lurqrun 0.1.7 → 0.1.8

package/dist/{uninstall-P7RGBX6G.js → uninstall-I2IJP5JZ.js}

@@ -8,24 +8,29 @@ import {
 import {
   BLOCK_START,
   agentSpecs,
+  hasLurqHooks,
+  hookAgentFor,
+  hooksLabel,
+  hooksPath,
   readJsonObject,
   removeMarkedBlock,
   resolveAgents,
   stripTomlBlock,
+  withoutLurqHooks,
   writeFileAtomic,
   writeJson
-} from "./chunk-UDVNA7EA.js";
+} from "./chunk-DM37MTOO.js";
 import "./chunk-LUAKDHLZ.js";
 import "./chunk-MYGSLK44.js";
 import {
   clearUserConfig,
   lurqHome,
   userConfigPath
-} from "./chunk-Y5GI7RL3.js";
+} from "./chunk-J6XQ7OPZ.js";
 import {
   KEYS_URL,
   PACKAGE_NAME
-} from "./chunk-GPTKSNR6.js";
+} from "./chunk-72Y2FDVS.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";
@@ -72,6 +77,15 @@ function mcpEntryRemoval(spec) {
     }
   };
 }
+function hooksRemoval(agent) {
+  const path = hooksPath(agent);
+  if (!existsSync(path) || !hasLurqHooks(readJsonObject(path))) return null;
+  return {
+    label: hooksLabel(agent),
+    path,
+    apply: () => writeJson(path, withoutLurqHooks(readJsonObject(path)))
+  };
+}
 function instructionsRemoval(spec) {
   const target = spec.instructions;
   if (!target || !existsSync(target.path)) return null;
@@ -108,6 +122,16 @@ function planUninstall(specs, opts) {
       problems.push(`${spec.label}: ${err instanceof Error ? err.message : String(err)}`);
     }
     add(instructionsRemoval(spec));
+    const hookAgent = hookAgentFor(spec.id);
+    if (hookAgent) {
+      try {
+        add(hooksRemoval(hookAgent));
+      } catch (err) {
+        problems.push(
+          `${hooksLabel(hookAgent)}: ${err instanceof Error ? err.message : String(err)}`
+        );
+      }
+    }
   }
   if (opts.global) {
     const guide = join(lurqHome(), "skill-instructions.md");
@@ -134,7 +158,9 @@ async function runUninstall(opts) {
   const short = (p) => p.startsWith(homedir()) ? `~${p.slice(homedir().length)}` : p;
   for (const p of problems) console.log(`${yellow("!")} ${p}`);
   if (removals.length === 0) {
-    console.log(`Nothing to remove: lurq is not set up ${global ? "on this machine" : `for ${specs[0].label}`}.`);
+    console.log(
+      `Nothing to remove: lurq is not set up ${global ? "on this machine" : `for ${specs[0].label}`}.`
+    );
     if (problems.length) process.exitCode = 1;
     return;
   }

