loadout-ai 0.5.9 → 0.7.0

package/dist/src/commands/lifecycle.js

@@ -1,20 +1,18 @@
-import { loadEffectiveCatalog, } from "../core/catalog.js";
-import { detectAgents, parseAgentSelection } from "../core/paths.js";
+import { loadEffectiveCatalog, } from "../core/catalog/catalog.js";
+import { detectAgents, parseAgentSelection } from "../core/agents/paths.js";
 import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
-import { buildSkillPlan, applySkillInstall, installedAgents, } from "../core/install.js";
-import { listSnapshotIds, readSnapshot, restoreSnapshot, summarizeSnapshot, } from "../core/snapshot.js";
-import { fetchRepositorySnapshot } from "../core/source.js";
-import { applyPackageUpdate, buildUpdatePlan, formatUpdatePlan, selectSafeAutomaticUpdates, } from "../core/update.js";
-import { startApiServer } from "../core/api.js";
-import { readInstallState } from "../core/state.js";
-import { evaluateInstalledProfile, formatInstalledProfileStatus, } from "../core/profile-state.js";
-import { resolveCatalogProfile } from "../core/profiles.js";
-import { compileConversion, } from "../core/conversion.js";
-import { writeFileAtomically } from "../core/atomic-file.js";
-import { formatCanaryResult, runCanary } from "../core/canary.js";
-import { applyPreparedCatalogInstall, formatCatalogApplyGuidance, formatPreparedCatalogInstall, prepareCatalogInstall, } from "../core/catalog-install.js";
-import { withMutationLock } from "../core/transaction.js";
+import { buildSkillPlan, applySkillInstall, installedAgents, } from "../core/install/install.js";
+import { listSnapshotIds, readSnapshot, restoreSnapshot, summarizeSnapshot, } from "../core/install/snapshot.js";
+import { fetchRepositorySnapshot } from "../core/install/source.js";
+import { applyPackageUpdate, buildUpdatePlan, formatUpdatePlan, selectSafeAutomaticUpdates, } from "../core/install/update.js";
+import { readInstallState } from "../core/workspace/state.js";
+import { evaluateInstalledProfile, formatInstalledProfileStatus, } from "../core/workspace/profile-state.js";
+import { resolveCatalogProfile } from "../core/catalog/profiles.js";
+import { compileConversion, } from "../core/agents/conversion.js";
+import { writeFileAtomically } from "../core/install/atomic-file.js";
+import { applyPreparedCatalogInstall, formatCatalogApplyGuidance, formatPreparedCatalogInstall, prepareCatalogInstall, } from "../core/install/catalog-install.js";
+import { withMutationLock } from "../core/install/transaction.js";
 import { setupSelection, printSetupProgress } from "./support.js";
 export function registerLifecycle(program) {
     program
@@ -372,40 +370,4 @@ export function registerLifecycle(program) {
                     ? "Manual approval is required before using this artifact."
                     : "No additional approval is required."));
     });
-    program
-        .command("canary")
-        .description("Run a static canary policy gate for a candidate without installing it")
-        .requiredOption("--source <directory>", "candidate package directory")
-        .requiredOption("--package <id>", "candidate package id")
-        .option("--repository <owner/repo>", "candidate repository")
-        .option("--commit <sha>", "candidate immutable commit")
-        .option("--approve", "approve promotion if a promotion callback is supplied")
-        .option("--allow-unready", "allow review findings in the static gate")
-        .option("--json", "emit machine-readable JSON")
-        .action(async (options) => {
-        const result = await runCanary({
-            packageId: options.package,
-            root: options.source,
-            ...(options.repository ? { repository: options.repository } : {}),
-            ...(options.commit ? { commit: options.commit } : {}),
-        }, { enabled: true, requireStaticReady: !options.allowUnready }, { approve: options.approve });
-        console.log(options.json
-            ? JSON.stringify(result, null, 2)
-            : formatCanaryResult(result));
-        if (result.status === "blocked")
-            process.exitCode = 1;
-    });
-    program
-        .command("serve")
-        .description("Start a loopback-only read-only API for status, health, catalog, and updates")
-        .option("--port <port>", "TCP port (0 selects an available port)", "0")
-        .action(async (options) => {
-        const handle = await startApiServer({ port: Number(options.port) });
-        console.log(`Loadout API listening at http://${handle.host}:${handle.port}`);
-        await new Promise((resolve) => {
-            process.once("SIGINT", resolve);
-            process.once("SIGTERM", resolve);
-        });
-        await handle.close();
-    });
 }

