@vibesdotdev/plugins 0.0.0-stage → 1.0.0-rc.1

package/dist/cli/self-update.d.ts

@@ -0,0 +1,120 @@
+/**
+ * `vibes update --self` — replace the executable, verified, in place.
+ *
+ * ### Ordering is a correctness property, not a preference (plan §5.1)
+ *
+ * SELF FIRST, then the graph, then ONE roll. The draft rolled bodies after the
+ * lock digest changed and replaced the binary afterwards, which re-stales
+ * every body it had just rolled: the executable freshness nerve fires on the
+ * new inode, so a body restarted before the swap is stale the moment the swap
+ * lands. Two rolls, one of them wasted, and a `pm status` Build column that
+ * reads `STALE` right after a successful update. `runSelfUpdate` therefore
+ * returns before any graph work and the caller performs exactly one census
+ * roll at the end.
+ *
+ * ### Install target
+ *
+ * `~/.local/bin/vibes` on POSIX; `%LOCALAPPDATA%\vibes\bin\vibes.exe` on
+ * Windows. These are `cli-bin/scripts/build.ts` `getLocalInstallTarget()` and
+ * `install.ps1`'s destination — the same two paths the installer writes, so
+ * `--self` replaces the file the user actually runs rather than inventing a
+ * third location.
+ *
+ * ### Verification
+ *
+ * `downloads/cli/latest.json` names the artifact, its version and its sha256.
+ * Every outcome reports that digest — including `already current` and
+ * `--dry-run` — so an operator can compare it against `SHA256SUMS.txt`
+ * before authorising a real replacement.
+ * The download goes to a temp file NEXT TO the target (same filesystem, so the
+ * final step is a real atomic `rename`), is hashed, and is compared before
+ * anything is moved. A digest mismatch leaves the running binary untouched and
+ * deletes the temp file. Replacing a running executable by `rename` is the one
+ * safe form: the old inode stays alive for the current process, and every
+ * subsequent exec gets the new file.
+ */
+import { type RuntimeRef } from '@vibesdotdev/kernel';
+import { z } from 'zod/v4';
+export interface SelfInstallTarget {
+    dir: string;
+    path: string;
+    /** How the path is written in docs and installer output. */
+    label: string;
+}
+/** Mirrors `cli-bin/scripts/build.ts` `getLocalInstallTarget()` exactly. */
+export declare function selfInstallTarget(platform: string, env: {
+    LOCALAPPDATA?: string | undefined;
+}, home: string): SelfInstallTarget;
+/** One verifiable asset; every field is parsed on its own, so one bad entry never hides the good ones. */
+declare const LatestManifestAssetSchema: z.ZodObject<{
+    platform: z.ZodString;
+    arch: z.ZodString;
+    url: z.ZodString;
+    sha256: z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>;
+    size: z.ZodCatch<z.ZodOptional<z.ZodNumber>>;
+}, z.core.$strip>;
+export type LatestManifestAsset = z.infer<typeof LatestManifestAssetSchema>;
+export interface LatestManifest {
+    version: string;
+    assets: LatestManifestAsset[];
+}
+/**
+ * Parse `latest.json` defensively — a release artifact is untrusted input.
+ * Refusals: `self-update-manifest-invalid` (not JSON, or no version) and
+ * `self-update-manifest-no-assets` (no entry carries a real sha256).
+ */
+export declare function parseLatestManifest(text: string): LatestManifest;
+/** The reason `selectAsset` refuses with when the release does not build this platform. */
+export declare const SELF_UPDATE_NO_ASSET = "self-update-no-asset";
+export declare function selectAsset(manifest: LatestManifest, platform: string, arch: string): LatestManifestAsset;
+/** One parsed release version: `MAJOR.MINOR.PATCH`, prerelease identifiers, build metadata ignored. */
+interface ReleaseVersion {
+    readonly core: readonly [number, number, number];
+    readonly prerelease: readonly string[];
+}
+/** A release version, or `null` when the text is not one (a source build reports `unknown` or `dev`). */
+export declare function parseReleaseVersion(text: string): ReleaseVersion | null;
+/** SemVer precedence: negative when `left` is older, zero when equal, positive when newer. A release outranks its candidates. */
+export declare function compareReleaseVersions(left: ReleaseVersion, right: ReleaseVersion): number;
+/** What fetches a release file: ambient `fetch` by default, always handed the lifecycle's signal. */
+export type SelfUpdateFetch = (url: string, init: {
+    signal: AbortSignal;
+}) => Promise<Response>;
+/** The default deadline on each release request (manifest, then binary). */
+export declare const SELF_UPDATE_FETCH_TIMEOUT_MS = 120000;
+export interface SelfUpdateOptions {
+    /** The runtime whose filesystem writes the binary and whose lifecycle owns (and bounds) every request. */
+    runtime: RuntimeRef;
+    /** URL of the release manifest. */
+    manifestUrl: string;
+    currentVersion: string;
+    target: SelfInstallTarget;
+    /** Host platform/arch, from the runtime's captured host facts. */
+    platform: string;
+    arch: string;
+    dryRun?: boolean;
+    fetchImpl?: SelfUpdateFetch;
+    /** Deadline on each request; defaults to {@link SELF_UPDATE_FETCH_TIMEOUT_MS}. */
+    timeoutMs?: number;
+    /** Install a published release older than the running one (refused by default). */
+    allowDowngrade?: boolean;
+}
+export interface SelfUpdateResult {
+    /** `true` when the binary on disk was replaced by this call. */
+    replaced: boolean;
+    fromVersion: string;
+    toVersion: string;
+    target: SelfInstallTarget;
+    sha256?: string;
+    /** Why nothing was replaced, when `replaced` is false. */
+    note?: string;
+}
+/** The asset to compare against when nothing is replaced: only "this release does not build here" is absence. */
+export declare function publishedAsset(manifest: LatestManifest, platform: string, arch: string): LatestManifestAsset | undefined;
+/**
+ * Download, verify and atomically install the current release. Returns without
+ * touching the disk when the running version already matches.
