remoteclaw 0.0.0 → 0.1.0-next.2abd2fa

package/dist/update-cli-DkAWmUrp.js

@@ -0,0 +1,1370 @@
+import { $ as pathExists, Ct as theme, Ht as resolveGatewayPort, _ as defaultRuntime, qt as resolveStateDir } from "./entry.js";
+import "./auth-profiles-BquJGKLC.js";
+import { n as resolveCliName, t as replaceCliName } from "./cli-name-C6rJGl18.js";
+import { t as formatCliCommand } from "./command-format-CVfo8I5f.js";
+import "./file-lock-CzBL_VIx.js";
+import { l as writeConfigFile, o as readConfigFileSnapshot } from "./config-FHu9Bn4R.js";
+import "./host-env-security-szwfmhC4.js";
+import "./inbound-path-policy-sdr5Ji0k.js";
+import "./env-vars-7aZqKPhk.js";
+import "./agent-scope-C50VuLKh.js";
+import "./dock-BqNINg7k.js";
+import "./message-channel-uWMAiywE.js";
+import "./sessions--PykPynp.js";
+import "./plugins-BflZz0sp.js";
+import "./accounts-BTXSfPWi.js";
+import "./accounts-BxGS70Do.js";
+import "./accounts-CNY1TGj1.js";
+import "./bindings-CRU_udk8.js";
+import "./targets-D7OKVXMI.js";
+import "./loader-y9MhJewT.js";
+import "./chat-envelope-DEZ-5RY8.js";
+import "./strip-inbound-meta-DjKcSFaW.js";
+import "./call-BbwtB9Y-.js";
+import "./net-Cg8AQeke.js";
+import "./logger-BWMPnILd.js";
+import "./ip-D0zgNmBV.js";
+import "./tailnet-CEudzG0i.js";
+import "./lanes-cHJ5arWg.js";
+import "./subagent-registry-Db4Ho_2Y.js";
+import "./response-prefix-template-up4REfuR.js";
+import "./agent-helpers-CTx5KKJu.js";
+import "./tool-images-kloBqxqK.js";
+import { t as runCommandWithTimeout } from "./exec-DkFE7lqU.js";
+import "./image-ops-DWytvdh_.js";
+import "./tokens-B-jmvNR9.js";
+import "./reply-DSKC8kyS.js";
+import "./hook-runner-global-DJ14gXFP.js";
+import "./redact-Dx1Fue21.js";
+import "./tool-display-Br6mwaJc.js";
+import "./markdown-tables-jrnSPvZ6.js";
+import "./chunk-CSQfUhgF.js";
+import "./media-DN7yRfrH.js";
+import "./render-uf6PvGMV.js";
+import "./tables-DI5LGEr1.js";
+import "./fs-safe-DSwT85uK.js";
+import "./mime-Cxh_64P6.js";
+import "./ssrf-Ck9HDZpv.js";
+import "./local-roots-BrH0Q63K.js";
+import "./common-DSVmydhm.js";
+import "./commands-CDonBOrw.js";
+import "./commands-registry-CWJv6xe2.js";
+import "./audio-VBcVDa08.js";
+import "./runner-z92MWZ3m.js";
+import "./errors-DZ199hOo.js";
+import "./targets-DB4vBpIQ.js";
+import "./pairing-store-CTkD51uW.js";
+import "./fetch-CEDsOiql.js";
+import "./retry-DnqPAqWp.js";
+import "./client-C61M8zI3.js";
+import "./channel-activity-DTKGf3j5.js";
+import "./send-CBGSXjfD.js";
+import { c as resolveGatewayLaunchAgentLabel, d as resolveGatewaySystemdServiceName, f as resolveGatewayWindowsTaskName } from "./constants-BmRFoHl0.js";
+import "./session-cost-usage-DX09eTPU.js";
+import "./reply-directives-CD2WycBM.js";
+import "./provider-dispatcher-B4QMe-I6.js";
+import "./ports-NPqtlfp0.js";
+import "./ports-lsof-Wteul3ju.js";
+import "./prompt-Yn2yClg1.js";
+import "./tailscale-Dbyahx0J.js";
+import "./auth-Deh9i9Eg.js";
+import "./store-v3P-OWhi.js";
+import "./reply-prefix-DBLCYiup.js";
+import "./ack-reactions-B11TAC2D.js";
+import { n as formatDurationPrecise } from "./format-duration-CqUERz51.js";
+import "./resolve-route-CBVbY0xS.js";
+import { t as formatDocsLink } from "./links-Bz4V7R_p.js";
+import { n as inheritOptionFromParent } from "./command-options-C4paWSGf.js";
+import "./progress-C1kUfYL-.js";
+import { t as formatHelpExamples } from "./help-format-NNm_Ov4H.js";
+import "./catalog-BqO6yem_.js";
+import { n as stylePromptMessage } from "./prompt-style-DjEYC_s-.js";
+import "./note-Dlv4NmlQ.js";
+import "./plugin-auto-enable-DuPS9XiJ.js";
+import "./npm-registry-spec-COvUzy5J.js";
+import "./installs-pWdqG8HL.js";
+import "./send-D_DUQJ6H.js";
+import "./send-YRVDWfSs.js";
+import "./send-xnwty9cY.js";
+import "./proxy-DpNv2cSV.js";
+import "./replies-BKrzM0QI.js";
+import "./agent-D2RVoS5g.js";
+import "./channel-selection-NNPbxnyZ.js";
+import "./deliver-912khjLK.js";
+import "./outbound-attachment-o0seS0CP.js";
+import "./delivery-queue-Cfa9Wmxp.js";
+import "./send-Bx9bUGav.js";
+import "./onboard-helpers-sDc2Ky6H.js";
+import "./pairing-labels-B_53dY5L.js";
+import "./channels-status-issues-DwRDzwrV.js";
+import { r as installCompletion } from "./completion-cli-8iZJqfmX.js";
+import "./register.subclis-DeGP5UPU.js";
+import "./command-registry-CYjvOp8W.js";
+import "./program-context-jqeI5alP.js";
+import "./daemon-install-helpers-DIUzSFG1.js";
+import { r as parseSemver } from "./runtime-guard-U-ewY_QH.js";
+import "./systemd-DSnlM3jX.js";
+import { t as resolveGatewayService } from "./service-Bjqii5nW.js";
+import { a as terminateStaleGatewayPids, i as renderRestartDiagnostics, o as waitForGatewayHealthyRestart, r as runDaemonRestart, s as runDaemonInstall } from "./daemon-cli-e6sURMqd.js";
+import "./diagnostics-VC0cz7kX.js";
+import "./inspect-Dt8hogS3.js";
+import { t as renderTable } from "./table-C1rdyYl9.js";
+import "./health-SOuaKNRa.js";
+import { t as resolveRemoteClawPackageRoot } from "./remoteclaw-root-DybYl8PL.js";
+import "./control-ui-assets-Cx_mw4D0.js";
+import { C as resolveEffectiveUpdateChannel, S as normalizeUpdateChannel, d as fetchNpmTagVersion, g as DEFAULT_PACKAGE_CHANNEL, h as DEFAULT_GIT_CHANNEL, l as checkUpdateStatus, p as resolveNpmChannelTag, s as trimLogTail, u as compareSemverStrings, v as channelToNpmTag, w as resolveUpdateChannelDisplay, y as formatUpdateChannelLabel } from "./channel-account-context-CvIDAtHS.js";
+import "./dm-policy-shared-D8lgnmrC.js";
+import { i as resolveUpdateAvailability, n as formatUpdateOneLiner, t as formatUpdateAvailableHint } from "./status.update-C55QM2xs.js";
+import { a as detectGlobalInstallManagerForRoot, c as readPackageName, i as detectGlobalInstallManagerByPresence, l as readPackageVersion, n as runGatewayUpdate, o as globalInstallArgs, r as cleanupGlobalRenameDirs, s as resolveGlobalPackageRoot } from "./session-dirs-DdF6TDsE.js";
+import { n as updateNpmInstalledPlugins, t as syncPluginsForUpdateChannel } from "./update-IX7vdqA8.js";
+import "./doctor-config-flow-BVkHcvoj.js";
+import "./logging-D8-Kozjc.js";
+import "./systemd-linger-_0_-RY4v.js";
+import "./health-format-B_QRD8Si.js";
+import { n as doctorCommand, t as selectStyled } from "./prompt-select-styled-WopXnjIy.js";
