balladeer 1.0.17 → 1.0.19

package/dist/self-update.js

@@ -1,6 +1,7 @@
 import { spawn } from "node:child_process";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { delimiter, dirname, join } from "node:path";
+import { older } from "./currency.js";
 import { HOOK_SPECIFIER } from "./release.js";
 import { configHome } from "./store.js";
 /**
@@ -24,10 +25,22 @@ import { configHome } from "./store.js";
  * and what happened is kept in a small state file the next hook fire reports
  * to the server, so a laptop that cannot update is visible on the scorecard
  * instead of looking merely behind.
+ *
+ * What changed on 1 October 2026, from Robert's own laptop: it stayed on
+ * 1.0.16 through two releases while in use all day. Two rules held it. Only a
+ * session start began an install, and his sessions run for days, so the hooks
+ * that did fire (a prompt, a subagent) never asked. And the day's stamp was
+ * one stamp for every version: an attempt toward 1.0.15 at 03:20 held back
+ * 1.0.17 until 03:20 the next day, though a manual update had already passed
+ * 1.0.15. Now any guidance hook fire can begin the install, and a release
+ * newer than the one the last attempt aimed at may begin one an hour after
+ * it, rather than a day.
  */
 const STAMP = "self-update.json";
 const STATE = "self-update-state.json";
 const DAY_MS = 24 * 60 * 60 * 1000;
+const HOUR_MS = 60 * 60 * 1000;
+const VERSION = /^\d{1,4}\.\d{1,4}\.\d{1,4}$/;
 /** Set on the child so the install it runs can record how it ended. */
 export const SELF_UPDATE_ENVIRONMENT = "BALLADEER_SELF_UPDATE";
 const STATE_PATTERN = /^(?:started|unstartable|installed|failed):[A-Za-z0-9._-]{1,40}$/;
@@ -37,18 +50,35 @@ function stampPath(environment) {
 function statePath(environment) {
     return join(configHome(environment), STATE);
 }
-function lastStarted(environment) {
+/** The last attempt: when it started and which release it aimed at, when it said. */
+function lastAttempt(environment) {
     const path = stampPath(environment);
     if (!existsSync(path))
-        return 0;
+        return { startedAt: 0 };
     try {
         const parsed = JSON.parse(readFileSync(path, "utf8"));
-        return typeof parsed.startedAt === "number" ? parsed.startedAt : 0;
+        const startedAt = typeof parsed.startedAt === "number" ? parsed.startedAt : 0;
+        return typeof parsed.toward === "string" && VERSION.test(parsed.toward)
+            ? { startedAt, toward: parsed.toward }
+            : { startedAt };
     }
     catch {
-        return 0;
+        return { startedAt: 0 };
     }
 }
+/**
+ * Whether an attempt toward `newer` may start now. Once a day toward the same
+ * release, so a laptop whose install keeps failing is not hammered; but a
+ * release newer than the last attempt's target is a new reason, and waits only
+ * an hour, so one stale attempt cannot hold back the next release for a day.
+ */
+function due(newer, last, now) {
+    const since = now - last.startedAt;
+    if (since >= DAY_MS)
+        return true;
+    const newerTarget = last.toward === undefined || older(last.toward, newer);
+    return newerTarget && since >= HOUR_MS;
+}
 function writePrivate(path, value, environment) {
     mkdirSync(configHome(environment), { recursive: true, mode: 0o700 });
     writeFileSync(path, JSON.stringify(value) + "\n", { mode: 0o600 });
@@ -109,17 +139,17 @@ function detached(command, args, environment) {
     return child.pid !== undefined;
 }
 /**
- * Start the update when the server named a newer release and none was
- * started today. Answers whether one was started, for the caller's own
+ * Start the update when the server named a newer release and an attempt
+ * toward it is due (`due`). Answers whether one was started, for the caller's own
  * record; the session hears nothing either way. A launch that could not start
- * leaves no stamp, so the next session start tries again rather than waiting
+ * leaves no stamp, so the next hook fire tries again rather than waiting
  * a day for the same failure.
  */
 export function startSelfUpdateIfDue(newer, deps) {
     if (newer === undefined)
         return false;
     const now = deps.now ?? Date.now;
-    if (now() - lastStarted(deps.environment) < DAY_MS)
+    if (!due(newer, lastAttempt(deps.environment), now()))
         return false;
     const launch = resolveLaunch(HOOK_SPECIFIER, deps.environment, deps.execPath, deps.exists);
     let started;