package/dist/src/commands/mcp.js

@@ -1,16 +1,15 @@
-import { userHome } from "../core/paths.js";
+import { userHome } from "../core/agents/paths.js";
 import { readFile } from "node:fs/promises";
 import { join } from "node:path";
-import { fetchRepositorySnapshot } from "../core/source.js";
-import { discoverMcpManifests, summarizeMcpManifest, planMcpConfig, summarizeMcpConfigPlan, applyMcpConfigPlan, } from "../core/mcp.js";
-import { REVIEWED_MCP_RECIPES, buildMcpRecipeServer, findMcpRecipe, formatMcpRecipePlan, planMcpRecipe, verifyMcpRecipe, verifyMcpRecipeConnection, } from "../core/mcp-recipes.js";
-import { inspectPackage, formatPackageInspection } from "../core/package.js";
-import { installStatePath, recordInstallTransaction, recordMcpInstall, } from "../core/state.js";
-import { applyCodexMcpConfigPlan, codexMcpServerFingerprint, defaultCodexMcpConfigPath, planCodexMcpConfig, } from "../core/codex-mcp.js";
-import { evaluatePackage, formatPackageEvaluation } from "../core/evaluate.js";
-import { checkForUpdates, startUpdateWatcher } from "../core/update-watch.js";
-import { runDisposableSandbox } from "../core/sandbox.js";
-import { applyNativeScheduler, formatNativeScheduler, planNativeScheduler, } from "../core/scheduler.js";
+import { fetchRepositorySnapshot } from "../core/install/source.js";
+import { discoverMcpManifests, summarizeMcpManifest, planMcpConfig, summarizeMcpConfigPlan, applyMcpConfigPlan, } from "../core/runtime/mcp.js";
+import { REVIEWED_MCP_RECIPES, buildMcpRecipeServer, findMcpRecipe, formatMcpRecipePlan, planMcpRecipe, verifyMcpRecipe, verifyMcpRecipeConnection, } from "../core/runtime/mcp-recipes.js";
+import { inspectPackage, formatPackageInspection, } from "../core/install/package.js";
+import { installStatePath, recordInstallTransaction, recordMcpInstall, } from "../core/workspace/state.js";
+import { applyCodexMcpConfigPlan, codexMcpServerFingerprint, defaultCodexMcpConfigPath, planCodexMcpConfig, } from "../core/agents/codex-mcp.js";
+import { evaluatePackage, formatPackageEvaluation, } from "../core/discovery/evaluate.js";
+import { checkForUpdates, startUpdateWatcher, } from "../core/install/update-watch.js";
+import { applyNativeScheduler, formatNativeScheduler, planNativeScheduler, } from "../core/runtime/scheduler.js";
 import { collectOption, parseMcpCredentialMappings, durableSchedulerLauncher, } from "./support.js";
 export function registerMcp(program) {
     program
@@ -318,29 +317,6 @@ export function registerMcp(program) {
                 : `${formatNativeScheduler(plan)}\nApplied. Snapshot: ${snapshotId}`);
         });
     }
-    program
-        .command("sandbox-run")
-        .description("Run an explicitly approved command in a disposable networkless Docker sandbox")
-        .requiredOption("--source <directory>", "read-only source directory")
-        .requiredOption("--image <image>", "reviewed/pinned Docker image reference")
-        .requiredOption("--command <argument>", "command argument (repeatable; first is executable)", (value, previous = []) => [...previous, value], [])
-        .requiredOption("--approve-risk", "explicitly approve sandbox execution")
-        .option("--timeout <milliseconds>", "execution timeout", "120000")
-        .option("--json", "emit result JSON")
-        .action(async (options) => {
-        const result = await runDisposableSandbox({
-            sourceDirectory: options.source,
-            image: options.image,
-            command: options.command,
-            approveRisk: options.approveRisk,
-            timeoutMs: Number(options.timeout),
-        });
-        console.log(options.json
-            ? JSON.stringify(result, null, 2)
-            : `Sandbox exited ${result.exitCode}\n${result.stdout}${result.stderr ? `\n${result.stderr}` : ""}`);
-        if (result.exitCode !== 0)
-            process.exitCode = result.exitCode;
-    });
     program
         .command("mcp-config")
         .description("Plan or apply a safe MCP server configuration change (dry-run by default)")
@@ -382,43 +358,4 @@ export function registerMcp(program) {
         const snapshot = await applyMcpConfigPlan(plan);
         console.log(`Applied successfully. Snapshot: ${snapshot.rollbackSnapshotId}`);
     });
-    program
-        .command("codex-mcp-config")
-        .description("Plan or add a Codex TOML MCP server (dry-run by default)")
-        .option("--config <path>", "Codex config.toml path", defaultCodexMcpConfigPath())
-        .requiredOption("--name <name>", "server name")
-        .option("--command <command>", "local server command")
-        .option("--url <url>", "remote MCP server URL")
-        .option("--arg <value>", "server argument (repeatable)", (value, previous = []) => [...previous, value], [])
-        .option("--env <NAME=VALUE>", "environment variable (repeatable; values are never printed)", (value, previous = []) => [...previous, value], [])
-        .option("--yes", "apply the change; without this flag only a plan is shown")
-        .action(async (options) => {
-        if ((options.command ? 1 : 0) + (options.url ? 1 : 0) !== 1)
-            throw new Error("Provide exactly one of --command or --url");
-        const env = {};
-        for (const item of options.env) {
-            const separator = item.indexOf("=");
-            if (separator <= 0)
-                throw new Error(`Invalid --env '${item}'; expected NAME=VALUE`);
-            const key = item.slice(0, separator);
-            if (!/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
-                throw new Error(`Invalid environment variable name '${key}'`);
-            env[key] = item.slice(separator + 1);
-        }
-        const server = {
-            name: options.name,
-            command: options.command,
-            url: options.url,
-            args: options.arg,
-            env,
-            sourcePath: options.config,
-            warnings: [],
-        };
-        const plan = await planCodexMcpConfig(options.config, server);
-        console.log(`Codex config: ${plan.path}\n  - ${plan.summary}`);
-        if (!options.yes)
-            return console.log("Dry run only. Re-run with --yes to add this Codex MCP server.");
-        const snapshot = await applyCodexMcpConfigPlan(plan);
-        console.log(`Applied successfully. Snapshot: ${snapshot.rollbackSnapshotId}`);
-    });
 }

