@turns/dev 0.0.30 → 0.0.31

package/dist/harness-exit.js

@@ -38,7 +38,7 @@ export function harnessExitError(harness, code, signal, stderr) {
         harnessExit: { harness: String(harness), code: code ?? null, signal: signal ?? null, stderr },
     });
 }
-function harnessLabel(harness) {
+export function harnessLabel(harness) {
     const name = String(harness || 'agent');
     return name.charAt(0).toUpperCase() + name.slice(1);
 }

package/dist/harness-update.js

@@ -0,0 +1,236 @@
+/** Machine-local harness CLI upgrades, callable by the Turns daemon. */
+import { spawn } from 'node:child_process';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import { executablePath } from "./executable-path.js";
+import { harnessLabel } from "./harness-exit.js";
+import { ACP_PROFILES, codexCommandIsAppManaged, HARNESS_IDS, RPC_PROFILES, resolveHarnessCommand, } from "./harness-registry.js";
+const VERSION_TIMEOUT_MS = 15_000;
+const UPDATE_TIMEOUT_MS = 5 * 60_000;
+const OUTPUT_LIMIT = 64 * 1024;
+/**
+ * Native installers whose CLI updates itself without prompting. Each entry was
+ * checked against the CLI's own `--help`; a harness absent here is upgradable
+ * only when a package manager owns its executable. Some updaters ask before
+ * installing (Devin) or rewrite a source checkout (Hermes), so they are left
+ * out rather than run unattended.
+ */
+const SELF_UPDATE_ARGS = {
+    claude: ['update'],
+    codex: ['update'],
+    cursor: ['update'],
+    antigravity: ['update'],
+    omp: ['update'],
+    grok: ['update'],
+    goose: ['update'],
+    fx: ['upgrade'],
+    kimi: ['upgrade'],
+    opencode: ['upgrade'],
+    kilo: ['upgrade'],
+};
+/** Run the resolved executable directly—never through a shell—so update
+ * requests cannot become arbitrary command execution. */
+function runCommand(command, args, timeoutMs) {
+    return new Promise((resolve) => {
+        const child = spawn(command, args, {
+            cwd: os.homedir(),
+            // npm and npm-installed CLIs are `#!/usr/bin/env node` scripts; a
+            // service manager's PATH may not include the daemon's own Node.
+            env: { ...process.env, PATH: executablePath() },
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let output = '';
+        let settled = false;
+        const settle = (result) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(result);
+        };
+        const timer = setTimeout(() => {
+            try {
+                child.kill('SIGKILL');
+            }
+            catch { }
+            settle({ output, exitCode: null, timedOut: true });
+        }, timeoutMs);
+        timer.unref?.();
+        const collect = (chunk) => {
+            if (output.length < OUTPUT_LIMIT)
+                output += String(chunk).slice(0, OUTPUT_LIMIT - output.length);
+        };
+        child.stdout.on('data', collect);
+        child.stderr.on('data', collect);
+        child.on('error', () => settle({ output, exitCode: null, failed: true }));
+        child.on('close', (exitCode) => settle({ output, exitCode }));
+    });
+}
+/** The first dotted version in a CLI's `--version` output, whatever its
+ * prefix (`codex-cli 0.164.0`, `omp/18.0.4`, `GitHub Copilot CLI 1.0.80.`). */
+export function parseHarnessVersion(output) {
+    const text = String(output || '').replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '');
+    const version = text.match(/\d+(?:\.\d+)+(?:-[0-9A-Za-z.]+)?/u)?.[0] || '';
+    return version.replace(/\.$/u, '').slice(0, 120);
+}
+function commandFailure(result, label, fallback) {
+    if (result.timedOut)
+        return new Error(`The ${label} update timed out.`);
+    const lines = result.output
+        .replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '')
+        .split('\n')
+        .map((line) => line.trim())
+        // npm ends every failure by pointing at its debug log.
