@mneme-ai/core 2.19.96 → 2.19.97

package/dist/superlock/index.js

@@ -0,0 +1,218 @@
+/**
+ * v2.19.97 — SUPERLOCK + DEV-SOURCE GUARD.
+ *
+ * Solves the race condition class user reported in the post-mortem of
+ * their broken install:
+ *
+ *   1. Pulse banner advertises [AUTO-ACTION] mneme.system.upgrade
+ *   2. Daemon (or shepherd) starts auto-upgrade in background
+ *      → deletes bot/platforms/index.js to rewrite
+ *   3. User simultaneously runs `npm install -g mneme-ai` from terminal
+ *   4. EBUSY on libvips DLL because daemon is mid-write
+ *   5. Half-finished install: missing files; every `mneme` command
+ *      throws ERR_MODULE_NOT_FOUND
+ *
+ * Plus the user discovered a SECOND install source: when Mneme is
+ * checked out as a dev repo (D:\lib_ai_git\packages\cli\bin\mneme.js),
+ * THAT daemon ALSO honours pulse auto-upgrade mandates — and tries to
+ * upgrade the *global npm install*, racing with whatever the user is
+ * doing.  Two install roots → two daemons → two upgrade triggers →
+ * guaranteed race.
+ *
+ * Two-layer fix:
+ *
+ *   DEV-SOURCE GUARD
+ *     Detect when the running mneme binary is from a source checkout
+ *     (path contains `packages/cli/bin/`) rather than a published
+ *     `node_modules/mneme-ai/` tree.  When detected, refuse ALL
+ *     auto-upgrade attempts + drop the upgrade [AUTO-ACTION] from
+ *     pulse output entirely.  Dev source manages its own upgrades
+ *     via git pull.
+ *
+ *   SUPERLOCK
+ *     Single global file mutex at `~/.mneme-global/superlock.flag`
+ *     that EVERY install/upgrade path must grab before mutating the
+ *     on-disk install.  Lock content is JSON with { pid, startedAt,
+ *     intent, role } so observers can see who's holding it + why.
+ *     Stale locks (>10 min) are auto-broken.  Lock acquisition is
+ *     atomic-rename (POSIX + Windows safe).
+ *
+ * Composes with v2.19.58 install-incoming.flag (5-min flag window),
+ * v2.19.57 shepherd, v2.19.62 phoenix DLL extraction, but is the
+ * single source of truth that serialises EVERYTHING.
+ */
+import { existsSync, readFileSync, writeFileSync, mkdirSync, unlinkSync, renameSync } from "node:fs";
+import { join, normalize } from "node:path";
+import { homedir } from "node:os";
+import { randomBytes } from "node:crypto";
+const GLOBAL_DIR = ".mneme-global";
+const LOCK = "superlock.flag";
+const STALE_MS = 10 * 60 * 1000; // 10 min — anything older is presumed dead
+function lockDir() {
+    const d = join(homedir(), GLOBAL_DIR);
+    if (!existsSync(d)) {
+        try {
+            mkdirSync(d, { recursive: true });
+        }
+        catch { /* */ }
+    }
+    return d;
+}
+function lockPath() { return join(lockDir(), LOCK); }
+/** Read current lock state if any. Returns null if no lock or unreadable. */
+export function readLock() {
+    const p = lockPath();
+    if (!existsSync(p))
+        return null;
+    try {
+        return JSON.parse(readFileSync(p, "utf8"));
+    }
+    catch {
+        return null;
+    }
+}
+/** True iff a lock exists AND is fresh enough to honour. Stale locks
+ *  (older than STALE_MS) are ignored because the holder probably died. */
+export function isLockHeld() {
+    const s = readLock();
+    if (!s)
+        return false;
+    try {
+        const age = Date.now() - new Date(s.startedAt).getTime();
+        return age < STALE_MS;
+    }
+    catch {
+        return false;
+    }
+}
+/** Atomic acquire. Returns true if we now hold the lock; false if
+ *  somebody else holds a fresh one. Uses tmpfile + rename for atomicity
+ *  on both POSIX and Windows. */
+export function acquireLock(state) {
+    // Check existing lock.
+    const existing = readLock();
+    if (existing) {
+        const age = Date.now() - new Date(existing.startedAt).getTime();
+        if (age < STALE_MS && existing.pid !== state.pid)
+            return false;
+        // Stale — break it.
