@songsid/agend 2.2.0-alpha.1 → 2.2.0-alpha.2

package/dist/ui/shared/app.css

@@ -127,7 +127,7 @@ a { color: inherit; text-decoration: none; }
 .dot.warn { background: var(--warn); }
 .dot.bad { background: var(--danger); }
 .dot.off { background: var(--text-3); }
-@keyframes pulse { 0%, 100% { opacity: 0.35; } 50% { opacity: 1; } }
+@keyframes pulse { 0%, 100% { opacity: 0.55; } 50% { opacity: 1; } }   /* never near-invisible on a dark surface */
 
 .scrim { display: none; }
 .main { flex: 1; min-width: 0; display: flex; flex-direction: column; overflow: hidden; position: relative; }
@@ -295,6 +295,48 @@ a { color: inherit; text-decoration: none; }
 .pv-holder:empty { display: none; }
 .pv-holder { margin-top: var(--s-2); }
 .preview-frame { display: block; width: 100%; border: 2px solid var(--warn-line); border-radius: var(--r-sm); background: #ffffff; }
+/* #1481: the preview beside the conversation. A split on a wide screen (width: --pv-w, set by the divider through
+   CSSOM), a full-screen sheet on a narrow one. The frame is the card's (preview.js), sized by the panel here. */
+.chat-split { flex: 1; min-height: 0; display: flex; }
+.chat-main { flex: 1; min-width: 0; min-height: 0; display: flex; flex-direction: column; }
+.pv-divider { flex: 0 0 8px; cursor: col-resize; background: var(--bg); border-left: 1px solid var(--border); touch-action: none; position: relative; }
+.pv-divider::after { content: ""; position: absolute; top: 50%; left: 2px; width: 3px; height: 32px; margin-top: -16px; border-radius: 2px; background: var(--border-strong); }
+.pv-divider:hover::after, .pv-divider:focus-visible::after, .chat-split.resizing .pv-divider::after { background: var(--accent); }
+.pv-divider:focus-visible { outline: 2px solid var(--accent); outline-offset: -2px; }
+.chat-split.resizing { cursor: col-resize; user-select: none; }
+.chat-split.resizing .preview-frame { pointer-events: none; }   /* a frame under the pointer would end the drag */
+.pv-panel { flex: 0 0 var(--pv-w, 45%); width: var(--pv-w, 45%); min-width: 320px; max-width: calc(100% - 368px); min-height: 0;
+  display: flex; flex-direction: column; background: var(--bg); container-type: inline-size; }
+.pv-panel-head { display: flex; align-items: center; gap: var(--s-2); padding: var(--s-2) var(--s-3); border-bottom: 1px solid var(--border); }
+.pv-panel-title { flex: 1; min-width: 0; display: flex; flex-direction: column; font-size: var(--fs-sm); }
+.pv-source { all: unset; cursor: pointer; font-size: var(--fs-xs); color: var(--text-2); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
+.pv-source:hover { color: var(--text); text-decoration: underline; }
+.pv-source:focus-visible { outline: 2px solid var(--accent); border-radius: var(--r-sm); }
+.pv-panel-bar { display: flex; align-items: center; gap: var(--s-2); padding: var(--s-2) var(--s-3); flex-wrap: wrap; }
+.pv-panel-bar .grow { flex: 1; }
+.pv-panel > .pv-banner, .pv-panel > .pv-note, .pv-newer { margin: 0 var(--s-3) var(--s-2); }
+.pv-panel > .pv-note { margin-top: 0; }
+.pv-newer { display: flex; align-items: center; gap: var(--s-2); flex-wrap: wrap; padding: var(--s-2) var(--s-3); border-radius: var(--r-sm);
+  background: var(--surface); font-size: var(--fs-xs); }
+.pv-newer > span { flex: 1; min-width: 0; }
+.pv-panel-body { flex: 1; min-height: 0; display: flex; flex-direction: column; padding: 0 var(--s-3) var(--s-3); }
+.pv-panel-body .pv-holder { flex: 1; min-height: 0; margin: 0; display: flex; flex-direction: column; }
+.pv-panel-body.show-code .pv-holder { display: none; }
+.preview-frame.fill { flex: 1; height: 100%; min-height: 0; }
+.pv-code { flex: 1; min-height: 0; margin: 0; overflow: auto; font-family: var(--font-mono); font-size: var(--fs-xs); line-height: 1.5;
+  background: var(--surface); border-radius: var(--r-sm); padding: var(--s-3); white-space: pre-wrap; overflow-wrap: anywhere; color: var(--text); }
+.msg.flash { outline: 2px solid var(--accent); outline-offset: 4px; border-radius: var(--r-sm); transition: outline-color var(--t-med); }
+@media (max-width: 899px) {
+  .only-wide { display: none; }
+  .pv-divider { display: none; }
+  .pv-panel { position: fixed; inset: 0; z-index: 37; width: auto; min-width: 0; max-width: none;
