@themoltnet/legreffier 0.32.2 → 0.32.4

package/dist/index.js

@@ -5,8 +5,8 @@ import { basename, dirname, isAbsolute, join } from "node:path";
 import { Box, Text, render, useApp, useInput } from "ink";
 import { useEffect, useReducer, useRef, useState } from "react";
 import { jsx, jsxs } from "react/jsx-runtime";
-import { createSign } from "node:crypto";
-import { createHash, randomBytes } from "crypto";
+import { createHash, createSign } from "node:crypto";
+import crypto, { createHash as createHash$1, randomBytes } from "crypto";
 import { access, chmod, copyFile, mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { homedir } from "node:os";
 import { parse, stringify } from "smol-toml";
@@ -1415,6 +1415,7 @@ function problemToError(problem, statusCode) {
 		detail: problem.detail
 	});
 }
+new TextEncoder();
 //#endregion
 //#region ../../node_modules/.pnpm/multiformats@13.4.2/node_modules/multiformats/dist/src/bytes.js
 function equals$1(aa, bb) {
@@ -1631,12 +1632,12 @@ var Codec = class {
 		return this.decoder.decode(input);
 	}
 };
-function from({ name, prefix, encode, decode }) {
+function from$1({ name, prefix, encode, decode }) {
 	return new Codec(name, prefix, encode, decode);
 }
 function baseX({ name, prefix, alphabet }) {
 	const { encode, decode } = _brrp__multiformats_scope_baseX(alphabet, name);
-	return from({
+	return from$1({
 		prefix,
 		name,
 		encode,
@@ -1691,7 +1692,7 @@ function createAlphabetIdx(alphabet) {
 */
 function rfc4648({ name, prefix, bitsPerChar, alphabet }) {
 	const alphabetIdx = createAlphabetIdx(alphabet);
-	return from({
+	return from$1({
 		prefix,
 		name,
 		encode(input) {
@@ -2728,7 +2729,7 @@ var _SHA512 = class extends SHA2_64B {
 	}
 };
 /** SHA2-512 hash function from RFC 4634. */
-var sha512 = /* @__PURE__ */ createHasher$1(() => new _SHA512(), /* @__PURE__ */ oidNist(3));
+var sha512$1 = /* @__PURE__ */ createHasher$1(() => new _SHA512(), /* @__PURE__ */ oidNist(3));
 //#endregion
 //#region ../../node_modules/.pnpm/@noble+curves@2.0.1/node_modules/@noble/curves/utils.js
 /**
@@ -4567,7 +4568,7 @@ var ed25519_Point = /* @__PURE__ */ edwards(ed25519_CURVE$1, { uvRatio: uvRatio$
 var Fp = ed25519_Point.Fp;
 var Fn = ed25519_Point.Fn;
 function ed(opts) {
-	return eddsa(ed25519_Point, sha512, Object.assign({ adjustScalarBytes }, opts));
+	return eddsa(ed25519_Point, sha512$1, Object.assign({ adjustScalarBytes }, opts));
 }
 /**
 * ed25519 curve with EdDSA signatures.
@@ -4666,7 +4667,7 @@ createHasher(ed25519_Point, (scalars) => map_to_curve_elligator2_edwards25519(sc
 	m: 1,
 	k: 128,
 	expand: "xmd",
-	hash: sha512
+	hash: sha512$1
 });
 var SQRT_M1 = ED25519_SQRT_M1;
 var SQRT_AD_MINUS_ONE = /* @__PURE__ */ BigInt("25063068953384623474111414158702152701244531502492656460079210482610430750235");
@@ -4807,11 +4808,11 @@ var _RistrettoPoint = class _RistrettoPoint extends PrimeEdwardsPoint {
 var ristretto255_hasher = {
 	Point: _RistrettoPoint,
 	hashToCurve(msg, options) {
-		const xmd = expand_message_xmd(msg, options?.DST || "ristretto255_XMD:SHA-512_R255MAP_RO_", 64, sha512);
+		const xmd = expand_message_xmd(msg, options?.DST || "ristretto255_XMD:SHA-512_R255MAP_RO_", 64, sha512$1);
 		return ristretto255_hasher.deriveToCurve(xmd);
 	},
 	hashToScalar(msg, options = { DST: _DST_scalar }) {
-		const xmd = expand_message_xmd(msg, options.DST, 64, sha512);
+		const xmd = expand_message_xmd(msg, options.DST, 64, sha512$1);
 		return Fn.create(bytesToNumberLE(xmd));
 	},
 	deriveToCurve(bytes) {
@@ -4824,7 +4825,7 @@ var ristretto255_hasher = {
 createORPF({
 	name: "ristretto255-SHA512",
 	Point: _RistrettoPoint,
-	hash: sha512,
+	hash: sha512$1,
 	hashToGroup: ristretto255_hasher.hashToCurve,
 	hashToScalar: ristretto255_hasher.hashToScalar
 });
@@ -5316,7 +5317,7 @@ var wNAF = (n) => {
 * Uses @noble/ed25519 for pure TypeScript implementation
 */
 etc.sha512Sync = (...m) => {
-	const hash = createHash("sha512");
+	const hash = createHash$1("sha512");
 	m.forEach((msg) => hash.update(msg));
 	return hash.digest();
 };
@@ -5335,7 +5336,7 @@ var DOMAIN_PREFIX = "moltnet:v1";
 * newline, and encoding differences between runtimes.
