@cats-inc/cats-platform 0.1.1 → 0.1.7

package/build/desktop/trayMenu.js.map

@@ -1 +1 @@
-{"version":3,"file":"trayMenu.js","sourceRoot":"","sources":["../../desktop/host/trayMenu.ts"],"names":[],"mappings":"AAsDA,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAsB;IAC3D,WAAW;IACX,YAAY;IACZ,cAAc;IACd,OAAO;IACP,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAA2B;IAC5D,yBAAyB,EAAE,eAAe;IAC1C,yDAAyD,EACvD,sBAAsB;IACxB,wDAAwD,EACtD,qBAAqB;IACvB,yDAAyD,EACvD,wBAAwB;IAC1B,oEAAoE,EAClE,qCAAqC;IACvC,kDAAkD,EAChD,uBAAuB;IACzB,kDAAkD,EAChD,kBAAkB;IACpB,4EAA4E,EAC1E,0BAA0B;IAC5B,oFAAoF,EAClF,0CAA0C;IAC5C,4DAA4D,EAC1D,yBAAyB;IAC3B,4DAA4D,EAC1D,oBAAoB;IACtB,8EAA8E,EAC5E,gCAAgC;IAClC,mFAAmF,EACjF,iCAAiC;CACpC,CAAC;AAEF,SAAS,oBAAoB,CAAC,OAAqC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,WAAW,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAiC;IAEjC,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACnE,OAAO,UAAU,KAAK,OAAO;WACxB,UAAU,KAAK,SAAS;WACxB,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;WAC/B,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACpC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA+C,EAC/C,MAAyB;IAEzB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;QAChB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO,CAAC;QACb,KAAK,gBAAgB;YACnB,OAAO,IAAI,CAAC;QACd;YACE,OAAO,MAAM,CAAC,KAAK,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,MAAyB;IACrE,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,6BAA6B,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,MAAyB;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACvC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,QAAQ,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACzC,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAyC;IAEzC,MAAM,wBAAwB,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC;IACpG,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,wBAAwB;QACvC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;aACvB,MAAM,CAAC,oBAAoB,CAAC;aAC5B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,WAAY,CAAC,IAAI,EAAE;YACrD,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,WAAY,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC;YAC9D,IAAI,EAAE,OAAO,CAAC,WAAY,CAAC,IAAI,EAAE;SAClC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACrD,eAAe,EAAE,wBAAwB;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO;aACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,GAAG,MAAM;YACT,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC;SAC/C,CAAC,CAAC;QACL,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAA2B;IAE3B,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IACnE,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,WAAW;QACX,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB;KACtE,CAAC;AACJ,CAAC"}
+{"version":3,"file":"trayMenu.js","sourceRoot":"","sources":["../../desktop/host/trayMenu.ts"],"names":[],"mappings":"AAuEA,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAsB;IAC3D,WAAW;IACX,YAAY;IACZ,cAAc;IACd,OAAO;IACP,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,6BAA6B,GAA2B;IAC5D,yBAAyB,EAAE,eAAe;IAC1C,yDAAyD,EACvD,sBAAsB;IACxB,wDAAwD,EACtD,qBAAqB;IACvB,yDAAyD,EACvD,wBAAwB;IAC1B,oEAAoE,EAClE,qCAAqC;IACvC,kDAAkD,EAChD,uBAAuB;IACzB,kDAAkD,EAChD,kBAAkB;IACpB,4EAA4E,EAC1E,0BAA0B;IAC5B,oFAAoF,EAClF,0CAA0C;IAC5C,4DAA4D,EAC1D,yBAAyB;IAC3B,4DAA4D,EAC1D,oBAAoB;IACtB,8EAA8E,EAC5E,gCAAgC;IAClC,mFAAmF,EACjF,iCAAiC;CACpC,CAAC;AAEF,SAAS,oBAAoB,CAAC,OAAqC;IACjE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IAChD,IAAI,CAAC,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,YAAY,KAAK,WAAW,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,EAAE,CAAC;QAClF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,UAAU,KAAK,KAAK,EAAE,CAAC;QACxC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC;QAC1C,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,MAAM,UAAU,0BAA0B,CACxC,MAAiC;IAEjC,MAAM,UAAU,GAAG,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC;IACnE,OAAO,UAAU,KAAK,OAAO;WACxB,UAAU,KAAK,SAAS;WACxB,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC;WAC/B,UAAU,CAAC,UAAU,CAAC,UAAU,CAAC;QACpC,CAAC,CAAC,OAAO;QACT,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,uBAAuB,CAC9B,MAA+C,EAC/C,MAAyB;IAEzB,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAED,QAAQ,MAAM,CAAC,EAAE,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,OAAO,SAAS,CAAC;QACnB,KAAK,YAAY;YACf,OAAO,MAAM,CAAC;QAChB,KAAK,cAAc;YACjB,OAAO,QAAQ,CAAC;QAClB,KAAK,OAAO,CAAC;QACb,KAAK,gBAAgB;YACnB,OAAO,IAAI,CAAC;QACd;YACE,OAAO,MAAM,CAAC,KAAK,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe,EAAE,MAAyB;IACrE,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,OAAO,6BAA6B,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CAAC,WAAmB,EAAE,MAAyB;IACxE,MAAM,OAAO,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAM,KAAK,OAAO,EAAE,CAAC;QACvB,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;YAC5B,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;YAChC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;YACvC,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;IACtB,CAAC;IACD,OAAO,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAChC,CAAC,CAAC,QAAQ,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE;QACzC,CAAC,CAAC,QAAQ,OAAO,EAAE,CAAC;AACxB,CAAC;AAED,MAAM,kBAAkB,GAAsD;IAC5E,EAAE,EAAE;QACF,KAAK,EAAE,oBAAoB;QAC3B,QAAQ,EAAE,uBAAuB;QACjC,SAAS,EAAE,mBAAmB;QAC9B,WAAW,EAAE,qBAAqB;QAClC,UAAU,EAAE,oBAAoB;QAChC,UAAU,EAAE,oBAAoB;KACjC;IACD,OAAO,EAAE;QACP,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,SAAS;QACnB,SAAS,EAAE,QAAQ;QACnB,WAAW,EAAE,SAAS;QACtB,UAAU,EAAE,UAAU;QACtB,UAAU,EAAE,SAAS;KACtB;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,0BAA0B,CACxC,QAAkD,EAClD,WAA2B;IAE3B,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,QAAQ,EAAE,CAAC;QACnC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC1C,uEAAuE;IACvE,wDAAwD;IACxD,MAAM,MAAM,GAAG,QAAQ,CAAC,UAAU,CAAC,YAAY,KAAK,kBAAkB;QACpE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,YAAY,CAAC;QAC9C,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,UAAU,GAAG,CAAC,IAA2B,EAAyB,EAAE,CAAC,CAAC;QAC1E,GAAG,IAAI;QACP,KAAK,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,MAAM,EAAE;KAChC,CAAC,CAAC;IAEH,OAAO,UAAU,CAAC,qBAAqB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAA+B,EAC/B,MAA8B;IAE9B,QAAQ,QAAQ,CAAC,MAAM,EAAE,CAAC;QACxB,KAAK,UAAU;YACb,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACrE,KAAK,kBAAkB;YACrB,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC7E,KAAK,aAAa,CAAC,CAAC,CAAC;YACnB,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC;YAC5D,OAAO,EAAE,KAAK,EAAE,GAAG,MAAM,CAAC,WAAW,IAAI,OAAO,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACzF,CAAC;QACD,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;QAC9E,KAAK,YAAY;YACf,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;QACvE;YACE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACnE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,OAAyC;IAEzC,MAAM,wBAAwB,GAAG,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,uBAAuB,IAAI,IAAI,CAAC;IACpG,MAAM,MAAM,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,QAAQ,GAAG,wBAAwB;QACvC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,IAAI,EAAE,CAAC;aACvB,MAAM,CAAC,oBAAoB,CAAC;aAC5B,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACjB,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,OAAO,CAAC,WAAY,CAAC,IAAI,EAAE;YACrD,KAAK,EAAE,kBAAkB,CAAC,OAAO,CAAC,WAAY,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC;YAC9D,IAAI,EAAE,OAAO,CAAC,WAAY,CAAC,IAAI,EAAE;SAClC,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,OAAO,EAAE,mBAAmB,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC;QACrD,eAAe,EAAE,wBAAwB;QACzC,OAAO,EAAE,OAAO,CAAC,OAAO;aACrB,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aAC1D,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YAChB,GAAG,MAAM;YACT,KAAK,EAAE,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC;SAC/C,CAAC,CAAC;QACL,QAAQ;QACR,UAAU,EAAE,0BAA0B,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC;KACxE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iCAAiC,CAC/C,WAA2B;IAE3B,MAAM,MAAM,GAAG,0BAA0B,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,WAAW,GAAG,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC;IACnE,OAAO;QACL,OAAO,EAAE,WAAW;QACpB,eAAe,EAAE,IAAI;QACrB,OAAO,EAAE,EAAE;QACX,QAAQ,EAAE,EAAE;QACZ,WAAW;QACX,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,iBAAiB;KACtE,CAAC;AACJ,CAAC"}

