loadout-ai 0.4.0 → 0.5.0

package/catalog/packages.json

@@ -1146,5 +1146,31 @@
       "evidencePaths": ["server.js", "package.json"],
       "verifiedAt": "2026-07-16T08:45:18Z"
     }
+  },
+  {
+    "id": "obsidian-skills",
+    "displayName": "Obsidian Skills",
+    "repository": "kepano/obsidian-skills",
+    "description": "Agent skills for working with Obsidian Markdown, Bases, JSON Canvas, Defuddle, and the Obsidian CLI.",
+    "category": "knowledge-management",
+    "tier": "community",
+    "license": "MIT",
+    "components": ["skill", "plugin"],
+    "operatingSystems": ["windows", "macos", "linux"],
+    "stars": 42827,
+    "pushedAt": "2026-06-08T16:12:01Z",
+    "source": {
+      "type": "github",
+      "url": "https://github.com/kepano/obsidian-skills",
+      "defaultBranch": "main",
+      "commit": "a1dc48e68138490d522c04cbf5822214c6eb1202",
+      "evidencePaths": [
+        "skills/obsidian-markdown/SKILL.md",
+        "skills/obsidian-bases/SKILL.md",
+        "skills/json-canvas/SKILL.md",
+        ".claude-plugin/plugin.json"
+      ],
+      "verifiedAt": "2026-07-21T08:45:00Z"
+    }
   }
 ]

package/dist/src/cli.js

@@ -3,21 +3,21 @@ import { Command, CommanderError } from "commander";
 import { existsSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { explainCatalogScore, loadEffectiveCatalog, loadCatalog, rankCatalog, refreshCatalog, } from "./core/catalog.js";
-import { detectAgents, parseAgentSelection } from "./core/paths.js";
+import { detectAgents, parseAgentSelection, userHome } from "./core/paths.js";
 import { readFile } from "node:fs/promises";
 import { dirname, join, resolve } from "node:path";
 import { buildSkillPlan, applySkillInstall, installedAgents, } from "./core/install.js";
-import { listSnapshotIds, readSnapshot, restoreSnapshot, } from "./core/snapshot.js";
+import { listSnapshotIds, readSnapshot, restoreSnapshot, summarizeSnapshot, } from "./core/snapshot.js";
 import { fetchRepositorySnapshot } from "./core/source.js";
 import { discoverMcpManifests, summarizeMcpManifest, planMcpConfig, summarizeMcpConfigPlan, applyMcpConfigPlan, } from "./core/mcp.js";
-import { REVIEWED_MCP_RECIPES, findMcpRecipe, formatMcpRecipePlan, planMcpRecipe, verifyMcpRecipe, verifyMcpRecipeConnection, } from "./core/mcp-recipes.js";
+import { REVIEWED_MCP_RECIPES, buildMcpRecipeServer, findMcpRecipe, formatMcpRecipePlan, planMcpRecipe, verifyMcpRecipe, verifyMcpRecipeConnection, } from "./core/mcp-recipes.js";
 import { runDoctor, formatDoctorReport } from "./core/doctor.js";
 import { applyPackageUpdate, buildUpdatePlan, formatUpdatePlan, selectSafeAutomaticUpdates, } from "./core/update.js";
 import { startApiServer } from "./core/api.js";
 import { inspectPackage, formatPackageInspection } from "./core/package.js";
 import { addManifestPackage, applyProfileToManifest, initManifest, readManifest, removeManifestPackage, writeLockfile, } from "./core/manifest.js";
 import { buildHealthReport, formatHealthReport } from "./core/health.js";
-import { readInstallState, recordInstallTransaction } from "./core/state.js";
+import { installStatePath, readInstallState, recordInstallTransaction, recordMcpInstall, } from "./core/state.js";
 import { applyRemove, planRemove } from "./core/remove.js";
 import { applyUninstall, buildUninstallPlan, formatUninstallPlan, uninstallGlobalCli, } from "./core/uninstall.js";
 import { evaluateInstalledProfile, formatInstalledProfileStatus, } from "./core/profile-state.js";
@@ -31,8 +31,7 @@ import { ADAPTER_CAPABILITIES, buildAdapterCapabilityGaps, formatAdapterCapabili
 import { formatAgentInventory, inspectAgents, } from "./core/agent-inspection.js";
 import { generateSigningKeys, signJsonFile, verifyJsonFile, } from "./core/signing.js";
 import { applyPortableImport, exportPortableLoadout, planPortableImport, } from "./core/portable.js";
-import { applyCodexMcpConfigPlan, defaultCodexMcpConfigPath, planCodexMcpConfig, } from "./core/codex-mcp.js";
-import { formatDemoResult, runIsolatedDemo } from "./core/demo.js";
+import { applyCodexMcpConfigPlan, codexMcpServerFingerprint, defaultCodexMcpConfigPath, planCodexMcpConfig, } from "./core/codex-mcp.js";
 import { catalogTrustStage, formatCatalogTrustStage, resolveCatalogProfile, } from "./core/profiles.js";