package/dist/{upgrade-NQ5IWFZB.js → upgrade-FS26DJGG.js}

@@ -1,7 +1,4 @@
 import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
-import {
-  SURFACE_CLAIM_KINDS
-} from "./chunk-ST2X2GYN.js";
 import {
   diffSurfaces,
   runtimeSymbols,
@@ -17,17 +14,20 @@ import {
   extractUnpacked,
   fetchManifest,
   unpackPackage
-} from "./chunk-BV32UNLL.js";
+} from "./chunk-FVYFV5HA.js";
 import {
   resolveRuntimeEngineConflicts
 } from "./chunk-BUALU27S.js";
-import "./chunk-AHBP533R.js";
-import "./chunk-SJOVFF7B.js";
+import "./chunk-D3VTZS7V.js";
+import "./chunk-KYKSZ3XZ.js";
 import {
   require_semver
 } from "./chunk-3GHJR7XR.js";
 import "./chunk-MYGSLK44.js";
-import "./chunk-GPTKSNR6.js";
+import "./chunk-72Y2FDVS.js";
+import {
+  SURFACE_CLAIM_KINDS
+} from "./chunk-SHZFOSXC.js";
 import {
   __toESM,
   init_esm_shims
@@ -81,23 +81,41 @@ function judgeRequires(from, to, refs, ctx) {
     if (!broken.has(`${file}:${line}`)) broken.set(`${file}:${line}`, { file, line, why });
   };
   if (to === "unexported") {
-    for (const r of requireSites) add(r.file, r.line, "the exports map no longer offers anything to require()");
+    for (const r of requireSites)
+      add(r.file, r.line, "the exports map no longer offers anything to require()");
   } else if (ctx.asyncModule) {
     for (const r of requireSites) {
-      add(r.file, r.line, "the ES module uses top-level await, so require() throws ERR_REQUIRE_ASYNC_MODULE on every Node");
+      add(
+        r.file,
+        r.line,
+        "the ES module uses top-level await, so require() throws ERR_REQUIRE_ASYNC_MODULE on every Node"
+      );
     }
   } else {
     for (const r of required) {
       if (r.via === "default") {
         for (const c of r.calls ?? []) {
-          if (c.args !== null) add(r.file, c.line, "require() now returns the module namespace, which cannot be called");
+          if (c.args !== null)
+            add(
+              r.file,
+              c.line,
+              "require() now returns the module namespace, which cannot be called"
+            );
         }
       } else if ((r.via === "namespace" || r.via === "destructured") && ctx.fromExports && ctx.toExports && !ctx.fromExports.has(r.symbol) && !ctx.toExports.has(r.symbol)) {
-        add(r.file, r.line, `\`${r.symbol}\` is not an export of the ES module, so it reads as undefined`);
+        add(
+          r.file,
+          r.line,
+          `\`${r.symbol}\` is not an export of the ES module, so it reads as undefined`
+        );
       }
     }
   }
-  const olderNode = to === "esm" && !ctx.asyncModule && !requireEsmGuaranteed(ctx.runtime) ? [...new Map(requireSites.map((r) => [`${r.file}:${r.line}`, { file: r.file, line: r.line }])).values()] : [];
+  const olderNode = to === "esm" && !ctx.asyncModule && !requireEsmGuaranteed(ctx.runtime) ? [
+    ...new Map(
+      requireSites.map((r) => [`${r.file}:${r.line}`, { file: r.file, line: r.line }])
+    ).values()
+  ] : [];
   if (!broken.size && !olderNode.length) return null;
   return { from, to, broken: [...broken.values()], olderNode };
 }
@@ -120,12 +138,21 @@ function engineRequirements(from, to, runtime) {
   const declared = runtime.engines;
   if (declared && import_semver.default.validRange(declared) && subsetOf(declared, needs) === false) {
     const alreadyOut = before && import_semver.default.validRange(before) && subsetOf(declared, before) === false;
-    if (!alreadyOut) out.push({ kind: "engines", name: "node", needs, has: `${declared} (package.json engines)` });
+    if (!alreadyOut)
+      out.push({ kind: "engines", name: "node", needs, has: `${declared} (package.json engines)` });
   }
   const pinned = runtime.nodeVersionFile;
   if (pinned) {
     const conflicts = (range) => Boolean(range) && resolveRuntimeEngineConflicts(
-      [{ name: to.name ?? "package", version: null, peerDependencies: null, peerDependenciesMeta: null, engines: { node: range } }],
+      [
+        {
