@mastra/code-sdk 1.0.3-alpha.0 → 1.1.0-alpha.2

package/dist/utils/update-check.js

@@ -1,301 +1,383 @@
-import { execFile } from "node:child_process";
-import { readFileSync, realpathSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join, resolve, sep } from "node:path";
-import { fileURLToPath } from "node:url";
+import { readFileSync, realpathSync } from "fs";
+import { homedir } from "os";
+import { dirname, join, resolve, sep } from "path";
+import { execFile } from "child_process";
+import { fileURLToPath } from "url";
+//#region src/utils/update-check.ts
+/**
+* Check for newer versions of mastracode on npm.
+*/
 const PACKAGE_NAME = "mastracode";
 const NPM_REGISTRY_URL = `https://registry.npmjs.org/${PACKAGE_NAME}/latest`;
+/** Timeout for the npm registry fetch (ms). */
 const FETCH_TIMEOUT_MS = 5e3;
 const USE_SHELL = process.platform === "win32";
 function matchPM(str) {
-  if (/pnpm/i.test(str)) return "pnpm";
-  if (/\byarn\b/i.test(str)) return "yarn";
-  if (/\bbun\b/i.test(str)) return "bun";
-  if (/\bnpm\b/i.test(str)) return "npm";
-  return null;
+	if (/pnpm/i.test(str)) return "pnpm";
+	if (/\byarn\b/i.test(str)) return "yarn";
+	if (/\bbun\b/i.test(str)) return "bun";
+	if (/\bnpm\b/i.test(str)) return "npm";
+	return null;
 }
+/**
+* Detect which package manager was used to install mastracode globally.
+*
+* Uses a multi-tier approach:
+* 1. npm_config_user_agent env var (set when run via `pnpm run`, `npm run`, etc.)
+* 2. npm_execpath env var (fallback for script-based invocation)
+* 3. NODE_PATH env var (set by pnpm global bin stubs)
+* 4. Resolved path of the running script (process.argv[1])
+* 5. Shell-out to `pnpm list -g` to check if pnpm manages the package
+* 6. Falls back to 'npm'
+*/
 async function detectPackageManager() {
-  const userAgent = process.env.npm_config_user_agent;
-  if (userAgent) {
-    const pm = matchPM(userAgent);
-    if (pm) return pm;
-  }
-  const execPath = process.env.npm_execpath;
-  if (execPath) {
-    const pm = matchPM(execPath);
-    if (pm) return pm;
-  }
-  const nodePath = process.env.NODE_PATH;
-  if (nodePath) {
-    if (/[/\\]\.pnpm[/\\]/.test(nodePath) || /[/\\]pnpm[/\\]/.test(nodePath)) return "pnpm";
-    if (/[/\\]\.yarn[/\\]/.test(nodePath)) return "yarn";
-    if (/[/\\]\.bun[/\\]/.test(nodePath)) return "bun";
-  }
-  try {
-    const scriptPath = realpathSync(process.argv[1] ?? "");
-    if (/[/\\]\.?pnpm[/\\]/.test(scriptPath)) return "pnpm";
-    if (/[/\\]\.?yarn[/\\]/.test(scriptPath)) return "yarn";
-    if (/[/\\]\.?bun[/\\]/.test(scriptPath)) return "bun";
-  } catch {
-  }
-  const pnpmResult = await new Promise((resolve2) => {
-    execFile(
-      "pnpm",
-      ["list", "-g", "--depth=0", PACKAGE_NAME],
-      { timeout: 3e3, shell: USE_SHELL },
-      (error, stdout) => {
-        resolve2(!error && stdout.includes(PACKAGE_NAME));
-      }
-    );
-  });
-  if (pnpmResult) return "pnpm";
-  return "npm";
+	const userAgent = process.env.npm_config_user_agent;
+	if (userAgent) {
+		const pm = matchPM(userAgent);
+		if (pm) return pm;
+	}
+	const execPath = process.env.npm_execpath;
+	if (execPath) {
+		const pm = matchPM(execPath);
+		if (pm) return pm;
+	}
+	const nodePath = process.env.NODE_PATH;
