loadout-ai 0.2.3 → 0.4.0

package/dist/src/cli.js

@@ -12,14 +12,16 @@ import { fetchRepositorySnapshot } from "./core/source.js";
 import { discoverMcpManifests, summarizeMcpManifest, planMcpConfig, summarizeMcpConfigPlan, applyMcpConfigPlan, } from "./core/mcp.js";
 import { REVIEWED_MCP_RECIPES, findMcpRecipe, formatMcpRecipePlan, planMcpRecipe, verifyMcpRecipe, verifyMcpRecipeConnection, } from "./core/mcp-recipes.js";
 import { runDoctor, formatDoctorReport } from "./core/doctor.js";
-import { applyPackageUpdate, buildUpdatePlan, formatUpdatePlan, } from "./core/update.js";
+import { applyPackageUpdate, buildUpdatePlan, formatUpdatePlan, selectSafeAutomaticUpdates, } from "./core/update.js";
 import { startApiServer } from "./core/api.js";
 import { inspectPackage, formatPackageInspection } from "./core/package.js";
 import { addManifestPackage, applyProfileToManifest, initManifest, readManifest, removeManifestPackage, writeLockfile, } from "./core/manifest.js";
 import { buildHealthReport, formatHealthReport } from "./core/health.js";
-import { readInstallState } from "./core/state.js";
+import { readInstallState, recordInstallTransaction } from "./core/state.js";
 import { applyRemove, planRemove } from "./core/remove.js";
-import { formatRecommendations, personalizeRecommendations, profileManifestPackages, recommendPackages, scanProject, TESTED_PROFILES, } from "./core/recommend.js";
+import { applyUninstall, buildUninstallPlan, formatUninstallPlan, uninstallGlobalCli, } from "./core/uninstall.js";
+import { evaluateInstalledProfile, formatInstalledProfileStatus, } from "./core/profile-state.js";
+import { formatRecommendations, personalizeRecommendations, profileManifestPackages, recommendPackages, RECOMMENDATION_BOUNDARY, scanProject, TESTED_PROFILES, } from "./core/recommend.js";
 import { buildImprovementCycle, formatImprovementCycle, recordImprovementOutcome, writeImprovementCycle, } from "./core/improve.js";
 import { applySyncPlan, buildSyncPlan } from "./core/sync.js";
 import { createPackage, packPackage, publishLocalPackage, publishRemotePackage, searchLocalRegistry, } from "./core/registry.js";
@@ -31,7 +33,7 @@ import { generateSigningKeys, signJsonFile, verifyJsonFile, } from "./core/signi
 import { applyPortableImport, exportPortableLoadout, planPortableImport, } from "./core/portable.js";
 import { applyCodexMcpConfigPlan, defaultCodexMcpConfigPath, planCodexMcpConfig, } from "./core/codex-mcp.js";
 import { formatDemoResult, runIsolatedDemo } from "./core/demo.js";
-import { catalogTrustStage, resolveCatalogProfile } from "./core/profiles.js";
+import { catalogTrustStage, formatCatalogTrustStage, resolveCatalogProfile, } from "./core/profiles.js";
 import { discoverHackerNewsRepositories } from "./core/community.js";
 import { discoverPrivateRepositories } from "./core/private-discovery.js";
 import { defaultGitHubDiscoveryQueries, discoverGitHubRepositories, } from "./core/github-discovery.js";
@@ -43,11 +45,11 @@ import { compileConversion, } from "./core/conversion.js";
 import { writeFileAtomically } from "./core/atomic-file.js";
 import { formatCanaryResult, runCanary } from "./core/canary.js";
 import { startDashboardServer } from "./dashboard.js";
-import { applyPreparedCatalogInstall, formatPreparedCatalogInstall, prepareCatalogInstall, } from "./core/catalog-install.js";
+import { applyPreparedCatalogInstall, formatCatalogApplyGuidance, formatPreparedCatalogInstall, prepareCatalogInstall, } from "./core/catalog-install.js";
 import { formatInstalledSkillInventory, scanInstalledSkills, } from "./core/skill-inventory.js";
 import { enrichInventoryWithProvenance, formatProvenanceSummary, resolveCatalogSkillIndex, } from "./core/provenance.js";