package/build/desktop/updateInstallHandoff.d.ts

@@ -0,0 +1,30 @@
+import type { DesktopUpdaterAdapter } from './updateManager.js';
+/**
+ * Managed-service drain around the installer handoff.
+ *
+ * `quitAndInstall` ends the process, so without this the Cats runtime and
+ * platform sidecars are killed mid-flight rather than drained. On Windows that
+ * is not merely untidy: the upgrade runs the previous uninstaller before
+ * installing, and a sidecar still holding files in the install directory can
+ * make that uninstall or the install that follows fail, which is how an update
+ * leaves a broken installation behind.
+ *
+ * This is a decorator rather than a manager feature so the update state machine
+ * stays a state machine, and so the ordering is testable without Electron.
+ */
+export interface DesktopInstallHandoffHooks {
+    /**
+     * Brings managed services down. Resolves once they are stopped, including the
+     * forced path when a graceful stop times out.
+     */
+    drainManagedServices: () => Promise<void>;
+    /**
+     * Brings managed services back after a handoff that failed while the process
+     * was still alive. Without it the app would still be running but with dead
+     * sidecars, which is a worse state than the one the user started in.
+     */
+    restartManagedServices: () => Promise<void>;
+    logger?: (message: string) => void;
+}
+export declare function withDesktopInstallHandoff(adapter: DesktopUpdaterAdapter, hooks: DesktopInstallHandoffHooks): DesktopUpdaterAdapter;
+//# sourceMappingURL=updateInstallHandoff.d.ts.map