+ */
+export declare function runSelfUpdate(options: SelfUpdateOptions): Promise<SelfUpdateResult>;
+export {};
+//# sourceMappingURL=self-update.d.ts.map

package/dist/cli/self-update.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update.d.ts","sourceRoot":"","sources":["../../src/cli/self-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,OAAO,EAAkD,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEtG,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAE3B,MAAM,WAAW,iBAAiB;IACjC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,4DAA4D;IAC5D,KAAK,EAAE,MAAM,CAAC;CACd;AAUD,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAChC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,EAC1C,IAAI,EAAE,MAAM,GACV,iBAAiB,CAQnB;AAED,0GAA0G;AAC1G,QAAA,MAAM,yBAAyB;;;;;;iBAM7B,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,mBAAmB,EAAE,CAAC;CAC9B;AAaD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,CAYhE;AAED,2FAA2F;AAC3F,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,wBAAgB,WAAW,CAC1B,QAAQ,EAAE,cAAc,EACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACV,mBAAmB,CAarB;AAED,uGAAuG;AACvG,UAAU,cAAc;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAID,yGAAyG;AACzG,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAOvE;AAWD,iIAAiI;AACjI,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,cAAc,GAAG,MAAM,CAc1F;AAyBD,qGAAqG;AACrG,MAAM,MAAM,eAAe,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE;IAAE,MAAM,EAAE,WAAW,CAAA;CAAE,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEhG,4EAA4E;AAC5E,eAAO,MAAM,4BAA4B,SAAU,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IACjC,0GAA0G;IAC1G,OAAO,EAAE,UAAU,CAAC;IACpB,mCAAmC;IACnC,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,kEAAkE;IAClE,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,SAAS,CAAC,EAAE,eAAe,CAAC;IAC5B,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,mFAAmF;IACnF,cAAc,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,gBAAgB;IAChC,gEAAgE;IAChE,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0DAA0D;IAC1D,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAyCD,iHAAiH;AACjH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAKxH;AAED;;;GAGG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8DzF"}

package/dist/cli/self-update.js

@@ -0,0 +1,274 @@
+/**
+ * `vibes update --self` — replace the executable, verified, in place.
+ *
+ * ### Ordering is a correctness property, not a preference (plan §5.1)
+ *
+ * SELF FIRST, then the graph, then ONE roll. The draft rolled bodies after the
+ * lock digest changed and replaced the binary afterwards, which re-stales
+ * every body it had just rolled: the executable freshness nerve fires on the
+ * new inode, so a body restarted before the swap is stale the moment the swap
+ * lands. Two rolls, one of them wasted, and a `pm status` Build column that
+ * reads `STALE` right after a successful update. `runSelfUpdate` therefore
+ * returns before any graph work and the caller performs exactly one census
+ * roll at the end.
+ *
+ * ### Install target
+ *
+ * `~/.local/bin/vibes` on POSIX; `%LOCALAPPDATA%\vibes\bin\vibes.exe` on
+ * Windows. These are `cli-bin/scripts/build.ts` `getLocalInstallTarget()` and
+ * `install.ps1`'s destination — the same two paths the installer writes, so
+ * `--self` replaces the file the user actually runs rather than inventing a
+ * third location.
+ *
+ * ### Verification
+ *
+ * `downloads/cli/latest.json` names the artifact, its version and its sha256.
