@ainyc/canonry 5.1.2 → 5.1.4

package/dist/{chunk-BS4ZC7FG.js → chunk-3KXI4C3S.js}

@@ -17,7 +17,7 @@ import {
   resolveOperatorApiKeyIds,
   runWithUsageTags,
   saveConfigPatch
-} from "./chunk-5K2NUQOV.js";
+} from "./chunk-AEE5DGTE.js";
 import {
   CC_CACHE_DIR,
   DUCKDB_SPEC,
@@ -168,7 +168,7 @@ import {
   siteCrawlSnapshots,
   toAlertView,
   usageCounters
-} from "./chunk-WSYJ4IT7.js";
+} from "./chunk-EBUX3C5H.js";
 import {
   AGENT_MEMORY_VALUE_MAX_BYTES,
   AGENT_NONE,
@@ -179,6 +179,7 @@ import {
   AdsCampaignBiddingTypes,
   AgentProviderIds,
   BacklinkSources,
+  CANONRY_NPM_PACKAGE_URL,
   CITED_URL_CAPTURE_VERSION,
   CcReleaseSyncStatuses,
   DEFAULT_VIEWER_RESEARCH_DAILY_RUN_LIMIT,
@@ -239,6 +240,7 @@ import {
   classifyProviderErrorMessages,
   classifyTemplateLinkEdge,
   cloudflareQueueNameSchema,
+  compareSemver,
   computeBacklinkSummaryMetrics,
   contentActionLabel,
   contentBriefDtoSchema,
@@ -279,9 +281,11 @@ import {
   isAgentProviderId,
   isBrowserProvider,
   isGhostTelemetryEvent,
+  isInstallMethod,
   isReadOnlyKey,
   isRetryableHttpError,
   isSelfLink,
+  isStrictSemver,
   isVertexGroundingRedirect,
   mapWithConcurrency,
   maskTelemetryAnonymousId,
@@ -313,11 +317,14 @@ import {
   templateLinkUbiquityAvailable,
   textContainsBrandAlias,
   textContainsDomain,
+  updateCheckEnvOptOut,
+  upgradeCaveatFor,
+  upgradeCommandFor,
   usageSurfaceSchema,
   validationError,
   winnabilityClassLabel,
   withRetry
-} from "./chunk-5ZIUROAQ.js";
+} from "./chunk-MMSPU72Z.js";
 
 // src/runtime-context.ts
 function cliRuntimeContext(env = process.env, stdio = process) {
@@ -569,47 +576,46 @@ function deliverEvent(event, properties, options, delivery = {}) {
 }
 
