nodal-agents 0.2.0 → 0.3.0

package/cli.js

@@ -9,21 +9,67 @@ var __export = (target, all) => {
     __defProp(target, name, { get: all[name], enumerable: true });
 };
 
+// src/lib/version.ts
+var version_exports = {};
+__export(version_exports, {
+  getInstalledVersion: () => getInstalledVersion,
+  getLatestVersion: () => getLatestVersion
+});
+import { createRequire } from "module";
+import { fileURLToPath } from "url";
+import { dirname, join } from "path";
+import { existsSync } from "fs";
+import { execa } from "execa";
+function resolveCliPackageJsonPath() {
+  const here = dirname(fileURLToPath(import.meta.url));
+  if (existsSync(join(here, "runner.js"))) {
+    return join(here, "package.json");
+  }
+  return join(here, "..", "..", "package.json");
+}
+function getInstalledVersion() {
+  try {
+    const pkgPath = resolveCliPackageJsonPath();
+    const _require = createRequire(import.meta.url);
+    const pkg = _require(pkgPath);
+    return typeof pkg.version === "string" && pkg.version ? pkg.version : "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+async function getLatestVersion() {
+  try {
+    const { stdout } = await execa("npm", ["view", "nodal-agents", "version"], {
+      timeout: 5e3,
+      reject: true
+    });
+    const trimmed = stdout.trim();
+    return trimmed || null;
+  } catch {
+    return null;
+  }
+}
+var init_version = __esm({
+  "src/lib/version.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/config.ts
 import { z } from "zod";
 import { homedir } from "os";
-import { join } from "path";
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
+import { join as join2 } from "path";
+import { readFileSync, writeFileSync, mkdirSync, existsSync as existsSync2 } from "fs";
 import { randomBytes } from "crypto";
 function ensureConfigDir() {
   for (const dir of [CONFIG_DIR, PID_DIR, LOG_DIR, PG_DATA_DIR]) {
-    if (!existsSync(dir)) {
+    if (!existsSync2(dir)) {
       mkdirSync(dir, { recursive: true });
     }
   }
 }
 function readConfig(configFile = CONFIG_FILE) {
-  if (!existsSync(configFile)) return null;
+  if (!existsSync2(configFile)) return null;
   let parsed;
   try {
     const raw = JSON.parse(readFileSync(configFile, "utf-8"));
@@ -102,11 +148,11 @@ var init_config = __esm({
         googleClientSecret: z.string().optional()
       }).optional()
     });
-    CONFIG_DIR = join(homedir(), ".nodalai");
-    CONFIG_FILE = join(CONFIG_DIR, "config.json");
-    PID_DIR = join(CONFIG_DIR, "pids");
-    LOG_DIR = join(CONFIG_DIR, "logs");
-    PG_DATA_DIR = join(CONFIG_DIR, "pg-data");
+    CONFIG_DIR = join2(homedir(), ".nodalai");
+    CONFIG_FILE = join2(CONFIG_DIR, "config.json");
+    PID_DIR = join2(CONFIG_DIR, "pids");
+    LOG_DIR = join2(CONFIG_DIR, "logs");
+    PG_DATA_DIR = join2(CONFIG_DIR, "pg-data");
   }
 });
 
@@ -3392,7 +3438,7 @@ var init_subquery = __esm({
 
 // ../../node_modules/.pnpm/drizzle-orm@0.45.2_@electri_96bd1661c4535b1384d37581a38c7c74/node_modules/drizzle-orm/version.js
 var version;
-var init_version = __esm({
+var init_version2 = __esm({
   "../../node_modules/.pnpm/drizzle-orm@0.45.2_@electri_96bd1661c4535b1384d37581a38c7c74/node_modules/drizzle-orm/version.js"() {
     "use strict";
     version = "0.45.2";
@@ -3405,7 +3451,7 @@ var init_tracing = __esm({
   "../../node_modules/.pnpm/drizzle-orm@0.45.2_@electri_96bd1661c4535b1384d37581a38c7c74/node_modules/drizzle-orm/tracing.js"() {
     "use strict";
     init_tracing_utils();
-    init_version();
+    init_version2();
     tracer = {
       startActiveSpan(name, fn) {
         if (!otel) {
@@ -3840,7 +3886,7 @@ var init_sql = __esm({
         return new SQL([new StringChunk(str)]);
       }
       sql2.raw = raw;
-      function join8(chunks, separator) {
+      function join9(chunks, separator) {
         const result = [];
         for (const [i, chunk] of chunks.entries()) {
           if (i > 0 && separator !== void 0) {
@@ -3850,7 +3896,7 @@ var init_sql = __esm({
