@skaile/workspaces 6.5.0 → 6.7.0

package/dist/cli/index.js

@@ -1,98 +1,100 @@
 #!/usr/bin/env node
-import { status, enable, disable, install, uninstall } from '../chunk-LE6QS4PG.js';
-import { makeValidateCommand, scanIdentities } from '../chunk-TROEC2Z2.js';
-import { storeNotInstallableReason, mcpNotRunnableHere } from '../chunk-K4DHYTUM.js';
-import { checkHarnessSdk } from '../chunk-SRTWKZP2.js';
-import { makeProvidersCommand, loadRegistryView, addProviderEntry, ProviderRegistryWriteError, removeProviderEntry } from '../chunk-6EKQENAP.js';
-import { makeInstallCommand, makeCheckCommand, makeCleanCommand, pinComposedAgents, reportRewritten, reportReplaced, reportRelocked, reportMoved, reportStoreNotChecked, globalProblems, editedConventionFiles, supportsInstallManifest, runYamlInstall, REF_HINT, reportInstalledSoftDeps } from '../chunk-J5JWLKLB.js';
-import { reportUnknownHarnesses, reportProjectConfig, agentInstanceErrorLines } from '../chunk-J6YPKMMY.js';
-import { isRecord } from '../chunk-ETF6Q3R3.js';
+import { status, enable, disable, install, uninstall } from '../chunk-BKLDBUQA.js';
+import { makeValidateCommand, scanIdentities } from '../chunk-Q2NYTMT6.js';
+import { storeNotInstallableReason, mcpNotRunnableHere } from '../chunk-TXX3OUYI.js';
+import { checkHarnessSdk } from '../chunk-OGTQUEAO.js';
+import { makeProvidersCommand, loadRegistryView, addProviderEntry, ProviderRegistryWriteError, removeProviderEntry } from '../chunk-WKENHNDM.js';
+import { makeInstallCommand, makeCheckCommand, makeCleanCommand, pinComposedAgents, reportRewritten, reportReplaced, reportRelocked, reportMoved, reportStoreNotChecked, reportStoreNotCheckedForUpdates, globalProblems, editedConventionFiles, supportsInstallManifest, runYamlInstall, REF_HINT, reportInstalledSoftDeps } from '../chunk-37AYPPOO.js';
+import { reportUnknownHarnesses, reportProjectConfig, agentInstanceErrorLines } from '../chunk-CTRTFMCX.js';
+import { isRecord } from '../chunk-DFP476EU.js';
 import { createSpinner } from '../chunk-NESV47MF.js';
-import { loadDeclaredPlugins } from '../chunk-THX5EE3K.js';
-import { getStoreConfig, storeFetch, isStoreAuthenticated, getStoreToken } from '../chunk-KUADKMNX.js';
-import { makeSourceCommand, syncProjectSources, divergedSourceClones } from '../chunk-DNXPXJ3X.js';
-import { manifestEntryFilesRefusals, libraryAssetRefusals, manifestEntryRenames, deviceLogin, loadStoreAuthConfig, logout, hasStoredAuth, exitOnLibrarySymlinks, resolveLibraryPublisherDetailed, getStoreIdentity, warnLibraryNameFallback, indexLibrary, warnIgnoredDomainFiles, removedDomainOption, rejectRemovedDomainOption, requireValidPublisherOrExit, exitOnManifestPublisherProblems, findAssetManifestFile, checkAssetFile, registerLibraryAsset, DOMAIN_REMOVED_HINT, reportLibrarySymlinks, checkAsset, manifestPublisherProblems, exitOnManifestPathProblems, manifestRequiresProblems, composeRefContext, registeredAssetKeys, assetEntryRef, duplicateAssetMessage, manifestParseFailureLine, manifestParseErrorText, unresolvedManifestDependencies, findEntryManifestFile, unheldRequiresOfFile, warnLegacyBundleFiles, checkComposeKinds } from '../chunk-7EMS2GZO.js';
-import { openCatalogSource, LocalCatalogDisabledError, openLibraryManager, openLibrary } from '../chunk-YRC2EFOU.js';
-import { getKindRegistry, getKnownKinds } from '../chunk-WFLQMAR5.js';
-import { AI_RESOURCES } from '../chunk-UZET67SO.js';
-import { logErr, unknownHarnessTargetMessage, S, logOk, setActiveCommand, logInfo, logWarnErr, unknownHarnessMessage, logWarn, TARGET_DEFAULT_HINT, parseHarnessFilter, requireProjectConfig, deferredWarnings, warnPlaceholderBodies, warnFilesOnlyDelegates, reportLegacyOmpCopies, logNoProject, warnStaleHarnessCopies, kindColorPad, kindColor, colorRef, formatSoftDepSection, bareSoftDepName, driverAliasOption, foldDriverFlag, friendlyHarnessError, harnessErrorNotes, formatSoftDepHint, formatRelativeTime, formatSoftDepRemovePreview, formatSoftDepAddPreview, fitWidth, KIND_COL_WIDTH } from '../chunk-Z2X7UZEZ.js';
+import { loadDeclaredPlugins } from '../chunk-QW5B3TEO.js';
+import { getStoreConfig, storeFetch, isStoreAuthenticated, getStoreToken } from '../chunk-72TLO2AG.js';
+import { makeSourceCommand, dropVanishedSourceRows, syncProjectSources, divergedSourceClones, uncachedSources } from '../chunk-ZM4SDVUV.js';
+import { manifestEntryRootRefusals, manifestEntryFilesRefusals, libraryAssetRefusals, manifestEntryRenames, deviceLogin, loadStoreAuthConfig, logout, hasStoredAuth, exitOnLibrarySymlinks, resolveLibraryPublisherDetailed, getStoreIdentity, warnLibraryNameFallback, indexLibrary, warnIgnoredDomainFiles, removedDomainOption, rejectRemovedDomainOption, requireValidPublisherOrExit, exitOnManifestPublisherProblems, findAssetManifestFile, checkAssetFile, registerLibraryAsset, DOMAIN_REMOVED_HINT, reportLibrarySymlinks, checkAsset, manifestPublisherProblems, exitOnManifestPathProblems, manifestRequiresProblems, composeRefContext, registeredAssetKeys, assetEntryRef, duplicateAssetMessage, manifestParseFailureLine, manifestParseErrorText, unresolvedManifestDependencies, findEntryManifestFile, unheldRequiresOfFile, warnLegacyBundleFiles, warnUntrackedAssetFiles, checkComposeKinds } from '../chunk-J7VEQORJ.js';
+import { openCatalogSource, LocalCatalogDisabledError, openLibraryManager, openLibrary } from '../chunk-WIYVR24B.js';
+import { getKindRegistry, getKnownKinds } from '../chunk-QCR5AE5E.js';
+import { AI_RESOURCES } from '../chunk-237BMOZW.js';
+import { logErr, unknownHarnessTargetMessage, S, logOk, setActiveCommand, logInfo, logWarnErr, unknownHarnessMessage, logWarn, TARGET_DEFAULT_HINT, parseHarnessFilter, requireProjectConfig, deferredWarnings, warnPlaceholderBodies, warnFilesOnlyDelegates, reportLegacyOmpCopies, logNoProject, warnStaleHarnessCopies, kindColorPad, kindColor, colorRef, formatSoftDepSection, bareSoftDepName, driverAliasOption, foldDriverFlag, friendlyHarnessError, harnessErrorNotes, formatSoftDepHint, formatRelativeTime, formatSoftDepRemovePreview, formatSoftDepAddPreview, fitWidth, KIND_COL_WIDTH } from '../chunk-L3JQJ6D5.js';
 import { LocalSecretsProvider } from '../chunk-ILFGVSTJ.js';
-import { resolveInstanceAgentDir, instanceSessionOverrides, runAgentChat, isCompositionError, resolveSessionId, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, loadAgentManifest, hashAgentFiles, createCompositionContentSource, compileComposition, manifestModelForHarness, instanceForSession, resolveAgentInstance, describeComposition, MarkdownStreamer, createFinalTextFallback } from '../chunk-TNQLDEM6.js';
-import '../chunk-TDPQOR3C.js';
-import '../chunk-3KSLUVKB.js';
-import '../chunk-OBZ5WQ32.js';
-import '../chunk-YBEJCQE5.js';
+import { resolveInstanceAgentDir, instanceSessionOverrides, loadAgentManifest, manifestModelForHarness, runAgentChat, isCompositionError, resolveSessionId, loadSessionById, loadSession, listSessions, setCurrentSession, deleteSession, clearSession, hashAgentFiles, createCompositionContentSource, compileComposition, MarkdownStreamer, createFinalTextFallback, instanceForSession, resolveAgentInstance, describeComposition } from '../chunk-6RPS7JEH.js';
+import '../chunk-RAHAZ7LP.js';
+import '../chunk-37X4A6VZ.js';
+import '../chunk-L7QOZG5V.js';
+import '../chunk-BB5EJLKZ.js';
 import '../chunk-WYZXSJBK.js';
-import '../chunk-6Y3SC7O4.js';
-import '../chunk-KYNCY3F3.js';
+import '../chunk-GTAHU4N4.js';
+import '../chunk-HQAPUPBE.js';
 import '../chunk-KW37WNXY.js';
 import '../chunk-3MWQKQUB.js';
-import '../chunk-SN663FCA.js';
+import '../chunk-U52FYGK5.js';
 import '../chunk-O7SG5PC2.js';
 import '../chunk-7QBNJTTQ.js';
 import '../chunk-O2SYFJWP.js';
-import '../chunk-7H4GTP7V.js';
+import '../chunk-HLAEYFUN.js';
 import '../chunk-32NA4TVC.js';
 import '../chunk-W3UDISS2.js';
-import '../chunk-HTGTNN2B.js';
-import { runFlow, resumeFlow } from '../chunk-USVUS4DJ.js';
+import '../chunk-CMXDFTA2.js';
+import { runFlow, resumeFlow } from '../chunk-IRK3LNG3.js';
 import '../chunk-4R6DROGN.js';
-import { parseSkillRequirements, validateRequirements } from '../chunk-W5KCAWGN.js';
-import '../chunk-3DA74PLW.js';
-import '../chunk-B4BLJUYN.js';
-import '../chunk-2M3VLKT2.js';
-import '../chunk-2IAWVUW3.js';
-import { checkHarnessModel, checkModelProvider } from '../chunk-B436SG5P.js';
-import '../chunk-S7DVT2BV.js';
-import '../chunk-EN5REMWV.js';
-import '../chunk-OLHHN3NO.js';
+import { parseSkillRequirements, validateRequirements } from '../chunk-PTJTOPE5.js';
+import '../chunk-USSP43U3.js';
+import '../chunk-LX4TTTRR.js';
+import '../chunk-NURTGAWM.js';
+import '../chunk-ZBA4P5TD.js';
+import { checkHarnessModel, checkOmpListedModel, isUnlistedModel, checkModelSurface } from '../chunk-HMVAGPYR.js';
+import '../chunk-UCB7FK25.js';
+import '../chunk-HPXONAI2.js';
+import '../chunk-N6ZGB5ES.js';
 import '../chunk-LOO5CB5M.js';
-import '../chunk-KSUT5KAE.js';
-import '../chunk-ZUU2PLA3.js';
+import '../chunk-LZPJOF7Y.js';
+import '../chunk-SBNUXJ6E.js';
+import { findHarnessBinary, HARNESS_BINARIES } from '../chunk-WWSRIT3J.js';
+import '../chunk-4C2E5QUP.js';
 import '../chunk-5DE3DGVR.js';
 import '../chunk-7DN6JKP2.js';
-import '../chunk-E6UWI3TP.js';
-import '../chunk-EO7KGX6P.js';
-import '../chunk-SZTHSPRC.js';
-import { listHarnesses, getProviderPreset, AI_PROVIDER_PRESETS } from '../chunk-NSIOBKDX.js';
+import '../chunk-PLLZSKOO.js';
+import { listHarnesses } from '../chunk-XON6ODIC.js';
 import '../chunk-G5SUWZEU.js';
+import '../chunk-3HSLJAMJ.js';
+import { getProviderPreset, AI_PROVIDER_PRESETS } from '../chunk-6UP2EDFN.js';
 import '../chunk-IFGTRL2I.js';
-import { loadFlow, flowLookupRoots, findFlowFileInRoots, loadAllFlowEntries } from '../chunk-X44XKBZX.js';
+import { loadFlow, flowLookupRoots, findFlowFileInRoots, loadAllFlowEntries } from '../chunk-WFK4MUBL.js';
 import '../chunk-WD3L5QSU.js';
 import { nodeLabel, nodeSkillAsset, nodeIsInert, nodeIsOptional, nodeRunKind, nodeAssets } from '../chunk-7RGTAEG6.js';
-import '../chunk-G5SYFFMD.js';
-import { setLibraryAssetCheck, setRenamedEntryLookup, LibraryEntryError, AssetManager, parseRefTolerant, MissingManifestError, parseCanonicalLockKey, normalizeRepoUrl } from '../chunk-IS3NIZBX.js';
