npm - @aopslabs/aops - Versions diffs - 0.3.10 → 0.3.12 - Mend

@aopslabs/aops 0.3.10 → 0.3.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (37) hide show

package/agent-assets-release/agent-assets/core/{070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5 → ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff}/files/user-guides/aops-cli.md RENAMED Viewed

@@ -50,6 +50,23 @@ aops auth login --target <target-name>
 aops auth status --target <target-name>
 ```
+### 2.3 Guarded global npm update
+Use the TUI Update page for Check, Prepare, and confirmed Apply. For headless
+operation:
+```bash
+aops update check --json
+aops update prepare --json
+aops update apply --plan <update-plan.json> --confirm <sha256-plan-id> --json
+```
+Prepare is non-mutating and retains exact candidate and rollback tarballs.
+Apply stops Cockpit before Server, installs the public closure as one global
+CLI with its exact nested Server, repeatedly checks loopback health, and
+automatically restores the prior exact closure on failure. It does not publish
+packages or create source-control releases.
 ## 3 `init`
 ### 3.1 Overview

@@ -36,6 +36,30 @@ logs and Ctrl+C cleanup. The Cockpit launcher starts only its independent
 background process. Both call package-relative Node entrypoints and never
 carry database secrets in the script or argv.
+## Guarded global update
+The bundled Rust TUI has an Update page for an already installed npm-based
+AOPS system. Its Check action is read-only. Prepare downloads and verifies the
+exact public candidate and restore tarballs and writes a plan without changing
+services or packages. Apply requires that exact plan, briefly stops Cockpit
+and Server, installs one global `@aopslabs/aops` CLI with its exact nested
+Server dependency, and repeatedly verifies direct Server, Cockpit, and
+Cockpit-proxy health. Failure automatically restores the prior exact versions,
+package layout, and services.
+The same lifecycle is available headlessly:
+```text
+aops update check --json
+aops update prepare --json
+aops update apply --plan <update-plan.json> --confirm <sha256-plan-id> --json
+```
+All metadata and tarball reads are pinned to the public npm registry. A legacy
+top-level Server dedupe is treated as a repairable package-layout issue. The
+updater does not publish packages, create tags/releases, or replace the normal
+candidate acceptance and independent review gates.
 ## Capability discovery
 Start with the relevant CLI family help. When a server has custom or newer domains, query its live catalog:

@@ -73,14 +73,14 @@
       "sha256": "18924d928b659eb80a7736a104b56b9693cffe91cc4499e739a2a67a0922c519"
     },
     {
-      "byteLength": 50749,
+      "byteLength": 51366,
       "path": "user-guides/aops-cli.md",
-      "sha256": "a132c0a8c3ff6fe12991f559c5a1f33b32d70790f0b53d0e4ab4fbe101cd7e2d"
+      "sha256": "bcf09a9246da2854ef7d3a057688fccd8c5c06613f41044d3d8bc556e623bac8"
     },
     {
-      "byteLength": 3609,
+      "byteLength": 4675,
       "path": "user-guides/aops-system.md",
-      "sha256": "d7a3294cfdd6291d30c57baa033f22627f1a0a590545f2e1195f9b988bf55c5f"
+      "sha256": "3e001003b36c6cc392e8998b1399ac36558438b49a7cfe1a6b482edfdbf44bb7"
     },
     {
       "byteLength": 4789,
@@ -109,7 +109,7 @@
     }
   ],
   "name": "aops",
-  "packageSha256": "070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5",
+  "packageSha256": "ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff",
   "provenance": {
     "expectedDigestSource": "signed-release-manifest",
     "reference": "aops-platform-agent-assets:core",
@@ -117,6 +117,6 @@
   },
   "schemaVersion": 1,
   "standard": "aops-community-core-v1",
-  "version": "0.3.10",
-  "versionId": "community-core-0.3.10"
+  "version": "0.3.12",
+  "versionId": "community-core-0.3.12"
 }

package/agent-assets-release/agent-assets/inventory.json CHANGED Viewed

@@ -6,12 +6,12 @@
   },
   "core": {
     "entryFile": "SKILL.md",
-    "manifestRef": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/manifest.json",
+    "manifestRef": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/manifest.json",
     "name": "aops",
     "optional": false,
-    "packageSha256": "070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5",
-    "version": "0.3.10",
-    "versionId": "community-core-0.3.10"
+    "packageSha256": "ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff",
+    "version": "0.3.12",
+    "versionId": "community-core-0.3.12"
   },
   "gateway": {
     "byteLength": 621,
@@ -22,7 +22,7 @@
   "kind": "aops-community-agent-assets-inventory-v1",
   "schemaVersion": 1,
   "source": {
-    "commit": "ae3d08728aab34b9870fe827866c5b3f9d43f29e",
+    "commit": "4c0de59827ef0b3ff1494d4626eac56736da88ee",
     "repository": "git+https://github.com/eeemzs/aops-platform",
     "root": "apps/aops-cli/assets/agent-assets"
   }

package/agent-assets-release/agent-assets/projection.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "catalogPackageSha256": [],
-  "corePackageSha256": "070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5",
+  "corePackageSha256": "ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff",
   "gatewayRef": "agent-assets/gateway/aops/SKILL.md",
   "kind": "aops-community-agent-assets-projection-v1",
   "root": "agent-assets",

package/agent-assets-release/agent-assets-release.json CHANGED Viewed

@@ -7,123 +7,123 @@
     },
     "core": {
       "entryFile": "SKILL.md",
-      "manifestRef": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/manifest.json",
+      "manifestRef": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/manifest.json",
       "name": "aops",
       "optional": false,
-      "packageSha256": "070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5",
-      "version": "0.3.10",
-      "versionId": "community-core-0.3.10"
+      "packageSha256": "ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff",
+      "version": "0.3.12",
+      "versionId": "community-core-0.3.12"
     },
     "files": [
       {
         "byteLength": 2738,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/SKILL.md",
         "sha256": "44f8e0ffe807195d6890719e1350a630d159ee74f219001d9393d1d9a8d4818b"
       },
       {
         "byteLength": 2681,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/agentspace/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/agentspace/SKILL.md",
         "sha256": "08e33ef035c41beead342202a1f07af4391b1e4ed62cea9a4d79b43e966c7c0f"
       },
       {
         "byteLength": 3804,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/aops-cli-core/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/aops-cli-core/SKILL.md",
         "sha256": "a645a2f50bc35b2033d05bad770b2f0a53e3f162b95f00dfd493ba718c062433"
       },
       {
         "byteLength": 2341,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/chatv3/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/chatv3/SKILL.md",
         "sha256": "0f45d8fe418f740456e7f448ce472a7f0784a7cd5b01fe4cbc81439ded3c7931"
       },
       {
         "byteLength": 2869,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/collaborative-work/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/collaborative-work/SKILL.md",
         "sha256": "f4d2af3c384368b1adb1308f2c3731b17e6b4074e4ebdfc8c8f061ba2bb01a67"
       },
       {
         "byteLength": 2386,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/discuss/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/discuss/SKILL.md",
         "sha256": "03cd2bde90b590b4ce6a370a6d17d1aaabbb6693fee47c29e0e45848b3d7f8d6"
       },
       {
         "byteLength": 2736,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/docman/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/docman/SKILL.md",
         "sha256": "cf48bfa4d94a97a0d2805d5d9dd7a7d0f7430adaf36b9b2fc685465c42cd8cd7"
       },
       {
         "byteLength": 1910,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/mission/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/mission/SKILL.md",
         "sha256": "f4ce9c60c3d12ba45e9eaba0069ed9d8936438a15e0ae1974fa8b15a17ae67a1"
       },
       {
