diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0f0ecf704..ae12ceda2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,27 @@ All notable changes to Stability Matrix will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning 2.0](https://semver.org/spec/v2.0.0.html).
 
+## v2.16.4
+### Added
+- Added **Comfy Kitchen Attention** (`--use-ck-attention`) as a **Cross Attention Method** launch option for ComfyUI and ComfyUI-Zluda - thanks to @e-nord!
+### Changed
+- **Windows ROCm** PyTorch installs now come from AMD's new permanent ROCm 10 package repositories, avoiding the `CUDA error: invalid argument` / `hipErrorInvalidValue` failures reported with the ROCm 7.14.1 builds — packages already on 7.14.1 need a reinstall, or an update that also upgrades PyTorch (like ComfyUI's) - thanks to @NeuralFault!
+### Fixed
+- Installing a package into a folder that already contains files — like an existing ComfyUI installation placed in `Data\Packages` to be imported — now shows the folder's total size and file count and requires explicit confirmation, instead of silently deleting everything in it; this includes the first-run one-click installer ([#1733](https://github.com/LykosAI/StabilityMatrix/issues/1733))
+- Turning off shared model folders no longer tries to delete real directories at the link locations — only links created by Stability Matrix are removed, so the model folders of an imported package are never touched ([#1733](https://github.com/LykosAI/StabilityMatrix/issues/1733))
+- The package uninstall confirmation now correctly lists models/checkpoints among the items that will be deleted for packages using config-based model sharing (ComfyUI's default) — previously it implied they were safe — and shows the package folder's total size
+- Fixed the **Workflows** page loading forever (and eventually freezing the app) when the workflow library folder is itself a link to ComfyUI's `user\default\workflows` folder — the `Stability Matrix` link ComfyUI gets at launch pointed back into the same folder, nesting `Stability Matrix\Stability Matrix\...` thousands of levels deep. That link is no longer created (and an existing one is removed the next time ComfyUI is launched) when it would loop, and the workflow and model folder scans now follow linked folders at most once
+- Fixed the **Cross Attention Method** launch options for ComfyUI and ComfyUI-Zluda letting you enable several at once — they're mutually exclusive, so they're now radio buttons - thanks to @e-nord!
+- Fixed [#1725](https://github.com/LykosAI/StabilityMatrix/issues/1725) - **AI-Toolkit** jobs crashing with a `distutils` error on installs from before v2.16.3 that still run Python 3.11, no reinstall needed - thanks to @NeuralFault!
+- Fixed Wan2GP v13's **Deepy** panel repeatedly showing **Connection to server lost** and logging `issubclass() arg 1 must be a class` — Stability Matrix's console logging wrapper now preserves Gradio's exception class ([Wan2GP #2298](https://github.com/deepbeepmeep/Wan2GP/issues/2298))
+- Fixed Wan2GP (and AI Toolkit's SageAttention source build) crashing with `ModuleNotFoundError: No module named 'distutils'` on Python 3.12+ — forcing `SETUPTOOLS_USE_DISTUTILS=stdlib` unconditionally broke on versions where distutils was removed from the standard library entirely, it's now version-gated the same way AI Toolkit's own fix already was
+- Environment Variables configured in **Settings** now correctly override the workaround variables (like `SETUPTOOLS_USE_DISTUTILS`) that some packages set internally
+### Supporters
+#### 🌟 Visionaries
+Small release, big priority: 2.16.4 is mostly about keeping your files exactly where you left them. Imported ComfyUI folders can't be wiped by surprise anymore, and a looping workflow link can't freeze the app. That kind of careful, unflashy work only gets our full attention because of our Visionaries, so thank you **Waterclouds**, **MrMxyzptlk12836**, **bluepopsicle**, **Ibixat**, **Droolguy**, **snotty**, **dispenser**, **cusalapapen1481**, **moon_milky2843**, **sn3232323233350**, **CC**, **TwistedDragon**, **hasezou11013179**, and **Akros**. Every folder that stays put has a bit of you in it. 💛
+#### 🚀 Pioneers
+To our Pioneers **SinthCore**, **Jisuren**, **jweg79**, **Hurbie53**, **Cjloha**, **Alligator1907**, **CommissarGiygas16050**, **bastardofbethlehem**, **Zombop**, **Silerae**, **joshsciascia72**, and **cy_hart691842**: patch releases like this one land quietly, and you back them anyway. We never take that for granted. And hello to **okachako**, our newest Pioneer; it's so nice to see your name here! 💛
+
 ## v2.16.3
 ### Added
 #### New Feature: 🔀 CivitAI Workflow Browsing
diff --git a/README.md b/README.md
index a204dc7ef..e7d8cb099 100644
--- a/README.md
+++ b/README.md
@@ -49,6 +49,8 @@
 
 Multi-Platform Package Manager and Inference UI for Stable Diffusion
 
+See the [documentation index](docs/README.md) for installation, package management, models, and Inference guides. Start with [your first image](docs/inference/text-to-image.md), [importing local models](docs/checkpoint-manager/overview.md#import-local-models), or [managing installed packages](docs/package-manager/managing-packages.md).
+
 ### 🖱️ One click install and update for Stable Diffusion Web UI Packages
 - Supports:
   - [Stable Diffusion WebUI reForge][reforge], [Stable Diffusion WebUI Forge][forge], [Stable Diffusion WebUI AMDGPU Forge][amdforge] [Automatic 1111][auto1111], [Automatic 1111 DirectML][auto1111-directml], [SD Web UI-UX][webui-ux], [SD.Next][sdnext]
diff --git a/StabilityMatrix.Avalonia/DialogHelper.cs b/StabilityMatrix.Avalonia/DialogHelper.cs
index 90f3e50a9..22c581a30 100644
--- a/StabilityMatrix.Avalonia/DialogHelper.cs
+++ b/StabilityMatrix.Avalonia/DialogHelper.cs
@@ -2,11 +2,13 @@
 using System.Collections.Generic;
 using System.ComponentModel;
 using System.Diagnostics;
+using System.IO;
 using System.Linq;
 using System.Runtime.CompilerServices;
 using System.Text;
 using System.Text.Json;
 using System.Threading.Tasks;
+using AsyncAwaitBestPractices;
 using Avalonia;
 using Avalonia.Controls;
 using Avalonia.Controls.Documents;
@@ -20,19 +22,25 @@
 using AvaloniaEdit.TextMate;
 using CommunityToolkit.Mvvm.Input;
 using FluentAvalonia.UI.Controls;
+using Microsoft.Extensions.DependencyInjection;
 using NLog;
 using Refit;
 using StabilityMatrix.Avalonia.Controls;
 using StabilityMatrix.Avalonia.Helpers;
 using StabilityMatrix.Avalonia.Languages;
 using StabilityMatrix.Avalonia.Models;
+using StabilityMatrix.Avalonia.Services;
+using StabilityMatrix.Avalonia.ViewModels.Base;
+using StabilityMatrix.Avalonia.ViewModels.Dialogs;
 using StabilityMatrix.Core.Exceptions;
 using StabilityMatrix.Core.Extensions;
 using StabilityMatrix.Core.Helper;
 using StabilityMatrix.Core.Models;
+using StabilityMatrix.Core.Models.FileInterfaces;
 using StabilityMatrix.Core.Services;
 using TextMateSharp.Grammars;
 using Process = FuzzySharp.Process;
+using Size = StabilityMatrix.Core.Helper.Size;
 
 namespace StabilityMatrix.Avalonia;
 
@@ -638,6 +646,77 @@ public static TaskDialog CreateTaskDialog(string title, string description)
             XamlRoot = App.VisualRoot,
         };
     }
+
+    /// <summary>
+    /// Shows a confirmation dialog before deleting existing files at a package install location,
+    /// e.g. a folder the user placed there manually to import an existing installation.
+    /// Returns true if the location does not exist, is empty, or the user explicitly confirmed
+    /// the deletion; false if the user cancelled.
+    /// </summary>
+    public static async Task<bool> ConfirmDeleteExistingInstallDataAsync(DirectoryPath installLocation)
+    {
+        if (!installLocation.Exists || !installLocation.Info.EnumerateFileSystemInfos().Any())
+            return true;
+
+        var vmFactory = App.Services.GetRequiredService<IServiceManager<ViewModelBase>>();
+
+        var vm = vmFactory.Get<ConfirmDeleteDialogViewModel>();
+        vm.Title = "Existing files found";
+        vm.Description =
+            "This folder already exists and contains files that were not installed by Stability Matrix. "
+            + "Installing here will permanently delete the folder shown below and everything inside it.\n\n"
+            + "If this is an existing installation you want to keep, choose Cancel and use Import "
+            + "from the Packages page instead, or move your data elsewhere first.";
+        vm.PathsToDelete = [installLocation.FullPath];
+        vm.IsRecycleBinAvailable = false;
+        vm.TotalSizeText = "Calculating size…";
+
+        Task.Run(() =>
+            {
+                var (fileCount, totalBytes) = GetFileStats(installLocation.Info);
+                Dispatcher.UIThread.Post(() =>
+                    vm.TotalSizeText =
+                        $"Total: {Size.FormatBytes(Convert.ToUInt64(totalBytes))} in {fileCount:N0} files"
+                );
+            })
+            .SafeFireAndForget(ex =>
+            {
+                Logger.Warn(ex, "Failed to calculate size of {Path}", installLocation.FullPath);
+                Dispatcher.UIThread.Post(() => vm.TotalSizeText = null);
+            });
+
+        return await vm.GetDialog().ShowAsync() == ContentDialogResult.Primary;
+    }
+
+    /// <summary>
+    /// Gets the total file count and size of a directory, without following symbolic links / junctions.
+    /// </summary>
+    private static (int FileCount, long TotalBytes) GetFileStats(DirectoryInfo directory)
+    {
+        var fileCount = 0;
+        var totalBytes = 0L;
+
+        foreach (var file in directory.EnumerateFiles())
+        {
+            if (file.Attributes.HasFlag(FileAttributes.ReparsePoint))
+                continue;
+
+            fileCount++;
+            totalBytes += file.Length;
+        }
+
+        foreach (var subDir in directory.EnumerateDirectories())
+        {
+            if (subDir.Attributes.HasFlag(FileAttributes.ReparsePoint))
+                continue;
+
+            var (subCount, subBytes) = GetFileStats(subDir);
+            fileCount += subCount;
+            totalBytes += subBytes;
+        }
+
+        return (fileCount, totalBytes);
+    }
 }
 
 // Text fields
diff --git a/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmDeleteDialogViewModel.cs b/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmDeleteDialogViewModel.cs
index 5da0e0300..1823024c0 100644
--- a/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmDeleteDialogViewModel.cs
+++ b/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmDeleteDialogViewModel.cs
@@ -21,6 +21,18 @@ public partial class ConfirmDeleteDialogViewModel(ILogger<ConfirmDeleteDialogVie
     [ObservableProperty]
     private string title = "Confirm Delete";
 
+    /// <summary>
+    /// Optional description shown below the title, for extra context on what is being deleted and why.
+    /// </summary>
+    [ObservableProperty]
+    private string? description;
+
+    /// <summary>
+    /// Optional total size / file count line shown below the paths list.
+    /// </summary>
+    [ObservableProperty]
+    private string? totalSizeText;
+
     [ObservableProperty]
     [NotifyPropertyChangedFor(nameof(ConfirmDeleteButtonText))]
     [NotifyPropertyChangedFor(nameof(IsPermanentDelete))]
diff --git a/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmPackageDeleteDialogViewModel.cs b/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmPackageDeleteDialogViewModel.cs
index 8a6a2c37a..cb60cb047 100644
--- a/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmPackageDeleteDialogViewModel.cs
+++ b/StabilityMatrix.Avalonia/ViewModels/Dialogs/ConfirmPackageDeleteDialogViewModel.cs
@@ -4,7 +4,9 @@
 using StabilityMatrix.Avalonia.ViewModels.Base;
 using StabilityMatrix.Avalonia.Views.Dialogs;
 using StabilityMatrix.Core.Attributes;
+using StabilityMatrix.Core.Helper;
 using StabilityMatrix.Core.Models;
+using StabilityMatrix.Core.Models.FileInterfaces;
 
 namespace StabilityMatrix.Avalonia.ViewModels.Dialogs;
 
@@ -21,6 +23,9 @@ public partial class ConfirmPackageDeleteDialogViewModel : ContentDialogViewMode
     [NotifyPropertyChangedFor(nameof(IsValid))]
     public partial string PackageName { get; set; } = string.Empty;
 
+    [ObservableProperty]
+    public partial string? FolderSizeText { get; set; }
+
     public string? ExpectedPackageName => Package.DisplayName;
     public bool IsValid => ExpectedPackageName?.Equals(PackageName, StringComparison.Ordinal) ?? false;
     public string DeleteWarningText
@@ -36,7 +41,9 @@ public string DeleteWarningText
             if (!Package.UseSharedOutputFolder)
                 items.Add("• Images/outputs");
 
-            if (Package.PreferredSharedFolderMethod is SharedFolderMethod.None)
+            // Symlink mode is the only one that relocates models out of the package folder;
+            // in Configuration (yaml) and None modes they are real files that will be deleted
+            if (Package.PreferredSharedFolderMethod is not SharedFolderMethod.Symlink)
                 items.Add("• Models/checkpoints placed in the package's model folders");
 
             items.Add("• Any custom files in the package folder");
@@ -50,4 +57,23 @@ private async Task CopyExpectedPackageName()
     {
         await App.Clipboard?.SetTextAsync(ExpectedPackageName);
     }
+
+    /// <inheritdoc />
+    public override async Task OnLoadedAsync()
+    {
+        await base.OnLoadedAsync();
+
+        if (Package.FullPath is not { } fullPath)
+            return;
+
+        try
+        {
+            var sizeBytes = await new DirectoryPath(fullPath).GetSizeAsync(includeSymbolicLinks: false);
+            FolderSizeText = $"Total size: {Size.FormatBytes(Convert.ToUInt64(sizeBytes))}";
+        }
+        catch (Exception)
+        {
+            // Size display is informational only
+        }
+    }
 }
diff --git a/StabilityMatrix.Avalonia/ViewModels/Dialogs/NewOneClickInstallViewModel.cs b/StabilityMatrix.Avalonia/ViewModels/Dialogs/NewOneClickInstallViewModel.cs
index 596ad32ff..2997c5871 100644
--- a/StabilityMatrix.Avalonia/ViewModels/Dialogs/NewOneClickInstallViewModel.cs
+++ b/StabilityMatrix.Avalonia/ViewModels/Dialogs/NewOneClickInstallViewModel.cs
@@ -6,6 +6,7 @@
 using System.Threading;
 using System.Threading.Tasks;
 using AsyncAwaitBestPractices;
+using Avalonia.Controls.Notifications;
 using Avalonia.Threading;
 using CommunityToolkit.Mvvm.ComponentModel;
 using CommunityToolkit.Mvvm.Input;
@@ -121,9 +122,49 @@ private async Task InstallComfyForInference()
     [RelayCommand]
     private async Task InstallPackage(BasePackage selectedPackage)
     {
-        OnPrimaryButtonClick();
-
         var installLocation = Path.Combine(settingsManager.LibraryDir, "Packages", selectedPackage.Name);
+        var installPath = new DirectoryPath(installLocation);
+
+        // In the first-run flow the progress dialog is opened when the recommended-models dialog
+        // closes; the existing-data path skips that dialog, so it opens the progress dialog itself
+        var showProgressDialogOnStart = false;
+
+        if (installPath.Exists && installPath.Info.EnumerateFileSystemInfos().Any())
+        {
+            // The install location already holds data we didn't put there — likely an existing
+            // installation the user placed for Import. Close this dialog first so the
+            // confirmation is the only dialog on screen, then require explicit confirmation
+            // before deleting anything.
+            OnCloseButtonClick();
+
+            if (!await DialogHelper.ConfirmDeleteExistingInstallDataAsync(installPath))
+            {
+                notificationService.Show(
+                    "Installation cancelled",
+                    $"Existing files at {installLocation} were left untouched.",
+                    NotificationType.Information
+                );
+                return;
+            }
+
+            await installPath.DeleteVerboseAsync(logger);
+
+            // The Packages page indexed the staged folder as an unknown package; re-index now
+            // that it's gone so the stale card doesn't linger during the install
+            EventManager.Instance.OnInstalledPackagesChanged();
+
+            showProgressDialogOnStart = true;
+        }
+        else
+        {
+            OnPrimaryButtonClick();
+
+            if (installPath.Exists)
+            {
+                await installPath.DeleteVerboseAsync(logger);
+            }
+        }
+
         var recommendedPython = selectedPackage.RecommendedPythonVersion;
 
         var steps = new List<IPackageStep>
@@ -132,13 +173,6 @@ private async Task InstallPackage(BasePackage selectedPackage)
             new SetupPrerequisitesStep(prerequisiteHelper, selectedPackage, recommendedPython),
         };
 
-        // get latest version & download & install
-        if (Directory.Exists(installLocation))
-        {
-            var installPath = new DirectoryPath(installLocation);
-            await installPath.DeleteVerboseAsync(logger);
-        }
-
         var downloadVersion = await selectedPackage.GetLatestVersion();
         var installedVersion = new InstalledPackageVersion { IsPrerelease = false };
 
