@getmarrow/install 0.1.44 → 0.1.45

package/README.md

@@ -91,7 +91,18 @@ npx @getmarrow/install controller stop
 
 Persistent controller lifecycle is currently Linux-only. On macOS or Windows, activation still installs and verifies the supported hooks without starting or signaling a background process; run `npx @getmarrow/install sidecar` under an owner-managed service and pass `--no-controller`. The controller does not silently upgrade packages, change governance policy, rotate credentials, or modify unrelated project configuration.
 
-## What's New in v0.1.44
+## What's New in v0.1.45
+
+v0.1.45 pins the one-command setup path to the published receipt-safe MCP release:
+
+- generated MCP setup, launch, and certified hook commands pin current MCP `3.9.62`;
+- adapter provenance records exact MCP source `c025d720af8fe9b16702ba764ff85c822adc2a26` and the live public registry integrity;
+- MCP versions older than `3.9.62` are treated as stale so new installs receive the fail-closed runtime authorization contract;
+- `npx @getmarrow/install@latest update` is the owner-approved one-command refresh of certified install/SDK/MCP pins; doctor and status print an owner notice so agents can tell the user to update;
+- self-test and governed-runner requests report install, SDK, and MCP versions together so the API can notify on any stale package;
+- SDK `3.7.56` detection and operator-approved upgrade rules are unchanged.
+
+## Previous: v0.1.44
 
 v0.1.44 restores exact package-chain detection and current MCP setup truth:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/install",
-  "version": "0.1.44",
+  "version": "0.1.45",
   "description": "Universal installer and governed runner for Marrow agent fleets.",
   "bin": {
     "marrow-install": "bin/marrow-install.js"

package/src/governed-runner.js

@@ -21,6 +21,7 @@ const {
   stopGovernanceController,
 } = require('./controller-manager');
 const {
+  ADAPTER_PROVENANCE,
   HARNESS_CAPABILITY_REGISTRY,
   applyPlan,
   buildPlan,
@@ -482,6 +483,9 @@ function headers(options) {
     'X-Marrow-Client': sourceClient(options.client),
     'X-Marrow-Package': '@getmarrow/install',
     'X-Marrow-Package-Version': INSTALLER_PACKAGE_VERSION,
+    'X-Marrow-Install-Version': INSTALLER_PACKAGE_VERSION,
+    'X-Marrow-SDK-Version': ADAPTER_PROVENANCE.sdk.version,
+    'X-Marrow-MCP-Version': ADAPTER_PROVENANCE.mcp.version,
     'User-Agent': '@getmarrow/install governed-runner',
   };
   return h;
@@ -1006,7 +1010,11 @@ function statusPanel(status = {}) {
   if (update && (update.update_available === true || update.version_status === 'unknown' || notification === 'unknown' || notification === 'version_unknown' || priority === 'security_required')) {
     lines.push(`Client update: ${displayText(priority, 32)}; installed=${displayText(update.installed_version || update.current_version || 'unknown', 32)}; latest=${displayText(update.latest_version || 'unknown', 32)}`);
     lines.push('Automatic notification: yes; automatic local mutation: no; operator policy applies.');
-    if (update.update_command || update.exact_update_command) lines.push(`Update: ${displayText(update.update_command || update.exact_update_command, 240)}`);
+    if (update.owner_notice) lines.push(`Tell owner: ${displayText(update.owner_notice, 240)}`);
+    if (update.agent_instruction) lines.push(`Agent instruction: ${displayText(update.agent_instruction, 240)}`);
+    if (update.auto_update_command || update.update_command || update.exact_update_command) {
+      lines.push(`Update: ${displayText(update.auto_update_command || update.update_command || update.exact_update_command, 240)}`);
+    }
     if (update.verification_command || update.exact_verification_command) lines.push(`Verify: ${displayText(update.verification_command || update.exact_verification_command, 240)}`);
   } else {
     lines.push('Client update: current or unavailable.');

