@build-astron-co/nimbus 0.4.1 → 0.4.3

package/src/cli.ts

@@ -1,1728 +0,0 @@
-/**
- * CLI Command Router
- *
- * Dispatches CLI commands to their implementations in src/commands/.
- */
-
-import { analytics } from './utils';
-import { VERSION } from './version';
-import {
-  generateTerraformCommand,
-  type GenerateTerraformOptions,
-  awsDiscoverCommand,
-  type AwsDiscoverOptions,
-  awsTerraformCommand,
-  type AwsTerraformOptions,
-  loginCommand,
-  type LoginOptions,
-  logoutCommand,
-  type LogoutOptions,
-  authStatusCommand,
-  type AuthStatusOptions,
-  authListCommand,
-  type AuthListOptions,
-  chatCommand,
-  type ChatOptions,
-  configCommand,
-  type ConfigSetOptions,
-  type ConfigGetOptions,
-  type ConfigListOptions,
-  type ConfigInitOptions,
-  initCommand,
-  type InitOptions,
-  // Infrastructure tool commands
-  tfCommand,
-  k8sCommand,
-  helmCommand,
-  gitCommand,
-  // FS commands
-  fsCommand,
-  // History command
-  historyCommand,
-  historyShowCommand,
-  type HistoryOptions,
-  // GitHub CLI commands
-  ghCommand,
-  // Enterprise commands
-  teamCommand,
-  billingCommand,
-  usageCommand,
-  parseUsageOptions,
-  auditCommand,
-  analyzeCommand,
-  parseAnalyzeOptions,
-  // Cloud provider commands
-  awsCommand,
-  azureCommand,
-  gcpCommand,
-  // Cost and drift commands
-  costCommand,
-  driftCommand,
-  // Demo, feedback, preview, import, questionnaire commands
-  demoCommand,
-  parseDemoOptions,
-  feedbackCommand,
-  parseFeedbackOptions,
-  previewCommand,
-  type PreviewOptions,
-  importCommand,
-  parseImportOptions,
-  questionnaireCommand,
-  type QuestionnaireOptions,
-  // Cloud auth command
-  authCloudCommand,
-  type AuthCloudOptions,
-  // Generate commands
-  generateK8sCommand,
-  type GenerateK8sOptions,
-  generateHelmCommand,
-  type GenerateHelmOptions,
-  // Utility commands
-  versionCommand,
-  type VersionOptions,
-  helpCommand,
-  type HelpOptions,
-  doctorCommand,
-  type DoctorOptions,
-  // Apply commands
-  applyCommand,
-  // AI-powered commands
-  askCommand,
-  type AskOptions,
-  explainCommand,
-  type ExplainOptions,
-  fixCommand,
-  type FixOptions,
-  // Plan command
-  planCommand,
-  parsePlanOptions,
-  // Resume command
-  resumeCommand,
-  // Template commands
-  templateCommand,
-  // Auth profile commands
-  authProfileCommand,
-} from './commands';
-import { upgradeCommand, type UpgradeOptions } from './commands/upgrade';
-import { statusCommand, type StatusOptions } from './commands/status';
-import { rollbackCommand, type RollbackOptions } from './commands/rollback';
-import { rolloutCommand, type RolloutOptions } from './commands/rollout';
-import { requiresAuth, type LLMProviderName } from './auth';
-
-/** Top-level command aliases for convenience shortcuts. */
-const COMMAND_ALIASES: Record<string, string[]> = {
-  pr: ['gh', 'pr'],
-  issue: ['gh', 'issue'],
-  read: ['fs', 'read'],
-  tree: ['fs', 'tree'],
-  search: ['fs', 'search'],
-  write: ['fs', 'write'],
-  // Short command aliases
-  terraform: ['tf'],
-  k: ['k8s'],
-  g: ['generate'],
-  h: ['helm'],
-};
-
-async function showSubcommandHelp(command: string, _args: string[]): Promise<void> {
-  const { helpCommand } = await import('./commands/help');
-  // Print command-specific help based on command name
-  const COMMAND_HELP: Record<string, string> = {
-    chat: 'Usage: nimbus chat [--model <model>] [--mode plan|build|deploy] [--continue]\n  Start interactive AI chat session.',
-    run: 'Usage: nimbus run "<prompt>" [--auto-approve] [--format json|text] [--model <model>]\n  Run a non-interactive agent task.',
-    init: 'Usage: nimbus init [--cwd <dir>] [--quiet]\n  Generate NIMBUS.md with detected project context.',
-    login: 'Usage: nimbus login [--provider <name>]\n  Configure LLM provider credentials.',
-    logout: 'Usage: nimbus logout [--provider <name>]\n  Remove stored credentials.',
-    doctor: 'Usage: nimbus doctor [--fix] [--verbose] [--json] [--metrics]\n  Run diagnostic checks on Nimbus installation.',
-    cost: 'Usage: nimbus cost [--days <n>] [--json]\n  Show LLM usage costs.',
-    sessions: 'Usage: nimbus sessions [list|resume|delete] [<id>]\n  Manage chat sessions.',
-    audit: 'Usage: nimbus audit [--format json|text]\n  Run security and compliance audit.',
-    share: 'Usage: nimbus share [--session <id>] [--ttl <hours>]\n  Share a session.',
-    upgrade: 'Usage: nimbus upgrade\n  Upgrade Nimbus to the latest version.',
-    serve: 'Usage: nimbus serve [--port <port>] [--auth <user:pass>]\n  Start HTTP API server with SSE streaming.',
-    web: 'Usage: nimbus web [--port <port>]\n  Open Web UI in browser.',
-    'auth-refresh': 'Usage: nimbus auth-refresh [--provider aws|gcp|azure]\n  Refresh cloud provider credentials.',
-    completions: 'Usage: nimbus completions <install|uninstall>\n  Manage shell tab completions.',
-    alias: 'Usage: nimbus alias <list|create|remove> [<name>] [<expansion>]\n  Manage command aliases.',
-    logs: 'Usage: nimbus logs [--tail <n>] [--follow] [--namespace <ns>]\n  Stream Kubernetes/cloud logs.',
-    pipeline: 'Usage: nimbus pipeline [list|trigger|status] [<args>]\n  Manage CI/CD pipelines.',
-    drift: 'Usage: nimbus drift [--notify slack|email]\n  Detect infrastructure drift.',
-    deploy: 'Usage: nimbus deploy [--auto-approve] [--workspace <ws>] [--namespace <ns>] [--dry-run] [--no-apply]\n  Orchestrate full terraform plan + apply + kubectl rollout workflow.',
-    rollback: 'Usage: nimbus rollback [<resource>] [--dry-run]\n  Safely roll back infrastructure.',
-    profile: 'Usage: nimbus profile <name>\n  Set AWS_PROFILE for current session.',
-    schedule: 'Usage: nimbus schedule [list|add|remove] [<args>]\n  Manage scheduled agent tasks.',
-    incident: 'Usage: nimbus incident [create|list|update] [<args>]\n  Manage incidents.',
-    status: 'Usage: nimbus status [--json]\n  Show Nimbus and infra status.',
-    export: 'Usage: nimbus export [--session <id>] [--output <file>]\n  Export session as Markdown runbook.',
-    plugin: 'Usage: nimbus plugin <install|uninstall|list> [<name>]\n  Manage MCP plugins.',
-    runbook: 'Usage: nimbus runbook <file> [--dry-run]\n  Execute a runbook YAML file.',
-  };
-  const help = COMMAND_HELP[command];
-  if (help) {
-    process.stdout.write(help + '\n');
-  } else {
-    await helpCommand({});
-  }
-}
-
-/**
- * Run a CLI command directly.
