@agentver/cli 0.1.0 → 0.1.2

package/dist/agentver.js

@@ -1,18 +1,21 @@
 #!/usr/bin/env node
 
 // bin/agentver.ts
-import { createRequire } from "module";
+import { createRequire as createRequire2 } from "module";
+import { dirname as dirname6, join as join23 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 import { Command } from "commander";
+import chalk28 from "chalk";
 import updateNotifier from "update-notifier";
 
 // src/commands/adopt.ts
-import { readFileSync as readFileSync4 } from "fs";
+import { readFileSync as readFileSync3 } from "fs";
 import { homedir } from "os";
 import { dirname } from "path";
 
 // ../agent-definitions/src/agents/definitions.ts
 var AGENT_DEFINITIONS = [
-  // --- Existing agents (updated with category + aliases) ---
+  // --- Chat and IDE agents ---
   {
     id: "claude-code",
     name: "Claude Code",
@@ -124,7 +127,7 @@ var AGENT_DEFINITIONS = [
     configDirs: [".aider"],
     category: "agent-specific"
   },
-  // --- New universal agents (projectSkillPath = .agents/skills) ---
+  // --- Universal agents ---
   {
     id: "amp",
     name: "Amp",
@@ -170,7 +173,7 @@ var AGENT_DEFINITIONS = [
     configDirs: [],
     category: "universal"
   },
-  // --- New agent-specific (simple pattern) ---
+  // --- Agent-specific (simple pattern) ---
   {
     id: "adal",
     name: "AdaL",
@@ -360,7 +363,7 @@ var AGENT_DEFINITIONS = [
     configDirs: [".zencoder"],
     category: "agent-specific"
   },
-  // --- New agent-specific (unusual paths) ---
+  // --- Agent-specific (unusual paths) ---
   {
     id: "antigravity",
     name: "Antigravity",
@@ -543,7 +546,7 @@ var CONFIG_TRANSLATORS = [
 `;
     }
   },
-  // New agents with specific config formats
+  // Agents with specific config formats
   {
     agentId: "cline",
     filePath: (name) => `.clinerules/${name}.md`,
@@ -770,10 +773,8 @@ function inferDetectedType(fileName) {
     "guidelines.md",
     ".aider.conf.yml",
     "config.yaml",
-    // New agent config patterns
     ".clinerules",
-    ".replit",
-    "config.yaml"
+    ".replit"
   ];
   if (agentConfigPatterns.some((p) => lower.endsWith(p))) return "AGENT_CONFIG";
   return "SKILL";
@@ -839,18 +840,18 @@ function createSpinner(text) {
 
 // src/storage/integrity.ts
 import { createHash } from "crypto";
-import { readFileSync } from "fs";
 function computeSha256FromBuffer(content) {
   const hash = createHash("sha256").update(content).digest("base64");
   return `sha256-${hash}`;
 }
 function computeSha256FromFiles(files) {
-  const combined = files.map((f) => f.content).join("");
+  const sorted = [...files].sort((a, b) => a.path.localeCompare(b.path));
+  const combined = sorted.map((f) => `${f.path}\0${f.content}`).join("\0");
   return computeSha256FromBuffer(combined);
 }
 
 // src/storage/lockfile.ts
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, renameSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync, readFileSync, renameSync, writeFileSync } from "fs";
 import { join as join2 } from "path";
 
 // ../shared/dist/cli-output.js
@@ -858,6 +859,12 @@ import { z as z2 } from "zod";
 
