@mutmutco/cli 3.130.0 → 3.131.0

package/dist/main.cjs

@@ -9050,31 +9050,8 @@ function readSettingsAutoUpdate(raw, name) {
   const { autoUpdate } = entry;
   return typeof autoUpdate === "boolean" ? autoUpdate : void 0;
 }
-var AUTO_UPDATE_TOGGLE_STEPS = "`/plugin` \u2192 Marketplaces tab \u2192 select the marketplace \u2192 Enable auto-update";
 var CATALOG_CONTENT_REF = "main";
 var CATALOG_REF_PIN_STEPS = `add \`"ref": "${CATALOG_CONTENT_REF}"\` to this marketplace's \`source\` in ~/.claude/plugins/known_marketplaces.json, then restart Claude`;
-function resolveCatalogRef(probe) {
-  const { name, registered, ref, autoUpdate } = probe;
-  if (!registered) return void 0;
-  if (ref) {
-    const agrees = ref === CATALOG_CONTENT_REF;
-    return {
-      name,
-      ref,
-      autoUpdate,
-      unpinned: false,
-      agrees,
-      reason: agrees ? `pinned to ${ref} \u2014 catalog and plugin content come from the same branch` : `pinned to ${ref} \u2014 plugin content is pinned to ${CATALOG_CONTENT_REF}, so the two disagree`
-    };
-  }
-  return {
-    name,
-    autoUpdate,
-    unpinned: true,
-    agrees: false,
-    reason: `no ref pinned \u2014 the catalog is served from the repo's default branch while plugin content is pinned to ${CATALOG_CONTENT_REF}`
-  };
-}
 
 // src/plugin-guard-io.ts
 var import_node_fs14 = require("node:fs");
@@ -10062,7 +10039,7 @@ function disableOrgMarketplaceBackgroundUpdates(path2, names, hostIsRunning = cl
   const detail = writeMarketplacePinsOnDisk(
     path2,
     new Map(names.map((name) => [name, { autoUpdate: false }])),
-    (pins) => `background auto-update off for ${[...pins.keys()].join(", ")} \u2014 \`mmi-cli doctor\` is the update channel`,
+    (pins) => `background auto-update off for ${[...pins.keys()].join(", ")} \u2014 \`mmi-updater\` is the update channel`,
     "disable",
     () => hostIsRunning() ? "left as-is \u2014 Claude Code is running and rewrites this registration from its own copy; the next doctor run outside a live session sets it" : void 0
   );
@@ -16037,10 +16014,10 @@ var rollout_plan_default = {
     note: "The v4.0.0 stamp happens at cut time (D6e #4463); until then the candidate is the origin/development head artifacts (built cli/dist + npm pack), identity proven by dist content hash (D6a)."
   },
   baseline: {
-    version: "3.130.0",
-    tag: "v3.130.0",
-    commit: "4092383c82be",
-    npm: "@mutmutco/cli@3.130.0"
+    version: "3.131.0",
+    tag: "v3.131.0",
+    commit: "11960bf8a21b",
+    npm: "@mutmutco/cli@3.131.0"
   },
   exitCriterion: "fleet-n-of-n",
   hubOnlyShortcut: "forbidden",
@@ -16057,14 +16034,14 @@ var rollout_plan_default = {
           repo: "mutmutco/mmi-hub",
           role: "canary",
           schedule: "train",
-          v3Target: "v3.130.0"
+          v3Target: "v3.131.0"
         }
       ],
       rollbackTrigger: "Any red inside the post-cut soak window: `devops train gate` FAIL attributable to the v4 doors, Hub endpoint health probe failure, a v3 client refused while the compat window must still admit it (SUPPORTED_MINOR_WINDOW=2, MIN_CLIENT_VERSION 0.0.0 \u2014 D6a), or npm consumer install/doctor failure on the v4 dist.",
       rollback: {
         independent: true,
-        mechanism: "npm dist-tag latest -> 3.130.0 and redeploy the Hub Lambda from tag v3.130.0 (4092383c82be); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
-        v3Target: "v3.130.0 (@mutmutco/cli@3.130.0, tag commit 4092383c82be \u2014 the preserved latest-v3 distribution, D6b)"
+        mechanism: "npm dist-tag latest -> 3.131.0 and redeploy the Hub Lambda from tag v3.131.0 (11960bf8a21b); installed clients repair via `mmi-cli doctor`. No other cohort is touched.",
+        v3Target: "v3.131.0 (@mutmutco/cli@3.131.0, tag commit 11960bf8a21b \u2014 the preserved latest-v3 distribution, D6b)"
       }
     },
     {
@@ -26597,7 +26574,7 @@ async function portFoldToDevelopment(deps, ctx, deployModel, tag) {
       "--title",
       `chore(release): port the ${tag} version fold to development`,
       "--body",
-      `Regenerated version fold for ${tag} (#4410). \`main\` carries the released version; without this development declares the previous one and every PR into it fails catalog-lockstep.
+      `Regenerated version fold for ${tag} (#4410). \`main\` carries the released version; without this development declares the previous version/BOM and the next release starts from stale package pins.