         "byteLength": 3167,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/projectman/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/projectman/SKILL.md",
         "sha256": "2ff36573d7bf85b2212d1c819bb692cbdfb49f4ea77fdd95d0a263c4007c31b0"
       },
       {
         "byteLength": 1621,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/sys/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/sys/SKILL.md",
         "sha256": "89cb838aafed26874a0fbc121078435a2ec27bf2901527a51515833e63b1dff4"
       },
       {
         "byteLength": 1865,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/view/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/view/SKILL.md",
         "sha256": "644603a17444374025acf52975dc5df04e1412d69965b210a28b6b5ed203c90b"
       },
       {
         "byteLength": 3093,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/references/working-disciplines/SKILL.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/references/working-disciplines/SKILL.md",
         "sha256": "406c7215917ff68e22c221847c72af9c38dc9ddab6cb0a4beaedd46038bda08d"
       },
       {
         "byteLength": 3333,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/agent-assets.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/agent-assets.md",
         "sha256": "12ef09138579d9bfc75a33d51c78bc50d8b34556eb6070af64a8c03d93927f05"
       },
       {
         "byteLength": 7702,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/agentspace.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/agentspace.md",
         "sha256": "18924d928b659eb80a7736a104b56b9693cffe91cc4499e739a2a67a0922c519"
       },
       {
-        "byteLength": 50749,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/aops-cli.md",
-        "sha256": "a132c0a8c3ff6fe12991f559c5a1f33b32d70790f0b53d0e4ab4fbe101cd7e2d"
+        "byteLength": 51366,
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/aops-cli.md",
+        "sha256": "bcf09a9246da2854ef7d3a057688fccd8c5c06613f41044d3d8bc556e623bac8"
       },
       {
-        "byteLength": 3609,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/aops-system.md",
-        "sha256": "d7a3294cfdd6291d30c57baa033f22627f1a0a590545f2e1195f9b988bf55c5f"
+        "byteLength": 4675,
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/aops-system.md",
+        "sha256": "3e001003b36c6cc392e8998b1399ac36558438b49a7cfe1a6b482edfdbf44bb7"
       },
       {
         "byteLength": 4789,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/chatv3.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/chatv3.md",
         "sha256": "d27aaf35d84bcfb6c00f67b170f80f7dc4879fdf8d439fbaf131ed615a8eb9d6"
       },
       {
         "byteLength": 5838,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/docman.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/docman.md",
         "sha256": "0e434b7bf043260038d12062b1adc5cbf4ba0adf918c9fdf879262dc50bd779c"
       },
       {
         "byteLength": 6660,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/projectman.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/projectman.md",
         "sha256": "23289f31414c9d753f348efb6b5c1e58fe1ff217b6c730d6443279e6052a0509"
       },
       {
         "byteLength": 3432,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/sys.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/sys.md",
         "sha256": "3959f5c044314be14f368529edffd7adb80bb475b659397c6f4bbec8086c5f28"
       },
       {
         "byteLength": 27262,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/files/user-guides/working-disciplines.md",
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/files/user-guides/working-disciplines.md",
         "sha256": "c440185924c91755008ce9977c1ab3128994973038e610fe04cad392b14af79b"
       },
       {
         "byteLength": 3978,
-        "ref": "agent-assets/core/070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5/manifest.json",
-        "sha256": "5c1448a4dd26ad41a7455070da26b60b6de4f6223f9bcc13b63ee385dfa61afa"
+        "ref": "agent-assets/core/ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff/manifest.json",
+        "sha256": "6a328805ad7d840594f6f171e94071b0f931404ab86dfb9fc37f93815dfb6675"
       },
       {
         "byteLength": 621,
@@ -133,12 +133,12 @@
       {
         "byteLength": 926,
         "ref": "agent-assets/inventory.json",
-        "sha256": "f5eb6847501dd2050f6b318030c9d67dabba9875f6f8209a3c2c2076823c8504"
+        "sha256": "b6ce24a65a42831fa037617838762688a11a7c01efcb86470e1ade2d0672a260"
       },
       {
         "byteLength": 281,
         "ref": "agent-assets/projection.json",
-        "sha256": "29650b3d65c551044186dfb966e8b578c102fcfebdbff4b94ec3204adca4c2b2"
+        "sha256": "fc0b5930ba8d5ec145e442b90274b9d9608d6081f2c39c5ed730a3aa0896e1ab"
       }
     ],
     "gateway": {
@@ -149,16 +149,16 @@
     },
     "inventory": {
       "ref": "agent-assets/inventory.json",
-      "sha256": "f5eb6847501dd2050f6b318030c9d67dabba9875f6f8209a3c2c2076823c8504"
+      "sha256": "b6ce24a65a42831fa037617838762688a11a7c01efcb86470e1ade2d0672a260"
     },
     "kind": "aops-community-agent-assets-release-v1",
     "projection": {
       "ref": "agent-assets/projection.json",
-      "sha256": "29650b3d65c551044186dfb966e8b578c102fcfebdbff4b94ec3204adca4c2b2"
+      "sha256": "fc0b5930ba8d5ec145e442b90274b9d9608d6081f2c39c5ed730a3aa0896e1ab"
     },
     "root": "agent-assets",
     "schemaVersion": 1,
-    "setSha256": "8e591bdee7b640a4810dbc1b8c16895dcc8e042b254c01c54ebebf9c15dd9d61"
+    "setSha256": "0c165103307fece47df0776bc1bdd45898317769904cc46d4bd809afe0737027"
   },
   "evidence": {
     "signature": {
@@ -166,10 +166,10 @@
     }
   },
   "kind": "aops-community-agent-assets-bundle-v1",
-  "releaseVersion": "0.3.10",
+  "releaseVersion": "0.3.12",
   "schemaVersion": 1,
   "source": {
-    "commit": "ae3d08728aab34b9870fe827866c5b3f9d43f29e",
+    "commit": "4c0de59827ef0b3ff1494d4626eac56736da88ee",
     "repository": "git+https://github.com/eeemzs/aops-platform",
     "root": "apps/aops-cli/assets/agent-assets"
   }

package/agent-assets-release/agent-assets-release.sigstore.json CHANGED Viewed

@@ -4,13 +4,13 @@
     "x509CertificateChain": {
       "certificates": [
         {
-          "rawBytes": "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"
+          "rawBytes": "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"
         }
       ]
     },
     "tlogEntries": [
       {
-        "logIndex": "2406480104",
+        "logIndex": "2437161535",
         "logId": {
           "keyId": "wNI9atQGlz+VWfO6LRygH4QUfY/8W4RFwiT5i5WRgB0="
         },
@@ -18,37 +18,34 @@
           "kind": "hashedrekord",
           "version": "0.0.1"
         },
-        "integratedTime": "1786356103",
+        "integratedTime": "1786542222",
         "inclusionPromise": {
-          "signedEntryTimestamp": "MEUCICWnwCwlu/MO/61SzDN/oO74NcYpS6dpnrHwlVRN1zepAiEAyHv3tcLHvqjbzN/RHtpMnFuwbF+VaPeAgIZwu8vu2JQ="
+          "signedEntryTimestamp": "MEUCIAUh1+bAxa2z3KpO0PjffzVqgXNWeHFhpwInuAshs5NJAiEA7ambQloRTz91/zDrBOZ+eSOM4q0Jjcx6a3gdS/fTELM="
         },
         "inclusionProof": {
-          "logIndex": "2284575842",
-          "rootHash": "NZihJ1CvHqsgu25crzujDGoE6pW+K8JV63Wmadn8Px8=",
-          "treeSize": "2284575845",
+          "logIndex": "2315257273",
+          "rootHash": "TySTIZXLwpzt56M+HaQ6fuYSHmk2b60wYUyV1dC9fPY=",
+          "treeSize": "2315257285",
           "hashes": [
-            "LGaRvRnshOvMWU8gB+uGwypz0vuVyNrT9X56ekw2aCs=",
-            "Dqyr4/1h+5rxqxLjUj2Bv1DvcOsqNKUWlXDvx6S+zzM=",
-            "jglRqdFaBoDS64P+zq8gGo7H32qXogqA3NjK1wuDhLQ=",
-            "wv6k0Ym9MAbJP5Drdc3axW+9i4LDWenwFQyXKUOEl6g=",
-            "TMQPqazZ7sYlZUI/tAFaLQc8BWu3RdgPIQHLi3xanNk=",
-            "WOTsDBv15i472cNxjAcdf8d9Ax8CArNqPCCQbisvFX4=",
-            "HKUG9hurT8FxxlPDfG9Lreoe6lzWRlZ1FY2X8pzwqA0=",
-            "94K2ew5OiSTQn3xqgAWenWtrOccq+tGw8RJ8Ss0b1tQ=",
-            "YKliNYFFQcpi99NsN0PdO1fQkWYxWjGcwrtWfHXoLSE=",
-            "xMSvje4sx7HB3y2S7jDvsG+nWGPg9QcAKW5FeT/wmeg=",
-            "SWTTg1DaWeILCHxA7wAAJqSMxf5DJvU5XDkUNvHEcSA=",
