそらくこれらは一切不要です。既定の経路に鍵は不要で、Stellar なら `stellar-agent-wallet` スキルが独自の鍵管理で送金します — この `.env` 設定は、残高を低く抑えた専用ホットウォレットによる EVM/Solana の無人自動化専用です。
+
 **既定の経路ではここに書かれたものは一切不要です。** 自分のウォレットから支払う場合、
 鍵も設定も要りません。しかもここでは決して使えないウォレット — ハードウェアウォレットや
 取引所アカウントを含む — でも支払えます。

package/docs/README.zh.md

@@ -214,6 +214,8 @@ node scripts/dist/status.js --rozo-payment-id <uuid> --watch
 <details>
 <summary><b>为 <code>--send</code> 配置本地钱包</b> —— .env 模板与各钱包导出步骤</summary>
 
+你很可能完全不需要这些：默认路径不需要任何私钥；Stellar 来源可用 `stellar-agent-wallet` skill，它有自己的密钥管理来完成发送 —— 这份 `.env` 配置只用于无人值守的 EVM/Solana 自动化，且应使用余额很低的专用热钱包。
+
 **默认路径不需要这里的任何东西。** 用你自己的钱包付款既不需要私钥也不需要任何配置，
 而且支持那些在这里根本用不了的钱包 —— 包括硬件钱包和交易所账户。
 

package/docs/security-audit-notes.md

@@ -0,0 +1,30 @@
+# Security-audit notes for scanners and reviewers
+
+What automated scans flag in this skill, and why each pattern is present.
+
+## `env_credential_access` — environment variable read + network send
+
+Real and by design, in exactly two places: `send-evm.js` reads
+`ROZO_CHECKOUT_EVM_KEY` (or an encrypted keystore) and `send-sol.js` reads
+`ROZO_CHECKOUT_SOL_KEY`, to sign a transfer the user has already confirmed
+twice (`--confirm` on the order, `--send` on the send). That is the entire
+optional hot-wallet mode ("Mode B" in SKILL.md); the default mode never
+touches a key. Mitigations, all enforced in code, not prose:
+
+- keys come from the environment or a named file only — never argv, never
+  printed, scrubbed from every output object (`forget()` in `lib/keys.mjs`);
+- a `.env` is only read from the working directory, this tool's own
+  `~/.rozo-checkout/.env`, or a path the user names with `--env-file`; a
+  generic `~/.env` is never read;
+- sends refuse if any `.env` here is git-tracked, refuse over the $1,100
+  per-payment cap, re-verify chain id and token decimals against the RPC, and
+  record the send locally before broadcast so the same order cannot pay twice.
+
+## `dangerous_exec` — subprocess execution
+
+Removed in 0.1.9. Earlier versions shelled out to `git rev-parse` /
+`git ls-files` for one purpose: refusing to use hot-wallet keys from a
+directory whose `.env` is git-tracked. The check now reads `.git/index`
+directly (`lib/keys.mjs`), so the published bundle contains no
+`child_process` usage at all. The fail-closed contract is unchanged — an
+unparseable index refuses rather than assumes.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rozoai/checkout",
-  "version": "0.1.7",
+  "version": "0.1.10",
   "type": "module",
   "description": "Pay an OpenRouter Coinbase Payment Link with BTC Lightning, or USDT/USDC on Solana, BNB Chain, Ethereum, Polygon, Base or Stellar.",
   "license": "MIT",

package/scripts/dist/cli.js

@@ -21270,10 +21270,10 @@ var require_dist = __commonJS({
 });
 
 // node_modules/uuid/dist/esm-node/rng.js
-import crypto6 from "crypto";
+import crypto7 from "crypto";
 function rng() {
   if (poolPtr > rnds8Pool.length - 16) {
-    crypto6.randomFillSync(rnds8Pool);
+    crypto7.randomFillSync(rnds8Pool);
     poolPtr = 0;
   }
   return rnds8Pool.slice(poolPtr, poolPtr += 16);
@@ -21473,14 +21473,14 @@ var init_v35 = __esm({
 });
 
 // node_modules/uuid/dist/esm-node/md5.js
-import crypto7 from "crypto";
+import crypto8 from "crypto";
 function md5(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return crypto7.createHash("md5").update(bytes).digest();
+  return crypto8.createHash("md5").update(bytes).digest();
 }
 var md5_default;
 var init_md5 = __esm({
@@ -21525,14 +21525,14 @@ var init_v4 = __esm({
 });
 
 // node_modules/uuid/dist/esm-node/sha1.js
-import crypto8 from "crypto";
+import crypto9 from "crypto";
 function sha1(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return crypto8.createHash("sha1").update(bytes).digest();
+  return crypto9.createHash("sha1").update(bytes).digest();
 }
 var sha1_default;
 var init_sha1 = __esm({
@@ -42729,7 +42729,7 @@ function checkExpiry({
 import fs6 from "node:fs";
 import path6 from "node:path";
 import os4 from "node:os";
-import crypto5 from "node:crypto";
+import crypto6 from "node:crypto";
 