+          name: to.name ?? "package",
+          version: null,
+          peerDependencies: null,
+          peerDependenciesMeta: null,
+          engines: { node: range }
+        }
+      ],
       pinned.value
     ).length > 0;
     if (conflicts(needs) && !conflicts(before)) {
@@ -159,7 +186,9 @@ function peerRequirements(from, to, runtime) {
 function projectVersionOf(root, name) {
   for (let dir = resolve(root); ; dir = dirname(dir)) {
     try {
-      const { version } = JSON.parse(readFileSync(join(dir, "node_modules", name, "package.json"), "utf8"));
+      const { version } = JSON.parse(
+        readFileSync(join(dir, "node_modules", name, "package.json"), "utf8")
+      );
       if (version && import_semver.default.valid(version)) return { version, exact: true, source: "installed" };
     } catch {
     }
@@ -168,7 +197,8 @@ function projectVersionOf(root, name) {
   try {
     const manifest = JSON.parse(readFileSync(join(root, "package.json"), "utf8"));
     const declared = manifest.dependencies?.[name] ?? manifest.devDependencies?.[name];
-    if (declared && import_semver.default.validRange(declared)) return { version: declared, exact: false, source: "package.json" };
+    if (declared && import_semver.default.validRange(declared))
+      return { version: declared, exact: false, source: "package.json" };
   } catch {
   }
   return null;
@@ -241,7 +271,12 @@ function compareEntry(from, to, symbols, specifier, isRoot) {
   const renames = new Map(diff.renamed.map((r) => [r.path, r.to]));
   const symbolsRemoved = diff.removed.filter((s) => referenced.has(s.path) && !toSurface.has(s.path)).map((s) => {
     const renamedTo = renames.get(s.path);
-    return { symbol: s.path, ...tag, ...renamedTo ? { renamedTo } : {}, refs: symbols.get(s.path) ?? [] };
+    return {
+      symbol: s.path,
+      ...tag,
+      ...renamedTo ? { renamedTo } : {},
+      refs: symbols.get(s.path) ?? []
+    };
   });
   const stars = starReExports(to);
   if (symbolsRemoved.length && stars.length) {
@@ -277,9 +312,13 @@ async function checkUpgradeOne(target, refs, opts = {}) {
   if (!refs || refs.symbols.size === 0) return requirementsOnly(target, opts.runtime);
   const byEntry = groupByEntry(refs, target.package);
   if (byEntry.size === 0) return requirementsOnly(target, opts.runtime);
-  const loose = [target.fromVersion, target.toVersion].filter((v) => import_semver2.default.validRange(v) && !import_semver2.default.valid(v));
+  const loose = [target.fromVersion, target.toVersion].filter(
+    (v) => import_semver2.default.validRange(v) && !import_semver2.default.valid(v)
+  );
   if (loose.length) {
-    return { unverified: `expected exact versions, got ${target.fromVersion}..${target.toVersion}` };
+    return {
+      unverified: `expected exact versions, got ${target.fromVersion}..${target.toVersion}`
+    };
   }
   const settled = await Promise.allSettled([
     unpackPackage(target.package, target.fromVersion),
@@ -288,10 +327,16 @@ async function checkUpgradeOne(target, refs, opts = {}) {
   try {
     const failure = settled.find((s) => s.status === "rejected");
     if (failure) throw failure.reason;
-    const [fromPkg, toPkg] = settled.map((s) => s.value);
+    const [fromPkg, toPkg] = settled.map(
+      (s) => s.value
+    );
     if (!fromPkg || !toPkg) {
-      const missing = [fromPkg ? null : target.fromVersion, toPkg ? null : target.toVersion].filter(Boolean);
-      return { unverified: `not published on npm: ${missing.map((v) => `${target.package}@${v}`).join(", ")}` };
+      const missing = [fromPkg ? null : target.fromVersion, toPkg ? null : target.toVersion].filter(
+        Boolean
+      );
+      return {
+        unverified: `not published on npm: ${missing.map((v) => `${target.package}@${v}`).join(", ")}`
+      };
     }
     return await compareVersions(target, refs, byEntry, fromPkg, toPkg, opts);
   } finally {
@@ -395,7 +440,7 @@ async function compareVersions(target, refs, byEntry, fromPkg, toPkg, opts) {
