straylight-ai 1.0.0 → 1.0.1

package/README.md

@@ -53,7 +53,8 @@ Any MCP-compatible AI coding assistant works. The MCP server speaks the standard
 
 | Command | Description |
 |---------|-------------|
-| `npx straylight-ai` | Full setup (pull, start, register) |
+| `npx straylight-ai` | Full setup (pull latest, start, register) |
+| `npx straylight-ai upgrade` | Pull latest image and replace container (data preserved) |
 | `npx straylight-ai start` | Start the container |
 | `npx straylight-ai stop` | Stop the container |
 | `npx straylight-ai status` | Check health and service status |

package/bin/cli.js

@@ -5,7 +5,7 @@ const path = require("path");
 
 const command = process.argv[2] || "setup";
 
-const validCommands = ["setup", "start", "stop", "status", "mcp"];
+const validCommands = ["setup", "start", "stop", "status", "upgrade", "mcp"];
 
 if (!validCommands.includes(command)) {
   console.error(`Unknown command: ${command}`);
@@ -27,6 +27,7 @@ if (command === "setup") runner = commandModule.runSetup;
 else if (command === "start") runner = commandModule.runStart;
 else if (command === "stop") runner = commandModule.runStop;
 else if (command === "status") runner = commandModule.runStatus;
+else if (command === "upgrade") runner = commandModule.runUpgrade;
 
 if (typeof runner !== "function") {
   console.error(`Internal error: could not find runner for command "${command}"`);

package/dist/commands/setup.d.ts

@@ -1,9 +1,11 @@
 /**
- * Full bootstrap: pull image if needed, create/start container, wait for
- * health check, register MCP server, and open the browser.
+ * Full bootstrap: pull latest image, create/start container (upgrading if
+ * the image changed), wait for health check, register MCP server, and open
+ * the browser.
  *
  * This operation is idempotent: calling it when the container is already
- * running will skip the create/start steps and go straight to health + open.
+ * running on the latest image will skip the create/start steps and go
+ * straight to health + open.
  */
 export declare function runSetup(): Promise<void>;
 //# sourceMappingURL=setup.d.ts.map

package/dist/commands/setup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAeA;;;;;;GAMG;AACH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAiD9C"}
+{"version":3,"file":"setup.d.ts","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":"AAmBA;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA+D9C"}

package/dist/commands/setup.js

@@ -10,11 +10,13 @@ const HEALTH_URL = "http://localhost:9470/api/v1/health";
 const HEALTH_TIMEOUT_MS = 30_000;
 const UI_URL = "http://localhost:9470";
 /**
- * Full bootstrap: pull image if needed, create/start container, wait for
- * health check, register MCP server, and open the browser.
+ * Full bootstrap: pull latest image, create/start container (upgrading if
+ * the image changed), wait for health check, register MCP server, and open
+ * the browser.
  *
  * This operation is idempotent: calling it when the container is already
- * running will skip the create/start steps and go straight to health + open.
+ * running on the latest image will skip the create/start steps and go
+ * straight to health + open.
  */
 async function runSetup() {
     const runtime = (0, docker_js_1.detectRuntime)();
@@ -24,17 +26,30 @@ async function runSetup() {
             "or Podman: https://podman.io/getting-started/installation");
     }
     console.log(`Using container runtime: ${runtime}`);
+    // Always pull the latest image first.
+    console.log("Pulling latest Straylight-AI image...");
+    (0, docker_js_1.pullImage)(runtime);
     const status = await (0, docker_js_1.getContainerStatus)(runtime);
     if (status === "not_found") {
         console.log("Creating and starting Straylight-AI container...");
         (0, child_process_1.execSync)((0, docker_js_1.buildRunCommand)(runtime), { stdio: "inherit" });
     }
-    else if (status === "stopped") {
-        console.log("Starting existing Straylight-AI container...");
-        (0, child_process_1.execSync)((0, docker_js_1.buildStartCommand)(runtime), { stdio: "inherit" });
-    }
     else {
-        console.log("Straylight-AI container is already running.");
+        // Container exists — check if it needs upgrading.
+        const containerImage = (0, docker_js_1.getContainerImageId)(runtime);
+        const latestImage = (0, docker_js_1.getImageId)(runtime);
+        if (containerImage && latestImage && containerImage !== latestImage) {
+            console.log("New image available — upgrading container...");
+            (0, docker_js_1.removeContainer)(runtime);
+            (0, child_process_1.execSync)((0, docker_js_1.buildRunCommand)(runtime), { stdio: "inherit" });
+        }
+        else if (status === "stopped") {
+            console.log("Starting existing Straylight-AI container...");
+            (0, child_process_1.execSync)((0, docker_js_1.buildStartCommand)(runtime), { stdio: "inherit" });
+        }
+        else {
+            console.log("Straylight-AI container is already running (up to date).");
+        }
     }
     console.log("Waiting for Straylight-AI to be ready...");
     await (0, health_js_1.waitForHealth)(HEALTH_URL, HEALTH_TIMEOUT_MS);
@@ -53,7 +68,7 @@ async function runSetup() {
         "",
         "Next steps:",
         "  1. Open http://localhost:9470 in your browser",
-        "  2. Add your service credentials via the Web UI",
+        "  2. Add your service credentials via the Services page",
         "  3. Use Claude Code with the straylight-ai MCP server",
         "",
     ].join("\n"));

