carrick 0.3.84 → 0.3.86

package/dist/update.d.ts

@@ -0,0 +1,128 @@
+import { spawn } from "node:child_process";
+/** The registry's smallest answer to "what is published": a two-key document. */
+export declare const DIST_TAGS_URL = "https://registry.npmjs.org/-/package/carrick/dist-tags";
+/**
+ * How long an answer stands before another is fetched.
+ *
+ * Short enough that a morning's work does not run on yesterday's news — the
+ * incident was a customer on a three-release-old build for a whole morning —
+ * and long enough that a repository of hooks firing on every edit does not
+ * become registry traffic.
+ */
+export declare const CHECK_TTL_MS: number;
+/** The whole budget for a fetch, on the one path where it is synchronous. */
+export declare const FETCH_TIMEOUT_MS = 2000;
+/** What the last check learned. `latest` is null when it never got an answer. */
+export type UpdateState = {
+    checked_at: string;
+    latest: string | null;
+};
+export declare function updateStatePath(env?: NodeJS.ProcessEnv): string;
+/** True when the user has asked for no version checking at all. */
+export declare function suppressed(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * True on a build machine.
+ *
+ * `CI` is the convention every provider sets; `GITHUB_ACTIONS` additionally
+ * decides how a notice is spelled. CI never gets the background check: the
+ * machine is thrown away at the end of the job, so a cache written for the next
+ * invocation is a cache nobody reads.
+ */
+export declare function inCi(env?: NodeJS.ProcessEnv): boolean;
+/** This package's own version, which is the version a user is running. */
+export declare function currentVersion(root?: string): string | null;
+/**
+ * Whether `candidate` is a release a user should move to.
+ *
+ * Deliberately narrow: both sides must be a plain `x.y.z`, so a prerelease on
+ * either side answers false and nobody is ever nagged towards one. The
+ * registry's `latest` tag is a release by definition, and a scanner built from
+ * a checkout carries whatever `Cargo.toml` said, so the guard costs nothing and
+ * removes a whole class of wrong notice.
+ */
+export declare function isNewer(candidate: string, current: string): boolean;
+export declare function readUpdateState(env?: NodeJS.ProcessEnv): UpdateState | null;
+/**
+ * Replace the cache atomically, or do nothing.
+ *
+ * Returns whether the write landed, because the caller uses a failed write as
+ * its reason not to spawn a checker: a machine whose config directory cannot be
+ * written would otherwise fork a child on every single invocation forever.
+ */
+export declare function writeUpdateState(state: UpdateState, env?: NodeJS.ProcessEnv): boolean;
+export declare function isStale(state: UpdateState | null, now?: number): boolean;
+/** How this copy of the package got onto the machine, and the way out of it. */
+export type InstallShape = {
+    kind: "npx" | "volta" | "bun" | "pnpm" | "project" | "npm";
+    /** A command a person or an agent can run verbatim. */
+    command: string;
+    /** The manifest that pins it, when one does. Named so the fix is findable. */
+    manifest?: string;
+};
+/**
+ * The install shape, read off the path this file was loaded from.
+ *
+ * Nothing here runs a package manager or shells out: it is string work on an
+ * absolute path plus at most two small file reads, so it costs nothing and
+ * cannot hang. Every branch ends in a runnable command, and the ordering
+ * matters — a pnpm project install and a pnpm global install both sit under
+ * `.pnpm`, and only the enclosing manifest tells them apart.
+ */
+export declare function installShape(root?: string, env?: NodeJS.ProcessEnv): InstallShape;
+export type NoticeOptions = {
+    env?: NodeJS.ProcessEnv;
+    root?: string;
+};
+/**
+ * The one line a user sees, or null when there is nothing to say.
