gitmark 0.0.71 → 0.0.73

package/.claude/settings.local.json

@@ -7,7 +7,22 @@
       "Bash(npm install)",
       "Bash(npm search txo_parser)",
       "Bash(../gitmark/bin/git-mark)",
-      "Bash(../gitmark/bin/git-mark --genesis abc123:0)"
+      "Bash(../gitmark/bin/git-mark --genesis abc123:0)",
+      "Bash(git config:*)",
+      "Bash(git add:*)",
+      "Bash(git commit -m ':*)",
+      "Bash(git push:*)",
+      "Bash(gh pr create --title 'fix: use --local flag in getPrivkey for per-repo keys' --body ':*)",
+      "Bash(gh pr:*)",
+      "Bash(git checkout:*)",
+      "Bash(git pull:*)",
+      "Bash(git mark:*)",
+      "Bash(gh issue:*)",
+      "Bash(node bin/git-mark.js --version)",
+      "Bash(node bin/git-mark.js -v)",
+      "Bash(npm test:*)",
+      "Bash(gh api:*)",
+      "Bash(convert:*)"
     ],
     "deny": [],
     "ask": [],
@@ -16,4 +31,4 @@
       "/home/melvin/remote/github.com/solidpayorg/solidpayorg"
     ]
   }
-}
+}

package/README.md

@@ -49,6 +49,8 @@ The chain of addresses on Bitcoin mirrors the chain of commits in git. Anyone ca
 | `git mark` | Anchor HEAD commit to Bitcoin |
 | `git mark info` | Show trail state, balance, addresses |
 | `git mark verify` | Verify all marks against Bitcoin |
+| `git mark update` | Update blocktrails.json from git notes |
+| `git mark --version` | Show version |
 
 ## Trail File
 
@@ -58,7 +60,7 @@ The chain of addresses on Bitcoin mirrors the chain of commits in git. Anyone ca
 {
   "version": "0.0.3",
   "profile": "gitmark",
-  "publicKeyBase": "02abc...",
+  "pubkeyBase": "02abc...",
   "chain": "tbtc4",
   "states": ["a1b2c3", "e5f6a7"],
   "txo": [
@@ -68,20 +70,27 @@ The chain of addresses on Bitcoin mirrors the chain of commits in git. Anyone ca
 }
 ```
 
-- **publicKeyBase** — compressed pubkey (02/03 prefix), base for BIP-341 key chaining
+- **pubkeyBase** — compressed pubkey (02/03 prefix), base for BIP-341 key chaining
 - **states** — commit hashes (input to key derivation)
 - **txo** — Bitcoin anchors (TXO URIs, self-contained and verifiable)
 
-Private spending state stored in `.git/blocktrails.json` (never committed).
+Private spending state stored in `gitmark.txo` git config (never committed).
 
-## Key Storage
-
-Your private key is stored in git config:
+## Configuration
 
 ```bash
-git config nostr.privkey <64-char-hex>
+# Private key (auto-generated by init)
+git config --local nostr.privkey <64-char-hex>
+
+# Current UTXO (updated on each mark)
+git config --local gitmark.txo txo:tbtc4:txid:vout?amount=X&commit=Y
+
+# Dirty flag — set to false to keep working tree clean after marking
+git config --local gitmark.dirty false
 ```
 
+When `gitmark.dirty=false`, `git mark` only writes git notes + git config. Run `git mark update` to sync blocktrails.json when ready.
+
 Same secp256k1 key used for Nostr, Bitcoin, and Solid pod authentication.
