@kal-elsam/kairo-runtime 0.13.1 → 0.15.0

package/CHANGELOG.md

@@ -5,6 +5,113 @@ Historical entries below may reference the legacy `@kal-elsam/harness` package n
 
 ## Unreleased
 
+## 0.15.0 — 2026-08-12 (Kairo Runtime)
+
+Minor release. Declared Fleet board + model configure, and the Cursor
+observable companion (work snapshots, MCP publish, `kairo next`, managed
+rule, honest panel). Publish tag: `kairo-runtime-v0.15.0`. Extension
+marketplace delivery stays out of this unit.
+
+### Added
+
+- Contract `kairo.work-snapshot/v1` and MCP tool `kairo_publish_work_snapshot`
+  to enroll the current Cursor conversation with Goal / Progress / Now /
+  Constraints / Next.
+- `kairo next` / `kairo.next/v1`: selected work snapshot plus integration
+  state (`active` / `enrolled` / `showRepair`) for the IDE panel.
+- `kairo mcp install [--yes]`: consent-gated registration of Kairo MCP in
+  `~/.cursor/mcp.json` (plan first; atomic write + backup) and managed
+  Cursor rule `~/.cursor/rules/kairo-work-snapshot.mdc` (`alwaysApply`).
+- Panel **0.7.0**: honest companion surface — Repair only when integration
+  is broken; otherwise active/enrolled without false prompts.
+- MCP workspace binding: prefer Cursor env (`VSCODE_CWD` /
+  `WORKSPACE_FOLDER_PATHS`) over process cwd; canonicalize macOS `/tmp` vs
+  `/private/tmp` before hashing `projectKey`.
+- Panel **0.6.5**: One **Configure all** for multi-agent (Claude + OpenCode +
+  Cursor agents). **Codex aparte** (`--codex-model`). `kairo fleet models`
+  shows available vs enabled per tool. Cursor desk: open agents/skills/rules.
+  Profile at `~/.harness/fleet-models.json` (seeded from disk; preserves
+  tuned OpenCode). `--from gentle` remaps OpenCode tiers when you want that.
+- Panel **0.6.4**: Fleet Details puts configure buttons first (Edit per
+  minion on Claude/OpenCode; Cursor offers Claude/OpenCode configure +
+  optional Pixel Agents). `fleet configure` defaults to Claude only (no
+  surprise OpenCode overwrite).
+- `kairo fleet configure`: Gentle-style model assignments across OpenCode +
+  Claude (+ Codex when `codex_default` set). Plan / `--yes` + backups. Panel
+  **Models** button. Cursor Auto remains IDE-managed.
+- Panel **0.6.2**: Fleet floor (compact platform desks). Working floor only
+  shows live agents — no idle OpenCode wall. CLI `kairo fleet` compact by
+  default (`--verbose` for full minion list).
+- Panel **0.6.3**: Configure models toolbar + desk actions for sync/set.
+- `kairo fleet [--json]`: declared orchestrator→minion fleet topology from
+  OpenCode config (Gentle + SDD models); Cursor Auto marked opaque.
+  MCP tool `kairo_fleet`; `kairo connections --json` includes `fleets`.
+- Panel **0.5.0**: Fleet tree under connections (platform · orchestrator ·
+  model, indented minions). Details note: declared config, not live tokens.
+- `kairo connections [--json]`: Gentle / Hermes / Engram / Graphify / Agent
+  connection chips for the IDE panel (companion probes + MCP registration).
+- VS Code / Cursor panel **0.3.0**: connection chips, Connect Agent button,
+  Entries + Details webview. Docs: `docs/mcp.md`.