+        .filter((line) => line && !/A complete log of this run can be found/iu.test(line));
+    return new Error(lines.at(-1) || fallback);
+}
+function realpathOrSelf(file) {
+    try {
+        return fs.realpathSync(file);
+    }
+    catch {
+        return file;
+    }
+}
+function findExecutable(name, preferred) {
+    for (const directory of [...preferred, ...executablePath().split(path.delimiter)]) {
+        const candidate = path.join(directory, name);
+        try {
+            fs.accessSync(candidate, fs.constants.X_OK);
+            return candidate;
+        }
+        catch { }
+    }
+    return '';
+}
+export function harnessUpgradeCommand(harness, command, lookup = {}) {
+    const resolved = (lookup.realpath || realpathOrSelf)(command).replaceAll('\\', '/');
+    const find = lookup.findExecutable || findExecutable;
+    const platform = lookup.platform || process.platform;
+    // `npm i -g <pkg>` links <prefix>/bin/<cli> into <prefix>/lib/node_modules.
+    // Requiring the `lib/` layout keeps pnpm and Bun global stores, which also
+    // contain node_modules, away from an npm that would install a second copy.
+    // Windows npm is a .cmd shim, which cannot be spawned without a shell.
+    const npm = resolved.match(/^(.+?)\/lib\/node_modules\/((?:@[^/]+\/)?[^/@][^/]*)\//u);
+    if (npm && platform !== 'win32') {
+        const [, prefix, name] = npm;
+        const binary = find('npm', [path.join(prefix, 'bin')]);
+        if (binary) {
+            return {
+                manager: 'npm',
+                command: binary,
+                args: ['install', '-g', '--prefix', prefix, `${name}@latest`],
+                check: {
+                    args: ['view', name, 'version'],
+                    failure: `${name} is not published on the npm registry, so this installation must be updated on the machine.`,
+                },
+            };
+        }
+    }
+    const brew = resolved.match(/^(.+?)\/(Cellar|Caskroom)\/([^/]+)\//u);
+    if (brew) {
+        const binary = find('brew', [path.join(brew[1], 'bin')]);
+        if (binary)
+            return {
+                manager: 'brew',
+                command: binary,
+                args: ['upgrade', ...(brew[2] === 'Caskroom' ? ['--cask'] : []), brew[3]],
+            };
+    }
+    const uv = resolved.match(/\/uv\/tools\/([^/]+)\//u);
+    if (uv) {
+        const binary = find('uv', []);
+        if (binary)
+            return { manager: 'uv', command: binary, args: ['tool', 'upgrade', uv[1]] };
+    }
+    const pipx = resolved.match(/\/pipx\/venvs\/([^/]+)\//u);
+    if (pipx) {
+        const binary = find('pipx', []);
+        if (binary)
+            return { manager: 'pipx', command: binary, args: ['upgrade', pipx[1]] };
+    }
+    const self = SELF_UPDATE_ARGS[harness];
+    return self ? { manager: 'self', command, args: self } : null;
+}
+/** The executable the agent anchor launches for a harness. */
+function harnessExecutable(harness) {
+    return resolveHarnessCommand(harness, ACP_PROFILES[harness] || RPC_PROFILES[harness] || {});
+}
+export function createHarnessUpdateManager(dependencies = {}) {
+    const harnesses = dependencies.harnesses || HARNESS_IDS;
+    const resolveCommand = dependencies.resolveCommand || harnessExecutable;
+    const isAppManaged = dependencies.isAppManaged ||
+        ((harness, command) => harness === 'codex' && codexCommandIsAppManaged(command));
+    const upgradeCommand = dependencies.upgradeCommand || ((harness, command) => harnessUpgradeCommand(harness, command));
+    const run = dependencies.run || runCommand;
+    const active = new Map();
+    const plan = (harness) => {
+        const label = harnessLabel(harness);
+        if (!harnesses.includes(harness))
+            throw new Error(`Turns cannot update ${label}.`);
+        const command = resolveCommand(harness);
+        if (isAppManaged(harness, command)) {
+            throw new Error(`${label} is managed by the macOS app. Update the ${label} app to update its bundled CLI.`);
+        }
+        const upgrade = upgradeCommand(harness, command);
+        if (!upgrade)
+            throw new Error(`Turns does not know how to update this ${label} installation. Update it on the machine.`);
+        return { label, command, upgrade };
+    };
+    const readVersion = async (command, label, fallback) => {
+        const result = await run(command, ['--version'], VERSION_TIMEOUT_MS);
+        if (result.failed || result.timedOut || result.exitCode !== 0)
+            throw commandFailure(result, label, fallback);
+        return parseHarnessVersion(result.output);
+    };
+    const perform = async (harness) => {
+        const { label, command, upgrade } = plan(harness);
+        const previousVersion = await readVersion(command, label, `${label} is not installed or its version could not be read.`);
+        if (upgrade.check) {
