@ranimontagna/agent-toolkit 0.1.17 → 0.1.19

package/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+## 0.1.17
+
+- Added shadcn Improve installation from a pinned source.
+- Added GSAP skills under the bundled frontend package.
+- Updated external tool and runtime pins.
+- Published through the trusted npm release workflow.
+
+Earlier versions were developed before this changelog existed. Use Git history
+and npm release metadata for older details.

package/CONTRIBUTING.md

@@ -0,0 +1,34 @@
+# Contributing
+
+Agent Toolkit is a public installer for personal AI-agent workflows. Keep changes
+small, pinned and easy to verify.
+
+## Development Flow
+
+1. Install dependencies with `pnpm install`.
+2. Make focused changes that follow the existing TypeScript module boundaries.
+3. Add or update tests for behavior that can regress.
+4. Run the release gate before claiming completion:
+
+```bash
+rtk pnpm run check
+```
+
+If `rtk` is unavailable, run the same command without the prefix.
+
+## Commit Messages
+
+Use Conventional Commits:
+
+```text
+feat: add doctor command
+fix: preserve skill manifest entries
+docs: document release flow
+test: cover installer dry run
+```
+
+## External Sources
+
+Keep `tools.lock.json` as the source of truth for external tools. New third-party
+skills must use immutable public sources, include license/notice files when
+vendored, and pass `pnpm run check`.

package/README.md

@@ -118,6 +118,30 @@ Install only bundled Custom Skills into the current project:
 npx -y @ranimontagna/agent-toolkit --skills-only --codex --local
 ```
 
+Preview an install plan without changing files:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --all --codex --dry-run
+```
+
+Inspect selected tools and runtimes as JSON:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --doctor --json --codex
+```
+
+Audit bundled Custom Skills metadata and local links:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --skills-audit
+```
+
+Report newer candidates for pinned external tools:
+
+```bash
+npx -y @ranimontagna/agent-toolkit --update-lock
+```
+
 Install only the `core` Custom Skills package:
 
 ```bash
@@ -226,6 +250,8 @@ skills/
     code-reviewer/
       SKILL.md
       rules/
+    thermo-nuclear-code-quality-review/
+      SKILL.md
   devops/
     docker-patterns/
       SKILL.md
@@ -345,6 +371,7 @@ Follow these steps...
 | `frontend` | `react-performance` | Copied from Affaan Mustafa's [`ECC`](https://github.com/affaan-m/ECC/tree/main/skills/react-performance) under the MIT license |
 | `frontend` | `react-testing` | Copied from Affaan Mustafa's [`ECC`](https://github.com/affaan-m/ECC/tree/main/skills/react-testing) under the MIT license |
 | `general` | `code-reviewer` | Copied from Shubhamsaboo's [`awesome-llm-apps`](https://github.com/Shubhamsaboo/awesome-llm-apps/tree/main/awesome_agent_skills/code-reviewer) under the repository Apache-2.0 license |
+| `general` | `thermo-nuclear-code-quality-review` | Copied from Cursor's [`plugins`](https://github.com/cursor/plugins/tree/main/cursor-team-kit/skills/thermo-nuclear-code-quality-review) repository under the MIT license |
 
 Each React skill carries its own ECC `rules/react` references so Markdown links
 still resolve after the installer copies skills into flat runtime directories.
@@ -405,6 +432,16 @@ Install scope:
   --skills-path PATH     Install an exact Custom Skill path
   --skills-list          List discovered Custom Skills and exit
 