 
 ## Dependencies

package/bin/git-mark.js

@@ -8,6 +8,7 @@
  *   git mark [--chain tbtc4]
  *   git mark info
  *   git mark verify
+ *   git mark update
  */
 
 import { secp256k1, schnorr } from '@noble/curves/secp256k1';
@@ -15,7 +16,11 @@ import { sha256 } from '@noble/hashes/sha256';
 import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
 import { execSync } from 'child_process';
 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
-import { join } from 'path';
+import { join, dirname } from 'path';
+import { fileURLToPath } from 'url';
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const PKG = JSON.parse(readFileSync(join(__dirname, '..', 'package.json'), 'utf8'));
 
 // --- Constants ---
 const SECP_N = 0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141n;
@@ -183,9 +188,11 @@ async function broadcastTx(rawHex, explorer) {
 
 // --- Git helpers ---
 function gitExec(cmd) { return execSync(cmd, { encoding: 'utf8' }).trim(); }
-function getHead() { return gitExec('git rev-parse HEAD'); }
+function getHead() {
+  try { return gitExec('git rev-parse HEAD'); } catch { return null; }
+}
 function getPrivkey() {
-  try { return gitExec('git config nostr.privkey'); } catch { return null; }
+  try { return gitExec('git config --local nostr.privkey'); } catch { return null; }
 }
 function setPrivkey(key) { gitExec(`git config --local nostr.privkey ${key}`); }
 function isGitRoot() { return existsSync('.git'); }
@@ -199,11 +206,55 @@ function saveTrail(trail) {
   writeFileSync(TRAIL_FILE, JSON.stringify(trail, null, 2) + '\n');
 }
 function loadPrivateState() {
-  if (!existsSync(PRIVATE_FILE)) return null;
-  return JSON.parse(readFileSync(PRIVATE_FILE, 'utf8'));
+  // Try git config first, fall back to legacy file
+  try {
+    const txoUri = gitExec('git config --local gitmark.txo');
+    const parsed = parseTxoUri(txoUri);
+    return { txid: parsed.txid, vout: parsed.vout, amount: parsed.amount };
+  } catch {
+    if (!existsSync(PRIVATE_FILE)) return null;
+    return JSON.parse(readFileSync(PRIVATE_FILE, 'utf8'));
+  }
+}
+function savePrivateState(state, chain, head) {
+  const txoUri = `txo:${chain}:${state.txid}:${state.vout}?amount=${state.amount}${head ? '&commit=' + head : ''}`;
+  gitExec(`git config --local gitmark.txo ${txoUri}`);
+}
+function isDirty() {
+  try { return gitExec('git config --local gitmark.dirty') !== 'false'; } catch { return true; }
 }
-function savePrivateState(state) {
-  writeFileSync(PRIVATE_FILE, JSON.stringify(state, null, 2) + '\n');
+function addGitNote(commitHash, note) {
+  try { gitExec(`git notes add -f -m ${note} ${commitHash}`); } catch { /* ignore if no commits */ }
+}
+function loadTrailFromNotes() {
+  const trail = loadTrail();
+  if (!trail) return null;
+  try {
+    const notesList = gitExec('git notes list');
+    if (!notesList) return trail;
+    const notedCommits = new Set(notesList.split('\n').filter(Boolean).map(l => l.split(' ')[1]));
+    const allCommits = gitExec('git log --reverse --format=%H').split('\n').filter(Boolean);
+    const states = [];
+    const txos = [];
+    for (const commit of allCommits) {
+      if (!notedCommits.has(commit)) continue;
+      try {
+        const note = gitExec(`git notes show ${commit}`);
+        if (note.startsWith('txo:')) {
+          states.push(commit);
+          txos.push(note);
+        }
+      } catch { continue; }
+    }
+    trail.states = states;
