@mneme-ai/core 2.93.0 → 2.95.0

package/dist/upgrade_visibility/index.d.ts

@@ -30,6 +30,7 @@
 export { acquireLock, releaseLock, readLock, isLocked, formatLock, type LockState, type AcquireResult, type AcquireOptions, } from "./mutex.js";
 export { recordUpgrade, listUpgrades, lastFailure, lastSuccess, verifyChain, formatUpgradeLog, type UpgradeEntry, type RecordUpgradeOptions, } from "./exit_log.js";
 export { isInsideNpmInstall, isUpgradeSafeRightNow, formatDetection, type DetectionResult, } from "./npm_detector.js";
+export { classifyUpgradeSeverity, shouldSurfaceUpgrade, upgradeAlreadyNotified, markUpgradeNotified, readNotifyState, type UpgradeSeverity, type NotifyState, } from "./notify_state.js";
 import { lastFailure, lastSuccess } from "./exit_log.js";
 /** One-shot doctor: is it safe to attempt an upgrade right now? Pure
  *  read-only — never mutates state. */

package/dist/upgrade_visibility/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/upgrade_visibility/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EACxD,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,GACxD,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EACpF,KAAK,YAAY,EAAE,KAAK,oBAAoB,GAC7C,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,EAC1D,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAgB,MAAM,eAAe,CAAC;AAEvE;uCACuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,aAAa,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAiBnE;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAsB3D"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/upgrade_visibility/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EACxD,KAAK,SAAS,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,GACxD,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EACpF,KAAK,YAAY,EAAE,KAAK,oBAAoB,GAC7C,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,EAC1D,KAAK,eAAe,GACrB,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,uBAAuB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,eAAe,EAC3G,KAAK,eAAe,EAAE,KAAK,WAAW,GACvC,MAAM,mBAAmB,CAAC;AAI3B,OAAO,EAAE,WAAW,EAAE,WAAW,EAAgB,MAAM,eAAe,CAAC;AAEvE;uCACuC;AACvC,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,OAAO,CAAC;IACf,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,aAAa,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,aAAa,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC;IAC9C,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,CAiBnE;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,mBAAmB,GAAG,MAAM,CAsB3D"}

package/dist/upgrade_visibility/index.js

@@ -30,6 +30,7 @@
 export { acquireLock, releaseLock, readLock, isLocked, formatLock, } from "./mutex.js";
 export { recordUpgrade, listUpgrades, lastFailure, lastSuccess, verifyChain, formatUpgradeLog, } from "./exit_log.js";
 export { isInsideNpmInstall, isUpgradeSafeRightNow, formatDetection, } from "./npm_detector.js";
+export { classifyUpgradeSeverity, shouldSurfaceUpgrade, upgradeAlreadyNotified, markUpgradeNotified, readNotifyState, } from "./notify_state.js";
 import { isUpgradeSafeRightNow } from "./npm_detector.js";
 import { isLocked, readLock } from "./mutex.js";
 import { lastFailure, lastSuccess, listUpgrades } from "./exit_log.js";

package/dist/upgrade_visibility/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/upgrade_visibility/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,GAEzD,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,GAErF,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,GAE3D,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAYvE,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,KAAK,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,KAAK,GAAG,KAAK,CAAC;QACd,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,GAAG,YAAY,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO;QACP,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC;QACpC,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC;QACpC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAsB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,aAAa,OAAO,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;IAChI,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/upgrade_visibility/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,WAAW,EAAE,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,GAEzD,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,aAAa,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,GAErF,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,kBAAkB,EAAE,qBAAqB,EAAE,eAAe,GAE3D,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EACL,uBAAuB,EAAE,oBAAoB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,eAAe,GAE5G,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAYvE,MAAM,UAAU,aAAa,CAAC,QAAgB;IAC5C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QAAC,KAAK,GAAG,KAAK,CAAC;QAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAAC,CAAC;IACjE,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,KAAK,GAAG,KAAK,CAAC;QACd,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC9B,OAAO,CAAC,IAAI,CAAC,4BAA4B,EAAE,EAAE,GAAG,YAAY,EAAE,EAAE,MAAM,GAAG,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO;QACP,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC;QACpC,aAAa,EAAE,WAAW,CAAC,QAAQ,CAAC;QACpC,QAAQ,EAAE,YAAY,CAAC,QAAQ,CAAC,CAAC,MAAM;KACxC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAsB;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;IACvE,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QAC1B,KAAK,MAAM,MAAM,IAAI,CAAC,CAAC,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;QAC9D,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACjB,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,aAAa,CAAC,EAAE,UAAU,CAAC,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC1F,KAAK,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpD,CAAC;IACD,IAAI,CAAC,CAAC,aAAa,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,aAAa,OAAO,CAAC,CAAC,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC;IAChI,CAAC;SAAM,CAAC;QACN,KAAK,CAAC,IAAI,CAAC,qCAAqC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/upgrade_visibility/notify_state.d.ts