         }
         return new SQL(result);
       }
-      sql2.join = join8;
+      sql2.join = join9;
       function identifier(value) {
         return new Name(value);
       }
@@ -8149,7 +8195,7 @@ var init_select2 = __esm({
           const baseTableName = this.tableName;
           const tableName = getTableLikeName(table);
           for (const item of extractUsedTable(table)) this.usedTables.add(item);
-          if (typeof tableName === "string" && this.config.joins?.some((join8) => join8.alias === tableName)) {
+          if (typeof tableName === "string" && this.config.joins?.some((join9) => join9.alias === tableName)) {
             throw new Error(`Alias "${tableName}" is already used in this query`);
           }
           if (!this.isPartialSelect) {
@@ -9684,7 +9730,7 @@ var init_update = __esm({
       createJoin(joinType) {
         return (table, on) => {
           const tableName = getTableLikeName(table);
-          if (typeof tableName === "string" && this.config.joins.some((join8) => join8.alias === tableName)) {
+          if (typeof tableName === "string" && this.config.joins.some((join9) => join9.alias === tableName)) {
             throw new Error(`Alias "${tableName}" is already used in this query`);
           }
           if (typeof on === "function") {
@@ -9780,10 +9826,10 @@ var init_update = __esm({
               const fromFields = this.getTableLikeFields(this.config.from);
               fields[tableName] = fromFields;
             }
-            for (const join8 of this.config.joins) {
-              const tableName2 = getTableLikeName(join8.table);
-              if (typeof tableName2 === "string" && !is(join8.table, SQL)) {
-                const fromFields = this.getTableLikeFields(join8.table);
+            for (const join9 of this.config.joins) {
+              const tableName2 = getTableLikeName(join9.table);
+              if (typeof tableName2 === "string" && !is(join9.table, SQL)) {
+                const fromFields = this.getTableLikeFields(join9.table);
                 fields[tableName2] = fromFields;
               }
             }
@@ -11025,10 +11071,10 @@ var migrate_exports = {};
 __export(migrate_exports, {
   runMigrations: () => runMigrations
 });
-import { fileURLToPath } from "url";
-import { join as join2, dirname } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import { join as join3, dirname as dirname2 } from "path";
 import {
-  existsSync as existsSync2,
+  existsSync as existsSync3,
   mkdtempSync,
   readdirSync,
   readFileSync as readFileSync2,
@@ -11039,27 +11085,27 @@ import { tmpdir } from "os";
 async function runMigrations(connectionString, opts = {}) {
   const sql2 = src_default(connectionString, { max: 1 });
   const db = drizzle(sql2);
-  const here = dirname(fileURLToPath(import.meta.url));
-  const sibling = join2(here, "migrations");
-  const sourceFolder = existsSync2(sibling) ? sibling : join2(here, "../migrations");
+  const here = dirname2(fileURLToPath2(import.meta.url));
+  const sibling = join3(here, "migrations");
+  const sourceFolder = existsSync3(sibling) ? sibling : join3(here, "../migrations");
   const migrationsFolder = opts.patchVectorAsText ? patchMigrationsForNoVector(sourceFolder) : sourceFolder;
   await migrate(db, { migrationsFolder });
   await sql2.end();
 }
 function patchMigrationsForNoVector(sourceFolder) {
-  const tmpFolder = mkdtempSync(join2(tmpdir(), "nodalai-migrations-"));
-  const metaDir = join2(tmpFolder, "meta");
+  const tmpFolder = mkdtempSync(join3(tmpdir(), "nodalai-migrations-"));
+  const metaDir = join3(tmpFolder, "meta");
   mkdirSync2(metaDir, { recursive: true });
   for (const entry of readdirSync(sourceFolder, { withFileTypes: true })) {
     if (entry.isDirectory() && entry.name === "meta") {
-      for (const metaFile of readdirSync(join2(sourceFolder, "meta"))) {
-        const content = readFileSync2(join2(sourceFolder, "meta", metaFile), "utf8");
-        writeFileSync2(join2(metaDir, metaFile), content);