+	if (nodePath) {
+		if (/[/\\]\.pnpm[/\\]/.test(nodePath) || /[/\\]pnpm[/\\]/.test(nodePath)) return "pnpm";
+		if (/[/\\]\.yarn[/\\]/.test(nodePath)) return "yarn";
+		if (/[/\\]\.bun[/\\]/.test(nodePath)) return "bun";
+	}
+	try {
+		const scriptPath = realpathSync(process.argv[1] ?? "");
+		if (/[/\\]\.?pnpm[/\\]/.test(scriptPath)) return "pnpm";
+		if (/[/\\]\.?yarn[/\\]/.test(scriptPath)) return "yarn";
+		if (/[/\\]\.?bun[/\\]/.test(scriptPath)) return "bun";
+	} catch {}
+	if (await new Promise((resolve) => {
+		execFile("pnpm", [
+			"list",
+			"-g",
+			"--depth=0",
+			PACKAGE_NAME
+		], {
+			timeout: 3e3,
+			shell: USE_SHELL
+		}, (error, stdout) => {
+			resolve(!error && stdout.includes(PACKAGE_NAME));
+		});
+	})) return "pnpm";
+	return "npm";
 }
+/**
+* Build the shell command string a user would run to install/update globally.
+*/
 function getInstallCommand(pm, version) {
-  const pkg = version ? `${PACKAGE_NAME}@${version}` : `${PACKAGE_NAME}@latest`;
-  switch (pm) {
-    case "pnpm":
-      return `pnpm add -g ${pkg}`;
-    case "yarn":
-      return `yarn global add ${pkg}`;
-    case "bun":
-      return `bun add -g ${pkg}`;
-    default:
-      return `npm install -g ${pkg}`;
-  }
+	const pkg = version ? `${PACKAGE_NAME}@${version}` : `${PACKAGE_NAME}@latest`;
+	switch (pm) {
+		case "pnpm": return `pnpm add -g ${pkg}`;
+		case "yarn": return `yarn global add ${pkg}`;
+		case "bun": return `bun add -g ${pkg}`;
+		default: return `npm install -g ${pkg}`;
+	}
 }
+/**
+* Read the current version, injected at build time by tsdown's `define` option.
+* Falls back to reading package.json at runtime (e.g. when running from source with tsx).
+*/
 function getCurrentVersion() {
-  if (typeof MASTRACODE_VERSION !== "undefined") {
-    return MASTRACODE_VERSION;
-  }
-  const dir = dirname(fileURLToPath(import.meta.url));
-  const pkgPath = resolve(dir, "../../package.json");
-  const pkg = JSON.parse(readFileSync(pkgPath, "utf-8"));
-  return pkg.version;
+	if (typeof MASTRACODE_VERSION !== "undefined") return MASTRACODE_VERSION;
+	const pkgPath = resolve(dirname(fileURLToPath(import.meta.url)), "../../package.json");
+	return JSON.parse(readFileSync(pkgPath, "utf-8")).version;
 }
+/**
+* Fetch the latest published version from npm.
+* Returns null if the fetch fails (network error, timeout, etc.).
+*/
 async function fetchLatestVersion() {
-  if (process.env.MASTRACODE_UPDATE_LATEST_VERSION) return process.env.MASTRACODE_UPDATE_LATEST_VERSION;
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-    const res = await fetch(NPM_REGISTRY_URL, { signal: controller.signal });
-    clearTimeout(timeout);
-    if (!res.ok) return null;
-    const data = await res.json();
-    return data.version ?? null;
-  } catch {
-    return null;
-  }
+	if (process.env.MASTRACODE_UPDATE_LATEST_VERSION) return process.env.MASTRACODE_UPDATE_LATEST_VERSION;
+	try {
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+		const res = await fetch(NPM_REGISTRY_URL, { signal: controller.signal });
+		clearTimeout(timeout);
+		if (!res.ok) return null;
+		return (await res.json()).version ?? null;
+	} catch {
+		return null;
+	}
 }
+/**
+* Simple semver comparison: returns true if `latest` is newer than `current`.
