@claudexor/cli 3.0.3 → 3.1.0

package/dist/project-command.js

@@ -1,5 +1,6 @@
-import { ControlProject, ControlProjectListResponse, ControlProjectOutputsResponse, } from "@claudexor/schema";
+import { ControlProject, ControlProjectListResponse, ControlProjectOutputsResponse, ControlProjectRemoveReceipt, } from "@claudexor/schema";
 import { print, printJson, printUsageError } from "./cli-io.js";
+import { controlProblemError, renderCliFailure } from "./cli-error.js";
 import { ensureDaemon } from "./daemon-run.js";
 import { controlApiFetch } from "./live.js";
 export async function projectCommand(args, json) {
@@ -39,6 +40,30 @@ export async function projectCommand(args, json) {
             }
             return mutateProject(json, `/projects/${encodeURIComponent(id)}/relink`, { root });
         }
+        if (action === "remove") {
+            const id = args._[2];
+            if (!id || args._.length !== 3) {
+                return printUsageError(json, "usage: claudexor project remove <project-id>");
+            }
+            const { addr } = await ensureDaemon();
+            const response = await controlApiFetch(addr, `/projects/${encodeURIComponent(id)}`, {
+                method: "DELETE",
+            });
+            const data = await responseJson(response);
+            if (!response.ok)
+                return failure(json, response.status, data);
+            const receipt = ControlProjectRemoveReceipt.parse(data);
+            if (json)
+                printJson(receipt);
+            else {
+                print(`Removed project ${receipt.projectId} (${receipt.root}).`);
+                print(receipt.journalPartitionArchived
+                    ? `  Journal partition archived to ${receipt.archivedPartitionPath}.`
+                    : "  No journal partition to archive.");
+                print("  Run artifacts left in place for normal garbage collection.");
+            }
+            return 0;
+        }
         if (action === "outputs") {
             const id = args._[2];
             if (!id || args._.length > 4) {
@@ -63,25 +88,40 @@ export async function projectCommand(args, json) {
                         print(`${artifact.path}${artifact.kind === "directory" ? "/" : ""}${typeof artifact.bytes === "number" ? `  ${artifact.bytes}B` : ""}`);
                 return 0;
             }
-            // Fetch a single durable output file; stream its bytes to stdout.
+            // Fetch a single durable output file. Text mode streams the raw bytes to
+            // stdout; `--json` mode must keep the exactly-one-JSON-object contract, so
+            // the bytes ride as base64 inside a self-contained envelope rather than
+            // corrupting stdout with raw (possibly binary) content (QA-060).
             const response = await controlApiFetch(addr, `${base}/${encodeURIComponentPath(outputPath)}`);
             if (!response.ok) {
                 const data = await responseJson(response);
                 return failure(json, response.status, data);
             }
             const bytes = Buffer.from(await response.arrayBuffer());
-            process.stdout.write(bytes);
+            if (json) {
+                printJson({
+                    ok: true,
+                    projectId: id,
+                    path: outputPath,
+                    encoding: "base64",
+                    byteLength: bytes.length,
+                    content: bytes.toString("base64"),
+                });
+            }
+            else {
+                process.stdout.write(bytes);
+            }
             return 0;
         }
-        return printUsageError(json, "usage: claudexor project list|register|relink|outputs");
+        return printUsageError(json, "usage: claudexor project list|register|relink|remove|outputs");
     }
     catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        if (json)
-            printJson({ ok: false, error: message });
-        else
-            process.stderr.write(`claudexor project: ${message}\n`);
-        return 1;
+        // Transport / bootstrap throwables are operational (exit 1); render them
+        // through the SAME D-7 projector so the envelope shape stays uniform.
+        return renderCliFailure(json, error, {
+            defaultCategory: "operational",
+            messagePrefix: "claudexor project:",
+        });
     }
 }
 async function mutateProject(json, path, body) {
@@ -101,8 +141,19 @@ async function mutateProject(json, path, body) {
         printProject(project);
     return 0;
 }
+/** Human `project list` lines for one project: the id/root row plus a disclosed
+ * (never refused) nesting line per overlap with another registered project, so
+ * the operator is not confused by two projects whose files overlap (QA-072). */
+export function projectListLines(project) {
+    const lines = [`${project.id}  ${project.root}`];
+    for (const n of project.nesting) {
+        lines.push(`    ${n.relation === "inside" ? "nested inside" : "contains"} ${n.root}  (${n.projectId})`);
+    }
+    return lines;
+}
 function printProject(project) {
-    print(`${project.id}  ${project.root}`);
+    for (const line of projectListLines(project))
+        print(line);
 }
 /** Percent-encode each path segment while preserving the `/` separators the
  *  server splits on (it decodeURIComponent's the whole remainder). */
@@ -113,14 +164,18 @@ async function responseJson(response) {
     const text = await response.text();
     return text ? JSON.parse(text) : {};
 }
-function failure(json, status, data) {
-    const record = data && typeof data === "object" ? data : {};
-    const message = String(record["message"] ?? record["error"] ?? `HTTP ${status}`);
-    if (json)
-        printJson({ ok: false, status, error: message, code: record["code"] ?? null });
-    else
-        process.stderr.write(`claudexor project: ${message}\n`);
-    return 1;
+/**
+ * Project-route failure envelope, aligned to the central D-7 contract
+ * (cli-error.ts): a typed `ControlProblem` body is preserved intact
+ * (code/message/retryable/fieldErrors/requiredActions/context), the exit code
+ * comes from the ONE category→exit table via `controlProblemError` (400/422 =
+ * usage 2; everything else, incl. a 409 remove conflict on a fenced id =
+ * operational 1), and the JSON envelope carries `exitCode` + `message` with the
+ * legacy `error` alias. Exported for the failure-envelope test.
+ */
+export function failure(json, status, data) {
+    return renderCliFailure(json, controlProblemError(status, data, `HTTP ${status}`), {
+        messagePrefix: "claudexor project:",
+    });
 }
-import process from "node:process";
 //# sourceMappingURL=project-command.js.map