+ *
+ * It carries three things on purpose: the version running, the version
+ * published, and a command. The first two are the reporting half — a bug report
+ * that quotes this line names the build it came from — and the third is the
+ * only reason anybody acts on it. On GitHub Actions it is spelled as a workflow
+ * warning so it lands in the run's annotations rather than scrolling past in a
+ * multi-minute log, and it says plainly that the run continues on the old
+ * version: CI reproducibility means the workflow decides what runs, not us.
+ */
+export declare function updateNotice(current: string | null, latest: string | null, options?: NoticeOptions): string | null;
+/** One bounded GET of the registry's dist-tags, answering null on anything at all. */
+export declare function fetchLatest(fetchImpl?: typeof fetch, timeoutMs?: number): Promise<string | null>;
+/**
+ * Start a detached child to refresh the cache, if the cache is due a refresh.
+ *
+ * The parent stamps the cache with the current time BEFORE spawning, keeping
+ * whatever `latest` it already knew. That stamp is what makes a dead network
+ * cheap: the child can fail silently and no further invocation forks another
+ * one until the TTL comes round again. A stamp that cannot be written is the
+ * signal to spawn nothing at all.
+ *
+ * Returns whether a child was started, for the tests and for the log.
+ */
+export declare function scheduleUpdateCheck(env?: NodeJS.ProcessEnv, spawnImpl?: typeof spawn): boolean;
+/**
+ * The laptop path: print what the last check learned, then start the next one.
+ *
+ * Nothing is awaited, so the cost to the command is one file read and one
+ * `spawn` at most once every four hours.
+ */
+export declare function updateNoticeFromCache(env?: NodeJS.ProcessEnv): string | null;
+/**
+ * Whether this invocation is a scan.
+ *
+ * Only used to decide whether CI pays for a synchronous check: a two-second
+ * bound in front of a multi-minute scan is invisible, and in front of
+ * `carrick status` it is the whole command.
+ */
+export declare function isScanInvocation(argv: string[]): boolean;
+/**
+ * The CI path: one bounded fetch, in front of a scan only, warning and
+ * continuing.
+ *
+ * A build machine is thrown away at the end of the job, so the cached model a
+ * laptop uses would never get a second invocation to read it. This is the one
+ * place a check is on the critical path, and it is bounded at two seconds
+ * before work that takes minutes. It never refuses the run: CI's contract is
+ * that the workflow decides what runs, and a scanner that declined to start
+ * because a newer one exists would be a worse outage than the stale build.
+ */
+export declare function ciUpdateNotice(argv: string[], env?: NodeJS.ProcessEnv, fetchImpl?: typeof fetch): Promise<string | null>;

package/dist/update.js

@@ -0,0 +1,398 @@
+// Telling a machine that the Carrick it is running is not the Carrick that is
+// published.
+//
+// `npx --yes carrick@latest` resolves fresh on every invocation, so it is never
+// the problem. An INSTALLED `carrick` is: `npm install -g carrick` is what the
+// README, the plugin docs and `carrick init` all tell people to run, and from
+// that moment the version on that machine is frozen until someone remembers to
+// bump it. A pilot customer ran a scan on a build three releases old and it
+// failed on a defect that was already fixed; the same morning two versions were
+// live on one machine, which is what a stale global install beside a fresh npx
+// looks like.
+//
+// The design this file implements, and why, is
+// `docs/reference/update-check.md`.
+//
+// Four properties it must not lose:
+//
+//  1. **Fail open.** No network, a 500, a rate limit, a corrupt cache, an
+//     unwritable config directory — every one of them yields no output and
+//     changes nothing. A scan must never fail because a registry did.
+//  2. **No latency.** On a laptop the invocation reads one small file and
+//     prints from it; the fetch happens in a detached child whose answer the
+//     NEXT invocation reads. One run's lag after a release, and zero
+//     milliseconds on the path a person waits on.
+//  3. **It never changes what runs.** The notice names the exact command for
+//     the install shape it detected. Nothing here installs anything. The
+//     reasoning is in the doc: we do not own the install location (npm global,
+//     pnpm, bun, volta, an npx cache, a devDependency), and a self-update that
+//     guesses wrong leaves two Carricks on one machine — which is the incident
+//     this exists to prevent, not a fix for it.
