@mmnto/cli 1.123.0 → 2.0.0

package/dist/commands/doctor.d.ts

@@ -50,19 +50,25 @@ export declare function doctorGateFailed(results: readonly DiagnosticResult[], t
 export declare function checkConfig(cwd: string): DiagnosticResult;
 export declare function checkCompiledRules(cwd: string, totemDir?: string): DiagnosticResult;
 /**
- * Sense the four managed git hooks.
+ * Sense the four managed git hooks — presence AND currency.
  *
- * Marker-presence only on the default `totemDir` — the always-on, zero-cost
- * shape this row has always had. When the repo CONFIGURES a different
- * `totemDir` (mmnto-ai/totem#2692 C6), the row additionally regenerates the
- * canonical four and compares whole-file: a hook still naming `.totem/` there
- * reads its evidence and its gate flags out of a tree nothing writes, and
- * `doctor --parity` — which would otherwise catch it — is pin-gated behind
- * `orient.parityManifest`. Sensor, never a gate: the non-pass state stays
- * `warn`, with the same remediation the parity row emits.
+ * Presence is the marker check it has always been. Currency (mmnto-ai/totem#2753)
+ * regenerates the canonical four from the running `@mmnto/cli` at this repo's
+ * effective `totemDir` and compares each hook's MANAGED BLOCK against it, on EVERY
+ * install. Until mmnto-ai/totem#2753 the compare ran only when the repo configured a NON-default
+ * `totemDir` (mmnto-ai/totem#2692 C6) — so on the overwhelmingly common default the
+ * row reported presence and called a hook frozen at an older template "installed"
+ * (measured: `totem doctor` printed "All 4 hooks installed" over two 1.121.0 hooks
+ * under a 1.123.0 CLI, mmnto-ai/liquid-city#1174). Presence was never the question
+ * the row is asked.
+ *
+ * Sensor, never a gate: the non-pass state stays `warn`, with the remediation that
+ * actually fits the file's shape — including the one-command `totem hook install`
+ * for a block whose attested extension the installer now carries through.
  *
  * `config` is threaded from `doctorCommand`'s single config load — this check
- * never opens the config itself.
+ * never opens the config itself. Its `totemDir` may be undefined; the compare runs
+ * against the installer's default in that case rather than being skipped.
  */
 export declare function checkGitHooks(cwd: string, config?: {
     totemDir?: string;

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAOhE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAID;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAAqB,CAAC;AAEpE;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GACnC,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAUjC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAIhG;AAyBD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAiBzD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,gBAAgB,CAiCrF;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAA;KAAE,CAAA;CAAE,GACvE,OAAO,CAAC,gBAAgB,CAAC,CA0G3B;AA8HD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8HhF;AAsBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAiGlE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAAC,MAAM,CAAC,EAAE;IACzC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0B5B;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,gBAAgB,CA4C/E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CA4GhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,CA8E3B;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,gBAAgB,CAyB1F;AAID;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAC6B,CAAC;AAErE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAyEpE;AAID;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAoEpC;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAyC3B;AA2CD,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,mFAAmF;AACnF,eAAO,MAAM,UAAU,IAAI,CAAC;AAI5B,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAIpC,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAID;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;IAClC,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,KAAK,EAAE;QACL,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,EACnB,UAAU,GAAE;IAAE,eAAe,EAAE,MAAM,CAAA;CAA4B,GAChE,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CA+DtC;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,EACnB,UAAU,CAAC,EAAE;IAAE,eAAe,EAAE,MAAM,CAAA;CAAE,GACvC,OAAO,CAAC,gBAAgB,CAAC,CA6C3B;AAID;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEhG,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,0BAA0B,EAAE,GAAG,IAAI,CAAC,CA0D9C;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAwD3B;AAID,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;CACxD;AAKD,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmY/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6D9F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,KAAK,GAAE;IACL,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACf,GACL,OAAO,CAAC,gBAAgB,CAAC,CAqK3B;AAID,wBAAsB,aAAa,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAqG5F"