@@ -76,13 +76,27 @@ place under the same version keeps showing the icon it had until a restart.
 |---|---|
 | `SearchQueryService` (3.5.0 → 3.0.0-beta → unversioned) | package search |
 | `PackageBaseAddress/3.0.0` | version enumeration, update detection, `.nupkg` and embedded-icon URLs |
-| `RegistrationsBaseUrl` (3.6.0 → 3.4.0 → 3.0.0-rc → 3.0.0-beta → unversioned) | package metadata, listed/unlisted checks |
+| `RegistrationsBaseUrl` (3.6.0 → 3.4.0 → 3.0.0-rc → 3.0.0-beta → unversioned) | package metadata, listed/unlisted checks; versions, `.nupkg` URLs and metadata when there is no `PackageBaseAddress` |
 
 A feed needs `PackageBaseAddress` or `RegistrationsBaseUrl` to be usable. If it advertises no
 `SearchQueryService` — or its search returns nothing — search degrades to an exact
 package-id lookup against the flat container. Flat-container version lists include unlisted
 versions, so an update candidate is confirmed against its registration leaf before being
-surfaced.
+surfaced. A version index answering 404 means the package is not on that feed, not a failed
+check, since .NET Tool asks every configured feed about every installed tool.
+
+A registration-only feed (JFrog Artifactory serves no flat container) is read through its
+registration index instead: versions come from its pages, fetching only the pages above the
+installed version during an update check; the `.nupkg` URL comes from the registration leaf;
+and metadata comes from the version's page entry when the leaf carries no `catalogEntry`.
+None of this runs for a feed that has a flat container.
+
+On V2, Artifactory answers `GetUpdates()` with nothing unless `includeAllVersions` is true, and
+then truncates the list at 100 without a next link. So when every `GetUpdates()` batch of a
+source comes back empty, one `includeAllVersions=true` request tells "nothing is newer" (still
+empty: stop there) from "this server ignores the request", in which case each installed package
+is looked up with `FindPackagesById()?$filter=IsLatestVersion` (`IsAbsoluteLatestVersion` with
+pre-releases). V2 version lists follow `next` links, up to 50 pages.
 
 ### Fallback behaviour
 
@@ -92,9 +106,24 @@ retried against a fabricated V2 endpoint. V2-only feeds never enter the V3 path
 
 ### Which feed is which
 
-- **.NET Tool** — `https://api.nuget.org/v3/index.json`. Safe to repoint because the manager
-  does not support custom sources and never passes the source URL to the `dotnet` CLI. Also
-  filters search on `packageType=DotnetTool`.
+- **.NET Tool** — the enabled sources of the user's NuGet configuration, read (not edited) by
+  `DotNetSourceHelper` from `dotnet nuget list source --format Detailed` run in the user profile
+  with `DOTNET_CLI_UI_LANGUAGE=en`, so `disabledPackageSources` and the whole config hierarchy
+  apply as they do for `dotnet tool install`. Output it cannot read, or a failed command, falls
+  back to nuget.org. The files from `dotnet nuget config paths` supply `packageSourceMapping`
+  (an installed package is never sent to a feed the mapping does not allow for its id) and basic
+  `packageSourceCredentials` (clear text, or DPAPI-encrypted with the `NuGet` entropy on
+  Windows; a closer file's entry wins even when it cannot be used, such as one restricted to
+  `negotiate`). `NuGetFeedCredentials` keys each credential by its feed, since feeds sharing a
+  server (Azure Artifacts) carry different ones, and sends it only on requests made for that
+  feed and only to that feed's own server; every request site passes the feed it belongs to.
+  The snapshot is kept until a config file's write time changes, or for ten minutes. Updates are
+  checked on every enabled feed and the newest wins; the feed at nuget.org's URL is always
+  `DefaultSource`, whatever its key. `dotnet tool list` names no feed, so installed tools sit
+  under nuget.org when it is enabled, else the first feed, and `InstalledPackagesKeepTheirSource`
+  is false so loaders match them to updates and search results from any feed by id. Search
+  filters on `packageType=DotnetTool` on V3 feeds and local folders; V2 feeds have no such
+  filter and may list libraries. Icons and installer downloads do not carry credentials.
 - **PowerShell / PowerShell 7** — sources are enumerated from `Get-PSRepository` (or
   `Get-PSResourceRepository` on PowerShell 7), so the URL is CLI-owned identity
   (`PowerShellSourceHelper` compares it literally to choose `Register-PSRepository -Default`)
 
@@ -201,17 +201,48 @@ symbolic links and junctions are not followed.
 
