@decantr/cli 2.9.6 → 2.9.8

package/README.md

@@ -17,7 +17,7 @@ Or run it without installing:
 npx @decantr/cli new my-app --blueprint=esports-hq
 ```
 
-Use `decantr setup` when you are unsure which path applies. It detects whether the repo is empty, already attached, or a Brownfield app and recommends the next command.
+Use `decantr setup` when you are unsure which path applies. It detects whether the repo is empty, already attached, or a Brownfield app and recommends the right entry path.
 Use `decantr new` for a greenfield workspace in a fresh directory. With a blueprint/archetype it uses the runnable adapter and Decantr CSS; without registry content it creates a contract-only workspace unless you explicitly pass `--adoption=decantr-css`.
 Use `decantr adopt` when you already have an app and want Decantr governance without adopting a blueprint. Brownfield attach is proposal-driven: Decantr inventories the app, writes an observed essence proposal, hydrates hosted execution packs when online, and only applies the contract when you explicitly accept or merge it.
 Use `decantr doctor` when the next step is unclear, `decantr task` before asking an LLM to modify a route, `decantr verify` after the edit, and `decantr ci` in required automation. Use `decantr codify --from-audit` when you want project-owned UI patterns and local rules such as button/card/shell/theme standards to appear in future task context and verification.
@@ -96,6 +96,12 @@ Brownfield analysis also writes `.decantr/doctrine-map.json`, a ranked source-pr
 - syncs paginated hosted registry content into a full slug-keyed local cache for offline guards and context generation
 - validates, refreshes, and maintains `decantr.essence.json`
 
+## Security And Permissions
+
+The CLI is intentionally a local project inspector and artifact writer. It reads selected project/workspace files, package manifests, routing/style/config files, `.decantr` artifacts, and Decantr cache/config files. It writes `decantr.essence.json`, `DECANTR.md`, `.decantr/*`, generated context packs, optional CI workflows/snippets, optional style/export files, and auth/telemetry config only when explicitly requested.
+
+Telemetry is disabled by default. Hosted registry, hosted pack hydration, hosted critique/audit, and browser evidence are explicit command paths; screenshots and Evidence Bundles stay local unless a hosted workflow is invoked. Release audits prove the installed package with `npm pack --dry-run --json`. See [security permissions](https://decantr.ai/reference/security-permissions.md).
+
 ## Common Commands
 
 ```bash
@@ -136,11 +142,15 @@ decantr list patterns
 decantr showcase verification --json
 ```
 
+`suggest --from-code` uses the selected app's source file to rank both hosted registry patterns and accepted project-owned local patterns, so Brownfield button/card/form law can surface from real code instead of just the text query.
+
 ## Project Health And Studio
 
 `decantr verify` is the workflow command most users should run locally after edits. It delegates to Project Health, can add Brownfield guard validation with `--brownfield`, requires an accepted local pattern pack with `--local-patterns`, scans `.decantr/rules.json` when present, supports workspace mode, and writes evidence to `.decantr/evidence/latest.json` by default when `--evidence` is used.
 
-`decantr doctor` explains project/workspace state, adoption mode, generated artifacts, local law, visual evidence, design authority signals, CI wiring, and the next command to run. It is the command to reach for when an app is in a monorepo, has stale Decantr files, or someone is not sure what Decantr expects next.
+`decantr doctor` explains project/workspace state, adoption mode, generated artifacts, local law, visual evidence, design authority signals, CI wiring, and an ordered next-step queue. It is the command to reach for when an app is in a monorepo, has stale Decantr files, or someone is not sure what Decantr expects next.
+
+`decantr setup` is non-mutating orientation. In an attached Brownfield app it reflects whether local law is already accepted, so the recommended verify command includes `--local-patterns` only when the project has that layer.
 
 `decantr ci` is the blessed non-mutating automation gate. It runs the Project Health surface with adoption-mode-aware local law checks and emits a schema-backed CI report. `decantr ci init` writes root GitHub workflows or portable generic snippets using the detected package manager and pinned local CLI command instead of `@latest`; if the root manifest has not pinned Decantr yet, it prints the exact install command first.
