@inerrata-corporation/errata 2.0.0-dev.33 → 2.0.0-dev.35

package/errata.mjs

@@ -20057,6 +20057,13 @@ function renderSnapshot(s) {
     lines.push(`- **Goals:** ${s.profile.goals.join("; ")}`);
   }
   lines.push("");
+  if (s.pendingUpdate) {
+    lines.push("### \u26A1 errata update available");
+    lines.push(
+      `\`${s.pendingUpdate.current}\` \u2192 \`${s.pendingUpdate.latest}\` on the \`${s.pendingUpdate.channel}\` channel. Tell your user \u2014 or run \`errata update\` yourself if they've asked you to keep errata current. It restarts the daemon; that's safe mid-session (hooks fail open, MCP reconnects).`
+    );
+    lines.push("");
+  }
   if (s.needsRevisit.length > 0) {
     lines.push("### \u26A0\uFE0F Needs revisit \u2014 a fact these rested on changed");
     lines.push(
@@ -20227,6 +20234,7 @@ function assembleAgentContext(opts) {
     now: opts.now
   });
   if (opts.edgeElicitation) snapshot.edgeElicitation = opts.edgeElicitation;
+  if (opts.pendingUpdate) snapshot.pendingUpdate = opts.pendingUpdate;
   if (opts.remote && opts.remote.length > 0) {
     const seen = /* @__PURE__ */ new Set();
     const remote = opts.remote.filter((n) => {
@@ -41878,7 +41886,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.0-dev.33" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.0-dev.35" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -42191,12 +42199,14 @@ function createWorkspaceEngine(opts) {
     };
     const prebuilt = passWorker ? await passWorker.snapshot(snapOpts).catch(() => null) : null;
     const doneRender = prebuilt ? null : markPass(`context-render-inline:${profile.name}`);
+    const pendingUpdate = opts.pendingUpdate?.() ?? null;
     const { body: body2, snapshot } = assembleAgentContext({
       store,
       ...snapOpts,
       remote: remotePriors,
       ...elicit ? { edgeElicitation: { instruction: PRIOR_TAG_INSTRUCTION } } : {},
-      ...prebuilt ? { snapshot: prebuilt } : {}
+      ...prebuilt ? { snapshot: prebuilt } : {},
+      ...pendingUpdate ? { pendingUpdate } : {}
     });
     doneRender?.();
     const target = join19(opts.workspaceRoot, "AGENTS.md");
@@ -42864,6 +42874,10 @@ function createWorkspaceEngine(opts) {
     emitEvent(ev) {
       log.append(ev);
     },
+    markContextDirty() {
+      contextDirty = true;
+      refreshContextNow();
+    },
     async tick() {
       maybeRefreshRemotePriors();
       const report = {
@@ -43792,6 +43806,90 @@ function isDaemonAlive(lockPath) {
 
