commandmate 0.10.4 → 0.11.1

package/dist/cli/commands/update.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAkBzE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgP9E"}
+{"version":3,"file":"update.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/update.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,EAA6B,KAAK,aAAa,EAAE,MAAM,UAAU,CAAC;AAuBzE;;;;GAIG;AACH,wBAAsB,aAAa,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAwP9E"}

package/dist/cli/commands/update.js

@@ -28,11 +28,16 @@ const install_context_1 = require("../utils/install-context");
 const env_setup_1 = require("../utils/env-setup");
 const daemon_factory_1 = require("../utils/daemon-factory");
 const npm_runner_1 = require("../utils/npm-runner");
+const npx_runner_1 = require("../utils/npx-runner");
 const semver_1 = require("../utils/semver");
 const health_check_1 = require("../utils/health-check");
 const worktree_servers_1 = require("../utils/worktree-servers");
 const prompt_1 = require("../utils/prompt");
 const api_client_1 = require("../utils/api-client");
+// Relative import (not '@/'): the CLI build has no path alias / tsc-alias step.
+// Only the abort paths of the npx relaunch touch this — success leaves the lock
+// to expire, exactly like the global flow (Issue #1395 §5.2).
+const update_lock_1 = require("../../lib/app-update/update-lock");
 const logger = new logger_1.CLILogger();
 /** npm package name (kept as a literal: never build it from a dynamic path) */
 const PACKAGE_NAME = 'commandmate';
@@ -43,7 +48,7 @@ const PACKAGE_NAME = 'commandmate';
  */
 async function updateCommand(options = {}) {
     try {
-        // --- Step 0: npx gate (Issue #1319) -------------------------------------
+        // --- Step 0: npx gate (Issue #1319 / #1395) -----------------------------
         // `npx commandmate` runs from the npx cache, which isGlobalInstall() reports
         // as global (Issue #1195). Without this gate step 1 lets a throwaway process
         // rewrite the user's global install, and step 8 then fails its own check by
@@ -51,6 +56,14 @@ async function updateCommand(options = {}) {
         // The gate covers --check too: "current version" under npx is whatever npx
         // happened to cache, which says nothing about the user's install.
         if ((0, install_context_1.isNpxExecution)()) {
+            // Issue #1395: the GUI update route spawns this with the hidden
+            // --relaunch-npx flag to actually update in place (fetch a fresh npx cache
+            // and relaunch the daemon from it). The bare user-facing `commandmate
+            // update` under npx stays the #1319 no-op (§6).
+            if (options.relaunchNpx) {
+                await runNpxSelfUpdate();
+                return;
+            }
             printNpxGuidance();
             process.exit(types_1.ExitCode.SUCCESS);
             return;
@@ -244,6 +257,134 @@ async function updateCommand(options = {}) {
         process.exit(types_1.ExitCode.UNEXPECTED_ERROR);
     }
 }
+/**
+ * npx in-place self-update orchestrator (Issue #1395, design §2.1).
+ *
+ * Runs detached from the server it replaces (the GUI route spawns it with
+ * `detached + unref`), so stopping the old daemon does not kill this process.
+ * The sequence is fail-fast: the new version is fetched and verified BEFORE the
+ * old daemon is stopped, so a stale/failed fetch aborts with zero downtime.
+ *
+ * Lock policy (§5.2): the route already holds the update lock. Abort paths here
+ * release it so a retry is not blocked for 10 minutes; a successful relaunch
+ * leaves it to expire, exactly like the global flow (a competing retry must not
+ * stop the freshly-started daemon). npx env hygiene lives inside npx-runner.
+ */
+async function runNpxSelfUpdate() {
+    // .env must exist and be loaded before status/auth resolution so the health
+    // check URL and token resolve correctly (mirrors step 6).
+    const envPath = (0, env_setup_1.getEnvPath)();
+    if (!(0, fs_1.existsSync)(envPath)) {
+        logger.error('No .env configuration was found, so the server cannot be relaunched.');
+        logger.info('Nothing was changed.');
+        printNpxManualRelaunch();
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.CONFIG_ERROR);
+        return;
+    }
+    (0, dotenv_1.config)({ path: envPath });
+    // Expected version = the registry's latest (honours the user's .npmrc).
+    const view = (0, npm_runner_1.viewLatestVersion)(PACKAGE_NAME);
+    if (!view.success || !view.version) {
+        logger.error(`Failed to query the npm registry: ${view.error ?? 'unknown error'}`);
+        logger.info('Nothing was changed. Check your network/npm configuration and try again.');
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.UPDATE_FAILED);
+        return;
+    }
+    const expected = view.version;
+    // --- Warmup + version verify BEFORE the stop (fail-fast, zero downtime) ----
+    logger.info(`Fetching ${PACKAGE_NAME}@latest via npx (this may take a minute)...`);
+    const warm = (0, npx_runner_1.warmNpxLatest)(PACKAGE_NAME);
+    if (!warm.success || !warm.version) {
+        logger.error(`Failed to fetch the latest version via npx: ${warm.error ?? 'unknown error'}`);
+        printNpxStaleGuidance();
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.UPDATE_FAILED);
+        return;
+    }
+    if (stripV(warm.version) !== stripV(expected)) {
+        logger.error(`npx returned v${warm.version} but the registry latest is v${expected} (a stale npx cache is likely).`);
+        printNpxStaleGuidance();
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.UPDATE_FAILED);