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAOhE,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,WAAW,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,IAAI,CAAC;CACnB;AAID;;;;;;;;;GASG;AACH,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC;AAEzC,eAAO,MAAM,YAAY,EAAE,SAAS,UAAU,EAAqB,CAAC;AAEpE;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,GACnC,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC,CAUjC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,SAAS,gBAAgB,EAAE,EAAE,IAAI,EAAE,UAAU,GAAG,OAAO,CAIhG;AAyBD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAiBzD;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,gBAAgB,CAiCrF;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAsB,aAAa,CACjC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,UAAU,CAAA;KAAE,CAAA;CAAE,GACvE,OAAO,CAAC,gBAAgB,CAAC,CAoL3B;AAiMD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA8HhF;AAsBD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAiGlE;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,WAAW,CAAC,MAAM,CAAC,EAAE;IACzC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0B5B;AAED,wBAAgB,UAAU,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAa,GAAG,gBAAgB,CA4C/E;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CA4GhE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,iBAAiB,CACrC,GAAG,EAAE,MAAM,EACX,MAAM,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACjC,OAAO,CAAC,gBAAgB,CAAC,CAiC3B;AAED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,CA8E3B;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,gBAAgB,CAyB1F;AAID;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,MAAM,CAAC;AAEhD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,QAC6B,CAAC;AAErE,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAyEpE;AAID;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,EAAE,GAAG,IAAI,CAAC,CAoEpC;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAyC3B;AA2CD,4FAA4F;AAC5F,eAAO,MAAM,gBAAgB,MAAM,CAAC;AAEpC,mFAAmF;AACnF,eAAO,MAAM,UAAU,IAAI,CAAC;AAI5B,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,MAAM,CAAC;AAEtC,4FAA4F;AAC5F,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAIpC,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;CACtB;AAID;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,UAAU,GAAG,UAAU,CAAC;IAClC,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB,uDAAuD;IACvD,KAAK,EAAE;QACL,UAAU,CAAC,EAAE,OAAO,CAAC;QACrB,SAAS,CAAC,EAAE,OAAO,CAAC;QACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;KACnB,CAAC;CACH;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,cAAc,CAClC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,EACnB,UAAU,GAAE;IAAE,eAAe,EAAE,MAAM,CAAA;CAA4B,GAChE,OAAO,CAAC,kBAAkB,EAAE,GAAG,IAAI,CAAC,CA+DtC;AAED;;;;;;GAMG;AACH,wBAAsB,eAAe,CACnC,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,EACnB,UAAU,CAAC,EAAE;IAAE,eAAe,EAAE,MAAM,CAAA;CAAE,GACvC,OAAO,CAAC,gBAAgB,CAAC,CA6C3B;AAID;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AAEjE,MAAM,MAAM,uBAAuB,GAAG,oBAAoB,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAEhG,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,sEAAsE;IACtE,OAAO,EAAE,uBAAuB,EAAE,CAAC;IACnC,oFAAoF;IACpF,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,wBAAsB,4BAA4B,CAChD,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,0BAA0B,EAAE,GAAG,IAAI,CAAC,CA0D9C;AAED;;;;;;GAMG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,MAAM,EACX,QAAQ,SAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,CAwD3B;AAID,MAAM,WAAW,aAAa;IAC5B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb;;;;;;;;;;;OAWG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC;CACxD;AAKD,wBAAsB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAmY/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,YAAY,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA6D9F;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,WAAW,CAC/B,KAAK,GAAE;IACL,QAAQ,CAAC,EAAE,aAAa,CAAC;IACzB,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;OAKG;IACH,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACf,GACL,OAAO,CAAC,gBAAgB,CAAC,CAqK3B;AAID,wBAAsB,aAAa,CAAC,OAAO,GAAE,aAAkB,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAqG5F"}

package/dist/commands/doctor.js

@@ -109,19 +109,25 @@ export function checkCompiledRules(cwd, totemDir = '.totem') {
     }
 }
 /**
- * Sense the four managed git hooks.
+ * Sense the four managed git hooks — presence AND currency.
  *
- * Marker-presence only on the default `totemDir` — the always-on, zero-cost
- * shape this row has always had. When the repo CONFIGURES a different
- * `totemDir` (mmnto-ai/totem#2692 C6), the row additionally regenerates the
- * canonical four and compares whole-file: a hook still naming `.totem/` there
- * reads its evidence and its gate flags out of a tree nothing writes, and
- * `doctor --parity` — which would otherwise catch it — is pin-gated behind
- * `orient.parityManifest`. Sensor, never a gate: the non-pass state stays
- * `warn`, with the same remediation the parity row emits.