package/dist/project-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"project-command.js","sourceRoot":"","sources":["../src/project-command.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,6BAA6B,GAE9B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,IAAI;gBAAE,SAAS,CAAC,MAAM,CAAC,CAAC;iBACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC;;gBACnE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,eAAe,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,eAAe,CACpB,IAAI,EACJ,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,EAAE,aAAa,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,eAAe,CAAC,IAAI,EAAE,6DAA6D,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,aAAa,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC;YAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,sCAAsC;gBACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC9D,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,IAAI;oBAAE,SAAS,CAAC,MAAM,CAAC,CAAC;qBACvB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;oBAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;;oBAEnE,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS;wBACrC,KAAK,CACH,GAAG,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GACzD,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAChE,EAAE,CACH,CAAC;gBACN,OAAO,CAAC,CAAC;YACX,CAAC;YACD,kEAAkE;YAClE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,EAAE,uDAAuD,CAAC,CAAC;IACxF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;;YAC9C,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,IAAY,EAAE,IAAa;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI;QAAE,SAAS,CAAC,OAAO,CAAC,CAAC;;QACxB,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,KAAK,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;AAC1C,CAAC;AAED;sEACsE;AACtE,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED,SAAS,OAAO,CAAC,IAAa,EAAE,MAAc,EAAE,IAAa;IAC3D,MAAM,MAAM,GAAG,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzF,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,QAAQ,MAAM,EAAE,CAAC,CAAC;IACjF,IAAI,IAAI;QAAE,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;;QACpF,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,OAAO,IAAI,CAAC,CAAC;IAC7D,OAAO,CAAC,CAAC;AACX,CAAC;AACD,OAAO,OAAO,MAAM,cAAc,CAAC"}
+{"version":3,"file":"project-command.js","sourceRoot":"","sources":["../src/project-command.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,6BAA6B,EAC7B,2BAA2B,GAE5B,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,mBAAmB,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE5C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAClE,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;IACnC,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YACtB,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/C,OAAO,eAAe,CAAC,IAAI,EAAE,+BAA+B,CAAC,CAAC;YAChE,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;YAC1D,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,MAAM,GAAG,0BAA0B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtD,IAAI,IAAI;gBAAE,SAAS,CAAC,MAAM,CAAC,CAAC;iBACvB,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;gBAAE,KAAK,CAAC,yBAAyB,CAAC,CAAC;;gBACnE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;oBAAE,YAAY,CAAC,OAAO,CAAC,CAAC;YAClE,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,UAAU,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACjC,OAAO,eAAe,CAAC,IAAI,EAAE,mDAAmD,CAAC,CAAC;YACpF,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpD,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACvB,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACxC,OAAO,eAAe,CACpB,IAAI,EACJ,8DAA8D,CAC/D,CAAC;YACJ,CAAC;YACD,OAAO,aAAa,CAAC,IAAI,EAAE,aAAa,kBAAkB,CAAC,EAAE,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;YACxB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC/B,OAAO,eAAe,CAAC,IAAI,EAAE,8CAA8C,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,aAAa,kBAAkB,CAAC,EAAE,CAAC,EAAE,EAAE;gBAClF,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9D,MAAM,OAAO,GAAG,2BAA2B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxD,IAAI,IAAI;gBAAE,SAAS,CAAC,OAAO,CAAC,CAAC;iBACxB,CAAC;gBACJ,KAAK,CAAC,mBAAmB,OAAO,CAAC,SAAS,KAAK,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC;gBACjE,KAAK,CACH,OAAO,CAAC,wBAAwB;oBAC9B,CAAC,CAAC,mCAAmC,OAAO,CAAC,qBAAqB,GAAG;oBACrE,CAAC,CAAC,oCAAoC,CACzC,CAAC;gBACF,KAAK,CAAC,8DAA8D,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACrB,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,OAAO,eAAe,CAAC,IAAI,EAAE,6DAA6D,CAAC,CAAC;YAC9F,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC7B,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;YACtC,MAAM,IAAI,GAAG,aAAa,kBAAkB,CAAC,EAAE,CAAC,UAAU,CAAC;YAC3D,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;gBAC7B,sCAAsC;gBACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;gBACnD,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;oBAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBAC9D,MAAM,MAAM,GAAG,6BAA6B,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,IAAI;oBAAE,SAAS,CAAC,MAAM,CAAC,CAAC;qBACvB,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;oBAAE,KAAK,CAAC,qBAAqB,CAAC,CAAC;;oBAEnE,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,SAAS;wBACrC,KAAK,CACH,GAAG,QAAQ,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GACzD,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAChE,EAAE,CACH,CAAC;gBACN,OAAO,CAAC,CAAC;YACX,CAAC;YACD,yEAAyE;YACzE,2EAA2E;YAC3E,wEAAwE;YACxE,iEAAiE;YACjE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,sBAAsB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;YAC9F,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;gBAC1C,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC9C,CAAC;YACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YACxD,IAAI,IAAI,EAAE,CAAC;gBACT,SAAS,CAAC;oBACR,EAAE,EAAE,IAAI;oBACR,SAAS,EAAE,EAAE;oBACb,IAAI,EAAE,UAAU;oBAChB,QAAQ,EAAE,QAAQ;oBAClB,UAAU,EAAE,KAAK,CAAC,MAAM;oBACxB,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;iBAClC,CAAC,CAAC;YACL,CAAC;iBAAM,CAAC;gBACN,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC9B,CAAC;YACD,OAAO,CAAC,CAAC;QACX,CAAC;QACD,OAAO,eAAe,CAAC,IAAI,EAAE,8DAA8D,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,yEAAyE;QACzE,sEAAsE;QACtE,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE;YACnC,eAAe,EAAE,aAAa;YAC9B,aAAa,EAAE,oBAAoB;SACpC,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAa,EAAE,IAAY,EAAE,IAAa;IACrE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,IAAI,EAAE;QACjD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;KAC3B,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI;QAAE,SAAS,CAAC,OAAO,CAAC,CAAC;;QACxB,YAAY,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;gFAEgF;AAChF,MAAM,UAAU,gBAAgB,CAAC,OAA2B;IAC1D,MAAM,KAAK,GAAG,CAAC,GAAG,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChC,KAAK,CAAC,IAAI,CACR,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,IAAI,MAAM,CAAC,CAAC,SAAS,GAAG,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,YAAY,CAAC,OAA2B;IAC/C,KAAK,MAAM,IAAI,IAAI,gBAAgB,CAAC,OAAO,CAAC;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC;AAC5D,CAAC;AAED;sEACsE;AACtE,SAAS,sBAAsB,CAAC,OAAe;IAC7C,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,QAAkB;IAC5C,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,OAAO,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,IAAa,EAAE,MAAc,EAAE,IAAa;IAClE,OAAO,gBAAgB,CAAC,IAAI,EAAE,mBAAmB,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,MAAM,EAAE,CAAC,EAAE;QACjF,aAAa,EAAE,oBAAoB;KACpC,CAAC,CAAC;AACL,CAAC"}

