waterplane 0.0.1 → 0.1.6

package/packages/host/dist/updates/checker.js

@@ -0,0 +1,189 @@
+/**
+ * The update check: waterplane itself + the plugin catalogue, cached and broadcast.
+ *
+ * Mirrors `UpdateChecker` (`../update.ts`) in shape: a timer, a cached reading, `onChange`. Differences
+ * that matter: the daily timer starts minutes AFTER boot (never in the boot preflight), an on-demand
+ * check has a 10-minute floor (the API allows 60 unauthenticated calls an hour), and a FAILED check
+ * keeps the previous catalogue and says why in a sentence — `checkedAt` is always the last GOOD check.
+ *
+ * `status()` re-joins "installed" on every read, so a plugin installed a second ago shows as such
+ * without another network call. Nothing here applies anything (CLAUDE.md: nothing applies itself).
+ */
+import { join } from "node:path";
+import { BRAND, envName } from "@waterplane/shared";
+import { env } from "../env.js";
+import { readJsonGuarded, writeJsonAtomic } from "../jsonstore.js";
+import { fetchCatalog, joinInstalled } from "./catalog.js";
+import { GithubError } from "./github.js";
+import { isOrgUrl, remoteLatest, repoLabel } from "./remote.js";
+import { realSelfDeps, selfBase, selfLatest } from "./self.js";
+export const CHECK_FLOOR_MS = 10 * 60_000;
+/** After a FAILED attempt the floor is short: a person who fixed their network and taps "check now" gets a real check. */
+export const CHECK_FLOOR_FAILED_MS = 30_000;
+export const CHECK_EVERY_MS = 24 * 3_600_000;
+export const FIRST_CHECK_DELAY_MS = 5 * 60_000;
+export const UPDATES_FILE = "updates.json";
+export const OFF_SENTENCE = `Update checks are switched off on this desktop (${envName("UPDATE_CHECK")}=0).`;
+/** `WATERPLANE_UPDATE_CHECK=0` forces every check off, the daily one and a tap alike. */
+export const checkForcedOff = () => { const v = env("UPDATE_CHECK"); return v === "0" || v === "false" || v === "off"; };
+/** The synced setting's stored string → on/off; anything unreadable is the default, on. */
+export function autoCheckFrom(raw) {
+    return !(raw === "false" || raw === "0" || raw === "off");
+}
+export class UpdatesChecker {
+    deps;
+    cache;
+    timer = null;
+    running = false;
+    path;
+    self;
+    now;
+    constructor(deps) {
+        this.deps = deps;
+        this.path = join(deps.stateDir, UPDATES_FILE);
+        this.self = deps.self ?? realSelfDeps;
+        this.now = deps.now ?? Date.now;
+        this.cache = readJsonGuarded(this.path, { raw: [] }, (v) => !!v && typeof v === "object" && Array.isArray(v.raw));
+    }
+    /** The cached reading, with "installed" joined fresh. Never touches the network. */
+    status() {
+        const c = this.cache;
+        const off = checkForcedOff();
+        const next = off ? null : this.nextManualCheckAt();
+        return {
+            self: { ...selfBase(this.self), ...(c.self ? { latest: c.self.latest, ...(c.self.notes ? { notes: c.self.notes } : {}) } : {}), ...(c.lastResult ? { lastResult: c.lastResult } : {}) },
+            catalog: this.catalogRows(),
+            ...(c.checkedAt ? { checkedAt: c.checkedAt } : {}),
+            ...(off ? { error: OFF_SENTENCE } : c.error ? { error: c.error } : {}),
+            autoCheck: !off && this.deps.autoCheck(),
+            ...(c.lastApply ? { lastApply: c.lastApply } : {}),
+            ...(next ? { nextCheckAt: next } : {}),
+        };
+    }
+    /** When a manual check is next allowed, or null when it is allowed now. A failed attempt waits less than an ok one. */
+    nextManualCheckAt() {
+        const at = this.cache.attemptedAt;
+        if (!at)
+            return null;
+        const t = at + (this.cache.error ? CHECK_FLOOR_FAILED_MS : CHECK_FLOOR_MS);
+        return t > this.now() ? t : null;
+    }
+    /**
+     * The org catalogue joined with what is installed, plus one row for every manager install that is
+     * NOT in it (installed by URL): `source: "manager"`, its `latest` from the cached remote check, or
+     * null with a sentence saying why.
+     */
+    catalogRows() {
+        const installed = this.deps.installed();
+        const rows = joinInstalled(this.cache.raw, installed);
+        const seen = new Set(rows.flatMap((r) => (r.installed ? [r.installed.id] : [])));
+        for (const i of installed) {
+            if (i.source !== "manager" || seen.has(i.id) || !i.url)
+                continue;
+            const { url, ...inst } = i;
+            const r = this.cache.remote?.[url];
+            rows.push({
+                repo: repoLabel(url), url, name: i.id, description: "", maturity: "unrated",
