@contextecf/guardian-cli 0.1.6 → 0.1.9

package/dist/packages/guardian-cli/src/index.js

@@ -16275,16 +16275,26 @@ function cloneList(values) {
 }
 
 // packages/guardian-cli/src/runtime.ts
-var GUARDIAN_CLI_VERSION = "0.1.6";
+var GUARDIAN_CLI_VERSION = "0.1.9";
 var GUARDIAN_PROFILE_SCHEMA_VERSION = "contextecf/project-guardian-profile/v1";
 var GUARDIAN_NPM_PACKAGE_NAME = "@contextecf/guardian-cli";
 var GUARDIAN_NPM_REGISTRY = "https://registry.npmjs.org/";
+var GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH = "trusted_publisher";
 var GUARDIAN_GLOBAL_INSTALL_COMMAND = `npm install -g ${GUARDIAN_NPM_PACKAGE_NAME}`;
 var GUARDIAN_NPX_SETUP_COMMAND = `npx ${GUARDIAN_NPM_PACKAGE_NAME}@latest setup`;
 var GUARDIAN_FIRST_RUN_COMMAND = "guardian setup";
 var GUARDIAN_OPEN_CONTROL_TOWER_COMMAND = "guardian open";
+var GUARDIAN_HALO_CHROME_EXTENSION_ID = "dopkdppbiakhbglhgjfacfdhpheejkck";
+var GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL = `https://chromewebstore.google.com/detail/contextecf-halo/${GUARDIAN_HALO_CHROME_EXTENSION_ID}`;
 var GUARDIAN_RELEASE_DISPATCH_WORKFLOW = "guardian-release-dispatch.yml";
 var GUARDIAN_RELEASE_REPOSITORY = "Intelligent-Context-AI-Inc/ContextECF-GITHUB";
+var GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES = [
+  "CHROME_WEB_STORE_CLIENT_ID",
+  "CHROME_WEB_STORE_CLIENT_SECRET",
+  "CHROME_WEB_STORE_REFRESH_TOKEN",
+  "CHROME_WEB_STORE_PUBLISHER_ID",
+  "CHROME_WEB_STORE_EXTENSION_ID"
+];
 var GUARDIAN_CONTROL_TOWER_URL_ENV = "GUARDIAN_CONTROL_TOWER_URL";
 var GUARDIAN_DEFAULT_CONTROL_TOWER_URL = "http://127.0.0.1:4317/control-tower";
 var GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV = "GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY";
@@ -16301,6 +16311,195 @@ var GUARDIAN_WINDOWS_NATIVE_HOST_REGISTRY_PROOF_SCHEMA_VERSION = "contextecf/pro
 var PERSONAL_FABRIC_CONTRACTS_SCHEMA_VERSION2 = "contextecf/personal-fabric-contracts/v1";
 var PROMPT_COACH_MODES = ["off", "quiet", "balanced", "hands_on"];
 var DEFAULT_PROMPT_COACH_DAILY_SOFT_CARD_LIMIT = 6;
+var GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG = [
+  {
+    disposition: "allow",
+    cardStyle: "No visible card",
+    whenShown: "Local Guardian approves the prompt before it leaves the browser.",
+    actions: [
+      {
+        id: "auto-send",
+        label: "Send prompt",
+        role: "none",
+        sendsPrompt: true,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: false
+      }
+    ],
+    sendAsIsAllowed: true,
+    hardBlock: false,
+    receiptExpected: true
+  },
+  {
+    disposition: "warn",
+    cardStyle: "Quick check",
+    whenShown: "Guardian found a low or medium-risk concern, but policy still allows the user to continue.",
+    actions: [
+      {
+        id: "send-as-is",
+        label: "Send as-is",
+        role: "allowed_override",
+        sendsPrompt: true,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      },
+      {
+        id: "edit-prompt",
+        label: "Edit prompt",
+        role: "safe_escape",
+        sendsPrompt: false,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      }
+    ],
+    sendAsIsAllowed: true,
+    hardBlock: false,
+    receiptExpected: true
+  },
+  {
+    disposition: "rewrite",
+    cardStyle: "Safer version ready",
+    whenShown: "Guardian prepared a safer prompt, usually by masking sensitive text or narrowing scope.",
+    actions: [
+      {
+        id: "send-revised-prompt",
+        label: "Send revised prompt",
+        role: "recommended",
+        sendsPrompt: true,
+        sendsRevisedPrompt: true,
+        requiresConfirmation: false,
+        visibleToUser: true
+      },
+      {
+        id: "send-as-is",
+        label: "Send as-is",
+        role: "allowed_override",
+        sendsPrompt: true,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      },
+      {
+        id: "edit-prompt",
+        label: "Edit prompt",
+        role: "safe_escape",
+        sendsPrompt: false,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      }
+    ],
+    sendAsIsAllowed: true,
+    hardBlock: false,
+    receiptExpected: true
+  },
+  {
+    disposition: "confirm",
+    cardStyle: "Review needed",
+    whenShown: "Guardian needs deliberate approval before sending higher-risk content or action requests.",
+    actions: [
+      {
+        id: "approve-and-send",
+        label: "Approve and send",
+        role: "recommended",
+        sendsPrompt: true,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: true,
+        visibleToUser: true
+      },
+      {
+        id: "edit-prompt",
+        label: "Edit prompt",
+        role: "safe_escape",
+        sendsPrompt: false,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      }
+    ],
+    sendAsIsAllowed: false,
+    hardBlock: false,
+    receiptExpected: true
+  },
+  {
+    disposition: "block",
+    cardStyle: "Blocked",
+    whenShown: "The prompt violates policy, contains protected secrets, or targets a denied destination.",
+    actions: [
+      {
+        id: "edit-prompt",
+        label: "Edit prompt",
+        role: "safe_escape",
+        sendsPrompt: false,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      }
+    ],
+    sendAsIsAllowed: false,
+    hardBlock: true,
+    receiptExpected: true
+  },
+  {
+    disposition: "unavailable",
+    cardStyle: "Setup needed",
+    whenShown: "The browser cannot reach Local Guardian, so the prompt is held back.",
+    actions: [
+      {
+        id: "edit-prompt",
+        label: "Edit prompt",
+        role: "safe_escape",
+        sendsPrompt: false,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      }
+    ],
+    sendAsIsAllowed: false,
+    hardBlock: false,
+    receiptExpected: false
+  },
+  {
+    disposition: "live_sensitive_warning",
+    cardStyle: "Early heads-up",
+    whenShown: "Guardian notices sensitive text while the user is typing, before the formal send-time check.",
+    actions: [
+      {
+        id: "use-placeholder",
+        label: "Use placeholder",
+        role: "recommended",
+        sendsPrompt: false,
+        sendsRevisedPrompt: true,
+        requiresConfirmation: false,
+        visibleToUser: true
+      },
+      {
+        id: "send-as-is",
+        label: "Send as-is",
+        role: "allowed_override",
+        sendsPrompt: true,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      },
+      {
+        id: "keep-drafting",
+        label: "Keep drafting",
+        role: "safe_escape",
+        sendsPrompt: false,
+        sendsRevisedPrompt: false,
+        requiresConfirmation: false,
+        visibleToUser: true
+      }
+    ],
+    sendAsIsAllowed: true,
+    hardBlock: false,
+    receiptExpected: false
+  }
+];
 var GUARDIAN_POSTURE_PROFILE_IDS = [
   "calm",
   "balanced",
@@ -16780,6 +16979,45 @@ var MCP_CLIENTS = ["generic", "codex", "claude-desktop", "cursor"];
 var NATIVE_HOST_BROWSERS = ["chrome", "chromium", "edge"];
 var HELP_TEXT = `guardian \u2014 Project Guardian Personal Context Fabric
 
+Global install:
+  ${GUARDIAN_GLOBAL_INSTALL_COMMAND}
+
+First run:
+  ${GUARDIAN_FIRST_RUN_COMMAND}
+
+No global install:
+  ${GUARDIAN_NPX_SETUP_COMMAND}
+
+Open Control Tower:
+  ${GUARDIAN_OPEN_CONTROL_TOWER_COMMAND}
+  start aliases: guardian launch, guardian tower, guardian control-tower
+
+Everyday commands:
+  guardian --version
+  guardian setup
+  guardian launch
+  guardian open
+  guardian status
+  guardian doctor
+  guardian connect
+  guardian coach options
+  guardian policy list
+  guardian marketplace list
+  guardian posture list
+  guardian privacy show
+
+Recommended first run:
+  ${GUARDIAN_GLOBAL_INSTALL_COMMAND}
+  guardian setup
+  Open ContextECF Halo and click Connect.
