@cairn-tool/cairn 3.2.0 → 3.3.1

package/dist/cli.js

@@ -2,35 +2,6 @@
 import { fileURLToPath } from "node:url";
 import { Command } from "commander";
 import { TARGETS } from "./agent/types.js";
-import { lintAction } from "./commands/lint.js";
-import { lintDirAction } from "./commands/lint-dir.js";
-import { refsAction } from "./commands/refs.js";
-import { refsToAction } from "./commands/refs-to.js";
-import { headersAction } from "./commands/headers.js";
-import { outlineAction } from "./commands/outline.js";
-import { tocAction } from "./commands/toc.js";
-import { statsAction } from "./commands/stats.js";
-import { codeBlocksAction } from "./commands/code-blocks.js";
-import { structureAction } from "./commands/structure.js";
-import { linksAction } from "./commands/links.js";
-import { sectionAction } from "./commands/section.js";
-import { frontmatterAction } from "./commands/frontmatter.js";
-import { tasksAction } from "./commands/tasks.js";
-import { tablesAction } from "./commands/tables.js";
-import { checkUrlsAction } from "./commands/check-urls.js";
-import { orphansAction } from "./commands/orphans.js";
-import { renameHeadingAction } from "./commands/rename-heading.js";
-import { renameFileAction } from "./commands/rename-file.js";
-import { graphAction } from "./commands/graph.js";
-import { validateFrontmatterAction } from "./commands/validate-frontmatter.js";
-import { auditAction } from "./commands/audit.js";
-import { queryAction } from "./commands/query.js";
-import { contextAction } from "./commands/context.js";
-import { diffAction } from "./commands/diff.js";
-import { fixAction } from "./commands/fix.js";
-import { checkSnippetsAction } from "./commands/check-snippets.js";
-import { indexAction } from "./commands/index.js";
-import { checkUpdateAction, refreshUpdateCacheAction } from "./commands/update-check.js";
 import { installUpdateNotifier, CHECK_COMMAND, REFRESH_COMMAND } from "./update-notifier.js";
 import { loadConfig, selectConfig, selectRoot, defaultLintConcurrency } from "./config.js";
 import { commandOptions, initializeRuntime, runtime } from "./runtime.js";
@@ -38,28 +9,6 @@ import { CommandExit } from "./command-result.js";
 import { collect } from "./option-utils.js";
 import { formatsFor } from "./formats.js";
 import { packageName, packageVersion as version } from "./version.js";
-import { agentCompatAction, agentConvertAction, agentInspectAction, agentValidateAction, agentActionBoundary, } from "./commands/agent.js";
-import { agentSpecsAction } from "./commands/agent-specs.js";
-import { agentAddAction, agentInitAction } from "./commands/agent-scaffold.js";
-import { agentUpgradeAction } from "./commands/agent-upgrade.js";
-import { agentImportAction } from "./commands/agent-import.js";
-import { agentPackageAction } from "./commands/agent-package.js";
-import { agentMarketplaceAction } from "./commands/agent-marketplace.js";
-import { agentAuditAction } from "./commands/agent-audit.js";
-import { agentTestAction } from "./commands/agent-test.js";
-import { agentDoctorAction } from "./commands/agent-doctor.js";
-import { agentInstallAction } from "./commands/agent-install.js";
-import { agentUninstallAction } from "./commands/agent-uninstall.js";
-import { agentInstalledAction } from "./commands/agent-installed.js";
-import { agentVerifyAction } from "./commands/agent-verify.js";
-import { describeAction } from "./commands/describe.js";
-import { schemaAction } from "./commands/schema.js";
-import { completionAction } from "./commands/completion.js";
-import { serveAction } from "./commands/serve.js";
-import { scriptsListAction, scriptsRunAction, scriptsWhichAction, } from "./commands/scripts.js";
-import { archiveExtractAction, archiveListAction, archiveMigrateAction, archiveRunAction, archiveStatusAction, archiveVerifyAction, } from "./commands/archive.js";
-import { adfActionBoundary, adfFromMarkdownAction, adfInspectAction, adfToMarkdownAction, adfValidateAction, } from "./commands/jira.js";
-import { usageAgentsAction, usageCommandsAction, usageHooksAction, usageImportAction, usageIndexAction, usageMigrateAction, usageProjectsAction, usageProvidersAction, usageSessionsAction, usageSkillsAction, usageSummaryAction, usageTokensAction, usageToolsAction, } from "./commands/usage.js";
 // Pre-process argv to expand -fh/-fj shorthands into --format values
 // before Commander sees them (Commander doesn't support multi-char short flags).
 // Bounded to the tokens before the first `--`: everything after it is forwarded
@@ -154,7 +103,10 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\n--report writes the same document as conversion-report.json, provenance included, to\nan arbitrary path, so CI can keep the report without keeping the rendered tree. It is\nwritten in every mode, including --dry-run, --check, and a strict failure, and is never\nlisted in the artifacts. It must not be inside the source tree or the output directory.\n\nExit codes:\n  0  Successful and lossless\n  1  Invocation or I/O error\n  2  Validation, compatibility, strict, or stale-output finding")
-    .action((source, opts) => agentActionBoundary("convert", opts, () => agentConvertAction(source, opts)));
+    .action(async (source, opts) => {
+    const { agentActionBoundary, agentConvertAction } = await import("./commands/agent.js");
+    return agentActionBoundary("convert", opts, () => agentConvertAction(source, opts));
+});
 agent
     .command("validate")
     .description("Validate an agent bundle without generating output")
@@ -163,7 +115,10 @@ agent
     .option("--strict", "Treat approximations as blocking findings")
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
-    .action((source, opts) => agentActionBoundary("validate", opts, () => agentValidateAction(source, opts)));
+    .action(async (source, opts) => {
+    const { agentActionBoundary, agentValidateAction } = await import("./commands/agent.js");
+    return agentActionBoundary("validate", opts, () => agentValidateAction(source, opts));
+});
 agent
     .command("inspect")
     .description("Show the normalized bundle, references, overrides, and graph")
@@ -173,7 +128,10 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\n--target narrows a large bundle to the components that reach the selected targets,\nusing the same predicate the renderer uses, and reports what it excluded under\n`filter`. --profile drops the sections a profile never emits, such as hooks and MCP\noutside the plugin profile, and requires --target. Without either flag the output is\nunchanged.\n\nExit codes:\n  0  Bundle inspected\n  1  Invocation or I/O error\n  2  Bundle findings")
-    .action((source, opts) => agentActionBoundary("inspect", opts, () => agentInspectAction(source, opts)));
+    .action(async (source, opts) => {
+    const { agentActionBoundary, agentInspectAction } = await import("./commands/agent.js");
+    return agentActionBoundary("inspect", opts, () => agentInspectAction(source, opts));
+});
 agent
     .command("compat")
     .description("Show platform compatibility or analyze a bundle")
@@ -182,7 +140,10 @@ agent
     .option("--strict", "Treat approximations as blocking findings")
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
-    .action((source, opts) => agentActionBoundary("compat", opts, () => agentCompatAction(source, opts)));
+    .action(async (source, opts) => {
+    const { agentActionBoundary, agentCompatAction } = await import("./commands/agent.js");
+    return agentActionBoundary("compat", opts, () => agentCompatAction(source, opts));
+});
 agent
     .command("doctor")
     .description("Check a bundle and generated output against the target conformance profiles")
@@ -195,7 +156,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nRuns without a bundle: profile self-checks and host version reporting still apply.\nNever executes a host's own tooling, so results do not depend on what is installed.\n\nExit codes:\n  0  No blocking conformance findings\n  1  Invocation or I/O error\n  2  Profile, drift, host, or strict finding")
-    .action((source, opts) => agentActionBoundary("doctor", opts, () => agentDoctorAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentDoctorAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-doctor.js"),
+    ]);
+    return agentActionBoundary("doctor", opts, () => agentDoctorAction(source, opts));
+});
 agent
     .command("init")
     .description("Scaffold a new portable agent bundle")
@@ -214,7 +181,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nNever prompts. Placeholder marketplace metadata is valid here; publish\nreadiness is checked by agent package.\n\nExit codes:\n  0  Bundle scaffolded, or dry run completed\n  1  Invocation or I/O error\n  2  --check found a missing or differing scaffold")
-    .action((name, opts) => agentActionBoundary("init", opts, () => agentInitAction(name, opts)));
+    .action(async (name, opts) => {
+    const [{ agentActionBoundary }, { agentInitAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-scaffold.js"),
+    ]);
+    return agentActionBoundary("init", opts, () => agentInitAction(name, opts));
+});
 agent
     .command("add")
     .description("Add one component to an existing bundle")
@@ -234,7 +207,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nagent-bundle.yaml is edited through a comment-preserving YAML document and is\nleft byte-untouched when no manifest change is needed.\n\nExit codes:\n  0  Component added, or dry run completed\n  1  Invocation or I/O error\n  2  --check found a missing or differing component")
-    .action((kind, name, bundle, opts) => agentActionBoundary("add", opts, () => agentAddAction(kind, name, bundle, opts)));
+    .action(async (kind, name, bundle, opts) => {
+    const [{ agentActionBoundary }, { agentAddAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-scaffold.js"),
+    ]);
+    return agentActionBoundary("add", opts, () => agentAddAction(kind, name, bundle, opts));
+});
 agent
     .command("import")
     .description("Import an existing native plugin or project into a portable bundle")
@@ -251,7 +230,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nDetection is driven by the target conformance profiles, so it cannot drift\nfrom what agent convert emits. Untranslatable pieces are preserved under\nnative/<target>/ rather than dropped.\n\nExit codes:\n  0  Imported, or dry run completed\n  1  Invocation or I/O error\n  2  Blocking finding, or --check found drift")
-    .action((source, opts) => agentActionBoundary("import", opts, () => agentImportAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentImportAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-import.js"),
+    ]);