 // ../shared/dist/schemas.js
 import { z } from "zod";
+
+// ../shared/dist/constants.js
+var PACKAGE_TYPES = ["SKILL", "AGENT_CONFIG", "PLUGIN", "SCRIPT", "PROMPT"];
+var WARNING_NO_LICENCE = "No licence specified. Consider adding an SPDX licence identifier.";
+
+// ../shared/dist/schemas.js
 var AGENT_IDS_FOR_SCHEMA = [
   "adal",
   "aider",
@@ -908,7 +915,7 @@ var skillMetadataSchema = z.object({
   name: z.string().min(1).max(100),
   description: z.string().max(500).optional(),
   version: z.string().regex(/^\d+\.\d+\.\d+(-[\w.]+)?$/, "Must be valid semver"),
-  type: z.enum(["SKILL", "AGENT_CONFIG", "PLUGIN", "SCRIPT", "PROMPT"]),
+  type: z.enum(PACKAGE_TYPES),
   tags: z.array(z.string().max(50)).max(20).default([]),
   agents: z.array(agentIdEnum).default([])
 });
@@ -971,7 +978,7 @@ var lockfileV2Schema = z.object({
 var manifestAnySchema = z.discriminatedUnion("version", [manifestSchema, manifestV2Schema]);
 var lockfileAnySchema = z.discriminatedUnion("version", [lockfileSchema, lockfileV2Schema]);
 var packageStructureSchema = z.object({
-  type: z.enum(["SKILL", "AGENT_CONFIG", "PLUGIN", "SCRIPT", "PROMPT"]),
+  type: z.enum(PACKAGE_TYPES),
   entryFile: z.string(),
   requiredFiles: z.array(z.string()).default([]),
   optionalDirs: z.array(z.string()).default([])
@@ -1031,7 +1038,7 @@ var fileManifestSchema = z.object({
   files: z.array(fileManifestEntrySchema),
   totalSize: z.number().int().nonnegative(),
   entryFile: z.string(),
-  packageType: z.enum(["SKILL", "AGENT_CONFIG", "PLUGIN", "SCRIPT", "PROMPT"])
+  packageType: z.enum(PACKAGE_TYPES)
 });
 var agentConfigSchema = z.object({
   name: z.string().min(1),
@@ -1048,7 +1055,6 @@ var cliErrorSchema = z2.object({
   message: z2.string()
 });
 var loginResultSchema = z2.object({
-  token: z2.string(),
   user: z2.object({
     id: z2.string(),
     email: z2.string(),
@@ -1768,7 +1774,7 @@ function formatWithOptions(inspectOptions, ...args) {
   const first = args[0];
   let a = 0;
   let str = "";
-  let join22 = "";
+  let join24 = "";
   if (typeof first === "string") {
     if (args.length === 1) {
       return first;
@@ -1867,7 +1873,7 @@ function formatWithOptions(inspectOptions, ...args) {
     }
     if (lastPos !== 0) {
       a++;
-      join22 = " ";
+      join24 = " ";
       if (lastPos < first.length) {
         str += first.slice(lastPos);
       }
@@ -1875,9 +1881,9 @@ function formatWithOptions(inspectOptions, ...args) {
   }
   while (a < args.length) {
     const value = args[a];
-    str += join22;
+    str += join24;
     str += typeof value !== "string" ? inspect(value, inspectOptions) : value;
-    join22 = " ";
+    join24 = " ";
     a++;
   }
   return str;
@@ -2988,7 +2994,7 @@ function validateSkillMd(content) {
   }
   const specCompliant = isAgentSkillsSpecCompliant(content);
   if (!agentverParsed.data.license) {
-    warnings.push("No license specified. Consider adding an SPDX licence identifier.");
+    warnings.push(WARNING_NO_LICENCE);
   }
   if (!body || body.trim().length === 0) {
     warnings.push("SKILL.md body is empty. Add instructions for agents to follow.");
@@ -3085,7 +3091,7 @@ function readLockfile(projectRoot) {
   if (!existsSync2(lockfilePath)) {
     return EMPTY_LOCKFILE;
   }
-  const raw = readFileSync2(lockfilePath, "utf-8");
+  const raw = readFileSync(lockfilePath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -3115,7 +3121,7 @@ function writeLockfile(projectRoot, lockfile) {
 }
 
 // src/storage/manifest.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync3, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, writeFileSync as writeFileSync2 } from "fs";
 import { join as join3 } from "path";
 var MANIFEST_DIR = ".agentver";
 var MANIFEST_FILE = "manifest.json";
@@ -3146,7 +3152,7 @@ function readManifest(projectRoot) {
   if (!existsSync3(manifestPath)) {
     return EMPTY_MANIFEST;
   }
-  const raw = readFileSync3(manifestPath, "utf-8");
+  const raw = readFileSync2(manifestPath, "utf-8");
   let parsed;
   try {
     parsed = JSON.parse(raw);
@@ -3197,7 +3203,7 @@ function deduplicateByPath(files) {
 }
 function computeFileIntegrity(filePath) {
   try {
-    const content = readFileSync4(filePath, "utf-8");
+    const content = readFileSync3(filePath, "utf-8");
     return computeSha256FromBuffer(content);
   } catch {
     return computeSha256FromBuffer("");
@@ -3347,18 +3353,16 @@ import chalk4 from "chalk";
 // src/git/fetcher.ts
 import { execFile } from "child_process";
 import { randomUUID } from "crypto";
-import { mkdir, readdir, readFile, rm as rm2, stat, writeFile } from "fs/promises";
+import { mkdir, readdir, readFile, rm, stat, writeFile } from "fs/promises";
 import { tmpdir } from "os";
 import { join as join5 } from "path";
 import { promisify } from "util";
 
 // src/git/cache.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync5, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
-import { rm } from "fs/promises";
+import { existsSync as existsSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync4, statSync as statSync2, writeFileSync as writeFileSync3 } from "fs";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname2, join as join4 } from "path";
 var logger = createLogger("git:cache");
-var REF_STALE_MS = 5 * 60 * 1e3;
 function getCacheDir() {
   return join4(homedir2(), ".agentver", "cache");
 }
@@ -3412,7 +3416,7 @@ function readCachedFilesSync(dirPath, basePath = "") {
     }
     if (!entry.isFile()) continue;
     try {
-      const content = readFileSync5(fullPath, "utf-8");
+      const content = readFileSync4(fullPath, "utf-8");
       const fileStat = statSync2(fullPath);
       files.push({ path: relativePath, content, size: fileStat.size });
     } catch {
@@ -3669,7 +3673,7 @@ async function fetchGitHubArchive(source, commitSha) {
     const readFrom = source.path ? join5(extractDir, source.path) : extractDir;
     return await readFilesFromDirectory(readFrom);
   } finally {
-    await rm2(tempDir, { recursive: true, force: true }).catch(() => {
+    await rm(tempDir, { recursive: true, force: true }).catch(() => {
     });
   }
 }
@@ -3702,7 +3706,7 @@ async function fetchGitLabArchive(source, commitSha) {
     const readFrom = source.path ? join5(extractDir, source.path) : extractDir;
     return await readFilesFromDirectory(readFrom);
   } finally {
-    await rm2(tempDir, { recursive: true, force: true }).catch(() => {
+    await rm(tempDir, { recursive: true, force: true }).catch(() => {
     });
   }
 }
@@ -3724,7 +3728,7 @@ async function fetchGitArchiveCommand(source, commitSha) {
     const readFrom = source.path ? join5(extractDir, source.path) : extractDir;
     return await readFilesFromDirectory(readFrom);
   } finally {
-    await rm2(tempDir, { recursive: true, force: true }).catch(() => {
+    await rm(tempDir, { recursive: true, force: true }).catch(() => {
     });
   }
 }
@@ -3748,7 +3752,7 @@ async function fetchViaSparseCheckout(resolved) {
     const readFrom = source.path ? join5(tempDir, source.path) : tempDir;
     return await readFilesFromDirectory(readFrom);
   } finally {
-    await rm2(tempDir, { recursive: true, force: true }).catch(() => {
+    await rm(tempDir, { recursive: true, force: true }).catch(() => {
     });
   }
 }
@@ -3764,7 +3768,7 @@ async function fetchViaClone(resolved) {
     const readFrom = source.path ? join5(tempDir, source.path) : tempDir;
     return await readFilesFromDirectory(readFrom);
   } finally {
-    await rm2(tempDir, { recursive: true, force: true }).catch(() => {
+    await rm(tempDir, { recursive: true, force: true }).catch(() => {
     });
   }
 }
@@ -4477,12 +4481,12 @@ function renderScanResult(result, spinner) {
 }
 