+                latest: r?.latest ?? null, installed: inst, fromOrg: isOrgUrl(url),
+                problems: r?.latest ? [] : [r?.problem ?? "Not checked yet."],
+            });
+        }
+        return rows;
+    }
+    /** Daily timer: the first run a few minutes after boot (later if the cache is fresh), then every 24 h. */
+    start() {
+        if (this.timer)
+            return;
+        const since = this.now() - (this.cache.attemptedAt ?? 0);
+        const wait = Math.max(this.deps.firstDelayMs ?? FIRST_CHECK_DELAY_MS, CHECK_EVERY_MS - since);
+        const arm = (ms) => {
+            this.timer = setTimeout(() => { void this.check({ timer: true }).finally(() => arm(CHECK_EVERY_MS)); }, ms);
+            this.timer.unref?.();
+        };
+        arm(wait);
+    }
+    stop() { if (this.timer)
+        clearTimeout(this.timer); this.timer = null; }
+    /** Broadcast `status()` again (an apply changed what is installed; no network, no floor). */
+    refresh() { this.deps.onChange(this.status()); }
+    /** Record the receipt of an apply/rollback (P3), kept across a restart. */
+    setLastResult(r) {
+        this.cache.lastResult = { ...r, at: this.now() };
+        this.persist();
+        this.deps.onChange(this.status());
+    }
+    /** Record the outcome of ANY apply (plugin install/update, self, restart); persisted and broadcast with the status. */
+    setLastApply(r) {
+        this.cache.lastApply = { ...r, at: this.now() };
+        this.persist();
+        this.deps.onChange(this.status());
+    }
+    /**
+     * Check now. Resolves true when a check RAN (its outcome was broadcast through `onChange`), false
+     * when none did — switched off, inside the floor (10 min after an ok attempt, 30 s after a failed one; manual only), or one already running —
+     * so the caller can answer the asker from `status()` itself.
+     */
+    async check(opts = {}) {
+        if (checkForcedOff() || this.running)
+            return false;
+        if (opts.timer && !this.deps.autoCheck())
+            return false;
+        const now = this.now();
+        if (!opts.timer && this.nextManualCheckAt() !== null)
+            return false;
+        this.running = true;
+        this.cache.attemptedAt = now;
+        // The three parts fail independently: a failing part keeps its previous reading and says why in
+        // its own sentence; `checkedAt` moves only when all of them were read.
+        const fails = [];
+        const why = (e) => (e instanceof GithubError ? e.message : e instanceof Error ? e.message : String(e)).replace(/\.+$/, "");
+        let raw = this.cache.raw, sl = this.cache.self;
+        try {
+            raw = await (this.deps.fetchCatalog ?? ((prev) => fetchCatalog(undefined, prev)))(this.cache.raw);
+        }
+        catch (e) {
+            fails.push(`Could not read the list of plugins: ${why(e)}.`);
+        }
+        try {
+            sl = await selfLatest(this.self);
+        }
+        catch (e) {
+            fails.push(`Could not check for a newer ${BRAND.slug}: ${why(e)}.`);
+        }
+        let remote = this.cache.remote;
+        try {
+            remote = await this.checkRemotes(raw);
+        }
+        catch (e) {
+            fails.push(`Could not check the plugins installed by address: ${why(e)}.`);
+        }
+        this.cache = { ...this.cache, raw, self: sl, remote, ...(fails.length ? { error: fails.join(" ") } : { checkedAt: now, error: undefined }) };
+        this.running = false;
+        this.persist();
+        this.deps.onChange(this.status());
+        return true;
+    }
+    /** Each URL-installed plugin the org catalogue does not hold: one failure is that row's sentence, never the check's. */
+    async checkRemotes(raw) {
+        const out = {};
+        const inOrg = new Set(joinInstalled(raw, this.deps.installed()).flatMap((r) => (r.installed ? [r.installed.id] : [])));
+        for (const i of this.deps.installed()) {
+            if (i.source !== "manager" || !i.url || inOrg.has(i.id) || out[i.url])
+                continue;
+            try {
+                out[i.url] = { latest: await (this.deps.remoteLatest ?? remoteLatest)(i.url) };
+            }
+            catch (e) {
+                out[i.url] = { latest: null, problem: `Could not check ${i.url} for a newer version: ${e instanceof Error ? e.message.replace(/\.+$/, "") : String(e)}.` };
+            }
+        }
+        return out;
+    }
+    persist() {
+        try {
+            writeJsonAtomic(this.path, this.cache);
+        }
+        catch { /* a cache that cannot be written is re-read next check */ }
+    }
+}
+//# sourceMappingURL=checker.js.map

