@getmarrow/install 0.1.44 → 0.1.46

package/README.md

@@ -91,7 +91,29 @@ npx @getmarrow/install controller stop
 
 Persistent controller lifecycle is currently Linux-only. On macOS or Windows, activation still installs and verifies the supported hooks without starting or signaling a background process; run `npx @getmarrow/install sidecar` under an owner-managed service and pass `--no-controller`. The controller does not silently upgrade packages, change governance policy, rotate credentials, or modify unrelated project configuration.
 
-## What's New in v0.1.44
+## What's New in v0.1.46
+
+v0.1.46 makes default install cover every workspace honestly:
+
+- auto mode now writes MCP plus agent instructions in every project, and the SDK passive runtime whenever Node is present;
+- Claude native hooks still install only when `.claude` is present; detected Cursor workspaces also get `.cursor/mcp.json`;
+- Hermes, OpenClaw, and custom hosts stay event-contract only and are not claimed as native interception;
+- generated MCP setup, launch, and certified hook commands pin current MCP `3.9.64` from source `ed8293165247e89161045c7fbf68aeee4d51c6da`;
+- SDK detection and operator-approved upgrade rules pin exact public `3.7.59`;
+- empty token savings stay zero until observed model usage lands.
+
+## Previous: v0.1.45
+
+v0.1.45 pins the one-command setup path to the published receipt-safe MCP release:
+
+- generated MCP setup, launch, and certified hook commands pin current MCP `3.9.62`;
+- adapter provenance records exact MCP source `c025d720af8fe9b16702ba764ff85c822adc2a26` and the live public registry integrity;
+- MCP versions older than `3.9.62` are treated as stale so new installs receive the fail-closed runtime authorization contract;
+- `npx @getmarrow/install@latest update` is the owner-approved one-command refresh of certified install/SDK/MCP pins; doctor and status print an owner notice so agents can tell the user to update;
+- self-test and governed-runner requests report install, SDK, and MCP versions together so the API can notify on any stale package;
+- SDK `3.7.56` detection and operator-approved upgrade rules are unchanged.
+
+## Previous: v0.1.44
 
 v0.1.44 restores exact package-chain detection and current MCP setup truth:
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/install",
-  "version": "0.1.44",
+  "version": "0.1.46",
   "description": "Universal installer and governed runner for Marrow agent fleets.",
   "bin": {
     "marrow-install": "bin/marrow-install.js"

package/src/governed-runner.js

@@ -21,6 +21,7 @@ const {
   stopGovernanceController,
 } = require('./controller-manager');
 const {
+  ADAPTER_PROVENANCE,
   HARNESS_CAPABILITY_REGISTRY,
   applyPlan,
   buildPlan,
@@ -482,6 +483,9 @@ function headers(options) {
     'X-Marrow-Client': sourceClient(options.client),
     'X-Marrow-Package': '@getmarrow/install',
     'X-Marrow-Package-Version': INSTALLER_PACKAGE_VERSION,
+    'X-Marrow-Install-Version': INSTALLER_PACKAGE_VERSION,
+    'X-Marrow-SDK-Version': ADAPTER_PROVENANCE.sdk.version,
+    'X-Marrow-MCP-Version': ADAPTER_PROVENANCE.mcp.version,
     'User-Agent': '@getmarrow/install governed-runner',
   };
   return h;
@@ -1006,7 +1010,11 @@ function statusPanel(status = {}) {
   if (update && (update.update_available === true || update.version_status === 'unknown' || notification === 'unknown' || notification === 'version_unknown' || priority === 'security_required')) {
     lines.push(`Client update: ${displayText(priority, 32)}; installed=${displayText(update.installed_version || update.current_version || 'unknown', 32)}; latest=${displayText(update.latest_version || 'unknown', 32)}`);
     lines.push('Automatic notification: yes; automatic local mutation: no; operator policy applies.');
-    if (update.update_command || update.exact_update_command) lines.push(`Update: ${displayText(update.update_command || update.exact_update_command, 240)}`);
+    if (update.owner_notice) lines.push(`Tell owner: ${displayText(update.owner_notice, 240)}`);
+    if (update.agent_instruction) lines.push(`Agent instruction: ${displayText(update.agent_instruction, 240)}`);
+    if (update.auto_update_command || update.update_command || update.exact_update_command) {
+      lines.push(`Update: ${displayText(update.auto_update_command || update.update_command || update.exact_update_command, 240)}`);
+    }
     if (update.verification_command || update.exact_verification_command) lines.push(`Verify: ${displayText(update.verification_command || update.exact_verification_command, 240)}`);
   } else {
     lines.push('Client update: current or unavailable.');