@@ -208,7 +242,7 @@ private async Task InstallPackage(BasePackage selectedPackage)
 
         var runner = new PackageModificationRunner
         {
-            ShowDialogOnStart = false,
+            ShowDialogOnStart = showProgressDialogOnStart,
             HideCloseButton = false,
             ModificationCompleteMessage = $"{selectedPackage.DisplayName} installed successfully",
         };
diff --git a/StabilityMatrix.Avalonia/ViewModels/InstalledWorkflowsViewModel.cs b/StabilityMatrix.Avalonia/ViewModels/InstalledWorkflowsViewModel.cs
index 97edd6be9..8c0a3a454 100644
--- a/StabilityMatrix.Avalonia/ViewModels/InstalledWorkflowsViewModel.cs
+++ b/StabilityMatrix.Avalonia/ViewModels/InstalledWorkflowsViewModel.cs
@@ -84,11 +84,7 @@ private async Task LoadInstalledWorkflowsAsync()
         var count = 0;
 
         foreach (
-            var workflowPath in Directory.EnumerateFiles(
-                settingsManager.WorkflowDirectory,
-                "*.json",
-                EnumerationOptionConstants.AllDirectories
-            )
+            var workflowPath in LinkSafeFileSystem.EnumerateFiles(settingsManager.WorkflowDirectory, "*.json")
         )
         {
             try
diff --git a/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageCardViewModel.cs b/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageCardViewModel.cs
index 55e092056..b8be9d5af 100644
--- a/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageCardViewModel.cs
+++ b/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageCardViewModel.cs
@@ -1143,8 +1143,7 @@ partial void OnIsSharedModelSymlinkChanged(bool oldValue, bool newValue)
         }
         else
         {
-            var basePackage = packageFactory[Package!.PackageName!];
-            basePackage!.RemoveModelFolderLinks(Package.FullPath!, SharedFolderMethod.Symlink);
+            RemoveModelFolderLinks(SharedFolderMethod.Symlink);
         }
     }
 
@@ -1166,11 +1165,31 @@ partial void OnIsSharedModelConfigChanged(bool oldValue, bool newValue)
         }
         else
         {
-            var basePackage = packageFactory[Package!.PackageName!];
-            basePackage!.RemoveModelFolderLinks(Package.FullPath!, SharedFolderMethod.Configuration);
+            RemoveModelFolderLinks(SharedFolderMethod.Configuration);
         }
     }
 
+    private void RemoveModelFolderLinks(SharedFolderMethod sharedFolderMethod)
+    {
+        var basePackage = packageFactory[Package!.PackageName!];
+        basePackage!
+            .RemoveModelFolderLinks(Package.FullPath!, sharedFolderMethod)
+            .SafeFireAndForget(ex =>
+            {
+                logger.LogError(
+                    ex,
+                    "Failed to remove {Method} model folder links for {Package}",
+                    sharedFolderMethod,
+                    Package.DisplayName
+                );
+                notificationService.Show(
+                    "Failed to remove shared model links",
+                    ex.Message,
+                    NotificationType.Error
+                );
+            });
+    }
+
     partial void OnIsSharedModelDisabledChanged(bool value)
     {
         if (value)
diff --git a/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageInstallDetailViewModel.cs b/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageInstallDetailViewModel.cs
index 890651013..03af4f190 100644
--- a/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageInstallDetailViewModel.cs
+++ b/StabilityMatrix.Avalonia/ViewModels/PackageManager/PackageInstallDetailViewModel.cs
@@ -231,9 +231,15 @@ x.PackageName is nameof(ComfyUI) or "ComfyUI-Zluda"
         InstallName = InstallName.Trim();
 
         var installLocation = Path.Combine(settingsManager.LibraryDir, "Packages", InstallName);
-        if (Directory.Exists(installLocation))
+        var installPath = new DirectoryPath(installLocation);
+
+        // Require explicit confirmation before deleting an existing non-empty folder at the
+        // install location — it may be a manually placed installation the user meant to Import
+        if (!await DialogHelper.ConfirmDeleteExistingInstallDataAsync(installPath))
+            return;
+
+        if (installPath.Exists)
         {
-            var installPath = new DirectoryPath(installLocation);
             await installPath.DeleteVerboseAsync(logger);
         }
 
diff --git a/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmDeleteDialog.axaml b/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmDeleteDialog.axaml
index 4040720a7..e6b9c54b6 100644
--- a/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmDeleteDialog.axaml
+++ b/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmDeleteDialog.axaml
@@ -17,10 +17,8 @@
     d:DesignWidth="500"
     x:DataType="dialogs:ConfirmDeleteDialogViewModel"
     mc:Ignorable="d">
-    
-    <sg:SpacedGrid
-        RowDefinitions="Auto,Auto,*,Auto,Auto,Auto,Auto"
-        RowSpacing="12">
+
+    <sg:SpacedGrid RowDefinitions="Auto,Auto,Auto,*,Auto,Auto,Auto,Auto,Auto" RowSpacing="12">
         <TextBlock
             Margin="0,0,0,8"
             Text="{Binding Title}"
@@ -30,11 +28,18 @@
         <TextBlock
             Grid.Row="1"
             Margin="4,0"
+            IsVisible="{Binding Description, Converter={x:Static StringConverters.IsNotNullOrEmpty}}"
+            Text="{Binding Description}"
+            TextWrapping="Wrap" />
+
+        <TextBlock
+            Grid.Row="2"
+            Margin="4,0"
             Text="{Binding DeleteFollowingFilesText}"
             Theme="{DynamicResource BodyStrongTextBlockStyle}" />
 
         <controls:Card
-            Grid.Row="2"
+            Grid.Row="3"
             Margin="2"
             Padding="4,6"
             VerticalAlignment="Top"
@@ -42,6 +47,14 @@
             <ListBox ItemsSource="{Binding PathsToDelete}" />
         </controls:Card>
 
+        <TextBlock
+            Grid.Row="4"
+            Margin="4,0"
+            Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+            IsVisible="{Binding TotalSizeText, Converter={x:Static StringConverters.IsNotNullOrEmpty}}"
+            Text="{Binding TotalSizeText}"
+            TextWrapping="Wrap" />
+
         <!--<ui:InfoBar Grid.Row="3"
                     Margin="4,0"
                     IsClosable="False"
@@ -52,7 +65,7 @@
 
         <ui:InfoBar
             Title="{x:Static lang:Resources.Label_ActionCannotBeUndone}"
-            Grid.Row="3"
+            Grid.Row="5"
             Margin="4,0"
             VerticalAlignment="Bottom"
             IsClosable="False"
@@ -60,21 +73,21 @@
             Severity="Warning" />
 
         <CheckBox
-            Grid.Row="5"
+            Grid.Row="7"
             Margin="12,0"
-            IsVisible="{Binding IsRecycleBinAvailable}"
+            Content="{x:Static lang:Resources.Label_DeletePermanently}"
             IsChecked="{Binding IsRecycleBinOptOutChecked}"
-            Content="{x:Static lang:Resources.Label_DeletePermanently}" />
+            IsVisible="{Binding IsRecycleBinAvailable}" />
 
         <TextBlock
-            Grid.Row="4"
+            Grid.Row="6"
             Margin="4,0"
             VerticalAlignment="Bottom"
             Text="{x:Static lang:Resources.Label_AreYouSure}"
             Theme="{DynamicResource BodyStrongTextBlockStyle}" />
-        
+
         <UniformGrid
-            Grid.Row="6"
+            Grid.Row="8"
             Margin="0,4,0,-24"
             HorizontalAlignment="Stretch"
             VerticalAlignment="Bottom">
@@ -82,13 +95,13 @@
                 Margin="0,0,8,0"
                 HorizontalAlignment="Stretch"
                 Command="{Binding OnCloseButtonClick}"
-                Content="{x:Static lang:Resources.Action_Cancel}"/>
+                Content="{x:Static lang:Resources.Action_Cancel}" />
             <Button
                 Margin="0,0,8,0"
                 HorizontalAlignment="Stretch"
                 Classes="danger"
                 Command="{Binding ConfirmDeleteClickCommand}"
-                Content="{Binding ConfirmDeleteButtonText}"/>
+                Content="{Binding ConfirmDeleteButtonText}" />
         </UniformGrid>
     </sg:SpacedGrid>
 </controls:UserControlBase>
diff --git a/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmPackageDeleteDialog.axaml b/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmPackageDeleteDialog.axaml
index 955783f11..810907b29 100644
--- a/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmPackageDeleteDialog.axaml
+++ b/StabilityMatrix.Avalonia/Views/Dialogs/ConfirmPackageDeleteDialog.axaml
@@ -39,12 +39,18 @@
             Text="{Binding ExpectedPackageName, StringFormat={}Delete {0}?}"
             TextAlignment="Center" />
 
-        <TextBlock
-            Grid.Row="2"
-            Margin="0,4,0,0"
-            Foreground="{DynamicResource TextFillColorSecondaryBrush}"
-            Text="{Binding Package.FullPath}"
-            TextAlignment="Center" />
+        <StackPanel Grid.Row="2" Margin="0,4,0,0">
+            <TextBlock
+                Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                Text="{Binding Package.FullPath}"
+                TextAlignment="Center" />
+            <TextBlock
+                Margin="0,4,0,0"
+                Foreground="{DynamicResource TextFillColorSecondaryBrush}"
+                IsVisible="{Binding FolderSizeText, Converter={x:Static StringConverters.IsNotNullOrEmpty}}"
+                Text="{Binding FolderSizeText}"
+                TextAlignment="Center" />
+        </StackPanel>
 
         <controls1:InfoBar
             Title="{x:Static lang:Resources.Label_ActionCannotBeUndone}"
diff --git a/StabilityMatrix.Core/Extensions/EnvironmentVariablesExtensions.cs b/StabilityMatrix.Core/Extensions/EnvironmentVariablesExtensions.cs
new file mode 100644
index 000000000..7cb93e3e3
--- /dev/null
+++ b/StabilityMatrix.Core/Extensions/EnvironmentVariablesExtensions.cs
@@ -0,0 +1,57 @@
+using System.Collections.Immutable;
+using StabilityMatrix.Core.Python;
+using StabilityMatrix.Core.Services;
+
+namespace StabilityMatrix.Core.Extensions;
+
+public static class EnvironmentVariablesExtensions
+{
+    /// <summary>
+    /// Sets a package-computed default/workaround environment variable, unless the user has
+    /// explicitly configured that key themselves under Settings > Environment Variables.
+    /// </summary>
+    /// <remarks>
+    /// Use this instead of <see cref="ImmutableDictionary{TKey,TValue}.SetItem"/> for any env var
+    /// that exists to work around an issue (e.g. <c>SETUPTOOLS_USE_DISTUTILS</c>) rather than to
+    /// record a fact about the install (e.g. an install path) - a user who has set the same key
+    /// to fix something on their own machine should always win over our guess.
+    /// </remarks>
+    public static ImmutableDictionary<string, string> SetPackageDefault(
+        this ImmutableDictionary<string, string> env,
+        ISettingsManager settingsManager,
+        string key,
+        string value
+    ) => settingsManager.Settings.IsEnvironmentVariableUserOverridden(key) ? env : env.SetItem(key, value);
+
+    /// <summary>
+    /// Forces an environment variable to <paramref name="value"/> for the duration of
+    /// <paramref name="action"/>, then restores whatever was there before - the user's own value
+    /// if they'd set one, or removes it entirely if it wasn't present.
+    /// </summary>
+    /// <remarks>
+    /// Use for a narrow, one-shot need (e.g. bypassing a wheel filename check for one specific
+    /// pinned download) where the override must never outlive the single operation it exists for,
+    /// so it can't be left stuck on for the rest of the venv's life by an early return or exception.
+    /// </remarks>
+    public static async Task RunWithTemporaryEnvironmentVariableAsync(
+        this IPyVenvRunner venvRunner,
+        string key,
+        string value,
+        Func<Task> action
+    )
+    {
+        var hadPrevious = venvRunner.EnvironmentVariables.TryGetValue(key, out var previous);
+
+        venvRunner.UpdateEnvironmentVariables(env => env.SetItem(key, value));
+        try
+        {
+            await action().ConfigureAwait(false);
+        }
+        finally
+        {
+            venvRunner.UpdateEnvironmentVariables(env =>
+                hadPrevious ? env.SetItem(key, previous!) : env.Remove(key)
+            );
+        }
+    }
+}
diff --git a/StabilityMatrix.Core/Helper/LinkSafeFileSystem.cs b/StabilityMatrix.Core/Helper/LinkSafeFileSystem.cs
new file mode 100644
index 000000000..3260e0d6e
--- /dev/null
+++ b/StabilityMatrix.Core/Helper/LinkSafeFileSystem.cs
@@ -0,0 +1,171 @@
+using NLog;
+using StabilityMatrix.Core.Models.FileInterfaces;
+
+namespace StabilityMatrix.Core.Helper;
+
+/// <summary>
+/// File-system operations that stay correct when directories are symbolic links or junctions.
+/// Links are followed, but a directory is never visited twice, so a link that loops back into
+/// its own ancestry cannot recurse forever.
+/// </summary>
+public static class LinkSafeFileSystem
+{
+    private static readonly Logger Logger = LogManager.GetCurrentClassLogger();
+
+    /// <summary>
+    /// Maximum directory nesting followed by <see cref="EnumerateFiles"/> before a subtree is skipped.
+    /// </summary>
+    public const int DefaultMaxDepth = 64;
+
+    private const int MaxLinkHops = 40;
+
+    // Windows and macOS file systems are case-insensitive by default
+    private static readonly StringComparison PathComparison =
+        Compat.IsWindows || Compat.IsMacOS ? StringComparison.OrdinalIgnoreCase : StringComparison.Ordinal;
+
+    private static readonly StringComparer PathComparer = StringComparer.FromComparison(PathComparison);
+
+    /// <summary>
+    /// Resolves every symbolic link or junction along <paramref name="path"/>, including in its
+    /// ancestors, returning the physical directory path. Segments that cannot be resolved
+    /// (missing, or a reparse point that is not a link) are kept as written.
+    /// </summary>
+    public static string GetRealPath(string path) => GetRealPath(path, 0);
+
+    private static string GetRealPath(string path, int hop)
+    {
+        var fullPath = Path.TrimEndingDirectorySeparator(Path.GetFullPath(path));
+        var root = Path.GetPathRoot(fullPath) ?? string.Empty;
+        var current = root;
+
+        foreach (
+            var segment in fullPath[root.Length..]
+                .Split(
+                    [Path.DirectorySeparatorChar, Path.AltDirectorySeparatorChar],
+                    StringSplitOptions.RemoveEmptyEntries
+                )
+        )
+        {
+            current = Path.Join(current, segment);
+
+            var info = new DirectoryInfo(current);
+            if (!info.Exists || !info.Attributes.HasFlag(FileAttributes.ReparsePoint))
+                continue;
+
+            if (hop >= MaxLinkHops)
+            {
+                Logger.Warn("Gave up resolving links at {Path}: too many nested links", current);
+                continue;
+            }
+
+            FileSystemInfo? target;
+            try
+            {
+                target = info.ResolveLinkTarget(returnFinalTarget: true);
+            }
+            catch (IOException e)
+            {
+                Logger.Debug(e, "Could not resolve link target of {Path}", current);
+                continue;
+            }
+
+            if (target is null)
+                continue;
+
+            // The target may itself sit below other links, so canonicalize it as a whole
+            current = GetRealPath(target.FullName, hop + 1);
+        }
+
+        return current;
+    }
+
+    /// <summary>
+    /// Whether creating a link at <paramref name="linkPath"/> pointing to <paramref name="sourceDir"/>
+    /// would make <paramref name="sourceDir"/> reachable from inside itself, i.e. the link's parent
+    /// physically is, or lies within, the source directory.
+    /// </summary>
+    public static bool WouldLinkCycle(DirectoryPath sourceDir, DirectoryPath linkPath)
+    {
+        if (linkPath.Parent is not { } linkParent)
+            return false;
+
+        var sourceReal = GetRealPath(sourceDir);
+        var parentReal = GetRealPath(linkParent);
+
+        return PathComparer.Equals(sourceReal, parentReal)
+            || parentReal.StartsWith(sourceReal + Path.DirectorySeparatorChar, PathComparison);
+    }
+
+    /// <summary>
+    /// Recursively enumerates files matching <paramref name="searchPattern"/> under
+    /// <paramref name="rootDir"/>. Linked directories are followed once; a link back to a directory
+    /// already visited is skipped, as are directories deeper than <paramref name="maxDepth"/>.
+    /// Inaccessible directories are skipped rather than aborting the enumeration.
+    /// Yielded paths are rooted at <paramref name="rootDir"/> as given, not at its resolved target.
+    /// </summary>
+    public static IEnumerable<string> EnumerateFiles(
+        string rootDir,
+        string searchPattern,
+        int maxDepth = DefaultMaxDepth
+    )
+    {
+        var visited = new HashSet<string>(PathComparer);
+        var pending = new Stack<(string Path, string RealPath, int Depth)>();
+
+        var rootReal = GetRealPath(rootDir);
+        visited.Add(rootReal);
+        pending.Push((rootDir, rootReal, 0));
+
+        while (pending.TryPop(out var dir))
+        {
+            List<string> files;
+            List<DirectoryInfo> subDirs;
+            try
+            {
+                files = Directory
+                    .EnumerateFiles(dir.Path, searchPattern, EnumerationOptionConstants.TopLevelOnly)
+                    .ToList();
+                subDirs = new DirectoryInfo(dir.Path)
+                    .EnumerateDirectories("*", EnumerationOptionConstants.TopLevelOnly)
+                    .ToList();
+            }
+            catch (Exception e) when (e is IOException or UnauthorizedAccessException)
+            {
+                Logger.Debug(e, "Skipping unreadable directory {Path}", dir.Path);
+                continue;
+            }
+
+            foreach (var file in files)
+            {
+                yield return file;
+            }
+
+            if (dir.Depth >= maxDepth)
+            {
+                Logger.Warn(
+                    "Skipping directories below {Path}: nesting deeper than {MaxDepth}",
+                    dir.Path,
+                    maxDepth
+                );
+                continue;
+            }
+
+            // Pushed in reverse so the stack pops them in enumeration order
+            for (var i = subDirs.Count - 1; i >= 0; i--)
+            {
+                var subDir = subDirs[i];
+                var subReal = subDir.Attributes.HasFlag(FileAttributes.ReparsePoint)
+                    ? GetRealPath(subDir.FullName)
+                    : Path.Join(dir.RealPath, subDir.Name);
+
+                if (!visited.Add(subReal))
+                {
+                    Logger.Debug("Skipping {Path}: already visited as {RealPath}", subDir.FullName, subReal);
+                    continue;
+                }
+
+                pending.Push((subDir.FullName, subReal, dir.Depth + 1));
+            }
+        }
+    }
+}
diff --git a/StabilityMatrix.Core/Helper/SharedFolders.cs b/StabilityMatrix.Core/Helper/SharedFolders.cs
index cf73d2e6a..23c762f38 100644
--- a/StabilityMatrix.Core/Helper/SharedFolders.cs
+++ b/StabilityMatrix.Core/Helper/SharedFolders.cs
@@ -77,6 +77,26 @@ public static async Task CreateOrUpdateLink(
             await destAsFile.DeleteAsync().ConfigureAwait(false);
         }
 