package/packages/host/dist/updates/checker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"checker.js","sourceRoot":"","sources":["../../src/updates/checker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAEpD,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAG/D,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,MAAM,CAAC;AAC1C,0HAA0H;AAC1H,MAAM,CAAC,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAC5C,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,SAAS,CAAC;AAC7C,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,GAAG,MAAM,CAAC;AAC/C,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AA+B3C,MAAM,CAAC,MAAM,YAAY,GAAG,mDAAmD,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC;AAE7G,yFAAyF;AACzF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAY,EAAE,GAAG,MAAM,CAAC,GAAG,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC;AAElI,2FAA2F;AAC3F,MAAM,UAAU,aAAa,CAAC,GAAY;IACxC,OAAO,CAAC,CAAC,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,KAAK,CAAC,CAAC;AAC5D,CAAC;AAED,MAAM,OAAO,cAAc;IAQL;IAPZ,KAAK,CAAQ;IACb,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IACP,IAAI,CAAS;IACb,IAAI,CAAW;IACf,GAAG,CAAe;IAEnC,YAAoB,IAAiB;QAAjB,SAAI,GAAJ,IAAI,CAAa;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,YAAY,CAAC;QACtC,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,KAAK,GAAG,eAAe,CAAQ,IAAI,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAE,CAAW,CAAC,GAAG,CAAC,CAAC,CAAC;IACtI,CAAC;IAED,oFAAoF;IACpF,MAAM;QACJ,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC;QACnD,OAAO;YACL,IAAI,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;YACvL,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE;YAC3B,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,SAAS,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YACxC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACvC,CAAC;IACJ,CAAC;IAED,uHAAuH;IAC/G,iBAAiB;QACvB,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACrB,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAC3E,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACnC,CAAC;IAED;;;;OAIG;IACK,WAAW;QACjB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QACtD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACjF,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG;gBAAE,SAAS;YACjE,MAAM,EAAE,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3B,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;YACnC,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS;gBAC3E,MAAM,EAAE,CAAC,EAAE,MAAM,IAAI,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC;gBAClE,QAAQ,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,kBAAkB,CAAC;aAC9D,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,0GAA0G;IAC1G,KAAK;QACH,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO;QACvB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,oBAAoB,EAAE,cAAc,GAAG,KAAK,CAAC,CAAC;QAC9F,MAAM,GAAG,GAAG,CAAC,EAAU,EAAE,EAAE;YACzB,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,KAAK,IAAI,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YAC5G,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,CAAC,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,CAAC;IACZ,CAAC;IAED,IAAI,KAAW,IAAI,IAAI,CAAC,KAAK;QAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC;IAE7E,6FAA6F;IAC7F,OAAO,KAAW,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC;IAEtD,2EAA2E;IAC3E,aAAa,CAAC,CAAmC;QAC/C,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED,uHAAuH;IACvH,YAAY,CAAC,CAA+B;QAC1C,IAAI,CAAC,KAAK,CAAC,SAAS,GAAG,EAAE,GAAG,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IACpC,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,KAAK,CAAC,OAA4B,EAAE;QACxC,IAAI,cAAc,EAAE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,CAAC;QACnD,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE;YAAE,OAAO,KAAK,CAAC;QACvD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,iBAAiB,EAAE,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QACnE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC;QAC7B,gGAAgG;QAChG,uEAAuE;QACvE,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpI,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;QAC/C,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,uCAAuC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACtL,IAAI,CAAC;YAAC,EAAE,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,+BAA+B,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAC5H,IAAI,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;QAC/B,IAAI,CAAC;YAAC,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,qDAAqD,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAAC,CAAC;QACxI,IAAI,CAAC,KAAK,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC;QAC7I,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,OAAO,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAClC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,wHAAwH;IAChH,KAAK,CAAC,YAAY,CAAC,GAA+B;QACxD,MAAM,GAAG,GAAiC,EAAE,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACvH,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;YACtC,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;gBAAE,SAAS;YAChF,IAAI,CAAC;gBAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACjG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,CAAC,GAAG,yBAAyB,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;YAC7J,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;IAEO,OAAO;QACb,IAAI,CAAC;YAAC,eAAe,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,0DAA0D,CAAC,CAAC;IACtH,CAAC;CACF"}

