@monoes/monomindcli 2.9.1 → 2.9.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@monoes/monomindcli",
-  "version": "2.9.1",
+  "version": "2.9.3",
   "type": "module",
   "description": "CLI engine for Monomind — an open-source MCP server that extends Claude Code with a codebase knowledge graph (tree-sitter + SQLite), persistent memory, multi-agent task coordination, and session hooks. Apache 2.0 licensed, fully local.",
   "main": "dist/src/index.js",
@@ -88,18 +88,33 @@
     "vitest": "^4.1.4"
   },
   "dependencies": {
-    "@anthropic-ai/claude-agent-sdk": "^0.3.207",
+    "@anthropic-ai/claude-agent-sdk": "^0.3.226",
     "@monoes/monobrowse": "^1.0.6",
     "@monoes/monodesign": "^1.2.2",
     "@noble/ed25519": "^2.1.0",
     "mammoth": "^1.12.0",
-    "pdf-parse": "^2.4.5",
+    "@firecrawl/pdf-inspector": "^1.12.0",
     "ws": "^8.21.0",
     "yaml": "^2.8.0",
     "zod": "^4.0.0",
     "@monoes/monograph": "1.5.7"
   },
   "optionalDependencies": {
+    "@ai-sdk/alibaba": "^4.0.0",
+    "@ai-sdk/anthropic": "^4.0.36",
+    "@ai-sdk/cohere": "^4.0.25",
+    "@ai-sdk/deepseek": "^4.0.0",
+    "@ai-sdk/fireworks": "^3.0.30",
+    "@ai-sdk/google": "^4.0.39",
+    "@ai-sdk/groq": "^4.0.26",
+    "@ai-sdk/mistral": "^4.0.27",
+    "@ai-sdk/openai": "^4.0.36",
+    "@ai-sdk/perplexity": "^4.0.0",
+    "@ai-sdk/togetherai": "^3.0.29",
+    "@ai-sdk/xai": "^4.0.0",
+    "@openrouter/ai-sdk-provider": "^3.0.0",
+    "ai": "^7.0.58",
+    "ollama-ai-provider": "^1.0.0",
     "@huggingface/transformers": "^3.8.1",
     "@monoes/hooks": "^1.0.1",
     "@monoes/mcp": "^1.0.1",
@@ -118,8 +133,8 @@
   },
   "scripts": {
     "prebuild": "node ../../../scripts/build-fs.mjs clean dist tsconfig.tsbuildinfo",
-    "build": "tsc && node ../../../scripts/build-fs.mjs copy-into dist/src/browser/dashboard src/browser/dashboard/ui.html && node ../../../scripts/build-fs.mjs copy-into dist/src/ui src/ui/dashboard.html src/ui/server.mjs src/ui/collector.mjs src/ui/orgs.html src/ui/orgs-files.js src/ui/sse-manager.mjs src/ui/routes-monograph.mjs src/ui/routes-org.mjs src/ui/mastermind-diagram-fallback.html && node ../../../scripts/build-fs.mjs clean dist/src/ui/data && node ../../../scripts/build-fs.mjs copy-dir src/ui/data dist/src/ui/data",
-    "build:loose": "tsc --noEmitOnError false || true && node ../../../scripts/build-fs.mjs copy-into dist/src/browser/dashboard src/browser/dashboard/ui.html && node ../../../scripts/build-fs.mjs copy-into dist/src/ui src/ui/dashboard.html src/ui/server.mjs src/ui/collector.mjs src/ui/orgs.html src/ui/orgs-files.js src/ui/sse-manager.mjs src/ui/routes-monograph.mjs src/ui/routes-org.mjs src/ui/mastermind-diagram-fallback.html && node ../../../scripts/build-fs.mjs clean dist/src/ui/data && node ../../../scripts/build-fs.mjs copy-dir src/ui/data dist/src/ui/data",
+    "build": "tsc && node ../../../scripts/build-fs.mjs copy-into dist/src/browser/dashboard src/browser/dashboard/ui.html && node ../../../scripts/build-fs.mjs copy-into dist/src/ui src/ui/dashboard.html src/ui/markdown.js src/ui/server.mjs src/ui/collector.mjs src/ui/orgs.html src/ui/orgs-files.js src/ui/sse-manager.mjs src/ui/routes-monograph.mjs src/ui/routes-org.mjs src/ui/mastermind-diagram-fallback.html && node ../../../scripts/build-fs.mjs clean dist/src/ui/data && node ../../../scripts/build-fs.mjs copy-dir src/ui/data dist/src/ui/data",
+    "build:loose": "tsc --noEmitOnError false || true && node ../../../scripts/build-fs.mjs copy-into dist/src/browser/dashboard src/browser/dashboard/ui.html && node ../../../scripts/build-fs.mjs copy-into dist/src/ui src/ui/dashboard.html src/ui/markdown.js src/ui/server.mjs src/ui/collector.mjs src/ui/orgs.html src/ui/orgs-files.js src/ui/sse-manager.mjs src/ui/routes-monograph.mjs src/ui/routes-org.mjs src/ui/mastermind-diagram-fallback.html && node ../../../scripts/build-fs.mjs clean dist/src/ui/data && node ../../../scripts/build-fs.mjs copy-dir src/ui/data dist/src/ui/data",
     "test": "vitest run",
     "test:coverage": "vitest run --coverage",
     "test:pattern-store": "npx tsx src/transfer/store/tests/standalone-test.ts",

