@kybernesis/create 0.14.10 → 0.15.0

package/dist/init.js

@@ -142,13 +142,14 @@ export async function init(rawName, options = {}) {
         run("npx", ["eve", "add", item, "--overwrite"], { cwd: dir, allowFail: true });
     }
     if (studio) {
-        // Two separate items on purpose: `local` lets the agent act on the USER'S
+        // Three separate items on purpose: `local` lets the agent act on the USER'S
         // machine (consent per effect, granted on the desktop); `manage` lets a
-        // client change THIS AGENT — its dependencies and its source. Different
-        // blast radius, so an agent can have one without the other.
-        console.log(bold("\n2b2  KYBER Studio: local execution + management routes …"));
+        // client change THIS AGENT — its dependencies and its source; `notify`
+        // lets it reach the person's phone. Different blast radius, so an agent
+        // can have one without the others.
+        console.log(bold("\n2b2  KYBER Studio: local execution + management routes + phone notifications …"));
         const studioFailures = [];
-        for (const item of ["local", "manage"]) {
+        for (const item of ["local", "manage", "notify"]) {
             // The @kybernesis/ prefix is load-bearing: a bare name resolves against
             // eve OWN registry, which has no such item, so both installs failed with
             // "not found" — and allowFail swallowed it. --studio therefore did

package/dist/peer-tree.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Who, exactly, is unhappy about the installed eve.
+ *
+ * @remarks
+ * `kyb upgrade` refuses to touch a project whose peer tree is broken (KYB-538),
+ * because changing a project on a bad tree is how a half-upgraded host happens.
+ * That gate read `npm ls eve`'s exit code and nothing else, so any package
+ * anywhere in the tree could veto the whole upgrade.
+ *
+ * On 2026-09-08 one did. `@github-tools/eve-extension` still declares
+ * `>=0.44.0 <0.48.0` while every Kybernesis package declares the 0.49 line the
+ * host actually runs. The upgrade aborted before `repairHostArtifacts`, so
+ * kyber did not receive the KYB-542 reclaim job it was being upgraded for, and
+ * the job had to be installed by hand.
+ *
+ * A third-party range that trails the framework is not a broken install. A
+ * Kybernesis package disagreeing with the framework it is pinned against is.
+ * So the verdict distinguishes them, and anything it cannot attribute is
+ * treated as fatal rather than waved through.
+ */
+export interface PeerTreeVerdict {
+    /** Nothing in the tree objects to the installed version. */
+    readonly ok: boolean;
+    /** Packages whose declared range excludes the installed version, deduplicated and sorted. */
+    readonly offenders: readonly string[];
+    /** An objection from a Kybernesis package, or one that could not be attributed. */
+    readonly fatal: boolean;
+}
+/**
+ * Read `npm ls <pkg> --json` and say whether the upgrade may proceed.
+ *
+ * Unparseable output is fatal: not knowing the shape of the tree is exactly the
+ * case the gate exists for.
+ */
+export declare function assessPeerTree(stdout: string): PeerTreeVerdict;
+/** What to print when a third-party range trails the framework but nothing else does. */
+export declare function staleRangeWarning(offenders: readonly string[], dependency: string): string;

package/dist/peer-tree.js

@@ -0,0 +1,62 @@
+const OWNED_SCOPE = "@kybernesis/";
+/** Every `from node_modules/<pkg>` in one npm `invalid` string. */
+function requiredBy(invalid) {
+    const found = [];
+    const pattern = /from node_modules\/((?:@[^/\s,]+\/)?[^/\s,]+)/g;
+    let match = pattern.exec(invalid);
+    while (match !== null) {
+        if (match[1])
+            found.push(match[1]);
+        match = pattern.exec(invalid);
+    }
+    return found;
+}
+function collect(node, offenders, unattributed) {
+    if (!node || typeof node !== "object")
+        return;
+    const record = node;
+    if (typeof record.invalid === "string" && record.invalid.length > 0) {
+        const owners = requiredBy(record.invalid);
+        // An objection nobody signed is not evidence that the tree is fine.
+        if (owners.length === 0)
+            unattributed.seen = true;
+        for (const owner of owners)
+            offenders.add(owner);
+    }
+    const dependencies = record.dependencies;
+    if (dependencies && typeof dependencies === "object") {
+        for (const child of Object.values(dependencies)) {
+            collect(child, offenders, unattributed);
+        }
+    }
+}
+/**
+ * Read `npm ls <pkg> --json` and say whether the upgrade may proceed.
+ *
+ * Unparseable output is fatal: not knowing the shape of the tree is exactly the
+ * case the gate exists for.
+ */
+export function assessPeerTree(stdout) {
+    let parsed;
+    try {
+        parsed = JSON.parse(stdout);
+    }
+    catch {
+        return { ok: false, offenders: [], fatal: true };
+    }
+    const offenders = new Set();
+    const unattributed = { seen: false };
+    collect(parsed, offenders, unattributed);
+    if (offenders.size === 0 && !unattributed.seen)
+        return { ok: true, offenders: [], fatal: false };
+    const sorted = [...offenders].sort();
+    const ours = sorted.some((name) => name.startsWith(OWNED_SCOPE));
+    return { ok: false, offenders: sorted, fatal: ours || unattributed.seen };
+}
+/** What to print when a third-party range trails the framework but nothing else does. */
+export function staleRangeWarning(offenders, dependency) {
+    const names = offenders.join(", ");
+    return (`${names} declare${offenders.length === 1 ? "s" : ""} a ${dependency} range that excludes the installed version. ` +
+        `Every Kybernesis package agrees with it, and the runtime already runs on it, so the upgrade continues. ` +
+        `Upgrade or replace ${offenders.length === 1 ? "that package" : "those packages"} when a compatible release exists.`);
+}