- *
- * This is the main entry point for `nimbus <command> <subcommand>`.
- * It resolves aliases, checks authentication, and dispatches to
- * the appropriate command handler.
- */
-export async function runCommand(args: string[]): Promise<void> {
-  // Resolve top-level command aliases
-  if (COMMAND_ALIASES[args[0]]) {
-    args = [...COMMAND_ALIASES[args[0]], ...args.slice(1)];
-  }
-
-  // --profile <name> global flag: load and apply a named config profile before
-  // dispatching to the subcommand. Non-critical — errors are silently swallowed.
-  const profileIdx = args.indexOf('--profile');
-  if (profileIdx !== -1 && args[profileIdx + 1]) {
-    const profileName = args[profileIdx + 1];
-    try {
-      const { loadProfile, applyProfile } = await import('./config/profiles');
-      const profile = loadProfile(profileName);
-      if (profile) {
-        applyProfile(profile);
-      } else {
-        process.stderr.write(`Profile not found: ${profileName}\n`);
-      }
-    } catch { /* non-critical */ }
-    args = [...args.slice(0, profileIdx), ...args.slice(profileIdx + 2)];
-  }
-
-  const command = args[0];
-  const subcommand = args[1];
-
-  // GAP-15: --help/-h flag on any subcommand
-  if (args.includes('--help') || args.includes('-h')) {
-    await showSubcommandHelp(command, args);
-    return;
-  }
-
-  // Fire-and-forget analytics tracking for every CLI command invocation.
-  // This is a no-op when POSTHOG_API_KEY is not set.
-  const commandName =
-    subcommand && !subcommand.startsWith('-') ? `${command} ${subcommand}` : command;
-  analytics.trackEvent('command_executed', { command: commandName }).catch(() => {});
-
-  // ==========================================
-  // Auth commands (always available, no guard)
-  // ==========================================
-
-  // nimbus login
-  if (command === 'login') {
-    // G8: --cloud <provider> flag for cloud provider login
-    const cloudIdx = args.findIndex(a => a === '--cloud');
-    if (cloudIdx !== -1 && args[cloudIdx + 1]) {
-      const cloudProvider = args[cloudIdx + 1] as 'aws' | 'gcp' | 'azure';
-      if (['aws', 'gcp', 'azure'].includes(cloudProvider)) {
-        const { loginCloudCommand } = await import('./commands/login');
-        await loginCloudCommand(cloudProvider);
-        return;
-      }
-    }
-
-    const options: LoginOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--skip-github') {
-        options.skipGitHub = true;
-      } else if (arg === '--provider' && args[i + 1]) {
-        options.provider = args[++i] as LLMProviderName;
-      } else if (arg === '--api-key' && args[i + 1]) {
-        options.apiKey = args[++i];
-      } else if (arg === '--model' && args[i + 1]) {
-        options.model = args[++i];
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--sso') {
-        options.sso = true;
-      }
-    }
-
-    await loginCommand(options);
-    return;
-  }
-
-  // nimbus logout
-  if (command === 'logout') {
-    const options: LogoutOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--force' || arg === '-f') {
-        options.force = true;
-      }
-    }
-
-    await logoutCommand(options);
-    return;
-  }
-
-  // nimbus auth status
-  if (command === 'auth' && subcommand === 'status') {
-    const options: AuthStatusOptions = {};
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--json') {
-        options.json = true;
-      }
-    }
-
-    await authStatusCommand(options);
-    return;
-  }
-
-  // nimbus auth list
-  if (command === 'auth' && subcommand === 'list') {
-    const options: AuthListOptions = {};
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--json') {
-        options.json = true;
-      }
-    }
-
-    await authListCommand(options);
-    return;
-  }
-
-  // nimbus auth cloud|aws|gcp|azure
-  if (
-    command === 'auth' &&
-    (subcommand === 'cloud' ||
-      subcommand === 'aws' ||
-      subcommand === 'gcp' ||
-      subcommand === 'azure')
-  ) {
-    const provider = subcommand === 'cloud' ? args[2] || 'aws' : subcommand;
-    const options: AuthCloudOptions = {};
-
-    const startIdx = subcommand === 'cloud' ? 3 : 2;
-    for (let i = startIdx; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--profile' && args[i + 1]) {
-        options.profile = args[++i];
-      } else if (arg === '--project' && args[i + 1]) {
-        options.project = args[++i];
-      } else if (arg === '--subscription' && args[i + 1]) {
-        options.subscription = args[++i];
-      } else if (arg === '--region' && args[i + 1]) {
-        options.region = args[++i];
-      }
-    }
-
-    await authCloudCommand(provider, options);
-    return;
-  }
-
-  // nimbus onboarding (first-run setup wizard)
-  if (command === 'onboarding') {
-    const { onboardingCommand } = await import('./commands/onboarding');
-    await onboardingCommand({});
-    return;
-  }
-
-  // nimbus version
-  if (command === 'version' || command === '-v' || command === '--version') {
-    const options: VersionOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--verbose' || arg === '-v') {
-        options.verbose = true;
-      } else if (arg === '--json') {
-        options.json = true;
-      }
-    }
-
-    await versionCommand(options);
-    return;
-  }
-
-  // nimbus help
-  if (command === 'help' || command === '-h' || command === '--help') {
-    const options: HelpOptions = {};
-
-    // Check for command-specific help
-    if (subcommand && !subcommand.startsWith('-')) {
-      options.command = subcommand;
-    }
-
-    await helpCommand(options);
-    return;
-  }
-
-  // nimbus doctor
-  if (command === 'doctor') {
-    const options: DoctorOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--fix') {
-        options.fix = true;
-      } else if (arg === '--verbose' || arg === '-v') {
-        options.verbose = true;
-      } else if (arg === '--json') {
-        options.json = true;
-      }
-    }
-
-    await doctorCommand(options);
-    return;
-  }
-
-  // nimbus upgrade
-  if (command === 'upgrade' || command === 'update') {
-    const options: UpgradeOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--force' || arg === '-f') {
-        options.force = true;
-      } else if (arg === '--check' || arg === '-c') {
-        options.check = true;
-      } else if (arg === '--dry-run') {
-        options.dryRun = true;
-      } else if (arg === '--changelog') {
-        options.changelog = true;
-      }
-    }
-
-    await upgradeCommand(options);
-    return;
-  }
-
-  // nimbus init
-  if (command === 'init') {
-    const options: InitOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--force' || arg === '-f') {
-        options.force = true;
-      } else if ((arg === '--name' || arg === '-n') && args[i + 1]) {
-        options.name = args[++i];
-      } else if (arg === '--provider' && args[i + 1]) {
-        options.provider = args[++i];
-      } else if ((arg === '--output' || arg === '-o') && args[i + 1]) {
-        options.output = args[++i];
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--merge') {
-        options.merge = true;
-      }
-    }
-
-    await initCommand(options);
-    return;
-  }
-
-  // nimbus serve — headless API server (no auth guard)
-  if (command === 'serve') {
-    const { serveCommand } = await import('./cli/serve');
-    const serveOptions: { port?: number; host?: string; auth?: string; background?: boolean; stop?: boolean } = {};
-
-    // M1: nimbus serve stop
-    if (subcommand === 'stop') {
-      serveOptions.stop = true;
-      await serveCommand(serveOptions);
-      return;
-    }
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if ((arg === '--port' || arg === '-p') && args[i + 1]) {