package/dist/commands/setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":";;AAsBA,4BAiDC;AAvED,iDAAyC;AACzC,4CAKsB;AACtB,4CAA6C;AAC7C,wDAAiF;AACjF,wCAAyC;AAEzC,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC;;;;;;GAMG;AACI,KAAK,UAAU,QAAQ;IAC5B,MAAM,OAAO,GAAG,IAAA,yBAAa,GAAE,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qDAAqD;YACnD,+DAA+D;YAC/D,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAEnD,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAkB,EAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,IAAA,wBAAQ,EAAC,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;QAC5D,IAAA,wBAAQ,EAAC,IAAA,6BAAiB,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC7D,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,6CAA6C,CAAC,CAAC;IAC7D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,IAAA,yBAAa,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAW,GAAE,CAAC;IACvC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAA,gDAA8B,GAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAA,qBAAW,EAAC,MAAM,CAAC,CAAC;IAE1B,OAAO,CAAC,GAAG,CACT;QACE,EAAE;QACF,mDAAmD;QACnD,EAAE;QACF,aAAa;QACb,iDAAiD;QACjD,kDAAkD;QAClD,wDAAwD;QACxD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC"}
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/commands/setup.ts"],"names":[],"mappings":";;AA4BA,4BA+DC;AA3FD,iDAAyC;AACzC,4CASsB;AACtB,4CAA6C;AAC7C,wDAAiF;AACjF,wCAAyC;AAEzC,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AACjC,MAAM,MAAM,GAAG,uBAAuB,CAAC;AAEvC;;;;;;;;GAQG;AACI,KAAK,UAAU,QAAQ;IAC5B,MAAM,OAAO,GAAG,IAAA,yBAAa,GAAE,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qDAAqD;YACnD,+DAA+D;YAC/D,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAEnD,sCAAsC;IACtC,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,IAAA,qBAAS,EAAC,OAAO,CAAC,CAAC;IAEnB,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAkB,EAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,kDAAkD,CAAC,CAAC;QAChE,IAAA,wBAAQ,EAAC,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,kDAAkD;QAClD,MAAM,cAAc,GAAG,IAAA,+BAAmB,EAAC,OAAO,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,IAAA,sBAAU,EAAC,OAAO,CAAC,CAAC;QAExC,IAAI,cAAc,IAAI,WAAW,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;YAC5D,IAAA,2BAAe,EAAC,OAAO,CAAC,CAAC;YACzB,IAAA,wBAAQ,EAAC,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3D,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YAChC,OAAO,CAAC,GAAG,CAAC,8CAA8C,CAAC,CAAC;YAC5D,IAAA,wBAAQ,EAAC,IAAA,6BAAiB,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC7D,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,0DAA0D,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,IAAA,yBAAa,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC;IAEvC,MAAM,UAAU,GAAG,MAAM,IAAA,6BAAW,GAAE,CAAC;IACvC,IAAI,UAAU,EAAE,CAAC;QACf,OAAO,CAAC,GAAG,CAAC,yCAAyC,CAAC,CAAC;IACzD,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,IAAA,gDAA8B,GAAE,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,IAAA,qBAAW,EAAC,MAAM,CAAC,CAAC;IAE1B,OAAO,CAAC,GAAG,CACT;QACE,EAAE;QACF,mDAAmD;QACnD,EAAE;QACF,aAAa;QACb,iDAAiD;QACjD,yDAAyD;QACzD,wDAAwD;QACxD,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;AACJ,CAAC"}