 // node_modules/viem/_esm/utils/getAction.js
 function getAction(client, actionFn, name) {
@@ -53697,43 +53697,148 @@ init_keccak256();
 // scripts/src/lib/keys.mjs
 import fs4 from "node:fs";
 import path4 from "node:path";
-import { execFileSync } from "node:child_process";
-var ENV_FILE_RE = /^\.env(\..+)?$/;
-var PUBLIC_ENV_RE = /^\.env\.(example|sample|template)$/;
-function insideGitWorkTree(dir, whatFor) {
+import crypto5 from "node:crypto";
+function findGitRepo(dir) {
+  for (const v of ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE"]) {
+    if (process.env[v]) {
+      throw new SkillError(
+        "TRACKED_DOTENV_UNVERIFIABLE",
+        `${v} is set, so the repository layout cannot be resolved by reading the filesystem alone. Unset it (or run from a plain checkout) before using hot-wallet keys.`
+      );
+    }
+  }
+  let cur = path4.resolve(dir);
+  for (; ; ) {
+    const dotGit = path4.join(cur, ".git");
+    let st = null;
+    try {
+      st = fs4.statSync(dotGit);
+    } catch (err) {
+      if (err?.code !== "ENOENT" && err?.code !== "ENOTDIR") {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          `A .git entry here could not be inspected (${err?.code || "error"}), so tracked status cannot be proved. Refusing.`
+        );
+      }
+      st = null;
+    }
+    if (st) {
+      if (st.isDirectory()) return { root: cur, gitDir: dotGit };
+      let text;
+      try {
+        text = fs4.readFileSync(dotGit, "utf8");
+      } catch {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          "A .git entry exists here but could not be read, so tracked status cannot be proved. Refusing."
+        );
+      }
+      const m = /^gitdir:\s*(.+)\s*$/m.exec(text);
+      if (!m) {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          "A .git file exists here but is not a recognised gitdir pointer. Refusing."
+        );
+      }
+      return { root: cur, gitDir: path4.resolve(cur, m[1]) };
+    }
+    const parent = path4.dirname(cur);
+    if (parent === cur) return null;
+    cur = parent;
+  }
+}
+function trackedPathsFromIndex(buf, { hashLen = 20 } = {}) {
+  const fail2 = (why) => new SkillError(
+    "TRACKED_DOTENV_UNVERIFIABLE",
+    `The git index could not be interpreted (${why}), so tracked status cannot be proved. Refusing.`
+  );
+  if (buf.length < 12 + hashLen || buf.toString("latin1", 0, 4) !== "DIRC") throw fail2("bad header");
+  const algo = hashLen === 32 ? "sha256" : "sha1";
+  const expected = buf.subarray(buf.length - hashLen);
+  const actual = crypto5.createHash(algo).update(buf.subarray(0, buf.length - hashLen)).digest();
+  if (!actual.equals(expected)) throw fail2(`${algo} checksum mismatch`);
+  const version6 = buf.readUInt32BE(4);
+  if (version6 !== 2 && version6 !== 3) throw fail2(`unsupported index version ${version6}`);
+  const count = buf.readUInt32BE(8);
+  const paths = /* @__PURE__ */ new Set();
+  const fixed = 40 + hashLen + 2;
+  let off = 12;
+  for (let i = 0; i < count; i++) {
+    const entryStart = off;
+    if (off + fixed > buf.length - hashLen) throw fail2("truncated entry");
+    const flags = buf.readUInt16BE(off + fixed - 2);
+    let nameOff = off + fixed;
+    if (flags & 16384) {
+      if (version6 < 3) throw fail2("extended flags in v2 index");
+      nameOff += 2;
+    }
+    const nameLen = flags & 4095;
+    let end;
+    if (nameLen < 4095) {
+      end = nameOff + nameLen;
+      if (end > buf.length - hashLen) throw fail2("truncated path");
+    } else {
+      end = buf.indexOf(0, nameOff);
+      if (end === -1 || end > buf.length - hashLen) throw fail2("unterminated path");
+    }
+    paths.add(buf.toString("utf8", nameOff, end));
+    const entryLen = end - entryStart;
+    off = entryStart + (Math.floor(entryLen / 8) + 1) * 8;
+  }
+  while (off < buf.length - hashLen) {
+    if (off + 8 > buf.length - hashLen) throw fail2("truncated extension header");
+    const extName = buf.toString("latin1", off, off + 4);
+    const extSize = buf.readUInt32BE(off + 4);
+    const first = extName.charCodeAt(0);
+    if (first >= 97 && first <= 122) {
+      throw fail2(`mandatory index extension "${extName}" (e.g. core.splitIndex) is not supported`);
+    }
+    off += 8 + extSize;
+    if (off > buf.length - hashLen) throw fail2("truncated extension");
+  }
+  return paths;
+}
+function repoHashLen(gitDir) {
+  let configDir = gitDir;
+  try {
+    const common = fs4.readFileSync(path4.join(gitDir, "commondir"), "utf8").trim();
+    if (common) configDir = path4.resolve(gitDir, common);
+  } catch {
+  }
+  try {
+    const cfg = fs4.readFileSync(path4.join(configDir, "config"), "utf8");
+    if (/^\s*objectformat\s*=\s*sha256\s*$/im.test(cfg)) return 32;
+  } catch {
+  }
+  return 20;
+}
+function trackedAmong(repo, files) {
+  const indexPath = path4.join(repo.gitDir, "index");
+  let buf;
   try {
-    return execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "pipe"],
-      encoding: "utf8"
-    }).trim() === "true";
+    buf = fs4.readFileSync(indexPath);
   } catch (err) {
-    const stderr = String(err?.stderr || "");
-    if (/not a git repository|does not appear to be a git repository/i.test(stderr)) return false;
