@themoltnet/legreffier 0.32.1 → 0.32.3

package/dist/index.js

@@ -7707,12 +7707,19 @@ function buildGhTokenRule() {
 		"",
 		"> **STRICT RULE — read this before every `gh` call.**",
 		">",
-		"> When `GIT_CONFIG_GLOBAL` is set (matches `.moltnet/<agent>/gitconfig`), you",
-		"> **MUST NOT** run bare `gh <command>`. You **MUST** prefix every `gh` call",
-		"> with a `GH_TOKEN` resolved from an **absolute path** to `moltnet.json`.",
-		"> Running bare `gh` silently falls back to the human personal token and",
-		"> attributes the action to the wrong identity — this is a correctness bug,",
-		"> not a warning.",
+		"> When `GIT_CONFIG_GLOBAL` is set (matches `.moltnet/<agent>/gitconfig`), the",
+		"> default is: you **MUST NOT** run bare `gh <command>`. You **MUST** prefix",
+		"> every `gh` call with a `GH_TOKEN` resolved from an **absolute path** to",
+		"> `moltnet.json`. Running bare `gh` silently falls back to the human personal",
+		"> token and attributes the action to the wrong identity — this is a",
+		"> correctness bug, not a warning.",
+		">",
+		"> **Exception — `human` authorship mode**: when `MOLTNET_COMMIT_AUTHORSHIP=human`",
+		"> in `.moltnet/<agent>/env`, `gh pr ...` and `gh issue ...` **must** run bare",
+		"> (no `GH_TOKEN`) so the PR/issue appears as authored by the human. All other",
+		"> `gh` calls (including `gh api repos/.../contents/...`) still require the agent",
+		"> token. `git push` is not a `gh` call and always uses the agent token via the",
+		"> gitconfig-configured credential helper.",
 		"",
 		"## The only correct form",
 		"",
@@ -7723,7 +7730,13 @@ function buildGhTokenRule() {
 		"# 2. Refuse to proceed if the file does not exist at that absolute path.",
 		"[ -f \"$CREDS\" ] || { echo \"FATAL: moltnet.json not found at $CREDS\" >&2; exit 1; }",
 		"",
-		"# 3. Call gh with GH_TOKEN inlined.",
+		"# 3. Call gh with GH_TOKEN inlined. Use the `moltnet` binary if it",
+		"#    is on PATH, otherwise fall back to `npx @themoltnet/cli`. Never",
+		"#    reference `$MOLTNET_CLI` here — it may be unset in ad-hoc shells",
+		"#    and expanding to empty silently swallows the subcommand, producing",
+		"#    an empty GH_TOKEN and falling back to your personal auth.",
+		"GH_TOKEN=$(moltnet github token --credentials \"$CREDS\") gh <command>",
+		"# or, if `moltnet` is not installed:",
 		"GH_TOKEN=$(npx @themoltnet/cli github token --credentials \"$CREDS\") gh <command>",
 		"```",
 		"",
@@ -7739,7 +7752,7 @@ function buildGhTokenRule() {
 		"`$(dirname \"$GIT_CONFIG_GLOBAL\")` resolves differently depending on where you are.",
 		"When it resolves to a non-existent directory:",
 		"",
-		"- `npx @themoltnet/cli github token` prints `no credentials found` to stderr,",
+		"- `moltnet github token` (or `npx @themoltnet/cli github token`) prints `no credentials found` to stderr,",
 		"- the command substitution yields an empty `GH_TOKEN`,",
 		"- `gh` silently falls back to your personal token,",
 		"- the resulting API call is attributed to the **human**, not the agent.",
@@ -7749,12 +7762,18 @@ function buildGhTokenRule() {
 		"",
 		"## Forbidden patterns",
 		"",
-		"- `gh <command>` — bare, no `GH_TOKEN`. **Never.**",
+		"- `gh <command>` — bare, no `GH_TOKEN`. **Never** (except the `human` mode",
+		"  write-op carve-out for `gh pr` / `gh issue` described in the header above).",
 		"- `GH_TOKEN=$(... --credentials \"$(dirname \"$GIT_CONFIG_GLOBAL\")/moltnet.json\") gh ...`",
 		"  — uses the raw relative path. Breaks in worktrees.",
 		"- `GH_TOKEN=$(... --credentials \"./moltnet.json\") gh ...` — relative. Breaks.",
 		"- `GH_TOKEN=$(... --credentials \"~/.moltnet/...\") gh ...` — `~` is not expanded",
 		"  inside double quotes; use `$HOME` or the literal absolute path.",
+		"- `GH_TOKEN=$($MOLTNET_CLI github token ...) gh ...` — do **not** reference the",
+		"  `$MOLTNET_CLI` variable in this rule. It is only set inside the legreffier",
+		"  skill session; in ad-hoc shells it expands to empty, the `github token`",
+		"  subcommand is swallowed, `GH_TOKEN` is empty, and `gh` silently falls back",
+		"  to the human token. Hardcode `moltnet` or `npx @themoltnet/cli`.",
 		"",
 		"## Allowed `gh` subcommands",
 		"",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/legreffier",
-  "version": "0.32.1",
+  "version": "0.32.3",
   "description": "LeGreffier — attribution and measured memory for AI coding agents.",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -33,10 +33,10 @@
     "vite": "^8.0.0",
     "vitest": "^3.0.0",
     "@moltnet/api-client": "0.1.0",
+    "@themoltnet/design-system": "0.6.0",
+    "@themoltnet/github-agent": "0.23.2",
     "@moltnet/crypto-service": "0.1.0",
-    "@themoltnet/design-system": "0.5.1",
-    "@themoltnet/github-agent": "0.23.1",
-    "@themoltnet/sdk": "0.89.0"
+    "@themoltnet/sdk": "0.91.0"
   },
   "scripts": {
     "dev": "vite build --watch",