@kolatts/pncli 1.26.0 → 3.0.0

package/dist/cli.js

@@ -4,15 +4,18 @@ import {
   loadConfig,
   loadJsonFile,
   maskConfig,
+  normalizeBaseUrl,
   setConfigValue,
   setRepoConfigValue,
   writeGlobalConfig,
   writeRepoConfig
-} from "./chunk-JOAWUILY.js";
+} from "./chunk-LH7WBP7W.js";
+import {
+  createHttpClient
+} from "./chunk-ZDJYOI3W.js";
 import {
   ExitCode,
   PncliError,
-  createHttpClient,
   fail,
   log,
   setGlobalOptions,
@@ -20,7 +23,7 @@ import {
   success,
   warn,
   writeRawOutput
-} from "./chunk-AGELHQKO.js";
+} from "./chunk-HZF6WQPU.js";
 import {
   AdoCoreClient
 } from "./chunk-VDL32PSG.js";
@@ -6311,16 +6314,6 @@ function registerConfigCommands(program2) {
       } else {
         results.artifactory = { ok: null, message: "not configured" };
       }
-      if (cfg.udeploy.baseUrl && (cfg.udeploy.pat || cfg.udeploy.username && cfg.udeploy.password)) {
-        try {
-          await http.udeploy("/cli/application");
-          results.udeploy = { ok: true, message: "connected" };
-        } catch (err) {
-          results.udeploy = { ok: false, message: err instanceof Error ? err.message : String(err) };
-        }
-      } else {
-        results.udeploy = { ok: null, message: "not configured" };
-      }
       if (cfg.checkmarx.baseUrl && cfg.checkmarx.tenantName && (cfg.checkmarx.apiKey || cfg.checkmarx.clientId && cfg.checkmarx.clientSecret)) {
         try {
           await http.checkmarx("projects", { params: { limit: 1 } });
@@ -6372,6 +6365,25 @@ function registerConfigCommands(program2) {
       } else {
         results.openshift = { ok: null, message: "not configured" };
       }
+      for (const [envName, envCfg] of Object.entries(cfg.openshift.environments)) {
+        for (const [instName, instCfg] of Object.entries(envCfg.instances ?? {})) {
+          const key = `openshift:${envName}/${instName}`;
+          if (instCfg.baseUrl && instCfg.token) {
+            const clusterHttp = createHttpClient(
+              { ...cfg, openshift: { ...cfg.openshift, baseUrl: instCfg.baseUrl, token: instCfg.token } },
+              false
+            );
+            try {
+              await clusterHttp.openshift("/api/v1");
+              results[key] = { ok: true, message: "connected" };
+            } catch (err) {
+              results[key] = { ok: false, message: err instanceof Error ? err.message : String(err) };
+            }
+          } else {
+            results[key] = { ok: null, message: "not configured" };
+          }
+        }
+      }
       if (cfg.dynatrace.baseUrl && cfg.dynatrace.apiToken) {
         try {
           await http.dynatrace("/api/v2/entities", {
@@ -6381,8 +6393,10 @@ function registerConfigCommands(program2) {
         } catch (err) {
           results.dynatrace = { ok: false, message: err instanceof Error ? err.message : String(err) };
         }
-      } else {
+      } else if (Object.keys(cfg.dynatrace.environments).length === 0) {
         results.dynatrace = { ok: null, message: "not configured" };
+      } else {
+        results.dynatrace = { ok: null, message: "flat config not set \u2014 see named environments below" };
       }
       if (cfg.dynatrace.platformUrl && cfg.dynatrace.platformToken) {
         try {
@@ -6403,6 +6417,46 @@ function registerConfigCommands(program2) {
       } else {
         results.dynatrace_platform = { ok: null, message: "not configured" };
       }
+      for (const [envName, envConfig] of Object.entries(cfg.dynatrace.environments)) {
+        const envHttp = createHttpClient({
+          ...cfg,
+          dynatrace: {
+            ...cfg.dynatrace,
+            baseUrl: envConfig.baseUrl,
+            apiToken: envConfig.apiToken,
+            platformUrl: envConfig.platformUrl,
+            platformToken: envConfig.platformToken
+          }
+        });
+        const key = `dynatrace.${envName}`;
+        if (envConfig.baseUrl && envConfig.apiToken) {
+          try {
+            await envHttp.dynatrace("/api/v2/entities", {
+              params: { entitySelector: 'type("SERVICE")', pageSize: 1 }
+            });
+            results[key] = { ok: true, message: "connected" };
+          } catch (err) {
+            results[key] = { ok: false, message: err instanceof Error ? err.message : String(err) };
+          }
+        } else {
+          results[key] = { ok: null, message: "baseUrl or apiToken not configured" };
+        }
+        const platformKey = `dynatrace.${envName}_platform`;
+        if (envConfig.platformUrl && envConfig.platformToken) {
+          try {
+            await envHttp.dynatracePlatform("/platform/storage/query/v1/query:execute", {
+              method: "POST",
+              body: { query: "fetch spans | limit 1", requestTimeoutMilliseconds: 5e3 },
+              timeoutMs: 1e4
+            });
+            results[platformKey] = { ok: true, message: "connected" };
+          } catch (err) {
+            results[platformKey] = { ok: false, message: err instanceof Error ? err.message : String(err) };
+          }
+        } else if (envConfig.platformUrl || envConfig.platformToken) {
+          results[platformKey] = { ok: false, message: "platformUrl and platformToken must both be configured" };
+        }
+      }
       if (cfg.logscale.baseUrl && cfg.logscale.token) {
         try {
           await http.logscale("/api/v1/repositories");
@@ -6413,6 +6467,26 @@ function registerConfigCommands(program2) {
       } else {
         results.logscale = { ok: null, message: "not configured" };
       }
+      if (cfg.splitio.baseUrl && cfg.splitio.adminApiKey) {
+        try {
+          await http.splitio("/internal/api/v2/workspaces");
+          results.splitio = { ok: true, message: "connected" };
+        } catch (err) {
+          results.splitio = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.splitio = { ok: null, message: "not configured" };
+      }
+      if (cfg.figma.baseUrl && cfg.figma.token) {
+        try {
+          await http.figma("/v1/me");
+          results.figma = { ok: true, message: "connected" };
+        } catch (err) {
+          results.figma = { ok: false, message: err instanceof Error ? err.message : String(err) };
+        }
+      } else {
+        results.figma = { ok: null, message: "not configured" };
+      }
       success(results, "config", "test", start);
     } catch (err) {
       fail(err, "config", "test", start);
@@ -6537,18 +6611,6 @@ function registerConfigCommands(program2) {
           results.jenkins = categorize2(err);
         }
       }
-      if (!cfg.udeploy.pat && !(cfg.udeploy.username && cfg.udeploy.password)) {
-        results.udeploy = { status: "blank", message: "not configured" };
-      } else if (!cfg.udeploy.baseUrl) {
-        results.udeploy = { status: "error", message: "baseUrl not configured" };
-      } else {
-        try {
-          await http.udeploy("/cli/application", { timeoutMs: 1e4 });
-          results.udeploy = { status: "valid", message: "ok" };
-        } catch (err) {
-          results.udeploy = categorize2(err);
-        }
-      }
       const artResult = await checkArtifactoryConnectivity(cfg.artifactory);
       if (!artResult.configured) {
         results.artifactory = { status: "blank", message: artResult.error ?? "not configured" };
@@ -6620,8 +6682,33 @@ function registerConfigCommands(program2) {
           results.openshift = categorize2(err);
         }
       }
+      for (const [envName, envCfg] of Object.entries(cfg.openshift.environments)) {
+        for (const [instName, instCfg] of Object.entries(envCfg.instances ?? {})) {
+          const key = `openshift:${envName}/${instName}`;
+          if (!instCfg.token) {
+            results[key] = { status: "blank", message: "token not configured" };
+          } else if (!instCfg.baseUrl) {
+            results[key] = { status: "error", message: "baseUrl not configured" };
+          } else {
+            const clusterHttp = createHttpClient(
+              { ...cfg, openshift: { ...cfg.openshift, baseUrl: instCfg.baseUrl, token: instCfg.token } },
+              false
+            );
+            try {
+              await clusterHttp.openshift("/api/v1", { timeoutMs: 1e4 });
+              results[key] = { status: "valid", message: "ok" };
+            } catch (err) {
+              results[key] = categorize2(err);
+            }
+          }
+        }
+      }
       if (!cfg.dynatrace.apiToken) {
-        results.dynatrace = { status: "blank", message: "not configured" };
+        if (Object.keys(cfg.dynatrace.environments).length === 0) {
+          results.dynatrace = { status: "blank", message: "not configured" };
+        } else {
+          results.dynatrace = { status: "blank", message: "flat config not set \u2014 see named environments below" };
+        }
       } else if (!cfg.dynatrace.baseUrl) {
         results.dynatrace = { status: "error", message: "baseUrl not configured" };
       } else {
@@ -6657,6 +6744,52 @@ function registerConfigCommands(program2) {
           results.dynatrace_platform = categorize2(err);
         }
       }
+      for (const [envName, envConfig] of Object.entries(cfg.dynatrace.environments)) {
+        const envHttp = createHttpClient({
+          ...cfg,
+          dynatrace: {
+            ...cfg.dynatrace,
+            baseUrl: envConfig.baseUrl,
+            apiToken: envConfig.apiToken,
+            platformUrl: envConfig.platformUrl,
+            platformToken: envConfig.platformToken
+          }
+        }, false);
+        const key = `dynatrace.${envName}`;
+        if (!envConfig.apiToken) {
+          results[key] = { status: "blank", message: "apiToken not configured" };
+        } else if (!envConfig.baseUrl) {
+          results[key] = { status: "error", message: "baseUrl not configured" };
+        } else {
+          try {
+            await envHttp.dynatrace("/api/v2/entities", {
+              params: { entitySelector: 'type("SERVICE")', pageSize: 1 },
+              timeoutMs: 1e4
+            });
+            results[key] = { status: "valid", message: "ok" };
+          } catch (err) {
+            results[key] = categorize2(err);
+          }
+        }
+        const platformKey = `dynatrace.${envName}_platform`;
+        if (envConfig.platformUrl && envConfig.platformToken) {
+          try {
+            await envHttp.dynatracePlatform("/platform/storage/query/v1/query:execute", {
+              method: "POST",
+              body: { query: "fetch spans | limit 1", requestTimeoutMilliseconds: 5e3 },
+              timeoutMs: 1e4
+            });
+            results[platformKey] = { status: "valid", message: "ok" };
+          } catch (err) {
+            results[platformKey] = categorize2(err);
+          }
+        } else if (envConfig.platformUrl || envConfig.platformToken) {
+          results[platformKey] = {
+            status: "error",
+            message: "platformUrl and platformToken must both be configured"
+          };
+        }
+      }
       if (!cfg.logscale.token) {
         results.logscale = { status: "blank", message: "not configured" };
       } else if (!cfg.logscale.baseUrl) {
@@ -6669,14 +6802,66 @@ function registerConfigCommands(program2) {
           results.logscale = categorize2(err);
         }
       }
+      if (!cfg.splitio.adminApiKey) {
+        results.splitio = { status: "blank", message: "not configured" };
+      } else if (!cfg.splitio.baseUrl) {
+        results.splitio = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.splitio("/internal/api/v2/workspaces", { timeoutMs: 1e4 });
+          results.splitio = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.splitio = categorize2(err);
+        }
+      }
+      if (!cfg.figma.token) {
+        results.figma = { status: "blank", message: "not configured" };
+      } else if (!cfg.figma.baseUrl) {
+        results.figma = { status: "error", message: "baseUrl not configured" };
+      } else {
+        try {
+          await http.figma("/v1/me", { timeoutMs: 1e4 });
+          results.figma = { status: "valid", message: "ok" };
+        } catch (err) {
+          results.figma = categorize2(err);
+        }
+      }
       const statuses = Object.values(results).map((r) => r.status);
       if (statuses.includes("invalid")) process.exitCode = ExitCode.AUTH_ERROR;
       else if (statuses.includes("error")) process.exitCode = ExitCode.NETWORK_ERROR;
+      const clusterKeys = Object.keys(results).filter((k) => k.startsWith("openshift:")).sort();
+      const dynamicEnvKeys = Object.keys(cfg.dynatrace.environments).flatMap((envName) => {
+        const keys = [`dynatrace.${envName}`];
+        if (cfg.dynatrace.environments[envName]?.platformUrl) keys.push(`dynatrace.${envName}_platform`);
+        return keys;
+      });
+      const allServices = [
+        "jira",
+        "bitbucket",
+        "github",
+        "confluence",
+        "sonar",
+        "sde",
+        "ado",
+        "jenkins",
+        "artifactory",
+        "checkmarx",
+        "servicenow",
+        "contrast",
+        "sonatypeiq",
+        "openshift",
+        ...clusterKeys,
+        "dynatrace",
+        "dynatrace_platform",
+        ...dynamicEnvKeys,
+        "logscale",
+        "splitio",
+        "figma"
+      ];
       if (cmdOpts.output === "table") {
-        const services = ["jira", "bitbucket", "github", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast", "sonatypeiq", "openshift", "dynatrace", "dynatrace_platform", "logscale"];
-        const labelWidth = 14;
+        const labelWidth = Math.max(14, ...allServices.map((s) => s.length + 2));
         const statusWidth = 9;
-        for (const svc of services) {
+        for (const svc of allServices) {
           const r = results[svc];
           if (!r) continue;
           const label = svc.padEnd(labelWidth);
@@ -6687,10 +6872,9 @@ function registerConfigCommands(program2) {
         process.stdout.write("\n");
       } else {
         if (opts.pretty) {
-          const services = ["jira", "bitbucket", "github", "confluence", "sonar", "sde", "ado", "jenkins", "udeploy", "artifactory", "checkmarx", "servicenow", "contrast", "sonatypeiq", "openshift", "dynatrace", "dynatrace_platform", "logscale"];
-          const labelWidth = 14;
+          const labelWidth = Math.max(14, ...allServices.map((s) => s.length + 2));
           const statusWidth = 9;
-          for (const svc of services) {
+          for (const svc of allServices) {
             const r = results[svc];
             if (!r) continue;
             const label = svc.padEnd(labelWidth);
@@ -6707,11 +6891,6 @@ function registerConfigCommands(program2) {
     }
   });
 }
-function normalizeBaseUrl(raw) {
-  const trimmed = raw.trim();
-  if (!trimmed) return trimmed;
-  return /^https?:\/\//i.test(trimmed) ? trimmed : `https://${trimmed}`;
-}
 async function initGlobalConfig(start) {
   process.stderr.write("pncli config init \u2014 Global configuration\n\n");
   process.stderr.write("\u2500\u2500 Identity \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
@@ -6939,7 +7118,7 @@ async function initGlobalConfig(start) {
   }
   process.stderr.write("\n\u2500\u2500 Jenkins \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const useJenkins = await confirm({
-    message: "Configure Jenkins Data Center for pipeline operations?",
+    message: "Configure Jenkins for pipeline operations?",
     default: false
   });
   let jenkinsBaseUrl = "";
@@ -6958,66 +7137,6 @@ async function initGlobalConfig(start) {
       message: "Jenkins API token:"
     });
   }
-  process.stderr.write("\n\u2500\u2500 IBM UrbanCode Deploy \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
-  const useUdeploy = await confirm({
-    message: "Configure IBM UrbanCode Deploy for component imports and deployment processes?",
-    default: false
-  });
-  let udeployBaseUrl = "";
-  let udeployPat = "";
-  let udeployUsername = "";
-  let udeployPassword = "";
-  let udeployDefaultApp = "";
-  let udeployDefaultEnv = "";
-  if (useUdeploy) {
-    udeployBaseUrl = await input({
-      message: "UDeploy base URL (e.g. ucd.imagile.dev:8443):",
-      default: ""
-    });
-    udeployUsername = await input({
-      message: "UDeploy username (leave blank to use a PAT instead):",
-      default: ""
-    });
-    if (udeployUsername) {
-      udeployPassword = await password({
-        message: "UDeploy password:",
