@telora/daemon 0.22.4 → 0.22.42

package/dist/update/version-check.d.ts

@@ -1,7 +1,67 @@
 export interface VersionCheckResult {
     latestVersion: string;
     updateAvailable: boolean;
+    /**
+     * The registry URL this check actually consulted, resolved via
+     * {@link resolveRegistryUrl}. Carried on the result so a caller can name the
+     * registry alongside the version it read -- a host's reading then always
+     * identifies the registry it consulted, not just the answer. Optional so
+     * injected test fakes need not supply it; the real {@link checkForUpdates}
+     * always populates it.
+     */
+    registryUrl?: string;
 }
+/**
+ * Read a single npm config value via `npm config get <key>`.
+ *
+ * Returns a trimmed http(s) URL, or null when npm is unavailable, the key is
+ * unset (npm prints an empty line or the literal "undefined"/"null"), or the
+ * value is not an http(s) URL. Fails soft so a host without `npm` on PATH still
+ * resolves through the fallback chain rather than throwing.
+ */
+export declare function readNpmConfigValue(key: string): string | null;
+/** Injected dependencies for {@link resolveRegistryUrl} (pure + unit-testable). */
+export interface RegistryResolutionDeps {
+    env: NodeJS.ProcessEnv;
+    npmConfigGet: (key: string) => string | null;
+}
+/**
+ * Resolve the registry URL the update check should target, so the CHECK asks npm
+ * the same question the INSTALL resolves. `self-update.ts` runs
+ * `npm install -g @telora/daemon@latest`, which resolves the @telora scope from
+ * npm config (~/.npmrc -> Gitea on the daemon hosts); a check that targeted a
+ * different registry would be blind to a Gitea-only publish -- the exact failure
+ * this focus exists to close.
+ *
+ * Resolution order:
+ *   1. TELORA_REGISTRY_URL when EXPLICITLY set in the environment -> override.
+ *      Read straight from `env` (NOT through loadEnvConfig, whose typed default
+ *      would make an unset var indistinguishable from an explicit npmjs choice).
+ *   2. `npm config get @telora:registry` -> the scope registry the installer uses.
+ *   3. `npm config get registry` -> npm's configured default registry.
+ *   4. the public npmjs registry -> last-resort fallback (npm absent / unset).
+ *
+ * Pure over injected deps; {@link getRegistryUrl} binds the real env + npm reader.
+ */
+export declare function resolveRegistryUrl(deps: RegistryResolutionDeps): string;
+/**
+ * The registry `npm install -g @telora/daemon@latest` ACTUALLY resolves: npm
+ * config (@telora scope, then default), ignoring the TELORA_REGISTRY_URL CHECK
+ * override -- the installer reads ~/.npmrc, never that env var. This is the
+ * registry a version reading must be ATTRIBUTABLE to for its agreement to count:
+ * an operator who points the check elsewhere (override) has not changed where
+ * an install lands, so a reading from the override registry cannot certify the
+ * installed version is current.
+ */
+export declare function resolveInstallRegistryUrl(npmConfigGet?: (key: string) => string | null): string;
+/**
+ * True when a reading taken from `readingRegistry` can be ATTRIBUTED to the
+ * registry npm resolves for an install (`installRegistry`) -- only then does the
+ * agreement/lag it reports count. A null/absent reading registry (legacy cache,
+ * unstamped) is unattributable, and so is a reading from a different registry
+ * than the installer resolves. Trailing-slash / case insensitive.
+ */
+export declare function isReadingAttributable(readingRegistry: string | null | undefined, installRegistry: string): boolean;
 /**
  * Parse a semver string's numeric major.minor.patch core, ignoring any
  * pre-release / build suffix (e.g. "1.2.3-beta.1" -> [1, 2, 3]).
@@ -14,6 +74,19 @@ export declare function parseVersionCore(version: string): [number, number, numb
  * either version cannot be parsed, so a malformed tag never silently no-ops.
  */
 export declare function isNewerVersion(candidate: string, current: string): boolean;
+/** Component-wise magnitude of how far one version is behind another (clamped at 0). */
+export interface VersionDistance {
+    major: number;
+    minor: number;
+    patch: number;
+}
+/**
+ * Component-wise (newest - running) semver distance, clamped at 0 per component.
+ * Returns a zero distance when either version's core cannot be parsed. Pure --
+ * the single home for the running-vs-latest lag math shared by the heartbeat
+ * (lag field) and the propagation-staleness sensor (threshold decision).
+ */
+export declare function versionDistance(running: string, newest: string): VersionDistance;
 /**
  * Check the npm registry for the latest published version of @telora/daemon.
  *

