orizu 0.5.49 → 0.5.50

package/dist/self-update.js

@@ -1,17 +1,14 @@
-import { spawn, spawnSync } from 'child_process';
+import { spawn } from 'child_process';
 import { closeSync, existsSync, mkdirSync, openSync, readFileSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync, } from 'fs';
 import { homedir } from 'os';
 import { basename, dirname, join } from 'path';
-import { stderr as errorOutput, stdout as output } from 'process';
 import { parseGlobalFlags } from './global-flags.js';
-import { sanitizeTerminalText } from './json-response.js';
 import { findUnknownOption } from './option-validation.js';
-const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000, CHECK_TIMEOUT_MS = 5_000, CHILD_TIMEOUT_MS = 60_000;
+const CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000, CHECK_TIMEOUT_MS = 5_000;
 // A claim file outliving this window belongs to a process that died mid-claim;
 // treating it as live would silently disable the daily refresh forever.
 const ABANDONED_CLAIM_MS = 60_000;
-const STDERR_TAIL_CHARS = 4_000;
-const MANUAL_INSTALL_COMMAND = 'npm i -g orizu@latest';
+export const MANUAL_INSTALL_COMMAND = 'npm i -g orizu@latest';
 const UPDATE_OPTIONS = new Set(['--dry-run', '--json', '--refresh-cache']);
 const UPDATE_USAGE = 'Usage: orizu update [--dry-run] [--json]';
 export const defaultPassiveUpdateIo = { exit: process.exit, spawn };
@@ -106,7 +103,7 @@ function writeCache(latest) {
     writeFileSync(temporary, `${JSON.stringify({ checkedAt: new Date().toISOString(), latest }, null, 2)}\n`);
     renameSync(temporary, path);
 }
-function tryWriteCache(latest) {
+export function tryWriteCache(latest) {
     try {
         writeCache(latest);
     }
@@ -164,7 +161,7 @@ function claimPassiveRefresh(previousCache) {
         }
     }
 }
-function resolveUpdateRegistry() {
+export function resolveUpdateRegistry() {
     const registry = process.env.ORIZU_UPDATE_REGISTRY ?? 'https://registry.npmjs.org';
     let parsed;
     try {
@@ -178,7 +175,7 @@ function resolveUpdateRegistry() {
     }
     return registry.replace(/\/+$/u, '');
 }
-async function resolveLatest(registry = resolveUpdateRegistry()) {
+export async function resolveLatest(registry = resolveUpdateRegistry()) {
     const response = await fetch(`${registry}/orizu/latest`, {
         headers: { accept: 'application/json' },
         signal: AbortSignal.timeout(CHECK_TIMEOUT_MS),
@@ -191,247 +188,14 @@ async function resolveLatest(registry = resolveUpdateRegistry()) {
     parseSemver(body.version);
     return body.version;
 }
-function npmInvocation() {
+export function npmInvocation() {
     // Windows is refused in detectNpmGlobalInstall, so only the POSIX layout is reachable here.
     const sibling = join(dirname(process.execPath), 'npm');
     return { command: existsSync(sibling) ? sibling : 'npm', args: [] };
 }
-function cliInvocation(install, args) {
+export function cliInvocation(install, args) {
     return { command: install.binPath, args };
 }
-function verifyTimeoutMs() {
-    const override = process.env.ORIZU_UPDATE_TEST_VERIFY_TIMEOUT_MS;
-    if (override === undefined)
-        return CHILD_TIMEOUT_MS;
-    const parsed = Number(override);
-    return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : CHILD_TIMEOUT_MS;
-}
-/**
- * Refresh managed skills through the given CLI binary and classify the outcome
- * from the child's --json report, never from its human text: an install with
- * no skill targets reports 'none', the one state a caller of `update --json`
- * most needs to see (ADR-001 coupling).