package/dist/commands/upgrade.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Upgrade Straylight-AI to the latest image.
+ * Pulls the latest image, stops and removes the old container (preserving
+ * the data volume), and starts a new container from the updated image.
+ */
+export declare function runUpgrade(): Promise<void>;
+//# sourceMappingURL=upgrade.d.ts.map

package/dist/commands/upgrade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.d.ts","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":"AAeA;;;;GAIG;AACH,wBAAsB,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAsChD"}

package/dist/commands/upgrade.js

@@ -0,0 +1,45 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runUpgrade = runUpgrade;
+const child_process_1 = require("child_process");
+const docker_js_1 = require("../docker.js");
+const health_js_1 = require("../health.js");
+const HEALTH_URL = "http://localhost:9470/api/v1/health";
+const HEALTH_TIMEOUT_MS = 30_000;
+/**
+ * Upgrade Straylight-AI to the latest image.
+ * Pulls the latest image, stops and removes the old container (preserving
+ * the data volume), and starts a new container from the updated image.
+ */
+async function runUpgrade() {
+    const runtime = (0, docker_js_1.detectRuntime)();
+    if (!runtime) {
+        throw new Error("Neither Docker nor Podman was found on your PATH.\n" +
+            "Install Docker Desktop: https://docs.docker.com/get-docker/\n" +
+            "or Podman: https://podman.io/getting-started/installation");
+    }
+    console.log(`Using container runtime: ${runtime}`);
+    // Pull the latest image.
+    console.log("Pulling latest Straylight-AI image...");
+    const changed = (0, docker_js_1.pullImage)(runtime);
+    const status = await (0, docker_js_1.getContainerStatus)(runtime);
+    if (status === "not_found") {
+        console.log("No existing container found. Creating...");
+        (0, child_process_1.execSync)((0, docker_js_1.buildRunCommand)(runtime), { stdio: "inherit" });
+    }
+    else {
+        const containerImage = (0, docker_js_1.getContainerImageId)(runtime);
+        const latestImage = (0, docker_js_1.getImageId)(runtime);
+        if (!changed && containerImage === latestImage) {
+            console.log("Already running the latest image. Nothing to upgrade.");
+            return;
+        }
+        console.log("Stopping and replacing container (data volume preserved)...");
+        (0, docker_js_1.removeContainer)(runtime);
+        (0, child_process_1.execSync)((0, docker_js_1.buildRunCommand)(runtime), { stdio: "inherit" });
+    }
+    console.log("Waiting for Straylight-AI to be ready...");
+    await (0, health_js_1.waitForHealth)(HEALTH_URL, HEALTH_TIMEOUT_MS);
+    console.log("Straylight-AI upgraded and running at http://localhost:9470");
+}
+//# sourceMappingURL=upgrade.js.map