package/dist/update/version-check.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAkBD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAWjF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAS1E;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,SAAmB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAoDhI"}
+{"version":3,"file":"version-check.d.ts","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,kBAAkB;IACjC,aAAa,EAAE,MAAM,CAAC;IACtB,eAAe,EAAE,OAAO,CAAC;IACzB;;;;;;;OAOG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAMD;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAa7D;AAED,mFAAmF;AACnF,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC,UAAU,CAAC;IACvB,YAAY,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC9C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAUvE;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACvC,YAAY,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAyB,GAChE,MAAM,CAER;AAMD;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAAE,eAAe,EAAE,MAAM,GAAG,OAAO,CAGlH;AASD;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAWjF;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAS1E;AAED,wFAAwF;AACxF,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,eAAe,CAShF;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,CAAC,cAAc,EAAE,MAAM,EAAE,WAAW,SAAmB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CA6DhI"}

package/dist/update/version-check.js

@@ -10,24 +10,97 @@
  * a registry outage never prevents startup or normal operation -- but logs a
  * warn line so a broken update path produces a signal instead of silent rot.
  */
-import { loadEnvConfig } from '@telora/daemon-core';
+import { execFileSync } from 'node:child_process';
 import { createLogger } from '../shell/log.js';
 const log = createLogger({ module: 'auto-update' });
 const CHECK_TIMEOUT_MS = 5000;
+const SCOPE_REGISTRY_KEY = '@telora:registry';
+const DEFAULT_REGISTRY_KEY = 'registry';
+const NPMJS_FALLBACK = 'https://registry.npmjs.org/';
 /**
- * Resolve the registry URL the update check should target.
+ * Read a single npm config value via `npm config get <key>`.
  *
- * Defaults to the public npmjs registry the package is installed from. Does NOT
- * derive from package.json publishConfig.registry -- that field points at the
- * internal Gitea LAN host for PUBLISHING and is unreachable from installed
- * daemons in the field. TELORA_REGISTRY_URL stays as the explicit LAN/dev
- * override (declared + defaulted in the typed env-config).
+ * Returns a trimmed http(s) URL, or null when npm is unavailable, the key is
+ * unset (npm prints an empty line or the literal "undefined"/"null"), or the
+ * value is not an http(s) URL. Fails soft so a host without `npm` on PATH still
+ * resolves through the fallback chain rather than throwing.
  */
+export function readNpmConfigValue(key) {
+    try {
+        const out = execFileSync('npm', ['config', 'get', key], {
+            encoding: 'utf-8',
+            timeout: 5000,
+            stdio: ['ignore', 'pipe', 'ignore'],
+        }).trim();
+        if (!out || out === 'undefined' || out === 'null')
+            return null;
+        if (!/^https?:\/\//i.test(out))
+            return null;
+        return out;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Resolve the registry URL the update check should target, so the CHECK asks npm
+ * the same question the INSTALL resolves. `self-update.ts` runs
+ * `npm install -g @telora/daemon@latest`, which resolves the @telora scope from
+ * npm config (~/.npmrc -> Gitea on the daemon hosts); a check that targeted a
+ * different registry would be blind to a Gitea-only publish -- the exact failure
+ * this focus exists to close.
+ *
+ * Resolution order:
+ *   1. TELORA_REGISTRY_URL when EXPLICITLY set in the environment -> override.
+ *      Read straight from `env` (NOT through loadEnvConfig, whose typed default
+ *      would make an unset var indistinguishable from an explicit npmjs choice).
+ *   2. `npm config get @telora:registry` -> the scope registry the installer uses.
+ *   3. `npm config get registry` -> npm's configured default registry.
+ *   4. the public npmjs registry -> last-resort fallback (npm absent / unset).
+ *
+ * Pure over injected deps; {@link getRegistryUrl} binds the real env + npm reader.