 // src/multi.ts
 init_config();
+
+// src/update.ts
+import { spawn as spawn2 } from "node:child_process";
+var PACKAGE_NAME = "@inerrata-corporation/errata";
+async function latestPublished(channel, timeoutMs = 4e3) {
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+  try {
+    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}`, {
+      headers: { accept: "application/vnd.npm.install-v1+json" },
+      signal: ctrl.signal
+    });
+    if (!res.ok) return null;
+    const body2 = await res.json();
+    return body2["dist-tags"]?.[channel] ?? null;
+  } catch {
+    return null;
+  } finally {
+    clearTimeout(timer);
+  }
+}
+async function checkForUpdate(channel) {
+  const latest = await latestPublished(channel);
+  return {
+    current: DAEMON_VERSION,
+    latest,
+    updateAvailable: latest !== null && latest !== DAEMON_VERSION
+  };
+}
+var POLL_INTERVAL_MS = {
+  dev: 6 * 60 * 6e4,
+  latest: 24 * 60 * 6e4
+};
+function startUpdatePoller(opts) {
+  const check2 = opts.check ?? (() => checkForUpdate(opts.channel));
+  const base = opts.intervalMs ?? POLL_INTERVAL_MS[opts.channel];
+  let pending = null;
+  let inFlight = false;
+  let timer = null;
+  let stopped = false;
+  const runOnce = async () => {
+    if (inFlight) return;
+    inFlight = true;
+    try {
+      const status = await check2();
+      if (status.latest === null) return;
+      const next = status.updateAvailable ? { current: status.current, latest: status.latest, channel: opts.channel } : null;
+      const changed = (next?.latest ?? null) !== (pending?.latest ?? null);
+      pending = next;
+      if (changed) opts.onChange?.(pending);
+    } catch {
+    } finally {
+      inFlight = false;
+    }
+  };
+  const schedule = () => {
+    if (stopped) return;
+    const jitter = 1 + (Math.random() - 0.5) * 0.2;
+    timer = setTimeout(() => {
+      void runOnce().finally(schedule);
+    }, base * jitter);
+    timer.unref?.();
+  };
+  void runOnce().finally(schedule);
+  return {
+    current: () => pending,
+    stop: () => {
+      stopped = true;
+      if (timer) clearTimeout(timer);
+    }
+  };
+}
+function runNpmInstall(channel) {
+  return new Promise((resolve5) => {
+    const child = spawn2("npm", ["install", "-g", `${PACKAGE_NAME}@${channel}`], {
+      stdio: "inherit",
+      shell: true
+    });
+    child.on("close", (code) => resolve5(code ?? 1));
+    child.on("error", () => resolve5(1));
+  });
+}
+
+// src/multi.ts
 init_cloud_endpoint_policy();
 init_cloud_auth();
 function normPath(p) {
@@ -43858,6 +43956,15 @@ async function startMultiDaemon(opts = {}) {
   startLoopLagMonitor();
   let baseUrl = "";
   const records = [];
+  const updatePoller = opts.updateCheck ? startUpdatePoller({
+    channel: loadConfig().updateChannel,
+    onChange: (pending) => {
+      if (pending) {
+        console.log(`\u26A1 errata update available: ${pending.current} \u2192 ${pending.latest} \u2014 run: errata update`);
+      }
+      for (const r of records) r.engine.markContextDirty();
+    }
+  }) : null;
   const boundaryListeners = [];
   let boundaryFlushing = false;
   const fireBoundary = () => {
@@ -43876,6 +43983,7 @@ async function startMultiDaemon(opts = {}) {
       apiKey: opts.apiKey,
       reviewUrl: () => `${baseUrl}/ws/${id}/review`,
       sharedStore,
+      pendingUpdate: () => updatePoller?.current() ?? null,
       ...opts.skipWatchers ? { skipWatchers: true } : {}
     });
     const webApp = buildWebUi({
@@ -43965,6 +44073,7 @@ async function startMultiDaemon(opts = {}) {
     "/",
     (c) => c.json({
       daemonVersion: DAEMON_VERSION,
+      pendingUpdate: updatePoller?.current() ?? null,
       projects: records.map((r) => ({
         id: r.id,
         name: r.entry.name,
@@ -44427,6 +44536,7 @@ async function startMultiDaemon(opts = {}) {
       await new Promise(
         (res) => server.close(res)
       );
+      updatePoller?.stop();
       for (const r of records) await r.engine.stop();
       if (consolidateWorker) await consolidateWorker.stop();
       try {
@@ -44584,45 +44694,6 @@ async function loginOAuthLoopback(opts) {
   return { tokens, tokenEndpoint: endpoints.tokenEndpoint, clientId };
 }
 
-// src/update.ts
-import { spawn as spawn2 } from "node:child_process";
-var PACKAGE_NAME = "@inerrata-corporation/errata";
-async function latestPublished(channel, timeoutMs = 4e3) {
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), timeoutMs);
-  try {
-    const res = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}`, {
-      headers: { accept: "application/vnd.npm.install-v1+json" },
-      signal: ctrl.signal
-    });
-    if (!res.ok) return null;
-    const body2 = await res.json();
-    return body2["dist-tags"]?.[channel] ?? null;
-  } catch {
-    return null;
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function checkForUpdate(channel) {
-  const latest = await latestPublished(channel);
-  return {
-    current: DAEMON_VERSION,
-    latest,
-    updateAvailable: latest !== null && latest !== DAEMON_VERSION
-  };
-}
-function runNpmInstall(channel) {
-  return new Promise((resolve5) => {
-    const child = spawn2("npm", ["install", "-g", `${PACKAGE_NAME}@${channel}`], {
-      stdio: "inherit",
-      shell: true
-    });
-    child.on("close", (code) => resolve5(code ?? 1));
-    child.on("error", () => resolve5(1));
-  });
-}
-
 // src/cli.ts
 init_paths();
 
