@mutmutco/hub 4.0.3 → 4.0.5

package/dist/index.cjs

@@ -27,6 +27,8 @@ __export(index_exports, {
   hermesArm: () => hermesArm,
   hermesHome: () => hermesHome,
   hubStatus: () => hubStatus,
+  launchdPlist: () => launchdPlist,
+  launcherSh: () => launcherSh,
   launcherVbs: () => launcherVbs,
   localStartBoundary: () => localStartBoundary,
   main: () => main,
@@ -37,6 +39,8 @@ __export(index_exports, {
   retryHint: () => retryHint,
   schedulerStatus: () => schedulerStatus,
   startSpinner: () => startSpinner,
+  systemdServiceUnit: () => systemdServiceUnit,
+  systemdTimerUnit: () => systemdTimerUnit,
   taskXml: () => taskXml,
   updateHeader: () => updateHeader,
   wrapWords: () => wrapWords
@@ -150,6 +154,22 @@ function journalHighWater(path, surface) {
   }
   return high;
 }
+function journalSurfaceRepeatedFail(path, surface, currentRun) {
+  let lastVerdict = null;
+  try {
+    for (const line of (0, import_node_fs.readFileSync)(path, "utf8").split("\n")) {
+      if (!line.trim()) continue;
+      try {
+        const event = JSON.parse(line);
+        if (event.dryRun || event.kind !== "arm" || event.surface !== surface || event.run === currentRun) continue;
+        lastVerdict = event.verdict;
+      } catch {
+      }
+    }
+  } catch {
+  }
+  return lastVerdict === "fail";
+}
 function parseSemver(version) {
   const match = /^(\d+)\.(\d+)\.(\d+)(?:-([0-9A-Za-z.-]+))?$/.exec(version.trim());
   if (!match) return null;
@@ -200,6 +220,11 @@ function runNpm(args, env = process.env, options = {}) {
   const result = npm.kind === "node-script" ? (0, import_node_child_process.spawnSync)(process.execPath, [npm.script, ...args], { encoding: "utf8", env, cwd: options.cwd, windowsHide: true }) : (0, import_node_child_process.spawnSync)(npm.command, args, { encoding: "utf8", env, cwd: options.cwd, shell: process.platform === "win32", windowsHide: true });
   return { status: result.status, stdout: result.stdout ?? "", stderr: result.stderr ?? "" };
 }
+function globalRoot(env = process.env) {
+  const root = runNpm(["root", "-g"], env);
+  if (root.status !== 0 || !root.stdout.trim()) return null;
+  return root.stdout.trim();
+}
 function npmView(spec, field, env = process.env) {
   const args = ["view", spec, "--json"];
   if (field) args.splice(2, 0, field);
@@ -314,11 +339,12 @@ function checkAtomicity(cachePath, tagCommit, bom, candidate, npm) {
       rows.push({ id: row.id, name, ok: false, detail: `${name}@${candidate} not on npm` });
       continue;
     }
-    if (integrity !== row.identity.value) {
+    const legacySsri = /^sha\d+-/.test(row.identity.value ?? "");
+    if (legacySsri && integrity !== row.identity.value) {
       rows.push({ id: row.id, name, ok: false, detail: `${name}@${candidate} dist.integrity differs from BOM identity` });
       continue;
     }
-    rows.push({ id: row.id, name, ok: true, detail: `${name}@${candidate} published, integrity matches` });
+    rows.push({ id: row.id, name, ok: true, detail: legacySsri ? `${name}@${candidate} published, integrity matches` : `${name}@${candidate} published` });
   }
   return { ok: rows.length > 0 && rows.every((row) => row.ok), rows };
 }
@@ -362,9 +388,8 @@ var import_node_fs5 = require("node:fs");
 var import_node_child_process3 = require("node:child_process");
 var import_node_path4 = require("node:path");
 function globalCliDist(env) {
-  const prefix = runNpm(["prefix", "-g"], env);
-  if (prefix.status !== 0 || !prefix.stdout.trim()) return null;
-  return (0, import_node_path4.join)(prefix.stdout.trim(), "node_modules", "@mutmutco", "cli", "dist", "index.cjs");
+  const root = globalRoot(env);
+  return root ? (0, import_node_path4.join)(root, "@mutmutco", "cli", "dist", "index.cjs") : null;
 }
 function probeCliVersion(distPath) {
   if (!fileExists(distPath)) return null;
@@ -421,9 +446,10 @@ function cliArm(options) {
   if (globalInstall.status !== 0) {
     return { surface: "cli", from: installed, to: target, verdict: "defer", detail: `global install failed: ${(globalInstall.stderr || globalInstall.stdout).split("\n").filter(Boolean).slice(-3).join(" | ")}` };
