- Refuse non-interactive update without --yes (Devin Review P1):
bail with a clear error instead of silently replacing binaries when
stdin is not a TTY. Matches gh / rustup / apt-get posture.
- Persist 24h cooldown on refresh failures (cubic P2): the hidden
`__refresh-update-cache` subprocess now writes a fresh
`checked_at_unix` even when the GitHub API call fails (keeping the
previously-known tag), so a transient outage doesn't spam refreshes.
- Make the checksum-mismatch test platform-correct (cubic P2): compare
byte-for-byte against the snapshotted original binary instead of
ELF/shebang magic, which excluded macOS arm64 (Mach-O).
- Bump cli-reference top-level family count 17 -> 18 (cubic P3).
- Add a new integration test asserting non-interactive bail-out.
Co-Authored-By: Ragnor Comerford <ragnor.comerford@gmail.com>
- New `omnigraph update` subcommand: GitHub Releases API → archive download
→ SHA256 verification → atomic POSIX rename of both binaries.
- Detects Homebrew installs and short-circuits with a hint to run
`brew upgrade ModernRelay/tap/omnigraph`.
- Channels: `--channel stable` (default) or `edge`. `--check` for
check-only, `--yes` to skip the confirmation prompt.
- Best-effort startup version check (24h cached at
`~/.cache/omnigraph/update-check.json`) with one-line stderr notice.
Cache is refreshed via a detached `__refresh-update-cache` subprocess so
the foreground command never blocks on the network. Suppression: CI,
`OMNIGRAPH_NO_UPDATE_CHECK=1`, non-TTY stdout, and `version`/`update`
subcommands.
- Integration tests use an in-process raw-TCP HTTP fixture (no extra
dev-deps) and override `OMNIGRAPH_UPDATE_API_BASE` /
`OMNIGRAPH_UPDATE_DOWNLOAD_BASE` to keep the suite hermetic.
- Docs: `install.md`, `cli.md`, `cli-reference.md` updated.
Co-Authored-By: Ragnor Comerford <ragnor.comerford@gmail.com>