+    padding: env(safe-area-inset-top) env(safe-area-inset-right) env(safe-area-inset-bottom) env(safe-area-inset-left); }
+}
+/* A narrow panel (a phone, or the divider dragged right): the run controls keep their icons, titles and screen-reader
+   names — except Preview, which the panel's note names. */
+@container (max-width: 560px) {
+  .pv-panel-bar :not(.pv-panel-run) > .lbl { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0; }
+}
 .pv-menu { position: relative; }
 .pv-menu > summary { list-style: none; cursor: pointer; padding: 2px var(--s-2); border-radius: var(--r-sm); color: var(--text-3); }
 .pv-menu > summary::-webkit-details-marker { display: none; }
@@ -334,6 +376,8 @@ a { color: inherit; text-decoration: none; }
 .composer textarea::placeholder { color: var(--text-3); }
 .btn-send { width: 36px; padding: 0; }
 .btn-send .send-label { display: none; }
+/* A narrow phone: Stop reply beside Send leaves the message box no room — the label is for screen readers there. */
+@media (max-width: 479px) { .btn-stop .stop-label { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0; } }
 .btn-stop { background: var(--bg); }
 .hint { font-size: var(--fs-xs); color: var(--text-3); text-align: center; }
 .pending-files { display: flex; flex-wrap: wrap; gap: var(--s-2); padding: var(--s-2) var(--s-2) 0; }
@@ -401,7 +445,8 @@ a { color: inherit; text-decoration: none; }
   .dlg-box { max-height: 90vh; }
   .dlg-actions { padding-bottom: max(var(--s-5), env(safe-area-inset-bottom)); }
   .dlg-actions .btn { flex: 1; min-height: var(--tap); }
-  .row-item .btn { min-height: var(--tap); }
+  .row-item .btn, .s-row .btn, .n-actions .btn { min-height: var(--tap); }
+  .s-row .icon-btn { min-width: var(--tap); min-height: var(--tap); }
   .kv { flex-direction: column; align-items: flex-start; gap: 2px; }
 }
 @media (prefers-reduced-motion: reduce) {
@@ -511,6 +556,11 @@ a { color: inherit; text-decoration: none; }
   .s-row.s-conn { grid-template-columns: minmax(0, 1fr) auto; }
   .s-conn .s-facts { grid-column: 1 / -1; grid-row: 2; }
 }
+/* A narrow phone: the cluster (token, state, Settings) goes under the facts, so the name keeps its line (alpha.2 sweep). */
+@media (max-width: 479px) {
+  .s-row.s-conn { grid-template-columns: minmax(0, 1fr); }
+  .s-conn .s-actions { grid-column: 1; grid-row: 3; flex-wrap: wrap; }
+}
 .s-state { font-size: var(--fs-xs); }
 .s-state.ok { color: var(--ok); }
 .s-state.bad { color: var(--danger); }
@@ -549,6 +599,30 @@ a { color: inherit; text-decoration: none; }
 .s-yaml { font-family: var(--font-mono); font-size: var(--fs-xs); line-height: 1.5; background: var(--bg); border: 1px solid var(--border); border-radius: var(--r-sm); padding: var(--s-3);
   overflow: auto; max-height: 60vh; white-space: pre; margin: 0; color: var(--text); }
 textarea.s-yaml { width: 100%; min-height: 50vh; resize: vertical; }
+/* Lines too long for the box scroll sideways; a shadow at an edge says there is more that way (alpha.2 sweep). */
+.s-yaml {
+  background:
+    linear-gradient(to right, var(--bg) 30%, transparent) left / 24px 100% no-repeat local,
+    linear-gradient(to left, var(--bg) 30%, transparent) right / 24px 100% no-repeat local,
+    radial-gradient(farthest-side at 0 50%, color-mix(in srgb, var(--text) 22%, transparent), transparent) left / 10px 100% no-repeat scroll,
+    radial-gradient(farthest-side at 100% 50%, color-mix(in srgb, var(--text) 22%, transparent), transparent) right / 10px 100% no-repeat scroll,
+    var(--bg);
+}
+textarea.s-yaml { white-space: pre; overflow-x: auto; }
+.s-br { display: none; }
+@media (max-width: 479px) {
+  /* Settings → Developer: one toolbar row, icons only (names stay as titles and for screen readers). */
+  .s-dev-bar { flex-wrap: nowrap; }
+  .s-dev-bar .lbl { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0; }
+  /* An agent's row: name and model on the first line, its tags and buttons from the second, on every row alike. */
+  .s-br { display: block; flex-basis: 100%; height: 0; }
+  /* View: the profile line wraps to two lines instead of hiding the model and context. */
+  .v-card-meta { white-space: normal; display: -webkit-box; -webkit-line-clamp: 2; -webkit-box-orient: vertical; }
+  /* A text button in Needs you lines up with the text above it, first in its row or wrapped onto a line of its own;