   }
-  const switched = probeCliVersion(globalCliDist(env) ?? "");
+  const switchedDist = globalCliDist(env);
+  const switched = probeCliVersion(switchedDist ?? "");
   if (switched !== target) {
-    return { surface: "cli", from: installed, to: switched ?? installed ?? "unknown", verdict: "fail", detail: `post-switch probe returned ${switched ?? "dead"}, expected ${target}` };
+    return { surface: "cli", from: installed, to: switched ?? installed ?? "unknown", verdict: "fail", detail: `post-switch probe returned ${switched ?? "dead"} at ${switchedDist ?? "an unresolvable path"}, expected ${target}; the global install already ran \u2014 nothing was rolled back` };
   }
   return { surface: "cli", from: installed, to: target, verdict: "ok", detail: `converged ${installed ?? "absent"} -> ${target} (staged, verified, switched)` };
 }
@@ -433,9 +459,8 @@ var import_node_fs6 = require("node:fs");
 var import_node_child_process4 = require("node:child_process");
 var import_node_path5 = require("node:path");
 function globalDist(env, packageName, distRel) {
-  const prefix = runNpm(["prefix", "-g"], env);
-  if (prefix.status !== 0 || !prefix.stdout.trim()) return null;
-  return (0, import_node_path5.join)(prefix.stdout.trim(), "node_modules", ...packageName.split("/"), ...distRel.split("/"));
+  const root = globalRoot(env);
+  return root ? (0, import_node_path5.join)(root, ...packageName.split("/"), ...distRel.split("/")) : null;
 }
 function probeVersion(distPath) {
   if (!fileExists(distPath)) return null;
@@ -501,9 +526,10 @@ function npmGlobalArm(options) {
   if (globalInstall.status !== 0) {
     return result(installed, target, "defer", `global install failed: ${tail(globalInstall.stderr || globalInstall.stdout)}`);
   }
-  const switched = probeVersion(globalDist(env, packageName, distRel) ?? "");
+  const switchedDist = globalDist(env, packageName, distRel);
+  const switched = probeVersion(switchedDist ?? "");
   if (switched !== target) {
-    return result(installed, switched ?? installed ?? "unknown", "fail", `post-switch probe returned ${switched ?? "dead"}, expected ${target}`);
+    return result(installed, switched ?? installed ?? "unknown", "fail", `post-switch probe returned ${switched ?? "dead"} at ${switchedDist ?? "an unresolvable path"}, expected ${target}; the global install already ran \u2014 nothing was rolled back`);
   }
   return result(installed, target, "ok", `converged ${installed ?? "absent"} -> ${target} (staged, verified, switched)`);
 }
@@ -523,6 +549,9 @@ var import_node_child_process5 = require("node:child_process");
 var import_node_fs7 = require("node:fs");
 var import_node_os3 = require("node:os");
 var import_node_path6 = require("node:path");
+function convergedAtOrAbove(installed, target, healthy) {
+  return healthy && typeof installed === "string" && compareSemver(installed, target) >= 0;
+}
 function cmdArg(value) {
   return /^[A-Za-z0-9_@./:\\=+-]+$/.test(value) ? value : `"${value.replaceAll('"', '""')}"`;
 }
@@ -646,9 +675,12 @@ function claudeArm(options) {
     }
     observed = claudeMmi(runner, env);
   }
-  if (observed.row?.version !== options.target || observed.row.enabled !== true) {
+  if (!convergedAtOrAbove(observed.row?.version, options.target, observed.row?.enabled === true)) {
     return { surface: "claude", from, to: observed.row?.version ?? "unknown", verdict: "fail", detail: `post-update evidence is version ${observed.row?.version ?? "missing"}, enabled=${String(observed.row?.enabled)}, expected ${options.target}/true` };
   }
+  if (observed.row.version !== options.target) {
+    return { surface: "claude", from, to: observed.row.version, verdict: "skip", detail: `installed ${observed.row.version} is above candidate ${options.target} (monotonic)` };
+  }
   return { surface: "claude", from, to: options.target, verdict: "ok", detail: `catalog refreshed; converged and verified ${from ?? "absent"} -> ${options.target}` };
 }
 var SNAPSHOT_MISSING = /marketplace snapshot|marketplace root does not contain/i;
