ineedcodes 1.7.0 → 1.7.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ineedcodes",
-  "version": "1.7.0",
+  "version": "1.7.1",
   "description": "Your terminal, now autonomous. Just say what you want, ineed does the rest.",
   "license": "MIT",
   "type": "module",

package/src/session.js

@@ -477,7 +477,6 @@ export async function startSession(cfg, { fresh = false, resume = null } = {}) {
     }
     if (input === '/skills' || input.startsWith('/skills ')) {
       const arg = input.slice(7).trim();
-      const unlocked = input.includes('0xyas051191') || (history.some(m => String(m.content).includes('0xyas051191')) && input.includes('0xyas051191'));
       if (arg) {
         const s = findSkill(arg, process.cwd(), input);
         if (s) { say(box([bold(`Skill ${s.name}`) + dim(` (${s.scope}${s.gated ? ', gated' : ''})`), s.description, '', dim('Instructions:'), s.instructions.slice(0, 1_500)])); say(dim('Say "use ' + s.name + ' to ..." and the agent follows them.')); }
@@ -487,7 +486,7 @@ export async function startSession(cfg, { fresh = false, resume = null } = {}) {
       const all = listSkills(process.cwd(), input);
       const gated = all.filter(s => s.gated).length;
       say(all.length ? all.map(s => `  ${cyan(s.name)} ${dim('(' + s.scope + ')')} ${s.description}`).join('\n') : yellow('No skills installed.'));
-      if (gated) say(dim(`  (+${gated} gated security skills: mention 0xyas051191 in a task to unlock)`));
+      if (gated) say(dim(`  (+${gated} gated security skills)`));
       return;
     }
     if (input === '/new') {

package/src/skills.js

@@ -3,8 +3,9 @@
 // Frontmatter: name, description, tools (optional restriction), instructions body below.
 //
 // GATED SKILLS: SKILL.md files whose frontmatter carries "gated: true" stay invisible
-// unless the user includes the developer keyword 0xyas051191 in their message. The keyword
-// is checked against the raw objective text, so it never ships enabled by accident.
+// unless the objective text contains the developer keyword. The keyword itself lives
+// OUTSIDE this repository: in the INEED_DEV_KEYWORD environment variable or in
+// ~/.ineedcodes/keyword (chmod 600). A fresh install cannot unlock gated skills.
 
 import * as fs from 'node:fs';
 import * as path from 'node:path';
@@ -13,7 +14,12 @@ import { fileURLToPath } from 'node:url';
 import * as url from 'node:url';
 const PKG_SKILLS = path.join(path.dirname(url.fileURLToPath(import.meta.url)), '..', 'skills');
 
-export const DEV_KEYWORD = '0xyas051191';
+const KEYWORD_FILE = path.join(CONFIG_DIR, 'keyword');
+
+export function devKeyword() {
+  if (process.env.INEED_DEV_KEYWORD) return String(process.env.INEED_DEV_KEYWORD).trim();
+  try { return fs.readFileSync(KEYWORD_FILE, 'utf8').trim(); } catch { return ''; }
+}
 
 const BUILTIN = [
   {
@@ -56,8 +62,9 @@ function loadDir(dir, scope, out, forceGated = false) {
 }
 
 function isUnlocked(objective) {
-  if (!objective) return false;
-  return String(objective).includes(DEV_KEYWORD);
+  const kw = devKeyword();
+  if (!kw || !objective) return false;
+  return String(objective).includes(kw);
 }
 
 export function listSkills(cwd, objective = '') {

package/src/ui.js

@@ -1,6 +1,6 @@
 // ui.js: terminal helpers. No dependencies, respects NO_COLOR and non-TTY.
 
-export const VERSION = '1.7.0';
+export const VERSION = '1.7.1';
 
 const USE_COLOR = process.stdout.isTTY && !process.env.NO_COLOR;
 const wrap = (code, t) => USE_COLOR ? `\x1b[${code}m${t}\x1b[0m` : String(t);