@decantr/cli 2.8.1 → 2.9.1

package/dist/{chunk-KT2ROK2D.js → chunk-34TZXWIF.js}

@@ -1,1756 +1,2073 @@
-// src/bundled-content.ts
-import { existsSync, readdirSync, readFileSync } from "fs";
-import { dirname, join } from "path";
-import { fileURLToPath } from "url";
-function bundledDirCandidates(contentType) {
-  const currentDir = dirname(fileURLToPath(import.meta.url));
-  return [
-    join(currentDir, "bundled", contentType),
-    join(currentDir, "..", "src", "bundled", contentType),
-    join(currentDir, "..", "bundled", contentType)
-  ];
+// src/commands/heal.ts
+import { existsSync as existsSync10, readFileSync as readFileSync10 } from "fs";
+import { join as join10 } from "path";
+import { evaluateGuard, isV4, validateEssence } from "@decantr/essence-spec";
+
+// src/brownfield-check.ts
+import { existsSync as existsSync5, readFileSync as readFileSync5 } from "fs";
+import { join as join5 } from "path";
+
+// src/ambient-context.ts
+import { existsSync, readdirSync, readFileSync, statSync } from "fs";
+import { basename, extname, join, relative, sep } from "path";
+var SKIP_DIRS = /* @__PURE__ */ new Set([
+  ".decantr",
+  ".git",
+  ".next",
+  ".nuxt",
+  ".svelte-kit",
+  ".turbo",
+  ".vercel",
+  "build",
+  "coverage",
+  "dist",
+  "node_modules",
+  "playwright-report"
+]);
+var ROOT_CONTEXT_FILES = /* @__PURE__ */ new Set([
+  "AGENTS.md",
+  "CLAUDE.md",
+  "GEMINI.md",
+  "README.md",
+  "copilot-instructions.md",
+  ".cursorrules",
+  ".windsurfrules",
+  ".cursorignore",
+  ".claudeignore",
+  "components.json",
+  "tailwind.config.js",
+  "tailwind.config.ts",
+  "tailwind.config.mjs",
+  "tailwind.config.cjs",
+  "next.config.js",
+  "next.config.ts",
+  "next.config.mjs",
+  "nuxt.config.js",
+  "nuxt.config.ts",
+  "astro.config.mjs",
+  "astro.config.ts",
+  "svelte.config.js",
+  "svelte.config.ts",
+  "angular.json",
+  "vite.config.js",
+  "vite.config.ts",
+  "vitest.config.ts",
+  "vitest.config.js",
+  "playwright.config.ts",
+  "playwright.config.js",
+  "tsconfig.json",
+  "package.json",
+  "decantr.essence.json"
+]);
+var CONTEXT_DIRECTORIES = /* @__PURE__ */ new Set([
+  ".agents",
+  ".claude",
+  ".claude/initiatives",
+  ".claude/rules",
+  ".codex",
+  ".cursor",
+  ".cursor/rules",
+  ".github/workflows",
+  "docs",
+  "docs/initiatives",
+  "initiatives",
+  "memory",
+  "memories",
+  "project-memory",
+  "supabase"
+]);
+function shouldSkipDir(name) {
+  return SKIP_DIRS.has(name);
 }
-function getBundledContentPath(contentType, id) {
-  for (const dir of bundledDirCandidates(contentType)) {
-    const candidate = join(dir, `${id}.json`);
-    if (existsSync(candidate)) return candidate;
-  }
-  return null;
+function normalizedPath(relPath) {
+  return relPath.split(sep).join("/");
 }
-function loadBundledContentItem(contentType, id) {
-  const path = getBundledContentPath(contentType, id);
-  if (!path) return null;
-  try {
-    const data = JSON.parse(readFileSync(path, "utf-8"));
-    return { id, data, path };
-  } catch {
-    return null;
-  }
+function isPotentialContextFile(relPath, name) {
+  const normalized2 = normalizedPath(relPath);
+  if (ROOT_CONTEXT_FILES.has(name)) return true;
+  if (name.startsWith(".env")) return true;
+  if (normalized2.startsWith(".claude/")) return true;
+  if (normalized2.startsWith(".agents/")) return true;
+  if (normalized2.startsWith(".codex/")) return true;
+  if (normalized2.startsWith(".cursor/")) return true;
+  if (normalized2.startsWith(".github/workflows/")) return true;
+  if (normalized2.startsWith("docs/")) return true;
+  if (normalized2.startsWith("initiatives/")) return true;
+  if (normalized2.startsWith("memory/")) return true;
+  if (normalized2.startsWith("memories/")) return true;
+  if (normalized2.startsWith("project-memory/")) return true;
+  if (normalized2.startsWith("supabase/")) return true;
+  if (normalized2.startsWith("migrations/")) return true;
+  if (normalized2.startsWith("db/")) return true;
+  if (normalized2.startsWith("ROLEMIGRATIONS/")) return true;
+  if (normalized2 === "src/middleware.ts" || normalized2 === "middleware.ts") return true;
+  if (normalized2.includes("/middleware.")) return true;
+  const ext = extname(name).toLowerCase();
+  return ext === ".md" || ext === ".mdx" || ext === ".sql" || ext === ".yml" || ext === ".yaml";
 }
-function loadBundledContentList(contentType) {
-  const entries = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const dir of bundledDirCandidates(contentType)) {
-    if (!existsSync(dir)) continue;
-    try {
-      for (const file of readdirSync(dir).filter((name) => name.endsWith(".json"))) {
-        const id = file.replace(/\.json$/, "");
-        if (seen.has(id)) continue;
-        const path = join(dir, file);
-        const data = JSON.parse(readFileSync(path, "utf-8"));
-        entries.push({ id, data, path });
-        seen.add(id);
-      }
-    } catch {
-    }
+function classifyContext(relPath) {
+  const normalized2 = normalizedPath(relPath);
+  const lower = normalized2.toLowerCase();
+  const name = basename(normalized2);
+  if (lower === "decantr.essence.json") {
+    return {
+      role: "architecture",
+      confidence: 0.82,
+      reason: "existing Decantr contract evidence"
+    };
   }
-  return entries;
+  if (lower === ".claude/initiatives" || lower === "docs/initiatives" || lower === "initiatives" || lower === "memory" || lower === "memories" || lower === "project-memory" || lower.startsWith(".claude/initiatives/") || lower.startsWith("docs/initiatives/") || lower.startsWith("initiatives/") || lower.startsWith("memory/") || lower.startsWith("memories/") || lower.startsWith("project-memory/") || lower.includes("/feature/") || lower.includes("feature") || lower.includes("rbac") || lower.includes("billing") || lower.includes("admin") || lower.includes("dashboard")) {
+    return {
+      role: "feature-business",
+      confidence: 0.78,
+      reason: "feature, initiative, memory, or business-domain evidence"
+    };
+  }
+  if (lower === ".agents" || lower === ".claude" || lower === ".codex" || lower === ".cursor" || lower === "claude.md" || lower === "agents.md" || lower === "gemini.md" || lower === "copilot-instructions.md" || lower === ".cursorrules" || lower === ".windsurfrules" || lower.startsWith(".claude/") || lower.startsWith(".agents/") || lower.startsWith(".codex/") || lower.startsWith(".cursor/rules/")) {
+    return {
+      role: "assistant-specific",
+      confidence: 0.98,
+      reason: "assistant or AI-agent instruction surface"
+    };
+  }
+  if (lower.includes("security") || lower.includes("auth") || lower.includes("rls") || lower.includes("schema") || lower.includes("migration") || lower.startsWith("supabase/") || lower.startsWith("migrations/") || lower.startsWith("db/") || lower.startsWith("rolemigrations/") || lower.includes("middleware.")) {
+    return {
+      role: "security-data",
+      confidence: 0.9,
+      reason: "security, auth, schema, middleware, or data-governance evidence"
+    };
+  }
+  if (lower.includes("design-system") || lower === "components.json" || lower.startsWith("tailwind.config") || lower.includes("ui-components") || lower.includes("colors") || lower.includes("typography") || lower.includes("spacing")) {
+    return {
+      role: "design-system",
+      confidence: 0.88,
+      reason: "design system or styling convention evidence"
+    };
+  }
+  if (lower.startsWith(".github/workflows/") || lower.includes("workflow") || lower.includes("testing") || lower.includes("deployment") || lower.includes("vitest.config") || lower.includes("playwright.config") || lower === "package.json") {
+    return {
+      role: "workflow-ci",
+      confidence: 0.84,
+      reason: "workflow, CI, deployment, or validation command evidence"
+    };
+  }
+  if (lower === "docs" || lower.includes("architecture") || lower === "readme.md" || lower.includes("setup") || lower.includes("contributing") || name === "tsconfig.json" || lower.endsWith("config.ts") || lower.endsWith("config.js") || lower.endsWith("config.mjs")) {
+    return {
+      role: "architecture",
+      confidence: 0.72,
+      reason: "architecture, setup, or framework configuration evidence"
+    };
+  }
+  if (lower.includes("complete") || lower.includes("summary") || lower.includes("deprecated") || lower.includes("legacy") || lower.includes("migration")) {
+    return {
+      role: "stale-or-historical",
+      confidence: 0.64,
+      reason: "historical or possibly stale project documentation"
+    };
+  }
+  return { role: "unknown", confidence: 0.35, reason: "unclassified context candidate" };
 }
-
-// src/telemetry.ts
-import { randomUUID } from "crypto";
-import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2, writeFileSync } from "fs";
-import { homedir } from "os";
-import { dirname as dirname2, join as join2, resolve } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-import {
-  createFetchTelemetrySink,
-  createTelemetryClient,
-  isTelemetryActorType
-} from "@decantr/telemetry";
-var TELEMETRY_ENDPOINT = "https://api.decantr.ai/v1/telemetry/guard";
-var DEFAULT_TELEMETRY_EVENTS_ENDPOINT = "https://api.decantr.ai/v1/telemetry/events";
-var TELEMETRY_TIMEOUT_MS = 3e3;
-var DNA_RULES = /* @__PURE__ */ new Set(["theme", "style", "density", "accessibility", "theme-mode"]);
-async function sendGuardMetrics(metrics) {
-  try {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), TELEMETRY_TIMEOUT_MS);
-    await fetch(TELEMETRY_ENDPOINT, {
-      method: "POST",
-      headers: { "Content-Type": "application/json" },
-      body: JSON.stringify(metrics),
-      signal: controller.signal
-    });
-    clearTimeout(timer);
-  } catch {
+function isSafeToCite(relPath) {
+  const lower = normalizedPath(relPath).toLowerCase();
+  if (lower.startsWith(".env") && lower !== ".env.example" && lower !== ".env.sample") return false;
+  if (lower.includes("secret") || lower.includes("private-key") || lower.includes("credentials")) {
+    return false;
   }
+  return true;
 }
-function isOptedIn(projectRoot) {
-  const projectJsonPath = join2(projectRoot, ".decantr", "project.json");
-  if (!existsSync2(projectJsonPath)) return false;
+function addDirectoryContext(items, projectRoot, relPath) {
+  const fullPath = join(projectRoot, relPath);
+  if (!existsSync(fullPath)) return;
+  const stats = statSync(fullPath);
+  const classified = classifyContext(relPath);
+  items.push({
+    path: normalizedPath(relPath),
+    type: "directory",
+    role: classified.role,
+    confidence: classified.confidence,
+    sizeBytes: stats.size,
+    safeToCite: isSafeToCite(relPath),
+    reason: classified.reason
+  });
+}
+function walk(projectRoot, dir, items, depth) {
+  if (depth > 6) return;
+  let entries;
   try {
-    const data = JSON.parse(readFileSync2(projectJsonPath, "utf-8"));
-    return data.telemetry === true;
+    entries = readdirSync(dir);
   } catch {
-    return false;
+    return;
   }
-}
-function optIn(projectRoot) {
-  const projectJsonPath = join2(projectRoot, ".decantr", "project.json");
-  let data = {};
-  if (existsSync2(projectJsonPath)) {
+  for (const entry of entries) {
+    if (shouldSkipDir(entry)) continue;
+    const fullPath = join(dir, entry);
+    const relPath = normalizedPath(relative(projectRoot, fullPath));
+    let stats;
     try {
-      data = JSON.parse(readFileSync2(projectJsonPath, "utf-8"));
+      stats = statSync(fullPath);
     } catch {
+      continue;
     }
+    if (stats.isDirectory()) {
+      if (CONTEXT_DIRECTORIES.has(relPath)) {
+        addDirectoryContext(items, projectRoot, relPath);
+      }
+      walk(projectRoot, fullPath, items, depth + 1);
+      continue;
+    }
+    if (!stats.isFile() || !isPotentialContextFile(relPath, entry)) continue;
+    const classified = classifyContext(relPath);
+    items.push({
+      path: relPath,
+      type: "file",
+      role: classified.role,
+      confidence: classified.confidence,
+      sizeBytes: stats.size,
+      safeToCite: isSafeToCite(relPath),
+      reason: classified.reason
+    });
   }
-  data.telemetry = true;
-  mkdirSync(dirname2(projectJsonPath), { recursive: true });
-  writeFileSync(projectJsonPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
-}
-async function captureCliTelemetryEvent(input) {
-  const projectRoot = resolveCliTelemetryProjectRoot(
-    input.projectRoot ?? process.cwd(),
-    input.args ?? []
-  );
-  if (!isOptedIn(projectRoot)) {
-    return;
-  }
-  const identities = ensureTelemetryIdentities(projectRoot);
-  if (!identities) {
-    return;
-  }
-  const registrySource = input.registrySource ?? getRegistrySourceProperty(input.properties) ?? inferRegistrySource(input.args ?? []);
-  const client = createTelemetryClient({
-    sink: createFetchTelemetrySink({
-      endpoint: getTelemetryEventsEndpoint(),
-      timeoutMs: TELEMETRY_TIMEOUT_MS
-    })
-  });
-  const event = {
-    name: input.name,
-    context: {
-      source: "cli",
-      actorType: getTelemetryActorType(),
-      environment: "production",
-      decantrVersion: getCliVersion(),
-      installId: identities.installId,
-      projectId: identities.projectId,
-      registrySource
-    },
-    properties: input.properties
+}
+function summarize(items) {
+  const summary = {
+    "assistant-specific": 0,
+    "security-data": 0,
+    architecture: 0,
+    "design-system": 0,
+    "workflow-ci": 0,
+    "feature-business": 0,
+    "stale-or-historical": 0,
+    unknown: 0
   };
+  for (const item of items) summary[item.role] += 1;
+  return summary;
+}
+function readSmallText(projectRoot, relPath) {
+  const fullPath = join(projectRoot, relPath);
   try {
-    await client.capture(event);
+    const stat = statSync(fullPath);
+    if (stat.size > 64e3) return "";
+    return readFileSync(fullPath, "utf-8");
   } catch {
+    return "";
   }
 }
-async function sendCliCommandTelemetry(input) {
-  const projectRoot = resolveCliTelemetryProjectRoot(input.projectRoot ?? process.cwd(), input.args);
-  const command = normalizeCommand(input.args[0]);
-  if (!isOptedIn(projectRoot) || !command || command === "help" || command === "version" || isHelpOrVersionProbe(input.args)) {
-    return;
+function detectConflicts(projectRoot, items) {
+  const text = items.filter(
+    (item) => item.type === "file" && item.safeToCite && item.path.match(/\.(md|mdx|json|ts|js|yml|yaml)$/)
+  ).slice(0, 80).map((item) => readSmallText(projectRoot, item.path)).join("\n").toLowerCase();
+  const conflicts = [];
+  const frameworkSignals = [
+    ["next", /\bnext\.?js\b|\bapp router\b|\bpages router\b/],
+    ["angular", /\bangular\b/],
+    ["svelte", /\bsvelte\b|\bsveltekit\b/],
+    ["vue", /\bvue\b|\bnuxt\b/]
+  ].filter(([, pattern]) => pattern.test(text));
+  if (frameworkSignals.length > 1) {
+    conflicts.push(
+      `Multiple framework doctrines appear in ambient docs: ${frameworkSignals.map(([name]) => name).join(", ")}.`
+    );
   }
-  const properties = buildCliLifecycleProperties({
-    args: input.args,
-    command,
-    durationMs: input.durationMs,
-    projectRoot,
-    success: input.success
-  });
-  await captureCliTelemetryEvent({
-    args: input.args,
-    name: "cli.command.completed",
-    projectRoot,
-    properties,
-    registrySource: properties.registrySource
-  });
-  const lifecycleEventName = lifecycleTelemetryEventName(command);
-  if (lifecycleEventName) {
-    await captureCliTelemetryEvent({
-      args: input.args,
-      name: lifecycleEventName,
-      projectRoot,
-      properties,
-      registrySource: properties.registrySource
-    });
+  const forbidsTailwind = /\b(do not|don't|avoid|forbid|forbidden)\s+use\s+tailwind\b|\bno\s+tailwind\b/.test(text);
+  const endorsesTailwind = /\btailwind\.config\b|\btailwindcss\b|\b@tailwind\b|\btailwind\s+classes\b/.test(text);
+  if (forbidsTailwind && endorsesTailwind) {
+    conflicts.push("Ambient docs contain both Tailwind usage and anti-Tailwind language.");
   }
-}
-async function sendProjectHealthReportTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const properties = buildProjectHealthTelemetryProperties(input, projectRoot);
-  await captureCliTelemetryEvent({
-    name: "health.report.generated",
-    projectRoot,
-    properties
-  });
-  if (input.report.status === "healthy") {
-    await captureCliTelemetryEvent({
-      name: "decantr.health.healthy",
-      projectRoot,
-      properties
-    });
+  if (/\bclient component\b/.test(text) && /\bserver components? only\b/.test(text)) {
+    conflicts.push("Ambient docs may conflict on client vs server component boundaries.");
   }
+  return conflicts;
 }
-async function sendAnalyzeCompletedTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const metadata = readProjectTelemetryMetadata(projectRoot);
-  const properties = {
-    command: "analyze",
-    success: input.success,
-    durationMs: input.durationMs,
-    adoptionMode: metadata.adoptionMode ?? "contract-only",
-    componentCount: input.componentCount,
-    dependencyCategoryCount: input.dependencyCategoryCount,
-    errorCode: input.success ? void 0 : "analyze_failed",
-    pageCount: input.pageCount,
-    projectScope: metadata.projectScope ?? inferProjectScope(projectRoot),
-    routeCount: input.routeCount,
-    targetFramework: input.targetFramework,
-    workflowMode: metadata.workflowMode ?? "brownfield-attach"
-  };
-  await captureCliTelemetryEvent({
-    args: ["analyze"],
-    name: "decantr.analyze.completed",
-    projectRoot,
-    properties
-  });
+function detectDecantrEssenceStaleRisk(projectRoot, items) {
+  if (!items.some((item) => item.path === "decantr.essence.json")) return [];
+  const content = readSmallText(projectRoot, "decantr.essence.json");
+  if (!content) return [];
+  try {
+    const essence = JSON.parse(content);
+    const risks = [];
+    if (essence.version !== "4.0.0") {
+      risks.push(
+        `decantr.essence.json uses Decantr essence version ${essence.version ?? "unknown"}; run decantr migrate --to v4 or review before treating it as current brownfield doctrine.`
+      );
+    }
+    if (essence.dna?.theme?.id === "luminarum" && essence.structure) {
+      risks.push(
+        "decantr.essence.json looks like an older Decantr default scaffold; verify before importing its theme or page layout as brownfield truth."