 // src/update-check.ts
+import fs from "fs";
 import { createRequire as createRequire2 } from "module";
+import { fileURLToPath } from "url";
 var _require2 = createRequire2(import.meta.url);
 var { version: PKG_VERSION } = _require2("../package.json");
 var PKG_NAME = "@canonry/canonry";
 var NPM_DIST_TAGS_URL = `https://registry.npmjs.org/-/package/${PKG_NAME}/dist-tags`;
-var NPM_PACKAGE_URL = `https://www.npmjs.com/package/${PKG_NAME}`;
+var NPM_PACKAGE_URL = CANONRY_NPM_PACKAGE_URL;
 var FETCH_TIMEOUT_MS = 1500;
-function isUpdateCheckEnabled() {
-  if (process.env.CANONRY_DISABLE_UPDATE_CHECK === "1") return false;
-  if (process.env.DO_NOT_TRACK === "1") return false;
-  if (process.env.CI) return false;
-  if (!configExists()) return true;
+var CONTAINER_MARKERS = ["/.dockerenv", "/run/.containerenv"];
+function detectInstallMethod(opts) {
+  const declared = (opts?.env ?? process.env).CANONRY_INSTALL_METHOD;
+  if (isInstallMethod(declared)) return declared;
+  let modulePath = opts?.modulePath ?? fileURLToPath(import.meta.url);
   try {
-    const raw = loadConfigRaw();
-    return raw?.updateCheck !== false;
+    modulePath = fs.realpathSync(modulePath);
   } catch {
-    return true;
   }
+  if (modulePath.replace(/\\/g, "/").includes("/Cellar/canonry/")) return "homebrew";
+  const exists = opts?.exists ?? fs.existsSync;
+  if (CONTAINER_MARKERS.some((marker) => exists(marker))) return "docker";
+  return "npm";
 }
-function compareSemver(a, b) {
-  const parse = (v) => {
-    const core = v.split(/[-+]/)[0];
-    if (!core) return null;
-    const parts = core.split(".");
-    if (parts.length < 3) return null;
-    const nums = [];
-    for (let i = 0; i < 3; i++) {
-      const n = Number(parts[i]);
-      if (!Number.isInteger(n) || n < 0) return null;
-      nums.push(n);
-    }
-    return [nums[0], nums[1], nums[2]];
-  };
-  const pa = parse(a);
-  const pb = parse(b);
-  if (!pa || !pb) return 0;
-  for (let i = 0; i < 3; i++) {
-    if (pa[i] > pb[i]) return 1;
-    if (pa[i] < pb[i]) return -1;
+var detectedInstallMethod;
+function currentInstallMethod() {
+  detectedInstallMethod ??= detectInstallMethod();
+  return detectedInstallMethod;
+}
+function isUpdateCheckEnabled() {
+  return updateCheckDisabledReason() === null;
+}
+function updateCheckDisabledReason() {
+  const envOptOut = updateCheckEnvOptOut(process.env);
+  if (envOptOut) return envOptOut;
+  if (!configExists()) return null;
+  try {
+    return loadConfigRaw()?.updateCheck === false ? "config" : null;
+  } catch {
+    return null;
   }
-  return 0;
 }
 async function fetchLatestVersion(opts) {
   const controller = new AbortController();
@@ -622,7 +628,7 @@ async function fetchLatestVersion(opts) {
     });
     if (!res.ok) return null;
     const data = await res.json();
-    if (typeof data.latest !== "string") return null;
+    if (typeof data.latest !== "string" || !isStrictSemver(data.latest)) return null;
     return data.latest;
   } catch {
     return null;
@@ -630,13 +636,15 @@ async function fetchLatestVersion(opts) {
     clearTimeout(timeout);
   }
 }
-function buildUpdateAvailable(current, latest) {
+function buildUpdateAvailable(current, latest, installMethod = currentInstallMethod()) {
+  if (!isStrictSemver(latest)) return null;
   if (compareSemver(latest, current) <= 0) return null;
   return {
     current,
     latest,
     url: NPM_PACKAGE_URL,
-    upgradeCommand: `npm install -g ${PKG_NAME}`
+    upgradeCommand: upgradeCommandFor(installMethod),
+    installMethod
   };
 }
 async function checkLatestVersionForCli(opts) {
@@ -674,6 +682,45 @@ async function checkLatestVersionForCli(opts) {
   }
   return buildUpdateAvailable(PKG_VERSION, latest);
 }
+function readCachedUpdateAvailable() {
+  if (!isUpdateCheckEnabled()) return null;
+  if (!configExists()) return null;
+  try {
+    const cachedLatest = loadConfigRaw()?.lastKnownLatestVersion;
+    if (typeof cachedLatest !== "string") return null;
+    return buildUpdateAvailable(PKG_VERSION, cachedLatest);
+  } catch {
+    return null;
+  }
+}
+var UPDATE_AVAILABLE_NOTICE_CODE = "UPDATE_AVAILABLE";
+function formatUpdateNotice(update, opts) {
+  const caveat = upgradeCaveatFor(update.installMethod);
+  if (opts.format === "json" || opts.format === "jsonl") {
+    return `${JSON.stringify({
+      notice: {
+        code: UPDATE_AVAILABLE_NOTICE_CODE,
+        current: update.current,
+        latest: update.latest,
+        installMethod: update.installMethod,
+        upgradeCommand: update.upgradeCommand,
+        url: update.url,
+        ...caveat ? { note: caveat } : {}
+      }
+    })}
+`;
+  }
+  if (opts.interactive) {
+    return `
+\u2192 canonry ${update.latest} is available (you have ${update.current}).
+  Upgrade: ${update.upgradeCommand}
+` + (caveat ? `  ${caveat}
+` : "") + "\n";
+  }
+  const upgrade = update.installMethod === "docker" ? `Upgrade: ${update.upgradeCommand}.` : `Upgrade with \`${update.upgradeCommand}\`, then restart any running \`canonry serve\`.`;
+  return `[canonry] ${UPDATE_AVAILABLE_NOTICE_CODE}: canonry ${update.latest} is available (installed ${update.current}). ${upgrade} ${caveat ? `${caveat} ` : ""}Silence with CANONRY_DISABLE_UPDATE_CHECK=1.
+`;
+}
 var memoryCache = null;
 var inFlight = null;
 function startBackgroundRefresh(getNow) {
@@ -700,6 +747,22 @@ function checkLatestVersionForServer(opts) {
   if (!memoryCache || !memoryCache.latest) return null;
   return buildUpdateAvailable(PKG_VERSION, memoryCache.latest);
 }
+function getServerUpdateStatus(opts) {
+  const installMethod = currentInstallMethod();
+  const base = { current: PKG_VERSION, installMethod, upgradeCommand: upgradeCommandFor(installMethod), url: NPM_PACKAGE_URL };
+  const disabledBy = updateCheckDisabledReason();
+  if (disabledBy) return { ...base, enabled: false, disabledBy, latest: null };
+  checkLatestVersionForServer(opts);
+  let latest = memoryCache?.latest ?? null;
+  if (!latest && configExists()) {
+    try {
+      const cached = loadConfigRaw()?.lastKnownLatestVersion;
+      if (typeof cached === "string") latest = cached;
+    } catch {
+    }
+  }
+  return { ...base, enabled: true, latest: latest && isStrictSemver(latest) ? latest : null };
+}
 