+ * Every outcome reports that digest — including `already current` and
+ * `--dry-run` — so an operator can compare it against `SHA256SUMS.txt`
+ * before authorising a real replacement.
+ * The download goes to a temp file NEXT TO the target (same filesystem, so the
+ * final step is a real atomic `rename`), is hashed, and is compared before
+ * anything is moved. A digest mismatch leaves the running binary untouched and
+ * deletes the temp file. Replacing a running executable by `rename` is the one
+ * safe form: the old inode stays alive for the current process, and every
+ * subsequent exec gets the new file.
+ */
+import { chmodChecked } from '@vibesdotdev/filesystem/core';
+import { resolveFileSystemAdapter } from '@vibesdotdev/filesystem/client/resolve-adapter';
+import { CapabilityError, settleNow } from '@vibesdotdev/kernel';
+import { redactCredentials, urlRedactions } from '@vibesdotdev/shared/utils';
+import { z } from 'zod/v4';
+/** Join path segments with one separator; the target's platform is declared, never the running host's. */
+function joinFor(separator, ...segments) {
+    return segments
+        .map((segment, index) => (index === 0 ? segment.replace(/[\\/]+$/, '') : segment.replace(/^[\\/]+|[\\/]+$/g, '')))
+        .filter((segment, index) => index === 0 || segment.length > 0)
+        .join(separator);
+}
+/** Mirrors `cli-bin/scripts/build.ts` `getLocalInstallTarget()` exactly. */
+export function selfInstallTarget(platform, env, home) {
+    if (platform === 'win32') {
+        const base = env.LOCALAPPDATA || joinFor('\\', home, 'AppData', 'Local');
+        const dir = joinFor('\\', base, 'vibes', 'bin');
+        return { dir, path: joinFor('\\', dir, 'vibes.exe'), label: '%LOCALAPPDATA%\\vibes\\bin\\vibes.exe' };
+    }
+    const dir = joinFor('/', home, '.local', 'bin');
+    return { dir, path: joinFor('/', dir, 'vibes'), label: '~/.local/bin/vibes' };
+}
+/** One verifiable asset; every field is parsed on its own, so one bad entry never hides the good ones. */
+const LatestManifestAssetSchema = z.object({
+    platform: z.string(),
+    arch: z.string(),
+    url: z.string(),
+    sha256: z.string().regex(/^[0-9a-f]{64}$/i).transform((digest) => digest.toLowerCase()),
+    size: z.number().optional().catch(undefined)
+});
+const LatestManifestEnvelopeSchema = z.object({
+    version: z.string().trim().min(1),
+    assets: z.array(z.unknown()).catch([])
+});
+/** The manifest's typed refusal: `reason` names what was wrong, never the release's text. */
+function manifestRefusal(message, reason, cause) {
+    if (cause === null)
+        return new CapabilityError(message, 'INVALID_INPUT', { reason, retryable: false });
+    return new CapabilityError(message, 'INVALID_INPUT', { reason, retryable: false, cause });
+}
+/**
+ * Parse `latest.json` defensively — a release artifact is untrusted input.
+ * Refusals: `self-update-manifest-invalid` (not JSON, or no version) and
+ * `self-update-manifest-no-assets` (no entry carries a real sha256).
+ */
+export function parseLatestManifest(text) {
+    const json = settleNow(() => JSON.parse(text));
+    if (!json.ok)
+        throw manifestRefusal('latest.json is not JSON', 'self-update-manifest-invalid', json.cause);
+    const envelope = LatestManifestEnvelopeSchema.safeParse(json.value);
+    if (!envelope.success)
+        throw manifestRefusal('latest.json has no version', 'self-update-manifest-invalid', envelope.error);
+    const parsed = [];
+    for (const entry of envelope.data.assets) {
+        const asset = LatestManifestAssetSchema.safeParse(entry);
+        if (asset.success)
+            parsed.push(asset.data);
+    }
+    if (parsed.length === 0)
+        throw manifestRefusal('latest.json lists no verifiable assets', 'self-update-manifest-no-assets', null);
+    return { version: envelope.data.version, assets: parsed };
+}
+/** The reason `selectAsset` refuses with when the release does not build this platform. */
+export const SELF_UPDATE_NO_ASSET = 'self-update-no-asset';
+export function selectAsset(manifest, platform, arch) {
+    const asset = manifest.assets.find((candidate) => candidate.platform === platform && candidate.arch === arch);
+    if (!asset) {
+        throw new CapabilityError(`latest.json ${manifest.version} has no asset for ${platform}/${arch} ` +
+            `(has ${manifest.assets.map((a) => `${a.platform}/${a.arch}`).join(', ')})`, 'NOT_FOUND', { reason: SELF_UPDATE_NO_ASSET, retryable: false, details: { platform, arch } });
+    }
+    return asset;
+}
+const RELEASE_VERSION = /^v?(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-([0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*))?(?:\+[0-9A-Za-z.-]+)?$/;
+/** A release version, or `null` when the text is not one (a source build reports `unknown` or `dev`). */
+export function parseReleaseVersion(text) {
+    const match = RELEASE_VERSION.exec(text.trim());
+    if (!match)
+        return null;
+    return {
+        core: [Number(match[1]), Number(match[2]), Number(match[3])],
+        prerelease: match[4] === undefined ? [] : match[4].split('.')