@@ -688,9 +720,12 @@ function codexArm(options) {
     }
     observed = codexMmi(runner, env);
   }
-  if (observed.row?.version !== options.target || observed.row.installed !== true || observed.row.enabled !== true) {
+  if (!convergedAtOrAbove(observed.row?.version, options.target, observed.row?.installed === true && observed.row?.enabled === true)) {
     return { surface: "codex", from, to: observed.row?.version ?? "unknown", verdict: "fail", detail: `post-upgrade evidence is version ${observed.row?.version ?? "missing"}, installed=${String(observed.row?.installed)}, enabled=${String(observed.row?.enabled)}, expected ${options.target}/true/true` };
   }
+  if (observed.row.version !== options.target) {
+    return { surface: "codex", from, to: observed.row.version, verdict: "skip", detail: `installed ${observed.row.version} is above candidate ${options.target} (monotonic)` };
+  }
   return { surface: "codex", from, to: options.target, verdict: "ok", detail: `marketplace upgraded; payload refresh and native evidence verified at ${options.target}` };
 }
 var KILO_PACKAGE = "@mutmutco/kilo-plugin";
@@ -1787,6 +1822,7 @@ function reconcile(options) {
   };
   const summary = { run, target: null, gate: null, atomicity: null, cli: null, updater: null, plugins: [], reap: [], surfaces: [], journalOk: true, exit: 0 };
   const recordArm = (arm) => {
+    if (arm.verdict === "fail") arm.repeatFailure = journalSurfaceRepeatedFail(paths.journalPath, arm.surface, run);
     journal({ kind: "arm", surface: arm.surface, from: arm.from, to: arm.to, verdict: arm.verdict, detail: arm.detail, compat: arm.compat });
     options.onArm?.(arm);
     if (arm.verdict === "defer") summary.exit = Math.max(summary.exit, 2);
@@ -1890,16 +1926,37 @@ function reconcile(options) {
 // src/scheduler.ts
 var import_node_child_process9 = require("node:child_process");
 var import_node_fs14 = require("node:fs");
+var import_node_os5 = require("node:os");
 var import_node_path12 = require("node:path");
 var TASK_NAME = "MMI Fleet Updater";
 var LAUNCHER_FILE = "reconcile-hidden.vbs";
 var RUN_BOUND = "PT15M";
 var REPEAT_INTERVAL = "PT1H";
 var CADENCE = `hourly from registration, StartWhenAvailable, single-instance, ${RUN_BOUND} bound`;
+var POSIX_LAUNCHER_FILE = "reconcile.sh";
+var STARTINTERVAL_SECONDS = 3600;
+var RUN_BOUND_SECONDS = 900;
+var POSIX_CADENCE = "hourly from registration, catch-up-if-missed, single-instance";
+var LAUNCHD_LABEL = "com.mutmutco.mmi-hub.updater";
+var LAUNCHD_PLIST_NAME = `${LAUNCHD_LABEL}.plist`;
+var SYSTEMD_UNIT = "mmi-hub-updater";
+var SYSTEMD_SERVICE_NAME = `${SYSTEMD_UNIT}.service`;
+var SYSTEMD_TIMER_NAME = `${SYSTEMD_UNIT}.timer`;
 function schtasks(args) {
   const result = (0, import_node_child_process9.spawnSync)("schtasks.exe", args, { encoding: "utf8", windowsHide: true });
   return { status: result.status, stdout: result.stdout ?? "", stderr: result.stderr ?? "" };
 }
+function launchctl(args) {
+  const result = (0, import_node_child_process9.spawnSync)("launchctl", args, { encoding: "utf8", windowsHide: true });
+  return { status: result.status, stdout: result.stdout ?? "", stderr: result.stderr ?? "" };
+}
+function systemctlUser(args) {
+  const result = (0, import_node_child_process9.spawnSync)("systemctl", ["--user", ...args], { encoding: "utf8", windowsHide: true });
+  return { status: result.status, stdout: result.stdout ?? "", stderr: result.stderr ?? "" };
+}
+function uid() {
+  return typeof process.getuid === "function" ? process.getuid() : 0;
+}
 function xmlEscape(value) {
   return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
@@ -1918,6 +1975,14 @@ code = shell.Run("""${vbsQuote(nodeExe)}"" ""${vbsQuote(hubDist)}"" update", 0,
 WScript.Quit code
 `;
 }
+function launcherSh(nodeExe, hubDist) {
+  const shQuote = (value) => `'${value.replaceAll("'", `'\\''`)}'`;
+  return `#!/bin/sh
+# MMI Hub maintenance launcher \u2014 generated by \`mmi-hub autoupdate on\`.
+# The exit code is propagated and reported by \`mmi-hub status\`.
