@tickernelz/paperclip-pro 2026.926.1 → 2026.926.2

package/dist/index.js

@@ -9085,7 +9085,7 @@ function requireBlockedStatusForUnblockDescriptor(value, ctx) {
     });
   }
 }
-var issueBlockedInboxStateSchema, issueBlockedInboxSeveritySchema, issueBlockedInboxReasonSchema, issueBlockedInboxIssueRefSchema, issueBlockedInboxAttentionSchema, ISSUE_EXECUTION_WORKSPACE_PREFERENCES, executionWorkspaceStrategySchema, ipv4CidrPattern, protectedTaskEgressCidrs, issueExecutionWorkspaceSettingsSchema, issueAssigneeAdapterOverridesSchema, runModelOverrideValue, issueRunModelOverrideUpdateSchema, issueExecutionStagePrincipalBaseSchema, issueExecutionStagePrincipalSchema, issueExecutionStageParticipantSchema, issueExecutionStageSchema, issueExecutionMonitorPolicySchema, issueExecutionPolicySchema, issueExecutionMonitorStateSchema, issueReviewRequestSchema, issueExecutionStateSchema, issueRecoveryActionReadModelSchema, RESOLVE_ISSUE_RECOVERY_ACTION_OUTCOMES, resolveIssueRecoveryActionSchema, issueRequestDepthInputSchema, createIssueBaseSchema, createIssueDuplicateGuardSchema, onboardingFirstTaskMarkerSchema, createIssueInputSchema, createIssueSchema, upsertIssueWatchdogSchema, createChildIssueSchema, createAcceptedPlanDecompositionSchema, createIssueLabelSchema, issueCommentAttachmentIdsSchema, updateIssueSchema, stalledReviewDecisionSchema, checkoutIssueSchema, commentMetadataLabelSchema, commentMetadataTextSchema, issueCommentAuthorTypeSchema, issueCommentPresentationSchema, issueCommentMetadataBaseRowSchema, issueCommentMetadataTextRowSchema, issueCommentMetadataCodeRowSchema, issueCommentMetadataKeyValueRowSchema, issueCommentMetadataIssueLinkRowSchema, issueCommentMetadataAgentLinkRowSchema, issueCommentMetadataRunLinkRowSchema, issueCommentMetadataRowSchema, issueCommentMetadataSectionSchema, issueCommentMetadataSchema, addIssueCommentSchema, issueThreadInteractionStatusSchema, issueThreadInteractionKindSchema, issueThreadInteractionCanonicalResolverPolicySchema, issueThreadInteractionResolverPolicySchema, issueThreadInteractionResolverPolicyProvenanceSchema, issueThreadInteractionEffectiveResolverPolicySourceSchema, issueThreadInteractionContinuationPolicySchema, connectionIntentPhaseSchema, connectionIntentBrandAssetSchema, connectionIntentPayloadSchema, connectionIntentResultSchema, issueDocumentKeySchema, suggestedTaskDraftSchema, suggestTasksPayloadSchema, suggestTasksResultCreatedTaskSchema, suggestTasksResultSchema, askUserQuestionsQuestionOptionSchema, askUserQuestionsQuestionSchema, paperclipQuestionOptionSchema, paperclipQuestionSchema, paperclipQuestionSetPayloadSchema, askUserQuestionsPayloadSchema, askUserQuestionsAnswerSchema, askUserQuestionsResultSchema, requestConfirmationHrefSchema, requestConfirmationTargetBaseSchema, requestConfirmationIssueDocumentTargetSchema, requestConfirmationCustomTargetSchema, requestConfirmationTargetSchema, requestConfirmationToolActionPayloadSchema, requestConfirmationSecretProposalPayloadSchema, requestConfirmationPayloadSchema, requestCheckboxConfirmationOptionSchema, requestCheckboxConfirmationPayloadSchema, requestConfirmationResumeFailureSchema, requestConfirmationToolActionResultSchema, requestConfirmationSecretProposalResultSchema, requestConfirmationResultSchema, requestCheckboxConfirmationResultSchema, requestItemVerdictValueSchema, requestItemVerdictsItemSchema, requestItemVerdictsPayloadSchema, requestItemVerdictsResultItemSchema, requestItemVerdictsResultSchema, createIssueThreadInteractionCommon, createAskUserQuestionsPayloadSchema, createIssueThreadInteractionSchema, acceptIssueThreadInteractionSchema, rejectIssueThreadInteractionSchema, cancelIssueThreadInteractionSchema, skipIssueThreadInteractionSchema, withdrawIssueThreadInteractionSchema, respondIssueThreadInteractionSchema, submitIssueThreadInteractionVerdictsSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, upsertIssueDocumentSchema, restoreIssueDocumentRevisionSchema;
+var issueBlockedInboxStateSchema, issueBlockedInboxSeveritySchema, issueBlockedInboxReasonSchema, issueBlockedInboxIssueRefSchema, issueBlockedInboxAttentionSchema, ISSUE_EXECUTION_WORKSPACE_PREFERENCES, executionWorkspaceStrategySchema, ipv4CidrPattern, protectedTaskEgressCidrs, issueExecutionWorkspaceSettingsSchema, issueRunModelOverrideSubtaskScopeSchema, issueRunModelOverrideInheritanceStateSchema, issueAssigneeAdapterOverridesSchema, runModelOverrideValue, issueRunModelOverrideUpdateSchema, issueExecutionStagePrincipalBaseSchema, issueExecutionStagePrincipalSchema, issueExecutionStageParticipantSchema, issueExecutionStageSchema, issueExecutionMonitorPolicySchema, issueExecutionPolicySchema, issueExecutionMonitorStateSchema, issueReviewRequestSchema, issueExecutionStateSchema, issueRecoveryActionReadModelSchema, RESOLVE_ISSUE_RECOVERY_ACTION_OUTCOMES, resolveIssueRecoveryActionSchema, issueRequestDepthInputSchema, createIssueBaseSchema, createIssueDuplicateGuardSchema, onboardingFirstTaskMarkerSchema, createIssueInputSchema, createIssueSchema, upsertIssueWatchdogSchema, createChildIssueSchema, createAcceptedPlanDecompositionSchema, createIssueLabelSchema, issueCommentAttachmentIdsSchema, updateIssueSchema, stalledReviewDecisionSchema, checkoutIssueSchema, commentMetadataLabelSchema, commentMetadataTextSchema, issueCommentAuthorTypeSchema, issueCommentPresentationSchema, issueCommentMetadataBaseRowSchema, issueCommentMetadataTextRowSchema, issueCommentMetadataCodeRowSchema, issueCommentMetadataKeyValueRowSchema, issueCommentMetadataIssueLinkRowSchema, issueCommentMetadataAgentLinkRowSchema, issueCommentMetadataRunLinkRowSchema, issueCommentMetadataRowSchema, issueCommentMetadataSectionSchema, issueCommentMetadataSchema, addIssueCommentSchema, issueThreadInteractionStatusSchema, issueThreadInteractionKindSchema, issueThreadInteractionCanonicalResolverPolicySchema, issueThreadInteractionResolverPolicySchema, issueThreadInteractionResolverPolicyProvenanceSchema, issueThreadInteractionEffectiveResolverPolicySourceSchema, issueThreadInteractionContinuationPolicySchema, connectionIntentPhaseSchema, connectionIntentBrandAssetSchema, connectionIntentPayloadSchema, connectionIntentResultSchema, issueDocumentKeySchema, suggestedTaskDraftSchema, suggestTasksPayloadSchema, suggestTasksResultCreatedTaskSchema, suggestTasksResultSchema, askUserQuestionsQuestionOptionSchema, askUserQuestionsQuestionSchema, paperclipQuestionOptionSchema, paperclipQuestionSchema, paperclipQuestionSetPayloadSchema, askUserQuestionsPayloadSchema, askUserQuestionsAnswerSchema, askUserQuestionsResultSchema, requestConfirmationHrefSchema, requestConfirmationTargetBaseSchema, requestConfirmationIssueDocumentTargetSchema, requestConfirmationCustomTargetSchema, requestConfirmationTargetSchema, requestConfirmationToolActionPayloadSchema, requestConfirmationSecretProposalPayloadSchema, requestConfirmationPayloadSchema, requestCheckboxConfirmationOptionSchema, requestCheckboxConfirmationPayloadSchema, requestConfirmationResumeFailureSchema, requestConfirmationToolActionResultSchema, requestConfirmationSecretProposalResultSchema, requestConfirmationResultSchema, requestCheckboxConfirmationResultSchema, requestItemVerdictValueSchema, requestItemVerdictsItemSchema, requestItemVerdictsPayloadSchema, requestItemVerdictsResultItemSchema, requestItemVerdictsResultSchema, createIssueThreadInteractionCommon, createAskUserQuestionsPayloadSchema, createIssueThreadInteractionSchema, acceptIssueThreadInteractionSchema, rejectIssueThreadInteractionSchema, cancelIssueThreadInteractionSchema, skipIssueThreadInteractionSchema, withdrawIssueThreadInteractionSchema, respondIssueThreadInteractionSchema, submitIssueThreadInteractionVerdictsSchema, linkIssueApprovalSchema, createIssueAttachmentMetadataSchema, ISSUE_DOCUMENT_FORMATS, issueDocumentFormatSchema, upsertIssueDocumentSchema, restoreIssueDocumentRevisionSchema;
 var init_issue = __esm({
   "../packages/shared/src/validators/issue.ts"() {
     "use strict";
@@ -9240,14 +9240,27 @@ var init_issue = __esm({
         });
       }
     });
+    issueRunModelOverrideSubtaskScopeSchema = z16.enum([
+      "new",
+      "new_and_existing"
+    ]);
+    issueRunModelOverrideInheritanceStateSchema = z16.object({
+      inheritToSubtasks: z16.boolean(),
+      subtaskScope: issueRunModelOverrideSubtaskScopeSchema,
+      inherited: z16.boolean().optional(),
+      sourceIssueId: z16.string().optional().nullable()
+    }).strict();
     issueAssigneeAdapterOverridesSchema = z16.object({
       adapterConfig: z16.record(z16.string(), z16.unknown()).optional(),
-      useProjectWorkspace: z16.boolean().optional()
+      useProjectWorkspace: z16.boolean().optional(),
+      modelOverrideInheritance: issueRunModelOverrideInheritanceStateSchema.optional()
     }).strict();
     runModelOverrideValue = z16.string().trim().max(200).nullable();
     issueRunModelOverrideUpdateSchema = z16.object({
       model: runModelOverrideValue.optional(),
-      thinking: runModelOverrideValue.optional()
+      thinking: runModelOverrideValue.optional(),
+      inheritToSubtasks: z16.boolean().optional(),
+      subtaskScope: issueRunModelOverrideSubtaskScopeSchema.optional()
     }).strict();
     issueExecutionStagePrincipalBaseSchema = z16.object({
       type: z16.enum(["agent", "user"]),
@@ -9488,6 +9501,7 @@ var init_issue = __esm({
       responsibleUserId: z16.string().optional().nullable(),
       billingCode: z16.string().optional().nullable(),
       assigneeAdapterOverrides: issueAssigneeAdapterOverridesSchema.optional().nullable(),
+      modelOverride: issueRunModelOverrideUpdateSchema.optional().nullable(),
       executionPolicy: issueExecutionPolicySchema.optional().nullable(),
       executionWorkspaceId: z16.string().guid().optional().nullable(),
       executionWorkspacePreference: z16.enum(ISSUE_EXECUTION_WORKSPACE_PREFERENCES).optional().nullable(),
@@ -15421,7 +15435,7 @@ var init_adapter_skills = __esm({
 
 // ../packages/shared/src/validators/agent.ts
 import { z as z45 } from "zod";
