omakit 0.4.0 → 0.4.2

package/README.md

@@ -1,122 +1,60 @@
 <p align="center">
-  <img src="docs/media/banner.gif" alt="omakit" width="440">
+  <img src="https://raw.githubusercontent.com/mtolhuys/omakit/main/docs/media/banner.gif" alt="omakit" width="440">
 </p>
 
-The safe place to find out: everything knowable about an Omarchy Quattro plugin submission before you post it, on your own machine. Agent-first, read-only against the marketplace, posts nothing, zero dependencies.
+The marketplace validates one exact commit of your plugin. Push a fix or comment "fixed", and nothing re-runs ([M6](docs/MEASUREMENTS.md#m6-the-validated-commit-falls-behind-silently-and-that-is-the-centre-of-this-tool)). omakit runs the marketplace's own checks locally, watches your submission and posts nothing.
 
 [![Built for Omarchy: App](https://raw.githubusercontent.com/tcballard/omarchy-badges/75975e5b5bf75e7ede3764bcd2950046f7abfe2c/badges/v1/omarchy-app.svg)](https://github.com/tcballard/omarchy-badges) [![npm version](https://img.shields.io/npm/v/omakit)](https://www.npmjs.com/package/omakit) [![CI status](https://img.shields.io/github/actions/workflow/status/mtolhuys/omakit/ci.yml?branch=main)](https://github.com/mtolhuys/omakit/actions/workflows/ci.yml) [![Socket](https://socket.dev/api/badge/npm/package/omakit)](https://socket.dev/npm/package/omakit)
 
-`omakit` is a zero-dependency Node CLI that checks an Omarchy Quattro plugin submission on your machine.
-It is for a coding agent or a person submitting a plugin.
-It never posts to the marketplace or writes into a plugin tree.
-
 ## Install
 
 ```bash
-npm install --global omakit
-omakit setup
-```
-
-See [docs/INSTALL.md](docs/INSTALL.md) for the clone route, PATH, requirements and upgrading.
-
-## Commands
-
-| Command | What it does |
-| --- | --- |
-| [`omakit setup`](docs/COMMANDS.md) | The environment, the pin, tab completion, and what to try first. |
-| [`omakit submit <plugin-repo>`](docs/SUBMIT.md) | Every check, the issue title and body; asks for a category and tags at a terminal. |
-| [`omakit watch [<issue-url>]`](docs/VALIDATION_WATCH.md) | Pick your marketplace issues, list them, or check all with `--all`. |
-| [`omakit verify <plugin-repo>`](docs/COMMANDS.md) | The official security baseline over the local transport; `--json` for the document. |
-| [`omakit parity`](docs/COMMANDS.md) | The baseline over GitHub versus the local transport, on real listings; writes the evidence. |
-| [`omakit audit [<plugin>]`](docs/AUDIT.md) | Installed third-party commits against the exact commits the marketplace validated. |
-| [`omakit weigh <plugin>`](docs/WEIGH.md) | What a plugin weighs on the shell, measured by restarting it without and with the plugin; asks first. |
-| [`omakit doctor`](docs/COMMANDS.md) | What is installed, what is pinned, and what has moved. |
-| [`omakit pin`](docs/COMMANDS.md) | What setup does for the pin, on its own. |
-| [`omakit upgrade`](docs/COMMANDS.md) | Updates omakit through its own installer: npm, or a fast-forward. |
-| [`omakit help --agent`](docs/COMMANDS.md) | The operating instructions, for the agent running this. |
-
-Normal terminal use also checks for a newer npm release at most once daily
-and shows the upgrade command. It installs nothing automatically; scripts
-and JSON stay quiet. `DISABLE_UPDATE_NOTIFIER=1` disables the notice, and
-`omakit doctor` checks explicitly. [Update behaviour](docs/INSTALL.md#updating).
-
-### `submit`
-
-```bash
-omakit submit <plugin-repo> --category Widgets --tags bar,quickshell
+npm i -g omakit && omakit setup
+npx skills add mtolhuys/omakit
 ```
 
-It decides whether the plugin is ready, refused, or already listed; [103 issues mention agent-control files that no automated check reports](docs/MEASUREMENTS.md).
+Requirements: [Node >=22](package.json); Omarchy Quattro.
 
-![omakit submit refusing a plugin with no license, a README that never says how to uninstall, and a reserved plugin id](docs/media/submit.gif)
+Licence: [MIT](LICENSE).
 
-Read more: [docs/SUBMIT.md](docs/SUBMIT.md).
+## `omakit submit <plugin-repo>`
 
-### `watch`
+![submit refusing a fixture plugin before any issue is posted](https://raw.githubusercontent.com/mtolhuys/omakit/main/docs/media/submit.gif)
 
-```bash
-omakit watch <submission-issue-url>
-omakit watch --all
-omakit watch --list
-omakit watch                 # choose one or several issues at a terminal
-```
+Checks the exact commit with the marketplace's own baseline and, when ready, prints the exact issue title and body for you to paste. The GIF shows a refusal with three blocking checks and their fixes.
 
