@getmarrow/install 0.1.56 → 0.1.58

package/README.md

@@ -101,7 +101,15 @@ npx @getmarrow/install controller stop
 
 Persistent controller lifecycle is currently Linux-only. On macOS or Windows, activation still writes supported configuration and verifies one server-side install self-test without certifying that hooks continuously ran; run `npx @getmarrow/install sidecar` under an owner-managed service and pass `--no-controller`. The controller does not silently upgrade packages, change governance policy, rotate credentials, or modify unrelated project configuration.
 
-## What's New in v0.1.56
+## What's New in v0.1.58
+
+v0.1.58 pins MCP `3.9.89` from source `ff229e17419f65aeebd7fa7754dd61cbda61900d` with packed integrity `sha512-KC/P4dStzOOfZKxSwigQE4TWCt1TBgYINQzlXrnA5jpYHRrT2Jo73vaV4FiucVPOT+xyU1uCci+bmJoC35aZ0g==`; SDK remains `3.7.63`. Supported native hooks now include their host read, search, and status surfaces so MCP's private local session loop guard can stop unchanged successful checks, polls, and failed retries without adding routine backend writes. Install and update run `marrow-mcp loop-guard-self-test` against isolated temporary state and report configuration, isolated proof, and live host observation separately. Missing local control state stays enabled by default; an explicit owner disable is preserved byte-for-byte and prevents the controller from starting. Grok's trusted global hook file is created only at its direct owner-safe path, managed files are reconciled, and unmanaged files are preserved for owner review. Restart and complete each host's hook trust or review flow before relying on live enforcement.
+
+### Previous release: v0.1.57
+
+v0.1.57 pins the npm-verified MCP `3.9.88` and SDK `3.7.63` packages. Doctor now recognizes an installed and lockfile-verified SDK `3.7.63` instead of suggesting `3.7.62`. If a workspace has a newer stable SDK version, doctor preserves it and asks for official registry verification before replacement. The generated MCP setup, hooks, and update instructions target `3.9.88`; restart the owning harness and run `npx @getmarrow/install@latest doctor --self-test` after activation.
+
+## Previous: v0.1.56
 
 v0.1.56 pins the officially verified MCP `3.9.80` release from source `ee1eda3f201965a6530256accbdf175660dd8ad6` with registry integrity `sha512-uou3X18pESV39EMmddDrYN7yd6MrZzosrnQ1eRtvK5j3yuBLAlupj5kQVrrKEWAL6xwuLebXq2isivK2O/2WrA==`; SDK remains `3.7.62`. Doctor now directs stale, mixed, or version-unknown MCP installations through one `npx -y @getmarrow/install@latest update`, followed by one owning-harness restart and one `doctor --self-test` verification. The update resolves one official target and applies it consistently across detected Marrow-managed instructions, MCP launch configuration, and supported native hooks without claiming that already-running processes changed.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@getmarrow/install",
-  "version": "0.1.56",
+  "version": "0.1.58",
   "description": "Universal installer and governed runner for Marrow agent fleets.",
   "bin": {
     "marrow-install": "bin/marrow-install.js"
@@ -16,6 +16,7 @@
     "mcp",
     "installer",
     "passive-runtime",
+    "loop-guard",
     "governance",
     "proof-packs",
     "agent-control-plane"

