@chemx/starter-kit 1.0.0 → 26.9.9-632

package/cli/index.js

@@ -4,45 +4,77 @@ import fs from 'node:fs';
 import path from 'node:path';
 import os from 'node:os';
 import readline from 'node:readline';
+import { spawnSync } from 'node:child_process';
 
-const args = process.argv.slice(2);
-const command = args[0] || 'help';
+const rawArgs = process.argv.slice(2);
+const invokedBin = path.basename(process.argv[1] || '');
+const isCreateInvoked = invokedBin.includes('create-chemx') || (rawArgs[0] && rawArgs[0] === 'create');
 
 const CONFIG_DIR = path.join(os.homedir(), '.chemical-x');
 const CONFIG_FILE = path.join(CONFIG_DIR, 'config.json');
 const DEVICE_FILE = path.join(CONFIG_DIR, 'device_id');
 
 const API_BASE = process.env.CHEMICAL_X_API_URL || 'https://chemicalx.xophz.com';
+const URL_STANDARD = 'https://mycompassconsulting.com/buy/chemical-x/standard';
+const URL_MASTER = 'https://mycompassconsulting.com/buy/chemical-x/master';
 
-// Ensure config dir exists
 if (!fs.existsSync(CONFIG_DIR)) {
+  try { fs.mkdirSync(CONFIG_DIR, { recursive: true }); } catch {}
+}
+
+const openBrowser = (url) => {
+  const platform = process.platform;
+  try {
+    if (platform === 'darwin') spawnSync('open', [url], { stdio: 'ignore' });
+    else if (platform === 'win32') spawnSync('cmd.exe', ['/c', 'start', '""', url], { stdio: 'ignore' });
+    else spawnSync('xdg-open', [url], { stdio: 'ignore' });
+  } catch {}
+};
+
+const hasGum = () => {
   try {
-    fs.mkdirSync(CONFIG_DIR, { recursive: true });
+    return spawnSync('which', ['gum'], { stdio: 'ignore' }).status === 0;
   } catch {
-    // Fallback
+    return false;
   }
-}
+};
+
+const gumChoose = (options, header = '') => {
+  const args = ['choose', ...options];
+  if (header) args.unshift(`--header=${header}`);
+  const res = spawnSync('gum', args, { encoding: 'utf-8', stdio: ['inherit', 'pipe', 'inherit'] });
+  return (res.stdout || '').trim();
+};
+
+const gumInput = (promptText, placeholder = '', isPassword = false) => {
+  const args = ['input', `--prompt=${promptText} `, `--placeholder=${placeholder}`];
+  if (isPassword) args.push('--password');
+  const res = spawnSync('gum', args, { encoding: 'utf-8', stdio: ['inherit', 'pipe', 'inherit'] });
+  return (res.stdout || '').trim();
+};
+
+const promptQuestion = (query) => {
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  return new Promise((resolve) => {
+    rl.question(query, (answer) => {
+      rl.close();
+      resolve(answer.trim());
+    });
+  });
+};
 
-// Get or create persistent device ID
 const getOrCreateDeviceId = () => {
   if (fs.existsSync(DEVICE_FILE)) {
     try {
       const id = fs.readFileSync(DEVICE_FILE, 'utf-8').trim();
       if (id) return id;
-    } catch {
-      // Fallback
-    }
+    } catch {}
   }
   const newId = `cli_${Math.random().toString(36).substring(2, 12)}_${Date.now()}`;
-  try {
-    fs.writeFileSync(DEVICE_FILE, newId, 'utf-8');
-  } catch {
-    // Fallback
-  }
+  try { fs.writeFileSync(DEVICE_FILE, newId, 'utf-8'); } catch {}
   return newId;
 };
 
-// Read cached license key
 const getCachedLicenseKey = () => {
   if (fs.existsSync(CONFIG_FILE)) {
     try {
@@ -55,63 +87,119 @@ const getCachedLicenseKey = () => {
   return null;
 };
 
-// Save license key
 const saveLicenseKey = (licenseKey) => {
   try {
     fs.writeFileSync(CONFIG_FILE, JSON.stringify({ licenseKey, updatedAt: new Date().toISOString() }, null, 2), 'utf-8');
-  } catch {
-    // Fallback
-  }
+  } catch {}
 };
 
