frely-cli 0.6.2 → 0.6.8

package/dist/upgrade/maintenance.js

@@ -0,0 +1,133 @@
+import { createConnection, createServer } from "node:net";
+import { chmod, lstat, mkdir, rm } from "node:fs/promises";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+/** An existing relay owns this gate; no updater daemon or remote upgrade jobs. */
+export class MaintenanceGate {
+    paused = false;
+    requests = 0;
+    processes = new Set();
+    enter() {
+        if (this.paused)
+            throw new Error("Frely is preparing an upgrade. Retry after it completes.");
+        return this.track();
+    }
+    track() {
+        this.requests++;
+        let done = false;
+        return () => { if (!done) {
+            done = true;
+            this.requests--;
+        } };
+    }
+    registerProcesses(count) {
+        this.processes.add(count);
+        return () => this.processes.delete(count);
+    }
+    pause() {
+        if (this.paused)
+            throw new Error("Another upgrade holds this service.");
+        this.paused = true;
+    }
+    resume() { this.paused = false; }
+    get idle() { return this.requests === 0 && [...this.processes].every((count) => count() === 0); }
+}
+export function maintenancePath(pid) {
+    return join(process.env.XDG_CONFIG_HOME || join(homedir(), ".config"), "frely", `upgrade-${pid}.sock`);
+}
+export async function serveMaintenance(gate, path = maintenancePath(process.pid)) {
+    await mkdir(dirname(path), { recursive: true, mode: 0o700 });
+    const directory = await lstat(dirname(path));
+    if (directory.isSymbolicLink() || !directory.isDirectory() || directory.uid !== process.getuid?.())
+        throw new Error("Unsafe maintenance directory.");
+    await chmod(dirname(path), 0o700);
+    let owner;
+    const sockets = new Set();
+    const server = createServer((socket) => {
+        sockets.add(socket);
+        socket.on("error", () => socket.destroy());
+        socket.on("close", () => { sockets.delete(socket); if (owner === socket) {
+            owner = undefined;
+            gate.resume();
+        } });
+        socket.setTimeout(2000, () => socket.destroy());
+        let input = "";
+        socket.on("data", (data) => {
+            input += data.toString("utf8");
+            if (input.length > 32 || owner === socket) {
+                socket.destroy();
+                return;
+            }
+            if (!input.includes("\n"))
+                return;
+            if (input !== "drain\n" || owner) {
+                socket.end("busy\n");
+                return;
+            }
+            // The runtime may own maintenance for an external installation refresh.
+            try {
+                gate.pause();
+            }
+            catch {
+                socket.end("busy\n");
+                return;
+            }
+            owner = socket;
+            socket.setTimeout(0);
+            const deadline = Date.now() + 3000;
+            const interval = setInterval(() => {
+                if (gate.idle) {
+                    clearInterval(interval);
+                    socket.write("ready\n");
+                }
+                else if (Date.now() >= deadline) {
+                    clearInterval(interval);
+                    socket.end("busy\n");
+                }
+            }, 50);
+            socket.once("close", () => clearInterval(interval));
+        });
+    });
+    server.maxConnections = 4;
+    // Refuse an existing socket instead of unlinking another runtime's endpoint.
+    await new Promise((resolve, reject) => {
+        server.once("error", reject);
+        server.listen(path, () => { server.off("error", reject); resolve(); });
+    });
+    await chmod(path, 0o600);
+    return async () => {
+        for (const socket of sockets)
+            socket.destroy();
+        await new Promise((resolve) => server.close(() => resolve()));
+        await rm(path, { force: true });
+    };
+}
+export async function acquireMaintenance(pid, path = maintenancePath(pid)) {
+    const info = await lstat(path).catch(() => null);
+    if (!info?.isSocket() || info.uid !== process.getuid?.() || (info.mode & 0o077) !== 0) {
+        throw new Error("The running service has no private upgrade endpoint. Finish its tasks and restart it from a local terminal before upgrading.");
+    }
+    return new Promise((resolve, reject) => {
+        const socket = createConnection(path);
+        const fail = () => { socket.destroy(); reject(new Error("The service is busy or cannot enter maintenance. Finish its tasks, then run frely upgrade in a local terminal.")); };
+        socket.setTimeout(5000, fail);
+        socket.once("error", fail);
+        socket.once("connect", () => socket.write("drain\n"));
+        let text = "", ready = false;
+        socket.on("data", (data) => {
+            text += data.toString("utf8");
+            if (text.length > 32 || (text.includes("\n") && text !== "ready\n")) {
+                fail();
+                return;
+            }
+            if (text === "ready\n") {
+                ready = true;
+                socket.setTimeout(0);
+                resolve(() => socket.destroy());
+            }
+        });
+        socket.once("close", () => { if (!ready)
+            fail(); });
+    });
+}
+//# sourceMappingURL=maintenance.js.map