+      for (const metaFile of readdirSync(join3(sourceFolder, "meta"))) {
+        const content = readFileSync2(join3(sourceFolder, "meta", metaFile), "utf8");
+        writeFileSync2(join3(metaDir, metaFile), content);
       }
     } else if (entry.isFile() && entry.name.endsWith(".sql")) {
-      const content = readFileSync2(join2(sourceFolder, entry.name), "utf8");
+      const content = readFileSync2(join3(sourceFolder, entry.name), "utf8");
       const patched = content.replace(/\bvector\(\d+\)/g, "text");
-      writeFileSync2(join2(tmpFolder, entry.name), patched);
+      writeFileSync2(join3(tmpFolder, entry.name), patched);
     }
   }
   return tmpFolder;
@@ -11074,11 +11120,11 @@ var init_migrate = __esm({
 });
 
 // src/lib/postgres.ts
-import { existsSync as existsSync3, readFileSync as readFileSync3, unlinkSync } from "fs";
-import { join as join3 } from "path";
+import { existsSync as existsSync4, readFileSync as readFileSync3, unlinkSync } from "fs";
+import { join as join4 } from "path";
 function clearStalePostmasterPid(dataDir) {
-  const pidFile = join3(dataDir, "postmaster.pid");
-  if (!existsSync3(pidFile)) return;
+  const pidFile = join4(dataDir, "postmaster.pid");
+  if (!existsSync4(pidFile)) return;
   let pid;
   try {
     const firstLine = readFileSync3(pidFile, "utf-8").split("\n")[0]?.trim() ?? "";
@@ -11099,8 +11145,8 @@ function clearStalePostmasterPid(dataDir) {
   }
 }
 async function stopOrphanPostgres(dataDir = PG_DATA_DIR) {
-  const pidFile = join3(dataDir, "postmaster.pid");
-  if (!existsSync3(pidFile)) return false;
+  const pidFile = join4(dataDir, "postmaster.pid");
+  if (!existsSync4(pidFile)) return false;
   try {
     const EmbeddedPostgres = (await import("embedded-postgres")).default;
     const pg = new EmbeddedPostgres({
@@ -11147,7 +11193,7 @@ async function startEmbeddedPostgres(dataDir = PG_DATA_DIR, port = 25432) {
       if (verboseLog) process.stdout.write("[pg] " + m + "\n");
     }
   });
-  const alreadyInitialised = existsSync3(join3(dataDir, "PG_VERSION"));
+  const alreadyInitialised = existsSync4(join4(dataDir, "PG_VERSION"));
   if (alreadyInitialised) clearStalePostmasterPid(dataDir);
   try {
     if (!alreadyInitialised) {
@@ -12327,12 +12373,6 @@ var init_agents = __esm({
         // (Memory Sprint 2). Pure char budget — token estimation done at call site
         // (length/4). 1500 chars ≈ ~375 tokens, similar to Hermes' 2200+1375 split.
         memoryTokenBudget: integer("memory_token_budget").default(1500).notNull(),
-        // Absolute filesystem path the agent's file_* tools are scoped to. NULL =
-        // file tools fail loud (`workspace_not_configured`). Per-agent so each
-        // agent in an entity can have its own scope (e.g. one agent on Obsidian
-        // vault, another on a code repo). Resolution at tool-call time runs
-        // through realpath + boundary check (see file-ops/workspace.ts).
-        workspaceRootPath: text("workspace_root_path"),
         // User-controlled order on the /agents page (Brique A, migration 0019).
         // Default 0 — ties are broken by `name ASC` in the list query. Newly
         // created agents land at the front of their group by default; the user
@@ -13172,6 +13212,43 @@ var init_agent_connector_assignments = __esm({
   }
 });
 
+// ../../packages/db/src/schema/agent-workspaces.ts
+var agentWorkspaces;
+var init_agent_workspaces = __esm({
+  "../../packages/db/src/schema/agent-workspaces.ts"() {
+    "use strict";
+    init_pg_core();
+    init_agents();
+    init_entities();
+    agentWorkspaces = pgTable(
+      "agent_workspaces",
+      {
+        id: uuid("id").primaryKey().defaultRandom(),
+        agentId: uuid("agent_id").notNull().references(() => agents.id, { onDelete: "cascade" }),
+        // entityId mirrors the agent's entity — useful for ownership checks without
+        // a join. Set to CASCADE so deleting an entity also sweeps its workspaces.