-var agentPermissionsSchema, agentInstructionsBundleModeSchema, updateAgentInstructionsBundleSchema, upsertAgentInstructionsFileSchema, adapterConfigSchema, createAgentInstructionsBundleSchema, agentRuntimeConfigSchema, createAgentSchema, builtInAgentProvisionSchema, builtInAgentEmptyMutationSchema, builtInAgentResetSchema, createAgentHireSchema, updateAgentSchema, updateAgentInstructionsPathSchema, taskBridgeAgentKeyScopeSchema, standardAgentKeyScopeSchema, skillTestAgentKeyScopeSchema, agentApiKeyScopeSchema, createAgentKeySchema, agentMineInboxQuerySchema, wakeAgentSchema, resetAgentSessionSchema, testAdapterEnvironmentSchema, updateAgentPermissionsSchema;
+var agentPermissionsSchema, agentInstructionsBundleModeSchema, updateAgentInstructionsBundleSchema, upsertAgentInstructionsFileSchema, adapterConfigSchema, createAgentInstructionsBundleSchema, agentRuntimeConfigSchema, createAgentSchema, builtInAgentProvisionSchema, builtInAgentEmptyMutationSchema, builtInAgentResetSchema, createAgentHireSchema, updateAgentSchema, updateAgentInstructionsPathSchema, taskBridgeAgentKeyScopeSchema, standardAgentKeyScopeSchema, skillTestAgentKeyScopeSchema, agentApiKeyScopeSchema, createAgentKeySchema, agentMineInboxQuerySchema, wakeAgentSchema, resetAgentSessionSchema, testAdapterEnvironmentSchema, updateAgentPermissionsSchema, AGENT_ADAPTER_CONFIG_BATCH_MAX_AGENTS, agentAdapterConfigBatchIds, agentAdapterConfigBatchPreviewSchema, agentAdapterConfigBatchUpdateSchema;
 var init_agent2 = __esm({
   "../packages/shared/src/validators/agent.ts"() {
     "use strict";
@@ -15639,6 +15653,15 @@ var init_agent2 = __esm({
       trustPreset: trustPresetSchema.optional(),
       authorizationPolicy: trustAuthorizationPolicySchema.optional()
     });
+    AGENT_ADAPTER_CONFIG_BATCH_MAX_AGENTS = 100;
+    agentAdapterConfigBatchIds = z45.array(z45.string().guid()).min(1).max(AGENT_ADAPTER_CONFIG_BATCH_MAX_AGENTS);
+    agentAdapterConfigBatchPreviewSchema = z45.object({ agentIds: agentAdapterConfigBatchIds }).strict();
+    agentAdapterConfigBatchUpdateSchema = z45.object({
+      agentIds: agentAdapterConfigBatchIds,
+      values: z45.record(z45.string().min(1).max(64), z45.string().trim().max(200).nullable()).refine((values) => Object.keys(values).length > 0, {
+        message: "Provide at least one adapter config value"
+      })
+    }).strict();
   }
 });
 
@@ -38607,6 +38630,47 @@ var init_telemetry2 = __esm({
   }
 });
 
+// src/release-packages.ts
+var RELEASE_PACKAGE_NAMES;
+var init_release_packages = __esm({
+  "src/release-packages.ts"() {
+    "use strict";
+    RELEASE_PACKAGE_NAMES = [
+      "@tickernelz/paperclip-pro",
+      "@tickernelz/paperclip-pro-adapter-claude-local",
+      "@tickernelz/paperclip-pro-adapter-codex-local",
+      "@tickernelz/paperclip-pro-adapter-cursor-cloud",
+      "@tickernelz/paperclip-pro-adapter-cursor-local",
+      "@tickernelz/paperclip-pro-adapter-gemini-local",
+      "@tickernelz/paperclip-pro-adapter-grok-local",
+      "@tickernelz/paperclip-pro-adapter-kimi-local",
+      "@tickernelz/paperclip-pro-adapter-omp-local",
+      "@tickernelz/paperclip-pro-adapter-openclaw-gateway",
+      "@tickernelz/paperclip-pro-adapter-opencode-local",
+      "@tickernelz/paperclip-pro-adapter-pi-local",
+      "@tickernelz/paperclip-pro-adapter-utils",
+      "@tickernelz/paperclip-pro-create-paperclip-plugin",