- */
-async function refreshManagedSkills(command, args, io) {
-    const child = await runStreaming(command, [...args, 'skills', 'update', '--json'], io, CHILD_TIMEOUT_MS, undefined, true);
-    if (child.status !== 0)
-        return { status: child.status, timedOut: child.timedOut, skills: 'none' };
-    let updates;
-    try {
-        const parsed = JSON.parse(child.stdout || '');
-        if (!Array.isArray(parsed.updates))
-            throw new Error('missing updates');
-        updates = parsed.updates;
-    }
-    catch {
-        return { status: 1, timedOut: false, skills: 'none' };
-    }
-    if (!io.json) {
-        if (updates.length === 0)
-            io.printLine('No Orizu skill installs found. Run `orizu install-skill` first.');
-        for (const update of updates) {
-            const path = sanitizeTerminalText(String(update.path ?? ''));
-            if (update.action === 'already-current')
-                io.printLine(`Current ${path}`);
-            else if (update.action === 'relinked')
-                io.printLine(`Relinked ${path}`);
-            else
-                io.printLine(`Updated ${path}`);
-        }
-    }
-    if (updates.length === 0)
-        return { status: 0, timedOut: false, skills: 'none' };
-    const refreshed = updates.some(update => update.action !== 'already-current');
-    return { status: 0, timedOut: false, skills: refreshed ? 'refreshed' : 'already-current' };
-}
-function runStreaming(command, args, io, timeoutMs, onStdout, captureStdout = false) {
-    return new Promise(resolve => {
-        let stderr = '';
-        let stdout = '';
-        let settled = false;
-        let timedOut = false;
-        let timer;
-        const finish = (status) => {
-            if (settled)
-                return;
-            settled = true;
-            if (timer)
-                clearTimeout(timer);
-            resolve({ status, stderr: stderr.slice(-STDERR_TAIL_CHARS), stdout, timedOut });
-        };
-        const child = spawn(command, args, {
-            env: { ...process.env, ORIZU_NO_UPDATE_CHECK: '1' },
-            stdio: ['ignore', 'pipe', 'pipe'],
-        });
-        if (timeoutMs !== undefined) {
-            timer = setTimeout(() => {
-                timedOut = true;
-                child.kill('SIGKILL');
-            }, timeoutMs);
-        }
-        child.stdout?.on('data', chunk => {
-            const text = sanitizeTerminalText(chunk);
-            onStdout?.(text);
-            if (captureStdout) {
-                stdout = `${stdout}${text}`;
-                return;
-            }
-            if (io.json)
-                errorOutput.write(text);
-            else
-                output.write(text);
-        });
-        child.stderr?.on('data', chunk => {
-            const text = sanitizeTerminalText(chunk);
-            stderr = `${stderr}${text}`.slice(-STDERR_TAIL_CHARS);
-            errorOutput.write(text);
-        });
-        child.once('error', error => {
-            stderr = `${stderr}${sanitizeTerminalText(error.message)}`;
-            finish(1);
-        });
-        child.once('close', code => finish(code ?? 1));
-    });
-}
-function emit(io, result) {
-    if (io.json)
-        io.printLine(JSON.stringify(result));
-}
-function fail(io, code, detail, result) {
-    io.printError(`${code}: ${detail}`);
-    emit(io, result);
-    return 1;
-}
-export async function selfUpdateCommand(io) {
-    if (io.refreshCache) {
-        const oldCache = readCache();
-        try {
-            writeCache(await resolveLatest());
-        }
-        catch {
-            tryWriteCache(oldCache?.latest ?? null);
-        }
-        return 0;
-    }
-    const install = detectNpmGlobalInstall();
-    if (!install) {
-        return fail(io, 'update_unsupported_install', `orizu is not installed npm-globally. Run \`${MANUAL_INSTALL_COMMAND}\`.`, {
-            installed: io.installed, latest: null, action: 'unsupported', prefix: null, skills: 'not-run',
-        });
-    }
-    let latest;
-    let registry;
-    try {
-        registry = resolveUpdateRegistry();
-        latest = await resolveLatest(registry);
-        tryWriteCache(latest);
-    }
-    catch (error) {
-        return fail(io, 'update_check_failed', sanitizeTerminalText(error instanceof Error ? error.message : error), {
-            installed: io.installed, latest: null, action: 'check-failed', prefix: install.prefix, skills: 'not-run',
-        });
-    }
-    if (compareSemver(io.installed, latest) >= 0) {
-        if (!io.json)
-            io.printLine(`orizu ${io.installed} is already the latest.`);
-        if (io.dryRun) {
-            emit(io, { installed: io.installed, latest, action: 'already-latest', prefix: install.prefix, skills: 'not-run' });
-            return 0;
-        }
-        const skills = await refreshManagedSkills(install.binPath, [], io);
-        if (skills.status !== 0) {
-            const detail = skills.timedOut
-                ? 'orizu is already the latest, but its managed skills refresh timed out.'