+ * Presence is the marker check it has always been. Currency (mmnto-ai/totem#2753)
+ * regenerates the canonical four from the running `@mmnto/cli` at this repo's
+ * effective `totemDir` and compares each hook's MANAGED BLOCK against it, on EVERY
+ * install. Until mmnto-ai/totem#2753 the compare ran only when the repo configured a NON-default
+ * `totemDir` (mmnto-ai/totem#2692 C6) — so on the overwhelmingly common default the
+ * row reported presence and called a hook frozen at an older template "installed"
+ * (measured: `totem doctor` printed "All 4 hooks installed" over two 1.121.0 hooks
+ * under a 1.123.0 CLI, mmnto-ai/liquid-city#1174). Presence was never the question
+ * the row is asked.
+ *
+ * Sensor, never a gate: the non-pass state stays `warn`, with the remediation that
+ * actually fits the file's shape — including the one-command `totem hook install`
+ * for a block whose attested extension the installer now carries through.
  *
  * `config` is threaded from `doctorCommand`'s single config load — this check
- * never opens the config itself.
+ * never opens the config itself. Its `totemDir` may be undefined; the compare runs
+ * against the installer's default in that case rather than being skipped.
  */
 export async function checkGitHooks(cwd, config) {
     const gitRoot = resolveGitRoot(cwd);
@@ -171,39 +177,95 @@ export async function checkGitHooks(cwd, config) {
         missing.push(file);
     }
     if (missing.length === 0) {
-        const sensed = await hooksRenderedForWrongTotemDir(gitRoot, hooksDir, config);
-        if (!Array.isArray(sensed)) {
+        const sensed = await hooksStaleAgainstCanonical(gitRoot, hooksDir, config);
+        if (sensed.kind === 'unavailable') {
             // The sensor could not run (a builder threw, a hook file was unreadable):
             // say so, never pass on an unexamined tree (Greptile P1 on mmnto-ai/totem#2701).
             return {
                 name: 'Git Hooks',
                 status: 'warn',
-                message: `All ${markers.length} hooks installed, but they could not be compared against the canonical rendered for totemDir '${config?.totemDir}': ${sensed.failure}`,
+                message: `All ${markers.length} hooks installed, but they could not be compared against the canonical rendered for totemDir '${sensed.totemDir}': ${sensed.failure}`,
                 remediation: 'totem hook install --force (re-renders the four hooks from the current config)',
             };
         }
-        const staleForTotemDir = sensed;
-        if (staleForTotemDir.length > 0) {
-            const files = staleForTotemDir.map((row) => row.file);
-            // `--force` rewrites the WHOLE file (`installGitHook`): the right remedy for
-            // a totem-owned whole file, and the ONE remedy install-hooks.ts prescribes
-            // for a LEGACY hook (no end marker — drift-repair cannot bound it); the
-            // wrong remedy for a user hook with an APPENDED block, which would lose its
-            // own lines to it (mmnto-ai/totem#2692 amendments A4 / A10).
-            const appended = staleForTotemDir.filter((row) => row.kind === 'appended').map((r) => r.file);
-            const legacy = staleForTotemDir.filter((row) => row.kind === 'legacy').map((r) => r.file);
+        const stale = sensed.stale;
+        if (stale.length > 0) {
+            const files = stale.map((row) => row.file);
+            // The remedy follows the file's SHAPE, because the four shapes take four
+            // different cures (mmnto-ai/totem#2692 amendments A4 / A10, mmnto-ai/totem#2753):
+            //   owned-whole / legacy  → `--force`: it rewrites the WHOLE file, which is
+            //                           right for a file totem authored and the ONE cure
+            //                           install-hooks.ts prescribes for an unboundable
+            //                           legacy hook.
+            //   appended-attested     → bare `totem hook install`: the block is rewritten
+            //                           in place and the attested extension survives, so
+            //                           `--force` would needlessly destroy it.
+            //   appended              → neither: `--force` would eat the user's own lines,
+            //                           so the block is deleted and re-appended by hand.
+            //   non-utf8              → an attested-extension hook whose MANAGED REGION does
+            //                           not decode as UTF-8: the installer reports that
+            //                           shape and leaves the file alone, so prescribing the
+            //                           bare install would be inert (mmnto-ai/totem#2760
+            //                           leg F13) — re-save as UTF-8, or `--force`.