+  guardian open
+
+Support and developer commands:
+  guardian help --advanced
+
+Defaults are local-first: raw capture, cloud sync, learning graph, and app autopilot stay off.`;
+var ADVANCED_HELP_TEXT = `guardian \u2014 Project Guardian Personal Context Fabric
+
 Global install:
   ${GUARDIAN_GLOBAL_INSTALL_COMMAND}
 
@@ -16796,7 +17034,7 @@ Open Control Tower:
 Usage:
   guardian --version
   guardian version [--json]
-  guardian setup [--json] [--open] [--print] [--host=127.0.0.1] [--port=4317] [--no-launch] [--no-mcp] [--extension-id=<chrome-extension-id>]
+  guardian setup [--json] [--open] [--print] [--host=127.0.0.1] [--port=4317] [--no-launch] [--no-mcp] [--no-browser-connection] [--extension-id=<chrome-extension-id>]
   guardian install [--json]
   guardian doctor [--json]
   guardian readiness [--json] [--strict]
@@ -16804,7 +17042,7 @@ Usage:
   guardian release flow --version=<semver> [--json]
   guardian release verify --version=<semver> [--json]
   guardian release paste --version=<semver> [--json]
-  guardian release command --version=<semver> [--publish|--dry-run=false] [--channels=all|npm|browser|evidence] [--run-docker-smoke=true|false] [--json]
+  guardian release command --version=<semver> [--publish|--dry-run=false] [--channels=all|npm|browser|evidence] [--run-docker-smoke=true|false] [--publish-auth=token|trusted_publisher] [--browser-store-publish=manual|api] [--json]
   guardian release secrets [--json]
   guardian release browser-store [--json]
   guardian open [--json] [--print] [--url=http://127.0.0.1:<port>]
@@ -16812,6 +17050,8 @@ Usage:
   guardian start [--json] [--host=127.0.0.1] [--port=4317]
   guardian launch|tower|control-tower [--json] [--open] [--print] [--host=127.0.0.1] [--port=4317]
   guardian stop [--json] [--url=http://127.0.0.1:<port>/control-tower]
+  guardian pair [--json]
+  guardian connect [--json] [--browser=chrome|chromium|edge] [--extension-id=<chrome-extension-id>] [--host=127.0.0.1] [--port=4317]
   guardian service install [--json] [--platform=auto|launchd|systemd|windows-task-scheduler] [--force]
   guardian service status [--json]
   guardian service uninstall [--yes] [--json]
@@ -16820,6 +17060,7 @@ Usage:
   guardian key-store uninstall [--yes] [--json]
   guardian daemon serve [--host=127.0.0.1] [--port=4317]
   guardian daemon pair [--json]
+  guardian extension connect [--json] [--browser=chrome|chromium|edge] [--extension-id=<chrome-extension-id>]
   guardian extension open-setup [--json] [--print] [--url=http://127.0.0.1:<port>/control-tower] [--extension-id=<chrome-extension-id>]
   guardian extension native-host install --extension-id=<chrome-extension-id> [--browser=chrome|chromium|edge] [--target=/path/to/manifest] [--force] [--write-registry --yes] [--json]
   guardian extension native-host status [--browser=chrome|chromium|edge] [--target=/path/to/manifest] [--json]
@@ -16835,6 +17076,7 @@ Usage:
   guardian privacy mode on [--json]
   guardian mcp install [--json] [--client=generic|codex|claude-desktop|cursor|all] [--write] [--target=/path/to/config] [--force]
   guardian mcp serve
+  guardian coach options [--json]
   guardian policy list [--json]
   guardian policy enable <pack-id> [--json]
   guardian policy disable <pack-id> [--json]
@@ -16887,6 +17129,8 @@ async function runGuardianCli(argv, options = {}) {
       return runReleaseCommand(argv.slice(1), flags, options);
     case "open":
       return runControlTowerOpenCommand(flags, options);
+    case "connect":
+      return runExtensionConnectCommand(flags, options);
     case "status":
       write(stdout, await statusGuardian(flags, options));
       return 0;
@@ -16898,6 +17142,14 @@ async function runGuardianCli(argv, options = {}) {
       return runLaunchCommand(flags, options);
     case "stop":
       return runStopCommand(flags, options);
+    case "pair": {
+      if (!flags.has("json")) {
+        return runExtensionConnectCommand(flags, options);
+      }
+      const result = await daemonPair(flags, options);
+      write(result.exitCode === 0 ? stdout : stderr, result.message);
+      return result.exitCode;
+    }
     case "daemon":
       return runDaemonCommand(argv.slice(1), flags, options);
     case "service":
@@ -16920,6 +17172,9 @@ async function runGuardianCli(argv, options = {}) {
       return runPrivacyCommand(argv.slice(1), flags, options);
     case "mcp":
       return runMcpCommand(argv.slice(1), flags, options);
+    case "coach":
+    case "prompt-coach":
+      return runCoachCommand(argv.slice(1), flags, options);
     case "policy":
       return runPolicyCommand(argv.slice(1), flags, options);
     case "marketplace":
@@ -16942,7 +17197,7 @@ async function runGuardianCli(argv, options = {}) {
     case "help":
     case "--help":
     case "-h":
-      write(stdout, `${HELP_TEXT}
+      write(stdout, `${flags.has("advanced") ? ADVANCED_HELP_TEXT : HELP_TEXT}
 `);
       return 0;
     default:
@@ -17021,11 +17276,13 @@ async function installGuardian(flags, options = {}) {
       "guardian start",
       "guardian open",
       "guardian mcp install",
-      "guardian daemon pair --json",
       "guardian service install",
       "guardian key-store install --yes",
-      "guardian extension open-setup",
-      "guardian extension native-host install --extension-id=<browser-extension-id>"
+      "guardian connect"
+    ],
+    advancedCommands: [
+      `guardian extension native-host install --extension-id=${GUARDIAN_HALO_CHROME_EXTENSION_ID}`,
+      "guardian pair --json"
     ]
   };
   return flags.has("json") ? `${JSON.stringify(result, null, 2)}
@@ -17038,7 +17295,8 @@ async function installGuardian(flags, options = {}) {
     `First run: ${GUARDIAN_FIRST_RUN_COMMAND}`,
     `Open Control Tower: ${GUARDIAN_OPEN_CONTROL_TOWER_COMMAND}`,
     `No global install: ${GUARDIAN_NPX_SETUP_COMMAND}`,
-    "Next: guardian setup; guardian doctor; guardian readiness; guardian launch; guardian open; guardian mcp install; guardian extension open-setup; guardian daemon pair --json; guardian extension native-host install --extension-id=<browser-extension-id>"
+    "Next: guardian setup; open ContextECF Halo and click Connect; guardian open",
+    "Help: run guardian doctor if setup needs attention."
