v1.93.0.0 wave(browse): #3700 #3773 #3779 #3817 #3842 (#3858)

* feat(loadouts): Opus 5.5 lite loadout with explicit model detection (GSTA-161) modules/loadouts.json gains the lite loadout (eleven coaching preamble pieces dropped; upgrade-check and brain-sync kept) and a models map that sends only claude-opus-5-5 (and its dated snapshots) to it. Detection is explicit: Capy passes --model to the installer, Claude Code opts in with ./setup --loadout lite; anything unmapped, invalid or unreadable serves full. The checkout always stays the full render. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs(loadouts): Opus 5.5 lite, detection order, Capy SKILL_ROOT, setup --loadout; troubleshooting anchors; changelog fragment (GSTA-161) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(loadouts): claude_loadout read through CONFIG_BIN; capy skill context ceiling for the --model line (GSTA-161) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (prune keeps a reused loadout folder, GSTACK_LOADOUT_SKILL_ROOT, claude_loadout guard test) (GSTA-161) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (Capy skill passes the model as GSTACK_MODEL so an older installer ignores it) (GSTA-161) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (prune only owned, unused folders; full root from the canonical Claude install; fallback reason and source) (GSTA-161) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: loadout source example, install and resolve commands, Capy launch-file note (GSTA-161) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * feat(autoplan): --ceo-only runs the CEO review alone with zero questions (GST-537) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test: classify autoplan-ceo-only in the Codex host metadata Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: select autoplan-ceo-only on the skills it runs; say it needs Claude Code Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test: run autoplan-ceo-only in the marathon lane Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: changelog entry for /autoplan --ceo-only Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test: count the autoplan-ceo-only paid file in the shard inventory Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * feat: gstack-autoplan next --ceo-only runs the CEO review alone and ends reviewed (GST-537) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: budget and close recover a budget-stopped CEO-only run; reviewed is at rest for checkpoints Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: CEO-only finish leaves owner-only cap items undecided, refuses marker phase flags and a plan at the report path, and replaces ceo-review.md atomically Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: the CEO-only report-path guard compares real paths and refuses at the finish when the report file is the plan Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: CEO_ONLY_CONFLICT covers a plan linked to the report path Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(browse): failing-first device and touch tests (GSTA-227 F3, #3058) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: the report-path guard keeps the lexical check, skips safe hard links and compares bigint file ids Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * browse: per-session tabs for parallel agents; tab pins stop moving the shared active tab (#1961) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * browse: keep the server.ts tab-pin anchor comment for source guards Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * feat(browse): per-tab phone emulation and touch input ($B device, tap, swipe, pinch, touch; #3058, GSTA-227 F3) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test: copy lib/result-codes-autoplan.ts into the fixtures that copy the result-code tables, and keep it out of derived closures Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs(qa, aside): touch pointer in /qa, Aside touch recipe verified on Aside 1.26, report Phones row (GSTA-227 F3, #3058) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * browse: drop the sessions paragraph from /browse to stay inside the parity cap Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * changelog: F3 phone emulation and touch entry Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * browse: hide the ps window in the session harness walk Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: the decisions.jsonl status list names auto_kept Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(browse): session cap, LRU eviction, headed release and scoped auto-session rows Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * browse: sessions keep tab <id> picks, sidebar claude stays on the user's tab, pinned rebuild and state load rebind the scope Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (touch cancel with no finger held is a no-op) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: Step 11 review fixes (headed tab adoption, pinned viewport reset, CLI retry keeps --session, rebuild id remap, --json notice, evicted-session reset, device kept after annotated captures, render opts out of sessions, session: client ids reserved) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: headed viewport auto keeps the user's active tab; render's closetab opts out of sessions Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: sessions, phone emulation and touch in BROWSER.md; session: client ids reserved; TODOS #1961/#3058 shipped Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test: copy lib/result-codes-browse.ts into the fixtures that copy the