-import { CatalogHttpError, libraryDirMissing, missingLibraryDirMessage, cloneOrInitGitRepo, trackOriginBranch, stampManifestPublisher, isGitRepo, ensureGitRepo, conflictingAssetRoot, scanUnlistedAssets, setManifestPublisher, LIBRARY_OWNERSHIPS, assertManifestEditable, installLibraryAsset, getStoreManifestsDir, assertValidLibraryName, unparsableAssetFiles, syncManifestWithDisk, renamedLibraryName, storeManifestFile, getDefaultValue, isSecretPlaceholder } from '../chunk-TGUMN5G7.js';
-import { flowFileNameError, SEMVER_RE } from '../chunk-22ZX33H6.js';
-import '../chunk-U6KRTCNA.js';
+import '../chunk-ASBZOTEO.js';
+import { setLibraryAssetCheck, setRenamedEntryLookup, LibraryEntryError, AssetManager, parseRefTolerant, MissingManifestError, parseCanonicalLockKey, normalizeRepoUrl } from '../chunk-ZDTDS62B.js';
+import { CatalogHttpError, libraryDirMissing, missingLibraryDirMessage, cloneOrInitGitRepo, trackOriginBranch, stampManifestPublisher, isGitRepo, ensureGitRepo, conflictingAssetRoot, scanUnlistedAssets, setManifestPublisher, LIBRARY_OWNERSHIPS, assertManifestEditable, installLibraryAsset, getStoreManifestsDir, assertValidLibraryName, unparsableAssetFiles, syncManifestWithDisk, renamedLibraryName, storeManifestFile, getDefaultValue, isSecretPlaceholder } from '../chunk-G44FFUMA.js';
+import { flowFileNameError, SEMVER_RE } from '../chunk-O5Y7VMVQ.js';
+import '../chunk-OSABUEWA.js';
 import '../chunk-F3D25RGM.js';
 import '../chunk-3TXEJN4W.js';
 import '../chunk-ISHJITXJ.js';
 import '../chunk-LNFKL23K.js';
 import '../chunk-JRN5QF4C.js';
 import '../chunk-NUELZWCF.js';
-import { installTargetOf, SCAFFOLD_KINDS } from '../chunk-2HS357RA.js';
+import { installTargetOf, SCAFFOLD_KINDS } from '../chunk-KO3VSZQP.js';
 import '../chunk-PKE3PXOK.js';
 import '../chunk-KTBKW2FI.js';
 import '../chunk-UQ6LFBPZ.js';
-import '../chunk-T7HGEMNB.js';
+import '../chunk-4CD2R4MJ.js';
 import { effectiveComposes, validatePreset, validateAgent, composeSlotDiagnostics, agentDeprecationDiagnostics, SLOT_ID_PATTERN } from '../chunk-VT6G5AJV.js';
-import { LockParseError, loadSettings, globalSettingsPath, resolveSettings, projectSettingsPath, saveSettings, WorkspaceYamlEditor, readLock, resolveLibraryDir, checkAgentSkillConformance, resolveSettingsWithSources, resolveConfiguredHarnessName, FACTORY_SOURCE_URL, globalInstallDir, GLOBAL_INSTALL_DIR_NAME, workspaceProviderRegistryPath, userProviderRegistryPath, loadProviderRegistryFile, aiResourceRoots } from '../chunk-UMLCKKIA.js';
+import { RUN_STATE_GITIGNORE_ENTRIES, LockParseError, loadSettings, globalSettingsPath, resolveSettings, projectSettingsPath, saveSettings, WorkspaceYamlEditor, readLock, resolveLibraryDir, checkAgentSkillConformance, resolveSettingsWithSources, resolveConfiguredHarnessName, FACTORY_SOURCE_URL, globalInstallDir, GLOBAL_INSTALL_DIR_NAME, workspaceProviderRegistryPath, userProviderRegistryPath, loadProviderRegistryFile, aiResourceRoots } from '../chunk-TMJBEGS4.js';
 import '../chunk-4GY63JU6.js';
-import { factoryAssetRoots } from '../chunk-G4NCSYWR.js';
+import { factoryAssetRoots } from '../chunk-G7NMF5WQ.js';
 import { deployedDir } from '../chunk-5KRMNUL4.js';
 import { DEFAULT_HARNESS_ID, HARNESS_DEFAULTS } from '../chunk-C5HFK34M.js';
 import { findKindDirs } from '../chunk-MWXYN6NY.js';
-import { SourceEntryError, LegacyKeyError, ConfigParseError, resolveSkWorkspaceConfig, sourceCacheKey, getGlobalCacheDir, resolveAgentDir, AgentRefResolutionError, resolveAgentDefinitionDir, effectiveAgentInstances, matchPin, coerceVersion, loadSkWorkspaceConfig, configParseErrorOf, findWorkspaceRoot, isWorkspaceConfigFilename, SKAILE_YAML_DEFAULT, AGENT_PROFILE_FIELDS } from '../chunk-IWKKTCXY.js';
+import { SourceEntryError, LegacyKeyError, ConfigParseError, resolveSkWorkspaceConfig, unselectedInstanceIds, instanceChoiceText, sourceCacheKey, getGlobalCacheDir, resolveAgentDir, AgentRefResolutionError, resolveAgentDefinitionDir, effectiveAgentInstances, matchPin, coerceVersion, loadSkWorkspaceConfig, configParseErrorOf, findWorkspaceRoot, isWorkspaceConfigFilename, SKAILE_YAML_DEFAULT, AGENT_PROFILE_FIELDS } from '../chunk-O7ADRMCR.js';
 import { globalCacheRoot, globalSkaileDir, userConfigPath } from '../chunk-L5VSIPQD.js';
 import { HARNESS_TARGETS, SUPPORTED_HARNESSES, harnessNameForHarnessId } from '../chunk-VTETQCR6.js';
-import { SKAILE_MANIFEST_FILENAME, loadSkPublishManifest, decodeSkaileManifest, LIBRARY_GITIGNORE, librarySymlinkMessage, isNonAssetPath, isNonAssetDir, encodeSkaileManifest } from '../chunk-23SG4JRV.js';
-import { setWalkTruncationSink, dedupeRequirements, parseFrontmatter, scanDirectory, parseRequires } from '../chunk-AVFRFGM2.js';
+import { SKAILE_MANIFEST_FILENAME, loadSkPublishManifest, decodeSkaileManifest, LIBRARY_GITIGNORE, librarySymlinkMessage, isNonAssetPath, isNonAssetDir, encodeSkaileManifest } from '../chunk-QC5BYUED.js';
+import { setWalkTruncationSink, dedupeRequirements, parseFrontmatter, scanDirectory, parseRequires } from '../chunk-GNUA7XT2.js';
 import { pluginTitle } from '../chunk-RVRB27AN.js';
 import { parseAssetRef, isValidPublisher, PUBLISHER_HINT, isValidAssetName, ASSET_NAME_HINT, depToStr, assetRefToStr, slugifyAssetName, parseAssetRefLoose } from '../chunk-V5KG6CCV.js';
 import { portableSpawn, portableSpawnSync } from '../chunk-VSX2G7LA.js';
 import { parseModelRef, resolveEntryBaseUrl } from '../chunk-RXGPFAMN.js';
-import { openSqlite } from '../chunk-DKXNKFKP.js';
+import { openSqlite } from '../chunk-SGI5MRKP.js';
 import '../chunk-C3CAXQMA.js';
 import { registerLogStore, LogStore, StdoutSink } from '../chunk-BOFL7GIF.js';
 import '../chunk-NSBPE2FW.js';
@@ -239,7 +241,7 @@ async function runSearch(kind, query, opts) {
   }
 }
 async function searchIndex(query, kind, projectDir) {
-  const { openLibrary: openLibrary2 } = await import('../open-library-BVQCB37E.js');
+  const { openLibrary: openLibrary2 } = await import('../open-library-R5EZROFN.js');
   const library = await openLibrary2();
   try {
     const { libraryDirMissing: libraryDirMissing2 } = await import('../library/index.js');
@@ -415,14 +417,14 @@ async function withAddVersions(entries, projectDir) {
 }
 async function searchLocal(query, kind, opts, showStore, airGapped) {
   const projectDir = path19__default.resolve(opts.projectDir);
-  const { restoreSourceReaders } = await import('../source-XA3L4H6I.js');
+  const { restoreSourceReaders } = await import('../source-FOELFCY6.js');
   for (const name of await restoreSourceReaders(projectDir)) {
     logInfo(`Re-registered source "${name}" (its library entry was removed elsewhere).`);
   }
   const factory = await searchFactory(projectDir, query, kind);
   let entries = unionEntries(await searchIndex(query, kind, projectDir), factory);
   if (entries.length === 0 && !query && !kind && !airGapped) {
-    const { autoSyncForSearch } = await import('../source-XA3L4H6I.js');
+    const { autoSyncForSearch } = await import('../source-FOELFCY6.js');
     if (await autoSyncForSearch(projectDir)) {
       entries = unionEntries(await searchIndex(query, kind, projectDir), factory);
     }
@@ -540,7 +542,7 @@ async function searchStore(query, kind, opts, airGapped) {
     logInfo("air-gapped (cache_ttl: 0) \u2014 local sources only");
     return "skipped";
   }
-  const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-BVQCB37E.js');
+  const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-R5EZROFN.js');
   try {
     const remote = await openCatalogSource2({ projectDir: path19__default.resolve(opts.projectDir) });
     const assets = await remote.listAssets(kind ? { kind } : {});
@@ -1071,7 +1073,8 @@ function infoShowsLocked(locked, latest) {
 }
 function infoVersionLine(locked, latest) {
   if (infoShowsLocked(locked, latest)) return `locked ${locked} (latest ${latest})`;
-  return latest || void 0;
+  if (latest) return latest;
+  return locked && !locked.startsWith("0.0.0-sha") ? locked : void 0;
 }
 function lockedVersionOf(projectDir, kind, name, publisher) {
   try {
@@ -1086,6 +1089,20 @@ function lockedVersionOf(projectDir, kind, name, publisher) {
   }
   return void 0;
 }
+function lockedUpstreamOf(projectDir, kind, name, publisher) {
+  try {
+    const lock = readLock(path19__default.join(projectDir, "skaile.lock.yaml"));
+    for (const [key, entry] of Object.entries(lock?.assets ?? {})) {
+      const id = parseCanonicalLockKey(key);
+      if (id.kind !== kind || id.name !== name || entry.library || !entry.source) continue;
+      if (publisher && id.publisher && id.publisher !== publisher.replace(/^@/, "")) continue;
+      const commit = /^0+$/.test(entry.source.commit) ? "" : entry.source.commit.slice(0, 7);
+      return commit ? `${entry.source.url}@${commit}` : entry.source.url;
+    }
+  } catch {
+  }
+  return void 0;
+}
 async function resolveInfoEntry(am2, ref, opts) {
   const local = await am2.info(ref);
   if (local) return { entry: local };
@@ -1095,14 +1112,17 @@ async function resolveInfoEntry(am2, ref, opts) {
   if (deployed) {
     if (isFile(deployed.source)) {
       const { data } = parseFrontmatter(readTextOrEmpty(deployed.source));
-      if (typeof data.name === "string" && data.name !== deployed.name) return { entry: deployed };
+      if (typeof data.name === "string" && data.name !== deployed.name) {
+        return { entry: deployed, deployed: true };
+      }
       const description = typeof data.description === "string" ? data.description : "";
       return {
         entry: {
           ...deployed,
           description: description || deployed.description,
           version: lockedVersionOf(opts.projectDir, deployed.kind, deployed.name) ?? deployed.version
-        }
+        },
+        deployed: true
       };
     }
     const scanned = await scanDirectory(deployed.source, deployed.publisher ?? "", {
@@ -1112,10 +1132,10 @@ async function resolveInfoEntry(am2, ref, opts) {
     // kind. Never fall back across kinds — a nested manifest of another kind
     // is a different asset, not this one.
