mdkg 0.5.0 → 0.5.1

package/CHANGELOG.md

@@ -8,6 +8,23 @@ mdkg is pre-v1 public alpha software. Command, graph, cache, bundle, and DAL con
 
 ## Unreleased
 
+## 0.5.1 - 2026-07-14
+
+### Changed
+
+- Archive compression now derives writable ownership from enabled local
+  workspaces. `archive compress --all --ws <local-alias>` limits bulk selection,
+  and exact workspace-qualified archive qids are supported for direct targets.
+- Archive compression JSON receipts preserve existing fields and add selected
+  workspace and read-only imported-projection exclusion evidence.
+
+### Fixed
+
+- Fixed `archive compress --all` traversing imported subgraph ZIP-fragment paths
+  and potentially mutating earlier local archives before a later invalid target
+  failed. Imported archives remain discoverable but fail closed for direct
+  compression, and the complete local selection is preflighted before writes.
+
 ## 0.5.0 - 2026-07-11
 
 ### Added

package/CLI_COMMAND_MATRIX.md

@@ -1,7 +1,7 @@
 # CLI Command Matrix
 
-as_of: 2026-07-11
-package_version_in_source: 0.5.0
+as_of: 2026-07-14
+package_version_in_source: 0.5.1
 source: live help from `src/cli.ts`, runtime command handlers, and `dec-15`..`dec-18`
 status: canonical single-source command and flag reference for mdkg
 
@@ -657,9 +657,9 @@ Usage:
 - `mdkg archive show <id-or-archive-uri> [--ws <alias>] [--json]`
 - `mdkg archive verify [id-or-archive-uri] [--json]`
 - `mdkg archive verify [id-or-archive-uri] [--ws <alias>] [--json]`
-- `mdkg archive compress <id-or-archive-uri|--all> [--json]`
-- `mdkg archive compress <id-or-archive-uri> [--ws <alias>] [--json]`
-- `mdkg archive compress --all [--json]`
+- `mdkg archive compress <id-or-archive-uri-or-qid|--all> [--ws <local-alias>] [--json]`
+- `mdkg archive compress <id-or-archive-uri-or-qid> [--ws <local-alias>] [--json]`
+- `mdkg archive compress --all [--ws <local-alias>] [--json]`
 
 Fields:
 - archive sidecars use `type: archive`
@@ -673,6 +673,18 @@ Notes:
 - archive visibility defaults to `private`
 - `archive://<archive.id>` refs are validated against local archive sidecars
 - `archive verify` and `validate` both check the ZIP hash, ZIP readability, payload SHA-256, and payload byte size
+- archive compression is owned exclusively by enabled local workspaces; imported
+  archive projections remain visible to list/show/search but are read-only
+- `archive compress --all` selects every locally writable archive, while
+  `--all --ws <local-alias>` limits selection to one enabled local workspace
+- direct workspace-qualified qids such as `root:archive.example` are supported;
+  imported qids and `--ws <imported-alias>` fail before filesystem path
+  construction with source-workspace and bundle-refresh guidance
+- compression preflights ownership, identity, containment, symlinks, raw input,
+  and destinations for the complete selected set before the first write
+- JSON keeps `action`, `count`, and `archives`, and adds
+  `selection: { requested_workspace, selected_workspaces,
+  excluded_read_only: [{ workspace, qid, reason }] }`
 - `archive verify` passes when the raw local source file is missing but the committed sidecar and ZIP cache are valid
 - generated raw source copies live under `.mdkg/archive/**/source/` and are ignored by default
 - `doctor` warns when archive ZIP caches exceed `archive.large_cache_warning_bytes` (default `26214400`; `0` disables)

package/README.md

@@ -14,7 +14,7 @@ mdkg stays deliberately boring:
 - first-class rebuildable SQLite cache through built-in `node:sqlite`
 - no daemon, hosted index, or vector DB
 
-Current package version in source: `0.5.0`
+Current package version in source: `0.5.1`
 
 mdkg is still pre-v1 public alpha software. The public package is usable, but graph, cache, bundle, and DAL contracts may continue to change quickly while the project converges on a stable v1 surface.
 
@@ -653,6 +653,16 @@ When the source passed to `mdkg archive add` is inside the repo, `source_path` i
 
 Archive sidecar visibility defaults to `private`. Use `mdkg archive add --visibility public` only when the sidecar metadata and ZIP cache are safe for public packs or public bundles.
 