 
 Generated by \`mmi-cli devops hotfix release\` \u2014 no main-parented commit is merged in, so the squash parents stay clean (#4365/#4371).`
     ]));
@@ -35935,7 +35912,7 @@ function requiredEstateCommandsPresent(commandNames) {
   return required.filter((name) => !present.has(name));
 }
 function onboardPluginGate(deps) {
-  const { registered, declared, ref } = readKnownMarketplace(deps.readKnown(), MMI_MARKETPLACE_NAME);
+  const { registered, declared } = readKnownMarketplace(deps.readKnown(), MMI_MARKETPLACE_NAME);
   if (!registered) {
     return { ok: false, detail: `${MMI_MARKETPLACE_NAME} marketplace not registered on this machine` };
   }
@@ -35945,11 +35922,7 @@ function onboardPluginGate(deps) {
     declared,
     settingsDeclared: readSettingsAutoUpdate(deps.readSettings(), MMI_MARKETPLACE_NAME)
   }).effective;
-  const catalog = resolveCatalogRef({ name: MMI_MARKETPLACE_NAME, registered, ref, autoUpdate });
-  const gaps = [];
-  if (!autoUpdate) gaps.push(`auto-update is off \u2014 turn it on with ${AUTO_UPDATE_TOGGLE_STEPS}`);
-  if (catalog && !catalog.agrees) gaps.push(`the catalog is ${catalog.unpinned ? "unpinned" : `pinned to ${catalog.ref}`} \u2014 ${CATALOG_REF_PIN_STEPS}`);
-  return gaps.length === 0 ? { ok: true, detail: `auto-update on, catalog pinned to ${catalog?.ref}` } : { ok: false, detail: gaps.join("; ") };
+  return autoUpdate ? { ok: false, detail: "background auto-update is ON \u2014 duplicate writer; run `mmi-updater reconcile` outside Claude Code to disable it" } : { ok: true, detail: "background auto-update off; mmi-updater is the single release-gated writer" };
 }
 async function collectOnboardStatus(opts = {}) {
   const cfg = await loadConfig();
@@ -37401,12 +37374,83 @@ var surfaces_default = {
       token: "claude",
       displayName: "Claude Code",
       lifecycle: "active",
-      artifactIds: ["mmi-claude-plugin", "mmi-claude-marketplace", "mmi-skills", "mmi-hook-policy", "mmi-hooks", "mmi-cli"],
+      artifactIds: [
+        "mmi-claude-plugin",
+        "mmi-claude-marketplace",
+        "mmi-skills",
+        "mmi-hook-policy",
+        "mmi-hooks",
+        "mmi-cli"
+      ],
       plannedArtifactIds: [],
       assembly: {
-        mode: "source-tree",
-        rootPath: ".",
-        sync: []
+        mode: "package-directory",
+        rootPath: "packages/claude-plugin",
+        sync: [
+          {
+            mode: "directories",
+            sourcePath: "skills",
+            targetPath: "packages/claude-plugin/skills"
+          },
+          {
+            mode: "files",
+            sourcePath: "hooks",
+            targetPath: "packages/claude-plugin/hooks",
+            include: [
+              "hooks.json"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "scripts",
+            targetPath: "packages/claude-plugin/scripts",
+            include: [
+              "pretooluse-shell-gates.mjs",
+              "vault-edit-gate.mjs",
+              "secret-redact.mjs",
+              "deny-gate-crash.mjs",
+              "secret-echo-lint.mjs",
+              "env-write-lint.mjs",
+              "command-ladder-gate.mjs",
+              "command-ladder-core.mjs",
+              "validate-hook.mjs",
+              "hook-io.mjs",
+              "hook-trace.mjs",
+              "edit-tool-paths.mjs",
+              "throttle-core.mjs",
+              "hook-policy.mjs",
+              "hook-run.mjs"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "bin",
+            targetPath: "packages/claude-plugin/bin",
+            include: [
+              "mmi-hook",
+              "mmi-hook.exe",
+              "mmi-hook-console.cmd",
+              "mmi-cli",
+              "mmi-cli.cmd"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: ".claude-plugin",
+            targetPath: "packages/claude-plugin/.claude-plugin",
+            include: [
+              "plugin.json"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: ".pi-plugin",
+            targetPath: "packages/claude-plugin/.pi-plugin",
+            include: [
+              "package.json"
+            ]
+          }
+        ]
       },
       install: {
         mechanism: "marketplace",
@@ -37429,9 +37473,18 @@ var surfaces_default = {
         adapterPath: "hooks/hooks.json",
         sourceSurfaceId: "mmi-hook-policy",
         gates: [
-          { id: "command-ladder", failure: "closed" },
-          { id: "vault-edit", failure: "closed" },
-          { id: "secret-output", failure: "open" }
+          {
+            id: "command-ladder",
+            failure: "closed"
+          },
+          {
+            id: "vault-edit",
+            failure: "closed"
+          },
+          {
+            id: "secret-output",
+            failure: "open"
+          }
         ],
         probe: "installed-contract",
         execution: "command",
@@ -37450,7 +37503,9 @@ var surfaces_default = {
       },
       certification: {
         hostCommand: "claude",
-        versionArgs: ["--version"]
+        versionArgs: [
+          "--version"
+        ]
       },
       enforcementCeilings: [
         "Final assistant text cannot be rewritten by the hook surface.",
@@ -37461,12 +37516,73 @@ var surfaces_default = {