-        validate: (v) => v.length > 0 || "Password cannot be blank"
-      });
-    } else {
-      udeployPat = await password({
-        message: "UDeploy personal access token:"
-      });
-    }
-    udeployDefaultApp = await input({
-      message: "Default application name (optional):",
-      default: ""
-    });
-    udeployDefaultEnv = await input({
-      message: "Default environment name (optional):",
-      default: ""
-    });
-    const hasCredentials = udeployBaseUrl && (udeployPat || udeployUsername && udeployPassword);
-    if (hasCredentials) {
-      process.stderr.write("\n  Verifying connection...\n");
-      try {
-        const tempConfig = {
-          ...loadConfig(),
-          udeploy: {
-            baseUrl: normalizeBaseUrl(udeployBaseUrl),
-            pat: udeployPat || void 0,
-            username: udeployUsername || void 0,
-            password: udeployPassword || void 0
-          }
-        };
-        const tempHttp = createHttpClient(tempConfig);
-        await tempHttp.udeploy("/cli/application");
-        process.stderr.write("  Connected.\n");
-      } catch (err) {
-        warn(`Could not connect to UDeploy: ${err instanceof Error ? err.message : String(err)}`);
-        warn("Config will be saved anyway. Check your URL and credentials and re-run pncli config init or pncli config test.");
-      }
-    }
-  }
   process.stderr.write("\n\u2500\u2500 Checkmarx \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const useCheckmarx = await confirm({
     message: "Configure Checkmarx One for vulnerability scanning?",
@@ -7344,6 +7463,70 @@ async function initGlobalConfig(start) {
       }
     }
   }
+  process.stderr.write("\n\u2500\u2500 Split.IO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useSplitio = await confirm({
+    message: "Configure Split.IO for feature flag administration?",
+    default: false
+  });
+  let splitioBaseUrl = "";
+  let splitioAdminApiKey = "";
+  if (useSplitio) {
+    splitioBaseUrl = await input({
+      message: "Split.IO Admin API base URL (e.g. https://api.split.io):",
+      default: ""
+    });
+    splitioAdminApiKey = await password({
+      message: "Split.IO Admin API key:"
+    });
+    if (splitioBaseUrl && splitioAdminApiKey) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          splitio: {
+            baseUrl: normalizeBaseUrl(splitioBaseUrl),
+            adminApiKey: splitioAdminApiKey
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.splitio("/internal/api/v2/workspaces");
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to Split.IO: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your URL and API key and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
+  process.stderr.write("\n\u2500\u2500 Figma \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
+  const useFigma = await confirm({
+    message: "Configure Figma for reading design files and comments?",
+    default: false
+  });
+  let figmaToken = "";
+  if (useFigma) {
+    process.stderr.write("  Generate a personal access token in Figma under Account Settings \u2192 Personal access tokens.\n");
+    figmaToken = await password({
+      message: "Figma personal access token:"
+    });
+    if (figmaToken) {
+      process.stderr.write("\n  Verifying connection...\n");
+      try {
+        const tempConfig = {
+          ...loadConfig(),
+          figma: {
+            baseUrl: "https://api.figma.com",
+            token: figmaToken
+          }
+        };
+        const tempHttp = createHttpClient(tempConfig);
+        await tempHttp.figma("/v1/me");
+        process.stderr.write("  Connected.\n");
+      } catch (err) {
+        warn(`Could not connect to Figma: ${err instanceof Error ? err.message : String(err)}`);
+        warn("Config will be saved anyway. Check your token and re-run pncli config init or pncli config test.");
+      }
+    }
+  }
   process.stderr.write("\n\u2500\u2500 Defaults \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n");
   const jiraProject = await input({
     message: "Default Jira project key (optional):",
@@ -7367,7 +7550,13 @@ async function initGlobalConfig(start) {
     process.exitCode = ExitCode.SUCCESS;
     return;
   }
+  const existingGlobal = loadJsonFile(getGlobalConfigPath());
+  const existingInstances = Array.isArray(existingGlobal?.jenkinsInstances) ? existingGlobal.jenkinsInstances : [];
+  const existingDynatraceEnvs = existingGlobal?.dynatrace?.environments;
+  const existingDynatraceDefault = existingGlobal?.dynatrace?.defaultEnvironment;
+  const existingOpenshift = existingGlobal?.openshift;
   writeGlobalConfig({
+    jenkinsInstances: existingInstances,
     user: {
       email: userEmail || void 0,
       userId: userId || void 0
@@ -7428,14 +7617,6 @@ async function initGlobalConfig(start) {
         ...jenkinsApiToken ? { apiToken: jenkinsApiToken } : {}
       }
     } : {},
-    ...useUdeploy && udeployBaseUrl ? {
-      udeploy: {
-        baseUrl: normalizeBaseUrl(udeployBaseUrl),
-        ...udeployPat ? { pat: udeployPat } : {},
-        ...udeployUsername ? { username: udeployUsername } : {},
-        ...udeployPassword ? { password: udeployPassword } : {}
-      }
-    } : {},
     ...useCheckmarx && checkmarxBaseUrl ? {
       checkmarx: {
         baseUrl: normalizeBaseUrl(checkmarxBaseUrl),
@@ -7472,15 +7653,25 @@ async function initGlobalConfig(start) {
     ...useOpenShift && openShiftBaseUrl ? {
       openshift: {
         baseUrl: normalizeBaseUrl(openShiftBaseUrl),
-        token: openShiftToken || void 0
+        token: openShiftToken || void 0,
+        ...existingOpenshift?.defaultEnvironment ? { defaultEnvironment: existingOpenshift.defaultEnvironment } : {},
+        ...existingOpenshift?.defaultInstance ? { defaultInstance: existingOpenshift.defaultInstance } : {},
+        ...existingOpenshift?.environments ? { environments: existingOpenshift.environments } : {}
       }
-    } : {},
+    } : existingOpenshift ? { openshift: { ...existingOpenshift } } : {},
     ...useDynatrace && dynatraceBaseUrl ? {
       dynatrace: {
         baseUrl: normalizeBaseUrl(dynatraceBaseUrl),
         apiToken: dynatraceApiToken || void 0,
         platformUrl: normalizeBaseUrl(dynatracePlatformUrl) || void 0,
-        platformToken: dynatracePlatformToken || void 0
+        platformToken: dynatracePlatformToken || void 0,
+        ...existingDynatraceDefault ? { defaultEnvironment: existingDynatraceDefault } : {},
+        ...existingDynatraceEnvs && Object.keys(existingDynatraceEnvs).length ? { environments: existingDynatraceEnvs } : {}
+      }
+    } : existingDynatraceEnvs && Object.keys(existingDynatraceEnvs).length ? {
+      dynatrace: {
+        ...existingDynatraceDefault ? { defaultEnvironment: existingDynatraceDefault } : {},
+        environments: existingDynatraceEnvs
       }
     } : {},
     ...useLogscale && logscaleBaseUrl ? {
@@ -7489,6 +7680,18 @@ async function initGlobalConfig(start) {
         token: logscaleToken || void 0
       }
     } : {},
+    ...useSplitio && splitioBaseUrl ? {
+      splitio: {
+        baseUrl: normalizeBaseUrl(splitioBaseUrl),
+        adminApiKey: splitioAdminApiKey || void 0
+      }
+    } : {},
+    ...useFigma && figmaToken ? {
+      figma: {
+        baseUrl: "https://api.figma.com",
+        token: figmaToken
+      }
+    } : {},
     defaults: {
       jira: {
         project: jiraProject || void 0
@@ -7508,12 +7711,6 @@ async function initGlobalConfig(start) {
           collection: adoCollection || void 0,
           project: adoProject || void 0
         }
-      } : {},
-      ...useUdeploy && (udeployDefaultApp || udeployDefaultEnv) ? {
-        udeploy: {
-          application: udeployDefaultApp || void 0,
-          environment: udeployDefaultEnv || void 0
-        }
       } : {}
     }
   });
@@ -8245,10 +8442,10 @@ function registerAdoWorkCommands(ado) {
       const types = await discoverTypes(workClient, collection, project);
       if (opts.save) {
         const globalConfigPath = getGlobalConfigPath(globalOpts.config);
-        const fs5 = await import("fs");
-        const existing = JSON.parse(fs5.readFileSync(globalConfigPath, "utf8") || "{}");
+        const fs6 = await import("fs");
+        const existing = JSON.parse(fs6.readFileSync(globalConfigPath, "utf8") || "{}");
         existing.ado = { ...existing.ado ?? {}, discoveredTypes: types };
-        fs5.writeFileSync(globalConfigPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
+        fs6.writeFileSync(globalConfigPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
         warn(`Saved ${types.length} types to ${globalConfigPath}`);
       }
       success(types, "ado", "work-types", start);
@@ -8277,11 +8474,11 @@ function registerAdoWorkCommands(ado) {
       ) : allFields;
       if (opts.save) {
         const globalConfigPath = getGlobalConfigPath(globalOpts.config);
-        const fs5 = await import("fs");
-        const existing = JSON.parse(fs5.readFileSync(globalConfigPath, "utf8") || "{}");
+        const fs6 = await import("fs");
+        const existing = JSON.parse(fs6.readFileSync(globalConfigPath, "utf8") || "{}");
         const aliases = buildDefaultAliases(allFields);
         existing.ado = { ...existing.ado ?? {}, discoveredFields: allFields, fieldAliases: aliases };
-        fs5.writeFileSync(globalConfigPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
+        fs6.writeFileSync(globalConfigPath, JSON.stringify(existing, null, 2) + "\n", "utf8");
         warn(`Saved ${allFields.length} fields and ${Object.keys(aliases).length} aliases to ${globalConfigPath}`);
       }
       success(fields, "ado", "work-fields", start);
@@ -8578,11 +8775,11 @@ function registerAdoRepoCommands(ado) {
       const start = Date.now();
       try {
         const globalOpts = ado.optsWithGlobals();
-        const { loadConfig: lc } = await import("./config-SQ3YHJHI.js");
+        const { loadConfig: lc } = await import("./config-JGBUUXQX.js");
         const config = lc({ configPath: globalOpts.config });
         const { collection, project, repo: repo2, gitClient } = getAdoContext(ado, true);
         const { AdoCoreClient: AdoCoreClient2 } = await import("./core-SWYVXOQ4.js");
-        const { createHttpClient: createHttpClient2 } = await import("./http-WCDXXCKQ.js");
+        const { createHttpClient: createHttpClient2 } = await import("./http-6QJU2SWP.js");
         const http = createHttpClient2(config, Boolean(globalOpts.dryRun));
         const coreClient = new AdoCoreClient2(http);
         const me = await coreClient.getConnectionData(collection);
@@ -8840,11 +9037,22 @@ var JenkinsClient = class {
 };
 
 // src/services/jenkins/commands.ts
-function getClient7(program2) {
-  const opts = program2.optsWithGlobals();
+function getClient7(cmd) {
+  const opts = cmd.optsWithGlobals();
   const config = loadConfig({ configPath: opts.config });
-  if (!config.jenkins.baseUrl) throw new PncliError("Jenkins not configured. Run: pncli config init");
-  const http = createHttpClient(config, Boolean(opts.dryRun));
+  let jenkins = config.jenkins;
+  if (opts.instance) {
+    const inst = config.jenkinsInstances.find((i) => i.name === opts.instance);
+    if (!inst) throw new PncliError(`Jenkins instance "${opts.instance}" not found. Add it to your global config using pncli config set jenkinsInstances.`);
+    jenkins = { baseUrl: inst.baseUrl, username: inst.username, apiToken: inst.apiToken };
+  }
+  if (!jenkins.baseUrl) {
+    if (opts.instance) {
+      throw new PncliError(`Jenkins instance "${opts.instance}" has no baseUrl configured. Add a baseUrl to that entry in jenkinsInstances.`);
+    }
+    throw new PncliError("Jenkins not configured. Run: pncli config init");
+  }
+  const http = createHttpClient({ ...config, jenkins }, Boolean(opts.dryRun));
   return new JenkinsClient(http);
 }
 async function pollQueueItem(client, queueItemId, pollMs, timeoutMs) {
@@ -8869,12 +9077,70 @@ async function pollBuildComplete(client, jobName, buildNumber, pollMs, timeoutMs
   throw new PncliError(`Timed out waiting for build #${buildNumber} to complete after ${timeoutMs / 1e3}s`, 1);
 }
 function registerJenkinsCommands(program2) {
-  const jenkins = program2.command("jenkins").description("Jenkins Data Center operations");
+  const jenkins = program2.command("jenkins").description("Jenkins operations").option("--instance <name>", "Named Jenkins instance from global config (overrides default jenkins config)");
   const pipeline = jenkins.command("pipeline").description("Pipeline (job/build) operations");
+  const instance = jenkins.command("instance").description("Manage named Jenkins instances in the global config");
+  instance.command("list").description("List configured Jenkins instances (API tokens masked)").action(() => {
+    const start = Date.now();
+    try {
+      const opts = jenkins.optsWithGlobals();
+      const config = loadConfig({ configPath: opts.config });
+      const instances = config.jenkinsInstances.map((i) => ({
+        ...i,
+        apiToken: i.apiToken ? "***" : void 0
+      }));
+      success({ instances }, "jenkins", "instance-list", start);
+    } catch (err) {
+      fail(err, "jenkins", "instance-list", start);
+    }
+  });
+  instance.command("add").description("Add a named Jenkins instance to the global config (appends \u2014 existing instances are preserved)").requiredOption("--name <name>", "Instance name used with --instance").requiredOption("--base-url <url>", "Jenkins base URL (e.g. jenkins.imagile.dev)").option("--username <user>", "Jenkins username").option("--api-token <token>", "Jenkins API token (prompted for when omitted on an interactive terminal, keeping it out of shell history)").option("--force", "Overwrite an instance that already uses this name").action(async (o) => {
+    const start = Date.now();
+    try {
+      const opts = jenkins.optsWithGlobals();
+      const configPath = opts.config;
+      const existing = loadConfig({ configPath }).jenkinsInstances;
+      const idx = existing.findIndex((i) => i.name === o.name);
+      if (idx >= 0 && !o.force) {
+        throw new PncliError(`Jenkins instance "${o.name}" already exists. Pass --force to overwrite it, or run: pncli jenkins instance remove --name ${o.name}`, 1);
+      }
+      let apiToken = o.apiToken;
+      if (!apiToken && process.stdin.isTTY) {
+        const { default: password2 } = await import("@inquirer/password");
+        apiToken = await password2({ message: `API token for "${o.name}" (leave blank to skip):` });
+      }
+      const entry = {
+        name: o.name,
+        baseUrl: normalizeBaseUrl(o.baseUrl),
+        ...o.username ? { username: o.username } : {},
+        ...apiToken ? { apiToken } : {}
+      };
+      const next = idx >= 0 ? existing.map((i, n) => n === idx ? entry : i) : [...existing, entry];
+      setConfigValue("jenkinsInstances", JSON.stringify(next), configPath);
+      success({ name: entry.name, baseUrl: entry.baseUrl, overwritten: idx >= 0 }, "jenkins", "instance-add", start);
+    } catch (err) {
+      fail(err, "jenkins", "instance-add", start);
+    }
+  });
+  instance.command("remove").description("Remove a named Jenkins instance from the global config").requiredOption("--name <name>", "Instance name to remove").action((o) => {
+    const start = Date.now();
+    try {
+      const opts = jenkins.optsWithGlobals();
+      const configPath = opts.config;
+      const existing = loadConfig({ configPath }).jenkinsInstances;
+      if (!existing.some((i) => i.name === o.name)) {
+        throw new PncliError(`Jenkins instance "${o.name}" not found. Run: pncli jenkins instance list`, 1);
+      }
+      setConfigValue("jenkinsInstances", JSON.stringify(existing.filter((i) => i.name !== o.name)), configPath);
+      success({ removed: o.name }, "jenkins", "instance-remove", start);
+    } catch (err) {
+      fail(err, "jenkins", "instance-remove", start);
+    }
+  });
   pipeline.command("list").description("List all jobs on the Jenkins instance (or within a folder)").option("--folder <name>", "Folder name to enumerate (supports nested folders: parentFolder/childFolder)").action(async (opts) => {
     const start = Date.now();
     try {
-      const client = getClient7(program2);
+      const client = getClient7(jenkins);
       const data = await client.listJobs(opts.folder);
