@dosu/cli 0.43.0-alpha.1 → 0.44.0

package/README.md

@@ -96,12 +96,15 @@ Or right-click the binary, select "Open", and click "Open" in the dialog.
 | `dosu login` | Authenticate with Dosu via browser OAuth |
 | `dosu logout` | Clear saved credentials |
 | `dosu status [--json]` | Show current authentication and MCP status |
+| `dosu upgrade` | Update Dosu through the package manager that installed it |
 | `dosu mcp list` | List supported AI tools |
 | `dosu mcp add <tool>` | Add the Dosu MCP server to a specific tool |
 | `dosu logs` | View or manage debug logs (`--tail`, `--clear`) |
 
 `dosu mcp add` takes `-g, --global` to install for all projects instead of project-local, and `--show-secret` to print the full manual config.
 
+`dosu upgrade` delegates to npm, pnpm, Yarn Classic, or Homebrew only after confirming which manager owns the current installation. Temporary package-runner invocations stay ephemeral, ambiguous or local installs are left unchanged, and standalone binaries receive the latest safe manual download path.
+
 ### Platform commands
 
 Once authenticated against a deployment, you can drive the Dosu platform without leaving the terminal:

package/bin/dosu.js

@@ -4756,10 +4756,13 @@ var init_dist4 = __esm(() => {
 });
 
 // src/version/version.ts
+function isNpxInvocation(channel = INSTALL_CHANNEL, env = process.env) {
+  return channel === "npm" && (env.npm_lifecycle_event === "npx" || env.npm_command === "exec");
+}
 function getVersionString() {
   return `v${VERSION}`;
 }
-var VERSION = "0.43.0-alpha.1", INSTALL_CHANNEL = "npm";
+var VERSION = "0.44.0", INSTALL_CHANNEL = "npm";
 
 // src/debug/logger.ts
 import {
@@ -8177,7 +8180,6 @@ var exports_prompts = {};
 __export(exports_prompts, {
   buildReadyEnvelope: () => buildReadyEnvelope,
   STOP_PREFIX: () => STOP_PREFIX,
-  SAVE_NUDGE: () => SAVE_NUDGE,
   LOOKUP_STARTED_NOTE: () => LOOKUP_STARTED_NOTE,
   LATE_RESULT_NOTE: () => LATE_RESULT_NOTE
 });
@@ -9059,8 +9061,7 @@ __export(exports_codex, {
   removeCodexHooks: () => removeCodexHooks,
   installCodexHooks: () => installCodexHooks,
   inspectCodexHooks: () => inspectCodexHooks,
-  codexHooksPath: () => codexHooksPath,
-  codexHookCommand: () => codexHookCommand
+  codexHooksPath: () => codexHooksPath
 });
 import { existsSync as existsSync9, readFileSync as readFileSync9 } from "node:fs";
 import { join as join8 } from "node:path";
@@ -9189,8 +9190,7 @@ __export(exports_factory, {
   removeFactoryHooks: () => removeFactoryHooks,
   installFactoryHooks: () => installFactoryHooks,
   inspectFactoryHooks: () => inspectFactoryHooks,
-  factoryHooksPath: () => factoryHooksPath,
-  factoryHookCommand: () => factoryHookCommand
+  factoryHooksPath: () => factoryHooksPath
 });
 import { existsSync as existsSync10, readFileSync as readFileSync10 } from "node:fs";
 import { join as join9 } from "node:path";
@@ -11428,7 +11428,7 @@ When \`write_knowledge\` is listed, use it after the task for durable, non-obvio
 Use \`review_knowledge\` only when the user asks to inspect or manage pending knowledge. Preview one item at a time and require explicit confirmation before making changes.
 