package/dist/src/commands/setup.js

@@ -1,8 +1,8 @@
-import { parseAgentSelection } from "../core/paths.js";
-import { formatHealthReport } from "../core/health.js";
-import { applyUpgrade, formatUpgradePlan, planUpgrade, summarizeUpgradePlan, } from "../core/upgrade.js";
-import { parseModelApiAccess } from "../core/access.js";
-import { ADVANCED_GUIDE } from "../core/cli-guide.js";
+import { parseAgentSelection } from "../core/agents/paths.js";
+import { formatHealthReport } from "../core/reporting/health.js";
+import { applyUpgrade, formatUpgradePlan, planUpgrade, summarizeUpgradePlan, } from "../core/reporting/upgrade.js";
+import { parseModelApiAccess } from "../core/routing/access.js";
+import { ADVANCED_GUIDE } from "../core/reporting/cli-guide.js";
 import { collectOption, setupSelection, printSetupProgress, runSetup, printBeginnerGuide, } from "./support.js";
 export function registerSetup(program) {
     program

package/dist/src/commands/sharing.js

@@ -1,18 +1,15 @@
-import { loadEffectiveCatalog } from "../core/catalog.js";
-import { detectAgents, parseAgentSelection } from "../core/paths.js";
-import { readFile } from "node:fs/promises";
+import { loadEffectiveCatalog } from "../core/catalog/catalog.js";
+import { parseAgentSelection } from "../core/agents/paths.js";
 import { resolve } from "node:path";
-import { addManifestPackage, initManifest, readManifest, removeManifestPackage, writeLockfile, } from "../core/manifest.js";
-import { readInstallState } from "../core/state.js";
-import { createPackage, packPackage, publishLocalPackage, publishRemotePackage, searchLocalRegistry, } from "../core/registry.js";
-import { auditLoadout, formatAuditReport } from "../core/audit.js";
-import { applyPortableImport, exportPortableLoadout, planPortableImport, } from "../core/portable.js";
-import { writeFileAtomically } from "../core/atomic-file.js";
-import { buildLibraryStateReport, formatLibrarySummary, formatLibraryStateReport, } from "../core/active-set.js";
-import { buildPrivacySafeReport, formatPrivacySafeReport, parsePrivacySafeLoadoutReport, writePrivacySafeReport, } from "../core/share-report.js";
-import { readLocalOutcomes, recordLocalOutcome, } from "../core/outcomes.js";
-import { createCredentialResolver } from "../core/credentials.js";
-import { buildLoadoutCard, compareLoadoutReports, formatLoadoutCard, formatLoadoutComparison, } from "../core/loadout-card.js";
+import { addManifestPackage, initManifest, readManifest, removeManifestPackage, writeLockfile, } from "../core/workspace/manifest.js";
+import { readInstallState } from "../core/workspace/state.js";
+import { createPackage, searchLocalRegistry, } from "../core/catalog/registry.js";
+import { auditLoadout, formatAuditReport } from "../core/catalog/audit.js";
+import { applyPortableImport, exportPortableLoadout, planPortableImport, } from "../core/workspace/portable.js";
+import { writeFileAtomically } from "../core/install/atomic-file.js";
+import { buildLibraryStateReport, formatLibrarySummary, formatLibraryStateReport, } from "../core/workspace/active-set.js";
+import { buildPrivacySafeReport, formatPrivacySafeReport, writePrivacySafeReport, } from "../core/reporting/share-report.js";
+import { buildLoadoutCard, formatLoadoutCard, } from "../core/reporting/loadout-card.js";
 export function registerSharing(program) {
     program
         .command("init")
@@ -89,54 +86,6 @@ export function registerSharing(program) {
         const descriptor = await createPackage(directory, options);
         console.log(`Created ${descriptor.name}@${descriptor.version} in ${directory}.`);
     });
-    program
-        .command("pack")
-        .description("Validate a package and print its deterministic inventory digest")
-        .argument("[directory]", "package directory", ".")
-        .option("--json", "emit machine-readable JSON")
-        .action(async (directory, options) => {
-        const packed = await packPackage(directory);
-        console.log(options.json
-            ? JSON.stringify(packed, null, 2)
-            : `${packed.descriptor.name}@${packed.descriptor.version} — ${packed.files.length} file(s) — sha256:${packed.digest}`);
-    });
-    program
-        .command("publish")
-        .description("Publish an immutable package version to a local or remote Loadout registry")
-        .argument("[directory]", "package directory", ".")
-        .option("--local", "publish to the local registry")
-        .option("--registry-url <url>", "remote registry base URL")
-        .option("--credential-keychain <service>", "resolve the remote registry token from the OS credential store")
-        .option("--credential-account <account>", "OS credential account")