+    if (err?.code === "ENOENT") return [];
     throw new SkillError(
       "TRACKED_DOTENV_UNVERIFIABLE",
-      `git could not be consulted (${err?.code || "unknown error"}), so it cannot be proved that ${whatFor} is untracked. Refusing rather than assuming it is safe.`
+      "The git index exists but could not be read, so tracked status cannot be proved. Refusing."
     );
   }
+  const tracked = trackedPathsFromIndex(buf, { hashLen: repoHashLen(repo.gitDir) });
+  return files.filter((f) => {
+    const rel = path4.relative(repo.root, path4.resolve(f)).split(path4.sep).join("/");
+    return tracked.has(rel);
+  });
 }
+var ENV_FILE_RE = /^\.env(\..+)?$/;
+var PUBLIC_ENV_RE = /^\.env\.(example|sample|template)$/;
 function assertNotTrackedByGit(file) {
   const dir = path4.dirname(path4.resolve(file));
-  const base = path4.basename(file);
-  if (!insideGitWorkTree(dir, "this key file")) return { checked: true, tracked: false };
-  let out2;
-  try {
-    out2 = execFileSync("git", ["ls-files", "-z", "--", base], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8"
-    });
-  } catch {
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      "git could not report whether this key file is tracked. Refusing to use it."
-    );
-  }
-  if (out2.split("\0").filter(Boolean).length) {
+  const repo = findGitRepo(dir);
+  if (!repo) return { checked: true, tracked: false };
+  const hits = trackedAmong(repo, [file]);
+  if (hits.length) {
+    const base = path4.basename(file);
     throw new SkillError(
       "TRACKED_KEYFILE",
       `${base} is tracked by git. A committed key is one push from being public \u2014 untrack it (git rm --cached ${base}) and gitignore it before using it to sign.`
@@ -53752,37 +53857,11 @@ function assertNoTrackedDotEnv(cwd = process.cwd()) {
     );
   }
   if (candidates.length === 0) return { checked: true, tracked: false, candidates: [] };
-  let insideRepo;
-  try {
-    insideRepo = execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-      cwd,
-      stdio: ["ignore", "pipe", "pipe"],
-      encoding: "utf8"
-    }).trim() === "true";
-  } catch (err) {
-    const stderr = String(err?.stderr || "");
-    const notARepo = /not a git repository|does not appear to be a git repository/i.test(stderr);
-    if (notARepo) return { checked: true, tracked: false, candidates };
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      `Found ${candidates.length} .env file(s) here, but git could not be consulted (${err?.code || "unknown error"}), so it cannot be proved they are untracked. Refusing to use hot-wallet keys in this directory.`
-    );
-  }
-  if (!insideRepo) return { checked: true, tracked: false, candidates };
-  let out2;
-  try {
-    out2 = execFileSync("git", ["ls-files", "-z", "--", ...candidates], {
-      cwd,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8"
-    });
-  } catch {
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      "git could not report whether the .env file(s) in this directory are tracked. Refusing to use hot-wallet keys rather than assuming they are safe."
-    );
-  }
-  const tracked = out2.split("\0").filter(Boolean);
+  const repo = findGitRepo(cwd);
+  if (!repo) return { checked: true, tracked: false, candidates };
+  const tracked = trackedAmong(repo, candidates.map((f) => path4.join(cwd, f))).map(
+    (f) => path4.basename(f)
+  );
   if (tracked.length) {
     throw new SkillError(
       "TRACKED_DOTENV",
@@ -54018,7 +54097,7 @@ function decryptKeystoreV3(keystore, passphrase) {
     if (!n || !r || !p || !dklen || !salt) {
       throw new SkillError("BAD_KEYSTORE", "The keystore scrypt parameters are incomplete.");
     }
-    derived = crypto5.scryptSync(pass, Buffer.from(salt, "hex"), dklen, {
+    derived = crypto6.scryptSync(pass, Buffer.from(salt, "hex"), dklen, {
       N: n,
       r,
       p,
@@ -54034,7 +54113,7 @@ function decryptKeystoreV3(keystore, passphrase) {
     if (!iterations || !dklen || !salt) {
       throw new SkillError("BAD_KEYSTORE", "The keystore pbkdf2 parameters are incomplete.");
     }
-    derived = crypto5.pbkdf2Sync(pass, Buffer.from(salt, "hex"), iterations, dklen, "sha256");
+    derived = crypto6.pbkdf2Sync(pass, Buffer.from(salt, "hex"), iterations, dklen, "sha256");
   } else {
     throw new SkillError("BAD_KEYSTORE", `Unsupported keystore KDF "${c2.kdf}".`);
   }
@@ -54049,7 +54128,7 @@ function decryptKeystoreV3(keystore, passphrase) {
   if (c2.cipher !== "aes-128-ctr") {
     throw new SkillError("BAD_KEYSTORE", `Unsupported keystore cipher "${c2.cipher}".`);
   }
-  const decipher = crypto5.createDecipheriv(
+  const decipher = crypto6.createDecipheriv(
     "aes-128-ctr",
     derived.subarray(0, 16),
     Buffer.from(c2.cipherparams.iv, "hex")
@@ -54071,7 +54150,7 @@ function timingSafeEqualHex(a, b) {
   const ab = Buffer.from(String(a).toLowerCase(), "hex");
   const bb = Buffer.from(String(b).toLowerCase(), "hex");
   if (ab.length === 0 || ab.length !== bb.length) return false;
-  return crypto5.timingSafeEqual(ab, bb);
+  return crypto6.timingSafeEqual(ab, bb);
 }
 function looksLikeKeystore(text) {
   const t = String(text).trimStart();