-        serveOptions.port = parseInt(args[++i], 10);
-      } else if (arg === '--host' && args[i + 1]) {
-        serveOptions.host = args[++i];
-      } else if (arg === '--auth' && args[i + 1]) {
-        serveOptions.auth = args[++i];
-      } else if (arg === '--background' || arg === '-b') {
-        serveOptions.background = true;
-      }
-    }
-
-    await serveCommand(serveOptions);
-    return;
-  }
-
-  // nimbus web
-  if (command === 'web') {
-    const { webCommand } = await import('./cli/web');
-    await webCommand({
-      port: args.includes('--port') ? parseInt(args[args.indexOf('--port') + 1], 10) : undefined,
-      host: args.includes('--host') ? args[args.indexOf('--host') + 1] : undefined,
-      auth: args.includes('--auth') ? args[args.indexOf('--auth') + 1] : undefined,
-      uiUrl: args.includes('--ui-url') ? args[args.indexOf('--ui-url') + 1] : undefined,
-      noOpen: args.includes('--no-open'),
-    });
-    return;
-  }
-
-  // nimbus logs <pod> — H1 shorthand
-  if (command === 'logs') {
-    const { logsCommand, parseLogsArgs } = await import('./commands/logs');
-    const { pod, options: logsOpts } = parseLogsArgs(args.slice(1));
-    await logsCommand(pod, logsOpts);
-    return;
-  }
-
-  // nimbus pipeline [subcommand] — H2
-  if (command === 'pipeline') {
-    const { pipelineCommand } = await import('./commands/pipeline');
-    await pipelineCommand(subcommand || 'status', args.slice(2));
-    return;
-  }
-
-  // nimbus alias — L2
-  if (command === 'alias') {
-    const { aliasCommand } = await import('./commands/alias');
-    await aliasCommand(subcommand || 'list', args.slice(2));
-    return;
-  }
-
-  // nimbus incident <url-or-id> [--notes "..."] — G14
-  if (command === 'incident') {
-    const { incidentCommand } = await import('./commands/incident');
-    const incidentInput = args[1] ?? '';
-    const notesIdx = args.indexOf('--notes');
-    const notes = notesIdx !== -1 ? args[notesIdx + 1] : undefined;
-    await incidentCommand(incidentInput, { notes });
-    return;
-  }
-
-  // nimbus runbook <list|run|create> — G15
-  if (command === 'runbook') {
-    const { runbookCommand } = await import('./commands/runbook');
-    await runbookCommand(subcommand || 'list', args.slice(2));
-    return;
-  }
-
-  // nimbus schedule <list|add|remove|run-now> — G13
-  if (command === 'schedule') {
-    const { scheduleCommand } = await import('./commands/schedule');
-    await scheduleCommand(subcommand || 'list', args.slice(2));
-    return;
-  }
-
-  // nimbus export [session-id] [--format md|html|json] [--output file] — G19
-  if (command === 'export') {
-    const { exportCommand } = await import('./commands/export');
-    const formatIdx = args.indexOf('--format');
-    const format = formatIdx !== -1 ? (args[formatIdx + 1] as 'md' | 'html' | 'json') : 'md';
-    const outputIdx = args.indexOf('--output');
-    const output = outputIdx !== -1 ? args[outputIdx + 1] : undefined;
-    const sessionId = args.slice(1).find(a => !a.startsWith('-') && a !== args[formatIdx + 1] && a !== args[outputIdx + 1]);
-    await exportCommand({ format, output, sessionId });
-    return;
-  }
-
-  // ==========================================
-  // Auth guard - check authentication for other commands
-  // ==========================================
-  // Check if running in non-interactive mode
-  const isNonInteractive = args.includes('--non-interactive');
-
-  if (requiresAuth()) {
-    if (isNonInteractive) {
-      console.error('');
-      console.error('Error: Authentication required but running in non-interactive mode.');
-      console.error(
-        'Please run `nimbus login` first, or set provider API keys via environment variables.'
-      );
-      console.error('');
-      process.exit(1);
-    }
-
-    console.log('');
-    console.log('Welcome to Nimbus! You need to set up authentication first.');
-    console.log('');
-
-    const success = await loginCommand({});
-    if (!success) {
-      process.exit(1);
-    }
-    console.log('');
-  }
-
-  // ==========================================
-  // Infrastructure commands (require auth)
-  // ==========================================
-
-  // nimbus run "prompt" [options]
-  if (command === 'run') {
-    const { parseRunArgs, executeRun } = await import('./cli/run');
-    const { getAppContext } = await import('./app');
-
-    const ctx = getAppContext();
-    if (!ctx) {
-      console.error('Error: App not initialised.');
-      process.exit(1);
-    }
-
-    const runOptions = parseRunArgs(args.slice(1));
-    await executeRun(ctx.router, runOptions);
-    return;
-  }
-
-  // nimbus generate terraform
-  if (command === 'generate' && subcommand === 'terraform') {
-    const options: GenerateTerraformOptions = {};
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--profile' && args[i + 1]) {
-        options.profile = args[++i];
-      } else if (arg === '--regions' && args[i + 1]) {
-        options.regions = args[++i].split(',');
-      } else if (arg === '--services' && args[i + 1]) {
-        options.services = args[++i].split(',');
-      } else if (arg === '--output' && args[i + 1]) {
-        options.output = args[++i];
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--accept-all-improvements') {
-        options.acceptAllImprovements = true;
-      } else if (arg === '--reject-all-improvements') {
-        options.rejectAllImprovements = true;
-      } else if (arg === '--mock') {
-        options.mock = true;
-      }
-    }
-
-    await generateTerraformCommand(options);
-    return;
-  }
-
-  // nimbus generate k8s (or nimbus generate-k8s)
-  if ((command === 'generate' && subcommand === 'k8s') || command === 'generate-k8s') {
-    const options: GenerateK8sOptions = {};
-    const startIdx = command === 'generate-k8s' ? 1 : 2;
-
-    for (let i = startIdx; i < args.length; i++) {
-      const arg = args[i];
-
-      if ((arg === '--workload-type' || arg === '--type') && args[i + 1]) {
-        options.workloadType = args[++i] as GenerateK8sOptions['workloadType'];
-      } else if ((arg === '--namespace' || arg === '-n') && args[i + 1]) {
-        options.namespace = args[++i];
-      } else if (arg === '--name' && args[i + 1]) {
-        options.name = args[++i];
-      } else if (arg === '--image' && args[i + 1]) {
-        options.image = args[++i];
-      } else if (arg === '--replicas' && args[i + 1]) {
-        options.replicas = parseInt(args[++i], 10);
-      } else if (arg === '--port' && args[i + 1]) {
-        options.port = parseInt(args[++i], 10);
-      } else if (arg === '--service-type' && args[i + 1]) {
-        options.serviceType = args[++i] as GenerateK8sOptions['serviceType'];
-      } else if ((arg === '--output' || arg === '-o') && args[i + 1]) {
-        options.output = args[++i];
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--include-ingress') {
-        options.includeIngress = true;
-      } else if (arg === '--include-hpa') {
-        options.includeHpa = true;
-      } else if (arg === '--include-pdb') {
-        options.includePdb = true;
-      } else if (arg === '--include-configmap') {
-        options.includeConfigMap = true;
-      } else if (arg === '--include-secret') {
-        options.includeSecret = true;
-      } else if (arg === '--cpu-request' && args[i + 1]) {
-        options.cpuRequest = args[++i];
-      } else if (arg === '--cpu-limit' && args[i + 1]) {
-        options.cpuLimit = args[++i];
-      } else if (arg === '--memory-request' && args[i + 1]) {
-        options.memoryRequest = args[++i];
-      } else if (arg === '--memory-limit' && args[i + 1]) {
-        options.memoryLimit = args[++i];
-      }
-    }
-
-    await generateK8sCommand(options);
