monomind 1.10.0 → 1.10.2

package/packages/@monomind/cli/dist/src/update/checker.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Update checker for @monoes packages
+ * Queries npm registry and compares versions
+ */
+export interface UpdateCheckResult {
+    package: string;
+    currentVersion: string;
+    latestVersion: string;
+    updateType: 'major' | 'minor' | 'patch' | 'none';
+    shouldAutoUpdate: boolean;
+    priority: 'critical' | 'high' | 'normal' | 'low';
+    changelog?: string;
+}
+export interface UpdateConfig {
+    enabled: boolean;
+    checkIntervalHours: number;
+    autoUpdate: {
+        patch: boolean;
+        minor: boolean;
+        major: boolean;
+    };
+    priority: Record<string, 'critical' | 'high' | 'normal' | 'low'>;
+    exclude: string[];
+}
+declare const DEFAULT_CONFIG: UpdateConfig;
+export declare function getInstalledVersion(packageName: string): string | null;
+export declare function checkForUpdates(config?: UpdateConfig): Promise<{
+    results: UpdateCheckResult[];
+    skipped: boolean;
+    reason?: string;
+}>;
+export declare function checkSinglePackage(packageName: string, config?: UpdateConfig): Promise<UpdateCheckResult | null>;
+export { DEFAULT_CONFIG };
+//# sourceMappingURL=checker.d.ts.map

