flavor-code 1.3.17 → 1.3.19

package/README.md

@@ -75,6 +75,14 @@ flavor --resume -p "Continue the remaining work"
 
 Non-interactive mode refuses actions that require human approval and never hangs waiting for input.
 
+**4. Staying up to date**
+
+```bash
+flavor update
+```
+
+Flavor checks the npm registry at startup and shows an update hint on the welcome card. Run `flavor update` to upgrade the global install to the latest release, then restart Flavor.
+
 ## Configuring Models
 
 The fastest way is to set environment variables:

package/README.zh-CN.md

@@ -75,6 +75,14 @@ flavor --resume -p "继续完成剩余工作"
 
 非交互模式会拒绝需要人工审批的操作，不会悬挂等待输入。
 
+**4. 保持更新**
+
+```bash
+flavor update
+```
+
+Flavor 启动时会检查 npm registry，有新版本时在欢迎卡片中提示；运行 `flavor update` 即可一键升级到最新发行版，升级后重启 Flavor 生效。
+
 ## 配置模型
 
 最快的方式是设置环境变量：

package/dist/{app-VPS5QIRK.js → app-EVMUBQRE.js}

@@ -1,8 +1,9 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
 import {
+  checkForUpdate,
   statusPresentation
-} from "./chunk-2BF7CVWZ.js";
+} from "./chunk-7OICVL2M.js";
 import {
   COMMAND_DESCRIPTIONS,
   MVP_COMMANDS,
@@ -18,7 +19,7 @@ import {
   thinkingWindow,
   transcriptReducer,
   withTimeout
-} from "./chunk-BKOOYSGH.js";
+} from "./chunk-PF457XCH.js";
 import "./chunk-CIVPKHF4.js";
 import "./chunk-HJOCNKPN.js";
 import {
@@ -30,16 +31,15 @@ import {
   TerminalSizeContext,
   TerminalWriteContext,
   Text,
-  gt,
   instances_default,
-  isValidVersion,
   osc,
   shiftAnchor,
   stripAnsi,
   useStdout,
   use_app_default,
   use_input_default
-} from "./chunk-36UKDXPF.js";
+} from "./chunk-3HWWQV2A.js";
+import "./chunk-OTYFL4AG.js";
 import {
   execFileNoThrow
 } from "./chunk-RQTYHUMK.js";
@@ -1310,41 +1310,6 @@ function comparePaths(left, right) {
   return left.localeCompare(right, "en");
 }
 
-// src/update/check.ts
-var NPM_PACKAGE_NAME = "flavor-code";
-var REGISTRY_LATEST_URL = `https://registry.npmjs.org/${NPM_PACKAGE_NAME}/latest`;
-var DEFAULT_TIMEOUT_MS = 3e3;
-function findNewerVersion(current, latest) {
-  if (!isValidVersion(current) || !isValidVersion(latest)) return void 0;
-  return gt(latest, current) ? latest : void 0;
-}
-async function fetchLatestVersion(options = {}) {
-  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-  const fetchImpl = options.fetchImpl ?? ((url, init) => fetch(url, init));
-  let timer;
-  const timeout = new Promise((resolve2) => {
-    timer = setTimeout(() => resolve2(void 0), timeoutMs);
-    timer.unref?.();
-  });
-  try {
-    const response = await Promise.race([
-      fetchImpl(REGISTRY_LATEST_URL, { signal: AbortSignal.timeout(timeoutMs) }),
-      timeout
-    ]);
-    if (response === void 0 || !response.ok) return void 0;
-    const body = await Promise.race([response.json(), timeout]);
-    return typeof body?.version === "string" ? body.version : void 0;
-  } catch {
-    return void 0;
-  } finally {
-    if (timer !== void 0) clearTimeout(timer);
-  }
-}
-async function checkForUpdate(current, options = {}) {
-  const latest = await fetchLatestVersion(options);
-  return latest === void 0 ? void 0 : findNewerVersion(current, latest);
-}
-
 // src/ui/welcome.tsx
 import { jsx as jsx4, jsxs as jsxs3 } from "react/jsx-runtime";
 var WIDE_WELCOME_COLUMNS = 72;
@@ -1362,7 +1327,7 @@ function WelcomeCard({
   columns
 }) {
   const wide = Math.max(1, Math.floor(columns)) >= WIDE_WELCOME_COLUMNS;
-  const updateHint = updateTo === void 0 ? null : /* @__PURE__ */ jsxs3(Text, { color: "yellow", wrap: "truncate-end", children: [
+  const updateHint = updateTo === void 0 ? null : /* @__PURE__ */ jsxs3(Text, { color: "yellowBright", wrap: "truncate-end", children: [
     "\u25B2 ",
     "Update available: v",
     packageVersion(),
@@ -1370,8 +1335,7 @@ function WelcomeCard({
     "\u2192",
     " v",
     updateTo,
-    " \xB7 npm i -g ",
-    NPM_PACKAGE_NAME
+    " \xB7 run: flavor update"
   ] });
   return /* @__PURE__ */ jsx4(Box_default, { width: "100%", borderStyle: "round", borderColor: "yellow", paddingX: 1, children: wide ? /* @__PURE__ */ jsxs3(Box_default, { width: "100%", flexDirection: "row", children: [
     /* @__PURE__ */ jsxs3(

