@flowapt/flowiq-cli 0.6.7 → 0.7.0

package/src/update-check.js

@@ -4,6 +4,14 @@
 // can never corrupt piped / --json output) when the installed version is older
 // than the latest published on npm.
 //
+// ⚠️ It used to be gated on `process.stderr.isTTY` as well, which meant it was
+// invisible to exactly the audience that most needs it: an AI assistant running
+// `flowiq` through a tool call gets a PIPE, not a TTY, so isTTY is undefined and
+// the hint never printed. Teammates' Claude sessions could therefore run a
+// months-old CLI forever without ever being told. Writing to stderr is already
+// the whole safety property (it cannot corrupt piped stdout or --json), so the
+// TTY gate bought nothing and cost everything. Removed 9 Sep 2026.
+//
 // The nudge is driven by a CACHED value read SYNCHRONOUSLY — zero network on the
 // hot path, so no command is ever slowed. The cache is refreshed at most once a
 // day by a DETACHED, unref'd child process, so even `flowiq --version` returns
@@ -88,16 +96,42 @@ async function refreshLatest(prevLatest) {
 
 // Print the nudge (from cache, synchronously) and, if the cache is stale, spawn
 // a detached child to refresh it for the NEXT run. Never throws, never blocks.
+/** The cached npm `latest` + when it was refreshed — used by `flowiq doctor`. */
+export function cachedLatest() {
+  const c = readCacheSync();
+  return { latest: c?.latest || null, checkedAt: c?.checked_at || null };
+}
+
+/** Ask npm for the latest version NOW (doctor only — never on the hot path). */
+export async function fetchLatestNow(timeoutMs = FETCH_TIMEOUT_MS) {
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+  try {
+    const res = await fetch(REGISTRY, { signal: ctrl.signal, headers: { Accept: "application/json" } });
+    if (!res.ok) return null;
+    const body = await res.json();
+    if (body?.version) await writeCache({ checked_at: Date.now(), latest: body.version });
+    return body?.version || null;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+
 export function maybeNotifyUpdate(currentVersion) {
   try {
     if (disabled()) return;
     const cache = readCacheSync();
     const latest = cache?.latest;
 
-    if (latest && process.stderr.isTTY && cmpVersion(latest, currentVersion) > 0) {
+    if (latest && cmpVersion(latest, currentVersion) > 0) {
+      // The marker line is deliberately stable and unambiguous: an assistant
+      // reading this in a tool result should update without needing to be asked.
       process.stderr.write(
-        `\n  ⬆ flowiq ${latest} is available (you're on ${currentVersion})\n` +
-        `    update:  npm i -g ${PKG}\n\n`
+        `\n  ⬆ FLOWIQ CLI OUT OF DATE — installed ${currentVersion}, latest ${latest}\n` +
+        `    Run this before continuing:  npm i -g ${PKG}@latest\n` +
+        `    (commands still work; newer ones may be missing or behave differently)\n\n`
       );
     }