 // src/registry/config.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync7, writeFileSync as writeFileSync5 } from "fs";
+import { existsSync as existsSync6, mkdirSync as mkdirSync5, readFileSync as readFileSync6, writeFileSync as writeFileSync5 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join7 } from "path";
 
 // src/registry/auth.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync6, writeFileSync as writeFileSync4 } from "fs";
+import { existsSync as existsSync5, mkdirSync as mkdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "fs";
 import { homedir as homedir3 } from "os";
 import { join as join6 } from "path";
 function getCredentialsPath() {
@@ -4493,7 +4497,7 @@ async function getCredentials() {
   if (!existsSync5(credPath)) {
     return null;
   }
-  const raw = readFileSync6(credPath, "utf-8");
+  const raw = readFileSync5(credPath, "utf-8");
   try {
     return JSON.parse(raw);
   } catch {
@@ -4527,7 +4531,7 @@ function readConfig() {
     return {};
   }
   try {
-    const raw = readFileSync7(CONFIG_PATH, "utf-8");
+    const raw = readFileSync6(CONFIG_PATH, "utf-8");
     return JSON.parse(raw);
   } catch {
     return {};
@@ -4675,13 +4679,14 @@ import {
   rmSync,
   symlinkSync
 } from "fs";
+import { homedir as homedir5 } from "os";
 import { dirname as dirname3, join as join8, relative } from "path";
 import chalk3 from "chalk";
 var logger3 = createLogger("canonical");
 var CANONICAL_DIR = ".agents/skills";
 function getCanonicalSkillPath(projectRoot, name, scope) {
   if (scope === "global") {
-    const home = process.env.HOME ?? "";
+    const home = homedir5();
     return join8(home, CANONICAL_DIR, name);
   }
   return join8(projectRoot, CANONICAL_DIR, name);
@@ -4695,7 +4700,7 @@ function createAgentSymlinks(projectRoot, name, agents, scope) {
   for (const agentId of agents) {
     const placementPath = getSkillPlacementPath(agentId, name, scope);
     if (!placementPath) continue;
-    const agentSkillPath = scope === "global" ? placementPath.replace("~", process.env.HOME ?? "") : join8(projectRoot, placementPath);
+    const agentSkillPath = scope === "global" ? placementPath.replace("~", homedir5()) : join8(projectRoot, placementPath);
     if (existsSync7(agentSkillPath) || isSymlink(agentSkillPath)) {
       rmSync(agentSkillPath, { recursive: true, force: true });
     }
@@ -4718,7 +4723,7 @@ function removeAgentSymlinks(projectRoot, name, agents, scope) {
   for (const agentId of agents) {
     const placementPath = getSkillPlacementPath(agentId, name, scope);
     if (!placementPath) continue;
-    const agentSkillPath = scope === "global" ? placementPath.replace("~", process.env.HOME ?? "") : join8(projectRoot, placementPath);
+    const agentSkillPath = scope === "global" ? placementPath.replace("~", homedir5()) : join8(projectRoot, placementPath);
     if (existsSync7(agentSkillPath) || isSymlink(agentSkillPath)) {
       rmSync(agentSkillPath, { recursive: true, force: true });
     }
@@ -4740,7 +4745,7 @@ function resolveReadPath(projectRoot, packageName, agents, scope = "project") {
   for (const agentId of agents) {
     const placementPath = getSkillPlacementPath(agentId, packageName, scope);
     if (!placementPath) continue;
-    const fullPath = scope === "global" ? placementPath.replace("~", process.env.HOME ?? "") : join8(projectRoot, placementPath);
+    const fullPath = scope === "global" ? placementPath.replace("~", homedir5()) : join8(projectRoot, placementPath);
     if (existsSync7(fullPath)) {
       if (isSymlink(fullPath)) {
         const target = readlinkSync(fullPath);
@@ -4791,7 +4796,7 @@ function buildSourceFromManifest(pkg2) {
   if (!pkg2 || pkg2.source.type !== "git") {
     return FALLBACK_SOURCE;
   }
-  const source = pkg2.source;
+  const { source } = pkg2;
   const parts = source.uri.split("/");
   return {
     host: parts[0] ?? "github.com",
@@ -5150,7 +5155,7 @@ function computeHunks(oldLines, newLines) {
   const lcs = computeLcs(oldLines, newLines);
   const changes = buildChangeList(oldLines, newLines, lcs);
   if (changes.length === 0) return [];
-  return groupIntoHunks(changes, oldLines.length, newLines.length);
+  return groupIntoHunks(changes);
 }
 function computeLcs(a, b) {
   const m = a.length;
@@ -5208,7 +5213,7 @@ function buildChangeList(oldLines, newLines, lcs) {
   }
   return changes;
 }
-function groupIntoHunks(changes, _oldTotal, _newTotal) {
+function groupIntoHunks(changes) {
   const diffIndices = [];
   for (let i = 0; i < changes.length; i++) {
     if (changes[i].type !== "context") {
@@ -5442,7 +5447,7 @@ function registerDiffCommand(program2) {
 }
 