-                : 'orizu is already the latest, but its managed skills could not be refreshed.';
-            return fail(io, 'update_skills_refresh_failed', detail, {
-                installed: io.installed, latest, action: 'already-latest', prefix: install.prefix, skills: 'refresh-failed',
-            });
-        }
-        emit(io, { installed: io.installed, latest, action: 'already-latest', prefix: install.prefix, skills: skills.skills });
-        return 0;
-    }
-    if (io.dryRun) {
-        if (!io.json)
-            io.printLine(`Would update orizu ${io.installed} → ${latest} in ${install.prefix}.`);
-        emit(io, { installed: io.installed, latest, action: 'would-update', prefix: install.prefix, skills: 'would-refresh' });
-        return 0;
-    }
-    const npmCommand = npmInvocation();
-    const registryArgs = process.env.ORIZU_UPDATE_REGISTRY !== undefined
-        ? ['--registry', registry]
-        : [];
-    const npm = await runStreaming(npmCommand.command, [...npmCommand.args,
-        'install', '-g', `orizu@${latest}`, '--prefix', install.prefix, '--no-audit', '--no-fund',
-        ...registryArgs,
-    ], io);
-    if (npm.status !== 0) {
-        const tail = npm.stderr.trim() ? ` npm stderr tail: ${npm.stderr.trim()}` : '';
-        return fail(io, 'update_install_failed', `${tail} Run \`${MANUAL_INSTALL_COMMAND}\`.`, {
-            installed: io.installed, latest, action: 'install-failed', prefix: install.prefix, skills: 'not-run',
-        });
-    }
-    const verifyCommand = cliInvocation(install, ['--version']);
-    const verificationTimeoutMs = verifyTimeoutMs();
-    const verified = spawnSync(verifyCommand.command, verifyCommand.args, {
-        encoding: 'utf8',
-        env: { ...process.env, ORIZU_NO_UPDATE_CHECK: '1' },
-        killSignal: 'SIGKILL',
-        timeout: verificationTimeoutMs,
-    });
-    const observed = sanitizeTerminalText(verified.stdout || '').trim();
-    if (verified.error?.code === 'ETIMEDOUT') {
-        return fail(io, 'update_verify_mismatch', `verification timed out after ${verificationTimeoutMs} ms.`, {
-            installed: io.installed, latest, action: 'verify-mismatch', prefix: install.prefix, skills: 'not-run',
-        });
-    }
-    if (verified.status !== 0 || observed !== `orizu ${latest}`) {
-        const launchError = verified.error ? ` launch error: ${sanitizeTerminalText(verified.error.message)}.` : '';
-        const exit = verified.status === null ? `signal ${verified.signal ?? 'unknown'}` : `exit ${verified.status}`;
-        const errorTail = sanitizeTerminalText(verified.stderr || '').trim().split('\n').slice(-3).join(' ');
-        const detail = `expected orizu ${latest}, observed ${observed || '<no version>'} (${exit}).${launchError}${errorTail ? ` ${errorTail}` : ''}`;
-        return fail(io, 'update_verify_mismatch', `${detail} Run \`${MANUAL_INSTALL_COMMAND}\` to reinstall.`, {
-            installed: io.installed, latest, action: 'verify-mismatch', prefix: install.prefix, skills: 'not-run',
-        });
-    }
-    if (!io.json)
-        io.printLine(`orizu ${latest} installed.`);
-    const skillsCommand = cliInvocation(install, []);
-    const skills = await refreshManagedSkills(skillsCommand.command, skillsCommand.args, io);
-    if (skills.status !== 0) {
-        const detail = skills.timedOut
-            ? 'the CLI was updated, but its managed skills refresh timed out.'
