@plur-ai/core 0.7.5 → 0.7.7

package/dist/index.d.ts

@@ -545,10 +545,34 @@ declare const PackManifestSchema: z.ZodObject<{
 }>;
 type PackManifest = z.infer<typeof PackManifestSchema>;
 
+interface RegistryEntry {
+    name: string;
+    installed_at: string;
+    source: string;
+    integrity: string;
+    version?: string;
+    creator?: string;
+}
+interface PreviewResult {
+    manifest: PackManifest;
+    engram_count: number;
+    engrams: Array<{
+        id: string;
+        type: string;
+        statement: string;
+        domain?: string;
+        tags: string[];
+    }>;
+    security: PrivacyScanResult;
+    warnings: string[];
+}
+declare function previewPack(source: string): PreviewResult;
 interface InstallResult {
     installed: number;
     name: string;
     conflicts: ConflictItem[];
+    security: PrivacyScanResult;
+    registry: RegistryEntry;
 }
 interface ConflictItem {
     pack_engram_id: string;
@@ -570,6 +594,9 @@ interface PackInfo {
     engram_count: number;
     manifest?: PackManifest;
     integrity?: string;
+    installed_at?: string;
+    source?: string;
+    integrity_ok?: boolean;
 }
 declare function listPacks(packsDir: string): PackInfo[];
 interface ExportOptions {
@@ -1432,7 +1459,9 @@ declare class Plur {
     timeline(query?: TimelineQuery): Episode[];
     /** Rule-based extraction of engram candidates from content. */
     ingest(content: string, options?: IngestOptions): IngestCandidate[];
-    /** Install a pack from a source path. Detects conflicts with existing engrams. */
+    /** Preview a pack before installing — shows manifest, engrams, and security scan. */
+    previewPack(source: string): ReturnType<typeof previewPack>;
+    /** Install a pack from a source path. Runs security scan (blocks on secrets), detects conflicts, records in registry. */
     installPack(source: string): ReturnType<typeof installPack>;
     /** Uninstall a pack by name. */
     uninstallPack(name: string): ReturnType<typeof uninstallPack>;
@@ -1466,4 +1495,4 @@ declare class Plur {
     }>;
 }
 
-export { type AlignmentResult, type Association, type CaptureContext, type DomainCoverage, DomainCoverageSchema, type Engram, type EngramCluster, type Episode, type EvidenceEntry, EvidenceEntrySchema, type ExtractOptions, type ExtractionResult, type Falsification, FalsificationSchema, type HierarchyPosition, HierarchyPositionSchema, IndexedStorage, type IngestCandidate, type IngestOptions, type InjectOptions, type InjectionResult, type KnowledgeAnchor, type LearnContext, type LlmFunction, type MemberAlignment, type MetaConfidence, MetaConfidenceSchema, type MetaField, MetaFieldSchema, PLATITUDE_PATTERNS, type PackManifest, Plur, type PlurConfig, type PlurPaths, type RecallOptions, type RelationalAnalysis, type RelationalTriple, SessionBreadcrumbs, type StatusResult, type StoreEntry, type StructuralTemplate, StructuralTemplateSchema, type SyncResult, type SyncStatus, type TimelineQuery, type TypedRole, type ValidationResult, type VersionCheckResult, alignCluster, analyzeStructure, checkForUpdate, classifyPolarity, clearVersionCache, clusterByStructure, computeConfidence, computeMetaConfidence, confidenceBand, detectPlurStorage, detectSecrets, engramSearchText, extractMetaEngrams, formulateMetaEngram, generateGuardrails, getCachedUpdateCheck, isPlatitude, organizeHierarchy, tokenSimilarity, validateMetaEngram };
+export { type AlignmentResult, type Association, type CaptureContext, type DomainCoverage, DomainCoverageSchema, type Engram, type EngramCluster, type Episode, type EvidenceEntry, EvidenceEntrySchema, type ExtractOptions, type ExtractionResult, type Falsification, FalsificationSchema, type HierarchyPosition, HierarchyPositionSchema, IndexedStorage, type IngestCandidate, type IngestOptions, type InjectOptions, type InjectionResult, type KnowledgeAnchor, type LearnContext, type LlmFunction, type MemberAlignment, type MetaConfidence, MetaConfidenceSchema, type MetaField, MetaFieldSchema, PLATITUDE_PATTERNS, type PackManifest, Plur, type PlurConfig, type PlurPaths, type PreviewResult, type PrivacyIssue, type PrivacyScanResult, type RecallOptions, type RegistryEntry, type RelationalAnalysis, type RelationalTriple, SessionBreadcrumbs, type StatusResult, type StoreEntry, type StructuralTemplate, StructuralTemplateSchema, type SyncResult, type SyncStatus, type TimelineQuery, type TypedRole, type ValidationResult, type VersionCheckResult, alignCluster, analyzeStructure, checkForUpdate, classifyPolarity, clearVersionCache, clusterByStructure, computeConfidence, computeMetaConfidence, confidenceBand, detectPlurStorage, detectSecrets, engramSearchText, extractMetaEngrams, formulateMetaEngram, generateGuardrails, getCachedUpdateCheck, isPlatitude, organizeHierarchy, tokenSimilarity, validateMetaEngram };