package/scripts/dist/send-evm.js

@@ -1759,10 +1759,10 @@ var init_u64 = __esm({
 
 // node_modules/@noble/hashes/esm/cryptoNode.js
 import * as nc from "node:crypto";
-var crypto2;
+var crypto3;
 var init_cryptoNode = __esm({
   "node_modules/@noble/hashes/esm/cryptoNode.js"() {
-    crypto2 = nc && typeof nc === "object" && "webcrypto" in nc ? nc.webcrypto : nc && typeof nc === "object" && "randomBytes" in nc ? nc : void 0;
+    crypto3 = nc && typeof nc === "object" && "webcrypto" in nc ? nc.webcrypto : nc && typeof nc === "object" && "randomBytes" in nc ? nc : void 0;
   }
 });
 
@@ -1857,11 +1857,11 @@ function createHasher(hashCons) {
   return hashC;
 }
 function randomBytes(bytesLength = 32) {
-  if (crypto2 && typeof crypto2.getRandomValues === "function") {
-    return crypto2.getRandomValues(new Uint8Array(bytesLength));
+  if (crypto3 && typeof crypto3.getRandomValues === "function") {
+    return crypto3.getRandomValues(new Uint8Array(bytesLength));
   }
-  if (crypto2 && typeof crypto2.randomBytes === "function") {
-    return Uint8Array.from(crypto2.randomBytes(bytesLength));
+  if (crypto3 && typeof crypto3.randomBytes === "function") {
+    return Uint8Array.from(crypto3.randomBytes(bytesLength));
   }
   throw new Error("crypto.getRandomValues must be defined");
 }
@@ -10214,43 +10214,148 @@ function chainFamily(chainId) {
 // scripts/src/lib/keys.mjs
 import fs from "node:fs";
 import path from "node:path";
-import { execFileSync } from "node:child_process";
-var ENV_FILE_RE = /^\.env(\..+)?$/;
-var PUBLIC_ENV_RE = /^\.env\.(example|sample|template)$/;
-function insideGitWorkTree(dir, whatFor) {
+import crypto2 from "node:crypto";
+function findGitRepo(dir) {
+  for (const v of ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE"]) {
+    if (process.env[v]) {
+      throw new SkillError(
+        "TRACKED_DOTENV_UNVERIFIABLE",
+        `${v} is set, so the repository layout cannot be resolved by reading the filesystem alone. Unset it (or run from a plain checkout) before using hot-wallet keys.`
+      );
+    }
+  }
+  let cur = path.resolve(dir);
+  for (; ; ) {
+    const dotGit = path.join(cur, ".git");
+    let st = null;
+    try {
+      st = fs.statSync(dotGit);
+    } catch (err) {
+      if (err?.code !== "ENOENT" && err?.code !== "ENOTDIR") {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          `A .git entry here could not be inspected (${err?.code || "error"}), so tracked status cannot be proved. Refusing.`
+        );
+      }
+      st = null;
+    }
+    if (st) {
+      if (st.isDirectory()) return { root: cur, gitDir: dotGit };
+      let text;
+      try {
+        text = fs.readFileSync(dotGit, "utf8");
+      } catch {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          "A .git entry exists here but could not be read, so tracked status cannot be proved. Refusing."
+        );
+      }
+      const m = /^gitdir:\s*(.+)\s*$/m.exec(text);
+      if (!m) {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          "A .git file exists here but is not a recognised gitdir pointer. Refusing."
+        );
+      }
+      return { root: cur, gitDir: path.resolve(cur, m[1]) };
+    }
+    const parent = path.dirname(cur);
+    if (parent === cur) return null;
+    cur = parent;
+  }
+}
+function trackedPathsFromIndex(buf, { hashLen = 20 } = {}) {
+  const fail2 = (why) => new SkillError(
+    "TRACKED_DOTENV_UNVERIFIABLE",
+    `The git index could not be interpreted (${why}), so tracked status cannot be proved. Refusing.`
+  );
+  if (buf.length < 12 + hashLen || buf.toString("latin1", 0, 4) !== "DIRC") throw fail2("bad header");
+  const algo = hashLen === 32 ? "sha256" : "sha1";
+  const expected = buf.subarray(buf.length - hashLen);
+  const actual = crypto2.createHash(algo).update(buf.subarray(0, buf.length - hashLen)).digest();
+  if (!actual.equals(expected)) throw fail2(`${algo} checksum mismatch`);
+  const version4 = buf.readUInt32BE(4);
+  if (version4 !== 2 && version4 !== 3) throw fail2(`unsupported index version ${version4}`);
+  const count = buf.readUInt32BE(8);
+  const paths = /* @__PURE__ */ new Set();
+  const fixed = 40 + hashLen + 2;
+  let off = 12;
+  for (let i = 0; i < count; i++) {
+    const entryStart = off;
+    if (off + fixed > buf.length - hashLen) throw fail2("truncated entry");
+    const flags = buf.readUInt16BE(off + fixed - 2);
+    let nameOff = off + fixed;
+    if (flags & 16384) {
+      if (version4 < 3) throw fail2("extended flags in v2 index");
+      nameOff += 2;
+    }
+    const nameLen = flags & 4095;
+    let end;
+    if (nameLen < 4095) {
+      end = nameOff + nameLen;
+      if (end > buf.length - hashLen) throw fail2("truncated path");
+    } else {
+      end = buf.indexOf(0, nameOff);
+      if (end === -1 || end > buf.length - hashLen) throw fail2("unterminated path");
+    }
+    paths.add(buf.toString("utf8", nameOff, end));
+    const entryLen = end - entryStart;
+    off = entryStart + (Math.floor(entryLen / 8) + 1) * 8;
+  }
+  while (off < buf.length - hashLen) {
+    if (off + 8 > buf.length - hashLen) throw fail2("truncated extension header");
+    const extName = buf.toString("latin1", off, off + 4);
+    const extSize = buf.readUInt32BE(off + 4);
+    const first = extName.charCodeAt(0);
+    if (first >= 97 && first <= 122) {
+      throw fail2(`mandatory index extension "${extName}" (e.g. core.splitIndex) is not supported`);
+    }
+    off += 8 + extSize;
+    if (off > buf.length - hashLen) throw fail2("truncated extension");
+  }
+  return paths;
+}
+function repoHashLen(gitDir) {
+  let configDir = gitDir;
   try {
-    return execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "pipe"],
-      encoding: "utf8"
-    }).trim() === "true";
+    const common = fs.readFileSync(path.join(gitDir, "commondir"), "utf8").trim();
+    if (common) configDir = path.resolve(gitDir, common);
+  } catch {
+  }
+  try {
+    const cfg = fs.readFileSync(path.join(configDir, "config"), "utf8");
+    if (/^\s*objectformat\s*=\s*sha256\s*$/im.test(cfg)) return 32;
+  } catch {
+  }
+  return 20;
+}
+function trackedAmong(repo, files) {
+  const indexPath = path.join(repo.gitDir, "index");
+  let buf;
+  try {
+    buf = fs.readFileSync(indexPath);
   } catch (err) {
-    const stderr = String(err?.stderr || "");
-    if (/not a git repository|does not appear to be a git repository/i.test(stderr)) return false;
+    if (err?.code === "ENOENT") return [];
     throw new SkillError(
       "TRACKED_DOTENV_UNVERIFIABLE",
-      `git could not be consulted (${err?.code || "unknown error"}), so it cannot be proved that ${whatFor} is untracked. Refusing rather than assuming it is safe.`
+      "The git index exists but could not be read, so tracked status cannot be proved. Refusing."
     );
   }
+  const tracked = trackedPathsFromIndex(buf, { hashLen: repoHashLen(repo.gitDir) });
+  return files.filter((f) => {
+    const rel = path.relative(repo.root, path.resolve(f)).split(path.sep).join("/");
+    return tracked.has(rel);
+  });
 }
+var ENV_FILE_RE = /^\.env(\..+)?$/;
+var PUBLIC_ENV_RE = /^\.env\.(example|sample|template)$/;
 function assertNotTrackedByGit(file) {
   const dir = path.dirname(path.resolve(file));
-  const base = path.basename(file);
-  if (!insideGitWorkTree(dir, "this key file")) return { checked: true, tracked: false };
-  let out;
-  try {
-    out = execFileSync("git", ["ls-files", "-z", "--", base], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8"
-    });
-  } catch {
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      "git could not report whether this key file is tracked. Refusing to use it."
-    );
-  }
-  if (out.split("\0").filter(Boolean).length) {
+  const repo = findGitRepo(dir);
+  if (!repo) return { checked: true, tracked: false };
+  const hits = trackedAmong(repo, [file]);
+  if (hits.length) {
+    const base = path.basename(file);
     throw new SkillError(
       "TRACKED_KEYFILE",
       `${base} is tracked by git. A committed key is one push from being public \u2014 untrack it (git rm --cached ${base}) and gitignore it before using it to sign.`
@@ -10269,37 +10374,11 @@ function assertNoTrackedDotEnv(cwd = process.cwd()) {
     );
   }
   if (candidates.length === 0) return { checked: true, tracked: false, candidates: [] };
-  let insideRepo;
-  try {
-    insideRepo = execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-      cwd,
-      stdio: ["ignore", "pipe", "pipe"],
-      encoding: "utf8"
-    }).trim() === "true";
-  } catch (err) {
-    const stderr = String(err?.stderr || "");
-    const notARepo = /not a git repository|does not appear to be a git repository/i.test(stderr);
-    if (notARepo) return { checked: true, tracked: false, candidates };
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      `Found ${candidates.length} .env file(s) here, but git could not be consulted (${err?.code || "unknown error"}), so it cannot be proved they are untracked. Refusing to use hot-wallet keys in this directory.`
-    );
-  }
-  if (!insideRepo) return { checked: true, tracked: false, candidates };
-  let out;
-  try {
-    out = execFileSync("git", ["ls-files", "-z", "--", ...candidates], {
-      cwd,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8"
-    });
-  } catch {
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      "git could not report whether the .env file(s) in this directory are tracked. Refusing to use hot-wallet keys rather than assuming they are safe."
-    );
-  }
-  const tracked = out.split("\0").filter(Boolean);
+  const repo = findGitRepo(cwd);
+  if (!repo) return { checked: true, tracked: false, candidates };
+  const tracked = trackedAmong(repo, candidates.map((f) => path.join(cwd, f))).map(
+    (f) => path.basename(f)
+  );
   if (tracked.length) {
     throw new SkillError(
       "TRACKED_DOTENV",
@@ -10313,7 +10392,7 @@ function assertNoTrackedDotEnv(cwd = process.cwd()) {
 import fs3 from "node:fs";
 import path3 from "node:path";
 import os2 from "node:os";
-import crypto3 from "node:crypto";
+import crypto4 from "node:crypto";
 