+- Panel **0.3.1**: soften "not installed / unconfigured" entries to `note`;
+  fix false Engram conflict when Claude uses `~/.claude/mcp/engram.json`
+  without `mcpServers.engram` in settings.json.
+- Panel **0.3.2**: **Setup** button + per-connection actions (Configure /
+  How to install / Update graph). Optional tools labeled; Kairo never
+  auto-installs Gentle/Hermes/Graphify.
+- Panel **0.3.3**: every Entry shows resolve buttons in Details (Fix SDD,
+  Repair, Update graph, Why optional?). Hermes chip offers **Start Hermes
+  gateway**. Conflicts sort first so buttons are visible immediately.
+- Panel **0.3.4**: Hermes tip documents `API_SERVER_ENABLED=true` — gateway
+  alone without API Server does not expose :8642.
+- Check **resolutions[]** contract + panel **0.4.0**: status checks can declare
+  clickable fix buttons. For `sdd-core:skills` conflicts:
+  - `kairo components diff sdd-core` (read-only)
+  - `kairo components adopt sdd-core` (keep disk; record adopted hashes)
+  - `kairo components configure sdd-core --overwrite-conflicts` (backup + replace)
+  Destructive overwrite asks for a modal confirm in the IDE panel.
+- Panel **0.4.1**: adopt/overwrite buttons apply with `--yes` (click = consent).
+  Previous `--dry-run` left CONFLICT unchanged after clicking Conservar el mío.
+- Panel **0.4.2**: status/connections/terminal use the open workspace folder as
+  `cwd`, so graphify-out/ is detected (was falsely "not found" from IDE cwd).
+
+### Fixed
+
+- Cockpit Home opened with focus on the tab bar, so the two Home buttons never
+  showed a selection mark and the arrow keys moved between tabs instead. Home
+  now starts on the buttons.
+
+### Changed
+
+- Home buttons render as `› [1] Label` with `← Press Enter` on the focused
+  option; press `1` / `2` to run a button without arrow navigation.
+- Home footer names each key (`1·2 Select · Enter Run · ? Help · Esc Exit`)
+  instead of listing bare keys.
+- Home shows at most two plain-language needs; the rest collapse into the
+  `More info (n)` disclosure, which absorbs the duplicated "n more" line.
+
+## 0.14.0 — 2026-08-07 (Kairo Runtime)
+
+Minor release. Simpler Cockpit, one-command CLI self-update, pnpm for
+contributors, and a minimal IDE status panel. Publish tag:
+`kairo-runtime-v0.14.0`.
+
+### Added
+
+- Cockpit Home with three tabs (Home · Settings · History) and two clear
+  actions (prepare/repair + Configure). Secondary destinations stay in `/`.
+- `kairo update`: update the Kairo CLI from npm (`--yes` applies). Workspace
+  template refresh stays at `kairo update --scope=workspace`.
+- VS Code / Cursor extension scaffold in `packages/kairo-vscode`: status bar +
+  explorer tree from `kairo status --json`; sync/doctor/cockpit open a terminal
+  (no silent writes). Local VSIX via `npm run package`.
+
+### Changed
+
+- Local development and CI use **pnpm 10.x** (`packageManager` pinned). End-user
+  installs and `npm publish` (OIDC Trusted Publishing) stay on npm.
+- Install scripts blocked by default (`pnpm.onlyBuiltDependencies: []`);
+  `.npmrc` sets `strict-dep-builds` and `minimum-release-age=1440`.
+
 ## 0.13.1 — 2026-08-07 (Kairo Runtime)
 
