@telora/daemon 0.22.239 → 0.22.289

package/dist/update/staleness.js

@@ -0,0 +1,279 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/update/staleness-signal.test.ts
+// PINNED-BY-END
+/**
+ * Staleness signal: is the RUNNING daemon behind the latest published release?
+ *
+ * Consumed by `telora-daemon status` and `telora-daemon session-state` to
+ * surface a one-line warning when the running daemon version is behind the
+ * latest published @telora/daemon. The CLI binary executing those commands may
+ * be a DIFFERENT install than the running daemon (repo checkout vs npx cache),
+ * so the running version comes from daemon.meta.json -- stamped by the daemon
+ * itself at startup -- never from the CLI's own package.json.
+ *
+ * Design constraints:
+ * - Silent degradation: never writes to stdout; any failure (no meta, legacy
+ *   meta without a version stamp, daemon not running, registry unreachable)
+ *   returns null so callers print their normal output unchanged. The
+ *   underlying checkForUpdates console.warns on failure -- that goes to
+ *   stderr, which the session-state stdout contract tolerates.
+ * - Cached: the registry answer is cached in the global state dir
+ *   (version-check-cache.json) with a 6h TTL. An EXPIRED cache is never used
+ *   as a fallback -- a failed refresh returns null rather than reporting
+ *   staleness from old data (no stale-cache false positives).
+ * - Latency split: session-state is CACHE-ONLY (zero network -- the
+ *   SessionStart hook blocks Claude Code on this command, and an unreachable
+ *   registry would otherwise hang it for the full fetch timeout). The async
+ *   half of "async or cached" lives in the RUNNING DAEMON, which refreshes
+ *   the cache on a timer (startVersionCacheRefreshLoop) in every install
+ *   mode, including npx with auto-update disabled -- the case the signal
+ *   exists for. `status` keeps the live registry fallback: it is an
+ *   interactive command where a few seconds for a fresh answer is fine.
+ */
+import { existsSync, readFileSync, writeFileSync } from 'node:fs';
+import { join } from 'node:path';
+import { ensureGlobalStateDir, getDaemonStatus, readDaemonMeta, resolveGlobalStateDir, } from '../daemon-state/daemon-process.js';
+import { checkForUpdates } from './version-check.js';
+import { isNewerVersion, isReadingAttributable, resolveUpdateChannelUrl, scopedInstallCommand, } from '../config/update-channel.js';
+import { createLogger } from '../log/daemon-log.js';
+const log = createLogger({ module: 'staleness' });
+/** Cache freshness window. Within this, no network call is made. */
+export const VERSION_CHECK_CACHE_TTL_MS = 6 * 60 * 60 * 1000;
+/** Cache file name within the global state dir (~/.telora/). */
+export const VERSION_CHECK_CACHE_FILE = 'version-check-cache.json';
+// ---------------------------------------------------------------------------
+// Cache file helpers (default deps)
+// ---------------------------------------------------------------------------
+export function resolveVersionCheckCachePath() {
+    return join(resolveGlobalStateDir(), VERSION_CHECK_CACHE_FILE);
+}
+/**
+ * True when `cache` is within the TTL AND its reading came from `channel` (the
+ * update channel). A cache stamped with another registry -- e.g. a Gitea reading
+ * left over from before the daemon declared its channel -- or an unstamped legacy
+ * cache is NOT fresh: its latestVersion would name a version the channel install
+ * may not serve (a Gitea 0.22.87 candidate installing npmjs @latest 0.22.85 is a
+ * downgrade), so it must never drive an update decision.
+ */
+export function isFreshChannelReading(cache, nowMs, channel) {
+    const checkedAtMs = Date.parse(cache.checkedAt);
+    if (!Number.isFinite(checkedAtMs) || nowMs - checkedAtMs >= VERSION_CHECK_CACHE_TTL_MS)
+        return false;
+    return isReadingAttributable(cache.registryUrl, channel);
+}
+/**
+ * Read the version-check cache only when it is FRESH (within the TTL, on `now`)
+ * and read from `channel` ({@link isFreshChannelReading}).
+ *
+ * The running daemon keeps this cache warm via {@link startVersionCacheRefreshLoop};
+ * the auto-update controller reads the candidate version from here instead of
+ * issuing a registry call on every idle edge, so rapid idle flapping cannot
+ * produce a registry-call storm. An expired or off-channel cache returns null --
+ * a stale answer must never drive an update decision.
+ */
+export function readFreshVersionCacheAt(now, channel) {
+    const cache = readCacheFile();
+    if (!cache)
+        return null;
+    return isFreshChannelReading(cache, now(), channel) ? cache : null;
+}
+/**
+ * The production read: {@link readFreshVersionCacheAt} on the wall clock and
+ * the update channel resolved at read time.