package/dist/quota-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"quota-command.d.ts","sourceRoot":"","sources":["../src/quota-command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAU5C,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA+BnF"}
+{"version":3,"file":"quota-command.d.ts","sourceRoot":"","sources":["../src/quota-command.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAW5C,wBAAsB,YAAY,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA4BnF"}

package/dist/quota-command.js

@@ -1,6 +1,7 @@
 import { ControlProblem, ControlQuotaResponse } from "@claudexor/schema";
 import { flagBool } from "./args.js";
 import { print, printJson } from "./cli-io.js";
+import { renderCliFailure } from "./cli-error.js";
 import { ensureDaemon } from "./daemon-run.js";
 import { controlApiFetch } from "./live.js";
 import { CLAUDE_STATUSLINE_MANAGED_ARG, runClaudeStatuslineCollector, } from "./claude-statusline.js";
@@ -35,12 +36,7 @@ export async function quotaCommand(args, json) {
         return 0;
     }
     catch (error) {
-        const message = `claudexor quota: ${error instanceof Error ? error.message : String(error)}`;
-        if (json)
-            printJson({ ok: false, exitCode: 1, error: message });
-        else
-            process.stderr.write(`${message}\n`);
-        return 1;
+        return renderCliFailure(json, error, { messagePrefix: "claudexor quota:" });
     }
 }
 function printQuota(value) {