package/src/installer.js

@@ -2,6 +2,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const os = require('node:os');
 const crypto = require('node:crypto');
+const { spawnSync } = require('node:child_process');
 const { version: INSTALLER_ADAPTER_VERSION } = require('../package.json');
 const { controllerStatus, controllerSupportedPlatform, ensureGovernanceController } = require('./controller-manager');
 const { firstCapturePath, harnessReloadPlan } = require('./first-hour');
@@ -10,11 +11,11 @@ const { evidence: localControlEvidence } = require('./control-state');
 const DEFAULT_BASE_URL = 'https://api.getmarrow.ai';
 const MARROW_BLOCK_START = '<!-- marrow:passive-start -->';
 const MARROW_BLOCK_END = '<!-- marrow:passive-end -->';
-const MCP_ADAPTER_VERSION = '3.9.80';
-const MCP_ADAPTER_SOURCE_SHA = 'ee1eda3f201965a6530256accbdf175660dd8ad6';
-const MCP_ADAPTER_INTEGRITY = 'sha512-uou3X18pESV39EMmddDrYN7yd6MrZzosrnQ1eRtvK5j3yuBLAlupj5kQVrrKEWAL6xwuLebXq2isivK2O/2WrA==';
-const SDK_ADAPTER_VERSION = '3.7.62';
-const SDK_ADAPTER_INTEGRITY = 'sha512-n1i6Be09TpAQ9BPNRKY7aCvA2iSUPpJfw8djw2MELwpNbBCtKiZ29Jji77BK/6EFLUpSIcTW/Gmdf/ccf0JRYQ==';
+const MCP_ADAPTER_VERSION = '3.9.89';
+const MCP_ADAPTER_SOURCE_SHA = 'ff229e17419f65aeebd7fa7754dd61cbda61900d';
+const MCP_ADAPTER_INTEGRITY = 'sha512-KC/P4dStzOOfZKxSwigQE4TWCt1TBgYINQzlXrnA5jpYHRrT2Jo73vaV4FiucVPOT+xyU1uCci+bmJoC35aZ0g==';
+const SDK_ADAPTER_VERSION = '3.7.63';
+const SDK_ADAPTER_INTEGRITY = 'sha512-5BiV1P0J1NMVdgjqxqULfM+zGrTjHBuWm1amKZWba4yW6C3t10VlhIlj/A+4YKbKqvyZe8gXgUwW+VrYDbVQrQ==';
 const SDK_ADAPTER_TARBALL = `https://registry.npmjs.org/@getmarrow/sdk/-/sdk-${SDK_ADAPTER_VERSION}.tgz`;
 const MCP_PACKAGE_SPEC = `@getmarrow/mcp@${MCP_ADAPTER_VERSION}`;
 const ADAPTER_PROVENANCE = Object.freeze({
@@ -23,7 +24,7 @@ const ADAPTER_PROVENANCE = Object.freeze({
     version: MCP_ADAPTER_VERSION,
     source_sha: MCP_ADAPTER_SOURCE_SHA,
     integrity: MCP_ADAPTER_INTEGRITY,
-    integrity_state: 'sealed_local_candidate',
+    integrity_state: 'verified_npm_registry_metadata',
   }),
   sdk: Object.freeze({
     package: '@getmarrow/sdk',
@@ -68,6 +69,13 @@ function compareMcpVersions(left, right) {
   return 0;
 }
 