+        entityId: uuid("entity_id").references(() => entities.id, { onDelete: "cascade" }),
+        // Human-readable label, also the first path segment the LLM must use when
+        // the agent has more than one workspace (e.g. "notes/file.md").
+        // Must be unique per agent. Max 80 chars keeps prompts readable.
+        label: text("label").notNull(),
+        // Absolute filesystem path — validated to be absolute at write time.
+        path: text("path").notNull(),
+        // UI display order; lower = appears first. Default 0.
+        position: integer("position").default(0).notNull(),
+        createdAt: timestamp("created_at", { withTimezone: true }).defaultNow(),
+        updatedAt: timestamp("updated_at", { withTimezone: true }).defaultNow()
+      },
+      (table) => [
+        // Enforce label uniqueness per agent
+        uniqueIndex("agent_workspaces_agent_label_unique").on(table.agentId, table.label),
+        // Fast lookup of all workspaces for an agent (execute.ts, actions.ts)
+        index("idx_agent_workspaces_agent_id").on(table.agentId)
+      ]
+    );
+  }
+});
+
 // ../../packages/db/src/schema/index.ts
 var schema_exports = {};
 __export(schema_exports, {
@@ -13209,6 +13286,7 @@ __export(schema_exports, {
   agentSkillAssignments: () => agentSkillAssignments,
   agentSkills: () => agentSkills,
   agentTasks: () => agentTasks,
+  agentWorkspaces: () => agentWorkspaces,
   agents: () => agents,
   approvalRequests: () => approvalRequests,
   approvalRules: () => approvalRules,
@@ -13253,6 +13331,7 @@ var init_schema2 = __esm({
     init_misc();
     init_auth();
     init_agent_connector_assignments();
+    init_agent_workspaces();
   }
 });
 
@@ -13288,9 +13367,9 @@ var init_transaction = __esm({
 
 // ../../packages/secrets/src/index.ts
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes3 } from "crypto";
-import { chmodSync, existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { chmodSync, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname2, join as join4 } from "path";
+import { dirname as dirname3, join as join5 } from "path";
 var init_src3 = __esm({
   "../../packages/secrets/src/index.ts"() {
     "use strict";
@@ -13546,16 +13625,16 @@ var init_ports = __esm({
 });
 
 // src/lib/processes.ts
-import { execa } from "execa";
-import { createWriteStream, writeFileSync as writeFileSync4, readFileSync as readFileSync5, existsSync as existsSync5 } from "fs";
-import { join as join5, dirname as dirname3, resolve } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
+import { execa as execa2 } from "execa";
+import { createWriteStream, writeFileSync as writeFileSync4, readFileSync as readFileSync5, existsSync as existsSync6 } from "fs";
+import { join as join6, dirname as dirname4, resolve } from "path";
+import { fileURLToPath as fileURLToPath3 } from "url";
 async function killProcessTree(child) {
   const pid = child.pid;
   if (!pid) return;
   if (process.platform === "win32") {
     try {
-      await execa("taskkill", ["/T", "/F", "/PID", String(pid)], { reject: false });
+      await execa2("taskkill", ["/T", "/F", "/PID", String(pid)], { reject: false });
     } catch {
     }
     return;
@@ -13570,29 +13649,45 @@ async function killProcessTree(child) {
   } catch {
   }
 }
+function isPidAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    return err.code === "EPERM";
+  }
+}
+async function waitForPidDead(pid, timeoutMs = 5e3) {
+  const deadline = Date.now() + timeoutMs;
+  while (Date.now() < deadline) {
+    if (!isPidAlive(pid)) return true;
+    await sleep(250);
+  }
+  return !isPidAlive(pid);
+}
 function resolveAppDir(appName) {
-  const here = fileURLToPath2(import.meta.url);
-  const fileDir = dirname3(here);
+  const here = fileURLToPath3(import.meta.url);