-        .option("--approve-risk", "explicitly approve publishing scripts, hooks, or binaries")
-        .action(async (directory, options) => {
-        if (Number(Boolean(options.local)) +
-            Number(Boolean(options.registryUrl)) !==
-            1)
-            throw new Error("Choose exactly one destination: --local or --registry-url");
-        if (options.local) {
-            if (options.credentialKeychain)
-                throw new Error("Local publishing does not require a credential");
-            const packed = await publishLocalPackage(directory, {
-                approveRisk: options.approveRisk,
-            });
-            console.log(`Published ${packed.descriptor.name}@${packed.descriptor.version} with digest ${packed.digest}.`);
-            return;
-        }
-        const token = await createCredentialResolver()(options.credentialKeychain
-            ? {
-                kind: "os-keychain",
-                service: options.credentialKeychain,
-                ...(options.credentialAccount
-                    ? { account: options.credentialAccount }
-                    : {}),
-            }
-            : { kind: "environment", name: "LOADOUT_REGISTRY_TOKEN" });
-        if (!token)
-            throw new Error("Remote publishing credential did not resolve; set LOADOUT_REGISTRY_TOKEN or use --credential-keychain");
-        const published = await publishRemotePackage(directory, options.registryUrl, token, { approveRisk: options.approveRisk });
-        console.log(`Published ${published.name}@${published.version} with digest ${published.digest}.`);
-    });
     program
         .command("search")
         .description("Search the bundled catalog and local registry")
@@ -283,39 +232,6 @@ export function registerSharing(program) {
             ? JSON.stringify(report, null, 2)
             : formatPrivacySafeReport(report));
     });
-    program
-        .command("outcomes")
-        .description("Show privacy-safe local outcome signals; never uploads project or prompt data")
-        .option("--json", "emit machine-readable JSON")
-        .action(async (options) => {
-        const store = await readLocalOutcomes();
-        console.log(options.json
-            ? JSON.stringify(store, null, 2)
-            : [
-                `Local outcomes: ${store.events.length}`,
-                ...store.events.map((event) => `${event.recordedAt} — ${event.selector} — ${event.agent}/${event.taskFamily} — ${event.result}`),
-                "Privacy: local only; no project names, paths, prompts, code, filenames, or secrets.",
-            ].join("\n"));
-    });
-    program
-        .command("outcome")
-        .description("Record an explicit local, agent/task-scoped skill outcome")
-        .argument("<selector>", "exact package/skill selector")
-        .requiredOption("--agent <id>", "agent id")
-        .requiredOption("--task <family>", "general, frontend, testing, javascript, python, backend, security, or documentation")
-        .requiredOption("--result <value>", "accept, reject, success, failure, activation, disable, or rollback")
-        .action(async (selector, options) => {
-        const knownAgents = new Set((await detectAgents()).map((agent) => agent.id));
-        if (!knownAgents.has(options.agent))
-            throw new Error(`Unknown agent id: ${options.agent}`);
-        const event = await recordLocalOutcome({
-            selector,
-            agent: options.agent,
-            taskFamily: options.task,
-            result: options.result,
-        });
-        console.log(`Recorded local outcome ${event.id}. No project, prompt, or source data was stored.`);
-    });
     program
         .command("share")
         .description("Write the privacy-safe Loadout report to a JSON artifact")
@@ -342,17 +258,4 @@ export function registerSharing(program) {
         }
         console.log(options.json ? JSON.stringify(card, null, 2) : markdown);
     });
-    program
-        .command("compare-loadouts")
-        .description("Compare aggregate counts from two explicit privacy-safe Loadout reports")
-        .argument("<left>", "earlier privacy-safe report JSON")
-        .argument("<right>", "later privacy-safe report JSON")
-        .option("--json", "emit machine-readable count deltas")
-        .action(async (left, right, options) => {
-        const [before, after] = await Promise.all([left, right].map(async (path) => parsePrivacySafeLoadoutReport(JSON.parse(await readFile(resolve(path), "utf8")))));
-        const comparison = compareLoadoutReports(before, after);
-        console.log(options.json
-            ? JSON.stringify(comparison, null, 2)
-            : formatLoadoutComparison(comparison));
-    });
 }