+ */
+export function readFreshVersionCache() {
+    return readFreshVersionCacheAt(() => Date.now(), resolveUpdateChannelUrl());
+}
+function readCacheFile() {
+    const path = resolveVersionCheckCachePath();
+    if (!existsSync(path))
+        return null;
+    try {
+        const parsed = JSON.parse(readFileSync(path, 'utf-8'));
+        if (typeof parsed.checkedAt !== 'string' || typeof parsed.latestVersion !== 'string') {
+            return null;
+        }
+        return {
+            checkedAt: parsed.checkedAt,
+            latestVersion: parsed.latestVersion,
+            ...(typeof parsed.registryUrl === 'string' ? { registryUrl: parsed.registryUrl } : {}),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+function writeCacheFile(cache) {
+    try {
+        ensureGlobalStateDir();
+        writeFileSync(resolveVersionCheckCachePath(), JSON.stringify(cache, null, 2) + '\n', { mode: 0o600 });
+    }
+    catch (err) {
+        // Best-effort cache: an unwritable state dir must not break the signal.
+        log.debug('Best-effort cache: an unwritable state dir must not break the signal', { error: String(err?.message ?? err) });
+    }
+}
+/**
+ * Compute staleness info for the running daemon, with injected dependencies.
+ *
+ * Returns null whenever the signal cannot be established with confidence:
+ * no meta file, legacy meta without a version stamp, daemon not running,
+ * or no fresh latest-version answer (expired cache + failed registry check,
+ * or expired cache in cacheOnly mode).
+ */
+export async function getStalenessInfoCore(deps, opts = {}) {
+    const meta = deps.readMeta();
+    if (!meta || typeof meta.version !== 'string' || meta.version.length === 0)
+        return null;
+    if (!deps.isDaemonRunning())
+        return null;
+    const runningVersion = meta.version;
+    // Resolve the latest published version: fresh cache first, registry second.
+    let latestVersion = null;
+    const cache = deps.readCache();
+    if (cache) {
+        const checkedAtMs = Date.parse(cache.checkedAt);
+        if (Number.isFinite(checkedAtMs) && deps.now() - checkedAtMs < VERSION_CHECK_CACHE_TTL_MS) {
+            latestVersion = cache.latestVersion;
+        }
+    }
+    if (latestVersion === null) {
+        if (opts.cacheOnly)
+            return null; // No fresh cache and no network allowed -- silent.
+        const result = await deps.checkForUpdates(runningVersion);
+        if (!result)
+            return null; // Registry unreachable -- silent, no stale-cache fallback.
+        latestVersion = result.latestVersion;
+        deps.writeCache({
+            checkedAt: new Date(deps.now()).toISOString(),
+            latestVersion,
+            ...(result.registryUrl ? { registryUrl: result.registryUrl } : {}),
+        });
+    }
+    return {
+        runningVersion,
+        latestVersion,
+        updateAvailable: isNewerVersion(latestVersion, runningVersion),
+        ...(meta.installMode !== undefined ? { installMode: meta.installMode } : {}),
+        ...(meta.autoUpdateEnabled !== undefined ? { autoUpdateEnabled: meta.autoUpdateEnabled } : {}),
+    };
+}
+/**
+ * Compute staleness info for the running daemon (production deps).
+ * Never throws; never writes stdout. Returns null when no signal applies.
+ */
+export async function getStalenessInfo(opts = {}) {
+    try {
+        return await getStalenessInfoCore({
+            readMeta: readDaemonMeta,
+            isDaemonRunning: () => getDaemonStatus().running,
+            readCache: readCacheFile,
+            writeCache: writeCacheFile,
+            checkForUpdates,
+            now: () => Date.now(),
+        }, opts);
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Refresh the version-check cache when it is missing, expired, or read from a
+ * registry other than the update channel.
+ * Returns true when a fresh registry answer was written, false when the
+ * cache was already fresh or the registry was unreachable (no write -- an
+ * expired cache stays expired rather than being re-stamped with old data).
+ */
+export async function maybeRefreshVersionCheckCacheCore(deps, currentVersion) {
+    const cache = deps.readCache();
+    if (cache) {
+        // Off-channel readings (a Gitea-stamped or unstamped cache) are refreshed
+        // immediately regardless of age, so a channel switch heals on the first tick.
+        const withinTtl = isFreshChannelReading(cache, deps.now(), deps.channel);
+        // A cache entry whose latestVersion is at/below the running version carries
+        // zero actionable signal. After a self-update restart the running version can
+        // leapfrog the cached latest (e.g. running 0.17.53 > cached 0.17.48); the TTL
+        // would otherwise keep that semantically-dead entry authoritative for up to 6h,
+        // blinding the daemon to every subsequently-published release. Force a refresh
+        // in the leapfrog case regardless of cache age -- the startup prime tick then
+        // self-heals the cache on the next boot. The equal case (latest == running, the
+        // up-to-date steady state) still honors the TTL, so registry traffic does not
+        // increase for daemons that are already current.
+        const leapfrogged = isNewerVersion(currentVersion, cache.latestVersion);
+        if (withinTtl && !leapfrogged) {
+            return false; // Fresh and actionable -- nothing to do.
+        }
+    }
+    const result = await deps.checkForUpdates(currentVersion);
+    if (!result)
+        return false;
+    deps.writeCache({
+        checkedAt: new Date(deps.now()).toISOString(),
+        latestVersion: result.latestVersion,
+        ...(result.registryUrl ? { registryUrl: result.registryUrl } : {}),
+    });
+    return true;
+}
+/** Production wrapper for {@link maybeRefreshVersionCheckCacheCore}. Never throws. */
+export async function maybeRefreshVersionCheckCache(currentVersion) {
+    try {
+        return await maybeRefreshVersionCheckCacheCore({
+            readCache: readCacheFile,
+            writeCache: writeCacheFile,
+            checkForUpdates,
+            channel: resolveUpdateChannelUrl(),
+            now: () => Date.now(),
+        }, currentVersion);
+    }
+    catch {
+        return false;
+    }
+}
+/** Default interval for the daemon-side cache refresh loop (1h, like auto-update). */
+export const VERSION_CACHE_REFRESH_INTERVAL_MS = 60 * 60 * 1000;
+/**
+ * Start the daemon-side version-cache refresh loop.
