@duetso/agent 0.1.62 → 0.1.64

package/README.md

@@ -501,11 +501,13 @@ import { TurnRunner } from "@duetso/agent";
 
 const turnRunner = new TurnRunner({
   model: "opus-4.7",
-  memoryDbPath: false, // Keep observational memory in process only.
+  memoryDbPath: false, // Disables observational memory and compaction.
 });
 ```
 
-By default, the CLI stores durable observations in `~/.duet/memory.db`; run it with `--incognito` (or `-i`) to keep observational memory in process only. Programmatic callers can pass `memoryDbPath: false` or provide a custom `memoryDbPath`. The CLI's `SessionManager` is a convenience layer that stores session snapshots under `~/.duet/sessions`, but the runner owns memory hydration, pi-turn observation/reflection, compaction, and observation persistence.
+By default, the CLI stores durable observations in `~/.duet/memory.db`; run it with `--incognito` (or `-i`) to set `memoryDbPath: false`, which disables observational memory and compaction for that session. Programmatic callers can pass `memoryDbPath: false` or provide a custom `memoryDbPath`. The CLI's `SessionManager` is a convenience layer that stores session snapshots under `~/.duet/sessions`, but the runner owns memory hydration, pi-turn observation/reflection, compaction, and observation persistence.
+
+**We strongly recommend running with a `memoryDbPath`, which is the default.** Compaction is implemented as part of the observational memory pipeline: raw transcript content is replaced by observations/reflections that the observer and reflector write to the durable store. Without a database, the runner skips that pipeline entirely — there is no compaction, the transcript grows unbounded against the raw model context window, and long sessions will eventually hit a provider context-length error. `memoryDbPath: false` is appropriate for short-lived scripts, tests, and incognito runs that stay well under the model window.
 
 You can also resume directly from saved state. The runner owns state
 internally after `start`, so resumed state is handed in through the start

package/dist/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@duetso/agent",
-    "version": "0.1.62",
+    "version": "0.1.64",
     "description": "An opinionated full-stack agent turn runner with native memories, interrupts, and multi-agent orchestration",
     "keywords": [
         "agent",

package/dist/src/cli/auto-upgrade.d.ts

@@ -0,0 +1,147 @@
+import { type ChildProcess, type SpawnOptions } from "node:child_process";
+import { type PackageManager } from "./package-manager.js";
+/**
+ * Why this exists: the CLI ships several versions per hour. Manual `duet
+ * upgrade` lags behind, so each launch probes the registry and — when a
+ * newer version exists — runs the package manager's global install in the
+ * background while the user is already using the TUI. The next launch is
+ * then already on latest.
+ *
+ * Concurrency safety:
+ *   - The package manager mutates the global install path in place. Already-
+ *     running CLI processes do not re-read those files, so they are unaffected.
+ *   - A CLI that *starts* mid-install could see partial files. We minimize
+ *     that window with an exclusive lockfile so only one process upgrades at
+ *     a time; others fall through and observe whatever state currently exists.
+ *   - Stale locks (worker crash, OS kill) older than STALE_LOCK_MS are
+ *     reclaimed so a missed unlink does not permanently disable upgrades.
+ *
+ * Status stream: `runAutoUpgrade` emits each transition through `onStatus`
+ * so the TUI can render a live "Checking… / Upgrading… / Upgraded, restart"
+ * line in the header. The returned promise resolves once the final state
+ * is reached.
+ */
+/** Env var users set to disable the auto-upgrade entirely. */
+export declare const NO_AUTO_UPGRADE_ENV = "DUET_NO_AUTO_UPGRADE";
+/**
+ * Live status stream emitted while the upgrade runs. Designed so the TUI
+ * can render one line that mutates in place; each variant carries the
+ * fields needed to phrase the line without re-deriving them.
+ */
+export type UpgradeStatus = {
+    kind: "checking";
+} | {
+    kind: "current";
+    version: string;
+} | {
+    kind: "upgrading";
+    from: string;
+    to: string;
+    manager: PackageManager;
+} | {
+    kind: "upgraded";
+    from: string;
+    to: string;
+    manager: PackageManager;
+} | {
+    kind: "failed";
+    from: string;
+    to: string;
+    manager: PackageManager;
+    error: string;
+} | {
+    kind: "locked";
+} | {
+    kind: "skipped";
+    reason: "disabled" | "source-checkout" | "registry-unreachable";
+};
+export type UpgradeStatusListener = (status: UpgradeStatus) => void;
+/**
+ * A pub/sub handle the TUI subscribes to so it can render the live upgrade
+ * line. `publish` is called once per intermediate status; `complete` is
+ * called with the final status so late subscribers (e.g. the TUI mounting
+ * after the upgrade already finished) still see the terminal state.
