@hireobi/cli 0.1.9 → 0.1.10

package/README.md

@@ -12,6 +12,8 @@ npm i -g @hireobi/cli && obi
 
 Windows PowerShell 5.1 has no `&&`: run `npm i -g @hireobi/cli`, then `obi`.
 
+To update, run the same line again: `obi` refreshes the Skill links. At most once a day, any command asks npm for the newest version; when yours is older, a JSON envelope carries `update` and a human run prints one line on stderr, and the Skill offers to update. Offline or slow, the check stays silent. `obi doctor` shows the installed and newest versions. `OBI_NO_UPDATE_CHECK=1` turns the check off, and so does `CI`. A version the service no longer accepts fails with `CLI_UPDATE_REQUIRED` and the update command.
+
 The first `obi` registers the Obi Skill for Claude Code, Codex, Cursor and OpenCode, and every later command keeps it registered: two personal links, `~/.claude/skills/obi` and `~/.agents/skills/obi`. A conflicting file or link is never replaced: the command still runs, and bare `obi` says what is in the way and how to fix it. `obi skill install` registers it again after a fix and removes the links an earlier alpha of this package made under its former name; `obi skill path` locates the bundled Skill. `OBI_SKILL_LINKS=off` leaves the links to `obi skill install`. A cloud harness needs its own supported installation path.
 
 Run by a coding agent, bare `obi` prints where the Skill's guide is and the next command. In an interactive terminal it shows the Obi mascot and a short welcome, then exits: the conversation happens in the assistant. The greeting is English or French; `OBI_LANGUAGE` overrides `LC_ALL`, `LC_MESSAGES`, then `LANG`.

package/dist/obi.js

@@ -16664,7 +16664,43 @@ var SUPPORTED_MARKET_NAMES = SUPPORTED_MARKETS.map(
   (market) => market.name
 );
 