+        // A link placed inside its own target (e.g. the user already linked the destination's
+        // parent to the source) would loop forever for anything that walks the tree
+        if (LinkSafeFileSystem.WouldLinkCycle(sourceDir, destinationDir))
+        {
+            Logger.Warn(
+                "Skipped folder link {Destination} -> {Source}: the link would sit inside its own target",
+                destinationDir,
+                sourceDir
+            );
+
+            if (destinationDir.IsSymbolicLink)
+            {
+                Logger.Info("Removing existing looping link at {Destination}", destinationDir);
+                destinationDir.Info.Attributes = FileAttributes.Normal;
+                await destinationDir.DeleteAsync(false).ConfigureAwait(false);
+            }
+
+            return;
+        }
+
         if (destinationDir.Exists)
         {
             // Existing dest is a link
@@ -181,13 +201,25 @@ DirectoryPath installPath
         {
             foreach (var relativePath in relativePaths)
             {
-                var destination = Path.GetFullPath(Path.Combine(installPath, relativePath));
-                // Delete the destination folder if it exists
-                if (!Directory.Exists(destination))
+                var destination = new DirectoryPath(
+                    Path.GetFullPath(Path.Combine(installPath, relativePath))
+                );
+                if (!destination.Exists)
                     continue;
 
-                Logger.Info($"Deleting junction target {destination}");
-                Directory.Delete(destination, false);
+                // Only remove links we created — never delete a real directory here,
+                // it may be user data (e.g. the models folder of an imported package)
+                if (!destination.IsSymbolicLink)
+                {
+                    Logger.Warn(
+                        "Skipped removing shared folder link at {Path}: not a symbolic link / junction",
+                        destination.FullPath
+                    );
+                    continue;
+                }
+
+                Logger.Info("Removing shared folder link at {Path}", destination.FullPath);
+                destination.Delete(false);
             }
         }
     }
diff --git a/StabilityMatrix.Core/Models/Packages/AiToolkit.cs b/StabilityMatrix.Core/Models/Packages/AiToolkit.cs
index f2b867b5e..f993d491e 100644
--- a/StabilityMatrix.Core/Models/Packages/AiToolkit.cs
+++ b/StabilityMatrix.Core/Models/Packages/AiToolkit.cs
@@ -199,7 +199,10 @@ await npmProcess
         npmProcess = null;
     }
 
-    private ImmutableDictionary<string, string> GetEnvVars(ImmutableDictionary<string, string> env, PyVersion pythonVersion)
+    private ImmutableDictionary<string, string> GetEnvVars(
+        ImmutableDictionary<string, string> env,
+        PyVersion pythonVersion
+    )
     {
         // Keep distutils importable for setuptools-based builds and training jobs. Must be
         // "local" (setuptools' bundled copy): any other value falls back to stdlib distutils,
@@ -210,7 +213,11 @@ private ImmutableDictionary<string, string> GetEnvVars(ImmutableDictionary<strin
         // when pip loads before setuptools (pypa/setuptools#3621). See StabilityMatrix #1725.
         // Use "stdlib" on Python < 3.12 and "local" on 3.12+, based on the venv's real version.
         var useLocalDistutils = pythonVersion >= new PyVersion(3, 12, 0);
-        env = env.SetItem("SETUPTOOLS_USE_DISTUTILS", useLocalDistutils ? "local" : "stdlib");
+        env = env.SetPackageDefault(
+            SettingsManager,
+            "SETUPTOOLS_USE_DISTUTILS",
+            useLocalDistutils ? "local" : "stdlib"
+        );
 
         var pathBuilder = new EnvPathBuilder();
 
diff --git a/StabilityMatrix.Core/Models/Packages/Cogstudio.cs b/StabilityMatrix.Core/Models/Packages/Cogstudio.cs
index 721c936d3..4a572be45 100644
--- a/StabilityMatrix.Core/Models/Packages/Cogstudio.cs
+++ b/StabilityMatrix.Core/Models/Packages/Cogstudio.cs
@@ -1,5 +1,6 @@
 using System.Text.RegularExpressions;
 using Injectio.Attributes;
+using StabilityMatrix.Core.Extensions;
 using StabilityMatrix.Core.Helper;
 using StabilityMatrix.Core.Helper.Cache;
 using StabilityMatrix.Core.Models.FileInterfaces;
@@ -124,21 +125,17 @@ await requirements.ReadAllTextAsync(cancellationToken).ConfigureAwait(false),
             // This prebuilt deepspeed wheel reports an internal metadata version of "0.11.2+unknown",
             // which doesn't match its filename's "0.11.2+cuda121". uv treats that mismatch as a
             // malformed wheel and refuses to install it; opt out of the filename/version consistency
-            // check just for this wheel, then restore strict checking for the rest of the install.
-            venvRunner.UpdateEnvironmentVariables(env => env.SetItem("UV_SKIP_WHEEL_FILENAME_CHECK", "1"));
-            try
-            {
-                await venvRunner
-                    .PipInstall(
+            // check just for this wheel, then restore whatever was there before for the rest of the
+            // install (the user's own value if they'd set one, otherwise unset).
+            await venvRunner.RunWithTemporaryEnvironmentVariableAsync(
+                "UV_SKIP_WHEEL_FILENAME_CHECK",
+                "1",
+                () =>
+                    venvRunner.PipInstall(
                         " https://github.com/daswer123/deepspeed-windows/releases/download/11.2/deepspeed-0.11.2+cuda121-cp310-cp310-win_amd64.whl",
                         onConsoleOutput
                     )
-                    .ConfigureAwait(false);
-            }
-            finally
-            {
-                venvRunner.UpdateEnvironmentVariables(env => env.Remove("UV_SKIP_WHEEL_FILENAME_CHECK"));
-            }
+            );
 
             await venvRunner
                 .PipInstall("spandrel opencv-python scikit-video", onConsoleOutput)
diff --git a/StabilityMatrix.Core/Models/Packages/VladAutomatic.cs b/StabilityMatrix.Core/Models/Packages/VladAutomatic.cs
index 691f92a2e..d871110f1 100644
--- a/StabilityMatrix.Core/Models/Packages/VladAutomatic.cs
+++ b/StabilityMatrix.Core/Models/Packages/VladAutomatic.cs
@@ -316,7 +316,7 @@ public override async Task InstallPackage(
         if (options.PythonOptions.PythonVersion is { Minor: < 12 })
         {
             venvRunner.UpdateEnvironmentVariables(env =>
-                env.SetItem("SETUPTOOLS_USE_DISTUTILS", "setuptools")
+                env.SetPackageDefault(SettingsManager, "SETUPTOOLS_USE_DISTUTILS", "setuptools")
             );
         }
 
@@ -380,7 +380,7 @@ await SetupVenv(installLocation, pythonVersion: PyVersion.Parse(installedPackage
         if (PyVersion.Parse(installedPackage.PythonVersion) is { Minor: < 12 })
         {
             VenvRunner.UpdateEnvironmentVariables(env =>
-                env.SetItem("SETUPTOOLS_USE_DISTUTILS", "setuptools")
+                env.SetPackageDefault(SettingsManager, "SETUPTOOLS_USE_DISTUTILS", "setuptools")
             );
         }
 
diff --git a/StabilityMatrix.Core/Models/Packages/Wan2GP.cs b/StabilityMatrix.Core/Models/Packages/Wan2GP.cs
index 11def19bc..497599e9c 100644
--- a/StabilityMatrix.Core/Models/Packages/Wan2GP.cs
+++ b/StabilityMatrix.Core/Models/Packages/Wan2GP.cs
@@ -1,6 +1,7 @@
 using System.Collections.Immutable;
 using System.Text.RegularExpressions;
 using Injectio.Attributes;
+using StabilityMatrix.Core.Extensions;
 using StabilityMatrix.Core.Helper;
 using StabilityMatrix.Core.Helper.Cache;
 using StabilityMatrix.Core.Helper.HardwareInfo;
@@ -113,6 +114,7 @@ private RocmCompatibilityResult GetWindowsRocmCompatibility()
         # StabilityMatrix: Patch logging to print to console for capture.
         import sys
         import logging
+        from functools import wraps
 
         def _apply_logging_patch():
             # Configure Python's root logger to output to stderr at INFO level.
@@ -156,10 +158,14 @@ def patched_warning(message, *args, **kwargs):
                         return _orig_warning(message, *args, **kwargs)
                     gr.Warning = patched_warning
                 if _orig_error is not None:
-                    def patched_error(message, *args, **kwargs):
-                        print(f"[Gradio] ERROR: {message}", file=sys.stderr, flush=True)
-                        return _orig_error(message, *args, **kwargs)
-                    gr.Error = patched_error
+                    # Keep the original exception class: Deepy registers gr.Error
+                    # with FastAPI, and Gradio also imports it from gradio.exceptions.
+                    _orig_error_init = _orig_error.__init__
+                    @wraps(_orig_error_init)
+                    def patched_error_init(self, *args, **kwargs):
+                        _orig_error_init(self, *args, **kwargs)
+                        print(f"[Gradio] ERROR: {self.message}", file=sys.stderr, flush=True)
+                    _orig_error.__init__ = patched_error_init
             except Exception as e:
                 print(f"[StabilityMatrix] Failed to patch Gradio logging: {e}", file=sys.stderr, flush=True)
 
@@ -453,8 +459,16 @@ await SetupVenv(installLocation, pythonVersion: PyVersion.Parse(installedPackage
         // Set environment variables
         VenvRunner.UpdateEnvironmentVariables(env =>
         {
-            // Fix for distutils compatibility issue with Python 3.10 and setuptools
-            env = env.SetItem("SETUPTOOLS_USE_DISTUTILS", "stdlib");
+            // Keep distutils importable for setuptools-based builds. Must be "local" (setuptools'
+            // bundled copy) on Python 3.12+, where distutils no longer exists in the stdlib at
+            // all - forcing "stdlib" there is unconditionally broken. "stdlib" is kept as the
+            // default below that version to match the working behavior most installs already had.
+            var useLocalDistutils = VenvRunner.Version >= new PyVersion(3, 12, 0);
+            env = env.SetPackageDefault(
+                SettingsManager,
+                "SETUPTOOLS_USE_DISTUTILS",
+                useLocalDistutils ? "local" : "stdlib"
+            );
 
             // Add FFmpeg to PATH if it's installed (optional - for video processing)
             if (!PrerequisiteHelper.IsFfmpegInstalled)
diff --git a/StabilityMatrix.Core/Models/Settings/Settings.cs b/StabilityMatrix.Core/Models/Settings/Settings.cs
index efb871038..527af435e 100644
--- a/StabilityMatrix.Core/Models/Settings/Settings.cs
+++ b/StabilityMatrix.Core/Models/Settings/Settings.cs
@@ -197,6 +197,22 @@ public IReadOnlyDictionary<string, string> EnvironmentVariables
         }
     }
 
+    /// <summary>
+    /// True if the user has explicitly configured this key under Settings > Environment
+    /// Variables (and it's enabled, when using the list format). Packages should check this
+    /// before setting a computed default/workaround env var, so a value the user configured
+    /// themselves (e.g. to work around an issue on their machine) is never silently overwritten.
+    /// </summary>
+    public bool IsEnvironmentVariableUserOverridden(string key)
+    {
+        if (UserEnvironmentVariablesList is { Count: > 0 } list)
+        {
+            return list.Any(kvp => kvp.IsEnabled && string.Equals(kvp.Key, key, StringComparison.Ordinal));
+        }
+
+        return UserEnvironmentVariables?.ContainsKey(key) == true;
+    }
+
     public float AnimationScale { get; set; } = 1.0f;
 
     public bool AutoScrollLaunchConsoleToEnd { get; set; } = true;
diff --git a/StabilityMatrix.Core/Services/ModelIndexService.cs b/StabilityMatrix.Core/Services/ModelIndexService.cs
index b7067c6f6..bd2cda9e0 100644
--- a/StabilityMatrix.Core/Services/ModelIndexService.cs
+++ b/StabilityMatrix.Core/Services/ModelIndexService.cs
@@ -298,9 +298,7 @@ private async Task RefreshIndexCore()
         var newIndex = new Dictionary<SharedFolderType, List<LocalModelFile>>();
         var newIndexFlat = new List<LocalModelFile>();
 
-        var paths = Directory
-            .EnumerateFiles(modelsDir, "*", EnumerationOptionConstants.AllDirectories)
-            .ToHashSet();
+        var paths = LinkSafeFileSystem.EnumerateFiles(modelsDir, "*").ToHashSet();
 
         foreach (var path in paths)
         {
@@ -458,9 +456,7 @@ private async Task RefreshIndexParallelCore()
 
         var newIndexFlat = new ConcurrentBag<LocalModelFile>();
 
-        var paths = Directory
-            .EnumerateFiles(modelsDir, "*", EnumerationOptionConstants.AllDirectories)
-            .ToHashSet();
+        var paths = LinkSafeFileSystem.EnumerateFiles(modelsDir, "*").ToHashSet();
 
         var partitioner = Partitioner.Create(paths, EnumerablePartitionerOptions.NoBuffering);
 
diff --git a/StabilityMatrix.Core/Services/PipWheelService.cs b/StabilityMatrix.Core/Services/PipWheelService.cs
index e549667c8..a0e23a494 100644
--- a/StabilityMatrix.Core/Services/PipWheelService.cs
+++ b/StabilityMatrix.Core/Services/PipWheelService.cs
@@ -20,7 +20,8 @@ namespace StabilityMatrix.Core.Services;
 public class PipWheelService(
     IGithubApiCache githubApi,
     IDownloadService downloadService,
-    IPrerequisiteHelper prerequisiteHelper
+    IPrerequisiteHelper prerequisiteHelper,
+    ISettingsManager settingsManager
 ) : IPipWheelService
 {
     private static readonly Logger Logger = LogManager.GetCurrentClassLogger();
@@ -284,7 +285,14 @@ private async Task InstallSageAttentionFromSourceAsync(
         progress?.Report(new ProgressReport(-1f, "Installing Triton", isIndeterminate: true));
         await venv.PipInstall("triton-windows", progress.AsProcessOutputHandler()).ConfigureAwait(false);
 
-        venv.UpdateEnvironmentVariables(env => env.SetItem("SETUPTOOLS_USE_DISTUTILS", "setuptools"));
+        // Only Python < 3.12 has a stdlib distutils to fall back to - see VladAutomatic/AiToolkit
+        // for the same guard against Python 3.12+, where forcing this unconditionally breaks setup.
+        if (venv.Version is { Minor: < 12 })
+        {
+            venv.UpdateEnvironmentVariables(env =>
+                env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "setuptools")
+            );
+        }
 