package/dist/{chunk-36UKDXPF.js → chunk-3HWWQV2A.js}

@@ -28547,15 +28547,6 @@ function terminalName() {
 }
 var env = { terminal: terminalName() };
 
-// src/utils/semver.ts
-import { gt as semverGt, gte as semverGte, valid as semverValid } from "semver";
-function gt(a, b) {
-  return semverGt(a, b, { loose: true });
-}
-function isValidVersion(value) {
-  return semverValid(value, { loose: true }) !== null;
-}
-
 // src/claude-ink/clearTerminal.ts
 var CURSOR_HOME_WINDOWS = csi(0, "f");
 function isWindowsTerminal() {
@@ -35495,8 +35486,6 @@ export {
   stripAnsi,
   ScrollBox_default,
   instances_default,
-  gt,
-  isValidVersion,
   osc,
   OSC2 as OSC,
   TerminalWriteContext,

package/dist/{chunk-RV3PTIQE.js → chunk-6LDYDQ3P.js}

@@ -4,7 +4,7 @@ import {
   message,
   redactErrorText,
   redactSecrets
-} from "./chunk-BKOOYSGH.js";
+} from "./chunk-PF457XCH.js";
 
 // src/rpc/server.ts
 import { createInterface } from "readline";

package/dist/{chunk-2BF7CVWZ.js → chunk-7OICVL2M.js}

@@ -1,5 +1,44 @@
 #!/usr/bin/env node
 import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
+import {
+  gt,
+  isValidVersion
+} from "./chunk-OTYFL4AG.js";
+
+// src/update/check.ts
+var NPM_PACKAGE_NAME = "flavor-code";
+var REGISTRY_LATEST_URL = `https://registry.npmjs.org/${NPM_PACKAGE_NAME}/latest`;
+var DEFAULT_TIMEOUT_MS = 3e3;
+function findNewerVersion(current, latest) {
+  if (!isValidVersion(current) || !isValidVersion(latest)) return void 0;
+  return gt(latest, current) ? latest : void 0;
+}
+async function fetchLatestVersion(options = {}) {
+  const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+  const fetchImpl = options.fetchImpl ?? ((url, init) => fetch(url, init));
+  let timer;
+  const timeout = new Promise((resolve) => {
+    timer = setTimeout(() => resolve(void 0), timeoutMs);
+    timer.unref?.();
+  });
+  try {
+    const response = await Promise.race([
+      fetchImpl(REGISTRY_LATEST_URL, { signal: AbortSignal.timeout(timeoutMs) }),
+      timeout
+    ]);
+    if (response === void 0 || !response.ok) return void 0;
+    const body = await Promise.race([response.json(), timeout]);
+    return typeof body?.version === "string" ? body.version : void 0;
+  } catch {
+    return void 0;
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+  }
+}
+async function checkForUpdate(current, options = {}) {
+  const latest = await fetchLatestVersion(options);
+  return latest === void 0 ? void 0 : findNewerVersion(current, latest);
+}
 