+Archive compression follows workspace ownership. `mdkg archive compress --all`
+compresses archives from enabled local workspaces and reports read-only imported
+archive projections as exclusions; it never treats bundle ZIP fragments as
+filesystem paths. Use `--all --ws <local-alias>` to limit bulk compression or a
+workspace-qualified qid such as `root:archive.example` for an exact local
+target. Direct imported qids and imported `--ws` aliases fail before writes with
+guidance to compress in the source workspace and refresh its subgraph bundle.
+The JSON receipt preserves `action`, `count`, and `archives` and adds the
+requested workspace, selected local workspaces, and excluded read-only qids.
+
 By default, init/upgrade ignore generated raw archive source copies with `.mdkg/archive/**/source/`; sidecar `.md` files and compressed `.zip` caches remain commit-eligible. `mdkg doctor` warns when a committed archive ZIP cache exceeds `archive.large_cache_warning_bytes` in `.mdkg/config.json` (default `26214400`; set `0` to disable). Large-cache warnings do not block archive add or validation.
 
 ## Current direction

package/dist/cli.js

@@ -583,8 +583,13 @@ function printArchiveHelp(log, subcommand) {
             break;
         case "compress":
             log("Usage:");
-            log("  mdkg archive compress <id-or-archive-uri> [--ws <alias>] [--json]");
-            log("  mdkg archive compress --all [--json]");
+            log("  mdkg archive compress <id-or-archive-uri-or-qid> [--ws <local-alias>] [--json]");
+            log("  mdkg archive compress --all [--ws <local-alias>] [--json]");
+            log("\nNotes:");
+            log("  - compression mutates archives owned by enabled local workspaces only");
+            log("  - --all excludes read-only imported archive projections and reports them in the receipt");
+            log("  - direct imported qids and --ws <imported-alias> fail with source-workspace guidance");
+            log("  - all selected archives pass ownership and path preflight before the first write");
             break;
         default:
             log("Usage:");
@@ -592,7 +597,7 @@ function printArchiveHelp(log, subcommand) {
             log("  mdkg archive list [--kind source|artifact] [--visibility private|internal|public] [--json]");
             log("  mdkg archive show <id-or-archive-uri> [--json]");
             log("  mdkg archive verify [id-or-archive-uri] [--json]");
-            log("  mdkg archive compress <id-or-archive-uri|--all> [--json]");
+            log("  mdkg archive compress <id-or-archive-uri-or-qid|--all> [--ws <local-alias>] [--json]");
             log("\nNotes:");
             log("  - archive add copies the source, writes a sidecar, and writes a deterministic zip cache");
             log("  - archive visibility defaults to private");