package/dist/upgrade/maintenance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"maintenance.js","sourceRoot":"","sources":["../../src/upgrade/maintenance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,YAAY,EAAe,MAAM,UAAU,CAAC;AACvE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAE1C,kFAAkF;AAClF,MAAM,OAAO,eAAe;IAClB,MAAM,GAAG,KAAK,CAAC;IACf,QAAQ,GAAG,CAAC,CAAC;IACJ,SAAS,GAAG,IAAI,GAAG,EAAgB,CAAC;IACrD,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC7F,OAAO,IAAI,CAAC,KAAK,EAAE,CAAC;IACtB,CAAC;IACD,KAAK;QACH,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChB,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC;YAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,iBAAiB,CAAC,KAAmB;QACnC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1B,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5C,CAAC;IACD,KAAK;QACH,IAAI,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IACD,MAAM,KAAW,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC;IACvC,IAAI,IAAI,KAAc,OAAO,IAAI,CAAC,QAAQ,KAAK,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;CAC3G;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,CAAC,EAAE,OAAO,EAAE,WAAW,GAAG,OAAO,CAAC,CAAC;AACzG,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAqB,EAAE,IAAI,GAAG,eAAe,CAAC,OAAO,CAAC,GAAG,CAAC;IAC/F,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,IAAI,SAAS,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACrJ,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;IAClC,IAAI,KAAyB,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACrC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACpB,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC3C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC;YAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClH,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAChD,IAAI,KAAK,GAAG,EAAE,CAAC;QACf,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,KAAK,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;gBAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;gBAAE,OAAO;YAClC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YACnE,wEAAwE;YACxE,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC7D,KAAK,GAAG,MAAM,CAAC;YACf,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACrB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;YACnC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE;gBAChC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;oBAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBAAC,CAAC;qBAC/D,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ,EAAE,CAAC;oBAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;oBAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAAC,CAAC;YACrF,CAAC,EAAE,EAAE,CAAC,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;IAC1B,6EAA6E;IAC7E,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACzB,OAAO,KAAK,IAAI,EAAE;QAChB,KAAK,MAAM,MAAM,IAAI,OAAO;YAAE,MAAM,CAAC,OAAO,EAAE,CAAC;QAC/C,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QACpE,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,GAAW,EAAE,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC;IAC/E,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACjD,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,CAAC,GAAG,KAAK,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QACtF,MAAM,IAAI,KAAK,CAAC,8HAA8H,CAAC,CAAC;IAClJ,CAAC;IACD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,IAAI,GAAG,GAAG,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,gHAAgH,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9K,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QACtD,IAAI,IAAI,GAAG,EAAE,EAAE,KAAK,GAAG,KAAK,CAAC;QAC7B,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE;YACzB,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC9B,IAAI,IAAI,CAAC,MAAM,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,SAAS,CAAC,EAAE,CAAC;gBAAC,IAAI,EAAE,CAAC;gBAAC,OAAO;YAAC,CAAC;YACxF,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;gBACvB,KAAK,GAAG,IAAI,CAAC;gBACb,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;gBACrB,OAAO,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YAClC,CAAC;QACH,CAAC,CAAC,CAAC;QACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK;YAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/upgrade/release.d.ts