+* Handles standard x.y.z versions. Ignores pre-release tags.
+*/
 function isNewerVersion(current, latest) {
-  const parse = (v) => v.replace(/^v/, "").split("-")[0].split(".").map((s) => {
-    const n = Number(s);
-    return Number.isFinite(n) ? n : 0;
-  });
-  const [cMajor = 0, cMinor = 0, cPatch = 0] = parse(current);
-  const [lMajor = 0, lMinor = 0, lPatch = 0] = parse(latest);
-  if (lMajor !== cMajor) return lMajor > cMajor;
-  if (lMinor !== cMinor) return lMinor > cMinor;
-  return lPatch > cPatch;
+	const parse = (v) => v.replace(/^v/, "").split("-")[0].split(".").map((s) => {
+		const n = Number(s);
+		return Number.isFinite(n) ? n : 0;
+	});
+	const [cMajor = 0, cMinor = 0, cPatch = 0] = parse(current);
+	const [lMajor = 0, lMinor = 0, lPatch = 0] = parse(latest);
+	if (lMajor !== cMajor) return lMajor > cMajor;
+	if (lMinor !== cMinor) return lMinor > cMinor;
+	return lPatch > cPatch;
 }
+/** Max entries to show in the changelog summary. */
 const MAX_CHANGELOG_ENTRIES = 20;
+/**
+* Fetch the CHANGELOG.md for a specific published version from the npm CDN
+* and extract a human-readable summary of changes.
+* Returns null if the fetch fails or the changelog can't be parsed.
+*/
 async function fetchChangelog(version) {
-  if (process.env.MASTRACODE_UPDATE_CHANGELOG) return process.env.MASTRACODE_UPDATE_CHANGELOG;
-  try {
-    const url = `https://unpkg.com/${PACKAGE_NAME}@${version}/CHANGELOG.md`;
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-    const res = await fetch(url, { signal: controller.signal });
-    clearTimeout(timeout);
-    if (!res.ok) return null;
-    const text = await res.text();
-    return parseChangelog(text, version);
-  } catch {
-    return null;
-  }
+	if (process.env.MASTRACODE_UPDATE_CHANGELOG) return process.env.MASTRACODE_UPDATE_CHANGELOG;
+	try {
+		const url = `https://unpkg.com/${PACKAGE_NAME}@${version}/CHANGELOG.md`;
+		const controller = new AbortController();
+		const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+		const res = await fetch(url, { signal: controller.signal });
+		clearTimeout(timeout);
+		if (!res.ok) return null;
+		return parseChangelog(await res.text(), version);
+	} catch {
+		return null;
+	}
 }
+/**
+* Extract the changelog section for a specific version and format it
+* as a concise bullet list suitable for terminal display.
