@dosu/cli 0.58.1 → 0.60.0

package/bin/dosu.js

@@ -1083,7 +1083,7 @@ function isNpxInvocation(channel = INSTALL_CHANNEL, env = process.env) {
 function getVersionString() {
   return `v${VERSION}`;
 }
-var VERSION = "0.58.1", INSTALL_CHANNEL = "npm";
+var VERSION = "0.60.0", INSTALL_CHANNEL = "npm";
 
 // src/debug/logger.ts
 import {
@@ -13741,12 +13741,70 @@ var init_sync = __esm(() => {
   init_watermark();
 });
 
+// src/learner/conflicts.ts
+import { existsSync as existsSync13, readFileSync as readFileSync15 } from "node:fs";
+function managedSettingsPaths(platform = process.platform) {
+  switch (platform) {
+    case "darwin":
+      return ["/Library/Application Support/ClaudeCode/managed-settings.json"];
+    case "win32":
+      return ["C:\\ProgramData\\ClaudeCode\\managed-settings.json"];
+    default:
+      return ["/etc/claude-code/managed-settings.json"];
+  }
+}
+function conflictingKeysIn(settings) {
+  const keys = [];
+  for (const key of CONFLICTING_KEYS) {
+    if (key in settings)
+      keys.push(key);
+  }
+  const env = settings.env;
+  if (typeof env === "object" && env !== null && !Array.isArray(env)) {
+    for (const name of Object.keys(env)) {
+      if (CONFLICTING_ENV_PREFIXES.some((p) => name.startsWith(p)))
+        keys.push(`env.${name}`);
+    }
+  }
+  return keys;
+}
+function detectSettingsConflicts(paths = managedSettingsPaths()) {
+  const conflicts = [];
+  for (const file of paths) {
+    if (!existsSync13(file))
+      continue;
+    let settings;
+    try {
+      settings = JSON.parse(readFileSync15(file, "utf8"));
+    } catch {
+      conflicts.push({ file, keys: [UNREADABLE_SETTINGS_KEY] });
+      continue;
+    }
+    if (typeof settings !== "object" || settings === null)
+      continue;
+    const keys = conflictingKeysIn(settings);
+    if (keys.length > 0)
+      conflicts.push({ file, keys });
+  }
+  return conflicts;
+}
+var CONFLICTING_KEYS, CONFLICTING_ENV_PREFIXES, UNREADABLE_SETTINGS_KEY = "<unreadable or invalid JSON>";
+var init_conflicts = __esm(() => {
+  CONFLICTING_KEYS = [
+    "apiKeyHelper",
+    "forceLoginMethod",
+    "awsAuthRefresh",
+    "awsCredentialExport"
+  ];
+  CONFLICTING_ENV_PREFIXES = ["ANTHROPIC_", "CLAUDE_CODE_", "AWS_"];
+});
+
 // src/telemetry/debug-id.ts
-var BUNDLE_DEBUG_ID_PLACEHOLDER = "9cb59d41-7339-0702-6475-6e2164756e21";
+var BUNDLE_DEBUG_ID_PLACEHOLDER = "bd089d5e-a4ab-0f80-6475-6e2164756e21";
 
 // src/telemetry/telemetry.ts
 import { randomUUID as randomUUID2 } from "node:crypto";
-import { existsSync as existsSync13 } from "node:fs";
+import { existsSync as existsSync14 } from "node:fs";
 import { request as httpRequest2 } from "node:http";
 import { request as httpsRequest } from "node:https";
 import { isAbsolute, relative, resolve as resolve2, sep } from "node:path";
@@ -13884,7 +13942,7 @@ function parseOwnedStackLine(originalLine, packageRoot) {
     return;
   }
   try {
-    if (!existsSync13(resolvedPath))
+    if (!existsSync14(resolvedPath))
       return;
   } catch {
     return;
@@ -13970,6 +14028,29 @@ function allowlisted(value, allowed) {
 function matching(value, pattern) {
   return typeof value === "string" && pattern.test(value) ? value : undefined;
 }
+function conflictKeysFacet(value) {
+  if (!Array.isArray(value))
+    return;
+  const keys = new Set;
+  for (const raw of value) {
+    if (typeof raw !== "string")
+      continue;
+    if (SETTINGS_CONFLICT_KEYS.has(raw))
+      keys.add(raw);
+    else if (raw === UNREADABLE_SETTINGS_KEY)
+      keys.add("unreadable");
+    else
+      keys.add(SETTINGS_CONFLICT_FAMILIES.find(([p]) => raw.startsWith(p))?.[1] ?? "other");
+  }
+  let joined = "";
+  for (const key of [...keys].sort()) {
+    const next = joined ? `${joined},${key}` : key;
+    if (next.length > MAX_CONFLICT_KEYS_LENGTH)
+      break;
+    joined = next;
+  }
+  return joined || undefined;
+}
 function sanitizeFacets(facets) {
   if (!facets || typeof facets !== "object")
     return {};
@@ -13977,6 +14058,7 @@ function sanitizeFacets(facets) {
   const status = allowlisted(facets.sync_status, SYNC_STATUSES);
   const learner = allowlisted(facets.learner_outcome, LEARNER_OUTCOMES);
   const gatewayReason = allowlisted(facets.gateway_reason, GATEWAY_REASONS);
+  const conflictKeys = conflictKeysFacet(facets.settings_conflict_keys);
   const claudeSource = allowlisted(facets.claude_code_source, CLAUDE_CODE_SOURCES);
   const claudeVersion = matching(facets.claude_code_version, CLAUDE_CODE_VERSION_PATTERN);
   const model = matching(facets.learner_model, LEARNER_MODEL_PATTERN);
@@ -13988,6 +14070,7 @@ function sanitizeFacets(facets) {
     ...facets.notes_written !== undefined ? { notes_written: countBucket(facets.notes_written) } : {},
     ...learner ? { learner_outcome: learner } : {},
     ...gatewayReason ? { gateway_reason: gatewayReason } : {},
+    ...conflictKeys ? { settings_conflict_keys: conflictKeys } : {},
     ...claudeSource ? { claude_code_source: claudeSource } : {},
     ...claudeVersion ? { claude_code_version: claudeVersion } : {},
     ...model ? { learner_model: model } : {},
@@ -14115,7 +14198,8 @@ function exceptionSummary(command, error, facets) {
   const outcome = facets.learner_outcome ?? facets.sync_status;
   if (!outcome)
     return error.code ?? error.type;
-  return `${command}: ${outcome}${facets.gateway_reason ? ` (${facets.gateway_reason})` : ""}`;
+  const detail = facets.gateway_reason ?? facets.settings_conflict_keys;
+  return `${command}: ${outcome}${detail ? ` (${detail})` : ""}`;
 }
 function buildSentryEnvelope(input) {
   const parsedDsn = parseSentryDsn(input.dsn);
@@ -14517,8 +14601,9 @@ function createCommandTelemetry(settings, dependencies = {}) {
 function shouldSendToSentry(error) {
   return !["SESSION_EXPIRED", "SESSION_PERSISTENCE_ERROR"].includes(error.code ?? "");
 }
-var REQUEST_TIMEOUT_MS = 500, MAX_RESPONSE_BYTES, MAX_STACK_FRAMES = 20, UNKNOWN_COMMAND = "unknown", FALLBACK_INSTALL_ID = "00000000-0000-4000-8000-000000000000", BUNDLE_CODE_FILE = "app:///bin/dosu.js", CLI_PACKAGE_ROOT, SAFE_ERROR_TYPES, SAFE_ERROR_CODES, SYNC_TRIGGERS, SYNC_STATUSES, LEARNER_OUTCOMES, GATEWAY_REASONS, CLAUDE_CODE_SOURCES, CLAUDE_CODE_VERSION_PATTERN, LEARNER_MODEL_PATTERN, BACKFILL_OFFERS, SENTRY_FACET_TAGS, pendingFacets;
+var REQUEST_TIMEOUT_MS = 500, MAX_RESPONSE_BYTES, MAX_STACK_FRAMES = 20, UNKNOWN_COMMAND = "unknown", FALLBACK_INSTALL_ID = "00000000-0000-4000-8000-000000000000", BUNDLE_CODE_FILE = "app:///bin/dosu.js", CLI_PACKAGE_ROOT, SAFE_ERROR_TYPES, SAFE_ERROR_CODES, SYNC_TRIGGERS, SYNC_STATUSES, LEARNER_OUTCOMES, GATEWAY_REASONS, CLAUDE_CODE_SOURCES, SETTINGS_CONFLICT_KEYS, SETTINGS_CONFLICT_FAMILIES, MAX_CONFLICT_KEYS_LENGTH = 200, CLAUDE_CODE_VERSION_PATTERN, LEARNER_MODEL_PATTERN, BACKFILL_OFFERS, SENTRY_FACET_TAGS, pendingFacets;
 var init_telemetry = __esm(() => {
+  init_conflicts();
   MAX_RESPONSE_BYTES = 1024 * 1024;
   CLI_PACKAGE_ROOT = detectCliPackageRoot();
   SAFE_ERROR_TYPES = new Set([
@@ -14635,6 +14720,58 @@ var init_telemetry = __esm(() => {
     "other"
   ]);
   CLAUDE_CODE_SOURCES = new Set(["sdk", "system", "missing"]);
+  SETTINGS_CONFLICT_KEYS = new Set([
+    "apiKeyHelper",
+    "forceLoginMethod",
+    "awsAuthRefresh",
+    "awsCredentialExport",
+    "env.ANTHROPIC_API_KEY",
+    "env.ANTHROPIC_AUTH_TOKEN",
+    "env.ANTHROPIC_BASE_URL",
+    "env.ANTHROPIC_CUSTOM_HEADERS",
+    "env.ANTHROPIC_MODEL",
+    "env.ANTHROPIC_SMALL_FAST_MODEL",
+    "env.ANTHROPIC_DEFAULT_OPUS_MODEL",
+    "env.ANTHROPIC_DEFAULT_SONNET_MODEL",
+    "env.ANTHROPIC_DEFAULT_HAIKU_MODEL",
+    "env.ANTHROPIC_BEDROCK_BASE_URL",
+    "env.ANTHROPIC_VERTEX_BASE_URL",
+    "env.ANTHROPIC_VERTEX_PROJECT_ID",
+    "env.ANTHROPIC_FOUNDRY_BASE_URL",
+    "env.ANTHROPIC_FOUNDRY_API_KEY",
+    "env.ANTHROPIC_AWS_BASE_URL",
+    "env.ANTHROPIC_BEDROCK_MANTLE_BASE_URL",
+    "env.ANTHROPIC_AWS_API_KEY",
+    "env.ANTHROPIC_PROFILE",
+    "env.ANTHROPIC_ENVIRONMENT_KEY",
+    "env.ANTHROPIC_IDENTITY_TOKEN",
+    "env.ANTHROPIC_FEDERATION_RULE_ID",
+    "env.ANTHROPIC_SERVICE_ACCOUNT_ID",
+    "env.CLAUDE_CODE_USE_BEDROCK",
+    "env.CLAUDE_CODE_USE_VERTEX",
+    "env.CLAUDE_CODE_USE_FOUNDRY",
+    "env.CLAUDE_CODE_USE_MANTLE",
+    "env.CLAUDE_CODE_USE_ANTHROPIC_AWS",
+    "env.CLAUDE_CODE_OAUTH_TOKEN",
+    "env.CLAUDE_CODE_API_BASE_URL",
+    "env.CLAUDE_CODE_SKIP_BEDROCK_AUTH",
+    "env.CLAUDE_CODE_SKIP_VERTEX_AUTH",
+    "env.CLAUDE_CODE_API_KEY_HELPER_TTL_MS",
+    "env.CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC",
+    "env.CLAUDE_CODE_ENABLE_TELEMETRY",
+    "env.CLAUDE_CODE_MAX_OUTPUT_TOKENS",
+    "env.AWS_REGION",
+    "env.AWS_PROFILE",
+    "env.AWS_BEARER_TOKEN_BEDROCK",
+    "env.AWS_ACCESS_KEY_ID",
+    "env.AWS_SECRET_ACCESS_KEY",
+    "env.AWS_SESSION_TOKEN"
+  ]);
+  SETTINGS_CONFLICT_FAMILIES = [
+    ["env.ANTHROPIC_", "env.ANTHROPIC_other"],
+    ["env.CLAUDE_CODE_", "env.CLAUDE_CODE_other"],
+    ["env.AWS_", "env.AWS_other"]
+  ];
   CLAUDE_CODE_VERSION_PATTERN = /^\d{1,4}\.\d{1,4}\.\d{1,6}(?:-[0-9A-Za-z]{1,16}(?:\.[0-9A-Za-z]{1,16}){0,3})?$/;
   LEARNER_MODEL_PATTERN = /^claude-[a-z0-9.-]{1,56}$/;
   BACKFILL_OFFERS = new Set([
@@ -14649,6 +14786,7 @@ var init_telemetry = __esm(() => {
     "sync_status",
     "learner_outcome",
     "gateway_reason",
+    "settings_conflict_keys",
     "claude_code_source",
     "claude_code_version",
     "learner_model"
@@ -14682,7 +14820,7 @@ var init_agent_select = __esm(() => {
 });
 
 // src/incognito/agents.ts
-import { existsSync as existsSync14, mkdirSync as mkdirSync9, readFileSync as readFileSync15, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "node:fs";
+import { existsSync as existsSync15, mkdirSync as mkdirSync9, readFileSync as readFileSync16, unlinkSync as unlinkSync2, writeFileSync as writeFileSync10 } from "node:fs";
 import { homedir as homedir4 } from "node:os";
 import { dirname as dirname5, join as join13 } from "node:path";
 function withFrontmatter(body) {
@@ -14707,18 +14845,18 @@ function fileAgent(options) {
     commandPath,
     isEnabled: () => {
       const path = commandPath();
-      if (!existsSync14(path))
+      if (!existsSync15(path))
         return false;
       try {
-        return readFileSync15(path, "utf-8").includes(INCOGNITO_MARKER);
+        return readFileSync16(path, "utf-8").includes(INCOGNITO_MARKER);
       } catch {
         return false;
       }
     },
     enable: () => {
       const path = commandPath();
-      if (existsSync14(path)) {
-        if (readFileSync15(path, "utf-8") === content)
+      if (existsSync15(path)) {
+        if (readFileSync16(path, "utf-8") === content)
           return "unchanged";
         writeFileSync10(path, content, "utf-8");
         return "updated";
@@ -14729,7 +14867,7 @@ function fileAgent(options) {
     },
     disable: () => {
       const path = commandPath();
-      if (!existsSync14(path))
+      if (!existsSync15(path))
         return "not_found";
       unlinkSync2(path);
       return "removed";
@@ -15171,64 +15309,6 @@ function createRunConfigDir() {
 }
 var init_config_dir = () => {};
 
