feat: detect upstream toolchain updates

docs/src/design/spec.md

@@ -556,9 +556,11 @@ The active view is a scoping and discovery mechanism, not a security boundary.
 **Alias conflicts are scoped to the view.** In v1, `Channel::get_aliases` would hard-error on any duplicate alias across the whole channel. Under a superset that accretes components from multiple projects, two components that no project ever activates together could collide and break *every* command. Therefore: a conflict *within the active view* is an error; a conflict that exists only in
 the superset is a warning, and the component in the active view wins.
 
-### 8.6 Partial status is derived
+### 8.6 Update status is derived
 
-Local state does not record a "partial" flag. When the upstream manifest is available, an installation is displayed as partial if its installed component set is a proper subset of the channel's complete set. When upstream is unavailable, partial status is not displayed.
+Local state does not record an "update available" flag. When the upstream manifest is available, an installation is displayed as having an update if the manifest's content changed for it.
+
+The comparison is manifest content alone. The pins install records on an authority — a branch's latest commit, a path's modification time — exist only locally and move on their own, so they are excluded: drift behind a pin is reconciled by `update` itself, which is what pinning is for, and a listing performs no source or network I/O beyond the manifest fetch.
 
 Components with no physical output (`command` with zero artifacts) count as installed for membership purposes and are exempt from physical verification (§9.6).
 
@@ -569,7 +571,7 @@ upstream is unavailable the annotation is omitted entirely rather than derived l
 guess would be exactly the derivation networks exist to eliminate, and a stale one would tell a user
 they are on mainnet when they are not. The other markers are unchanged: `(needs reinstallation)` is
 derived from local state alone - a migrated record with no publication - and is always shown, while
-`(partially installed)` and `(unavailable upstream)` need upstream and are omitted with it.
+`(update available)` and `(unavailable upstream)` need upstream and are omitted with it.
 
 ---
 

src/commands/list.rs

@@ -1,6 +1,6 @@
 use colored::Colorize;
 
-use crate::{config::Config, state::LocalState};
+use crate::{channel::UpstreamMatch, config::Config, state::LocalState};
 
 /// List all the available [[Channels]] presents in the upstream manifest.
 pub fn list(config: &Config, state: &LocalState) -> anyhow::Result<()> {
@@ -11,15 +11,34 @@ pub fn list(config: &Config, state: &LocalState) -> anyhow::Result<()> {
         .map(|channel| {
             let channel_name = &channel.name;
 
-            // Partial status is *derived*, never recorded (spec section 8.6): an installation is
-            // partial exactly when it holds fewer components than the channel offers. A stored
-            // flag would be a second answer to a question the component set already answers, and
-            // the two would drift.
+            // Update status is *derived*, never recorded (spec section 8.6): an installation has
+            // an update exactly when re-resolving its recorded intent against upstream would
+            // change it. A stored flag would be a second answer to a question the manifest and
+            // the component set already answer, and the two would drift.
             let installed_indicator = match state.get(&channel.name) {
-                Some(installation) if installation.as_channel().is_partially_installed(channel) => {
-                    format!(" {}", "(partially installed)".yellow())
+                Some(installation)
+                    if super::update::needs_update(config, installation, channel) =>
+                {
+                    format!(" {}", "(update available)".yellow())
                 },
                 Some(_) => format!(" {}", "(installed)".green()),
+                // A channel that supersedes an installed one (spec section 11.4): updating the
+                // predecessor migrates to it. The counterpart lookup is the updater's, so a
+                // predecessor still published upstream is not shown as migrating away.
+                None if channel
+                    .migrates_from
+                    .as_ref()
+                    .and_then(|old| state.get(old))
+                    .is_some_and(|predecessor| {
+                        matches!(
+                            predecessor.as_channel().upstream_counterpart_raw(config),
+                            Some((successor, UpstreamMatch::Migrated { .. }))
+                                if successor.name == channel.name
+                        )
+                    }) =>
+                {
+                    format!(" {}", "(update available)".yellow())
+                },
                 None => String::new(),
             };
 

src/commands/show.rs

@@ -3,12 +3,24 @@ use colored::Colorize;
 
 use super::Flags;
 use crate::{
+    channel::UpstreamMatch,
     config::Config,
     report,
     state::LocalState,
     toolchain::{Toolchain, ToolchainJustification},
 };
 