+            const checked = await run(upgrade.command, upgrade.check.args, VERSION_TIMEOUT_MS);
+            if (checked.timedOut)
+                throw new Error(`The ${label} update timed out.`);
+            if (checked.failed || checked.exitCode !== 0)
+                throw new Error(upgrade.check.failure);
+        }
+        const updateRun = await run(upgrade.command, upgrade.args, UPDATE_TIMEOUT_MS);
+        if (updateRun.failed || updateRun.timedOut || updateRun.exitCode !== 0) {
+            const manual = [path.basename(upgrade.command), ...upgrade.args].join(' ');
+            throw commandFailure(updateRun, label, upgrade.manager === 'self'
+                ? `${label} could not update itself. Run \`${manual}\` in a terminal on the machine.`
+                : `${upgrade.manager} could not upgrade ${label}. Run \`${manual}\` in a terminal on the machine.`);
+        }
+        // Resolve again because the updater may replace a shim or install path.
+        const currentVersion = await readVersion(resolveCommand(harness), label, `${label} updated, but its new version could not be read.`);
+        return {
+            ...(previousVersion ? { previousVersion } : {}),
+            ...(currentVersion ? { currentVersion } : {}),
+            updated: Boolean(previousVersion && currentVersion && previousVersion !== currentVersion),
+        };
+    };
+    return {
+        /** Harnesses installed here in a way this daemon can upgrade. */
+        available() {
+            return harnesses.filter((harness) => {
+                try {
+                    plan(harness);
+                    return true;
+                }
+                catch {
+                    return false;
+                }
+            });
+        },
+        /** Concurrent clicks for one harness share one installer process instead
+         * of racing writes to the same installation. */
+        update(harness) {
+            let pending = active.get(harness);
+            if (!pending) {
+                pending = perform(harness).finally(() => active.delete(harness));
+                active.set(harness, pending);
+            }
+            return pending;
+        },
+    };
+}

package/dist/path-resolution.js

@@ -87,7 +87,11 @@ export function pathCandidates(row) {
             continue;
         if (found.includes(candidate))
             continue;
-        found.push(candidate);
+        // A regex match is a slice of the row it came from, and a slice keeps the
+        // whole row alive for as long as it is remembered. The resolver remembers
+        // candidates per session for the life of the daemon, so each one has to
+        // be its own small string rather than a window onto kilobytes of transcript.
+        found.push(Buffer.from(candidate).toString());
         if (found.length >= MAX_PATH_CANDIDATES_PER_ROW)
             break;
     }

package/dist/queue-worker.js

@@ -7,7 +7,7 @@ import { pipeline } from 'node:stream/promises';
 import { logError } from "./logging.js";
 import { QueueDispatchLifecycle, QUEUE_RESTART_MESSAGE } from "./queue-lifecycle.js";
 import { anchorId, connectExistingAgentAnchors, launchAgentAnchor, waitForAgentTurn } from "./agent-anchor-client.js";
-import { createCodexUpdateManager } from "./codex-update.js";
+import { createHarnessUpdateManager } from "./harness-update.js";
 import { isAsyncQuestionId } from "./codex-async-question-recovery.js";
 import { assertAllowedWorkingDirectory, workingDirectoryIsAllowed } from "./directory-policy.js";
 import { browseMachinePath, streamMachineFileRange } from "./file-browsing.js";
@@ -341,6 +341,14 @@ export function runtimeEvent(anchorName, messageId, event, redactor = DEFAULT_RE
     }
     return null;
 }
+/** Registration capabilities for harness upgrades. `codexUpdate` remains for
+ * backends that only know how to route Codex upgrades. */
+export function updateCapabilities(harnesses) {
+    return {
+        ...(harnesses.length ? { harnessUpdates: harnesses } : {}),
+        ...(harnesses.includes('codex') ? { codexUpdate: true } : {}),
+    };
+}
 export function resultError(result) {
     if (!result)
         return new Error('The anchored agent returned no result.');
@@ -1339,18 +1347,22 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
             });
         }
     };
-    /** Upgrade the machine's Codex installation. Only this fixed, resolved
-     * command is exposed; the browser cannot supply a binary, arguments, or
-     * shell input. Errors are redacted before crossing the machine boundary. */
-    const codexUpdate = createCodexUpdateManager();
-    const handleCodexUpdate = async (message, replyRpc) => {
+    /** Upgrade one of the machine's harness CLIs. Only a fixed command chosen
+     * from the resolved executable's install location is run; the browser names
+     * a harness but cannot supply a binary, arguments, or shell input. Errors