 // node_modules/viem/_esm/utils/getAction.js
 function getAction(client, actionFn, name) {
@@ -21504,7 +21583,7 @@ function decryptKeystoreV3(keystore, passphrase) {
     if (!n || !r || !p || !dklen || !salt) {
       throw new SkillError("BAD_KEYSTORE", "The keystore scrypt parameters are incomplete.");
     }
-    derived = crypto3.scryptSync(pass, Buffer.from(salt, "hex"), dklen, {
+    derived = crypto4.scryptSync(pass, Buffer.from(salt, "hex"), dklen, {
       N: n,
       r,
       p,
@@ -21520,7 +21599,7 @@ function decryptKeystoreV3(keystore, passphrase) {
     if (!iterations || !dklen || !salt) {
       throw new SkillError("BAD_KEYSTORE", "The keystore pbkdf2 parameters are incomplete.");
     }
-    derived = crypto3.pbkdf2Sync(pass, Buffer.from(salt, "hex"), iterations, dklen, "sha256");
+    derived = crypto4.pbkdf2Sync(pass, Buffer.from(salt, "hex"), iterations, dklen, "sha256");
   } else {
     throw new SkillError("BAD_KEYSTORE", `Unsupported keystore KDF "${c.kdf}".`);
   }
@@ -21535,7 +21614,7 @@ function decryptKeystoreV3(keystore, passphrase) {
   if (c.cipher !== "aes-128-ctr") {
     throw new SkillError("BAD_KEYSTORE", `Unsupported keystore cipher "${c.cipher}".`);
   }
-  const decipher = crypto3.createDecipheriv(
+  const decipher = crypto4.createDecipheriv(
     "aes-128-ctr",
     derived.subarray(0, 16),
     Buffer.from(c.cipherparams.iv, "hex")
@@ -21557,7 +21636,7 @@ function timingSafeEqualHex(a, b) {
   const ab = Buffer.from(String(a).toLowerCase(), "hex");
   const bb = Buffer.from(String(b).toLowerCase(), "hex");
   if (ab.length === 0 || ab.length !== bb.length) return false;
-  return crypto3.timingSafeEqual(ab, bb);
+  return crypto4.timingSafeEqual(ab, bb);
 }
 function looksLikeKeystore(text) {
   const t = String(text).trimStart();
@@ -22107,7 +22186,7 @@ function checkExpiry({
 // scripts/src/lib/blacklist.mjs
 import fs4 from "node:fs";
 import path4 from "node:path";
-import crypto4 from "node:crypto";
+import crypto5 from "node:crypto";
 import { fileURLToPath } from "node:url";
 var BlacklistError = class extends Error {
   constructor(code, message) {
@@ -22142,7 +22221,7 @@ function parseBlacklist(doc) {
     }
     addresses.push(e.address);
   }
-  const digest = crypto4.createHash("sha256").update(JSON.stringify(addresses), "utf8").digest("hex");
+  const digest = crypto5.createHash("sha256").update(JSON.stringify(addresses), "utf8").digest("hex");
   if (typeof provenance.addressesSha256 !== "string" || !provenance.addressesSha256) {
     throw new BlacklistError("BLACKLIST_UNAVAILABLE", "Blacklist provenance digest is missing.");
   }
@@ -22231,7 +22310,7 @@ function assertNotBlacklisted(targets, blacklist) {
 import fs5 from "node:fs";
 import path5 from "node:path";
 import os3 from "node:os";
-import crypto5 from "node:crypto";
+import crypto6 from "node:crypto";
 var LOCK_STALE_MS = 6e4;
 var LOCK_WAIT_MS = 1e4;
 var LOCK_POLL_MS = 25;
@@ -22261,7 +22340,7 @@ function withLock(fn) {
     try {
       const age = Date.now() - fs5.statSync(file).mtimeMs;
       if (age > LOCK_STALE_MS) {
-        const stolen = `${file}.stale.${crypto5.randomBytes(4).toString("hex")}`;
+        const stolen = `${file}.stale.${crypto6.randomBytes(4).toString("hex")}`;
         try {
           fs5.renameSync(file, stolen);
           fs5.unlinkSync(stolen);
@@ -22302,7 +22381,7 @@ function statePath(rozoPaymentId) {
 function writeAtomic(file, data) {
   const dir = path5.dirname(file);
   fs5.mkdirSync(dir, { recursive: true, mode: 448 });
-  const tmp = path5.join(dir, `.${path5.basename(file)}.${crypto5.randomBytes(6).toString("hex")}.tmp`);
+  const tmp = path5.join(dir, `.${path5.basename(file)}.${crypto6.randomBytes(6).toString("hex")}.tmp`);
   const fd = fs5.openSync(tmp, "wx", 384);
   try {
     fs5.writeFileSync(fd, JSON.stringify(data, null, 2) + "\n", "utf8");
@@ -22341,7 +22420,7 @@ function depositDigest(source) {
     amountUnit: source?.amountUnit ?? null,
     lnInvoice: source?.lnInvoice ?? null
   });
-  return crypto5.createHash("sha256").update(canonical, "utf8").digest("hex");
+  return crypto6.createHash("sha256").update(canonical, "utf8").digest("hex");
 }
 function claimSend(rozoPaymentId, intent, { skipCaps = false } = {}) {
   return withLock(() => {