-            "wwzFbcNP5CjCUxHD4mQteXouD4JHbRdEAeehTXB585g=",
-            "KAVXV2qq7v6uOWGc/dYf+pgvRpg+jZv3yG8S2+qD240=",
-            "F5PBVWQCbIhoAF9XPRREQx0SJ9KTE+sRR28mtYPulvA=",
+            "dap5Q3G17cwuYYNbO/lr+KHJEiaHu+VR7L4SQhI6tvk=",
+            "enwl+fW0tgxGVBGbcl/Z4oiEXqJh8+FrWlA6tFIHE5E=",
+            "RgApDIxYR2JY9sHxgYWTJ2gVutXxwZg7EVFsdzN4Ixo=",
+            "rB1BZe/ngGTXwgW2Nbnn6OgZG59IN9MPS8E1/KRCOwE=",
+            "kRcGHzUM4n7JaKREC83bbHMFIxBEJ0ZehUv9SCVGRuQ=",
+            "b0G4bcQSZU/RXBYHCLVH7n5zj2UZFXIFSo1mrRnqYlI=",
+            "QTgGZta3nzIdiXPbilI4PLXwDV0X2GER6RT5yMjaLlo=",
+            "4iVgO4rYG8sWYuspC/I2iRqQShQKCauJhOf+GKtDfjk=",
+            "TnE3vPpNKxk7NgyiNeQoCnyPdaT3giToGhtKIxQ2uGY=",
+            "4UN/euia0P9HWMFaSCc4aYjC932x4o5XJww44WN3CGM=",
+            "mYkFdqU5C9m3w88wTn9l6UpYo+PI93c232s+vBiBEpM=",
             "ygTG08vB2EEmJQPXRvF5H06Tlac72AkODENK7PhCPkw=",
             "xH/DCseLHr9eKoYT8qsORZK7zVdEGYWHuVtsVrD95wY="
           ],
           "checkpoint": {
-            "envelope": "rekor.sigstore.dev - 1193050959916656506\n2284575845\nNZihJ1CvHqsgu25crzujDGoE6pW+K8JV63Wmadn8Px8=\n\n— rekor.sigstore.dev wNI9ajBGAiEAkINZwrrFNf6XBwcBITrA/vFhC1qVRmqwY0UlLatt93MCIQDDZlS8KVrs5t0GScyE36rR/44+5K+sMdfqMd3Q+ub9yw==\n"
+            "envelope": "rekor.sigstore.dev - 1193050959916656506\n2315257285\nTySTIZXLwpzt56M+HaQ6fuYSHmk2b60wYUyV1dC9fPY=\n\n— rekor.sigstore.dev wNI9ajBFAiEAloapWt3Dttq/SNB8Zp3ODHlGB25PfuBgAED2Lu83IoUCIFdzRP3Bb8KdFi4JxlCrYnJFTWZQlsWBd734x3lJAQ7s\n"
           }
         },
-        "canonicalizedBody": "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"
+        "canonicalizedBody": "eyJhcGlWZXJzaW9uIjoiMC4wLjEiLCJraW5kIjoiaGFzaGVkcmVrb3JkIiwic3BlYyI6eyJkYXRhIjp7Imhhc2giOnsiYWxnb3JpdGhtIjoic2hhMjU2IiwidmFsdWUiOiI5MmM3MzdhZjVkYmI0NzUxOWYzYzFlNjljNDJiNTgzMDBlMDc0YWQ0NjY5YmQyZmM1NDEyNTA5Y2Y4OWVkMGIwIn19LCJzaWduYXR1cmUiOnsiY29udGVudCI6Ik1FVUNJRlAxREFQQlJwTUNvZnBmeC9CSmRlcC96WWRqVG5ncWgzRmc1K3lEWWZUcEFpRUEyaTlpNERvYUxnU1dPY0FTRUZkVnJ5THorUktJVEFtY205Y1VQSHFJUmdvPSIsInB1YmxpY0tleSI6eyJjb250ZW50IjoiTFMwdExTMUNSVWRKVGlCRFJWSlVTVVpKUTBGVVJTMHRMUzB0Q2sxSlNVaGtSRU5EUW5adFowRjNTVUpCWjBsVldISlJlbEJOVm1WMGNHdGtXbE5wZUhkb05YVnRabVJLV0VWQmQwTm5XVWxMYjFwSmVtb3dSVUYzVFhjS1RucEZWazFDVFVkQk1WVkZRMmhOVFdNeWJHNWpNMUoyWTIxVmRWcEhWakpOVWpSM1NFRlpSRlpSVVVSRmVGWjZZVmRrZW1SSE9YbGFVekZ3WW01U2JBcGpiVEZzV2tkc2FHUkhWWGRJYUdOT1RXcFpkMDlFUlhsTlZFMHdUWHBSZVZkb1kwNU5hbGwzVDBSRmVVMVVUVEZOZWxGNVYycEJRVTFHYTNkRmQxbElDa3R2V2tsNmFqQkRRVkZaU1V0dldrbDZhakJFUVZGalJGRm5RVVZFZG5sak5WVkRNSEJZUjNsU1VrRXphMkp0UjNCcVNFSmlLMk41TmxJMk9YRXZlV2dLV21sWGNrUlVZWEpVV0ZwUGVWQmlLM0ZzTm1KQlZVdzRUMU0zVjNJNE0xUlFZVmMwWjJsNVJrMXhNMEZ4YWtGYUszRlBRMEpvWjNkbloxbFZUVUUwUndwQk1WVmtSSGRGUWk5M1VVVkJkMGxJWjBSQlZFSm5UbFpJVTFWRlJFUkJTMEpuWjNKQ1owVkdRbEZqUkVGNlFXUkNaMDVXU0ZFMFJVWm5VVlV4T1Zkc0NuWnhjRlptYnpKTmFXZGtTWGRQU0c5T1NGTkJia1kwZDBoM1dVUldVakJxUWtKbmQwWnZRVlV6T1ZCd2VqRlphMFZhWWpWeFRtcHdTMFpYYVhocE5Ga0tXa1E0ZDJSQldVUldVakJTUVZGSUwwSkhiM2RoU1ZwdFlVaFNNR05JVFRaTWVUbHVZVmhTYjJSWFNYVlpNamwwVERKV2JGcFhNVFpqZVRsb1lqTkNlZ3BNV0VKeldWaFNiV0l6U25STWVUVnVZVmhTYjJSWFNYWmtNamw1WVRKYWMySXpaSHBNTTA1d1dqSTBkR05JVm1saVIyeHFURmRHYmxwWE5UQk1WMFo2Q21NeVZqQmplVFUxWWxkNFFXTnRWbTFqZVRsdldsZEdhMk41T1hSWlYyeDFUVVJyUjBOcGMwZEJVVkZDWnpjNGQwRlJSVVZMTW1nd1pFaENlazlwT0hZS1pFYzVjbHBYTkhWWlYwNHdZVmM1ZFdONU5XNWhXRkp2WkZkS01XTXlWbmxaTWpsMVpFZFdkV1JETldwaU1qQjNTSGRaUzB0M1dVSkNRVWRFZG5wQlFncEJaMUZTWkRJNWVXRXlXbk5pTTJSbVdrZHNlbU5IUmpCWk1tZDNUbWRaUzB0M1dVSkNRVWRFZG5wQlFrRjNVVzlPUjAxM1drZFZNVTlVWjNsT01sWnRDazFIU1hwYWJWbDRUa1JyTUZwRVVUSk5hbHBzV1ZkTk1VNXFZM3BPYlZKb1QwUm9iRnBVUVhoQ1oyOXlRbWRGUlVGWlR5OU5RVVZGUWtOT1ZHRlhaSFVLU1VkV05GbFhUakJKU0VJeFdXMTRjRmw1UWtKVU1VSlVTVWRHYmxwWE5UQkpSMFo2WXpKV01HTjZRV2xDWjI5eVFtZEZSVUZaVHk5TlFVVkdRa0pTYkFwYVYxWjBaVzVOZGxsWE9YZGplVEYzWWtkR01GcHRPWGxpVkVGa1FtZHZja0puUlVWQldVOHZUVUZGUjBKQk9YbGFWMXA2VERKb2JGbFhVbnBNTWpGb0NtRlhOSGRQZDFsTFMzZFpRa0pCUjBSMmVrRkNRMEZSZEVSRGRHOWtTRkozWTNwdmRrd3pVblpoTWxaMVRHMUdhbVJIYkhaaWJrMTFXakpzTUdGSVZta0taRmhPYkdOdFRuWmlibEpzWW01UmRWa3lPWFJOU0ZsSFEybHpSMEZSVVVKbk56aDNRVkZyUldGQmVHMWhTRkl3WTBoTk5reDVPVzVoV0ZKdlpGZEpkUXBaTWpsMFRESldiRnBYTVRaamVUbG9Zak5DZWt4WVFuTlpXRkp0WWpOS2RFeDVOVzVoV0ZKdlpGZEpkbVF5T1hsaE1scHpZak5rZWt3elRuQmFNalIwQ21OSVZtbGlSMnhxVEZkR2JscFhOVEJNVjBaNll6SldNR041TlRWaVYzaEJZMjFXYldONU9XOWFWMFpyWTNrNWRGbFhiSFZOUkdkSFEybHpSMEZSVVVJS1p6YzRkMEZSYjBWTFozZHZUa2ROZDFwSFZURlBWR2Q1VGpKV2JVMUhTWHBhYlZsNFRrUnJNRnBFVVRKTmFscHNXVmROTVU1cVkzcE9iVkpvVDBSb2JBcGFWRUZrUW1kdmNrSm5SVVZCV1U4dlRVRkZURUpCT0UxRVYyUndaRWRvTVZscE1XOWlNMDR3V2xkUmQwNTNXVXRMZDFsQ1FrRkhSSFo2UVVKRVFWRndDa1JEWkc5a1NGSjNZM3B2ZGt3eVpIQmtSMmd4V1drMWFtSXlNSFphVjFac1lsaHdla3d5Um5aalNFMTBZMGQ0YUdSSFduWmpiVEIzVDBGWlMwdDNXVUlLUWtGSFJIWjZRVUpFVVZGeFJFTm5NRmw2UW10YVZGVTFUMFJKTTFwWFdYZFphazV0V21wRk1FOVVVbXRPUkZsNVRtMVdhRmw2VlRKT2VrMHlXa2RGTkFwUFIxWnNUVUk0UjBOcGMwZEJVVkZDWnpjNGQwRlJORVZGVVhkUVkyMVdiV041T1c5YVYwWnJZM2s1ZEZsWGJIVk5RbTlIUTJselIwRlJVVUpuTnpoM0NrRlJPRVZFUVhkTFRWUk5lRTVxU1RGT1ZFRjVUbXBCY0VKbmIzSkNaMFZGUVZsUEwwMUJSVkZDUW5OTlIxZG9NR1JJUW5wUGFUaDJXakpzTUdGSVZta0tURzFPZG1KVE9XeGFWMVowWlc1TmQwZFJXVXRMZDFsQ1FrRkhSSFo2UVVKRlVWRk1SRUZyZUUxRWEzcE5WRUV6VG5wUmQyUm5XVXRMZDFsQ1FrRkhSQXAyZWtGQ1JXZFNiMFJIV205a1NGSjNZM3B2ZGt3eVpIQmtSMmd4V1drMWFtSXlNSFphVjFac1lsaHdla3d5Um5aalNFMTBZMGQ0YUdSSFduWmpiVEIyQ2t4dFpIQmtSMmd4V1drNU0ySXpTbkphYlhoMlpETk5kbU15Ykc1aWFURjNaRmRLYzJGWFRYUlpWMlJzWW01UmRGbFlUbnBhV0ZKNlRHNXNkR0pGUW5rS1dsZGFla3d5YUd4WlYxSjZUREl4YUdGWE5IZFBRVmxMUzNkWlFrSkJSMFIyZWtGQ1JYZFJjVVJEWnpCWmVrSnJXbFJWTlU5RVNUTmFWMWwzV1dwT2JRcGFha1V3VDFSU2EwNUVXWGxPYlZab1dYcFZNazU2VFRKYVIwVTBUMGRXYkUxRFJVZERhWE5IUVZGUlFtYzNPSGRCVWxGRlJYZDNVbVF5T1hsaE1scHpDbUl6WkdaYVIyeDZZMGRHTUZreVozZFhkMWxMUzNkWlFrSkJSMFIyZWtGQ1JsRlNUa1JGZEc5a1NGSjNZM3B2ZGt3eVpIQmtSMmd4V1drMWFtSXlNSFlLV2xkV2JHSlljSHBNTWtaMlkwaE5kR05IZUdoa1IxcDJZMjB3ZGxsWFRqQmhWemwxWTNrNWVXUlhOWHBNZWsxNFRtcEJlVTlFU1hkT2Vsa3pUREpHTUFwa1IxWjBZMGhTZWt4NlJYZEdkMWxMUzNkWlFrSkJSMFIyZWtGQ1JtZFJTa1JCWkhkamJXd3lXVmhTYkUxR1NVZERhWE5IUVZGUlFtYzNPSGRCVW1kRkNsSkJlRU5qYlZaM1lucHdiRnBYVm5SbGJrNUJUVlJCTlUxNlJYZE9lbU13VERKR2RtTklUWFJqUjNob1pFZGFkbU50TVVGTlZFMTRUbXBKTVU1VVFYa0tUbXB3ZVZwWFdUWmpiVlp0WTNrNWIxcFhSbXRqZVRsMFdWZHNkVTFKUjBwQ1oyOXlRbWRGUlVGa1dqVkJaMUZEUWtoelJXVlJRak5CU0ZWQk0xUXdkd3BoYzJKSVJWUktha2RTTkdOdFYyTXpRWEZLUzFoeWFtVlFTek12YURSd2VXZERPSEEzYnpSQlFVRkhaamxxWW5KNFowRkJRa0ZOUVZKcVFrVkJhVUY1Q2tKaFFVWklReXRxTVZkVVNGRm5kWFkwWW1wV1ZIVTNibkJqZEV3elNFMWhSMU5ZSzJOMFpUZzJaMGxuU0hvd2FHUm9WbWRIU1dSQ1luaHZOV2xtTWxnS1MzRktjRE5LVUhvd1VWQTFNMVp4ZUZkWmVWaHVjbGwzUTJkWlNVdHZXa2w2YWpCRlFYZE5SR0ZSUVhkYVowbDRRVXRQZUdOcU1HSlBjbFZpWkhsWWRBcFVRMDlOZWprclRXRTFZa2hHWlVsMU5qSTRRMVJCTW1GSmRDdHhkMU5IUTFvd1ZFNHpMMU12ZUZwQ01VTlFVV05KWjBsNFFVeG5jakZaVlRaM01rdGlDbTloWlRNNGJrcFVhVFpvT0hGbVdIcEdRbWg2Vm5GWFR6aE1XamQ2V2pCT1QwVnRZVWhuV0VoR2NHMDFSVVJIVWpjek1ITXhkejA5Q2kwdExTMHRSVTVFSUVORlVsUkpSa2xEUVZSRkxTMHRMUzBLIn19fX0="
       }
     ],
     "timestampVerificationData": {}
@@ -56,8 +53,8 @@
   "messageSignature": {
     "messageDigest": {
       "algorithm": "SHA2_256",
-      "digest": "dDD/N5DFrLVUIiqNeOOMmLnUw7kJu1Eed/nuIUNuJ8k="
+      "digest": "ksc3r127R1GfPB5pxCtYMA4HStRmm9L8VBJQnPie0LA="
     },
-    "signature": "MEYCIQCEfwkqmpr0EKb37y9TFZs5dgDcd+sQPtpUFzZPktk06AIhANpA1mb2Dfu3mXufz/jVOMN15mQyI2WFnCGxn4k3MAv+"
+    "signature": "MEUCIFP1DAPBRpMCofpfx/BJdep/zYdjTngqh3Fg5+yDYfTpAiEA2i9i4DoaLgSWOcASEFdVryLz+RKITAmcm9cUPHqIRgo="
   }
 }

package/assets/agent-assets/core/user-guides/aops-cli.md CHANGED Viewed

@@ -50,6 +50,23 @@ aops auth login --target <target-name>
 aops auth status --target <target-name>
 ```
+### 2.3 Guarded global npm update
+Use the TUI Update page for Check, Prepare, and confirmed Apply. For headless
+operation:
+```bash
+aops update check --json
+aops update prepare --json
+aops update apply --plan <update-plan.json> --confirm <sha256-plan-id> --json
+```
+Prepare is non-mutating and retains exact candidate and rollback tarballs.
+Apply stops Cockpit before Server, installs the public closure as one global
+CLI with its exact nested Server, repeatedly checks loopback health, and
+automatically restores the prior exact closure on failure. It does not publish
+packages or create source-control releases.
 ## 3 `init`
 ### 3.1 Overview