package/packages/host/dist/updates/github.d.ts

@@ -0,0 +1,13 @@
+export declare const DEFAULT_GITHUB_API = "https://api.github.com";
+export declare const DEFAULT_GITHUB_RAW = "https://raw.githubusercontent.com";
+export declare const githubApi: () => string;
+export declare const githubRaw: () => string;
+/** A GitHub answer that is not a success. `status` 404 is the one callers treat as "not there". */
+export declare class GithubError extends Error {
+    readonly status: number | null;
+    constructor(message: string, status: number | null);
+}
+/** JSON from the API. Throws `GithubError` (status 404 = absent). */
+export declare function ghJson<T>(path: string): Promise<T>;
+/** A raw file at `ref`, or null when it is not there. Other failures throw. */
+export declare function ghRaw(repo: string, ref: string, file: string): Promise<string | null>;

package/packages/host/dist/updates/github.js

@@ -0,0 +1,63 @@
+/**
+ * The smallest GitHub client the update check needs: unauthenticated `fetch` with a timeout.
+ *
+ * Unauthenticated calls are limited to 60 an hour per IP, so the catalogue makes few
+ * (`catalog.ts`). Both bases are knobs so a test points them at a fake local server and never
+ * touches real GitHub: `WATERPLANE_GITHUB_API` (default api.github.com) and
+ * `WATERPLANE_GITHUB_RAW` (default raw.githubusercontent.com). Read at CALL time.
+ */
+import { BRAND } from "@waterplane/shared";
+import { env } from "../env.js";
+export const DEFAULT_GITHUB_API = "https://api.github.com";
+export const DEFAULT_GITHUB_RAW = "https://raw.githubusercontent.com";
+const TIMEOUT_MS = 8_000;
+export const githubApi = () => (env("GITHUB_API") || DEFAULT_GITHUB_API).replace(/\/+$/, "");
+export const githubRaw = () => (env("GITHUB_RAW") || DEFAULT_GITHUB_RAW).replace(/\/+$/, "");
+/** A GitHub answer that is not a success. `status` 404 is the one callers treat as "not there". */
+export class GithubError extends Error {
+    status;
+    constructor(message, status) {
+        super(message);
+        this.status = status;
+    }
+}
+const headers = (accept) => ({ "user-agent": `${BRAND.slug}/update-check`, accept });
+async function get(url, accept) {
+    let res;
+    try {
+        res = await fetch(url, { headers: headers(accept), signal: AbortSignal.timeout(TIMEOUT_MS), redirect: "follow" });
+    }
+    catch (e) {
+        const timeout = e?.name === "TimeoutError" || e?.name === "AbortError";
+        throw new GithubError(timeout ? "GitHub did not answer in time" : "GitHub could not be reached", null);
+    }
+    if (res.ok)
+        return res;
+    if (res.status === 404)
+        throw new GithubError("not found", 404);
+    const limited = res.status === 429 || (res.status === 403 && res.headers.get("x-ratelimit-remaining") === "0");
+    throw new GithubError(limited ? "GitHub's hourly limit for unauthenticated calls is used up; try again later" : `GitHub answered HTTP ${res.status}`, res.status);
+}
+/** JSON from the API. Throws `GithubError` (status 404 = absent). */
+export async function ghJson(path) {
+    const res = await get(`${githubApi()}${path}`, "application/vnd.github+json");
+    try {
+        return (await res.json());
+    }
+    catch {
+        throw new GithubError("GitHub sent something that is not JSON", null);
+    }
+}
+/** A raw file at `ref`, or null when it is not there. Other failures throw. */
+export async function ghRaw(repo, ref, file) {
+    try {
+        const res = await get(`${githubRaw()}/${repo}/${encodeURIComponent(ref)}/${file}`, "text/plain");
+        return await res.text();
+    }
+    catch (e) {
+        if (e instanceof GithubError && e.status === 404)
+            return null;
+        throw e;
+    }
+}
+//# sourceMappingURL=github.js.map

package/packages/host/dist/updates/github.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"github.js","sourceRoot":"","sources":["../../src/updates/github.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhC,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAC3D,MAAM,CAAC,MAAM,kBAAkB,GAAG,mCAAmC,CAAC;AACtE,MAAM,UAAU,GAAG,KAAK,CAAC;AAEzB,MAAM,CAAC,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACrG,MAAM,CAAC,MAAM,SAAS,GAAG,GAAW,EAAE,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AAErG,mGAAmG;AACnG,MAAM,OAAO,WAAY,SAAQ,KAAK;IACE;IAAtC,YAAY,OAAe,EAAW,MAAqB;QAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAAxC,WAAM,GAAN,MAAM,CAAe;IAAoB,CAAC;CACjF;AAED,MAAM,OAAO,GAAG,CAAC,MAAc,EAA0B,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC,IAAI,eAAe,EAAE,MAAM,EAAE,CAAC,CAAC;AAErH,KAAK,UAAU,GAAG,CAAC,GAAW,EAAE,MAAc;IAC5C,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,OAAO,GAAI,CAAW,EAAE,IAAI,KAAK,cAAc,IAAK,CAAW,EAAE,IAAI,KAAK,YAAY,CAAC;QAC7F,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC;IACzG,CAAC;IACD,IAAI,GAAG,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC;IACvB,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,MAAM,IAAI,WAAW,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,KAAK,GAAG,CAAC,CAAC;IAC/G,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,6EAA6E,CAAC,CAAC,CAAC,wBAAwB,GAAG,CAAC,MAAM,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;AACpK,CAAC;AAED,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,MAAM,CAAI,IAAY;IAC1C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,EAAE,EAAE,6BAA6B,CAAC,CAAC;IAC9E,IAAI,CAAC;QAAC,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAM,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,WAAW,CAAC,wCAAwC,EAAE,IAAI,CAAC,CAAC;IAAC,CAAC;AAC1H,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,KAAK,CAAC,IAAY,EAAE,GAAW,EAAE,IAAY;IACjE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,GAAG,SAAS,EAAE,IAAI,IAAI,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC;QACjG,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAC,YAAY,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;QAC9D,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC"}

package/packages/host/dist/updates/gitops.d.ts

@@ -0,0 +1,16 @@
+/** `git <args>` in `cwd`; resolves stdout, rejects with git's own words. Injected in tests. */
+export type Git = (args: string[], cwd?: string) => Promise<string>;
+export declare const realGit: Git;
+/** Null when `url` may be cloned; otherwise the refusal, in words. */
+export declare function urlProblem(url: unknown): string | null;
+/** A branch or tag name safe to hand to git as an argument (never an option, no odd characters). */
+export declare const refOk: (ref: string) => boolean;
+export interface Resolved {
+    kind: "tag" | "branch";
+    ref: string;
+}
+/**
+ * What to install from a bare URL: the newest version-numbered tag, else the default branch
+ * (`ref: ""`, so the clone takes the remote's HEAD). Throws git's words when the remote cannot be read.
+ */
+export declare function resolveUrl(git: Git, url: string): Promise<Resolved>;