 */
 function buildSigningBytes(message, nonce) {
-	const msgHash = createHash("sha256").update(Buffer.from(message, "utf-8")).digest();
+	const msgHash = createHash$1("sha256").update(Buffer.from(message, "utf-8")).digest();
 	const nonceBytes = Buffer.from(nonce, "utf-8");
 	const prefix = Buffer.from(DOMAIN_PREFIX, "utf-8");
 	const buf = Buffer.alloc(prefix.length + 4 + msgHash.length + 4 + nonceBytes.length);
@@ -5363,7 +5364,7 @@ var cryptoService = {
 		};
 	},
 	generateFingerprint(publicKeyBytes) {
-		return (createHash("sha256").update(publicKeyBytes).digest("hex").slice(0, 16).toUpperCase().match(/.{4}/g) ?? []).join("-");
+		return (createHash$1("sha256").update(publicKeyBytes).digest("hex").slice(0, 16).toUpperCase().match(/.{4}/g) ?? []).join("-");
 	},
 	parsePublicKey(publicKey) {
 		const base64 = publicKey.replace(/^ed25519:/, "");
@@ -5445,6 +5446,71 @@ var cryptoService = {
 	}
 };
 //#endregion
+//#region ../../libs/crypto-service/src/executor-attestation.ts
+etc.sha512Sync = (...m) => {
+	const hash = createHash("sha512");
+	m.forEach((msg) => hash.update(msg));
+	return hash.digest();
+};
+new TextEncoder();
+new TextDecoder();
+//#endregion
+//#region ../../node_modules/.pnpm/multiformats@13.4.2/node_modules/multiformats/dist/src/hashes/hasher.js
+var DEFAULT_MIN_DIGEST_LENGTH = 20;
+function from({ name, code, encode, minDigestLength, maxDigestLength }) {
+	return new Hasher(name, code, encode, minDigestLength, maxDigestLength);
+}
+/**
+* Hasher represents a hashing algorithm implementation that produces as
+* `MultihashDigest`.
+*/
+var Hasher = class {
+	name;
+	code;
+	encode;
+	minDigestLength;
+	maxDigestLength;
+	constructor(name, code, encode, minDigestLength, maxDigestLength) {
+		this.name = name;
+		this.code = code;
+		this.encode = encode;
+		this.minDigestLength = minDigestLength ?? DEFAULT_MIN_DIGEST_LENGTH;
+		this.maxDigestLength = maxDigestLength;
+	}
+	digest(input, options) {
+		if (options?.truncate != null) {
+			if (options.truncate < this.minDigestLength) throw new Error(`Invalid truncate option, must be greater than or equal to ${this.minDigestLength}`);
+			if (this.maxDigestLength != null && options.truncate > this.maxDigestLength) throw new Error(`Invalid truncate option, must be less than or equal to ${this.maxDigestLength}`);
+		}
+		if (input instanceof Uint8Array) {
+			const result = this.encode(input);
+			if (result instanceof Uint8Array) return createDigest(result, this.code, options?.truncate);
+			return result.then((digest) => createDigest(digest, this.code, options?.truncate));
+		} else throw Error("Unknown type, must be binary type");
+	}
+};
+/**
+* Create a Digest from the passed uint8array and code, optionally truncating it
+* first.
+*/
+function createDigest(digest, code, truncate) {
+	if (truncate != null && truncate !== digest.byteLength) {
+		if (truncate > digest.byteLength) throw new Error(`Invalid truncate option, must be less than or equal to ${digest.byteLength}`);
+		digest = digest.subarray(0, truncate);
+	}
+	return create(code, digest);
+}
+from({
+	name: "sha2-256",
+	code: 18,
+	encode: (input) => coerce(crypto.createHash("sha256").update(input).digest())
+});
+from({
+	name: "sha2-512",
+	code: 19,
+	encode: (input) => coerce(crypto.createHash("sha512").update(input).digest())
+});
+//#endregion
 //#region ../../node_modules/.pnpm/cborg@4.5.8/node_modules/cborg/lib/is.js
 var objectTypeNames = [
 	"Object",
@@ -7253,7 +7319,7 @@ _decodeOptions.tags[CID_CBOR_TAG] = cidDecoder;
 * for use with git commit signing and SSH authentication.