@@ -0,0 +1,51 @@
+/**
+ * v2.94.0 — WHISPER NOT NAG, precisely (the first ETHOS action · docs/ALETHEIA.md §XI).
+ *
+ * Removing a notice entirely would be hiding something important — ETHOS broken
+ * another way. The discipline is "speak proportional to importance, once per new
+ * fact": dedupe the upgrade notice BY VERSION (whisper once per new `latest`, then
+ * stay quiet until `latest` changes again), under SEVERITY TIERS:
+ *   • security  → surface ALWAYS (a duty, not a nag)
+ *   • feature   → whisper ONCE per new latest, then silent
+ *   • cosmetic  → inbox/glyph only (never the loud pulse block)
+ *
+ * It preserves the de-worm vow (v2.78): INFORM, never COMMAND; no auto-upgrade;
+ * manual-only; never hide a security upgrade. This only REDUCES repetition.
+ *
+ * Honest scope: severity is derived from the semver delta (the only thing knowable
+ * from installed-vs-npm-latest). "security" is an EXPLICIT-flag tier — Mneme does
+ * not pretend to auto-detect a security release from a version number; if a caller
+ * (or a future advisory feed) sets `security: true`, the always-surface duty fires.
+ */
+export type UpgradeSeverity = "security" | "feature" | "cosmetic";
+export interface NotifyState {
+    /** The `latest` version we last surfaced the loud upgrade notice for. */
+    lastNotifiedVersion: string | null;
+    lastNotifiedAt: number;
+    lastSeverity: UpgradeSeverity | null;
+}
+/**
+ * Classify the importance of an upgrade from the semver delta. A major OR minor
+ * bump is a "feature" (whisper once); a patch-only bump is "cosmetic" (inbox/glyph
+ * only). An explicit `security` flag overrides to the always-surface tier. If either
+ * version is unparseable, default to "feature" (safer to whisper once than to hide).
+ */
+export declare function classifyUpgradeSeverity(current: string, latest: string, opts?: {
+    security?: boolean;
+}): UpgradeSeverity;
+/** Read the persisted notify-state. Never throws. */
+export declare function readNotifyState(repoRoot: string): NotifyState;
+/** True if we already surfaced the loud upgrade notice for this exact `latest`. Pure read. */
+export declare function upgradeAlreadyNotified(repoRoot: string, latest: string): boolean;
+/** Record that we surfaced the loud notice for `latest`. Best-effort; never throws. */
+export declare function markUpgradeNotified(repoRoot: string, latest: string, severity: UpgradeSeverity, now?: number): void;
+/**
+ * THE GATE — should the pulse surface the LOUD upgrade notice this turn?
+ *   security → always (duty)
+ *   cosmetic → never (inbox/glyph only)
+ *   feature  → only if this `latest` hasn't been surfaced yet (whisper once per new version)
+ * Pure read (does NOT mark — the caller marks once after deciding, to keep the
+ * [INFO] block and the inbox surfacing consistent within one pulse). Never throws.
+ */
+export declare function shouldSurfaceUpgrade(repoRoot: string, latest: string, severity: UpgradeSeverity): boolean;
+//# sourceMappingURL=notify_state.d.ts.map

package/dist/upgrade_visibility/notify_state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify_state.d.ts","sourceRoot":"","sources":["../../src/upgrade_visibility/notify_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAKH,MAAM,MAAM,eAAe,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,CAAC;AAElE,MAAM,WAAW,WAAW;IAC1B,yEAAyE;IACzE,mBAAmB,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,eAAe,GAAG,IAAI,CAAC;CACtC;AAQD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GAAG,eAAe,CAQ3H;AAID,qDAAqD;AACrD,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAS7D;AAED,8FAA8F;AAC9F,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAEhF;AAED,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,EAAE,GAAG,GAAE,MAAmB,GAAG,IAAI,CAM/H;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,eAAe,GAAG,OAAO,CAIzG"}