+    };
+}
+/** One prerelease identifier against another (SemVer §11.4): numeric below alphanumeric, numbers by value. */
+function compareIdentifier(left, right) {
+    const leftNumeric = /^\d+$/.test(left);
+    const rightNumeric = /^\d+$/.test(right);
+    if (leftNumeric && rightNumeric)
+        return Math.sign(Number(left) - Number(right));
+    if (leftNumeric !== rightNumeric)
+        return leftNumeric ? -1 : 1;
+    return left < right ? -1 : left > right ? 1 : 0;
+}
+/** SemVer precedence: negative when `left` is older, zero when equal, positive when newer. A release outranks its candidates. */
+export function compareReleaseVersions(left, right) {
+    for (let index = 0; index < 3; index++) {
+        const delta = Math.sign(left.core[index] - right.core[index]);
+        if (delta !== 0)
+            return delta;
+    }
+    if (left.prerelease.length === 0 || right.prerelease.length === 0) {
+        return Math.sign(right.prerelease.length - left.prerelease.length);
+    }
+    const shared = Math.min(left.prerelease.length, right.prerelease.length);
+    for (let index = 0; index < shared; index++) {
+        const delta = compareIdentifier(left.prerelease[index], right.prerelease[index]);
+        if (delta !== 0)
+            return delta;
+    }
+    return Math.sign(left.prerelease.length - right.prerelease.length);
+}
+/**
+ * Refuse a published version older than the running one (`self-update-downgrade`)
+ * unless the caller allowed it. A published version that is not a release
+ * version refuses `self-update-manifest-invalid`; a running version that is not
+ * one (a source build) cannot be older and is not compared.
+ */
+function refuseDowngrade(currentVersion, publishedVersion, allowDowngrade) {
+    const published = parseReleaseVersion(publishedVersion);
+    if (!published)
+        throw manifestRefusal(`latest.json version '${publishedVersion}' is not a release version`, 'self-update-manifest-invalid', null);
+    const current = parseReleaseVersion(currentVersion);
+    if (!current || allowDowngrade || compareReleaseVersions(published, current) >= 0)
+        return;
+    throw new CapabilityError(`The published release ${publishedVersion} is older than the running ${currentVersion}; nothing was replaced.`, 'CONFLICT', {
+        reason: 'self-update-downgrade',
+        retryable: false,
+        details: { currentVersion, publishedVersion },
+        recoveryHint: 'Pass --allow-downgrade to install the older release on purpose.'
+    });
+}
+/** The default deadline on each release request (manifest, then binary). */
+export const SELF_UPDATE_FETCH_TIMEOUT_MS = 120_000;
+/** `url` as it may be printed: userinfo and query values (a presigned signature) removed. */
+function printableUrl(url) {
+    return redactCredentials(url, urlRedactions(url).filter((value) => value !== url && !URL.canParse(value)));
+}
+async function sha256Of(bytes) {
+    const digest = new Uint8Array(await crypto.subtle.digest('SHA-256', bytes.slice()));
+    return Array.from(digest, (byte) => byte.toString(16).padStart(2, '0')).join('');
+}
+/**
+ * One release request, owned by the runtime's lifecycle and bounded by a
+ * declared deadline: a stalled CDN rejects `TIMEOUT wait-timeout`, and a
+ * disposed runtime aborts it. A non-OK answer refuses typed.
+ */
+async function fetchRelease(options, url, what, consume) {
+    const fetchImpl = options.fetchImpl ?? ((target, init) => fetch(target, init));
+    const timeoutMs = options.timeoutMs ?? SELF_UPDATE_FETCH_TIMEOUT_MS;
+    return options.runtime.lifecycle.wait(async (signal) => {
+        const response = await fetchImpl(url, { signal });
+        if (!response.ok) {
+            throw new CapabilityError(`GET ${printableUrl(url)} — ${response.status}`, 'UNAVAILABLE', {
+                reason: 'self-update-fetch-failed',
+                retryable: response.status >= 500,
+                details: { what, status: response.status }
+            });
+        }
+        return consume(response);
+    }, {
+        timeoutMs,
+        reason: `self-update-${what}`
+    });
+}
+/** The asset to compare against when nothing is replaced: only "this release does not build here" is absence. */
+export function publishedAsset(manifest, platform, arch) {
+    const selected = settleNow(() => selectAsset(manifest, platform, arch));
+    if (selected.ok)
+        return selected.value;
+    if (selected.cause instanceof CapabilityError && selected.cause.reason === SELF_UPDATE_NO_ASSET)
+        return undefined;
+    throw selected.cause;
+}
+/**
+ * Download, verify and atomically install the current release. Returns without
+ * touching the disk when the running version already matches.