+// ../shared/lib/cli-version.ts
+var CLI_VERSION_HEADER = "x-obi-cli-version";
+var CLI_UPDATE_COMMAND = "npm i -g @hireobi/cli";
+var release = /^(0|[1-9][0-9]{0,8})\.(0|[1-9][0-9]{0,8})\.(0|[1-9][0-9]{0,8})$/;
+function parseRelease(version3) {
+  const match = release.exec(version3);
+  return match === null ? null : [Number(match[1]), Number(match[2]), Number(match[3])];
+}
+function isOlderRelease(version3, other) {
+  const left = parseRelease(version3);
+  const right = parseRelease(other);
+  if (left === null || right === null) return false;
+  for (let index = 0; index < 3; index += 1) {
+    if (left[index] !== right[index]) return left[index] < right[index];
+  }
+  return false;
+}
+
+// src/version.ts
+var cliVersion = "0.1.10";
+
 // src/product-api-failures.ts
+var versionHeaders = { [CLI_VERSION_HEADER]: cliVersion };
+function updateRequiredError() {
+  return new CliError({
+    code: "CLI_UPDATE_REQUIRED",
+    message: `This Obi CLI (${cliVersion}) is too old for the Obi service.`,
+    exitCode: 7,
+    retryable: false,
+    nextAction: `Run ${CLI_UPDATE_COMMAND}, then run obi once to refresh the Skill, and try again.`,
+    mode: "product"
+  });
+}
+function apiFailure(code, httpStatus, retryAfterSeconds) {
+  if (code === "CLI_UPDATE_REQUIRED") throw updateRequiredError();
+  return { ok: false, failure: { code, httpStatus, retryAfterSeconds } };
+}
 function transportError(code, message, exitCode, retryable) {
   return new CliError({
     code,
@@ -17294,7 +17330,9 @@ var pendingAuthorizationViewSchema = external_exports.object({
 var originMarker = {
   origin: external_exports.string().min(1).max(200).optional(),
   development: external_exports.literal(true).optional(),
-  evaluationCaseId: external_exports.uuid().optional()
+  evaluationCaseId: external_exports.uuid().optional(),
+  // Set when npm holds a newer CLI than this one (cli/src/update-check.ts).
+  update: external_exports.object({ installed: external_exports.string().max(32), latest: external_exports.string().max(32), command: external_exports.string().max(80) }).optional()
 };
 var helpDataSchema = external_exports.object({
   usage: external_exports.string(),
@@ -17339,6 +17377,10 @@ var capabilitiesDataSchema = external_exports.object({
 var localDoctorDataSchema = external_exports.object({
   node: external_exports.string(),
   cliVersion: external_exports.string(),
+  latestVersion: external_exports.string().nullable(),
+  // Set only when npm could not be reached: the last version it named.
+  lastKnownVersion: external_exports.string().nullable(),
+  updateCheck: external_exports.enum(["on", "off"]),
   origin: external_exports.string(),
   credentialStorage: external_exports.union([backendKindSchema, external_exports.literal("none")]),
   videoTools: external_exports.object({ ytDlp: external_exports.boolean(), ffmpeg: external_exports.boolean() }),
@@ -17780,7 +17822,7 @@ function retryAfter(response) {
   return typeof value === "string" && /^[0-9]{1,5}$/.test(value) ? Number(value) : null;
 }
 async function send(context, request) {
-  const headers2 = { accept: "application/json" };
+  const headers2 = { accept: "application/json", ...versionHeaders };
   if (request.body !== void 0) {
     headers2["content-type"] = "application/json";
   }
@@ -17990,12 +18032,7 @@ function interpret(response, schema) {
     return { ok: true, data: parsed.data.data };
   }
   const failure2 = ProductApiErrorResponseSchema.safeParse(body);
-  if (failure2.success) {
-    return {
-      ok: false,
-      failure: { code: failure2.data.error.code, httpStatus: response.status, retryAfterSeconds: retryAfter(response) }
-    };
-  }
+  if (failure2.success) return apiFailure(failure2.data.error.code, response.status, retryAfter(response));
   if (response.status >= 500) {
     throw transportError("SERVICE_UNAVAILABLE", "The Obi API is unavailable.", 6, true);
   }
@@ -20376,7 +20413,7 @@ function memoryText(data) {
 
 // src/support-commands.ts
 import { createHash as createHash2 } from "node:crypto";
-import { release } from "node:os";
+import { release as release2 } from "node:os";
 
 // src/last-error.ts
 import { readFile as readFile6, writeFile as writeFile3 } from "node:fs/promises";
@@ -20400,9 +20437,6 @@ async function readLastError(stateDirectory) {
   }
 }
 
