arcane-cli 1.6.0 → 1.8.0

package/dist/index.js

@@ -6,7 +6,7 @@ const require = __createRequire(import.meta.url);
 import { Command } from "commander";
 import { createRequire as createRequire2 } from "module";
 import { fileURLToPath } from "url";
-import { dirname as dirname11, join as join19 } from "path";
+import { dirname as dirname11, join as join20 } from "path";
 
 // src/commands/init.ts
 import { select as select3, confirm as confirm2, input as input3 } from "@inquirer/prompts";
@@ -322,7 +322,8 @@ var PROFILE_CONFIGS = [
       "git-conventions",
       "testing-standards",
       "framework-decisions",
-      "session-continuity"
+      "session-continuity",
+      "line-ending-baseline"
     ]
   },
   {
@@ -346,7 +347,8 @@ var PROFILE_CONFIGS = [
       "decision-documentation-standard",
       "agent-work-queue-model",
       "development-methodology",
-      "spell-authoring-standards"
+      "spell-authoring-standards",
+      "line-ending-baseline"
     ]
   },
   {
@@ -371,6 +373,7 @@ var PROFILE_CONFIGS = [
       "spells-meta",
       "spells-docs",
       "docs-baseline",
+      "line-ending-baseline",
       "records-conventions",
       "agent-output-instructions",
       "git-conventions",
@@ -417,7 +420,8 @@ var PROFILE_CONFIGS = [
       "web-discoverability-standards",
       "mobile-release-standards",
       "records-conventions",
-      "compliance-standards"
+      "compliance-standards",
+      "line-ending-baseline"
     ]
   }
 ];
@@ -546,15 +550,26 @@ var COMPONENTS = [
   // non-dotfile path and mapped via sourceOverrides; see RegistryComponent.
   {
     name: "docs-baseline",
-    description: "Line-ending and binary-format baseline for document repositories (.gitattributes/.gitignore)",
-    files: [".gitattributes", ".gitignore"],
+    description: "Ignore baseline for document repositories (.gitignore)",
+    files: [".gitignore"],
     sourceOverrides: {
-      ".gitattributes": "docs-baseline/gitattributes",
       ".gitignore": "docs-baseline/gitignore"
     },
     skipExisting: true,
     initOnly: true
   },
+  // Split out of docs-baseline so every profile ships it (#281, PRD D-09);
+  // same asset source. See COMPONENT_FILE_MOVES for manifests written before.
+  {
+    name: "line-ending-baseline",
+    description: "Line-ending and binary-format baseline (.gitattributes): text normalizes to LF, binary formats are never rewritten",
+    files: [".gitattributes"],
+    sourceOverrides: {
+      ".gitattributes": "docs-baseline/gitattributes"
+    },
+    skipExisting: true,
+    initOnly: true
+  },
   // Optional MCP config scaffold (BC-22/I12). skipExisting: a repo's own
   // .mcp.json is user-owned server config Arcane must never overwrite.
   // Not initOnly -- useful to retrofit via `spell add` on an existing repo too.
@@ -782,6 +797,14 @@ var COMPONENTS = [
       ".github/prompts/spell-compliance.prompt.md",
       ".claude/commands/spell-compliance.md",
       ".agents/skills/spell-compliance/SKILL.md"
+    ],
+    // spell-make-discoverable cites the first two for every EV-/WD- rationale;
+    // spell-eas-store-deploy and spell-compliance consume the last two.
+    requires: [
+      "external-verification-standards",
+      "web-discoverability-standards",
+      "mobile-release-standards",
+      "compliance-standards"
     ]
   },
   {
@@ -886,6 +909,41 @@ var LEGACY_COMPONENT_MIGRATIONS = Object.assign(/* @__PURE__ */ Object.create(nu
   "spell-prompts": LEGACY_MONOLITH_REPLACEMENTS,
   "claude-commands": LEGACY_MONOLITH_REPLACEMENTS
 });
+var REGISTRY_RETIREMENTS = [
+  {
+    name: "spell-bootstrap-business",
+    kind: "spell",
+    successors: ["spell-summon-venture"],
+    reason: "renamed in 0.16.0 with no alias (ARC-008 precedent) \u2014 it became a hub-gated venture creator with per-venture books and a registry entry"
+  },
+  {
+    name: "spell-assess",
+    kind: "spell",
+    successors: ["spell-scope"],
+    reason: "renamed to name its outcome, epic scoping and sequencing (ARC-007); no alias (ARC-008)"
+  },
+  {
+    name: "agent-files",
+    kind: "component",
+    successors: [],
+    reason: "`.github/agents/*.agent.md` files are rendered per roster by `spell agents init` / `spell agents sync` (ARC-047), which a fixed-path component cannot do"
+  },
+  {
+    name: "spell-prompts",
+    kind: "component",
+    successors: LEGACY_MONOLITH_REPLACEMENTS,
+    reason: "split in 0.18.0 into capability-scoped spells-* components; `spell update` migrates the entry itself"
+  },
+  {
+    name: "claude-commands",
+    kind: "component",
+    successors: LEGACY_MONOLITH_REPLACEMENTS,
+    reason: "split in 0.18.0 into capability-scoped spells-* components; `spell update` migrates the entry itself"
+  }
+];
+var COMPONENT_FILE_MOVES = [
+  { from: "docs-baseline", to: "line-ending-baseline", files: [".gitattributes"] }
+];
 function getComponent(name) {
   const component = componentIndex.get(name);
   if (!component) {
@@ -3874,8 +3932,10 @@ async function runInit(options, targetDir, assetsDir, packageVersion) {
   \u2726 Arcane v${packageVersion}
 `));
   let repoNotFound = false;
+  let repoHasCommits = false;
   if (!options.dryRun) {
     const gitState = await inspectGitRepository(targetDir);
+    repoHasCommits = gitState.status !== "not-repository" && gitState.status !== "no-commits";
     if (gitState.status === "not-repository") {
       repoNotFound = true;
     } else {
@@ -4228,9 +4288,15 @@ async function runInit(options, targetDir, assetsDir, packageVersion) {
       'Initialize Git for this project: `git init -b main` (avoids defaulting to "master" on systems where that\'s the system default)'
     );
   }
+  const wroteGitattributes = installedComponents.some((c) => c.files.includes(".gitattributes"));
+  if (wroteGitattributes && repoHasCommits) {
+    printWarning(
+      "Installed .gitattributes, which normalizes text to LF. In a repository with history, files committed with CRLF can show as modified once Git renormalizes them (for example after `git add --renormalize .`). Review and commit that as its own change."
+    );
+  }
   printNextStep(
     step++,
-    "Commit the new files: git add .arcane .github .claude AGENTS.md CLAUDE.md .arcane.json"
+    `Commit the new files: git add .arcane .github .claude AGENTS.md CLAUDE.md .arcane.json${wroteGitattributes ? " .gitattributes" : ""}`
   );
   console.log();
 }
@@ -4422,7 +4488,7 @@ async function runAdd(name, options, targetDir, assetsDir, packageVersion) {
 }
 
