@iseoane/agent-depot 0.6.3 → 0.6.5

package/CHANGELOG.md

@@ -7,6 +7,100 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.6.5] - 2026-10-29
+
+### Added
+
+- The TUI shows a spinner, a specific label and, after one second, the elapsed
+  time (for example `⠹ Installing foo… 3s`) for every wait: loading views,
+  Source, Catalog, Package, App, Installation and Profile actions, update checks
+  and applies, and the background App status and export-name checks. Set
+  `AGENT_DEPOT_NO_ANIMATION=1` for a static `·` and no elapsed time instead of
+  the animated spinner.
+- CLI commands now report progress on stderr during long steps instead of
+  printing nothing: `source refresh`/`remove`, `skill remove` and host
+  changes, `install`, `update`, `uninstall`, `self update`, `app`, `package
+  install|update|uninstall` and profile `export`/`import`. On an interactive
+  terminal a spinner with the step label and, after one second, the elapsed time
+  is shown and erased before results or errors print; when stderr is not a
+  terminal (CI, pipes, logs) each step prints one plain line such as
+  `Installing portable/demo…`. `AGENT_DEPOT_NO_ANIMATION=1` prints that static
+  line with a `·` on a terminal, and so do the steps that run `git` (`source
+  refresh` and confirmed installs from a Git Source), because git can ask for
+  credentials on the terminal and a spinner must never redraw over a prompt.
+  stdout is unchanged, so JSON output stays parseable.
+- On an interactive terminal the CLI spinner now shows the last three lines of
+  output of the step's child processes (npm, pi, git, App and Package commands)
+  under it, cut to the terminal width and erased with the spinner when the step
+  ends; a failure still prints its captured output. Steps that may prompt stay on
+  one static line, and with no terminal or `AGENT_DEPOT_NO_ANIMATION=1` nothing
+  changes. The TUI is not affected.
+- A global `--verbose` flag, accepted anywhere on the command line, streams the
+  full child output to stderr line by line as it runs, instead of the spinner and
+  tail; steps print one plain line each, so it is also safe next to a prompt.
+  stdout is unchanged. Terminal escape sequences in child output are stripped,
+  and a failing command's output still appears again in its error message.
+
+### Fixed
+
+- A fresh Pi Package install no longer reports `local changes` and `verified=unknown`
+  when npm's generated dependency-free root `package-lock.json` records `bin`
+  metadata. The lock is accepted only when its `bin` equals npm's normalized form
+  of the `HEAD` manifest `bin`; any other lock content or local change still blocks.
+- On Windows, Pi Package checkouts are no longer reported as "not the root of
+  its Git checkout", which hid their installed version and update evidence. The
+  checkout root is now compared by canonical path.
+- On Windows, concurrent Agent Depot processes now wait for a busy Source,
+  Package or Git cache lock instead of failing with a raw `EPERM`/`EACCES`.
+- On Windows, installing a Package whose host CLI is an npm global such as `pi`
+  no longer fails with `spawn ... ENOENT`. Executable lookup now only accepts
+  `PATHEXT` candidates, so npm's extensionless shell shim is skipped in favor of
+  `pi.cmd`, and `.cmd`/`.bat` files run through `cmd.exe` with escaped arguments.
+- Importing a Profile no longer reports `Loading Profile…` while it installs and
+  uninstalls; it says `Applying import…`.
+- On Windows, a timeout or output limit on any command now terminates its whole
+  process tree with `taskkill /T /F` instead of only the command itself. For an
+  npm `.cmd` shim such as `pi` that used to stop only `cmd.exe` and leave the host
+  CLI running with the output pipes open. The result is still reported as
+  terminated by `SIGTERM` and is returned within two seconds of the kill even if
+  a process survives.
+- On Linux and macOS, a timeout or output limit on any command now terminates the
+  command and every process it had started (found with `ps`) instead of only the
+  command itself: `SIGTERM` first, then `SIGKILL` after two seconds. A wrapper that
+  forks, or a command that ignores `SIGTERM`, used to leave `agent-depot` waiting
+  forever for output pipes that never closed. The result is still reported as
+  terminated by `SIGTERM` and is returned within about four seconds of the kill even
+  if a process that had already left the command's process tree survives. The
+  command stays in Agent Depot's process group, so Ctrl-C still stops it and
+  `git`/`ssh` can still prompt on the terminal.