+        return;
+    }
+    // --- Stop the current daemon (a brief outage starts here) ------------------
+    const daemonManager = (0, daemon_factory_1.getDaemonManagerFactory)().create();
+    const wasRunning = await daemonManager.isRunning();
+    if (wasRunning) {
+        logger.info('Stopping the current server...');
+        const stopped = await daemonManager.stop();
+        if (!stopped) {
+            logger.error('Failed to stop the server. Update aborted (nothing was changed).');
+            logger.info(`Run "${PACKAGE_NAME} stop --force" and try again.`);
+            (0, update_lock_1.releaseUpdateLock)();
+            process.exit(types_1.ExitCode.STOP_FAILED);
+            return;
+        }
+        logger.success('Server stopped');
+    }
+    // --- Relaunch from the freshly-cached version ------------------------------
+    logger.info(`Starting ${PACKAGE_NAME}@latest from the npx cache...`);
+    const relaunch = (0, npx_runner_1.spawnNpxDaemon)(PACKAGE_NAME);
+    if (!relaunch.success) {
+        logger.error(`Failed to start the new server: ${relaunch.error ?? 'unknown error'}`);
+        // The old server was stopped, so it is down: release the lock so the user
+        // can retry immediately.
+        printNpxManualRelaunch();
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.START_FAILED);
+        return;
+    }
+    // (a) liveness is a precondition for the HTTP probe
+    if (!(await daemonManager.isRunning())) {
+        logger.error('The new server could not be detected after the relaunch.');
+        printNpxManualRelaunch();
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.START_FAILED);
+        return;
+    }
+    // (b) base URL comes from getStatus(), never re-derived here (D-13)
+    const status = await daemonManager.getStatus();
+    const baseUrl = status?.url;
+    if (!baseUrl) {
+        logger.error('The server started but its address could not be confirmed.');
+        printNpxManualRelaunch();
+        (0, update_lock_1.releaseUpdateLock)();
+        process.exit(types_1.ExitCode.START_FAILED);
+        return;
+    }
+    // Post-start version verify (belt-and-suspenders, §4.2). A mismatch is a
+    // warning, not a rollback: the new daemon is up and the GUI will reload onto
+    // whatever it is now running.
+    if (status?.version && stripV(status.version) !== stripV(expected)) {
+        logger.warn(`The running server reports v${status.version}, but v${expected} was expected. ` +
+            `Verify with "${PACKAGE_NAME} status".`);
+    }
+    // (c) poll until readiness is proven
+    logger.info('Waiting for the server to become ready...');
+    const readiness = await (0, health_check_1.waitForReady)(baseUrl, { token: (0, api_client_1.resolveAuthToken)() });
+    if (readiness === 'ready') {
+        logger.success(`CommandMate v${status?.version ?? expected} is ready at ${baseUrl}`);
+        printNpxPostUpdateNotes();
+        process.exit(types_1.ExitCode.SUCCESS);
+        return;
+    }
+    // (d) degrade: the server answers but readiness cannot be proven (auth/IP/TLS)
+    if (readiness === 'degraded') {
+        logger.warn('サーバは応答していますが、マイグレーション完了は確認できませんでした（認証有効時はトークンが必要です）。');
+        logger.info(`"${PACKAGE_NAME} status" で確認してください。`);
+        printNpxPostUpdateNotes();
+        process.exit(types_1.ExitCode.SUCCESS);
+        return;
+    }
+    // (e) timeout: the relaunch itself succeeded and the new daemon is up, so the
+    // lock is left to expire (a retry must not stop the fresh server).
+    logger.error('The server started but did not answer in time.');
+    printNpxManualRelaunch();
+    process.exit(types_1.ExitCode.START_FAILED);
+}
 /**
  * Read the version from the installed package.json.
  * @throws if package.json cannot be read or has no version
@@ -295,6 +436,42 @@ function printNpxGuidance() {
     console.log('(stop the server -> install -> restart).');
     console.log('');
 }
+/**
+ * Guidance when npx could not fetch the expected latest (Issue #1395).
+ * The old server is untouched, so this only tells the user how to retry.
+ */
+function printNpxStaleGuidance() {
+    console.log('');
+    console.log('The latest version could not be fetched cleanly (a stale npx cache is likely).');
+    console.log('Nothing was changed — the current server is still running.');
+    console.log('Try again in a moment, or clear the npx/npm cache first:');
+    console.log(`  npm cache clean --force`);
+    console.log(`  npx --yes --prefer-online ${PACKAGE_NAME}@latest`);
+    console.log('');
+}
+/**
+ * Guidance when the relaunch could not be completed/confirmed (Issue #1395).
+ * Under npx there is no global install to roll back to; the recovery path is to
+ * relaunch with npx by hand. Config/db under ~/.commandmate are preserved.
+ */
+function printNpxManualRelaunch() {
+    console.log('');
+    console.log('Finish the update by relaunching the server manually:');
+    console.log(`  npx ${PACKAGE_NAME}@latest`);
+    console.log('Your configuration and database under ~/.commandmate are preserved.');
+    console.log('');
+}
+/**
+ * Completion notes for the npx relaunch (Issue #1395 §7.2).
+ * Startup options are not fully re-derived from CLI flags after a relaunch, so
+ * point the user at status rather than asserting anything was lost/kept.
+ */
+function printNpxPostUpdateNotes() {
+    console.log('');
+    console.log('Note: 再起動後は .env と引き継がれた設定で起動しています。');
+    console.log(`  ${PACKAGE_NAME} status で稼働先（ポート等）を確認してください。`);
+    console.log('');
+}
 /**
  * Manual upgrade steps for non-global (development checkout) installs.
  *

