@mutmutco/cli 3.113.0 → 3.114.0

package/dist/main.cjs

@@ -5001,7 +5001,7 @@ var program = new Command();
 // src/index.ts
 var import_promises11 = require("node:fs/promises");
 var import_node_fs46 = require("node:fs");
-var import_node_child_process19 = require("node:child_process");
+var import_node_child_process20 = require("node:child_process");
 
 // src/cli-shared.ts
 var import_node_child_process3 = require("node:child_process");
@@ -8820,6 +8820,12 @@ var AUTO_UPDATE_TOGGLE_STEPS = "`/plugin` \u2192 Marketplaces tab \u2192 select
 var CATALOG_CONTENT_REF = "main";
 var CATALOG_REF_PIN_STEPS = `add \`"ref": "${CATALOG_CONTENT_REF}"\` to this marketplace's \`source\` in ~/.claude/plugins/known_marketplaces.json, then restart Claude`;
 var PIN_HEAL_COMMAND = "run `mmi-cli doctor`";
+var HOST_RUNNING_REMEDY = "quit Claude Code, then run `mmi-cli doctor`";
+function marketplaceRemedyText(remedy, action, manualSteps) {
+  if (remedy === "manual") return manualSteps;
+  if (remedy === "host-running") return `${HOST_RUNNING_REMEDY} to ${action}`;
+  return `${PIN_HEAL_COMMAND} to ${action}`;
+}
 var ORG_MARKETPLACE_PINS = { autoUpdate: true, ref: CATALOG_CONTENT_REF };
 function resolveCatalogRef(probe) {
   const { name, registered, ref, autoUpdate } = probe;
@@ -8843,7 +8849,7 @@ function resolveCatalogRef(probe) {
     reason: `no ref pinned \u2014 the catalog is served from the repo's default branch while plugin content is pinned to ${CATALOG_CONTENT_REF}`
   };
 }
-function checkMarketplaceAutoUpdate(probe, healable = false) {
+function checkMarketplaceAutoUpdate(probe, remedy = "manual") {
   if (!probe) return null;
   const evidence = [`${probe.name}: auto-update ${probe.effective ? "on" : "off"} \u2014 ${probe.reason}`];
   if (probe.effective) {
@@ -8854,11 +8860,11 @@ function checkMarketplaceAutoUpdate(probe, healable = false) {
     ok: true,
     warn: true,
     label: `marketplace auto-update (${probe.name})`,
-    detail: `off \u2014 this machine will not pick up a new plugin release on its own; ${healable ? `${PIN_HEAL_COMMAND} to turn it on` : `turn it on with ${AUTO_UPDATE_TOGGLE_STEPS}`}`,
+    detail: `off \u2014 this machine will not pick up a new plugin release on its own; ${marketplaceRemedyText(remedy, "turn it on", `turn it on with ${AUTO_UPDATE_TOGGLE_STEPS}`)}`,
     verbose: evidence
   };
 }
-function checkMarketplaceCatalogRef(probe, healable = false) {
+function checkMarketplaceCatalogRef(probe, remedy = "manual") {
   if (!probe) return null;
   const label = `marketplace catalog ref (${probe.name})`;
   const evidence = [`${probe.name}: ${probe.reason}`, `auto-update: ${probe.autoUpdate ? "on" : "off"}`];
@@ -8875,7 +8881,7 @@ function checkMarketplaceCatalogRef(probe, healable = false) {
       // ✗ branch carried it in `fix` only because `renderCheckLine` discarded `detail` on failure — one
       // row, two conventions, decided by which field would actually print.
       detail: `${drift} while auto-update is ON`,
-      fix: `this machine installs plugin releases advertised by a branch nobody released; ${healable ? `${PIN_HEAL_COMMAND} to pin it` : CATALOG_REF_PIN_STEPS}`,
+      fix: `this machine installs plugin releases advertised by a branch nobody released; ${marketplaceRemedyText(remedy, "pin it", CATALOG_REF_PIN_STEPS)}`,
       verbose: evidence
     };
   }
@@ -8884,11 +8890,11 @@ function checkMarketplaceCatalogRef(probe, healable = false) {
     ok: true,
     warn: true,
     label,
-    detail: `${drift} \u2014 harmless while auto-update is off, and the thing to fix before turning it on; ${healable ? `${PIN_HEAL_COMMAND} to pin it` : CATALOG_REF_PIN_STEPS}`,
+    detail: `${drift} \u2014 harmless while auto-update is off, and the thing to fix before turning it on; ${marketplaceRemedyText(remedy, "pin it", CATALOG_REF_PIN_STEPS)}`,
     verbose: evidence
   };
 }
-function marketplaceRows(name, known, settings, healable = false) {
+function marketplaceRows(name, known, settings, remedy = "manual") {
   const { registered, declared, ref } = readKnownMarketplace(known, name);
   const autoUpdate = resolveAutoUpdate({
     name,
@@ -8896,9 +8902,9 @@ function marketplaceRows(name, known, settings, healable = false) {
     declared,
     settingsDeclared: readSettingsAutoUpdate(settings, name)
   });
-  const rows = [checkMarketplaceAutoUpdate(autoUpdate, healable), checkMarketplaceCatalogRef(
+  const rows = [checkMarketplaceAutoUpdate(autoUpdate, remedy), checkMarketplaceCatalogRef(
     resolveCatalogRef({ name, registered, ref, autoUpdate: autoUpdate.effective }),
-    healable
+    remedy
   )];
   return rows.filter((r) => r !== null);
 }
@@ -11210,11 +11216,114 @@ var import_node_path19 = require("node:path");
 