+- The Sources list no longer flashes "No sources or App recipes" while recipes
+  load.
+- The Package approval, lifecycle confirmation and forget panels no longer
+  overlap their text when they are taller than the terminal, as a long working
+  directory makes them. They now page like the Updates preview (arrows, PgUp/PgDn,
+  `j`/`k`), show `Review N of M` and the visible row window while more remains, and
+  take the panel's own view instead of sitting under the list. `y` and `n` answer
+  from any page, as before.
+- The Profile export name stage and the file picker now stay inside short
+  terminals. In the name stage a long folder or destination keeps its label and
+  its end (the last folders and the file name) behind a `…`, and with room for
+  three rows also its first row and a count of the rows left out; the typed name
+  keeps its end so the cursor stays in view. The confirmation that follows pages
+  the whole destination. The picker trims its path and key hints to one line each
+  when the full ones would leave no room for the folder list, and its full-path
+  view (`p`) scrolls with `j`/`k` or PgUp/PgDn.
+- The Profile export and import confirmation could not be scrolled past as many
+  rows as it has source lines, so the end of a long wrapped destination stayed out
+  of reach on a short terminal. Its paging now counts wrapped rows.
+
+## [0.6.4] - 2026-10-23
+
+### Fixed
+
+- Portable Skills can now contain up to 32 MiB of files instead of 8 MiB,
+  allowing larger Skills such as Archify to install and update. The 2 MiB
+  per-file limit and all other safety checks remain unchanged.
+
 ## [0.6.3] - 2026-10-13
 
 ### Fixed

package/README.es.md

@@ -533,8 +533,8 @@ confirmar):
 | Vista | Teclas |
 | --- | --- |
 | Sources | `j`/`k` recorren Sources de Git y recetas App. `Enter` abre el Catálogo de una Source de Git o previsualiza/aprueba una receta App. Aprobarla no instala la App. `n` añade una Source reutilizable o guía la creación de recetas; `r` refresca Sources o recarga el estado de recetas; `d` elimina. `space`/`a` solo marcan Sources de Git. La previsualización de refresco muestra todas las Sources seleccionadas; usa `j`/`k` o PgUp/PgDn para revisarlas antes de `y`; `n` cancela. |
-| Catalog | `Enter`/flechas expanden y contraen; `space` marca el Skill disponible resaltado; `a` marca o desmarca los Skills disponibles visibles de su Source; `i` inicia la instalación de los Skills marcados o del Skill, Package o App aprobada cuya ausencia se verificó y que está resaltada. Confirma la instalación de una App por separado con `y`. `/` filtra y `s` amplía la vista de una Source a todas. Las marcas de otras Sources se conservan y no se instalan Skills ocultos por el filtro. |
-| Installations | `Enter`/flechas expanden y contraen. En filas globales de usuario, `u` inicia la desinstalación de una App o Skill gestionada, o elimina un Skill no gestionado; los Skills de proyecto no se pueden eliminar. `h` o `i` añade Hosts a una instalación global de usuario, y `A` o `Enter` adopta un Skill no gestionado. `space` marca una hoja y `a` marca todas las hojas visibles; las acciones por lotes omiten instalaciones de proyecto con un motivo. En una fila de App, `u` previsualiza la desinstalación y `h` selecciona setup/teardown; las recetas modificadas requieren una nueva aprobación. En una fila de Package, `i` previsualiza el plan de instalación congelado y lo ejecuta, aprobando antes el recibo si falta; `Enter` solo aprueba la declaración de instalación; `U` actualiza, `u` desinstala y `f` olvida el registro de selección. Las filas de Package no se pueden marcar para acciones por lotes. |
+| Catalog | `Enter`/flechas expanden y contraen; `space` marca el Skill disponible resaltado; `a` marca o desmarca los Skills disponibles visibles de su Source; `i` inicia la instalación de los Skills marcados o del Skill, Package o App aprobada cuya ausencia se verificó y que está resaltada. Un Package abre el mismo panel paginado que en Installations; confirma la instalación de una App por separado con `y`. `/` filtra y `s` amplía la vista de una Source a todas. Las marcas de otras Sources se conservan y no se instalan Skills ocultos por el filtro. |