package/dist/quota-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"quota-command.js","sourceRoot":"","sources":["../src/quota-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,IAAa;IAChE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,0BAA0B,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,6BAA6B,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,MAAM,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE;YACrD,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAChC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,IAAI;YAAE,SAAS,CAAC,KAAK,CAAC,CAAC;;YACtB,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,oBAAoB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7F,IAAI,IAAI;YAAE,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;;YAC3D,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,OAAO,IAAI,CAAC,CAAC;QAC1C,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAoD;IACtE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,KAAK,CACH,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,YAAY,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,SAAS,aAAa,QAAQ,CAAC,WAAW,EAAE,CAC1H,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GACR,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9F,KAAK,CACH,KAAK,UAAU,CAAC,KAAK,UAAU,IAAI,UAAU,UAAU,CAAC,SAAS,IAAI,SAAS,aAAa,UAAU,CAAC,cAAc,IAAI,MAAM,EAAE,CACjI,CAAC;QACJ,CAAC;IACH,CAAC;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,GAAG,OAAO,mBAAmB,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}
+{"version":3,"file":"quota-command.js","sourceRoot":"","sources":["../src/quota-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAEzE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC5C,OAAO,EACL,6BAA6B,EAC7B,4BAA4B,GAC7B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAAgB,EAAE,IAAa;IAChE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,0BAA0B,EAAE,CAAC;QAC7C,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,6BAA6B,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,CAAC;QAC/E,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QACzE,MAAM,4BAA4B,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,YAAY,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE;YACrD,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK;YAChC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,IAAI,CAAC,KAAK,EAAE,EAAE;SACnD,CAAC,CAAC;QACH,MAAM,OAAO,GAAY,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,OAAO,GAAG,cAAc,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAClD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,MAAM,IAAI,KAAK,CAAC,8BAA8B,QAAQ,CAAC,MAAM,IAAI,MAAM,EAAE,CAAC,CAAC;QAC7E,CAAC;QACD,MAAM,KAAK,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAClD,IAAI,IAAI;YAAE,SAAS,CAAC,KAAK,CAAC,CAAC;;YACtB,UAAU,CAAC,KAAK,CAAC,CAAC;QACvB,OAAO,CAAC,CAAC;IACX,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,gBAAgB,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,KAAoD;IACtE,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAChE,KAAK,CAAC,qDAAqD,CAAC,CAAC;QAC7D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;QACvC,KAAK,CACH,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,YAAY,QAAQ,CAAC,MAAM,cAAc,QAAQ,CAAC,SAAS,aAAa,QAAQ,CAAC,WAAW,EAAE,CAC1H,CAAC;QACF,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC9C,MAAM,IAAI,GACR,UAAU,CAAC,UAAU,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,UAAU,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC;YAC9F,KAAK,CACH,KAAK,UAAU,CAAC,KAAK,UAAU,IAAI,UAAU,UAAU,CAAC,SAAS,IAAI,SAAS,aAAa,UAAU,CAAC,cAAc,IAAI,MAAM,EAAE,CACjI,CAAC;QACJ,CAAC;IACH,CAAC;IACD,8EAA8E;IAC9E,2EAA2E;IAC3E,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,IAAI,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;QACxF,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,KAAK,CAAC,GAAG,OAAO,mBAAmB,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/release-command.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release-command.d.ts","sourceRoot":"","sources":["../src/release-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAI5C;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAwDrF"}
+{"version":3,"file":"release-command.d.ts","sourceRoot":"","sources":["../src/release-command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAuB5C;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CA6DrF"}

package/dist/release-command.js

@@ -1,5 +1,25 @@
 import { print, printJson, printUsageError } from "./cli-io.js";
 import { checkName, checkRuntimeUpdate, releaseStats } from "./release.js";
+import { connectDaemonIfRunning } from "./daemon-run.js";
+import { handshakeControlApi } from "./live.js";
+/**
+ * The AUTHORITATIVE running-engine version for `release check` (QA-033a): the
+ * live daemon handshake identity. A read-only check must NEVER boot a daemon,
+ * so a stopped daemon returns null (engine unknown) rather than being silently
+ * replaced by the CLI package version.
+ */
+async function resolveRunningEngineVersion() {
+    try {
+        const conn = await connectDaemonIfRunning();
+        if (!conn)
+            return null;
+        const { engineVersion } = await handshakeControlApi(conn.addr);
+        return engineVersion;
+    }
+    catch {
+        return null;
+    }
+}
 /**
  * `claudexor release <sub>` dispatch, kept out of cli.ts so the top-level
  * switch stays thin (complexity ratchet). Three read-only subcommands:
@@ -31,7 +51,8 @@ export async function releaseCommand(args, json) {
         return 0;
     }
     if (sub === "check") {
-        const check = await checkRuntimeUpdate();
+        const runningEngineVersion = await resolveRunningEngineVersion();
+        const check = await checkRuntimeUpdate({ runningEngineVersion });
         if (json) {
             printJson(check);
         }
@@ -39,14 +60,17 @@ export async function releaseCommand(args, json) {
             print(`engine runtime update check unavailable: ${check.detail}`);
         }
         else if (check.updateAvailable) {
-            print(`engine runtime ${check.latestVersion} available (running ${check.currentVersion}).`);
+            print(`engine runtime ${check.latestVersion} available. ${check.detail}.`);
             if (check.notes)
                 print(`  notes: ${check.notes}`);
-            print("  The macOS app auto-updates its engine in place.");
-            print("  npm installs update via `npm install -g claudexor@latest`.");
+            // QA-033c: honest to what 3.1.0 ships. The macOS app offers an in-app
+            // update flow; npm users update the CLI package themselves. No copy
+            // claims a silent auto-install the running engine cannot perform.
+            print("  The macOS app offers an engine update flow (Settings → check for updates).");
+            print("  npm users update the CLI with `npm install -g claudexor@latest`.");
         }
         else {
-            print(`engine runtime ${check.currentVersion} is current.`);
+            print(`${check.detail}.`);
         }
         return 0;
     }
@@ -59,7 +83,8 @@ export async function releaseCommand(args, json) {
             print("install counter (owner-facing; no telemetry):");
             print(`  GitHub: ${stats.github.detail}`);
             for (const asset of stats.github.perAsset) {
-                print(`    ${asset.downloads}\t${asset.name}`);
+                const tag = asset.appInstaller ? "install" : "tooling";
+                print(`    ${asset.downloads}\t${asset.name}\t(${tag})`);
             }
             print(`  npm: ${stats.npm.detail}`);
         }

