@popoverinstall/cli 0.7.2 → 0.8.1

package/CHANGELOG.md

@@ -15,6 +15,145 @@ already here:
 Every version that ships needs an entry — an update with nothing to print says nothing at
 all, which reads as though the update did not happen.
 
+## 0.8.1
+
+### Features
+
+- Your agent offers a fork when the moment calls for one, instead of waiting to be asked. It
+  used to be told never to suggest one, on the reasoning that handing over a whole
+  conversation is a large enough disclosure to be the user's own idea. The effect was that the
+  most useful case never came up at all, because the moment for a fork is one you are usually
+  too deep in the work to notice: you are going off shift, or about to re-explain an hour of
+  debugging to a colleague by hand, or trading asks back and forth on what turns out never to
+  have been one question. Your agent now says so once, and says what the fork would include.
+  Making one is still yours alone — it cannot create a fork without you asking, "that would be
+  useful" is not read as a yes, and if you pass on the offer it does not raise it again.
+
+### Fixes
+
+- Your agent is told who else is working in the repo again. The notice was supposed to appear
+  whenever the cast of teammate agents changed, and almost never did: it gave the daemon 250ms
+  to answer, and any answer more than five seconds old means fetching from the server, which
+  takes about 350ms. So it ran out of time and said nothing — and saying nothing looks exactly
+  like working alone, which is why it went unnoticed. It now waits long enough to get an
+  answer. If you are working alone it also stops checking every prompt, so you are not paying
+  for a lookup that has nothing to report.
+
+- `popover fork revoke` no longer tells you a fork is destroyed when it is not. If the write
+  failed, it said "revoked" anyway — the one command whose whole job is undoing a mistake, and
+  the one place a false confirmation is worst, because you stop looking. It now says it could
+  not and asks you to try again. A code that was already gone still reports success, which is
+  deliberate: answering differently would let anyone holding a code learn whether a
+  conversation exists.
+
+- Expired forks are actually deleted now. A fork's ciphertext is supposed to be destroyed 24
+  hours after it is made, but the cleanup only ever ran when somebody happened to create
+  another fork — so on a quiet team, conversations you had shared for a day stayed on the
+  server indefinitely. It now runs on a schedule of its own.
+
+- A hiccup on our side no longer signs your machine out. Several of these reported a temporary
+  server problem as a permanent refusal: a failed lookup during `popover login` looked like an
+  invalid code and abandoned the login, and one during a routine daemon check looked like your
+  machine had been revoked — which is not something it retries. They now say the service is
+  briefly unavailable, and the daemon keeps its session.
+
+- Opening a fork works on Windows when the folder it came from has a non-ASCII name. The
+  console reads a script in its own code page rather than UTF-8, so a path like
+  `C:\Users\Renée\work` arrived mangled, the `cd` quietly failed, and the fork opened anyway in
+  whatever directory the console started in — looking correct while every file path in the
+  conversation pointed somewhere else. It now switches the console to UTF-8 first, and stops
+  with a message rather than opening in the wrong place.
+
+- Asks against a long conversation work now. Answering an agent used to run the question past
+  Haiku no matter what the agent itself was running, and Haiku holds 200K tokens — so on any
+  session bigger than that, Claude Code had to compress the whole conversation before it could
+  read it, which took longer than the 90 seconds the asker waits. You got "did not answer in
+  time", and the machine being asked had already spent the tokens. The answer now comes from
+  the same model the session is already running, which fits by definition: measured on a 3.9MB
+  conversation, 97.6s and no answer became 15s and an answer. It costs the answering machine
+  more per ask, and it is their call — set `POPOVER_FORK_MODEL` to pin a cheaper one.
+
+## 0.8.0
+
+### Features
+
+- Asking and telling are their own commands. `/popover:ask B1 why did you rule out redis?` and
+  `/popover:tell B1 the migration is applied` replace `/popover:team ask …` and
+  `/popover:team tell …`, and `/popover:team` is now just the roster. The three cost completely
+  different things — the roster costs nothing, an ask spends the teammate's tokens on their
+  machine, a tell spends their attention and lands in their live session — and hiding all three
+  behind one first word made the cheapest and the most intrusive look like the same gesture.
+  The old forms still work and mention the new name once, so nothing you have already learned
+  breaks.
+- Agents can have names. `popover rename B1 "auth work"` gives one of your agents a name, and
+  your teammates see it on their next roster while the dashboard picks it up live — so three
+  sessions in the same repo stop being three identical rows of `B1`, `B2`, `B3`. Run
