euthyna 0.9.0 → 0.9.1

package/.agents/skills/euthyna/references/fact-producers.md

@@ -99,7 +99,7 @@ node <euthyna 仓库>/bin/euthyna.js history --base <改前版本> --no-origins
 ### 输出长什么样（真实捕获）
 
 ```
-euthyna euthyna-history — 被删除代码的来源归属与安全分类
+euthyna-history — 被删除代码的来源归属与安全分类
 目标: D:/axe-core/axe-core
 范围: 8390a5a9…..397f5fce…
 
@@ -243,7 +243,7 @@ node <euthyna 仓库>/bin/euthyna.js coverage `
 ### 输出长什么样（真实捕获，一次查询命中两种结果）
 
 ```
-euthyna euthyna-coverage — 符号调用计数（只能证伪）
+euthyna-coverage — 符号调用计数（只能证伪）
 
 已确证 (1)
   • 符号 cleanup 在本次测试运行中一次都没有被调用（调用计数为 0）

package/.agents/skills/euthyna-en/references/fact-producers.md

@@ -89,7 +89,7 @@ When the fork point is uncertain, use the result of `git merge-base <target bran
 ### What the output looks like (real capture)
 
 ```
-euthyna euthyna-history — attribution and security classification of deleted code
+euthyna-history — attribution and security classification of deleted code
 Target: D:/axe-core/axe-core
 Range: 8390a5a9…..397f5fce…
 
@@ -217,7 +217,7 @@ node <euthyna repo>/bin/euthyna.js coverage `
 ### What the output looks like (real capture; one query hitting both result kinds)
 
 ```
-euthyna euthyna-coverage — symbol invocation counts (can only falsify)
+euthyna-coverage — symbol invocation counts (can only falsify)
 
 Established (1)
   • Symbol cleanup was never invoked in this test run (invocation count 0) — any behavior depending on it was never exercised

package/__init__.py

@@ -2,7 +2,7 @@
 
 The CLI (``bin/euthyna.js``, installed by ``npm install -g euthyna``) produces
 the deterministic facts; this plugin registers ``/euthyna`` so a user can invoke
-the four CLI subcommands from inside a Hermes session without leaving chat. The
+the CLI's subcommands from inside a Hermes session without leaving chat. The
 handler shells out to the real CLI and returns its output verbatim — it does not
 reimplement any measurement, and it injects nothing into the conversation.
 
@@ -15,19 +15,27 @@ CLI prints comes back as the command result.
 import shutil
 import subprocess
 
-# Ponytail: one flat dict, not a command framework — there are exactly four
-# subcommands and the CLI already owns usage/exit codes.
+# The subcommands /euthyna reaches. This is the single source the guard in
+# test/hermes-plugin.test.js compares against the CLI's own dispatch, so a new
+# command there is red here until it is wired — which is how `audit` (the
+# entry point since 0.4.0) went seven releases unnoticed behind a hand-written
+# list of four.
+_FORWARDS = ("audit", "coverage", "deps", "gate", "help", "history")
+
 _USAGE = """euthyna slash command — usage:
 
+  /euthyna audit <path> [<path>...]            history + dependency surface in one run
   /euthyna history <path> [<path> <rev>...]   deleted-code provenance & security classification
   /euthyna coverage <path>                    symbol invocation counts from a coverage run
   /euthyna deps <path>                        dependency pinned versions from lockfiles
   /euthyna gate <report> [--verify]           validate an audit report against the six gates
+  /euthyna help                               the CLI's own usage, with every flag
 
 Args after the subcommand are passed to the CLI unchanged. Requires the CLI:
 npm install -g euthyna (Node >= 20)."""
 
 
+
 def _find_cli():
     """Return the absolute path of the euthyna CLI, or None if not installed."""
     for name in ("euthyna", "euthyna.cmd", "euthyna.exe"):
@@ -40,10 +48,13 @@ def _find_cli():
 def _run(raw_args: str):
     """Handle /euthyna: forward <subcommand> <args...> to the CLI, return its output."""
     argv = raw_args.split()
-    if not argv or argv[0] in ("help", "-h", "--help"):
+    # `-h`/`--help` print this command's own quick usage; bare `help` is forwarded
+    # so the flag list has exactly one owner — the CLI's help, which the skill and
+    # the docs both quote.
+    if not argv or argv[0] in ("-h", "--help"):
         return _USAGE
     sub, rest = argv[0], argv[1:]
-    if sub not in ("history", "coverage", "deps", "gate"):
+    if sub not in _FORWARDS:
         return f"unknown subcommand: {sub}\n\n{_USAGE}"
 
     cli = _find_cli()
@@ -73,8 +84,8 @@ def register(ctx):
     ctx.register_command(
         "euthyna",
         handler=_run,
-        description="euthyna security audit: run history/coverage/deps/gate fact producers",
-        args_hint="<history|coverage|deps|gate> <args…>",
+        description="euthyna security audit: drive the fact-producing CLI (audit is the single entry point)",
+        args_hint="<audit|history|coverage|deps|gate|help> <args…>",
     )
 
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "euthyna",
-  "version": "0.9.0",
-  "description": "Deterministic fact producers for security auditing: which deleted code came from a security fix, and which changed symbols no test ever executed.",
+  "version": "0.9.1",
+  "description": "Audit framework for AI coding agents: produces the deterministic facts a model cannot compute — deleted-code provenance, symbol invocations, dependency pins — and adjudicates every claim against six gates, downgrading what cannot produce evidence to an observation. Not a scanner.",
   "type": "module",
   "main": "./plugin/index.js",
   "bin": {

package/plugin.yaml

@@ -1,6 +1,6 @@
 name: euthyna
-version: 0.9.0
-description: euthyna audit discipline — slash commands that drive the euthyna fact-producing CLI (history / coverage / deps / gate)
+version: 0.9.1
+description: euthyna audit discipline — the /euthyna slash command driving the euthyna CLI, whose single entry point is `euthyna audit`
 license: Apache-2.0
 homepage: https://github.com/slow-stack/euthyna
 tags:

package/src/contract.js

@@ -203,7 +203,10 @@ export function renderReport(report, { write: rawWrite = console.log, lang = DEF
   const unknown = facts.filter(f => f.status === STATUS.UNKNOWN);
 
   write('');
-  write(`euthyna ${producer.name} — ${producer.purpose || ''}`.trim());
+  // The producer name is `euthyna-history`, `euthyna-audit`, …: it already names
+  // the tool, so the header prints it as the contract emits it — the same string
+  // the `--json` `producer` field carries.
+  write(`${producer.name} — ${producer.purpose || ''}`.trim());
   write(`${t('目标: ', 'Target: ')}${subject.repo ?? subject.coverageFile ?? t('(未指定)', '(unspecified)')}`);
   if (subject.base || subject.head) {
     write(