       token: "codex",
       displayName: "Codex",
       lifecycle: "active",
-      artifactIds: ["mmi-codex-plugin", "mmi-skills", "mmi-hook-policy", "mmi-cli"],
+      artifactIds: [
+        "mmi-codex-plugin",
+        "mmi-skills",
+        "mmi-hook-policy",
+        "mmi-cli"
+      ],
       plannedArtifactIds: [],
       assembly: {
-        mode: "source-tree",
-        rootPath: ".",
-        sync: []
+        mode: "package-directory",
+        rootPath: "packages/codex-plugin",
+        sync: [
+          {
+            mode: "directories",
+            sourcePath: "skills",
+            targetPath: "packages/codex-plugin/skills"
+          },
+          {
+            mode: "files",
+            sourcePath: "hooks",
+            targetPath: "packages/codex-plugin/hooks",
+            include: [
+              "codex-hooks.json"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "scripts",
+            targetPath: "packages/codex-plugin/scripts",
+            include: [
+              "pretooluse-shell-gates.mjs",
+              "vault-edit-gate.mjs",
+              "secret-redact.mjs",
+              "deny-gate-crash.mjs",
+              "secret-echo-lint.mjs",
+              "env-write-lint.mjs",
+              "command-ladder-gate.mjs",
+              "command-ladder-core.mjs",
+              "validate-hook.mjs",
+              "hook-io.mjs",
+              "hook-trace.mjs",
+              "edit-tool-paths.mjs",
+              "throttle-core.mjs",
+              "hook-policy.mjs",
+              "hook-run.mjs"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "bin",
+            targetPath: "packages/codex-plugin/bin",
+            include: [
+              "mmi-hook",
+              "mmi-hook.exe",
+              "mmi-hook-console.cmd",
+              "mmi-cli",
+              "mmi-cli.cmd"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: ".codex-plugin",
+            targetPath: "packages/codex-plugin/.codex-plugin",
+            include: [
+              "plugin.json"
+            ]
+          }
+        ]
       },
       install: {
         mechanism: "marketplace",
@@ -37489,9 +37605,18 @@ var surfaces_default = {
         adapterPath: "hooks/codex-hooks.json",
         sourceSurfaceId: "mmi-hook-policy",
         gates: [
-          { id: "command-ladder", failure: "closed" },
-          { id: "vault-edit", failure: "closed" },
-          { id: "secret-output", failure: "open" }
+          {
+            id: "command-ladder",
+            failure: "closed"
+          },
+          {
+            id: "vault-edit",
+            failure: "closed"
+          },
+          {
+            id: "secret-output",
+            failure: "open"
+          }
         ],
         probe: "installed-contract",
         execution: "node-bootstrap",
@@ -37510,7 +37635,9 @@ var surfaces_default = {
       },
       certification: {
         hostCommand: "codex",
-        versionArgs: ["--version"]
+        versionArgs: [
+          "--version"
+        ]
       },
       enforcementCeilings: [
         "Post-tool hooks can detect secret output but cannot rewrite it.",
@@ -37521,12 +37648,65 @@ var surfaces_default = {
       token: "kimi",
       displayName: "Kimi Code CLI",
       lifecycle: "active",
-      artifactIds: ["mmi-kimi-plugin", "mmi-skills", "mmi-hook-policy", "mmi-cli"],
+      artifactIds: [
+        "mmi-kimi-plugin",
+        "mmi-skills",
+        "mmi-hook-policy",
+        "mmi-cli"
+      ],
       plannedArtifactIds: [],
       assembly: {
-        mode: "source-tree",
-        rootPath: ".",
-        sync: []
+        mode: "package-directory",
+        rootPath: "packages/kimi-plugin",
+        sync: [
+          {
+            mode: "directories",
+            sourcePath: "skills",
+            targetPath: "packages/kimi-plugin/skills"
+          },
+          {
+            mode: "files",
+            sourcePath: "scripts",
+            targetPath: "packages/kimi-plugin/scripts",
+            include: [
+              "pretooluse-shell-gates.mjs",
+              "vault-edit-gate.mjs",
+              "secret-redact.mjs",
+              "deny-gate-crash.mjs",
+              "secret-echo-lint.mjs",
+              "env-write-lint.mjs",
+              "command-ladder-gate.mjs",
+              "command-ladder-core.mjs",
+              "validate-hook.mjs",
+              "hook-io.mjs",
+              "hook-trace.mjs",
+              "edit-tool-paths.mjs",
+              "throttle-core.mjs",
+              "hook-policy.mjs",
+              "hook-run.mjs"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "bin",
+            targetPath: "packages/kimi-plugin/bin",
+            include: [
+              "mmi-hook",
+              "mmi-hook.exe",
+              "mmi-hook-console.cmd",
+              "mmi-cli",
+              "mmi-cli.cmd"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: ".kimi-plugin",
+            targetPath: "packages/kimi-plugin/.kimi-plugin",
+            include: [
+              "plugin.json"
+            ]
+          }
+        ]
       },
       install: {
         mechanism: "github-source",
@@ -37549,9 +37729,18 @@ var surfaces_default = {