+Operations:
+  --dry-run              Print the selected install plan without changing files
+  --plan-only            Alias for --dry-run
+  --doctor, --status     Inspect selected tools and runtimes without installing
+  --json                 Emit machine-readable output for supported operations
+  --uninstall            Remove files recorded in the Agent Toolkit manifest
+  --repair               Re-run selected installs and refresh the manifest
+  --update-lock          Report newer versions for pinned external sources
+  --skills-audit         Validate bundled Custom Skills metadata and links
+
 Other:
   --install-missing-clis Install or update selected runtime CLIs
   --allow-mutable-sources Allow explicit mutable package sources like @latest
@@ -445,15 +482,15 @@ Defaults come from `tools.lock.json`:
 
 ```text
 CAVEMAN_PACKAGE=github:JuliusBrussee/caveman#25d22f864ad68cc447a4cb93aefde918aa4aec9f
-GRAPHIFY_PACKAGE=graphifyy==0.8.41
+GRAPHIFY_PACKAGE=graphifyy==0.8.51
 GRAPHIFY_INSTALLER=uv
 GSD_PACKAGE=get-shit-done-cc@1.42.3
-SKILLS_CLI_PACKAGE=skills@1.5.11
+SKILLS_CLI_PACKAGE=skills@1.5.13
 ANTIGRAVITY_INSTALL_SCRIPT=https://antigravity.google/cli/install.sh
-CLAUDE_CLI_PACKAGE=@anthropic-ai/claude-code@2.1.181
-CODEX_CLI_PACKAGE=@openai/codex@0.141.0
-OPENCODE_CLI_PACKAGE=opencode-ai@1.17.8
-GEMINI_CLI_PACKAGE=@google/gemini-cli@0.47.0
+CLAUDE_CLI_PACKAGE=@anthropic-ai/claude-code@2.1.195
+CODEX_CLI_PACKAGE=@openai/codex@0.142.3
+OPENCODE_CLI_PACKAGE=opencode-ai@1.17.11
+GEMINI_CLI_PACKAGE=@google/gemini-cli@0.49.0
 ```
 
 Mutable overrides like `@latest`, unpinned npm packages or GitHub package
@@ -479,31 +516,31 @@ Current external sources:
 
 | Tool | Locked source | Runtime verification |
 |---|---|---|
-| RTK | GitHub release `rtk-ai/rtk@v0.42.4` | Verifies the selected asset SHA-256 before extraction |
+| RTK | GitHub release `rtk-ai/rtk@v0.43.0` | Verifies the selected asset SHA-256 before extraction |
 | Caveman | `JuliusBrussee/caveman` at commit `25d22f864ad68cc447a4cb93aefde918aa4aec9f` | Immutable GitHub npm spec |
-| Graphify | `graphifyy==0.8.41` | Blocks unpinned package overrides |
+| Graphify | `graphifyy==0.8.51` | Blocks unpinned package overrides |
 | GSD | `get-shit-done-cc@1.42.3` | Blocks `@latest` unless explicitly allowed |
 | Improve | `shadcn/improve` at commit `03369ee6d7cafbfcecc4346539b05b3dc0a603bb` | Clones the pinned ref before Agent Skills CLI install |
-| Frontend Skills | `skills@1.5.11`, `pbakaus/impeccable` and `Leonxlnx/taste-skill` at pinned commits | Clones pinned refs before install |
+| Frontend Skills | `skills@1.5.13`, `pbakaus/impeccable` and `Leonxlnx/taste-skill` at pinned commits | Clones pinned refs before install |
 | Runtime CLIs | Exact npm versions for Claude, Codex, OpenCode and Gemini | Installed or updated only when `--install-missing-clis` is enabled; Antigravity uses the official `agy` installer instead of npm |
 
 Bundled third-party skills preserve upstream attribution and license files:
 
 | Skill | Source commit | License |
 |---|---|---|
-| `api-design` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
+| `api-design` | `affaan-m/ECC@2bc924faf2f8e893bfe0af86b1931283693c30ae` | MIT |
 | `fastify-best-practices` | `mcollina/skills@5b2a81354b6d10325da0db9decc9ce5ecc714138` | MIT |
-| `astro-developer` | `withastro/astro@c90ce9751c7862a7280e752549ef74298669693d` | MIT |
+| `astro-developer` | `withastro/astro@e37dfe2a7623acd364d7e3556ecc9b31e3e45520` | MIT |
 | `gsap-*` | `greensock/gsap-skills@aed9cfd3277740755f6bfc1155c7aa645403b760` | MIT |
 | `react-native-expert` | `Jeffallan/claude-skills@e8be415bc94d8d6ebddc2fb50e5d03c6e27d4319` | MIT |
 | `react-native-unistyles-v3` | `jpudysz/react-native-unistyles@8b5e9fd281a81bdfd87d4fe9e6a0b042c84c5c83` | MIT |
-| `react-patterns` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
-| `react-performance` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
-| `react-testing` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
+| `react-patterns` | `affaan-m/ECC@2bc924faf2f8e893bfe0af86b1931283693c30ae` | MIT |
+| `react-performance` | `affaan-m/ECC@2bc924faf2f8e893bfe0af86b1931283693c30ae` | MIT |
+| `react-testing` | `affaan-m/ECC@2bc924faf2f8e893bfe0af86b1931283693c30ae` | MIT |
 | `python-patterns` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
 | `python-testing` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
-| `kotlin-patterns` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
-| `kotlin-testing` | `affaan-m/ECC@0f84c0e2796703fbda87d577b2636351418c7442` | MIT |
+| `kotlin-patterns` | `affaan-m/ECC@2bc924faf2f8e893bfe0af86b1931283693c30ae` | MIT |
+| `kotlin-testing` | `affaan-m/ECC@2bc924faf2f8e893bfe0af86b1931283693c30ae` | MIT |
 
