@holmes-lab/holmes-kit 0.19.2 → 0.19.4

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "@implements A-SPEC-209",
   "name": "@holmes-lab/holmes-kit",
-  "version": "0.19.2",
+  "version": "0.19.4",
   "description": "Holmes-Kit — deterministic Agentic Software Engineering (ASE) harness with causal traceability (spec chain + D-CPG + RTM + phase guardrail)",
   "main": "dist/holmes/mcp/server.js",
   "types": "dist/holmes/mcp/server.d.ts",
@@ -22,6 +22,7 @@
     "node": ">=20"
   },
   "scripts": {
+    "postinstall": "node -e \"const p='./dist/holmes/semantic/local-model.js';if(require('fs').existsSync(p)){process.exitCode=require(p).runModelSetup({automatic:true})}else{console.error('BGE-M3 setup pending: build this source checkout, then run holmes-kit semantic-setup.')}\"",
     "build": "tsc && node -e \"const{execSync}=require('child_process'),fs=require('fs');const id=(()=>{try{return execSync('git rev-parse --short HEAD').toString().trim()}catch{return 'nogit'}})();fs.writeFileSync('dist/.build-id',id+'-'+Date.now().toString(36))\"",
     "test": "npm run typecheck && jest",
     "mcp": "node bin/holmes-mcp.js",
@@ -73,7 +74,8 @@
     "tree-sitter-rust": "^0.21.0",
     "tree-sitter-typescript": "^0.21.2",
     "typescript": "^5.0.0",
-    "web-tree-sitter": "0.27.0"
+    "web-tree-sitter": "0.27.0",
+    "@xenova/transformers": "^2.17.2"
   },
   "repository": {
     "type": "git",
@@ -87,6 +89,7 @@
     "access": "public"
   },
   "allowScripts": {
-    "better-sqlite3@12.11.1": true
+    "better-sqlite3@12.11.1": true,
+    "sharp@0.32.6": true
   }
 }

package/scripts/install.ps1

@@ -1,13 +1,10 @@
+# @implements A-SPEC-593
 <#
 .SYNOPSIS
   Holmes-Kit bootstrap installer for Windows.  @implements A-SPEC-253
 .DESCRIPTION
-  Runs BEFORE npm to fix what npm cannot: a protected CWD (an elevated PowerShell opens in
-  C:\WINDOWS\System32 and `npm install` dies there with EPERM), an unwritable global prefix
-  (C:\Program Files\nodejs), a too-old Node.js, and native-build failures that print compiler
-  noise instead of the one command that installs the toolchain.  Then it runs
-  `npm install -g @holmes-lab/holmes-kit`.  Windows PowerShell 5.1 only; no prompts; nothing
-  persistent is changed.
+  Checks the working directory, npm prefix, Node version, and native install failures.
+  Installs Holmes-Kit and prepares BGE-M3 through the shared CLI. PowerShell 5.1; no prompts.
 .PARAMETER DryRun   Run every check, print the npm command that WOULD run, exit 0 without running it.
 .PARAMETER Version  Package version to install (default: latest).
 .PARAMETER Prefix   Optional npm --prefix for the global install.
@@ -16,8 +13,7 @@
 .NOTES
   Exit codes: 0 ok / already installed, 2 argument error, 3 Node too old, 4 npm failed, 5 not on PATH.
 #>
-# Non-positional on purpose: otherwise `install.ps1 foo` binds `foo` to -Version and runs a REAL
-# `npm install -g @holmes-lab/holmes-kit@foo` from a typo.  Stray tokens land in $Rest -> exit 2.
+# Stray positional tokens land in $Rest and exit 2 before installation.
 [CmdletBinding(PositionalBinding = $false)]
 param(
   [Parameter(Mandatory = $false)][switch]$DryRun,
@@ -34,17 +30,10 @@ $script:NodeMajorFloor = 20
 $script:PackageName = '@holmes-lab/holmes-kit'
 $script:BinName = 'holmes-kit'
 
-# Failure classifier.  Pure: npm's combined output in, one token out.  Precedence is fixed so the
-# most ACTIONABLE cause wins when several signatures appear in the same transcript - an EPERM in a
-# protected directory also drags node-gyp down with it, and telling the user to install MSVC
-# would send them the wrong way.
+# Classify npm failures with directory errors taking precedence over downstream build noise.
 function Get-InstallFailureKind([string]$NpmOutput) {
   if ($null -eq $NpmOutput) { $NpmOutput = '' }
-  # Two EPERMs, one code.  CWD (System32): relocating fixes it.  GLOBAL PREFIX (C:\Program Files\
-  # nodejs, the Node installer's default): only --prefix fixes it.  Measured 2026-08-23: after the
-  # relocation the install still died on `mkdir 'C:\Program Files\nodejs\node_modules\@holmes-lab'`.
-  # Keyed on the FAILING PATH line, not any mention of that directory: every npm stack trace names
-  # npm's own home under Program Files\nodejs\node_modules\npm, which is not the error.
+  # Match the failing prefix path, not npm's own installation mentioned in every stack trace.
   if ($NpmOutput -match 'EPERM' -and $NpmOutput -match "(?m)^npm error path .*Program Files[\\/]+nodejs[\\/]+node_modules[\\/]+(?!npm[\\/])") { return 'eperm-prefix' }
   if ($NpmOutput -match 'EPERM' -and ($NpmOutput -match 'mkdir' -or $NpmOutput -match 'System32' -or $NpmOutput -match 'Program Files')) { return 'eperm' }
   if ($NpmOutput -match 'MSB\d{4}' -or $NpmOutput -match 'MSBuild' -or $NpmOutput -match 'Visual Studio' -or $NpmOutput -match 'vcvarsall') { return 'msbuild' }
@@ -97,10 +86,27 @@ npm exited with an error this installer does not recognise.  The last lines of i
 '@
 }
 