 import { compareSkill, formatSkillComparison } from "./core/skill-compare.js";
-import { applyActivationChange, buildLibraryStateReport, formatActivationPlan, formatLibraryStateReport, planActivationChange, } from "./core/active-set.js";
+import { applyActivationChange, buildLibraryStateReport, formatActivationPlan, formatLibrarySummary, formatLibraryStateReport, planActivationChange, } from "./core/active-set.js";
 import { applyProjectActivation, formatProjectActivation, planProjectActivation, } from "./core/active-policy.js";
 import { applySkillAdoption, formatAdoptionPlan, planSkillAdoption, } from "./core/adopt.js";
 import { formatReviewQueue, mergeReviewQueue, readReviewQueue, setReviewDecision, } from "./core/review-queue.js";
@@ -79,6 +81,7 @@ import { applyIntelligenceFeed, previewIntelligenceFeed, readCachedIntelligenceF
 import { scanSkillSecurity } from "./core/skill-security.js";
 import { planApmImportFiles, planOpenPackageImportFiles, } from "./core/ecosystem-import.js";
 import { buildCompatibilityIntelligence, parseCompatibilityNoticeSet, } from "./core/compatibility-intelligence.js";
+import { ADVANCED_GUIDE, BEGINNER_GUIDE, HIDDEN_FROM_FIRST_SCREEN, } from "./core/cli-guide.js";
 const collectOption = (value, previous = []) => [
     ...previous,
     value,
@@ -180,14 +183,14 @@ async function runSetup(options) {
     try {
         if (!mode) {
             if (!interactive) {
-                console.log("Loadout is CLI-first. Run `loadout setup --mode stable` for the recommended daily driver, `--mode power` for broader opt-in skills, or `--mode maximum` to download the screened library without activating it.");
+                console.log("Loadout is CLI-first. Run `loadout setup --mode stable` for Loadout's bounded policy selection, `--mode power` for broader opt-in skills, or `--mode maximum` to download the screened library without activating it.");
                 return;
             }
             reader = createInterface({
                 input: process.stdin,
                 output: process.stdout,
             });
-            const answer = (await reader.question("Choose a loadout: [1] Stable Daily Driver (recommended), [2] Power Boost, [3] Maximum Library, [4] Custom: ")).trim();
+            const answer = (await reader.question("Choose a loadout: [1] Stable Daily Driver (Loadout policy selection), [2] Power Boost, [3] Maximum Library, [4] Custom: ")).trim();
             mode =
                 answer === "2"
                     ? "power"
@@ -225,7 +228,7 @@ async function runSetup(options) {
         let riskApproved = Boolean(options.approveRisk);
         if (!approved) {
             if (!interactive) {
-                console.log("Preview complete; nothing was changed. Re-run with --yes to install this exact screened plan.");
+                console.log(formatCatalogApplyGuidance(Boolean(risky)));
                 return;
             }
             reader ??= createInterface({
@@ -262,7 +265,7 @@ async function runSetup(options) {
         reader?.close();
     }
 }
-const LOADOUT_VERSION = "0.2.3";
+const LOADOUT_VERSION = "0.4.0";
 function durableSchedulerLauncher() {
     return [
         join(dirname(process.execPath), process.platform === "win32" ? "npx.cmd" : "npx"),
@@ -271,6 +274,9 @@ function durableSchedulerLauncher() {
     ];
 }
 const program = new Command();
+function printBeginnerGuide() {
+    console.log(BEGINNER_GUIDE);
+}
 program
     .name("loadout")
     .description("The trusted upgrade layer for AI coding agents")
@@ -285,6 +291,14 @@ program
     // writes its own parse error first, producing two stderr documents and
     // breaking --json-errors consumers.