+function declaredStableSdkLowerBound(spec) {
+  if (typeof spec !== 'string') return null;
+  const match = spec.trim().match(/^(v|\^|~|>=|>)?(\d{1,6}\.\d{1,6}\.\d{1,9})$/);
+  if (!match || !parsedStableMcpVersion(match[2])) return null;
+  return { version: match[2], exclusive: match[1] === '>' };
+}
+
 function compatibleMcpTargetVersion(value) {
   const candidate = parsedStableMcpVersion(value);
   const sealed = parsedStableMcpVersion(MCP_ADAPTER_VERSION);
@@ -271,10 +279,10 @@ const GROK_PRE_ACTION_GUARD_SOURCE = [
   'child.stdin.end(Buffer.concat(input));}catch{fail();}});',
 ].join('');
 const GROK_PRE_ACTION_HOOK_COMMAND = `node -e '${GROK_PRE_ACTION_GUARD_SOURCE}'`;
-const NATIVE_HOOK_MATCHER = 'Bash|Edit|Write|MultiEdit|mcp__(?!marrow_).*';
+const NATIVE_HOOK_MATCHER = 'Bash|Edit|Write|MultiEdit|Read|Glob|Grep|Search|WebSearch|Task|functions\\.(?!mcp__marrow__marrow_).*|mcp__(?!marrow__marrow_).*';
 const CODEX_NATIVE_HOOK_MATCHER = 'Bash|apply_patch|Edit|Write|MultiEdit|mcp__(?!marrow__marrow_).*|functions\\.(?!marrow_).*';
-const CURSOR_NATIVE_HOOK_MATCHER = 'Shell|Write|Delete|Task|MCP:(?!marrow(?:_.*|:marrow_.*)$).*';
-const GEMINI_NATIVE_HOOK_MATCHER = '^(?:run_shell_command|write_file|replace|edit_file|delete_file|mcp_(?!marrow_marrow_)[A-Za-z0-9_]{1,192})$';
+const CURSOR_NATIVE_HOOK_MATCHER = 'Shell|Write|Delete|Task|Read|Glob|Grep|Search|WebSearch|List|MCP:(?!marrow(?:_.*|:marrow_.*)$).*';
+const GEMINI_NATIVE_HOOK_MATCHER = '^(?:run_shell_command|write_file|replace|edit_file|delete_file|read_file|read_many_files|glob|grep_search|list_directory|get_file_info|web_search|google_web_search|mcp_(?!marrow_marrow_)[A-Za-z0-9_]{1,192})$';
 const GROK_NATIVE_HOOK_MATCHER = 'run_terminal_command|search_replace|write|spawn_subagent|use_tool|workflow|image_gen|image_edit|image_to_video|reference_to_video';
 const CODEX_HOOK_TIMEOUT_SECONDS = 5;
 const CODEX_SESSION_TIMEOUT_SECONDS = 3;
@@ -703,6 +711,7 @@ function sourceClient() {
 function parseArgs(argv, env = process.env) {
   const options = {
     cwd: process.cwd(),
+    home: env.HOME || env.USERPROFILE || os.homedir(),
     yes: false,
     dryRun: false,
     doctor: false,
@@ -713,6 +722,7 @@ function parseArgs(argv, env = process.env) {
     agentId: env.MARROW_FLEET_AGENT_ID || env.MARROW_AGENT_ID || '',
     toolProfile: resolveToolProfile(env.MARROW_TOOL_PROFILE),
     selfTest: true,
+    loopGuardSelfTest: true,
     selfTestExplicitlyDisabled: false,
     json: false,
     activate: false,
@@ -866,6 +876,32 @@ function safeRead(filePath) {
   return exists(filePath) ? fs.readFileSync(filePath, 'utf8') : '';
 }
 
+function assertSafeGrokHookTarget(homePath, targetPath) {
+  const home = path.resolve(homePath);
+  const target = path.resolve(targetPath);
+  const expected = path.join(home, '.grok', 'hooks', 'marrow.json');
+  if (target !== expected) throw new Error('Refusing Grok hook write outside the direct owner hook path');
+  const uid = typeof process.getuid === 'function' ? process.getuid() : null;
+  const checkDirectory = (directory) => {
+    if (!exists(directory)) return;
+    const stat = fs.lstatSync(directory);
+    if (!stat.isDirectory() || stat.isSymbolicLink()
+      || (uid !== null && stat.uid !== uid) || (stat.mode & 0o022) !== 0) {
+      throw new Error(`Refusing Grok hook write through unsafe owner path: ${directory}`);
+    }
+  };
+  checkDirectory(home);
+  checkDirectory(path.join(home, '.grok'));
+  checkDirectory(path.join(home, '.grok', 'hooks'));
+  if (exists(target)) {
+    const stat = fs.lstatSync(target);
+    if (!stat.isFile() || stat.isSymbolicLink()
+      || (uid !== null && stat.uid !== uid) || (stat.mode & 0o022) !== 0) {
+      throw new Error('Refusing Grok hook write to unsafe owner file');
+    }
+  }
+}
+
 function findUp(startDir, names, maxDepth = 8) {
   let dir = path.resolve(startDir);
   for (let depth = 0; depth <= maxDepth; depth += 1) {
@@ -916,6 +952,7 @@ function detectEnvironment(cwd = process.cwd(), env = process.env) {
 
