@paradow/ledge 0.26.0 → 0.27.0

package/dist/cli/{action-SCMMRWYI.js → action-7SJJTIEA.js}

@@ -8,10 +8,10 @@ import {
   resultLine,
   runClose,
   runOnClient
-} from "./chunk-SYXW4YB6.js";
-import "./chunk-PTY4LXTG.js";
-import "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-IGAGJVRZ.js";
+import "./chunk-ADAGKOFO.js";
+import "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 export {

package/dist/cli/{attach-EFIN5VU6.js → attach-V7UPHVB2.js}

@@ -1,19 +1,19 @@
 import {
   attachEnv
-} from "./chunk-WYVMCF2K.js";
-import "./chunk-2V2OJR2N.js";
+} from "./chunk-ISNHG5SJ.js";
+import "./chunk-CVHX7GUB.js";
 import "./chunk-OLLQBK6N.js";
-import "./chunk-HCTXTN2X.js";
-import "./chunk-TYNRKZFE.js";
-import "./chunk-II6VRGLU.js";
-import "./chunk-PTY4LXTG.js";
+import "./chunk-YLN3VOGV.js";
+import "./chunk-7JRQCKBP.js";
+import "./chunk-UPKJO3BZ.js";
+import "./chunk-ADAGKOFO.js";
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   PROTOCOL_PORT,
   backendOf
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   realTmux
 } from "./chunk-NLL2EQJ2.js";

package/dist/cli/{bridge-QT5X6TWJ.js → bridge-JK3PMG7T.js}

@@ -7,7 +7,7 @@ import {
   parseClientMessage,
   parseServerMessage,
   readDaemonToken
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 

package/dist/cli/{chunk-L3GYGJRE.js → chunk-2N7PSP7C.js}

@@ -1,12 +1,12 @@
 import {
   CODEX_HOOK_VAR
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   BRIEF_MAX
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 
 // src/cli/handover.ts
 import { randomUUID } from "crypto";