+//  4. **Suppressible.** `CARRICK_NO_UPDATE_CHECK=1` turns the whole thing off,
+//     for a reproducible run or an air-gapped machine.
+import fs from "node:fs";
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { configDir } from "./auth/credentials.js";
+import { packageRoot } from "./native.js";
+/** The registry's smallest answer to "what is published": a two-key document. */
+export const DIST_TAGS_URL = "https://registry.npmjs.org/-/package/carrick/dist-tags";
+/**
+ * How long an answer stands before another is fetched.
+ *
+ * Short enough that a morning's work does not run on yesterday's news — the
+ * incident was a customer on a three-release-old build for a whole morning —
+ * and long enough that a repository of hooks firing on every edit does not
+ * become registry traffic.
+ */
+export const CHECK_TTL_MS = 4 * 60 * 60 * 1000;
+/** The whole budget for a fetch, on the one path where it is synchronous. */
+export const FETCH_TIMEOUT_MS = 2000;
+export function updateStatePath(env = process.env) {
+    return path.join(configDir(env), "update-check.json");
+}
+/** True when the user has asked for no version checking at all. */
+export function suppressed(env = process.env) {
+    const raw = env["CARRICK_NO_UPDATE_CHECK"];
+    return raw !== undefined && raw !== "" && raw !== "0" && raw !== "false";
+}
+/**
+ * True on a build machine.
+ *
+ * `CI` is the convention every provider sets; `GITHUB_ACTIONS` additionally
+ * decides how a notice is spelled. CI never gets the background check: the
+ * machine is thrown away at the end of the job, so a cache written for the next
+ * invocation is a cache nobody reads.
+ */
+export function inCi(env = process.env) {
+    return env["CI"] === "true" || env["CI"] === "1" || Boolean(env["GITHUB_ACTIONS"]);
+}
+/** This package's own version, which is the version a user is running. */
+export function currentVersion(root = packageRoot()) {
+    try {
+        const manifest = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
+        return typeof manifest.version === "string" ? manifest.version : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Whether `candidate` is a release a user should move to.
+ *
+ * Deliberately narrow: both sides must be a plain `x.y.z`, so a prerelease on
+ * either side answers false and nobody is ever nagged towards one. The
+ * registry's `latest` tag is a release by definition, and a scanner built from
+ * a checkout carries whatever `Cargo.toml` said, so the guard costs nothing and
+ * removes a whole class of wrong notice.
+ */
+export function isNewer(candidate, current) {
+    const parse = (value) => {
+        const match = /^(\d+)\.(\d+)\.(\d+)$/.exec(value.trim());
+        return match ? [Number(match[1]), Number(match[2]), Number(match[3])] : null;
+    };
+    const a = parse(candidate);
+    const b = parse(current);
+    if (!a || !b)
+        return false;
+    for (let index = 0; index < 3; index += 1) {
+        if (a[index] > b[index])
+            return true;
+        if (a[index] < b[index])
+            return false;
+    }
+    return false;
+}
+export function readUpdateState(env = process.env) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(updateStatePath(env), "utf8"));
+        if (typeof parsed?.checked_at !== "string")
+            return null;
+        const latest = typeof parsed.latest === "string" ? parsed.latest : null;
+        return { checked_at: parsed.checked_at, latest };
+    }
+    catch {
+        // Absent, unreadable, or not the shape this build writes. All three mean
+        // "nothing is known", which is a state this file already handles.
+        return null;
+    }
+}
+/**
+ * Replace the cache atomically, or do nothing.
+ *
+ * Returns whether the write landed, because the caller uses a failed write as
+ * its reason not to spawn a checker: a machine whose config directory cannot be
+ * written would otherwise fork a child on every single invocation forever.