 import { discoverHackerNewsRepositories } from "./core/community.js";
 import { discoverPrivateRepositories } from "./core/private-discovery.js";
@@ -44,7 +43,6 @@ import { runDisposableSandbox } from "./core/sandbox.js";
 import { compileConversion, } from "./core/conversion.js";
 import { writeFileAtomically } from "./core/atomic-file.js";
 import { formatCanaryResult, runCanary } from "./core/canary.js";
-import { startDashboardServer } from "./dashboard.js";
 import { applyPreparedCatalogInstall, formatCatalogApplyGuidance, formatPreparedCatalogInstall, prepareCatalogInstall, } from "./core/catalog-install.js";
 import { formatInstalledSkillInventory, scanInstalledSkills, } from "./core/skill-inventory.js";
 import { enrichInventoryWithProvenance, formatProvenanceSummary, resolveCatalogSkillIndex, } from "./core/provenance.js";
@@ -222,7 +220,7 @@ async function runSetup(options) {
             onProgress: printSetupProgress,
             access,
         });
-        console.log(`\n${formatPreparedCatalogInstall(prepared)}\n`);
+        console.log(`\n${formatPreparedCatalogInstall(prepared, { details: options.details })}\n`);
         const risky = riskyPackageSummary(prepared);
         let approved = Boolean(options.yes);
         let riskApproved = Boolean(options.approveRisk);
@@ -265,7 +263,7 @@ async function runSetup(options) {
         reader?.close();
     }
 }
-const LOADOUT_VERSION = "0.4.0";
+const LOADOUT_VERSION = "0.5.0";
 function durableSchedulerLauncher() {
     return [
         join(dirname(process.execPath), process.platform === "win32" ? "npx.cmd" : "npx"),
@@ -308,6 +306,7 @@ program
     .option("--api-access <providers>", "separately billed model API access: none, openai, anthropic, openrouter, or other (comma-separated; never a key)")
     .option("-y, --yes", "install after preparing the screened plan")
     .option("--approve-risk", "approve reviewed safety findings in non-interactive mode")
+    .option("--details", "show every quarantined and deferred unit")
     .action((options) => runSetup(options));
 program
     .command("upgrade")
@@ -1077,6 +1076,12 @@ program
             : Object.entries(TESTED_PROFILES)
                 .map(([id, profile]) => `${id} — ${profile.description}`)
                 .join("\n"));
+    if (name === "custom" && !options.applyTo) {
+        const profile = TESTED_PROFILES.custom;
+        return console.log(options.json
+            ? JSON.stringify({ name, ...profile, packages: [] }, null, 2)
+            : `custom: ${profile.description}\n  Use: loadout setup --mode custom --package <id>`);
+    }
     const packages = profileManifestPackages(name, await loadEffectiveCatalog());
     if (options.applyTo) {
         const manifest = await applyProfileToManifest(options.applyTo, name, packages);
@@ -1465,26 +1470,6 @@ benchmark
     if (!summary.withinBudget)
         process.exitCode = 2;
 });
-program
-    .command("demo")
-    .alias("test-drive")
-    .description("Test-drive a reviewed install + rollback in a disposable profile; never touches local agent config")
-    .option("--repository <owner/repo>", "public GitHub skill repository", "obra/superpowers")
-    .option("--package <id>", "package identifier", "obra-superpowers")
-    .option("--agents <ids>", "comma-separated virtual demo targets", "codex")
-    .option("--keep", "retain the isolated profile after install for inspection")
-    .option("--json", "emit the demo result as JSON")
-    .action(async (options) => {
-    const result = await runIsolatedDemo({
-        repository: options.repository,
-        packageId: options.package,
-        agents: parseAgentSelection(options.agents),
-        keep: options.keep,
-    });
-    console.log(options.json
-        ? JSON.stringify(result, null, 2)
-        : formatDemoResult(result));
-});
 program
     .command("capabilities")
     .description("Show honest native, adapted, and unsupported adapter capabilities")
@@ -2150,6 +2135,7 @@ program
     .command("mcp-recipe")
     .description("Preview/configure a reviewed MCP recipe, or explicitly verify its real connection")
     .argument("[id]", "recipe id; omit to list reviewed recipes")
+    .option("--agent <id>", "target host: codex or claude-code; selects its default config format and path")
     .option("--config <path>", "target JSON MCP config path")