-    return;
-  }
-
-  // nimbus generate helm (or nimbus generate-helm)
-  if ((command === 'generate' && subcommand === 'helm') || command === 'generate-helm') {
-    const options: GenerateHelmOptions = {};
-    const startIdx = command === 'generate-helm' ? 1 : 2;
-
-    for (let i = startIdx; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--chart' && args[i + 1]) {
-        options.chart = args[++i];
-      } else if ((arg === '--release' || arg === '--release-name') && args[i + 1]) {
-        options.releaseName = args[++i];
-      } else if ((arg === '--namespace' || arg === '-n') && args[i + 1]) {
-        options.namespace = args[++i];
-      } else if ((arg === '--output' || arg === '-o') && args[i + 1]) {
-        options.output = args[++i];
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--include-secrets') {
-        options.includeSecrets = true;
-      } else if (arg === '--no-secrets') {
-        options.includeSecrets = false;
-      } else if (arg === '--environment' && args[i + 1]) {
-        options.environment = args[++i] as GenerateHelmOptions['environment'];
-      } else if (arg === '--version' && args[i + 1]) {
-        options.version = args[++i];
-      } else if (arg === '--repo' && args[i + 1]) {
-        options.repo = args[++i];
-      } else if (arg === '--values-file' && args[i + 1]) {
-        options.valuesFile = args[++i];
-      }
-    }
-
-    await generateHelmCommand(options);
-    return;
-  }
-
-  // nimbus aws discover
-  if (command === 'aws' && subcommand === 'discover') {
-    const options: AwsDiscoverOptions = {};
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--profile' && args[i + 1]) {
-        options.profile = args[++i];
-      } else if (arg === '--regions' && args[i + 1]) {
-        options.regions = args[++i].split(',');
-      } else if (arg === '--services' && args[i + 1]) {
-        options.services = args[++i].split(',');
-      } else if (arg === '--exclude-services' && args[i + 1]) {
-        options.excludeServices = args[++i].split(',');
-      } else if (arg === '--output-format' && args[i + 1]) {
-        options.outputFormat = args[++i] as 'json' | 'table' | 'summary';
-      } else if (arg === '--output-file' && args[i + 1]) {
-        options.outputFile = args[++i];
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      }
-    }
-
-    await awsDiscoverCommand(options);
-    return;
-  }
-
-  // nimbus aws terraform
-  if (command === 'aws' && subcommand === 'terraform') {
-    const options: AwsTerraformOptions = {};
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--profile' && args[i + 1]) {
-        options.profile = args[++i];
-      } else if (arg === '--regions' && args[i + 1]) {
-        options.regions = args[++i].split(',');
-      } else if (arg === '--services' && args[i + 1]) {
-        options.services = args[++i].split(',');
-      } else if (arg === '--session-id' && args[i + 1]) {
-        options.sessionId = args[++i];
-      } else if (arg === '--resources-file' && args[i + 1]) {
-        options.resourcesFile = args[++i];
-      } else if (arg === '--output' && args[i + 1]) {
-        options.output = args[++i];
-      } else if (arg === '--terraform-version' && args[i + 1]) {
-        options.terraformVersion = args[++i];
-      } else if (arg === '--organize-by-service') {
-        options.organizeByService = true;
-      } else if (arg === '--no-organize-by-service') {
-        options.organizeByService = false;
-      } else if (arg === '--import-blocks') {
-        options.importBlocks = true;
-      } else if (arg === '--no-import-blocks') {
-        options.importBlocks = false;
-      } else if (arg === '--import-script') {
-        options.importScript = true;
-      } else if (arg === '--no-import-script') {
-        options.importScript = false;
-      } else if (arg === '--starter-kit') {
-        options.includeStarterKit = true;
-      } else if (arg === '--no-starter-kit') {
-        options.includeStarterKit = false;
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--skip-discovery') {
-        options.skipDiscovery = true;
-      }
-    }
-
-    await awsTerraformCommand(options);
-    return;
-  }
-
-  // nimbus aws <service> <action> (catch-all for other AWS subcommands)
-  if (command === 'aws' && subcommand && subcommand !== 'discover' && subcommand !== 'terraform') {
-    await awsCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus azure <service> <action>
-  if (command === 'azure') {
-    if (!subcommand) {
-      console.error('Usage: nimbus azure <service> <action>');
-      console.log('');
-      console.log('Available services:');
-      console.log('  vm        - Virtual machine operations');
-      console.log('  storage   - Storage account operations');
-      console.log('  aks       - Azure Kubernetes Service operations');
-      console.log('  functions - Azure Functions operations');
-      process.exit(1);
-    }
-
-    await azureCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus gcp <service> <action>
-  if (command === 'gcp') {
-    if (!subcommand) {
-      console.error('Usage: nimbus gcp <service> <action>');
-      console.log('');
-      console.log('Available services:');
-      console.log('  compute   - Compute Engine operations');
-      console.log('  storage   - Cloud Storage operations');
-      console.log('  gke       - Google Kubernetes Engine operations');
-      console.log('  functions - Cloud Functions operations');
-      console.log('  iam       - IAM operations');
-      process.exit(1);
-    }
-
-    await gcpCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus cost <subcommand>
-  if (command === 'cost') {
-    await costCommand(args.slice(1));
-    return;
-  }
-
-  // nimbus drift <subcommand>
-  if (command === 'drift') {
-    await driftCommand(args.slice(1));
-    return;
-  }
-
-  // nimbus demo [options]
-  if (command === 'demo') {
-    const options = parseDemoOptions(args.slice(1));
-    await demoCommand(options);
-    return;
-  }
-
-  // nimbus feedback [options]
-  if (command === 'feedback') {
-    const options = parseFeedbackOptions(args.slice(1));
-    await feedbackCommand(options);
-    return;
-  }
-
-  // nimbus preview <type> [options]
-  if (command === 'preview') {
-    const options: PreviewOptions = {
-      type: (subcommand as PreviewOptions['type']) || 'terraform',
-    };
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if ((arg === '--directory' || arg === '-d') && args[i + 1]) {
-        options.directory = args[++i];
-      } else if (arg === '--format' && args[i + 1]) {
-        options.format = args[++i] as PreviewOptions['format'];
-      } else if (arg === '--verbose' || arg === '-v') {
-        options.verbose = true;
-      } else if (arg === '--skip-safety') {
-        options.skipSafety = true;
-      } else if (arg === '--target' && args[i + 1]) {
-        options.target = args[++i];
-      } else if ((arg === '--namespace' || arg === '-n') && args[i + 1]) {
-        options.namespace = args[++i];
-      } else if (arg === '--release' && args[i + 1]) {
-        options.release = args[++i];
-      } else if (arg === '--values-file' && args[i + 1]) {
-        options.valuesFile = args[++i];
-      }
-    }
-
-    await previewCommand(options);
-    return;
-  }
-
-  // nimbus import [options]
-  if (command === 'import') {
-    const options = parseImportOptions(args.slice(1));
-    await importCommand(options);
-    return;
-  }
-
-  // nimbus questionnaire <type> [options]
-  if (command === 'questionnaire') {
-    const options: QuestionnaireOptions = {
-      type: (subcommand as QuestionnaireOptions['type']) || 'terraform',
-    };
-