+import { r as ensureCompletionCacheExists, t as checkShellCompletionStatus } from "./doctor-completion-BR1SlAT3.js";
+import { spawn, spawnSync } from "node:child_process";
+import os from "node:os";
+import path from "node:path";
+import fsp from "node:fs/promises";
+import { confirm, isCancel, spinner } from "@clack/prompts";
+
+//#region src/cli/update-cli/shared.ts
+const INVALID_TIMEOUT_ERROR = "--timeout must be a positive integer (seconds)";
+function parseTimeoutMsOrExit(timeout) {
+	const timeoutMs = timeout ? Number.parseInt(timeout, 10) * 1e3 : void 0;
+	if (timeoutMs !== void 0 && (Number.isNaN(timeoutMs) || timeoutMs <= 0)) {
+		defaultRuntime.error(INVALID_TIMEOUT_ERROR);
+		defaultRuntime.exit(1);
+		return null;
+	}
+	return timeoutMs;
+}
+const REMOTECLAW_REPO_URL = "https://github.com/remoteclaw/remoteclaw.git";
+const MAX_LOG_CHARS = 8e3;
+const DEFAULT_PACKAGE_NAME = "remoteclaw";
+const CORE_PACKAGE_NAMES = new Set([DEFAULT_PACKAGE_NAME]);
+function normalizeTag(value) {
+	if (!value) return null;
+	const trimmed = value.trim();
+	if (!trimmed) return null;
+	if (trimmed.startsWith("remoteclaw@")) return trimmed.slice(11);
+	if (trimmed.startsWith(`${DEFAULT_PACKAGE_NAME}@`)) return trimmed.slice(`${DEFAULT_PACKAGE_NAME}@`.length);
+	return trimmed;
+}
+function normalizeVersionTag(tag) {
+	const trimmed = tag.trim();
+	if (!trimmed) return null;
+	const cleaned = trimmed.startsWith("v") ? trimmed.slice(1) : trimmed;
+	return parseSemver(cleaned) ? cleaned : null;
+}
+async function resolveTargetVersion(tag, timeoutMs) {
+	const direct = normalizeVersionTag(tag);
+	if (direct) return direct;
+	return (await fetchNpmTagVersion({
+		tag,
+		timeoutMs
+	})).version ?? null;
+}
+async function isGitCheckout(root) {
+	try {
+		await fsp.stat(path.join(root, ".git"));
+		return true;
+	} catch {
+		return false;
+	}
+}
+async function isCorePackage(root) {
+	const name = await readPackageName(root);
+	return Boolean(name && CORE_PACKAGE_NAMES.has(name));
+}
+async function isEmptyDir(targetPath) {
+	try {
+		return (await fsp.readdir(targetPath)).length === 0;
+	} catch {
+		return false;
+	}
+}
+function resolveGitInstallDir() {
+	const override = process.env.REMOTECLAW_GIT_DIR?.trim();
+	if (override) return path.resolve(override);
+	return resolveDefaultGitDir();
+}
+function resolveDefaultGitDir() {
+	return resolveStateDir(process.env, os.homedir);
+}
+function resolveNodeRunner() {
+	const base = path.basename(process.execPath).toLowerCase();
+	if (base === "node" || base === "node.exe") return process.execPath;
+	return "node";
+}
+async function resolveUpdateRoot() {
+	return await resolveRemoteClawPackageRoot({
+		moduleUrl: import.meta.url,
+		argv1: process.argv[1],
+		cwd: process.cwd()
+	}) ?? process.cwd();
+}
+async function runUpdateStep(params) {
+	const command = params.argv.join(" ");
+	params.progress?.onStepStart?.({
+		name: params.name,
+		command,
+		index: 0,
+		total: 0
+	});
+	const started = Date.now();
+	const res = await runCommandWithTimeout(params.argv, {
+		cwd: params.cwd,
+		timeoutMs: params.timeoutMs
+	});
+	const durationMs = Date.now() - started;
+	const stderrTail = trimLogTail(res.stderr, MAX_LOG_CHARS);
+	params.progress?.onStepComplete?.({
+		name: params.name,
+		command,
+		index: 0,
+		total: 0,
+		durationMs,
+		exitCode: res.code,
+		stderrTail
+	});
+	return {
+		name: params.name,
+		command,
+		cwd: params.cwd ?? process.cwd(),
+		durationMs,
+		exitCode: res.code,
+		stdoutTail: trimLogTail(res.stdout, MAX_LOG_CHARS),
+		stderrTail
+	};
+}
+async function ensureGitCheckout(params) {
+	if (!await pathExists(params.dir)) return await runUpdateStep({
+		name: "git clone",
+		argv: [
+			"git",
+			"clone",
+			REMOTECLAW_REPO_URL,
+			params.dir
+		],
+		timeoutMs: params.timeoutMs,
+		progress: params.progress
+	});
+	if (!await isGitCheckout(params.dir)) {
+		if (!await isEmptyDir(params.dir)) throw new Error(`REMOTECLAW_GIT_DIR points at a non-git directory: ${params.dir}. Set REMOTECLAW_GIT_DIR to an empty folder or a remoteclaw checkout.`);
+		return await runUpdateStep({
+			name: "git clone",
+			argv: [
+				"git",
+				"clone",
+				REMOTECLAW_REPO_URL,
+				params.dir
+			],
+			cwd: params.dir,
+			timeoutMs: params.timeoutMs,
+			progress: params.progress
+		});
+	}
+	if (!await isCorePackage(params.dir)) throw new Error(`REMOTECLAW_GIT_DIR does not look like a core checkout: ${params.dir}.`);
+	return null;
+}
+async function resolveGlobalManager(params) {
+	const runCommand = createGlobalCommandRunner();
+	if (params.installKind === "package") {
+		const detected = await detectGlobalInstallManagerForRoot(runCommand, params.root, params.timeoutMs);
+		if (detected) return detected;
+	}
+	return await detectGlobalInstallManagerByPresence(runCommand, params.timeoutMs) ?? "npm";
+}
+async function tryWriteCompletionCache(root, jsonMode) {
+	const binPath = path.join(root, "remoteclaw.mjs");
+	if (!await pathExists(binPath)) return;
+	const result = spawnSync(resolveNodeRunner(), [
+		binPath,
+		"completion",
+		"--write-state"
+	], {
+		cwd: root,
+		env: process.env,
+		encoding: "utf-8"
+	});
+	if (result.error) {
+		if (!jsonMode) defaultRuntime.log(theme.warn(`Completion cache update failed: ${String(result.error)}`));
+		return;
+	}
+	if (result.status !== 0 && !jsonMode) {
+		const stderr = (result.stderr ?? "").toString().trim();
+		const detail = stderr ? ` (${stderr})` : "";
+		defaultRuntime.log(theme.warn(`Completion cache update failed${detail}.`));
+	}
+}
+function createGlobalCommandRunner() {
+	return async (argv, options) => {
+		const res = await runCommandWithTimeout(argv, options);
+		return {
+			stdout: res.stdout,
+			stderr: res.stderr,
+			code: res.code
+		};
+	};
+}
+
+//#endregion
+//#region src/cli/update-cli/status.ts
+function formatGitStatusLine(params) {
+	const shortSha = params.sha ? params.sha.slice(0, 8) : null;
+	const branch = params.branch && params.branch !== "HEAD" ? params.branch : null;
+	const tag = params.tag;
+	return [
+		branch ?? (tag ? "detached" : "git"),
+		tag ? `tag ${tag}` : null,
+		shortSha ? `@ ${shortSha}` : null
+	].filter(Boolean).join(" · ");
+}
+async function updateStatusCommand(opts) {
+	const timeoutMs = parseTimeoutMsOrExit(opts.timeout);
+	if (timeoutMs === null) return;
+	const root = await resolveUpdateRoot();