package/packages/@monomind/cli/dist/src/update/checker.js

@@ -0,0 +1,198 @@
+/**
+ * Update checker for @monomind packages
+ * Queries npm registry and compares versions
+ */
+import { createRequire } from 'module';
+import * as semver from 'semver';
+import { reserveCheck, recordCheck, getCachedVersions } from './rate-limiter.js';
+const require = createRequire(import.meta.url);
+const DEFAULT_CONFIG = {
+    enabled: true,
+    checkIntervalHours: 24,
+    autoUpdate: {
+        patch: true,
+        minor: false,
+        major: false,
+    },
+    priority: {
+        '@monomind/security': 'critical',
+        '@monomind/cli': 'high',
+        '@monomind/embeddings': 'normal',
+    },
+    exclude: [],
+};
+// Packages to check for updates
+const MONOMIND_PACKAGES = [
+    'monomind',
+    '@monomind/cli',
+];
+// npm package name regex — covers plain names and @scope/name forms.
+// Validates before using the name in URLs or filesystem paths.
+const NPM_NAME_RE = /^(@[a-z0-9-~][a-z0-9-._~]*\/)?[a-z0-9-~][a-z0-9-._~]*$/i;
+function isValidNpmName(name) {
+    return NPM_NAME_RE.test(name) && !name.includes('..') && name.length <= 214;
+}
+async function fetchPackageInfo(packageName) {
+    if (!isValidNpmName(packageName))
+        return null;
+    try {
+        const response = await fetch(`https://registry.npmjs.org/${encodeURIComponent(packageName)}`, {
+            headers: { Accept: 'application/json' },
+            signal: AbortSignal.timeout(5000),
+        });
+        if (!response.ok) {
+            return null;
+        }
+        return (await response.json());
+    }
+    catch {
+        return null;
+    }
+}
+function getUpdateType(current, latest) {
+    if (!semver.valid(current) || !semver.valid(latest)) {
+        return 'none';
+    }
+    if (semver.eq(current, latest)) {
+        return 'none';
+    }
+    if (semver.major(latest) > semver.major(current)) {
+        return 'major';
+    }
+    if (semver.minor(latest) > semver.minor(current)) {
+        return 'minor';
+    }
+    if (semver.patch(latest) > semver.patch(current)) {
+        return 'patch';
+    }
+    return 'none';
+}
+function shouldAutoUpdate(updateType, priority, config) {
+    if (updateType === 'none')
+        return false;
+    // Critical security packages always auto-update patches
+    if (priority === 'critical' && updateType === 'patch') {
+        return true;
+    }
+    // Check config
+    if (updateType === 'major')
+        return config.autoUpdate.major;
+    if (updateType === 'minor')
+        return config.autoUpdate.minor;
+    if (updateType === 'patch')
+        return config.autoUpdate.patch;
+    return false;
+}
+export function getInstalledVersion(packageName) {
+    if (!isValidNpmName(packageName))
+        return null;
+    try {
+        // Try to find the package in node_modules
+        const possiblePaths = [
+            `${packageName}/package.json`,
+            `../../node_modules/${packageName}/package.json`,
+            `../../../node_modules/${packageName}/package.json`,
+        ];
+        for (const modulePath of possiblePaths) {
+            try {
+                // Use dynamic import with require for package.json
+                const resolved = require.resolve(modulePath, { paths: [process.cwd()] });
+                const pkg = require(resolved);
+                return pkg.version;
+            }
+            catch {
+                continue;
+            }
+        }
+        return null;
+    }
+    catch {
+        return null;
+    }
+}
+export async function checkForUpdates(config = DEFAULT_CONFIG) {
+    // Check rate limit and atomically reserve this check slot
+    const rateCheck = reserveCheck(config.checkIntervalHours);
+    if (!rateCheck.allowed) {
+        // Return cached results if available
+        const cached = getCachedVersions();
+        if (Object.keys(cached).length > 0) {
+            return {
+                results: [],
+                skipped: true,
+                reason: rateCheck.reason,
+            };
+        }
+        return { results: [], skipped: true, reason: rateCheck.reason };
+    }
+    const results = [];
+    const versionCache = {};
+    // Check each package
+    const packagesToCheck = MONOMIND_PACKAGES.filter((pkg) => !config.exclude.includes(pkg));
+    // Sort by priority (critical first)
+    const priorityOrder = { critical: 0, high: 1, normal: 2, low: 3 };
+    packagesToCheck.sort((a, b) => {
+        const pa = config.priority[a] || 'normal';
+        const pb = config.priority[b] || 'normal';
+        return priorityOrder[pa] - priorityOrder[pb];
+    });
+    await Promise.all(packagesToCheck.map(async (packageName) => {
+        const currentVersion = getInstalledVersion(packageName);
+        if (!currentVersion) {
+            // Package not installed, skip
+            return;
+        }
+        const info = await fetchPackageInfo(packageName);
+        if (!info) {
+            return;
+        }
+        const latestVersion = info['dist-tags']?.latest;
+        if (!latestVersion) {
+            return;
+        }
+        versionCache[packageName] = latestVersion;
+        const updateType = getUpdateType(currentVersion, latestVersion);
+        const priority = config.priority[packageName] || 'normal';
+        results.push({
+            package: packageName,
+            currentVersion,
+            latestVersion,
+            updateType,
+            priority,
+            shouldAutoUpdate: shouldAutoUpdate(updateType, priority, config),
+        });
+    }));
+    // Record this check
+    recordCheck(versionCache);
+    // Filter to only updates available
+    const updates = results.filter((r) => r.updateType !== 'none');
+    return { results: updates, skipped: false };
+}
+export async function checkSinglePackage(packageName, config = DEFAULT_CONFIG) {
+    if (!isValidNpmName(packageName))
+        return null;
+    const currentVersion = getInstalledVersion(packageName);
+    if (!currentVersion) {
+        return null;
+    }
+    const info = await fetchPackageInfo(packageName);
+    if (!info) {
+        return null;
+    }
+    const latestVersion = info['dist-tags']?.latest;
+    if (!latestVersion) {
+        return null;
+    }
+    const updateType = getUpdateType(currentVersion, latestVersion);
+    const priority = config.priority[packageName] || 'normal';
+    return {
+        package: packageName,
+        currentVersion,
+        latestVersion,
+        updateType,
+        priority,
+        shouldAutoUpdate: shouldAutoUpdate(updateType, priority, config),
+    };
+}
+export { DEFAULT_CONFIG };
+//# sourceMappingURL=checker.js.map