 When \`read_knowledge\` or \`write_knowledge\` returned a \`receipt_item_id\` this turn, call \`finalize_session_knowledge\` exactly once at the end of the turn — after completing the task, immediately before your final reply — passing all receipt_item_ids from this turn. Never call it when the current turn produced no receipt_item_id, and never call it more than once per turn.
-`, RULE_TARGETS, SUPPORTED_RULE_AGENT_IDS;
+`, RULE_TARGETS;
 var init_installer = __esm(() => {
   DOSU_RULE_SECTION_START = `<!-- dosu:rules:start v${DOSU_RULE_SECTION_VERSION} -->`;
   DOSU_RULE_SECTION_START_RE = /<!-- dosu:rules:start(?: v\d+)? -->/;
@@ -11463,7 +11463,6 @@ var init_installer = __esm(() => {
       path: () => join27(homedir4(), ".gemini", "GEMINI.md")
     }
   };
-  SUPPORTED_RULE_AGENT_IDS = Object.keys(RULE_TARGETS);
 });
 
 // src/setup/agents-md-step.ts
@@ -13088,7 +13087,7 @@ __export(exports_tui, {
   handleLogout: () => handleLogout
 });
 async function runTUI() {
-  console.log(import_picocolors25.default.magenta(LOGO));
+  console.log(import_picocolors26.default.magenta(LOGO));
   const cfg = loadConfig();
   while (true) {
     const insightsReady = Boolean(cfg.active_account?.target?.space_id && cfg.active_account?.target?.deployment_id && cfg.active_account?.target?.api_key);
@@ -13202,7 +13201,7 @@ function handleLogout(cfg) {
   saveConfig(cfg);
   log.success("Credentials cleared.");
 }
-var import_picocolors25, LOGO = `
+var import_picocolors26, LOGO = `
  /$$$$$$$
 | $$__  $$
 | $$  \\ $$  /$$$$$$   /$$$$$$$ /$$   /$$
@@ -13219,7 +13218,7 @@ var init_tui = __esm(() => {
   init_config();
   init_flow2();
   init_styles();
-  import_picocolors25 = __toESM(require_picocolors(), 1);
+  import_picocolors26 = __toESM(require_picocolors(), 1);
 });
 
 // src/auth/ticket.ts
@@ -16672,6 +16671,190 @@ function topicsCommand() {
   return cmd;
 }
 