+    trail.txo = txos;
+    return trail;
+  } catch {
+    return trail;
+  }
+}
+function loadFullTrail() {
+  return isDirty() ? loadTrail() : loadTrailFromNotes();
 }
 
 // --- Parse TXO URI ---
@@ -243,9 +294,10 @@ async function cmdInit(args) {
 
   // Create trail
   const trail = {
+    '@type': 'Blocktrail',
     version: '0.0.3',
     profile: 'gitmark',
-    publicKeyBase: pubkey,
+    pubkeyBase: pubkey,
     chain,
     states: [],
     txo: []
@@ -282,7 +334,7 @@ async function cmdInit(args) {
     );
     const newTxid = await broadcastTx(rawTx, explorer);
 
-    savePrivateState({ txid: newTxid, vout: 0, amount: outputAmount });
+    savePrivateState({ txid: newTxid, vout: 0, amount: outputAmount }, chain);
     console.log(`Funded: ${outputAmount} sats (txid: ${newTxid})`);
   }
 
@@ -293,14 +345,14 @@ async function cmdInit(args) {
   console.log(`Base public key: ${pubkey}`);
   console.log(`Chain: ${chain}`);
   console.log(`Address: ${pubkeyToAddress(pubkey, [], chain)}`);
-  if (!existsSync(PRIVATE_FILE) && voucherIdx === -1) {
+  if (!loadPrivateState() && voucherIdx === -1) {
     console.log(`\nUnfunded. Use: git mark init --voucher txo:${chain}:txid:vout?amount=X&key=Y`);
     console.log(`Or send sats to: ${pubkeyToAddress(pubkey, [], chain)}`);
   }
 }
 
 async function cmdMark(args) {
-  const trail = loadTrail();
+  const trail = loadFullTrail();
   if (!trail) { console.error(`No ${TRAIL_FILE} found. Run: git mark init`); process.exit(1); }
   const priv = loadPrivateState();
   if (!priv) { console.error('No funding. Run: git mark init --voucher txo:...'); process.exit(1); }
@@ -309,6 +361,7 @@ async function cmdMark(args) {
   if (!privkey) { console.error('No private key. Set: git config nostr.privkey <hex>'); process.exit(1); }
 
   const head = getHead();
+  if (!head) { console.error('No commits yet. Make a commit first.'); process.exit(1); }
   const chain = trail.chain;
   const explorer = CHAINS[chain]?.explorer;
   if (!explorer) { console.error(`Unknown chain: ${chain}`); process.exit(1); }
@@ -323,7 +376,7 @@ async function cmdMark(args) {
     : hexToBytes(privkey);
 
   // Derive next address (chained through all states including current)
-  const nextPub = deriveChainedPubkey(hexToBytes(trail.publicKeyBase), allStates);
+  const nextPub = deriveChainedPubkey(hexToBytes(trail.pubkeyBase), allStates);
   const nextXonly = nextPub.slice(1);
   const nextScript = p2trScript(nextXonly);
 
@@ -345,15 +398,20 @@ async function cmdMark(args) {
   );
   const newTxid = await broadcastTx(rawTx, explorer);
 
-  // Update trail
-  trail.states.push(head);
-  trail.txo.push(`txo:${chain}:${newTxid}:0?commit=${head}`);
-  saveTrail(trail);
+  const txoUri = `txo:${chain}:${newTxid}:0?amount=${outputAmount}&commit=${head}`;
+
+  // Always: git notes + git config
+  addGitNote(head, txoUri);
+  savePrivateState({ txid: newTxid, vout: 0, amount: outputAmount }, chain, head);
 
-  // Update private state
-  savePrivateState({ txid: newTxid, vout: 0, amount: outputAmount });
+  // Update trail file if dirty mode
+  trail.states.push(head);
+  trail.txo.push(txoUri);
+  if (isDirty()) {
+    saveTrail(trail);
+  }
 
-  const address = pubkeyToAddress(trail.publicKeyBase, allStates, chain);
+  const address = pubkeyToAddress(trail.pubkeyBase, allStates, chain);
   console.log(`Marked: ${head.slice(0, 8)} → ${newTxid.slice(0, 16)}...`);
   console.log(`Address: ${address}`);
