@getmarrow/install 0.1.49 → 0.1.50

package/README.md

@@ -91,9 +91,9 @@ npx @getmarrow/install controller stop
 
 Persistent controller lifecycle is currently Linux-only. On macOS or Windows, activation still writes supported configuration and verifies one server-side install self-test without certifying that hooks continuously ran; run `npx @getmarrow/install sidecar` under an owner-managed service and pass `--no-controller`. The controller does not silently upgrade packages, change governance policy, rotate credentials, or modify unrelated project configuration.
 
-## What's New in v0.1.49
+## What's New in v0.1.50
 
-v0.1.49 pins MCP `3.9.74` and SDK `3.7.62`. Install and repair now resolve one stable non-secret agent identity before writing configuration, then use that exact identity across generated MCP config, the owned-process SDK preload, doctor/self-test, and the local controller. Managed MCP config no longer stores an API key or shell-style credential placeholder; the owning harness inherits the key from trusted environment or secret-manager state.
+v0.1.50 keeps MCP `3.9.74` and SDK `3.7.62`, and explicitly requests the expanded runtime proof required by activation self-test. Install and repair resolve one stable non-secret agent identity before writing configuration, then use that exact identity across generated MCP config, the owned-process SDK preload, doctor/self-test, and the local controller. Managed MCP config does not store an API key or shell-style credential placeholder; the owning harness inherits the key from trusted environment or secret-manager state.
 
 The integration boundary is explicit: native Claude hooks are installed only where supported and remain cooperative/client-reported until authoritative server receipts exist; MCP tools are on demand; Codex, Grok, Gemini, and similar CLIs use the governed wrapper for consequential control; owned Node processes use the SDK passive runtime while installed; and custom hosts require a bounded event adapter. Exact package SHA/integrity can prove artifact provenance, not runtime coverage. Activation-profile delivery is authenticated `client_self_reported` telemetry with `certified_coverage: false`; it acknowledges delivery but cannot attest that a hook, wrapper, or adapter ran.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/install",
-  "version": "0.1.49",
+  "version": "0.1.50",
   "description": "Universal installer and governed runner for Marrow agent fleets.",
   "bin": {
     "marrow-install": "bin/marrow-install.js"

package/src/installer.js

@@ -1356,6 +1356,7 @@ async function runSelfTest(options) {
       action: 'Marrow passive install self-test: verify one-call agent runtime and outcome closure',
       type: 'process',
       role: 'general',
+      response_mode: 'expanded',
       surfaces: ['workspace'],
       proof: {
         checks: ['installer self-test'],
@@ -1465,14 +1466,19 @@ async function runSelfTest(options) {
       evidence_authority: 'client_self_reported',
       certified_coverage: false,
     };
-    activationVerified = Boolean(
-      firstValue.active
-      && runtimeGateVerified(runtime)
-      && (status.enabled ?? status.ok)
-      && telemetryAccepted,
-    );
+    const activationPrerequisites = {
+      first_value_active: firstValue?.active === true,
+      runtime_gate_verified: runtimeGateVerified(runtime),
+      status_enabled: (status.enabled ?? status.ok) === true,
+      telemetry_accepted: telemetryAccepted,
+    };
+    activationVerified = Object.values(activationPrerequisites).every(Boolean);
     if (!activationVerified) {
-      throw new Error('activation self-test prerequisites were not all verified by the server');
+      const missing = Object.entries(activationPrerequisites)
+        .filter(([, verified]) => !verified)
+        .map(([name]) => name)
+        .join(',');
+      throw new Error(`activation self-test prerequisites were not all verified by the server (${missing})`);
     }
   }
   return {