 

package/dist/bin.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import "./chunk-32H5SFKV.js";
-import "./chunk-RXF7ZYGK.js";
-import "./chunk-VCUFZB45.js";
-import "./chunk-FACL3NXU.js";
-import "./chunk-WONPNSSI.js";
+import "./chunk-JSILTE5V.js";
+import "./chunk-IQZCIMQJ.js";
+import "./chunk-QDMXZSVK.js";
+import "./chunk-WPP3JEMC.js";
+import "./chunk-4SZ4SEKT.js";

package/dist/{chunk-WONPNSSI.js → chunk-4SZ4SEKT.js}

@@ -1971,6 +1971,16 @@ var YELLOW = "\x1B[33m";
 var CYAN = "\x1B[36m";
 var RESET = "\x1B[0m";
 var DIM = "\x1B[2m";
+function isContractOnlyProject(projectRoot) {
+  const metadataPath = join10(projectRoot, ".decantr", "project.json");
+  if (!existsSync10(metadataPath)) return false;
+  try {
+    const metadata = JSON.parse(readFileSync10(metadataPath, "utf-8"));
+    return metadata.initialized?.adoptionMode === "contract-only";
+  } catch {
+    return false;
+  }
+}
 function collectCheckIssues(projectRoot = process.cwd(), options = {}) {
   const essencePath = join10(projectRoot, "decantr.essence.json");
   if (!existsSync10(essencePath)) {
@@ -2000,9 +2010,11 @@ function collectCheckIssues(projectRoot = process.cwd(), options = {}) {
     return { essence, issues, missingEssence: false };
   }
   let interactionIssues = [];
-  try {
-    interactionIssues = scanProjectInteractions(projectRoot);
-  } catch {
+  if (!isContractOnlyProject(projectRoot)) {
+    try {
+      interactionIssues = scanProjectInteractions(projectRoot);
+    } catch {
+    }
   }
   try {
     const guardContext = buildGuardRegistryContext(projectRoot);
@@ -2066,9 +2078,16 @@ async function cmdHeal(projectRoot = process.cwd(), options = {}) {
       console.log(`  ${DIM}Suggestion: ${issue.suggestion}${RESET}`);
     }
   }
-  console.log(`
-${YELLOW}Manual fixes required. Review the issues above.${RESET}`);
   const hasError = issues.some((i) => i.type === "error");
+  if (hasError) {
+    console.log(`
+${YELLOW}Manual fixes required. Review the issues above.${RESET}`);
+  } else {
+    console.log(
+      `
+${YELLOW}Warnings found. Review the issues above or set stricter gates in CI.${RESET}`
+    );
+  }
   if (hasError) {
     process.exitCode = 1;
   }

package/dist/{chunk-RXF7ZYGK.js → chunk-IQZCIMQJ.js}

@@ -277,7 +277,15 @@ async function syncRegistry(cacheDir, apiUrl = DEFAULT_API_URL) {
 }
 
 // src/scaffold.ts
-import { appendFileSync, existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "fs";
+import {
+  appendFileSync,
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  readdirSync as readdirSync2,
+  readFileSync as readFileSync2,
+  rmSync,
+  writeFileSync as writeFileSync2
+} from "fs";
 import { dirname, join as join2 } from "path";
 import { fileURLToPath } from "url";
 import { compileExecutionPackBundle } from "@decantr/core";
@@ -4504,6 +4512,24 @@ function writeExecutionPackArtifacts(basePathWithoutExtension, pack) {
   writeFileSync2(jsonPath, JSON.stringify(pack, null, 2) + "\n");
   return markdownPath;
 }
+function isManagedExecutionPackArtifact(fileName) {
+  return fileName === "pack-manifest.json" || /^(?:scaffold|review|section-.+-pack|page-.+-pack|mutation-.+-pack)\.(?:md|json)$/.test(
+    fileName
+  );
+}
+function removeObsoleteExecutionPackArtifacts(contextDir, writtenPaths) {
+  const expected = /* @__PURE__ */ new Set();
+  for (const path of writtenPaths) {
+    expected.add(path);
+    if (path.endsWith(".md")) expected.add(path.slice(0, -".md".length) + ".json");
+  }
+  for (const entry of readdirSync2(contextDir, { withFileTypes: true })) {
+    if (!entry.isFile()) continue;
+    if (!isManagedExecutionPackArtifact(entry.name)) continue;
+    const fullPath = join2(contextDir, entry.name);
+    if (!expected.has(fullPath)) rmSync(fullPath, { force: true });
+  }
+}
 function writeExecutionPackBundleArtifacts(contextDir, bundle) {
   mkdirSync2(contextDir, { recursive: true });
   const outputPaths = [];
@@ -4540,6 +4566,7 @@ function writeExecutionPackBundleArtifacts(contextDir, bundle) {
   const manifestPath = join2(contextDir, "pack-manifest.json");
   writeFileSync2(manifestPath, JSON.stringify(bundle.manifest, null, 2) + "\n");
   outputPaths.push(manifestPath);
+  removeObsoleteExecutionPackArtifacts(contextDir, outputPaths);
   return {
     paths: outputPaths,
     scaffoldPackPath,

package/dist/{chunk-32H5SFKV.js → chunk-JSILTE5V.js}

@@ -14,7 +14,7 @@ import {
   scaffoldProject,
   syncRegistry,
   writeExecutionPackBundleArtifacts
-} from "./chunk-RXF7ZYGK.js";
+} from "./chunk-IQZCIMQJ.js";
 import {
   createWorkspaceHealthReport,
   formatWorkspaceHealthMarkdown,
@@ -22,14 +22,14 @@ import {
   listWorkspaceCandidates,
   listWorkspaceProjects,
   shouldFailWorkspaceHealth
-} from "./chunk-VCUFZB45.js";
+} from "./chunk-QDMXZSVK.js";
 import {
   createProjectHealthReport,
   formatProjectHealthMarkdown,
   formatProjectHealthText,
   resolveWorkspaceInfo,
   shouldFailHealth
-} from "./chunk-FACL3NXU.js";
+} from "./chunk-WPP3JEMC.js";
 import {
   buildGuardRegistryContext,
   createDoctrineMap,
@@ -46,11 +46,11 @@ import {
   sendCliCommandTelemetry,
   sendNewProjectCompletedTelemetry,
   writeDoctrineMap
-} from "./chunk-WONPNSSI.js";