-    for (let i = 2; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--answers-file' && args[i + 1]) {
-        options.answersFile = args[++i];
-      } else if ((arg === '--output' || arg === '-o') && args[i + 1]) {
-        options.outputDir = args[++i];
-      } else if (arg === '--dry-run') {
-        options.dryRun = true;
-      }
-    }
-
-    await questionnaireCommand(options);
-    return;
-  }
-
-  // nimbus chat
-  if (command === 'chat') {
-    const options: ChatOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if ((arg === '--model' || arg === '-M') && args[i + 1]) {
-        options.model = args[++i];
-      } else if ((arg === '--message' || arg === '-m') && args[i + 1]) {
-        options.message = args[++i];
-        options.nonInteractive = true;
-      } else if (arg === '--system-prompt' && args[i + 1]) {
-        options.systemPrompt = args[++i];
-      } else if (arg === '--show-tokens') {
-        options.showTokenCount = true;
-      } else if (arg === '--non-interactive') {
-        options.nonInteractive = true;
-      } else if (arg === '--ui' && args[i + 1]) {
-        options.ui = args[++i] as ChatOptions['ui'];
-      } else if (arg.startsWith('--ui=')) {
-        options.ui = arg.slice('--ui='.length) as ChatOptions['ui'];
-      } else if (arg === '--continue' || arg === '--resume') {
-        options.continue = true;
-      }
-    }
-
-    await chatCommand(options);
-    return;
-  }
-
-  // nimbus config <subcommand>
-  if (command === 'config') {
-    const isNonInteractive = args.includes('--non-interactive');
-
-    // nimbus config set <key> <value>
-    if (subcommand === 'set') {
-      const options: ConfigSetOptions = { nonInteractive: isNonInteractive };
-
-      for (let i = 2; i < args.length; i++) {
-        const arg = args[i];
-        if (!arg.startsWith('-')) {
-          if (!options.key) {
-            options.key = arg;
-          } else if (!options.value) {
-            options.value = arg;
-          }
-        }
-      }
-
-      await configCommand.set(options);
-      return;
-    }
-
-    // nimbus config get <key>
-    if (subcommand === 'get') {
-      const options: ConfigGetOptions = { nonInteractive: isNonInteractive };
-
-      for (let i = 2; i < args.length; i++) {
-        const arg = args[i];
-        if (!arg.startsWith('-') && !options.key) {
-          options.key = arg;
-        }
-      }
-
-      await configCommand.get(options);
-      return;
-    }
-
-    // nimbus config list
-    if (subcommand === 'list') {
-      const options: ConfigListOptions = { nonInteractive: isNonInteractive };
-
-      for (let i = 2; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === '--json') {
-          options.json = true;
-        } else if (arg === '--changed') {
-          options.changed = true;
-        }
-      }
-
-      await configCommand.list(options);
-      return;
-    }
-
-    // nimbus config init
-    if (subcommand === 'init') {
-      const options: ConfigInitOptions = { nonInteractive: isNonInteractive };
-
-      for (let i = 2; i < args.length; i++) {
-        const arg = args[i];
-        if (arg === '--force' || arg === '-f') {
-          options.force = true;
-        }
-      }
-
-      await configCommand.init(options);
-      return;
-    }
-
-    // nimbus config reset
-    if (subcommand === 'reset') {
-      await configCommand.reset({ nonInteractive: isNonInteractive });
-      return;
-    }
-
-    // nimbus config telemetry <enable|disable|status>
-    if (subcommand === 'telemetry') {
-      const telemetryAction = args[2];
-      const fs = await import('node:fs');
-      const nodePath = await import('node:path');
-      const { homedir } = await import('os');
-      const { randomUUID } = await import('crypto');
-      const configPath = nodePath.join(homedir(), '.nimbus', 'config.json');
-      const configDir = nodePath.join(homedir(), '.nimbus');
-
-      // Ensure directory exists
-      if (!fs.existsSync(configDir)) {
-        fs.mkdirSync(configDir, { recursive: true });
-      }
-
-      // Read existing config
-      let config: any = {};
-      try {
-        if (fs.existsSync(configPath)) {
-          config = JSON.parse(fs.readFileSync(configPath, 'utf-8'));
-        }
-      } catch {
-        /* ignore */
-      }
-
-      if (telemetryAction === 'enable') {
-        config.telemetry = {
-          ...config.telemetry,
-          enabled: true,
-          anonymousId: config.telemetry?.anonymousId || randomUUID(),
-        };
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
-        console.log(
-          'Telemetry enabled. Anonymous usage data will be collected to help improve Nimbus.'
-        );
-        console.log(`Anonymous ID: ${config.telemetry.anonymousId}`);
-        return;
-      }
-
-      if (telemetryAction === 'disable') {
-        config.telemetry = { ...config.telemetry, enabled: false };
-        fs.writeFileSync(configPath, JSON.stringify(config, null, 2));
-        console.log('Telemetry disabled. No usage data will be collected.');
-        return;
-      }
-
-      if (telemetryAction === 'status' || !telemetryAction) {
-        const enabled = config.telemetry?.enabled === true;
-        console.log(`Telemetry: ${enabled ? 'enabled' : 'disabled'}`);
-        if (config.telemetry?.anonymousId) {
-          console.log(`Anonymous ID: ${config.telemetry.anonymousId}`);
-        }
-        return;
-      }
-
-      console.error(`Unknown telemetry action: ${telemetryAction}`);
-      console.log('Usage: nimbus config telemetry <enable|disable|status>');
-      process.exit(1);
-    }
-
-    // No subcommand - show list
-    if (!subcommand) {
-      await configCommand.list({ nonInteractive: isNonInteractive });
-      return;
-    }
-
-    console.error(`Unknown config subcommand: ${subcommand}`);
-    console.log('');
-    console.log('Available config commands:');
-    console.log('  nimbus config list         - List all configuration');
-    console.log('  nimbus config get <key>    - Get a configuration value');
-    console.log('  nimbus config set <key> <value> - Set a configuration value');
-    console.log('  nimbus config init         - Initialize configuration interactively');
-    console.log('  nimbus config reset        - Reset configuration to defaults');
-    console.log('  nimbus config telemetry    - Manage telemetry settings');
-    process.exit(1);
-  }
-
-  // ==========================================
-  // Infrastructure tool commands (require auth)
-  // ==========================================
-
-  // nimbus tf <subcommand>
-  if (command === 'tf') {
-    if (subcommand === '--version' || subcommand === '-v') {
-      console.log(`nimbus ${VERSION}`);
-      return;
-    }
-    if (!subcommand) {
-      console.error('Usage: nimbus tf <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  init      - Initialize Terraform working directory');
-      console.log('  plan      - Generate execution plan');
-      console.log('  apply     - Apply changes');
-      console.log('  validate  - Validate configuration');
-      console.log('  destroy   - Destroy infrastructure');
-      console.log('  show      - Show state');
-      console.log('  fmt       - Format configuration files');
-      console.log('  workspace - Manage workspaces (list, select, new, delete)');
-      console.log('  import    - Import existing infrastructure');
-      console.log('  output    - Show output values');
-      process.exit(1);
-    }
-
-    await tfCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus k8s <subcommand>
-  if (command === 'k8s') {
-    if (subcommand === '--version' || subcommand === '-v') {
-      console.log(`nimbus ${VERSION}`);