+/// Appends a status marker to a listing row: yellow as one span when color is on, plain otherwise.
+fn push_marker(line: &mut String, text: &str, use_color: bool) {
+    use core::fmt::Write;
+
+    if use_color {
+        write!(line, " {}", text.yellow()).unwrap();
+    } else {
+        write!(line, " {text}").unwrap();
+    }
+}
+
 #[derive(Debug, Subcommand)]
 pub enum ShowCommand {
     /// Show the active toolchain.
@@ -65,8 +77,8 @@ impl ShowCommand {
             Self::List { .. } => {
                 // Installed toolchains are recorded locally, so this works with no network at all.
                 // Upstream only adds *markers* -- which networks name a channel, which
-                // installations are partial or no longer published -- so when it is unavailable
-                // they are simply omitted rather than guessed at.
+                // installations have updates or are no longer published -- so when it is
+                // unavailable they are simply omitted rather than guessed at.
                 let upstream = config.upstream_manifest().ok();
                 // The upstream lookup may have emitted a report to stderr, so restore stdout's
                 // color policy immediately before rendering the result.
@@ -112,17 +124,12 @@ impl ShowCommand {
                                 if linked != name {
                                     continue;
                                 }
-                                if let Some(marker) = crate::networks::drift(
+                                if let Some(notice) = crate::networks::drift(
                                     network,
                                     linked,
                                     manifest.network_version(network),
                                 ) {
-                                    if use_color {
-                                        write!(&mut line, " {}", marker.yellow()).unwrap();
-                                    } else {
-                                        line.push(' ');
-                                        line.push_str(&marker);
-                                    }
+                                    push_marker(&mut line, &notice, use_color);
                                 }
                             }
                         }
@@ -132,37 +139,46 @@ impl ShowCommand {
                         // point: the user's toolchain still works, but only after it is installed
                         // properly, and they should not have to infer that from a failure.
                         if !installation.is_managed() {
-                            if use_color {
-                                write!(&mut line, " {}", "(needs reinstallation)".yellow())
-                                    .unwrap();
-                            } else {
-                                line.push_str(" (needs reinstallation)");
-                            }
-                            write!(&mut line, " -- run `midenup install {name}`").unwrap();
+                            push_marker(
+                                &mut line,
+                                &format!("(needs reinstallation) -- run `midenup install {name}`"),
+                                use_color,
+                            );
                         }
 
-                        if let Some(manifest) = upstream {
-                            match manifest.get_channel_by_name(name) {
-                                Some(channel)
-                                    if installation
-                                        .as_channel()
-                                        .is_partially_installed(channel) =>
-                                {
-                                    if use_color {
-                                        write!(&mut line, " {}", "(partially installed)".yellow())
-                                            .unwrap();
-                                    } else {
-                                        line.push_str(" (partially installed)");
+                        if upstream.is_some() {
+                            // The lookup follows migration lineage the way `update` does, so a
+                            // superseded channel shows as updatable rather than gone. Verbatim
+                            // manifest content: a listing pins nothing and reaches for no source.
+                            match installation.as_channel().upstream_counterpart_raw(config) {
+                                // An unmanaged record already carries its one instruction, the
+                                // reinstall above; a second directive would contradict it.
+                                Some(_) if !installation.is_managed() => {},
+                                Some((channel, upstream_match)) => {
+                                    let has_update = match upstream_match {
+                                        // Being superseded is the update: running it migrates.
+                                        UpstreamMatch::Migrated { .. } => true,
+                                        UpstreamMatch::UpstreamCounterpart => {
+                                            super::update::needs_update(
+                                                config,
+                                                installation,
+                                                channel,
+                                            )
+                                        },
+                                    };
+                                    if has_update {
+                                        push_marker(
+                                            &mut line,
+                                            &format!(
+                                                "(update available) -- run `midenup update {name}`"
+                                            ),
+                                            use_color,
+                                        );
                                     }
                                 },
-                                Some(_) => {},
                                 // Retained, not deleted: the user may still want `var/` and an
                                 // explicit uninstall (spec section 12.3).
-                                None if use_color => {
-                                    write!(&mut line, " {}", "(unavailable upstream)".yellow())
-                                        .unwrap()
-                                },
-                                None => line.push_str(" (unavailable upstream)"),
+                                None => push_marker(&mut line, "(unavailable upstream)", use_color),
                             }
                         }
 

src/commands/update.rs

@@ -20,7 +20,7 @@ use crate::{
     manifest::Component,
     options::{InstallationOptions, IntentUpdate, PathUpdate, UpdateOptions},
     state::{Installation, LocalState},
-    version::Authority,
+    version::{Authority, GitTarget},
 };
 
 /// Updates installed toolchains.
@@ -409,6 +409,64 @@ fn work_for(
     Ok(Work::Nothing)
 }
 