-It decides whether the marketplace validated the plugin's current commit; [73% of parked submissions have a HEAD the marketplace never saw](docs/MEASUREMENTS.md).
+## `omakit watch --all`
 
-Account-wide discovery uses your signed-in `gh` account and reads your open marketplace issues. `--user <login>` reads another public account. Batch output includes baseline results, labels and the latest human discussion; `current` compares commits and does not imply approval or publication. Each command takes one snapshot and posts nothing.
+![watch counts and two current issues, including human discussion](https://raw.githubusercontent.com/mtolhuys/omakit/main/docs/media/watch-all.gif)
 
-![omakit watch reporting that a validated commit has fallen behind](docs/media/watch.gif)
+Checks your submission commits and names the action that re-runs stale validation: edit the issue body. The GIF shows five CURRENT issues in the counts and the first two issues with a discussion; CURRENT means matching commits, not approval.
 
-Read more: [docs/VALIDATION_WATCH.md](docs/VALIDATION_WATCH.md).
+## `omakit audit`
 
-### `weigh`
-
-```bash
-omakit weigh <plugin-id-or-dir>
-```
+![audit keeping drift rows and the DRIFT summary visible together](https://raw.githubusercontent.com/mtolhuys/omakit/main/docs/media/audit.gif)
 
-It measures what a plugin weighs on the shell, CPU and child processes, against a baseline taken the same minute; [in the lab, a 180 ms timer fixture measured 2.73% CPU above a 0.13% floor](docs/MEASUREMENTS.md).
+Compares your installed plugin commits with the marketplace's validated commits. The GIF shows drift rows first: on the author's desktop, 9 of 18 audited plugins ran commits the marketplace never validated.
 
-```text
-Weighs no CPU above the floor (0.13%) and runs 2 child processes using 8.2 MB and 0.1% CPU, on Omarchy 4.0.0.alpha, measured with omakit weigh on 2026-09-14
-```
+## `omakit weigh <plugin>`
 
-It restarts your shell and asks first. Memory is a shell fact; CPU and child processes are the weight.
+![completed three-run desktop weighing with baseline samples and the noise floor](https://raw.githubusercontent.com/mtolhuys/omakit/main/docs/media/weigh.gif)
 
-Read more: [docs/WEIGH.md](docs/WEIGH.md).
+Measures the shell with and without your plugin, reading Pss and CPU. The GIF shows three completed runs on the author's desktop, with baseline and plugin samples and a 0.33% CPU floor ([method](docs/WEIGH.md)).
 
 ## Evidence, not claims
 
-| Claim | Proof |
+| Measurement | Evidence |
 | --- | --- |
-| The local transport produces the marketplace's own result | 30 of 30 identical, [docs/evidence/parity/](docs/evidence/parity/) |
-| A local run touches no network | run inside `unshare -rn`, [docs/evidence/offline/](docs/evidence/offline/) |
-| The generated body is well formed | the marketplace's own parser, `tests/unit/issue.test.mjs` |
-| Nothing writes to the marketplace | `tests/unit/read-only.test.mjs`, over every source file |
-| No agent-control file can reach a plugin | `tests/unit/self-containment.test.mjs` |
-| `weigh` restores `shell.json` on every exit path, and runs a frozen list of Omarchy commands | `tests/unit/weigh.test.mjs` against a fake `/proc` and stub commands, `tests/unit/read-only.test.mjs` |
-| The GIFs above are real output | captures and renderer in [docs/media/](docs/media/) |
-
-Committed evidence records a digest of each side rather than the results themselves, because findings about a specific third-party plugin are not this project's to publish.
+| Baseline parity | 30/30 identical results, [recorded corpus](docs/evidence/parity/2026-09-12-local-vs-github-2.json), 2026-09-12 |
+| Stale validated commit | 326/519 readable comparisons stale (62.8%); 64/583 unknown, [2026-09-15 data](docs/evidence/staleness/2026-09-15.json) |
+| Registry churn | 4,201/4,293 registry-only commits in 30 days, 2026-09-13, [M7](docs/MEASUREMENTS.md#m7-the-registry-moves-by-the-hour-the-code-and-the-rules-move-by-the-week) |
+| GIFs are recorded output | 5 GIFs with [captures and scenes](docs/media/README.md) |
+| Posts nothing | 0 marketplace writes, [M10](docs/MEASUREMENTS.md#m10-readme-evidence-and-command-captures) |
+| Zero dependencies | 0 runtime and 0 development dependencies, counted in [package.json](package.json) |
 
