fix: enforce canonical codec idioms throughout; upgrade signer_key_id to full sha256: fingerprint
- Replace all inline 'sha256:' + hashlib.sha256(...).hexdigest() with blob_id() - Replace all public key fingerprinting with public_key_fingerprint() from _types - Remove 16-char truncated signer_key_id form entirely — was 64-bit collision space - signer_key_id is now the full sha256:<64-hex> canonical fingerprint everywhere - snapshot.py: removeprefix('sha256:') → split_id()[1] in compute_snapshot_id and compute_commit_id - migrate.py: _normalise_key_id() upgrades old 16-char form using stored signer_public_key - transport.py: inline debug hash → short_id(blob_id(v)) - identity/plugin.py: inline sha256 → blob_id() - provenance.py: sign_commit_record returns public_key_fingerprint(), not hexdigest()[:16] - verify_tag.py: docstring updated to reflect canonical fingerprint format - Tests updated throughout to use _types codec functions; hashlib imports removed where redundant - test_status_json_schema: fixture uses code add . to commit dotfiles → clean=True
sha256:fbad7b06074f4277af61670185abbe19198d7b5a64a7ac91390277a2ae82d7b3
sha
+3237
~228
−7
symbols
sha256:a0482c4f2e2c30e6ff94c38b4bf576ac1b039e24d7e2180993d983d946931f8e
snapshot
+3237
symbols added
~228
symbols modified
−7
symbols removed
0
dead code introduced
Semantic Changes
3472 symbols
+
out
+
tools
+
Muse — Extreme Stress, Data Integrity, Security & Performance Plan
section Muse — Extreme Stress, Data Integrity, Security & Performance Plan L1–1517
+
3 Concurrent write race in _write_msgpack_atomic ✅
section 1.3 Concurrent write race in _write_msgpack_atomic ✅ L129–194
+
6 Linux-kernel scale: snapshot manifest ✅
section 1.6 Linux-kernel scale: snapshot manifest ✅ L296–356
+
7 Linux-kernel scale: commit history walk ✅
section 1.7 Linux-kernel scale: commit history walk ✅ L356–403
+
1 Path traversal in all plumbing inputs ✅
section 2.1 Path traversal in all plumbing inputs ✅ L573–636
+
7 Environment variable injection ✅
variable
section 2.7 Environment variable injection ✅ L934–1016
+
3 Memory ceiling under Linux-scale load ✅
section 3.3 Memory ceiling under Linux-scale load ✅ L1196–1242
+
LICENSE
+
Muse: Domain Agnostic Version Control for Multi-Dimensional State
section Muse: Domain Agnostic Version Control for Multi-Dimensional State L1–228
+
The Plugin Model: Teaching Muse New Domains
section The Plugin Model: Teaching Muse New Domains L90–109
+
What "Semantic Diff" Actually Feels Like
section What "Semantic Diff" Actually Feels Like L109–151
+
Why This Matters for AI Agents Specifically
section Why This Matters for AI Agents Specifically L169–181
+
Agent-dedicated key (on-disk, long-lived)
section Agent-dedicated key (on-disk, long-lived) L71–83
+
Ephemeral agent key (agentception workflow)
section Ephemeral agent key (agentception workflow) L121–141
+
Muse — Architecture Plan: From File-Hash MVP to Universal Multidimensional VCS
section Muse — Architecture Plan: From File-Hash MVP to Universal Multidimensional VCS L1–1392
+
Phase 2 — Domain Schema & Diff Algorithm Library
section 4. Phase 2 — Domain Schema & Diff Algorithm Library L360–783
+
3 Schema Method Added to Plugin Protocol
method
section 4.3 Schema Method Added to Plugin Protocol L482–497
+
Phase 4 — CRDT Semantics for Convergent Multi-Agent Writes
section 6. Phase 4 — CRDT Semantics for Convergent Multi-Agent Writes L991–1212
+
1 Content-Addressed Object Store Compatibility
section 7.1 Content-Addressed Object Store Compatibility L1214–1222
+
3 Wire Format for Agent-to-Agent Communication
section 7.3 Wire Format for Agent-to-Agent Communication L1242–1246
+
2 Property-Based Testing for Algorithms
section 8.2 Property-Based Testing for Algorithms L1279–1296