package/packages/host/dist/updates/gitops.js

@@ -0,0 +1,61 @@
+/**
+ * The git half of installing a plugin: which URLs may be cloned at all, and the one place `git` is spawned.
+ *
+ * The URL comes from a phone, so it is held to a short allowlist BEFORE it reaches argv: `https://`,
+ * `ssh://` and `git@host:path`. A leading `-` (an option), `file:` (a local path), `ext::` (runs a
+ * command) and every other scheme are refused in words. `git` is `execFile` (no shell), never prompts
+ * (`GIT_TERMINAL_PROMPT=0`) and has a timeout. Nothing here touches the plugin registry.
+ */
+import { execFile } from "node:child_process";
+import { compareVersions } from "../cli/selfupdate.js";
+const GIT_TIMEOUT_MS = 120_000;
+export const realGit = (args, cwd) => new Promise((resolve, reject) => {
+    execFile("git", ["-c", "protocol.ext.allow=never", "-c", "protocol.file.allow=never", ...args], {
+        cwd, timeout: GIT_TIMEOUT_MS, maxBuffer: 4 << 20,
+        env: { ...process.env, GIT_TERMINAL_PROMPT: "0", GIT_ASKPASS: "echo", LC_ALL: "C" },
+    }, (err, stdout, stderr) => {
+        if (!err)
+            return resolve(stdout);
+        const said = String(stderr || "").trim().split("\n").filter(Boolean).slice(-2).join(" ");
+        reject(new Error(err.killed ? `git took longer than ${GIT_TIMEOUT_MS / 1000} s and was stopped` : said || err.message));
+    });
+});
+const HTTPS = /^https:\/\/[A-Za-z0-9.-]+(:\d+)?\/[A-Za-z0-9._~\/+-]+$/;
+const SSH = /^ssh:\/\/([A-Za-z0-9._-]+@)?[A-Za-z0-9.-]+(:\d+)?\/[A-Za-z0-9._~\/+-]+$/;
+const SCP = /^[A-Za-z0-9._-]+@[A-Za-z0-9.-]+:[A-Za-z0-9._~\/+-]+$/;
+/** Null when `url` may be cloned; otherwise the refusal, in words. */
+export function urlProblem(url) {
+    if (typeof url !== "string" || !url.trim())
+        return "Name a repository from the list, or paste its https:// or ssh address.";
+    const u = url.trim();
+    if (u.startsWith("-"))
+        return "That address starts with a dash, which git would read as an option, so it was not used.";
+    if (/[\u0000- \u007f]/.test(u))
+        return "That address has spaces or control characters in it, so it was not used.";
+    if (/^file:/i.test(u) || u.startsWith("/") || u.startsWith(".") || u.startsWith("~"))
+        return "A local path or file: address is not accepted; only an https:// or ssh address can be installed from.";
+    if (/^ext::/i.test(u))
+        return "An ext:: address runs a command and is never accepted.";
+    if (HTTPS.test(u) || SSH.test(u) || SCP.test(u))
+        return null;
+    return "Only https://, ssh:// and git@host:path addresses can be installed from, and this one is none of them.";
+}
+/** A branch or tag name safe to hand to git as an argument (never an option, no odd characters). */
+export const refOk = (ref) => /^[A-Za-z0-9][A-Za-z0-9._\/+-]*$/.test(ref) && !ref.includes("..");
+/**
+ * What to install from a bare URL: the newest version-numbered tag, else the default branch
+ * (`ref: ""`, so the clone takes the remote's HEAD). Throws git's words when the remote cannot be read.
+ */
+export async function resolveUrl(git, url) {
+    const out = await git(["ls-remote", "--tags", "--refs", "--", url]);
+    const tags = out.split("\n").map((l) => l.split("\t")[1]?.replace(/^refs\/tags\//, "")).filter((t) => !!t && refOk(t));
+    let best = null;
+    for (const t of tags) {
+        if (!/^v?\d+\.\d+\.\d+/.test(t))
+            continue;
+        if (best === null || compareVersions(best, t) === -1)
+            best = t;
+    }
+    return best ? { kind: "tag", ref: best } : { kind: "branch", ref: "" };
+}
+//# sourceMappingURL=gitops.js.map

package/packages/host/dist/updates/gitops.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gitops.js","sourceRoot":"","sources":["../../src/updates/gitops.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAKvD,MAAM,cAAc,GAAG,OAAO,CAAC;AAE/B,MAAM,CAAC,MAAM,OAAO,GAAQ,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IACzE,QAAQ,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,0BAA0B,EAAE,IAAI,EAAE,2BAA2B,EAAE,GAAG,IAAI,CAAC,EAAE;QAC9F,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,CAAC,IAAI,EAAE;QAChD,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,mBAAmB,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE;KACpF,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE;QACzB,IAAI,CAAC,GAAG;YAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzF,MAAM,CAAC,IAAI,KAAK,CAAE,GAAoD,CAAC,MAAM,CAAC,CAAC,CAAC,wBAAwB,cAAc,GAAG,IAAI,oBAAoB,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;IAC5K,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,MAAM,KAAK,GAAG,wDAAwD,CAAC;AACvE,MAAM,GAAG,GAAG,yEAAyE,CAAC;AACtF,MAAM,GAAG,GAAG,sDAAsD,CAAC;AAEnE,sEAAsE;AACtE,MAAM,UAAU,UAAU,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE;QAAE,OAAO,wEAAwE,CAAC;IAC5H,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACrB,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,yFAAyF,CAAC;IACxH,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,0EAA0E,CAAC;IAClH,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,uGAAuG,CAAC;IACrM,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,wDAAwD,CAAC;IACvF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7D,OAAO,wGAAwG,CAAC;AAClH,CAAC;AAED,oGAAoG;AACpG,MAAM,CAAC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAIlH;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAQ,EAAE,GAAW;IACpD,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IACpE,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACpI,IAAI,IAAI,GAAkB,IAAI,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC;YAAE,IAAI,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;AACzE,CAAC"}