     scanned.find((e) => e.kind === deployed.kind);
-    return { entry: match ?? deployed };
+    return { entry: match ?? deployed, deployed: true };
   }
   const lookup = opts.storeLookup ?? (async (filter) => {
-    const { resolveCatalogSource } = await import('../open-library-BVQCB37E.js');
+    const { resolveCatalogSource } = await import('../open-library-R5EZROFN.js');
     const { source, close } = await resolveCatalogSource({ projectDir: opts.projectDir });
     try {
       return await source.listAssets(filter);
@@ -1131,7 +1151,7 @@ async function resolveInfoEntry(am2, ref, opts) {
     );
     return { entry: hit ? catalogAssetToEntry(hit) : null };
   } catch (err) {
-    const { LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-BVQCB37E.js');
+    const { LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-R5EZROFN.js');
     const storeNote = err instanceof Error ? err.message : String(err);
     const disabled = err instanceof LocalCatalogDisabledError2 || /catalog\.url/i.test(storeNote);
     return { entry: null, storeNote, ...disabled ? { storeDisabled: true } : {} };
@@ -1179,8 +1199,10 @@ function makeInfoCommand() {
     if (infoVersionText) console.log(`  version:     ${infoVersionText}`);
     if (entry.description) console.log(`  description: ${entry.description}`);
     if (entry.publisher) console.log(`  repository:  ${S.dim(entry.publisher)}`);
+    const upstream = lookup.deployed ? lockedUpstreamOf(projectDir, entry.kind, entry.name, parseRefTolerant(ref)?.publisher) : void 0;
     const infoSource = showLocked && entry.source.endsWith(`#${entry.version}`) ? `${entry.source.slice(0, -`#${entry.version}`.length)}#${infoLocked}` : entry.source;
-    console.log(`  source:      ${S.dim(infoSource)}`);
+    console.log(`  source:      ${S.dim(upstream ?? infoSource)}`);
+    if (upstream) console.log(`  deployed:    ${S.dim(infoSource)}`);
     const infoLibrary = await am2.lockedLibraryOf(
       entry.kind,
       entry.name,
@@ -1270,15 +1292,20 @@ function makeDoctorCommand() {
       // A library that went back past the lock is no drift either (p1257).
       ...await am2.libraryOlderNotices()
     ];
-    if (gaps.length === 0 && edited.length === 0) {
+    await am2.probeStoreOrigins();
+    const notChecked = am2.takeStoreNotChecked();
+    const storeUnreachable = notChecked.some((n) => n.reason === "unreachable");
+    if (gaps.length === 0 && edited.length === 0 && !storeUnreachable) {
       if (configErrors === 0) logOk("No missing dependencies.");
       for (const n of notices) logWarn(n);
+      reportStoreNotCheckedForUpdates(notChecked);
       return;
     }
     for (const n of notices) logWarn(n);
     process.exitCode = 1;
     for (const e of edited) logErr(e);
     for (const g of gaps) if (g.type !== "requires") logErr(g.message);
+    reportStoreNotCheckedForUpdates(notChecked);
     const missing = gaps.filter((g) => g.type === "requires" && g.asset !== void 0);
     if (missing.length === 0) return;
     const assetW = Math.max(5, ...missing.map((g) => (g.asset ?? "").length));
@@ -1374,7 +1401,8 @@ ${body}
 function copyFilter(root) {
   return (src) => {
     const rel = path19.relative(root, src).split(path19.sep).join("/");
-    return rel === "" || !(isNonAssetPath(rel) || isNonAssetDir(path19.basename(src)));
+    return rel === "" || !(isNonAssetPath(rel, "asset-root") || // The generic build names count only directly in the copied folder.
+    isNonAssetDir(path19.basename(src), !rel.includes("/")));
   };
 }
 async function resolveDefByRef(library, ref, opts) {
@@ -1755,9 +1783,9 @@ function dirSizeOfDir(dir) {
   return total;
 }
 function removeCacheTargets(targets, opts) {
-  const present = targets.filter((t) => existsSync(t));
-  for (const t of present) rmSync(t, { recursive: true, force: true });
-  return present;
+  const present2 = targets.filter((t) => existsSync(t));
+  for (const t of present2) rmSync(t, { recursive: true, force: true });
+  return present2;
 }
 function fmtBytes(n) {
   const u = ["B", "KB", "MB", "GB"];
@@ -1805,6 +1833,7 @@ function makeCacheCommand() {
     const removed = removeCacheTargets(targets);
     console.log();
     for (const r of removed) logOk(`Removed ${r}`);
+    if (opts.global) await dropVanishedSourceRows();
   });
   cmd.command("dir").description("Print the resolved cache roots").option("--global", "Include the global cache root").option("--project-dir <path>", "Project directory", process.cwd()).action((opts) => {
     console.log(path19__default.join(path19__default.resolve(opts.projectDir), ".skaile", "cache"));
@@ -1859,7 +1888,7 @@ function makeCatalogCommand() {
   return catalog;
 }
 async function runLocalCatalogTest(projectDir) {
-  const { resolveCatalogSource } = await import('../open-library-BVQCB37E.js');
+  const { resolveCatalogSource } = await import('../open-library-R5EZROFN.js');
   let resolved;
   try {
     resolved = await resolveCatalogSource({ projectDir });
@@ -2035,7 +2064,7 @@ async function scanLibraryFlowEntries() {
     const { LocalIndex, resolveIndexPath, scanAuthoringLibraries } = await import('../library/index.js');
     const indexPath = resolveIndexPath();
     if (!existsSync(indexPath)) return entries;
-    const { getKindRegistry: getKindRegistry2 } = await import('../open-registry-JCSIAKEC.js');
+    const { getKindRegistry: getKindRegistry2 } = await import('../open-registry-RZW2AFD6.js');
     const index = new LocalIndex({ indexPath });
     try {
       for (const { library, assets } of await scanAuthoringLibraries(index, getKindRegistry2())) {
@@ -2247,6 +2276,20 @@ async function unsetCatalogKey(key) {
   console.log(S.dim(`  \u2192 ${filePath}`));
 }
 var API_KEY_PREFIX = "apiKey.";
+function unknownKeyMessage(key) {
+  if (CATALOG_KEYS.has(key) || PERSONAL_KEYS.has(key) || key.startsWith(API_KEY_PREFIX)) {
+    return null;
+  }
+  if (key === "provider" || key === "cloud" || key === "cloudConfig") {
+    return `'${key}' is no longer a setting \u2014 an endpoint is an AI provider registry entry and a session selects one with a model reference.
+  Define it:  skaile providers add <id> --preset <preset>
+  Select it:  skaile config set model <providerId>/<modelId>`;
+  }
+  return `'${key}' is not a personal setting.
+  Personal keys: ${[...PERSONAL_KEYS].join(", ")}, ${API_KEY_PREFIX}<provider>
+  Catalog keys: ${[...CATALOG_KEYS].join(", ")}
+  Project config (harness, model, paths, resources) belongs in skaile.yaml`;
+}
 function collectWorkspaceDefaults(projectDir) {
   const wsDefaults = {};
   const ws = resolveSkWorkspaceConfig(projectDir);
@@ -2417,6 +2460,11 @@ function makeConfigCommand() {
       console.log(resolveConfig({ projectDir }).catalog[field]);
       return;
     }
+    const refusal = unknownKeyMessage(key);
+    if (refusal) {
+      logErr(refusal);
+      process.exit(1);
+    }
     const config = opts.global ? await loadSettings(globalSettingsPath()) : await resolveSettings(projectDir);
     const value = config[key];
     console.log(value ?? S.dim("(not set)"));
@@ -2431,23 +2479,12 @@ function makeConfigCommand() {
         await setCatalogKey(key, value);
         return;
       }
-      if (key === "provider" || key === "cloud" || key === "cloudConfig") {
-        logErr(
-          `'${key}' is no longer a setting \u2014 an endpoint is an AI provider registry entry and a session selects one with a model reference.
-  Define it:  skaile providers add <id> --preset <preset>
-  Select it:  skaile config set model <providerId>/<modelId>`
-        );
+      const refusal = unknownKeyMessage(key);
+      if (refusal) {
+        logErr(refusal);
         process.exit(1);
       }
       const isApiKey = key.startsWith(API_KEY_PREFIX);
-      if (!PERSONAL_KEYS.has(key) && !isApiKey) {
-        logErr(
-          `'${key}' is not a personal setting.