package/dist/cli/program.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0DpC;;;;;;;GAOG;AACH,wBAAgB,YAAY,IAAI,OAAO,CA0JtC"}
+{"version":3,"file":"program.d.ts","sourceRoot":"","sources":["../../src/cli/program.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,OAAO,EAAU,MAAM,WAAW,CAAC;AA0D5C;;;;;;;GAOG;AACH,wBAAgB,YAAY,IAAI,OAAO,CAkKtC"}

package/dist/cli/program.js

@@ -172,10 +172,16 @@ function buildProgram() {
         .description('Update CommandMate to the latest version')
         .option('--check', 'Only check for updates (no install, stop or restart)')
         .option('-y, --yes', 'Skip the confirmation prompt (required for non-interactive use)')
+        // Issue #1395: hidden — the GUI update route uses this to relaunch an
+        // npx-launched server from a fresh npx cache. Hidden so the user-facing
+        // `commandmate update` under npx stays a no-op (§6). Fixed argv, no request
+        // input reaches it (§5).
+        .addOption(new commander_1.Option('--relaunch-npx', 'Internal: relaunch an npx server from a fresh cache').hideHelp())
         .action(async (options) => {
         await (0, update_1.updateCommand)({
             check: options.check,
             yes: options.yes,
+            relaunchNpx: options.relaunchNpx,
         });
     });
     // Issue #264: issue/docs commands (addCommand pattern for subcommand support)

package/dist/cli/types/index.d.ts

@@ -89,6 +89,13 @@ export interface UpdateOptions {
     check?: boolean;
     /** Skip the confirmation prompt (required for non-interactive execution, D-2) */
     yes?: boolean;
+    /**
+     * Hidden flag (Issue #1395): under npx, stop the current daemon and relaunch it
+     * from a freshly-fetched `npx commandmate@latest` cache instead of the no-op
+     * guidance. Set only by the GUI update route; the bare user-facing
+     * `commandmate update` under npx stays a no-op (§6).
+     */
+    relaunchNpx?: boolean;
 }
 /**
  * Daemon process status