+| Installations | `Enter`/flechas expanden y contraen. En filas globales de usuario, `u` inicia la desinstalación de una App o Skill gestionada, o elimina un Skill no gestionado; los Skills de proyecto no se pueden eliminar. `h` o `i` añade Hosts a una instalación global de usuario, y `A` o `Enter` adopta un Skill no gestionado. `space` marca una hoja y `a` marca todas las hojas visibles; las acciones por lotes omiten instalaciones de proyecto con un motivo. En una fila de App, `u` previsualiza la desinstalación y `h` selecciona setup/teardown; las recetas modificadas requieren una nueva aprobación. En una fila de Package, `i` previsualiza el plan de instalación congelado y lo ejecuta, aprobando antes el recibo si falta; `Enter` solo aprueba la declaración de instalación; `U` actualiza, `u` desinstala y `f` olvida el registro de selección. Cada una abre su propio panel, que se pagina cuando es más alto que el terminal: las flechas o PageUp/PageDown avanzan una página visible, `j`/`k` una fila, y `Review N of M` con la ventana de filas indica dónde estás. `y` y `n` responden desde cualquier página. Las filas de Package no se pueden marcar para acciones por lotes. |
 | Updates | `space` marca una actualización, `a` marca todas las actualizaciones disponibles y `t`/`p`/`g` selecciona todo, el ámbito de proyecto o el global de usuario. `Enter` previsualiza las filas marcadas; `u` previsualiza el lote seleccionado; ninguna aplica actualizaciones. `r` vuelve a comprobar y las flechas izquierda/derecha pliegan o despliegan el grupo "cannot be checked". En una previsualización, las flechas o PageUp/PageDown avanzan una página visible y `j`/`k` una fila. Revisa todas las filas antes de `y`; `n` cancela. Las filas desconocidas son informativas. Packages y Apps solo se gestionan en el ámbito global de usuario; Packages requieren aprobación de acción antes de ejecutar una actualización. |
 | Profile | Pulsa `e` para exportar o `i` para importar. Consulta el [flujo de Profile](#flujo-de-profile) para ver la navegación, la selección, las previsualizaciones y las cancelaciones. |
 
@@ -561,12 +561,16 @@ la raíz del proyecto, salvo que la aplicación indique otro directorio inicial.
 3. Elige una carpeta de destino. Muévete con `j`/`k` o las flechas; pulsa
    `Enter` para abrir una carpeta o selecciona **Use this folder** para elegir
    la carpeta actual. Usa Izquierda o Retroceso para subir a la carpeta
-   superior. Pulsa `p` para mostrar la ruta completa y otra vez `p` para volver
-   al listado. `Esc` vuelve a la lista de exportación.
+   superior. Pulsa `p` para mostrar la ruta completa, que se desplaza con `j`/`k` o
+   `PageUp`/`PageDown` si es más alta que el terminal, y otra vez `p` para volver
+   al listado. En un terminal bajo, el selector acorta la ruta y las indicaciones
+   de teclas a una línea cada una para que la lista de carpetas siga visible.
+   `Esc` vuelve a la lista de exportación.
 4. Edita el nombre del archivo. El valor predeterminado es
    `agent-depot-profile.json`. `Ctrl+U` borra el nombre y se añade `.json` si
-   falta una extensión. El editor muestra la ruta completa de destino. Pulsa
-   `Enter` para revisarla. Si la ruta ya existe, incluido un enlace simbólico,
+   falta una extensión. El editor muestra la carpeta, el nombre y el destino; en un terminal bajo, una
+   carpeta o un destino largos conservan su final tras un `…` (la confirmación del
+   paso siguiente muestra el destino completo). Pulsa `Enter` para revisarla. Si la ruta ya existe, incluido un enlace simbólico,
    aparece un error en línea y puedes elegir otro nombre; la exportación nunca
    sobrescribe. `Esc` vuelve al selector de carpetas.