+
Phase 2 — Domain Schema & Diff Algorithm Library
section Phase 2 — Domain Schema & Diff Algorithm Library L148–167
+
CRDT Primitive Library (muse/core/crdts/)
section CRDT Primitive Library (muse/core/crdts/) L224–238
+
muse code symbols — see every named thing
section muse code symbols — see every named thing L27–57
+
muse code languages — composition at a glance
section muse code languages — composition at a glance L140–160
+
muse code stable — symbol stability leaderboard
section muse code stable — symbol stability leaderboard L275–298
+
muse code blame — per-symbol attribution
section muse code blame — per-symbol attribution L162–189
+
muse code symbol-log — the life of a function
function
section muse code symbol-log — the life of a function L191–212
+
muse code detect-refactor — classify semantic changes
class
section muse code detect-refactor — classify semantic changes L214–238
+
muse code hotspots — symbol churn leaderboard
section muse code hotspots — symbol churn leaderboard L240–273
+
muse code compare — any two historical snapshots
section muse code compare — any two historical snapshots L331–370
+
muse code patch — surgical semantic modification
section muse code patch — surgical semantic modification L372–443
+
Step 2 — muse commit -m "Root: initial state snapshot"
section Step 2 — muse commit -m "Root: initial state snapshot" L74–85
+
Step 3 — muse commit -m "Layer 1: add rhythmic dimension"
section Step 3 — muse commit -m "Layer 1: add rhythmic dimension" L85–92
+
Step 4 — muse commit -m "Layer 2: add harmonic dimension"
section Step 4 — muse commit -m "Layer 2: add harmonic dimension" L92–98
+
ACT 4 — Conflict & Resolution (Steps 22–31)
section ACT 4 — Conflict & Resolution (Steps 22–31) L195–276
+
ACT 5 — Advanced Operations (Steps 32–41)
section ACT 5 — Advanced Operations (Steps 32–41) L276–341
+
Steps 32–38 — The audition arc (pause here and explain this slowly)
section Steps 32–38 — The audition arc (pause here and explain this slowly) L283–326
+
ACT 6 — Typed Delta Algebra (Steps 42–46)
section ACT 6 — Typed Delta Algebra (Steps 42–46) L371–444
+
Step 42 — muse read on a commit with note-level changes
section Step 42 — muse read on a commit with note-level changes L383–412
+
ACT 7 — Domain Schema & Diff Algorithms (Steps 47–51)
section ACT 7 — Domain Schema & Diff Algorithms (Steps 47–51) L444–518
+
ACT 8 — Operation-Level OT Merge (Steps 52–56)
section ACT 8 — Operation-Level OT Merge (Steps 52–56) L518–580
+
Step 50 — Two branches, same file, different notes
section Step 50 — Two branches, same file, different notes L525–540
+
Step 51 — muse merge beta-notes with operation-level merge
section Step 51 — muse merge beta-notes with operation-level merge L540–555
+
ACT 9 — CRDT Convergent Writes (Steps 57–61)
section ACT 9 — CRDT Convergent Writes (Steps 57–61) L580–673
+
Step 57 — CRDT mode: join always succeeds
section Step 57 — CRDT mode: join always succeeds L595–603
+
DIMENSION MATRIX — Closing walkthrough (~60 s)
section DIMENSION MATRIX — Closing walkthrough (~60 s) L341–371
+
muse midi harmony — chord analysis and key detection
section muse midi harmony — chord analysis and key detection L97–137
+
muse midi velocity-profile — dynamic range analysis
section muse midi velocity-profile — dynamic range analysis L139–174
+
muse midi mix — layer two tracks into one
section muse midi mix — layer two tracks into one L319–357
+
muse midi note-log — what changed in each commit
section muse midi note-log — what changed in each commit L176–209
+
muse midi note-blame — which commit wrote these notes?
section muse midi note-blame — which commit wrote these notes? L211–240
+
Act VII — Where is the Compositional Instability?
