@adhdev/daemon-standalone 1.0.38-rc.5 → 1.0.38-rc.6

package/dist/index.js

@@ -33364,10 +33364,10 @@ var require_dist3 = __commonJS({
     }
     function getDaemonBuildInfo() {
       if (cached2) return cached2;
-      const commit = readInjected(true ? "5da1eb80cc0d6986f8811e6a38a199255967c18f" : void 0) ?? "unknown";
-      const commitShort = readInjected(true ? "5da1eb80" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
-      const version2 = readInjected(true ? "1.0.38-rc.5" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
-      const builtAt = readInjected(true ? "2026-08-06T11:35:57.968Z" : void 0);
+      const commit = readInjected(true ? "004d8bfc5ffe83c582737c2a3b15d27f5337e8ae" : void 0) ?? "unknown";
+      const commitShort = readInjected(true ? "004d8bfc" : void 0) ?? (commit !== "unknown" ? commit.slice(0, 7) : "unknown");
+      const version2 = readInjected(true ? "1.0.38-rc.6" : void 0) ?? readInjected(typeof process !== "undefined" ? process.env?.ADHDEV_PKG_VERSION : void 0) ?? "unknown";
+      const builtAt = readInjected(true ? "2026-08-06T12:47:31.923Z" : void 0);
       cached2 = builtAt ? { commit, commitShort, version: version2, builtAt } : { commit, commitShort, version: version2 };
       return cached2;
     }
@@ -101515,12 +101515,19 @@ Run 'adhdev doctor' for detailed diagnostics.`
       /**
        * Sync the verified channel activations for `targetTypes`.
        *
+       * `bootstrapAll: true` (fresh-install bootstrap) widens the target set to
+       * EVERY activatable entry on the channel, ignoring `targetTypes`: a clean
+       * machine has nothing in `.upstream` and no pointers, so there is no
+       * installed set to diff against — the channel listing itself is the desired
+       * end state. Only digest-verified entries activate; legacy-unverified /
+       * unknown-algorithm rows stay typed skips exactly as in a targeted sync.
+       *
        * Never throws for expected failure modes: every failure is reported as a
        * typed error in the returned report and the previous activations stay
        * live (last-known-good). Unexpected programming errors still throw.
        */
       async sync(options) {
-        const { channel, targetTypes } = options;
+        const { channel, targetTypes, bootstrapAll } = options;
         const report = {
           channel,
           status: "up-to-date",
@@ -101540,7 +101547,7 @@ Run 'adhdev doctor' for detailed diagnostics.`
         }
         const { activatable, skipped } = partitionChannelEntries(entries);
         report.skipped = skipped;
-        const targets = activatable.filter((e) => targetTypes.has(e.providerType));
+        const targets = bootstrapAll ? activatable : activatable.filter((e) => targetTypes.has(e.providerType));
         const pending = [];
         for (const entry of targets) {
           let activeDigest = null;
@@ -102117,7 +102124,11 @@ Run 'adhdev doctor' for detailed diagnostics.`
       * 3. ~/.adhdev/providers/ (excluding .upstream) — user-authored customs,
       *    always wins
       * Highest priority listed last (overwrites earlier loads).
-      * If .upstream/ is empty, call fetchLatest() before loadAll().
+      * Empty .upstream/ is normal: verified channel activations (step 1.5) are
+      * the primary source on a fresh install, bootstrapped from the registry by
+      * maybeFirstSyncVerifiedChannel() at boot — fetchLatest() is NOT the
+      * production path (gated behind providerAllowUnverifiedTarball, off by
+      * default).
       */
       loadAll() {
         this.providers.clear();
@@ -102230,11 +102241,16 @@ Run 'adhdev doctor' for detailed diagnostics.`
        * (providers installed into .upstream via the dashboard install flow, plus
        * everything already activated on this channel).
        *
+       * `bootstrapAll: true` (fresh-install bootstrap) instead targets every
+       * activatable entry on the channel — used when a clean machine has an empty
+       * .upstream AND an empty channel store, so there is no installed set to diff
+       * against. Digest verification is unchanged: only verified entries activate.
+       *
        * Fail-closed / last-known-good: on any metadata or transport failure
        * nothing new is activated and the previous active objects keep loading.
        * Reloads providers when at least one activation changed.
        */
-      async syncVerifiedChannel() {
+      async syncVerifiedChannel(options) {
         if (!this.channelStore) {
           return {
             channel: this.channel,
@@ -102252,7 +102268,7 @@ Run 'adhdev doctor' for detailed diagnostics.`
           ...this.channelSyncIO
         });
         const targetTypes = collectSyncTargetTypes(this.upstreamDir, this.channelStore, this.channel);
-        const report = await runtime.sync({ channel: this.channel, targetTypes });
+        const report = await runtime.sync({ channel: this.channel, targetTypes, bootstrapAll: options?.bootstrapAll });
         for (const skip of report.skipped) {
           this.log(`\u26A0 Verified channel skip: ${skip.reason}`);
         }
@@ -102279,12 +102295,20 @@ Run 'adhdev doctor' for detailed diagnostics.`
       /**
        * Bounded one-shot first sync for an empty verified channel store.
        *
-       * Closes the rc.20 preview activation gap: a daemon whose provider channel
-       * newly derives to a channel with an EMPTY store (e.g. updateChannel=preview
-       * while providerChannel defaulted to stable) would otherwise sit at 0 active
-       * providers until a manual check_provider_updates. Runs at most one
-       * verified sync per call, only when the resolved channel has no pointers
-       * AND there are installed (.upstream) providers to sync. Fail-closed: any
+       * Two empty-store cases, one gate (channel has no active pointers):
+       *
+       *   1. Providers installed into .upstream (upgrade / channel-switch paths —
+       *      the rc.20 preview activation gap): targeted sync of the installed set.
+       *   2. Fresh install — .upstream empty AND store empty (the "daemon ships
+       *      empty" design left new users at 0 providers and unable to run
+       *      anything): bootstrap sync. The registry channel listing itself is the
+       *      target set, so the daemon self-populates the whole verified channel
+       *      on first boot. Only digest-verified entries activate;
+       *      legacy-unverified rows stay typed skips.
+       *
+       * Runs at most one verified sync per call and ONLY while the resolved
+       * channel has zero pointers — once anything is activated the gate
+       * short-circuits forever (no re-bootstrap, no network). Fail-closed: any
        * registry/transport failure activates nothing (last-known-good preserved)
        * and is retried on the next boot or via check_provider_updates. Never
        * invoked from any status path.
@@ -102294,8 +102318,12 @@ Run 'adhdev doctor' for detailed diagnostics.`
       async maybeFirstSyncVerifiedChannel() {
         if (!this.channelStore) return null;
         if (this.countVerifiedChannelPointers() > 0) return null;
-        if (!this.hasUpstream()) return null;
-        return this.syncVerifiedChannel();
+        if (this.hasUpstream()) return this.syncVerifiedChannel();
+        try {
+          fs38.mkdirSync(this.defaultProvidersDir, { recursive: true });
+        } catch {
+        }
+        return this.syncVerifiedChannel({ bootstrapAll: true });
       }
       /**
        * The verified-channel PIN for each provider: what this daemon actually