 Patch release. Docs/UX/license polish for npm adoption. Publish tag:

package/README.md

@@ -24,25 +24,23 @@ KAIRO
 Needs attention · 4/4 agents · drift pending
 Kairo coordinates installed AI agents for this project.
 
-→ Fix drift
-  Run "kairo sync" to repair managed content.
-  Enter → preview in Governance
-
-  Last activity · codex · failed
-  Obsidian not connected · open Settings to choose your vault
-  Update available · run kairo updates check
-  9 more in Details · Space
+→ Repair 3 changes
+  You will see the exact plan before anything is written.
+
+  Configure
+  Agents, Obsidian vault, integrations.
 ```
 
-`↑↓` move · `Enter` open · `Space` details · `R` refresh · `Esc` back · `?` help
+`↑↓` move · `Enter` open · `Tab` nav · `Space` details · `R` refresh · `Esc` back · `?` help
 
-## The four commands
+## Day-to-day commands
 
 | Command | What it does |
 |---|---|
 | `kairo` | Open the cockpit |
 | `kairo status` | See how your setup is doing |
 | `kairo sync` | Repair what drifted |
+| `kairo update` | Update Kairo itself from npm |
 | `kairo doctor` | Deeper health checks |
 
 Run `kairo help --all` for everything else, or read the
@@ -70,6 +68,10 @@ npx @kal-elsam/kairo-runtime
 # Install globally
 npm i -g @kal-elsam/kairo-runtime && kairo
 
+# Later: update the CLI itself
+kairo update
+kairo update --yes
+
 # Preview the setup plan, write nothing
 npx @kal-elsam/kairo-runtime --dry-run
 ```

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kal-elsam/kairo-runtime",
-  "version": "0.13.1",
+  "version": "0.15.0",
   "description": "Kairo Runtime — local agent operating system for Codex, Cursor, Claude, Pi, Engram, and Graphify.",
   "type": "module",
   "homepage": "https://github.com/Kal-elSam/harness#readme",
@@ -62,6 +62,10 @@
   "engines": {
     "node": ">=20.12.0"
   },
+  "packageManager": "pnpm@10.34.5",
+  "pnpm": {
+    "onlyBuiltDependencies": []
+  },
   "dependencies": {
     "@clack/prompts": "^1.7.0",
     "@modelcontextprotocol/server": "2.0.0",

package/scripts/cockpit-smoke.mjs

@@ -86,7 +86,7 @@ const asciiNav = buildNavModel({
 assert.equal(asciiNav.items[1].marker, ">");
 assert.equal(asciiNav.items[0].current, true);
 assert.equal(asciiNav.items[1].selected, true);
-assert.match(asciiNav.explanation, /Repair|Govern|Activity|Usage|Settings|Overview/i);
+assert.match(asciiNav.explanation, /agents|Obsidian|integrations/i);
 
 function applyKey(state, keyAction) {
   const routed = routeCockpitKey(state, keyAction);
@@ -99,25 +99,29 @@ function smokeNavigation(layoutMode) {
     layoutMode,
     region: layoutMode === LAYOUT_MODES.MINIMAL ? COCKPIT_REGIONS.CONTENT : COCKPIT_REGIONS.NAV
   });
-  const diagnosticsIndex = COCKPIT_NAV.findIndex((item) => item.id === "governance");
-  while (state.navIndex < diagnosticsIndex) {
+  const settingsIndex = COCKPIT_NAV.findIndex((item) => item.id === "settings");
+  while (state.navIndex < settingsIndex) {
     state = applyKey(state, { type: "arrow", direction: "down" });
   }
   state = applyKey(state, { type: "enter" });
-  assert.equal(state.view, ORCHESTRATOR_VIEWS.CHANGES);
-  assert.equal(state.region, COCKPIT_REGIONS.NAV);
+  assert.equal(state.view, ORCHESTRATOR_VIEWS.PROFILE);
+  assert.equal(state.region, COCKPIT_REGIONS.CONTENT);
 
-  state = applyKey(state, { type: "arrow", direction: "up" });
+  state = applyKey(state, { type: "tab" });
+  assert.equal(state.region, COCKPIT_REGIONS.NAV);
+  while (state.navIndex > 0) {
+    state = applyKey(state, { type: "arrow", direction: "up" });
+  }
   state = applyKey(state, { type: "enter" });
   assert.equal(state.view, ORCHESTRATOR_VIEWS.HOME);
-  assert.equal(state.region, COCKPIT_REGIONS.NAV);
+  assert.equal(state.region, COCKPIT_REGIONS.CONTENT);
 
   const footer = buildFooterModel({
-    view: ORCHESTRATOR_VIEWS.CHANGES,
-    region: COCKPIT_REGIONS.NAV,
+    view: ORCHESTRATOR_VIEWS.HOME,
+    region: COCKPIT_REGIONS.CONTENT,
     unicode: false
   });
-  assert.doesNotMatch(footer.text, /Tab/);
+  assert.match(footer.text, /Tab/);
 