+    return agentActionBoundary("import", opts, () => agentImportAction(source, opts));
+});
 agent
     .command("upgrade")
     .description("Migrate a bundle between neutral schema versions")
@@ -262,7 +247,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nOnly agent-bundle.yaml is rewritten; no component file is touched. The\nmigration is verified in memory to produce byte-identical generated output\nbefore it writes.\n\nExit codes:\n  0  Migrated, already current, or dry run completed\n  1  Invocation or I/O error\n  2  --check found a bundle below the target schema, or a blocking finding")
-    .action((source, opts) => agentActionBoundary("upgrade", opts, () => agentUpgradeAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentUpgradeAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-upgrade.js"),
+    ]);
+    return agentActionBoundary("upgrade", opts, () => agentUpgradeAction(source, opts));
+});
 agent
     .command("package")
     .description("Build a distributable package with catalogs, checksums, and archives")
@@ -280,7 +271,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nRenders the bundle itself, so a package can never certify a stale tree.\nNever contacts the network and never publishes.\n\nExit codes:\n  0  Package written, or checks passed\n  1  Invocation or I/O error\n  2  Publish-readiness, integrity, or stale finding")
-    .action((source, opts) => agentActionBoundary("package", opts, () => agentPackageAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentPackageAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-package.js"),
+    ]);
+    return agentActionBoundary("package", opts, () => agentPackageAction(source, opts));
+});
 agent
     .command("marketplace")
     .description("Build a marketplace of several bundles from a collection spec")
@@ -301,7 +298,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nRenders every bundle itself, so a catalog can never certify a stale tree.\nOne aggregated catalog per target, not one per bundle. Never contacts the\nnetwork and never publishes.\n\n--install registers one marketplace offering every plugin, where installing\neach bundle separately would register one marketplace per bundle.\n\nExit codes:\n  0  Collection written or installed, or checks passed\n  1  Invocation or I/O error\n  2  Spec, publish-readiness, install, or stale finding")
-    .action((spec, opts) => agentActionBoundary("marketplace", opts, () => agentMarketplaceAction(spec, opts)));
+    .action(async (spec, opts) => {
+    const [{ agentActionBoundary }, { agentMarketplaceAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-marketplace.js"),
+    ]);
+    return agentActionBoundary("marketplace", opts, () => agentMarketplaceAction(spec, opts));
+});
 agent
     .command("audit")
     .description("Review a bundle's executable surface, permissions, and supply chain")
@@ -313,7 +316,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json, sarif", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nExplainable static analysis: nothing is executed and no network request is\nmade. Exit 2 means findings to review, not proof that a bundle is malicious.\n\nExit codes:\n  0  No blocking review findings\n  1  Invocation or I/O error\n  2  Review findings")
-    .action((source, opts) => agentActionBoundary("audit", opts, () => agentAuditAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentAuditAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-audit.js"),
+    ]);
+    return agentActionBoundary("audit", opts, () => agentAuditAction(source, opts));
+});
 agent
     .command("test")
     .description("Run the model-free contract tests stored with a bundle")
@@ -326,7 +335,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nEvery expectation is evaluated against the same in-memory render agent convert\nwould write. Nothing is executed, no model is called, and no file is written; a\nchanged golden digest is reported with both the expected and the actual value.\n--target and --profile narrow each case's own selection rather than widening it.\n\nExit codes:\n  0  Every selected case passed\n  1  Invocation or I/O error\n  2  A failing case, an invalid test file, or a warning under --strict")
-    .action((source, opts) => agentActionBoundary("test", opts, () => agentTestAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentTestAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-test.js"),
+    ]);
+    return agentActionBoundary("test", opts, () => agentTestAction(source, opts));
+});
 agent
     .command("install")
     .description("Install one or more bundles into a host plugin or project directory")
@@ -346,7 +361,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nRenders and packages in memory, so an install is always derived from the\nbundle rather than from a possibly-drifted dist tree. Destinations come from\nthe target profiles. --register is the only flag that edits host config.\n\n--target is repeatable, and one destination may hold several installs: they are\ntold apart by bundle, target, profile and scope. A run is planned in full before\nanything is written, so a blocked plan writes nothing at all. --target all covers\nevery target declaring a location for the scope.\n\n--config installs the agent.install block a repository declares, and --target\nthere narrows that block rather than adding to it.\n\nExit codes:\n  0  Installed, or checks passed\n  1  Invocation or I/O error\n  2  Install finding, or --check found drift")
-    .action((source, opts) => agentActionBoundary("install", opts, () => agentInstallAction(source, opts)));
+    .action(async (source, opts) => {
+    const [{ agentActionBoundary }, { agentInstallAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-install.js"),
+    ]);
+    return agentActionBoundary("install", opts, () => agentInstallAction(source, opts));
+});
 agent
     .command("uninstall")
     .description("Remove a previously installed bundle")
@@ -359,7 +380,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nRemoves exactly the inventory recorded in .cairn-install.json and\nnothing else. --scope is optional: both scopes are searched, and two matches\nis an error rather than a guess.\n\nExit codes:\n  0  Removed, already absent under --check, or dry run completed\n  1  Invocation or I/O error\n  2  Manifest missing or malformed, or --check found the install still present")
-    .action((name, opts) => agentActionBoundary("uninstall", opts, () => agentUninstallAction(name, opts)));
+    .action(async (name, opts) => {
+    const [{ agentActionBoundary }, { agentUninstallAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-uninstall.js"),
+    ]);
+    return agentActionBoundary("uninstall", opts, () => agentUninstallAction(name, opts));
+});
 agent
     .command("installed")
     .description("List bundles installed by this CLI")
@@ -369,7 +396,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nScans the install roots declared on the target profiles and lists every\n.cairn-install.json it finds.\n\nExit codes:\n  0  Listing written to stdout\n  1  Invocation error")
-    .action((opts) => agentActionBoundary("installed", opts, () => agentInstalledAction(opts)));
+    .action(async (opts) => {
+    const [{ agentActionBoundary }, { agentInstalledAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-installed.js"),
+    ]);
+    return agentActionBoundary("installed", opts, () => agentInstalledAction(opts));
+});
 agent
     .command("verify")
     .description("Check committed agent trees against the bundles they were generated from")
@@ -379,7 +412,13 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nReads what to verify from the agent.verify block of a cairn configuration\ndocument, so a CI pipeline can run it with no arguments. Each declared bundle\nis rendered in memory and compared against the committed tree, and the pinned\nCLI and target profile versions are asserted against the running build.\n\nExit codes:\n  0  Every entry matches and every pin is satisfied\n  1  Invocation, configuration, or I/O error\n  2  Drift, an orphaned file, or a violated pin")
-    .action((opts) => agentActionBoundary("verify", opts, () => agentVerifyAction(opts)));
+    .action(async (opts) => {
+    const [{ agentActionBoundary }, { agentVerifyAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-verify.js"),
+    ]);
+    return agentActionBoundary("verify", opts, () => agentVerifyAction(opts));
+});
 agent
     .command("specs")
     .description("Print the versioned target conformance profiles")
@@ -387,43 +426,61 @@ agent
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nThe profiles are the source of truth for target behavior; --format json is the\nform to depend on.\n\nExit codes:\n  0  Profiles written to stdout\n  1  Invocation error")
-    .action((opts) => agentActionBoundary("specs", opts, () => agentSpecsAction(opts)));
+    .action(async (opts) => {
+    const [{ agentActionBoundary }, { agentSpecsAction }] = await Promise.all([
+        import("./commands/agent.js"),
+        import("./commands/agent-specs.js"),
+    ]);
+    return agentActionBoundary("specs", opts, () => agentSpecsAction(opts));
+});
 program
     .command(CHECK_COMMAND)
     .description("Check whether a newer version of this CLI has been published")
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nQueries the registry directly rather than using the 24h cache.\n\nExit codes:\n  0  Already on the latest version\n  1  Could not reach the registry\n  2  A newer version is available")
-    .action((opts) => checkUpdateAction(packageName, version, opts));
+    .action(async (opts) => {
+    const { checkUpdateAction } = await import("./commands/update-check.js");
+    return checkUpdateAction(packageName, version, opts);
+});
 program
     .command("describe")
     .description("Describe the CLI contract: commands, options, exit codes, and output schemas")
     .argument("[command...]", "Optional command path, for example: md graph")
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .addHelpText("after", "\nExamples:\n  cairn describe --format json\n  cairn describe md graph --format json\n\nReports the static contract; project configuration is not applied.\n\nExit codes:\n  0  Description written to stdout\n  1  Unknown command path or invalid format")
-    .action((commandPath, opts) => describeAction(program, commandPath, {
-    ...opts,
-    toolName: packageName,
-    toolVersion: version,
-}));
+    .action(async (commandPath, opts) => {
+    const { describeAction } = await import("./commands/describe.js");
+    return describeAction(program, commandPath, {
+        ...opts,
+        toolName: packageName,
+        toolVersion: version,
+    });
+});
 program
     .command("schema")
