@remodex/rmx 1.0.2 → 1.0.3

package/src/update/job.ts

@@ -212,7 +212,7 @@ async function waitForGhostListenClear(
   return { ok: false, accessDenied };
 }
 
-function packageLauncherPath(): string {
+export function packageLauncherPath(): string {
   // This module lives at src/update/job.ts — the launcher is <pkg-root>/bin/ocx.mjs.
   // After `npm install -g`, import.meta.url can still point at npm's renamed temp
   // tree (`@remodex/.rmx-*` or the legacy `@bitkyc08/.opencodex-*`). Prefer the
@@ -374,8 +374,8 @@ function renderSafeCommand(value: string): string {
       part === "$" || part === "<path>"
       || /^(?:npm|bun|pnpm|yarn|node)$/.test(part)
       || /^-{1,2}[\w-]+$/.test(part)
-      || /^(?:install|add|update|i)$/.test(part)
-      || /^opencodex(?:@[\w.\-]+)?$/.test(part)
+      || /^(?:install|add|update|i|__exact-update)$/.test(part)
+      || /^(?:@remodex\/rmx|opencodex)(?:@[\w.\-]+)?$/.test(part)
       || /^(?:latest|preview|next|beta)$/.test(part)
       || /^\d[\w.\-]*$/.test(part));
     if (allowed) return rendered.join(" ");
@@ -445,9 +445,12 @@ export function updateExecutionCommand(
 ): { bin: string; args: string[]; display: string } {
   if (installer === "npm") {
     const bin = nodeBin();
-    const args = [launcher, "update", "--tag", channel];
-    // The Node launcher self-update re-resolves the tag at its own time — a residual
-    // divergence window this path cannot close (documented, not claimed immutable).
+    const args = resolvedVersion
+      ? [launcher, "__exact-update", resolvedVersion]
+      : [launcher, "update", "--tag", channel];
+    // A scheduled update passes a registry-resolved version through the hidden exact
+    // launcher path. Interactive/dashboard updates without a resolved target retain
+    // the historical tag-based launcher behavior.
     return { bin, args, display: formatCommand(bin, args) };
   }
   if (installer === "bun") {
@@ -1742,6 +1745,12 @@ export interface GuiUpdateWorkerIo {
   checkForUpdateFn?: (channel: Channel) => ReturnType<typeof checkForUpdate>;
   /** Bypass the registry integrity probe, which runs before the cache gate and needs network. */
   integrityFn?: (version: string | null) => ReturnType<typeof checkUpdatePackageIntegrity>;
+  /**
+   * Immutable target selected by a caller that already resolved a registry version.
+   * npm uses the hidden Node-launcher path so the package manager cannot re-resolve a
+   * moving dist-tag between the check and install.
+   */
+  exactVersion?: string;
   runCommandFn?: (
     job: UpdateJobState,
     bin: string,
@@ -1811,7 +1820,9 @@ export async function runGuiUpdateWorker(
       ? `Integrity pre-flight skipped: ${integrity.reason}. Proceeding best-effort.`
       : `Verified ${PKG}@${check.latestVersion} integrity metadata ${integrity.integrity.slice(0, 24)}…`;
 
-    const cmd = updateExecutionCommand(check.installer, channel, undefined, check.latestVersion);
+    const cmd = io.exactVersion === undefined
+      ? updateExecutionCommand(check.installer, channel, undefined, check.latestVersion)
+      : updateExecutionCommand(check.installer, channel, undefined, io.exactVersion);
     job = updateJob(job, {
       currentVersion: check.currentVersion,
       latestVersion: check.latestVersion,