@agent-team-foundation/first-tree-hub 0.14.9-alpha.292.1 → 0.14.9-alpha.294.1

package/dist/cli/index.mjs

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
-import { $ as cleanWorkspaces, A as printResults, B as ClientRuntime, C as migrateLocalAgentDirs, D as checkNodeVersion, E as checkClientConfig, G as removeLocalAgent, I as restartClientService, J as ClientOrgMismatchError, K as fail, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, Q as SessionRegistry, R as stopClientService, S as createApiNameResolver, T as checkBackgroundService, U as findStaleAliases, V as handleClientOrgMismatch, W as formatStaleReason, X as FirstTreeHubSDK, Y as ClientUserMismatchError, Z as SdkError, _ as loadOnboardState, a as declineUpdate, b as saveOnboardState, c as detectInstallMode, d as reconcileLocalRuntimeProviders, et as probeCapabilities, f as uploadClientCapabilities, g as formatCheckReport, h as promptMissingFields, i as createExecuteUpdate, j as reconcileAgentConfigs, k as checkWebSocket, l as fetchLatestVersion, m as promptAddAgent, nt as configureClientLoggerForService, o as promptUpdate, p as isInteractive, q as success, r as registerSaaSConnectCommand, s as PACKAGE_NAME, tt as applyClientLoggerConfig, u as installGlobalLatest, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate } from "../saas-connect-BueXVlnx.mjs";
+import { $ as cleanWorkspaces, A as printResults, B as ClientRuntime, C as migrateLocalAgentDirs, D as checkNodeVersion, E as checkClientConfig, G as removeLocalAgent, I as restartClientService, J as ClientOrgMismatchError, K as fail, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, Q as SessionRegistry, R as stopClientService, S as createApiNameResolver, T as checkBackgroundService, U as findStaleAliases, V as handleClientOrgMismatch, W as formatStaleReason, X as FirstTreeHubSDK, Y as ClientUserMismatchError, Z as SdkError, _ as loadOnboardState, a as declineUpdate, b as saveOnboardState, c as detectInstallMode, d as reconcileLocalRuntimeProviders, et as probeCapabilities, f as uploadClientCapabilities, g as formatCheckReport, h as promptMissingFields, i as createExecuteUpdate, j as reconcileAgentConfigs, k as checkWebSocket, l as fetchLatestVersion, m as promptAddAgent, nt as configureClientLoggerForService, o as promptUpdate, p as isInteractive, q as success, r as registerSaaSConnectCommand, s as PACKAGE_NAME, tt as applyClientLoggerConfig, u as installGlobalLatest, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate } from "../saas-connect-DzbieDfo.mjs";
 import { C as resolveConfigReadonly, S as resetConfigMeta, _ as initConfig, a as loadCredentials, b as readConfigFile, c as saveAgentConfig, d as DEFAULT_DATA_DIR, f as DEFAULT_HOME_DIR, g as getConfigValue, i as ensureFreshAdminToken, m as clientConfigSchema, p as agentConfigSchema, r as ensureFreshAccessToken, s as resolveServerUrl, u as DEFAULT_CONFIG_DIR, v as loadAgents, w as setConfigValue, x as resetConfig } from "../bootstrap-D6RsdtJg.mjs";
 import { a as print, n as CLI_USER_AGENT, o as setJsonMode, r as COMMAND_VERSION, t as cliFetch } from "../cli-fetch-BGVItZxo.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-vc0yRVWj.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-CwD_5b9W.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
 import * as semver from "semver";