+ */
+export async function runSelfUpdate(options) {
+    const target = options.target;
+    const manifest = parseLatestManifest(await fetchRelease(options, options.manifestUrl, 'manifest', response => response.text()));
+    if (manifest.version === options.currentVersion) {
+        // STILL NAME THE DIGEST. A run that answers "already current" without
+        // saying WHICH release it compared against is indistinguishable from one
+        // that never read the manifest, and an operator reconciling an install
+        // against `SHA256SUMS.txt` is left with nothing to compare. A platform
+        // this release does not build is not an error when nothing is replaced.
+        const published = publishedAsset(manifest, options.platform, options.arch);
+        const current = {
+            replaced: false,
+            fromVersion: options.currentVersion,
+            toVersion: manifest.version,
+            target,
+            note: 'already current'
+        };
+        if (published)
+            current.sha256 = published.sha256;
+        return current;
+    }
+    refuseDowngrade(options.currentVersion, manifest.version, options.allowDowngrade === true);
+    const asset = selectAsset(manifest, options.platform, options.arch);
+    if (options.dryRun) {
+        return {
+            replaced: false,
+            fromVersion: options.currentVersion,
+            toVersion: manifest.version,
+            target,
+            sha256: asset.sha256,
+            note: `would download ${printableUrl(asset.url)} and replace ${target.label}`
+        };
+    }
+    const filesystem = await resolveFileSystemAdapter(options.runtime, { binding: false });
+    await filesystem.mkdir(target.dir, { recursive: true });
+    // Same directory as the target so the final step is a real atomic rename.
+    const temporary = `${target.path}.download-${crypto.randomUUID()}`;
+    try {
+        const bytes = new Uint8Array(await fetchRelease(options, asset.url, 'binary', response => response.arrayBuffer()));
+        const digest = await sha256Of(bytes);
+        if (digest !== asset.sha256) {
+            throw new CapabilityError(`sha256 mismatch for ${printableUrl(asset.url)}: expected ${asset.sha256}, downloaded ${digest}. ` +
+                'The running binary was NOT replaced.', 'INVALID_INPUT', { reason: 'self-update-digest-mismatch', retryable: false, details: { expected: asset.sha256, actual: digest } });
+        }
+        await filesystem.writeFile(temporary, bytes);
+        // Refuse before replacement if the selected adapter cannot preserve executable permissions.
+        await chmodChecked(filesystem, temporary, 0o755);
+        await filesystem.rename(temporary, target.path);
+        return {
+            replaced: true,
+            fromVersion: options.currentVersion,
+            toVersion: manifest.version,
+            target,
+            sha256: digest
+        };
+    }
+    finally {
+        if (await filesystem.exists(temporary))
+            await filesystem.remove(temporary);
+    }
+}
+//# sourceMappingURL=self-update.js.map

package/dist/cli/self-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-update.js","sourceRoot":"","sources":["../../src/cli/self-update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,wBAAwB,EAAE,MAAM,gDAAgD,CAAC;AAC1F,OAAO,EAAE,eAAe,EAAE,SAAS,EAAuC,MAAM,qBAAqB,CAAC;AACtG,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,CAAC,EAAE,MAAM,QAAQ,CAAC;AAS3B,0GAA0G;AAC1G,SAAS,OAAO,CAAC,SAAqB,EAAE,GAAG,QAAkB;IAC5D,OAAO,QAAQ;SACb,GAAG,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC;SACjH,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;SAC7D,IAAI,CAAC,SAAS,CAAC,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,iBAAiB,CAChC,QAAgB,EAChB,GAA0C,EAC1C,IAAY;IAEZ,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;QACzE,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;QAChD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC;IACvG,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IAChD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;AAC/E,CAAC;AAED,0GAA0G;AAC1G,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE;IACf,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IACvF,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC;CAC5C,CAAC,CAAC;AASH,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;CACtC,CAAC,CAAC;AAEH,6FAA6F;AAC7F,SAAS,eAAe,CAAC,OAAe,EAAE,MAAc,EAAE,KAA2B;IACpF,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IACvG,OAAO,IAAI,eAAe,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3F,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC/C,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/C,IAAI,CAAC,IAAI,CAAC,EAAE;QAAE,MAAM,eAAe,CAAC,yBAAyB,EAAE,8BAA8B,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3G,MAAM,QAAQ,GAAG,4BAA4B,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpE,IAAI,CAAC,QAAQ,CAAC,OAAO;QAAE,MAAM,eAAe,CAAC,4BAA4B,EAAE,8BAA8B,