+*/
 function parseChangelog(markdown, version) {
-  const versionHeader = `## ${version}`;
-  const startIdx = markdown.indexOf(versionHeader);
-  if (startIdx === -1) return null;
-  const afterHeader = startIdx + versionHeader.length;
-  const nextHeaderIdx = markdown.indexOf("\n## ", afterHeader);
-  const section = nextHeaderIdx === -1 ? markdown.slice(afterHeader) : markdown.slice(afterHeader, nextHeaderIdx);
-  const lines = section.split("\n");
-  const entries = [];
-  let skipIndented = false;
-  for (let i = 0; i < lines.length; i++) {
-    const raw = lines[i];
-    const trimmed = raw.trim();
-    const isTopLevel = raw === trimmed && trimmed.startsWith("- ");
-    if (!isTopLevel) {
-      if (skipIndented && /^\s+-\s/.test(raw)) continue;
-      skipIndented = false;
-      continue;
-    }
-    if (/^- Updated dependenc/i.test(trimmed)) {
-      skipIndented = true;
-      continue;
-    }
-    skipIndented = false;
-    let entry = trimmed.slice(2);
-    entry = entry.replace(/\[([^\]]+)\]\([^)]+\)/g, "$1");
-    entry = entry.replace(/\s*\(#\d+\)\s*/g, " ");
-    entry = entry.replace(/\s*\(`[a-f0-9]+`\)\s*/g, " ");
-    entry = entry.replace(/\.\s*$/, "");
-    entry = entry.trim();
-    if (entry) entries.push(entry);
-    if (entries.length >= MAX_CHANGELOG_ENTRIES) break;
-  }
-  if (entries.length === 0) return null;
-  return entries.map((e) => `  \u2022 ${e}`).join("\n");
+	const versionHeader = `## ${version}`;
+	const startIdx = markdown.indexOf(versionHeader);
+	if (startIdx === -1) return null;
+	const afterHeader = startIdx + versionHeader.length;
+	const nextHeaderIdx = markdown.indexOf("\n## ", afterHeader);
+	const lines = (nextHeaderIdx === -1 ? markdown.slice(afterHeader) : markdown.slice(afterHeader, nextHeaderIdx)).split("\n");
+	const entries = [];
+	let skipIndented = false;
+	for (let i = 0; i < lines.length; i++) {
+		const raw = lines[i];
+		const trimmed = raw.trim();
+		if (!(raw === trimmed && trimmed.startsWith("- "))) {
+			if (skipIndented && /^\s+-\s/.test(raw)) continue;
+			skipIndented = false;
+			continue;
+		}
+		if (/^- Updated dependenc/i.test(trimmed)) {
+			skipIndented = true;
+			continue;
+		}
+		skipIndented = false;
+		let entry = trimmed.slice(2);
+		entry = entry.replace(/\[([^\]]+)\]\([^)]+\)/g, "$1");
+		entry = entry.replace(/\s*\(#\d+\)\s*/g, " ");
+		entry = entry.replace(/\s*\(`[a-f0-9]+`\)\s*/g, " ");
+		entry = entry.replace(/\.\s*$/, "");
+		entry = entry.trim();
+		if (entry) entries.push(entry);
+		if (entries.length >= MAX_CHANGELOG_ENTRIES) break;
+	}
+	if (entries.length === 0) return null;
+	return entries.map((e) => `  • ${e}`).join("\n");
 }
+/**
+* Run the appropriate global install command to update mastracode.
+* Exit code 0 does not prove the running binary changed (the install may land
+* in a location the PATH shim doesn't use) — verify with {@link locateOwnInstall}.