package/dist/cli/types/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,oBAAY,QAAQ;IAClB,OAAO,IAAI;IACX,gBAAgB,IAAI;IACpB,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB,WAAW,IAAI;IACf,8FAA8F;IAC9F,aAAa,IAAI;IACjB,gBAAgB,KAAK;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wBAAwB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,gFAAgF;IAChF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAC9C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wCAAwC;AACxC,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKtD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/cli/types/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH;;;GAGG;AACH,oBAAY,QAAQ;IAClB,OAAO,IAAI;IACX,gBAAgB,IAAI;IACpB,YAAY,IAAI;IAChB,YAAY,IAAI;IAChB,WAAW,IAAI;IACf,8FAA8F;IAC9F,aAAa,IAAI;IACjB,gBAAgB,KAAK;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,WAAW;IAC1B,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uCAAuC;IACvC,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,gCAAgC;IAChC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,wBAAwB;IACxB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,2BAA2B;IAC3B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,8DAA8D;IAC9D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iEAAiE;IACjE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gCAAgC;IAChC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gDAAgD;IAChD,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,iFAAiF;IACjF,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,qEAAqE;IACrE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,GAAG,CAAC,EAAE,OAAO,CAAC;IACd;;;;;OAKG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,8BAA8B;IAC9B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,qCAAqC;IACrC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,4CAA4C;IAC5C,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;IAC5B,gFAAgF;IAChF,IAAI,CAAC,EAAE,OAAO,CAAC;CAChB;AAED;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,uBAAuB;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,UAAU,EAAE,MAAM,CAAC;IACnB,0CAA0C;IAC1C,QAAQ,EAAE,OAAO,CAAC;IAClB,iCAAiC;IACjC,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,sBAAsB;IACtB,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,MAAM,EAAE,IAAI,GAAG,SAAS,GAAG,kBAAkB,CAAC;IAC9C,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,sDAAsD;IACtD,OAAO,EAAE,OAAO,CAAC;IACjB,oCAAoC;IACpC,OAAO,EAAE,gBAAgB,EAAE,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;CACvB;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,kDAAkD;IAClD,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY;;;;CAIf,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,OAAO,YAAY,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,sCAAsC;AACtC,MAAM,WAAW,SAAS;IACxB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,wFAAwF;IACxF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,WAAW;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kDAAkD;IAClD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,wFAAwF;IACxF,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED,wCAAwC;AACxC,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC;IAC7B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,2CAA2C;AAC3C,MAAM,WAAW,cAAc;IAC7B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wFAAwF;IACxF,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,4CAA4C;AAC5C,MAAM,WAAW,cAAc;IAC7B,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,gBAAgB;IAC/B,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,oDAAoD;IACpD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gFAAgF;IAChF,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,0CAA0C;IAC1C,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,mEAAmE;IACnE,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,cAAc;IAC7B,gEAAgE;IAChE,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,OAAO,CAAC;CACf;AAED,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKtD"}