     .configureOutput({ writeErr: () => undefined });
+program
+    .command("guide")
+    .description("Show the simple, read-only path for using Loadout")
+    .action(printBeginnerGuide);
+program
+    .command("advanced")
+    .description("Explain where to find advanced and maintainer-only commands")
+    .action(() => console.log(ADVANCED_GUIDE));
 program
     .command("setup")
     .description("Preview and install a screened skill loadout for detected agents")
@@ -620,11 +634,14 @@ program
     .command("library")
     .description("Show separate cache, review, installation, and per-agent activation state")
     .option("--json", "emit machine-readable JSON")
+    .option("--all", "show every managed skill and its source package")
     .action(async (options) => {
     const report = await buildLibraryStateReport();
     console.log(options.json
         ? JSON.stringify(report, null, 2)
-        : formatLibraryStateReport(report));
+        : options.all
+            ? formatLibraryStateReport(report)
+            : formatLibrarySummary(report));
 });
 program
     .command("report")
@@ -712,8 +729,8 @@ for (const workflow of ["activate", "optimize"]) {
     program
         .command(workflow)
         .description(workflow === "activate"
-        ? "Select and activate reviewed library skills for a project"
-        : "Scan a project and propose the best reviewed active-set additions")
+        ? "Select and activate inspected library skills for a project"
+        : "Scan a project and propose rule-selected inspected active-set additions")
         .option("--project <path>", "project directory to scan", ".")
         .option("--agents <ids>", "comma-separated agent ids")
         .option("--limit <count>", "maximum active skills per agent", "40")
@@ -891,7 +908,17 @@ program
     .option("--explain", "add deterministic score dimensions, evidence, uncertainty, and remediation")
     .option("--agents <ids>", "limit explained scores to selected agent ids")
     .action(async (options) => {
-    const report = await buildHealthReport({ checkUpdates: options.updates });
+    if (options.updates && !options.json)
+        console.error("Checking managed repositories (4 at a time, 30s per network operation)…");
+    const report = await buildHealthReport({
+        updates: options.updates
+            ? () => buildUpdatePlan(undefined, {
+                onProgress: options.json
+                    ? undefined
+                    : ({ completed, total, packageId }) => console.error(`✓ [${completed}/${total}] ${packageId}`),
+            })
+            : undefined,
+    });
     if (options.agents && !options.explain)
         throw new Error("--agents requires --explain");
     const selectedAgents = parseAgentSelection(options.agents);
@@ -985,6 +1012,29 @@ program
     const snapshot = await applyRemove(plan, { force: options.force });
     console.log(`Removed ${packageId}. Snapshot: ${snapshot}`);
 });
+program
+    .command("uninstall")
+    .description("Preview or completely remove Loadout-managed data")
+    .option("--yes", "remove managed data; otherwise show a preview")
+    .option("--force", "also remove managed files changed outside Loadout")
+    .option("--remove-cli", "also uninstall the global loadout-ai npm command")
+    .action(async (options) => {
+    const plan = await buildUninstallPlan();
+    console.log(formatUninstallPlan(plan));
+    if (!options.yes)
+        return;
+    const result = await applyUninstall(plan, undefined, {
+        force: options.force,
+    });
+    console.log(`Removed ${result.removedPackages} managed package(s), ${result.removedRuntimeTools} runtime tool(s), daily jobs, cache, library, and Loadout state.`);
+    if (options.removeCli) {
+        await uninstallGlobalCli();
+        console.log("Removed the global loadout-ai CLI. Open a new shell before checking the command again.");
+    }
+    else {
+        console.log("The CLI is still installed. Remove it too with: npm uninstall -g loadout-ai");
+    }
+});
 program
     .command("recommend")
     .description("Recommend catalog packages from local project signals")
@@ -1004,6 +1054,7 @@ program
         ? JSON.stringify({
             signals,
             recommendations,