   console.log(`Balance: ${outputAmount} sats`);
@@ -361,18 +419,18 @@ async function cmdMark(args) {
 }
 
 async function cmdInfo() {
-  const trail = loadTrail();
+  const trail = loadFullTrail();
   if (!trail) { console.error(`No ${TRAIL_FILE} found.`); process.exit(1); }
   const priv = loadPrivateState();
 
   console.log(`Profile: ${trail.profile}`);
   console.log(`Version: ${trail.version}`);
   console.log(`Chain: ${trail.chain}`);
-  console.log(`Base public key: ${trail.publicKeyBase}`);
-  console.log(`Base address: ${pubkeyToAddress(trail.publicKeyBase, [], trail.chain)}`);
+  console.log(`Base public key: ${trail.pubkeyBase}`);
+  console.log(`Base address: ${pubkeyToAddress(trail.pubkeyBase, [], trail.chain)}`);
   console.log(`Marks: ${trail.states.length}`);
   if (trail.states.length > 0) {
-    const currentAddr = pubkeyToAddress(trail.publicKeyBase, trail.states, trail.chain);
+    const currentAddr = pubkeyToAddress(trail.pubkeyBase, trail.states, trail.chain);
     console.log(`Current address: ${currentAddr}`);
     console.log(`Last commit: ${trail.states[trail.states.length - 1]}`);
     console.log(`Last TXO: ${trail.txo[trail.txo.length - 1]}`);
@@ -385,7 +443,7 @@ async function cmdInfo() {
 }
 
 async function cmdVerify() {
-  const trail = loadTrail();
+  const trail = loadFullTrail();
   if (!trail) { console.error(`No ${TRAIL_FILE} found.`); process.exit(1); }
   if (trail.states.length === 0) { console.log('No marks to verify.'); return; }
 
@@ -397,7 +455,7 @@ async function cmdVerify() {
 
   for (let i = 0; i < trail.states.length; i++) {
     const statesUpTo = trail.states.slice(0, i + 1);
-    const expectedAddr = pubkeyToAddress(trail.publicKeyBase, statesUpTo, trail.chain);
+    const expectedAddr = pubkeyToAddress(trail.pubkeyBase, statesUpTo, trail.chain);
     const txoUri = trail.txo[i];
     const parsed = parseTxoUri(txoUri);
 
@@ -408,7 +466,7 @@ async function cmdVerify() {
       const out = txData.vout?.[parsed.vout];
       if (!out) { console.log(`  [${i}] FAIL — output ${parsed.vout} not found`); ok = false; continue; }
       if (out.scriptpubkey_address === expectedAddr) {
-        console.log(`  [${i}] OK — ${trail.states[i].slice(0, 8)} → ${expectedAddr.slice(0, 20)}...`);
+        console.log(`  [${i}] OK — ${trail.states[i].slice(0, 8)} → ${expectedAddr}`);
       } else {
         console.log(`  [${i}] FAIL — address mismatch`);
         console.log(`    expected: ${expectedAddr}`);
@@ -425,11 +483,18 @@ async function cmdVerify() {
   process.exit(ok ? 0 : 1);
 }
 
+function cmdUpdate() {
+  const trail = loadTrailFromNotes();
+  if (!trail) { console.error(`No ${TRAIL_FILE} found. Run: git mark init`); process.exit(1); }
+  saveTrail(trail);
+  console.log(`Updated ${TRAIL_FILE} from git notes (${trail.states.length} marks)`);
+}
+
 // --- Exports for testing ---
 export {
   taggedHash, btScalar, deriveChainedPrivkey, deriveChainedPubkey,
   pubkeyToAddress, parseTxoUri, p2trScript, buildTransaction,
-  TRAIL_FILE, PRIVATE_FILE, CHAINS
+  TRAIL_FILE, PRIVATE_FILE, CHAINS, isDirty, loadTrailFromNotes, loadFullTrail
 };
 
 // --- CLI ---
@@ -438,12 +503,16 @@ if (isMain) {
   const args = process.argv.slice(2);
   const cmd = args[0];
 
-  if (cmd === 'init') {
+  if (cmd === '--version' || cmd === '-v') {
+    console.log(PKG.version);
+  } else if (cmd === 'init') {
     cmdInit(args.slice(1));
   } else if (cmd === 'info') {