 Releases use npm trusted publishing through GitHub Actions OIDC. The npm
 package is published without a long-lived npm token, and npm automatically
@@ -592,6 +629,9 @@ pnpm run typecheck
 pnpm run lint
 pnpm run lint:fix
 pnpm run format
+pnpm run release:patch
+pnpm run release:minor
+pnpm run release:major
 pnpm run security
 pnpm run test:unit
 pnpm run test:integration
@@ -621,8 +661,17 @@ Release a new npm version by updating `package.json`, pushing the change to
 `main`, then pushing a matching tag:
 
 ```bash
-git tag v0.1.17
-git push origin v0.1.17
+git tag v0.1.19
+git push origin v0.1.19
+```
+
+For normal releases, prefer the scripted flow. It bumps `package.json`, updates
+the README release tag example, runs `pnpm run check`, commits with a
+Conventional Commit message and creates the local tag:
+
+```bash
+pnpm run release:patch
+git push origin main v0.1.18
 ```
 
 The `Release` workflow runs the full check and publishes the scoped package to

package/SECURITY.md

@@ -0,0 +1,24 @@
+# Security
+
+Agent Toolkit installs tools and skills into local agent runtime directories, so
+supply-chain changes need careful review.
+
+## Reporting
+
+Open a GitHub security advisory or a private issue with:
+
+- affected version or commit;
+- exact command used;
+- affected runtime and install scope;
+- relevant logs with secrets removed.
+
+Do not paste tokens, private repository URLs or internal project names into
+public issues.
+
+## Project Controls
+
+- repository dependencies are locked by `pnpm-lock.yaml`;
+- external installer sources are pinned in `tools.lock.json`;
+- mutable sources are blocked unless `--allow-mutable-sources` is explicit;
+- CI runs lint, typecheck, tests, build, Gitleaks and dependency audit;
+- npm releases use trusted publishing through GitHub Actions OIDC.

package/dist/src/args.js

@@ -169,6 +169,35 @@ export function parseArgs(argv) {
                 state.listSkills = true;
                 state.nonInteractive = true;
                 break;
+            case "--dry-run":
+            case "--plan-only":
+                state.dryRun = true;
+                state.nonInteractive = true;
+                break;
+            case "--doctor":
+            case "--status":
+                state.doctor = true;
+                state.nonInteractive = true;
+                break;
+            case "--json":
+                state.jsonOutput = true;
+                break;
+            case "--uninstall":
+                state.uninstall = true;
+                state.nonInteractive = true;
+                break;
+            case "--repair":
+                state.repair = true;
+                state.nonInteractive = true;
+                break;
+            case "--update-lock":
+                state.updateLock = true;
+                state.nonInteractive = true;
+                break;
+            case "--skills-audit":
+                state.auditSkills = true;
+                state.nonInteractive = true;
+                break;
             case "--install-missing-clis":
                 state.installMissingClis = true;
                 break;