+ *
+ * Runs in EVERY install mode regardless of the auto-update flag -- npx with
+ * auto-update disabled is precisely the configuration the staleness signal
+ * exists for. Each tick refreshes the cache only when it is missing/expired
+ * (the TTL throttles registry traffic to ~one fetch per 6h). The unref'd
+ * timer never blocks process exit. Returns a cleanup function.
+ */
+export function startVersionCacheRefreshLoop(currentVersion, intervalMs = VERSION_CACHE_REFRESH_INTERVAL_MS) {
+    let stopped = false;
+    const tick = () => {
+        if (stopped)
+            return;
+        void maybeRefreshVersionCheckCache(currentVersion);
+    };
+    tick(); // Prime at startup so the first session-state of the day has data.
+    const timer = setInterval(tick, intervalMs);
+    timer.unref();
+    return () => {
+        stopped = true;
+        clearInterval(timer);
+    };
+}
+// ---------------------------------------------------------------------------
+// Warning-line formatting (shared by status + session-state)
+// ---------------------------------------------------------------------------
+/**
+ * Format the one-line staleness warning, or null when no warning applies.
+ *
+ * When the daemon runs from an npx cache with auto-update disabled, the line
+ * carries the explicit escape hatch: self-update cannot replace an npx-cached
+ * binary in place, so a global install + restart is the fix.
+ */
+export function formatStalenessWarning(info) {
+    if (!info || !info.updateAvailable)
+        return null;
+    let line = `Update available: v${info.runningVersion} running, v${info.latestVersion} published.`;
+    if (info.installMode === 'npx' && info.autoUpdateEnabled === false) {
+        line +=
+            ' Daemon runs from an npx cache with auto-update disabled; self-update cannot replace an npx-cached binary.' +
+                ` Install globally (${scopedInstallCommand('@telora/daemon', resolveUpdateChannelUrl())}) and run \`telora-daemon restart\`.`;
+    }
+    return line;
+}
+//# sourceMappingURL=staleness.js.map

package/dist/update/staleness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"staleness.js","sourceRoot":"","sources":["../../src/update/staleness.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAClE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,cAAc,EACd,qBAAqB,GAEtB,MAAM,mCAAmC,CAAC;AAC3C,OAAO,EAAE,eAAe,EAA2B,MAAM,oBAAoB,CAAC;AAC9E,OAAO,EACL,cAAc,EACd,qBAAqB,EACrB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;AAkClD,oEAAoE;AACpE,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE7D,gEAAgE;AAChE,MAAM,CAAC,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAYnE,8EAA8E;AAC9E,oCAAoC;AACpC,8EAA8E;AAE9E,MAAM,UAAU,4BAA4B;IAC1C,OAAO,IAAI,CAAC,qBAAqB,EAAE,EAAE,wBAAwB,CAAC,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAwB,EAAE,KAAa,EAAE,OAAe;IAC5F,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,KAAK,GAAG,WAAW,IAAI,0BAA0B;QAAE,OAAO,KAAK,CAAC;IACrG,OAAO,qBAAqB,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAiB,EAAE,OAAe;IACxE,MAAM,KAAK,GAAG,aAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,qBAAqB,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB;IACnC,OAAO,uBAAuB,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa;IACpB,MAAM,IAAI,GAAG,4BAA4B,EAAE,CAAC;IAC5C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA+B,CAAC;QACrF,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;YACrF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO;YACL,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,aAAa,EAAE,MAAM,CAAC,aAAa;YACnC,GAAG,CAAC,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAwB;IAC9C,IAAI,CAAC;QACH,oBAAoB,EAAE,CAAC;QACvB,aAAa,CACX,4BAA4B,EAAE,EAC9B,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EACrC,EAAE,IAAI,EAAE,KAAK,EAAE,CAChB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACjB,wEAAwE;QACpE,GAAG,CAAC,KAAK,CAAC,sEAAsE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAE,GAAa,EAAE,OAAO,IAAI,GAAG,CAAC,EAAE,CAAC,CAAC;IACvI,CAAC;AACH,CAAC;AAiBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAmB,EACnB,OAAyB,EAAE;IAE3B,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,EAAE,CAAC;IAC7B,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACxF,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC;IAEpC,4EAA4E;IAC5E,IAAI,aAAa,GAAkB,IAAI,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC/B,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,WAAW,GAAG,0BAA0B,EAAE,CAAC;YAC1F,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;QACtC,CAAC;IACH,CAAC;IAED,IAAI,aAAa,KAAK,IAAI,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC,CAAC,mDAAmD;QACpF,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;QAC1D,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,2DAA2D;QACrF,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QACrC,IAAI,CAAC,UAAU,CAAC;YACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7C,aAAa;YACb,