+  const fileDir = dirname4(here);
   let cursor = fileDir;
   for (let i = 0; i < 8; i++) {
-    if (existsSync5(join5(cursor, "pnpm-workspace.yaml"))) {
-      return join5(cursor, appName);
+    if (existsSync6(join6(cursor, "pnpm-workspace.yaml"))) {
+      return join6(cursor, appName);
     }
-    const parent = dirname3(cursor);
+    const parent = dirname4(cursor);
     if (parent === cursor) break;
     cursor = parent;
   }
   return resolve(fileDir, "..", "..", "..", "..", appName);
 }
 function spawnRunner(env) {
-  const logFile = join5(LOG_DIR, "runner.log");
+  const logFile = join6(LOG_DIR, "runner.log");
   const outStream = createWriteStream(logFile, { flags: "a" });
   let bin;
   let args;
   let cwd;
   if (BUNDLED_ROOT) {
     bin = process.execPath;
-    args = [join5(BUNDLED_ROOT, "runner.js")];
+    args = [join6(BUNDLED_ROOT, "runner.js")];
     cwd = BUNDLED_ROOT;
   } else {
     const runnerDir = resolveAppDir("apps/runner");
@@ -13610,7 +13705,7 @@ env keys: ${Object.keys(env).join(",")}
 
 `
   );
-  const child = execa(bin, args, {
+  const child = execa2(bin, args, {
     cwd,
     env: { ...process.env, ...env },
     stdio: ["ignore", "pipe", "pipe"],
@@ -13624,7 +13719,7 @@ env keys: ${Object.keys(env).join(",")}
   return child;
 }
 function spawnWeb(env, opts = {}) {
-  const logFile = join5(LOG_DIR, "web.log");
+  const logFile = join6(LOG_DIR, "web.log");
   const outStream = createWriteStream(logFile, { flags: "a" });
   let bin;
   let args;
@@ -13632,8 +13727,8 @@ function spawnWeb(env, opts = {}) {
   let modeLabel;
   if (BUNDLED_ROOT) {
     bin = process.execPath;
-    args = [join5(BUNDLED_ROOT, "web", "server.js")];
-    cwd = join5(BUNDLED_ROOT, "web");
+    args = [join6(BUNDLED_ROOT, "web", "server.js")];
+    cwd = join6(BUNDLED_ROOT, "web");
     modeLabel = "bundled-standalone";
   } else {
     const webDir = resolveAppDir("apps/web");
@@ -13653,7 +13748,7 @@ env keys: ${Object.keys(env).join(",")}
 
 `
   );
-  const child = execa(bin, args, {
+  const child = execa2(bin, args, {
     cwd,
     env: { ...process.env, ...env },
     stdio: ["ignore", "pipe", "pipe"],
@@ -13666,14 +13761,14 @@ env keys: ${Object.keys(env).join(",")}
 }
 function resolveLocalBin(packageDir, binName) {
   const ext = process.platform === "win32" ? ".CMD" : "";
-  return join5(packageDir, "node_modules", ".bin", `${binName}${ext}`);
+  return join6(packageDir, "node_modules", ".bin", `${binName}${ext}`);
 }
 function writePids(pids) {
-  writeFileSync4(join5(PID_DIR, "processes.json"), JSON.stringify(pids, null, 2), "utf-8");
+  writeFileSync4(join6(PID_DIR, "processes.json"), JSON.stringify(pids, null, 2), "utf-8");
 }
 function readPids() {
-  const pidFile = join5(PID_DIR, "processes.json");
-  if (!existsSync5(pidFile)) return null;
+  const pidFile = join6(PID_DIR, "processes.json");
+  if (!existsSync6(pidFile)) return null;
   try {
     return JSON.parse(readFileSync5(pidFile, "utf-8"));
   } catch {
@@ -13681,8 +13776,8 @@ function readPids() {
   }
 }
 function clearPids() {
-  const pidFile = join5(PID_DIR, "processes.json");
-  if (existsSync5(pidFile)) {
+  const pidFile = join6(PID_DIR, "processes.json");
+  if (existsSync6(pidFile)) {
     writeFileSync4(pidFile, JSON.stringify({}), "utf-8");
   }
 }
@@ -13710,8 +13805,8 @@ var init_processes = __esm({
     "use strict";
     init_config();
     BUNDLED_ROOT = (() => {
-      const here = dirname3(fileURLToPath2(import.meta.url));
-      return existsSync5(join5(here, "runner.js")) ? here : null;
+      const here = dirname4(fileURLToPath3(import.meta.url));
+      return existsSync6(join6(here, "runner.js")) ? here : null;
     })();
   }
 });
@@ -13728,9 +13823,9 @@ async function killSilent(child) {
   await killProcessTree(child);
 }
 async function pidListeningOnPort(port) {