 ## Documentation
 
-| Document | For |
-| --- | --- |
-| [docs/INSTALL.md](docs/INSTALL.md) | install details, PATH, requirements, upgrading, and what Socket reports and why |
-| [docs/HOW.md](docs/HOW.md) | what omakit is doing, why it uses Node, the baseline and check labels |
-| [docs/COMMANDS.md](docs/COMMANDS.md) | command details, authentication and network behaviour |
-| [docs/AUDIT.md](docs/AUDIT.md) | installed plugin drift against marketplace-validated commits, with JSON origins |
-| [docs/SUBMIT.md](docs/SUBMIT.md) | every check and what it decides |
-| [docs/WEIGH.md](docs/WEIGH.md) | what `weigh` measures, the noise floor, the `shell.json` mutation and its restore, and the JSON contract |
-| [docs/VALIDATION_WATCH.md](docs/VALIDATION_WATCH.md) | the validation watch: what the marketplace validated, and what moves it |
-| [docs/MEASUREMENTS.md](docs/MEASUREMENTS.md) | every number, its method and its limits |
-| [docs/UPSTREAM_CONTRACT.md](docs/UPSTREAM_CONTRACT.md) | the seam, the pin, the boundaries |
-| [docs/MARKETPLACE.md](docs/MARKETPLACE.md) | who this actually helps |
-| [docs/PALETTE.md](docs/PALETTE.md) | every installed Omarchy theme measured, and which palette index each role gets |
-| [docs/TUI.md](docs/TUI.md) | what the terminal shows, and why it looks that way |
-| [AGENTS.md](AGENTS.md) | changing this repository |
-
-MIT. Derived work built on public data from
-`omacom/omarchy-plugin-marketplace`; not affiliated with or endorsed by that
-project.
+- Using: [install](docs/INSTALL.md), [commands](docs/COMMANDS.md), [audience](docs/MARKETPLACE.md).
+- Checks and measurements: [submit](docs/SUBMIT.md), [watch](docs/VALIDATION_WATCH.md), [audit](docs/AUDIT.md), [evidence](docs/MEASUREMENTS.md).
+- Method docs: [how](docs/HOW.md), [weigh](docs/WEIGH.md), [upstream contract](docs/UPSTREAM_CONTRACT.md), [palette](docs/PALETTE.md), [terminal](docs/TUI.md).
+- Contributing: [repository rules](AGENTS.md), [releasing](docs/RELEASING.md), [media](docs/media/README.md).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omakit",
-  "version": "0.4.0",
+  "version": "0.4.2",
   "description": "The safe place to find out: everything knowable about an Omarchy Quattro plugin submission before you post it, on your own machine. Agent-first, read-only against the marketplace, posts nothing, zero dependencies.",
   "license": "MIT",
   "author": "Maarten Tolhuijs",

package/skills/omarchy-plugin-check/SKILL.md

@@ -92,8 +92,8 @@ own words, and so should you.
 
 The marketplace validates the pushed default-branch HEAD, not whatever is
 checked out locally. Run the check on the commit that will be pushed, then
-commit and push before the real submission. Of the 464 submissions parked in
-their author's court, 73% have a HEAD the marketplace never saw; that is the
+commit and push before the real submission. On 2026-09-15, 326/519 readable author-fixes
+comparisons were stale, with 64 of 583 issues unknown; that is the
 round this loop is meant to prevent.
 
 ## When the plugin is ready

package/skills/omarchy-plugin-submit/SKILL.md

@@ -133,8 +133,8 @@ strip files from their tree on your own.
 
 **`submission.validation-commit`.** The marketplace validates the commit it
 resolves when the issue is opened or edited, which is the pushed default-branch
-HEAD, not whatever is checked out locally. Push first, then submit. 73% of submissions
-parked in their author's court have a HEAD the marketplace never saw.
+HEAD, not whatever is checked out locally. Push first, then submit. On 2026-09-15, 326/519 readable author-fixes comparisons were stale
+(62.8%), with 64 of 583 issues unknown.
 
 ## What the baseline result means
 

package/skills/omarchy-plugin-validation-watch/SKILL.md

@@ -18,10 +18,10 @@ the issue body**.
   submissions.
 
 So pushing a fix does nothing, and commenting "fixed in `abc123`" does nothing.
-Both feel like progress. Neither is. This is the single most common reason a
-submission sits still: of the 464 submissions parked in their author's court, 73%
-have a default-branch HEAD the marketplace never saw, and 82% of the authors whose
-push came after a review comment had also commented: engaged, and stuck.
+Both feel like progress. Neither is. The full author-fixes queue was measured on 2026-09-15: 326/519 readable
+comparisons were stale (62.8%), with 64 of 583 issues unknown. The older
+2026-09-12 sample found 68/93 readable issues stale (73.1%); that rate was
+not a measurement of all 464 issues in the queue.
 