         adapterPath: ".kimi-plugin/plugin.json",
         sourceSurfaceId: "mmi-hook-policy",
         gates: [
-          { id: "command-ladder", failure: "closed" },
-          { id: "vault-edit", failure: "closed" },
-          { id: "secret-output", failure: "open" }
+          {
+            id: "command-ladder",
+            failure: "closed"
+          },
+          {
+            id: "vault-edit",
+            failure: "closed"
+          },
+          {
+            id: "secret-output",
+            failure: "open"
+          }
         ],
         probe: "installed-contract",
         execution: "inline-manifest",
@@ -37570,7 +37759,9 @@ var surfaces_default = {
       },
       certification: {
         hostCommand: "kimi",
-        versionArgs: ["--version"]
+        versionArgs: [
+          "--version"
+        ]
       },
       enforcementCeilings: [
         "Post-tool hooks are observation-only and cannot rewrite secret output.",
@@ -37581,12 +37772,73 @@ var surfaces_default = {
       token: "cursor",
       displayName: "Cursor",
       lifecycle: "active",
-      artifactIds: ["mmi-cursor-plugin", "mmi-skills", "mmi-hook-policy", "mmi-cli"],
+      artifactIds: [
+        "mmi-cursor-plugin",
+        "mmi-skills",
+        "mmi-hook-policy",
+        "mmi-cli"
+      ],
       plannedArtifactIds: [],
       assembly: {
-        mode: "source-tree",
-        rootPath: ".",
-        sync: []
+        mode: "package-directory",
+        rootPath: "packages/cursor-plugin",
+        sync: [
+          {
+            mode: "directories",
+            sourcePath: "skills",
+            targetPath: "packages/cursor-plugin/skills"
+          },
+          {
+            mode: "files",
+            sourcePath: "hooks",
+            targetPath: "packages/cursor-plugin/hooks",
+            include: [
+              "cursor-hooks.json"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "scripts",
+            targetPath: "packages/cursor-plugin/scripts",
+            include: [
+              "pretooluse-shell-gates.mjs",
+              "vault-edit-gate.mjs",
+              "secret-redact.mjs",
+              "deny-gate-crash.mjs",
+              "secret-echo-lint.mjs",
+              "env-write-lint.mjs",
+              "command-ladder-gate.mjs",
+              "command-ladder-core.mjs",
+              "validate-hook.mjs",
+              "hook-io.mjs",
+              "hook-trace.mjs",
+              "edit-tool-paths.mjs",
+              "throttle-core.mjs",
+              "hook-policy.mjs",
+              "hook-run.mjs"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: "bin",
+            targetPath: "packages/cursor-plugin/bin",
+            include: [
+              "mmi-hook",
+              "mmi-hook.exe",
+              "mmi-hook-console.cmd",
+              "mmi-cli",
+              "mmi-cli.cmd"
+            ]
+          },
+          {
+            mode: "files",
+            sourcePath: ".cursor-plugin",
+            targetPath: "packages/cursor-plugin/.cursor-plugin",
+            include: [
+              "plugin.json"
+            ]
+          }
+        ]
       },
       install: {
         mechanism: "github-source",
@@ -37609,9 +37861,18 @@ var surfaces_default = {
         adapterPath: "hooks/cursor-hooks.json",
         sourceSurfaceId: "mmi-hook-policy",
         gates: [
-          { id: "command-ladder", failure: "closed" },
-          { id: "vault-edit", failure: "closed" },
-          { id: "secret-output", failure: "open" }
+          {
+            id: "command-ladder",
+            failure: "closed"
+          },
+          {
+            id: "vault-edit",
+            failure: "closed"
+          },
+          {
+            id: "secret-output",
+            failure: "open"
+          }
         ],
         probe: "installed-contract",
         execution: "command",
@@ -37630,7 +37891,9 @@ var surfaces_default = {
       },
       certification: {
         hostCommand: "cursor-agent",
-        versionArgs: ["--version"]
+        versionArgs: [
+          "--version"
+        ]
       },
       enforcementCeilings: [
         "Cursor can replace MCP results only; it cannot rewrite ordinary tool output after execution, though MMI still detects secret-shaped output.",
@@ -37642,7 +37905,12 @@ var surfaces_default = {
       token: "kilo",
       displayName: "Kilo Code",
       lifecycle: "active",
-      artifactIds: ["mmi-kilo-plugin", "mmi-kilo-skills", "mmi-hook-policy", "mmi-cli"],
+      artifactIds: [
+        "mmi-kilo-plugin",
+        "mmi-kilo-skills",
+        "mmi-hook-policy",
+        "mmi-cli"
+      ],
       plannedArtifactIds: [],
       assembly: {
         mode: "package-directory",
@@ -37652,7 +37920,9 @@ var surfaces_default = {
             mode: "directories",
             sourcePath: "skills",
             targetPath: ".kilo-plugin/skills",
-            excludeNamePrefixes: ["_"]
+            excludeNamePrefixes: [
+              "_"
+            ]
           },
           {
             mode: "files",
@@ -37699,9 +37969,18 @@ var surfaces_default = {
         adapterPath: ".kilo-plugin/server.mjs",
         sourceSurfaceId: "mmi-hook-policy",