-  const { execa: execa2 } = await import("execa");
+  const { execa: execa4 } = await import("execa");
   try {
-    const { stdout } = await execa2("netstat", ["-ano"], { reject: false });
+    const { stdout } = await execa4("netstat", ["-ano"], { reject: false });
     for (const line2 of stdout.split(/\r?\n/)) {
       const m = line2.match(/\s+TCP\s+\S+:(\d+)\s+\S+\s+LISTENING\s+(\d+)/);
       if (m && m[1] && m[2] && Number.parseInt(m[1], 10) === port) {
@@ -13766,26 +13861,34 @@ async function runUp(opts = {}) {
       console.log(chalk2.gray(`  - ${o.name} on :${o.port} (pid ${o.pid})`));
     }
     console.log(chalk2.yellow("Cleaning up before starting\u2026"));
-    const { execa: execa2 } = await import("execa");
+    const { execa: execa4 } = await import("execa");
     const pgOrphan = orphans.find((o) => o.name === "postgres");
     if (pgOrphan) {
-      const stopped = await stopOrphanPostgres();
-      if (!stopped) {
+      await stopOrphanPostgres();
+      if (isPidAlive(pgOrphan.pid)) {
         try {
           if (process.platform === "win32") {
-            await execa2("taskkill", ["/T", "/F", "/PID", String(pgOrphan.pid)], { reject: false });
+            await execa4("taskkill", ["/T", "/F", "/PID", String(pgOrphan.pid)], { reject: false });
           } else {
             process.kill(pgOrphan.pid, "SIGKILL");
           }
         } catch {
         }
+        await waitForPidDead(pgOrphan.pid, 5e3);
+      }
+      if (isPidAlive(pgOrphan.pid)) {
+        const killCmd = process.platform === "win32" ? `taskkill /T /F /PID ${pgOrphan.pid}` : `kill -9 ${pgOrphan.pid}`;
+        throw new Error(
+          `An orphaned Postgres (pid ${pgOrphan.pid}) is still running and holds the shared-memory block for the data dir. Rotating ports won't help \u2014 the SHM segment is keyed to the data dir, not the port.
+  Fix: run \`nodal-agents down\`, then \`${killCmd}\`. If it persists, reboot to clear the orphan kernel object. No data is lost \u2014 pg-data is preserved.`
+        );
       }
     }
     for (const o of orphans) {
       if (o.name === "postgres") continue;
       try {
         if (process.platform === "win32") {
-          await execa2("taskkill", ["/T", "/F", "/PID", String(o.pid)], { reject: false });
+          await execa4("taskkill", ["/T", "/F", "/PID", String(o.pid)], { reject: false });
         } else {
           process.kill(o.pid, "SIGKILL");
         }
@@ -13890,6 +13993,20 @@ async function runUp(opts = {}) {
     clearPids();
     throw err;
   }
+  void (async () => {
+    try {
+      const { getInstalledVersion: getInstalledVersion2, getLatestVersion: getLatestVersion2 } = await Promise.resolve().then(() => (init_version(), version_exports));
+      const installed = getInstalledVersion2();
+      const latest = await Promise.race([
+        getLatestVersion2(),
+        new Promise((resolve2) => setTimeout(() => resolve2(null), 3e3))
+      ]);
+      if (latest !== null && latest !== installed) {
+        console.log(chalk2.cyan(`  \u2139 v${latest} available \u2014 run \`nodal-agents update\``));
+      }
+    } catch {
+    }
+  })();
   if (!process.env["NODALAI_NO_BROWSER"]) {
     try {
       await open(webUrl);
@@ -13936,8 +14053,8 @@ __export(down_exports, {
   runDown: () => runDown
 });
 import chalk3 from "chalk";
-import { existsSync as existsSync6 } from "fs";
-import { join as join6 } from "path";
+import { existsSync as existsSync7 } from "fs";
+import { join as join7 } from "path";
 function killPid(pid, label) {
   try {
     process.kill(pid, "SIGTERM");
@@ -13954,8 +14071,8 @@ function killPid(pid, label) {
   }
 }
 async function stopPostgresGracefully() {
-  const pidFile = join6(PG_DATA_DIR, "postmaster.pid");
-  if (!existsSync6(pidFile)) return false;
