gloomberb 0.18.1 → 0.18.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gloomberb",
-  "version": "0.18.1",
+  "version": "0.18.3",
   "packageManager": "bun@1.3.11",
   "description": "Market research and portfolio tracker for the terminal",
   "module": "src/public/index.ts",

package/patches/electrobun@1.18.1.patch

@@ -74,7 +74,7 @@ index cdaa2bca0fabe577cb667056aa6f8f84211189c2..3839e5232742c2467180c344f51a30f1
  
  // Encrypt function
 diff --git a/dist/api/bun/core/Updater.ts b/dist/api/bun/core/Updater.ts
-index 39daf6d341780af8e30c2c50327162863f5977ec..bf4a4b615f84904759d4bcd57be0d899c9464a5f 100644
+index 39daf6d341780af8e30c2c50327162863f5977ec..0174d2ce1a9a4fa8ae0fd97367293fc5a794286a 100644
 --- a/dist/api/bun/core/Updater.ts
 +++ b/dist/api/bun/core/Updater.ts
 @@ -132,6 +132,19 @@ let updateInfo: {
@@ -97,7 +97,62 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..bf4a4b615f84904759d4bcd57be0d899
  function cleanupExtractionFolder(
  	extractionFolder: string,
  	keepTarHash: string,
-@@ -176,6 +189,12 @@ const Updater = {
+@@ -158,6 +171,54 @@ function cleanupExtractionFolder(
+ 	}
+ }
+ 
++/**
++ * Where the running app goes while the new one moves in: `<app>.previous`, or,
++ * when an older one is still there and cannot be removed (a bundle another
++ * user owns), a name of its own, so a copy left behind once never blocks
++ * every later update. The app removes the copies it left at its next start.
++ */
++function updateAsidePath(appPath: string): string {
++	const previous = `${appPath}.previous`;
++	if (!statSync(previous, { throwIfNoEntry: false })) return previous;
++	try {
++		rmSync(previous, { recursive: true, force: true });
++	} catch (e) {
++		// Left for the next start to remove; this update takes another name.
++	}
++	if (!statSync(previous, { throwIfNoEntry: false })) return previous;
++	for (let attempt = 0; ; attempt += 1) {
++		const unique = `${previous}-${Date.now().toString(36)}${attempt ? `-${attempt}` : ""}`;
++		if (!statSync(unique, { throwIfNoEntry: false })) return unique;
++	}
++}
++
++/**
++ * Puts the new app where the running one is. The running app is moved aside
++ * rather than deleted first, so a move that fails (another volume, a
++ * read-only one, no permission) puts it back instead of leaving no app at all.
++ * The copy moved aside is removed when it can be; one that cannot goes at the
++ * app's next start.
++ */
++function replaceAppBundle(runningAppPath: string, newAppPath: string) {
++	const hadRunningApp = !!statSync(runningAppPath, { throwIfNoEntry: false });
++	const asidePath = hadRunningApp ? updateAsidePath(runningAppPath) : null;
++	if (asidePath) renameSync(runningAppPath, asidePath);
++
++	emitStatus("replacing-app", "Installing new version...");
++	try {
++		renameSync(newAppPath, runningAppPath);
++	} catch (error) {
++		if (asidePath) renameSync(asidePath, runningAppPath);
++		throw error;
++	}
++	if (!asidePath) return;
++	try {
++		rmSync(asidePath, { recursive: true, force: true });
++	} catch (e) {
++		// The new app is in place; the app removes the old copy at its next start.
++	}
++}
++
+ const Updater = {
+ 	updateInfo: () => {
+ 		return updateInfo;
+@@ -176,6 +237,12 @@ const Updater = {
  		onStatusChangeCallback = callback;
  	},
  
@@ -110,7 +165,7 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..bf4a4b615f84904759d4bcd57be0d899
  	// todo: allow switching channels, by default will check the current channel
  	checkForUpdate: async () => {
  		emitStatus("checking", "Checking for updates...");
-@@ -196,11 +215,11 @@ const Updater = {
+@@ -196,11 +263,11 @@ const Updater = {
  
  		const cacheBuster = Math.random().toString(36).substring(7);
  		const platformPrefix = getPlatformPrefix(
@@ -124,7 +179,7 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..bf4a4b615f84904759d4bcd57be0d899
  
  		try {
  			const updateInfoResponse = await fetch(updateInfoUrl);
-@@ -329,11 +348,11 @@ const Updater = {
+@@ -329,11 +396,11 @@ const Updater = {
  