+exec ${shQuote(nodeExe)} ${shQuote(hubDist)} update
+`;
+}
 function taskXml(launcherPath, workDir, userId, startBoundary) {
   return `<?xml version="1.0" encoding="UTF-16"?>
 <Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
@@ -1960,7 +2025,53 @@ function taskXml(launcherPath, workDir, userId, startBoundary) {
 </Task>
 `;
 }
-function readLauncher(path) {
+function launchdPlist(launcherPath, workDir) {
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${LAUNCHD_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>/bin/sh</string>
+    <string>${xmlEscape(launcherPath)}</string>
+  </array>
+  <key>WorkingDirectory</key>
+  <string>${xmlEscape(workDir)}</string>
+  <key>StartInterval</key>
+  <integer>${STARTINTERVAL_SECONDS}</integer>
+  <key>RunAtLoad</key>
+  <true/>
+</dict>
+</plist>
+`;
+}
+function systemdServiceUnit(launcherPath, workDir) {
+  return `[Unit]
+Description=MMI Hub maintenance \u2014 converge this machine's MMI surfaces to the newest gated release
+
+[Service]
+Type=oneshot
+WorkingDirectory=${workDir}
+ExecStart=/bin/sh ${launcherPath}
+TimeoutStartSec=${RUN_BOUND_SECONDS}
+`;
+}
+function systemdTimerUnit() {
+  return `[Unit]
+Description=MMI Hub maintenance hourly reconcile timer
+
+[Timer]
+OnUnitActiveSec=${STARTINTERVAL_SECONDS}
+Persistent=true
+AccuracySec=1min
+
+[Install]
+WantedBy=timers.target
+`;
+}
+function readFileOrNull(path) {
   try {
     return (0, import_node_fs14.readFileSync)(path, "utf8");
   } catch {
@@ -1983,6 +2094,7 @@ function elevatedRelaunch(mode, env) {
 }
 var NEVER_RUN_RESULT = 267011;
 var NEVER_RUN_YEAR = 1999;
+var EMPTY_RUN_INFO = { lastRunTime: null, lastTaskResult: null, nextRunTime: null };
 function taskRunInfo() {
   const result = (0, import_node_child_process9.spawnSync)(
     "powershell.exe",
@@ -2004,24 +2116,20 @@ function taskRunInfo() {
 function neverRan(info) {
   return info.lastTaskResult === NEVER_RUN_RESULT || (info.lastRunTime?.includes(String(NEVER_RUN_YEAR)) ?? false);
 }
-function schedulerStatus(env = process.env) {
-  const empty = { lastRunTime: null, lastTaskResult: null, nextRunTime: null };
-  if (process.platform !== "win32") {
-    return { ok: false, supported: false, enabled: false, ...empty, detail: "automatic scheduling is available on Windows Task Scheduler only" };
-  }
+function windowsSchedulerStatus(env) {
   const query = schtasks(["/query", "/tn", TASK_NAME, "/xml"]);
   if (query.status !== 0) {
-    return { ok: false, supported: true, enabled: false, ...empty, detail: `"${TASK_NAME}" is not registered \u2014 run \`mmi-hub autoupdate on\`` };
+    return { ok: false, supported: true, enabled: false, ...EMPTY_RUN_INFO, detail: `"${TASK_NAME}" is not registered \u2014 run \`mmi-hub autoupdate on\`` };
   }
   const hubDist = globalDist(env, "@mutmutco/hub", "dist/index.cjs");
   const launcherPath = (0, import_node_path12.join)(statePaths(env).root, LAUNCHER_FILE);
   const info = taskRunInfo();
-  const runInfo = info ?? empty;
+  const runInfo = info ?? EMPTY_RUN_INFO;
   const fail = (detail) => ({ ok: false, supported: true, enabled: true, ...runInfo, detail });
   if (!query.stdout.includes(launcherPath)) {
     return fail(`"${TASK_NAME}" action does not run the hidden launcher ${launcherPath} \u2014 run \`mmi-hub autoupdate on\``);
   }
-  const launcher = readLauncher(launcherPath);
+  const launcher = readFileOrNull(launcherPath);
   if (hubDist && !launcher?.includes(hubDist)) {
     return fail(`"${TASK_NAME}" launcher does not point at the current @mutmutco/hub dist ${hubDist} \u2014 run \`mmi-hub autoupdate on\``);
   }
@@ -2038,9 +2146,74 @@ function schedulerStatus(env = process.env) {
   const ran = !info ? "run history unreadable" : neverRan(info) ? "never run yet" : `last run ${info.lastRunTime} \u2192 exit ${info.lastTaskResult ?? "unknown"}`;
   return { ok: true, supported: true, enabled: true, ...runInfo, detail: `"${TASK_NAME}" registered ${CADENCE}; ${points}; ${ran}; next ${runInfo.nextRunTime ?? "unscheduled"}` };
 }
-function installTask(env = process.env) {
-  if (process.platform !== "win32") return { ok: false, detail: "scheduler registration is Windows Task Scheduler only" };
-  const current = schedulerStatus(env);
+function darwinSchedulerStatus(env) {
+  const plistPath = (0, import_node_path12.join)((0, import_node_os5.homedir)(), "Library", "LaunchAgents", LAUNCHD_PLIST_NAME);
+  const plist = readFileOrNull(plistPath);
+  if (!plist) {
+    return { ok: false, supported: true, enabled: false, ...EMPTY_RUN_INFO, detail: `"${LAUNCHD_LABEL}" is not registered \u2014 run \`mmi-hub autoupdate on\`` };