+      );
+    }
+    return risks;
+  } catch {
+    return [
+      "decantr.essence.json could not be parsed during ambient inventory; review before treating it as current doctrine."
+    ];
+  }
 }
-async function sendNewProjectCompletedTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const args = input.args ?? ["new"];
-  const base = buildCliLifecycleProperties({
-    args,
-    command: "new",
-    durationMs: input.durationMs,
-    projectRoot,
-    success: input.success
-  });
-  const properties = {
-    ...base,
-    command: "new"
-  };
-  await captureCliTelemetryEvent({
-    args,
-    name: "decantr.new.completed",
-    projectRoot,
-    properties,
-    registrySource: properties.registrySource
-  });
+function detectStaleRisks(projectRoot, items) {
+  const pathRisks = items.filter(
+    (item) => item.role === "stale-or-historical" || /complete|summary|legacy|deprecated/i.test(item.path)
+  ).slice(0, 12).map(
+    (item) => `${item.path} may be historical; verify before treating it as current doctrine.`
+  );
+  return [...pathRisks, ...detectDecantrEssenceStaleRisk(projectRoot, items)];
 }
-async function sendProjectHealthPromptTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const finding = input.finding;
-  const properties = {
-    success: Boolean(finding),
-    findingFound: Boolean(finding),
-    adoptionMode: normalizeAdoptionMode(input.report.summary.adoptionMode),
-    ci: input.ci ?? false,
-    findingSeverity: normalizeFindingSeverity(finding?.severity),
-    findingSource: normalizeFindingSource(finding?.source),
-    projectScope: inferProjectScope(projectRoot),
-    workflowMode: normalizeWorkflowMode(input.report.summary.workflowMode)
+function scanAmbientContext(projectRoot) {
+  const items = [];
+  walk(projectRoot, projectRoot, items, 0);
+  const deduped = [...new Map(items.map((item) => [item.path, item])).values()].sort(
+    (a, b) => a.path.localeCompare(b.path)
+  );
+  return {
+    version: 1,
+    scannedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    items: deduped,
+    summary: summarize(deduped),
+    conflicts: detectConflicts(projectRoot, deduped),
+    staleRisks: detectStaleRisks(projectRoot, deduped)
   };
-  await captureCliTelemetryEvent({
-    name: "health.finding.prompt_requested",
-    projectRoot,
-    properties
-  });
 }
-async function sendProjectHealthCiFailedTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const properties = {
-    ...buildProjectHealthTelemetryProperties(input, projectRoot),
-    errorCode: "project_health_ci_failed",
-    failOn: input.failOn,
-    success: false
-  };
-  await captureCliTelemetryEvent({
-    name: "health.ci.failed",
-    projectRoot,
-    properties
-  });
+
+// src/analyzers/routes.ts
+import { existsSync as existsSync2, readdirSync as readdirSync2, readFileSync as readFileSync2, statSync as statSync2 } from "fs";
+import { join as join2, relative as relative2 } from "path";
+var SKIP_DIRS2 = /* @__PURE__ */ new Set(["node_modules", ".next", ".git", "api", "_app", "_document"]);
+function shouldSkipDir2(name) {
+  return name.startsWith("_") || name.startsWith(".") || SKIP_DIRS2.has(name);
 }
-async function sendStudioStartedTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const metadata = readProjectTelemetryMetadata(projectRoot);
-  const properties = {
-    success: true,
-    hostMode: isLoopbackHost(input.host) ? "loopback" : "custom",
-    port: input.port,
-    adoptionMode: metadata.adoptionMode,
-    projectScope: inferProjectScope(projectRoot),
-    workflowMode: metadata.workflowMode
-  };
-  await captureCliTelemetryEvent({
-    name: "studio.started",
-    projectRoot,
-    properties
-  });
-}
-async function sendStudioHealthRefreshedTelemetry(input) {
-  const projectRoot = input.projectRoot ?? process.cwd();
-  const properties = {
-    ...buildProjectHealthTelemetryProperties(input, projectRoot),
-    trigger: input.trigger ?? "api-refresh"
-  };
-  await captureCliTelemetryEvent({
-    name: "studio.health_refreshed",
-    projectRoot,
-    properties
-  });
-}
-function buildCliLifecycleProperties(input) {
-  const metadata = readProjectTelemetryMetadata(input.projectRoot);
-  const registrySource = inferRegistrySource(input.args);
-  return {
-    command: input.command,
-    success: input.success,
-    durationMs: input.durationMs,
-    adoptionMode: inferAdoptionMode(input.args) ?? metadata.adoptionMode,
-    errorCode: input.success ? void 0 : "cli_command_failed",
-    offline: input.args.includes("--offline"),
-    projectScope: metadata.projectScope ?? inferProjectScope(input.projectRoot),
-    registrySource,
-    targetFramework: inferFlagValue(input.args, "--target"),
-    workflowMode: inferWorkflowMode(input.args) ?? metadata.workflowMode
-  };
-}
-function lifecycleTelemetryEventName(command) {
-  if (command === "check") return "decantr.check.completed";
-  if (command === "init") return "decantr.init.completed";
-  if (command === "refresh") return "decantr.refresh.completed";
-  return null;
-}
-function buildProjectHealthTelemetryProperties(input, projectRoot) {
-  const { report } = input;
-  return {
-    success: true,
-    status: report.status,
-    score: report.score,
-    durationMs: input.durationMs,
-    adoptionMode: normalizeAdoptionMode(report.summary.adoptionMode),
-    ci: input.ci ?? false,
-    errorCount: report.summary.errorCount,
-    failOn: input.failOn,
-    findingCount: report.summary.findingCount,
-    format: input.format,
-    infoCount: report.summary.infoCount,
-    outputWritten: input.outputWritten ?? false,
-    packManifestPresent: report.summary.packManifestPresent,
-    pageCount: report.summary.pageCount,
-    projectScope: inferProjectScope(projectRoot),
-    reviewPackPresent: report.summary.reviewPackPresent,
-    routeCount: report.routes.declared.length,
-    runtimeAuditChecked: report.summary.runtimeAuditChecked,
-    runtimeMatchedCount: report.routes.runtimeMatched,
-    runtimePassed: report.summary.runtimePassed,
-    runtimeRouteCheckedCount: report.routes.runtimeChecked.length,
-    warnCount: report.summary.warnCount,
-    workflowMode: normalizeWorkflowMode(report.summary.workflowMode)
-  };
-}
-function collectMetrics(essence, issues) {
-  const dna = essence.dna ?? {};
-  const blueprint = essence.blueprint ?? {};
-  const meta = essence.meta ?? {};
-  const guard = meta.guard ?? {};
-  const theme = dna.theme ?? {};
-  const sections = blueprint.sections ?? [];
-  const routes = blueprint.routes ?? {};
-  const byRule = {};
-  let dnaCount = 0;
-  let blueprintCount = 0;
-  for (const issue of issues) {
-    byRule[issue.rule] = (byRule[issue.rule] ?? 0) + 1;
-    if (DNA_RULES.has(issue.rule)) {
-      dnaCount++;
-    } else {
-      blueprintCount++;
+function segmentToRoute(segment) {
+  if (segment.startsWith("(") && segment.endsWith(")")) {
+    return null;
+  }
+  if (segment.startsWith("[") && segment.endsWith("]")) {
+    const param = segment.slice(1, -1);
+    if (param.startsWith("...")) {
+      return `:${param.slice(3)}*`;
     }
+    if (param.startsWith("[...") && param.endsWith("]")) {
+      return `:${param.slice(4, -1)}*`;
+    }
+    return `:${param}`;
   }
-  return {
-    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
-    cli_version: getCliVersion(),
-    essence_version: essence.version ?? "unknown",
-    guard_mode: guard.mode ?? "unknown",
-    violations: {
-      dna: dnaCount,
-      blueprint: blueprintCount,
-      by_rule: byRule
-    },
-    resolution_rate: 0,
-    sections_count: sections.length,
-    routes_count: Object.keys(routes).length,
-    theme: theme.id ?? "unknown"
-  };
-}
-function getCliTelemetryIdentityStatus(projectRoot, options = {}) {
-  const projectJsonPath = join2(projectRoot, ".decantr", "project.json");
-  const hasProjectConfig = existsSync2(projectJsonPath);
-  const identities = options.create ? ensureTelemetryIdentities(projectRoot) : null;
-  const projectData = readProjectJson(projectRoot);
-  return {
-    enabled: projectData?.telemetry === true,
-    hasProjectConfig,
-    installId: identities?.installId ?? readExistingInstallId(),
-    projectId: identities?.projectId ?? readStringProperty(projectData, "telemetryProjectId"),
-    projectRoot
-  };
+  return segment;
 }
-function ensureTelemetryIdentities(projectRoot) {
-  const installId = getOrCreateInstallId();
-  const projectJsonPath = join2(projectRoot, ".decantr", "project.json");
-  if (!existsSync2(projectJsonPath)) {
-    return null;
-  }
+function walkAppDir(dir, baseDir, segments) {
+  const routes = [];
+  let entries;
   try {
-    const data = JSON.parse(readFileSync2(projectJsonPath, "utf-8"));
-    let projectId = typeof data.telemetryProjectId === "string" ? data.telemetryProjectId : void 0;
-    if (!projectId) {
-      projectId = `project_${randomUUID()}`;
-      data.telemetryProjectId = projectId;
-      writeFileSync(projectJsonPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
-    }
-    return { installId, projectId };
+    entries = readdirSync2(dir);
   } catch {
-    return null;
+    return routes;
+  }
+  const hasPage = entries.some(
+    (e) => e === "page.tsx" || e === "page.ts" || e === "page.jsx" || e === "page.js"
+  );
+  const hasLayout = entries.some(
+    (e) => e === "layout.tsx" || e === "layout.ts" || e === "layout.jsx" || e === "layout.js"
+  );
+  if (hasPage) {
+    const routePath = "/" + segments.filter((s) => s !== "").join("/");
+    const pageFile = entries.find((e) => e.startsWith("page."));
+    routes.push({
+      path: routePath || "/",
+      file: relative2(baseDir, join2(dir, pageFile)),
+      hasLayout
+    });
+  }
+  for (const entry of entries) {
+    if (shouldSkipDir2(entry)) continue;
+    const fullPath = join2(dir, entry);
+    try {
+      if (!statSync2(fullPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    const routeSegment = segmentToRoute(entry);
+    const nextSegments = routeSegment === null ? [...segments] : [...segments, routeSegment];
+    routes.push(...walkAppDir(fullPath, baseDir, nextSegments));
   }
+  return routes;
 }
-function getOrCreateInstallId() {
-  const configDir = getConfigDir();
-  const configPath = join2(configDir, "config.json");
+function walkPagesDir(dir, baseDir, segments, extensions = /* @__PURE__ */ new Set(["ts", "tsx", "js", "jsx", "md", "mdx"])) {
+  const routes = [];
+  let entries;
   try {
-    if (existsSync2(configPath)) {
-      const data = JSON.parse(readFileSync2(configPath, "utf-8"));
-      if (typeof data.telemetryInstallId === "string") {
-        return data.telemetryInstallId;
+    entries = readdirSync2(dir);
+  } catch {
+    return routes;
+  }
+  for (const entry of entries) {
+    if (shouldSkipDir2(entry)) continue;
+    const fullPath = join2(dir, entry);
+    try {
+      const stat = statSync2(fullPath);
+      if (stat.isDirectory()) {
+        const routeSegment = segmentToRoute(entry);
+        const nextSegments = routeSegment === null ? [...segments] : [...segments, routeSegment];
+        routes.push(...walkPagesDir(fullPath, baseDir, nextSegments, extensions));
+      } else if (stat.isFile()) {
+        const match = entry.match(/^(.+)\.([^.]+)$/);
+        if (!match) continue;
+        const name = match[1];
+        const extension = match[2];
+        if (!extensions.has(extension)) continue;
+        if (name.startsWith("_")) continue;
+        const routeSegment = name === "index" ? "" : segmentToRoute(name) ?? name;
+        const routePath = "/" + [...segments, routeSegment].filter((s) => s !== "").join("/");
+        routes.push({
+          path: routePath || "/",
+          file: relative2(baseDir, fullPath),
+          hasLayout: false
+        });
       }
-      const installId2 = `install_${randomUUID()}`;
-      data.telemetryInstallId = installId2;
-      writeFileSync(configPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
-      return installId2;
+    } catch {
     }
-    mkdirSync(configDir, { recursive: true });
-    const installId = `install_${randomUUID()}`;
-    writeFileSync(
-      configPath,
-      JSON.stringify({ telemetryInstallId: installId }, null, 2) + "\n",
-      "utf-8"
-    );
-    return installId;
-  } catch {
-    return `install_${randomUUID()}`;
   }
+  return routes;
 }
-function readExistingInstallId() {
-  const configPath = join2(getConfigDir(), "config.json");
-  if (!existsSync2(configPath)) return void 0;
+function walkSvelteKitRoutes(dir, baseDir, segments) {
+  const routes = [];
+  let entries;
   try {
-    const data = JSON.parse(readFileSync2(configPath, "utf-8"));
-    return readStringProperty(data, "telemetryInstallId");
+    entries = readdirSync2(dir);
   } catch {
-    return void 0;
+    return routes;
+  }
+  const pageFile = entries.find((entry) => /^\+page\.(svelte|ts|js)$/.test(entry));
+  const hasLayout = entries.some((entry) => /^\+layout\.(svelte|ts|js)$/.test(entry));
+  if (pageFile) {
+    const routePath = "/" + segments.filter((segment) => segment !== "").join("/");
+    routes.push({
+      path: routePath || "/",
+      file: relative2(baseDir, join2(dir, pageFile)),
+      hasLayout
+    });
+  }
+  for (const entry of entries) {
+    if (shouldSkipDir2(entry)) continue;
+    const fullPath = join2(dir, entry);
+    try {
+      if (!statSync2(fullPath).isDirectory()) continue;
+    } catch {
+      continue;
+    }
+    const routeSegment = segmentToRoute(entry);
+    const nextSegments = routeSegment === null ? [...segments] : [...segments, routeSegment];
+    routes.push(...walkSvelteKitRoutes(fullPath, baseDir, nextSegments));
   }
+  return routes;
 }
-function getConfigDir() {
-  return process.env.DECANTR_CONFIG_DIR || join2(homedir(), ".config", "decantr");
+var ROUTER_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".ts", ".jsx", ".js"]);
+function collectRouteCandidateFiles(dir, files, depth = 0) {
+  if (depth > 5) return;
+  let entries;
+  try {
+    entries = readdirSync2(dir);
+  } catch {
+    return;
+  }
+  for (const entry of entries) {
+    if (entry.startsWith(".") || entry === "node_modules") continue;
+    const fullPath = join2(dir, entry);
+    try {
+      const stat = statSync2(fullPath);
+      if (stat.isDirectory()) {
+        collectRouteCandidateFiles(fullPath, files, depth + 1);
+      } else if (stat.isFile()) {
+        const ext = entry.slice(entry.lastIndexOf("."));
+        if (ROUTER_FILE_EXTENSIONS.has(ext)) {
+          files.push(fullPath);
+        }
+      }
+    } catch {
+    }
+  }
 }
-function getTelemetryEventsEndpoint() {
-  return process.env.DECANTR_TELEMETRY_ENDPOINT || DEFAULT_TELEMETRY_EVENTS_ENDPOINT;
-}
-function getTelemetryActorType() {
-  const configured = process.env.DECANTR_TELEMETRY_ACTOR_TYPE;
-  return isTelemetryActorType(configured) ? configured : "customer";
-}
-function getRegistrySourceProperty(properties) {
-  const value = properties.registrySource;
-  return isRegistrySource(value) ? value : void 0;
-}
-function readProjectTelemetryMetadata(projectRoot) {
-  const data = readProjectJson(projectRoot);
-  const initialized = isRecord(data?.initialized) ? data.initialized : void 0;
-  return {
-    adoptionMode: normalizeAdoptionMode(initialized?.adoptionMode),
-    projectScope: normalizeProjectScope(initialized?.projectScope),
-    workflowMode: normalizeWorkflowMode(initialized?.workflowMode)
-  };
+function scanReactRouter(projectRoot) {
+  const candidateDirs = [join2(projectRoot, "src"), projectRoot];
+  const candidateFiles = [];
+  for (const dir of candidateDirs) {
+    if (existsSync2(dir)) collectRouteCandidateFiles(dir, candidateFiles);
+  }
+  const routeMap = /* @__PURE__ */ new Map();
+  for (const absolutePath of candidateFiles) {
+    let content;
+    try {
+      content = readFileSync2(absolutePath, "utf-8");
+    } catch {
+      continue;
+    }
+    const isReactRouterFile = content.includes("react-router-dom") || content.includes("react-router") || content.includes("<Routes") || content.includes("createBrowserRouter") || content.includes("createHashRouter") || content.includes("RouterProvider") || content.includes("HashRouter") || content.includes("BrowserRouter");
+    if (!isReactRouterFile) continue;
+    const relativePath = relative2(projectRoot, absolutePath);
+    const pathMatches = /* @__PURE__ */ new Set();
+    for (const match of content.matchAll(/<Route\b[^>]*\bpath=["'`]([^"'`]+)["'`]/g)) {
+      pathMatches.add(match[1]);
+    }
+    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]+)["'`]/g)) {
+      pathMatches.add(match[1]);
+    }
+    if (pathMatches.size === 0 && (content.includes("<Routes") || content.includes("RouterProvider"))) {
+      pathMatches.add("/");
+    }
+    for (const path of pathMatches) {
+      if (!routeMap.has(path)) {
+        routeMap.set(path, {
+          path,
+          file: relativePath,
+          hasLayout: false
+        });
+      }
+    }
+  }
+  return [...routeMap.values()];
 }
-function resolveCliTelemetryProjectRoot(projectRoot, args) {
-  const projectFlag = inferFlagValue(args, "--project");
-  if (!projectFlag) return projectRoot;
-  const candidate = resolve(projectRoot, projectFlag);
-  return existsSync2(join2(candidate, ".decantr", "project.json")) ? candidate : projectRoot;
+function hasReactRouterDependency(projectRoot) {
+  return hasDependency(projectRoot, ["react-router", "react-router-dom"]);
 }
-function readProjectJson(projectRoot) {
-  const projectJsonPath = join2(projectRoot, ".decantr", "project.json");
-  if (!existsSync2(projectJsonPath)) return null;
+function hasDependency(projectRoot, names) {
+  const packageJsonPath = join2(projectRoot, "package.json");
+  if (!existsSync2(packageJsonPath)) return false;
   try {
-    return JSON.parse(readFileSync2(projectJsonPath, "utf-8"));
+    const pkg = JSON.parse(readFileSync2(packageJsonPath, "utf-8"));
+    const deps = { ...pkg.dependencies, ...pkg.devDependencies };