-const promptQuestion = (query) => {
-  const rl = readline.createInterface({
-    input: process.stdin,
-    output: process.stdout
-  });
-  return new Promise((resolve) => {
-    rl.question(query, (answer) => {
-      rl.close();
-      resolve(answer.trim());
-    });
-  });
+const renderBanner = (title = 'Chemical X Protocol: Quantum Architecture') => {
+  if (hasGum()) {
+    spawnSync('gum', [
+      'style',
+      '--border=normal',
+      '--margin=1',
+      '--padding=1 2',
+      '--border-foreground=45',
+      '--foreground=81',
+      '--bold',
+      `  ${title}\n  Zero-Context-Rot Scaffolding & Engineering Directives`
+    ], { stdio: 'inherit' });
+  } else {
+    process.stdout.write('\n\x1b[38;2;98;201;255m=====================================================\x1b[0m\n');
+    process.stdout.write(`\x1b[1m\x1b[38;2;98;201;255m  ${title}\x1b[0m\n`);
+    process.stdout.write('  Zero-Context-Rot Scaffolding & Engineering Directives\n');
+    process.stdout.write('\x1b[38;2;98;201;255m=====================================================\x1b[0m\n\n');
+  }
 };
 
-const runInit = async () => {
-  process.stdout.write('\n\x1b[36m=====================================================\x1b[0m\n');
-  process.stdout.write('\x1b[1m\x1b[36m  Chemical X: Starter Kit Edge Installer\x1b[0m\n');
-  process.stdout.write('  Quantum Architecture & Engineering Standards\n');
-  process.stdout.write('\x1b[36m=====================================================\x1b[0m\n\n');
-
-  // Parse flags
-  let licenseKey = getCachedLicenseKey();
-  const licenseArgIdx = args.indexOf('--license');
-  if (licenseArgIdx !== -1 && args[licenseArgIdx + 1]) {
-    licenseKey = args[licenseArgIdx + 1].trim();
+const obtainLicenseKey = async () => {
+  let cached = getCachedLicenseKey();
+  const cliFlagIdx = rawArgs.indexOf('--license');
+  if (cliFlagIdx !== -1 && rawArgs[cliFlagIdx + 1]) {
+    cached = rawArgs[cliFlagIdx + 1].trim();
   }
 
-  // Find target directory
-  const targetDirArg = args.find((a, i) => i > 0 && !a.startsWith('--') && args[i - 1] !== '--license');
-  const targetSubDir = targetDirArg || 'src/chemical-x';
-  const targetDir = path.resolve(process.cwd(), targetSubDir);
+  if (cached) {
+    return cached;
+  }
 
-  if (!licenseKey) {
-    licenseKey = await promptQuestion('\x1b[33m? Enter Chemical X Sponsor License Key (CX-XXXX-XXXX-XXXX): \x1b[0m');
+  const useGum = hasGum();
+
+  if (useGum) {
+    const choice = gumChoose([
+      '1. Enter Chemical X License Key',
+      '2. Buy Standard Edition ($49) [mycompassconsulting.com]',
+      '3. Buy Master Bundle ($99) [mycompassconsulting.com]',
+      '4. Run Free Public Audit (npx chemx audit)',
+      '5. Exit'
+    ], 'Select an option to proceed:');
+
+    if (choice.startsWith('2.')) {
+      process.stdout.write(`\x1b[36mOpening checkout in default browser:\x1b[0m ${URL_STANDARD}\n`);
+      openBrowser(URL_STANDARD);
+      process.stdout.write('\nOnce completed, paste your Sponsor / VIP License Key below.\n');
+      return gumInput('License Key (CX-XXXX-XXXX-XXXX):', 'CX-XXXX-XXXX-XXXX');
+    }
+
+    if (choice.startsWith('3.')) {
+      process.stdout.write(`\x1b[36mOpening checkout in default browser:\x1b[0m ${URL_MASTER}\n`);
+      openBrowser(URL_MASTER);
+      process.stdout.write('\nOnce completed, paste your Sponsor / VIP License Key below.\n');
+      return gumInput('License Key (CX-XXXX-XXXX-XXXX):', 'CX-XXXX-XXXX-XXXX');
+    }
+
+    if (choice.startsWith('4.')) {
+      runAudit();
+      process.exit(0);
+    }
+
+    if (choice.startsWith('5.') || !choice) {
+      process.exit(0);
+    }
+
+    return gumInput('License Key (CX-XXXX-XXXX-XXXX):', 'CX-XXXX-XXXX-XXXX');
   }
 