-# Stage helpers
 function Write-Stage([string]$Text) { Write-Host $Text }
 function Write-Problem([string]$Text) { [Console]::Error.WriteLine($Text) }
 
+function Initialize-LocalModel {
+  if ($DryRun) { return }
+  # A-SPEC-594: semantic-setup always downloads, so the opt-in gate lives HERE or Windows keeps fetching while macOS/Linux no longer do. Skip outranks opt-in.
+  if ($env:HOLMES_SKIP_MODEL_INSTALL -eq '1' -or $env:HOLMES_AUTO_MODEL_INSTALL -ne '1') {
+    if ($env:HOLMES_SKIP_MODEL_INSTALL -eq '1') { Write-Stage 'BGE-M3 preparation skipped (HOLMES_SKIP_MODEL_INSTALL=1). Run holmes-kit semantic-setup when ready.' }
+    else { Write-Stage 'BGE-M3 is not prepared automatically. Run holmes-kit semantic-setup to download the public model once, or set HOLMES_AUTO_MODEL_INSTALL=1 before installing. Graph features work without it.' }
+    return
+  }
+  Write-Stage 'Preparing and verifying BGE-M3 through holmes-kit semantic-setup...'
+  $modelCode = 1; $prev = $ErrorActionPreference; $ErrorActionPreference = 'Continue'
+  try {
+    & $script:BinName semantic-setup 2>&1 | ForEach-Object { Write-Stage "$_" }
+    $modelCode = $LASTEXITCODE
+  } catch { $modelCode = 1 } finally { $ErrorActionPreference = $prev }
+  if ($modelCode -eq 0) { Write-Stage 'BGE-M3 ready: local inference verified.' }
+  else { Write-Problem 'BGE-M3 unavailable. Holmes-Kit graph features remain installed. Run holmes-kit semantic-setup, then holmes-kit semantic-check to verify readiness.' }
+}
+
 function Get-NormalizedPath([string]$P) {
   if ([string]::IsNullOrWhiteSpace($P)) { return $null }
   $t = $P.TrimEnd('\', '/')
@@ -118,8 +124,7 @@ function Test-UnderRoot([string]$Candidate, [string]$Root) {
 
 function Test-ProtectedDirectory([string]$Dir) {
   $here = Get-NormalizedPath $Dir
-  # The drive root is protected only when $PWD IS the root (C:\) - everything on the drive is
-  # under it, so treating it like the other roots would relocate every project on the machine.
+  # Protect the drive root itself, not every project beneath it.
   $driveRoot = Get-NormalizedPath ([IO.Path]::GetPathRoot($Dir))
   if ($null -ne $driveRoot -and $here -eq $driveRoot) { return $true }
   $roots = @($env:SystemRoot, $env:ProgramFiles, ${env:ProgramFiles(x86)}, $env:ProgramData)
@@ -165,7 +170,7 @@ function Get-InstalledVersion {
 }
 
 function Get-NpmPrefix {
-  # Skipped in -DryRun only when npm is absent; otherwise it is a local config read, no network.
+  # A local configuration read, without network access.
   $r = Invoke-Npm @('config', 'get', 'prefix')
   if ($r.Code -ne 0) { return $null }
   $v = $r.Output.Trim()
@@ -174,8 +179,7 @@ function Get-NpmPrefix {
 }
 
 function Invoke-Npm([string[]]$Arguments) {
-  # Array arguments, never one interpolated string; npm is npm.cmd on Windows and needs the
-  # .cmd resolution that `&` performs.  Both streams are merged so the classifier sees everything.
+  # Array arguments preserve Windows .cmd resolution; merge streams for failure classification.
   $npm = Get-Command npm.cmd -ErrorAction SilentlyContinue
   if ($null -eq $npm) { $npm = Get-Command npm -ErrorAction SilentlyContinue }
   if ($null -eq $npm) { return @{ Code = 127; Output = 'npm was not found on PATH' } }
@@ -190,7 +194,6 @@ function Invoke-Npm([string[]]$Arguments) {
   return @{ Code = $code; Output = ($lines -join "`n") }
 }
 
-# Pipeline
 function Invoke-Main {
   # Stage 0 - arguments
   if ($null -ne $Rest -and $Rest.Count -gt 0) {
@@ -238,14 +241,13 @@ function Invoke-Main {
     }
     if ($want -ne 'latest' -and $installed -eq $want) {
       Write-Stage ("already installed ({0})" -f $installed)
+      Initialize-LocalModel
       return 0
     }
     Write-Stage ("holmes-kit {0} is installed; will install {1}" -f $installed, $Version)
   }
 
-  # Stage 4b - prefix guard.  A non-elevated shell cannot write the Node installer's default
-  # prefix (C:\Program Files\nodejs) and Stage 1 does not help.  Per-user prefix for THIS call
-  # only; the user's npm config is never modified (REQ-253 Constraint 2).
+  # Stage 4b - use a writable per-user prefix for this call; never modify npm configuration.
   if ([string]::IsNullOrWhiteSpace($Prefix) -and -not (Test-Elevated)) {
     $cur = Get-NpmPrefix
     if ($null -ne $cur -and (Test-ProtectedDirectory $cur)) {
@@ -287,6 +289,7 @@ function Invoke-Main {
   }
   $v = Get-InstalledVersion
   Write-Stage ("holmes-kit {0} installed" -f $v)
+  Initialize-LocalModel
   return 0
 }