package/packages/host/dist/updates/installrecord.d.ts

@@ -0,0 +1,26 @@
+import type { InstalledPlugin } from "@waterplane/shared";
+export declare const INSTALL_RECORD: string;
+export interface InstallRecord {
+    /** The repo URL it was cloned from. */
+    url: string;
+    kind: "tag" | "branch";
+    ref: string;
+    commit?: string;
+    installedAt: number;
+}
+/** The record in `dir`, or null (absent, unreadable or malformed ⇒ the plugin is `local`). */
+export declare function readInstallRecord(dir: string): InstallRecord | null;
+export declare function writeInstallRecord(dir: string, rec: InstallRecord): void;
+/** An installed plugin plus the repo URL its record names (the join key when the manifest is gone). */
+export type InstalledWithUrl = InstalledPlugin & {
+    url?: string;
+};
+/** The registry's loaded external plugins as `InstalledPlugin`s. Built-ins are not installs. */
+export declare function installedFrom(entries: readonly {
+    dir: string;
+    builtin?: boolean;
+    manifest: {
+        id: string;
+        version?: string;
+    };
+}[]): InstalledWithUrl[];

package/packages/host/dist/updates/installrecord.js

@@ -0,0 +1,42 @@
+/**
+ * What marks a plugin as installed BY THE MANAGER: `<plugins dir>/<id>/.waterplane-install.json`.
+ * Without it a plugin is `local` — a dir the person put there by hand (or a `plugin-paths.json`
+ * dev checkout): listed, never updated by the manager.
+ */
+import { existsSync, readFileSync } from "node:fs";
+import { join } from "node:path";
+import { BRAND } from "@waterplane/shared";
+import { writeJsonAtomic } from "../jsonstore.js";
+export const INSTALL_RECORD = `.${BRAND.slug}-install.json`;
+/** The record in `dir`, or null (absent, unreadable or malformed ⇒ the plugin is `local`). */
+export function readInstallRecord(dir) {
+    try {
+        const p = join(dir, INSTALL_RECORD);
+        if (!existsSync(p))
+            return null;
+        const o = JSON.parse(readFileSync(p, "utf8"));
+        if (typeof o.url !== "string" || typeof o.ref !== "string" || (o.kind !== "tag" && o.kind !== "branch"))
+            return null;
+        return { url: o.url, kind: o.kind, ref: o.ref, commit: typeof o.commit === "string" ? o.commit : undefined, installedAt: typeof o.installedAt === "number" ? o.installedAt : 0 };
+    }
+    catch {
+        return null;
+    }
+}
+export function writeInstallRecord(dir, rec) {
+    writeJsonAtomic(join(dir, INSTALL_RECORD), rec);
+}
+/** The registry's loaded external plugins as `InstalledPlugin`s. Built-ins are not installs. */
+export function installedFrom(entries) {
+    const out = [];
+    for (const e of entries) {
+        if (e.builtin)
+            continue;
+        const rec = readInstallRecord(e.dir);
+        out.push(rec
+            ? { id: e.manifest.id, version: String(e.manifest.version ?? ""), source: "manager", ref: rec.ref, commit: rec.commit, dir: e.dir, url: rec.url }
+            : { id: e.manifest.id, version: String(e.manifest.version ?? ""), source: "local", dir: e.dir });
+    }
+    return out;
+}
+//# sourceMappingURL=installrecord.js.map

package/packages/host/dist/updates/installrecord.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installrecord.js","sourceRoot":"","sources":["../../src/updates/installrecord.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,MAAM,CAAC,MAAM,cAAc,GAAG,IAAI,KAAK,CAAC,IAAI,eAAe,CAAC;AAW5D,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAA4B,CAAC;QACzE,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;YAAE,OAAO,IAAI,CAAC;QACrH,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACnL,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,GAAkB;IAChE,eAAe,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,EAAE,GAAG,CAAC,CAAC;AAClD,CAAC;AAKD,gGAAgG;AAChG,MAAM,UAAU,aAAa,CAAC,OAAkG;IAC9H,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,OAAO;YAAE,SAAS;QACxB,MAAM,GAAG,GAAG,iBAAiB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,GAAG;YACV,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE;YACjJ,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACrG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/packages/host/dist/updates/remote.d.ts

