@mc-and-his-agents/loom-installer 0.1.30 → 0.1.32

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mc-and-his-agents/loom-installer",
-  "version": "0.1.30",
+  "version": "0.1.32",
   "description": "Node installer for Loom plugin and single-skill installation surfaces.",
   "type": "module",
   "bin": {

package/payload/manifest.json

@@ -2,9 +2,9 @@
   "schema_version": "loom-installer-payload/v1",
   "loom_version": "0.4.0",
   "source_repository": "https://github.com/MC-and-his-Agents/Loom",
-  "source_commit": "5c3a0a7339be746f305853154aef71de6eb2dc79",
+  "source_commit": "3fb64673745f62b2ea76f770c2f2e06cd6192b76",
   "source_ref": "main",
-  "built_at": "2026-04-27T13:52:07+08:00",
+  "built_at": "2026-04-27T14:19:25+08:00",
   "runtime": {
     "python_minimum": "3.10",
     "python_recommended": "3.11+"
@@ -633,13 +633,13 @@
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "plugin/loom/skills/shared/scripts/loom_init.py",
@@ -1223,13 +1223,13 @@
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-adopt/.loom-runtime/shared/scripts/loom_init.py",
@@ -1843,13 +1843,13 @@
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-handoff/.loom-runtime/shared/scripts/loom_init.py",
@@ -2463,13 +2463,13 @@
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-init/.loom-runtime/shared/scripts/loom_init.py",
@@ -3088,13 +3088,13 @@
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-merge-ready/.loom-runtime/shared/scripts/loom_init.py",
@@ -3708,13 +3708,13 @@
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-pre-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -4328,13 +4328,13 @@
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-resume/.loom-runtime/shared/scripts/loom_init.py",
@@ -4948,13 +4948,13 @@
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-retire/.loom-runtime/shared/scripts/loom_init.py",
@@ -5568,13 +5568,13 @@
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-review/.loom-runtime/shared/scripts/loom_init.py",
@@ -6188,13 +6188,13 @@
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_check.py",
-      "bytes": 321273,
-      "sha256": "7cb6094384b6d6c6ad1842e9197e9d1211230adbae068f524ea1c8360bc87712"
+      "bytes": 326062,
+      "sha256": "984cb68a9c5c95e268810b1a6a3c90590bb410b399b2d7ea60efe3da5c377689"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_flow.py",
-      "bytes": 302884,
-      "sha256": "e5ff7344c5d62306ee30254113538739137a175350847ed51e9fff8270c77505"
+      "bytes": 322554,
+      "sha256": "02f9b19b65ad580aaee0431a1f5151ac87a4755c95d4045168efb9624f44a558"
     },
     {
       "path": "skills/loom-spec-review/.loom-runtime/shared/scripts/loom_init.py",

package/payload/plugin/loom/skills/shared/scripts/loom_check.py

@@ -2534,6 +2534,16 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
             ],
             {"pass"},
         ),
+        (
+            "adopt-verify",
+            ["python3", "tools/loom_flow.py", "adopt", "verify", "--target", "examples/new-project", "--item", "INIT-0001"],
+            {"pass"},
+        ),
+        (
+            "carrier-refresh",
+            ["python3", "tools/loom_flow.py", "carrier", "refresh", "--target", "examples/new-project", "--item", "INIT-0001", "--dry-run"],
+            {"pass"},
+        ),
         (
             "governance-profile-status",
             ["python3", "tools/loom_flow.py", "governance-profile", "status", "--target", "examples/new-project"],
@@ -2798,6 +2808,28 @@ def check_daily_execution_cli(root: Path) -> list[Failure]:
                 context="`runtime-parity validate`",
                 payload=payload,
             )
+        if label == "adopt-verify":
+            if payload.get("command") != "adopt" or payload.get("operation") != "verify":
+                failures.append(Failure("daily-execution-cli", "`adopt verify` must report command/operation"))
+            if payload.get("schema_version") != "loom-adoption-verify/v1":
+                failures.append(Failure("daily-execution-cli", "`adopt verify` must report schema v1"))
+            roundtrip = payload.get("producer_consumer_roundtrip")
+            if not isinstance(roundtrip, dict):
+                failures.append(Failure("daily-execution-cli", "`adopt verify` must include producer_consumer_roundtrip"))
+            else:
+                consumer = roundtrip.get("consumer")
+                bypass = roundtrip.get("bypass_check")
+                if not isinstance(consumer, dict) or consumer.get("result") != "pass":
+                    failures.append(Failure("daily-execution-cli", "`adopt verify` generated body must pass consumer validation"))
+                if not isinstance(bypass, dict) or bypass.get("result") != "pass":
+                    failures.append(Failure("daily-execution-cli", "`adopt verify` must prove required section deletion blocks"))
+        if label == "carrier-refresh":
+            if payload.get("command") != "carrier" or payload.get("operation") != "refresh":
+                failures.append(Failure("daily-execution-cli", "`carrier refresh` must report command/operation"))
+            if payload.get("schema_version") != "loom-carrier-refresh/v1":
+                failures.append(Failure("daily-execution-cli", "`carrier refresh` must report schema v1"))
+            if not isinstance(payload.get("actions"), list):
+                failures.append(Failure("daily-execution-cli", "`carrier refresh` must include actions"))
         if label in {"governance-profile-status", "governance-profile-upgrade-plan"}:
             if payload.get("command") != "governance-profile":
                 failures.append(Failure("daily-execution-cli", f"`{label}` must report `command: governance-profile`"))
@@ -6431,6 +6463,43 @@ def check_adversarial_adoption_fixture(root: Path) -> list[Failure]:
         elif payload.get("result") != "block":
             failures.append(Failure("adversarial-adoption", "runtime provenance drift must block runtime-parity"))
 