+ */
+export function resolveRegistryUrl(deps) {
+    const override = deps.env.TELORA_REGISTRY_URL;
+    if (typeof override === 'string' && override.trim().length > 0) {
+        return override.trim();
+    }
+    return (deps.npmConfigGet(SCOPE_REGISTRY_KEY) ??
+        deps.npmConfigGet(DEFAULT_REGISTRY_KEY) ??
+        NPMJS_FALLBACK);
+}
+/**
+ * The registry `npm install -g @telora/daemon@latest` ACTUALLY resolves: npm
+ * config (@telora scope, then default), ignoring the TELORA_REGISTRY_URL CHECK
+ * override -- the installer reads ~/.npmrc, never that env var. This is the
+ * registry a version reading must be ATTRIBUTABLE to for its agreement to count:
+ * an operator who points the check elsewhere (override) has not changed where
+ * an install lands, so a reading from the override registry cannot certify the
+ * installed version is current.
+ */
+export function resolveInstallRegistryUrl(npmConfigGet = readNpmConfigValue) {
+    return resolveRegistryUrl({ env: {}, npmConfigGet });
+}
+function normalizeRegistry(url) {
+    return url.trim().replace(/\/+$/, '').toLowerCase();
+}
+/**
+ * True when a reading taken from `readingRegistry` can be ATTRIBUTED to the
+ * registry npm resolves for an install (`installRegistry`) -- only then does the
+ * agreement/lag it reports count. A null/absent reading registry (legacy cache,
+ * unstamped) is unattributable, and so is a reading from a different registry
+ * than the installer resolves. Trailing-slash / case insensitive.
+ */
+export function isReadingAttributable(readingRegistry, installRegistry) {
+    if (!readingRegistry)
+        return false;
+    return normalizeRegistry(readingRegistry) === normalizeRegistry(installRegistry);
+}
 function getRegistryUrl() {
-    // Pass process.env explicitly so the value reflects the LIVE environment on
-    // every call (the update check can run long after startup, and tests mutate
-    // the env between calls) rather than the memoized startup snapshot.
-    return loadEnvConfig(process.env).TELORA_REGISTRY_URL;
+    // Read the LIVE environment + npm config on every call (the update check can
+    // run long after startup, and tests mutate the env between calls) rather than
+    // a memoized startup snapshot.
+    return resolveRegistryUrl({ env: process.env, npmConfigGet: readNpmConfigValue });
 }
 /**
  * Parse a semver string's numeric major.minor.patch core, ignoring any
@@ -66,6 +139,23 @@ export function isNewerVersion(candidate, current) {
     }
     return false;
 }
+/**
+ * Component-wise (newest - running) semver distance, clamped at 0 per component.
+ * Returns a zero distance when either version's core cannot be parsed. Pure --
+ * the single home for the running-vs-latest lag math shared by the heartbeat
+ * (lag field) and the propagation-staleness sensor (threshold decision).
+ */
+export function versionDistance(running, newest) {
+    const r = parseVersionCore(running);
+    const n = parseVersionCore(newest);
+    if (!r || !n)
+        return { major: 0, minor: 0, patch: 0 };
+    return {
+        major: Math.max(0, n[0] - r[0]),
+        minor: Math.max(0, n[1] - r[1]),
+        patch: Math.max(0, n[2] - r[2]),
+    };
+}
 /**
  * Check the npm registry for the latest published version of @telora/daemon.
  *
@@ -99,9 +189,15 @@ export async function checkForUpdates(currentVersion, packageName = '@telora/dae
                 log.warn(`[auto-update] Version check inconclusive: no dist-tags.latest for ${packageName} at registry ${registryUrl}`);
                 return null;
             }
+            // Name the registry this check consulted alongside its result, so a host's
+            // reading always identifies WHICH registry answered -- the mars incident
+            // (hourly "up to date (v0.22.4)" while Gitea served 0.22.13) would have been
+            // visible the moment the check named its npmjs.org registry.
+            log.info(`[auto-update] Version check: ${packageName} latest v${latestVersion} via registry ${registryUrl} (running v${currentVersion})`);
             return {
                 latestVersion,
                 updateAvailable: isNewerVersion(latestVersion, currentVersion),
+                registryUrl,
             };
         }
         finally {

