acuvo-code 0.6.5 → 0.6.6

package/ENTERPRISE.md

@@ -892,7 +892,7 @@ For completeness, the properties none of them offers:
   (`lib/media.mjs`), and generates imagery with no configuration and no account
   (`lib/imagegen.mjs`) — critiqued before it is accepted, and reported as unreviewed when
   no critic is available.
-- ⭐ **Zero dependencies.** The entire auditable surface is 122 files and 79553 lines,
+- ⭐ **Zero dependencies.** The entire auditable surface is 122 files and 79582 lines,
   and there is no `node_modules` behind it. (Counted 2026-08-22 from
   `lib/*.mjs` + `bin/*.mjs`; `test/docs-truth.test.mjs` fails the build if this number
   drifts, which is why it went 18 → 41 → 46 → 52 → 53 → 57 → 60 → 61 → 62 → 65 → 66 → 69 → 70 → 71 → 72 → 73 → 80 → 84 → 90 → 100 → 101 → 102 → 103 → 107 → 108 → 111 as modules landed (111 = the three that were WRITTEN and imported by nothing — `python.mjs`, `cache-floor.mjs`, `plan-coherence.mjs`; 108 = `warm-provider.mjs`, which keeps a session on the upstream that holds its prompt cache; 107 = `login.mjs`, the command that stores an Acuvo credential — until it existed, `writeAccount` was called by nothing and every user fell through to BYOK). ⚠️ Two of those three landed on this count while remaining UNREACHABLE, which is the sharpest illustration this document has that a file count is a claim about bytes, never about capability. ⭐ A

package/lib/self-update.mjs

@@ -28,8 +28,22 @@ import { accountDir } from './account.mjs';
 
 export const PACKAGE_NAME = 'acuvo-code';
 
-/** How long between registry checks. A day is plenty and keeps npm quiet. */
-export const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
+/**
+ * How long between registry checks.
+ *
+ * ⚠️ WAS 24 HOURS, AND THAT NUMBER COST US FIVE ROUNDS OF A BUG REPORT.
+ * Measured on Roman's machine 2026-08-22: the cache read
+ * `{"at":13:47,"latest":"0.2.1"}`. It was correct when written. Four hours
+ * later 0.6.5 was out, and his install would not look again until the
+ * following afternoon — so three consecutive fixes to the opening screen were
+ * invisible to him and he kept reporting a defect that had already been fixed
+ * twice. "Users get updates as soon as we ship" was false by up to a day.
+ *
+ * ⭐ Six hours, so a fix shipped in the morning lands the same working day.
+ * The registry call is one HTTP request with a 3s timeout, at EXIT — four a
+ * day is not rude, and being a day stale on a young product is expensive.
+ */
+export const CHECK_INTERVAL_MS = 6 * 60 * 60 * 1000;
 
 /**
  * Compare two semver-ish strings.
@@ -96,7 +110,22 @@ export async function checkForUpdate({
   force = false,
 } = {}) {
   const cached = readCache(cachePath);
-  if (!force && cached && now() - (cached.at ?? 0) < intervalMs) {
+  /**
+   * ── ⭐⭐⭐ A CACHE THAT CLAIMS AN OLDER VERSION IS "LATEST" IS PROVABLY WRONG
+   *
+   * If we are RUNNING 0.6.2 and the cache says the newest published version is
+   * 0.2.1, then the cache is stale — no reasoning about clocks required, it is
+   * contradicted by the file we are executing from. This is exactly the state
+   * Roman's machine was in: he had manually installed a newer build, which left
+   * a throttle entry insisting on a version four minors behind it, and that
+   * entry then suppressed every check for the rest of the day.
+   *
+   * ⭐ It costs one comparison and it converts the worst failure mode of a
+   * throttle — silently pinning somebody to an answer that is already known to
+   * be wrong — into a single extra HTTP request.
+   */
+  const cacheIsStale = cached && compareVersions(current, cached.latest) > 0;
+  if (!force && !cacheIsStale && cached && now() - (cached.at ?? 0) < intervalMs) {
     return { latest: cached.latest ?? current, isNewer: compareVersions(cached.latest, current) > 0, checked: false };
   }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acuvo-code",
-  "version": "0.6.5",
+  "version": "0.6.6",
   "description": "Acuvo Code — the terminal client for the Acuvo capability registry. Zero dependencies, by design.",
   "type": "module",
   "bin": {