     .description("Print a published output schema, or list the available schemas")
     .argument("[id]", "Schema id, for example: agent-result")
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .addHelpText("after", "\nWith an id, the schema document is written regardless of --format.\nSchema ids are identifiers, not fetchable URLs.\n\nExit codes:\n  0  Schema or index written to stdout\n  1  Unknown schema id or invalid format")
-    .action((id, opts) => schemaAction(id, opts));
+    .action(async (id, opts) => {
+    const { schemaAction } = await import("./commands/schema.js");
+    return schemaAction(id, opts);
+});
 program
     .command("completion")
     .description("Print a shell completion script for bash, zsh, fish, or powershell")
     .argument("<shell>", "Shell: bash, zsh, fish, or powershell")
     .option("--format <fmt>", "Output format: llm, human, json", "llm")
     .addHelpText("after", "\nThe script is written to stdout regardless of --format, and is generated from the\nsame command tree `describe` walks, so it cannot drift from the real options.\n\nInstall:\n  cairn completion bash       >> ~/.bashrc          (or a bash-completion.d file)\n  cairn completion zsh        > ~/.zfunc/_cairn (a directory on $fpath)\n  cairn completion fish       > ~/.config/fish/completions/cairn.fish\n  cairn completion powershell >> $PROFILE\n\nRegenerate after upgrading; the script embeds the command tree rather than calling\nback into the CLI, so a shell never pays a process spawn per keystroke.\n\nExit codes:\n  0  Script written to stdout\n  1  Unknown shell or invalid format")
-    .action((shell, opts) => completionAction(program, shell, {
-    ...opts,
-    toolName: packageName,
-    toolVersion: version,
-}));
+    .action(async (shell, opts) => {
+    const { completionAction } = await import("./commands/completion.js");
+    return completionAction(program, shell, {
+        ...opts,
+        toolName: packageName,
+        toolVersion: version,
+    });
+});
 program
     .command("serve")
     .description("Serve the workspace engine over a machine protocol")
@@ -434,7 +491,10 @@ program
     .option("--max-documents <n>", "Parsed documents held in memory before eviction")
     .option("--concurrency <n>", "Parallel lints during audit_markdown")
     .addHelpText("after", "\nSpeaks the Model Context Protocol over stdio, exposing the Markdown workspace\nengine as read-only tools. stdout carries JSON-RPC frames rather than a payload,\nso --format does not apply; diagnostics go to stderr.\n\nEvery tool is read-only and every path argument is confined to --root, resolved\nthrough symlinks. Configuration is discovered from --root, so a tool answers the\nsame as the equivalent md command in that workspace.\n\nRegister with a host:\n  claude mcp add markdown -- cairn serve mcp --root docs\n\nExit codes:\n  0  The client closed the connection\n  1  Unknown protocol, unreadable root, or invalid configuration")
-    .action((protocol, opts) => serveAction(protocol, opts));
+    .action(async (protocol, opts) => {
+    const { serveAction } = await import("./commands/serve.js");
+    return serveAction(protocol, opts);
+});
 const jira = program
     .command("jira")
     .description("Work with Jira and Confluence content formats")
@@ -453,20 +513,100 @@ const adfConverter = (command) => adfCommon(command)
 adfConverter(adf.command("to-markdown"))
     .description("Convert an ADF document to Markdown")
     .addHelpText("after", "\nEmits no frontmatter: an ADF document carries no title, key, status, or author, so\nthere is nothing to put there.\n\nExit codes:\n  0  Converted; read diagnostics to learn what was approximated\n  1  Invocation or I/O error, or the input is not an ADF document\n  2  An error, or any approximation under --strict")
-    .action((source, opts) => adfActionBoundary("to-markdown", opts, () => adfToMarkdownAction(source, opts)));
+    .action(async (source, opts) => {
+    const { adfActionBoundary, adfToMarkdownAction } = await import("./commands/jira.js");
+    return adfActionBoundary("to-markdown", opts, () => adfToMarkdownAction(source, opts));
+});
 adfConverter(adf.command("from-markdown"))
     .description("Convert a Markdown document to ADF")
     .addHelpText("after", "\nThe default format already emits pure ADF JSON, so --format json wraps that document\nin the result envelope rather than changing its encoding. Frontmatter is dropped with\na finding rather than becoming body content.\n\nExit codes:\n  0  Converted; read diagnostics to learn what was approximated\n  1  Invocation or I/O error\n  2  An error, or any approximation under --strict")
-    .action((source, opts) => adfActionBoundary("from-markdown", opts, () => adfFromMarkdownAction(source, opts)));
+    .action(async (source, opts) => {
+    const { adfActionBoundary, adfFromMarkdownAction } = await import("./commands/jira.js");
+    return adfActionBoundary("from-markdown", opts, () => adfFromMarkdownAction(source, opts));
+});
 adfCommon(adf.command("validate"))
     .description("Check an ADF document's structure without converting it")
     .option("--strict", "Treat an unrecognized node or mark type as a blocking finding")
     .addHelpText("after", "\nChecks nesting, required content, and attribute constraints against this tool's own\ncontent model. It is not a wrapper around Atlassian's schema: a node type the model\ndoes not know reports AD100 rather than being judged.\n\nExit codes:\n  0  No structural errors\n  1  Invocation or I/O error, or the input is not an ADF document\n  2  Invalid structure, or an unknown node type under --strict")
-    .action((source, opts) => adfActionBoundary("validate", opts, () => adfValidateAction(source, opts)));
+    .action(async (source, opts) => {
+    const { adfActionBoundary, adfValidateAction } = await import("./commands/jira.js");
+    return adfActionBoundary("validate", opts, () => adfValidateAction(source, opts));
+});
 adfCommon(adf.command("inspect"))
     .description("List the node and mark types in an ADF document, with per-type fidelity")
     .addHelpText("after", "\nAnswers what a conversion will cost before paying it. A type this tool does not model\nis listed as unsupported rather than omitted.\n\nExit codes:\n  0  Inventory written to stdout\n  1  Invocation or I/O error, or the input is not an ADF document")
-    .action((source, opts) => adfActionBoundary("inspect", opts, () => adfInspectAction(source, opts)));
+    .action(async (source, opts) => {
+    const { adfActionBoundary, adfInspectAction } = await import("./commands/jira.js");
+    return adfActionBoundary("inspect", opts, () => adfInspectAction(source, opts));
+});
+const pdf = program
+    .command("pdf")
+    .description("Read PDF documents: text, structure, embedded files, and conversion to Markdown")
+    .addHelpText("after", "\nEvery subcommand is a local, deterministic read: no credentials, no network, and no model\ncall. Project configuration is not consulted.\n\nThis toolset never writes a PDF. There is no merge, split, page reorder, form fill, or\nredact: input is a PDF, output is Markdown, text, or JSON.\n\nInput is bounded before it is parsed, because a PDF is a container format that usually\narrives off a network. Symlinks are resolved, a non-regular file is refused on the open\ndescriptor, and --max-bytes, --timeout, and --max-pages cap the read, the parse, and the\npage count. Embedded JavaScript, launch, and submit actions are never executed.\n\nStart with `pdf inspect`: document.tagged and the per-page text layer decide what every\nother subcommand can tell you.\n\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json");
+const pdfCommon = (command) => command
+    .argument("<file>", "Input PDF file, or - for stdin")
+    .option("--format <fmt>", "Output format: llm, human, json", "llm")
+    .option("--envelope", "Wrap --format json output in the versioned result envelope")
+    .option("--max-bytes <n>", "Maximum input size in bytes (default: 67108864)")
+    .option("--max-pages <n>", "Refuse a document with more pages than this (default: 5000)")
+    .option("--timeout <ms>", "Wall-clock budget for parsing, in milliseconds (default: 30000)");
+const pdfDocument = (command) => pdfCommon(command)
+    .option("--pages <ranges>", "Pages to read, e.g. 1,3,5-8; every page by default")
+    .option("--output <file>", "Write the output to this file instead of stdout")
+    .option("--strict", "Treat approximations as blocking findings");
+pdfCommon(pdf.command("inspect"))
+    .description("Report page count, metadata, tagging, and a per-page text-layer forecast")
+    .addHelpText("after", "\nAnswers what a conversion will cost before paying it, and whether a document needs OCR at\nall. Each page is classified present, sparse, or absent by glyph count per square inch; an\nabsent text layer means the page is an image and `pdf text` returns nothing for it. The\ncharacter count and density are reported beside the label, so a caller who disagrees with\nthe threshold can re-classify from the evidence.\n\ndocument.tagged is the field to read first: a tagged document carries a structure tree that\nnames its own paragraphs, headings, and lists, so `pdf to-markdown` infers almost nothing.\ndocument.structured is the measured version of that claim — some producers declare tagging\nand ship an empty tree.\n\nExit codes:\n  0  Inventory written to stdout\n  1  Invocation or I/O error, or the input is not a PDF\n  2  A page could not be analyzed, leaving the inventory incomplete")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfInspectAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("inspect", file, opts, () => pdfInspectAction(file, opts));
+});
+pdfDocument(pdf.command("text"))
+    .description("Extract the text layer, page by page")
+    .addHelpText("after", "\nExtracts the text a document already carries. It does not recognize text in an image: a\nscanned page has no text layer and reports AP050 rather than returning an empty string with\nno explanation. Run `pdf inspect` first to see which pages have one.\n\nPages are separated by a form feed on stdout, as pdftotext does. Under --format json they\nare a per-page array instead, and a page that could not be decoded is absent from it rather\nthan present and empty.\n\nExamples:\n  cairn pdf text report.pdf --pages 1,4-6\n  cairn pdf text scan.pdf --strict     # fail if any page is an image\n\nExit codes:\n  0  Text written to stdout\n  1  Invocation or I/O error, or the input is not a PDF\n  2  A page could not be decoded, or a page has no text layer under --strict")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfTextAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("text", file, opts, () => pdfTextAction(file, opts));