+} from "./chunk-4SZ4SEKT.js";
 
 // src/index.ts
 import { existsSync as existsSync29, mkdirSync as mkdirSync16, readdirSync as readdirSync9, readFileSync as readFileSync22, writeFileSync as writeFileSync19 } from "fs";
-import { basename as basename3, dirname as dirname5, isAbsolute as isAbsolute3, join as join31, relative as relative7, resolve as resolve4 } from "path";
+import { basename as basename3, dirname as dirname6, isAbsolute as isAbsolute3, join as join31, relative as relative7, resolve as resolve4 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { evaluateGuard, isV4 as isV49, validateEssence as validateEssence2 } from "@decantr/essence-spec";
 import {
@@ -2754,7 +2754,7 @@ function writeBrownfieldIntelligenceArtifacts(input) {
 
 // src/detect.ts
 import { existsSync as existsSync10, readFileSync as readFileSync9 } from "fs";
-import { join as join12 } from "path";
+import { dirname as dirname2, join as join12 } from "path";
 var RULE_FILES = [
   "CLAUDE.md",
   ".claude/rules",
@@ -2766,6 +2766,34 @@ var RULE_FILES = [
   ".github/copilot-instructions.md",
   ".windsurfrules"
 ];
+function readPackageJson(dir) {
+  const path = join12(dir, "package.json");
+  if (!existsSync10(path)) return null;
+  try {
+    return JSON.parse(readFileSync9(path, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function packageManagerFromName(name) {
+  if (name === "pnpm" || name === "yarn" || name === "bun" || name === "npm") return name;
+  return "unknown";
+}
+function detectPackageManager(projectRoot) {
+  let current = projectRoot;
+  while (true) {
+    const pkg = readPackageJson(current);
+    const declared = packageManagerFromName(pkg?.packageManager?.split("@")[0]);
+    if (declared !== "unknown") return declared;
+    if (existsSync10(join12(current, "pnpm-lock.yaml"))) return "pnpm";
+    if (existsSync10(join12(current, "yarn.lock"))) return "yarn";
+    if (existsSync10(join12(current, "bun.lockb"))) return "bun";
+    if (existsSync10(join12(current, "package-lock.json"))) return "npm";
+    const parent = dirname2(current);
+    if (parent === current) return "unknown";
+    current = parent;
+  }
+}
 function detectProject(projectRoot = process.cwd()) {
   const result = {
     framework: "unknown",
@@ -2782,15 +2810,7 @@ function detectProject(projectRoot = process.cwd()) {
       result.existingRuleFiles.push(ruleFile);
     }
   }
-  if (existsSync10(join12(projectRoot, "pnpm-lock.yaml"))) {
-    result.packageManager = "pnpm";
-  } else if (existsSync10(join12(projectRoot, "yarn.lock"))) {
-    result.packageManager = "yarn";
-  } else if (existsSync10(join12(projectRoot, "bun.lockb"))) {
-    result.packageManager = "bun";
-  } else if (existsSync10(join12(projectRoot, "package-lock.json"))) {
-    result.packageManager = "npm";
-  }
+  result.packageManager = detectPackageManager(projectRoot);
   result.hasTypeScript = existsSync10(join12(projectRoot, "tsconfig.json"));
   result.hasTailwind = existsSync10(join12(projectRoot, "tailwind.config.js")) || existsSync10(join12(projectRoot, "tailwind.config.ts")) || existsSync10(join12(projectRoot, "tailwind.config.mjs")) || existsSync10(join12(projectRoot, "tailwind.config.cjs"));
   if (existsSync10(join12(projectRoot, "next.config.js")) || existsSync10(join12(projectRoot, "next.config.ts")) || existsSync10(join12(projectRoot, "next.config.mjs"))) {
@@ -3005,7 +3025,8 @@ var RESET2 = "\x1B[0m";
 var GREEN2 = "\x1B[32m";
 var CYAN = "\x1B[36m";
 var YELLOW2 = "\x1B[33m";
-async function cmdAnalyze(projectRoot = process.cwd(), workspace) {
+async function cmdAnalyze(projectRoot = process.cwd(), workspace, options = {}) {
+  const printNextStep = options.printNextStep ?? true;
   const startedAt = Date.now();
   console.log(`
 ${BOLD}Analyzing project...${RESET2}
@@ -3170,11 +3191,13 @@ ${DIM2}Written to:${RESET2} ${outputPath}`);
   console.log(`${DIM2}Brownfield intelligence:${RESET2} ${intelligenceArtifacts.intelligencePath}`);
   console.log(`${DIM2}Theme inventory:${RESET2} ${intelligenceArtifacts.themeInventoryPath}`);
   console.log(`${DIM2}Enrichment backlog:${RESET2} ${intelligenceArtifacts.backlogPath}`);
-  console.log(
-    `
+  if (printNextStep) {
+    console.log(
+      `
 ${YELLOW2}Next step:${RESET2} Review ${BOLD}${reportDisplayPath}${RESET2}, then run ${BOLD}${recommendedAttachCommand}${RESET2} to attach Decantr using the observed proposal.
 `
-  );
+    );
+  }
   await sendAnalyzeCompletedTelemetry({
     componentCount: components.componentCount,
     dependencyCategoryCount: [
@@ -3195,7 +3218,7 @@ ${YELLOW2}Next step:${RESET2} Review ${BOLD}${reportDisplayPath}${RESET2}, then
 
 // src/commands/ci.ts
 import { existsSync as existsSync14, mkdirSync as mkdirSync9, readFileSync as readFileSync12, writeFileSync as writeFileSync10 } from "fs";
-import { dirname as dirname2, join as join16, relative as relative4, resolve } from "path";
+import { dirname as dirname3, join as join16, relative as relative4, resolve } from "path";
 
 // src/local-law.ts
 import { execFileSync } from "child_process";
@@ -3732,7 +3755,7 @@ function parseProvider(value) {
   if (value === "github" || value === "generic") return value;
   throw new Error("Invalid --provider value. Use github or generic.");