   state = applyKey(state, { type: "escape" });
   assert.equal(state.view, ORCHESTRATOR_VIEWS.HOME);

package/src/cli.js

@@ -6,6 +6,10 @@ import {
   runComponentsRollback,
   runComponentsVerify
 } from "./global/component-integration-cli.js";
+import {
+  runComponentsAdopt,
+  runComponentsDiff
+} from "./global/components-resolve-cli.js";
 import {
   printGlobalComponents,
   printGlobalDetect,
@@ -30,6 +34,7 @@ import {
   runGlobalReport
 } from "./global/global-cli.js";
 import { runEcosystemUpdatesCheck } from "./global/updates-cli.js";
+import { runSelfUpdate } from "./global/self-update.js";
 import { applyPolicyToOptions, loadPolicyFile } from "./global/policy.js";
 import { resolveHomeDir } from "./global/paths.js";
 import { runWorkspaceDetect, runWorkspaceDoctor, runWorkspaceInit, runWorkspaceUpdate } from "./workspace-cli.js";
@@ -127,17 +132,100 @@ export async function runCli(argv) {
       await runGraphifyCli(optionsWithPolicy, packageManifest);
       return;
     case "mcp": {
-      // Lazy-load: MCP SDK is heavy and optional for day-to-day CLI (help/status/sync).
-      const { runKairoMcp } = await import("./global/mcp/kairo-mcp.js");
-      // stdout reserved for MCP protocol — no banners/logs here
-      await runKairoMcp({
+      const { runMcpCli } = await import("./global/mcp-install.js");
+      await runMcpCli({
+        mcpAction: optionsWithPolicy.mcpAction ?? "serve",
+        mcpClient: optionsWithPolicy.mcpClient ?? "cursor",
+        yes: optionsWithPolicy.yes === true,
+        json: optionsWithPolicy.json === true,
         cwd: optionsWithPolicy.cwd,
+        cwdExplicit: optionsWithPolicy.cwdExplicit,
         packageRoot,
         packageName: packageManifest.name,
         version: packageManifest.version
       });
       return;
     }
+    case "connections": {
+      const { buildConnectionsReport } = await import("./global/connections.js");
+      const { printJson } = await import("./global/json-output.js");
+      const { commandHeader } = await import("./global/brand/index.js");
+      const report = await buildConnectionsReport({
+        workspaceRoot: optionsWithPolicy.cwd,
+        packageRoot,
+        packageName: packageManifest.name,
+        cliVersion: packageManifest.version,
+        client: optionsWithPolicy.mcpClient ?? "cursor"
+      });
+      if (optionsWithPolicy.json) {
+        printJson(report);
+      } else {
+        console.log(commandHeader("Connections"));
+        for (const c of report.connections) {
+          console.log(`${c.label} · ${c.state}`);
+          console.log(`  ${c.access}`);
+          if (c.detail) console.log(`  ${c.detail}`);
+        }
+      }
+      return;
+    }
+    case "next": {
+      const { runNextCli } = await import("./global/next/next-cli.js");
+      await runNextCli({
+        cwd: optionsWithPolicy.cwd,
+        json: optionsWithPolicy.json === true,
+        mcpClient: optionsWithPolicy.mcpClient ?? "cursor"
+      });
+      return;
+    }
+    case "fleet": {
+      const fleetAction = optionsWithPolicy.fleetAction ?? "show";
+      if (fleetAction === "set") {
+        const { runFleetSet } = await import("./global/fleet-set.js");
+        await runFleetSet({
+          platform: optionsWithPolicy.fleetPlatform,
+          agent: optionsWithPolicy.fleetAgent ?? optionsWithPolicy.agent,
+          model: optionsWithPolicy.model,
+          yes: optionsWithPolicy.yes === true,
+          dryRun: optionsWithPolicy.dryRun === true,
+          json: optionsWithPolicy.json === true
+        });
+        return;
+      }
+      if (fleetAction === "configure") {
+        const { runFleetConfigure } = await import("./global/fleet-configure.js");
+        await runFleetConfigure({
+          yes: optionsWithPolicy.yes === true,
+          json: optionsWithPolicy.json === true,
+          platforms: optionsWithPolicy.fleetPlatforms ?? null,
+          from: optionsWithPolicy.fleetFrom ?? "profile",