+     a row's trailing Delete sits at the right. */
+  .n-actions > .btn-ghost { padding-left: 0; padding-right: 0; margin-left: -1px; }
+  .row-item > .btn-ghost:last-child { margin-left: auto; margin-right: calc(-1 * var(--s-3) - 1px); }
+}
 .s-pending { position: sticky; bottom: 0; display: flex; align-items: center; gap: var(--s-3); flex-wrap: wrap; padding: var(--s-3) var(--s-5);
   background: var(--bg); border-top: 1px solid var(--border); box-shadow: var(--shadow-2); }
 .s-pending .grow { flex: 1; }
@@ -575,6 +649,8 @@ textarea.s-yaml { width: 100%; min-height: 50vh; resize: vertical; }
 .se-default { opacity: 0.7; }
 /* #1423: requests waiting for a fleet admin, in any panel */
 .pending-stack { position: fixed; right: var(--s-4); top: calc(var(--header-h) + var(--s-2)); z-index: 40; display: flex; flex-direction: column; gap: var(--s-2); width: min(360px, calc(100vw - 32px)); }
+/* In Settings the cards sit in the column, right under the operation — every width (alpha.2 sweep). */
+.pending-stack.inline, .shell:has(.s-pending) .pending-stack.inline { position: static; width: auto; margin-bottom: var(--s-4); }
 .pending-card { background: var(--bg); border: 1px solid var(--border-strong); border-radius: var(--r-md); box-shadow: var(--shadow-2); padding: var(--s-3) var(--s-4); display: flex; flex-direction: column; gap: var(--s-1); font-size: var(--fs-sm); }
 .pending-card.applied { border-color: var(--ok); }
 .pending-card.rejected, .pending-card.expired, .pending-card.stale, .pending-card.failed { border-color: var(--danger-line); }
@@ -586,6 +662,8 @@ textarea.s-yaml { width: 100%; min-height: 50vh; resize: vertical; }
 .pending-actions { display: flex; justify-content: flex-end; }
 /* Settings' pending bar sits at the bottom of the page: toasts and request cards stand above it, never on its buttons. */
 .shell:has(.s-pending) .toasts { bottom: calc(var(--s-6) + 64px); }
+/* In a chat the composer owns the bottom (Stop reply, Send): toasts come in under the header instead (alpha.2 sweep). */
+@media (min-width: 900px) { .shell:has(.p-chat) .toasts { top: calc(var(--header-h) + var(--s-2)); bottom: auto; } }
 .op-line { display: flex; align-items: center; justify-content: center; gap: var(--s-2); }
 .op-line.ok { color: var(--ok); }
 .op-line.bad { color: var(--danger); }
@@ -672,5 +750,71 @@ strong.org-name { font-size: var(--fs-sm); color: var(--text); }
 }
 /* A phone: Fleet's five tabs fit when only the open one shows its label (the others keep theirs for screen readers). */
 @media (max-width: 479px) {
-  .p-fleet .seg-item:not(.active) > span { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0; }
+  .p-fleet .seg-item:not(.active) > span, .p-settings .seg-item:not(.active) > span { position: absolute; width: 1px; height: 1px; padding: 0; margin: -1px; overflow: hidden; clip: rect(0 0 0 0); white-space: nowrap; border: 0; }
+}
+
+/* ── Cache analysis (#1468): Fleet → Cache. Bars are SVG attributes; nothing here is an inline style. ── */
+.ch { display: flex; flex-direction: column; gap: var(--s-4); }
+.ch-bar { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: var(--s-2) var(--s-4); margin-top: var(--s-2); }
+.ch-scan { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); font-size: var(--fs-xs); color: var(--text-2); }
+.ch-fleet { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: var(--s-3); }
+.ch-notes { display: flex; flex-direction: column; gap: var(--s-1); font-size: var(--fs-xs); }
+.ch-cards { display: grid; grid-template-columns: repeat(auto-fill, minmax(min(100%, 380px), 1fr)); gap: var(--s-4); align-items: start; }
+.ch-card { display: flex; flex-direction: column; gap: var(--s-3); min-width: 0; padding: var(--s-4); border: 1px solid var(--border); border-radius: var(--r-lg); background: var(--bg); }
+.ch-card.on { border-color: var(--ok); }
+.ch-head { display: flex; align-items: flex-start; gap: var(--s-3); }
+.ch-id { flex: 1; min-width: 0; display: flex; flex-direction: column; gap: 2px; }
+.ch-id h3 { font-size: var(--fs-sm); font-weight: var(--fw-semibold); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.ch-models { font-size: var(--fs-xs); color: var(--text-3); overflow-wrap: anywhere; }
+.ch-rec { flex-shrink: 0; font-size: 11px; line-height: 20px; padding: 0 var(--s-2); border-radius: var(--r-full); border: 1px solid var(--border); color: var(--text-2); white-space: nowrap; }