package/dist/{feishu-vc0yRVWj.mjs → feishu-CwD_5b9W.mjs}

@@ -682,12 +682,37 @@ z.object({
 * mandatory on this server build.
 */
 const clientWireCapabilitiesSchema = z.object({ wsInboxDeliver: z.boolean().default(false) }).partial();
+/**
+* Outcome of the client's last self-update attempt. Carried on
+* `client:register` so the server can persist it into
+* `clients.metadata.lastUpdateAttempt`, surfacing in the admin
+* dashboard whichever clients are failing to auto-update — without
+* needing per-machine SSH to grep `client.log`.
+*
+* Length caps protect the WS frame budget: even a verbose npm stderr
+* gets truncated client-side before persisting, but `.max()` here is the
+* server-side guard against a hostile or buggy client sending a
+* megabyte-long reason.
+*/
+const updateAttemptSchema = z.object({
+	result: z.enum([
+		"ok",
+		"failed",
+		"blocked"
+	]),
+	target: z.string().min(1).max(64),
+	currentBefore: z.string().min(1).max(64),
+	installedVersion: z.string().min(1).max(64).nullable(),
+	reason: z.string().max(500).nullable(),
+	at: z.string().min(1).max(40)
+});
 z.object({
 	clientId: z.string().min(1).max(100),
 	hostname: z.string().max(100).optional(),
 	os: z.string().max(50).optional(),
 	sdkVersion: z.string().max(50).optional(),
-	wireCapabilities: clientWireCapabilitiesSchema.optional()
+	wireCapabilities: clientWireCapabilitiesSchema.optional(),
+	lastUpdateAttempt: updateAttemptSchema.optional()
 });
 z.object({
 	clientId: z.string(),
@@ -1826,4 +1851,4 @@ async function bindFeishuUser(serverUrl, accessToken, agentId, humanAgentId, fei
 	}
 }
 //#endregion
-export { bindFeishuUser as n, bindFeishuBot as t };
+export { bindFeishuUser as n, updateAttemptSchema as r, bindFeishuBot as t };

package/dist/{feishu-De4xqSeY.mjs → feishu-DXF_NJHg.mjs}

@@ -1,3 +1,3 @@
 import "./cli-fetch-BGVItZxo.mjs";
-import { t as bindFeishuBot } from "./feishu-vc0yRVWj.mjs";
+import { t as bindFeishuBot } from "./feishu-CwD_5b9W.mjs";
 export { bindFeishuBot };

package/dist/index.mjs

@@ -1,5 +1,5 @@
-import { A as printResults, B as ClientRuntime, D as checkNodeVersion, E as checkClientConfig, F as resolveCliInvocation, H as rotateClientIdWithBackup, I as restartClientService, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, R as stopClientService, V as handleClientOrgMismatch, X as FirstTreeHubSDK, Z as SdkError, g as formatCheckReport, h as promptMissingFields, k as checkWebSocket, m as promptAddAgent, n as deriveHubUrlFromToken, p as isInteractive, t as HubUrlDerivationError, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate, z as uninstallClientService } from "./saas-connect-BueXVlnx.mjs";
+import { A as printResults, B as ClientRuntime, D as checkNodeVersion, E as checkClientConfig, F as resolveCliInvocation, H as rotateClientIdWithBackup, I as restartClientService, L as startClientService, M as getClientServiceStatus, N as installClientService, O as checkServerReachable, P as isServiceSupported, R as stopClientService, V as handleClientOrgMismatch, X as FirstTreeHubSDK, Z as SdkError, g as formatCheckReport, h as promptMissingFields, k as checkWebSocket, m as promptAddAgent, n as deriveHubUrlFromToken, p as isInteractive, t as HubUrlDerivationError, v as onboardCheck, w as checkAgentConfigs, x as runHomeMigration, y as onboardCreate, z as uninstallClientService } from "./saas-connect-DzbieDfo.mjs";
 import { i as ensureFreshAdminToken, n as AuthRefreshRateLimitedError, o as resolveAccessToken, r as ensureFreshAccessToken, s as resolveServerUrl, t as AuthRefreshFailedError } from "./bootstrap-D6RsdtJg.mjs";
 import { i as blank, s as status } from "./cli-fetch-BGVItZxo.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-vc0yRVWj.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CwD_5b9W.mjs";
 export { AuthRefreshFailedError, AuthRefreshRateLimitedError, ClientRuntime, FirstTreeHubSDK, HubUrlDerivationError, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkNodeVersion, checkServerReachable, checkWebSocket, deriveHubUrlFromToken, ensureFreshAccessToken, ensureFreshAdminToken, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, installClientService, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, restartClientService, rotateClientIdWithBackup, runHomeMigration, startClientService, status, stopClientService, uninstallClientService };