 // src/commands/update.ts
-import { dirname as dirname5, join as join9 } from "path";
+import { dirname as dirname5, join as join10 } from "path";
 import { readFile as readFile7, writeFile as writeFile9 } from "fs/promises";
 
 // src/modules/merge3.ts
@@ -4553,6 +4619,101 @@ function merge3(base, ours, theirs) {
   return { content: resultLines.join("\n"), hasConflict };
 }
 
+// src/modules/registry-changes.ts
+import { join as join9 } from "path";
+function findMissingRequires(installed, profile) {
+  const names = new Set(installed.flatMap((c) => LEGACY_COMPONENT_MIGRATIONS[c.name] ?? [c.name]));
+  const promised = listProfiles().find((p) => p.id === profile)?.components;
+  const missing = /* @__PURE__ */ new Map();
+  for (const name of names) {
+    let requires;
+    try {
+      requires = getComponent(name).requires ?? [];
+    } catch (err) {
+      if (err instanceof ComponentNotFoundError) continue;
+      throw err;
+    }
+    for (const required of requires) {
+      if (names.has(required)) continue;
+      if (promised && !promised.includes(required)) continue;
+      missing.set(required, [...missing.get(required) ?? [], name]);
+    }
+  }
+  return [...missing].map(([name, requiredBy]) => ({ name, requiredBy }));
+}
+var SPELL_ID_IN_PATH = /(?:^|\/)(spell-[a-z0-9-]+)(?:\/SKILL\.md|\.prompt\.md|\.md)$/;
+function spellIdFromTrackedPath(file) {
+  return SPELL_ID_IN_PATH.exec(file)?.[1];
+}
+function findTrackedRetirements(components) {
+  const componentNames = new Set(components.map((c) => c.name));
+  const spellIds = new Set(
+    components.flatMap((c) => c.files).map(spellIdFromTrackedPath).filter((id) => id !== void 0)
+  );
+  return REGISTRY_RETIREMENTS.filter(
+    (entry) => entry.kind === "component" ? componentNames.has(entry.name) : spellIds.has(entry.name)
+  );
+}
+async function findNewlyAvailable(targetDir, profile, installed, spellScope) {
+  const definition = listProfiles().find((p) => p.id === profile);
+  if (!definition) return [];
+  const installedNames = new Set(installed.map((c) => c.name));
+  const found = [];
+  for (const name of definition.components) {
+    if (installedNames.has(name)) continue;
+    if (spellScope === "user" && SPELL_COMPONENT_NAMES.includes(name)) continue;
+    const component = getComponent(name);
+    const alreadyPresent = [];
+    if (component.skipExisting) {
+      for (const file of component.files) {
+        if (await fileExists(join9(targetDir, file))) alreadyPresent.push(file);
+      }
+      if (component.files.length > 0 && alreadyPresent.length === component.files.length) continue;
+    }
+    found.push({ name, description: component.description, alreadyPresent });
+  }
+  return found;
+}
+function formatRegistryChanges(changes) {
+  const missingRequires = changes.missingRequires ?? [];
+  const newlyAvailable = (changes.newlyAvailable ?? []).filter(
+    (c) => !missingRequires.some((m) => m.name === c.name)
+  );
+  if (changes.retired.length === 0 && newlyAvailable.length === 0 && missingRequires.length === 0) return [];
+  const lines = ["", "Registry changes since your install:"];
+  if (changes.retired.length > 0) {
+    lines.push("  Renamed or retired, still tracked here:");
+    for (const entry of changes.retired) {
+      const successor = entry.successors.length > 0 ? entry.successors.join(", ") : "no successor";
+      lines.push(`    ${entry.name} (${entry.kind}) \u2192 ${successor}: ${entry.reason}`);
+    }
+    lines.push(
+      "    Nothing is deleted because of this list: their files go through the orphan handling above, which removes an untouched one only under `spell update --prune`."
+    );
+  }
+  if (newlyAvailable.length > 0) {
+    const profile = changes.profile ? ` "${changes.profile}"` : "";
+    lines.push(`  Newly available for your${profile} profile, not installed \u2014 nothing was added:`);
+    for (const component of newlyAvailable) {
+      lines.push(`    ${component.name} \u2014 ${component.description}`);
+      lines.push(`      spell add ${component.name}`);
+      if (component.alreadyPresent.length > 0) {
+        lines.push(
+          `      (already here and yours: ${component.alreadyPresent.join(", ")} \u2014 \`spell add\` stops at an existing file rather than overwrite it)`
+        );
+      }
+    }
+  }
+  if (missingRequires.length > 0) {