         // Download python libs for building
         await AddMissingLibsToVenvAsync(venv, progress).ConfigureAwait(false);
diff --git a/StabilityMatrix.Core/Services/WorkflowLibraryIndex.cs b/StabilityMatrix.Core/Services/WorkflowLibraryIndex.cs
new file mode 100644
index 000000000..39fbdd992
--- /dev/null
+++ b/StabilityMatrix.Core/Services/WorkflowLibraryIndex.cs
@@ -0,0 +1,120 @@
+using System.Collections.Concurrent;
+using System.Text.Json;
+using Injectio.Attributes;
+using NLog;
+using StabilityMatrix.Core.Helper;
+using StabilityMatrix.Core.Models;
+
+namespace StabilityMatrix.Core.Services;
+
+public interface IWorkflowLibraryIndex
+{
+    /// <summary>
+    /// CivitAI model versions currently in the workflow library, keyed by model id,
+    /// derived from the metadata embedded in imported workflow files.
+    /// </summary>
+    Task<IReadOnlyDictionary<int, IReadOnlySet<int>>> GetInstalledCivitVersionsAsync();
+
+    /// <summary>
+    /// Library file paths imported from the given CivitAI model,
+    /// optionally restricted to a single version.
+    /// </summary>
+    Task<IReadOnlyList<string>> GetInstalledFilesAsync(int modelId, int? versionId = null);
+}
+
+[RegisterSingleton<IWorkflowLibraryIndex, WorkflowLibraryIndex>]
+public class WorkflowLibraryIndex : IWorkflowLibraryIndex
+{
+    private static readonly Logger Logger = LogManager.GetCurrentClassLogger();
+
+    private readonly ISettingsManager settingsManager;
+    private readonly SemaphoreSlim scanLock = new(1, 1);
+    private IReadOnlyDictionary<(int ModelId, int VersionId), List<string>>? cache;
+
+    public WorkflowLibraryIndex(ISettingsManager settingsManager)
+    {
+        this.settingsManager = settingsManager;
+
+        EventManager.Instance.WorkflowInstalled += (_, _) => cache = null;
+    }
+
+    public async Task<IReadOnlyDictionary<int, IReadOnlySet<int>>> GetInstalledCivitVersionsAsync()
+    {
+        var files = await GetCacheAsync().ConfigureAwait(false);
+
+        var result = new Dictionary<int, IReadOnlySet<int>>();
+        foreach (var group in files.Keys.GroupBy(key => key.ModelId))
+        {
+            result[group.Key] = group.Select(key => key.VersionId).ToHashSet();
+        }
+
+        return result;
+    }
+
+    public async Task<IReadOnlyList<string>> GetInstalledFilesAsync(int modelId, int? versionId = null)
+    {
+        var files = await GetCacheAsync().ConfigureAwait(false);
+
+        return files
+            .Where(kv => kv.Key.ModelId == modelId && (versionId is null || kv.Key.VersionId == versionId))
+            .SelectMany(kv => kv.Value)
+            .ToList();
+    }
+
+    private async Task<IReadOnlyDictionary<(int ModelId, int VersionId), List<string>>> GetCacheAsync()
+    {
+        if (cache is { } cached)
+            return cached;
+
+        await scanLock.WaitAsync().ConfigureAwait(false);
+        try
+        {
+            return cache ??= await Task.Run(ScanLibrary).ConfigureAwait(false);
+        }
+        finally
+        {
+            scanLock.Release();
+        }
+    }
+
+    private IReadOnlyDictionary<(int ModelId, int VersionId), List<string>> ScanLibrary()
+    {
+        var result = new Dictionary<(int, int), List<string>>();
+
+        if (!Directory.Exists(settingsManager.WorkflowDirectory))
+            return result;
+
+        foreach (
+            var workflowPath in LinkSafeFileSystem.EnumerateFiles(settingsManager.WorkflowDirectory, "*.json")
+        )
+        {
+            try
+            {
+                var metadata = JsonSerializer.Deserialize<WorkflowMetadata>(File.ReadAllText(workflowPath));
+
+                // Import ids are "civitai-{modelId}-{versionId}-{name}"
+                if (metadata?.Workflow?.Id?.Split('-') is not ["civitai", var modelPart, var versionPart, ..])
+                    continue;
+
+                if (
+                    !int.TryParse(modelPart, out var modelId) || !int.TryParse(versionPart, out var versionId)
+                )
+                    continue;
+
+                if (!result.TryGetValue((modelId, versionId), out var files))
+                {
+                    files = [];
+                    result[(modelId, versionId)] = files;
+                }
+
+                files.Add(workflowPath);
+            }
+            catch (Exception e)
+            {
+                Logger.Debug(e, "Skipping unreadable workflow file {Path}", workflowPath);
+            }
+        }
+
+        return result;
+    }
+}
diff --git a/StabilityMatrix.Tests/Core/EnvironmentVariablesExtensionsTests.cs b/StabilityMatrix.Tests/Core/EnvironmentVariablesExtensionsTests.cs
new file mode 100644
index 000000000..0b46fd1cf
--- /dev/null
+++ b/StabilityMatrix.Tests/Core/EnvironmentVariablesExtensionsTests.cs
@@ -0,0 +1,167 @@
+using System.Collections.Immutable;
+using Microsoft.Extensions.Logging.Abstractions;
+using NSubstitute;
+using StabilityMatrix.Core.Extensions;
+using StabilityMatrix.Core.Models;
+using StabilityMatrix.Core.Python;
+using StabilityMatrix.Core.Services;
+
+namespace StabilityMatrix.Tests.Core;
+
+[TestClass]
+public class EnvironmentVariablesExtensionsTests
+{
+    private static SettingsManager CreateSettingsManager() => new(NullLogger<SettingsManager>.Instance);
+
+    /// <summary>
+    /// A substitute <see cref="IPyVenvRunner"/> whose <see cref="IPyVenvRunner.UpdateEnvironmentVariables"/>
+    /// actually mutates <see cref="IPyVenvRunner.EnvironmentVariables"/>, so tests can exercise real
+    /// read-modify-write semantics instead of mocking every call site.
+    /// </summary>
+    private static IPyVenvRunner CreateFakeVenvRunner(ImmutableDictionary<string, string> initial)
+    {
+        var venvRunner = Substitute.For<IPyVenvRunner>();
+        venvRunner.EnvironmentVariables = initial;
+        venvRunner
+            .When(x =>
+                x.UpdateEnvironmentVariables(
+                    Arg.Any<Func<ImmutableDictionary<string, string>, ImmutableDictionary<string, string>>>()
+                )
+            )
+            .Do(callInfo =>
+            {
+                var update = callInfo.Arg<
+                    Func<ImmutableDictionary<string, string>, ImmutableDictionary<string, string>>
+                >();
+                venvRunner.EnvironmentVariables = update(venvRunner.EnvironmentVariables);
+            });
+        return venvRunner;
+    }
+
+    [TestMethod]
+    public void SetPackageDefault_AppliesValue_WhenUserHasNotOverridden()
+    {
+        var settingsManager = CreateSettingsManager();
+        var env = ImmutableDictionary<string, string>.Empty;
+
+        env = env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "stdlib");
+
+        Assert.AreEqual("stdlib", env["SETUPTOOLS_USE_DISTUTILS"]);
+    }
+
+    [TestMethod]
+    public void SetPackageDefault_DoesNotOverride_WhenUserHasSetKey_ListFormat()
+    {
+        var settingsManager = CreateSettingsManager();
+        settingsManager.Settings.UserEnvironmentVariablesList =
+        [
+            new EnvVarKeyPair("SETUPTOOLS_USE_DISTUTILS", "local", isEnabled: true),
+        ];
+        var env = ImmutableDictionary<string, string>.Empty;
+
+        env = env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "stdlib");
+
+        // The package default is skipped entirely - the user's own value (already merged into
+        // env upstream via Settings.EnvironmentVariables) is left untouched.
+        Assert.IsFalse(env.ContainsKey("SETUPTOOLS_USE_DISTUTILS"));
+    }
+
+    [TestMethod]
+    public void SetPackageDefault_AppliesValue_WhenUserOverrideIsDisabled()
+    {
+        var settingsManager = CreateSettingsManager();
+        settingsManager.Settings.UserEnvironmentVariablesList =
+        [
+            new EnvVarKeyPair("SETUPTOOLS_USE_DISTUTILS", "local", isEnabled: false),
+        ];
+        var env = ImmutableDictionary<string, string>.Empty;
+
+        env = env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "stdlib");
+
+        Assert.AreEqual("stdlib", env["SETUPTOOLS_USE_DISTUTILS"]);
+    }
+
+    [TestMethod]
+    public void SetPackageDefault_DoesNotOverride_WhenUserHasSetKey_LegacyDictFormat()
+    {
+        var settingsManager = CreateSettingsManager();
+        settingsManager.Settings.UserEnvironmentVariables = new Dictionary<string, string>
+        {
+            ["SETUPTOOLS_USE_DISTUTILS"] = "local",
+        };
+        var env = ImmutableDictionary<string, string>.Empty;
+
+        env = env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "stdlib");
+
+        Assert.IsFalse(env.ContainsKey("SETUPTOOLS_USE_DISTUTILS"));
+    }
+
+    [TestMethod]
+    public void SetPackageDefault_LaterCallCanStillOverride_WhenKeyNotUserSet()
+    {
+        // Simulates a base class default followed by a derived class's own computed default for
+        // the same key - internal chain precedence (last write wins) must keep working when the
+        // user hasn't configured the key themselves; only an actual user override should block it.
+        var settingsManager = CreateSettingsManager();
+        var env = ImmutableDictionary<string, string>.Empty;
+
+        env = env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "stdlib");
+        env = env.SetPackageDefault(settingsManager, "SETUPTOOLS_USE_DISTUTILS", "local");
+
+        Assert.AreEqual("local", env["SETUPTOOLS_USE_DISTUTILS"]);
+    }
+
+    [TestMethod]
+    public async Task RunWithTemporaryEnvironmentVariableAsync_RestoresPreviousValue_WhenOneExisted()
+    {
+        var venvRunner = CreateFakeVenvRunner(
+            ImmutableDictionary<string, string>.Empty.Add("UV_SKIP_WHEEL_FILENAME_CHECK", "0")
+        );
+
+        string? valueDuringAction = null;
+        await venvRunner.RunWithTemporaryEnvironmentVariableAsync(
+            "UV_SKIP_WHEEL_FILENAME_CHECK",
+            "1",
+            () =>
+            {
+                valueDuringAction = venvRunner.EnvironmentVariables["UV_SKIP_WHEEL_FILENAME_CHECK"];
+                return Task.CompletedTask;
+            }
+        );
+
+        Assert.AreEqual("1", valueDuringAction);
+        Assert.AreEqual("0", venvRunner.EnvironmentVariables["UV_SKIP_WHEEL_FILENAME_CHECK"]);
+    }
+
+    [TestMethod]
+    public async Task RunWithTemporaryEnvironmentVariableAsync_RemovesKey_WhenNoneExistedBefore()
+    {
+        var venvRunner = CreateFakeVenvRunner(ImmutableDictionary<string, string>.Empty);
+
+        await venvRunner.RunWithTemporaryEnvironmentVariableAsync(
+            "UV_SKIP_WHEEL_FILENAME_CHECK",
+            "1",
+            () => Task.CompletedTask
+        );
+
+        Assert.IsFalse(venvRunner.EnvironmentVariables.ContainsKey("UV_SKIP_WHEEL_FILENAME_CHECK"));
+    }
+
+    [TestMethod]
+    public async Task RunWithTemporaryEnvironmentVariableAsync_RestoresPreviousValue_EvenWhenActionThrows()
+    {
+        var venvRunner = CreateFakeVenvRunner(
+            ImmutableDictionary<string, string>.Empty.Add("UV_SKIP_WHEEL_FILENAME_CHECK", "0")
+        );
+
+        await Assert.ThrowsExceptionAsync<InvalidOperationException>(() =>
+            venvRunner.RunWithTemporaryEnvironmentVariableAsync(
+                "UV_SKIP_WHEEL_FILENAME_CHECK",
+                "1",
+                () => throw new InvalidOperationException()
+            )
+        );
+
+        Assert.AreEqual("0", venvRunner.EnvironmentVariables["UV_SKIP_WHEEL_FILENAME_CHECK"]);
+    }
+}
diff --git a/StabilityMatrix.Tests/Helper/LinkSafeFileSystemTests.cs b/StabilityMatrix.Tests/Helper/LinkSafeFileSystemTests.cs
new file mode 100644
index 000000000..c24ed447d
--- /dev/null
+++ b/StabilityMatrix.Tests/Helper/LinkSafeFileSystemTests.cs
@@ -0,0 +1,214 @@
+using StabilityMatrix.Core.Helper;
+using StabilityMatrix.Core.Models.FileInterfaces;
+
+namespace StabilityMatrix.Tests.Helper;
+
+[TestClass]
+public class LinkSafeFileSystemTests
+{
+    private string tempDir = null!;
+
+    [TestInitialize]
+    public void Initialize()
+    {
+        tempDir = Path.Combine(Path.GetTempPath(), $"sm-test-{Guid.NewGuid():N}");
+        Directory.CreateDirectory(tempDir);
+    }
+
+    [TestCleanup]
+    public void Cleanup()
+    {
+        TempFiles.DeleteDirectory(tempDir);
+    }
+
+    private string CreateDir(params string[] segments)
+    {
+        var path = Path.Combine([tempDir, .. segments]);
+        Directory.CreateDirectory(path);
+        return path;
+    }
+
+    private string CreateFile(params string[] segments)
+    {
+        var path = Path.Combine([tempDir, .. segments]);
+        Directory.CreateDirectory(Path.GetDirectoryName(path)!);
+        File.WriteAllText(path, "{}");
+        return path;
+    }
+
+    [TestMethod]
+    public void EnumerateFiles_LinkBackToRoot_YieldsEachFileOnce()
+    {
+        var root = CreateDir("root");
+        CreateFile("root", "a.json");
+        CreateFile("root", "sub", "b.json");
+        TempFiles.CreateDirectoryLink(Path.Combine(root, "sub", "loop"), root);
+
+        var files = LinkSafeFileSystem.EnumerateFiles(root, "*.json").ToList();
+
+        CollectionAssert.AreEquivalent(
+            new[] { Path.Combine(root, "a.json"), Path.Combine(root, "sub", "b.json") },
+            files
+        );
+    }
+
+    [TestMethod]
+    public void EnumerateFiles_RootIsLinkAndChildLinksBackThroughIt_YieldsEachFileOnce()
+    {
+        // Data\Workflows -> ComfyUI\user\default\workflows, which contains "Stability Matrix" -> Data\Workflows
+        var comfyWorkflows = CreateDir("Packages", "ComfyUI", "user", "default", "workflows");
+        CreateFile("Packages", "ComfyUI", "user", "default", "workflows", "a.json");
+        CreateFile("Packages", "ComfyUI", "user", "default", "workflows", "sub", "b.json");
+
+        var library = Path.Combine(tempDir, "Workflows");
+        TempFiles.CreateDirectoryLink(library, comfyWorkflows);
+        TempFiles.CreateDirectoryLink(Path.Combine(comfyWorkflows, "Stability Matrix"), library);
+
+        var files = LinkSafeFileSystem.EnumerateFiles(library, "*.json").ToList();
+
+        // Paths stay rooted at the library path as given, so relative folders resolve against it
+        CollectionAssert.AreEquivalent(
+            new[] { Path.Combine(library, "a.json"), Path.Combine(library, "sub", "b.json") },
+            files
+        );
+    }
+
+    [TestMethod]
+    public void EnumerateFiles_LinkToUnvisitedDirectory_IsFollowed()
+    {
+        var root = CreateDir("root");
+        var elsewhere = CreateDir("elsewhere");
+        CreateFile("elsewhere", "c.json");
+        TempFiles.CreateDirectoryLink(Path.Combine(root, "linked"), elsewhere);
+
+        var files = LinkSafeFileSystem.EnumerateFiles(root, "*.json").ToList();
+
+        CollectionAssert.AreEquivalent(new[] { Path.Combine(root, "linked", "c.json") }, files);
+    }
+
+    [TestMethod]
+    public void EnumerateFiles_TwoLinksToSameDirectory_VisitsItOnce()
+    {
+        var root = CreateDir("root");
+        var elsewhere = CreateDir("elsewhere");
+        CreateFile("elsewhere", "c.json");
+        TempFiles.CreateDirectoryLink(Path.Combine(root, "link1"), elsewhere);
+        TempFiles.CreateDirectoryLink(Path.Combine(root, "link2"), elsewhere);
+
+        var files = LinkSafeFileSystem.EnumerateFiles(root, "*.json").ToList();
+
+        Assert.AreEqual(1, files.Count);
+    }
+
+    [TestMethod]
+    public void EnumerateFiles_DeeperThanMaxDepth_IsSkipped()
+    {
+        var root = CreateDir("root");
+        CreateFile("root", "d0.json");
+        CreateFile("root", "l1", "d1.json");
+        CreateFile("root", "l1", "l2", "d2.json");
+
+        var files = LinkSafeFileSystem.EnumerateFiles(root, "*.json", maxDepth: 1).ToList();
+
+        CollectionAssert.AreEquivalent(
+            new[] { Path.Combine(root, "d0.json"), Path.Combine(root, "l1", "d1.json") },
+            files
+        );
+    }
+
+    [TestMethod]
+    public void GetRealPath_ResolvesLinkChainsAndLinkedAncestors()
+    {
+        var real = CreateDir("real");
+        CreateDir("real", "child");
+        var link1 = Path.Combine(tempDir, "link1");
+        var link2 = Path.Combine(tempDir, "link2");
+        TempFiles.CreateDirectoryLink(link1, real);
+        TempFiles.CreateDirectoryLink(link2, link1);
+
+        Assert.AreEqual(real, LinkSafeFileSystem.GetRealPath(link2));
+        Assert.AreEqual(
+            Path.Combine(real, "child"),
+            LinkSafeFileSystem.GetRealPath(Path.Combine(link2, "child"))
+        );
+    }
+
+    [TestMethod]
+    public void GetRealPath_PlainDirectory_IsUnchanged()
+    {
+        var real = CreateDir("real");
+
+        Assert.AreEqual(real, LinkSafeFileSystem.GetRealPath(real));
+        Assert.AreEqual(real, LinkSafeFileSystem.GetRealPath(real + Path.DirectorySeparatorChar));
+    }
+
+    [TestMethod]
+    public void WouldLinkCycle_LinkDirectlyInsideSource_IsTrue()
+    {
+        var source = new DirectoryPath(CreateDir("source"));
+
+        Assert.IsTrue(LinkSafeFileSystem.WouldLinkCycle(source, source.JoinDir("Stability Matrix")));
+    }
+
+    [TestMethod]
+    public void WouldLinkCycle_LinkInsideSubfolderOfSource_IsTrue()
+    {
+        var source = new DirectoryPath(CreateDir("source"));
+        CreateDir("source", "sub");
+
+        Assert.IsTrue(LinkSafeFileSystem.WouldLinkCycle(source, source.JoinDir("sub", "Stability Matrix")));
+    }
+
+    [TestMethod]
+    public void WouldLinkCycle_SourceIsLinkToLinkParent_IsTrue()
+    {
+        // The reported setup: the library is a link to ComfyUI's workflows folder,
+        // and the link would be created inside that same folder
+        var comfyWorkflows = CreateDir("Packages", "ComfyUI", "user", "default", "workflows");
+        var library = new DirectoryPath(tempDir, "Workflows");
+        TempFiles.CreateDirectoryLink(library, comfyWorkflows);
+
+        var linkPath = new DirectoryPath(comfyWorkflows, "Stability Matrix");
+
+        Assert.IsTrue(LinkSafeFileSystem.WouldLinkCycle(library, linkPath));
+    }
+
+    [TestMethod]
+    public void WouldLinkCycle_LinkParentIsLinkToSource_IsTrue()
+    {
+        // The reverse setup: ComfyUI's workflows folder is a link to the library
+        var library = new DirectoryPath(CreateDir("Workflows"));
+        CreateDir("Packages", "ComfyUI", "user", "default");
+        var comfyWorkflows = Path.Combine(tempDir, "Packages", "ComfyUI", "user", "default", "workflows");
+        TempFiles.CreateDirectoryLink(comfyWorkflows, library);
+
+        var linkPath = new DirectoryPath(comfyWorkflows, "Stability Matrix");
+
+        Assert.IsTrue(LinkSafeFileSystem.WouldLinkCycle(library, linkPath));
+    }
+
+    [TestMethod]
+    public void WouldLinkCycle_UnrelatedDirectories_IsFalse()
+    {
+        var source = new DirectoryPath(CreateDir("Workflows"));
+        var comfyWorkflows = CreateDir("Packages", "ComfyUI", "user", "default", "workflows");
+
+        Assert.IsFalse(
+            LinkSafeFileSystem.WouldLinkCycle(source, new DirectoryPath(comfyWorkflows, "Stability Matrix"))
+        );
+    }
+
+    [TestMethod]
+    public void WouldLinkCycle_SourceInsideLinkParent_IsFalse()
+    {
+        // A library that lives below the link's parent is reachable twice but never loops
+        var comfyWorkflows = CreateDir("Packages", "ComfyUI", "user", "default", "workflows");
+        var source = new DirectoryPath(
+            CreateDir("Packages", "ComfyUI", "user", "default", "workflows", "Library")
+        );
+
+        Assert.IsFalse(
+            LinkSafeFileSystem.WouldLinkCycle(source, new DirectoryPath(comfyWorkflows, "Stability Matrix"))
+        );
+    }
+}
diff --git a/StabilityMatrix.Tests/Models/Packages/ComfyUIWorkflowLinkTests.cs b/StabilityMatrix.Tests/Models/Packages/ComfyUIWorkflowLinkTests.cs
index 0f2f91572..36a60a0d0 100644
--- a/StabilityMatrix.Tests/Models/Packages/ComfyUIWorkflowLinkTests.cs
+++ b/StabilityMatrix.Tests/Models/Packages/ComfyUIWorkflowLinkTests.cs
@@ -44,23 +44,7 @@ public void Initialize()
     [TestCleanup]
     public void Cleanup()
     {
-        if (!Directory.Exists(tempDir))
-            return;
-
-        // Junction links must be unlinked (non-recursively) before the recursive delete,
-        // which would otherwise fail or follow into the link target
-        var links = new DirectoryInfo(tempDir)
-            .EnumerateDirectories("*", SearchOption.AllDirectories)
-            .Where(d => d.Attributes.HasFlag(FileAttributes.ReparsePoint))
-            .ToList();
-
-        foreach (var link in links)
-        {
-            link.Attributes = FileAttributes.Normal;
-            link.Delete(false);
-        }
-
-        Directory.Delete(tempDir, true);
+        TempFiles.DeleteDirectory(tempDir);
     }
 