   return {
     root,
+    home,
     paths,
     node: exists(paths.packageJson),
     python: exists(paths.pyproject) || exists(paths.requirements) || exists(paths.setupPy),
@@ -2031,7 +2068,9 @@ function activationProfile(detection, plan, changes, client) {
       ? 'Restart Grok, inspect the installed global hooks with /hooks, and confirm they are enabled. Configuration remains client-self-reported and does not verify observed coverage.'
       : null
     : capabilityLevel === 'sdk_passive_runtime' && !sdkDependency.present
-    ? `${sdkDependency.install_command} && npx @getmarrow/install --repair`
+    ? sdkDependency.install_command
+      ? `${sdkDependency.install_command} && npx @getmarrow/install --repair`
+      : sdkDependency.warning
     : capabilityLevel === 'governed_wrapper'
     ? `npx @getmarrow/install run --agent <agent-id> -- ${client}`
     : client === 'cline' && clineConflicts.length > 0
@@ -2052,6 +2091,9 @@ function activationProfile(detection, plan, changes, client) {
     passive_live: false,
     configuration_complete: complete,
     complete,
+    loop_guard_configured: capabilityLevel === 'native_hooks' && complete,
+    loop_guard_self_tested: false,
+    loop_guard_observed: false,
     exact_fix: exactFix,
     ...(client === 'cline' ? {
       hook_conflicts: clineConflicts,
@@ -2150,10 +2192,12 @@ function inspectSdkDependency(detection) {
     || objectTargetsSdk(packageJson.resolutions)
     || objectTargetsSdk(packageJson.pnpm?.overrides);
   let lockVerified = false;
+  let lockedVersion = null;
   try {
     const lock = JSON.parse(safeRead(path.join(detection.root, 'package-lock.json')) || '{}');
     const rootLock = lock?.packages?.[''];
     const lockedSdk = lock?.packages?.['node_modules/@getmarrow/sdk'];
+    lockedVersion = typeof lockedSdk?.version === 'string' ? lockedSdk.version : null;
     const lockedDeclaration = [
       rootLock?.dependencies,
       rootLock?.devDependencies,
@@ -2183,9 +2227,16 @@ function inspectSdkDependency(detection) {
     installedVersion = null;
     installedName = null;
   }
-  const declarationTrusted = typeof declaredSpec === 'string'
-    && declaredSpec.trim().length > 0
-    && /^[v0-9xX*<>=~^|.\s-]+$/.test(declaredSpec.trim());
+  const declaredLowerBound = declaredStableSdkLowerBound(declaredSpec);
+  const declarationTrusted = declaredLowerBound !== null;
+  const unsupportedDeclaration = declaredSpec !== null && !declarationTrusted;
+  const declaredComparison = declaredLowerBound
+    ? compareMcpVersions(declaredLowerBound.version, SDK_ADAPTER_VERSION) : null;
+  const declaredAhead = declaredComparison !== null
+    && (declaredComparison > 0 || (declaredLowerBound.exclusive && declaredComparison === 0));
+  const aheadVersions = [installedVersion, lockedVersion]
+    .filter((version) => compareMcpVersions(version, SDK_ADAPTER_VERSION) > 0);
+  const aheadUnverified = aheadVersions.length > 0 || declaredAhead;
   const present = declarationTrusted
     && !overrideDetected
     && lockVerified
@@ -2201,8 +2252,15 @@ function inspectSdkDependency(detection) {
     lock_verified: lockVerified,
     installed_name: installedName,
     installed_version: installedVersion,
+    ahead_unverified: aheadUnverified,
     expected_version: SDK_ADAPTER_VERSION,
-    install_command: present ? null : `npm install @getmarrow/sdk@${SDK_ADAPTER_VERSION}`,
+    install_command: present || aheadUnverified || unsupportedDeclaration
+      ? null : `npm install @getmarrow/sdk@${SDK_ADAPTER_VERSION}`,
+    ...(aheadUnverified ? {
+      warning: 'A newer SDK version is configured or installed. Preserve it and verify its exact version and integrity against the official npm registry before changing it.',
+    } : unsupportedDeclaration ? {
+      warning: 'The configured SDK version range is unsupported or ambiguous. Preserve it and verify the intended version against the official npm registry before changing it.',
+    } : {}),
   };
 }
 