@@ -44673,6 +44744,15 @@ function parseBurstArgs(args2) {
   };
 }
 
+// src/login-mode.ts
+var OAUTH_DEFAULT_ENV = "ERRATA_DAEMON_OAUTH_DEFAULT";
+function isDaemonOAuthDefaultEnabled(env2 = process.env) {
+  return env2[OAUTH_DEFAULT_ENV] === "1";
+}
+function shouldUseOAuthLogin(flags2, env2 = process.env) {
+  return Boolean(flags2.oauth || !flags2.device && isDaemonOAuthDefaultEnabled(env2));
+}
+
 // src/consolidation-trigger.ts
 var DEFAULT_CONSOLIDATION_POLICY = {
   baseFloorMs: 6e4,
@@ -44849,7 +44929,7 @@ Commands:
                       Flags: --port N (default 7891)
   mcp                 Run the MCP stdio server \u2014 the agent's full errata tool
                       surface (navigation, problems, claims, burst, health)
-  login               Sign in with the cloud (OAuth by default; --device for legacy)
+  login               Sign in with the cloud (device-code by default; --oauth for OAuth)
   logout              Clear local cloud credentials
   sync now            Flush outbox to the cloud once
   privacy             Show what is collected/scrubbed + your consent state
@@ -44864,6 +44944,7 @@ Commands:
 Environment:
   ERRATA_CLOUD_URL                Cloud base URL (default ${DEFAULT_CLOUD_URL})
   ERRATA_ALLOW_DIRECT_V1_CLOUD=1  Allow non-local legacy v1 cloud testing
+  ${OAUTH_DEFAULT_ENV}=1       Internal dogfood: plain \`errata login\` uses OAuth
 `);
 }
 function resolveHookPort(explicit) {
@@ -45215,20 +45296,24 @@ async function cmdLoginOAuth(cfg) {
     process.exitCode = 1;
     return;
   }
-  cfg.accessToken = result.tokens.accessToken;
-  cfg.refreshToken = result.tokens.refreshToken ?? null;
-  cfg.tokenEndpoint = result.tokenEndpoint;
-  cfg.oauthClientId = result.clientId;
-  cfg.apiKey = null;
-  saveConfig(cfg);
+  const nextCfg = {
+    ...cfg,
+    accessToken: result.tokens.accessToken,
+    refreshToken: result.tokens.refreshToken ?? null,
+    tokenEndpoint: result.tokenEndpoint,
+    oauthClientId: result.clientId,
+    apiKey: null
+  };
   try {
-    const me = await authedCloudClient(cfg).me();
-    cfg.userId = me.agentId;
-    cfg.email = me.handle;
-    saveConfig(cfg);
+    const me = await authedCloudClient(nextCfg).me();
+    nextCfg.userId = me.agentId;
+    nextCfg.email = me.handle;
+    saveConfig(nextCfg);
     console.log(`logged in as ${me.handle} (${me.tier}) \u2014 tokens stored at ${globalConfigPath()}`);
   } catch (err2) {
-    console.warn(`signed in, but identity check failed: ${err2 instanceof Error ? err2.message : err2}`);
+    console.error(`signed in, but identity check failed: ${err2 instanceof Error ? err2.message : err2}`);
+    console.error(`  credentials were not stored; try again or paste a key:  errata login --token <key>`);
+    process.exitCode = 1;
   }
 }
 async function cmdLogin() {
@@ -45239,7 +45324,7 @@ async function cmdLogin() {
     await applyToken(cfg, flags2.token);
     return;
   }
-  if (flags2.oauth || !flags2.device) {
+  if (shouldUseOAuthLogin(flags2)) {
     await cmdLoginOAuth(cfg);
     return;
   }
@@ -46395,7 +46480,7 @@ async function cmdDash(args2) {
   const reindexOnStart = !args2.includes("--no-reindex");
   const skipEmbed = !args2.includes("--embed");
   const skipWatchers = args2.includes("--no-watch");
-  const handle2 = await startMultiDaemon({ webPort: port, reindexOnStart, skipEmbed, skipWatchers });
+  const handle2 = await startMultiDaemon({ webPort: port, reindexOnStart, skipEmbed, skipWatchers, updateCheck: true });
   console.log(`errata multi-daemon running`);
   console.log(`  endpoint:  ${handle2.url}  (JSON \u2014 the human view is \`errata report\`)`);
   console.log(`  projects:  ${handle2.records.length}`);
@@ -46408,11 +46493,6 @@ async function cmdDash(args2) {
     console.log(`  indexing all projects in the background${skipEmbed ? " (--no-embed)" : ""}\u2026`);
   }
   console.log(`Press Ctrl-C to stop.`);
-  void checkForUpdate(loadConfig().updateChannel).then((u) => {
-    if (u.updateAvailable) {
-      console.log(`\u26A1 errata update available: ${u.current} \u2192 ${u.latest} \u2014 run: errata update`);
-    }
-  });
   const notifyEnabled = loadConfig().notifications && !process.env["ERRATA_NO_NOTIFY"];
   const QUIESCENCE_MS = 9e4;
   let quiesceTimer = null;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@inerrata-corporation/errata",
-  "version": "2.0.0-dev.33",
+  "version": "2.0.0-dev.35",
   "description": "errata - local-first observation engine for AI coding agents",
   "type": "module",
   "bin": {