signetai 0.170.0 → 0.171.1

package/dist/mcp-stdio.js

@@ -52747,22 +52747,24 @@ function attentionProvenance(accessor, agentId, operation2, mintedById) {
     return null;
   let expectedTarget = false;
   if (operation2.operation === "archive_entity") {
-    expectedTarget = typeof payload2.target === "string" && payload2.target === attention.details.entityId && attention.subjectRef === `entity:${payload2.target}`;
+    expectedTarget = pinnedTarget(payload2, attention, "entity:", "entityId");
   } else if (operation2.operation === "archive_aspect") {
-    expectedTarget = typeof payload2.target === "string" && payload2.target === attention.details.aspectId && attention.subjectRef === `aspect:${payload2.target}`;
+    expectedTarget = pinnedTarget(payload2, attention, "aspect:", "aspectId");
   } else if (operation2.operation === "archive_claim_value") {
-    expectedTarget = typeof payload2.target === "string" && payload2.target === attention.details.attributeId && attention.subjectRef === `attribute:${payload2.target}`;
+    expectedTarget = pinnedTarget(payload2, attention, "attribute:", "attributeId");
   } else if (operation2.operation === "archive_link") {
-    expectedTarget = typeof payload2.target === "string" && payload2.target === attention.details.linkId && attention.subjectRef === `link:${payload2.target}`;
+    expectedTarget = pinnedTarget(payload2, attention, "link:", "linkId");
   } else if (operation2.operation === "merge_entities") {
     const targets = Array.isArray(payload2.targets) ? payload2.targets.filter((value) => typeof value === "string") : [];
     const survivor = typeof payload2.survivor === "string" ? payload2.survivor : "";
-    const groupIds = semanticDuplicateIds(accessor, agentId, attention.details.canonicalName ?? "");
-    expectedTarget = attention.subjectRef === `duplicate:${attention.details.canonicalName}` && groupIds.size > 1 && groupIds.has(survivor) && targets.length >= 2 && targets.every((id) => groupIds.has(id)) && targets.includes(survivor) && targets.some((id) => id !== survivor);
+    const canonicalName = attention.details.canonicalName ?? pinnedBySubjectRef(attention.subjectRef, "duplicate:") ?? "";
+    const groupIds = semanticDuplicateIds(accessor, agentId, canonicalName);
+    expectedTarget = canonicalName.length > 0 && attention.subjectRef === `duplicate:${canonicalName}` && groupIds.size > 1 && groupIds.has(survivor) && targets.length >= 2 && targets.every((id) => groupIds.has(id)) && targets.includes(survivor) && targets.some((id) => id !== survivor);
   } else if (operation2.operation === "merge_aspects") {
     const sources = Array.isArray(payload2.sources) ? payload2.sources.filter((value) => typeof value === "string") : [];
-    const flaggedAspect = attention.details.aspectId ?? attention.subjectRef.replace(/^aspect:/, "");
-    expectedTarget = attention.subjectRef.startsWith("aspect:") && typeof payload2.target === "string" && sources.length >= 1 && sources.includes(flaggedAspect);
+    const pinnedAspect = pinnedBySubjectRef(attention.subjectRef, "aspect:");
+    const detailAgrees = pinnedAspect !== null && (attention.details.aspectId === undefined || attention.details.aspectId === pinnedAspect);
+    expectedTarget = detailAgrees && typeof payload2.target === "string" && sources.length >= 1 && pinnedAspect !== null && sources.includes(pinnedAspect);
   }
   if (!expectedTarget)
     return null;
@@ -52785,6 +52787,20 @@ function attentionProvenance(accessor, agentId, operation2, mintedById) {
     attentionId: attention.id
   };
 }
+function pinnedBySubjectRef(subjectRef, prefix) {
+  if (!subjectRef.startsWith(prefix))
+    return null;
+  const id = subjectRef.slice(prefix.length);
+  return id.length > 0 ? id : null;
+}
+function pinnedTarget(payload2, attention, prefix, detailKey) {
+  const target2 = typeof payload2.target === "string" ? payload2.target : null;
+  const pinned = target2 !== null ? pinnedBySubjectRef(attention.subjectRef, prefix) : null;
+  if (pinned === null || target2 !== pinned)
+    return false;
+  const detail = attention.details[detailKey];
+  return detail === undefined || detail === target2;
+}
 function provenanceForEvidence(accessor, agentId, operation2) {
   const citations = operation2.evidence ?? [];
   if (citations.length === 0)
@@ -53033,6 +53049,18 @@ function applyDreamingOperations(params) {
         items.push({ index, ok: true, result: { attentionId: entry.attentionId } });
         continue;
       }
+      if (entry.attentionId !== null) {
+        const pending = db.prepare(`SELECT 1 FROM dreaming_attention
+						 WHERE id = ? AND agent_id = ? AND resolved_at IS NULL`).get(entry.attentionId, params.agentId);
+        if (pending == null) {
+          items.push({
+            index,
+            ok: false,
+            error: "Attention already consumed by an earlier operation in this batch"
+          });
+          continue;
+        }
+      }
       const savepoint = `signet_dream_op_${index}`;
       db.exec(`SAVEPOINT ${savepoint}`);
       try {