package/dist/update/version-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,qDAAqD;AACrD,gBAAgB;AAEhB;;;;;;;GAOG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAO9B;;;;;;;;GAQG;AACH,SAAS,cAAc;IACrB,4EAA4E;IAC5E,4EAA4E;IAC5E,oEAAoE;IACpE,OAAO,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC;AACxD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,KAAK,OAAO,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAW,GAAG,gBAAgB;IAC1F,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QACzE,iEAAiE;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,gDAAgD,WAAW,kBAAkB,QAAQ,CAAC,MAAM,QAAQ,WAAW,EAAE,CAClH,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,qEAAqE,WAAW,gBAAgB,WAAW,EAAE,CAC9G,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO;gBACL,aAAa;gBACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;aAC/D,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,2BAA2B;QAC3B,GAAG,CAAC,IAAI,CACN,sDAAsD,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}
+{"version":3,"file":"version-check.js","sourceRoot":"","sources":["../../src/update/version-check.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,iEAAiE;AACjE,qDAAqD;AACrD,gBAAgB;AAEhB;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAGpD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAgB9B,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,oBAAoB,GAAG,UAAU,CAAC;AACxC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,EAAE;YACtD,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,IAAI,CAAC,GAAG,IAAI,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QAC/D,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,OAAO,GAAG,CAAC;IACb,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAQD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA4B;IAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC9C,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/D,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAC;IACzB,CAAC;IACD,OAAO,CACL,IAAI,CAAC,YAAY,CAAC,kBAAkB,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,oBAAoB,CAAC;QACvC,cAAc,CACf,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACvC,eAA+C,kBAAkB;IAEjE,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,EAAuB,EAAE,YAAY,EAAE,CAAC,CAAC;AAC5E,CAAC;AAED,SAAS,iBAAiB,CAAC,GAAW;IACpC,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACtD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,eAA0C,EAAE,eAAuB;IACvG,IAAI,CAAC,eAAe;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,iBAAiB,CAAC,eAAe,CAAC,KAAK,iBAAiB,CAAC,eAAe,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,cAAc;IACrB,6EAA6E;IAC7E,8EAA8E;IAC9E,+BAA+B;IAC/B,OAAO,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,YAAY,EAAE,kBAAkB,EAAE,CAAC,CAAC;AACpF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QAC/C,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACf,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACrC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,SAAiB,EAAE,OAAe;IAC/D,MAAM,CAAC,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IACtC,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,KAAK,OAAO,CAAC;IAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAC7B,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAChC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AASD;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,OAAe,EAAE,MAAc;IAC7D,MAAM,CAAC,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,CAAC,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;IACtD,OAAO;QACL,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC/B,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;KAChC,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,cAAsB,EAAE,WAAW,GAAG,gBAAgB;IAC1F,MAAM,WAAW,GAAG,cAAc,EAAE,CAAC;IACrC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,GAAG,GAAG,CAAC;QACzE,iEAAiE;QACjE,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACpD,MAAM,GAAG,GAAG,GAAG,IAAI,GAAG,WAAW,EAAE,CAAC;QAEpC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,gBAAgB,CAAC,CAAC;QAEvE,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;aACxC,CAAC,CAAC;YAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,GAAG,CAAC,IAAI,CACN,gDAAgD,WAAW,kBAAkB,QAAQ,CAAC,MAAM,QAAQ,WAAW,EAAE,CAClH,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAElC,CAAC;YACF,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;YAEhD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,GAAG,CAAC,IAAI,CACN,qEAAqE,WAAW,gBAAgB,WAAW,EAAE,CAC9G,CAAC;gBACF,OAAO,IAAI,CAAC;YACd,CAAC;YAED,2EAA2E;YAC3E,yEAAyE;YACzE,6EAA6E;YAC7E,6DAA6D;YAC7D,GAAG,CAAC,IAAI,CACN,gCAAgC,WAAW,YAAY,aAAa,iBAAiB,WAAW,cAAc,cAAc,GAAG,CAChI,CAAC;YAEF,OAAO;gBACL,aAAa;gBACb,eAAe,EAAE,cAAc,CAAC,aAAa,EAAE,cAAc,CAAC;gBAC9D,WAAW;aACZ,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,wEAAwE;QACxE,2EAA2E;QAC3E,2BAA2B;QAC3B,GAAG,CAAC,IAAI,CACN,sDAAsD,WAAW,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACzH,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/worktree/verify-interlock.d.ts