-            : 'the CLI was updated, but its managed skills could not be refreshed.';
-        return fail(io, 'update_skills_refresh_failed', detail, {
-            installed: io.installed, latest, action: 'updated', prefix: install.prefix, skills: 'refresh-failed',
-        });
-    }
-    emit(io, { installed: io.installed, latest, action: 'updated', prefix: install.prefix, skills: skills.skills });
-    return 0;
-}
-export async function runUpdateCommand(rawArgs, io) {
-    const commandIndex = rawArgs.indexOf('update');
-    const args = commandIndex === -1
-        ? rawArgs
-        : [...rawArgs.slice(0, commandIndex), ...rawArgs.slice(commandIndex + 1)];
-    const unknownOption = findUnknownOption(args, UPDATE_OPTIONS);
-    if (unknownOption) {
-        io.printError(`unknown option ${unknownOption}\n${UPDATE_USAGE}`);
-        return 1;
-    }
-    const positional = args.find(argument => argument === '-' || !argument.startsWith('-'));
-    if (positional) {
-        io.printError(`unexpected argument ${positional}\n${UPDATE_USAGE}`);
-        return 1;
-    }
-    return selfUpdateCommand({
-        dryRun: args.includes('--dry-run'),
-        installed: io.getCliVersion(),
-        json: io.json,
-        printLine: io.printLine,
-        printError: io.printError,
-        refreshCache: args.includes('--refresh-cache'),
-    });
-}
 function isPassiveUpdateDisabled() {
     return process.env.ORIZU_NO_UPDATE_CHECK !== undefined || process.env.CI !== undefined ||
         process.env.NO_UPDATE_NOTIFIER !== undefined;
@@ -504,3 +268,50 @@ export function finishPassiveUpdate(state, printError, io = defaultPassiveUpdate
         // Passive update checks never affect the command that just completed.
     }
 }
+/**
+ * `orizu update`. Checking the arguments, the daily background cache refresh
+ * and refusing an install npm doesn't own stay plain code; only an update of
+ * an npm-global install loads the Effect workflow (ORI-2424).
+ */
+export async function runUpdateCommand(rawArgs, io) {
+    const commandIndex = rawArgs.indexOf('update');
+    const args = commandIndex === -1
+        ? rawArgs
+        : [...rawArgs.slice(0, commandIndex), ...rawArgs.slice(commandIndex + 1)];
+    const unknownOption = findUnknownOption(args, UPDATE_OPTIONS);
+    if (unknownOption) {
+        io.printError(`unknown option ${unknownOption}\n${UPDATE_USAGE}`);
+        return 1;
+    }
+    const positional = args.find(argument => argument === '-' || !argument.startsWith('-'));
+    if (positional) {
+        io.printError(`unexpected argument ${positional}\n${UPDATE_USAGE}`);
+        return 1;
+    }
+    if (args.includes('--refresh-cache')) {
+        const oldCache = readCache();
+        try {
+            writeCache(await resolveLatest());
+        }
+        catch {
+            tryWriteCache(oldCache?.latest ?? null);
+        }
+        return 0;
+    }
+    const installed = io.getCliVersion();
+    const install = detectNpmGlobalInstall();
+    if (!install) {
+        io.printError(`update_unsupported_install: orizu is not installed npm-globally. Run \`${MANUAL_INSTALL_COMMAND}\`.`);
+        if (io.json)
+            io.printLine(JSON.stringify({ installed, latest: null, action: 'unsupported', prefix: null, skills: 'not-run' }));
+        return 1;
+    }
+    const { runSelfUpdate } = await import('./self-update-command.js');
+    return runSelfUpdate({
+        dryRun: args.includes('--dry-run'),
+        installed,
+        json: io.json,
+        printLine: io.printLine,
+        printError: io.printError,
+    }, install);
+}