+	const configSnapshot = await readConfigFileSnapshot();
+	const configChannel = configSnapshot.valid ? normalizeUpdateChannel(configSnapshot.config.update?.channel) : null;
+	const update = await checkUpdateStatus({
+		root,
+		timeoutMs: timeoutMs ?? 3500,
+		fetchGit: true,
+		includeRegistry: true
+	});
+	const channelInfo = resolveUpdateChannelDisplay({
+		configChannel,
+		installKind: update.installKind,
+		gitTag: update.git?.tag ?? null,
+		gitBranch: update.git?.branch ?? null
+	});
+	const channelLabel = channelInfo.label;
+	const gitLabel = update.installKind === "git" ? formatGitStatusLine({
+		branch: update.git?.branch ?? null,
+		tag: update.git?.tag ?? null,
+		sha: update.git?.sha ?? null
+	}) : null;
+	const updateAvailability = resolveUpdateAvailability(update);
+	const updateLine = formatUpdateOneLiner(update).replace(/^Update:\s*/i, "");
+	if (opts.json) {
+		defaultRuntime.log(JSON.stringify({
+			update,
+			channel: {
+				value: channelInfo.channel,
+				source: channelInfo.source,
+				label: channelLabel,
+				config: configChannel
+			},
+			availability: updateAvailability
+		}, null, 2));
+		return;
+	}
+	const tableWidth = Math.max(60, (process.stdout.columns ?? 120) - 1);
+	const rows = [
+		{
+			Item: "Install",
+			Value: update.installKind === "git" ? `git (${update.root ?? "unknown"})` : update.installKind === "package" ? update.packageManager : "unknown"
+		},
+		{
+			Item: "Channel",
+			Value: channelLabel
+		},
+		...gitLabel ? [{
+			Item: "Git",
+			Value: gitLabel
+		}] : [],
+		{
+			Item: "Update",
+			Value: updateAvailability.available ? theme.warn(`available · ${updateLine}`) : updateLine
+		}
+	];
+	defaultRuntime.log(theme.heading("RemoteClaw update status"));
+	defaultRuntime.log("");
+	defaultRuntime.log(renderTable({
+		width: tableWidth,
+		columns: [{
+			key: "Item",
+			header: "Item",
+			minWidth: 10
+		}, {
+			key: "Value",
+			header: "Value",
+			flex: true,
+			minWidth: 24
+		}],
+		rows
+	}).trimEnd());
+	defaultRuntime.log("");
+	const updateHint = formatUpdateAvailableHint(update);
+	if (updateHint) defaultRuntime.log(theme.warn(updateHint));
+}
+
+//#endregion
+//#region src/cli/update-cli/progress.ts
+const STEP_LABELS = {
+	"clean check": "Working directory is clean",
+	"upstream check": "Upstream branch exists",
+	"git fetch": "Fetching latest changes",
+	"git rebase": "Rebasing onto target commit",
+	"git rev-parse @{upstream}": "Resolving upstream commit",
+	"git rev-list": "Enumerating candidate commits",
+	"git clone": "Cloning git checkout",
+	"preflight worktree": "Preparing preflight worktree",
+	"preflight cleanup": "Cleaning preflight worktree",
+	"deps install": "Installing dependencies",
+	build: "Building",
+	"ui:build": "Building UI assets",
+	"ui:build (post-doctor repair)": "Restoring missing UI assets",
+	"ui assets verify": "Validating UI assets",
+	"remoteclaw doctor entry": "Checking doctor entrypoint",
+	"remoteclaw doctor": "Running doctor checks",
+	"git rev-parse HEAD (after)": "Verifying update",
+	"global update": "Updating via package manager",
+	"global install": "Installing global package"
+};
+function getStepLabel(step) {
+	return STEP_LABELS[step.name] ?? step.name;
+}
+function createUpdateProgress(enabled) {
+	if (!enabled) return {
+		progress: {},
+		stop: () => {}
+	};
+	let currentSpinner = null;
+	return {
+		progress: {
+			onStepStart: (step) => {
+				currentSpinner = spinner();
+				currentSpinner.start(theme.accent(getStepLabel(step)));
+			},
+			onStepComplete: (step) => {
+				if (!currentSpinner) return;
+				const label = getStepLabel(step);
+				const duration = theme.muted(`(${formatDurationPrecise(step.durationMs)})`);
+				const icon = step.exitCode === 0 ? theme.success("✓") : theme.error("✗");
+				currentSpinner.stop(`${icon} ${label} ${duration}`);
+				currentSpinner = null;
+				if (step.exitCode !== 0 && step.stderrTail) {
+					const lines = step.stderrTail.split("\n").slice(-10);
+					for (const line of lines) if (line.trim()) defaultRuntime.log(`    ${theme.error(line)}`);
+				}
+			}
+		},
+		stop: () => {
+			if (currentSpinner) {
+				currentSpinner.stop();
+				currentSpinner = null;
+			}
+		}
+	};
+}
+function formatStepStatus(exitCode) {
+	if (exitCode === 0) return theme.success("✓");
+	if (exitCode === null) return theme.warn("?");
+	return theme.error("✗");
+}
+function printResult(result, opts) {
+	if (opts.json) {
+		defaultRuntime.log(JSON.stringify(result, null, 2));
+		return;
+	}
+	const statusColor = result.status === "ok" ? theme.success : result.status === "skipped" ? theme.warn : theme.error;
+	defaultRuntime.log("");
+	defaultRuntime.log(`${theme.heading("Update Result:")} ${statusColor(result.status.toUpperCase())}`);
+	if (result.root) defaultRuntime.log(`  Root: ${theme.muted(result.root)}`);
+	if (result.reason) defaultRuntime.log(`  Reason: ${theme.muted(result.reason)}`);
+	if (result.before?.version || result.before?.sha) {
+		const before = result.before.version ?? result.before.sha?.slice(0, 8) ?? "";
+		defaultRuntime.log(`  Before: ${theme.muted(before)}`);
+	}
+	if (result.after?.version || result.after?.sha) {
+		const after = result.after.version ?? result.after.sha?.slice(0, 8) ?? "";
+		defaultRuntime.log(`  After: ${theme.muted(after)}`);
+	}
+	if (!opts.hideSteps && result.steps.length > 0) {
+		defaultRuntime.log("");
+		defaultRuntime.log(theme.heading("Steps:"));
+		for (const step of result.steps) {
+			const status = formatStepStatus(step.exitCode);
+			const duration = theme.muted(`(${formatDurationPrecise(step.durationMs)})`);
+			defaultRuntime.log(`  ${status} ${step.name} ${duration}`);
+			if (step.exitCode !== 0 && step.stderrTail) {
+				const lines = step.stderrTail.split("\n").slice(0, 5);
+				for (const line of lines) if (line.trim()) defaultRuntime.log(`      ${theme.error(line)}`);
+			}
+		}
+	}
+	defaultRuntime.log("");
+	defaultRuntime.log(`Total time: ${theme.muted(formatDurationPrecise(result.durationMs))}`);
+}
+
+//#endregion
+//#region src/cli/update-cli/restart-helper.ts
+/**
+* Shell-escape a string for embedding in single-quoted shell arguments.
+* Replaces every `'` with `'\''` (end quote, escaped quote, resume quote).
+* For batch scripts, validates against special characters instead.