package/src/installer.js

@@ -8,11 +8,11 @@ const { controllerStatus, controllerSupportedPlatform, ensureGovernanceControlle
 const DEFAULT_BASE_URL = 'https://api.getmarrow.ai';
 const MARROW_BLOCK_START = '<!-- marrow:passive-start -->';
 const MARROW_BLOCK_END = '<!-- marrow:passive-end -->';
-const MCP_ADAPTER_VERSION = '3.9.61';
-const MCP_ADAPTER_SOURCE_SHA = 'ebe06a5c78895e70ceea7b7383ac31d5aaacbd41';
-const MCP_ADAPTER_INTEGRITY = 'sha512-6ojhKztiJp8/mZecuSnt+kiEe41COPBOjrka9j+r+yFacNl4uapW9quq/wEVo5SxuDmxolFIBaqkX6xIdaD2rA==';
-const SDK_ADAPTER_VERSION = '3.7.56';
-const SDK_ADAPTER_INTEGRITY = 'sha512-mllohsI4DHpcVuEL58303kpGwS/pl/HMZ99mGNo3swYLomZwwfVzcner9Bn+p0b72989NOpS1l2frY/vra1gfQ==';
+const MCP_ADAPTER_VERSION = '3.9.64';
+const MCP_ADAPTER_SOURCE_SHA = 'ed8293165247e89161045c7fbf68aeee4d51c6da';
+const MCP_ADAPTER_INTEGRITY = 'sha512-D654txYXhEciNl3xqm3o5TdH8S3rkPfuVcnoQqSjc1dqAGKbq90BuyZqcUVMxO6dkSbQ3QS++Sg++zhySqSN/w==';
+const SDK_ADAPTER_VERSION = '3.7.59';
+const SDK_ADAPTER_INTEGRITY = 'sha512-Ba4kqOYP1tEfMoiz4ddrOP86Q5Q1ANDQpZ8rvDJwh5BLaSVKamSbyOUAQ9lNSt7S5IzlhhTHO5HrOQq35xahDg==';
 const SDK_ADAPTER_TARBALL = `https://registry.npmjs.org/@getmarrow/sdk/-/sdk-${SDK_ADAPTER_VERSION}.tgz`;
 const MCP_PACKAGE_SPEC = `@getmarrow/mcp@${MCP_ADAPTER_VERSION}`;
 const ADAPTER_PROVENANCE = Object.freeze({
@@ -277,9 +277,10 @@ function parseArgs(argv) {
       options.selfTest = true;
     }
     else if (arg === '--yes' || arg === '-y') options.yes = true;
-    else if (arg === '--repair' || arg === 'repair') {
+    else if (arg === '--repair' || arg === 'repair' || arg === 'update' || arg === '--update') {
       options.repair = true;
       options.yes = true;
+      options.update = true;
     }
     else if (arg === '--dry-run') options.dryRun = true;
     else if (arg === '--doctor' || arg === 'doctor' || arg === 'check') options.doctor = true;
@@ -328,6 +329,7 @@ function usage() {
   npx @getmarrow/install activate
   npx @getmarrow/install --yes
   npx @getmarrow/install --repair
+  npx @getmarrow/install update
   npx @getmarrow/install doctor
   npx @getmarrow/install --mcp --yes
   npx @getmarrow/install --sdk --yes
@@ -337,6 +339,7 @@ Options:
   --dry-run          Print planned changes without writing
   --doctor           Check install health without writing
   --repair           Write missing hooks/config, then run self-test and status check
+  update             Same as --repair: refresh certified MCP/SDK/install pins after owner approval
   --yes, -y          Write detected config files
   --mode <mode>      auto, mcp, sdk, both, or md
   --key <key>        Marrow API key for self-test. Prefer MARROW_API_KEY because CLI args can appear in process listings.
@@ -616,9 +619,10 @@ function passiveInstructions() {
 
 Marrow should run passively after install:
 