-  if (!licenseKey) {
-    process.stderr.write('\x1b[31mError: A valid sponsor license key is required.\x1b[0m\n');
-    process.stderr.write('Sponsor on GitHub to get a key: https://github.com/sponsors/Chemical-X-Protocol\n\n');
-    process.exit(1);
+  process.stdout.write('\x1b[1mAuthentication Options:\x1b[0m\n');
+  process.stdout.write('  [1] Enter License Key\n');
+  process.stdout.write('  [2] Buy Standard Edition ($49) - Opens browser\n');
+  process.stdout.write('  [3] Buy Master Bundle ($99) - Opens browser\n');
+  process.stdout.write('  [4] Run Free Public Audit (npx chemx audit)\n');
+  process.stdout.write('  [5] Exit\n\n');
+
+  const selection = await promptQuestion('Select option [1-5]: ');
+
+  if (selection === '2') {
+    process.stdout.write(`Opening: ${URL_STANDARD}\n`);
+    openBrowser(URL_STANDARD);
+    return promptQuestion('Enter License Key after purchase: ');
   }
 
+  if (selection === '3') {
+    process.stdout.write(`Opening: ${URL_MASTER}\n`);
+    openBrowser(URL_MASTER);
+    return promptQuestion('Enter License Key after purchase: ');
+  }
+
+  if (selection === '4') {
+    runAudit();
+    process.exit(0);
+  }
+
+  if (selection === '5') {
+    process.exit(0);
+  }
+
+  return promptQuestion('Enter Chemical X Sponsor License Key (CX-XXXX-XXXX-XXXX): ');
+};
+
+const fetchStarterKitFiles = async (licenseKey) => {
   const normalizedKey = licenseKey.trim().toUpperCase();
   const deviceId = getOrCreateDeviceId();
 
-  process.stdout.write(`\nConnecting to edge: ${API_BASE}/api/starter-kit/download...\n`);
-  process.stdout.write(`Machine Signature: \x1b[90m${deviceId.substring(0, 16)}...\x1b[0m\n\n`);
+  process.stdout.write(`\nVerifying license via edge: ${API_BASE}...\n`);
 
-  let responseData;
   try {
     const res = await fetch(`${API_BASE}/api/starter-kit/download`, {
       method: 'POST',
@@ -119,61 +207,106 @@ const runInit = async () => {
       body: JSON.stringify({ licenseKey: normalizedKey, deviceId })
     });
 
-    responseData = await res.json();
+    const responseData = await res.json();
 
     if (!res.ok || !responseData.valid) {
-      process.stderr.write(`\x1b[31mLicense Verification Failed: ${responseData.error || 'Invalid key.'}\x1b[0m\n`);
-      if (responseData.deviceMismatch) {
-        process.stderr.write('\x1b[33mSingle-device license violation. Contact admin to transfer devices.\x1b[0m\n');
-      }
+      process.stderr.write(`\x1b[31m✕ License Verification Failed: ${responseData.error || 'Invalid key.'}\x1b[0m\n`);
+      process.stderr.write(`Purchase key at: ${URL_STANDARD}\n\n`);
       process.exit(1);
     }
+
+    saveLicenseKey(normalizedKey);
+    process.stdout.write(`\x1b[32m✔ Verified License for @${responseData.githubUser || 'sponsor'}\x1b[0m\n\n`);
+    return responseData.files || {};
   } catch (err) {
-    // Offline / Preview fallback for testing
-    if (normalizedKey === 'CX-DEV-PREVIEW' || normalizedKey === 'QUANTUM-VIP') {
-      responseData = {
-        valid: true,
-        githubUser: 'vibe.architect',
-        files: {
-          'hooks/toResult.ts': `export type Result<T, E = Error> = [T, null] | [null, E];\nexport const toResult = async <T, E = Error>(p: Promise<T>): Promise<Result<T, E>> => {\n  try { return [await p, null]; } catch (err: any) { return [null, err]; }\n};`,
-          'hooks/useSelfCleaningTimer.ts': `import { useEffect, useRef } from 'react';\nexport const useSelfCleaningInterval = (fn: () => void, ms: number | null) => {\n  useEffect(() => {\n    if (ms === null) return;\n    const id = setInterval(fn, ms);\n    return () => clearInterval(id);\n  }, [ms]);\n};`,
-          'blueprints/view-template.tsx': `import React from 'react';\nexport const ViewTemplate: React.FC<{ title: string; children: React.ReactNode }> = ({ title, children }) => (\n  <main>{children}</main>\n);`,
-          'AGENTS.md': `# Quantum Engineering & Agent Architecture Directives\n\n## 1. Line Budget: Max 500 lines per file, max 100 lines per molecule capsule.\n## 2. Table-of-Contents Views: Top templates are declarative 10-20 line index layouts.\n## 3. Control Flow: 2-stage atomic booleans, discriminated unions, linear handlers, zero nested ternaries.\n## 4. Reactivity Contract: Safe destructuring, 3-5 property limit, autonomous teardown via onScopeDispose, TDZ declaration order.\n## 5. Type Integrity: Pure *.d.ts co-location, toResult tuple pattern, zero mock data, runtime boundary guards.\n## 6. Design System: 4-tier styling rule, zero inline styles, explicit slot forwarding, FontAwesome SVG safety.\n## 7. Timers & Hygiene: Zero setInterval, zero render-hack setTimeout (mandatory nextTick), zero em dashes.\n`
-        }
-      };
+    process.stderr.write(`\x1b[31m✕ Network Error: Failed to reach edge server (${err.message}).\x1b[0m\n`);
+    process.exit(1);
+  }
+};
+
+const runScaffold = async (projectName) => {
+  renderBanner('Chemical X: Quantum Scaffolder (npm create chemx)');
+
+  let targetName = projectName;
+  if (!targetName) {
+    if (hasGum()) {
+      targetName = gumInput('Project directory name:', 'my-quantum-app');
     } else {
-      process.stderr.write(`\x1b[31mNetwork Error: Failed to reach verification endpoint (${err.message}).\x1b[0m\n`);
-      process.exit(1);
+      targetName = await promptQuestion('Project directory name [my-quantum-app]: ');
     }
   }
 