   ].join("\n")}
 `;
 }
@@ -17046,8 +17304,9 @@ async function runSetupCommand(flags, options) {
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
   const home = resolveGuardianHome(options.env, options.platform);
-  const extensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
-  if (extensionId && !isValidChromeExtensionId(extensionId)) {
+  const requestedExtensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
+  const extensionId = requestedExtensionId ?? GUARDIAN_HALO_CHROME_EXTENSION_ID;
+  if (requestedExtensionId && !isValidChromeExtensionId(requestedExtensionId)) {
     write(
       stderr,
       "Invalid --extension-id. Chrome extension ids must be 32 lowercase letters from a-p.\n"
@@ -17103,10 +17362,80 @@ async function runSetupCommand(flags, options) {
     }
     launch = JSON.parse(launchOutput);
   }
+  const requestedHost = stringFlag(flags, "host") ?? "127.0.0.1";
+  const requestedPort = numberFlag(flags, "port") ?? 4317;
+  const requestedControlTowerUrl = `${formatDaemonBaseUrl(requestedHost, requestedPort)}/control-tower`;
   const resolvedControlTowerUrl = resolveControlTowerUrl(/* @__PURE__ */ new Map(), options.env, profile);
-  const controlTowerUrl = launch?.controlTowerUrl ?? (resolvedControlTowerUrl.ok ? resolvedControlTowerUrl.url : GUARDIAN_DEFAULT_CONTROL_TOWER_URL);
+  const controlTowerUrl = launch?.controlTowerUrl ?? (flags.has("host") || flags.has("port") ? requestedControlTowerUrl : resolvedControlTowerUrl.ok ? resolvedControlTowerUrl.url : GUARDIAN_DEFAULT_CONTROL_TOWER_URL);
+  if (!launch && (flags.has("host") || flags.has("port"))) {
+    profile.control_tower = {
+      url: controlTowerUrl,
+      source: "env_or_flag"
+    };
+    await writeProfile(home, profile);
+  }
   const setupUrl = buildControlTowerSetupUrl(controlTowerUrl);
-  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId ?? "<browser-extension-id>"}`;
+  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId}`;
+  let browserHelper;
+  if (flags.has("no-browser-connection") || flags.has("no-browser-helper")) {
+    browserHelper = {
+      success: false,
+      skipped: true,
+      tokenPrinted: false
+    };
+  } else {
+    let nativeHostOutput = "";
+    let nativeHostError = "";
+    const nativeHostFlags = new Map([
+      ["json", true],
+      ["force", true],
+      ["extension-id", extensionId],
+      ...copyStringFlags(flags, ["browser", "target"])
+    ]);
+    if ((options.platform ?? process.platform) === "win32") {
+      nativeHostFlags.set("write-registry", true);
+      nativeHostFlags.set("yes", true);
+    }
+    const nativeHostExitCode = await runExtensionCommand(
+      ["native-host", "install"],
+      nativeHostFlags,
+      {
+        ...options,
+        stdout: {
+          write: (chunk) => {
+            nativeHostOutput += chunk.toString();
+            return true;
+          }
+        },
+        stderr: {
+          write: (chunk) => {
+            nativeHostError += chunk.toString();
+            return true;
+          }
+        }
+      }
+    );
+    if (nativeHostExitCode === 0) {
+      const nativeHost = JSON.parse(nativeHostOutput);
+      browserHelper = {
+        success: true,
+        skipped: false,
+        browser: nativeHost.browser,
+        hostName: nativeHost.hostName,
+        manifestPath: nativeHost.manifestPath,
+        allowedOrigins: nativeHost.allowedOrigins,
+        tokenPrinted: nativeHost.tokenPrinted
+      };
+    } else {
+      browserHelper = {
+        success: false,
+        skipped: false,
+        error: nativeHostError.trim() || "Guardian browser connection setup failed.",
+        exitCode: nativeHostExitCode,
+        tokenPrinted: false
+      };
+    }
+  }
   const result = {
     schema_version: "contextecf/project-guardian-setup/v1",
     success: true,
@@ -17156,10 +17485,14 @@ async function runSetupCommand(flags, options) {
     },
     browserSetup: {
       setupUrl,
-      extensionId: extensionId ?? null,
+      extensionId,
+      defaultExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
       opened: false,
       tokenPrinted: false,
-      nativeHostCommand
+      nativeHostCommand,
+      connectInstruction: "Open ContextECF Halo and click Connect. No setup code is needed.",
+      manualFallbackCommand: "guardian pair --json",
+      nativeHost: browserHelper
     },
     nextCommands: [
       "guardian status",
@@ -17168,12 +17501,10 @@ async function runSetupCommand(flags, options) {
       "guardian policy list",
       "guardian posture list",
       "guardian preferences show",
-      "guardian extension open-setup",
-      "guardian daemon pair --json",
       "guardian service install",
-      "guardian key-store install --yes",
-      nativeHostCommand
-    ]
+      "guardian key-store install --yes"
+    ],
+    advancedCommands: ["guardian extension connect", nativeHostCommand, "guardian pair --json"]
   };
   write(
     stdout,
@@ -17186,8 +17517,11 @@ async function runSetupCommand(flags, options) {
       result.launch.opened ? `Opening: ${result.launch.controlTowerUrl}` : void 0,
       `MCP artifacts: ${result.mcp.writtenFiles.length > 0 ? result.mcp.writtenFiles.join(", ") : "skipped" in result.mcp && result.mcp.skipped ? "skipped" : "none"}`,
       `Browser setup: ${result.browserSetup.setupUrl}`,
+      result.browserSetup.nativeHost.success ? `Browser connection: ready for ContextECF Halo (${result.browserSetup.extensionId})` : result.browserSetup.nativeHost.skipped ? "Browser connection: skipped" : `Browser connection: needs attention${result.browserSetup.nativeHost.error ? ` (${result.browserSetup.nativeHost.error})` : ""}`,
+      "Extension setup: open ContextECF Halo and click Connect. No setup code needed.",
       "Token printed: no",
-      `Next: ${result.nextCommands.join("; ")}`
+      `Next: ${result.nextCommands.join("; ")}`,
+      "Help: run guardian connect if the browser says Local Guardian is not connected."
     ].filter(Boolean).join("\n")}
 `
   );
@@ -17262,8 +17596,8 @@ function buildGuardianDistributionReadiness(npmPreviewReady) {
     },
     aiToolIntegration: {
       mcpInstallCommand: "guardian mcp install --client=all --write",
-      browserSetupCommand: "guardian extension open-setup",
-      nativeHostInstallCommand: "guardian extension native-host install --extension-id=<browser-extension-id>"
+      browserSetupCommand: "guardian connect",
+      nativeHostInstallCommand: `guardian extension native-host install --extension-id=${GUARDIAN_HALO_CHROME_EXTENSION_ID}`
     },
     browserStoreHandoff: {
       status: npmPreviewReady ? "operator_handoff_ready_not_submitted" : "blocked_until_preview_ready",
@@ -17279,15 +17613,17 @@ function buildGuardianDistributionReadiness(npmPreviewReady) {
       workflow: GUARDIAN_RELEASE_DISPATCH_WORKFLOW,
       dryRunCommand: buildGuardianReleaseDispatchCommand(true),
       publishCommand: buildGuardianReleaseDispatchCommand(false),
-      requiredPublishCredentialName: "NPM_TOKEN",
+      defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+      tokenFallbackCredentialName: "NPM_TOKEN",
       channels: ["all", "npm", "browser", "evidence"],
       defaultDockerSmoke: true,
       provenance: "github_actions_oidc_supported",
       status: npmPreviewReady ? "ready_for_dispatch_after_preview_evidence" : "blocked_until_preview_release_evidence_passes",
       boundaries: [
         "Use dry_run=true before public publication.",
-        "dry_run=false requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
-        "The workflow can publish the npm preview package, upload evidence, and run public install smokes; it does not sign native installers or approve future browser-store listings.",
+        "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+        "The token fallback route remains available with publish_auth=token and requires the repository secret NPM_TOKEN.",
+        "The workflow can publish the npm preview package, upload evidence, submit future Chrome Web Store updates for review when browser_store_publish=api, and run public install smokes; it does not sign native installers or prove future browser-store approval.",
         "GitHub Actions OIDC/provenance applies to CI release context; manual local publishes are recorded separately and should not claim CI provenance."
