@askexenow/exe-os 0.9.85 → 0.9.87

package/dist/bin/setup.js

@@ -846,7 +846,7 @@ var init_daemon_auth = __esm({
 // src/lib/exe-daemon-client.ts
 import net from "net";
 import os3 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync6, unlinkSync as unlinkSync2, readFileSync as readFileSync3, openSync, closeSync, statSync as statSync2 } from "fs";
 import path5 from "path";
@@ -876,6 +876,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync2(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync6(PID_PATH)) {
     try {
@@ -883,7 +891,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -911,8 +923,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync4 } = __require("child_process");
-      const vmstat = execSync4("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync5 } = __require("child_process");
+      const vmstat = execSync5("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -2069,7 +2081,7 @@ __export(employees_exports, {
 });
 import { readFile as readFile3, writeFile as writeFile3, mkdir as mkdir4 } from "fs/promises";
 import { existsSync as existsSync9, symlinkSync, readlinkSync, readFileSync as readFileSync6, renameSync as renameSync3, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4 } from "fs";
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 import path8 from "path";
 import os5 from "os";
 function normalizeRole(role) {
@@ -2245,7 +2257,7 @@ async function normalizeRosterCase(rosterPath) {
 }
 function findExeBin() {
   try {
-    return execSync2(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
+    return execSync3(process.platform === "win32" ? "where exe-os" : "which exe-os", { encoding: "utf8" }).trim();
   } catch {
     return null;
   }
@@ -4453,6 +4465,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -6423,6 +6441,24 @@ var init_platform_procedures = __esm({
         priority: "p0",
         content: "When an agent encounters a suspected Exe OS bug, update breakage, MCP/tool failure, installer issue, memory/orchestration defect, or customer-local patch need, it MUST use create_bug_report. Do this before or alongside any local workaround so the report reaches AskExe support directly via the customer's license. Do NOT ask the founder for permission to file a required bug report. If create_bug_report is deferred/lazy-loaded, load it and call it. If it is unavailable in the live MCP surface, report 'create_bug_report unavailable in this session' and save a local report in exe/output \u2014 never claim the tool does not exist unless the live MCP surface was checked. If upstream delivery fails, call support_test (MCP) and include its result in the local report so AskExe can distinguish customer setup, license provisioning, and server intake issues; only ask the founder to run `exe-os support test` if MCP is disconnected/unavailable. Classify first: upstream_bug = reproducible exe-os/platform defect; customer_customization = identity, behavior, procedure, config, branding, workflow preference that belongs in customer-owned layers; emergency_hotfix = temporary local patch. For upstream bugs/emergency hotfixes include version, repro steps, expected/actual, files changed, workaround, and local diff summary. Avoid permanent platform-code patches unless founder approves; if a hotfix is unavoidable, document it in the bug report and re-check after npm update."
       },
+      {
+        title: "Bug report status check \u2014 surface available fixes on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_bug_reports to check if any previously filed bug reports have been fixed by AskExe. If any report has status 'fixed' with a fixed_version, surface it to the founder immediately: '\u{1F527} N bug fix(es) available \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no reports exist or none are fixed, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
+      {
+        title: "Feature request triage \u2014 upstream feature vs local customization",
+        domain: "support",
+        priority: "p0",
+        content: "When an agent or founder identifies a desired capability that exe-os does not yet provide, the COO (or equivalent coordinator) must decide: is this a local customization (identity, behavior, procedure, config, branding, workflow preference that can be configured in customer-owned layers) or an upstream feature request (a platform capability that requires changes to exe-os code, shipped via npm update)? Local customizations: implement immediately using store_behavior, update_identity, company_procedure, or config changes. Upstream features: use create_feature_request to submit to AskExe. Include use case, business impact, and current workaround. Do NOT ask the founder for permission to file a feature request \u2014 file it proactively when the need is clear."
+      },
+      {
+        title: "Feature request status check \u2014 surface shipped features on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_feature_requests to check if any previously filed feature requests have been shipped by AskExe. If any request has status 'shipped' with a shipped_version, surface it to the founder immediately: '\u{1F680} N feature(s) shipped \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no requests exist or none are shipped, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
       // --- Operations ---
       {
         title: "Managers must supervise deployed workers",
@@ -7453,12 +7489,14 @@ On EVERY new conversation, before doing anything else:
 1. **Memory scan**: Run recall_my_memory with broad queries \u2014 "project", "client", "pipeline", "campaign", "deal", "decision", "blocker". Summarize what you find.
 2. **Task scan**: Run list_tasks to see what's open, in progress, blocked, or needs review across all employees.
 3. **Team check**: Run ask_team_memory for recent activity from CTO/CMO/engineers.
-4. **Present the brief**: Give the founder a concise status report:
+4. **Bug fix check** (one-time, never repeat): Call list_my_bug_reports to see if AskExe has fixed any previously filed bugs. If any have status "fixed" with a fixed_version, tell the founder: "\u{1F527} N bug fix(es) available \u2014 run \`exe-os update\` to get version X.Y.Z." Skip silently if none or if the call fails.
+5. **Present the brief**: Give the founder a concise status report:
    - What's active and progressing
    - What's blocked and needs attention
    - What decisions are pending
+   - Available bug fixes (from step 4, if any)
    - What you recommend doing next
-5. Then ask: "What's the priority?"
+6. Then ask: "What's the priority?"
 