package/dist/src/args.js.map

@@ -1 +1 @@
-{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,WAAW,EACX,SAAS,EACT,KAAK,GACN,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,oBAAoB;gBACvB,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,iBAAiB;gBACpB,cAAc,CAAC,UAAU,CAAC,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,wBAAwB;gBAC3B,cAAc,CAAC,iBAAiB,CAAC,CAAC;gBAClC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACzB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,cAAc;gBACjB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC;gBAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,cAAc;gBACjB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,sBAAsB;gBACzB,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC;gBACvC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,SAAS;gBACZ,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBACjC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,KAAK,CAAC,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC;gBACnC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,cAAc;gBACjB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC1B,IAAI,CAAC,SAAS;wBAAE,GAAG,CAAC,oCAAoC,CAAC,CAAC;oBAC1D,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM;YACR,KAAK,gBAAgB;gBACnB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,CAAC,WAAW;wBAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;oBAC/D,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3B,IAAI,CAAC,UAAU;wBAAE,GAAG,CAAC,sCAAsC,CAAC,CAAC;oBAC7D,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;gBAClD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,CAAC,aAAa;wBAAE,GAAG,CAAC,2CAA2C,CAAC,CAAC;oBACrE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,wBAAwB;gBAC3B,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAChC,MAAM;YACR,KAAK,yBAAyB;gBAC5B,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBACjC,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf;gBACE,GAAG,CAAC,iBAAiB,GAAG,yBAAyB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}
+{"version":3,"file":"args.js","sourceRoot":"","sources":["../../src/args.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EACL,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,WAAW,EACX,SAAS,EACT,KAAK,GACN,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAEnC,MAAM,UAAU,SAAS,CAAC,IAAc;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,OAAO;gBACV,WAAW,CAAC,IAAI,CAAC,CAAC;gBAClB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,oBAAoB;gBACvB,cAAc,CAAC,aAAa,CAAC,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,iBAAiB;gBACpB,cAAc,CAAC,UAAU,CAAC,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,cAAc,CAAC,KAAK,CAAC,CAAC;gBACtB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,SAAS,CAAC,CAAC;gBAC1B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,wBAAwB;gBAC3B,cAAc,CAAC,iBAAiB,CAAC,CAAC;gBAClC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,cAAc,CAAC,QAAQ,CAAC,CAAC;gBACzB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,cAAc;gBACjB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,KAAK,CAAC;gBAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,cAAc;gBACjB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,sBAAsB;gBACzB,KAAK,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,KAAK,CAAC;gBACvC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,cAAc,CAAC,IAAI,CAAC,CAAC;gBACrB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,SAAS;gBACZ,iBAAiB,CAAC,OAAO,CAAC,CAAC;gBAC3B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,iBAAiB,CAAC,UAAU,CAAC,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAC5B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,iBAAiB,CAAC,aAAa,CAAC,CAAC;gBACjC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,YAAY;gBACf,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,KAAK,CAAC;gBAC7B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,QAAQ,CAAC,QAAQ,GAAG,KAAK,CAAC;gBAChC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,CAAC;gBAC9B,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,KAAK,CAAC,QAAQ,CAAC,WAAW,GAAG,KAAK,CAAC;gBACnC,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,QAAQ,GAAG,QAAQ,CAAC;gBAC1B,MAAM;YACR,KAAK,SAAS;gBACZ,KAAK,CAAC,QAAQ,GAAG,OAAO,CAAC;gBACzB,MAAM;YACR,KAAK,cAAc;gBACjB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,SAAS,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC1B,IAAI,CAAC,SAAS;wBAAE,GAAG,CAAC,oCAAoC,CAAC,CAAC;oBAC1D,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBAClD,CAAC;gBACD,MAAM;YACR,KAAK,gBAAgB;gBACnB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC5B,IAAI,CAAC,WAAW;wBAAE,GAAG,CAAC,uCAAuC,CAAC,CAAC;oBAC/D,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;gBACpD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC3B,IAAI,CAAC,UAAU;wBAAE,GAAG,CAAC,sCAAsC,CAAC,CAAC;oBAC7D,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;gBAClD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,kBAAkB;gBACrB,CAAC,IAAI,CAAC,CAAC;gBACP,CAAC;oBACC,MAAM,aAAa,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;oBAC9B,IAAI,CAAC,aAAa;wBAAE,GAAG,CAAC,2CAA2C,CAAC,CAAC;oBACrE,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC,CAAC;gBACxD,CAAC;gBACD,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,WAAW,CAAC;YACjB,KAAK,aAAa;gBAChB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU,CAAC;YAChB,KAAK,UAAU;gBACb,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,QAAQ;gBACX,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBACxB,MAAM;YACR,KAAK,aAAa;gBAChB,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC;gBACvB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,UAAU;gBACb,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,eAAe;gBAClB,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC;gBACxB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,gBAAgB;gBACnB,KAAK,CAAC,WAAW,GAAG,IAAI,CAAC;gBACzB,KAAK,CAAC,cAAc,GAAG,IAAI,CAAC;gBAC5B,MAAM;YACR,KAAK,wBAAwB;gBAC3B,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC;gBAChC,MAAM;YACR,KAAK,yBAAyB;gBAC5B,KAAK,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBACjC,MAAM;YACR,KAAK,QAAQ,CAAC;YACd,KAAK,IAAI;gBACP,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;gBACrB,OAAO,KAAK,CAAC;YACf;gBACE,GAAG,CAAC,iBAAiB,GAAG,yBAAyB,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/doctor.d.ts

