gooseworks 0.4.2 → 0.4.4

package/README.md

@@ -152,12 +152,20 @@ Credits: 847 available (500 subscription + 347 purchased)
 
 ### `update`
 
-Re-fetch the latest skill without re-authenticating.
+Refresh the entry instructions bundled in your installed CLI without re-authenticating.
+The command checks the published release first and refuses to reinstall a known older CLI
+bundle. Edited or untracked entry files and standalone recipe packages are preserved.
 
 ```bash
+npx gooseworks skills status
 npx gooseworks update
 ```
 
+Use `gooseworks skills status --json` for release, bundle and actual-file hashes. Upgrade an
+outdated CLI with `npm install -g gooseworks@latest` before updating its entries. Review and
+back up local edits before explicitly using `gooseworks update --overwrite-modified`.
+An unavailable release check means freshness is unknown, not current.
+
 ## How It Works
 
 1. **Install** — authenticates you and installs a master skill file into your coding agent
@@ -184,7 +192,7 @@ For focused creative work you can also use:
 
 - `/goose-ads` for static ads, ad research, and ad performance.
 - `/goose-product-photos` for studio, lifestyle, marketplace, social, and on-model product photography.
-- `/goose-video` to order a video ad in chat (renders on the GooseWorks server).
+- `/goose-video` to pick a video format and make the ad on this machine (Claude Code, Codex or Cursor).
 - `/goose-video-local` to render a video project you started in the app, on this machine.
 - `goose-graphics` for social graphics, carousels, slides, and branded visual content.
 - `animate-image` to turn an approved still into a short motion creative.
@@ -214,7 +222,7 @@ npx gooseworks call scrapecreators /v1/facebook/adLibrary/search/ads \
 
 We'd rather you know exactly what this CLI does before you run it:
 
-- **Skill scripts are open source and fetched at runtime.** `gooseworks fetch <slug>` (and the skills that call it) download skill content and Python scripts from the GooseWorks catalog on demand, save them under `/tmp/gooseworks-scripts/`, and run them on your machine. Every skill and its scripts live in the public, open-source [goose-skills repo](https://github.com/gooseworks-ai/goose-skills/tree/main/skills) — the catalog is synced from there — so the code is the same maintained, auditable source you can read on GitHub. They're served from the catalog (kept current) rather than pinned to the installed CLI version, so you always get the latest version of a skill.
+- **Skill scripts are open source and fetched at runtime.** `gooseworks fetch <slug>` (and the skills that call it) download skill content and Python scripts from the GooseWorks catalog on demand, save them under `/tmp/gooseworks-scripts/`, and run them on your machine. Every skill and its scripts live in the public, open-source [goose-skills repo](https://github.com/gooseworks-ai/goose-skills/tree/main/skills) — the catalog is synced from there — so the code is the same maintained, auditable source you can read on GitHub. They are served from the connected catalog rather than the installed CLI version. Saved copies retain the version/hash returned when fetched; compare them again for new work.
 - **The MCP server is opt-in.** It's only registered when you pass `--mcp` (or `--all`). When you do, the CLI adds a `gooseworks` entry to `~/.claude.json` (Claude Code) or `~/.codex/config.toml` (Codex) that includes your bearer token in an `Authorization` header — this is how every HTTP MCP server authenticates. Skip `--mcp` if you don't want the server registered as a live tool provider; shared onboarding and ads creation require it.
 - **Credentials are stored locally.** Your API key lives in `~/.gooseworks/credentials.json`, written with `0600` permissions in a `0700` directory. `gooseworks logout` deletes it.
 - **`gooseworks env` exposes your key.** `eval $(gooseworks env)` exports `GOOSEWORKS_API_KEY` into your shell environment, where any process you run can read it. Most commands (e.g. `gooseworks call`) load credentials on their own — only use `env` when a script genuinely needs the environment variable.
@@ -246,8 +254,8 @@ creative fatigue, CAC & lead quality, competitor ad intelligence, ad angles & ho
 `gooseworks` parent router also hands ad requests to it. Claude auto-loads whichever skill
 matches the task; the two are domain-scoped and never merged.
 
-> Renamed from `ads-remix`. Older installs get the stale `ads-remix` skill cleaned up
-> automatically on the next `install`.
+> Renamed from `ads-remix`. Install and update preserve legacy directories. If an
+> older `ads-remix` entry remains, review and back it up before removing it yourself.
 
 ```bash
 gooseworks install --claude --mcp
@@ -267,14 +275,37 @@ Generation is billed to your GooseWorks credits **server-side**: `submit_remix_b
 the estimated cost up front and bills only the images that complete. There's no separate
 ad-credit balance. Use `estimate_remix_batch` (cost preview) and `gooseworks credits` (balance).