+     * are redacted before crossing the machine boundary. The message keeps its
+     * Codex-era name; a request without a harness is from a Codex-only backend. */
+    const harnessUpdate = createHarnessUpdateManager();
+    const handleHarnessUpdate = async (message, replyRpc) => {
         const sessionId = String(message.sessionId || '');
+        const harness = String(message.harness || 'codex');
         try {
-            const answer = await codexUpdate.update();
+            const answer = await harnessUpdate.update(harness);
             replyRpc.notify({
                 type: 'session.codex.update.result',
                 requestId: message.requestId,
                 sessionId,
+                harness,
                 ok: true,
                 answer,
             });
@@ -1360,6 +1372,7 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                 type: 'session.codex.update.result',
                 requestId: message.requestId,
                 sessionId,
+                harness,
                 ok: false,
                 error: redactor.redactText(error?.message || String(error)),
             });
@@ -1424,33 +1437,44 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
         }
     }, HARNESS_HEARTBEAT_MS);
     heartbeat.unref?.();
+    // A browser request is answered over the same socket it arrived on. When
+    // that socket drops mid-request, the handler's reply throws, and so does the
+    // error reply in its catch block. Nothing awaits these handlers, so that
+    // second throw used to surface as an unhandled rejection and take the whole
+    // daemon down with every running session's watcher. The browser has already
+    // been told its connection closed; there is nobody left to answer.
+    const answer = (handler, message) => {
+        void Promise.resolve()
+            .then(() => handler(message, rpc))
+            .catch((error) => logError(`Could not answer ${message.type}: ${error?.message || error}\n`));
+    };
     rpc.onEvent((message) => {
         if (lifecycle.stopping)
             return;
         if (message.type === 'queue.ready')
             void tryClaim(message.sessionId);
         if (message.type === 'session.steer')
-            void handleSteer(message, rpc);
+            answer(handleSteer, message);
         if (message.type === 'session.interrupt.request')
-            void handleInterrupt(message, rpc);
+            answer(handleInterrupt, message);
         if (message.type === 'session.anchor.action.request')
-            void handleAnchorAction(message, rpc);
+            answer(handleAnchorAction, message);
         if (message.type === 'session.interaction.answer.request')
-            void handleInteractionAnswer(message, rpc);
+            answer(handleInteractionAnswer, message);
         if (message.type === 'session.file.browse.request')
-            void handleFileBrowse(message, rpc);
+            answer(handleFileBrowse, message);
         if (message.type === 'session.file.range.request')
-            void handleFileRange(message, rpc);
+            answer(handleFileRange, message);
         if (message.type === 'session.file.search.request')
-            void handleFileSearch(message, rpc);
+            answer(handleFileSearch, message);
         if (message.type === 'session.git.read.request')
-            void handleGitRead(message, rpc);
+            answer(handleGitRead, message);
         if (message.type === 'session.harness.auth.request')
-            void handleHarnessAuth(message, rpc);
+            answer(handleHarnessAuth, message);
         if (message.type === 'session.codex.update.request')
-            void handleCodexUpdate(message, rpc);
+            answer(handleHarnessUpdate, message);
         if (message.type === 'session.file.edit.request')
-            void handleFileEdit(message, rpc);
+            answer(handleFileEdit, message);
     });
     const registered = new WeakSet();
     const registering = new WeakSet();
@@ -1469,7 +1493,7 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
                     git: true,
                     fileRanges: true,
                     harnessAuth: true,
-                    ...(codexUpdate.available() ? { codexUpdate: true } : {}),
+                    ...updateCapabilities(harnessUpdate.available()),
                 },
                 workerId,
                 workerInstanceId,
@@ -1490,7 +1514,15 @@ export async function watchQueuedPrompts({ rpc, options, machine, getDescriptors
     rpc.onConnect((control) => {
         void registerControl(control);
     });
-    await registerControl(await rpc.current());
+    // Starting offline must not end this function: the loop below is the only
+    // thing that sends heartbeats, probes for a half-open socket and re-polls
+    // for missed queue events, and it already tolerates a failed connection.