package/dist/cli/{chunk-QRD74KPO.js → chunk-37G5F75H.js}

@@ -1960,7 +1960,7 @@ var AssertionSchema = z26.object({
   signature: B64U2.max(1024)
 });
 var TeamsDigestSchema = z26.string().regex(/^[0-9a-f]{64}$/);
-var ConfirmPurposeSchema = z26.enum(["register", "decide", "launch", "close", "act", "define", "team"]);
+var ConfirmPurposeSchema = z26.enum(["register", "decide", "launch", "close", "act", "define", "team", "pc"]);
 var PhoneChatStepSchema = ChatStepSchema.pick({ kind: true, id: true, name: true }).strict();
 var PhoneChatProposalSchema = z26.object({
   project: z26.string().max(80),
@@ -2077,6 +2077,8 @@ var sessionId = z26.string().min(1).max(100);
 var PhoneExpectSchema = PendingSchema.pick({ kind: true, text: true }).extend({ key: z26.string().min(1).max(64) });
 var CardRowsSchema = z26.array(z26.number().int().min(0).max(MAX_PROPOSALS - 1)).min(1).max(MAX_PROPOSALS).refine((r) => new Set(r).size === r.length, "a row twice");
 var teamsOp = { op: OperationIdSchema, assertion: AssertionSchema.optional() };
+var PcActionSchema = z26.enum(["update", "restart"]);
+var pcSubject = (action, version) => action === "update" ? `update@${version ?? ""}` : "restart";
 var teamsScope = { scope: DefinitionScopeSchema, project: z26.string().min(1).max(80).optional() };
 var PhoneClientMessageSchema = z26.discriminatedUnion("type", [
   z26.object({ type: z26.literal("snapshot.request") }),
@@ -2094,7 +2096,10 @@ var PhoneClientMessageSchema = z26.discriminatedUnion("type", [
     expect: PhoneExpectSchema.optional(),
     qid: OperationIdSchema.optional(),
     /** sha256 of the `define` or `team` operation the challenge is for (`teamsDigest`). */
-    digest: TeamsDigestSchema.optional()
+    digest: TeamsDigestSchema.optional(),
+    /** A `pc` challenge: what it is for, and for an update the version it covers. */
+    action: PcActionSchema.optional(),
+    version: z26.string().regex(SEMVER).optional()
   }),
   z26.object({ type: z26.literal("credential.register"), op: OperationIdSchema, credential: CredentialSchema }),
   z26.object({
@@ -2181,13 +2186,25 @@ var PhoneClientMessageSchema = z26.discriminatedUnion("type", [
   z26.object({ type: z26.literal("team.launch"), ...teamsOp, project: z26.string().min(1).max(80), name: TeamNameSchema, seats: PhoneSeatsSchema, template: z26.string().min(1).max(64).optional() }).strict(),
   z26.object({ type: z26.literal("team.compose"), ...teamsOp, team: TeamIdSchema, seats: PhoneSeatsSchema }).strict(),
   z26.object({ type: z26.literal("team.seat"), ...teamsOp, team: TeamIdSchema, role: RoleIdSchema, action: z26.enum(["start", "restart"]) }).strict(),
-  z26.object({ type: z26.literal("team.dissolve"), ...teamsOp, team: TeamIdSchema }).strict()
+  z26.object({ type: z26.literal("team.dissolve"), ...teamsOp, team: TeamIdSchema }).strict(),
+  /** Installs `version` on the PC, then restarts its daemon; the phone asks for its own build's version. Passkey, purpose `pc`. */
+  z26.object({ type: z26.literal("daemon.update"), ...teamsOp, version: z26.string().regex(SEMVER) }).strict(),
+  /** Restarts the PC's daemon without installing anything. Passkey, purpose `pc`. */
+  z26.object({ type: z26.literal("daemon.restart"), ...teamsOp }).strict()
 ]).superRefine((m, ctx) => {
   const issue = "scope" in m ? scopeIssue(m) : null;
   if (issue) ctx.addIssue({ code: z26.ZodIssueCode.custom, message: issue, path: ["project"] });
 });
 var PhoneServerMessageSchema = z26.discriminatedUnion("type", [
-  z26.object({ type: z26.literal("snapshot"), protocol: z26.literal(PHONE_PROTOCOL), sessions: z26.array(PhoneSessionSchema), capabilities: CapabilitiesByToolSchema, daemon: z26.object({ version: z26.string(), name: z26.string().max(40), boot: z26.string().uuid().optional() }), device: z26.object({ confirm: z26.boolean(), push: z26.enum(["on", "off", "stale", "unavailable"]).optional(), chat: z26.literal(true).optional(), contextNear: ContextPrefsSchema.shape.near.optional() }).optional() }),
+  z26.object({ type: z26.literal("snapshot"), protocol: z26.literal(PHONE_PROTOCOL), sessions: z26.array(PhoneSessionSchema), capabilities: CapabilitiesByToolSchema, daemon: z26.object({
+    version: z26.string(),
+    name: z26.string().max(40),
+    boot: z26.string().uuid().optional(),
+    teams: z26.literal(true).optional(),
+    /** `update`: the daemon can install a version and restart (npm, systemd); `restart`: it can restart (systemd). */
+    update: z26.literal(true).optional(),
+    restart: z26.literal(true).optional()
+  }), device: z26.object({ confirm: z26.boolean(), push: z26.enum(["on", "off", "stale", "unavailable"]).optional(), chat: z26.literal(true).optional(), contextNear: ContextPrefsSchema.shape.near.optional() }).optional() }),
   z26.object({
     type: z26.literal("confirm.challenge"),
     purpose: ConfirmPurposeSchema,
@@ -2214,6 +2231,10 @@ var PhoneServerMessageSchema = z26.discriminatedUnion("type", [
   z26.object({ type: z26.literal("chat.done"), qid: OperationIdSchema, turn: PhoneChatTurnSchema }),
   z26.object({ type: z26.literal("chat.error"), qid: OperationIdSchema, code: ChatErrorCodeSchema }),
   z26.object({ type: z26.literal("teams.catalog"), catalog: PhoneCatalogSchema }),
+  /** The daemon updating or restarting itself, whoever asked: npm runs, then the service restarts (the link drops right after). */
+  z26.object({ type: z26.literal("daemon.progress"), version: z26.string().max(40), step: z26.enum(["installing", "restarting"]) }),
+  /** Nothing was changed. Never npm's output nor a command: both hold the PC's paths. */
+  z26.object({ type: z26.literal("daemon.failed"), version: z26.string().max(40), reason: UpdateFailureSchema }),
   z26.object({ type: z26.literal("teams.role"), role: PhoneRoleSchema }),
   /** The live teams, after each snapshot and on every change. */
   z26.object({ type: z26.literal("teams"), teams: z26.array(PhoneTeamSchema).max(50) }),
@@ -2429,6 +2450,7 @@ export {
   PROTOCOL_PORT,
   RefusalCodeSchema,
   RecentSchema,
+  SEMVER,
   MESSAGE_MAX,
   SUMMARY_MAX,
   parseClientMessage,
@@ -2463,6 +2485,7 @@ export {
   OperationIdSchema,
   UNTYPABLE,
   CHAT_HISTORY_BUDGET,
+  pcSubject,
   PhoneClientMessageSchema,
   teamsPurpose,
   teamsDigest,

package/dist/cli/{chunk-NYGLT5G2.js → chunk-7GIUG73R.js}

@@ -4,7 +4,7 @@ import {
   SUMMARY_MAX,
   parseServerMessage,
   readDaemonToken
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 
 // src/client.ts
 import WebSocket from "ws";

package/dist/cli/{chunk-TYNRKZFE.js → chunk-7JRQCKBP.js}

@@ -1,11 +1,11 @@
 import {
   ledgeTitleRest
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   cleanTopic,
   isArchived,
   sessionTitle
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 
 // src/daemon/seat.ts
 function teammates(team, sessions) {