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnE,CAAC,CAAC;IACL,CAAC;IAED,OAAO;QACL,cAAc;QACd,aAAa;QACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;QAC9D,GAAG,CAAC,IAAI,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,GAAG,CAAC,IAAI,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB,EAAE;IAChE,IAAI,CAAC;QACH,OAAO,MAAM,oBAAoB,CAAC;YAChC,QAAQ,EAAE,cAAc;YACxB,eAAe,EAAE,GAAG,EAAE,CAAC,eAAe,EAAE,CAAC,OAAO;YAChD,SAAS,EAAE,aAAa;YACxB,UAAU,EAAE,cAAc;YAC1B,eAAe;YACf,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;SACtB,EAAE,IAAI,CAAC,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAgBD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,IAAsB,EACtB,cAAsB;IAEtB,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAC/B,IAAI,KAAK,EAAE,CAAC;QACV,0EAA0E;QAC1E,8EAA8E;QAC9E,MAAM,SAAS,GAAG,qBAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;QACzE,4EAA4E;QAC5E,8EAA8E;QAC9E,8EAA8E;QAC9E,gFAAgF;QAChF,+EAA+E;QAC/E,8EAA8E;QAC9E,gFAAgF;QAChF,8EAA8E;QAC9E,iDAAiD;QACjD,MAAM,WAAW,GAAG,cAAc,CAAC,cAAc,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,SAAS,IAAI,CAAC,WAAW,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC,CAAC,yCAAyC;QACzD,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC;QACd,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QAC7C,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,GAAG,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC,CAAC;IACH,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,6BAA6B,CAAC,cAAsB;IACxE,IAAI,CAAC;QACH,OAAO,MAAM,iCAAiC,CAAC;YAC7C,SAAS,EAAE,aAAa;YACxB,UAAU,EAAE,cAAc;YAC1B,eAAe;YACf,OAAO,EAAE,uBAAuB,EAAE;YAClC,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;SACtB,EAAE,cAAc,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,MAAM,iCAAiC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEhE;;;;;;;;GAQG;AACH,MAAM,UAAU,4BAA4B,CAC1C,cAAsB,EACtB,aAAqB,iCAAiC;IAEtD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,IAAI,GAAG,GAAS,EAAE;QACtB,IAAI,OAAO;YAAE,OAAO;QACpB,KAAK,6BAA6B,CAAC,cAAc,CAAC,CAAC;IACrD,CAAC,CAAC;IACF,IAAI,EAAE,CAAC,CAAC,mEAAmE;IAC3E,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAC5C,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,OAAO,GAAG,EAAE;QACV,OAAO,GAAG,IAAI,CAAC;QACf,aAAa,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,6DAA6D;AAC7D,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAA0B;IAC/D,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,eAAe;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,IAAI,GAAG,sBAAsB,IAAI,CAAC,cAAc,cAAc,IAAI,CAAC,aAAa,aAAa,CAAC;IAClG,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,IAAI,IAAI,CAAC,iBAAiB,KAAK,KAAK,EAAE,CAAC;QACnE,IAAI;YACF,4GAA4G;gBAC5G,sBAAsB,oBAAoB,CAAC,gBAAgB,EAAE,uBAAuB,EAAE,CAAC,sCAAsC,CAAC;IAClI,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/update/version-check.d.ts

@@ -11,66 +11,6 @@ export interface VersionCheckResult {
      */
     registryUrl?: string;
 }
-/** The public npmjs registry: the release channel infra publishes @telora/daemon to. */
-export declare const NPMJS_RELEASE_REGISTRY = "https://registry.npmjs.org/";
-/**
- * Resolve the daemon's update channel: TELORA_REGISTRY_URL when set (trimmed; a
- * blank value is unset), otherwise the npmjs release registry.
- *
- * npm config is deliberately NOT consulted. The daemon hosts scope @telora to the
- * Gitea development registry in ~/.npmrc, and inheriting that made running
- * daemons track unreleased development builds. Check and install must still
- * agree on ONE registry (a check=npmjs / install=Gitea split once made
- * Gitea-only publishes invisible), so both resolve through this function: the
- * check fetches from it and every install pins `--@telora:registry=` to it
- * ({@link scopedInstallArgs}).
- *
- * Read on every call (not memoized): the env can change between calls in tests,
- * and resolution is a cheap parse with no shell-out.
- */
-export declare function resolveUpdateChannelUrl(env?: NodeJS.ProcessEnv): string;
-/**
- * The npm argv that installs `target` from `channel`, pinning ONLY the @telora
- * scope (`--@telora:registry=<channel>`). Never a global `--registry`: that would
- * send every non-@telora dependency to the channel host too, and against a wrong
- * host/port npm hangs in SYN-SENT with no output.
- */
-export declare function scopedInstallArgs(target: string, channel: string): string[];
-/** The same install as {@link scopedInstallArgs}, rendered as a command a human can run. */
-export declare function scopedInstallCommand(target: string, channel: string): string;
-/**
- * True when a reading taken from `readingRegistry` can be ATTRIBUTED to the
- * update channel (`channelRegistry`) -- only then does the agreement/lag it
- * reports count. A null/absent reading registry (legacy cache, unstamped) is
- * unattributable, and so is a reading from any other registry (e.g. a cache
- * stamped with the Gitea URL). Trailing-slash / case insensitive.