-// src/learner/conflicts.ts
-import { existsSync as existsSync15, readFileSync as readFileSync16 } from "node:fs";
-function managedSettingsPaths(platform = process.platform) {
-  switch (platform) {
-    case "darwin":
-      return ["/Library/Application Support/ClaudeCode/managed-settings.json"];
-    case "win32":
-      return ["C:\\ProgramData\\ClaudeCode\\managed-settings.json"];
-    default:
-      return ["/etc/claude-code/managed-settings.json"];
-  }
-}
-function conflictingKeysIn(settings) {
-  const keys = [];
-  for (const key of CONFLICTING_KEYS) {
-    if (key in settings)
-      keys.push(key);
-  }
-  const env = settings.env;
-  if (typeof env === "object" && env !== null && !Array.isArray(env)) {
-    for (const name of Object.keys(env)) {
-      if (CONFLICTING_ENV_PREFIXES.some((p) => name.startsWith(p)))
-        keys.push(`env.${name}`);
-    }
-  }
-  return keys;
-}
-function detectSettingsConflicts(paths = managedSettingsPaths()) {
-  const conflicts = [];
-  for (const file of paths) {
-    if (!existsSync15(file))
-      continue;
-    let settings;
-    try {
-      settings = JSON.parse(readFileSync16(file, "utf8"));
-    } catch {
-      conflicts.push({ file, keys: ["<unreadable or invalid JSON>"] });
-      continue;
-    }
-    if (typeof settings !== "object" || settings === null)
-      continue;
-    const keys = conflictingKeysIn(settings);
-    if (keys.length > 0)
-      conflicts.push({ file, keys });
-  }
-  return conflicts;
-}
-var CONFLICTING_KEYS, CONFLICTING_ENV_PREFIXES;
-var init_conflicts = __esm(() => {
-  CONFLICTING_KEYS = [
-    "apiKeyHelper",
-    "forceLoginMethod",
-    "awsAuthRefresh",
-    "awsCredentialExport"
-  ];
-  CONFLICTING_ENV_PREFIXES = ["ANTHROPIC_", "CLAUDE_CODE_", "AWS_"];
-});
-
 // src/learner/env.ts
 function isStripped(name) {
   return STRIPPED_NAMES.has(name) || STRIPPED_PREFIXES.some((p) => name.startsWith(p));
@@ -58365,7 +58445,8 @@ async function runLearner(options) {
       outcome: "settings_conflict",
       notesWritten: 0,
       turns: 0,
-      message: `Refusing to run: conflicting Claude Code settings would override the study run's auth (${detail})`
+      message: `Refusing to run: conflicting Claude Code settings would override the study run's auth (${detail})`,
+      conflictKeys: conflicts.flatMap((c) => c.keys)
     };
   }
   const gatewayURL = options.gatewayURL ?? getLlmGatewayURL();
@@ -58803,6 +58884,7 @@ function learnerFacets(learner) {
   return {
     learner_outcome: learner.outcome,
     ...learner.gatewayReason ? { gateway_reason: learner.gatewayReason } : {},
+    ...learner.conflictKeys ? { settings_conflict_keys: learner.conflictKeys } : {},
     ...learner.claudeCodeSource ? { claude_code_source: learner.claudeCodeSource } : {},
     ...learner.claudeCodeVersion ? { claude_code_version: learner.claudeCodeVersion } : {},
     ...learner.model ? { learner_model: learner.model } : {}
@@ -59799,255 +59881,1036 @@ var init_review = __esm(() => {
   import_picocolors25 = __toESM(require_picocolors(), 1);
 });
 