section Act VII — Where is the Compositional Instability? L240–270
+
muse midi transpose — surgical pitch transformation
section muse midi transpose — surgical pitch transformation L272–317
+
muse midi rhythm — syncopation, swing, quantisation
section muse midi rhythm — syncopation, swing, quantisation L359–381
+
muse midi scale — scale and mode detection
section muse midi scale — scale and mode detection L417–440
+
muse midi tension — harmonic tension curve
section muse midi tension — harmonic tension curve L440–457
+
muse midi instrumentation — channel & register map
section muse midi instrumentation — channel & register map L540–559
+
muse midi motif — recurring pattern detection
section muse midi motif — recurring pattern detection L496–517
+
muse midi voice-leading — counterpoint lint
section muse midi voice-leading — counterpoint lint L517–540
+
muse midi compare — semantic diff between commits
section muse midi compare — semantic diff between commits L561–585
+
muse midi find-phrase — phrase similarity search
section muse midi find-phrase — phrase similarity search L612–631
+
muse midi shard — partition for parallel agents
section muse midi shard — partition for parallel agents L631–656
+
muse midi arpeggiate — chords → arpeggios
section muse midi arpeggiate — chords → arpeggios L724–738
+
muse midi normalize — rescale velocities
section muse midi normalize — rescale velocities L738–753
+
muse midi quantize — snap to rhythmic grid
section muse midi quantize — snap to rhythmic grid L658–678
+
The Full Command Matrix — 31 Semantic Porcelain Commands
section The Full Command Matrix — 31 Semantic Porcelain Commands L806–886
+
The problem with content hashes as identity
section The problem with content hashes as identity L3–15
+
Step 3 — Migrate an Existing Git Repository
section Step 3 — Migrate an Existing Git Repository L73–163
+
The three lattice laws (why join always converges)
section The three lattice laws (why join always converges) L494–507
+
merge(base, left, right, *, repo_root) -> MergeResult
section merge(base, left, right, *, repo_root) -> MergeResult L159–210
+
muse archive — export a snapshot as a portable archive
section muse archive — export a snapshot as a portable archive L1–89
+
muse auth — Identity Management Reference
section muse auth — Identity Management Reference L1–202
+
muse bisect — binary search for regressions
section muse bisect — binary search for regressions L1–99
+
muse blame — line-level attribution for text files
section muse blame — line-level attribution for text files L1–91
+
Muse CLI — Three-Tier Architecture Reference
section Muse CLI — Three-Tier Architecture Reference L1–411
+
muse code coverage CLASS_ADDRESS [OPTIONS]
class
section muse code coverage CLASS_ADDRESS [OPTIONS] L947–961
+
muse code deps ADDRESS_OR_FILE [OPTIONS]
section muse code deps ADDRESS_OR_FILE [OPTIONS] L961–979
+
muse code patch ADDRESS SOURCE [OPTIONS]
section muse code patch ADDRESS SOURCE [OPTIONS] L1001–1039
+
muse code checkout-symbol ADDRESS --commit REF
section muse code checkout-symbol ADDRESS --commit REF L300–332
+
[--from REF] [--to REF]
section muse code query-history PREDICATE... [--from REF] [--to REF] L433–467
+
muse coord plan-merge OURS THEIRS [OPTIONS]
section muse coord plan-merge OURS THEIRS [OPTIONS] L693–713
+
Merge Engine & Architectural Enforcement
section 8. Merge Engine & Architectural Enforcement L749–866
+
ConflictRecord — Structured Conflict Taxonomy
section ConflictRecord — Structured Conflict Taxonomy L751–778
+
muse domains — Domain Plugin Dashboard & Marketplace Publisher
section muse domains — Domain Plugin Dashboard & Marketplace Publisher L1–368
+
List all registered domains (machine-readable)
section List all registered domains (machine-readable) L292–298
+
Override capabilities for an out-of-repo publish
section Override capabilities for an out-of-repo publish L320–342
+
Scaffold and immediately publish a new domain
section Scaffold and immediately publish a new domain L298–320
+
Use via agent (musehub_publish_domain MCP tool)
section Use via agent (musehub_publish_domain MCP tool) L342–368
+