result-code modules lib/result-codes.ts imports ./result-codes-browse, so fixtures with an explicit lib list failed with 'Cannot find module'. pr-dependencies lists it with the other reason-code modules as selection data. GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * feat: gstack-clean reclaims per-repo .gstack scratch and logs, dry run by default (#2627) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * browse: name the Aside touch recipe's coordinates <tap-x>/<tap-y> with a numeric grammar The generated-bash lint (INV-3) rejected the free-text <x>/<y> placeholders. GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(clean): leave hard-linked and unreadable logs alone; cut through a no-follow descriptor checked against the evaluated inode Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(clean): tests that expect tmp removal see a quiet ps, so a codex elsewhere on the host cannot flake them Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(clean): an unlistable tmp/ skips its group; liveness asked once per group on apply; BROWSER.md says which logs reset at daemon start Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(clean): write output synchronously so --json reaches a pipe whole; test fixes for root, wrapper git and the ps stub Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(clean): every change rechecks the verified folder and the measured file; full writes; EPIPE ends output quietly Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(clean): the early-close test checks the bin's own exit status Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: list gstack-clean among the standalone CLIs Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(clean): copied-install fixtures and the dependency list carry lib/result-codes-clean.ts The remote pregate failed 11 cases in gstack-doctor, plan-tune-cathedral and timeline-stop-hook-slug: each copies an explicit list of lib/result-codes-*.ts files into a temp install, and lib/result-codes.ts now imports ./result-codes-clean. Same lists GSTA-168 extended for result-codes-eval. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * chore: regenerate gstack-doctor-components.sh for the gstack-clean result codes Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * qa: fold the touch pointer into the Phases sentence to fit the parity size cap after the main merge qa's union was 95988 bytes (ratio 1.142 > maxSizeRatio 1.142, train 75). Now 95975 (1.1419). GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: #3058 troubleshooting 'Fixed in' lines name v1.92.10.0 after the main merge GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(clean): classify gstack-tasks rows files (tasks-*) as kept, after main added the producer Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: #3058 troubleshooting 'Fixed in' lines name v1.92.20.0 after the main merge GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (restore the lib/result-codes-plan.ts ratchet row the base merge dropped) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(clean): the producer scan ends a name at a colon, so prose after a path names the file (train 78) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: #3058 troubleshooting 'Fixed in' lines name v1.92.30.0 after the main merge GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * outside-voice-api: caller receipts, stop_reason, OpenAI max_completion_tokens A caller can write its own egress receipt (sink, consent, payload class); the default stays the outside-voice receipt, so existing callers send and record the same bytes. The result carries the provider's stop reason, and an OpenAI request gets max_completion_tokens only when the caller sets an output limit (GST-537 PR 3). Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * autoplan gate: item classes and the owner's answer provenance Gate items carry item_class, ruleKept() names the keep-direction pick, and answered decision rows record owner_mode, owner_named, rec_hash and answered_role parsed from the owner's own words (GST-537 PR 3). Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * autoplan: shadow-mode decider module, frozen prompt and spend accounting The switch (off by default, fixed at init), the lease, one model call per gate with a page retry and a truncation retry under one deadline, the once-per-revision record with its journaled sha256, the 10% audit mark, and shadow-labeled ledger rows that count against the cap, show as shadow= on GATE_SPEND and stay out of the per-voice price (GST-537 PR 3). Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * gstack-autoplan: shadow every published gate, the shadow export, config and docs Every driver command that prints a gate records the shadow first and checkpoints after it; answer waits for a live lease and records a dead one retrospectively; gstack-autoplan shadow exports answered revisions for taste-replay R2 (SHADOW_BEFORE_ANSWER otherwise); gstack-config autoplan_shadow / autoplan_shadow_model; gstack-artifact validate checks the record's hash (GST-537 PR 3). Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * changelog: shadow mode for the CEO-only decider (GST-537 PR 3) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * autoplan shadow: /ship review fixes - register test/fixtures/shadow-fake-model.ts in FREE_FIXTURES (free-fixtures inventory failed) - withRunLock: count dead-owner reclaims apart from waitMs iterations, so a long wait can still reclaim - buildPage: fill the decider template in one pass, so slot names inside the plan stay plan text - revise regate: the shared publish step prints the GATE and ESCALATE lines once Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * autoplan shadow: reply files never follow a link; the retry reserves against the current cap - a model reply is written by temp file and rename, so a link at the reply path is replaced, not written through - each shadow reservation reads the run's current spend cap, so a budget change during the call is not undone Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * outside-voice-api: write the egress receipt under the caller's env callModel resolved the receipt's state root from process.env even when the caller passed env, so the shadow tests wrote to the real ~/.gstack (the free-suite home-containment guard caught it). The receipt now uses req.env; the shadow tests give the fake model a private HOME, GSTACK_HOME and GSTACK_STATE_ROOT, and the receipt test no longer sets process.env to pass. Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(autoplan): CEO-only runs leave main's open Critical/High finding items to the owner (no decision row) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(autoplan): shadow pages carry main's finding items; a finding item is never ceo_eligible After merging #3767 (main 90a170c), open Critical/High findings are gate items (item_class finding). The shadow records one row per gate item, so its pages now include them. A CEO-only run leaves those items to the owner, so their rows are ceo_eligible false (rule_pick was already null). The shadow fixtures follow main's gate (items, counts, "Do it" tokens); the two merge adapters follow main's doNext(out, rest, price) and its per-voice reservation (--estimate-usd). Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs: #3058 troubleshooting 'Fixed in' lines name v1.92.61.0 after the main merge GSTA-227 Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(investigate): drop the five-phase step procedure (GST-938) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * changelog: GST-938 fragment wording Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix(investigate): keep the web-search sanitize guard; update BROWSER.md and docs/skills.md (review pass 1) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * changelog: GST-938 wording Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(investigate): pin the web-search guard; changelog size (adversarial review) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * test(clean): classify restamp-staging.json, the restamp producer main gained after #3779's base (wave browse) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: pre-landing review fixes (wave browse): scoped newtab keeps a concurrent tab switch; shadow validate catches a deleted record; a failed shadow publish is journaled Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: a failed shadow publish journals under the run lock and never throws (wave browse review pass 2) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * docs(unattended): shadow publish failures and the missing-record validate check (wave browse docs audit) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * changelog: wave browse integrator fixes fragment Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * fix: shadow reader dedupes by run folder, so two runs started in the same second both count (wave browse CI free-suite 16) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * chore: regenerate doctor result anchors in generator order (wave browse rebuild without #3818) Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> * changelog: name the wave fragment after the rebuilt wave Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com> --------- Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>
2026-11-03 15:27:56 +01:00 · 2026-11-02 14:49:46 +00:00
1 parent 1a7f2578b7
commit 9d9d4c31bb
@@ -5,6 +5,14 @@
 *   gstack-modules validate
 *   gstack-modules render --host <h> (--loadout <name> | --modules <base>,-id,+id) --out-dir <d>
 *                         [--install-root <abs>] [--model <id>] [--plan-mode on|off]
+ *                         [--bind-model <id> --full-root <abs>]
+ *   gstack-modules resolve [--model <id>] [--loadout <name>]
+ *   gstack-modules install --full-root <abs> [--model <id>] [--loadout <name>] [--store <dir>] [--plan-mode on|off]
+ *
+ * resolve and install pick the loadout through lib/model-detect.ts. install
+ * prints `LOADOUT: …` and `SKILL_ROOT: <dir>`: the full root for full, else
+ * the published lite tree (scripts/modules-install.ts). A lite render that
+ * fails prints LOADOUT_FALLBACK and serves full, exit 0.
 *
 * Exit 0 on success, 2 on a refused input (ModuleError, printed with its code,
 * fix and docs anchor), 1 on an unexpected failure.
@@ -14,8 +22,11 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { resolveHostArg } from '../hosts/index';
 import { resolveModel } from './models';
-import { LOADOUTS_FILE, ModuleError, loadLoadouts, moduleCatalog, selectModules, validateLoadouts } from './modules';
+import { LOADOUTS_FILE, MODEL_ID_RE, ModuleError, loadLoadouts, moduleCatalog, normalizeModelId, selectModules, validateLoadouts } from './modules';
 import { renderLoadout } from './modules-render';
+import { installLoadout } from './modules-install';
+import { describeResolution, resolveLoadout } from '../lib/model-detect';
+import { resolveStateRoot } from '../lib/state-root';
 import type { Host } from './resolvers/types';

 const ROOT = path.resolve(import.meta.dir, '..');
@@ -24,7 +35,14 @@ const USAGE = `Usage:
  gstack-modules validate                   check ${LOADOUTS_FILE} against the catalog