 
+### Original videos and the shared harness
+
+The installed `make-custom-video` entry connects GooseWorks projects, authenticated
+script and ingredient approvals, budgets, media storage and delivery to the shared
+`video-production-harness` catalog skill. It contains no production playbook or
+assembly code. CLI, direct MCP and Growth fetch the same production package through
+the GooseWorks catalog; direct MCP clients do not need a local CLI.
+
+Production instructions are maintained in Goose Studio's existing control-plane
+harness. Tested Studio changes publish a generated package to `goose-skills`.
+Each run saves its fetched package in its durable workspace. Project metadata keeps
+only the version, hash and package location; resuming uses the saved package instead
+of changing instructions during production. An unavailable package blocks
+generation. New runs use the currently published catalog version.
+
 ### Keeping skills up to date
 
-- **Entry skills** (`gooseworks`, `goose-ads`) are vendored in the CLI. They're (re)installed
-  on `install`/`update`, and **refreshed on `login`** — but only when their content actually
-  changed (a content-hash stamp skips unchanged ones, so re-running is cheap). Bump the CLI
-  (`npx gooseworks@latest …`) to get new entry-skill content.
-- **Recipe skills** (e.g. ad-analytics like `meta-ads-analyzer`) are **fetched live** from
-  goose-skills each time they're used, so they're always current — nothing to update.
+- **Entry skills** are bundled in the CLI. `skills status` compares their actual installed bytes,
+  bundled bytes and the integrity-verified published npm package. Install/update/login warn
+  about an outdated CLI, different instructions, modified files or an unavailable release check.
+  They preserve edited or untracked files by default. A development build ahead of the release
+  is reported as unreleased; it is not silently downgraded.
+- **Saved recipe packages** use the connected catalog's `version` / `contentHash` and dependency
+  hashes. `gooseworks fetch <slug> --saved-package <json-file>` compares a saved fetch response
+  and returns the current package without replacing the file. Canonical MCP `catalog_fetch`
+  supports optional saved hashes when advertised; other hosts compare the returned hashes
+  themselves. The server cannot inspect a client's files, and reported hashes do not certify
+  later manual edits. Missing hashes mean unknown.
+- **Hosted snapshots** use the existing Skills Update action. Approved runs keep their recorded
+  package. Fetch into a new directory for new work; do not replace a running project's harness.
+  Updating skill content does not refresh a host's cached MCP tool schemas.
 
 ## File Layout
 

package/dist/commands/doctor.d.ts

@@ -1,10 +1,34 @@
 import { Command } from 'commander';
+export interface DoctorCheck {
+    id: 'login' | 'mcp' | 'node' | 'ffmpeg' | 'ffprobe' | 'chromium';
+    label: string;
+    ok: boolean;
+    /** What to run when the check fails. */
+    fix: string;
+    /** What was actually found, for the human and for `--json`. */
+    detail?: string;
+    /** Browser diagnostics identify the package actually probed. */
+    code?: string;
+    rendererScript?: string;
+    modulePath?: string;
+    version?: string;
+    executablePath?: string;
+}
 /**
- * `gooseworks doctor` — verify the local prerequisites for making VIDEO ads
- * (the goose-video-local skill renders locally: Playwright records the mockup, ffmpeg
- * stitches/mixes). Also checks auth + that the GooseWorks MCP server is wired,
- * since the skill reads/writes the project over MCP. Exits non-zero if anything
- * is missing so the agent's Phase-0 preflight can relay the fix and stop.
+ * The checks behind `gooseworks doctor`, reusable by `install` and by anything
+ * that wants common machine checks. An explicit renderer script verifies that
+ * renderer's Playwright, not a package belonging to the calling project.
+ * No download or ad render. Browser startup uses normal runtime temp files.
  */
+export declare function runDoctorChecks(opts?: {
+    includeAuth?: boolean;
+    includeBrowser?: boolean;
+    rendererScript?: string;
+}): DoctorCheck[];
+/**
+ * General setup is not certification for an unfetched renderer. The selected
+ * renderer must pass its own free launch check before paid ingredients.