 5. Revisa la previsualización de exportación, incluidas las exclusiones y
@@ -582,8 +586,8 @@ la raíz del proyecto, salvo que la aplicación indique otro directorio inicial.
    los archivos y otra vez `f` para filtrar de nuevo por `.json`. Navega con
    `j`/`k` o las flechas; pulsa `Enter` para abrir una carpeta o seleccionar un
    archivo, e Izquierda o Retroceso para subir a la carpeta superior. Pulsa `p`
-   para mostrar la ruta completa y otra vez `p` para volver. `Esc` vuelve a la
-   vista Profile.
+   para mostrar la ruta completa (se desplaza con `j`/`k` o `PageUp`/`PageDown`
+   si es larga) y otra vez `p` para volver. `Esc` vuelve a la vista Profile.
 2. El archivo seleccionado se analiza y previsualiza. Si no se puede leer o
    no es válido, aparece un error en línea y el selector permanece abierto para
    elegir otro archivo. La lista de importación marca cada elemento como
@@ -602,7 +606,7 @@ Las recetas importadas siguen sin aprobarse. La importación no instala Apps ni
 Packages ni ejecuta comandos del Host. Las réplicas solo describen identidades
 en la máquina de origen; no transfieren aprobaciones ni estado de instalación.
 
-Las demás previsualizaciones desplazables de la TUI muestran todas las declaraciones y los términos de ejecución. Usa `j`/`k` para avanzar una fila o las flechas y `PageUp`/`PageDown` para avanzar una página visible. Confirma solo después de mostrar cada fila física. Si cambias el tamaño del terminal, revisa las filas que aún no se han mostrado.
+Las demás previsualizaciones desplazables de la TUI muestran todas las declaraciones y los términos de ejecución. Usa `j`/`k` para avanzar una fila o las flechas y `PageUp`/`PageDown` para avanzar una página visible. Las previsualizaciones de Apps, recetas, actualización de Sources y Updates solo aceptan `y` después de mostrar cada fila física; si cambias el tamaño del terminal, revisa las filas que aún no se han mostrado. Los paneles de Packages y las confirmaciones de Perfil muestran la misma ventana de filas y aceptan `y`/`n` desde cualquier página.
 
 Al eliminar una receta App se comprueban su comando de versión aprobado y su
 seguimiento. Si la App está instalada o sigue registrada, la TUI ofrece el flujo
@@ -1105,7 +1109,7 @@ Packages. Las exclusiones y los conflictos no pueden seleccionarse.
 La exportación y la importación comparten un navegador de directorios que empieza en la
 raíz del proyecto, lista carpetas (y, al importar, archivos `.json`) y se mueve con
 `j`/`k` o las flechas. La exportación elige una carpeta y luego rellena
-`agent-depot-profile.json` en un campo editable que muestra el destino completo;
+`agent-depot-profile.json` en un campo editable que muestra la carpeta, el nombre y el destino (en un terminal bajo una ruta larga conserva su final, y la confirmación pagina el destino completo);
 `Ctrl+U` lo borra, un nombre sin extensión recibe `.json`, y un archivo o enlace
 simbólico existente se rechaza en ese paso para volver a escribirlo. La importación
 navega hasta un archivo existente; `f` alterna entre archivos `.json` y todos los

package/README.md

@@ -136,6 +136,15 @@ agent-depot tui
 agent-depot --version
 ```
 
+While a command runs a long step, progress goes to stderr (stdout never changes). On
+a terminal a spinner shows the step and, under it, the last three lines the step's
+child processes (npm, pi, git, App commands) print; both are erased when the step
+ends, and a failure still prints its captured output. Steps that may prompt (for
+example `git` asking for credentials) stay on one static line. Add `--verbose`
+anywhere on the command line to stream the full child output to stderr line by line
+instead, with plain step lines and no spinner. Without a terminal, or with
+`AGENT_DEPOT_NO_ANIMATION=1`, only the plain step line is printed.
