aegis-desktop 1.0.13 → 1.0.15

package/vendor/update.js

@@ -1,706 +1,3 @@
 // SPDX-License-Identifier: AGPL-3.0-or-later
 // Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
-// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
-// Conveying a modified copy, or running one as a network service, owes the
-// corresponding source under this licence (§5/§13) — see LICENSING.md.
-/**
- * "There is a newer version" — the notice this CLI never had.
- *
- * Checked on 2026-09-15: there was no update check anywhere in the client, so
- * a user learned about a release only by guessing to run
- * `npm i -g aegiscode@latest`. Publishing therefore reached almost nobody, and
- * the installed base drifted months behind the registry.
- *
- * Three rules, because an update check is a background nicety that must never
- * become a liability:
- *   · it never blocks — the caller gets a cached answer immediately and the
- *     network call settles whenever it settles;
- *   · it never throws — offline, proxied, rate-limited or garbage JSON all
- *     mean "no notice", not a broken CLI;
- *   · it never nags — one check a day, cached, and nothing printed when the
- *     user is already current.
- */
-
-const https = require('node:https');
-
-const REGISTRY = 'https://registry.npmjs.org';
-//: Default package. Both hosts ship from npm — the CLI as `aegiscode`, the
-//: desktop as `aegis-desktop` — so one checker serves both; the caller names
-//: which one it is.
-const PKG = 'aegiscode';
-/** One check a day. A CLI that pings the registry every launch is spyware. */
-const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
-/** The registry is not on the critical path; give up quickly and silently. */
-const TIMEOUT_MS = 2500;
-
-/** Compare two semver-ish strings. Returns true when `latest` is newer. */
-function isNewer(latest, current) {
-  const parse = (v) =>
-    String(v || '')
-      .trim()
-      .replace(/^v/, '')
-      .split('-')[0] // a prerelease never counts as newer than its release
-      .split('.')
-      .map((n) => Number.parseInt(n, 10) || 0);
-  const a = parse(latest);
-  const b = parse(current);
-  for (let i = 0; i < Math.max(a.length, b.length); i++) {
-    const x = a[i] || 0;
-    const y = b[i] || 0;
-    if (x !== y) return x > y;
-  }
-  return false;
-}
-
-/**
- * Why a check produced no version. Every one of these used to collapse into a
- * bare `null`, which is enough for the CLI ("no notice") but NOT enough for a
- * host that shows the user a sentence about it: the desktop rendered all six
- * as "registry unreachable", so a 2.5s timeout on a slow VPN was reported as
- * fact about the registry — a false accusation, and unactionable.
- */
-const REASONS = Object.freeze({
-  TIMEOUT: 'timeout',
-  NETWORK: 'network',
-  NOT_FOUND: 'not-found',
-  FORBIDDEN: 'forbidden',
-  HTTP: 'http',
-  MALFORMED: 'malformed',
-  TOO_LARGE: 'too-large',
-});
-
-/**
- * Does this failure mean "the network let us down" (worth retrying silently, and
- * NOT worth telling the user about) rather than "the registry answered, and the
- * answer was no" (a real condition the user may need to act on)?
- *
- * `status` is the HTTP status when there was one, so 5xx/429 count as transient
- * while 404/403 do not.
- */
-function isTransientReason(reason, status = null) {
-  if (reason === REASONS.TIMEOUT || reason === REASONS.NETWORK) return true;
-  if (reason === REASONS.HTTP) return !status || status >= 500 || status === 429;
-  return false;
-}
-
-/**
- * Fetch the registry's `latest` dist-tag, saying WHY when it fails.
- *
- * Resolves `{ ok, latest, reason, status }` and never rejects: `ok` is the
- * version question, `reason` (one of REASONS) is the diagnosis. Use this when
- * you intend to tell someone what happened; use `fetchLatest` when you only
- * care whether there is a notice.
- */
-function fetchLatestDetailed({ pkg = PKG, timeoutMs = TIMEOUT_MS } = {}) {
-  return new Promise((resolve) => {
-    let settled = false;
-    const done = (v) => {
-      if (!settled) {
-        settled = true;
-        resolve(v);
-      }
-    };
-    const fail = (reason, status = null) =>
-      done({ ok: false, latest: null, reason, status });
-    const succeed = (latest) => done({ ok: true, latest, reason: null, status: 200 });
-    try {
-      // The abbreviated metadata document: a few KB instead of the full
-      // packument, which for a package with this many releases is megabytes.
-      const req = https.get(
-        `${REGISTRY}/${pkg}`,
-        { headers: { accept: 'application/vnd.npm.install-v1+json' }, timeout: timeoutMs },
-        (res) => {
-          const status = res.statusCode;
-          if (status !== 200) {
-            res.resume();
-            if (status === 404) return fail(REASONS.NOT_FOUND, status);
-            if (status === 401 || status === 403) return fail(REASONS.FORBIDDEN, status);
-            return fail(REASONS.HTTP, status);
-          }
-          let body = '';
-          res.setEncoding('utf8');
-          res.on('data', (c) => {
-            body += c;
-            if (body.length > 2_000_000) {
-              req.destroy();
-              fail(REASONS.TOO_LARGE, status);
-            }
-          });
-          res.on('end', () => {
-            try {
-              const tags = JSON.parse(body)['dist-tags'];
-              const latest = (tags && tags.latest) || null;
-              // A 200 that parses but names no `latest` is a malformed
-              // document, not a slow network — do not invite a retry for it.