 // src/commands/draft.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8 } from "fs";
+import { existsSync as existsSync8, readFileSync as readFileSync7 } from "fs";
 import { basename as basename2, join as join10 } from "path";
 import chalk6 from "chalk";
 import ora2 from "ora";
@@ -5503,7 +5508,7 @@ function resolveSkillIdentity() {
   const skillMdPath = join10(cwd, "SKILL.md");
   let skillName = null;
   if (existsSync8(skillMdPath)) {
-    const content = readFileSync8(skillMdPath, "utf-8");
+    const content = readFileSync7(skillMdPath, "utf-8");
     const nameMatch = content.match(/^name:\s*(.+)$/m);
     skillName = nameMatch?.[1]?.trim() ?? basename2(cwd);
   }
@@ -6185,7 +6190,8 @@ Created ${fileName} in ./${packageName}/`));
 }
 
 // src/commands/install.ts
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync7 } from "fs";
+import { homedir as homedir6 } from "os";
 import { dirname as dirname4, join as join12, relative as relative2, resolve } from "path";
 import chalk8 from "chalk";
 import prompts2 from "prompts";
@@ -6867,14 +6873,14 @@ async function installAgentConfig(name, files, agents, options, spinner) {
   for (const agentId of agents) {
     const configPath = getConfigFilePath(agentId, name);
     if (!configPath) continue;
-    const fullConfigPath = options.global ? configPath.replace("~", process.env.HOME ?? "") : join12(projectRoot, configPath);
+    const fullConfigPath = options.global ? configPath.replace("~", homedir6()) : join12(projectRoot, configPath);
     const configDir = join12(fullConfigPath, "..");
     if (!existsSync10(configDir)) {
       mkdirSync8(configDir, { recursive: true });
     }
     let finalContent = configContent;
     if (existsSync10(fullConfigPath)) {
-      const existingContent = readFileSync9(fullConfigPath, "utf-8");
+      const existingContent = readFileSync8(fullConfigPath, "utf-8");
       if (isComposedConfig(existingContent)) {
         const existingSections = parseComposedSections(existingContent);
         const alreadyPresent = existingSections.some((s) => s.packageName === name);
@@ -7000,7 +7006,7 @@ Installed packages (${entries.length}):
 }
 
 // src/commands/log.ts
-import { existsSync as existsSync11, readFileSync as readFileSync10 } from "fs";
+import { existsSync as existsSync11, readFileSync as readFileSync9 } from "fs";
 import { basename as basename3, join as join13 } from "path";
 import chalk10 from "chalk";
 import ora3 from "ora";
@@ -7021,7 +7027,7 @@ function resolveSkillIdentity2(nameArg) {
   const skillMdPath = join13(cwd, "SKILL.md");
   let skillName = null;
   if (existsSync11(skillMdPath)) {
-    const content = readFileSync10(skillMdPath, "utf-8");
+    const content = readFileSync9(skillMdPath, "utf-8");
     const nameMatch = content.match(/^name:\s*(.+)$/m);
     skillName = nameMatch?.[1]?.trim() ?? basename3(cwd);
   }
@@ -7359,7 +7365,6 @@ function registerLoginCommand(program2) {
       const target = url ?? getPlatformUrl();
       if (isJSONMode()) {
         outputSuccess({
-          token: options.token,
           user: { id: "", email: "", name: "" }
         });
         return;
@@ -7472,7 +7477,7 @@ function registerLogoutCommand(program2) {
 }
 
 // src/commands/publish.ts
-import { existsSync as existsSync12, readFileSync as readFileSync11 } from "fs";
+import { existsSync as existsSync12, readFileSync as readFileSync10 } from "fs";
 import { basename as basename4, join as join14, resolve as resolve2 } from "path";
 import chalk14 from "chalk";
 import ora4 from "ora";
@@ -7503,7 +7508,7 @@ function parseFrontmatter2(content) {
 function detectNamespace(skillDir) {
   const skillMdPath = join14(skillDir, "SKILL.md");
   if (!existsSync12(skillMdPath)) return null;
-  const content = readFileSync11(skillMdPath, "utf-8");
+  const content = readFileSync10(skillMdPath, "utf-8");
   const fm = parseFrontmatter2(content);
   if (!fm) return null;
   const parts = skillDir.split("/");
@@ -7526,7 +7531,7 @@ function registerPublishCommand(program2) {
     }
     const spinner = ora4("Reading skill metadata...").start();
     try {
-      const skillMdContent = readFileSync11(join14(skillDir, "SKILL.md"), "utf-8");
+      const skillMdContent = readFileSync10(join14(skillDir, "SKILL.md"), "utf-8");
       const frontmatter = parseFrontmatter2(skillMdContent);
       if (!frontmatter) {
         spinner.fail(
@@ -7769,7 +7774,7 @@ function isSymlinkPath(filePath) {
 }
 