     [TestMethod]
@@ -85,6 +69,42 @@ public async Task SetupModelFolders_SkipsLinkWhenSharingDisabled()
         Assert.IsFalse(installDir.JoinDir("user", "default", "workflows", "Stability Matrix").Exists);
     }
 
+    [TestMethod]
+    public async Task SetupModelFolders_LibraryLinkedToComfyWorkflowsDir_SkipsLink()
+    {
+        // The user pointed the library at ComfyUI's own workflows folder; linking it back
+        // into that folder would create "Stability Matrix\Stability Matrix\..." forever
+        var comfyWorkflows = installDir.JoinDir("user", "default", "workflows");
+        comfyWorkflows.Create();
+        await File.WriteAllTextAsync(comfyWorkflows.JoinFile("mine.json"), "{}");
+        TempFiles.CreateDirectoryLink(workflowsDir, comfyWorkflows);
+
+        await comfy.SetupModelFolders(installDir, SharedFolderMethod.Configuration);
+
+        Assert.IsFalse(
+            comfyWorkflows.JoinDir("Stability Matrix").Exists,
+            "Looping link should not be created"
+        );
+        Assert.IsTrue(File.Exists(comfyWorkflows.JoinFile("mine.json")), "User workflows must be untouched");
+    }
+
+    [TestMethod]
+    public async Task SetupModelFolders_ExistingLoopingLink_IsRemoved()
+    {
+        // State left behind by an older version that created the link before the library was redirected
+        var comfyWorkflows = installDir.JoinDir("user", "default", "workflows");
+        comfyWorkflows.Create();
+        await File.WriteAllTextAsync(comfyWorkflows.JoinFile("mine.json"), "{}");
+        TempFiles.CreateDirectoryLink(workflowsDir, comfyWorkflows);
+        var linkDir = comfyWorkflows.JoinDir("Stability Matrix");
+        TempFiles.CreateDirectoryLink(linkDir, workflowsDir);
+
+        await comfy.SetupModelFolders(installDir, SharedFolderMethod.Configuration);
+
+        Assert.IsFalse(linkDir.Exists, "Looping link should be removed");
+        Assert.IsTrue(File.Exists(comfyWorkflows.JoinFile("mine.json")), "User workflows must be untouched");
+    }
+
     [TestMethod]
     public async Task RemoveModelFolderLinks_RemovesLinkButKeepsLibrary()
     {
diff --git a/StabilityMatrix.Tests/Models/SharedFoldersTests.cs b/StabilityMatrix.Tests/Models/SharedFoldersTests.cs
index b090d1831..f75841348 100644
--- a/StabilityMatrix.Tests/Models/SharedFoldersTests.cs
+++ b/StabilityMatrix.Tests/Models/SharedFoldersTests.cs
@@ -11,13 +11,12 @@ public class SharedFoldersTests
     private string TempModelsFolder => Path.Combine(tempFolder, "models");
     private string TempPackageFolder => Path.Combine(tempFolder, "package");
 
-    private readonly Dictionary<SharedFolderType, string> sampleDefinitions =
-        new()
-        {
-            [SharedFolderType.StableDiffusion] = "models/Stable-diffusion",
-            [SharedFolderType.ESRGAN] = "models/ESRGAN",
-            [SharedFolderType.Embeddings] = "embeddings",
-        };
+    private readonly Dictionary<SharedFolderType, string> sampleDefinitions = new()
+    {
+        [SharedFolderType.StableDiffusion] = "models/Stable-diffusion",
+        [SharedFolderType.ESRGAN] = "models/ESRGAN",
+        [SharedFolderType.Embeddings] = "embeddings",
+    };
 
     [TestInitialize]
     public void Initialize()
@@ -113,4 +112,75 @@ public void SetupLinks_CanDeleteJunctions()
             $"File should exist in {modelFolder}."
         );
     }
+
+    [TestMethod]
+    public void RemoveLinksForPackage_RemovesJunctions_KeepsTargetFiles()
+    {
+        CreateSampleJunctions();
+
+        var modelFolder = Path.Combine(TempModelsFolder, SharedFolderType.StableDiffusion.GetStringValue());
+        var packagePath = Path.Combine(
+            TempPackageFolder,
+            sampleDefinitions[SharedFolderType.StableDiffusion]
+        );
+
+        File.Create(Path.Combine(modelFolder, "AFile")).Close();
+
+        var definitions = new Dictionary<SharedFolderType, IReadOnlyList<string>>
+        {
+            [SharedFolderType.StableDiffusion] = new[] { "models/Stable-diffusion" },
+        };
+        SharedFolders.RemoveLinksForPackage(definitions, TempPackageFolder);
+
+        Assert.IsFalse(Directory.Exists(packagePath), $"Junction {packagePath} should have been removed.");
+        Assert.IsTrue(
+            File.Exists(Path.Combine(modelFolder, "AFile")),
+            $"File should still exist in {modelFolder}."
+        );
+    }
+
+    [TestMethod]
+    public void RemoveLinksForPackage_DoesNotDeleteRealDirectories()
+    {
+        // A real (non-junction) folder with user data at a shared folder path,
+        // e.g. the models folder of a manually placed / imported package
+        var packagePath = Path.Combine(
+            TempPackageFolder,
+            sampleDefinitions[SharedFolderType.StableDiffusion]
+        );
+        Directory.CreateDirectory(packagePath);
+        File.Create(Path.Combine(packagePath, "model.safetensors")).Close();
+
+        var definitions = new Dictionary<SharedFolderType, IReadOnlyList<string>>
+        {
+            [SharedFolderType.StableDiffusion] = new[] { "models/Stable-diffusion" },
+        };
+        SharedFolders.RemoveLinksForPackage(definitions, TempPackageFolder);
+
+        Assert.IsTrue(
+            File.Exists(Path.Combine(packagePath, "model.safetensors")),
+            $"User data in real directory {packagePath} must not be deleted."
+        );
+    }
+
+    [TestMethod]
+    public void RemoveLinksForPackage_DoesNotDeleteEmptyRealDirectories()
+    {
+        var packagePath = Path.Combine(
+            TempPackageFolder,
+            sampleDefinitions[SharedFolderType.StableDiffusion]
+        );
+        Directory.CreateDirectory(packagePath);
+
+        var definitions = new Dictionary<SharedFolderType, IReadOnlyList<string>>
+        {
+            [SharedFolderType.StableDiffusion] = new[] { "models/Stable-diffusion" },
+        };
+        SharedFolders.RemoveLinksForPackage(definitions, TempPackageFolder);
+
+        Assert.IsTrue(
+            Directory.Exists(packagePath),
+            $"Real directory {packagePath} must not be deleted, even when empty."
+        );
+    }
 }
diff --git a/StabilityMatrix.Tests/TempFiles.cs b/StabilityMatrix.Tests/TempFiles.cs
index 14752b609..fae5eb8f5 100644
--- a/StabilityMatrix.Tests/TempFiles.cs
+++ b/StabilityMatrix.Tests/TempFiles.cs
@@ -1,16 +1,25 @@
-namespace StabilityMatrix.Tests;
+using StabilityMatrix.Core.Helper;
+using StabilityMatrix.Core.ReparsePoints;
+
+namespace StabilityMatrix.Tests;
 