  				// check if there's a patch file for it
  				const platformPrefix = getPlatformPrefix(
@@ -138,7 +193,7 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..bf4a4b615f84904759d4bcd57be0d899
  				emitStatus(
  					"fetching-patch",
  					`Checking for patch: ${currentHash.slice(0, 8)}`,
-@@ -612,12 +631,12 @@ const Updater = {
+@@ -612,12 +679,12 @@ const Updater = {
  
  				const cacheBuster = Math.random().toString(36).substring(7);
  				const platformPrefix = getPlatformPrefix(
@@ -153,6 +208,52 @@ index 39daf6d341780af8e30c2c50327162863f5977ec..bf4a4b615f84904759d4bcd57be0d899
  				const prevVersionCompressedTarballPath = join(
  					appDataFolder,
  					"self-extraction",
+@@ -760,7 +827,12 @@ const Updater = {
+ 				mkdirSync(extractionFolder, { recursive: true });
+ 			}
+ 
+-			let latestHash = (await Updater.checkForUpdate()).hash;
++			// Install the build that was downloaded. Checking again here fetched
++			// the newest manifest instead: once a newer release was out (or the
++			// check failed offline) its tar was not there and the install
++			// returned without a word, so a download waiting for a restart could
++			// never be installed.
++			let latestHash = updateInfo.hash;
+ 			const latestTarPath = join(extractionFolder, `${latestHash}.tar`);
+ 
+ 			let appBundleSubpath: string = "";
+@@ -894,14 +966,7 @@ const Updater = {
+ 					emitStatus("replacing-app", "Removing old version...");
+ 
+ 					if (currentOS === "macos") {
+-						// Remove existing app before installing the new one
+-						if (statSync(runningAppBundlePath, { throwIfNoEntry: false })) {
+-							rmSync(runningAppBundlePath, { recursive: true });
+-						}
+-
+-						emitStatus("replacing-app", "Installing new version...");
+-						// Move new app to running location
+-						renameSync(newAppBundlePath, runningAppBundlePath);
++						replaceAppBundle(runningAppBundlePath, newAppBundlePath);
+ 
+ 						// Remove quarantine extended attributes to prevent "damaged" error
+ 						// The inner bundle is already signed/notarized, but macOS applies
+@@ -918,14 +983,7 @@ const Updater = {
+ 						// On Linux, we now have directory bundles instead of AppImage files
+ 						// The app is stored in {appDataFolder}/app/
+ 						const appBundleDir = join(appDataFolder, "app");
+-						
+-						// Remove existing app directory if it exists
+-						if (statSync(appBundleDir, { throwIfNoEntry: false })) {
+-							rmSync(appBundleDir, { recursive: true });
+-						}
+-
+-						// Move new app bundle directory to app location
+-						renameSync(newAppBundlePath, appBundleDir);
++						replaceAppBundle(appBundleDir, newAppBundlePath);
+ 
+ 						// Ensure launcher binary is executable
+ 						const launcherPath = join(appBundleDir, "bin", "launcher");
 diff --git a/dist/api/bun/preload/.generated/compiled.ts b/dist/api/bun/preload/.generated/compiled.ts
 index 3ab1d7d8de8938ae60823650fd3a29b952a76cb6..e0e841e6a87ce41533c6bdda8d29400aaf478e31 100644
 --- a/dist/api/bun/preload/.generated/compiled.ts

package/src/api-client/commodity-balances.ts

@@ -44,6 +44,12 @@ export interface PsdBalanceRow {
   unit: string;
   /** Market year, 2026/27. */
   year: string;
+  /**
+   * YYYY-MM of the crop's newest estimate: the WASDE for grains, oilseeds and
+   * cotton, USDA's semiannual report for coffee and sugar. Absent from boards
+   * served before it was sent.
+   */
+  month?: string | null;
   cropOrder: number;
   countryOrder: number;
   attributeOrder: number;