package/build/desktop/updateInstallHandoff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateInstallHandoff.d.ts","sourceRoot":"","sources":["../../desktop/host/updateInstallHandoff.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAEhE;;;;;;;;;;;;GAYG;AAEH,MAAM,WAAW,0BAA0B;IACzC;;;OAGG;IACH,oBAAoB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1C;;;;OAIG;IACH,sBAAsB,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,qBAAqB,EAC9B,KAAK,EAAE,0BAA0B,GAChC,qBAAqB,CA0CvB"}

package/build/desktop/updateInstallHandoff.js

@@ -0,0 +1,39 @@
+export function withDesktopInstallHandoff(adapter, hooks) {
+    const log = hooks.logger ?? (() => { });
+    async function restoreAfterFailedHandoff(stage) {
+        try {
+            await hooks.restartManagedServices();
+        }
+        catch (restartError) {
+            // Nothing further can be done from here. The manager still reports a
+            // recoverable state, and the log says why the app may be degraded.
+            log(`[desktop-update] managed services did not restart after a failed ${stage}: `
+                + `${restartError instanceof Error ? restartError.message : String(restartError)}`);
+        }
+    }
+    return {
+        checkForUpdates: adapter.checkForUpdates.bind(adapter),
+        downloadUpdate: adapter.downloadUpdate.bind(adapter),
+        async quitAndInstall() {
+            try {
+                await hooks.drainManagedServices();
+            }
+            catch (drainError) {
+                // Handing off now would point the installer at files a surviving
+                // sidecar may still hold, so the install is abandoned instead.
+                log('[desktop-update] managed services failed to drain; abandoning the installer handoff: '
+                    + `${drainError instanceof Error ? drainError.message : String(drainError)}`);
+                await restoreAfterFailedHandoff('drain');
+                throw drainError;
+            }
+            try {
+                await adapter.quitAndInstall();
+            }
+            catch (handoffError) {
+                await restoreAfterFailedHandoff('handoff');
+                throw handoffError;
+            }
+        },
+    };
+}
+//# sourceMappingURL=updateInstallHandoff.js.map

package/build/desktop/updateInstallHandoff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateInstallHandoff.js","sourceRoot":"","sources":["../../desktop/host/updateInstallHandoff.ts"],"names":[],"mappings":"AA+BA,MAAM,UAAU,yBAAyB,CACvC,OAA8B,EAC9B,KAAiC;IAEjC,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAEvC,KAAK,UAAU,yBAAyB,CAAC,KAAa;QACpD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,sBAAsB,EAAE,CAAC;QACvC,CAAC;QAAC,OAAO,YAAY,EAAE,CAAC;YACtB,qEAAqE;YACrE,mEAAmE;YACnE,GAAG,CACD,oEAAoE,KAAK,IAAI;kBACzE,GAAG,YAAY,YAAY,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CACrF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,eAAe,EAAE,OAAO,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC;QACtD,cAAc,EAAE,OAAO,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC;QAEpD,KAAK,CAAC,cAAc;YAClB,IAAI,CAAC;gBACH,MAAM,KAAK,CAAC,oBAAoB,EAAE,CAAC;YACrC,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,iEAAiE;gBACjE,+DAA+D;gBAC/D,GAAG,CACD,uFAAuF;sBACnF,GAAG,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAC/E,CAAC;gBACF,MAAM,yBAAyB,CAAC,OAAO,CAAC,CAAC;gBACzC,MAAM,UAAU,CAAC;YACnB,CAAC;YAED,IAAI,CAAC;gBACH,MAAM,OAAO,CAAC,cAAc,EAAE,CAAC;YACjC,CAAC;YAAC,OAAO,YAAY,EAAE,CAAC;gBACtB,MAAM,yBAAyB,CAAC,SAAS,CAAC,CAAC;gBAC3C,MAAM,YAAY,CAAC;YACrB,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/build/desktop/updateIpc.d.ts

@@ -0,0 +1,42 @@
+import type { DesktopUpdateSnapshot } from './contracts.js';
+import type { DesktopUpdateManager } from './updateManager.js';
+/**
+ * Bounded IPC surface for the host-owned update manager.
+ *
+ * SPEC-111 section 3: every command takes no arguments, so a renderer cannot
+ * supply a feed URL, filesystem destination, shell command, executable path, or
+ * installer flag. Every handler also verifies the sender is the current Cats
+ * main window before touching the manager.
+ */
+export declare const DESKTOP_UPDATE_IPC_CHANNELS: {
+    readonly snapshot: "cats-host:update-get-snapshot";
+    readonly check: "cats-host:update-check";
+    readonly download: "cats-host:update-download";
+    readonly install: "cats-host:update-install";
+    readonly event: "cats-host:update-event";
+};
+export interface DesktopUpdateIpcEvent {
+    sender: unknown;
+}
+export interface DesktopUpdateWebContentsLike {
+    isDestroyed?: () => boolean;
+    send: (channel: string, payload: unknown) => void;
+}
+export declare function isDesktopUpdateIpcSenderTrusted(event: DesktopUpdateIpcEvent, mainWindowWebContents: unknown): boolean;
+export interface CreateDesktopUpdateIpcHandlersInput {
+    manager: DesktopUpdateManager;
+    resolveMainWindowWebContents: () => unknown;
+    logger?: (message: string) => void;
+}
+export type DesktopUpdateIpcHandlers = Record<string, (event: DesktopUpdateIpcEvent) => Promise<DesktopUpdateSnapshot | void>>;
+export declare function createDesktopUpdateIpcHandlers(input: CreateDesktopUpdateIpcHandlersInput): DesktopUpdateIpcHandlers;
+export interface CreateDesktopUpdateSnapshotBroadcastInput {
+    manager: DesktopUpdateManager;
+    resolveMainWindowWebContents: () => DesktopUpdateWebContentsLike | null;
+}
+/**
+ * Streams manager snapshots to the main window. Returns the unsubscribe
+ * function so the caller can detach deterministically during shutdown.
+ */
+export declare function createDesktopUpdateSnapshotBroadcast(input: CreateDesktopUpdateSnapshotBroadcastInput): () => void;
+//# sourceMappingURL=updateIpc.d.ts.map