 // src/commands/save.ts
-import { existsSync as existsSync14, readFileSync as readFileSync12 } from "fs";
+import { existsSync as existsSync14, readFileSync as readFileSync11 } from "fs";
 import { basename as basename5, join as join16, resolve as resolve3 } from "path";
 import chalk16 from "chalk";
 import ora5 from "ora";
@@ -7778,7 +7783,7 @@ function detectSkillName(skillDir) {
   if (!existsSync14(skillMdPath)) {
     return null;
   }
-  const content = readFileSync12(skillMdPath, "utf-8");
+  const content = readFileSync11(skillMdPath, "utf-8");
   const nameMatch = content.match(/^name:\s*(.+)$/m);
   return nameMatch?.[1]?.trim() ?? basename5(skillDir);
 }
@@ -7910,19 +7915,19 @@ function registerSaveCommand(program2) {
 }
 
 // src/commands/scan.ts
-import { readFileSync as readFileSync13 } from "fs";
-import { homedir as homedir5 } from "os";
+import { readFileSync as readFileSync12 } from "fs";
+import { homedir as homedir7 } from "os";
 import chalk17 from "chalk";
 function registerScanCommand(program2) {
   program2.command("scan [path]").description("Scan directory for agent configs and skills").action(async (path) => {
     const jsonMode = isJSONMode();
     const targetPath = path ?? process.cwd();
     const projectAgents = detectInstalledAgents(targetPath);
-    const globalAgents = detectGlobalAgents(homedir5());
+    const globalAgents = detectGlobalAgents(homedir7());
     const seenIds = new Set(projectAgents.map((a) => a.id));
     const agents = [...projectAgents, ...globalAgents.filter((a) => !seenIds.has(a.id))];
     const projectFiles = scanForSkillFiles(targetPath);
-    const globalFiles = scanGlobalSkillFiles(homedir5());
+    const globalFiles = scanGlobalSkillFiles(homedir7());
     const seenPaths = new Set(projectFiles.map((f) => f.path));
     const files = [...projectFiles, ...globalFiles.filter((f) => !seenPaths.has(f.path))];
     if (jsonMode) {
@@ -7965,7 +7970,7 @@ function registerScanCommand(program2) {
       for (const file of skillFiles) {
         let content;
         try {
-          content = readFileSync13(file.path, "utf-8");
+          content = readFileSync12(file.path, "utf-8");
         } catch {
           console.log(`  ${chalk17.red("\u2717")} ${file.name} ${chalk17.dim("Could not read file")}`);
           continue;
@@ -8538,9 +8543,9 @@ function registerSuggestCommand(program2) {
     if (modifiedPackages.length === 0) {
       if (json) {
         outputError("NO_CHANGES", "No modified packages detected.");
-      } else {
-        console.log(chalk20.dim("No modified packages detected."));
+        process.exit(1);
       }
+      console.log(chalk20.dim("No modified packages detected."));
       return;
     }
     const targetName = modifiedPackages[0];
@@ -8869,9 +8874,11 @@ function registerSyncCommand(program2) {
       clearTimeout(timeoutId);
       if (!response.ok) {
         const errorText = await response.text().catch(() => "Unknown error");
-        spinner.fail(`Sync failed (${response.status}): ${errorText}`);
         if (isJSONMode()) {
+          spinner.stop();
           outputError("SYNC_FAILED", `Sync failed (${response.status}): ${errorText}`);
+        } else {
+          spinner.fail(`Sync failed (${response.status}): ${errorText}`);
         }
         process.exit(1);
       }
@@ -8889,14 +8896,18 @@ function registerSyncCommand(program2) {
       );
     } catch (error) {
       if (error instanceof DOMException && error.name === "AbortError") {
-        spinner.fail("Sync timed out. The platform may be experiencing issues.");
         if (isJSONMode()) {
+          spinner.stop();
           outputError("TIMEOUT", "Sync timed out. The platform may be experiencing issues.");
+        } else {
+          spinner.fail("Sync timed out. The platform may be experiencing issues.");
         }
       } else {
-        spinner.fail(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
         if (isJSONMode()) {
+          spinner.stop();
           outputError("SYNC_FAILED", error instanceof Error ? error.message : String(error));
+        } else {
+          spinner.fail(`Sync failed: ${error instanceof Error ? error.message : String(error)}`);
         }
       }
       process.exit(1);
@@ -8911,7 +8922,7 @@ import ora7 from "ora";
 import prompts3 from "prompts";
 