package/dist/release-command.js.map

@@ -1 +1 @@
-{"version":3,"file":"release-command.js","sourceRoot":"","sources":["../src/release-command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE3E;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtB,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GACP,CAAC,CAAC,YAAY,KAAK,MAAM;oBACvB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,WAAW,CAAC;gBACpB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,kBAAkB,EAAE,CAAC;QACzC,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC1C,KAAK,CAAC,4CAA4C,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACjC,KAAK,CAAC,kBAAkB,KAAK,CAAC,aAAa,uBAAuB,KAAK,CAAC,cAAc,IAAI,CAAC,CAAC;YAC5F,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAClD,KAAK,CAAC,mDAAmD,CAAC,CAAC;YAC3D,KAAK,CAAC,8DAA8D,CAAC,CAAC;QACxE,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,kBAAkB,KAAK,CAAC,cAAc,cAAc,CAAC,CAAC;QAC9D,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACvD,KAAK,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC1C,KAAK,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;YACjD,CAAC;YACD,KAAK,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,EAAE,4DAA4D,CAAC,CAAC;AAC7F,CAAC"}
+{"version":3,"file":"release-command.js","sourceRoot":"","sources":["../src/release-command.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AACzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;GAKG;AACH,KAAK,UAAU,2BAA2B;IACxC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACvB,MAAM,EAAE,aAAa,EAAE,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC/D,OAAO,aAAa,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,IAAgB,EAAE,IAAa;IAClE,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEtB,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QAC9B,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,oBAAoB,IAAI,IAAI,CAAC,CAAC;YACpC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,MAAM,GAAG,GACP,CAAC,CAAC,YAAY,KAAK,MAAM;oBACvB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,OAAO;wBAC1B,CAAC,CAAC,WAAW;wBACb,CAAC,CAAC,WAAW,CAAC;gBACpB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,oBAAoB,GAAG,MAAM,2BAA2B,EAAE,CAAC;QACjE,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACjE,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;aAAM,IAAI,KAAK,CAAC,MAAM,KAAK,aAAa,EAAE,CAAC;YAC1C,KAAK,CAAC,4CAA4C,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QACpE,CAAC;aAAM,IAAI,KAAK,CAAC,eAAe,EAAE,CAAC;YACjC,KAAK,CAAC,kBAAkB,KAAK,CAAC,aAAa,eAAe,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;YAC3E,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,YAAY,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC;YAClD,sEAAsE;YACtE,oEAAoE;YACpE,kEAAkE;YAClE,KAAK,CAAC,8EAA8E,CAAC,CAAC;YACtF,KAAK,CAAC,oEAAoE,CAAC,CAAC;QAC9E,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;QAC5B,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,IAAI,GAAG,KAAK,OAAO,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,MAAM,YAAY,EAAE,CAAC;QACnC,IAAI,IAAI,EAAE,CAAC;YACT,SAAS,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,+CAA+C,CAAC,CAAC;YACvD,KAAK,CAAC,aAAa,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1C,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBAC1C,MAAM,GAAG,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;gBACvD,KAAK,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,KAAK,CAAC,IAAI,MAAM,GAAG,GAAG,CAAC,CAAC;YAC3D,CAAC;YACD,KAAK,CAAC,UAAU,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,OAAO,CAAC,CAAC;IACX,CAAC;IAED,OAAO,eAAe,CAAC,IAAI,EAAE,4DAA4D,CAAC,CAAC;AAC7F,CAAC"}