-              if (!latest) return fail(REASONS.MALFORMED, status);
-              succeed(latest);
-            } catch {
-              fail(REASONS.MALFORMED, status);
-            }
-          });
-        }
-      );
-      req.on('timeout', () => {
-        req.destroy();
-        fail(REASONS.TIMEOUT);
-      });
-      // Every socket-level failure — DNS (ENOTFOUND), refused (ECONNREFUSED),
-      // TLS, proxy, reset mid-body — is the same story to a user: the network.
-      req.on('error', () => fail(REASONS.NETWORK));
-    } catch {
-      fail(REASONS.NETWORK);
-    }
-  });
-}
-
-/** Fetch the registry's `latest` dist-tag. Resolves null on any failure. */
-function fetchLatest(opts = {}) {
-  return fetchLatestDetailed(opts).then((r) => (r.ok ? r.latest : null));
-}
-
-//: Where the AEGIS server answers "am I still allowed to talk to you".
-const DEFAULT_API_BASE = 'https://aegiscloud.org';
-/** /api/v1/version is a tiny JSON document; anything bigger is a proxy page. */
-const VERSION_BODY_CAP = 64 * 1024;
-
-/**
- * Ask the SERVER whether this client is still serviceable.
- *
- * Why this exists next to the npm check: they answer different questions.
- * The registry says what was *published*; the server says what it will
- * *accept*. aegis1 refuses every request from a client below
- * `MIN_CLIENT_VERSION` with a 426, so a client that only asks npm learns it is
- * unservicable by being refused mid-task — an outage, not a notice. Asking
- * `/api/v1/version` first turns the same fact into a sentence the user reads
- * before they hit the wall.
- *
- * `/api/v1/version` is informational: it never refuses anyone, and it echoes
- * the verdict for the version header we send (`upgrade_required`).
- *
- * Resolves `{ ok, minClient, latestCli, latestDesktop, upgradeRequired,
- * downloadUrl, reason, status }` and never rejects — same contract as
- * `fetchLatestDetailed`, so a host can render "registry unreachable" and
- * "server unreachable" differently instead of inventing a third story.
- */
-function fetchServerVersionDetailed({
-  base = DEFAULT_API_BASE,
-  clientVersion = null,
-  timeoutMs = TIMEOUT_MS,
-  getImpl = null,
-} = {}) {
-  return new Promise((resolve) => {
-    let settled = false;
-    const done = (v) => {
-      if (!settled) {
-        settled = true;
-        resolve(v);
-      }
-    };
-    const fail = (reason, status = null) =>
-      done({
-        ok: false, minClient: null, latestCli: null, latestDesktop: null,
-        upgradeRequired: null, downloadUrl: '', reason, status,
-      });
-    const succeed = (body, status) => {
-      const minClient = body && typeof body.min_client === 'string' ? body.min_client : null;
-      // A 200 without `min_client` is malformed, not a slow network: do not
-      // invite a retry ladder for a document that will parse the same way.
-      if (!minClient) return fail(REASONS.MALFORMED, status);
-      done({
-        ok: true,
-        minClient,
-        latestCli: typeof body.latest_cli === 'string' ? body.latest_cli : '',
-        latestDesktop: typeof body.latest_desktop === 'string' ? body.latest_desktop : '',
-        // Trust the header echo only when we actually sent a version: without
-        // one the server answers for `require_header=False` and the answer is
-        // about nothing in particular. `null` here means "the server did not
-        // say", which is different from "the server said no" — the caller must
-        // be able to fall back without overriding an answer it was given.
-        upgradeRequired:
-          clientVersion && typeof body.upgrade_required === 'boolean'
-            ? body.upgrade_required
-            : null,
-        downloadUrl: typeof body.download_url === 'string' ? body.download_url : '',
-        reason: null,
-        status,
-      });
-    };
-
-    try {
-      const url = `${String(base || DEFAULT_API_BASE).replace(/\/+$/, '')}/api/v1/version`;
-      const headers = { accept: 'application/json' };
-      if (clientVersion) headers['X-AEGIS-Version'] = String(clientVersion);
-
-      const onResponse = (res) => {
-        const status = res.statusCode;
-        if (status !== 200) {
-          res.resume();
-          if (status === 404) return fail(REASONS.NOT_FOUND, status);
-          if (status === 401 || status === 403) return fail(REASONS.FORBIDDEN, status);
-          // 426 here would mean the endpoint itself were gated; treat it as a
-          // real answer rather than a transport failure if it ever happens.