@@ -2396,12 +2454,14 @@ function buildPlan(detection, options) {
         transform: (filePath) => retarget(upsertGeminiHooks(filePath)),
       });
     }
-    if (options.update && detection.grok && managedGrokHooksFile(detection.paths.grokHooks)) {
+    if (detection.grok) {
       writes.push({
-        type: 'json-transform',
+        type: 'managed-json-transform',
         path: detection.paths.grokHooks,
-        root: path.resolve(detection.paths.grokHooks, '..', '..', '..'),
+        root: detection.home,
         label: 'Grok native hooks',
+        isManaged: managedGrokHooksFile,
+        conflict_fix: 'Preserve or move the unmanaged owner Grok hook file after owner review, then rerun npx @getmarrow/install update.',
         transform: (filePath) => retarget(upsertGrokHooks(filePath)),
       });
     }
@@ -2508,6 +2568,9 @@ function applyPlan(plan, options) {
   if (!Array.isArray(plan?.writes) || plan.writes.length === 0) return [];
   const root = path.resolve(plan.root || path.dirname(plan.writes[0].path));
   for (const write of plan.writes) {
+    if (write.label === 'Grok native hooks') {
+      assertSafeGrokHookTarget(path.resolve(write.root), write.path);
+    }
     assertContainedManagedTarget(path.resolve(write.root || root), write.path);
   }
   const prepared = plan.writes.map((write) => {
@@ -2535,6 +2598,13 @@ function applyPlan(plan, options) {
       after = upsertBlock(before, write.block);
     } else if (write.type === 'json-transform') {
       after = write.transform(write.path);
+    } else if (write.type === 'managed-json-transform') {
+      if (fileExists && !write.isManaged(write.path)) {
+        after = before;
+        hookConflict = true;
+      } else {
+        after = write.transform(write.path);
+      }
     } else if (write.type === 'owned-executable') {
       if (fileExists && before !== write.content) {
         after = before;
@@ -2614,6 +2684,63 @@ async function requestJson(url, options) {
   return json.data || json;
 }
 
+function runLoopGuardSelfTest(options = {}) {
+  const target = executableMcpTarget(options);
+  const isolatedHome = fs.mkdtempSync(path.join(os.tmpdir(), 'marrow-install-loop-guard-'));
+  const command = process.platform === 'win32' ? 'npx.cmd' : 'npx';
+  const args = ['-y', `--package=@getmarrow/mcp@${target.version}`, 'marrow-mcp', 'loop-guard-self-test'];
+  try {
+    const invocation = {
+      command,
+      args,
+      cwd: isolatedHome,
+      env: {
+        ...process.env,
+        HOME: isolatedHome,
+        USERPROFILE: isolatedHome,
+        MARROW_API_KEY: '',
+        MARROW_KEY: '',
+      },
+      encoding: 'utf8',
+      timeout: 15_000,
+      maxBuffer: 16 * 1024,
+    };
+    const result = typeof options.loopGuardSelfTestRunner === 'function'
+      ? options.loopGuardSelfTestRunner(invocation)
+      : spawnSync(command, args, invocation);
+    if (!result || result.error || result.status !== 0) {
+      const reason = result?.error?.message || String(result?.stderr || '').trim() || `exit ${result?.status ?? 'unknown'}`;
+      throw new Error(`MCP ${target.version} isolated loop-guard self-test failed: ${reason.slice(0, 300)}`);
+    }
+    let proof;
+    try {
+      proof = JSON.parse(String(result.stdout || ''));
+    } catch {
+      throw new Error(`MCP ${target.version} isolated loop-guard self-test returned invalid JSON`);
+    }
+    const valid = proof && !Array.isArray(proof)
+      && proof.pass === true
+      && proof.isolated === true
+      && proof.live_hook_observed === false
+      && proof.repeat_denied === true
+      && proof.mutation_reset === true
+      && proof.owner_disabled_bypass === true;
+    if (!valid) throw new Error(`MCP ${target.version} isolated loop-guard self-test returned incomplete proof`);
+    return {
+      attempted: true,
+      passed: true,
+      isolated: true,
+      mcp_version: target.version,
+      repeat_denied: true,
+      mutation_reset: true,
+      owner_disabled_bypass: true,
+      live_hook_observed: false,
+    };
+  } finally {
+    fs.rmSync(isolatedHome, { recursive: true, force: true });
+  }
+}
+
 function isCanonicalTimestamp(value) {
   if (typeof value !== 'string' || value.length === 0) return false;
   const parsed = Date.parse(value);
@@ -3017,11 +3144,21 @@ function printReport(report) {
   for (const change of report.changes) {
     const marker = change.automatic_repair_suppressed
       ? 'preserved unverified-ahead surface; repair suppressed'
+      : change.hook_conflict ? 'preserved unmanaged owner file; review required'
       : change.applied ? 'wrote' : change.changed ? 'would write' : 'unchanged';
     process.stdout.write(`- ${marker}: ${change.label} (${change.path})\n`);
     if (change.automatic_repair_suppressed && change.exact_fix) {
       process.stdout.write(`  exact verification: ${change.exact_fix}\n`);
     }
+    if (change.hook_conflict && change.exact_fix) process.stdout.write(`  exact fix: ${change.exact_fix}\n`);
+  }
+
+  process.stdout.write('\nLocal session loop guard:\n');
+  process.stdout.write(`- configured: ${report.loop_guard_configured ? 'yes' : 'no'}\n`);
+  process.stdout.write(`- isolated self-test passed: ${report.loop_guard_self_tested ? 'yes' : 'no'}\n`);
+  process.stdout.write(`- observed in a reloaded host: ${report.loop_guard_observed ? 'yes' : 'no'}\n`);
+  if (!report.loop_guard_observed) {
+    process.stdout.write('- next: restart the host and complete its hook trust/review step before relying on live enforcement\n');
   }
 