package/dist/cli/utils/npx-runner.d.ts

@@ -0,0 +1,88 @@
+/**
+ * npx Execution Wrapper
+ * Issue #1395: GUI one-click self-update for npx-launched servers.
+ *
+ * The npx self-update fetches a fresh npx cache and relaunches the daemon from
+ * it (design §2.1), rather than mutating a global install (rejected Alt C). This
+ * module owns the two npx spawns and the env hygiene they need:
+ *
+ * - `warmNpxLatest`  — force-download the latest and read back its version, so
+ *   staleness can be caught *before* the old daemon is stopped (design §4.2).
+ * - `spawnNpxDaemon` — relaunch the server from the freshly-cached version.
+ * - `sanitizeNpxEnv` — strip the `npm_*` env a `npm run start` parent leaks, so
+ *   it cannot skew npx's registry/cache/prefix resolution (design §7.3).
+ *
+ * MF-SEC-1 (mirrors npm-runner): every command uses spawnSync with array args,
+ * never a shell string. `packageName` is always a literal constant supplied by
+ * the caller (update.ts PACKAGE_NAME) — never built from request input (§5).
+ *
+ * @module npx-runner
+ */
+/**
+ * Upper bound for the warmup download.
+ *
+ * The warmup runs *before* the old daemon is stopped, so hitting this bound
+ * aborts with zero downtime (design §4.2). Kept comfortably under the banner's
+ * UPDATE_TIMEOUT_MS (5 min, UpdateNotificationBanner.tsx) so a stalled download
+ * aborts and logs before the GUI gives up (design §8.2 / §9-8).
+ */
+export declare const NPX_WARMUP_TIMEOUT_MS: number;
+/** Result of the warmup + version query */
+export interface NpxWarmResult {
+    /** Whether the warmup succeeded and a version was read */
+    success: boolean;
+    /** Version reported by `<pkg> --version` (only when success) */
+    version?: string;
+    /** Human readable failure reason (only when !success) */
+    error?: string;
+}
+/** Result of the daemon relaunch */
+export interface NpxDaemonResult {
+    /** Whether the relaunch exited 0 */
+    success: boolean;
+    /** Exit status of the npx process (null when it never ran) */
+    status: number | null;
+    /** Human readable failure reason (only when !success) */
+    error?: string;
+}
+/**
+ * Build an env for an npx spawn with the leaked `npm_*` variables removed.
+ *
+ * A server started by `npm run start` carries `npm_config_*` / `npm_lifecycle_*`
+ * / `npm_package_*` in its env; those flow down the inherit chain into the npx
+ * call and npx reads `npm_config_*` as configuration, which would silently
+ * redirect its registry/cache/prefix (design §7.3). Everything else — notably
+ * `CM_*` (config continuity) and `PATH` (needed to locate npx) — passes through.
+ *
+ * @param env - Source env (defaults to the current process env)
+ * @returns A fresh env object with all `npm_*` keys removed
+ */
+export declare function sanitizeNpxEnv(env?: Record<string, string | undefined>): NodeJS.ProcessEnv;
+/**
+ * Force-fetch the latest published version via npx and read back its version.
+ *
+ * `npx --yes <pkg>@latest --version` downloads the latest into the npx cache
+ * (`--yes` suppresses the install prompt) and prints the package version;
+ * commander's `.version()` short-circuits before any command runs, so this has
+ * no side effects and starts no server (design §2.1). Running it before the
+ * stop lets a stale/failed fetch abort with zero downtime (design §4.2).
+ *
+ * @param packageName - Package name (a literal constant, e.g. `commandmate`)
+ * @returns The fetched version, or a classified failure
+ */
+export declare function warmNpxLatest(packageName: string): NpxWarmResult;
+/**
+ * Relaunch the server as a daemon from the freshly-cached npx version.
+ *
+ * `npx --yes <pkg>@latest start --daemon` runs the just-warmed package (so no
+ * new download) and spawns `npm run start` from the new cache dir; the npx
+ * process exits once the daemon is detached. `start --daemon` is used rather
+ * than the bare quickstart, which bails in a non-interactive process (design
+ * §2.1). The call blocks until npx exits, so the exit status is the relaunch
+ * outcome. Output is echoed so it lands in the update log.
+ *
+ * @param packageName - Package name (a literal constant, e.g. `commandmate`)
+ * @returns Success, or a classified failure carrying the exit status
+ */
+export declare function spawnNpxDaemon(packageName: string): NpxDaemonResult;
+//# sourceMappingURL=npx-runner.d.ts.map

package/dist/cli/utils/npx-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"npx-runner.d.ts","sourceRoot":"","sources":["../../../src/cli/utils/npx-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAIH;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAAgB,CAAC;AAEnD,2CAA2C;AAC3C,MAAM,WAAW,aAAa;IAC5B,0DAA0D;IAC1D,OAAO,EAAE,OAAO,CAAC;IACjB,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,oCAAoC;AACpC,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,OAAO,EAAE,OAAO,CAAC;IACjB,8DAA8D;IAC9D,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,cAAc,CAC5B,GAAG,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAe,GACpD,MAAM,CAAC,UAAU,CAWnB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,WAAW,EAAE,MAAM,GAAG,aAAa,CAoChE;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,eAAe,CAyCnE"}