package/build/desktop/updateIpc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateIpc.d.ts","sourceRoot":"","sources":["../../desktop/host/updateIpc.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAE/D;;;;;;;GAOG;AAEH,eAAO,MAAM,2BAA2B;;;;;;CAM9B,CAAC;AAEX,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC3C,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC;IAC5B,IAAI,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACnD;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,qBAAqB,EAC5B,qBAAqB,EAAE,OAAO,GAC7B,OAAO,CAKT;AAED,MAAM,WAAW,mCAAmC;IAClD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,4BAA4B,EAAE,MAAM,OAAO,CAAC;IAC5C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AAED,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAC3C,MAAM,EACN,CAAC,KAAK,EAAE,qBAAqB,KAAK,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC,CACxE,CAAC;AAEF,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,mCAAmC,GACzC,wBAAwB,CAgC1B;AAED,MAAM,WAAW,yCAAyC;IACxD,OAAO,EAAE,oBAAoB,CAAC;IAC9B,4BAA4B,EAAE,MAAM,4BAA4B,GAAG,IAAI,CAAC;CACzE;AAED;;;GAGG;AACH,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,yCAAyC,GAC/C,MAAM,IAAI,CAaZ"}

package/build/desktop/updateIpc.js

@@ -0,0 +1,71 @@
+import { DESKTOP_UPDATE_CHECK_CHANNEL, DESKTOP_UPDATE_DOWNLOAD_CHANNEL, DESKTOP_UPDATE_EVENT_CHANNEL, DESKTOP_UPDATE_INSTALL_CHANNEL, DESKTOP_UPDATE_SNAPSHOT_CHANNEL, } from './contracts.js';
+/**
+ * Bounded IPC surface for the host-owned update manager.
+ *
+ * SPEC-111 section 3: every command takes no arguments, so a renderer cannot
+ * supply a feed URL, filesystem destination, shell command, executable path, or
+ * installer flag. Every handler also verifies the sender is the current Cats
+ * main window before touching the manager.
+ */
+export const DESKTOP_UPDATE_IPC_CHANNELS = {
+    snapshot: DESKTOP_UPDATE_SNAPSHOT_CHANNEL,
+    check: DESKTOP_UPDATE_CHECK_CHANNEL,
+    download: DESKTOP_UPDATE_DOWNLOAD_CHANNEL,
+    install: DESKTOP_UPDATE_INSTALL_CHANNEL,
+    event: DESKTOP_UPDATE_EVENT_CHANNEL,
+};
+export function isDesktopUpdateIpcSenderTrusted(event, mainWindowWebContents) {
+    if (mainWindowWebContents === null || mainWindowWebContents === undefined) {
+        return false;
+    }
+    return event.sender === mainWindowWebContents;
+}
+export function createDesktopUpdateIpcHandlers(input) {
+    const { manager, resolveMainWindowWebContents } = input;
+    const logger = input.logger ?? (() => { });
+    function assertTrusted(event, channel) {
+        if (isDesktopUpdateIpcSenderTrusted(event, resolveMainWindowWebContents())) {
+            return;
+        }
+        logger(`[desktop-update] rejected ${channel} from an untrusted sender.`);
+        // Deliberately generic: the renderer learns the command was refused and
+        // nothing about the host window topology.
+        throw new Error('Update command rejected.');
+    }
+    return {
+        [DESKTOP_UPDATE_IPC_CHANNELS.snapshot]: async (event) => {
+            assertTrusted(event, DESKTOP_UPDATE_IPC_CHANNELS.snapshot);
+            return manager.getSnapshot();
+        },
+        [DESKTOP_UPDATE_IPC_CHANNELS.check]: async (event) => {
+            assertTrusted(event, DESKTOP_UPDATE_IPC_CHANNELS.check);
+            return manager.checkForUpdates();
+        },
+        [DESKTOP_UPDATE_IPC_CHANNELS.download]: async (event) => {
+            assertTrusted(event, DESKTOP_UPDATE_IPC_CHANNELS.download);
+            return manager.downloadUpdate();
+        },
+        [DESKTOP_UPDATE_IPC_CHANNELS.install]: async (event) => {
+            assertTrusted(event, DESKTOP_UPDATE_IPC_CHANNELS.install);
+            await manager.restartAndInstall();
+        },
+    };
+}
+/**
+ * Streams manager snapshots to the main window. Returns the unsubscribe
+ * function so the caller can detach deterministically during shutdown.
+ */
+export function createDesktopUpdateSnapshotBroadcast(input) {
+    const { manager, resolveMainWindowWebContents } = input;
+    return manager.subscribe((snapshot) => {
+        const webContents = resolveMainWindowWebContents();
+        if (webContents === null || webContents === undefined) {
+            return;
+        }
+        if (webContents.isDestroyed?.() === true) {
+            return;
+        }
+        webContents.send(DESKTOP_UPDATE_IPC_CHANNELS.event, snapshot);
+    });
+}
+//# sourceMappingURL=updateIpc.js.map