@@ -0,0 +1,28 @@
+import { type InstallScope, type RuntimeName, type ToolName } from "./state.js";
+import type { InstallerStatus } from "./status.js";
+type DoctorIssue = {
+    kind: "tool" | "runtime" | "skills";
+    name: string;
+    message: string;
+};
+export type DoctorReport = {
+    command: "doctor";
+    ok: boolean;
+    scope: InstallScope;
+    customSkillsDir: string;
+    installMissingClis: boolean;
+    selectedTools: ToolName[];
+    selectedRuntimes: RuntimeName[];
+    status: InstallerStatus;
+    issues: DoctorIssue[];
+};
+type DoctorInput = {
+    selectedTools: ToolName[];
+    selectedRuntimes: RuntimeName[];
+    scope: InstallScope;
+    customSkillsDir: string;
+    installMissingClis: boolean;
+};
+export declare function buildDoctorReport(status: InstallerStatus, input: DoctorInput): DoctorReport;
+export declare function formatDoctorReport(report: DoctorReport): string;
+export {};

package/dist/src/doctor.js

@@ -0,0 +1,78 @@
+import { runtimeMeta, } from "./state.js";
+function toolLabel(tool) {
+    switch (tool) {
+        case "rtk":
+            return "RTK";
+        case "caveman":
+            return "Caveman";
+        case "superpowers":
+            return "Superpowers";
+        case "graphify":
+            return "Graphify";
+        case "gsd":
+            return "GSD";
+        case "improve":
+            return "Improve";
+        case "frontend-skills":
+            return "Frontend Skills";
+        case "skills":
+            return "Custom Skills";
+    }
+}
+export function buildDoctorReport(status, input) {
+    const issues = [];
+    for (const tool of input.selectedTools) {
+        const detection = status.tools[tool];
+        if (detection.state === "missing") {
+            issues.push({
+                kind: tool === "skills" ? "skills" : "tool",
+                name: toolLabel(tool),
+                message: `${toolLabel(tool)} is selected but ${detection.summary}.`,
+            });
+        }
+    }
+    for (const runtime of input.selectedRuntimes) {
+        const detection = status.runtimes[runtime];
+        if (detection.state === "missing") {
+            const installHint = input.installMissingClis
+                ? "The installer is allowed to install or update it."
+                : "Re-run with --install-missing-clis or install it manually.";
+            issues.push({
+                kind: "runtime",
+                name: runtimeMeta[runtime].display,
+                message: `${runtimeMeta[runtime].display} is selected but ${detection.summary}. ${installHint}`,
+            });
+        }
+    }
+    return {
+        command: "doctor",
+        ok: issues.length === 0,
+        scope: input.scope,
+        customSkillsDir: input.customSkillsDir,
+        installMissingClis: input.installMissingClis,
+        selectedTools: input.selectedTools,
+        selectedRuntimes: input.selectedRuntimes,
+        status,
+        issues,
+    };
+}
+export function formatDoctorReport(report) {
+    const lines = [
+        "Doctor report",
+        `Scope: ${report.scope}`,
+        `Custom Skills source: ${report.customSkillsDir}`,
+        `Selected tools: ${report.selectedTools.join(", ") || "none"}`,
+        `Selected runtimes: ${report.selectedRuntimes.join(", ") || "none"}`,
+        "",
+    ];
+    if (report.issues.length === 0) {
+        lines.push("No blocking issues found for the selected plan.");
+        return lines.join("\n");
+    }
+    lines.push("Issues:");
+    for (const issue of report.issues) {
+        lines.push(`- ${issue.name}: ${issue.message}`);
+    }
+    return lines.join("\n");
+}
+//# sourceMappingURL=doctor.js.map

