@spikonado/sprocket 0.3.4 → 0.3.5-dev.61eb87c9b8bc4a7eff34bba7a9d69a8a20549f2d

package/LICENSE

@@ -103,3 +103,10 @@ Unless required by applicable law or agreed to in writing, software distributed
 under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
 CONDITIONS OF ANY KIND, either express or implied. See the License for the
 specific language governing permissions and limitations under the License.
+
+---
+
+## Third-party material
+
+This license does not replace the licenses for third-party material included in Sprocket.
+See [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md) for those licenses and copyright notices.

package/README.md

@@ -63,6 +63,9 @@ Override with `SPROCKET_DATA_DIR`.
 
 | Command                     | Behavior                                                                       |
 | --------------------------- | ------------------------------------------------------------------------------ |
+| `sprocket update`           | Update a global npm, bun, pnpm, or yarn install on the current channel.        |
+| `sprocket update --check`   | Report whether an update is available without installing.                      |
+| `sprocket upgrade`          | Alias for `update`.                                                            |
 | `sprocket serve`            | Run the local server in the foreground without launching a client.             |
 | `sprocket serve --api-only` | Serve only `/api`; intended for development (see [Development](#development)). |
 
@@ -138,9 +141,16 @@ bun run build:release
 Artifacts are written to `apps/desktop/dist/` as `sprocket-desktop-*` (`.AppImage` / `.dmg` / `.exe` depending on the host OS).
 Published installers come from GitHub Releases; the `sprocket` CLI is published separately on npm.
 
+## License
+
+Sprocket is licensed under the [Functional Source License, Version 1.1, ALv2 Future License](LICENSE.md). Third-party material remains under the licenses listed in [THIRD_PARTY_NOTICES.md](THIRD_PARTY_NOTICES.md).
+
 ## Troubleshooting
 
 - If `17731` is already occupied, set `SPROCKET_PORT` before launching.
+- If installed sign-in cannot save or restore its native session, check that
+  your operating system credential service is available. Linux development
+  environments need a working Secret Service provider.
 - If `sprocket` opens the browser instead of the desktop app, install `sprocket-desktop` from [GitHub Releases](https://github.com/spikonado/sprocket/releases) onto `PATH`, or set `SPROCKET_DESKTOP_EXECUTABLE`.
 - Unsigned macOS and Windows desktop builds may need a Gatekeeper / SmartScreen override the first time you open them.
 - Contact [aarav@spikonado.com](mailto:aarav@spikonado.com) for help.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,27 @@
+# Third-party notices
+
+## pstack's `unslop` skill
+
+Portions of [`crates/sprocket-agent/src/system_prompt.md`](./crates/sprocket-agent/src/system_prompt.md) are derived from [pstack's `unslop` skill](https://github.com/cursor/plugins/blob/99559f2f52047978602ef365589275831e76af07/pstack/skills/unslop/SKILL.md) and have been modified for use in Sprocket.
+
+MIT License
+
+Copyright (c) 2026 Lauren Tan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/bin/sprocket.js

@@ -2,4 +2,4 @@
 
 import { launch } from '../lib/launcher.js';
 
-launch(process.argv.slice(2));
+await launch(process.argv.slice(2));

package/lib/launcher.js

@@ -2,7 +2,8 @@ import { spawnSync } from 'node:child_process';
 import { accessSync, chmodSync, constants, readFileSync } from 'node:fs';
 import { createRequire } from 'node:module';
 import path from 'node:path';
-import { fileURLToPath } from 'node:url';
+
+import { createHost, parseUpdateArgs, runUpdateCli, UPDATE_API_FILENAME } from './update.js';
 
 const require = createRequire(import.meta.url);
 
@@ -74,20 +75,45 @@ export function run(binary, args, options = {}) {
 	return result.status ?? 1;
 }
 
-export function launch(args) {
+export function nativeChildEnvironment(env, staticDir, updateNode, updateScript) {
+	const next = {
+		...env,
+		SPROCKET_STATIC_DIR: env.SPROCKET_STATIC_DIR || staticDir,
+		SPROCKET_UPDATE_NODE: updateNode,
+		SPROCKET_UPDATE_SCRIPT: updateScript
+	};
+	delete next.SPROCKET_UPDATE_MANAGED;
+	return next;
+}
+
+export async function launch(args, options = {}) {
+	const env = { ...(options.env ?? process.env) };
+	delete env.SPROCKET_UPDATE_MANAGED;
+	const parsed = parseUpdateArgs(args);
+	if (parsed.kind !== 'none' && parsed.kind !== 'native') {
+		const code = await runUpdateCli(parsed, options.host ?? createHost({ env }));
+		process.exitCode = code;
+		return code;
+	}
+
 	try {
-		const packageRoot = path.dirname(fileURLToPath(import.meta.url));
-		const staticDir = path.resolve(packageRoot, '../web');
-		const binary = resolveNativeBinary();
-		ensureExecutable(binary);
+		const libDir = options.libDir ?? import.meta.dirname;
+		const staticDir = path.resolve(libDir, '../web');
+		const binary = (options.resolveBinary ?? resolveNativeBinary)();
+		(options.ensureExecutable ?? ensureExecutable)(binary);
 		process.exitCode = run(binary, args, {
-			env: {
-				...process.env,
-				SPROCKET_STATIC_DIR: process.env.SPROCKET_STATIC_DIR || staticDir
-			}
+			env: nativeChildEnvironment(
+				env,
+				staticDir,
+				options.execPath ?? process.execPath,
+				path.resolve(libDir, UPDATE_API_FILENAME)
+			),
+			spawn: options.spawn
 		});
+		return process.exitCode;
 	} catch (error) {
 		console.error(`sprocket: ${error.message}`);
 		process.exitCode = 1;
+		return 1;
 	}
 }

package/lib/update-api.js

@@ -0,0 +1,5 @@
+import { runUpdateApi } from './update.js';
+
+const { exitCode, payload } = await runUpdateApi(process.argv[2]);
+process.stdout.write(`${JSON.stringify(payload)}\n`);
+process.exitCode = exitCode;