+  }
+  const hubDist = globalDist(env, "@mutmutco/hub", "dist/index.cjs");
+  const launcherPath = (0, import_node_path12.join)(statePaths(env).root, POSIX_LAUNCHER_FILE);
+  const fail = (detail) => ({ ok: false, supported: true, enabled: true, ...EMPTY_RUN_INFO, detail });
+  if (!plist.includes(launcherPath)) {
+    return fail(`"${LAUNCHD_LABEL}" does not run the reconcile launcher ${launcherPath} \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  const launcher = readFileOrNull(launcherPath);
+  if (hubDist && !launcher?.includes(hubDist)) {
+    return fail(`"${LAUNCHD_LABEL}" launcher does not point at the current @mutmutco/hub dist ${hubDist} \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  if (!plist.includes(`<integer>${STARTINTERVAL_SECONDS}</integer>`)) {
+    return fail(`"${LAUNCHD_LABEL}" has no ${STARTINTERVAL_SECONDS}s StartInterval \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  const loaded = launchctl(["print", `gui/${uid()}/${LAUNCHD_LABEL}`]);
+  if (loaded.status !== 0) {
+    return fail(`"${LAUNCHD_LABEL}" is registered but not loaded \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  const points = `points at ${hubDist ?? "the registered Hub dist"}`;
+  return { ok: true, supported: true, enabled: true, ...EMPTY_RUN_INFO, detail: `"${LAUNCHD_LABEL}" registered ${POSIX_CADENCE}; ${points}` };
+}
+function linuxSchedulerStatus(env) {
+  const unitDir = (0, import_node_path12.join)((0, import_node_os5.homedir)(), ".config", "systemd", "user");
+  const timerPath = (0, import_node_path12.join)(unitDir, SYSTEMD_TIMER_NAME);
+  const timer = readFileOrNull(timerPath);
+  const service = readFileOrNull((0, import_node_path12.join)(unitDir, SYSTEMD_SERVICE_NAME));
+  if (!timer || !service) {
+    return { ok: false, supported: true, enabled: false, ...EMPTY_RUN_INFO, detail: `"${SYSTEMD_TIMER_NAME}" is not registered \u2014 run \`mmi-hub autoupdate on\`` };
+  }
+  const hubDist = globalDist(env, "@mutmutco/hub", "dist/index.cjs");
+  const launcherPath = (0, import_node_path12.join)(statePaths(env).root, POSIX_LAUNCHER_FILE);
+  const fail = (detail) => ({ ok: false, supported: true, enabled: true, ...EMPTY_RUN_INFO, detail });
+  if (!service.includes(launcherPath)) {
+    return fail(`"${SYSTEMD_SERVICE_NAME}" does not run the reconcile launcher ${launcherPath} \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  const launcher = readFileOrNull(launcherPath);
+  if (hubDist && !launcher?.includes(hubDist)) {
+    return fail(`"${SYSTEMD_SERVICE_NAME}" launcher does not point at the current @mutmutco/hub dist ${hubDist} \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  if (!timer.includes(`OnUnitActiveSec=${STARTINTERVAL_SECONDS}`)) {
+    return fail(`"${SYSTEMD_TIMER_NAME}" has no ${STARTINTERVAL_SECONDS}s OnUnitActiveSec \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  const enabled = systemctlUser(["is-enabled", SYSTEMD_TIMER_NAME]);
+  if (enabled.status !== 0) {
+    return fail(`"${SYSTEMD_TIMER_NAME}" is registered but not enabled \u2014 run \`mmi-hub autoupdate on\``);
+  }
+  const points = `points at ${hubDist ?? "the registered Hub dist"}`;
+  return { ok: true, supported: true, enabled: true, ...EMPTY_RUN_INFO, detail: `"${SYSTEMD_TIMER_NAME}" registered ${POSIX_CADENCE}, ${RUN_BOUND_SECONDS}s bound; ${points}` };
+}
+function schedulerStatus(env = process.env) {
+  if (process.platform === "win32") return windowsSchedulerStatus(env);
+  if (process.platform === "darwin") return darwinSchedulerStatus(env);
+  if (process.platform === "linux") return linuxSchedulerStatus(env);
+  return {
+    ok: false,
+    supported: false,
+    enabled: false,
+    ...EMPTY_RUN_INFO,
+    detail: "automatic scheduling is available on Windows Task Scheduler, macOS launchd, and Linux systemd user timers only"
+  };
+}
+function installWindowsTask(env) {
+  const current = windowsSchedulerStatus(env);
   if (current.ok) return { ok: true, detail: `already enabled \u2014 ${current.detail}` };
   const hubDist = globalDist(env, "@mutmutco/hub", "dist/index.cjs");
   if (!hubDist) return { ok: false, detail: "cannot resolve the global @mutmutco/hub dist \u2014 run `npm install -g @mutmutco/hub` first" };
@@ -2057,18 +2230,68 @@ function installTask(env = process.env) {
     if (!denied || !elevatedRelaunch("on", env)) {
       return { ok: false, detail: denied ? "task creation needs elevation and UAC consent was not granted \u2014 run `mmi-hub autoupdate on` from an elevated terminal" : `schtasks /create failed: ${(create.stderr || create.stdout).trim()}` };
