zidane 5.5.0 → 5.5.2

package/dist/{turn-operations-CtgBlBHn.js → turn-operations-DtMApNGT.js}

@@ -1,20 +1,26 @@
-import { H as previewLine, R as fmtTokens, U as shortId, a as multiEdit, c as grep, d as resolveOldString, f as styleReplacementForVia, i as readFile$1, l as glob, n as createSpawnTool, o as listFiles, t as writeFile$1, u as edit, y as shell } from "./tools-D_icxa-V.js";
-import { s as errorMessage } from "./errors-CDwtPIMX.js";
-import { n as toolResultToText } from "./types-IcokUOyC.js";
-import { r as normalizeMcpServers } from "./mcp-CNUbvbsy.js";
-import { a as discoverSkills } from "./interpolate-BaaKaKzN.js";
-import { n as formatTokenUsage } from "./stats-DgOvY7wd.js";
-import { n as definePreset, t as composePresets } from "./presets-h6UWhghO.js";
-import { a as writeFileAtomic, i as anthropic, n as openai, r as cerebras, t as openrouter } from "./providers-G0VBZK9j.js";
+import { H as previewLine, R as fmtTokens, U as shortId, a as multiEdit, c as grep, d as resolveOldString, f as styleReplacementForVia, i as readFile$1, l as glob, n as createSpawnTool, o as listFiles, t as writeFile$1, u as edit, y as shell } from "./tools-BavL6n7q.js";
+import { s as errorMessage } from "./errors-C5VSakmT.js";
+import { n as toolResultToText } from "./types-C-9h2drI.js";
+import { r as normalizeMcpServers } from "./mcp-C8XUNC_R.js";
+import { a as discoverSkills } from "./interpolate-Cvjy8gpk.js";
+import { n as formatTokenUsage } from "./stats-Lc3zL3RM.js";
+import { n as definePreset, t as composePresets } from "./presets-C5E9hokO.js";
+import { a as writeFileAtomic, i as anthropic, n as openai, r as cerebras, t as openrouter } from "./providers-CsUyN_FJ.js";
+import { createRequire } from "node:module";
 import { dirname, isAbsolute, join, posix, relative, resolve, sep } from "node:path";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { spawn } from "node:child_process";
-import { existsSync, mkdirSync, readFileSync, statSync } from "node:fs";
+import { chmodSync, createReadStream, createWriteStream, existsSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { readdir, stat, writeFile } from "node:fs/promises";
 import { getModel, getModels } from "@mariozechner/pi-ai";
 import { anthropicOAuthProvider, openaiCodexOAuthProvider } from "@mariozechner/pi-ai/oauth";
+import { createHash } from "node:crypto";
+import { createGunzip } from "node:zlib";
 import { createContext, useCallback, useContext, useEffect, useMemo, useRef, useState } from "react";
 import { jsx } from "react/jsx-runtime";
+//#region \0rolldown/runtime.js
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+//#endregion
 //#region src/chat/agent-prompt.ts
 /**
 * Agent system-prompt fragments — composable doctrine for built-in profiles.
@@ -1426,6 +1432,801 @@ function shouldAutoCompact(input) {
 	};
 }
 //#endregion
+//#region src/chat/auto-update.ts
+const OPT_OUT_VARS = [
+	"ZIDANE_NO_UPDATE",
+	"NO_UPDATE_NOTIFIER",
+	"CI"
+];
+function isOptedOut(env = process.env) {
+	for (const key of OPT_OUT_VARS) {
+		const v = env[key];
+		if (v !== void 0 && v !== "" && v !== "0" && v.toLowerCase() !== "false") return true;
+	}
+	return false;
+}
+function parseSemver(input) {
+	const m = /^v?(\d+)\.(\d+)\.(\d+)(?:-([\w.-]+))?(?:\+[\w.-]+)?$/.exec(input.trim());
+	if (!m) return null;
+	return {
+		major: Number(m[1]),
+		minor: Number(m[2]),
+		patch: Number(m[3]),
+		prerelease: m[4] ? m[4].split(".") : []
+	};
+}
+/** Returns `-1 / 0 / 1`. Unparseable inputs sort as `0` (assume equal). */
+function compareSemver(a, b) {
+	const A = parseSemver(a);
+	const B = parseSemver(b);
+	if (!A || !B) return 0;
+	for (const k of [
+		"major",
+		"minor",
+		"patch"
+	]) if (A[k] !== B[k]) return A[k] < B[k] ? -1 : 1;
+	if (A.prerelease.length === 0 && B.prerelease.length > 0) return 1;
+	if (A.prerelease.length > 0 && B.prerelease.length === 0) return -1;
+	const len = Math.max(A.prerelease.length, B.prerelease.length);
+	for (let i = 0; i < len; i++) {
+		const ai = A.prerelease[i];
+		const bi = B.prerelease[i];
+		if (ai === void 0) return -1;
+		if (bi === void 0) return 1;
+		const an = /^\d+$/.test(ai) ? Number(ai) : null;
+		const bn = /^\d+$/.test(bi) ? Number(bi) : null;
+		if (an !== null && bn !== null) {
+			if (an !== bn) return an < bn ? -1 : 1;
+		} else if (an !== null) return -1;
+		else if (bn !== null) return 1;
+		else if (ai !== bi) return ai < bi ? -1 : 1;
+	}
+	return 0;
+}
+function cacheFilePath(cacheDir, packageName, channel) {
+	return resolve(cacheDir, `update-check-${`${packageName.replaceAll("/", "__")}@${channel}`}.json`);
+}
+function readCache(path) {
+	try {
+		const raw = readFileSync(path, "utf8");
+		const parsed = JSON.parse(raw);
+		if (typeof parsed.latest !== "string" || typeof parsed.checkedAt !== "number") return null;
+		return parsed;
+	} catch {
+		return null;
+	}
+}
+function writeCache(path, entry) {
+	try {
+		mkdirSync(dirname(path), { recursive: true });
+		writeFileSync(path, `${JSON.stringify(entry, null, 2)}\n`);
+	} catch {}
+}
+/** Strip a trailing slash so URL assembly is uniform. */
+function trimSlash(s) {
+	return s.endsWith("/") ? s.slice(0, -1) : s;
+}
+async function fetchLatestRelease(opts) {
+	const url = `${trimSlash(opts.registry)}/${encodeURIComponent(opts.packageName)}/${encodeURIComponent(opts.channel)}`;
+	const headers = {
+		"accept": "application/vnd.npm.install-v1+json, application/json",
+		"user-agent": "zidane-update-check/1"
+	};
+	if (opts.etag) headers["if-none-match"] = opts.etag;
+	const res = await opts.fetcher(url, {
+		headers,
+		signal: opts.signal,
+		redirect: "follow"
+	});
+	if (res.status === 304) throw new NotModifiedError();
+	if (!res.ok) throw new Error(`registry returned ${res.status}`);
+	const body = await res.json();
+	if (!body.version) throw new Error("registry payload missing `version`");
+	return {
+		latest: body.version,
+		etag: res.headers.get("etag")
+	};
+}
+var NotModifiedError = class extends Error {
+	constructor() {
+		super("not-modified");
+	}
+};
+/**
+* Resolve the latest available version of `packageName`, honoring an
+* on-disk TTL cache so the warm path costs zero network. Never throws —
+* registry failures degrade to `{ source: 'error', latest: null }`.