+      "@tickernelz/paperclip-pro-db",
+      "@tickernelz/paperclip-pro-hermes-paperclip-adapter",
+      "@tickernelz/paperclip-pro-mcp-server",
+      "@tickernelz/paperclip-pro-plugin-cloudflare-sandbox",
+      "@tickernelz/paperclip-pro-plugin-daytona",
+      "@tickernelz/paperclip-pro-plugin-e2b",
+      "@tickernelz/paperclip-pro-plugin-exe-dev",
+      "@tickernelz/paperclip-pro-plugin-kubernetes",
+      "@tickernelz/paperclip-pro-plugin-modal",
+      "@tickernelz/paperclip-pro-plugin-novita-sandbox",
+      "@tickernelz/paperclip-pro-plugin-sdk",
+      "@tickernelz/paperclip-pro-plugin-workspace-diff",
+      "@tickernelz/paperclip-pro-server",
+      "@tickernelz/paperclip-pro-shared",
+      "@tickernelz/paperclip-pro-skills-catalog",
+      "@tickernelz/paperclip-pro-teams-catalog",
+      "@tickernelz/paperclip-pro-ui"
+    ];
+  }
+});
+
 // src/commands/install.ts
 import fs12 from "node:fs";
 import os4 from "node:os";
@@ -38682,6 +38746,10 @@ function parseResolvedVersion(stdout) {
   try {
     const parsed = JSON.parse(trimmed);
     if (typeof parsed === "string") return parsed;
+    if (Array.isArray(parsed)) {
+      const last = parsed.at(-1);
+      if (typeof last === "string" && EXACT_VERSION_PATTERN.test(last)) return last;
+    }
   } catch {
     if (EXACT_VERSION_PATTERN.test(trimmed)) return trimmed;
   }
@@ -38695,6 +38763,30 @@ async function resolvePublishedVersion(spec, runCommand2) {
   );
   return parseResolvedVersion(result.stdout);
 }
+async function assertReleaseSetPublished(version, runCommand2) {
+  const missing = [];
+  const queue = [...RELEASE_PACKAGE_NAMES];
+  const probe = async () => {
+    for (let name = queue.pop(); name !== void 0; name = queue.pop()) {
+      try {
+        const result = await runCommand2(
+          "npm",
+          ["view", `${name}@${version}`, "version", "--json", `--registry=${PUBLIC_NPM_REGISTRY}`],
+          { maxBuffer: 1024 * 1024 }
+        );
+        if (parseResolvedVersion(result.stdout) !== version) missing.push(name);
+      } catch {
+        missing.push(name);
+      }
+    }
+  };
+  await Promise.all(Array.from({ length: Math.min(8, RELEASE_PACKAGE_NAMES.length) }, probe));
+  if (missing.length > 0) {
+    throw new Error(
+      `Release ${version} is incomplete on ${PUBLIC_NPM_REGISTRY}: ${missing.length} of ${RELEASE_PACKAGE_NAMES.length} packages are not published at that version (${missing.sort().join(", ")}). Installing it would mix versions across packages. Wait for the release to finish publishing, or pass --version with a complete release.`
+    );
+  }
+}
 function resolveGitInstallRequest(options) {
   if (!options.ref && !options.repo) return null;
   if (!options.ref) throw new Error("--repo requires --ref.");
@@ -38729,12 +38821,37 @@ async function resolveGitHubRef(repo, ref, runCommand2) {
   if (typeof sha !== "string" || !/^[0-9a-f]{40}$/i.test(sha)) throw new Error(`GitHub did not return a full commit SHA for ${repo}@${ref}.`);
   return sha.toLowerCase();
 }
+function writeManagedNpmrc(filePath) {
+  const lines = [
+    `registry=${PUBLIC_NPM_REGISTRY}`,
+    `@tickernelz:registry=${PUBLIC_NPM_REGISTRY}`,
+    ...INSTALL_SCRIPT_ALLOWLIST.map((name) => `allow-scripts[]=${name}`)
+  ];
+  fs12.writeFileSync(filePath, `${lines.join("\n")}
+`, { mode: 384 });