 // src/plugin-guard-io.ts
 var import_node_fs17 = require("node:fs");
-var import_node_child_process6 = require("node:child_process");
+var import_node_child_process7 = require("node:child_process");
 var import_node_path16 = require("node:path");
 var import_node_os5 = require("node:os");
 var import_proper_lockfile = __toESM(require_proper_lockfile(), 1);
 
+// src/npm-self-update.ts
+var import_node_child_process6 = require("node:child_process");
+var import_node_readline = require("node:readline");
+function npmSelfUpdateArgs(spec) {
+  return [
+    "install",
+    "-g",
+    spec,
+    "--no-audit",
+    "--no-fund",
+    "--progress=false",
+    "--loglevel=http",
+    "--prefer-offline"
+  ];
+}
+function packageFromFetchLine(line) {
+  const m = line.match(
+    /GET\s+(?:\d+\s+)?https?:\/\/\S*?\/((?:@[^/\s]+(?:\/|%2[fF]))?[^/\s]+)\/-\/[^/\s]*?-(\d+\.\d+\.\d+[^/\s]*?)\.tgz/u
+  );
+  if (!m) return void 0;
+  return `${m[1].replace(/%2[fF]/u, "/")}@${m[2]}`;
+}
+function narrateNpmLine(line) {
+  const text = line.trim();
+  if (!text) return void 0;
+  if (/^npm\s+warn\s+deprecated\b/iu.test(text)) return void 0;
+  if (/added \d+ packages?|removed \d+ packages?|changed \d+ packages?|up to date/iu.test(text)) return text;
+  const fetched = /\bhttp fetch\b/iu.test(text) ? packageFromFetchLine(text) : void 0;
+  if (fetched) return `downloading ${fetched}`;
+  if (/^npm\s+(warn|error)\b/iu.test(text)) return text;
+  if (/\b(idealTree|resolveWithNewModule|placeDep)\b/u.test(text)) return "resolving dependencies";
+  if (/\bhttp fetch\b/iu.test(text)) return "resolving dependencies";
+  if (/\b(reify|extract|ADDITION|CHANGE)\b/u.test(text)) return "installing packages";
+  if (/\baudit\b/iu.test(text)) return "finishing";
+  return void 0;
+}
+var NPM_LOG_POINTER = /^npm\s+(error|ERR!)\s+A complete log of this run can be found in/iu;
+function npmFailureTail(output, maxLines = 6, maxChars = 500) {
+  const lines = output.split(/\r?\n/u).map((l) => l.trimEnd()).filter((l) => l.trim().length > 0).filter((l) => !NPM_LOG_POINTER.test(l.trim())).filter((l) => !/^npm\s+notice\b/iu.test(l.trim()));
+  const tail = lines.slice(-maxLines).join(" \xB7 ");
+  if (!tail) return output.trim().replace(/\s+/gu, " ").slice(-maxChars) || "npm produced no output";
+  return tail.length > maxChars ? `\u2026${tail.slice(-maxChars)}` : tail;
+}
+async function runNpmStreaming(opts) {
+  const spawnFn = opts.spawnFn ?? import_node_child_process6.spawn;
+  return await new Promise((resolveRun) => {
+    const chunks = [];
+    let settled = false;
+    let child2;
+    const finish = (result) => {
+      if (settled) return;
+      settled = true;
+      clearTimeout(timer);
+      resolveRun(result);
+    };
+    const timer = setTimeout(() => {
+      child2?.kill("SIGTERM");
+      chunks.push(`npm install timed out after ${opts.timeoutMs}ms`);
+      finish({ ok: false, code: null, output: chunks.join("\n") });
+    }, opts.timeoutMs);
+    try {
+      child2 = spawnFn(opts.file, [...opts.args], {
+        env: opts.env ?? process.env,
+        stdio: ["ignore", "pipe", "pipe"],
+        shell: false,
+        windowsHide: true
+      });
+    } catch (e) {
+      chunks.push(e instanceof Error ? e.message : String(e));
+      finish({ ok: false, code: null, output: chunks.join("\n") });
+      return;
+    }
+    const onLine = (line) => {
+      chunks.push(line);
+      opts.onLine?.(line);
+    };
+    if (child2.stdout) (0, import_node_readline.createInterface)({ input: child2.stdout }).on("line", onLine);
+    if (child2.stderr) (0, import_node_readline.createInterface)({ input: child2.stderr }).on("line", onLine);
+    child2.on("error", (e) => {
+      chunks.push(e.message);
+      finish({ ok: false, code: null, output: chunks.join("\n") });
+    });
+    child2.on("close", (code) => finish({ ok: code === 0, code, output: chunks.join("\n") }));
+  });
+}
+async function verifyInstalledCli(probe, target) {
+  let stdout;
+  try {
+    stdout = await probe();
+  } catch (e) {
+    const message = e instanceof Error ? e.message : String(e);
+    return { ok: false, detail: `the installed mmi-cli does not run (${message.trim().split(/\r?\n/u)[0]})` };
+  }
+  const version = /(\d+\.\d+\.\d+[^\s]*)/u.exec(stdout.trim())?.[1];
+  if (!version) {
+    return { ok: false, detail: `the installed mmi-cli printed no version (${stdout.trim().slice(0, 80) || "no output"})` };
+  }