+ */
+export function writeUpdateState(state, env = process.env) {
+    const target = updateStatePath(env);
+    const temporary = `${target}.${process.pid}.tmp`;
+    try {
+        fs.mkdirSync(path.dirname(target), { recursive: true });
+        fs.writeFileSync(temporary, `${JSON.stringify(state)}\n`, { mode: 0o600 });
+        fs.renameSync(temporary, target);
+        return true;
+    }
+    catch {
+        try {
+            fs.unlinkSync(temporary);
+        }
+        catch {
+            // The temporary file is the one thing here worth tidying, and failing to
+            // tidy it is still not a reason to say anything to anybody.
+        }
+        return false;
+    }
+}
+export function isStale(state, now = Date.now()) {
+    if (!state)
+        return true;
+    const at = Date.parse(state.checked_at);
+    if (!Number.isFinite(at))
+        return true;
+    // A clock that moved backwards (a VM restored, a timezone fixed) reads as
+    // stale rather than as "checked in the future, wait four hours".
+    return now - at >= CHECK_TTL_MS || at > now;
+}
+function readJson(file) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, "utf8"));
+        return parsed && typeof parsed === "object" ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+function dependsOnCarrick(manifest) {
+    for (const field of ["dependencies", "devDependencies", "optionalDependencies"]) {
+        const block = manifest[field];
+        if (block && typeof block === "object" && "carrick" in block)
+            return true;
+    }
+    return false;
+}
+/**
+ * The install shape, read off the path this file was loaded from.
+ *
+ * Nothing here runs a package manager or shells out: it is string work on an
+ * absolute path plus at most two small file reads, so it costs nothing and
+ * cannot hang. Every branch ends in a runnable command, and the ordering
+ * matters — a pnpm project install and a pnpm global install both sit under
+ * `.pnpm`, and only the enclosing manifest tells them apart.
+ */
+export function installShape(root = packageRoot(), env = process.env) {
+    const normalized = root.split(path.sep).join("/");
+    const segments = `/${normalized}/`;
+    // npx keeps each resolved tree under a content-addressed directory and reuses
+    // it, so a bare `npx carrick` is as frozen as a global install. `@latest` is
+    // the whole fix, and it is the fix for the next invocation too.
+    if (segments.includes("/_npx/")) {
+        return { kind: "npx", command: "npx --yes carrick@latest" };
+    }
+    if (segments.includes("/.volta/")) {
+        return { kind: "volta", command: "volta install carrick@latest" };
+    }
+    if (segments.includes("/.bun/")) {
+        return { kind: "bun", command: "bun add -g carrick@latest" };
+    }
+    // pnpm's global root is a real project directory with a real manifest that
+    // lists what was installed into it, so it has to be recognised before the
+    // project branch below would claim it.
+    if (segments.includes("/pnpm/global/")) {
+        return { kind: "pnpm", command: "pnpm add -g carrick@latest" };
+    }
+    // Everything below the OUTERMOST `node_modules` belongs to whatever encloses
+    // it. For a project install that is the repository; for `npm -g` it is the
+    // prefix directory, which has no manifest, so the project branch declines and
+    // the global default answers.
+    const outer = normalized.split("/node_modules/")[0];
+    if (outer && outer !== normalized) {
+        const manifestPath = path.join(outer.split("/").join(path.sep), "package.json");
+        const manifest = readJson(manifestPath);
+        if (manifest && dependsOnCarrick(manifest)) {
+            const has = (name) => fs.existsSync(path.join(outer.split("/").join(path.sep), name));
+            const command = has("pnpm-lock.yaml")
+                ? "pnpm add -D carrick@latest"
+                : has("yarn.lock")
+                    ? "yarn add -D carrick@latest"
+                    : has("bun.lockb") || has("bun.lock")
+                        ? "bun add -d carrick@latest"
+                        : "npm install -D carrick@latest";
+            return { kind: "project", command, manifest: manifestPath };
+        }
+    }
+    void env;
+    return { kind: "npm", command: "npm install -g carrick@latest" };
+}
+/**
+ * The one line a user sees, or null when there is nothing to say.