+*
+* Designed for boot-path usage: short timeout, swallows errors, opt-outs
+* for CI / restricted shells. Consumers driving the explicit `upgrade`
+* subcommand should set `force: true` to ignore env opt-outs.
+*/
+async function checkForUpdate(options) {
+	const channel = options.channel ?? "latest";
+	const now = options.now ?? Date.now;
+	const fetcher = options.fetcher ?? globalThis.fetch;
+	const ttl = options.cacheTtlMs ?? 1440 * 60 * 1e3;
+	const timeoutMs = options.timeoutMs ?? 3e3;
+	if (!options.force && isOptedOut()) return skipped(options.currentVersion, channel);
+	const cachePath = options.cacheDir ? cacheFilePath(options.cacheDir, options.packageName, channel) : null;
+	const cached = cachePath ? readCache(cachePath) : null;
+	if (cached && cached.packageName === options.packageName && cached.channel === channel) {
+		if (ttl > 0 && now() - cached.checkedAt < ttl) {
+			const hasUpdate = compareSemver(cached.latest, options.currentVersion) > 0;
+			return {
+				current: options.currentVersion,
+				latest: cached.latest,
+				hasUpdate,
+				source: "cached",
+				checkedAt: cached.checkedAt,
+				channel
+			};
+		}
+	}
+	if (typeof fetcher !== "function") {
+		if (cached) return {
+			current: options.currentVersion,
+			latest: cached.latest,
+			hasUpdate: compareSemver(cached.latest, options.currentVersion) > 0,
+			source: "cached",
+			checkedAt: cached.checkedAt,
+			channel
+		};
+		return skipped(options.currentVersion, channel);
+	}
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("timeout")), timeoutMs);
+	if (options.signal) if (options.signal.aborted) controller.abort(options.signal.reason);
+	else options.signal.addEventListener("abort", () => controller.abort(options.signal.reason), { once: true });
+	try {
+		const release = await fetchLatestRelease({
+			registry: options.registry ?? "https://registry.npmjs.org",
+			packageName: options.packageName,
+			channel,
+			etag: cached?.etag,
+			fetcher,
+			signal: controller.signal
+		});
+		const checkedAt = now();
+		if (cachePath) writeCache(cachePath, {
+			packageName: options.packageName,
+			channel,
+			latest: release.latest,
+			checkedAt,
+			...release.etag ? { etag: release.etag } : {}
+		});
+		return {
+			current: options.currentVersion,
+			latest: release.latest,
+			hasUpdate: compareSemver(release.latest, options.currentVersion) > 0,
+			source: "fresh",
+			checkedAt,
+			channel
+		};
+	} catch (err) {
+		if (err instanceof NotModifiedError && cached) {
+			const checkedAt = now();
+			if (cachePath) writeCache(cachePath, {
+				...cached,
+				checkedAt
+			});
+			return {
+				current: options.currentVersion,
+				latest: cached.latest,
+				hasUpdate: compareSemver(cached.latest, options.currentVersion) > 0,
+				source: "cached",
+				checkedAt,
+				channel
+			};
+		}
+		if (cached) return {
+			current: options.currentVersion,
+			latest: cached.latest,
+			hasUpdate: compareSemver(cached.latest, options.currentVersion) > 0,
+			source: "cached",
+			checkedAt: cached.checkedAt,
+			channel
+		};
+		return {
+			current: options.currentVersion,
+			latest: null,
+			hasUpdate: false,
+			source: "error",
+			error: err instanceof Error ? err.message : String(err),
+			checkedAt: null,
+			channel
+		};
+	} finally {
+		clearTimeout(timer);
+	}
+}
+function skipped(current, channel) {
+	return {
+		current,
+		latest: null,
+		hasUpdate: false,
+		source: "skipped",
+		checkedAt: null,
+		channel
+	};
+}
+function normalizePath(path) {
+	try {
+		return realpathSync(path);
+	} catch {
+		return path;
+	}
+}
+function detectPackageManager(opts = {}) {
+	const env = opts.env ?? process.env;
+	const home = opts.home ?? homedir();
+	opts.platform ?? process.platform;
+	const channel = opts.channel ?? "latest";
+	const packageName = opts.packageName ?? "zidane-tui";
+	const binaryPath = opts.binaryPath ?? process.execPath;
+	const resolvedBinary = normalizePath(binaryPath);
+	const userAgent = opts.userAgent ?? env.npm_config_user_agent;
+	const target = `${packageName}@${channel}`;
+	const containsSegment = (path, segment) => {
+		const tail = `${segment}${sep}`;
+		return path.includes(tail) || path.endsWith(segment);
+	};
+	const inPath = (segment) => containsSegment(resolvedBinary, segment) || containsSegment(binaryPath, segment);
+	const homeSeg = (rest) => `${home}${sep}${rest}`;
+	if (inPath(homeSeg(".volta"))) return {
+		id: "volta",
+		argv: [
+			"volta",
+			"install",
+			target
+		],
+		note: "Volta-managed install detected — refreshing via `volta install`."