-  Personal keys: ${[...PERSONAL_KEYS].join(", ")}, ${API_KEY_PREFIX}<provider>
-  Project config (harness, model, paths, resources) belongs in skaile.yaml`
-        );
-        process.exit(1);
-      }
       if (isApiKey) {
         setApiKeySugar(key.slice(API_KEY_PREFIX.length), value, projectDir);
         return;
@@ -2463,13 +2500,13 @@ function makeConfigCommand() {
       if (key === "model") {
         await loadDeclaredPlugins(projectDir);
         const harness = (await resolveSettings(projectDir)).harness ?? DEFAULT_HARNESS_ID;
-        const refusal = checkHarnessModel(harness, {
+        const refusal2 = checkHarnessModel(harness, {
           registry: loadRegistryView({ projectDir }).merged,
           model: value,
           roles: resolveSkWorkspaceConfig(projectDir).roles
         });
-        if (refusal) {
-          logErr(`${refusal} (the project's harness is ${harness})`);
+        if (refusal2) {
+          logErr(`${refusal2} (the project's harness is ${harness})`);
           process.exit(1);
         }
       }
@@ -3200,7 +3237,7 @@ async function ensureTargetsRegistered(projectDir) {
   const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
   const config = resolveSkWorkspaceConfig2(projectDir);
   if (config.plugins && config.plugins.length > 0) {
-    const { ensurePluginsLoaded } = await import('../plugin-store-NGRUTCJI.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-OJTERUEZ.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     for (const f of result.failed) logWarn(f.error);
   }
@@ -4426,6 +4463,7 @@ async function reindexLibrary(lib, library, name) {
   (failing > 0 ? logWarn : logOk)(`Indexed ${res.assetsUpdated} asset(s) from ${name}.`);
   warnIgnoredDomainFiles(lib.path);
   warnLegacyBundleFiles(lib.path);
+  warnUntrackedAssetFiles(lib.path);
   if (skippedUnparsable > 0) {
     logErr(`${skippedUnparsable} asset(s) skipped: manifest could not be parsed.`);
     process.exitCode = 1;
@@ -4569,6 +4607,18 @@ function canonicalDir(dir) {
   }
   return path19.join(fs8.realpathSync(existing), ...missing);
 }
+function libraryContaining(libraries, cwd) {
+  const here = canonicalDir(cwd);
+  let best;
+  for (const lib of libraries) {
+    if (lib.ownership === "reader" || libraryDirMissing(lib)) continue;
+    const root = canonicalDir(lib.path);
+    const rel = path19.relative(root, here);
+    const inside = rel === "" || !rel.startsWith(`..${path19.sep}`) && rel !== ".." && !path19.isAbsolute(rel);
+    if (inside && (!best || root.length > best.root.length)) best = { lib, root };
+  }
+  return best?.lib;
+}
 function refuseGlobalInstallFolder(name, dir) {
   const reserved = globalInstallDir();
   const rel = path19.relative(canonicalDir(reserved).toLowerCase(), canonicalDir(dir).toLowerCase());
@@ -4686,6 +4736,23 @@ function readOriginTracking(dir) {
   });
   return { url, branch: head.status === 0 && head.stdout.trim() || "main" };
 }
+function exitOnCloneWithoutCheckout(dir, name) {
+  const head = spawnSync("git", ["rev-parse", "--verify", "-q", "HEAD"], {
+    cwd: dir,
+    encoding: "utf-8"
+  });
+  if (head.status === 0) return;
+  const refs = spawnSync("git", ["for-each-ref", "--format=%(refname)", "refs/remotes/origin"], {
+    cwd: dir,
+    encoding: "utf-8"
+  });
+  const branches = (refs.stdout ?? "").split("\n").map((ref) => ref.trim().replace(/^refs\/remotes\/origin\//, "")).filter((branch) => branch !== "" && branch !== "HEAD" && !branch.startsWith("refs/"));
+  if (branches.length === 0) return;
+  logErr(
+    `${dir} is a git clone with no branch checked out (its remote HEAD names a branch that does not exist): run \`git -C ${dir} checkout ${branches[0]}\` (remote branches: ${branches.join(", ")}), then re-run \`skaile library init ${name} --path ${dir}\`.`
+  );
+  process.exit(1);
+}
 function requireGitBackend(lib, verb) {
   if (lib.backend !== "git") {
     logErr(
@@ -4732,7 +4799,7 @@ function remoteBranches(url) {
   return r.stdout.split("\n").map((line) => line.split("	")[1]?.replace(/^refs\/heads\//, "")).filter((b) => !!b);
 }
 async function warnIfNotGithubRemote(name, url) {
-  const { isGithubRemote, notGithubRemoteMessage } = await import('../library-publish-MUGUST43.js');
+  const { isGithubRemote, notGithubRemoteMessage } = await import('../library-publish-FNNDWVBO.js');
   if (!isGithubRemote(url)) logWarn(notGithubRemoteMessage(name, url));
 }
 function scaffoldLibraryFiles(dir, name) {
@@ -4771,23 +4838,59 @@ by the same ref.
   }
   return written;
 }
+function commitScaffold(dir, files) {
+  const run2 = (args) => spawnSync("git", args, { cwd: dir, encoding: "utf-8" });
+  const add = run2(["add", "--", ...files]);
+  if (add.status !== 0) return add.stderr.trim().split("\n")[0] || "git add failed";
+  const commit = run2(["commit", "-q", "-m", "skaile: scaffold library", "--", ...files]);
+  if (commit.status === 0) return void 0;
+  return (commit.stderr.trim() || commit.stdout.trim()).split("\n")[0] || "git commit failed";
+}
+async function refuseRemoteOfSource(manager, url) {
+  const key = sourceCacheKey(url);
+  const libraries = await manager.listLibraries();
+  const cacheRoot = path19.resolve(getGlobalCacheDir()) + path19.sep;
+  const clash = libraries.find(
+    (l) => path19.resolve(l.path).startsWith(cacheRoot) && "url" in l.backendConfig && sourceCacheKey(l.backendConfig.url) === key
+  );
+  if (!clash) return;
+  logErr(
+    `${url} is already registered as the source "${clash.name}"; it needs no library \u2014 its assets are searchable already. Run \`skaile source remove\` first to register it as a library.`
+  );
+  process.exit(1);
+}
 function makeLibraryCommand() {
   const cmd = new Command("library").description("Manage user authoring libraries (local / git)").enablePositionalOptions();
   cmd.command("list").description("List all registered libraries").option("--json", "Output as JSON").action(async (opts) => {
     const { manager, close } = await openLibraryManager();
     try {
-      const ls = await manager.listLibraries();
+      const scoped = new AssetManager({
+        registry: getKindRegistry(),
+        projectDir: process.cwd()
+      }).scopeLibraryList(await manager.listLibraries());
+      const ls = scoped.libraries;
       if (opts.json) {
         return console.log(
           JSON.stringify(
-            ls.map((l) => libraryDirMissing(l) ? { ...l, directoryMissing: true } : l),
+            ls.map((l) => ({
+              ...l,
+              ...libraryDirMissing(l) ? { directoryMissing: true } : {},
+              ...scoped.sources.has(l.id) ? { source: true } : {}
+            })),
             null,
             2
           )
         );
       }
+      const uncached = uncachedSources(process.cwd());
+      const hintUncached = () => {
+        for (const name of uncached) {
+          logInfo(`source ${name} is not cloned: run \`skaile source sync\` to clone it.`);
+        }
+      };
       if (ls.length === 0) {
         logInfo("No libraries registered. Run `skaile library init personal` to start.");
+        hintUncached();
         return;
       }
       console.log();
@@ -4799,13 +4902,14 @@ function makeLibraryCommand() {
       for (const l of ls) {
         const def = l.isDefault ? pc5.green("\u25B8 ") : "  ";
         console.log(
-          `${def}${S.cmd(l.name.padEnd(nameW))}  ${pc5.dim(l.backend.padEnd(backendW))}  ${pc5.dim(l.ownership.padEnd(ownerW))}  ${pc5.dim(l.path)}${libraryDirMissing(l) ? `  ${pc5.red("(directory missing)")}` : ""}`
+          `${def}${S.cmd(l.name.padEnd(nameW))}  ${pc5.dim(l.backend.padEnd(backendW))}  ${pc5.dim(l.ownership.padEnd(ownerW))}  ${pc5.dim(l.path)}${scoped.sources.has(l.id) ? `  ${pc5.dim("(source)")}` : ""}${libraryDirMissing(l) ? `  ${pc5.red("(directory missing)")}` : ""}`
         );
       }
       console.log(`
   ${S.dim(`${ls.length} library(s)`)}
 `);
       for (const l of ls) if (libraryDirMissing(l)) logWarn(missingLibraryDirMessage(l));
+      hintUncached();
     } finally {
       close();
     }
@@ -4865,6 +4969,7 @@ function makeLibraryCommand() {
         process.exit(1);
       }
       const adopted = opts.git ? null : readOriginTracking(libPath);
+      if (adopted) exitOnCloneWithoutCheckout(libPath, name);
       if (ownership !== "owner" && !opts.git && !adopted) {
         logErr(
           `--${ownership} needs --git <url> or an existing git clone: ${LOCAL_OWNERSHIP_REASON}`
@@ -4878,6 +4983,7 @@ function makeLibraryCommand() {
           logErr(`A library named "${name}" is already registered.`);
           process.exit(1);
         }
+        if (opts.git) await refuseRemoteOfSource(manager, opts.git);
         if (existing) await manager.removeLibrary(name);
         await assertLibraryPathFree(manager, libPath);
         await refuseNestedLibraryPath(manager, libPath);
@@ -4923,6 +5029,16 @@ function makeLibraryCommand() {
           `Library "${name}" ${blank ? "created" : "registered"} at ${libPath}${isDefault ? " (default)" : ""}`
         );
         if (scaffolded.length > 0) logInfo(`Scaffolded ${scaffolded.join(", ")}.`);
+        if (scaffolded.length > 0 && opts.git) {
+          const failure = commitScaffold(libPath, scaffolded);
+          if (failure) {
+            logWarn(
+              `Could not commit the scaffold (${failure}). Run \`skaile library commit ${name} -m "init"\` before \`pull\` or \`sync\`.`
+            );
+          } else {
+            logInfo("Committed the scaffold.");
+          }
+        }
         if (adopted) {
           logInfo(
             `Adopted existing git clone as a git library tracking ${adopted.url} (ownership: ${ownership}).`
@@ -4979,6 +5095,7 @@ function makeLibraryCommand() {
     const { manager, close } = await openLibraryManager();
     try {
       const lib = await manager.requireLibraryDir(name);
+      await refuseRemoteOfSource(manager, url);
       if (lib.backend === "git") {
         logErr(
           `Library "${name}" is already git-backed. Use \`skaile library set ${name} backendConfig.url=${url}\` to change its remote.`
@@ -5096,7 +5213,7 @@ function makeLibraryCommand() {
           logErr(res.path);
           process.exit(1);
         }
-        logOk(`Created ${effectiveKind}: ${pc5.dim(res.path)}`);
+        logOk(`Created ${effectiveKind} in library ${target.name}: ${pc5.dim(res.path)}`);
         if (opts.description === void 0) {
           logWarn(
             `Description is a TODO placeholder \u2014 edit it (what the ${effectiveKind} does and when to use it) or \`skaile validate\` will fail.`
@@ -5125,6 +5242,8 @@ function makeLibraryCommand() {
   );
   async function resolveTargetLibrary(manager, libraryName) {
     if (libraryName) return manager.requireLibraryDir(libraryName);
+    const here = libraryContaining(await manager.listLibraries(), process.cwd());
+    if (here) return manager.requireLibraryDir(here.name);
     const def = await manager.findDefaultLibrary();
     if (def) return manager.requireLibraryDir(def.name);
     if ((await manager.listLibraries()).length === 0) {
@@ -5483,16 +5602,16 @@ function makeLibraryCommand() {
     "With --create-repo: create the repo private (the store only accepts public repos)"
   ).option("--ref <gitref>", "Git ref to ingest (default: the library branch or main)").option("--dry-run", "Print the plan; push nothing and call no store endpoint").action(
     async (lib, opts) => {
-      const { runLibraryPublish } = await import('../library-publish-MUGUST43.js');