-          if (status === 426) return fail(REASONS.HTTP, status);
-          return fail(REASONS.HTTP, status);
-        }
-        let body = '';
-        res.setEncoding('utf8');
-        res.on('data', (c) => {
-          body += c;
-          if (body.length > VERSION_BODY_CAP) {
-            res.destroy();
-            fail(REASONS.TOO_LARGE, status);
-          }
-        });
-        res.on('end', () => {
-          if (settled) return;
-          try {
-            succeed(JSON.parse(body), status);
-          } catch {
-            fail(REASONS.MALFORMED, status);
-          }
-        });
-      };
-
-      if (typeof getImpl === 'function') {
-        // Injected transport for tests and hosts that already own a fetch:
-        // `getImpl({url, headers, timeoutMs})` resolves `{status, text}`.
-        Promise.resolve(getImpl({ url, headers, timeoutMs }))
-          .then((r) => {
-            const status = r && r.status != null ? r.status : 0;
-            if (!status) return fail(REASONS.NETWORK);
-            if (status !== 200) {
-              if (status === 404) return fail(REASONS.NOT_FOUND, status);
-              if (status === 401 || status === 403) return fail(REASONS.FORBIDDEN, status);
-              return fail(REASONS.HTTP, status);
-            }
-            const text = r && typeof r.text === 'string' ? r.text : '';
-            if (text.length > VERSION_BODY_CAP) return fail(REASONS.TOO_LARGE, status);
-            try {
-              succeed(JSON.parse(text), status);
-            } catch {
-              fail(REASONS.MALFORMED, status);
-            }
-          })
-          .catch(() => fail(REASONS.NETWORK));
-        return;
-      }
-
-      const req = require(/^http:\/\//i.test(url) ? 'node:http' : 'node:https')
-        .get(url, { headers, timeout: timeoutMs }, onResponse);
-      req.on('timeout', () => {
-        req.destroy();
-        fail(REASONS.TIMEOUT);
-      });
-      req.on('error', () => fail(REASONS.NETWORK));
-    } catch {
-      fail(REASONS.NETWORK);
-    }
-  });
-}
-
-/** The server's minimum client version, or null. */
-function fetchServerVersion(opts = {}) {
-  return fetchServerVersionDetailed(opts).then((r) => (r.ok ? r.minClient : null));
-}
-
-/**
- * The server's verdict, expressed in the shape the notice/plan code already
- * speaks: `{ behind, latest, required, downloadUrl, ok, reason, status }`.
- *
- * `behind` is true when the SERVER says this client is below its minimum —
- * regardless of whether npm happens to have something newer. That ordering is
- * deliberate: being refused is actionable now, being merely superseded is not.
- */
-async function serverUpdateVerdict({
-  current,
-  base = DEFAULT_API_BASE,
-  timeoutMs = TIMEOUT_MS,
-  getImpl = null,
-} = {}) {
-  const res = await fetchServerVersionDetailed({ base, clientVersion: current, timeoutMs, getImpl });
-  if (!res.ok) {
-    return { ok: false, behind: false, latest: null, required: null, downloadUrl: '', reason: res.reason, status: res.status };
-  }
-  const required = res.minClient || null;
-  // The server's echo decides. Falling back to local arithmetic only when it
-  // said nothing (`null`) — OR'ing the two would let our own comparison
-  // override the very authority we asked, which is the bug this line exists to
-  // not have.
-  const behind =
-    res.upgradeRequired === true
-      ? true
-      : res.upgradeRequired === false
-        ? false
-        : required
-          ? isNewer(required, current)
-          : false;
-  return {
-    ok: true,
-    behind,
-    // The server's own minimum is the target when it is the thing refusing us;
-    // a published version is preferred when it names one, because that is what
-    // the user should actually install.
-    latest: (behind && (res.latestCli || res.latestDesktop)) || required,
-    latestCli: res.latestCli,
-    latestDesktop: res.latestDesktop,
-    required,
-    downloadUrl: res.downloadUrl,
-    reason: null,
-    status: res.status,
-  };
-}
-
-/**
- * The notice to show, from cache. Never waits on the network.
- *
- * `cache` is the persisted `{ checkedAt, latest }` blob; `save` persists a new
- * one. Returns `{ latest, behind }`, and kicks off a refresh in the background
- * when the cache is stale.
- */
-function updateNotice({
-  current,
-  cache,
-  save,
-  now = Date.now(),
-  fetchImpl = fetchLatest,
-  intervalMs = CHECK_INTERVAL_MS,
-} = {}) {
-  const c = cache || {};
-  const fresh = typeof c.checkedAt === 'number' && now - c.checkedAt < intervalMs;
-
-  if (!fresh) {
-    // Fire and forget: this run reports on what was already known, and the
-    // answer lands for the next one. A first run therefore never shows a
-    // notice, which is correct — it has nothing to compare against yet.
-    Promise.resolve(fetchImpl())
-      .then((latest) => {
-        if (latest && typeof save === 'function') save({ checkedAt: now, latest });
-      })
-      .catch(() => {});
-  }
-
-  const latest = c.latest || null;
-  return { latest, behind: !!(latest && isNewer(latest, current)) };
-}
-
-/**
- * "What happens next", from a check result — the ONE verdict every applier
- * consumes (AEGISONE, decision D7).