-  // Save valid license key
-  saveLicenseKey(normalizedKey);
+  const finalDirName = targetName.trim() || 'my-quantum-app';
+  const targetDir = path.resolve(process.cwd(), finalDirName);
+
+  if (fs.existsSync(targetDir) && fs.readdirSync(targetDir).length > 0) {
+    process.stderr.write(`\x1b[31m✕ Error: Directory '${finalDirName}' already exists and is not empty.\x1b[0m\n`);
+    process.exit(1);
+  }
+
+  const licenseKey = await obtainLicenseKey();
+  if (!licenseKey) {
+    process.stderr.write('\x1b[31m✕ Valid license key is required to scaffold blueprints.\x1b[0m\n');
+    process.exit(1);
+  }
 
-  // Unpack files
-  process.stdout.write(`\x1b[32m✔ Verified License for @${responseData.githubUser || 'sponsor'}\x1b[0m\n`);
-  process.stdout.write(`Unpacking starter-kit blueprints into: \x1b[36m${targetSubDir}/\x1b[0m\n\n`);
+  const files = await fetchStarterKitFiles(licenseKey);
 
-  const files = responseData.files || {};
-  let fileCount = 0;
+  process.stdout.write(`Scaffolding Quantum Architecture into: \x1b[36m${finalDirName}/\x1b[0m\n`);
+  fs.mkdirSync(targetDir, { recursive: true });
 
   for (const [relPath, content] of Object.entries(files)) {
     const fullPath = path.join(targetDir, relPath);
     const dirName = path.dirname(fullPath);
-
     if (!fs.existsSync(dirName)) {
       fs.mkdirSync(dirName, { recursive: true });
     }
+    fs.writeFileSync(fullPath, content, 'utf-8');
+    process.stdout.write(`  \x1b[32m✔\x1b[0m ${relPath}\n`);
+  }
+
+  const cursorRulesPath = path.join(targetDir, '.cursorrules');
+  if (!fs.existsSync(cursorRulesPath)) {
+    const rules = `# Chemical X Quantum Architecture Directives\nStrictly follow AGENTS.md rules. Never exceed 500 lines per file. All molecule capsules must stay under 100 lines.\n`;
+    fs.writeFileSync(cursorRulesPath, rules, 'utf-8');
+    process.stdout.write(`  \x1b[32m✔\x1b[0m .cursorrules\n`);
+  }
 
+  process.stdout.write(`\n\x1b[1m\x1b[32m✔ Quantum project created successfully at ${finalDirName}!\x1b[0m\n\n`);
+  process.stdout.write('Next Steps:\n');
+  process.stdout.write(`  1. cd ${finalDirName}\n`);
+  process.stdout.write('  2. Review AGENTS.md for line budgets and architecture standards\n');
+  process.stdout.write('  3. Run npx chemx generate m-<feature> to create capsules\n');
+  process.stdout.write('  4. Run npx chemx audit to scan for line budget compliance\n\n');
+};
+
+const runInit = async (targetSubDir = 'src/chemical-x') => {
+  renderBanner('Chemical X: In-Repo Capsule Drop-in');
+
+  const targetDir = path.resolve(process.cwd(), targetSubDir);
+  const licenseKey = await obtainLicenseKey();
+  if (!licenseKey) {
+    process.stderr.write('\x1b[31m✕ Valid license key is required.\x1b[0m\n');
+    process.exit(1);
+  }
+
+  const files = await fetchStarterKitFiles(licenseKey);
+
+  process.stdout.write(`Unpacking blueprints and hooks into: \x1b[36m${targetSubDir}/\x1b[0m\n`);
+
+  let count = 0;
+  for (const [relPath, content] of Object.entries(files)) {
+    const fullPath = path.join(targetDir, relPath);
+    const dirName = path.dirname(fullPath);
+    if (!fs.existsSync(dirName)) {
+      fs.mkdirSync(dirName, { recursive: true });
+    }
     fs.writeFileSync(fullPath, content, 'utf-8');
-    process.stdout.write(`  \x1b[32m✔\x1b[0m created ${relPath}\n`);
-    fileCount++;
+    process.stdout.write(`  \x1b[32m✔\x1b[0m ${relPath}\n`);
+    count++;
   }
 