package/dist/commands/upgrade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade.js","sourceRoot":"","sources":["../../src/commands/upgrade.ts"],"names":[],"mappings":";;AAoBA,gCAsCC;AA1DD,iDAAyC;AACzC,4CAQsB;AACtB,4CAA6C;AAE7C,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC;;;;GAIG;AACI,KAAK,UAAU,UAAU;IAC9B,MAAM,OAAO,GAAG,IAAA,yBAAa,GAAE,CAAC;IAChC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,qDAAqD;YACnD,+DAA+D;YAC/D,2DAA2D,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,4BAA4B,OAAO,EAAE,CAAC,CAAC;IAEnD,yBAAyB;IACzB,OAAO,CAAC,GAAG,CAAC,uCAAuC,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,IAAA,qBAAS,EAAC,OAAO,CAAC,CAAC;IAEnC,MAAM,MAAM,GAAG,MAAM,IAAA,8BAAkB,EAAC,OAAO,CAAC,CAAC;IAEjD,IAAI,MAAM,KAAK,WAAW,EAAE,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;QACxD,IAAA,wBAAQ,EAAC,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;SAAM,CAAC;QACN,MAAM,cAAc,GAAG,IAAA,+BAAmB,EAAC,OAAO,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,IAAA,sBAAU,EAAC,OAAO,CAAC,CAAC;QAExC,IAAI,CAAC,OAAO,IAAI,cAAc,KAAK,WAAW,EAAE,CAAC;YAC/C,OAAO,CAAC,GAAG,CAAC,uDAAuD,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;QAC3E,IAAA,2BAAe,EAAC,OAAO,CAAC,CAAC;QACzB,IAAA,wBAAQ,EAAC,IAAA,2BAAe,EAAC,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAC;IACxD,MAAM,IAAA,yBAAa,EAAC,UAAU,EAAE,iBAAiB,CAAC,CAAC;IACnD,OAAO,CAAC,GAAG,CAAC,6DAA6D,CAAC,CAAC;AAC7E,CAAC"}

package/dist/docker.d.ts

@@ -36,7 +36,19 @@ export declare function buildStartCommand(runtime: string): string;
  */
 export declare function buildStopCommand(runtime: string): string;
 /**
- * Pull the container image.
+ * Pull the container image. Returns true if a newer image was downloaded.
  */
-export declare function pullImage(runtime: string): void;
+export declare function pullImage(runtime: string): boolean;
+/**
+ * Returns the image ID for the container image, or null if not present.
+ */
+export declare function getImageId(runtime: string): string | null;
+/**
+ * Returns the image ID that a running/stopped container was created from.
+ */
+export declare function getContainerImageId(runtime: string): string | null;
+/**
+ * Stop and remove the container (preserves the named volume).
+ */
+export declare function removeContainer(runtime: string): void;
 //# sourceMappingURL=docker.d.ts.map

package/dist/docker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAEA,oCAAoC;AACpC,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAE9C,mCAAmC;AACnC,eAAO,MAAM,eAAe,2CAA2C,CAAC;AAExE,8CAA8C;AAC9C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,gEAAgE;AAChE,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;AAElE,mCAAmC;AACnC,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE1C;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,GAAG,IAAI,CAU9C;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAE/C"}
+{"version":3,"file":"docker.d.ts","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":"AAEA,oCAAoC;AACpC,eAAO,MAAM,cAAc,kBAAkB,CAAC;AAE9C,mCAAmC;AACnC,eAAO,MAAM,eAAe,2CAA2C,CAAC;AAExE,8CAA8C;AAC9C,eAAO,MAAM,cAAc,OAAO,CAAC;AAEnC,gEAAgE;AAChE,eAAO,MAAM,WAAW,uBAAuB,CAAC;AAEhD,8BAA8B;AAC9B,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,SAAS,GAAG,WAAW,CAAC;AAElE,mCAAmC;AACnC,MAAM,MAAM,OAAO,GAAG,QAAQ,GAAG,QAAQ,CAAC;AAE1C;;;GAGG;AACH,wBAAgB,aAAa,IAAI,OAAO,GAAG,IAAI,CAU9C;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,eAAe,CAAC,CAe1B;AAED;;GAEG;AACH,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAE1E;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAUvD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAEzD;AAED;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAKlD;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYzD;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAYlE;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAWrD"}