package/dist/src/doctor.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,WAAW,GAEZ,MAAM,YAAY,CAAC;AA6BpB,SAAS,SAAS,CAAC,IAAc;IAC/B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB,KAAK,KAAK;YACR,OAAO,KAAK,CAAC;QACf,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,iBAAiB;YACpB,OAAO,iBAAiB,CAAC;QAC3B,KAAK,QAAQ;YACX,OAAO,eAAe,CAAC;IAC3B,CAAC;AACH,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,MAAuB,EACvB,KAAkB;IAElB,MAAM,MAAM,GAAkB,EAAE,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACvC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM;gBAC3C,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC;gBACrB,OAAO,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,oBAAoB,SAAS,CAAC,OAAO,GAAG;aACpE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,SAAS,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,KAAK,CAAC,kBAAkB;gBAC1C,CAAC,CAAC,mDAAmD;gBACrD,CAAC,CAAC,4DAA4D,CAAC;YACjE,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,SAAS;gBACf,IAAI,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO;gBAClC,OAAO,EAAE,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,oBAAoB,SAAS,CAAC,OAAO,KAAK,WAAW,EAAE;aAChG,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,OAAO,EAAE,QAAQ;QACjB,EAAE,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QACvB,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,kBAAkB,EAAE,KAAK,CAAC,kBAAkB;QAC5C,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;QACxC,MAAM;QACN,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,MAAoB;IACrD,MAAM,KAAK,GAAG;QACZ,eAAe;QACf,UAAU,MAAM,CAAC,KAAK,EAAE;QACxB,yBAAyB,MAAM,CAAC,eAAe,EAAE;QACjD,mBAAmB,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;QAC9D,sBAAsB,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,EAAE;QACpE,EAAE;KACH,CAAC;IAEF,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,KAAK,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;QAC9D,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;IAClD,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC"}

package/dist/src/lock-update.d.ts

@@ -0,0 +1,22 @@
+import { type RunResult } from "./system.js";
+import { type ToolLock } from "./tool-lock.js";
+export type LockUpdateItem = {
+    name: string;
+    source: "npm" | "pypi" | "github" | "github-release";
+    current: string;
+    latest?: string;
+    status: "current" | "update-available" | "unknown";
+    error?: string;
+};
+export type LockUpdateReport = {
+    command: "update-lock";
+    items: LockUpdateItem[];
+};
+type Clients = {
+    capture?: (command: string, args?: string[]) => RunResult;
+    fetchJson?: (url: string) => Promise<unknown>;
+};
+export declare function buildLockUpdateReport(lock?: ToolLock, clients?: Clients): Promise<LockUpdateReport>;
+export declare function formatLockUpdateReport(report: LockUpdateReport): string;
+export declare function printLockUpdateError(error: unknown): void;
+export {};