package/dist/command-contract.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "tool": "mdkg",
-  "package_version": "0.5.0",
+  "package_version": "0.5.1",
   "source": {
     "help_targets": "scripts/cli_help_targets.js",
     "command_matrix": "CLI_COMMAND_MATRIX.md"
@@ -25,7 +25,7 @@
         "  mdkg archive list [--kind source|artifact] [--visibility private|internal|public] [--json]",
         "  mdkg archive show <id-or-archive-uri> [--json]",
         "  mdkg archive verify [id-or-archive-uri] [--json]",
-        "  mdkg archive compress <id-or-archive-uri|--all> [--json]"
+        "  mdkg archive compress <id-or-archive-uri-or-qid|--all> [--ws <local-alias>] [--json]"
       ],
       "args": [
         {
@@ -39,9 +39,9 @@
           "source": "<id-or-archive-uri>"
         },
         {
-          "name": "id-or-archive-uri|--all",
+          "name": "id-or-archive-uri-or-qid|--all",
           "required": true,
-          "source": "<id-or-archive-uri|--all>"
+          "source": "<id-or-archive-uri-or-qid|--all>"
         }
       ],
       "flags": [
@@ -203,22 +203,22 @@
       "visibility": "public",
       "summary": "mdkg archive compress command",
       "usage": [
-        "  mdkg archive compress <id-or-archive-uri> [--ws <alias>] [--json]",
-        "  mdkg archive compress --all [--json]"
+        "  mdkg archive compress <id-or-archive-uri-or-qid> [--ws <local-alias>] [--json]",
+        "  mdkg archive compress --all [--ws <local-alias>] [--json]"
       ],
       "args": [
         {
-          "name": "id-or-archive-uri",
+          "name": "id-or-archive-uri-or-qid",
           "required": true,
-          "source": "<id-or-archive-uri>"
+          "source": "<id-or-archive-uri-or-qid>"
         }
       ],
       "flags": [
         {
           "name": "--all",
-          "value": "[--json]",
+          "value": "[--ws <local-alias>]",
           "required": false,
-          "description": "mdkg archive compress --all [--json]"
+          "description": "mdkg archive compress --all [--ws <local-alias>] [--json]"
         },
         {
           "name": "--help",
@@ -237,6 +237,12 @@
           "value": null,
           "required": false,
           "description": "--version, -V       Show version"
+        },
+        {
+          "name": "--ws",
+          "value": "<imported-alias>",
+          "required": false,
+          "description": "- direct imported qids and --ws <imported-alias> fail with source-workspace guidance"
         }
       ],
       "output_formats": [
@@ -245,7 +251,7 @@
       ],
       "json_schema_ref": "mdkg.command_output.v1",
       "side_effects": [
-        "refresh-archive-zip-cache"
+        "refresh-local-workspace-archive-zip-caches"
       ],
       "read_paths": [
         ".mdkg/**"
@@ -258,9 +264,11 @@
         "supported": false
       },
       "lock_policy": "mutation-lock-required",
-      "atomic_write_policy": "zip-temp-rename",
+      "atomic_write_policy": "full-selection-preflight-then-per-file-atomic-replacement",
       "receipts": [
-        "archive-compress-receipt"
+        "archive-compress-receipt",
+        "archive-workspace-selection-receipt",
+        "read-only-exclusion-receipt"
       ],
       "danger_level": "moderate",
       "aliases": [],
@@ -275,8 +283,8 @@
         }
       ],
       "examples": [
-        "  mdkg archive compress --all [--json]",
-        "  mdkg archive compress <id-or-archive-uri> [--ws <alias>] [--json]"
+        "  mdkg archive compress --all [--ws <local-alias>] [--json]",
+        "  mdkg archive compress <id-or-archive-uri-or-qid> [--ws <local-alias>] [--json]"
       ],
       "docs": {
         "help_target": "mdkg help archive compress",
@@ -10548,5 +10556,5 @@
       }
     }
   ],
-  "contract_hash": "e9bd2d82d340887bc58d518c7e67541996f4b7744b2d1981763060575265aa29"
+  "contract_hash": "1d137b3c750bc1d8b9bcb863123719d070291266582c8aec20f8e21529434d54"
 }