+ */
+export interface UpgradeStatusStream {
+    subscribe(listener: UpgradeStatusListener): () => void;
+    publish(status: UpgradeStatus): void;
+    complete(final: UpgradeStatus): void;
+    /** Latest status emitted, or undefined before the first publish. */
+    current(): UpgradeStatus | undefined;
+}
+export declare function createUpgradeStatusStream(): UpgradeStatusStream;
+export interface RunAutoUpgradeInput {
+    packageName: string;
+    currentVersion: string;
+    /** Callback fired on every status transition. Never throws back into caller. */
+    onStatus?: UpgradeStatusListener;
+    /** Suppresses the run regardless of env (used after `--no-auto-upgrade`). */
+    disabled?: boolean;
+    /** process.argv[1] — used to detect source-checkout invocations. */
+    scriptPath?: string;
+    /** process.env at call site; lets tests inject a controlled environment. */
+    env?: NodeJS.ProcessEnv;
+    /** Override for tests; defaults to fetchLatestPackageVersion. */
+    fetchLatest?: (packageName: string) => Promise<string | undefined>;
+    /** Override for tests; defaults to spawning the real package manager. */
+    runUpgrade?: (command: string[]) => Promise<{
+        ok: boolean;
+        stderr?: string;
+    }>;
+    /** Override for tests. */
+    now?: () => number;
+    /** Override for tests. */
+    detectManager?: () => PackageManager;
+}
+/**
+ * Run the auto-upgrade flow in-process. Emits status transitions through
+ * `onStatus` and resolves to the final status. Never throws — every error
+ * path produces a terminal status the caller can render.
+ */
+export declare function runAutoUpgrade(input: RunAutoUpgradeInput): Promise<UpgradeStatus>;
+/**
+ * Heuristic: only run auto-upgrade when the CLI looks like a globally
+ * installed binary. Source-checkout runs (`bun src/cli.ts`) and per-project
+ * installs are skipped so contributors never get their working copy
+ * overwritten by `npm install --global`.
+ */
+export declare function isLikelyGlobalInstall(scriptPath: string): boolean;
+/**
+ * Human-readable one-liner for any UpgradeStatus. Used by both the JSON
+ * stderr path and the TUI header so the wording stays consistent.
+ */
+export declare function describeUpgradeStatus(packageName: string, status: UpgradeStatus): string | undefined;
+/** Resolved lazily so tests can swap $HOME per case. */
+declare function upgradePaths(): {
+    duetDir: string;
+    lockPath: string;
+    logPath: string;
+};
+/**
+ * Spawn options chosen so the install survives the parent CLI exiting:
+ *   - `detached: true` puts npm in its own process group so a terminal
+ *     Ctrl+C on the parent does not propagate and abort the install
+ *     mid-write (which would leave the global node_modules tree corrupt).
+ *   - The returned child is also `unref()`d (and so is its stderr pipe)
+ *     so a clean `/exit` returns the shell immediately and the install
+ *     continues independently. The parent still observes the child's exit
+ *     event for as long as it is alive, so the TUI can render the
+ *     "Updated… restart duet" line when the user stays.
+ */
+export declare const PACKAGE_MANAGER_SPAWN_OPTIONS: SpawnOptions;
+export type SpawnFn = (command: string, args: string[], options: SpawnOptions) => ChildProcess;
+/**
+ * Default in-process runner for the package manager upgrade command.
+ * Exported so tests can verify the spawn contract (detached, unref'd) by
+ * injecting a fake spawn.