+        try {
+            unlinkSync(lockPath());
+        }
+        catch { /* */ }
+    }
+    // Atomic: write to tmp then rename. Two concurrent acquirers race on
+    // rename; one wins, the other's rename overwrites — both think they
+    // won. Belt-and-suspenders: re-read after writing and check pid.
+    const tmp = join(lockDir(), `superlock.${process.pid}.${randomBytes(4).toString("hex")}.tmp`);
+    const full = { ...state, startedAt: new Date().toISOString() };
+    try {
+        writeFileSync(tmp, JSON.stringify(full, null, 2), "utf8");
+        renameSync(tmp, lockPath());
+    }
+    catch {
+        try {
+            unlinkSync(tmp);
+        }
+        catch { /* */ }
+        return false;
+    }
+    // Verify we're the winner.
+    const s = readLock();
+    return !!s && s.pid === state.pid;
+}
+/** Release the lock if we still hold it. Caller MUST always call this
+ *  in a `finally` block to avoid leaks. */
+export function releaseLock(pid = process.pid) {
+    const s = readLock();
+    if (!s)
+        return true;
+    if (s.pid !== pid)
+        return false; // somebody else owns it now
+    try {
+        unlinkSync(lockPath());
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Wrap any async install/upgrade action with the superlock. Throws
+ *  with a descriptive error if the lock is held by another fresh
+ *  process. */
+export async function withSuperlock(state, fn) {
+    const acquired = acquireLock({ ...state, pid: process.pid });
+    if (!acquired) {
+        const held = readLock();
+        throw new Error(`SUPERLOCK: another mneme install/upgrade is in progress` +
+            (held ? ` (pid=${held.pid}, role=${held.role}, intent=${held.intent}, since ${held.startedAt})` : "") +
+            `. Wait for it to finish, or run \`mneme superlock --break\` if you believe it is stuck.`);
+    }
+    try {
+        return await fn();
+    }
+    finally {
+        releaseLock();
+    }
+}
+// ─── DEV-SOURCE GUARD ──────────────────────────────────────────────────
+/** True iff the currently-running mneme binary lives in a source
+ *  checkout (path contains `/packages/cli/` or `\packages\cli\`) rather
+ *  than a node_modules install. Dev-source must NEVER auto-upgrade
+ *  itself — git pull is the right tool for that. */
+export function isDevSource(scriptPath) {
+    // Distinguish "caller passed nothing" (use argv default) from "caller
+    // explicitly passed empty" (refuse to guess) — the latter should
+    // return false so callers can opt out of process-state inspection.
+    const raw = scriptPath === undefined ? (process.argv[1] ?? "") : scriptPath;
+    if (!raw)
+        return false;
+    const path = normalize(raw);
+    // Patterns that indicate dev checkout:
+    //   .../packages/cli/bin/mneme.js
+    //   .../packages/cli/dist/index.js
+    //   .../packages/cli/src/index.ts
+    const devPatterns = [
+        /[\\/]packages[\\/]cli[\\/]/,
+        /[\\/]lib_ai_git[\\/]/,
+        /[\\/]mneme-ai[\\/]packages[\\/]/,
+    ];
+    // Conversely, definitely-not-dev-source patterns (real install):
+    const installPatterns = [
+        /[\\/]node_modules[\\/]mneme-ai[\\/]/,
+        /[\\/]\.npm-global[\\/]/,
+        /[\\/]npm[\\/]node_modules[\\/]mneme-ai[\\/]/,
+    ];
+    for (const p of installPatterns)
+        if (p.test(path))
+            return false;
+    for (const p of devPatterns)
+        if (p.test(path))
+            return true;
+    return false;
+}
+/** Human-readable explanation surfaced when dev-source guard fires. */
+export function devSourceMessage(scriptPath) {
+    const path = scriptPath ?? process.argv[1] ?? "(unknown)";
+    return [
+        `Mneme is running from a dev source checkout, not a published npm install.`,
+        `  binary path:  ${path}`,
+        `  auto-upgrade: REFUSED (dev source manages itself via git pull)`,
+        `To pull latest dev changes:  cd <repo> && git pull && pnpm install`,
