@mohou/host 1.0.20 → 1.0.21

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mohou/host",
-  "version": "1.0.20",
+  "version": "1.0.21",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -49,11 +49,11 @@
     "react-dom": "^19.2.0",
     "tailwindcss": "^4.3.3",
     "tw-animate-css": "^1.4.0",
-    "@mohou/app-view": "^1.0.20",
-    "@mohou/contract": "^1.0.20",
-    "@mohou/runtime-provider": "^1.0.20",
-    "@mohou/ui": "^1.0.20",
-    "@mohou/mcp-client": "^1.0.20"
+    "@mohou/app-view": "^1.0.21",
+    "@mohou/mcp-client": "^1.0.21",
+    "@mohou/runtime-provider": "^1.0.21",
+    "@mohou/contract": "^1.0.21",
+    "@mohou/ui": "^1.0.21"
   },
   "devDependencies": {
     "@types/better-sqlite3": "^9.6.0",

package/src/http/bind.ts

@@ -15,7 +15,7 @@ import { readVendorFile } from './ports.ts'
 import type { LoopbackPorts } from './ports.ts'
 import { authoringTokenMatches } from './guard.ts'
 import { probeBrain, type HostPolicy } from '../host/config.ts'
-import { checkPackageUpdate, discardUpdateResult, readUpdateResult, stagePackageUpdate } from './updates.ts'
+import { checkPackageUpdate, discardUpdateResult, readUpdateResult, readUpdateSource, stagePackageUpdate } from './updates.ts'
 import { McpError } from '@mohou/mcp-client'
 
 import { admitMcpText } from '../host/mcp-import.ts'
@@ -147,6 +147,7 @@ export function bindLoopback(input: {
     subscribeHost: listener => input.author.hostEvents.subscribe(listener),
     subscribeFrames: listener => forwardFrames(input.author.appEvents, listener),
     subscribeApp: (appId, since, listener) => input.author.appEvents.subscribe(appId, since, listener),
+    updateSource: () => Promise.resolve(readUpdateSource()),
     checkUpdate: async () => {
       const attempt = readUpdateResult(input.runtimeRoot)
       return {

package/src/http/owner.ts

@@ -36,9 +36,10 @@ export function mountOwner(app: Hono<HostEnv>, ports: LoopbackPorts): void {
     if (denied !== undefined) return denied
     return writeConfig(c, ports)
   })
-  app.get(httpLayout.about, c => c.json({
+  app.get(httpLayout.about, async c => c.json({
     ok: true,
     ...aboutInfo(),
+    source: await ports.updateSource(),
     authoring: {
       url: `http://127.0.0.1:${ports.readPolicy().hostPort}${httpLayout.mcp}`,
       token: ports.authoringToken,

package/src/http/ports.ts

@@ -11,7 +11,7 @@ import type { CredentialListing } from '../credentials/provider.ts'
 import type { McpCheck, McpEditorServer } from '../host/mcp-editor.ts'
 import type { McpLoadFailure } from '../host/mcp.ts'
 import type { AppPin } from '../theme/pin.ts'
-import type { UpdateCheck } from './updates.ts'
+import type { UpdateCheck, UpdateSource } from './updates.ts'
 
 const require = createRequire(import.meta.url)
 
@@ -67,6 +67,8 @@ export interface LoopbackPorts {
   subscribeFrames(listener: (event: unknown) => void): () => void
   subscribeApp(appId: string, since: number, listener: (event: unknown) => void): () => void
   checkUpdate(): Promise<UpdateCheck>
+  /** Where an update would come from. Reads the prefix; no network. */
+  updateSource(): Promise<UpdateSource>
   installUpdate?(version: string): Promise<void>
   /** The panel showed the launcher's last attempt. The record is dropped, not shown twice. */
   ackUpdate?(at: number): Promise<void>