 }
-function detectPackageManager(root) {
+function detectPackageManager2(root) {
   const pkg = readJson(join16(root, "package.json"));
   const declared = pkg?.packageManager?.split("@")[0];
   if (declared === "pnpm" || declared === "npm" || declared === "yarn" || declared === "bun") {
@@ -3801,7 +3824,7 @@ function projectSlug(projectPath) {
 }
 function writeOutput(root, path, content) {
   const absolute = resolve(root, path);
-  mkdirSync9(dirname2(absolute), { recursive: true });
+  mkdirSync9(dirname3(absolute), { recursive: true });
   writeFileSync10(absolute, content, "utf-8");
 }
 function summarizeLocalLaw(projectRoot) {
@@ -3931,7 +3954,7 @@ function writeCiInit(root, options) {
   }
   const outputRoot = workspaceInfo.workspaceRoot;
   const projectPath = options.project ?? (options.workspace || workspaceInfo.appRoot === workspaceInfo.workspaceRoot ? void 0 : relative4(workspaceInfo.workspaceRoot, workspaceInfo.appRoot).replace(/\\/g, "/"));
-  const packageManager = detectPackageManager(outputRoot);
+  const packageManager = detectPackageManager2(outputRoot);
   const command = decantrCommand(packageManager);
   const failOn = options.failOn ?? "error";
   const provider = options.provider ?? "github";
@@ -4295,7 +4318,7 @@ function cmdCreate(type, name, projectRoot = process.cwd()) {
 
 // src/commands/doctor.ts
 import { existsSync as existsSync16, readdirSync as readdirSync6, readFileSync as readFileSync13 } from "fs";
-import { dirname as dirname3, join as join18, relative as relative5 } from "path";
+import { dirname as dirname4, join as join18, relative as relative5 } from "path";
 import { fileURLToPath } from "url";
 import { isV4 as isV44 } from "@decantr/essence-spec";
 import { collectMissingPackManifestFiles } from "@decantr/verifier";
@@ -4319,16 +4342,16 @@ function isContractOnlyProject(projectRoot) {
   return projectJson?.initialized?.adoptionMode === "contract-only";
 }
 function readCliPackageVersion() {
-  const packagePath = join18(dirname3(fileURLToPath(import.meta.url)), "..", "..", "package.json");
-  const srcPackagePath = join18(dirname3(fileURLToPath(import.meta.url)), "..", "package.json");
+  const packagePath = join18(dirname4(fileURLToPath(import.meta.url)), "..", "..", "package.json");
+  const srcPackagePath = join18(dirname4(fileURLToPath(import.meta.url)), "..", "package.json");
   const pkg = readJson2(packagePath) ?? readJson2(srcPackagePath);
   return pkg?.version ?? "unknown";
 }
-function readPackageJson(dir) {
+function readPackageJson2(dir) {
   return readJson2(join18(dir, "package.json"));
 }
-function detectPackageManager2(root) {
-  const pkg = readPackageJson(root);
+function detectPackageManager3(root) {
+  const pkg = readPackageJson2(root);
   const declared = pkg?.packageManager?.split("@")[0];
   if (declared === "pnpm" || declared === "npm" || declared === "yarn" || declared === "bun") {
     return declared;
@@ -4340,11 +4363,11 @@ function detectPackageManager2(root) {
   return "unknown";
 }
 function localCliDependency(root) {
-  const pkg = readPackageJson(root);
+  const pkg = readPackageJson2(root);
   return pkg?.devDependencies?.["@decantr/cli"] ?? pkg?.dependencies?.["@decantr/cli"] ?? null;
 }
 function hasWorkspaceMarker2(root) {
-  const pkg = readPackageJson(root);
+  const pkg = readPackageJson2(root);
   return Boolean(
     existsSync16(join18(root, "pnpm-workspace.yaml")) || existsSync16(join18(root, "turbo.json")) || existsSync16(join18(root, "nx.json")) || pkg?.workspaces
   );
@@ -4375,7 +4398,7 @@ function hasAnyFile(dir, names) {
   return null;
 }
 function packageHasDependency(dir, names) {
-  const pkg = readPackageJson(dir);
+  const pkg = readPackageJson2(dir);
   const deps = { ...pkg?.dependencies, ...pkg?.devDependencies };
   return names.some((name) => Boolean(deps[name]));
 }
@@ -4442,6 +4465,10 @@ function statusFromIssues(issues, essenceVersion) {
   }
   return "healthy";
 }
+function appendUnique(commands, command) {
+  if (!command) return;
+  if (!commands.includes(command)) commands.push(command);
+}
 function buildDoctorReport(root, args) {
   let projectArg;
   for (let index = 1; index < args.length; index += 1) {
@@ -4455,7 +4482,7 @@ function buildDoctorReport(root, args) {
   const appRoot = workspaceMode ? workspaceRoot : workspaceInfo.appRoot;
   const projectMissing = Boolean(projectArg && !existsSync16(appRoot));
   const projectPath = appRoot === workspaceRoot ? null : rel(workspaceRoot, appRoot);
-  const packageManager = detectPackageManager2(workspaceRoot);
+  const packageManager = detectPackageManager3(workspaceRoot);
   const cliDependency = localCliDependency(workspaceRoot);
   const detected = detectProject(appRoot);
   const projectJson = readJson2(join18(appRoot, ".decantr", "project.json"));
@@ -4475,6 +4502,8 @@ function buildDoctorReport(root, args) {
   const workflowMode = projectJson?.initialized?.workflowMode ?? null;
   const adoptionMode = projectJson?.initialized?.adoptionMode ?? null;
   const packHydrationOptional = adoptionMode === "contract-only";
+  const localPatternsPresent = existsSync16(localPatternsPath(appRoot));
+  const localRulesPresent = existsSync16(localRulesPath(appRoot));