+            const attested = stale.filter((row) => row.kind === 'appended-attested').map((r) => r.file);
+            const nonUtf8 = stale.filter((row) => row.kind === 'non-utf8').map((r) => r.file);
+            const appended = stale.filter((row) => row.kind === 'appended').map((r) => r.file);
+            const legacy = stale.filter((row) => row.kind === 'legacy').map((r) => r.file);
+            const forceable = stale
+                .filter((row) => row.kind === 'owned-whole' || row.kind === 'legacy')
+                .map((r) => r.file);
+            // One clause per shape present, each naming its own files unless it covers
+            // every stale hook (then the bare command reads cleaner).
+            const clauses = [];
+            // The `--force` clause names its files whenever it does not cover all of them.
+            // The note drops its own names ONLY when that clause named exactly the legacy
+            // files — there the repetition ("…--force for pre-commit (pre-commit: a legacy
+            // hook…)") reads as two hooks where there is one. When the clause names a
+            // WIDER set, the note must keep the names or the reader cannot tell WHICH of
+            // the listed hooks is the legacy one (fold F6, narrowed on fold 3 F5).
+            const forceClauseNamesFiles = forceable.length !== files.length;
+            const forceClauseNamesOnlyLegacy = forceClauseNamesFiles && forceable.length === legacy.length;
+            const legacyKind = legacy.length === 1
+                ? 'a legacy hook with no end marker'
+                : 'legacy hooks with no end marker';
             const legacyNote = legacy.length === 0
                 ? ''
-                : ` (${legacy.join(', ')}: a legacy hook with no end marker — back up any lines of your own first)`;
-            const remediation = appended.length === 0
-                ? `totem hook install --force${legacyNote}`
-                : `delete the totem block (from its start marker through its end marker) in ${appended.join(', ')} and re-run \`totem hook install\` to re-append it${appended.length === files.length
-                    ? ''
-                    : `; \`totem hook install --force\` for the rest${legacyNote}`} — \`--force\` rewrites the whole file and would overwrite your own hook content`;
+                : forceClauseNamesOnlyLegacy
+                    ? ` (${legacyKind} — back up any lines of your own first)`
+                    : ` (${legacy.join(', ')}: ${legacyKind} — back up any lines of your own first)`;
+            if (appended.length > 0) {
+                clauses.push(`delete the totem block (from its start marker through its end marker) in ${appended.join(', ')} and re-run \`totem hook install\` to re-append it`);
+            }
+            if (attested.length > 0) {
+                clauses.push(`${clauses.length === 0 ? 'totem hook install' : '`totem hook install`'}${attested.length === files.length ? '' : ` for ${attested.join(', ')}`} (the managed block is rewritten in place; your attested extension after the end marker is carried through unchanged)`);
+            }
+            // The re-save clause sits BEFORE the --force clause and keeps its own tail
+            // inside its parenthetical, so a mixed set never renders two stacked em-dash
+            // tails about `--force` (re-armed leg F19).
+            if (nonUtf8.length > 0) {
+                clauses.push(`re-save ${nonUtf8.join(', ')} as UTF-8 and re-run \`totem hook install\` (the region above the extension — shebang line and managed block — does not decode as UTF-8, so a bare install reports it and leaves the file byte-identical), or take \`totem hook install --force\` for ${nonUtf8.length === 1 ? 'it' : 'them'} (rewrites the whole file and drops your extension)`);
+            }
+            if (forceable.length > 0) {
+                clauses.push(`${clauses.length === 0 ? 'totem hook install --force' : '`totem hook install --force`'}${forceable.length === files.length ? '' : ` for ${forceable.join(', ')}`}${legacyNote}`);
+            }
+            const remediation = clauses.join('; ') +
+                (appended.length > 0
+                    ? ' — `--force` rewrites the whole file and would overwrite your own hook content'
+                    : '');
+            // The headline names the cause. A `non-utf8` row's block may be byte-identical
+            // to the canonical (the bad byte on its shebang line), so "does not match …
+            // the managed block is stale" would be two false statements about it (final
+            // leg, F20): when every flagged hook is that shape the headline says so
+            // instead; a mixed set keeps the stale headline for the stale hooks and
+            // appends the encoding clause naming the others.