package/dist/src/commands/support.js

@@ -1,10 +1,12 @@
 import { createInterface } from "node:readline/promises";
-import { detectAgents, parseAgentSelection } from "../core/paths.js";
-import { dirname, join } from "node:path";
-import { applyPreparedCatalogInstall, formatCatalogApplyGuidance, formatPreparedCatalogInstall, prepareCatalogInstall, } from "../core/catalog-install.js";
-import { formatInstalledSkillInventory, scanInstalledSkills, } from "../core/skill-inventory.js";
-import { interactiveModelApiAccess, parseModelApiAccess, } from "../core/access.js";
-import { BEGINNER_GUIDE } from "../core/cli-guide.js";
+import { createRequire } from "node:module";
+import { detectAgents, parseAgentSelection } from "../core/agents/paths.js";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { applyPreparedCatalogInstall, formatCatalogApplyGuidance, formatPreparedCatalogInstall, prepareCatalogInstall, } from "../core/install/catalog-install.js";
+import { formatInstalledSkillInventory, scanInstalledSkills, } from "../core/catalog/skill-inventory.js";
+import { interactiveModelApiAccess, parseModelApiAccess, } from "../core/routing/access.js";
+import { BEGINNER_GUIDE } from "../core/reporting/cli-guide.js";
 export const collectOption = (value, previous = []) => [...previous, value];
 export function parseMcpCredentialMappings(recipe, mappings, account) {
     const references = {};
@@ -103,7 +105,16 @@ export async function runSetup(options) {
     try {
         if (!mode) {
             if (!interactive) {
-                console.log("Pick a loadout to preview: `loadout setup --mode stable` (recommended), `--mode power` (broader), or `--mode maximum` (full library, activate per project). Nothing installs until you add --yes.");
+                console.log([
+                    "Pick a loadout to preview:",
+                    "  --mode stable   4 reviewed sources, 30 skills, all active (recommended)",
+                    "  --mode power    8 sources, 56 skills, all active",
+                    "  --mode maximum  every reviewed source, downloaded but DISABLED; a project",
+                    "                  activates what it needs with `loadout optimize --project .`",
+                    "  --mode custom   --package <id>, one or more",
+                    "",
+                    "Nothing installs until you add --yes.",
+                ].join("\n"));
                 return;
             }
             reader = createInterface({
@@ -112,9 +123,11 @@ export async function runSetup(options) {
             });
             const answer = (await reader.question([
                 "Choose a loadout:",
-                "  [1] Stable   — a small, reviewed set of everyday skills (recommended)",
-                "  [2] Power    — a broader daily-driver set",
-                "  [3] Maximum  — download the full reviewed library, activate per project later",
+                "  [1] Stable   — 4 reviewed sources, 30 skills, all active (recommended)",
+                "  [2] Power    — 8 sources, 56 skills, all active",
+                "  [3] Maximum  — download every reviewed source, but leave it DISABLED.",
+                "               Nothing reaches your prompts until a project activates",
+                "               it with `loadout optimize --project .`. Costs disk, not context.",
                 "  [4] Custom   — pick exact package ids",
                 "> ",
             ].join("\n"))).trim();
@@ -213,7 +226,25 @@ export async function runWizard() {
     console.log("\nPreview first — nothing changes until you approve, and every change is snapshotted for rollback.\n");
     await runSetup({ package: [] });
 }
-export const LOADOUT_VERSION = "0.5.9";
+const _require = createRequire(import.meta.url);
+function findPackageJson() {
+    let dir = dirname(fileURLToPath(import.meta.url));
+    for (let i = 0; i < 5; i++) {
+        const candidate = join(dir, "package.json");
+        try {
+            const pkg = _require(candidate);
+            if (pkg.name === "loadout-ai")
+                return candidate;
+        }
+        catch {
+            // not found, keep walking
+        }
+        dir = dirname(dir);
+    }
+    // ponytail: fallback for dist layout — 3 levels up from dist/src/commands/
+    return resolve(dirname(fileURLToPath(import.meta.url)), "..", "..", "..", "package.json");
+}
+export const LOADOUT_VERSION = _require(findPackageJson()).version;
 export function durableSchedulerLauncher() {
     return [
         join(dirname(process.execPath), process.platform === "win32" ? "npx.cmd" : "npx"),