package/dist/index.js

@@ -1089,6 +1089,57 @@ function detectSecrets(text) {
 }
 
 // src/packs.ts
+function registryPath(packsDir) {
+  return path.join(packsDir, "registry.yaml");
+}
+function loadRegistry(packsDir) {
+  const p = registryPath(packsDir);
+  if (!fs2.existsSync(p)) return [];
+  try {
+    const raw = yaml4.load(fs2.readFileSync(p, "utf8"));
+    return Array.isArray(raw?.packs) ? raw.packs : [];
+  } catch {
+    return [];
+  }
+}
+function saveRegistry(packsDir, entries) {
+  const content = yaml4.dump({ packs: entries }, { lineWidth: 120, noRefs: true, quotingType: '"' });
+  fs2.writeFileSync(registryPath(packsDir), content);
+}
+function addToRegistry(packsDir, entry) {
+  const entries = loadRegistry(packsDir);
+  const idx = entries.findIndex((e) => e.name === entry.name);
+  if (idx >= 0) entries[idx] = entry;
+  else entries.push(entry);
+  saveRegistry(packsDir, entries);
+}
+function removeFromRegistry(packsDir, name) {
+  const entries = loadRegistry(packsDir).filter((e) => e.name !== name);
+  saveRegistry(packsDir, entries);
+}
+function previewPack(source) {
+  if (!fs2.existsSync(source)) throw new Error(`Pack source not found: ${source}`);
+  const pack = loadPack(source);
+  const security = scanPrivacy(pack.engrams);
+  const warnings = [];
+  const globalCount = pack.engrams.filter((e) => e.scope === "global").length;
+  if (globalCount > 0) warnings.push(`${globalCount} engram(s) have global scope \u2014 may interact with your own engrams`);
+  const hotEngrams = pack.engrams.filter((e) => e.activation.retrieval_strength > 0.9);
+  if (hotEngrams.length > 0) warnings.push(`${hotEngrams.length} engram(s) have unusually high retrieval strength (>0.9)`);
+  return {
+    manifest: pack.manifest,
+    engram_count: pack.engrams.length,
+    engrams: pack.engrams.map((e) => ({
+      id: e.id,
+      type: e.type,
+      statement: e.statement,
+      domain: e.domain,
+      tags: e.tags ?? []
+    })),
+    security,
+    warnings
+  };
+}
 function detectConflicts2(newEngrams, existingEngrams) {
   const conflicts = [];
   for (const ne of newEngrams) {
@@ -1131,6 +1182,13 @@ function detectConflicts2(newEngrams, existingEngrams) {
 }
 function installPack(packsDir, source, existingEngrams) {
   if (!fs2.existsSync(source)) throw new Error(`Pack source not found: ${source}`);
+  const preview = previewPack(source);
+  const secretIssues = preview.security.issues.filter((i) => i.type === "secret");
+  if (secretIssues.length > 0) {
+    const details = secretIssues.map((i) => `  ${i.engram_id}: ${i.detail}`).join("\n");
+    throw new Error(`Pack contains secrets \u2014 install blocked:
+${details}`);
+  }
   const sourceName = path.basename(source);
   const destDir = path.join(packsDir, sourceName);
   if (!fs2.existsSync(destDir)) fs2.mkdirSync(destDir, { recursive: true });
@@ -1145,7 +1203,17 @@ function installPack(packsDir, source, existingEngrams) {
   const engramsPath = path.join(destDir, "engrams.yaml");
   const newEngrams = fs2.existsSync(engramsPath) ? loadEngrams(engramsPath) : [];
   const conflicts = existingEngrams ? detectConflicts2(newEngrams, existingEngrams) : [];
-  return { installed: newEngrams.length, name: sourceName, conflicts };
+  const integrity = `sha256:${computePackHash(destDir)}`;
+  const registryEntry = {
+    name: preview.manifest.name,
+    installed_at: (/* @__PURE__ */ new Date()).toISOString(),
+    source: path.resolve(source),
+    integrity,
+    version: preview.manifest.version,
+    creator: preview.manifest.creator
+  };
+  addToRegistry(packsDir, registryEntry);
+  return { installed: newEngrams.length, name: sourceName, conflicts, security: preview.security, registry: registryEntry };
 }
 function uninstallPack(packsDir, name) {