package/dist/upgrade_visibility/notify_state.js

@@ -0,0 +1,88 @@
+/**
+ * v2.94.0 — WHISPER NOT NAG, precisely (the first ETHOS action · docs/ALETHEIA.md §XI).
+ *
+ * Removing a notice entirely would be hiding something important — ETHOS broken
+ * another way. The discipline is "speak proportional to importance, once per new
+ * fact": dedupe the upgrade notice BY VERSION (whisper once per new `latest`, then
+ * stay quiet until `latest` changes again), under SEVERITY TIERS:
+ *   • security  → surface ALWAYS (a duty, not a nag)
+ *   • feature   → whisper ONCE per new latest, then silent
+ *   • cosmetic  → inbox/glyph only (never the loud pulse block)
+ *
+ * It preserves the de-worm vow (v2.78): INFORM, never COMMAND; no auto-upgrade;
+ * manual-only; never hide a security upgrade. This only REDUCES repetition.
+ *
+ * Honest scope: severity is derived from the semver delta (the only thing knowable
+ * from installed-vs-npm-latest). "security" is an EXPLICIT-flag tier — Mneme does
+ * not pretend to auto-detect a security release from a version number; if a caller
+ * (or a future advisory feed) sets `security: true`, the always-surface duty fires.
+ */
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+function parseSemver(v) {
+    const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(String(v ?? "").trim());
+    if (!m)
+        return null;
+    return [parseInt(m[1], 10), parseInt(m[2], 10), parseInt(m[3], 10)];
+}
+/**
+ * Classify the importance of an upgrade from the semver delta. A major OR minor
+ * bump is a "feature" (whisper once); a patch-only bump is "cosmetic" (inbox/glyph
+ * only). An explicit `security` flag overrides to the always-surface tier. If either
+ * version is unparseable, default to "feature" (safer to whisper once than to hide).
+ */
+export function classifyUpgradeSeverity(current, latest, opts = {}) {
+    if (opts.security === true)
+        return "security";
+    const c = parseSemver(current);
+    const l = parseSemver(latest);
+    if (!c || !l)
+        return "feature";
+    if (l[0] !== c[0] || l[1] !== c[1])
+        return "feature"; // major or minor delta
+    if (l[2] !== c[2])
+        return "cosmetic"; // patch-only delta
+    return "cosmetic"; // equal (shouldn't reach when updateAvailable)
+}
+function statePath(repoRoot) { return join(repoRoot, ".mneme", "upgrade_visibility", "notify-state.json"); }
+/** Read the persisted notify-state. Never throws. */
+export function readNotifyState(repoRoot) {
+    try {
+        const p = statePath(repoRoot);
+        if (existsSync(p)) {
+            const s = JSON.parse(readFileSync(p, "utf8"));
+            return { lastNotifiedVersion: s.lastNotifiedVersion ?? null, lastNotifiedAt: s.lastNotifiedAt ?? 0, lastSeverity: s.lastSeverity ?? null };
+        }
+    }
+    catch { /* */ }
+    return { lastNotifiedVersion: null, lastNotifiedAt: 0, lastSeverity: null };
+}
+/** True if we already surfaced the loud upgrade notice for this exact `latest`. Pure read. */
+export function upgradeAlreadyNotified(repoRoot, latest) {
+    return readNotifyState(repoRoot).lastNotifiedVersion === String(latest ?? "");
+}
+/** Record that we surfaced the loud notice for `latest`. Best-effort; never throws. */
+export function markUpgradeNotified(repoRoot, latest, severity, now = Date.now()) {
+    try {
+        const dir = join(repoRoot, ".mneme", "upgrade_visibility");
+        mkdirSync(dir, { recursive: true });
+        writeFileSync(statePath(repoRoot), JSON.stringify({ lastNotifiedVersion: String(latest ?? ""), lastNotifiedAt: now, lastSeverity: severity }), "utf8");
+    }
+    catch { /* */ }
+}
+/**
+ * THE GATE — should the pulse surface the LOUD upgrade notice this turn?
+ *   security → always (duty)
+ *   cosmetic → never (inbox/glyph only)
+ *   feature  → only if this `latest` hasn't been surfaced yet (whisper once per new version)
+ * Pure read (does NOT mark — the caller marks once after deciding, to keep the
+ * [INFO] block and the inbox surfacing consistent within one pulse). Never throws.
+ */
+export function shouldSurfaceUpgrade(repoRoot, latest, severity) {
+    if (severity === "security")
+        return true;
+    if (severity === "cosmetic")
+        return false;
+    return !upgradeAlreadyNotified(repoRoot, latest);
+}
+//# sourceMappingURL=notify_state.js.map