+ */
+export declare function createDoctorCommand(): Command;
 export declare const doctorCommand: Command;
 //# sourceMappingURL=doctor.d.ts.map

package/dist/commands/doctor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAmCpC;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,SAiDtB,CAAC"}
+{"version":3,"file":"doctor.d.ts","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2CpC,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,OAAO,GAAG,KAAK,GAAG,MAAM,GAAG,QAAQ,GAAG,SAAS,GAAG,UAAU,CAAC;IACjE,KAAK,EAAE,MAAM,CAAC;IACd,EAAE,EAAE,OAAO,CAAC;IACZ,wCAAwC;IACxC,GAAG,EAAE,MAAM,CAAC;IACZ,+DAA+D;IAC/D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GAAG,WAAW,EAAE,CAsCtI;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,IAAI,OAAO,CAuC7C;AAED,eAAO,MAAM,aAAa,SAAwB,CAAC"}

package/dist/commands/doctor.js

@@ -34,85 +34,129 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.doctorCommand = void 0;
+exports.runDoctorChecks = runDoctorChecks;
+exports.createDoctorCommand = createDoctorCommand;
 const commander_1 = require("commander");
 const child_process_1 = require("child_process");
 const credentials_1 = require("../auth/credentials");
 const logger = __importStar(require("../utils/logger"));
-/** True if `bin` resolves on PATH (cross-platform). */
-function onPath(bin) {
-    const probe = process.platform === 'win32' ? 'where' : 'which';
+const browser_preflight_1 = require("../utils/browser-preflight");
+/** Run a binary and capture its output; never throws. */
+function run(bin, args) {
     try {
-        return (0, child_process_1.spawnSync)(probe, [bin], { stdio: 'ignore' }).status === 0;
+        const r = (0, child_process_1.spawnSync)(bin, args, { encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] });
+        return { status: r.status, out: `${r.stdout ?? ''}${r.stderr ?? ''}` };
     }
     catch {
-        return false;
+        return { status: null, out: '' };
     }
 }
-/** Playwright is usable either as a global bin or via `npx playwright`. */
-function hasPlaywright() {
-    if (onPath('playwright'))
-        return true;
-    try {
-        return ((0, child_process_1.spawnSync)('npx', ['--no-install', 'playwright', '--version'], {
-            stdio: 'ignore',
-        }).status === 0);
-    }
-    catch {
-        return false;
-    }
+/** True if `bin` resolves on PATH (cross-platform). */
+function onPath(bin) {
+    const probe = process.platform === 'win32' ? 'where' : 'which';
+    return run(probe, [bin]).status === 0;
+}
+/**
+ * Local video renders burn subtitles with libass and encode with libx264. An
+ * ffmpeg without either passes a bare `which ffmpeg` and then fails mid-render,
+ * so check the build, not the path.
+ */
+function ffmpegBuild() {
+    if (!onPath('ffmpeg'))
+        return { ok: false, detail: 'ffmpeg is not on PATH' };
+    const encoders = run('ffmpeg', ['-hide_banner', '-encoders']).out;
+    const filters = run('ffmpeg', ['-hide_banner', '-filters']).out;
+    const hasX264 = /\blibx264\b/.test(encoders);
+    const hasAss = /\bass\b/.test(filters);
+    if (hasX264 && hasAss)
+        return { ok: true, detail: 'libx264 + libass present' };
+    const missing = [!hasX264 && 'libx264 encoder', !hasAss && 'libass `ass` filter'].filter(Boolean).join(' and ');
+    return { ok: false, detail: `ffmpeg is installed but lacks ${missing}` };
+}
+function nodeVersion() {
+    const major = Number(process.versions.node.split('.')[0]);
+    return { ok: major >= 18, detail: `node ${process.versions.node}` };
 }
 /**
- * `gooseworks doctor` — verify the local prerequisites for making VIDEO ads
- * (the goose-video-local skill renders locally: Playwright records the mockup, ffmpeg
- * stitches/mixes). Also checks auth + that the GooseWorks MCP server is wired,
- * since the skill reads/writes the project over MCP. Exits non-zero if anything
- * is missing so the agent's Phase-0 preflight can relay the fix and stop.
+ * The checks behind `gooseworks doctor`, reusable by `install` and by anything
+ * that wants common machine checks. An explicit renderer script verifies that
+ * renderer's Playwright, not a package belonging to the calling project.
+ * No download or ad render. Browser startup uses normal runtime temp files.