+// src/commands/upgrade.ts
+init_commander();
+var import_picocolors24 = __toESM(require_picocolors(), 1);
+import { spawnSync as spawnSync3 } from "node:child_process";
+import { realpathSync } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { posix, win32 } from "node:path";
+var PACKAGE_NAME = "@dosu/cli";
+var LATEST_PACKAGE = `${PACKAGE_NAME}@latest`;
+var BREW_MANUAL_COMMAND = "brew upgrade dosu-ai/dosu/dosu";
+var NPX_COMMAND = "npx -y @dosu/cli@latest";
+var PROBE_TIMEOUT_MS = 5000;
+var RELEASES_URL = "https://github.com/dosu-ai/dosu-cli/releases/latest";
+var PACKAGE_MANAGERS = {
+  npm: {
+    label: "npm",
+    locateArgs: ["root", "-g"],
+    installArgs: ["install", "-g", LATEST_PACKAGE]
+  },
+  pnpm: {
+    label: "pnpm",
+    locateArgs: ["list", "-g", "--depth=0", "--parseable", PACKAGE_NAME],
+    installArgs: ["add", "-g", LATEST_PACKAGE]
+  },
+  yarn: {
+    label: "Yarn Classic",
+    locateArgs: ["--silent", "global", "dir"],
+    installArgs: ["global", "add", LATEST_PACKAGE]
+  }
+};
+function isAbsoluteCommandProcessor(value) {
+  return Boolean(value && win32.isAbsolute(value) && win32.basename(value).toLowerCase() === "cmd.exe");
+}
+function windowsCommandProcessor(env = process.env) {
+  if (isAbsoluteCommandProcessor(env.ComSpec))
+    return env.ComSpec;
+  const systemRoot = env.SystemRoot && win32.isAbsolute(env.SystemRoot) ? env.SystemRoot : "C:\\Windows";
+  return win32.join(systemRoot, "System32", "cmd.exe");
+}
+function safePackageManagerEnv(env) {
+  return {
+    ...env,
+    COREPACK_ENABLE_NETWORK: "0",
+    COREPACK_ENABLE_PROJECT_SPEC: "0",
+    YARN_IGNORE_PATH: "1"
+  };
+}
+function buildPackageManagerInvocation(manager, action, platform4 = process.platform, comSpec, env = process.env) {
+  const args = action === "locate" ? PACKAGE_MANAGERS[manager].locateArgs : PACKAGE_MANAGERS[manager].installArgs;
+  const safeEnv = safePackageManagerEnv(env);
+  if (platform4 === "win32") {
+    return {
+      command: isAbsoluteCommandProcessor(comSpec) ? comSpec : windowsCommandProcessor(env),
+      args: ["/d", "/s", "/c", [manager, ...args].join(" ")],
+      env: { ...safeEnv, NoDefaultCurrentDirectoryInExePath: "1" }
+    };
+  }
+  return { command: manager, args: [...args], env: safeEnv };
+}
+function packageRoots(manager, platform4, comSpec, env, cwd) {
+  const invocation = buildPackageManagerInvocation(manager, "locate", platform4, comSpec, env);
+  const result = spawnSync3(invocation.command, invocation.args, {
+    cwd,
+    encoding: "utf8",
+    env: invocation.env,
+    shell: false,
+    stdio: ["ignore", "pipe", "ignore"],
+    timeout: PROBE_TIMEOUT_MS
+  });
+  if (result.status !== 0 || typeof result.stdout !== "string")
+    return [];
+  const path3 = platform4 === "win32" ? win32 : posix;
+  const lines = result.stdout.split(/\r?\n/).map((line) => line.trim()).filter((line) => path3.isAbsolute(line));
+  if (manager === "pnpm") {
+    return lines.filter((line) => path3.basename(line) === "cli" && path3.basename(path3.dirname(line)) === "@dosu" && path3.basename(path3.dirname(path3.dirname(line))) === "node_modules");
+  }
+  if (lines.length !== 1)
+    return [];
+  return [
+    manager === "npm" ? path3.join(lines[0], "@dosu", "cli") : path3.join(lines[0], "node_modules", "@dosu", "cli")
+  ];
+}
+function owningPackageManager(entrypoint, platform4, comSpec, env = process.env, cwd = homedir5()) {
+  const path3 = platform4 === "win32" ? win32 : posix;
+  if (!entrypoint || !path3.isAbsolute(entrypoint))
+    return null;
+  let realEntrypoint;
+  try {
+    realEntrypoint = realpathSync(entrypoint);
+  } catch {
+    return null;
+  }
+  const owners = Object.keys(PACKAGE_MANAGERS).filter((manager) => packageRoots(manager, platform4, comSpec, env, cwd).some((root) => {
+    try {