package/dist/cli/{chunk-JHUIHBC7.js → chunk-7OGFH6KJ.js}

@@ -1,9 +1,9 @@
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   isArchived
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 
 // src/cli/who.ts
 import { basename } from "path";

package/dist/cli/{chunk-PTY4LXTG.js → chunk-ADAGKOFO.js}

@@ -3,7 +3,7 @@ import {
   SESSION_KEY_VAR,
   pickName,
   sessionKey
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   paths
 } from "./chunk-HOOHS3MX.js";

package/dist/cli/{chunk-2V2OJR2N.js → chunk-CVHX7GUB.js}

@@ -10,7 +10,7 @@ import {
   templateExists,
   templateId,
   templateText
-} from "./chunk-HCTXTN2X.js";
+} from "./chunk-YLN3VOGV.js";
 import {
   NO_ALWAYS,
   NO_NOTE,
@@ -39,7 +39,7 @@ import {
   shownCommand,
   teammates,
   withImages
-} from "./chunk-TYNRKZFE.js";
+} from "./chunk-7JRQCKBP.js";
 import {
   definitionFiles,
   definitionHash,
@@ -47,7 +47,7 @@ import {
   loadRole,
   quoteScalar,
   repoRoot
-} from "./chunk-II6VRGLU.js";
+} from "./chunk-UPKJO3BZ.js";
 import {
   PARENT_AGENT_VARS,
   agentEnv,
@@ -57,7 +57,7 @@ import {
   labelTranscript,
   resumeLabel,
   spawnSession
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   ACTIONS,
   ATTACHMENT_ID,
@@ -95,6 +95,7 @@ import {
   RefusalCodeSchema,
   RoleIdSchema,
   RouteResultSchema,
+  SEMVER,
   SESSION_KEY_VAR,
   SNAPSHOT_BODY_MAX,
   SshAliasSchema,
@@ -131,6 +132,7 @@ import {
   parseServerMessage,
   parseTaskBlock,
   parseTeamBlock,
+  pcSubject,
   pendingKey,
   pickName,
   projectOf,
@@ -145,7 +147,7 @@ import {
   teamsPurpose,
   tokenEquals,
   transmissions
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   log
 } from "./chunk-6IYPRUQG.js";
@@ -2276,12 +2278,12 @@ var RpcError = class extends Error {
 };
 function lineReader(max, onLine, onBad) {
   const decoder = new TextDecoder("utf-8", { fatal: true });
-  let parts = [];
+  let parts2 = [];
   let size = 0;
   let skipping = false;
   const flush = () => {
-    const whole = parts.length === 1 ? parts[0] : Buffer.concat(parts);
-    parts = [];
+    const whole = parts2.length === 1 ? parts2[0] : Buffer.concat(parts2);
+    parts2 = [];
     size = 0;
     let text;
     try {
@@ -2301,10 +2303,10 @@ function lineReader(max, onLine, onBad) {
         size += end - from;
         if (size > max) {
           skipping = true;
-          parts = [];
+          parts2 = [];
           size = 0;
           onBad(`frame over ${max} bytes`);
-        } else if (end > from) parts.push(chunk.subarray(from, end));
+        } else if (end > from) parts2.push(chunk.subarray(from, end));
       }
       if (nl === -1) return;
       if (skipping) skipping = false;
@@ -3959,9 +3961,9 @@ function createForge(deps = {}) {
           index.push(`- ${name}: no repository on this machine`);
           return;
         }
-        const parts = await Promise.all(local.map((r) => section(r.path)));
-        await writeFile5(join9(ctx.dir, file), parts.flatMap((s) => s.lines).join("\n"));
-        const sources = parts.flatMap((s) => s.source ? [s.source] : []);
+        const parts2 = await Promise.all(local.map((r) => section(r.path)));
+        await writeFile5(join9(ctx.dir, file), parts2.flatMap((s) => s.lines).join("\n"));
+        const sources = parts2.flatMap((s) => s.source ? [s.source] : []);
         ctx.steps.set(file, { kind: "repo", name, path: sources.join(", ") || file });
         index.push(`- ${name}: ${file}`);
       }));
@@ -5061,18 +5063,18 @@ async function readAt(request, path) {
     if (!stat4.isFile()) return failure(request, "not_file");
     if (stat4.size > DOCUMENT_MAX_BYTES) return failure(request, "too_large");
     const chunk = Buffer.allocUnsafe(64 * 1024);
-    const parts = [];
+    const parts2 = [];
     let bytes4 = 0;
     while (bytes4 <= DOCUMENT_MAX_BYTES) {
       const { bytesRead } = await file.read(chunk, 0, Math.min(chunk.length, DOCUMENT_MAX_BYTES + 1 - bytes4), null);
       if (!bytesRead) break;
-      parts.push(Buffer.from(chunk.subarray(0, bytesRead)));
+      parts2.push(Buffer.from(chunk.subarray(0, bytesRead)));
       bytes4 += bytesRead;
     }
     if (bytes4 > DOCUMENT_MAX_BYTES) return failure(request, "too_large");
     let text;
     try {
-      text = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(parts, bytes4));
+      text = new TextDecoder("utf-8", { fatal: true }).decode(Buffer.concat(parts2, bytes4));
     } catch {
       return failure(request, "invalid_utf8");
     }
@@ -5674,6 +5676,18 @@ function serveSsh(ws, alias, opts = {}) {
 // src/mobile/gateway.ts
 import { hostname } from "os";
 