+});
+pdfCommon(pdf.command("outline"))
+    .description("Read the document outline (bookmarks) as a heading tree")
+    .addHelpText("after", "\nReports the outline the document declares, not one inferred from its text. A document with\nno /Outlines returns an empty tree and exits 0: that is an answer, not a failure. An entry\nwhose destination does not resolve keeps its title with a null page and reports AP080,\nrather than being dropped.\n\nURLs are recorded and never followed. An entry whose scheme the parser refused carries no\nurl at all, rather than presenting a javascript: or file: URI as though it were clickable.\n\nExit codes:\n  0  Outline written to stdout, possibly empty\n  1  Invocation or I/O error, or the input is not a PDF\n  2  An outline entry could not be resolved")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfOutlineAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("outline", file, opts, () => pdfOutlineAction(file, opts));
+});
+pdfCommon(pdf.command("validate"))
+    .description("Check a PDF's structural integrity without converting it")
+    .option("--strict", "Treat an unsupported construct as a blocking finding")
+    .addHelpText("after", "\nReports what the parser itself can see: a damaged cross-reference table, a content stream\nit could not decode, a font it could not resolve, a page tree cycle, an unsupported filter.\n\nIt is deliberately not a PDF/A or PDF/UA conformance checker. Full conformance validation is\nveraPDF's job and is a Java program; claiming it here would be a lie. It also does not\nverify signatures or judge whether a document renders, neither of which is reachable\nwithout rasterizing. This is the same line `jira adf validate` draws when it reports AD100\nfor a node type it does not model.\n\nA cross-reference table that was damaged but successfully rebuilt reports AP101 and still\nparses, so a finding here does not mean the document is unreadable.\n\nExit codes:\n  0  No structural errors\n  1  Invocation or I/O error, or the input is not a PDF\n  2  Invalid structure, or an unsupported construct under --strict")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfValidateAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("validate", file, opts, () => pdfValidateAction(file, opts));
+});
+pdfDocument(pdf.command("to-markdown"))
+    .description("Convert a PDF's content to Markdown, reporting what was inferred")
+    .addHelpText("after", "\nA PDF has no paragraphs, no headings, and no lists — only positioned glyph runs. On an\nuntagged page every block boundary is inferred from geometry and font metrics, so the\nconversion is approximate by construction; a tagged page uses the structure tree instead and\nis close to exact. The path is chosen per page, and AP200 always reports which was used.\n\nRead document.tagged before trusting the structure, and run `pdf inspect` before running\nthis at all.\n\nTabular content is flattened to one paragraph per row and reported. A real table is only\nemitted for a tagged document: a geometric reconstruction gets merged and wrapped cells\nwrong and produces a confidently wrong table that cannot be told from a right one.\n\n--pages restricts which pages are emitted, not what the inference saw — the modal body font\nand repeated-header detection still run over the whole document, so a page range is a true\nsubset of the full conversion.\n\nEmits no frontmatter: a PDF's metadata is `pdf inspect`'s answer.\n\nExit codes:\n  0  Converted; read diagnostics to learn what was inferred or lost\n  1  Invocation or I/O error, or the input is not a PDF\n  2  An error, or any approximation under --strict")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfToMarkdownAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("to-markdown", file, opts, () => pdfToMarkdownAction(file, opts));
+});
+pdfCommon(pdf.command("attachments"))
+    .description("List the files embedded in a PDF, and optionally write them out")
+    .option("--extract <dir>", "Write the embedded files into this directory")
+    .option("--strict", "Treat a sanitized name or an unreadable file as a blocking finding")
+    .addHelpText("after", "\nEmbedded files are files carried inside the document. Without --extract this only\ninventories them — name, size, SHA-256 — which is what makes it safe to reach for and\nsafe to expose over MCP; writing is the opt-in.\n\nBinary never goes to stdout under any format. --extract is the only way bytes leave this\ncommand.\n\nA stored file name is attacker-controlled and is sanitized before it is used as a path. The\npayload reports both the raw stored name and the name actually written, so a rename is\nvisible. Extraction is planned in full before anything is written: one refused destination\nmeans no file is written at all, and a name that collides is written under a resolved name\nrather than overwriting anything.\n\nNothing embedded is ever executed or opened.\n\nExamples:\n  cairn pdf attachments report.pdf\n  cairn pdf attachments report.pdf --extract ./out\n\nExit codes:\n  0  Listed, and written when --extract was given\n  1  Invocation or I/O error, or the input is not a PDF\n  2  A destination was refused, an embedded file could not be decoded, or any\n     name had to be sanitized under --strict")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfAttachmentsAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("attachments", file, opts, () => pdfAttachmentsAction(file, opts));
+});
+pdfCommon(pdf.command("forms"))
+    .description("List AcroForm fields and their current values")
+    .option("--strict", "Treat a form this cannot fully read as a blocking finding")
+    .addHelpText("after", "\nReads and never writes. Filling a form is manipulation, which this toolset does not do, so\nthere is no flag that sets a value.\n\nOne field can render as several widgets across pages; they are folded into one row carrying\na count. A field's page is reported 1-based, matching every other page number here.\n\nA field marked as a password field is reported with its value and the flag. The same bytes\nare already reachable through `pdf text`, so withholding them would be theatre.\n\nAn XFA-only document reports type:xfa with no fields and AP311, never a silently empty\nlist: its values live in an XML packet this does not read.\n\nExit codes:\n  0  Reported, including a document that carries no form\n  1  Invocation or I/O error, or the input is not a PDF\n  2  Under --strict, a form this cannot fully read — an XFA form, or a field\n     that resolves to no page")
+    .action(async (file, opts) => {
+    const { pdfActionBoundary, pdfFormsAction } = await import("./commands/pdf.js");
+    return pdfActionBoundary("forms", file, opts, () => pdfFormsAction(file, opts));
+});
 const scripts = program
     .command("scripts")
     .description("Resolve and run named scripts declared in .cairn.yml")
@@ -482,16 +622,25 @@ scriptsCommon(scripts.command("run"))
     .argument("<name>", "Script name declared under scripts: in a .cairn.yml")
     .argument("[args...]", "Arguments forwarded to the script, after --")
     .addHelpText("after", "\nExamples:\n  cairn scripts run gather-context\n  cairn scripts run lint-changed -- --since main\n\nIn llm and human formats the script's streams pass through untouched and its exit\nstatus becomes this process's exit status, so a hook reads the real code. With\n--format json the streams are captured into the payload instead.\n\nRefuses to run outside a Git repository unless --root sets the boundary explicitly.\n\nExit codes:\n  *  llm and human: the script's own exit status, verbatim\n  0  --format json: the script exited 0\n  1  Unresolvable name, or the script could not be started\n  2  --format json: the script exited non-zero or was killed by a signal")
-    .action((name, args, opts) => scriptsRunAction(name, args, opts));
+    .action(async (name, args, opts) => {
+    const { scriptsRunAction } = await import("./commands/scripts.js");
+    return scriptsRunAction(name, args, opts);
+});
 scriptsCommon(scripts.command("which"))
     .description("Show which registry defines a script, without running it")
     .argument("<name>", "Script name")
     .addHelpText("after", "\nReports the winning .cairn.yml, the working directory the script would run in,\nand any same-named definitions it shadows.\n\nExit codes:\n  0  The name resolved\n  1  Invocation error\n  2  No script by that name")
-    .action((name, opts) => scriptsWhichAction(name, opts));
+    .action(async (name, opts) => {
+    const { scriptsWhichAction } = await import("./commands/scripts.js");
+    return scriptsWhichAction(name, opts);
+});
 scriptsCommon(scripts.command("list"))
     .description("List every script visible from the working directory")
     .addHelpText("after", "\nNearest definition wins, so a name declared in a nested registry hides the one above\nit. Files that could not be parsed are reported rather than skipped silently.\n\nExit codes:\n  0  Listing written to stdout\n  1  Invocation error\n  2  A consulted configuration file could not be read")
-    .action((opts) => scriptsListAction(opts));
+    .action(async (opts) => {
+    const { scriptsListAction } = await import("./commands/scripts.js");
+    return scriptsListAction(opts);
+});
 const usage = program
     .command("usage")
     .description("Report on Claude Code usage from its own session logs")
@@ -521,52 +670,79 @@ usageCommon(usage.command("summary"))
     .description("Headline totals: sessions, tokens, tools, and features")
     .addHelpText("after", "\nToken counts deduplicate the per-response fan-out in the source transcripts, where\none API response is written as several lines each carrying an identical copy of its\nusage. Subagent transcripts are included; --no-subagents excludes them." +
     usageExitCodes)
-    .action((opts) => usageSummaryAction(opts));
+    .action(async (opts) => {
+    const { usageSummaryAction } = await import("./commands/usage.js");
+    return usageSummaryAction(opts);
+});
 usageCommon(usage.command("tokens"))
     .description("Token usage rolled up by model, time, project, or session")
     .option("--by <dimension>", "model, day, week, month, project, session, provider", "model")
     .addHelpText("after", "\nCache writes report an authoritative total alongside a best-effort split by TTL,\nwhich the oldest records do not carry." +
     usageExitCodes)
-    .action((opts) => usageTokensAction(opts));
+    .action(async (opts) => {
+    const { usageTokensAction } = await import("./commands/usage.js");
+    return usageTokensAction(opts);
+});
 usageCommon(usage.command("tools"))