 ## Check it
 

package/tools/marketplace/README.md

@@ -18,6 +18,8 @@ local commit through the transport seam the marketplace tests itself
 | `tree.mjs` | The installable tree of a subject at one exact commit, from the Git object database. |
 | `plugin.mjs` | The root files the submission contract needs, and the declared plugin identity. |
 | `agent-control.mjs` | The recursive agent-control warning, and its remedy. |
+| `review-cost.mjs` | The advisory review-cost verdict, shared account discovery, and path classification between dated validated snapshots. M4 and M9 carry its evidence. |
+| `measure-review-cost.mjs` | Reproduces M9 across the open update population at live marketplace HEAD, with compare sources and explicit skipped reasons in JSON. |
 | `issue.mjs` | Renders the issue the way the form would, then has the marketplace's own parser judge it. |
 | `submit.mjs` | Assembles every check with its measured reason, and withholds the body when a blocking check fails. Three outcomes: `ready` (the body), `refused` (a blocking check failed) and `listed` (the plugin is already listed by its own repository: `identity.available` passes with the listing's record, the five body checks are omitted rather than drawn as waiting, no body exists on purpose, and `listing` carries the listed commit against the local one and the form to use for a newer commit). Decides the category and tags after the registry: a listed plugin, own or taken, is asked for neither; an unlisted one without them is asked through `ask.mjs` at a terminal, and is a usage error otherwise. Ends with `reproduce`, the command line that repeats the run without asking. Under `--offline` the validation-commit check is `skipped`, not passed: verdict `skipped`, listed under `skipped` and not `unknown`, never blocking, and the READY line says "1 check skipped (--offline)". |
 | `ask.mjs` | The two questions `submit` asks a person at a terminal, and only there: category and tags, numbered from the pinned form, with the marketplace's own presentation for the manifest's kinds (read from the pinned catalog builder) as the default where it is on the list. Prompts on stderr, nothing persisted. |
@@ -81,7 +83,8 @@ side rather than the findings themselves. The GitHub side uses whatever
 credential `github.mjs` resolves (a `gh` login, and only that), read-only.
 
 Two rules about the output, stated as rules because each is an exception to
-a wider one. Everything omakit writes itself stays within 80 columns; text
+a wider one. Pipes use 80 columns; terminals use their available width up to
+120 columns. Text files compose at 80 columns without colour escapes. Text
 that will be posted verbatim, the marketplace's own baseline report and the
 issue body rendered from the pinned form, is never wrapped and may exceed 80,
 because a wrapped body would not be the body. And stdout is the whole result;
@@ -97,7 +100,9 @@ sequences and nothing else.
 built-in `fetch`, which does not read proxy environment variables by default.
 Behind a proxy, run them with `NODE_USE_ENV_PROXY=1`. `submit` reads two things
 online, the subject's default-branch HEAD and the marketplace's current
-registry, and `--offline` turns both off; `verify` needs no network at all
+registry. A manual-review baseline also reads the account's open issue
+discovery and issue bodies for batching advice; `--offline` turns these
+reads off. `verify` needs no network at all
 beyond fetching a reviewer-mode subject, and `tests/parity/offline.mjs` proves
 it.
 

package/tools/marketplace/ask.mjs

@@ -15,7 +15,7 @@
 // the report ends with the command line that repeats the run without asking.
 
 import { createInterface } from "node:readline"
-import { colourEnabled, STEP, action, styler, wrap } from "./style.mjs"
+import { colourEnabled, outputColumns, STEP, action, styler, wrap } from "./style.mjs"
 import { resolveCategory, resolveTags } from "./form.mjs"
 import { watchIssueTitle } from "./watch.mjs"
 
@@ -52,10 +52,10 @@ function reader(input) {
 /** Ask one question until an answer resolves; `parse` returns { ok, value } or { ok: false, reason }. */
 async function question(lines, output, c, { name, heading, options, defaultIndexes, parse, wrapOptions = false, eofRemedy }) {
   const step = " ".repeat(STEP)
-  output.write(`${wrap(heading, {}, c).join("\n")}\n`)
+  output.write(`${wrap(heading, { width: outputColumns(output) }, c).join("\n")}\n`)
   for (const [index, option] of options.entries()) {
     output.write(wrapOptions
-      ? `${wrap(`${String(index + 1).padStart(2)} ${option}`, { indent: STEP }, c).join("\n")}\n`
+      ? `${wrap(`${String(index + 1).padStart(2)} ${option}`, { indent: STEP, width: outputColumns(output) }, c).join("\n")}\n`
       : `${step}${c("typeable", String(index + 1).padStart(2))}  ${option}\n`)
   }
   const fallback = defaultIndexes.length ? defaultIndexes.map((index) => index + 1).join(",") : null
@@ -70,7 +70,7 @@ async function question(lines, output, c, { name, heading, options, defaultIndex
     const text = raw.trim() || (fallback ?? "")
     const parsed = parse(text)
     if (parsed.ok) return parsed.value
-    output.write(`${wrap(parsed.reason, {}, c).join("\n")}\n`)
+    output.write(`${wrap(parsed.reason, { width: outputColumns(output) }, c).join("\n")}\n`)
   }
 }
 

package/tools/marketplace/banner.mjs

@@ -49,7 +49,7 @@
 // letters come from the small font below, so renaming the tool is a change to
 // one string and not a redrawing job.
 