package/dist/setup-account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-account.d.ts","sourceRoot":"","sources":["../src/setup-account.ts"],"names":[],"mappings":"AACA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,WAAW,CAAA;AAElB,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,GAAG,YAAY,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,sBAAsB,IAAI,cAAc,CAOvD;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA2BjE;AA4DD,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,2BAA2B,EACpC,aAAa,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,EAC1E,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAClC,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,CAgBnC"}
+{"version":3,"file":"setup-account.d.ts","sourceRoot":"","sources":["../src/setup-account.ts"],"names":[],"mappings":"AAEA,OAAO,EAEL,KAAK,2BAA2B,EACjC,MAAM,WAAW,CAAA;AAElB,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,WAAW,GAAG,YAAY,CAAA;IACjC,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,wBAAgB,sBAAsB,IAAI,cAAc,CAOvD;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CA2BjE;AA8DD,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,2BAA2B,EACpC,aAAa,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,EAC1E,aAAa,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAClC,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACjC,OAAO,CAAC,WAAW,GAAG,UAAU,CAAC,CAgBnC"}

package/dist/setup-account.js

@@ -1,4 +1,5 @@
 import { hasResolvableAuth } from './credentials.js';
+import { datasetTransferTimeoutMs } from './dataset-transfer-policy.js';
 import { getBaseUrl, } from './http.js';
 export function describeSetupAuthState() {
     const baseUrl = getBaseUrl();
@@ -58,9 +59,11 @@ function isCredentialStoreError(error) {
     return error instanceof Error && /^ORIZU_CREDENTIALS_[A-Z_]+:/.test(error.message);
 }
 async function fetchSetupDisplayIdentity(context) {
+    // One limit covers the request and reading its reply.
+    const signal = AbortSignal.timeout(datasetTransferTimeoutMs());
     let response;
     try {
-        response = await context.fetch('/api/cli/auth/whoami');
+        response = await context.fetch('/api/cli/auth/whoami', { signal });
     }
     catch (error) {
         if (isCredentialStoreError(error))

package/dist/setup-and-skills-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-and-skills-commands.d.ts","sourceRoot":"","sources":["../src/setup-and-skills-commands.ts"],"names":[],"mappings":"AAmFA,OAAO,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAW,MAAM,wBAAwB,CAAA;AAMjF,iBAAe,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/E;AA0cD,iBAAe,mBAAmB,kBAwCjC;AA6FD,iBAAS,mBAAmB,SA0D3B;AAED,iBAAe,mBAAmB,kBAoFjC;AAED,iBAAS,iBAAiB,SAgBzB;AAMD,iBAAe,gBAAgB,CAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,EACf,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CA6Cf;AA4ID,iBAAe,YAAY,kBAqX1B;AAED,iBAAS,kBAAkB,SAS1B;AAED,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,GACT,CAAA"}
+{"version":3,"file":"setup-and-skills-commands.d.ts","sourceRoot":"","sources":["../src/setup-and-skills-commands.ts"],"names":[],"mappings":"AAqFA,OAAO,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAW,MAAM,wBAAwB,CAAA;AAMjF,iBAAe,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/E;AAqZD,iBAAe,mBAAmB,kBAwCjC;AA6FD,iBAAS,mBAAmB,SA0D3B;AAED,iBAAe,mBAAmB,kBAoGjC;AAED,iBAAS,iBAAiB,SAgBzB;AAMD,iBAAe,gBAAgB,CAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,EACf,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CA6Cf;AA4ID,iBAAe,YAAY,kBAwX1B;AAED,iBAAS,kBAAkB,SAS1B;AAED,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,GACT,CAAA"}