package/src/api-client/company-kpis.ts

@@ -83,6 +83,10 @@ export interface KpiObservation extends Omit<KpiObservationInput, "quote" | "sca
   conflict: boolean
   contested?: boolean
   evidence: KpiEvidence[]
+  /** Stored facts shown as this one: the same figure under other labels or periods. */
+  merged?: string[]
+  /** The labels that tell its series apart, the same on each of its facts; the stored ones stay in `dimensions`. */
+  seriesLabels?: Record<string, string>
 }
 export interface KpiGuidance extends Omit<KpiGuidanceInput, "quote" | "scale"> {
   id: string
@@ -97,6 +101,10 @@ export interface KpiGuidance extends Omit<KpiGuidanceInput, "quote" | "scale"> {
   direction: GuidanceDirection
   previousId: string | null
   midpointChangePct: number | null
+  /** Stored guides shown as this one. */
+  merged?: string[]
+  /** The labels that tell its series apart, as on its actuals. */
+  seriesLabels?: Record<string, string>
   actual: { observationId: string; value: number; outcome: "above" | "below" | "within"; favorable: "beat" | "miss" | "in_line" | "neutral"; difference: number; differencePct: number | null } | null
 }
 interface KpiCoverage {
@@ -118,6 +126,7 @@ export interface KpiSeries {
   currency: string | null
   basis: KpiBasis
   dimensions: Record<string, string>
+  seriesLabels?: Record<string, string>
   latest: KpiObservation
   observations: KpiObservation[]
 }

package/src/api-client/crypto-markets.ts

@@ -38,9 +38,16 @@ export interface CryptoMarketAsset {
   /** Market-cap rank within its kind. */
   rank: number;
   price: number;
+  /**
+   * The day's move as `quote` gives the coin: from the previous UTC day's
+   * close, the price at 00:00 UTC. A coin whose close Gloom Cloud cannot date
+   * to the last two days moves over 24 hours (`changeBasis` "24h") or not at
+   * all ("none"), its previousClose null.
+   */
   previousClose: number | null;
   change: number | null;
   changePercent: number | null;
+  changeBasis?: "24h" | "none";
   dayHigh: number | null;
   dayLow: number | null;
   volume24h: number | null;
@@ -62,6 +69,8 @@ export interface CryptoMarketAsset {
 export interface CryptoMarketsPayload {
   version: 1;
   generatedAt: string;
+  /** Each asset's change is since 00:00 UTC; a server before it sent the screener's 24-hour move. */
+  dayChangeBasis?: "utc-day";
   asOf: string | null;
   status: "available" | "partial" | "unavailable";
   source: {

package/src/api-client/data.ts

@@ -27,6 +27,7 @@ import {
 import type { LettersParams } from "./letters";
 import type { IpoCalendarParams, IpoCalendarPayload } from "./ipo";
 import type { TickerChanges } from "../types/ticker-changes";
+import type { IssuerListings } from "../types/issuer-listings";
 import type { OrganizationTickersResponse } from "./organization-tickers";
 import type { CryptoMarketsPayload, StablecoinSupplyHistoryPayload, StablecoinSupplyPayload } from "./crypto-markets";
 import type { CentralBankRatesPayload } from "./central-bank-rates";
@@ -470,6 +471,20 @@ export class CloudDataApi {
     return answers;
   }
 
+  /** Every listing of the company a listing belongs to (RCI and RCI.B:TSX are Rogers); empty for one the service does not hold. */
+  async getCloudIssuerListings(
+    symbol: string,
+    exchange = "",
+    options: { signal?: AbortSignal } = {},
+  ): Promise<CloudMarketResponse<IssuerListings>> {
+    const params = new URLSearchParams({ symbol: symbol.trim().toUpperCase() });
+    if (exchange.trim()) params.set("exchange", exchange.trim().toUpperCase());
+    return this.request<CloudMarketResponse<IssuerListings>>(
+      `/market/issuer-listings?${params}`,
+      options.signal ? { signal: options.signal } : undefined,
+    );
+  }
+
   /** The listed company each organization name resolves to, if any: a trial's lead sponsors, a page at a time. */
   async getCloudOrganizationTickers(names: readonly string[], signal?: AbortSignal): Promise<OrganizationTickersResponse> {
     return this.request<OrganizationTickersResponse>("/market/organization-tickers", {
@@ -610,12 +625,12 @@ export class CloudDataApi {
   }
 