+  const pidFile = join7(PG_DATA_DIR, "postmaster.pid");
+  if (!existsSync7(pidFile)) return false;
   try {
     const EmbeddedPostgres = (await import("embedded-postgres")).default;
     const pg = new EmbeddedPostgres({
@@ -14006,8 +14123,8 @@ __export(logs_exports, {
   runLogs: () => runLogs
 });
 import chalk4 from "chalk";
-import { existsSync as existsSync7, createReadStream, watch, statSync } from "fs";
-import { join as join7 } from "path";
+import { existsSync as existsSync8, createReadStream, watch, statSync } from "fs";
+import { join as join8 } from "path";
 function isServiceName(s) {
   return VALID_SERVICES.includes(s);
 }
@@ -14019,8 +14136,8 @@ async function runLogs(service) {
   }
   const services = target === "all" ? VALID_SERVICES : [target];
   for (const svc of services) {
-    const logFile = join7(LOG_DIR, `${svc}.log`);
-    if (!existsSync7(logFile)) {
+    const logFile = join8(LOG_DIR, `${svc}.log`);
+    if (!existsSync8(logFile)) {
       console.log(chalk4.gray(`  [${svc}] No log file yet at ${logFile}`));
       continue;
     }
@@ -14034,8 +14151,8 @@ async function runLogs(service) {
     });
   }
   if (target !== "all") {
-    const logFile = join7(LOG_DIR, `${target}.log`);
-    if (!existsSync7(logFile)) {
+    const logFile = join8(LOG_DIR, `${target}.log`);
+    if (!existsSync8(logFile)) {
       console.log(chalk4.yellow("Waiting for log file to be created\u2026"));
     }
     console.log(chalk4.gray("\nFollowing log (Ctrl+C to stop)...\n"));
@@ -14076,7 +14193,7 @@ __export(reset_exports, {
 });
 import chalk5 from "chalk";
 import prompts2 from "prompts";
-import { rmSync, existsSync as existsSync8 } from "fs";
+import { rmSync, existsSync as existsSync9 } from "fs";
 async function runReset(options = {}) {
   if (!options.yes) {
     const { confirm } = await prompts2({
@@ -14094,7 +14211,7 @@ async function runReset(options = {}) {
   }
   console.log(chalk5.yellow("Stopping any running processes\u2026"));
   await runDown();
-  if (existsSync8(CONFIG_DIR)) {
+  if (existsSync9(CONFIG_DIR)) {
     rmSync(CONFIG_DIR, { recursive: true, force: true });
     console.log(chalk5.green(`  Removed ${CONFIG_DIR}`));
   } else {
@@ -14112,17 +14229,106 @@ var init_reset = __esm({
   }
 });
 
+// src/commands/update.ts
+var update_exports = {};
+__export(update_exports, {
+  runUpdate: () => runUpdate
+});
+import chalk6 from "chalk";
+import { execa as execa3 } from "execa";
+async function runUpdate(opts = {}) {
+  const installed = getInstalledVersion();
+  const latest = await getLatestVersion();
+  if (latest === null) {
+    console.log(
+      chalk6.yellow(
+        "Could not reach the npm registry to check for the latest version (offline or npm not in PATH)."
+      )
+    );
+    console.log(
+      chalk6.yellow(
+        "To update manually, run: npm install -g nodal-agents@latest && nodal-agents up"
+      )
+    );
+    process.exit(1);
+  }
+  if (installed === latest) {
+    console.log(chalk6.green(`  \u2713 Already on the latest version (${installed})`));
+    return;
+  }
+  console.log(chalk6.cyan(`  \u2191 Updating ${installed} \u2192 ${latest}`));
+  console.log(chalk6.gray("  Stopping services\u2026"));
+  try {
+    await runDown();
+  } catch {
+  }
+  console.log(chalk6.gray("  Installing nodal-agents@latest\u2026"));
+  try {
+    await execa3("npm", ["install", "-g", "nodal-agents@latest"], { stdio: "inherit" });
+  } catch (err) {
+    const code = err.code;
+    const message = err instanceof Error ? err.message : String(err);
+    if (code === "ENOENT" || message.includes("ENOENT")) {
+      console.error(
+        chalk6.red(
+          "\n  \u2717 npm not found in PATH.\n  Make sure Node.js is installed and `npm` is on your PATH,\n  then re-run `nodal-agents update`."