package/dist/templates.d.ts

@@ -75,3 +75,8 @@ export declare function exeEvalConfigTs(): string;
 export declare function arcanaMemorySlotTs(options: {
     extensionMounted: boolean;
 }): string;
+/**
+ * The notify mount. One source for `kyb init --studio`, `kyb upgrade` and the
+ * registry item, so the three can never disagree about what the file says.
+ */
+export declare function notifyMountTs(): string;

package/dist/templates.js

@@ -722,3 +722,14 @@ export default defineMemory({
 });
 `;
 }
+/**
+ * The notify mount. One source for `kyb init --studio`, `kyb upgrade` and the
+ * registry item, so the three can never disagree about what the file says.
+ */
+export function notifyMountTs() {
+    return `// Tell the person's phone when this agent parks on a question or finishes a
+// reply while they are away. The person is the verified session principal;
+// the control plane does the ringing. See @kybernesis/notify.
+export { default } from "@kybernesis/notify/extension";
+`;
+}

package/dist/upgrade.d.ts

@@ -1,5 +1,20 @@
 import { type AgentInputLimit } from "./agent-limits.js";
 export declare function agentInputLimitUpgradeMessage(limit: AgentInputLimit): string;
+/**
+ * A Studio agent that cannot ring the person's phone.
+ *
+ * `@kybernesis/notify` arrived after most agents were made, and an upgrade
+ * only ever moved packages an agent already had — so every existing agent
+ * would have stayed silent on the phone, and the first sign would have been
+ * a person waiting for a notification that never came. The agents that need
+ * it are the ones a desktop can manage: anything with `@kybernesis/manage`.
+ *
+ * The pure part — is it needed, is the mount there — is separate from the
+ * npm call so it can be tested without a network.
+ */
+export declare function needsNotify(deps: Record<string, string>): boolean;
+/** Write the notify mount if it is missing. Never touches a file that exists. */
+export declare function repairNotifyMount(cwd: string): "mounted" | "present";
 export type GithubToolsMountRepair = {
     kind: "missing" | "current" | "updated" | "customized";
 } | {