       ]
     },
@@ -17308,12 +17644,16 @@ function buildGuardianReleaseDispatchCommand(dryRun) {
   });
 }
 function buildGuardianReleaseDispatchCommandFor(input) {
+  const publishAuth = input.publishAuth ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+  const browserStorePublish = input.browserStorePublish ?? "manual";
   return [
     `gh workflow run ${GUARDIAN_RELEASE_DISPATCH_WORKFLOW} \\`,
     `  -f release_version=${input.releaseVersion} \\`,
     `  -f channels=${input.channels} \\`,
     `  -f dry_run=${input.dryRun ? "true" : "false"} \\`,
-    `  -f run_docker_smoke=${input.runDockerSmoke ? "true" : "false"}`
+    `  -f run_docker_smoke=${input.runDockerSmoke ? "true" : "false"} \\`,
+    `  -f publish_auth=${publishAuth} \\`,
+    `  -f browser_store_publish=${browserStorePublish}`
   ].join("\n");
 }
 async function runReleaseCommand(argv, flags, options) {
@@ -17420,11 +17760,23 @@ async function runReleaseCommand(argv, flags, options) {
   }
   const dryRun = flags.has("publish") ? false : booleanFlag(flags, "dry-run", true);
   const runDockerSmoke = booleanFlag(flags, "run-docker-smoke", true);
+  const publishAuth = stringFlag(flags, "publish-auth") ?? GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH;
+  if (!isValidReleasePublishAuth(publishAuth)) {
+    write(stderr, "Invalid --publish-auth. Expected one of: token, trusted_publisher.\n");
+    return 1;
+  }
+  const browserStorePublish = stringFlag(flags, "browser-store-publish") ?? "manual";
+  if (!isValidBrowserStorePublish(browserStorePublish)) {
+    write(stderr, "Invalid --browser-store-publish. Expected one of: manual, api.\n");
+    return 1;
+  }
   const result = buildGuardianReleaseDispatchCommandResult({
     releaseVersion,
     channels,
     dryRun,
-    runDockerSmoke
+    runDockerSmoke,
+    publishAuth,
+    browserStorePublish
   });
   write(stdout, renderGuardianReleaseDispatchCommand(result, flags));
   return 0;
@@ -17492,6 +17844,7 @@ function renderGuardianReleaseHelp(result, flags) {
 `;
 }
 function buildGuardianReleaseDispatchCommandResult(input) {
+  const npmLaneSelected = input.channels === "all" || input.channels === "npm";
   return {
     schema_version: "contextecf/project-guardian-release-dispatch-command/v1",
     cli_version: GUARDIAN_CLI_VERSION,
@@ -17500,13 +17853,21 @@ function buildGuardianReleaseDispatchCommandResult(input) {
     channels: input.channels,
     dryRun: input.dryRun,
     runDockerSmoke: input.runDockerSmoke,
+    publishAuth: input.publishAuth,
+    browserStorePublish: input.browserStorePublish,
     command: buildGuardianReleaseDispatchCommandFor(input),
-    ...input.dryRun ? {} : { requiredPublishCredentialName: "NPM_TOKEN" },
+    ...input.dryRun || input.publishAuth === "trusted_publisher" || !npmLaneSelected ? {} : { requiredPublishCredentialName: "NPM_TOKEN" },
+    ...input.browserStorePublish === "api" && !input.dryRun ? {
+      requiredBrowserStoreCredentialNames: [...GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES]
+    } : {},
     provenance: "github_actions_oidc_supported",
     boundaries: [
       "Use dry_run=true before public publication.",
-      "dry_run=false requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
-      "This dispatch can publish the npm preview package, upload evidence, and run public install smokes; it does not sign native installers or approve future browser-store listings.",
+      "dry_run=false with publish_auth=token requires the repository secret NPM_TOKEN and must not print npm tokens, OTP values, or .npmrc contents.",
+      "dry_run=false with publish_auth=trusted_publisher requires npm Trusted Publishing to be configured for this GitHub Actions workflow and package.",
+      "browser_store_publish=manual keeps Chrome Web Store upload as an operator ZIP handoff.",
+      "browser_store_publish=api uploads an existing Chrome Web Store item update and submits it for review when Chrome Web Store API secrets are configured.",
+      "This dispatch can publish the npm preview package, upload evidence, submit future Chrome Web Store updates for review, and run public install smokes; it does not sign native installers or prove future browser-store approval.",
       "A release-dispatch command is operator guidance, not production-gate proof."
     ],
     tokenPrinted: false,
@@ -17525,7 +17886,10 @@ function renderGuardianReleaseDispatchCommand(result, flags) {
     `Workflow: ${result.workflow}`,
     `Channels: ${result.channels}`,
     `Docker smoke: ${result.runDockerSmoke ? "yes" : "no"}`,
-    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : "Required repository secret: not needed for dry run",
+    `Publish auth: ${result.publishAuth}`,
+    `Browser store publish: ${result.browserStorePublish}`,
+    result.requiredPublishCredentialName ? `Required repository secret: ${result.requiredPublishCredentialName}` : result.publishAuth === "trusted_publisher" && !result.dryRun ? "Required npm setup: Trusted Publisher connection" : "Required repository secret: not needed for dry run",
+    result.requiredBrowserStoreCredentialNames ? `Required browser-store secrets: ${result.requiredBrowserStoreCredentialNames.join(", ")}` : "Required browser-store secrets: not needed for manual browser handoff",
     "Command:",
     result.command,
     "Boundaries:",
@@ -17540,6 +17904,7 @@ function buildGuardianBrowserStoreHandoffCommandResult() {
     cli_version: GUARDIAN_CLI_VERSION,
     status: "chrome_distribution_proven_next_submission_pack_ready",
     primaryStore: "chrome_web_store",
+    publicListingUrl: GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL,
     productionGate: {
       id: "browser-store-distribution",
       status: "proven",
@@ -17606,6 +17971,7 @@ function renderGuardianBrowserStoreHandoffCommand(result, flags) {
     "Project Guardian Browser Store Handoff",
     `Status: ${result.status}`,
     `Primary store: ${result.primaryStore}`,
+    `Public listing: ${result.publicListingUrl}`,
     `Production gate: ${result.productionGate.id} (${result.productionGate.status})`,
     "1. Build submission pack:",
     result.commands.submissionPack,
@@ -17626,15 +17992,25 @@ function renderGuardianBrowserStoreHandoffCommand(result, flags) {
 `;
 }
 function buildGuardianReleaseSecretSetup() {
+  const chromeWebStoreSecretMatcher = GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES.join("|");
   return {
     schema_version: "contextecf/project-guardian-release-secret-setup/v1",
     cli_version: GUARDIAN_CLI_VERSION,
     repository: GUARDIAN_RELEASE_REPOSITORY,
-    requiredForPublish: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    requiredForPublish: "npm_trusted_publisher_connection",
+    tokenFallbackCredentialName: "NPM_TOKEN",
+    requiredForBrowserStoreApi: GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES,
     githubActionsSecretUrl: `https://github.com/${GUARDIAN_RELEASE_REPOSITORY}/settings/secrets/actions/new`,
     commands: {
       setNpmToken: `gh secret set NPM_TOKEN --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreClientId: `gh secret set CHROME_WEB_STORE_CLIENT_ID --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreClientSecret: `gh secret set CHROME_WEB_STORE_CLIENT_SECRET --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreRefreshToken: `gh secret set CHROME_WEB_STORE_REFRESH_TOKEN --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStorePublisherId: `gh secret set CHROME_WEB_STORE_PUBLISHER_ID --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
+      setChromeWebStoreExtensionId: `gh secret set CHROME_WEB_STORE_EXTENSION_ID --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions`,
       verifyNpmTokenPresence: `gh secret list --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions | rg '^NPM_TOKEN\\b'`,
+      verifyChromeWebStoreSecretsPresence: `gh secret list --repo ${GUARDIAN_RELEASE_REPOSITORY} --app actions | rg '^(${chromeWebStoreSecretMatcher})\\b'`,
       dryRunDispatch: buildGuardianReleaseDispatchCommandFor({
         dryRun: true,
         releaseVersion: "<version>",
@@ -17646,13 +18022,24 @@ function buildGuardianReleaseSecretSetup() {
         releaseVersion: "<version>",
         channels: "all",
         runDockerSmoke: true
+      }),
+      browserStoreApiPublishDispatch: buildGuardianReleaseDispatchCommandFor({
+        dryRun: false,
+        releaseVersion: "<version>",
+        channels: "browser",
+        runDockerSmoke: true,
+        publishAuth: "trusted_publisher",
+        browserStorePublish: "api"
       })
     },
     boundaries: [
-      "NPM_TOKEN belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
+      "npm Trusted Publishing is the default Guardian release path and uses this GitHub Actions workflow identity.",
+      "NPM_TOKEN is a fallback credential only; when used, it belongs only in GitHub Actions repository secrets for guarded dry_run=false npm publication.",
+      "Chrome Web Store API OAuth values belong only in GitHub Actions repository secrets for guarded browser_store_publish=api upload/submission.",
       "Do not paste npm tokens, OTP values, .npmrc contents, signing keys, browser-store credentials, raw prompts, raw responses, private policy packs, or customer content into chat, PR bodies, release evidence, or CLI output.",
-      "Use dry_run=true before dry_run=false; dry-run dispatch does not require NPM_TOKEN.",
-      "Adding NPM_TOKEN enables the npm preview publish lane only; it does not close signed-installer, browser-store, high-risk desktop, or autonomous app production gates."