package/native-manifest.json

@@ -1,42 +1,42 @@
 {
   "schemaVersion": 1,
-  "version": "0.170.0",
+  "version": "0.171.1",
   "assets": [
     {
       "name": "signet-darwin-arm64",
       "platform": "darwin-arm64",
-      "sha256": "419eb6bd4acc55dfba3330bbe912fad1fec85d9536fe7710488949367c48bd4c",
+      "sha256": "24d44da0599a7023b660cc5f1e1c2aa27817a2d3f362f40467ccc629440c0a47",
       "size": 117028384
     },
     {
       "name": "signet-darwin-x64",
       "platform": "darwin-x64",
-      "sha256": "3ee7e2a4471bca8ce3256e130121fc85a831d3731fa6358a6870cf707cc6b693",
+      "sha256": "9ef2d02d007fd264433bd61e763a33de5101661447084966625d0ab4477992e9",
       "size": 121653824
     },
     {
       "name": "signet-linux-arm64",
       "platform": "linux-arm64",
-      "sha256": "18a439bba647b8634be9545af68524336fbd4e0d288c48bb476c35c7d8134c15",
-      "size": 154259889
+      "sha256": "57d6441a1afd104d68cf905c3fb12cdefd586ef15c84b0ad386150eed263e2b8",
+      "size": 154264549
     },
     {
       "name": "signet-linux-x64",
       "platform": "linux-x64",
-      "sha256": "148e80bcaba4d1f11383b2a34edc2fa64b57e2a60c61f273f2eda9900edd917f",
-      "size": 154818874
+      "sha256": "b0602da8d038064c2e3eed3296c9f42fc22147fd4ce07569b8529dfb23cb7e78",
+      "size": 154823534
     },
     {
       "name": "signet-win32-x64.exe",
       "platform": "win32-x64",
-      "sha256": "e10df8fb684dc6bf840e9f5fc9b24662bd238ebcc1f10b616af9c22118cf9c70",
-      "size": 170952192
+      "sha256": "7407e6ef14209ad88af8a4eb40ff21bf18438a6fc4d0d7658c7d4761ac948c99",
+      "size": 170956800
     }
   ],
   "components": {
     "connectors": {
-      "url": "signet-connectors-0.170.0.tar.gz",
-      "sha256": "680f6d471d1c03b966f101b21510ff4369809d4d49f94322f2d077501a040ad7",
+      "url": "signet-connectors-0.171.1.tar.gz",
+      "sha256": "e51982dc91fe8a3d3c354d50935663c08e2920a38f68e3619af4a7290a588413",
       "size": 16248
     }
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "signetai",
-  "version": "0.170.0",
+  "version": "0.171.1",
   "description": "Signet native CLI installer wrapper",
   "type": "module",
   "bin": {
@@ -65,10 +65,10 @@
     "access": "public"
   },
   "optionalDependencies": {
-    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.170.0/signetai-darwin-arm64-0.170.0.tgz",
-    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.170.0/signetai-darwin-x64-0.170.0.tgz",
-    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.170.0/signetai-linux-arm64-0.170.0.tgz",
-    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.170.0/signetai-linux-x64-0.170.0.tgz",
-    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.170.0/signetai-win32-x64-0.170.0.tgz"
+    "signetai-darwin-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.171.1/signetai-darwin-arm64-0.171.1.tgz",
+    "signetai-darwin-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.171.1/signetai-darwin-x64-0.171.1.tgz",
+    "signetai-linux-arm64": "https://github.com/Signet-AI/signetai/releases/download/v0.171.1/signetai-linux-arm64-0.171.1.tgz",
+    "signetai-linux-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.171.1/signetai-linux-x64-0.171.1.tgz",
+    "signetai-win32-x64": "https://github.com/Signet-AI/signetai/releases/download/v0.171.1/signetai-win32-x64-0.171.1.tgz"
   }
 }