-import { code, colourEnabled, DENSITY, motionEnabled, MOTION, rule as floorRule } from "./style.mjs"
+import { code, colourEnabled, DENSITY, motionEnabled, MOTION, outputColumns, rule as floorRule, wrap } from "./style.mjs"
 import { effectAvailable, playEffect } from "./effect.mjs"
 
 const ESC = "\u001b["
@@ -227,6 +227,15 @@ export async function banner(options = {}) {
   // and a piped run should differ from a watched one only in decoration.
   if (!enabled) return
 
+  // Never animate artwork across physical terminal rows: cursor-up would
+  // redraw the wrong row. A narrow terminal gets a compact wordmark instead.
+  if (stream.isTTY && Number.isFinite(stream.columns) && stream.columns > 0 && stream.columns < width) {
+    stream.write(`${c(code("name"), word.toUpperCase())}\n`)
+    if (options.tagline) stream.write(`${wrap(options.tagline, { width: outputColumns(stream) }, (name, text) => c(code(name), text)).join("\n")}\n`)
+    stream.write("\n")
+    return
+  }
+
   // A five-row animation redrawn with cursor-up needs five rows that stay put.
   // In a terminal with no room the screen scrolls under the animation, the
   // cursor-up lands a line off, and a row from an earlier frame is left stranded

package/tools/marketplace/cli.mjs

@@ -34,7 +34,7 @@ import { updateCheckEnabled, updateNotice } from "./update-check.mjs"
 import { progress } from "./progress.mjs"
 import { banner, bannerEnabled } from "./banner.mjs"
 import { COMMANDS, renderSummary, renderUsage, TAGLINE } from "./usage.mjs"
-import { action, AUDIT_VERDICTS, colourEnabled, GUTTER, labelled, mark, styler, verdict, wrap } from "./style.mjs"
+import { action, AUDIT_VERDICTS, colourEnabled, GUTTER, labelled, mark, outputColumns, styler, verdict, withOutputStream, wrap } from "./style.mjs"
 import { omakitCacheDir, withHomeAbbreviated } from "./paths.mjs"
 import { DEFAULTS as WEIGH_DEFAULTS, measureWeigh, planWeigh } from "../weigh/audit.mjs"
 import { confirmationQuestion, renderList, renderWeigh, renderPlan } from "../weigh/report.mjs"
@@ -68,6 +68,16 @@ const REMEDY = Object.freeze({
   "interrupted": "shell.json was restored; run it again when the desktop is yours to restart.",
 })
 
+/*
+ * A command that has written its result leaves through `process.exitCode`,
+ * never `process.exit()`: stdout is an API, and on a pipe whose reader has
+ * not started reading yet the exit cuts the output. Measured on 0.4.1:
+ * `omakit submit <listed plugin> --json | (sleep 2; cat)` delivered 8,192 of
+ * 14,033 bytes, and a parser downstream saw invalid JSON. The failure
+ * states below still exit at once: they write one short block to stderr,
+ * and their callers use them the way a throw is used.
+ */
+
 /**
  * Every failure, in one register, on stderr. `usage` errors carry the
  * signature that was expected, so the remedy is the reference and not a
@@ -76,8 +86,10 @@ const REMEDY = Object.freeze({
  */
 function fail(code, message, exit = 1, remedy = REMEDY[code], body = () => []) {
   const c = styler(colourEnabled(process.stderr))
-  const lines = [`${mark("fail", c)}${c("name", code)}`, ...wrap(message, { indent: GUTTER }, c), ...body(c)]
-  if (remedy) lines.push(...action(remedy, c))
+  const lines = withOutputStream(process.stderr, () => [
+    `${mark("fail", c)}${c("name", code)}`, ...wrap(message, { indent: GUTTER }, c), ...body(c),
+    ...(remedy ? action(remedy, c) : []),
+  ])
   process.stderr.write(`${lines.join("\n")}\n`)
   process.exit(exit)
 }
@@ -88,9 +100,21 @@ function failFrom(error) {
   throw error
 }
 
+/**
+ * The value of a valued option, written either way the table accepts,
+ * `--name value` or `--name=value`, the last occurrence winning as it does
+ * in options.mjs. Measured on 0.4.1: the table accepted `--out=FILE` and the
+ * value was looked up as the token after `--out`, so `doctor --out=x` wrote
+ * nothing and exited 0, and `submit --category=Widgets` said the flag was
+ * missing.
+ */
 function option(args, name) {
-  const index = args.indexOf(name)
-  return index >= 0 ? args[index + 1] : undefined
+  let value
+  for (let index = 0; index < args.length; index += 1) {
+    if (args[index] === name) value = args[index + 1]
+    else if (args[index].startsWith(`${name}=`)) value = args[index].slice(name.length + 1)
+  }
+  return value
 }
 