package/dist/wire.d.ts

@@ -5,14 +5,14 @@
  * runtime dependency at all: Node 22 builtins and global fetch, nothing else.
  * A contract test compares the scope list below against the server's.
  */
-export declare const CLI_VERSION = "1.0.17";
+export declare const CLI_VERSION = "1.0.19";
 export declare const CLI_INVOCATION = "npx -y balladeer@latest";
 export declare const CLIENT_HEADER = "x-balladeer-client";
 /** What the last background update came to: `started:1.0.17`, `installed:1.0.17`, `failed:exit-1`, `unstartable:launcher`. */
 export declare const UPDATE_STATE_HEADER = "x-balladeer-update-state";
 /** Which host's hook made this guidance fetch: `claude` or `codex`. */
 export declare const HOOK_HOST_HEADER = "x-balladeer-hook";
-export declare const CLIENT_HEADER_VALUE = "balladeer/1.0.17";
+export declare const CLIENT_HEADER_VALUE = "balladeer/1.0.19";
 export declare const DEFAULT_CONTROL_PLANE = "https://envelopes.balladeer.ai";
 export type DelegatedScope = "repository:enroll" | "agent:issue" | "ci:connect" | "workspace:invite" | "candidate:propose";
 export declare const DELEGATED_SCOPES: readonly DelegatedScope[];
@@ -729,7 +729,23 @@ export type JsonStep = Readonly<{
  * this machine, or judges still running when the time ran out. Verdicts
  * themselves are printed as `balladeer-judge-verdict/v1` objects.
  */
+/**
+ * What the push check's anchoring did before it selected promises: which it
+ * anchored, which it could not and why, what the calls cost and how many
+ * anchorings are left today on this laptop. `message` is the line a person
+ * reads.
+ */
  | Readonly<{
+    step: "anchors";
+    message: string;
+    anchored: readonly string[];
+    notAnchored: readonly Readonly<{
+        promiseId: string;
+        reason: string;
+    }>[];
+    tokens: number;
+    remainingToday: number;
+}> | Readonly<{
     step: "judge";
     status: "not_judged" | "still_judging" | "nothing_to_judge";
     reason: string;

package/dist/wire.js

@@ -5,7 +5,7 @@
  * runtime dependency at all: Node 22 builtins and global fetch, nothing else.
  * A contract test compares the scope list below against the server's.
  */
-export const CLI_VERSION = "1.0.17";
+export const CLI_VERSION = "1.0.19";
 export const CLI_INVOCATION = "npx -y balladeer@latest";
 export const CLIENT_HEADER = "x-balladeer-client";
 /** What the last background update came to: `started:1.0.17`, `installed:1.0.17`, `failed:exit-1`, `unstartable:launcher`. */

package/package.json

@@ -1,10 +1,15 @@
 {
   "name": "balladeer",
-  "version": "1.0.17",
+  "version": "1.0.19",
   "description": "Set up Balladeer from your terminal, or from a coding agent's.",
   "license": "Apache-2.0",
   "private": false,
-  "//": "repository and homepage are deliberately absent: the source repository is private, and a registry page linking somewhere a reader cannot open is worse than one that links nowhere. Add both when the repository is public, and delete this note when you do.",
+  "//": "repository names this private GitHub repository because npm trusted publishing requires it: the release workflow (.github/workflows/release.yml) publishes with no npm token and no passkey only when package.json's repository matches the repository the workflow runs in. Robert approved the registry page showing the repository name on 30 September 2026. homepage stays absent while the repository is private.",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Bobby-tables1/balladeer.git",
+    "directory": "packages/cli"
+  },
   "type": "module",
   "publishConfig": {
     "access": "public"