+ *
+ * It carries three things on purpose: the version running, the version
+ * published, and a command. The first two are the reporting half — a bug report
+ * that quotes this line names the build it came from — and the third is the
+ * only reason anybody acts on it. On GitHub Actions it is spelled as a workflow
+ * warning so it lands in the run's annotations rather than scrolling past in a
+ * multi-minute log, and it says plainly that the run continues on the old
+ * version: CI reproducibility means the workflow decides what runs, not us.
+ */
+export function updateNotice(current, latest, options = {}) {
+    const env = options.env ?? process.env;
+    if (!current || !latest)
+        return null;
+    if (!isNewer(latest, current))
+        return null;
+    if (env["GITHUB_ACTIONS"]) {
+        const head = `::warning::Carrick ${current} is running here and ${latest} is published. ` +
+            `This run continues on ${current} — nothing was changed. `;
+        // Two different fixes, and naming the wrong one sends a reader to a line
+        // their workflow does not contain. The runner sets
+        // GITHUB_ACTION_REPOSITORY for a step that belongs to an action, so a run
+        // through the Carrick action says so: there, the version comes from the
+        // action checkout's own Cargo.toml, and the ref is the only thing the
+        // workflow chose. A workflow that calls the CLI directly wrote a version
+        // string, and that is what it has to change.
+        if ((env["GITHUB_ACTION_REPOSITORY"] ?? "").endsWith("/carrick")) {
+            return `${head}This workflow pins the Carrick action to a ref that does not move; use \`carrick-tools/carrick@v1\`, which moves to each release.`;
+        }
+        return `${head}Run \`carrick@latest\`, or ${latest}, so the next run is not on a build with defects already fixed.`;
+    }
+    const shape = installShape(options.root ?? packageRoot(), env);
+    const where = shape.manifest ? ` (pinned in ${shape.manifest})` : "";
+    // No mention of CARRICK_NO_UPDATE_CHECK here. This line is read by agents as
+    // well as people — the session-start hook puts it on stdout, straight into
+    // the session — and the failure this exists for is an agent that does not
+    // upgrade. Handing it an off switch in the same sentence as the fix invites
+    // the wrong one. The variable is documented in `carrick --help` and in the
+    // package README, where a person reads it.
+    return (`carrick ${current} is installed${where} and ${latest} is published. ` +
+        `Update with \`${shape.command}\` — a scan on an older build can fail on defects that are already fixed.`);
+}
+/** One bounded GET of the registry's dist-tags, answering null on anything at all. */
+export async function fetchLatest(fetchImpl = fetch, timeoutMs = FETCH_TIMEOUT_MS) {
+    try {
+        const response = await fetchImpl(DIST_TAGS_URL, {
+            signal: AbortSignal.timeout(timeoutMs),
+            headers: { accept: "application/json" },
+        });
+        if (!response.ok)
+            return null;
+        const body = (await response.json());
+        const latest = body?.["latest"];
+        return typeof latest === "string" && /^\d+\.\d+\.\d+$/.test(latest) ? latest : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Start a detached child to refresh the cache, if the cache is due a refresh.
+ *
+ * The parent stamps the cache with the current time BEFORE spawning, keeping
+ * whatever `latest` it already knew. That stamp is what makes a dead network
+ * cheap: the child can fail silently and no further invocation forks another
+ * one until the TTL comes round again. A stamp that cannot be written is the
+ * signal to spawn nothing at all.
+ *
+ * Returns whether a child was started, for the tests and for the log.
+ */
+export function scheduleUpdateCheck(env = process.env, spawnImpl = spawn) {
+    if (suppressed(env) || inCi(env))
+        return false;
+    const state = readUpdateState(env);
+    if (!isStale(state))
+        return false;
+    if (!writeUpdateState({ checked_at: new Date().toISOString(), latest: state?.latest ?? null }, env)) {
+        return false;
+    }
+    try {
+        const child = spawnImpl(process.execPath, [fileURLToPath(new URL("./update-check.js", import.meta.url))], 
+        // `windowsHide` because a detached child on Windows gets its own console
+        // window otherwise, and win32-x64 is a platform this package publishes:
+        // a window flashing up once every four hours is not a version notice.