@@ -0,0 +1,10 @@
+import type { CatalogLatest } from "@waterplane/shared";
+import type { Git } from "./gitops.js";
+export declare function remoteLatest(url: string, git?: Git): Promise<CatalogLatest>;
+/** True only for a github.com address under the `BRAND.githubOrg` org: the one test behind "from <org>". */
+export declare function isOrgUrl(url: string): boolean;
+/**
+ * `owner/name` for a github.com address. Anything else is `other: host/path`, so no non-GitHub
+ * address can ever read like `waterplane-dev/x`; "from the org" is judged by `isOrgUrl` / `fromOrg`.
+ */
+export declare function repoLabel(url: string): string;

package/packages/host/dist/updates/remote.js

@@ -0,0 +1,54 @@
+/**
+ * What is newest at a repo OUTSIDE the org catalogue (a plugin installed by URL): GitHub's release
+ * (else default-branch head) when the address is a github.com one, otherwise `git ls-remote` for the
+ * newest version tag (else HEAD). A read. Throws in words when the remote cannot be read.
+ */
+import { BRAND } from "@waterplane/shared";
+import { ghJson, GithubError } from "./github.js";
+import { realGit, resolveUrl } from "./gitops.js";
+const GH = /^https:\/\/github\.com\/([A-Za-z0-9._-]+)\/([A-Za-z0-9._-]+?)(?:\.git)?\/?$/;
+export async function remoteLatest(url, git = realGit) {
+    const m = GH.exec(url);
+    if (m) {
+        const full = `${m[1]}/${m[2]}`;
+        try {
+            const rel = await ghJson(`/repos/${full}/releases/latest`);
+            if (rel.tag_name)
+                return { kind: "tag", ref: rel.tag_name };
+        }
+        catch (e) {
+            if (!(e instanceof GithubError && e.status === 404))
+                throw e;
+        }
+        const repo = await ghJson(`/repos/${full}`);
+        if (!repo.default_branch)
+            throw new Error("the repo has no default branch");
+        const head = await ghJson(`/repos/${full}/commits/${encodeURIComponent(repo.default_branch)}`);
+        return { kind: "branch", ref: repo.default_branch, ...(head.sha ? { commit: head.sha } : {}) };
+    }
+    const r = await resolveUrl(git, url);
+    if (r.kind === "tag")
+        return r;
+    const out = await git(["ls-remote", "--symref", "--", url, "HEAD"]);
+    const ref = /^ref: refs\/heads\/(\S+)\tHEAD/m.exec(out)?.[1];
+    const commit = /^([0-9a-f]{40})\tHEAD$/m.exec(out)?.[1];
+    if (!ref)
+        throw new Error("the remote names no default branch");
+    return { kind: "branch", ref, ...(commit ? { commit } : {}) };
+}
+/** True only for a github.com address under the `BRAND.githubOrg` org: the one test behind "from <org>". */
+export function isOrgUrl(url) {
+    const m = GH.exec(url);
+    return !!m && m[1].toLowerCase() === BRAND.githubOrg.toLowerCase();
+}
+/**
+ * `owner/name` for a github.com address. Anything else is `other: host/path`, so no non-GitHub
+ * address can ever read like `waterplane-dev/x`; "from the org" is judged by `isOrgUrl` / `fromOrg`.
+ */
+export function repoLabel(url) {
+    const m = GH.exec(url);
+    if (m)
+        return `${m[1]}/${m[2]}`;
+    return "other: " + url.replace(/^(https|ssh):\/\//, "").replace(/^[^@/]+@/, "").replace(":", "/").replace(/\.git$/, "");
+}
+//# sourceMappingURL=remote.js.map

package/packages/host/dist/updates/remote.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote.js","sourceRoot":"","sources":["../../src/updates/remote.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAE3C,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGlD,MAAM,EAAE,GAAG,6EAA6E,CAAC;AAEzF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW,EAAE,MAAW,OAAO;IAChE,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC,EAAE,CAAC;QACN,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAwB,UAAU,IAAI,kBAAkB,CAAC,CAAC;YAClF,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,YAAY,WAAW,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC;gBAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC7E,MAAM,IAAI,GAAG,MAAM,MAAM,CAA8B,UAAU,IAAI,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,CAAC,cAAc;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5E,MAAM,IAAI,GAAG,MAAM,MAAM,CAAmB,UAAU,IAAI,YAAY,kBAAkB,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,CAAC;QACjH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACjG,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,IAAI,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC/B,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC;IACpE,MAAM,GAAG,GAAG,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAChE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,QAAQ,CAAC,GAAW;IAClC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC;AACtE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACvB,IAAI,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAChC,OAAO,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAC1H,CAAC"}

package/packages/host/dist/updates/restart.d.ts

@@ -0,0 +1,5 @@
+export type Restarter = (reason: string | null) => "auto" | "manual";
+/** Schedules the restart and returns "auto"; unsupervised does nothing and returns "manual". */
+export declare const restartSelf: Restarter;
+/** Whether `restartSelf` would restart (asked before promising the phone "auto"). */
+export declare const canRestartSelf: () => boolean;