+*/
 function runUpdate(pm, targetVersion) {
-  return execUpdate(pm, buildInstallArgs(pm, targetVersion));
+	return execUpdate(pm, buildInstallArgs(pm, targetVersion));
 }
 function execUpdate(cmd, args) {
-  return new Promise((resolve2) => {
-    execFile(cmd, args, { timeout: 6e4, shell: USE_SHELL }, (error, _stdout, stderr) => {
-      const captured = (stderr ?? "").trim();
-      if (error) {
-        resolve2({ ok: false, stderr: captured || error.message });
-      } else {
-        resolve2({ ok: true, stderr: captured || void 0 });
-      }
-    });
-  });
+	return new Promise((resolve) => {
+		execFile(cmd, args, {
+			timeout: 6e4,
+			shell: USE_SHELL
+		}, (error, _stdout, stderr) => {
+			const captured = (stderr ?? "").trim();
+			if (error) resolve({
+				ok: false,
+				stderr: captured || error.message
+			});
+			else resolve({
+				ok: true,
+				stderr: captured || void 0
+			});
+		});
+	});
 }
 function buildInstallArgs(pm, version) {
-  const pkg = `${PACKAGE_NAME}@${version}`;
-  switch (pm) {
-    case "pnpm":
-      return ["add", "-g", pkg];
-    case "yarn":
-      return ["global", "add", pkg];
-    case "bun":
-      return ["add", "-g", pkg];
-    default:
-      return ["install", "-g", pkg];
-  }
+	const pkg = `${PACKAGE_NAME}@${version}`;
+	switch (pm) {
+		case "pnpm": return [
+			"add",
+			"-g",
+			pkg
+		];
+		case "yarn": return [
+			"global",
+			"add",
+			pkg
+		];
+		case "bun": return [
+			"add",
+			"-g",
+			pkg
+		];
+		default: return [
+			"install",
+			"-g",
+			pkg
+		];
+	}
 }
-const MAX_UPDATE_ERROR_LINES = 5;
 function formatUpdaterError(stderr) {
-  if (!stderr) return null;
-  const lines = stderr.split("\n").map((line) => line.trimEnd()).filter((line) => line.trim().length > 0);
-  if (lines.length === 0) return null;
-  return lines.slice(-MAX_UPDATE_ERROR_LINES).join("\n");
+	if (!stderr) return null;
+	const lines = stderr.split("\n").map((line) => line.trimEnd()).filter((line) => line.trim().length > 0);
+	if (lines.length === 0) return null;
+	return lines.slice(-5).join("\n");
 }
+/**
+* Find the installed mastracode package the running binary belongs to (walking
+* up from `process.argv[1]`) and read its version fresh from disk. Returns
+* null when it can't be determined, e.g. when running from source.
+*/
 function locateOwnInstall() {
-  const entry = process.argv[1];
-  if (!entry) return null;
-  let dir;
-  try {
-    dir = dirname(realpathSync(entry));
-  } catch {
-    return null;
-  }
-  let previous = "";
-  while (dir && dir !== previous) {
-    try {
-      const pkg = JSON.parse(readFileSync(resolve(dir, "package.json"), "utf-8"));
-      if (pkg.name === PACKAGE_NAME) {
-        return { dir, version: typeof pkg.version === "string" ? pkg.version : null };
-      }
-    } catch {
-    }
-    previous = dir;
-    dir = dirname(dir);
-  }
-  return null;
+	const entry = process.argv[1];
+	if (!entry) return null;
+	let dir;
+	try {
+		dir = dirname(realpathSync(entry));
+	} catch {
+		return null;
+	}
+	let previous = "";
+	while (dir && dir !== previous) {
+		try {
+			const pkg = JSON.parse(readFileSync(resolve(dir, "package.json"), "utf-8"));
+			if (pkg.name === PACKAGE_NAME) return {
+				dir,
+				version: typeof pkg.version === "string" ? pkg.version : null
+			};
+		} catch {}
+		previous = dir;
+		dir = dirname(dir);
+	}
+	return null;
 }
+/**
+* Decide what to tell the user after {@link runUpdate}: `updated` when the
+* on-disk version matches the target (or can't be determined), `unchanged`
+* when the package manager succeeded but the running install didn't change,
+* `failed` on error (with the package manager's stderr).