+  if (target && version !== target) {
+    return { ok: false, detail: `the installed mmi-cli reports ${version}, not the ${target} that was just installed` };
+  }
+  return { ok: true, detail: `verified: the installed mmi-cli runs ${version}` };
+}
+
 // src/plugin-guard.ts
 function buildPluginGuardDecision(i) {
   if (!i.isOrgRepo) return { state: "not-org" };
@@ -11448,12 +11557,12 @@ function marketplaceClonePresent(surface, home, exists = import_node_fs17.exists
   return marketplaceCloneCandidates(surface, home, env).some(exists);
 }
 function runHostBinSync(bin, args) {
-  return isWin ? (0, import_node_child_process6.execFileSync)("cmd.exe", ["/c", bin, ...args], {
+  return isWin ? (0, import_node_child_process7.execFileSync)("cmd.exe", ["/c", bin, ...args], {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
     timeout: 15e3,
     windowsHide: true
-  }) : (0, import_node_child_process6.execFileSync)(bin, args, {
+  }) : (0, import_node_child_process7.execFileSync)(bin, args, {
     encoding: "utf8",
     stdio: ["ignore", "pipe", "ignore"],
     timeout: 15e3,
@@ -11521,15 +11630,28 @@ async function fetchNpmReleasedVersion() {
   }
 }
 var NPM_INSTALL_TIMEOUT_MS = 12e4;
-async function npmSelfUpdateCli(target, onStep) {
+var CLI_VERSION_PROBE_TIMEOUT_MS = 3e4;
+async function npmSelfUpdateCli(target, onStep, deps = {}) {
   const command = cliUpdateCommand(target);
-  try {
-    onStep?.(command);
-    await runHostBin("npm", ["install", "-g", `@mutmutco/cli@${target ?? "latest"}`], { timeout: NPM_INSTALL_TIMEOUT_MS });
-    return { ok: true, detail: `${command} exited 0` };
-  } catch (e) {
-    return { ok: false, detail: e.message.trim().slice(0, 200).replace(/\s+/g, " ") };
-  }
+  const args = npmSelfUpdateArgs(`@mutmutco/cli@${target ?? "latest"}`);
+  onStep?.(command);
+  let last = "";
+  const result = await (deps.run ?? runNpmStreaming)({
+    file: isWin ? "cmd.exe" : "npm",
+    args: isWin ? ["/c", "npm", ...args] : args,
+    timeoutMs: NPM_INSTALL_TIMEOUT_MS,
+    onLine: (line) => {
+      const message = narrateNpmLine(line);
+      if (!message || message === last) return;
+      last = message;
+      onStep?.(message);
+    }
+  });
+  if (!result.ok) return { ok: false, detail: npmFailureTail(result.output) };
+  const probe = deps.probeVersion ?? (async () => (await runHostBin("mmi-cli", ["--version"], { timeout: CLI_VERSION_PROBE_TIMEOUT_MS })).stdout);
+  const verified = await verifyInstalledCli(probe, target);
+  onStep?.(verified.detail);
+  return verified.ok ? { ok: true, detail: `${command} exited 0 \u2014 ${verified.detail}` } : { ok: false, detail: `${command} exited 0 but ${verified.detail}` };
 }
 function kiloConfigListsPlugin(configRoot, home = (0, import_node_os5.homedir)(), read = (p) => (0, import_node_fs17.readFileSync)(p, "utf8"), exists = import_node_fs17.existsSync) {
   const candidates = ["kilo.json", "kilo.jsonc", "opencode.json", "opencode.jsonc", "config.json"];
@@ -12016,8 +12138,11 @@ function readKnownMarketplacesFile(path2) {
     return void 0;
   }
 }
+function claudeCodeEnvMarkerPresent(env = process.env) {
+  return Boolean(env.CLAUDE_CODE_SESSION_ID?.trim() || env.CLAUDECODE?.trim() || env.CLAUDE_PLUGIN_ROOT?.trim());
+}
 function claudeCodeIsRunning(env = process.env, listProcesses = defaultProcessList) {
-  if (env.CLAUDE_CODE_SESSION_ID?.trim() || env.CLAUDECODE?.trim() || env.CLAUDE_PLUGIN_ROOT?.trim()) return true;
+  if (claudeCodeEnvMarkerPresent(env)) return true;
   let table;
   try {
     table = listProcesses();
@@ -12028,7 +12153,7 @@ function claudeCodeIsRunning(env = process.env, listProcesses = defaultProcessLi
   return table.split(/\r?\n/).some((line) => /(^|[/\\])claude(\.(exe|cmd|ps1))?\s/.test(`${line.trim()} `));
 }
 function defaultProcessList() {
-  return isWin ? (0, import_node_child_process6.execFileSync)("powershell.exe", ["-NoProfile", "-Command", "Get-CimInstance Win32_Process | ForEach-Object { $_.CommandLine }"], { encoding: "utf8", windowsHide: true, maxBuffer: 32 * 1024 * 1024, timeout: 15e3 }) : (0, import_node_child_process6.execFileSync)("ps", ["-eo", "args="], { encoding: "utf8", windowsHide: true, timeout: 15e3 });
+  return isWin ? (0, import_node_child_process7.execFileSync)("powershell.exe", ["-NoProfile", "-Command", "Get-CimInstance Win32_Process | ForEach-Object { $_.CommandLine }"], { encoding: "utf8", windowsHide: true, maxBuffer: 32 * 1024 * 1024, timeout: 15e3 }) : (0, import_node_child_process7.execFileSync)("ps", ["-eo", "args="], { encoding: "utf8", windowsHide: true, timeout: 15e3 });