  gstack-modules render --host <h> (--loadout <name> | --modules <base>,-id,+id) --out-dir <d>
                        [--install-root <abs>] [--model <id>] [--plan-mode on|off]
-                                            render one loadout and write loadout.lock.json
+                        [--bind-model <id> --full-root <abs>]
+                                            render one loadout and write loadout.lock.json;
+                                            --bind-model bakes the start lines an install
+                                            for that model serves
+  gstack-modules resolve [--model <id>] [--loadout <name>]
+                                            the loadout an install would serve, and why
+  gstack-modules install --full-root <abs> [--model <id>] [--loadout <name>] [--store <dir>] [--plan-mode on|off]
+                                            publish that loadout and print SKILL_ROOT
 Guide: docs/loadouts.md`;

 export interface CliResult { code: number; stdout: string; stderr: string }
@@ -74,10 +92,38 @@ export async function modulesMain(args: string[]): Promise<CliResult> {
      if (planMode !== undefined && planMode !== 'on' && planMode !== 'off') throw new ModuleError('MODULE_SPEC_INVALID', '--plan-mode takes on or off', 'drop it, or pass --plan-mode off');
      const installRoot = flag(rest, '--install-root');
      if (installRoot !== undefined && !/^\/[A-Za-z0-9_.@+\/-]*$/.test(installRoot)) throw new ModuleError('MODULE_SPEC_INVALID', '--install-root must be a plain absolute path', 'pass the absolute install root setup would use');
-      const selection = selectModules({ loadout, modules });
+      const bindModel = flag(rest, '--bind-model');
+      const fullRoot = flag(rest, '--full-root');
+      const selected = selectModules({ loadout, modules });
+      if ((bindModel === undefined) !== (fullRoot === undefined)) throw new ModuleError('MODULE_SPEC_INVALID', '--bind-model and --full-root go together', 'pass both, or neither');
+      if (bindModel !== undefined && !selected) throw new ModuleError('MODULE_SPEC_INVALID', '--bind-model needs a loadout that excludes something', 'drop --bind-model for the full loadout');
+      if (bindModel !== undefined && !MODEL_ID_RE.test(normalizeModelId(bindModel))) throw new ModuleError('MODULE_SPEC_INVALID', '--bind-model is not a plain model id', 'pass an id such as claude-opus-5-5');
+      if (fullRoot !== undefined && !/^\/[A-Za-z0-9_.@+\/-]*$/.test(fullRoot)) throw new ModuleError('MODULE_SPEC_INVALID', '--full-root must be a plain absolute path', 'pass the full install root, for example --full-root "$HOME/.claude/skills"');
+      const selection = selected && bindModel !== undefined ? { ...selected, boundModel: normalizeModelId(bindModel), fullRoot } : selected;
      const lock = await renderLoadout({ host, selection, outDir, installRoot: installRoot ?? null, model, planMode: planMode !== 'off' });
      return { code: 0, stdout: `RENDERED: loadout=${lock.loadout} host=${host} files=${lock.files.length} bytes=${lock.total_bytes} excluded=${lock.excluded.length} lock=${path.join(path.resolve(outDir), 'loadout.lock.json')}\n`, stderr: '' };
    }
+    if (command === 'resolve' || command === 'install') {
+      const resolution = resolveLoadout({ loadout: flag(rest, '--loadout'), model: flag(rest, '--model') });
+      const notice = resolution.notice ? `${resolution.notice}\n` : '';
+      if (command === 'resolve') return { code: 0, stdout: describeResolution(resolution) + '\n', stderr: notice };
+      const fullRoot = flag(rest, '--full-root');
+      if (!fullRoot || !/^\/[A-Za-z0-9_.@+\/-]*$/.test(fullRoot)) throw new ModuleError('MODULE_SPEC_INVALID', 'install needs --full-root <plain absolute path>', 'pass the full install root, for example --full-root "$HOME/.claude/skills"');
+      const planMode = flag(rest, '--plan-mode');
+      if (planMode !== undefined && planMode !== 'on' && planMode !== 'off') throw new ModuleError('MODULE_SPEC_INVALID', '--plan-mode takes on or off', 'drop it, or pass --plan-mode off');
+      const full = (line: string) => ({ code: 0, stdout: `${line}\nSKILL_ROOT: ${fullRoot}\n`, stderr: notice });
+      if (resolution.loadout === 'full') return full(describeResolution(resolution));
+      try {
+        const selection = selectModules({ loadout: resolution.loadout });
+        if (!selection) return full(describeResolution(resolution));
+        const store = flag(rest, '--store') ?? path.join(resolveStateRoot(), 'loadouts');
+        const result = await installLoadout({ selection, boundModel: resolution.model, fullRoot, store, planMode: planMode !== 'off' });
+        return { code: 0, stdout: `${describeResolution(resolution)} digest=${result.lock.identity_sha256.slice(0, 12)} reused=${result.reused ? 'yes' : 'no'}\nSKILL_ROOT: ${result.root}\n`, stderr: notice };
+      } catch (error) {
+        const why = error instanceof ModuleError ? `${error.code}: ${error.message}` : (error as Error).message;
+        return { code: 0, stdout: `${describeResolution({ ...resolution, loadout: 'full', model: null, reason: 'render-failed' })}\nSKILL_ROOT: ${fullRoot}\n`, stderr: `${notice}LOADOUT_FALLBACK: ${why.replace(/[\x00-\x1f\x7f]/g, ' ').slice(0, 400)}; serving full (docs/troubleshooting.md#loadout-fallback)\n` };
+      }
+    }
    return { code: 2, stdout: '', stderr: `Unknown command ${JSON.stringify(command.slice(0, 40))}.\n${USAGE}\n` };
  } catch (error) {
    if (error instanceof ModuleError) return { code: 2, stdout: '', stderr: `${error.code}: ${error.message}\n` };