@@ -18,4 +18,38 @@ export declare function acquireVerifyHold(worktreePath: string): () => void;
 export declare function isWorktreeUnderVerify(worktreePath: string): boolean;
 /** Test seam: clear all holds between cases. */
 export declare function __resetVerifyHolds(): void;
+/** Injectable probe seam for {@link runWorktreeMutationUnderInterlock}. */
+export interface WorktreeMutationInterlockDeps {
+    /** Verify-hold probe; defaults to the real {@link isWorktreeUnderVerify}. */
+    isWorktreeUnderVerify?: (worktreePath: string) => boolean;
+}
+/**
+ * Result of a guarded worktree mutation: either the mutation was deferred
+ * (a verify was running in the worktree) or it ran and produced `result`.
+ */
+export type WorktreeMutationResult<T> = {
+    deferred: true;
+} | {
+    deferred: false;
+    result: T;
+};
+/**
+ * The ONE boundary every daemon path that REWRITES an existing worktree passes
+ * through -- the write-side peer of `guardedCommit`'s interlock check.
+ *
+ * While a verify command is running in `worktreePath`, a rewrite (a rebase, a
+ * git-hook reinstall) would mutate a tree the verify is mid-way through and
+ * commit paths are already refusing to touch -- the same mid-verify window that
+ * tears a write. So this defers: it runs `mutate` ONLY when the worktree is not
+ * held, and otherwise returns `{ deferred: true }` having run nothing. A deferral
+ * is a benign wait, not a failure -- the caller retries on a later poll.
+ *
+ * Routing every worktree-rewrite through this single function (rather than an
+ * inline `isWorktreeUnderVerify` check re-implemented per call site) means a
+ * worktree-write path added later cannot silently bypass the interlock: it either
+ * calls this boundary or it does not rewrite the worktree at all. The probe is
+ * injectable so the boundary is unit-testable without a real worktree or a live
+ * verify.
+ */
+export declare function runWorktreeMutationUnderInterlock<T>(worktreePath: string, mutate: () => T, deps?: WorktreeMutationInterlockDeps): WorktreeMutationResult<T>;
 //# sourceMappingURL=verify-interlock.d.ts.map

package/dist/worktree/verify-interlock.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"verify-interlock.d.ts","sourceRoot":"","sources":["../../src/worktree/verify-interlock.ts"],"names":[],"mappings":"AA2DA;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,IAAI,CAgBlE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,gDAAgD;AAChD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC"}
+{"version":3,"file":"verify-interlock.d.ts","sourceRoot":"","sources":["../../src/worktree/verify-interlock.ts"],"names":[],"mappings":"AA4DA;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,IAAI,CAgBlE;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,gDAAgD;AAChD,wBAAgB,kBAAkB,IAAI,IAAI,CAEzC;AAED,2EAA2E;AAC3E,MAAM,WAAW,6BAA6B;IAC5C,6EAA6E;IAC7E,qBAAqB,CAAC,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC;CAC3D;AAED;;;GAGG;AACH,MAAM,MAAM,sBAAsB,CAAC,CAAC,IAChC;IAAE,QAAQ,EAAE,IAAI,CAAA;CAAE,GAClB;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,CAAC;AAEnC;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,iCAAiC,CAAC,CAAC,EACjD,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,EACf,IAAI,GAAE,6BAAkC,GACvC,sBAAsB,CAAC,CAAC,CAAC,CAM3B"}