   /** `listing` names a listing abroad's venue and company; a US listing needs neither. */
-  async getCloudCompanyKpis(symbol: string, options: KpiQueryOptions = {}, listing: IssuerListingParams = {}): Promise<KpisPayload> {
-    return this.request<KpisPayload>(companyDisclosurePath("kpis", symbol, options, listing));
+  async getCloudCompanyKpis(symbol: string, options: KpiQueryOptions = {}, listing: IssuerListingParams = {}, request?: { signal?: AbortSignal }): Promise<KpisPayload> {
+    return this.request<KpisPayload>(companyDisclosurePath("kpis", symbol, options, listing), request);
   }
 
-  async getCloudCompanyGuidance(symbol: string, options: KpiQueryOptions = {}, listing: IssuerListingParams = {}): Promise<GuidancePayload> {
-    return this.request<GuidancePayload>(companyDisclosurePath("guidance", symbol, options, listing));
+  async getCloudCompanyGuidance(symbol: string, options: KpiQueryOptions = {}, listing: IssuerListingParams = {}, request?: { signal?: AbortSignal }): Promise<GuidancePayload> {
+    return this.request<GuidancePayload>(companyDisclosurePath("guidance", symbol, options, listing), request);
   }
   async getCloudPerpsBoard(query: PerpBoardQuery = {}): Promise<PerpBoardPayload> {
     return this.request(`/cloud/perps/board?${new URLSearchParams(Object.entries(query).filter(([, value]) => value !== undefined).map(([key, value]) => [key, String(value)]))}`);
@@ -1040,8 +1055,9 @@ export class CloudDataApi {
 
   async getCloudSecFilings(
     params: CloudSecFilingsParams,
+    options?: { signal?: AbortSignal },
   ): Promise<CloudSecFilingsResponse> {
-    return this.request<CloudSecFilingsResponse>(cloudSecFilingsPath(params));
+    return this.request<CloudSecFilingsResponse>(cloudSecFilingsPath(params), options);
   }
 
   /** Schedule 13D/13G reports about an issuer. Unknown tickers answer 404; no reports is an empty `owners`. */

package/src/api-client/equity-screener.ts

@@ -110,6 +110,8 @@ export interface ScreenMetric {
   scope: "reported" | "derived" | "observed-subset";
   reason: string | null;
   sourceUrl: string | null;
+  /** Set by the client on a Pro field the server left out for a caller without Gloom Pro; never sent. */
+  access?: "pro";
   percentile: {
     value: number | null;
     sampleCount: number;

package/src/api-client/index.ts

@@ -54,6 +54,7 @@ export type {
   CrashReportSurface,
   CrashReportsPayload,
   FunctionUsageCount,
+  UpdateFailureReport,
   UsageCountsPayload,
   UsageCountsSurface,
 } from "./telemetry";
@@ -774,6 +775,7 @@ class GloomApiClient {
   getCloudTickerChanges = this.data.getCloudTickerChanges.bind(this.data);
   getCloudOrganizationTickers = this.data.getCloudOrganizationTickers.bind(this.data);
   getCloudTickerChangesBatch = this.data.getCloudTickerChangesBatch.bind(this.data);
+  getCloudIssuerListings = this.data.getCloudIssuerListings.bind(this.data);
   searchInstrumentsBatch = this.data.searchInstrumentsBatch.bind(this.data);
   getCloudHistory = this.data.getCloudHistory.bind(this.data);
   getCloudExchangeRate = this.data.getCloudExchangeRate.bind(this.data);

package/src/api-client/request.ts

@@ -413,9 +413,10 @@ export class CloudApiRequestTransport {
     // change lookup: a note beside a quote, never one of the refused market
     // requests a lookup of many symbols waits out and retries. Nor the
     // tickers beside a list of organization names, which say so in place,
-    // or a 13F filer's EDGAR filing list, whose report says it went unchecked.
-    // Nor the batched searches and ticker changes a list of symbols starts
-    // with: a service without them answers 404, and whatever they leave
+    // or a 13F filer's EDGAR filing list, whose report says it went unchecked,
+    // or a company's other listings, beside a list check that still answers
+    // for the listing itself. Nor the batched searches and ticker changes a
+    // list of symbols starts with: a service without them answers 404, and whatever they leave
     // unanswered is looked up one symbol at a time, which is tracked.
     if (
       path.startsWith("/telemetry/")
@@ -423,6 +424,7 @@ export class CloudApiRequestTransport {
       || path === "/cloud/geo/layers"
       || path.startsWith("/cloud/sec/13f/filer?")
       || path.startsWith("/market/ticker-changes?")
+      || path.startsWith("/market/issuer-listings?")
       || path === "/market/ticker-changes/batch"
       || path === "/market/search/batch"
       || path === "/market/organization-tickers"