   const missingPackReferences = workspaceMode ? projects.flatMap(
     (project) => collectMissingPackManifestFiles(join18(workspaceRoot, project.path)).map(
       (missing) => `${project.path}/${missing.relativePath}`
@@ -4567,7 +4596,7 @@ function buildDoctorReport(root, args) {
       nextCommand: "decantr registry compile-packs <app-path>/decantr.essence.json --write-context"
     });
   }
-  if (workflowMode === "brownfield-attach" && !existsSync16(localPatternsPath(appRoot))) {
+  if (workflowMode === "brownfield-attach" && !localPatternsPresent) {
     issues.push({
       category: "local-law",
       severity: "info",
@@ -4595,7 +4624,39 @@ function buildDoctorReport(root, args) {
     issues,
     workspaceMode || workspaceInfo.requiresProjectSelection ? "4.0.0" : essenceVersion
   );
-  const recommendedNextCommand = issues.find((issue) => issue.category === "workspace" && issue.nextCommand)?.nextCommand ?? issues.find((issue) => issue.nextCommand)?.nextCommand ?? (workspaceMode ? "decantr ci --workspace" : projectPath ? `decantr ci --project ${projectPath}` : "decantr ci");
+  const projectFlag = projectPath ? ` --project ${projectPath}` : "";
+  const verifyCommand = workflowMode === "brownfield-attach" ? `decantr verify --brownfield --local-patterns${projectFlag}` : workspaceMode ? "decantr ci --workspace" : `decantr verify${projectFlag}`;
+  const ciCommand = workspaceMode ? "decantr ci --workspace --fail-on error" : `decantr ci${projectFlag} --fail-on error`;
+  const recommendedNextCommands = [];
+  const blockingIssue = issues.find((issue) => issue.category === "workspace" && issue.nextCommand) ?? issues.find(
+    (issue) => (issue.category === "setup" || issue.category === "migration") && issue.nextCommand
+  );
+  if (blockingIssue) {
+    appendUnique(recommendedNextCommands, blockingIssue.nextCommand);
+  } else {
+    appendUnique(
+      recommendedNextCommands,
+      issues.find((issue) => issue.category === "ci" && issue.message.includes("not pinned"))?.nextCommand
+    );
+    if (workflowMode === "brownfield-attach" && !localPatternsPresent) {
+      appendUnique(recommendedNextCommands, `decantr codify --from-audit${projectFlag}`);
+      appendUnique(recommendedNextCommands, `decantr codify --accept${projectFlag}`);
+    }
+    appendUnique(
+      recommendedNextCommands,
+      issues.find((issue) => issue.category === "generated-artifact")?.nextCommand
+    );
+    appendUnique(
+      recommendedNextCommands,
+      issues.find((issue) => issue.category === "ci" && issue.message.includes("No Decantr CI"))?.nextCommand
+    );
+    if (workflowMode === "brownfield-attach") {
+      appendUnique(recommendedNextCommands, `decantr task <route> "<change>"${projectFlag}`);
+    }
+    appendUnique(recommendedNextCommands, verifyCommand);
+    appendUnique(recommendedNextCommands, ciCommand);
+  }
+  const recommendedNextCommand = recommendedNextCommands[0] ?? ciCommand;
   return {
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     workspaceRoot,
@@ -4627,8 +4688,8 @@ function buildDoctorReport(root, args) {
       missingReferencedFiles: missingPackReferences.slice(0, 25)
     },
     localLaw: {
-      patternsPresent: existsSync16(localPatternsPath(appRoot)),
-      rulesPresent: existsSync16(localRulesPath(appRoot))
+      patternsPresent: localPatternsPresent,
+      rulesPresent: localRulesPresent
     },
     visualEvidence: {
       manifestPresent: existsSync16(join18(appRoot, ".decantr", "evidence", "visual-manifest.json"))
@@ -4636,7 +4697,8 @@ function buildDoctorReport(root, args) {
     designAuthority,
     status,
     issues,
-    recommendedNextCommand
+    recommendedNextCommand,
+    recommendedNextCommands
   };
 }
 function colorForStatus(status) {
@@ -4693,13 +4755,20 @@ function formatDoctorText(report) {
       if (issue.nextCommand) lines.push(`    ${DIM4}${issue.nextCommand}${RESET4}`);
     }
   }
-  lines.push("", `${BOLD3}Next:${RESET4}`, `  ${report.recommendedNextCommand}`, "");
+  lines.push("", `${BOLD3}Next steps:${RESET4}`);
+  for (const [index, command] of report.recommendedNextCommands.entries()) {
+    lines.push(`  ${index + 1}. ${command}`);
+  }
+  if (report.recommendedNextCommands.length === 0) {
+    lines.push(`  ${report.recommendedNextCommand}`);
+  }
+  lines.push("");
   return `${lines.join("\n")}
 `;
 }
 function cmdDoctorHelp() {
   console.log(`
-${BOLD3}decantr doctor${RESET4} \u2014 Explain Decantr state and the next command to run
+${BOLD3}decantr doctor${RESET4} \u2014 Explain Decantr state and the next commands to run
 
 ${BOLD3}Usage:${RESET4}
   decantr doctor [--project <path>] [--workspace] [--json]
@@ -4723,7 +4792,7 @@ async function cmdDoctor(args = ["doctor"], root = process.cwd()) {
 
 // src/commands/export.ts
 import { existsSync as existsSync17, mkdirSync as mkdirSync11, readFileSync as readFileSync14, writeFileSync as writeFileSync12 } from "fs";
-import { dirname as dirname4, isAbsolute, join as join19 } from "path";
+import { dirname as dirname5, isAbsolute, join as join19 } from "path";
 var GREEN5 = "\x1B[32m";
 var RED4 = "\x1B[31m";
 var DIM5 = "\x1B[2m";
@@ -4977,7 +5046,7 @@ async function cmdExport(target, projectRoot, options = {}) {