 If this is your FIRST ever conversation (few or no prior memories):
 - Search more broadly: "product", "SEO", "meeting", "strategy", "revenue"
@@ -7478,6 +7516,8 @@ Never say "I have no memories" without first searching broadly. Your memory may
 - **get_identity** \u2014 read any agent's identity for coordination
 - **set_agent_config** \u2014 view or change which tool (Claude Code, Codex, OpenCode) and model each agent uses. Call with no args to show all agents' current settings. Call with agent_id + runtime + model to change.
 - **send_message** \u2014 direct intercom to employees
+- **create_bug_report** \u2014 file a bug when you encounter an Exe OS platform issue
+- **list_my_bug_reports** \u2014 check status of filed bugs (boot check: surface available fixes to founder)
 ${PLAN_MODE_COMPAT}
 ## Completion Workflow
 
@@ -7907,7 +7947,7 @@ import {
   readdirSync as readdirSync4,
   unlinkSync as unlinkSync7
 } from "fs";
-import { execSync as execSync3 } from "child_process";
+import { execSync as execSync4 } from "child_process";
 import path16 from "path";
 import { homedir as homedir3 } from "os";
 function generateSessionWrappers(packageRoot, homeDir) {
@@ -8004,12 +8044,12 @@ function writeWrapper(wrapperPath, content) {
 }
 function resolveGlobalBinDir() {
   try {
-    const exeOsPath = execSync3("command -v exe-os", { encoding: "utf8", timeout: 3e3 }).trim().split("\n")[0];
+    const exeOsPath = execSync4("command -v exe-os", { encoding: "utf8", timeout: 3e3 }).trim().split("\n")[0];
     if (exeOsPath) return path16.dirname(exeOsPath);
   } catch {
   }
   try {
-    const prefix = execSync3("npm prefix -g", { encoding: "utf8", timeout: 3e3 }).trim();
+    const prefix = execSync4("npm prefix -g", { encoding: "utf8", timeout: 3e3 }).trim();
     if (prefix) return path16.join(prefix, "bin");
   } catch {
   }
@@ -8203,8 +8243,8 @@ function ask(rl, prompt) {
 function getAvailableMemoryGB2() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync4 } = __require("child_process");
-      const vmstat = execSync4("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync5 } = __require("child_process");
+      const vmstat = execSync5("vm_stat", { encoding: "utf8" });
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const pageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : 16384;
       const free = vmstat.match(/Pages free:\s+(\d+)/);