       success(data, "jenkins", "pipeline-list", start);
     } catch (err) {
@@ -8884,7 +9150,7 @@ function registerJenkinsCommands(program2) {
   pipeline.command("get").description("Get details for a specific job").requiredOption("--name <job>", "Job name (use folder/job for folder-scoped jobs)").action(async (opts) => {
     const start = Date.now();
     try {
-      const client = getClient7(program2);
+      const client = getClient7(jenkins);
       const data = await client.getJob(opts.name);
       success(data, "jenkins", "pipeline-get", start);
     } catch (err) {
@@ -8897,7 +9163,7 @@ function registerJenkinsCommands(program2) {
   }, []).option("--wait", "Wait for the build to complete before returning").option("--timeout <s>", "Max wait time in seconds per phase (queue-wait and build-wait each get this budget; default 600)", "600").option("--poll <s>", "Poll interval in seconds (default 10)", "10").action(async (opts) => {
     const start = Date.now();
     try {
-      const client = getClient7(program2);
+      const client = getClient7(jenkins);
       for (const p of opts.parameter) {
         if (!p.includes("=")) throw new PncliError(`Invalid --parameter "${p}". Expected format: key=value`, 1);
       }
@@ -8930,7 +9196,7 @@ function registerJenkinsCommands(program2) {
   pipeline.command("list-runs").description("List recent builds for a job").requiredOption("--name <job>", "Job name (use folder/job for folder-scoped jobs)").option("--top <n>", "Maximum number of builds to return (default 25)", "25").action(async (opts) => {
     const start = Date.now();
     try {
-      const client = getClient7(program2);
+      const client = getClient7(jenkins);
       const top = parseInt(opts.top, 10);
       if (isNaN(top) || top <= 0) throw new PncliError(`Invalid --top "${opts.top}". Expected a positive integer.`, 1);
       const data = await client.listBuilds(opts.name, top);
@@ -8942,7 +9208,7 @@ function registerJenkinsCommands(program2) {
   pipeline.command("get-run").description("Get details for a specific build").requiredOption("--name <job>", "Job name (use folder/job for folder-scoped jobs)").requiredOption("--number <n>", "Build number").action(async (opts) => {
     const start = Date.now();
     try {
-      const client = getClient7(program2);
+      const client = getClient7(jenkins);
       const buildNumber = parseInt(opts.number, 10);
       if (isNaN(buildNumber)) throw new PncliError(`Invalid --number "${opts.number}". Expected an integer.`, 1);
       const data = await client.getBuild(opts.name, buildNumber);
@@ -8954,7 +9220,7 @@ function registerJenkinsCommands(program2) {
   pipeline.command("logs").description("Fetch console log for a build (consider --output-file for large logs)").requiredOption("--name <job>", "Job name (use folder/job for folder-scoped jobs)").requiredOption("--number <n>", "Build number").action(async (opts) => {
     const start = Date.now();
     try {
-      const client = getClient7(program2);
+      const client = getClient7(jenkins);
       const buildNumber = parseInt(opts.number, 10);
       if (isNaN(buildNumber)) throw new PncliError(`Invalid --number "${opts.number}". Expected an integer.`, 1);
       const text = await client.getConsoleLog(opts.name, buildNumber);
@@ -9031,7 +9297,7 @@ var ArtifactoryClient = class {
     }));
     const result = { builds, uri: raw.uri };
     if (builds.length === 0) {
-      result.hint = 'No builds are registered in Artifactory Build Integration. Build names may differ from ADO pipeline or uDeploy component names. Use "artifactory repos" to list repositories, then "artifactory search --repo <repo>" to locate artifacts directly.';
+      result.hint = 'No builds are registered in Artifactory Build Integration. Build names may differ from ADO pipeline names. Use "artifactory repos" to list repositories, then "artifactory search --repo <repo>" to locate artifacts directly.';
     }
     return result;
   }
@@ -9134,7 +9400,7 @@ function registerArtifactoryCommands(program2) {
       fail(err, "artifactory", "search", start);
     }
   });
-  art.command("builds").description('List builds registered in Artifactory Build Integration (names may differ from ADO pipeline or uDeploy component names; use "search --repo" when empty)').option("--timeout <s>", "Request timeout in seconds (default 60; increase for large Artifactory instances)", "60").action(async (opts) => {
+  art.command("builds").description('List builds registered in Artifactory Build Integration (names may differ from ADO pipeline names; use "search --repo" when empty)').option("--timeout <s>", "Request timeout in seconds (default 60; increase for large Artifactory instances)", "60").action(async (opts) => {
     const start = Date.now();
     try {
       const client = getClient8(program2);
@@ -9169,337 +9435,117 @@ function registerArtifactoryCommands(program2) {
   });
 }
 
-// src/services/udeploy/client.ts
-var UdeployClient = class {
+// src/services/checkmarx/client.ts
+var CheckmarxClient = class {
   constructor(http) {
     this.http = http;
   }
   http;
-  listApplications() {
-    return this.http.udeploy("/cli/application");
-  }
-  listEnvironments(application) {
-    return this.http.udeploy("/cli/application/environmentsInApplication", {
-      params: { application }
-    });
-  }
-  listComponents() {
-    return this.http.udeploy("/cli/component");
-  }
-  listVersions(component) {
-    return this.http.udeploy("/cli/component/versions", {
-      params: { component }
-    });
-  }
-  createVersion(component, name) {
-    return this.http.udeploy("/cli/version/createVersion", {
-      method: "POST",
-      params: { component, name }
-    });
+  async listProjects() {
+    const res = await this.http.checkmarx("projects", { params: { limit: 100 } });
+    const projects = res.projects ?? [];
+    if (res.filteredTotalCount > projects.length) {
+      process.stderr.write(`warning: ${res.filteredTotalCount} projects found; only showing first ${projects.length}
+`);
+    }
+    return projects;
   }
-  finishImporting(component, version) {
-    return this.http.udeploy("/cli/version/finishedImporting", {
-      method: "POST",
-      params: { component, version }
-    });
+  async getProject(id) {
+    return this.http.checkmarx(`projects/${id}`);
   }
-  runProcess(opts) {
-    return this.http.udeploy("/cli/applicationProcessRequest/request", {
-      method: "PUT",
-      body: {
-        application: opts.application,
-        applicationProcess: opts.applicationProcess,
-        environment: opts.environment,
-        onlyChanged: opts.onlyChanged ?? false,
-        ...opts.versions ? { versions: opts.versions } : {},
-        ...opts.snapshot ? { snapshot: opts.snapshot } : {},
-        ...opts.properties ? { properties: opts.properties } : {}
-      }
-    });
+  async listScans(opts = {}) {
+    const params = { limit: opts.last ?? 100 };
+    if (opts.projectId) params["project-id"] = opts.projectId;
+    const res = await this.http.checkmarx("scans", { params });
+    const scans = res.scans ?? [];
+    if (res.filteredTotalCount > scans.length) {
+      process.stderr.write(`warning: ${res.filteredTotalCount} scans found; only showing first ${scans.length}
+`);
+    }
+    return scans;
   }
-  getRequestStatus(requestId) {
-    return this.http.udeploy("/cli/applicationProcessRequest/requestStatus", {
-      params: { requestId }
-    });
+  async getScan(id) {
+    return this.http.checkmarx(`scans/${id}`);
   }
-  getRequestInfo(requestId) {
-    return this.http.udeploy("/cli/applicationProcessRequest/requestInfo", {
-      params: { requestId }
+  async getScanResultsStatistics(scanId) {
+    return this.http.checkmarx("results/summary", {
+      params: { "scan-id": scanId }
     });
   }
 };
 
-// src/services/udeploy/commands.ts
-var POLL_INTERVAL_MS2 = 5e3;
-var DEFAULT_TIMEOUT_MS = 10 * 60 * 1e3;
+// src/services/checkmarx/commands.ts
 function getClient9(program2) {
   const opts = program2.optsWithGlobals();
   const config = loadConfig({ configPath: opts.config });
-  if (!config.udeploy.baseUrl) {
-    throw new PncliError("UDeploy baseUrl not configured. Run: pncli config init", 78);
-  }
-  const http = createHttpClient(config, opts.dryRun);
-  return { client: new UdeployClient(http), config };
-}
-function resolveApplication(config, cliValue) {
-  const app = cliValue ?? config.defaults.udeploy.application;
-  if (!app) throw new PncliError("--application is required (or set defaults.udeploy.application in config)", 2);
-  return app;
-}
-function resolveEnvironment(config, cliValue) {
-  const env = cliValue ?? config.defaults.udeploy.environment;
-  if (!env) throw new PncliError("--environment is required (or set defaults.udeploy.environment in config)", 2);
-  return env;
+  if (!config.checkmarx.baseUrl) throw new PncliError("Checkmarx not configured. Run: pncli config init");
+  const http = createHttpClient(config, Boolean(opts.dryRun));
+  return new CheckmarxClient(http);
 }
-function registerUdeployCommands(program2) {
-  const udeploy = program2.command("udeploy").description("IBM UrbanCode Deploy \u2014 component versions and deployment processes").option("--application <name>", "Application name or ID").option("--environment <name>", "Environment name or ID");
-  udeploy.command("apps").description("List all applications").action(async () => {
+function registerCheckmarxCommands(program2) {
+  const cx = program2.command("checkmarx").description("Checkmarx One operations");
+  const project = cx.command("project").description("Project operations");
+  const scan = cx.command("scan").description("Scan operations");
+  project.command("list").description("List all projects").action(async () => {
     const start = Date.now();
     try {
-      const { client } = getClient9(program2);
-      const apps = await client.listApplications();
-      success(apps, "udeploy", "apps", start);
+      const data = await getClient9(program2).listProjects();
+      success(data, "checkmarx", "project-list", start);
     } catch (err) {
-      fail(err, "udeploy", "apps", start);
+      fail(err, "checkmarx", "project-list", start);
     }
   });
-  udeploy.command("environments").description("List environments for an application").action(async () => {
+  project.command("get").description("Get a project by ID").requiredOption("--id <id>", "Project UUID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client, config } = getClient9(program2);
-      const parentOpts = udeploy.opts();
-      const application = resolveApplication(config, parentOpts.application);
-      const envs = await client.listEnvironments(application);
-      success(envs, "udeploy", "environments", start);
+      const data = await getClient9(program2).getProject(opts.id);
+      success(data, "checkmarx", "project-get", start);
     } catch (err) {
-      fail(err, "udeploy", "environments", start);
+      fail(err, "checkmarx", "project-get", start);
     }
   });
-  udeploy.command("components").description("List all components").action(async () => {
+  scan.command("list").description("List scans").option("--project <id>", "Filter by project UUID").option("--last <n>", "Return only the last N scans").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client } = getClient9(program2);
-      const components = await client.listComponents();
-      success(components, "udeploy", "components", start);
+      const last = opts.last ? parseInt(opts.last, 10) : void 0;
+      if (opts.last && isNaN(last)) throw new PncliError(`Invalid --last "${opts.last}". Expected an integer.`, 1);
+      const data = await getClient9(program2).listScans({ projectId: opts.project, last });
+      success(data, "checkmarx", "scan-list", start);
     } catch (err) {
-      fail(err, "udeploy", "components", start);
+      fail(err, "checkmarx", "scan-list", start);
     }
   });
-  udeploy.command("versions").description("List versions for a component").requiredOption("--component <name>", "Component name or ID").action(async (cmdOpts) => {
+  scan.command("get").description("Get a scan by ID").requiredOption("--id <id>", "Scan UUID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client } = getClient9(program2);
-      const versions = await client.listVersions(cmdOpts.component);
-      success(versions, "udeploy", "versions", start);
+      const data = await getClient9(program2).getScan(opts.id);
+      success(data, "checkmarx", "scan-get", start);
     } catch (err) {
-      fail(err, "udeploy", "versions", start);
+      fail(err, "checkmarx", "scan-get", start);
     }
   });
-  udeploy.command("import-version").description("Create a component version and mark it ready for deployment").requiredOption("--component <name>", "Component name or ID").requiredOption("--name <name>", "Version name").option("--no-finish", "Skip marking the version as finished importing").action(async (cmdOpts) => {
+  scan.command("stats").description("Get results statistics for a scan").requiredOption("--id <id>", "Scan UUID").action(async (opts) => {
     const start = Date.now();
     try {
-      const { client } = getClient9(program2);
-      const created = await client.createVersion(cmdOpts.component, cmdOpts.name);
-      if (cmdOpts.finish) {
-        await client.finishImporting(cmdOpts.component, cmdOpts.name);
-      }
-      success({ ...created, finishedImporting: cmdOpts.finish }, "udeploy", "import-version", start);
+      const data = await getClient9(program2).getScanResultsStatistics(opts.id);
+      success(data, "checkmarx", "scan-stats", start);
     } catch (err) {
-      fail(err, "udeploy", "import-version", start);
+      fail(err, "checkmarx", "scan-stats", start);
     }
   });
-  udeploy.command("run").description("Run an application deployment process").requiredOption("--process <name>", "Application process name or ID").option("--component <name>", "Component name (repeatable)", collect, []).option("--component-version <name>", "Component version (repeatable; positionally paired with --component)", collect, []).option("--snapshot <name>", "Snapshot name or ID (alternative to specifying versions)").option("--only-changed", "Deploy only changed components", false).option("--wait", "Poll until the process completes", false).option("--timeout <ms>", "Max wait time in milliseconds", String(DEFAULT_TIMEOUT_MS)).action(async (cmdOpts) => {
-    const start = Date.now();
-    try {
-      const { client, config } = getClient9(program2);
-      const parentOpts = udeploy.opts();
-      const application = resolveApplication(config, parentOpts.application);
-      const environment = resolveEnvironment(config, parentOpts.environment);
-      const components = cmdOpts.component;
-      const versions = cmdOpts.componentVersion;
-      const versionEntries = components.map((c, i) => ({
-        component: c,
-        version: versions[i] ?? "latest"
-      }));
-      const result = await client.runProcess({
-        application,
-        applicationProcess: cmdOpts.process,
-        environment,
-        onlyChanged: cmdOpts.onlyChanged,
-        ...versionEntries.length > 0 ? { versions: versionEntries } : {},
-        ...cmdOpts.snapshot ? { snapshot: cmdOpts.snapshot } : {}
-      });
-      if (!cmdOpts.wait) {
-        success(result, "udeploy", "run", start);
-        return;
-      }
-      const timeoutMs = parseInt(cmdOpts.timeout, 10);
-      const requestId = result.requestId;
-      log(`Process started. Request ID: ${requestId}. Polling for completion...`);
-      while (true) {
-        const elapsed = Date.now() - start;
-        if (elapsed >= timeoutMs) {
-          throw new PncliError(`Timed out after ${timeoutMs}ms waiting for request ${requestId}`, 1);
-        }
-        await sleep(POLL_INTERVAL_MS2);
-        const status = await client.getRequestStatus(requestId);
-        if (status.status === "CLOSED") {
-          const outcome = { requestId, status: status.status, result: status.result, elapsed_ms: Date.now() - start };
-          if (status.result === "SUCCEEDED") {
-            success(outcome, "udeploy", "run", start);
-          } else {
-            throw new PncliError(
-              `Deployment ${status.result ?? "failed"} (requestId: ${requestId})`,
-              1
-            );
-          }
-          return;
-        }
-        log(`Status: ${status.status} (${Math.round((Date.now() - start) / 1e3)}s elapsed)`);