+// ../ui/src/semver.ts
+var parts = (v) => v.split("-")[0].split(".").map((n) => Number.parseInt(n, 10) || 0);
+function compareVersions(a, b2) {
+  const x = parts(a);
+  const y = parts(b2);
+  for (let i = 0; i < 3; i++) {
+    const d = (x[i] ?? 0) - (y[i] ?? 0);
+    if (d) return d > 0 ? 1 : -1;
+  }
+  return a === b2 ? 0 : a.includes("-") ? -1 : b2.includes("-") ? 1 : 0;
+}
+
 // src/mobile/chat.ts
 var HISTORY_TURNS = 50;
 function errorCode2(message) {
@@ -6755,7 +6769,7 @@ function createPhoneGateway(deps) {
       protocol: PHONE_PROTOCOL,
       sessions: deps.sessions().filter((s) => !isArchived(s)).map((s) => projected(deviceId, s)),
       capabilities: capabilities(),
-      daemon: { version: deps.version, boot: deps.boot, name: clip(hostname(), 40).text },
+      daemon: { version: deps.version, boot: deps.boot, name: clip(hostname(), 40).text, ...teamsOps ? { teams: true } : {}, ...deps.pc?.canUpdate ? { update: true } : {}, ...deps.pc?.canRestart ? { restart: true } : {} },
       device: { confirm: deps.credential(deviceId) !== null, push: push2, ...deps.chats ? { chat: true } : {}, ...deps.contextNear ? { contextNear: deps.contextNear() } : {} }
     };
   };
@@ -7019,7 +7033,23 @@ function createPhoneGateway(deps) {
     push: (deviceId, m) => push(deviceId, m),
     log: log2
   }) : void 0;
+  const pcOperation = (deviceId, msg) => {
+    const pc = deps.pc;
+    const update = msg.type === "daemon.update";
+    if (!pc || !(update ? pc.canUpdate : pc.canRestart)) return { status: "rejected", reason: "unavailable" };
+    if (update && (!SEMVER.test(deps.version) || compareVersions(msg.version, deps.version) <= 0)) return { status: "rejected", reason: "invalid" };
+    const refused = checkAssertion(deviceId, msg.assertion, "pc", update ? pcSubject("update", msg.version) : pcSubject("restart"));
+    if (refused) return refused;
+    const reply = (m) => {
+      if (m.type === "update.failed") push(deviceId, { type: "daemon.failed", version: m.version, reason: m.reason });
+    };
+    log2(`phone: device ${deviceId} asked the daemon to ${update ? `update to ${msg.version}` : "restart"}`);
+    if (update) pc.update(msg.version, reply);
+    else pc.restart(reply);
+    return { status: "applied" };
+  };
   const run2 = async (deviceId, msg) => {
+    if (msg.type === "daemon.update" || msg.type === "daemon.restart") return pcOperation(deviceId, msg);
     if (isTeamsOperation(msg)) return teamsOps ? teamsOps.run(deviceId, msg) : { status: "rejected", reason: "unavailable" };
     if (msg.type === "chat.ignore") return chatIgnore(deviceId, msg);
     if (msg.type === "chat.team") return chatTeam(deviceId, msg);
@@ -7223,6 +7253,15 @@ function createPhoneGateway(deps) {
           const challenge = deps.challenges.issue({ deviceId, purpose: msg.purpose, subject: msg.digest });
           return push(deviceId, { type: "confirm.challenge", purpose: msg.purpose, challenge, rpId: rp.rpId, credentialId: cred.id, expiresInMs: CHALLENGE_TTL_MS, digest: msg.digest });
         }
+        if (msg.purpose === "pc") {
+          const pc = deps.pc;
+          if (!pc || !msg.action || msg.action === "update" !== (msg.version !== void 0)) return invalid2();
+          if (!(msg.action === "update" ? pc.canUpdate : pc.canRestart)) return invalid2();
+          const cred = deps.credential(deviceId);
+          if (!cred || cred.rpId !== rp.rpId) return invalid2();
+          const challenge = deps.challenges.issue({ deviceId, purpose: "pc", subject: pcSubject(msg.action, msg.version) });
+          return push(deviceId, { type: "confirm.challenge", purpose: "pc", challenge, rpId: rp.rpId, credentialId: cred.id, expiresInMs: CHALLENGE_TTL_MS });
+        }
         const unhandled = msg.purpose;
         void unhandled;
         return invalid2();
@@ -7324,6 +7363,13 @@ function createPhoneGateway(deps) {
             }
             return;
           }
+          // The daemon updating or restarting itself, whoever asked. Never npm's output nor a command: both hold the PC's paths.
+          case "update.progress":
+            for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "daemon.progress", version: m.version, step: m.step });
+            return;
+          case "update.failed":
+            for (const [deviceId, f] of followers) if (f.subscribed) push(deviceId, { type: "daemon.failed", version: m.version, reason: m.reason });
+            return;
           case "session.preview":
             for (const [deviceId, f] of followers) {
               if (f.watching === m.id) push(deviceId, { type: "session.preview", id: m.id, lines: [...m.lines] }, `session.preview:${m.id}`);
@@ -9060,7 +9106,20 @@ ${now2.prompt}` });
     projectName: (id) => id ? projects.projects.find((p) => p.id === id)?.name ?? null : null,
     // A project's folder is its first local repo: only a project with one can be named by the phone.
     projectByName: (name) => projects.projects.find((p) => p.name === name && p.repos.some((r) => r.machine === "local"))?.id ?? null,
-    teamCatalog: true
+    teamCatalog: true,
+    // The phone's « Mettre à jour le PC » and « Redémarrer le daemon »: the updater Desktop's `update.daemon` uses, progress broadcast.
+    ...opts.updater && opts.daemon ? {
+      pc: {
+        canUpdate: opts.daemon.install === "npm" && opts.daemon.systemd,
+        canRestart: opts.daemon.systemd,
+        update: (version, reply) => {
+          void opts.updater.update(version, broadcast, reply);
+        },
+        restart: (reply) => {
+          void opts.updater.restart(broadcast, reply);
+        }
+      }
+    } : {}
   });
   let unsubscribePush;
   if (mobile) {