+        `To use the published version: install via npm install -g mneme-ai in a separate shell.`,
+    ].join("\n");
+}
+/** The decision the pulse renderer + auto-upgrade hooks call before
+ *  emitting `[AUTO-ACTION] mneme.system.upgrade`.  Returns true when
+ *  the auto-action is safe to advertise + execute. */
+export function autoUpgradeAllowed(scriptPath) {
+    if (isDevSource(scriptPath)) {
+        return { allowed: false, reason: "dev-source-detected" };
+    }
+    if (isLockHeld()) {
+        const s = readLock();
+        return { allowed: false, reason: `superlock-held-by-${s?.role ?? "unknown"}` };
+    }
+    return { allowed: true, reason: "ok" };
+}
+//# sourceMappingURL=index.js.map

package/dist/superlock/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/superlock/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,UAAU,EAAY,MAAM,SAAS,CAAC;AAC/G,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,UAAU,GAAG,eAAe,CAAC;AACnC,MAAM,IAAI,GAAG,gBAAgB,CAAC;AAC9B,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,2CAA2C;AAc5E,SAAS,OAAO;IACd,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,IAAI,CAAC;YAAC,SAAS,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAClF,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,QAAQ,KAAa,OAAO,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;AAE7D,6EAA6E;AAC7E,MAAM,UAAU,QAAQ;IACtB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAc,CAAC;IAAC,CAAC;IAChE,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACxB,CAAC;AAED;0EAC0E;AAC1E,MAAM,UAAU,UAAU;IACxB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QACzD,OAAO,GAAG,GAAG,QAAQ,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AAC3B,CAAC;AAED;;iCAEiC;AACjC,MAAM,UAAU,WAAW,CAAC,KAAmC;IAC7D,uBAAuB;IACvB,MAAM,QAAQ,GAAG,QAAQ,EAAE,CAAC;IAC5B,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;QAChE,IAAI,GAAG,GAAG,QAAQ,IAAI,QAAQ,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QAC/D,oBAAoB;QACpB,IAAI,CAAC;YAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjD,CAAC;IACD,qEAAqE;IACrE,oEAAoE;IACpE,iEAAiE;IACjE,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,aAAa,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9F,MAAM,IAAI,GAAc,EAAE,GAAG,KAAK,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAC1E,IAAI,CAAC;QACH,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC1D,UAAU,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YAAC,UAAU,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,2BAA2B;IAC3B,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,KAAK,CAAC,GAAG,CAAC;AACpC,CAAC;AAED;2CAC2C;AAC3C,MAAM,UAAU,WAAW,CAAC,MAAc,OAAO,CAAC,GAAG;IACnD,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,CAAC,4BAA4B;IAC7D,IAAI,CAAC;QAAC,UAAU,CAAC,QAAQ,EAAE,CAAC,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;IAC5C,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;AACzB,CAAC;AAED;;eAEe;AACf,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAA2C,EAC3C,EAAoB;IAEpB,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,GAAG,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;IAC7D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,yDAAyD;YACzD,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,GAAG,UAAU,IAAI,CAAC,IAAI,YAAY,IAAI,CAAC,MAAM,WAAW,IAAI,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,yFAAyF,CAC1F,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QAAC,OAAO,MAAM,EAAE,EAAE,CAAC;IAAC,CAAC;YAClB,CAAC;QAAC,WAAW,EAAE,CAAC;IAAC,CAAC;AAC5B,CAAC;AAED,0EAA0E;AAE1E;;;oDAGoD;AACpD,MAAM,UAAU,WAAW,CAAC,UAAmB;IAC7C,sEAAsE;IACtE,iEAAiE;IACjE,mEAAmE;IACnE,MAAM,GAAG,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5E,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC;IAC5B,uCAAuC;IACvC,kCAAkC;IAClC,mCAAmC;IACnC,kCAAkC;IAClC,MAAM,WAAW,GAAG;QAClB,4BAA4B;QAC5B,sBAAsB;QACtB,iCAAiC;KAClC,CAAC;IACF,iEAAiE;IACjE,MAAM,eAAe,GAAG;QACtB,qCAAqC;QACrC,wBAAwB;QACxB,6CAA6C;KAC9C,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,eAAe;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;IAChE,KAAK