package/dist/upgrade_visibility/notify_state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify_state.js","sourceRoot":"","sources":["../../src/upgrade_visibility/notify_state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWjC,SAAS,WAAW,CAAC,CAAS;IAC5B,MAAM,CAAC,GAAG,wBAAwB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,EAAE,EAAE,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,OAAe,EAAE,MAAc,EAAE,OAA+B,EAAE;IACxG,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,UAAU,CAAC;IAC9C,MAAM,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAC/B,MAAM,CAAC,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IAC/B,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC,CAAC,uBAAuB;IAC7E,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAC,CAAkB,mBAAmB;IAC1E,OAAO,UAAU,CAAC,CAAqC,+CAA+C;AACxG,CAAC;AAED,SAAS,SAAS,CAAC,QAAgB,IAAY,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,EAAE,mBAAmB,CAAC,CAAC,CAAC,CAAC;AAE5H,qDAAqD;AACrD,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;QAC9B,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAyB,CAAC;YACtE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAC,mBAAmB,IAAI,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,IAAI,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAI,IAAI,EAAE,CAAC;QAC7I,CAAC;IACH,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;IACjB,OAAO,EAAE,mBAAmB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;AAC9E,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,sBAAsB,CAAC,QAAgB,EAAE,MAAc;IACrE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,mBAAmB,KAAK,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,mBAAmB,CAAC,QAAgB,EAAE,MAAc,EAAE,QAAyB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACvH,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE,oBAAoB,CAAC,CAAC;QAC3D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,aAAa,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,mBAAmB,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,cAAc,EAAE,GAAG,EAAE,YAAY,EAAE,QAAQ,EAAwB,CAAC,EAAE,MAAM,CAAC,CAAC;IAC/K,CAAC;IAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB,EAAE,MAAc,EAAE,QAAyB;IAC9F,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,QAAQ,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,CAAC,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;AACnD,CAAC"}

package/dist/upgrade_visibility/notify_state.test.d.ts

@@ -0,0 +1,11 @@
+/**
+ * v2.94.0 — WHISPER, DON'T NAG (the first ETHOS action). notify-state tests.
+ *
+ *   W1  classifyUpgradeSeverity — security flag · feature (major/minor) · cosmetic (patch)
+ *   W2  feature bump → whisper ONCE per new latest; silent after; a NEW latest re-whispers
+ *   W3  security → surface ALWAYS (a duty, never deduped)
+ *   W4  cosmetic → never the loud block (inbox/glyph only)
+ *   W5  de-worm vow preserved — the notice is never an auto-action; reducing repetition only
+ */
+export {};
+//# sourceMappingURL=notify_state.test.d.ts.map

package/dist/upgrade_visibility/notify_state.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify_state.test.d.ts","sourceRoot":"","sources":["../../src/upgrade_visibility/notify_state.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG"}