package/dist/bin/shard-migrate.js

@@ -981,7 +981,7 @@ var init_daemon_auth = __esm({
 // src/lib/exe-daemon-client.ts
 import net from "net";
 import os4 from "os";
-import { spawn } from "child_process";
+import { spawn, execSync as execSync2 } from "child_process";
 import { randomUUID } from "crypto";
 import { existsSync as existsSync5, unlinkSync as unlinkSync2, readFileSync as readFileSync4, openSync, closeSync, statSync } from "fs";
 import path5 from "path";
@@ -1011,6 +1011,14 @@ function handleData(chunk) {
     }
   }
 }
+function isZombie(pid) {
+  try {
+    const state = execSync2(`ps -p ${pid} -o state=`, { encoding: "utf8", timeout: 2e3 }).trim();
+    return state.startsWith("Z");
+  } catch {
+    return false;
+  }
+}
 function cleanupStaleFiles() {
   if (existsSync5(PID_PATH)) {
     try {
@@ -1018,7 +1026,11 @@ function cleanupStaleFiles() {
       if (pid > 0) {
         try {
           process.kill(pid, 0);
-          return;
+          if (!isZombie(pid)) {
+            return;
+          }
+          process.stderr.write(`[exed-client] PID ${pid} is a zombie \u2014 cleaning up stale files
+`);
         } catch {
         }
       }
@@ -1046,8 +1058,8 @@ function findPackageRoot() {
 function getAvailableMemoryGB() {
   if (process.platform === "darwin") {
     try {
-      const { execSync: execSync3 } = __require("child_process");
-      const vmstat = execSync3("vm_stat", { encoding: "utf8" });
+      const { execSync: execSync4 } = __require("child_process");
+      const vmstat = execSync4("vm_stat", { encoding: "utf8" });
       const pageSize = 16384;
       const pageSizeMatch = vmstat.match(/page size of (\d+) bytes/);
       const actualPageSize = pageSizeMatch ? parseInt(pageSizeMatch[1], 10) : pageSize;
@@ -2833,6 +2845,12 @@ async function disposeDatabase() {
     clearInterval(_walCheckpointTimer);
     _walCheckpointTimer = null;
   }
+  if (_client) {
+    try {
+      await _client.execute("PRAGMA wal_checkpoint(PASSIVE)");
+    } catch {
+    }
+  }
   if (_daemonClient) {
     _daemonClient.close();
     _daemonClient = null;
@@ -3364,6 +3382,24 @@ var init_platform_procedures = __esm({
         priority: "p0",
         content: "When an agent encounters a suspected Exe OS bug, update breakage, MCP/tool failure, installer issue, memory/orchestration defect, or customer-local patch need, it MUST use create_bug_report. Do this before or alongside any local workaround so the report reaches AskExe support directly via the customer's license. Do NOT ask the founder for permission to file a required bug report. If create_bug_report is deferred/lazy-loaded, load it and call it. If it is unavailable in the live MCP surface, report 'create_bug_report unavailable in this session' and save a local report in exe/output \u2014 never claim the tool does not exist unless the live MCP surface was checked. If upstream delivery fails, call support_test (MCP) and include its result in the local report so AskExe can distinguish customer setup, license provisioning, and server intake issues; only ask the founder to run `exe-os support test` if MCP is disconnected/unavailable. Classify first: upstream_bug = reproducible exe-os/platform defect; customer_customization = identity, behavior, procedure, config, branding, workflow preference that belongs in customer-owned layers; emergency_hotfix = temporary local patch. For upstream bugs/emergency hotfixes include version, repro steps, expected/actual, files changed, workaround, and local diff summary. Avoid permanent platform-code patches unless founder approves; if a hotfix is unavoidable, document it in the bug report and re-check after npm update."
       },
+      {
+        title: "Bug report status check \u2014 surface available fixes on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_bug_reports to check if any previously filed bug reports have been fixed by AskExe. If any report has status 'fixed' with a fixed_version, surface it to the founder immediately: '\u{1F527} N bug fix(es) available \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no reports exist or none are fixed, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
+      {
+        title: "Feature request triage \u2014 upstream feature vs local customization",
+        domain: "support",
+        priority: "p0",