package/packages/@monomind/cli/dist/src/update/executor.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Update executor - performs actual package updates
+ * Includes rollback capability
+ */
+import { UpdateCheckResult } from './checker.js';
+import { ValidationResult } from './validator.js';
+export interface UpdateHistoryEntry {
+    timestamp: string;
+    package: string;
+    fromVersion: string;
+    toVersion: string;
+    success: boolean;
+    error?: string;
+    rollbackAvailable: boolean;
+}
+export interface UpdateExecutionResult {
+    success: boolean;
+    package: string;
+    version: string;
+    error?: string;
+    validation: ValidationResult;
+}
+export declare function loadHistory(): UpdateHistoryEntry[];
+export declare function executeUpdate(update: UpdateCheckResult, installedPackages: Record<string, string>, dryRun?: boolean): Promise<UpdateExecutionResult>;
+export declare function executeMultipleUpdates(updates: UpdateCheckResult[], installedPackages: Record<string, string>, dryRun?: boolean): Promise<UpdateExecutionResult[]>;
+export declare function rollbackUpdate(packageName?: string): Promise<{
+    success: boolean;
+    message: string;
+}>;
+export declare function getUpdateHistory(limit?: number): UpdateHistoryEntry[];
+export declare function clearHistory(): void;
+//# sourceMappingURL=executor.d.ts.map

package/packages/@monomind/cli/dist/src/update/executor.js

@@ -0,0 +1,186 @@
+/**
+ * Update executor - performs actual package updates
+ * Includes rollback capability
+ */
+import { execFile } from 'child_process';
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+import * as semver from 'semver';
+function execFileAsync(cmd, args) {
+    return new Promise((resolve, reject) => execFile(cmd, args, (err) => (err ? reject(err) : resolve())));
+}
+import { validateUpdate } from './validator.js';
+const HISTORY_FILE = path.join(os.homedir(), '.monomind', 'update-history.json');
+const MAX_HISTORY_ENTRIES = 100;
+function ensureDir() {
+    const dir = path.dirname(HISTORY_FILE);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+export function loadHistory() {
+    try {
+        if (fs.existsSync(HISTORY_FILE)) {
+            const content = fs.readFileSync(HISTORY_FILE, 'utf-8');
+            return JSON.parse(content);
+        }
+    }
+    catch {
+        // Corrupted file
+    }
+    return [];
+}
+function saveHistory(history) {
+    ensureDir();
+    // Keep only last N entries
+    const trimmed = history.slice(-MAX_HISTORY_ENTRIES);
+    const tmp = HISTORY_FILE + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(trimmed, null, 2));
+    fs.renameSync(tmp, HISTORY_FILE);
+}
+function recordUpdate(entry) {
+    const history = loadHistory();
+    history.push(entry);
+    saveHistory(history);
+}
+export async function executeUpdate(update, installedPackages, dryRun = false) {
+    // Validate first
+    const validation = validateUpdate(update.package, update.currentVersion, update.latestVersion, installedPackages);
+    if (!validation.valid) {
+        return {
+            success: false,
+            package: update.package,
+            version: update.latestVersion,
+            error: `Validation failed: ${validation.incompatibilities.join(', ')}`,
+            validation,
+        };
+    }
+    if (dryRun) {
+        return {
+            success: true,
+            package: update.package,
+            version: update.latestVersion,
+            validation,
+        };
+    }
+    try {
+        // Execute npm install — use execFile to avoid shell injection
+        const pkg = update.package;
+        const version = update.latestVersion;
+        if (!semver.valid(version)) {
+            throw new Error(`Invalid version: ${version}`);
+        }
+        await execFileAsync('npm', ['install', `${pkg}@${version}`, '--save-exact']);
+        // Record successful update
+        recordUpdate({
+            timestamp: new Date().toISOString(),
+            package: update.package,
+            fromVersion: update.currentVersion,
+            toVersion: update.latestVersion,
+            success: true,
+            rollbackAvailable: true,
+        });
+        return {
+            success: true,
+            package: update.package,
+            version: update.latestVersion,
+            validation,
+        };
+    }
+    catch (error) {
+        const err = error;
+        // Record failed update
+        recordUpdate({
+            timestamp: new Date().toISOString(),
+            package: update.package,
+            fromVersion: update.currentVersion,
+            toVersion: update.latestVersion,
+            success: false,
+            error: err.message,
+            rollbackAvailable: false,
+        });
+        return {
+            success: false,
+            package: update.package,
+            version: update.latestVersion,
+            error: err.message,
+            validation,
+        };
+    }
+}
+export async function executeMultipleUpdates(updates, installedPackages, dryRun = false) {
+    const results = [];
+    // Execute updates sequentially to avoid conflicts
+    for (const update of updates) {
+        const result = await executeUpdate(update, installedPackages, dryRun);
+        results.push(result);
+        // Update installed packages for next validation
+        if (result.success) {
+            installedPackages[update.package] = update.latestVersion;
+        }
+        // Stop on critical failures
+        if (!result.success && update.priority === 'critical') {
+            break;
+        }
+    }
+    return results;
+}
+export async function rollbackUpdate(packageName) {
+    const history = loadHistory();
+    if (history.length === 0) {
+        return { success: false, message: 'No update history available' };
+    }
+    // Find the last successful update for this package (or any if not specified)
+    const reversed = [...history].reverse();
+    const lastUpdate = packageName
+        ? reversed.find((h) => h.package === packageName && h.success && h.rollbackAvailable)
+        : reversed.find((h) => h.success && h.rollbackAvailable);
+    if (!lastUpdate) {
+        return {
+            success: false,
+            message: packageName
+                ? `No rollback available for ${packageName}`
+                : 'No rollback available',
+        };
+    }
+    try {
+        // Install the previous version — use execFile to avoid shell injection
+        const pkg = lastUpdate.package;
+        const version = lastUpdate.fromVersion;
+        if (!semver.valid(version)) {
+            throw new Error(`Invalid version: ${version}`);
+        }
+        await execFileAsync('npm', ['install', `${pkg}@${version}`, '--save-exact']);
+        // Record the rollback
+        recordUpdate({
+            timestamp: new Date().toISOString(),
+            package: lastUpdate.package,
+            fromVersion: lastUpdate.toVersion,
+            toVersion: lastUpdate.fromVersion,
+            success: true,
+            rollbackAvailable: false, // Can't rollback a rollback
+        });
+        return {
+            success: true,
+            message: `Rolled back ${lastUpdate.package} from ${lastUpdate.toVersion} to ${lastUpdate.fromVersion}`,
+        };
+    }
+    catch (error) {
+        const err = error;
+        return {
+            success: false,
+            message: `Rollback failed: ${err.message}`,
+        };
+    }
+}
+export function getUpdateHistory(limit = 20) {
+    const history = loadHistory();
+    return history.slice(-limit).reverse();
+}
+export function clearHistory() {
+    if (fs.existsSync(HISTORY_FILE)) {
+        fs.unlinkSync(HISTORY_FILE);
+    }
+}
+//# sourceMappingURL=executor.js.map