package/scripts/dist/send-sol.js

@@ -11988,10 +11988,10 @@ var require_dist = __commonJS({
 });
 
 // node_modules/uuid/dist/esm-node/rng.js
-import crypto5 from "crypto";
+import crypto6 from "crypto";
 function rng() {
   if (poolPtr > rnds8Pool.length - 16) {
-    crypto5.randomFillSync(rnds8Pool);
+    crypto6.randomFillSync(rnds8Pool);
     poolPtr = 0;
   }
   return rnds8Pool.slice(poolPtr, poolPtr += 16);
@@ -12191,14 +12191,14 @@ var init_v35 = __esm({
 });
 
 // node_modules/uuid/dist/esm-node/md5.js
-import crypto6 from "crypto";
+import crypto7 from "crypto";
 function md5(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return crypto6.createHash("md5").update(bytes).digest();
+  return crypto7.createHash("md5").update(bytes).digest();
 }
 var md5_default;
 var init_md5 = __esm({
@@ -12243,14 +12243,14 @@ var init_v4 = __esm({
 });
 
 // node_modules/uuid/dist/esm-node/sha1.js
-import crypto7 from "crypto";
+import crypto8 from "crypto";
 function sha1(bytes) {
   if (Array.isArray(bytes)) {
     bytes = Buffer.from(bytes);
   } else if (typeof bytes === "string") {
     bytes = Buffer.from(bytes, "utf8");
   }
-  return crypto7.createHash("sha1").update(bytes).digest();
+  return crypto8.createHash("sha1").update(bytes).digest();
 }
 var sha1_default;
 var init_sha1 = __esm({
@@ -32359,43 +32359,148 @@ function chainFamily(chainId) {
 // scripts/src/lib/keys.mjs
 import fs from "node:fs";
 import path from "node:path";
-import { execFileSync } from "node:child_process";
-var ENV_FILE_RE = /^\.env(\..+)?$/;
-var PUBLIC_ENV_RE = /^\.env\.(example|sample|template)$/;
-function insideGitWorkTree(dir, whatFor) {
+import crypto2 from "node:crypto";
+function findGitRepo(dir) {
+  for (const v of ["GIT_DIR", "GIT_WORK_TREE", "GIT_INDEX_FILE"]) {
+    if (process.env[v]) {
+      throw new SkillError(
+        "TRACKED_DOTENV_UNVERIFIABLE",
+        `${v} is set, so the repository layout cannot be resolved by reading the filesystem alone. Unset it (or run from a plain checkout) before using hot-wallet keys.`
+      );
+    }
+  }
+  let cur = path.resolve(dir);
+  for (; ; ) {
+    const dotGit = path.join(cur, ".git");
+    let st = null;
+    try {
+      st = fs.statSync(dotGit);
+    } catch (err) {
+      if (err?.code !== "ENOENT" && err?.code !== "ENOTDIR") {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          `A .git entry here could not be inspected (${err?.code || "error"}), so tracked status cannot be proved. Refusing.`
+        );
+      }
+      st = null;
+    }
+    if (st) {
+      if (st.isDirectory()) return { root: cur, gitDir: dotGit };
+      let text;
+      try {
+        text = fs.readFileSync(dotGit, "utf8");
+      } catch {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          "A .git entry exists here but could not be read, so tracked status cannot be proved. Refusing."
+        );
+      }
+      const m = /^gitdir:\s*(.+)\s*$/m.exec(text);
+      if (!m) {
+        throw new SkillError(
+          "TRACKED_DOTENV_UNVERIFIABLE",
+          "A .git file exists here but is not a recognised gitdir pointer. Refusing."
+        );
+      }
+      return { root: cur, gitDir: path.resolve(cur, m[1]) };
+    }
+    const parent = path.dirname(cur);
+    if (parent === cur) return null;
+    cur = parent;
+  }
+}
+function trackedPathsFromIndex(buf, { hashLen = 20 } = {}) {
+  const fail2 = (why) => new SkillError(
+    "TRACKED_DOTENV_UNVERIFIABLE",
+    `The git index could not be interpreted (${why}), so tracked status cannot be proved. Refusing.`
+  );
+  if (buf.length < 12 + hashLen || buf.toString("latin1", 0, 4) !== "DIRC") throw fail2("bad header");
+  const algo = hashLen === 32 ? "sha256" : "sha1";
+  const expected = buf.subarray(buf.length - hashLen);
+  const actual = crypto2.createHash(algo).update(buf.subarray(0, buf.length - hashLen)).digest();
+  if (!actual.equals(expected)) throw fail2(`${algo} checksum mismatch`);
+  const version4 = buf.readUInt32BE(4);
+  if (version4 !== 2 && version4 !== 3) throw fail2(`unsupported index version ${version4}`);
+  const count = buf.readUInt32BE(8);
+  const paths = /* @__PURE__ */ new Set();
+  const fixed = 40 + hashLen + 2;
+  let off = 12;
+  for (let i = 0; i < count; i++) {
+    const entryStart = off;
+    if (off + fixed > buf.length - hashLen) throw fail2("truncated entry");
+    const flags = buf.readUInt16BE(off + fixed - 2);
+    let nameOff = off + fixed;
+    if (flags & 16384) {
+      if (version4 < 3) throw fail2("extended flags in v2 index");
+      nameOff += 2;
+    }
+    const nameLen = flags & 4095;
+    let end;
+    if (nameLen < 4095) {
+      end = nameOff + nameLen;
+      if (end > buf.length - hashLen) throw fail2("truncated path");
+    } else {
+      end = buf.indexOf(0, nameOff);
+      if (end === -1 || end > buf.length - hashLen) throw fail2("unterminated path");
+    }
+    paths.add(buf.toString("utf8", nameOff, end));
+    const entryLen = end - entryStart;
+    off = entryStart + (Math.floor(entryLen / 8) + 1) * 8;
+  }
+  while (off < buf.length - hashLen) {