+            recommendationBoundary: RECOMMENDATION_BOUNDARY,
             personalization: options.agent
                 ? {
                     agent: options.agent,
@@ -1015,7 +1066,7 @@ program
 });
 program
     .command("profiles")
-    .description("List tested Loadout profiles or inspect one profile")
+    .description("List Loadout policy profiles or inspect one profile")
     .argument("[name]", "profile name")
     .option("--json", "emit machine-readable JSON")
     .option("--apply-to <path>", "add the selected profile packages to a manifest")
@@ -1132,7 +1183,7 @@ program
     .description("Take ownership of one explicitly selected installed skill without changing its bytes")
     .argument("<skill>", "installed skill name, directory name, or exact path")
     .requiredOption("--agent <id>", "agent that owns the installed skill")
-    .option("--refresh-provenance", "rebuild the reviewed catalog skill index")
+    .option("--refresh-provenance", "rebuild the inspected catalog skill index")
     .option("--yes", "record ownership; otherwise show a dry-run plan")
     .option("--json", "emit machine-readable JSON")
     .action(async (skill, options) => {
@@ -1167,7 +1218,7 @@ program
     .description("Compare an installed or reviewed skill with evidence-related catalog alternatives without changing anything")
     .argument("<skill>", "installed skill name, directory name, or catalog package id")
     .option("--agent <id>", "select one installed agent when names are ambiguous")
-    .option("--refresh", "rebuild the reviewed catalog skill index")
+    .option("--refresh", "rebuild the inspected catalog skill index")
     .option("--offline", "never fetch; use the existing local index only")
     .option("--limit <count>", "maximum alternatives to show", "10")
     .option("--json", "emit the complete machine-readable comparison")
@@ -1508,6 +1559,7 @@ program
                 category: pkg.category,
                 tier: pkg.tier,
                 trustStage: catalogTrustStage(pkg),
+                evidenceLabel: formatCatalogTrustStage(catalogTrustStage(pkg)),
             },
             ranking: explainCatalogScore(pkg),
         }, null, 2));
@@ -1520,12 +1572,16 @@ program
             : formatCatalogCoverage(coverage));
         return;
     }
+    if (options.json) {
+        console.log(JSON.stringify(rankCatalog(result.catalog), null, 2));
+        return;
+    }
     for (const pkg of rankCatalog(result.catalog)) {
         const topics = pkg.topics?.length ? ` — ${pkg.topics.join(", ")}` : "";
         const updated = pkg.lastUpdatedAt
             ? ` — updated ${pkg.lastUpdatedAt.slice(0, 10)}`
             : "";
-        console.log(`${pkg.displayName} [${pkg.tier}; ${catalogTrustStage(pkg)}] ★${pkg.stars ?? "?"} — ${pkg.repository}${topics}${updated}`);
+        console.log(`${pkg.displayName} [${pkg.tier}; ${formatCatalogTrustStage(catalogTrustStage(pkg))}] ★${pkg.stars ?? "?"} — ${pkg.repository}${topics}${updated}`);
     }
     for (const failure of result.failures)
         console.error(`Warning: could not refresh ${failure.repository}: ${failure.error}`);
@@ -1593,7 +1649,7 @@ candidate
     .description("Convert a reviewed dossier into a catalog-record proposal; never edits the catalog")
     .argument("<dossier>", "persisted candidate dossier JSON")
     .requiredOption("--id <id>", "lowercase kebab-case catalog id")
-    .requiredOption("--category <category>", "reviewed catalog category")
+    .requiredOption("--category <category>", "inspected catalog category")
     .requiredOption("--platforms <ids>", "explicitly reviewed comma-separated platforms: windows,macos,linux")
     .option("--display-name <name>", "reviewed display name")
     .option("--description <text>", "reviewed description")
@@ -2103,21 +2159,27 @@ program
     .option("--timeout <milliseconds>", "real connection timeout", "8000")
     .option("--approve-risk", "approve launching the reviewed pinned MCP artifact for --connect")
     .option("--json", "emit machine-readable JSON")
+    .option("--no-key", "list recipes needing no separately billed AI/model API key")
+    .option("--no-model-key", "clear alias for --no-key; service tokens may still be required")