   const exportNames = (s) => s.undeclaredReason || starReExports(s).length ? null : new Set(s.symbols.filter((x) => x.kind !== "type_only").map((x) => x.path));
   const fromTarget = requireTarget(fromPkg.pkgDir);
   const toTarget = requireTarget(toPkg.pkgDir);
-  const asyncModule = fromTarget?.format === "cjs" && toTarget?.format === "esm" && toTarget.file ? (await import("./extract-NKGKLIVT.js")).usesTopLevelAwait(toPkg.pkgDir, toTarget.file) : false;
+  const asyncModule = fromTarget?.format === "cjs" && toTarget?.format === "esm" && toTarget.file ? (await import("./extract-6WG265BL.js")).usesTopLevelAwait(toPkg.pkgDir, toTarget.file) : false;
   const moduleFormat = judgeRequires(
     fromTarget?.format ?? null,
     toTarget?.format ?? null,
@@ -449,7 +494,10 @@ async function checkUpgrade(targets, references, opts = {}) {
   const runtime = opts.rootDir ? readRepoRuntime(opts.rootDir) : {};
   for (const t of targets) {
     try {
-      const res = await checkUpgradeOne(t, byPkg.get(t.package), { typeCheck: opts.typeCheck, runtime });
+      const res = await checkUpgradeOne(t, byPkg.get(t.package), {
+        typeCheck: opts.typeCheck,
+        runtime
+      });
       if (res.types) {
         types.push(
           res.types.checked ? { package: t.package, checked: true, files: res.types.files } : { package: t.package, checked: false, reason: res.types.reason }
@@ -478,7 +526,10 @@ function capped(items, cap = REPORT_LOCATION_CAP) {
   return items.length > cap ? `${shown} (+${items.length - cap} more)` : shown;
 }
 function locations(refs) {
-  const all = refs.flatMap((r) => [`${r.file}:${r.line}`, ...(r.calls ?? []).map((c) => `${r.file}:${c.line}`)]);
+  const all = refs.flatMap((r) => [
+    `${r.file}:${r.line}`,
+    ...(r.calls ?? []).map((c) => `${r.file}:${c.line}`)
+  ]);
   return capped([...new Set(all)]) || "(no location)";
 }
 function params(required, max) {
@@ -510,8 +561,10 @@ function formatUpgradeReport(report, title = "upgrade check") {
       out.push(
         m.to === "esm" ? `  require('${b.package}') now loads an ES module (was CommonJS)` : `  require('${b.package}') no longer resolves: its exports map offers require() nothing`
       );
-      for (const x of m.broken.slice(0, REPORT_LOCATION_CAP)) out.push(`    \xB7 ${x.file}:${x.line}  ${x.why}`);
-      if (m.broken.length > REPORT_LOCATION_CAP) out.push(`    \xB7 (+${m.broken.length - REPORT_LOCATION_CAP} more)`);
+      for (const x of m.broken.slice(0, REPORT_LOCATION_CAP))
+        out.push(`    \xB7 ${x.file}:${x.line}  ${x.why}`);
+      if (m.broken.length > REPORT_LOCATION_CAP)
+        out.push(`    \xB7 (+${m.broken.length - REPORT_LOCATION_CAP} more)`);
       if (m.olderNode.length) {
         out.push(
           `    \xB7 throws ERR_REQUIRE_ESM on Node before 20.19 / 22.12: ${capped(m.olderNode.map((s) => `${s.file}:${s.line}`))}`
@@ -566,16 +619,17 @@ function formatUpgradeReport(report, title = "upgrade check") {
     out.push("");
   }
   const typed = report.types ?? [];
-  const unchecked = typed.filter(
-    (t) => !t.checked
-  );
+  const unchecked = typed.filter((t) => !t.checked);
   if (typed.length > unchecked.length) {
-    out.push(`TYPES     checked ${typed.length - unchecked.length} package(s) in the files that import them`);
+    out.push(
+      `TYPES     checked ${typed.length - unchecked.length} package(s) in the files that import them`
+    );
   }
   if (unchecked.length) {
     out.push(`TYPES     not checked for ${unchecked.length} package(s):`);
     const byReason = /* @__PURE__ */ new Map();
-    for (const t of unchecked) byReason.set(t.reason, [...byReason.get(t.reason) ?? [], t.package]);
+    for (const t of unchecked)
+      byReason.set(t.reason, [...byReason.get(t.reason) ?? [], t.package]);
     for (const [reason, names] of byReason) out.push(`    \xB7 ${names.join(", ")}: ${reason}`);
   }
   if (typed.length) out.push("");