+	};
+	if (inPath(homeSeg(".bun"))) return {
+		id: "bun",
+		argv: [
+			"bun",
+			"add",
+			"--global",
+			target
+		],
+		note: "Bun global install detected."
+	};
+	if (inPath(homeSeg(".local/share/pnpm")) || inPath(homeSeg("Library/pnpm")) || resolvedBinary.includes(`${sep}pnpm${sep}`)) return {
+		id: "pnpm",
+		argv: [
+			"pnpm",
+			"add",
+			"--global",
+			target
+		],
+		note: "pnpm global install detected."
+	};
+	if (inPath(homeSeg(".yarn"))) return {
+		id: "yarn",
+		argv: [
+			"yarn",
+			"global",
+			"add",
+			target
+		],
+		note: "Yarn classic global install detected."
+	};
+	if (userAgent) {
+		const ua = userAgent.toLowerCase();
+		if (ua.startsWith("pnpm/")) return {
+			id: "pnpm",
+			argv: [
+				"pnpm",
+				"add",
+				"--global",
+				target
+			]
+		};
+		if (ua.startsWith("yarn/")) return {
+			id: "yarn",
+			argv: [
+				"yarn",
+				"global",
+				"add",
+				target
+			]
+		};
+		if (ua.startsWith("bun/")) return {
+			id: "bun",
+			argv: [
+				"bun",
+				"add",
+				"--global",
+				target
+			]
+		};
+		if (ua.startsWith("npm/")) return {
+			id: "npm",
+			argv: [
+				"npm",
+				"install",
+				"--global",
+				target
+			]
+		};
+	}
+	if (env.VOLTA_HOME) return {
+		id: "volta",
+		argv: [
+			"volta",
+			"install",
+			target
+		],
+		note: "$VOLTA_HOME set — using `volta install`. If the install isn't Volta-managed, pass `--package-manager npm`."
+	};
+	if (env.BUN_INSTALL) return {
+		id: "bun",
+		argv: [
+			"bun",
+			"add",
+			"--global",
+			target
+		]
+	};
+	if (env.PNPM_HOME) return {
+		id: "pnpm",
+		argv: [
+			"pnpm",
+			"add",
+			"--global",
+			target
+		]
+	};
+	return {
+		id: "npm",
+		argv: [
+			"npm",
+			"install",
+			"--global",
+			target
+		]
+	};
+}
+/**
+* Re-install the package globally via the host's package manager. Resolves
+* with the spawned command's exit code, or rejects only when the caller's
+* `signal` aborts. PM failures surface as a non-zero `exitCode` — the
+* caller decides whether to retry or fall back to in-place.
+*/
+async function performSelfUpdate(options) {
+	const detect = options.detect ?? detectPackageManager;
+	const command = options.packageManager && options.packageManager !== "auto" ? overrideManager(options.packageManager, options.packageName, options.channel ?? "latest") : detect({
+		packageName: options.packageName,
+		channel: options.channel ?? "latest"
+	});
+	if (options.dryRun) return {
+		command,
+		exitCode: null
+	};
+	const useSpawn = options.spawn ?? spawn;
+	return await new Promise((resolveP) => {
+		const [bin, ...args] = command.argv;
+		const child = useSpawn(bin, args, {
+			stdio: options.stdout || options.stderr ? [
+				"ignore",
+				"pipe",
+				"pipe"
+			] : "inherit",
+			env: {
+				...process.env,
+				...options.env
+			}
+		});
+		if (options.stdout && child.stdout) child.stdout.pipe(options.stdout);
+		if (options.stderr && child.stderr) child.stderr.pipe(options.stderr);
+		child.on("error", (err) => {
+			resolveP({
+				command,
+				exitCode: null,
+				spawnError: err.message
+			});
+		});
+		child.on("exit", (code) => {
+			resolveP({
+				command,
+				exitCode: code
+			});
+		});
+		if (options.signal) {
+			const onAbort = () => child.kill();
+			if (options.signal.aborted) onAbort();
+			else options.signal.addEventListener("abort", onAbort, { once: true });
+		}
+	});
+}
+function overrideManager(id, packageName, channel) {
+	const target = `${packageName}@${channel}`;
+	switch (id) {
+		case "pnpm": return {
+			id,
+			argv: [
+				"pnpm",
+				"add",
+				"--global",
+				target
+			]
+		};
+		case "yarn": return {
+			id,
+			argv: [
+				"yarn",
+				"global",
+				"add",
+				target
+			]
+		};
+		case "bun": return {
+			id,
+			argv: [
+				"bun",
+				"add",
+				"--global",
+				target
+			]
+		};
+		case "volta": return {
+			id,
+			argv: [
+				"volta",
+				"install",
+				target
+			]
+		};
+		default: return {
+			id: "npm",
+			argv: [
+				"npm",
+				"install",
+				"--global",
+				target
+			]
+		};
+	}
+}
+/**
+* Replace the running binary with the latest tarball-shipped one. Works on
+* macOS + Linux (POSIX unlink-while-running); refuses on Windows. Returns
+* a result object instead of throwing — callers usually want to print
+* `result.reason` and fall back to a PM-driven update.