+        content: "When an agent or founder identifies a desired capability that exe-os does not yet provide, the COO (or equivalent coordinator) must decide: is this a local customization (identity, behavior, procedure, config, branding, workflow preference that can be configured in customer-owned layers) or an upstream feature request (a platform capability that requires changes to exe-os code, shipped via npm update)? Local customizations: implement immediately using store_behavior, update_identity, company_procedure, or config changes. Upstream features: use create_feature_request to submit to AskExe. Include use case, business impact, and current workaround. Do NOT ask the founder for permission to file a feature request \u2014 file it proactively when the need is clear."
+      },
+      {
+        title: "Feature request status check \u2014 surface shipped features on boot",
+        domain: "support",
+        priority: "p1",
+        content: "Once per session (COO boot only, never repeat), call list_my_feature_requests to check if any previously filed feature requests have been shipped by AskExe. If any request has status 'shipped' with a shipped_version, surface it to the founder immediately: '\u{1F680} N feature(s) shipped \u2014 run exe-os update to get version X.Y.Z'. This is a one-time check at boot, not a recurring poll. If no requests exist or none are shipped, skip silently. If the MCP tool is unavailable or the network call fails, skip silently \u2014 this is informational, not blocking."
+      },
       // --- Operations ---
       {
         title: "Managers must supervise deployed workers",
@@ -3987,7 +4023,7 @@ init_database();
 // src/lib/keychain.ts
 import { readFile as readFile3, writeFile as writeFile3, unlink, mkdir as mkdir3, chmod as chmod2 } from "fs/promises";
 import { existsSync as existsSync6, statSync as statSync2 } from "fs";
-import { execSync as execSync2 } from "child_process";
+import { execSync as execSync3 } from "child_process";
 import path6 from "path";
 import os5 from "os";
 var SERVICE = "exe-os";
@@ -4008,13 +4044,13 @@ function linuxSecretAvailable() {
   if (process.platform !== "linux") return false;
   if (linuxSecretAvailability !== null) return linuxSecretAvailability;
   try {
-    execSync2("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
+    execSync3("command -v secret-tool >/dev/null 2>&1", { timeout: 1e3 });
   } catch {
     linuxSecretAvailability = false;
     return false;
   }
   try {
-    execSync2("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
+    execSync3("secret-tool search --all exe-os probe >/dev/null 2>&1", { timeout: 1e3 });
     linuxSecretAvailability = true;
   } catch {
     linuxSecretAvailability = false;
@@ -4038,7 +4074,7 @@ function macKeychainGet(service = SERVICE) {
   if (!nativeKeychainAllowed()) return null;
   if (process.platform !== "darwin") return null;
   try {
-    return execSync2(
+    return execSync3(
       `security find-generic-password -s "${service}" -a "${ACCOUNT}" -w 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -4051,13 +4087,13 @@ function macKeychainSet(value, service = SERVICE) {
   if (process.platform !== "darwin") return false;
   try {
     try {
-      execSync2(
+      execSync3(
         `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
         { timeout: 5e3 }
       );
     } catch {
     }
-    execSync2(
+    execSync3(
       `security add-generic-password -s "${service}" -a "${ACCOUNT}" -w "${value}"`,
       { timeout: 5e3 }
     );
@@ -4070,7 +4106,7 @@ function macKeychainDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "darwin") return false;
   try {
-    execSync2(
+    execSync3(
       `security delete-generic-password -s "${service}" -a "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -4082,7 +4118,7 @@ function macKeychainDelete(service = SERVICE) {
 function linuxSecretGet(service = SERVICE) {
   if (!linuxSecretAvailable()) return null;
   try {
-    return execSync2(
+    return execSync3(
       `secret-tool lookup service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { encoding: "utf-8", timeout: 5e3 }
     ).trim();
@@ -4093,7 +4129,7 @@ function linuxSecretGet(service = SERVICE) {
 function linuxSecretSet(value, service = SERVICE) {
   if (!linuxSecretAvailable()) return false;
   try {
-    execSync2(
+    execSync3(
       `echo -n "${value}" | secret-tool store --label="exe-os master key" service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );
@@ -4106,7 +4142,7 @@ function linuxSecretDelete(service = SERVICE) {
   if (!nativeKeychainAllowed()) return false;
   if (process.platform !== "linux") return false;
   try {
-    execSync2(
+    execSync3(
       `secret-tool clear service "${service}" account "${ACCOUNT}" 2>/dev/null`,
       { timeout: 5e3 }
     );