+ */
+export declare function defaultRunUpgrade(command: string[], spawn?: SpawnFn): Promise<{
+    ok: boolean;
+    stderr?: string;
+}>;
+export declare const __testing: {
+    upgradePaths: typeof upgradePaths;
+    STALE_LOCK_MS: number;
+};
+export {};
+//# sourceMappingURL=auto-upgrade.d.ts.map

package/dist/src/cli/auto-upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-upgrade.d.ts","sourceRoot":"","sources":["../../../src/cli/auto-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAsB,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAY9F,OAAO,EAGL,KAAK,cAAc,EACpB,MAAM,sBAAsB,CAAC;AAG9B;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8DAA8D;AAC9D,eAAO,MAAM,mBAAmB,yBAAyB,CAAC;AAU1D;;;;GAIG;AACH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACxE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GACvE;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,cAAc,CAAC;IACxB,KAAK,EAAE,MAAM,CAAC;CACf,GACD;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,MAAM,EAAE,UAAU,GAAG,iBAAiB,GAAG,sBAAsB,CAAC;CACjE,CAAC;AAEN,MAAM,MAAM,qBAAqB,GAAG,CAAC,MAAM,EAAE,aAAa,KAAK,IAAI,CAAC;AAEpE;;;;;GAKG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,CAAC,QAAQ,EAAE,qBAAqB,GAAG,MAAM,IAAI,CAAC;IACvD,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;IACrC,oEAAoE;IACpE,OAAO,IAAI,aAAa,GAAG,SAAS,CAAC;CACtC;AAED,wBAAgB,yBAAyB,IAAI,mBAAmB,CA6B/D;AAED,MAAM,WAAW,mBAAmB;IAClC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,EAAE,qBAAqB,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,oEAAoE;IACpE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,iEAAiE;IACjE,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE,yEAAyE;IACzE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC9E,0BAA0B;IAC1B,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,0BAA0B;IAC1B,aAAa,CAAC,EAAE,MAAM,cAAc,CAAC;CACtC;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC,CAyEvF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAiBjE;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,aAAa,GACpB,MAAM,GAAG,SAAS,CAiBpB;AAOD,wDAAwD;AACxD,iBAAS,YAAY,IAAI;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAO9E;AAsED;;;;;;;;;;GAUG;AACH,eAAO,MAAM,6BAA6B,EAAE,YAG3C,CAAC;AAEF,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,OAAO,EAAE,YAAY,KAAK,YAAY,CAAC;AAE/F;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,MAAM,EAAE,EACjB,KAAK,GAAE,OAAmB,GACzB,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAoB3C;AAGD,eAAO,MAAM,SAAS;;;CAGrB,CAAC"}

package/dist/src/cli/auto-upgrade.js

@@ -0,0 +1,314 @@
+import { spawn as nodeSpawn } from "node:child_process";
+import { appendFileSync, closeSync, mkdirSync, openSync, readFileSync, unlinkSync, writeSync, } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { detectPackageManagerFromContext, globalUpgradeCommand, } from "./package-manager.js";
+import { compareSemverVersions, fetchLatestPackageVersion } from "./version-check.js";
+/**
+ * Why this exists: the CLI ships several versions per hour. Manual `duet
+ * upgrade` lags behind, so each launch probes the registry and — when a
+ * newer version exists — runs the package manager's global install in the
+ * background while the user is already using the TUI. The next launch is
+ * then already on latest.
+ *
+ * Concurrency safety:
+ *   - The package manager mutates the global install path in place. Already-
+ *     running CLI processes do not re-read those files, so they are unaffected.
+ *   - A CLI that *starts* mid-install could see partial files. We minimize
+ *     that window with an exclusive lockfile so only one process upgrades at
+ *     a time; others fall through and observe whatever state currently exists.
+ *   - Stale locks (worker crash, OS kill) older than STALE_LOCK_MS are
+ *     reclaimed so a missed unlink does not permanently disable upgrades.
+ *
+ * Status stream: `runAutoUpgrade` emits each transition through `onStatus`
+ * so the TUI can render a live "Checking… / Upgrading… / Upgraded, restart"
+ * line in the header. The returned promise resolves once the final state
+ * is reached.
+ */
+/** Env var users set to disable the auto-upgrade entirely. */
+export const NO_AUTO_UPGRADE_ENV = "DUET_NO_AUTO_UPGRADE";
+/** A lock held longer than this is treated as abandoned and replaced. */
+const STALE_LOCK_MS = 10 * 60 * 1000;
+/** How long to wait on the registry. The TUI is already up and showing a
+ *  "checking…" placeholder, so we can wait longer than the legacy inline
+ *  notice without making the user feel the call. */
+const REGISTRY_TIMEOUT_MS = 8_000;
+export function createUpgradeStatusStream() {
+    const listeners = new Set();
+    let latest;
+    const publish = (status) => {
+        latest = status;
+        for (const listener of listeners) {
+            try {
+                listener(status);
+            }
+            catch {
+                // Listener errors must not break the upgrade flow.
+            }
+        }
+    };
+    return {
+        subscribe(listener) {
+            listeners.add(listener);
+            // Replay the most recent status so late subscribers do not miss the
+            // current state — e.g. if the upgrade finished before the TUI mounted.
+            if (latest)
+                listener(latest);
+            return () => listeners.delete(listener);
+        },
+        publish,
+        complete(final) {
+            if (latest !== final)
+                publish(final);
+        },
+        current() {
+            return latest;
+        },
+    };
+}
+/**
+ * Run the auto-upgrade flow in-process. Emits status transitions through
+ * `onStatus` and resolves to the final status. Never throws — every error
+ * path produces a terminal status the caller can render.
+ */
+export async function runAutoUpgrade(input) {
+    const emit = (status) => {
+        try {
+            input.onStatus?.(status);
+        }
+        catch {
+            // Listener errors must never affect the upgrade flow.