-// src/version/skill-update-check.ts
-import { existsSync as existsSync19, mkdirSync as mkdirSync11, readFileSync as readFileSync19, writeFileSync as writeFileSync12 } from "node:fs";
-import { join as join22 } from "node:path";
-function getCachePath2() {
-  return join22(getConfigDir(), CACHE_FILENAME3);
+// src/generated/skills.ts
+var BUNDLED_SKILLS;
+var init_skills = __esm(() => {
+  BUNDLED_SKILLS = [
+    {
+      name: "dosu",
+      files: [
+        {
+          path: "SKILL.md",
+          content: "---\nname: dosu\ndescription: 'Use the Dosu CLI to authenticate and configure coding agents; manage Libraries, Agents, sources, Monitor, documents, reviews, threads, topics, members, integrations, and deployments; query knowledge; or audit a repository for Dosu-generated docs. Use for Dosu platform work that should be done from a terminal instead of the web app.'\n---\n\n# Use the Dosu CLI\n\nOperate Dosu through `dosu`. Prefer structured output and let the CLI and App validate product rules.\n\n## Start correctly\n\n1. Run `dosu --version`. Do not probe installation with unrelated package-manager commands.\n2. If it is unavailable and Node is present, try `npx -y @dosu/cli --version` and use `npx -y @dosu/cli` as the command prefix for this session. Otherwise ask before installing anything.\n3. Run `dosu --help` or the relevant nested `--help` before using a command not covered by [the command reference](references/commands.md).\n4. Pass `--json` whenever that leaf command exposes it. Parse the result; do not scrape the human table.\n\n## Satisfy the right prerequisite\n\n- `dosu login` supplies the JWT used by tRPC-backed commands.\n- `dosu setup` selects an organization, Library context, and MCP deployment, creates an API key, and can configure an agent tool.\n- `dosu ask` needs an API key. `docs generate`, `docs auto-tag`, and `docs publish` need both JWT login and the API key. Other platform commands generally need JWT login; commands scoped to an organization or current Library also need the corresponding setup selection.\n- For coding-agent setup, follow the nonblocking `dosu setup --agent --tool <id>` workflow in [workflows.md](references/workflows.md). Relay its URL and execute its returned `resume_command`; never invent ticket commands.\n\n## Use current product terms\n\n- **Organization** is the account and permission boundary.\n- **Library** is the knowledge container shown in the App. Older APIs may call it a `space`; do not present that internal name to users.\n- **Data source** is an organization-level connection such as a repository, Slack channel, or Notion workspace. A Library can use already-connected sources.\n- **Agent** is a configurable GitHub, GitLab, Slack, or Teams deployment serving exactly one Library.\n- **Monitor** is per Library and source. It supports GitHub, GitLab, and Azure DevOps sources.\n- `dosu deployments` manages selectable **MCP deployments**. Do not use it as an Agent CRUD command.\n\n## Route by intent\n\n| Intent | Route |\n|---|---|\n| Set up Dosu end-to-end (\"set up dosu\", new Library from scratch) | Read the guided onboarding flow in [workflows.md](references/workflows.md) first; it is checkpoint-driven — ask, wait, then act |\n| Create or configure a Library | `dosu libraries ...` |\n| Attach existing organization sources | `dosu sources list` → `dosu libraries sources attach` |\n| Create or configure an Agent | `dosu agents ...` |\n| Ask for a synthesized answer | `dosu ask` |\n| Find source documents | `dosu knowledge search`, then `dosu docs get` |\n| Create, import, or publish docs | `dosu docs ...` |\n| Review a pending doc change or draft reply | Read [review-workflow.md](references/review-workflow.md) first |\n| Inspect conversations | `dosu threads ...` |\n| Browse managed topics | `dosu topics ...` |\n| Audit agent docs, README, architecture, or dependencies | Read [audit.md](references/audit.md) first |\n\nUse [commands.md](references/commands.md) as the sole detailed command and flag reference. Use [workflows.md](references/workflows.md) only for multi-command composition.\n\n## Apply Library and Agent semantics\n\n- To assemble a Library, list organization sources, create the Library, attach the chosen source IDs, then verify with `libraries info` and `libraries sources list`. The CLI cannot establish a brand-new OAuth connection.\n- `libraries sources config` resolves the provider on the App side. Read the command reference before choosing provider-specific options.\n- When creating a Library with a GitHub repository, or newly attaching one to an existing Library, treat Monitor as part of that setup unless the user opts out. Enable it with the whole-repository and `emoji` defaults, verify it, and explain that Monitor reviews pull requests to keep the Library's knowledge up to date. Follow [the Library workflow](references/workflows.md); do not ask the user to choose defaults.\n- Create an Agent from an existing source ID and let the App choose its defaults; do not synthesize config in shell commands. Each data source can back at most one Agent: a `CONFLICT` (409) from `agents create` means the source already has one — offer a different source or an authorized `agents move` instead of retrying.\n- Read Agent config before changing one existing leaf. Values are JSON. If a concurrent write returns `CONFLICT`, read again, re-evaluate the requested change, and retry only if it is still correct.\n- Moving an Agent replaces its Library. Verify the returned `space_id`; do not infer migration behavior for historical data from the move receipt.\n\n## Respect write boundaries\n\n- Treat an explicit, unambiguous user request for the exact mutation as authorization. Otherwise show the intended change and wait for confirmation.\n- For commands exposing `--confirm`, omit it first when a preview is useful; `{ \"confirmRequired\": true, \"applied\": false }` means nothing changed. Pass `--confirm` only after authorization.\n- Never batch-approve or batch-reject review items. Diff one item, explain it, and decide only the ID the user authorized.\n- Before deleting a Library, Agent, source, or document, state the exact target and impact. Before detaching a source, read and state the impact documented in the command reference. Some older delete commands do not enforce `--confirm`; the absence of a CLI prompt is not user approval.\n- Before attaching a source to a public Library, warn that its content becomes available to everyone who can access that Library.\n- OAuth connection and billing remain web-only. Report the boundary instead of claiming success.\n\n## Handle failures literally\n\n- `Not logged in` or an unrecoverable expired session: run `dosu login` (agent setup may instead return a ticket flow).\n- Missing organization, Library, deployment, or API-key context: run the appropriate `dosu setup` flow.\n- `confirmRequired`: no write occurred.\n- `CONFLICT` on config: reread before retrying.\n- A tRPC or backend error is a failed operation. Surface the code/path/status and do not imply the requested state exists.\n\n## References\n\n- [commands.md](references/commands.md): authoritative CLI syntax, choices, defaults, conflicts, and prerequisites\n- [workflows.md](references/workflows.md): reusable multi-command flows\n- [review-workflow.md](references/review-workflow.md): review safety and context\n- [audit.md](references/audit.md): repository audit procedure\n- [audit-findings-schema.md](references/audit-findings-schema.md): `.dosu/audit.json` contract\n",
+          executable: false
+        },
+        {
+          path: "references/audit-findings-schema.md",
+          content: `# \`.dosu/audit.json\` — audit findings schema
+
+The codebase audit (see [audit.md](audit.md)) writes its result to \`.dosu/audit.json\` at the
+repo root. This file is the contract between the audit you run in the coding agent and the
+\`dosu audit\` CLI command, which reads it, asks the user which docs to generate, and kicks off
+generation on Dosu cloud.
+
+Write valid JSON matching this shape exactly. Do not add fields the CLI doesn't expect.
+
+\`\`\`json
+{
+  "version": 1,
+  "generated_at": "2026-06-24T12:00:00Z",
+  "repo": {
+    "remote": "git@github.com:org/repo.git",
+    "slug": "org/repo"
+  },
+  "items": [
+    {
+      "task": "generate-agents-md",
+      "type": "agents",
+      "file": "AGENTS.md",
+      "status": "missing",
+      "action": "create",
+      "can_help": true,
+      "confidence": "high",
+      "rationale": "No AGENTS.md found; the repo has a clear src/ layout, a documented test command, and commit conventions worth capturing for agents.",
+      "evidence": ["package.json", "src/cli/cli.ts", "CONTRIBUTING.md"]
+    }
+  ]
+}
+\`\`\`
+
+## Top-level fields
+
+| Field | Type | Notes |
+|---|---|---|
+| \`version\` | number | Always \`1\`. The CLI rejects other versions. |
+| \`generated_at\` | string | ISO 8601 timestamp of when the audit ran. |
+| \`repo.remote\` | string | The \`git remote origin\` URL, verbatim. |
+| \`repo.slug\` | string | \`owner/name\` parsed from the remote (e.g. \`dosu-ai/dosu-cli\`). |
+| \`items\` | array | One entry per doc type you assessed. Include an entry for every type you looked at, even when \`can_help\` is \`false\` — the CLI uses these to explain what it skipped. |
+
+## Item fields
+
+| Field | Type | Allowed values | Notes |
+|---|---|---|---|
+| \`task\` | string | \`generate-agents-md\`, \`refresh-readme\`, \`generate-architecture-md\`, \`generate-deps-md\` | The backend capability id this item maps to. Must be one of these exact strings. |
+| \`type\` | string | \`agents\`, \`readme\`, \`architecture\`, \`deps\` | Short doc-type key. |
+| \`file\` | string | — | The target filename in the repo (e.g. \`AGENTS.md\`, \`README.md\`, \`architecture.md\`, \`deps.md\`). Use the casing already present in the repo when updating an existing file. |
+| \`status\` | string | \`missing\`, \`outdated\`, \`present_ok\` | What you found in the working tree. |
+| \`action\` | string | \`create\`, \`update\`, \`skip\` | What Dosu should do. \`create\` when \`missing\`; \`update\` when \`outdated\`; \`skip\` when \`present_ok\` (or when not enough info). |
+| \`can_help\` | boolean | — | Whether Dosu should offer this. \`false\` ⇒ the CLI shows it as not recommended (or omits it). |
+| \`confidence\` | string | \`high\`, \`medium\`, \`low\` | Your confidence in the recommendation. |
+| \`rationale\` | string | — | One or two sentences explaining the recommendation, citing what you saw. This is passed to Dosu cloud as generation guidance, so make it specific. |
+| \`evidence\` | string[] | — | Repo-relative paths (and optionally \`path:line\`) that justify the finding. |
+
+## Mapping of \`task\` ↔ \`type\` ↔ \`file\`
+
+| \`task\` | \`type\` | typical \`file\` |
+|---|---|---|
+| \`generate-agents-md\` | \`agents\` | \`AGENTS.md\` |
+| \`refresh-readme\` | \`readme\` | \`README.md\` |
+| \`generate-architecture-md\` | \`architecture\` | \`architecture.md\` |
+| \`generate-deps-md\` | \`deps\` | \`deps.md\` |
+`,
+          executable: false
+        },
+        {
+          path: "references/audit.md",
+          content: `# Dosu codebase audit
+
+This is the full procedure for the **codebase audit** referenced from [../SKILL.md](../SKILL.md).
+The goal: inspect the current repository and decide, with evidence, whether Dosu can help the
+user by creating or refreshing four docs. Write the result to \`.dosu/audit.json\`
+(see [audit-findings-schema.md](audit-findings-schema.md)), then tell the user to run
+\`dosu audit\` so the Dosu CLI can ask them which docs to generate and open a PR.
+
+You (the coding agent) only do the **triage** here — you have the live working tree, so you can
+tell what exists, what's stale, and whether there's enough signal. You do **not** write the docs
+themselves; Dosu cloud generates them and opens the PR after the user picks via \`dosu audit\`.
+
+## When to run this
+
+Run when the user asks Dosu to audit the repo, asks "what can Dosu do for this codebase?", or
+asks to set up / refresh their agent docs, README, architecture doc, or dependency doc.
+
+## The four doc types
+
+| \`task\` | File | When Dosu can help |
+|---|---|---|
+| \`generate-agents-md\` | \`AGENTS.md\` | Missing, or present but stale/thin given the repo's structure, commands, and conventions. |
+| \`refresh-readme\` | \`README.md\` | Present but **outdated** — references removed scripts/deps, missing setup steps, or describes features that no longer match the code. |
+| \`generate-architecture-md\` | \`architecture.md\` | **Missing AND** there is genuinely enough structure to describe (multiple modules/services, clear layering). Do not recommend for a tiny or single-file repo. |
+| \`generate-deps-md\` | \`deps.md\` | Missing, or present but out of sync with the actual dependency manifests. |
+
+## Rules
+
+- **Be evidence-based.** Prefer direct repo evidence over inference. Cite concrete \`evidence\`:
+  file paths (and \`path:line\` where useful), manifest entries, config keys.
+- **Gate \`architecture.md\` strictly.** Only set \`can_help: true\` for \`generate-architecture-md\`
+  when the repo is large/structured enough that a useful architecture doc can be written. When in
+  doubt, set \`can_help: false\`, \`action: "skip"\`, and a \`rationale\` saying why.
+- **Distinguish status from action.** \`status\` is what you found (\`missing\` / \`outdated\` /
+  \`present_ok\`); \`action\` is what Dosu should do (\`create\` / \`update\` / \`skip\`).
+- **Include every type you assessed**, even when \`can_help\` is \`false\`, so the CLI can explain
+  what it skipped and why.
+- **Make \`rationale\` specific** — it is forwarded to Dosu cloud as generation guidance. "README's
+  install section references a \`make bootstrap\` target that no longer exists" beats "README looks
+  old."
+- **Don't write the docs.** Producing the actual files is Dosu cloud's job, triggered by the user
+  through \`dosu audit\`.
+
+## Use Dosu MCP for org knowledge
+
+Before finalizing recommendations, use the Dosu MCP tools to pull organization knowledge that
+should inform the docs (architecture decisions, naming, conventions, prior docs). The exposed
+tool set depends on the connection — always use what's actually listed:
+
+1. Read first: call \`read_knowledge\` when listed (or \`init_knowledge\` on older connections) to
+   get task-relevant context from the knowledge base.
+2. Go deeper with whichever search/ask tools the server exposes — check whether the org already
+   documents the architecture, dependencies, or agent conventions elsewhere. If it does, factor
+   that into \`status\`/\`rationale\` (e.g. an existing architecture doc in Dosu may mean a repo
+   \`architecture.md\` should mirror it).
+
+If no Dosu deployment is connected (only public-library tools are available), skip the MCP step
+and rely on repo evidence alone; note in the \`rationale\` that org knowledge wasn't consulted.
+
+## Procedure
+
+1. **Identify the repo.** Get the remote and slug:
+   \`\`\`bash
+   git config --get remote.origin.url
+   \`\`\`
+   Parse \`owner/name\` from it for \`repo.slug\`. If there is no GitHub remote, tell the user the
+   audit needs a GitHub repo connected to Dosu and stop.
+
+2. **Inspect the working tree** for each doc type. Useful starting points:
+   \`\`\`bash
+   ls -a
+   # existing docs (any casing)
+   ls AGENTS.md README.md architecture.md ARCHITECTURE.md deps.md DEPS.md docs/ 2>/dev/null
+   # dependency manifests
+   ls package.json pyproject.toml requirements*.txt go.mod Cargo.toml Gemfile pom.xml build.gradle 2>/dev/null
+   \`\`\`
+   - **AGENTS.md** — does it exist? If yes, is it consistent with the current build/test commands,
+     directory layout, and contribution conventions? Read it and compare against \`package.json\`
+     scripts / Makefile / CI config.
+   - **README.md** — read it. Are the setup/build/run steps still accurate? Do referenced scripts,
+     commands, env vars, and features still exist in the code? Mark \`outdated\` only with evidence.
+   - **architecture.md** — does it exist? Is the repo structured enough to warrant one? Look at the
+     top-level layout, number of modules/services, and whether there's a clear separation worth
+     documenting.
+   - **deps.md** — does it exist? If yes, does it match the actual manifests/lockfiles? If missing,
+     are there real dependencies worth documenting?
+
+3. **Consult Dosu MCP** (see above) to enrich and cross-check.
+
+4. **Write \`.dosu/audit.json\`** following [audit-findings-schema.md](audit-findings-schema.md).
+   Create the \`.dosu/\` directory if needed. Write one \`items\` entry per type you assessed.
+
+5. **Tell the user to run the CLI.** End with a short message, e.g.:
+
+   > Audit complete — I wrote \`.dosu/audit.json\`. Run \`dosu audit\` to choose which docs Dosu
+   > should generate; it will open a PR with the ones you pick.
+
+   Do not attempt to generate or commit the docs yourself.
+
+## Example \`.dosu/audit.json\`
+
+\`\`\`json
+{
+  "version": 1,
+  "generated_at": "2026-06-24T12:00:00Z",
+  "repo": { "remote": "git@github.com:acme/widget.git", "slug": "acme/widget" },
+  "items": [
+    {
+      "task": "generate-agents-md", "type": "agents", "file": "AGENTS.md",
+      "status": "missing", "action": "create", "can_help": true, "confidence": "high",
+      "rationale": "No AGENTS.md; repo has documented \`pnpm test\`/\`pnpm build\` scripts and a clear packages/ layout worth capturing for agents.",
+      "evidence": ["package.json", "packages/", "CONTRIBUTING.md"]
+    },
+    {
+      "task": "refresh-readme", "type": "readme", "file": "README.md",
+      "status": "outdated", "action": "update", "can_help": true, "confidence": "medium",
+      "rationale": "README's Getting Started references a \`make bootstrap\` target that no longer exists; setup now uses \`pnpm install\`.",
+      "evidence": ["README.md:24", "Makefile", "package.json"]
+    },
+    {
+      "task": "generate-architecture-md", "type": "architecture", "file": "architecture.md",
+      "status": "missing", "action": "skip", "can_help": false, "confidence": "high",
+      "rationale": "Single-package repo with one entry point; not enough structure to justify a separate architecture doc yet.",
+      "evidence": ["src/index.ts"]
+    },
+    {
+      "task": "generate-deps-md", "type": "deps", "file": "deps.md",
+      "status": "missing", "action": "create", "can_help": true, "confidence": "medium",
+      "rationale": "No deps doc; package.json has ~30 runtime deps across HTTP, DB, and queue concerns worth summarizing.",
+      "evidence": ["package.json", "pnpm-lock.yaml"]
+    }
+  ]
 }
-function readSkillCache() {
+\`\`\`
+`,
+          executable: false
+        },
+        {
+          path: "references/commands.md",
+          content: `# Dosu CLI command reference
+
+This file is the detailed source for the current command surface. Optional flags are in brackets. Only commands showing \`--json\` support structured JSON. Run the nested \`--help\` if the installed CLI differs.
+
+## Authentication and setup
+
+\`\`\`text
+dosu login [--request | --check <ticket>] [--json] [--no-browser]
+dosu logout
+dosu status [--json]
+dosu setup [--deployment <id>] [--mode <oss|cloud>] [--agent --tool <id>]
+           [--login-ticket <ticket>]
+\`\`\`
+
+- \`--request\` and \`--check\` are mutually exclusive login modes.
+- \`setup --agent\` requires \`--tool\`, emits NDJSON, and exits instead of waiting for a browser callback.
+
+## Libraries
+
+\`\`\`text
+dosu libraries list [--json]
+dosu libraries info <library-id> [--json]
+dosu libraries create --name <name> [--visibility public|internal|private] [--json]
+dosu libraries update <library-id> [--name <name>]
+                      [--visibility public|internal|private] [--confirm] [--json]
+dosu libraries delete <library-id> [--confirm] [--json]
+\`\`\`
+
+- Library and source IDs in this section must be UUID v4. Names are nonempty and at most 50 characters. Omitted visibility uses the App default, \`internal\`. \`update\` requires at least one changed field.
+- \`update\` and \`delete\` prompt only in an interactive non-JSON terminal; agents pass \`--confirm\` after authorization.
+- The last Library in an organization cannot be deleted. A successful delete hides it immediately; child-data cleanup continues asynchronously.
+
+### Library documentation config
+
+\`\`\`text
+dosu libraries config get <library-id> [--json]
+dosu libraries config set <library-id> <setting> --value <json> [--confirm] [--json]
+\`\`\`
+
+Settings and values:
+
+| Setting | JSON value |
+|---|---|
+| \`commit_to_trigger_pr\` | boolean |
+| \`default_accept_review\` | boolean |
+| \`default_save_publish\` | boolean |
+| \`review_timeout_days\` | \`7\`, \`14\`, \`30\`, or \`90\` |
+
+\`set\` reads the current version immediately before writing and sends that version with the mutation.
+
+### Library sources
+
+\`\`\`text
+dosu libraries sources list <library-id> [--json]
+dosu libraries sources attach <library-id> <source-id...> [--confirm] [--json]
+dosu libraries sources detach <library-id> <source-id...> [--confirm] [--json]
+
+dosu libraries sources config get <library-id> <source-id> [--json]
+dosu libraries sources config update <library-id> <source-id>
+    [--issues on|off] [--pull-requests on|off] [--discussions on|off] [--wiki on|off]
+    [--include-patterns <json-string-array>] [--exclude-patterns <json-string-array>]
+    [--confirm] [--json]
+\`\`\`
+
+- \`attach\` and \`detach\` require one or more UUID source IDs. Repeated IDs are deduplicated.
+- Detaching archives pages that source synced into this Library; copies in other Libraries are unaffected.
+- Source config requires at least one option. GitHub accepts every option above; GitLab accepts only include/exclude patterns. The App resolves the provider.
+- Pattern options replace the list. Use \`[]\` to clear it.
+
+### Library Monitor
+
+\`\`\`text
+dosu libraries monitors list <library-id> [--json]
+dosu libraries monitors update <library-id> <source-id>
+    [--enabled on|off] [--paths <json-string-array>]
+    [--up-to-date-behavior emoji|comment|silent] [--confirm] [--json]
+\`\`\`
+
+\`update\` requires at least one option. Monitor supports GitHub, GitLab, and Azure DevOps. It performs first-time setup for an attached supported source, reusing existing deployment infrastructure when available. When no Monitor row exists, omitted \`--enabled\`, paths, and behavior default to \`true\`, \`[]\`, and \`emoji\`.
+
+## Agents
+
+\`\`\`text
+dosu agents list [--json]
+dosu agents info <agent-id> [--json]
+dosu agents create --library <library-id> --source <source-id>
+                   [--name <name>] [--guidelines <text>] [--json]
+dosu agents update <agent-id> [--name <name>] [--enabled on|off]
+                   [--guidelines <text> | --clear-guidelines] [--confirm] [--json]
+dosu agents delete <agent-id> [--confirm] [--json]
+dosu agents move <agent-id> --library <library-id> [--confirm] [--json]
+
+dosu agents config get <agent-id> [--json]
+dosu agents config set <agent-id> <existing.leaf.path>
+                       --value <json> [--confirm] [--json]
+\`\`\`
+
+- Agent, Library, and source IDs in this section must be UUID v4. \`create\` accepts an existing GitHub, GitLab, Slack, or Teams source. The App supplies provider defaults, enables the Agent, and starts Mention-only reply behavior. Omitted name uses the source name.
+- Agent names are at most 80 characters; guidelines are at most 20,000 characters.
+- \`update\` requires at least one option. \`--guidelines\` conflicts with \`--clear-guidelines\`.
+- Config \`set\` changes one existing non-object leaf. Read the config first to select a valid path and value type.
+- \`move\` replaces the Agent's Library and returns the updated Agent. It does not report any historical-data migration.
+
+## Knowledge and documents
+
+\`\`\`text
+dosu ask <question> [--session <id>] [--timeout <seconds>] [--json]
+dosu knowledge search <query> [--limit <positive-int>] [--json]   # default 10
+dosu knowledge list [--json]
+
+dosu docs list [--search <query>] [--topic <id>] [--limit <positive-int>] [--json]
+dosu docs get <id> [--revision <positive-int>] [--json]
+dosu docs create --title <title> [--body <markdown> | --body-file <path>] [--json]
+dosu docs update <id> [--title <title>] [--body <markdown> | --body-file <path>] [--json]
+dosu docs archive <id> [--json]
+dosu docs unarchive <id> [--json]
+dosu docs delete <id> [--json]
+dosu docs versions <id> [--json]
+dosu docs restore <id> --revision <positive-int> [--json]
+dosu docs generate --title <title> [--instructions <text>] [--json]
+dosu docs auto-tag <id> [--json]
+dosu docs import <platform> --files <comma-separated-ids> [--json]
+dosu docs import-status <task-id> [--json]
+dosu docs publish <id> --to <platform> [target flags] [--json]
+dosu docs sync-back <id> [--json]
+\`\`\`
+
+- Document list defaults to 20. \`create\` and \`update\` reject combining \`--body\` with \`--body-file\`; \`update\` requires at least one field.
+- Import platforms: \`github\`, \`gitlab\`, \`azure_devops\`, \`confluence\`, \`notion\`, \`coda\`.
+- Publish platforms: the same six. Target flags are \`--repo-id\`, \`--project-id\`, \`--parent-page-id\`, \`--doc-id\`, \`--directory\`, and \`--data-source-id\`; Azure DevOps requires \`--data-source-id\`. Other target validation may occur in the backend.
+- \`generate\`, \`auto-tag\`, import, publish, and sync operations may be asynchronous. Use the returned task/status identifiers rather than assuming completion.
+
+## Review
+
+Read [review-workflow.md](review-workflow.md) before mutating a review item.
+
+\`\`\`text
+dosu review list [--json]
+dosu review diff <id> [--json]
+dosu review edit <id> [--title <title>] [--body <markdown> | --body-file <path>] [--json]
+dosu review context <thread-id> [--json]
+dosu review approve <id> [--confirm] [--json]
+dosu review reject <id> [--confirm] [--json]
+dosu review revert <id> [--json]
+\`\`\`
+
+\`edit\` requires at least one field. \`approve\` and \`reject\` do not write without interactive confirmation or \`--confirm\`.
+
+## Sources, integrations, members, and organization
+
+\`\`\`text
+dosu sources list [--json]
+dosu sources info <id> [--json]
+dosu sources sync <id> [--json]
+dosu sources update <id> [--name <name>] [--description <text>] [--json]
+dosu sources delete <id> [--json]
+dosu sources connect [github] [--json] [--timeout <seconds>] [--no-open]
+dosu sources create github --repo <owner/name> [--library <id>] [--confirm] [--json]
+
+dosu integrations list [--json]
+dosu integrations status <platform> [--json]
+dosu integrations slack-channels [--json]
+dosu integrations slack-join <channel-id> [--json]
+dosu integrations github-collaborators <positive-repository-id> [--json]
+
+dosu members invite <email> [--role admin|member] [--json]       # default member
+dosu org info [--json]
+\`\`\`
+
+- \`sources update\` requires \`--name\` or \`--description\`.
+- \`sources connect\` currently supports only \`github\`: it prints an install URL for the user to
+  open, then waits for the GitHub App install to complete (default 600s). With \`--json\` it emits
+  NDJSON events — \`awaiting_install\` (give the \`url\` to the user), then \`installed\` with
+  \`new_repositories\`, or \`timeout\` (exit 1). Other providers exit 1 with a web-app handoff URL.
+- \`sources create\` wires an installed GitHub repo into a Library: it creates (or reuses) the
+  repo's data source + deployment, attaches it, and verifies the first sync. \`--library\` defaults
+  to the active Library. A repo not listed means the GitHub App lacks access — run
+  \`sources connect github\` first. Forks can't be connected.
+- Integration status choices: \`github\`, \`gitlab\`, \`azure_devops\`, \`slack\`, \`confluence\`, \`notion\`, \`coda\`, \`teams\`. GitHub, Slack, and Teams currently return \`connected: null\` because CLI status probing is unavailable for them.
+- The CLI has no member list/remove/request commands; \`members invite\` is its only member operation.
+
+## Threads, Topics, suggestions, and analytics
+
+\`\`\`text
+dosu threads list [--status pending|resolved|archived] [--search <query>]
+                  [--limit <1..100>] [--json]                    # default 20
+dosu threads get <id> [--limit <-1|positive-int>] [--json]       # default 20
+dosu threads archive <id> [--json]
+
+dosu topics list [--json]
+dosu topics pages <topic-id> [--search <query>] [--limit <positive-int>] [--json]
+
+dosu suggest list [--json]
+dosu suggest generate [--json]
+dosu suggest reject <id> [--json]
+
+dosu analytics [--days <positive-int>] [--json]                  # default 30
+\`\`\`
+
+Topics are read-only. The CLI has no \`tags\` command and no suggestion-accept command.
+
+## MCP deployments and local utilities
+
+\`\`\`text
+dosu deployments list [--json]
+dosu deployments info [--json]
+dosu deployments switch <id> [--json]
+
+dosu mcp list
+dosu mcp add <agent> [--global] [--show-secret]
+dosu skill install | remove | update
+dosu telemetry status [--json]
+dosu telemetry enable | disable | reset
+dosu insights
+dosu upgrade
+dosu logs [--tail [n]] [--clear]
+\`\`\`
+
+\`deployments\` selects the MCP deployment stored in local config; it is distinct from \`agents\`. \`insights\` opens an interactive visual report. \`logs --clear\` deletes the CLI log file.
+
+## Codebase audit
+
+\`\`\`text
+dosu audit [--findings <path>] [--data-source-id <id>]
+           [--tasks <comma-separated-task-ids> | --yes] [--list-tasks] [--json]
+\`\`\`
+
+The coding agent writes the findings; Dosu generates the selected docs. Follow [audit.md](audit.md) and [audit-findings-schema.md](audit-findings-schema.md).
+`,
+          executable: false
+        },
+        {
+          path: "references/review-workflow.md",
+          content: `# Review workflow
+
+How to work Dosu's review queue from the CLI: triage pending items, read the
+diff, optionally edit, and apply a decision — safely.
+
+The queue holds **document versions** (AI-generated, user-edited, synced from
+source, or API-created) and **draft messages**, all surfaced through the same
+\`dosu review\` commands. Items are keyed on a single \`page-version-id\` so
+\`list\` → \`diff\` → \`edit\` → \`approve\`/\`reject\` all share one ID.
+
+> \`list\` returns only the most recent pending items (server-capped, currently
+> 50) and does not flag truncation. If the queue is large, don't assume \`list\`
+> shows everything.
+
+## Scope tool access for a review session
+
+Approving and rejecting are destructive and outward-facing. When you spin up an
+agent session dedicated to reviewing, scope it to just the review commands:
+
+\`\`\`yaml
+allowed-tools: Bash(dosu review:*)
+\`\`\`
+
+This lets the agent triage, diff, and edit, but keeps it from running unrelated
+CLI commands during a review pass.
+
+## The flow
+
+\`\`\`bash
+# 1. Triage — what's pending? Columns: ID, Kind, Title, Source, Status, Created.
+dosu review list --json
+
+# 2. Inspect — read the exact change before deciding anything.
+dosu review diff <page-version-id> --json
+
+# 3. (optional) Edit in place instead of rejecting a near-miss.
+dosu review edit <page-version-id> --body-file ./revised.md   # or --body / --title
+
+# 4. Decide — only on the item the user named, only after they OK it.
+dosu review approve <page-version-id> --confirm --json
+dosu review reject  <page-version-id> --confirm --json
+
+# Undo a decision — back to pending.
+dosu review revert <page-version-id> --json
+\`\`\`
+
+### \`--confirm\` is mandatory for agents
+
+\`approve\` and \`reject\` only prompt interactively in a TTY *without* \`--json\`.
+The skill always passes \`--json\`, which suppresses both the diff preview and
+the prompt — so without \`--confirm\` the command changes nothing and returns
+\`{ "applied": false, "confirmRequired": true }\`. Run \`dosu review diff <id>\` to
+see the change, then pass \`--confirm\` to apply — only after the user has
+approved that specific item.
+
+## Reading the \`Source\` column
+
+\`Source\` is the humanized \`origin\` field:
+
+| \`origin\` | Source | Meaning |
+|---|---|---|
+| \`manual_update\` | User created / User updated | A teammate authored or edited the doc |
+| \`llm_generated\` | AI generated | Dosu drafted the change |
+| \`sync_upstream\` | Synced from source | Came in from a connected source (Notion/Confluence/GitHub) |
+| \`api_update\` | Created via API | Pushed in programmatically |
+
+## Feeding PR / thread context
+
+A review often originates from a conversation thread (a GitHub issue, a Slack
+message, a sync-back PR). Pull that context before deciding:
+
+\`\`\`bash
+dosu review context <thread-id> --json
+\`\`\`
+
+It returns the review \`type\`, the review/published page IDs, and — when the
+change round-trips to an external system — a **Sync PR URL**. Use it to:
+
+- show the user where the change came from and where approval will land, and
+- read the originating discussion so the decision matches intent.
+
+## Safety rules
+
+- **Explicit item only.** Decide on the \`id\` the user named. "Review my queue"
+  → run \`list\` and show it; never decide on their behalf.
+- **Diff before deciding.** Always \`diff\` and surface the change first.
+- **Never batch-accept.** No loop over \`list\` that approves everything. One
+  item, one confirmation.
+- **Extra care for sync/PR origins.** \`Synced from source\` items and anything
+  with a Sync PR URL push back to an upstream system on approval. Call it out
+  and get explicit sign-off.
+`,
+          executable: false
+        },
+        {
+          path: "references/workflows.md",
+          content: `# Dosu CLI workflows
+
+Use these patterns to compose commands. Replace placeholders with IDs read from JSON output; never guess them. See [commands.md](commands.md) for exact flags and choices.
+
+## Configure Dosu for a coding agent
+
+\`\`\`bash
+dosu setup --agent --tool <tool-id>
+\`\`\`
+
+Read every NDJSON event:
+
+1. On \`need_user_action\`, give the returned URL to the user and stop.
+2. After the user confirms sign-in, run the returned \`resume_command\` verbatim.
+3. On \`pending\`, wait for the user and repeat that command.
+4. On \`multiple_deployments\`, list MCP deployments, let the user choose, and retry with \`--deployment <id>\`.
+5. Treat \`done\` as setup completion, then verify with \`dosu status --json\`.
+
+## Onboard from scratch (guided)
+
+Use this flow when the user asks to "set up Dosu", "create a library and set it up", or any
+end-to-end onboarding. It is a conversation, not a script: never invent names, never auto-pick
+sources, and stop at every checkpoint below until the user answers. Run each mutation only after
+its checkpoint. One step per turn is better than one turn with every step.
+
+**Step 0 — Discover (read-only, no confirmation needed).**
+
+\`\`\`bash
+dosu status --json
+dosu sources list --json
+dosu libraries list --json
+\`\`\`
+
+If not configured, run the "Configure Dosu for a coding agent" flow first.
+
+**Checkpoint 1 — Scope.** Present a short summary of the connected sources (name + provider, not
+raw JSON) and any existing Libraries, then ask and wait:
+
+1. Which source(s) should the new Library use? Existing ones, a new one, or both.
+2. What should the Library be called? Suggest a name derived from the chosen sources, but let the
+   user decide.
+3. Visibility: default \`internal\`; mention \`private\`/\`public\` only if relevant (warn about the
+   public-Library boundary from [SKILL.md](../SKILL.md)).
+4. For each chosen GitHub repository: Monitor will be enabled with defaults (whole repository,
+   \`emoji\`) unless they opt out.
+
+**Step 0.5 — Connect a new source (only when the user asked for one).** Ask which provider. For
+GitHub, run the CLI bridge — do not send the user hunting through the App:
+
+\`\`\`bash
+dosu sources connect github --json
+\`\`\`
+
+Give the user the \`url\` from the \`awaiting_install\` event and wait; the command completes on its
+own when the install finishes and reports \`new_repositories\`. For any other provider (Slack, web
+docs, Notion, Coda, Confluence, ...) the connect flow is web-only: give the user the App URL the
+command prints, wait for them to confirm, then re-run \`dosu sources list --json\` to pick up the
+new source.
+
+**Step 1 — Create and attach (after the user answers).**
+
+\`\`\`bash
+dosu libraries create --name "<user-approved name>" --json
+dosu libraries sources attach <library-id> <existing-source-ids...> --confirm --json
+dosu sources create github --repo <owner/name> --library <library-id> --confirm --json
+dosu libraries monitors update <library-id> <repository-source-id> --enabled on --confirm --json
+\`\`\`
+
+Use \`libraries sources attach\` for sources that already exist; use \`sources create\` for a GitHub
+repo that became visible via \`sources connect\` but has no data source yet (it creates, attaches,
+and verifies the first sync in one receipt).
+
+Report each receipt in one line as it lands (Library ID, sources attached, Monitor state).
+
+**Checkpoint 2 — Agent (optional).** Ask whether the user wants an Agent (GitHub/GitLab/Slack/Teams
+responder) on one of the attached sources. Only on yes:
+
+\`\`\`bash
+dosu agents create --library <library-id> --source <source-id> --name "<user-approved name>" --json
+\`\`\`
+
+A \`CONFLICT\` (409) means that data source already has an Agent — one Agent per source. Report which
+source conflicted and offer the alternatives: pick a different source, or (only with explicit
+authorization) \`dosu agents move\` the existing Agent, which removes it from its current Library.
+
+**Step 2 — Verify and hand off.**
+
+\`\`\`bash
+dosu libraries info <library-id> --json
+dosu libraries sources list <library-id> --json
+dosu libraries monitors list <library-id> --json
+\`\`\`
+
+Summarize the final state. Creating an MCP deployment for the new Library is not available in the
+CLI; if the user wants their MCP/CLI target pointed at this Library, send them to the App to create
+the MCP deployment, then run \`dosu deployments switch\`.
+
+## Create a Library from existing sources
+
+This works with any number or mix of organization sources.
+
+\`\`\`bash
+# Discover connected sources and select exact IDs by provider/name.
+dosu sources list --json
+
+# Create the Library; capture its id. Omitted visibility defaults to \`internal\`;
+# pass --visibility public|internal|private only when the user asks for it.
+dosu libraries create --name "Incident Response" --json
+
+# The user's explicit request authorizes these exact attachments.
+dosu libraries sources attach <library-id> <repository-source-id> <handbook-source-id> \\
+  --confirm --json
+
+# Enable the default for each newly attached GitHub repository unless the user opted out.
+dosu libraries monitors update <library-id> <repository-source-id> \\
+  --enabled on --confirm --json
+
+# Verify the final state, not just mutation receipts.
+dosu libraries info <library-id> --json
+dosu libraries sources list <library-id> --json
+dosu libraries monitors list <library-id> --json
+\`\`\`
+
+Apply the connection and public-Library safety boundaries from [SKILL.md](../SKILL.md) before attaching.
+
+## Change an existing Library safely
+
+\`\`\`bash
+dosu libraries list --json
+dosu libraries info <library-id> --json
+
+# Rename or change visibility only after the exact target/change is authorized.
+dosu libraries update <library-id> --name "Operations Handbook" --confirm --json
+
+# Read before changing one documentation setting.
+dosu libraries config get <library-id> --json
+dosu libraries config set <library-id> review_timeout_days --value 30 --confirm --json
+\`\`\`
+
+## Create and configure an Agent
+
+\`\`\`bash
+# Select a Library and an existing GitHub, GitLab, Slack, or Teams source.
+dosu libraries list --json
+dosu sources list --json
+
+dosu agents create --library <library-id> --source <source-id> \\
+  --name "Repository Helper" --json
+
+dosu agents info <agent-id> --json
+dosu agents config get <agent-id> --json
+
+# Change one leaf only after reading the current structure.
+dosu agents config set <agent-id> issues.auto_reply.review_required \\
+  --value true --confirm --json
+\`\`\`
+
+To move the Agent, confirm the destination and verify the returned \`space_id\`:
+
+\`\`\`bash
+dosu agents move <agent-id> --library <destination-library-id> --confirm --json
+\`\`\`
+
+## Configure a Library source and Monitor
+
+\`\`\`bash
+dosu libraries sources config get <library-id> <source-id> --json
+dosu libraries sources config update <library-id> <source-id> \\
+  --include-patterns '["docs/**","*.md"]' \\
+  --exclude-patterns '["archive/**"]' --confirm --json
+
+dosu libraries monitors list <library-id> --json
+dosu libraries monitors update <library-id> <source-id> \\
+  --enabled on --paths '["docs/**"]' \\
+  --up-to-date-behavior silent --confirm --json
+\`\`\`
+
+## Find information and inspect its source
+
+\`\`\`bash
+dosu ask "How is access control enforced?" --json
+dosu knowledge search "access control" --json
+dosu docs get <page-id> --json
+\`\`\`
+
+Use \`ask\` for a synthesized answer. Use \`knowledge search\` and \`docs get\` when the user wants the underlying documents.
+
+## Import external documents
+
+\`\`\`bash
+dosu sources list --json
+dosu docs import <platform> --files <comma-separated-ids> --json
+dosu docs import-status <task-id> --json
+\`\`\`
+
+Capture the returned task ID. Poll only when the user asked you to wait for completion.
+
+## Review one pending item
+
+\`\`\`bash
+dosu review list --json
+dosu review diff <item-id> --json
+dosu review approve <item-id> --confirm --json
+\`\`\`
+
+Use \`reject\` instead of \`approve\` only for the same explicitly authorized item. Follow [review-workflow.md](review-workflow.md) for edits, draft replies, upstream sync, and rollback.
+
+## Audit repository documentation
+
+Follow [audit.md](audit.md) to inspect the repository and write \`.dosu/audit.json\`, then invoke only the task IDs the user chooses:
+
+\`\`\`bash
+dosu audit --tasks <comma-separated-task-ids> --json
+\`\`\`
+
+The coding agent performs triage; Dosu cloud generates docs and opens the PR.
+`,
+          executable: false
+        }
+      ]
+    }
+  ];
+});
+
+// src/commands/skill.ts
+import {
+  cpSync,
+  existsSync as existsSync19,
+  lstatSync as lstatSync2,
+  mkdirSync as mkdirSync11,
+  readFileSync as readFileSync19,
+  rmSync as rmSync5,
+  symlinkSync,
+  writeFileSync as writeFileSync12
+} from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { dirname as dirname10, join as join22, relative as relative3 } from "node:path";
+function skillAgentIDsForProviders(providerIDs) {
+  return [
+    ...new Set(providerIDs.map((providerID) => SKILL_AGENT_BY_PROVIDER[providerID]).filter((agent) => Boolean(agent)))
+  ];
+}
+function isSkillAgentID(agent) {
+  return SUPPORTED_SKILL_AGENTS.includes(agent);
+}
+function universalSkillsDir() {
+  return join22(homedir8(), ".agents", "skills");
+}
+function linkedSkillsDir(agent) {
+  if (agent === "claude-code") {
+    const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR?.trim() || join22(homedir8(), ".claude");
+    return join22(claudeConfigDir, "skills");
+  }
+  if (agent === "windsurf")
+    return join22(homedir8(), ".codeium", "windsurf", "skills");
+  return null;
+}
+function skillInstallTargetForProvider(providerID) {
+  const agentID = SKILL_AGENT_BY_PROVIDER[providerID];
+  if (!agentID)
+    return null;
+  const linked = linkedSkillsDir(agentID);
+  if (linked)
+    return { path: join22(linked, SKILL_NAME), symlink: true };
+  return { path: join22(universalSkillsDir(), SKILL_NAME), symlink: false };
+}
+function installStatePath() {
+  return join22(getConfigDir(), INSTALL_STATE_FILENAME);
+}
+function readSkillInstallState() {
   try {
-    const path = getCachePath2();
+    const path = installStatePath();
     if (!existsSync19(path))
       return null;
     const data = JSON.parse(readFileSync19(path, "utf-8"));
-    if (typeof data.lastCheck === "number" && typeof data.latestSha === "string" && typeof data.installedSha === "string") {
-      return data;
+    if (typeof data?.version === "string" && Array.isArray(data.agents) && data.agents.every((agent) => typeof agent === "string") && typeof data.installedAt === "number") {
+      return { version: data.version, agents: data.agents, installedAt: data.installedAt };
     }
     return null;
   } catch {
     return null;
   }
 }
-function writeSkillCache(cache) {
+function writeSkillInstallState(state) {
   try {
     const dir = getConfigDir();
-    if (!existsSync19(dir)) {
+    if (!existsSync19(dir))
       mkdirSync11(dir, { recursive: true, mode: 448 });
-    }
-    writeFileSync12(getCachePath2(), JSON.stringify(cache), { mode: 384 });
-  } catch {}
-}
-function clearInstalledSha() {
-  const cache = readSkillCache();
-  if (cache)
-    writeSkillCache({ ...cache, installedSha: "" });
-}
-async function fetchLatestSha() {
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS2);
-  try {
-    const resp = await fetch(GITHUB_API_URL, {
-      signal: controller.signal,
-      headers: {
-        "User-Agent": `dosu-cli/${VERSION}`,
-        Accept: "application/vnd.github+json"
-      }
-    });
-    if (!resp.ok)
-      return null;
-    const data = await resp.json();
-    const sha = data.sha;
-    return typeof sha === "string" ? sha : null;
-  } catch {
-    return null;
-  } finally {
-    clearTimeout(timeout);
+    writeFileSync12(installStatePath(), JSON.stringify(state), { mode: 384 });
+  } catch (err) {
+    logger.debug("skill", `Could not record skill install state: ${err}`);
   }
 }
-function displayNotice() {
-  const msg = `
-${import_picocolors26.default.yellow("  Dosu skill update available")}
-` + `${import_picocolors26.default.dim('  Run "dosu skill update" to upgrade')}
-`;
-  console.error(msg);
+function clearSkillInstallState() {
+  rmSync5(installStatePath(), { force: true });
 }
-function checkForSkillUpdates() {
+function pruneLegacySkillLock() {
+  const lockPath = join22(homedir8(), ".agents", ".skill-lock.json");
   try {
-    const cache = readSkillCache();
-    if (cache?.installedSha && cache.latestSha && cache.latestSha !== cache.installedSha) {
-      displayNotice();
-    }
-    const isStale = !cache || Date.now() - cache.lastCheck > CHECK_INTERVAL_MS2;
-    if (isStale) {
-      fetchLatestSha().then((latest) => {
-        const fresh = readSkillCache();
-        writeSkillCache({
-          lastCheck: Date.now(),
-          latestSha: latest ?? fresh?.latestSha ?? "",
-          installedSha: fresh?.installedSha ?? ""
-        });
-        if (latest) {
-          logger.debug("skill-update-check", `Cached latest SHA: ${latest}`);
-        }
-      }).catch((err) => {
-        logger.error("skill-update-check", `Background fetch failed: ${err}`);
-      });
-    }
+    if (!existsSync19(lockPath))
+      return [];
+    const lock = JSON.parse(readFileSync19(lockPath, "utf-8"));
+    const skills = lock?.skills;
+    if (!skills || typeof skills !== "object")
+      return [];
+    const legacy = Object.entries(skills).filter(([, entry]) => entry?.source === LEGACY_SKILL_SOURCE).map(([name]) => name);
+    if (legacy.length === 0)
+      return [];
+    for (const name of legacy)
+      delete skills[name];
+    writeFileSync12(lockPath, `${JSON.stringify(lock, null, 2)}
+`);
+    logger.debug("skill", `Removed legacy lock entries: ${legacy.join(", ")}`);
+    return legacy;
   } catch (err) {
-    logger.error("skill-update-check", `Skill update check failed: ${err}`);
+    logger.debug("skill", `Could not read legacy skill lock: ${err}`);
+    return [];
   }
 }
-var import_picocolors26, CACHE_FILENAME3 = "skill-update-check.json", CHECK_INTERVAL_MS2, FETCH_TIMEOUT_MS2 = 5000, GITHUB_API_URL = "https://api.github.com/repos/dosu-ai/dosu-skill/commits/HEAD";
-var init_skill_update_check = __esm(() => {
-  init_config();
-  init_logger();
-  import_picocolors26 = __toESM(require_picocolors(), 1);
-  CHECK_INTERVAL_MS2 = 24 * 60 * 60 * 1000;
-});
-
-// src/commands/skill.ts
-import { exec as exec2, execSync as execSync2 } from "node:child_process";
-import { homedir as homedir8 } from "node:os";
-import { join as join23 } from "node:path";
-function skillAgentIDsForProviders(providerIDs) {
-  return [
-    ...new Set(providerIDs.map((providerID) => SKILL_AGENT_BY_PROVIDER[providerID]).filter((agent) => Boolean(agent)))
-  ];
-}
-function skillInstallTargetForProvider(providerID) {
-  const agentID = SKILL_AGENT_BY_PROVIDER[providerID];
-  if (!agentID)
-    return null;
-  if (agentID === "claude-code") {
-    const claudeConfigDir = process.env.CLAUDE_CONFIG_DIR?.trim() || join23(homedir8(), ".claude");
-    return { path: join23(claudeConfigDir, "skills", SKILL_NAME), symlink: true };
+function pathExists(path) {
+  try {
+    lstatSync2(path);
+    return true;
+  } catch {
+    return false;
   }
-  if (agentID === "windsurf") {
-    return {
-      path: join23(homedir8(), ".codeium", "windsurf", "skills", SKILL_NAME),
-      symlink: true
-    };
+}
+function writeSkillDir(skill, dir) {
+  rmSync5(dir, { recursive: true, force: true });
+  for (const file of skill.files) {
+    const target = join22(dir, ...file.path.split("/"));
+    mkdirSync11(dirname10(target), { recursive: true });
+    writeFileSync12(target, file.content, { mode: file.executable ? 493 : 420 });
   }
-  return {
-    path: join23(homedir8(), ".agents", "skills", SKILL_NAME),
-    symlink: false
-  };
 }
-function skillAgentArgs(providerIDs) {
-  const agents = providerIDs === undefined ? SUPPORTED_SKILL_AGENTS : skillAgentIDsForProviders(providerIDs);
-  return agents.map((agent) => `-a ${agent}`).join(" ");
+function linkSkillDir(linkPath, targetDir) {
+  mkdirSync11(dirname10(linkPath), { recursive: true });
+  rmSync5(linkPath, { recursive: true, force: true });
+  try {
+    symlinkSync(relative3(dirname10(linkPath), targetDir), linkPath, "dir");
+    return "symlink";
+  } catch (err) {
+    logger.debug("skill", `Symlink failed for ${linkPath}, copying instead: ${err}`);
+    cpSync(targetDir, linkPath, { recursive: true });
+    return "copy";
+  }
 }
-function execQuiet(command) {
-  return new Promise((resolve, reject) => {
-    exec2(command, { windowsHide: true }, (error) => {
-      if (error)
-        reject(error);
-      else
-        resolve();
-    });
-  });
+function removeSkillDir(dir) {
+  if (!pathExists(dir))
+    return false;
+  rmSync5(dir, { recursive: true, force: true });
+  return true;
 }
-async function installSkill(providerIDs, options = {}) {
-  const agentArgs = skillAgentArgs(providerIDs);
-  if (!agentArgs) {
-    logger.debug("skill", "No selected providers support the Dosu skill");
+function installBundledSkills(agentIDs) {
+  const agents = agentIDs.filter(isSkillAgentID);
+  if (agents.length === 0) {
+    logger.debug("skill", "No selected agents support the Dosu skill");
     return { success: true };
   }
   try {
-    const command = `npx skills add ${SKILL_REPO} -g ${agentArgs} -s "*" -y`;
-    if (options.quiet)
-      await execQuiet(command);
-    else
-      execSync2(command, { stdio: "inherit" });
+    const legacy = pruneLegacySkillLock();
+    const bundledNames = new Set(BUNDLED_SKILLS.map((skill) => skill.name));
+    const linkDirs = [
+      ...new Set(agents.map(linkedSkillsDir).filter((dir) => !!dir))
+    ];
+    for (const name of legacy) {
+      if (bundledNames.has(name))
+        continue;
+      for (const dir of [universalSkillsDir(), ...linkDirs])
+        removeSkillDir(join22(dir, name));
+    }
+    const paths = [];
+    for (const skill of BUNDLED_SKILLS) {
+      const universal = join22(universalSkillsDir(), skill.name);
+      writeSkillDir(skill, universal);
+      paths.push(universal);
+      for (const dir of linkDirs) {
+        const linkPath = join22(dir, skill.name);
+        linkSkillDir(linkPath, universal);
+        paths.push(linkPath);
+      }
+    }
+    const previous = readSkillInstallState();
+    writeSkillInstallState({
+      version: VERSION,
+      agents: [...new Set([...previous?.agents ?? [], ...agents])],
+      installedAt: Date.now()
+    });
+    rmSync5(join22(getConfigDir(), LEGACY_CACHE_FILENAME), { force: true });
+    logger.info("skill", `Installed bundled skills v${VERSION} for ${agents.join(", ")}`);
+    return { success: true, version: VERSION, paths };
   } catch (err) {
     logger.error("skill", `Failed to install skill: ${err}`);
     return { success: false };
   }
-  const sha = await fetchLatestSha();
-  if (sha) {
-    writeSkillCache({
-      lastCheck: Date.now(),
-      latestSha: sha,
-      installedSha: sha
-    });
-    return { success: true, sha };
-  }
-  logger.debug("skill", "Skill installed but could not fetch latest SHA");
-  return { success: true };
 }
-function installedSkillNames() {
-  let entries;
-  try {
-    const json = execSync2("npx skills list -g --json", {
-      encoding: "utf-8",
-      stdio: ["ignore", "pipe", "ignore"]
-    });
-    const parsed = JSON.parse(json);
-    if (!Array.isArray(parsed))
-      throw new Error("expected a JSON array");
-    entries = parsed;
-  } catch (err) {
-    logger.debug("skill", `Could not list installed skills: ${err}`);
-    return null;
-  }
-  const names = [];
-  for (const entry of entries) {
-    if (entry.source !== SKILL_REPO || typeof entry.name !== "string")
-      continue;
-    if (!SAFE_SKILL_NAME.test(entry.name)) {
-      logger.warn("skill", `Skipping skill with an unsupported name: ${entry.name}`);
-      continue;
+async function installSkill(providerIDs) {
+  const agents = providerIDs === undefined ? [...SUPPORTED_SKILL_AGENTS] : skillAgentIDsForProviders(providerIDs);
+  return installBundledSkills(agents);
+}
+function removeSkills() {
+  const legacy = pruneLegacySkillLock();
+  const names = new Set([...BUNDLED_SKILLS.map((skill) => skill.name), ...legacy]);
+  const dirs = [
+    universalSkillsDir(),
+    ...new Set(SUPPORTED_SKILL_AGENTS.map(linkedSkillsDir).filter((dir) => !!dir))
+  ];
+  const removed = [];
+  for (const dir of dirs) {
+    for (const name of names) {
+      const path = join22(dir, name);
+      if (removeSkillDir(path))
+        removed.push(path);
     }
-    names.push(entry.name);
   }
-  return names;
+  clearSkillInstallState();
+  rmSync5(join22(getConfigDir(), LEGACY_CACHE_FILENAME), { force: true });
+  return removed;
+}
+function printPaths(paths) {
+  for (const path of paths)
+    console.log(import_picocolors26.default.dim(`  ${path}`));
 }
 function skillCommand() {
-  const cmd = new Command("skill").description("Manage the Dosu agent skill");
-  cmd.command("install").description("Install the Dosu skill for AI coding agents").action(async () => {
-    console.log(`Installing skills from ${SKILL_REPO}...`);
+  const cmd = new Command("skill").description("Manage the Dosu agent skills bundled with the CLI");
+  cmd.command("install").description("Install the bundled Dosu skills for AI coding agents").action(async () => {
+    console.log(`Installing Dosu skills (v${VERSION})...`);
     const result = await installSkill();
     if (result.success) {
-      console.log(import_picocolors27.default.green(`
+      printPaths(result.paths ?? []);
+      console.log(import_picocolors26.default.green(`
 ✓ Skills installed successfully.`));
     } else {
-      console.error(import_picocolors27.default.red(`
-Failed to install skill. Make sure npx is available.`));
+      console.error(import_picocolors26.default.red(`
+Failed to install skill. Run with --debug for details.`));
       process.exit(1);
     }
   });
   cmd.command("remove").description("Remove the Dosu skills").action(() => {
-    const installed = installedSkillNames();
-    if (installed?.length === 0) {
-      console.log(`No skills from ${SKILL_REPO} are installed.`);
-      return;
-    }
-    const targets = installed ?? [SKILL_NAME];
-    console.log(`Removing skills from ${SKILL_REPO}...`);
     try {
-      execSync2(`npx skills remove -g ${targets.join(" ")} -y`, {
-        stdio: "inherit"
-      });
-      clearInstalledSha();
-      console.log(import_picocolors27.default.green(`
+      const removed = removeSkills();
+      if (removed.length === 0) {
+        console.log("No Dosu skills are installed.");
+        return;
+      }
+      console.log("Removing Dosu skills...");
+      printPaths(removed);
+      console.log(import_picocolors26.default.green(`
 ✓ Skills removed.`));
-    } catch {
-      console.error(import_picocolors27.default.red(`
+    } catch (err) {
+      logger.error("skill", `Failed to remove skills: ${err}`);
+      console.error(import_picocolors26.default.red(`
 Failed to remove skills.`));
       process.exit(1);
     }
   });
-  cmd.command("update").description("Update the Dosu skill to the latest version").action(async () => {
-    console.log(`Updating skills from ${SKILL_REPO}...`);
+  cmd.command("update").description("Rewrite the Dosu skills from this CLI version (upgrade the CLI for newer skills)").action(async () => {
+    console.log(`Updating Dosu skills to the copy bundled with v${VERSION}...`);
     const result = await installSkill();
     if (!result.success) {
-      console.error(import_picocolors27.default.red(`
+      console.error(import_picocolors26.default.red(`
 Failed to update skill.`));
       process.exit(1);
     }
-    console.log(import_picocolors27.default.green(`
+    printPaths(result.paths ?? []);
+    console.log(import_picocolors26.default.green(`
 ✓ Skills updated.`));
+    console.log(import_picocolors26.default.dim("  Skills ship with the CLI; run `dosu upgrade` to get newer ones."));
   });
   return cmd;
 }
-var import_picocolors27, SKILL_REPO = "dosu-ai/dosu-skill", SKILL_NAME = "dosu", SAFE_SKILL_NAME, SUPPORTED_SKILL_AGENTS, SKILL_AGENT_BY_PROVIDER;
+var import_picocolors26, SKILL_NAME = "dosu", LEGACY_SKILL_SOURCE = "dosu-ai/dosu-skill", INSTALL_STATE_FILENAME = "skill-install.json", LEGACY_CACHE_FILENAME = "skill-update-check.json", SUPPORTED_SKILL_AGENTS, SKILL_AGENT_BY_PROVIDER;
 var init_skill = __esm(() => {
   init_commander();
+  init_config();
   init_logger();
-  init_skill_update_check();
-  import_picocolors27 = __toESM(require_picocolors(), 1);
-  SAFE_SKILL_NAME = /^[a-zA-Z0-9][a-zA-Z0-9._-]*$/;
+  init_skills();
+  import_picocolors26 = __toESM(require_picocolors(), 1);
   SUPPORTED_SKILL_AGENTS = [
     "claude-code",
     "cursor",
@@ -60080,7 +60943,7 @@ var init_skill = __esm(() => {
 function requireConfig11() {
   const cfg = requireLoginConfig();
   if (!cfg.active_account?.target?.org_id) {
-    console.error(import_picocolors28.default.red("Missing org config. Run 'dosu setup' to reconfigure."));
+    console.error(import_picocolors27.default.red("Missing org config. Run 'dosu setup' to reconfigure."));
     process.exit(1);
   }
   return cfg;
@@ -60090,7 +60953,7 @@ function rejectWebOnlyProvider(provider, json) {
   if (json) {
     printResult({ provider, cli_supported: false, connect_via: "web", url }, { json: true });
   } else {
-    console.error(import_picocolors28.default.yellow(`Connecting '${provider}' sources is web-only for now. Open ${url}, add the source ` + `under Data Sources, then re-run 'dosu sources list'.`));
+    console.error(import_picocolors27.default.yellow(`Connecting '${provider}' sources is web-only for now. Open ${url}, add the source ` + `under Data Sources, then re-run 'dosu sources list'.`));
   }
   process.exit(1);
 }
@@ -60109,7 +60972,7 @@ function sourcesCommand() {
     }
     const list = dataSources ?? [];
     if (list.length === 0) {
-      console.log(import_picocolors28.default.dim("No data sources connected."));
+      console.log(import_picocolors27.default.dim("No data sources connected."));
       return;
     }
     printTable(["ID", "Name", "Provider", "Created"], list.map((ds) => [
@@ -60128,7 +60991,7 @@ function sourcesCommand() {
       return;
     }
     if (!ds) {
-      console.log(import_picocolors28.default.dim("Data source not found."));
+      console.log(import_picocolors27.default.dim("Data source not found."));
       return;
     }
     printInfo([
@@ -60147,7 +61010,7 @@ function sourcesCommand() {
       printResult({ success: true, id }, opts);
       return;
     }
-    console.log(import_picocolors28.default.green(`Data source sync triggered for ${id.slice(0, 8)}.`));
+    console.log(import_picocolors27.default.green(`Data source sync triggered for ${id.slice(0, 8)}.`));
   });
   cmd.command("update").description("Update a data source").argument("<id>", "Data source ID").option("--name <name>", "New name").option("--description <desc>", "New description").option("--json", "Output as JSON").action(async (id, opts) => {
     if (opts.name === undefined && opts.description === undefined) {
@@ -60164,7 +61027,7 @@ function sourcesCommand() {
       printResult(result, opts);
       return;
     }
-    console.log(import_picocolors28.default.green("Data source updated."));
+    console.log(import_picocolors27.default.green("Data source updated."));
   });
   cmd.command("delete").description("Delete a data source").argument("<id>", "Data source ID").option("--json", "Output as JSON").action(async (id, opts) => {
     const cfg = requireConfig11();
@@ -60174,7 +61037,7 @@ function sourcesCommand() {
       printResult({ success: true, id }, opts);
       return;
     }
-    console.log(import_picocolors28.default.green("Data source deleted."));
+    console.log(import_picocolors27.default.green("Data source deleted."));
   });
   cmd.command("connect").description("Install or update a provider integration (currently GitHub) via the browser").argument("[provider]", "Provider to connect (github)", "github").option("--json", "Emit machine-readable NDJSON progress events").option("--timeout <seconds>", "Seconds to wait for the browser install to complete", String(CONNECT_TIMEOUT_DEFAULT_SECONDS)).option("--no-open", "Print the URL without opening a browser").action(async (provider, opts) => {
     const providerName = provider.toLowerCase();
@@ -60202,14 +61065,14 @@ function sourcesCommand() {
         }));
       } else {
         console.log(`Open this URL to install or update the Dosu GitHub App:
-  ${import_picocolors28.default.cyan(url)}`);
+  ${import_picocolors27.default.cyan(url)}`);
         if (opts.open !== false) {
           try {
             const open = await Promise.resolve().then(() => (init_open(), {}));
             await open_default(url);
           } catch {}
         }
-        console.log(import_picocolors28.default.dim("Waiting for the install to complete..."));
+        console.log(import_picocolors27.default.dim("Waiting for the install to complete..."));
       }
       const timedOut = new Promise((resolve) => {
         timeoutId = setTimeout(() => resolve(null), timeoutSeconds * 1000);
@@ -60219,7 +61082,7 @@ function sourcesCommand() {
         if (opts.json) {
           console.log(JSON.stringify({ event: "timeout", timeout_seconds: timeoutSeconds }));
         } else {
-          console.error(import_picocolors28.default.red(`Timed out after ${timeoutSeconds}s. Finish the install in the browser, then re-run 'dosu sources connect github'.`));
+          console.error(import_picocolors27.default.red(`Timed out after ${timeoutSeconds}s. Finish the install in the browser, then re-run 'dosu sources connect github'.`));
         }
         process.exit(1);
         return;
@@ -60235,14 +61098,14 @@ function sourcesCommand() {
         }));
         return;
       }
-      console.log(import_picocolors28.default.green(`GitHub App connected (installation ${result.installation_id}).`));
+      console.log(import_picocolors27.default.green(`GitHub App connected (installation ${result.installation_id}).`));
       if (newRepositories.length > 0) {
         for (const repo of newRepositories) {
           console.log(`  ${repo.slug}`);
         }
-        console.log(import_picocolors28.default.dim("Next: dosu sources create github --repo <owner/name> --library <library-id>"));
+        console.log(import_picocolors27.default.dim("Next: dosu sources create github --repo <owner/name> --library <library-id>"));
       } else {
-        console.log(import_picocolors28.default.dim("No new repositories visible yet — GitHub may still be syncing. " + "Re-run 'dosu sources connect github' or check 'dosu sources list' shortly."));
+        console.log(import_picocolors27.default.dim("No new repositories visible yet — GitHub may still be syncing. " + "Re-run 'dosu sources connect github' or check 'dosu sources list' shortly."));
       }
     } finally {
       clearTimeout(timeoutId);
@@ -60259,7 +61122,7 @@ function sourcesCommand() {
     const orgID = cfg.active_account.target.org_id;
     const libraryID = opts.library ?? cfg.active_account?.target?.space_id;
     if (!libraryID) {
-      console.error(import_picocolors28.default.red("No library specified and no active library. Pass --library <id>."));
+      console.error(import_picocolors27.default.red("No library specified and no active library. Pass --library <id>."));
       process.exit(1);
       return;
     }
@@ -60267,12 +61130,12 @@ function sourcesCommand() {
     const repos = await fetchListForOrg(client, orgID);
     const repo = repos.find((r) => r.slug.toLowerCase() === opts.repo.toLowerCase());
     if (!repo) {
-      console.error(import_picocolors28.default.red(`Repository '${opts.repo}' is not visible to Dosu. Run ` + `'dosu sources connect github' to grant the GitHub App access, then retry.`));
+      console.error(import_picocolors27.default.red(`Repository '${opts.repo}' is not visible to Dosu. Run ` + `'dosu sources connect github' to grant the GitHub App access, then retry.`));
       process.exit(1);
       return;
     }
     if (repo.is_fork === true) {
-      console.error(import_picocolors28.default.red(`'${repo.slug}' is a fork and can't be synced.` + (repo.fork_parent_slug ? ` Connect '${repo.fork_parent_slug}' instead.` : "")));
+      console.error(import_picocolors27.default.red(`'${repo.slug}' is a fork and can't be synced.` + (repo.fork_parent_slug ? ` Connect '${repo.fork_parent_slug}' instead.` : "")));
       process.exit(1);
       return;
     }
@@ -60296,14 +61159,14 @@ function sourcesCommand() {
       dataSourceID: existingDataSources.get(repo.repository_id)
     });
     if (!created) {
-      console.error(import_picocolors28.default.red("Could not create the data source. Check 'dosu logs --tail 50' for details."));
+      console.error(import_picocolors27.default.red("Could not create the data source. Check 'dosu logs --tail 50' for details."));
       process.exit(1);
       return;
     }
     const survivors = await verifyDataSourcesPersist(client, orgID, [created.data_source_id]);
     if (survivors.dropped.size > 0) {
       await deleteOrphanDeployment(client, created.deployment_id, repo.slug);
-      console.error(import_picocolors28.default.red(`Dosu couldn't sync '${repo.slug}' (the GitHub App may not have access to it). ` + "Nothing was created."));
+      console.error(import_picocolors27.default.red(`Dosu couldn't sync '${repo.slug}' (the GitHub App may not have access to it). ` + "Nothing was created."));
       process.exit(1);
       return;
     }
@@ -60320,13 +61183,13 @@ function sourcesCommand() {
       printResult(receipt, opts);
       return;
     }
-    console.log(import_picocolors28.default.green(`Connected ${repo.slug} to library ${libraryID}.`));
-    console.log(import_picocolors28.default.dim(`  data source ${created.data_source_id}`));
-    console.log(import_picocolors28.default.dim(`  deployment ${created.deployment_id}`));
+    console.log(import_picocolors27.default.green(`Connected ${repo.slug} to library ${libraryID}.`));
+    console.log(import_picocolors27.default.dim(`  data source ${created.data_source_id}`));
+    console.log(import_picocolors27.default.dim(`  deployment ${created.deployment_id}`));
   });
   return cmd;
 }
-var import_picocolors28, CONNECT_TIMEOUT_DEFAULT_SECONDS = 600;
+var import_picocolors27, CONNECT_TIMEOUT_DEFAULT_SECONDS = 600;
 var init_sources = __esm(() => {
   init_commander();
   init_trpc();
@@ -60335,23 +61198,23 @@ var init_sources = __esm(() => {
   init_auth();
   init_confirmation();
   init_output();
-  import_picocolors28 = __toESM(require_picocolors(), 1);
+  import_picocolors27 = __toESM(require_picocolors(), 1);
 });
 