+  `popover rename` on its own to pick from a list instead of looking a handle up first. A named
+  agent answers to either, so `/popover:ask B1` and `/popover:ask "auth work"` both
+  reach it. You can only name your own agents, the name goes when the session does, and
+  `popover rename B1 ""` takes it off again. Nothing changes for anyone who never uses it: a
+  roster with no named agents on it prints exactly as it did before.
+- The documentation is public. popover.to/docs is the whole of how it works — the roster,
+  asking, telling, forking, which agents can see each other, and what leaves your machine —
+  and popover.to/changelog is this file, with a URL you can send someone. Neither needs an
+  account: until now the only thing a person could read before installing was the poster, so
+  deciding whether to run the install command meant asking somebody who already had.
+- `popover changelog` points at popover.to/changelog when an install has no notes to read,
+  rather than at a repository that is private and answers a 404.
+
+### Fixes
+
+- Everyone on your team needs this release. The way a repo is identified changed, and a popover
+  older than 0.8.0 cannot prove which repo it is in — so an out-of-date machine keeps working
+  and keeps its own agents up to date, but goes quiet for the rest of the team until it
+  updates. It says so on its own roster and in `popover doctor`, and your roster counts the
+  teammates it cannot show you rather than leaving you to wonder where everybody went.
+- An unrecognised repo identity costs you the identity, not the update. A publish carries every
+  session on the machine in one write, so refusing that write over one field it did not like
+  took the whole machine off the air — no roster, no status, and its own agents frozen at
+  whatever they were last doing — while the connection itself looked perfectly healthy. A value
+  we cannot verify is now dropped and the update lands without it.
+- Working in the same repo is now something popover checks rather than something it takes your
+  word for. A repo was identified by the name of its git remote, which anyone can type, so
+  anyone on your team could claim to be in a repo they had never cloned and see — and ask —
+  the agents working in it. Identity now comes from the repository's own history, which you
+  only have if you have actually cloned it, and what reaches the server is a hash of that
+  rather than the thing itself, so it cannot be read off one session and reused on another.
+- Revoking a machine ends it. A revoked machine could quietly un-revoke itself and carry on,
+  which made the button on the dashboard a suggestion.
+- The agent that answers you cannot rewrite what you asked it, and the agent you send a
+  message to cannot change who it came from. Both are what `/activity` and `popover log` show
+  you afterwards, so both are now fixed at the moment they are written.
+- Nothing a teammate can type reaches your agent as an instruction. Names, titles and the
+  activity shown on the roster are text your agent reads, and a newline in the right place
+  could forge a line that looked like popover talking. That text is now bounded and stripped
+  of anything that can start a new line, hide itself, or reverse the one it is on.
+- A laptop and a desktop no longer give two agents the same handle. Both machines numbered
+  their own agents from one, so `G1` could mean either, and asking for it reached neither.
+  Handles are now handed out where all of your machines can be seen at once.
+- `popover daemon stop` stops popover and nothing else. It trusted a leftover file naming a
+  process id, which the operating system may since have given to something entirely
+  unrelated — and `popover update` runs it for you.
+- `popover update` no longer risks leaving half an install behind on Windows, where a file
+  being replaced cannot be one a running program still holds open.
+- A slow moment no longer takes your agents off your teammates' rosters. If popover could not
+  read the list of running sessions — a busy machine, a moment's hesitation — it concluded
+  every one of them had ended.
+- `popover fork revoke` tells you the truth when it fails. It reported that a conversation had
+  been destroyed without checking, which is the one command whose word you would not think to
+  doubt.
+- Agents belonging to teammates whose names are not written in the Latin alphabet can be
+  reached again. A teammate called 李明 is given the handle 李1, and asking for it matched every
+  agent whose handle ended in the same digit — so `/popover:team ask 李1` came back "did you
+  mean 李1 or 王1?" with no third thing you could type that would have worked. Their name now
+  finds them too, and so does the name of an agent renamed in any script.
+- The roster lines up its columns for those agents rather than shearing them. Column widths
+  were counted in characters, and a character in Chinese, Japanese or Korean takes two columns
+  of a terminal, as does an emoji — so every such row drifted a column further left than the
+  one above it.
+- Asking for something with no letters or digits in it — punctuation, or an emoji on its own —
+  says nothing matches, instead of matching every agent on the roster at once.
+
 ## 0.7.2
 