+    lines.push("  Missing prerequisites \u2014 installed components cite these, and they are not installed:");
+    for (const { name, requiredBy } of missingRequires) {
+      lines.push(`    ${name} (required by ${requiredBy.join(", ")})`);
+      lines.push(`      spell add ${name}`);
+    }
+  }
+  return lines;
+}
+
 // src/modules/npm-registry.ts
 var NPM_PACKAGE_NAME = "arcane-cli";
 async function fetchPublishedFile(version, relativeAssetPath) {
@@ -4634,6 +4795,44 @@ function migrateLegacyComponents(components) {
     inherited: { files: inheritedFiles, fileHashes: inheritedHashes, carrier }
   };
 }
+function moveComponentFiles(components, present = () => true) {
+  let out = components;
+  for (const move of COMPONENT_FILE_MOVES) {
+    const from = out.find((c) => c.name === move.from);
+    const tracked = from?.files.filter((f) => move.files.includes(f)) ?? [];
+    if (!from || tracked.length === 0) continue;
+    const moving = tracked.filter(present);
+    const dropped = tracked.filter((f) => !present(f));
+    const movedHashes = {};
+    const keptHashes = {};
+    for (const [file, hash] of Object.entries(from.fileHashes ?? {})) {
+      if (dropped.includes(file)) continue;
+      (moving.includes(file) ? movedHashes : keptHashes)[file] = hash;
+    }
+    const newFrom = {
+      ...from,
+      files: from.files.filter((f) => !tracked.includes(f)),
+      ...from.fileHashes ? { fileHashes: keptHashes } : {}
+    };
+    const existing = out.find((c) => c.name === move.to);
+    const newTo = existing ? {
+      ...existing,
+      files: [...existing.files, ...moving.filter((f) => !existing.files.includes(f))],
+      fileHashes: { ...movedHashes, ...existing.fileHashes }
+    } : {
+      name: move.to,
+      files: moving,
+      installedVersion: from.installedVersion,
+      ...from.fileHashes ? { fileHashes: movedHashes } : {}
+    };
+    out = out.flatMap((c) => {
+      if (c === from) return existing || moving.length === 0 ? [newFrom] : [newFrom, newTo];
+      if (c === existing) return [newTo];
+      return [c];
+    });
+  }
+  return out;
+}
 async function resolveOrphan(targetDir, file, recordedHash, prune) {
   try {
     validateTargetPath(targetDir, file);
@@ -4641,7 +4840,7 @@ async function resolveOrphan(targetDir, file, recordedHash, prune) {
     console.log(`  ! Refused (path escapes the target directory): ${file}`);
     return "reported";
   }
-  const filePath = join9(targetDir, file);
+  const filePath = join10(targetDir, file);
   if (!await fileExists(filePath)) return "not-found";
   if (!prune) return "reported";
   if (recordedHash === void 0) {
@@ -4663,7 +4862,7 @@ async function retainReportedOrphan(targetDir, file, recordedHash, into) {
   } catch {
     return;
   }
-  if (!await fileExists(join9(targetDir, file))) return;
+  if (!await fileExists(join10(targetDir, file))) return;
   if (!into.files.includes(file)) into.files.push(file);
   if (recordedHash !== void 0) {
     into.fileHashes ??= {};
@@ -4692,7 +4891,7 @@ async function findMissingTrackedFiles(targetDir, components, scope = "repo", sp
     const candidates = readopted.has(installed.name) ? component.files : installed.files;
     for (const file of candidates) {
       if (!component.files.includes(file)) continue;
-      if (!await fileExists(join9(targetDir, file))) missing.push(file);
+      if (!await fileExists(join10(targetDir, file))) missing.push(file);
     }
   }
   return missing;
@@ -4731,6 +4930,16 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
     }
     throw err;
   }
+  const movedFilesPresent = /* @__PURE__ */ new Set();
+  for (const move of COMPONENT_FILE_MOVES) {
+    for (const file of move.files) {
+      if (await fileExists(join10(targetDir, file))) movedFilesPresent.add(file);
+    }
+  }
+  manifest = {
+    ...manifest,
+    components: moveComponentFiles(manifest.components, (f) => movedFilesPresent.has(f))
+  };
   const resolvedScope = resolveInstallScope(targetDir, manifest.scope, options.user);
   if (resolvedScope.misplacedUserManifest) {
     console.error(misplacedUserManifestMessage(targetDir));
@@ -4748,7 +4957,7 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
       return;
     }
     try {
-      flagPatch = resolveManifestFlags(options.manifestFlags, manifest, join9(targetDir, ".arcane.json"));