+}
+function assertPayloadNativeAssets(payloadPath) {
+  const embeddedRoot = path16.join(payloadPath, "node_modules", "@embedded-postgres");
+  if (!fs12.existsSync(embeddedRoot)) return;
+  for (const platform2 of fs12.readdirSync(embeddedRoot)) {
+    const manifestPath = path16.join(embeddedRoot, platform2, "native", "pg-symlinks.json");
+    if (!fs12.existsSync(manifestPath)) continue;
+    const links = JSON.parse(fs12.readFileSync(manifestPath, "utf8"));
+    const missing = links.filter(({ target }) => !fs12.existsSync(path16.join(embeddedRoot, platform2, target)));
+    if (missing.length > 0) {
+      throw new Error(
+        `Embedded PostgreSQL in @embedded-postgres/${platform2} is missing ${missing.length} shared-library link(s) such as ${missing[0].target}; the package install script did not run. Allow it with 'npm install-scripts approve @embedded-postgres/${platform2}' or reinstall with a npm that honours the paperclip-pro allow-scripts list.`
+      );
+    }
+  }
+}
 function payloadEntrypoint(payloadPath) {
   return path16.join(payloadPath, "node_modules", "@tickernelz", "paperclip-pro", "dist", "index.js");
 }
 async function smokePayload(payloadPath, expectedVersion, runCommand2) {
   const entrypoint = payloadEntrypoint(payloadPath);
   if (!fs12.existsSync(entrypoint)) throw new Error(`Installed package is missing its CLI entrypoint: ${entrypoint}`);
+  assertPayloadNativeAssets(payloadPath);
   const result = await runCommand2(process.execPath, [entrypoint, "--version"], { maxBuffer: 1024 * 1024 });
   const reportedVersion = result.stdout.trim().split(/\s+/)[0];
   if (reportedVersion !== expectedVersion) {
@@ -38760,13 +38877,7 @@ async function installNpmPayload(version, runCommand2, paths = resolveInstallSto
   const npmUserConfigPath = path16.join(sourceRoot, `.npmrc-${process.pid}-${Date.now()}`);
   fs12.rmSync(stagingPath, { recursive: true, force: true });
   try {
-    fs12.writeFileSync(
-      npmUserConfigPath,
-      `registry=${PUBLIC_NPM_REGISTRY}
-@tickernelz:registry=${PUBLIC_NPM_REGISTRY}
-`,
-      { mode: 384 }
-    );
+    writeManagedNpmrc(npmUserConfigPath);
     await runCommand2(
       "npm",
       [
@@ -38857,7 +38968,9 @@ async function installGitPayload(repo, sha, runCommand2, paths = resolveInstallS
     if (!cliTarball || workspaceTarballs.length !== workspacePackages.length) {
       throw new Error(`Git install packaging produced ${workspaceTarballs.length} workspace tarballs; expected ${workspacePackages.length}.`);
     }
-    await runCommand2("npm", ["install", "--prefix", stagedPayload, path16.join(stagingRoot, cliTarball), ...workspaceTarballs.map((entry) => path16.join(stagingRoot, entry)), "--no-audit", "--no-fund"], { cwd: stagingRoot, maxBuffer: 32 * 1024 * 1024 });
+    const payloadNpmrcPath = path16.join(stagingRoot, "payload.npmrc");
+    writeManagedNpmrc(payloadNpmrcPath);
+    await runCommand2("npm", ["install", "--prefix", stagedPayload, path16.join(stagingRoot, cliTarball), ...workspaceTarballs.map((entry) => path16.join(stagingRoot, entry)), "--no-audit", "--no-fund"], { cwd: stagingRoot, env: { ...process.env, npm_config_userconfig: payloadNpmrcPath }, maxBuffer: 32 * 1024 * 1024 });
     await smokePayload(stagedPayload, metadata.version, runCommand2);
     fs12.renameSync(stagedPayload, payloadPath);