+*/
+function shellEscape(value) {
+	return value.replace(/'/g, "'\\''");
+}
+/** Validates a string is safe for embedding in a batch (cmd.exe) script. */
+function isBatchSafe(value) {
+	return /^[A-Za-z0-9 _\-().]+$/.test(value);
+}
+function resolveSystemdUnit(env) {
+	const override = env.REMOTECLAW_SYSTEMD_UNIT?.trim();
+	if (override) return override.endsWith(".service") ? override : `${override}.service`;
+	return `${resolveGatewaySystemdServiceName(env.REMOTECLAW_PROFILE)}.service`;
+}
+function resolveLaunchdLabel(env) {
+	const override = env.REMOTECLAW_LAUNCHD_LABEL?.trim();
+	if (override) return override;
+	return resolveGatewayLaunchAgentLabel(env.REMOTECLAW_PROFILE);
+}
+function resolveWindowsTaskName(env) {
+	const override = env.REMOTECLAW_WINDOWS_TASK_NAME?.trim();
+	if (override) return override;
+	return resolveGatewayWindowsTaskName(env.REMOTECLAW_PROFILE);
+}
+/**
+* Prepares a standalone script to restart the gateway service.
+* This script is written to a temporary directory and does not depend on
+* the installed package files, ensuring restart capability even if the
+* update process temporarily removes or corrupts installation files.
+*/
+async function prepareRestartScript(env = process.env) {
+	const tmpDir = os.tmpdir();
+	const timestamp = Date.now();
+	const platform = process.platform;
+	let scriptContent = "";
+	let filename = "";
+	try {
+		if (platform === "linux") {
+			const escaped = shellEscape(resolveSystemdUnit(env));
+			filename = `remoteclaw-restart-${timestamp}.sh`;
+			scriptContent = `#!/bin/sh
+# Standalone restart script — survives parent process termination.
+# Wait briefly to ensure file locks are released after update.
+sleep 1
+systemctl --user restart '${escaped}'
+# Self-cleanup
+rm -f "$0"
+`;
+		} else if (platform === "darwin") {
+			const escaped = shellEscape(resolveLaunchdLabel(env));
+			const uid = process.getuid ? process.getuid() : 501;
+			filename = `remoteclaw-restart-${timestamp}.sh`;
+			scriptContent = `#!/bin/sh
+# Standalone restart script — survives parent process termination.
+# Wait briefly to ensure file locks are released after update.
+sleep 1
+launchctl kickstart -k 'gui/${uid}/${escaped}'
+# Self-cleanup
+rm -f "$0"
+`;
+		} else if (platform === "win32") {
+			const taskName = resolveWindowsTaskName(env);
+			if (!isBatchSafe(taskName)) return null;
+			filename = `remoteclaw-restart-${timestamp}.bat`;
+			scriptContent = `@echo off
+REM Standalone restart script — survives parent process termination.
+REM Wait briefly to ensure file locks are released after update.
+timeout /t 2 /nobreak >nul
+schtasks /End /TN "${taskName}"
+schtasks /Run /TN "${taskName}"
+REM Self-cleanup
+del "%~f0"
+`;
+		} else return null;
+		const scriptPath = path.join(tmpDir, filename);
+		await fsp.writeFile(scriptPath, scriptContent, { mode: 493 });
+		return scriptPath;
+	} catch {
+		return null;
+	}
+}
+/**
+* Executes the prepared restart script as a **detached** process.
+*
+* The script must outlive the CLI process because the CLI itself is part
+* of the service being restarted — `systemctl restart` / `launchctl
+* kickstart -k` will terminate the current process tree.  Using
+* `spawn({ detached: true })` + `unref()` ensures the script survives
+* the parent's exit.
+*
+* Resolves immediately after spawning; the script runs independently.
+*/
+async function runRestartScript(scriptPath) {
+	const isWindows = process.platform === "win32";
+	spawn(isWindows ? "cmd.exe" : "/bin/sh", isWindows ? ["/c", scriptPath] : [scriptPath], {
+		detached: true,
+		stdio: "ignore"
+	}).unref();
+}
+
+//#endregion
+//#region src/cli/update-cli/suppress-deprecations.ts
+/**
+* Suppress Node.js deprecation warnings.
+*
+* On Node.js v23+ `process.noDeprecation` may be a read-only property
+* (defined via a getter on the prototype with no setter), so the
+* assignment can throw. We fall back to the environment variable which
+* achieves the same effect.
+*/
+function suppressDeprecations() {
+	try {
+		process.noDeprecation = true;
+	} catch {}
+	process.env.NODE_NO_WARNINGS = "1";
+}
+
+//#endregion
+//#region src/cli/update-cli/update-command.ts
+const CLI_NAME = resolveCliName();
+const SERVICE_REFRESH_TIMEOUT_MS = 6e4;
+const UPDATE_QUIPS = [
+	"Leveled up! New skills unlocked. You're welcome.",
+	"Fresh code, same lobster. Miss me?",
+	"Back and better. Did you even notice I was gone?",
+	"Update complete. I learned some new tricks while I was out.",
+	"Upgraded! Now with 23% more sass.",
+	"I've evolved. Try to keep up.",
+	"New version, who dis? Oh right, still me but shinier.",
+	"Patched, polished, and ready to pinch. Let's go.",
+	"The lobster has molted. Harder shell, sharper claws.",
+	"Update done! Check the changelog or just trust me, it's good.",
+	"Reborn from the boiling waters of npm. Stronger now.",
+	"I went away and came back smarter. You should try it sometime.",
+	"Update complete. The bugs feared me, so they left.",
+	"New version installed. Old version sends its regards.",
+	"Firmware fresh. Brain wrinkles: increased.",
+	"I've seen things you wouldn't believe. Anyway, I'm updated.",
+	"Back online. The changelog is long but our friendship is longer.",
+	"Upgraded! Peter fixed stuff. Blame him if it breaks.",
+	"Molting complete. Please don't look at my soft shell phase.",
+	"Version bump! Same chaos energy, fewer crashes (probably)."