- *
- * There are two *mechanics* — `npm i -g` for the CLI's channel and
- * `electron-updater` for the window's — and that is deliberate: they install
- * different things. What must not be duplicated is the *decision*: whether
- * there is anything to do, which version it is, which applier owns it and what
- * the user is told to run. Both hosts ask this function, so the sentence a
- * user reads in the terminal and the sentence the window shows cannot drift.
- *
- * Pure: no fetch, no clock, no cache. Feed it a result from `checkPublished`
- * (or from the cached `updateNotice`) and it names the next action.
- *
- * @param {{current: string, latest: ?string, behind: boolean, channel?: 'npm'|'desktop', pkg?: string}} input
- */
-function updatePlan({ current, latest, behind, channel = 'npm', pkg = PKG, method = 'npm' } = {}) {
-  const currentText = String(current == null ? '' : current);
-  const latestText = latest ? String(latest) : null;
-  const pending = Boolean(behind) && Boolean(latestText);
-  if (!pending) {
-    return {
-      channel,
-      method,
-      current: currentText,
-      latest: latestText,
-      behind: false,
-      action: 'none',
-      applier: 'none',
-      instruction: null,
-      apply: null,
-    };
-  }
-  if (channel === 'desktop') {
-    // The window installs its own build: there is nothing for the user to type,
-    // and offering `npm i -g aegis-desktop` here would install a *second* copy
-    // beside the running app. The applier is the app's own updater.
-    return {
-      channel,
-      method,
-      current: currentText,
-      latest: latestText,
-      behind: true,
-      action: 'desktop-update',
-      applier: 'electron-updater',
-      instruction: 'Aegis Desktop → Check for Updates…',
-      apply: null,
-    };
-  }
-
-  // Which installer owns this copy. The command is not cosmetic: `npm i -g`
-  // against a pip-installed `aegiscode` writes a second copy beside the one the
-  // user actually runs, and the "upgrade" appears to do nothing. Same for an
-  // `npx` run, which has nothing installed to upgrade at all.
-  const applier = APPLIERS[method] || APPLIERS.npm;
-  return {
-    channel,
-    method,
-    current: currentText,
-    latest: latestText,
-    behind: true,
-    action: applier.action,
-    applier: applier.name,
-    instruction: applier.instruction(pkg),
-    apply: applier.apply ? applier.apply(pkg) : null,
-  };
-}
-
-/**
- * The ways this product reaches a machine, and what "update it" means for each.
- *
- * `apply` names argv to run — it is what the window's Update button and the
- * CLI's `/upgrade apply` execute. `null` means there is nothing to install:
- * `npx` fetches `latest` on every launch by definition, and a source checkout
- * belongs to its owner's git remote.
- */
-const APPLIERS = Object.freeze({
-  npm: Object.freeze({
-    name: 'npm',
-    action: 'npm-update',
-    instruction: (pkg) => `npm i -g ${pkg}@latest`,
-    apply: (pkg) => ({ command: 'npm', args: ['i', '-g', `${pkg}@latest`] }),
-  }),
-  pip: Object.freeze({
-    name: 'pip',
-    action: 'pip-update',
-    // The published pip package is a launcher for the npm one, so this is
-    // genuinely a different command — not an npm call with a different word.
-    instruction: (pkg) => `pip install -U ${pkg}`,
-    apply: (pkg) => ({ command: process.platform === 'win32' ? 'python' : 'python3',
-      args: ['-m', 'pip', 'install', '-U', pkg] }),
-  }),
-  npx: Object.freeze({
-    name: 'none',
-    action: 'npx-update',
-    instruction: () => 'already fetched fresh on every run — restart to pick up the new version',
-    apply: null,
-  }),
-  source: Object.freeze({
-    name: 'git',
-    action: 'source-update',
-    instruction: () => 'git pull && npm ci   (this copy is a source checkout)',
-    apply: null,
-  }),
-});
-
-/**
- * Which installer owns the copy that is running — so the sentence names a
- * command that actually changes THIS binary.
- *
- * Order matters. An explicit declaration wins (the pip launcher sets
- * `AEGIS_INSTALL_METHOD=pip` before exec'ing the real CLI, which is the only
- * way the npm package can know a Python install is driving it). Then npx, which
- * is detectable from the argv it builds. Then a source checkout, then npm.
- *
- * Pure and injectable: `env`, `argv` and a file probe, no `process` reads, so a
- * test can assert every branch without npm or pip being installed.
- */
-function detectInstallMethod({
-  env = {}, argv = [], pkg = PKG, fileExists = () => false, entry = '',
-} = {}) {
-  const declared = String((env && env.AEGIS_INSTALL_METHOD) || '').trim().toLowerCase();
-  if (declared && Object.prototype.hasOwnProperty.call(APPLIERS, declared)) return declared;
-
-  const joined = argv.map((a) => String(a)).join(' ');
-  if (/\bnpx\b/.test(joined) || /_npx[\\/]/.test(joined) || /_npx[\\/]/.test(entry)) return 'npx';
-  if (/[\\/]pipx[\\/]venvs[\\/]/.test(entry) || /[\\/]site-packages[\\/]/.test(entry)) return 'pip';
-  if (/[\\/]node_modules[\\/]/.test(entry)) return 'npm';
-  // A git checkout has the repo's own marker files; a global npm install does
-  // not (they are not in the package's `files` list).