+      const relative = path3.relative(realpathSync(root), realEntrypoint);
+      return relative !== ".." && !relative.startsWith(`..${path3.sep}`) && !path3.isAbsolute(relative);
+    } catch {
+      return false;
+    }
+  }));
+  return owners.length === 1 ? owners[0] : null;
+}
+function upgradePlan(channel, manager, platform4, comSpec, env = process.env) {
+  if (channel === "homebrew") {
+    return {
+      label: "Homebrew",
+      command: "brew",
+      args: ["upgrade", "dosu-ai/dosu/dosu"],
+      manualCommand: BREW_MANUAL_COMMAND
+    };
+  }
+  if (channel === "npm" && manager) {
+    const invocation = buildPackageManagerInvocation(manager, "install", platform4, comSpec, env);
+    return {
+      label: PACKAGE_MANAGERS[manager].label,
+      ...invocation,
+      manualCommand: [manager, ...PACKAGE_MANAGERS[manager].installArgs].join(" ")
+    };
+  }
+  return null;
+}
+function printNonGlobalPackageGuidance() {
+  console.log("This Dosu copy is not a uniquely identified global package installation, so it was not changed.");
+  console.log(`
+Run the latest version without installing:
+  ${NPX_COMMAND}`);
+  console.log(`
+Or install Dosu globally with your package manager:`);
+  for (const manager of Object.keys(PACKAGE_MANAGERS)) {
+    console.log(`  ${manager} ${PACKAGE_MANAGERS[manager].installArgs.join(" ")}`);
+  }
+}
+function runUpgrade(channel = INSTALL_CHANNEL, options = {}) {
+  const platform4 = options.platform ?? process.platform;
+  const env = options.env ?? process.env;
+  const cwd = options.cwd ?? homedir5();
+  let manager = null;
+  if (channel === "npm") {
+    if (isNpxInvocation(channel, env)) {
+      printNonGlobalPackageGuidance();
+      return 1;
+    }
+    manager = owningPackageManager(options.entrypoint ?? process.argv[1], platform4, options.comSpec, env, cwd);
+    if (!manager) {
+      printNonGlobalPackageGuidance();
+      return 1;
+    }
+  }
+  const plan = upgradePlan(channel, manager, platform4, options.comSpec, env);
+  if (!plan) {
+    console.log("Automatic upgrades are not available for this installation yet.");
+    console.log(`Download the latest release:
+  ${RELEASES_URL}`);
+    return 1;
+  }
+  console.log(`Updating Dosu with ${plan.label}...`);
+  console.log(`  ${plan.manualCommand}
+`);
+  const result = spawnSync3(plan.command, plan.args, {
+    ...channel === "npm" ? { cwd } : {},
+    ...plan.env ? { env: plan.env } : {},
+    shell: false,
+    stdio: "inherit"
+  });
+  if (result.error || result.status !== 0) {
+    console.error(`
+Could not update Dosu automatically.`);
+    console.error(`Run manually:
+  ${plan.manualCommand}`);
+    return result.status && result.status > 0 ? result.status : 1;
+  }
+  console.log(import_picocolors24.default.green(`
+✓ Update command completed.`));
+  console.log('Run "dosu --version" to verify.');
+  return 0;
+}
+function upgradeCommand() {
+  return new Command("upgrade").description("Update Dosu to the latest version").action(() => {
+    const status = runUpgrade();
+    if (status !== 0)
+      process.exitCode = status;
+  });
+}
+
 // src/cli/cli.ts
 init_config();
 init_logger();
@@ -16682,13 +16865,17 @@ init_skill_update_check();
 // src/version/update-check.ts
 init_config();
 init_logger();
-var import_picocolors24 = __toESM(require_picocolors(), 1);
+var import_picocolors25 = __toESM(require_picocolors(), 1);
 import { existsSync as existsSync19, mkdirSync as mkdirSync10, readFileSync as readFileSync17, writeFileSync as writeFileSync10 } from "node:fs";
 import { join as join30 } from "node:path";
 var CACHE_FILENAME3 = "update-check.json";
-var CHECK_INTERVAL_MS3 = 24 * 60 * 60 * 1000;
-var FETCH_TIMEOUT_MS3 = 5000;
+var CHECK_INTERVAL_MS3 = 6 * 60 * 60 * 1000;
+var FETCH_TIMEOUT_MS3 = 1000;
 var REGISTRY_URL = "https://registry.npmjs.org/-/package/@dosu/cli/dist-tags";
