@mutmutco/cli 3.88.0 → 3.89.0

package/dist/main.cjs

@@ -27862,13 +27862,16 @@ function registerSessionReport(program3) {
 // src/doctor-render.ts
 var RESTART_LINE = "\u21BB Restart Claude to finish.";
 var VERBOSE_INDENT = "    ";
+function checkGlyph(check) {
+  if (!check.ok) return "\u2717";
+  return check.verified === false ? "?" : "\u2713";
+}
 function renderCheckLine(check) {
-  if (check.ok) {
-    return check.detail ? `\u2713 ${check.label} \u2014 ${check.detail}` : `\u2713 ${check.label}`;
-  }
-  const head = check.detail ? `\u2717 ${check.label} \u2014 ${check.detail}` : `\u2717 ${check.label}`;
-  return check.fix ? `${head}
-${VERBOSE_INDENT}\u2192 ${check.fix}` : head;
+  const head = check.detail ? `${checkGlyph(check)} ${check.label} \u2014 ${check.detail}` : `${checkGlyph(check)} ${check.label}`;
+  const lines = [head];
+  if (check.fix) lines.push(`${VERBOSE_INDENT}\u2192 ${check.fix}`);
+  if (check.command) lines.push(`${VERBOSE_INDENT}${check.command}`);
+  return lines.join("\n");
 }
 function renderReport(checks, opts) {
   const lines = checks.map(renderCheckLine);
@@ -27877,8 +27880,14 @@ function renderReport(checks, opts) {
 }
 function renderTally(checks) {
   const total = checks.length;
-  const healthy = total - checks.filter((c) => !c.ok).length;
-  return healthy === total ? `\u2713 all ${total} checks healthy` : `\u2713 ${healthy} of ${total} checks healthy`;
+  const failed = checks.filter((c) => !c.ok).length;
+  const unverified = checks.filter((c) => c.ok && c.verified === false).length;
+  const healthy = total - failed - unverified;
+  if (failed === 0 && unverified === 0) return `\u2713 all ${total} checks healthy`;
+  const parts = [`\u2713 ${healthy} verified healthy`];
+  if (unverified > 0) parts.push(`? ${unverified} unverified`);
+  if (failed > 0) parts.push(`\u2717 ${failed} failed`);
+  return `${parts.join(" \xB7 ")} \u2014 ${total} checks`;
 }
 function doctorReportExitCode(checks) {
   return checks.some((c) => !c.ok && !c.reportOnly) ? 1 : 0;
@@ -28704,6 +28713,11 @@ function checkAwsIdentity(probe) {
   const arn = probe.callerArn?.trim();
   return {
     ok: !arn || !arn.endsWith(":root"),
+    // #4074: the row's claim is "this caller is not root", and with no ARN resolved there is no caller to
+    // make it about. `awsCallerArn` returns undefined for ANY failure — expired SSO, no `aws` binary, a
+    // timeout — so an empty result is "I could not look", never "I looked and it is fine". The evidence
+    // line below has said exactly that since #3485; the glyph now says it too.
+    verified: Boolean(arn),
     id: "aws-identity",
     label: "aws identity",
     fix: "use a non-root IAM user/session profile (set AWS_PROFILE or run: aws sso login), then verify `aws sts get-caller-identity` is not :root",
@@ -28738,13 +28752,25 @@ function checkCodexHookTrust(probe, displayName = "Codex") {
   if (probe.trusted) {
     return { id: "codex-hook-trust", ok: true, label, detail: "trusted", verbose: evidence };
   }
+  if (probe.requiredCount === 0) {
+    return {
+      id: "codex-hook-trust",
+      ok: true,
+      verified: false,
+      warn: true,
+      label,
+      detail: "no approval rows to read \u2014 the hook bundle could not be checked",
+      fix: `run \`mmi-cli plugin heal\`, restart ${displayName}, then review and trust MMI under \`/hooks\``,
+      verbose: evidence
+    };
+  }
   return {
     id: "codex-hook-trust",
     ok: true,
     warn: true,
     label,
-    detail: probe.requiredCount > 0 ? `${probe.trustedCount}/${probe.requiredCount} approval rows present \u2014 current hashes unverified` : "hook bundle could not be verified",
-    fix: probe.requiredCount > 0 ? `${displayName} does not allow silent hook approval; run \`/hooks\`, review the MMI commands, and trust them` : `run \`mmi-cli plugin heal\`, restart ${displayName}, then review and trust MMI under \`/hooks\``,
+    detail: `${probe.trustedCount}/${probe.requiredCount} approval rows present`,
+    fix: `${displayName} does not allow silent hook approval; run \`/hooks\`, review the MMI commands, and trust them`,
     verbose: evidence
   };
 }
@@ -28757,8 +28783,9 @@ function checkCliVersion(input, releasedNote) {
   if (!report.releasedVersion) {
     return {
       id: "cli-version",
-      ok: false,
-      reportOnly: true,
+      ok: true,
+      verified: false,
+      warn: true,
       label: "mmi-cli",
       detail: `${report.currentVersion} \u2014 freshness UNKNOWN, the published version could not be read`,
       fix: "check it directly: `mmi-cli --version` against `npm view @mutmutco/cli version`; update with `npm install -g @mutmutco/cli@<released>`",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/cli",
-  "version": "3.88.0",
+  "version": "3.89.0",
   "description": "MMI Future CLI — the org dev toolbox and shared cross-IDE engine for every registry-declared MMI coding surface.",
   "type": "module",
   "license": "UNLICENSED",