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;IAC3H,MAAM,MAAM,GAA0B,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,KAAK,GAAG,yBAAyB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACzD,IAAI,KAAK,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,eAAe,CAAC,wCAAwC,EAAE,gCAAgC,EAAE,IAAI,CAAC,CAAC;IACjI,OAAO,EAAE,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC3D,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAE3D,MAAM,UAAU,WAAW,CAC1B,QAAwB,EACxB,QAAgB,EAChB,IAAY;IAEZ,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CACjC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,KAAK,IAAI,CACzE,CAAC;IACF,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,MAAM,IAAI,eAAe,CACxB,eAAe,QAAQ,CAAC,OAAO,qBAAqB,QAAQ,IAAI,IAAI,GAAG;YACtE,QAAQ,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC5E,WAAW,EACX,EAAE,MAAM,EAAE,oBAAoB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAC/E,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAQD,MAAM,eAAe,GAAG,4GAA4G,CAAC;AAErI,yGAAyG;AACzG,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO;QACN,IAAI,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5D,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC;KAC7D,CAAC;AACH,CAAC;AAED,8GAA8G;AAC9G,SAAS,iBAAiB,CAAC,IAAY,EAAE,KAAa;IACrD,MAAM,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,YAAY,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,WAAW,IAAI,YAAY;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAChF,IAAI,WAAW,KAAK,YAAY;QAAE,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9D,OAAO,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,iIAAiI;AACjI,MAAM,UAAU,sBAAsB,CAAC,IAAoB,EAAE,KAAqB;IACjF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAE,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAE,CAAC,CAAC;QAChE,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/B,CAAC;IACD,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACnE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACpE,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACzE,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAE,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,CAAE,CAAC,CAAC;QACnF,IAAI,KAAK,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC/B,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACpE,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,cAAsB,EAAE,gBAAwB,EAAE,cAAuB;IACjG,MAAM,SAAS,GAAG,mBAAmB,CAAC,gBAAgB,CAAC,CAAC;IACxD,IAAI,CAAC,SAAS;QAAE,MAAM,eAAe,CAAC,wBAAwB,gBAAgB,4BAA4B,EAAE,8BAA8B,EAAE,IAAI,CAAC,CAAC;IAClJ,MAAM,OAAO,GAAG,mBAAmB,CAAC,cAAc,CAAC,CAAC;IACpD,IAAI,CAAC,OAAO,IAAI,cAAc,IAAI,sBAAsB,CAAC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO;IAC1F,MAAM,IAAI,eAAe,CACxB,yBAAyB,gBAAgB,8BAA8B,cAAc,yBAAyB,EAC9G,UAAU,EACV;QACC,MAAM,EAAE,uBAAuB;QAC/B,SAAS,EAAE,KAAK;QAChB,OAAO,EAAE,EAAE,cAAc,EAAE,gBAAgB,EAAE;QAC7C,YAAY,EAAE,iEAAiE;KAC/E,CACD,CAAC;AACH,CAAC;AAKD,4EAA4E;AAC5E,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAC;AA+BpD,6FAA6F;AAC7F,SAAS,YAAY,CAAC,GAAW;IAChC,OAAO,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC5G,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,KAA8B;IACrD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;IACpF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,YAAY,CAC1B,OAA0B,EAC1B,GAAW,EACX,IAA2B,EAC3B,OAA2C;IAE3C,MAAM,SAAS,GAAoB,OAAO,CAAC,SAAS,IAAI,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAChG,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,4BAA4B,CAAC;IACpE,OAAO,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QACtD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YAClB,MAAM,IAAI,eAAe,CAAC,OAAO,YAAY,CAAC,GAAG,CAAC,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,aAAa,EAAE;gBACzF,MAAM,EAAE,0BAA0B;gBAClC,SAAS,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG;gBACjC,OAAO,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE;aAC1C,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC1B,CAAC,EAAE;QACF,SAAS;QACT,MAAM,EAAE,eAAe,IAAI,EAAE;KAC7B,CAAC,CAAC;AACJ,CAAC;AAED,iHAAiH;AACjH,MAAM,UAAU,cAAc,CAAC,QAAwB,EAAE,QAAgB,EAAE,IAAY;IACtF,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;IACxE,IAAI,QAAQ,CAAC,EAAE;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACvC,IAAI,QAAQ,CAAC,KAAK,YAAY,eAAe,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,KAAK,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAClH,MAAM,QAAQ,CAAC,KAAK,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAA0B;IAC7D,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAC9B,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAChI,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,cAAc,EAAE,CAAC;QACjD,sEAAsE;QACtE,yEAAyE;QACzE,uEAAuE;QACvE,uEAAuE;QACvE,wEAAwE;QACxE,MAAM,SAAS,GAAG,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,OAAO,GAAqB;YACjC,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,OAAO,CAAC,cAAc;YACnC,SAAS,EAAE,QAAQ,CAAC,OAAO;YAC3B,MAAM;YACN,IAAI,EAAE,iBAAiB;SACvB,CAAC;QACF,IAAI,SAAS;YAAE,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QACjD,OAAO,OAAO