-// src/version.ts
-var cliVersion = "0.1.9";
-
 // src/support-commands.ts
 async function probeServer(origin, timeoutMs) {
   try {
@@ -20419,7 +20453,7 @@ async function probeServer(origin, timeoutMs) {
 }
 async function sendSupport(context, input) {
   const lastError = await readLastError(context.stateDirectory);
-  const diagnostic = { cliVersion, node: process.version, os: `${process.platform} ${release()} ${process.arch}`, lastError };
+  const diagnostic = { cliVersion, node: process.version, os: `${process.platform} ${release2()} ${process.arch}`, lastError };
   let account2 = null;
   let reason = null;
   try {
@@ -20695,7 +20729,9 @@ Next: ${sanitizeHumanText(result.data.nextStep)}
       degraded: `Obi server degraded: try again later, and write to ${SUPPORT_EMAIL} if it lasts.`,
       unreachable: `Obi server unreachable: check the network connection, and write to ${SUPPORT_EMAIL} if it lasts.`
     }[result.data.server];
-    return `Local diagnostic completed for ${sanitizeHumanText(result.data.origin)}: ${storage}; ${video}. ${server}
+    const { cliVersion: installed, latestVersion: latest } = result.data;
+    const version3 = result.data.updateCheck === "off" ? `CLI ${sanitizeHumanText(installed)} (update check off)` : latest === null ? `CLI ${sanitizeHumanText(installed)} (latest version unknown: npm could not be reached${result.data.lastKnownVersion === null ? "" : `, last known ${sanitizeHumanText(result.data.lastKnownVersion)}`})` : isOlderRelease(installed, latest) ? `CLI ${sanitizeHumanText(installed)}, latest ${sanitizeHumanText(latest)}: update with ${CLI_UPDATE_COMMAND}` : `CLI ${sanitizeHumanText(installed)}, the latest`;
+    return `Local diagnostic completed for ${sanitizeHumanText(result.data.origin)}: ${version3}; ${storage}; ${video}. ${server}
 `;
   }
   if (result.command === "login") {
@@ -21240,7 +21276,7 @@ function accountMismatch(account2, revoked, expected) {
 }
 async function confirmAndStore(context, store, pair, receivedAt, expectedEmail) {
   const api = context;
-  const release3 = guardNewFamily(api, pair);
+  const release4 = guardNewFamily(api, pair);
   let stored = false;
   try {
     const status = await readAccountStatus(api, pair.accessToken);
@@ -21271,7 +21307,7 @@ async function confirmAndStore(context, store, pair, receivedAt, expectedEmail)
       }
       await store.writeCredential(credentialFromPair(context.origin.origin, pair, confirmed, receivedAt));
       stored = true;
-      release3();
+      release4();
     });
     try {
       await store.removePending();
@@ -21291,7 +21327,7 @@ async function confirmAndStore(context, store, pair, receivedAt, expectedEmail)
     }
     throw error51;
   } finally {
-    release3();
+    release4();
   }
 }
 async function login(session, options) {
@@ -21606,7 +21642,7 @@ async function safeFetch(url3, opts = {}) {
     if (!REDIRECT_STATUSES.has(res.status)) return res;
     const location = res.headers.get("location");
     if (!location) return res;
-    await release2(res);
+    await release3(res);
     let next;
     try {
       next = new URL(location, current).href;
@@ -21617,7 +21653,7 @@ async function safeFetch(url3, opts = {}) {
   }
   throw new TooManyRedirectsError(url3, maxRedirects);
 }
-async function release2(res) {
+async function release3(res) {
   await res.body?.cancel().catch((err) => {
     console.warn("[safe-fetch] cancelling an unread body failed:", err);
   });
@@ -21625,7 +21661,7 @@ async function release2(res) {
 async function readCapped(res, maxBytes = MAX_RESPONSE_BYTES) {
   const declared = Number(res.headers.get("content-length"));
   if (Number.isFinite(declared) && declared > maxBytes) {
-    await release2(res);
+    await release3(res);
     return "";
   }
   if (!res.body) return (await res.text()).slice(0, maxBytes);
@@ -33601,9 +33637,13 @@ function statusResult(status) {
 }
 async function localDoctor(runtime, timeoutMs) {
   const located = await locateCredential(runtime);
+  const updates = await runtime.updates;
   return success2("doctor", "local", {
     node: process.version,
     cliVersion,
+    latestVersion: updates?.state === "on" && updates.reached ? updates.latest : null,
+    lastKnownVersion: updates?.state === "on" && !updates.reached ? updates.latest : null,
+    updateCheck: updates?.state ?? "off",
     origin: runtime.origin.origin,
     credentialStorage: located === null ? "none" : located.store.backend.kind,
     videoTools: await videoTools(),
@@ -33818,6 +33858,81 @@ function renderStart(input) {
   ].join("\n") + "\n";
 }
 