+    if (off + 8 > buf.length - hashLen) throw fail2("truncated extension header");
+    const extName = buf.toString("latin1", off, off + 4);
+    const extSize = buf.readUInt32BE(off + 4);
+    const first = extName.charCodeAt(0);
+    if (first >= 97 && first <= 122) {
+      throw fail2(`mandatory index extension "${extName}" (e.g. core.splitIndex) is not supported`);
+    }
+    off += 8 + extSize;
+    if (off > buf.length - hashLen) throw fail2("truncated extension");
+  }
+  return paths;
+}
+function repoHashLen(gitDir) {
+  let configDir = gitDir;
   try {
-    return execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "pipe"],
-      encoding: "utf8"
-    }).trim() === "true";
+    const common = fs.readFileSync(path.join(gitDir, "commondir"), "utf8").trim();
+    if (common) configDir = path.resolve(gitDir, common);
+  } catch {
+  }
+  try {
+    const cfg = fs.readFileSync(path.join(configDir, "config"), "utf8");
+    if (/^\s*objectformat\s*=\s*sha256\s*$/im.test(cfg)) return 32;
+  } catch {
+  }
+  return 20;
+}
+function trackedAmong(repo, files) {
+  const indexPath = path.join(repo.gitDir, "index");
+  let buf;
+  try {
+    buf = fs.readFileSync(indexPath);
   } catch (err) {
-    const stderr = String(err?.stderr || "");
-    if (/not a git repository|does not appear to be a git repository/i.test(stderr)) return false;
+    if (err?.code === "ENOENT") return [];
     throw new SkillError(
       "TRACKED_DOTENV_UNVERIFIABLE",
-      `git could not be consulted (${err?.code || "unknown error"}), so it cannot be proved that ${whatFor} is untracked. Refusing rather than assuming it is safe.`
+      "The git index exists but could not be read, so tracked status cannot be proved. Refusing."
     );
   }
+  const tracked = trackedPathsFromIndex(buf, { hashLen: repoHashLen(repo.gitDir) });
+  return files.filter((f) => {
+    const rel = path.relative(repo.root, path.resolve(f)).split(path.sep).join("/");
+    return tracked.has(rel);
+  });
 }
+var ENV_FILE_RE = /^\.env(\..+)?$/;
+var PUBLIC_ENV_RE = /^\.env\.(example|sample|template)$/;
 function assertNotTrackedByGit(file) {
   const dir = path.dirname(path.resolve(file));
-  const base = path.basename(file);
-  if (!insideGitWorkTree(dir, "this key file")) return { checked: true, tracked: false };
-  let out;
-  try {
-    out = execFileSync("git", ["ls-files", "-z", "--", base], {
-      cwd: dir,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8"
-    });
-  } catch {
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      "git could not report whether this key file is tracked. Refusing to use it."
-    );
-  }
-  if (out.split("\0").filter(Boolean).length) {
+  const repo = findGitRepo(dir);
+  if (!repo) return { checked: true, tracked: false };
+  const hits = trackedAmong(repo, [file]);
+  if (hits.length) {
+    const base = path.basename(file);
     throw new SkillError(
       "TRACKED_KEYFILE",
       `${base} is tracked by git. A committed key is one push from being public \u2014 untrack it (git rm --cached ${base}) and gitignore it before using it to sign.`
@@ -32414,37 +32519,11 @@ function assertNoTrackedDotEnv(cwd = process.cwd()) {
     );
   }
   if (candidates.length === 0) return { checked: true, tracked: false, candidates: [] };
-  let insideRepo;
-  try {
-    insideRepo = execFileSync("git", ["rev-parse", "--is-inside-work-tree"], {
-      cwd,
-      stdio: ["ignore", "pipe", "pipe"],
-      encoding: "utf8"
-    }).trim() === "true";
-  } catch (err) {
-    const stderr = String(err?.stderr || "");
-    const notARepo = /not a git repository|does not appear to be a git repository/i.test(stderr);
-    if (notARepo) return { checked: true, tracked: false, candidates };
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      `Found ${candidates.length} .env file(s) here, but git could not be consulted (${err?.code || "unknown error"}), so it cannot be proved they are untracked. Refusing to use hot-wallet keys in this directory.`
-    );
-  }
-  if (!insideRepo) return { checked: true, tracked: false, candidates };
-  let out;
-  try {
-    out = execFileSync("git", ["ls-files", "-z", "--", ...candidates], {
-      cwd,
-      stdio: ["ignore", "pipe", "ignore"],
-      encoding: "utf8"
-    });
-  } catch {
-    throw new SkillError(
-      "TRACKED_DOTENV_UNVERIFIABLE",
-      "git could not report whether the .env file(s) in this directory are tracked. Refusing to use hot-wallet keys rather than assuming they are safe."
-    );
-  }
-  const tracked = out.split("\0").filter(Boolean);
+  const repo = findGitRepo(cwd);
+  if (!repo) return { checked: true, tracked: false, candidates };
+  const tracked = trackedAmong(repo, candidates.map((f) => path.join(cwd, f))).map(
+    (f) => path.basename(f)
+  );
   if (tracked.length) {
     throw new SkillError(
       "TRACKED_DOTENV",
@@ -32458,7 +32537,7 @@ function assertNoTrackedDotEnv(cwd = process.cwd()) {
 import fs3 from "node:fs";
 import path3 from "node:path";
 import os2 from "node:os";
-import crypto2 from "node:crypto";
+import crypto3 from "node:crypto";
 