package/scripts/check-workspace-deps.mjs

@@ -0,0 +1,45 @@
+#!/usr/bin/env node
+/**
+ * Publish guard for @monoes/monomindcli itself (issue #130).
+ *
+ * `npm publish` does not understand pnpm's `workspace:*` protocol — it copies
+ * package.json verbatim, so a plain `npm publish` here ships a tarball whose
+ * `@monoes/monograph` dependency is the literal string "workspace:*", which
+ * no consumer can resolve. `pnpm publish` rewrites it to the real version
+ * instead. This mirrors the same check the root package already has
+ * (../../../scripts/check-publish-versions.mjs), scoped to this package.
+ *
+ * Runs from this package's prepublishOnly. Exits non-zero with the fix if a
+ * workspace:* dependency would leak through a non-pnpm publish.
+ */
+import { readFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+
+const pkgDir = join(dirname(fileURLToPath(import.meta.url)), '..');
+const pkg = JSON.parse(readFileSync(join(pkgDir, 'package.json'), 'utf8'));
+
+const workspaceDeps = Object.entries({ ...pkg.dependencies, ...pkg.devDependencies, ...pkg.peerDependencies })
+  .filter(([, version]) => typeof version === 'string' && version.startsWith('workspace:'))
+  .map(([name]) => name);
+
+if (workspaceDeps.length === 0) {
+  process.exit(0);
+}
+
+const publishing = process.env.npm_lifecycle_event === 'prepublishOnly';
+const agent = process.env.npm_config_user_agent ?? '';
+const viaPnpm = agent.includes('pnpm');
+
+if (publishing && !viaPnpm && process.env.MONOMIND_ALLOW_NPM_PUBLISH !== '1') {
+  console.error('\n✗ publish blocked:\n');
+  console.error(
+    `    this package must be published with \`pnpm publish\`, not npm (user agent: ${agent || 'unknown'}). ` +
+    `npm copies workspace:* into the tarball verbatim and the published package becomes uninstallable.\n` +
+    `    affected dependencies: ${workspaceDeps.join(', ')}\n`,
+  );
+  console.error('  Fix:\n    pnpm publish --tag alpha --no-git-checks   (from this directory)\n');
+  process.exit(1);
+}
+
+console.log(`✓ publish checks ok — workspace:* deps (${workspaceDeps.join(', ')}) will be resolved by pnpm`);

package/scripts/publish.sh

@@ -1,6 +1,14 @@
 #!/bin/bash
-# Publish script for @monomind/cli
-# Publishes to both @monomind/cli@alpha AND monomind@alpha
+# Alpha-prerelease publish script for @monoes/monomindcli.
+#
+# The root `monomind` package is a separate, thin wrapper (bin/cli.js +
+# README + LICENSE) with a real npm dependency on this package — pnpm
+# rewrites its `workspace:*` pin to a real version at publish time, so it
+# self-publishes correctly on its own (`pnpm publish` from the repo root).
+# This script used to also hand-build and republish a renamed copy of this
+# package's own dist/ as "monomind"; that duplicated what the root package
+# already does correctly and had gone stale (it still referenced this
+# package's pre-rename "@monomind/cli" name), so it's been removed.
 
 set -e
 
@@ -19,43 +27,26 @@ npm run build
 VERSION=$(node -p "require('./package.json').version")
 echo "Publishing version: $VERSION"
 
-# 1. Publish @monomind/cli with alpha tag
 echo ""
-echo "=== Publishing @monomind/cli@$VERSION (alpha tag) ==="
-npm publish --tag alpha
-
-# 2. Publish to monomind with alpha tag
-echo ""
-echo "=== Publishing monomind@$VERSION (alpha tag) ==="
-
-# Create temp directory
-TEMP_DIR=$(mktemp -d)
-trap "rm -rf $TEMP_DIR" EXIT
-
-# Copy necessary files
-cp -r dist bin src package.json README.md "$TEMP_DIR/"
-
-# Change package name to unscoped
-cd "$TEMP_DIR"
-sed -i 's/"name": "@monomind\/cli"/"name": "monomind"/' package.json
-
-# Publish with alpha tag
-npm publish --tag alpha
+echo "=== Publishing @monoes/monomindcli@$VERSION (alpha tag) ==="
+# pnpm publish (not npm) — this package has a workspace:* dependency on
+# @monoes/monograph. pnpm rewrites that to the resolved version as it builds
+# the tarball; npm copies it verbatim, shipping an uninstallable package
+# (#130). check-workspace-deps.mjs (wired into prepublishOnly) also catches
+# this if the script is bypassed.
+pnpm publish --tag alpha --no-git-checks
 
 echo ""
 echo "=== Updating dist-tags ==="
-
-# Update all tags to point to the new version
-npm dist-tag add @monomind/cli@$VERSION alpha
-npm dist-tag add @monomind/cli@$VERSION latest
-npm dist-tag add monomind@$VERSION alpha
-npm dist-tag add monomind@$VERSION latest
+npm dist-tag add @monoes/monomindcli@$VERSION alpha
+npm dist-tag add @monoes/monomindcli@$VERSION latest
 
 echo ""
 echo "=== Published successfully ==="
-echo "  @monomind/cli@$VERSION (alpha, latest)"
-echo "  monomind@$VERSION (alpha, latest)"
+echo "  @monoes/monomindcli@$VERSION (alpha, latest)"
 echo ""
 echo "Install with:"
-echo "  npx monomind@alpha"
-echo "  npx @monomind/cli@latest"
+echo "  npx @monoes/monomindcli@alpha"
+echo ""
+echo "To also publish the root 'monomind' wrapper package, run from the repo root:"
+echo "  pnpm publish --no-git-checks"