feat(sign): add elapsed_ms/exit_code envelope to all JSON paths, fix text-mode stdout bleed
- Add import time + _elapsed() closure to run_header, run_verify, run_request, run_payment - Inject elapsed_ms + exit_code into every --json output path (header, verify, payment, request) - Fix run_verify: exit_code now included in JSON (was absent) - Fix run_payment text mode: signature no longer bleeds to stdout; all info goes to stderr - Remove dead _emit() stub (text-mode branch did nothing) - Update module docstring JSON schemas to include elapsed_ms/exit_code - Add tests/test_cmd_sign_hardening.py (21 tests covering all JSON envelope paths) - Update test_cmd_sign.py: test_text_output_prints_signature_to_stdout → stderr-only assertion
MWP protocol audit: canonical_message() already binds algorithm (first line) and host — downgrade protection confirmed present. No algo_type additions needed.
0 comments
muse hub commit comment sha256:9af9c8ad58e5b13fd3f1ebb77ad7923c443573a1cb323bca9f56c98ac4c3f8b4 --body "your comment"
No comments yet. Be the first to start the discussion.