 // src/google-marketing-runtime.ts
 import crypto3 from "crypto";
@@ -3470,9 +3533,9 @@ function createGoogleMarketingRuntime(options) {
 // src/server.ts
 import { createRequire as createRequire4 } from "module";
 import crypto27 from "crypto";
-import fs7 from "fs";
+import fs8 from "fs";
 import path8 from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { fileURLToPath as fileURLToPath3 } from "url";
 import { and as and20, eq as eq26 } from "drizzle-orm";
 import Fastify from "fastify";
 import os4 from "os";
@@ -5393,12 +5456,12 @@ function sleep2(ms) {
 }
 
 // ../provider-cdp/src/screenshot.ts
-import fs from "fs";
+import fs2 from "fs";
 import path from "path";
 async function captureElementScreenshot(client, selector, outputPath) {
   const dir = path.dirname(outputPath);
-  if (!fs.existsSync(dir)) {
-    fs.mkdirSync(dir, { recursive: true });
+  if (!fs2.existsSync(dir)) {
+    fs2.mkdirSync(dir, { recursive: true });
   }
   let clip;
   try {
@@ -5432,7 +5495,7 @@ async function captureElementScreenshot(client, selector, outputPath) {
   }
   const { data } = await client.Page.captureScreenshot(screenshotParams);
   const buffer = Buffer.from(data, "base64");
-  fs.writeFileSync(outputPath, buffer);
+  fs2.writeFileSync(outputPath, buffer);
   return outputPath;
 }
 
@@ -6393,7 +6456,7 @@ function nonBlank(value) {
   return trimmed ? trimmed : void 0;
 }
 function resolveBuildCommit(env = process.env) {
-  const embedded = true ? "267b6410fa27a2bf032d4957047859e1f9eee6d1" : void 0;
+  const embedded = true ? "56f0f163c861a247687db8c2087c41218f8ee982" : void 0;
   return nonBlank(embedded) ?? nonBlank(env.CANONRY_COMMIT);
 }
 function resolveInstanceIdentity(env = process.env) {
@@ -6405,7 +6468,7 @@ function resolveInstanceIdentity(env = process.env) {
 