         gates: [
-          { id: "command-ladder", failure: "closed" },
-          { id: "vault-edit", failure: "closed" },
-          { id: "secret-output", failure: "open" }
+          {
+            id: "command-ladder",
+            failure: "closed"
+          },
+          {
+            id: "vault-edit",
+            failure: "closed"
+          },
+          {
+            id: "secret-output",
+            failure: "open"
+          }
         ],
         probe: "installed-contract",
         execution: "in-process",
@@ -37720,7 +37999,9 @@ var surfaces_default = {
       },
       certification: {
         hostCommand: "kilo",
-        versionArgs: ["--version"]
+        versionArgs: [
+          "--version"
+        ]
       },
       enforcementCeilings: [
         "Some read, write, and web-fetch tool outputs are not rewriteable by the host.",
@@ -37731,7 +38012,11 @@ var surfaces_default = {
       token: "jervcode",
       displayName: "JervCode",
       lifecycle: "active",
-      artifactIds: ["mmi-pi-plugin", "mmi-skills", "mmi-cli"],
+      artifactIds: [
+        "mmi-pi-plugin",
+        "mmi-skills",
+        "mmi-cli"
+      ],
       plannedArtifactIds: [],
       assembly: {
         mode: "source-tree",
@@ -37776,7 +38061,9 @@ var surfaces_default = {
       },
       certification: {
         hostCommand: "jervcode",
-        versionArgs: ["--version"]
+        versionArgs: [
+          "--version"
+        ]
       },
       enforcementCeilings: [
         "Pi reads the user package set from ~/.jerv/agent/settings.json at launch: a live seat keeps the packages it started with, the mmi-cli heal refuses to edit the file while PI_SESSION_ID is set, and a new registration reaches JervCode only on the next launch.",
@@ -37796,16 +38083,24 @@ var surfaces_default = {
       applicability: "plugin-enabled agent surfaces",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: ["skills"]
+        paths: [
+          "skills"
+        ]
       },
       verify: [
         {
           command: "node",
-          args: ["scripts/check-skill-payload.mjs", "--contract"],
+          args: [
+            "scripts/check-skill-payload.mjs",
+            "--contract"
+          ],
           expected: "skill payload check: ok"
         }
       ],
@@ -37815,18 +38110,33 @@ var surfaces_default = {
       id: "mmi-claude-plugin",
       classification: "packaging",
       kind: "plugin",
-      ownerPath: ".claude-plugin/plugin.json",
-      deliveryPath: ".claude-plugin/plugin.json",
-      delivery: "release",
-      applicability: "Claude Code plugin marketplace",
+      ownerPath: "packages/claude-plugin/package.json",
+      deliveryPath: "packages/claude-plugin/package.json",
+      delivery: "npm",
+      applicability: "Claude Code plugin; npm package @mutmutco/claude-plugin carrying the plugin manifest, skills, hooks, gate scripts, and launchers. The thin git catalog stays in .claude-plugin/marketplace.json (#4945).",
       versionCoordinated: true,
       surfaceToken: "claude",
       versionPaths: [
-        { path: ".claude-plugin/plugin.json", pointer: "version" }
+        {
+          path: ".claude-plugin/plugin.json",
+          pointer: "version"
+        },
+        {
+          path: "packages/claude-plugin/package.json",
+          pointer: "version"
+        }
+      ],
+      additionalPaths: [
+        "packages/claude-plugin/.claude-plugin",
+        "packages/claude-plugin/.pi-plugin",
+        "packages/claude-plugin/skills",
+        "packages/claude-plugin/hooks",
+        "packages/claude-plugin/scripts",
+        "packages/claude-plugin/bin"
       ],
       artifactIdentity: {
-        kind: "sha256-tree",
-        paths: [".claude-plugin/plugin.json", "skills", "hooks", "scripts", "bin"]
+        kind: "npm-pack",
+        packagePath: "packages/claude-plugin"
       },
       publishVisibility: "public"
     },
@@ -37834,18 +38144,36 @@ var surfaces_default = {
       id: "mmi-codex-plugin",
       classification: "packaging",
       kind: "plugin",
-      ownerPath: ".codex-plugin/plugin.json",
-      deliveryPath: ".codex-plugin/plugin.json",
-      delivery: "release",
-      applicability: "Codex plugin marketplace; carries the MMI lifecycle hooks via hooks/codex-hooks.json (#3563)",
+      ownerPath: "packages/codex-plugin/package.json",
+      deliveryPath: "packages/codex-plugin/package.json",
+      delivery: "npm",
+      applicability: "Codex plugin; npm package @mutmutco/codex-plugin carrying the plugin manifest (hooks via hooks/codex-hooks.json, #3563), skills, gate scripts, and launchers. The thin git catalog stays in .agents/plugins/marketplace.json (#4945).",
       versionCoordinated: true,
       surfaceToken: "codex",
       versionPaths: [
-        { path: ".codex-plugin/plugin.json", pointer: "version" }
+        {
+          path: ".codex-plugin/plugin.json",
+          pointer: "version"
+        },
+        {
+          path: "packages/codex-plugin/package.json",
+          pointer: "version"
+        },
+        {
+          path: ".agents/plugins/marketplace.json",
+          pointer: "plugins.0.source.version"
+        }
+      ],
+      additionalPaths: [