 // src/ui/task-progress-model.ts
 var FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
@@ -116,6 +155,9 @@ function stripSubagentPrefix(text, isSubagent) {
 }
 
 export {
+  NPM_PACKAGE_NAME,
+  fetchLatestVersion,
+  checkForUpdate,
   staticTaskLines,
   statusPresentation
 };

package/dist/chunk-OTYFL4AG.js

@@ -0,0 +1,16 @@
+#!/usr/bin/env node
+import { createRequire } from "node:module"; const require = createRequire(import.meta.url);
+
+// src/utils/semver.ts
+import { gt as semverGt, gte as semverGte, valid as semverValid } from "semver";
+function gt(a, b) {
+  return semverGt(a, b, { loose: true });
+}
+function isValidVersion(value) {
+  return semverValid(value, { loose: true }) !== null;
+}
+
+export {
+  gt,
+  isValidVersion
+};

package/dist/{chunk-BKOOYSGH.js → chunk-PF457XCH.js}

@@ -3616,6 +3616,7 @@ var HELP = [
   "/chat <alias-or-uuid> <goal>             send a task that starts on the receiving pal",
   "/co-work <pal> <goal> | status [id] | cancel <id> [reason]"
 ].join("\n");
+var MAX_STOP_DENIALS = 2;
 var FlavorSession = class {
   #services;
   #active;
@@ -3626,6 +3627,7 @@ var FlavorSession = class {
   #submissionTail = Promise.resolve();
   #coWorkEventTail = Promise.resolve();
   #pendingSubmissions = 0;
+  #stopDenials = 0;
   #closePromise;
   #queue = new AgentMessageQueue();
   #queuedSubmissions = { steer: [], followUp: [] };
@@ -3827,6 +3829,7 @@ var FlavorSession = class {
     return operation;
   }
   async #runSubmissionChain(initialSubmission) {
+    this.#stopDenials = 0;
     const pending = [initialSubmission];
     let initial = true;
     while (pending.length > 0) {
@@ -3920,8 +3923,9 @@ var FlavorSession = class {
         this.#active = void 0;
         this.#activeSubmission = void 0;
         if (submission.coWorkPlanningKey !== void 0) this.#finishActivePlanning(submission.coWorkPlanningKey);
+        let stopDecision;
         try {
-          await this.#services.hooks.emit({
+          stopDecision = await this.#services.hooks.emit({
             version: 1,
             type: "Stop",
             payload: {
@@ -3936,6 +3940,21 @@ var FlavorSession = class {
           } catch {
           }
         }
+        try {
+          if (stopDecision?.decision === "deny" && typeof stopDecision.reason === "string" && stopDecision.reason.length > 0 && !this.#closed && outcome !== "cancelled" && outcome !== "denied") {
+            if (this.#stopDenials < MAX_STOP_DENIALS) {
+              this.#stopDenials += 1;
+              const text = `[stop-guard] A Stop hook vetoed ending this turn (continuation ${this.#stopDenials}/${MAX_STOP_DENIALS}). It reported:
+${stopDecision.reason}
+Address this now (for example run the required verification or fix), then finish.`;
+              this.#enqueueMessage("followUp", { text, displayText: text });
+              this.#notice(`Stop hook requested continuation (${this.#stopDenials}/${MAX_STOP_DENIALS}).`);
+            } else {
+              this.#notice("Stop hook kept vetoing after the continuation budget; ending the turn anyway.");
+            }
+          }
+        } catch {
+        }
         this.#ackDurable(submission);
         this.#ackActiveSteering();
       }

package/dist/{claude-ink-AUZBJ3BE.js → claude-ink-3K3NG7BF.js}

@@ -10,7 +10,8 @@ import {
   useStdout,
   use_app_default,
   use_input_default
-} from "./chunk-36UKDXPF.js";
+} from "./chunk-3HWWQV2A.js";
+import "./chunk-OTYFL4AG.js";
 import "./chunk-RQTYHUMK.js";
 import "./chunk-S32JRDZK.js";
 export {