 // src/telemetry/settings.ts
 import { randomUUID as randomUUID4 } from "node:crypto";
 import {
   existsSync as existsSync20,
-  lstatSync as lstatSync2,
+  lstatSync as lstatSync3,
   mkdirSync as mkdirSync12,
   readFileSync as readFileSync20,
   renameSync as renameSync5,
   unlinkSync as unlinkSync4,
   writeFileSync as writeFileSync13
 } from "node:fs";
-import { join as join24 } from "node:path";
+import { join as join23 } from "node:path";
 function getTelemetrySettingsPath() {
-  return join24(getConfigDir(), TELEMETRY_SETTINGS_FILENAME);
+  return join23(getConfigDir(), TELEMETRY_SETTINGS_FILENAME);
 }
 function loadTelemetrySettings() {
   return readTelemetrySettings().settings;
@@ -60407,7 +61270,7 @@ function readTelemetrySettings() {
   const path = getTelemetrySettingsPath();
   let file;
   try {
-    file = lstatSync2(path);
+    file = lstatSync3(path);
   } catch (error) {
     if (isErrorCode(error, "ENOENT")) {
       return { status: "missing", settings: emptyTelemetrySettings() };
@@ -60567,7 +61430,7 @@ var init_telemetry2 = __esm(() => {
 function requireConfig12() {
   const cfg = requireLoginConfig();
   if (!cfg.active_account?.target?.space_id) {
-    console.error(import_picocolors29.default.red("Missing space config. Run 'dosu setup' to reconfigure."));
+    console.error(import_picocolors28.default.red("Missing space config. Run 'dosu setup' to reconfigure."));
     process.exit(1);
   }
   return cfg;
@@ -60618,7 +61481,7 @@ function threadsCommand() {
       return;
     }
     if (!threads || threads.length === 0) {
-      console.log(import_picocolors29.default.dim("No threads found."));
+      console.log(import_picocolors28.default.dim("No threads found."));
       return;
     }
     printTable(["ID", "Title", "Status", "Created"], threads.map((t) => [
@@ -60643,10 +61506,10 @@ function threadsCommand() {
       return;
     }
     if (!thread) {
-      console.log(import_picocolors29.default.dim("Thread not found."));
+      console.log(import_picocolors28.default.dim("Thread not found."));
       return;
     }
-    console.log(import_picocolors29.default.bold(thread.generated_title ?? "(untitled thread)"));
+    console.log(import_picocolors28.default.bold(thread.generated_title ?? "(untitled thread)"));
     printInfo([
       ["ID", thread.id],
       ["Created", formatDate(thread.created_at)],
@@ -60657,13 +61520,13 @@ function threadsCommand() {
     if (messages && messages.length > 0) {
       const allMessages = messages.flatMap((group) => group.messages);
       console.log(`
-${import_picocolors29.default.bold("Messages")} (${allMessages.length})`);
-      console.log(import_picocolors29.default.dim("─".repeat(60)));
+${import_picocolors28.default.bold("Messages")} (${allMessages.length})`);
+      console.log(import_picocolors28.default.dim("─".repeat(60)));
       for (const msg of allMessages) {
         const role = msg.author_role ?? "unknown";
         const date = formatDate(msg.created_at);
         console.log(`
-${import_picocolors29.default.bold(role)} ${import_picocolors29.default.dim(date)}`);
+${import_picocolors28.default.bold(role)} ${import_picocolors28.default.dim(date)}`);
         if (msg.body) {
           console.log(truncate(msg.body, 500));
         }
@@ -60678,25 +61541,25 @@ ${import_picocolors29.default.bold(role)} ${import_picocolors29.default.dim(date
       printResult({ success: true, id }, opts);
       return;
     }
-    console.log(import_picocolors29.default.green(`Thread ${id.slice(0, 8)} archived.`));
+    console.log(import_picocolors28.default.green(`Thread ${id.slice(0, 8)} archived.`));
   });
   return cmd;
 }
-var import_picocolors29;
+var import_picocolors28;
 var init_threads = __esm(() => {
   init_commander();
   init_trpc();
   init_arguments();
   init_auth();
   init_output();
-  import_picocolors29 = __toESM(require_picocolors(), 1);
+  import_picocolors28 = __toESM(require_picocolors(), 1);
 });
 