- */
-export declare function isReadingAttributable(readingRegistry: string | null | undefined, channelRegistry: string): boolean;
-/**
- * Parse a semver string's numeric major.minor.patch core, ignoring any
- * pre-release / build suffix (e.g. "1.2.3-beta.1" -> [1, 2, 3]).
- * Returns null when the core cannot be parsed.
- */
-export declare function parseVersionCore(version: string): [number, number, number] | null;
-/**
- * True when `candidate` is a strictly greater semver than `current`
- * (major.minor.patch compare). Falls back to string inequality only when
- * either version cannot be parsed, so a malformed tag never silently no-ops.
- */
-export declare function isNewerVersion(candidate: string, current: string): boolean;
-/** Component-wise magnitude of how far one version is behind another (clamped at 0). */
-export interface VersionDistance {
-    major: number;
-    minor: number;
-    patch: number;
-}
-/**
- * Component-wise (newest - running) semver distance, clamped at 0 per component.
- * Returns a zero distance when either version's core cannot be parsed. Pure --
- * the single home for the running-vs-latest lag math shared by the heartbeat
- * (lag field) and the propagation-staleness sensor (threshold decision).
- */
-export declare function versionDistance(running: string, newest: string): VersionDistance;
 /**
  * Check the npm registry for the latest published version of @telora/daemon.
  *

package/dist/update/version-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wFAAwF;AACxF,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAGpF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAE3E;AAED,4FAA4F;AAC5F,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAE5E;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAGlH;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAWjF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAS1E;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAShF;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,SAAmB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA8DhI"}
+{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AA6BA,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,SAAmB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA8DhI"}

package/dist/update/version-check.js

@@ -1,6 +1,6 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: packages/daemon/src/drift/staleness-signal.test.ts,
-//   packages/daemon/src/shell/heartbeat-version-lag.test.ts, packages/daemon/src/update/version-check.test.ts
+// Pinned by: packages/daemon/src/update/staleness-signal.test.ts,
+//   packages/daemon/src/update/version-check.test.ts
 // PINNED-BY-END
 /**
  * Non-blocking npm registry version check, and the daemon's declared update
@@ -17,113 +17,10 @@
  * or normal operation -- but logs a warn line so a broken update path produces a
  * signal instead of silent rot.
  */
-import { loadEnvConfig } from '@telora/daemon-core';
-import { createLogger } from '../shell/log.js';
+import { createLogger } from '../log/daemon-log.js';
+import { isNewerVersion, resolveUpdateChannelUrl } from '../config/update-channel.js';
 const log = createLogger({ module: 'auto-update' });
 const CHECK_TIMEOUT_MS = 5000;
-/** The public npmjs registry: the release channel infra publishes @telora/daemon to. */
-export const NPMJS_RELEASE_REGISTRY = 'https://registry.npmjs.org/';
-/**
- * Resolve the daemon's update channel: TELORA_REGISTRY_URL when set (trimmed; a
- * blank value is unset), otherwise the npmjs release registry.
- *
- * npm config is deliberately NOT consulted. The daemon hosts scope @telora to the
- * Gitea development registry in ~/.npmrc, and inheriting that made running
- * daemons track unreleased development builds. Check and install must still
- * agree on ONE registry (a check=npmjs / install=Gitea split once made
- * Gitea-only publishes invisible), so both resolve through this function: the
- * check fetches from it and every install pins `--@telora:registry=` to it
- * ({@link scopedInstallArgs}).
- *
- * Read on every call (not memoized): the env can change between calls in tests,
- * and resolution is a cheap parse with no shell-out.
- */
-export function resolveUpdateChannelUrl(env = process.env) {
-    const configured = loadEnvConfig(env).TELORA_REGISTRY_URL.trim();
-    return configured.length > 0 ? configured : NPMJS_RELEASE_REGISTRY;
-}
-/**
- * The npm argv that installs `target` from `channel`, pinning ONLY the @telora
- * scope (`--@telora:registry=<channel>`). Never a global `--registry`: that would
- * send every non-@telora dependency to the channel host too, and against a wrong
- * host/port npm hangs in SYN-SENT with no output.
- */
-export function scopedInstallArgs(target, channel) {
-    return ['install', '-g', `--@telora:registry=${channel}`, target];
-}
-/** The same install as {@link scopedInstallArgs}, rendered as a command a human can run. */
-export function scopedInstallCommand(target, channel) {
-    return ['npm', ...scopedInstallArgs(target, channel)].join(' ');
-}
-function normalizeRegistry(url) {
-    return url.trim().replace(/\/+$/, '').toLowerCase();
-}
-/**
- * True when a reading taken from `readingRegistry` can be ATTRIBUTED to the
- * update channel (`channelRegistry`) -- only then does the agreement/lag it
- * reports count. A null/absent reading registry (legacy cache, unstamped) is
- * unattributable, and so is a reading from any other registry (e.g. a cache
- * stamped with the Gitea URL). Trailing-slash / case insensitive.
- */
-export function isReadingAttributable(readingRegistry, channelRegistry) {
-    if (!readingRegistry)
-        return false;
-    return normalizeRegistry(readingRegistry) === normalizeRegistry(channelRegistry);
-}
-/**
- * Parse a semver string's numeric major.minor.patch core, ignoring any
- * pre-release / build suffix (e.g. "1.2.3-beta.1" -> [1, 2, 3]).