package/assets/agent-assets/core/user-guides/aops-system.md CHANGED Viewed

@@ -36,6 +36,30 @@ logs and Ctrl+C cleanup. The Cockpit launcher starts only its independent
 background process. Both call package-relative Node entrypoints and never
 carry database secrets in the script or argv.
+## Guarded global update
+The bundled Rust TUI has an Update page for an already installed npm-based
+AOPS system. Its Check action is read-only. Prepare downloads and verifies the
+exact public candidate and restore tarballs and writes a plan without changing
+services or packages. Apply requires that exact plan, briefly stops Cockpit
+and Server, installs one global `@aopslabs/aops` CLI with its exact nested
+Server dependency, and repeatedly verifies direct Server, Cockpit, and
+Cockpit-proxy health. Failure automatically restores the prior exact versions,
+package layout, and services.
+The same lifecycle is available headlessly:
+```text
+aops update check --json
+aops update prepare --json
+aops update apply --plan <update-plan.json> --confirm <sha256-plan-id> --json
+```
+All metadata and tarball reads are pinned to the public npm registry. A legacy
+top-level Server dedupe is treated as a repairable package-layout issue. The
+updater does not publish packages, create tags/releases, or replace the normal
+candidate acceptance and independent review gates.
 ## Capability discovery
 Start with the relevant CLI family help. When a server has custom or newer domains, query its live catalog:

package/dist/commands/doc.js CHANGED Viewed

@@ -2221,6 +2221,17 @@ export function resolveDocImportToolId(dryRun) {
         ? 'docman.document-version.import-headings.plan'
         : 'docman.document-version.import-headings';
 }
+export function buildDocImportInvokeInput(documentVersionId, input) {
+    if (typeof input.documentVersionId === 'string'
+        && input.documentVersionId.trim().length > 0
+        && input.documentVersionId !== documentVersionId) {
+        throw new Error('doc_import_document_version_id_conflict');
+    }
+    return compactPayload({
+        ...input,
+        documentVersionId,
+    });
+}
 export async function runDocImportMarkdown(options = {}) {
     try {
         if (options.fromMarkdown !== true) {
@@ -2280,10 +2291,7 @@ export async function runDocImportMarkdown(options = {}) {
                 'Run the command with --dry-run --json to inspect result.baselineGuard, add --guard-target for the intended heading, or use --confirm only after reviewing the full-import delta.');
         }
         const toolId = resolveDocImportToolId(dryRun);
-        const invokeInput = compactPayload({
-            pathParams: { id: documentVersionId },
-            body: input,
-        });
+        const invokeInput = buildDocImportInvokeInput(documentVersionId, input);
         const result = dryRun
             ? await invokeDocHostedTool(apiState, options, resolvedContext, toolId, invokeInput)
             : await (async () => {