@@ -0,0 +1,9 @@
+import type { Installation } from "./installation.js";
+export interface Release {
+    version: string;
+    baseUrl?: string;
+}
+export declare function stableVersion(value: unknown): string;
+export declare function compareVersions(a: string, b: string): number;
+export declare function latestRelease(installation: Installation, request?: typeof fetch): Promise<Release>;
+export declare function standaloneAsset(platform?: NodeJS.Platform, arch?: NodeJS.Architecture, target?: string | undefined): string;

package/dist/upgrade/release.js

@@ -0,0 +1,45 @@
+export function stableVersion(value) {
+    if (typeof value !== "string" || !/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/u.test(value))
+        throw new Error("Release source did not return a stable version.");
+    return value;
+}
+export function compareVersions(a, b) {
+    const parse = (v) => {
+        const core = v.split("-")[0].split("+")[0];
+        return stableVersion(core).split(".").map(BigInt);
+    };
+    const aa = parse(a), bb = parse(b);
+    for (let i = 0; i < 3; i++)
+        if (aa[i] !== bb[i])
+            return aa[i] > bb[i] ? 1 : -1;
+    return a.includes("-") === b.includes("-") ? 0 : a.includes("-") ? -1 : 1;
+}
+export async function latestRelease(installation, request = fetch) {
+    const standalone = installation.method === "standalone";
+    const response = await request(standalone
+        ? "https://api.github.com/repos/FrelyHQ/frely-cli/releases/latest"
+        : "https://registry.npmjs.org/frely-cli/latest", {
+        headers: { accept: "application/json", "user-agent": "frely-cli" },
+        signal: AbortSignal.timeout(4000), redirect: "error",
+    });
+    if (!response.ok)
+        throw new Error(`Release lookup failed (HTTP ${response.status}).`);
+    const text = await response.text();
+    if (text.length > 1024 * 1024)
+        throw new Error("Release metadata is too large.");
+    const data = JSON.parse(text);
+    if (standalone && (data.draft !== false || data.prerelease !== false))
+        throw new Error("GitHub release is not a stable published release.");
+    const version = stableVersion(standalone ? String(data.tag_name).replace(/^v/u, "") : data.version);
+    if (!standalone && data.name !== "frely-cli")
+        throw new Error("Release package name does not match frely-cli.");
+    return { version, ...(standalone ? { baseUrl: `https://github.com/FrelyHQ/frely-cli/releases/download/v${version}` } : {}) };
+}
+export function standaloneAsset(platform = process.platform, arch = process.arch, target = typeof FRELY_BUILD_TARGET === "string" ? FRELY_BUILD_TARGET : undefined) {
+    // Compiled target includes libc, so an Alpine executable never changes distribution during an upgrade.
+    const value = target ?? `${platform === "win32" ? "windows" : platform}-${arch}`;
+    if (!/^(?:darwin-(?:arm64|x64)|linux-(?:arm64|x64)(?:-musl)?|windows-(?:arm64|x64))$/u.test(value))
+        throw new Error("This platform has no standalone release.");
+    return `frely-${value}${value.startsWith("windows") ? ".exe" : ""}`;
+}
+//# sourceMappingURL=release.js.map