 /** The bare arguments, with every valued option's value (options.mjs, one table) left out. */
@@ -123,6 +147,12 @@ function emit(args, text) {
   }
 }
 
+function reportText(args, render, result, options = {}) {
+  const out = option(args, "--out")
+  return withOutputStream(out ? { isTTY: false } : process.stdout,
+    () => render(result, { ...options, ...(out ? { colour: false } : {}) }))
+}
+
 async function cmdSubmit(args) {
   const target = positionals(args)[0]
   if (!target) fail("usage", "submit needs a target: `omakit submit <target> --category <c> --tags <a,b>`", 2)
@@ -161,7 +191,8 @@ async function cmdSubmit(args) {
       const usage = error.usage
       if (json) {
         process.stdout.write(`${JSON.stringify({ usage }, null, 2)}\n`)
-        process.exit(2)
+        process.exitCode = 2
+        return
       }
       const flags = usage.missing.join(" and ")
       fail("usage", `submit needs ${flags}: ${usage.missing.length === 1 ? "it is" : "they are"} an editorial choice nobody else can make, from the pinned form's own lists.`, 2,
@@ -174,10 +205,10 @@ async function cmdSubmit(args) {
     failFrom(error)
   }
   spinner.done()
-  emit(args, args.includes("--json") ? `${JSON.stringify(result, null, 2)}\n` : renderSubmit(result))
+  emit(args, args.includes("--json") ? `${JSON.stringify(result, null, 2)}\n` : reportText(args, renderSubmit, result))
   // Three outcomes, two exit codes: `ready` and `listed` are both healthy
   // states, and only a refusal is a 1.
-  process.exit(result.outcome === "refused" ? 1 : 0)
+  process.exitCode = result.outcome === "refused" ? 1 : 0
 }
 
 async function cmdWatch(args) {
@@ -215,8 +246,8 @@ async function cmdWatch(args) {
   }
   spinner.done()
   const render = result.mode === "list" ? renderWatchList : result.mode === "all" ? renderWatchAll : renderWatch
-  emit(args, args.includes("--json") ? `${JSON.stringify(result, null, 2)}\n` : render(result))
-  process.exit(result.verdict?.state === "unknown" || result.summary?.unknown > 0 ? 2 : 0)
+  emit(args, args.includes("--json") ? `${JSON.stringify(result, null, 2)}\n` : reportText(args, render, result))
+  process.exitCode = result.verdict?.state === "unknown" || result.summary?.unknown > 0 ? 2 : 0
 }
 
 async function cmdFrontDoor() {
@@ -235,23 +266,24 @@ async function cmdSetup(args) {
   if (args.includes("--completion")) {
     const identity = requirePin(ROOT).identity
     const result = await completionStep({ repoRoot: ROOT, pin: identity.commit, version: VERSION, askRc: false })
-    process.exit(result.state === "ok" ? 0 : 1)
+    process.exitCode = result.state === "ok" ? 0 : 1
+    return
   }
   const result = await setup({ repoRoot: ROOT, entryPoint: resolve(ROOT, "bin/omakit"), yes: args.includes("--yes") })
-  process.exit(result.ok ? 0 : 1)
+  process.exitCode = result.ok ? 0 : 1
 }
 
 async function cmdUpgrade(args) {
   const result = await upgrade({ repoRoot: ROOT, dryRun: args.includes("--dry-run") })
-  process.exit(result.ok ? 0 : 1)
+  process.exitCode = result.ok ? 0 : 1
 }
 
 async function cmdDoctor(args) {
   const spinner = spinnerFor(args)
   const result = await doctor({ repoRoot: ROOT, offline: args.includes("--offline"), onPhase: spinner.phase })
   spinner.done()
-  emit(args, args.includes("--json") ? `${JSON.stringify(result, null, 2)}\n` : renderDoctor(result))
-  process.exit(result.problems ? 1 : 0)
+  emit(args, args.includes("--json") ? `${JSON.stringify(result, null, 2)}\n` : reportText(args, renderDoctor, result))
+  process.exitCode = result.problems ? 1 : 0
 }
 
 async function cmdVerify(args) {
@@ -293,7 +325,7 @@ async function cmdVerify(args) {
   const blockingRules = section.invoked && section.official && !section.official.error
     ? (await consequence(requirePin(ROOT).dir, section.official)).selectivelyBlockingRules
     : []
-  emit(args, renderVerify(document, { blockingRules }))
+  emit(args, reportText(args, renderVerify, document, { blockingRules }))
 }
 
 async function cmdParity(args) {
@@ -317,7 +349,7 @@ async function cmdParity(args) {
   } catch (error) {
     failFrom(error)
   }
-  process.exit(ok ? 0 : 1)
+  process.exitCode = ok ? 0 : 1
 }
 
 function notAudited(message, remedy = null, exit = 1) {
@@ -351,7 +383,7 @@ async function cmdAudit(args) {
   }
   if (parsed.options.has("--json")) process.stdout.write(json)
   else process.stdout.write(`${renderAudit(document)}\n`)
-  process.exit(document.ok ? 0 : 1)
+  process.exitCode = document.ok ? 0 : 1
 }
 