-  process.stdout.write(`\n\x1b[1m\x1b[32m✔ Successfully installed ${fileCount} Chemical X blueprints & hooks!\x1b[0m\n`);
-  process.stdout.write(`\nNext Steps:\n`);
-  process.stdout.write(`  1. Import hooks: \x1b[36mimport { toResult } from './${targetSubDir}/hooks/toResult';\x1b[0m\n`);
-  process.stdout.write(`  2. Generate a capsule: \x1b[36mnpx chemx generate m-user-avatar\x1b[0m\n\n`);
+  process.stdout.write(`\n\x1b[1m\x1b[32m✔ Successfully installed ${count} Chemical X assets into ${targetSubDir}!\x1b[0m\n\n`);
 };
 
 const runGenerateCapsule = (capsuleName) => {
@@ -181,7 +314,7 @@ const runGenerateCapsule = (capsuleName) => {
   const targetDir = path.resolve(process.cwd(), normalizedName);
 
   if (fs.existsSync(targetDir)) {
-    process.stderr.write(`\x1b[31mError: Directory ${normalizedName} already exists.\x1b[0m\n`);
+    process.stderr.write(`\x1b[31m✕ Error: Directory ${normalizedName} already exists.\x1b[0m\n`);
     process.exit(1);
   }
 
@@ -222,20 +355,21 @@ export type { ${pascalName}Props } from './types';
   process.stdout.write(`\x1b[32m✔ Successfully generated crystalline capsule:\x1b[0m ${normalizedName}/\n`);
   process.stdout.write(`  - ${normalizedName}/${normalizedName}.tsx (< 50 lines)\n`);
   process.stdout.write(`  - ${normalizedName}/types.d.ts\n`);
-  process.stdout.write(`  - ${normalizedName}/index.ts\n`);
+  process.stdout.write(`  - ${normalizedName}/index.ts\n\n`);
 };
 
-const runAudit = () => {
-  process.stdout.write('\n\x1b[36mScanning project for Chemical X line budget hazards...\x1b[0m\n');
+export const runAudit = () => {
+  process.stdout.write('\n\x1b[38;2;98;201;255m[Chemical X Public Audit]\x1b[0m Scanning codebase for line-budget hazards...\n');
   const targetDir = process.cwd();
 
   let scanned = 0;
   let violations = 0;
+  const offendingFiles = [];
 
   const checkFile = (filePath) => {
     const ext = path.extname(filePath);
     if (!['.ts', '.tsx', '.js', '.jsx', '.vue'].includes(ext)) return;
-    if (filePath.includes('node_modules') || filePath.includes('.next') || filePath.includes('dist')) return;
+    if (filePath.includes('node_modules') || filePath.includes('.next') || filePath.includes('dist') || filePath.includes('.git')) return;
 
     try {
       const content = fs.readFileSync(filePath, 'utf-8');
@@ -243,7 +377,8 @@ const runAudit = () => {
       scanned++;
 
       if (lines > 500) {
-        process.stdout.write(`  \x1b[31m✕ LINE OVERFLOW (> 500 lines):\x1b[0m ${path.relative(targetDir, filePath)} (${lines} lines)\n`);
+        const rel = path.relative(targetDir, filePath);
+        offendingFiles.push({ file: rel, lines });
         violations++;
       }
     } catch {
@@ -272,37 +407,80 @@ const runAudit = () => {
 
   walk(targetDir);
 