- * Returns null when the core cannot be parsed.
- */
-export function parseVersionCore(version) {
-    const core = version.trim().replace(/^v/, '').split(/[-+]/)[0];
-    const parts = core.split('.');
-    if (parts.length < 1)
-        return null;
-    const nums = [];
-    for (let i = 0; i < 3; i++) {
-        const n = Number(parts[i] ?? '0');
-        if (!Number.isInteger(n) || n < 0)
-            return null;
-        nums.push(n);
-    }
-    return [nums[0], nums[1], nums[2]];
-}
-/**
- * True when `candidate` is a strictly greater semver than `current`
- * (major.minor.patch compare). Falls back to string inequality only when
- * either version cannot be parsed, so a malformed tag never silently no-ops.
- */
-export function isNewerVersion(candidate, current) {
-    const c = parseVersionCore(candidate);
-    const r = parseVersionCore(current);
-    if (!c || !r)
-        return candidate !== current;
-    for (let i = 0; i < 3; i++) {
-        if (c[i] > r[i])
-            return true;
-        if (c[i] < r[i])
-            return false;
-    }
-    return false;
-}
-/**
- * Component-wise (newest - running) semver distance, clamped at 0 per component.
- * Returns a zero distance when either version's core cannot be parsed. Pure --
- * the single home for the running-vs-latest lag math shared by the heartbeat
- * (lag field) and the propagation-staleness sensor (threshold decision).
- */
-export function versionDistance(running, newest) {
-    const r = parseVersionCore(running);
-    const n = parseVersionCore(newest);
-    if (!r || !n)
-        return { major: 0, minor: 0, patch: 0 };
-    return {
-        major: Math.max(0, n[0] - r[0]),
-        minor: Math.max(0, n[1] - r[1]),
-        patch: Math.max(0, n[2] - r[2]),
-    };
-}
 /**
  * Check the npm registry for the latest published version of @telora/daemon.
  *

package/dist/update/version-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,8GAA8G;AAC9G,gBAAgB;AAEhB;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAgB9B,wFAAwF;AACxF,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC1E,MAAM,UAAU,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;IACjE,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,sBAAsB,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,OAAe;IAC/D,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,sBAAsB,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,OAAe;IAClE,OAAO,CAAC,KAAK,EAAE,GAAG,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAA0C,EAAE,eAAuB;IACvG,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,iBAAiB,CAAC,eAAe,CAAC,KAAK,iBAAiB,CAAC,eAAe,CAAC,CAAC;AACnF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,KAAK,OAAO,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAW,GAAG,gBAAgB;IAC1F,IAAI,WAAW,GAAG,6BAA6B,CAAC;IAChD,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QACzE,iEAAiE;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,gDAAgD,WAAW,kBAAkB,QAAQ,CAAC,MAAM,QAAQ,WAAW,EAAE,CAClH,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,qEAAqE,WAAW,gBAAgB,WAAW,EAAE,CAC9G,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,6DAA6D;YAC7D,GAAG,CAAC,IAAI,CACN,gCAAgC,WAAW,YAAY,aAAa,iBAAiB,WAAW,cAAc,cAAc,GAAG,CAChI,CAAC;YAEF,OAAO;gBACL,aAAa;gBACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;gBAC9D,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,2BAA2B;QAC3B,GAAG,CAAC,IAAI,CACN,sDAAsD,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,kEAAkE;AAClE,qDAAqD;AACrD,gBAAgB;AAEhB;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtF,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAgB9B;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAW,GAAG,gBAAgB;IAC1F,IAAI,WAAW,GAAG,6BAA6B,CAAC;IAChD,IAAI,CAAC;QACH,WAAW,GAAG,uBAAuB,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QACzE,iEAAiE;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,gDAAgD,WAAW,kBAAkB,QAAQ,CAAC,MAAM,QAAQ,WAAW,EAAE,CAClH,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,qEAAqE,WAAW,gBAAgB,WAAW,EAAE,CAC9G,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,6DAA6D;YAC7D,GAAG,CAAC,IAAI,CACN,gCAAgC,WAAW,YAAY,aAAa,iBAAiB,WAAW,cAAc,cAAc,GAAG,CAChI,CAAC;YAEF,OAAO;gBACL,aAAa;gBACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;gBAC9D,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,2BAA2B;QAC3B,GAAG,CAAC,IAAI,CACN,sDAAsD,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/verify/attribution/misattributed-commits-read.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Resolve the unattributed commits a verify hold names, from live state: the
+ * focus's recorded merge batches (focus_merges.commit_shas), the delivery's
+ * issues (its file scope), and git in the verification cwd.
+ *
+ * Best-effort by design: this ANNOTATES a hold the gate has already decided, so
+ * any read that fails yields no note -- the hold routes exactly as it would
+ * without one. It never throws.