+    .option("--credential-free", "list recipes needing no credential of any kind")
     .action(async (id, options) => {
     if (!id) {
         if (options.connect || options.verify || options.yes)
             throw new Error("Select an MCP recipe id for this operation");
-        const listed = REVIEWED_MCP_RECIPES.map((recipe) => ({
+        const selected = REVIEWED_MCP_RECIPES.filter((recipe) => !((options.key === false || options.modelKey === false) &&
+            recipe.modelApiProviders.length > 0) && !(options.credentialFree && recipe.environment.length > 0));
+        const listed = selected.map((recipe) => ({
             id: recipe.id,
             displayName: recipe.displayName,
             source: recipe.source,
             permissions: recipe.permissions,
             environment: recipe.environment,
+            modelApiProviders: recipe.modelApiProviders,
         }));
         console.log(options.json
             ? JSON.stringify(listed, null, 2)
             : listed
-                .map((recipe) => `${recipe.id} — ${recipe.displayName} — env: ${recipe.environment.length ? recipe.environment.join(", ") : "none"}`)
+                .map((recipe) => `${recipe.id} — ${recipe.displayName} — ${recipe.modelApiProviders.length ? `AI API required: ${recipe.modelApiProviders.join(", ")}` : "No AI API key required"} · ${recipe.environment.length ? `${recipe.environment.includes("GITHUB_PERSONAL_ACCESS_TOKEN") ? "GitHub token required" : `service credential required: ${recipe.environment.join(", ")}`}` : "no other credential"}`)
                 .join("\n"));
         return;
     }
@@ -2174,6 +2236,7 @@ program
         return;
     }
     const snapshot = await applyMcpConfigPlan(plan.config);
+    await recordInstallTransaction([], [{ packageId: `mcp-recipe:${id}`, plan: plan.config }], snapshot.id);
     console.log(options.json
         ? JSON.stringify({ plan, snapshot }, null, 2)
         : `${formatMcpRecipePlan(plan)}\nConfigured. Snapshot: ${snapshot.id}\nAuthorize the service separately, then run: loadout mcp-recipe ${id} --config ${plan.config.path} --verify`);
@@ -2528,7 +2591,7 @@ program
         });
         console.log(formatPreparedCatalogInstall(prepared));
         if (!options.yes) {
-            console.log("Preview complete; nothing was changed. Use --yes after reviewing to install this exact plan.");
+            console.log(formatCatalogApplyGuidance(prepared.entries.some((entry) => entry.safety.approvalRequired)));
             return;
         }
         const snapshotId = await applyPreparedCatalogInstall(prepared, {
@@ -2608,30 +2671,112 @@ program
         const chosen = options.snapshot ?? snapshotIds.at(-1);
         if (!chosen)
             throw new Error("No Loadout snapshots found");
-        await restoreSnapshot(await readSnapshot(chosen));
+        await restoreSnapshot(await readSnapshot(chosen), {
+            requireUnchangedPostMutationState: true,
+        });
         return chosen;
     });
     console.log(`Restored snapshot ${selected}`);
 });
 program
     .command("update")
-    .description("Plan updates, or apply one explicitly selected package update")
+    .description("Check the saved profile and every managed package for updates")
     .option("--json", "emit machine-readable JSON")
-    .option("--apply", "apply the selected update")
+    .option("--yes", "apply reviewed profile drift and safe screened package updates")
+    .option("--apply", "legacy alias for --yes with --package")
     .option("--package <id>", "managed package id to update")
     .option("--approve-risk", "explicitly approve an update containing blocked safety findings")
     .action(async (options) => {
-    if (options.apply) {
-        if (!options.package)
-            throw new Error("--apply requires --package <id>");
+    const applying = Boolean(options.apply || options.yes);
+    if (options.apply && !options.package)
+        throw new Error("--apply requires --package <id>");
+    if (applying && options.package) {
         const result = await applyPackageUpdate(options.package, {
             approveRisk: options.approveRisk,
         });
-        console.log(`Updated ${options.package} to ${result.commit}. Snapshot: ${result.snapshotId}`);