package/build/desktop/updateIpc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateIpc.js","sourceRoot":"","sources":["../../desktop/host/updateIpc.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,+BAA+B,EAC/B,4BAA4B,EAC5B,8BAA8B,EAC9B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AAIxB;;;;;;;GAOG;AAEH,MAAM,CAAC,MAAM,2BAA2B,GAAG;IACzC,QAAQ,EAAE,+BAA+B;IACzC,KAAK,EAAE,4BAA4B;IACnC,QAAQ,EAAE,+BAA+B;IACzC,OAAO,EAAE,8BAA8B;IACvC,KAAK,EAAE,4BAA4B;CAC3B,CAAC;AAWX,MAAM,UAAU,+BAA+B,CAC7C,KAA4B,EAC5B,qBAA8B;IAE9B,IAAI,qBAAqB,KAAK,IAAI,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,KAAK,qBAAqB,CAAC;AAChD,CAAC;AAaD,MAAM,UAAU,8BAA8B,CAC5C,KAA0C;IAE1C,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAE1C,SAAS,aAAa,CAAC,KAA4B,EAAE,OAAe;QAClE,IAAI,+BAA+B,CAAC,KAAK,EAAE,4BAA4B,EAAE,CAAC,EAAE,CAAC;YAC3E,OAAO;QACT,CAAC;QACD,MAAM,CAAC,6BAA6B,OAAO,4BAA4B,CAAC,CAAC;QACzE,wEAAwE;QACxE,0CAA0C;QAC1C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IAED,OAAO;QACL,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtD,aAAa,CAAC,KAAK,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC,WAAW,EAAE,CAAC;QAC/B,CAAC;QACD,CAAC,2BAA2B,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACnD,aAAa,CAAC,KAAK,EAAE,2BAA2B,CAAC,KAAK,CAAC,CAAC;YACxD,OAAO,OAAO,CAAC,eAAe,EAAE,CAAC;QACnC,CAAC;QACD,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACtD,aAAa,CAAC,KAAK,EAAE,2BAA2B,CAAC,QAAQ,CAAC,CAAC;YAC3D,OAAO,OAAO,CAAC,cAAc,EAAE,CAAC;QAClC,CAAC;QACD,CAAC,2BAA2B,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE;YACrD,aAAa,CAAC,KAAK,EAAE,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAC1D,MAAM,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACpC,CAAC;KACF,CAAC;AACJ,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,oCAAoC,CAClD,KAAgD;IAEhD,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,GAAG,KAAK,CAAC;IAExD,OAAO,OAAO,CAAC,SAAS,CAAC,CAAC,QAAQ,EAAE,EAAE;QACpC,MAAM,WAAW,GAAG,4BAA4B,EAAE,CAAC;QACnD,IAAI,WAAW,KAAK,IAAI,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YACtD,OAAO;QACT,CAAC;QACD,IAAI,WAAW,CAAC,WAAW,EAAE,EAAE,KAAK,IAAI,EAAE,CAAC;YACzC,OAAO;QACT,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,2BAA2B,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAChE,CAAC,CAAC,CAAC;AACL,CAAC"}