package/dist/cli/utils/npx-runner.js

@@ -0,0 +1,165 @@
+"use strict";
+/**
+ * npx Execution Wrapper
+ * Issue #1395: GUI one-click self-update for npx-launched servers.
+ *
+ * The npx self-update fetches a fresh npx cache and relaunches the daemon from
+ * it (design §2.1), rather than mutating a global install (rejected Alt C). This
+ * module owns the two npx spawns and the env hygiene they need:
+ *
+ * - `warmNpxLatest`  — force-download the latest and read back its version, so
+ *   staleness can be caught *before* the old daemon is stopped (design §4.2).
+ * - `spawnNpxDaemon` — relaunch the server from the freshly-cached version.
+ * - `sanitizeNpxEnv` — strip the `npm_*` env a `npm run start` parent leaks, so
+ *   it cannot skew npx's registry/cache/prefix resolution (design §7.3).
+ *
+ * MF-SEC-1 (mirrors npm-runner): every command uses spawnSync with array args,
+ * never a shell string. `packageName` is always a literal constant supplied by
+ * the caller (update.ts PACKAGE_NAME) — never built from request input (§5).
+ *
+ * @module npx-runner
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.NPX_WARMUP_TIMEOUT_MS = void 0;
+exports.sanitizeNpxEnv = sanitizeNpxEnv;
+exports.warmNpxLatest = warmNpxLatest;
+exports.spawnNpxDaemon = spawnNpxDaemon;
+const child_process_1 = require("child_process");
+/**
+ * Upper bound for the warmup download.
+ *
+ * The warmup runs *before* the old daemon is stopped, so hitting this bound
+ * aborts with zero downtime (design §4.2). Kept comfortably under the banner's
+ * UPDATE_TIMEOUT_MS (5 min, UpdateNotificationBanner.tsx) so a stalled download
+ * aborts and logs before the GUI gives up (design §8.2 / §9-8).
+ */
+exports.NPX_WARMUP_TIMEOUT_MS = 3 * 60 * 1000;
+/**
+ * Build an env for an npx spawn with the leaked `npm_*` variables removed.
+ *
+ * A server started by `npm run start` carries `npm_config_*` / `npm_lifecycle_*`
+ * / `npm_package_*` in its env; those flow down the inherit chain into the npx
+ * call and npx reads `npm_config_*` as configuration, which would silently
+ * redirect its registry/cache/prefix (design §7.3). Everything else — notably
+ * `CM_*` (config continuity) and `PATH` (needed to locate npx) — passes through.
+ *
+ * @param env - Source env (defaults to the current process env)
+ * @returns A fresh env object with all `npm_*` keys removed
+ */
+function sanitizeNpxEnv(env = process.env) {
+    // Built as a plain record: the project augments ProcessEnv with a required
+    // NODE_ENV, so an empty ProcessEnv literal would not typecheck.
+    const clean = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (/^npm_/i.test(key)) {
+            continue;
+        }
+        clean[key] = value;
+    }
+    return clean;
+}
+/**
+ * Force-fetch the latest published version via npx and read back its version.
+ *
+ * `npx --yes <pkg>@latest --version` downloads the latest into the npx cache
+ * (`--yes` suppresses the install prompt) and prints the package version;
+ * commander's `.version()` short-circuits before any command runs, so this has
+ * no side effects and starts no server (design §2.1). Running it before the
+ * stop lets a stale/failed fetch abort with zero downtime (design §4.2).
+ *
+ * @param packageName - Package name (a literal constant, e.g. `commandmate`)
+ * @returns The fetched version, or a classified failure
+ */
+function warmNpxLatest(packageName) {
+    const result = (0, child_process_1.spawnSync)('npx', ['--yes', `${packageName}@latest`, '--version'], {
+        encoding: 'utf-8',
+        timeout: exports.NPX_WARMUP_TIMEOUT_MS,
+        env: sanitizeNpxEnv(),
+    });
+    if (result.error) {
+        const errnoError = result.error;
+        if (errnoError.code === 'ENOENT') {
+            return {
+                success: false,
+                error: 'npx command not found. Install Node.js/npm and try again.',
+            };
+        }
+        return { success: false, error: errnoError.message };
+    }
+    if (result.status !== 0) {
+        const stderr = readStream(result.stderr);
+        return {
+            success: false,
+            error: stderr || `npx exited with status ${String(result.status)}`,
+        };
+    }
+    const version = parseVersion(readStream(result.stdout));
+    if (!version) {
+        return { success: false, error: 'npx did not report a version' };
+    }
+    return { success: true, version };
+}
+/**
+ * Relaunch the server as a daemon from the freshly-cached npx version.
+ *
+ * `npx --yes <pkg>@latest start --daemon` runs the just-warmed package (so no
+ * new download) and spawns `npm run start` from the new cache dir; the npx
+ * process exits once the daemon is detached. `start --daemon` is used rather
+ * than the bare quickstart, which bails in a non-interactive process (design
+ * §2.1). The call blocks until npx exits, so the exit status is the relaunch
+ * outcome. Output is echoed so it lands in the update log.
+ *
+ * @param packageName - Package name (a literal constant, e.g. `commandmate`)
+ * @returns Success, or a classified failure carrying the exit status
+ */
+function spawnNpxDaemon(packageName) {
+    const result = (0, child_process_1.spawnSync)('npx', ['--yes', `${packageName}@latest`, 'start', '--daemon'], {
+        encoding: 'utf-8',
+        env: sanitizeNpxEnv(),
+    });
+    const stdout = readStream(result.stdout);
+    const stderr = readStream(result.stderr);
+    if (stdout) {
+        console.log(stdout);
+    }
+    if (stderr) {
+        console.error(stderr);
+    }
+    if (result.error) {
+        const errnoError = result.error;
+        if (errnoError.code === 'ENOENT') {
+            return {
+                success: false,
+                status: null,
+                error: 'npx command not found. Install Node.js/npm and try again.',
+            };
+        }
+        return { success: false, status: result.status, error: errnoError.message };
+    }
+    if (result.status !== 0) {
+        return {
+            success: false,
+            status: result.status,
+            error: stderr || `npx start exited with status ${String(result.status)}`,
+        };
+    }
+    return { success: true, status: 0 };
+}
+/**
+ * Extract the first semver-looking token from `--version` output.
+ * Robust against npx warning noise that may share the stream.
+ */
+function parseVersion(output) {
+    const match = output.match(/\b(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?)\b/);
+    return match ? match[1] : null;
+}
+/**
+ * Read a spawnSync stream as a trimmed string.
+ * `encoding: 'utf-8'` yields strings, but mocks/edge cases may yield null.
+ */
+function readStream(stream) {
+    if (typeof stream === 'string') {
+        return stream.trim();
+    }
+    return '';
+}