package/packages/@monomind/cli/dist/src/update/index.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Auto-update system for @monoes packages
+ *
+ * Features:
+ * - Rate-limited update checks (24h default)
+ * - Automatic patch updates for security packages
+ * - Compatibility validation before updates
+ * - Rollback capability
+ * - Update history logging
+ */
+export { checkForUpdates, checkSinglePackage, getInstalledVersion, DEFAULT_CONFIG, } from './checker.js';
+export type { UpdateCheckResult, UpdateConfig } from './checker.js';
+export { shouldCheckForUpdates, recordCheck, getCachedVersions, clearCache, loadState, } from './rate-limiter.js';
+export type { RateLimitState } from './rate-limiter.js';
+export { validateUpdate, validateBulkUpdate } from './validator.js';
+export type { ValidationResult } from './validator.js';
+export { executeUpdate, executeMultipleUpdates, rollbackUpdate, getUpdateHistory, clearHistory, loadHistory, } from './executor.js';
+export type { UpdateHistoryEntry, UpdateExecutionResult } from './executor.js';
+import type { UpdateCheckResult } from './checker.js';
+/**
+ * Run auto-update check on startup
+ * This is the main entry point for the auto-update system
+ */
+export declare function runStartupUpdateCheck(options: {
+    verbose?: boolean;
+    autoUpdate?: boolean;
+}): Promise<{
+    checked: boolean;
+    updatesAvailable: UpdateCheckResult[];
+    updatesApplied: string[];
+    skippedReason?: string;
+}>;
+//# sourceMappingURL=index.d.ts.map