+.ch-rec.on { color: var(--ok); border-color: var(--ok); font-weight: var(--fw-semibold); }
+.ch-reason { font-size: var(--fs-sm); color: var(--text-2); overflow-wrap: anywhere; }
+.ch-tag { display: inline-block; font-size: 11px; line-height: 18px; padding: 0 var(--s-2); border-radius: var(--r-full); background: var(--surface-2); color: var(--text-2); }
+.ch-metrics { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); gap: var(--s-2) var(--s-3); }
+.ch-metric { display: flex; flex-direction: column; gap: 2px; min-width: 0; }
+.ch-metric dt { font-size: 11px; color: var(--text-3); line-height: var(--lh-xs); }
+.ch-metric dd { margin: 0; font-size: var(--fs-md); font-weight: var(--fw-semibold); font-variant-numeric: tabular-nums; display: flex; flex-direction: column; }
+.ch-sub { font-size: 11px; font-weight: var(--fw-regular); color: var(--text-3); }
+.ch-fleet .ch-metric dd { font-size: var(--fs-lg); }
+.ch-hist { display: block; width: 100%; height: 96px; color: var(--text-2); }
+.ch-col rect { fill: var(--accent); opacity: 0.55; }
+.ch-col.past rect { fill: var(--warn); opacity: 0.85; }
+.ch-n, .ch-l { font-size: 9px; fill: currentColor; }
+.ch-ttl line { stroke: var(--danger); stroke-width: 1.5; stroke-dasharray: 3 3; }
+.ch-ttl text { font-size: 9px; fill: var(--danger); }
+.ch-rest .row-item { font-size: var(--fs-xs); }
+@media (max-width: 899px) {
+  .ch-metrics { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+  .ch-fleet { grid-template-columns: minmax(0, 1fr); }
+  .ch-bar .btn { min-height: var(--tap); }
+}
+
+/* ── Chat commands and quick actions (#1269) ── */
+.hd-chip { margin-left: var(--s-2); padding: 0 var(--s-2); border: 1px solid var(--border); border-radius: var(--r-full); background: transparent; color: var(--text-2);
+  font-size: var(--fs-xs); line-height: 20px; cursor: pointer; max-width: 16em; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; vertical-align: middle; }
+.hd-chip:hover { background: var(--surface); color: var(--text); }
+.composer-box { position: relative; }
+.cmd-palette { position: absolute; left: 0; right: 0; bottom: calc(100% + var(--s-1)); z-index: 20; list-style: none; max-height: 280px; overflow-y: auto;
+  padding: var(--s-1); border: 1px solid var(--border); border-radius: var(--r-md); background: var(--bg); box-shadow: var(--shadow-2); }
+.cmd-palette li { display: flex; align-items: baseline; gap: var(--s-3); padding: var(--s-2) var(--s-3); border-radius: var(--r-sm); cursor: pointer; font-size: var(--fs-sm); }
+.cmd-palette li.on, .cmd-palette li:hover { background: var(--surface-2); }
+.cmd-palette .cmd-name { flex-shrink: 0; white-space: nowrap; }
+.cmd-palette .cmd-desc { color: var(--text-3); font-size: var(--fs-xs); min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.cmd-palette .cmd-arg { color: var(--text-3); }
+.cmd-palette .cmd-none { color: var(--text-3); cursor: default; }
+.cmd-card { display: flex; flex-direction: column; gap: var(--s-2); margin-bottom: var(--s-2); padding: var(--s-2) var(--s-3); border-radius: var(--r-md); background: var(--surface); font-size: var(--fs-sm); }
+.cmd-card.bad { border-left: 3px solid var(--danger); }
+.cmd-head { display: flex; align-items: center; justify-content: space-between; gap: var(--s-2); }
+.cmd-name { font-weight: var(--fw-semibold); }
+.cmd-text { margin: 0; white-space: pre-wrap; overflow-wrap: anywhere; font-family: var(--font-ui); color: var(--text-2); }
+.cmd-choices { display: flex; flex-wrap: wrap; gap: var(--s-1); max-height: 180px; overflow-y: auto; }
+.cmd-choices .btn.current { border-color: var(--accent); color: var(--accent); }
+.quick-actions { display: flex; flex-wrap: wrap; align-items: center; gap: var(--s-2); margin-bottom: var(--s-2); font-size: var(--fs-xs); color: var(--text-2); }
+/* A phone: the instance's name keeps the header; /model and /effort are a "/" away. */
+@media (max-width: 479px) { .hd-chip { display: none; } }
+@media (max-width: 899px) {
+  .hd-chip { max-width: 9em; }
+  .cmd-palette li { min-height: var(--tap); align-items: center; flex-wrap: wrap; row-gap: 0; }
+  .cmd-palette .cmd-desc { white-space: normal; flex-basis: 100%; }
+  .cmd-choices .btn, .quick-actions .btn { min-height: var(--tap); }
 }