     .option("--yes", "write the reviewed server entry after preview")
     .option("--verify", "verify the configured entry without starting a server")
@@ -2176,11 +2162,14 @@ program
             environment: recipe.environment,
             modelApiProviders: recipe.modelApiProviders,
         }));
-        console.log(options.json
+        const output = options.json
             ? JSON.stringify(listed, null, 2)
             : listed
                 .map((recipe) => `${recipe.id} — ${recipe.displayName} — ${recipe.modelApiProviders.length ? `AI API required: ${recipe.modelApiProviders.join(", ")}` : "No AI API key required"} · ${recipe.environment.length ? `${recipe.environment.includes("GITHUB_PERSONAL_ACCESS_TOKEN") ? "GitHub token required" : `service credential required: ${recipe.environment.join(", ")}`}` : "no other credential"}`)
-                .join("\n"));
+                .join("\n");
+        console.log(output);
+        if (!options.json)
+            console.log("\nInstall for one host (preview first):\n  loadout mcp-recipe playwright --agent codex\n  loadout mcp-recipe playwright --agent claude-code");
         return;
     }
     if (options.connect) {
@@ -2210,12 +2199,41 @@ program
         }
         return;
     }
-    if (!options.config)
-        throw new Error("--config is required for recipe planning or --verify");
+    if (options.agent &&
+        options.agent !== "codex" &&
+        options.agent !== "claude-code")
+        throw new Error("--agent must be codex or claude-code");
+    if (options.agent && options.config)
+        throw new Error("Choose --agent for a managed default path or --config for an explicit JSON path, not both");
+    const configPath = options.config ??
+        (options.agent === "codex"
+            ? defaultCodexMcpConfigPath()
+            : options.agent === "claude-code"
+                ? join(userHome(), ".claude.json")
+                : undefined);
+    if (!configPath)
+        throw new Error("Choose --agent codex, --agent claude-code, or an explicit --config path");
     if (options.verify) {
         if (options.yes)
             throw new Error("--verify cannot be combined with --yes");
-        const verification = await verifyMcpRecipe(id, options.config);
+        if (options.agent === "codex") {
+            const recipe = findMcpRecipe(id);
+            let content = "";
+            try {
+                content = await readFile(configPath, "utf8");
+            }
+            catch {
+                // Missing config is rendered as a normal not-configured result.
+            }
+            const configured = Boolean(codexMcpServerFingerprint(content, recipe.serverName));
+            console.log(options.json
+                ? JSON.stringify({ recipeId: id, configPath, configured }, null, 2)
+                : `${configured ? "Configured" : "Not configured"}: ${id}\nCodex config: ${configPath}\nConfiguration presence does not launch the MCP server; add --connect --approve-risk for a bounded handshake.`);
+            if (!configured)
+                process.exitCode = 1;
+            return;
+        }
+        const verification = await verifyMcpRecipe(id, configPath);
         console.log(options.json
             ? JSON.stringify(verification, null, 2)
             : `${verification.configured ? "Configured" : "Not configured"}: ${verification.recipeId}\n${[...verification.checks, ...verification.warnings].join("\n")}`);
@@ -2225,21 +2243,82 @@ program
     }
     const recipe = findMcpRecipe(id);
     const credentialReferences = parseMcpCredentialMappings(recipe, options.credential, options.credentialAccount);
-    const plan = await planMcpRecipe(id, options.config, {
+    if (options.agent === "codex") {
+        const server = buildMcpRecipeServer(id, configPath, {
+            credentialReferences,
+            requireResolvedCredentials: Boolean(options.yes),
+        });
+        const plan = await planCodexMcpConfig(configPath, server, server.name);
+        const recipe = findMcpRecipe(id);
+        const preview = [
+            `MCP recipe: ${recipe.displayName}`,
+            `Target: Codex`,
+            `Config: ${plan.path}`,
+            `Change: ${plan.summary}`,
+            `Artifact: ${recipe.artifact}`,