     .description("Tool calls rolled up by name, kind, server, day, or session")
     .option("--by <dimension>", "name, kind, server, day, session, provider", "name")
     .option("--kind <kind>", "Limit to builtin, mcp, agent, or skill calls")
     .addHelpText("after", "\nAn MCP tool named mcp__<server>__<tool> is split into its server and tool halves,\nso --by server and --kind mcp are how that surface is queried." +
     usageExitCodes)
-    .action((opts) => usageToolsAction(opts));
+    .action(async (opts) => {
+    const { usageToolsAction } = await import("./commands/usage.js");
+    return usageToolsAction(opts);
+});
 usageCommon(usage.command("sessions"))
     .description("One row per session, with its subagent transcripts folded in")
     .option("--sort <order>", "recent, tokens, tools, duration", "recent")
     .addHelpText("after", "\n--last n selects the n most recently active sessions rather than the n most recent\nfiles, so a session's subagent spend is never dropped from its own row." +
     usageExitCodes)
-    .action((opts) => usageSessionsAction(opts));
+    .action(async (opts) => {
+    const { usageSessionsAction } = await import("./commands/usage.js");
+    return usageSessionsAction(opts);
+});
 usageCommon(usage.command("projects"))
     .description("Usage rolled up by the directory each session ran in")
     .addHelpText("after", "\nProject identity is the working directory recorded inside the transcripts, not the\nlog directory name, whose separator substitution is not reliably invertible." +
     usageExitCodes)
-    .action((opts) => usageProjectsAction(opts));
+    .action(async (opts) => {
+    const { usageProjectsAction } = await import("./commands/usage.js");
+    return usageProjectsAction(opts);
+});
 usageCommon(usage.command("skills"))
     .description("Skill invocations by name")
     .addHelpText("after", "\nCounted from every surface that records one: the Skill tool, the invoked-skill\nattachments, and the slash-command form." +
     usageExitCodes)
-    .action((opts) => usageSkillsAction(opts));
+    .action(async (opts) => {
+    const { usageSkillsAction } = await import("./commands/usage.js");
+    return usageSkillsAction(opts);
+});
 usageCommon(usage.command("agents"))
     .description("Subagent activity by agent type, with real token cost")
     .option("--by <dimension>", "role, path", "role")
     .addHelpText("after", "\nSpawn counts come from the parent's tool calls; tokens come from the subagent\ntranscripts themselves. The parent's own tool result records only the subagent's\nfinal message and understates its spend several-fold, so it is not used.\n\n--by role groups by the reusable agent type; --by path groups by the task-specific\nidentifier, which only some providers record." +
     usageExitCodes)
-    .action((opts) => usageAgentsAction(opts));
+    .action(async (opts) => {
+    const { usageAgentsAction } = await import("./commands/usage.js");
+    return usageAgentsAction(opts);
+});
 usageCommon(usage.command("hooks"))
     .description("Hook executions by event and tool, with failures and latency")
     .addHelpText("after", "\nKeyed by <Event>:<Tool>. Stop hooks report through a session summary record rather\nthan a per-execution one and are counted under Stop." +
     usageExitCodes)
-    .action((opts) => usageHooksAction(opts));
+    .action(async (opts) => {
+    const { usageHooksAction } = await import("./commands/usage.js");
+    return usageHooksAction(opts);
+});
 usageCommon(usage.command("commands"))
     .description("Slash command usage by name")
     .addHelpText("after", "\nSlash commands are not a field in the logs; they are a marker block inside the\nuser's message text, and are extracted from it." +
     usageExitCodes)
-    .action((opts) => usageCommandsAction(opts));
+    .action(async (opts) => {
+    const { usageCommandsAction } = await import("./commands/usage.js");
+    return usageCommandsAction(opts);
+});
 usage
     .command("providers")
     .description("List the log sources usage can report on")
@@ -574,18 +750,27 @@ usage
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .option("--logs <dir>", "Test discovery against this directory")
     .addHelpText("after", "\nReports whether each provider has left anything on this machine and what its logs\ncan answer. Reports read those capabilities rather than branching on a provider\nname, so registering a second assistant is one module and one registry line.\n\nExit codes:\n  0  Listing written to stdout\n  1  Invocation error")
-    .action((opts) => usageProvidersAction(opts));
+    .action(async (opts) => {
+    const { usageProvidersAction } = await import("./commands/usage.js");
+    return usageProvidersAction(opts);
+});
 usageCommon(usage.command("index"))
     .description("Show, rebuild, or clear the usage store")
     .option("--rebuild", "Re-parse every transcript and rewrite its rows")
     .option("--clear", "Drop the selected providers' rows")
     .addHelpText("after", "\nThe store keys on each transcript's path, size, and modification time. Transcripts\nare append-only, so an unchanged file cannot hold a record the stored aggregate is\nmissing, and only files that grew are reopened.\n\nOne SQLite store under XDG_DATA_HOME holds every provider, so --clear is scoped by\n--provider and the size it reports is the whole file's.\n\nExit codes:\n  0  Status written, or the store was rebuilt or cleared\n  1  Invocation error")
-    .action((opts) => usageIndexAction(opts));
+    .action(async (opts) => {
+    const { usageIndexAction } = await import("./commands/usage.js");
+    return usageIndexAction(opts);
+});
 usageCommon(usage.command("import"))
     .description("Import transcripts into the usage store")
     .option("--rebuild", "Re-parse every transcript, not only the ones that changed")
     .addHelpText("after", "\nReports populate the store on first use, so this is never required. It exists to do\nthat work deliberately: to warm a cold store before a timed report, to run on a\nschedule, and to see the import counters without a report wrapped around them.\n\nThe store keeps two grains. Day buckets answer every report this tool offers; the\nevent rows answer what a day bucket cannot, and are there for anything querying the\nSQLite file directly.\n\nExit codes:\n  0  Import completed\n  1  Invocation error, or no logs found\n  2  --strict was given and a transcript could not be fully read")
-    .action((opts) => usageImportAction(opts));
+    .action(async (opts) => {
+    const { usageImportAction } = await import("./commands/usage.js");
+    return usageImportAction(opts);
+});
 usage
     .command("migrate")
     .description("Apply pending usage store migrations")
@@ -593,7 +778,10 @@ usage
     .option("--envelope", "Wrap --format json output in the versioned result envelope")
     .option("--check", "Report what is pending without writing")
     .addHelpText("after", "\nEvery command that opens the store migrates it, so this is needed only to migrate\ndeliberately, or with --check to see what is pending first.\n\nThe store is migrated rather than discarded. Once transcripts have been archived and\npruned it may be the only record of that usage left, so a version bump carries the\ndata forward instead of throwing it away. A store written by a newer cairn is\nrefused rather than guessed at.\n\nExit codes:\n  0  Store is current, or was migrated\n  1  Invocation error, or the store is newer than this build understands")
-    .action((opts) => usageMigrateAction(opts));
+    .action(async (opts) => {
+    const { usageMigrateAction } = await import("./commands/usage.js");
+    return usageMigrateAction(opts);
+});
 const archive = program
     .command("archive")
     .description("Archive plans, artifacts, and logs into long-term compressed storage")
@@ -613,11 +801,17 @@ archiveCommon(archive.command("run"))
     .option("-v, --verbose", "Print one line per artifact to stderr")
     .option("--no-progress", "Suppress the progress line")
     .addHelpText("after", "\nplans and artifacts are archived by default; transcripts and logs are opt-in because\nthey are three orders of magnitude larger.\n\nIncremental twice over: a file whose size and modification time already match the index\nis never opened, and a file whose content is already stored is never written again, so a\nsecond run over an unchanged corpus costs one stat per file.\n\nA file that changes gets a new row against a new blob, so the archive keeps every version\nit ever saw.\n\nProgress:\n  A run over a full corpus is tens of thousands of files and takes minutes, so it draws a\n  progress line on stderr. That line rewrites itself in place, so it appears only when\n  stderr is a terminal, --format is not json, and CI is unset; --no-progress suppresses it.\n\n  -v prints one durable line per artifact instead, giving its disposition (stored,\n  duplicate, unchanged, skipped), size, hash, and path. It is not gated on a terminal,\n  so `cairn archive run -v 2> archive.log` is the way to keep a record of a long run.\n\nExit codes:\n  0  Run completed\n  1  Invocation error, or no logs found")
-    .action((opts) => archiveRunAction(opts));
+    .action(async (opts) => {
+    const { archiveRunAction } = await import("./commands/archive.js");
+    return archiveRunAction(opts);
+});
 archiveCommon(archive.command("status"))
     .description("Report what the archive holds")
     .addHelpText("after", "\nExit codes:\n  0  Status written\n  1  Invocation error")
-    .action((opts) => archiveStatusAction(opts));
+    .action(async (opts) => {
+    const { archiveStatusAction } = await import("./commands/archive.js");
+    return archiveStatusAction(opts);
+});
 archiveCommon(archive.command("list"))
     .description("List archived artifacts")
     .option("--provider <name>", "Limit to one log source, or all", "all")
@@ -625,28 +819,43 @@ archiveCommon(archive.command("list"))
     .option("--since <day>", "Only artifacts last seen on or after this ISO day")
     .option("--top <n>", "Rows to show; 0 for all", "20")
     .addHelpText("after", "\nOne row per archived path, newest first. A path the archive holds several versions of is\nlisted once, with the count.\n\nExit codes:\n  0  Listing written\n  1  Invocation error")
-    .action((opts) => archiveListAction(opts));
+    .action(async (opts) => {
+    const { archiveListAction } = await import("./commands/archive.js");
+    return archiveListAction(opts);
+});
 archiveCommon(archive.command("extract"))
     .argument("<target>", "Original path, or a sha256 prefix")
     .description("Write an archived file back out")
     .option("--out <dir>", "Directory to write into", ".")