 // src/commands/topics.ts
 function requireConfig13() {
   const cfg = requireLoginConfig();
   if (!cfg.active_account?.target?.space_id) {
-    console.error(import_picocolors30.default.red("Missing space config. Run 'dosu setup' to reconfigure."));
+    console.error(import_picocolors29.default.red("Missing space config. Run 'dosu setup' to reconfigure."));
     process.exit(1);
   }
   return cfg;
@@ -60706,7 +61569,7 @@ async function getKnowledgeStoreId3(client, spaceId) {
     space_id: spaceId
   });
   if (!store) {
-    console.error(import_picocolors30.default.red("No knowledge store found for this deployment."));
+    console.error(import_picocolors29.default.red("No knowledge store found for this deployment."));
     process.exit(1);
   }
   return store.id;
@@ -60725,7 +61588,7 @@ function topicsCommand() {
       return;
     }
     if (!topics || topics.length === 0) {
-      console.log(import_picocolors30.default.dim("No topics found."));
+      console.log(import_picocolors29.default.dim("No topics found."));
       return;
     }
     printTable(["ID", "Name", "Description"], topics.map((t) => [
@@ -60750,7 +61613,7 @@ function topicsCommand() {
       return;
     }
     if (!pages || pages.length === 0) {
-      console.log(import_picocolors30.default.dim("No pages found with this topic."));
+      console.log(import_picocolors29.default.dim("No pages found with this topic."));
       return;
     }
     printTable(["ID", "Title"], pages.map((p) => [
@@ -60760,14 +61623,14 @@ function topicsCommand() {
   });
   return cmd;
 }
-var import_picocolors30;
+var import_picocolors29;
 var init_topics = __esm(() => {
   init_commander();
   init_trpc();
   init_arguments();
   init_auth();
   init_output();
-  import_picocolors30 = __toESM(require_picocolors(), 1);
+  import_picocolors29 = __toESM(require_picocolors(), 1);
 });
 
