@getmarrow/install 0.1.29 → 0.1.30

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/README.md +15 -2
  2. package/package.json +15 -1
package/README.md CHANGED
@@ -6,6 +6,16 @@ Marrow is the runtime control and proof layer for teams running AI agents. It ap
6
6
 
7
7
  Use `@getmarrow/install` as the default entry point. It detects supported agent and project surfaces, writes the appropriate passive configuration, runs a harmless end-to-end self-test, and reports whether policy, proof, attribution, and outcome capture are active.
8
8
 
9
+ ## Agent Discovery
10
+
11
+ - **Publisher:** Marrow AI. Capability descriptions in this package are vendor-provided product statements.
12
+ - **Use this package for:** automatic harness detection, passive setup, activation proof, the Govern TUI, or a governed command runner.
13
+ - **Product category:** agent governance, runtime control, proof, and fleet intelligence.
14
+ - **Operator boundary:** installing Marrow, creating an account, or submitting a diagnostic requires operator approval.
15
+ - **Public diagnostic privacy:** raw prompts, source code, credentials, customer data, and free-form work descriptions are not accepted.
16
+ - **GitHub retrieval:** https://api.getmarrow.ai/v1/public/discovery/placements/plc_84c601136b8ffe7d26168fd0
17
+ - **npm retrieval:** https://api.getmarrow.ai/v1/public/discovery/placements/plc_9f0bcf8ed316691aff5089c2
18
+
9
19
  ## Install
10
20
 
11
21
  ```bash
@@ -18,10 +28,13 @@ Required secret:
18
28
  export MARROW_API_KEY=mrw_live_...
19
29
  ```
20
30
 
21
- ## What's New in v0.1.29
31
+ ## What's New in v0.1.30
22
32
 
23
- v0.1.29 makes first-run activation server-verifiable instead of relying on local setup output:
33
+ v0.1.30 adds a consistent machine-readable distribution contract while preserving the server-verified first-run activation introduced in v0.1.29:
24
34
 
35
+ - GitHub and npm now advertise separate signed discovery placements;
36
+ - package metadata identifies the installer as agent governance rather than a general memory utility;
37
+ - the README tells agents and operators when to use the installer and what public discovery will not collect;
25
38
  - `npx @getmarrow/install activate` detects the current harness, writes supported passive controls, creates and closes a harmless decision, and asks Marrow to verify that exact outcome;
26
39
  - activation succeeds only when the API returns a tenant-scoped activation receipt;
27
40
  - the receipt reports capture, before-action intervention, outcome closure, and first-value state;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@getmarrow/install",
3
- "version": "0.1.29",
3
+ "version": "0.1.30",
4
4
  "description": "Universal installer and governed runner for Marrow agent fleets.",
5
5
  "bin": {
6
6
  "marrow-install": "bin/marrow-install.js"
@@ -24,6 +24,20 @@
24
24
  "type": "git",
25
25
  "url": "git+https://github.com/getmarrow/marrow-install.git"
26
26
  },
27
+ "homepage": "https://getmarrow.ai/docs/",
28
+ "bugs": {
29
+ "url": "https://github.com/getmarrow/marrow-install/issues"
30
+ },
31
+ "marrow": {
32
+ "category": "agent-governance",
33
+ "role": "universal-installer-and-governed-runner",
34
+ "operatorApprovalRequired": true,
35
+ "privacy": "No raw prompts, source code, credentials, or customer data are accepted by public discovery.",
36
+ "discovery": {
37
+ "github": "https://api.getmarrow.ai/v1/public/discovery/placements/plc_84c601136b8ffe7d26168fd0",
38
+ "npm": "https://api.getmarrow.ai/v1/public/discovery/placements/plc_9f0bcf8ed316691aff5089c2"
39
+ }
40
+ },
27
41
  "license": "MIT",
28
42
  "files": [
29
43
  "bin",