package/dist/cli-main.js

@@ -3,10 +3,12 @@ import { createRequire } from "node:module"; const require = createRequire(impor
 import {
   FlavorRpcServer,
   TraceRecorder
-} from "./chunk-RV3PTIQE.js";
+} from "./chunk-6LDYDQ3P.js";
 import {
+  NPM_PACKAGE_NAME,
+  fetchLatestVersion,
   staticTaskLines
-} from "./chunk-2BF7CVWZ.js";
+} from "./chunk-7OICVL2M.js";
 import {
   DEFAULT_MAX_OUTPUT_BYTES,
   MAX_ALIAS_LENGTH,
@@ -23,7 +25,7 @@ import {
   packageVersion,
   redactErrorText,
   runPalBroker
-} from "./chunk-BKOOYSGH.js";
+} from "./chunk-PF457XCH.js";
 import "./chunk-CIVPKHF4.js";
 import {
   McpServerConfigSchema,
@@ -34,6 +36,10 @@ import {
   setProjectSkillDisabled,
   updateProtectedFile
 } from "./chunk-HJOCNKPN.js";
+import {
+  gt,
+  isValidVersion
+} from "./chunk-OTYFL4AG.js";
 import "./chunk-RQTYHUMK.js";
 import "./chunk-S32JRDZK.js";
 
@@ -45,6 +51,31 @@ import { posix, resolve as resolve3 } from "path";
 import { fileURLToPath } from "url";
 import { Command, Option } from "commander";
 
+// src/update/apply.ts
+import { spawn } from "child_process";
+function npmExecutable(platform = process.platform) {
+  return platform === "win32" ? "npm.cmd" : "npm";
+}
+var defaultInstall = (command, args) => new Promise((resolve4, reject) => {
+  const child = spawn(command, args, { stdio: "inherit" });
+  child.on("error", reject);
+  child.on("close", (code) => resolve4(code));
+});
+async function runUpdate(options = {}) {
+  const current = options.current ?? packageVersion();
+  const latest = await fetchLatestVersion(options);
+  if (latest === void 0 || !isValidVersion(latest)) return { status: "check-failed", current };
+  if (!gt(latest, current)) return { status: "up-to-date", current, latest };
+  const install = options.install ?? defaultInstall;
+  let exitCode;
+  try {
+    exitCode = await install(npmExecutable(options.platform), ["install", "-g", `${NPM_PACKAGE_NAME}@${latest}`]);
+  } catch {
+    exitCode = null;
+  }
+  return exitCode === 0 ? { status: "updated", current, latest } : { status: "install-failed", current, latest, exitCode };
+}
+
 // src/utils/crash-guard.ts
 import { mkdirSync, writeFileSync } from "fs";
 import { join } from "path";
@@ -784,6 +815,34 @@ function createProgram(dependencies = {}) {
 `);
     } catch (error) {
       process.stderr.write(`init: ${safeError(error)}
+`);
+      process.exitCode = 1;
+    }
+  });
+  program.command("update").description(`Update the globally installed ${NPM_PACKAGE_NAME} to the latest npm release`).action(async () => {
+    try {
+      const outcome = await (dependencies.runUpdate ?? runUpdate)();
+      switch (outcome.status) {
+        case "up-to-date":
+          process.stdout.write(`${NPM_PACKAGE_NAME} is already up to date (v${outcome.current}).
+`);
+          break;
+        case "updated":
+          process.stdout.write(`Updated ${NPM_PACKAGE_NAME} v${outcome.current} \u2192 v${outcome.latest}. Restart flavor to use it.
+`);
+          break;
+        case "check-failed":
+          process.stderr.write("update: could not reach the npm registry to determine the latest version.\n");
+          process.exitCode = 1;
+          break;
+        case "install-failed":
+          process.stderr.write(`update: npm install failed${outcome.exitCode === null ? " (npm could not be started)" : ` with exit code ${outcome.exitCode}`}. Install manually with: npm i -g ${NPM_PACKAGE_NAME}
+`);
+          process.exitCode = 1;
+          break;
+      }
+    } catch (error) {
+      process.stderr.write(`update: ${safeError(error)}
 `);
       process.exitCode = 1;
     }
@@ -876,9 +935,9 @@ function createProgram(dependencies = {}) {
 }
 async function runInteractiveCli(props) {
   const [{ render, AlternateScreen }, { createElement }, { App }] = await Promise.all([
-    import("./claude-ink-AUZBJ3BE.js"),
+    import("./claude-ink-3K3NG7BF.js"),
     import("react"),
-    import("./app-VPS5QIRK.js")
+    import("./app-EVMUBQRE.js")
   ]);
   const instance = await render(createElement(
     AlternateScreen,