package/packages/@monomind/cli/dist/src/update/index.js

@@ -0,0 +1,64 @@
+/**
+ * Auto-update system for @monoes packages
+ *
+ * Features:
+ * - Rate-limited update checks (24h default)
+ * - Automatic patch updates for security packages
+ * - Compatibility validation before updates
+ * - Rollback capability
+ * - Update history logging
+ */
+export { checkForUpdates, checkSinglePackage, getInstalledVersion, DEFAULT_CONFIG, } from './checker.js';
+export { shouldCheckForUpdates, recordCheck, getCachedVersions, clearCache, loadState, } from './rate-limiter.js';
+export { validateUpdate, validateBulkUpdate } from './validator.js';
+export { executeUpdate, executeMultipleUpdates, rollbackUpdate, getUpdateHistory, clearHistory, loadHistory, } from './executor.js';
+// Re-export a convenience function for startup
+import { checkForUpdates, DEFAULT_CONFIG } from './checker.js';
+import { executeMultipleUpdates } from './executor.js';
+import { getInstalledVersion } from './checker.js';
+/**
+ * Run auto-update check on startup
+ * This is the main entry point for the auto-update system
+ */
+export async function runStartupUpdateCheck(options) {
+    const result = {
+        checked: false,
+        updatesAvailable: [],
+        updatesApplied: [],
+        skippedReason: undefined,
+    };
+    try {
+        const { results, skipped, reason } = await checkForUpdates(DEFAULT_CONFIG);
+        if (skipped) {
+            result.skippedReason = reason;
+            return result;
+        }
+        result.checked = true;
+        result.updatesAvailable = results;
+        // Auto-update if enabled
+        if (options.autoUpdate !== false) {
+            const autoUpdateable = results.filter((r) => r.shouldAutoUpdate);
+            if (autoUpdateable.length > 0) {
+                // Get current installed packages
+                const installedPackages = {};
+                for (const update of autoUpdateable) {
+                    const version = getInstalledVersion(update.package);
+                    if (version) {
+                        installedPackages[update.package] = version;
+                    }
+                }
+                // Execute updates
+                const updateResults = await executeMultipleUpdates(autoUpdateable, installedPackages);
+                result.updatesApplied = updateResults
+                    .filter((r) => r.success)
+                    .map((r) => `${r.package}@${r.version}`);
+            }
+        }
+        return result;
+    }
+    catch {
+        // Silently fail on startup - don't block CLI usage
+        return result;
+    }
+}
+//# sourceMappingURL=index.js.map

package/packages/@monomind/cli/dist/src/update/rate-limiter.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Rate limiter for update checks
+ * Prevents excessive npm registry queries
+ */
+export interface RateLimitState {
+    lastCheck: string;
+    checksToday: number;
+    date: string;
+    packageVersions: Record<string, string>;
+}
+export declare function loadState(): RateLimitState;
+export declare function saveState(state: RateLimitState): void;
+export declare function shouldCheckForUpdates(intervalHours?: number): {
+    allowed: boolean;
+    reason?: string;
+};
+/**
+ * Atomically check the daily limit and pre-increment the counter.
+ * Returns false if already at the limit. Callers MUST call recordCheck
+ * only after a successful reserveCheck, so that limit enforcement and
+ * increment happen in the same synchronous turn (no await gap between
+ * them), preventing two concurrent callers both seeing "allowed".
+ */
+export declare function reserveCheck(intervalHours?: number): {
+    allowed: boolean;
+    reason?: string;
+};
+export declare function recordCheck(packageVersions: Record<string, string>): void;
+export declare function getCachedVersions(): Record<string, string>;
+export declare function clearCache(): void;
+//# sourceMappingURL=rate-limiter.d.ts.map