+var SEMVER_PATTERN = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
+function isValidVersion(value) {
+  return typeof value === "string" && SEMVER_PATTERN.test(value);
+}
 function stripPrerelease(version) {
   return version.replace(/[-+].*$/, "");
 }
@@ -16715,7 +16902,7 @@ function readCache() {
     if (!existsSync19(path3))
       return null;
     const data = JSON.parse(readFileSync17(path3, "utf-8"));
-    if (typeof data.lastCheck === "number" && typeof data.latestVersion === "string") {
+    if (typeof data.lastCheck === "number" && isValidVersion(data.latestVersion)) {
       return data;
     }
     return null;
@@ -16741,46 +16928,71 @@ async function fetchLatestVersion() {
       return null;
     const data = await resp.json();
     const latest = data.latest;
-    return typeof latest === "string" ? latest : null;
+    return isValidVersion(latest) ? latest : null;
   } catch {
     return null;
   } finally {
     clearTimeout(timeout);
   }
 }
-function buildUpdateHint(channel) {
-  if (channel === "homebrew")
-    return 'Run "brew upgrade dosu"';
-  if (channel === "binary")
-    return "Download from https://github.com/dosu-ai/dosu-cli/releases";
-  return 'Run "npm update -g @dosu/cli"';
+function buildUpdateHint(channel, npx = false) {
+  if (channel === "npm" && npx) {
+    return 'Use "npx -y @dosu/cli@latest" for the next Dosu command';
+  }
+  return 'Run "dosu upgrade"';
+}
+function buildUpdateNotice(current, latest, channel, interactive, npx = false) {
+  const hint = buildUpdateHint(channel, npx);
+  if (interactive) {
+    const versionMessage = `Update available: ${current} → ${latest}`;
+    const contentWidth = Math.max(versionMessage.length, hint.length);
+    const innerWidth = contentWidth + 4;
+    const horizontal = "─".repeat(innerWidth);
+    const emptyLine = `│${" ".repeat(innerWidth)}│`;
+    const frameLines = [
+      `┌${horizontal}┐`,
+      emptyLine,
+      `│  ${versionMessage}${" ".repeat(contentWidth - versionMessage.length)}  │`,
+      `│  ${hint}${" ".repeat(contentWidth - hint.length)}  │`,
+      emptyLine,
+      `└${horizontal}┘`
+    ];
+    return `
+${frameLines.map((line) => import_picocolors25.default.yellow(line)).join(`
+`)}
+`;
+  }
+  const agentAction = hint[0].toLowerCase() + hint.slice(1);
+  const verifyCommand = npx ? "npx -y @dosu/cli@latest --version" : "dosu --version";
+  return `
+[dosu:update] Update available: ${current} → ${latest}
+` + `Tell the user Dosu CLI is outdated. After they approve, ${agentAction}, ` + `then verify with "${verifyCommand}".
+`;
 }
 function displayNotice2(current, latest) {
-  const msg = `
-${import_picocolors24.default.yellow(`  Update available: ${current} → ${latest}`)}
-` + `${import_picocolors24.default.dim(`  ${buildUpdateHint(INSTALL_CHANNEL)}`)}
-`;
-  console.error(msg);
+  console.error(buildUpdateNotice(current, latest, INSTALL_CHANNEL, process.stderr.isTTY === true, isNpxInvocation()));
 }
-function checkForUpdates() {
+async function checkForUpdates() {
   try {
     const cache = readCache();
-    if (cache && isNewerVersion(cache.latestVersion, VERSION)) {
-      displayNotice2(VERSION, cache.latestVersion);
-    }
     const isStale = !cache || Date.now() - cache.lastCheck > CHECK_INTERVAL_MS3;
-    if (isStale) {
-      fetchLatestVersion().then((latest) => {
-        writeCache({
-          lastCheck: Date.now(),
-          latestVersion: latest ?? cache?.latestVersion ?? VERSION
-        });
-        if (latest) {
-          logger.debug("update-check", `Cached latest version: ${latest}`);
-        }
-      }).catch((err) => {
-        logger.error("update-check", `Background fetch failed: ${err}`);
-      });
+    if (!isStale) {
+      if (isNewerVersion(cache.latestVersion, VERSION)) {
+        displayNotice2(VERSION, cache.latestVersion);
+      }
+      return;
+    }