 }
 function writeMarketplacePinsOnDisk(path2, pins, succeeded, failedVerb, declineWhileHostLive) {
   if (pins.size === 0) return void 0;
@@ -12059,6 +12184,7 @@ function restoreMarketplacePinsOnDisk(path2, pins, hostIsRunning = claudeCodeIsR
 }
 function applyOrgMarketplacePins(path2, names, hostIsRunning = claudeCodeIsRunning) {
   let landed = false;
+  let blockedByHost = false;
   const detail = writeMarketplacePinsOnDisk(
     path2,
     new Map(names.map((name) => [name, ORG_MARKETPLACE_PINS])),
@@ -12067,9 +12193,13 @@ function applyOrgMarketplacePins(path2, names, hostIsRunning = claudeCodeIsRunni
       return `pinned ${[...pins.keys()].join(", ")} to ${ORG_MARKETPLACE_PINS.ref} with auto-update on`;
     },
     "pin",
-    () => hostIsRunning() ? "not pinned \u2014 Claude Code is running and rewrites this registration from its own copy; quit it, then run `mmi-cli doctor`" : void 0
+    () => {
+      if (!hostIsRunning()) return void 0;
+      blockedByHost = true;
+      return "not pinned \u2014 Claude Code is running and rewrites this registration from its own copy; quit it, then run `mmi-cli doctor`";
+    }
   );
-  return detail === void 0 ? void 0 : { detail, wrote: landed };
+  return detail === void 0 ? void 0 : { detail, wrote: landed, blockedByHost };
 }
 function writeMarketplacePinPending(path2, names, now = Date.now()) {
   try {
@@ -12777,7 +12907,8 @@ function workflowEntry(repo, workflowPath, yamlText) {
     executor: "github-actions",
     llm: llmFromHeader(yamlText),
     resolved: "live",
-    source: `${ORG}/${repo}:${workflowPath}`
+    source: `${ORG}/${repo}:${workflowPath}`,
+    harbourUnmanaged: isHarbourUnmanaged(yamlText)
   };
 }
 function awsRuleEntries(payload) {
@@ -12980,12 +13111,13 @@ function cadenceStale(registryCadence, liveCadence) {
   return !liveCrons.every((cron) => registered.has(cron));
 }
 function reconcileGithubActions(liveGithub, registry2, readRepos, activeWorkflowNames = /* @__PURE__ */ new Set(), disabledWorkflowNames = /* @__PURE__ */ new Set()) {
+  const managedLiveGithub = liveGithub.filter((e) => !e.harbourUnmanaged);
   const registryGithub = registry2.filter((r) => r.executor === "github-actions");
-  const liveByName = new Map(liveGithub.map((e) => [e.name, e]));
+  const liveByName = new Map(managedLiveGithub.map((e) => [e.name, e]));
   const registryById = new Map(registryGithub.map((r) => [r.id, r]));
   const drifts = [];
   const parked = [];
-  for (const e of liveGithub) {
+  for (const e of managedLiveGithub) {
     if (!registryById.has(e.name)) {
       drifts.push({
         class: "live-but-unregistered",
@@ -13063,9 +13195,11 @@ function strayCronDrift(name) {
     remedy: "strip on: schedule \u2192 workflow_dispatch and let the harbour dispatcher fire on the registry cadence (docs/schedules.md rule 1)"
   };
 }
-var STRAY_CRON_EXEMPT = /* @__PURE__ */ new Set(["MMI-Hub/schedule-plane-deadman"]);
+function isHarbourUnmanaged(yamlText) {
+  return /^#\s*harbour:\s*unmanaged\s*$/im.test(yamlText);
+}
 function strayCronDrifts(workflows) {
-  return workflows.filter((w) => !STRAY_CRON_EXEMPT.has(w.name)).filter((w) => workflowTriggersSchedule(w.yamlText)).map((w) => strayCronDrift(w.name)).sort((a, b) => a.name.localeCompare(b.name));
+  return workflows.filter((w) => !isHarbourUnmanaged(w.yamlText)).filter((w) => workflowTriggersSchedule(w.yamlText)).map((w) => strayCronDrift(w.name)).sort((a, b) => a.name.localeCompare(b.name));
 }
 function unlauncheredLlmDrift(entry) {
   if (entry.llm !== "yes") return null;
@@ -13180,7 +13314,7 @@ function scheduleRecordFromWorkflow(repo, workflowPath, yamlText) {
   if (!crons.length && !header.schedule) return null;
   const basename6 = workflowPath.split("/").pop() ?? workflowPath;
   const expectedId = `${repo}/${basename6.replace(/\.ya?ml$/, "")}`;
-  if (STRAY_CRON_EXEMPT.has(expectedId)) return null;
+  if (isHarbourUnmanaged(yamlText)) return null;
   const missing = SCHEDULE_HEADER_FIELDS.filter((f) => !header[f]);
   if (missing.length) {
     throw new Error(`schedules register: ${expectedId} (${workflowPath}) is a scheduled workflow but is missing the eight-field entry-template header field(s): ${missing.join(", ")} \u2014 see docs/schedules.md "The entry template".`);
@@ -13545,7 +13679,7 @@ ${lines.join("\n")}`;
 }
 