 // src/job-runner.ts
 import crypto6 from "crypto";
-import fs2 from "fs";
+import fs3 from "fs";
 import path3 from "path";
 import os3 from "os";
 import { and as and2, eq as eq2, inArray, ne, sql as sql2 } from "drizzle-orm";
@@ -6973,12 +7036,12 @@ var JobRunner = class {
               allBrandNames
             );
             let screenshotRelPath = null;
-            if (raw.screenshotPath && fs2.existsSync(raw.screenshotPath)) {
+            if (raw.screenshotPath && fs3.existsSync(raw.screenshotPath)) {
               const snapshotId = crypto6.randomUUID();
               const screenshotDir = path3.join(os3.homedir(), ".canonry", "screenshots", runId);
-              if (!fs2.existsSync(screenshotDir)) fs2.mkdirSync(screenshotDir, { recursive: true });
+              if (!fs3.existsSync(screenshotDir)) fs3.mkdirSync(screenshotDir, { recursive: true });
               const destPath = path3.join(screenshotDir, `${snapshotId}.png`);
-              fs2.renameSync(raw.screenshotPath, destPath);
+              fs3.renameSync(raw.screenshotPath, destPath);
               screenshotRelPath = `${runId}/${snapshotId}.png`;
               this.db.insert(querySnapshots).values({
                 id: snapshotId,
@@ -7131,11 +7194,11 @@ var JobRunner = class {
             );
             const snapshotId = crypto6.randomUUID();
             let screenshotRelPath = null;
-            if (raw.screenshotPath && fs2.existsSync(raw.screenshotPath)) {
+            if (raw.screenshotPath && fs3.existsSync(raw.screenshotPath)) {
               const screenshotDir = path3.join(os3.homedir(), ".canonry", "screenshots", runId);
-              if (!fs2.existsSync(screenshotDir)) fs2.mkdirSync(screenshotDir, { recursive: true });
+              if (!fs3.existsSync(screenshotDir)) fs3.mkdirSync(screenshotDir, { recursive: true });
               const destPath = path3.join(screenshotDir, `${snapshotId}.png`);
-              fs2.renameSync(raw.screenshotPath, destPath);
+              fs3.renameSync(raw.screenshotPath, destPath);
               screenshotRelPath = `${runId}/${snapshotId}.png`;
             }
             this.db.insert(querySnapshots).values({
@@ -9695,7 +9758,7 @@ function computeSummary(rows) {
 
 // src/backlink-extract.ts
 import crypto16 from "crypto";
-import fs3 from "fs";
+import fs4 from "fs";
 import { and as and9, desc as desc5, eq as eq11 } from "drizzle-orm";
 var log11 = createLogger("BacklinkExtract");
 function defaultDeps3() {
@@ -9724,7 +9787,7 @@ async function executeBacklinkExtract(db, runId, projectId, opts = {}) {
     if (!sync.vertexPath || !sync.edgesPath) {
       throw new Error(`Release ${sync.release} is missing cached file paths`);
     }
-    if (!fs3.existsSync(sync.vertexPath) || !fs3.existsSync(sync.edgesPath)) {
+    if (!fs4.existsSync(sync.vertexPath) || !fs4.existsSync(sync.edgesPath)) {
       throw new Error(
         `Cache for release ${sync.release} is missing from disk (expected at ${sync.vertexPath}). The sync record exists in the database, but the ~16 GB dump was deleted or never present on this machine. Re-sync this release from the Backlinks admin page to restore the cache.`
       );
@@ -12319,7 +12382,7 @@ function readStoredGroundingSources(rawResponse) {
   return result;
 }
 async function backfillInsightsCommand(project, opts) {
-  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-D2HY2S5F.js");
+  const { IntelligenceService: IntelligenceService2 } = await import("./intelligence-service-25NQCETC.js");
   const config = loadConfig();
   const db = createClient(config.database);
   migrate(db);
@@ -14054,7 +14117,7 @@ import crypto25 from "crypto";
 import { eq as eq21 } from "drizzle-orm";
 