 /**
@@ -391,7 +423,7 @@ async function cmdWeigh(args) {
       throw error
     }
     process.stdout.write(json ? `${JSON.stringify(list.rows, null, 2)}\n` : `${renderList(list)}\n`)
-    process.exit(0)
+    return
   }
   if (!target && !all) notWeighed("usage", "weigh needs a plugin: `omakit weigh <plugin-id-or-dir>`, or `omakit weigh --all` for every enabled third-party plugin.", "omakit weigh <plugin-id-or-dir>", 2)
   if (target && all) notWeighed("usage", `--all weighs every enabled third-party plugin, so ${JSON.stringify(target)} is one argument more than it takes.`, "omakit weigh --all, or omakit weigh <plugin-id-or-dir>", 2)
@@ -420,7 +452,7 @@ async function cmdWeigh(args) {
   // The confirmation. The plan is printed either way, so the record says
   // what was agreed to; the question is asked only at a terminal on both
   // ends, and --yes is the only other way past it.
-  narrate.write(`${renderPlan(plan, { colour: colourEnabled(narrate) }).join("\n")}\n`)
+  narrate.write(`${withOutputStream(narrate, () => renderPlan(plan, { colour: colourEnabled(narrate) })).join("\n")}\n`)
   if (!parsed.options.has("--yes")) {
     const interactive = !json && Boolean(process.stdin.isTTY) && Boolean(process.stdout.isTTY)
     if (!interactive) notWeighed("not-confirmed", `this restarts the shell ${plan.restarts} times and edits shell.json for the duration; a pipe, an agent or --json cannot answer for the person whose shell it is.`, REMEDY["not-confirmed"], 2)
@@ -458,7 +490,6 @@ async function cmdWeigh(args) {
   } else {
     process.stdout.write(`\n${renderWeigh(document)}\n`)
   }
-  process.exit(0)
 }
 
 const VERSION = JSON.parse(readFileSync(resolve(ROOT, "package.json"), "utf8")).version
@@ -487,12 +518,15 @@ const [command, ...rest] = process.argv.slice(2)
 // stays empty on success, and never for setup, which is the fix.
 if (updateCheckEnabled({ command, args: rest, stdinTTY: process.stdin.isTTY, stdoutTTY: process.stdout.isTTY, stderrTTY: process.stderr.isTTY })) {
   const notice = await updateNotice({ repoRoot: ROOT, version: VERSION })
-  if (notice) process.stderr.write(`${wrap(notice, {}, styler(colourEnabled(process.stderr))).join("\n")}\n`)
+  if (notice) process.stderr.write(`${wrap(notice, { width: outputColumns(process.stderr) }, styler(colourEnabled(process.stderr))).join("\n")}\n`)
 }
 
 if (command !== "setup" && process.stderr.isTTY) {
   const notice = staleCompletionNotice({ version: VERSION })
-  if (notice) process.stderr.write(`${styler(colourEnabled(process.stderr))("label", notice)}\n`)
+  if (notice) {
+    const c = styler(colourEnabled(process.stderr))
+    process.stderr.write(`${wrap(notice, { width: outputColumns(process.stderr) }).map((line) => c("label", line)).join("\n")}\n`)
+  }
 }
 
 if (command === "setup") {
@@ -556,12 +590,12 @@ if (command === "setup") {
   // The short list on a typo, not 53 lines of reference, in the same register
   // as every other failure: what happened, what it means, what to run.
   const c = styler(colourEnabled(process.stderr))
-  process.stderr.write([
+  process.stderr.write(withOutputStream(process.stderr, () => [
     `${mark("fail", c)}${c("name", "unknown command")}`,
     ...wrap(`\`${command}\` is not something omakit does. The commands it has are listed below.`, { indent: GUTTER }, c),
     ...action("omakit help", c),
     "",
-    renderSummary({ colour: colourEnabled(process.stderr), heading: false }),
-  ].join("\n"))
+    renderSummary({ stream: process.stderr, colour: colourEnabled(process.stderr), heading: false }),
+  ].join("\n")))
   process.exit(2)
 }