package/dist/release.d.ts

@@ -1,3 +1,4 @@
+import { type RuntimeUpdateAuthority, type SignedRuntimeManifest } from "@claudexor/util";
 export type NameAvailability = "free" | "taken" | "unknown";
 export interface NameCheck {
     registry: string;
@@ -18,16 +19,26 @@ export declare const NPM_PACKAGE = "claudexor";
 /** Injectable fetch so the commands are honestly testable with no live network
  * (tests pass a stub; production defaults to the global fetch). */
 export type FetchLike = typeof fetch;
-/** The runtime manifest published beside the closure tarball on each release. */
-export interface RuntimeManifest {
-    version: string;
-    sha256: string;
-    minAppVersion: string;
-    signature: string | null;
-    notes: string | null;
-}
+/** The runtime manifest published beside the closure tarball on each release is
+ * the SIGNED contract from @claudexor/util (D-2). `claudexor release check`
+ * verifies it FAIL-CLOSED against the pinned runtime-update authority: an
+ * unsigned/unknown-key/tampered/malformed manifest degrades to
+ * `source: "unavailable"`, never a false "update available". */
+export type RuntimeManifest = SignedRuntimeManifest;
 export interface RuntimeUpdateCheck {
+    /** The version the update decision compares against: the RUNNING engine when a
+     * daemon handshake resolved it, else the CLI package version (QA-033a). Its
+     * source is disclosed in `runningEngineSource`. */
     currentVersion: string;
+    /** The executing CLI package version — always the `@claudexor/cli` constant,
+     * never relabelled as the running engine. */
+    cliVersion: string;
+    /** The live daemon engine version from the handshake; null when no daemon was
+     * reachable (npm-only user or a stopped daemon). */
+    runningEngineVersion: string | null;
+    /** Where `runningEngineVersion` came from: "handshake" (authoritative live
+     * process identity) or "unavailable" (no daemon reached). */
+    runningEngineSource: "handshake" | "unavailable";
     latestVersion: string | null;
     updateAvailable: boolean;
     minAppVersion: string | null;
@@ -44,14 +55,31 @@ export interface RuntimeUpdateCheck {
  */
 export declare function checkRuntimeUpdate(opts?: {
     fetchImpl?: FetchLike;
+    /** Legacy alias for the resolved running engine version (kept for callers/
+     * tests that pass the running version directly). */
     currentVersion?: string;
+    /** The running engine version resolved from a live daemon handshake; null
+     * means no daemon was reachable. Wins over `currentVersion` when provided. */
+    runningEngineVersion?: string | null;
+    /** TEST-ONLY seam: the pinned runtime-update authority to verify against.
+     * Production callers never pass this — the fail-closed check is always pinned
+     * to RUNTIME_UPDATE_AUTHORITY; tests inject a fixture authority. */
+    authority?: RuntimeUpdateAuthority;
 }): Promise<RuntimeUpdateCheck>;
 export interface AssetDownloads {
     name: string;
     downloads: number;
+    /** Whether this asset counts as an app install under the shared allowlist. */
+    appInstaller: boolean;
 }
 export interface InstallStats {
     github: {
+        /** Honest install count: the app-installer (DMG/ZIP) allowlist sum. This is
+         * the figure the README badge and the metrics workflow also report — the
+         * single shared asset authority (D-15/A-6). */
+        appInstallerDownloads: number | null;
+        /** Raw sum across ALL release assets (installers + tooling). Diagnostic
+         * only; kept so the owner can still see runtime-tarball/SBOM pulls. */
         totalDownloads: number | null;
         perAsset: AssetDownloads[];
         releases: number | null;
@@ -63,8 +91,11 @@ export interface InstallStats {
     };
 }
 /**
- * Owner-facing install counter (D23): GitHub asset download_count summed across
- * releases + the npm last-month downloads point. Read-only, no infra, no ping.
+ * Owner-facing install counter (D23): GitHub release-asset downloads + the npm
+ * last-month downloads point. Read-only, no infra, no ping. The GitHub side runs
+ * through the shared asset authority (packages/cli/src/repo-asset-authority),
+ * so the app-installer figure here is byte-for-byte the same policy the daily
+ * metrics workflow uses — one allowlist, no drift (D-15 reuse-lock, audit A-6).
  * A failed source reports null + a reason — never a fabricated zero.
  */
 export declare function releaseStats(opts?: {