+*/
+async function performInPlaceSelfUpdate(options) {
+	if (process.platform === "win32") return {
+		status: "refused",
+		reason: "in-place update not supported on Windows; use `zidane upgrade` instead."
+	};
+	const binaryPath = options.binaryPath ?? process.execPath;
+	const resolved = normalizePath(binaryPath);
+	if (options.refuseUnderPrefixes?.some((p) => resolved.startsWith(p))) return {
+		status: "refused",
+		reason: `binary at ${resolved} sits under a managed prefix; use \`zidane upgrade\` to update via your package manager.`
+	};
+	if (resolved.includes(`${homedir()}${sep}.volta${sep}`)) return {
+		status: "refused",
+		reason: "Volta-managed install detected. Use `zidane upgrade` (runs `volta install`) instead."
+	};
+	const fetcher = options.fetcher ?? globalThis.fetch;
+	if (typeof fetcher !== "function") return {
+		status: "failed",
+		reason: "global fetch unavailable; rebuild with Node ≥ 18 or Bun."
+	};
+	const channel = options.channel ?? "latest";
+	const registry = options.registry ?? "https://registry.npmjs.org";
+	const timeoutMs = options.timeoutMs ?? 3e4;
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("timeout")), timeoutMs);
+	if (options.signal) if (options.signal.aborted) controller.abort(options.signal.reason);
+	else options.signal.addEventListener("abort", () => controller.abort(options.signal.reason), { once: true });
+	try {
+		const metaRes = await fetcher(`${trimSlash(registry)}/${encodeURIComponent(options.packageName)}/${encodeURIComponent(channel)}`, {
+			headers: {
+				"accept": "application/json",
+				"user-agent": "zidane-update-check/1"
+			},
+			signal: controller.signal
+		});
+		if (!metaRes.ok) return {
+			status: "failed",
+			reason: `registry returned ${metaRes.status} for ${options.packageName}@${channel}`
+		};
+		const meta = await metaRes.json();
+		if (!meta.version || !meta.dist?.tarball) return {
+			status: "failed",
+			reason: `registry payload missing version or tarball for ${options.packageName}@${channel}`
+		};
+		if (!meta.dist.integrity && !meta.dist.shasum) return {
+			status: "failed",
+			reason: `registry payload missing integrity / shasum for ${options.packageName}@${channel}; refusing to overwrite the binary.`
+		};
+		const targetDir = dirname(binaryPath);
+		let stagingDir;
+		try {
+			stagingDir = mkdtempSync(join(targetDir, ".zidane-update-"));
+		} catch {
+			stagingDir = mkdtempSync(join(tmpdir(), "zidane-update-"));
+		}
+		const tarballPath = join(stagingDir, "package.tgz");
+		try {
+			const tgzRes = await fetcher(meta.dist.tarball, {
+				headers: { "user-agent": "zidane-update-check/1" },
+				signal: controller.signal
+			});
+			if (!tgzRes.ok || !tgzRes.body) return {
+				status: "failed",
+				reason: `tarball download failed: ${tgzRes.status}`
+			};
+			const digests = await streamToFile(tgzRes.body, tarballPath);
+			const integrityCheck = verifyIntegrity(meta.dist, digests);
+			if (!integrityCheck.ok) return {
+				status: "failed",
+				reason: `integrity check failed: ${integrityCheck.reason}`
+			};
+			const tarballBinaryPath = options.tarballBinaryPath ?? `bin/${binaryNameFrom(binaryPath)}`;
+			const extractedPath = await extractEntryFromTarball(tarballPath, tarballBinaryPath, stagingDir);
+			if (!extractedPath) return {
+				status: "failed",
+				reason: `tarball did not contain ${tarballBinaryPath}`
+			};
+			if (options.dryRun) return {
+				status: "success",
+				installedVersion: meta.version,
+				binaryPath: extractedPath
+			};
+			chmodSync(extractedPath, 493);
+			const targetForSwap = binaryPath;
+			try {
+				renameSync(extractedPath, targetForSwap);
+			} catch (err) {
+				return {
+					status: "failed",
+					reason: `failed to write ${targetForSwap}: ${err instanceof Error ? err.message : String(err)}`
+				};
+			}
+			return {
+				status: "success",
+				installedVersion: meta.version,
+				binaryPath: targetForSwap
+			};
+		} finally {
+			try {
+				rmSync(stagingDir, {
+					recursive: true,
+					force: true
+				});
+			} catch {}
+		}
+	} catch (err) {
+		return {
+			status: "failed",
+			reason: err instanceof Error ? err.message : String(err)
+		};
+	} finally {
+		clearTimeout(timer);
+	}
+}
+function binaryNameFrom(path) {
+	const last = path.split(/[\\/]/).at(-1) ?? "";
+	return last.endsWith(".exe") ? last.slice(0, -4) : last;
+}
+/**
+* Stream `body` to `path` while computing integrity digests on the fly —
+* we never load the whole tarball into a Buffer just to hash it. Returns
+* SHA-1 (hex, for the legacy `dist.shasum`) and SHA-512 (base64, for SRI's
+* `sha512-<base64>`).
+*/
+async function streamToFile(body, path) {
+	const file = createWriteStream(path);
+	const sha1 = createHash("sha1");
+	const sha512 = createHash("sha512");
+	let size = 0;
+	const reader = body.getReader();
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			if (value && value.byteLength > 0) {
+				sha1.update(value);
+				sha512.update(value);
+				size += value.byteLength;
+				await new Promise((res, rej) => file.write(value, (err) => err ? rej(err) : res()));
+			}
+		}
+	} finally {
+		await new Promise((res) => file.end(() => res()));
+	}
+	return {
+		sha1: sha1.digest("hex"),
+		sha512Base64: sha512.digest("base64"),
+		size
+	};
+}
+/**
+* Validate the downloaded tarball's digest against the registry's
+* `dist.integrity` (SRI: `sha512-<base64>` / `sha384-…` / `sha256-…`) or
+* the legacy `dist.shasum` (hex SHA-1). Either must match — we don't
+* accept "neither provided" because that's what `performInPlaceSelfUpdate`
+* already short-circuited above.