package/dist/{saas-connect-BueXVlnx.mjs → saas-connect-DzbieDfo.mjs}

@@ -1,5 +1,6 @@
 import { C as resolveConfigReadonly, S as resetConfigMeta, _ as initConfig, a as loadCredentials, c as saveAgentConfig, d as DEFAULT_DATA_DIR$1, f as DEFAULT_HOME_DIR$1, h as collectMissingPrompts, l as saveCredentials, m as clientConfigSchema, p as agentConfigSchema, r as ensureFreshAccessToken, s as resolveServerUrl, u as DEFAULT_CONFIG_DIR, v as loadAgents, w as setConfigValue, x as resetConfig, y as migrateLegacyHome } from "./bootstrap-D6RsdtJg.mjs";
 import { a as print, i as blank, n as CLI_USER_AGENT, r as COMMAND_VERSION, t as cliFetch } from "./cli-fetch-BGVItZxo.mjs";
+import { r as updateAttemptSchema$1 } from "./feishu-CwD_5b9W.mjs";
 import { createRequire } from "node:module";
 import { z } from "zod";
 import { basename, delimiter, dirname, isAbsolute, join, relative, resolve, sep } from "node:path";
@@ -4509,12 +4510,37 @@ z.object({
 * mandatory on this server build.
 */
 const clientWireCapabilitiesSchema = z.object({ wsInboxDeliver: z.boolean().default(false) }).partial();
+/**
+* Outcome of the client's last self-update attempt. Carried on
+* `client:register` so the server can persist it into
+* `clients.metadata.lastUpdateAttempt`, surfacing in the admin
+* dashboard whichever clients are failing to auto-update — without
+* needing per-machine SSH to grep `client.log`.
+*
+* Length caps protect the WS frame budget: even a verbose npm stderr
+* gets truncated client-side before persisting, but `.max()` here is the
+* server-side guard against a hostile or buggy client sending a
+* megabyte-long reason.
+*/
+const updateAttemptSchema = z.object({
+	result: z.enum([
+		"ok",
+		"failed",
+		"blocked"
+	]),
+	target: z.string().min(1).max(64),
+	currentBefore: z.string().min(1).max(64),
+	installedVersion: z.string().min(1).max(64).nullable(),
+	reason: z.string().max(500).nullable(),
+	at: z.string().min(1).max(40)
+});
 z.object({
 	clientId: z.string().min(1).max(100),
 	hostname: z.string().max(100).optional(),
 	os: z.string().max(50).optional(),
 	sdkVersion: z.string().max(50).optional(),
-	wireCapabilities: clientWireCapabilitiesSchema.optional()
+	wireCapabilities: clientWireCapabilitiesSchema.optional(),
+	lastUpdateAttempt: updateAttemptSchema.optional()
 });
 z.object({
 	clientId: z.string(),
@@ -6290,6 +6316,7 @@ var ClientConnection = class extends EventEmitter {
 	sdkVersion;
 	userAgent;
 	getAccessToken;
+	getLastUpdateAttempt;
 	heartbeatIntervalMs;
 	heartbeatTimeoutMs;
 	ws = null;
@@ -6353,6 +6380,7 @@ var ClientConnection = class extends EventEmitter {
 		this.sdkVersion = config.sdkVersion;
 		this.userAgent = config.userAgent;
 		this.getAccessToken = config.getAccessToken;
+		this.getLastUpdateAttempt = config.getLastUpdateAttempt;
 		this.heartbeatIntervalMs = config.heartbeatIntervalMs ?? HEARTBEAT_INTERVAL_MS;
 		this.heartbeatTimeoutMs = config.heartbeatTimeoutMs ?? HEARTBEAT_TIMEOUT_MS;
 		this.wsLogger = createLogger("ws").child({ clientId: this.clientId });
@@ -6604,12 +6632,19 @@ var ClientConnection = class extends EventEmitter {
 		const type = msg.type;
 		if (type === "auth:ok") {
 			this.authLogger.info("auth accepted, registering client");
+			let lastUpdateAttempt = null;
+			try {
+				lastUpdateAttempt = this.getLastUpdateAttempt?.() ?? null;
+			} catch (err) {
+				this.authLogger.warn({ err }, "getLastUpdateAttempt threw; omitting from register frame");
+			}
 			this.ws?.send(JSON.stringify({