   process.stdout.write('\nSelf-test:\n');
@@ -3145,7 +3282,7 @@ function printReport(report) {
 
   if (report.sdkDependency?.required) {
     process.stdout.write('\nSDK dependency:\n');
-    process.stdout.write(`- @getmarrow/sdk: ${report.sdkDependency.present ? 'present' : 'missing'}\n`);
+    process.stdout.write(`- @getmarrow/sdk: ${report.sdkDependency.present ? 'present' : report.sdkDependency.ahead_unverified ? 'newer version requires verification' : 'missing'}\n`);
     if (report.sdkDependency.install_command) process.stdout.write(`- exact fix: ${report.sdkDependency.install_command}\n`);
     if (report.sdkDependency.warning) process.stdout.write(`- warning: ${report.sdkDependency.warning}\n`);
   }
@@ -3169,6 +3306,9 @@ function printReport(report) {
     process.stdout.write(`- missing env: ${report.doctor.missingEnv.length ? report.doctor.missingEnv.join(', ') : 'none'}\n`);
     if (report.doctor.envHints.length) process.stdout.write(`- possible env files: ${report.doctor.envHints.join(', ')}\n`);
     process.stdout.write(`- missing hooks/config: ${report.doctor.missingHooks.length ? report.doctor.missingHooks.join('; ') : 'none'}\n`);
+    process.stdout.write(`- loop guard configured: ${report.doctor.loop_guard_configured ? 'yes' : 'no'}\n`);
+    process.stdout.write(`- loop guard isolated self-test: ${report.doctor.loop_guard_self_tested ? 'passed' : 'not passed'}\n`);
+    process.stdout.write(`- loop guard observed after reload/trust: ${report.doctor.loop_guard_observed ? 'yes' : 'no'}\n`);
     if (report.doctor.mcpProcesses?.available) {
       const processes = report.doctor.mcpProcesses;
       process.stdout.write(`- MCP process versions: ${processes.active_versions.length ? processes.active_versions.join(', ') : processes.active_processes ? 'unknown' : 'none'}\n`);
@@ -3219,7 +3359,11 @@ async function install(options) {
   options.toolProfile = resolveToolProfile(options.toolProfile === undefined
     ? process.env.MARROW_TOOL_PROFILE
     : options.toolProfile);
-  const detection = detectEnvironment(options.cwd);
+  const detection = detectEnvironment(options.cwd, {
+    ...process.env,
+    HOME: options.home || options.cwd,
+    USERPROFILE: options.home || options.cwd,
+  });
   const client = detectedClient(detection);
   options.client = client;
   options.agentId = String(options.agentId || '').trim() || stableAgentId(detection.root, client);
@@ -3240,6 +3384,28 @@ async function install(options) {
   const writeMode = options.doctor ? 'doctor' : options.dryRun ? 'dry-run' : options.repair ? 'repair' : options.yes ? 'write' : 'dry-run';
   const changes = applyPlan(plan, options);
   let profile = activationProfile(detection, plan, changes, client);
+  const localControl = localControlEvidence({
+    apiKey: options.apiKey,
+    home: options.controlHome || options.home || detection.home,
+  });