+*/
+function verifyIntegrity(dist, digests) {
+	if (dist.integrity) {
+		const entries = dist.integrity.split(/\s+/).filter(Boolean);
+		for (const entry of entries) {
+			const m = /^(sha(?:256|384|512))-(.+)$/.exec(entry);
+			if (!m) continue;
+			const algo = m[1];
+			const expected = m[2];
+			if (algo === "sha512" && digests.sha512Base64 === expected) return { ok: true };
+			if (algo !== "sha512") return {
+				ok: false,
+				reason: `unsupported SRI algorithm \`${algo}\`. Re-run via your package manager.`
+			};
+		}
+		return {
+			ok: false,
+			reason: "SRI mismatch: tarball does not match the registry's `dist.integrity`."
+		};
+	}
+	if (dist.shasum) {
+		if (digests.sha1 === dist.shasum.toLowerCase()) return { ok: true };
+		return {
+			ok: false,
+			reason: "SHA-1 mismatch: tarball does not match the registry's `dist.shasum`."
+		};
+	}
+	return {
+		ok: false,
+		reason: "no integrity field shipped by the registry."
+	};
+}
+async function extractEntryFromTarball(tarballPath, entryRelPath, outDir) {
+	const matchSuffix = `/${entryRelPath}`;
+	const out = join(outDir, "binary.bin");
+	const chunks = [];
+	const gunzip = createGunzip();
+	const input = createReadStream(tarballPath);
+	await new Promise((res, rej) => {
+		gunzip.on("data", (c) => chunks.push(c));
+		gunzip.on("end", () => res());
+		gunzip.on("error", rej);
+		input.on("error", rej);
+		input.pipe(gunzip);
+	});
+	const tar = concatChunks(chunks);
+	let offset = 0;
+	while (offset + 512 <= tar.length) {
+		const header = tar.subarray(offset, offset + 512);
+		if (header.every((b) => b === 0)) break;
+		const name = readNulString(header, 0, 100);
+		const sizeOct = readNulString(header, 124, 12).trim();
+		const size = sizeOct === "" ? 0 : Number.parseInt(sizeOct, 8);
+		const dataStart = offset + 512;
+		const dataEnd = dataStart + size;
+		if (name && (name === entryRelPath || name.endsWith(matchSuffix))) {
+			writeFileSync(out, tar.subarray(dataStart, dataEnd));
+			return out;
+		}
+		offset = dataEnd + (512 - size % 512) % 512;
+	}
+	return null;
+}
+function readNulString(buf, start, len) {
+	const end = start + len;
+	let stop = end;
+	for (let i = start; i < end; i++) if (buf[i] === 0) {
+		stop = i;
+		break;
+	}
+	return new TextDecoder("utf8").decode(buf.subarray(start, stop));
+}
+function concatChunks(chunks) {
+	let total = 0;
+	for (const c of chunks) total += c.byteLength;
+	const out = new Uint8Array(total);
+	let offset = 0;
+	for (const c of chunks) {
+		out.set(c, offset);
+		offset += c.byteLength;
+	}
+	return out;
+}
+function resolvePlatformPackage(opts = {}) {
+	const platform = opts.platform ?? process.platform;
+	const arch = opts.arch ?? process.arch;
+	const libc = opts.libc ?? detectLibc();
+	const prefix = opts.prefix ?? "zidane-tui-";
+	if (platform === "darwin") {
+		if (arch === "arm64") return `${prefix}darwin-arm64`;
+		if (arch === "x64") return `${prefix}darwin-x64`;
+		return null;
+	}
+	if (platform === "linux") {
+		if (libc !== "glibc") return null;
+		if (arch === "arm64") return `${prefix}linux-arm64`;
+		if (arch === "x64") return `${prefix}linux-x64`;
+		return null;
+	}
+	return null;
+}
+/** Mirrors `tui/bin/zidane.mjs#detectLibc`. */
+function detectLibc() {
+	if (process.platform !== "linux") return "glibc";
+	try {
+		const { execSync } = __require("node:child_process");
+		return execSync("ldd --version 2>&1", {
+			encoding: "utf8",
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		}).toLowerCase().includes("musl") ? "musl" : "glibc";
+	} catch {
+		return "musl";
+	}
+}
+//#endregion
+//#region src/chat/auto-update-hook.ts
+/**
+* Returns the current update status, refreshed once per mount (subject to
+* the on-disk TTL). `null` while the first check is in flight; the
+* `source: 'cached' | 'fresh'` distinction lets the caller decide whether
+* to show a discreet chip vs a more prominent banner.
+*
+* The hook owns its own AbortController so an unmount cancels any in-flight
+* registry request cleanly.
