gabriel / muse public
fix patch fix/commit-sign-help-text #1 / 1
AI Agent gabriel · 5 hours ago · Sep 12, 2026 · Diff

fix: --sign help text said HMAC, real signing is Ed25519

Discovered while researching Episode 04 of Build With Muse (identity/signing). muse commit --sign's help text claimed 'HMAC-sign the commit' -- but a real signed commit's signature and signer_public_key fields are both ed25519:-prefixed, and muse verify-commit confirms a valid asymmetric Ed25519 signature. HMAC is symmetric and would never produce a public key field at all.

No test pinned the old string.

Co-Authored-By: Claude Sonnet 5 <[email protected]>

sha256:727006ce1bf3b2a4d821820d59b9125b8cabef3cdcc7ebef0f28219ae7435483 sha
~1 symbols
1 changed · 1185 in snapshot files
sha256:e53e7d24e585d21191dc05df15f080d0952009608c9fbd38b69bfaa53f5de02b snapshot
~1
symbol modified
1
file changed
1185
files in snapshot
0
dead code introduced
Semantic Changes 1 symbol
~ muse/cli/commands/commit.py .py 1 symbol modified
Files Changed
~1
1185 in snapshot
← Older Oldest on fix/commit-sign-help-text
All commits
Newer → Latest on fix/commit-sign-help-text

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:727006ce1bf3b2a4d821820d59b9125b8cabef3cdcc7ebef0f28219ae7435483 --body "your comment"