package/dist/src/core/{adapters.js → agents/adapters.js}

@@ -1,6 +1,6 @@
 import { dirname, join } from "node:path";
-import { planSkillInstall } from "./skills.js";
-import { formatTerminalTable } from "./terminal.js";
+import { planSkillInstall } from "../catalog/skills.js";
+import { formatTerminalTable } from "../reporting/terminal.js";
 /**
  * Rules shared by the CLI, planner, and documentation. A capability only
  * changes state when it is native or has this explicitly tested adaptation.

package/dist/src/core/{agent-inspection.js → agents/agent-inspection.js}

@@ -136,15 +136,35 @@ export async function inspectAgent(agent) {
 export async function inspectAgents(agents) {
     return Promise.all(agents.map(inspectAgent));
 }
-export function formatAgentInventory(inventory) {
+/**
+ * One agent's inventory. The default is a two-line summary: what is installed
+ * and which component kinds the adapter supports. Adapter internals — the
+ * per-kind compatibility notes and the paths that do not exist yet — are only
+ * useful when diagnosing, so they stay behind `details`.
+ */
+export function formatAgentInventory(inventory, options = {}) {
     const lines = [
         `${inventory.agent.installed ? "✓" : "○"} ${inventory.agent.displayName}`,
     ];
-    for (const component of inventory.components) {
-        const state = component.scanned
-            ? `${component.directoryExists ? `${component.entries.length} filesystem item(s)` : "not created"} — ${component.directory}`
-            : (component.note ?? "not inspected");
-        lines.push(`  ${component.type}: ${component.compatibility}; ${state}`);
+    if (options.details) {
+        for (const component of inventory.components) {
+            const state = component.scanned
+                ? `${component.directoryExists ? `${component.entries.length} filesystem item(s)` : "not created"} — ${component.directory}`
+                : (component.note ?? "not inspected");
+            lines.push(`  ${component.type}: ${component.compatibility}; ${state}`);
+        }
+    }
+    else {
+        const items = inventory.components
+            .filter((component) => component.scanned && component.directoryExists)
+            .reduce((total, component) => total + component.entries.length, 0);
+        const supported = inventory.components
+            .filter((component) => component.compatibility !== "unsupported")
+            .map((component) => component.type);
+        const skills = inventory.components.find((component) => component.type === "skill");
+        if (skills?.directory)
+            lines.push(`  ${skills.directory}`);
+        lines.push(`  ${items} items | supports: ${supported.join(", ")}`);
     }
     for (const warning of inventory.warnings)
         lines.push(`  ! ${warning}`);

package/dist/src/core/{codex-mcp.js → agents/codex-mcp.js}

@@ -2,7 +2,7 @@ import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join, resolve } from "node:path";
 import { createHash, randomUUID } from "node:crypto";
 import { loadoutHome, userHome } from "./paths.js";
-import { runMutationTransaction } from "./transaction.js";
+import { runMutationTransaction } from "../install/transaction.js";
 function safeName(name) {
     if (!/^[A-Za-z0-9._-]{1,128}$/.test(name))
         throw new Error("MCP server name may contain only letters, numbers, ., _, and -");

package/dist/src/core/{health-score-evidence.js → agents/health-score-evidence.js}