+            `Permissions: ${recipe.permissions.join(", ")}`,
+            recipe.environment.length
+                ? `Credential references required: ${recipe.environment.join(", ")}`
+                : "Credentials: none",
+        ].join("\n");
+        if (!options.yes) {
+            console.log(options.json
+                ? JSON.stringify({
+                    recipe,
+                    agent: "codex",
+                    path: plan.path,
+                    summary: plan.summary,
+                }, null, 2)
+                : `${preview}\nDry run only. Re-run with --yes to add this reviewed Codex MCP server.`);
+            return;
+        }
+        const fingerprint = codexMcpServerFingerprint(plan.proposed, recipe.serverName);
+        if (!fingerprint)
+            throw new Error("Could not fingerprint the applied Codex MCP entry");
+        const snapshot = await applyCodexMcpConfigPlan(plan, {
+            extraTargets: [installStatePath()],
+            afterApply: async (_result, transactionSnapshot) => recordMcpInstall({
+                packageId: `mcp-recipe:${id}:codex`,
+                configPath: plan.path,
+                serverName: recipe.serverName,
+                fingerprint,
+                snapshotId: transactionSnapshot.id,
+                installedAt: new Date().toISOString(),
+                configFormat: "codex-toml",
+            }),
+        });
+        console.log(options.json
+            ? JSON.stringify({
+                recipe,
+                agent: "codex",
+                snapshotId: snapshot.rollbackSnapshotId,
+            }, null, 2)
+            : `${preview}\nConfigured for Codex. Managed package: mcp-recipe:${id}:codex\nRollback: loadout rollback --snapshot ${snapshot.rollbackSnapshotId}\nNext: loadout mcp-recipe ${id} --agent codex --verify`);
+        return;
+    }
+    const plan = await planMcpRecipe(id, configPath, {
         credentialReferences,
         requireResolvedCredentials: Boolean(options.yes),
     });
     if (!options.yes) {
+        const target = options.agent === "claude-code" ? "Target: Claude Code\n" : "";
         console.log(options.json
-            ? JSON.stringify(plan, null, 2)
-            : `${formatMcpRecipePlan(plan)}\nDry run only. Re-run with --yes to write this server entry.`);
+            ? JSON.stringify(options.agent ? { agent: options.agent, ...plan } : plan, null, 2)
+            : `${target}${formatMcpRecipePlan(plan)}\nDry run only. Re-run with --yes to write this server entry.`);
         return;
     }
-    const snapshot = await applyMcpConfigPlan(plan.config);
-    await recordInstallTransaction([], [{ packageId: `mcp-recipe:${id}`, plan: plan.config }], snapshot.id);
+    const managedId = options.agent
+        ? `mcp-recipe:${id}:${options.agent}`
+        : `mcp-recipe:${id}`;
+    const snapshot = await applyMcpConfigPlan(plan.config, {
+        extraTargets: [installStatePath()],
+        afterApply: async (_result, transactionSnapshot) => {
+            await recordInstallTransaction([], [{ packageId: managedId, plan: plan.config }], transactionSnapshot.id);
+        },
+    });
     console.log(options.json
         ? JSON.stringify({ plan, snapshot }, null, 2)
-        : `${formatMcpRecipePlan(plan)}\nConfigured. Snapshot: ${snapshot.id}\nAuthorize the service separately, then run: loadout mcp-recipe ${id} --config ${plan.config.path} --verify`);
+        : `${options.agent === "claude-code" ? "Target: Claude Code\n" : ""}${formatMcpRecipePlan(plan)}\nConfigured${options.agent ? " for Claude Code" : ""}. Managed package: ${managedId}\nRollback: loadout rollback --snapshot ${snapshot.rollbackSnapshotId}\nAuthorize the service separately, then run: loadout mcp-recipe ${id} ${options.agent ? `--agent ${options.agent}` : `--config ${plan.config.path}`} --verify`);
 });
 program
     .command("mcp")
@@ -2439,7 +2518,7 @@ program
         return;
     }
     const snapshot = await applyMcpConfigPlan(plan);
-    console.log(`Applied successfully. Snapshot: ${snapshot.id}`);
+    console.log(`Applied successfully. Snapshot: ${snapshot.rollbackSnapshotId}`);
 });
 program
     .command("codex-mcp-config")
@@ -2478,7 +2557,7 @@ program
     if (!options.yes)
         return console.log("Dry run only. Re-run with --yes to add this Codex MCP server.");