+            const encodingCause = 'the region above the extension (shebang line and managed block) does not decode as UTF-8';
+            const message = nonUtf8.length === files.length
+                ? `All ${markers.length} hooks installed, but ${files.join(', ')} cannot be kept current by this @mmnto/cli for totemDir '${sensed.totemDir}' — ${encodingCause}`
+                : `All ${markers.length} hooks installed, but ${files.join(', ')} ${files.length === 1 ? 'does' : 'do'} not match the canonical this @mmnto/cli renders for totemDir '${sensed.totemDir}' — the managed block is stale (a newer hook template, or a config change)${nonUtf8.length > 0 ? `; for ${nonUtf8.join(', ')} ${encodingCause}` : ''}`;
             return {
                 name: 'Git Hooks',
                 status: 'warn',
-                message: `All ${markers.length} hooks installed, but ${files.join(', ')} ${files.length === 1 ? 'does' : 'do'} not match the canonical rendered for totemDir '${config?.totemDir}' — the hook reads a tree Totem does not write`,
+                message,
                 remediation,
             };
         }
@@ -236,33 +298,40 @@ function totemOwnedBlock(text, marker, endMarker) {
     return text.slice(start, end + endMarker.length);
 }
 /**
- * The managed hooks whose totem-owned BLOCK differs from the canonical regenerated
- * at this repo's CONFIGURED `totemDir` (mmnto-ai/totem#2692 C6, amendment A4).
+ * The managed hooks whose totem-owned BLOCK differs from the canonical this
+ * `@mmnto/cli` regenerates at the repo's effective `totemDir`.
+ *
+ * Runs on EVERY install (mmnto-ai/totem#2753). It used to run only where the repo
+ * configured a NON-default `totemDir` (mmnto-ai/totem#2692 C6) — which made the
+ * default-`totemDir` majority a blind spot: a hook frozen at an older template read
+ * as healthy, because presence was all that was checked. The effective dir is the
+ * configured value, else `install-hooks`'s own `DEFAULT_TOTEM_DIR`, so `.totem` is
+ * compared like any other value instead of short-circuiting.
  *
- * Runs ONLY when the repo configures a non-default `totemDir` — on the default
- * the row stays the marker-only, zero-IO sense it has always been. Compares the
- * region between the hook's start and end markers, the same bounded region
- * `installGitHook`'s drift-repair owns, so a user hook with an APPENDED totem
- * block is judged on the block alone and never on the user's own lines. Each row
- * says what kind of file it is, because the remedy differs.
+ * Compares the region between the hook's start and end markers, the same bounded
+ * region `installGitHook` owns, so a user hook with an APPENDED totem block is
+ * judged on the block alone and never on the user's own lines. Each row says what
+ * kind of file it is, because the remedy differs.
  *
- * The compare is on the `totemDir` axis ONLY (amendment A10): the canonical for
+ * The tier is NOT an axis of the compare (amendment A10): the canonical for
  * pre-commit / pre-push is rendered at the tier the INSTALLED hook itself
- * declares (`TOTEM_HOOK_TIER="…"`), so a hook installed with `--strict` on a
- * repo whose config says nothing is never reported as `totemDir` drift — and
+ * declares (`TOTEM_HOOK_TIER="…"`, read through the installer's own
+ * `declaredHookTier`: the totem-owned block only, and only a line-leading
+ * assignment — a comment quoting one does not count), so a hook installed with
+ * `--strict` on a repo whose config says nothing is never reported as drift — and
  * never handed a `--force` that would silently downgrade it to standard.
  */
-async function hooksRenderedForWrongTotemDir(gitRoot, hooksDir, config) {
-    const totemDir = config?.totemDir;
-    if (totemDir === undefined || totemDir === '.totem')
-        return [];
+async function hooksStaleAgainstCanonical(gitRoot, hooksDir, config) {
+    let totemDir = config?.totemDir;
     try {
         const hooks = await import('./install-hooks.js');
+        totemDir ??= hooks.DEFAULT_TOTEM_DIR;
         // A value the installer refuses (`.`, a `..` segment, …) never produced
         // installed hooks, so there is no render to compare against: the row stays
         // the marker-only sense — the same policy `doctor --parity` applies.
-        if (hooks.hookTotemDirProblem(totemDir) !== null)
-            return [];
+        if (hooks.hookTotemDirProblem(totemDir) !== null) {
+            return { kind: 'sensed', totemDir, stale: [] };
+        }
         const base = {
             tier: config?.hooks?.tier ?? 'standard',
             totemDir,
@@ -296,13 +365,44 @@ async function hooksRenderedForWrongTotemDir(gitRoot, hooksDir, config) {
         ];
         const stale = [];
         for (const { file, build, marker, endMarker } of canonical) {
-            const existing = fs.readFileSync(path.join(hooksDir, file), 'utf-8');
+            // Raw bytes for the round-trip shape below; the decoded text for the compare.
