@mutmutco/hub 4.0.4 → 4.0.5

package/dist/index.cjs

@@ -339,11 +339,12 @@ function checkAtomicity(cachePath, tagCommit, bom, candidate, npm) {
       rows.push({ id: row.id, name, ok: false, detail: `${name}@${candidate} not on npm` });
       continue;
     }
-    if (integrity !== row.identity.value) {
+    const legacySsri = /^sha\d+-/.test(row.identity.value ?? "");
+    if (legacySsri && integrity !== row.identity.value) {
       rows.push({ id: row.id, name, ok: false, detail: `${name}@${candidate} dist.integrity differs from BOM identity` });
       continue;
     }
-    rows.push({ id: row.id, name, ok: true, detail: `${name}@${candidate} published, integrity matches` });
+    rows.push({ id: row.id, name, ok: true, detail: legacySsri ? `${name}@${candidate} published, integrity matches` : `${name}@${candidate} published` });
   }
   return { ok: rows.length > 0 && rows.every((row) => row.ok), rows };
 }
@@ -548,6 +549,9 @@ var import_node_child_process5 = require("node:child_process");
 var import_node_fs7 = require("node:fs");
 var import_node_os3 = require("node:os");
 var import_node_path6 = require("node:path");
+function convergedAtOrAbove(installed, target, healthy) {
+  return healthy && typeof installed === "string" && compareSemver(installed, target) >= 0;
+}
 function cmdArg(value) {
   return /^[A-Za-z0-9_@./:\\=+-]+$/.test(value) ? value : `"${value.replaceAll('"', '""')}"`;
 }
@@ -671,9 +675,12 @@ function claudeArm(options) {
     }
     observed = claudeMmi(runner, env);
   }
-  if (observed.row?.version !== options.target || observed.row.enabled !== true) {
+  if (!convergedAtOrAbove(observed.row?.version, options.target, observed.row?.enabled === true)) {
     return { surface: "claude", from, to: observed.row?.version ?? "unknown", verdict: "fail", detail: `post-update evidence is version ${observed.row?.version ?? "missing"}, enabled=${String(observed.row?.enabled)}, expected ${options.target}/true` };
   }
+  if (observed.row.version !== options.target) {
+    return { surface: "claude", from, to: observed.row.version, verdict: "skip", detail: `installed ${observed.row.version} is above candidate ${options.target} (monotonic)` };
+  }
   return { surface: "claude", from, to: options.target, verdict: "ok", detail: `catalog refreshed; converged and verified ${from ?? "absent"} -> ${options.target}` };
 }
 var SNAPSHOT_MISSING = /marketplace snapshot|marketplace root does not contain/i;
@@ -713,9 +720,12 @@ function codexArm(options) {
     }
     observed = codexMmi(runner, env);
   }
-  if (observed.row?.version !== options.target || observed.row.installed !== true || observed.row.enabled !== true) {
+  if (!convergedAtOrAbove(observed.row?.version, options.target, observed.row?.installed === true && observed.row?.enabled === true)) {
     return { surface: "codex", from, to: observed.row?.version ?? "unknown", verdict: "fail", detail: `post-upgrade evidence is version ${observed.row?.version ?? "missing"}, installed=${String(observed.row?.installed)}, enabled=${String(observed.row?.enabled)}, expected ${options.target}/true/true` };
   }
+  if (observed.row.version !== options.target) {
+    return { surface: "codex", from, to: observed.row.version, verdict: "skip", detail: `installed ${observed.row.version} is above candidate ${options.target} (monotonic)` };
+  }
   return { surface: "codex", from, to: options.target, verdict: "ok", detail: `marketplace upgraded; payload refresh and native evidence verified at ${options.target}` };
 }
 var KILO_PACKAGE = "@mutmutco/kilo-plugin";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mutmutco/hub",
-  "version": "4.0.4",
+  "version": "4.0.5",
   "description": "Install and maintain the MMI CLI and every present host surface from one release-gated Hub command.",
   "type": "module",
   "license": "UNLICENSED",