package/dist/docker.js

@@ -8,6 +8,9 @@ exports.buildRunCommand = buildRunCommand;
 exports.buildStartCommand = buildStartCommand;
 exports.buildStopCommand = buildStopCommand;
 exports.pullImage = pullImage;
+exports.getImageId = getImageId;
+exports.getContainerImageId = getContainerImageId;
+exports.removeContainer = removeContainer;
 const child_process_1 = require("child_process");
 /** Name of the managed container */
 exports.CONTAINER_NAME = "straylight-ai";
@@ -83,9 +86,57 @@ function buildStopCommand(runtime) {
     return `${runtime} stop ${exports.CONTAINER_NAME}`;
 }
 /**
- * Pull the container image.
+ * Pull the container image. Returns true if a newer image was downloaded.
  */
 function pullImage(runtime) {
+    const before = getImageId(runtime);
     (0, child_process_1.execSync)(`${runtime} pull ${exports.CONTAINER_IMAGE}`, { stdio: "inherit" });
+    const after = getImageId(runtime);
+    return before !== after;
+}
+/**
+ * Returns the image ID for the container image, or null if not present.
+ */
+function getImageId(runtime) {
+    try {
+        return (0, child_process_1.execSync)(`${runtime} image inspect --format "{{.Id}}" ${exports.CONTAINER_IMAGE}`, { stdio: "pipe" })
+            .toString()
+            .trim()
+            .replace(/^"|"$/g, "");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Returns the image ID that a running/stopped container was created from.
+ */
+function getContainerImageId(runtime) {
+    try {
+        return (0, child_process_1.execSync)(`${runtime} inspect --format "{{.Image}}" ${exports.CONTAINER_NAME}`, { stdio: "pipe" })
+            .toString()
+            .trim()
+            .replace(/^"|"$/g, "");
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Stop and remove the container (preserves the named volume).
+ */
+function removeContainer(runtime) {
+    try {
+        (0, child_process_1.execSync)(`${runtime} stop ${exports.CONTAINER_NAME}`, { stdio: "pipe" });
+    }
+    catch {
+        // already stopped
+    }
+    try {
+        (0, child_process_1.execSync)(`${runtime} rm ${exports.CONTAINER_NAME}`, { stdio: "pipe" });
+    }
+    catch {
+        // already removed
+    }
 }
 //# sourceMappingURL=docker.js.map