+      flagPatch = resolveManifestFlags(options.manifestFlags, manifest, join10(targetDir, ".arcane.json"));
     } catch (err) {
       if (!(err instanceof ManifestFlagError)) throw err;
       console.error(`
@@ -4793,12 +5002,29 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
       return;
     }
   }
+  const registryChanges = {
+    retired: findTrackedRetirements(manifest.components),
+    ...scope === "repo" ? {
+      profile: manifest.profile,
+      newlyAvailable: await findNewlyAvailable(
+        targetDir,
+        manifest.profile,
+        migrateLegacyComponents(manifest.components).components,
+        spellScope
+      ),
+      missingRequires: findMissingRequires(manifest.components, manifest.profile)
+    } : {}
+  };
+  const printRegistryChanges = () => {
+    for (const line of formatRegistryChanges(registryChanges)) console.log(line);
+  };
   let sameVersionRestore = false;
   if (manifest.version === packageVersion && manifest.components.length > 0) {
     const missing = await findMissingTrackedFiles(targetDir, manifest.components, scope, spellScope, readopted);
     const unmanaged = findUnmanagedTrackedFiles(manifest.components, scope, spellScope);
     if (missing.length === 0 && unmanaged.length === 0) {
       console.log("Already up to date.");
+      printRegistryChanges();
       if (scope === "repo" && Object.keys(flagPatch).length > 0) {
         if (!options.dryRun) await writeManifest(targetDir, answered);
         reportFlagPatch(flagPatch, manifest, answered, options.dryRun);
@@ -4887,8 +5113,8 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
     const updatedFiles = [];
     const fileHashes = {};
     for (const file of component.files) {
-      const srcPath = join9(assetsDir, component.sourceOverrides?.[file] ?? file);
-      const targetExists = await fileExists(join9(targetDir, file));
+      const srcPath = join10(assetsDir, component.sourceOverrides?.[file] ?? file);
+      const targetExists = await fileExists(join10(targetDir, file));
       const preserveExisting = Boolean(component.skipExisting) && targetExists;
       const recordedHash = installed.fileHashes?.[file];
       if (component.initOnly && !targetExists) {
@@ -4908,7 +5134,7 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
           continue;
         }
       }
-      const editedByOperator = recordedHash !== void 0 && targetExists && !preserveExisting && !await fileMatchesHash(join9(targetDir, file), recordedHash);
+      const editedByOperator = recordedHash !== void 0 && targetExists && !preserveExisting && !await fileMatchesHash(join10(targetDir, file), recordedHash);
       if (preserveExisting) {
         console.log(`  ${options.dryRun ? "[dry-run] Would preserve" : "Preserved"}: ${file}`);
       } else if (editedByOperator && isClientShimPath(file)) {
@@ -4935,11 +5161,11 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
             handled = true;
           } else {
             const [currentContent, newContent] = await Promise.all([
-              readFile7(join9(targetDir, file), "utf-8"),
+              readFile7(join10(targetDir, file), "utf-8"),
               readFile7(srcPath, "utf-8")
             ]);
             const result = merge3(oldVendorContent, currentContent, newContent);
-            await writeFile9(join9(targetDir, file), result.content, "utf-8");
+            await writeFile9(join10(targetDir, file), result.content, "utf-8");
             fileHashes[file] = await hashFile(srcPath);
             if (result.hasConflict) {
               conflictedFiles.push(file);
@@ -4961,7 +5187,7 @@ async function runUpdate(options, targetDir, assetsDir, packageVersion) {
       }
     }
     for (const dir of component.directories ?? []) {
-      const srcDirPath = join9(assetsDir, dir);
+      const srcDirPath = join10(assetsDir, dir);
       if (options.dryRun) {
         console.log(`  [dry-run] Would update directory: ${dir}/`);
       } else {
@@ -5028,6 +5254,7 @@ ${verb} ${orphansToReport.length} orphaned file(s) (tracked before this update,
       console.log("  Run `spell update --prune` to remove the ones that are safe to delete.");
     }
   }
+  printRegistryChanges();
   if (customizedShims.length > 0) {
     const verb = options.dryRun ? "[dry-run] Would keep" : "Kept";
     console.log(
@@ -5123,7 +5350,7 @@ import { dirname as dirname7 } from "path";
 