package/dist/commands/archive.js

@@ -83,6 +83,22 @@ function normalizeArchiveId(raw) {
     }
     return normalized;
 }
+function archiveTargetFromInput(value, ws) {
+    const uriId = (0, refs_1.archiveIdFromUri)(value);
+    if (uriId) {
+        return { id: normalizeArchiveId(uriId), workspace: normalizeWorkspace(ws) };
+    }
+    const separator = value.indexOf(":");
+    if (separator > 0) {
+        const workspace = normalizeWorkspace(value.slice(0, separator));
+        const id = normalizeArchiveId(value.slice(separator + 1));
+        if (ws && normalizeWorkspace(ws) !== workspace) {
+            throw new errors_1.UsageError(`archive qid ${value} conflicts with --ws ${normalizeWorkspace(ws)}`);
+        }
+        return { id, workspace };
+    }
+    return { id: normalizeArchiveId(value), workspace: normalizeWorkspace(ws) };
+}
 function archiveIdFromInput(value) {
     return normalizeArchiveId((0, refs_1.archiveIdFromUri)(value) ?? value);
 }
@@ -133,9 +149,8 @@ function maybeReindex(root) {
 function resolveArchiveNode(root, id, ws) {
     const config = (0, config_1.loadConfig)(root);
     const { index } = (0, index_cache_1.loadIndex)({ root, config });
-    const archiveId = archiveIdFromInput(id);
-    const wsHint = normalizeWorkspace(ws);
-    const qid = archiveId.includes(":") ? archiveId : `${wsHint}:${archiveId}`;
+    const target = archiveTargetFromInput(id, ws);
+    const qid = `${target.workspace}:${target.id}`;
     const node = index.nodes[qid];
     if (!node || node.type !== "archive") {
         throw new errors_1.NotFoundError(`archive not found: ${id}`);
@@ -143,6 +158,9 @@ function resolveArchiveNode(root, id, ws) {
     return node;
 }
 function archiveNodePaths(root, node) {
+    if (node.source?.imported || node.source?.read_only || node.path.includes("#")) {
+        throw new errors_1.ValidationError(`refusing to derive filesystem paths for read-only archive projection ${node.qid}`);
+    }
     const sidecarPath = path_1.default.resolve(root, node.path);
     const sidecarDir = path_1.default.dirname(sidecarPath);
     return {
@@ -175,9 +193,12 @@ function stringAttribute(value) {
     return typeof value === "string" && value.trim().length > 0 ? value : undefined;
 }
 function writeArchiveSidecar(root, sidecarPath, frontmatter, body) {
+    (0, filesystem_authority_1.atomicReplaceContainedFile)({ root, relativePath: toPosixPath(path_1.default.relative(root, sidecarPath)) }, formatArchiveSidecar(frontmatter, body));
+}
+function formatArchiveSidecar(frontmatter, body) {
     const lines = (0, frontmatter_1.formatFrontmatter)(frontmatter);
     const content = ["---", ...lines, "---", body.trimStart()].join("\n");
-    (0, filesystem_authority_1.atomicReplaceContainedFile)({ root, relativePath: toPosixPath(path_1.default.relative(root, sidecarPath)) }, content.endsWith("\n") ? content : `${content}\n`);
+    return content.endsWith("\n") ? content : `${content}\n`;
 }
 function verifyArchiveSidecar(root, ws, sidecarPath) {
     const relativePath = toPosixPath(path_1.default.relative(root, sidecarPath));
@@ -436,42 +457,137 @@ function runArchiveVerifyCommand(options) {
         throw new errors_1.ValidationError("archive verification failed");
     }
 }
-function runArchiveCompressCommandLocked(options) {
-    if (!options.all && !options.id) {
-        throw new errors_1.UsageError("archive compress requires <id-or-archive-uri> or --all");
+function isReadOnlyArchiveProjection(config, node) {
+    return Boolean(node.source?.imported ||
+        node.source?.read_only ||
+        config.subgraphs[node.source?.subgraph_alias ?? node.ws]);
+}
+function readOnlyArchiveError(node) {
+    const alias = node.source?.subgraph_alias ?? node.ws;
+    return new errors_1.ValidationError(`cannot compress read-only archive ${node.qid} from imported workspace ${alias}; ` +
+        "run compression in the source workspace and refresh the subgraph bundle");
+}
+function readOnlyWorkspaceError(alias) {
+    return new errors_1.ValidationError(`cannot compress archives in read-only imported workspace ${alias}; ` +
+        "run compression in the source workspace and refresh the subgraph bundle");
+}
+function assertWritableArchiveOwner(config, node) {
+    if (isReadOnlyArchiveProjection(config, node)) {
+        throw readOnlyArchiveError(node);
     }
-    const config = (0, config_1.loadConfig)(options.root);
-    const { index } = (0, index_cache_1.loadIndex)({ root: options.root, config });
-    const nodes = options.all
-        ? Object.values(index.nodes).filter((node) => node.type === "archive")
-        : [resolveArchiveNode(options.root, String(options.id), options.ws)];
-    const updated = [];
-    const today = (0, date_1.formatDate)(options.now ?? new Date());
-    for (const node of nodes) {
-        const { sidecarPath, rawPath, zipPath } = archiveNodePaths(options.root, node);
-        const rawRelativePath = toPosixPath(path_1.default.relative(options.root, rawPath));