package/dist/cli/chunk-HMTOPOJG.js

@@ -0,0 +1,6 @@
+// src/version.ts
+var LEDGE_VERSION = true ? "0.27.0" : "0.0.0-dev";
+
+export {
+  LEDGE_VERSION
+};

package/dist/cli/{chunk-SYXW4YB6.js → chunk-IGAGJVRZ.js}

@@ -1,13 +1,13 @@
 import {
   CODEX_HOOK_VAR
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   SESSION_KEY_VAR,
   actionById
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 
 // src/cli/action.ts
 import { randomUUID } from "crypto";

package/dist/cli/{chunk-WYVMCF2K.js → chunk-ISNHG5SJ.js}

@@ -1,22 +1,22 @@
 import {
   EFFORT_ARGS,
   MODEL_ARGS
-} from "./chunk-2V2OJR2N.js";
+} from "./chunk-CVHX7GUB.js";
 import {
   findRole
-} from "./chunk-II6VRGLU.js";
+} from "./chunk-UPKJO3BZ.js";
 import {
   exitFile,
   spawnSession
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   DaemonRefusedError,
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   PROTOCOL_PORT,
   autonomyArgs
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   realTmux
 } from "./chunk-NLL2EQJ2.js";

package/dist/cli/{chunk-6F6JTPMC.js → chunk-RA3OIXEQ.js}

@@ -1,10 +1,10 @@
 import {
   CODEX_HOOK_VAR
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   connect,
   sendMessageAndAwaitAck
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 
 // src/cli/send.ts
 import { randomUUID } from "crypto";

package/dist/cli/{chunk-5PTC732E.js → chunk-TOSPL5H2.js}

@@ -1,14 +1,14 @@
 import {
   CODEX_HOOK_VAR
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   LEDGE_GIVER,
   TASK_TEXT_MAX,
   TASK_TITLE_MAX
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 
 // src/cli/task.ts
 import { randomUUID } from "crypto";

package/dist/cli/{chunk-II6VRGLU.js → chunk-UPKJO3BZ.js}

@@ -2,7 +2,7 @@ import {
   ROLE_LABEL_MAX,
   ROLE_PROMPT_MAX,
   RoleSchema
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   log
 } from "./chunk-6IYPRUQG.js";

package/dist/cli/{chunk-HCTXTN2X.js → chunk-YLN3VOGV.js}

@@ -6,11 +6,11 @@ import {
   quoteScalar,
   readSmall,
   scalarValue
-} from "./chunk-II6VRGLU.js";
+} from "./chunk-UPKJO3BZ.js";
 import {
   SeatsSchema,
   TeamNameSchema
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   log
 } from "./chunk-6IYPRUQG.js";