+          assignmentsRaw: optionsWithPolicy.fleetAssignments ?? null,
+          codexModel: optionsWithPolicy.fleetCodexModel ?? null
+        });
+        return;
+      }
+      if (fleetAction === "models") {
+        const { runFleetModels } = await import("./global/fleet-configure.js");
+        await runFleetModels({
+          json: optionsWithPolicy.json === true,
+          profile: optionsWithPolicy.fleetProfile === true
+        });
+        return;
+      }
+      const { buildFleetReport, formatFleetText } = await import("./global/observability/fleet-probe.js");
+      const { printJson } = await import("./global/json-output.js");
+      const report = await buildFleetReport({
+        includeVariants: optionsWithPolicy.includeVariants === true
+      });
+      if (optionsWithPolicy.json) {
+        printJson(report);
+      } else {
+        console.log(formatFleetText(report, {
+          verbose: optionsWithPolicy.verbose === true || optionsWithPolicy.includeVariants === true
+        }));
+      }
+      return;
+    }
     case "intelligence":
       await runIntelligenceCli(optionsWithPolicy, packageManifest);
       return;
@@ -173,9 +261,15 @@ export async function runCli(argv) {
       });
       return;
     case "update":
-      await dispatchByScope(options, "agent-global", {
-        "agent-global": () => runGlobalInstall(options, packageManifest, packageRoot, { update: true }),
-        workspace: () => runWorkspaceUpdate(options, packageManifest, packageRoot)
+      if (options.scope === "workspace") {
+        await runWorkspaceUpdate(options, packageManifest, packageRoot);
+        return;
+      }
+      await runSelfUpdate({
+        packageName: packageManifest.name,
+        cliVersion: packageManifest.version,
+        yes: optionsWithPolicy.yes === true,
+        json: optionsWithPolicy.json === true
       });
       return;
     case "doctor":
@@ -278,6 +372,12 @@ async function dispatchComponentsCommand(options, invoke) {
     case "verify":
       await runComponentsVerify({ ...options, packageRoot });
       return;
+    case "adopt":
+      await runComponentsAdopt({ ...options, packageRoot });
+      return;
+    case "diff":
+      await runComponentsDiff({ ...options, packageRoot });
+      return;
     case "rollback":
       await runComponentsRollback(options);
       return;
@@ -356,6 +456,7 @@ export function parseArgs(argv) {
   const command = normalizeCommand(rawCommand);
   const options = {
     cwd: process.cwd(),
+    cwdExplicit: false,
     scope: null,
     mode: "standard",
     modeExplicit: false,
@@ -375,6 +476,7 @@ export function parseArgs(argv) {
     dryRun: false,
     yes: false,
     confirm: false,
+    overwriteConflicts: false,
     preflight: true,
     preflightExplicit: false,
     yesExplicit: false,
@@ -412,6 +514,18 @@ export function parseArgs(argv) {
     confirmDismiss: false,
     graphifyAction: null, graphifyArgs: [], graphifyBudget: null, graphPath: null,
     updatesAction: "check",
+    mcpAction: "serve",
+    mcpClient: "cursor",
+    fleetAction: "show",
+    fleetPlatform: null,
+    fleetAgent: null,
+    fleetPlatforms: null,
+    fleetFrom: "profile",
+    fleetAssignments: null,
+    fleetCodexModel: null,
+    fleetProfile: false,
+    includeVariants: false,
+    verbose: false,
     base: null,
     commit: null,
     staged: false,
@@ -466,6 +580,8 @@ export function parseArgs(argv) {
 
   if (command === "graphify") parseGraphifyAction(args, options);
   if (command === "updates") parseUpdatesAction(args, options);
+  if (command === "mcp") parseMcpAction(args, options);
+  if (command === "fleet") parseFleetAction(args, options);
 
   if (command === "help") {
     while (args[0] === "all" || args[0] === "--all") {
@@ -477,7 +593,10 @@ export function parseArgs(argv) {
   for (let index = 0; index < args.length; index += 1) {
     const arg = args[index];
 