-  if (fileExists('.git') && fileExists('client/update.js')) return 'source';
-  return 'npm';
-}
-
-/**
- * The same once-a-day check as `updateNotice`, but *awaited* and detailed.
- *
- * Why both exist: `updateNotice` answers immediately from cache and lets the
- * refresh land later, which is right for a CLI that must never block a launch.
- * A host that is *showing the user a banner about it* — the window, or
- * `aegis doctor` — needs the full result (`.ok`, `.reason`, `.status`) and is
- * willing to wait for it. So this is not a second check: it is the same probe
- * (`fetchLatestDetailed`, same `TIMEOUT_MS`, same `REASONS` taxonomy) and the
- * same `CHECK_INTERVAL_MS` cache rule, extracted so that the desktop applier
- * stops carrying its own copy of the fetching logic (D7: the desktop keeps its
- * applier and loses its version fetch).
- *
- * Never throws: a failure is a result with `ok: false` and a reason.
- *
- * @returns {Promise<{ok: boolean, latest: ?string, behind: boolean, reason: ?string,
- *                    status: ?number, cached: boolean, checkedAt: ?number}>}
- */
-async function checkPublished({
-  current,
-  cache,
-  save,
-  now = Date.now(),
-  fetchImpl = fetchLatestDetailed,
-  intervalMs = CHECK_INTERVAL_MS,
-  timeoutMs = TIMEOUT_MS,
-  pkg = PKG,
-} = {}) {
-  const c = cache || null;
-  const fresh = Boolean(c) && typeof c.checkedAt === 'number' && now - c.checkedAt < intervalMs;
-  if (fresh) {
-    const latest = c.latest || null;
-    return {
-      ok: Boolean(latest),
-      latest,
-      behind: !!(latest && isNewer(latest, current)),
-      reason: latest ? null : c.reason || null,
-      status: latest ? 200 : c.status == null ? null : c.status,
-      cached: true,
-      checkedAt: c.checkedAt,
-    };
-  }
-
-  let res;
-  try {
-    res = await fetchImpl({ pkg, timeoutMs });
-  } catch (err) {
-    res = { ok: false, latest: null, reason: REASONS.NETWORK, status: null, error: String((err && err.message) || err) };
-  }
-  const record = {
-    checkedAt: now,
-    latest: res && res.latest ? res.latest : null,
-    reason: (res && res.reason) || null,
-    status: res && res.status != null ? res.status : null,
-  };
-  if (typeof save === 'function') {
-    try {
-      save(record);
-    } catch {
-      /* failing to persist a notice is never worth failing the call */
-    }
-  }
-  return {
-    ok: Boolean(res && res.ok && res.latest),
-    latest: record.latest,
-    behind: !!(record.latest && isNewer(record.latest, current)),
-    reason: record.reason,
-    status: record.status,
-    cached: false,
-    checkedAt: now,
-  };
-}
-
-/**
- * One line for the welcome box, or null when there is nothing to say.
- *
- * Rendered from `updatePlan`, not from a second copy of the sentence: the
- * command the terminal tells the user to run and the command the window's
- * banner offers are the same string produced by the same verdict.
- *
- * `method` is the install channel the caller detected (see
- * `detectInstallMethod`). It is threaded through rather than assumed to be npm
- * because the previous version returned `null` — silence — for every channel
- * that was not npm, so a pip install and an npx run were never told a release
- * existed. A host that knows how it was installed should say so.
- */
-function updateLine({ current, latest, behind, pkg = PKG, method = 'npm' }) {
-  const plan = updatePlan({ current, latest, behind, channel: 'npm', pkg, method });
-  if (!plan.behind) return null;
-  const head = `Update available: ${plan.current} → ${plan.latest}`;
-  // `apply` is null for the two channels with nothing to install, whose
-  // instruction is already a sentence — prefixing those with "run:" would read
-  // as a command that does not exist.
-  return plan.apply
-    ? `${head}   run: ${plan.instruction}`
-    : `${head}   ${plan.instruction}`;
-}
-
-/**
- * The server's verdict, from cache. Never waits on the network.
- *
- * Same contract and the same once-a-day rule as `updateNotice`, for the same
- * reason: the welcome box draws from what the last run learned, and the
- * refresh lands for the next one. A first run shows nothing, which is right —
- * it has no verdict yet.
- *
- * Returns `{ behind, latest, required, downloadUrl }`. `behind` is the server's
- * answer, not a comparison this module invented, so the box says "update" only
- * when the server would actually refuse this client.
- */
-function serverNotice({
-  current,
-  cache,
-  save,
-  now = Date.now(),
-  verdictImpl = serverUpdateVerdict,
-  intervalMs = CHECK_INTERVAL_MS,
-} = {}) {
-  const c = cache || {};
-  const fresh = typeof c.checkedAt === 'number' && now - c.checkedAt < intervalMs;
-
-  if (!fresh) {
-    Promise.resolve()
-      .then(() => verdictImpl({ current }))
-      .then((v) => {
-        if (!v || typeof save !== 'function') return;
-        // Persist the verdict even when it is "not behind": that is what tells
-        // the next run it already asked today, and stops a check per launch.