+];
+function pickUpdateQuip() {
+	return UPDATE_QUIPS[Math.floor(Math.random() * UPDATE_QUIPS.length)] ?? "Update complete.";
+}
+function resolveGatewayInstallEntrypointCandidates(root) {
+	if (!root) return [];
+	return [
+		path.join(root, "dist", "entry.js"),
+		path.join(root, "dist", "entry.mjs"),
+		path.join(root, "dist", "index.js"),
+		path.join(root, "dist", "index.mjs")
+	];
+}
+function formatCommandFailure(stdout, stderr) {
+	const detail = (stderr || stdout).trim();
+	if (!detail) return "command returned a non-zero exit code";
+	return detail.split("\n").slice(-3).join("\n");
+}
+function printDryRunPreview(preview, jsonMode) {
+	if (jsonMode) {
+		defaultRuntime.log(JSON.stringify(preview, null, 2));
+		return;
+	}
+	defaultRuntime.log(theme.heading("Update dry-run"));
+	defaultRuntime.log(theme.muted("No changes were applied."));
+	defaultRuntime.log("");
+	defaultRuntime.log(`  Root: ${theme.muted(preview.root)}`);
+	defaultRuntime.log(`  Install kind: ${theme.muted(preview.installKind)}`);
+	defaultRuntime.log(`  Mode: ${theme.muted(preview.mode)}`);
+	defaultRuntime.log(`  Channel: ${theme.muted(preview.effectiveChannel)}`);
+	defaultRuntime.log(`  Tag/spec: ${theme.muted(preview.tag)}`);
+	if (preview.currentVersion) defaultRuntime.log(`  Current version: ${theme.muted(preview.currentVersion)}`);
+	if (preview.targetVersion) defaultRuntime.log(`  Target version: ${theme.muted(preview.targetVersion)}`);
+	if (preview.downgradeRisk) defaultRuntime.log(theme.warn("  Downgrade confirmation would be required in a real run."));
+	defaultRuntime.log("");
+	defaultRuntime.log(theme.heading("Planned actions:"));
+	for (const action of preview.actions) defaultRuntime.log(`  - ${action}`);
+	if (preview.notes.length > 0) {
+		defaultRuntime.log("");
+		defaultRuntime.log(theme.heading("Notes:"));
+		for (const note of preview.notes) defaultRuntime.log(`  - ${theme.muted(note)}`);
+	}
+}
+async function refreshGatewayServiceEnv(params) {
+	const args = [
+		"gateway",
+		"install",
+		"--force"
+	];
+	if (params.jsonMode) args.push("--json");
+	for (const candidate of resolveGatewayInstallEntrypointCandidates(params.result.root)) {
+		if (!await pathExists(candidate)) continue;
+		const res = await runCommandWithTimeout([
+			resolveNodeRunner(),
+			candidate,
+			...args
+		], { timeoutMs: SERVICE_REFRESH_TIMEOUT_MS });
+		if (res.code === 0) return;
+		throw new Error(`updated install refresh failed (${candidate}): ${formatCommandFailure(res.stdout, res.stderr)}`);
+	}
+	await runDaemonInstall({
+		force: true,
+		json: params.jsonMode || void 0
+	});
+}
+async function tryInstallShellCompletion(opts) {
+	if (opts.jsonMode || !process.stdin.isTTY) return;
+	const status = await checkShellCompletionStatus(CLI_NAME);
+	if (status.usesSlowPattern) {
+		defaultRuntime.log(theme.muted("Upgrading shell completion to cached version..."));
+		if (await ensureCompletionCacheExists(CLI_NAME)) await installCompletion(status.shell, true, CLI_NAME);
+		return;
+	}
+	if (status.profileInstalled && !status.cacheExists) {
+		defaultRuntime.log(theme.muted("Regenerating shell completion cache..."));
+		await ensureCompletionCacheExists(CLI_NAME);
+		return;
+	}
+	if (!status.profileInstalled) {
+		defaultRuntime.log("");
+		defaultRuntime.log(theme.heading("Shell completion"));
+		const shouldInstall = await confirm({
+			message: stylePromptMessage(`Enable ${status.shell} shell completion for ${CLI_NAME}?`),
+			initialValue: true
+		});
+		if (isCancel(shouldInstall) || !shouldInstall) {
+			if (!opts.skipPrompt) defaultRuntime.log(theme.muted(`Skipped. Run \`${replaceCliName(formatCliCommand("remoteclaw completion --install"), CLI_NAME)}\` later to enable.`));
+			return;
+		}
+		if (!await ensureCompletionCacheExists(CLI_NAME)) {
+			defaultRuntime.log(theme.warn("Failed to generate completion cache."));
+			return;
+		}
+		await installCompletion(status.shell, opts.skipPrompt, CLI_NAME);
+	}
+}
+async function runPackageInstallUpdate(params) {
+	const manager = await resolveGlobalManager({
+		root: params.root,
+		installKind: params.installKind,
+		timeoutMs: params.timeoutMs
+	});
+	const pkgRoot = await resolveGlobalPackageRoot(manager, createGlobalCommandRunner(), params.timeoutMs);
+	const packageName = (pkgRoot ? await readPackageName(pkgRoot) : await readPackageName(params.root)) ?? DEFAULT_PACKAGE_NAME;
+	const beforeVersion = pkgRoot ? await readPackageVersion(pkgRoot) : null;
+	if (pkgRoot) await cleanupGlobalRenameDirs({
+		globalRoot: path.dirname(pkgRoot),
+		packageName
+	});
+	const steps = [await runUpdateStep({
+		name: "global update",
+		argv: globalInstallArgs(manager, `${packageName}@${params.tag}`),
+		timeoutMs: params.timeoutMs,
+		progress: params.progress
+	})];
+	let afterVersion = beforeVersion;
+	if (pkgRoot) {
+		afterVersion = await readPackageVersion(pkgRoot);
+		const entryPath = path.join(pkgRoot, "dist", "entry.js");
+		if (await pathExists(entryPath)) {
+			const doctorStep = await runUpdateStep({
+				name: `${CLI_NAME} doctor`,
+				argv: [
+					resolveNodeRunner(),
+					entryPath,
+					"doctor",
+					"--non-interactive"
+				],
+				timeoutMs: params.timeoutMs,
+				progress: params.progress
+			});
+			steps.push(doctorStep);
+		}
+	}
+	const failedStep = steps.find((step) => step.exitCode !== 0);
+	return {
+		status: failedStep ? "error" : "ok",
+		mode: manager,
+		root: pkgRoot ?? params.root,
+		reason: failedStep ? failedStep.name : void 0,
+		before: { version: beforeVersion },
+		after: { version: afterVersion },
+		steps,
+		durationMs: Date.now() - params.startedAt
+	};
+}
+async function runGitUpdate(params) {
+	const updateRoot = params.switchToGit ? resolveGitInstallDir() : params.root;
+	const effectiveTimeout = params.timeoutMs ?? 20 * 6e4;
+	const cloneStep = params.switchToGit ? await ensureGitCheckout({
+		dir: updateRoot,
+		timeoutMs: effectiveTimeout,
+		progress: params.progress
+	}) : null;
+	if (cloneStep && cloneStep.exitCode !== 0) {
+		const result = {
+			status: "error",
+			mode: "git",
+			root: updateRoot,
+			reason: cloneStep.name,
+			steps: [cloneStep],
+			durationMs: Date.now() - params.startedAt
+		};
+		params.stop();
+		printResult(result, {
+			...params.opts,
+			hideSteps: params.showProgress
+		});
+		defaultRuntime.exit(1);
+		return result;
+	}
+	const updateResult = await runGatewayUpdate({
+		cwd: updateRoot,
+		argv1: params.switchToGit ? void 0 : process.argv[1],
+		timeoutMs: params.timeoutMs,
+		progress: params.progress,
+		channel: params.channel,
+		tag: params.tag
+	});
+	const steps = [...cloneStep ? [cloneStep] : [], ...updateResult.steps];
+	if (params.switchToGit && updateResult.status === "ok") {
+		const installStep = await runUpdateStep({
+			name: "global install",
+			argv: globalInstallArgs(await resolveGlobalManager({
+				root: params.root,
+				installKind: params.installKind,
+				timeoutMs: effectiveTimeout
+			}), updateRoot),
+			cwd: updateRoot,
+			timeoutMs: effectiveTimeout,
+			progress: params.progress
+		});
+		steps.push(installStep);
+		const failedStep = installStep.exitCode !== 0 ? installStep : null;
+		return {
+			...updateResult,
+			status: updateResult.status === "ok" && !failedStep ? "ok" : "error",
+			steps,