package/src/api-client/telemetry.ts

@@ -16,6 +16,23 @@ export interface CrashReportError {
   stack?: string;
   plugin?: string;
   pane?: string;
+  /** A failed update step, field by field. Servers that do not know it drop it. */
+  update?: UpdateFailureReport;
+}
+
+/**
+ * A failed update step as error tracking gets it: fixed values and version
+ * numbers only, never a path, URL or the error's own text.
+ */
+export interface UpdateFailureReport {
+  phase: "check" | "download" | "verify" | "apply" | "relaunch";
+  code: string;
+  appVersion: string;
+  targetVersion?: string;
+  channel: "stable" | "nightly";
+  platform: "macos" | "windows" | "linux" | "other";
+  arch: "arm64" | "x64" | "other";
+  installKind: string;
 }
 
 /** Body of `POST /telemetry/errors`. The server forwards each error to error tracking. */

package/src/api-client/types.ts

@@ -1563,6 +1563,11 @@ export interface CloudMarketResponse<T> {
   omittedSessions?: unknown;
   /** Untrusted until the history adapter validates its boundary dates. */
   coverage?: CloudHistoryCoverage;
+  /**
+   * Untrusted: a US listing that no longer trades, `{ status, lastTradeDate,
+   * historyStart }`. Its history ends on `lastTradeDate`. Read by parseListingDelisting.
+   */
+  delisting?: unknown;
   providerMeta?: {
     provider?: string;
     upstream?: string;

package/src/app/global-shortcuts.ts

@@ -8,7 +8,7 @@ import type { AppAction, AppState } from "../state/app/context";
 import type { TickerRecord } from "../types/ticker";
 import { findPaneInstance } from "../types/config";
 import type { ReleaseInfo } from "../updater";
-import { canRestartToApply, canSelfUpdate } from "../updater";
+import { canRestartToApply, canRetryUpdate } from "../updater";
 import { getVisiblePaneCycleOrder } from "../components/layout/pane/cycle-order";
 import { requestFunctionHelp, useFunctionHelpHost } from "../plugins/builtin/help/function-card";
 import { buildRegistryHelpIndex, helpFunctionForPane } from "../plugins/builtin/help/function-index";
@@ -37,21 +37,6 @@ import {
 /** Long enough to read a few conflicts and choose Review. */
 const KEYBINDING_NOTICE_DURATION_MS = 15_000;
 
-/**
- * Whether the install-update key has something to retry: a release this build
- * can install itself whose last attempt failed. A fresh one downloads on its
- * own, and a manual or managed one names its own command. (A downloaded
- * desktop update has its own use of the key: restarting into it.)
- */
-export function canRetryUpdate(
-  state: Pick<AppState, "updateAvailable" | "updateProgress" | "updateCheckInProgress">,
-): boolean {
-  return !!state.updateAvailable
-    && state.updateProgress?.phase === "error"
-    && !state.updateCheckInProgress
-    && canSelfUpdate(state.updateAvailable);
-}
-
 /**
  * Tells the user once per launch when `config.json` holds a binding that does
  * not parse, names no action, or lands on a key another action already has.