 // src/modules/version-check.ts
 import { readFile as readFile8, writeFile as writeFile10, mkdir as mkdir6 } from "fs/promises";
-import { dirname as dirname6, join as join10 } from "path";
+import { dirname as dirname6, join as join11 } from "path";
 import { homedir as homedir3 } from "os";
 import { createRequire } from "module";
 var require2 = createRequire(import.meta.url);
@@ -5137,7 +5364,7 @@ function getFeedUrl() {
   }
   return url;
 }
-var DEFAULT_CACHE_PATH = join10(homedir3(), ".arcane", "version-cache.json");
+var DEFAULT_CACHE_PATH = join11(homedir3(), ".arcane", "version-cache.json");
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 async function readCache(cachePath) {
   try {
@@ -5356,7 +5583,7 @@ async function runStatus(targetDir, packageVersion, options = {}) {
 
 // src/commands/uninstall.ts
 import { rm as rm5 } from "fs/promises";
-import { dirname as dirname8, join as join11 } from "path";
+import { dirname as dirname8, join as join12 } from "path";
 import { confirm as confirm3 } from "@inquirer/prompts";
 async function runUninstall(options, targetDir) {
   let manifest;
@@ -5439,16 +5666,16 @@ Run \`spell unblock-push\` first (interactive), then uninstall.`
       }
     }
   }
-  await rm5(join11(targetDir, ".arcane.json"), { force: true });
+  await rm5(join12(targetDir, ".arcane.json"), { force: true });
   const agentDirs = [
     ".github/agents",
     ".arcane/agents",
     ".arcane/generated"
   ];
   for (const dir of agentDirs) {
-    await rm5(join11(targetDir, dir), { recursive: true, force: true });
+    await rm5(join12(targetDir, dir), { recursive: true, force: true });
   }
-  await rm5(join11(targetDir, ".arcane/agents.yaml"), { force: true });
+  await rm5(join12(targetDir, ".arcane/agents.yaml"), { force: true });
   const markerFiles = [
     "CLAUDE.md",
     "AGENTS.md",
@@ -5510,10 +5737,10 @@ async function uninstallUserTier(options, storeRoot, manifest) {
       console.log(`  ! Skipped ${file}: ${err instanceof Error ? err.message : String(err)}`);
     }
   }
-  await rm5(join11(storeRoot, ".arcane.json"), { force: true });
-  await rm5(join11(storeRoot, "agents"), { recursive: true, force: true });
-  await rm5(join11(storeRoot, "agents.yaml"), { force: true });
-  await removeDirectoryIfEmpty(join11(storeRoot, USER_TIER_SPELLS_DIR));
+  await rm5(join12(storeRoot, ".arcane.json"), { force: true });
+  await rm5(join12(storeRoot, "agents"), { recursive: true, force: true });
+  await rm5(join12(storeRoot, "agents.yaml"), { force: true });
+  await removeDirectoryIfEmpty(join12(storeRoot, USER_TIER_SPELLS_DIR));
   await removeDirectoryIfEmpty(storeRoot);
   for (const line of describeFanoutOutcomes(fanout.outcomes)) console.log(`  ${line}`);
   const pruned = fanout.outcomes.filter((o) => o.status === "pruned").length;
@@ -5526,7 +5753,7 @@ async function uninstallUserTier(options, storeRoot, manifest) {
 
 // src/commands/doctor.ts
 import { access as access4, readdir as readdir9, readFile as readFile11, mkdir as mkdir7, copyFile as fsCopyFile } from "fs/promises";
-import { join as join14, dirname as dirname9 } from "path";
+import { join as join15, dirname as dirname9 } from "path";
 
 // src/config/incidents.ts
 var INCIDENT_QUEUE = [
@@ -5595,7 +5822,7 @@ function evaluateIncidentGate(records) {
 
 // src/modules/denylist-scan.ts
 import { readFile as readFile9, readdir as readdir7 } from "fs/promises";
-import { join as join12, relative } from "path";
+import { join as join13, relative } from "path";
 function escapeRegExp(value) {
   return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
@@ -5646,7 +5873,7 @@ async function collectScannableFiles(root, repoRoot = root, extensions = DEFAULT
     return collected;
   }
   for (const entry of entries) {
-    const absolutePath = join12(root, entry.name);
+    const absolutePath = join13(root, entry.name);
     if (entry.isDirectory()) {
       if (SKIP_DIRECTORIES.has(entry.name)) continue;
       collected.push(...await collectScannableFiles(absolutePath, repoRoot, extensions));
@@ -5863,7 +6090,7 @@ function parseAdoRemote(url) {
 