+			durationMs: Date.now() - params.startedAt
+		};
+	}
+	return {
+		...updateResult,
+		steps,
+		durationMs: Date.now() - params.startedAt
+	};
+}
+async function updatePluginsAfterCoreUpdate(params) {
+	if (!params.configSnapshot.valid) {
+		if (!params.opts.json) defaultRuntime.log(theme.warn("Skipping plugin updates: config is invalid."));
+		return;
+	}
+	const pluginLogger = params.opts.json ? {} : {
+		info: (msg) => defaultRuntime.log(msg),
+		warn: (msg) => defaultRuntime.log(theme.warn(msg)),
+		error: (msg) => defaultRuntime.log(theme.error(msg))
+	};
+	if (!params.opts.json) {
+		defaultRuntime.log("");
+		defaultRuntime.log(theme.heading("Updating plugins..."));
+	}
+	const syncResult = await syncPluginsForUpdateChannel({
+		config: params.configSnapshot.config,
+		channel: params.channel,
+		workspaceDir: params.root,
+		logger: pluginLogger
+	});
+	let pluginConfig = syncResult.config;
+	const npmResult = await updateNpmInstalledPlugins({
+		config: pluginConfig,
+		skipIds: new Set(syncResult.summary.switchedToNpm),
+		logger: pluginLogger
+	});
+	pluginConfig = npmResult.config;
+	if (syncResult.changed || npmResult.changed) await writeConfigFile(pluginConfig);
+	if (params.opts.json) return;
+	const summarizeList = (list) => {
+		if (list.length <= 6) return list.join(", ");
+		return `${list.slice(0, 6).join(", ")} +${list.length - 6} more`;
+	};
+	if (syncResult.summary.switchedToBundled.length > 0) defaultRuntime.log(theme.muted(`Switched to bundled plugins: ${summarizeList(syncResult.summary.switchedToBundled)}.`));
+	if (syncResult.summary.switchedToNpm.length > 0) defaultRuntime.log(theme.muted(`Restored npm plugins: ${summarizeList(syncResult.summary.switchedToNpm)}.`));
+	for (const warning of syncResult.summary.warnings) defaultRuntime.log(theme.warn(warning));
+	for (const error of syncResult.summary.errors) defaultRuntime.log(theme.error(error));
+	const updated = npmResult.outcomes.filter((entry) => entry.status === "updated").length;
+	const unchanged = npmResult.outcomes.filter((entry) => entry.status === "unchanged").length;
+	const failed = npmResult.outcomes.filter((entry) => entry.status === "error").length;
+	const skipped = npmResult.outcomes.filter((entry) => entry.status === "skipped").length;
+	if (npmResult.outcomes.length === 0) defaultRuntime.log(theme.muted("No plugin updates needed."));
+	else {
+		const parts = [`${updated} updated`, `${unchanged} unchanged`];
+		if (failed > 0) parts.push(`${failed} failed`);
+		if (skipped > 0) parts.push(`${skipped} skipped`);
+		defaultRuntime.log(theme.muted(`npm plugins: ${parts.join(", ")}.`));
+	}
+	for (const outcome of npmResult.outcomes) {
+		if (outcome.status !== "error") continue;
+		defaultRuntime.log(theme.error(outcome.message));
+	}
+}
+async function maybeRestartService(params) {
+	if (params.shouldRestart) {
+		if (!params.opts.json) {
+			defaultRuntime.log("");
+			defaultRuntime.log(theme.heading("Restarting service..."));
+		}
+		try {
+			let restarted = false;
+			let restartInitiated = false;
+			if (params.refreshServiceEnv) try {
+				await refreshGatewayServiceEnv({
+					result: params.result,
+					jsonMode: Boolean(params.opts.json)
+				});
+			} catch (err) {
+				if (!params.opts.json) defaultRuntime.log(theme.warn(`Failed to refresh gateway service environment from updated install: ${String(err)}`));
+			}
+			if (params.restartScriptPath) {
+				await runRestartScript(params.restartScriptPath);
+				restartInitiated = true;
+			} else restarted = await runDaemonRestart();
+			if (!params.opts.json && restarted) {
+				defaultRuntime.log(theme.success("Daemon restarted successfully."));
+				defaultRuntime.log("");
+				process.env.REMOTECLAW_UPDATE_IN_PROGRESS = "1";
+				try {
+					await doctorCommand(defaultRuntime, { nonInteractive: !(Boolean(process.stdin.isTTY) && !params.opts.json && params.opts.yes !== true) });
+				} catch (err) {
+					defaultRuntime.log(theme.warn(`Doctor failed: ${String(err)}`));
+				} finally {
+					delete process.env.REMOTECLAW_UPDATE_IN_PROGRESS;
+				}
+			}
+			if (!params.opts.json && restartInitiated) {
+				const service = resolveGatewayService();
+				let health = await waitForGatewayHealthyRestart({
+					service,
+					port: params.gatewayPort
+				});
+				if (!health.healthy && health.staleGatewayPids.length > 0) {
+					if (!params.opts.json) defaultRuntime.log(theme.warn(`Found stale gateway process(es) after restart: ${health.staleGatewayPids.join(", ")}. Cleaning up...`));
+					await terminateStaleGatewayPids(health.staleGatewayPids);
+					await runDaemonRestart();
+					health = await waitForGatewayHealthyRestart({
+						service,
+						port: params.gatewayPort
+					});
+				}
+				if (health.healthy) defaultRuntime.log(theme.success("Daemon restart completed."));
+				else {
+					defaultRuntime.log(theme.warn("Gateway did not become healthy after restart."));
+					for (const line of renderRestartDiagnostics(health)) defaultRuntime.log(theme.muted(line));
+					defaultRuntime.log(theme.muted(`Run \`${replaceCliName(formatCliCommand("remoteclaw gateway status --deep"), CLI_NAME)}\` for details.`));
+				}
+				defaultRuntime.log("");
+			}
+		} catch (err) {
+			if (!params.opts.json) {
+				defaultRuntime.log(theme.warn(`Daemon restart failed: ${String(err)}`));
+				defaultRuntime.log(theme.muted(`You may need to restart the service manually: ${replaceCliName(formatCliCommand("remoteclaw gateway restart"), CLI_NAME)}`));
+			}
+		}
+		return;
+	}
+	if (!params.opts.json) {
+		defaultRuntime.log("");
+		if (params.result.mode === "npm" || params.result.mode === "pnpm") defaultRuntime.log(theme.muted(`Tip: Run \`${replaceCliName(formatCliCommand("remoteclaw doctor"), CLI_NAME)}\`, then \`${replaceCliName(formatCliCommand("remoteclaw gateway restart"), CLI_NAME)}\` to apply updates to a running gateway.`));
+		else defaultRuntime.log(theme.muted(`Tip: Run \`${replaceCliName(formatCliCommand("remoteclaw gateway restart"), CLI_NAME)}\` to apply updates to a running gateway.`));
+	}
+}
+async function updateCommand(opts) {
+	suppressDeprecations();
+	const timeoutMs = parseTimeoutMsOrExit(opts.timeout);
+	const shouldRestart = opts.restart !== false;
+	if (timeoutMs === null) return;
+	const root = await resolveUpdateRoot();
+	const updateStatus = await checkUpdateStatus({
+		root,
+		timeoutMs: timeoutMs ?? 3500,
+		fetchGit: false,
+		includeRegistry: false
+	});
+	const configSnapshot = await readConfigFileSnapshot();
+	const storedChannel = configSnapshot.valid ? normalizeUpdateChannel(configSnapshot.config.update?.channel) : null;
+	const requestedChannel = normalizeUpdateChannel(opts.channel);
+	if (opts.channel && !requestedChannel) {
+		defaultRuntime.error(`--channel must be "stable", "beta", or "dev" (got "${opts.channel}")`);
+		defaultRuntime.exit(1);
+		return;
+	}
+	if (opts.channel && !configSnapshot.valid) {
+		const issues = configSnapshot.issues.map((issue) => `- ${issue.path}: ${issue.message}`);
+		defaultRuntime.error(["Config is invalid; cannot set update channel.", ...issues].join("\n"));
+		defaultRuntime.exit(1);
+		return;
+	}
+	const installKind = updateStatus.installKind;
+	const switchToGit = requestedChannel === "dev" && installKind !== "git";