package/dist/{upgradePlan-A4LRKLEG.js → upgradePlan-ZS5IOVMZ.js}

@@ -1,18 +1,19 @@
 import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
 import {
   parseManifest
-} from "./chunk-DWAGCNEL.js";
-import "./chunk-B43LCXBM.js";
-import "./chunk-BCANRN5B.js";
-import "./chunk-SJOVFF7B.js";
+} from "./chunk-TDTYV6QI.js";
+import "./chunk-GM5Y555O.js";
+import "./chunk-2GAYNIHG.js";
+import "./chunk-KYKSZ3XZ.js";
+import "./chunk-A3TYI2TF.js";
 import "./chunk-GRJXQBQZ.js";
 import "./chunk-WHX2ZFCG.js";
+import "./chunk-MYGSLK44.js";
 import {
   fetchUpgradePlan
-} from "./chunk-4ZYCIMY4.js";
-import "./chunk-MYGSLK44.js";
-import "./chunk-Y5GI7RL3.js";
-import "./chunk-GPTKSNR6.js";
+} from "./chunk-OTJFHESY.js";
+import "./chunk-J6XQ7OPZ.js";
+import "./chunk-72Y2FDVS.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";
@@ -111,13 +112,17 @@ function formatUpgradePlan(plan) {
     if (upgrade.removed.length) {
       const renamed = new Map((upgrade.renamed ?? []).map((r) => [r.path, r.to]));
       const label = (path) => renamed.has(path) ? `${path} \u2192 ${renamed.get(path).join(" | ")}` : path;
-      out.push(`  removes ${upgrade.removed.length}: ${upgrade.removed.slice(0, 8).map(label).join(", ")}`);
+      out.push(
+        `  removes ${upgrade.removed.length}: ${upgrade.removed.slice(0, 8).map(label).join(", ")}`
+      );
     }
     for (const change of upgrade.arityChanged.slice(0, 5)) {
       out.push(`  arity ${change.path}: ${change.from ?? "?"} \u2192 ${change.to ?? "?"}`);
     }
     if (upgrade.hops?.length) {
-      out.push(`  via ${[upgrade.fromVersion, ...upgrade.hops.map((h) => h.toVersion)].join(" \u2192 ")}`);
+      out.push(
+        `  via ${[upgrade.fromVersion, ...upgrade.hops.map((h) => h.toVersion)].join(" \u2192 ")}`
+      );
       for (const hop of upgrade.hops) {
         const detail = hop.removed.length ? `removes ${hop.removed.slice(0, 5).join(", ")}` : hop.verdict === "unknown" ? "not yet analysed" : "no removals";
         out.push(`    ${hop.fromVersion} \u2192 ${hop.toVersion}: ${detail}`);
@@ -136,11 +141,41 @@ function formatUpgradePlan(plan) {
   if (caveats.length) out.push("", `NOT COVERED: ${caveats.join("; ")}.`);
   return out.join("\n");
 }
+function planHeadline(plan, source = []) {
+  const behind = plan.upgrades.length + plan.omitted;
+  const dead = source.filter((f) => f.severity === "blocking");
+  const parts = [];
+  if (dead.length) {
+    parts.push(`${dead.length} model id(s) the provider has retired \u2014 every call using them fails`);
+  }
+  if (behind === 0 && parts.length === 0) return null;
+  if (behind > 0) {
+    const advisories = plan.upgrades.filter((u) => u.advisories > 0).length;
+    const removes = plan.upgrades.filter((u) => u.verdict === "removes-exports").length;
+    parts.push(`${behind} of ${plan.deps} dependencies behind`);
+    if (advisories) parts.push(`${advisories} with a security advisory`);
+    if (removes) parts.push(`${removes} removing public exports`);
+  }
+  const unassessed = plan.omitted + plan.pending + plan.untracked;
+  return `${parts.join(", ")}.` + (unassessed ? ` ${unassessed} not assessed for breakage.` : "");
+}
+var HEADLINE_SCAN_LIMIT = 1500;
+async function scanSourceDrift(dir, limit = HEADLINE_SCAN_LIMIT) {
+  try {
+    const { modelFindings } = await import("./model-ASMZWLM7.js");
+    return modelFindings(dir, { limit }).findings;
+  } catch {
+    return [];
+  }
+}
 export {
+  HEADLINE_SCAN_LIMIT,
   buildUpgradePlan,
   detectRepoFullName,
   findManifests,
   formatUpgradePlan,
   mergedDeps,
-  readManifests
+  planHeadline,
+  readManifests,
+  scanSourceDrift
 };

package/dist/upkeepHandler-VFGYXJKB.js

@@ -0,0 +1,13 @@
+import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
+import {
+  runDomains
+} from "./chunk-XBQA4I36.js";
+import {
+  init_esm_shims
+} from "./chunk-I3M2KJXB.js";
+
+// src/mcp/upkeepHandler.ts
+init_esm_shims();
+export {
+  runDomains as handleUpkeep
+};

package/dist/{userConfig-Z3GQE776.js → userConfig-ICASHI47.js}

@@ -7,7 +7,7 @@ import {
   resolveEndpoint,
   userConfigPath,
   writeUserConfig
-} from "./chunk-Y5GI7RL3.js";
+} from "./chunk-J6XQ7OPZ.js";
 import "./chunk-I3M2KJXB.js";
 export {
   clearUserConfig,