 				type: "client:register",
 				clientId: this.clientId,
 				hostname: hostname(),
 				os: platform(),
-				sdkVersion: this.sdkVersion
+				sdkVersion: this.sdkVersion,
+				...lastUpdateAttempt ? { lastUpdateAttempt } : {}
 			}));
 			return;
 		}
@@ -11781,6 +11816,54 @@ async function handleClientOrgMismatch(err, opts) {
 	}
 }
 //#endregion
+//#region src/core/update-state.ts
+/**
+* Override-able location of the state file. Production code uses the
+* default; tests pass a temp path so they don't stomp on the real
+* `~/.first-tree/hub/state/update-state.json`.
+*/
+function defaultUpdateStatePath() {
+	return join(DEFAULT_HOME_DIR$1, "state", "update-state.json");
+}
+/** Read the most recent attempt, or `null` if no attempt has ever been recorded. */
+function readUpdateState(path = defaultUpdateStatePath()) {
+	if (!existsSync(path)) return null;
+	try {
+		const raw = readFileSync(path, "utf8");
+		const parsed = JSON.parse(raw);
+		if (!parsed || typeof parsed !== "object") return null;
+		const last = updateAttemptSchema$1.safeParse(parsed.last);
+		if (!last.success) return null;
+		return { last: last.data };
+	} catch {
+		return null;
+	}
+}
+/**
+* Persist the given attempt as the most recent record. Atomic in the
+* single-writer sense — only `update-glue.createExecuteUpdate` writes to
+* this file, and a CLI process never runs two `executeUpdate` calls
+* concurrently (UpdateManager's `updateInFlight` lock guarantees it).
+*/
+function recordUpdateAttempt(attempt, path = defaultUpdateStatePath()) {
+	mkdirSync(dirname(path), { recursive: true });
+	const payload = { last: attempt };
+	writeFileSync(path, `${JSON.stringify(payload, null, 2)}\n`, { mode: 384 });
+}
+/**
+* `true` when the last recorded attempt was `blocked` for *this exact
+* target version*. Server moving on to a different version clears the
+* block automatically — only the specific (target, machine) pair stays
+* frozen. Loop guard does not block on `failed`: those should retry
+* (transient EACCES / network), and the UpdateManager already handles
+* the back-off via "next welcome frame".
+*/
+function isLoopGuarded(target, path = defaultUpdateStatePath()) {
+	const state = readUpdateState(path);
+	if (!state) return false;
+	return state.last.result === "blocked" && state.last.target === target;
+}
+//#endregion
 //#region src/core/client-runtime.ts
 /**
 * Client runtime — one shared ClientConnection, multiple agents multiplexed.
@@ -11825,7 +11908,8 @@ var ClientRuntime = class {
 			clientId,
 			sdkVersion: options.currentVersion,
 			userAgent: CLI_USER_AGENT,
-			getAccessToken: (opts) => ensureFreshAccessToken(opts)
+			getAccessToken: (opts) => ensureFreshAccessToken(opts),
+			getLastUpdateAttempt: () => readUpdateState()?.last ?? null
 		});
 		this.gitMirrorManager = createGitMirrorManager({
 			dataDir: DEFAULT_DATA_DIR$1,
@@ -13322,7 +13406,7 @@ async function onboardCreate(args) {
 	}
 	const runtimeAgent = args.type === "human" ? args.assistant : args.id;
 	if (args.feishuBotAppId && args.feishuBotAppSecret) {
-		const { bindFeishuBot } = await import("./feishu-De4xqSeY.mjs");
+		const { bindFeishuBot } = await import("./feishu-DXF_NJHg.mjs");
 		const targetAgentUuid = args.type === "human" ? assistantUuid : primary.uuid;
 		if (!targetAgentUuid) print.line(`Warning: Cannot bind Feishu bot — no runtime agent available for "${args.id}".\n`);
 		else {
@@ -13784,7 +13868,7 @@ const declineUpdate = async () => false;
 * operator restarts manually.