package/dist/src/lock-update.js

@@ -0,0 +1,130 @@
+import { err } from "./logger.js";
+import { capture, fetchJson } from "./system.js";
+import { loadToolLock } from "./tool-lock.js";
+function itemStatus(current, latest) {
+    if (!latest)
+        return "unknown";
+    return current === latest ? "current" : "update-available";
+}
+async function latestNpmVersion(packageName, clients) {
+    const result = clients.capture("npm", [
+        "view",
+        packageName,
+        "version",
+        "--silent",
+    ]);
+    if (!result.ok) {
+        throw new Error(result.stderr.trim() || `npm view failed for ${packageName}`);
+    }
+    const version = result.stdout.trim().split(/\r?\n/).at(-1)?.trim();
+    if (!version)
+        throw new Error(`npm did not return a version for ${packageName}`);
+    return version;
+}
+async function latestPyPiVersion(packageName, clients) {
+    const response = (await clients.fetchJson(`https://pypi.org/pypi/${encodeURIComponent(packageName)}/json`));
+    if (!response.info?.version) {
+        throw new Error(`PyPI did not return a version for ${packageName}`);
+    }
+    return response.info.version;
+}
+async function latestGitHubCommit(repository, clients) {
+    const repo = (await clients.fetchJson(`https://api.github.com/repos/${repository}`));
+    const branch = repo.default_branch || "main";
+    const commit = (await clients.fetchJson(`https://api.github.com/repos/${repository}/commits/${encodeURIComponent(branch)}`));
+    if (!commit.sha)
+        throw new Error(`GitHub did not return a commit for ${repository}`);
+    return commit.sha;
+}
+async function latestGitHubRelease(repository, clients) {
+    const release = (await clients.fetchJson(`https://api.github.com/repos/${repository}/releases/latest`));
+    if (!release.tag_name) {
+        throw new Error(`GitHub did not return a latest release for ${repository}`);
+    }
+    return release.tag_name;
+}
+async function collectItem(item, resolver) {
+    try {
+        const latest = await resolver();
+        return {
+            ...item,
+            latest,
+            status: itemStatus(item.current, latest),
+        };
+    }
+    catch (error) {
+        return {
+            ...item,
+            status: "unknown",
+            error: error instanceof Error ? error.message : String(error),
+        };
+    }
+}
+export async function buildLockUpdateReport(lock = loadToolLock(), clients = {}) {
+    const resolvedClients = {
+        capture: clients.capture || capture,
+        fetchJson: clients.fetchJson || fetchJson,
+    };
+    const items = await Promise.all([
+        collectItem({
+            name: "RTK",
+            source: "github-release",
+            current: lock.tools.rtk.tag,
+        }, () => latestGitHubRelease(lock.tools.rtk.repository, resolvedClients)),
+        collectItem({
+            name: "Caveman",
+            source: "github",
+            current: lock.tools.caveman.ref,
+        }, () => latestGitHubCommit(lock.tools.caveman.repository, resolvedClients)),
+        collectItem({
+            name: "Graphify",
+            source: "pypi",
+            current: lock.tools.graphify.version,
+        }, () => latestPyPiVersion(lock.tools.graphify.package, resolvedClients)),
+        collectItem({
+            name: "GSD",
+            source: "npm",
+            current: lock.tools.gsd.version,
+        }, () => latestNpmVersion(lock.tools.gsd.package, resolvedClients)),
+        collectItem({
+            name: "Improve",
+            source: "github",
+            current: lock.tools.improve.ref,
+        }, () => latestGitHubCommit(lock.tools.improve.repository, resolvedClients)),
+        collectItem({
+            name: "Agent Skills CLI",
+            source: "npm",
+            current: lock.tools.frontendSkills.skillsCli.version,
+        }, () => latestNpmVersion(lock.tools.frontendSkills.skillsCli.package, resolvedClients)),
+        collectItem({
+            name: "Impeccable",
+            source: "github",
+            current: lock.tools.frontendSkills.impeccable.ref,
+        }, () => latestGitHubCommit(lock.tools.frontendSkills.impeccable.repository, resolvedClients)),
+        collectItem({
+            name: "Taste Skill",
+            source: "github",
+            current: lock.tools.frontendSkills.tasteSkill.ref,
+        }, () => latestGitHubCommit(lock.tools.frontendSkills.tasteSkill.repository, resolvedClients)),
+        ...["claude", "codex", "opencode", "gemini"].map((runtime) => collectItem({
+            name: `${runtime} CLI`,
+            source: "npm",
+            current: lock.runtimeClis[runtime].version,
+        }, () => latestNpmVersion(lock.runtimeClis[runtime].package, resolvedClients))),
+    ]);
+    return { command: "update-lock", items };
+}
+export function formatLockUpdateReport(report) {
+    const lines = ["External source update report"];
+    for (const item of report.items) {
+        const latest = item.latest || "unknown";
+        const suffix = item.error ? ` (${item.error})` : "";
+        lines.push(`- ${item.name}: ${item.current} -> ${latest} [${item.status}]${suffix}`);
+    }
+    lines.push("", "This command reports candidates only; update tools.lock.json intentionally after reviewing checksums and changelogs.");
+    return lines.join("\n");
+}
+export function printLockUpdateError(error) {
+    err(error instanceof Error ? error.message : String(error));
+}
+//# sourceMappingURL=lock-update.js.map