,CAAC;IAChB,CAAC;IACD,eAAe,CAAC,OAAO,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACpE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACpB,OAAO;YACN,QAAQ,EAAE,KAAK;YACf,WAAW,EAAE,OAAO,CAAC,cAAc;YACnC,SAAS,EAAE,QAAQ,CAAC,OAAO;YAC3B,MAAM;YACN,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,IAAI,EAAE,kBAAkB,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,gBAAgB,MAAM,CAAC,KAAK,EAAE;SAC7E,CAAC;IACH,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,wBAAwB,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACvF,MAAM,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,0EAA0E;IAC1E,MAAM,SAAS,GAAG,GAAG,MAAM,CAAC,IAAI,aAAa,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC;IACnE,IAAI,CAAC;QACJ,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,EAAE,QAAQ,EAAE,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QACnH,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,IAAI,eAAe,CACxB,uBAAuB,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,KAAK,CAAC,MAAM,gBAAgB,MAAM,IAAI;gBACjG,sCAAsC,EACvC,eAAe,EACf,EAAE,MAAM,EAAE,6BAA6B,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAChH,CAAC;QACH,CAAC;QACD,MAAM,UAAU,CAAC,SAAS,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QAC7C,4FAA4F;QAC5F,MAAM,YAAY,CAAC,UAAU,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACjD,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO;YACN,QAAQ,EAAE,IAAI;YACd,WAAW,EAAE,OAAO,CAAC,cAAc;YACnC,SAAS,EAAE,QAAQ,CAAC,OAAO;YAC3B,MAAM;YACN,MAAM,EAAE,MAAM;SACd,CAAC;IACH,CAAC;YAAS,CAAC;QACV,IAAI,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC;YAAE,MAAM,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC5E,CAAC;AACF,CAAC"}

package/dist/cli/update.cli-command.descriptor.d.ts

@@ -0,0 +1,62 @@
+/**
+ * `vibes update` — the repair kernel's other half.
+ *
+ * Top-level, not `vibes plugins update`, because it is the command a user runs
+ * when nothing else works: it seeds or repairs the scope manifests, installs,
+ * verifies through the shipping path, and rolls the bodies that are still
+ * executing the previous graph. `group: 'update'` is registered at the root
+ * through the CLI surface's root-fallback list.
+ *
+ * `--json` is NOT declared here: it is a program-level global cloned into every
+ * command, and the impl reads the resulting `cli/output-format` context.
+ */
+declare const _default: {
+    readonly id: "update";
+    readonly kind: "cli/command";
+    readonly name: "update";
+    readonly description: "Update plugins in the global and workspace scopes, then roll running bodies";
+    readonly group: "update";
+    readonly surfaces: ["cli"];
+    readonly hardware: ["consumer"];
+    readonly requiredContext: ["cli/ui", "cli/output-format"];
+    readonly effects: {
+        readonly homeWrite: "required";
+    };
+    readonly options: [{
+        readonly flags: "--global";
+        readonly description: "Update the global scope ($VIBES_HOME) only";
+    }, {
+        readonly flags: "--workspace";
+        readonly description: "Update the current workspace scope only";
+    }, {
+        readonly flags: "--latest";
+        readonly description: "Take the newest matching versions, not the locked ones";
+    }, {
+        readonly flags: "--repair";
+        readonly description: "Rewrite a fossil or foreign scope manifest, backing it up first";
+    }, {
+        readonly flags: "--self";
+        readonly description: "Replace the vibes executable itself, first";
+    }, {
+        readonly flags: "--allow-downgrade";
+        readonly description: "With --self, install a published release older than the running one";
+    }, {
+        readonly flags: "--mirror <url>";
+        readonly description: "Release mirror for --self (the base holding latest.json; the installer calls it VIBES_MIRROR)";
+    }, {
+        readonly flags: "--dry-run";
+        readonly description: "Report every action without performing it";
+    }, {
+        readonly flags: "--no-roll";
+        readonly description: "Skip restarting running bodies";
+    }];
+    readonly examples: [{
+        readonly command: "vibes update --global";
+        readonly description: "Update the machine-wide plugin scope";
+    }, {
+        readonly command: "vibes update --repair --global";
+        readonly description: "Repair a fossil ~/.vibes/package.json, keeping a dated backup";
+    }];
+};
+export default _default;
+//# sourceMappingURL=update.cli-command.descriptor.d.ts.map

package/dist/cli/update.cli-command.descriptor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.cli-command.descriptor.d.ts","sourceRoot":"","sources":["../../src/cli/update.cli-command.descriptor.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;GAWG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AACH,wBAkCG"}

package/dist/cli/update.cli-command.descriptor.js

@@ -0,0 +1,49 @@
+import { createRuntimeAsset } from '@vibesdotdev/kernel';
+/**
+ * `vibes update` — the repair kernel's other half.