package/tools/marketplace/github.mjs

@@ -180,10 +180,10 @@ export async function authenticatedUser() {
 }
 
 /** Repository issues by their creator. PRs are excluded; pagination never silently truncates. */
-export async function repositoryIssues(owner, repository, creator, { readJson = getJson, maxPages = 100 } = {}) {
+export async function repositoryIssues(owner, repository, creator, { readJson = getJson, maxPages = 100, labels } = {}) {
   const all = []
   for (let page = 1; page <= maxPages; page += 1) {
-    const query = new URLSearchParams({ creator, state: "open", sort: "updated", direction: "desc", per_page: "100", page: String(page) })
+    const query = new URLSearchParams({ ...(creator ? { creator } : {}), ...(labels ? { labels } : {}), state: "open", sort: "updated", direction: "desc", per_page: "100", page: String(page) })
     const batch = await readJson(`https://api.github.com/repos/${owner}/${repository}/issues?${query}`)
     if (!Array.isArray(batch)) throw new GitHubError("github-unavailable", "GitHub did not return an issue list")
     all.push(...batch.filter((item) => !item.pull_request))
@@ -205,6 +205,17 @@ export async function issueComments(owner, repository, number, maxPages = 10, re
   throw new GitHubError("comments-incomplete", `Issue #${number} exceeded ${maxPages} comment pages; its latest baseline cannot be determined`)
 }
 
+/** Compare exact validated snapshots. The API caps its file list at 300: never classify a truncated diff. */
+export async function compareCommits(repositoryUrl, previous, validated, { readJson = getJson } = {}) {
+  const match = String(repositoryUrl).match(/^https:\/\/github\.com\/([A-Za-z0-9_.-]+)\/([A-Za-z0-9_.-]+?)(?:\.git)?\/?$/)
+  if (!match || ![previous, validated].every((commit) => /^[a-f0-9]{40}$/i.test(commit))) throw new GitHubError("usage", "compare needs a repository and two full commit identifiers")
+  const url = `https://api.github.com/repos/${match[1]}/${match[2]}/compare/${previous}...${validated}?per_page=1`
+  const result = await readJson(url)
+  if (!["ahead", "identical"].includes(result?.status)) throw new GitHubError("compare-not-forward", "validated snapshots are not a forward comparison")
+  if (!Array.isArray(result.files) || result.files.length >= 300) throw new GitHubError("compare-incomplete", "compare file list unavailable or at the 300-file API limit")
+  return { url, files: result.files }
+}
+
 /**
  * The current default-branch HEAD of a repository.
  *

package/tools/marketplace/measure-review-cost.mjs

@@ -0,0 +1,39 @@
+// Reproduce M9 with GET-only issue discovery and compare reads. No sampling.
+import { resolve } from "node:path"
+import { pathToFileURL } from "node:url"
+import { MARKETPLACE_PIN } from "./pin.mjs"
+import { repositoryIssues } from "./github.mjs"
+import { liveRegistry } from "./registry.mjs"
+import { reviewPolicy } from "./review-cost.mjs"
+import { validationWatchAll } from "./watch.mjs"
+
+export async function measureReviewCost(repoRoot) {
+  const policy = await reviewPolicy(repoRoot)
+  const registry = await liveRegistry({ repoRoot })
+  if (registry.source !== "head") throw new Error(`cannot measure at HEAD: ${registry.reason}`)
+  const [owner, repository] = new URL(MARKETPLACE_PIN.repository).pathname.slice(1).split("/")
+  const openedAt = new Date().toISOString()
+  const subjects = await repositoryIssues(owner, repository, undefined, { labels: policy.updateLabel })
+  const issues = subjects.filter((subject) => subject.state === "open" && !subject.pull_request).map((subject) => ({
+    number: subject.number, url: `${MARKETPLACE_PIN.repository}/issues/${subject.number}`, title: subject.title,
+    state: subject.state, labels: subject.labels.map((label) => typeof label === "string" ? label : label.name),
+  }))
+  // Only the manual-review subset needs comment reads and comparisons. No plugin HEAD reads.
+  const manual = issues.filter((subject) => subject.labels.includes(policy.reviewLabel))
+  const batch = await validationWatchAll({ repoRoot, discovery: { account: null, marketplace: MARKETPLACE_PIN.repository, issues: manual },
+    readRegistry: async () => registry, github: { defaultBranchHead: async () => null } })
+  const counts = batch.reviewCostSummary
+  return {
+    measurement: "M9", openedAt, completedAt: new Date().toISOString(), marketplace: MARKETPLACE_PIN.repository,
+    marketplaceHead: registry.commit, command: "node tools/marketplace/measure-review-cost.mjs", sample: false,
+    pluginUpdates: issues.length, manualQueue: manual.length, manualQueueShare: issues.length ? manual.length / issues.length : null,
+    docsOnly: counts.docsOnly, compared: counts.compared, skipped: counts.skipped.length,
+    docsOnlyShareOfCompared: counts.compared ? counts.docsOnly / counts.compared : null,
+    docsOnlyShareOfManualQueue: counts.skipped.length || !manual.length ? null : counts.docsOnly / manual.length,
+    rows: batch.issues.map((row) => ({ issue: row.issue.number, ...row.documentationDiff })),
+  }
+}
+
+if (process.argv[1] && import.meta.url === pathToFileURL(resolve(process.argv[1])).href) {
+  process.stdout.write(`${JSON.stringify(await measureReviewCost(resolve(process.cwd())), null, 2)}\n`)
+}