+	const switchToPackage = requestedChannel !== null && requestedChannel !== "dev" && installKind === "git";
+	const updateInstallKind = switchToGit ? "git" : switchToPackage ? "package" : installKind;
+	const channel = requestedChannel ?? storedChannel ?? (updateInstallKind === "git" ? DEFAULT_GIT_CHANNEL : DEFAULT_PACKAGE_CHANNEL);
+	const explicitTag = normalizeTag(opts.tag);
+	let tag = explicitTag ?? channelToNpmTag(channel);
+	let currentVersion = null;
+	let targetVersion = null;
+	let downgradeRisk = false;
+	let fallbackToLatest = false;
+	if (updateInstallKind !== "git") {
+		currentVersion = switchToPackage ? null : await readPackageVersion(root);
+		targetVersion = explicitTag ? await resolveTargetVersion(tag, timeoutMs) : await resolveNpmChannelTag({
+			channel,
+			timeoutMs
+		}).then((resolved) => {
+			tag = resolved.tag;
+			fallbackToLatest = channel === "beta" && resolved.tag === "latest";
+			return resolved.version;
+		});
+		const cmp = currentVersion && targetVersion ? compareSemverStrings(currentVersion, targetVersion) : null;
+		downgradeRisk = !fallbackToLatest && currentVersion != null && (targetVersion == null || cmp != null && cmp > 0);
+	}
+	if (opts.dryRun) {
+		let mode = "unknown";
+		if (updateInstallKind === "git") mode = "git";
+		else if (updateInstallKind === "package") mode = await resolveGlobalManager({
+			root,
+			installKind,
+			timeoutMs: timeoutMs ?? 20 * 6e4
+		});
+		const actions = [];
+		if (requestedChannel && requestedChannel !== storedChannel) actions.push(`Persist update.channel=${requestedChannel} in config`);
+		if (switchToGit) actions.push("Switch install mode from package to git checkout (dev channel)");
+		else if (switchToPackage) actions.push(`Switch install mode from git to package manager (${mode})`);
+		else if (updateInstallKind === "git") actions.push(`Run git update flow on channel ${channel} (fetch/rebase/build/doctor)`);
+		else actions.push(`Run global package manager update with spec remoteclaw@${tag}`);
+		actions.push("Run plugin update sync after core update");
+		actions.push("Refresh shell completion cache (if needed)");
+		actions.push(shouldRestart ? "Restart gateway service and run doctor checks" : "Skip restart (because --no-restart is set)");
+		const notes = [];
+		if (opts.tag && updateInstallKind === "git") notes.push("--tag applies to npm installs only; git updates ignore it.");
+		if (fallbackToLatest) notes.push("Beta channel resolves to latest for this run (fallback).");
+		printDryRunPreview({
+			dryRun: true,
+			root,
+			installKind,
+			mode,
+			updateInstallKind,
+			switchToGit,
+			switchToPackage,
+			restart: shouldRestart,
+			requestedChannel,
+			storedChannel,
+			effectiveChannel: channel,
+			tag,
+			currentVersion,
+			targetVersion,
+			downgradeRisk,
+			actions,
+			notes
+		}, Boolean(opts.json));
+		return;
+	}
+	if (downgradeRisk && !opts.yes) {
+		if (!process.stdin.isTTY || opts.json) {
+			defaultRuntime.error(["Downgrade confirmation required.", "Downgrading can break configuration. Re-run in a TTY to confirm."].join("\n"));
+			defaultRuntime.exit(1);
+			return;
+		}
+		const targetLabel = targetVersion ?? `${tag} (unknown)`;
+		const ok = await confirm({
+			message: stylePromptMessage(`Downgrading from ${currentVersion} to ${targetLabel} can break configuration. Continue?`),
+			initialValue: false
+		});
+		if (isCancel(ok) || !ok) {
+			if (!opts.json) defaultRuntime.log(theme.muted("Update cancelled."));
+			defaultRuntime.exit(0);
+			return;
+		}
+	}
+	if (updateInstallKind === "git" && opts.tag && !opts.json) defaultRuntime.log(theme.muted("Note: --tag applies to npm installs only; git updates ignore it."));
+	if (requestedChannel && configSnapshot.valid) {
+		await writeConfigFile({
+			...configSnapshot.config,
+			update: {
+				...configSnapshot.config.update,
+				channel: requestedChannel
+			}
+		});
+		if (!opts.json) defaultRuntime.log(theme.muted(`Update channel set to ${requestedChannel}.`));
+	}
+	const showProgress = !opts.json && process.stdout.isTTY;
+	if (!opts.json) {
+		defaultRuntime.log(theme.heading("Updating RemoteClaw..."));
+		defaultRuntime.log("");
+	}
+	const { progress, stop } = createUpdateProgress(showProgress);
+	const startedAt = Date.now();
+	let restartScriptPath = null;
+	let refreshGatewayServiceEnv = false;
+	if (shouldRestart) try {
+		if (await resolveGatewayService().isLoaded({ env: process.env })) {
+			restartScriptPath = await prepareRestartScript(process.env);
+			refreshGatewayServiceEnv = true;
+		}
+	} catch {}
+	const result = switchToPackage ? await runPackageInstallUpdate({
+		root,
+		installKind,
+		tag,
+		timeoutMs: timeoutMs ?? 20 * 6e4,
+		startedAt,
+		progress
+	}) : await runGitUpdate({
+		root,
+		switchToGit,
+		installKind,
+		timeoutMs,
+		startedAt,
+		progress,
+		channel,
+		tag,
+		showProgress,
+		opts,
+		stop
+	});
+	stop();
+	printResult(result, {
+		...opts,
+		hideSteps: showProgress
+	});
+	if (result.status === "error") {
+		defaultRuntime.exit(1);
+		return;
+	}
+	if (result.status === "skipped") {
+		if (result.reason === "dirty") defaultRuntime.log(theme.warn("Skipped: working directory has uncommitted changes. Commit or stash them first."));
+		if (result.reason === "not-git-install") {
+			defaultRuntime.log(theme.warn(`Skipped: this RemoteClaw install isn't a git checkout, and the package manager couldn't be detected. Update via your package manager, then run \`${replaceCliName(formatCliCommand("remoteclaw doctor"), CLI_NAME)}\` and \`${replaceCliName(formatCliCommand("remoteclaw gateway restart"), CLI_NAME)}\`.`));
+			defaultRuntime.log(theme.muted(`Examples: \`${replaceCliName("npm i -g remoteclaw@latest", CLI_NAME)}\` or \`${replaceCliName("pnpm add -g remoteclaw@latest", CLI_NAME)}\``));
+		}
+		defaultRuntime.exit(0);
+		return;
+	}
+	await updatePluginsAfterCoreUpdate({
+		root,
+		channel,
+		configSnapshot,
+		opts
+	});
+	await tryWriteCompletionCache(root, Boolean(opts.json));
+	await tryInstallShellCompletion({
+		jsonMode: Boolean(opts.json),
+		skipPrompt: Boolean(opts.yes)
+	});
+	await maybeRestartService({
+		shouldRestart,
+		result,
+		opts,
+		refreshServiceEnv: refreshGatewayServiceEnv,
+		gatewayPort: resolveGatewayPort(configSnapshot.valid ? configSnapshot.config : void 0),
+		restartScriptPath
+	});
+	if (!opts.json) defaultRuntime.log(theme.muted(pickUpdateQuip()));
+}
+
+//#endregion
+//#region src/cli/update-cli/wizard.ts
+async function updateWizardCommand(opts = {}) {
+	if (!process.stdin.isTTY) {
+		defaultRuntime.error("Update wizard requires a TTY. Use `remoteclaw update --channel <stable|beta|dev>` instead.");
+		defaultRuntime.exit(1);
+		return;
+	}
+	const timeoutMs = parseTimeoutMsOrExit(opts.timeout);
+	if (timeoutMs === null) return;
+	const root = await resolveUpdateRoot();
+	const [updateStatus, configSnapshot] = await Promise.all([checkUpdateStatus({
+		root,
+		timeoutMs: timeoutMs ?? 3500,
+		fetchGit: false,
+		includeRegistry: false
+	}), readConfigFileSnapshot()]);
+	const channelInfo = resolveEffectiveUpdateChannel({
+		configChannel: configSnapshot.valid ? normalizeUpdateChannel(configSnapshot.config.update?.channel) : null,
+		installKind: updateStatus.installKind,
+		git: updateStatus.git ? {