+        { detached: true, stdio: "ignore", env, windowsHide: true });
+        child.unref();
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The laptop path: print what the last check learned, then start the next one.
+ *
+ * Nothing is awaited, so the cost to the command is one file read and one
+ * `spawn` at most once every four hours.
+ */
+export function updateNoticeFromCache(env = process.env) {
+    if (suppressed(env))
+        return null;
+    const state = readUpdateState(env);
+    const notice = updateNotice(currentVersion(), state?.latest ?? null, { env });
+    scheduleUpdateCheck(env);
+    return notice;
+}
+/**
+ * Every command name this CLI answers: the binary's own
+ * (`src/local_mode/cli.rs`, `LOCAL_COMMANDS`) and this package's.
+ *
+ * Needed only to tell a command from a path. The scanner reads a first
+ * argument it does not recognise as a directory to scan, and that is the
+ * invocation this list exists to identify.
+ */
+const COMMANDS = new Set([
+    // The binary's.
+    "derive",
+    "index",
+    "refresh",
+    "resume",
+    "status",
+    "check",
+    "touch",
+    // This package's.
+    "login",
+    "logout",
+    "lsp",
+    "hook",
+    "init",
+    "remove",
+    "doctor",
+    "templates",
+]);
+/** The commands that pay for a model and take minutes. */
+const SCAN_COMMANDS = new Set(["index"]);
+/**
+ * Whether this invocation is a scan.
+ *
+ * Only used to decide whether CI pays for a synchronous check: a two-second
+ * bound in front of a multi-minute scan is invisible, and in front of
+ * `carrick status` it is the whole command.
+ */
+export function isScanInvocation(argv) {
+    const first = argv[0];
+    if (first === undefined)
+        return false;
+    if (first.startsWith("-"))
+        return false;
+    if (SCAN_COMMANDS.has(first))
+        return true;
+    return !COMMANDS.has(first);
+}
+/**
+ * The CI path: one bounded fetch, in front of a scan only, warning and
+ * continuing.
+ *
+ * A build machine is thrown away at the end of the job, so the cached model a
+ * laptop uses would never get a second invocation to read it. This is the one
+ * place a check is on the critical path, and it is bounded at two seconds
+ * before work that takes minutes. It never refuses the run: CI's contract is
+ * that the workflow decides what runs, and a scanner that declined to start
+ * because a newer one exists would be a worse outage than the stale build.
+ */
+export async function ciUpdateNotice(argv, env = process.env, fetchImpl = fetch) {
+    if (suppressed(env) || !inCi(env) || !isScanInvocation(argv))
+        return null;
+    const latest = await fetchLatest(fetchImpl);
+    return updateNotice(currentVersion(), latest, { env });
+}
+//# sourceMappingURL=update.js.map

package/dist/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","sourceRoot":"","sources":["../src/update.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,aAAa;AACb,EAAE;AACF,gFAAgF;AAChF,+EAA+E;AAC/E,8EAA8E;AAC9E,+EAA+E;AAC/E,4EAA4E;AAC5E,gFAAgF;AAChF,+EAA+E;AAC/E,cAAc;AACd,EAAE;AACF,+CAA+C;AAC/C,oCAAoC;AACpC,EAAE;AACF,oCAAoC;AACpC,EAAE;AACF,0EAA0E;AAC1E,2EAA2E;AAC3E,sEAAsE;AACtE,0EAA0E;AAC1E,6EAA6E;AAC7E,qEAAqE;AACrE,kDAAkD;AAClD,6EAA6E;AAC7E,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,+EAA+E;AAC/E,gDAAgD;AAChD,+EAA+E;AAC/E,uDAAuD;AAEvD,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,iFAAiF;AACjF,MAAM,CAAC,MAAM,aAAa,GAAG,wDAAwD,CAAC;AAEtF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE/C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAQrC,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,mBAAmB,CAAC,CAAC;AACxD,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,UAAU,CAAC,MAAyB,OAAO,CAAC,GAAG;IAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,OAAO,