     cmdInfo();
   } else if (cmd === 'verify') {
     cmdVerify();
+  } else if (cmd === 'update') {
+    cmdUpdate();
   } else if (cmd === 'mark' || !cmd || (cmd && !cmd.startsWith('-'))) {
     if (!existsSync(TRAIL_FILE) && cmd !== 'mark') {
       console.log('Usage:');
@@ -451,6 +520,7 @@ if (isMain) {
       console.log('  git mark                  # anchor HEAD to Bitcoin');
       console.log('  git mark info             # show trail state');
       console.log('  git mark verify           # verify trail against Bitcoin');
+      console.log('  git mark update           # update blocktrails.json from git notes');
     } else {
       cmdMark(args.slice(cmd === 'mark' ? 1 : 0));
     }

package/index.html

@@ -9,6 +9,13 @@
   <meta property="og:description" content="Mark your git commits on Bitcoin using blocktrails key chaining. Tamper-proof history, globally verifiable.">
   <meta property="og:type" content="website">
   <meta property="og:url" content="https://git-mark.com">
+  <meta property="og:image" content="https://git-mark.com/og-image.png">
+  <meta property="og:image:width" content="1200">
+  <meta property="og:image:height" content="630">
+  <meta name="twitter:card" content="summary_large_image">
+  <meta name="twitter:title" content="git mark — Anchor Git Commits to Bitcoin">
+  <meta name="twitter:description" content="Mark your git commits on Bitcoin using blocktrails key chaining. Tamper-proof history, globally verifiable.">
+  <meta name="twitter:image" content="https://git-mark.com/og-image.png">
   <style>
     * { margin: 0; padding: 0; box-sizing: border-box; }
     body { font-family: Georgia, 'Times New Roman', serif; background: #fafaf8; color: #2c2c2c; line-height: 1.7; padding: 2rem; }
@@ -89,7 +96,7 @@ git mark info</pre>
 <pre>{
   "version": "0.0.3",
   "profile": "gitmark",
-  "publicKeyBase": "02abc...",
+  "pubkeyBase": "02abc...",
   "chain": "tbtc4",
   "states": ["a1b2c3...", "e5f6a7..."],
   "txo": [
@@ -122,6 +129,8 @@ git mark info</pre>
       <tr><td><code>git mark</code></td><td>Anchor HEAD commit to Bitcoin</td></tr>
       <tr><td><code>git mark info</code></td><td>Show trail state, balance, addresses</td></tr>
       <tr><td><code>git mark verify</code></td><td>Verify all marks against Bitcoin</td></tr>
+      <tr><td><code>git mark update</code></td><td>Update blocktrails.json from git notes</td></tr>
+      <tr><td><code>git mark --version</code></td><td>Show version</td></tr>
     </table>
 
     <h2>Related</h2>

package/og-image.svg

@@ -0,0 +1,8 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="1200" height="630" viewBox="0 0 1200 630">
+  <rect width="1200" height="630" fill="#1a1a2e"/>
+  <rect x="0" y="0" width="1200" height="4" fill="#f7931a"/>
+  <text x="600" y="240" text-anchor="middle" font-family="Georgia, serif" font-size="96" font-weight="bold" fill="#f7931a">git mark</text>
+  <text x="600" y="320" text-anchor="middle" font-family="Georgia, serif" font-size="36" fill="#cccccc">Anchor Git Commits to Bitcoin</text>
+  <text x="600" y="400" text-anchor="middle" font-family="'SFMono-Regular', Consolas, monospace" font-size="22" fill="#888888">Tamper-proof history via BIP-341 key chaining</text>
+  <text x="600" y="540" text-anchor="middle" font-family="Georgia, serif" font-size="24" fill="#666666">git-mark.com</text>
+</svg>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gitmark",
-  "version": "0.0.71",