,MAAM,CAAC,IAAI,WAAW;QAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,gBAAgB,CAAC,UAAmB;IAClD,MAAM,IAAI,GAAG,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;IAC1D,OAAO;QACL,2EAA2E;QAC3E,mBAAmB,IAAI,EAAE;QACzB,kEAAkE;QAClE,oEAAoE;QACpE,wFAAwF;KACzF,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;sDAEsD;AACtD,MAAM,UAAU,kBAAkB,CAAC,UAAmB;IACpD,IAAI,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,EAAE,CAAC;IAC3D,CAAC;IACD,IAAI,UAAU,EAAE,EAAE,CAAC;QACjB,MAAM,CAAC,GAAG,QAAQ,EAAE,CAAC;QACrB,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qBAAqB,CAAC,EAAE,IAAI,IAAI,SAAS,EAAE,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACzC,CAAC"}

package/dist/superlock/superlock.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=superlock.test.d.ts.map

package/dist/superlock/superlock.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"superlock.test.d.ts","sourceRoot":"","sources":["../../src/superlock/superlock.test.ts"],"names":[],"mappings":""}

package/dist/superlock/superlock.test.js

@@ -0,0 +1,105 @@
+import { describe, expect, it, beforeEach, afterEach } from "vitest";
+import { isDevSource, autoUpgradeAllowed, acquireLock, releaseLock, isLockHeld, readLock, withSuperlock, devSourceMessage } from "./index.js";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { existsSync, unlinkSync } from "node:fs";
+const LOCK_PATH = join(homedir(), ".mneme-global", "superlock.flag");
+describe("superlock", () => {
+    describe("isDevSource", () => {
+        it("recognises a dev checkout path", () => {
+            expect(isDevSource("D:\\lib_ai_git\\packages\\cli\\bin\\mneme.js")).toBe(true);
+            expect(isDevSource("/Users/dev/lib_ai_git/packages/cli/bin/mneme.js")).toBe(true);
+            expect(isDevSource("C:\\src\\mneme-ai\\packages\\cli\\dist\\index.js")).toBe(true);
+        });
+        it("recognises a node_modules install as NOT dev", () => {
+            expect(isDevSource("C:\\nvm4w\\nodejs\\node_modules\\mneme-ai\\bin\\mneme.js")).toBe(false);
+            expect(isDevSource("/usr/local/lib/node_modules/mneme-ai/bin/mneme.js")).toBe(false);
+            expect(isDevSource("/Users/x/.npm-global/lib/node_modules/mneme-ai/bin/mneme.js")).toBe(false);
+        });
+        it("returns false on explicit empty path (no argv fallback when caller opts out)", () => {
+            expect(isDevSource("")).toBe(false);
+        });
+    });
+    describe("autoUpgradeAllowed", () => {
+        beforeEach(() => { try {
+            if (existsSync(LOCK_PATH))
+                unlinkSync(LOCK_PATH);
+        }
+        catch { /* */ } });
+        afterEach(() => { try {
+            if (existsSync(LOCK_PATH))
+                unlinkSync(LOCK_PATH);
+        }
+        catch { /* */ } });
+        it("refuses upgrade when running from dev source", () => {
+            const r = autoUpgradeAllowed("D:\\lib_ai_git\\packages\\cli\\bin\\mneme.js");
+            expect(r.allowed).toBe(false);
+            expect(r.reason).toBe("dev-source-detected");
+        });
+        it("allows upgrade from real npm install when no lock held", () => {
+            const r = autoUpgradeAllowed("/usr/local/lib/node_modules/mneme-ai/bin/mneme.js");
+            expect(r.allowed).toBe(true);
+            expect(r.reason).toBe("ok");
+        });
+    });
+    describe("acquire/release lock", () => {
+        beforeEach(() => { try {
+            if (existsSync(LOCK_PATH))
+                unlinkSync(LOCK_PATH);
+        }
+        catch { /* */ } });
+        afterEach(() => { try {
+            if (existsSync(LOCK_PATH))
+                unlinkSync(LOCK_PATH);
+        }
+        catch { /* */ } });
+        it("first acquire succeeds, second from different pid fails", () => {
+            expect(acquireLock({ pid: 11111, role: "test", intent: "first try", holderPath: "/tmp/a" })).toBe(true);
+            expect(isLockHeld()).toBe(true);
+            // Try to acquire as a different pid while fresh lock is held.