package/dist/docker.js.map

@@ -1 +1 @@
-{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":";;;AAwBA,sCAUC;AAKD,gDAiBC;AAKD,gDAEC;AAKD,0CAUC;AAKD,8CAEC;AAKD,4CAEC;AAKD,8BAEC;AAnGD,iDAAyC;AAEzC,oCAAoC;AACvB,QAAA,cAAc,GAAG,eAAe,CAAC;AAE9C,mCAAmC;AACtB,QAAA,eAAe,GAAG,wCAAwC,CAAC;AAExE,8CAA8C;AACjC,QAAA,cAAc,GAAG,IAAI,CAAC;AAEnC,gEAAgE;AACnD,QAAA,WAAW,GAAG,oBAAoB,CAAC;AAQhD;;;GAGG;AACH,SAAgB,aAAa;IAC3B,KAAK,MAAM,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAc,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,GAAG,OAAO,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACtC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,GAAG,OAAO,yCAAyC,sBAAc,EAAE,EACnE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB;aACE,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,sCAAsC;QAEhE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACtD,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO;QACL,GAAG,OAAO,MAAM;QAChB,IAAI;QACJ,UAAU,sBAAc,EAAE;QAC1B,MAAM,sBAAc,IAAI,sBAAc,EAAE;QACxC,MAAM,mBAAW,QAAQ;QACzB,0BAA0B;QAC1B,uBAAe;KAChB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,OAAO,GAAG,OAAO,UAAU,sBAAc,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,GAAG,OAAO,SAAS,sBAAc,EAAE,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,OAAe;IACvC,IAAA,wBAAQ,EAAC,GAAG,OAAO,SAAS,uBAAe,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;AACvE,CAAC"}
+{"version":3,"file":"docker.js","sourceRoot":"","sources":["../src/docker.ts"],"names":[],"mappings":";;;AAwBA,sCAUC;AAKD,gDAiBC;AAKD,gDAEC;AAKD,0CAUC;AAKD,8CAEC;AAKD,4CAEC;AAKD,8BAKC;AAKD,gCAYC;AAKD,kDAYC;AAKD,0CAWC;AAxJD,iDAAyC;AAEzC,oCAAoC;AACvB,QAAA,cAAc,GAAG,eAAe,CAAC;AAE9C,mCAAmC;AACtB,QAAA,eAAe,GAAG,wCAAwC,CAAC;AAExE,8CAA8C;AACjC,QAAA,cAAc,GAAG,IAAI,CAAC;AAEnC,gEAAgE;AACnD,QAAA,WAAW,GAAG,oBAAoB,CAAC;AAQhD;;;GAGG;AACH,SAAgB,aAAa;IAC3B,KAAK,MAAM,OAAO,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAc,EAAE,CAAC;QACxD,IAAI,CAAC;YACH,IAAA,wBAAQ,EAAC,GAAG,OAAO,YAAY,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;YACpD,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,mBAAmB;QACrB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CACtC,OAAe;IAEf,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EACrB,GAAG,OAAO,yCAAyC,sBAAc,EAAE,EACnE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB;aACE,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,sCAAsC;QAEhE,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC3C,OAAO,SAAS,CAAC;IACnB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,kBAAkB,CAAC,OAAe;IACtD,OAAO,CAAC,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC,KAAK,SAAS,CAAC;AAC3D,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,OAAO;QACL,GAAG,OAAO,MAAM;QAChB,IAAI;QACJ,UAAU,sBAAc,EAAE;QAC1B,MAAM,sBAAc,IAAI,sBAAc,EAAE;QACxC,MAAM,mBAAW,QAAQ;QACzB,0BAA0B;QAC1B,uBAAe;KAChB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC;AAED;;GAEG;AACH,SAAgB,iBAAiB,CAAC,OAAe;IAC/C,OAAO,GAAG,OAAO,UAAU,sBAAc,EAAE,CAAC;AAC9C,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAC,OAAe;IAC9C,OAAO,GAAG,OAAO,SAAS,sBAAc,EAAE,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS,CAAC,OAAe;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IACnC,IAAA,wBAAQ,EAAC,GAAG,OAAO,SAAS,uBAAe,EAAE,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;IAClC,OAAO,MAAM,KAAK,KAAK,CAAC;AAC1B,CAAC;AAED;;GAEG;AACH,SAAgB,UAAU,CAAC,OAAe;IACxC,IAAI,CAAC;QACH,OAAO,IAAA,wBAAQ,EACb,GAAG,OAAO,qCAAqC,uBAAe,EAAE,EAChE,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB;aACE,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,mBAAmB,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,OAAO,IAAA,wBAAQ,EACb,GAAG,OAAO,kCAAkC,sBAAc,EAAE,EAC5D,EAAE,KAAK,EAAE,MAAM,EAAE,CAClB;aACE,QAAQ,EAAE;aACV,IAAI,EAAE;aACN,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,eAAe,CAAC,OAAe;IAC7C,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,GAAG,OAAO,SAAS,sBAAc,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;IACD,IAAI,CAAC;QACH,IAAA,wBAAQ,EAAC,GAAG,OAAO,OAAO,sBAAc,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,kBAAkB;IACpB,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "straylight-ai",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Zero-knowledge credential proxy for AI agents",
   "bin": {
     "straylight-ai": "bin/cli.js",

package/src/__tests__/commands.test.ts

@@ -14,6 +14,10 @@ vi.mock("../docker.js", () => ({
   buildRunCommand: vi.fn(),
   buildStartCommand: vi.fn(),
   buildStopCommand: vi.fn(),
+  pullImage: vi.fn(),
+  getImageId: vi.fn(),
+  getContainerImageId: vi.fn(),
+  removeContainer: vi.fn(),
 }));
 