 public static class TempFiles
 {
-    // Deletes directory while handling junction folders
+    /// <summary>
+    /// Deletes a directory tree, unlinking junctions / symlinks (without following them) before
+    /// recursing so linked targets are kept and link cycles cannot loop.
+    /// </summary>
     public static void DeleteDirectory(string directory)
     {
-        // Enumerate to delete any directory links
+        if (!Directory.Exists(directory))
+            return;
+
         foreach (var item in Directory.EnumerateDirectories(directory))
         {
             var info = new DirectoryInfo(item);
-            if (info.Exists && info.Attributes.HasFlag(FileAttributes.ReparsePoint))
+            if (info.Attributes.HasFlag(FileAttributes.ReparsePoint))
             {
+                info.Attributes = FileAttributes.Normal;
                 info.Delete();
             }
             else
@@ -18,5 +27,22 @@ public static void DeleteDirectory(string directory)
                 DeleteDirectory(item);
             }
         }
+
+        Directory.Delete(directory, true);
+    }
+
+    /// <summary>
+    /// Creates a directory link the way the app does: a junction on Windows, a symlink elsewhere.
+    /// </summary>
+    public static void CreateDirectoryLink(string link, string target)
+    {
+        if (Compat.IsWindows)
+        {
+            Junction.Create(link, target, true);
+        }
+        else
+        {
+            Directory.CreateSymbolicLink(link, target);
+        }
     }
 }
diff --git a/Tools/tests/test_wan2gp_logging.py b/Tools/tests/test_wan2gp_logging.py
new file mode 100644
index 000000000..84602eb71
--- /dev/null
+++ b/Tools/tests/test_wan2gp_logging.py
@@ -0,0 +1,148 @@
+"""Exercise the exact embedded launch wrapper against Wan2GP's pinned Gradio.
+
+Run from the repository root (no GPU or Wan2GP installation needed):
+    uv run --no-project --python 3.10 --with gradio==5.29.0 --with requests python Tools/tests/test_wan2gp_logging.py
+"""
+
+import contextlib
+import inspect
+import io
+import logging
+import os
+from pathlib import Path
+import textwrap
+import types
+import unittest
+from unittest.mock import patch
+
+os.environ["GRADIO_ANALYTICS_ENABLED"] = "False"
+
+import gradio as gr
+from fastapi import FastAPI
+from fastapi.responses import JSONResponse
+from fastapi.testclient import TestClient
+from gradio.exceptions import Error as GradioError
+
+
+class Wan2GPLoggingTests(unittest.TestCase):
+    def setUp(self):
+        source = (
+            Path(__file__).resolve().parents[2]
+            / "StabilityMatrix.Core/Models/Packages/Wan2GP.cs"
+        ).read_text(encoding="utf-8-sig")
+        script = textwrap.dedent(
+            source.split('private const string GradioLogPatchScript = """', 1)[1]
+            .split('""";', 1)[0]
+        )
+        namespace = {"__name__": "sm_logging_test"}
+        exec(compile(script, "_sm_gradio_log_patch.py", "exec"), namespace)
+
+        self.original_signature = inspect.signature(GradioError)
+        self.default_error = GradioError()
+        self.addCleanup(setattr, GradioError, "__init__", GradioError.__init__)
+        for name in ("Error", "Info", "Warning"):
+            self.addCleanup(setattr, gr, name, getattr(gr, name))
+        root = logging.getLogger()
+        self.addCleanup(setattr, root, "handlers", root.handlers[:])
+        self.addCleanup(root.setLevel, root.level)
+        self.stdout = io.StringIO()
+        self.stderr = io.StringIO()
+        output_context = contextlib.ExitStack()
+        self.addCleanup(output_context.close)
+        output_context.enter_context(contextlib.redirect_stdout(self.stdout))
+        output_context.enter_context(contextlib.redirect_stderr(self.stderr))
+
+        # Transformers isn't needed to reproduce the Gradio/FastAPI integration.
+        transformers = types.ModuleType("transformers")
+        utils = types.ModuleType("transformers.utils")
+        tf_logging = types.ModuleType("transformers.utils.logging")
+        tf_logging.set_verbosity = lambda level: None
+        transformers.utils = utils
+        utils.logging = tf_logging
+        with patch.dict(
+            "sys.modules",
+            {
+                "transformers": transformers,
+                "transformers.utils": utils,
+                "transformers.utils.logging": tf_logging,
+            },
+        ):
+            namespace["_apply_logging_patch"]()
+
+    def test_error_keeps_class_identity_and_signature(self):
+        self.assertIs(gr.Error, GradioError)
+        self.assertTrue(issubclass(gr.Error, Exception))
+        self.assertEqual(inspect.signature(gr.Error), self.original_signature)
+
+    def test_deepy_mounted_app_builds_and_handles_errors(self):
+        # Deepy imports this symbol after the launch wrapper has patched Gradio.
+        from gradio import Error as DeepyError
+
+        deepy = FastAPI()
+
+        async def invalid_value(request, error):
+            return JSONResponse({"detail": error.message}, status_code=400)
+
+        deepy.add_exception_handler(DeepyError, invalid_value)
+
+        @deepy.get("/state")
+        def state():
+            return {"connected": True}
+
+        @deepy.get("/error")
+        def error():
+            # Also test an alias imported before the wrapper ran.
+            raise GradioError("Invalid Deepy request")
+
+        app = FastAPI()
+        app.mount("/deepy", deepy)
+        with TestClient(app) as client:
+            response = client.get("/deepy/state")
+            self.assertEqual(response.status_code, 200)
+            self.assertEqual(response.json(), {"connected": True})
+            response = client.get("/deepy/error")
+            self.assertEqual(response.status_code, 400)
+            self.assertEqual(response.json(), {"detail": "Invalid Deepy request"})
+        self.assertEqual(
+            self.stderr.getvalue().count("[Gradio] ERROR: Invalid Deepy request"), 1
+        )
+
+    def test_error_preserves_arguments_and_logs_to_stderr(self):
+        error = gr.Error("Bad input", 3, False, "Custom title", False)
+        self.assertIs(type(error), GradioError)
+        self.assertEqual(error.message, "Bad input")
+        self.assertEqual(error.duration, 3)
+        self.assertFalse(error.visible)
+        self.assertEqual(error.title, "Custom title")
+        self.assertFalse(error.print_exception)
+        self.assertIn("[Gradio] ERROR: Bad input", self.stderr.getvalue())
+        self.assertNotIn("[Gradio] ERROR:", self.stdout.getvalue())
+
+    def test_error_accepts_defaults_and_keywords(self):
+        default = gr.Error()
+        self.assertEqual(vars(default), vars(self.default_error))
+        error = gr.Error(message="Keyword error", duration=None, title="Notice")
+        self.assertEqual(error.message, "Keyword error")
+        self.assertIsNone(error.duration)
+        self.assertEqual(error.title, "Notice")
+
+    def test_error_can_be_caught_and_subclassed(self):
+        class SpecificError(gr.Error):
+            pass
+
+        with self.assertRaises(gr.Error) as caught:
+            raise SpecificError("Subclass error")
+        self.assertIsInstance(caught.exception, GradioError)
+        self.assertIn("[Gradio] ERROR: Subclass error", self.stderr.getvalue())
+
+    def test_info_and_warning_still_log_to_stdout(self):
+        gr.Info("Progress message")
+        # Outside a Gradio callback this also emits a normal Python warning.
+        with self.assertWarns(UserWarning):
+            gr.Warning("Warning message")
+        self.assertIn("[Gradio] Progress message", self.stdout.getvalue())
+        self.assertIn("[Gradio] WARNING: Warning message", self.stdout.getvalue())
+
+
+if __name__ == "__main__":
+    unittest.main(verbosity=2)
diff --git a/docs/.vitepress/config.mts b/docs/.vitepress/config.mts
index 0aba90ddb..2a95fb7c2 100644
--- a/docs/.vitepress/config.mts
+++ b/docs/.vitepress/config.mts
@@ -119,7 +119,9 @@ export default defineConfig({
           items: [
             { text: 'Overview', link: '/stability-matrix/package-manager/overview' },
             { text: 'Supported Packages', link: '/stability-matrix/package-manager/supported-packages' },
-            { text: 'Installing Packages', link: '/stability-matrix/package-manager/installing-packages' }
+            { text: 'Installing Packages', link: '/stability-matrix/package-manager/installing-packages' },
+            { text: 'Managing Packages', link: '/stability-matrix/package-manager/managing-packages' },
+            { text: 'Launch Arguments', link: '/stability-matrix/package-manager/launch-arguments' }
           ]
         }
       ],
@@ -127,7 +129,16 @@ export default defineConfig({
         {
           text: 'Inference',
           items: [
-            { text: 'Overview', link: '/stability-matrix/inference/overview' }
+            { text: 'Overview', link: '/stability-matrix/inference/overview' },
+            { text: 'Text to Image', link: '/stability-matrix/inference/text-to-image' }
+          ]
+        }
+      ],
+      '/stability-matrix/checkpoint-manager/': [
+        {
+          text: 'Checkpoint Manager',
+          items: [
+            { text: 'Overview', link: '/stability-matrix/checkpoint-manager/overview' }
           ]
         }
       ],
@@ -136,6 +147,7 @@ export default defineConfig({
           text: 'Advanced',
           items: [
             { text: 'Overview', link: '/stability-matrix/advanced/overview' },
+            { text: 'Shared Folders', link: '/stability-matrix/advanced/shared-folders' },
             { text: 'Hardware Support', link: '/stability-matrix/advanced/hardware-support' },
             { text: 'ComfyUI Integration', link: '/stability-matrix/advanced/comfyui-integration' },
             { text: 'Environment Variables', link: '/stability-matrix/advanced/environment-variables' }
diff --git a/docs/README.md b/docs/README.md
index 29cbcbac2..045023450 100644
--- a/docs/README.md
+++ b/docs/README.md
@@ -8,6 +8,14 @@ While not all encompassing on every minute detail, it is intended to be updated
 
 Current Status: In-progress - Structure is in-place and planned docs are currently being progressively created and added.
 
+## Common Tasks
+
+- [Generate your first image](inference/text-to-image.md)
+- [Import models already on your computer](checkpoint-manager/overview.md#import-local-models)
+- [Launch, update, or uninstall a package](package-manager/managing-packages.md)
+- [Change a package's launch arguments](package-manager/launch-arguments.md)
+- [Understand shared model and output folders](advanced/shared-folders.md)
+
 ## Table of Contents
 
 ### Getting Started
@@ -20,20 +28,20 @@ Current Status: In-progress - Structure is in-place and planned docs are current
 - [Overview](package-manager/overview.md) — Managing AI packages in Stability Matrix
 - [Supported Packages](package-manager/supported-packages.md) — Full list of supported inference and training packages
 - [Installing Packages](package-manager/installing-packages.md) — One-click install, hardware selection, GPU backends
-- Managing Packages *(planned)* — Launching, monitoring, updating, and deleting installed packages
-- Launch Arguments *(planned)* — Configuring launch arguments per package
+- [Managing Packages](package-manager/managing-packages.md) — Launching, monitoring, updating, and deleting installed packages
+- [Launch Arguments](package-manager/launch-arguments.md) — Configuring launch arguments per package
 - Extensions *(planned)* — Browsing and managing package plugins and extensions
 
 ### Inference
 - [Overview](inference/overview.md) — The Inference UI, panel layout, and project files
-- Text to Image *(planned)* — Generating images from text prompts
+- [Text to Image](inference/text-to-image.md) — Generating your first image, seeds, batches, and saving projects
 - Image to Image *(planned)* — Using an image as a generation starting point
 - Image Upscale *(planned)* — Upscaling images with AI upscaler models
 - Video Generation *(planned)* — Generating video with WAN and SVD models
 - Advanced Controls *(planned)* — ControlNet, FaceDetailer, FreeU, LayerDiffuse, and more
 
 ### Checkpoint Manager
-- Overview *(planned)* — Centralized model storage shared across all packages
+- [Overview](checkpoint-manager/overview.md) — Importing, finding, organizing, and deleting local models
 - Model Categories *(planned)* — All supported model folder types explained
 - Metadata Editing *(planned)* — Importing CivitAI metadata and editing model info
 
@@ -57,7 +65,7 @@ Current Status: In-progress - Structure is in-place and planned docs are current
 ### Advanced
 - [Overview](advanced/overview.md) — Advanced configuration and technical reference
 - Building from Source and Contributing *(planned)* — Local builds, runtime targets, and where to start for code or docs contributions
-- Shared Folders *(planned)* — Folder structure, symlinks, and cross-package model sharing
+- [Shared Folders](advanced/shared-folders.md) — Folder structure, symlinks, and cross-package model sharing
 - [Hardware Support](advanced/hardware-support.md) — CUDA, ROCm, DirectML, MPS, ZLUDA, IPEX, and CPU backends
 - Python Environment *(planned)* — Virtual environments, uv, pip, and Python version management
 - [ComfyUI Integration](advanced/comfyui-integration.md) — ComfyUI node API, WebSocket protocol, and custom nodes
diff --git a/docs/advanced/overview.md b/docs/advanced/overview.md
index 6619adab0..b82e9a872 100644
--- a/docs/advanced/overview.md
+++ b/docs/advanced/overview.md
@@ -13,6 +13,6 @@ Most users never need to touch these topics, since Stability Matrix handles envi
 - [Environment Variables](environment-variables.md) — Per-package environment variable configuration
 - [ComfyUI Integration](comfyui-integration.md) — ComfyUI node API, WebSocket protocol, and custom nodes
 - Building from Source and Contributing *(planned)* — Local builds, runtime targets, and where to start for code or docs contributions
-- Shared Folders *(planned)* — Folder structure, symlinks, and cross-package model sharing
+- [Shared Folders](shared-folders.md) — Folder structure, symlinks, and cross-package model sharing
 - [Hardware Support](hardware-support.md) — CUDA, ROCm, DirectML, MPS, ZLUDA, IPEX, and CPU backends
 - Python Environment *(planned)* — Virtual environments, uv, pip, and Python version management
diff --git a/docs/advanced/shared-folders.md b/docs/advanced/shared-folders.md
new file mode 100644
index 000000000..2d2090dad
--- /dev/null
+++ b/docs/advanced/shared-folders.md
@@ -0,0 +1,83 @@
+# Shared Folders
+
+Stability Matrix keeps a shared model library so compatible packages can use the same files. Model sharing and output sharing are separate per-package settings; enabling one does not enable the other.
+
+[`Section Overview`](overview.md) | [`Home`](../README.md)
+
+## Table of Contents
+
+- [The Shared Library](#the-shared-library)
+- [Model Sharing Methods](#model-sharing-methods)
+- [ComfyUI Path Examples](#comfyui-path-examples)
+- [Output Sharing](#output-sharing)
+- [Change Sharing or Storage Locations](#change-sharing-or-storage-locations)
+- [Troubleshooting Shared Models](#troubleshooting-shared-models)
+
+---
+
+## The Shared Library
+
+The shared model root is normally `<data directory>/Models`. Each type has a category below it, such as `StableDiffusion`, `Lora`, or `VAE`. A models folder selected separately in Settings replaces that root.
+
+Each package maps the categories it supports to its own folder names or configuration keys. Sharing a file does not make it compatible with another architecture or loader. For example, a package can see a model on disk but still lack the functionality needed to load it.
+
+For common category destinations and local imports, see [Checkpoint Manager](../checkpoint-manager/overview.md#where-models-live).
+
+## Model Sharing Methods
+
+Open **Packages → the installation's three-dot menu → Model Sharing**. Only supported methods are available for a given package.
+
+| Method | How the package accesses models | What happens to package-local model files |
+|---|---|---|
+| **Symlink** | Package model folders point to the shared library. Stability Matrix uses directory junctions on Windows and symbolic links on other platforms. | When setting up a mapped folder, the app attempts to move existing files into the shared category before replacing the folder with a link. |
+| **Config** | The app writes shared paths into the package's supported configuration file. Called **Configuration** in installation options. | Local model folders can remain alongside shared paths; those local files are not relocated by configuration sharing. |
+| **None** | Stability Matrix does not configure shared model paths for that installation. | The package uses its own folders or paths you configure yourself. |
+
+ComfyUI recommends **Configuration** in this checkout and uses `extra_model_paths.yaml`. An empty `models/checkpoints` folder inside a Config-mode ComfyUI installation is therefore not evidence that sharing failed.
+
+With Symlink sharing, deleting a model *through* a linked folder deletes the same file used by other packages. A linked folder is another path to the file, not a backup copy.
+
+## ComfyUI Path Examples
+
+These mappings show why a shared category and a ComfyUI folder can have different names. The Config column lists keys managed in ComfyUI's extra model paths file; it does not imply that a physical link exists.
+
+| Stability Matrix category | ComfyUI folder in Symlink mode | Config key |
+|---|---|---|
+| `StableDiffusion` | `models/checkpoints` | `checkpoints` |
+| `Lora`, `LyCORIS` | `models/loras` | `loras` |
+| `VAE` | `models/vae` | `vae` |
+| `TextEncoders` | `models/clip` | `clip` |
+| `DiffusionModels` | `models/diffusion_models` | `diffusion_models` |
+| `Embeddings` | `models/embeddings` | `embeddings` |
+
+Keep files in the Stability Matrix categories when following instructions that describe ComfyUI's own folders. For example, a text encoder intended for ComfyUI's `models/clip` belongs in the shared `TextEncoders` category when using this mapping.
+
+## Output Sharing
+
+For supported packages, **Use Shared Output Folder** connects mapped output folders to categories under `<data directory>/Images`. The mappings vary by package and need not cover every kind of file a package writes.
+
+ComfyUI's `output` folder maps to `Images/Text2Img`. Outputs saved by Stability Matrix's built-in Inference pipeline use `Images/Inference`. These are distinct output paths even when ComfyUI is the backend for both interfaces.
+
+With output sharing disabled, outputs can remain inside the package installation. Check the actual destination before uninstalling it. Package-local files are removed with the package; shared files outside it remain. See [Uninstall a Package](../package-manager/managing-packages.md#uninstall-a-package).
+
+## Change Sharing or Storage Locations
+
+Stop the affected package before changing its sharing method. If its local model folders already contain files, preserve anything you need before switching: Symlink setup can relocate those files, whereas Config sharing leaves them local. Review any operation error and verify the resulting paths before deleting old copies.
+
+Switching to **None** does not copy the shared library into the package. Models previously reached through managed paths may no longer appear there until you configure local files or restore sharing.
+
+To store models on another drive, copy or move the existing model categories into the new models root, then use **Settings → System → Select New Models Folder** to select that root. This setting creates the shared category folders and requires an app restart; it does not transfer your existing models. Do not delete the old copy until the Checkpoint Manager and a launched package both see the intended files. For moving the entire library, follow [Data Directory](../getting-started/data-directory.md#changing-the-data-directory-later).
+
+**Settings → Checkpoint Manager → Remove Symlinks on Shutdown** removes managed model links when Stability Matrix closes. If enabled, packages launched outside Stability Matrix after shutdown may not see models through those links. Start them through Stability Matrix to let it set up sharing again.
+
+## Troubleshooting Shared Models
+
+| Symptom | Check |
+|---|---|
+| Model appears in the manager but not the package | Correct installation, sharing method, supported category, and successful package restart. |
+| ComfyUI's local model folders are empty | Whether **Config** sharing is in use; inspect `extra_model_paths.yaml` in the package folder. |
+| Models disappear after moving a drive or library | Whether configured paths and link targets still resolve to the actual files. |
+| A link cannot be created | That the destination is writable, the drive supports links, and existing custom links do not create a loop. See [Data Directory](../getting-started/data-directory.md#a-note-on-disk-space). |
+| A model is listed but cannot load | Model architecture, loader support, and required companion files; sharing only provides file access. |
+
+Capture package console errors or the application log when sharing setup fails. See [Finding Logs and Reporting Bugs](../troubleshooting/common-issues.md#finding-logs-and-reporting-bugs).
diff --git a/docs/checkpoint-manager/overview.md b/docs/checkpoint-manager/overview.md
new file mode 100644
index 000000000..ac8cdfc48
--- /dev/null
+++ b/docs/checkpoint-manager/overview.md
@@ -0,0 +1,90 @@
+# Checkpoint Manager
+
+The **Checkpoint Manager** organizes your local model library: checkpoints, LoRAs, VAEs, text encoders, upscalers, and other model types. The **Model Browser** finds downloadable models; the Checkpoint Manager manages files already on disk.
+
+[`Home`](../README.md)
+
+## Table of Contents
+
+- [Where Models Live](#where-models-live)
+- [Import Local Models](#import-local-models)
+- [Find and Organize Models](#find-and-organize-models)
+- [Connected Metadata](#connected-metadata)
+- [Rename, Move, and Delete Models](#rename-move-and-delete-models)
+- [A Model Is Missing](#a-model-is-missing)
+- [Related Pages](#related-pages)
+
+---
+
+## Where Models Live
+
+By default, models live under `Models/` in your [data directory](../getting-started/data-directory.md). If you selected a separate models folder in Settings, that folder is the shared library instead. Use the **Models Folder** action to open the active location.
+
+The folder tree groups files by type. Some common destinations are:
+
+| File's role | Shared folder |
+|---|---|
+| Full checkpoint | `Models/StableDiffusion` |
+| Standalone diffusion model | `Models/DiffusionModels` |
+| LoRA | `Models/Lora` |
+| VAE | `Models/VAE` |
+| Text encoder | `Models/TextEncoders` |
+| ControlNet | `Models/ControlNet` |
+| ESRGAN upscaler | `Models/ESRGAN` |
+| Textual inversion embedding | `Models/Embeddings` |
+
+Use the file's documented role to choose its category. A `.safetensors` extension alone does not tell you whether the file is a checkpoint, LoRA, VAE, or another component. Moving a file to another category does not convert it to that model type.
+
+The app's **Folder Reference** action provides additional folder information. [Shared Folders](../advanced/shared-folders.md) explains how packages read these files without keeping separate copies.
+
+## Import Local Models
+
+1. Check **Settings → Checkpoint Manager → Import Behaviour**. The default is **Move**, which relocates the original file. Select **Copy** if you want to keep the original where it is.
+2. Open the Checkpoint Manager and select the destination category or a subfolder within it. Do not select the top-level models root; imports into that root are rejected.
+3. Drag model files from your file manager onto the destination folder in the tree, or into the model area with that category selected.
+4. Wait for **Import Complete**, then check the destination category. Use **Refresh** if needed.
+
+Recognized import extensions are `.safetensors`, `.pt`, `.ckpt`, `.pth`, `.bin`, `.sft`, and `.gguf`. Recognition by the manager does not mean every package or Inference workflow can load that file.
+
+Enable **Import with Metadata** to look for CivitAI information during import. This is optional; a local model can be imported without connected metadata. Downloaded archives and workflow JSON files are not model files for this import flow.
+
+You can also place model files directly into the correct shared category using your file manager, then refresh the Checkpoint Manager. Select the model in the consuming package afterward; importing a file does not automatically select it for generation.
+
+## Find and Organize Models
+
+Select a category, then use **Search**, **Sort**, and **Filter** to narrow the cards shown. **Show Nested Models** includes models in subfolders of the selected category. Under **View**, you can adjust preview size and the visibility of empty root categories and NSFW content.
+
+Right-click a folder to create a **New Folder**. For example, a subfolder under `StableDiffusion` can group checkpoints for a particular workflow. Keep files under their correct type category when organizing them.
+
+Model cards can show a preview, filename, file size, and connected model information such as base model, version, and trigger words. Missing previews or source information do not by themselves mean that the model file is unusable.
+
+## Connected Metadata
+
+**Find Connected Metadata** looks for source information for local files. Use a model card's context menu for one file, or the toolbar scan for the selected category. **Update Existing Metadata** refreshes files that already have connected information.
+
+A scan may report that no match exists, or that the service was unreachable or rate limited. Read the scan result before retrying. Repeated scans are not needed to use a model whose weights are already present.
+
+The model context menu also exposes **Copy Trigger Words**, source navigation where available, **View Safetensor Metadata**, and **Edit Metadata**. Embedded safetensor information and connected source information are different: one comes from the model file, while the other describes a matched source model/version.
+
+## Rename, Move, and Delete Models
+
+Right-click a model for **Rename** or **Delete**. To move a model within the library, drag its card onto a destination folder. The manager moves its associated connected metadata and preview when present.
+
+If **Move All Selected Models** is enabled, dragging a selected model can move the entire selection. Check the selection before dragging. Renaming or moving a model can also require reselecting it in saved projects or package workflows that refer to its old path.
+
+**Delete** removes model files and their associated files after a confirmation dialog. This is a shared-library operation: every package using that model loses access to it. Review the listed paths, especially for a multi-selection or folder deletion.
+
+## A Model Is Missing
+
+1. Open **Models Folder** and confirm the file is in the active library, under the correct type category.
+2. Clear search and filters, select the right category, and enable **Show Nested Models** if the file is in a subfolder.
+3. Click **Refresh**. If the local index remains stale, see **Reset Checkpoints Cache** in [Settings](../settings/settings.md#checkpoint-manager).
+4. If the Checkpoint Manager shows the file but a package does not, check that installation's **Model Sharing** setting and supported model types. Restart the package to reload its paths and model lists.
+5. If the file is selectable but generation fails, check its required companion files and workflow compatibility. A standalone diffusion model may also need separate text encoders and a VAE.
+
+## Related Pages
+
+- [Shared Folders](../advanced/shared-folders.md)
+- [Text to Image](../inference/text-to-image.md)
+- [Settings: Checkpoint Manager](../settings/settings.md#checkpoint-manager)
+- [Common Issues](../troubleshooting/common-issues.md)
diff --git a/docs/getting-started/data-directory.md b/docs/getting-started/data-directory.md
index 7c95750a2..ec2477df1 100644
--- a/docs/getting-started/data-directory.md
+++ b/docs/getting-started/data-directory.md
@@ -72,4 +72,4 @@ Prefer a drive with plenty of free space, and ideally a fast one. FAT32 and exFA
 