+        )
+      );
+      process.exit(1);
+    }
+    if (code === "EACCES" || message.toLowerCase().includes("permission") || message.includes("EACCES")) {
+      console.error(
+        chalk6.red(
+          "\n  \u2717 Permission denied while installing.\n  Run the command with elevated privileges:\n" + (process.platform === "win32" ? "    Run your terminal as Administrator, then retry `nodal-agents update`." : "    sudo nodal-agents update")
+        )
+      );
+      process.exit(1);
+    }
+    throw err;
+  }
+  console.log(chalk6.green("  \u2713 nodal-agents updated."));
+  if (opts.noRestart) {
+    console.log(chalk6.cyan("  Run `nodal-agents up` to start the updated stack."));
+    return;
+  }
+  console.log(chalk6.gray("  Starting updated services (detached)\u2026"));
+  try {
+    const child = execa3("nodal-agents", ["up"], {
+      detached: true,
+      stdio: "ignore",
+      // Prefer the PATH-resolved global shim so the new version is loaded.
+      shell: process.platform === "win32"
+    });
+    child.unref();
+  } catch {
+    console.log(
+      chalk6.yellow(
+        "  Could not auto-start. Run `nodal-agents up` manually to start the updated stack."
+      )
+    );
+  }
+  console.log(chalk6.green(`  \u2713 Updated to ${latest}. Services starting in background.`));
+}
+var init_update2 = __esm({
+  "src/commands/update.ts"() {
+    "use strict";
+    init_version();
+    init_down();
+  }
+});
+
 // src/index.ts
+init_version();
 import { Command } from "commander";
-import chalk6 from "chalk";
+import chalk7 from "chalk";
 var program = new Command();
-program.name("nodal-agents").description("Local AI agent platform \u2014 one command to start everything").version("0.0.0").enablePositionalOptions();
+program.name("nodal-agents").description("Local AI agent platform \u2014 one command to start everything").version(getInstalledVersion()).enablePositionalOptions();
 program.option("--dev", "Run web in `next dev` mode (HMR, no prebuild required)").action(async (opts) => {
   const { runUp: runUp2 } = await Promise.resolve().then(() => (init_up(), up_exports));
   try {
     await runUp2({ dev: opts.dev });
   } catch (err) {
-    console.error(chalk6.red("Error:"), err instanceof Error ? err.message : String(err));
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -14134,7 +14340,7 @@ program.command("init").description("Interactive wizard \u2014 configure LLM, po
   try {
     await runInit2({ force: opts.force, nonInteractive: opts.nonInteractive });
   } catch (err) {
-    console.error(chalk6.red("Error:"), err instanceof Error ? err.message : String(err));
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -14143,7 +14349,7 @@ program.command("up").description("Start Postgres, runner, and web \u2014 open b
   try {
     await runUp2({ dev: opts.dev });
   } catch (err) {
-    console.error(chalk6.red("Error:"), err instanceof Error ? err.message : String(err));
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -14152,7 +14358,7 @@ program.command("down").description("Stop all running Nodal-Agents processes").a
   try {
     await runDown2();
   } catch (err) {
-    console.error(chalk6.red("Error:"), err instanceof Error ? err.message : String(err));
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -14161,7 +14367,7 @@ program.command("logs [service]").description("Tail logs for a service (web | ru
   try {
     await runLogs2(service);
   } catch (err) {
-    console.error(chalk6.red("Error:"), err instanceof Error ? err.message : String(err));
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });
@@ -14170,7 +14376,16 @@ program.command("reset").description("Delete all Nodal-Agents data and config").
   try {
     await runReset2({ yes: opts.yes });
   } catch (err) {
-    console.error(chalk6.red("Error:"), err instanceof Error ? err.message : String(err));
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
+    process.exit(1);
+  }
+});
+program.command("update").description("Update nodal-agents to the latest version and restart the stack").option("--no-restart", "Install the update but do not restart services automatically").action(async (opts) => {
+  const { runUpdate: runUpdate2 } = await Promise.resolve().then(() => (init_update2(), update_exports));
+  try {
+    await runUpdate2({ noRestart: opts.restart === false });
+  } catch (err) {
+    console.error(chalk7.red("Error:"), err instanceof Error ? err.message : String(err));
     process.exit(1);
   }
 });