+ */
+import type { TargetShortfall } from '../effect-reconciliation/verify-restatement.js';
+import type { CaptureAttributionIssueRow } from '../../worktree/capture-attribution-read.js';
+import type { EvidenceLookup } from '../../queries/deliveries/deliveries.js';
+import type { MisattributedCommitsRecord } from '../../queries/delivery-gate-state/misattributed-commits-record.js';
+/** The reads a hold note is resolved from; bound at the composition root (composition/verification-context.ts). */
+export interface MisattributedCommitsReadDeps {
+    getAllRecordedCommitShasForFocus: (focusId: string) => Promise<EvidenceLookup<string[][]>>;
+    getFocusIssues: (focusId: string) => Promise<CaptureAttributionIssueRow[]>;
+    /** Commits credited to a delivery outside their trailer (sha -> delivery id). */
+    readAttributionOverrides: (focusId: string) => Promise<ReadonlyMap<string, string>>;
+}
+/** The target a hold is about. */
+export interface MisattributedHoldTarget {
+    deliveryId: string;
+    focusId: string | null;
+}
+/**
+ * The unattributed commits in the focus's batches touching the delivery's files
+ * (every unattributed capture regardless), or undefined when there are none or
+ * the state could not be read.
+ */
+export declare function resolveMisattributedCommits(v: MisattributedHoldTarget, cwd: string, shortfalls: readonly Pick<TargetShortfall, 'diffCitation'>[], deps: MisattributedCommitsReadDeps): Promise<MisattributedCommitsRecord | undefined>;
+//# sourceMappingURL=misattributed-commits-read.d.ts.map

package/dist/verify/attribution/misattributed-commits-read.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"misattributed-commits-read.d.ts","sourceRoot":"","sources":["../../../src/verify/attribution/misattributed-commits-read.ts"],"names":[],"mappings":"AAKA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gDAAgD,CAAC;AACtF,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAC7F,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,wCAAwC,CAAC;AAC7E,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AAWpH,mHAAmH;AACnH,MAAM,WAAW,4BAA4B;IAC3C,gCAAgC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,cAAc,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;IAC3F,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAC3E,iFAAiF;IACjF,wBAAwB,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACrF;AAED,kCAAkC;AAClC,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED;;;;GAIG;AACH,wBAAsB,2BAA2B,CAC/C,CAAC,EAAE,uBAAuB,EAC1B,GAAG,EAAE,MAAM,EACX,UAAU,EAAE,SAAS,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,EAAE,EAC5D,IAAI,EAAE,4BAA4B,GACjC,OAAO,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAyBjD"}

package/dist/verify/attribution/misattributed-commits-read.js

@@ -0,0 +1,36 @@
+// PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
+// Pinned by: packages/daemon/src/composition/subsystem-contexts.test.ts,
+//   packages/daemon/src/verify/attribution/misattributed-hold.test.ts
+// PINNED-BY-END
+import { findMisattributedCommits, readCommitChangedFiles, readFocusCommitRecords, resolveNodeFileScope, } from './misattributed-commits.js';
+import { createLogger } from '../../log/daemon-log.js';
+const log = createLogger({ module: 'verification' });
+/**
+ * The unattributed commits in the focus's batches touching the delivery's files
+ * (every unattributed capture regardless), or undefined when there are none or
+ * the state could not be read.
+ */
+export async function resolveMisattributedCommits(v, cwd, shortfalls, deps) {
+    if (!v.focusId)
+        return undefined;
+    const focusId = v.focusId;
+    try {
+        const d = deps;
+        const batches = await d.getAllRecordedCommitShasForFocus(focusId);
+        if (batches.state !== 'found')
+            return undefined;
+        const [issues, overrides] = await Promise.all([
+            d.getFocusIssues(focusId).catch(() => []),
+            d.readAttributionOverrides(focusId).catch(() => new Map()),
+        ]);
+        const records = readFocusCommitRecords(cwd, batches.value, overrides);
+        const scope = resolveNodeFileScope(shortfalls.map((s) => s.diffCitation), issues.filter((i) => i.deliveryId === v.deliveryId));
+        const note = findMisattributedCommits(records, (sha) => readCommitChangedFiles(cwd, sha), scope);
+        return note.commits.length > 0 ? note : undefined;
+    }
+    catch (err) {
+        log.debug(`[verification] misattributed-commit read failed for delivery ${v.deliveryId}:`, err.message);
+        return undefined;
+    }
+}
+//# sourceMappingURL=misattributed-commits-read.js.map

package/dist/verify/attribution/misattributed-commits-read.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"misattributed-commits-read.js","sourceRoot":"","sources":["../../../src/verify/attribution/misattributed-commits-read.