+*/
+function useUpdateCheck(options) {
+	const [status, setStatus] = useState(null);
+	const optsRef = useRef(options);
+	optsRef.current = options;
+	useEffect(() => {
+		if (!options.enabled || !options.currentVersion) return;
+		const controller = new AbortController();
+		const timer = setTimeout(() => {
+			checkForUpdate({
+				packageName: optsRef.current.packageName,
+				currentVersion: optsRef.current.currentVersion,
+				cacheDir: optsRef.current.cacheDir,
+				registry: optsRef.current.registry,
+				channel: optsRef.current.channel,
+				cacheTtlMs: optsRef.current.cacheTtlMs,
+				signal: controller.signal,
+				now: optsRef.current.now,
+				fetcher: optsRef.current.fetcher
+			}).then((s) => {
+				if (!controller.signal.aborted) setStatus(s);
+			});
+		}, options.delayMs ?? 1500);
+		return () => {
+			clearTimeout(timer);
+			controller.abort();
+		};
+	}, [
+		options.enabled,
+		options.packageName,
+		options.currentVersion
+	]);
+	return status;
+}
+function buildUpdateHint(status, options) {
+	if (!status?.hasUpdate || !status.latest) return null;
+	const label = options.showVersion === false ? "update" : `v${stripVPrefix(status.latest)}`;
+	return {
+		key: options.glyph ?? "↑",
+		keyColor: options.color,
+		label,
+		labelColor: options.color
+	};
+}
+function stripVPrefix(v) {
+	return v.startsWith("v") ? v.slice(1) : v;
+}
+//#endregion
 //#region src/chat/boot-profiler.ts
 const enabled = !!process.env.ZIDANE_BOOT_PROFILE;
 /**
@@ -3992,7 +4793,8 @@ function resolveConfig(options) {
 		initialSettings: migrateLegacySettings(initialState.settings ?? {}),
 		resumeProvider,
 		initialPicked,
-		keybindings
+		keybindings,
+		autoUpdate: options.autoUpdate ?? null
 	};
 }
 /**
@@ -5091,7 +5893,8 @@ const DEFAULT_SETTINGS = {
 	allowInteraction: true,
 	smoothStreaming: true,
 	showTodoIndicator: true,
-	showThrobber: false
+	showThrobber: false,
+	checkForUpdates: true
 };
 /**
 * Hard-clamp a `targetFps` value to a safe range before handing it to
@@ -5216,6 +6019,11 @@ const SETTINGS_TOGGLES = [
 		key: "showThrobber",
 		label: "Streaming throbber",
 		description: "animated gradient glyphs at the transcript tail while the assistant is working"
+	},
+	{
+		key: "checkForUpdates",
+		label: "Check for updates",
+		description: "quietly check npm once a day; footer chip surfaces newer releases. `zidane upgrade` always works regardless."
 	}
 ];
 const SETTINGS_CHOICES = [
@@ -8345,6 +9153,6 @@ function countNeighbors(turnIds, turnId) {
 	};
 }
 //#endregion
-export { useMcpAuthDispatch as $, tryOpenBrowser as $n, PLAN_MODE_DOCTRINE_NO_PROMPTS as $r, loadState as $t, getSafelist as A, DEFAULT_KEYBINDINGS as An, resolveAgentId as Ar, resolveChipColor as At, supportsOAuth as B, SKILLS_TRIGGER as Bn, isTodoTool as Br, useDiscoveryOptional as Bt, resolveSessionExportTarget as C, mergeApprovalAndBodyOutcomes as Cn, piIdOf as Cr, SETTINGS_CHOICES as Ct, useSafeModeQueue as D, stripEditOutcomesAnnotation as Dn, DEFAULT_PERSIST_EXCLUDE_TOOLS as Dr, useSettings as Dt, useSafeModeActions as E, rewriteMultiEditHeader as En, DEFAULT_AGENT_ID as Er, clampFps as Et, suggestSafelistEntry as F, matchesBinding as Fn, TODO_STATUS_GLYPHS as Fr, CATPPUCCIN_MACCHIATO as Ft, defaultMcpsConfigPaths as G, uniqueFilesFromReferences as Gn, useActiveTodos as Gr, createStateStore as Gt, filterModelCatalog as H, uniqueSkillNamesFromReferences as Hn, pruneTodosByRun as Hr, useConfig as Ht, writeProjects as I, mergeKeybindings as In, TODO_WRITE_COUNTS_METADATA_KEY as Ir, CATPPUCCIN_MOCHA as It, projectUserPaths as J, findActiveTrigger as Jn, DOING_TASKS_DOCTRINE as Jr, isEditErrorResult as Jt, discoverProjectMcps as K, applyInsert as Kn, ACTIONS_WITH_CARE_DOCTRINE as Kr, deriveSessionTitle as Kt, splitPromptSegments as L, parseBindingSpec as Ln, createTodoTools as Lr, createDiscoverySlot as Lt, matchesSafelistEntry as M, KEYBINDING_DEF_BY_ACTION as Mn, TODOREAD_TOOL as Mr, VAPORWAVE_THEME as Mt, projectsFilePath as N, ensureKeybindingsFile as Nn, TODOS_METADATA_KEY as Nr, CATPPUCCIN_FRAPPE as Nt, IMPLICITLY_SAFE_TOOLS as O, summarizeOutcomes as On, PLAN_AGENT as Or, BUILTIN_THEMES as Ot, readProjects as P, keybindingsPath as Pn, TODOWRITE_TOOL as Pr, CATPPUCCIN_LATTE as Pt, McpAuthProvider as Q, buildLinearRamp as Qn, PLAN_MODE_DOCTRINE as Qr, listSessionMeta as Qt, formatPathForCwd as R, readKeybindings as Rn, getArchivedTodosForRun as Rr, DiscoveryProvider as Rt, renderSession as S, maskToOutcomeKinds as Sn, openrouterDescriptor as Sr, DEFAULT_SETTINGS as St, SafeModeProvider as T, resolveApprovalForPayload