package/dist/release.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../src/release.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5D,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,gBAAgB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAkClE;AAoBD,mEAAmE;AACnE,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,uEAAuE;AACvE,eAAO,MAAM,WAAW,cAAc,CAAC;AAEvC;mEACmE;AACnE,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,iFAAiF;AACjF,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;kFAC8E;IAC9E,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAkCD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAC9C,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAwD9B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE;QACN,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,cAAc,EAAE,CAAC;QAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAgE1F"}
+{"version":3,"file":"release.d.ts","sourceRoot":"","sources":["../src/release.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC3B,MAAM,iBAAiB,CAAC;AAGzB,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,CAAC;AAC5D,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,gBAAgB,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAWD;;;;;GAKG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,EAAE,CAAC,CAkClE;AAoBD,mEAAmE;AACnE,eAAO,MAAM,YAAY,sBAAsB,CAAC;AAChD,uEAAuE;AACvE,eAAO,MAAM,WAAW,cAAc,CAAC;AAEvC;mEACmE;AACnE,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC;;;;gEAIgE;AAChE,MAAM,MAAM,eAAe,GAAG,qBAAqB,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC;;uDAEmD;IACnD,cAAc,EAAE,MAAM,CAAC;IACvB;iDAC6C;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB;wDACoD;IACpD,oBAAoB,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC;iEAC6D;IAC7D,mBAAmB,EAAE,WAAW,GAAG,aAAa,CAAC;IACjD,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB;kFAC8E;IAC9E,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC;IACjC,MAAM,EAAE,MAAM,CAAC;CAChB;AAoCD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,CAAC,EAAE;IAC9C,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB;wDACoD;IACpD,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB;kFAC8E;IAC9E,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC;;wEAEoE;IACpE,SAAS,CAAC,EAAE,sBAAsB,CAAC;CACpC,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA4F9B;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,8EAA8E;IAC9E,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE;QACN;;uDAE+C;QAC/C,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;QACrC;+EACuE;QACvE,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;QAC9B,QAAQ,EAAE,cAAc,EAAE,CAAC;QAC3B,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;IACF,GAAG,EAAE;QACH,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QACzB,MAAM,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,SAAS,CAAA;CAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAuD1F"}

