@danypops/papyrus 0.32.0 → 0.32.1

package/extension/src/index.ts

@@ -344,11 +344,12 @@ export default async function (pi: ExtensionAPI) {
 		name: "papyrus_graph",
 		label: "Papyrus Graph",
 		description:
-			"Link artifacts with typed edges (any kind → any kind), view subgraph, update status, or read the mutation event log. " +
+			"Link artifacts with typed edges (any kind → any kind), view subgraph, or read the mutation event log. " +
 			"RELATIONS: references, implements, follows, depends_on, documents, blocks, supersedes, relates_to, gates, triggers, contains, part_of. " +
 			"ACTIONS: link (from+relation+to), unlink (from+relation+to — idempotent, no error if already absent; for Task depends_on/contains prefer the tasks tool's undepend/uncontain), " +
-			"tree (id → bounded BFS subgraph), status (id+status → lifecycle), " +
-			"history (who did what, when — requires id, actor, or session_id).",
+			"tree (id → bounded BFS subgraph), " +
+			"history (who did what, when — requires id, actor, or session_id). " +
+			"status (id+status) exists at the protocol level but is refused for every kind with its own lifecycle (Doc/Rule/Skill/Playbook/Task/Note all reject it) -- use that kind's own domain tool for status changes (docs.activate, rules.enable, tasks.start, etc), never this.",
 		parameters: Type.Object({
 			action: Type.String({ description: "link | unlink | tree | status | history" }),
 			from: Type.Optional(Type.String()),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danypops/papyrus",
-  "version": "0.32.0",
+  "version": "0.32.1",
   "description": "Daemon-backed graph artifacts, evidence-bearing tasks, rules, skills, and native TUI workflows for Pi",
   "type": "module",
   "keywords": ["pi-package"],

package/src/service.ts

@@ -164,9 +164,31 @@ const tasksAuthorityClaim: AuthorityClaim = {
 	denyMessage: () => "task lifecycle changes require a tasks.* operation so history and review invariants are preserved",
 };
 
+/**
+ * The same status-bypass protection Tasks and Notes already have, extended to every other kind
+ * with its own validated transition set (Doc's draft/active/archived, Rule/Skill/Playbook's
+ * active/deprecated) -- graph.status previously let a caller jump straight to any status string,
+ * skipping e.g. Doc's draft-must-go-through-active-before-archived rule entirely.
+ */
+function lifecycleAuthorityClaim(owner: "docs" | "rules" | "skills" | "playbooks", kind: string): AuthorityClaim {
+	return {
+		owner,
+		matchesArtifact: (candidateKind, subtype) => candidateKind === kind && !(kind === "doc" && subtype === NOTE_SUBTYPE),
+		appliesToAction: (action) => action === "status",
+		denyMessage: () => `${kind} lifecycle changes require a ${owner}.* operation so transition validation is preserved`,
+	};
+}
+
 function createAuthorityRegistry(): AuthorityRegistry {
 	const authority = new AuthorityRegistry();
-	authority.claimAll([notesAuthorityClaim, tasksAuthorityClaim]);
+	authority.claimAll([
+		notesAuthorityClaim,
+		tasksAuthorityClaim,
+		lifecycleAuthorityClaim("docs", "doc"),
+		lifecycleAuthorityClaim("rules", "rule"),
+		lifecycleAuthorityClaim("skills", "skill"),
+		lifecycleAuthorityClaim("playbooks", "playbook"),
+	]);
 	return authority;
 }