 // src/agent/session.ts
-import fs6 from "fs";
+import fs7 from "fs";
 import path7 from "path";
 import { Agent } from "@mariozechner/pi-agent-core";
 import { registerBuiltInApiProviders } from "@mariozechner/pi-ai";
@@ -14298,25 +14361,25 @@ function buildAgentProvidersResponse(config) {
 }
 
 // src/agent/skill-paths.ts
-import fs4 from "fs";
+import fs5 from "fs";
 import path5 from "path";
-import { fileURLToPath } from "url";
+import { fileURLToPath as fileURLToPath2 } from "url";
 function resolveAeroSkillDir(pkgDir) {
-  const here = pkgDir ?? path5.dirname(fileURLToPath(import.meta.url));
+  const here = pkgDir ?? path5.dirname(fileURLToPath2(import.meta.url));
   const candidates = [
     path5.join(here, "../assets/agent-workspace/skills/aero"),
     path5.join(here, "../../assets/agent-workspace/skills/aero"),
     path5.join(here, "../../../../skills/aero")
   ];
   for (const candidate of candidates) {
-    if (fs4.existsSync(path5.join(candidate, "SKILL.md"))) return candidate;
+    if (fs5.existsSync(path5.join(candidate, "SKILL.md"))) return candidate;
   }
   throw new Error(`Aero skill not found. Searched:
   ${candidates.join("\n  ")}`);
 }
 
 // src/agent/skill-tools.ts
-import fs5 from "fs";
+import fs6 from "fs";
 import path6 from "path";
 import { Type } from "@sinclair/typebox";
 var MAX_DOC_CHARS = 2e4;
@@ -14339,12 +14402,12 @@ function parseDescription(body) {
 }
 function scanSkillDocs(skillDir) {
   const refsDir = path6.join(skillDir ?? resolveAeroSkillDir(), "references");
-  if (!fs5.existsSync(refsDir)) return [];
+  if (!fs6.existsSync(refsDir)) return [];
   const entries = [];
-  for (const file of fs5.readdirSync(refsDir)) {
+  for (const file of fs6.readdirSync(refsDir)) {
     if (!file.endsWith(".md")) continue;
     const filePath = path6.join(refsDir, file);
-    const body = fs5.readFileSync(filePath, "utf-8");
+    const body = fs6.readFileSync(filePath, "utf-8");
     entries.push({
       slug: file.replace(/\.md$/, ""),
       description: parseDescription(body),
@@ -14388,7 +14451,7 @@ function buildReadSkillDocTool() {
         });
       }
       const filePath = path6.join(skillDir, "references", `${match.slug}.md`);
-      const content = fs5.readFileSync(filePath, "utf-8");
+      const content = fs6.readFileSync(filePath, "utf-8");
       if (content.length > MAX_DOC_CHARS) {
         return textResult({
           slug: match.slug,
@@ -15049,9 +15112,9 @@ function ensureBuiltinsRegistered() {
 }
 function loadAeroSystemPrompt(pkgDir) {
   const skillDir = resolveAeroSkillDir(pkgDir);
-  const skillBody = fs6.readFileSync(path7.join(skillDir, "SKILL.md"), "utf-8");
+  const skillBody = fs7.readFileSync(path7.join(skillDir, "SKILL.md"), "utf-8");
   const soulPath = path7.join(skillDir, "soul.md");
-  const base = fs6.existsSync(soulPath) ? `${fs6.readFileSync(soulPath, "utf-8").trimEnd()}
+  const base = fs7.existsSync(soulPath) ? `${fs7.readFileSync(soulPath, "utf-8").trimEnd()}
 