 // src/commands/upgrade.ts
@@ -60920,7 +61783,7 @@ Could not update Dosu automatically.`);
   ${plan.manualCommand}`);
     return result.status && result.status > 0 ? result.status : 1;
   }
-  console.log(import_picocolors31.default.green(`
+  console.log(import_picocolors30.default.green(`
 ✓ Update command completed.`));
   console.log('Run "dosu --version" to verify.');
   return 0;
@@ -60969,7 +61832,7 @@ async function completeUpgrade(channel = INSTALL_CHANNEL, options = {}) {
     try {
       const result = await installSkill();
       if (result.success) {
-        console.log(import_picocolors31.default.green("✓ Skills updated."));
+        console.log(import_picocolors30.default.green("✓ Skills updated."));
       } else {
         console.error('Skills could not be refreshed. Run "dosu skill update" to retry.');
       }
@@ -60987,11 +61850,11 @@ function upgradeCommand() {
       process.exitCode = status;
   });
 }
-var import_picocolors31, PACKAGE_NAME = "@dosu/cli", LATEST_PACKAGE, BREW_MANUAL_COMMAND = "brew upgrade dosu-ai/dosu/dosu", NPX_COMMAND = "npx -y @dosu/cli@latest", PROBE_TIMEOUT_MS = 5000, RELEASES_URL = "https://github.com/dosu-ai/dosu-cli/releases/latest", PACKAGE_MANAGERS, SETUP_FALLBACK = 'Run "dosu setup" to finish updating your AI agents.';
+var import_picocolors30, PACKAGE_NAME = "@dosu/cli", LATEST_PACKAGE, BREW_MANUAL_COMMAND = "brew upgrade dosu-ai/dosu/dosu", NPX_COMMAND = "npx -y @dosu/cli@latest", PROBE_TIMEOUT_MS = 5000, RELEASES_URL = "https://github.com/dosu-ai/dosu-cli/releases/latest", PACKAGE_MANAGERS, SETUP_FALLBACK = 'Run "dosu setup" to finish updating your AI agents.';
 var init_upgrade = __esm(() => {
   init_commander();
   init_skill();
-  import_picocolors31 = __toESM(require_picocolors(), 1);
+  import_picocolors30 = __toESM(require_picocolors(), 1);
   LATEST_PACKAGE = `${PACKAGE_NAME}@latest`;
   PACKAGE_MANAGERS = {
     npm: {
@@ -61116,7 +61979,7 @@ var init_antigravity = __esm(() => {
 });
 
 // src/mcp/providers/claude.ts
-import { join as join25 } from "node:path";
+import { join as join24 } from "node:path";
 var ClaudeProvider = () => createJSONProvider({
   providerName: "Claude Code",
   providerID: "claude",
@@ -61125,24 +61988,24 @@ var ClaudeProvider = () => createJSONProvider({
   paths: ["~/.claude"],
   globalPath: "~/.claude.json",
   topKey: "mcpServers",
-  localConfigPath: (cwd) => join25(cwd, ".mcp.json")
+  localConfigPath: (cwd) => join24(cwd, ".mcp.json")
 });
 var init_claude = __esm(() => {
   init_base();
 });
 
 // src/mcp/providers/claude-desktop.ts
-import { join as join26 } from "node:path";
+import { join as join25 } from "node:path";
 function configPath() {
-  return join26(appSupportDir(), "Claude", "claude_desktop_config.json");
+  return join25(appSupportDir(), "Claude", "claude_desktop_config.json");
 }
 var ClaudeDesktopProvider = () => ({
   name: () => "Claude Desktop",
   id: () => "claude-desktop",
   supportsLocal: () => false,
   priority: () => 2,
-  detectPaths: () => [join26(appSupportDir(), "Claude")],
-  isInstalled: () => isInstalled([join26(appSupportDir(), "Claude")]),
+  detectPaths: () => [join25(appSupportDir(), "Claude")],
+  isInstalled: () => isInstalled([join25(appSupportDir(), "Claude")]),
   globalConfigPath: () => configPath(),
   isConfigured: () => isJSONKeyConfigured(configPath(), "mcpServers"),
   install(cfg, global2) {
@@ -61169,14 +62032,14 @@ var init_claude_desktop = __esm(() => {
 });
 
 // src/mcp/providers/cline.ts
-import { join as join27 } from "node:path";
-var extensionDir = () => join27(appSupportDir(), "Code", "User", "globalStorage", "saoudrizwan.claude-dev"), ClineProvider = () => createJSONProvider({
+import { join as join26 } from "node:path";
+var extensionDir = () => join26(appSupportDir(), "Code", "User", "globalStorage", "saoudrizwan.claude-dev"), ClineProvider = () => createJSONProvider({
   providerName: "Cline",
   providerID: "cline",
   local: false,
   priorityValue: 11,
   paths: [extensionDir()],
-  globalPath: join27(extensionDir(), "settings", "cline_mcp_settings.json"),
+  globalPath: join26(extensionDir(), "settings", "cline_mcp_settings.json"),
   topKey: "mcpServers",
   buildServer: ({ url, headers }) => ({
     url,
@@ -61191,7 +62054,7 @@ var init_cline = __esm(() => {
 });
 