package/dist/ui/shared/signin.js

@@ -39,7 +39,17 @@
       history.replaceState(null, "", here.pathname + here.search + here.hash);
     }
   } catch { /* nothing to clean */ }
-  document.querySelectorAll("[data-i18n]").forEach((el) => { el.textContent = t(el.getAttribute("data-i18n")); });
+  // The command in the hint is a <code> that never breaks across lines (a break inside "--code" reads as two dashes
+  // and a word, alpha.2 sweep); the text around it is text.
+  const CMD = "agend web --code";
+  document.querySelectorAll("[data-i18n]").forEach((el) => {
+    const text = t(el.getAttribute("data-i18n"));
+    const at = text.indexOf(CMD);
+    if (at < 0) { el.textContent = text; return; }
+    const code = document.createElement("code");
+    code.textContent = CMD;
+    el.replaceChildren(text.slice(0, at), code, text.slice(at + CMD.length));
+  });
 
   // An old deep link, /ui#instance=<name> (#1408 §3): the fragment never reaches the server, and the sign-in page is
   // served at the URL that was asked for, so it is still in location.hash here. Exactly that one form becomes the new
@@ -94,6 +104,8 @@
     // navigation; going round again would loop, so stop and let the person type a code.
     if (recentlyBounced()) return false;
     try {
+      // Signed out, this answers 401 — and the browser logs that request in red in DevTools. That is expected: the
+      // probe asks "is there a session?", and no is a normal answer here (decided against reshaping the auth API).
       const r = await fetch("/auth/session", { credentials: "same-origin", cache: "no-store" });
       return r.ok;
     } catch { return false; }

package/dist/ui/shared/ui-icons.js

@@ -50,6 +50,8 @@ const P = {
   pause: () => html`<path d="M8 5v14M16 5v14"/>`,
   download: () => html`<path d="M12 3v12M7 10l5 5 5-5M5 21h14"/>`,
   org: () => html`<rect x="9" y="2" width="6" height="5" rx="1"/><rect x="2" y="17" width="6" height="5" rx="1"/><rect x="16" y="17" width="6" height="5" rx="1"/><path d="M12 7v5M5 17v-5h14v5"/>`,
+  panel: () => html`<rect x="3" y="4" width="18" height="16" rx="2"/><path d="M14 4v16"/>`,
+  back: () => html`<path d="M19 12H5M12 19l-7-7 7-7"/>`,
   external: () => html`<path d="M14 4h6v6M20 4l-9 9"/><path d="M18 14v5a1 1 0 0 1-1 1H5a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h5"/>`,
 };
 

package/dist/ui/signin.html

@@ -27,6 +27,7 @@
   button:disabled { opacity: .6; cursor: default; }
   #msg { min-height: 1.5em; margin-top: 14px; font-size: var(--fs-sm); color: var(--danger); }
   .hint { margin-top: 18px; font-size: var(--fs-xs); color: var(--text-3); }
+  .hint code { white-space: nowrap; font-family: var(--font-mono); }
   [hidden] { display: none !important; }
 </style>
 </head>
@@ -42,7 +43,7 @@
            autocorrect="off" spellcheck="false" maxlength="12" placeholder="XXXX-XXXX" required>
     <button id="go" type="submit" data-i18n="submit">Sign in</button>
     <div id="msg" role="alert" aria-live="polite"></div>
-    <div class="hint" data-i18n="hint">Send /dashboard to your AgEnD bot, or run “agend web --code” on the host. A code works once and expires in 5 minutes.</div>
+    <div class="hint" data-i18n="hint">Send /dashboard to your AgEnD bot, or run “<code>agend web --code</code>” on the host. A code works once and expires in 5 minutes.</div>
   </form>
   <noscript>This page needs JavaScript to sign you in.</noscript>
 </main>