 */
 function createExecuteUpdate({ managed }) {
-	return async ({ targetVersion }) => {
+	return async ({ currentVersion, targetVersion }) => {
 		const mode = detectInstallMode();
 		if (mode === "source") {
 			print.line("  [update] Running from source checkout — self-update skipped. Use `git pull` instead.\n");
@@ -13794,18 +13878,57 @@ function createExecuteUpdate({ managed }) {
 			print.line("  [update] Cannot self-update — not launched from a global npm install.\n  Run `npm i -g @agent-team-foundation/first-tree-hub` manually.\n");
 			return { installed: false };
 		}
+		if (isLoopGuarded(targetVersion)) {
+			print.line(`  [update] Refusing to retry ${targetVersion} — a previous attempt completed without\n           advancing the on-disk version. The most likely cause is npm's \`latest\`
+           dist-tag resolving to the same version this client is already running.
+           Operator action: manually run \`npm install -g @agent-team-foundation/first-tree-hub@latest\`,
+           then restart the service.
+`);
+			return { installed: true };
+		}
 		print.line(`  [update] Running \`npm install -g @agent-team-foundation/first-tree-hub@${targetVersion}\`...\n`);
 		const result = await installGlobalSpec(targetVersion);
 		if (!result.ok) {
 			print.line(`  [update] Install failed: ${result.reason}\n`);
+			recordUpdateAttempt({
+				result: "failed",
+				target: targetVersion,
+				currentBefore: currentVersion,
+				installedVersion: null,
+				reason: result.reason,
+				at: (/* @__PURE__ */ new Date()).toISOString()
+			});
 			return { installed: false };
 		}
-		const installed = result.installedVersion ?? targetVersion;
+		const installed = result.installedVersion;
+		if (installed && semver.valid(installed) && semver.valid(targetVersion) && semver.lt(installed, targetVersion)) {
+			const reason = `npm reported install of ${installed}, but the server-advertised target was ${targetVersion} (running ${currentVersion})`;
+			print.line(`  [update] WARNING: ${reason}\n`);
+			print.line("  [update] Skipping restart to avoid an exit-75 → reboot loop. Loop guard armed.\n");
+			recordUpdateAttempt({
+				result: "blocked",
+				target: targetVersion,
+				currentBefore: currentVersion,
+				installedVersion: installed,
+				reason,
+				at: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return { installed: true };
+		}
+		const installedLabel = installed ?? targetVersion;
+		recordUpdateAttempt({
+			result: "ok",
+			target: targetVersion,
+			currentBefore: currentVersion,
+			installedVersion: installed,
+			reason: null,
+			at: (/* @__PURE__ */ new Date()).toISOString()
+		});
 		if (managed) {
-			print.line(`  [update] Installed ${installed}. Restarting (exit 75).\n`);
+			print.line(`  [update] Installed ${installedLabel}. Restarting (exit 75).\n`);
 			process.exit(75);
 		}
-		print.line(`  [update] Installed ${installed}. Restart the client manually (Ctrl+C then \`first-tree-hub client start\`) to pick up the new version.\n`);
+		print.line(`  [update] Installed ${installedLabel}. Restart the client manually (Ctrl+C then \`first-tree-hub client start\`) to pick up the new version.\n`);
 		return { installed: true };
 	};
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agent-team-foundation/first-tree-hub",
-  "version": "0.14.9-alpha.292.1",
+  "version": "0.14.9-alpha.294.1",
   "type": "module",
   "description": "First Tree Hub — unified CLI for client and agent management",
   "exports": {