+    return names.some((name) => Boolean(deps[name]));
   } catch {
-    return null;
+    return false;
   }
 }
-function readStringProperty(value, key) {
-  const property = value?.[key];
-  return typeof property === "string" && property.trim() ? property : void 0;
-}
-function isRecord(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function normalizeCommand(command) {
-  if (!command) return null;
-  if (command === "--help" || command === "-h") return "help";
-  if (command === "--version" || command === "-v") return "version";
-  return command;
+function hasAnyFile(projectRoot, relPaths) {
+  return relPaths.some((relPath) => existsSync2(join2(projectRoot, relPath)));
 }
-function isHelpOrVersionProbe(args) {
-  if (args.some((arg) => arg === "--help" || arg === "-h")) return true;
-  if (args[1] === "help") return true;
-  return false;
+function normalizeRoutePath(path) {
+  const cleaned = path.trim();
+  if (!cleaned || cleaned === "/") return "/";
+  if (cleaned === "**" || cleaned.startsWith("#")) return null;
+  return cleaned.startsWith("/") ? cleaned : `/${cleaned}`;
 }
-function inferFlagValue(args, flag) {
-  const equalsPrefix = `${flag}=`;
-  const inline = args.find((arg) => arg.startsWith(equalsPrefix));
-  if (inline) {
-    return inline.slice(equalsPrefix.length) || void 0;
+function scanAngularRouter(projectRoot) {
+  const candidateDirs = [join2(projectRoot, "src", "app"), join2(projectRoot, "src")];
+  const candidateFiles = [];
+  for (const dir of candidateDirs) {
+    if (existsSync2(dir)) collectRouteCandidateFiles(dir, candidateFiles);
   }
-  const index = args.indexOf(flag);
-  if (index !== -1 && args[index + 1] && !args[index + 1].startsWith("-")) {
-    return args[index + 1];
+  const routeMap = /* @__PURE__ */ new Map();
+  for (const absolutePath of candidateFiles) {
+    let content;
+    try {
+      content = readFileSync2(absolutePath, "utf-8");
+    } catch {
+      continue;
+    }
+    const isRouterFile = content.includes("@angular/router") || content.includes("RouterModule.forRoot") || content.includes("provideRouter") || content.includes("Routes =");
+    if (!isRouterFile) continue;
+    const relativePath = relative2(projectRoot, absolutePath);
+    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]*)["'`]/g)) {
+      const routePath = normalizeRoutePath(match[1]);
+      if (!routePath || routeMap.has(routePath)) continue;
+      routeMap.set(routePath, {
+        path: routePath,
+        file: relativePath,
+        hasLayout: false
+      });
+    }
   }
-  return void 0;
-}
-function inferAdoptionMode(args) {
-  const value = inferFlagValue(args, "--adoption");
-  return normalizeAdoptionMode(value);
-}
-function inferWorkflowMode(args) {
-  const value = inferFlagValue(args, "--workflow");
-  return normalizeWorkflowMode(value);
+  return [...routeMap.values()];
 }
-function normalizeAdoptionMode(value) {
-  if (value === "contract-only" || value === "decantr-css" || value === "style-bridge") {
-    return value;
+function scanVueRouter(projectRoot) {
+  const candidateDirs = [join2(projectRoot, "src"), projectRoot];
+  const candidateFiles = [];
+  for (const dir of candidateDirs) {
+    if (existsSync2(dir)) collectRouteCandidateFiles(dir, candidateFiles);
   }
-  return void 0;
+  const routeMap = /* @__PURE__ */ new Map();
+  for (const absolutePath of candidateFiles) {
+    let content;
+    try {
+      content = readFileSync2(absolutePath, "utf-8");
+    } catch {
+      continue;
+    }
+    const isRouterFile = content.includes("vue-router") || content.includes("createRouter") || content.includes("createWebHistory") || content.includes("createWebHashHistory");
+    if (!isRouterFile) continue;
+    const relativePath = relative2(projectRoot, absolutePath);
+    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]+)["'`]/g)) {
+      const routePath = normalizeRoutePath(match[1]);
+      if (!routePath || routeMap.has(routePath)) continue;
+      routeMap.set(routePath, {
+        path: routePath,
+        file: relativePath,
+        hasLayout: false
+      });
+    }
+  }
+  return [...routeMap.values()];
 }
-function normalizeWorkflowMode(value) {
-  if (value === "greenfield" || value === "greenfield-scaffold") {
-    return "greenfield-scaffold";
+function scanRoutes(projectRoot) {
+  const hasNext = hasDependency(projectRoot, ["next"]) || hasAnyFile(projectRoot, ["next.config.js", "next.config.ts", "next.config.mjs"]);
+  const hasSvelteKit = hasDependency(projectRoot, ["@sveltejs/kit", "svelte"]) || hasAnyFile(projectRoot, ["svelte.config.js", "svelte.config.ts"]);
+  const hasNuxt = hasDependency(projectRoot, ["nuxt"]) || hasAnyFile(projectRoot, ["nuxt.config.js", "nuxt.config.ts"]);
+  const hasAngular = hasDependency(projectRoot, ["@angular/core", "@angular/router"]) || hasAnyFile(projectRoot, ["angular.json"]);
+  const hasVue = hasDependency(projectRoot, ["vue", "vue-router"]) || hasAnyFile(projectRoot, ["vite.config.js", "vite.config.ts"]);
+  const appDirs = [join2(projectRoot, "src", "app"), join2(projectRoot, "app")];
+  const appRoutes = appDirs.flatMap(
+    (appDir) => existsSync2(appDir) ? walkAppDir(appDir, projectRoot, []) : []
+  );
+  const pagesDirs = [join2(projectRoot, "src", "pages"), join2(projectRoot, "pages")];
+  const pagesRoutes = pagesDirs.flatMap(
+    (pagesDir) => existsSync2(pagesDir) ? walkPagesDir(pagesDir, projectRoot, []) : []
+  );
+  if (hasNext) {
+    if (appRoutes.length > 0 && pagesRoutes.length > 0) {
+      return { strategy: "mixed-next-router", routes: [...appRoutes, ...pagesRoutes] };
+    }
+    if (appRoutes.length > 0) return { strategy: "app-router", routes: appRoutes };
+    if (pagesRoutes.length > 0) return { strategy: "pages-router", routes: pagesRoutes };
+  } else if (appRoutes.length > 0) {
+    return { strategy: "app-router", routes: appRoutes };
   }
-  if (value === "contract" || value === "greenfield-contract-only") {
-    return "greenfield-contract-only";
+  if (hasSvelteKit) {
+    const svelteRoutesDir = join2(projectRoot, "src", "routes");
+    if (existsSync2(svelteRoutesDir)) {
+      const routes = walkSvelteKitRoutes(svelteRoutesDir, projectRoot, []);
+      if (routes.length > 0) return { strategy: "sveltekit-router", routes };
+    }
   }
-  if (value === "brownfield" || value === "brownfield-attach") {
-    return "brownfield-attach";
+  if (hasNuxt) {
+    const nuxtPagesDirs = [join2(projectRoot, "pages"), join2(projectRoot, "app", "pages")];
+    const routes = nuxtPagesDirs.flatMap(
+      (pagesDir) => existsSync2(pagesDir) ? walkPagesDir(pagesDir, projectRoot, [], /* @__PURE__ */ new Set(["vue"])) : []
+    );
+    if (routes.length > 0) return { strategy: "nuxt-router", routes };
   }
-  if (value === "hybrid" || value === "hybrid-compose") {
-    return "hybrid-compose";
+  const reactRouterRoutes = scanReactRouter(projectRoot);
+  if (reactRouterRoutes.length > 0 && hasReactRouterDependency(projectRoot)) {
+    return { strategy: "react-router", routes: reactRouterRoutes };
   }
-  return void 0;
-}
-function normalizeProjectScope(value) {
-  if (value === "single-app" || value === "workspace-app") return value;
-  return void 0;
-}
-function normalizeFindingSeverity(value) {
-  if (value === "error" || value === "info" || value === "warn") return value;
-  return void 0;
-}
-function normalizeFindingSource(value) {
-  if (value === "audit" || value === "brownfield" || value === "check" || value === "interaction" || value === "pack" || value === "runtime") {
-    return value;
+  if (hasAngular) {
+    const routes = scanAngularRouter(projectRoot);
+    if (routes.length > 0) return { strategy: "angular-router", routes };
   }
-  return void 0;
-}
-function inferRegistrySource(args) {
-  if (args.includes("--offline")) {
-    return "cache";
+  if (hasVue) {
+    const routes = scanVueRouter(projectRoot);
+    if (routes.length > 0) return { strategy: "vue-router", routes };
   }
-  if (args.some((arg) => arg === "--registry" || arg.startsWith("--registry="))) {
-    return "custom";
+  if (pagesRoutes.length > 0) {
+    return { strategy: "pages-router", routes: pagesRoutes };
   }
-  return "official";
-}
-function isRegistrySource(value) {
-  return value === "cache" || value === "custom" || value === "none" || value === "official" || value === "private";
-}
-function inferProjectScope(projectRoot) {
-  return existsSync2(join2(projectRoot, "pnpm-workspace.yaml")) || existsSync2(join2(projectRoot, "turbo.json")) || existsSync2(join2(projectRoot, "lerna.json")) ? "workspace-app" : "single-app";
-}
-function getCliVersion() {
-  try {
-    const here = dirname2(fileURLToPath2(import.meta.url));
-    const candidates = [join2(here, "..", "package.json"), join2(here, "..", "..", "package.json")];
-    for (const candidate of candidates) {
-      if (existsSync2(candidate)) {
-        const pkg = JSON.parse(readFileSync2(candidate, "utf-8"));
-        if (pkg.version) {
-          return pkg.version;
-        }
-      }
-    }
-  } catch {
+  if (reactRouterRoutes.length > 0) {
+    return { strategy: "react-router", routes: reactRouterRoutes };
   }
-  return "unknown";
-}
-function isLoopbackHost(host) {
-  return host === "127.0.0.1" || host === "localhost" || host === "::1";
+  return { strategy: "none", routes: [] };
 }
 
-// src/guard-context.ts
-import { existsSync as existsSync3, readdirSync as readdirSync2, readFileSync as readFileSync3 } from "fs";
+// src/analyzers/styling.ts
+import { existsSync as existsSync3, readFileSync as readFileSync3 } from "fs";
 import { join as join3 } from "path";
-function loadJsonEntries(dir) {
-  if (!existsSync3(dir)) return [];
-  try {
-    return readdirSync2(dir).filter((file) => file.endsWith(".json") && file !== "index.json").map((file) => JSON.parse(readFileSync3(join3(dir, file), "utf-8")));
-  } catch {
-    return [];
-  }
-}
-function buildGuardRegistryContext(projectRoot = process.cwd()) {
-  const themeRegistry = /* @__PURE__ */ new Map();
-  const patternRegistry = /* @__PURE__ */ new Map();
-  const cacheDir = join3(projectRoot, ".decantr", "cache");
-  const customDir = join3(projectRoot, ".decantr", "custom");
-  for (const data of loadJsonEntries(join3(cacheDir, "@official", "themes"))) {
-    if (typeof data.id === "string" && !themeRegistry.has(data.id)) {
-      themeRegistry.set(data.id, {
-        modes: Array.isArray(data.modes) ? data.modes.filter((mode) => typeof mode === "string") : ["light", "dark"]
-      });
+var TAILWIND_CONFIGS = [
+  "tailwind.config.js",
+  "tailwind.config.ts",
+  "tailwind.config.mjs",
+  "tailwind.config.cjs"
+];
+var GLOBALS_CSS_PATHS = [
+  "src/app/globals.css",
+  "app/globals.css",
+  "src/styles/global.css",
+  "src/styles/globals.css",
+  "src/styles/main.css",
+  "src/styles.css",
+  "styles/globals.css",
+  "styles.css",
+  "assets/css/main.css",
+  "src/index.css",
+  "src/app.css",
+  "src/global.css"
+];
+var DECANTR_STYLE_PATHS = [
+  "src/styles/tokens.css",
+  "src/styles/treatments.css",
+  "src/styles/global.css"
+];
+function extractCSSVariables(content) {
+  const colors = {};
+  const variables = [];
+  const varRegex = /--([\w-]+)\s*:\s*([^;]+)/g;
+  let match;
+  while ((match = varRegex.exec(content)) !== null) {
+    const name = match[1];
+    const value = match[2].trim();
+    variables.push(`--${name}`);
+    const colorPatterns = [
+      "primary",
+      "secondary",
+      "accent",
+      "bg",
+      "fg",
+      "border",
+      "success",
+      "warning",
+      "error",
+      "surface",
+      "muted"
+    ];
+    if (value.startsWith("#") || value.startsWith("rgb") || value.startsWith("hsl") || colorPatterns.some((p) => name.includes(p))) {
+      colors[name] = value;
     }
   }
-  for (const data of loadJsonEntries(join3(customDir, "themes"))) {
-    if (typeof data.id === "string") {
-      themeRegistry.set(`custom:${data.id}`, {
-        modes: Array.isArray(data.modes) ? data.modes.filter((mode) => typeof mode === "string") : ["light", "dark"]
-      });
+  return { colors, variables };
+}
+function detectDarkMode(projectRoot, cssContents) {
+  for (const cssContent of cssContents) {
+    if (cssContent.includes(".dark") || cssContent.includes('[data-theme="dark"]') || cssContent.includes("prefers-color-scheme: dark") || cssContent.includes("color-scheme: dark")) {
+      return true;
     }
   }
-  for (const data of loadJsonEntries(join3(cacheDir, "@official", "patterns"))) {
-    if (typeof data.id === "string" && !patternRegistry.has(data.id)) {
-      patternRegistry.set(data.id, data);
+  const layoutPaths = [
+    "src/app/layout.tsx",
+    "app/layout.tsx",
+    "src/app/layout.jsx",
+    "app/layout.jsx"
+  ];
+  for (const rel of layoutPaths) {
+    const fullPath = join3(projectRoot, rel);
+    if (existsSync3(fullPath)) {
+      try {
+        const layoutContent = readFileSync3(fullPath, "utf-8");
+        if (layoutContent.includes('className="dark"') || layoutContent.includes("className='dark'") || layoutContent.includes('class="dark"')) {
+          return true;
+        }
+      } catch {
+      }
     }
   }
-  for (const entry of loadBundledContentList("patterns")) {
-    const data = entry.data;
-    const id = typeof data.id === "string" ? data.id : entry.id;
-    if (!patternRegistry.has(id)) {
-      patternRegistry.set(id, data);
+  const pkgPath = join3(projectRoot, "package.json");
+  if (existsSync3(pkgPath)) {
+    try {
+      const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
+      const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
+      if (allDeps["next-themes"] || allDeps["theme-toggle"] || allDeps["use-dark-mode"]) {
+        return true;
+      }
+    } catch {
     }
   }
-  for (const data of loadJsonEntries(join3(customDir, "patterns"))) {
-    if (typeof data.id === "string") {
-      patternRegistry.set(data.id, data);
+  const essencePath = join3(projectRoot, "decantr.essence.json");
+  if (existsSync3(essencePath)) {
+    try {
+      const essence = JSON.parse(readFileSync3(essencePath, "utf-8"));
+      const mode = essence.dna?.theme?.mode;
+      if (mode === "dark" || mode === "auto") {
+        return true;
+      }
+    } catch {
     }
   }
-  return { themeRegistry, patternRegistry };
+  return false;
 }
-
-// src/lib/scan-interactions.ts
-import { existsSync as existsSync4, readdirSync as readdirSync3, readFileSync as readFileSync4, statSync } from "fs";
-import { extname, join as join4, relative } from "path";
-import { verifyInteractionsInSource } from "@decantr/verifier";
-var SCAN_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".jsx", ".ts", ".js", ".html", ".mdx"]);
-var SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
-  "node_modules",
-  ".decantr",
-  ".git",
-  "dist",
-  "build",
-  ".next",
-  ".turbo",
-  "coverage",
-  ".cache"
-]);
-var MAX_FILE_SIZE = 1024 * 1024;
-function walkSourceTree(rootDir) {
-  const sources = /* @__PURE__ */ new Map();
-  function walk2(dir) {
-    let entries;
+function scanStyling(projectRoot) {
+  let approach = "unknown";
+  let configFile;
+  let packageDeps = {};
+  const pkgPath = join3(projectRoot, "package.json");
+  if (existsSync3(pkgPath)) {
     try {
-      entries = readdirSync3(dir);
+      const pkg = JSON.parse(readFileSync3(pkgPath, "utf-8"));
+      packageDeps = { ...pkg.dependencies, ...pkg.devDependencies };
     } catch {
-      return;
+      packageDeps = {};
     }
-    for (const entry of entries) {
-      if (SKIP_DIRECTORIES.has(entry)) continue;
-      const fullPath = join4(dir, entry);
-      let s;
-      try {
-        s = statSync(fullPath);
-      } catch {
-        continue;
-      }
-      if (s.isDirectory()) {
-        walk2(fullPath);
-      } else if (s.isFile() && SCAN_EXTENSIONS.has(extname(entry))) {
-        if (s.size > MAX_FILE_SIZE) continue;
-        try {
-          sources.set(relative(rootDir, fullPath) || entry, readFileSync4(fullPath, "utf8"));
-        } catch {
-        }
-      }
+  }
+  for (const cfg of TAILWIND_CONFIGS) {
+    if (existsSync3(join3(projectRoot, cfg))) {
+      approach = "tailwind";
+      configFile = cfg;
+      break;
     }
   }
-  walk2(rootDir);
-  return sources;
-}
-function collectDeclaredInteractions(projectRoot) {
-  const manifestPath = join4(projectRoot, ".decantr", "context", "pack-manifest.json");
-  if (!existsSync4(manifestPath)) return [];
-  let manifest;
-  try {
-    manifest = JSON.parse(readFileSync4(manifestPath, "utf8"));
-  } catch {
-    return [];
+  if (approach === "unknown") {
+    if (packageDeps["@decantr/css"]) {
+      approach = "decantr-css";
+      configFile = "src/styles/tokens.css";
+    }
+    if (packageDeps.tailwindcss || packageDeps["@tailwindcss/postcss"] || packageDeps["@tailwindcss/vite"]) {
+      approach = "tailwind";
+      configFile = configFile ?? "package.json";
+    }
   }
-  const all = [];
-  const pages = manifest.pages ?? [];
-  const contextDir = join4(projectRoot, ".decantr", "context");
-  for (const page of pages) {
-    const packPath = join4(contextDir, page.json);
-    if (!existsSync4(packPath)) continue;
-    let pack;
-    try {
-      pack = JSON.parse(readFileSync4(packPath, "utf8"));
-    } catch {
-      continue;
+  if (approach === "unknown") {
+    if (packageDeps.bootstrap || packageDeps["react-bootstrap"]) {
+      approach = "bootstrap";
+      configFile = "package.json";
+    } else if (packageDeps["@mui/material"] || packageDeps["@mui/system"] || packageDeps["@mui/joy"]) {
+      approach = "mui";
+      configFile = "package.json";
+    } else if (packageDeps["@chakra-ui/react"] || packageDeps["@chakra-ui/vue-next"] || packageDeps["@chakra-ui/system"]) {
+      approach = "chakra";
+      configFile = "package.json";
     }
-    const patterns = pack.data?.patterns ?? [];
-    for (const pat of patterns) {
-      if (Array.isArray(pat.interactions)) {
-        all.push(...pat.interactions);
+  }