package/dist/upgrade/release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"release.js","sourceRoot":"","sources":["../../src/upgrade/release.ts"],"names":[],"mappings":"AAGA,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,6CAA6C,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAChK,OAAO,KAAK,CAAC;AACf,CAAC;AACD,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE;QAC1B,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAC7C,OAAO,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpD,CAAC,CAAC;IACF,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;QAAE,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,CAAC,CAAC,CAAE,GAAG,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,YAA0B,EAAE,UAAwB,KAAK;IAC3F,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC;IACxD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,UAAU;QACvC,CAAC,CAAC,gEAAgE;QAClE,CAAC,CAAC,6CAA6C,EAAE;QACjD,OAAO,EAAE,EAAE,MAAM,EAAE,kBAAkB,EAAE,YAAY,EAAE,WAAW,EAAE;QAClE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO;KACrD,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACtF,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACjF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;IACzD,IAAI,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IAC5I,MAAM,OAAO,GAAG,aAAa,CAAC,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACpG,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,IAAI,KAAK,WAAW;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IAChH,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,2DAA2D,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC/H,CAAC;AAGD,MAAM,UAAU,eAAe,CAAC,QAAQ,GAAG,OAAO,CAAC,QAAQ,EAAE,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;IAChK,uGAAuG;IACvG,MAAM,KAAK,GAAG,MAAM,IAAI,GAAG,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,EAAE,CAAC;IACjF,IAAI,CAAC,iFAAiF,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAChK,OAAO,SAAS,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACtE,CAAC"}

package/dist/upgrade/service-refresh.d.ts

@@ -0,0 +1,38 @@
+import { type DiagnosticLog } from "../runtime/diagnostics.js";
+import { type Installation } from "./installation.js";
+import type { MaintenanceGate } from "./maintenance.js";
+export interface InstalledCandidate {
+    fingerprint: string;
+    version: string;
+}
+export interface RefreshProbe {
+    read(): Promise<InstalledCandidate>;
+    verify(candidate: InstalledCandidate): Promise<boolean>;
+}
+/** Inspect only the installation this process already runs; never follow PATH or download code. */
+export declare function installationProbe(installation: Installation): RefreshProbe;
+/** One tick at a time. Busy work keeps its connection and admission; only idle runtimes drain. */
+export declare class ServiceRefresh {
+    private readonly options;
+    private candidate;
+    private checking;
+    private restarting;
+    private deferredFingerprint;
+    constructor(options: {
+        probe: RefreshProbe;
+        gate: MaintenanceGate;
+        signal: AbortSignal;
+        restart: () => void;
+        log?: DiagnosticLog;
+        currentVersion?: string;
+    });
+    check(): Promise<void>;
+}
+/** Only an already-running managed POSIX service watches its supported installation. */
+export declare function watchServiceInstallation(options: {
+    gate: MaintenanceGate;
+    signal: AbortSignal;
+    restart: () => void;
+    log?: DiagnosticLog;
+    onEnabled?: () => void;
+}): Promise<() => void>;