muse gc — garbage-collect unreachable objects
section muse gc — garbage-collect unreachable objects L1–73
+
muse hub — MuseHub Fabric Connection Reference
section muse hub — MuseHub Fabric Connection Reference L1–311
+
muse midi compare TRACK COMMIT_A COMMIT_B
section muse midi compare TRACK COMMIT_A COMMIT_B L571–610
+
muse midi find-phrase TRACK --query QUERY_FILE
section muse midi find-phrase TRACK --query QUERY_FILE L733–768
+
muse midi mix TRACK_A TRACK_B --output OUTPUT
section muse midi mix TRACK_A TRACK_B --output OUTPUT L967–990
+
Code — generated files reverted, test additions unioned, core reviewed
section Code — generated files reverted, test additions unioned, core reviewed L220–271
+
Force manual review on all structural changes (any domain)
section Force manual review on all structural changes (any domain) L296–313
+
Genomics — reference always ours, mutation sets unioned
section Genomics — reference always ours, mutation sets unioned L271–296
+
MIDI — drums always ours, pitch-bend from remote, union on stems
section MIDI — drums always ours, pitch-bend from remote, union on stems L175–220
+
Domain-specific recommended configurations
section Domain-specific recommended configurations L231–308
+
Configuration (set before plugins=(… muse …))
section Configuration (set before plugins=(… muse …)) L69–76
+
commit-tree — create a commit from a snapshot ID
section commit-tree — create a commit from a snapshot ID L332–376
+
pack-objects — bundle commits for transport
section pack-objects — bundle commits for transport L511–549
+
read-commit — print full commit metadata
section read-commit — print full commit metadata L232–290
+
read-snapshot — print full snapshot metadata
section read-snapshot — print full snapshot metadata L290–332
+
rev-parse — resolve a ref to a commit ID
section rev-parse — resolve a ref to a commit ID L145–186
+
unpack-objects — apply a bundle to the local store
section unpack-objects — apply a bundle to the local store L549–589
+
Audit all refs with full metadata and filter by recency
section Audit all refs with full metadata and filter by recency L1269–1277
+
Check which files changed between two branches
section Check which files changed between two branches L1314–1323
+
Find stale branches (no commits in the last 30 days)
section Find stale branches (no commits in the last 30 days) L1304–1314
+
Name every commit reachable from a branch
section Name every commit reachable from a branch L1260–1269
+
Validate a branch name before creating it
section Validate a branch name before creating it L1277–1286
+
check-attr — query merge-strategy attributes for paths
section check-attr — query merge-strategy attributes for paths L899–942
+
check-ref-format — validate branch and ref names
section check-ref-format — validate branch and ref names L1142–1193
+
domain-info — inspect the active domain plugin
section domain-info — inspect the active domain plugin L775–817
+
for-each-ref — iterate all refs with rich commit metadata
section for-each-ref — iterate all refs with rich commit metadata L1033–1087
+
merge-base — find the common ancestor of two commits
section merge-base — find the common ancestor of two commits L693–729
+
name-rev — map commit IDs to branch-relative names
section name-rev — map commit IDs to branch-relative names L1087–1142
+
snapshot-diff — diff two snapshot manifests
section snapshot-diff — diff two snapshot manifests L729–775
+
symbolic-ref — read or write HEAD's symbolic reference
section symbolic-ref — read or write HEAD's symbolic reference L989–1033
+
verify-object — re-hash stored objects to detect corruption
section verify-object — re-hash stored objects to detect corruption L942–989
+
verify-pack — verify PackBundle integrity
section verify-pack — verify PackBundle integrity L1193–1258
+
branch — list, create, or delete branches
section branch — list, create, or delete branches L299–340
+
checkout — switch branches or restore snapshot
section checkout — switch branches or restore snapshot L340–375
+
cherry-pick — apply a single commit's changes
section cherry-pick — apply a single commit's changes L560–592
+