 ### Fixes

package/README.md

@@ -1,11 +1,13 @@
 # popover
 
-See your teammates' active Claude Code agents, and ask them questions.
+**Ask your teammates' agents, not your teammates.**
 
 When a teammate's agent has already worked out why the retry logic lives where it does, you
 should be able to ask it — without interrupting your teammate. popover shows you everyone's
-running agents in the same repo, and answers from a read-only fork of the agent's full
-context.
+running Claude Code agents in the repo you are working in, and answers from a read-only fork
+of the agent's full accumulated context.
+
+Full documentation: **[popover.to/docs](https://www.popover.to/docs)**.
 
 ## Install
 
@@ -13,7 +15,8 @@ context.
 npm install -g @popoverinstall/cli && popover welcome
 ```
 
-Requires **Node.js 20+** and **Claude Code 2.1.229+**.
+Requires **Node.js 20+** and **Claude Code 2.1.229+**. The same two commands on macOS, Linux
+and Windows.
 
 `npm install -g` only places files. `popover welcome` is the rest of a first run: it registers
 the Claude Code plugin, records where the daemon lives, and offers to connect this machine. It
@@ -25,20 +28,71 @@ connection — and `welcome` is re-runnable, so it is also the way back if eithe
 
 ## Use
 
-Inside Claude Code, `/team` shows everyone's agents in the repo you are working in. From the
-shell:
+Inside Claude Code, `/popover:team` prints the roster: every agent your team is running in the
+repo you are in, and what each one is doing right now. Each gets a short handle.
+
+```
+*You*
+  A1  ad pipeline    idle 34m             — Wiring Kling into the ad pipeline
+  A2  popover        editing main.py      — Team agent communication
+
+*Bob Chen*
+  B1  api-server     reading config.json  — Fixing OAuth token refresh
+  B2  api-server     creating plan.md     — Postgres connection pooling
+```
+
+Three things to do with one:
 