package/dist/commands/global-update.js ADDED Viewed

@@ -0,0 +1,512 @@
+import assert from 'node:assert/strict';
+import { spawnSync } from 'node:child_process';
+import { createHash } from 'node:crypto';
+import { existsSync, lstatSync, mkdirSync, readFileSync, realpathSync, writeFileSync, } from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { compareCanonicalText } from '@aopslabs/artifact-trust-contracts';
+import { Command } from 'commander';
+const CHECK_CONTRACT = 'aops.global-update-check/v1';
+const PLAN_CONTRACT = 'aops.global-update-plan/v1';
+const RESULT_CONTRACT = 'aops.global-update-result/v1';
+const PUBLIC_REGISTRY = 'https://registry.npmjs.org';
+const EXACT_STABLE_VERSION = /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/u;
+const PLAN_ID = /^sha256:[a-f0-9]{64}$/u;
+const SHA256 = /^[a-f0-9]{64}$/u;
+const SHA512_INTEGRITY = /^sha512-[A-Za-z0-9+/]+={0,2}$/u;
+const PACKAGE_NAMES = ['@aopslabs/aops', '@aopslabs/aops-server'];
+const HEALTH_SAMPLES = 4;
+const HEALTH_INTERVAL_MS = 3_000;
+function cleanEnvironment() {
+    return {
+        ...process.env,
+        NPM_TOKEN: '',
+        NODE_AUTH_TOKEN: '',
+        GH_TOKEN: '',
+        GITHUB_TOKEN: '',
+        NPM_CONFIG_REGISTRY: PUBLIC_REGISTRY,
+        NPM_CONFIG_USERCONFIG: os.devNull,
+        npm_config_registry: PUBLIC_REGISTRY,
+        npm_config_userconfig: os.devNull,
+    };
+}
+function defaultRunner(command, args, cwd = process.cwd()) {
+    const result = spawnSync(command, args, {
+        cwd,
+        encoding: 'utf8',
+        shell: false,
+        windowsHide: true,
+        maxBuffer: 32 * 1024 * 1024,
+        env: cleanEnvironment(),
+    });
+    if (result.error)
+        throw result.error;
+    assert.equal(result.status, 0, `${command} ${args.join(' ')} failed\n${result.stdout}\n${result.stderr}`);
+    return result.stdout;
+}
+function npmCommand() {
+    return process.platform === 'win32' ? 'npm.cmd' : 'npm';
+}
+export function publicNpmArgs(args) {
+    return [
+        ...args,
+        `--registry=${PUBLIC_REGISTRY}`,
+        `--@aopslabs:registry=${PUBLIC_REGISTRY}`,
+        `--userconfig=${os.devNull}`,
+    ];
+}
+function parseJson(value, label) {
+    try {
+        return JSON.parse(value);
+    }
+    catch {
+        throw new Error(`${label}_invalid_json`);
+    }
+}
+function exactVersion(value, label) {
+    if (typeof value !== 'string')
+        throw new Error(`${label} must be a string`);
+    assert.match(value, EXACT_STABLE_VERSION, `${label} must be an exact stable version`);
+    return value;
+}
+export function compareStableVersions(left, right) {
+    const leftParts = exactVersion(left, 'left version').split('.').map(Number);
+    const rightParts = exactVersion(right, 'right version').split('.').map(Number);
+    for (let index = 0; index < 3; index += 1) {
+        if (leftParts[index] !== rightParts[index])
+            return leftParts[index] - rightParts[index];
+    }
+    return 0;
+}
+function sha256(file) {
+    return createHash('sha256').update(readFileSync(file)).digest('hex');
+}
+function plainDirectory(candidate, label) {
+    const absolute = path.resolve(candidate);
+    const stat = lstatSync(absolute);
+    assert.equal(stat.isDirectory() && !stat.isSymbolicLink(), true, `${label} must be a plain directory`);
+    return realpathSync.native(absolute);
+}
+function plainFile(candidate, label) {
+    const absolute = path.resolve(candidate);
+    const stat = lstatSync(absolute);
+    assert.equal(stat.isFile() && !stat.isSymbolicLink(), true, `${label} must be a plain file`);
+    return realpathSync.native(absolute);
+}
+function ensureWithin(parent, candidate, label) {
+    const relative = path.relative(parent, candidate);
+    assert.equal(Boolean(relative) && !relative.startsWith('..') && !path.isAbsolute(relative), true, `${label} must stay inside ${parent}`);
+    return candidate;
+}
+function packageManifest(packageRoot, expectedName) {
+    const manifestPath = plainFile(path.join(packageRoot, 'package.json'), `${expectedName} manifest`);
+    const manifest = parseJson(readFileSync(manifestPath, 'utf8'), `${expectedName}_manifest`);
+    assert.equal(manifest.name, expectedName, `${expectedName} package identity mismatch`);
+    exactVersion(manifest.version, `${expectedName} version`);
+    return manifest;
+}
+function inspectGlobalInstall(run) {
+    const npm = npmCommand();
+    const globalPrefix = plainDirectory(run(npm, ['prefix', '--global']).trim(), 'global npm prefix');
+    const globalRoot = plainDirectory(run(npm, ['root', '--global']).trim(), 'global npm root');
+    ensureWithin(globalPrefix, globalRoot, 'global npm root');
+    const cliRoot = path.join(globalRoot, '@aopslabs', 'aops');
+    const cli = packageManifest(cliRoot, '@aopslabs/aops');
+    const nestedServerRoot = path.join(cliRoot, 'node_modules', '@aopslabs', 'aops-server');
+    const dependencies = cli.dependencies;
+    const exactServerDependency = exactVersion(dependencies?.['@aopslabs/aops-server'], 'installed CLI Server dependency');
+    const topLevelServerRoot = path.join(globalRoot, '@aopslabs', 'aops-server');
+    const nestedServer = existsSync(path.join(nestedServerRoot, 'package.json'));
+    const topLevelServer = existsSync(path.join(topLevelServerRoot, 'package.json'));
+    assert.equal(nestedServer || topLevelServer, true, 'global AOPS Server package was not found');
+    for (const [serverRoot, placement] of [
+        [nestedServerRoot, 'nested'],
+        [topLevelServerRoot, 'top-level'],
+    ]) {
+        if (!existsSync(path.join(serverRoot, 'package.json')))
+            continue;
+        const server = packageManifest(serverRoot, '@aopslabs/aops-server');
+        assert.equal(exactVersion(server.version, `installed ${placement} Server version`), exactServerDependency, `installed ${placement} Server does not match the CLI exact dependency`);
+    }
+    const cliPath = plainFile(path.join(cliRoot, 'dist', 'main.js'), 'global AOPS CLI entrypoint');
+    return {
+        globalPrefix,
+        globalRoot,
+        cliPath,
+        packages: {
+            cli: exactVersion(cli.version, 'installed CLI version'),
+            server: exactServerDependency,
+        },
+        topology: { nestedServer, topLevelServer },
+    };
+}
+function npmViewString(run, selector, field) {
+    const value = parseJson(run(npmCommand(), publicNpmArgs(['view', selector, field, '--json'])).trim(), `npm_view_${field}`);
+    if (typeof value !== 'string')
+        throw new Error(`${selector} ${field} must be a string`);
+    return value;
+}
+function availableClosure(run) {
+    const cli = exactVersion(npmViewString(run, '@aopslabs/aops', 'dist-tags.latest'), 'latest CLI version');
+    const server = exactVersion(npmViewString(run, `@aopslabs/aops@${cli}`, 'dependencies.@aopslabs/aops-server'), 'CLI Server dependency');
+    return { cli, server };
+}
+export function inspectGlobalUpdate(run = defaultRunner) {
+    const installation = inspectGlobalInstall(run);
+    const installed = installation.packages;
+    const available = availableClosure(run);
+    assert.equal(compareStableVersions(available.cli, installed.cli) >= 0, true, 'public npm latest must not downgrade the installed CLI');
+    const cliVersionDelta = compareStableVersions(available.cli, installed.cli);
+    const cliUpdateAvailable = cliVersionDelta > 0;
+    const updateAvailable = cliUpdateAvailable ||
+        !installation.topology.nestedServer ||
+        installation.topology.topLevelServer;
+    assert.equal(compareStableVersions(available.server, installed.server) >= 0 || cliUpdateAvailable, true, 'latest CLI closure would unexpectedly downgrade the installed Server without a CLI update');
+    return {
+        schemaVersion: 1,
+        contract: CHECK_CONTRACT,
+        status: updateAvailable ? 'update-available' : 'current',
+        installed,
+        available,
+        updateAvailable,
+        installedTopology: installation.topology,
+        registry: PUBLIC_REGISTRY,
+    };
+}
+function runInstalledJson(run, cliPath, args) {
+    return parseJson(run(process.execPath, [cliPath, ...args]).trim(), args.join('_'));
+}
+function serviceSnapshot(run, cliPath) {
+    return {
+        server: runInstalledJson(run, cliPath, ['server', 'status', '--json']),
+        cockpit: runInstalledJson(run, cliPath, ['cockpit', 'status', '--json']),
+    };
+}
+function assertHealthyServices(services) {
+    assert.equal(services.server.runtimeState, 'running', 'AOPS Server must be running before update');
+    assert.equal(services.server.liveness?.health, 'healthy', 'AOPS Server must be healthy before update');
+    assert.equal(services.cockpit.runtimeState, 'running', 'AOPS Cockpit must be running before update');
+    assert.equal(services.cockpit.health, 'healthy', 'AOPS Cockpit must be healthy before update');
+}
+function packRegistryPackage(run, destination, name, version) {
+    const packed = parseJson(run(npmCommand(), publicNpmArgs([
+        'pack',
+        `${name}@${version}`,
+        '--ignore-scripts',
+        '--json',
+        '--pack-destination',
+        destination,
+    ])), 'npm_pack');
+    assert.equal(packed.length, 1, `${name}@${version} must produce one tarball`);
+    assert.equal(packed[0].name, name);
+    assert.equal(packed[0].version, version);
+    const registryIntegrity = npmViewString(run, `${name}@${version}`, 'dist.integrity');
+    assert.equal(packed[0].integrity, registryIntegrity, `${name}@${version} integrity mismatch`);
+    const file = plainFile(path.join(destination, packed[0].filename), `${name}@${version} tarball`);
+    return { name, version, path: file, integrity: registryIntegrity, sha256: sha256(file) };
+}
+function canonicalJson(value) {
+    if (Array.isArray(value))
+        return value.map((entry) => canonicalJson(entry));
+    if (value !== null && typeof value === 'object') {
+        return Object.fromEntries(Object.entries(value)
+            .sort(([left], [right]) => compareCanonicalText(left, right))
+            .map(([key, entry]) => [key, canonicalJson(entry)]));
+    }
+    return value;
+}
+function canonicalPlanBody(plan) {
+    return JSON.stringify(canonicalJson(plan));
+}
+export function computeGlobalUpdatePlanId(plan) {
+    return `sha256:${createHash('sha256').update(canonicalPlanBody(plan)).digest('hex')}`;
+}
+function defaultUpdateRoot(configRoot) {
+    const root = configRoot?.trim()
+        ? path.resolve(configRoot)
+        : path.join(os.homedir(), '.aops');
+    if (!existsSync(root))
+        mkdirSync(root, { recursive: true, mode: 0o700 });
+    return plainDirectory(root, 'AOPS config root');
+}
+export function prepareGlobalUpdate(options = {}, run = defaultRunner) {
+    const check = inspectGlobalUpdate(run);
+    assert.equal(check.updateAvailable, true, 'aops_global_update_not_available');
+    const installed = inspectGlobalInstall(run);
+    const services = serviceSnapshot(run, installed.cliPath);
+    assertHealthyServices(services);
+    const configRoot = defaultUpdateRoot(options.configRoot);
+    const updatesRoot = path.join(configRoot, 'global-updates');
+    mkdirSync(updatesRoot, { recursive: true, mode: 0o700 });
+    const operationRoot = path.join(updatesRoot, `${Date.now()}-${process.pid}`);
+    mkdirSync(operationRoot, { recursive: false, mode: 0o700 });
+    const candidateRoot = path.join(operationRoot, 'candidate');
+    const restoreRoot = path.join(operationRoot, 'restore');
+    const cacheRoot = path.join(operationRoot, 'cache');
+    mkdirSync(candidateRoot, { mode: 0o700 });
+    mkdirSync(restoreRoot, { mode: 0o700 });
+    mkdirSync(cacheRoot, { mode: 0o700 });
+    const candidates = [
+        packRegistryPackage(run, candidateRoot, '@aopslabs/aops', check.available.cli),
+        packRegistryPackage(run, candidateRoot, '@aopslabs/aops-server', check.available.server),
+    ];
+    const restorePackages = [
+        packRegistryPackage(run, restoreRoot, '@aopslabs/aops', check.installed.cli),
+        packRegistryPackage(run, restoreRoot, '@aopslabs/aops-server', check.installed.server),
+    ];
+    const body = {
+        schemaVersion: 1,
+        contract: PLAN_CONTRACT,
+        createdAt: new Date().toISOString(),
+        globalPrefix: installed.globalPrefix,
+        globalRoot: installed.globalRoot,
+        cliPath: installed.cliPath,
+        operationRoot,
+        prior: { packages: installed.packages, topology: installed.topology, services },
+        target: {
+            packages: check.available,
+            topology: { nestedServer: true, topLevelServer: false },