-      return;
-    }
-    if (!subcommand) {
-      console.error('Usage: nimbus k8s <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  get <resource> [name]     - Get Kubernetes resources');
-      console.log('  apply <manifest>          - Apply manifests');
-      console.log('  delete <resource> <name>  - Delete resources');
-      console.log('  logs <pod>                - Get pod logs');
-      console.log('  describe <resource> <name> - Describe resource');
-      console.log('  scale <resource> <name> <replicas> - Scale deployment');
-      console.log('  exec <pod> -- <cmd...>    - Execute command in pod');
-      console.log('  rollout <action> <resource> - Manage rollouts');
-      process.exit(1);
-    }
-
-    await k8sCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus helm <subcommand>
-  if (command === 'helm') {
-    if (subcommand === '--version' || subcommand === '-v') {
-      console.log(`nimbus ${VERSION}`);
-      return;
-    }
-    if (!subcommand) {
-      console.error('Usage: nimbus helm <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  list                      - List releases');
-      console.log('  install <name> <chart>    - Install a chart');
-      console.log('  upgrade <name> <chart>    - Upgrade a release');
-      console.log('  uninstall <name>          - Uninstall a release');
-      console.log('  rollback <name> <rev>     - Rollback to revision');
-      console.log('  history <name>            - Show release history');
-      console.log('  search <keyword>          - Search for charts');
-      console.log('  show <chart>              - Show chart information');
-      console.log('  repo add <name> <url>     - Add repository');
-      console.log('  repo update               - Update repositories');
-      process.exit(1);
-    }
-
-    await helmCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus apply <type> [target] [options]
-  if (command === 'apply') {
-    await applyCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus ask "<question>" [options]
-  if (command === 'ask') {
-    const options: AskOptions = {};
-    let question = '';
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if ((arg === '--context' || arg === '-c') && args[i + 1]) {
-        options.context = args[++i];
-      } else if (arg === '--context-file' && args[i + 1]) {
-        options.contextFile = args[++i];
-      } else if (arg === '--model' && args[i + 1]) {
-        options.model = args[++i];
-      } else if (arg === '--json') {
-        options.json = true;
-      } else if (!arg.startsWith('-')) {
-        question = arg;
-      }
-    }
-
-    await askCommand(question, options);
-    return;
-  }
-
-  // nimbus explain <target> [options]
-  if (command === 'explain') {
-    const options: ExplainOptions = {};
-    let target = '';
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--type' && args[i + 1]) {
-        options.type = args[++i] as ExplainOptions['type'];
-      } else if (arg === '--file' && args[i + 1]) {
-        options.file = args[++i];
-      } else if (arg === '--verbose' || arg === '-v') {
-        options.verbose = true;
-      } else if (arg === '--json') {
-        options.json = true;
-      } else if (!arg.startsWith('-')) {
-        target = arg;
-      }
-    }
-
-    await explainCommand(target, options);
-    return;
-  }
-
-  // nimbus fix <error-or-file> [options]
-  if (command === 'fix') {
-    const options: FixOptions = {};
-    let errorOrFile = '';
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if (arg === '--file' && args[i + 1]) {
-        options.file = args[++i];
-      } else if (arg === '--auto-apply' || arg === '-y') {
-        options.autoApply = true;
-      } else if (arg === '--dry-run') {
-        options.dryRun = true;
-      } else if (arg === '--json') {
-        options.json = true;
-      } else if (!arg.startsWith('-')) {
-        errorOrFile = arg;
-      }
-    }
-
-    await fixCommand(errorOrFile, options);
-    return;
-  }
-
-  // nimbus plan [options]
-  if (command === 'plan') {
-    const options = parsePlanOptions(args.slice(1));
-    await planCommand(options);
-    return;
-  }
-
-  // nimbus resume <task-id>
-  if (command === 'resume') {
-    const taskId = subcommand;
-    await resumeCommand(taskId || {});
-    return;
-  }
-
-  // nimbus git <subcommand>
-  if (command === 'git') {
-    if (!subcommand) {
-      console.error('Usage: nimbus git <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  status                    - Show git status');
-      console.log('  add <files...>            - Stage files');
-      console.log('  commit -m "message"       - Create commit');
-      console.log('  push                      - Push to remote');
-      console.log('  pull                      - Pull from remote');
-      console.log('  fetch                     - Fetch from remote');
-      console.log('  log                       - Show commit log');
-      console.log('  branch                    - List branches');
-      console.log('  checkout <branch>         - Checkout branch');
-      console.log('  diff                      - Show diff');
-      console.log('  merge <branch>            - Merge a branch');
-      console.log(
-        '  stash <action>            - Stash operations (push, pop, list, drop, apply, clear)'
-      );
-      process.exit(1);
-    }
-
-    await gitCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus diff — top-level alias for nimbus fs diff (M1)
-  if (command === 'diff') {
-    await fsCommand('diff', args.slice(1));
-    return;
-  }
-
-  // nimbus fs <subcommand>
-  if (command === 'fs' || command === 'files') {
-    if (!subcommand) {
-      console.error('Usage: nimbus fs <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  list [path]               - List directory contents');
-      console.log('  tree [path]               - List directory contents recursively');
-      console.log('  search <pattern> [path]   - Search for files');
-      console.log('  read <file>               - Read file contents');
-      console.log('  write <path> <content>    - Write content to a file');
-      console.log('  diff <file1> <file2>      - Show diff between two files');
-      process.exit(1);
-    }
-
-    await fsCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus history
-  if (command === 'history') {
-    // nimbus history show <id>
-    if (subcommand === 'show' && args[2]) {
-      await historyShowCommand(args[2]);
-      return;
-    }
-
-    // nimbus history [options]
-    const options: HistoryOptions = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-
-      if ((arg === '--limit' || arg === '-n') && args[i + 1]) {
-        options.limit = parseInt(args[++i], 10);
-      } else if ((arg === '--filter' || arg === '-f') && args[i + 1]) {
-        options.filter = args[++i];
-      } else if (arg === '--since' && args[i + 1]) {
-        options.since = args[++i];
-      } else if (arg === '--until' && args[i + 1]) {
-        options.until = args[++i];
-      } else if (arg === '--status' && args[i + 1]) {
-        options.status = args[++i] as 'success' | 'failure' | 'pending';
-      } else if (arg === '--json') {
-        options.json = true;
-      } else if (arg === '--clear') {
-        options.clear = true;
-      }
-    }
-
-    await historyCommand(options);
-    return;
-  }
-
-  // nimbus gh <subcommand>
-  if (command === 'gh') {
-    if (!subcommand) {
-      console.error('Usage: nimbus gh <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  pr list                   - List pull requests');
-      console.log('  pr view <number>          - View a pull request');