-- Use MCP hooks when available: \`npx -y --package=@getmarrow/mcp@latest marrow-mcp setup\`.
+- Use MCP plus these instructions in every workspace: \`npx -y --package=@getmarrow/mcp@latest marrow-mcp setup\`.
 - Use SDK passive runtime in owned Node processes: \`createPassiveRuntime().install()\`.
-- Keep passive token/model usage proof enabled so Marrow can show token, cost, latency, and workflow savings after real work completes.
+- Native Claude hooks install only when \`.claude\` is present. Cursor, Composer, Cline, and Windsurf get MCP tools on demand. Codex, Grok, Gemini, and similar CLI harnesses use the governed wrapper. Hermes, OpenClaw, and custom hosts need a bounded event adapter.
+- Keep passive token/model usage proof enabled. Empty savings stay zero until observed model usage lands. Do not invent token, cost, or time savings.
 - Before risky work, use Marrow's decision brief or passive prompt hook.
 - After meaningful work, record the outcome so future agents learn from it.
 - After Marrow blocks, warns, or requires review, use the decision trace receipt to tell the operator what changed and which recorded workflow or proof is required. Stay quiet for routine low-risk work.
@@ -1048,13 +1052,36 @@ function inspectSdkDependency(detection) {
   };
 }
 
+function defaultHarnessInstallMatrix(detection = detectEnvironment(process.cwd())) {
+  const node = Boolean(detection.node);
+  return HARNESS_CAPABILITY_REGISTRY.map((entry) => {
+    const detected = detectedClient(detection) === entry.client
+      || (entry.client === 'claude-code' && detection.claudeCode)
+      || (entry.client === 'cursor' && detection.cursor)
+      || (entry.client === 'codex' && detection.codex);
+    return {
+      client: entry.client,
+      capability_level: entry.capability_level,
+      automatic: entry.automatic,
+      install_surface: entry.install_surface,
+      default_install: {
+        mcp: true,
+        instructions: true,
+        sdk_passive_runtime: node,
+        native_hooks: entry.capability_level === 'native_hooks' && Boolean(detection.claudeCode),
+        governed_wrapper: entry.capability_level === 'governed_wrapper',
+      },
+      verified_passive: detected && entry.automatic.length > 0,
+      unsupported_claim: entry.capability_level === 'event_contract'
+        ? 'Needs a bounded event adapter. MCP tools remain on demand.'
+        : null,
+    };
+  });
+}
+
 function buildPlan(detection, options) {
   const mode = options.mode === 'auto'
-    ? detection.node && (detection.claudeCode || detection.cursor || detection.codex || detection.openclaw)
-      ? 'both'
-      : detection.node
-      ? 'sdk'
-      : 'mcp'
+    ? detection.node ? 'both' : 'mcp'
     : options.mode;
   const writes = [];
 
@@ -1089,6 +1116,14 @@ function buildPlan(detection, options) {
       label: 'Project MCP server config',
       transform: upsertMcpServerConfig,
     });
+    if (detection.cursor) {
+      writes.push({
+        type: 'json-transform',
+        path: detection.paths.cursorMcp,
+        label: 'Cursor MCP server config',
+        transform: upsertMcpServerConfig,
+      });
+    }
   }
 
   if (mode === 'md' || mode === 'both' || mode === 'mcp') {
@@ -1258,6 +1293,9 @@ async function runSelfTest(options) {
     'x-marrow-client': options.client || sourceClient(),
     'x-marrow-package': '@getmarrow/install',
     'x-marrow-package-version': INSTALLER_ADAPTER_VERSION,
+    'x-marrow-install-version': INSTALLER_ADAPTER_VERSION,
+    'x-marrow-sdk-version': SDK_ADAPTER_VERSION,
+    'x-marrow-mcp-version': MCP_ADAPTER_VERSION,
   };
   if (options.agentId) headers['x-marrow-agent-id'] = options.agentId;
 
@@ -1627,7 +1665,11 @@ function printReport(report) {
       process.stdout.write(`- latest: ${update.latest_version || 'unknown'}\n`);
       process.stdout.write('- automatic notification: yes\n');
       process.stdout.write('- automatic local mutation: no; operator policy applies\n');
-      if (update.update_command || update.exact_update_command) process.stdout.write(`- update: ${update.update_command || update.exact_update_command}\n`);
+      if (update.owner_notice) process.stdout.write(`- tell owner: ${update.owner_notice}\n`);
+      if (update.agent_instruction) process.stdout.write(`- agent instruction: ${update.agent_instruction}\n`);
+      if (update.update_command || update.exact_update_command || update.auto_update_command) {
+        process.stdout.write(`- update: ${update.auto_update_command || update.update_command || update.exact_update_command}\n`);
+      }
       if (update.verification_command || update.exact_verification_command) process.stdout.write(`- verify: ${update.verification_command || update.exact_verification_command}\n`);
     }
     if (report.selfTest.first_value_signal) {
@@ -1937,4 +1979,5 @@ module.exports = {
   printReport,
   ADAPTER_PROVENANCE,
   HARNESS_CAPABILITY_REGISTRY,
+  defaultHarnessInstallMatrix,
 };