package/src/app/pane-runtime/plugin-bindings.ts

@@ -479,9 +479,11 @@ export function bindAppPanePluginRegistry({
           throw error;
         }
       }
+      // Recorded before it registers: what redraws as its contributions land
+      // (a broker list and its logo) reads the entry this checkout now is.
+      upsertExternalPlugin(entry);
       try {
         await pluginRegistry.register(entry.plugin);
-        upsertExternalPlugin(entry);
       } catch (error) {
         upsertExternalPlugin({ ...entry, error: error instanceof Error ? error.message : String(error) });
         reportCrash(error, { kind: "plugin", plugin: pluginId });

package/src/app/pane-runtime/ticker-open-runtime.ts

@@ -24,7 +24,7 @@ import {
   tickerOpenFailureMessage,
   type TickerOpenTarget,
 } from "../../tickers/open-target";
-import { findExactTickerSearchMatch } from "../../tickers/search";
+import { findExactTickerSearchMatch, upsertTickerFromSearchResult } from "../../tickers/search";
 import { offerTickerListings, publishTickerOpenTarget as publishOpenTarget } from "./ticker-open-target";
 import { parsePublicTickerKey, publicTickerKey } from "../../utils/exchanges";
 import { attentionActionForPane, captureAttentionAction } from "../../telemetry/attention-counts";
@@ -158,7 +158,7 @@ export function useAppTickerOpenRuntime({
         persistLayout(nextLayout);
       }
       if (paneType === TICKER_RESEARCH_PANE_ID && options?.tabId) {
-        dispatch({ type: "UPDATE_PANE_STATE", paneId: existing.instanceId, patch: { activeTabId: options.tabId } });
+        dispatch({ type: "UPDATE_PANE_STATE", paneId: existing.instanceId, patch: { ...options.tabState, activeTabId: options.tabId } });
       }
       focusVisiblePane(existing.instanceId, nextLayout);
       return;
@@ -186,7 +186,7 @@ export function useAppTickerOpenRuntime({
       );
     persistLayout(nextLayout);
     if (paneType === TICKER_RESEARCH_PANE_ID && options?.tabId) {
-      dispatch({ type: "UPDATE_PANE_STATE", paneId: instance.instanceId, patch: { activeTabId: options.tabId } });
+      dispatch({ type: "UPDATE_PANE_STATE", paneId: instance.instanceId, patch: { ...options.tabState, activeTabId: options.tabId } });
     }
     activatePane(instance.instanceId);
   }, [
@@ -205,9 +205,21 @@ export function useAppTickerOpenRuntime({
     // Before resolving, so a refused open adds no ticker either.
     if (refuseWhileOwnerOff(rawSymbol, options, () => { void openPinnedTicker(rawSymbol, options); })) return;
     const recordAttention = captureAttentionAction();
-    const selectedTicker = options?.instrument !== undefined && (options.instrument || options.listing) ? await tickerRepository.loadTicker(rawSymbol) : null;
+    let selected = options?.instrument !== undefined && (options.instrument || options.listing)
+      ? { ticker: await tickerRepository.loadTicker(rawSymbol), created: false } : null;
+    // A listing the caller chose, such as one contract of an options chain,
+    // opens as given: no search could name it better than its own chain.
+    if (selected && !selected.ticker && options?.listing) {
+      const { listing, instrument } = options;
+      selected = await upsertTickerFromSearchResult(tickerRepository, {
+        providerId: instrument?.brokerId ?? "", ...(instrument?.brokerInstanceId ? { brokerInstanceId: instrument.brokerInstanceId } : {}),
+        symbol: rawSymbol, name: listing.name, exchange: listing.exchange, type: listing.type,
+        ...(listing.currency ? { currency: listing.currency } : {}), ...(instrument ? { brokerContract: instrument } : {}),
+      });
+    }
+    const selectedTicker = selected?.ticker;
     const target = selectedTicker
-      ? { symbol: selectedTicker.metadata.ticker, ticker: selectedTicker, created: false, instrument: options?.instrument, listing: options?.listing }
+      ? { symbol: selectedTicker.metadata.ticker, ticker: selectedTicker, created: selected!.created, instrument: options?.instrument, listing: options?.listing }
       : await resolveOpenTickerTarget(rawSymbol, options?.instrument === null);
     if (!target) return;
     placePinnedTickerTarget(target, options, rawSymbol);

package/src/app/runtime/plugin-bindings.ts

@@ -105,7 +105,7 @@ export function bindPluginRegistryRuntimeAccess({
       pluginRegistry.events.emit("config:changed", { config: nextConfig });
     },
 