package/dist/lib/app-update/update-lock.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Update Lock
+ * Issue #1198: guard `POST /api/app/update` against concurrent self-updates.
+ *
+ * Design constraints:
+ * - Acquisition is a single O_EXCL create (mirrors PidManager.writePid), so two
+ *   concurrent requests cannot both win.
+ * - A successful update restarts the server, so nothing survives to release the
+ *   lock. Timeout expiry is therefore the primary release path, and
+ *   releaseUpdateLock() exists only for the spawn-failed case.
+ *
+ * @module lib/app-update/update-lock
+ */
+/** Lock file name inside the config directory */
+export declare const UPDATE_LOCK_FILENAME = "update.lock";
+/**
+ * Age after which a lock is considered abandoned.
+ * `commandmate update` takes tens of seconds (npm install dominates); 10 minutes
+ * is well clear of that while still recovering from a killed update process.
+ */
+export declare const UPDATE_LOCK_TIMEOUT_MS: number;
+/**
+ * Absolute path of the update lock file.
+ */
+export declare function getUpdateLockPath(): string;
+/**
+ * Take the update lock.
+ *
+ * @param now - Current epoch ms (injectable for tests)
+ * @returns true when the caller now holds the lock, false when an update is in progress
+ */
+export declare function acquireUpdateLock(now?: number): boolean;
+/**
+ * Drop the update lock.
+ * Only meaningful when the update never started (spawn failure): a started
+ * update replaces this process, so the lock outlives it until it expires.
+ */
+export declare function releaseUpdateLock(): void;
+//# sourceMappingURL=update-lock.d.ts.map

package/dist/lib/app-update/update-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-lock.d.ts","sourceRoot":"","sources":["../../../src/lib/app-update/update-lock.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AASH,iDAAiD;AACjD,eAAO,MAAM,oBAAoB,gBAAgB,CAAC;AAElD;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAUrD;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AA0CD;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO,CAoBnE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,IAAI,IAAI,CAMxC"}