+        }
+        return status;
+    };
+    const env = input.env ?? process.env;
+    if (input.disabled || env[NO_AUTO_UPGRADE_ENV] === "1") {
+        return emit({ kind: "skipped", reason: "disabled" });
+    }
+    const scriptPath = input.scriptPath ?? process.argv[1];
+    if (!scriptPath || !isLikelyGlobalInstall(scriptPath)) {
+        return emit({ kind: "skipped", reason: "source-checkout" });
+    }
+    const now = input.now ?? (() => Date.now());
+    const handle = acquireLock(now());
+    if (handle === null) {
+        appendLog(`skip locked package=${input.packageName} current=${input.currentVersion}`);
+        return emit({ kind: "locked" });
+    }
+    try {
+        emit({ kind: "checking" });
+        const fetchLatest = input.fetchLatest ?? ((name) => fetchLatestPackageVersion(name, REGISTRY_TIMEOUT_MS));
+        let latest;
+        try {
+            latest = await fetchLatest(input.packageName);
+        }
+        catch (error) {
+            appendLog(`fetch-error package=${input.packageName} error=${describeError(error)}`);
+            return emit({ kind: "skipped", reason: "registry-unreachable" });
+        }
+        if (!latest) {
+            appendLog(`no-latest package=${input.packageName}`);
+            return emit({ kind: "skipped", reason: "registry-unreachable" });
+        }
+        if (compareSemverVersions(latest, input.currentVersion) <= 0) {
+            appendLog(`current package=${input.packageName} version=${input.currentVersion}`);
+            return emit({ kind: "current", version: input.currentVersion });
+        }
+        const detect = input.detectManager ??
+            (() => detectPackageManagerFromContext({
+                userAgent: process.env.npm_config_user_agent,
+                runtimeExecutable: process.argv[0],
+                scriptPath: process.argv[1],
+            }));
+        const manager = detect();
+        emit({ kind: "upgrading", from: input.currentVersion, to: latest, manager });
+        const command = globalUpgradeCommand(manager, input.packageName, latest);
+        const run = input.runUpgrade ?? defaultRunUpgrade;
+        const result = await run(command);
+        if (result.ok) {
+            appendLog(`upgraded package=${input.packageName} from=${input.currentVersion} to=${latest} manager=${manager}`);
+            return emit({ kind: "upgraded", from: input.currentVersion, to: latest, manager });
+        }
+        const error = result.stderr ?? "package manager exited non-zero";
+        appendLog(`failed package=${input.packageName} from=${input.currentVersion} to=${latest} manager=${manager} stderr=${error}`);
+        return emit({ kind: "failed", from: input.currentVersion, to: latest, manager, error });
+    }
+    finally {
+        releaseLock(handle);
+    }
+}
+/**
+ * Heuristic: only run auto-upgrade when the CLI looks like a globally
+ * installed binary. Source-checkout runs (`bun src/cli.ts`) and per-project
+ * installs are skipped so contributors never get their working copy
+ * overwritten by `npm install --global`.
+ */
+export function isLikelyGlobalInstall(scriptPath) {
+    const normalized = scriptPath.replace(/\\/g, "/");
+    if (normalized.includes("/.bun/install/global/") ||
+        normalized.includes("/.bun/bin/") ||
+        normalized.includes("/.pnpm/") ||
+        normalized.includes("/share/pnpm/") ||
+        normalized.includes("/.config/yarn/global/") ||
+        normalized.includes("/yarn/global/")) {
+        return true;
+    }
+    // npm global installs live under `<prefix>/lib/node_modules/<pkg>/...`.
+    if (/\/lib\/node_modules\//.test(normalized))
+        return true;
+    // Volta, fnm, nvm prefixes vary; treat any `node_modules/@duetso/` as global.
+    if (normalized.includes("/node_modules/@duetso/"))
+        return true;
+    return false;
+}
+/**
+ * Human-readable one-liner for any UpgradeStatus. Used by both the JSON
+ * stderr path and the TUI header so the wording stays consistent.
+ */
+export function describeUpgradeStatus(packageName, status) {
+    switch (status.kind) {
+        case "checking":
+            return "Checking for updates…";
+        case "upgrading":
+            return `Updating ${packageName} ${status.from} → ${status.to}…`;
+        case "upgraded":
+            return `Updated ${packageName} to ${status.to}. Restart duet to use it.`;
+        case "failed":
+            return `Update to ${status.to} failed (${status.error}). Run: duet upgrade`;
+        case "locked":
+        case "current":
+        case "skipped":
+            // No notice — either we are on latest, another process is handling it,
+            // or auto-upgrade is intentionally off. Header stays clean.