 ```
-popover team                    Print the team roster
-popover ask <who> <question>    Ask a teammate's agent directly
+/popover:ask B1 why did you rule out redis?
+/popover:tell B1 the migration is applied on prod
+/popover:fork create
+```
+
+**Ask** is answered by a read-only fork of that agent, running on its owner's machine. Their
+session is never interrupted and their source never leaves their laptop — only the answer
+does. The fork has no tools, so a question about something the agent never looked at gets
+"I don't know" rather than an investigation, and the answer is billed to their account.
+
+**Tell** drops a heads-up into a running agent's context before its next prompt. No answer
+comes back. It is for facts that would otherwise cause a collision, and it is the one thing
+here that reaches a live session: the database caps a sender at ten messages an hour to any
+one recipient, and the recipient's human is always notified.
+
+**Fork** hands over the whole conversation. `/popover:fork create` returns a code that works
+for 24 hours; whoever you send it to runs `popover fork open <code>` and carries on in their
+own local chat. Opening one needs no popover account — `npx @popoverinstall/cli fork open
+<code>` is enough.
+
+Claude Code namespaces plugin commands, so it is `/popover:team`, not `/team`.
+
+## Who can see what
+
+Agents are only visible to each other **inside the same repo**, so the directory you run from
+is what scopes the roster. Repos are identified by their git remotes, so two clones match
+however they were cloned; a directory with no shared remote is private to you. The boundary is
+enforced by row-level security in Postgres, not by the client.
+
+## Commands
+
+```
+popover welcome                 Set up and log in — the whole of a first run
+popover login / logout          Connect this machine, or forget its credentials
+popover setup                   Re-register the Claude Code plugin
 popover status                  This machine's sessions and connection
-popover log                     Recent questions asked of your agents
-popover doctor                  Diagnose setup problems
+popover team                    Print the roster for the repo you are in
+popover fork <create|open|launch|list|revoke>
+popover log                     Questions and messages your agents received
+popover changelog [--all]       What the last update changed
 popover update                  Upgrade and restart the daemon
+popover doctor                  Diagnose setup problems
+popover daemon <start|stop|restart|status|logs>
+popover uninstall               Stop the daemon, unhook Claude Code
 ```
 
-Agents are only visible to each other **inside the same repo**, so the directory you run from
-is what scopes the roster.
+Asking and telling are not in that list on purpose: they live in the session, where the agent
+doing them has the context to write a question worth answering and to do something with the
+answer.
 
 ## How it works
 
@@ -47,11 +101,27 @@ Three pieces install together:
 - **the CLI** — the `popover` command
 - **the daemon** — a detached background process that publishes this machine's sessions and
   answers teammates' questions. It stores state in `~/.popover/`.
-- **the Claude Code plugin** — provides `/team` and the MCP tools agents use to reach each
-  other. Registered automatically on first login.
+- **the Claude Code plugin** — provides `/popover:team`, `/popover:fork`, and the MCP tools
+  agents use to reach each other. Registered by `popover setup`.
+
+## What leaves your machine
+
+- An **ask** exports one answer. A teammate can learn whatever is already in that agent's
+  context, including the contents of files it read earlier in the session — that is what it
+  answers from. Every ask is logged with its cost.
+- A **fork** exports the entire conversation: every message, every tool result, the contents
+  of every file read into it. It is sealed before it leaves, with a key derived from the code,
+  so the server holds something it cannot read — but anyone holding the code can open it.
+  Treat it the way you would treat pasting the transcript into a chat window.
+- The device token is generated here and never transmitted; the server only ever sees its
+  SHA-256.
+
+## Troubleshooting
 
-Answers are produced by a read-only fork of the teammate's agent, billed to their account.
-Their session is never interrupted.
+`popover doctor` diagnoses setup problems in root-cause order and is the right first move for
+most things. `popover status` says whether this machine is connected; `popover daemon logs` is
+the detail underneath. A teammate missing from the roster is usually running a version too old
+to publish a repo identity — the roster counts them and says so.
 
 ## Uninstall
 
@@ -64,7 +134,8 @@ Credentials and logs are left in `~/.popover/`; delete the directory to remove t
 
 ## Links
 
-- [Source](https://github.com/many-ideations/popover)
-- [Issues](https://github.com/many-ideations/popover/issues)
+- [Documentation](https://www.popover.to/docs)
+- [Changelog](https://www.popover.to/changelog)
+- [popover.to](https://www.popover.to) — dashboard, team and activity
 
-MIT
+MIT · Quo Labs, Inc.

package/dist/changelog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"changelog.d.ts","sourceRoot":"","sources":["../src/changelog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAiDH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmC/D"}