   let packDir = path.join(packsDir, name);
@@ -1164,31 +1232,48 @@ function uninstallPack(packsDir, name) {
     count = loadEngrams(engramsPath).length;
   } catch {
   }
+  let manifestName;
+  try {
+    manifestName = loadPack(packDir).manifest.name;
+  } catch {
+  }
+  removeFromRegistry(packsDir, name);
+  if (manifestName && manifestName !== name) removeFromRegistry(packsDir, manifestName);
   fs2.rmSync(packDir, { recursive: true, force: true });
   return { name, removed: true, engram_count: count };
 }
 function listPacks(packsDir) {
   if (!fs2.existsSync(packsDir)) return [];
+  const registry = loadRegistry(packsDir);
+  const registryMap = new Map(registry.map((r) => [r.name, r]));
   const result = [];
   for (const entry of fs2.readdirSync(packsDir)) {
     const packDir = path.join(packsDir, entry);
     if (!fs2.statSync(packDir).isDirectory()) continue;
     try {
       const pack = loadPack(packDir);
+      const currentIntegrity = `sha256:${computePackHash(packDir)}`;
+      const reg = registryMap.get(pack.manifest.name);
       result.push({
         name: pack.manifest.name,
         path: packDir,
         engram_count: pack.engrams.length,
         manifest: pack.manifest,
-        integrity: computePackHash(packDir)
+        integrity: currentIntegrity,
+        installed_at: reg?.installed_at,
+        source: reg?.source,
+        integrity_ok: reg ? reg.integrity === currentIntegrity : void 0
       });
     } catch {
       const engramsPath = path.join(packDir, "engrams.yaml");
       const engrams = fs2.existsSync(engramsPath) ? loadEngrams(engramsPath) : [];
+      const reg = registryMap.get(entry);
       result.push({
         name: entry,
         path: packDir,
-        engram_count: engrams.length
+        engram_count: engrams.length,
+        installed_at: reg?.installed_at,
+        source: reg?.source
       });
     }
   }
@@ -2217,7 +2302,6 @@ var Plur = class {
   _loadAllEngrams() {
     const primary = this._loadCached(this.paths.engrams);
     const stores = this.config.stores ?? [];
-    if (stores.length === 0) return primary;
     const all = [...primary];
     for (const store of stores) {
       const storeEngrams = this._loadCached(store.path);
@@ -2238,6 +2322,15 @@ var Plur = class {
         all.push(cloned);
       }
     }
+    const packs = loadAllPacks(this.paths.packs);
+    for (const pack of packs) {
+      for (const e of pack.engrams) {
+        if (e.status !== "active") continue;
+        const cloned = { ...e };
+        cloned._pack = pack.manifest.name;
+        all.push(cloned);
+      }
+    }
     return all;
   }
   /** Load engrams from a path with mtime-based caching */
@@ -2297,7 +2390,7 @@ var Plur = class {
         consolidated: false,
         type: context?.type ?? "behavioral",
         scope,
-        visibility: context?.visibility ?? "private",
+        visibility: context?.visibility ?? (context?.domain ? "public" : "private"),
         statement,
         rationale: context?.rationale,
         source: context?.source,
@@ -2745,7 +2838,11 @@ var Plur = class {
     }
     return candidates;
   }
-  /** Install a pack from a source path. Detects conflicts with existing engrams. */
+  /** Preview a pack before installing — shows manifest, engrams, and security scan. */
+  previewPack(source) {
+    return previewPack(source);
+  }
+  /** Install a pack from a source path. Runs security scan (blocks on secrets), detects conflicts, records in registry. */
   installPack(source) {
     const existing = this._loadAllEngrams();
     return installPack(this.paths.packs, source, existing);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@plur-ai/core",
-  "version": "0.7.5",
+  "version": "0.7.7",
   "type": "module",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",