-        save({
-          checkedAt: now,
-          behind: Boolean(v.behind),
-          required: v.required || null,
-          latest: v.latest || null,
-          downloadUrl: v.downloadUrl || '',
-          reason: v.reason || null,
-        });
-      })
-      .catch(() => {});
-  }
-
-  return {
-    behind: Boolean(c.behind),
-    latest: c.latest || null,
-    required: c.required || null,
-    downloadUrl: c.downloadUrl || '',
-  };
-}
-
-/**
- * The line for the welcome box when the SERVER says this build is too old.
- *
- * Distinct from `updateLine` on purpose: "a newer release exists" and "the
- * server will refuse you" are different urgency, and only the second one means
- * the app is about to stop working. Says where to get it, because a user who
- * is being cut off needs a destination, not a version number.
- */
-function serverUpdateLine({ behind, latest, required, downloadUrl } = {}) {
-  if (!behind) return null;
-  const target = latest || required || '';
-  const head = target
-    ? `This build is no longer served — update to v${target}.`
-    : 'This build is no longer served — update to the latest release.';
-  const where = downloadUrl ? `  ${downloadUrl}` : '';
-  return `${head}${where}`;
-}
-
-module.exports = {
-  isNewer,
-  fetchLatest,
-  fetchLatestDetailed,
-  fetchServerVersion,
-  fetchServerVersionDetailed,
-  serverUpdateVerdict,
-  serverNotice,
-  serverUpdateLine,
-  isTransientReason,
-  updateNotice,
-  checkPublished,
-  updatePlan,
-  updateLine,
-  detectInstallMethod,
-  APPLIERS,
-  PKG,
-  CHECK_INTERVAL_MS,
-  REASONS,
-  DEFAULT_API_BASE,
-};
+const https=require("node:https"),fs=require("node:fs");let platformHelpers=null;try{platformHelpers=require("./platform.js")}catch{platformHelpers=null}const REGISTRY="https://registry.npmjs.org",PKG="aegiscode",CHECK_INTERVAL_MS=864e5,TIMEOUT_MS=2500;function isNewer(e,t){const n=e=>String(e||"").trim().replace(/^v/,"").split("-")[0].split(".").map((e=>Number.parseInt(e,10)||0)),r=n(e),s=n(t);for(let e=0;e<Math.max(r.length,s.length);e++){const t=r[e]||0,n=s[e]||0;if(t!==n)return t>n}return!1}const REASONS=Object.freeze({TIMEOUT:"timeout",NETWORK:"network",NOT_FOUND:"not-found",FORBIDDEN:"forbidden",HTTP:"http",MALFORMED:"malformed",TOO_LARGE:"too-large"});function isTransientReason(e,t=null){return e===REASONS.TIMEOUT||e===REASONS.NETWORK||e===REASONS.HTTP&&(!t||t>=500||429===t)}function fetchLatestDetailed({pkg:e=PKG,timeoutMs:t=TIMEOUT_MS}={}){return new Promise((n=>{let r=!1;const s=e=>{r||(r=!0,n(e))},l=(e,t=null)=>s({ok:!1,latest:null,reason:e,status:t});try{const n=https.get(`${REGISTRY}/${e}`,{headers:{accept:"application/vnd.npm.install-v1+json"},timeout:t},(e=>{const t=e.statusCode;if(200!==t)return e.resume(),l(404===t?REASONS.NOT_FOUND:401===t||403===t?REASONS.FORBIDDEN:REASONS.HTTP,t);let r="";e.setEncoding("utf8"),e.on("data",(e=>{r+=e,r.length>2e6&&(n.destroy(),l(REASONS.TOO_LARGE,t))})),e.on("end",(()=>{try{const e=JSON.parse(r)["dist-tags"],n=e&&e.latest||null;if(!n)return l(REASONS.MALFORMED,t);(e=>{s({ok:!0,latest:e,reason:null,status:200})})(n)}catch{l(REASONS.MALFORMED,t)}}))}));n.on("timeout",(()=>{n.destroy(),l(REASONS.TIMEOUT)})),n.on("error",(()=>l(REASONS.NETWORK)))}catch{l(REASONS.NETWORK)}}))}function fetchLatest(e={}){return fetchLatestDetailed(e).then((e=>e.ok?e.latest:null))}const DEFAULT_API_BASE="https://aegiscloud.org",VERSION_BODY_CAP=65536;function fetchServerVersionDetailed({base:e=DEFAULT_API_BASE,clientVersion:t=null,timeoutMs:n=TIMEOUT_MS,getImpl:r=null}={}){return new Promise((s=>{let l=!1;const o=e=>{l||(l=!0,s(e))},a=(e,t=null)=>o({ok:!1,minClient:null,latestCli:null,latestDesktop:null,upgradeRequired:null,downloadUrl:"",reason:e,status:t}),i=(e,n)=>{const r=e&&"string"==typeof e.min_client?e.min_client:null;if(!r)return a(REASONS.MALFORMED,n);o({ok:!0,minClient:r,latestCli:"string"==typeof e.latest_cli?e.latest_cli:"",latestDesktop:"string"==typeof e.latest_desktop?e.latest_desktop:"",upgradeRequired:t&&"boolean"==typeof e.upgrade_required?e.upgrade_required:null,downloadUrl:"string"==typeof e.download_url?e.download_url:"",reason:null,status:n})};try{const s=`${String(e||DEFAULT_API_BASE).replace(/\/+$/,"")}/api/v1/version`,o={accept:"application/json"};t&&(o["X-AEGIS-Version"]=String(t));const c=e=>{const t=e.statusCode;if(200!