+        console.log(options.json
+            ? JSON.stringify({ packageId: options.package, ...result }, null, 2)
+            : `Updated ${options.package} to ${result.commit}. Snapshot: ${result.snapshotId}`);
         return;
     }
-    const plans = await buildUpdatePlan();
-    console.log(options.json ? JSON.stringify(plans, null, 2) : formatUpdatePlan(plans));
+    const catalog = await loadEffectiveCatalog();
+    let profile = await evaluateInstalledProfile(catalog);
+    let profileSnapshotId;
+    const appliedPackages = [];
+    const failedPackages = [];
+    if (applying && profile.installed && profile.needsRefresh) {
+        const saved = (await readInstallState()).profile;
+        const prepared = await prepareCatalogInstall({
+            mode: saved.mode,
+            ...(saved.packageIds ? { packageIds: saved.packageIds } : {}),
+        }, {
+            requestedAgents: saved.agents,
+            catalog,
+            access: { modelApis: [] },
+            onProgress: printSetupProgress,
+        });
+        profileSnapshotId = await applyPreparedCatalogInstall(prepared, {
+            approveRisk: options.approveRisk,
+        });
+        if (!options.json)
+            console.log(`Applied reviewed ${saved.mode} profile changes. Snapshot: ${profileSnapshotId}`);
+        profile = await evaluateInstalledProfile(catalog);
+    }
+    if (!options.json)
+        console.error("Checking managed repositories (4 at a time, 30s per network operation)…");
+    let plans = await buildUpdatePlan(undefined, {
+        packageId: options.package,
+        onProgress: options.json
+            ? undefined
+            : ({ completed, total, packageId }) => console.error(`✓ [${completed}/${total}] ${packageId}`),
+    });
+    if (options.package && plans.length === 0)
+        throw new Error(`No Loadout-managed installation named '${options.package}' was found. Run \`loadout list\` to see tracked packages.`);
+    if (applying) {
+        const safe = selectSafeAutomaticUpdates(plans);
+        for (const plan of safe)
+            try {
+                await applyPackageUpdate(plan.packageId);
+                appliedPackages.push(plan.packageId);
+            }
+            catch (error) {
+                failedPackages.push({
+                    packageId: plan.packageId,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+            }
+        plans = await buildUpdatePlan(undefined, {
+            onProgress: options.json
+                ? undefined
+                : ({ completed, total, packageId }) => console.error(`✓ [${completed}/${total}] ${packageId}`),
+        });
+        if (!options.json) {
+            console.log(appliedPackages.length
+                ? `Updated safely: ${appliedPackages.join(", ")}`
+                : "No safe active package update needed applying.");
+            for (const item of failedPackages)
+                console.log(`Could not update ${item.packageId}: ${item.error}`);
+            const held = plans.filter((plan) => plan.status === "update-available" &&
+                (plan.approvalRequired || plan.disabledAgents?.length));
+            if (held.length)
+                console.log(`Held for explicit review: ${held.map((item) => item.packageId).join(", ")}`);
+        }
+    }
+    console.log(options.json
+        ? JSON.stringify({
+            profile,
+            packages: plans,
+            ...(applying
+                ? {
+                    applied: {
+                        profileSnapshotId,
+                        packages: appliedPackages,
+                        failures: failedPackages,
+                    },
+                }
+                : {}),
+        }, null, 2)
+        : `${formatInstalledProfileStatus(profile)}\n\n${formatUpdatePlan(plans)}`);
 });
 program
     .command("convert")
@@ -2732,7 +2877,19 @@ program
     });
     await handle.close();
 });
-program.action(() => runSetup({ package: [] }));
+for (const command of program.commands)
+    // Commander supports `hidden` when a command is created. These commands are
+    // registered by separate feature blocks, so use the same runtime flag here
+    // rather than `Option#hideHelp`, which does not exist on Command objects.