 vi.mock("../health.js", () => ({
@@ -40,6 +44,10 @@ import {
   buildRunCommand,
   buildStartCommand,
   buildStopCommand,
+  pullImage,
+  getImageId,
+  getContainerImageId,
+  removeContainer,
 } from "../docker.js";
 import { waitForHealth, checkHealth } from "../health.js";
 import { registerMCP, isClaudeAvailable } from "../mcp-register.js";
@@ -56,6 +64,10 @@ const mockIsContainerRunning = vi.mocked(isContainerRunning);
 const mockBuildRunCommand = vi.mocked(buildRunCommand);
 const mockBuildStartCommand = vi.mocked(buildStartCommand);
 const mockBuildStopCommand = vi.mocked(buildStopCommand);
+const mockPullImage = vi.mocked(pullImage);
+const mockGetImageId = vi.mocked(getImageId);
+const mockGetContainerImageId = vi.mocked(getContainerImageId);
+const mockRemoveContainer = vi.mocked(removeContainer);
 const mockWaitForHealth = vi.mocked(waitForHealth);
 const mockCheckHealth = vi.mocked(checkHealth);
 const mockRegisterMCP = vi.mocked(registerMCP);
@@ -81,6 +93,10 @@ beforeEach(() => {
   mockIsClaudeAvailable.mockReturnValue(false);
   mockOpenBrowser.mockResolvedValue(undefined);
   mockExecSync.mockReturnValue(Buffer.from(""));
+  mockPullImage.mockReturnValue(false);
+  mockGetImageId.mockReturnValue("sha256:abc123");
+  mockGetContainerImageId.mockReturnValue("sha256:abc123");
+  mockRemoveContainer.mockReturnValue(undefined);
 });
 
 afterEach(() => {

package/src/commands/setup.ts

@@ -2,6 +2,10 @@ import { execSync } from "child_process";
 import {
   detectRuntime,
   getContainerStatus,
+  getContainerImageId,
+  getImageId,
+  pullImage,
+  removeContainer,
   buildRunCommand,
   buildStartCommand,
 } from "../docker.js";
@@ -14,11 +18,13 @@ const HEALTH_TIMEOUT_MS = 30_000;
 const UI_URL = "http://localhost:9470";
 
 /**
- * Full bootstrap: pull image if needed, create/start container, wait for
- * health check, register MCP server, and open the browser.
+ * Full bootstrap: pull latest image, create/start container (upgrading if
+ * the image changed), wait for health check, register MCP server, and open
+ * the browser.
  *
  * This operation is idempotent: calling it when the container is already
- * running will skip the create/start steps and go straight to health + open.
+ * running on the latest image will skip the create/start steps and go
+ * straight to health + open.
  */
 export async function runSetup(): Promise<void> {
   const runtime = detectRuntime();
@@ -32,16 +38,30 @@ export async function runSetup(): Promise<void> {
 
   console.log(`Using container runtime: ${runtime}`);
 
+  // Always pull the latest image first.
+  console.log("Pulling latest Straylight-AI image...");
+  pullImage(runtime);
+
   const status = await getContainerStatus(runtime);
 
   if (status === "not_found") {
     console.log("Creating and starting Straylight-AI container...");
     execSync(buildRunCommand(runtime), { stdio: "inherit" });
-  } else if (status === "stopped") {
-    console.log("Starting existing Straylight-AI container...");
-    execSync(buildStartCommand(runtime), { stdio: "inherit" });
   } else {
-    console.log("Straylight-AI container is already running.");
+    // Container exists — check if it needs upgrading.
+    const containerImage = getContainerImageId(runtime);
+    const latestImage = getImageId(runtime);
+
+    if (containerImage && latestImage && containerImage !== latestImage) {
+      console.log("New image available — upgrading container...");
+      removeContainer(runtime);
+      execSync(buildRunCommand(runtime), { stdio: "inherit" });
+    } else if (status === "stopped") {
+      console.log("Starting existing Straylight-AI container...");
+      execSync(buildStartCommand(runtime), { stdio: "inherit" });
+    } else {
+      console.log("Straylight-AI container is already running (up to date).");
+    }
   }
 
   console.log("Waiting for Straylight-AI to be ready...");
@@ -64,7 +84,7 @@ export async function runSetup(): Promise<void> {
       "",
       "Next steps:",
       "  1. Open http://localhost:9470 in your browser",
-      "  2. Add your service credentials via the Web UI",
+      "  2. Add your service credentials via the Services page",
       "  3. Use Claude Code with the straylight-ai MCP server",
       "",
     ].join("\n")