+            return undefined;
+    }
+}
+/** Resolved lazily so tests can swap $HOME per case. */
+function upgradePaths() {
+    const duetDir = join(homedir(), ".duet");
+    return {
+        duetDir,
+        lockPath: join(duetDir, "upgrade.lock"),
+        logPath: join(duetDir, "logs", "upgrade.log"),
+    };
+}
+function acquireLock(now) {
+    const { duetDir, lockPath } = upgradePaths();
+    ensureDir(duetDir);
+    for (let attempt = 0; attempt < 2; attempt++) {
+        try {
+            const fd = openSync(lockPath, "wx");
+            writeSync(fd, JSON.stringify({ pid: process.pid, startedAt: now }));
+            return { fd, lockPath };
+        }
+        catch (error) {
+            if (error?.code !== "EEXIST")
+                return null;
+            if (!isStaleLock(lockPath, now))
+                return null;
+            try {
+                unlinkSync(lockPath);
+            }
+            catch {
+                return null;
+            }
+        }
+    }
+    return null;
+}
+function isStaleLock(lockPath, now) {
+    try {
+        const raw = readFileSync(lockPath, "utf8");
+        const payload = JSON.parse(raw);
+        if (typeof payload.startedAt !== "number")
+            return true;
+        return now - payload.startedAt > STALE_LOCK_MS;
+    }
+    catch {
+        return true;
+    }
+}
+function releaseLock(handle) {
+    try {
+        closeSync(handle.fd);
+    }
+    catch {
+        // ignore
+    }
+    try {
+        unlinkSync(handle.lockPath);
+    }
+    catch {
+        // ignore
+    }
+}
+function ensureDir(path) {
+    try {
+        mkdirSync(path, { recursive: true });
+    }
+    catch {
+        // ignore
+    }
+}
+function appendLog(line) {
+    try {
+        const { logPath } = upgradePaths();
+        ensureDir(join(logPath, ".."));
+        appendFileSync(logPath, `${new Date().toISOString()} ${line}\n`);
+    }
+    catch {
+        // ignore
+    }
+}
+function describeError(error) {
+    if (error instanceof Error)
+        return error.message;
+    return String(error);
+}
+/**
+ * Spawn options chosen so the install survives the parent CLI exiting:
+ *   - `detached: true` puts npm in its own process group so a terminal
+ *     Ctrl+C on the parent does not propagate and abort the install
+ *     mid-write (which would leave the global node_modules tree corrupt).
+ *   - The returned child is also `unref()`d (and so is its stderr pipe)
+ *     so a clean `/exit` returns the shell immediately and the install
+ *     continues independently. The parent still observes the child's exit
+ *     event for as long as it is alive, so the TUI can render the
+ *     "Updated… restart duet" line when the user stays.
+ */
+export const PACKAGE_MANAGER_SPAWN_OPTIONS = {
+    stdio: ["ignore", "ignore", "pipe"],
+    detached: true,
+};
+/**
+ * Default in-process runner for the package manager upgrade command.
+ * Exported so tests can verify the spawn contract (detached, unref'd) by
+ * injecting a fake spawn.
+ */
+export function defaultRunUpgrade(command, spawn = nodeSpawn) {
+    return new Promise((resolve) => {
+        const child = spawn(command[0], command.slice(1), PACKAGE_MANAGER_SPAWN_OPTIONS);
+        child.unref();
+        // The stderr pipe is a separate libuv handle that also pins the event
+        // loop alive; unref it so /exit returns even while the install is still
+        // streaming output. Node exposes `unref` on the underlying socket; cast
+        // because @types/node does not surface it on the Readable interface.
+        child.stderr?.unref?.();
+        let stderr = "";
+        child.stderr?.on("data", (chunk) => {
+            stderr += chunk.toString();
+        });
+        child.once("error", (error) => {
+            resolve({ ok: false, stderr: describeError(error) });
+        });
+        child.once("exit", (code) => {
+            resolve({ ok: code === 0, stderr: stderr.trim() || undefined });
+        });
+    });
+}
+// Test-only access to internal paths and constants.