+// src/update-check.ts
+import { readFile as readFile9, writeFile as writeFile4 } from "node:fs/promises";
+import { join as join8 } from "node:path";
+var UPDATE_CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var UPDATE_CHECK_TIMEOUT_MS = 1500;
+var releaseSchema = external_exports.string().max(32).refine((value) => parseRelease(value) !== null);
+var cacheSchema = external_exports.object({
+  checkedAt: external_exports.iso.datetime(),
+  latest: releaseSchema.nullable()
+});
+var cacheFile = (stateDirectory) => join8(stateDirectory, "update-check.json");
+var npmRegistry = "https://registry.npmjs.org";
+var loopbackRegistry = /^http:\/\/(127\.0\.0\.1|\[::1\]):[1-9][0-9]{0,4}$/;
+function updateCheckDisabled(env) {
+  const on = (value) => value !== void 0 && value !== "" && value !== "0" && value.toLowerCase() !== "false";
+  return on(env.OBI_NO_UPDATE_CHECK) || on(env.CI);
+}
+async function fetchLatestVersion(env, timeoutMs) {
+  const override = env.OBI_UPDATE_REGISTRY;
+  const registry2 = override !== void 0 && loopbackRegistry.test(override) ? override : npmRegistry;
+  try {
+    const response = await exchange({
+      url: new URL("/-/package/@hireobi%2fcli/dist-tags", registry2),
+      method: "GET",
+      headers: { accept: "application/json" },
+      timeoutMs,
+      responseLimitBytes: 16 * 1024
+    });
+    if (response.status !== 200) return null;
+    const parsed = external_exports.object({ latest: releaseSchema }).safeParse(JSON.parse(response.body));
+    return parsed.success ? parsed.data.latest : null;
+  } catch {
+    return null;
+  }
+}
+async function readCache(stateDirectory) {
+  try {
+    const parsed = cacheSchema.safeParse(JSON.parse(await readFile9(cacheFile(stateDirectory), "utf8")));
+    return parsed.success ? parsed.data : null;
+  } catch {
+    return null;
+  }
+}
+async function writeCache(stateDirectory, cache) {
+  try {
+    await ensureStateDirectory(stateDirectory);
+    await writeFile4(cacheFile(stateDirectory), JSON.stringify(cache), { mode: 384 });
+  } catch {
+  }
+}
+async function checkForUpdate(input) {
+  if (updateCheckDisabled(input.env) || parseRelease(input.installed) === null) return { state: "off" };
+  try {
+    const now = (input.now ?? Date.now)();
+    const cache = await readCache(input.stateDirectory);
+    const age = cache === null ? Infinity : now - Date.parse(cache.checkedAt);
+    let latest = cache?.latest ?? null;
+    let reached = true;
+    if (input.fresh === true || !(age >= 0 && age < UPDATE_CHECK_INTERVAL_MS)) {
+      const fetched = await (input.fetchLatest ?? ((timeoutMs) => fetchLatestVersion(input.env, timeoutMs)))(UPDATE_CHECK_TIMEOUT_MS);
+      reached = fetched !== null;
+      latest = fetched ?? latest;
+      await writeCache(input.stateDirectory, { checkedAt: new Date(now).toISOString(), latest });
+    }
+    const notice = latest !== null && isOlderRelease(input.installed, latest) ? { installed: input.installed, latest, command: CLI_UPDATE_COMMAND } : null;
+    return { state: "on", latest, reached, notice };
+  } catch {
+    return { state: "on", latest: null, reached: false, notice: null };
+  }
+}
+function updateNoticeLine(notice) {
+  return `Obi CLI ${notice.latest} is available (you have ${notice.installed}). Update with: ${notice.command}
+`;
+}
+
 // src/welcome.ts
 var copy = {
   en: {
@@ -33941,6 +34056,17 @@ function failureResult(error51, command, mode) {
 function markOrigin(result, origin) {
   return origin?.development === true ? cliResultSchema.parse({ ...result, origin: origin.origin, development: true }) : result;
 }
+async function updateNotice(updates) {
+  const check3 = await updates;
+  return check3?.state === "on" ? check3.notice : null;
+}
+function withUpdate(result, notice) {
+  return notice === null ? result : cliResultSchema.parse({ ...result, update: notice });
+}
+async function announceUpdate(updates) {
+  const notice = await updateNotice(updates);
+  if (notice !== null) process.stderr.write(updateNoticeLine(notice));
+}
 async function runCli() {
   const argv = process.argv.slice(2);
   const json2 = wantsJson(argv);
@@ -33953,6 +34079,7 @@ async function runCli() {
     argv.some((value) => value === "--test-server" || value.startsWith("--test-server="))
   );
   let origin;
+  let updates;
   let warned = false;
   const activeOrigin = () => {
     const resolved = resolveOrigin(process.env);
@@ -33968,7 +34095,9 @@ async function runCli() {
     command = args.command;
     mode = commandMode(args.command, args.testServer !== void 0);
     origin = activeOrigin();
-    const runtime = { origin, stateDirectory: await prepareStateDirectory(process.env) };
+    const stateDirectory = await prepareStateDirectory(process.env);
+    updates = checkForUpdate({ env: process.env, stateDirectory, installed: cliVersion, fresh: command === "doctor" });
+    const runtime = { origin, stateDirectory, updates };
     if (start) {
       const located = await locateCredential(runtime, "skip");
       process.stdout.write(renderStart({
@@ -33976,6 +34105,7 @@ async function runCli() {
         skillDirectory: packagedSkillDirectory(),
         accountEmail: located === null ? null : located.credential.account.email
       }));
+      await announceUpdate(updates);
       return;
     }
     const result = await executeCommand(args, runtime);
@@ -33991,8 +34121,10 @@ async function runCli() {
     }) : result;
     if (scoped.ok && welcome) {
       process.stdout.write(renderWelcome(process.env, process.stdout.columns, process.stdout.getColorDepth(), registration));
+      await announceUpdate(updates);
     } else {
-      writeResult(markOrigin(scoped, origin), args.json);
+      writeResult(withUpdate(markOrigin(scoped, origin), args.json ? await updateNotice(updates) : null), args.json);
+      if (!args.json) await announceUpdate(updates);
     }
   } catch (error51) {
     if (origin === void 0) {
@@ -34015,7 +34147,8 @@ async function runCli() {
         { code: knownError.code, command: failure2.command }
       ), () => void 0);
     }
-    writeResult(markOrigin(failure2, origin), json2);
+    writeResult(withUpdate(markOrigin(failure2, origin), json2 ? await updateNotice(updates) : null), json2);
+    if (!json2) await announceUpdate(updates);
     process.exitCode = knownError.exitCode;
   } finally {
     closeIdleConnections();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hireobi/cli",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Obi, the AI Search Employee: CLI and Skill for your AI assistant",
   "keywords": [
     "obi",

package/skills/obi/SKILL.md

@@ -53,6 +53,8 @@ Lead with the outcome, material uncertainty and one useful next action. On an in
 
 When a failure cannot be recovered in this conversation (the same error after the retry its `nextAction` names, or `obi doctor --json` reporting `server` as `degraded` or `unreachable`), say so and offer once to send it to Obi support. On the customer's yes, run `obi support "<what happened, in their words>" --json`: it adds the CLI version, the system and the last error code itself. When it fails with `SUPPORT_NOT_SENT`, nothing was sent: give them support@hireobi.com and the `support.diagnosticText` to paste. Never put a token or a credential file in the message.
 
+When a CLI result carries `update` (or stderr says a newer Obi CLI is available), tell the customer in one sentence, once per conversation, and offer to update it for them. Run `update.command` (`npm i -g @hireobi/cli`) only on their yes, then run `obi` once so the Skill links refresh, and ask them to open a new chat if this one keeps the old Skill. Without a yes, carry on with the current version. `CLI_UPDATE_REQUIRED` means the service refuses this version: say so, offer the same update, and retry the command after it.
+
 Separate site observations, customer confirmations, host inferences and independently measured answers. Request only the private extracts needed for the agreed scope; keep secrets and unrelated workspace material local. A local draft or patch is a reviewable suggestion until the customer accepts it. The Skill runs when invoked; while the harness is closed, saved server measurements can continue but host research and reasoning wait for resumption.
 
 Stay in customer mode even inside the Obi source repository. A product-use failure is explained and recovered in this conversation. Open a development task, branch or pull request only after an explicit separate software-development request.