 // src/secrets.ts
-var import_node_child_process7 = require("node:child_process");
+var import_node_child_process8 = require("node:child_process");
 var import_node_os7 = require("node:os");
 
 // src/gh-create.ts
@@ -14817,7 +14951,7 @@ function spawnExitCode(status, signal) {
 }
 function defaultSpawn(command, args, env) {
   const target = resolveSpawnTarget(command, args);
-  const r = (0, import_node_child_process7.spawnSync)(target.cmd, target.args, {
+  const r = (0, import_node_child_process8.spawnSync)(target.cmd, target.args, {
     windowsHide: true,
     stdio: "inherit",
     env,
@@ -15635,10 +15769,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "3.113.0",
-    tag: "v3.113.0",
-    commit: "1d1e521aa96f",
-    npm: "@mutmutco/cli@3.113.0"
+    version: "3.114.0",
+    tag: "v3.114.0",
+    commit: "cbe675e9904f",
+    npm: "@mutmutco/cli@3.114.0"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -15655,14 +15789,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v3.113.0"
+          v3Target: "v3.114.0"
         }
       ],
       rollbackTrigger: "Any red inside the post-cut soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a v3 client refused while the compat window must still admit it (SUPPORTED_MINOR_WINDOW=2, MIN_CLIENT_VERSION 0.0.0 \u2014 D6a), or npm consumer install/doctor failure on the v4 dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 3.113.0 and redeploy the Hub Lambda from tag v3.113.0 (1d1e521aa96f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v3.113.0 (@mutmutco/cli@3.113.0, tag commit 1d1e521aa96f \u2014 the preserved latest-v3 distribution, D6b)"
+        mechanism: "npm dist-tag latest -> 3.114.0 and redeploy the Hub Lambda from tag v3.114.0 (cbe675e9904f); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v3.114.0 (@mutmutco/cli@3.114.0, tag commit cbe675e9904f \u2014 the preserved latest-v3 distribution, D6b)"
       }
     },
     {
@@ -21316,7 +21450,7 @@ async function runPrLand(prNumber, options, deps) {
 var import_node_fs22 = require("node:fs");
 
 // src/stage-runner.ts
-var import_node_child_process8 = require("node:child_process");
+var import_node_child_process9 = require("node:child_process");
 var import_node_fs21 = require("node:fs");
 var import_node_path20 = require("node:path");
 var import_node_net = require("node:net");
@@ -21328,7 +21462,7 @@ function normalizeEol(s) {
 }
 
 // src/stage-runner.ts
-var execFileP3 = (0, import_node_util5.promisify)(import_node_child_process8.execFile);
+var execFileP3 = (0, import_node_util5.promisify)(import_node_child_process9.execFile);
 var DOCKER_TIMEOUT_MS = 15e3;
 var EARLY_EXIT_GRACE_MS = 2e3;
 function earlyExitGraceMs() {
@@ -21850,7 +21984,7 @@ async function startStage(config = {}, opts = {}) {
   let up = sub(config.up.trim());
   if (opts.forceRecreate) up = appendForceRecreate(up);
   const identity = await resolveStageIdentity(cwd);
-  const child2 = (0, import_node_child_process8.spawn)(up, {
+  const child2 = (0, import_node_child_process9.spawn)(up, {
     cwd,
     shell: true,
     // POSIX-only: the process group exists for the group-kill in stopStage. On win32 teardown is
@@ -22054,7 +22188,7 @@ async function executeWaveLand(plan, deps, opts = { preserveWorktree: true }) {
 var import_node_os19 = require("node:os");
 
 // src/board.ts
-var import_node_child_process9 = require("node:child_process");
+var import_node_child_process10 = require("node:child_process");
 var import_node_fs23 = require("node:fs");
 var import_node_os8 = require("node:os");
 var import_node_path21 = require("node:path");
@@ -22399,7 +22533,7 @@ function findDuplicateLesson(source, openLessons) {
 var BOARD_STATUSES = ["Todo", "In Progress", "In Review", "Done"];
 
 // src/board.ts
-var rawExecFileP3 = (0, import_node_util6.promisify)(import_node_child_process9.execFile);
+var rawExecFileP3 = (0, import_node_util6.promisify)(import_node_child_process10.execFile);
 var BOARD_GIT_TIMEOUT_MS = 1e4;
 var WRITE_PROBE_CONCURRENCY = 8;
 var CLAIM_CONCURRENCY = 5;
@@ -25452,10 +25586,10 @@ function healClaudeBinary(host = {}, onStep) {
 }
 
 // src/statusline-invalidate.ts
-var import_node_child_process10 = require("node:child_process");
+var import_node_child_process11 = require("node:child_process");
 function invalidateStatuslineBoardCache() {
   try {
-    const child2 = (0, import_node_child_process10.spawn)("jerv-cli", ["lane", "ops", "invalidate-board"], {
+    const child2 = (0, import_node_child_process11.spawn)("jerv-cli", ["lane", "ops", "invalidate-board"], {
       detached: true,
       stdio: "ignore",
       windowsHide: true
@@ -25674,12 +25808,12 @@ function renderVerifyBroker(input) {
 }
 
 // src/hotfix-coverage.ts
-var import_node_child_process11 = require("node:child_process");
+var import_node_child_process12 = require("node:child_process");
 var CHERRY_TRAILER = /\(cherry picked from commit ([0-9a-f]{7,40})\)/g;
 function checkHotfixCoverage(options = {}) {
   const { cwd = process.cwd(), mainRef = "origin/main", rcRef = "origin/rc", manifestPaths = [] } = options;
   const ack = (options.ack ?? []).filter(Boolean);
-  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process11.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process12.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const revList = (range) => {
     const out = git2(["rev-list", "--no-merges", range]).trim();
     return out ? out.split("\n") : [];
@@ -25747,7 +25881,7 @@ function checkHotfixCoverage(options = {}) {
 }
 function checkHotfixCarries(options) {
   const { cwd = process.cwd(), branch, baseRef, targets } = options;
-  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process11.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
+  const git2 = options.git ?? ((args, opts) => (0, import_node_child_process12.execFileSync)("git", args, { cwd, encoding: "utf8", input: opts?.input, stdio: ["pipe", "pipe", "pipe"] }));
   const isAncestor = (sha, ref) => {
     try {
       git2(["merge-base", "--is-ancestor", sha, ref]);
@@ -26771,7 +26905,7 @@ async function announceRelease(deps, args) {
 