+export const __testing = {
+    upgradePaths,
+    STALE_LOCK_MS,
+};
+//# sourceMappingURL=auto-upgrade.js.map

package/dist/src/cli/auto-upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auto-upgrade.js","sourceRoot":"","sources":["../../../src/cli/auto-upgrade.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAwC,MAAM,oBAAoB,CAAC;AAC9F,OAAO,EACL,cAAc,EACd,SAAS,EACT,SAAS,EACT,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,SAAS,GACV,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,+BAA+B,EAC/B,oBAAoB,GAErB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,qBAAqB,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAC;AAEtF;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8DAA8D;AAC9D,MAAM,CAAC,MAAM,mBAAmB,GAAG,sBAAsB,CAAC;AAE1D,yEAAyE;AACzE,MAAM,aAAa,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErC;;oDAEoD;AACpD,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAyClC,MAAM,UAAU,yBAAyB;IACvC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IACnD,IAAI,MAAiC,CAAC;IACtC,MAAM,OAAO,GAAG,CAAC,MAAqB,EAAQ,EAAE;QAC9C,MAAM,GAAG,MAAM,CAAC;QAChB,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,QAAQ,CAAC,MAAM,CAAC,CAAC;YACnB,CAAC;YAAC,MAAM,CAAC;gBACP,mDAAmD;YACrD,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,SAAS,CAAC,QAAQ;YAChB,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YACxB,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,MAAM;gBAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC7B,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC1C,CAAC;QACD,OAAO;QACP,QAAQ,CAAC,KAAK;YACZ,IAAI,MAAM,KAAK,KAAK;gBAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACvC,CAAC;QACD,OAAO;YACL,OAAO,MAAM,CAAC;QAChB,CAAC;KACF,CAAC;AACJ,CAAC;AAuBD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,KAA0B;IAC7D,MAAM,IAAI,GAAG,CAAC,MAAqB,EAAiB,EAAE;QACpD,IAAI,CAAC;YACH,KAAK,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,mBAAmB,CAAC,KAAK,GAAG,EAAE,CAAC;QACvD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IACvD,CAAC;IACD,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,UAAU,IAAI,CAAC,qBAAqB,CAAC,UAAU,CAAC,EAAE,CAAC;QACtD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC;IAClC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,SAAS,CAAC,uBAAuB,KAAK,CAAC,WAAW,YAAY,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QACtF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClC,CAAC;IACD,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3B,MAAM,WAAW,GACf,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,yBAAyB,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC,CAAC;QAChG,IAAI,MAA0B,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,uBAAuB,KAAK,CAAC,WAAW,UAAU,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACpF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,qBAAqB,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;YACpD,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,SAAS,CAAC,mBAAmB,KAAK,CAAC,WAAW,YAAY,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;YAClF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,cAAc,EAAE,CAAC,CAAC;QAClE,CAAC;QAED,MAAM,MAAM,GACV,KAAK,CAAC,aAAa;YACnB,CAAC,GAAG,EAAE,CACJ,+BAA+B,CAAC;gBAC9B,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,qBAAqB;gBAC5C,iBAAiB,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAClC,UAAU,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;aAC5B,CAAC,CAAC,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,EAAE,CAAC;QACzB,IAAI,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QAE7E,MAAM,OAAO,GAAG,oBAAoB,CAAC,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,KAAK,CAAC,UAAU,IAAI,iBAAiB,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,SAAS,CACP,oBAAoB,KAAK,CAAC,WAAW,SAAS,KAAK,CAAC,cAAc,OAAO,MAAM,YAAY,OAAO,EAAE,CACrG,CAAC;YACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACrF,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,IAAI,iCAAiC,CAAC;QACjE,SAAS,CACP,kBAAkB,KAAK,CAAC,WAAW,SAAS,KAAK,CAAC,cAAc,OAAO,MAAM,YAAY,OAAO,WAAW,KAAK,EAAE,CACnH,CAAC;QACF,OAAO,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1F,CAAC;YAAS,CAAC;QACT,WAAW,CAAC,MAAM,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,UAAkB;IACtD,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAClD,IACE,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC5C,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC;QACjC,UAAU,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC9B,UAAU,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnC,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC;QAC5C,UAAU,CAAC,QAAQ,CAAC,eAAe,CAAC,EACpC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,wEAAwE;IACxE,IAAI,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1D,8EAA8E;IAC9E,IAAI,UAAU,CAAC,QAAQ,CAAC,wBAAwB,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,WAAmB,EACnB,MAAqB;IAErB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,UAAU;YACb,OAAO,uBAAuB,CAAC;QACjC,KAAK,WAAW;YACd,OAAO,YAAY,WAAW,IAAI,MAAM,CAAC,IAAI,MAAM,MAAM,CAAC,EAAE,GAAG,CAAC;QAClE,KAAK,UAAU;YACb,OAAO,WAAW,WAAW,OAAO,MAAM,CAAC,EAAE,2BAA2B,CAAC;QAC3E,KAAK,QAAQ;YACX,OAAO,aAAa,MAAM,CAAC,EAAE,YAAY,MAAM,CAAC,KAAK,sBAAsB,CAAC;QAC9E,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,SAAS;YACZ,uEAAuE;YACvE,4DAA4D;YAC5D,OAAO,SAAS,CAAC;IACrB,CAAC;AACH,CAAC;AAOD,wDAAwD;AACxD,SAAS,YAAY;IACnB,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,EAAE,EAAE,OAAO,CAAC,CAAC;IACzC,OAAO;QACL,OAAO;QACP,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,CAAC;QACvC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,GAAW;IAC9B,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,YAAY,EAAE,CAAC;IAC7C,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,IAAI,CAAC;YACH,MAAM,EAAE,GAAG,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpC,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,EAAwB,CAAC,CAAC,CAAC;YAC1F,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC;QAC1B,CAAC;QAAC,OAAO,KAAU,EAAE,CAAC;YACpB,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;gBAAE,OAAO,IAAI,CAAC;YAC1C,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC;YAC7C,IAAI,CAAC;gBACH,UAAU,CAAC,QAAQ,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB,EAAE,GAAW;IAChD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACxD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvD,OAAO,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,aAAa,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,MAAwC;IAC3D,IAAI,CAAC;QACH,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;IACD,IAAI,CAAC;QACH,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC;QACnC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QAC/B,cAAc,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAiB;IACzD,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;IACnC,QAAQ,EAAE,IAAI;CACf,CAAC;AAIF;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,OAAiB,EACjB,QAAiB,SAAS;IAE1B,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,6BAA6B,CAAC,CAAC;QAClF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,sEAAsE;QACtE,wEAAwE;QACxE,wEAAwE;QACxE,qEAAqE;QACpE,KAAK,CAAC,MAAmD,EAAE,KAAK,EAAE,EAAE,CAAC;QACtE,IAAI,MAAM,GAAG,EAAE,CAAC;QAChB,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC7B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACvD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YAC1B,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,KAAK,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,IAAI,SAAS,EAAE,CAAC,CAAC;QAClE,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oDAAoD;AACpD,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,YAAY;IACZ,aAAa;CACd,CAAC"}

package/dist/src/cli/help.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CA2EtD;AAED,wBAAgB,cAAc,IAAI,IAAI,CA0BrC;AAED,wBAAgB,YAAY,IAAI,IAAI,CAsBnC;AAED,wBAAgB,eAAe,IAAI,IAAI,CAkBtC;AAED,wBAAgB,eAAe,IAAI,IAAI,CAoBtC;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAa1D"}
+{"version":3,"file":"help.d.ts","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AACH,eAAO,MAAM,+BAA+B,IAAI,CAAC;AAEjD,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CA4EtD;AAED,wBAAgB,cAAc,IAAI,IAAI,CA0BrC;AAED,wBAAgB,YAAY,IAAI,IAAI,CAsBnC;AAED,wBAAgB,eAAe,IAAI,IAAI,CAkBtC;AAED,wBAAgB,eAAe,IAAI,IAAI,CAoBtC;AAED,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAa1D"}

package/dist/src/cli/help.js

@@ -42,6 +42,7 @@ OPTIONS
                             Load a file into the system prompt; repeatable
   --no-system-prompt-files Disable default AGENTS.md system prompt loading
   --env-file <path>        Shared env file to load after <workdir>/.env (default: ${DEFAULT_DUET_ENV_FILE})
+  --no-auto-upgrade         Skip the auto-upgrade probe for this run (also: DUET_NO_AUTO_UPGRADE=1)
   --json                    Force JSONL event output instead of the TUI
   -v, --version            Print the installed duet version and exit
   -h, --help               Show this help

package/dist/src/cli/help.js.map

@@ -1 +1 @@
-{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;gDAiBkC,WAAW;;;;;;;;;;;;gHAYqD,+BAA+B;;;;;oFAK3D,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCxG,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;wEAW0D,qBAAqB;;;;;;;;;;;;;CAa5F,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;yDAa2C,qBAAqB;;;;;;IAM1E,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;CAChC,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,CAAC,GAAG,CAAC;oCACsB,WAAW;;;;;;;;;;CAU9C,CAAC,CAAC;AACH,CAAC"}
+{"version":3,"file":"help.js","sourceRoot":"","sources":["../../../src/cli/help.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAExE;;;;;GAKG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,CAAC,CAAC;AAEjD,MAAM,UAAU,YAAY,CAAC,WAAmB;IAC9C,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;gDAiBkC,WAAW;;;;;;;;;;;;gHAYqD,+BAA+B;;;;;oFAK3D,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAwCxG,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc;IAC5B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;wEAW0D,qBAAqB;;;;;;;;;;;;;CAa5F,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;yDAa2C,qBAAqB;;;;;;IAM1E,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC;CAChC,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;CAgBb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,CAAC,GAAG,CAAC;;;;;;;;;;;;;;;;;;CAkBb,CAAC,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,OAAO,CAAC,GAAG,CAAC;oCACsB,WAAW;;;;;;;;;;CAU9C,CAAC,CAAC;AACH,CAAC"}

package/dist/src/cli/run.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cli/run.ts"],"names":[],"mappings":"AASA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,iCAAiC,CAAC;AAGzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAO3D,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,qBAAqB,EAAE,eAAe,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAEV;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GACtB,uBAAuB,CAgBzB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA2PvF"}
+{"version":3,"file":"run.d.ts","sourceRoot":"","sources":["../../../src/cli/run.ts"],"names":[],"mappings":"AASA,OAAO,EAIL,KAAK,eAAe,EACrB,MAAM,iCAAiC,CAAC;AAGzC,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAW3D,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC9B;AAED,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,gBAAgB,CAAC;IACzB,eAAe,EAAE,eAAe,CAAC;IACjC,qBAAqB,EAAE,eAAe,CAAC;CACxC;AAED,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,WAAW,EAAE,OAAO,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,OAAO,CAEV;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,kBAAkB,EACzB,UAAU,EAAE,GAAG,CAAC,MAAM,CAAC,GACtB,uBAAuB,CAgBzB;AAED;;;;;GAKG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA2QvF"}

package/dist/src/cli/run.js

@@ -9,7 +9,7 @@ import { DEFAULT_RESUME_HISTORY_MESSAGES, printRunHelp } from "./help.js";
 import { resumeCommand } from "./resume-hint.js";
 import { fail, isInteractive, loadCliEnvFiles, parseResumeHistoryMessages } from "./shared.js";
 import { installShutdownHandlers } from "./shutdown.js";
-import { getNewVersionNotice } from "./version-check.js";
+import { createUpgradeStatusStream, describeUpgradeStatus, runAutoUpgrade, } from "./auto-upgrade.js";
 /**
  * Decide whether to render the interactive TUI vs JSONL events.