-    if (arg === "--cwd") options.cwd = resolve(args[++index]);
+    if (arg === "--cwd") {
+      options.cwd = resolve(args[++index]);
+      options.cwdExplicit = true;
+    }
     else if (arg === "--scope") options.scope = parseScope(args[++index]);
     else if (arg.startsWith("--scope=")) options.scope = parseScope(arg.slice("--scope=".length));
     else if (arg === "--mode") {
@@ -511,8 +630,26 @@ export function parseArgs(argv) {
       options.componentsExplicit = true;
     } else if (arg === "--force") options.force = true;
     else if (arg === "--dry-run") options.dryRun = true;
+    else if (arg === "--overwrite-conflicts") options.overwriteConflicts = true;
     else if (arg === "--json") options.json = true;
-    else if (arg === "--yes" || arg === "-y") {
+    else if (arg === "--include-variants") options.includeVariants = true;
+    else if (arg === "--platforms") options.fleetPlatforms = args[++index];
+    else if (arg.startsWith("--platforms=")) options.fleetPlatforms = arg.slice("--platforms=".length);
+    else if (arg === "--from") options.fleetFrom = args[++index];
+    else if (arg.startsWith("--from=")) options.fleetFrom = arg.slice("--from=".length);
+    else if (arg === "--assignments") options.fleetAssignments = args[++index];
+    else if (arg.startsWith("--assignments=")) options.fleetAssignments = arg.slice("--assignments=".length);
+    else if (arg === "--codex-model") options.fleetCodexModel = args[++index];
+    else if (arg.startsWith("--codex-model=")) options.fleetCodexModel = arg.slice("--codex-model=".length);
+    else if (arg === "--profile") options.fleetProfile = true;
+    else if (arg === "--verbose") options.verbose = true;
+    else if (arg === "--platform") options.fleetPlatform = args[++index];
+    else if (arg.startsWith("--platform=")) options.fleetPlatform = arg.slice("--platform=".length);
+    else if (arg === "--client") {
+      options.mcpClient = args[++index];
+    } else if (arg.startsWith("--client=")) {
+      options.mcpClient = arg.slice("--client=".length);
+    } else if (arg === "--yes" || arg === "-y") {
       options.yes = true;
       options.yesExplicit = true;
     } else if (arg === "--confirm") {
@@ -644,7 +781,8 @@ function parseComponentsAction(args, options) {
 
   if (action === "validate") return;
 
-  if (action === "configure" || action === "verify" || action === "rollback") {
+  if (action === "configure" || action === "verify" || action === "rollback"
+    || action === "adopt" || action === "diff") {
     const componentId = args[0];
     if (!componentId || componentId.startsWith("-")) {
       throw new Error(
@@ -655,7 +793,7 @@ function parseComponentsAction(args, options) {
     return;
   }
 
-  throw new Error(`Unknown components action "${action}". Use validate, init, pack, import, configure, verify, or rollback.`);
+  throw new Error(`Unknown components action "${action}". Use validate, init, pack, import, configure, verify, adopt, diff, or rollback.`);
 }
 
 function parsePolicyAction(args, options) {
@@ -835,6 +973,36 @@ function parseUpdatesAction(args, options) {
   options.updatesAction = "check";
 }
 