-  process.stdout.write(`\nScanned ${scanned} source files. Found ${violations} line budget hazards.\n`);
+  process.stdout.write(`Scanned ${scanned} source files.\n\n`);
+
   if (violations === 0) {
-    process.stdout.write('\x1b[32m✔ 100% Quantum Compliant: All source files under 500 lines.\x1b[0m\n\n');
+    process.stdout.write('\x1b[1m\x1b[32m✔ 100% Quantum Compliant: All source files meet the 500-line budget ceiling.\x1b[0m\n\n');
+  } else {
+    process.stdout.write(`\x1b[31m✕ Found ${violations} Monolith Line-Budget Hazards (> 500 lines):\x1b[0m\n`);
+    for (const item of offendingFiles) {
+      process.stdout.write(`  - \x1b[33m${item.file}\x1b[0m (${item.lines} lines)\n`);
+    }
+
+    process.stdout.write('\n\x1b[1m\x1b[38;2;98;201;255mEliminate AI Context Rot with Chemical X Architecture:\x1b[0m\n');
+    process.stdout.write(`  * Book & Standards:  ${URL_STANDARD}\n`);
+    process.stdout.write(`  * Master Bundle:     ${URL_MASTER}\n`);
+    process.stdout.write('  * Create Starter:    npm create chemx\n');
+    process.stdout.write('  * Drop-in Capsules:  npx @chemx/starter-kit init\n\n');
   }
 };
 
-// Main routing
-switch (command) {
-  case 'init':
-    runInit();
-    break;
-  case 'generate':
-  case 'capsule':
-  case 'add':
-    if (!args[1]) {
-      process.stderr.write('Usage: npx chemx generate <capsule-name>\nExample: npx chemx generate m-user-avatar\n');
-      process.exit(1);
-    }
-    runGenerateCapsule(args[1]);
-    break;
-  case 'audit':
-    runAudit();
-    break;
-  default:
-    if (command.startsWith('m-')) {
-      runGenerateCapsule(command);
-    } else {
-      process.stdout.write('\x1b[1mChemical X CLI Commands (chemx):\x1b[0m\n');
-      process.stdout.write('  \x1b[36mnpx chemx init [dir]\x1b[0m                 Download authenticated starter-kit blueprints\n');
-      process.stdout.write('  \x1b[36mnpx chemx generate <m-name>\x1b[0m          Generate an isolated molecule capsule (< 100 lines)\n');
-      process.stdout.write('  \x1b[36mnpx chemx audit\x1b[0m                      Scan codebase for > 500 line monolith hazards\n\n');
-    }
-    break;
-}
+const printHelp = () => {
+  renderBanner();
+  process.stdout.write('\x1b[1mAvailable Commands:\x1b[0m\n');
+  process.stdout.write('  \x1b[36mnpm create chemx [dir]\x1b[0m              Scaffold complete Quantum Architecture project\n');
+  process.stdout.write('  \x1b[36mnpx @chemx/starter-kit init [dir]\x1b[0m   Drop blueprints & hooks into existing project\n');
+  process.stdout.write('  \x1b[36mnpx chemx generate <m-name>\x1b[0m         Generate isolated molecule capsule (< 100 lines)\n');
+  process.stdout.write('  \x1b[36mnpx chemx audit\x1b[0m                     [FREE] Scan codebase for line-budget hazards\n\n');
+};
+
+const main = async () => {
+  const firstArg = rawArgs[0];
+
+  if (isCreateInvoked) {
+    const dirArg = firstArg === 'create' ? rawArgs[1] : firstArg;
+    await runScaffold(dirArg);
+    return;
+  }
+
+  switch (firstArg) {
+    case 'audit':
+      runAudit();
+      break;
+    case 'init':
+      await runInit(rawArgs[1] || 'src/chemical-x');
+      break;
+    case 'create':
+      await runScaffold(rawArgs[1]);
+      break;
+    case 'generate':
+    case 'capsule':
+    case 'add':
+      if (!rawArgs[1]) {
+        process.stderr.write('Usage: npx chemx generate <capsule-name>\nExample: npx chemx generate m-user-avatar\n');
+        process.exit(1);
+      }
+      runGenerateCapsule(rawArgs[1]);
+      break;
+    case 'help':
+    case '--help':
+    case '-h':
+      printHelp();
+      break;
+    default:
+      if (firstArg && firstArg.startsWith('m-')) {
+        runGenerateCapsule(firstArg);
+      } else if (firstArg && !firstArg.startsWith('-')) {
+        await runScaffold(firstArg);
+      } else {
+        printHelp();
+      }
+      break;
+  }
+};
+
+main().catch((err) => {
+  process.stderr.write(`\x1b[31m✕ Unexpected Error: ${err.message}\x1b[0m\n`);
+  process.exit(1);
+});
+

package/docs/CHANGELOG.md

@@ -21,9 +21,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
 ### Added
 - Edge-authenticated single-device project scaffolding command (`npx chemical-x init`) with machine fingerprinting and Cloudflare KV validation.
 - AST hazard line budget audit command (`npx chemical-x audit`) scanning project trees for > 500 line monolith hazards.
+- Automated NPM publish GitHub Actions workflow (`.github/workflows/publish.yml`) chained to `Auto Version` completion via `workflow_run`.
 