 // src/mcp/providers/cline-cli.ts
-import { join as join28 } from "node:path";
+import { join as join27 } from "node:path";
 function clineDir() {
   return process.env.CLINE_DIR ?? expandHome("~/.cline");
 }
@@ -61201,7 +62064,7 @@ var ClineCliProvider = () => createJSONProvider({
   local: false,
   priorityValue: 12,
   paths: [clineDir()],
-  globalPath: join28(clineDir(), "data", "settings", "cline_mcp_settings.json"),
+  globalPath: join27(clineDir(), "data", "settings", "cline_mcp_settings.json"),
   topKey: "mcpServers",
   buildServer: ({ url, headers }) => ({
     url,
@@ -61217,14 +62080,14 @@ var init_cline_cli = __esm(() => {
 
 // src/mcp/providers/codex.ts
 import { existsSync as existsSync21, readFileSync as readFileSync21 } from "node:fs";
-import { dirname as dirname10, join as join29 } from "node:path";
+import { dirname as dirname11, join as join28 } from "node:path";
 function codexHome3() {
   return process.env.CODEX_HOME ?? expandHome("~/.codex");
 }
 function getConfigPath2(global2) {
   if (global2)
-    return join29(codexHome3(), "config.toml");
-  return join29(process.cwd(), ".codex", "config.toml");
+    return join28(codexHome3(), "config.toml");
+  return join28(process.cwd(), ".codex", "config.toml");
 }
 function readTOML(path) {
   if (!existsSync21(path))
@@ -61304,14 +62167,14 @@ function projectConfigPaths() {
   const chain = [];
   for (let dir = cwd;; ) {
     chain.push(dir);
-    if (existsSync21(join29(dir, ".git")))
+    if (existsSync21(join28(dir, ".git")))
       break;
-    const parent = dirname10(dir);
+    const parent = dirname11(dir);
     if (parent === dir)
-      return [join29(cwd, ".codex", "config.toml")];
+      return [join28(cwd, ".codex", "config.toml")];
     dir = parent;
   }
-  return chain.reverse().map((dir) => join29(dir, ".codex", "config.toml"));
+  return chain.reverse().map((dir) => join28(dir, ".codex", "config.toml"));
 }
 function pruneLegacyRemoteEntry(path) {
   if (!existsSync21(path))
@@ -61328,9 +62191,9 @@ var REMOTE_HTTP_KEY, CodexProvider = () => ({
   priority: () => 8,
   detectPaths: () => ["~/.codex"],
   isInstalled: () => isInstalled(["~/.codex"]),
-  globalConfigPath: () => join29(codexHome3(), "config.toml"),
+  globalConfigPath: () => join28(codexHome3(), "config.toml"),
   isConfigured: () => {
-    const content = readTOML(join29(codexHome3(), "config.toml"));
+    const content = readTOML(join28(codexHome3(), "config.toml"));
     return content.includes("[mcp_servers.dosu]");
   },
   install(cfg, global2) {
@@ -61361,10 +62224,10 @@ var init_codex = __esm(() => {
 });
 
 // src/mcp/providers/copilot.ts
-import { join as join30 } from "node:path";
+import { join as join29 } from "node:path";
 function globalPath() {
   if (process.env.XDG_CONFIG_HOME) {
-    return join30(process.env.XDG_CONFIG_HOME, "mcp-config.json");
+    return join29(process.env.XDG_CONFIG_HOME, "mcp-config.json");
   }
   return expandHome("~/.copilot/mcp-config.json");
 }
@@ -61388,7 +62251,7 @@ var CopilotProvider = () => ({
       };
       installJSONServer(globalPath(), "mcpServers", server);
     } else {
-      const configPath = join30(process.cwd(), ".vscode", "mcp.json");
+      const configPath = join29(process.cwd(), ".vscode", "mcp.json");
       const server = {
         type: "http",
         url,
@@ -61401,7 +62264,7 @@ var CopilotProvider = () => ({
     if (global2) {
       removeJSONServer(globalPath(), "mcpServers");
     } else {
-      const configPath = join30(process.cwd(), ".vscode", "mcp.json");
+      const configPath = join29(process.cwd(), ".vscode", "mcp.json");
       removeJSONServer(configPath, "servers");
     }
   }
@@ -61412,7 +62275,7 @@ var init_copilot = __esm(() => {
 });
 
 // src/mcp/providers/cursor.ts
-import { join as join31 } from "node:path";
+import { join as join30 } from "node:path";
 var CursorProvider = () => createJSONProvider({
   providerName: "Cursor",
   providerID: "cursor",
@@ -61425,14 +62288,14 @@ var CursorProvider = () => createJSONProvider({
     url,
     headers
   }),
-  localConfigPath: (cwd) => join31(cwd, ".cursor", "mcp.json")
+  localConfigPath: (cwd) => join30(cwd, ".cursor", "mcp.json")
 });
 var init_cursor = __esm(() => {
   init_base();
 });
 
 // src/mcp/providers/factory.ts
-import { join as join32 } from "node:path";
+import { join as join31 } from "node:path";
 var FactoryProvider = () => createJSONProvider({
   providerName: "Factory",
   providerID: "factory",
@@ -61441,14 +62304,14 @@ var FactoryProvider = () => createJSONProvider({
   paths: ["~/.factory"],
   globalPath: "~/.factory/mcp.json",
   topKey: "mcpServers",
-  localConfigPath: (cwd) => join32(cwd, ".factory", "mcp.json")
+  localConfigPath: (cwd) => join31(cwd, ".factory", "mcp.json")
 });
 var init_factory = __esm(() => {
   init_base();
 });
 
 // src/mcp/providers/gemini.ts
-import { join as join33 } from "node:path";
+import { join as join32 } from "node:path";
 var GeminiProvider = () => createJSONProvider({
   providerName: "Gemini CLI",
   providerID: "gemini",
@@ -61457,7 +62320,7 @@ var GeminiProvider = () => createJSONProvider({
   paths: ["~/.gemini"],
   globalPath: "~/.gemini/settings.json",
   topKey: "mcpServers",
-  localConfigPath: (cwd) => join33(cwd, ".gemini", "settings.json")
+  localConfigPath: (cwd) => join32(cwd, ".gemini", "settings.json")
 });
 var init_gemini = __esm(() => {
   init_base();
@@ -61500,7 +62363,7 @@ var init_manual = __esm(() => {
 
 // src/mcp/providers/mcporter.ts
 import { existsSync as existsSync22 } from "node:fs";
-import { join as join34 } from "node:path";
+import { join as join33 } from "node:path";
 function resolveGlobalConfigPath() {
   const jsonPath = expandHome("~/.mcporter/mcporter.json");
   if (existsSync22(jsonPath))
@@ -61520,7 +62383,7 @@ var MCPorterProvider = () => ({
   globalConfigPath: () => resolveGlobalConfigPath(),
   isConfigured: () => isJSONKeyConfigured(resolveGlobalConfigPath(), "mcpServers"),
   install(cfg, global2) {
-    const configPath = global2 ? resolveGlobalConfigPath() : join34(process.cwd(), "config", "mcporter.json");
+    const configPath = global2 ? resolveGlobalConfigPath() : join33(process.cwd(), "config", "mcporter.json");
     const server = {
       type: "http",
       url: mcpEndpoint(cfg),
@@ -61529,7 +62392,7 @@ var MCPorterProvider = () => ({
     installJSONServer(configPath, "mcpServers", server);
   },
   remove(global2) {
-    const configPath = global2 ? resolveGlobalConfigPath() : join34(process.cwd(), "config", "mcporter.json");
+    const configPath = global2 ? resolveGlobalConfigPath() : join33(process.cwd(), "config", "mcporter.json");
     removeJSONServer(configPath, "mcpServers");
   }
 });
@@ -61539,7 +62402,7 @@ var init_mcporter = __esm(() => {
 });
 
 // src/mcp/providers/opencode.ts
-import { join as join35 } from "node:path";
+import { join as join34 } from "node:path";
 var OpenCodeProvider = () => createJSONProvider({
   providerName: "OpenCode",
   providerID: "opencode",
@@ -61554,23 +62417,23 @@ var OpenCodeProvider = () => createJSONProvider({
     enabled: true,
     headers
   }),
-  localConfigPath: (cwd) => join35(cwd, "opencode.json")
+  localConfigPath: (cwd) => join34(cwd, "opencode.json")
 });
 var init_opencode = __esm(() => {
   init_base();
 });
 
 // src/mcp/providers/vscode.ts
-import { join as join36 } from "node:path";
+import { join as join35 } from "node:path";
 var VSCodeProvider = () => createJSONProvider({
   providerName: "VS Code",
   providerID: "vscode",
   local: true,
   priorityValue: 6,
-  paths: [join36(appSupportDir(), "Code")],
-  globalPath: join36(appSupportDir(), "Code", "User", "mcp.json"),
+  paths: [join35(appSupportDir(), "Code")],
+  globalPath: join35(appSupportDir(), "Code", "User", "mcp.json"),
   topKey: "servers",
-  localConfigPath: (cwd) => join36(cwd, ".vscode", "mcp.json")
+  localConfigPath: (cwd) => join35(cwd, ".vscode", "mcp.json")
 });
 var init_vscode = __esm(() => {
   init_detect();
@@ -61579,14 +62442,14 @@ var init_vscode = __esm(() => {
 
 // src/mcp/providers/windsurf.ts
 import { homedir as homedir10 } from "node:os";
-import { join as join37 } from "node:path";
+import { join as join36 } from "node:path";
 var WindsurfProvider = () => createJSONProvider({
   providerName: "Windsurf",
   providerID: "windsurf",
   local: false,
   priorityValue: 9,
-  paths: [join37(homedir10(), ".codeium", "windsurf")],
-  globalPath: join37(homedir10(), ".codeium", "windsurf", "mcp_config.json"),
+  paths: [join36(homedir10(), ".codeium", "windsurf")],
+  globalPath: join36(homedir10(), ".codeium", "windsurf", "mcp_config.json"),
   topKey: "mcpServers"
 });
 var init_windsurf = __esm(() => {
@@ -61594,27 +62457,27 @@ var init_windsurf = __esm(() => {
 });
 
 // src/mcp/providers/zed.ts
-import { rmSync as rmSync5 } from "node:fs";
+import { rmSync as rmSync6 } from "node:fs";
 import { homedir as homedir11, platform as platform3 } from "node:os";
-import { join as join38 } from "node:path";
+import { join as join37 } from "node:path";
 function zedConfigDir() {
   const os = platform3();
   if (os === "win32")
-    return join38(appSupportDir(), "Zed");
+    return join37(appSupportDir(), "Zed");
   if (os === "darwin")
-    return join38(homedir11(), ".config", "zed");
-  return join38(appSupportDir(), "zed");
+    return join37(homedir11(), ".config", "zed");
+  return join37(appSupportDir(), "zed");
 }
 function zedDataDir() {
   const os = platform3();
   if (os === "darwin")
-    return join38(appSupportDir(), "Zed");
+    return join37(appSupportDir(), "Zed");
   if (os === "win32")
-    return join38(process.env.LOCALAPPDATA ?? "", "Zed");
-  return join38(process.env.XDG_DATA_HOME ?? join38(homedir11(), ".local", "share"), "zed");
+    return join37(process.env.LOCALAPPDATA ?? "", "Zed");
+  return join37(process.env.XDG_DATA_HOME ?? join37(homedir11(), ".local", "share"), "zed");
 }
 function legacyDarwinSettingsPath() {
-  return platform3() === "darwin" ? join38(appSupportDir(), "Zed", "settings.json") : null;
+  return platform3() === "darwin" ? join37(appSupportDir(), "Zed", "settings.json") : null;
 }
 function removeLegacyDosuEntry(path) {
   let cfg;
@@ -61629,7 +62492,7 @@ function removeLegacyDosuEntry(path) {
   delete servers.dosu;
   const nothingElse = Object.keys(cfg).length === 1 && Object.keys(servers).length === 0;
   if (nothingElse)
-    rmSync5(path, { force: true });
+    rmSync6(path, { force: true });
   else
     saveJSONConfig(path, cfg);
 }
@@ -61640,10 +62503,10 @@ var ZedProvider = (legacyPath = legacyDarwinSettingsPath()) => {
     local: true,
     priorityValue: 10,
     paths: [zedConfigDir(), zedDataDir()],
-    globalPath: join38(zedConfigDir(), "settings.json"),
+    globalPath: join37(zedConfigDir(), "settings.json"),
     topKey: "context_servers",
     buildServer: ({ url, headers }) => ({ url, headers }),
-    localConfigPath: (cwd) => join38(cwd, ".zed", "settings.json")
+    localConfigPath: (cwd) => join37(cwd, ".zed", "settings.json")
   });
   if (!legacyPath)
     return provider;
@@ -61749,7 +62612,7 @@ var init_refresh = __esm(() => {
 