package/dist/desktop/main.js

@@ -21296,6 +21296,7 @@ var HELP = [
   "/chat <alias-or-uuid> <goal>             send a task that starts on the receiving pal",
   "/co-work <pal> <goal> | status [id] | cancel <id> [reason]"
 ].join("\n");
+var MAX_STOP_DENIALS = 2;
 var FlavorSession = class {
   #services;
   #active;
@@ -21306,6 +21307,7 @@ var FlavorSession = class {
   #submissionTail = Promise.resolve();
   #coWorkEventTail = Promise.resolve();
   #pendingSubmissions = 0;
+  #stopDenials = 0;
   #closePromise;
   #queue = new AgentMessageQueue();
   #queuedSubmissions = { steer: [], followUp: [] };
@@ -21507,6 +21509,7 @@ var FlavorSession = class {
     return operation;
   }
   async #runSubmissionChain(initialSubmission) {
+    this.#stopDenials = 0;
     const pending2 = [initialSubmission];
     let initial = true;
     while (pending2.length > 0) {
@@ -21600,8 +21603,9 @@ var FlavorSession = class {
         this.#active = void 0;
         this.#activeSubmission = void 0;
         if (submission.coWorkPlanningKey !== void 0) this.#finishActivePlanning(submission.coWorkPlanningKey);
+        let stopDecision;
         try {
-          await this.#services.hooks.emit({
+          stopDecision = await this.#services.hooks.emit({
             version: 1,
             type: "Stop",
             payload: {
@@ -21616,6 +21620,21 @@ var FlavorSession = class {
           } catch {
           }
         }
+        try {
+          if (stopDecision?.decision === "deny" && typeof stopDecision.reason === "string" && stopDecision.reason.length > 0 && !this.#closed && outcome !== "cancelled" && outcome !== "denied") {
+            if (this.#stopDenials < MAX_STOP_DENIALS) {
+              this.#stopDenials += 1;
+              const text = `[stop-guard] A Stop hook vetoed ending this turn (continuation ${this.#stopDenials}/${MAX_STOP_DENIALS}). It reported:
+${stopDecision.reason}
+Address this now (for example run the required verification or fix), then finish.`;
+              this.#enqueueMessage("followUp", { text, displayText: text });
+              this.#notice(`Stop hook requested continuation (${this.#stopDenials}/${MAX_STOP_DENIALS}).`);
+            } else {
+              this.#notice("Stop hook kept vetoing after the continuation budget; ending the turn anyway.");
+            }
+          }
+        } catch {
+        }
         this.#ackDurable(submission);
         this.#ackActiveSteering();
       }

package/dist/sdk/index.js

@@ -4,7 +4,7 @@ import {
   FlavorRpcServer,
   TraceRecordSchema,
   TraceRecorder
-} from "../chunk-RV3PTIQE.js";
+} from "../chunk-6LDYDQ3P.js";
 import {
   AgentMessageQueue,
   DockerExecutionEnvironment,
@@ -13,7 +13,7 @@ import {
   WorkspaceCheckpointStore,
   buildDockerInvocation,
   createProductionRuntime
-} from "../chunk-BKOOYSGH.js";
+} from "../chunk-PF457XCH.js";
 import "../chunk-CIVPKHF4.js";
 import "../chunk-HJOCNKPN.js";
 import "../chunk-RQTYHUMK.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "flavor-code",
-  "version": "1.3.17",
+  "version": "1.3.19",
   "author": "YachuanWzh",
   "type": "module",
   "publishConfig": {