+        carrier_refresh_target = base / "carrier-refresh"
+        shutil.copytree(baseline, carrier_refresh_target)
+        carrier_manifest_path = carrier_refresh_target / ".loom/bootstrap/manifest.json"
+        carrier_manifest = load_json_file(carrier_manifest_path)
+        carrier_artifacts = carrier_manifest.get("artifacts") if isinstance(carrier_manifest, dict) else []
+        if isinstance(carrier_artifacts, list):
+            for artifact in carrier_artifacts:
+                if isinstance(artifact, dict) and artifact.get("path") == ".loom/bin/loom_flow.py":
+                    artifact["sha256"] = "1" * 64
+                    break
+        write_json(carrier_manifest_path, carrier_manifest)
+        dry_run_payload, dry_run_error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "carrier", "refresh", "--target", str(carrier_refresh_target), "--dry-run"],
+        )
+        if dry_run_error:
+            failures.append(Failure("adversarial-adoption", f"carrier refresh dry-run sample failed: {dry_run_error}"))
+        else:
+            refresh_needed = dry_run_payload.get("refresh_needed")
+            if dry_run_payload.get("result") != "pass" or not isinstance(refresh_needed, list) or not refresh_needed:
+                failures.append(Failure("adversarial-adoption", "carrier refresh dry-run must report runtime provenance refresh-needed"))
+        write_payload, write_error = load_command_json(
+            root,
+            ["python3", "tools/loom_flow.py", "carrier", "refresh", "--target", str(carrier_refresh_target), "--write"],
+        )
+        if write_error:
+            failures.append(Failure("adversarial-adoption", f"carrier refresh write sample failed: {write_error}"))
+        else:
+            after_payload, after_error = load_command_json(
+                root,
+                ["python3", "tools/loom_flow.py", "carrier", "refresh", "--target", str(carrier_refresh_target), "--dry-run"],
+            )
+            if after_error:
+                failures.append(Failure("adversarial-adoption", f"carrier refresh after-write sample failed: {after_error}"))
+            elif after_payload.get("refresh_needed"):
+                failures.append(Failure("adversarial-adoption", "carrier refresh --write must clear runtime provenance drift"))
+
         rollover_target = base / "active-rollover"
         shutil.copytree(baseline, rollover_target)
         payload, error = load_command_json(
@@ -6543,15 +6612,20 @@ def check_node_installer(root: Path) -> list[Failure]:
         ["npm", "test"],
         ["npm", "pack", "--dry-run"],
     )
-    for args in commands:
-        try:
-            result = run_command(root, args, cwd=package_root, timeout_seconds=300)
-        except subprocess.TimeoutExpired:
-            failures.append(Failure(category, f"`{' '.join(args)}` timed out"))
-            continue
-        if result.returncode != 0:
-            detail = result.stderr.strip() or result.stdout.strip() or "command failed without output"
-            failures.append(Failure(category, f"`{' '.join(args)}` failed: {detail}"))
+    with tempfile.TemporaryDirectory(prefix="loom-check-npm-cache-") as cache_dir:
+        npm_env = {
+            "npm_config_cache": cache_dir,
+            "NPM_CONFIG_CACHE": cache_dir,
+        }
+        for args in commands:
+            try:
+                result = run_command(root, args, cwd=package_root, env=npm_env, timeout_seconds=300)
+            except subprocess.TimeoutExpired:
+                failures.append(Failure(category, f"`{' '.join(args)}` timed out"))
+                continue
+            if result.returncode != 0:
+                detail = result.stderr.strip() or result.stdout.strip() or "command failed without output"
+                failures.append(Failure(category, f"`{' '.join(args)}` failed: {detail}"))
     return failures