  */
-exports.doctorCommand = new commander_1.Command('doctor')
-    .description('Check local prerequisites for video ad rendering (ffmpeg, Playwright) + auth/MCP')
-    .action(() => {
-    const creds = (0, credentials_1.getCredentials)();
-    const checks = [
-        { label: 'Logged in', ok: !!creds, fix: 'gooseworks login' },
-        {
+function runDoctorChecks(opts = {}) {
+    if (opts.includeBrowser === false && opts.rendererScript !== undefined) {
+        throw new Error('--renderer-script cannot be combined with --no-browser');
+    }
+    const checks = [];
+    if (opts.includeAuth !== false) {
+        const creds = (0, credentials_1.getCredentials)();
+        checks.push({ id: 'login', label: 'Logged in', ok: !!creds, fix: 'gooseworks login' }, {
+            id: 'mcp',
             label: 'GooseWorks MCP configured',
             ok: !!creds?.mcp_server_url,
             fix: 'gooseworks install --claude --mcp  (then restart Claude Code)',
-        },
-        {
-            label: 'ffmpeg on PATH',
-            ok: onPath('ffmpeg'),
-            fix: 'brew install ffmpeg (macOS) / apt-get install ffmpeg (Linux)',
-        },
-        {
-            label: 'ffprobe on PATH',
-            ok: onPath('ffprobe'),
-            fix: 'bundled with ffmpeg — install ffmpeg',
-        },
-        {
-            label: 'Playwright (Chromium renderer)',
-            ok: hasPlaywright(),
-            fix: 'npx playwright install chromium',
-        },
-    ];
-    logger.info('GooseWorks doctor — prerequisites for local video ad rendering\n');
-    let allOk = true;
-    for (const c of checks) {
-        if (c.ok) {
-            logger.success(c.label);
+        });
+    }
+    const node = nodeVersion();
+    const ffmpeg = ffmpegBuild();
+    checks.push({ id: 'node', label: 'Node.js 18 or newer', ok: node.ok, detail: node.detail, fix: 'install Node 18+ (https://nodejs.org) or `nvm install 22`' }, {
+        id: 'ffmpeg',
+        label: 'ffmpeg with libx264 + libass',
+        ok: ffmpeg.ok,
+        detail: ffmpeg.detail,
+        fix: 'brew install ffmpeg (macOS) / apt-get install ffmpeg (Linux)',
+    }, { id: 'ffprobe', label: 'ffprobe on PATH', ok: onPath('ffprobe'), fix: 'bundled with ffmpeg — install ffmpeg' });
+    if (opts.includeBrowser !== false) {
+        checks.push({
+            id: 'chromium',
+            label: opts.rendererScript !== undefined ? 'Selected renderer Chromium launch' : 'General Playwright Chromium launch',
+            ...(0, browser_preflight_1.checkBrowserPreflight)({ rendererScript: opts.rendererScript }),
+        });
+    }
+    return checks;
+}
+/**
+ * General setup is not certification for an unfetched renderer. The selected
+ * renderer must pass its own free launch check before paid ingredients.
+ */
+function createDoctorCommand() {
+    return new commander_1.Command('doctor')
+        .description('Check local prerequisites for video ad rendering (ffmpeg, Playwright Chromium, Node) + auth/MCP')
+        .option('--json', 'Print the checks as JSON (for an agent to parse)')
+        .option('--renderer-script <path>', 'Launch Chromium through the selected Node renderer’s Playwright installation')
+        .option('--no-browser', 'Check common prerequisites only (for non-browser formats or before fetching a renderer)')
+        .action((opts, command) => {
+        if (opts.browser === false && opts.rendererScript !== undefined) {
+            command.error('--renderer-script cannot be combined with --no-browser');
+        }
+        const checks = runDoctorChecks({ includeBrowser: opts.browser, rendererScript: opts.rendererScript });
+        const allOk = checks.every((c) => c.ok);
+        if (opts.json) {
+            console.log(JSON.stringify({ ok: allOk, checks }, null, 2));
+            if (!allOk)
+                process.exitCode = 1;
+            return;
+        }
+        logger.info('GooseWorks doctor — prerequisites for local video ad rendering\n');
+        for (const c of checks) {
+            if (c.ok) {
+                logger.success(c.detail ? `${c.label}  (${c.detail})` : c.label);
+            }
+            else {
+                logger.error(`${c.label}  →  fix: ${c.fix}${c.detail ? `  [${c.detail}]` : ''}`);
+            }
+        }
+        logger.info('');
+        if (allOk) {
+            logger.success(opts.rendererScript !== undefined
+                ? 'Common prerequisites and the selected renderer’s default Chromium launch passed.'
+                : 'Common setup checks passed. After fetching a browser renderer, check it with --renderer-script before paid work.');
         }
         else {
-            logger.error(`${c.label}  →  fix: ${c.fix}`);
-            allOk = false;
+            logger.warn('Some prerequisites are missing. Fix the items above, then re-run the same doctor check before paid work.');
+            process.exitCode = 1;
         }
-    }
-    logger.info('');
-    if (allOk) {
-        logger.success('All set — you can render video ads locally (goose-video-local).');
-    }
-    else {
-        logger.warn('Some prerequisites are missing. Fix the items above, then re-run: gooseworks doctor');