   }
 }
 function ensureDir(filePath) {
-  const dir = dirname4(filePath);
+  const dir = dirname5(filePath);
   if (!existsSync17(dir)) {
     mkdirSync11(dir, { recursive: true });
   }
@@ -5890,7 +5959,7 @@ async function cmdNewProject(projectName, options) {
       )
     );
   }
-  const packageManager = detectPackageManager3();
+  const packageManager = detectPackageManager4();
   if (shouldBootstrapRuntime) {
     console.log(heading("Installing dependencies..."));
     try {
@@ -5966,7 +6035,7 @@ ${YELLOW6}Decantr init encountered issues. Run \`decantr init\` manually inside
     });
   }
 }
-function detectPackageManager3() {
+function detectPackageManager4() {
   if (existsSync21(join23(process.cwd(), "pnpm-lock.yaml")) || existsSync21(join23(process.cwd(), "pnpm-workspace.yaml"))) {
     return "pnpm";
   }
@@ -6365,6 +6434,7 @@ import { join as join27 } from "path";
 import { isV4 as isV47 } from "@decantr/essence-spec";
 var GREEN11 = "\x1B[32m";
 var RED9 = "\x1B[31m";
+var YELLOW8 = "\x1B[33m";
 var DIM11 = "\x1B[2m";
 var RESET11 = "\x1B[0m";
 function readV4Essence2(projectRoot) {
@@ -6403,6 +6473,27 @@ function readFlagValue2(args, name) {
   }
   return void 0;
 }
+function resolveSectionAlias(sections, requestedSectionId) {
+  const exact = sections.find((section) => section.id === requestedSectionId);
+  if (exact) return { section: exact, resolvedFromAlias: false };
+  const roleByAlias = {
+    app: "primary",
+    main: "primary",
+    primary: "primary",
+    public: "public",
+    marketing: "public",
+    auth: "gateway",
+    gateway: "gateway",
+    auxiliary: "auxiliary"
+  };
+  const desiredRole = roleByAlias[requestedSectionId.toLowerCase()];
+  if (!desiredRole) return null;
+  const roleMatches = sections.filter((section) => section.role === desiredRole);
+  if (roleMatches.length === 1) return { section: roleMatches[0], resolvedFromAlias: true };
+  if (roleMatches.length > 1) return null;
+  const observedMatch = sections.find((section) => section.id === `observed-${desiredRole}`);
+  return observedMatch ? { section: observedMatch, resolvedFromAlias: true } : null;
+}
 function recomputeGlobalFeatures(essence) {
   const all = /* @__PURE__ */ new Set();
   for (const section of essence.blueprint.sections || []) {
@@ -6467,24 +6558,31 @@ async function cmdRemovePage(path, args, projectRoot = process.cwd()) {
   if (!loaded) return;
   const { essence, essencePath } = loaded;
   const sections = essence.blueprint.sections;
-  const section = sections.find((s) => s.id === sectionId);
-  if (!section) {
+  const resolved = resolveSectionAlias(sections, sectionId);
+  if (!resolved) {
     console.error(`${RED9}Section "${sectionId}" not found.${RESET11}`);
     console.error(`${DIM11}Available sections: ${sections.map((s) => s.id).join(", ")}${RESET11}`);
     process.exitCode = 1;
     return;
   }
+  const { section } = resolved;
+  const resolvedSectionId = section.id;
   const pageIdx = section.pages.findIndex((p) => p.id === pageId);
   if (pageIdx === -1) {
-    console.error(`${RED9}Page "${pageId}" not found in section "${sectionId}".${RESET11}`);
+    console.error(`${RED9}Page "${pageId}" not found in section "${resolvedSectionId}".${RESET11}`);
     console.error(`${DIM11}Available pages: ${section.pages.map((p) => p.id).join(", ")}${RESET11}`);
     process.exitCode = 1;
     return;
   }
   section.pages.splice(pageIdx, 1);
-  removeRoutes(essence, sectionId, pageId);
+  removeRoutes(essence, resolvedSectionId, pageId);
   writeEssence2(essencePath, essence);
-  console.log(`${GREEN11}Removed page "${pageId}" from section "${sectionId}".${RESET11}`);
+  if (resolved.resolvedFromAlias) {
+    console.log(
+      `${YELLOW8}Resolved section alias "${sectionId}" to "${resolvedSectionId}".${RESET11}`
+    );
+  }
+  console.log(`${GREEN11}Removed page "${pageId}" from section "${resolvedSectionId}".${RESET11}`);
   const registryClient = new RegistryClient({
     cacheDir: join27(projectRoot, ".decantr", "cache")
   });
@@ -6504,13 +6602,18 @@ async function cmdRemoveFeature(feature, args, projectRoot = process.cwd()) {
   sectionId = readFlagValue2(args, "section");
   if (sectionId) {
     const sections = essence.blueprint.sections;
-    const section = sections.find((s) => s.id === sectionId);
-    if (!section) {
+    const resolved = resolveSectionAlias(sections, sectionId);
+    if (!resolved) {
       console.error(`${RED9}Section "${sectionId}" not found.${RESET11}`);
       console.error(`${DIM11}Available sections: ${sections.map((s) => s.id).join(", ")}${RESET11}`);
       process.exitCode = 1;
       return;
     }
+    const { section } = resolved;
+    if (resolved.resolvedFromAlias) {
+      console.log(`${YELLOW8}Resolved section alias "${sectionId}" to "${section.id}".${RESET11}`);
+    }
+    sectionId = section.id;
     const fIdx = section.features.indexOf(feature);
     if (fIdx !== -1) {
       section.features.splice(fIdx, 1);
@@ -6535,7 +6638,7 @@ import { existsSync as existsSync26, readFileSync as readFileSync19, writeFileSy
 import { join as join28 } from "path";
 var GREEN12 = "\x1B[32m";
 var RED10 = "\x1B[31m";