     }
-    const verify = schedulerStatus(env);
+    const verify = windowsSchedulerStatus(env);
     return verify.ok ? { ok: true, detail: `enabled "${TASK_NAME}" (elevated) \u2014 ${CADENCE}` } : { ok: false, detail: `elevated registration did not take: ${verify.detail}` };
   }
   return { ok: true, detail: `enabled "${TASK_NAME}" \u2014 ${CADENCE} \u2192 ${hubDist}` };
 }
-function uninstallTask(env = process.env) {
-  if (process.platform !== "win32") return { ok: false, detail: "scheduler registration is Windows Task Scheduler only" };
+function installLaunchd(env) {
+  const current = darwinSchedulerStatus(env);
+  if (current.ok) return { ok: true, detail: `already enabled \u2014 ${current.detail}` };
+  const hubDist = globalDist(env, "@mutmutco/hub", "dist/index.cjs");
+  if (!hubDist) return { ok: false, detail: "cannot resolve the global @mutmutco/hub dist \u2014 run `npm install -g @mutmutco/hub` first" };
+  const paths = ensureState(env);
+  const launcherPath = (0, import_node_path12.join)(paths.root, POSIX_LAUNCHER_FILE);
+  (0, import_node_fs14.writeFileSync)(launcherPath, launcherSh(process.execPath, hubDist), "utf8");
+  (0, import_node_fs14.chmodSync)(launcherPath, 493);
+  const agentsDir = (0, import_node_path12.join)((0, import_node_os5.homedir)(), "Library", "LaunchAgents");
+  (0, import_node_fs14.mkdirSync)(agentsDir, { recursive: true });
+  const plistPath = (0, import_node_path12.join)(agentsDir, LAUNCHD_PLIST_NAME);
+  (0, import_node_fs14.writeFileSync)(plistPath, launchdPlist(launcherPath, paths.root), "utf8");
+  launchctl(["bootout", `gui/${uid()}/${LAUNCHD_LABEL}`]);
+  const load = launchctl(["bootstrap", `gui/${uid()}`, plistPath]);
+  if (load.status !== 0) {
+    return { ok: false, detail: `launchctl bootstrap failed: ${(load.stderr || load.stdout).trim() || "unknown error"}` };
+  }
+  const verify = darwinSchedulerStatus(env);
+  return verify.ok ? { ok: true, detail: `enabled "${LAUNCHD_LABEL}" \u2014 ${POSIX_CADENCE} \u2192 ${hubDist}` } : { ok: false, detail: `registration did not take: ${verify.detail}` };
+}
+function installSystemdTimer(env) {
+  const current = linuxSchedulerStatus(env);
+  if (current.ok) return { ok: true, detail: `already enabled \u2014 ${current.detail}` };
+  const hubDist = globalDist(env, "@mutmutco/hub", "dist/index.cjs");
+  if (!hubDist) return { ok: false, detail: "cannot resolve the global @mutmutco/hub dist \u2014 run `npm install -g @mutmutco/hub` first" };
+  const paths = ensureState(env);
+  const launcherPath = (0, import_node_path12.join)(paths.root, POSIX_LAUNCHER_FILE);
+  (0, import_node_fs14.writeFileSync)(launcherPath, launcherSh(process.execPath, hubDist), "utf8");
+  (0, import_node_fs14.chmodSync)(launcherPath, 493);
+  const unitDir = (0, import_node_path12.join)((0, import_node_os5.homedir)(), ".config", "systemd", "user");
+  (0, import_node_fs14.mkdirSync)(unitDir, { recursive: true });
+  (0, import_node_fs14.writeFileSync)((0, import_node_path12.join)(unitDir, SYSTEMD_SERVICE_NAME), systemdServiceUnit(launcherPath, paths.root), "utf8");
+  (0, import_node_fs14.writeFileSync)((0, import_node_path12.join)(unitDir, SYSTEMD_TIMER_NAME), systemdTimerUnit(), "utf8");
+  const reload = systemctlUser(["daemon-reload"]);
+  if (reload.status !== 0) {
+    return { ok: false, detail: `systemctl --user daemon-reload failed: ${(reload.stderr || reload.stdout).trim() || "unknown error \u2014 is a user systemd instance running?"}` };
+  }
+  const enable = systemctlUser(["enable", "--now", SYSTEMD_TIMER_NAME]);
+  if (enable.status !== 0) {
+    return { ok: false, detail: `systemctl --user enable --now ${SYSTEMD_TIMER_NAME} failed: ${(enable.stderr || enable.stdout).trim() || "unknown error"}` };
+  }
+  const verify = linuxSchedulerStatus(env);
+  return verify.ok ? { ok: true, detail: `enabled "${SYSTEMD_TIMER_NAME}" \u2014 ${POSIX_CADENCE} \u2192 ${hubDist}` } : { ok: false, detail: `registration did not take: ${verify.detail}` };
+}
+function installTask(env = process.env) {
+  if (process.platform === "win32") return installWindowsTask(env);
+  if (process.platform === "darwin") return installLaunchd(env);
+  if (process.platform === "linux") return installSystemdTimer(env);
+  return { ok: false, detail: "scheduler registration is available on Windows Task Scheduler, macOS launchd, and Linux systemd user timers only" };
+}
+function uninstallWindowsTask(env) {
   const del = schtasks(["/delete", "/tn", TASK_NAME, "/f"]);
   if (del.status !== 0) {