package/dist/upgrade/service-refresh.js

@@ -0,0 +1,138 @@
+import { execFile as execFileCallback } from "node:child_process";
+import { readFile, stat } from "node:fs/promises";
+import { dirname, join } from "node:path";
+import { homedir } from "node:os";
+import { promisify } from "node:util";
+import { VERSION } from "../version.js";
+import { diagnostic } from "../runtime/diagnostics.js";
+import { inspectInstallation } from "./installation.js";
+const execFile = promisify(execFileCallback);
+/** Inspect only the installation this process already runs; never follow PATH or download code. */
+export function installationProbe(installation) {
+    let standaloneCache;
+    const version = async () => {
+        const standalone = installation.method === "standalone";
+        const result = await execFile(standalone ? installation.entry : process.execPath, standalone ? ["--version"] : [installation.entry, "--version"], { cwd: homedir(), timeout: 10000, maxBuffer: 65536 });
+        const value = result.stdout.trim();
+        if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/u.test(value))
+            throw new Error("Invalid installed CLI version.");
+        return value;
+    };
+    const fingerprint = async () => {
+        const files = installation.method === "standalone" ? [installation.entry]
+            : [installation.entry, join(dirname(dirname(installation.entry)), "package.json")];
+        return (await Promise.all(files.map(async (path) => {
+            const info = await stat(path, { bigint: true });
+            if (!info.isFile())
+                throw new Error("Installed CLI file is unavailable.");
+            return [info.dev, info.ino, info.size, info.mtimeNs, info.ctimeNs].join(":");
+        }))).join("|");
+    };
+    return {
+        async read() {
+            const before = await fingerprint();
+            let installed;
+            if (installation.method === "standalone") {
+                if (standaloneCache?.fingerprint === before)
+                    return standaloneCache;
+                installed = await version();
+            }
+            else {
+                const metadata = JSON.parse(await readFile(join(dirname(dirname(installation.entry)), "package.json"), "utf8"));
+                if (metadata.name !== "frely-cli" || typeof metadata.version !== "string")
+                    throw new Error("Installed package is unavailable.");
+                installed = metadata.version;
+            }
+            if (before !== await fingerprint())
+                throw new Error("Installation is changing.");
+            const candidate = { fingerprint: before, version: installed };
+            if (installation.method === "standalone")
+                standaloneCache = candidate;
+            return candidate;
+        },
+        async verify(candidate) {
+            return await fingerprint() === candidate.fingerprint && await version() === candidate.version
+                && await fingerprint() === candidate.fingerprint;
+        },
+    };
+}
+/** One tick at a time. Busy work keeps its connection and admission; only idle runtimes drain. */
+export class ServiceRefresh {
+    options;
+    candidate;
+    checking = false;
+    restarting = false;
+    deferredFingerprint;
+    constructor(options) {
+        this.options = options;
+    }
+    async check() {
+        if (this.checking || this.restarting || this.options.signal.aborted)
+            return;
+        this.checking = true;
+        let paused = false;
+        const { probe, gate, signal, restart, log } = this.options;
+        try {
+            const candidate = await probe.read();
+            if (candidate.version === (this.options.currentVersion ?? VERSION)) {
+                this.candidate = undefined;
+                return;
+            }
+            // Two observations, separated by the polling interval, avoid switching during package extraction.
+            if (this.candidate?.fingerprint !== candidate.fingerprint || this.candidate.version !== candidate.version) {
+                this.candidate = candidate;
+                return;
+            }
+            if (signal.aborted)
+                return;
+            if (!gate.idle) {
+                if (this.deferredFingerprint !== candidate.fingerprint) {
+                    diagnostic(log, "relay.upgrade_deferred");
+                    this.deferredFingerprint = candidate.fingerprint;
+                }
+                return;
+            }
+            // An explicit frely upgrade may already own maintenance. Never resume another owner's gate.
+            try {
+                gate.pause();
+                paused = true;
+            }
+            catch {
+                return;
+            }
+            if (!await probe.verify(candidate) || signal.aborted || !gate.idle)
+                return;
+            diagnostic(log, "relay.upgrade_restart");
+            restart();
+            this.restarting = true;
+            // Keep admission closed while the relay flushes and exits. Its existing supervisor restarts it.
+        }
+        catch {
+            // Missing files and unsuccessful startup are expected during external installation.
+            // Keep the loaded runtime alive and require two fresh observations before retrying.
+            this.candidate = undefined;
+        }
+        finally {
+            if (paused && !this.restarting)
+                gate.resume();
+            this.checking = false;
+        }
+    }
+}
+/** Only an already-running managed POSIX service watches its supported installation. */
+export async function watchServiceInstallation(options) {
+    if (options.signal.aborted || !["darwin", "linux"].includes(process.platform))
+        return () => { };
+    const installation = await inspectInstallation();
+    if (options.signal.aborted || !["standalone", "npm", "bun"].includes(installation.method))
+        return () => { };
+    options.onEnabled?.();
+    const refresh = new ServiceRefresh({ ...options, probe: installationProbe(installation) });
+    const timer = setInterval(() => { void refresh.check(); }, 5000);
+    timer.unref();
+    const close = () => { clearInterval(timer); options.signal.removeEventListener("abort", close); };
+    options.signal.addEventListener("abort", close, { once: true });
+    void refresh.check();
+    return close;
+}
+//# sourceMappingURL=service-refresh.js.map