+{"version":3,"file":"changelog.d.ts","sourceRoot":"","sources":["../src/changelog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAwDH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAmC/D"}

package/dist/changelog.js

@@ -19,7 +19,14 @@ import { parseChangelog, renderReleaseNotes } from "@popoverinstall/shared";
 import { keyReader, regionTextWidth, scrollRegion } from "./pager.js";
 import { box, glyph, style } from "./theme.js";
 import { bad, dim } from "./ui.js";
-const SOURCE_URL = "https://github.com/many-ideations/popover/blob/main/CHANGELOG.md";
+/**
+ * Where to send someone whose install has no notes in it.
+ *
+ * The repository, which this used to name, is private — so the one line printed on the one
+ * path where the local copy has failed was a link to a 404. `/changelog` on the site renders
+ * the same file, is public, and needs no account.
+ */
+const SOURCE_URL = "https://www.popover.to/changelog";
 /**
  * Where the notes live, in order of preference.
  *

package/dist/changelog.js.map

@@ -1 +1 @@
-{"version":3,"file":"changelog.js","sourceRoot":"","sources":["../src/changelog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAgB,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAEnC,MAAM,UAAU,GAAG,kEAAkE,CAAC;AAEtF;;;;;;;;;GASG;AACH,MAAM,UAAU,GAAG,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;AAEhE,SAAS,aAAa;IACpB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,KAAK,CAAC,QAAmB,EAAE,KAAa;IAC/C,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC;SAC3C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAC/C,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,gEAAgE,CAAC,CAAC;QACtE,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yFAAyF;IACzF,2EAA2E;IAC3E,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE7C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,qFAAqF;IACrF,yCAAyC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEpC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,IAAI,CAAC,OAAuB;IACzC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GACV,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE;QACxD,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEtF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAE9B,mFAAmF;YACnF,+BAA+B;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAEtC,IAAI,GAAG,KAAK,GAAG;gBAAE,OAAO,CAAC,CAAC;YAE1B,mFAAmF;YACnF,kCAAkC;YAClC,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}
+{"version":3,"file":"changelog.js","sourceRoot":"","sources":["../src/changelog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAgB,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC1F,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AACtE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAC/C,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,SAAS,CAAC;AAEnC;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,kCAAkC,CAAC;AAEtD;;;;;;;;;GASG;AACH,MAAM,UAAU,GAAG,CAAC,iBAAiB,EAAE,uBAAuB,CAAC,CAAC;AAEhE,SAAS,aAAa;IACpB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,sBAAsB;QACxB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACH,SAAS,KAAK,CAAC,QAAmB,EAAE,KAAa;IAC/C,OAAO,kBAAkB,CAAC,QAAQ,EAAE,KAAK,GAAG,CAAC,CAAC;SAC3C,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAc;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;IACjC,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,GAAG,CAAC,yCAAyC,CAAC,CAAC;QAC/C,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,QAAQ,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,gEAAgE,CAAC,CAAC;QACtE,GAAG,CAAC,2BAA2B,UAAU,EAAE,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,yFAAyF;IACzF,2EAA2E;IAC3E,MAAM,KAAK,GAAG,eAAe,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;IAE7C,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7D,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC;IAE7E,qFAAqF;IACrF,yCAAyC;IACzC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,CAAC,CAAC;IAEpC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;AACvB,CAAC;AAED;;;;;;GAMG;AACH,KAAK,UAAU,IAAI,CAAC,OAAuB;IACzC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAClD,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChB,GAAG,CAAC,uCAAuC,CAAC,CAAC;QAC7C,OAAO,CAAC,CAAC;IACX,CAAC;IAED,MAAM,MAAM,GACV,MAAM,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,kBAAkB,CAAC,EAAE;QACxD,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,GAAG,QAAQ,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;IAEtF,MAAM,IAAI,GAAG,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC;QACH,SAAS,CAAC;YACR,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAChB,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAEpB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAE9B,mFAAmF;YACnF,+BAA+B;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;YAEtC,IAAI,GAAG,KAAK,GAAG;gBAAE,OAAO,CAAC,CAAC;YAE1B,mFAAmF;YACnF,kCAAkC;YAClC,MAAM,YAAY,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/daemon-lock.d.ts

@@ -0,0 +1,102 @@
+/** The shape written by `writeLock()` in packages/daemon/src/index.ts. */
+export interface DaemonLock {
+    pid: number;
+    /** Epoch ms. Absent in the legacy bare-pid format. */
+    startedAt?: number;
+    /** The daemon script. Absent in the legacy bare-pid format. */
+    entry?: string;
+    /** True when the file predates the richer format and holds nothing but a pid. */
+    legacy: boolean;
+}
+export type ProcessInfo = {
+    state: "running";
+    startedAt?: number;
+    commandLine?: string;
+}
+/** No process holds this pid. */
+ | {
+    state: "gone";
+}