 - [First Launch](first-launch.md) — Where the data directory is first chosen
 - [Installing Packages](../package-manager/installing-packages.md) — What gets written into `Packages/`
-- Shared Folders *(planned)* — How the `Models/` library is shared across packages
+- [Shared Folders](../advanced/shared-folders.md) — How the `Models/` library is shared across packages
diff --git a/docs/getting-started/first-launch.md b/docs/getting-started/first-launch.md
index 3c02b9c9d..5c7c2a768 100644
--- a/docs/getting-started/first-launch.md
+++ b/docs/getting-started/first-launch.md
@@ -69,4 +69,5 @@ From there, the usual next steps are:
 
 - [Install your first package](../package-manager/installing-packages.md)
 - Browse or import models with the Model Browser *(planned)*
-- If the user installed ComfyUI and downloaded a starter model during setup, they can [go straight to generating with the built-in Inference UI](../inference/overview.md)
+- [Import models already on your computer](../checkpoint-manager/overview.md#import-local-models)
+- If the user installed ComfyUI and downloaded a starter model during setup, they can [generate their first image with the built-in Inference UI](../inference/text-to-image.md)
diff --git a/docs/inference/overview.md b/docs/inference/overview.md
index dfa35fd44..eaeec3758 100644
--- a/docs/inference/overview.md
+++ b/docs/inference/overview.md
@@ -38,7 +38,7 @@ The Inference UI can reopen a previously saved project tab on startup, provided
 
 ## Generation Modes
 
-- **Text to Image** *(planned page)*: Creates images from prompts without a required source image. This is the default mode and the main entry point for most image-generation workflows.
+- [**Text to Image**](text-to-image.md): Creates images from prompts without a required source image. This is the default mode and the main entry point for most image-generation workflows.
 - **Image to Image** *(planned page)*: Uses an input image together with prompt and sampler settings to guide edits, restyling, or controlled variation.
 - **Image Upscale** *(planned page)*: Starts from an existing image and applies upscale methods exposed by the connected backend, including latent and model-based upscalers when available.
 - **Wan Text to Video** *(planned page)*: Generates video from a text prompt using Wan video models.
@@ -87,7 +87,7 @@ Generated images can also carry Stability Matrix project metadata. When a saved
 
 ## Related Pages
 
-- Text to Image *(planned)*
+- [Text to Image](text-to-image.md)
 - Image to Image *(planned)*
 - Image Upscale *(planned)*
 - Video Generation *(planned)*
diff --git a/docs/inference/text-to-image.md b/docs/inference/text-to-image.md
new file mode 100644
index 000000000..15b373d6a
--- /dev/null
+++ b/docs/inference/text-to-image.md
@@ -0,0 +1,108 @@
+# Text to Image
+
+This guide walks from an installed ComfyUI backend and a local model to a generated image in Stability Matrix's built-in **Inference** page.
+
+[`Section Overview`](overview.md) | [`Home`](../README.md)
+
+## Table of Contents
+
+- [Before You Start](#before-you-start)
+- [Generate Your First Image](#generate-your-first-image)
+- [Seeds and Batches](#seeds-and-batches)
+- [Save and Reopen Your Work](#save-and-reopen-your-work)
+- [When Generation Does Not Work](#when-generation-does-not-work)
+- [Related Pages](#related-pages)
+
+---
+
+## Before You Start
+
+You need:
+
+- A compatible ComfyUI backend installed through Stability Matrix. See [Installing Packages](../package-manager/installing-packages.md).
+- A supported image model and any companion files it requires. Import local files through the [Checkpoint Manager](../checkpoint-manager/overview.md#import-local-models), or use a model downloaded during first-time setup.
+- Enough memory for that model and workflow. Package installation alone does not include every model required for generation.
+
+The steps below use a full image checkpoint, such as a conventional SD 1.5 or SDXL checkpoint, to avoid starting with a workflow that requires separately selecting several model components. A LoRA is an addition to a base model, not a replacement checkpoint. Standalone diffusion models can require separate text encoders and a VAE; follow the Model card's workflow and missing-companion guidance for those models.
+
+## Generate Your First Image
+
+### 1. Connect the backend
+
+Launch your ComfyUI installation from **Packages** and wait for startup to finish. Open **Inference** and check its connection status. If no compatible backend is running, the page's **Launch** action opens a dialog to start one; choose the intended installation if you have several.
+
+An empty workspace creates a **Text to Image** tab automatically. Otherwise, use the tab strip's **+** button to create a Text to Image tab. Starting a new tab avoids carrying settings over from a different project.
+
+### 2. Choose the model
+
+Use the **Model** card's picker to select your full checkpoint. If the picker is empty, confirm the backend connection, local model location, and package sharing before continuing.
+
+The Model card can expose a **Workflow** selector and model-specific settings. Resolve any model placement or missing-companion notice. When a workflow offers recommended defaults, its defaults action applies sampler, scheduler, steps, CFG scale, and any supplied shift value. It does not set image dimensions for you.
+
+For a first full-checkpoint generation, leave optional refiner, extra networks, and other advanced overrides disabled unless your selected model requires them. Leave Hires Fix and upscaling modules disabled while checking the basic generation path.
+
+### 3. Enter a prompt
+
+Start with a simple booru-style positive prompt: a comma-separated list of tags describing the scene.
+
+```text
+scenery, outdoors, cabin, lake, mountains, forest, pine tree, sunrise, reflection, watercolor
+```
+
+Follow your checkpoint's usage instructions for its preferred prompt style and any model-specific quality or trigger tags. If its examples use natural-language descriptions, use that style instead.
+
+For a workflow with a negative prompt, you can initially leave it empty. Add exclusions later when you have a result to compare. This example does not require LoRA, embedding, or wildcard files.
+
+### 4. Check the sampler and batch settings
+
+Set **Batch Size** and **Batch Count** to `1`. Keep **Batch Index** disabled so you receive the full batch.
+
+Choose dimensions and sampling settings appropriate to your model. A new sampler card starts at `1024 × 1024`, `20` steps, CFG scale `5`, Euler Ancestral, and the Normal scheduler in this checkout. These are UI defaults, not a preset suitable for every model. Model-specific workflow defaults or the model's supplied usage instructions can require different values, particularly for distilled or accelerated models.
+
+Keep seed randomization enabled for this first run.
+
+### 5. Generate and inspect the result
+
+Click **Generate**. The app validates prompts and model selections before submitting work. If a required-extension dialog appears, review it and allow installation if you want to run that workflow; the backend may restart before generation continues.
+
+Watch the output pane for progress and results. A first generation can take longer while the backend loads model weights. Use the package's **Console** if progress stops or an error appears. **Cancel** interrupts generation; it does not uninstall or stop the backend package.
+
+By default, completed images are saved through the Inference output pipeline under `Images/Inference` in the data directory and appear in the Inference gallery. Optional output modules can add other saves.
+
+## Seeds and Batches
+
+The seed controls the random starting point. The seed card randomizes on each run by default. Toggle randomization off to lock it; the tooltip changes to **Seed is locked**. Lock the seed when comparing a prompt or setting change, keeping other settings the same.
+
+| Control | Effect |
+|---|---|
+| **Batch Size** | Images in one generation batch. Larger batches can require more memory. |
+| **Batch Count** | Number of batches requested by one Generate action. Text to Image increments the starting seed for each successive batch. |
+| **Batch Index** | Optionally selects an image from the batch; leave it disabled when you want all images. |
+
+A fixed seed helps comparisons within the same setup, but does not guarantee identical images across different models, backend versions, hardware, or extensions.
+
+## Save and Reopen Your Work
+
+Use the Inference page's three-dot menu to **Save** or **Save As** an `.smproj` project. Open it later through the same menu. A project preserves the tab's prompts, model selections, settings, and modules; it does not bundle model weights or install dependencies.
+
+Generated images with embedded Stability Matrix project metadata can also restore state when dropped onto a compatible Inference tab. Use an original output file: an image editor or sharing service may strip its metadata. An ordinary image without that project data cannot restore the complete setup.
+
+For file shortcuts, startup restoration, and layout controls, see [Inference Overview](overview.md#project-files-smproj).
+
+## When Generation Does Not Work
+
+| Symptom | Next step |
+|---|---|
+| No backend connection | Launch the intended ComfyUI installation and check its console. Review its [Host and Port options](../package-manager/launch-arguments.md#example-change-the-comfyui-port) if customized. |
+| Model missing from the picker | Follow [A Model Is Missing](../checkpoint-manager/overview.md#a-model-is-missing), including sharing and backend refresh. |
+| Missing text encoder or VAE | Supply compatible companions for the selected workflow, or select a full checkpoint for this walkthrough. |
+| Prompt validation fails | Remove unresolved network tags or wildcard references and try the plain example prompt. |
+| Missing or outdated custom node | Follow the required-extension prompt and let the backend restart. |
+| Out of memory | Return to batch size `1`, reduce dimensions, and disable extra processing modules; consult [Common Issues](../troubleshooting/common-issues.md#gpu-and-backend-problems). |
+
+## Related Pages
+
+- [Inference Overview](overview.md)
+- [Checkpoint Manager](../checkpoint-manager/overview.md)
+- [ComfyUI Integration](../advanced/comfyui-integration.md)
+- [Terminology](../tips/terminology.md)
diff --git a/docs/package-manager/installing-packages.md b/docs/package-manager/installing-packages.md
index a060a36e6..63c39cc71 100644
--- a/docs/package-manager/installing-packages.md
+++ b/docs/package-manager/installing-packages.md
@@ -45,7 +45,7 @@ A *Duplicate Warning* banner appears if an installation with the same name alrea
 
 The **Advanced Options** section is a collapsible panel containing settings that most users can leave at their defaults:
 