 // src/storage/patches.ts
-import { existsSync as existsSync16, mkdirSync as mkdirSync9, readFileSync as readFileSync14, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "fs";
+import { existsSync as existsSync16, mkdirSync as mkdirSync9, readFileSync as readFileSync13, rmSync as rmSync3, writeFileSync as writeFileSync8 } from "fs";
 import { join as join18 } from "path";
 var PATCHES_DIR = ".agentver/patches";
 var CONTEXT_LINES2 = 3;
@@ -8961,7 +8972,7 @@ function generatePatch(baseFiles, localFiles, packageName) {
   return `${output.join("\n")}
 `;
 }
-function applyPatch(projectRoot, _packageName, _agents, patchContent) {
+function applyPatch(projectRoot, patchContent) {
   const filePatches = parsePatch(patchContent);
   const conflicts = [];
   for (const filePatch of filePatches) {
@@ -8999,7 +9010,7 @@ function applyFilePatch(projectRoot, filePatch) {
   if (!existsSync16(fullPath)) {
     return false;
   }
-  const currentContent = readFileSync14(fullPath, "utf-8");
+  const currentContent = readFileSync13(fullPath, "utf-8");
   const currentLines = currentContent.split("\n");
   let offset = 0;
   for (const hunk of filePatch.hunks) {
@@ -9436,7 +9447,7 @@ async function handlePatchUpdate(update, projectRoot, agents, spinner) {
   const agentId = agents[0];
   const result = await installPackage(sourceUrl, { agent: agentId });
   spinner.text = `Reapplying local patch for ${update.name}...`;
-  const applyResult = applyPatch(projectRoot, update.name, agents, patchContent);
+  const applyResult = applyPatch(projectRoot, patchContent);
   if (applyResult.applied) {
     removePatch(projectRoot, update.name);
     spinner.succeed(`${chalk23.green(update.name)}: updated and local patch reapplied successfully`);
@@ -9698,8 +9709,109 @@ Upstream changes available (${updates.length}):
   });
 }
 
-// src/commands/verify.ts
+// src/commands/upgrade.ts
+import { execFile as execFile2 } from "child_process";
+import { createRequire } from "module";
+import { dirname as dirname5, join as join21 } from "path";
+import { fileURLToPath } from "url";
+import { promisify as promisify2 } from "util";
 import chalk24 from "chalk";
+var execFileAsync2 = promisify2(execFile2);
+var PACKAGE_NAME = "@agentver/cli";
+function getCurrentVersion() {
+  const __dirname2 = dirname5(fileURLToPath(import.meta.url));
+  const require3 = createRequire(import.meta.url);
+  const pkg2 = require3(join21(__dirname2, "..", "..", "package.json"));
+  return pkg2.version;
+}
+async function getLatestVersion() {
+  const response = await fetch(`https://registry.npmjs.org/${PACKAGE_NAME}/latest`);
+  if (!response.ok) {
+    throw new Error(`Failed to check for updates: ${response.statusText}`);
+  }
+  const data = await response.json();
+  return data.version;
+}
+async function detectPackageManager() {
+  const managers = ["bun", "pnpm", "yarn", "npm"];
+  for (const pm of managers) {
+    try {
+      const { stdout } = await execFileAsync2(pm, ["--version"], { timeout: 5e3 });
+      if (stdout.trim()) {
+        const { stdout: listOut } = await execFileAsync2(
+          pm,
+          pm === "npm" ? ["list", "-g", PACKAGE_NAME, "--depth=0"] : ["pm", "ls", "-g"],
+          { timeout: 1e4 }
+        ).catch(() => ({ stdout: "" }));
+        if (listOut.includes("agentver")) {
+          return pm;
+        }
+      }
+    } catch {
+      continue;
+    }
+  }
+  return "npm";
+}
+function getInstallArgs(pm) {
+  switch (pm) {
+    case "bun":
+      return ["install", "-g", `${PACKAGE_NAME}@latest`];
+    case "pnpm":
+      return ["add", "-g", `${PACKAGE_NAME}@latest`];
+    case "yarn":
+      return ["global", "add", `${PACKAGE_NAME}@latest`];
+    case "npm":
+      return ["install", "-g", `${PACKAGE_NAME}@latest`];
+  }
+}
+function registerUpgradeCommand(program2) {
+  program2.command("upgrade").alias("self-update").description("Upgrade Agentver CLI to the latest version").action(async () => {
+    const json = isJSONMode();
+    const spinner = createSpinner("Checking for updates\u2026");
+    spinner.start();
+    try {
+      const currentVersion = getCurrentVersion();
+      const latestVersion = await getLatestVersion();
+      if (currentVersion === latestVersion) {
+        if (json) {
+          outputSuccess({ current: currentVersion, latest: latestVersion, upToDate: true });
+        } else {
+          spinner.succeed(`Already on the latest version ${chalk24.green(`v${currentVersion}`)}`);
+        }
+        return;
+      }
+      spinner.text = `Upgrading ${chalk24.dim(`v${currentVersion}`)} \u2192 ${chalk24.green(`v${latestVersion}`)}\u2026`;
+      const pm = await detectPackageManager();
+      const args = getInstallArgs(pm);
+      await execFileAsync2(pm, args, { timeout: 6e4 });
+      if (json) {
+        const result = {
+          previous: currentVersion,
+          latest: latestVersion,
+          packageManager: pm
+        };
+        outputSuccess(result);
+      } else {
+        spinner.succeed(
+          `Upgraded ${chalk24.green(`v${currentVersion}`)} \u2192 ${chalk24.green(`v${latestVersion}`)} via ${pm}`
+        );
+      }
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      if (json) {
+        outputError("UPGRADE_FAILED", message);
+        process.exit(1);
+      } else {
+        spinner.fail(`Upgrade failed: ${message}`);
+        process.exit(1);
+      }
+    }
+  });
+}
+
+// src/commands/verify.ts
+import chalk25 from "chalk";
 var FALLBACK_SOURCE2 = {
   host: "github.com",
   owner: "local",
@@ -9711,7 +9823,7 @@ function buildSourceFromManifest2(pkg2) {
   if (!pkg2 || pkg2.source.type !== "git") {
     return FALLBACK_SOURCE2;
   }
-  const source = pkg2.source;
+  const { source } = pkg2;
   const parts = source.uri.split("/");
   return {
     host: parts[0] ?? "github.com",
@@ -9744,7 +9856,7 @@ async function runSecurityScan(dirPath, source, strict) {
     } else {
       passed = result.verdict === "PASS" || result.verdict === "WARN";
     }
-    const ruleCount = 65;
+    const ruleCount = SCAN_RULES.length;
     return { passed, ruleCount, issueCount, result };
   } catch {
     return { passed: false, ruleCount: 0, issueCount: 0, result: null };
@@ -9766,8 +9878,8 @@ function registerVerifyCommand(program2) {
           outputError("NO_SKILL", "No skill name provided and no packages installed");
           return;
         }
-        process.stderr.write(chalk24.red("No skill name provided and no packages installed.\n"));
-        process.stderr.write(chalk24.dim("Usage: agentver verify @org/skill-name\n"));
+        process.stderr.write(chalk25.red("No skill name provided and no packages installed.\n"));
+        process.stderr.write(chalk25.dim("Usage: agentver verify @org/skill-name\n"));
         process.exitCode = 1;
         return;
       }
@@ -9782,10 +9894,10 @@ function registerVerifyCommand(program2) {
           return;
         }
         process.stderr.write(
-          chalk24.red("Multiple packages installed. Please specify which to verify:\n")
+          chalk25.red("Multiple packages installed. Please specify which to verify:\n")
         );
         for (const pkg2 of packageNames) {
-          process.stderr.write(`  ${chalk24.cyan(pkg2)}
+          process.stderr.write(`  ${chalk25.cyan(pkg2)}
 `);
         }
         process.exitCode = 1;
@@ -9802,7 +9914,7 @@ function registerVerifyCommand(program2) {
         return;
       }
       process.stderr.write(
-        chalk24.red(`Invalid skill name "${skillName}". Expected format: @org/skill-name
+        chalk25.red(`Invalid skill name "${skillName}". Expected format: @org/skill-name
 `)
       );
       process.exitCode = 1;
@@ -9810,7 +9922,7 @@ function registerVerifyCommand(program2) {
     }
     if (!jsonMode) {
       process.stderr.write(`
-${chalk24.bold(`Verifying @${parsed.org}/${parsed.skill}...`)}
+${chalk25.bold(`Verifying @${parsed.org}/${parsed.skill}...`)}
 