as Tn, BUILTIN_AGENTS as Tr, SettingsProvider as Tt, indexOfEntry as U, FILES_TRIGGER as Un, selectActiveTodos as Ur, resolveConfig as Ut, buildModelCatalog as V, createSkillsCompletionProvider as Vn, pickActiveRunId as Vr, ConfigProvider as Vt, buildMcpServers as W, createFilesCompletionProvider as Wn, setTodosForRun as Wr, EDIT_TOOL_NAMES as Wt, mcpCredentialsPath as X, useCompletion as Xn, INTERACTION_GUIDANCE as Xr, isVisible as Xt, createFileMcpCredentialStore as Y, mergeReferences as Yn, IDENTITY_PREFIX as Yr, isTurnHighlighted as Yt, patchMcpCredential as Z, blendHsl as Zn, INTERACTION_GUIDANCE_NO_PROMPTS as Zr, lastContextSizeFromTurns as Zt, turnContextSize as _, previewEditPayload as _n, getContextWindow as _r, truncateTrailing as _t, computeTurnAnchors as a, titleFromTurns as an, credentialsPath as ar, InteractionsProvider as at, defaultSkillScanPaths as b, tokenize as bn, modelsForDescriptor as br, listProjectFiles as bt, formatToolCall as c, turnSelectionOwnership as cn, removeProviderCredential as cr, createInteractionTools as ct, useSelectStyle as d, buildContextualDiff as dn, BUILTIN_PROVIDERS as dr, pendingInteractionsFromTurns as dt, SUBAGENT_GUIDANCE as ei, marginTopFor as en, bootProfileEnabled as er, useMcpAuthState as et, useSurfaces as f, buildUnifiedDiff as fn, OUTPUT_RESERVE_TOKENS as fr, serializeInteractionResponse as ft, finalizeStreamingMarkdownForOwner as g, filetypeFromPath as gn, effectiveContextWindow as gr, hintsLength as gt, finalizeStreamingMarkdown as h, extractEditPayload as hn, credKeyOf as hr, clipHintsToWidth as ht, turnAsText as i, envSection as ii, sumRunCosts as in, applyApiKeyEnv as ir, ASK_USER_TOOL as it, isOnSafelist as j, KEYBINDING_DEFS as jn, singleAgentRegistry as jr, resolveTheme as jt, addToSafelist as k, findGitRoot$1 as kn, accentColor as kr, DEFAULT_THEME as kt, ThemeProvider as l, updateToolEventOutcomes as ln, setProviderCredential as lr, isInteractionTool as lt, useTheme as m, computeLineDiff as mn, cerebrasDescriptor as mr, useInteractionsQueue as mt, deleteTurnSafely as n, buildBuildSystem as ni, selectableTurnIds as nn, shouldAutoCompact as nr, reduceMcpAuth as nt, TOOL_DISPLAY as o, toolCallPreview as on, readCredentials as or, PRESENT_PLAN_TOOL as ot, useSyntaxStyles as p, computeInlineDiff as pn, anthropicDescriptor as pr, useInteractionsActions as pt, parseMcpsFile as q, collectReferences as qn, COMMUNICATION_DOCTRINE as qr, eventsFromTurns as qt, truncateTurnsAt as r, buildPlanSystem as ri, stripSpawnTokensLine as rn, detectAuth as rr, splitMarkdownCodeBlocks as rt, displayNameFor as s, toolResultText as sn, readProviderCredential as sr, buildResumedToolResultsTurn as st, countNeighbors as t, TOKEN_DISCIPLINE_DOCTRINE as ti, saveState as tn, bootTick as tr, getMcpAuthStatus as tt, useColors as u, applyEditPayload as un, writeCredentials as ur, makeRequestInteraction as ut, useStreamBuffer as v, splitLines as vn, getModelInfo as vr, cleanTitle as vt, writeSessionExport as w, parseEditOutcomesFromResult as wn, BUILD_AGENT as wr, SETTINGS_TOGGLES as wt, discoverProjectSkills as x, buildEditOutcomesAnnotation as xn, openaiDescriptor as xr, useEnabledToggleSet as xt, buildSkillsConfig as y, summarizeEditPayload as yn, modelSupportsReasoning as yr, generateSessionTitle as yt, runOAuthLogin as z, stripJsonComments as zn, getTodosForRun as zr, useDiscovery as zt };
+export { useMcpAuthDispatch as $, tryOpenBrowser as $n, selectActiveTodos as $r, loadState as $t, getSafelist as A, DEFAULT_KEYBINDINGS as An, modelsForDescriptor as Ar, resolveChipColor as At, supportsOAuth as B, SKILLS_TRIGGER as Bn, resolveAgentId as Br, useDiscoveryOptional as Bt, resolveSessionExportTarget as C, mergeApprovalAndBodyOutcomes as Cn, anthropicDescriptor as Cr, SETTINGS_CHOICES as Ct, useSafeModeQueue as D, stripEditOutcomesAnnotation as Dn, getContextWindow as Dr, useSettings as Dt, useSafeModeActions as E, rewriteMultiEditHeader as En, effectiveContextWindow as Er, clampFps as Et, suggestSafelistEntry as F, matchesBinding as Fn, BUILTIN_AGENTS as Fr, CATPPUCCIN_MACCHIATO as Ft, defaultMcpsConfigPaths as G, uniqueFilesFromReferences as Gn, TODO_STATUS_GLYPHS as Gr, createStateStore as Gt, filterModelCatalog as H, uniqueSkillNamesFromReferences as Hn, TODOREAD_TOOL as Hr, useConfig as Ht, writeProjects as I, mergeKeybindings as In, DEFAULT_AGENT_ID as Ir, CATPPUCCIN_MOCHA as It, projectUserPaths as J, findActiveTrigger as Jn, getArchivedTodosForRun as Jr, isEditErrorResult as Jt, discoverProjectMcps as K, applyInsert as Kn, TODO_WRITE_COUNTS_METADATA_KEY as