+        "packages/codex-plugin/.codex-plugin",
+        "packages/codex-plugin/skills",
+        "packages/codex-plugin/hooks",
+        "packages/codex-plugin/scripts",
+        "packages/codex-plugin/bin"
       ],
       artifactIdentity: {
-        kind: "sha256-tree",
-        paths: [".codex-plugin/plugin.json", "skills", "hooks/codex-hooks.json", "scripts", "bin"]
+        kind: "npm-pack",
+        packagePath: "packages/codex-plugin"
       },
       publishVisibility: "public"
     },
@@ -37853,18 +38181,31 @@ var surfaces_default = {
       id: "mmi-kimi-plugin",
       classification: "packaging",
       kind: "plugin",
-      ownerPath: ".kimi-plugin/plugin.json",
-      deliveryPath: ".kimi-plugin/plugin.json",
-      delivery: "release",
-      applicability: "Kimi Code CLI plugin install (GitHub source); inline event mapping invokes the shared hook runner",
+      ownerPath: "packages/kimi-plugin/package.json",
+      deliveryPath: "packages/kimi-plugin/package.json",
+      delivery: "npm",
+      applicability: "Kimi Code CLI plugin; npm package @mutmutco/kimi-plugin carrying the inline-hook plugin manifest, skills, gate scripts, and launchers. Installed into $KIMI_CODE_HOME/plugins/managed/mmi by the Kimi TUI or the fleet updater (#4945).",
       versionCoordinated: true,
       surfaceToken: "kimi",
       versionPaths: [
-        { path: ".kimi-plugin/plugin.json", pointer: "version" }
+        {
+          path: ".kimi-plugin/plugin.json",
+          pointer: "version"
+        },
+        {
+          path: "packages/kimi-plugin/package.json",
+          pointer: "version"
+        }
+      ],
+      additionalPaths: [
+        "packages/kimi-plugin/.kimi-plugin",
+        "packages/kimi-plugin/skills",
+        "packages/kimi-plugin/scripts",
+        "packages/kimi-plugin/bin"
       ],
       artifactIdentity: {
-        kind: "sha256-tree",
-        paths: [".kimi-plugin/plugin.json", "skills", "scripts", "bin"]
+        kind: "npm-pack",
+        packagePath: "packages/kimi-plugin"
       },
       publishVisibility: "public"
     },
@@ -37872,18 +38213,32 @@ var surfaces_default = {
       id: "mmi-cursor-plugin",
       classification: "packaging",
       kind: "plugin",
-      ownerPath: ".cursor-plugin/plugin.json",
-      deliveryPath: "~/.cursor/plugins/local/mmi",
-      delivery: "local-copy",
-      applicability: "Cursor IDE and Cursor Agent CLI; local plugin checkout managed by mmi-cli",
+      ownerPath: "packages/cursor-plugin/package.json",
+      deliveryPath: "packages/cursor-plugin/package.json",
+      delivery: "npm",
+      applicability: "Cursor IDE and Cursor Agent CLI; npm package @mutmutco/cursor-plugin carrying the plugin manifest (hooks via hooks/cursor-hooks.json), skills, gate scripts, and launchers. The managed checkout at ~/.cursor/plugins/local/mmi is switched to each release by the fleet updater (#4945).",
       versionCoordinated: true,
       surfaceToken: "cursor",
       versionPaths: [
-        { path: ".cursor-plugin/plugin.json", pointer: "version" }
+        {
+          path: ".cursor-plugin/plugin.json",
+          pointer: "version"
+        },
+        {
+          path: "packages/cursor-plugin/package.json",
+          pointer: "version"
+        }
+      ],
+      additionalPaths: [
+        "packages/cursor-plugin/.cursor-plugin",
+        "packages/cursor-plugin/skills",
+        "packages/cursor-plugin/hooks",
+        "packages/cursor-plugin/scripts",
+        "packages/cursor-plugin/bin"
       ],
       artifactIdentity: {
-        kind: "sha256-tree",
-        paths: [".cursor-plugin/plugin.json", "skills", "hooks/cursor-hooks.json", "scripts", "bin"]
+        kind: "npm-pack",
+        packagePath: "packages/cursor-plugin"
       },
       publishVisibility: "public"
     },
@@ -37898,7 +38253,10 @@ var surfaces_default = {
       versionCoordinated: true,
       surfaceToken: "kilo",
       versionPaths: [
-        { path: ".kilo-plugin/package.json", pointer: "version" }
+        {
+          path: ".kilo-plugin/package.json",
+          pointer: "version"
+        }
       ],
       additionalPaths: [
         ".kilo-plugin/server.mjs",
@@ -37921,11 +38279,16 @@ var surfaces_default = {
       applicability: "Kilo Code (via @mutmutco/kilo-plugin provisioning to ~/.kilo/skills)",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: [".kilo-plugin/skills"]
+        paths: [
+          ".kilo-plugin/skills"
+        ]
       },
       surfaceToken: "kilo",
       publishVisibility: "public"
@@ -37941,12 +38304,25 @@ var surfaces_default = {
       versionCoordinated: true,
       surfaceToken: "claude",
       versionPaths: [
-        { path: ".claude-plugin/marketplace.json", pointer: "plugins.0.version" },
-        { path: ".claude-plugin/marketplace.json", pointer: "plugins.0.displayName", template: "MMI {version}" }
+        {
+          path: ".claude-plugin/marketplace.json",
+          pointer: "plugins.0.version"
+        },
+        {
+          path: ".claude-plugin/marketplace.json",
+          pointer: "plugins.0.displayName",
+          template: "MMI {version}"
+        },
+        {
+          path: ".claude-plugin/marketplace.json",