 `);
     }
@@ -9952,26 +10064,26 @@ ${chalk24.bold(`Verifying @${parsed.org}/${parsed.skill}...`)}
     }
     process.stderr.write("\n");
     if (overallPassed) {
-      process.stderr.write(chalk24.green.bold("Skill is verified and safe to use.\n"));
+      process.stderr.write(chalk25.green.bold("Skill is verified and safe to use.\n"));
     } else {
-      process.stderr.write(chalk24.red.bold("Skill verification failed.\n"));
+      process.stderr.write(chalk25.red.bold("Skill verification failed.\n"));
       process.exitCode = 1;
     }
   });
 }
 
 // src/commands/version.ts
-import { existsSync as existsSync18, readFileSync as readFileSync15 } from "fs";
-import { basename as basename6, join as join21 } from "path";
-import chalk25 from "chalk";
+import { existsSync as existsSync18, readFileSync as readFileSync14 } from "fs";
+import { basename as basename6, join as join22 } from "path";
+import chalk26 from "chalk";
 import ora8 from "ora";
 var SEMVER_REGEX2 = /^\d+\.\d+\.\d+(-[\w.]+)?$/;
 function resolveSkillIdentity3() {
   const cwd = process.cwd();
-  const skillMdPath = join21(cwd, "SKILL.md");
+  const skillMdPath = join22(cwd, "SKILL.md");
   let skillName = null;
   if (existsSync18(skillMdPath)) {
-    const content = readFileSync15(skillMdPath, "utf-8");
+    const content = readFileSync14(skillMdPath, "utf-8");
     const nameMatch = content.match(/^name:\s*(.+)$/m);
     skillName = nameMatch?.[1]?.trim() ?? basename6(cwd);
   }
@@ -9999,7 +10111,7 @@ function registerVersionCommand(program2) {
   version.command("create <semver>").description("Create a version tag for the current skill").option("--notes <text>", "Release notes").option("--json", "Output as JSON").action(async (semver, options) => {
     if (!SEMVER_REGEX2.test(semver)) {
       process.stderr.write(
-        chalk25.red(`Invalid semver "${semver}". Expected format: 1.0.0 or 1.0.0-beta.1
+        chalk26.red(`Invalid semver "${semver}". Expected format: 1.0.0 or 1.0.0-beta.1
 `)
       );
       process.exit(1);
@@ -10007,7 +10119,7 @@ function registerVersionCommand(program2) {
     const identity = resolveSkillIdentity3();
     if (!identity) {
       process.stderr.write(
-        chalk25.red("Could not determine skill identity. Run this from a skill directory.\n")
+        chalk26.red("Could not determine skill identity. Run this from a skill directory.\n")
       );
       process.exit(1);
     }
@@ -10015,7 +10127,7 @@ function registerVersionCommand(program2) {
     const lockEntry = lockfile.packages[identity.name];
     const commitSha = lockEntry?.source.type === "git" ? lockEntry.source.commit : void 0;
     if (!commitSha || commitSha === "unknown") {
-      process.stderr.write(chalk25.red("No commit SHA found in lockfile. Save changes first.\n"));
+      process.stderr.write(chalk26.red("No commit SHA found in lockfile. Save changes first.\n"));
       process.exit(1);
     }
     const spinner = ora8(`Creating version ${semver}...`).start();
@@ -10047,7 +10159,7 @@ function registerVersionCommand(program2) {
         );
       } else {
         spinner.succeed(
-          `Version ${chalk25.cyan(semver)} created ${chalk25.dim(`(${result.commitSha.slice(0, 7)})`)}`
+          `Version ${chalk26.cyan(semver)} created ${chalk26.dim(`(${result.commitSha.slice(0, 7)})`)}`
         );
       }
     } catch (error) {
@@ -10061,7 +10173,7 @@ function registerVersionCommand(program2) {
     const identity = resolveSkillIdentity3();
     if (!identity) {
       process.stderr.write(
-        chalk25.red("Could not determine skill identity. Run this from a skill directory.\n")
+        chalk26.red("Could not determine skill identity. Run this from a skill directory.\n")
       );
       process.exit(1);
     }
@@ -10076,16 +10188,16 @@ function registerVersionCommand(program2) {
         return;
       }
       if (versions.length === 0) {
-        process.stdout.write(chalk25.dim("No versions found.\n"));
+        process.stdout.write(chalk26.dim("No versions found.\n"));
         return;
       }
-      process.stdout.write(chalk25.bold(`
+      process.stdout.write(chalk26.bold(`
 Versions for @${identity.org}/${identity.name}:
 