+  const decantrStyleFiles = DECANTR_STYLE_PATHS.filter((rel) => existsSync3(join3(projectRoot, rel)));
+  if (decantrStyleFiles.length >= 2) {
+    approach = "decantr-css";
+    configFile = decantrStyleFiles.join(" + ");
+  }
+  const cssContents = [];
+  for (const rel of GLOBALS_CSS_PATHS) {
+    const fullPath = join3(projectRoot, rel);
+    if (existsSync3(fullPath)) {
+      try {
+        cssContents.push(readFileSync3(fullPath, "utf-8"));
+      } catch {
       }
     }
   }
-  return all;
-}
-function scanProjectInteractions(projectRoot) {
-  const declared = collectDeclaredInteractions(projectRoot);
-  if (declared.length === 0) return [];
-  const sources = walkSourceTree(projectRoot);
-  if (sources.size === 0) return [];
-  const missing = verifyInteractionsInSource(declared, sources);
-  return missing.map(
-    ({ interaction, suggestion, scannedFiles, scannedLocations, expectedSignals }) => {
-      const evidence = [
-        scannedFiles ? `scanned ${scannedFiles} source file(s)` : null,
-        scannedLocations?.length ? `checked: ${scannedLocations.slice(0, 4).map((location) => `${location.file}:${location.startLine}-${location.endLine}`).join(", ")}` : null,
-        expectedSignals?.length ? `expected signals: ${expectedSignals.slice(0, 4).join(", ")}` : null
-      ].filter((entry) => Boolean(entry)).join("; ");
-      return `${interaction} \u2192 ${suggestion}${evidence ? ` (${evidence})` : ""}`;
+  for (const rel of DECANTR_STYLE_PATHS) {
+    if (GLOBALS_CSS_PATHS.includes(rel)) continue;
+    const fullPath = join3(projectRoot, rel);
+    if (existsSync3(fullPath)) {
+      try {
+        cssContents.push(readFileSync3(fullPath, "utf-8"));
+      } catch {
+      }
     }
-  );
+  }
+  let colors = {};
+  let cssVariables = [];
+  for (const cssContent of cssContents) {
+    const extracted = extractCSSVariables(cssContent);
+    colors = { ...colors, ...extracted.colors };
+    cssVariables.push(...extracted.variables);
+  }
+  cssVariables = [...new Set(cssVariables)];
+  const darkMode = detectDarkMode(projectRoot, cssContents);
+  if (approach === "unknown" && cssContents.length > 0) {
+    approach = "css";
+    configFile = GLOBALS_CSS_PATHS.find((rel) => existsSync3(join3(projectRoot, rel)));
+  }
+  return {
+    approach,
+    configFile,
+    colors,
+    darkMode,
+    cssVariables
+  };
 }
 
-// src/ambient-context.ts
-import { existsSync as existsSync5, readdirSync as readdirSync4, readFileSync as readFileSync5, statSync as statSync2 } from "fs";
-import { basename, extname as extname2, join as join5, relative as relative2, sep } from "path";
-var SKIP_DIRS = /* @__PURE__ */ new Set([
-  ".decantr",
-  ".git",
-  ".next",
-  ".nuxt",
-  ".svelte-kit",
-  ".turbo",
-  ".vercel",
-  "build",
-  "coverage",
-  "dist",
-  "node_modules",
-  "playwright-report"
-]);
-var ROOT_CONTEXT_FILES = /* @__PURE__ */ new Set([
-  "AGENTS.md",
-  "CLAUDE.md",
-  "GEMINI.md",
-  "README.md",
-  "copilot-instructions.md",
-  ".cursorrules",
-  ".windsurfrules",
-  ".cursorignore",
-  ".claudeignore",
-  "components.json",
-  "tailwind.config.js",
-  "tailwind.config.ts",
-  "tailwind.config.mjs",
-  "tailwind.config.cjs",
-  "next.config.js",
-  "next.config.ts",
-  "next.config.mjs",
-  "nuxt.config.js",
-  "nuxt.config.ts",
-  "astro.config.mjs",
-  "astro.config.ts",
-  "svelte.config.js",
-  "svelte.config.ts",
-  "angular.json",
-  "vite.config.js",
-  "vite.config.ts",
-  "vitest.config.ts",
-  "vitest.config.js",
-  "playwright.config.ts",
-  "playwright.config.js",
-  "tsconfig.json",
-  "package.json",
-  "decantr.essence.json"
-]);
-var CONTEXT_DIRECTORIES = /* @__PURE__ */ new Set([
-  ".agents",
-  ".claude",
-  ".claude/initiatives",
-  ".claude/rules",
-  ".codex",
-  ".cursor",
-  ".cursor/rules",
-  ".github/workflows",
-  "docs",
-  "docs/initiatives",
-  "initiatives",
-  "memory",
-  "memories",
-  "project-memory",
-  "supabase"
-]);
-function shouldSkipDir(name) {
-  return SKIP_DIRS.has(name);
-}
-function normalizedPath(relPath) {
-  return relPath.split(sep).join("/");
+// src/doctrine-map.ts
+import { existsSync as existsSync4, readFileSync as readFileSync4, writeFileSync } from "fs";
+import { join as join4 } from "path";
+var PRECEDENCE_ORDER = [
+  "security-data",
+  "architecture",
+  "design-system",
+  "workflow-ci",
+  "feature-business",
+  "assistant-specific",
+  "stale-or-historical",
+  "unknown"
+];
+var BASE_PRECEDENCE = {
+  "security-data": 100,
+  architecture: 88,
+  "design-system": 82,
+  "workflow-ci": 74,
+  "feature-business": 66,
+  "assistant-specific": 58,
+  "stale-or-historical": 24,
+  unknown: 12
+};
+function normalized(path) {
+  return path.toLowerCase();
 }
-function isPotentialContextFile(relPath, name) {
-  const normalized2 = normalizedPath(relPath);
-  if (ROOT_CONTEXT_FILES.has(name)) return true;
-  if (name.startsWith(".env")) return true;
-  if (normalized2.startsWith(".claude/")) return true;
-  if (normalized2.startsWith(".agents/")) return true;
-  if (normalized2.startsWith(".codex/")) return true;
-  if (normalized2.startsWith(".cursor/")) return true;
-  if (normalized2.startsWith(".github/workflows/")) return true;
-  if (normalized2.startsWith("docs/")) return true;
-  if (normalized2.startsWith("initiatives/")) return true;
-  if (normalized2.startsWith("memory/")) return true;
-  if (normalized2.startsWith("memories/")) return true;
-  if (normalized2.startsWith("project-memory/")) return true;
-  if (normalized2.startsWith("supabase/")) return true;
-  if (normalized2.startsWith("migrations/")) return true;
-  if (normalized2.startsWith("db/")) return true;
-  if (normalized2.startsWith("ROLEMIGRATIONS/")) return true;
-  if (normalized2 === "src/middleware.ts" || normalized2 === "middleware.ts") return true;
-  if (normalized2.includes("/middleware.")) return true;
-  const ext = extname2(name).toLowerCase();
-  return ext === ".md" || ext === ".mdx" || ext === ".sql" || ext === ".yml" || ext === ".yaml";
+function isStalePath(path, staleRisks) {
+  const lower = normalized(path);
+  if (/complete|summary|legacy|deprecated/.test(lower)) return true;
+  return staleRisks.some((risk) => risk.toLowerCase().startsWith(lower));
 }
-function classifyContext(relPath) {
-  const normalized2 = normalizedPath(relPath);
-  const lower = normalized2.toLowerCase();
-  const name = basename(normalized2);
-  if (lower === "decantr.essence.json") {
-    return {
-      role: "architecture",
-      confidence: 0.82,
-      reason: "existing Decantr contract evidence"
-    };
-  }
-  if (lower === ".claude/initiatives" || lower === "docs/initiatives" || lower === "initiatives" || lower === "memory" || lower === "memories" || lower === "project-memory" || lower.startsWith(".claude/initiatives/") || lower.startsWith("docs/initiatives/") || lower.startsWith("initiatives/") || lower.startsWith("memory/") || lower.startsWith("memories/") || lower.startsWith("project-memory/") || lower.includes("/feature/") || lower.includes("feature") || lower.includes("rbac") || lower.includes("billing") || lower.includes("admin") || lower.includes("dashboard")) {
-    return {
-      role: "feature-business",
-      confidence: 0.78,
-      reason: "feature, initiative, memory, or business-domain evidence"
-    };
-  }
-  if (lower === ".agents" || lower === ".claude" || lower === ".codex" || lower === ".cursor" || lower === "claude.md" || lower === "agents.md" || lower === "gemini.md" || lower === "copilot-instructions.md" || lower === ".cursorrules" || lower === ".windsurfrules" || lower.startsWith(".claude/") || lower.startsWith(".agents/") || lower.startsWith(".codex/") || lower.startsWith(".cursor/rules/")) {
-    return {
-      role: "assistant-specific",
-      confidence: 0.98,
-      reason: "assistant or AI-agent instruction surface"
-    };
-  }
-  if (lower.includes("security") || lower.includes("auth") || lower.includes("rls") || lower.includes("schema") || lower.includes("migration") || lower.startsWith("supabase/") || lower.startsWith("migrations/") || lower.startsWith("db/") || lower.startsWith("rolemigrations/") || lower.includes("middleware.")) {
-    return {
-      role: "security-data",
-      confidence: 0.9,
-      reason: "security, auth, schema, middleware, or data-governance evidence"
-    };
-  }
-  if (lower.includes("design-system") || lower === "components.json" || lower.startsWith("tailwind.config") || lower.includes("ui-components") || lower.includes("colors") || lower.includes("typography") || lower.includes("spacing")) {
-    return {
-      role: "design-system",
-      confidence: 0.88,
-      reason: "design system or styling convention evidence"
-    };
+function inferArea(item) {
+  const lower = normalized(item.path);
+  if (lower.includes("security") || lower.includes("auth") || lower.includes("rls") || lower.includes("schema") || lower.includes("database") || lower.includes("data-layer") || lower.includes("middleware") || lower.startsWith("supabase/") || lower.startsWith("migrations/") || lower.startsWith("rolemigrations/")) {
+    return "security-data";
   }
-  if (lower.startsWith(".github/workflows/") || lower.includes("workflow") || lower.includes("testing") || lower.includes("deployment") || lower.includes("vitest.config") || lower.includes("playwright.config") || lower === "package.json") {
-    return {
-      role: "workflow-ci",
-      confidence: 0.84,
-      reason: "workflow, CI, deployment, or validation command evidence"
-    };
+  if (lower.includes("design-system") || lower.includes("ui-components") || lower.includes("colors") || lower.includes("typography") || lower.includes("spacing") || lower.includes("components.json") || lower.includes("tailwind.config")) {
+    return "design-system";
   }
-  if (lower === "docs" || lower.includes("architecture") || lower === "readme.md" || lower.includes("setup") || lower.includes("contributing") || name === "tsconfig.json" || lower.endsWith("config.ts") || lower.endsWith("config.js") || lower.endsWith("config.mjs")) {
-    return {
-      role: "architecture",
-      confidence: 0.72,
-      reason: "architecture, setup, or framework configuration evidence"
-    };
+  if (lower.includes("architecture") || lower.includes("state-management") || lower.includes("setup") || lower.includes("readme") || lower.endsWith("config.ts") || lower.endsWith("config.js") || lower.endsWith("config.mjs")) {
+    return "architecture";
   }
-  if (lower.includes("complete") || lower.includes("summary") || lower.includes("deprecated") || lower.includes("legacy") || lower.includes("migration")) {
-    return {
-      role: "stale-or-historical",
-      confidence: 0.64,
-      reason: "historical or possibly stale project documentation"
-    };
+  if (lower.includes("workflow") || lower.includes("deployment") || lower.includes("quality") || lower.includes("testing") || lower.includes("vitest") || lower.includes("playwright") || lower.startsWith(".github/workflows/")) {
+    return "workflow-ci";
   }
-  return { role: "unknown", confidence: 0.35, reason: "unclassified context candidate" };
+  return item.role;
 }
-function isSafeToCite(relPath) {
-  const lower = normalizedPath(relPath).toLowerCase();
-  if (lower.startsWith(".env") && lower !== ".env.example" && lower !== ".env.sample") return false;
-  if (lower.includes("secret") || lower.includes("private-key") || lower.includes("credentials")) {
-    return false;
+function precedenceFor(item, area, staleRisks) {
+  let score = BASE_PRECEDENCE[area];
+  const lower = normalized(item.path);
+  if (lower.startsWith(".claude/rules/") || lower.startsWith(".cursor/rules/")) score += 6;
+  if (lower === "claude.md" || lower === "agents.md" || lower === "copilot-instructions.md") {
+    score += 3;
   }
-  return true;
+  if (item.type === "directory") score -= 8;
+  if (isStalePath(item.path, staleRisks)) score -= 35;
+  if (!item.safeToCite) score -= 20;
+  return Math.max(0, Math.min(100, score));
 }
-function addDirectoryContext(items, projectRoot, relPath) {
-  const fullPath = join5(projectRoot, relPath);
-  if (!existsSync5(fullPath)) return;
-  const stats = statSync2(fullPath);
-  const classified = classifyContext(relPath);
-  items.push({
-    path: normalizedPath(relPath),
-    type: "directory",
-    role: classified.role,
-    confidence: classified.confidence,
-    sizeBytes: stats.size,
-    safeToCite: isSafeToCite(relPath),
-    reason: classified.reason
-  });
+function summarize2(sources) {
+  const summary = Object.fromEntries(PRECEDENCE_ORDER.map((area) => [area, 0]));
+  for (const source of sources) summary[source.area] += 1;
+  return summary;
 }
-function walk(projectRoot, dir, items, depth) {
-  if (depth > 6) return;
-  let entries;
-  try {
-    entries = readdirSync4(dir);
-  } catch {
-    return;
-  }
-  for (const entry of entries) {
-    if (shouldSkipDir(entry)) continue;
-    const fullPath = join5(dir, entry);
-    const relPath = normalizedPath(relative2(projectRoot, fullPath));
-    let stats;
-    try {
-      stats = statSync2(fullPath);
-    } catch {
+function topSources(sources, areas, limit = 5) {
+  return sources.filter((source) => source.currency === "current" && areas.includes(source.area)).slice(0, limit).map((source) => source.path);
+}
+function buildResolutions(conflicts, staleRisks, sources) {
+  const resolutions = [];
+  for (const conflict of conflicts) {
+    const lower = conflict.toLowerCase();
+    if (lower.includes("framework")) {
+      resolutions.push({
+        kind: "conflict",
+        issue: conflict,
+        recommendation: "Prefer package/config detection and current architecture sources over stale docs or assistant memory when deciding framework/runtime conventions.",
+        preferredSources: topSources(sources, ["architecture", "workflow-ci"]),
+        confidence: 0.78
+      });
       continue;
     }
-    if (stats.isDirectory()) {
-      if (CONTEXT_DIRECTORIES.has(relPath)) {
-        addDirectoryContext(items, projectRoot, relPath);
-      }
-      walk(projectRoot, fullPath, items, depth + 1);
+    if (lower.includes("tailwind")) {
+      resolutions.push({
+        kind: "conflict",
+        issue: conflict,
+        recommendation: "Preserve the existing styling system until the user approves migration; treat current design-system docs and Tailwind/shadcn config as the styling authority.",
+        preferredSources: topSources(sources, ["design-system", "architecture"]),
+        confidence: 0.82
+      });
       continue;
     }
-    if (!stats.isFile() || !isPotentialContextFile(relPath, entry)) continue;
-    const classified = classifyContext(relPath);
-    items.push({
-      path: relPath,
-      type: "file",
-      role: classified.role,
-      confidence: classified.confidence,
-      sizeBytes: stats.size,
-      safeToCite: isSafeToCite(relPath),
-      reason: classified.reason
-    });
-  }
-}
-function summarize(items) {
-  const summary = {
-    "assistant-specific": 0,
-    "security-data": 0,
-    architecture: 0,
-    "design-system": 0,
-    "workflow-ci": 0,
-    "feature-business": 0,
-    "stale-or-historical": 0,
-    unknown: 0
+    if (lower.includes("client") && lower.includes("server")) {
+      resolutions.push({
+        kind: "conflict",
+        issue: conflict,
+        recommendation: "Prefer current framework architecture and security/data boundaries; stop and ask for review before moving client/server responsibilities.",
+        preferredSources: topSources(sources, ["architecture", "security-data"]),
+        confidence: 0.76
+      });
+      continue;
+    }
+    resolutions.push({
+      kind: "conflict",
+      issue: conflict,
+      recommendation: "Use the highest-precedence current sources in the doctrine map and report the conflict before enforcing either side.",
+      preferredSources: sources.filter((source) => source.currency === "current").slice(0, 5).map((source) => source.path),
+      confidence: 0.62
+    });
+  }
+  if (staleRisks.length > 0) {
+    resolutions.push({
+      kind: "stale-risk",
+      issue: `${staleRisks.length} stale or historical source(s) detected.`,
+      recommendation: "Treat stale-risk sources as historical evidence until confirmed by current security/data, architecture, design-system, workflow, or feature doctrine.",
+      preferredSources: sources.filter((source) => source.currency === "current" && source.area !== "assistant-specific").slice(0, 5).map((source) => source.path),
+      confidence: 0.84
+    });
+  }
+  return resolutions;
+}
+function createDoctrineMap(ambient) {
+  const sources = ambient.items.map((item) => {
+    const area = inferArea(item);
+    const stale = isStalePath(item.path, ambient.staleRisks);
+    return {
+      path: item.path,
+      type: item.type,
+      area: stale ? "stale-or-historical" : area,
+      originalRole: item.role,
+      precedence: precedenceFor(item, area, ambient.staleRisks),
+      confidence: item.confidence,
+      currency: !item.safeToCite ? "unsafe-to-cite" : stale ? "stale-risk" : "current",
+      safeToCite: item.safeToCite,
+      rationale: item.reason
+    };
+  }).sort((a, b) => b.precedence - a.precedence || a.path.localeCompare(b.path));
+  return {
+    version: 1,
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+    precedenceOrder: PRECEDENCE_ORDER,
+    sources,
+    summary: summarize2(sources),
+    conflicts: ambient.conflicts,
+    staleRisks: ambient.staleRisks,
+    resolutions: buildResolutions(ambient.conflicts, ambient.staleRisks, sources),
+    guidance: [
+      "Treat security/data doctrine as highest precedence for implementation safety.",
+      "Treat architecture and design-system sources as product conventions, not Decantr defaults.",
+      "Treat workflow/CI sources as validation evidence for commands and release gates.",
+      "Treat stale-risk sources as historical evidence until a current source confirms them.",
+      "Do not cite unsafe sources directly in assistant context."