package/src/http/updates.ts

@@ -32,6 +32,15 @@ export type UpdateAttempt =
     readonly at: number
   }
 
+/**
+ * Where this install updates from. `none` is a source tree with no install prefix,
+ * which cannot install anything.
+ */
+export type UpdateSource =
+  | { readonly channel: 'registry'; readonly registry: string }
+  | { readonly channel: 'tarball'; readonly tarballDir: string }
+  | { readonly channel: 'none' }
+
 export interface UpdateCheck {
   readonly name: string
   readonly current: string
@@ -39,6 +48,9 @@ export interface UpdateCheck {
   readonly updateAvailable: boolean
   readonly channel?: 'registry' | 'tarball'
   readonly installable?: boolean
+  /** Set when the install prefix names one, so a panel can say where an update comes from. */
+  readonly registry?: string
+  readonly tarballDir?: string
   readonly error?: string
   /** The last install this machine recorded, when one is on disk. */
   readonly lastAttempt?: UpdateAttempt
@@ -62,12 +74,14 @@ export async function checkPackageUpdate(
   if (about.name.length === 0) return { ...empty, error: 'package name is missing' }
   const prefix = readPrefixUpdate(cwd, env)
   if (prefix?.channel === 'tarball') {
-    const latest = newestTarball(prefix.tarballDir ?? homePackagesDir(homedir()), 'shell')
+    const tarballDir = prefix.tarballDir ?? homePackagesDir(homedir())
+    const latest = newestTarball(tarballDir, 'shell')
     return {
       name: '@mohou/shell',
       current: about.current,
       latest,
       channel: 'tarball',
+      tarballDir,
       installable: true,
       updateAvailable: latest !== null && compareVersion(latest, about.current) > 0,
     }
@@ -79,7 +93,13 @@ export async function checkPackageUpdate(
     const response = await fetch(`${registry.replace(/\/$/, '')}/${name}/latest`, {
       signal: AbortSignal.timeout(3_000),
     })
-    if (!response.ok) return { ...empty, name, ...prefix === undefined ? {} : { channel: prefix.channel }, installable: prefix !== undefined, error: `package registry returned ${response.status}` }
+    if (!response.ok) return {
+      ...empty,
+      name,
+      ...prefix === undefined ? {} : { channel: prefix.channel, registry: prefix.registry ?? 'https://registry.npmjs.org' },
+      installable: prefix !== undefined,
+      error: `package registry returned ${response.status}`,
+    }
     const body = await response.json() as { version?: unknown }
     const latest = typeof body.version === 'string' ? body.version : null
     return {
@@ -87,14 +107,34 @@ export async function checkPackageUpdate(
       current: about.current,
       latest,
       channel: prefix?.channel ?? 'registry',
+      ...prefix === undefined ? {} : { registry: prefix.registry ?? 'https://registry.npmjs.org' },
       installable: prefix !== undefined,
       updateAvailable: latest !== null && latest !== about.current,
     }
   } catch (error) {
-    return { ...empty, name, ...prefix === undefined ? {} : { channel: prefix.channel }, installable: prefix !== undefined, error: error instanceof Error ? error.message : 'update check failed' }
+    return {
+      ...empty,
+      name,
+      ...prefix === undefined ? {} : { channel: prefix.channel, registry: prefix.registry ?? 'https://registry.npmjs.org' },
+      installable: prefix !== undefined,
+      error: error instanceof Error ? error.message : 'update check failed',
+    }
   }
 }
 
+/**
+ * Where this install would update from. Reads the install prefix; asks no registry, so a
+ * panel can show the source while the network is slow or down.
+ * @param env - process environment; `MINI_APP_TARBALL_DIR` overrides the package folder
+ * @param cwd - directory the sidecar runs in
+ */
+export function readUpdateSource(env: NodeJS.ProcessEnv = process.env, cwd = process.cwd()): UpdateSource {
+  const prefix = readPrefixUpdate(cwd, env)
+  if (prefix === undefined) return { channel: 'none' }
+  if (prefix.channel === 'tarball') return { channel: 'tarball', tarballDir: prefix.tarballDir ?? homePackagesDir(homedir()) }
+  return { channel: 'registry', registry: prefix.registry ?? 'https://registry.npmjs.org' }
+}
+
 /**
  * Read the launcher's record of the last install. A missing, unreadable, or malformed file reads as
  * no attempt: the panel shows nothing rather than a guessed outcome.