package/dist/upgrade_visibility/notify_state.test.js

@@ -0,0 +1,60 @@
+/**
+ * v2.94.0 — WHISPER, DON'T NAG (the first ETHOS action). notify-state tests.
+ *
+ *   W1  classifyUpgradeSeverity — security flag · feature (major/minor) · cosmetic (patch)
+ *   W2  feature bump → whisper ONCE per new latest; silent after; a NEW latest re-whispers
+ *   W3  security → surface ALWAYS (a duty, never deduped)
+ *   W4  cosmetic → never the loud block (inbox/glyph only)
+ *   W5  de-worm vow preserved — the notice is never an auto-action; reducing repetition only
+ */
+import { describe, it, expect } from "vitest";
+import { mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { classifyUpgradeSeverity, shouldSurfaceUpgrade, markUpgradeNotified, upgradeAlreadyNotified } from "./notify_state.js";
+function repo() { return mkdtempSync(join(tmpdir(), "notify-")); }
+describe("v2.94.0 WHISPER — upgrade notify-state (version-dedupe + severity)", () => {
+    it("W1 classifyUpgradeSeverity — security / feature(major,minor) / cosmetic(patch)", () => {
+        expect(classifyUpgradeSeverity("2.93.0", "2.94.0", { security: true })).toBe("security");
+        expect(classifyUpgradeSeverity("2.93.0", "3.0.0")).toBe("feature"); // major
+        expect(classifyUpgradeSeverity("2.93.0", "2.94.0")).toBe("feature"); // minor
+        expect(classifyUpgradeSeverity("2.93.0", "2.93.1")).toBe("cosmetic"); // patch only
+        expect(classifyUpgradeSeverity("2.93.0", "garbage")).toBe("feature"); // unparseable → safer to whisper
+    });
+    it("W2 feature bump → whisper ONCE per new latest; silent after; new latest re-whispers", () => {
+        const r = repo();
+        // first sight of 2.94.0 → surface
+        expect(shouldSurfaceUpgrade(r, "2.94.0", "feature")).toBe(true);
+        markUpgradeNotified(r, "2.94.0", "feature");
+        // same latest again → silent (the nag is gone)
+        expect(shouldSurfaceUpgrade(r, "2.94.0", "feature")).toBe(false);
+        expect(shouldSurfaceUpgrade(r, "2.94.0", "feature")).toBe(false);
+        expect(upgradeAlreadyNotified(r, "2.94.0")).toBe(true);
+        // a genuinely NEW latest → whisper once more
+        expect(shouldSurfaceUpgrade(r, "2.95.0", "feature")).toBe(true);
+        markUpgradeNotified(r, "2.95.0", "feature");
+        expect(shouldSurfaceUpgrade(r, "2.95.0", "feature")).toBe(false);
+        // ...but the OLD one stays silent (we moved on)
+        expect(upgradeAlreadyNotified(r, "2.95.0")).toBe(true);
+    });
+    it("W3 security → surface ALWAYS (a duty, never deduped)", () => {
+        const r = repo();
+        markUpgradeNotified(r, "2.94.0", "security");
+        // even already-notified, security surfaces every time
+        expect(shouldSurfaceUpgrade(r, "2.94.0", "security")).toBe(true);
+        expect(shouldSurfaceUpgrade(r, "2.94.0", "security")).toBe(true);
+    });
+    it("W4 cosmetic → never the loud block (inbox/glyph only)", () => {
+        const r = repo();
+        expect(shouldSurfaceUpgrade(r, "2.93.1", "cosmetic")).toBe(false);
+        expect(shouldSurfaceUpgrade(r, "2.93.2", "cosmetic")).toBe(false);
+    });
+    it("W5 reducing repetition only — distinct latests are tracked independently", () => {
+        const r = repo();
+        expect(upgradeAlreadyNotified(r, "2.94.0")).toBe(false);
+        markUpgradeNotified(r, "2.94.0", "feature");
+        expect(upgradeAlreadyNotified(r, "2.94.0")).toBe(true);
+        expect(upgradeAlreadyNotified(r, "2.95.0")).toBe(false); // a different version is its own decision
+    });
+});
+//# sourceMappingURL=notify_state.test.js.map

package/dist/upgrade_visibility/notify_state.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notify_state.test.js","sourceRoot":"","sources":["../../src/upgrade_visibility/notify_state.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACtC,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAC;AAE/H,SAAS,IAAI,KAAa,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1E,QAAQ,CAAC,oEAAoE,EAAE,GAAG,EAAE;IAClF,EAAE,CAAC,gFAAgF,EAAE,GAAG,EAAE;QACxF,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACzF,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QAC5E,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;QAC7E,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,aAAa;QACnF,MAAM,CAAC,uBAAuB,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,iCAAiC;IACzG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qFAAqF,EAAE,GAAG,EAAE;QAC7F,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,kCAAkC;QAClC,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,mBAAmB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,+CAA+C;QAC/C,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,MAAM,CAAC,sBAAsB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,6CAA6C;QAC7C,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChE,mBAAmB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACjE,gDAAgD;QAChD,MAAM,CAAC,sBAAsB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,mBAAmB,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;QAC7C,sDAAsD;QACtD,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uDAAuD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAClE,MAAM,CAAC,oBAAoB,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC;QACjB,MAAM,CAAC,sBAAsB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxD,mBAAmB,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC5C,MAAM,CAAC,sBAAsB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvD,MAAM,CAAC,sBAAsB,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,0CAA0C;IACrG,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mneme-ai/core",
-  "version": "2.93.0",
+  "version": "2.95.0",
   "description": "Core indexing, retrieval, and graph engine for Mneme",
   "type": "module",
   "main": "./dist/index.js",