-var YELLOW8 = "\x1B[33m";
+var YELLOW9 = "\x1B[33m";
 var RESET12 = "\x1B[0m";
 var DIM12 = "\x1B[2m";
 var BOLD6 = "\x1B[1m";
@@ -6576,7 +6679,7 @@ ${BOLD6}Unresolved Drift Entries (${unresolved.length})${RESET12}
 `);
   for (let i = 0; i < unresolved.length; i++) {
     const entry = unresolved[i];
-    const severityColor = entry.severity === "error" ? RED10 : YELLOW8;
+    const severityColor = entry.severity === "error" ? RED10 : YELLOW9;
     const icon = entry.severity === "error" ? "x" : "!";
     console.log(
       `  ${severityColor}${icon}${RESET12} ${BOLD6}#${i + 1}${RESET12} [${entry.rule}] ${entry.message}`
@@ -6860,7 +6963,7 @@ import { join as join29 } from "path";
 import { isV4 as isV48 } from "@decantr/essence-spec";
 var GREEN14 = "\x1B[32m";
 var RED11 = "\x1B[31m";
-var YELLOW9 = "\x1B[33m";
+var YELLOW10 = "\x1B[33m";
 var DIM14 = "\x1B[2m";
 var RESET14 = "\x1B[0m";
 var VALID_THEME_SHAPES = ["sharp", "rounded", "pill"];
@@ -6955,7 +7058,7 @@ async function cmdThemeSwitch(themeName, args, projectRoot = process.cwd()) {
   console.log(
     `${GREEN14}Derived files refreshed (tokens.css, treatments.css, all contexts).${RESET14}`
   );
-  console.log(`${YELLOW9}Guard will flag code using old tokens. Run \`decantr check\`.${RESET14}`);
+  console.log(`${YELLOW10}Guard will flag code using old tokens. Run \`decantr check\`.${RESET14}`);
 }
 
 // src/prompts.ts
@@ -6964,7 +7067,7 @@ var BOLD8 = "\x1B[1m";
 var DIM15 = "\x1B[2m";
 var RESET15 = "\x1B[0m";
 var GREEN15 = "\x1B[32m";
-var YELLOW10 = "\x1B[33m";
+var YELLOW11 = "\x1B[33m";
 var CYAN8 = "\x1B[36m";
 function ask(question, defaultValue) {
   const rl = createInterface({ input: process.stdin, output: process.stdout });
@@ -7004,7 +7107,7 @@ async function confirm(question, defaultYes = true) {
 }
 function warn(message) {
   console.log(`
-${YELLOW10}  Warning: ${message}${RESET15}`);
+${YELLOW11}  Warning: ${message}${RESET15}`);
 }
 function showDetection(detected) {
   console.log(`
@@ -7023,7 +7126,7 @@ ${CYAN8}Detected project configuration:${RESET15}`);
     console.log(`  Tailwind CSS: ${GREEN15}yes${RESET15}`);
   }
   if (detected.existingEssence) {
-    console.log(`  Existing essence: ${YELLOW10}yes${RESET15}`);
+    console.log(`  Existing essence: ${YELLOW11}yes${RESET15}`);
   }
 }
 async function runInteractivePrompts(detected, archetypes, blueprints, themes, workflowSeed) {
@@ -7425,7 +7528,7 @@ var RESET16 = "\x1B[0m";
 var RED12 = "\x1B[31m";
 var GREEN16 = "\x1B[32m";
 var CYAN9 = "\x1B[36m";
-var YELLOW11 = "\x1B[33m";
+var YELLOW12 = "\x1B[33m";
 function heading2(text) {
   return `
 ${BOLD9}${text}${RESET16}
@@ -8207,7 +8310,7 @@ async function compileHostedExecutionPackBundle(essencePath, namespace) {
   }
   const essence = JSON.parse(readFileSync22(resolvedPath, "utf-8"));
   const bundle = await client.compileExecutionPacks(essence, namespace ? { namespace } : void 0);
-  const contextDir = join31(dirname5(resolvedPath), ".decantr", "context");
+  const contextDir = join31(dirname6(resolvedPath), ".decantr", "context");
   return { resolvedPath, bundle, contextDir };
 }
 function writeHostedExecutionPackContextArtifacts(contextDir, bundle) {
@@ -8251,7 +8354,7 @@ async function printHostedSelectedExecutionPack(packType, id, essencePath, names
   );
   let writtenContextDir = null;
   if (writeContext) {
-    const contextDir = join31(dirname5(resolvedPath), ".decantr", "context");
+    const contextDir = join31(dirname6(resolvedPath), ".decantr", "context");
     mkdirSync16(contextDir, { recursive: true });
     writeFileSync19(
       join31(contextDir, "pack-manifest.json"),
@@ -8297,7 +8400,7 @@ async function printHostedExecutionPackManifest(essencePath, namespace, jsonOutp
   );
   let writtenContextDir = null;
   if (writeContext) {
-    const contextDir = join31(dirname5(resolvedPath), ".decantr", "context");
+    const contextDir = join31(dirname6(resolvedPath), ".decantr", "context");
     mkdirSync16(contextDir, { recursive: true });
     writeFileSync19(join31(contextDir, "pack-manifest.json"), JSON.stringify(manifest, null, 2) + "\n");
     writtenContextDir = contextDir;
@@ -8468,7 +8571,7 @@ function printBlueprintPortfolioNotice(blueprint) {
   if (!portfolio) return;
   if (portfolio.visibility === "hidden" || portfolio.maturity === "fold-candidate") {
     console.log(
-      `${YELLOW11}  Warning:${RESET16} blueprint "${blueprint.id}" is folded out of public browsing.`
+      `${YELLOW12}  Warning:${RESET16} blueprint "${blueprint.id}" is folded out of public browsing.`
     );
     if (portfolio.recommended_alternative) {
       console.log(
@@ -8481,7 +8584,7 @@ function printBlueprintPortfolioNotice(blueprint) {
   }
   if (portfolio.visibility === "labs") {
     console.log(
-      `${YELLOW11}  Note:${RESET16} blueprint "${blueprint.id}" is a Labs blueprint; direct scaffolding is supported, but it is not a default recommendation yet.`
+      `${YELLOW12}  Note:${RESET16} blueprint "${blueprint.id}" is a Labs blueprint; direct scaffolding is supported, but it is not a default recommendation yet.`
     );
   }
 }
@@ -8668,7 +8771,10 @@ async function cmdSuggest(query, options = {}) {