-      }
-    } catch (err) {
-      fail(err, "udeploy", "run", start);
-    }
-  });
-  udeploy.command("request-status").description("Get the current status of a deployment process request").requiredOption("--request-id <id>", "Request ID returned by udeploy run").action(async (cmdOpts) => {
-    const start = Date.now();
-    try {
-      const { client } = getClient9(program2);
-      const status = await client.getRequestStatus(cmdOpts.requestId);
-      success(status, "udeploy", "request-status", start);
-    } catch (err) {
-      fail(err, "udeploy", "request-status", start);
-    }
-  });
-  udeploy.command("request-info").description("Get full details of a deployment process request").requiredOption("--request-id <id>", "Request ID returned by udeploy run").action(async (cmdOpts) => {
-    const start = Date.now();
-    try {
-      const { client } = getClient9(program2);
-      const info = await client.getRequestInfo(cmdOpts.requestId);
-      success(info, "udeploy", "request-info", start);
-    } catch (err) {
-      fail(err, "udeploy", "request-info", start);
-    }
-  });
-}
-function collect(val, prev) {
-  return [...prev, val];
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-
-// src/services/checkmarx/client.ts
-var CheckmarxClient = class {
-  constructor(http) {
-    this.http = http;
-  }
-  http;
-  async listProjects() {
-    const res = await this.http.checkmarx("projects", { params: { limit: 100 } });
-    const projects = res.projects ?? [];
-    if (res.filteredTotalCount > projects.length) {
-      process.stderr.write(`warning: ${res.filteredTotalCount} projects found; only showing first ${projects.length}
-`);
-    }
-    return projects;
-  }
-  async getProject(id) {
-    return this.http.checkmarx(`projects/${id}`);
-  }
-  async listScans(opts = {}) {
-    const params = { limit: opts.last ?? 100 };
-    if (opts.projectId) params["project-id"] = opts.projectId;
-    const res = await this.http.checkmarx("scans", { params });
-    const scans = res.scans ?? [];
-    if (res.filteredTotalCount > scans.length) {
-      process.stderr.write(`warning: ${res.filteredTotalCount} scans found; only showing first ${scans.length}
-`);
-    }
-    return scans;
-  }
-  async getScan(id) {
-    return this.http.checkmarx(`scans/${id}`);
-  }
-  async getScanResultsStatistics(scanId) {
-    return this.http.checkmarx("results/summary", {
-      params: { "scan-id": scanId }
-    });
-  }
-};
-
-// src/services/checkmarx/commands.ts
-function getClient10(program2) {
-  const opts = program2.optsWithGlobals();
-  const config = loadConfig({ configPath: opts.config });
-  if (!config.checkmarx.baseUrl) throw new PncliError("Checkmarx not configured. Run: pncli config init");
-  const http = createHttpClient(config, Boolean(opts.dryRun));
-  return new CheckmarxClient(http);
-}
-function registerCheckmarxCommands(program2) {
-  const cx = program2.command("checkmarx").description("Checkmarx One operations");
-  const project = cx.command("project").description("Project operations");
-  const scan = cx.command("scan").description("Scan operations");
-  project.command("list").description("List all projects").action(async () => {
-    const start = Date.now();
-    try {
-      const data = await getClient10(program2).listProjects();
-      success(data, "checkmarx", "project-list", start);
-    } catch (err) {
-      fail(err, "checkmarx", "project-list", start);
-    }
-  });
-  project.command("get").description("Get a project by ID").requiredOption("--id <id>", "Project UUID").action(async (opts) => {
-    const start = Date.now();
-    try {
-      const data = await getClient10(program2).getProject(opts.id);
-      success(data, "checkmarx", "project-get", start);
-    } catch (err) {
-      fail(err, "checkmarx", "project-get", start);
-    }
-  });
-  scan.command("list").description("List scans").option("--project <id>", "Filter by project UUID").option("--last <n>", "Return only the last N scans").action(async (opts) => {
-    const start = Date.now();
-    try {
-      const last = opts.last ? parseInt(opts.last, 10) : void 0;
-      if (opts.last && isNaN(last)) throw new PncliError(`Invalid --last "${opts.last}". Expected an integer.`, 1);
-      const data = await getClient10(program2).listScans({ projectId: opts.project, last });
-      success(data, "checkmarx", "scan-list", start);
-    } catch (err) {
-      fail(err, "checkmarx", "scan-list", start);
-    }
-  });
-  scan.command("get").description("Get a scan by ID").requiredOption("--id <id>", "Scan UUID").action(async (opts) => {
-    const start = Date.now();
-    try {
-      const data = await getClient10(program2).getScan(opts.id);
-      success(data, "checkmarx", "scan-get", start);
-    } catch (err) {
-      fail(err, "checkmarx", "scan-get", start);
-    }
-  });
-  scan.command("stats").description("Get results statistics for a scan").requiredOption("--id <id>", "Scan UUID").action(async (opts) => {
-    const start = Date.now();
-    try {
-      const data = await getClient10(program2).getScanResultsStatistics(opts.id);
-      success(data, "checkmarx", "scan-stats", start);
-    } catch (err) {
-      fail(err, "checkmarx", "scan-stats", start);
-    }
-  });
-}
-
-// src/services/servicenow/commands.ts
-function getHttp(program2) {
-  const opts = program2.optsWithGlobals();
-  const config = loadConfig({ configPath: opts.config });
-  if (!config.servicenow.baseUrl) throw new PncliError("ServiceNow not configured. Run: pncli config init");
-  return createHttpClient(config, Boolean(opts.dryRun));
-}
-function registerServiceNowCommands(program2) {
-  const sn = program2.command("servicenow").description("ServiceNow operations");
-  const change = sn.command("change").description("Change request operations");
-  change.command("list").description("List change requests").option("--state <state>", "Filter by state (e.g. -1=Pending, 1=Open, 2=Work in Progress, 3=Closed Complete)").option("--assigned-to <user>", "Filter by assigned user sys_id or display name").option("--limit <n>", "Maximum number of results", "25").option("--fields <fields>", "Comma-separated field names to return").action(async (opts) => {
+}
+
+// src/services/servicenow/commands.ts
+function getHttp(program2) {
+  const opts = program2.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  if (!config.servicenow.baseUrl) throw new PncliError("ServiceNow not configured. Run: pncli config init");
+  return createHttpClient(config, Boolean(opts.dryRun));
+}
+function registerServiceNowCommands(program2) {
+  const sn = program2.command("servicenow").description("ServiceNow operations");
+  const change = sn.command("change").description("Change request operations");
+  change.command("list").description("List change requests").option("--state <state>", "Filter by state (e.g. -1=Pending, 1=Open, 2=Work in Progress, 3=Closed Complete)").option("--assigned-to <user>", "Filter by assigned user sys_id or display name").option("--limit <n>", "Maximum number of results", "25").option("--fields <fields>", "Comma-separated field names to return").action(async (opts) => {
     const start = Date.now();
     try {
       const http = getHttp(program2);
@@ -9770,24 +9816,51 @@ function assertInteractive(hint) {
   }
 }
 var AGENT_PATHS = {
-  "github-copilot": { project: ".agents/skills", user: path8.join(os.homedir(), ".agents/skills") },
+  "codex": { project: ".agents/skills", user: path8.join(os.homedir(), ".agents/skills") },
+  "github-copilot": { project: ".github/skills", user: path8.join(os.homedir(), ".copilot/skills") },
   "claude-code": { project: ".claude/skills", user: path8.join(os.homedir(), ".claude/skills") }
 };
+var DEFAULT_AGENT = "codex";
+var AGENT_CHOICES = Object.keys(AGENT_PATHS).join(" | ");
+var warnedRetargetedAgent = false;
+function warnIfRetargetedAgent(agentName) {
+  if (agentName !== "github-copilot" || warnedRetargetedAgent) return;
+  warnedRetargetedAgent = true;
+  warn(`--agent github-copilot now targets .github/skills (project) and ~/.copilot/skills (user). It previously meant .agents/skills \u2014 use --agent codex for that.`);
+}
 function resolveAgentName(opts) {
-  return opts.claude ? "claude-code" : opts.agent ?? "github-copilot";
+  return opts.claude ? "claude-code" : opts.agent ?? DEFAULT_AGENT;
 }
 function resolveAgentPaths(agentName) {
   const agentConfig = AGENT_PATHS[agentName];
   if (!agentConfig) {
-    throw new Error(`Unknown agent: "${agentName}". Use: ${Object.keys(AGENT_PATHS).join(" | ")}`);
+    throw new Error(`Unknown agent: "${agentName}". Use: ${AGENT_CHOICES}`);
   }
+  warnIfRetargetedAgent(agentName);
   return agentConfig;
 }
+function findGitRoot(from = process.cwd()) {
+  try {
+    const root = execFileSync3("git", ["-C", from, "rev-parse", "--show-toplevel"], {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    return root ? path8.resolve(root) : null;
+  } catch {
+    return null;
+  }
+}
+function resolveProjectPath(relativePath) {
+  const root = findGitRoot();
+  return root ? path8.resolve(root, relativePath) : path8.resolve(relativePath);
+}
+function resolveScopedPath(agentPaths, scope) {
+  return scope === "project" ? resolveProjectPath(agentPaths.project) : path8.resolve(agentPaths.user);
+}
 function resolveTargetDir(opts) {
   if (opts.target) return path8.resolve(opts.target);
   const agentConfig = resolveAgentPaths(resolveAgentName(opts));
-  const scopePath = (opts.scope ?? "user") === "project" ? agentConfig.project : agentConfig.user;
-  return path8.resolve(scopePath);
+  return resolveScopedPath(agentConfig, opts.scope ?? "user");
 }
 function getBundledSkillsDir() {
   try {
@@ -9839,14 +9912,16 @@ function resolveSkillRecord(meta, targetDir, skillName) {
   };
 }
 function listActiveSkillDirs(targetDir) {
+  if (!fs4.existsSync(targetDir)) return [];
   return fs4.readdirSync(targetDir).filter((name) => {
     if (name.startsWith(".")) return false;
-    const p = path8.join(targetDir, name);
+    const dir = path8.join(targetDir, name);
     try {
-      return fs4.statSync(p).isDirectory();
+      if (!fs4.statSync(dir).isDirectory()) return false;
     } catch {
       return false;
     }
+    return fs4.existsSync(path8.join(dir, "SKILL.md"));
   });
 }
 function disablePluginSkills(targetDir, plugin, marketplaceFilter) {
@@ -9958,6 +10033,142 @@ function detectRepoBranch(repoPath) {
     return void 0;
   }
 }
+function getRepoRemoteUrl(repoPath) {
+  try {
+    const raw = execFileSync3("git", ["-C", repoPath, "remote", "get-url", "origin"], {
+      encoding: "utf8",
+      stdio: ["pipe", "pipe", "pipe"]
+    }).trim();
+    return raw ? scrubToken(raw) : null;
+  } catch {
+    return null;
+  }
+}
+function getInstalledPluginsForMarketplace(targetDir, marketplaceName, repoUrl) {
+  const meta = readInstalledMeta(targetDir);
+  const plugins = /* @__PURE__ */ new Set();
+  for (const records of [meta.skills, meta.disabled ?? {}]) {
+    for (const record of Object.values(records)) {
+      if (record.source === "marketplace" && record.plugin) {
+        if (record.marketplace === marketplaceName || repoUrl && record.installedFrom === repoUrl) {
+          plugins.add(record.plugin);
+        }
+      }
+    }
+  }
+  return [...plugins];
+}
+function readCustomTargets(globalConfig) {
+  const raw = globalConfig.skillsTargets;
+  if (!Array.isArray(raw)) return [];
+  return [...new Set(raw.filter((t) => typeof t === "string" && t.length > 0).map((t) => path8.resolve(t)))];
+}
+function rememberCustomTarget(configPath, targetDir) {
+  const resolved = path8.resolve(targetDir);
+  const builtIn = Object.values(AGENT_PATHS).flatMap((a) => [path8.resolve(a.user), resolveProjectPath(a.project)]);
+  if (builtIn.includes(resolved)) return false;
+  const existing = loadJsonFile(configPath) ?? {};
+  const targets = readCustomTargets(existing);
+  if (targets.includes(resolved)) return false;
+  writeGlobalConfig({ ...existing, skillsTargets: [...targets, resolved] }, configPath);
+  return true;
+}
+function forgetCustomTarget(configPath, targetDir) {
+  const resolved = path8.resolve(targetDir);
+  const existing = loadJsonFile(configPath) ?? {};
+  const targets = readCustomTargets(existing);
+  if (!targets.includes(resolved)) return false;
+  writeGlobalConfig({ ...existing, skillsTargets: targets.filter((t) => t !== resolved) }, configPath);
+  return true;
+}
+function summarizeLocation(agent, scope, targetDir) {
+  const resolved = path8.resolve(targetDir);
+  const base = {
+    agent,
+    scope,
+    path: resolved,
+    exists: fs4.existsSync(resolved),
+    totalSkills: 0,
+    marketplaceSkills: 0,
+    bundledSkills: 0,
+    untrackedSkills: 0,
+    disabledSkills: 0,
+    disabledStashMissing: []
+  };
+  if (!base.exists) return base;
+  const meta = readInstalledMeta(resolved);
+  for (const skillName of listActiveSkillDirs(resolved)) {
+    base.totalSkills++;
+    const record = resolveSkillRecord(meta, resolved, skillName);
+    if (record?.source === "marketplace") base.marketplaceSkills++;
+    else if (record?.source === "bundled") base.bundledSkills++;
+    else base.untrackedSkills++;
+  }
+  const disabledNames = Object.keys(meta.disabled ?? {});
+  base.disabledSkills = disabledNames.length;
+  const stashDir = path8.join(resolved, DISABLED_SUBDIR);
+  base.disabledStashMissing = disabledNames.filter((name) => !fs4.existsSync(path8.join(stashDir, name)));
+  return base;
+}
+function listKnownLocations(globalConfig) {
+  const builtIn = Object.entries(AGENT_PATHS).flatMap(
+    ([agent, paths]) => ["project", "user"].map((scope) => summarizeLocation(agent, scope, resolveScopedPath(paths, scope)))
+  );
+  const seen = new Set(builtIn.map((l) => l.path));
+  const custom = readCustomTargets(globalConfig).filter((dir) => !seen.has(dir)).map((dir) => summarizeLocation("custom", "custom", dir));
+  return [...builtIn, ...custom];
+}
+function buildMarketplaceIndex(marketplaces) {
+  const byName = /* @__PURE__ */ new Map();
+  const byUrl = /* @__PURE__ */ new Map();
+  for (const m of marketplaces) {
+    const name = marketplaceLabel(m);
+    if (name) byName.set(name, m);
+    if (m.repoUrl) byUrl.set(m.repoUrl, m);
+  }
+  return { byName, byUrl };
+}
+function collectSkillStatus(globalConfig, locations) {
+  const { byName, byUrl } = buildMarketplaceIndex(getAllMarketplaces(globalConfig));
+  const remoteCache = /* @__PURE__ */ new Map();
+  const remoteFor = (localPath) => {
+    if (!localPath || !fs4.existsSync(localPath)) return null;
+    if (!remoteCache.has(localPath)) remoteCache.set(localPath, getRepoRemoteUrl(localPath));
+    return remoteCache.get(localPath) ?? null;
+  };
+  const records = [];
+  for (const location of locations) {
+    if (!location.exists) continue;
+    const meta = readInstalledMeta(location.path);
+    const push = (skillName, record, enabled) => {
+      const recordedName = record?.marketplace ?? null;
+      const registered = (recordedName ? byName.get(recordedName) : void 0) ?? (record?.installedFrom ? byUrl.get(record.installedFrom) : void 0) ?? null;
+      records.push({
+        skill: skillName,
+        path: enabled ? path8.join(location.path, skillName) : path8.join(location.path, DISABLED_SUBDIR, skillName),
+        agent: location.agent,
+        scope: location.scope,
+        location: location.path,
+        enabled,
+        source: record?.source ?? "untracked",
+        plugin: record?.plugin ?? null,
+        marketplace: recordedName ?? (registered ? marketplaceLabel(registered) : null),
+        repoUrl: registered?.repoUrl ?? record?.installedFrom ?? null,
+        localPath: registered?.localPath ?? null,
+        upstreamRemote: remoteFor(registered?.localPath),
+        branch: record?.branch ?? null,
+        installedAt: record?.installedAt ?? null
+      });
+    };
+    for (const skillName of listActiveSkillDirs(location.path)) {
+      push(skillName, resolveSkillRecord(meta, location.path, skillName), true);
+    }
+    for (const [skillName, record] of Object.entries(meta.disabled ?? {})) {
+      push(skillName, record, false);
+    }
+  }
+  return records;
+}
 function recordInstalledSkills(targetDir, skillNames, record) {
   if (skillNames.length === 0) return;
   const meta = readInstalledMeta(targetDir);
@@ -10121,7 +10332,7 @@ function installAllPlugins(resolvedPath, marketplaceName, url, targetDir) {