 // src/repo-index.ts
 var import_node_crypto4 = require("node:crypto");
-var import_node_child_process12 = require("node:child_process");
+var import_node_child_process13 = require("node:child_process");
 var import_node_fs27 = require("node:fs");
 var import_node_path25 = require("node:path");
 var REPO_INDEX_SCHEMA = 1;
@@ -26917,7 +27051,7 @@ function loadReadmeHints(cwd, candidatePaths) {
 function toPosix(p) {
   return p.split(import_node_path25.sep).join("/");
 }
-function listCandidatePaths(cwd, exec = import_node_child_process12.execFileSync) {
+function listCandidatePaths(cwd, exec = import_node_child_process13.execFileSync) {
   try {
     const out = exec("git", ["ls-files", "-z", "-c", "-o", "--exclude-standard"], {
       cwd,
@@ -27040,7 +27174,7 @@ function searchRepoIndex(idx, query, limit = 20) {
   }
   return out;
 }
-function inferRepoSlug(cwd, exec = import_node_child_process12.execFileSync) {
+function inferRepoSlug(cwd, exec = import_node_child_process13.execFileSync) {
   try {
     const url = String(exec("git", ["remote", "get-url", "origin"], { cwd, encoding: "utf8" })).trim();
     const m = /[:/]([^/]+\/[^/]+?)(?:\.git)?$/.exec(url);
@@ -27190,7 +27324,7 @@ async function gcRepoIndexCloud(deps) {
 var import_node_fs28 = require("node:fs");
 var import_node_os12 = require("node:os");
 var import_node_path26 = require("node:path");
-var import_node_child_process13 = require("node:child_process");
+var import_node_child_process14 = require("node:child_process");
 var MAX_EMBED_BACKFILL_ROUNDS = 40;
 function normalizeRepo(raw) {
   const t = raw.trim().replace(/\.git$/, "");
@@ -27210,7 +27344,7 @@ function rosterRepos(projects) {
 }
 function shallowClone(repo, dest, token) {
   const basic = Buffer.from(`x-access-token:${token}`, "utf8").toString("base64");
-  (0, import_node_child_process13.execFileSync)(
+  (0, import_node_child_process14.execFileSync)(
     "git",
     ["-c", `http.extraHeader=Authorization: Basic ${basic}`, "clone", "--depth", "1", "--single-branch", `https://github.com/${repo}.git`, dest],
     { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"], windowsHide: true }
@@ -27479,7 +27613,7 @@ async function runRepoIndexHealth(opts) {
 }
 
 // src/spawn-policy-core.ts
-var import_node_child_process14 = require("node:child_process");
+var import_node_child_process15 = require("node:child_process");
 var import_node_fs30 = require("node:fs");
 var import_node_path27 = require("node:path");
 var SPAWNERS = ["spawn", "spawnSync", "exec", "execSync", "execFile", "execFileSync"];
@@ -27550,7 +27684,7 @@ function findViolationsInSource(raw) {
   return found;
 }
 function policedFiles(root) {
-  const r = (0, import_node_child_process14.spawnSync)("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
+  const r = (0, import_node_child_process15.spawnSync)("git", ["ls-files", "-z", "--cached", "--others", "--exclude-standard"], {
     cwd: root,
     encoding: "utf8",
     windowsHide: true,
@@ -27584,7 +27718,7 @@ function runSpawnPolicy(root) {
 }
 
 // src/test-policy-core.ts
-var import_node_child_process15 = require("node:child_process");
+var import_node_child_process16 = require("node:child_process");
 var import_node_fs31 = require("node:fs");
 var import_node_path28 = require("node:path");
 var POLICY_FILE = "test-policy.json";
@@ -27714,14 +27848,14 @@ function evaluate(changed, policy, present = () => false) {
   return findings;
 }
 function git(args, cwd) {
-  return (0, import_node_child_process15.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
+  return (0, import_node_child_process16.execFileSync)("git", args, { windowsHide: true, cwd, encoding: "utf8", maxBuffer: 32 * 1024 * 1024 });
 }
 var COAUTHOR_KEY = "Co-authored-by";
 var GH_MESSAGE_SEPARATOR = /^-{5,}$/;
 var LIFTED_KEYS = new RegExp(`^(?:${TRAILER_KEY}|${COAUTHOR_KEY}):`, "i");
 function parseTrailers(message, cwd) {
   try {
-    return (0, import_node_child_process15.execFileSync)("git", ["interpret-trailers", "--parse", "--unfold"], {
+    return (0, import_node_child_process16.execFileSync)("git", ["interpret-trailers", "--parse", "--unfold"], {
       windowsHide: true,
       cwd,
       input: message,
@@ -29522,9 +29656,9 @@ ${SSH_RECIPE_AGENT_NOTE}`);
 