+*/
 function resolveUpdateOutcome(opts) {
-  const { pm, targetVersion, result, install } = opts;
-  const cmd = opts.manualCommand ?? getInstallCommand(pm, targetVersion);
-  if (!result.ok) {
-    const details = formatUpdaterError(result.stderr);
-    let message = `Auto-update failed. Run \`${cmd}\` manually.`;
-    if (details) message += `
-
-${details}`;
-    return { status: "failed", message };
-  }
-  if (install?.version != null && install.version !== targetVersion) {
-    const message = opts.manualCommand ? `The update ran, but the Mastra Code you are running (at ${install.dir}) is still v${install.version}. Try \`${cmd}\` manually.` : `The update installed, but the Mastra Code you are running (at ${install.dir}) is still v${install.version} \u2014 it looks like it is managed by another tool. Update it with that tool, or try \`${cmd}\`.`;
-    return { status: "unchanged", message };
-  }
-  return { status: "updated", message: `Updated to v${targetVersion}. Please restart Mastra Code.` };
+	const { pm, targetVersion, result, install } = opts;
+	const cmd = opts.manualCommand ?? getInstallCommand(pm, targetVersion);
+	if (!result.ok) {
+		const details = formatUpdaterError(result.stderr);
+		let message = `Auto-update failed. Run \`${cmd}\` manually.`;
+		if (details) message += `\n\n${details}`;
+		return {
+			status: "failed",
+			message
+		};
+	}
+	if (install?.version != null && install.version !== targetVersion) return {
+		status: "unchanged",
+		message: opts.manualCommand ? `The update ran, but the Mastra Code you are running (at ${install.dir}) is still v${install.version}. Try \`${cmd}\` manually.` : `The update installed, but the Mastra Code you are running (at ${install.dir}) is still v${install.version} — it looks like it is managed by another tool. Update it with that tool, or try \`${cmd}\`.`
+	};
+	return {
+		status: "updated",
+		message: `Updated to v${targetVersion}. Please restart Mastra Code.`
+	};
 }
+/** Global node_modules directory the package manager installs into, or null when unknown. */
 function getGlobalRoot(pm) {
-  const args = pm === "yarn" ? ["global", "dir"] : ["root", "-g"];
-  return new Promise((res) => {
-    execFile(pm, args, { timeout: 1e4, shell: USE_SHELL }, (error, stdout) => {
-      const out = (stdout ?? "").trim().split("\n").pop()?.trim();
-      if (error || !out) return res(null);
-      res(pm === "yarn" ? resolve(out, "node_modules") : out);
-    });
-  });
+	const args = pm === "yarn" ? ["global", "dir"] : ["root", "-g"];
+	return new Promise((res) => {
+		execFile(pm, args, {
+			timeout: 1e4,
+			shell: USE_SHELL
+		}, (error, stdout) => {
+			const out = (stdout ?? "").trim().split("\n").pop()?.trim();
+			if (error || !out) return res(null);
+			res(pm === "yarn" ? resolve(out, "node_modules") : out);
+		});
+	});
 }
+/**
+* Whether updating via `pm` would touch the install the running binary uses.
+* Fail-open: returns true when either side can't be determined, so the update
+* proceeds and the post-install verification has the final word.
+*/
 async function isOwnInstallManagedBy(pm, install) {
-  if (!install) return true;
-  const root = await getGlobalRoot(pm);
-  if (!root) return true;
-  try {
-    return realpathSync(resolve(root, PACKAGE_NAME)) === install.dir;
-  } catch {
-    return false;
-  }
+	if (!install) return true;
+	const root = await getGlobalRoot(pm);
+	if (!root) return true;
+	try {
+		return realpathSync(resolve(root, PACKAGE_NAME)) === install.dir;
+	} catch {
+		return false;
+	}
 }
 function findInstallOwner(dir, version) {
-  if (dir.startsWith(join(homedir(), ".vite-plus") + sep)) {
-    return {
-      name: "vite-plus",
-      exec: { cmd: "vp", args: ["install", "-g", `${PACKAGE_NAME}@${version}`] },
-      command: `vp install -g ${PACKAGE_NAME}@${version}`
-    };
-  }
-  if (dir.split(sep).includes("Cellar")) {
-    return { name: "Homebrew", command: `brew upgrade ${PACKAGE_NAME}` };
-  }
-  return null;
+	if (dir.startsWith(join(homedir(), ".vite-plus") + sep)) return {
+		name: "vite-plus",
+		exec: {
+			cmd: "vp",
+			args: [
+				"install",
+				"-g",
+				`${PACKAGE_NAME}@${version}`
+			]
+		},
+		command: `vp install -g ${PACKAGE_NAME}@${version}`
+	};
+	if (dir.split(sep).includes("Cellar")) return {
+		name: "Homebrew",
+		command: `brew upgrade ${PACKAGE_NAME}`
+	};
+	return null;
 }
+/**
+* Update mastracode and verify the result: delegates to the tool that owns the
+* running install when we recognize it, skips the install when it isn't
+* managed by `pm`, otherwise runs the package manager. Every executed update
+* is verified against the on-disk version.