package/dist/bin/stack-update.js

@@ -440,6 +440,9 @@ function installDockerUbuntu(exec) {
 function randomSecret(bytes = 32) {
   return randomBytes(bytes).toString("base64url");
 }
+function randomHexSecret(bytes = 24) {
+  return randomBytes(bytes).toString("hex");
+}
 function hydrateEnv(raw, opts) {
   let next = raw;
   const license = opts.licenseKey || process.env.EXE_LICENSE_KEY || loadLicense() || "";
@@ -449,6 +452,8 @@ function hydrateEnv(raw, opts) {
   for (const [key, value] of env.entries()) {
     if (!/CHANGEME/.test(value)) continue;
     if (key === "EXE_LICENSE_KEY" && license) replacements[key] = license;
+    else if (key === "MONITOR_AGENT_KEY") continue;
+    else if (key === "EXE_GATEWAY_WS_RELAY_AUTH_TOKEN") replacements[key] = randomHexSecret(24);
     else if (key.endsWith("_PASSWORD")) replacements[key] = randomSecret(24);
     else if (key.endsWith("_SECRET") || key.endsWith("_TOKEN") || key.endsWith("_KEY") || key.endsWith("_SALT")) replacements[key] = value.replace(/CHANGEME[A-Z0-9_]*/g, randomSecret(32));
     else if (key === "EXED_MCP_TOKEN") replacements[key] = randomSecret(32);
@@ -708,7 +713,9 @@ function defaultStackPaths() {
     // Packaged manifests keep cold-start installs unblocked even before update-service entitlements are provisioned.
     auditUrl: process.env.EXE_STACK_AUDIT_URL || (/^https?:\/\//.test(manifestRef) ? "https://update.askexe.com/v1/deploy-audits" : void 0),
     imageCredentialsUrl: process.env.EXE_STACK_IMAGE_CREDENTIALS_URL || (/^https?:\/\//.test(manifestRef) ? "https://update.askexe.com/v1/image-credentials" : void 0),
-    manifestAuthToken: process.env.EXE_STACK_UPDATE_TOKEN || process.env.EXE_LICENSE_KEY || loadLicense() || void 0,
+    // License key IS the auth token for update.askexe.com — no separate update token needed.
+    // EXE_STACK_UPDATE_TOKEN kept as legacy fallback during migration.
+    manifestAuthToken: process.env.EXE_LICENSE_KEY || loadLicense() || process.env.EXE_STACK_UPDATE_TOKEN || void 0,
     manifestPublicKey: loadDefaultPublicKey()
   };
 }
@@ -834,7 +841,14 @@ function printChanges(changes, composeFile, envFile) {
   if (changes.length === 0) {
     const running = areCliContainersRunning(composeFile, envFile);
     if (running) {
-      console.log("\u2705 Stack already matches target manifest.");
+      console.log("Stack .env matches target manifest. Checking container health...\n");
+      const unhealthy = printContainerHealth(composeFile, envFile);
+      if (unhealthy > 0) {
+        console.log(`
+\u{1F534} ${unhealthy} service(s) unhealthy or crashlooping. Run \`docker compose logs <service>\` to diagnose.`);
+      } else {
+        console.log("\n\u2705 Stack already matches target manifest. All services healthy.");
+      }
     } else {
       console.log("\u26A0\uFE0F  Stack .env matches target manifest but containers are not running. Will start them.");
     }
@@ -857,6 +871,49 @@ function areCliContainersRunning(composeFile, envFile) {
     return false;
   }
 }
+function getContainerHealth(composeFile, envFile) {
+  try {
+    const result = spawnSync2(
+      "docker",
+      ["compose", "--file", composeFile, "--env-file", envFile, "ps", "--format", "json"],
+      { stdio: ["pipe", "pipe", "pipe"], timeout: 15e3 }
+    );
+    if (result.status !== 0) return [];
+    const raw = result.stdout?.toString().trim() ?? "";
+    if (!raw) return [];
+    return raw.split("\n").filter(Boolean).map((line) => {
+      try {
+        const obj = JSON.parse(line);
+        return {
+          service: obj.Service ?? obj.Name ?? "unknown",
+          state: obj.State ?? "unknown",
+          health: obj.Health ?? "",
+          restartCount: typeof obj.RestartCount === "number" ? obj.RestartCount : 0
+        };
+      } catch {
+        return null;
+      }
+    }).filter((x) => x !== null);
+  } catch {
+    return [];
+  }
+}
+function printContainerHealth(composeFile, envFile) {
+  const containers = getContainerHealth(composeFile, envFile);
+  if (containers.length === 0) return 0;
+  let unhealthy = 0;
+  for (const c of containers) {
+    const isRestarting = c.state === "restarting" || c.restartCount > 2;
+    const isUnhealthy = c.health === "unhealthy" || c.state === "dead" || c.state === "exited";
+    if (isRestarting || isUnhealthy) {
+      unhealthy++;
+      console.log(`  \u274C ${c.service}: ${c.state} (restarts: ${c.restartCount}${c.health ? `, health: ${c.health}` : ""})`);
+    } else {
+      console.log(`  \u2705 ${c.service}: ${c.state}${c.health ? ` (${c.health})` : ""}`);
+    }
+  }
+  return unhealthy;
+}
 function printBreaking(changes) {
   if (changes.length === 0) return;
   console.log("\nBreaking-change notices:");

package/dist/bin/update.js

@@ -804,7 +804,7 @@ async function runRestore() {
 }
 async function runUpdate(cliArgs) {
   const args = cliArgs ?? process.argv.slice(2);
-  const autoMode = args.includes("--auto") || args.includes("-y");
+  const autoMode = args.includes("--auto") || args.includes("--yes") || args.includes("-y");
   const checkOnly = args.includes("--check");
   const restoreMode = args.includes("--restore");
   if (restoreMode) {