+
 GitHub directory URLs such as `https://github.com/cursor/plugins/tree/main/pstack`
 are also supported: Agent Depot clones the repository, reads the URL's ref, and
 only discovers Skills inside that directory. Skill paths stay repository-relative.
@@ -483,8 +492,8 @@ Keys per view (prompts also accept `Esc` to cancel and `y`/`n` to confirm):
 | View | Keys |
 | --- | --- |
 | Sources | `j`/`k` move through Git Sources and App recipes. `Enter` opens the Catalog for a Git Source or previews/approves an App recipe. Approval does not install the App. `n` adds a Git Source or guides recipe authoring; `r` refreshes Sources or reloads recipe status; `d` removes. `space`/`a` mark Git Sources only. Refresh previews show every selected Source; review every physical row before `y`. `n` cancels. |
-| Catalog | `Enter`/arrows expand and collapse, `space` marks the highlighted loose Skill, `a` marks or clears the visible loose Skills in its Source, and `i` starts installation for marked Skills or the highlighted Skill, Package, or verified-absent approved App. Confirm an App install separately with `y`. `/` filters and `s` widens a Source view to all Sources. Marks in other Sources remain unchanged; Skills hidden by the filter are not installed. |
-| Installations | `Enter`/arrows expand and collapse. On user-global rows, `u` starts an App or managed Skill uninstall, or removes an unmanaged Skill; project Skills cannot be removed. `h` or `i` adds Hosts to a user-global Skill installation, and `A` or `Enter` adopts an unmanaged Skill. `space` marks a leaf and `a` marks all visible leaves; bulk actions skip project installations with a reason. On an App row, `u` previews uninstall and `h` selects setup/teardown; changed recipes must be approved again before commands run. On a Package row, `i` previews the frozen install plan and runs it, approving the receipt first when it is missing; `Enter` approves the install declaration only, `U` updates, `u` uninstalls, and `f` forgets the selection record. Package rows are not markable for bulk actions. |
+| Catalog | `Enter`/arrows expand and collapse, `space` marks the highlighted loose Skill, `a` marks or clears the visible loose Skills in its Source, and `i` starts installation for marked Skills or the highlighted Skill, Package, or verified-absent approved App. A Package opens the same paged panel as in Installations; confirm an App install separately with `y`. `/` filters and `s` widens a Source view to all Sources. Marks in other Sources remain unchanged; Skills hidden by the filter are not installed. |
+| Installations | `Enter`/arrows expand and collapse. On user-global rows, `u` starts an App or managed Skill uninstall, or removes an unmanaged Skill; project Skills cannot be removed. `h` or `i` adds Hosts to a user-global Skill installation, and `A` or `Enter` adopts an unmanaged Skill. `space` marks a leaf and `a` marks all visible leaves; bulk actions skip project installations with a reason. On an App row, `u` previews uninstall and `h` selects setup/teardown; changed recipes must be approved again before commands run. On a Package row, `i` previews the frozen install plan and runs it, approving the receipt first when it is missing; `Enter` approves the install declaration only, `U` updates, `u` uninstalls, and `f` forgets the selection record. Each of these opens its own panel, which pages when it is taller than the terminal: arrows or PageUp/PageDown move by a visible page, `j`/`k` by one row, and `Review N of M` with the row window shows where you are. `y` and `n` answer from any page. Package rows are not markable for bulk actions. |
 | Updates | `space` marks an update, `a` marks all available updates, and `t`/`p`/`g` selects all, project, or user-global scope. `Enter` previews the marked rows; `u` previews the selected batch; neither applies updates. `r` checks again, and left/right arrows fold or unfold the "cannot be checked" group. In a preview, arrows or PageUp/PageDown move by a visible page and `j`/`k` move one row. Review every row before `y`; `n` cancels. Unknown rows are informational. Packages and Apps are user-global only; Packages need action approval before update execution. |
 | Profile | Press `e` to export or `i` to import. See [Profile workflow](#profile-workflow) for navigation, selection, previews, and cancellation. |
 
@@ -508,11 +517,15 @@ the application supplies another start directory.