-- **Model Sharing**: Controls how model directories are linked to the shared `Models/` library. Options include **Symlink** (recommended for most users), **Configuration** (uses the package's own config files to point to shared paths), and **None** (isolated model folders).
+- **Model Sharing**: Controls how the package accesses the shared `Models/` library. Available options depend on the package: **Symlink**, **Configuration** (uses the package's own config files to point to shared paths), and **None** (no managed model sharing). Keep the package's recommended method unless you need a different arrangement; ComfyUI recommends Configuration. See [Shared Folders](../advanced/shared-folders.md) for how each method handles existing local files.
 - **PyTorch Index**: Choose the PyTorch compute backend for your GPU. See [Selecting a Hardware Backend](#selecting-a-hardware-backend).
 - **Output Sharing**: Enabled by default. When enabled, generated outputs are saved to the shared `Images/` directory rather than inside the package folder.
 - **Python Version**: Select the Python version for the package's virtual environment from the versions available via Stability Matrix's internal `uv` utility. A green checkmark indicates versions already downloaded and cached locally. It's typically best to leave this at the default configured by Stability Matrix for the package, since that reflects compatibility testing and upstream recommendations. Only change it before installing if a specific version is actually needed.
diff --git a/docs/package-manager/launch-arguments.md b/docs/package-manager/launch-arguments.md
new file mode 100644
index 000000000..efe9bd18e
--- /dev/null
+++ b/docs/package-manager/launch-arguments.md
@@ -0,0 +1,74 @@
+# Launch Arguments
+
+Launch arguments configure how a package starts. Stability Matrix stores them per installation, so two copies of the same package can use different ports or startup options.
+
+[`Section Overview`](overview.md) | [`Home`](../README.md)
+
+## Table of Contents
+
+- [Edit Launch Options](#edit-launch-options)
+- [Example: Change the ComfyUI Port](#example-change-the-comfyui-port)
+- [Extra Launch Arguments](#extra-launch-arguments)
+- [Arguments, Dependencies, and Environment Variables](#arguments-dependencies-and-environment-variables)
+- [Troubleshooting](#troubleshooting)
+
+---
+
+## Edit Launch Options
+
+1. Open **Packages** and find the installation to configure.
+2. Choose **three-dot menu → Launch Options**.
+3. Search for an option by its displayed title, or browse the available cards.
+4. Change the relevant checkbox, choice, or value, then click **Save**.
+5. Launch the package, or **Restart** it if it is already running.
+
+Saving changes does not restart the running process. **Cancel** closes the dialog without saving the edited options.
+
+The cards come from that package's definitions. A checkbox adds or removes a flag; a value field supplies a value for the displayed option. For example, enter just a port number in a **Port** field, not the entire `--port` argument.
+
+Defaults can depend on the package, operating system, and detected hardware. An empty value field can leave an option at the package's own default. Avoid assuming that one package's options or defaults apply to another.
+
+## Example: Change the ComfyUI Port
+
+This is useful when another local service already occupies ComfyUI's default port.
+
+1. Open **Launch Options** for the ComfyUI installation you intend to use.
+2. Set **Port** to an unused port, for example `8189`.
+3. Leave **Host** at `127.0.0.1` for use on this computer.
+4. Click **Save**, then restart ComfyUI.
+5. Check the console for successful startup and use **Web UI** to open its reported address.
+
+Stability Matrix's ComfyUI definition uses `127.0.0.1` and `8188` as the default host and port. The built-in Inference client reads the managed package's host and port options, so configure them on the same installation that Inference uses. See [ComfyUI Integration](../advanced/comfyui-integration.md#comfyui-as-a-standalone-package).
+
+## Extra Launch Arguments
+
+Packages that support custom arguments include an **Extra Launch Arguments** field. Use it for flags that are not represented by the existing cards and that your installed package version supports.
+
+Enter only the arguments. Do not include `python`, a script name, or a shell command. This field is passed through as argument text; unlike dedicated value fields, it does not add quotes around individual values for you. Quote a path containing spaces when the package's argument syntax requires it.
+
+Avoid defining the same option both in a dedicated card and in **Extra Launch Arguments**. Duplicate or conflicting flags can cause startup errors or make the effective setting unclear. Use ComfyUI's **Host** and **Port** cards for connection settings so the Inference client can read them.
+
+## Arguments, Dependencies, and Environment Variables
+
+These settings solve different problems:
+
+| Setting | Use it for |
+|---|---|
+| **Launch Options** | Flags read by the package when it starts, such as a port or a supported memory mode. |
+| **Python Packages / PyTorch Index** | Installing the Python libraries and compute backend the package uses. |
+| **Python Dependencies Override** | Pinning or excluding dependencies during installation and updates. |
+| **Environment Variables** | Values read by Python, libraries, or child processes, such as cache and proxy settings. |
+
+A launch flag does not install the GPU backend it needs. If a backend is missing or incorrect, consult [Hardware Support](../advanced/hardware-support.md) and [Installing Packages](installing-packages.md#selecting-a-hardware-backend). Environment configuration is covered separately in [Environment Variables](../advanced/environment-variables.md).
+
+## Troubleshooting
+
+| Symptom | What to check |
+|---|---|
+| The change has no effect | Confirm you saved, restarted, and edited the installation you actually launched. |
+| `unrecognized arguments` at startup | Remove the last custom argument and check whether that installed package version supports it. |
+| An address or port is already in use | Stop the other instance or select a different unused port. |
+| Inference cannot connect after a port change | Check successful ComfyUI startup, the selected installation, and its **Host** and **Port** cards. |
+| Startup fails after several changes | Undo the recent edits, including custom arguments, then reintroduce one change at a time. |
+
+Keep the console error if the problem persists; [Common Issues](../troubleshooting/common-issues.md#finding-logs-and-reporting-bugs) explains what to include in a report.
diff --git a/docs/package-manager/managing-packages.md b/docs/package-manager/managing-packages.md
new file mode 100644
index 000000000..ee9ff9fd8
--- /dev/null
+++ b/docs/package-manager/managing-packages.md
@@ -0,0 +1,92 @@
+# Managing Packages
+
+Use the **Packages** screen to launch installed tools, read their console output, change versions, and remove installations you no longer need. Each package card represents a separate installation with its own settings and Python environment.
+
+[`Section Overview`](overview.md) | [`Home`](../README.md)
+
+## Table of Contents
+
+- [Launch, Console, and Web UI](#launch-console-and-web-ui)
+- [Stop and Restart](#stop-and-restart)
+- [Update a Package](#update-a-package)
+- [Change Versions](#change-versions)
+- [Per-Package Settings](#per-package-settings)
+- [Uninstall a Package](#uninstall-a-package)
+- [Related Pages](#related-pages)
+
+---
+
+## Launch, Console, and Web UI
+
+1. Open **Packages** and find the installation you want to use.
+2. Click **Launch**. Packages with additional launch modes expose a menu beside the launch action.
+3. Open **Console** to follow startup. A running process can still be loading dependencies or models; wait for the package to report that it is ready.
+4. For packages that expose a browser interface, click **Web UI** once it becomes available. This opens the address reported by the package.
+
+Launching ComfyUI also makes it available to Stability Matrix's built-in **Inference** page. You can use that page or ComfyUI's own Web UI. See [Text to Image](../inference/text-to-image.md) for a first generation.
+
+If startup fails, keep the relevant console output, including the first error and any traceback. The package console is separate from Stability Matrix's application log; [Common Issues](../troubleshooting/common-issues.md#finding-logs-and-reporting-bugs) explains where to find both.
+
+## Stop and Restart
+
+Use **Stop** on the running package's card to shut down its process. Closing a browser tab does not stop the package. Stop after the current generation or training job finishes unless you intend to interrupt it.
+
+**Restart** stops and relaunches the package. Use it after saving launch options or changing settings that the package reads only at startup. Restarting a ComfyUI backend interrupts its connection to Inference until startup completes again.
+
+## Update a Package
+
+Updating Stability Matrix and updating an installed package are separate operations. An app update does not by itself select a new version of every installed tool.
+
+1. Stop the package and record its current version if you may need to return to it.
+2. Open the card's three-dot menu and choose **Check for Updates**.
+3. When an update is available, click **Update** on the card and follow its progress.
+4. Wait for completion, then launch the package and check the console.
+
+Release installations use the package's release update path, including its prerelease setting. Branch installations update to the latest commit on their installed branch. Updates can also install Python dependencies, and the app may prompt for a Python upgrade when required by the package.
+
+The menu's **Disable Update Check** option hides routine update checking for that installation. It does not create a backup or prevent you from deliberately changing versions.
+
+## Change Versions
+
+Use **three-dot menu → Change Version** to select another available release, branch, or commit, then confirm with **Update**. This is also the route for returning to a known version after an upstream change breaks a workflow.
+
+A version change is not a full environment snapshot: dependencies and extensions can have changed too. If you need to preserve a working setup while trying another version, [install a second copy with a different display name](installing-packages.md#package-detail-view). Both installations can use the same shared model library.
+
+## Per-Package Settings
+
+The three-dot menu exposes the options supported by that package. Some actions are hidden for packages that do not support them.
+
+| Action | What it controls |
+|---|---|
+| **Launch Options** | Startup flags for this installation; see [Launch Arguments](launch-arguments.md). |
+| **Python Packages** | The installation's Python dependencies and available PyTorch indexes. |
+| **Python Dependencies Override** | Dependency constraints used during installs and updates. |
+| **Extensions** | The package's supported extension manager. |
+| **Model Sharing** | Whether shared models are exposed through **Symlink**, **Config**, or **None**. |
+| **Use Shared Output Folder** | Output sharing, where supported; independent of model sharing. |
+| **Open in Explorer / Open in Finder** | Opens the package's installation folder. |
+
+See [Shared Folders](../advanced/shared-folders.md) before changing storage options on an installation that already contains models or outputs.
+
+## Uninstall a Package
+
+Uninstalling removes the package's installation folder, including its Python environment, extensions or custom nodes, and custom files inside that folder.
+
+Before proceeding, stop the package and check where its models and outputs actually live:
+
+- Models in the shared model library outside the package folder remain available to other packages.
+- **Config** sharing lets the package read shared models, but also permits real model files inside the package's own folders. Those local files are removed with the installation.
+- With **None** selected, models in the package's folders are also removed.
+- Outputs inside the installation are removed. Outputs already stored in the shared images directory outside it remain there.
+- Save any package-local workflows, training data, configuration, or other custom files you want to keep elsewhere first.
+
+Choose **three-dot menu → Uninstall**, review the deletion warning, and enter the displayed package name to confirm. The dialog's size estimate excludes symbolic-link targets; it is not the total size of your shared library.
+
+Deleting a model from the Checkpoint Manager is a different operation: that removes the shared model itself. See [Checkpoint Manager](../checkpoint-manager/overview.md#rename-move-and-delete-models).
+
+## Related Pages
+
+- [Installing Packages](installing-packages.md)
+- [Launch Arguments](launch-arguments.md)
+- [Shared Folders](../advanced/shared-folders.md)
+- [Common Issues](../troubleshooting/common-issues.md)
diff --git a/docs/package-manager/overview.md b/docs/package-manager/overview.md
index a4aeb742a..392aaf221 100644
--- a/docs/package-manager/overview.md
+++ b/docs/package-manager/overview.md
@@ -12,8 +12,8 @@ From the **Packages** screen you can install new packages through a guided flow,
 
 - [Supported Packages](supported-packages.md) — Full list of supported inference and training packages
 - [Installing Packages](installing-packages.md) — One-click install, hardware selection, and GPU backends
-- Managing Packages *(planned)* — Launching, monitoring, updating, and deleting installed packages
-- Launch Arguments *(planned)* — Configuring launch arguments per package
+- [Managing Packages](managing-packages.md) — Launching, monitoring, updating, and deleting installed packages
+- [Launch Arguments](launch-arguments.md) — Configuring launch arguments per package
 - Extensions *(planned)* — Browsing and managing package plugins and extensions
 
 ## What's Next
diff --git a/docs/release-notes/2.16.4.md b/docs/release-notes/2.16.4.md
new file mode 100644
index 000000000..d28cc22f2
--- /dev/null
+++ b/docs/release-notes/2.16.4.md
@@ -0,0 +1,68 @@
+# v2.16.4 Technical Notes
+
+Extended technical notes for the v2.16.4 release — the deeper "how and why" behind each change. For the user-facing summary, see the [CHANGELOG](https://github.com/LykosAI/StabilityMatrix/blob/main/CHANGELOG.md).
+
+[`Home`](../README.md)
+
+## Table of Contents
+
+- [Guarding User Data During Install and Uninstall](#guarding-user-data-during-install-and-uninstall)
+- [Workflow Library Link Loops](#workflow-library-link-loops)
+- [ComfyUI Cross Attention Launch Options](#comfyui-cross-attention-launch-options)
+- [Windows ROCm Package Repositories](#windows-rocm-package-repositories)
+- [AI-Toolkit on Pre-2.16.3 Installs](#ai-toolkit-on-pre-2163-installs)
+- [Wan2GP Deepy and the Gradio Logging Wrapper](#wan2gp-deepy-and-the-gradio-logging-wrapper)
+
+## Guarding User Data During Install and Uninstall
+
+The headline of this patch release is a data-loss fix ([#1733](https://github.com/LykosAI/StabilityMatrix/issues/1733)). A user moved a 1.2 TB standalone ComfyUI install into `Data\Packages\ComfyUI` intending to import it, and the folder was recursively deleted. The reporter's code-path analysis was substantially correct, and their logs gave a clean timeline: toggling shared model folders tried to delete a real `models\checkpoints` directory (throwing an unobserved exception), the uninstall flow then wiped the tree behind a confirmation dialog that omitted models from its warning list, and the first-run one-click installer finished off the remainder with no confirmation at all.
+
+The root of the problem is that `Data\Packages\{Name}` is overloaded: it is both the "place your folder here to import" path and the path the install flows recursively delete before installing. Four changes close the paths:
+
+- **Install flows confirm before deleting.** Both the first-run one-click installer and the Package Manager install now check whether the install location exists and is non-empty. If it is, a confirmation dialog shows the path plus a live-computed total size and file count (junction contents excluded), defaults to cancel, and points at the Import option instead. In the first-run flow the picker closes before the confirmation appears, so there is exactly one dialog on screen.
+- **Link teardown never deletes real directories.** Turning off shared model folders previously called a plain directory delete on each link location with no reparse-point check. Non-empty real directories threw unobserved exceptions, and *empty* real directories were silently deleted. Teardown now removes only actual links and skips real directories with a warning. This covers symlink-mode model folders, output-folder links, and the remove-links-on-shutdown path.
+- **The uninstall dialog tells the truth about models.** It only listed models/checkpoints as deleted when the sharing method was *None*. Configuration mode (ComfyUI's default) leaves models as real files inside the package folder, so the dialog implied they were safe right before deleting them. It now warns for every non-symlink sharing mode and shows the package folder's total size, so a 1.37 TB uninstall no longer reads like a 5 GB one.
+- **Toggle failures surface.** The shared-model toggle handlers dropped the link-removal task on the floor, which is where the unobserved-exception crash dialog came from. They now share one helper that logs and raises an error notification on failure.
+
+New tests pin the teardown invariant: junctions are removed, target files are kept, and real directories, empty or not, are never deleted. All five scenarios were also verified live on Windows before merge.
+
+Not in this release, and candidates for follow-up: routing large deletes through the recycle bin, and un-overloading `Data\Packages\{Name}` as both import staging and install target.
+
+## Workflow Library Link Loops
+
+A supporter replaced `Data\Workflows` with a link to `Packages\ComfyUI\user\default\workflows`, after which the **Workflows** page loaded forever and eventually froze the app. The cause is the workflow link added in v2.16.3: at ComfyUI launch, Stability Matrix creates a `Stability Matrix` link inside ComfyUI's workflows folder pointing back at `Data\Workflows`. With the library itself linked to that folder, the library now contained a link to itself. .NET's recursive file enumeration follows junctions, and a probe reproduced the failure exactly: roughly 1,900 levels of `Stability Matrix\Stability Matrix\...` until a path-too-long exception escaped the enumerator outside the per-file error handling.
+
+The fix has two layers so neither has to be perfect on its own:
+
+- **Don't create the loop.** Link creation now refuses a link whose parent physically is, or lies within, the target, and removes an existing looping link at that spot. This covers the reported layout (library linked to ComfyUI's folder), the reverse (ComfyUI's folder linked to the library), and model folder links.
+- **Survive a loop anyway.** A new link-safe file system helper resolves links along the whole path, detects would-be cycles, and enumerates files following links at most once per physical directory with a depth cap and per-directory error isolation. Both workflow scans and both model index scans use it, since `Data\Models` has the same hazard.
+
+Affected users self-heal: the Workflows page works immediately even with the looping link still present, and the stale link is deleted at the next ComfyUI launch. Linked subfolders inside the library and model trees are still followed (once), and yielded paths stay rooted at the scanned path so relative folders keep working. Fourteen new cycle tests cover the reported layout, the reverse setup, depth capping, and the non-cycle case of a library sitting below the link's parent.
+
+## ComfyUI Cross Attention Launch Options
+
+Contributed by [@e-nord](https://github.com/e-nord).
+
+**Comfy Kitchen Attention.** `--use-ck-attention` joins the **Cross Attention Method** launch options for ComfyUI and ComfyUI-Zluda.
+
+**Mutual exclusivity.** The Cross Attention Method flags are mutually exclusive in ComfyUI's argument parser, but the launch options dialog rendered every boolean option as an independent checkbox. Selecting two (for example `--use-ck-attention` alongside `--use-sage-attention`) made ComfyUI refuse to start. The launch option definition already had an unused maximum-selected-options field; setting it to 1 now renders that group as radio buttons instead of checkboxes.
+
+## Windows ROCm Package Repositories
+
+Contributed by [@NeuralFault](https://github.com/NeuralFault).
+
+Users on Windows ROCm reported `CUDA error: invalid argument` and `hipErrorInvalidValue` failures in workflows after the ROCm 7.14 to 7.14.1 patch bump, which coincided with the release of ROCm 10. The same breakage was observed outside Stability Matrix. Windows ROCm PyTorch installs now come from AMD's new permanent repositories: the stable index moves from the multi-arch 7.14.1 repository to `stable.repo.amd.com/rocm/whl-next` (ROCm 10.0), and the nightly index moves to `nightly.repo.amd.com/rocm/whl-next`.
+
+Packages already installed against 7.14.1 are not migrated automatically. They need either a fresh install of the package, or a package update whose upgrade path also reinstalls PyTorch (ComfyUI does this when configured to). Further ROCm handling changes are in progress; this one was fast-tracked to unblock affected users.
+
+## AI-Toolkit on Pre-2.16.3 Installs
+
+Contributed by [@NeuralFault](https://github.com/NeuralFault).
+
+v2.16.3 moved AI-Toolkit to Python 3.12 and set `SETUPTOOLS_USE_DISTUTILS=local` so setuptools uses its bundled distutils. Installs from before v2.16.3 still run Python 3.11, where the standard-library distutils is present and the *local* setting re-arms setuptools' distutils shim, crashing jobs with a `distutils` error ([#1725](https://github.com/LykosAI/StabilityMatrix/issues/1725)). The environment setup now reads the venv's real Python version and uses *stdlib* below 3.12 and *local* on 3.12 and up, so older installs keep working without a reinstall.
+
+## Wan2GP Deepy and the Gradio Logging Wrapper
+
+Wan2GP v13's **Deepy** panel repeatedly showed **Connection to server lost** and logged `issubclass() arg 1 must be a class` ([Wan2GP #2298](https://github.com/deepbeepmeep/Wan2GP/issues/2298)). Deepy registers `gradio.Error` as a FastAPI exception handler. Stability Matrix's console logging wrapper, which mirrors Gradio error messages to stderr so they appear in the package console, had replaced that class with a plain function, so the mounted app failed to build its middleware stack. Diagnosis was confirmed from [NeuralFault's comment](https://github.com/deepbeepmeep/Wan2GP/issues/2298#issuecomment-5657302034) on the upstream issue.
+
+The wrapper now wraps the original class's constructor instead of replacing the class, preserving identity across `gradio.Error`, `gradio.exceptions.Error`, and any previously imported aliases. Error messages still reach stderr, and constructor defaults, exception catching, subclassing, and signature introspection all keep working. The exact Starlette failure was reproduced against Gradio 5.29.0 (Wan2GP's pinned version), and a standalone regression suite passes on Python 3.10 and 3.11, including a mounted FastAPI app returning 400 through the registered Gradio handler. Because the wrapper is rewritten on every launch, existing installs pick up the fix after updating Stability Matrix and relaunching Wan2GP, with no reinstall.