 */
 if (!etc.sha512Sync) etc.sha512Sync = (...m) => {
-	const hash = createHash("sha512");
+	const hash = createHash$1("sha512");
 	m.forEach((msg) => hash.update(msg));
 	return hash.digest();
 };
@@ -7638,15 +7704,6 @@ var SKILLS = [
 		name: "legreffier",
 		files: ["SKILL.md"]
 	},
-	{
-		name: "legreffier-scan",
-		files: [
-			"SKILL.md",
-			"references/scan-flows.md",
-			"references/path-discovery.md",
-			"references/content-templates.md"
-		]
-	},
 	{
 		name: "legreffier-explore",
 		files: ["SKILL.md", "references/exploration-pack-plan.yaml"]
@@ -7730,7 +7787,13 @@ function buildGhTokenRule() {
 		"# 2. Refuse to proceed if the file does not exist at that absolute path.",
 		"[ -f \"$CREDS\" ] || { echo \"FATAL: moltnet.json not found at $CREDS\" >&2; exit 1; }",
 		"",
-		"# 3. Call gh with GH_TOKEN inlined.",
+		"# 3. Call gh with GH_TOKEN inlined. Use the `moltnet` binary if it",
+		"#    is on PATH, otherwise fall back to `npx @themoltnet/cli`. Never",
+		"#    reference `$MOLTNET_CLI` here — it may be unset in ad-hoc shells",
+		"#    and expanding to empty silently swallows the subcommand, producing",
+		"#    an empty GH_TOKEN and falling back to your personal auth.",
+		"GH_TOKEN=$(moltnet github token --credentials \"$CREDS\") gh <command>",
+		"# or, if `moltnet` is not installed:",
 		"GH_TOKEN=$(npx @themoltnet/cli github token --credentials \"$CREDS\") gh <command>",
 		"```",
 		"",
@@ -7746,7 +7809,7 @@ function buildGhTokenRule() {
 		"`$(dirname \"$GIT_CONFIG_GLOBAL\")` resolves differently depending on where you are.",
 		"When it resolves to a non-existent directory:",
 		"",
-		"- `npx @themoltnet/cli github token` prints `no credentials found` to stderr,",
+		"- `moltnet github token` (or `npx @themoltnet/cli github token`) prints `no credentials found` to stderr,",
 		"- the command substitution yields an empty `GH_TOKEN`,",
 		"- `gh` silently falls back to your personal token,",
 		"- the resulting API call is attributed to the **human**, not the agent.",
@@ -7763,6 +7826,11 @@ function buildGhTokenRule() {
 		"- `GH_TOKEN=$(... --credentials \"./moltnet.json\") gh ...` — relative. Breaks.",
 		"- `GH_TOKEN=$(... --credentials \"~/.moltnet/...\") gh ...` — `~` is not expanded",
 		"  inside double quotes; use `$HOME` or the literal absolute path.",
+		"- `GH_TOKEN=$($MOLTNET_CLI github token ...) gh ...` — do **not** reference the",
+		"  `$MOLTNET_CLI` variable in this rule. It is only set inside the legreffier",
+		"  skill session; in ad-hoc shells it expands to empty, the `github token`",
+		"  subcommand is swallowed, `GH_TOKEN` is empty, and `gh` silently falls back",
+		"  to the human token. Hardcode `moltnet` or `npx @themoltnet/cli`.",
 		"",
 		"## Allowed `gh` subcommands",
 		"",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/legreffier",
-  "version": "0.32.2",
+  "version": "0.32.4",
   "description": "LeGreffier — attribution and measured memory for AI coding agents.",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -33,17 +33,21 @@
     "vite": "^8.0.0",
     "vitest": "^3.0.0",
     "@moltnet/api-client": "0.1.0",
+    "@themoltnet/design-system": "0.7.2",
+    "@themoltnet/github-agent": "0.23.3",
     "@moltnet/crypto-service": "0.1.0",
-    "@themoltnet/github-agent": "0.23.2",
-    "@themoltnet/sdk": "0.91.0",
-    "@themoltnet/design-system": "0.6.0"
+    "@themoltnet/sdk": "0.98.0"
+  },
+  "nx": {
+    "tags": [
+      "type:client",
+      "scope:diary",
+      "platform:cli"
+    ]
   },
   "scripts": {
     "dev": "vite build --watch",
-    "build": "vite build",
     "typecheck": "tsc -b --emitDeclarationOnly && tsc -b tsconfig.test.json --force",
-    "test": "vitest run --passWithNoTests",
-    "lint": "eslint src/",
     "check:pack": "tsx ../../tools/src/check-pack.ts --package ."
   }
 }