   const { results, totalInstalled } = installPluginsForMarketplace(resolvedPath, marketplaceName, url, pluginChoices.map((p) => p.name), targetDir);
   return { pluginResults: results, totalInstalled };
 }
-function syncMarketplacePlugins(m, targetDir, force, pluginFilter) {
+function syncMarketplacePlugins(m, targetDir, force, pluginFilter, installedOnly = false) {
   const marketplaceName = marketplaceLabel(m);
   try {
     const marketplacePath = m.localPath;
@@ -10140,7 +10351,16 @@ function syncMarketplacePlugins(m, targetDir, force, pluginFilter) {
     }
     let pluginNames;
     if (pluginFilter === "all") {
-      pluginNames = pluginChoices.map((p) => p.name);
+      if (installedOnly) {
+        const installed = getInstalledPluginsForMarketplace(targetDir, marketplaceName, m.repoUrl).filter((name) => pluginChoices.some((p) => p.name === name));
+        if (installed.length === 0) {
+          warn(`No installed plugins found for "${marketplaceName}" \u2014 skipping. Run marketplace sync without --installed-only to install plugins.`);
+          return { marketplace: marketplaceName, skipped: true, installedOnly: true, message: "No installed plugins found \u2014 nothing to sync." };
+        }
+        pluginNames = installed;
+      } else {
+        pluginNames = pluginChoices.map((p) => p.name);
+      }
     } else if (pluginChoices.some((p) => p.name === pluginFilter)) {
       pluginNames = [pluginFilter];
     } else {
@@ -10210,7 +10430,7 @@ async function marketplaceAddAction(url, localPath, opts, commandName) {
 }
 function registerSkillsCommands(program2) {
   const skills = program2.command("skills").description("Manage pncli Claude Code skills");
-  skills.command("install").description("Install pncli skills into the current repo").option("--agent <agent>", "Target agent host: github-copilot | claude-code", "github-copilot").option("--scope <scope>", "Installation scope: project | user", "project").option("--target <dir>", "Override install directory (ignores --agent and --scope)").action((opts) => {
+  skills.command("install").description("Install pncli skills into the current repo").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES}`, DEFAULT_AGENT).option("--scope <scope>", "Installation scope: project | user", "project").option("--target <dir>", "Override install directory (ignores --agent and --scope)").action((opts) => {
     const start = Date.now();
     try {
       let targetDir;
@@ -10218,8 +10438,7 @@ function registerSkillsCommands(program2) {
         targetDir = path8.resolve(opts.target);
       } else {
         const agentConfig = resolveAgentPaths(opts.agent);
-        const scopePath = opts.scope === "user" ? agentConfig.user : agentConfig.project;
-        targetDir = path8.resolve(scopePath);
+        targetDir = resolveScopedPath(agentConfig, opts.scope === "user" ? "user" : "project");
       }
       const resolvedTarget = path8.resolve(targetDir);
       const bundledDir = getBundledSkillsDir();
@@ -10268,6 +10487,14 @@ function registerSkillsCommands(program2) {
         warn(`Failed to install: ${failed.join(", ")}`);
       }
       recordInstalledSkills(targetDir, installed, { source: "bundled" });
+      let tracked = false;
+      if (opts.target && installed.length > 0) {
+        try {
+          tracked = rememberCustomTarget(getGlobalConfigPath(), targetDir);
+        } catch {
+          warn(`Installed to ${targetDir}, but could not record it in the global config; it will not appear in "skills locations".`);
+        }
+      }
       success({
         installed,
         failed,
@@ -10275,13 +10502,14 @@ function registerSkillsCommands(program2) {
         total: installed.length,
         agent: opts.target ? "custom" : opts.agent,
         scope: opts.target ? "custom" : opts.scope,
-        source: "bundled"
+        source: "bundled",
+        ...opts.target ? { trackedAsCustomTarget: tracked } : {}
       }, "skills", "install", start);
     } catch (err) {
       fail(err, "skills", "install", start);
     }
   });
-  skills.command("list").description("List locally installed skills").option("--agent <agent>", "Target agent host: github-copilot | claude-code", "github-copilot").option("--scope <scope>", "Installation scope: project | user", "project").option("--target <dir>", "Override skills directory to scan").action((opts) => {
+  skills.command("list").description("List locally installed skills").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES}`, DEFAULT_AGENT).option("--scope <scope>", "Installation scope: project | user", "project").option("--target <dir>", "Override skills directory to scan").action((opts) => {
     const start = Date.now();
     try {
       let targetDir;
@@ -10289,8 +10517,7 @@ function registerSkillsCommands(program2) {
         targetDir = path8.resolve(opts.target);
       } else {
         const agentConfig = resolveAgentPaths(opts.agent);
-        const scopePath = opts.scope === "user" ? agentConfig.user : agentConfig.project;
-        targetDir = path8.resolve(scopePath);
+        targetDir = resolveScopedPath(agentConfig, opts.scope === "user" ? "user" : "project");
       }
       if (!fs4.existsSync(targetDir)) {
         success({ skills: [], message: `No skills directory found at ${targetDir}. Run: pncli skills install` }, "skills", "list", start);
@@ -10342,7 +10569,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "list", start);
     }
   });
-  skills.command("uninstall").description("Uninstall a skill (defaults to user scope, matching the marketplace install target; pass --scope project for skills installed via `skills install`)").argument("<name>", "Skill name to uninstall (the directory name under your skills folder)").option("--agent <agent>", "Target agent host: github-copilot | claude-code", "github-copilot").option("--scope <scope>", "Installation scope to uninstall from: project | user", "user").option("--claude", "Shorthand for --agent claude-code").option("--target <dir>", "Override skills directory").action((name, opts) => {
+  skills.command("uninstall").description("Uninstall a skill (defaults to user scope, matching the marketplace install target; pass --scope project for skills installed via `skills install`)").argument("<name>", "Skill name to uninstall (the directory name under your skills folder)").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES}`, DEFAULT_AGENT).option("--scope <scope>", "Installation scope to uninstall from: project | user", "user").option("--claude", "Shorthand for --agent claude-code").option("--target <dir>", "Override skills directory").action((name, opts) => {
     const start = Date.now();
     try {
       let targetDir;
@@ -10350,8 +10577,7 @@ function registerSkillsCommands(program2) {
         targetDir = path8.resolve(opts.target);
       } else {
         const agentConfig = resolveAgentPaths(resolveAgentName(opts));
-        const scopePath = opts.scope === "project" ? agentConfig.project : agentConfig.user;
-        targetDir = path8.resolve(scopePath);
+        targetDir = resolveScopedPath(agentConfig, opts.scope === "project" ? "project" : "user");
       }
       const resolvedTarget = path8.resolve(targetDir);
       const skillDir = path8.resolve(targetDir, name);
@@ -10376,9 +10602,77 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "uninstall", start);
     }
   });
+  skills.command("locations").description("List every skills install path pncli knows about, with per-directory skill counts").action(() => {
+    const start = Date.now();
+    try {
+      const globalConfig = loadJsonFile(getGlobalConfigPath()) ?? {};
+      const locations = listKnownLocations(globalConfig);
+      const gitRoot = findGitRoot();
+      success({
+        locations,
+        activeLocations: locations.filter((l) => l.exists).length,
+        totalSkills: locations.reduce((sum, l) => sum + l.totalSkills, 0),
+        defaultAgent: DEFAULT_AGENT,
+        projectRoot: gitRoot
+      }, "skills", "locations", start);
+    } catch (err) {
+      fail(err, "skills", "locations", start);
+    }
+  });
+  skills.command("status").description("Show every installed skill with its plugin, marketplace, and upstream remote").option("--marketplace <name>", "Only show skills installed from this marketplace (name or clone URL)").option("--plugin <name>", "Only show skills belonging to this plugin").option("--source <source>", "Filter by provenance: marketplace | bundled | untracked").option("--agent <agent>", `Only show locations for this agent host: ${AGENT_CHOICES}`).option("--scope <scope>", "Only show this scope: project | user | custom").action((opts) => {
+    const start = Date.now();
+    try {
+      if (opts.agent && !AGENT_PATHS[opts.agent]) {
+        throw new Error(`Unknown agent: "${opts.agent}". Use: ${AGENT_CHOICES}`);
+      }
+      if (opts.source && !["marketplace", "bundled", "untracked"].includes(opts.source)) {
+        throw new Error(`Unknown source: "${opts.source}". Use: marketplace | bundled | untracked`);
+      }
+      if (opts.scope && !["project", "user", "custom"].includes(opts.scope)) {
+        throw new Error(`Unknown scope: "${opts.scope}". Use: project | user | custom`);
+      }
+      const globalConfig = loadJsonFile(getGlobalConfigPath()) ?? {};
+      const locations = listKnownLocations(globalConfig).filter((l) => !opts.agent || l.agent === opts.agent).filter((l) => !opts.scope || l.scope === opts.scope);
+      const skillRecords = collectSkillStatus(globalConfig, locations).filter((r) => !opts.plugin || r.plugin === opts.plugin).filter((r) => !opts.source || r.source === opts.source).filter((r) => !opts.marketplace || r.marketplace === opts.marketplace || r.repoUrl === opts.marketplace).sort((a, b) => a.location.localeCompare(b.location) || a.skill.localeCompare(b.skill));
+      const byMarketplace = {};
+      for (const record of skillRecords) {
+        const key = record.marketplace ?? "(none)";
+        byMarketplace[key] = (byMarketplace[key] ?? 0) + 1;
+      }
+      success({
+        skills: skillRecords,
+        total: skillRecords.length,
+        enabled: skillRecords.filter((r) => r.enabled).length,
+        disabled: skillRecords.filter((r) => !r.enabled).length,
+        untracked: skillRecords.filter((r) => r.source === "untracked").length,
+        byMarketplace,
+        locations
+      }, "skills", "status", start);
+    } catch (err) {
+      fail(err, "skills", "status", start);
+    }
+  });
+  skills.command("forget-target").description("Stop tracking a custom --target directory in skills locations / status (does not delete any files)").argument("<dir>", "The custom install directory to forget").action((dir) => {
+    const start = Date.now();
+    try {
+      const configPath = getGlobalConfigPath();
+      const resolved = path8.resolve(dir);
+      const forgotten = forgetCustomTarget(configPath, resolved);
+      if (!forgotten) {
+        warn(`${resolved} is not a tracked custom target \u2014 nothing to forget.`);
+      }
+      success({
+        target: resolved,
+        forgotten,
+        remaining: readCustomTargets(loadJsonFile(configPath) ?? {})
+      }, "skills", "forget-target", start);
+    } catch (err) {
+      fail(err, "skills", "forget-target", start);
+    }
+  });
   const marketplace = skills.command("marketplace").description("Manage git-hosted skills marketplaces");
   function withMarketplaceAddOptions(cmd) {
-    return cmd.argument("<url>", "Git clone URL of the marketplace repository").argument("[localPath]", "Local directory to clone into (default: ~/.agents/marketplaces/<repo-name>)").option("--name <name>", "Human-readable name for this marketplace (default: derived from URL)").option("--branch <branch>", "Branch to clone (default: remote HEAD)").option("--token <token>", "HTTP access token for authenticated clone and pull (GitHub PAT or Bitbucket token)").option("--agent <agent>", "Target agent host for plugin install: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code");
+    return cmd.argument("<url>", "Git clone URL of the marketplace repository").argument("[localPath]", "Local directory to clone into (default: ~/.agents/marketplaces/<repo-name>)").option("--name <name>", "Human-readable name for this marketplace (default: derived from URL)").option("--branch <branch>", "Branch to clone (default: remote HEAD)").option("--token <token>", "HTTP access token for authenticated clone and pull (GitHub PAT or Bitbucket token)").option("--agent <agent>", `Target agent host for plugin install: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code");
   }
   withMarketplaceAddOptions(
     marketplace.command("add").description("Register a new marketplace, clone it, and install all its plugins")
@@ -10396,7 +10690,8 @@ function registerSkillsCommands(program2) {
           name: marketplaceLabel(m),
           repoUrl: m.repoUrl,
           localPath: m.localPath,
-          tokenConfigured: !!m.token
+          tokenConfigured: !!m.token,
+          upstreamRemote: m.localPath && fs4.existsSync(m.localPath) ? getRepoRemoteUrl(m.localPath) : null
         })),
         total: all.length
       }, "skills", "marketplace-list", start);
@@ -10434,7 +10729,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "marketplace-remove", start);
     }
   });
-  marketplace.command("sync").description("Pull latest marketplace content and install plugin skills (interactive picker when no plugin is given)").argument("[plugin]", 'Plugin name to install, or "all" to install every plugin (skips interactive selection)').option("--marketplace <name>", 'Marketplace name to sync, or "all" to sync every registered marketplace (skips interactive selection)').option("--agent <agent>", "Target agent host: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code").option("--force", 'Reinstall even if a marketplace has no new changes (applies to single-plugin and "all" installs alike)').action(async (plugin, opts) => {
+  marketplace.command("sync").description("Pull latest marketplace content and install plugin skills (interactive picker when no plugin is given)").argument("[plugin]", 'Plugin name to install, or "all" to install every plugin (skips interactive selection)').option("--marketplace <name>", 'Marketplace name to sync, or "all" to sync every registered marketplace (skips interactive selection)').option("--agent <agent>", `Target agent host: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code").option("--force", 'Reinstall even if a marketplace has no new changes (applies to single-plugin and "all" installs alike)').option("--installed-only", "Only sync plugins that are already installed \u2014 skip plugins newly added to the marketplace").action(async (plugin, opts) => {
     const start = Date.now();
     try {
       const configPath = getGlobalConfigPath();
@@ -10444,8 +10739,9 @@ function registerSkillsCommands(program2) {
       }
       const targetDir = resolveAgentPaths(resolveAgentName(opts)).user;
       const force = opts.force ?? false;
+      const installedOnly = opts.installedOnly ?? false;
       if (opts.marketplace === "all") {
-        const results = allMarketplaces.map((m) => syncMarketplacePlugins(m, targetDir, force, plugin ?? "all"));
+        const results = allMarketplaces.map((m) => syncMarketplacePlugins(m, targetDir, force, plugin ?? "all", installedOnly));
         success({ allMarketplaces: true, marketplaces: results, target: targetDir }, "skills", "marketplace-sync", start);
         return;
       }
@@ -10473,7 +10769,7 @@ function registerSkillsCommands(program2) {
             ]
           });
           if (chosen === ALL_MARKETPLACES) {
-            const results2 = allMarketplaces.map((m) => syncMarketplacePlugins(m, targetDir, force, selectedPlugin ?? "all"));
+            const results2 = allMarketplaces.map((m) => syncMarketplacePlugins(m, targetDir, force, selectedPlugin ?? "all", installedOnly));
             success({ allMarketplaces: true, marketplaces: results2, target: targetDir }, "skills", "marketplace-sync", start);
             return;
           }
@@ -10520,10 +10816,29 @@ function registerSkillsCommands(program2) {
           }, "skills", "marketplace-sync", start);
           return;
         }
-        const pluginNames = selectedPlugin === "all" ? pluginChoices.map((p) => p.name) : [selectedPlugin];