content-grep — full-text search across tracked files
section content-grep — full-text search across tracked files L1201–1250
+
diff — compare working tree or two commits
section diff — compare working tree or two commits L204–241
+
reflog — HEAD and branch movement history
section reflog — HEAD and branch movement history L724–767
+
revert — undo a commit by creating a new one
section revert — undo a commit by creating a new one L524–560
+
shortlog — commit summary by author or agent
section shortlog — commit summary by author or agent L989–1034
+
snapshot — explicit snapshot management
section snapshot — explicit snapshot management L1087–1154
+
verify — whole-repository integrity check
section verify — whole-repository integrity check L1034–1087
+
worktree — multiple simultaneous checkouts
section worktree — multiple simultaneous checkouts L884–923
+
muse reflog — HEAD and branch movement history
section muse reflog — HEAD and branch movement history L1–93
+
Security Architecture — Muse Trust Boundary Reference
section Security Architecture — Muse Trust Boundary Reference L1–506
+
Display Sanitization — ANSI Injection Defence
section Display Sanitization — ANSI Injection Defence L218–263
+
Null-byte separators in hash computation
section Null-byte separators in hash computation L447–458
+
muse workspace — multi-repository workspaces
section muse workspace — multi-repository workspaces L1–141
+
muse worktree — multiple simultaneous branch checkouts
section muse worktree — multiple simultaneous branch checkouts L1–111
+
Object Store (reference — already correct)
section Object Store (reference — already correct) L223–231
+
MIDI commands (excluded from this sprint)
section MIDI commands (excluded from this sprint) L227–234
+
Muse Utility Reference & Anti-Pattern Inventory
section Muse Utility Reference & Anti-Pattern Inventory L1–400
+
Pattern 1 — Manual sha256: prefix construction
section Pattern 1 — Manual sha256: prefix construction L124–158
+
Pattern 10 — Manual cryptographic prefix stripping / construction
section Pattern 10 — Manual cryptographic prefix stripping / construction L357–367
+
Pattern 11 — --format flag instead of --json
section Pattern 11 — --format flag instead of --json L367–400
+
Legitimate --format uses (not violations)
section Legitimate --format uses (not violations) L390–400
+
Pattern 2 — Manual prefix stripping outside the storage boundary
section Pattern 2 — Manual prefix stripping outside the storage boundary L158–199
+
Test code (representative — use short_id consistently)
section Test code (representative — use short_id consistently) L232–254
+
uuid4() for content-addressed entity IDs
section Pattern 7 — uuid.uuid4() for content-addressed entity IDs L294–329
+
Pattern 8 — Manual fake_id equivalent in tests
section Pattern 8 — Manual fake_id equivalent in tests L329–340
+
Pattern 9 — Manual object path construction
section Pattern 9 — Manual object path construction L340–357
+
_types — Object store layout constants
variable
section muse.core._types — Object store layout constants L33–42
+
object_store — Object path utilities
section muse.core.object_store — Object path utilities L42–51
~
run
~
run
~
_commit
−
test_I5_hidden_files_not_staged_by_default
method
method test_I5_hidden_files_not_staged_by_default L144–152
+
test_I5_hidden_files_staged_by_default
method
method test_I5_hidden_files_staged_by_default L144–152
~
_commit
~
blob_id
~
_commit
~
tests/test_security_agent_impersonation.py
.py
2 symbols added, 2 symbols removed, 10 symbols modified
+
test_key_fingerprint_is_canonical_sha256_prefixed
method
method test_key_fingerprint_is_canonical_sha256_prefixed L519–525
~
Manifest
~
blob_id
~
fake_id
~
_write
~
_write
← Older
Oldest on task/museignore-tls
All commits
Newer
fix: coordination.py split_id instead of hardcoded [7:] prefix strip
sha256:9eddee9295ec4f1652bc213e5e9b343eec54a159b3b379f0ae2d119685adb3d8
0 comments
To add a comment, use the Muse CLI:
muse hub commit comment sha256:fbad7b06074f4277af61670185abbe19198d7b5a64a7ac91390277a2ae82d7b3 --body "your comment"
No comments yet. Be the first to start the discussion.