 // src/version/update-check.ts
 import { existsSync as existsSync23, mkdirSync as mkdirSync13, readFileSync as readFileSync22, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join39 } from "node:path";
+import { join as join38 } from "node:path";
 function isValidVersion(value) {
   return typeof value === "string" && SEMVER_PATTERN.test(value);
 }
@@ -61770,12 +62633,12 @@ function isNewerVersion(latest, current) {
   }
   return false;
 }
-function getCachePath3() {
-  return join39(getConfigDir(), CACHE_FILENAME4);
+function getCachePath2() {
+  return join38(getConfigDir(), CACHE_FILENAME3);
 }
 function readCache() {
   try {
-    const path = getCachePath3();
+    const path = getCachePath2();
     if (!existsSync23(path))
       return null;
     const data = JSON.parse(readFileSync22(path, "utf-8"));
@@ -61793,12 +62656,12 @@ function writeCache(cache) {
     if (!existsSync23(dir)) {
       mkdirSync13(dir, { recursive: true, mode: 448 });
     }
-    writeFileSync14(getCachePath3(), JSON.stringify(cache), { mode: 384 });
+    writeFileSync14(getCachePath2(), JSON.stringify(cache), { mode: 384 });
   } catch {}
 }
 async function fetchLatestVersion() {
   const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS3);
+  const timeout = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS2);
   try {
     const resp = await fetch(REGISTRY_URL, { signal: controller.signal });
     if (!resp.ok)
@@ -61821,29 +62684,29 @@ function buildUpdateHint(channel, npx = false) {
 function styleHint(hint) {
   const match = hint.match(/^(.*)("[^"]+")(.*)$/);
   if (!match)
-    return import_picocolors32.default.dim(hint);
+    return import_picocolors31.default.dim(hint);
   const [, before, command, after] = match;
-  return [before && import_picocolors32.default.dim(before), import_picocolors32.default.cyan(command), after && import_picocolors32.default.dim(after)].filter(Boolean).join("");
+  return [before && import_picocolors31.default.dim(before), import_picocolors31.default.cyan(command), after && import_picocolors31.default.dim(after)].filter(Boolean).join("");
 }
 function buildUpdateNotice(current, latest, channel, interactive, npx = false, width = process.stderr.columns ?? 80) {
   const hint = buildUpdateHint(channel, npx);
   if (interactive) {
     const content = [
-      `Update available: ${import_picocolors32.default.dim(current)} ${import_picocolors32.default.dim("→")} ${import_picocolors32.default.bold(brand(latest))}`,
+      `Update available: ${import_picocolors31.default.dim(current)} ${import_picocolors31.default.dim("→")} ${import_picocolors31.default.bold(brand(latest))}`,
       styleHint(hint)
     ];
     const innerWidth = Math.max(...content.map(visibleWidth2)) + BOX_PADDING * 2;
     const framed = (line) => {
       const pad = innerWidth - visibleWidth2(line);
       const left = Math.floor(pad / 2);
-      return `${import_picocolors32.default.yellow("│")}${" ".repeat(left)}${line}${" ".repeat(pad - left)}${import_picocolors32.default.yellow("│")}`;
+      return `${import_picocolors31.default.yellow("│")}${" ".repeat(left)}${line}${" ".repeat(pad - left)}${import_picocolors31.default.yellow("│")}`;
     };
     const box = [
-      import_picocolors32.default.yellow(`╭${"─".repeat(innerWidth)}╮`),
+      import_picocolors31.default.yellow(`╭${"─".repeat(innerWidth)}╮`),
       framed(""),
       ...content.map(framed),
       framed(""),
-      import_picocolors32.default.yellow(`╰${"─".repeat(innerWidth)}╯`)
+      import_picocolors31.default.yellow(`╰${"─".repeat(innerWidth)}╯`)
     ];
     return `
 ${centerBlock(box, width).join(`
@@ -61861,17 +62724,17 @@ function getAvailableUpdate() {
   const cache = readCache();
   return cache && isNewerVersion(cache.latestVersion, VERSION) ? cache.latestVersion : null;
 }
-function displayNotice2(current, latest) {
+function displayNotice(current, latest) {
   console.error(buildUpdateNotice(current, latest, INSTALL_CHANNEL, process.stderr.isTTY === true, isNpxInvocation()));
 }
 async function checkForUpdates(options = {}) {
   const notify = options.notify ?? true;
   try {
     const cache = readCache();
-    const isStale = !cache || Date.now() - cache.lastCheck > CHECK_INTERVAL_MS3;
+    const isStale = !cache || Date.now() - cache.lastCheck > CHECK_INTERVAL_MS2;
     if (!isStale) {
       if (notify && isNewerVersion(cache.latestVersion, VERSION)) {
-        displayNotice2(VERSION, cache.latestVersion);
+        displayNotice(VERSION, cache.latestVersion);
       }
       return;
     }
@@ -61885,26 +62748,26 @@ async function checkForUpdates(options = {}) {
       logger.debug("update-check", `Cached latest version: ${latest}`);
     }
     if (notify && isNewerVersion(latestKnownVersion, VERSION)) {
-      displayNotice2(VERSION, latestKnownVersion);
+      displayNotice(VERSION, latestKnownVersion);
     }
   } catch (err) {
     logger.error("update-check", `Update check failed: ${err}`);
   }
 }
-var import_picocolors32, CACHE_FILENAME4 = "update-check.json", CHECK_INTERVAL_MS3, FETCH_TIMEOUT_MS3 = 1000, REGISTRY_URL = "https://registry.npmjs.org/-/package/@dosu/cli/dist-tags", SEMVER_PATTERN, BOX_PADDING = 3;
+var import_picocolors31, CACHE_FILENAME3 = "update-check.json", CHECK_INTERVAL_MS2, FETCH_TIMEOUT_MS2 = 1000, REGISTRY_URL = "https://registry.npmjs.org/-/package/@dosu/cli/dist-tags", SEMVER_PATTERN, BOX_PADDING = 3;
 var init_update_check = __esm(() => {
   init_config();
   init_logger();
   init_styles();
   init_layout();
-  import_picocolors32 = __toESM(require_picocolors(), 1);
-  CHECK_INTERVAL_MS3 = 6 * 60 * 60 * 1000;
+  import_picocolors31 = __toESM(require_picocolors(), 1);
+  CHECK_INTERVAL_MS2 = 6 * 60 * 60 * 1000;
   SEMVER_PATTERN = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$/;
 });
 
 // src/version/mcp-refresh-check.ts
 import { existsSync as existsSync24, mkdirSync as mkdirSync14, readFileSync as readFileSync23, writeFileSync as writeFileSync15 } from "node:fs";
-import { join as join40 } from "node:path";
+import { join as join39 } from "node:path";
 function needsMcpRefresh(previous, current) {
   if (previous === null)
     return true;
@@ -61913,12 +62776,12 @@ function needsMcpRefresh(previous, current) {
   const [older, newer] = isNewerVersion(current, previous) ? [previous, current] : [current, previous];
   return MCP_FORMAT_CHANGES.some((change) => isNewerVersion(change, older) && !isNewerVersion(change, newer));
 }
-function getCachePath4() {
-  return join40(getConfigDir(), CACHE_FILENAME5);
+function getCachePath3() {
+  return join39(getConfigDir(), CACHE_FILENAME4);
 }
 function readMcpRefreshCache() {
   try {
-    const path = getCachePath4();
+    const path = getCachePath3();
     if (!existsSync24(path))
       return null;
     const data = JSON.parse(readFileSync23(path, "utf-8"));
@@ -61935,7 +62798,7 @@ function writeMcpRefreshCache(cache) {
     if (!existsSync24(dir)) {
       mkdirSync14(dir, { recursive: true, mode: 448 });
     }
-    writeFileSync15(getCachePath4(), JSON.stringify(cache), { mode: 384 });
+    writeFileSync15(getCachePath3(), JSON.stringify(cache), { mode: 384 });
   } catch {}
 }
 function canRefreshMcp(cfg) {
@@ -61944,10 +62807,10 @@ function canRefreshMcp(cfg) {
     return false;
   return cfg.mode === MODE_OSS || Boolean(target.deployment_id);
 }
-function displayNotice3(names) {
+function displayNotice2(names) {
   console.error(`
-${import_picocolors33.default.green(`✓ Dosu ${VERSION}: refreshed MCP config for ${names.join(", ")}`)}
-` + `${import_picocolors33.default.dim(`  Run ${import_picocolors33.default.cyan('"dosu setup"')} to also update skills, hooks, and rules, then restart your AI agents.`)}
+${import_picocolors32.default.green(`✓ Dosu ${VERSION}: refreshed MCP config for ${names.join(", ")}`)}
+` + `${import_picocolors32.default.dim(`  Run ${import_picocolors32.default.cyan('"dosu setup"')} to also update hooks and rules, then restart your AI agents.`)}
 `);
 }
 function checkForMcpRefresh(options = {}) {
@@ -61969,31 +62832,63 @@ function checkForMcpRefresh(options = {}) {
     writeMcpRefreshCache({ version: VERSION });
     logger.info("mcp-refresh", `Version ${VERSION}: refreshed ${result.updated.length}, failed ${result.failed.length}`);
     if (notify && result.updated.length > 0) {
-      displayNotice3(result.updated.map((provider) => provider.name()));
+      displayNotice2(result.updated.map((provider) => provider.name()));
     }
   } catch (err) {
     logger.error("mcp-refresh", `MCP refresh check failed: ${err}`);
   }
 }
-var import_picocolors33, CACHE_FILENAME5 = "mcp-refresh.json", MCP_FORMAT_CHANGES;
+var import_picocolors32, CACHE_FILENAME4 = "mcp-refresh.json", MCP_FORMAT_CHANGES;
 var init_mcp_refresh_check = __esm(() => {
   init_config();
   init_logger();
   init_refresh();
   init_update_check();
-  import_picocolors33 = __toESM(require_picocolors(), 1);
+  import_picocolors32 = __toESM(require_picocolors(), 1);
   MCP_FORMAT_CHANGES = ["0.53.0"];
 });
 
+// src/version/skill-update-check.ts
+function displayNotice3() {
+  console.error(`
+${import_picocolors33.default.green(`✓ Dosu ${VERSION}: refreshed the bundled agent skills`)}
+` + `${import_picocolors33.default.dim("  Restart your AI agents to pick up the new skill content.")}
+`);
+}
+function checkForSkillUpdates(options = {}) {
+  const notify = options.notify ?? true;
+  try {
+    const state = readSkillInstallState();
+    if (!state || state.version === VERSION)
+      return;
+    const result = installBundledSkills(state.agents);
+    if (!result.success) {
+      logger.error("skill-update-check", `Skill refresh to ${VERSION} failed; will retry`);
+      return;
+    }
+    logger.info("skill-update-check", `Refreshed skills from ${state.version} to ${VERSION}`);
+    if (notify && result.version)
+      displayNotice3();
+  } catch (err) {
+    logger.error("skill-update-check", `Skill update check failed: ${err}`);
+  }
+}
+var import_picocolors33;
+var init_skill_update_check = __esm(() => {
+  init_skill();
+  init_logger();
+  import_picocolors33 = __toESM(require_picocolors(), 1);
+});
+
 // src/rules/installer.ts
 import { existsSync as existsSync25, mkdirSync as mkdirSync15, readFileSync as readFileSync24, unlinkSync as unlinkSync5, writeFileSync as writeFileSync16 } from "node:fs";
 import { homedir as homedir12 } from "node:os";
-import { dirname as dirname11, join as join41 } from "node:path";
+import { dirname as dirname12, join as join40 } from "node:path";
 function claudeConfigDir4() {
-  return process.env.CLAUDE_CONFIG_DIR || join41(homedir12(), ".claude");
+  return process.env.CLAUDE_CONFIG_DIR || join40(homedir12(), ".claude");
 }
 function codexHome4() {
-  return process.env.CODEX_HOME || join41(homedir12(), ".codex");
+  return process.env.CODEX_HOME || join40(homedir12(), ".codex");
 }
 function isRuleAgent(agent) {
   return Object.hasOwn(RULE_TARGETS, agent);
@@ -62019,7 +62914,7 @@ async function fetchDosuRule(fetchImpl = globalThis.fetch) {
   return normalizeRule(FALLBACK_DOSU_RULE);
 }
 function ensureParent(path) {
-  mkdirSync15(dirname11(path), { recursive: true });
+  mkdirSync15(dirname12(path), { recursive: true });
 }
 function writeIfChanged(path, content) {
   if (!existsSync25(path)) {
@@ -62135,39 +63030,39 @@ var init_installer = __esm(() => {
   RULE_TARGETS = {
     claude: {
       kind: "file",
-      path: () => join41(claudeConfigDir4(), "rules", "dosu.md")
+      path: () => join40(claudeConfigDir4(), "rules", "dosu.md")
     },
     cursor: {
       kind: "file",
-      path: () => join41(homedir12(), ".cursor", "rules", "dosu.mdc"),
+      path: () => join40(homedir12(), ".cursor", "rules", "dosu.mdc"),
       cursorFrontmatter: true
     },
     codex: {
       kind: "section",
-      path: () => join41(codexHome4(), "AGENTS.md")
+      path: () => join40(codexHome4(), "AGENTS.md")
     },
     opencode: {
       kind: "section",
-      path: () => join41(homedir12(), ".config", "opencode", "AGENTS.md")
+      path: () => join40(homedir12(), ".config", "opencode", "AGENTS.md")
     },
     gemini: {
       kind: "section",
-      path: () => join41(homedir12(), ".gemini", "GEMINI.md")
+      path: () => join40(homedir12(), ".gemini", "GEMINI.md")
     },
     antigravity: {
       kind: "section",
-      path: () => join41(homedir12(), ".gemini", "GEMINI.md")
+      path: () => join40(homedir12(), ".gemini", "GEMINI.md")
     }
   };
 });
 
 // src/setup/agents-md-step.ts
-import { execSync as execSync3 } from "node:child_process";
+import { execSync as execSync2 } from "node:child_process";
 import { existsSync as existsSync26, readFileSync as readFileSync25, writeFileSync as writeFileSync17 } from "node:fs";
-import { join as join42 } from "node:path";
+import { join as join41 } from "node:path";
 function inGitWorkTree(cwd = process.cwd()) {
   try {
-    const stdout = execSync3("git rev-parse --is-inside-work-tree", {
+    const stdout = execSync2("git rev-parse --is-inside-work-tree", {
       cwd,
       stdio: ["ignore", "pipe", "ignore"]
     });
@@ -62178,7 +63073,7 @@ function inGitWorkTree(cwd = process.cwd()) {
 }
 function dosuAgentsSectionState(cwd = process.cwd()) {
   try {
-    const path = join42(cwd, "AGENTS.md");
+    const path = join41(cwd, "AGENTS.md");
     if (!existsSync26(path))
       return "missing";
     const content = readFileSync25(path, "utf-8");
@@ -62216,7 +63111,7 @@ function findSection2(content) {
   return { start, end };
 }
 function upsertDosuAgentsSection(cwd = process.cwd(), content = FALLBACK_DOSU_RULE) {
-  const path = join42(cwd, "AGENTS.md");
+  const path = join41(cwd, "AGENTS.md");
   if (!existsSync26(path)) {
     const section = buildDosuAgentsSection(content);
     writeFileSync17(path, `${section}
@@ -62293,9 +63188,9 @@ var MCP_PROVIDER_SLUG2 = "dosu_mcp";
 // src/sessions/session-title.ts
 import { existsSync as existsSync27, mkdirSync as mkdirSync16, readFileSync as readFileSync26, renameSync as renameSync6, statSync as statSync9, writeFileSync as writeFileSync18 } from "node:fs";
 import { homedir as homedir13 } from "node:os";
-import { join as join43 } from "node:path";
+import { join as join42 } from "node:path";
 function cachePath2(configDir) {
-  return join43(configDir, CACHE_FILENAME6);
+  return join42(configDir, CACHE_FILENAME5);
 }
 function loadCacheFile2(configDir) {
   try {
@@ -62352,10 +63247,10 @@ function reconstructSession(harness, id, slug, home = homedir13(), exists = exis
     return null;
   const candidates = [];
   if (harness === "claude") {
-    candidates.push(join43(home, ".claude", "projects", slug, `${id}.jsonl`));
+    candidates.push(join42(home, ".claude", "projects", slug, `${id}.jsonl`));
   } else if (harness === "cursor") {
-    const project = join43(home, ".cursor", "projects", slug);
-    candidates.push(join43(project, "agent-transcripts", id, `${id}.jsonl`), join43(project, "agent-transcripts", `${id}.jsonl`));
+    const project = join42(home, ".cursor", "projects", slug);
+    candidates.push(join42(project, "agent-transcripts", id, `${id}.jsonl`), join42(project, "agent-transcripts", `${id}.jsonl`));
   } else {
     return null;
   }
@@ -62418,7 +63313,7 @@ function createSessionTitleResolver(configDir = getConfigDir(), deps = {}) {
     }
   };
 }
-var CACHE_FILENAME6 = "session-titles.json", CACHE_SCHEMA_VERSION2 = 3, HEAD_LINES2 = 50, SESSION_NAME_MAX = 80;
+var CACHE_FILENAME5 = "session-titles.json", CACHE_SCHEMA_VERSION2 = 3, HEAD_LINES2 = 50, SESSION_NAME_MAX = 80;
 var init_session_title = __esm(() => {
   init_config();
   init_read();
@@ -63930,9 +64825,9 @@ async function runInstallSkill(providers) {
   const agentLabel = providers.length === 1 ? "agent" : "agents";
   spinner.start(`Installing skill for ${providers.length} ${agentLabel}`);
   try {
-    const result = await installSkill(providers.map((provider) => provider.id()), { quiet: true });
+    const result = await installSkill(providers.map((provider) => provider.id()));
     if (result.success) {
-      logger.info("setup", `Skill installed${result.sha ? ` sha=${result.sha}` : ""}`);
+      logger.info("setup", `Skill installed${result.version ? ` v${result.version}` : ""}`);
       const items = providers.flatMap((provider) => {
         const target = skillInstallTargetForProvider(provider.id());
         if (!target)
@@ -66079,7 +66974,7 @@ async function runAgentSetup(opts) {
   }
   if (skillAgentIDsForProviders([provider.id()]).length > 0) {
     try {
-      const skill = await installSkill([provider.id()], { quiet: true });
+      const skill = await installSkill([provider.id()]);
       if (!skill.success) {
         throw new Error("the skills installer failed");
       }
@@ -66087,7 +66982,8 @@ async function runAgentSetup(opts) {
         step: "skill_install",
         tool: provider.id(),
         tool_name: provider.name(),
-        source: "dosu-ai/dosu-skill"
+        source: "@dosu/cli",
+        version: skill.version
       });
     } catch (err) {
       emitError({
@@ -66469,7 +67365,7 @@ function createProgram(options = {}) {
       if (!process.env.CI) {
         await checkForUpdates({ notify: !launchesTUI });
       }
-      checkForSkillUpdates();
+      checkForSkillUpdates({ notify: !launchesTUI });
       checkForReadyTasks();
       if (shouldRunMcpRefreshCheck(actionCommand)) {
         checkForMcpRefresh({ notify: !launchesTUI });
@@ -66947,4 +67843,4 @@ main().catch((err) => {
   process.exit(1);
 });
 
-//# debugId=9cb59d41-7339-0702-6475-6e2164756e21
+//# debugId=bd089d5e-a4ab-0f80-6475-6e2164756e21