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,IAAI,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvD,OAAO,GAAG,CAAC,IAAI,CAAC,KAAK,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;AACrF,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,cAAc,CAAC,OAAe,WAAW,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACtF,OAAO,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,OAAe;IACxD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAmB,EAAE;QAC/C,MAAM,KAAK,GAAG,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACzD,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/E,CAAC,CAAC;IACF,MAAM,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,CAAC,KAAK,CAAE,GAAG,CAAC,CAAC,KAAK,CAAE;YAAE,OAAO,IAAI,CAAC;QACvC,IAAI,CAAC,CAAC,KAAK,CAAE,GAAG,CAAC,CAAC,KAAK,CAAE;YAAE,OAAO,KAAK,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,MAAyB,OAAO,CAAC,GAAG;IAClE,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACzE,IAAI,OAAO,MAAM,EAAE,UAAU,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACxD,MAAM,MAAM,GAAG,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACxE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,kEAAkE;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,MAAyB,OAAO,CAAC,GAAG;IACvF,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;IACjD,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACxD,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3E,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC;YACH,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,yEAAyE;YACzE,4DAA4D;QAC9D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,KAAyB,EAAE,MAAc,IAAI,CAAC,GAAG,EAAE;IACzE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,0EAA0E;IAC1E,iEAAiE;IACjE,OAAO,GAAG,GAAG,EAAE,IAAI,YAAY,IAAI,EAAE,GAAG,GAAG,CAAC;AAC9C,CAAC;AAWD,SAAS,QAAQ,CAAC,IAAY;IAC5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACzD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,QAAiC;IACzD,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,SAAS,IAAI,KAAK;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAe,WAAW,EAAE,EAC5B,MAAyB,OAAO,CAAC,GAAG;IAEpC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,MAAM,QAAQ,GAAG,IAAI,UAAU,GAAG,CAAC;IAEnC,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,0BAA0B,EAAE,CAAC;IAC9D,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,8BAA8B,EAAE,CAAC;IACpE,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;IAC/D,CAAC;IACD,2EAA2E;IAC3E,0EAA0E;IAC1E,uCAAuC;IACvC,IAAI,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QACvC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,4BAA4B,EAAE,CAAC;IACjE,CAAC;IAED,6EAA6E;IAC7E,2EAA2E;IAC3E,8EAA8E;IAC9E,8BAA8B;IAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,cAAc,CAAC,CAAC;QAChF,MAAM,QAAQ,GAAG,QAAQ,CAAC,YAAY,CAAC,CAAC;QACxC,IAAI,QAAQ,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,MAAM,GAAG,GAAG,CAAC,IAAY,EAAW,EAAE,CACpC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;YAClE,MAAM,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAC;gBACnC,CAAC,CAAC,4BAA4B;gBAC9B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;oBAChB,CAAC,CAAC,4BAA4B;oBAC9B,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC;wBACnC,CAAC,CAAC,2BAA2B;wBAC7B,CAAC,CAAC,+BAA+B,CAAC;YACxC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC;QAC9D,CAAC;IACH,CAAC;IAED,KAAK,GAAG,CAAC;IACT,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,+BAA+B,EAAE,CAAC;AACnE,CAAC;AAOD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAsB,EACtB,MAAqB,EACrB,UAAyB,EAAE;IAE3B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,IAAI,CAAC,OAAO,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,IAAI,GAAG,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GACR,sBAAsB,OAAO,wBAAwB,MAAM,iBAAiB;YAC5E,yBAAyB,OAAO,0BAA0B,CAAC;QAC7D,yEAAyE;QACzE,mDAAmD;QACnD,0EAA0E;QAC1E,wEAAwE;QACxE,sEAAsE;