 ---
 
@@ -15064,7 +15127,7 @@ function appendSystemPromptExtras(base, env = process.env) {
   const filePath = env.AERO_SYSTEM_PROMPT_FILE?.trim();
   if (filePath) {
     try {
-      fileBody = fs6.readFileSync(filePath, "utf-8").trim();
+      fileBody = fs7.readFileSync(filePath, "utf-8").trim();
     } catch {
       fileBody = "";
     }
@@ -15551,9 +15614,13 @@ var SessionRegistry = class {
     if (cached) return cached;
     const projectId = this.resolveProjectId(projectName);
     const row = this.loadRow(projectId);
+    const systemPrompt = loadAeroSystemPrompt();
     if (row) {
       const persistedMessages = parseJsonColumn(row.messages, []);
       const queued = parseJsonColumn(row.followUpQueue, []);
+      if (row.systemPrompt !== systemPrompt) {
+        this.persistPromptSnapshot(projectId, systemPrompt);
+      }
       const effectiveProvider = preferences?.provider ?? row.modelProvider;
       const effectiveModelId = preferences?.modelId ?? row.modelId;
       if (preferences?.provider || preferences?.modelId) {
@@ -15569,7 +15636,7 @@ var SessionRegistry = class {
         config: this.opts.config,
         provider: effectiveProvider,
         modelId: effectiveModelId,
-        systemPromptOverride: this.buildHydratedSystemPrompt(projectId, row.systemPrompt),
+        systemPromptOverride: this.buildHydratedSystemPrompt(projectId, systemPrompt),
         initialMessages: persistedMessages,
         toolScope: preferences?.toolScope,
         toolProfile: preferences?.toolProfile,
@@ -15589,7 +15656,6 @@ var SessionRegistry = class {
       return agent2;
     }
     const { provider, modelId } = resolveSessionProviderAndModel(this.opts.config, preferences);
-    const systemPrompt = loadAeroSystemPrompt();
     const sessionId = crypto25.randomUUID();
     const agent = createAeroSession({
       projectName,
@@ -15612,7 +15678,7 @@ var SessionRegistry = class {
     this.insertRow({
       id: sessionId,
       projectId,
-      // Persist the raw (unhydrated) prompt so the DB remains canonical —
+      // Persist the raw (unhydrated) installed prompt snapshot —
       // the `<memory>` block is rebuilt from the notes table on every load.
       systemPrompt,
       modelProvider: provider,
@@ -15702,6 +15768,13 @@ ${lines.join("\n")}
     if (agent.state.isStreaming) {
       throw agentBusy(projectName);
     }
+    const projectId = this.resolveProjectId(projectName);
+    const row = this.loadRow(projectId);
+    const systemPrompt = loadAeroSystemPrompt();
+    if (row && row.systemPrompt !== systemPrompt) {
+      this.persistPromptSnapshot(projectId, systemPrompt);
+      agent.state.systemPrompt = this.buildHydratedSystemPrompt(projectId, systemPrompt);
+    }
     this.alignToolSurface(projectName, agent, {
       scope: preferences?.toolScope ?? AeroToolScopes.all,
       profile: preferences?.toolProfile ?? AeroToolProfiles.default
@@ -15984,6 +16057,15 @@ ${lines.join("\n")}
     const now = (/* @__PURE__ */ new Date()).toISOString();
     this.opts.db.update(agentSessions).set({ ...patch, updatedAt: now }).where(eq21(agentSessions.projectId, projectId)).run();
   }
+  /**
+   * Store a refreshed prompt snapshot without touching `updatedAt`, which the
+   * transcript API reports as the conversation's last activity. Adopting a new
+   * bundled skill is not activity, so it must not make every session look
+   * recently used right after an upgrade.
+   */
+  persistPromptSnapshot(projectId, systemPrompt) {
+    this.opts.db.update(agentSessions).set({ systemPrompt }).where(eq21(agentSessions.projectId, projectId)).run();
+  }
 };
 