+    if (HIDDEN_FROM_FIRST_SCREEN.has(command.name()))
+        command._hidden = true;
+program.addHelpText("after", "\nStart here: `loadout guide` shows the safe everyday path. `loadout advanced` lists the retained maintainer and integration commands.\n");
+program.argument("[unknown-command]");
+program.action((unknownCommand) => {
+    if (unknownCommand)
+        throw new Error(`Unknown command '${unknownCommand}'. Run 'loadout --help' to list available commands.`);
+    printBeginnerGuide();
+});
 try {
     await recoverPendingTransactions();
     await program.parseAsync();

package/dist/src/core/active-set.js

@@ -156,9 +156,13 @@ async function activeTreeFiles(targets) {
 export async function buildLibraryStateReport() {
     const state = await readInstallState();
     const records = allActivationRecords(state.installs, state.activations ?? []);
+    const repositories = Object.fromEntries(state.installs
+        .filter((install) => Boolean(install.repository))
+        .map((install) => [install.packageId, install.repository]));
     return {
         generatedAt: new Date().toISOString(),
         records,
+        repositories,
         counts: {
             packages: new Set(records.map((record) => record.packageId)).size,
             downloaded: records.filter((record) => record.cacheState === "downloaded")
@@ -357,17 +361,48 @@ export async function applyActivationChange(plan) {
     });
     return applied.snapshotId;
 }
+function formatLibraryHeadline(report) {
+    return `Managed library: ${report.counts.packages} package(s), ${report.counts.active} active, ${report.counts.disabled} disabled, ${report.counts.downloaded} cached`;
+}
+function countByAgent(report, activationState) {
+    const counts = new Map();
+    for (const record of report.records)
+        if (record.activationState === activationState)
+            counts.set(record.agent, (counts.get(record.agent) ?? 0) + 1);
+    return [...counts]
+        .sort(([left], [right]) => left.localeCompare(right))
+        .map(([agent, count]) => `${agent} ${count}`)
+        .join(", ");
+}
+/** Concise default for people with a broad Maximum library. */
+export function formatLibrarySummary(report) {
+    if (!report.records.length)
+        return "No Loadout-managed skill activations exist.";
+    return [
+        formatLibraryHeadline(report),
+        `Active now: ${countByAgent(report, "active") || "none"}`,
+        `Disabled library: ${countByAgent(report, "disabled") || "none"}`,
+        "Disabled library skills are reviewed copies, not extra agent context.",
+        ...(report.migrationPending
+            ? [
+                `Migration pending: ${report.migrationPending} active installation(s) will be cached on first disable.`,
+            ]
+            : []),
+        "Use `loadout library --all` for every skill, source package, and activation state.",
+    ].join("\n");
+}
+/** Full per-skill provenance report for audits and explicit investigation. */
 export function formatLibraryStateReport(report) {
     if (!report.records.length)
         return "No Loadout-managed skill activations exist.";
     return [
-        `Managed library: ${report.counts.packages} package(s), ${report.counts.active} active, ${report.counts.disabled} disabled, ${report.counts.downloaded} cached`,
+        formatLibraryHeadline(report),
         ...(report.migrationPending
             ? [
                 `Migration pending: ${report.migrationPending} active installation(s) will be cached on first disable.`,
             ]
             : []),
-        ...report.records.map((record) => `${record.packageId}${record.unitId ? `/${record.unitId}` : ""} — ${record.agent} — cache:${record.cacheState} review:${record.reviewState} install:${record.installationState} activation:${record.activationState} — ${record.targets.length} target(s)`),
+        ...report.records.map((record) => `${record.packageId}${record.unitId ? `/${record.unitId}` : ""}${report.repositories[record.packageId] ? ` (${report.repositories[record.packageId]})` : ""} — ${record.agent} — cache:${record.cacheState} review:${record.reviewState} install:${record.installationState} activation:${record.activationState} — ${record.targets.length} target(s)`),
     ].join("\n");
 }
 export function formatActivationPlan(plan) {

package/dist/src/core/adapters.js

@@ -140,6 +140,16 @@ export function adapterCapabilities(agent) {
         throw new Error(`No adapter capability declaration for '${agent}'`);
     return found;
 }
+/**
+ * Return the display names of agents with an explicitly declared native skill
+ * directory. This is a filesystem-support boundary, not a claim about native
+ * application runtime behavior.
+ */
+export function supportedAdapterNames(adapters = ADAPTER_CAPABILITIES) {
+    return adapters
+        .filter((adapter) => adapter.components.skill === "native")
+        .map((adapter) => adapter.displayName);
+}
 /**
  * Produce a read-only native-skill plan for one agent.  This is deliberately
  * narrower than package normalization: adapters may only target a directory