+      const { runLibraryPublish } = await import('../library-publish-FNNDWVBO.js');
       await withStoreErrorHandling(() => runLibraryPublish(lib, opts));
     }
   );
   cmd.command("register <lib>").description("Register the library's manifest without pushing (bytes already on github)").option("--asset <ref>", "Publish only the single asset matching this ref/name").option("--ref <gitref>", "Git ref to ingest (default: the library branch or main)").option("--dry-run", "Print the plan; call no store endpoint").action(async (lib, opts) => {
-    const { runLibraryRegister } = await import('../library-publish-MUGUST43.js');
+    const { runLibraryRegister } = await import('../library-publish-FNNDWVBO.js');
     await withStoreErrorHandling(() => runLibraryRegister(lib, opts));
   });
   cmd.command("yank <lib>").description("Retract the library's published assets from the store").option("--asset <ref>", "Yank only the single asset matching this ref/name").action(async (lib, opts) => {
-    const { runLibraryYank } = await import('../library-publish-MUGUST43.js');
+    const { runLibraryYank } = await import('../library-publish-FNNDWVBO.js');
     await withStoreErrorHandling(() => runLibraryYank(lib, opts));
   });
   return cmd;
@@ -6152,7 +6271,7 @@ function scheduleSoftDepPreview() {
 }
 async function loadAssets() {
   softDepPreviewCache.clear();
-  const { gatherAssetFeeds } = await import('../asset-feeds-4I6Z4OI3.js');
+  const { gatherAssetFeeds } = await import('../asset-feeds-4A7PJ4OB.js');
   const { entries, notes } = await gatherAssetFeeds(am, am.projectDir);
   if (notes.length > 0) {
     state.message = notes.map((n) => `[${n.feed}] ${n.message}`).join(" \u2022 ");
@@ -6356,7 +6475,7 @@ function reconcileCollapsedSets(rows) {
 async function loadSourcesAndLibraries() {
   try {
     const [{ openLibraryManager: openLibraryManager2 }, { getGlobalCacheDir: getGlobalCacheDir2, globalSkaileDir: globalSkaileDir2 }] = await Promise.all([
-      import('../open-library-BVQCB37E.js'),
+      import('../open-library-R5EZROFN.js'),
       import('../core/index.js')
     ]);
     const { manager, library, close } = await openLibraryManager2();
@@ -8220,7 +8339,7 @@ function existingIdentities(root) {
   }
   return found;
 }
-function planMarkdownMoves(root, knownKinds, manual, unknownTypes, identities, conflicts, existing) {
+function planMarkdownMoves(root, knownKinds, manual, unknownTypes, identities, conflicts, existing, notConverted) {
   const moves = [];
   const changes = [];
   const targets = /* @__PURE__ */ new Set();
@@ -8238,6 +8357,9 @@ function planMarkdownMoves(root, knownKinds, manual, unknownTypes, identities, c
         manual.push(
           `${posix2(path19__default.relative(root, file))}: ${posix2(path19__default.relative(root, to))} already exists; not moved`
         );
+        notConverted.push(
+          `${posix2(path19__default.relative(root, file))} (${posix2(path19__default.relative(root, to))} exists)`
+        );
         continue;
       }
       const identity = finalIdentity(found.type, base.replace(/\.md$/i, ""));
@@ -8248,10 +8370,10 @@ function planMarkdownMoves(root, knownKinds, manual, unknownTypes, identities, c
         );
         continue;
       }
-      const present = existing.get(identity);
-      if (present !== void 0) {
+      const present2 = existing.get(identity);
+      if (present2 !== void 0) {
         conflicts.push(
-          `${present} already is ${identity}, and ${posix2(path19__default.relative(root, file))} would become it too: rename one first. Nothing was changed.`
+          `${present2} already is ${identity}, and ${posix2(path19__default.relative(root, file))} would become it too: rename one first. Nothing was changed.`
         );
         continue;
       }
@@ -8339,7 +8461,7 @@ function repoPublisher(root) {
   }
   return DEFAULT_PUBLISHER;
 }
-function planBundles(root, skaileYamls, publisher, notes, manual, conflicts, identities, existing) {
+function planBundles(root, skaileYamls, publisher, notes, manual, conflicts, identities, existing, notConverted) {
   const changes = [];
   const presets = [];
   const handled = /* @__PURE__ */ new Set();
@@ -8365,12 +8487,13 @@ function planBundles(root, skaileYamls, publisher, notes, manual, conflicts, ide
     }
     if (existsSync(target)) {
       manual.push(`${rel(target)} already exists; bundle ${name} not converted`);
+      notConverted.push(`${origin.replace(/\/$/, "")} (${rel(target)} exists)`);
       return;
     }
-    const present = existing.get(identity);
-    if (present !== void 0) {
+    const present2 = existing.get(identity);
+    if (present2 !== void 0) {
       conflicts.push(
-        `${present} already is ${identity}, and ${origin} would become it too: rename the bundle first. Nothing was changed.`
+        `${present2} already is ${identity}, and ${origin} would become it too: rename the bundle first. Nothing was changed.`
       );
       return;
     }
@@ -8403,6 +8526,7 @@ function planBundles(root, skaileYamls, publisher, notes, manual, conflicts, ide
       manual.push(
         `bundle ${name}: no dependencies found${bundleFile ? ` in ${rel(bundleFile)}` : ` and no skills under ${rel(path19__default.join(dir, "skills"))}`}; no preset generated`
       );
+      notConverted.push(`${origin.replace(/\/$/, "")} (no dependencies found)`);
       return;
     }
     claimed.set(target, origin);
@@ -8452,7 +8576,7 @@ function planBundles(root, skaileYamls, publisher, notes, manual, conflicts, ide
   return changes;
 }
 var PUBLICATION_KEYS = ["publisher", "version", "assets"];
-function planSkaileYaml(root, file, source, notes, manual) {
+function planSkaileYaml(root, file, source, notes, manual, notConverted) {
   const doc = parseDocument(source);
   if (doc.errors.length > 0 || !isMap(doc.contents)) return [];
   const map = doc.contents;
@@ -8480,6 +8604,7 @@ function planSkaileYaml(root, file, source, notes, manual) {
       manual.push(
         `${rel(file)}: publisher/version/assets left in place \u2014 ${rel(manifestPath)} already exists; merge by hand`
       );
+      notConverted.push(`${rel(file)} (${rel(manifestPath)} exists)`);
     } else {
       const dropped = Array.isArray(raw.assets) ? raw.assets.length : 0;
       const draft = {};
@@ -8490,6 +8615,7 @@ function planSkaileYaml(root, file, source, notes, manual) {
       const failed = decoded.diagnostics.filter((d) => d.severity === "error");
       if (failed.length > 0) {
         manual.push(`${rel(file)}: not converted \u2014 ${failed[0]?.message ?? "invalid manifest"}`);
+        notConverted.push(`${rel(file)} (${failed[0]?.message ?? "invalid manifest"})`);
       } else {
         if (Object.keys(decoded.manifest).length > 0) {
           changes.push({
@@ -8537,6 +8663,7 @@ function planAssetMigration(options) {
   const notes = [];
   const manual = [];
   const conflicts = [];
+  const notConverted = [];
   const unknownTypes = [];
   const identities = /* @__PURE__ */ new Map();
   const existing = existingIdentities(root);
@@ -8547,7 +8674,8 @@ function planAssetMigration(options) {
     unknownTypes,
     identities,
     conflicts,
-    existing
+    existing,
+    notConverted
   );
   for (const move of moves) {
     notes.push(
@@ -8575,16 +8703,18 @@ function planAssetMigration(options) {
     manual,
     conflicts,
     identities,
-    existing
+    existing,
+    notConverted
   );
   const skaileChanges = skaileYamls.flatMap(
-    ({ file, source }) => planSkaileYaml(root, file, source, notes, manual)
+    ({ file, source }) => planSkaileYaml(root, file, source, notes, manual, notConverted)
   );
   return {
     changes: [...moveChanges, ...agentChanges, ...bundleChanges, ...skaileChanges],
     notes,
     manual,
     conflicts,
+    notConverted,
     unknownTypes
   };
 }
@@ -8668,8 +8798,9 @@ function migrateHarnessSettings(text, label = "settings.json") {
       notes.push(`${label}: \`driver\` \u2192 \`harness\``);
     }
   }
+  const oneLine = !text.trim().includes("\n");
   const trailing = text.endsWith("\n") ? "\n" : "";
-  return { output: `${JSON.stringify(out, null, 2)}${trailing}`, notes };
+  return { output: `${JSON.stringify(out, null, oneLine ? void 0 : 2)}${trailing}`, notes };
 }
 function workspaceYamlFiles(projectDir) {
   const files = [];
@@ -8688,11 +8819,10 @@ function planHarnessMigration(opts) {
   const changes = [];
   const notes = [];
   const seen = /* @__PURE__ */ new Set();
-  const plan = (file, rewrite) => {
+  const plan = (file, rewrite, label = path19__default.basename(file), notChanged) => {
     if (seen.has(file) || !existsSync(file)) return;
     seen.add(file);
     const before = readText(file);
-    const label = path19__default.basename(file);
     let result;
     try {
       result = rewrite(before, label);
@@ -8701,18 +8831,27 @@ function planHarnessMigration(opts) {
       return;
     }
     if (result.output === before) return;
+    if (notChanged !== void 0) {
+      notes.push(`${label}: \`driver\` still set, not changed (${notChanged})`);
+      return;
+    }
     notes.push(...result.notes);
     changes.push({ type: "write", path: file, before, after: result.output });
   };
   for (const file of workspaceYamlFiles(opts.projectDir)) plan(file, migrateHarnessYaml);
-  plan(projectSettingsPath(opts.projectDir), migrateHarnessSettings);
-  plan(globalSettingsPath(), migrateHarnessSettings);
+  plan(projectSettingsPath(opts.projectDir), migrateHarnessSettings, "project settings.json");
+  plan(
+    globalSettingsPath(),
+    migrateHarnessSettings,
+    "user settings.json",
+    opts.user === true ? void 0 : "run `skaile migrate harness --user` to migrate it"
+  );
   return { changes, notes };
 }
 function runMigrateHarness(opts) {
   const cwd = process.cwd();
   const projectDir = path19__default.resolve(opts.projectDir ?? findWorkspaceRoot(cwd) ?? cwd);
-  const plan = planHarnessMigration({ projectDir });
+  const plan = planHarnessMigration({ projectDir, user: opts.user === true });
   for (const note of plan.notes) console.log(`  ${note}`);
   printChanges(plan.changes, projectDir);
   if (opts.dryRun === true && plan.changes.length > 0) {
@@ -8727,13 +8866,14 @@ function runMigrateHarness(opts) {
 function addMigrateHarnessCommand(migrate) {
   migrate.command("harness").description(
     "Rename the `driver` key to `harness` and remove the retired `agent` key in skaile.yaml and settings.json"
-  ).option("--project-dir <path>", "Project directory (default: the workspace root of the cwd)").option("--dry-run", "Print the diff and write nothing").addHelpText(
+  ).option("--project-dir <path>", "Project directory (default: the workspace root of the cwd)").option("--user", "Also migrate the user-level settings.json ($SKAILE_HOME, else ~/.skaile)").option("--dry-run", "Print the diff and write nothing").addHelpText(
     "after",
     `
 Rewrites (the connector/mount \`driver\` of connectors: and mounts: is never touched):
   skaile.yaml agent-config.<profile>.driver   -> harness (also the flat agent-config: { driver: \u2026 } shape)
   skaile.yaml agent-config.<profile>.agent    removed (nothing reads it)
-  .skaile/settings.json, ~/.skaile/settings.json   driver -> harness
+  .skaile/settings.json (project settings.json)  driver -> harness
+  ~/.skaile/settings.json (user settings.json)   driver -> harness, only with --user
 A profile or file that sets both keys keeps \`harness\` and drops \`driver\`.