+        let pluginNames;
+        if (selectedPlugin === "all") {
+          if (installedOnly) {
+            const installed = getInstalledPluginsForMarketplace(targetDir, marketplaceName, selectedMarketplace.repoUrl).filter((name) => pluginChoices.some((p) => p.name === name));
+            if (installed.length === 0) {
+              success({
+                marketplace: marketplaceName,
+                skipped: true,
+                installedOnly: true,
+                message: `No installed plugins found for "${marketplaceName}" \u2014 run marketplace sync without --installed-only to install plugins.`
+              }, "skills", "marketplace-sync", start);
+              return;
+            }
+            pluginNames = installed;
+          } else {
+            pluginNames = pluginChoices.map((p) => p.name);
+          }
+        } else {
+          pluginNames = [selectedPlugin];
+        }
         const { results, totalInstalled } = installPluginsForMarketplace(marketplacePath, marketplaceName, selectedMarketplace.repoUrl, pluginNames, targetDir);
         if (selectedPlugin === "all") {
-          success({ marketplace: marketplaceName, plugins: results, total: totalInstalled, target: targetDir, marketplaceUpdated: updated }, "skills", "marketplace-sync", start);
+          success({ marketplace: marketplaceName, plugins: results, total: totalInstalled, target: targetDir, marketplaceUpdated: updated, ...installedOnly ? { installedOnly: true } : {} }, "skills", "marketplace-sync", start);
         } else {
           const single = results[selectedPlugin] ?? { installed: [], failed: [] };
           success({
@@ -10542,7 +10857,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "marketplace-sync", start);
     }
   });
-  marketplace.command("purge-plugin").description("Remove all skills installed from a specific plugin (or all plugins in a marketplace)").argument("<plugin>", 'Plugin name to purge, or "all" to remove every skill from the marketplace').option("--marketplace <name>", "Restrict purge to skills from this marketplace (by name or repo URL)").option("--agent <agent>", "Target agent host: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action((plugin, opts) => {
+  marketplace.command("purge-plugin").description("Remove all skills installed from a specific plugin (or all plugins in a marketplace)").argument("<plugin>", 'Plugin name to purge, or "all" to remove every skill from the marketplace').option("--marketplace <name>", "Restrict purge to skills from this marketplace (by name or repo URL)").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action((plugin, opts) => {
     const start = Date.now();
     try {
       let targetDir;
@@ -10550,8 +10865,7 @@ function registerSkillsCommands(program2) {
         targetDir = path8.resolve(opts.target);
       } else {
         const agentConfig = resolveAgentPaths(resolveAgentName(opts));
-        const scopePath = (opts.scope ?? "user") === "project" ? agentConfig.project : agentConfig.user;
-        targetDir = path8.resolve(scopePath);
+        targetDir = resolveScopedPath(agentConfig, opts.scope ?? "user");
       }
       const resolvedTarget = path8.resolve(targetDir);
       if (!fs4.existsSync(targetDir)) {
@@ -10616,7 +10930,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "marketplace-purge-plugin", start);
     }
   });
-  marketplace.command("disable").description("Temporarily deactivate a plugin's skills without deleting them (re-enable with `marketplace enable`)").argument("<plugin>", "Plugin name to disable").option("--marketplace <name>", "Restrict to skills from this marketplace (by name or repo URL)").option("--agent <agent>", "Target agent host: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action((plugin, opts) => {
+  marketplace.command("disable").description("Temporarily deactivate a plugin's skills without deleting them (re-enable with `marketplace enable`)").argument("<plugin>", "Plugin name to disable").option("--marketplace <name>", "Restrict to skills from this marketplace (by name or repo URL)").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action((plugin, opts) => {
     const start = Date.now();
     try {
       const targetDir = resolveTargetDir(opts);
@@ -10639,7 +10953,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "marketplace-disable", start);
     }
   });
-  marketplace.command("enable").description("Re-activate a previously disabled plugin's skills").argument("<plugin>", "Plugin name to enable").option("--marketplace <name>", "Restrict to skills from this marketplace (by name or repo URL)").option("--agent <agent>", "Target agent host: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action((plugin, opts) => {
+  marketplace.command("enable").description("Re-activate a previously disabled plugin's skills").argument("<plugin>", "Plugin name to enable").option("--marketplace <name>", "Restrict to skills from this marketplace (by name or repo URL)").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action((plugin, opts) => {
     const start = Date.now();
     try {
       const targetDir = resolveTargetDir(opts);
@@ -10668,7 +10982,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "marketplace-enable", start);
     }
   });
-  marketplace.command("manage").description("Manage marketplaces and plugins: toggle plugins on/off, add or remove marketplaces (interactive)").option("--agent <agent>", "Target agent host: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action(async (opts) => {
+  marketplace.command("manage").description("Manage marketplaces and plugins: toggle plugins on/off, add or remove marketplaces (interactive)").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code").option("--scope <scope>", "Installation scope: project | user (default: user)").option("--target <dir>", "Override skills directory").action(async (opts) => {
     const start = Date.now();
     try {
       assertInteractive("Use `pncli skills marketplace enable|disable <plugin>`, `add <url>`, and `remove <name>` to manage non-interactively.");
@@ -10771,7 +11085,7 @@ function registerSkillsCommands(program2) {
       fail(err, "skills", "marketplace-manage", start);
     }
   });
-  skills.command("purge-user").description("Remove all skills from the user-level skills folder for the target agent").option("--agent <agent>", "Target agent host: github-copilot | claude-code (default: github-copilot)").option("--claude", "Shorthand for --agent claude-code").option("--force", "Skip confirmation \u2014 remove all skills without prompting").action((opts) => {
+  skills.command("purge-user").description("Remove all skills from the user-level skills folder for the target agent").option("--agent <agent>", `Target agent host: ${AGENT_CHOICES} (default: ${DEFAULT_AGENT})`).option("--claude", "Shorthand for --agent claude-code").option("--force", "Skip confirmation \u2014 remove all skills without prompting").action((opts) => {
     const start = Date.now();
     try {
       const userDir = resolveAgentPaths(resolveAgentName(opts)).user;
@@ -10915,13 +11229,47 @@ function containerState(s) {
   if (s.running) return "Running";
   return "unknown";
 }
-function getHttp2(program2) {
-  const opts = program2.optsWithGlobals();
-  const config = loadConfig({ configPath: opts.config });
+function resolveCluster(config, env, instance) {
+  const effectiveEnv = env ?? config.openshift.defaultEnvironment;
+  const effectiveInstance = instance ?? config.openshift.defaultInstance;
+  if (effectiveEnv && effectiveInstance) {
+    const envCfg = config.openshift.environments[effectiveEnv];
+    const instCfg = envCfg?.instances?.[effectiveInstance];
+    if (!instCfg?.baseUrl) {
+      throw new PncliError(
+        `OpenShift cluster "${effectiveEnv}/${effectiveInstance}" is not configured or missing baseUrl. Run: pncli config set openshift.environments.${effectiveEnv}.instances.${effectiveInstance}.baseUrl <url>`
+      );
+    }
+    if (!instCfg.token) {
+      throw new PncliError(
+        `OpenShift cluster "${effectiveEnv}/${effectiveInstance}" is missing a token. Run: pncli config set openshift.environments.${effectiveEnv}.instances.${effectiveInstance}.token <token>`
+      );
+    }
+    return { baseUrl: instCfg.baseUrl, token: instCfg.token };
+  }
+  if (effectiveEnv && !effectiveInstance) {
+    throw new PncliError(
+      `OpenShift environment "${effectiveEnv}" requires a cluster instance. Pass --instance <name> or run: pncli config set openshift.defaultInstance <name>`
+    );
+  }
+  if (!effectiveEnv && effectiveInstance) {
+    throw new PncliError(
+      `OpenShift instance "${effectiveInstance}" requires an environment. Pass --env <name> or run: pncli config set openshift.defaultEnvironment <name>`
+    );
+  }
   if (!config.openshift.baseUrl) {
     throw new PncliError("OpenShift not configured. Run: pncli config init");
   }
-  return createHttpClient(config, Boolean(opts.dryRun));
+  return { baseUrl: config.openshift.baseUrl, token: config.openshift.token };
+}
+function getHttp2(oc) {
+  const opts = oc.optsWithGlobals();
+  const config = loadConfig({ configPath: opts.config });
+  const cluster = resolveCluster(config, opts.env, opts.instance);
+  return createHttpClient(
+    { ...config, openshift: { ...config.openshift, ...cluster } },
+    Boolean(opts.dryRun)
+  );
 }
 function podAge(creationTimestamp) {
   if (!creationTimestamp) return "unknown";
@@ -10934,12 +11282,63 @@ function podAge(creationTimestamp) {
   if (ageHours < 24) return `${ageHours}h`;
   return `${Math.floor(ageHours / 24)}d`;
 }
+function parseCpuMillicores(cpu) {
+  if (!cpu) return null;
+  if (cpu.endsWith("n")) return Math.round(Number(cpu.slice(0, -1)) / 1e6);
+  if (cpu.endsWith("u")) return Math.round(Number(cpu.slice(0, -1)) / 1e3);
+  if (cpu.endsWith("m")) return Number(cpu.slice(0, -1));
+  const whole = Number(cpu);
+  if (!Number.isNaN(whole)) return Math.round(whole * 1e3);
+  return null;
+}
+function parseMemMiB(mem) {
+  if (!mem) return null;
+  const round2 = (n) => Math.round(n * 100) / 100;
+  if (mem.endsWith("Ki")) return round2(Number(mem.slice(0, -2)) / 1024);
+  if (mem.endsWith("Mi")) return Number(mem.slice(0, -2));
+  if (mem.endsWith("Gi")) return Math.round(Number(mem.slice(0, -2)) * 1024);
+  if (mem.endsWith("Ti")) return Math.round(Number(mem.slice(0, -2)) * 1024 * 1024);
+  if (mem.endsWith("K")) return round2(Number(mem.slice(0, -1)) * 1e3 / (1024 * 1024));
+  if (mem.endsWith("M")) return round2(Number(mem.slice(0, -1)) * 1e3 * 1e3 / (1024 * 1024));
+  if (mem.endsWith("G")) return Math.round(Number(mem.slice(0, -1)) * 1e3 * 1e3 * 1e3 / (1024 * 1024));
+  const bytes = Number(mem);
+  if (!Number.isNaN(bytes)) return round2(bytes / (1024 * 1024));
+  return null;
+}
 function registerOpenShiftCommands(program2) {
-  const oc = program2.command("openshift").description("OpenShift / Kubernetes operations");
+  const oc = program2.command("openshift").description("OpenShift / Kubernetes operations").option("--env <name>", "Named environment (openshift.environments.<name>) to target").option("--instance <name>", "Named cluster instance within the environment to target");
+  const cluster = oc.command("cluster").description("Manage named OpenShift cluster configurations");
+  cluster.command("list").description("List all configured OpenShift environments and cluster instances").action(() => {
+    const start = Date.now();
+    try {
+      const opts = oc.optsWithGlobals();
+      const config = loadConfig({ configPath: opts.config });
+      const clusters = [];
+      for (const [envName, envCfg] of Object.entries(config.openshift.environments)) {
+        for (const [instName, instCfg] of Object.entries(envCfg.instances ?? {})) {
+          clusters.push({ environment: envName, instance: instName, baseUrl: instCfg.baseUrl });
+        }
+      }
+      const legacy = config.openshift.baseUrl ? [{ environment: "(default)", instance: "(default)", baseUrl: config.openshift.baseUrl }] : [];
+      success(
+        {
+          count: clusters.length + legacy.length,
+          clusters: [...legacy, ...clusters],
+          defaultEnvironment: config.openshift.defaultEnvironment,
+          defaultInstance: config.openshift.defaultInstance
+        },
+        "openshift",
+        "cluster-list",
+        start
+      );
+    } catch (err) {
+      fail(err, "openshift", "cluster-list", start);
+    }
+  });
   oc.command("pods").description("List pod health summary for a namespace \u2014 pre-processed for LLM analysis. Use --raw to return the full unmodified Kubernetes pod objects.").requiredOption("--namespace <ns>", "Kubernetes namespace").option("--label-selector <selector>", "Label selector (e.g. app=my-app)").option("--raw", "Return full Kubernetes pod objects without summarization (includes env vars, images, node name, annotations, resources, etc.)", false).action(async (opts) => {
     const start = Date.now();
     try {
-      const http = getHttp2(program2);
+      const http = getHttp2(oc);
       const params = {};
       if (opts.labelSelector) params["labelSelector"] = opts.labelSelector;
       const podList = await http.openshift(
@@ -11048,7 +11447,7 @@ function registerOpenShiftCommands(program2) {
   oc.command("events").description("List Warning events for a namespace \u2014 pre-filtered for LLM analysis").requiredOption("--namespace <ns>", "Kubernetes namespace").option("--field-selector <selector>", "Additional field selector (e.g. involvedObject.name=my-pod)").option("--all", "Include Normal events in addition to Warning events", false).action(async (opts) => {
     const start = Date.now();
     try {
-      const http = getHttp2(program2);
+      const http = getHttp2(oc);
       const params = {};
       const selectors = [];
       if (!opts.all) selectors.push("type=Warning");
@@ -11082,7 +11481,7 @@ function registerOpenShiftCommands(program2) {
   oc.command("logs").description("Get recent log lines from a pod container").requiredOption("--namespace <ns>", "Kubernetes namespace").requiredOption("--pod <name>", "Pod name").option("--container <name>", "Container name (defaults to first container)").option("--lines <n>", "Number of most-recent lines to return", "100").option("--previous", "Return logs from the previous container instance", false).action(async (opts) => {
     const start = Date.now();
     try {
-      const http = getHttp2(program2);
+      const http = getHttp2(oc);
       const lines = opts.lines ? parseInt(opts.lines, 10) : 100;
       const logText = await http.openshiftText(
         `/api/v1/namespaces/${encodeURIComponent(opts.namespace)}/pods/${encodeURIComponent(opts.pod)}/log`,
@@ -11114,7 +11513,7 @@ function registerOpenShiftCommands(program2) {
   oc.command("pod-metrics").description("Get CPU and memory usage for pods in a namespace (requires metrics-server)").requiredOption("--namespace <ns>", "Kubernetes namespace").action(async (opts) => {
     const start = Date.now();
     try {
-      const http = getHttp2(program2);
+      const http = getHttp2(oc);
       const metricsList = await http.openshift(
         `/apis/metrics.k8s.io/v1beta1/namespaces/${encodeURIComponent(opts.namespace)}/pods`
       );
@@ -11131,15 +11530,121 @@ function registerOpenShiftCommands(program2) {
       fail(err, "openshift", "pod-metrics", start);
     }
   });
+  oc.command("resource-usage").description("Combined CPU/memory usage, limits, and requests for all pods in a namespace \u2014 all values normalized to millicores (m) and mebibytes (Mi). Requires metrics-server. Use --csv to emit a spreadsheet-friendly CSV.").requiredOption("--namespace <ns>", "Kubernetes namespace").option("--label-selector <selector>", "Label selector (e.g. app=my-app)").option("--csv", "Output as CSV instead of JSON (suitable for Excel)", false).action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp2(oc);
+      const nsEncoded = encodeURIComponent(opts.namespace);
+      const podParams = {};
+      if (opts.labelSelector) podParams["labelSelector"] = opts.labelSelector;
+      const [podList, metricsList] = await Promise.all([
+        http.openshift(`/api/v1/namespaces/${nsEncoded}/pods`, { params: podParams }),
+        http.openshift(`/apis/metrics.k8s.io/v1beta1/namespaces/${nsEncoded}/pods`, { params: podParams })
+      ]);
+      const metricsIndex = /* @__PURE__ */ new Map();