 ### Changed
 - Updated default API endpoint in CLI (`cli/index.js`) to production custom domain `https://chemicalx.xophz.com`.
 - Expanded `AGENTS.md` blueprint in CLI (`cli/index.js`) to include all 7 Quantum Engineering Architecture pillars.
-- Configured npm package distribution for `@chemx/starter-kit` with `chemx`, `chem-x`, and `chemical-x` binary aliases.
-- Added public publish configuration for `@chemx` scope.
+- Configured npm package distribution for `@chemx/starter-kit` with `create-chemx`, `chemx`, `chem-x`, and `chemical-x` binary aliases.
+- Added public publish configuration for `@chemx` scope and multi-target distribution (`create-chemx`, `@chemx/starter-kit`, `@chem-x/starter-kit`, `@chemx/create-chemx`, `@chem-x/create-chemx`, `chemx`, `chem-x`).
+- Integrated Charm `gum` terminal UI styling with zero-dependency ANSI fallback across all interactive CLI workflows.
+- Added cross-platform browser checkout launcher for `mycompassconsulting.com/buy/chemical-x/standard` and `master`.
+- Unlocked `npx chemx audit` command as 100% free, unauthenticated, and ungated public utility with conversion CTAs.
+- Added dual project scaffolder (`npm create chemx` / `create-chemx`) and in-repo capsule drop-in (`init`).
+
+### Fixed
+- Removed embedded offline blueprint fallbacks and preview bypass keys from CLI executable (`cli/index.js`).
+- Restricted npm package distribution via `files` whitelist and `.npmignore` to prevent leaking private blueprints and hooks in public tarballs.
+- Added explicit `--tag` support and automatic default fallback for prerelease/CalVer versions in multi-target publisher (`scripts/publish-both.mjs`).
+
+

package/package.json

@@ -1,17 +1,25 @@
 {
   "name": "@chemx/starter-kit",
-  "version": "1.0.0",
+  "version": "26.9.9-632",
   "description": "Chemical X Protocol: Private drop-in architecture starter kit and capsule generator",
   "type": "module",
   "bin": {
+    "create-chemx": "cli/index.js",
     "chemx": "cli/index.js",
     "chem-x": "cli/index.js",
     "chemical-x": "cli/index.js"
   },
   "publishConfig": {
-    "access": "public"
+    "access": "public",
+    "tag": "latest"
   },
+  "files": [
+    "cli",
+    "README.md",
+    "docs"
+  ],
   "scripts": {
+    "publish:both": "node scripts/publish-both.mjs",
     "typecheck": "tsc --noEmit",
     "create-capsule": "node cli/index.js"
   },

package/blueprints/molecule-capsule/index.ts

@@ -1,2 +0,0 @@
-export { MSampleCard } from './m-sample-card';
-export type { MSampleCardProps } from './types';

package/blueprints/molecule-capsule/m-sample-card.tsx

@@ -1,41 +0,0 @@
-import React from 'react';
-import type { MSampleCardProps } from './types';
-
-export const MSampleCard: React.FC<MSampleCardProps> = ({
-  title,
-  subtitle,
-  value,
-  status = 'active',
-  onAction
-}) => {
-  const isHighValue = value > 1000;
-  const badgeColor = status === 'active' ? (isHighValue ? '#4ade80' : '#86efac') : '#f87171';
-
-  return (
-    <div style={{ background: '#131e3a', border: '1px solid #1e293b', borderRadius: '8px', padding: '16px' }}>
-      <div style={{ display: 'flex', justifyContent: 'space-between', alignItems: 'flex-start' }}>
-        <div>
-          <h3 style={{ margin: 0, fontSize: '16px', color: '#fff' }}>{title}</h3>
-          {subtitle && <p style={{ margin: '4px 0 0', fontSize: '12px', color: '#94a3b8' }}>{subtitle}</p>}
-        </div>
-        <span style={{ fontSize: '11px', padding: '2px 8px', borderRadius: '4px', background: '#0b1329', color: badgeColor }}>
-          {status}
-        </span>
-      </div>
-      <div style={{ marginTop: '16px', display: 'flex', justifyContent: 'space-between', alignItems: 'center' }}>
-        <div style={{ fontSize: '20px', fontWeight: 'bold', color: '#62c9ff' }}>
-          \${value.toLocaleString()}
-        </div>
-        {onAction && (
-          <button
-            onClick={onAction}
-            style={{ padding: '6px 12px', background: '#1e293b', border: '1px solid #334155', color: '#fff', borderRadius: '4px', cursor: 'pointer' }}
-          >
-            Action
-          </button>
-        )}
-      </div>
-    </div>
-  );
-};
-export default MSampleCard;