 
 Prints a unified diff per file and writes the files. Pass --dry-run to print the diff only.
@@ -9186,7 +9326,12 @@ async function runMigrateAssets(root, opts) {
     );
   }
   printChanges(plan.changes, base);
-  finish(plan.changes, write, base);
+  if (plan.changes.length > 0 || plan.notConverted.length === 0) finish(plan.changes, write, base);
+  if (plan.notConverted.length > 0) {
+    console.log();
+    logErr(`${plan.notConverted.length} file(s) not converted: ${plan.notConverted.join(", ")}.`);
+    process.exitCode = 1;
+  }
 }
 function makeMigrateCommand() {
   const cmd = new Command("migrate").description("One-time config and asset migrations");
@@ -9358,17 +9503,28 @@ function makeOutdatedCommand() {
     const unreachable = am2.takeUnreachableSources();
     for (const u of unreachable) {
       logWarn(
-        `Source ${u.name}: could not reach its origin (${u.reason}); commits behind not checked.`
+        u.notCompared ? `Source ${u.name}: ${u.reason}; commits behind not checked.` : `Source ${u.name}: could not reach its origin (${u.reason}); commits behind not checked.`
       );
     }
     if (unreachable.length > 0) process.exitCode = 1;
+    const notChecked = am2.takeStoreNotChecked().filter((n) => {
+      if (!filter) return true;
+      const p6 = parseAssetRef(n.ref);
+      return matchesOutdatedFilter(
+        { kind: p6.kind, name: p6.name, publisher: p6.publisher ?? "" },
+        filter
+      );
+    });
+    if (reportStoreNotCheckedForUpdates(notChecked)) process.exitCode = 1;
+    const allChecked = unreachable.length === 0 && notChecked.length === 0;
+    for (const notice of am2.legacyLockNotices()) logWarn(notice);
     if (entries.length === 0) {
-      if (unreachable.length === 0) logInfo("All assets are up to date.");
+      if (allChecked) logInfo("All assets are up to date.");
       return;
     }
     const filtered = filter ? entries.filter((e) => matchesOutdatedFilter(e, filter)) : entries;
     if (filtered.length === 0) {
-      if (unreachable.length === 0) logInfo(`${filter} is up to date.`);
+      if (allChecked) logInfo(`${filter} is up to date.`);
       return;
     }
     const refW = Math.max(4, ...filtered.map((e) => outdatedRef(e).length));
@@ -9457,14 +9613,14 @@ function action2(fn) {
     try {
       await fn(...args);
     } catch (err) {
-      const { condensePluginFailure } = await import('../plugin-store-NGRUTCJI.js');
+      const { condensePluginFailure } = await import('../plugin-store-OJTERUEZ.js');
       logErr(condensePluginFailure(err instanceof Error ? err.message : String(err)));
       process.exitCode = 1;
     }
   };
 }
 async function reconcileAndReport(projectDir, plugins, opts = {}) {
-  const { reconcilePlugins } = await import('../plugin-store-NGRUTCJI.js');
+  const { reconcilePlugins } = await import('../plugin-store-OJTERUEZ.js');
   if (plugins.length === 0) {
     logInfo("No plugins declared \u2014 nothing to reconcile.");
     return;
@@ -9475,29 +9631,37 @@ async function reconcileAndReport(projectDir, plugins, opts = {}) {
     else logInfo(`Plugin store ${result.reason}.`);
   } catch (err) {
     if (opts.strict) throw err;
-    const { condensePluginFailure } = await import('../plugin-store-NGRUTCJI.js');
+    const { condensePluginFailure } = await import('../plugin-store-OJTERUEZ.js');
     logWarn(
       `reconcile skipped: ${condensePluginFailure(err instanceof Error ? err.message : String(err))}`
     );
   }
 }
-async function verifyPluginLoads(projectDir, spec) {
-  const { loadPlugins } = await import('../plugin-store-NGRUTCJI.js');
+async function verifyPluginLoads(projectDir, spec, declared) {
+  const { loadPlugins } = await import('../plugin-store-OJTERUEZ.js');
   const { createPluginRegistry } = await import('../plugin-registry/index.js');
   const registry = createPluginRegistry();
+  await loadPlugins(
+    projectDir,
+    declared.filter((other) => other !== spec),
+    registry
+  );
+  const before = new Set(
+    ["harness", "connector", "deployTarget"].flatMap(
+      (kind) => registry.list(kind).map((m) => `${kind} ${m.id}`)
+    )
+  );
   const result = await loadPlugins(projectDir, [spec], registry);
   const failure = result.failed[0];
   if (failure) throw new Error(failure.error);
-  const contributed = ["harness", "connector", "deployTarget"].flatMap(
-    (kind) => registry.list(kind).map((m) => `${kind} ${m.id}`)
-  );
+  const contributed = ["harness", "connector", "deployTarget"].flatMap((kind) => registry.list(kind).map((m) => `${kind} ${m.id}`)).filter((entry) => !before.has(entry));
   logOk(`Loaded ${S.cmd(spec)}${contributed.length > 0 ? ` (${contributed.join(", ")})` : ""}`);
 }
 async function runInstall2(typedSpec, opts) {
   const rawSpec = typedSpec.trim();
   const projectDir = path19__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName, rollbackPluginStore, npmSpecError, projectRelativeFileSpec } = await import('../plugin-store-NGRUTCJI.js');
+  const { specName, rollbackPluginStore, npmSpecError, projectRelativeFileSpec } = await import('../plugin-store-OJTERUEZ.js');
   const specError = npmSpecError(rawSpec);
   if (specError) throw new Error(specError);
   const spec = projectRelativeFileSpec(rawSpec, process.cwd(), projectDir);
@@ -9508,28 +9672,33 @@ async function runInstall2(typedSpec, opts) {
   const original = readFileSync(yamlPath, "utf8");
   const editor = WorkspaceYamlEditor2.load(yamlPath);
   const previousPlugins = [...editor.getPlugins()];
+  let recorded;
   if (previousPlugins.includes(spec)) {
     logInfo(`${S.cmd(spec)} already declared in skaile.yaml`);
+    recorded = "same";
   } else {
-    const replaced = editor.addPlugin(spec, specName);
+    recorded = editor.addPlugin(spec, specName) ? "replaced" : "added";
     editor.save();
-    if (replaced) logOk(`Updated ${S.cmd(specName(spec))} \u2192 ${S.cmd(spec)} in skaile.yaml`);
-    else logOk(`Added ${S.cmd(spec)} to skaile.yaml plugins`);
   }
   try {
     await reconcileAndReport(projectDir, editor.getPlugins(), { strict: true });
-    await verifyPluginLoads(projectDir, spec);
+    await verifyPluginLoads(projectDir, spec, editor.getPlugins());
   } catch (err) {
     writeFileSync(yamlPath, original);
     logInfo("skaile.yaml restored; the plugin was not recorded.");
     await rollbackPluginStore(projectDir, previousPlugins);
     throw err;
   }
+  if (recorded === "replaced") {
+    logOk(`Updated ${S.cmd(specName(spec))} \u2192 ${S.cmd(spec)} in skaile.yaml`);
+  } else if (recorded === "added") {
+    logOk(`Added ${S.cmd(spec)} to skaile.yaml plugins`);
+  }
 }
 async function runRemove(name, opts) {
   const projectDir = path19__default.resolve(opts.projectDir);
   const { WorkspaceYamlEditor: WorkspaceYamlEditor2 } = await import('../core/index.js');
-  const { specName } = await import('../plugin-store-NGRUTCJI.js');
+  const { specName } = await import('../plugin-store-OJTERUEZ.js');
   const yamlPath = path19__default.join(projectDir, "skaile.yaml");
   if (!existsSync(yamlPath)) {
     logInfo(`No plugin matching ${S.cmd(name)}: there is no skaile.yaml in ${projectDir}.`);
@@ -9545,7 +9714,7 @@ async function runRemove(name, opts) {
   logOk(`Removed ${S.cmd(name)} from skaile.yaml plugins`);
   const remaining = editor.getPlugins();
   if (remaining.length === 0) {
-    const { rollbackPluginStore } = await import('../plugin-store-NGRUTCJI.js');
+    const { rollbackPluginStore } = await import('../plugin-store-OJTERUEZ.js');
     await rollbackPluginStore(projectDir, []);
     logInfo("No plugins declared; removed .skaile/plugins/.");
     return;
@@ -9568,7 +9737,7 @@ async function runList(opts) {
   const registry = createPluginRegistry();
   if (declared.length > 0) {
     try {
-      const { loadPlugins } = await import('../plugin-store-NGRUTCJI.js');
+      const { loadPlugins } = await import('../plugin-store-OJTERUEZ.js');
       const result = await loadPlugins(projectDir, declared, registry);
       for (const f of result.failed) logWarn(f.error);
     } catch (err) {
@@ -10428,6 +10597,67 @@ function makeRebuildCommand() {
     logInfo(`Written: ${result.manifestPath}`);
   });
 }
+
+// cli/src/session-hint.ts
+async function sessionIdsHint(projectDir) {
+  const sessions = await listSessions(projectDir);
+  return sessions.length > 0 ? "Run skaile session list to see the ids." : null;
+}
+
+// cli/src/commands/harness-preflight.ts
+var present = (...lines) => lines.filter((l) => !!l);
+var OR_PICK_ANOTHER = "Or pick another harness with --harness.";
+function missingBinary(harnessId) {
+  const hint = HARNESS_BINARIES[harnessId]?.hint ?? `${harnessId} is not installed.`;
+  return `${hint} ${OR_PICK_ANOTHER}`;
+}
+var claudeSdk = async (input, deps) => present(
+  await deps.sdkProblem(input.projectDir, input.harness),
+  checkHarnessModel("claude-sdk", input),
+  checkModelSurface("claude-sdk", input)
+);
+var codex = async (input, deps) => present(
+  await deps.sdkProblem(input.projectDir, input.harness),
+  checkHarnessModel("codex", input)
+);
+var omp = async (input, deps) => {
+  if (!deps.hasBinary("omp")) return [missingBinary("omp")];
+  const refusal = checkHarnessModel("omp", input);
+  if (refusal) return [refusal];
+  const own = input.model && !input.model.startsWith("@") ? input.model : void 0;
+  const unlisted = own && isUnlistedModel(input);
+  return present(unlisted ? await deps.ompListed(own) : void 0);
+};
+function cliHarness(harnessId) {
+  return async (input, deps) => deps.hasBinary(harnessId) ? present(checkHarnessModel(harnessId, input), checkModelSurface(harnessId, input)) : [missingBinary(harnessId)];
+}
+var PREFLIGHTS = {
+  "claude-sdk": claudeSdk,
+  codex,
+  omp,
+  gemini: cliHarness("gemini"),
+  qwen: cliHarness("qwen"),
+  opencode: cliHarness("opencode"),
+  goose: cliHarness("goose"),
+  continue: cliHarness("continue")
+};
+async function preflightHarness(input, deps = {}) {
+  const check = PREFLIGHTS[input.harness];
+  if (!check) return [];
+  return check(
+    {
+      ...input,
+      registry: input.registry ?? loadRegistryView({ projectDir: input.projectDir }).merged
+    },
+    {
+      hasBinary: deps.hasBinary ?? ((id) => findHarnessBinary(HARNESS_BINARIES[id])),
+      sdkProblem: deps.sdkProblem ?? checkHarnessSdk,
+      ompListed: deps.ompListed ?? checkOmpListedModel
+    }
+  );
+}
+
+// cli/src/commands/run.ts
 function resolveSingleShotAgentDir(projectDir, agentDefinition) {
   if (!agentDefinition) return resolveAgentDir(projectDir);
   const asPath = agentDefinition.endsWith("agent.yaml") ? path19__default.dirname(path19__default.resolve(projectDir, agentDefinition)) : agentDefinition;
@@ -10439,13 +10669,12 @@ function resolveSingleShotAgentDir(projectDir, agentDefinition) {
   }
   return dir;
 }
-async function printCompositionDryRun(projectDir, agentDir, harness, model, instanceIdOverride) {
+async function printCompositionDryRun(projectDir, agentDir, harness, model, check, instanceIdOverride) {
   const manifest = agentDir ? await loadAgentManifest(agentDir) : void 0;
-  const refusal = checkHarnessModel(harness, {
-    registry: loadRegistryView({ projectDir }).merged,
-    model: model ?? manifestModelForHarness(manifest, harness)
-  });
-  if (refusal) throw new Error(refusal);
+  await printCompositionPlan(projectDir, agentDir, manifest, harness, model, instanceIdOverride);
+  return reportPreflight(await check(model ?? manifestModelForHarness(manifest, harness)));
+}
+async function printCompositionPlan(projectDir, agentDir, manifest, harness, model, instanceIdOverride) {
   console.log();
   console.log(`  ${S.label("Project dir:")} ${projectDir}`);
   console.log(`  ${S.label("Agent dir:")}   ${agentDir ?? S.dim("(none)")}`);
@@ -10453,7 +10682,15 @@ async function printCompositionDryRun(projectDir, agentDir, harness, model, inst
   console.log(`  ${S.warn("(dry run \u2014 no model will be started)")}`);
   console.log();
   if (!agentDir || !manifest) {
-    logInfo("No agent definition \u2014 nothing to resolve.");
+    const unselected = unselectedInstanceIds(resolveSkWorkspaceConfig(projectDir));
+    if (unselected.length > 0) {
+      logInfo(
+        "No primary agent (neither `agent:` nor `agents.default`): a plain run starts the generic assistant."