 // src/mcp-http.ts
@@ -16088,7 +16170,8 @@ function registerMcpHttpRoutes(scope, opts) {
         credentialScopes: scopes,
         operator: request.operatorAccess === true,
         tiers: segment.tiers,
-        clientFactory: () => client
+        clientFactory: () => client,
+        updateAvailable: opts.getUpdateAvailable
       });
     } catch (error) {
       if (sessionKey) revokeSessionKey(opts.db, sessionKey.id);
@@ -18141,7 +18224,7 @@ async function createServer(opts) {
     });
   };
   const orphanedOpenClawDir = path8.join(os4.homedir(), ".openclaw-aero");
-  if (fs7.existsSync(orphanedOpenClawDir)) {
+  if (fs8.existsSync(orphanedOpenClawDir)) {
     app.log.warn(
       { path: orphanedOpenClawDir },
       "OpenClaw gateway is no longer used. Remove ~/.openclaw-aero/ manually to reclaim the directory."
@@ -19051,7 +19134,7 @@ async function createServer(opts) {
       const configPath = getConfigPath();
       return {
         databasePath: opts.config.database,
-        configPath: fs7.existsSync(configPath) ? configPath : null
+        configPath: fs8.existsSync(configPath) ? configPath : null
       };
     })(),
     // Snapshot the bundled skill trees (version + file hashes) so the
@@ -19066,6 +19149,8 @@ async function createServer(opts) {
       }
     })(),
     getAgentPluginState: opts.getAgentPluginState,
+    // Powers the `canonry.version.current` doctor check. Non-blocking.
+    getUpdateStatus: () => getServerUpdateStatus(),
     // Local canonry serve runs on the operator's machine, where pointing a
     // webhook at localhost (Discord test container, Pipedream-mock dev server,
     // etc.) is a legitimate workflow. Default to allowing it for the local
@@ -19084,7 +19169,13 @@ async function createServer(opts) {
     credentials: credentialChecker,
     oauthResourceUrl: publicOrigin ? `${publicOrigin}${`${basePath ?? "/"}api/v1/mcp`.replace("//", "/")}` : void 0,
     registerAuthenticatedRoutes: async (scope) => {
-      registerMcpHttpRoutes(scope, { selfApiUrl: opts.config.apiUrl, issuer: publicOrigin, db: opts.db });
+      registerMcpHttpRoutes(scope, {
+        selfApiUrl: opts.config.apiUrl,
+        issuer: publicOrigin,
+        db: opts.db,
+        // Same non-blocking cache as /health, so hosted agents see the notice too.
+        getUpdateAvailable: () => checkLatestVersionForServer()
+      });
       registerOAuthAdminRoutes(scope, { db: opts.db });
       if (!sessionRegistry) return;
       registerAgentRoutes(scope, { db: opts.db, sessionRegistry });
@@ -19627,9 +19718,9 @@ async function createServer(opts) {
       return snapshotService.createReport(input);
     }
   });
-  const dirname = path8.dirname(fileURLToPath2(import.meta.url));
+  const dirname = path8.dirname(fileURLToPath3(import.meta.url));
   const assetsDir = opts.assetsDir ?? path8.join(dirname, "..", "assets");
-  if (fs7.existsSync(assetsDir)) {
+  if (fs8.existsSync(assetsDir)) {
     const indexPath = path8.join(assetsDir, "index.html");
     const injectConfig = (html, projectTabsOverride, themeOverride, renderTokenOverride) => {
       const clientConfig = {};
@@ -19703,8 +19794,8 @@ async function createServer(opts) {
       }
     });
     const serveIndex = (_request, reply) => {
-      if (fs7.existsSync(indexPath)) {
-        const html = fs7.readFileSync(indexPath, "utf-8");
+      if (fs8.existsSync(indexPath)) {
+        const html = fs8.readFileSync(indexPath, "utf-8");
         return sendSpaDocument(reply, html);
       }
       return reply.status(404).send({ error: "Dashboard not built" });
@@ -19735,8 +19826,8 @@ async function createServer(opts) {
       if (basePath && !url.startsWith(basePath)) {
         return reply.status(404).send({ error: "Not found", path: request.url });
       }
-      if (fs7.existsSync(indexPath)) {
-        const html = fs7.readFileSync(indexPath, "utf-8");
+      if (fs8.existsSync(indexPath)) {
+        const html = fs8.readFileSync(indexPath, "utf-8");
         return sendSpaDocument(reply, html);
       }
       return reply.status(404).send({ error: "Not found" });
@@ -19900,6 +19991,8 @@ export {
   setGoogleAuthConfig,
   formatAuditFactorScore,
   checkLatestVersionForCli,
+  readCachedUpdateAvailable,
+  formatUpdateNotice,
   listAgentProviders,
   coerceAgentProvider,
   AERO_TOOL_PROFILES,