 3. Choose a destination folder. Move with `j`/`k` or the arrows, press `Enter`
    to open a folder, or select **Use this folder** to choose the current one.
    Use Left or Backspace to go to the parent. Press `p` to show the full
-   directory path; press `p` again to return to the listing. `Esc` returns to
-   the checklist.
+   directory path, which scrolls with `j`/`k` or `PageUp`/`PageDown` when it is
+   taller than the terminal; press `p` again to return to the listing. On a
+   short terminal the picker shortens the path and the key hints to one line
+   each so the folder list stays visible. `Esc` returns to the checklist.
 4. Edit the file name. The default is `agent-depot-profile.json`. `Ctrl+U`
    clears the name, and a name without an extension gets `.json`. The editor
-   shows the complete destination path. Press `Enter` to review it. If the path
+   shows the folder, the name and the destination; on a short terminal a long
+   folder or destination keeps its end behind a `…` (the confirmation in the next
+   step shows the whole destination). Press `Enter` to review it. If the path
    already exists, including a symlink, the view reports an inline error and
    lets you choose another name; export never overwrites. `Esc` returns to the
    folder picker.
@@ -527,7 +540,8 @@ the application supplies another start directory.
    `.json` files and folders. Press `f` to show every file, `f` again to filter
    back to `.json`. Navigate with `j`/`k` or the arrows, use `Enter` to open a
    folder or select a file, and Left or Backspace to go to the parent. Press
-   `p` to show the full directory path and `p` again to return. `Esc` returns
+   `p` to show the full directory path (it scrolls with `j`/`k` or
+   `PageUp`/`PageDown` when it is long) and `p` again to return. `Esc` returns
    to the Profile view.
 2. The selected file is parsed and previewed. If it is invalid or cannot be
    read, an inline error appears and the picker stays open so you can choose
@@ -545,7 +559,7 @@ Imported recipes remain unapproved. Import does not install Apps or Packages or
 run Host commands. Replica entries describe identity on the exporting machine
 only. They do not confer approval or installed state.
 
-Scrollable previews elsewhere in the TUI show every declaration and execution term. Use `j`/`k` to move one row, or the arrows and `PageUp`/`PageDown` to move by a visible page. Confirm only after every physical row has been displayed. Resizing a preview requires reviewing any rows that have not yet been displayed.
+Scrollable previews elsewhere in the TUI show every declaration and execution term. Use `j`/`k` to move one row, or the arrows and `PageUp`/`PageDown` to move by a visible page. App, recipe, Sources refresh and Updates previews accept `y` only after every physical row has been displayed, and resizing one requires reviewing any rows not yet displayed. Package panels and Profile confirmations show the same row window and accept `y`/`n` from any page.
 
 Removing an App recipe checks its approved version command and tracked state.
 If the App is installed or tracked, the TUI offers the existing uninstall flow;
@@ -1006,7 +1020,7 @@ automatically installs Apps or Packages. Exclusions and conflicts cannot be sele
 Export and import share one directory browser that starts at the project root, lists
 folders (and, for import, `.json` files), and moves with `j`/`k` or the arrows. Export
 picks a folder, then pre-fills `agent-depot-profile.json` in an editable name field that
-shows the complete destination; `Ctrl+U` clears it, a name without an extension gains
+shows the folder, the name and the destination (a long path keeps its end on a short terminal, and the confirmation pages the whole destination); `Ctrl+U` clears it, a name without an extension gains
 `.json`, and an existing file or symlink is refused at that step so you can retype.