+      "Use dry_run=true before dry_run=false; dry-run dispatch does not require npm publish credentials.",
+      "Adding NPM_TOKEN enables the npm preview publish lane only; it does not close signed-installer, browser-store, high-risk desktop, or autonomous app production gates.",
+      "Chrome Web Store API secrets enable browser update upload/submission only; official review approval evidence is still required for production browser-store claims."
     ],
     tokenPrinted: false,
     rawContentIncluded: false
@@ -17666,16 +18053,28 @@ function renderGuardianReleaseSecretSetup(result, flags) {
   return `${[
     "Project Guardian Release Secret Setup",
     `Repository: ${result.repository}`,
-    `Required for publish: ${result.requiredForPublish}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
+    `Required for Chrome Web Store API: ${result.requiredForBrowserStoreApi.join(", ")}`,
     `GitHub Actions secret page: ${result.githubActionsSecretUrl}`,
-    "Set secret:",
+    "NPM publish secret:",
     result.commands.setNpmToken,
-    "Verify secret presence:",
+    "Verify npm secret presence:",
     result.commands.verifyNpmTokenPresence,
+    "Chrome Web Store API secrets:",
+    result.commands.setChromeWebStoreClientId,
+    result.commands.setChromeWebStoreClientSecret,
+    result.commands.setChromeWebStoreRefreshToken,
+    result.commands.setChromeWebStorePublisherId,
+    result.commands.setChromeWebStoreExtensionId,
+    "Verify Chrome Web Store API secret presence:",
+    result.commands.verifyChromeWebStoreSecretsPresence,
     "Dry-run release command:",
     result.commands.dryRunDispatch,
-    "Publish release command:",
+    "Default publish command with manual browser-store upload:",
     result.commands.publishDispatch,
+    "Browser-store API publish command:",
+    result.commands.browserStoreApiPublishDispatch,
     "Boundaries:",
     ...result.boundaries.map((boundary) => `- ${boundary}`),
     "Token printed: no"
@@ -17706,7 +18105,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
       browserStoreHandoff: "guardian release browser-store",
       readiness: "guardian readiness"
     },
-    requiredRepositoryCredentialName: "NPM_TOKEN",
+    defaultPublishAuth: GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
+    tokenFallbackCredentialName: "NPM_TOKEN",
     evidenceOutputs: [
       "release/evidence/guardian-release-dispatch-summary.json",
       "release/evidence/guardian-npm-publish-execution-summary.json",
@@ -17723,7 +18123,8 @@ function buildGuardianReleaseChecklist(releaseVersion) {
     boundaries: [
       "This checklist is an operator command surface for Guardian preview releases; it is not production-gate proof.",
       "Run the dry-run dispatch before any dry_run=false publish dispatch.",
-      "dry_run=false requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "dry_run=false defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "The checklist does not sign native installers, submit browser-store packages, execute high-risk desktop actions, or enable autonomous local app execution.",
       "Full production claims remain blocked until every not-proven production gate has real validated external evidence."
     ],
@@ -17761,7 +18162,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
       },
       {
         id: "verify-secrets",
-        label: "Verify npm publish secret setup",
+        label: "Verify npm Trusted Publisher setup or token fallback",
         command: "guardian release secrets",
         credentialRequired: false
       },
@@ -17775,7 +18176,7 @@ function buildGuardianReleaseFlow(releaseVersion) {
         id: "publish-dispatch",
         label: "Run the guarded publish dispatch after dry-run evidence passes",
         command: publishDispatch,
-        credentialRequired: true
+        credentialRequired: false
       },
       {
         id: "verify-public-release",
@@ -17811,7 +18212,8 @@ function buildGuardianReleaseFlow(releaseVersion) {
     })),
     boundaries: [
       "This release flow is copy-paste operator guidance only; it is not release evidence or production-gate proof.",
-      "Publish dispatch requires NPM_TOKEN in GitHub Actions repository secrets and must not print npm tokens, OTP values, or .npmrc contents.",
+      "Publish dispatch defaults to npm Trusted Publishing and must not print npm tokens, OTP values, or .npmrc contents.",
+      "The token fallback route remains available with publish_auth=token and requires NPM_TOKEN in GitHub Actions repository secrets.",
       "Run the dry-run dispatch before the guarded dry_run=false publish dispatch.",
       "Public npm preview publication and local install smoke prove the CLI preview lane only.",
       "Signed native installers, high-risk desktop action execution, and autonomous local app execution remain separate not-proven production gates until real external evidence is collected and validated."
@@ -17860,7 +18262,8 @@ function renderGuardianReleaseChecklist(result, flags) {
     `Release: ${result.releaseVersion}`,
     `Repository: ${result.repository}`,
     `Status: ${result.status}`,
-    `Required repository credential: ${result.requiredRepositoryCredentialName}`,
+    "Default npm publish setup: Trusted Publisher connection",
+    `Fallback npm publish secret: ${result.tokenFallbackCredentialName}`,
     "1. Secret setup:",
     result.operatorCommands.secretSetup,
     "2. Dry-run dispatch:",
@@ -17896,9 +18299,9 @@ function buildGuardianReleaseVerify(releaseVersion) {
     commands: {
       registryVersion: `npm view ${GUARDIAN_NPM_PACKAGE_NAME}@${releaseVersion} version --registry=${GUARDIAN_NPM_REGISTRY}`,
       publicInstall: `npm install -g ${GUARDIAN_NPM_PACKAGE_NAME}@${releaseVersion}`,
+      chromeWebStoreListing: GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL,
       installedVersion: "guardian --version",
       setup: "guardian setup",
-      launch: "guardian launch",
       status: "guardian status",
       openControlTower: "guardian open",
       copyPasteLocalSmoke,
@@ -17927,9 +18330,8 @@ function buildGuardianReleasePaste(releaseVersion) {
     "guardian --version",
     "guardian stop",
     "guardian setup",
-    "guardian launch",
-    "guardian open",
-    "guardian status"
+    "guardian status",
+    "guardian open"
   ];
   return {
     schema_version: "contextecf/project-guardian-release-paste/v1",
@@ -17940,9 +18342,9 @@ function buildGuardianReleasePaste(releaseVersion) {
     command: commands.join("\n"),
     commands,
     boundaries: [
-      "This paste block verifies public npm visibility, global install, first-run setup, daemon launch, Control Tower open, and status.",
+      "This paste block verifies public npm visibility, global install, stale-process cleanup, first-run setup, Local Guardian status, and Control Tower open.",
       "It does not publish to npm and must not include npm tokens, OTP values, .npmrc contents, signing keys, browser-store credentials, raw prompts, raw responses, private policy packs, or customer content.",
-      "guardian stop is included before setup so stale local daemons or local token mismatches are cleared before launch."
