Function classify_update_row 

pub fn classify_update_row(
    plugin_id: &str,
    scope: &str,
    version_before: Option<&str>,
    version_after: Option<&str>,
    output: &str,
) -> PluginUpdateRunRow

Classify one update call from the CLI’s output and the observed version change. The CLI exits 0 on some failures, so neither signal alone decides: the marker means current, a version change means updated, and anything else - including a silent exit 0 - is a failure whose detail is the output tail. Failures that exit non-zero never reach here: the runner reports them as errors.