 // src/modules/placeholders.ts
 import { readdir as readdir8, readFile as readFile10 } from "fs/promises";
-import { join as join13 } from "path";
+import { join as join14 } from "path";
 var PLACEHOLDER_STANDARD_FILE = "spell-authoring-standards.md";
 var RUNTIME_PLACEHOLDERS_START = "<!-- runtime-placeholders:start -->";
 var RUNTIME_PLACEHOLDERS_END = "<!-- runtime-placeholders:end -->";
@@ -5958,7 +6185,7 @@ function parseRuntimePlaceholders(standardContent) {
 async function scanGovernancePlaceholders(governanceDir) {
   let standard;
   try {
-    standard = await readFile10(join13(governanceDir, PLACEHOLDER_STANDARD_FILE), "utf8");
+    standard = await readFile10(join14(governanceDir, PLACEHOLDER_STANDARD_FILE), "utf8");
   } catch (err) {
     if (err.code === "ENOENT") {
       return { status: "skipped", reason: `${PLACEHOLDER_STANDARD_FILE} is not installed` };
@@ -5977,7 +6204,7 @@ async function scanGovernancePlaceholders(governanceDir) {
   const templateDocs = [];
   const findings = [];
   for (const file of files) {
-    const content = await readFile10(join13(governanceDir, file), "utf8");
+    const content = await readFile10(join14(governanceDir, file), "utf8");
     const status = parseFrontmatterStatus(content);
     if (status === "template") templateDocs.push(file);
     if (status !== "active") continue;
@@ -6008,8 +6235,8 @@ async function checkNodeVersion() {
 async function checkVSCodeExtension(id, label, homeDir = resolveHomeDir()) {
   const name = `VS Code extension: ${label}`;
   const flavours = [
-    { dir: join14(homeDir, ".vscode", "extensions"), bin: "code" },
-    { dir: join14(homeDir, ".vscode-insiders", "extensions"), bin: "code-insiders" }
+    { dir: join15(homeDir, ".vscode", "extensions"), bin: "code" },
+    { dir: join15(homeDir, ".vscode-insiders", "extensions"), bin: "code-insiders" }
   ];
   let installBin = null;
   for (const flavour of flavours) {
@@ -6037,11 +6264,11 @@ async function checkVSCodeExtension(id, label, homeDir = resolveHomeDir()) {
 }
 async function checkArcaneManifest(targetDir) {
   const name = "Arcane manifest (.arcane.json)";
-  const manifestPath2 = join14(targetDir, ".arcane.json");
+  const manifestPath2 = join15(targetDir, ".arcane.json");
   try {
     await access4(manifestPath2);
   } catch {
-    const selfHostedManifestPath = join14(targetDir, "src", "assets", ".arcane.json");
+    const selfHostedManifestPath = join15(targetDir, "src", "assets", ".arcane.json");
     try {
       const raw = await readFile11(selfHostedManifestPath, "utf8");
       const manifest = JSON.parse(raw);
@@ -6147,7 +6374,7 @@ async function checkSessionContinuity(targetDir) {
   const results = [];
   for (const file of SESSION_CONTINUITY_FILES) {
     const name = `Session file: ${file}`;
-    const filePath = join14(targetDir, file);
+    const filePath = join15(targetDir, file);
     try {
       await access4(filePath);
       results.push({ name, passed: true, message: "present" });
@@ -6165,11 +6392,11 @@ async function checkSessionContinuity(targetDir) {
 async function fixSessionContinuity(targetDir, assetsDir) {
   const created = [];
   for (const file of SESSION_CONTINUITY_FILES) {
-    const destPath = join14(targetDir, file);
+    const destPath = join15(targetDir, file);
     try {
       await access4(destPath);
     } catch {
-      const srcPath = join14(assetsDir, file);
+      const srcPath = join15(assetsDir, file);
       await mkdir7(dirname9(destPath), { recursive: true });
       await fsCopyFile(srcPath, destPath);
       created.push(file);
@@ -6297,7 +6524,7 @@ async function checkGovernancePlaceholders(targetDir) {
   const name = "Governance placeholders (ARC-051)";
   let scan;
   try {
-    scan = await scanGovernancePlaceholders(join14(targetDir, ".arcane", "governance"));
+    scan = await scanGovernancePlaceholders(join15(targetDir, ".arcane", "governance"));
   } catch (err) {
     return {
       name,
@@ -6325,9 +6552,34 @@ async function checkGovernancePlaceholders(targetDir) {
     message: `unknown placeholder(s) in status: active doc(s) \u2014 ${listed.join("; ")}. Fill each one in; or, if an agent resolves it at use time, add it to the runtime-placeholders list in .arcane/governance/${PLACEHOLDER_STANDARD_FILE}; or, if the document is meant to be filled in by hand, mark it \`status: template\`.`
   };
 }
+async function checkComponentRequires(targetDir) {
+  const name = "Component prerequisites";
+  let manifest;
+  try {
+    manifest = await readManifest(targetDir);
+  } catch {
+    return { name, passed: true, blocking: false, skipped: true, message: "skipped \u2014 no readable .arcane.json" };
+  }
+  if (manifest.scope === "user") {
+    return { name, passed: true, blocking: false, skipped: true, message: "skipped \u2014 the user tier holds spells only" };
+  }
+  if (!Array.isArray(manifest.components)) {
+    return { name, passed: true, blocking: false, skipped: true, message: "skipped \u2014 .arcane.json lists no components" };
+  }
+  const missing = findMissingRequires(manifest.components, manifest.profile);
+  if (missing.length === 0) {
+    return { name, passed: true, blocking: false, message: "every installed component's prerequisites are installed" };
+  }
+  return {
+    name,
+    passed: false,
+    blocking: false,
+    message: missing.map(({ name: required, requiredBy }) => `${requiredBy.join(", ")} cites ${required}, which is not installed \u2014 \`spell add ${required}\``).join("; ")
+  };
+}
 async function checkMcpConfig(targetDir) {
   const name = "MCP config (per-server timeout, I12)";
-  const filePath = join14(targetDir, ".mcp.json");
+  const filePath = join15(targetDir, ".mcp.json");
   let raw;
   try {
     raw = await readFile11(filePath, "utf8");
@@ -6383,7 +6635,7 @@ function isDelegationsFile(value) {
 }
 async function checkDelegations(targetDir) {
   const name = "Standing delegations (T13)";
-  const filePath = join14(targetDir, ".arcane", "delegations.json");
+  const filePath = join15(targetDir, ".arcane", "delegations.json");
   let raw;
   try {
     raw = await readFile11(filePath, "utf8");
@@ -6496,7 +6748,7 @@ async function checkSpellScope(targetDir, homeDir = resolveHomeDir()) {
   let probed = false;
   const probe = "spell-status.md";
   try {
-    const entries = await readdir9(join14(storeRoot, USER_TIER_SPELLS_DIR));
+    const entries = await readdir9(join15(storeRoot, USER_TIER_SPELLS_DIR));
     const spells = entries.filter((e) => e.startsWith("spell-") && e.endsWith(".md"));
     spellCount = spells.length;
     probed = spells.includes(probe);
@@ -6560,7 +6812,8 @@ async function runDoctor(targetDir, options = {}, assetsDir) {
     checkMcpConfig(targetDir),
     checkUserTier(resolveHomeDir(), options.packageVersion),
     checkSpellScope(targetDir),
-    checkGovernancePlaceholders(targetDir)
+    checkGovernancePlaceholders(targetDir),
+    checkComponentRequires(targetDir)
   ]);
   const sessionResults = await checkSessionContinuity(targetDir);
   results.push(...sessionResults);
@@ -6608,7 +6861,7 @@ import { readFile as readFile13 } from "fs/promises";
 