package/dist/upgrade/service-refresh.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-refresh.js","sourceRoot":"","sources":["../../src/upgrade/service-refresh.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AACtC,OAAO,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACxC,OAAO,EAAE,UAAU,EAAsB,MAAM,2BAA2B,CAAC;AAC3E,OAAO,EAAE,mBAAmB,EAAqB,MAAM,mBAAmB,CAAC;AAG3E,MAAM,QAAQ,GAAG,SAAS,CAAC,gBAAgB,CAAC,CAAC;AAO7C,mGAAmG;AACnG,MAAM,UAAU,iBAAiB,CAAC,YAA0B;IAC1D,IAAI,eAA+C,CAAC;IACpD,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;QACzB,MAAM,UAAU,GAAG,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC;QACxD,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAC9E,UAAU,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC,EAC9D,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACxD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,2DAA2D,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChI,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,WAAW,GAAG,KAAK,IAAI,EAAE;QAC7B,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC;YACvE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC;QACrF,OAAO,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;YAC1E,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC/E,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACjB,CAAC,CAAC;IACF,OAAO;QACL,KAAK,CAAC,IAAI;YACR,MAAM,MAAM,GAAG,MAAM,WAAW,EAAE,CAAC;YACnC,IAAI,SAAiB,CAAC;YACtB,IAAI,YAAY,CAAC,MAAM,KAAK,YAAY,EAAE,CAAC;gBACzC,IAAI,eAAe,EAAE,WAAW,KAAK,MAAM;oBAAE,OAAO,eAAe,CAAC;gBACpE,SAAS,GAAG,MAAM,OAAO,EAAE,CAAC;YAC9B,CAAC;iBAAM,CAAC;gBACN,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAwC,CAAC;gBACvJ,IAAI,QAAQ,CAAC,IAAI,KAAK,WAAW,IAAI,OAAO,QAAQ,CAAC,OAAO,KAAK,QAAQ;oBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBAChI,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC;YAC/B,CAAC;YACD,IAAI,MAAM,KAAK,MAAM,WAAW,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;YACjF,MAAM,SAAS,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;YAC9D,IAAI,YAAY,CAAC,MAAM,KAAK,YAAY;gBAAE,eAAe,GAAG,SAAS,CAAC;YACtE,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,SAAS;YACpB,OAAO,MAAM,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,IAAI,MAAM,OAAO,EAAE,KAAK,SAAS,CAAC,OAAO;mBACxF,MAAM,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,CAAC;QACrD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,OAAO,cAAc;IAMI;IALrB,SAAS,CAAiC;IAC1C,QAAQ,GAAG,KAAK,CAAC;IACjB,UAAU,GAAG,KAAK,CAAC;IACnB,mBAAmB,CAAqB;IAEhD,YAA6B,OAG5B;QAH4B,YAAO,GAAP,OAAO,CAGnC;IAAG,CAAC;IAEL,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO;QAC5E,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,MAAM,GAAG,KAAK,CAAC;QACnB,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,SAAS,GAAG,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,SAAS,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,IAAI,OAAO,CAAC,EAAE,CAAC;gBAAC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC3G,kGAAkG;YAClG,IAAI,IAAI,CAAC,SAAS,EAAE,WAAW,KAAK,SAAS,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EAAE,CAAC;gBAC1G,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;gBAC3B,OAAO;YACT,CAAC;YACD,IAAI,MAAM,CAAC,OAAO;gBAAE,OAAO;YAC3B,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACf,IAAI,IAAI,CAAC,mBAAmB,KAAK,SAAS,CAAC,WAAW,EAAE,CAAC;oBACvD,UAAU,CAAC,GAAG,EAAE,wBAAwB,CAAC,CAAC;oBAC1C,IAAI,CAAC,mBAAmB,GAAG,SAAS,CAAC,WAAW,CAAC;gBACnD,CAAC;gBACD,OAAO;YACT,CAAC;YACD,4FAA4F;YAC5F,IAAI,CAAC;gBAAC,IAAI,CAAC,KAAK,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO;YAAC,CAAC;YACtD,IAAI,CAAC,MAAM,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI;gBAAE,OAAO;YAC3E,UAAU,CAAC,GAAG,EAAE,uBAAuB,CAAC,CAAC;YACzC,OAAO,EAAE,CAAC;YACV,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,gGAAgG;QAClG,CAAC;QAAC,MAAM,CAAC;YACP,oFAAoF;YACpF,oFAAoF;YACpF,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC7B,CAAC;gBAAS,CAAC;YACT,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;YAC9C,IAAI,CAAC,QAAQ,GAAG,KAAK,CAAC;QACxB,CAAC;IACH,CAAC;CACF;AAED,wFAAwF;AACxF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,OAE9C;IACC,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC/F,MAAM,YAAY,GAAG,MAAM,mBAAmB,EAAE,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,MAAM,CAAC;QAAE,OAAO,GAAG,EAAE,GAAE,CAAC,CAAC;IAC3G,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC;IACtB,MAAM,OAAO,GAAG,IAAI,cAAc,CAAC,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;IAC3F,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACjE,KAAK,CAAC,KAAK,EAAE,CAAC;IACd,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAChE,KAAK,OAAO,CAAC,KAAK,EAAE,CAAC;IACrB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/upgrade/update.d.ts