+      "guardian stop is included before setup so stale Local Guardian processes or local token mismatches are cleared before setup relaunches the local service."
     ],
     tokenPrinted: false,
     rawContentIncluded: false
@@ -17969,18 +18371,19 @@ function renderGuardianReleaseVerify(result, flags) {
     `Status: ${result.status}`,
     "1. Confirm registry visibility:",
     result.commands.registryVersion,
-    "2. Install the published version:",
+    "2. Confirm public Chrome Web Store listing:",
+    result.commands.chromeWebStoreListing,
+    "3. Install the published version:",
     result.commands.publicInstall,
-    "3. Confirm installed CLI version:",
+    "4. Confirm installed CLI version:",
     result.commands.installedVersion,
-    "4. Run first-use smoke:",
+    "5. Run first-use smoke:",
     result.commands.setup,
-    result.commands.launch,
     result.commands.status,
     result.commands.openControlTower,
-    "5. Copy-paste local smoke block:",
+    "6. Copy-paste local smoke block:",
     result.commands.copyPasteLocalSmoke,
-    "6. Verify release evidence:",
+    "7. Verify release evidence:",
     result.commands.publishStatusVerification,
     result.commands.finishLineStatus,
     "Evidence outputs:",
@@ -17997,6 +18400,12 @@ function isValidReleaseVersion(value) {
 function isValidReleaseChannels(value) {
   return ["all", "npm", "browser", "evidence"].includes(value);
 }
+function isValidReleasePublishAuth(value) {
+  return value === "token" || value === "trusted_publisher";
+}
+function isValidBrowserStorePublish(value) {
+  return value === "manual" || value === "api";
+}
 function renderGuardianProductionReadiness(result, flags) {
   if (flags.has("json")) {
     return `${JSON.stringify(result, null, 2)}
@@ -18099,9 +18508,9 @@ async function statusGuardian(flags, options) {
     `Profile: ${home}`,
     `Runtime profile: ${result.runtime.profileDaemonStatus}`,
     `Control Tower: ${result.controlTowerUrl ?? "not configured"}`,
-    `Daemon health: ${result.daemon.status}${result.daemon.statusCode ? ` (HTTP ${result.daemon.statusCode})` : ""}`,
-    result.daemon.error ? `Daemon detail: ${result.daemon.error}` : void 0,
-    result.daemonVersionMismatch ? `Daemon version: ${result.daemonVersionMismatch.daemonVersion} (this CLI is ${result.daemonVersionMismatch.cliVersion} \u2014 versions differ, likely because the CLI was reinstalled or changed version while this daemon kept running; run guardian stop && guardian launch to restart it on the current version)` : void 0,
+    `Local Guardian: ${result.daemon.status}${result.daemon.statusCode ? ` (HTTP ${result.daemon.statusCode})` : ""}`,
+    result.daemon.error ? `Connection detail: ${result.daemon.error}` : void 0,
+    result.daemonVersionMismatch ? `Local Guardian version: ${result.daemonVersionMismatch.daemonVersion} (this CLI is ${result.daemonVersionMismatch.cliVersion} \u2014 versions differ, likely because the CLI was reinstalled or changed version while Local Guardian kept running; run guardian stop && guardian launch to restart it on the current version)` : void 0,
     `MCP stdio: ${result.runtime.mcpStdioAvailable ? "available" : "unavailable"}`,
     `Posture Profile: ${result.postureProfile.selected}`,
     `Prompt Coach: ${result.preferences.promptCoachMode}`,
@@ -18208,7 +18617,7 @@ async function runLaunchCommand(flags, options) {
     nextCommands: [
       "guardian open",
       "guardian status",
-      "guardian daemon pair --json",
+      "Open ContextECF Halo and click Connect",
       "guardian policy list"
     ]
   };
@@ -18217,7 +18626,7 @@ async function runLaunchCommand(flags, options) {
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
 ` : `${[
       "Project Guardian launched.",
-      `Daemon: ${result.daemonUrl}${result.reusedExistingDaemon ? " (already running)" : ""}`,
+      `Local Guardian: ${result.daemonUrl}${result.reusedExistingDaemon ? " (already running)" : ""}`,
       `Control Tower: ${result.controlTowerUrl}`,
       shouldOpen ? `Opening: ${result.controlTowerUrl}` : void 0,
       "Next: guardian open; guardian status"
@@ -18328,14 +18737,14 @@ async function runStartCommand(flags, options) {
       controlTowerUrl: requestedControlTowerUrl,
       healthUrl,
       healthStatus: "reachable",
-      nextCommands: ["guardian open", "guardian status", "guardian daemon pair --json"]
+      nextCommands: ["guardian open", "guardian status", "Open ContextECF Halo and click Connect"]
     };
     write(
       stdout,
       flags.has("json") ? `${JSON.stringify(result2, null, 2)}
 ` : `${[
-        "Guardian daemon already running.",
-        `Daemon: ${requestedDaemonUrl}`,
+        "Local Guardian already running.",
+        `Local Guardian: ${requestedDaemonUrl}`,
         `Control Tower: ${requestedControlTowerUrl}`,
         "Next: guardian open"
       ].join("\n")}
@@ -18344,7 +18753,7 @@ async function runStartCommand(flags, options) {
     return 0;
   }
   if (!options.startDetachedDaemon) {
-    write(stderr, "Guardian detached daemon launcher is unavailable in this runtime.\n");
+    write(stderr, "Guardian local background launcher is unavailable in this runtime.\n");
     return 1;
   }
   const started = await options.startDetachedDaemon({ home, host, port: selected.port });
@@ -18365,14 +18774,14 @@ async function runStartCommand(flags, options) {
     pid: started.pid,
     healthUrl,
     healthStatus: existing.error ? "unreachable" : "not_reachable",
-    nextCommands: ["guardian open", "guardian status", "guardian daemon pair --json"]
+    nextCommands: ["guardian open", "guardian status", "Open ContextECF Halo and click Connect"]
   };
   write(
     stdout,
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
 ` : `${[
-      "Guardian daemon start requested.",
-      `Daemon: ${daemonUrl}`,
+      "Local Guardian start requested.",
+      `Local Guardian: ${daemonUrl}`,
       `Control Tower: ${controlTowerUrl}`,
       started.pid ? `PID: ${started.pid}` : void 0,
       "Next: guardian open"
@@ -18383,8 +18792,8 @@ async function runStartCommand(flags, options) {
 }
 function renderDaemonTokenMismatchMessage(requestedDaemonUrl, port) {
   return [
-    `Guardian found another daemon or container at ${requestedDaemonUrl}, but it rejected this profile's local runtime token.`,
-    "This usually means an older Guardian daemon or Docker demo is still using the port.",
+    `Guardian found another local service or container at ${requestedDaemonUrl}, but it rejected this profile's local connection token.`,
+    "This usually means an older Guardian background service or Docker demo is still using the port.",
     `Recovery: stop the other process/container, or run Guardian on a different port with guardian launch --port=${port + 1}.`,
     `Diagnostics: guardian status; docker ps --filter publish=${port}`,
     ""
@@ -18417,7 +18826,7 @@ async function runStopCommand(flags, options) {
   if (!stopped.ok) {
     write(
       stderr,
-      `Guardian daemon did not stop cleanly${stopped.statusCode ? ` (HTTP ${stopped.statusCode})` : ""}: ${stopped.error ?? "unknown_error"}
+      `Local Guardian did not stop cleanly${stopped.statusCode ? ` (HTTP ${stopped.statusCode})` : ""}: ${stopped.error ?? "unknown_error"}
 `
     );
     return 1;
@@ -18428,12 +18837,12 @@ async function runStopCommand(flags, options) {
     success: true,
     daemonStatus: profile.runtime.daemon_status,
     stopUrl: stopUrl.url,
-    note: "Guardian daemon stop requested."