package/build/desktop/updateManager.d.ts

@@ -0,0 +1,76 @@
+import type { DesktopUpdateCapability, DesktopUpdateError, DesktopUpdateNextAction, DesktopUpdateProgress, DesktopUpdateSnapshot, DesktopUpdateStatus } from './contracts.js';
+import type { DesktopDistributionIdentity, DesktopReleasePlatform } from './releaseDescriptor.js';
+/**
+ * Host-owned update state machine.
+ *
+ * The renderer and tray are presentation surfaces over this one manager. They
+ * request bounded actions and observe snapshots; they never choose a feed, a
+ * URL, a file, or installer arguments.
+ *
+ * The provider is reached through an injected adapter so tests exercise the
+ * lifecycle without live GitHub requests.
+ */
+/**
+ * Platforms whose signed old-version-to-new-version upgrade path has passed.
+ *
+ * PLAN-101 gate G3 admits one platform at a time, and SPEC-111 section 9 keeps
+ * Windows and macOS self-update disabled until signing is validated. The list
+ * is empty on purpose: no platform has passed yet, so no build advertises
+ * self-update even when it carries a valid release descriptor.
+ */
+export declare const DESKTOP_RELEASE_READY_PLATFORMS: readonly DesktopReleasePlatform[];
+export interface DesktopUpdaterCheckResult {
+    updateAvailable: boolean;
+    version: string | null;
+    releaseSummary: string | null;
+}
+export interface DesktopUpdaterAdapter {
+    checkForUpdates(): Promise<DesktopUpdaterCheckResult>;
+    downloadUpdate(onProgress: (progress: DesktopUpdateProgress) => void): Promise<void>;
+    quitAndInstall(): Promise<void>;
+}
+export interface CreateDesktopUpdateCapabilityInput {
+    identity: DesktopDistributionIdentity;
+    nodePlatform: NodeJS.Platform | string;
+    releaseReadyPlatforms?: readonly DesktopReleasePlatform[];
+}
+export declare function createDesktopUpdateCapability(input: CreateDesktopUpdateCapabilityInput): DesktopUpdateCapability;
+/**
+ * The snapshot a build without update capability publishes.
+ *
+ * Used as the fallback wherever a snapshot is required before the manager
+ * exists, so those code paths cannot accidentally imply an update is possible.
+ */
+export declare function createUnavailableDesktopUpdateSnapshot(currentVersion: string): DesktopUpdateSnapshot;
+export declare function resolveDesktopUpdateNextAction(status: DesktopUpdateStatus, capability: DesktopUpdateCapability): DesktopUpdateNextAction;
+/**
+ * Maps a provider error to a stable code plus copy that is safe to render.
+ *
+ * The returned summary is an English fallback only. Renderer surfaces localize
+ * from the code through the shared i18n catalogs, so the raw provider message
+ * never reaches the UI.
+ */
+export declare function mapDesktopUpdateError(error: unknown): DesktopUpdateError;
+export declare function redactDesktopUpdateDiagnostic(message: string): string;
+export interface CreateDesktopUpdateManagerInput {
+    capability: DesktopUpdateCapability;
+    adapter: DesktopUpdaterAdapter | null;
+    now?: () => Date;
+    logger?: (message: string) => void;
+    /**
+     * Restored from the host state file. It is the only update fact worth
+     * carrying across a restart: a provider-dependent status such as
+     * update_available cannot be acted on in a new process without checking
+     * again, so restoring it would offer a download the manager cannot perform.
+     */
+    initialLastCheckedAt?: string | null;
+}
+export interface DesktopUpdateManager {
+    getSnapshot(): DesktopUpdateSnapshot;
+    subscribe(listener: (snapshot: DesktopUpdateSnapshot) => void): () => void;
+    checkForUpdates(): Promise<DesktopUpdateSnapshot>;
+    downloadUpdate(): Promise<DesktopUpdateSnapshot>;
+    restartAndInstall(): Promise<DesktopUpdateSnapshot>;
+}
+export declare function createDesktopUpdateManager(input: CreateDesktopUpdateManagerInput): DesktopUpdateManager;
+//# sourceMappingURL=updateManager.d.ts.map

package/build/desktop/updateManager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateManager.d.ts","sourceRoot":"","sources":["../../desktop/host/updateManager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,kBAAkB,EAElB,uBAAuB,EACvB,qBAAqB,EACrB,qBAAqB,EACrB,mBAAmB,EACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EACV,2BAA2B,EAC3B,sBAAsB,EACvB,MAAM,wBAAwB,CAAC;AAGhC;;;;;;;;;GASG;AAEH;;;;;;;GAOG;AACH,eAAO,MAAM,+BAA+B,EAAE,SAAS,sBAAsB,EAAO,CAAC;AAErF,MAAM,WAAW,yBAAyB;IACxC,eAAe,EAAE,OAAO,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,eAAe,IAAI,OAAO,CAAC,yBAAyB,CAAC,CAAC;IACtD,cAAc,CACZ,UAAU,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,GACpD,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,EAAE,2BAA2B,CAAC;IACtC,YAAY,EAAE,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC;IACvC,qBAAqB,CAAC,EAAE,SAAS,sBAAsB,EAAE,CAAC;CAC3D;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,kCAAkC,GACxC,uBAAuB,CA0DzB;AAED;;;;;GAKG;AACH,wBAAgB,sCAAsC,CACpD,cAAc,EAAE,MAAM,GACrB,qBAAqB,CAqBvB;AAED,wBAAgB,8BAA8B,CAC5C,MAAM,EAAE,mBAAmB,EAC3B,UAAU,EAAE,uBAAuB,GAClC,uBAAuB,CAiBzB;AA0BD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,kBAAkB,CAcxE;AAQD,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAKrE;AAMD,MAAM,WAAW,+BAA+B;IAC9C,UAAU,EAAE,uBAAuB,CAAC;IACpC,OAAO,EAAE,qBAAqB,GAAG,IAAI,CAAC;IACtC,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;IACjB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACnC;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACnC,WAAW,IAAI,qBAAqB,CAAC;IACrC,SAAS,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,qBAAqB,KAAK,IAAI,GAAG,MAAM,IAAI,CAAC;IAC3E,eAAe,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClD,cAAc,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACjD,iBAAiB,IAAI,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACrD;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,+BAA+B,GACrC,oBAAoB,CAkMtB"}