     return { payloadPath, reused: false, version: metadata.version };
@@ -38946,6 +39059,8 @@ async function installCommand(options, dependencies = {}) {
   const request = resolveNpmInstallRequest(options);
   console.log(`Resolving @tickernelz/paperclip-pro@${request.spec} from ${PUBLIC_NPM_REGISTRY}...`);
   const version = await resolvePublishedVersion(request.spec, runCommand2);
+  console.log(`Verifying all ${RELEASE_PACKAGE_NAMES.length} packages of release ${version}...`);
+  await assertReleaseSetPublished(version, runCommand2);
   console.log(`Installing @tickernelz/paperclip-pro@${version}...`);
   const paths = resolveInstallStorePaths();
   const installed = await withInstallStoreLock(async () => {
@@ -38978,15 +39093,26 @@ async function installCommand(options, dependencies = {}) {
   console.log(pc5.dim(`Payload: ${installed.payloadPath}`));
   console.log(`Run ${pc5.cyan("paperclip-pro --version")} to verify the managed install.`);
 }
-var execFileAsync, PUBLIC_NPM_REGISTRY, DEFAULT_GITHUB_REPO, EXACT_VERSION_PATTERN, COMMAND_OUTPUT_TAIL_LINES;
+var execFileAsync, PUBLIC_NPM_REGISTRY, INSTALL_SCRIPT_ALLOWLIST, DEFAULT_GITHUB_REPO, EXACT_VERSION_PATTERN, COMMAND_OUTPUT_TAIL_LINES;
 var init_install = __esm({
   "src/commands/install.ts"() {
     "use strict";
     init_node_version();
     init_install_store();
+    init_release_packages();
     execFileAsync = promisify(execFile);
     PUBLIC_NPM_REGISTRY = "https://registry.npmjs.org";
-    DEFAULT_GITHUB_REPO = "paperclipai/paperclip";
+    INSTALL_SCRIPT_ALLOWLIST = [
+      "@embedded-postgres/darwin-arm64",
+      "@embedded-postgres/darwin-x64",
+      "@embedded-postgres/linux-arm",
+      "@embedded-postgres/linux-arm64",
+      "@embedded-postgres/linux-ia32",
+      "@embedded-postgres/linux-ppc64",
+      "@embedded-postgres/linux-x64",
+      "@embedded-postgres/windows-x64"
+    ];
+    DEFAULT_GITHUB_REPO = "tickernelz/paperclip-pro";
     EXACT_VERSION_PATTERN = /^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/;
     COMMAND_OUTPUT_TAIL_LINES = 40;
   }
@@ -41347,9 +41473,7 @@ async function updateCommand(options, overrides = {}) {
       const npmConfigDir = fs22.mkdtempSync(path26.join(os7.tmpdir(), "paperclip-npm-"));
       const npmUserConfigPath = path26.join(npmConfigDir, "npmrc");
       try {
-        fs22.writeFileSync(npmUserConfigPath, `registry=${PUBLIC_NPM_REGISTRY}
-@tickernelz:registry=${PUBLIC_NPM_REGISTRY}
-`, { mode: 384 });
+        writeManagedNpmrc(npmUserConfigPath);
         await runCommand2("npm", args, {
           env: {
             ...process.env,
@@ -41380,6 +41504,7 @@ async function updateCommand(options, overrides = {}) {
     emit(options, { mode, currentVersion, targetVersion, action: comparison < 0 ? "downgrade" : "update", backup: options.backup !== false, dryRun: true }, `Would ${comparison < 0 ? "downgrade" : "update"} paperclip-pro ${currentVersion} \u2192 ${targetVersion}${options.backup === false ? " without a backup" : " after a database backup"}.`);
     return;
   }
+  await assertReleaseSetPublished(targetVersion, runCommand2);
   if (options.backup !== false) await runPreUpdateBackup(options, overrides.backup ?? (() => dbBackupCommand({})), overrides.hasInstanceData);
   const installed = await withInstallStoreLock(async () => {
     assertManagedShimWritable(paths);