+/** The probe itself could not run, so nothing is known either way. */
+ | {
+    state: "unknown";
+};
+export type LockVerdict = {
+    ok: true;
+    pid: number;
+} | {
+    ok: false;
+    /**
+     * `gone` and `not-ours` mean the file is stale and should be cleaned; `unknown` means
+     * we could not tell, which is the one case where the file must be left exactly as it
+     * is — deleting a live daemon's lock would strand it.
+     */
+    reason: "bad-pid" | "gone" | "not-ours" | "unknown";
+    detail: string;
+};
+/**
+ * Parse the lock file, tolerating the format that predates it.
+ *
+ * A daemon installed before this change is still a daemon somebody may need to stop, and its
+ * lock holds a bare pid. It is accepted, flagged `legacy`, and verified against a weaker
+ * signal — see `verifyDaemonLock`.
+ */
+export declare function readDaemonLock(file?: string): DaemonLock | null;
+/**
+ * Whether the process named by the lock is still the daemon that wrote it.
+ *
+ * `expectedEntry` is the daemon build this CLI would start, used as the identity test for a
+ * legacy lock that records no entry of its own. It is a weaker test — it says "this pid is
+ * running the daemon" rather than "this pid is the one that wrote the file" — but combined
+ * with the pid still existing it is enough to rule out an unrelated process, which is the
+ * failure that matters.
+ */
+export declare function verifyDaemonLock(lock: DaemonLock, opts?: {
+    expectedEntry?: string | null;
+    probe?: (pid: number) => ProcessInfo;
+}): LockVerdict;
+/**
+ * Ask the OS what a pid is, without ever throwing.
+ *
+ * Deliberately not `process.kill(pid, 0)`, which answers only "does something hold this
+ * number" — the exact question that led here. What is needed is identity, and identity means
+ * the start time and the command line, neither of which Node exposes for another process.
+ *
+ * Costs one subprocess. That is fine: this runs on the fallback path of `popover daemon
+ * stop`, after the pipe has already failed, and never on any hot path.
+ */
+export declare function inspectProcess(pid: number): ProcessInfo;
+/** Remove a lock that has been shown to name nothing of ours. Never throws. */
+export declare function clearDaemonLock(file?: string): void;
+/**
+ * Marker saying "an upgrade is replacing the install tree; do not start a daemon".
+ *
+ * `popover update` stops the daemon and then hands npm up to five minutes to replace the
+ * global package. The SessionStart hook runs in *every* Claude Code session, pings, finds
+ * nothing, and starts `node <entry>` pointing into the tree npm is halfway through replacing.
+ * On Windows the daemon it starts then holds those files open, npm's rename fails EPERM or
+ * EBUSY, and the update aborts with a half-replaced global install — a machine with no
+ * working `popover` at all.
+ *
+ * The deadline is what keeps this from being worse than the problem. A marker with no expiry
+ * that survives a crashed update would suppress the daemon forever, on a machine whose owner
+ * has no idea this file exists.
+ */
+export declare function updateLockPath(): string;
+export declare function beginUpdateLock(ttlMs: number): void;
+export declare function clearUpdateLock(): void;
+/**
+ * Whether an upgrade is in flight right now.
+ *
+ * Every branch fails towards starting the daemon. Only a marker that is present, readable and
+ * unexpired holds anything back; a torn or truncated one means the process that wrote it was
+ * interrupted, which is a dead update rather than a running one. Reading it the other way
+ * round would leave a machine permanently without a daemon over a file its owner has never
+ * heard of — worse than the race this guards against, and far harder to diagnose.
+ *
+ * `packages/plugin/scripts/ensure-daemon.mjs` duplicates this check, down to that choice. It
+ * must stay dependency-free — a hook that fails to resolve an import breaks every session on
+ * the machine — so it cannot import this. Change both together.
+ */
+export declare function updateInProgress(): boolean;
+//# sourceMappingURL=daemon-lock.d.ts.map

package/dist/daemon-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"daemon-lock.d.ts","sourceRoot":"","sources":["../src/daemon-lock.ts"],"names":[],"mappings":"AAkCA,0EAA0E;AAC1E,MAAM,WAAW,UAAU;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,sDAAsD;IACtD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,MAAM,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,MAAM,WAAW,GACnB;IAAE,KAAK,EAAE,SAAS,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAChE,iCAAiC;GAC/B;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE;AACnB,sEAAsE;GACpE;IAAE,KAAK,EAAE,SAAS,CAAA;CAAE,CAAC;AAEzB,MAAM,MAAM,WAAW,GACnB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACzB;IACE,EAAE,EAAE,KAAK,CAAC;IACV;;;;OAIG;IACH,MAAM,EAAE,SAAS,GAAG,MAAM,GAAG,UAAU,GAAG,SAAS,CAAC;IACpD,MAAM,EAAE,MAAM,CAAC;CAChB,CAAC;AAEN;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,IAAI,GAAE,MAAyB,GAAG,UAAU,GAAG,IAAI,CAgCjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,UAAU,EAChB,IAAI,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,WAAW,CAAA;CAAO,GACjF,WAAW,CAmEb;AAiBD;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,WAAW,CAQvD;AAyED,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAyB,GAAG,IAAI,CAMrE;AAMD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAYnD;AAED,wBAAgB,eAAe,IAAI,IAAI,CAMtC;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gBAAgB,IAAI,OAAO,CAS1C"}