-    createBrokerInstance: async (brokerType, label, values) => {
+    createBrokerInstance: async (brokerType, label, values, options = {}) => {
       const instanceId = createBrokerInstanceId(
         brokerType,
         label,
@@ -118,6 +118,7 @@ export function bindPluginRegistryRuntimeAccess({
         connectionMode: typeof values.connectionMode === "string" ? values.connectionMode : undefined,
         config: values,
         enabled: true,
+        ...(options.localOnly ? { localOnly: true } : {}),
       };
       const nextConfig = {
         ...stateRef.current.config,
@@ -153,12 +154,15 @@ export function bindPluginRegistryRuntimeAccess({
         instance.id === instanceId
           ? (() => {
             const nextValues = options.replaceConfig ? values : { ...instance.config, ...values };
+            const { localOnly: wasLocalOnly, ...rest } = instance;
+            const localOnly = options.localOnly ?? wasLocalOnly === true;
             return {
-              ...instance,
+              ...rest,
               label: options.label ?? instance.label,
               enabled: options.enabled ?? instance.enabled,
               connectionMode: typeof nextValues.connectionMode === "string" ? nextValues.connectionMode : instance.connectionMode,
               config: nextValues,
+              ...(localOnly ? { localOnly: true } : {}),
             };
           })()
           : instance,

package/src/app/runtime/update.ts

@@ -6,6 +6,7 @@ import type { AppAction, AppState } from "../../state/app/context";
 import {
   applyUpdate,
   canRestartToApply,
+  canRetryUpdate,
   canSelfUpdate,
   checkForUpdateDetailed,
   discardStagedUpdate,
@@ -15,6 +16,8 @@ import {
   type UpdateProgress,
 } from "../../updater";
 import { resolveUpdateChannel, stagedUpdateFitsChannel } from "../../updater/channel";
+import { updateFailureReason } from "../../updater/failure";
+import { t, tf } from "../../i18n";
 import type { UpdateChannel } from "../../types/config";
 import { VERSION } from "../../version";
 import { debugLog } from "../../utils/debug-log";
@@ -27,11 +30,14 @@ const UPDATE_CHECK_INTERVAL_MS = 60 * 60_000; // hourly
 const updateLog = debugLog.createLogger("update");
 
 /**
- * The header and the command bar show a failed update's message, and the header
- * cuts it to its room: the log keeps what the updater actually said.
+ * The header says why an update failed in a few words and the command bar
+ * shows the whole error: the log keeps what the updater actually said, with
+ * the step and the reason.
  */
 function logUpdateFailure(progress: UpdateProgress): void {
-  if (progress.phase === "error") updateLog.error("update failed", { error: progress.error });
+  if (progress.phase === "error") {
+    updateLog.error("update failed", { error: progress.error, phase: progress.failure?.phase, code: progress.failure?.code });
+  }
 }
 
 /** An update is being downloaded, applied, or is downloaded and waiting for a restart. */
@@ -127,7 +133,9 @@ export function useAppUpdateRuntime({
       return { kind: "error", error: message || "Update check failed" };
     });
 
-    if (result.kind === "error") updateLog.warn("update check failed", { error: result.error });
+    if (result.kind === "error") {
+      updateLog.warn("update check failed", { error: result.error, code: result.failure?.code });
+    }
 
     if (!manual) {
       if (result.kind === "available" && result.release.tagName !== declinedTagRef.current) {
@@ -154,13 +162,25 @@ export function useAppUpdateRuntime({
       return;
     }
 
-    dispatch({ type: "SET_UPDATE_NOTICE", notice: `Update check failed: ${result.error}` });
+    // The reason in a few words, as the failed banner gives it; the log has the error.
+    const reason = result.failure ? t(updateFailureReason(result.failure)) : result.error;
+    dispatch({ type: "SET_UPDATE_NOTICE", notice: tf("Update check failed: {reason}", { reason }) });
   }, [dispatch, stateRef]);
 
   const runUpdateCommand = useCallback(() => {
-    if (canRestartToApply(stateRef.current.updateProgress)) restartToApplyUpdate();
-    else void runUpdateCheck(true);
-  }, [restartToApplyUpdate, runUpdateCheck, stateRef]);
+    const state = stateRef.current;
+    if (canRestartToApply(state.updateProgress)) {
+      restartToApplyUpdate();
+      return;
+    }
+    // After a failed download or install, the command tries again, as the key does.
+    if (canRetryUpdate(state)) {
+      startUpdate(state.updateAvailable!);
+      return;
+    }
+    if (state.updateProgress?.phase === "error") dispatch({ type: "SET_UPDATE_PROGRESS", progress: null });
+    void runUpdateCheck(true);
+  }, [dispatch, restartToApplyUpdate, runUpdateCheck, startUpdate, stateRef]);
 