+      );
+      logInfo(`Agent instances: ${instanceChoiceText(unselected)}`);
+    } else {
+      logInfo("No agent definition \u2014 nothing to resolve.");
+    }
     return;
   }
   const { instanceId: instanceId2, instance } = instanceForSession(
@@ -10612,7 +10849,11 @@ function isNearFlowId(typed, id) {
   return a.length >= 3 && (b.includes(a) || a.includes(b) || editDistance2(a, b) <= 2);
 }
 function harnessOptionDescription() {
-  return `Harness to run (${listHarnesses().map((d) => d.id).join(", ")})`;
+  return `Harness to run (${listHarnesses().map((d) => d.id).join(", ")}); claude-code (deploy) = claude-sdk (run)`;
+}
+function reportPreflight(problems) {
+  for (const line of problems) logErr(line);
+  return problems.length > 0;
 }
 function nodeSkillRefs(flow) {
   const refs = /* @__PURE__ */ new Map();
@@ -10643,7 +10884,10 @@ async function reportMissingNodeSkills(projectDir, flow) {
   }
 }
 function makeRunCommand() {
-  const cmd = new Command("run").description("Start a flow or run a single-shot text prompt").argument("[flow-id-or-text...]", "Flow ID or text prompt").option("--project-dir <path>", "Project directory", process.cwd()).option("--harness <name>", harnessOptionDescription()).addOption(driverAliasOption()).option("--model <name>", "Model override").option("--label <label>", "Human-readable session label").option("--dry-run", "Print plan without executing (single-shot: resolved composition items)").option(
+  const cmd = new Command("run").description("Start a flow or run a single-shot text prompt").argument("[flow-id-or-text...]", "Flow ID or text prompt").option("--project-dir <path>", "Project directory", process.cwd()).option("--harness <name>", harnessOptionDescription()).addOption(driverAliasOption()).option("--model <name>", "Model override").option("--label <label>", "Human-readable session label").option(
+    "--dry-run",
+    "Print the plan without executing (single-shot: resolved composition items), then one line per problem the real run would stop on (harness program or SDK, provider, model); exit 1 if any"
+  ).option(
     "--agent-definition <ref|path>",
     "Agent asset for this one invocation (agent:@pub/name, ai-assets://\u2026, or a directory with agent.yaml); single-shot prompts only"
   ).option(
@@ -10655,7 +10899,7 @@ function makeRunCommand() {
     if (await reportProjectConfig(projectDir, { harness: false, instances: true }) > 0) {
       process.exit(1);
     }
-    const cliHarness = foldDriverFlag(opts).harness;
+    const cliHarness2 = foldDriverFlag(opts).harness;
     const dryRun = opts.dryRun ?? false;
     const agentDefinition = opts.agentDefinition?.trim() || void 0;
     const instanceId2 = opts.instance?.trim() || void 0;
@@ -10689,7 +10933,7 @@ function makeRunCommand() {
       flowId = selected;
     }
     const config = await resolveSettings(projectDir, {
-      harness: cliHarness,
+      harness: cliHarness2,
       model: opts.model
     });
     const harness = config.harness ?? DEFAULT_HARNESS_ID;
@@ -10699,21 +10943,7 @@ function makeRunCommand() {
       logErr(unknownHarness);
       process.exit(1);
     }
-    const providerRefusal = checkModelProvider(harness, {
-      registry: loadRegistryView({ projectDir }).merged,
-      model
-    });
-    if (providerRefusal) {
-      logErr(providerRefusal);
-      process.exit(1);
-    }
-    if (dryRun) {
-      const sdkProblem = await checkHarnessSdk(projectDir, harness);
-      if (sdkProblem) {
-        logErr(sdkProblem);
-        process.exit(1);
-      }
-    }
+    const preflightFor = (forModel) => preflightHarness({ projectDir, harness, model: forModel, roles: config.roles });
     const flowPath = findProjectFlowFile(flowId, projectDir);
     if (flowPath && agentDefinition) {
       logErr(
@@ -10753,21 +10983,43 @@ function makeRunCommand() {
       }
       try {
         const agentDir = instanceId2 ? resolveInstanceAgentDir(projectDir, resolveSkWorkspaceConfig(projectDir), instanceId2) : resolveSingleShotAgentDir(projectDir, agentDefinition);
+        const overrides = instanceId2 ? instanceSessionOverrides(resolveSkWorkspaceConfig(projectDir), instanceId2) : {};
+        const instanceModel = opts.model ? void 0 : overrides.model;
+        const sessionModel = instanceModel ?? config.model;
         if (dryRun) {
-          await printCompositionDryRun(projectDir, agentDir, harness, model, instanceId2);
-          if (opts.skill && !await printSkillDryRun(projectDir, opts.skill)) {
-            process.exit(1);
-          }
+          const problem = await printCompositionDryRun(
+            projectDir,
+            agentDir,
+            harness,
+            sessionModel,
+            preflightFor,
+            instanceId2
+          );
+          const skillFound = !opts.skill || await printSkillDryRun(projectDir, opts.skill);
+          if (problem) process.exitCode = 1;
+          if (!skillFound) process.exit(1);
           return;
         }
-        const overrides = instanceId2 ? instanceSessionOverrides(resolveSkWorkspaceConfig(projectDir), instanceId2) : {};
-        const instanceModel = opts.model ? void 0 : overrides.model;
+        const manifest = agentDir ? await loadAgentManifest(agentDir) : void 0;
+        if (reportPreflight(
+          await preflightFor(sessionModel ?? manifestModelForHarness(manifest, harness))
+        )) {
+          process.exit(1);
+        }
+        if (!agentDir) {
+          const unselected = unselectedInstanceIds(resolveSkWorkspaceConfig(projectDir));
+          if (unselected.length > 0) {
+            console.error(
+              `  ${S.dim("\xB7")} ${S.dim(`Agent instances: ${instanceChoiceText(unselected)}`)}`
+            );
+          }
+        }
         await runAgentChat({
           projectDir,
           ...agentDir ? { agentDir } : {},
           ...instanceId2 ? { instanceId: instanceId2 } : {},
           harness: config.harness,
-          model: instanceModel ?? config.model,
+          model: sessionModel,
           ...instanceModel ? { modelRef: instanceModel } : {},
           ...overrides.maxTurns !== void 0 ? { maxTurns: overrides.maxTurns } : {},
           message: textPrompt,
@@ -10790,6 +11042,7 @@ function makeRunCommand() {
       }
       return;
     }
+    if (!dryRun && reportPreflight(await preflightFor(model))) process.exit(1);
     let flow;
     try {
       flow = loadFlow(flowPath);
@@ -10823,6 +11076,7 @@ function makeRunCommand() {
       logErr(friendly ?? (err instanceof Error ? err.message : String(err)));
       process.exit(1);
     }
+    if (dryRun && reportPreflight(await preflightFor(model))) process.exitCode = 1;
   });
   return cmd;
 }
@@ -10844,8 +11098,10 @@ function makeResumeCommand() {
     }
     const session = sessionId ? await loadSessionById(projectDir, sessionId) : await loadSession(projectDir);
     if (!session) {
-      logErr(`No session in ${projectDir}`);
-      console.log(`  ${S.dim("Run")} ${S.cmd("skaile run <flow-id>")} ${S.dim("first.")}`);
+      const idsHint = await sessionIdsHint(projectDir);
+      logErr(opts.session ? `Session not found: ${opts.session}` : `No session in ${projectDir}`);
+      if (idsHint) console.log(`  ${S.dim(idsHint)}`);
+      else console.log(`  ${S.dim("Run")} ${S.cmd("skaile run <flow-id>")} ${S.dim("first.")}`);
       process.exit(1);
     }
     console.log();
@@ -10971,14 +11227,13 @@ function makeReplCommand() {
       } catch {
       }
     }
-    const providerRefusal = checkModelProvider(effective.harness ?? DEFAULT_HARNESS_ID, {
-      registry: loadRegistryView({ projectDir }).merged,
-      model: effectiveModel
+    const preflight = await preflightHarness({
+      projectDir,
+      harness: effective.harness ?? DEFAULT_HARNESS_ID,
+      model: effectiveModel,
+      roles: effective.roles
     });
-    if (providerRefusal) {
-      logErr(providerRefusal);
-      process.exit(1);
-    }
+    if (reportPreflight(preflight)) process.exit(1);
     try {
       await startRepl({
         projectDir,
@@ -11112,7 +11367,7 @@ function makeServeCommand() {
         process.exitCode = 1;
         return;
       }
-      const dirProblem = (await import('../serve-preflight-GQY5DZX6.js')).checkServeProjectDir(
+      const dirProblem = (await import('../serve-preflight-AADSOUO2.js')).checkServeProjectDir(
         opts.projectDir
       );
       if (dirProblem) {
@@ -11141,7 +11396,7 @@ function makeServeCommand() {
       }
       let providers = parseProviderIds(opts.providers);
       if (!managedCodex) {
-        const { resolveServeProvider } = await import('../serve-preflight-GQY5DZX6.js');
+        const { resolveServeProvider } = await import('../serve-preflight-AADSOUO2.js');
         const picked = resolveServeProvider(opts.projectDir, opts.provider, providers);
         if ("problem" in picked) {
           logErr(picked.problem);
@@ -11151,9 +11406,9 @@ function makeServeCommand() {
         providers = [...picked.providers];
       }
       const modelEndpoint = parseModelEndpointFlag(opts.modelEndpoint);
-      const { checkHarnessSdk: checkHarnessSdk2, checkModelEndpointPeer, checkServeModel } = await import('../serve-preflight-GQY5DZX6.js');
-      const { checkServeHarness, checkServeAgentDefinition } = await import('../serve-preflight-GQY5DZX6.js');
-      const startProblem = managedCodex ? null : await checkServeHarness(opts.projectDir, opts.harness) ?? checkServeAgentDefinition(opts.projectDir);
+      const { checkHarnessSdk: checkHarnessSdk2, checkModelEndpointPeer, checkServeModel } = await import('../serve-preflight-AADSOUO2.js');
+      const { checkServeHarness, checkServeAgents } = await import('../serve-preflight-AADSOUO2.js');
+      const startProblem = managedCodex ? null : await checkServeHarness(opts.projectDir, opts.harness) ?? checkServeAgents(opts.projectDir);