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,yEAAyE;AACzE,sEAAsE;AACtE,gBAAgB;AAgBhB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,oBAAoB,GACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAEvD,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAC;AAgBrD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,CAA0B,EAC1B,GAAW,EACX,UAA4D,EAC5D,IAAkC;IAElC,IAAI,CAAC,CAAC,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC;IAC1B,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC;QACf,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,gCAAgC,CAAC,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,CAAC,KAAK,KAAK,OAAO;YAAE,OAAO,SAAS,CAAC;QAChD,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC5C,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAkC,CAAC;YACzE,CAAC,CAAC,wBAAwB,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,GAAG,EAAkB,CAAC;SAC3E,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,sBAAsB,CAAC,GAAG,EAAE,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACtE,MAAM,KAAK,GAAG,oBAAoB,CAChC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,EACrC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,UAAU,CAAC,CACpD,CAAC;QACF,MAAM,IAAI,GAAG,wBAAwB,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,sBAAsB,CAAC,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;QACjG,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACpD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,KAAK,CACP,gEAAgE,CAAC,CAAC,UAAU,GAAG,EAC9E,GAAa,CAAC,OAAO,CACvB,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/verify/attribution/misattributed-commits.d.ts

@@ -0,0 +1,50 @@
+import { type TrailerAttribution } from '../../git/delivery-trailer.js';
+import type { CaptureAttributionIssueRow } from '../../worktree/capture-attribution-read.js';
+import type { MisattributedCommitsRecord } from '../../queries/delivery-gate-state/misattributed-commits-record.js';
+/** The trailer states a misattributed commit can be in. */
+export type MisattributedTrailer = 'sentinel' | 'unattributed' | 'unattributed_capture';
+/** One commit from the focus's recorded batches, classified. */
+export interface FocusCommitRecord {
+    sha: string;
+    subject: string;
+    isMerge: boolean;
+    attribution: TrailerAttribution;
+}
+/** A commit a held node's work may live in. */
+export interface MisattributedCommit {
+    sha: string;
+    subject: string;
+    trailer: MisattributedTrailer;
+    /** The commit's changed files that fall in the node's scope (all of them, bounded, when unscoped). */
+    files: string[];
+}
+/** The node's file scope: patterns to match, or none known. */
+export type NodeFileScope = {
+    kind: 'files';
+    patterns: string[];
+} | {
+    kind: 'unscoped';
+};
+/** What a hold names: the candidates and whether they were matched against the node's files. */
+export type MisattributedCommitsNote = MisattributedCommitsRecord;
+/**
+ * Read and classify every distinct commit in the focus's recorded batches. A
+ * commit git cannot read is skipped. `overrides` (sha -> delivery id) replaces a
+ * commit's trailer classification with a delivery attribution.
+ */
+export declare function readFocusCommitRecords(cwd: string, batches: readonly (readonly string[] | null | undefined)[], overrides?: ReadonlyMap<string, string>): FocusCommitRecord[];
+/** The files a commit changed (renames split), or null when git cannot read it. */
+export declare function readCommitChangedFiles(cwd: string, sha: string): string[] | null;
+/** The file named by a shortfall's diff citation ("path:line", "path @@ ..."), or null. */
+export declare function citedFile(diffCitation: string | undefined): string | null;
+/** Pure: the node's file scope from its shortfall citations and the delivery's issues. */
+export declare function resolveNodeFileScope(diffCitations: readonly (string | undefined)[], deliveryIssues: readonly Pick<CaptureAttributionIssueRow, 'relevantFiles' | 'completionArtifacts'>[]): NodeFileScope;
+/**
+ * Pure: the commits a held node's work may live in -- every non-merge commit in
+ * the batches trailered `none`, `unattributed` or not at all whose changed files
+ * meet the node's scope (any, when unscoped). An unattributed capture is named
+ * whatever it touches. Commits attributed to a delivery -- this one or another --
+ * never are. Newest-batch order is kept; the list and each file list are bounded.
+ */
+export declare function findMisattributedCommits(commits: readonly FocusCommitRecord[], changedFilesOf: (sha: string) => string[] | null, scope: NodeFileScope): MisattributedCommitsNote;
+//# sourceMappingURL=misattributed-commits.d.ts.map

package/dist/verify/attribution/misattributed-commits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"misattributed-commits.d.ts","sourceRoot":"","sources":["../../../src/verify/attribution/misattributed-commits.ts"],"names":[],"mappings":"AA2BA,OAAO,EAA8C,KAAK,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEpH,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AAE7F,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,mEAAmE,CAAC;AAEpH,2DAA2D;AAC3D,MAAM,MAAM,oBAAoB,GAAG,UAAU,GAAG,cAAc,GAAG,sBAAsB,CAAC;AAExF,gEAAgE;AAChE,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,WAAW,EAAE,kBAAkB,CAAC;CACjC;AAED,+CAA+C;AAC/C,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,oBAAoB,CAAC;IAC9B,sGAAsG;IACtG,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB;AAED,+DAA+D;AAC/D,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,MAAM,EAAE,CAAA;CAAE,GACrC;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,CAAC;AAEzB,gGAAgG;AAChG,MAAM,MAAM,wBAAwB,GAAG,0BAA0B,CAAC;AAWlE;;;;GAIG;AACH,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,EAAE,EAC1D,SAAS,GAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAa,GACjD,iBAAiB,EAAE,CA0BrB;AAED,mFAAmF;AACnF,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,IAAI,CAIhF;AAED,2FAA2F;AAC3F,wBAAgB,SAAS,CAAC,YAAY,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,CAGzE;AAED,0FAA0F;AAC1F,wBAAgB,oBAAoB,CAClC,aAAa,EAAE,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,EAC9C,cAAc,EAAE,SAAS,IAAI,CAAC,0BAA0B,EAAE,eAAe,GAAG,qBAAqB,CAAC,EAAE,GACnG,aAAa,CAaf;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,SAAS,iBAAiB,EAAE,EACrC,cAAc,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,EAAE,GAAG,IAAI,EAChD,KAAK,EAAE,aAAa,GACnB,wBAAwB,CAe1B"}