+    try {
+        await registerControl(await rpc.current());
+    }
+    catch (error) {
+        logError(`Queue worker could not connect yet: ${error?.message || error}\n`);
+    }
     while (!lifecycle.stopping) {
         await backgroundWait(MACHINE_HEARTBEAT_MS);
         if (lifecycle.stopping)

package/dist/upload-sessions.js

@@ -404,6 +404,37 @@ export function linkNativeSessionParents(machine, descriptors) {
         ];
     });
 }
+/**
+ * The row the server has reached, when a rejected ingest batch was in fact
+ * already stored in full; null when the rejection is a real one.
+ */
+export function ingestOffsetAcknowledges(error, startRow, rowCount) {
+    const offset = /^ROW_OFFSET:(\d+)$/u.exec(String(error?.code || ''));
+    if (!offset)
+        return null;
+    const reached = Number(offset[1]);
+    return reached >= startRow + rowCount ? reached : null;
+}
+/**
+ * Bring a descriptor up to the file as it is now.
+ *
+ * The inventory scan stats each transcript in a worker and the result is
+ * recorded here some time later. An agent that wrote in between leaves the
+ * descriptor describing a shorter file than the one on disk. Recording the
+ * fresh stat as "already seen" while uploading only to the descriptor's stale
+ * size strands those rows: nothing looks changed until the next append or the
+ * five-minute audit. A database projection's file is its whole store, not the
+ * session, so its size says nothing about the session and is left alone.
+ */
+export function adoptGrowthSinceInventory(descriptor, stat) {
+    if (String(descriptor.sourcePath || '').includes('.db#'))
+        return false;
+    if (Number(stat.size) === Number(descriptor.size))
+        return false;
+    descriptor.size = stat.size;
+    descriptor.mtimeMs = stat.mtimeMs;
+    return true;
+}
 export function nativeDescriptorFingerprint(descriptor) {
     return JSON.stringify([
         Number(descriptor.size) || 0,
@@ -638,6 +669,10 @@ export class RpcSocket {
             this.socket.on('message', (data) => this.onMessage(String(data), (ready) => settle(resolve, ready), (error) => settle(reject, error)));
             this.socket.on('close', (code, reason) => {
                 const error = socketError(`WebSocket closed (${code}): ${String(reason)}`);
+                // A server that accepts the upgrade and closes before saying "ready"
+                // (a deploy, a restarting object) has answered. Without this the
+                // connect waited out the whole ready deadline before it could retry.
+                settle(reject, error);
                 for (const request of this.pending.values()) {
                     clearTimeout(request.timer);
                     request.reject(error);
@@ -1087,13 +1122,27 @@ export async function uploadNativeSession(rpc, machine, descriptor, cursor = {},
         if (!held.length)
             return;
         const rows = held.map((entry) => entry.event);
-        const acknowledgement = await rpc.request({
-            type: 'ingest',
-            sessionId: uploadSessionId,
-            startRow: rows[0].index,
-            rows,
-            ...(initialUpload ? { deferReduction: true } : {}),
-        });
+        let acknowledgement;
+        try {
+            acknowledgement = await rpc.request({
+                type: 'ingest',
+                sessionId: uploadSessionId,
+                startRow: rows[0].index,
+                rows,
+                ...(initialUpload ? { deferReduction: true } : {}),
+            });
+        }
+        catch (error) {
+            // The connection resends a request whose socket died. When only the
+            // acknowledgement was lost, the server already holds these rows and
+            // answers the resend with the offset it has reached. That is an
+            // acknowledgement: treating it as a failure put the session into backoff
+            // and then re-read its whole transcript from the first byte.