+/// Whether the manifest's content changed for this installation.
+pub fn needs_update(config: &Config, installation: &Installation, upstream: &Channel) -> bool {
+    match crate::resolve::resolve(upstream, &installation.intent) {
+        Ok(resolved) => {
+            let installed_names: std::collections::BTreeSet<&str> = installation
+                .components
+                .iter()
+                .map(|component| component.name.as_ref())
+                .collect();
+            let resolved_names: std::collections::BTreeSet<&str> =
+                resolved.iter().map(|component| component.name.as_ref()).collect();
+            if installed_names != resolved_names {
+                return true;
+            }
+        },
+        Err(_) => return true,
+    }
+
+    installation.components.iter().any(|installed| {
+        upstream
+            .get_component(&installed.name)
+            .is_some_and(|new| definition_changed(installed, new, &config.working_directory))
+    })
+}
+
+/// Whether two definitions of one component differ as manifest content.
+///
+/// The pins install records on an authority -- a branch's commit, a path's modification time --
+/// exist only locally and move on their own, so they are normalized away: drift behind them is
+/// reconciled by the update itself, which is what pins for ([`classify`]); a listing must not.
+///
+/// A relative path is stored absolute, joined onto `cwd` at install time, so the upstream form is
+/// joined the same way before comparing.
+fn definition_changed(installed: &Component, upstream: &Component, cwd: &Path) -> bool {
+    let normalized = |component: &Component| {
+        let mut component = component.clone();
+        match &mut component.version {
+            Authority::Path { path, last_modification } => {
+                if path.is_relative() {
+                    *path = cwd.join(&*path);
+                }
+                *last_modification = None;
+            },
+            Authority::Git {
+                target: GitTarget::Branch { latest_revision, .. },
+                ..
+            } => *latest_revision = None,
+            Authority::Git { .. } | Authority::Registry { .. } => (),
+        }
+        serde_json::to_value(component).ok()
+    };
+
+    match (normalized(installed), normalized(upstream)) {
+        (Some(old), Some(new)) => old != new,
+        _ => true,
+    }
+}
+
 /// Commits selection and metadata changes that no installed file reflects.
 ///
 /// Each component's recorded *authority* is preserved rather than taken from upstream. Reaching
@@ -672,6 +730,72 @@ mod tests {
         assert_eq!(classify_pair(base(), base()), ChangeClass::None);
     }
 
+    /// The pins install records -- a branch's commit, a path's modification time -- exist only
+    /// locally and move on their own, so a listing must not read them as a manifest change.
+    #[test]
+    fn an_authority_pin_is_not_a_definition_change() {
+        let on_branch = |latest_revision: Option<&str>| {
+            let mut component = base();
+            component.version = Authority::Git {
+                repository_url: "https://example.invalid/repo".to_string(),
+                subpath: None,
+                target: GitTarget::Branch {
+                    name: "main".to_string(),
+                    latest_revision: latest_revision.map(str::to_string),
+                },
+            };
+            component
+        };
+        assert!(!definition_changed(&on_branch(Some("abc123")), &on_branch(None), cwd()));
+
+        let at_path = |last_modification: Option<std::time::SystemTime>| {
+            let mut component = base();
+            component.version = Authority::Path { path: "vm".into(), last_modification };
+            component
+        };
+        let pinned = at_path(Some(std::time::SystemTime::UNIX_EPOCH));
+        assert!(!definition_changed(&pinned, &at_path(None), cwd()));
+    }
+
+    /// Install stores a relative path joined onto the working directory; the manifest still says
+    /// the relative form, and the two are the same definition.
+    #[test]
+    fn a_relative_path_matches_its_installed_absolute_form() {
+        let cwd = Path::new("/work");
+        let at_path = |path: &str, last_modification: Option<std::time::SystemTime>| {
+            let mut component = base();
+            component.version = Authority::Path { path: path.into(), last_modification };
+            component
+        };
+        let installed = at_path("/work/vm", Some(std::time::SystemTime::UNIX_EPOCH));
+        assert!(!definition_changed(&installed, &at_path("vm", None), cwd));
+        assert!(definition_changed(&installed, &at_path("other", None), cwd));
+    }
+
+    /// Normalizing the pin must not mask a real change riding alongside it.
+    #[test]
+    fn a_change_next_to_a_pin_is_still_a_definition_change() {
+        let mut installed = base();
+        installed.version = Authority::Git {
+            repository_url: "https://example.invalid/repo".to_string(),
+            subpath: None,
+            target: GitTarget::Branch {
+                name: "main".to_string(),
+                latest_revision: Some("abc123".to_string()),
+            },
+        };
+        let mut upstream = base();
+        upstream.version = Authority::Git {
+            repository_url: "https://example.invalid/repo".to_string(),
+            subpath: None,
+            target: GitTarget::Branch {
+                name: "next".to_string(),
+                latest_revision: None,
+            },
+        };
+        assert!(definition_changed(&installed, &upstream, cwd()));
+    }
+
     /// An artifact is a file in the publication, so a component whose artifact URI moves to a new
     /// release must be reinstalled even though nothing else about it changed.
     #[test]