-        process.exitCode = 1;
-    }
-});
+    });
+}
+exports.doctorCommand = createDoctorCommand();
 //# sourceMappingURL=doctor.js.map

package/dist/commands/doctor.js.map

@@ -1 +1 @@
-{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,iDAA0C;AAC1C,qDAAqD;AACrD,wDAA0C;AAE1C,uDAAuD;AACvD,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,IAAI,CAAC;QACH,OAAO,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;IACnE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa;IACpB,IAAI,MAAM,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,CACL,IAAA,yBAAS,EAAC,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC,EAAE;YAC5D,KAAK,EAAE,QAAQ;SAChB,CAAC,CAAC,MAAM,KAAK,CAAC,CAChB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAQD;;;;;;GAMG;AACU,QAAA,aAAa,GAAG,IAAI,mBAAO,CAAC,QAAQ,CAAC;KAC/C,WAAW,CACV,kFAAkF,CACnF;KACA,MAAM,CAAC,GAAG,EAAE;IACX,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;IAC/B,MAAM,MAAM,GAAY;QACtB,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE;QAC5D;YACE,KAAK,EAAE,2BAA2B;YAClC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc;YAC3B,GAAG,EAAE,+DAA+D;SACrE;QACD;YACE,KAAK,EAAE,gBAAgB;YACvB,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC;YACpB,GAAG,EAAE,8DAA8D;SACpE;QACD;YACE,KAAK,EAAE,iBAAiB;YACxB,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC;YACrB,GAAG,EAAE,sCAAsC;SAC5C;QACD;YACE,KAAK,EAAE,gCAAgC;YACvC,EAAE,EAAE,aAAa,EAAE;YACnB,GAAG,EAAE,iCAAiC;SACvC;KACF,CAAC;IAEF,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAChF,IAAI,KAAK,GAAG,IAAI,CAAC;IACjB,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,KAAK,GAAG,KAAK,CAAC;QAChB,CAAC;IACH,CAAC;IACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAChB,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,CAAC,OAAO,CAAC,iEAAiE,CAAC,CAAC;IACpF,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CACT,qFAAqF,CACtF,CAAC;QACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;IACvB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"doctor.js","sourceRoot":"","sources":["../../src/commands/doctor.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEA,0CAsCC;AAMD,kDAuCC;AApJD,yCAAoC;AACpC,iDAA0C;AAC1C,qDAAqD;AACrD,wDAA0C;AAC1C,kEAAmE;AAEnE,yDAAyD;AACzD,SAAS,GAAG,CAAC,GAAW,EAAE,IAAc;IACtC,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAA,yBAAS,EAAC,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACxF,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,EAAE,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;AACH,CAAC;AAED,uDAAuD;AACvD,SAAS,MAAM,CAAC,GAAW;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/D,OAAO,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC;AACxC,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW;IAClB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,uBAAuB,EAAE,CAAC;IAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC;IAClE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC;IAChE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,0BAA0B,EAAE,CAAC;IAC/E,MAAM,OAAO,GAAG,CAAC,CAAC,OAAO,IAAI,iBAAiB,EAAE,CAAC,MAAM,IAAI,qBAAqB,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChH,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iCAAiC,OAAO,EAAE,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,OAAO,EAAE,EAAE,EAAE,KAAK,IAAI,EAAE,EAAE,MAAM,EAAE,QAAQ,OAAO,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC;AACtE,CAAC;AAkBD;;;;;GAKG;AACH,SAAgB,eAAe,CAAC,OAAqF,EAAE;IACrH,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,MAAM,GAAkB,EAAE,CAAC;IACjC,IAAI,IAAI,CAAC,WAAW,KAAK,KAAK,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;QAC/B,MAAM,CAAC,IAAI,CACT,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,kBAAkB,EAAE,EACzE;YACE,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,2BAA2B;YAClC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,cAAc;YAC3B,GAAG,EAAE,+DAA+D;SACrE,CACF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,EAAE,CAAC;IAC3B,MAAM,MAAM,GAAG,WAAW,EAAE,CAAC;IAC7B,MAAM,CAAC,IAAI,CACT,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,GAAG,EAAE,2DAA2D,EAAE,EAChJ;QACE,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,8BAA8B;QACrC,EAAE,EAAE,MAAM,CAAC,EAAE;QACb,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,EAAE,8DAA8D;KACpE,EACD,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,sCAAsC,EAAE,CAChH,CAAC;IACF,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,EAAE,CAAC;QAClC,MAAM,CAAC,IAAI,CAAC;YACV,EAAE,EAAE,UAAU;YACd,KAAK,EAAE,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,oCAAoC;YACrH,GAAG,IAAA,yCAAqB,EAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC;SAClE,CAAC,CAAC;IACL,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB;IACjC,OAAO,IAAI,mBAAO,CAAC,QAAQ,CAAC;SAC3B,WAAW,CAAC,iGAAiG,CAAC;SAC9G,MAAM,CAAC,QAAQ,EAAE,kDAAkD,CAAC;SACpE,MAAM,CAAC,0BAA0B,EAAE,8EAA8E,CAAC;SAClH,MAAM,CAAC,cAAc,EAAE,yFAAyF,CAAC;SACjH,MAAM,CAAC,CAAC,IAAoE,EAAE,OAAgB,EAAE,EAAE;QACjG,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YAChE,OAAO,CAAC,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,MAAM,GAAG,eAAe,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,OAAO,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACtG,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAExC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK;gBAAE,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;QAChF,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;gBACT,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YACnE,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,aAAa,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACnF,CAAC;QACH,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChB,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS;gBAC9C,CAAC,CAAC,kFAAkF;gBACpF,CAAC,CAAC,kHAAkH,CAAC,CAAC;QAC1H,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CACT,0GAA0G,CAC3G,CAAC;YACF,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AAEY,QAAA,aAAa,GAAG,mBAAmB,EAAE,CAAC"}