==t)return e.resume(),a(404===t?REASONS.NOT_FOUND:401===t||403===t?REASONS.FORBIDDEN:REASONS.HTTP,t);let n="";e.setEncoding("utf8"),e.on("data",(r=>{n+=r,n.length>VERSION_BODY_CAP&&(e.destroy(),a(REASONS.TOO_LARGE,t))})),e.on("end",(()=>{if(!l)try{i(JSON.parse(n),t)}catch{a(REASONS.MALFORMED,t)}}))};if("function"==typeof r)return void Promise.resolve(r({url:s,headers:o,timeoutMs:n})).then((e=>{const t=e&&null!=e.status?e.status:0;if(!t)return a(REASONS.NETWORK);if(200!==t)return a(404===t?REASONS.NOT_FOUND:401===t||403===t?REASONS.FORBIDDEN:REASONS.HTTP,t);const n=e&&"string"==typeof e.text?e.text:"";if(n.length>VERSION_BODY_CAP)return a(REASONS.TOO_LARGE,t);try{i(JSON.parse(n),t)}catch{a(REASONS.MALFORMED,t)}})).catch((()=>a(REASONS.NETWORK)));const u=require(/^http:\/\//i.test(s)?"node:http":"node:https").get(s,{headers:o,timeout:n},c);u.on("timeout",(()=>{u.destroy(),a(REASONS.TIMEOUT)})),u.on("error",(()=>a(REASONS.NETWORK)))}catch{a(REASONS.NETWORK)}}))}function fetchServerVersion(e={}){return fetchServerVersionDetailed(e).then((e=>e.ok?e.minClient:null))}async function serverUpdateVerdict({current:e,base:t=DEFAULT_API_BASE,timeoutMs:n=TIMEOUT_MS,getImpl:r=null}={}){const s=await fetchServerVersionDetailed({base:t,clientVersion:e,timeoutMs:n,getImpl:r});if(!s.ok)return{ok:!1,behind:!1,latest:null,required:null,downloadUrl:"",reason:s.reason,status:s.status};const l=s.minClient||null,o=!0===s.upgradeRequired||!1!==s.upgradeRequired&&!!l&&isNewer(l,e);return{ok:!0,behind:o,latest:o&&(s.latestCli||s.latestDesktop)||l,latestCli:s.latestCli,latestDesktop:s.latestDesktop,required:l,downloadUrl:s.downloadUrl,reason:null,status:s.status}}function updateNotice({current:e,cache:t,save:n,now:r=Date.now(),fetchImpl:s=fetchLatest,intervalMs:l=864e5}={}){const o=t||{};"number"==typeof o.checkedAt&&r-o.checkedAt<l||Promise.resolve(s()).then((e=>{e&&"function"==typeof n&&n({checkedAt:r,latest:e})})).catch((()=>{}));const a=o.latest||null;return{latest:a,behind:!(!a||!isNewer(a,e))}}function installSpawn(e,t={}){if(!e||"string"!=typeof e.command||!e.command)return null;const n=t&&"object"==typeof t?t:{},r="string"==typeof n.platform&&n.platform?n.platform:process.platform,s=n.env&&"object"==typeof n.env?n.env:process.env,l=void 0===n.helpers?platformHelpers:n.helpers,o=Array.isArray(e.args)?e.args.map(String):[],a=[e.command,...o].join(" ");if("win32"===r){const e=l&&"function"==typeof l.shellSpec?l.shellSpec({platform:r,env:s}):{cmd:"cmd.exe",arg:"/d /s /c"};return{command:e.cmd,args:[...String(e.arg).split(" "),a],shell:!1,script:a}}let i=e.command;if(l&&"function"==typeof l.resolveExecutable)try{const t=l.resolveExecutable(e.command,{platform:r,env:s,..."function"==typeof n.exists?