package/dist/upgrade.js

@@ -5,6 +5,7 @@ import { join } from "node:path";
 import { pathToFileURL } from "node:url";
 import { upsertEnv } from "./envfile.js";
 import { reconcileHostArtifact } from "./host-artifacts.js";
+import { assessPeerTree, staleRangeWarning } from "./peer-tree.js";
 import { dockerPruneCronArtifact } from "./docker-prune-cron.js";
 import { findMatchingAgentServiceUnit, repairManageRestart } from "./systemd.js";
 import { repairTerminalSandboxCleanupHooks } from "./sandbox-cleanup.js";
@@ -14,7 +15,7 @@ import { inspectEveAgent } from "./agent-limits.js";
 import { remoteProjectPath, sshTarget } from "./deploy.js";
 import { classifyModelReach } from "./model-reach.js";
 import { checkSelfVersion, versionLt } from "./self-version.js";
-import { LEGACY_GITHUB_TOOLS_MOUNT, githubToolsMountTs } from "./templates.js";
+import { LEGACY_GITHUB_TOOLS_MOUNT, githubToolsMountTs, notifyMountTs } from "./templates.js";
 import { confirmEveUpgrade, inspectBuzzSessions, inspectDurableRuns, reconcileEvalScript, } from "./upgrade-sessions.js";
 export function agentInputLimitUpgradeMessage(limit) {
     switch (limit.kind) {
@@ -164,6 +165,51 @@ function repairBuzzSetup(cwd, deps) {
         console.log(`    ${dim("Takes effect after the next build and restart.")}\n`);
     }
 }
+/**
+ * A Studio agent that cannot ring the person's phone.
+ *
+ * `@kybernesis/notify` arrived after most agents were made, and an upgrade
+ * only ever moved packages an agent already had — so every existing agent
+ * would have stayed silent on the phone, and the first sign would have been
+ * a person waiting for a notification that never came. The agents that need
+ * it are the ones a desktop can manage: anything with `@kybernesis/manage`.
+ *
+ * The pure part — is it needed, is the mount there — is separate from the
+ * npm call so it can be tested without a network.
+ */
+export function needsNotify(deps) {
+    return Boolean(deps["@kybernesis/manage"]) && !deps["@kybernesis/notify"];
+}
+/** Write the notify mount if it is missing. Never touches a file that exists. */
+export function repairNotifyMount(cwd) {
+    const mount = join(cwd, "agent/extensions/notify.ts");
+    if (existsSync(mount))
+        return "present";
+    mkdirSync(join(cwd, "agent/extensions"), { recursive: true });
+    writeFileSync(mount, notifyMountTs());
+    return "mounted";
+}
+function repairNotifySetup(cwd, deps) {
+    if (!deps["@kybernesis/manage"])
+        return;
+    const done = [];
+    if (needsNotify(deps)) {
+        const ok = run("npm", ["install", "@kybernesis/notify@latest", "--no-audit", "--no-fund"], { cwd, allowFail: true, quiet: true });
+        if (!ok) {
+            console.log(`  ${yellow("!")} could not install @kybernesis/notify, so this agent cannot reach the person's phone.\n` +
+                `    Run: npm install @kybernesis/notify@latest && npx kyb upgrade`);
+            return;
+        }
+        deps["@kybernesis/notify"] = "latest";
+        done.push("installed @kybernesis/notify");
+    }
+    if (repairNotifyMount(cwd) === "mounted")
+        done.push("mounted it (agent/extensions/notify.ts)");
+    if (done.length > 0) {
+        console.log(`  ${green("+")} Notify: ${done.join("; ")} ${dim("— the person's phone hears when this agent needs them")}`);
+        console.log(`    ${dim("Takes effect after the next build and restart.")}\n`);
+    }
+}
 /** Quote one argument for the manual shell commands printed after a failed repair. */
 function shellQuote(value) {
     return `'${value.replaceAll("'", `'"'"'`)}'`;
@@ -775,6 +821,7 @@ export async function upgrade(options = {}) {
         reportGithubToolsMountRepair(cwd);
         repairHostArtifacts(cwd, deps);
         repairEvalCommand(cwd);
+        repairNotifySetup(cwd, deps);
         repairManageRestart(cwd, deps);
         return;
     }
@@ -821,9 +868,22 @@ export async function upgrade(options = {}) {
     }
     const validation = commandResult("npm", ["ls", "eve"], cwd);
     if (validation.status !== 0) {
-        fail("npm ls eve failed. The installed peer tree is not valid.");
-        recoveryGuidance(targets, stoppedBridge ?? undefined);
-        return;
+        /**
+         * Judge WHO objects, not merely that something did.
+         *
+         * A third-party extension whose declared range trails the framework is not
+         * a broken install, and letting it veto the upgrade left kyber without the
+         * host artifacts it was being upgraded for (KYB-548). A Kybernesis package
+         * disagreeing with the framework it is pinned against still stops
+         * everything, and so does an objection we cannot attribute.
+         */
+        const verdict = assessPeerTree(commandResult("npm", ["ls", "eve", "--json"], cwd, false).stdout);
+        if (verdict.fatal || verdict.ok) {
+            fail("npm ls eve failed. The installed peer tree is not valid.");
+            recoveryGuidance(targets, stoppedBridge ?? undefined);
+            return;
+        }
+        console.log(yellow(`  ! ${staleRangeWarning(verdict.offenders, "eve")}`));
     }
     if (stoppedBridge && !startStoppedBridge(cwd, stoppedBridge))
         return;
@@ -833,6 +893,7 @@ export async function upgrade(options = {}) {
     reportGithubToolsMountRepair(cwd);
     repairHostArtifacts(cwd, deps);
     repairEvalCommand(cwd);
+    repairNotifySetup(cwd, deps);
     repairManageRestart(cwd, deps);
     run("npm", ["run", "typecheck"], { cwd });
     if (eveChanged) {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@kybernesis/create",
-  "version": "0.14.10",
-  "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent — plus doctor and upgrade.",
+  "version": "0.15.0",
+  "description": "The Kybernesis agent scaffolder and FDE toolkit: one command to a governed, remembering, multiplayer, self-testing eve agent \u2014 plus doctor and upgrade.",
   "license": "Apache-2.0",
   "type": "module",
   "homepage": "https://kybernesis.ai",