package/dist/cli/{daemon-U6NA6PVD.js → daemon-YUPB5NUG.js}

@@ -9,9 +9,9 @@ import {
   startServer,
   tasksJournal,
   teamsJournal
-} from "./chunk-2V2OJR2N.js";
+} from "./chunk-CVHX7GUB.js";
 import "./chunk-OLLQBK6N.js";
-import "./chunk-HCTXTN2X.js";
+import "./chunk-YLN3VOGV.js";
 import {
   QUESTION_TOOLS,
   crossSession,
@@ -26,11 +26,11 @@ import {
   readPeers,
   reduce,
   stripNote
-} from "./chunk-TYNRKZFE.js";
-import "./chunk-II6VRGLU.js";
+} from "./chunk-7JRQCKBP.js";
+import "./chunk-UPKJO3BZ.js";
 import {
   agentMessages
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   DEFAULT_RELAY_URL,
   DevicePollResponseSchema,
@@ -44,10 +44,10 @@ import {
   SealedFrameSchema,
   SessionSchema,
   backendOf
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   LEDGE_VERSION
-} from "./chunk-3PLC745L.js";
+} from "./chunk-HMTOPOJG.js";
 import {
   SERVICE,
   inDaemonService,
@@ -799,6 +799,16 @@ var npmEnv = (execPath, env) => ({ ...env, PATH: `${dirname3(execPath)}:${env.PA
 function createDaemonUpdater(deps) {
   let busy = false;
   let restarting = false;
+  const restartService = async (version, send) => {
+    send({ type: "update.progress", version, step: "restarting" });
+    await deps.save();
+    const code = await deps.restart();
+    if (code !== 0) {
+      log(`update: systemctl restart failed (${code})`);
+      return send({ type: "update.failed", version, reason: "no-systemd", command: RESTART_COMMAND });
+    }
+    restarting = true;
+  };
   return {
     running: () => busy,
     /** `reply` reaches only the asking client: a busy refusal must not fail the flow other overlays are following. */
@@ -820,20 +830,29 @@ function createDaemonUpdater(deps) {
 ${r.output}`);
           return send({ type: "update.failed", version, reason: "npm-failed", detail: lastLines(r.output), command: shown });
         }
-        send({ type: "update.progress", version, step: "restarting" });
-        await deps.save();
-        const code = await deps.restart();
-        if (code !== 0) {
-          log(`update: systemctl restart failed (${code})`);
-          return send({ type: "update.failed", version, reason: "no-systemd", command: RESTART_COMMAND });
-        }
-        restarting = true;
+        await restartService(version, send);
       } catch (e) {
         log(`update: ${e.stack ?? String(e)}`);
         send({ type: "update.failed", version, reason: "npm-failed", detail: e instanceof Error ? e.message : String(e) });
       } finally {
         if (!restarting) busy = false;
       }
+    },
+    /** The restart alone, for the phone (spec 2026-10-28 mobile daemon update): the update's guards but npm, then the same restart. */
+    async restart(send, reply = send) {
+      const version = deps.info().version;
+      if (busy) return reply({ type: "update.failed", version, reason: "busy" });
+      if (!deps.info().systemd) return send({ type: "update.failed", version, reason: "no-systemd", command: RESTART_COMMAND });
+      busy = true;
+      try {
+        if (await deps.atRisk()) return send({ type: "update.failed", version, reason: "sessions-at-risk" });
+        await restartService(version, send);
+      } catch (e) {
+        log(`restart: ${e.stack ?? String(e)}`);
+        send({ type: "update.failed", version, reason: "no-systemd", command: RESTART_COMMAND });
+      } finally {
+        if (!restarting) busy = false;
+      }
     }
   };
 }

package/dist/cli/{decide-XOUTZT3S.js → decide-HFI2WQXI.js}

@@ -1,13 +1,13 @@
 import {
   CODEX_HOOK_VAR
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   LEDGE_GIVER,
   TASK_TEXT_MAX
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 

package/dist/cli/{handover-6CQKUZJV.js → handover-GKORMXZ2.js}

@@ -3,10 +3,10 @@ import {
   handoverArgs,
   handoverOnClient,
   runHandover
-} from "./chunk-L3GYGJRE.js";
-import "./chunk-PTY4LXTG.js";
-import "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-2N7PSP7C.js";
+import "./chunk-ADAGKOFO.js";
+import "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 export {

package/dist/cli/{hook-ZIJACTCF.js → hook-TJJEFV54.js}

@@ -8,36 +8,36 @@ import {
   seatContext,
   takeImages,
   teammates
-} from "./chunk-TYNRKZFE.js";
+} from "./chunk-7JRQCKBP.js";
 import {
   findRole
-} from "./chunk-II6VRGLU.js";
+} from "./chunk-UPKJO3BZ.js";
 import {
   parseLedgeCommand,
   readOnClient,
   sendOnClient
-} from "./chunk-6F6JTPMC.js";
+} from "./chunk-RA3OIXEQ.js";
 import {
   taskOnClient
-} from "./chunk-5PTC732E.js";
+} from "./chunk-TOSPL5H2.js";
 import {
   handoverOnClient
-} from "./chunk-L3GYGJRE.js";
+} from "./chunk-2N7PSP7C.js";
 import {
   CODEX_ENV_VAR,
   CODEX_HOOK_VAR,
   codexPlan
-} from "./chunk-PTY4LXTG.js";
+} from "./chunk-ADAGKOFO.js";
 import {
   formatWho
-} from "./chunk-JHUIHBC7.js";
+} from "./chunk-7OGFH6KJ.js";
 import {
   connect,
   sendMessageAndAwaitAck
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   taskClosed
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import {
   log
 } from "./chunk-6IYPRUQG.js";