+    ]
   };
-  for (const item of items) summary[item.role] += 1;
-  return summary;
 }
-function readSmallText(projectRoot, relPath) {
-  const fullPath = join5(projectRoot, relPath);
+function doctrineMapPath(projectRoot) {
+  return join4(projectRoot, ".decantr", "doctrine-map.json");
+}
+function writeDoctrineMap(projectRoot, doctrine) {
+  writeFileSync(doctrineMapPath(projectRoot), JSON.stringify(doctrine, null, 2) + "\n", "utf-8");
+}
+function readDoctrineMap(projectRoot) {
+  const path = doctrineMapPath(projectRoot);
+  if (!existsSync4(path)) return null;
   try {
-    const stat = statSync2(fullPath);
-    if (stat.size > 64e3) return "";
-    return readFileSync5(fullPath, "utf-8");
+    const parsed = JSON.parse(readFileSync4(path, "utf-8"));
+    if (parsed.version !== 1 || !Array.isArray(parsed.sources)) return null;
+    return parsed;
   } catch {
-    return "";
-  }
-}
-function detectConflicts(projectRoot, items) {
-  const text = items.filter(
-    (item) => item.type === "file" && item.safeToCite && item.path.match(/\.(md|mdx|json|ts|js|yml|yaml)$/)
-  ).slice(0, 80).map((item) => readSmallText(projectRoot, item.path)).join("\n").toLowerCase();
-  const conflicts = [];
-  const frameworkSignals = [
-    ["next", /\bnext\.?js\b|\bapp router\b|\bpages router\b/],
-    ["angular", /\bangular\b/],
-    ["svelte", /\bsvelte\b|\bsveltekit\b/],
-    ["vue", /\bvue\b|\bnuxt\b/]
-  ].filter(([, pattern]) => pattern.test(text));
-  if (frameworkSignals.length > 1) {
-    conflicts.push(
-      `Multiple framework doctrines appear in ambient docs: ${frameworkSignals.map(([name]) => name).join(", ")}.`
-    );
-  }
-  const forbidsTailwind = /\b(do not|don't|avoid|forbid|forbidden)\s+use\s+tailwind\b|\bno\s+tailwind\b/.test(text);
-  const endorsesTailwind = /\btailwind\.config\b|\btailwindcss\b|\b@tailwind\b|\btailwind\s+classes\b/.test(text);
-  if (forbidsTailwind && endorsesTailwind) {
-    conflicts.push("Ambient docs contain both Tailwind usage and anti-Tailwind language.");
-  }
-  if (/\bclient component\b/.test(text) && /\bserver components? only\b/.test(text)) {
-    conflicts.push("Ambient docs may conflict on client vs server component boundaries.");
+    return null;
   }
-  return conflicts;
 }
-function detectDecantrEssenceStaleRisk(projectRoot, items) {
-  if (!items.some((item) => item.path === "decantr.essence.json")) return [];
-  const content = readSmallText(projectRoot, "decantr.essence.json");
-  if (!content) return [];
+
+// src/brownfield-check.ts
+function readProjectJson(projectRoot) {
+  const path = join5(projectRoot, ".decantr", "project.json");
+  if (!existsSync5(path)) return {};
   try {
-    const essence = JSON.parse(content);
-    const risks = [];
-    if (essence.version !== "4.0.0") {
-      risks.push(
-        `decantr.essence.json uses Decantr essence version ${essence.version ?? "unknown"}; run decantr migrate --to v4 or review before treating it as current brownfield doctrine.`
-      );
-    }
-    if (essence.dna?.theme?.id === "luminarum" && essence.structure) {
-      risks.push(
-        "decantr.essence.json looks like an older Decantr default scaffold; verify before importing its theme or page layout as brownfield truth."
-      );
-    }
-    return risks;
+    return JSON.parse(readFileSync5(path, "utf-8"));
   } catch {
-    return [
-      "decantr.essence.json could not be parsed during ambient inventory; review before treating it as current doctrine."
-    ];
+    return {};
   }
 }
-function detectStaleRisks(projectRoot, items) {
-  const pathRisks = items.filter(
-    (item) => item.role === "stale-or-historical" || /complete|summary|legacy|deprecated/i.test(item.path)
-  ).slice(0, 12).map(
-    (item) => `${item.path} may be historical; verify before treating it as current doctrine.`
-  );
-  return [...pathRisks, ...detectDecantrEssenceStaleRisk(projectRoot, items)];
+function essenceRoutes(essence) {
+  const fromRouteMap = Object.keys(essence.blueprint.routes ?? {});
+  const fromPages = essence.blueprint.sections?.flatMap(
+    (section) => section.pages.map((page) => page.route).filter((route) => Boolean(route))
+  ) ?? essence.blueprint.pages?.map((page) => page.route).filter((route) => Boolean(route)) ?? [];
+  return /* @__PURE__ */ new Set([...fromRouteMap, ...fromPages]);
 }
-function scanAmbientContext(projectRoot) {
-  const items = [];
-  walk(projectRoot, projectRoot, items, 0);
-  const deduped = [...new Map(items.map((item) => [item.path, item])).values()].sort(
-    (a, b) => a.path.localeCompare(b.path)
+function routeLabel(routes) {
+  if (routes.length <= 6) return routes.join(", ");
+  return `${routes.slice(0, 6).join(", ")} (+${routes.length - 6} more)`;
+}
+function hasDoctrineEffect(essence, key) {
+  const effects = essence.dna.constraints?.effects;
+  return Boolean(effects && effects[key]);
+}
+function hasActionableDoctrineSource(doctrine, area) {
+  return doctrine.sources.some(
+    (source) => source.area === area && source.currency === "current" && source.safeToCite && source.confidence >= 0.72 && source.precedence >= 75
   );
-  return {
-    version: 1,
-    scannedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    items: deduped,
-    summary: summarize(deduped),
-    conflicts: detectConflicts(projectRoot, deduped),
-    staleRisks: detectStaleRisks(projectRoot, deduped)
-  };
 }
-
-// src/analyzers/routes.ts
-import { existsSync as existsSync6, readdirSync as readdirSync5, readFileSync as readFileSync6, statSync as statSync3 } from "fs";
-import { join as join6, relative as relative3 } from "path";
-var SKIP_DIRS2 = /* @__PURE__ */ new Set(["node_modules", ".next", ".git", "api", "_app", "_document"]);
-function shouldSkipDir2(name) {
-  return name.startsWith("_") || name.startsWith(".") || SKIP_DIRS2.has(name);
+function hasAssistantBridge(projectRoot) {
+  const previewPath = join5(projectRoot, ".decantr", "context", "assistant-bridge.md");
+  if (existsSync5(previewPath)) return true;
+  const candidateFiles = [
+    "CLAUDE.md",
+    "AGENTS.md",
+    "GEMINI.md",
+    "copilot-instructions.md",
+    ".github/copilot-instructions.md",
+    ".cursorrules",
+    ".windsurfrules",
+    ".claude/rules/decantr.md",
+    ".cursor/rules/decantr.mdc"
+  ];
+  return candidateFiles.some((rel) => {
+    const path = join5(projectRoot, rel);
+    if (!existsSync5(path)) return false;
+    try {
+      return readFileSync5(path, "utf-8").includes("decantr:assistant-bridge:start");
+    } catch {
+      return false;
+    }
+  });
 }
-function segmentToRoute(segment) {
-  if (segment.startsWith("(") && segment.endsWith(")")) {
-    return null;
+function scanBrownfieldIssues(projectRoot, essence) {
+  const projectJson = readProjectJson(projectRoot);
+  const routes = scanRoutes(projectRoot);
+  const styling = scanStyling(projectRoot);
+  const ambient = scanAmbientContext(projectRoot);
+  const doctrine = readDoctrineMap(projectRoot) ?? createDoctrineMap(ambient);
+  const issues = [];
+  const declaredRoutes = essenceRoutes(essence);
+  const observedRoutes = new Set(routes.routes.map((route) => route.path));
+  const missingFromEssence = [...observedRoutes].filter((route) => !declaredRoutes.has(route));
+  const missingFromSource = [...declaredRoutes].filter((route) => !observedRoutes.has(route));
+  if (routes.routes.length > 0 && declaredRoutes.size === 0) {
+    issues.push({
+      type: "error",
+      rule: "brownfield-route-coverage",
+      message: `The app has ${routes.routes.length} observed route(s), but the Decantr essence declares no routes.`,
+      suggestion: "Run `decantr analyze`, review the proposal, then `decantr init --existing --accept-proposal` or `--merge-proposal`."
+    });
+  } else if (missingFromEssence.length > 0) {
+    issues.push({
+      type: "error",
+      rule: "brownfield-route-drift",
+      message: `Observed routes are missing from the Decantr contract: ${routeLabel(missingFromEssence)}.`,
+      suggestion: "Regenerate a brownfield proposal and merge the missing routes into the essence."
+    });
   }
-  if (segment.startsWith("[") && segment.endsWith("]")) {
-    const param = segment.slice(1, -1);
-    if (param.startsWith("...")) {
-      return `:${param.slice(3)}*`;
-    }
-    if (param.startsWith("[...") && param.endsWith("]")) {
-      return `:${param.slice(4, -1)}*`;
+  if (routes.routes.length > 0 && declaredRoutes.size === 1 && declaredRoutes.has("/") && routes.routes.length > 1) {
+    issues.push({
+      type: "error",
+      rule: "brownfield-generic-contract",
+      message: "The essence only declares `/` while the app has multiple observed routes.",
+      suggestion: "Accept or merge an observed brownfield proposal instead of using a generic scaffold contract."
+    });
+  }
+  if (missingFromSource.length > 0 && routes.routes.length > 0) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-stale-route",
+      message: `Essence routes were not observed in source: ${routeLabel(missingFromSource)}.`,
+      suggestion: "Confirm whether these are generated/dynamic routes or stale contract entries."
+    });
+  }
+  const adoptionMode = projectJson.initialized?.adoptionMode;
+  const themeId = essence.dna.theme.id;
+  if (adoptionMode === "contract-only" && themeId === "luminarum" && (styling.approach !== "unknown" || styling.cssVariables.length > 0)) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-theme-default",
+      message: "Contract-only brownfield essence still uses Decantr theme `luminarum` while the app has an existing styling system.",
+      suggestion: 'Use an observed proposal with `theme.id = "existing"` unless the user explicitly opts into a Decantr theme.'
+    });
+  }
+  for (const conflict of ambient.conflicts) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-doctrine-conflict",
+      message: conflict,
+      suggestion: "Resolve or document precedence before treating these rules as enforceable contract."
+    });
+  }
+  if (ambient.items.length === 0) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-context-missing",
+      message: "No ambient project context was detected for this brownfield check.",
+      suggestion: "Run `decantr analyze` to create `.decantr/ambient-context.json` and a proposal-backed report."
+    });
+  }
+  const hasBrownfieldArtifacts = Boolean(
+    projectJson.initialized?.workflowMode === "brownfield-attach"
+  );
+  if (hasBrownfieldArtifacts && !existsSync5(join5(projectRoot, ".decantr", "doctrine-map.json"))) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-doctrine-map-missing",
+      message: "Brownfield attach metadata exists, but `.decantr/doctrine-map.json` is missing.",
+      suggestion: "Run `decantr analyze` to regenerate ranked doctrine evidence."
+    });
+  }
+  if (hasActionableDoctrineSource(doctrine, "security-data") && !hasDoctrineEffect(essence, "doctrine-security-data")) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-doctrine-coverage",
+      message: "Security/data doctrine was detected, but the essence does not record a security/data preservation constraint.",
+      suggestion: "Regenerate and merge a brownfield proposal so security/data doctrine is represented in `dna.constraints.effects`."
+    });
+  }
+  if (hasActionableDoctrineSource(doctrine, "design-system") && !hasDoctrineEffect(essence, "doctrine-design-system")) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-doctrine-coverage",
+      message: "Design-system doctrine was detected, but the essence does not record a design-system preservation constraint.",
+      suggestion: "Regenerate and merge a brownfield proposal so design-system doctrine is represented in `dna.constraints.effects`."
+    });
+  }
+  if (styling.approach !== "unknown") {
+    const palette = String(essence.dna.color.palette ?? "");
+    const observedPalette = palette === "observed" || palette === styling.approach;
+    if (themeId === "existing" && !observedPalette) {
+      issues.push({
+        type: "warning",
+        rule: "brownfield-style-drift",
+        message: `Observed styling approach is ${styling.approach}, but the essence color palette is ${palette || "unset"}.`,
+        suggestion: "Regenerate and merge a brownfield proposal so the contract reflects the existing styling system."
+      });
     }
-    return `:${param}`;
   }
-  return segment;
+  if (ambient.items.some((item) => item.role === "assistant-specific") && hasBrownfieldArtifacts && !hasAssistantBridge(projectRoot)) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-assistant-bridge-missing",
+      message: "Assistant-specific rule files were detected, but no Decantr assistant bridge preview or applied bridge block was found.",
+      suggestion: "Run `decantr rules preview` first, then `decantr rules apply` if the user explicitly approves rule-file mutation."
+    });
+  }
+  const unsafeSources = doctrine.sources.filter((source) => !source.safeToCite);
+  if (unsafeSources.length > 0) {
+    issues.push({
+      type: "warning",
+      rule: "brownfield-unsafe-context",
+      message: `Some ambient context should not be cited directly: ${unsafeSources.slice(0, 4).map((source) => source.path).join(", ")}${unsafeSources.length > 4 ? ` (+${unsafeSources.length - 4} more)` : ""}.`,
+      suggestion: "Keep unsafe source paths in the inventory, but do not paste their contents into assistant context."