package/dist/release.js

@@ -1,4 +1,5 @@
-import { CLAUDEXOR_VERSION } from "@claudexor/util";
+import { CLAUDEXOR_VERSION, RUNTIME_MANIFEST_ASSET_NAME, RUNTIME_UPDATE_AUTHORITY, verifyRuntimeManifest, } from "@claudexor/util";
+import { computeReleaseAssetTotals } from "./repo-asset-authority.js";
 async function head(url) {
     try {
         const res = await fetch(url, { method: "GET" });
@@ -79,23 +80,18 @@ function compareSemver(a, b) {
             return pa[i] - pb[i];
     return 0;
 }
-function parseRuntimeManifest(value) {
-    if (typeof value !== "object" || value === null)
-        return null;
-    const record = value;
-    if (!isSemver(record.version))
-        return null;
-    if (typeof record.sha256 !== "string" || !/^[0-9a-f]{64}$/.test(record.sha256))
-        return null;
-    if (!isSemver(record.minAppVersion))
-        return null;
-    return {
-        version: record.version,
-        sha256: record.sha256,
-        minAppVersion: record.minAppVersion,
-        signature: typeof record.signature === "string" ? record.signature : null,
-        notes: typeof record.notes === "string" ? record.notes : null,
-    };
+/** Fail-closed parse: a manifest is trusted ONLY when its Ed25519 signature
+ * verifies against the pinned runtime-update authority (D-2). The second return
+ * value is an honest refusal reason for the "unavailable" detail. */
+function parseRuntimeManifest(value, authority) {
+    const verdict = verifyRuntimeManifest(value, authority);
+    if (!verdict.ok) {
+        return {
+            manifest: null,
+            reason: `signature/shape check failed: ${verdict.reasons.join("; ")}`,
+        };
+    }
+    return { manifest: value, reason: "" };
 }
 /**
  * Read the latest release's `runtime-manifest.json` and compare it to the
@@ -104,9 +100,25 @@ function parseRuntimeManifest(value) {
  */
 export async function checkRuntimeUpdate(opts) {
     const fetchImpl = opts?.fetchImpl ?? fetch;
-    const currentVersion = opts?.currentVersion ?? CLAUDEXOR_VERSION;
+    const authority = opts?.authority ?? RUNTIME_UPDATE_AUTHORITY;
+    const cliVersion = CLAUDEXOR_VERSION;
+    // The RUNNING engine identity is authoritative (QA-033a): an explicit
+    // handshake result wins; the legacy `currentVersion` opt is treated as the
+    // running version; absent both, the engine is unknown (no daemon reached).
+    const runningEngineVersion = opts?.runningEngineVersion !== undefined
+        ? opts.runningEngineVersion
+        : (opts?.currentVersion ?? null);
+    const runningEngineSource = runningEngineVersion !== null ? "handshake" : "unavailable";
+    // The comparison never invents a running engine: when the daemon is
+    // unreachable we compare the CLI package (the honest npm-user signal) and
+    // label it as such, never as "running ... is current".
+    const comparisonVersion = runningEngineVersion ?? cliVersion;
+    const currentVersion = comparisonVersion;
     const unavailable = (detail) => ({
         currentVersion,
+        cliVersion,
+        runningEngineVersion,
+        runningEngineSource,
         latestVersion: null,
         updateAvailable: false,
         minAppVersion: null,
@@ -122,9 +134,9 @@ export async function checkRuntimeUpdate(opts) {
         if (!res.ok)
             return unavailable(`GitHub releases API returned HTTP ${res.status}`);
         const body = (await res.json());
-        const asset = (body.assets ?? []).find((a) => a.name === "runtime-manifest.json");
+        const asset = (body.assets ?? []).find((a) => a.name === RUNTIME_MANIFEST_ASSET_NAME);
         if (!asset?.browser_download_url) {
-            return unavailable("latest release has no runtime-manifest.json asset yet");
+            return unavailable(`latest release has no ${RUNTIME_MANIFEST_ASSET_NAME} asset yet`);
         }
         manifestUrl = asset.browser_download_url;
     }
@@ -136,36 +148,54 @@ export async function checkRuntimeUpdate(opts) {
         const res = await fetchImpl(manifestUrl, {
             headers: { "User-Agent": GH_HEADERS["User-Agent"] },
         });
-        if (!res.ok)
-            return unavailable(`runtime-manifest.json download returned HTTP ${res.status}`);
-        manifest = parseRuntimeManifest(await res.json());
+        if (!res.ok) {
+            return unavailable(`${RUNTIME_MANIFEST_ASSET_NAME} download returned HTTP ${res.status}`);
+        }
+        const parsed = parseRuntimeManifest(await res.json(), authority);
+        // FAIL-CLOSED (D-2): an unverified manifest is never an "available update".
+        if (!parsed.manifest)
+            return unavailable(`${RUNTIME_MANIFEST_ASSET_NAME} ${parsed.reason}`);
+        manifest = parsed.manifest;
     }
     catch (error) {
-        return unavailable(`could not download runtime-manifest.json (${describeError(error)})`);
+        return unavailable(`could not download ${RUNTIME_MANIFEST_ASSET_NAME} (${describeError(error)})`);
     }
-    if (!manifest)
-        return unavailable("runtime-manifest.json is malformed");
-    const updateAvailable = isSemver(currentVersion) && compareSemver(manifest.version, currentVersion) > 0;
+    const updateAvailable = isSemver(comparisonVersion) && compareSemver(manifest.version, comparisonVersion) > 0;
+    // Honest copy that never calls the CLI package the running engine (QA-033a):
+    // when the daemon is reachable the verdict is about the running engine; when
+    // it is not, it is explicitly about the CLI package, engine unknown.
+    const detail = runningEngineVersion !== null
+        ? updateAvailable
+            ? `engine runtime ${manifest.version} is available (running ${runningEngineVersion}; CLI ${cliVersion})`
+            : `running engine runtime ${runningEngineVersion} is current`
+        : updateAvailable
+            ? `engine runtime ${manifest.version} is available (engine not running; CLI package ${cliVersion})`
+            : `CLI package ${cliVersion} matches the latest engine runtime (engine not running)`;
     return {
         currentVersion,
+        cliVersion,
+        runningEngineVersion,
+        runningEngineSource,
         latestVersion: manifest.version,
         updateAvailable,
         minAppVersion: manifest.minAppVersion,
         notes: manifest.notes,
         source: "github",
-        detail: updateAvailable
-            ? `engine runtime ${manifest.version} is available (running ${currentVersion})`
-            : `running engine runtime ${currentVersion} is current`,
+        detail,
     };
 }
 /**
- * Owner-facing install counter (D23): GitHub asset download_count summed across
- * releases + the npm last-month downloads point. Read-only, no infra, no ping.
+ * Owner-facing install counter (D23): GitHub release-asset downloads + the npm
+ * last-month downloads point. Read-only, no infra, no ping. The GitHub side runs
+ * through the shared asset authority (packages/cli/src/repo-asset-authority),
+ * so the app-installer figure here is byte-for-byte the same policy the daily
+ * metrics workflow uses — one allowlist, no drift (D-15 reuse-lock, audit A-6).
  * A failed source reports null + a reason — never a fabricated zero.
  */
 export async function releaseStats(opts) {
     const fetchImpl = opts?.fetchImpl ?? fetch;
     const github = {
+        appInstallerDownloads: null,
         totalDownloads: null,
         perAsset: [],
         releases: null,
@@ -180,22 +210,14 @@ export async function releaseStats(opts) {
         }
         else {
             const releases = (await res.json());
-            const perAsset = new Map();
-            let total = 0;
-            for (const release of releases) {
-                for (const asset of release.assets ?? []) {
-                    const count = typeof asset.download_count === "number" ? asset.download_count : 0;
-                    const name = typeof asset.name === "string" ? asset.name : "(unnamed)";
-                    perAsset.set(name, (perAsset.get(name) ?? 0) + count);
-                    total += count;
-                }
-            }
-            github.totalDownloads = total;
+            const totals = computeReleaseAssetTotals(releases);
+            github.appInstallerDownloads = totals.appInstallerDownloads;
+            github.totalDownloads = totals.rawTotalDownloads;
             github.releases = releases.length;
-            github.perAsset = [...perAsset.entries()]
-                .map(([name, downloads]) => ({ name, downloads }))
-                .sort((a, b) => b.downloads - a.downloads);
-            github.detail = `${total} asset downloads across ${releases.length} releases`;
+            github.perAsset = totals.perAsset;
+            github.detail =
+                `${totals.appInstallerDownloads} app-installer downloads ` +
+                    `(${totals.rawTotalDownloads} raw across all assets) in ${releases.length} releases`;
         }
     }
     catch (error) {