-      console.log('  pr create                 - Create a pull request');
-      console.log('  pr merge <number>         - Merge a pull request');
-      console.log('  issue list                - List issues');
-      console.log('  issue view <number>       - View an issue');
-      console.log('  issue create              - Create an issue');
-      console.log('  issue close <number>      - Close an issue');
-      console.log('  issue comment <n>         - Add a comment');
-      console.log('  repo info                 - Show repository info');
-      console.log('  repo branches             - List branches');
-      process.exit(1);
-    }
-
-    await ghCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // ==========================================
-  // Enterprise commands
-  // ==========================================
-
-  // nimbus team <subcommand>
-  if (command === 'team') {
-    await teamCommand(subcommand || '', args.slice(2));
-    return;
-  }
-
-  // nimbus billing <subcommand>
-  if (command === 'billing') {
-    await billingCommand(subcommand || '', args.slice(2));
-    return;
-  }
-
-  // nimbus usage
-  if (command === 'usage') {
-    await usageCommand(parseUsageOptions(args.slice(1)));
-    return;
-  }
-
-  // nimbus audit <subcommand>
-  if (command === 'audit') {
-    await auditCommand(subcommand || '', args.slice(2));
-    return;
-  }
-
-  // nimbus analyze
-  if (command === 'analyze') {
-    await analyzeCommand(parseAnalyzeOptions(args.slice(1)));
-    return;
-  }
-
-  // nimbus template <subcommand>
-  if (command === 'template') {
-    if (!subcommand) {
-      console.error('Usage: nimbus template <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  list                      - List all templates');
-      console.log('  get <id>                  - Get template details');
-      console.log('  save --name <n> [--file]  - Save a new template');
-      console.log('  delete <id>               - Delete a template');
-      process.exit(1);
-    }
-
-    await templateCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus auth-profile <subcommand>
-  if (command === 'auth-profile') {
-    if (!subcommand) {
-      console.error('Usage: nimbus auth-profile <subcommand>');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  list                      - List configured providers');
-      console.log('  show                      - Show current default provider');
-      console.log('  switch <provider>         - Switch default provider');
-      process.exit(1);
-    }
-
-    await authProfileCommand(subcommand, args.slice(2));
-    return;
-  }
-
-  // nimbus watch <glob> --run "prompt" (M3)
-  if (command === 'watch') {
-    const { watchCommand } = await import('./commands/watch');
-    const watchOptions: import('./commands/watch').WatchOptions = { glob: subcommand ?? '' };
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-      if (arg === '--run' && args[i + 1]) {
-        watchOptions.run = args[++i];
-      } else if (arg === '--debounce' && args[i + 1]) {
-        watchOptions.debounce = parseInt(args[++i], 10);
-      } else if (arg === '--auto-approve' || arg === '-y') {
-        watchOptions.autoApprove = true;
-      } else if (arg === '--max-runs' && args[i + 1]) {
-        watchOptions.maxRuns = parseInt(args[++i], 10);
-      } else if (!arg.startsWith('--') && !watchOptions.glob) {
-        watchOptions.glob = arg;
-      }
-    }
-    await watchCommand(watchOptions);
-    return;
-  }
-
-  // nimbus whoami — shorthand for auth status (H5)
-  if (command === 'whoami') {
-    await authStatusCommand({});
-    return;
-  }
-
-  // nimbus auth-refresh [--provider aws|gcp|azure]
-  if (command === 'auth-refresh') {
-    const { authRefreshCommand } = await import('./commands/auth-refresh');
-    const refreshOptions: { provider?: 'aws' | 'gcp' | 'azure' | 'all' } = {};
-
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-      if (arg === '--provider' && args[i + 1]) {
-        refreshOptions.provider = args[++i] as 'aws' | 'gcp' | 'azure' | 'all';
-      }
-    }
-
-    await authRefreshCommand(refreshOptions);
-    return;
-  }
-
-  // nimbus plugin <list|add|remove|init> (L3)
-  if (command === 'plugin') {
-    const { pluginCommand } = await import('./commands/plugin');
-    await pluginCommand(subcommand ?? 'list', args.slice(2));
-    return;
-  }
-
-  // nimbus mcp <list|add|remove|test> (M5) — MCP server management
-  if (command === 'mcp') {
-    const { mcpCommand } = await import('./commands/plugin');
-    await mcpCommand(subcommand ?? 'list', args.slice(2));
-    return;
-  }
-
-  // nimbus completions <install|uninstall> (L7)
-  if (command === 'completions') {
-    const { completionsCommand } = await import('./commands/completions');
-    await completionsCommand(subcommand ?? 'install');
-    return;
-  }
-
-  // nimbus team-context <push|pull> (L6)
-  if (command === 'team-context') {
-    const { teamContextCommand } = await import('./commands/team-context');
-    await teamContextCommand(subcommand ?? 'push', args.slice(2));
-    return;
-  }
-
-  // nimbus profile <list|create|set|delete|show> (H1)
-  if (command === 'profile') {
-    const { profileCommand } = await import('./commands/profile');
-    await profileCommand(subcommand ?? 'list', args.slice(2));
-    return;
-  }
-
-  // nimbus status — infrastructure status dashboard (G18)
-  if (command === 'status') {
-    const statusOptions: StatusOptions = {};
-    for (let i = 1; i < args.length; i++) {
-      if (args[i] === '--json') statusOptions.json = true;
-    }
-    await statusCommand(statusOptions);
-    return;
-  }
-
-  // nimbus context — full context snapshot (L3): alias for status with verbose details
-  if (command === 'context') {
-    const contextOptions: StatusOptions = { verbose: true };
-    for (let i = 1; i < args.length; i++) {
-      if (args[i] === '--json') contextOptions.json = true;
-    }
-    await statusCommand(contextOptions);
-    return;
-  }
-
-  // nimbus rollout — watch Kubernetes deployment rollout (L1)
-  if (command === 'rollout') {
-    const deployment = args[0];
-    if (!deployment) {
-      console.error('Usage: nimbus rollout <deployment> [--namespace <ns>] [--timeout <duration>]');
-      process.exit(1);
-    }
-    const rolloutOptions: RolloutOptions = { deployment };
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-      if ((arg === '--namespace' || arg === '-n') && args[i + 1]) rolloutOptions.namespace = args[++i];
-      else if (arg === '--timeout' && args[i + 1]) rolloutOptions.timeout = args[++i];
-    }
-    await rolloutCommand(rolloutOptions);
-    return;
-  }
-
-  // nimbus rollback — guided infrastructure rollback (G20)
-  if (command === 'rollback') {
-    const rollbackOptions: RollbackOptions = {};
-    for (let i = 1; i < args.length; i++) {
-      const arg = args[i];
-      if (arg === '--helm' && args[i + 1]) rollbackOptions.helm = args[++i];
-      else if (arg === '--k8s' && args[i + 1]) rollbackOptions.k8s = args[++i];
-      else if (arg === '--namespace' && args[i + 1]) rollbackOptions.namespace = args[++i];
-      else if (arg === '--tf') rollbackOptions.tf = true;
-      else if (arg === '--terraform') rollbackOptions.terraform = true;
-      else if (arg === '--tf-dir' && args[i + 1]) rollbackOptions.tfDir = args[++i];
-    }
-    await rollbackCommand(rollbackOptions);
-    return;
-  }
-
-  // nimbus deploy — orchestrate full terraform + kubectl deployment workflow (C1)
-  if (command === 'deploy') {
-    const { deployCommand } = await import('./commands/deploy');
-    await deployCommand(args.slice(1));
-    return;
-  }
-
-  // Unknown command
-  console.error(`Unknown command: ${command} ${subcommand || ''}`);