{exists:n.exists}:{}});t&&(i=t)}catch{}return{command:i,args:o.slice(),shell:!1,script:a}}function updatePlan({current:e,latest:t,behind:n,channel:r="npm",pkg:s=PKG,method:l="npm"}={}){const o=String(null==e?"":e),a=t?String(t):null;if(!Boolean(n)||!Boolean(a))return{channel:r,method:l,current:o,latest:a,behind:!1,action:"none",applier:"none",instruction:null,apply:null};const i=APPLIERS[l]||APPLIERS.npm;return{channel:r,method:l,current:o,latest:a,behind:!0,action:i.action,applier:i.name,instruction:i.instruction(s),apply:i.apply?i.apply(s):null}}const APPLIERS=Object.freeze({npm:Object.freeze({name:"npm",action:"npm-update",instruction:e=>`npm i -g ${e}@latest`,apply:e=>({command:"npm",args:["i","-g",`${e}@latest`]})}),pip:Object.freeze({name:"pip",action:"pip-update",instruction:e=>`pip install -U ${e}`,apply:e=>({command:"win32"===process.platform?"python":"python3",args:["-m","pip","install","-U",e]})}),npx:Object.freeze({name:"none",action:"npx-update",instruction:()=>"already fetched fresh on every run — restart to pick up the new version",apply:null}),source:Object.freeze({name:"git",action:"source-update",instruction:()=>"git pull && npm ci   (this copy is a source checkout)",apply:null})});function detectInstallMethod({env:e={},argv:t=[],pkg:n=PKG,fileExists:r=(()=>!1),entry:s=""}={}){const l=String(e&&e.AEGIS_INSTALL_METHOD||"").trim().toLowerCase();if(l&&Object.prototype.hasOwnProperty.call(APPLIERS,l))return l;const o=t.map((e=>String(e))).join(" ");return/\bnpx\b/.test(o)||/_npx[\\/]/.test(o)||/_npx[\\/]/.test(s)?"npx":/[\\/]pipx[\\/]venvs[\\/]/.test(s)||/[\\/]site-packages[\\/]/.test(s)?"pip":/[\\/]node_modules[\\/]/.test(s)?"npm":r(".git")&&r("client/update.js")?"source":"npm"}async function checkPublished({current:e,cache:t,save:n,now:r=Date.now(),fetchImpl:s=fetchLatestDetailed,intervalMs:l=864e5,timeoutMs:o=TIMEOUT_MS,pkg:a=PKG}={}){const i=t||null;if(Boolean(i)&&"number"==typeof i.checkedAt&&r-i.checkedAt<l){const t=i.latest||null;return{ok:Boolean(t),latest:t,behind:!(!t||!isNewer(t,e)),reason:t?null:i.reason||null,status:t?200:null==i.status?null:i.status,cached:!0,checkedAt:i.checkedAt}}let c;try{c=await s({pkg:a,timeoutMs:o})}catch(e){c={ok:!1,latest:null,reason:REASONS.NETWORK,status:null,error:String(e&&e.message||e)}}const u={checkedAt:r,latest:c&&c.latest?c.latest:null,reason:c&&c.reason||null,status:c&&null!=c.status?c.status:null};if("function"==typeof n)try{n(u)}catch{}return{ok:Boolean(c&&c.ok&&c.latest),latest:u.latest,behind:!(!u.latest||!isNewer(u.latest,e)),reason:u.reason,status:u.status,cached:!1,checkedAt:r}}function updateLine({current:e,latest:t,behind:n,pkg:r=PKG,method:s="npm"}){const l=updatePlan({current:e,latest:t,behind:n,channel:"npm",pkg:r,method:s});if(!l.behind)return null;const o=`Update available: ${l.current} → ${l.latest}`;return l.apply?`${o}   run: ${l.instruction}`:`${o}   ${l.instruction}`}function serverNotice({current:e,cache:t,save:n,now:r=Date.now(),verdictImpl:s=serverUpdateVerdict,intervalMs:l=864e5}={}){const o=t||{};return"number"==typeof o.checkedAt&&r-o.checkedAt<l||Promise.resolve().then((()=>s({current:e}))).then((e=>{e&&"function"==typeof n&&n({checkedAt:r,behind:Boolean(e.behind),required:e.required||null,latest:e.latest||null,downloadUrl:e.downloadUrl||"",reason:e.reason||null})})).catch((()=>{})),{behind:Boolean(o.behind),latest:o.latest||null,required:o.required||null,downloadUrl:o.downloadUrl||""}}function serverUpdateLine({behind:e,latest:t,required:n,downloadUrl:r}={}){if(!e)return null;const s=t||n||"";return`${s?`This build is no longer served — update to v${s}.`:"This build is no longer served — update to the latest release."}${r?`  ${r}`:""}`}module.exports={isNewer:isNewer,fetchLatest:fetchLatest,fetchLatestDetailed:fetchLatestDetailed,fetchServerVersion:fetchServerVersion,fetchServerVersionDetailed:fetchServerVersionDetailed,serverUpdateVerdict:serverUpdateVerdict,serverNotice:serverNotice,serverUpdateLine:serverUpdateLine,isTransientReason:isTransientReason,updateNotice:updateNotice,checkPublished:checkPublished,updatePlan:updatePlan,installSpawn:installSpawn,updateLine:updateLine,detectInstallMethod:detectInstallMethod,APPLIERS:APPLIERS,PKG:PKG,CHECK_INTERVAL_MS:864e5,REASONS:REASONS,DEFAULT_API_BASE:DEFAULT_API_BASE};