 Import browses to an existing file; `f` switches between `.json` files and every file,
 and a malformed file reports inline while the browser stays open. Export creates a new

package/dist/src/app-cli.js

@@ -1,8 +1,12 @@
 import { PROJECT_HOSTS } from "./project-manifest.js";
 import { APP_RECIPE_SCHEMA } from "./app-schema.js";
 import { checkAppUpdates } from "./app-flow.js";
+import { NO_PROGRESS } from "./progress.js";
 import { CliUsageError } from "./usage-error.js";
-export async function runAppCommand(values, apps, output) {
+const ACTION_PROGRESS = {
+    install: "Installing", update: "Updating", uninstall: "Uninstalling", setup: "Setting up", teardown: "Tearing down",
+};
+export async function runAppCommand(values, apps, output, progress = NO_PROGRESS) {
     const [command, ...args] = values;
     const usage = "Usage: agent-depot app schema|list; app validate <file>...; app approve <name> [--yes]; app install|update|uninstall <name> [--yes] [--manual-done]; app setup|teardown <name> --host <host>... [--yes] [--manual-done]; app uninstall <name> --forget [--yes] (--manual-done requires a declared manual step)";
     if (command === "schema" && args.length === 0) {
@@ -10,12 +14,12 @@ export async function runAppCommand(values, apps, output) {
         return 0;
     }
     if (command === "list" && args.length === 0) {
-        for (const update of await checkAppUpdates(apps))
+        for (const update of await progress.run("Checking App updates", () => checkAppUpdates(apps)))
             await show(update.entry, update);
         return 0;
     }
     if (command === "install" || command === "update" || command === "uninstall" || command === "setup" || command === "teardown") {
-        return runLifecycle(command, args, apps, output, usage);
+        return runLifecycle(command, args, apps, output, usage, progress);
     }
     if (command !== "validate" && command !== "approve")
         throw new CliUsageError(usage);
@@ -76,7 +80,7 @@ export async function runAppCommand(values, apps, output) {
         output(columns.join("\t"));
     }
 }
-async function runLifecycle(action, args, apps, output, usage) {
+async function runLifecycle(action, args, apps, output, usage, progress) {
     const hostAction = action === "setup" || action === "teardown";
     const hosts = [];
     const remaining = [];
@@ -145,7 +149,8 @@ async function runLifecycle(action, args, apps, output, usage) {
             output(`Manual (never executed): ${plan.manual}`);
     }
     async function applyPlan(plan) {
-        const result = done ? await apps.completeManual(plan, true) : await apps.executeLifecycle(plan, true);
+        const label = `${done ? "Checking" : ACTION_PROGRESS[action]} App ${name}${plan.host ? ` (${plan.host})` : ""}`;
+        const result = await progress.run(label, () => done ? apps.completeManual(plan, true) : apps.executeLifecycle(plan, true));
         output(`${name}${plan.host ? ` (${plan.host})` : ""}: ${describeAppResult(result)}`);
         if (result.reason)
             output(result.reason);

package/dist/src/app-flow.js

@@ -387,12 +387,12 @@ export function createAppOperations(environment = {}) {
         let result;
         try {
             result = await runner(plan.executable, plan.argv.slice(1), {
-                cwd: home, captureStdout: true, maxOutputBytes: APP_OUTPUT_LIMIT, maxStderrBytes: APP_OUTPUT_LIMIT,
+                cwd: home, captureStdout: true, streamStdout: true, maxOutputBytes: APP_OUTPUT_LIMIT, maxStderrBytes: APP_OUTPUT_LIMIT,
             });
         }
         catch (error) {
             const code = error?.code;
-            if (!code || !["ENOENT", "EACCES", "ENOEXEC", "EPERM"].includes(code))
+            if (!code || !["ENOENT", "EACCES", "ENOEXEC", "EPERM", "EINVAL"].includes(code))
                 throw error;
             const detail = error instanceof Error ? error.message : String(error);
             return manualFallback(plan, code === "ENOENT"

package/dist/src/atomic-file.js

@@ -24,3 +24,12 @@ export async function writeFileAtomically(file, contents, options = {}) {
         });
     }
 }
+/**
+ * Whether a failed `mkdir` of a lock directory means another process holds it. Windows reports
+ * EPERM or EACCES instead of EEXIST while the holder's `rmdir` is still completing, so a concurrent
+ * waiter must retry rather than fail.
+ */
+export function isLockContention(error, platform = process.platform) {
+    const code = typeof error === "object" && error !== null && "code" in error ? error.code : undefined;
+    return code === "EEXIST" || (platform === "win32" && (code === "EPERM" || code === "EACCES"));
+}