+    note: "Local Guardian stop requested."
   };
   write(
     stdout,
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
-` : `${["Guardian daemon stop requested.", "Status: not_started_mvp"].join("\n")}
+` : `${["Local Guardian stop requested.", "Status: not_started_mvp"].join("\n")}
 `
   );
   return 0;
@@ -18505,7 +18914,7 @@ Proof: ${result2.proofPath}
   }
   const host = stringFlag(flags, "host") ?? "127.0.0.1";
   if (!isLoopbackHost(host)) {
-    write(stderr, "Guardian service supervision only accepts loopback daemon hosts.\n");
+    write(stderr, "Guardian service supervision only accepts loopback Local Guardian hosts.\n");
     return 1;
   }
   const port = numberFlag(flags, "port") ?? 4317;
@@ -18762,7 +19171,7 @@ async function daemonPair(flags, options) {
       [GUARDIAN_BRIDGE_CONFIG_STORAGE_KEY]: bridgeConfig,
       [GUARDIAN_BRIDGE_TOKEN_STORAGE_KEY]: token
     },
-    note: "Store this token in the Guardian browser extension local settings, then run guardian daemon serve."
+    note: "Advanced fallback only. Most users should run guardian setup, open ContextECF Halo, and click Connect."
   };
   if (flags.has("json")) {
     return { exitCode: 0, message: `${JSON.stringify(pairing, null, 2)}
@@ -18771,13 +19180,10 @@ async function daemonPair(flags, options) {
   return {
     exitCode: 0,
     message: `${[
-      "Guardian browser bridge pairing",
-      `Storage key: ${pairing.storageKey}`,
-      `Loopback URL: ${pairing.loopbackBaseUrl}`,
-      `Transport: ${pairing.transport}`,
-      `Native host: ${pairing.nativeHostName}`,
-      `Token: ${pairing.token}`,
-      pairing.note
+      "Guardian browser connection uses one-click setup now.",
+      "Run guardian connect, then open ContextECF Halo and click Connect.",
+      "Support setup codes are only printed by guardian pair --json.",
+      "Token printed: no"
     ].join("\n")}
 `
   };
@@ -18786,6 +19192,9 @@ async function runExtensionCommand(argv, flags, options) {
   const subcommand = argv[0] ?? "native-host";
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
+  if (subcommand === "connect") {
+    return runExtensionConnectCommand(flags, options);
+  }
   if (subcommand === "open-setup") {
     return runExtensionOpenSetupCommand(flags, options);
   }
@@ -18973,13 +19382,18 @@ Re-run with --force to replace it.
     registryMutationRequested: writeRegistry,
     registryProofPath,
     tokenPrinted: false,
-    nextCommands: ["guardian launch", "guardian daemon pair --json"]
+    nextCommands: [
+      "guardian launch",
+      "Open ContextECF Halo and click Connect",
+      "guardian extension native-host status"
+    ],
+    advancedCommands: ["guardian pair --json"]
   };
   write(
     stdout,
     flags.has("json") ? `${JSON.stringify(result, null, 2)}
 ` : `${[
-      "Guardian native host installed.",
+      "Guardian browser connection installed.",
       `Browser: ${browser}`,
       `Host: ${plan.hostName}`,
       `Manifest: ${plan.manifestPath}`,
@@ -18994,6 +19408,121 @@ Re-run with --force to replace it.
   );
   return 0;
 }
+async function runExtensionConnectCommand(flags, options) {
+  const stdout = options.stdout ?? process.stdout;
+  const stderr = options.stderr ?? process.stderr;
+  const requestedExtensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
+  const extensionId = requestedExtensionId ?? GUARDIAN_HALO_CHROME_EXTENSION_ID;
+  if (requestedExtensionId && !isValidChromeExtensionId(requestedExtensionId)) {
+    write(
+      stderr,
+      "Invalid --extension-id. Chrome extension ids must be 32 lowercase letters from a-p.\n"
+    );
+    return 1;
+  }
+  const install = JSON.parse(await installGuardian(/* @__PURE__ */ new Map([["json", true]]), options));
+  let launchOutput = "";
+  const launchFlags = new Map([
+    ["json", true],
+    ["print", true],
+    ...copyStringFlags(flags, ["host", "port"])
+  ]);
+  const launchExitCode = await runLaunchCommand(launchFlags, {
+    ...options,
+    stdout: {
+      write: (chunk) => {
+        launchOutput += chunk.toString();
+        return true;
+      }
+    },
+    stderr
+  });
+  if (launchExitCode !== 0) {
+    return launchExitCode;
+  }
+  const launch = JSON.parse(launchOutput);
+  const helperFlags = new Map([
+    ["json", true],
+    ["force", true],
+    ["extension-id", extensionId],
+    ...copyStringFlags(flags, ["browser", "target"])
+  ]);
+  if ((options.platform ?? process.platform) === "win32") {
+    helperFlags.set("write-registry", true);
+    helperFlags.set("yes", true);
+  }
+  let helperOutput = "";
+  let helperError = "";
+  const helperExitCode = await runExtensionCommand(["native-host", "install"], helperFlags, {
+    ...options,
+    stdout: {
+      write: (chunk) => {
+        helperOutput += chunk.toString();
+        return true;
+      }
+    },
+    stderr: {
+      write: (chunk) => {
+        helperError += chunk.toString();
+        return true;
+      }
+    }
+  });
+  if (helperExitCode !== 0) {
+    write(
+      stderr,
+      helperError.trim() ? `${helperError.trim()}
+` : "Guardian could not prepare the browser connection. Run guardian setup, then try again.\n"
+    );
+    return helperExitCode;
+  }
+  const helper = JSON.parse(helperOutput);
+  const result = {
+    schema_version: "contextecf/project-guardian-browser-connect/v1",
+    success: true,
+    extensionId,
+    defaultExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
+    install: {
+      profileDir: install.profileDir,
+      tokenCreated: install.tokenCreated,
+      tokenPrinted: false
+    },
+    localGuardian: {
+      running: true,
+      opened: launch.opened,
+      reusedExistingDaemon: launch.reusedExistingDaemon,
+      daemonUrl: launch.daemonUrl,
+      controlTowerUrl: launch.controlTowerUrl,
+      pid: launch.pid,
+      healthStatus: launch.healthStatus
+    },
+    browser: helper.browser,
+    helperInstalled: true,
+    helperStatus: {
+      hostName: helper.hostName,
+      manifestPath: helper.manifestPath,
+      allowedOrigins: helper.allowedOrigins,
+      tokenPrinted: helper.tokenPrinted
+    },
+    tokenPrinted: false,
+    nextCommands: ["Open ContextECF Halo and click Connect", "guardian open", "guardian status"],
+    supportCommands: ["guardian extension open-setup --print", "guardian pair --json"]
+  };
+  write(
+    stdout,
+    flags.has("json") ? `${JSON.stringify(result, null, 2)}
+` : `${[
+      "Guardian browser connection is ready.",
+      `Local Guardian: ${result.localGuardian.daemonUrl}${result.localGuardian.reusedExistingDaemon ? " (already running)" : ""}`,
+      `Browser: ${result.browser}`,
+      "Next: open ContextECF Halo and click Connect.",
+      "No setup code needed.",
+      "Token printed: no"
+    ].join("\n")}
+`
+  );
+  return 0;
+}
 async function runExtensionOpenSetupCommand(flags, options) {
   const stdout = options.stdout ?? process.stdout;
   const stderr = options.stderr ?? process.stderr;
@@ -19003,8 +19532,9 @@ async function runExtensionOpenSetupCommand(flags, options) {
     write(stderr, "Guardian is not installed. Run guardian install first.\n");
     return 1;
   }
-  const extensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
-  if (extensionId && !isValidChromeExtensionId(extensionId)) {
+  const requestedExtensionId = stringFlag(flags, "extension-id") ?? stringFlag(flags, "id");
+  const extensionId = requestedExtensionId ?? GUARDIAN_HALO_CHROME_EXTENSION_ID;
+  if (requestedExtensionId && !isValidChromeExtensionId(requestedExtensionId)) {
     write(
       stderr,
       "Invalid --extension-id. Chrome extension ids must be 32 lowercase letters from a-p.\n"
@@ -19018,22 +19548,24 @@ async function runExtensionOpenSetupCommand(flags, options) {
     return 1;
   }
   const setupUrl = buildControlTowerSetupUrl(resolved.url);
-  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId ?? "<browser-extension-id>"}`;
+  const nativeHostCommand = `guardian extension native-host install --extension-id=${extensionId}`;
   const result = {
     schema_version: "contextecf/project-guardian-extension-setup/v1",
     success: true,
     opened: !flags.has("print"),
     controlTowerUrl: resolved.url,
     setupUrl,
-    extensionId: extensionId ?? null,
+    extensionId,
+    defaultExtensionId: GUARDIAN_HALO_CHROME_EXTENSION_ID,
     tokenPrinted: false,
     nextCommands: [
       "guardian launch",
-      "guardian daemon pair --json",
       nativeHostCommand,
-      "guardian extension native-host status"
+      "guardian extension native-host status",
+      "Open ContextECF Halo and click Connect"
     ],
-    note: extensionId ? "Guardian browser setup opened with a concrete native host install command." : "Guardian browser setup opened with placeholder extension-id guidance."