     .addHelpText("after", "\nA path resolves to its newest version; name a hash to reach an older one. The content is\nre-hashed on the way out, so an archive whose index and bytes disagree reports that rather\nthan handing back the wrong file.\n\nExit codes:\n  0  File written\n  1  Invocation error, or nothing matched")
-    .action((target, opts) => archiveExtractAction(target, opts));
+    .action(async (target, opts) => {
+    const { archiveExtractAction } = await import("./commands/archive.js");
+    return archiveExtractAction(target, opts);
+});
 archiveCommon(archive.command("verify"))
     .description("Check the archive against its index")
     .option("--deep", "Also decompress every segment and re-hash each blob")
     .addHelpText("after", "\nThe default pass hashes each segment file, catching truncation and corruption for the cost\nof reading it. --deep additionally re-hashes every member, which catches an index whose\noffsets no longer point where it claims.\n\nExit codes:\n  0  Archive matches its index\n  1  Invocation error\n  2  The archive and its index disagree")
-    .action((opts) => archiveVerifyAction(opts));
+    .action(async (opts) => {
+    const { archiveVerifyAction } = await import("./commands/archive.js");
+    return archiveVerifyAction(opts);
+});
 archiveCommon(archive.command("migrate"))
     .description("Apply pending archive index migrations")
     .option("--check", "Report what is pending without writing")
     .addHelpText("after", "\nThe index is migrated rather than discarded: it is the only map from an original path to\nthe segment holding that file's bytes. An index written by a newer cairn is refused rather\nthan guessed at.\n\nExit codes:\n  0  Index is current, or was migrated\n  1  Invocation error, or the index is newer than this build understands")
-    .action((opts) => archiveMigrateAction(opts));
+    .action(async (opts) => {
+    const { archiveMigrateAction } = await import("./commands/archive.js");
+    return archiveMigrateAction(opts);
+});
 // Internal: refreshes the cached latest version. Spawned detached by the notifier.
 program
     .command(REFRESH_COMMAND, { hidden: true })
     .description("Internal: refresh the cached latest-version check")
-    .action(() => refreshUpdateCacheAction(packageName));
+    .action(async () => {
+    const { refreshUpdateCacheAction } = await import("./commands/update-check.js");
+    return refreshUpdateCacheAction(packageName);
+});
 const md = program
     .command("md")
     .description("Agent-agnostic Markdown validation and analysis commands")
@@ -676,14 +885,17 @@ common(md.command("lint"))
     .option("--include <glob>", "Markdown include glob (repeatable)", collect)
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  All checks pass\n  2  One or more issues found")
-    .action((files, opts) => lintAction(files, commandOptions("lint", {
-    style: projectConfig.checks.markdownlint,
-    mermaid: projectConfig.checks.mermaid,
-    katex: projectConfig.checks.katex,
-    references: projectConfig.checks.references,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (files, opts) => {
+    const { lintAction } = await import("./commands/lint.js");
+    return lintAction(files, commandOptions("lint", {
+        style: projectConfig.checks.markdownlint,
+        mermaid: projectConfig.checks.mermaid,
+        katex: projectConfig.checks.katex,
+        references: projectConfig.checks.references,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("lint-dir"))
     .description("Run all checks on all markdown files in a directory")
     .argument("[directory]", "Path to the directory to scan (default: workspace root)")
@@ -702,16 +914,19 @@ common(md.command("lint-dir"))
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .option("--changed-since <revision>", "Only files changed since a Git revision")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  All files pass all checks\n  2  One or more issues found in any file")
-    .action((directory, opts) => lintDirAction(directory ?? projectConfig.root, commandOptions("lint-dir", {
-    style: projectConfig.checks.markdownlint,
-    summary: false,
-    concurrency: String(defaultLintConcurrency()),
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-    mermaid: projectConfig.checks.mermaid,
-    katex: projectConfig.checks.katex,
-    references: projectConfig.checks.references,
-}, opts)));
+    .action(async (directory, opts) => {
+    const { lintDirAction } = await import("./commands/lint-dir.js");
+    return lintDirAction(directory ?? projectConfig.root, commandOptions("lint-dir", {
+        style: projectConfig.checks.markdownlint,
+        summary: false,
+        concurrency: String(defaultLintConcurrency()),
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+        mermaid: projectConfig.checks.mermaid,
+        katex: projectConfig.checks.katex,
+        references: projectConfig.checks.references,
+    }, opts));
+});
 common(md.command("refs"))
     .description("List all references from a markdown file and check if targets exist")
     .argument("<file>", "Path to the markdown file to inspect")
@@ -722,7 +937,10 @@ common(md.command("refs"))
     .option("-i, --images", "Include image references")
     .option("--no-images", "Exclude image references")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  All referenced targets exist\n  2  One or more targets missing")
-    .action((file, opts) => refsAction(file, commandOptions("refs", { external: false, anchors: false, images: false }, opts)));
+    .action(async (file, opts) => {
+    const { refsAction } = await import("./commands/refs.js");
+    return refsAction(file, commandOptions("refs", { external: false, anchors: false, images: false }, opts));
+});
 common(md.command("refs-to"))
     .description("Find all markdown files that reference a given file")
     .argument("<file>", "Path to the file to find references to")
@@ -730,19 +948,28 @@ common(md.command("refs-to"))
     .option("--include <glob>", "Markdown include glob (repeatable)", collect)
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, directory, opts) => refsToAction(file, directory ?? projectConfig.root, commandOptions("refs-to", { include: projectConfig.files.include, exclude: projectConfig.files.exclude }, opts)));
+    .action(async (file, directory, opts) => {
+    const { refsToAction } = await import("./commands/refs-to.js");
+    return refsToAction(file, directory ?? projectConfig.root, commandOptions("refs-to", { include: projectConfig.files.include, exclude: projectConfig.files.exclude }, opts));
+});
 common(md.command("headers"))
     .description("Extract headings from a markdown file with line numbers")
     .argument("<file>", "Path to the markdown file")
     .option("--max-depth <n>", "Maximum heading depth to include (1-6)")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => headersAction(file, commandOptions("headers", { maxDepth: "6" }, opts)));
+    .action(async (file, opts) => {
+    const { headersAction } = await import("./commands/headers.js");
+    return headersAction(file, commandOptions("headers", { maxDepth: "6" }, opts));
+});
 common(md.command("outline"))
     .description("Show headings in an indented outline format")
     .argument("<file>", "Path to the markdown file")
     .option("--max-depth <n>", "Maximum heading depth to include (1-6)")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => outlineAction(file, commandOptions("outline", { maxDepth: "6" }, opts)));
+    .action(async (file, opts) => {
+    const { outlineAction } = await import("./commands/outline.js");
+    return outlineAction(file, commandOptions("outline", { maxDepth: "6" }, opts));
+});
 common(md.command("toc"))
     .description("Generate a markdown table of contents from headings")
     .argument("<file>", "Path to the markdown file")
@@ -754,7 +981,10 @@ common(md.command("toc"))
     .option("--write", "Update the content between TOC markers")
     .option("--dry-run", "Print the proposed marker block without writing")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => tocAction(file, commandOptions("toc", { maxDepth: "6", minDepth: "1", ordered: false, check: false, write: false, dryRun: false }, opts)));
+    .action(async (file, opts) => {
+    const { tocAction } = await import("./commands/toc.js");
+    return tocAction(file, commandOptions("toc", { maxDepth: "6", minDepth: "1", ordered: false, check: false, write: false, dryRun: false }, opts));
+});
 common(md.command("graph"))
     .description("Analyze the workspace Markdown document graph")
     .argument("[directory]", "Directory to scan (default: workspace root)")
@@ -765,14 +995,17 @@ common(md.command("graph"))
     .option("--include <glob>", "Markdown include glob (repeatable)", collect)
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .addHelpText("after", "\n--focus narrows the report and the mermaid/dot diagrams to the documents within\n--depth undirected hops, so backlinks are included. The graph is analyzed in full\nfirst, so inbound/outbound counts, components, and cycles remain whole-workspace\nfacts rather than artifacts of the narrowing.\n\nExit codes:\n  0  No broken or unreachable documents\n  2  Broken or unreachable documents found")
-    .action((directory, opts) => graphAction(directory ?? projectConfig.root, commandOptions("graph", {
-    output: "report",
-    depth: "1",
-    focus: [],
-    entry: projectConfig.files.entryPoints,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (directory, opts) => {
+    const { graphAction } = await import("./commands/graph.js");
+    return graphAction(directory ?? projectConfig.root, commandOptions("graph", {
+        output: "report",
+        depth: "1",
+        focus: [],
+        entry: projectConfig.files.entryPoints,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("validate-frontmatter"))
     .description("Validate Markdown frontmatter with schema and workspace rules")
     .argument("<paths...>", "Markdown files, directories, or globs")
@@ -781,11 +1014,14 @@ common(md.command("validate-frontmatter"))
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .option("--changed-since <revision>", "Only files changed since a Git revision")
     .addHelpText("after", "\nExit codes:\n  0  Frontmatter is valid\n  1  Configuration or schema error\n  2  Validation findings")