package/packages/host/dist/updates/restart.js

@@ -0,0 +1,20 @@
+/**
+ * Restart this daemon the one way it is done in-process: SIGTERM after the reply is out, and ONLY
+ * when a supervisor (launchd/systemd) will start it again — a false yes leaves the host down.
+ * Shared by the code-folder choice (`routes/apihost.ts`) and the updates view.
+ */
+import { hostSupervisor } from "../rootchoice.js";
+import { setRestartNote } from "../restartnote.js";
+/** Schedules the restart and returns "auto"; unsupervised does nothing and returns "manual". */
+export const restartSelf = (reason) => {
+    const sup = hostSupervisor();
+    if (!sup)
+        return "manual";
+    if (reason)
+        setRestartNote(reason);
+    setTimeout(() => process.kill(process.pid, "SIGTERM"), 800).unref();
+    return "auto";
+};
+/** Whether `restartSelf` would restart (asked before promising the phone "auto"). */
+export const canRestartSelf = () => hostSupervisor() !== null;
+//# sourceMappingURL=restart.js.map

package/packages/host/dist/updates/restart.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"restart.js","sourceRoot":"","sources":["../../src/updates/restart.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAInD,gGAAgG;AAChG,MAAM,CAAC,MAAM,WAAW,GAAc,CAAC,MAAM,EAAE,EAAE;IAC/C,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,IAAI,MAAM;QAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,EAAE,CAAC;IACpE,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF,qFAAqF;AACrF,MAAM,CAAC,MAAM,cAAc,GAAG,GAAY,EAAE,CAAC,cAAc,EAAE,KAAK,IAAI,CAAC"}

package/packages/host/dist/updates/self.d.ts

@@ -0,0 +1,19 @@
+import type { SelfUpdateInfo } from "@waterplane/shared";
+import type { InstallMode } from "../cli/selfupdate.js";
+export interface SelfDeps {
+    mode: () => InstallMode;
+    current: () => string;
+    /** The newest published version; throws when it cannot be read. */
+    latest: () => Promise<string>;
+    /** Release notes for `version`, display-only; absent when there are none. Never throws. */
+    notes: (version: string) => Promise<string | undefined>;
+    installed: (dataDir: string) => string[];
+}
+export declare const realSelfDeps: SelfDeps;
+/** The install-shaped half: mode, current, button or command. Synchronous, offline. */
+export declare function selfBase(deps?: SelfDeps): SelfUpdateInfo;
+/** The newest release (and notes) when it is newer than what runs; `latest` is set only then. Throws on failure. */
+export declare function selfLatest(deps?: SelfDeps): Promise<{
+    latest: string;
+    notes?: string;
+}>;

package/packages/host/dist/updates/self.js

@@ -0,0 +1,51 @@
+/**
+ * What the updates view says about waterplane ITSELF: the install mode, the newest release and,
+ * for installs the signed updater cannot drive, the exact command and why there is no button.
+ *
+ * Only a tarball (install.sh) install gets `canApply`: that is the updater which verifies the
+ * publisher's signature and can roll back. npm and checkout installs are told their command.
+ * `latestRelease` reads `release.json` under that same signature check; a failure throws, so the
+ * caller keeps its previous reading. Nothing here changes the machine.
+ */
+import { BRAND } from "@waterplane/shared";
+import { compareVersions, currentMode, installedVersions, latestRelease, releaseSource, rollbackTarget } from "../cli/selfupdate.js";
+import { identity } from "../cli/index.js";
+import { ghJson } from "./github.js";
+async function githubNotes(version) {
+    try {
+        const rel = await ghJson(`/repos/${BRAND.githubOrg}/${BRAND.slug}/releases/latest`);
+        return rel.tag_name?.replace(/^v/, "") === version && rel.body ? rel.body : undefined;
+    }
+    catch {
+        return undefined; // notes are display-only: a miss is no notes, not a failed check
+    }
+}
+export const realSelfDeps = {
+    mode: currentMode,
+    current: () => identity().version,
+    latest: async () => (await latestRelease(releaseSource(null))).version,
+    notes: githubNotes,
+    installed: installedVersions,
+};
+/** The install-shaped half: mode, current, button or command. Synchronous, offline. */
+export function selfBase(deps = realSelfDeps) {
+    const mode = deps.mode();
+    const current = deps.current();
+    switch (mode.kind) {
+        case "tarball":
+            return { mode: "tarball", current, canApply: true, rollbackTo: rollbackTarget(deps.installed(mode.dataDir), mode.version) ?? undefined };
+        case "npm":
+            return { mode: "npm", current, canApply: false, command: `npm i -g ${BRAND.slug}@latest`, why: "This install came from npm, so npm updates it; the updater that checks the publisher's signature and can roll back only runs for the release tarball install." };
+        case "checkout":
+            return { mode: "checkout", current, canApply: false, command: "git pull && npm ci && npm run restart", why: "This is a git checkout, so git updates it; the updater that checks the publisher's signature and can roll back only runs for the release tarball install." };
+        default:
+            return { mode: "unknown", current, canApply: false, why: "This install is not one the updater recognises, so it cannot update it. Reinstall from the release to get updates." };
+    }
+}
+/** The newest release (and notes) when it is newer than what runs; `latest` is set only then. Throws on failure. */
+export async function selfLatest(deps = realSelfDeps) {
+    const latest = await deps.latest();
+    const cmp = compareVersions(deps.current(), latest);
+    return { latest, notes: cmp === -1 ? await deps.notes(latest) : undefined };
+}
+//# sourceMappingURL=self.js.map