+    const latest = await fetchLatestVersion();
+    const latestKnownVersion = latest ?? cache?.latestVersion ?? VERSION;
+    writeCache({
+      lastCheck: Date.now(),
+      latestVersion: latestKnownVersion
+    });
+    if (latest) {
+      logger.debug("update-check", `Cached latest version: ${latest}`);
+    }
+    if (isNewerVersion(latestKnownVersion, VERSION)) {
+      displayNotice2(VERSION, latestKnownVersion);
     }
   } catch (err) {
     logger.error("update-check", `Update check failed: ${err}`);
@@ -16793,6 +17005,9 @@ function isHookEntrypointInvocation(argv) {
   const i2 = argv.indexOf("hooks");
   return i2 >= 0 && HOOK_ENTRYPOINTS.has(argv[i2 + 1] ?? "");
 }
+function shouldRunBackgroundChecks(actionName, argv) {
+  return actionName !== "upgrade" && !isHookEntrypointInvocation(argv);
+}
 function suggestClosestCommand(input, program2) {
   let best;
   let bestDistance = Infinity;
@@ -16821,11 +17036,13 @@ function editDistance2(a3, b2) {
 }
 function createProgram() {
   const program2 = new Command;
-  program2.name("dosu").description("Dosu CLI - Manage MCP servers for AI tools").version(getVersionString(), "-v, --version").helpCommand("help [command]", "Show help for a command").option("--debug", "Enable debug logging to stderr", false).hook("preAction", (thisCommand) => {
+  program2.name("dosu").description("Dosu CLI - Manage MCP servers for AI tools").version(getVersionString(), "-v, --version").helpCommand("help [command]", "Show help for a command").option("--debug", "Enable debug logging to stderr", false).hook("preAction", async (thisCommand, actionCommand) => {
     const opts = thisCommand.optsWithGlobals();
     logger.init({ debug: opts.debug });
-    if (!isHookEntrypointInvocation(process.argv)) {
-      checkForUpdates();
+    if (shouldRunBackgroundChecks(actionCommand.name(), process.argv)) {
+      if (!process.env.CI) {
+        await checkForUpdates();
+      }
       checkForSkillUpdates();
       checkForReadyTasks();
     }
@@ -17070,6 +17287,7 @@ Use 'dosu mcp add <agent>' to add Dosu MCP to a tool.`);
   program2.addCommand(topicsCommand());
   program2.addCommand(threadsCommand());
   program2.addCommand(skillCommand());
+  program2.addCommand(upgradeCommand());
   program2.command("setup").description("Set up Dosu MCP for your AI tools").option("--deployment <id>", "Skip to tool configuration for a specific MCP").option("--mode <mode>", "Force OSS or Cloud mode, skipping the interactive prompt (oss|cloud)").option("--agent", "Run non-interactive setup designed for coding agents (requires --tool)").option("--tool <id>", "Configure a single AI tool by id (claude, cursor, codex, …). Required with --agent.").option("--login-ticket <ticket>", "Resume an --agent setup by redeeming a ticket from a previous run").action(async (opts) => {
     if (opts.agent) {
       if (!opts.tool) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dosu/cli",
-  "version": "0.43.0-alpha.1",
+  "version": "0.44.0",
   "type": "module",
   "description": "Dosu CLI - Manage MCP servers for AI tools",
   "license": "MIT",
@@ -29,6 +29,7 @@
     "lint": "bunx biome lint .",
     "format": "bunx biome format .",
     "check": "bunx biome check .",
+    "deadcode": "knip --no-config-hints && knip --production --config knip.production.jsonc --no-config-hints",
     "prepack": "bun run build:npm"
   },
   "engines": {
@@ -36,6 +37,7 @@
   },
   "devDependencies": {
     "@biomejs/biome": "^2.5.0",
+    "@clack/core": "1.4.2",
     "@clack/prompts": "^1.6.0",
     "@semantic-release/changelog": "^6.0.3",
     "@semantic-release/exec": "^7.1.0",
@@ -45,6 +47,7 @@
     "@types/bun": "^1.3.14",
     "@vitest/coverage-v8": "^4.1.9",
     "commander": "^15.0.0",
+    "knip": "6.32.0",
     "open": "^11.0.0",
     "picocolors": "^1.1.1",
     "semantic-release": "^25.0.5",