+function parseMcpAction(args, options) {
+  const action = args[0];
+  if (!action || action.startsWith("-")) {
+    options.mcpAction = "serve";
+    return;
+  }
+  if (!new Set(["serve", "install"]).has(action)) {
+    throw new Error(
+      `Unknown mcp action "${action}". Use: ${formatCliCommand("mcp")} or ${formatCliCommand("mcp install [--yes]")}`
+    );
+  }
+  args.shift();
+  options.mcpAction = action;
+}
+
+function parseFleetAction(args, options) {
+  const action = args[0];
+  if (!action || action.startsWith("-")) {
+    options.fleetAction = "show";
+    return;
+  }
+  if (!new Set(["show", "set", "activity", "configure", "models"]).has(action)) {
+    throw new Error(
+      `Unknown fleet action "${action}". Use: ${formatCliCommand("fleet")}, ${formatCliCommand("fleet models")}, ${formatCliCommand("fleet configure")}, or ${formatCliCommand("fleet set --platform opencode --agent <id> --model <id>")}`
+    );
+  }
+  args.shift();
+  options.fleetAction = action === "activity" ? "show" : action;
+}
+
 function parsePathList(value) {
   if (!value) return [];
   return [...new Set(
@@ -882,6 +1050,9 @@ function normalizeCommand(command) {
   if (command === "alerts") return "alerts";
   if (command === "graphify") return "graphify";
   if (command === "mcp") return "mcp";
+  if (command === "connections") return "connections";
+  if (command === "next") return "next";
+  if (command === "fleet") return "fleet";
   if (command === "intelligence" || command === "intel") return "intelligence";
   if (command === "setup") return "setup";
   if (command === "status") return "status";

package/src/global/check-resolutions.js

@@ -0,0 +1,31 @@
+/**
+ * Stable resolution contract for doctor/status checks.
+ * Panels render these as buttons; commands stay consent-gated in the CLI.
+ */
+export function resolution(id, label, command, {
+  kind = "run",
+  safety = "consent",
+  detail = ""
+} = {}) {
+  return {
+    id: String(id),
+    label: String(label),
+    command: command == null ? null : String(command),
+    kind: String(kind),
+    safety: String(safety),
+    detail: detail == null ? "" : String(detail)
+  };
+}
+
+export const RESOLUTION_SAFETY = Object.freeze({
+  READ_ONLY: "read-only",
+  CONSENT: "consent",
+  DESTRUCTIVE: "destructive"
+});
+
+export const RESOLUTION_KIND = Object.freeze({
+  RUN: "run",
+  CONFIGURE: "configure",
+  GUIDE: "guide",
+  REFRESH: "refresh"
+});

package/src/global/cli-help.js

@@ -29,6 +29,7 @@ Usage:
   ${cli}                 Open the cockpit (setup on first run)
   ${cli} status          See how your setup is doing
   ${cli} sync            Repair what drifted
+  ${cli} update          Update Kairo itself (npm)
   ${cli} doctor          Deeper health checks
 
   ${cli} help --all      Every command and flag
@@ -63,7 +64,8 @@ Bootstrap: see README.md and docs/install.md (curl install.sh or npx ${PACKAGE_N
   ${cli} updates check [--json] [--force]
   ${cli} install [--agents <list|all>] [--components <list>] [--dry-run]
   ${cli} install --no-default-components
-  ${cli} update [--dry-run]             Technical repair alias (prefer sync)
+  ${cli} update [--yes] [--json]        Update the Kairo CLI from npm
+  ${cli} update --scope=workspace [--dry-run]  Refresh workspace template files
   ${cli} uninstall [--dry-run]
 