package/dist/cli/index.js

@@ -25,7 +25,7 @@ async function hookMain(args) {
   try {
     const chunks = [];
     for await (const c of process.stdin) chunks.push(c);
-    const { runHook } = await import("./hook-ZIJACTCF.js");
+    const { runHook } = await import("./hook-TJJEFV54.js");
     const out = await runHook(event, Buffer.concat(chunks).toString("utf8"), { tool });
     if (out) process.stdout.write(`${out}
 `);
@@ -37,7 +37,7 @@ async function main(argv) {
   const [cmd, ...rest] = argv;
   switch (cmd) {
     case "daemon": {
-      const { startDaemon } = await import("./daemon-U6NA6PVD.js");
+      const { startDaemon } = await import("./daemon-YUPB5NUG.js");
       await startDaemon();
       await new Promise(() => {
       });
@@ -45,7 +45,7 @@ async function main(argv) {
     }
     case "--version":
     case "version": {
-      const { LEDGE_VERSION } = await import("./version-SK4VC4AE.js");
+      const { LEDGE_VERSION } = await import("./version-YYNMMWKJ.js");
       console.log(LEDGE_VERSION);
       return 0;
     }
@@ -66,74 +66,74 @@ async function main(argv) {
       return r.ok ? 0 : 1;
     }
     case "status": {
-      const { printStatus } = await import("./status-EZPFE5CL.js");
+      const { printStatus } = await import("./status-RQRS26S2.js");
       console.log(await printStatus());
       return 0;
     }
     case "who": {
-      const { printWho } = await import("./who-XXZUCJPD.js");
+      const { printWho } = await import("./who-WW6IL4KD.js");
       console.log(await printWho());
       return 0;
     }
     case "send": {
-      const { sendMessage } = await import("./send-T5IOOVGX.js");
+      const { sendMessage } = await import("./send-RI7JOO5K.js");
       const r = await sendMessage(rest);
       console.log(r.line);
       return r.code;
     }
     case "read": {
-      const { readMessage } = await import("./send-T5IOOVGX.js");
+      const { readMessage } = await import("./send-RI7JOO5K.js");
       const r = await readMessage(rest);
       console.log(r.line);
       return r.code;
     }
     case "task": {
-      const { runTask } = await import("./task-B2QVGHDF.js");
+      const { runTask } = await import("./task-U2XHBUKW.js");
       const r = await runTask(rest);
       console.log(r.line);
       return r.code;
     }
     case "decide": {
-      const { runDecide } = await import("./decide-XOUTZT3S.js");
+      const { runDecide } = await import("./decide-HFI2WQXI.js");
       const r = await runDecide(rest);
       console.log(r.line);
       return r.code;
     }
     case "handover": {
-      const { runHandover } = await import("./handover-6CQKUZJV.js");
+      const { runHandover } = await import("./handover-GKORMXZ2.js");
       const r = await runHandover(rest);
       console.log(r.line);
       return r.code;
     }
     case "close": {
-      const { runClose } = await import("./action-SCMMRWYI.js");
+      const { runClose } = await import("./action-7SJJTIEA.js");
       const r = await runClose(rest);
       console.log(r.line);
       return r.code;
     }
     case "team": {
-      const { runTeam } = await import("./team-V6VPO3CB.js");
+      const { runTeam } = await import("./team-NFC4XEIA.js");
       const r = await runTeam(rest);
       console.log(r.line);
       return r.code;
     }
     case "tui": {
-      const { runTui } = await import("./tui-MM64KSQ2.js");
+      const { runTui } = await import("./tui-UWR7SDYF.js");
       return runTui(rest);
     }
     case "bridge": {
-      const { bridge } = await import("./bridge-QT5X6TWJ.js");
+      const { bridge } = await import("./bridge-JK3PMG7T.js");
       await bridge();
       return 0;
     }
     case "claude":
     case "codex":
     case "cursor": {
-      const { launch } = await import("./launch-QWPA2P66.js");
+      const { launch } = await import("./launch-QKQZZSIM.js");
       return launch(cmd, rest);
     }
     case "attach": {
-      const { attach } = await import("./attach-EFIN5VU6.js");
+      const { attach } = await import("./attach-V7UPHVB2.js");
       return attach(rest.find((a) => !a.startsWith("--")) ?? "", { readOnly: rest.includes("--read-only") });
     }
     default:

package/dist/cli/{launch-QWPA2P66.js → launch-QKQZZSIM.js}

@@ -6,18 +6,18 @@ import {
   launch,
   parseLaunchArgs,
   roleArgs
-} from "./chunk-WYVMCF2K.js";
-import "./chunk-2V2OJR2N.js";
+} from "./chunk-ISNHG5SJ.js";
+import "./chunk-CVHX7GUB.js";
 import "./chunk-OLLQBK6N.js";
-import "./chunk-HCTXTN2X.js";
-import "./chunk-TYNRKZFE.js";
-import "./chunk-II6VRGLU.js";
+import "./chunk-YLN3VOGV.js";
+import "./chunk-7JRQCKBP.js";
+import "./chunk-UPKJO3BZ.js";
 import {
   agentEnv,
   exitFile
-} from "./chunk-PTY4LXTG.js";
-import "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-ADAGKOFO.js";
+import "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-NLL2EQJ2.js";
 import "./chunk-6IYPRUQG.js";
 import "./chunk-HOOHS3MX.js";