package/dist/src/lock-update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lock-update.js","sourceRoot":"","sources":["../../src/lock-update.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,OAAO,EAAE,SAAS,EAAkB,MAAM,aAAa,CAAC;AACjE,OAAO,EAAE,YAAY,EAAiB,MAAM,gBAAgB,CAAC;AAuC7D,SAAS,UAAU,CACjB,OAAe,EACf,MAAe;IAEf,IAAI,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IAC9B,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC;AAC7D,CAAC;AAED,KAAK,UAAU,gBAAgB,CAC7B,WAAmB,EACnB,OAA2C;IAE3C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE;QACpC,MAAM;QACN,WAAW;QACX,SAAS;QACT,UAAU;KACX,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,uBAAuB,WAAW,EAAE,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IACnE,IAAI,CAAC,OAAO;QACV,MAAM,IAAI,KAAK,CAAC,oCAAoC,WAAW,EAAE,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,iBAAiB,CAC9B,WAAmB,EACnB,OAA6C;IAE7C,MAAM,QAAQ,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CACvC,yBAAyB,kBAAkB,CAAC,WAAW,CAAC,OAAO,CAChE,CAAiB,CAAC;IACnB,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,qCAAqC,WAAW,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC;AAC/B,CAAC;AAED,KAAK,UAAU,kBAAkB,CAC/B,UAAkB,EAClB,OAA6C;IAE7C,MAAM,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CACnC,gCAAgC,UAAU,EAAE,CAC7C,CAAuB,CAAC;IACzB,MAAM,MAAM,GAAG,IAAI,CAAC,cAAc,IAAI,MAAM,CAAC;IAC7C,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CACrC,gCAAgC,UAAU,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,CACnF,CAAyB,CAAC;IAC3B,IAAI,CAAC,MAAM,CAAC,GAAG;QACb,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;IACtE,OAAO,MAAM,CAAC,GAAG,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,UAAkB,EAClB,OAA6C;IAE7C,MAAM,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,SAAS,CACtC,gCAAgC,UAAU,kBAAkB,CAC7D,CAA0B,CAAC;IAC5B,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,8CAA8C,UAAU,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,OAAO,CAAC,QAAQ,CAAC;AAC1B,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,IAAyD,EACzD,QAA+B;IAE/B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,QAAQ,EAAE,CAAC;QAChC,OAAO;YACL,GAAG,IAAI;YACP,MAAM;YACN,MAAM,EAAE,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC;SACzC,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,GAAG,IAAI;YACP,MAAM,EAAE,SAAS;YACjB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;SAC9D,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAAiB,YAAY,EAAE,EAC/B,UAAmB,EAAE;IAErB,MAAM,eAAe,GAAG;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,OAAO;QACnC,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,SAAS;KAC1C,CAAC;IAEF,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC9B,WAAW,CACT;YACE,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,gBAAgB;YACxB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG;SAC5B,EACD,GAAG,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,eAAe,CAAC,CACtE;QACD,WAAW,CACT;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG;SAChC,EACD,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CACzE;QACD,WAAW,CACT;YACE,IAAI,EAAE,UAAU;YAChB,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO;SACrC,EACD,GAAG,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC,CACtE;QACD,WAAW,CACT;YACE,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO;SAChC,EACD,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,eAAe,CAAC,CAChE;QACD,WAAW,CACT;YACE,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG;SAChC,EACD,GAAG,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,eAAe,CAAC,CACzE;QACD,WAAW,CACT;YACE,IAAI,EAAE,kBAAkB;YACxB,MAAM,EAAE,KAAK;YACb,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO;SACrD,EACD,GAAG,EAAE,CACH,gBAAgB,CACd,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,SAAS,CAAC,OAAO,EAC3C,eAAe,CAChB,CACJ;QACD,WAAW,CACT;YACE,IAAI,EAAE,YAAY;YAClB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG;SAClD,EACD,GAAG,EAAE,CACH,kBAAkB,CAChB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAC/C,eAAe,CAChB,CACJ;QACD,WAAW,CACT;YACE,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,QAAQ;YAChB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,GAAG;SAClD,EACD,GAAG,EAAE,CACH,kBAAkB,CAChB,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,UAAU,EAC/C,eAAe,CAChB,CACJ;QACD,GAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,CAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACtE,WAAW,CACT;YACE,IAAI,EAAE,GAAG,OAAO,MAAM;YACtB,MAAM,EAAE,KAAc;YACtB,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO;SAC3C,EACD,GAAG,EAAE,CACH,gBAAgB,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CACvE,CACF;KACF,CAAC,CAAC;IAEH,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,MAAwB;IAC7D,MAAM,KAAK,GAAG,CAAC,+BAA+B,CAAC,CAAC;IAChD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,KAAK,CAAC,IAAI,CACR,KAAK,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,OAAO,OAAO,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,MAAM,EAAE,CACzE,CAAC;IACJ,CAAC;IACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,sHAAsH,CACvH,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,GAAG,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9D,CAAC"}