 // src/modules/ward.ts
 import { readdir as readdir10, readFile as readFile12 } from "fs/promises";
-import { join as join15, relative as relative2 } from "path";
+import { join as join16, relative as relative2 } from "path";
 async function scanFileAllRules(absolutePath, displayPath, rules) {
   const findings = [];
   let content;
@@ -6671,7 +6924,7 @@ async function scanFilenames(root, rules, repoRoot = root) {
     return findings;
   }
   for (const entry of entries) {
-    const absolutePath = join15(root, entry.name);
+    const absolutePath = join16(root, entry.name);
     if (entry.isDirectory()) {
       if (SKIP_DIRECTORIES.has(entry.name)) continue;
       findings.push(...await scanFilenames(absolutePath, rules, repoRoot));
@@ -6948,15 +7201,15 @@ async function runBlockPush(targetDir) {
 
 // src/commands/report.ts
 import { access as access5 } from "fs/promises";
-import { join as join18 } from "path";
+import { join as join19 } from "path";
 
 // src/modules/show-report/generate.ts
 import { mkdir as mkdir8, readdir as readdir11, readFile as readFile15, writeFile as writeFile11 } from "fs/promises";
-import { basename as basename3, dirname as dirname10, isAbsolute, join as join17, relative as relative3, resolve as resolve4 } from "path";
+import { basename as basename3, dirname as dirname10, isAbsolute, join as join18, relative as relative3, resolve as resolve4 } from "path";
 
 // src/modules/show-report/model.ts
 import { readFile as readFile14 } from "fs/promises";
-import { join as join16 } from "path";
+import { join as join17 } from "path";
 