 // src/schedules-commands.ts
 var import_promises5 = require("node:fs/promises");
-var import_node_child_process16 = require("node:child_process");
+var import_node_child_process17 = require("node:child_process");
 var import_node_util7 = require("node:util");
-var execFileP5 = (0, import_node_util7.promisify)(import_node_child_process16.execFile);
+var execFileP5 = (0, import_node_util7.promisify)(import_node_child_process17.execFile);
 var AWS_REGION = "eu-central-1";
 var AWS_TIMEOUT_MS = 3e4;
 var AWS_RETRY_DELAY_MS = 1500;
@@ -32403,7 +32537,7 @@ var import_node_fs38 = require("node:fs");
 var import_promises8 = require("node:fs/promises");
 var import_node_path36 = require("node:path");
 var import_node_os15 = require("node:os");
-var import_node_child_process17 = require("node:child_process");
+var import_node_child_process18 = require("node:child_process");
 
 // src/board-advance.ts
 function repoOf2(ref) {
@@ -33009,7 +33143,7 @@ async function remoteBranchExists2(branch, options = {}) {
 }
 var COMPOSE_TIMEOUT_MS = 12e4;
 function spawnDeferredGcSweep() {
-  spawnDetachedSelf(["worktree", "gc", "sweep-deferred", "--quiet"], { spawn: import_node_child_process17.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
+  spawnDetachedSelf(["worktree", "gc", "sweep-deferred", "--quiet"], { spawn: import_node_child_process18.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
 }
 async function createDeferredWorktreeStore() {
   try {
@@ -36689,7 +36823,8 @@ var RESTART_LINE = "\u21BB Restart Claude to finish.";
 var VERBOSE_INDENT = "    ";
 function checkGlyph(check) {
   if (!check.ok) return "\u2717";
-  return check.verified === false ? "?" : "\u2713";
+  if (check.verified === false) return "?";
+  return check.warn ? "\u26A0" : "\u2713";
 }
 function renderCheckLine(check) {
   const head = check.detail ? `${checkGlyph(check)} ${check.label} \u2014 ${check.detail}` : `${checkGlyph(check)} ${check.label}`;
@@ -36707,9 +36842,11 @@ function renderTally(checks) {
   const total = checks.length;
   const failed = checks.filter((c) => !c.ok).length;
   const unverified = checks.filter((c) => c.ok && c.verified === false).length;
-  const healthy = total - failed - unverified;
-  if (failed === 0 && unverified === 0) return `\u2713 all ${total} checks healthy`;
+  const warned = checks.filter((c) => c.ok && c.verified !== false && c.warn).length;
+  const healthy = total - failed - unverified - warned;
+  if (failed === 0 && unverified === 0 && warned === 0) return `\u2713 all ${total} checks healthy`;
   const parts = [`\u2713 ${healthy} verified healthy`];
+  if (warned > 0) parts.push(`\u26A0 ${warned} warn`);
   if (unverified > 0) parts.push(`? ${unverified} unverified`);
   if (failed > 0) parts.push(`\u2717 ${failed} failed`);
   return `${parts.join(" \xB7 ")} \u2014 ${total} checks`;
@@ -38359,18 +38496,19 @@ async function runDoctorClean(opts, io, deps) {
     if (payload) emitNow(payload);
   }
   async function runMarketplaceRows() {
+    let healed;
     if (applyEnv) {
-      const healed = deps.healMarketplacePins();
-      if (healed) {
+      healed = deps.healMarketplacePins();
+      if (healed?.wrote) {
         healIntent(`marketplace pins \u2014 ${healed.detail}`);
-        if (healed.wrote) {
-          traceHeal("env-heals");
-          markHealChanged();
-          restartPending = true;
-        }
+        traceHeal("env-heals");
+        markHealChanged();
+        restartPending = true;
       }
     }
-    for (const row of deps.marketplaceRows()) emitNow(row);
+    for (const row of deps.marketplaceRows(healed?.blockedByHost)) {
+      emitNow(healed && !healed.wrote ? { ...row, verbose: [...row.verbose ?? [], `heal: ${healed.detail}`] } : row);
+    }
   }
   async function runTrainSyncRow() {
     try {
@@ -38903,9 +39041,9 @@ function ghAccountCaveat(announcedLogin, accounts) {
 var import_node_fs45 = require("node:fs");
 var import_node_os18 = require("node:os");
 var import_node_path42 = require("node:path");
-var import_node_child_process18 = require("node:child_process");
+var import_node_child_process19 = require("node:child_process");
 var import_node_util8 = require("node:util");
-var execFileP6 = (0, import_node_util8.promisify)(import_node_child_process18.execFile);
+var execFileP6 = (0, import_node_util8.promisify)(import_node_child_process19.execFile);
 var MMI_PLUGIN_ID2 = "mmi@mutmutco";
 function installedClaudePluginVersion() {
   try {
@@ -38951,12 +39089,12 @@ function installedSurfacePluginVersion(surface) {
   if (token === "claude") return installedClaudePluginVersion();
   if (token !== "codex") return void 0;
   try {
-    const raw = process.platform === "win32" ? (0, import_node_child_process18.execFileSync)("cmd.exe", ["/c", "codex", "plugin", "list", "--json"], {
+    const raw = process.platform === "win32" ? (0, import_node_child_process19.execFileSync)("cmd.exe", ["/c", "codex", "plugin", "list", "--json"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
       windowsHide: true
-    }) : (0, import_node_child_process18.execFileSync)("codex", ["plugin", "list", "--json"], {
+    }) : (0, import_node_child_process19.execFileSync)("codex", ["plugin", "list", "--json"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"],
       timeout: 15e3,
@@ -38974,7 +39112,7 @@ function installedActivePluginVersion(surface = detectSurface(process.env)) {
 }
 function worktreeRootSync() {
   try {
-    const out = (0, import_node_child_process18.execFileSync)("git", ["rev-parse", "--show-toplevel"], { windowsHide: true, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