+            expect(acquireLock({ pid: 22222, role: "test", intent: "second try", holderPath: "/tmp/b" })).toBe(false);
+        });
+        it("release lets the next acquirer in", () => {
+            expect(acquireLock({ pid: process.pid, role: "test", intent: "self", holderPath: "/tmp/x" })).toBe(true);
+            expect(releaseLock(process.pid)).toBe(true);
+            expect(isLockHeld()).toBe(false);
+            expect(acquireLock({ pid: 33333, role: "test", intent: "next", holderPath: "/tmp/y" })).toBe(true);
+        });
+        it("readLock returns null when no lock exists", () => {
+            expect(readLock()).toBeNull();
+        });
+    });
+    describe("withSuperlock", () => {
+        beforeEach(() => { try {
+            if (existsSync(LOCK_PATH))
+                unlinkSync(LOCK_PATH);
+        }
+        catch { /* */ } });
+        afterEach(() => { try {
+            if (existsSync(LOCK_PATH))
+                unlinkSync(LOCK_PATH);
+        }
+        catch { /* */ } });
+        it("runs fn, releases lock on success", async () => {
+            const result = await withSuperlock({ role: "test", intent: "demo", holderPath: "/tmp/z" }, async () => {
+                expect(isLockHeld()).toBe(true);
+                return 42;
+            });
+            expect(result).toBe(42);
+            expect(isLockHeld()).toBe(false);
+        });
+        it("releases lock even when fn throws", async () => {
+            await expect(withSuperlock({ role: "test", intent: "boom", holderPath: "/tmp/z" }, async () => { throw new Error("boom"); })).rejects.toThrow("boom");
+            expect(isLockHeld()).toBe(false);
+        });
+    });
+    describe("devSourceMessage", () => {
+        it("includes path, refusal, and remediation", () => {
+            const msg = devSourceMessage("D:\\lib_ai_git\\packages\\cli\\bin\\mneme.js");
+            expect(msg).toContain("dev source");
+            expect(msg).toContain("REFUSED");
+            expect(msg).toContain("git pull");
+        });
+    });
+});
+//# sourceMappingURL=superlock.test.js.map

package/dist/superlock/superlock.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"superlock.test.js","sourceRoot":"","sources":["../../src/superlock/superlock.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AACrE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9I,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAEjD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,eAAe,EAAE,gBAAgB,CAAC,CAAC;AAErE,QAAQ,CAAC,WAAW,EAAE,GAAG,EAAE;IACzB,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;QAC3B,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;YACxC,MAAM,CAAC,WAAW,CAAC,8CAA8C,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC/E,MAAM,CAAC,WAAW,CAAC,iDAAiD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAClF,MAAM,CAAC,WAAW,CAAC,kDAAkD,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrF,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,CAAC,WAAW,CAAC,0DAA0D,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5F,MAAM,CAAC,WAAW,CAAC,mDAAmD,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrF,MAAM,CAAC,WAAW,CAAC,6DAA6D,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjG,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;YACtF,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;QAClC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/F,EAAE,CAAC,8CAA8C,EAAE,GAAG,EAAE;YACtD,MAAM,CAAC,GAAG,kBAAkB,CAAC,8CAA8C,CAAC,CAAC;YAC7E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAC/C,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;YAChE,MAAM,CAAC,GAAG,kBAAkB,CAAC,mDAAmD,CAAC,CAAC;YAClF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACpC,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/F,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;YACjE,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACxG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,8DAA8D;YAC9D,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5G,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;YAC3C,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5C,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACjC,MAAM,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrG,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,eAAe,EAAE,GAAG,EAAE;QAC7B,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChG,SAAS,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YAAC,IAAI,UAAU,CAAC,SAAS,CAAC;gBAAE,UAAU,CAAC,SAAS,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAE/F,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,EAAE;gBACpG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAChC,OAAO,EAAE,CAAC;YACZ,CAAC,CAAC,CAAC;YACH,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACxB,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;YACjD,MAAM,MAAM,CACV,aAAa,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,KAAK,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAChH,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC1B,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;YACjD,MAAM,GAAG,GAAG,gBAAgB,CAAC,8CAA8C,CAAC,CAAC;YAC7E,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YACpC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;YACjC,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QACpC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mneme-ai/core",
-  "version": "2.19.96",
+  "version": "2.19.97",
   "description": "Core indexing, retrieval, and graph engine for Mneme",
   "type": "module",
   "main": "./dist/index.js",