+      for (const pm of metricsList.items) {
+        const containerMap = /* @__PURE__ */ new Map();
+        for (const c of pm.containers) {
+          containerMap.set(c.name, c.usage);
+        }
+        metricsIndex.set(pm.metadata.name, containerMap);
+      }
+      const rows = [];
+      for (const pod of podList.items) {
+        const podName = pod.metadata.name;
+        const podMetrics = metricsIndex.get(podName);
+        const containers = pod.spec.containers ?? [];
+        for (const container of containers) {
+          const usage = podMetrics?.get(container.name);
+          rows.push({
+            pod: podName,
+            container: container.name,
+            cpuUsageMillicores: parseCpuMillicores(usage?.cpu),
+            memUsageMiB: parseMemMiB(usage?.memory),
+            cpuLimitsMillicores: parseCpuMillicores(container.resources?.limits?.cpu),
+            memLimitsMiB: parseMemMiB(container.resources?.limits?.memory),
+            cpuRequestsMillicores: parseCpuMillicores(container.resources?.requests?.cpu),
+            memRequestsMiB: parseMemMiB(container.resources?.requests?.memory)
+          });
+        }
+      }
+      if (opts.csv) {
+        const header = "Pod,Container,CPU Usage (m),Memory Usage (Mi),CPU Limits (m),Memory Limits (Mi),CPU Requests (m),Memory Requests (Mi)";
+        const lines = rows.map(
+          (r) => [
+            r.pod,
+            r.container,
+            r.cpuUsageMillicores ?? "",
+            r.memUsageMiB ?? "",
+            r.cpuLimitsMillicores ?? "",
+            r.memLimitsMiB ?? "",
+            r.cpuRequestsMillicores ?? "",
+            r.memRequestsMiB ?? ""
+          ].join(",")
+        );
+        writeRawOutput([header, ...lines].join("\n") + "\n");
+      } else {
+        success(
+          { namespace: opts.namespace, count: rows.length, units: { cpu: "m", memory: "Mi" }, rows },
+          "openshift",
+          "resource-usage",
+          start
+        );
+      }
+    } catch (err) {
+      fail(err, "openshift", "resource-usage", start);
+    }
+  });
 }
 
 // src/services/dynatrace/commands.ts
-function getHttp3(program2) {
+function getHttp3(program2, envName) {
   const opts = program2.optsWithGlobals();
-  return createHttpClient(
-    loadConfig({ configPath: opts.config }),
-    Boolean(opts.dryRun)
-  );
+  const cfg = loadConfig({ configPath: opts.config });
+  if (envName) {
+    const envConfig = cfg.dynatrace.environments[envName];
+    if (!envConfig) {
+      throw new PncliError(
+        `Dynatrace environment "${envName}" not configured. Run: pncli config set dynatrace.environments.${envName}.baseUrl <url>`
+      );
+    }
+    return createHttpClient(
+      {
+        ...cfg,
+        dynatrace: {
+          ...cfg.dynatrace,
+          baseUrl: envConfig.baseUrl ?? cfg.dynatrace.baseUrl,
+          apiToken: envConfig.apiToken ?? cfg.dynatrace.apiToken,
+          platformUrl: envConfig.platformUrl ?? cfg.dynatrace.platformUrl,
+          platformToken: envConfig.platformToken ?? cfg.dynatrace.platformToken
+        }
+      },
+      Boolean(opts.dryRun)
+    );
+  }
+  const defaultEnv = cfg.dynatrace.defaultEnvironment;
+  if (defaultEnv) {
+    const envConfig = cfg.dynatrace.environments[defaultEnv];
+    if (!envConfig) {
+      throw new PncliError(
+        `Dynatrace defaultEnvironment "${defaultEnv}" is not configured. Run: pncli config set dynatrace.environments.${defaultEnv}.baseUrl <url> or pncli config set dynatrace.defaultEnvironment <name>`
+      );
+    }
+    return createHttpClient(
+      {
+        ...cfg,
+        dynatrace: {
+          ...cfg.dynatrace,
+          baseUrl: envConfig.baseUrl ?? cfg.dynatrace.baseUrl,
+          apiToken: envConfig.apiToken ?? cfg.dynatrace.apiToken,
+          platformUrl: envConfig.platformUrl ?? cfg.dynatrace.platformUrl,
+          platformToken: envConfig.platformToken ?? cfg.dynatrace.platformToken
+        }
+      },
+      Boolean(opts.dryRun)
+    );
+  }
+  return createHttpClient(cfg, Boolean(opts.dryRun));
 }
 async function allPages(fetchPage) {
   const items = [];
@@ -11211,12 +11716,13 @@ async function runTraceQuery(http, traceId) {
   return response.result;
 }
 function registerDynatraceCommands(program2) {
-  const dynatrace = program2.command("dynatrace").description("Dynatrace observability operations");
+  const dynatrace = program2.command("dynatrace").description("Dynatrace observability operations").option("--env <name>", "Named Dynatrace environment to use (from dynatrace.environments.<name>)");
   const entities = dynatrace.command("entities").description("Monitored entity operations");
   entities.command("list").description("List monitored entities using an entity selector").requiredOption("--selector <selector>", 'Dynatrace entity selector, e.g. type("SERVICE")').option("--from <time>", "Start time (ISO 8601 or relative, e.g. now-2h)").option("--to <time>", "End time (ISO 8601 or relative)").option("--fields <fields>", "Additional entity fields").action(async (opts) => {
     const start = Date.now();
     try {
-      const data = await listEntities(getHttp3(program2), opts.selector, opts);
+      const envName = dynatrace.opts().env;
+      const data = await listEntities(getHttp3(program2, envName), opts.selector, opts);
       success({ totalCount: data.totalCount, entities: data.items }, "dynatrace", "entities list", start);
     } catch (err) {
       fail(err, "dynatrace", "entities list", start);
@@ -11225,7 +11731,8 @@ function registerDynatraceCommands(program2) {
   entities.command("get").description("Get a monitored entity by ID").requiredOption("--id <id>", "Entity ID, e.g. SERVICE-1234567890ABCDEF").option("--from <time>", "Start time").option("--to <time>", "End time").option("--fields <fields>", "Additional entity fields").action(async (opts) => {
     const start = Date.now();
     try {
-      const data = await getHttp3(program2).dynatrace(
+      const envName = dynatrace.opts().env;
+      const data = await getHttp3(program2, envName).dynatrace(
         `/api/v2/entities/${encodeURIComponent(opts.id)}`,
         { params: { from: opts.from, to: opts.to, fields: opts.fields } }
       );
@@ -11237,7 +11744,8 @@ function registerDynatraceCommands(program2) {
   dynatrace.command("services").description("List monitored services").option("--from <time>", "Start time").option("--to <time>", "End time").action(async (opts) => {
     const start = Date.now();
     try {
-      const data = await listEntities(getHttp3(program2), 'type("SERVICE")', opts);
+      const envName = dynatrace.opts().env;
+      const data = await listEntities(getHttp3(program2, envName), 'type("SERVICE")', opts);
       success({ totalCount: data.totalCount, services: data.items }, "dynatrace", "services", start);
     } catch (err) {
       fail(err, "dynatrace", "services", start);
@@ -11246,8 +11754,9 @@ function registerDynatraceCommands(program2) {
   dynatrace.command("workloads").description("List monitored Kubernetes workloads").option("--from <time>", "Start time").option("--to <time>", "End time").action(async (opts) => {
     const start = Date.now();
     try {
+      const envName = dynatrace.opts().env;
       const selector = 'type("CLOUD_APPLICATION")';
-      const data = await listEntities(getHttp3(program2), selector, opts);
+      const data = await listEntities(getHttp3(program2, envName), selector, opts);
       success({ totalCount: data.totalCount, workloads: data.items }, "dynatrace", "workloads", start);
     } catch (err) {
       fail(err, "dynatrace", "workloads", start);
@@ -11257,8 +11766,9 @@ function registerDynatraceCommands(program2) {
   problems.command("list").description("List problems").option("--from <time>", "Start time (default: now-2h)").option("--to <time>", "End time (default: now)").option("--problem-selector <selector>", "Dynatrace problem selector").option("--entity-selector <selector>", "Affected entity selector").action(async (opts) => {
     const start = Date.now();
     try {
+      const envName = dynatrace.opts().env;
       const data = await allPages(async (nextPageKey) => {
-        const page = await getHttp3(program2).dynatrace("/api/v2/problems", {
+        const page = await getHttp3(program2, envName).dynatrace("/api/v2/problems", {
           params: nextPageKey ? { nextPageKey } : {
             from: opts.from ?? "now-2h",
             to: opts.to ?? "now",
@@ -11277,7 +11787,8 @@ function registerDynatraceCommands(program2) {
   problems.command("get").description("Get a problem by ID").requiredOption("--id <id>", "Problem ID").option("--fields <fields>", "Additional fields").action(async (opts) => {
     const start = Date.now();
     try {
-      const data = await getHttp3(program2).dynatrace(
+      const envName = dynatrace.opts().env;
+      const data = await getHttp3(program2, envName).dynatrace(
         `/api/v2/problems/${encodeURIComponent(opts.id)}`,
         { params: { fields: opts.fields } }
       );
@@ -11289,7 +11800,8 @@ function registerDynatraceCommands(program2) {
   dynatrace.command("trace").description("Get distributed-trace spans from Grail").requiredOption("--id <trace-id>", "16- or 32-character hexadecimal trace ID").action(async (opts) => {
     const start = Date.now();
     try {
-      const result = await runTraceQuery(getHttp3(program2), opts.id);
+      const envName = dynatrace.opts().env;
+      const result = await runTraceQuery(getHttp3(program2, envName), opts.id);
       success(result, "dynatrace", "trace", start);
     } catch (err) {
       fail(err, "dynatrace", "trace", start);
@@ -11356,6 +11868,500 @@ function registerLogscaleCommands(program2) {
   });
 }
 
+// src/services/splitio/commands.ts
+import fs5 from "fs";
+import confirm2 from "@inquirer/confirm";
+function getHttp5(program2) {
+  const opts = program2.optsWithGlobals();
+  return createHttpClient(
+    loadConfig({ configPath: opts.config }),
+    Boolean(opts.dryRun)
+  );
+}
+function loadInputFile(filePath) {
+  let raw;
+  if (filePath === "-") {
+    raw = fs5.readFileSync(process.stdin.fd, "utf8");
+  } else {
+    raw = fs5.readFileSync(filePath, "utf8");
+  }
+  try {
+    return JSON.parse(raw);
+  } catch {
+    throw new PncliError(`Could not parse JSON from ${filePath === "-" ? "stdin" : filePath}`);
+  }
+}
+async function confirmWrite(opts, opLabel) {
+  if (opts.yes) return;
+  const proceed = await confirm2({
+    message: `Submit Change Request "${opts.mnemonic}" (${opLabel})? This creates an approval request in Split.`,
+    default: false
+  });
+  if (!proceed) throw new PncliError("Aborted by user.", 0);
+}
+function buildCrBase(opts) {
+  const base = {
+    title: opts.mnemonic,
+    comment: opts.description,
+    crNumber: opts.changeNumber
+  };
+  if (opts.approvers) {
+    base["approvers"] = opts.approvers.split(",").map((s) => s.trim()).filter(Boolean).map((id) => ({ id }));
+  }
+  return base;
+}
+function registerSplitioCommands(program2) {
+  const splitio = program2.command("splitio").description("Split.IO feature flag administration");
+  const workspaces = splitio.command("workspaces").description("Workspace operations");
+  workspaces.command("list").description("List all Split.IO workspaces").action(async () => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      const data = await http.splitio("/internal/api/v2/workspaces");
+      success(
+        { count: data.objects.length, workspaces: data.objects },
+        "splitio",
+        "workspaces list",
+        start
+      );
+    } catch (err) {
+      fail(err, "splitio", "workspaces list", start);
+    }
+  });
+  const environments = splitio.command("environments").description("Environment operations");
+  environments.command("list").description("List environments in a workspace").requiredOption("--workspace <id>", "Workspace ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      const data = await http.splitio(
+        `/internal/api/v2/workspaces/${encodeURIComponent(opts.workspace)}/environments`
+      );
+      success(
+        { count: data.objects.length, environments: data.objects },
+        "splitio",
+        "environments list",
+        start
+      );
+    } catch (err) {
+      fail(err, "splitio", "environments list", start);
+    }
+  });
+  const flags = splitio.command("flags").description("Feature flag operations");
+  flags.command("list").description("List feature flags in a workspace").requiredOption("--workspace <id>", "Workspace ID").option("--limit <n>", "Maximum number of flags to return", "50").option("--offset <n>", "Pagination offset", "0").option("--flag-set <name>", "Filter by flag set name").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      const params = {
+        wsId: opts.workspace,
+        limit: parseInt(opts.limit, 10),
+        offset: parseInt(opts.offset, 10)
+      };
+      if (opts.flagSet) params["flagSetName"] = opts.flagSet;
+      const data = await http.splitio("/internal/api/v2/splits", { params });
+      success(
+        { count: data.objects.length, totalCount: data.totalCount, flags: data.objects },
+        "splitio",
+        "flags list",
+        start
+      );
+    } catch (err) {
+      fail(err, "splitio", "flags list", start);
+    }
+  });
+  flags.command("get").description("Get a flag definition").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").option("--environment <id>", "Environment ID \u2014 include targeting rules for this environment").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      if (opts.environment) {
+        const data = await http.splitio(
+          `/internal/api/v2/splits/${encodeURIComponent(opts.flag)}/environments/${encodeURIComponent(opts.environment)}`,
+          { params: { wsId: opts.workspace } }
+        );
+        success(data, "splitio", "flags get", start);
+      } else {
+        const data = await http.splitio(
+          `/internal/api/v2/splits/${encodeURIComponent(opts.flag)}`,
+          { params: { wsId: opts.workspace } }
+        );
+        success(data, "splitio", "flags get", start);
+      }
+    } catch (err) {
+      fail(err, "splitio", "flags get", start);
+    }
+  });
+  flags.command("update").description("Submit a Change Request to replace a flag's full definition in an environment").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--environment <id>", "Environment ID").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve this CR").option("--input-file <path>", "JSON file with the complete flag definition body (use - for stdin)").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      if (!opts.inputFile) throw new PncliError("--input-file is required for flags update");
+      const definition = loadInputFile(opts.inputFile);
+      await confirmWrite(opts, `UPDATE ${opts.flag} in ${opts.environment}`);
+      const http = getHttp5(program2);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: "UPDATE_SPLIT_DEFINITION",
+        split: {
+          name: opts.flag,
+          environment: { id: opts.environment },
+          definition
+        },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags update", start);
+    } catch (err) {
+      fail(err, "splitio", "flags update", start);
+    }
+  });
+  flags.command("set-rule").description("Change one targeting rule without altering the rest of the flag definition").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--environment <id>", "Environment ID").requiredOption("--rule-index <n>", "Zero-based index of the targeting rule to update").option("--treatment <name>", "Treatment to assign to the entire rule bucket").option("--weights <json>", "JSON array of {treatment, size} objects for weighted distribution").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve this CR").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      if (!opts.treatment && !opts.weights) {
+        throw new PncliError("Either --treatment or --weights must be specified");
+      }
+      const http = getHttp5(program2);
+      const current = await http.splitio(
+        `/internal/api/v2/splits/${encodeURIComponent(opts.flag)}/environments/${encodeURIComponent(opts.environment)}`,
+        { params: { wsId: opts.workspace } }
+      );
+      const rules = current.rules ?? [];
+      const idx = parseInt(opts.ruleIndex, 10);
+      if (Number.isNaN(idx) || idx < 0 || idx >= rules.length) {