+    });
+  }
+  return issues;
 }
-function walkAppDir(dir, baseDir, segments) {
-  const routes = [];
-  let entries;
+
+// src/guard-context.ts
+import { existsSync as existsSync7, readdirSync as readdirSync4, readFileSync as readFileSync7 } from "fs";
+import { join as join7 } from "path";
+
+// src/bundled-content.ts
+import { existsSync as existsSync6, readdirSync as readdirSync3, readFileSync as readFileSync6 } from "fs";
+import { dirname, join as join6 } from "path";
+import { fileURLToPath } from "url";
+function bundledDirCandidates(contentType) {
+  const currentDir = dirname(fileURLToPath(import.meta.url));
+  return [
+    join6(currentDir, "bundled", contentType),
+    join6(currentDir, "..", "src", "bundled", contentType),
+    join6(currentDir, "..", "bundled", contentType)
+  ];
+}
+function getBundledContentPath(contentType, id) {
+  for (const dir of bundledDirCandidates(contentType)) {
+    const candidate = join6(dir, `${id}.json`);
+    if (existsSync6(candidate)) return candidate;
+  }
+  return null;
+}
+function loadBundledContentItem(contentType, id) {
+  const path = getBundledContentPath(contentType, id);
+  if (!path) return null;
   try {
-    entries = readdirSync5(dir);
+    const data = JSON.parse(readFileSync6(path, "utf-8"));
+    return { id, data, path };
   } catch {
-    return routes;
-  }
-  const hasPage = entries.some(
-    (e) => e === "page.tsx" || e === "page.ts" || e === "page.jsx" || e === "page.js"
-  );
-  const hasLayout = entries.some(
-    (e) => e === "layout.tsx" || e === "layout.ts" || e === "layout.jsx" || e === "layout.js"
-  );
-  if (hasPage) {
-    const routePath = "/" + segments.filter((s) => s !== "").join("/");
-    const pageFile = entries.find((e) => e.startsWith("page."));
-    routes.push({
-      path: routePath || "/",
-      file: relative3(baseDir, join6(dir, pageFile)),
-      hasLayout
-    });
+    return null;
   }
-  for (const entry of entries) {
-    if (shouldSkipDir2(entry)) continue;
-    const fullPath = join6(dir, entry);
+}
+function loadBundledContentList(contentType) {
+  const entries = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const dir of bundledDirCandidates(contentType)) {
+    if (!existsSync6(dir)) continue;
     try {
-      if (!statSync3(fullPath).isDirectory()) continue;
+      for (const file of readdirSync3(dir).filter((name) => name.endsWith(".json"))) {
+        const id = file.replace(/\.json$/, "");
+        if (seen.has(id)) continue;
+        const path = join6(dir, file);
+        const data = JSON.parse(readFileSync6(path, "utf-8"));
+        entries.push({ id, data, path });
+        seen.add(id);
+      }
     } catch {
-      continue;
     }
-    const routeSegment = segmentToRoute(entry);
-    const nextSegments = routeSegment === null ? [...segments] : [...segments, routeSegment];
-    routes.push(...walkAppDir(fullPath, baseDir, nextSegments));
   }
-  return routes;
+  return entries;
 }
-function walkPagesDir(dir, baseDir, segments, extensions = /* @__PURE__ */ new Set(["ts", "tsx", "js", "jsx", "md", "mdx"])) {
-  const routes = [];
-  let entries;
+
+// src/guard-context.ts
+function loadJsonEntries(dir) {
+  if (!existsSync7(dir)) return [];
   try {
-    entries = readdirSync5(dir);
+    return readdirSync4(dir).filter((file) => file.endsWith(".json") && file !== "index.json").map((file) => JSON.parse(readFileSync7(join7(dir, file), "utf-8")));
   } catch {
-    return routes;
+    return [];
   }
-  for (const entry of entries) {
-    if (shouldSkipDir2(entry)) continue;
-    const fullPath = join6(dir, entry);
-    try {
-      const stat = statSync3(fullPath);
-      if (stat.isDirectory()) {
-        const routeSegment = segmentToRoute(entry);
-        const nextSegments = routeSegment === null ? [...segments] : [...segments, routeSegment];
-        routes.push(...walkPagesDir(fullPath, baseDir, nextSegments, extensions));
-      } else if (stat.isFile()) {
-        const match = entry.match(/^(.+)\.([^.]+)$/);
-        if (!match) continue;
-        const name = match[1];
-        const extension = match[2];
-        if (!extensions.has(extension)) continue;
-        if (name.startsWith("_")) continue;
-        const routeSegment = name === "index" ? "" : segmentToRoute(name) ?? name;
-        const routePath = "/" + [...segments, routeSegment].filter((s) => s !== "").join("/");
-        routes.push({
-          path: routePath || "/",
-          file: relative3(baseDir, fullPath),
-          hasLayout: false
-        });
-      }
-    } catch {
+}
+function buildGuardRegistryContext(projectRoot = process.cwd()) {
+  const themeRegistry = /* @__PURE__ */ new Map();
+  const patternRegistry = /* @__PURE__ */ new Map();
+  const cacheDir = join7(projectRoot, ".decantr", "cache");
+  const customDir = join7(projectRoot, ".decantr", "custom");
+  for (const data of loadJsonEntries(join7(cacheDir, "@official", "themes"))) {
+    if (typeof data.id === "string" && !themeRegistry.has(data.id)) {
+      themeRegistry.set(data.id, {
+        modes: Array.isArray(data.modes) ? data.modes.filter((mode) => typeof mode === "string") : ["light", "dark"]
+      });
     }
   }
-  return routes;
-}
-function walkSvelteKitRoutes(dir, baseDir, segments) {
-  const routes = [];
-  let entries;
-  try {
-    entries = readdirSync5(dir);
-  } catch {
-    return routes;
+  for (const data of loadJsonEntries(join7(customDir, "themes"))) {
+    if (typeof data.id === "string") {
+      themeRegistry.set(`custom:${data.id}`, {
+        modes: Array.isArray(data.modes) ? data.modes.filter((mode) => typeof mode === "string") : ["light", "dark"]
+      });
+    }
   }
-  const pageFile = entries.find((entry) => /^\+page\.(svelte|ts|js)$/.test(entry));
-  const hasLayout = entries.some((entry) => /^\+layout\.(svelte|ts|js)$/.test(entry));
-  if (pageFile) {
-    const routePath = "/" + segments.filter((segment) => segment !== "").join("/");
-    routes.push({
-      path: routePath || "/",
-      file: relative3(baseDir, join6(dir, pageFile)),
-      hasLayout
-    });
+  for (const data of loadJsonEntries(join7(cacheDir, "@official", "patterns"))) {
+    if (typeof data.id === "string" && !patternRegistry.has(data.id)) {
+      patternRegistry.set(data.id, data);
+    }
   }
-  for (const entry of entries) {
-    if (shouldSkipDir2(entry)) continue;
-    const fullPath = join6(dir, entry);
-    try {
-      if (!statSync3(fullPath).isDirectory()) continue;
-    } catch {
-      continue;
+  for (const entry of loadBundledContentList("patterns")) {
+    const data = entry.data;
+    const id = typeof data.id === "string" ? data.id : entry.id;
+    if (!patternRegistry.has(id)) {
+      patternRegistry.set(id, data);
     }
-    const routeSegment = segmentToRoute(entry);
-    const nextSegments = routeSegment === null ? [...segments] : [...segments, routeSegment];
-    routes.push(...walkSvelteKitRoutes(fullPath, baseDir, nextSegments));
   }
-  return routes;
-}
-var ROUTER_FILE_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".ts", ".jsx", ".js"]);
-function collectRouteCandidateFiles(dir, files, depth = 0) {
-  if (depth > 5) return;
-  let entries;
-  try {
-    entries = readdirSync5(dir);
-  } catch {
-    return;
+  for (const data of loadJsonEntries(join7(customDir, "patterns"))) {
+    if (typeof data.id === "string") {
+      patternRegistry.set(data.id, data);
+    }
   }
-  for (const entry of entries) {
-    if (entry.startsWith(".") || entry === "node_modules") continue;
-    const fullPath = join6(dir, entry);
+  return { themeRegistry, patternRegistry };
+}
+
+// src/lib/scan-interactions.ts
+import { existsSync as existsSync8, readdirSync as readdirSync5, readFileSync as readFileSync8, statSync as statSync3 } from "fs";
+import { extname as extname2, join as join8, relative as relative3 } from "path";
+import { verifyInteractionsInSource } from "@decantr/verifier";
+var SCAN_EXTENSIONS = /* @__PURE__ */ new Set([".tsx", ".jsx", ".ts", ".js", ".html", ".mdx"]);
+var SKIP_DIRECTORIES = /* @__PURE__ */ new Set([
+  "node_modules",
+  ".decantr",
+  ".git",
+  "dist",
+  "build",
+  ".next",
+  ".turbo",
+  "coverage",
+  ".cache"
+]);
+var MAX_FILE_SIZE = 1024 * 1024;
+function walkSourceTree(rootDir) {
+  const sources = /* @__PURE__ */ new Map();
+  function walk2(dir) {
+    let entries;
     try {
-      const stat = statSync3(fullPath);
-      if (stat.isDirectory()) {
-        collectRouteCandidateFiles(fullPath, files, depth + 1);
-      } else if (stat.isFile()) {
-        const ext = entry.slice(entry.lastIndexOf("."));
-        if (ROUTER_FILE_EXTENSIONS.has(ext)) {
-          files.push(fullPath);
+      entries = readdirSync5(dir);
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (SKIP_DIRECTORIES.has(entry)) continue;
+      const fullPath = join8(dir, entry);
+      let s;
+      try {
+        s = statSync3(fullPath);
+      } catch {
+        continue;
+      }
+      if (s.isDirectory()) {
+        walk2(fullPath);
+      } else if (s.isFile() && SCAN_EXTENSIONS.has(extname2(entry))) {
+        if (s.size > MAX_FILE_SIZE) continue;
+        try {
+          sources.set(relative3(rootDir, fullPath) || entry, readFileSync8(fullPath, "utf8"));
+        } catch {
         }
       }
-    } catch {
     }
   }
+  walk2(rootDir);
+  return sources;
 }
-function scanReactRouter(projectRoot) {
-  const candidateDirs = [join6(projectRoot, "src"), projectRoot];
-  const candidateFiles = [];
-  for (const dir of candidateDirs) {
-    if (existsSync6(dir)) collectRouteCandidateFiles(dir, candidateFiles);
+function collectDeclaredInteractions(projectRoot) {
+  const manifestPath = join8(projectRoot, ".decantr", "context", "pack-manifest.json");
+  if (!existsSync8(manifestPath)) return [];
+  let manifest;
+  try {
+    manifest = JSON.parse(readFileSync8(manifestPath, "utf8"));
+  } catch {
+    return [];
   }
-  const routeMap = /* @__PURE__ */ new Map();
-  for (const absolutePath of candidateFiles) {
-    let content;
+  const all = [];
+  const pages = manifest.pages ?? [];
+  const contextDir = join8(projectRoot, ".decantr", "context");
+  for (const page of pages) {
+    const packPath = join8(contextDir, page.json);
+    if (!existsSync8(packPath)) continue;
+    let pack;
     try {
-      content = readFileSync6(absolutePath, "utf-8");
+      pack = JSON.parse(readFileSync8(packPath, "utf8"));
     } catch {
       continue;
     }
-    const isReactRouterFile = content.includes("react-router-dom") || content.includes("react-router") || content.includes("<Routes") || content.includes("createBrowserRouter") || content.includes("createHashRouter") || content.includes("RouterProvider") || content.includes("HashRouter") || content.includes("BrowserRouter");
-    if (!isReactRouterFile) continue;
-    const relativePath = relative3(projectRoot, absolutePath);
-    const pathMatches = /* @__PURE__ */ new Set();
-    for (const match of content.matchAll(/<Route\b[^>]*\bpath=["'`]([^"'`]+)["'`]/g)) {
-      pathMatches.add(match[1]);
-    }
-    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]+)["'`]/g)) {
-      pathMatches.add(match[1]);
-    }
-    if (pathMatches.size === 0 && (content.includes("<Routes") || content.includes("RouterProvider"))) {
-      pathMatches.add("/");
-    }
-    for (const path of pathMatches) {
-      if (!routeMap.has(path)) {
-        routeMap.set(path, {
-          path,
-          file: relativePath,
-          hasLayout: false
-        });
+    const patterns = pack.data?.patterns ?? [];
+    for (const pat of patterns) {
+      if (Array.isArray(pat.interactions)) {
+        all.push(...pat.interactions);
       }
     }
   }
-  return [...routeMap.values()];
+  return all;
 }
-function hasReactRouterDependency(projectRoot) {
-  return hasDependency(projectRoot, ["react-router", "react-router-dom"]);
+function scanProjectInteractions(projectRoot) {
+  const declared = collectDeclaredInteractions(projectRoot);
+  if (declared.length === 0) return [];
+  const sources = walkSourceTree(projectRoot);
+  if (sources.size === 0) return [];
+  const missing = verifyInteractionsInSource(declared, sources);
+  return missing.map(
+    ({ interaction, suggestion, scannedFiles, scannedLocations, expectedSignals }) => {
+      const evidence = [
+        scannedFiles ? `scanned ${scannedFiles} source file(s)` : null,
+        scannedLocations?.length ? `checked: ${scannedLocations.slice(0, 4).map((location) => `${location.file}:${location.startLine}-${location.endLine}`).join(", ")}` : null,
+        expectedSignals?.length ? `expected signals: ${expectedSignals.slice(0, 4).join(", ")}` : null
+      ].filter((entry) => Boolean(entry)).join("; ");
+      return `${interaction} \u2192 ${suggestion}${evidence ? ` (${evidence})` : ""}`;
+    }
+  );
 }
-function hasDependency(projectRoot, names) {
-  const packageJsonPath = join6(projectRoot, "package.json");
-  if (!existsSync6(packageJsonPath)) return false;
+
+// src/telemetry.ts
+import { randomUUID } from "crypto";
+import { existsSync as existsSync9, mkdirSync, readFileSync as readFileSync9, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
+import { dirname as dirname2, join as join9, resolve } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+import {
+  createFetchTelemetrySink,
+  createTelemetryClient,
+  isTelemetryActorType
+} from "@decantr/telemetry";
+var TELEMETRY_ENDPOINT = "https://api.decantr.ai/v1/telemetry/guard";
+var DEFAULT_TELEMETRY_EVENTS_ENDPOINT = "https://api.decantr.ai/v1/telemetry/events";
+var TELEMETRY_TIMEOUT_MS = 3e3;
+var DNA_RULES = /* @__PURE__ */ new Set(["theme", "style", "density", "accessibility", "theme-mode"]);
+async function sendGuardMetrics(metrics) {
   try {
-    const pkg = JSON.parse(readFileSync6(packageJsonPath, "utf-8"));
-    const deps = { ...pkg.dependencies, ...pkg.devDependencies };
-    return names.some((name) => Boolean(deps[name]));
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TELEMETRY_TIMEOUT_MS);
+    await fetch(TELEMETRY_ENDPOINT, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(metrics),
+      signal: controller.signal
+    });
+    clearTimeout(timer);
   } catch {
-    return false;
   }
 }
-function hasAnyFile(projectRoot, relPaths) {
-  return relPaths.some((relPath) => existsSync6(join6(projectRoot, relPath)));
-}
-function normalizeRoutePath(path) {
-  const cleaned = path.trim();
-  if (!cleaned || cleaned === "/") return "/";
-  if (cleaned === "**" || cleaned.startsWith("#")) return null;
-  return cleaned.startsWith("/") ? cleaned : `/${cleaned}`;
-}
-function scanAngularRouter(projectRoot) {
-  const candidateDirs = [join6(projectRoot, "src", "app"), join6(projectRoot, "src")];
-  const candidateFiles = [];
-  for (const dir of candidateDirs) {
-    if (existsSync6(dir)) collectRouteCandidateFiles(dir, candidateFiles);
+function isOptedIn(projectRoot) {
+  const projectJsonPath = join9(projectRoot, ".decantr", "project.json");
+  if (!existsSync9(projectJsonPath)) return false;
+  try {
+    const data = JSON.parse(readFileSync9(projectJsonPath, "utf-8"));
+    return data.telemetry === true;
+  } catch {
+    return false;
   }
-  const routeMap = /* @__PURE__ */ new Map();
-  for (const absolutePath of candidateFiles) {
-    let content;
+}
+function optIn(projectRoot) {
+  const projectJsonPath = join9(projectRoot, ".decantr", "project.json");
+  let data = {};
+  if (existsSync9(projectJsonPath)) {
     try {
-      content = readFileSync6(absolutePath, "utf-8");
+      data = JSON.parse(readFileSync9(projectJsonPath, "utf-8"));
     } catch {
-      continue;
-    }
-    const isRouterFile = content.includes("@angular/router") || content.includes("RouterModule.forRoot") || content.includes("provideRouter") || content.includes("Routes =");
-    if (!isRouterFile) continue;
-    const relativePath = relative3(projectRoot, absolutePath);
-    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]*)["'`]/g)) {
-      const routePath = normalizeRoutePath(match[1]);
-      if (!routePath || routeMap.has(routePath)) continue;
-      routeMap.set(routePath, {
-        path: routePath,
-        file: relativePath,
-        hasLayout: false
-      });
     }
   }
-  return [...routeMap.values()];
+  data.telemetry = true;
+  mkdirSync(dirname2(projectJsonPath), { recursive: true });
+  writeFileSync2(projectJsonPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
 }
-function scanVueRouter(projectRoot) {
-  const candidateDirs = [join6(projectRoot, "src"), projectRoot];
-  const candidateFiles = [];
-  for (const dir of candidateDirs) {
-    if (existsSync6(dir)) collectRouteCandidateFiles(dir, candidateFiles);
-  }
-  const routeMap = /* @__PURE__ */ new Map();
-  for (const absolutePath of candidateFiles) {
-    let content;
-    try {
-      content = readFileSync6(absolutePath, "utf-8");
-    } catch {
-      continue;
-    }
-    const isRouterFile = content.includes("vue-router") || content.includes("createRouter") || content.includes("createWebHistory") || content.includes("createWebHashHistory");
-    if (!isRouterFile) continue;
-    const relativePath = relative3(projectRoot, absolutePath);
-    for (const match of content.matchAll(/\bpath\s*:\s*["'`]([^"'`]+)["'`]/g)) {
-      const routePath = normalizeRoutePath(match[1]);
-      if (!routePath || routeMap.has(routePath)) continue;
-      routeMap.set(routePath, {
-        path: routePath,
-        file: relativePath,
-        hasLayout: false
-      });
-    }
-  }
-  return [...routeMap.values()];
-}
-function scanRoutes(projectRoot) {
-  const hasNext = hasDependency(projectRoot, ["next"]) || hasAnyFile(projectRoot, ["next.config.js", "next.config.ts", "next.config.mjs"]);
-  const hasSvelteKit = hasDependency(projectRoot, ["@sveltejs/kit", "svelte"]) || hasAnyFile(projectRoot, ["svelte.config.js", "svelte.config.ts"]);
-  const hasNuxt = hasDependency(projectRoot, ["nuxt"]) || hasAnyFile(projectRoot, ["nuxt.config.js", "nuxt.config.ts"]);
-  const hasAngular = hasDependency(projectRoot, ["@angular/core", "@angular/router"]) || hasAnyFile(projectRoot, ["angular.json"]);
-  const hasVue = hasDependency(projectRoot, ["vue", "vue-router"]) || hasAnyFile(projectRoot, ["vite.config.js", "vite.config.ts"]);
-  const appDirs = [join6(projectRoot, "src", "app"), join6(projectRoot, "app")];