package/dist/commands/fetch.d.ts

@@ -1,3 +1,4 @@
 import { Command } from 'commander';
+export declare function createFetchCommand(): Command;
 export declare const fetchCommand: Command;
 //# sourceMappingURL=fetch.d.ts.map

package/dist/commands/fetch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/commands/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0BpC,eAAO,MAAM,YAAY,SAgCrB,CAAC"}
+{"version":3,"file":"fetch.d.ts","sourceRoot":"","sources":["../../src/commands/fetch.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAkCpC,wBAAgB,kBAAkB,IAAI,OAAO,CAqD5C;AAED,eAAO,MAAM,YAAY,SAAuB,CAAC"}

package/dist/commands/fetch.js

@@ -34,39 +34,74 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.fetchCommand = void 0;
+exports.createFetchCommand = createFetchCommand;
 const commander_1 = require("commander");
 const credentials_1 = require("../auth/credentials");
 const http_1 = require("../utils/http");
 const logger = __importStar(require("../utils/logger"));
-exports.fetchCommand = new commander_1.Command('fetch')
-    .description('Fetch a GooseWorks skill (content + scripts + dependencies) by slug')
-    .argument('<slug>', 'Skill slug (e.g. "reddit-scraper")')
-    .action(async (slug) => {
-    const creds = (0, credentials_1.getCredentials)();
-    if (!creds) {
-        logger.error('Not logged in. Run "gooseworks login" first.');
-        process.exit(1);
-    }
-    const spin = logger.spinner(`Fetching skill ${slug}...`);
-    try {
-        const response = await (0, http_1.requestJson)({
-            apiBase: creds.api_base,
-            apiKey: creds.api_key,
-            method: 'GET',
-            path: `/api/skills/catalog/${encodeURIComponent(slug)}`,
-        });
-        spin.stop();
-        if (response.status === 'error' || !response.data) {
-            logger.error('Failed to fetch skill');
+const fs = __importStar(require("node:fs"));
+const package_freshness_1 = require("../skills/package-freshness");
+function createFetchCommand() {
+    return new commander_1.Command('fetch')
+        .description('Fetch a GooseWorks skill (content + scripts + dependencies) by slug')
+        .argument('<slug>', 'Skill slug (e.g. "reddit-scraper")')
+        .option('--saved-package <file>', 'Compare a previously saved fetch JSON with the current connected catalog; do not replace it')
+        .action(async (slug, options) => {
+        const creds = (0, credentials_1.getCredentials)();
+        if (!creds) {
+            logger.error('Not logged in. Run "gooseworks login" first.');
             process.exit(1);
         }
-        console.log(JSON.stringify(response.data, null, 2));
-    }
-    catch (err) {
-        spin.stop();
-        const message = err instanceof Error ? err.message : 'Fetch failed';
-        logger.error(message);
-        process.exit(1);
-    }
-});
+        const spin = logger.spinner(`Fetching skill ${slug}...`);
+        try {
+            let saved;
+            if (options.savedPackage) {
+                const fd = fs.openSync(options.savedPackage, fs.constants.O_RDONLY | fs.constants.O_NONBLOCK);
+                try {
+                    if (!fs.fstatSync(fd).isFile())
+                        throw new Error('Saved package must be a regular JSON file');
+                    const buffer = Buffer.alloc(16 * 1024 * 1024 + 1);
+                    let size = 0, count = 0;
+                    do {
+                        count = fs.readSync(fd, buffer, size, buffer.length - size, null);
+                        size += count;
+                    } while (count && size < buffer.length);
+                    if (size === buffer.length)
+                        throw new Error('Saved package exceeds 16 MiB');
+                    const parsed = JSON.parse(buffer.subarray(0, size).toString('utf8'));
+                    if (!parsed || typeof parsed !== 'object' || parsed.slug !== slug)
+                        throw new Error('Saved package slug does not match the requested skill');
+                    const value = parsed;
+                    if (value.contentHash != null && typeof value.contentHash !== 'string')
+                        throw new Error('Invalid saved content hash');
+                    if (value.dependencySkills != null && (!Array.isArray(value.dependencySkills) || value.dependencySkills.length > 100 || value.dependencySkills.some((dep) => !dep || typeof dep.slug !== 'string' || (dep.contentHash != null && typeof dep.contentHash !== 'string'))))