@@ -0,0 +1,49 @@
+import { readDeviceBinding } from "../device/state.js";
+import { readConnectionStatus } from "../device/connection-status.js";
+import { serviceCommand, serviceStatus, startMcpService, stopMcpService } from "../service.js";
+import { inspectInstallation, type Installation } from "./installation.js";
+import { latestRelease, type Release } from "./release.js";
+import { acquireMaintenance } from "./maintenance.js";
+export interface UpgradeResult {
+    state: "current" | "manual" | "upgraded";
+    message: string;
+}
+export interface UpgradeInspection {
+    currentVersion: string;
+    latestVersion?: string;
+    installation: Installation;
+    state: "unsupported" | "available" | "current" | "unavailable";
+    message: string;
+}
+export declare function inspectUpgrade(): Promise<UpgradeInspection>;
+export declare function installedVersion(installation: Installation): Promise<string>;
+declare function download(url: string, destination: string, maxBytes: number): Promise<void>;
+export declare function validateStandalone(path: string, checksum: string, version: string, execute?: typeof installedVersion): Promise<void>;
+export interface PreparedUpdate {
+    apply(): Promise<void>;
+    restore(): Promise<void>;
+    cleanup(): Promise<void>;
+}
+export declare function prepareStandalone(installation: Installation, release: Release, fetchFile?: typeof download, execute?: typeof installedVersion): Promise<PreparedUpdate>;
+declare function installPackage(installation: Installation, version: string): Promise<void>;
+declare function lockInstallation(installation: Installation): Promise<() => Promise<void>>;
+declare const defaults: {
+    inspectInstallation: typeof inspectInstallation;
+    latestRelease: typeof latestRelease;
+    installedVersion: typeof installedVersion;
+    serviceStatus: typeof serviceStatus;
+    serviceCommand: typeof serviceCommand;
+    stopMcpService: typeof stopMcpService;
+    startMcpService: typeof startMcpService;
+    readDeviceBinding: typeof readDeviceBinding;
+    readConnectionStatus: typeof readConnectionStatus;
+    acquireMaintenance: typeof acquireMaintenance;
+    prepareStandalone: typeof prepareStandalone;
+    installPackage: typeof installPackage;
+    lockInstallation: typeof lockInstallation;
+    pause: (ms: number) => Promise<unknown>;
+};
+export type UpgradeDependencies = typeof defaults;
+/** Upgrade in the calling terminal. Busy MCP callers fail before any service stop or package write. */
+export declare function upgrade(write: (message: string) => void, dependencies?: UpgradeDependencies): Promise<UpgradeResult>;
+export {};