+			tag: updateStatus.git.tag,
+			branch: updateStatus.git.branch
+		} : void 0
+	});
+	const channelLabel = formatUpdateChannelLabel({
+		channel: channelInfo.channel,
+		source: channelInfo.source,
+		gitTag: updateStatus.git?.tag ?? null,
+		gitBranch: updateStatus.git?.branch ?? null
+	});
+	const pickedChannel = await selectStyled({
+		message: "Update channel",
+		options: [
+			{
+				value: "keep",
+				label: `Keep current (${channelInfo.channel})`,
+				hint: channelLabel
+			},
+			{
+				value: "stable",
+				label: "Stable",
+				hint: "Tagged releases (npm latest)"
+			},
+			{
+				value: "beta",
+				label: "Beta",
+				hint: "Prereleases (npm beta)"
+			},
+			{
+				value: "dev",
+				label: "Dev",
+				hint: "Git main"
+			}
+		],
+		initialValue: "keep"
+	});
+	if (isCancel(pickedChannel)) {
+		defaultRuntime.log(theme.muted("Update cancelled."));
+		defaultRuntime.exit(0);
+		return;
+	}
+	const requestedChannel = pickedChannel === "keep" ? null : pickedChannel;
+	if (requestedChannel === "dev" && updateStatus.installKind !== "git") {
+		const gitDir = resolveGitInstallDir();
+		if (!await isGitCheckout(gitDir)) {
+			if (await pathExists(gitDir)) {
+				if (!await isEmptyDir(gitDir)) {
+					defaultRuntime.error(`REMOTECLAW_GIT_DIR points at a non-git directory: ${gitDir}. Set REMOTECLAW_GIT_DIR to an empty folder or a remoteclaw checkout.`);
+					defaultRuntime.exit(1);
+					return;
+				}
+			}
+			const ok = await confirm({
+				message: stylePromptMessage(`Create a git checkout at ${gitDir}? (override via REMOTECLAW_GIT_DIR)`),
+				initialValue: true
+			});
+			if (isCancel(ok) || !ok) {
+				defaultRuntime.log(theme.muted("Update cancelled."));
+				defaultRuntime.exit(0);
+				return;
+			}
+		}
+	}
+	const restart = await confirm({
+		message: stylePromptMessage("Restart the gateway service after update?"),
+		initialValue: true
+	});
+	if (isCancel(restart)) {
+		defaultRuntime.log(theme.muted("Update cancelled."));
+		defaultRuntime.exit(0);
+		return;
+	}
+	try {
+		await updateCommand({
+			channel: requestedChannel ?? void 0,
+			restart: Boolean(restart),
+			timeout: opts.timeout
+		});
+	} catch (err) {
+		defaultRuntime.error(String(err));
+		defaultRuntime.exit(1);
+	}
+}
+
+//#endregion
+//#region src/cli/update-cli.ts
+function inheritedUpdateJson(command) {
+	return Boolean(inheritOptionFromParent(command, "json"));
+}
+function inheritedUpdateTimeout(opts, command) {
+	const timeout = opts.timeout;
+	if (timeout) return timeout;
+	return inheritOptionFromParent(command, "timeout");
+}
+function registerUpdateCli(program) {
+	const update = program.command("update").description("Update RemoteClaw and inspect update channel status").option("--json", "Output result as JSON", false).option("--no-restart", "Skip restarting the gateway service after a successful update").option("--dry-run", "Preview update actions without making changes", false).option("--channel <stable|beta|dev>", "Persist update channel (git + npm)").option("--tag <dist-tag|version>", "Override npm dist-tag or version for this update").option("--timeout <seconds>", "Timeout for each update step in seconds (default: 1200)").option("--yes", "Skip confirmation prompts (non-interactive)", false).addHelpText("after", () => {
+		const fmtExamples = [
+			["remoteclaw update", "Update a source checkout (git)"],
+			["remoteclaw update --channel beta", "Switch to beta channel (git + npm)"],
+			["remoteclaw update --channel dev", "Switch to dev channel (git + npm)"],
+			["remoteclaw update --tag beta", "One-off update to a dist-tag or version"],
+			["remoteclaw update --dry-run", "Preview actions without changing anything"],
+			["remoteclaw update --no-restart", "Update without restarting the service"],
+			["remoteclaw update --json", "Output result as JSON"],
+			["remoteclaw update --yes", "Non-interactive (accept downgrade prompts)"],
+			["remoteclaw update wizard", "Interactive update wizard"],
+			["remoteclaw --update", "Shorthand for remoteclaw update"]
+		].map(([cmd, desc]) => `  ${theme.command(cmd)} ${theme.muted(`# ${desc}`)}`).join("\n");
+		return `
+${theme.heading("What this does:")}
+  - Git checkouts: fetches, rebases, installs deps, builds, and runs doctor
+  - npm installs: updates via detected package manager
+
+${theme.heading("Switch channels:")}
+  - Use --channel stable|beta|dev to persist the update channel in config
+  - Run remoteclaw update status to see the active channel and source
+  - Use --tag <dist-tag|version> for a one-off npm update without persisting
+
+${theme.heading("Non-interactive:")}
+  - Use --yes to accept downgrade prompts
+  - Combine with --channel/--tag/--restart/--json/--timeout as needed
+  - Use --dry-run to preview actions without writing config/installing/restarting
+
+${theme.heading("Examples:")}
+${fmtExamples}
+
+${theme.heading("Notes:")}
+  - Switch channels with --channel stable|beta|dev
+  - For global installs: auto-updates via detected package manager when possible (see docs/install/updating.md)
+  - Downgrades require confirmation (can break configuration)
+  - Skips update if the working directory has uncommitted changes
+
+${theme.muted("Docs:")} ${formatDocsLink("/cli/update", "docs.remoteclaw.org/cli/update")}`;
+	}).action(async (opts) => {
+		try {
+			await updateCommand({
+				json: Boolean(opts.json),
+				restart: Boolean(opts.restart),
+				dryRun: Boolean(opts.dryRun),
+				channel: opts.channel,
+				tag: opts.tag,
+				timeout: opts.timeout,
+				yes: Boolean(opts.yes)
+			});
+		} catch (err) {
+			defaultRuntime.error(String(err));
+			defaultRuntime.exit(1);
+		}
+	});
+	update.command("wizard").description("Interactive update wizard").option("--timeout <seconds>", "Timeout for each update step in seconds (default: 1200)").addHelpText("after", `\n${theme.muted("Docs:")} ${formatDocsLink("/cli/update", "docs.remoteclaw.org/cli/update")}\n`).action(async (opts, command) => {
+		try {
+			await updateWizardCommand({ timeout: inheritedUpdateTimeout(opts, command) });
+		} catch (err) {
+			defaultRuntime.error(String(err));
+			defaultRuntime.exit(1);
+		}
+	});
+	update.command("status").description("Show update channel and version status").option("--json", "Output result as JSON", false).option("--timeout <seconds>", "Timeout for update checks in seconds (default: 3)").addHelpText("after", () => `\n${theme.heading("Examples:")}\n${formatHelpExamples([
+		["remoteclaw update status", "Show channel + version status."],
+		["remoteclaw update status --json", "JSON output."],
+		["remoteclaw update status --timeout 10", "Custom timeout."]
+	])}\n\n${theme.heading("Notes:")}\n${theme.muted("- Shows current update channel (stable/beta/dev) and source")}\n${theme.muted("- Includes git tag/branch/SHA for source checkouts")}\n\n${theme.muted("Docs:")} ${formatDocsLink("/cli/update", "docs.remoteclaw.org/cli/update")}`).action(async (opts, command) => {
+		try {
+			await updateStatusCommand({
+				json: Boolean(opts.json) || inheritedUpdateJson(command),
+				timeout: inheritedUpdateTimeout(opts, command)
+			});
+		} catch (err) {
+			defaultRuntime.error(String(err));
+			defaultRuntime.exit(1);
+		}
+	});
+}
+
+//#endregion
+export { registerUpdateCli };