Kr, deriveSessionTitle as Kt, splitPromptSegments as L, parseBindingSpec as Ln, DEFAULT_PERSIST_EXCLUDE_TOOLS as Lr, createDiscoverySlot as Lt, matchesSafelistEntry as M, KEYBINDING_DEF_BY_ACTION as Mn, openrouterDescriptor as Mr, VAPORWAVE_THEME as Mt, projectsFilePath as N, ensureKeybindingsFile as Nn, piIdOf as Nr, CATPPUCCIN_FRAPPE as Nt, IMPLICITLY_SAFE_TOOLS as O, summarizeOutcomes as On, getModelInfo as Or, BUILTIN_THEMES as Ot, readProjects as P, keybindingsPath as Pn, BUILD_AGENT as Pr, CATPPUCCIN_LATTE as Pt, McpAuthProvider as Q, buildLinearRamp as Qn, pruneTodosByRun as Qr, listSessionMeta as Qt, formatPathForCwd as R, readKeybindings as Rn, PLAN_AGENT as Rr, DiscoveryProvider as Rt, renderSession as S, maskToOutcomeKinds as Sn, OUTPUT_RESERVE_TOKENS as Sr, DEFAULT_SETTINGS as St, SafeModeProvider as T, resolveApprovalForPayload as Tn, credKeyOf as Tr, SettingsProvider as Tt, indexOfEntry as U, FILES_TRIGGER as Un, TODOS_METADATA_KEY as Ur, resolveConfig as Ut, buildModelCatalog as V, createSkillsCompletionProvider as Vn, singleAgentRegistry as Vr, ConfigProvider as Vt, buildMcpServers as W, createFilesCompletionProvider as Wn, TODOWRITE_TOOL as Wr, EDIT_TOOL_NAMES as Wt, mcpCredentialsPath as X, useCompletion as Xn, isTodoTool as Xr, isVisible as Xt, createFileMcpCredentialStore as Y, mergeReferences as Yn, getTodosForRun as Yr, isTurnHighlighted as Yt, patchMcpCredential as Z, blendHsl as Zn, pickActiveRunId as Zr, lastContextSizeFromTurns as Zt, turnContextSize as _, previewEditPayload as _n, readProviderCredential as _r, truncateTrailing as _t, computeTurnAnchors as a, IDENTITY_PREFIX as ai, titleFromTurns as an, compareSemver as ar, InteractionsProvider as at, defaultSkillScanPaths as b, tokenize as bn, writeCredentials as br, listProjectFiles as bt, formatToolCall as c, PLAN_MODE_DOCTRINE as ci, turnSelectionOwnership as cn, parseSemver as cr, createInteractionTools as ct, useSelectStyle as d, TOKEN_DISCIPLINE_DOCTRINE as di, buildContextualDiff as dn, resolvePlatformPackage as dr, pendingInteractionsFromTurns as dt, setTodosForRun as ei, marginTopFor as en, bootProfileEnabled as er, useMcpAuthState as et, useSurfaces as f, buildBuildSystem as fi, buildUnifiedDiff as fn, shouldAutoCompact as fr, serializeInteractionResponse as ft, finalizeStreamingMarkdownForOwner as g, filetypeFromPath as gn, readCredentials as gr, hintsLength as gt, finalizeStreamingMarkdown as h, extractEditPayload as hn, credentialsPath as hr, clipHintsToWidth as ht, turnAsText as i, DOING_TASKS_DOCTRINE as ii, sumRunCosts as in, checkForUpdate as ir, ASK_USER_TOOL as it, isOnSafelist as j, KEYBINDING_DEFS as jn, openaiDescriptor as jr, resolveTheme as jt, addToSafelist as k, findGitRoot$1 as kn, modelSupportsReasoning as kr, DEFAULT_THEME as kt, ThemeProvider as l, PLAN_MODE_DOCTRINE_NO_PROMPTS as li, updateToolEventOutcomes as ln, performInPlaceSelfUpdate as lr, isInteractionTool as lt, useTheme as m, envSection as mi, computeLineDiff as mn, applyApiKeyEnv as mr, useInteractionsQueue as mt, deleteTurnSafely as n, ACTIONS_WITH_CARE_DOCTRINE as ni, selectableTurnIds as nn, buildUpdateHint as nr, reduceMcpAuth as nt, TOOL_DISPLAY as o, INTERACTION_GUIDANCE as oi, toolCallPreview as on, detectLibc as or, PRESENT_PLAN_TOOL as ot, useSyntaxStyles as p, buildPlanSystem as pi, computeInlineDiff as pn, detectAuth as pr, useInteractionsActions as pt, parseMcpsFile as q, collectReferences as qn, createTodoTools as qr, eventsFromTurns as qt, truncateTurnsAt as r, COMMUNICATION_DOCTRINE as ri, stripSpawnTokensLine as rn, useUpdateCheck as rr, splitMarkdownCodeBlocks as rt, displayNameFor as s, INTERACTION_GUIDANCE_NO_PROMPTS as si, toolResultText as sn, detectPackageManager as sr, buildResumedToolResultsTurn as st, countNeighbors as t, useActiveTodos as ti, saveState as tn, bootTick as tr, getMcpAuthStatus as tt, useColors as u, SUBAGENT_GUIDANCE as ui, applyEditPayload as un, performSelfUpdate as ur, makeRequestInteraction as ut, useStreamBuffer as v, splitLines as vn, removeProviderCredential as vr, cleanTitle as vt, writeSessionExport as w, parseEditOutcomesFromResult as wn, cerebrasDescriptor as wr, SETTINGS_TOGGLES as wt, discoverProjectSkills as x, buildEditOutcomesAnnotation as xn, BUILTIN_PROVIDERS as xr, useEnabledToggleSet as xt, buildSkillsConfig as y, summarizeEditPayload as yn, setProviderCredential as yr, generateSessionTitle as yt, runOAuthLogin as z, stripJsonComments as zn, accentColor as zr, useDiscovery as zt };
 
-//# sourceMappingURL=turn-operations-CtgBlBHn.js.map
+//# sourceMappingURL=turn-operations-DtMApNGT.js.map