+            const acknowledged = ingestOffsetAcknowledges(error, rows[0].index, rows.length);
+            if (acknowledged === null)
+                throw error;
+            acknowledgement = { nextRow: acknowledged };
+        }
         nextRow = Number(acknowledgement.nextRow);
         sent += rows.length;
         batchesSent += 1;
@@ -1624,6 +1673,7 @@ async function uploadNative(options, machine, redactor = DEFAULT_REDACTOR) {
             try {
                 const stat = fs.statSync(descriptor.file);
                 physicalStats.set(sessionId, { size: stat.size, mtimeMs: stat.mtimeMs });
+                adoptGrowthSinceInventory(descriptor, stat);
             }
             catch { }
             const saved = state.get(sessionId);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@turns/dev",
-  "version": "0.0.30",
+  "version": "0.0.31",
   "description": "Upload local AI agent sessions to turns.dev",
   "license": "MIT",
   "type": "module",

package/dist/codex-update.js

@@ -1,162 +0,0 @@
-/** Machine-local Codex CLI self-update, callable by the Turns daemon. */
-import { spawn } from 'node:child_process';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { executablePath } from "./executable-path.js";
-import { codexCommandIsAppManaged, resolveHarnessCommand } from "./harness-registry.js";
-const VERSION_TIMEOUT_MS = 15_000;
-const UPDATE_TIMEOUT_MS = 5 * 60_000;
-const OUTPUT_LIMIT = 64 * 1024;
-/** Run the resolved executable directly—never through a shell—so update
- * requests cannot become arbitrary command execution. */
-function runCommand(command, args, timeoutMs) {
-    return new Promise((resolve) => {
-        const child = spawn(command, args, {
-            cwd: os.homedir(),
-            // npm and Codex's npm launcher are `#!/usr/bin/env node` scripts; a
-            // service manager's PATH may not include the daemon's own Node.
-            env: { ...process.env, PATH: executablePath() },
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        let output = '';
-        let settled = false;
-        const settle = (result) => {
-            if (settled)
-                return;
-            settled = true;
-            clearTimeout(timer);
-            resolve(result);
-        };
-        const timer = setTimeout(() => {
-            try {
-                child.kill('SIGKILL');
-            }
-            catch { }
-            settle({ output, exitCode: null, timedOut: true });
-        }, timeoutMs);
-        timer.unref?.();
-        const collect = (chunk) => {
-            if (output.length < OUTPUT_LIMIT)
-                output += String(chunk).slice(0, OUTPUT_LIMIT - output.length);
-        };
-        child.stdout.on('data', collect);
-        child.stderr.on('data', collect);
-        child.on('error', () => settle({ output, exitCode: null, failed: true }));
-        child.on('close', (exitCode) => settle({ output, exitCode }));
-    });
-}
-export function parseCodexVersion(output) {
-    const text = String(output || '').trim();
-    const prefixed = text.match(/codex(?:-cli)?\s+([^\s]+)/iu);
-    return (prefixed?.[1] || text.split(/\s+/u).at(-1) || '').slice(0, 120);
-}
-function commandFailure(result, fallback) {
-    if (result.timedOut)
-        return new Error('The Codex update timed out.');
-    const lines = result.output
-        .replace(/\u001b\[[0-9;?]*[A-Za-z]/gu, '')
-        .split('\n')
-        .map((line) => line.trim())
-        .filter(Boolean);
-    return new Error(lines.at(-1) || fallback);
-}
-function realpathOrSelf(file) {
-    try {
-        return fs.realpathSync(file);
-    }
-    catch {
-        return file;
-    }
-}
-function findExecutable(name, preferred) {
-    for (const directory of [...preferred, ...executablePath().split(path.delimiter)]) {
-        const candidate = path.join(directory, name);
-        try {
-            fs.accessSync(candidate, fs.constants.X_OK);
-            return candidate;
-        }
-        catch { }
-    }
-    return '';
-}
-export function codexUpgradeCommand(command, lookup = {}) {
-    const resolved = (lookup.realpath || realpathOrSelf)(command).replaceAll('\\', '/');
-    const find = lookup.findExecutable || findExecutable;
-    // `npm i -g @openai/codex` links <prefix>/bin/codex to the package's launcher.