+ *
+ * Top-level, not `vibes plugins update`, because it is the command a user runs
+ * when nothing else works: it seeds or repairs the scope manifests, installs,
+ * verifies through the shipping path, and rolls the bodies that are still
+ * executing the previous graph. `group: 'update'` is registered at the root
+ * through the CLI surface's root-fallback list.
+ *
+ * `--json` is NOT declared here: it is a program-level global cloned into every
+ * command, and the impl reads the resulting `cli/output-format` context.
+ */
+export default createRuntimeAsset({
+    id: 'update',
+    kind: 'cli/command',
+    name: 'update',
+    description: 'Update plugins in the global and workspace scopes, then roll running bodies',
+    group: 'update',
+    surfaces: ['cli'],
+    hardware: ['consumer'],
+    requiredContext: ['cli/ui', 'cli/output-format'],
+    effects: { homeWrite: 'required' },
+    options: [
+        { flags: '--global', description: 'Update the global scope ($VIBES_HOME) only' },
+        { flags: '--workspace', description: 'Update the current workspace scope only' },
+        { flags: '--latest', description: 'Take the newest matching versions, not the locked ones' },
+        {
+            flags: '--repair',
+            description: 'Rewrite a fossil or foreign scope manifest, backing it up first'
+        },
+        { flags: '--self', description: 'Replace the vibes executable itself, first' },
+        { flags: '--allow-downgrade', description: 'With --self, install a published release older than the running one' },
+        {
+            flags: '--mirror <url>',
+            description: 'Release mirror for --self (the base holding latest.json; the installer calls it VIBES_MIRROR)'
+        },
+        { flags: '--dry-run', description: 'Report every action without performing it' },
+        { flags: '--no-roll', description: 'Skip restarting running bodies' }
+    ],
+    examples: [
+        { command: 'vibes update --global', description: 'Update the machine-wide plugin scope' },
+        {
+            command: 'vibes update --repair --global',
+            description: 'Repair a fossil ~/.vibes/package.json, keeping a dated backup'
+        }
+    ]
+});
+//# sourceMappingURL=update.cli-command.descriptor.js.map

package/dist/cli/update.cli-command.descriptor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.cli-command.descriptor.js","sourceRoot":"","sources":["../../src/cli/update.cli-command.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAEzD;;;;;;;;;;;GAWG;AACH,eAAe,kBAAkB,CAAC;IACjC,EAAE,EAAE,QAAQ;IACZ,IAAI,EAAE,aAAa;IACnB,IAAI,EAAE,QAAQ;IACd,WAAW,EAAE,6EAA6E;IAC1F,KAAK,EAAE,QAAQ;IACf,QAAQ,EAAE,CAAC,KAAK,CAAC;IACjB,QAAQ,EAAE,CAAC,UAAU,CAAC;IACtB,eAAe,EAAE,CAAC,QAAQ,EAAE,mBAAmB,CAAC;IAChD,OAAO,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE;IAClC,OAAO,EAAE;QACR,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,4CAA4C,EAAE;QAChF,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,yCAAyC,EAAE;QAChF,EAAE,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,wDAAwD,EAAE;QAC5F;YACC,KAAK,EAAE,UAAU;YACjB,WAAW,EAAE,iEAAiE;SAC9E;QACD,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,4CAA4C,EAAE;QAC9E,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,qEAAqE,EAAE;QAClH;YACC,KAAK,EAAE,gBAAgB;YACvB,WAAW,EAAE,+FAA+F;SAC5G;QACD,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,2CAA2C,EAAE;QAChF,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,gCAAgC,EAAE;KACrE;IACD,QAAQ,EAAE;QACT,EAAE,OAAO,EAAE,uBAAuB,EAAE,WAAW,EAAE,sCAAsC,EAAE;QACzF;YACC,OAAO,EAAE,gCAAgC;YACzC,WAAW,EAAE,+DAA+D;SAC5E;KACD;CACD,CAAC,CAAC"}