package/scripts/install-native.js

@@ -24,6 +24,54 @@ const require = createRequire(import.meta.url);
 
 const CONNECTOR_COMPONENT = "connectors";
 
+// Phase-1 telemetry (issue #1026): a single anonymous install counter sent to
+// the Signet PostHog project. Payload is version+platform only — no
+// identifier, no IP logging. Each install generates a fresh anonymous id, so
+// every ping counts as one distinct install without persisting anything.
+// Opt-out via SIGNET_TELEMETRY_OPTOUT=1 (Homebrew-style). Never blocks the
+// install and never fails it: the request is time-bounded and errors are
+// swallowed, so a telemetry outage cannot break postinstall.
+const TELEMETRY_HOST = "https://us.i.posthog.com";
+const TELEMETRY_API_KEY = "phc_mLsvJmbmp6e9UarrX9Cq5QtTjVNiiphM9mvi5Xnddd8Q"; // public ingest key
+const TELEMETRY_TIMEOUT_MS = 2000;
+const pendingPings = [];
+
+function telemetryEnabled() {
+	if (process.env.SIGNET_TELEMETRY_OPTOUT === "1" || process.env.SIGNET_TELEMETRY_OPTOUT === "true") {
+		return false;
+	}
+	if (process.env.SIGNET_SKIP_NATIVE_POSTINSTALL === "1" || isWorkspacePackage()) {
+		return false;
+	}
+	return true;
+}
+
+function fireInstallPing(platform) {
+	if (!telemetryEnabled()) return;
+	const body = JSON.stringify({
+		api_key: TELEMETRY_API_KEY,
+		batch: [
+			{
+				event: "install.ping",
+				distinct_id: require("node:crypto").randomUUID(),
+				timestamp: new Date().toISOString(),
+				properties: {
+					version: nativePackageVersion(),
+					platform,
+					$lib: "signet-install",
+				},
+			},
+		],
+	});
+	const promise = fetch(`${TELEMETRY_HOST}/batch/`, {
+		method: "POST",
+		headers: { "Content-Type": "application/json" },
+		body,
+		signal: AbortSignal.timeout(TELEMETRY_TIMEOUT_MS),
+	}).catch(() => {});
+	pendingPings.push(promise);
+}
+
 function isWorkspacePackage() {
 	const workspaceRoot = dirname(dirname(packageDir));
 	if (basename(dirname(packageDir)) !== "dist") return false;
@@ -66,6 +114,8 @@ async function main() {
 	}
 
 	const platform = detectNativePlatform();
+	// Anonymous install counter (issue #1026): one ping per real install.
+	fireInstallPing(platform);
 	const nativePackage = nativePlatforms[platform];
 	let source;
 	try {
@@ -208,7 +258,16 @@ async function installConnectorAssets() {
 	}
 }
 
-main().catch((err) => {
-	console.error(`Signet native install failed: ${err.message}`);
-	process.exit(1);
-});
+main()
+	.catch((err) => {
+		console.error(`Signet native install failed: ${err.message}`);
+		process.exit(1);
+	})
+	.finally(async () => {
+		// Give the fire-and-forget telemetry ping a bounded chance to flush.
+		// Each request self-times-out, so this never delays the install by
+		// more than TELEMETRY_TIMEOUT_MS even if the endpoint hangs.
+		if (pendingPings.length > 0) {
+			await Promise.allSettled(pendingPings);
+		}
+	});