 ## Agents & runs
@@ -107,10 +109,19 @@ Bootstrap: see README.md and docs/install.md (curl install.sh or npx ${PACKAGE_N
   ${cli} components
   ${cli} components validate|init|pack|import ...
   ${cli} components configure engram-memory [--agents <list>] [--dry-run|--yes] [--json]
-  ${cli} components configure sdd-core [--agents <list>] [--persona off|teaching] [--dry-run|--yes] [--json]
+  ${cli} components configure sdd-core [--agents <list>] [--persona off|teaching] [--overwrite-conflicts] [--dry-run|--yes] [--json]
   ${cli} components verify sdd-core [--agents <list>] [--json]
+  ${cli} components adopt sdd-core [--agents <list>] [--dry-run|--yes] [--json]
+  ${cli} components diff sdd-core [--agents <list>] [--json]
   ${cli} components rollback engram-memory|sdd-core --receipt <id> [--dry-run|--yes] [--json]
+  ${cli} connections [--json] [--client cursor]
+  ${cli} next [--json] [--client cursor]
+  ${cli} fleet [--json] [--verbose] [--include-variants]
+  ${cli} fleet models [--profile] [--json]
+  ${cli} fleet configure [--platforms claude,opencode,cursor|codex] [--from profile|gentle] [--codex-model <id>] [--assignments a=b,...] [--yes] [--json]
+  ${cli} fleet set --platform opencode|claude|codex --agent <id> --model <id> [--yes] [--json]
   ${cli} mcp
+  ${cli} mcp install [--yes] [--json] [--client cursor]
   ${cli} install --scope=workspace [--mode minimal|standard|enterprise] (opt-in/legacy)
   ${cli} init [--mode minimal|standard|enterprise] (workspace alias)
 
@@ -143,7 +154,7 @@ Commands:
   updates    Read-only ecosystem update check (kairo/hermes/gentle/skills). Never applies.
   install    Non-interactive configure (agent-global) or legacy workspace scaffold.
   doctor     Detailed health checks for managed state and configs.
-  update     Technical repair alias (prefer sync for day-to-day use).
+  update     Update the Kairo CLI from npm (--yes applies). Workspace templates: --scope=workspace.
   detect     Inspect global agents and the current project. Read-only.
   adapters   Official adapter matrix: roots, config files, detected/managed.
   explain    Read-only audit of managed adapters, configs, markers, and backups.
@@ -155,12 +166,20 @@ Commands:
   policy     View or edit local operation preferences under ~/.harness/policy.json.
   report     Read-only diagnostics bundle: status, policy, adapters, diff, history.
   components List, validate, scaffold, pack, import, or configure integrations (Engram, SDD).
+  connections Companion chips + MCP registration (IDE panel).
+  next        Selected work snapshot + integration state (panel contract).
+  fleet      Declared fleet floor + working activity; configure/set models across CLIs.
+             fleet models [--profile]   available vs enabled per tool
+             fleet configure            one plan for Claude+OpenCode+Cursor (profile)
+             fleet configure --codex-model <id>   Codex only (single-default)
+             fleet set --platform opencode|claude|codex --agent <id> --model <id> [--yes]
+  mcp        Serve or install MCP for agents (mcp install writes entry + snapshot rule).
   uninstall  Remove managed sections and global state. Backups are preserved.
   init       Alias for install --scope=workspace (legacy).
 
 JSON output (--json on supported commands):
   status, sync, doctor, adapters, explain, diff, history, history last,
-  policy (show/set/reset), report, monitor
+  policy (show/set/reset), report, monitor, connections, fleet
   Human text remains the default. See docs/cli-reference.md for examples and field notes.
 
 Version:

package/src/global/component-ecosystem-checks.js

@@ -9,6 +9,7 @@ import { requireIntegrationProvider } from "./integrations/provider-registry.js"
 import { buildEngramIntegrationChecks, buildSddIntegrationChecks } from "./component-integration-cli.js";
 import { KAIRO_ENGRAM_AGENT_IDS } from "./integrations/engram-evidence.js";
 import { SDD_MANAGED_AGENT_IDS } from "./integrations/sdd-destinations.js";
+import { adoptedHashesFromState } from "./integrations/sdd-state.js";
 import { harnessHomePaths } from "./paths.js";
 import { readGlobalState } from "./state.js";
 
@@ -78,6 +79,7 @@ async function buildSddChecks({ homeDir }) {
       requestedAgentIds: installedAgents.length ? installedAgents : [],
       detectedAgentIds: installedAgents,
       trackedFiles,
+      adoptedFiles: adoptedHashesFromState(state?.sdd),
       personaAgentIds: state?.sdd?.personaAgentIds ?? [],
       packageRoot: PACKAGE_ROOT
     });