package/packages/@monomind/cli/dist/src/update/rate-limiter.js

@@ -0,0 +1,116 @@
+/**
+ * Rate limiter for update checks
+ * Prevents excessive npm registry queries
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+import * as os from 'os';
+const STATE_FILE = path.join(os.homedir(), '.monomind', 'update-state.json');
+const DEFAULT_INTERVAL_HOURS = 24;
+const MAX_CHECKS_PER_DAY = 10;
+function ensureDir() {
+    const dir = path.dirname(STATE_FILE);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+}
+function getDefaultState() {
+    return {
+        lastCheck: '',
+        checksToday: 0,
+        date: new Date().toISOString().split('T')[0],
+        packageVersions: {},
+    };
+}
+export function loadState() {
+    try {
+        if (fs.existsSync(STATE_FILE)) {
+            const content = fs.readFileSync(STATE_FILE, 'utf-8');
+            const state = JSON.parse(content);
+            // Reset counter if new day
+            const today = new Date().toISOString().split('T')[0];
+            if (state.date !== today) {
+                state.date = today;
+                state.checksToday = 0;
+            }
+            return state;
+        }
+    }
+    catch {
+        // Corrupted file, reset
+    }
+    return getDefaultState();
+}
+export function saveState(state) {
+    ensureDir();
+    const tmp = STATE_FILE + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(state, null, 2));
+    fs.renameSync(tmp, STATE_FILE);
+}
+export function shouldCheckForUpdates(intervalHours = DEFAULT_INTERVAL_HOURS) {
+    // Skip in CI environments
+    if (process.env.CI === 'true' || process.env.CONTINUOUS_INTEGRATION === 'true') {
+        return { allowed: false, reason: 'CI environment detected' };
+    }
+    // Skip if explicitly disabled
+    if (process.env.MONOMIND_AUTO_UPDATE === 'false') {
+        return { allowed: false, reason: 'Auto-update disabled via environment' };
+    }
+    // Force update if requested
+    if (process.env.MONOMIND_FORCE_UPDATE === 'true') {
+        return { allowed: true };
+    }
+    const state = loadState();
+    // Check daily limit
+    if (state.checksToday >= MAX_CHECKS_PER_DAY) {
+        return { allowed: false, reason: `Daily check limit (${MAX_CHECKS_PER_DAY}) reached` };
+    }
+    // Check time interval
+    if (state.lastCheck) {
+        const lastCheckTime = new Date(state.lastCheck).getTime();
+        const now = Date.now();
+        const hoursSinceLastCheck = (now - lastCheckTime) / (1000 * 60 * 60);
+        if (hoursSinceLastCheck < intervalHours) {
+            const nextCheck = Math.ceil(intervalHours - hoursSinceLastCheck);
+            return {
+                allowed: false,
+                reason: `Last check was ${Math.floor(hoursSinceLastCheck)}h ago (next check in ~${nextCheck}h)`
+            };
+        }
+    }
+    return { allowed: true };
+}
+/**
+ * Atomically check the daily limit and pre-increment the counter.
+ * Returns false if already at the limit. Callers MUST call recordCheck
+ * only after a successful reserveCheck, so that limit enforcement and
+ * increment happen in the same synchronous turn (no await gap between
+ * them), preventing two concurrent callers both seeing "allowed".
+ */
+export function reserveCheck(intervalHours = DEFAULT_INTERVAL_HOURS) {
+    const decision = shouldCheckForUpdates(intervalHours);
+    if (!decision.allowed)
+        return decision;
+    // Increment immediately, before any async work, so concurrent callers
+    // see an updated count on their next tick.
+    const state = loadState();
+    state.checksToday += 1;
+    state.lastCheck = new Date().toISOString();
+    saveState(state);
+    return { allowed: true };
+}
+export function recordCheck(packageVersions) {
+    // Update only package versions; count/timestamp already incremented by reserveCheck
+    const state = loadState();
+    state.packageVersions = { ...state.packageVersions, ...packageVersions };
+    saveState(state);
+}
+export function getCachedVersions() {
+    return loadState().packageVersions;
+}
+export function clearCache() {
+    if (fs.existsSync(STATE_FILE)) {
+        fs.unlinkSync(STATE_FILE);
+    }
+}
+//# sourceMappingURL=rate-limiter.js.map