     const snapshot = await applyCodexMcpConfigPlan(plan);
-    console.log(`Applied successfully. Snapshot: ${snapshot.id}`);
+    console.log(`Applied successfully. Snapshot: ${snapshot.rollbackSnapshotId}`);
 });
 program
     .command("plan")
@@ -2575,6 +2654,7 @@ program
     .option("--agents <ids>", "comma-separated agent ids; defaults to all detected agents")
     .option("--yes", "apply without interactive confirmation")
     .option("--approve-risk", "approve reviewed safety findings for catalog mode")
+    .option("--details", "show every quarantined and deferred unit")
     .action(async (options) => {
     const packageIds = options.package ?? [];
     const hasSource = Boolean(options.source || options.repository);
@@ -2589,7 +2669,9 @@ program
             requestedAgents: parseAgentSelection(options.agents),
             onProgress: printSetupProgress,
         });
-        console.log(formatPreparedCatalogInstall(prepared));
+        console.log(formatPreparedCatalogInstall(prepared, {
+            details: options.details,
+        }));
         if (!options.yes) {
             console.log(formatCatalogApplyGuidance(prepared.entries.some((entry) => entry.safety.approvalRequired)));
             return;
@@ -2662,8 +2744,15 @@ program
         const snapshotIds = await listSnapshotIds();
         if (!snapshotIds.length)
             return console.log("No Loadout snapshots found.");
-        for (const id of snapshotIds)
-            console.log(id);
+        console.log("Loadout rollback history (oldest to newest):");
+        for (const [index, id] of snapshotIds.entries()) {
+            const summary = summarizeSnapshot(await readSnapshot(id));
+            const impact = summary.changedEntries === undefined
+                ? "legacy impact unknown"
+                : `${summary.changedEntries} changed filesystem entr${summary.changedEntries === 1 ? "y" : "ies"}`;
+            console.log(`${index === snapshotIds.length - 1 ? "latest" : "      "}  ${summary.createdAt}  ${summary.label}  ${impact}  ${summary.roots} root(s)  ${id}`);
+        }
+        console.log("Restore an exact entry with: loadout rollback --snapshot <id>");
         return;
     }
     const selected = await withMutationLock(async () => {
@@ -2671,12 +2760,15 @@ program
         const chosen = options.snapshot ?? snapshotIds.at(-1);
         if (!chosen)
             throw new Error("No Loadout snapshots found");
-        await restoreSnapshot(await readSnapshot(chosen), {
+        const snapshot = await readSnapshot(chosen);
+        await restoreSnapshot(snapshot, {
             requireUnchangedPostMutationState: true,
         });
-        return chosen;
+        return summarizeSnapshot(snapshot);
     });
-    console.log(`Restored snapshot ${selected}`);
+    console.log(`Restored ${selected.label} snapshot ${selected.id} (${selected.changedEntries ?? "unknown"} recorded changed filesystem entries across ${selected.roots} root(s)).`);
+    if (selected.changedEntries === 0)
+        console.log("This snapshot recorded no effective filesystem change. Choose an older explicit snapshot if you meant to undo an earlier installation.");
 });
 program
     .command("update")
@@ -2844,26 +2936,6 @@ program
     if (result.status === "blocked")
         process.exitCode = 1;
 });
-program
-    .command("dashboard")
-    .description("Start the local Loadout dashboard on a loopback-only port")
-    .option("--port <port>", "TCP port (0 selects an available port)", "0")
-    .action(async (options) => {
-    const port = Number(options.port);
-    if (!Number.isInteger(port) || port < 0 || port > 65_535)
-        throw new Error("--port must be an integer between 0 and 65535");
-    const handle = await startDashboardServer({}, port);
-    console.log(`Loadout dashboard: http://${handle.host}:${handle.port}`);
-    await new Promise((resolve) => {
-        const stop = () => {
-            process.off("SIGINT", stop);
-            process.off("SIGTERM", stop);
-            void handle.close().then(resolve);
-        };
-        process.on("SIGINT", stop);
-        process.on("SIGTERM", stop);
-    });
-});
 program
     .command("serve")
     .description("Start a loopback-only read-only API for status, health, catalog, and updates")