+                        throw new Error('Invalid saved dependency hashes');
+                    saved = value;
+                }
+                finally {
+                    fs.closeSync(fd);
+                }
+            }
+            const response = await (0, http_1.requestJson)({
+                apiBase: creds.api_base,
+                apiKey: creds.api_key,
+                method: 'GET',
+                path: `/api/skills/catalog/${encodeURIComponent(slug)}`,
+            });
+            spin.stop();
+            if (response.status === 'error' || !response.data) {
+                logger.error('Failed to fetch skill');
+                process.exit(1);
+            }
+            console.log(JSON.stringify({ ...response.data, freshness: (0, package_freshness_1.compareSavedPackage)(response.data, saved) }, null, 2));
+        }
+        catch (err) {
+            spin.stop();
+            const message = err instanceof Error ? err.message : 'Fetch failed';
+            logger.error(message);
+            process.exit(1);
+        }
+    });
+}
+exports.fetchCommand = createFetchCommand();
 //# sourceMappingURL=fetch.js.map

package/dist/commands/fetch.js.map

@@ -1 +1 @@
-{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/commands/fetch.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,yCAAoC;AACpC,qDAAqD;AACrD,wCAA4C;AAC5C,wDAA0C;AAuB7B,QAAA,YAAY,GAAG,IAAI,mBAAO,CAAC,OAAO,CAAC;KAC7C,WAAW,CAAC,qEAAqE,CAAC;KAClF,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;KACxD,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,EAAE;IAC7B,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;IAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAC;IACzD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAW,EAAuB;YACvD,OAAO,EAAE,KAAK,CAAC,QAAQ;YACvB,MAAM,EAAE,KAAK,CAAC,OAAO;YACrB,MAAM,EAAE,KAAK;YACb,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,EAAE;SACxD,CAAC,CAAC;QACH,IAAI,CAAC,IAAI,EAAE,CAAC;QAEZ,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YAClD,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACtD,CAAC;IAAC,OAAO,GAAY,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;QACpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC,CAAC,CAAC"}
+{"version":3,"file":"fetch.js","sourceRoot":"","sources":["../../src/commands/fetch.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkCA,gDAqDC;AAvFD,yCAAoC;AACpC,qDAAqD;AACrD,wCAA4C;AAC5C,wDAA0C;AAC1C,4CAA8B;AAC9B,mEAA6F;AA6B7F,SAAgB,kBAAkB;IAClC,OAAO,IAAI,mBAAO,CAAC,OAAO,CAAC;SACxB,WAAW,CAAC,qEAAqE,CAAC;SAClF,QAAQ,CAAC,QAAQ,EAAE,oCAAoC,CAAC;SACxD,MAAM,CAAC,wBAAwB,EAAE,6FAA6F,CAAC;SAC/H,MAAM,CAAC,KAAK,EAAE,IAAY,EAAE,OAAkC,EAAE,EAAE;QACjE,MAAM,KAAK,GAAG,IAAA,4BAAc,GAAE,CAAC;QAC/B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;YAC7D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,IAAI,KAAK,CAAC,CAAC;QACzD,IAAI,CAAC;YACH,IAAI,KAAuC,CAAC;YAC5C,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;gBACzB,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,GAAG,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;gBAC9F,IAAI,CAAC;oBACH,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE;wBAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;oBAC7F,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC;oBAClD,IAAI,IAAI,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC;oBACxB,GAAG,CAAC;wBAAC,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;wBAAC,IAAI,IAAI,KAAK,CAAC;oBAAC,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE;oBAC/H,IAAI,IAAI,KAAK,MAAM,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;oBAC5E,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;oBAC9E,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAK,MAA+B,CAAC,IAAI,KAAK,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;oBACtK,MAAM,KAAK,GAAG,MAA8B,CAAC;oBAC7C,IAAI,KAAK,CAAC,WAAW,IAAI,IAAI,IAAI,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;oBACtH,IAAI,KAAK,CAAC,gBAAgB,IAAI,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,gBAAgB,CAAC,MAAM,GAAG,GAAG,IAAI,KAAK,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,WAAW,IAAI,IAAI,IAAI,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC;wBAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;oBAC5T,KAAK,GAAG,KAAK,CAAC;gBAChB,CAAC;wBAAS,CAAC;oBAAC,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;gBAAC,CAAC;YACjC,CAAC;YACD,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAW,EAAuB;gBACvD,OAAO,EAAE,KAAK,CAAC,QAAQ;gBACvB,MAAM,EAAE,KAAK,CAAC,OAAO;gBACrB,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,uBAAuB,kBAAkB,CAAC,IAAI,CAAC,EAAE;aACxD,CAAC,CAAC;YACH,IAAI,CAAC,IAAI,EAAE,CAAC;YAEZ,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;gBAClD,MAAM,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YAClB,CAAC;YAED,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,EAAE,IAAA,uCAAmB,EAAC,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACnH,CAAC;QAAC,OAAO,GAAY,EAAE,CAAC;YACtB,IAAI,CAAC,IAAI,EAAE,CAAC;YACZ,MAAM,OAAO,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC;YACpE,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC,CAAC,CAAC;AAEL,CAAC;AAEY,QAAA,YAAY,GAAG,kBAAkB,EAAE,CAAC"}