+            const rawExisting = fs.readFileSync(path.join(hooksDir, file));
+            const existing = rawExisting.toString('utf-8');
             // Everything below reads the TOTEM-OWNED block, never the user's own lines:
             // a user line that happens to carry `TOTEM_HOOK_TIER="…"` or to quote an end
             // marker must not steer the compare or the remedy (pass-2 F3/F4).
             const existingBlock = totemOwnedBlock(existing, marker, endMarker);
-            const installedTier = /TOTEM_HOOK_TIER="(strict|standard)"/.exec(existingBlock)?.[1];
+            // ONE predicate with the installer (`declaredHookTier`): block-scoped, and
+            // only a line-leading assignment counts, so a comment inside the block that
+            // quotes the assignment steers neither arm — a second regex here is how the
+            // two arms came to read the same bytes at different tiers (mmnto-ai/totem#2760
+            // round 1, leg F3).
+            const installedTier = hooks.declaredHookTier(existing, marker, endMarker);
             const content = build({ ...base, tier: installedTier ?? base.tier });
+            // An attested `totem:fork` extension after the end marker is the one trailing
+            // shape a BARE install can now cure, so it must be told apart from the general
+            // appended case BEFORE it — the remedies are opposites (mmnto-ai/totem#2753).
+            // The test is `isTotemOwnedWithAttestedTrailer`, the SAME predicate the install
+            // arm gates its cure on, not merely "bounded and the trailer is attested": that
+            // looser test would also catch a hook with the user's own lines BEFORE the totem
+            // block, which the installer declines because the marker does not OPEN the file
+            // — and the row would then prescribe a bare `totem hook install` that does
+            // nothing. A remedy that does not touch the surface it is prescribed for is an
+            // inert instruction (mmnto-ai/totem#2532); such a file stays `appended` and
+            // takes the delete-and-re-append line, which does work on it.
+            const attestedTrailer = hooks.isTotemOwnedWithAttestedTrailer(existing, marker, endMarker);
+            // The same byte-offset proof the installer's rewrite arm runs, BEFORE the
+            // staleness compare: the proof covers the region above the extension (shebang
+            // line and managed block) while the compare covers the block alone, so a bad
+            // byte on the shebang line leaves the block current yet makes the installer
+            // skip — the row must say so rather than "All hooks installed" (the
+            // one-predicate rule above, applied to the newest shape; mmnto-ai/totem#2760
+            // legs F13 and F16).
+            if (attestedTrailer &&
+                hooks.ownedTrailerByteStart(rawExisting, marker, endMarker) === undefined) {
+                stale.push({ file, kind: 'non-utf8' });
+                continue;
+            }
             if (existingBlock === totemOwnedBlock(content, marker, endMarker)) {
                 continue;
             }
@@ -310,16 +410,24 @@ async function hooksRenderedForWrongTotemDir(gitRoot, hooksDir, config) {
             const boundedAfterStart = startIdx !== -1 && existing.indexOf(endMarker, startIdx + marker.length) !== -1;
             const kind = hooks.isTotemOwnedWholeFile(existing, marker, endMarker)
                 ? 'owned-whole'
-                : boundedAfterStart
-                    ? 'appended'
-                    : 'legacy';
+                : attestedTrailer
+                    ? 'appended-attested'
+                    : boundedAfterStart
+                        ? 'appended'
+                        : 'legacy';
             stale.push({ file, kind });
         }
-        return stale;
+        return { kind: 'sensed', totemDir, stale };
         // totem-context: a sensor that cannot regenerate or read the canonical REPORTS that it could not — the caller renders a warn row — never a silent pass and never a crash of the diagnostic pipeline (Tenet 13; Greptile P1 on mmnto-ai/totem#2701).
     }
     catch (err) {
-        return { failure: err instanceof Error ? err.message : String(err) };
+        return {
+            kind: 'unavailable',
+            // The default comes from the module that failed to load, so it may still be
+            // unresolved here — say so rather than printing `undefined`.
+            totemDir: totemDir ?? 'unresolved',
+            failure: err instanceof Error ? err.message : String(err),
+        };
     }
 }
 /**