-  console.log('');
-  console.log('Available commands:');
-  console.log('');
-  console.log('  Chat & AI:');
-  console.log('    nimbus chat              - Start interactive chat with AI');
-  console.log('    nimbus chat -m "..."     - Send a single message');
-  console.log('    nimbus run "prompt"       - Non-interactive agent run with tools');
-  console.log('    nimbus ask "question"    - Quick question/answer');
-  console.log('    nimbus explain <file>    - Explain code or infrastructure');
-  console.log('    nimbus fix <error>       - AI-assisted error fixing');
-  console.log('');
-  console.log('  Workspace:');
-  console.log('    nimbus init              - Initialize workspace in current directory');
-  console.log('');
-  console.log('  Configuration:');
-  console.log('    nimbus config            - List all configuration');
-  console.log('    nimbus config set <k> <v> - Set a configuration value');
-  console.log('    nimbus config get <key>  - Get a configuration value');
-  console.log('    nimbus config init       - Initialize global configuration');
-  console.log('    nimbus config telemetry  - Manage telemetry (enable|disable|status)');
-  console.log('');
-  console.log('  Authentication:');
-  console.log('    nimbus login             - Set up authentication and LLM providers');
-  console.log('    nimbus logout            - Clear all credentials');
-  console.log('    nimbus auth status       - Show current authentication status');
-  console.log('    nimbus auth list         - List all available providers');
-  console.log('    nimbus auth-refresh      - Re-validate and refresh cloud credentials');
-  console.log('');
-  console.log('  Infrastructure Generation:');
-  console.log(
-    '    nimbus generate terraform  - Generate Terraform from AWS infrastructure (wizard)'
-  );
-  console.log('    nimbus generate k8s        - Generate Kubernetes manifests (wizard)');
-  console.log('    nimbus generate helm       - Generate Helm values files (wizard)');
-  console.log('    nimbus aws discover        - Discover AWS infrastructure resources');
-  console.log('    nimbus aws terraform       - Generate Terraform from AWS resources');
-  console.log('');
-  console.log('  Cloud Providers:');
-  console.log(
-    '    nimbus aws <service> <action>  - AWS operations (ec2, s3, rds, lambda, iam, vpc)'
-  );
-  console.log(
-    '    nimbus azure <service> <action> - Azure operations (vm, storage, aks, functions)'
-  );
-  console.log(
-    '    nimbus gcp <service> <action>  - GCP operations (compute, storage, gke, functions, iam)'
-  );
-  console.log('    nimbus auth aws|gcp|azure      - Validate cloud credentials');
-  console.log('');
-  console.log('  Infrastructure Management:');
-  console.log('    nimbus cost estimate       - Estimate infrastructure costs');
-  console.log('    nimbus cost history        - View cost history');
-  console.log('    nimbus drift detect        - Detect infrastructure drift');
-  console.log('    nimbus drift fix           - Remediate drift');
-  console.log('    nimbus preview <type>      - Preview infrastructure changes');
-  console.log('    nimbus import              - Import existing cloud resources');
-  console.log('');
-  console.log('  Infrastructure Tools:');
-  console.log('    nimbus plan              - Preview infrastructure changes');
-  console.log('    nimbus apply <type>      - Apply infrastructure (terraform, k8s, helm)');
-  console.log('    nimbus resume <task-id>  - Resume a task from its last checkpoint');
-  console.log(
-    '    nimbus tf <cmd>          - Terraform operations (init, plan, apply, validate, destroy, show, fmt, workspace, import, output)'
-  );
-  console.log(
-    '    nimbus k8s <cmd>         - Kubernetes operations (get, apply, delete, logs, describe, scale, exec, rollout)'
-  );
-  console.log(
-    '    nimbus helm <cmd>        - Helm operations (list, install, upgrade, uninstall, rollback, show)'
-  );
-  console.log(
-    '    nimbus git <cmd>         - Git operations (status, add, commit, push, pull, fetch, log, merge, stash)'
-  );
-  console.log(
-    '    nimbus fs <cmd>          - File system operations (list, search, read, write, diff)'
-  );
-  console.log('');
-  console.log('  Wizards & Tools:');
-  console.log('    nimbus questionnaire <type> - Interactive infrastructure questionnaire');
-  console.log('    nimbus demo              - Run demo scenarios');
-  console.log('    nimbus feedback          - Submit feedback');
-  console.log('');
-  console.log('  GitHub:');
-  console.log('    nimbus gh pr <cmd>       - PR operations (list, view, create, merge)');
-  console.log(
-    '    nimbus gh issue <cmd>    - Issue operations (list, view, create, close, comment)'
-  );
-  console.log('    nimbus gh repo <cmd>     - Repo operations (info, branches)');
-  console.log('');
-  console.log('  Aliases:');
-  console.log('    nimbus terraform <cmd>   - Alias for nimbus tf <cmd>');
-  console.log('    nimbus k <cmd>           - Alias for nimbus k8s <cmd>');
-  console.log('    nimbus g <type>          - Alias for nimbus generate <type>');
-  console.log('    nimbus h <cmd>           - Alias for nimbus helm <cmd>');
-  console.log('    nimbus pr <cmd>          - Alias for nimbus gh pr <cmd>');
-  console.log('    nimbus issue <cmd>       - Alias for nimbus gh issue <cmd>');
-  console.log('    nimbus read <file>       - Alias for nimbus fs read <file>');
-  console.log('    nimbus tree [path]       - Alias for nimbus fs tree [path]');
-  console.log('    nimbus search <pattern>  - Alias for nimbus fs search <pattern>');
-  console.log('    nimbus write <path> <c>  - Alias for nimbus fs write <path> <content>');
-  console.log('');
-  console.log('  History:');
-  console.log('    nimbus history           - View command history');
-  console.log('    nimbus history show <id> - Show details for a history entry');
-  console.log('    nimbus history --clear   - Clear all history');
-  console.log('');
-  console.log('  Team & Enterprise:');
-  console.log('    nimbus team create <name> - Create a team');
-  console.log('    nimbus team invite <email> - Invite a member');
-  console.log('    nimbus team members       - List team members');
-  console.log('    nimbus team switch        - Switch active team');
-  console.log('    nimbus billing status     - View billing status');
-  console.log('    nimbus billing upgrade    - Upgrade plan');
-  console.log('    nimbus usage              - View usage dashboard');
-  console.log('    nimbus audit              - View audit logs');
-  console.log('');
-  console.log('  Analysis:');
-  console.log('    nimbus analyze            - Analyze codebase for improvements');
-  console.log('');
-  console.log('  Server:');
-  console.log('    nimbus serve              - Start headless API server (default port 4200)');
-  console.log('    nimbus serve --port 8080  - Start on custom port');
-  console.log('    nimbus serve --host 0.0.0.0 - Bind to all interfaces');
-  console.log('    nimbus serve --auth u:p   - Enable HTTP Basic Auth');
-  console.log('    nimbus web [--port N] [--ui-url URL] - Start API server and open Web UI');
-  console.log('');
-  console.log('  Utilities:');
-  console.log('    nimbus version            - Show version information');
-  console.log('    nimbus help               - Show this help message');
-  console.log('    nimbus help <command>     - Show help for a specific command');
-  console.log('    nimbus doctor             - Run diagnostic checks');
-  console.log('    nimbus upgrade            - Check for and install updates');
-  console.log('');
-  console.log('Use --help with any command for more options');
-  process.exit(1);
-}