 // src/modules/show-report/plan-parser.ts
 function parseFrontmatter(content) {
@@ -7322,11 +7575,11 @@ function buildCorrections(ledgerRows, programName) {
   };
 }
 async function buildShowReportModel(options) {
-  const planAbsPath = join16(options.rootDir, options.planRelPath);
-  const queueAbsPath = join16(options.rootDir, options.queueRelPath);
+  const planAbsPath = join17(options.rootDir, options.planRelPath);
+  const queueAbsPath = join17(options.rootDir, options.queueRelPath);
   const ledgerRelPath = "docs/verification-ledger.md";
-  const ledgerAbsPath = join16(options.rootDir, ledgerRelPath);
-  const decisionsAbsPath = join16(options.rootDir, "DECISIONS.md");
+  const ledgerAbsPath = join17(options.rootDir, ledgerRelPath);
+  const decisionsAbsPath = join17(options.rootDir, "DECISIONS.md");
   const [planContent, queueContent, ledgerContent, decisionsContent] = await Promise.all([
     readFile14(planAbsPath, "utf8"),
     readOptional(queueAbsPath),
@@ -7497,7 +7750,7 @@ function toPosix(path4) {
 async function programFromPlan(rootDir, slug, planRelPath) {
   let planContent;
   try {
-    planContent = await readFile15(join17(rootDir, planRelPath), "utf8");
+    planContent = await readFile15(join18(rootDir, planRelPath), "utf8");
   } catch {
     return { skipped: { slug, reason: `no PLAN.md at ${planRelPath}` } };
   }
@@ -7509,13 +7762,13 @@ async function programFromPlan(rootDir, slug, planRelPath) {
     program: {
       slug,
       planRelPath,
-      queueRelPath: toPosix(join17(dirname10(planRelPath), "OPERATOR-QUEUE.md")),
+      queueRelPath: toPosix(join18(dirname10(planRelPath), "OPERATOR-QUEUE.md")),
       ledgerProgramName: programNameFromTitle(frontmatter.title ?? slug)
     }
   };
 }
 async function discoverPrograms(rootDir) {
-  const plansDir = join17(rootDir, "docs", "plans");
+  const plansDir = join18(rootDir, "docs", "plans");
   let entries;
   try {
     entries = (await readdir11(plansDir, { withFileTypes: true })).filter((e) => e.isDirectory());
@@ -7549,7 +7802,7 @@ async function readOptionalFile(path4) {
   }
 }
 async function generateReport(rootDir, program2, templateHtml) {
-  const planContent = await readFile15(join17(rootDir, program2.planRelPath), "utf8");
+  const planContent = await readFile15(join18(rootDir, program2.planRelPath), "utf8");
   const frontmatter = parseFrontmatter(planContent);
   const model = await buildShowReportModel({
     rootDir,
@@ -7582,12 +7835,12 @@ async function runReportGeneration(options) {
       [`${outRel}/show-report.html`, generated.html]
     ];
     for (const [relPath, expected] of outputs) {
-      const actual = await readOptionalFile(join17(options.rootDir, relPath));
+      const actual = await readOptionalFile(join18(options.rootDir, relPath));
       if (actual === null || normalizeLineEndings2(actual) !== normalizeLineEndings2(expected)) {
         drifted.push(`${relPath} does not match a regeneration from its sources.`);
         if (options.mode === "write") {
           await mkdir8(outAbs, { recursive: true });
-          await writeFile11(join17(options.rootDir, relPath), expected, "utf8");
+          await writeFile11(join18(options.rootDir, relPath), expected, "utf8");
           repaired.push(relPath);
         }
       }
@@ -7598,7 +7851,7 @@ async function runReportGeneration(options) {
 
 // src/commands/report.ts
 async function runReport(targetDir, options = {}, assetsDir) {
-  const templatePath = join18(assetsDir, "report", "show-report.template.html");
+  const templatePath = join19(assetsDir, "report", "show-report.template.html");
   try {
     await access5(templatePath);
   } catch {
@@ -7661,7 +7914,7 @@ async function runReport(targetDir, options = {}, assetsDir) {
 import { realpathSync } from "fs";
 var require3 = createRequire2(import.meta.url);
 var pkg = require3("../package.json");
-var ASSETS_DIR = process.env["ARCANE_ASSETS_DIR"] ?? join19(dirname11(fileURLToPath(import.meta.url)), "assets");
+var ASSETS_DIR = process.env["ARCANE_ASSETS_DIR"] ?? join20(dirname11(fileURLToPath(import.meta.url)), "assets");
 var program = new Command();
 var USER_FLAG_DESCRIPTION = "Operate on the per-user tier at ~/.arcane \u2014 spells shared by every repository on this machine, fanned out to ~/.agents/skills (Codex, Copilot) and ~/.claude/commands (Claude Code)";
 var USER_TIER_AGENTS_DESCRIPTION = "Operate on the per-user tier at ~/.arcane \u2014 one agent roster shared by every repository on this machine, rendered to ~/.copilot/agents (VS Code agent modes)";