+          pointer: "plugins.0.source.version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: [".claude-plugin/marketplace.json"]
+        paths: [
+          ".claude-plugin/marketplace.json"
+        ]
       },
       publishVisibility: "public"
     },
@@ -37960,15 +38336,44 @@ var surfaces_default = {
       applicability: "editor-agnostic agent surfaces",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
+      ],
+      additionalPaths: [
+        "cli/dist"
       ],
-      additionalPaths: ["cli/dist"],
       artifactIdentity: {
         kind: "npm-pack",
         packagePath: "cli"
       },
       publishVisibility: "public"
     },
+    {
+      id: "mmi-updater",
+      classification: "capability",
+      kind: "cli",
+      ownerPath: "updater/package.json",
+      deliveryPath: "updater/package.json",
+      delivery: "npm",
+      applicability: "editor-agnostic agent surfaces",
+      versionCoordinated: true,
+      versionPaths: [
+        {
+          path: "updater/package.json",
+          pointer: "version"
+        }
+      ],
+      additionalPaths: [
+        "updater/dist"
+      ],
+      artifactIdentity: {
+        kind: "npm-pack",
+        packagePath: "updater"
+      },
+      publishVisibility: "public"
+    },
     {
       id: "mmi-cli-lock",
       classification: "packaging",
@@ -37979,12 +38384,20 @@ var surfaces_default = {
       applicability: "editor-agnostic agent surfaces",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package-lock.json", pointer: "version" },
-        { path: "cli/package-lock.json", pointer: "packages.$root.version" }
+        {
+          path: "cli/package-lock.json",
+          pointer: "version"
+        },
+        {
+          path: "cli/package-lock.json",
+          pointer: "packages.$root.version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: ["cli/package-lock.json"]
+        paths: [
+          "cli/package-lock.json"
+        ]
       },
       publishVisibility: "public"
     },
@@ -37998,27 +38411,52 @@ var surfaces_default = {
       applicability: "editor-agnostic agent surfaces",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
+      ],
+      additionalPaths: [
+        "cli/dist/main.cjs"
       ],
-      additionalPaths: ["cli/dist/main.cjs"],
       prepare: [
         {
           command: "npm",
-          args: ["--prefix", "cli", "run", "build"],
-          inputs: ["cli/src", "cli/build.mjs", "cli/package.json", "cli/README.md", "cli/tsconfig.json", "infra/rollout-plan.json"],
-          outputs: ["cli/dist/index.cjs", "cli/dist/main.cjs"]
+          args: [
+            "--prefix",
+            "cli",
+            "run",
+            "build"
+          ],
+          inputs: [
+            "cli/src",
+            "cli/build.mjs",
+            "cli/package.json",
+            "cli/README.md",
+            "cli/tsconfig.json",
+            "infra/rollout-plan.json"
+          ],
+          outputs: [
+            "cli/dist/index.cjs",
+            "cli/dist/main.cjs"
+          ]
         }
       ],
       verify: [
         {
           command: "node",
-          args: ["cli/dist/index.cjs", "--version"],
+          args: [
+            "cli/dist/index.cjs",
+            "--version"
+          ],
           expected: "{version}"
         }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: ["cli/dist"]
+        paths: [
+          "cli/dist"
+        ]
       },
       publishVisibility: "public"
     },
@@ -38032,7 +38470,10 @@ var surfaces_default = {
       applicability: "all five active hook-capable agent surfaces",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
@@ -38056,7 +38497,9 @@ var surfaces_default = {
       verify: [
         {
           command: "node",
-          args: ["scripts/check-hook-contract.mjs"],
+          args: [
+            "scripts/check-hook-contract.mjs"
+          ],
           expected: "hook contract: 5 active adapters proven, 12 repositories covered"
         }
       ],
@@ -38072,11 +38515,17 @@ var surfaces_default = {
       applicability: "Claude hook-enabled agents",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: ["hooks", "scripts"]
+        paths: [
+          "hooks",
+          "scripts"
+        ]
       },
       surfaceToken: "claude",
       publishVisibility: "public"
@@ -38091,7 +38540,10 @@ var surfaces_default = {
       applicability: "org automation and authorization",
       versionCoordinated: true,
       versionPaths: [
-        { path: "infra/package.json", pointer: "version" }
+        {
+          path: "infra/package.json",
+          pointer: "version"
+        }
       ],
       publishVisibility: "n/a",
       deployedVersionSource: "http-header:x-hub-version"
@@ -38106,7 +38558,10 @@ var surfaces_default = {
       applicability: "master DM notifications only; chatops out by default",
       versionCoordinated: true,
       versionPaths: [
-        { path: "cli/package.json", pointer: "version" }
+        {
+          path: "cli/package.json",
+          pointer: "version"
+        }
       ],
       publishVisibility: "n/a"
     },
@@ -38121,16 +38576,24 @@ var surfaces_default = {
       versionCoordinated: true,