-        const zipRelativePath = toPosixPath(path_1.default.relative(options.root, zipPath));
-        const sidecarRelativePath = toPosixPath(path_1.default.relative(options.root, sidecarPath));
-        for (const relativePath of [rawRelativePath, zipRelativePath, sidecarRelativePath]) {
-            (0, filesystem_authority_1.withContainedPathSink)({ root: options.root, relativePath, operation: relativePath === rawRelativePath ? "read" : "replace" }, () => undefined);
+    const workspace = config.workspaces[node.ws];
+    if (!workspace) {
+        throw new errors_1.ValidationError(`archive ${node.qid} has no configured local workspace owner`);
+    }
+    if (!workspace.enabled) {
+        throw new errors_1.ValidationError(`archive workspace ${node.ws} is disabled and not writable`);
+    }
+    const archiveRoot = (0, workspace_path_1.workspaceDocumentRelativePath)(workspace.path, workspace.mdkg_dir, "archive");
+    const nodePath = toPosixPath(node.path);
+    if (!nodePath.startsWith(`${archiveRoot}/`)) {
+        throw new errors_1.ValidationError(`archive ${node.qid} path is outside its configured local archive root: ${archiveRoot}`);
+    }
+}
+function resolveArchiveNodeFromIndex(index, id, ws) {
+    const target = archiveTargetFromInput(id, ws);
+    const qid = `${target.workspace}:${target.id}`;
+    const node = index.nodes[qid];
+    if (!node || node.type !== "archive") {
+        throw new errors_1.NotFoundError(`archive not found: ${id}`);
+    }
+    return node;
+}
+function selectArchiveCompressionNodes(options, config, index) {
+    if (options.all && options.id) {
+        throw new errors_1.UsageError("archive compress accepts either <id-or-archive-uri-or-qid> or --all, not both");
+    }
+    const requestedWorkspace = options.ws ? normalizeWorkspace(options.ws) : null;
+    const excluded = [];
+    let nodes;
+    if (options.all) {
+        if (requestedWorkspace && config.subgraphs[requestedWorkspace]) {
+            throw readOnlyWorkspaceError(requestedWorkspace);
         }
-        if (!(0, filesystem_authority_1.containedPathExists)({ root: options.root, relativePath: rawRelativePath })) {
-            throw new errors_1.NotFoundError(`raw archive file missing for ${node.qid}: ${path_1.default.relative(options.root, rawPath)}`);
+        if (requestedWorkspace) {
+            const workspace = config.workspaces[requestedWorkspace];
+            if (!workspace) {
+                throw new errors_1.NotFoundError(`workspace not found: ${requestedWorkspace}`);
+            }
+            if (!workspace.enabled) {
+                throw new errors_1.ValidationError(`archive workspace ${requestedWorkspace} is disabled and not writable`);
+            }
         }
-        const rawData = (0, filesystem_authority_1.readContainedFile)({ root: options.root, relativePath: rawRelativePath }, null);
-        const zipData = (0, zip_1.createDeterministicZip)(path_1.default.basename(rawPath), rawData);
-        (0, filesystem_authority_1.atomicReplaceContainedFile)({ root: options.root, relativePath: zipRelativePath }, zipData);
-        const parsed = (0, frontmatter_1.parseFrontmatter)((0, filesystem_authority_1.readContainedFile)({ root: options.root, relativePath: sidecarRelativePath }), sidecarPath);
-        const nextFrontmatter = {
-            ...parsed.frontmatter,
-            byte_size: String(rawData.length),
-            sha256: (0, archive_integrity_1.hashArchiveBuffer)(rawData),
-            compressed_sha256: (0, archive_integrity_1.hashArchiveBuffer)(zipData),
-            ingest_status: "compressed",
-            updated: today,
-        };
-        writeArchiveSidecar(options.root, sidecarPath, nextFrontmatter, parsed.body);
-        updated.push({
+        nodes = Object.values(index.nodes)
+            .filter((node) => node.type === "archive")
+            .sort((a, b) => a.qid.localeCompare(b.qid))
+            .filter((node) => {
+            if (requestedWorkspace && node.ws !== requestedWorkspace) {
+                return false;
+            }
+            if (isReadOnlyArchiveProjection(config, node)) {
+                if (!requestedWorkspace) {
+                    excluded.push({
+                        workspace: node.ws,
+                        qid: node.qid,
+                        reason: "read_only_imported_subgraph",
+                    });
+                }
+                return false;
+            }
+            assertWritableArchiveOwner(config, node);
+            return true;
+        });
+    }
+    else {
+        const node = resolveArchiveNodeFromIndex(index, String(options.id), options.ws);
+        assertWritableArchiveOwner(config, node);
+        nodes = [node];
+    }
+    return {
+        nodes,
+        selection: {
+            requested_workspace: requestedWorkspace,
+            selected_workspaces: Array.from(new Set(nodes.map((node) => node.ws))).sort(),
+            excluded_read_only: excluded.sort((a, b) => a.qid.localeCompare(b.qid)),