package/blueprints/molecule-capsule/types.d.ts

@@ -1,7 +0,0 @@
-export interface MSampleCardProps {
-  readonly title: string;
-  readonly subtitle?: string;
-  readonly value: number;
-  readonly status?: 'active' | 'archived';
-  readonly onAction?: () => void;
-}

package/blueprints/view-template.tsx

@@ -1,20 +0,0 @@
-import React from 'react';
-
-export interface ViewTemplateProps {
-  readonly title: string;
-  readonly children: React.ReactNode;
-}
-
-export const ViewTemplate: React.FC<ViewTemplateProps> = ({ title, children }) => {
-  return (
-    <main style={{ padding: '24px', background: '#0b1329', color: '#e2e8f0', minHeight: '100vh' }}>
-      <header style={{ marginBottom: '24px', borderBottom: '1px solid #1e293b', paddingBottom: '16px' }}>
-        <h1 style={{ margin: 0, fontSize: '24px', color: '#62c9ff' }}>{title}</h1>
-      </header>
-      <div style={{ display: 'flex', flexDirection: 'column', gap: '20px' }}>
-        {children}
-      </div>
-    </main>
-  );
-};
-export default ViewTemplate;

package/hooks/toResult.ts

@@ -1,13 +0,0 @@
-export type Result<T, E = Error> = [T, null] | [null, E];
-
-export const toResult = async <T, E = Error>(
-  promiseOrFn: Promise<T> | (() => Promise<T> | T)
-): Promise<Result<T, E>> => {
-  try {
-    const value = typeof promiseOrFn === 'function' ? await promiseOrFn() : await promiseOrFn;
-    return [value, null];
-  } catch (err: unknown) {
-    const normalizedError = (err instanceof Error ? err : new Error(String(err))) as E;
-    return [null, normalizedError];
-  }
-};

package/hooks/useAsyncData.ts

@@ -1,41 +0,0 @@
-import { useState, useCallback, useEffect } from 'react';
-import { toResult } from './toResult';
-
-export interface UseAsyncDataReturn<T> {
-  readonly data: T | null;
-  readonly isLoading: boolean;
-  readonly error: Error | null;
-  readonly execute: () => Promise<void>;
-}
-
-export const useAsyncData = <T>(
-  fetcher: () => Promise<T>,
-  immediate: boolean = true
-): UseAsyncDataReturn<T> => {
-  const [data, setData] = useState<T | null>(null);
-  const [isLoading, setIsLoading] = useState<boolean>(immediate);
-  const [error, setError] = useState<Error | null>(null);
-
-  const execute = useCallback(async (): Promise<void> => {
-    setIsLoading(true);
-    setError(null);
-
-    const [result, fetchError] = await toResult(fetcher());
-    if (fetchError) {
-      setError(fetchError);
-      setIsLoading(false);
-      return;
-    }
-
-    setData(result);
-    setIsLoading(false);
-  }, [fetcher]);
-
-  useEffect(() => {
-    if (immediate) {
-      execute();
-    }
-  }, [execute, immediate]);
-
-  return { data, isLoading, error, execute };
-};

package/hooks/useSelfCleaningTimer.ts

@@ -1,29 +0,0 @@
-import { useEffect, useRef } from 'react';
-
-export const useSelfCleaningInterval = (callback: () => void, delayMs: number | null): void => {
-  const savedCallback = useRef(callback);
-
-  useEffect(() => {
-    savedCallback.current = callback;
-  }, [callback]);
-
-  useEffect(() => {
-    if (delayMs === null) return;
-    const intervalId = setInterval(() => savedCallback.current(), delayMs);
-    return () => clearInterval(intervalId);
-  }, [delayMs]);
-};
-
-export const useSelfCleaningTimeout = (callback: () => void, delayMs: number | null): void => {
-  const savedCallback = useRef(callback);
-
-  useEffect(() => {
-    savedCallback.current = callback;
-  }, [callback]);
-
-  useEffect(() => {
-    if (delayMs === null) return;
-    const timerId = setTimeout(() => savedCallback.current(), delayMs);
-    return () => clearTimeout(timerId);
-  }, [delayMs]);
-};

package/tsconfig.json

@@ -1,12 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "ESNext",
-    "moduleResolution": "Bundler",
-    "jsx": "react-jsx",
-    "strict": true,
-    "noEmit": true,
-    "skipLibCheck": true
-  },
-  "include": ["blueprints", "hooks"]
-}