  *
@@ -60,13 +60,9 @@ export async function runRunCommand(args, pkg) {
     let jsonOutput = false;
     let envFilePath;
     let incognito = false;
+    let noAutoUpgrade = false;
     const promptParts = [];
     const interactive = isInteractive();
-    // Kick off the npm registry probe immediately so it overlaps with env
-    // loading, model resolution, skill discovery, and session bootstrap. JSON
-    // callers await the result; the TUI path only consumes it if it has already
-    // settled by the time we render, so a slow registry never delays first paint.
-    const versionNoticePromise = getNewVersionNotice(pkg.name, pkg.version).catch(() => undefined);
     for (let i = 0; i < args.length; i++) {
         switch (args[i]) {
             case "--model":
@@ -133,6 +129,9 @@ export async function runRunCommand(args, pkg) {
                     fail(`Missing value for ${args[i]}`);
                 envFilePath = args[++i];
                 break;
+            case "--no-auto-upgrade":
+                noAutoUpgrade = true;
+                break;
             case "--version":
             case "-v":
                 console.log(pkg.version);
@@ -183,6 +182,20 @@ export async function runRunCommand(args, pkg) {
     }
     const dotenvKeys = loadCliEnvFiles(workDir, envFilePath);
     shimDuetApiKeyToAiGateway();
+    // Probe the registry and (if newer) run the package manager in-process
+    // while the TUI is already mounted. The TUI subscribes to upgradeStatus$
+    // to render a live header line; the JSON path awaits the final status
+    // and prints one summary line to stderr.
+    const upgradeStatus$ = createUpgradeStatusStream();
+    const upgradePromise = runAutoUpgrade({
+        packageName: pkg.name,
+        currentVersion: pkg.version,
+        disabled: noAutoUpgrade,
+        onStatus: (status) => upgradeStatus$.publish(status),
+    }).then((status) => {
+        upgradeStatus$.complete(status);
+        return status;
+    });
     // Refresh the gateway-managed default skills when the user has previously
     // opted in via `duet login` (i.e. `~/.duet/.skills-hash` exists). Logging
     // in with --skip-skill-sync leaves no hash, so this stays a no-op until
@@ -203,13 +216,15 @@ export async function runRunCommand(args, pkg) {
     memoryModelName = memoryModelResolution.modelName;
     const useTui = shouldUseTui({ interactive, jsonOutput, prompt });
     const useJson = !useTui;
-    // JSON consumers are already waiting for stderr output, so blocking on the
-    // probe is fine. The TUI never blocks here — it consumes the promise
-    // directly and swaps in the notice once the probe settles.
+    // JSON consumers want a single summary line, not a streaming status.
+    // Await the final upgrade status and print the human-readable form (if any)
+    // before the regular boot lines. The TUI subscribes to the live stream
+    // instead and renders intermediate "Checking…/Updating…" states inline.
     if (useJson) {
-        const newVersionNotice = await versionNoticePromise;
-        if (newVersionNotice)
-            process.stderr.write(`${newVersionNotice}\n`);
+        const finalStatus = await upgradePromise;
+        const notice = describeUpgradeStatus(pkg.name, finalStatus);
+        if (notice)
+            process.stderr.write(`${notice}\n`);
         process.stderr.write(`Model: ${modelName}\n`);
         process.stderr.write(`Source: ${describeModelResolution(modelResolution)}\n`);
         process.stderr.write(`Memory model: ${memoryModelName}\n`);
@@ -263,8 +278,9 @@ export async function runRunCommand(args, pkg) {
                 memoryModelSource: describeModelResolution(memoryModelResolution),
                 workDir,
                 sessionId: session.id,
+                packageName: pkg.name,
                 packageVersion: pkg.version,
-                versionNoticePromise,
+                upgradeStatus$,
             });
         }
         process.stderr.write(`To resume this session:\n${resumeCommand(session.id, {