-  const appRoutes = appDirs.flatMap(
-    (appDir) => existsSync6(appDir) ? walkAppDir(appDir, projectRoot, []) : []
-  );
-  const pagesDirs = [join6(projectRoot, "src", "pages"), join6(projectRoot, "pages")];
-  const pagesRoutes = pagesDirs.flatMap(
-    (pagesDir) => existsSync6(pagesDir) ? walkPagesDir(pagesDir, projectRoot, []) : []
+async function captureCliTelemetryEvent(input) {
+  const projectRoot = resolveCliTelemetryProjectRoot(
+    input.projectRoot ?? process.cwd(),
+    input.args ?? []
   );
-  if (hasNext) {
-    if (appRoutes.length > 0 && pagesRoutes.length > 0) {
-      return { strategy: "mixed-next-router", routes: [...appRoutes, ...pagesRoutes] };
-    }
-    if (appRoutes.length > 0) return { strategy: "app-router", routes: appRoutes };
-    if (pagesRoutes.length > 0) return { strategy: "pages-router", routes: pagesRoutes };
-  } else if (appRoutes.length > 0) {
-    return { strategy: "app-router", routes: appRoutes };
-  }
-  if (hasSvelteKit) {
-    const svelteRoutesDir = join6(projectRoot, "src", "routes");
-    if (existsSync6(svelteRoutesDir)) {
-      const routes = walkSvelteKitRoutes(svelteRoutesDir, projectRoot, []);
-      if (routes.length > 0) return { strategy: "sveltekit-router", routes };
-    }
-  }
-  if (hasNuxt) {
-    const nuxtPagesDirs = [join6(projectRoot, "pages"), join6(projectRoot, "app", "pages")];
-    const routes = nuxtPagesDirs.flatMap(
-      (pagesDir) => existsSync6(pagesDir) ? walkPagesDir(pagesDir, projectRoot, [], /* @__PURE__ */ new Set(["vue"])) : []
-    );
-    if (routes.length > 0) return { strategy: "nuxt-router", routes };
-  }
-  const reactRouterRoutes = scanReactRouter(projectRoot);
-  if (reactRouterRoutes.length > 0 && hasReactRouterDependency(projectRoot)) {
-    return { strategy: "react-router", routes: reactRouterRoutes };
+  if (!isOptedIn(projectRoot)) {
+    return;
   }
-  if (hasAngular) {
-    const routes = scanAngularRouter(projectRoot);
-    if (routes.length > 0) return { strategy: "angular-router", routes };
+  const identities = ensureTelemetryIdentities(projectRoot);
+  if (!identities) {
+    return;
   }
-  if (hasVue) {
-    const routes = scanVueRouter(projectRoot);
-    if (routes.length > 0) return { strategy: "vue-router", routes };
+  const registrySource = input.registrySource ?? getRegistrySourceProperty(input.properties) ?? inferRegistrySource(input.args ?? []);
+  const client = createTelemetryClient({
+    sink: createFetchTelemetrySink({
+      endpoint: getTelemetryEventsEndpoint(),
+      timeoutMs: TELEMETRY_TIMEOUT_MS
+    })
+  });
+  const event = {
+    name: input.name,
+    context: {
+      source: "cli",
+      actorType: getTelemetryActorType(),
+      environment: "production",
+      decantrVersion: getCliVersion(),
+      installId: identities.installId,
+      projectId: identities.projectId,
+      registrySource
+    },
+    properties: input.properties
+  };
+  try {
+    await client.capture(event);
+  } catch {
   }
-  if (pagesRoutes.length > 0) {
-    return { strategy: "pages-router", routes: pagesRoutes };
+}
+async function sendCliCommandTelemetry(input) {
+  const projectRoot = resolveCliTelemetryProjectRoot(input.projectRoot ?? process.cwd(), input.args);
+  const command = normalizeCommand(input.args[0]);
+  if (!isOptedIn(projectRoot) || !command || command === "help" || command === "version" || isHelpOrVersionProbe(input.args)) {
+    return;
   }
-  if (reactRouterRoutes.length > 0) {
-    return { strategy: "react-router", routes: reactRouterRoutes };
+  const properties = buildCliLifecycleProperties({
+    args: input.args,
+    command,
+    durationMs: input.durationMs,
+    projectRoot,
+    success: input.success
+  });
+  await captureCliTelemetryEvent({
+    args: input.args,
+    name: "cli.command.completed",
+    projectRoot,
+    properties,
+    registrySource: properties.registrySource
+  });
+  const lifecycleEventName = lifecycleTelemetryEventName(command);
+  if (lifecycleEventName) {
+    await captureCliTelemetryEvent({
+      args: input.args,
+      name: lifecycleEventName,
+      projectRoot,
+      properties,
+      registrySource: properties.registrySource
+    });
   }
-  return { strategy: "none", routes: [] };
 }
-
-// src/analyzers/styling.ts
-import { existsSync as existsSync7, readFileSync as readFileSync7 } from "fs";
-import { join as join7 } from "path";
-var TAILWIND_CONFIGS = [
-  "tailwind.config.js",
-  "tailwind.config.ts",
-  "tailwind.config.mjs",
-  "tailwind.config.cjs"
-];
-var GLOBALS_CSS_PATHS = [
-  "src/app/globals.css",
-  "app/globals.css",
-  "src/styles/global.css",
-  "src/styles/globals.css",
-  "src/styles/main.css",
-  "src/styles.css",
-  "styles/globals.css",
-  "styles.css",
-  "assets/css/main.css",
-  "src/index.css",
-  "src/app.css",
-  "src/global.css"
-];
-var DECANTR_STYLE_PATHS = [
-  "src/styles/tokens.css",
-  "src/styles/treatments.css",
-  "src/styles/global.css"
-];
-function extractCSSVariables(content) {
-  const colors = {};
-  const variables = [];
-  const varRegex = /--([\w-]+)\s*:\s*([^;]+)/g;
-  let match;
-  while ((match = varRegex.exec(content)) !== null) {
-    const name = match[1];
-    const value = match[2].trim();
-    variables.push(`--${name}`);
-    const colorPatterns = [
-      "primary",
-      "secondary",
-      "accent",
-      "bg",
-      "fg",
-      "border",
-      "success",
-      "warning",
-      "error",
-      "surface",
-      "muted"
-    ];
-    if (value.startsWith("#") || value.startsWith("rgb") || value.startsWith("hsl") || colorPatterns.some((p) => name.includes(p))) {
-      colors[name] = value;
-    }
+async function sendProjectHealthReportTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const properties = buildProjectHealthTelemetryProperties(input, projectRoot);
+  await captureCliTelemetryEvent({
+    name: "health.report.generated",
+    projectRoot,
+    properties
+  });
+  if (input.report.status === "healthy") {
+    await captureCliTelemetryEvent({
+      name: "decantr.health.healthy",
+      projectRoot,
+      properties
+    });
   }
-  return { colors, variables };
 }
-function detectDarkMode(projectRoot, cssContents) {
-  for (const cssContent of cssContents) {
-    if (cssContent.includes(".dark") || cssContent.includes('[data-theme="dark"]') || cssContent.includes("prefers-color-scheme: dark") || cssContent.includes("color-scheme: dark")) {
-      return true;
+async function sendAnalyzeCompletedTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const metadata = readProjectTelemetryMetadata(projectRoot);
+  const properties = {
+    command: "analyze",
+    success: input.success,
+    durationMs: input.durationMs,
+    adoptionMode: metadata.adoptionMode ?? "contract-only",
+    componentCount: input.componentCount,
+    dependencyCategoryCount: input.dependencyCategoryCount,
+    errorCode: input.success ? void 0 : "analyze_failed",
+    pageCount: input.pageCount,
+    projectScope: metadata.projectScope ?? inferProjectScope(projectRoot),
+    routeCount: input.routeCount,
+    targetFramework: input.targetFramework,
+    workflowMode: metadata.workflowMode ?? "brownfield-attach"
+  };
+  await captureCliTelemetryEvent({
+    args: ["analyze"],
+    name: "decantr.analyze.completed",
+    projectRoot,
+    properties
+  });
+}
+async function sendNewProjectCompletedTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const args = input.args ?? ["new"];
+  const base = buildCliLifecycleProperties({
+    args,
+    command: "new",
+    durationMs: input.durationMs,
+    projectRoot,
+    success: input.success
+  });
+  const properties = {
+    ...base,
+    command: "new"
+  };
+  await captureCliTelemetryEvent({
+    args,
+    name: "decantr.new.completed",
+    projectRoot,
+    properties,
+    registrySource: properties.registrySource
+  });
+}
+async function sendProjectHealthPromptTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const finding = input.finding;
+  const properties = {
+    success: Boolean(finding),
+    findingFound: Boolean(finding),
+    adoptionMode: normalizeAdoptionMode(input.report.summary.adoptionMode),
+    ci: input.ci ?? false,
+    findingSeverity: normalizeFindingSeverity(finding?.severity),
+    findingSource: normalizeFindingSource(finding?.source),
+    projectScope: inferProjectScope(projectRoot),
+    workflowMode: normalizeWorkflowMode(input.report.summary.workflowMode)
+  };
+  await captureCliTelemetryEvent({
+    name: "health.finding.prompt_requested",
+    projectRoot,
+    properties
+  });
+}
+async function sendProjectHealthCiFailedTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const properties = {
+    ...buildProjectHealthTelemetryProperties(input, projectRoot),
+    errorCode: "project_health_ci_failed",
+    failOn: input.failOn,
+    success: false
+  };
+  await captureCliTelemetryEvent({
+    name: "health.ci.failed",
+    projectRoot,
+    properties
+  });
+}
+async function sendStudioStartedTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const metadata = readProjectTelemetryMetadata(projectRoot);
+  const properties = {
+    success: true,
+    hostMode: isLoopbackHost(input.host) ? "loopback" : "custom",
+    port: input.port,
+    adoptionMode: metadata.adoptionMode,
+    projectScope: inferProjectScope(projectRoot),
+    workflowMode: metadata.workflowMode
+  };
+  await captureCliTelemetryEvent({
+    name: "studio.started",
+    projectRoot,
+    properties
+  });
+}
+async function sendStudioHealthRefreshedTelemetry(input) {
+  const projectRoot = input.projectRoot ?? process.cwd();
+  const properties = {
+    ...buildProjectHealthTelemetryProperties(input, projectRoot),
+    trigger: input.trigger ?? "api-refresh"
+  };
+  await captureCliTelemetryEvent({
+    name: "studio.health_refreshed",
+    projectRoot,
+    properties
+  });
+}
+function buildCliLifecycleProperties(input) {
+  const metadata = readProjectTelemetryMetadata(input.projectRoot);
+  const registrySource = inferRegistrySource(input.args);
+  return {
+    command: input.command,
+    success: input.success,
+    durationMs: input.durationMs,
+    adoptionMode: inferAdoptionMode(input.args) ?? metadata.adoptionMode,
+    errorCode: input.success ? void 0 : "cli_command_failed",
+    offline: input.args.includes("--offline"),
+    projectScope: metadata.projectScope ?? inferProjectScope(input.projectRoot),
+    registrySource,
+    targetFramework: inferFlagValue(input.args, "--target"),
+    workflowMode: inferWorkflowMode(input.args) ?? metadata.workflowMode
+  };
+}
+function lifecycleTelemetryEventName(command) {
+  if (command === "check") return "decantr.check.completed";
+  if (command === "init") return "decantr.init.completed";
+  if (command === "refresh") return "decantr.refresh.completed";
+  return null;
+}
+function buildProjectHealthTelemetryProperties(input, projectRoot) {
+  const { report } = input;
+  return {
+    success: true,
+    status: report.status,
+    score: report.score,
+    durationMs: input.durationMs,
+    adoptionMode: normalizeAdoptionMode(report.summary.adoptionMode),
+    ci: input.ci ?? false,
+    errorCount: report.summary.errorCount,
+    failOn: input.failOn,
+    findingCount: report.summary.findingCount,
+    format: input.format,
+    infoCount: report.summary.infoCount,
+    outputWritten: input.outputWritten ?? false,
+    packManifestPresent: report.summary.packManifestPresent,
+    pageCount: report.summary.pageCount,
+    projectScope: inferProjectScope(projectRoot),
+    reviewPackPresent: report.summary.reviewPackPresent,
+    routeCount: report.routes.declared.length,
+    runtimeAuditChecked: report.summary.runtimeAuditChecked,
+    runtimeMatchedCount: report.routes.runtimeMatched,
+    runtimePassed: report.summary.runtimePassed,
+    runtimeRouteCheckedCount: report.routes.runtimeChecked.length,
+    warnCount: report.summary.warnCount,
+    workflowMode: normalizeWorkflowMode(report.summary.workflowMode)
+  };
+}
+function collectMetrics(essence, issues) {
+  const dna = essence.dna ?? {};
+  const blueprint = essence.blueprint ?? {};
+  const meta = essence.meta ?? {};
+  const guard = meta.guard ?? {};
+  const theme = dna.theme ?? {};
+  const sections = blueprint.sections ?? [];
+  const routes = blueprint.routes ?? {};
+  const byRule = {};
+  let dnaCount = 0;
+  let blueprintCount = 0;
+  for (const issue of issues) {
+    byRule[issue.rule] = (byRule[issue.rule] ?? 0) + 1;
+    if (DNA_RULES.has(issue.rule)) {
+      dnaCount++;
+    } else {
+      blueprintCount++;
     }
   }
-  const layoutPaths = [
-    "src/app/layout.tsx",
-    "app/layout.tsx",
-    "src/app/layout.jsx",
-    "app/layout.jsx"
-  ];
-  for (const rel of layoutPaths) {
-    const fullPath = join7(projectRoot, rel);
-    if (existsSync7(fullPath)) {
-      try {
-        const layoutContent = readFileSync7(fullPath, "utf-8");
-        if (layoutContent.includes('className="dark"') || layoutContent.includes("className='dark'") || layoutContent.includes('class="dark"')) {
-          return true;
-        }
-      } catch {
-      }
-    }
+  return {
+    timestamp: (/* @__PURE__ */ new Date()).toISOString(),
+    cli_version: getCliVersion(),
+    essence_version: essence.version ?? "unknown",
+    guard_mode: guard.mode ?? "unknown",
+    violations: {
+      dna: dnaCount,
+      blueprint: blueprintCount,
+      by_rule: byRule
+    },
+    resolution_rate: 0,
+    sections_count: sections.length,
+    routes_count: Object.keys(routes).length,
+    theme: theme.id ?? "unknown"
+  };
+}
+function getCliTelemetryIdentityStatus(projectRoot, options = {}) {
+  const projectJsonPath = join9(projectRoot, ".decantr", "project.json");
+  const hasProjectConfig = existsSync9(projectJsonPath);
+  const identities = options.create ? ensureTelemetryIdentities(projectRoot) : null;
+  const projectData = readProjectJson2(projectRoot);
+  return {
+    enabled: projectData?.telemetry === true,
+    hasProjectConfig,
+    installId: identities?.installId ?? readExistingInstallId(),
+    projectId: identities?.projectId ?? readStringProperty(projectData, "telemetryProjectId"),
+    projectRoot
+  };
+}
+function ensureTelemetryIdentities(projectRoot) {
+  const installId = getOrCreateInstallId();
+  const projectJsonPath = join9(projectRoot, ".decantr", "project.json");
+  if (!existsSync9(projectJsonPath)) {
+    return null;
   }
-  const pkgPath = join7(projectRoot, "package.json");
-  if (existsSync7(pkgPath)) {
-    try {
-      const pkg = JSON.parse(readFileSync7(pkgPath, "utf-8"));
-      const allDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-      if (allDeps["next-themes"] || allDeps["theme-toggle"] || allDeps["use-dark-mode"]) {
-        return true;
-      }
-    } catch {
+  try {
+    const data = JSON.parse(readFileSync9(projectJsonPath, "utf-8"));
+    let projectId = typeof data.telemetryProjectId === "string" ? data.telemetryProjectId : void 0;
+    if (!projectId) {
+      projectId = `project_${randomUUID()}`;
+      data.telemetryProjectId = projectId;
+      writeFileSync2(projectJsonPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
     }
+    return { installId, projectId };
+  } catch {
+    return null;
   }
-  const essencePath = join7(projectRoot, "decantr.essence.json");
-  if (existsSync7(essencePath)) {
-    try {
-      const essence = JSON.parse(readFileSync7(essencePath, "utf-8"));
-      const mode = essence.dna?.theme?.mode;
-      if (mode === "dark" || mode === "auto") {
-        return true;
+}
+function getOrCreateInstallId() {
+  const configDir = getConfigDir();
+  const configPath = join9(configDir, "config.json");
+  try {
+    if (existsSync9(configPath)) {
+      const data = JSON.parse(readFileSync9(configPath, "utf-8"));
+      if (typeof data.telemetryInstallId === "string") {
+        return data.telemetryInstallId;
       }
-    } catch {
+      const installId2 = `install_${randomUUID()}`;
+      data.telemetryInstallId = installId2;
+      writeFileSync2(configPath, JSON.stringify(data, null, 2) + "\n", "utf-8");
+      return installId2;
     }
+    mkdirSync(configDir, { recursive: true });
+    const installId = `install_${randomUUID()}`;
+    writeFileSync2(
+      configPath,
+      JSON.stringify({ telemetryInstallId: installId }, null, 2) + "\n",
+      "utf-8"
+    );
+    return installId;
+  } catch {
+    return `install_${randomUUID()}`;
   }
-  return false;
 }
-function scanStyling(projectRoot) {
-  let approach = "unknown";
-  let configFile;
-  let packageDeps = {};
-  const pkgPath = join7(projectRoot, "package.json");
-  if (existsSync7(pkgPath)) {
-    try {
-      const pkg = JSON.parse(readFileSync7(pkgPath, "utf-8"));
-      packageDeps = { ...pkg.dependencies, ...pkg.devDependencies };
-    } catch {
-      packageDeps = {};
-    }
+function readExistingInstallId() {
+  const configPath = join9(getConfigDir(), "config.json");
+  if (!existsSync9(configPath)) return void 0;
+  try {
+    const data = JSON.parse(readFileSync9(configPath, "utf-8"));
+    return readStringProperty(data, "telemetryInstallId");
+  } catch {
+    return void 0;
   }
-  for (const cfg of TAILWIND_CONFIGS) {
-    if (existsSync7(join7(projectRoot, cfg))) {
-      approach = "tailwind";
-      configFile = cfg;
-      break;
-    }
+}
+function getConfigDir() {
+  return process.env.DECANTR_CONFIG_DIR || join9(homedir(), ".config", "decantr");
+}
+function getTelemetryEventsEndpoint() {
+  return process.env.DECANTR_TELEMETRY_ENDPOINT || DEFAULT_TELEMETRY_EVENTS_ENDPOINT;
+}
+function getTelemetryActorType() {
+  const configured = process.env.DECANTR_TELEMETRY_ACTOR_TYPE;
+  return isTelemetryActorType(configured) ? configured : "customer";
+}
+function getRegistrySourceProperty(properties) {
+  const value = properties.registrySource;
+  return isRegistrySource(value) ? value : void 0;
+}
+function readProjectTelemetryMetadata(projectRoot) {
+  const data = readProjectJson2(projectRoot);
+  const initialized = isRecord(data?.initialized) ? data.initialized : void 0;
+  return {
+    adoptionMode: normalizeAdoptionMode(initialized?.adoptionMode),
+    projectScope: normalizeProjectScope(initialized?.projectScope),
+    workflowMode: normalizeWorkflowMode(initialized?.workflowMode)
+  };
+}
+function resolveCliTelemetryProjectRoot(projectRoot, args) {