 | Command | Required options | Optional options | Notes |
 | --- | --- | --- | --- |
-| `manager list` | None | None | Lists managers and their automation-relevant capability flags. |
-| `manager maintenance` | `--manager <id>` | None | Returns maintenance metadata for one manager. |
+| `manager list` | None | None | Lists managers, their automation-relevant capability flags and their listing health (see below). |
+| `manager maintenance` | `--manager <id>` | None | Returns maintenance metadata for one manager, including the actions it supports in `supportedActions` and its listing health. |
 | `manager reload` | `--manager <id>` | None | Reloads one manager. |
 | `manager set-executable` | `--manager <id>`, `--path <path>` | None | Sets a custom executable override, then reloads the manager. |
 | `manager clear-executable` | `--manager <id>` | None | Clears the custom executable override, then reloads the manager. |
-| `manager action` | `--manager <id>`, `--action <action>` | `--confirm` | Runs a manager-specific maintenance action. |
+| `manager action` | `--manager <id>`, `--action <action>` | `--confirm` | Runs one of the actions the manager lists in `supportedActions`. Every action except `reload` requires `--confirm`. |
 | `manager enable` | `--manager <id>` | None | Enables the manager. |
 | `manager disable` | `--manager <id>` | None | Disables the manager. |
 | `manager notifications enable` | `--manager <id>` | None | Enables update notifications for the manager. |
 | `manager notifications disable` | `--manager <id>` | None | Disables update notifications for the manager. |
 
+Maintenance actions, as `manager action --action` accepts them:
+
+| Action | Managers | Notes |
+| --- | --- | --- |
+| `reload` | All | Looks for the manager again and reloads its configuration. |
+| `stop-stuck-listings` | All | Kills the processes of any search, package listing or maintenance command the manager is still running. |
+| `repair-winget` | WinGet (Windows) | Clears WinGet's temp folder, resets its sources, repairs it through `Microsoft.WinGet.Client` and resets App Installer. Elevated. |
+| `reset-sources` | WinGet (Windows) | Runs `winget source reset --force`. Elevated. |
+| `install-scoop`, `uninstall-scoop` | Scoop (Windows) | Installs Scoop (elevated), or removes it with every package it installed. |
+| `cleanup-scoop` | Scoop (Windows) | Removes old app versions, per user and machine-wide (the machine-wide half is elevated), then empties Scoop's download cache, which both scopes share. |
+| `clear-cache` | Chocolatey, Pip, Npm, Bun, .NET Tool, Homebrew | Runs the manager's own cache-cleaning command. |
+
+Actions that need the manager's own executable are only listed once the manager has been found. `repair-winget`, `reset-sources` and `install-scoop` are listed even when it has not. A maintenance command that runs for more than 15 minutes is stopped and reported as failed.
+
+#### Manager health
+
+`manager list` and `manager maintenance` include a `health` object built from a record UniGetUI keeps
+for each manager across restarts, in `ManagerHealth.json` in its data folder:
+
+| Field | Meaning |
+| --- | --- |
+| `state` | `loading` (still starting), `unknown` (nothing listed yet), `healthy`, `failing`, `malfunctioning`, `not-found` or `disabled`. |
+| `needsAttention` | `true` when the app shows its health banner: a malfunction, or a listing that failed at least twice in a row with its last failure in the past 24 hours. For WinGet, Apt, Dnf and Pacman a single failed installed listing is enough. |
+| `failingListing` | `search`, `installed` or `updates`: the listing that failed most recently, or `installed` for a malfunction. |
+| `reason`, `consecutiveFailures` | The failing listing's last error and how many times in a row it failed. |
+| `search`, `installed`, `updates` | Per listing: `lastSuccessUtc`, `lastFailureUtc`, `lastFailureReason`, `lastFailureWasTimeout`, `consecutiveFailures`, `lastPackageCount`, `lastFastRepairUtc`, `lastFastRepairReason` (a first attempt that failed and was retried) and `recentDurationsMs` (the last ten). |
+
+A manager is `malfunctioning` when it is ready, its installed listing succeeded and returned no package
+at all, and a working installation of it always lists something (WinGet, Apt, Dnf and Pacman). The
+`DisableWinGetMalfunctionDetector` setting still turns this off for WinGet.
+
 ### Sources
 
 | Command | Required options | Optional options | Notes |
 
@@ -273,15 +273,19 @@ the machine must be restarted before the change takes effect. See
 
 | Method | Path | Auth | Parameters/body | CLI equivalent |
 | --- | --- | --- | --- | --- |
-| `GET` | `/uniget/v1/managers` | Yes | None | `manager list` |
-| `GET` | `/uniget/v1/managers/maintenance` | Yes | Query `manager` | `manager maintenance` |
+| `GET` | `/uniget/v1/managers` | Yes | None | `manager list`; each manager carries a `health` object |
+| `GET` | `/uniget/v1/managers/maintenance` | Yes | Query `manager` | `manager maintenance`; includes `supportedActions` and `health` |
 | `POST` | `/uniget/v1/managers/maintenance/reload` | Yes | JSON body: manager maintenance request body | `manager reload` |
 | `POST` | `/uniget/v1/managers/maintenance/executable/set` | Yes | JSON body: manager maintenance request body | `manager set-executable` |
 | `POST` | `/uniget/v1/managers/maintenance/executable/clear` | Yes | JSON body: manager maintenance request body | `manager clear-executable` |
 | `POST` | `/uniget/v1/managers/maintenance/action` | Yes | JSON body: manager maintenance request body | `manager action` |
 | `POST` | `/uniget/v1/managers/set-enabled` | Yes | Query `manager`, `enabled` | `manager enable`, `manager disable` |
 | `POST` | `/uniget/v1/managers/set-update-notifications` | Yes | Query `manager`, `enabled` | `manager notifications enable`, `manager notifications disable` |
 