package/dist/cli/{send-T5IOOVGX.js → send-RI7JOO5K.js}

@@ -4,10 +4,10 @@ import {
   readOnClient,
   sendMessage,
   sendOnClient
-} from "./chunk-6F6JTPMC.js";
-import "./chunk-PTY4LXTG.js";
-import "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-RA3OIXEQ.js";
+import "./chunk-ADAGKOFO.js";
+import "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 export {

package/dist/cli/{status-EZPFE5CL.js → status-RQRS26S2.js}

@@ -1,7 +1,7 @@
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 

package/dist/cli/{task-B2QVGHDF.js → task-U2XHBUKW.js}

@@ -4,10 +4,10 @@ import {
   runTask,
   taskArgs,
   taskOnClient
-} from "./chunk-5PTC732E.js";
-import "./chunk-PTY4LXTG.js";
-import "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-TOSPL5H2.js";
+import "./chunk-ADAGKOFO.js";
+import "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 export {

package/dist/cli/{team-V6VPO3CB.js → team-NFC4XEIA.js}

@@ -4,20 +4,20 @@ import {
   callerOf,
   resultLine,
   runOnClient
-} from "./chunk-SYXW4YB6.js";
+} from "./chunk-IGAGJVRZ.js";
 import {
   listDefinitions
-} from "./chunk-HCTXTN2X.js";
-import "./chunk-II6VRGLU.js";
-import "./chunk-PTY4LXTG.js";
+} from "./chunk-YLN3VOGV.js";
+import "./chunk-UPKJO3BZ.js";
+import "./chunk-ADAGKOFO.js";
 import {
   connect
-} from "./chunk-NYGLT5G2.js";
+} from "./chunk-7GIUG73R.js";
 import {
   RoleIdSchema,
   SeatsSchema,
   ToolSchema
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import "./chunk-6IYPRUQG.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";

package/dist/cli/{tui-MM64KSQ2.js → tui-UWR7SDYF.js}

@@ -1,17 +1,17 @@
 import {
   attachEnv
-} from "./chunk-WYVMCF2K.js";
+} from "./chunk-ISNHG5SJ.js";
 import {
   imageInfo
-} from "./chunk-2V2OJR2N.js";
+} from "./chunk-CVHX7GUB.js";
 import {
   MAX_FRAME
 } from "./chunk-OLLQBK6N.js";
-import "./chunk-HCTXTN2X.js";
-import "./chunk-TYNRKZFE.js";
-import "./chunk-II6VRGLU.js";
-import "./chunk-PTY4LXTG.js";
-import "./chunk-NYGLT5G2.js";
+import "./chunk-YLN3VOGV.js";
+import "./chunk-7JRQCKBP.js";
+import "./chunk-UPKJO3BZ.js";
+import "./chunk-ADAGKOFO.js";
+import "./chunk-7GIUG73R.js";
 import {
   ACTION_ERROR_CODES,
   ATTACHMENTS_MAX,
@@ -43,7 +43,7 @@ import {
   readDaemonToken,
   taskClosed,
   transmissions
-} from "./chunk-QRD74KPO.js";
+} from "./chunk-37G5F75H.js";
 import "./chunk-NLL2EQJ2.js";
 import "./chunk-6IYPRUQG.js";
 import {

package/dist/cli/{version-SK4VC4AE.js → version-YYNMMWKJ.js}

@@ -1,6 +1,6 @@
 import {
   LEDGE_VERSION
-} from "./chunk-3PLC745L.js";
+} from "./chunk-HMTOPOJG.js";
 import "./chunk-U67V476Y.js";
 export {
   LEDGE_VERSION

package/dist/cli/{who-XXZUCJPD.js → who-WW6IL4KD.js}

@@ -1,9 +1,9 @@
 import {
   formatWho,
   printWho
-} from "./chunk-JHUIHBC7.js";
-import "./chunk-NYGLT5G2.js";
-import "./chunk-QRD74KPO.js";
+} from "./chunk-7OGFH6KJ.js";
+import "./chunk-7GIUG73R.js";
+import "./chunk-37G5F75H.js";
 import "./chunk-HOOHS3MX.js";
 import "./chunk-U67V476Y.js";
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@paradow/ledge",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "Follow and answer your WSL agent sessions (Claude Code, Codex, Cursor Agent) from the Ledge island on Windows.",
   "type": "module",
   "bin": { "ledge": "dist/cli/index.js" },

package/dist/cli/chunk-3PLC745L.js

@@ -1,6 +0,0 @@
-// src/version.ts
-var LEDGE_VERSION = true ? "0.26.0" : "0.0.0-dev";
-
-export {
-  LEDGE_VERSION
-};