package/dist/{watch-DGFMWUDL.js → watch-OCNEUXG6.js}

@@ -1,29 +1,32 @@
 import { createRequire as __lurqCreateRequire } from 'node:module'; const require = __lurqCreateRequire(import.meta.url);
 import {
-  enqueueSurface,
-  getMcpServerNames
-} from "./chunk-LO35HLQZ.js";
-import {
+  enqueueCandidates,
+  getQueuedNames,
   syncOnePackage
-} from "./chunk-FW6BD2NO.js";
+} from "./chunk-TUXQ32WE.js";
 import "./chunk-BUALU27S.js";
-import "./chunk-LRD4GBYE.js";
-import "./chunk-BCANRN5B.js";
-import "./chunk-2VMOWSRY.js";
+import "./chunk-QUIMQ7YL.js";
+import "./chunk-6DM6UQFD.js";
+import "./chunk-EYAKM6YN.js";
+import "./chunk-D3VTZS7V.js";
 import "./chunk-4ESO33J6.js";
-import "./chunk-CW5HJ3LX.js";
-import "./chunk-AHBP533R.js";
-import "./chunk-SJOVFF7B.js";
-import "./chunk-HWBBVLOT.js";
 import {
   getAllPackageNames
-} from "./chunk-NH5I4KHH.js";
+} from "./chunk-NPVN2THM.js";
 import "./chunk-VLRHFMGJ.js";
-import "./chunk-WQ23REYT.js";
+import "./chunk-VGCDRK3S.js";
+import {
+  enqueueSurface,
+  getMcpServerNames
+} from "./chunk-ONDVTXUO.js";
 import {
-  discoveryQueue,
   watchState
-} from "./chunk-LYMPYETA.js";
+} from "./chunk-4JHDSVIN.js";
+import "./chunk-GM5Y555O.js";
+import "./chunk-2GAYNIHG.js";
+import "./chunk-KYKSZ3XZ.js";
+import "./chunk-A3TYI2TF.js";
+import "./chunk-6L67QMCP.js";
 import "./chunk-3GHJR7XR.js";
 import "./chunk-GRJXQBQZ.js";
 import "./chunk-WHX2ZFCG.js";
@@ -31,7 +34,7 @@ import "./chunk-LUAKDHLZ.js";
 import {
   logger
 } from "./chunk-MYGSLK44.js";
-import "./chunk-GPTKSNR6.js";
+import "./chunk-72Y2FDVS.js";
 import {
   init_esm_shims
 } from "./chunk-I3M2KJXB.js";
@@ -39,25 +42,11 @@ import {
 // src/pipeline/watch.ts
 init_esm_shims();
 
-// src/db/discovery.ts
-init_esm_shims();
-import { eq, sql } from "drizzle-orm";
-async function getQueuedNames(db) {
-  const rows = await db.select({ name: discoveryQueue.name }).from(discoveryQueue);
-  return new Set(rows.map((r) => r.name));
-}
-async function enqueueCandidates(db, candidates) {
-  if (candidates.length === 0) return 0;
-  const rows = candidates.map((c) => ({ name: c.name, discoveredVia: c.via }));
-  const inserted = await db.insert(discoveryQueue).values(rows).onConflictDoNothing({ target: discoveryQueue.name }).returning({ id: discoveryQueue.id });
-  return inserted.length;
-}
-
 // src/db/watch.ts
 init_esm_shims();
-import { eq as eq2 } from "drizzle-orm";
+import { eq } from "drizzle-orm";
 async function getWatchCursor(db, id) {
-  const rows = await db.select({ seq: watchState.seq }).from(watchState).where(eq2(watchState.id, id)).limit(1);
+  const rows = await db.select({ seq: watchState.seq }).from(watchState).where(eq(watchState.id, id)).limit(1);
   return rows[0]?.seq ?? null;
 }
 async function setWatchCursor(db, id, seq) {
@@ -153,7 +142,7 @@ async function watchNpmChanges(db, opts = {}) {
         if (signal?.aborted) break;
         const route = routeChange(change, tracked, queued);
         if (route === "resync") {
-          await syncOnePackage(db, change.id).catch(
+          await syncOnePackage(db, change.id, { fresh: true }).catch(
             (err) => logger.warn(`watch: re-sync failed for ${change.id}: ${String(err)}`)
           );
           resynced++;
@@ -193,6 +182,7 @@ async function watchNpmChanges(db, opts = {}) {
   logger.info("watch: stopped.");
 }
 function sleep(ms, signal) {
+  if (signal?.aborted) return Promise.resolve();
   return new Promise((resolve) => {
     const timer = setTimeout(resolve, ms);
     signal?.addEventListener(