+    const out = (0, import_node_child_process19.execFileSync)("git", ["rev-parse", "--show-toplevel"], { windowsHide: true, encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] });
     let root = out.endsWith("\n") ? out.slice(0, -1) : out;
     if (process.platform === "win32" && root.endsWith("\r")) root = root.slice(0, -1);
     return root || null;
@@ -39227,7 +39365,7 @@ function mmiDoctorDeps(opts = {}) {
     sessionPayload: () => readSessionPayload(process.cwd()),
     // #3485 items 9 and 8: why the MMI plugin has never printed an "updated ? please restart" notice, and
     // which branch it would pick one up from. Two local file reads, no network, fail-soft to no rows.
-    marketplaceRows: () => {
+    marketplaceRows: (hostBlocked) => {
       try {
         if (detectSurface(process.env) === "codex") return [];
         const home = (0, import_node_os19.homedir)();
@@ -39236,8 +39374,14 @@ function mmiDoctorDeps(opts = {}) {
           readFileSyncSafe((0, import_node_path43.join)(home, ...KNOWN_MARKETPLACES_RELATIVE), import_node_fs46.readFileSync),
           readFileSyncSafe((0, import_node_path43.join)(home, ".claude", "settings.json"), import_node_fs46.readFileSync),
           // #3974: this CLI heals these rows, so report mode names the doctor run rather than the hand
-          // edit. Unconditional ? it is a fact about mmi-cli, not about the lane this run is on.
-          true
+          // edit. #4792 narrows WHICH run: `applyOrgMarketplacePins` declines outright while Claude Code
+          // is up, because the host owns this file and rewrites it from its own copy (#4083). Naming the
+          // doctor there is the circular-and-false remedy the issue was filed on — doctor ran twice and
+          // healed neither row. So the live host, when there is one, is what the rows name first.
+          // The heal lane pays for the full process probe and hands its answer down; every other lane
+          // reads the free env markers, which are set precisely when doctor runs inside a Claude session
+          // — the case the owner hit. A cheap lane never shells a process listing for this.
+          hostBlocked ?? claudeCodeEnvMarkerPresent() ? "host-running" : "doctor"
         );
         const pending = readMarketplacePinPending(
           (0, import_node_path43.join)(home, ".claude", "plugins", ".mmi-marketplace-pin-pending.json"),
@@ -39251,7 +39395,7 @@ function mmiDoctorDeps(opts = {}) {
             ...rest,
             ok: true,
             warn: true,
-            detail: `pending restart ? doctor pinned main at ${pending.at}; restart Claude Code to load it`,
+            detail: `pending restart \u2014 doctor pinned main at ${pending.at}; restart Claude Code to load it`,
             verbose: [...row.verbose ?? [], "known_marketplaces.json was rewritten by the running Claude host after the verified doctor write"]
           };
         });
@@ -39864,11 +40008,11 @@ function runWorktreeInstall(command, cwd, quiet, opts) {
     "pipe"
   ];
   return new Promise((resolve5, reject) => {
-    const child2 = opts?.shell ? (0, import_node_child_process19.spawn)(command, { cwd, stdio, windowsHide: true, shell: true }) : (() => {
+    const child2 = opts?.shell ? (0, import_node_child_process20.spawn)(command, { cwd, stdio, windowsHide: true, shell: true }) : (() => {
       const [bin, ...args] = command.split(" ");
       const file = isWin2 ? "cmd.exe" : bin;
       const spawnArgs = isWin2 ? ["/c", bin, ...args] : args;
-      return (0, import_node_child_process19.spawn)(file, spawnArgs, { cwd, stdio, windowsHide: true });
+      return (0, import_node_child_process20.spawn)(file, spawnArgs, { cwd, stdio, windowsHide: true });
     })();
     let stderrTail = "";
     child2.stderr?.on("data", (chunk) => {
@@ -40251,7 +40395,7 @@ function scheduleRelatedDiscovery(o) {
   try {
     const args = ["issue", "discover-related", "--number", String(o.number), "--title", o.title, "--body", o.body, "--fail-soft"];
     if (o.repo) args.push("--repo", o.repo);
-    spawnDetachedSelf(args, { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] }, { cwd: process.cwd() });
+    spawnDetachedSelf(args, { spawn: import_node_child_process20.spawn, execPath: process.execPath, scriptPath: process.argv[1] }, { cwd: process.cwd() });
   } catch {
   }
 }
@@ -42849,11 +42993,11 @@ program2.command("session-start").description("run the SessionStart verbs (whoam
   for (const line of scratchGcLines(process.cwd())) bannerIo.log(line);
   const worktreeBanner = worktreeAutoProvisionBanner(process.cwd());
   if (worktreeBanner) {
-    spawnDetachedSelf(["worktree", "setup", "--quiet"], { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
+    spawnDetachedSelf(["worktree", "setup", "--quiet"], { spawn: import_node_child_process20.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
     bannerIo.log(worktreeBanner);
   }
   if (shouldSpawnReleaseCatchup((0, import_node_os19.homedir)(), process.env, readReleaseCatchupState)) {
-    spawnDetachedSelf(["plugin", "release-catchup", "--quiet"], { spawn: import_node_child_process19.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
+    spawnDetachedSelf(["plugin", "release-catchup", "--quiet"], { spawn: import_node_child_process20.spawn, execPath: process.execPath, scriptPath: process.argv[1] });
   }
   if (isLinkedWorktree(process.cwd())) {
     const primaryRoot = await primaryCheckoutRoot(process.cwd());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "3.113.0",
+  "version": "3.114.0",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",