package/build/desktop/updateManager.js

@@ -0,0 +1,342 @@
+import { resolveDesktopReleasePlatform } from './releaseDescriptor.js';
+/**
+ * Host-owned update state machine.
+ *
+ * The renderer and tray are presentation surfaces over this one manager. They
+ * request bounded actions and observe snapshots; they never choose a feed, a
+ * URL, a file, or installer arguments.
+ *
+ * The provider is reached through an injected adapter so tests exercise the
+ * lifecycle without live GitHub requests.
+ */
+/**
+ * Platforms whose signed old-version-to-new-version upgrade path has passed.
+ *
+ * PLAN-101 gate G3 admits one platform at a time, and SPEC-111 section 9 keeps
+ * Windows and macOS self-update disabled until signing is validated. The list
+ * is empty on purpose: no platform has passed yet, so no build advertises
+ * self-update even when it carries a valid release descriptor.
+ */
+export const DESKTOP_RELEASE_READY_PLATFORMS = [];
+export function createDesktopUpdateCapability(input) {
+    const { identity, nodePlatform } = input;
+    const releaseReadyPlatforms = input.releaseReadyPlatforms ?? DESKTOP_RELEASE_READY_PLATFORMS;
+    const base = {
+        distribution: identity.distribution,
+        channel: identity.channel,
+        currentVersion: identity.currentVersion,
+    };
+    const packagedFromWorkflow = identity.distribution === 'official_packaged'
+        || identity.distribution === 'preview_packaged';
+    if (!packagedFromWorkflow || identity.provider !== 'github_release') {
+        return {
+            ...base,
+            provider: 'none',
+            canCheck: false,
+            canDownload: false,
+            canInstall: false,
+            unavailableReason: identity.unavailableReason,
+        };
+    }
+    const platform = resolveDesktopReleasePlatform(nodePlatform);
+    if (platform === null) {
+        return {
+            ...base,
+            provider: 'github_release',
+            canCheck: false,
+            canDownload: false,
+            canInstall: false,
+            unavailableReason: 'platform_not_release_ready',
+        };
+    }
+    // The release-ready gate exists so a stable build cannot advertise
+    // self-update before its signed upgrade test passes. A preview build is how
+    // that test is run, so the gate does not apply to it.
+    if (identity.distribution === 'official_packaged' && !releaseReadyPlatforms.includes(platform)) {
+        return {
+            ...base,
+            provider: 'github_release',
+            canCheck: false,
+            canDownload: false,
+            canInstall: false,
+            unavailableReason: 'platform_not_release_ready',
+        };
+    }
+    return {
+        ...base,
+        provider: 'github_release',
+        canCheck: true,
+        canDownload: true,
+        canInstall: true,
+        unavailableReason: null,
+    };
+}
+/**
+ * The snapshot a build without update capability publishes.
+ *
+ * Used as the fallback wherever a snapshot is required before the manager
+ * exists, so those code paths cannot accidentally imply an update is possible.
+ */
+export function createUnavailableDesktopUpdateSnapshot(currentVersion) {
+    return {
+        capability: {
+            distribution: 'unofficial_packaged',
+            provider: 'none',
+            channel: 'stable',
+            currentVersion,
+            canCheck: false,
+            canDownload: false,
+            canInstall: false,
+            unavailableReason: 'descriptor_missing',
+        },
+        status: 'unavailable',
+        currentVersion,
+        availableVersion: null,
+        releaseSummary: null,
+        lastCheckedAt: null,
+        progress: null,
+        error: null,
+        nextAction: 'none',
+    };
+}
+export function resolveDesktopUpdateNextAction(status, capability) {
+    if (!capability.canCheck) {
+        return 'none';
+    }
+    switch (status) {
+        case 'idle':
+        case 'up_to_date':
+        case 'failed':
+            return 'check';
+        case 'update_available':
+            return capability.canDownload ? 'download' : 'none';
+        case 'downloaded':
+            return capability.canInstall ? 'restart_install' : 'none';
+        default:
+            return 'none';
+    }
+}
+const ERROR_SUMMARIES = {
+    offline: 'Cats could not reach the update service.',
+    timeout: 'The update service did not respond in time.',
+    provider_rejected: 'The update service rejected the request.',
+    metadata_invalid: 'The update information could not be read.',
+    checksum_mismatch: 'The downloaded update failed its integrity check.',
+    signature_rejected: 'The downloaded update failed its signature check.',
+    unsupported_package: 'This installation cannot update itself.',
+    download_cancelled: 'The update download was cancelled.',
+    install_handoff_failed: 'Cats could not hand off to the installer.',
+    unknown: 'The update could not be completed.',
+};
+const ERROR_CODE_PATTERNS = [
+    ['offline', /enotfound|eai_again|econnrefused|econnreset|enetunreach|offline|dns/iu],
+    ['timeout', /etimedout|timed? ?out|esockettimedout/iu],
+    ['checksum_mismatch', /sha512|sha256|checksum|integrity/iu],
+    ['signature_rejected', /signature|publishername|not signed|authenticode/iu],
+    ['download_cancelled', /cancel/iu],
+    ['unsupported_package', /unsupported|not supported|no published versions|dev-app-update/iu],
+    ['metadata_invalid', /latest\.yml|latest-mac\.yml|metadata|unable to parse|invalid yml/iu],
+    ['provider_rejected', /http (4|5)\d\d|status code (4|5)\d\d|forbidden|not found|rate limit/iu],
+];
+/**
+ * Maps a provider error to a stable code plus copy that is safe to render.
+ *
+ * The returned summary is an English fallback only. Renderer surfaces localize
+ * from the code through the shared i18n catalogs, so the raw provider message
+ * never reaches the UI.
+ */
+export function mapDesktopUpdateError(error) {
+    const haystack = [
+        typeof error === 'string' ? error : '',
+        error instanceof Error ? error.message : '',
+        isRecord(error) && typeof error.code === 'string' ? error.code : '',
+    ].join(' ');
+    for (const [code, pattern] of ERROR_CODE_PATTERNS) {
+        if (pattern.test(haystack)) {
+            return { code, summary: ERROR_SUMMARIES[code] };
+        }
+    }
+    return { code: 'unknown', summary: ERROR_SUMMARIES.unknown };
+}
+const SECRET_PATTERNS = [