 `));
       for (const v of versions) {
         process.stdout.write(
-          `  ${chalk25.cyan(v.name)} ${chalk25.dim(`(${v.commitSha.slice(0, 7)})`)} ${chalk25.dim(v.message)}
+          `  ${chalk26.cyan(v.name)} ${chalk26.dim(`(${v.commitSha.slice(0, 7)})`)} ${chalk26.dim(v.message)}
 `
         );
       }
@@ -10100,7 +10212,7 @@ Versions for @${identity.org}/${identity.name}:
 }
 
 // src/commands/whoami.ts
-import chalk26 from "chalk";
+import chalk27 from "chalk";
 function registerWhoamiCommand(program2) {
   program2.command("whoami").description("Show authentication state").action(async () => {
     const credentials = await getCredentials();
@@ -10109,15 +10221,15 @@ function registerWhoamiCommand(program2) {
         outputSuccess({ authenticated: false });
         return;
       }
-      console.log(chalk26.dim("Not authenticated. Run `agentver login` to sign in."));
+      console.log(chalk27.dim("Not authenticated. Run `agentver login` to sign in."));
       return;
     }
     if (!isJSONMode()) {
       if (credentials.apiKey) {
         const prefix = credentials.apiKey.slice(0, 8);
-        console.log(`Authenticated via API key: ${chalk26.green(`${prefix}...`)}`);
+        console.log(`Authenticated via API key: ${chalk27.green(`${prefix}...`)}`);
       } else {
-        console.log(chalk26.green("Authenticated via OAuth."));
+        console.log(chalk27.green("Authenticated via OAuth."));
       }
     }
     const platformUrl = getPlatformUrl();
@@ -10126,11 +10238,11 @@ function registerWhoamiCommand(program2) {
         outputSuccess({ authenticated: true });
         return;
       }
-      console.log(chalk26.dim("Platform: not connected (run `agentver login <url>` to connect)"));
+      console.log(chalk27.dim("Platform: not connected (run `agentver login <url>` to connect)"));
       return;
     }
     if (!isJSONMode()) {
-      console.log(`Platform: ${chalk26.cyan(platformUrl)}`);
+      console.log(`Platform: ${chalk27.cyan(platformUrl)}`);
     }
     const me = await platformFetchSilent("/me");
     if (isJSONMode()) {
@@ -10157,9 +10269,13 @@ function registerWhoamiCommand(program2) {
 }
 
 // bin/agentver.ts
-var require2 = createRequire(import.meta.url);
-var pkg = require2("../../package.json");
-updateNotifier({ pkg }).notify();
+var __dirname = dirname6(fileURLToPath2(import.meta.url));
+var require2 = createRequire2(import.meta.url);
+var pkg = require2(join23(__dirname, "..", "package.json"));
+updateNotifier({ pkg }).notify({
+  message: `Update available: {currentVersion} \u2192 {latestVersion}
+Run ${chalk28.cyan("agentver upgrade")} to update`
+});
 var program = new Command();
 program.name("agentver").description("Agent skill registry \u2014 store, version, and distribute AI agent skills").version(pkg.version).option("--json", "Output results as structured JSON");
 registerAdoptCommand(program);
@@ -10182,6 +10298,7 @@ registerSuggestionsCommand(program);
 registerSaveCommand(program);
 registerPublishCommand(program);
 registerDraftCommand(program);
+registerUpgradeCommand(program);
 registerVerifyCommand(program);
 registerVersionCommand(program);
 registerLogCommand(program);