+  "version": "0.0.73",
   "type": "module",
   "description": "Anchor git commits to Bitcoin via blocktrails",
   "main": "bin/git-mark.js",

package/test/git-mark.test.js

@@ -5,7 +5,7 @@ import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
 
 import {
   taggedHash, btScalar, deriveChainedPrivkey, deriveChainedPubkey,
-  pubkeyToAddress, parseTxoUri, p2trScript, CHAINS
+  pubkeyToAddress, parseTxoUri, p2trScript, CHAINS, isDirty, loadFullTrail, loadTrailFromNotes
 } from '../bin/git-mark.js';
 
 describe('Key chaining', () => {
@@ -167,7 +167,7 @@ describe('Trail format', () => {
     const trail = {
       version: '0.0.3',
       profile: 'gitmark',
-      publicKeyBase: pubkey,
+      pubkeyBase: pubkey,
       chain: 'tbtc4',
       states: [],
       txo: []
@@ -175,8 +175,8 @@ describe('Trail format', () => {
 
     assert.strictEqual(trail.version, '0.0.3');
     assert.strictEqual(trail.profile, 'gitmark');
-    assert.strictEqual(trail.publicKeyBase.length, 66); // compressed hex
-    assert.ok(trail.publicKeyBase.startsWith('02') || trail.publicKeyBase.startsWith('03'));
+    assert.strictEqual(trail.pubkeyBase.length, 66); // compressed hex
+    assert.ok(trail.pubkeyBase.startsWith('02') || trail.pubkeyBase.startsWith('03'));
     assert.ok(Array.isArray(trail.states));
     assert.ok(Array.isArray(trail.txo));
   });
@@ -188,4 +188,56 @@ describe('Trail format', () => {
     };
     assert.strictEqual(trail.states.length, trail.txo.length);
   });
+
+  it('txo URIs include amount and commit params', () => {
+    const txoUri = 'txo:tbtc4:abc123:0?amount=9700&commit=deadbeef';
+    const parsed = parseTxoUri(txoUri);
+    assert.strictEqual(parsed.chain, 'tbtc4');
+    assert.strictEqual(parsed.txid, 'abc123');
+    assert.strictEqual(parsed.amount, 9700);
+  });
+});
+
+describe('Dirty flag', () => {
+  it('isDirty returns true by default (no config set)', () => {
+    assert.strictEqual(isDirty(), true);
+  });
+
+  it('loadFullTrail returns null when no trail file exists', () => {
+    const trail = loadFullTrail();
+    assert.strictEqual(trail, null);
+  });
+
+  it('loadTrailFromNotes returns null when no trail file exists', () => {
+    const trail = loadTrailFromNotes();
+    assert.strictEqual(trail, null);
+  });
+
+  it('loadFullTrail uses loadTrail when dirty is true', () => {
+    // Default is dirty=true, so loadFullTrail should behave like loadTrail
+    const full = loadFullTrail();
+    assert.strictEqual(full, null); // no blocktrails.json in test dir
+  });
+});
+
+describe('TXO URI in git config format', () => {
+  it('txo URI with amount and commit is parseable', () => {
+    const uri = 'txo:tbtc4:abc123:0?amount=9700&commit=deadbeef';
+    const parsed = parseTxoUri(uri);
+    assert.strictEqual(parsed.txid, 'abc123');
+    assert.strictEqual(parsed.vout, 0);
+    assert.strictEqual(parsed.amount, 9700);
+    assert.strictEqual(parsed.chain, 'tbtc4');
+  });
+
+  it('txo URI roundtrips through format used by savePrivateState', () => {
+    const state = { txid: 'abcdef1234', vout: 0, amount: 14668 };
+    const chain = 'tbtc4';
+    const head = 'deadbeef';
+    const uri = `txo:${chain}:${state.txid}:${state.vout}?amount=${state.amount}&commit=${head}`;
+    const parsed = parseTxoUri(uri);
+    assert.strictEqual(parsed.txid, state.txid);
+    assert.strictEqual(parsed.vout, state.vout);
+    assert.strictEqual(parsed.amount, state.amount);
+  });
 });