       surfaceToken: "jervcode",
       versionPaths: [
-        { path: ".pi-plugin/package.json", pointer: "version" }
+        {
+          path: ".pi-plugin/package.json",
+          pointer: "version"
+        }
       ],
       artifactIdentity: {
         kind: "sha256-tree",
-        paths: [".pi-plugin/package.json", "skills"]
+        paths: [
+          ".pi-plugin/package.json",
+          "skills"
+        ]
       },
       verify: [
         {
           command: "node",
-          args: ["scripts/check-jervcode-consumer.mjs"],
+          args: [
+            "scripts/check-jervcode-consumer.mjs"
+          ],
           expected: "JervCode consumer fitness: clean ({version})"
         }
       ],
@@ -38700,6 +39163,9 @@ async function runDoctorClean(opts, io, deps) {
   const restartAction = registryEvidence ? surfaceRestartAction(registryEvidence.descriptor) : "restart the agent host";
   const checks = [];
   let restartPending = false;
+  const changedPluginHosts = /* @__PURE__ */ new Set();
+  const activeHostToken = registryEvidence?.descriptor.token;
+  const extraRestartLines = () => [...changedPluginHosts].filter((host) => host !== activeHostToken).sort().map((host) => restartLineForHost(host));
   const streamed = /* @__PURE__ */ new Set();
   const streamedLines = /* @__PURE__ */ new Set();
   const alreadyShown = (c) => streamed.has(c) || streamedLines.has(renderCheckLine(c));
@@ -38766,6 +39232,7 @@ async function runDoctorClean(opts, io, deps) {
       if (!heal.skipped) restartPending = true;
       if (heal.ok && !heal.skipped) {
         markHealChanged();
+        if (activeHostToken) changedPluginHosts.add(activeHostToken);
         spentRows.set("plugin-chain", row);
       }
     } else if (diagnosis.state !== "skipped") {
@@ -38821,7 +39288,25 @@ async function runDoctorClean(opts, io, deps) {
     const intent = capabilityGap && cliReport.ok ? `mmi-cli \u2014 self-updating to ${target} via npm install -g (missing commands: ${missing.join(", ")})` : `mmi-cli \u2014 self-updating ${cliReport.currentVersion} \u2192 ${target} via npm install -g`;
     healIntent(intent);
     traceHeal("cli-self-update");
-    const heal = await deps.updateCli(target, healStep);
+    let lastNpmLineAt = Date.now();
+    const startedAt = lastNpmLineAt;
+    const stepWithLiveness = (message, stepOpts) => {
+      lastNpmLineAt = Date.now();
+      healStep(message, stepOpts);
+    };
+    const heartbeat = opts.json ? void 0 : setInterval(() => {
+      const quietS = Math.floor((Date.now() - lastNpmLineAt) / 1e3);
+      if (quietS >= 30) {
+        io.log(`${VERBOSE_INDENT}still running \u2014 npm quiet for ${quietS}s (${Math.floor((Date.now() - startedAt) / 1e3)}s total)`);
+      }
+    }, 3e4);
+    heartbeat?.unref?.();
+    let heal;
+    try {
+      heal = await deps.updateCli(target, stepWithLiveness);
+    } finally {
+      if (heartbeat) clearInterval(heartbeat);
+    }
     if (heal.skipped) spentHeals.delete("cli-self-update");
     if (heal.ok && !heal.skipped) markHealChanged();
     const healEvidence = [
@@ -39028,6 +39513,9 @@ async function runDoctorClean(opts, io, deps) {
     if (changed.length > 0) {
       markHealChanged();
       restartPending = true;
+      for (const note of changed) {
+        if (note.host !== "marketplace") changedPluginHosts.add(note.host);
+      }
     }
     const passRow = {
       id: "update-pass",
@@ -39464,6 +39952,8 @@ async function runDoctorClean(opts, io, deps) {
       checks: payload,
       restartPending,
       ...restartPending ? { restartAction } : {},
+      // #4940: stable host tokens whose plugin changed this run — additive beside restartAction.
+      ...changedPluginHosts.size > 0 ? { restartHosts: [...changedPluginHosts].sort() } : {},
       exitCode
     }, null, 2));
     return exitCode;
@@ -39474,7 +39964,10 @@ async function runDoctorClean(opts, io, deps) {
       io.log(renderReport([c], { restartPending: false }));
       if (opts.verbose) for (const evidence of c.verbose ?? []) io.log(`${VERBOSE_INDENT}${evidence}`);
     }
-    if (restartPending) io.log(`\u21BB ${restartAction.charAt(0).toUpperCase()}${restartAction.slice(1)} to finish.`);
+    if (restartPending) {
+      io.log(`\u21BB ${restartAction.charAt(0).toUpperCase()}${restartAction.slice(1)} to finish.`);
+      for (const line of extraRestartLines()) io.log(line);
+    }
     return 0;
   }
   const rest = checks.filter((c) => !alreadyShown(c));
@@ -39485,7 +39978,10 @@ async function runDoctorClean(opts, io, deps) {
     if (opts.verbose) for (const evidence of check.verbose ?? []) lines.push(`${VERBOSE_INDENT}${evidence}`);
   }
   lines.push(renderTally(checks));
-  if (restartPending) lines.push(`\u21BB ${restartAction.charAt(0).toUpperCase()}${restartAction.slice(1)} to finish.`);
+  if (restartPending) {
+    lines.push(`\u21BB ${restartAction.charAt(0).toUpperCase()}${restartAction.slice(1)} to finish.`);
+    lines.push(...extraRestartLines());
+  }
   io.log(lines.join("\n"));
   return exitCode;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "3.130.0",
+  "version": "3.131.0",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",