-    const npm = resolved.match(/^(.*?)\/(?:lib\/)?node_modules\/@openai\/codex\//u);
-    // Windows npm is a .cmd shim, which cannot be spawned without a shell.
-    if (npm && process.platform !== 'win32') {
-        const prefix = npm[1];
-        const binary = find('npm', [path.join(prefix, 'bin')]);
-        if (binary)
-            return { manager: 'npm', command: binary, args: ['install', '-g', '--prefix', prefix, '@openai/codex@latest'] };
-    }
-    const brew = resolved.match(/^(.*?)\/(Cellar|Caskroom)\/codex\//u);
-    if (brew) {
-        const binary = find('brew', [path.join(brew[1], 'bin')]);
-        if (binary)
-            return {
-                manager: 'brew',
-                command: binary,
-                args: ['upgrade', ...(brew[2] === 'Caskroom' ? ['--cask'] : []), 'codex'],
-            };
-    }
-    return { manager: 'codex', command, args: ['update'] };
-}
-export function createCodexUpdateManager(dependencies = {}) {
-    const resolveCommand = dependencies.resolveCommand || (() => resolveHarnessCommand('codex'));
-    const isAppManaged = dependencies.isAppManaged || codexCommandIsAppManaged;
-    const run = dependencies.run || runCommand;
-    const upgradeCommand = dependencies.upgradeCommand || ((command) => codexUpgradeCommand(command));
-    let active = null;
-    const updateCommand = () => {
-        const command = resolveCommand();
-        if (isAppManaged(command)) {
-            throw new Error('Codex is managed by the macOS app. Update the Codex app to update its bundled CLI.');
-        }
-        return command;
-    };
-    const perform = async () => {
-        const beforeRun = await run(updateCommand(), ['--version'], VERSION_TIMEOUT_MS);
-        if (beforeRun.failed || beforeRun.timedOut || beforeRun.exitCode !== 0) {
-            throw commandFailure(beforeRun, 'Codex is not installed or its version could not be read.');
-        }
-        const previousVersion = parseCodexVersion(beforeRun.output);
-        const upgrade = upgradeCommand(updateCommand());
-        const updateRun = await run(upgrade.command, upgrade.args, UPDATE_TIMEOUT_MS);
-        if (updateRun.failed || updateRun.timedOut || updateRun.exitCode !== 0) {
-            throw commandFailure(updateRun, upgrade.manager === 'codex'
-                ? 'Codex could not update itself. Run `codex update` in a terminal on the machine.'
-                : `${upgrade.manager} could not upgrade Codex. Run \`${[path.basename(upgrade.command), ...upgrade.args].join(' ')}\` in a terminal on the machine.`);
-        }
-        // Resolve again because the updater may replace a shim or install path.
-        const afterRun = await run(updateCommand(), ['--version'], VERSION_TIMEOUT_MS);
-        if (afterRun.failed || afterRun.timedOut || afterRun.exitCode !== 0) {
-            throw commandFailure(afterRun, 'Codex updated, but its new version could not be read.');
-        }
-        const currentVersion = parseCodexVersion(afterRun.output);
-        return {
-            ...(previousVersion ? { previousVersion } : {}),
-            ...(currentVersion ? { currentVersion } : {}),
-            updated: Boolean(previousVersion && currentVersion && previousVersion !== currentVersion),
-        };
-    };
-    return {
-        /** App-bundled Codex is updated with the app, not by its CLI command. */
-        available() {
-            try {
-                return !isAppManaged(resolveCommand());
-            }
-            catch {
-                return false;
-            }
-        },
-        /** Concurrent clicks share one installer process instead of racing writes. */
-        update() {
-            if (!active)
-                active = perform().finally(() => (active = null));
-            return active;
-        },
-    };
-}