+  const loopGuardConfigured = profile.capability_level === 'native_hooks'
+    && profile.configuration_complete === true;
+  const loopGuardSelfTest = options.loopGuardSelfTest === true && !options.dryRun
+    ? runLoopGuardSelfTest(options)
+    : {
+      attempted: false,
+      passed: false,
+      isolated: true,
+      mcp_version: mcpTarget.version,
+      live_hook_observed: false,
+    };
+  profile = {
+    ...profile,
+    loop_guard_configured: loopGuardConfigured,
+    loop_guard_self_tested: loopGuardSelfTest.passed === true,
+    loop_guard_observed: false,
+    loop_guard_enabled: localControl.enabled === true,
+  };
   options.activation = options.activate ? {
     harness: client,
     agent_id: options.agentId,
@@ -3368,7 +3534,6 @@ async function install(options) {
   const changedConfig = changes.some((change) => change.applied) || configRepairs.some((repair) => repair.changed);
   const selfTestPassed = Boolean(!selfTest.skipped && selfTest.active && !selfTest.error);
   const controllerPlatform = options.controllerPlatform || process.platform;
-  const localControl = localControlEvidence({ apiKey: options.apiKey, home: options.controlHome });
   let controller = await controllerStatus({
     root: detection.root,
     agentId: options.agentId,
@@ -3453,6 +3618,10 @@ async function install(options) {
       receipt: selfTest.activation_receipt || null,
       profile,
     },
+    loop_guard_configured: loopGuardConfigured,
+    loop_guard_self_tested: loopGuardSelfTest.passed === true,
+    loop_guard_observed: false,
+    loop_guard: loopGuardSelfTest,
     harnessReload,
     firstCapture: firstCapturePath(detection, options.agentId),
     changes,
@@ -3470,6 +3639,9 @@ async function install(options) {
       restart_required: mcpUpdateRequired || updateAwaitingRestart,
       restart_instruction: mcpUpdateRequired || updateAwaitingRestart ? INSTALLER_RESTART_INSTRUCTION : null,
       verification_command: mcpUpdateRequired || updateAwaitingRestart ? INSTALLER_DOCTOR_COMMAND : null,
+      loop_guard_configured: loopGuardConfigured,
+      loop_guard_self_tested: loopGuardSelfTest.passed === true,
+      loop_guard_observed: false,
       recommendedFix: registryVerificationAction
         || (updateAwaitingRestart ? INSTALLER_RESTART_INSTRUCTION : null)
         || mcpProcesses.exact_fix || mcpConfigurations.exact_fix || configDiagnostics.npm_token.recommended_fix || (!options.apiKey
@@ -3525,6 +3697,7 @@ module.exports = {
   applyPlan,
   install,
   runSelfTest,
+  runLoopGuardSelfTest,
   runCli,
   passiveRuntimeSource,
   inspectNpmTokenConfig,
@@ -3547,6 +3720,9 @@ module.exports = {
   GROK_ACTION_RESULT_HOOK_COMMAND,
   GROK_SESSION_END_HOOK_COMMAND,
   GROK_NATIVE_HOOK_MATCHER,
+  NATIVE_HOOK_MATCHER,
+  CURSOR_NATIVE_HOOK_MATCHER,
+  GEMINI_NATIVE_HOOK_MATCHER,
   printReport,
   buildMcpToolProfileReport,
   resolveMcpTargetVersion,