+*/
 async function performUpdate(pm, targetVersion) {
-  if (!/^[\w.+-]+$/.test(targetVersion)) {
-    return { status: "failed", message: `Auto-update aborted: unexpected version "${targetVersion}".` };
-  }
-  const install = locateOwnInstall();
-  const owner = install ? findInstallOwner(install.dir, targetVersion) : null;
-  if (owner) {
-    if (!owner.exec) {
-      const message = `Your Mastra Code install (at ${install.dir}) is managed by ${owner.name}. Update it with \`${owner.command}\`.`;
-      return { status: "unchanged", message };
-    }
-    const result2 = await execUpdate(owner.exec.cmd, owner.exec.args);
-    return resolveUpdateOutcome({
-      pm,
-      targetVersion,
-      result: result2,
-      install: locateOwnInstall(),
-      manualCommand: owner.command
-    });
-  }
-  if (!await isOwnInstallManagedBy(pm, install)) {
-    const message = `Your Mastra Code install (at ${install.dir}) is not managed by ${pm} \u2014 it looks like it was installed by another tool. Update it with that tool, or try \`${getInstallCommand(pm, targetVersion)}\`.`;
-    return { status: "unchanged", message };
-  }
-  const result = await runUpdate(pm, targetVersion);
-  return resolveUpdateOutcome({ pm, targetVersion, result, install: locateOwnInstall() });
+	if (!/^[\w.+-]+$/.test(targetVersion)) return {
+		status: "failed",
+		message: `Auto-update aborted: unexpected version "${targetVersion}".`
+	};
+	const install = locateOwnInstall();
+	const owner = install ? findInstallOwner(install.dir, targetVersion) : null;
+	if (owner) {
+		if (!owner.exec) return {
+			status: "unchanged",
+			message: `Your Mastra Code install (at ${install.dir}) is managed by ${owner.name}. Update it with \`${owner.command}\`.`
+		};
+		return resolveUpdateOutcome({
+			pm,
+			targetVersion,
+			result: await execUpdate(owner.exec.cmd, owner.exec.args),
+			install: locateOwnInstall(),
+			manualCommand: owner.command
+		});
+	}
+	if (!await isOwnInstallManagedBy(pm, install)) return {
+		status: "unchanged",
+		message: `Your Mastra Code install (at ${install.dir}) is not managed by ${pm} — it looks like it was installed by another tool. Update it with that tool, or try \`${getInstallCommand(pm, targetVersion)}\`.`
+	};
+	return resolveUpdateOutcome({
+		pm,
+		targetVersion,
+		result: await runUpdate(pm, targetVersion),
+		install: locateOwnInstall()
+	});
 }
-export {
-  detectPackageManager,
-  fetchChangelog,
-  fetchLatestVersion,
-  getCurrentVersion,
-  getInstallCommand,
-  isNewerVersion,
-  locateOwnInstall,
-  parseChangelog,
-  performUpdate,
-  resolveUpdateOutcome,
-  runUpdate
-};
+//#endregion
+export { detectPackageManager, fetchChangelog, fetchLatestVersion, getCurrentVersion, getInstallCommand, isNewerVersion, locateOwnInstall, parseChangelog, performUpdate, resolveUpdateOutcome, runUpdate };
+
 //# sourceMappingURL=update-check.js.map