package/dist/update-dispatch.d.ts

@@ -0,0 +1,28 @@
+export interface DispatchDeps {
+    run(command: string, args: string[], timeoutMs: number): Promise<{
+        status: number | null;
+        stdout: string;
+    }>;
+    readFile(path: string): Promise<string>;
+    realpath(path: string): Promise<string>;
+}
+export declare const defaultDispatchDeps: DispatchDeps;
+export type InstalledAgend = {
+    ok: true;
+    agend: string;
+    version: string;
+} | {
+    ok: false;
+    reason: string;
+};
+/** npm's global root and prefix → the installed package, its bin target, and the bin link that must lead to it. */
+export declare function resolveInstalledAgend(deps?: DispatchDeps): Promise<InstalledAgend>;
+/**
+ * `<installed agend> update`, 2 s from now, from a detached `sh` that outlives this fleet (the update restarts it). The
+ * path is a positional argument, never spliced into the script.
+ */
+export declare const DELAYED_UPDATE_SCRIPT = "sleep 2 && exec \"$1\" update";
+export declare function updateCommand(agend: string): {
+    command: string;
+    args: string[];
+};

package/dist/update-dispatch.js

@@ -0,0 +1,73 @@
+/**
+ * #1450 C5: chat `/update` runs the INSTALLED `agend` — the one npm put in its global prefix, verified by identity —
+ * by absolute path, never whichever `agend` comes first on the fleet's PATH (a checkout, another prefix). That keeps
+ * the deliberate choice "update what is installed, on its own channel" (the CLI picks the channel from the version it
+ * replaces). No unverified fallback: when npm cannot say where it installed AgEnD, or what it says does not hold
+ * together, `/update` refuses and says to run `agend update` from a shell.
+ *
+ * Runs on the fleet's event loop: every step is async and bounded.
+ */
+import { execFile } from "node:child_process";
+import { readFile, realpath } from "node:fs/promises";
+import { join } from "node:path";
+import { promisify } from "node:util";
+export const defaultDispatchDeps = {
+    run: async (command, args, timeoutMs) => {
+        try {
+            const { stdout } = await promisify(execFile)(command, args, { encoding: "utf8", timeout: timeoutMs });
+            return { status: 0, stdout: String(stdout) };
+        }
+        catch (err) {
+            const code = err.code;
+            return { status: typeof code === "number" ? code : null, stdout: "" };
+        }
+    },
+    readFile: path => readFile(path, "utf8"),
+    realpath: path => realpath(path),
+};
+/** npm's global root and prefix → the installed package, its bin target, and the bin link that must lead to it. */
+export async function resolveInstalledAgend(deps = defaultDispatchDeps) {
+    const last = (text) => text.trim().split("\n").pop()?.trim() ?? "";
+    const [root, prefix] = await Promise.all([deps.run("npm", ["root", "-g"], 15_000), deps.run("npm", ["prefix", "-g"], 15_000)]);
+    if (root.status !== 0 || prefix.status !== 0 || !last(root.stdout) || !last(prefix.stdout)) {
+        return { ok: false, reason: "npm could not say where AgEnD is installed" };
+    }
+    const pkgDir = join(last(root.stdout), "@songsid", "agend");
+    const notAgend = { ok: false, reason: `${pkgDir} is not an installed AgEnD package` };
+    let parsed;
+    try {
+        parsed = JSON.parse(await deps.readFile(join(pkgDir, "package.json")));
+    }
+    catch {
+        return notAgend;
+    }
+    // Whatever parsed (null, an array, a string…) is judged by shape, never dereferenced blindly.
+    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed))
+        return notAgend;
+    const manifest = parsed;
+    const bin = manifest.bin;
+    const binRel = typeof bin === "string" ? bin
+        : typeof bin === "object" && bin !== null && !Array.isArray(bin) && typeof bin.agend === "string" ? bin.agend : null;
+    if (manifest.name !== "@songsid/agend" || typeof manifest.version !== "string" || !manifest.version || !binRel)
+        return notAgend;
+    const agend = join(last(prefix.stdout), "bin", "agend");
+    let target, linked;
+    try {
+        [target, linked] = await Promise.all([deps.realpath(join(pkgDir, binRel)), deps.realpath(agend)]);
+    }
+    catch {
+        return { ok: false, reason: `${agend} does not lead to the installed package` };
+    }
+    if (target !== linked)
+        return { ok: false, reason: `${agend} leads to ${linked}, not the installed package's ${target}` };
+    return { ok: true, agend, version: manifest.version };
+}
+/**
+ * `<installed agend> update`, 2 s from now, from a detached `sh` that outlives this fleet (the update restarts it). The
+ * path is a positional argument, never spliced into the script.
+ */
+export const DELAYED_UPDATE_SCRIPT = 'sleep 2 && exec "$1" update';
+export function updateCommand(agend) {
+    return { command: "sh", args: ["-c", DELAYED_UPDATE_SCRIPT, "sh", agend] };
+}
+//# sourceMappingURL=update-dispatch.js.map

