@holmes-lab/holmes-kit 0.7.0 → 0.8.1

package/dist/holmes/update/update-notice.js

@@ -0,0 +1,131 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NPM_URL = void 0;
+exports.compareSemver = compareSemver;
+exports.readCache = readCache;
+exports.installModeGuide = installModeGuide;
+exports.composeBanner = composeBanner;
+exports.shouldQuery = shouldQuery;
+exports.cacheIsStale = cacheIsStale;
+// @implements A-SPEC-531.1
+// The session banner and update notice, as a PURE core. Every side channel — the filesystem, the
+// clock, the environment — is a parameter, so the whole module verifies offline. The delivery
+// points (SessionStart hook, MCP instructions, init wiring) consume this in A-SPEC-531.2.
+//
+// No new dependency: semver comparison is a three-integer compare (our versions are plain
+// major.minor.patch — a full semver library would carry prerelease/build code this never runs), and
+// the registry query (A-SPEC-531.2) uses Node's built-in https.
+const path = __importStar(require("node:path"));
+exports.NPM_URL = 'https://www.npmjs.com/package/@holmes-lab/holmes-kit';
+const DEFAULT_TTL_MS = 24 * 3600_000;
+/** Parse `major.minor.patch` to a 3-tuple; a non-numeric field becomes 0 (never throws). */
+function triple(v) {
+    const parts = String(v).split('.');
+    const n = (i) => { const x = Number.parseInt(parts[i] ?? '', 10); return Number.isFinite(x) ? x : 0; };
+    return [n(0), n(1), n(2)];
+}
+/** -1 if a<b, 0 if equal, 1 if a>b — NUMERIC per field, so 0.9.0 < 0.10.0 (a string compare fails). */
+function compareSemver(a, b) {
+    const x = triple(a);
+    const y = triple(b);
+    for (let i = 0; i < 3; i++) {
+        if (x[i] < y[i])
+            return -1;
+        if (x[i] > y[i])
+            return 1;
+    }
+    return 0;
+}
+/** The cache file, read only — no network, no write. Anything unreadable/malformed/mis-shaped → null. */
+function readCache(home, readFile) {
+    let raw;
+    try {
+        raw = readFile(path.join(home, '.holmes', 'update-check.json'));
+    }
+    catch {
+        return null;
+    }
+    if (!raw)
+        return null;
+    try {
+        const v = JSON.parse(raw);
+        if (v && typeof v === 'object'
+            && typeof v.latest === 'string'
+            && typeof v.checkedAt === 'number') {
+            return { latest: v.latest, checkedAt: v.checkedAt };
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+/** The one-line update guidance, branched by install mode. `source` returns null (git updates it). */
+function installModeGuide(mode, latest, current) {
+    const head = `[Holmes-Kit] Update available: ${latest} (current ${current}).`;
+    switch (mode) {
+        case 'global-npx':
+            return `${head} Run: npm i -g @holmes-lab/holmes-kit@latest, then holmes-kit init --force (re-pins wiring; requires HOLMES_APPROVAL).`;
+        case 'local-dep':
+            return `${head} Run: npm i -D @holmes-lab/holmes-kit@latest`;
+        case 'source':
+            return null;
+    }
+}
+/**
+ * The banner: always an English intro line (version + governance rule + npm page). If the cache
+ * knows a newer version AND the install mode has an update path, a second guidance line follows.
+ */
+function composeBanner(input) {
+    const intro = `[Holmes-Kit] This session is governed by Holmes-Kit v${input.current} (No Spec, No Code) — ${input.npmUrl}`;
+    const latest = input.cached?.latest;
+    if (latest && compareSemver(latest, input.current) > 0) {
+        const guide = installModeGuide(input.mode, latest, input.current);
+        if (guide)
+            return `${intro}\n${guide}`;
+    }
+    return intro;
+}
+/** Whether a network refresh is allowed at all. Opt-out via HOLMES_NO_UPDATE_CHECK or CI. */
+function shouldQuery(env) {
+    return !env.HOLMES_NO_UPDATE_CHECK && !env.CI;
+}
+/** Whether the cache is old enough to refresh. A missing cache is stale. */
+function cacheIsStale(cached, now, ttlMs = DEFAULT_TTL_MS) {
+    if (!cached)
+        return true;
+    return now - cached.checkedAt > ttlMs;
+}

package/package.json

@@ -1,7 +1,7 @@
 {
   "//": "@implements A-SPEC-209",
   "name": "@holmes-lab/holmes-kit",
-  "version": "0.7.0",
+  "version": "0.8.1",
   "description": "Holmes-Kit — deterministic Agentic Software Engineering (ASE) harness with causal traceability (spec chain + D-CPG + RTM + phase guardrail)",
   "main": "dist/holmes/mcp/server.js",
   "types": "dist/holmes/mcp/server.d.ts",