package/dist/worktree/verify-interlock.js

@@ -1,5 +1,6 @@
 // PINNED-BY-BEGIN (generated by gen:pinned-by -- do not hand-edit; checked by lint:pinned-by)
-// Pinned by: none -- no test imports this module directly (baselined; see lint:pinned-by)
+// Pinned by: packages/daemon/src/directive/directive-verify-hold-gate.test.ts,
+//   packages/daemon/src/focus/pending-spawn-verify-hold.test.ts
 // PINNED-BY-END
 /**
  * Per-worktree verify interlock.
@@ -94,4 +95,29 @@ export function isWorktreeUnderVerify(worktreePath) {
 export function __resetVerifyHolds() {
     holds.clear();
 }
+/**
+ * The ONE boundary every daemon path that REWRITES an existing worktree passes
+ * through -- the write-side peer of `guardedCommit`'s interlock check.
+ *
+ * While a verify command is running in `worktreePath`, a rewrite (a rebase, a
+ * git-hook reinstall) would mutate a tree the verify is mid-way through and
+ * commit paths are already refusing to touch -- the same mid-verify window that
+ * tears a write. So this defers: it runs `mutate` ONLY when the worktree is not
+ * held, and otherwise returns `{ deferred: true }` having run nothing. A deferral
+ * is a benign wait, not a failure -- the caller retries on a later poll.
+ *
+ * Routing every worktree-rewrite through this single function (rather than an
+ * inline `isWorktreeUnderVerify` check re-implemented per call site) means a
+ * worktree-write path added later cannot silently bypass the interlock: it either
+ * calls this boundary or it does not rewrite the worktree at all. The probe is
+ * injectable so the boundary is unit-testable without a real worktree or a live
+ * verify.
+ */
+export function runWorktreeMutationUnderInterlock(worktreePath, mutate, deps = {}) {
+    const underVerify = deps.isWorktreeUnderVerify ?? isWorktreeUnderVerify;
+    if (underVerify(worktreePath)) {
+        return { deferred: true };
+    }
+    return { deferred: false, result: mutate() };
+}
 //# sourceMappingURL=verify-interlock.js.map

package/dist/worktree/verify-interlock.js.map

@@ -1 +1 @@
-{"version":3,"file":"verify-interlock.js","sourceRoot":"","sources":["../../src/worktree/verify-interlock.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,0FAA0F;AAC1F,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,gFAAgF;AAChF,SAAS,MAAM,CAAC,YAAoB;IAClC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,CAAC,uCAAuC,GAAG,WAAW,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,EAAE;QACV,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,uCAAuC,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1F,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,kBAAkB;IAChC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}
+{"version":3,"file":"verify-interlock.js","sourceRoot":"","sources":["../../src/worktree/verify-interlock.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,+EAA+E;AAC/E,gEAAgE;AAChE,gBAAgB;AAEhB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAE/C,MAAM,GAAG,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;AAExC,gFAAgF;AAChF,SAAS,MAAM,CAAC,YAAoB;IAClC,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC,YAAY,CAAC,CAAC;IAC/B,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACpD,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,CAAC;IACjC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1C,GAAG,CAAC,KAAK,CAAC,uCAAuC,GAAG,WAAW,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAClF,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,EAAE;QACV,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;YACd,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;aAAM,CAAC;YACN,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvB,CAAC;QACD,GAAG,CAAC,KAAK,CAAC,uCAAuC,GAAG,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC;IAC1F,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,YAAoB;IACxD,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;AACpD,CAAC;AAED,gDAAgD;AAChD,MAAM,UAAU,kBAAkB;IAChC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC;AAgBD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,iCAAiC,CAC/C,YAAoB,EACpB,MAAe,EACf,OAAsC,EAAE;IAExC,MAAM,WAAW,GAAG,IAAI,CAAC,qBAAqB,IAAI,qBAAqB,CAAC;IACxE,IAAI,WAAW,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC5B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC;AAC/C,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@telora/daemon",
-  "version": "0.22.4",
+  "version": "0.22.42",
   "description": "Agent orchestration daemon for Telora - spawns and manages Claude Code instances",
   "type": "module",
   "bin": {
@@ -37,8 +37,8 @@
   },
   "//testRunner": "Uses Node.js built-in test runner (node:test) via tsx for TypeScript support. The root package uses Vitest; this is a deliberate choice for the daemon package to avoid framework dependencies. Test files live beside the modules they exercise (owner-directory layout); the runner discovers them recursively.",
   "dependencies": {
-    "@telora/daemon-core": "^0.2.87",
-    "@telora/mcp-products": "^0.22.133",
+    "@telora/daemon-core": "^0.2.89",
+    "@telora/mcp-products": "^0.22.135",
     "commander": "^14.0.3",
     "yaml": "^2.4.0",
     "zod": "^4.3.6"