+  const projectFlag = inferFlagValue(args, "--project");
+  if (!projectFlag) return projectRoot;
+  const candidate = resolve(projectRoot, projectFlag);
+  return existsSync9(join9(candidate, ".decantr", "project.json")) ? candidate : projectRoot;
+}
+function readProjectJson2(projectRoot) {
+  const projectJsonPath = join9(projectRoot, ".decantr", "project.json");
+  if (!existsSync9(projectJsonPath)) return null;
+  try {
+    return JSON.parse(readFileSync9(projectJsonPath, "utf-8"));
+  } catch {
+    return null;
   }
-  if (approach === "unknown") {
-    if (packageDeps["@decantr/css"]) {
-      approach = "decantr-css";
-      configFile = "src/styles/tokens.css";
-    }
-    if (packageDeps.tailwindcss || packageDeps["@tailwindcss/postcss"] || packageDeps["@tailwindcss/vite"]) {
-      approach = "tailwind";
-      configFile = configFile ?? "package.json";
-    }
+}
+function readStringProperty(value, key) {
+  const property = value?.[key];
+  return typeof property === "string" && property.trim() ? property : void 0;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function normalizeCommand(command) {
+  if (!command) return null;
+  if (command === "--help" || command === "-h") return "help";
+  if (command === "--version" || command === "-v") return "version";
+  return command;
+}
+function isHelpOrVersionProbe(args) {
+  if (args.some((arg) => arg === "--help" || arg === "-h")) return true;
+  if (args[1] === "help") return true;
+  return false;
+}
+function inferFlagValue(args, flag) {
+  const equalsPrefix = `${flag}=`;
+  const inline = args.find((arg) => arg.startsWith(equalsPrefix));
+  if (inline) {
+    return inline.slice(equalsPrefix.length) || void 0;
   }
-  if (approach === "unknown") {
-    if (packageDeps.bootstrap || packageDeps["react-bootstrap"]) {
-      approach = "bootstrap";
-      configFile = "package.json";
-    } else if (packageDeps["@mui/material"] || packageDeps["@mui/system"] || packageDeps["@mui/joy"]) {
-      approach = "mui";
-      configFile = "package.json";
-    } else if (packageDeps["@chakra-ui/react"] || packageDeps["@chakra-ui/vue-next"] || packageDeps["@chakra-ui/system"]) {
-      approach = "chakra";
-      configFile = "package.json";
-    }
+  const index = args.indexOf(flag);
+  if (index !== -1 && args[index + 1] && !args[index + 1].startsWith("-")) {
+    return args[index + 1];
   }
-  const decantrStyleFiles = DECANTR_STYLE_PATHS.filter((rel) => existsSync7(join7(projectRoot, rel)));
-  if (decantrStyleFiles.length >= 2) {
-    approach = "decantr-css";
-    configFile = decantrStyleFiles.join(" + ");
+  return void 0;
+}
+function inferAdoptionMode(args) {
+  const value = inferFlagValue(args, "--adoption");
+  return normalizeAdoptionMode(value);
+}
+function inferWorkflowMode(args) {
+  const value = inferFlagValue(args, "--workflow");
+  return normalizeWorkflowMode(value);
+}
+function normalizeAdoptionMode(value) {
+  if (value === "contract-only" || value === "decantr-css" || value === "style-bridge") {
+    return value;
   }
-  const cssContents = [];
-  for (const rel of GLOBALS_CSS_PATHS) {
-    const fullPath = join7(projectRoot, rel);
-    if (existsSync7(fullPath)) {
-      try {
-        cssContents.push(readFileSync7(fullPath, "utf-8"));
-      } catch {
-      }
-    }
+  return void 0;
+}
+function normalizeWorkflowMode(value) {
+  if (value === "greenfield" || value === "greenfield-scaffold") {
+    return "greenfield-scaffold";
   }
-  for (const rel of DECANTR_STYLE_PATHS) {
-    if (GLOBALS_CSS_PATHS.includes(rel)) continue;
-    const fullPath = join7(projectRoot, rel);
-    if (existsSync7(fullPath)) {
-      try {
-        cssContents.push(readFileSync7(fullPath, "utf-8"));
-      } catch {
-      }
-    }
+  if (value === "contract" || value === "greenfield-contract-only") {
+    return "greenfield-contract-only";
   }
-  let colors = {};
-  let cssVariables = [];
-  for (const cssContent of cssContents) {
-    const extracted = extractCSSVariables(cssContent);
-    colors = { ...colors, ...extracted.colors };
-    cssVariables.push(...extracted.variables);
+  if (value === "brownfield" || value === "brownfield-attach") {
+    return "brownfield-attach";
   }
-  cssVariables = [...new Set(cssVariables)];
-  const darkMode = detectDarkMode(projectRoot, cssContents);
-  if (approach === "unknown" && cssContents.length > 0) {
-    approach = "css";
-    configFile = GLOBALS_CSS_PATHS.find((rel) => existsSync7(join7(projectRoot, rel)));
+  if (value === "hybrid" || value === "hybrid-compose") {
+    return "hybrid-compose";
   }
-  return {
-    approach,
-    configFile,
-    colors,
-    darkMode,
-    cssVariables
-  };
+  return void 0;
 }
-
-// src/doctrine-map.ts
-import { existsSync as existsSync8, readFileSync as readFileSync8, writeFileSync as writeFileSync2 } from "fs";
-import { join as join8 } from "path";
-var PRECEDENCE_ORDER = [
-  "security-data",
-  "architecture",
-  "design-system",
-  "workflow-ci",
-  "feature-business",
-  "assistant-specific",
-  "stale-or-historical",
-  "unknown"
-];
-var BASE_PRECEDENCE = {
-  "security-data": 100,
-  architecture: 88,
-  "design-system": 82,
-  "workflow-ci": 74,
-  "feature-business": 66,
-  "assistant-specific": 58,
-  "stale-or-historical": 24,
-  unknown: 12
-};
-function normalized(path) {
-  return path.toLowerCase();
+function normalizeProjectScope(value) {
+  if (value === "single-app" || value === "workspace-app") return value;
+  return void 0;
 }
-function isStalePath(path, staleRisks) {
-  const lower = normalized(path);
-  if (/complete|summary|legacy|deprecated/.test(lower)) return true;
-  return staleRisks.some((risk) => risk.toLowerCase().startsWith(lower));
+function normalizeFindingSeverity(value) {
+  if (value === "error" || value === "info" || value === "warn") return value;
+  return void 0;
 }
-function inferArea(item) {
-  const lower = normalized(item.path);
-  if (lower.includes("security") || lower.includes("auth") || lower.includes("rls") || lower.includes("schema") || lower.includes("database") || lower.includes("data-layer") || lower.includes("middleware") || lower.startsWith("supabase/") || lower.startsWith("migrations/") || lower.startsWith("rolemigrations/")) {
-    return "security-data";
-  }
-  if (lower.includes("design-system") || lower.includes("ui-components") || lower.includes("colors") || lower.includes("typography") || lower.includes("spacing") || lower.includes("components.json") || lower.includes("tailwind.config")) {
-    return "design-system";
+function normalizeFindingSource(value) {
+  if (value === "audit" || value === "brownfield" || value === "check" || value === "interaction" || value === "pack" || value === "runtime") {
+    return value;
   }
-  if (lower.includes("architecture") || lower.includes("state-management") || lower.includes("setup") || lower.includes("readme") || lower.endsWith("config.ts") || lower.endsWith("config.js") || lower.endsWith("config.mjs")) {
-    return "architecture";
+  return void 0;
+}
+function inferRegistrySource(args) {
+  if (args.includes("--offline")) {
+    return "cache";
   }
-  if (lower.includes("workflow") || lower.includes("deployment") || lower.includes("quality") || lower.includes("testing") || lower.includes("vitest") || lower.includes("playwright") || lower.startsWith(".github/workflows/")) {
-    return "workflow-ci";
+  if (args.some((arg) => arg === "--registry" || arg.startsWith("--registry="))) {
+    return "custom";
   }
-  return item.role;
+  return "official";
 }
-function precedenceFor(item, area, staleRisks) {
-  let score = BASE_PRECEDENCE[area];
-  const lower = normalized(item.path);
-  if (lower.startsWith(".claude/rules/") || lower.startsWith(".cursor/rules/")) score += 6;
-  if (lower === "claude.md" || lower === "agents.md" || lower === "copilot-instructions.md") {
-    score += 3;
-  }
-  if (item.type === "directory") score -= 8;
-  if (isStalePath(item.path, staleRisks)) score -= 35;
-  if (!item.safeToCite) score -= 20;
-  return Math.max(0, Math.min(100, score));
+function isRegistrySource(value) {
+  return value === "cache" || value === "custom" || value === "none" || value === "official" || value === "private";
 }
-function summarize2(sources) {
-  const summary = Object.fromEntries(PRECEDENCE_ORDER.map((area) => [area, 0]));
-  for (const source of sources) summary[source.area] += 1;
-  return summary;
+function inferProjectScope(projectRoot) {
+  return existsSync9(join9(projectRoot, "pnpm-workspace.yaml")) || existsSync9(join9(projectRoot, "turbo.json")) || existsSync9(join9(projectRoot, "lerna.json")) ? "workspace-app" : "single-app";
 }
-function topSources(sources, areas, limit = 5) {
-  return sources.filter((source) => source.currency === "current" && areas.includes(source.area)).slice(0, limit).map((source) => source.path);
+function getCliVersion() {
+  try {
+    const here = dirname2(fileURLToPath2(import.meta.url));
+    const candidates = [join9(here, "..", "package.json"), join9(here, "..", "..", "package.json")];
+    for (const candidate of candidates) {
+      if (existsSync9(candidate)) {
+        const pkg = JSON.parse(readFileSync9(candidate, "utf-8"));
+        if (pkg.version) {
+          return pkg.version;
+        }
+      }
+    }
+  } catch {
+  }
+  return "unknown";
 }
-function buildResolutions(conflicts, staleRisks, sources) {
-  const resolutions = [];
-  for (const conflict of conflicts) {
-    const lower = conflict.toLowerCase();
-    if (lower.includes("framework")) {
-      resolutions.push({
-        kind: "conflict",
-        issue: conflict,
-        recommendation: "Prefer package/config detection and current architecture sources over stale docs or assistant memory when deciding framework/runtime conventions.",
-        preferredSources: topSources(sources, ["architecture", "workflow-ci"]),
-        confidence: 0.78
+function isLoopbackHost(host) {
+  return host === "127.0.0.1" || host === "localhost" || host === "::1";
+}
+
+// src/commands/heal.ts
+var GREEN = "\x1B[32m";
+var RED = "\x1B[31m";
+var YELLOW = "\x1B[33m";
+var CYAN = "\x1B[36m";
+var RESET = "\x1B[0m";
+var DIM = "\x1B[2m";
+function collectCheckIssues(projectRoot = process.cwd(), options = {}) {
+  const essencePath = join10(projectRoot, "decantr.essence.json");
+  if (!existsSync10(essencePath)) {
+    return {
+      essence: null,
+      issues: [
+        {
+          type: "error",
+          rule: "essence-missing",
+          message: "No decantr.essence.json found. Run `decantr init` first."
+        }
+      ],
+      missingEssence: true
+    };
+  }
+  const essence = JSON.parse(readFileSync10(essencePath, "utf-8"));
+  const issues = [];
+  const validation = validateEssence(essence);
+  if (!validation.valid) {
+    for (const err of validation.errors) {
+      issues.push({
+        type: "error",
+        rule: "schema",
+        message: err
       });
-      continue;
     }
-    if (lower.includes("tailwind")) {
-      resolutions.push({
-        kind: "conflict",
-        issue: conflict,
-        recommendation: "Preserve the existing styling system until the user approves migration; treat current design-system docs and Tailwind/shadcn config as the styling authority.",
-        preferredSources: topSources(sources, ["design-system", "architecture"]),
-        confidence: 0.82
+    return { essence, issues, missingEssence: false };
+  }
+  let interactionIssues = [];
+  try {
+    interactionIssues = scanProjectInteractions(projectRoot);
+  } catch {
+  }
+  try {
+    const guardContext = buildGuardRegistryContext(projectRoot);
+    const violations = evaluateGuard(essence, {
+      ...guardContext,
+      interaction_issues: interactionIssues
+    });
+    for (const v of violations) {
+      issues.push({
+        type: v.severity === "error" ? "error" : "warning",
+        rule: v.rule,
+        message: v.message,
+        suggestion: v.suggestion
       });
-      continue;
     }
-    if (lower.includes("client") && lower.includes("server")) {
-      resolutions.push({
-        kind: "conflict",
-        issue: conflict,
-        recommendation: "Prefer current framework architecture and security/data boundaries; stop and ask for review before moving client/server responsibilities.",
-        preferredSources: topSources(sources, ["architecture", "security-data"]),
-        confidence: 0.76
+  } catch {
+  }
+  if (options.brownfield) {
+    try {
+      if (isV4(essence)) {
+        const brownfieldIssues = scanBrownfieldIssues(projectRoot, essence);
+        issues.push(...brownfieldIssues);
+      } else {
+        issues.push({
+          type: "warning",
+          rule: "brownfield-check",
+          message: "Brownfield checks require an Essence v4.0.0 Decantr contract."
+        });
+      }
+    } catch (e) {
+      issues.push({
+        type: "warning",
+        rule: "brownfield-check",
+        message: `Brownfield check could not complete: ${e.message}`
       });
-      continue;
     }
-    resolutions.push({
-      kind: "conflict",
-      issue: conflict,
-      recommendation: "Use the highest-precedence current sources in the doctrine map and report the conflict before enforcing either side.",
-      preferredSources: sources.filter((source) => source.currency === "current").slice(0, 5).map((source) => source.path),
-      confidence: 0.62
-    });
   }
-  if (staleRisks.length > 0) {
-    resolutions.push({
-      kind: "stale-risk",
-      issue: `${staleRisks.length} stale or historical source(s) detected.`,
-      recommendation: "Treat stale-risk sources as historical evidence until confirmed by current security/data, architecture, design-system, workflow, or feature doctrine.",
-      preferredSources: sources.filter((source) => source.currency === "current" && source.area !== "assistant-specific").slice(0, 5).map((source) => source.path),
-      confidence: 0.84
-    });
-  }
-  return resolutions;
-}
-function createDoctrineMap(ambient) {
-  const sources = ambient.items.map((item) => {
-    const area = inferArea(item);
-    const stale = isStalePath(item.path, ambient.staleRisks);
-    return {
-      path: item.path,
-      type: item.type,
-      area: stale ? "stale-or-historical" : area,
-      originalRole: item.role,
-      precedence: precedenceFor(item, area, ambient.staleRisks),
-      confidence: item.confidence,
-      currency: !item.safeToCite ? "unsafe-to-cite" : stale ? "stale-risk" : "current",
-      safeToCite: item.safeToCite,
-      rationale: item.reason
-    };
-  }).sort((a, b) => b.precedence - a.precedence || a.path.localeCompare(b.path));
-  return {
-    version: 1,
-    generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    precedenceOrder: PRECEDENCE_ORDER,
-    sources,
-    summary: summarize2(sources),
-    conflicts: ambient.conflicts,
-    staleRisks: ambient.staleRisks,
-    resolutions: buildResolutions(ambient.conflicts, ambient.staleRisks, sources),
-    guidance: [
-      "Treat security/data doctrine as highest precedence for implementation safety.",
-      "Treat architecture and design-system sources as product conventions, not Decantr defaults.",
-      "Treat workflow/CI sources as validation evidence for commands and release gates.",
-      "Treat stale-risk sources as historical evidence until a current source confirms them.",
-      "Do not cite unsafe sources directly in assistant context."
-    ]
-  };
+  return { essence, issues, missingEssence: false };
 }
-function doctrineMapPath(projectRoot) {
-  return join8(projectRoot, ".decantr", "doctrine-map.json");
-}
-function writeDoctrineMap(projectRoot, doctrine) {
-  writeFileSync2(doctrineMapPath(projectRoot), JSON.stringify(doctrine, null, 2) + "\n", "utf-8");
+async function cmdHeal(projectRoot = process.cwd(), options = {}) {
+  const result = collectCheckIssues(projectRoot, options);
+  console.log("Scanning for issues...\n");
+  if (result.missingEssence) {
+    console.error(result.issues[0]?.message ?? "No decantr.essence.json found.");
+    process.exitCode = 1;
+    return;
+  }
+  const issues = result.issues;
+  const essence = result.essence ?? {};
+  if (issues.length === 0) {
+    console.log(`${GREEN}No issues found. Project is healthy.${RESET}`);
+    await maybeSendTelemetry(projectRoot, essence, issues, options);
+    return;
+  }
+  console.log(`Found ${issues.length} issue(s):
+`);
+  for (const issue of issues) {
+    const icon = issue.type === "error" ? `${RED}x${RESET}` : `${YELLOW}!${RESET}`;
+    console.log(`${icon} [${issue.rule}] ${issue.message}`);
+    if (issue.suggestion) {
+      console.log(`  ${DIM}Suggestion: ${issue.suggestion}${RESET}`);
+    }
+  }
+  console.log(`
+${YELLOW}Manual fixes required. Review the issues above.${RESET}`);
+  const hasError = issues.some((i) => i.type === "error");
+  if (hasError) {
+    process.exitCode = 1;
+  }
+  await maybeSendTelemetry(projectRoot, essence, issues, options);
 }
-function readDoctrineMap(projectRoot) {
-  const path = doctrineMapPath(projectRoot);
-  if (!existsSync8(path)) return null;
-  try {
-    const parsed = JSON.parse(readFileSync8(path, "utf-8"));
-    if (parsed.version !== 1 || !Array.isArray(parsed.sources)) return null;
-    return parsed;
-  } catch {
-    return null;
+async function maybeSendTelemetry(projectRoot, essence, issues, options) {
+  if (options.telemetry && !isOptedIn(projectRoot)) {
+    optIn(projectRoot);
+    console.log(
+      `
+${CYAN}Telemetry enabled.${RESET} Decantr will send privacy-filtered CLI product telemetry for this project.`
+    );
+    console.log(`${DIM}Set "telemetry": false in .decantr/project.json to opt out.${RESET}`);
+  }
+  if (isOptedIn(projectRoot)) {
+    const metrics = collectMetrics(essence, issues);
+    sendGuardMetrics(metrics);
   }
 }
 
@@ -1762,8 +2079,6 @@ export {
   scanStyling,
   createDoctrineMap,
   writeDoctrineMap,
-  readDoctrineMap,
-  sendGuardMetrics,
   isOptedIn,
   optIn,
   sendCliCommandTelemetry,
@@ -1774,8 +2089,9 @@ export {
   sendProjectHealthCiFailedTelemetry,
   sendStudioStartedTelemetry,
   sendStudioHealthRefreshedTelemetry,
-  collectMetrics,
   getCliTelemetryIdentityStatus,
   buildGuardRegistryContext,
-  scanProjectInteractions
+  scanProjectInteractions,
+  collectCheckIssues,
+  cmdHeal
 };