 // node_modules/viem/_esm/index.js
 init_keccak256();
@@ -32689,7 +32768,7 @@ function decryptKeystoreV3(keystore, passphrase) {
     if (!n || !r || !p || !dklen || !salt) {
       throw new SkillError("BAD_KEYSTORE", "The keystore scrypt parameters are incomplete.");
     }
-    derived = crypto2.scryptSync(pass, Buffer.from(salt, "hex"), dklen, {
+    derived = crypto3.scryptSync(pass, Buffer.from(salt, "hex"), dklen, {
       N: n,
       r,
       p,
@@ -32705,7 +32784,7 @@ function decryptKeystoreV3(keystore, passphrase) {
     if (!iterations || !dklen || !salt) {
       throw new SkillError("BAD_KEYSTORE", "The keystore pbkdf2 parameters are incomplete.");
     }
-    derived = crypto2.pbkdf2Sync(pass, Buffer.from(salt, "hex"), iterations, dklen, "sha256");
+    derived = crypto3.pbkdf2Sync(pass, Buffer.from(salt, "hex"), iterations, dklen, "sha256");
   } else {
     throw new SkillError("BAD_KEYSTORE", `Unsupported keystore KDF "${c.kdf}".`);
   }
@@ -32720,7 +32799,7 @@ function decryptKeystoreV3(keystore, passphrase) {
   if (c.cipher !== "aes-128-ctr") {
     throw new SkillError("BAD_KEYSTORE", `Unsupported keystore cipher "${c.cipher}".`);
   }
-  const decipher = crypto2.createDecipheriv(
+  const decipher = crypto3.createDecipheriv(
     "aes-128-ctr",
     derived.subarray(0, 16),
     Buffer.from(c.cipherparams.iv, "hex")
@@ -32742,7 +32821,7 @@ function timingSafeEqualHex(a, b) {
   const ab = Buffer.from(String(a).toLowerCase(), "hex");
   const bb = Buffer.from(String(b).toLowerCase(), "hex");
   if (ab.length === 0 || ab.length !== bb.length) return false;
-  return crypto2.timingSafeEqual(ab, bb);
+  return crypto3.timingSafeEqual(ab, bb);
 }
 function looksLikeKeystore(text) {
   const t = String(text).trimStart();
@@ -33292,7 +33371,7 @@ function checkExpiry({
 // scripts/src/lib/blacklist.mjs
 import fs4 from "node:fs";
 import path4 from "node:path";
-import crypto3 from "node:crypto";
+import crypto4 from "node:crypto";
 import { fileURLToPath } from "node:url";
 var BlacklistError = class extends Error {
   constructor(code, message) {
@@ -33327,7 +33406,7 @@ function parseBlacklist(doc) {
     }
     addresses.push(e.address);
   }
-  const digest = crypto3.createHash("sha256").update(JSON.stringify(addresses), "utf8").digest("hex");
+  const digest = crypto4.createHash("sha256").update(JSON.stringify(addresses), "utf8").digest("hex");
   if (typeof provenance.addressesSha256 !== "string" || !provenance.addressesSha256) {
     throw new BlacklistError("BLACKLIST_UNAVAILABLE", "Blacklist provenance digest is missing.");
   }
@@ -33416,7 +33495,7 @@ function assertNotBlacklisted(targets, blacklist) {
 import fs5 from "node:fs";
 import path5 from "node:path";
 import os3 from "node:os";
-import crypto4 from "node:crypto";
+import crypto5 from "node:crypto";
 var LOCK_STALE_MS = 6e4;
 var LOCK_WAIT_MS = 1e4;
 var LOCK_POLL_MS = 25;
@@ -33446,7 +33525,7 @@ function withLock(fn) {
     try {
       const age = Date.now() - fs5.statSync(file).mtimeMs;
       if (age > LOCK_STALE_MS) {
-        const stolen = `${file}.stale.${crypto4.randomBytes(4).toString("hex")}`;
+        const stolen = `${file}.stale.${crypto5.randomBytes(4).toString("hex")}`;
         try {
           fs5.renameSync(file, stolen);
           fs5.unlinkSync(stolen);
@@ -33487,7 +33566,7 @@ function statePath(rozoPaymentId) {
 function writeAtomic(file, data) {
   const dir = path5.dirname(file);
   fs5.mkdirSync(dir, { recursive: true, mode: 448 });
-  const tmp = path5.join(dir, `.${path5.basename(file)}.${crypto4.randomBytes(6).toString("hex")}.tmp`);
+  const tmp = path5.join(dir, `.${path5.basename(file)}.${crypto5.randomBytes(6).toString("hex")}.tmp`);
   const fd = fs5.openSync(tmp, "wx", 384);
   try {
     fs5.writeFileSync(fd, JSON.stringify(data, null, 2) + "\n", "utf8");
@@ -33526,7 +33605,7 @@ function depositDigest(source) {
     amountUnit: source?.amountUnit ?? null,
     lnInvoice: source?.lnInvoice ?? null
   });
-  return crypto4.createHash("sha256").update(canonical, "utf8").digest("hex");
+  return crypto5.createHash("sha256").update(canonical, "utf8").digest("hex");
 }
 function claimSend(rozoPaymentId, intent, { skipCaps = false } = {}) {
   return withLock(() => {