     const query = schtasks(["/query", "/tn", TASK_NAME]);
     if (query.status !== 0 && !/access is denied/i.test(del.stderr + del.stdout)) {
-      dropLauncher(env);
+      dropLauncher(env, LAUNCHER_FILE);
       return { ok: true, detail: `automatic updates already off \u2014 "${TASK_NAME}" is not registered; installed tooling was kept` };
     }
     const denied = /access is denied/i.test(del.stderr + del.stdout);
@@ -2079,12 +2302,47 @@ function uninstallTask(env = process.env) {
       return { ok: false, detail: `elevated deletion did not take: "${TASK_NAME}" is still registered` };
     }
   }
-  dropLauncher(env);
+  dropLauncher(env, LAUNCHER_FILE);
   return { ok: true, detail: `automatic updates off \u2014 removed "${TASK_NAME}"; installed tooling was kept` };
 }
-function dropLauncher(env) {
+function uninstallLaunchd(env) {
+  const plistPath = (0, import_node_path12.join)((0, import_node_os5.homedir)(), "Library", "LaunchAgents", LAUNCHD_PLIST_NAME);
+  const boot = launchctl(["bootout", `gui/${uid()}/${LAUNCHD_LABEL}`]);
+  if (boot.status !== 0 && (0, import_node_fs14.existsSync)(plistPath)) {
+    return { ok: false, detail: `launchctl bootout failed: ${(boot.stderr || boot.stdout).trim() || "unknown error"}` };
+  }
+  try {
+    (0, import_node_fs14.rmSync)(plistPath, { force: true });
+  } catch {
+  }
+  dropLauncher(env, POSIX_LAUNCHER_FILE);
+  return { ok: true, detail: `automatic updates off \u2014 removed "${LAUNCHD_LABEL}"; installed tooling was kept` };
+}
+function uninstallSystemdTimer(env) {
+  const unitDir = (0, import_node_path12.join)((0, import_node_os5.homedir)(), ".config", "systemd", "user");
+  const timerPath = (0, import_node_path12.join)(unitDir, SYSTEMD_TIMER_NAME);
+  const disable = systemctlUser(["disable", "--now", SYSTEMD_TIMER_NAME]);
+  if (disable.status !== 0 && (0, import_node_fs14.existsSync)(timerPath)) {
+    return { ok: false, detail: `systemctl --user disable --now ${SYSTEMD_TIMER_NAME} failed: ${(disable.stderr || disable.stdout).trim() || "unknown error"}` };
+  }
+  try {
+    (0, import_node_fs14.rmSync)(timerPath, { force: true });
+    (0, import_node_fs14.rmSync)((0, import_node_path12.join)(unitDir, SYSTEMD_SERVICE_NAME), { force: true });
+  } catch {
+  }
+  systemctlUser(["daemon-reload"]);
+  dropLauncher(env, POSIX_LAUNCHER_FILE);
+  return { ok: true, detail: `automatic updates off \u2014 removed "${SYSTEMD_TIMER_NAME}"; installed tooling was kept` };
+}
+function uninstallTask(env = process.env) {
+  if (process.platform === "win32") return uninstallWindowsTask(env);
+  if (process.platform === "darwin") return uninstallLaunchd(env);
+  if (process.platform === "linux") return uninstallSystemdTimer(env);
+  return { ok: false, detail: "scheduler registration is available on Windows Task Scheduler, macOS launchd, and Linux systemd user timers only" };
+}
+function dropLauncher(env, file) {
   try {
-    (0, import_node_fs14.rmSync)((0, import_node_path12.join)(statePaths(env).root, LAUNCHER_FILE), { force: true });
+    (0, import_node_fs14.rmSync)((0, import_node_path12.join)(statePaths(env).root, file), { force: true });
   } catch {
   }
 }
@@ -2149,7 +2407,7 @@ function hubStatus(hubVersion, env = process.env, invokedPath = process.argv[1])
   const failures = [];
   if (error) failures.push(`${error} \u2014 inspect permissions for ${paths.journalPath}`);
   if (!events.length && !error) failures.push("no maintenance journal yet \u2014 run `mmi-hub install`");
-  if (!schedule.ok) failures.push(schedule.detail);
+  if (!schedule.ok && schedule.supported) failures.push(schedule.detail);
   for (const [surface, row] of Object.entries(installed)) {
     if (!row.installed) failures.push(`${surface}: installed version is unreadable at ${row.location ?? "an unknown location"} \u2014 run \`mmi-hub update\``);
     if (row.state === "behind") failures.push(`${surface}: installed ${row.installed} is behind expected ${row.expected} \u2014 run \`mmi-hub update\``);
@@ -2157,7 +2415,8 @@ function hubStatus(hubVersion, env = process.env, invokedPath = process.argv[1])
   for (const event of latestRunEvents) {
     if ((event.kind === "arm" || event.kind === "reconcile") && (event.verdict === "fail" || event.verdict === "defer")) {
       const surface = event.surface === "updater" ? "hub" : event.surface ?? event.kind;
-      failures.push(`last run ${surface}: ${event.detail ?? event.verdict} \u2014 run \`mmi-hub update\``);
+      const repeat = event.kind === "arm" && event.verdict === "fail" && event.surface && journalSurfaceRepeatedFail(paths.journalPath, event.surface, latestEvent.run);