-    .action((target, opts) => validateFrontmatterAction(target, commandOptions("validate-frontmatter", {
-    schema: projectConfig.frontmatter.schema,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (target, opts) => {
+    const { validateFrontmatterAction } = await import("./commands/validate-frontmatter.js");
+    return validateFrontmatterAction(target, commandOptions("validate-frontmatter", {
+        schema: projectConfig.frontmatter.schema,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("audit"))
     .description("Run composable checks across a Markdown workspace")
     .argument("[directory]", "Directory to scan (default: workspace root)")
@@ -819,32 +1055,38 @@ common(md.command("audit"))
     .option("--include <glob>", "Markdown include glob (repeatable)", collect)
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .addHelpText("after", "\nA baseline suppresses findings it already records, so only regressions fail. Entries\nare keyed on checker, workspace-relative path, and message — not line number — so\nediting prose above a known finding does not resurface it. Recording is explicit:\n--write-baseline writes the file and exits 0, and the two flags cannot be combined.\n\nExit codes:\n  0  Audit passed, or a baseline was written\n  1  Operational error\n  2  Actionable findings")
-    .action((directory, opts) => auditAction(directory ?? projectConfig.root, commandOptions("audit", {
-    summary: false,
-    external: projectConfig.checks.external,
-    frontmatter: projectConfig.checks.frontmatter,
-    graph: projectConfig.checks.graph,
-    toc: projectConfig.checks.toc,
-    snippets: projectConfig.checks.snippets,
-    style: projectConfig.checks.markdownlint,
-    mermaid: projectConfig.checks.mermaid,
-    katex: projectConfig.checks.katex,
-    references: projectConfig.checks.references,
-    concurrency: String(defaultLintConcurrency()),
-    timeout: "5000",
-    retry: "1",
-    entry: projectConfig.files.entryPoints,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-    maxDepth: String(projectConfig.commands.toc?.maxDepth ?? "6"),
-    minDepth: String(projectConfig.commands.toc?.minDepth ?? "1"),
-    ordered: Boolean(projectConfig.commands.toc?.ordered ?? false),
-}, opts)));
+    .action(async (directory, opts) => {
+    const { auditAction } = await import("./commands/audit.js");
+    return auditAction(directory ?? projectConfig.root, commandOptions("audit", {
+        summary: false,
+        external: projectConfig.checks.external,
+        frontmatter: projectConfig.checks.frontmatter,
+        graph: projectConfig.checks.graph,
+        toc: projectConfig.checks.toc,
+        snippets: projectConfig.checks.snippets,
+        style: projectConfig.checks.markdownlint,
+        mermaid: projectConfig.checks.mermaid,
+        katex: projectConfig.checks.katex,
+        references: projectConfig.checks.references,
+        concurrency: String(defaultLintConcurrency()),
+        timeout: "5000",
+        retry: "1",
+        entry: projectConfig.files.entryPoints,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+        maxDepth: String(projectConfig.commands.toc?.maxDepth ?? "6"),
+        minDepth: String(projectConfig.commands.toc?.minDepth ?? "1"),
+        ordered: Boolean(projectConfig.commands.toc?.ordered ?? false),
+    }, opts));
+});
 common(md.command("stats"))
     .description("Show document statistics (words, headings, links, code blocks)")
     .argument("<file>", "Path to the markdown file")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => statsAction(file, commandOptions("stats", {}, opts)));
+    .action(async (file, opts) => {
+    const { statsAction } = await import("./commands/stats.js");
+    return statsAction(file, commandOptions("stats", {}, opts));
+});
 common(md.command("code-blocks"))
     .description("List fenced code blocks with language and line ranges")
     .argument("<file>", "Path to the markdown file")
@@ -852,12 +1094,18 @@ common(md.command("code-blocks"))
     .option("--content", "Include code block content in output")
     .option("--no-content", "Exclude code block content from output")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => codeBlocksAction(file, commandOptions("code-blocks", { content: false }, opts)));
+    .action(async (file, opts) => {
+    const { codeBlocksAction } = await import("./commands/code-blocks.js");
+    return codeBlocksAction(file, commandOptions("code-blocks", { content: false }, opts));
+});
 common(md.command("structure"))
     .description("Show document structure skeleton (headings, code blocks, lists, math)")
     .argument("<file>", "Path to the markdown file")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => structureAction(file, commandOptions("structure", {}, opts)));
+    .action(async (file, opts) => {
+    const { structureAction } = await import("./commands/structure.js");
+    return structureAction(file, commandOptions("structure", {}, opts));
+});
 common(md.command("links"))
     .description("List all links with context, grouped by type")
     .argument("<file>", "Path to the markdown file")
@@ -865,7 +1113,10 @@ common(md.command("links"))
     .option("--no-broken-only", "Include valid links")
     .option("--type <type>", "Filter by type: internal, external, image, anchor")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  All link targets exist (or not checked)\n  2  One or more broken links found")
-    .action((file, opts) => linksAction(file, commandOptions("links", { brokenOnly: false }, opts)));
+    .action(async (file, opts) => {
+    const { linksAction } = await import("./commands/links.js");
+    return linksAction(file, commandOptions("links", { brokenOnly: false }, opts));
+});
 common(md.command("section"))
     .description("Extract content of a section by heading text or slug")
     .argument("<file>", "Path to the markdown file")
@@ -877,7 +1128,10 @@ common(md.command("section"))
     .option("--raw", "Output raw markdown only (no metadata)")
     .option("--no-raw", "Include section metadata")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  Section found and extracted\n  1  File not found or heading not found")
-    .action((file, heading, opts) => sectionAction(file, heading, commandOptions("section", { includeHeading: true, children: true, raw: false }, opts)));
+    .action(async (file, heading, opts) => {
+    const { sectionAction } = await import("./commands/section.js");
+    return sectionAction(file, heading, commandOptions("section", { includeHeading: true, children: true, raw: false }, opts));
+});
 common(md.command("context"))
     .description("Assemble a reproducible context pack from the workspace graph")
     .argument("[seeds...]", "Markdown files, directories, or globs to start from")
@@ -900,16 +1154,19 @@ common(md.command("context"))
     "Exit codes:\n" +
     "  0  Pack written to stdout, whether or not it was truncated\n" +
     "  1  No seeds given, or a --section heading matched nothing")
-    .action((seeds, opts) => contextAction(seeds, commandOptions("context", {
-    depth: "1",
-    section: [],
-    budget: "0",
-    backlinks: false,
-    children: true,
-    frontmatter: false,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (seeds, opts) => {
+    const { contextAction } = await import("./commands/context.js");
+    return contextAction(seeds, commandOptions("context", {
+        depth: "1",
+        section: [],
+        budget: "0",
+        backlinks: false,
+        children: true,
+        frontmatter: false,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("diff"))
     .description("Summarize Markdown changes by structure rather than by text")
     .argument("[a]", "First file, or the directory to scan with --since")
@@ -930,17 +1187,23 @@ common(md.command("diff"))
     "Exit codes:\n" +
     "  0  Report written to stdout, whether or not anything changed\n" +
     "  1  Bad invocation, a missing file, or an unreadable revision")
-    .action((a, b, opts) => diffAction(a, b, commandOptions("diff", {
-    summary: false,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (a, b, opts) => {
+    const { diffAction } = await import("./commands/diff.js");
+    return diffAction(a, b, commandOptions("diff", {
+        summary: false,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("frontmatter"))
     .description("Parse and display YAML frontmatter from a markdown file")
     .argument("<file>", "Path to the markdown file")
     .option("--key <key>", "Extract a specific key (dot notation for nested keys)")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  Frontmatter found (or no frontmatter)\n  1  File not found or key not found")
-    .action((file, opts) => frontmatterAction(file, commandOptions("frontmatter", {}, opts)));
+    .action(async (file, opts) => {
+    const { frontmatterAction } = await import("./commands/frontmatter.js");
+    return frontmatterAction(file, commandOptions("frontmatter", {}, opts));
+});
 common(md.command("tasks"))
     .description("Extract GFM task list items with completion status")
     .argument("<file>", "Path to the markdown file")
@@ -948,7 +1211,10 @@ common(md.command("tasks"))
     .option("--summary", "Show only summary counts")
     .option("--no-summary", "Show individual tasks")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => tasksAction(file, commandOptions("tasks", { summary: false }, opts)));
+    .action(async (file, opts) => {
+    const { tasksAction } = await import("./commands/tasks.js");
+    return tasksAction(file, commandOptions("tasks", { summary: false }, opts));
+});
 common(md.command("tables"))
     .description("List or extract GFM tables with location and dimensions")
     .argument("<file>", "Path to the markdown file")
@@ -956,7 +1222,10 @@ common(md.command("tables"))
     .option("--no-content", "Exclude table content from output")
     .option("--index <n>", "Extract only the nth table (1-based)")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json")
-    .action((file, opts) => tablesAction(file, commandOptions("tables", { content: false }, opts)));
+    .action(async (file, opts) => {
+    const { tablesAction } = await import("./commands/tables.js");
+    return tablesAction(file, commandOptions("tables", { content: false }, opts));