+        throw new PncliError(`Rule index ${Number.isNaN(idx) ? JSON.stringify(opts.ruleIndex) : idx} is out of range (flag has ${rules.length} rules)`);
+      }
+      if (opts.treatment) {
+        rules[idx] = { ...rules[idx], buckets: [{ treatment: opts.treatment, size: 1e5 }] };
+      } else {
+        const parsed = JSON.parse(opts.weights);
+        rules[idx] = { ...rules[idx], buckets: parsed };
+      }
+      await confirmWrite(opts, `SET_RULE ${idx} on ${opts.flag} in ${opts.environment}`);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: "UPDATE_SPLIT_DEFINITION",
+        split: {
+          name: opts.flag,
+          environment: { id: opts.environment },
+          definition: { ...current, rules }
+        },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags set-rule", start);
+    } catch (err) {
+      fail(err, "splitio", "flags set-rule", start);
+    }
+  });
+  flags.command("set-default").description("Update the fallback default rule for traffic matching no targeting rule").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--environment <id>", "Environment ID").requiredOption("--treatment <name>", "Treatment to assign as the default").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve this CR").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      const current = await http.splitio(
+        `/internal/api/v2/splits/${encodeURIComponent(opts.flag)}/environments/${encodeURIComponent(opts.environment)}`,
+        { params: { wsId: opts.workspace } }
+      );
+      await confirmWrite(opts, `SET_DEFAULT ${opts.treatment} on ${opts.flag} in ${opts.environment}`);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: "UPDATE_SPLIT_DEFINITION",
+        split: {
+          name: opts.flag,
+          environment: { id: opts.environment },
+          definition: {
+            ...current,
+            defaultRule: [{ treatment: opts.treatment, size: 1e5 }]
+          }
+        },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags set-default", start);
+    } catch (err) {
+      fail(err, "splitio", "flags set-default", start);
+    }
+  });
+  flags.command("toggle").description("Enable or disable a single flag via a Change Request").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--environment <id>", "Environment ID").requiredOption("--enabled <bool>", "true to restore / false to kill the flag").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve this CR").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const enable = opts.enabled.toLowerCase() !== "false" && opts.enabled !== "0";
+      const opType = enable ? "RESTORE_SPLIT" : "KILL_SPLIT";
+      await confirmWrite(opts, `${opType} ${opts.flag} in ${opts.environment}`);
+      const http = getHttp5(program2);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: opType,
+        split: { name: opts.flag, environment: { id: opts.environment } },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags toggle", start);
+    } catch (err) {
+      fail(err, "splitio", "flags toggle", start);
+    }
+  });
+  flags.command("batch-toggle").description("Enable or disable multiple flags from a JSON file (each creates its own Change Request)").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--environment <id>", "Environment ID").requiredOption("--mnemonic <text>", "Short Change Request title prefix (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve each CR").option("--input-file <path>", "JSON file: array of {flag, enabled} objects (use - for stdin)").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      if (!opts.inputFile) throw new PncliError("--input-file is required for batch-toggle");
+      const entries = loadInputFile(opts.inputFile);
+      if (!Array.isArray(entries)) throw new PncliError("Input file must be a JSON array of {flag, enabled} objects");
+      await confirmWrite(opts, `BATCH_TOGGLE ${entries.length} flags in ${opts.environment}`);
+      const http = getHttp5(program2);
+      const results = [];
+      for (const entry of entries) {
+        try {
+          const opType = entry.enabled ? "RESTORE_SPLIT" : "KILL_SPLIT";
+          const body = {
+            ...buildCrBase(opts),
+            title: `${opts.mnemonic} \u2014 ${entry.flag}`,
+            operationType: opType,
+            split: { name: entry.flag, environment: { id: opts.environment } },
+            workspace: { id: opts.workspace }
+          };
+          const cr = await http.splitio("/internal/api/v2/changeRequests", {
+            method: "POST",
+            body
+          });
+          results.push({ flag: entry.flag, ok: true, id: cr.id });
+        } catch (err) {
+          results.push({
+            flag: entry.flag,
+            ok: false,
+            error: err instanceof Error ? err.message : String(err)
+          });
+        }
+      }
+      success({ submitted: results.length, results }, "splitio", "flags batch-toggle", start);
+    } catch (err) {
+      fail(err, "splitio", "flags batch-toggle", start);
+    }
+  });
+  flags.command("kill").description("Submit a Change Request to kill (disable) a flag").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--environment <id>", "Environment ID").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve this CR").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      await confirmWrite(opts, `KILL ${opts.flag} in ${opts.environment}`);
+      const http = getHttp5(program2);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: "KILL_SPLIT",
+        split: { name: opts.flag, environment: { id: opts.environment } },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags kill", start);
+    } catch (err) {
+      fail(err, "splitio", "flags kill", start);
+    }
+  });
+  flags.command("restore").description("Submit a Change Request to restore a killed flag").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--environment <id>", "Environment ID").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--approvers <ids>", "Comma-separated Split user IDs required to approve this CR").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      await confirmWrite(opts, `RESTORE ${opts.flag} in ${opts.environment}`);
+      const http = getHttp5(program2);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: "RESTORE_SPLIT",
+        split: { name: opts.flag, environment: { id: opts.environment } },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags restore", start);
+    } catch (err) {
+      fail(err, "splitio", "flags restore", start);
+    }
+  });
+  flags.command("archive").description("Submit a Change Request to archive (delete definition of) a flag").requiredOption("--workspace <id>", "Workspace ID").requiredOption("--flag <name>", "Feature flag name").requiredOption("--mnemonic <text>", "Short Change Request title (mnemonic)").requiredOption("--description <text>", "Change Request description").requiredOption("--change-number <CHG>", "ServiceNow change request number (e.g. CHG0001234)").option("--yes", "Skip interactive confirmation prompt").action(async (opts) => {
+    const start = Date.now();
+    try {
+      await confirmWrite(opts, `ARCHIVE ${opts.flag}`);
+      const http = getHttp5(program2);
+      const body = {
+        ...buildCrBase(opts),
+        operationType: "ARCHIVE_SPLIT",
+        split: { name: opts.flag },
+        workspace: { id: opts.workspace }
+      };
+      const data = await http.splitio("/internal/api/v2/changeRequests", {
+        method: "POST",
+        body
+      });
+      success(data, "splitio", "flags archive", start);
+    } catch (err) {
+      fail(err, "splitio", "flags archive", start);
+    }
+  });
+  const changeRequests = splitio.command("change-requests").description("Change Request tracking");
+  changeRequests.command("list").description("List Change Requests for a workspace").requiredOption("--workspace <id>", "Workspace ID").option("--environment <id>", "Filter by environment ID").option("--status <status>", "Filter by status (REQUESTED, APPROVED, REJECTED, PUBLISHED)").option("--limit <n>", "Maximum number of results", "25").option("--offset <n>", "Pagination offset", "0").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      const params = {
+        wsId: opts.workspace,
+        limit: parseInt(opts.limit, 10),
+        offset: parseInt(opts.offset, 10)
+      };
+      if (opts.environment) params["environmentId"] = opts.environment;
+      if (opts.status) params["status"] = opts.status;
+      const data = await http.splitio(
+        "/internal/api/v2/changeRequests",
+        { params }
+      );
+      success(
+        { count: data.objects.length, totalCount: data.totalCount, changeRequests: data.objects },
+        "splitio",
+        "change-requests list",
+        start
+      );
+    } catch (err) {
+      fail(err, "splitio", "change-requests list", start);
+    }
+  });
+  changeRequests.command("get").description("Get a Change Request by ID").requiredOption("--id <id>", "Change Request ID").action(async (opts) => {
+    const start = Date.now();
+    try {
+      const http = getHttp5(program2);
+      const data = await http.splitio(
+        `/internal/api/v2/changeRequests/${encodeURIComponent(opts.id)}`
+      );
+      success(data, "splitio", "change-requests get", start);
+    } catch (err) {
+      fail(err, "splitio", "change-requests get", start);
+    }
+  });
+}
+
+// src/services/figma/commands.ts
+function parseFileKey(input3) {
+  if (input3.startsWith("http://") || input3.startsWith("https://")) {
+    const match = /figma\.com\/(?:design|file)\/([A-Za-z0-9]+)/i.exec(input3);
+    if (!match?.[1]) {
+      throw new Error(`Could not extract Figma file key from URL: ${input3}
+Expected format: https://www.figma.com/design/<file-key>/...`);
+    }
+    return match[1];
+  }
+  return input3;
+}
+function getHttp6(program2) {
+  const opts = program2.optsWithGlobals();
+  return createHttpClient(
+    loadConfig({ configPath: opts.config }),
+    Boolean(opts.dryRun)
+  );
+}
+function registerFigmaCommands(program2) {
+  const figma = program2.command("figma").description("Figma design operations (files, comments, versions)");
+  figma.command("file").description("Get a Figma file \u2014 metadata, structure, and component/style inventory").argument("<file-key-or-url>", "Figma file key or full Figma URL (https://www.figma.com/design/<key>/...)").option("--document", "Include the full document node tree (can be large; omitted by default)").action(async (fileKeyOrUrl, opts) => {
+    const start = Date.now();
+    const { success: success2, fail: fail2 } = await import("./output-XT3WT5L5.js");
+    try {
+      const fileKey = parseFileKey(fileKeyOrUrl);
+      const params = {};
+      if (!opts.document) {
+        params["geometry"] = "paths";
+        params["depth"] = 0;
+      }
+      const data = await getHttp6(program2).figma(`/v1/files/${encodeURIComponent(fileKey)}`, { params });
+      success2(
+        {
+          fileKey,
+          name: data.name,
+          lastModified: data.lastModified,
+          version: data.version,
+          thumbnailUrl: data.thumbnailUrl,
+          role: data.role,
+          editorType: data.editorType,
+          schemaVersion: data.schemaVersion,
+          ...opts.document ? { document: data.document } : {},
+          componentCount: data.components ? Object.keys(data.components).length : 0,
+          styleCount: data.styles ? Object.keys(data.styles).length : 0
+        },
+        "figma",
+        "file",
+        start
+      );
+    } catch (err) {
+      fail2(err, "figma", "file", start);
+    }
+  });
+  figma.command("comments").description("Get comments on a Figma file").argument("<file-key-or-url>", "Figma file key or full Figma URL").option("--as-of <date>", "ISO 8601 timestamp \u2014 return only comments created before this time").action(async (fileKeyOrUrl, opts) => {
+    const start = Date.now();
+    const { success: success2, fail: fail2 } = await import("./output-XT3WT5L5.js");
+    try {
+      const fileKey = parseFileKey(fileKeyOrUrl);
+      const params = {};
+      if (opts.asOf) params["as_of"] = opts.asOf;
+      const data = await getHttp6(program2).figma(`/v1/files/${encodeURIComponent(fileKey)}/comments`, { params });
+      success2(
+        { fileKey, count: data.comments.length, comments: data.comments },
+        "figma",
+        "comments",
+        start
+      );
+    } catch (err) {
+      fail2(err, "figma", "comments", start);
+    }
+  });
+  figma.command("versions").description("Get the version history of a Figma file").argument("<file-key-or-url>", "Figma file key or full Figma URL").action(async (fileKeyOrUrl) => {
+    const start = Date.now();
+    const { success: success2, fail: fail2 } = await import("./output-XT3WT5L5.js");
+    try {
+      const fileKey = parseFileKey(fileKeyOrUrl);
+      const data = await getHttp6(program2).figma(`/v1/files/${encodeURIComponent(fileKey)}/versions`);
+      success2(
+        { fileKey, count: data.versions.length, versions: data.versions },
+        "figma",
+        "versions",
+        start
+      );
+    } catch (err) {
+      fail2(err, "figma", "versions", start);
+    }
+  });
+  figma.command("project-files").description("List files in a Figma project").argument("<project-id>", "Figma project ID (visible in the project URL)").action(async (projectId) => {
+    const start = Date.now();
+    const { success: success2, fail: fail2 } = await import("./output-XT3WT5L5.js");
+    try {
+      const data = await getHttp6(program2).figma(`/v1/projects/${encodeURIComponent(projectId)}/files`);
+      success2(
+        { projectId, count: data.files.length, files: data.files },
+        "figma",
+        "project-files",
+        start
+      );
+    } catch (err) {
+      fail2(err, "figma", "project-files", start);
+    }
+  });
+  figma.command("me").description("Get the current Figma user (useful for verifying credentials)").action(async () => {
+    const start = Date.now();
+    const { success: success2, fail: fail2 } = await import("./output-XT3WT5L5.js");
+    try {
+      const data = await getHttp6(program2).figma("/v1/me");
+      success2(data, "figma", "me", start);
+    } catch (err) {
+      fail2(err, "figma", "me", start);
+    }
+  });
+}
+
 // src/cli.ts
 if (!process.env.PNCLI_VERIFY_TLS) {
   process.env.NODE_TLS_REJECT_UNAUTHORIZED = "0";
@@ -11392,7 +12398,6 @@ registerConfigCommands(program);
 registerAdoCommands(program);
 registerJenkinsCommands(program);
 registerArtifactoryCommands(program);
-registerUdeployCommands(program);
 registerCheckmarxCommands(program);
 registerServiceNowCommands(program);
 registerContrastCommands(program);
@@ -11402,6 +12407,8 @@ registerJwtCommands(program);
 registerOpenShiftCommands(program);
 registerDynatraceCommands(program);
 registerLogscaleCommands(program);
+registerSplitioCommands(program);
+registerFigmaCommands(program);
 program.addHelpText("after", `
 Services:
   git          Local git operations (status, diff, log, branch)
@@ -11413,9 +12420,8 @@ Services:
   sonar        SonarQube Server (quality gates, issues, metrics, hotspots)
   sde          SDElements (threat modeling, countermeasures, compliance)
   ado          Azure DevOps Server (work items, repos, PRs, pipelines)
-  jenkins      Jenkins Data Center (jobs, builds, logs)
+  jenkins      Jenkins (jobs, builds, logs, named instances)
   artifactory  Artifactory (repos, artifact search, build info, properties)
-  udeploy      IBM UrbanCode Deploy (component versions, deployment processes)
   checkmarx    Checkmarx One (projects, scans, scan statistics)
   servicenow   ServiceNow (change requests)
   contrast     Contrast IAST (applications, vulnerability findings)
@@ -11423,8 +12429,10 @@ Services:
   openshift    OpenShift / Kubernetes (pods, events, logs, metrics)
   dynatrace    Dynatrace (services, entities, problems, traces, Kubernetes workloads)
   logscale     LogScale (log query, repositories)
+  splitio      Split.IO (feature flags, Change Requests)
+  figma        Figma (files, comments, version history)
   config       Manage pncli configuration
-  skills       Download and manage Claude Code skills
+  skills       Install and manage agent skills (Codex, GitHub Copilot, Claude Code)
   jwt          JWT token utilities (decode header and payload)
 `);
 program.parseAsync(process.argv).catch((err) => {