+        },
+        candidates,
+        restorePackages,
+        safety: {
+            candidateIntegrity: 'verified-from-public-registry',
+            restoreIntegrity: 'verified-from-public-registry',
+            automaticRollback: true,
+            requiresExactConfirmation: true,
+            healthSamples: HEALTH_SAMPLES,
+            healthIntervalMs: HEALTH_INTERVAL_MS,
+        },
+    };
+    const plan = { ...body, planId: computeGlobalUpdatePlanId(body) };
+    const planPath = path.join(operationRoot, 'update-plan.json');
+    writeFileSync(planPath, `${JSON.stringify(plan, null, 2)}\n`, { flag: 'wx', mode: 0o600 });
+    return { check, plan, planPath };
+}
+function packageRecordByName(records, name) {
+    const matches = records.filter((record) => record.name === name);
+    assert.equal(matches.length, 1, `update plan must contain exactly one ${name} tarball`);
+    return matches[0];
+}
+function validateRecordSet(records, expected, root, label) {
+    assert.equal(records.length, PACKAGE_NAMES.length, `${label} must contain exactly two packages`);
+    for (const [name, version] of [
+        ['@aopslabs/aops', expected.cli],
+        ['@aopslabs/aops-server', expected.server],
+    ]) {
+        const record = packageRecordByName(records, name);
+        assert.equal(exactVersion(record.version, `${name} ${label} version`), version);
+        assert.match(record.integrity, SHA512_INTEGRITY, `${name} ${label} integrity is invalid`);
+        assert.match(record.sha256, SHA256, `${name} ${label} sha256 is invalid`);
+        const file = plainFile(record.path, `${name} ${label} tarball`);
+        ensureWithin(root, file, `${name} ${label} tarball`);
+        assert.equal(file, record.path, `${name} ${label} tarball must be canonical`);
+        assert.equal(sha256(file), record.sha256, `${name} tarball changed after planning`);
+    }
+}
+export function readGlobalUpdatePlan(planPath) {
+    const resolved = plainFile(planPath, 'global update plan');
+    const plan = parseJson(readFileSync(resolved, 'utf8'), 'global_update_plan');
+    assert.equal(plan.schemaVersion, 1);
+    assert.equal(plan.contract, PLAN_CONTRACT);
+    assert.match(plan.planId, PLAN_ID);
+    const { planId, ...body } = plan;
+    assert.equal(planId, computeGlobalUpdatePlanId(body), 'global update plan identity mismatch');
+    plainDirectory(plan.globalPrefix, 'planned global npm prefix');
+    plainDirectory(plan.globalRoot, 'planned global npm root');
+    ensureWithin(plan.globalPrefix, plan.globalRoot, 'planned global npm root');
+    const operationRoot = plainDirectory(plan.operationRoot, 'global update operation root');
+    assert.equal(operationRoot, path.dirname(resolved), 'global update plan must stay at its operation root');
+    assert.deepEqual(plan.target.topology, { nestedServer: true, topLevelServer: false });
+    exactVersion(plan.prior.packages.cli, 'prior CLI version');
+    exactVersion(plan.prior.packages.server, 'prior Server version');
+    exactVersion(plan.target.packages.cli, 'target CLI version');
+    exactVersion(plan.target.packages.server, 'target Server version');
+    validateRecordSet(plan.candidates, plan.target.packages, operationRoot, 'candidate set');
+    validateRecordSet(plan.restorePackages, plan.prior.packages, operationRoot, 'restore set');
+    assert.equal(plan.safety.candidateIntegrity, 'verified-from-public-registry');
+    assert.equal(plan.safety.restoreIntegrity, 'verified-from-public-registry');
+    assert.equal(plan.safety.automaticRollback, true);
+    assert.equal(plan.safety.requiresExactConfirmation, true);
+    assert.equal(plan.safety.healthSamples, HEALTH_SAMPLES);
+    assert.equal(plan.safety.healthIntervalMs, HEALTH_INTERVAL_MS);
+    return plan;
+}
+export function installGlobalUpdateClosure(run, plan, records, topology) {
+    const cli = packageRecordByName(records, '@aopslabs/aops');
+    const server = packageRecordByName(records, '@aopslabs/aops-server');
+    const cacheRoot = path.join(plan.operationRoot, 'cache');
+    mkdirSync(cacheRoot, { recursive: true, mode: 0o700 });
+    run(npmCommand(), publicNpmArgs(['cache', 'add', server.path, `--cache=${cacheRoot}`]));
+    const topLevelServerRoot = path.join(plan.globalRoot, '@aopslabs', 'aops-server');
+    if (existsSync(path.join(topLevelServerRoot, 'package.json'))) {
+        run(npmCommand(), publicNpmArgs([
+            '--prefix',
+            plan.globalPrefix,
+            'uninstall',
+            '--global',
+            '--ignore-scripts',
+            '--fund=false',
+            '--audit=false',
+            '@aopslabs/aops-server',
+        ]));
+    }
+    const commonInstallArgs = [
+        '--prefix',
+        plan.globalPrefix,
+        'install',
+        '--global',
+        '--ignore-scripts',
+        '--prefer-offline',
+        `--cache=${cacheRoot}`,
+        '--fund=false',
+        '--audit=false',
+    ];
+    if (topology.topLevelServer && !topology.nestedServer) {
+        run(npmCommand(), publicNpmArgs([...commonInstallArgs, cli.path, server.path]));
+        return;
+    }
+    run(npmCommand(), publicNpmArgs([...commonInstallArgs, cli.path]));
+    if (topology.topLevelServer) {
+        run(npmCommand(), publicNpmArgs([
+            ...commonInstallArgs,
+            server.path,
+        ]));
+    }
+}
+function stopService(run, cliPath, service, bestEffort = false) {
+    try {
+        run(process.execPath, [cliPath, service, 'stop', '--json']);
+    }
+    catch (error) {
+        if (!bestEffort)
+            throw error;
+    }
+}
+function startService(run, cliPath, service) {
+    run(process.execPath, [cliPath, service, 'start', '--json']);
+}
+const defaultExecutionDependencies = {
+    fetch: globalThis.fetch.bind(globalThis),
+    sleep: (milliseconds) => new Promise((resolve) => setTimeout(resolve, milliseconds)),
+};
+async function assertStableHealth(run, plan, execution) {
+    const evidence = [];
+    for (let sample = 1; sample <= plan.safety.healthSamples; sample += 1) {
+        const installed = inspectGlobalInstall(run);
+        const services = serviceSnapshot(run, installed.cliPath);
+        assertHealthyServices(services);
+        const serverOrigin = validateLoopbackOrigin(services.server.origin, 'AOPS Server origin');
+        const cockpitOrigin = validateLoopbackOrigin(services.cockpit.origin, 'AOPS Cockpit origin');
+        const endpoints = [];
+        for (const [name, url] of [
+            ['server', `${serverOrigin}/api/health`],
+            ['cockpit', cockpitOrigin],
+            ['cockpit-proxy', `${cockpitOrigin}/api/health`],
+        ]) {
+            const response = await execution.fetch(url, { cache: 'no-store', signal: AbortSignal.timeout(15_000) });
+            assert.equal(response.status, 200, `${name} health returned ${response.status}`);
+            const body = await response.arrayBuffer();
+            endpoints.push({ name, url, status: response.status, bytes: body.byteLength });
+        }
+        evidence.push({ sample, observedAt: new Date().toISOString(), endpoints });
+        if (sample < plan.safety.healthSamples) {
+            await execution.sleep(plan.safety.healthIntervalMs);
+        }
+    }
+    return evidence;
+}
+export function validateLoopbackOrigin(value, label) {
+    assert.equal(typeof value, 'string', `${label} must be a string`);
+    const url = new URL(value);
+    assert.equal(url.protocol, 'http:', `${label} must use http`);
+    assert.equal(url.username, '', `${label} must not include credentials`);
+    assert.equal(url.password, '', `${label} must not include credentials`);
+    assert.equal(['127.0.0.1', 'localhost', '[::1]'].includes(url.hostname), true, `${label} must be loopback`);
+    assert.equal(url.pathname, '/', `${label} must not include a path`);
+    assert.equal(url.search, '', `${label} must not include a query`);
+    assert.equal(url.hash, '', `${label} must not include a fragment`);
+    return url.origin;
+}
+export async function applyGlobalUpdate(options, run = defaultRunner, execution = defaultExecutionDependencies) {
+    const plan = readGlobalUpdatePlan(options.plan);
+    assert.equal(options.confirm, plan.planId, 'global update confirmation does not match the exact plan');
+    const current = inspectGlobalInstall(run);
+    assert.deepEqual(current.packages, plan.prior.packages, 'global packages changed after update planning');
+    assert.deepEqual(current.topology, plan.prior.topology, 'global package topology changed after update planning');
+    assert.equal(current.globalPrefix, plan.globalPrefix, 'global npm prefix changed after update planning');
+    assertHealthyServices(serviceSnapshot(run, current.cliPath));
+    const events = [];
+    try {
+        stopService(run, current.cliPath, 'cockpit');
+        events.push('stopped:cockpit');
+        stopService(run, current.cliPath, 'server');
+        events.push('stopped:server');
+        installGlobalUpdateClosure(run, plan, plan.candidates, plan.target.topology);
+        events.push('installed:candidate');
+        const updated = inspectGlobalInstall(run);
+        assert.deepEqual(updated.packages, plan.target.packages, 'installed candidate closure is not exact');
+        assert.deepEqual(updated.topology, plan.target.topology, 'installed candidate topology is not canonical');
+        startService(run, updated.cliPath, 'server');
+        events.push('started:server');
+        startService(run, updated.cliPath, 'cockpit');
+        events.push('started:cockpit');
+        const healthEvidence = await assertStableHealth(run, plan, execution);
+        return {
+            schemaVersion: 1,
+            contract: RESULT_CONTRACT,
+            status: 'updated',
+            planId: plan.planId,
+            installed: updated.packages,
+            rollbackPerformed: false,
+            events,
+            healthEvidence,
+            next: 'Exit and reopen the AOPS TUI to run the newly installed binary.',
+        };
+    }
+    catch (updateError) {
+        events.push('rollback:started');
+        try {
+            stopService(run, plan.cliPath, 'cockpit', true);
+            stopService(run, plan.cliPath, 'server', true);
+            installGlobalUpdateClosure(run, plan, plan.restorePackages, plan.prior.topology);
+            events.push('installed:restore');
+            const restored = inspectGlobalInstall(run);
+            assert.deepEqual(restored.packages, plan.prior.packages, 'rollback package closure is not exact');
+            assert.deepEqual(restored.topology, plan.prior.topology, 'rollback package topology is not exact');
+            startService(run, restored.cliPath, 'server');
+            startService(run, restored.cliPath, 'cockpit');
+            await assertStableHealth(run, plan, execution);
+            events.push('rollback:healthy');
+        }
+        catch (rollbackError) {
+            throw new AggregateError([updateError, rollbackError], `global update and automatic rollback both failed; recovery artifacts remain at ${plan.operationRoot}`);
+        }
+        throw new Error('global update failed; the prior exact packages were restored and are healthy', { cause: updateError });
+    }
+}
+function output(value, json) {
+    process.stdout.write(`${JSON.stringify(value, null, json ? 0 : 2)}\n`);
+}
+export function makeGlobalUpdateCommand() {
+    const command = new Command('update').description('Check, prepare, and apply a guarded global AOPS npm update');
+    command
+        .command('check')
+        .description('Compare the installed global AOPS closure with the public npm latest tag')
+        .option('--json', 'Output JSON')
+        .action((options) => output(inspectGlobalUpdate(), options.json === true));
+    command
+        .command('prepare')
+        .description('Download and verify exact candidate and rollback tarballs without changing the installation')
+        .option('--config-root <path>', 'AOPS config root for the immutable update plan')
+        .option('--json', 'Output JSON')
+        .action((options) => output(prepareGlobalUpdate(options), options.json === true));
+    command
+        .command('apply')
+        .description('Apply one exact prepared plan with automatic rollback and health verification')
+        .requiredOption('--plan <path>', 'Exact update-plan.json path returned by prepare')
+        .requiredOption('--confirm <plan-id>', 'Exact sha256 plan id returned by prepare')
+        .option('--json', 'Output JSON')
+        .action(async (options) => output(await applyGlobalUpdate(options), options.json === true));
+    return command;
+}