       if (startProblem) {
         logErr(startProblem);
         process.exitCode = 1;
@@ -11219,12 +11474,12 @@ function makeServeCommand() {
   );
 }
 async function ensurePluginsLoadedForServe(projectDir) {
-  const { logInfo: logInfo2, logWarn: logWarn2 } = await import('../helpers-YHDQHQEQ.js');
+  const { logInfo: logInfo2, logWarn: logWarn2 } = await import('../helpers-PJNUTZXZ.js');
   try {
     const { resolveSkWorkspaceConfig: resolveSkWorkspaceConfig2 } = await import('../core/index.js');
     const config = resolveSkWorkspaceConfig2(projectDir);
     if (!config.plugins || config.plugins.length === 0) return;
-    const { ensurePluginsLoaded } = await import('../plugin-store-NGRUTCJI.js');
+    const { ensurePluginsLoaded } = await import('../plugin-store-OJTERUEZ.js');
     const { pluginRegistry } = await import('../plugin-registry/index.js');
     const result = await ensurePluginsLoaded(projectDir, config.plugins, pluginRegistry);
     if (result.loaded.length > 0) {
@@ -11238,14 +11493,14 @@ async function ensurePluginsLoadedForServe(projectDir) {
   }
 }
 async function runCompileTest(opts) {
-  const { logOk: logOk2, logErr: logErr2, logInfo: logInfo2, S: S2 } = await import('../helpers-YHDQHQEQ.js');
+  const { logOk: logOk2, logErr: logErr2, logInfo: logInfo2, S: S2 } = await import('../helpers-PJNUTZXZ.js');
   const { tmpdir } = await import('os');
   const { dirname: dirname3, join: join6, resolve: resolve4 } = await import('path');
   const { fileURLToPath: fileURLToPath2 } = await import('url');
   const { unlinkSync, existsSync: existsSync22 } = await import('fs');
   const { spawn } = await import('child_process');
   const { portableSpawnSync: portableSpawnSync2 } = await import('../core/index.js');
-  const { MONOREPO_ROOT } = await import('../paths-XLKCAFRZ.js');
+  const { MONOREPO_ROOT } = await import('../paths-RPK5PNZQ.js');
   if (MONOREPO_ROOT === null) {
     logErr2("--compile-test is only available inside the skaile-dev workspace.");
     logInfo2("Run it from a checkout of skaile-ai/skaile-dev (the monorepo shell).");
@@ -11962,7 +12217,9 @@ async function requireSession(projectDir, idOrPrefix) {
   }
   const session = runId ? await loadSessionById(projectDir, runId) : null;
   if (!runId || !session) {
-    logErr(`Session not found: ${idOrPrefix}`);
+    const hint = await sessionIdsHint(projectDir);
+    logErr(`Session not found: ${idOrPrefix}${hint ? `
+  ${hint}` : ""}`);
     process.exit(1);
   }
   return { runId, session };
@@ -12203,8 +12460,8 @@ function makeStoreCommand() {
     "--all",
     `List every match (default: ${STORE_ROW_LIMIT} rows, only what \`skaile add\` can install)`
   ).option("-C, --project-dir <dir>", "Project directory (catalog config overlay)", process.cwd()).action(async (query, opts) => {
-    const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-BVQCB37E.js');
-    const { getKnownKinds: getKnownKinds2 } = await import('../open-registry-JCSIAKEC.js');
+    const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-R5EZROFN.js');
+    const { getKnownKinds: getKnownKinds2 } = await import('../open-registry-RZW2AFD6.js');
     const projectDir = path19__default.resolve(opts.projectDir);
     if (opts.kind && !getKnownKinds2().has(opts.kind)) {
       logErr(
@@ -12262,8 +12519,8 @@ function makeStoreCommand() {
     }
   });
   store.command("show <ref>").description("Show a store asset's details + provenance (source, files, integrity)").option("-C, --project-dir <dir>", "Project directory (catalog config overlay)", process.cwd()).action(async (ref, opts) => {
-    const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-BVQCB37E.js');
-    const { supportsInstallManifest: supportsInstallManifest2 } = await import('../project-BGYMLAS6.js');
+    const { openCatalogSource: openCatalogSource2, LocalCatalogDisabledError: LocalCatalogDisabledError2 } = await import('../open-library-R5EZROFN.js');
+    const { supportsInstallManifest: supportsInstallManifest2 } = await import('../project-S2FT3LLR.js');
     try {
       parseAssetRef(ref);
     } catch (e) {
@@ -12543,11 +12800,12 @@ function makeUpdateCommand() {
       }
       reportRewritten(result.rewritten);
       for (const r of result.removed) logWarn(`Removed: ${r}`);
+      for (const f of result.agentFilesRemoved ?? []) logWarn(`Removed: ${f}`);
       reportReplaced(result.replaced);
       reportRelocked(result.relocked);
       reportMoved(result.moved);
-      await pinComposedAgents(projectDir);
-      const changed = result.deployed.length > 0 || result.removed.length > 0 || !!result.replaced?.length || !!result.moved?.length || !!result.relocked?.length;
+      if (!failed) await pinComposedAgents(projectDir, { repin: true });
+      const changed = result.deployed.length > 0 || result.removed.length > 0 || !!result.replaced?.length || !!result.agentFilesRemoved?.length || !!result.moved?.length || !!result.relocked?.length;
       if (result.lockWritten) {
         logInfo(`Lock file written: ${S.dim("skaile.lock.yaml")}`);
       }
@@ -12680,7 +12938,7 @@ async function updateOne(am2, projectDir, target, force) {
     return;
   }
   spinner.stop(process.exitCode === 1 ? "Failed" : "Done");
-  await pinComposedAgents(projectDir);
+  if (process.exitCode !== 1) await pinComposedAgents(projectDir, { repin: true });
   for (const d of deployed) logOk(`Updated ${d}`);
   if (deployed.length > 0) return;
   if (readText2(lockPath) !== before) logInfo(`Re-locked ${target.ref}`);
@@ -12879,7 +13137,8 @@ function makeWhyCommand() {
       }
       const otherKind = await am2.otherKindHint(ref);
       if (otherKind) {
-        logErr(`${ref} is not a locked skill. ${otherKind}`);
+        const kinded = /^[^@/#\s]+:/.test(ref.trim());
+        logErr(`${ref} is not ${kinded ? "locked" : "a locked skill"}. ${otherKind}`);
         process.exitCode = 1;
         return;
       }
@@ -13063,6 +13322,17 @@ Advanced:
   connector ...                Connector operations
   path                         Show resolved paths
 
+More:
+  asset import|migrate|install|list|show   Author and install AI assets
+  migrate providers|agents|assets|harness  One-time config and asset migrations
+  providers list|add|set|rm|test           AI provider registry
+  auth status|set-key-strategy             Secret key strategy and provider status
+  cache clean|dir|size                     Inspect and reclaim the re-derivable cache
+  npx skills add <url>                     Compatibility shim for npx skills syntax
+  rebuild                                  Re-snapshot composition items, bump prompt version
+  verify                                   Verify installed assets against store signatures
+  complete --shell <shell>                 Shell completion script (zsh | bash | fish)
+
   Run skaile <command> --help for per-command options.
 `;
   }
@@ -13171,6 +13441,9 @@ async function initGitScaffold(resolved, created) {
     ".skaile/providers.yml",
     ".skaile/history.yaml",
     ".skaile/model-endpoint.json",
+    // Machine state of the runs: one compiled-prompt snapshot per run, and the ledger of the
+    // agent files an install wrote.
+    ...RUN_STATE_GITIGNORE_ENTRIES,
     // Per-machine files a run writes into the project: the system prompt handed to the harness
     // (it carries the host path) and omp's session logs.
     ".codex/skaile-session-instructions.md",
@@ -13181,6 +13454,8 @@ async function initGitScaffold(resolved, created) {
     // extension: it is committed, so it is not listed here.
     ".codex/config.toml",
     ".skaile/plugin-state.json",
+    // What the plugin store installed on this machine; a clone that took it along would skip the install.
+    ".skaile/plugins/.reconcile-hash",
     // `.mcp.json` and `.skaile/assets/` are committed on purpose, so they are not listed: the
     // entries use `.` for the project root and secrets are only `${NAME}` references, so the
     // files read the same in every clone (p1294).
@@ -13227,7 +13502,7 @@ async function bootstrapUserConfig() {
 }
 async function hydrateInitSources(resolved, created) {
   try {
-    const { ensureSourcesCloned } = await import('../ensure-sources-6O54DUQB.js');
+    const { ensureSourcesCloned } = await import('../ensure-sources-F6VQDCWY.js');
     const hydrate = ensureSourcesCloned(resolved, { quiet: true });
     for (const n of hydrate.cloned) created.push(`~/.skaile/cache/sources/${n}/`);
     if (hydrate.failed.length > 0) {
@@ -13268,7 +13543,7 @@ function printInitSummary(resolved, projectDir, created) {
 }
 program.hook("preAction", (_program, actionCommand) => setActiveCommand(actionCommand));
 program.command("setup").description("Interactive provider setup wizard").action(async () => {
-  const { cmdSetup } = await import('../setup-2NWSKSCO.js');
+  const { cmdSetup } = await import('../setup-HOAJHUFQ.js');
   await cmdSetup([], { projectDir: process.cwd() });
 });
 program.addCommand(makeInstallCommand());
@@ -13349,7 +13624,7 @@ program.hook("postAction", async (_thisCommand, actionCommand) => {
   const opts = actionCommand.opts();
   if (opts.global || opts.dryRun) return;
   const projectDir = path19__default.resolve(opts.projectDir ?? process.cwd());
-  const { refreshPluginSkills } = await import('../claude-code-JY6CYEG7.js');
+  const { refreshPluginSkills } = await import('../claude-code-BLFRZU2X.js');
   try {
     if (await refreshPluginSkills(projectDir)) {
       logInfo(`Updated ${S.cmd(".claude/plugins/skaile/skills")} (the --full plugin copy)`);
@@ -13368,6 +13643,7 @@ process.once("beforeExit", () => {
   process.exit(1);
 });
 setLibraryAssetCheck((asset, libraryPath) => [
+  ...manifestEntryRootRefusals(libraryPath, asset.kind, asset.name),
   ...manifestEntryFilesRefusals(libraryPath, asset.kind, asset.name),
   ...libraryAssetRefusals(asset, libraryPath, getKindRegistry())
 ]);