@@ -1,16 +1,16 @@
 import { createHash } from "node:crypto";
 import { readFile, readdir } from "node:fs/promises";
 import { buildAgentHealthScore, } from "./agent-health-score.js";
-import { DEFAULT_ACTIVE_SKILL_LIMIT } from "./active-limit.js";
-import { managedFileReadPath } from "./active-set.js";
+import { DEFAULT_ACTIVE_SKILL_LIMIT } from "../workspace/active-limit.js";
+import { managedFileReadPath } from "../workspace/active-set.js";
 import { adapterCapabilities } from "./adapters.js";
-import { loadEffectiveCatalog } from "./catalog.js";
+import { loadEffectiveCatalog } from "../catalog/catalog.js";
 import { detectAgents } from "./paths.js";
-import { readLocalOutcomes } from "./outcomes.js";
-import { readSnapshot } from "./snapshot.js";
-import { scanInstalledSkills } from "./skill-inventory.js";
-import { readInstallState } from "./state.js";
-import { transactionRoot } from "./transaction.js";
+import { readLocalOutcomes } from "../workspace/outcomes.js";
+import { readSnapshot } from "../install/snapshot.js";
+import { scanInstalledSkills } from "../catalog/skill-inventory.js";
+import { readInstallState } from "../workspace/state.js";
+import { transactionRoot } from "../install/transaction.js";
 function freshness(pkg, asOf) {
     const observed = pkg?.pushedAt ?? pkg?.lastUpdatedAt;
     if (!observed)

package/dist/src/core/{runtime-tools.js → agents/runtime-tools.js}

@@ -2,10 +2,10 @@ import { execFile } from "node:child_process";
 import { access, readFile, readdir, rm } from "node:fs/promises";
 import { join } from "node:path";
 import { promisify } from "node:util";
-import { writeFileAtomically } from "./atomic-file.js";
+import { writeFileAtomically } from "../install/atomic-file.js";
 import { detectAgents, loadoutHome, userHome } from "./paths.js";
 import { parseRuntimeToolRecipe, renderRuntimeRecipeValue, resolveRuntimeRecipePath, } from "./runtime-tool-recipe.js";
-import { createSnapshot, readSnapshot, recordSnapshotPostMutationState, restoreSnapshot, } from "./snapshot.js";
+import { createSnapshot, readSnapshot, recordSnapshotPostMutationState, restoreSnapshot, } from "../install/snapshot.js";
 const execFileAsync = promisify(execFile);
 function deepFreeze(value) {
     if (value && typeof value === "object" && !Object.isFrozen(value)) {

package/dist/src/core/{audit.js → catalog/audit.js}

@@ -1,10 +1,10 @@
 import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { resolve } from "node:path";
-import { formatSchemaError, loadoutLockfileSchema } from "../shared/schemas.js";
-import { readManifest } from "./manifest.js";
-import { readInstallState } from "./state.js";
-import { managedFileReadPath } from "./active-set.js";
+import { formatSchemaError, loadoutLockfileSchema, } from "../../shared/schemas.js";
+import { readManifest } from "../workspace/manifest.js";
+import { readInstallState } from "../workspace/state.js";
+import { managedFileReadPath } from "../workspace/active-set.js";
 export function parseLockfile(value) {
     const result = loadoutLockfileSchema.safeParse(value);
     if (!result.success)