   useEffect(() => {
     if (!enabled || isDetachedWindow) return;

package/src/architecture/pane-tabs-allowlist.json

@@ -0,0 +1,65 @@
+{
+  "src/plugins/builtin/account-management/pane.tsx": {
+    "hasSession || apiClient.isSignedIn()": "Signed out, every tab is the same sign-in wall."
+  },
+  "src/plugins/builtin/analytics/index.tsx": {
+    "portfolioTabs.length > 0": "The tabs are the user's portfolios; with none there is nothing to choose between."
+  },
+  "src/plugins/builtin/analytics/risk-pane.tsx": {
+    "portfolio": "No local portfolio yet: the pane says to add holdings instead of offering views of nothing."
+  },
+  "src/plugins/builtin/attention/pane.tsx": {
+    "!signInWall": "Signed out, every tab is the same sign-in wall."
+  },
+  "src/plugins/builtin/awards/pane.tsx": {
+    "!denied": "Access denied draws the sign-in or plan wall for every tab."
+  },
+  "src/plugins/builtin/backtest/pane.tsx": {
+    "symbol": "No ticker yet: the pane asks for one before any view applies."
+  },
+  "src/plugins/builtin/catalysts/pane.tsx": {
+    "!openId": "An open event replaces the list by design and registers its own Evidence and History strip."
+  },
+  "src/plugins/builtin/cloud/team/pane.tsx": {
+    "signedIn": "The tabs are the user's teams; signed out there are none and the pane is a sign-in wall."
+  },
+  "src/plugins/builtin/company-attention/pane.tsx": {
+    "!signInWall && !openCompany && !app": "Signed out it is a sign-in wall; an open company or app replaces the board by design and registers its own strip."
+  },
+  "src/plugins/builtin/company-kpis/pane.tsx": {
+    "symbol && !signInWall": "No ticker yet, or signed out: every tab would be the same prompt or sign-in wall."
+  },
+  "src/plugins/builtin/congress-trades/pane.tsx": {
+    "tickerFilter": "A ticker's own congressional trades are one list; the Trades, Members and Tickers tabs belong to the whole-market view."
+  },
+  "src/plugins/builtin/debt-maturities/pane.tsx": {
+    "symbol && !signInWall": "No ticker yet, or signed out: every tab would be the same prompt or sign-in wall."
+  },
+  "src/plugins/builtin/earnings-ripple/pane.tsx": {
+    "holdings.length": "No holdings to ripple from yet: the pane says how to add them instead of offering views of nothing."
+  },
+  "src/plugins/builtin/estimate-revisions/pane.tsx": {
+    "!symbol || signInWall": "No ticker yet, or signed out: every tab would be the same prompt or sign-in wall."
+  },
+  "src/plugins/builtin/gpu/pane.tsx": {
+    "!signIn": "Signed out or unverified, every tab is the same sign-in wall."
+  },
+  "src/plugins/builtin/portfolio-list/pane/index.tsx": {
+    "showCollectionTabs": "The tabs are the pane's collections; a single collection has nothing to switch to."
+  },
+  "src/plugins/builtin/power/pane.tsx": {
+    "!signInWall": "Signed out, every tab is the same sign-in wall."
+  },
+  "src/plugins/builtin/research-search/pane.tsx": {
+    "signInRequired || verificationRequired": "Signed out or unverified, every mode is the same sign-in wall."
+  },
+  "src/plugins/builtin/shared/filing-year-reader.tsx": {
+    "years.length > 1": "The tabs are the filings on record, known once their list answers; a single filing has no other year to pick."
+  },
+  "src/plugins/builtin/supply-chain/pane.tsx": {
+    "symbol": "No ticker yet: the pane asks for one before any view applies."
+  },
+  "src/plugins/builtin/ticker-detail/pane.tsx": {
+    "!paneSettings.hideTabs && ticker": "The hideTabs setting locks the pane to one view, and with no ticker selected there is nothing to research."
+  }
+}