+});
 common(md.command("check-urls"))
     .description("Validate external URLs across Markdown inputs")
     .argument("<inputs...>", "Markdown files, directories, globs, or -")
@@ -978,21 +1247,24 @@ common(md.command("check-urls"))
     .option("--report-redirects", "Report redirects and final destinations")
     .option("--no-report-redirects", "Do not report redirects")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  All URLs reachable (or no external URLs)\n  2  One or more URLs are broken")
-    .action((file, opts) => checkUrlsAction(file, commandOptions("check-urls", {
-    timeout: "5000",
-    concurrency: "5",
-    retry: "1",
-    includeOk: false,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-    ignore: projectConfig.urls.ignore,
-    ignoreDomain: projectConfig.urls.ignoreDomains,
-    allowedStatus: projectConfig.urls.allowedStatuses,
-    cache: projectConfig.urls.cache,
-    cacheTtl: String(projectConfig.urls.cacheTtl),
-    headFallbackStatus: projectConfig.urls.headFallbackStatuses,
-    reportRedirects: projectConfig.urls.reportRedirects,
-}, opts)));
+    .action(async (file, opts) => {
+    const { checkUrlsAction } = await import("./commands/check-urls.js");
+    return checkUrlsAction(file, commandOptions("check-urls", {
+        timeout: "5000",
+        concurrency: "5",
+        retry: "1",
+        includeOk: false,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+        ignore: projectConfig.urls.ignore,
+        ignoreDomain: projectConfig.urls.ignoreDomains,
+        allowedStatus: projectConfig.urls.allowedStatuses,
+        cache: projectConfig.urls.cache,
+        cacheTtl: String(projectConfig.urls.cacheTtl),
+        headFallbackStatus: projectConfig.urls.headFallbackStatuses,
+        reportRedirects: projectConfig.urls.reportRedirects,
+    }, opts));
+});
 common(md.command("orphans"))
     .description("Find markdown files not referenced by any other markdown file")
     .argument("[directory]", "Directory to scan (default: workspace root)")
@@ -1001,12 +1273,15 @@ common(md.command("orphans"))
     .option("--ignore <glob>", "Glob pattern to exclude (repeatable)", collect, [])
     .option("--entry <file>", "Entry-point file not considered orphan (repeatable)", collect, [])
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  No orphans found\n  2  One or more orphans found")
-    .action((directory, opts) => orphansAction(directory ?? projectConfig.root, commandOptions("orphans", {
-    ignore: [],
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-    entry: projectConfig.files.entryPoints,
-}, opts)));
+    .action(async (directory, opts) => {
+    const { orphansAction } = await import("./commands/orphans.js");
+    return orphansAction(directory ?? projectConfig.root, commandOptions("orphans", {
+        ignore: [],
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+        entry: projectConfig.files.entryPoints,
+    }, opts));
+});
 common(md.command("query"))
     .description("Run a focused query across the Markdown workspace")
     .argument("<kind>", "Query kind: links-to, duplicates, unused-assets, code-blocks, tasks, missing-h1, frontmatter-keys")
@@ -1037,20 +1312,23 @@ common(md.command("query"))
     "  md query links --where links-to:docs/api.md --select file,line\n" +
     "  md query tasks --where status=pending --group-by frontmatter.owner\n\n" +
     "An unknown field, predicate, or operator exits 1 rather than matching nothing.")
-    .action((kind, directory, opts) => queryAction(kind, directory ?? projectConfig.root, commandOptions("query", {
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-    field: "title",
-    content: false,
-    status: "all",
-    summary: false,
-    assetExtension: projectConfig.assets.extensions,
-    // Predicates are per-question by nature, so they are deliberately not
-    // configurable: a checked-in `commands.query.where` would silently
-    // filter every query anyone ran in the workspace.
-    where: [],
-    select: [],
-}, opts)));
+    .action(async (kind, directory, opts) => {
+    const { queryAction } = await import("./commands/query.js");
+    return queryAction(kind, directory ?? projectConfig.root, commandOptions("query", {
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+        field: "title",
+        content: false,
+        status: "all",
+        summary: false,
+        assetExtension: projectConfig.assets.extensions,
+        // Predicates are per-question by nature, so they are deliberately not
+        // configurable: a checked-in `commands.query.where` would silently
+        // filter every query anyone ran in the workspace.
+        where: [],
+        select: [],
+    }, opts));
+});
 common(md.command("index"))
     .description("Inspect or manage the persistent workspace index")
     .argument("<action>", "Index action: status, build, clear")
@@ -1058,7 +1336,10 @@ common(md.command("index"))
     .option("--include <glob>", "Markdown include glob (repeatable)", collect)
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .addHelpText("after", "\nActions:\n  status  Inspect cache coverage\n  build   Force a rebuild\n  clear   Clear this workspace cache")
-    .action((action, directory, opts) => indexAction(action, directory ?? projectConfig.root, commandOptions("index", { include: projectConfig.files.include, exclude: projectConfig.files.exclude }, opts)));
+    .action(async (action, directory, opts) => {
+    const { indexAction } = await import("./commands/index.js");
+    return indexAction(action, directory ?? projectConfig.root, commandOptions("index", { include: projectConfig.files.include, exclude: projectConfig.files.exclude }, opts));
+});
 common(md.command("fix"))
     .description("Plan and apply deterministic Markdown fixes")
     .argument("<inputs...>", "Markdown files, directories, or globs")
@@ -1078,16 +1359,19 @@ common(md.command("fix"))
     "Exit codes:\n" +
     "  0  No pending fixes, or --write/--dry-run completed\n" +
     "  2  --check found pending fixes, or any mode found a conflict")
-    .action((inputs, opts) => fixAction(inputs, commandOptions("fix", {
-    rule: [],
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-    // Config may supply these as numbers; the fixer parses strings, so
-    // coerce here exactly as `md audit` does.
-    maxDepth: String(projectConfig.commands.toc?.maxDepth ?? "6"),
-    minDepth: String(projectConfig.commands.toc?.minDepth ?? "1"),
-    ordered: Boolean(projectConfig.commands.toc?.ordered ?? false),
-}, opts)));
+    .action(async (inputs, opts) => {
+    const { fixAction } = await import("./commands/fix.js");
+    return fixAction(inputs, commandOptions("fix", {
+        rule: [],
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+        // Config may supply these as numbers; the fixer parses strings, so
+        // coerce here exactly as `md audit` does.
+        maxDepth: String(projectConfig.commands.toc?.maxDepth ?? "6"),
+        minDepth: String(projectConfig.commands.toc?.minDepth ?? "1"),
+        ordered: Boolean(projectConfig.commands.toc?.ordered ?? false),
+    }, opts));
+});
 common(md.command("check-snippets"))
     .description("Compare fenced code blocks against the source regions they declare")
     .argument("[inputs...]", "Markdown files, directories, or globs (default: workspace root)")
@@ -1113,11 +1397,14 @@ common(md.command("check-snippets"))
     "  2  --check or --dry-run found drift, or any mode found a link it\n" +
     "     could not resolve, a malformed link, a fence it cannot rewrite,\n" +
     "     or an edit-plan conflict")
-    .action((inputs, opts) => checkSnippetsAction(inputs.length ? inputs : [projectConfig.root], commandOptions("check-snippets", {
-    includeOk: false,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (inputs, opts) => {
+    const { checkSnippetsAction } = await import("./commands/check-snippets.js");
+    return checkSnippetsAction(inputs.length ? inputs : [projectConfig.root], commandOptions("check-snippets", {
+        includeOk: false,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("rename-heading"))
     .description("Rename a heading and update all internal anchor references")
     .argument("<file>", "Path to the markdown file containing the heading")
@@ -1129,11 +1416,14 @@ common(md.command("rename-heading"))
     .option("--dry-run", "Show what would change without modifying files")
     .option("--no-dry-run", "Apply changes")
     .addHelpText("after", "\nFormat shorthands:\n  -fh             Shorthand for --format=human\n  -fj             Shorthand for --format=json\n\nExit codes:\n  0  Heading renamed successfully (or dry-run completed)\n  1  File/heading not found or new heading slug already exists")
-    .action((file, oldHeading, newHeading, opts) => renameHeadingAction(file, oldHeading, newHeading, commandOptions("rename-heading", {
-    dryRun: false,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (file, oldHeading, newHeading, opts) => {
+    const { renameHeadingAction } = await import("./commands/rename-heading.js");
+    return renameHeadingAction(file, oldHeading, newHeading, commandOptions("rename-heading", {
+        dryRun: false,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 common(md.command("rename-file"))
     .description("Move a workspace file and update Markdown references")
     .argument("<source>", "Existing Markdown document or referenced asset")
@@ -1142,11 +1432,14 @@ common(md.command("rename-file"))
     .option("--exclude <glob>", "Markdown exclude glob (repeatable)", collect)
     .option("--dry-run", "Show changes without modifying files")
     .option("--no-dry-run", "Apply changes")
-    .action((source, destination, opts) => renameFileAction(source, destination, commandOptions("rename-file", {
-    dryRun: false,
-    include: projectConfig.files.include,
-    exclude: projectConfig.files.exclude,
-}, opts)));
+    .action(async (source, destination, opts) => {
+    const { renameFileAction } = await import("./commands/rename-file.js");
+    return renameFileAction(source, destination, commandOptions("rename-file", {
+        dryRun: false,
+        include: projectConfig.files.include,
+        exclude: projectConfig.files.exclude,
+    }, opts));
+});
 try {
     await program.parseAsync(argv);
 }