package/src/installer.js

@@ -8,9 +8,9 @@ const { controllerStatus, controllerSupportedPlatform, ensureGovernanceControlle
 const DEFAULT_BASE_URL = 'https://api.getmarrow.ai';
 const MARROW_BLOCK_START = '<!-- marrow:passive-start -->';
 const MARROW_BLOCK_END = '<!-- marrow:passive-end -->';
-const MCP_ADAPTER_VERSION = '3.9.61';
-const MCP_ADAPTER_SOURCE_SHA = 'ebe06a5c78895e70ceea7b7383ac31d5aaacbd41';
-const MCP_ADAPTER_INTEGRITY = 'sha512-6ojhKztiJp8/mZecuSnt+kiEe41COPBOjrka9j+r+yFacNl4uapW9quq/wEVo5SxuDmxolFIBaqkX6xIdaD2rA==';
+const MCP_ADAPTER_VERSION = '3.9.62';
+const MCP_ADAPTER_SOURCE_SHA = 'c025d720af8fe9b16702ba764ff85c822adc2a26';
+const MCP_ADAPTER_INTEGRITY = 'sha512-XwvwptwMHnH2cchrt242iQGng8t8OVDHGYORHmD04cfSn2NQoH1Y3bPoxkvlf/j/ujPtqSPpT+uZGEFNRpecZQ==';
 const SDK_ADAPTER_VERSION = '3.7.56';
 const SDK_ADAPTER_INTEGRITY = 'sha512-mllohsI4DHpcVuEL58303kpGwS/pl/HMZ99mGNo3swYLomZwwfVzcner9Bn+p0b72989NOpS1l2frY/vra1gfQ==';
 const SDK_ADAPTER_TARBALL = `https://registry.npmjs.org/@getmarrow/sdk/-/sdk-${SDK_ADAPTER_VERSION}.tgz`;
@@ -277,9 +277,10 @@ function parseArgs(argv) {
       options.selfTest = true;
     }
     else if (arg === '--yes' || arg === '-y') options.yes = true;
-    else if (arg === '--repair' || arg === 'repair') {
+    else if (arg === '--repair' || arg === 'repair' || arg === 'update' || arg === '--update') {
       options.repair = true;
       options.yes = true;
+      options.update = true;
     }
     else if (arg === '--dry-run') options.dryRun = true;
     else if (arg === '--doctor' || arg === 'doctor' || arg === 'check') options.doctor = true;
@@ -328,6 +329,7 @@ function usage() {
   npx @getmarrow/install activate
   npx @getmarrow/install --yes
   npx @getmarrow/install --repair
+  npx @getmarrow/install update
   npx @getmarrow/install doctor
   npx @getmarrow/install --mcp --yes
   npx @getmarrow/install --sdk --yes
@@ -337,6 +339,7 @@ Options:
   --dry-run          Print planned changes without writing
   --doctor           Check install health without writing
   --repair           Write missing hooks/config, then run self-test and status check
+  update             Same as --repair: refresh certified MCP/SDK/install pins after owner approval
   --yes, -y          Write detected config files
   --mode <mode>      auto, mcp, sdk, both, or md
   --key <key>        Marrow API key for self-test. Prefer MARROW_API_KEY because CLI args can appear in process listings.
@@ -1258,6 +1261,9 @@ async function runSelfTest(options) {
     'x-marrow-client': options.client || sourceClient(),
     'x-marrow-package': '@getmarrow/install',
     'x-marrow-package-version': INSTALLER_ADAPTER_VERSION,
+    'x-marrow-install-version': INSTALLER_ADAPTER_VERSION,
+    'x-marrow-sdk-version': SDK_ADAPTER_VERSION,
+    'x-marrow-mcp-version': MCP_ADAPTER_VERSION,
   };
   if (options.agentId) headers['x-marrow-agent-id'] = options.agentId;
 
@@ -1627,7 +1633,11 @@ function printReport(report) {
       process.stdout.write(`- latest: ${update.latest_version || 'unknown'}\n`);
       process.stdout.write('- automatic notification: yes\n');
       process.stdout.write('- automatic local mutation: no; operator policy applies\n');
-      if (update.update_command || update.exact_update_command) process.stdout.write(`- update: ${update.update_command || update.exact_update_command}\n`);
+      if (update.owner_notice) process.stdout.write(`- tell owner: ${update.owner_notice}\n`);
+      if (update.agent_instruction) process.stdout.write(`- agent instruction: ${update.agent_instruction}\n`);
+      if (update.update_command || update.exact_update_command || update.auto_update_command) {
+        process.stdout.write(`- update: ${update.auto_update_command || update.update_command || update.exact_update_command}\n`);
+      }
       if (update.verification_command || update.exact_verification_command) process.stdout.write(`- verify: ${update.verification_command || update.exact_verification_command}\n`);
     }
     if (report.selfTest.first_value_signal) {