+    advancedCommands: ["guardian pair --json"],
+    note: extensionId ? "Guardian browser setup opened for ContextECF Halo." : "Guardian browser setup opened."
   };
   if (result.opened) {
     const opener = options.openUrl ?? ((url2) => openUrlInDefaultBrowser(url2, options));
@@ -19045,7 +19577,8 @@ async function runExtensionOpenSetupCommand(flags, options) {
 ` : `${[
       result.opened ? `Opening Guardian browser setup: ${setupUrl}` : `Guardian browser setup: ${setupUrl}`,
       "Token printed: no",
-      `Next: ${result.nextCommands.join("; ")}`
+      `Next: ${result.nextCommands.join("; ")}`,
+      `Advanced fallback: ${result.advancedCommands.join("; ")}`
     ].join("\n")}
 `
   );
@@ -19572,7 +20105,7 @@ function buildGuardianServiceArtifact(input) {
   if (input.platform === "systemd") {
     return `${[
       "[Unit]",
-      "Description=Project Guardian local daemon",
+      "Description=Project Guardian Local Guardian background service",
       "After=network.target",
       "",
       "[Service]",
@@ -19591,7 +20124,7 @@ function buildGuardianServiceArtifact(input) {
     '<?xml version="1.0" encoding="UTF-16"?>',
     '<Task version="1.4" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">',
     "  <RegistrationInfo>",
-    "    <Description>Project Guardian local daemon</Description>",
+    "    <Description>Project Guardian Local Guardian background service</Description>",
     "  </RegistrationInfo>",
     "  <Triggers>",
     "    <LogonTrigger><Enabled>true</Enabled></LogonTrigger>",
@@ -20573,6 +21106,59 @@ async function runReceiptsCommand(argv, flags, options) {
   write(stdout, await verifyReceipts(flags, options));
   return 0;
 }
+async function runCoachCommand(argv, flags, options) {
+  const subcommand = argv[0] ?? "options";
+  const stdout = options.stdout ?? process.stdout;
+  const stderr = options.stderr ?? process.stderr;
+  if (subcommand === "options" || subcommand === "catalog") {
+    write(stdout, renderGuardianPromptCardOptions(buildGuardianPromptCardOptions(), flags));
+    return 0;
+  }
+  write(stderr, `Unknown Guardian coach command: ${subcommand}
+`);
+  return 1;
+}
+function buildGuardianPromptCardOptions() {
+  return {
+    schema_version: "contextecf/project-guardian-prompt-card-options/v1",
+    cli_version: GUARDIAN_CLI_VERSION,
+    status: "catalog_ready",
+    summary: "Guardian prompt cards keep the user in control: warnings and safer rewrites can be sent as-is, while hard blocks cannot.",
+    catalog: GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG,
+    rules: [
+      "Show a clear reason before asking the user to decide.",
+      "Offer Send as-is for warnings and safer rewrites when policy allows override.",
+      "Never offer Send as-is for hard blocks or unavailable Local Guardian checks.",
+      "Keep Edit prompt available as the safe path for every visible send-time card.",
+      "Do not store raw sensitive prompt text in this catalog or CLI output."
+    ],
+    tokenPrinted: false,
+    rawContentIncluded: false
+  };
+}
+function renderGuardianPromptCardOptions(result, flags) {
+  if (flags.has("json")) {
+    return `${JSON.stringify(result, null, 2)}
+`;
+  }
+  return `${[
+    "Guardian Prompt Card Options",
+    result.summary,
+    "",
+    "Programmed cards:",
+    ...result.catalog.map((entry) => {
+      const visibleActions = entry.actions.filter((action) => action.visibleToUser).map((action) => action.label);
+      const labels = visibleActions.length > 0 ? visibleActions.join(", ") : "Prompt sends automatically";
+      return `- ${entry.cardStyle}: ${labels}`;
+    }),
+    "",
+    "Rules:",
+    ...result.rules.map((rule) => `- ${rule}`),
+    "Token printed: no",
+    "Raw prompt content included: no"
+  ].join("\n")}
+`;
+}
 async function runPolicyCommand(argv, flags, options) {
   const subcommand = argv[0] ?? "list";
   const stdout = options.stdout ?? process.stdout;
@@ -23003,15 +23589,19 @@ function openUrlInDefaultBrowser(url2, options = {}) {
   });
 }
 export {
+  GUARDIAN_CHROME_WEB_STORE_API_SECRET_NAMES,
   GUARDIAN_CLI_VERSION,
   GUARDIAN_CONTROL_TOWER_URL_ENV,
   GUARDIAN_DEFAULT_CONTROL_TOWER_URL,
+  GUARDIAN_DEFAULT_NPM_PUBLISH_AUTH,
   GUARDIAN_DESKTOP_ADAPTER_SIMULATE_OPEN_ENV,
   GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_ID,
   GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_PROOF_SCHEMA_VERSION,
   GUARDIAN_DESKTOP_URL_OPEN_ADAPTER_VERSION,
   GUARDIAN_FIRST_RUN_COMMAND,
   GUARDIAN_GLOBAL_INSTALL_COMMAND,
+  GUARDIAN_HALO_CHROME_EXTENSION_ID,
+  GUARDIAN_HALO_CHROME_WEB_STORE_LISTING_URL,
   GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ENV,
   GUARDIAN_LOCAL_DATA_ENCRYPTION_KEY_ID_ENV,
   GUARDIAN_NOT_PROVEN_PRODUCTION_GATES,
@@ -23024,6 +23614,7 @@ export {
   GUARDIAN_POSTURE_PROFILE_CATALOG,
   GUARDIAN_POSTURE_PROFILE_IDS,
   GUARDIAN_PROFILE_SCHEMA_VERSION,
+  GUARDIAN_PROMPT_CARD_OPTIONS_CATALOG,
   GUARDIAN_PROVIDER_IDS,
   GUARDIAN_RELEASE_DISPATCH_WORKFLOW,
   GUARDIAN_RELEASE_REPOSITORY,