+`/managers/maintenance/action` accepts any action the manager lists in `supportedActions`, and refuses
+every action but `reload` unless the body sets `confirm` to `true`. The actions and the `health` fields
+are described in [docs/CLI.md](CLI.md#manager-health).
+
 ### Sources
 
 | Method | Path | Auth | Parameters/body | CLI equivalent |
 
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "Maak die venster wyer om pakketbesonderhede hier te wys",
   "Details panel": "Besonderhede-paneel",
   "Show details panel": "Wys besonderhede-paneel",
-  "Hide details panel": "Versteek besonderhede-paneel"
+  "Hide details panel": "Versteek besonderhede-paneel",
+  "Fit columns to the window": "Pas kolomme by die venster aan",
+  "How to set up {0}": "Hoe om {0} op te stel",
+  "Install it with this command:": "Installeer dit met hierdie opdrag:",
+  "Open in a terminal": "Maak in 'n terminaal oop"
 }
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "وسّع النافذة لعرض تفاصيل الحزمة هنا",
   "Details panel": "لوحة التفاصيل",
   "Show details panel": "إظهار لوحة التفاصيل",
-  "Hide details panel": "إخفاء لوحة التفاصيل"
+  "Hide details panel": "إخفاء لوحة التفاصيل",
+  "Fit columns to the window": "ملاءمة الأعمدة مع النافذة",
+  "How to set up {0}": "كيفية إعداد {0}",
+  "Install it with this command:": "ثبّته باستخدام هذا الأمر:",
+  "Open in a terminal": "فتح في نافذة طرفية"
 }
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "Павялічце шырыню акна, каб паказаць тут звесткі пра пакет",
   "Details panel": "Панэль звестак",
   "Show details panel": "Паказваць панэль звестак",
-  "Hide details panel": "Схаваць панэль звестак"
+  "Hide details panel": "Схаваць панэль звестак",
+  "Fit columns to the window": "Падагнаць слупкі пад памер акна",
+  "How to set up {0}": "Як наладзіць {0}",
+  "Install it with this command:": "Усталюйце яго з дапамогай гэтай каманды:",
+  "Open in a terminal": "Адкрыць у тэрмінале"
 }
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "Разширете прозореца, за да покажете подробностите за пакета тук",
   "Details panel": "Панел с подробности",
   "Show details panel": "Показване на панела с подробности",
-  "Hide details panel": "Скриване на панела с подробности"
+  "Hide details panel": "Скриване на панела с подробности",
+  "Fit columns to the window": "Побери колоните в прозореца",
+  "How to set up {0}": "Как да настроите {0}",
+  "Install it with this command:": "Инсталирайте го със следната команда:",
+  "Open in a terminal": "Отваряне в терминал"
 }
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "এখানে প্যাকেজের বিবরণ দেখাতে উইন্ডোটি আরও প্রশস্ত করুন",
   "Details panel": "বিবরণ প্যানেল",
   "Show details panel": "বিবরণ প্যানেল দেখান",
-  "Hide details panel": "বিবরণ প্যানেল লুকান"
+  "Hide details panel": "বিবরণ প্যানেল লুকান",
+  "Fit columns to the window": "উইন্ডোর সঙ্গে কলাম মানানসই করুন",
+  "How to set up {0}": "{0} কীভাবে সেট আপ করবেন",
+  "Install it with this command:": "এই কমান্ডটি দিয়ে এটি ইনস্টল করুন:",
+  "Open in a terminal": "টার্মিনালে খুলুন"
 }
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "Amplieu la finestra per mostrar aquí els detalls del paquet",
   "Details panel": "Panell de detalls",
   "Show details panel": "Mostra el panell de detalls",
-  "Hide details panel": "Amaga el panell de detalls"
+  "Hide details panel": "Amaga el panell de detalls",
+  "Fit columns to the window": "Ajusta les columnes a la finestra",
+  "How to set up {0}": "Com configurar {0}",
+  "Install it with this command:": "Instal·la'l amb aquesta ordre:",
+  "Open in a terminal": "Obre-ho en un terminal"
 }
@@ -2216,5 +2216,9 @@
   "Make the window wider to show package details here": "Zvětšete šířku okna, aby se zde zobrazily podrobnosti o balíčku",
   "Details panel": "Panel podrobností",
   "Show details panel": "Zobrazit panel podrobností",
-  "Hide details panel": "Skrýt panel podrobností"
+  "Hide details panel": "Skrýt panel podrobností",
+  "Fit columns to the window": "Přizpůsobit sloupce šířce okna",
+  "How to set up {0}": "Jak nastavit {0}",
+  "Install it with this command:": "Nainstalujte pomocí tohoto příkazu:",
+  "Open in a terminal": "Otevřít v terminálu"
 }