+    /gh[pousr]_[A-Za-z0-9_]{16,}/gu,
+    /github_pat_[A-Za-z0-9_]{20,}/gu,
+    /(authorization|token|password|secret)"?\s*[:=]\s*"?[^\s",}]+/giu,
+];
+export function redactDesktopUpdateDiagnostic(message) {
+    return SECRET_PATTERNS.reduce((redacted, pattern) => redacted.replace(pattern, '[redacted]'), message);
+}
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+export function createDesktopUpdateManager(input) {
+    const { capability, adapter } = input;
+    const now = input.now ?? (() => new Date());
+    const logger = input.logger ?? (() => { });
+    const usable = capability.canCheck && adapter !== null;
+    let status = usable ? 'idle' : 'unavailable';
+    let availableVersion = null;
+    let releaseSummary = null;
+    let lastCheckedAt = input.initialLastCheckedAt ?? null;
+    let progress = null;
+    let error = null;
+    // SPEC-111 section 2 allows one check or download at a time. Repeated
+    // requests join the in-flight operation instead of starting a second
+    // provider request.
+    let pendingCheck = null;
+    let pendingDownload = null;
+    const listeners = new Set();
+    function snapshot() {
+        return {
+            capability,
+            status,
+            currentVersion: capability.currentVersion,
+            availableVersion,
+            releaseSummary,
+            lastCheckedAt,
+            progress,
+            error,
+            nextAction: resolveDesktopUpdateNextAction(status, capability),
+        };
+    }
+    function publish() {
+        const current = snapshot();
+        for (const listener of listeners) {
+            listener(current);
+        }
+        return current;
+    }
+    function log(message) {
+        logger(redactDesktopUpdateDiagnostic(message));
+    }
+    function fail(cause, stage) {
+        error = mapDesktopUpdateError(cause);
+        status = 'failed';
+        progress = null;
+        log(`[desktop-update] ${stage} failed (${error.code}): `
+            + `${cause instanceof Error ? cause.message : String(cause)}`);
+        return publish();
+    }
+    async function runCheck(activeAdapter) {
+        status = 'checking';
+        error = null;
+        publish();
+        try {
+            const result = await activeAdapter.checkForUpdates();
+            lastCheckedAt = now().toISOString();
+            if (!result.updateAvailable) {
+                status = 'up_to_date';
+                availableVersion = null;
+                releaseSummary = null;
+                return publish();
+            }
+            if (result.version === null || result.version.trim() === '') {
+                throw new Error('Provider reported an available update without a version.');
+            }
+            status = 'update_available';
+            availableVersion = result.version;
+            releaseSummary = result.releaseSummary;
+            return publish();
+        }
+        catch (cause) {
+            lastCheckedAt = now().toISOString();
+            return fail(cause, 'check');
+        }
+    }
+    async function runDownload(activeAdapter) {
+        status = 'downloading';
+        error = null;
+        progress = { percent: 0, transferredBytes: 0, totalBytes: 0, bytesPerSecond: 0 };
+        publish();
+        try {
+            await activeAdapter.downloadUpdate((next) => {
+                // A late progress event after a failure must not resurrect the
+                // downloading state.
+                if (status !== 'downloading') {
+                    return;
+                }
+                progress = next;
+                publish();
+            });
+            status = 'downloaded';
+            progress = null;
+            return publish();
+        }
+        catch (cause) {
+            return fail(cause, 'download');
+        }
+    }
+    return {
+        getSnapshot: snapshot,
+        subscribe(listener) {
+            listeners.add(listener);
+            return () => {
+                listeners.delete(listener);
+            };
+        },
+        async checkForUpdates() {
+            if (!usable || adapter === null) {
+                return snapshot();
+            }
+            if (pendingDownload !== null) {
+                return pendingDownload;
+            }
+            if (pendingCheck !== null) {
+                return pendingCheck;
+            }
+            pendingCheck = runCheck(adapter).finally(() => {
+                pendingCheck = null;
+            });
+            return pendingCheck;
+        },
+        async downloadUpdate() {
+            if (!usable || adapter === null || !capability.canDownload) {
+                return snapshot();
+            }
+            if (pendingDownload !== null) {
+                return pendingDownload;
+            }
+            if (pendingCheck !== null) {
+                return pendingCheck;
+            }
+            // Automatic download stays disabled: only an explicit request from a
+            // surface reaches here, and only from update_available.
+            if (status !== 'update_available') {
+                return snapshot();
+            }
+            pendingDownload = runDownload(adapter).finally(() => {
+                pendingDownload = null;
+            });
+            return pendingDownload;
+        },
+        async restartAndInstall() {
+            if (!usable || adapter === null || !capability.canInstall) {
+                return snapshot();
+            }
+            if (status !== 'downloaded') {
+                return snapshot();
+            }
+            status = 'installing';
+            error = null;
+            publish();
+            try {
+                await adapter.quitAndInstall();
+                return snapshot();
+            }
+            catch (cause) {
+                log('[desktop-update] install handoff failed: '
+                    + `${cause instanceof Error ? cause.message : String(cause)}`);
+                // The handoff failed before the process exited, so the downloaded
+                // update is still installable and the user can retry it.
+                status = 'downloaded';
+                progress = null;
+                error = {
+                    code: 'install_handoff_failed',
+                    summary: ERROR_SUMMARIES.install_handoff_failed,
+                };
+                return publish();
+            }
+        },
+    };
+}
+//# sourceMappingURL=updateManager.js.map