Distillation

🔴 (05:09) User requires installation-method detection to always check Homebrew first because stored install information may be stale; the cheap, authoritative realpath check must override stale records, such as when a user switched from a previously recorded curl install to Homebrew.
🔴 (05:09) User requires binary visibility verification to fail when the downloaded file never becomes visible or stays empty.
🟡 (05:09) Diff documentation defined installation-method detection priority as: 1. Homebrew realpath check, overriding stale stored info; 2. stored install info in DB; 3. legacy detection in the order curl paths → subprocess calls → node_modules path; 4. automatically save the detected method for future runs.
🟡 (05:09) Diff changed fetchTagPage() and listTags() to accept source: UpgradeSource = PRIMARY_UPGRADE_SOURCE; the GHCR tags endpoint now uses ${GHCR_REGISTRY}/v2/${source.ghcrRepo}/tags/list?n=${TAGS_PAGE_SIZE}, preserving one selected repository as source affinity.
🟡 (05:09) Diff hardened GHCR tag-list parsing with parseUpgradeJson(response, signal, "GHCR tag list returned invalid metadata"); non-object/null metadata and non-string tags arrays throw UpgradeError("network_error", "GHCR tag list returned invalid metadata"), while an absent tags property returns [].
🟡 (05:09) Diff defined VERIFY_MAX_ATTEMPTS = 6 for waitForBinaryVisible; six probes with five intervening sleeps provide an approximately 3.1-second total wall-clock budget before an execution_failed error if the binary never becomes visible or remains empty.

Distillation

Observations