+      failures.push(repeat ? `last run ${surface}: ${event.detail ?? event.verdict} \u2014 already failed the previous run too; \`mmi-hub update\` will not clear it, inspect the journal` : `last run ${surface}: ${event.detail ?? event.verdict} \u2014 run \`mmi-hub update\``);
     }
   }
   return {
@@ -2218,9 +2477,10 @@ var RETRY_HINTS = [
   [/elevat|access is denied/, "run from elevated terminal"]
 ];
 var FAIL_CONSEQUENCE = [
-  [/post-switch probe|post-update evidence|post-install evidence|expected .*\/true/, "not verified \u2014 previous version restored, safe to use"],
-  [/rollback|did not restore/, "rollback incomplete \u2014 run doctor now"]
+  [/rollback failed|did not restore/, "rollback incomplete \u2014 run doctor now"],
+  [/post-switch probe|post-update evidence|post-install evidence|post-switch marker|expected .*\/true/, "not verified \u2014 switch already applied, nothing was rolled back"]
 ];
+var RESTORE_EVIDENCE = /\brestored\b|\brolled back to\b/i;
 function matchFirst(patterns, detail) {
   const haystack = (detail ?? "").toLowerCase();
   for (const [pattern, text] of patterns) if (pattern.test(haystack)) return text;
@@ -2229,13 +2489,17 @@ function matchFirst(patterns, detail) {
 function retryHint(detail) {
   return matchFirst(RETRY_HINTS, detail) ?? "retries next hourly run";
 }
-function failConsequence(detail) {
+function failConsequence(row) {
+  const detail = row.detail ?? "";
+  if (RESTORE_EVIDENCE.test(detail)) {
+    return `not verified \u2014 restored previous version ${row.from ?? "unknown"}, safe to use`;
+  }
   return matchFirst(FAIL_CONSEQUENCE, detail) ?? "update failed \u2014 previous version kept";
 }
 function classify(arm) {
   const kind = arm.verdict === "ok" ? arm.from !== null && arm.from === arm.to ? "current" : "updated" : arm.verdict === "skip" ? "keep" : arm.verdict === "defer" ? "retry" : "failed";
   const note = kind === "updated" ? ACTIVATION_NOTE[arm.surface] ?? null : kind === "keep" ? "above target" : kind === "retry" ? retryHint(arm.detail) : null;
-  return { name: arm.surface === "updater" ? "hub" : arm.surface, from: arm.from, to: arm.to, kind, note, detail: arm.detail };
+  return { name: arm.surface === "updater" ? "hub" : arm.surface, from: arm.from, to: arm.to, kind, note, detail: arm.detail, repeatFailure: arm.repeatFailure === true };
 }
 function statusText(kind, dryRun) {
   if (dryRun && kind === "updated") return "would update";
@@ -2309,7 +2573,7 @@ function collectRows(summary) {
   for (const arm of summary.plugins) rows.push(classify(arm));
   for (const surface of summary.surfaces) {
     if (surface.present && surface.action === "arm-pending") {
-      rows.push({ name: surface.id, from: null, to: summary.target ?? "?", kind: "pending", note: "arm not landed", detail: "" });
+      rows.push({ name: surface.id, from: null, to: summary.target ?? "?", kind: "pending", note: "arm not landed", detail: "", repeatFailure: false });
     }
   }
   if (summary.updater) rows.push(classify(summary.updater));
@@ -2360,8 +2624,8 @@ function reportFooterLines(summary, options = {}) {
     out.push("");
     for (const row of rows.filter((row2) => row2.kind === "failed")) {
       const mark = tty ? paint("failed", "\u2717 ") : "";
-      out.push(...noteLines("  " + mark + row.name, failConsequence(row.detail), width));
-      out.push(...noteLines("     fix: ", `mmi-cli doctor, then mmi-hub update`, width));
+      out.push(...noteLines("  " + mark + row.name, failConsequence(row), width));
+      out.push(...noteLines("     fix: ", row.repeatFailure ? "doctor + update already tried and did not clear this \u2014 see log, do not repeat" : "mmi-cli doctor, then mmi-hub update", width));
       out.push(...noteLines("     log: ", journalPath, width));
     }
   }
@@ -2596,6 +2860,8 @@ if (typeof require !== "undefined" && require.main === module) {
   hermesArm,
   hermesHome,
   hubStatus,
+  launchdPlist,
+  launcherSh,
   launcherVbs,
   localStartBoundary,
   main,
@@ -2606,6 +2872,8 @@ if (typeof require !== "undefined" && require.main === module) {
   retryHint,
   schedulerStatus,
   startSpinner,
+  systemdServiceUnit,
+  systemdTimerUnit,
   taskXml,
   updateHeader,
   wrapWords

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/hub",
-  "version": "4.0.3",
+  "version": "4.0.5",
   "description": "Install and maintain the MMI CLI and every present host surface from one release-gated Hub command.",
   "type": "module",
   "license": "UNLICENSED",