package/dist/src/core/{catalog.js → catalog/catalog.js}

@@ -2,12 +2,12 @@ import { existsSync } from "node:fs";
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
-import { catalogSchema, formatSchemaError } from "../shared/schemas.js";
-import { fetchGitHubMetadata } from "./github.js";
-import { loadoutHome } from "./paths.js";
-import { compareCatalogPackages, explainCatalogScore } from "./ranking.js";
+import { catalogSchema, formatSchemaError } from "../../shared/schemas.js";
+import { fetchGitHubMetadata, } from "../runtime/github.js";
+import { loadoutHome } from "../agents/paths.js";
+import { compareCatalogPackages, explainCatalogScore, } from "../discovery/ranking.js";
 import { resolveCatalogProfile } from "./profiles.js";
-import { recordCatalogObservations } from "./observations.js";
+import { recordCatalogObservations } from "../discovery/observations.js";
 const cachedCatalogPath = () => join(loadoutHome(), "catalog.json");
 function bundledCatalogPath() {
     const moduleDirectory = dirname(fileURLToPath(import.meta.url));
@@ -218,6 +218,19 @@ export async function refreshCatalog(packages, options = {}) {
         observationFailures: observations.failures,
     };
 }
+/** Merge a human-approved proposal into the bundled catalog. */
+export async function promoteCatalogCandidate(proposal) {
+    const catalogPath = bundledCatalogPath();
+    const current = JSON.parse(await readFile(catalogPath, "utf8"));
+    if (current.some((pkg) => pkg.id === proposal.id))
+        throw new Error(`Catalog already contains id '${proposal.id}'`);
+    if (current.some((pkg) => pkg.repository.toLowerCase() === proposal.repository.toLowerCase()))
+        throw new Error(`Catalog already contains repository '${proposal.repository}'`);
+    const merged = [...current, proposal].sort((a, b) => a.id.localeCompare(b.id));
+    validateCatalog(merged, { requireEvidence: true });
+    await writeFile(catalogPath, `${JSON.stringify(merged, null, 2)}\n`);
+    return { catalogPath, totalRecords: merged.length };
+}
 export function rankCatalog(packages) {
     return [...packages].sort(compareCatalogPackages);
 }

package/dist/src/core/{components.js → catalog/components.js}

@@ -1,7 +1,7 @@
 import { lstat, readdir } from "node:fs/promises";
 import { isAbsolute, join, relative, resolve, sep } from "node:path";
-import { buildSkillPlan } from "./install.js";
-import { adapterCapabilities, agentComponentDirectory } from "./adapters.js";
+import { buildSkillPlan } from "../install/install.js";
+import { adapterCapabilities, agentComponentDirectory, } from "../agents/adapters.js";
 const RESOURCE_DIRECTORIES = new Map([
     ["rules", "rule"],
     ["commands", "command"],

package/dist/src/core/{conformance.js → catalog/conformance.js}

@@ -1,5 +1,5 @@
-import { ADAPTER_CAPABILITIES, agentComponentDirectory } from "./adapters.js";
-import { AGENT_DEFINITIONS, agentSkillsDirectory } from "./paths.js";
+import { ADAPTER_CAPABILITIES, agentComponentDirectory, } from "../agents/adapters.js";
+import { AGENT_DEFINITIONS, agentSkillsDirectory } from "../agents/paths.js";
 const PLATFORM_BY_RUNNER = {
     "ubuntu-latest": "linux",
     "macos-latest": "macos",

package/dist/src/core/{profiles.js → catalog/profiles.js}

@@ -1,4 +1,4 @@
-import { compareCatalogPackages } from "./ranking.js";
+import { compareCatalogPackages } from "../discovery/ranking.js";
 /**
  * Stable is Loadout's bounded policy-selected daily driver: broad enough to improve normal
  * engineering work immediately, but bounded at skill granularity and restricted
@@ -247,7 +247,7 @@ export function resolveCatalogProfile(packages, selection, families = CATALOG_CO
             warnings.push(`Custom selection retains the soft overlap in ${family.label}. Review ${names} before installation.`);
         }
         else {
-            warnings.push(`${selection.mode === "power" ? "Power Boost" : "Maximum Library"} retains the soft overlap in ${family.label}. Loadout policy orders ${primary.displayName} first; review each package before installation.`);
+            warnings.push(`${selection.mode === "power" ? "Power" : "Maximum"} retains the soft overlap in ${family.label}. Loadout policy orders ${primary.displayName} first; review each package before installation.`);
         }
     }
     return {

package/dist/src/core/{provenance.js → catalog/provenance.js}

@@ -2,10 +2,10 @@ import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
 import { dirname, join, relative, resolve, sep } from "node:path";
 import { loadEffectiveCatalog } from "./catalog.js";
-import { ensureDirectory, loadoutHome } from "./paths.js";
+import { ensureDirectory, loadoutHome } from "../agents/paths.js";
 import { discoverSkillDirectories } from "./skills.js";
-import { fetchRepositorySnapshot, } from "./source.js";
-import { writeFileAtomically } from "./atomic-file.js";
+import { fetchRepositorySnapshot, } from "../install/source.js";
+import { writeFileAtomically } from "../install/atomic-file.js";
 const catalogSkillIndexPath = () => join(loadoutHome(), "provenance", "catalog-skills.json");
 function immutableCatalogDigest(catalog) {
     const evidence = catalog