package/dist/commands/install.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAwBpC,wBAAgB,oBAAoB,IAAI,OAAO,CA6J9C;AAED,eAAO,MAAM,cAAc,SAAyB,CAAC"}
+{"version":3,"file":"install.d.ts","sourceRoot":"","sources":["../../src/commands/install.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA2BpC,wBAAgB,oBAAoB,IAAI,OAAO,CAyK9C;AAED,eAAO,MAAM,cAAc,SAAyB,CAAC"}

package/dist/commands/install.js

@@ -47,6 +47,8 @@ const logger = __importStar(require("../utils/logger"));
 const master_skill_1 = require("../skills/master-skill");
 const config_1 = require("../config");
 const version_1 = require("../version");
+const doctor_1 = require("./doctor");
+const skills_1 = require("./skills");
 function createInstallCommand() {
     return new commander_1.Command('install')
         .description(`Install GooseWorks data tools into your coding agent
@@ -58,6 +60,7 @@ Examples:
         .option('--codex', 'Configure for Codex')
         .option('--cursor', 'Configure for Cursor')
         .option('--all', 'Configure for all detected agents (implies --mcp)')
+        .option('--overwrite-modified', 'Replace edited or untracked managed skill files after you back them up')
         .option('--mcp', 'Also register the GooseWorks MCP server')
         .option('--with <skill-slug>', 'Also install a standalone GooseWorks skill (repeatable)', collectSkillSlug, [])
         .option('--api-base <url>', 'API base URL', config_1.API_BASE)
@@ -75,17 +78,27 @@ Examples:
         logger.step(1, 3, 'Authenticating...');
         const creds = await (0, login_1.ensureLoggedIn)(opts.apiBase, opts.ref);
         logger.success(`Logged in as ${creds.email}`);
-        // Step 2: Install entry skills (clean old skills first)
+        // Step 2: Refresh bundled entries; preserve standalone and edited copies.
+        const freshness = await (0, skills_1.readEntryFreshnessReport)();
+        await (0, skills_1.reportEntrySkillFreshness)(freshness);
+        if (freshness.cli === 'outdated') {
+            logger.error('Entry refresh refused: upgrade this CLI before installing its bundled instructions. No skill files were changed.');
+            process.exit(1);
+            return;
+        }
         logger.step(2, 3, 'Installing GooseWorks skills...');
-        (0, installer_1.removeAllSkills)();
-        for (const r of (0, installer_1.installManagedEntrySkills)((0, master_skill_1.getEntrySkills)(), { force: true })) {
-            logger.success(`Installed ${r.name} skill to ~/.agents/skills/${r.name}/`);
+        for (const r of (0, installer_1.installManagedEntrySkills)((0, master_skill_1.getEntrySkills)(), { overwriteModified: opts.overwriteModified })) {
+            if (r.action === 'preserved')
+                logger.warn(`Preserved edited or untracked ${r.name}; review/back up before --overwrite-modified.`);
+            else
+                logger.success(`${r.action === 'installed' ? 'Installed' : 'Kept'} ${r.name} skill at ~/.agents/skills/${r.name}/`);
         }
         for (const slug of opts.with || []) {
             try {
                 logger.info(`Installing standalone skill ${slug}...`);
                 let lastReported = 0;
                 await (0, installer_1.installStandaloneSkill)(slug, {
+                    overwriteModified: opts.overwriteModified,
                     onProgress: ({ downloaded, total }) => {
                         const step = Math.max(1, Math.min(5, Math.ceil(total / 10)));
                         if (downloaded === total || downloaded - lastReported >= step) {
@@ -182,6 +195,8 @@ Examples:
                 logger.success('Cursor configured');
             }
         }
+        // General setup only; selected renderers are checked after they are fetched.
+        reportLocalVideoToolchain();
         const agentNames = targetAgents.map((a) => a === 'claude' ? 'Claude Code' : a === 'codex' ? 'Codex' : 'Cursor').join(' and ');
         logger.done(`Setup complete! Open ${agentNames} and ask for the work you want done.`);
         console.log('');
@@ -217,6 +232,24 @@ function resolveTargetAgents(opts) {
         targets.push('cursor');
     return targets;
 }
+function reportLocalVideoToolchain() {
+    let missing;
+    try {
+        missing = (0, doctor_1.runDoctorChecks)({ includeAuth: false }).filter((c) => !c.ok);
+    }
+    catch {
+        return; // a broken probe must never fail the install
+    }
+    if (missing.length === 0) {
+        logger.success('Local video toolchain ready for general setup (ffmpeg, ffprobe, Playwright Chromium, Node). Check the selected renderer with `gooseworks doctor --renderer-script <path>` before paid work.');
+        return;
+    }
+    logger.info('Video ads are made on this machine and need these tools. To make them here, install:');
+    for (const c of missing) {
+        logger.warn(`  ${c.label}  →  ${c.fix}`);
+    }
+    logger.info('Then run `gooseworks doctor` for general setup; check the selected browser renderer with `--renderer-script <path>` before paid work.');
+}
 function collectSkillSlug(value, previous) {
     return [...previous, value];
 }