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "lurqrun",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "description": "Verify npm packages before your AI coding agent installs them: hallucinated and typosquatted names, advisories, API drift and version conflicts. MCP server, CLI and agent skill for Claude Code, Cursor and VS Code.",
   "type": "module",
   "license": "MIT",
@@ -93,7 +93,8 @@
     "content:releases": "tsx scripts/gen-releases.ts"
   },
   "dependencies": {
-    "typescript": "^5.5.4"
+    "typescript": "^5.5.4",
+    "undici": "^7.29.1"
   },
   "devDependencies": {
     "@eslint/js": "^9.9.0",

package/templates/skill-instructions.md

@@ -20,7 +20,7 @@ reads like a guess.
   `verify` the one you choose. lurq checks candidates against evidence; it does not
   search for them, so the list is yours to bring. The same applies before hand-rolling
   something a well-maintained package may already do.
-- **Install a specific package** → `verify` with the exact name *before* adding it.
+- **Install a specific package** → `verify` with the exact name _before_ adding it.
   This catches hallucinated, deprecated, and typosquatted names (e.g. `lodahs` vs
   `lodash`) and packages with known advisories. Cheap, and the highest-value call here.
 - **Choose between options** → `compare` with 2–5 package names for a ranked,
@@ -46,14 +46,24 @@ reads like a guess.
   shape, e.g. lodash); read its type declarations or use `resolve_surface`.
 - **Check whether a symbol actually exists at runtime** → `resolve_surface` with the
   package (and version, if you have one). `usage` reads the shipped `.d.ts`; this reads
-  the shipped JavaScript, and the difference matters: a removed *type* breaks `tsc`, a
-  removed *runtime* export breaks the running program. `UNKNOWN` means the surface has
+  the shipped JavaScript, and the difference matters: a removed _type_ breaks `tsc`, a
+  removed _runtime_ export breaks the running program. `UNKNOWN` means the surface has
   not been extracted yet and queues extraction — it never means the symbol is absent, so
   do not treat it as a negative answer.
 - **Explain a break, or plan an upgrade** → `diff_surface` with the package and the two
   versions. Returns what was removed, added, and what changed arity between them, with
   type-only removals listed separately because those break the build rather than the
   program. Static comparison of both published versions — no install, no test run.
+- **Start work in a project you have just opened, or see what an upgrade broke** →
+  `upkeep` with its directory. It reads the project itself and returns what needs
+  fixing: environment variables the code reads that no `.env` file declares, and —
+  when you pass the versions you are moving between — the call sites an upgrade
+  breaks, the replacement the package itself proves, and the manifest ranges left
+  stale. Findings carry either exact edits you can apply or the facts you cannot
+  look up, such as the exports the target version actually ships with their
+  arities. A domain it could not run says so: an empty result is not a clean
+  project. Offered only when lurq runs beside your files (`lurq serve`) — the
+  hosted server cannot see them, so the tool is absent there rather than empty.
 - **Take stock of a whole project** → `audit` with the inventory you read from its
   `package.json` + lockfile and its MCP configs (names and versions only — never source).
   One call returns every outdated, deprecated and vulnerable dependency plus every MCP
@@ -84,6 +94,15 @@ reads like a guess.
   can catch it, and the symptom is a malformed call that looks like a model mistake.
   **Privilege widening** is a tool that stopped being read-only or started being
   destructive; nothing breaks, which is what makes it worse than a break.
+- **Add an MCP server to a client, or a remote server will not connect** → `connect_check`
+  with the endpoint URL, registry name or npm package, and the `client` you are wiring it
+  into (`claude-code`, `cursor`, `vscode`, `chatgpt`, `claude-ai`, `codex`, `gemini-cli`, …).
+  Returns `works`, `needs_setup` with the exact steps (a key header, an OAuth client to
+  pre-register and its redirect URIs), `blocked` with the reason, or `unknown`, plus config
+  in that client's own format. Built from a credential-free probe of the server and the
+  client's documented constraints. Use the returned config instead of writing one from
+  memory, put any setup step in front of the user, and never invent a key: header values
+  are placeholders. `unknown` is not "will not work".
 - **Visualize a stack you have already chosen** → `diagram` with the package names. A
   labeled starting point by layer — not a validated architecture.
 - **Unsure whether lurq covers the situation** → `capabilities` with what you are trying