+        },
+    };
+}
+function preflightArchiveCompression(root, node, today) {
+    for (const attribute of ["stored_path", "compressed_path"]) {
+        if (typeof node.attributes[attribute] !== "string" || !String(node.attributes[attribute]).trim()) {
+            throw new errors_1.ValidationError(`${node.qid}: ${attribute} is required before archive compression`);
+        }
+    }
+    const { sidecarPath, rawPath, zipPath } = archiveNodePaths(root, node);
+    const rawRelativePath = toPosixPath(path_1.default.relative(root, rawPath));
+    const zipRelativePath = toPosixPath(path_1.default.relative(root, zipPath));
+    const sidecarRelativePath = toPosixPath(path_1.default.relative(root, sidecarPath));
+    for (const relativePath of [rawRelativePath, zipRelativePath, sidecarRelativePath]) {
+        (0, filesystem_authority_1.withContainedPathSink)({ root, relativePath, operation: relativePath === rawRelativePath ? "read" : "replace" }, () => undefined);
+    }
+    if (!(0, filesystem_authority_1.containedPathExists)({ root, relativePath: rawRelativePath })) {
+        throw new errors_1.NotFoundError(`raw archive file missing for ${node.qid}: ${path_1.default.relative(root, rawPath)}`);
+    }
+    const rawData = (0, filesystem_authority_1.readContainedFile)({ root, relativePath: rawRelativePath }, null);
+    const parsed = (0, frontmatter_1.parseFrontmatter)((0, filesystem_authority_1.readContainedFile)({ root, relativePath: sidecarRelativePath }), sidecarPath);
+    if (parsed.frontmatter.type !== "archive" || parsed.frontmatter.id !== node.id) {
+        throw new errors_1.ValidationError(`${node.qid}: archive sidecar identity changed before compression`);
+    }
+    const zipData = (0, zip_1.createDeterministicZip)(path_1.default.basename(rawPath), rawData);
+    const nextFrontmatter = {
+        ...parsed.frontmatter,
+        byte_size: String(rawData.length),
+        sha256: (0, archive_integrity_1.hashArchiveBuffer)(rawData),
+        compressed_sha256: (0, archive_integrity_1.hashArchiveBuffer)(zipData),
+        ingest_status: "compressed",
+        updated: today,
+    };
+    return {
+        zipRelativePath,
+        sidecarRelativePath,
+        zipData,
+        sidecarContent: formatArchiveSidecar(nextFrontmatter, parsed.body),
+        receipt: {
             workspace: node.ws,
             id: node.id,
             qid: node.qid,
@@ -482,14 +598,35 @@ function runArchiveCompressCommandLocked(options) {
             sha256: String(nextFrontmatter.sha256),
             compressed_sha256: String(nextFrontmatter.compressed_sha256),
             visibility: (0, visibility_1.normalizeVisibility)(typeof nextFrontmatter.visibility === "string" ? nextFrontmatter.visibility : undefined, "archive visibility"),
-        });
+        },
+    };
+}
+function runArchiveCompressCommandLocked(options) {
+    if (!options.all && !options.id) {
+        throw new errors_1.UsageError("archive compress requires <id-or-archive-uri-or-qid> or --all");
+    }
+    const config = (0, config_1.loadConfig)(options.root);
+    const { index } = (0, index_cache_1.loadIndex)({ root: options.root, config });
+    const { nodes, selection } = selectArchiveCompressionNodes(options, config, index);
+    const today = (0, date_1.formatDate)(options.now ?? new Date());
+    const plans = nodes.map((node) => preflightArchiveCompression(options.root, node, today));
+    const updated = [];
+    for (const plan of plans) {
+        (0, filesystem_authority_1.atomicReplaceContainedFile)({ root: options.root, relativePath: plan.zipRelativePath }, plan.zipData);
+        (0, filesystem_authority_1.atomicReplaceContainedFile)({ root: options.root, relativePath: plan.sidecarRelativePath }, plan.sidecarContent);
+        updated.push(plan.receipt);
     }
     maybeReindex(options.root);
     if (options.json) {
-        console.log(JSON.stringify({ action: "compressed", count: updated.length, archives: updated }, null, 2));
+        console.log(JSON.stringify({ action: "compressed", count: updated.length, archives: updated, selection }, null, 2));
         return;
     }
     console.log(`archive compressed: ${updated.length}`);
+    console.log(`selected workspaces: ${selection.selected_workspaces.join(", ") || "none"}`);
+    console.log(`excluded read-only projections: ${selection.excluded_read_only.length}`);
+    for (const excluded of selection.excluded_read_only) {
+        console.log(`  - ${excluded.qid} (${excluded.reason})`);
+    }
 }
 function withArchiveLock(root, fn) {
     const config = (0, config_1.loadConfig)(root);

package/dist/init/init-manifest.json

@@ -1,7 +1,7 @@
 {
   "schema_version": 1,
   "tool": "mdkg",
-  "mdkg_version": "0.5.0",
+  "mdkg_version": "0.5.1",
   "files": [
     {
       "path": ".mdkg/config.json",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mdkg",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Git-native project memory for AI coding agents",
   "license": "MIT",
   "bin": {