QACtE,yEAAyE;QACzE,6CAA6C;QAC7C,IAAI,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YACjE,OAAO,GAAG,IAAI,mIAAmI,CAAC;QACpJ,CAAC;QACD,OAAO,GAAG,IAAI,8BAA8B,MAAM,iEAAiE,CAAC;IACtH,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,EAAE,GAAG,CAAC,CAAC;IAC/D,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACrE,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,4EAA4E;IAC5E,2EAA2E;IAC3E,2CAA2C;IAC3C,OAAO,CACL,WAAW,OAAO,gBAAgB,KAAK,QAAQ,MAAM,iBAAiB;QACtE,iBAAiB,KAAK,CAAC,OAAO,2EAA2E,CAC1G,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,YAA0B,KAAK,EAC/B,YAAoB,gBAAgB;IAEpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,aAAa,EAAE;YAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,SAAS,CAAC;YACtC,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE;SACxC,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QAC9B,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA4B,CAAC;QAChE,MAAM,MAAM,GAAG,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC;QAChC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,MAAyB,OAAO,CAAC,GAAG,EACpC,YAA0B,KAAK;IAE/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAClC,IAAI,CAAC,gBAAgB,CAAC,EAAE,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC;QACpG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,SAAS,CACrB,OAAO,CAAC,QAAQ,EAChB,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,yEAAyE;QACzE,wEAAwE;QACxE,sEAAsE;QACtE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAC5D,CAAC;QACF,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACxE,IAAI,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACjC,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,YAAY,CAAC,cAAc,EAAE,EAAE,KAAK,EAAE,MAAM,IAAI,IAAI,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9E,mBAAmB,CAAC,GAAG,CAAC,CAAC;IACzB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC;IACvB,gBAAgB;IAChB,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,kBAAkB;IAClB,OAAO;IACP,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,0DAA0D;AAC1D,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;AAEzC;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAc;IAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACtB,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IACtC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,IAAc,EACd,MAAyB,OAAO,CAAC,GAAG,EACpC,YAA0B,KAAK;IAE/B,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1E,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IAC5C,OAAO,YAAY,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "carrick",
-  "version": "0.3.84",
+  "version": "0.3.86",
   "description": "The API contract index for a TypeScript workspace: what the other services do with the routes and calls in the file you are editing, in your editor and in your agent's context",
   "keywords": [
     "typescript",
@@ -41,7 +41,7 @@
     "LICENSE.md"
   ],
   "scripts": {
-    "test": "tsc --noEmit && npm run build && node --test 'test/**/*.test.ts'",
+    "test": "tsc --noEmit && npm run build && node --test --import=./test/no-update-check.mjs 'test/**/*.test.ts'",
     "typecheck": "tsc --noEmit",
     "selftest": "node test/selftest.ts",
     "bundle": "node scripts/bundle-sidecar.mjs",
@@ -58,11 +58,11 @@
     "zod": "^3.23.0"
   },
   "optionalDependencies": {
-    "@carrick-tools/cli-darwin-arm64": "0.3.84",
-    "@carrick-tools/cli-darwin-x64": "0.3.84",
-    "@carrick-tools/cli-linux-arm64": "0.3.84",
-    "@carrick-tools/cli-linux-x64": "0.3.84",
-    "@carrick-tools/cli-win32-x64": "0.3.84"
+    "@carrick-tools/cli-darwin-arm64": "0.3.86",
+    "@carrick-tools/cli-darwin-x64": "0.3.86",
+    "@carrick-tools/cli-linux-arm64": "0.3.86",
+    "@carrick-tools/cli-linux-x64": "0.3.86",
+    "@carrick-tools/cli-win32-x64": "0.3.86"
   },
   "devDependencies": {
     "@types/node": "^24.13.3",