package/dist/lib/agent-assets/native-fs.js CHANGED Viewed

@@ -543,9 +543,9 @@ function defaultNativeRoot() {
     return moduleDirectory.endsWith(`${path.sep}dist`) ? bundled : compiledOrSource;
 }
 function injectedNativeManifestSha256() {
-    return typeof "b97413fd3d4d2568a5a37483a7bcea62ceb48cadbbb76dbabb9109e7cf1ca161" === 'undefined'
+    return typeof "a1ddbb2b62d0b9b929667faf1404db6d2623ae8fd448ba770ccf3b59c478cbd2" === 'undefined'
         ? undefined
-        : "b97413fd3d4d2568a5a37483a7bcea62ceb48cadbbb76dbabb9109e7cf1ca161";
+        : "a1ddbb2b62d0b9b929667faf1404db6d2623ae8fd448ba770ccf3b59c478cbd2";
 }
 function sha256(bytes) {
     return createHash('sha256').update(bytes).digest('hex');

package/dist/main.js CHANGED Viewed

@@ -37,6 +37,7 @@ import { makeCommunityCockpitCommand } from './commands/community-cockpit.js';
 import { makeCommunityDoctorCommand } from './commands/community-doctor.js';
 import { makeTargetCommand } from './commands/target.js';
 import { makeVersionCommand } from './commands/version.js';
+import { makeGlobalUpdateCommand } from './commands/global-update.js';
 import { launchBundledTui, shouldLaunchBundledTui } from './lib/tui-launcher.js';
 import { CommunityDiagnosticError, formatCommunityDiagnostic, } from './lib/community-diagnostic.js';
 import { resolveCliApiBaseUrl } from './utils/api.js';
@@ -152,6 +153,7 @@ export function buildCommunityProgram() {
     program.addCommand(makeCommunityDoctorCommand());
     program.addCommand(makeTargetCommand());
     program.addCommand(makeVersionCommand());
+    program.addCommand(makeGlobalUpdateCommand());
     program.addHelpText('after', `
 AOPS Community is a single-user, self-hosted/local-trusted distribution.
 Canonical writes go to the local AOPS server; .aops/** remains a read-only cache.

package/native/manifest.json CHANGED Viewed

@@ -42,7 +42,7 @@
       "capabilityClass": "windows-ntfs-crash-recoverable-v1",
       "qualification": {
         "relativePath": "qualifications/win32-x64.json",
-        "sha256": "36fe11856fe825462846197238926c508a8753f39b6eb306b3c0e638659ef0c7"
+        "sha256": "c02837036e8e0254db24c0c7e7db49e24acc659359ebc42ce9941da1173a1cab"
       }
     }
   ]

package/native/qualifications/win32-x64.json CHANGED Viewed

@@ -7,7 +7,7 @@
   "filesystem": "NTFS",
   "primitiveProfile": "windows-createfile-flush-movefileex-v1",
   "capabilityClass": "windows-ntfs-crash-recoverable-v1",
-  "evidenceSha256": "86523b4e9d51c687d3386aaa006ce6bee7c8483b0c745d88fcceaf8ad22ae8aa",
+  "evidenceSha256": "011dad8836525e5fa57f452a7f199f9c3fd644170938a765253a409c051237fe",
   "crashInjectionPoints": [
     "authority-history",
     "authority-current",

package/native/tui/darwin-arm64/aops-tui CHANGED Viewed

Binary file

package/native/tui/win32-x64/aops-tui.exe CHANGED Viewed

Binary file

package/package.json CHANGED Viewed

@@ -1,9 +1,9 @@
 {
   "name": "@aopslabs/aops",
-  "version": "0.3.10",
+  "version": "0.3.12",
   "type": "module",
   "description": "AOPS CLI and terminal setup application.",
-  "aopsDockerServerVersion": "0.2.11",
+  "aopsDockerServerVersion": "0.2.13",
   "license": "SEE LICENSE IN LICENSE",
   "repository": {
     "type": "git",
@@ -43,6 +43,7 @@
     "test:commercial-performance": "node --test test/commercial-performance.test.mjs",
     "test:package-identity": "node --test test/package-identity.test.mjs test/npm-tar-entry-mode.test.mjs",
     "test:tui-launcher": "node --test test/tui-launcher.test.mjs",
+    "test:global-update": "node --test test/global-update.test.mjs",
     "test:skill-discovery": "node --test test/skill-discovery.test.mjs",
     "test:target-auth": "node --test test/target-auth.test.mjs test/device-login.test.mjs",
     "test:target-transport": "node --test test/target-transport.test.mjs",
@@ -53,12 +54,12 @@
     "test:hosted-contract-hardening": "node --test test/hosted-contract-hardening.test.mjs",
     "test:home": "node --test test/home-menu.test.mjs",
     "test:launchers": "node --test test/terminal-launchers.test.mjs",
-    "test:shortcuts": "pnpm --dir ../.. run build && pnpm run test:home && pnpm run test:cockpit && pnpm run test:launchers && pnpm run test:assets-menu && pnpm run test:agent-assets-content && pnpm run test:chatv3-session-store && pnpm run test:projectman-review-evidence && pnpm run test:setup-install && pnpm run test:container-runtime && pnpm run test:native-lifecycle && pnpm run test:operation-journal && pnpm run test:commercial-canonical-order && pnpm run test:commercial-runtime-closure && pnpm run test:commercial-artifact && pnpm run test:commercial-final-readiness && pnpm run test:commercial-admission && pnpm run test:commercial-license && pnpm run test:commercial-runbook && pnpm run test:package-identity && pnpm run test:skill-discovery && pnpm run test:target-transport && pnpm run test:target-auth && pnpm run test:r6-auth-cutover && pnpm run test:r6-cutover-baseline && pnpm run test:hosted-contract-hardening",
+    "test:shortcuts": "pnpm --dir ../.. run build && pnpm run test:home && pnpm run test:cockpit && pnpm run test:launchers && pnpm run test:assets-menu && pnpm run test:agent-assets-content && pnpm run test:chatv3-session-store && pnpm run test:projectman-review-evidence && pnpm run test:setup-install && pnpm run test:container-runtime && pnpm run test:native-lifecycle && pnpm run test:operation-journal && pnpm run test:commercial-canonical-order && pnpm run test:commercial-runtime-closure && pnpm run test:commercial-artifact && pnpm run test:commercial-final-readiness && pnpm run test:commercial-admission && pnpm run test:commercial-license && pnpm run test:commercial-runbook && pnpm run test:package-identity && pnpm run test:tui-launcher && pnpm run test:global-update && pnpm run test:skill-discovery && pnpm run test:target-transport && pnpm run test:target-auth && pnpm run test:r6-auth-cutover && pnpm run test:r6-cutover-baseline && pnpm run test:hosted-contract-hardening",
     "typecheck": "tsc -p tsconfig.json --noEmit",
     "start": "node dist/main.js"
   },
   "dependencies": {
-    "@aopslabs/aops-server": "0.2.11",
+    "@aopslabs/aops-server": "0.2.13",
     "@aopslabs/artifact-trust-contracts": "0.3.1",
     "@aopslabs/cli-kit": "0.1.0",
     "@aopslabs/aops-host-registration": "0.2.1",

/package/agent-assets-release/agent-assets/core/{070b0d3126c645890845791b67157fdd9f43a482fda66583e84fb159b30689a5 → ec1a663c171f7b847980a06dc84ce045493880f8a71d9d2e992d9bcaa31407ff}/files/SKILL.md RENAMED Viewed

File without changes