@themoltnet/legreffier 0.32.5 → 0.33.1

package/README.md

@@ -357,6 +357,21 @@ Once inside a coding session, activate the skill:
 This sets `GIT_CONFIG_GLOBAL` to the agent's gitconfig, verifies the signing
 key, and confirms readiness. All subsequent git commits use the agent identity.
 
+LeGreffier keeps warm activation fast with a local cache at
+`.moltnet/<agent>/activation-cache.json`. The cache stores derived activation
+state plus hashes of the env file, gitconfig, credentials, and SSH public key.
+If the hashes still match, activation skips remote identity and diary lookup.
+Transport is still detected per session and is not stored in the cache. If
+anything changes, the skill runs the full ceremony and refreshes the cache.
+
+Manual cache commands:
+
+```bash
+moltnet agents activation validate --agent <agent-name> --dir . --json
+moltnet agents activation refresh --agent <agent-name> --dir . --json
+moltnet agents activation clear --agent <agent-name> --dir .
+```
+
 ## Verification
 
 ```bash

package/dist/index.js

@@ -7905,6 +7905,10 @@ function buildCodexRules(_agentName) {
 		"    decision = \"allow\",",
 		")",
 		"prefix_rule(",
+		"    pattern = [\"moltnet\", \"agents\", \"activation\"],",
+		"    decision = \"allow\",",
+		")",
+		"prefix_rule(",
 		"    pattern = [\"moltnet\", \"sign\"],",
 		"    decision = \"allow\",",
 		")",
@@ -7974,11 +7978,13 @@ function buildPermissions(agentName) {
 		"Bash(moltnet diary create-signed *)",
 		"Bash(moltnet diary verify *)",
 		"Bash(moltnet github token *)",
+		"Bash(moltnet agents activation *)",
 		"Bash(npx @themoltnet/cli sign *)",
 		"Bash(npx @themoltnet/cli diary commit *)",
 		"Bash(npx @themoltnet/cli diary create-signed *)",
 		"Bash(npx @themoltnet/cli diary verify *)",
 		"Bash(npx @themoltnet/cli github token *)",
+		"Bash(npx @themoltnet/cli agents activation *)",
 		"Bash(ln -s *)",
 		"Bash(echo \"GIT_CONFIG_GLOBAL=*\")",
 		`mcp__${agentName}__*`
@@ -8127,7 +8133,8 @@ async function writeEnvFile(opts) {
 		[`${opts.prefix}_GITHUB_APP_PRIVATE_KEY_PATH`, q(opts.pemPath)],
 		[`${opts.prefix}_GITHUB_APP_INSTALLATION_ID`, q(opts.installationId)],
 		["GIT_CONFIG_GLOBAL", q(`.moltnet/${opts.agentName}/gitconfig`)],
-		["MOLTNET_AGENT_NAME", q(opts.agentName)]
+		["MOLTNET_AGENT_NAME", q(opts.agentName)],
+		...opts.fingerprint ? [["MOLTNET_FINGERPRINT", q(opts.fingerprint)]] : []
 	];
 	const managedKeys = new Set(managedEntries.map(([k]) => k));
 	let existingLines = [];
@@ -8340,7 +8347,8 @@ async function runAgentSetupPhase(opts) {
 		clientSecret,
 		appId,
 		pemPath,
-		installationId
+		installationId,
+		fingerprint
 	});
 	await appendAuthorshipVars(configDir, opts.humanGitIdentity ?? resolveHumanGitIdentity(), opts.commitAuthorship);
 	await clearState(configDir);
@@ -9799,7 +9807,8 @@ async function runPortRewritePhase(opts) {
 		clientSecret: config.oauth2.client_secret,
 		appId: config.github.app_id,
 		pemPath: newPem,
-		installationId: config.github.installation_id
+		installationId: config.github.installation_id,
+		fingerprint: config.keys.fingerprint
 	});
 	await appendAuthorshipVars(targetDir, resolveHumanGitIdentity());
 	return {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@themoltnet/legreffier",
-  "version": "0.32.5",
+  "version": "0.33.1",
   "description": "LeGreffier — attribution and measured memory for AI coding agents.",
   "license": "AGPL-3.0-only",
   "type": "module",
@@ -32,11 +32,11 @@
     "typescript": "^5.3.3",
     "vite": "^8.0.0",
     "vitest": "^3.0.0",
-    "@themoltnet/github-agent": "0.23.5",
-    "@moltnet/crypto-service": "0.1.0",
-    "@themoltnet/sdk": "0.98.0",
     "@moltnet/api-client": "0.1.0",
-    "@themoltnet/design-system": "0.7.2"
+    "@themoltnet/design-system": "0.7.2",
+    "@themoltnet/github-agent": "0.23.5",
+    "@themoltnet/sdk": "0.99.0",
+    "@moltnet/crypto-service": "0.1.0"
   },
   "nx": {
     "tags": [