package/dist/update-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-dispatch.js","sourceRoot":"","sources":["../src/update-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAQtC,MAAM,CAAC,MAAM,mBAAmB,GAAiB;IAC/C,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE;QACtC,IAAI,CAAC;YACH,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;YACtG,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,GAAI,GAA0B,CAAC,IAAI,CAAC;YAC9C,OAAO,EAAE,MAAM,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QACxE,CAAC;IACH,CAAC;IACD,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACxC,QAAQ,EAAE,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC;CACjC,CAAC;AAIF,mHAAmH;AACnH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAqB,mBAAmB;IAClF,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC3E,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/H,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,EAAE,EAAE,EAAE,KAAc,EAAE,MAAM,EAAE,GAAG,MAAM,oCAAoC,EAAE,CAAC;IAC/F,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC/E,MAAM,CAAC;QAAC,OAAO,QAAQ,CAAC;IAAC,CAAC;IAC1B,8FAA8F;IAC9F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC5F,MAAM,QAAQ,GAAG,MAA8D,CAAC;IAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC;IACzB,MAAM,MAAM,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG;QAC1C,CAAC,CAAC,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,OAAQ,GAA+B,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAE,GAA8B,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAChL,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAChI,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,MAAc,EAAE,MAAc,CAAC;IACnC,IAAI,CAAC;QAAC,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAC1G,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,yCAAyC,EAAE,CAAC;IAAC,CAAC;IAC1F,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,aAAa,MAAM,iCAAiC,MAAM,EAAE,EAAE,CAAC;IAC1H,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,OAAO,EAAE,CAAC;AACxD,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,6BAA6B,CAAC;AACnE,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,qBAAqB,EAAE,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;AAC7E,CAAC"}

