@themoltnet/legreffier 0.32.1 → 0.32.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/index.js +15 -7
- package/package.json +4 -4
package/dist/index.js
CHANGED
|
@@ -7707,12 +7707,19 @@ function buildGhTokenRule() {
|
|
|
7707
7707
|
"",
|
|
7708
7708
|
"> **STRICT RULE — read this before every `gh` call.**",
|
|
7709
7709
|
">",
|
|
7710
|
-
"> When `GIT_CONFIG_GLOBAL` is set (matches `.moltnet/<agent>/gitconfig`),
|
|
7711
|
-
"> **MUST NOT** run bare `gh <command>`. You **MUST** prefix
|
|
7712
|
-
"> with a `GH_TOKEN` resolved from an **absolute path** to
|
|
7713
|
-
"> Running bare `gh` silently falls back to the human personal
|
|
7714
|
-
"> attributes the action to the wrong identity — this is a
|
|
7715
|
-
"> not a warning.",
|
|
7710
|
+
"> When `GIT_CONFIG_GLOBAL` is set (matches `.moltnet/<agent>/gitconfig`), the",
|
|
7711
|
+
"> default is: you **MUST NOT** run bare `gh <command>`. You **MUST** prefix",
|
|
7712
|
+
"> every `gh` call with a `GH_TOKEN` resolved from an **absolute path** to",
|
|
7713
|
+
"> `moltnet.json`. Running bare `gh` silently falls back to the human personal",
|
|
7714
|
+
"> token and attributes the action to the wrong identity — this is a",
|
|
7715
|
+
"> correctness bug, not a warning.",
|
|
7716
|
+
">",
|
|
7717
|
+
"> **Exception — `human` authorship mode**: when `MOLTNET_COMMIT_AUTHORSHIP=human`",
|
|
7718
|
+
"> in `.moltnet/<agent>/env`, `gh pr ...` and `gh issue ...` **must** run bare",
|
|
7719
|
+
"> (no `GH_TOKEN`) so the PR/issue appears as authored by the human. All other",
|
|
7720
|
+
"> `gh` calls (including `gh api repos/.../contents/...`) still require the agent",
|
|
7721
|
+
"> token. `git push` is not a `gh` call and always uses the agent token via the",
|
|
7722
|
+
"> gitconfig-configured credential helper.",
|
|
7716
7723
|
"",
|
|
7717
7724
|
"## The only correct form",
|
|
7718
7725
|
"",
|
|
@@ -7749,7 +7756,8 @@ function buildGhTokenRule() {
|
|
|
7749
7756
|
"",
|
|
7750
7757
|
"## Forbidden patterns",
|
|
7751
7758
|
"",
|
|
7752
|
-
"- `gh <command>` — bare, no `GH_TOKEN`. **Never
|
|
7759
|
+
"- `gh <command>` — bare, no `GH_TOKEN`. **Never** (except the `human` mode",
|
|
7760
|
+
" write-op carve-out for `gh pr` / `gh issue` described in the header above).",
|
|
7753
7761
|
"- `GH_TOKEN=$(... --credentials \"$(dirname \"$GIT_CONFIG_GLOBAL\")/moltnet.json\") gh ...`",
|
|
7754
7762
|
" — uses the raw relative path. Breaks in worktrees.",
|
|
7755
7763
|
"- `GH_TOKEN=$(... --credentials \"./moltnet.json\") gh ...` — relative. Breaks.",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@themoltnet/legreffier",
|
|
3
|
-
"version": "0.32.
|
|
3
|
+
"version": "0.32.2",
|
|
4
4
|
"description": "LeGreffier — attribution and measured memory for AI coding agents.",
|
|
5
5
|
"license": "AGPL-3.0-only",
|
|
6
6
|
"type": "module",
|
|
@@ -34,9 +34,9 @@
|
|
|
34
34
|
"vitest": "^3.0.0",
|
|
35
35
|
"@moltnet/api-client": "0.1.0",
|
|
36
36
|
"@moltnet/crypto-service": "0.1.0",
|
|
37
|
-
"@themoltnet/
|
|
38
|
-
"@themoltnet/
|
|
39
|
-
"@themoltnet/
|
|
37
|
+
"@themoltnet/github-agent": "0.23.2",
|
|
38
|
+
"@themoltnet/sdk": "0.91.0",
|
|
39
|
+
"@themoltnet/design-system": "0.6.0"
|
|
40
40
|
},
|
|
41
41
|
"scripts": {
|
|
42
42
|
"dev": "vite build --watch",
|