package/src/commands/upgrade.ts

@@ -0,0 +1,59 @@
+import { execSync } from "child_process";
+import {
+  detectRuntime,
+  getContainerStatus,
+  getContainerImageId,
+  getImageId,
+  pullImage,
+  removeContainer,
+  buildRunCommand,
+} from "../docker.js";
+import { waitForHealth } from "../health.js";
+
+const HEALTH_URL = "http://localhost:9470/api/v1/health";
+const HEALTH_TIMEOUT_MS = 30_000;
+
+/**
+ * Upgrade Straylight-AI to the latest image.
+ * Pulls the latest image, stops and removes the old container (preserving
+ * the data volume), and starts a new container from the updated image.
+ */
+export async function runUpgrade(): Promise<void> {
+  const runtime = detectRuntime();
+  if (!runtime) {
+    throw new Error(
+      "Neither Docker nor Podman was found on your PATH.\n" +
+        "Install Docker Desktop: https://docs.docker.com/get-docker/\n" +
+        "or Podman: https://podman.io/getting-started/installation"
+    );
+  }
+
+  console.log(`Using container runtime: ${runtime}`);
+
+  // Pull the latest image.
+  console.log("Pulling latest Straylight-AI image...");
+  const changed = pullImage(runtime);
+
+  const status = await getContainerStatus(runtime);
+
+  if (status === "not_found") {
+    console.log("No existing container found. Creating...");
+    execSync(buildRunCommand(runtime), { stdio: "inherit" });
+  } else {
+    const containerImage = getContainerImageId(runtime);
+    const latestImage = getImageId(runtime);
+
+    if (!changed && containerImage === latestImage) {
+      console.log("Already running the latest image. Nothing to upgrade.");
+      return;
+    }
+
+    console.log("Stopping and replacing container (data volume preserved)...");
+    removeContainer(runtime);
+    execSync(buildRunCommand(runtime), { stdio: "inherit" });
+  }
+
+  console.log("Waiting for Straylight-AI to be ready...");
+  await waitForHealth(HEALTH_URL, HEALTH_TIMEOUT_MS);
+  console.log("Straylight-AI upgraded and running at http://localhost:9470");
+}

package/src/docker.ts

@@ -93,8 +93,61 @@ export function buildStopCommand(runtime: string): string {
 }
 
 /**
- * Pull the container image.
+ * Pull the container image. Returns true if a newer image was downloaded.
  */
-export function pullImage(runtime: string): void {
+export function pullImage(runtime: string): boolean {
+  const before = getImageId(runtime);
   execSync(`${runtime} pull ${CONTAINER_IMAGE}`, { stdio: "inherit" });
+  const after = getImageId(runtime);
+  return before !== after;
+}
+
+/**
+ * Returns the image ID for the container image, or null if not present.
+ */
+export function getImageId(runtime: string): string | null {
+  try {
+    return execSync(
+      `${runtime} image inspect --format "{{.Id}}" ${CONTAINER_IMAGE}`,
+      { stdio: "pipe" }
+    )
+      .toString()
+      .trim()
+      .replace(/^"|"$/g, "");
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Returns the image ID that a running/stopped container was created from.
+ */
+export function getContainerImageId(runtime: string): string | null {
+  try {
+    return execSync(
+      `${runtime} inspect --format "{{.Image}}" ${CONTAINER_NAME}`,
+      { stdio: "pipe" }
+    )
+      .toString()
+      .trim()
+      .replace(/^"|"$/g, "");
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Stop and remove the container (preserves the named volume).
+ */
+export function removeContainer(runtime: string): void {
+  try {
+    execSync(`${runtime} stop ${CONTAINER_NAME}`, { stdio: "pipe" });
+  } catch {
+    // already stopped
+  }
+  try {
+    execSync(`${runtime} rm ${CONTAINER_NAME}`, { stdio: "pipe" });
+  } catch {
+    // already removed
+  }
 }