package/dist/update-install.d.ts

@@ -1,3 +1,4 @@
+import { type PackagePreimage } from "./package-preimage.js";
 export interface CommandResult {
     status: number | null;
     signal: NodeJS.Signals | null;
@@ -5,10 +6,14 @@ export interface CommandResult {
     stderr: string;
 }
 export interface CommandRunner {
-    /** Run a program; `inherit` streams its output to the terminal (npm's progress), otherwise it is captured. */
+    /**
+     * Run a program; `inherit` streams its output to the terminal (npm's progress), otherwise it is captured. `env` is
+     * added to this process's environment for that one program (the install token goes to npm and nothing else).
+     */
     run(command: string, args: string[], options?: {
         inherit?: boolean;
         timeoutMs?: number;
+        env?: Record<string, string>;
     }): CommandResult;
     /** Progress for the operator, printed when it happens. */
     log(message: string): void;
@@ -22,6 +27,28 @@ export interface UpdateInstallPlan {
     viaNvm: boolean;
     /** `~/.nvm/nvm.sh`. */
     nvmSh: string;
+    /**
+     * #1450 C1: take the prefix lock for the realpath'd npm prefix this install will change, before npm runs; its token
+     * is handed to npm as AGEND_INSTALL_TOKEN. Omitted: no lock (tests of the order alone).
+     */
+    lock?(prefix: string): {
+        ok: true;
+        token: string;
+    } | {
+        ok: false;
+        reason: string;
+    };
+    /**
+     * #1450 C6: copy the installed package aside before npm (requires `lock`), and put it back when the new one does not
+     * verify. The successful outcome carries the preimage, so a later service failure can restore it too.
+     */
+    rollback?: boolean;
+    now?(): Date;
+    /**
+     * nvm's Node 22 bin directory, resolved ONCE (runUpdateInstall sets it): locking, installing and verifying then run
+     * on that exact selection, never on a fresh `nvm use 22` that could pick another Node 22 in between (#1472 review).
+     */
+    nvmBin?: string;
 }
 export type UpdateInstallOutcome = {
     ok: true;
@@ -29,10 +56,17 @@ export type UpdateInstallOutcome = {
     version: string;
     dir: string;
     bin: string;
+    entry: string;
     node: string;
+    rollback?: {
+        root: string;
+        prefix: string;
+        preimage: PackagePreimage | null;
+    }; /** nvm transition: retire the old system copy once activation settles. */
+    retireSystemCopy?: true;
 } | {
     ok: false;
-    stage: "install" | "verify";
+    stage: "lock" | "install" | "verify";
     message: string;
 };
 /**
@@ -42,8 +76,12 @@ export type UpdateInstallOutcome = {
  * arguments or switching to its default before `nvm use 22`.
  */
 export declare const NVM_RUN_SCRIPT = "n=$1; shift; . \"$n\" --no-use >/dev/null 2>&1 && nvm use 22 >/dev/null 2>&1 && \"$@\"";
-/** The install itself, also with every path and spec as data: `$1` = nvm.sh, `$2` = the npm spec. */
-export declare const NVM_INSTALL_SCRIPT = "n=$1; p=$2; . \"$n\" --no-use && nvm install 22 && nvm use 22 && npm install -g \"$p\"";
+/** Getting nvm's Node 22, before its prefix can be locked and installed into: `$1` = nvm.sh, as data. */
+export declare const NVM_PREPARE_SCRIPT = "n=$1; . \"$n\" --no-use && nvm install 22";
+/** Which Node `nvm use 22` selects: its absolute path, printed once. `$1` = nvm.sh, as data. */
+export declare const NVM_SELECT_SCRIPT = "n=$1; . \"$n\" --no-use >/dev/null 2>&1 && nvm use 22 >/dev/null 2>&1 && command -v node";
+/** Run the remaining arguments with a frozen nvm bin directory first on PATH (`$1`, as data). */
+export declare const NVM_BIN_SCRIPT = "d=$1; shift; PATH=\"$d:$PATH\"; export PATH; exec \"$@\"";
 /**
  * How to run the NEW `agend` after the install: directly, or — for an nvm install — inside nvm's Node 22, because its
  * `#!/usr/bin/env node` would otherwise pick the parent's (old) Node from PATH (#1446 item 1). Append the subcommand.
@@ -55,11 +93,15 @@ export declare function newAgendInvocation(plan: Pick<UpdateInstallPlan, "viaNvm
 /** `npm link` leaves a symlink to a source checkout outside any node_modules tree; a registry install is a directory. */
 export declare function isLocalLinkTarget(entryIsSymlink: boolean, realTarget: string): boolean;
 /**
- * The identity of what npm installed: `$1` is the package directory in npm's global root. Prints its name, version and
- * the REAL path of its `agend` bin target, so PATH's `agend` can be held to that exact file.
+ * The identity of what npm installed: `$1` is the package directory in npm's global root. Prints its name, version, the
+ * REAL path of its `agend` bin target, so PATH's `agend` can be held to that exact file, and of its canonical inner
+ * entry `dist/cli.js` (#1450 C4: what a service starts; since the launcher, not the bin).
  */
 export declare const PACKAGE_IDENTITY_SCRIPT: string;
-/** Proves the native module loads AND works: on Node 20 better-sqlite3 13 imports fine and then SIGSEGVs on open. */
+/**
+ * Proves the native module loads AND works, in the main thread and in a worker (the fleet opens databases in both):
+ * on Node 20 better-sqlite3 13 imports fine and then SIGSEGVs on open. `$1` is the package directory.
+ */
 export declare const NATIVE_CHECK_SCRIPT: string;
 /**
  * Prove the package npm installed — read from npm's own global root and prefix in the install environment — is the
@@ -69,3 +111,19 @@ export declare const NATIVE_CHECK_SCRIPT: string;
  */
 export declare function verifyInstalledPackage(plan: UpdateInstallPlan, runner: CommandRunner): UpdateInstallOutcome;
 export declare function runUpdateInstall(plan: UpdateInstallPlan, runner: CommandRunner): UpdateInstallOutcome;
+/**
+ * Has the activation POSITIVELY settled on the new install — the moment the old system copy may go? launchd: the new
+ * job was proven running. Otherwise only a restart that reported "restarted": "pending" (systemd still running the
+ * job) and "failed" keep the old copy, as does any failed activation (#1473 review).
+ */
+export declare function activationSettled(outcome: {
+    ok: true;
+    via: "restart" | "launchd-activation";
+} | {
+    ok: false;
+}, restart: "restarted" | "pending" | "failed" | null): boolean;
+/**
+ * After an nvm transition's activation SETTLED (the fleet runs the new install): remove the old system copy. Best
+ * effort, and never waits for a password. Before that point the old copy is the rollback for the old service.
+ */
+export declare function retireSystemCopy(runner: CommandRunner): void;