       `Pattern suggestions for "${query}"${contextBits.length > 0 ? ` (${contextBits.join(", ")})` : ""}`
     )
   );
-  const localMatches = localPatternMatches(options.projectRoot, query);
+  const localMatches = localPatternMatches(
+    options.projectRoot,
+    [query, code].filter(Boolean).join("\n")
+  );
   if (localMatches.length > 0) {
     console.log(`${BOLD9}Project-owned local law:${RESET16}`);
     for (const match of localMatches) {
@@ -8770,7 +8876,7 @@ async function cmdValidate(path) {
       console.log(heading2("Guard violations:"));
       for (const v of violations) {
         const vr = v;
-        console.log(`  ${YELLOW11}[${vr.rule}]${RESET16} ${vr.message}`);
+        console.log(`  ${YELLOW12}[${vr.rule}]${RESET16} ${vr.message}`);
         if (vr.suggestion) {
           console.log(`    ${DIM16}Suggestion: ${vr.suggestion}${RESET16}`);
         }
@@ -8876,7 +8982,7 @@ ${CYAN9}Telemetry enabled.${RESET16} Decantr will send privacy-filtered CLI prod
   console.log(`${DIM16}Set "telemetry": false in .decantr/project.json to opt out.${RESET16}`);
 }
 function readCliPackageVersion2() {
-  const here = dirname5(fileURLToPath3(import.meta.url));
+  const here = dirname6(fileURLToPath3(import.meta.url));
   const candidates = [join31(here, "..", "package.json"), join31(here, "..", "..", "package.json")];
   for (const candidate of candidates) {
     try {
@@ -9104,7 +9210,7 @@ async function cmdInit(args) {
     console.log(dim3("  Found .decantr/init-seed.json brownfield guidance."));
   }
   if (detected.existingEssence && !args.existing) {
-    console.log(`${YELLOW11}Warning: decantr.essence.json already exists.${RESET16}`);
+    console.log(`${YELLOW12}Warning: decantr.essence.json already exists.${RESET16}`);
     const overwrite = await confirm("Overwrite existing configuration?", false);
     if (!overwrite) {
       console.log(dim3("Cancelled."));
@@ -9207,7 +9313,7 @@ async function cmdInit(args) {
   } else if (shouldUseRegistry && !apiAvailable) {
     if (!args.blueprint) {
       console.log(`
-${YELLOW11}You're offline. Scaffolding minimal Decantr project.${RESET16}`);
+${YELLOW12}You're offline. Scaffolding minimal Decantr project.${RESET16}`);
       console.log(
         dim3("Run `decantr sync` or `decantr upgrade` when online to pull full registry content.\n")
       );
@@ -9256,7 +9362,7 @@ ${YELLOW11}You're offline. Scaffolding minimal Decantr project.${RESET16}`);
       return;
     }
     console.log(`
-${YELLOW11}You're offline. Scaffolding Decantr default.${RESET16}`);
+${YELLOW12}You're offline. Scaffolding Decantr default.${RESET16}`);
     console.log(dim3("Run `decantr upgrade` when online, or visit decantr.ai/registry\n"));
     selectedBlueprint = "default";
   } else if (shouldUseRegistry) {
@@ -9438,7 +9544,7 @@ ${YELLOW11}You're offline. Scaffolding Decantr default.${RESET16}`);
         return;
       }
       console.log(
-        `${YELLOW11}  Warning: Could not fetch blueprint "${options.blueprint}". Using defaults.${RESET16}`
+        `${YELLOW12}  Warning: Could not fetch blueprint "${options.blueprint}". Using defaults.${RESET16}`
       );
     }
   } else if (shouldUseRegistry && options.archetype) {
@@ -9453,7 +9559,7 @@ ${YELLOW11}You're offline. Scaffolding Decantr default.${RESET16}`);
         return;
       }
       console.log(
-        `${YELLOW11}  Warning: Could not fetch archetype "${options.archetype}". Using defaults.${RESET16}`
+        `${YELLOW12}  Warning: Could not fetch archetype "${options.archetype}". Using defaults.${RESET16}`
       );
     }
   }
@@ -9470,7 +9576,7 @@ ${YELLOW11}You're offline. Scaffolding Decantr default.${RESET16}`);
         return;
       }
       console.log(
-        `${YELLOW11}  Warning: Could not fetch theme "${options.theme}". Using defaults.${RESET16}`
+        `${YELLOW12}  Warning: Could not fetch theme "${options.theme}". Using defaults.${RESET16}`
       );
     }
   }
@@ -9675,7 +9781,7 @@ async function cmdStatus(projectRoot = process.cwd()) {
         `    Guard: ${v4.meta.guard.mode} (DNA: ${v4.meta.guard.dna_enforcement}, Blueprint: ${v4.meta.guard.blueprint_enforcement})`
       );
     } else {
-      console.log(`  ${YELLOW11}Run \`decantr migrate --to v4\` to upgrade this project.${RESET16}`);
+      console.log(`  ${YELLOW12}Run \`decantr migrate --to v4\` to upgrade this project.${RESET16}`);
     }
   } catch (e) {
     console.log(`  ${RED12}Error reading essence: ${e.message}${RESET16}`);
@@ -9688,15 +9794,15 @@ async function cmdStatus(projectRoot = process.cwd()) {
       const syncStatus = projectJson.sync?.status || "unknown";
       const lastSync = projectJson.sync?.lastSync || "never";
       const source = projectJson.sync?.registrySource || "unknown";
-      const statusColor = syncStatus === "synced" ? GREEN16 : YELLOW11;
+      const statusColor = syncStatus === "synced" ? GREEN16 : YELLOW12;
       console.log(`  Status: ${statusColor}${syncStatus}${RESET16}`);
       console.log(`  Last sync: ${dim3(lastSync)}`);
       console.log(`  Source: ${dim3(source)}`);
     } catch {
-      console.log(`  ${YELLOW11}Could not read project.json${RESET16}`);
+      console.log(`  ${YELLOW12}Could not read project.json${RESET16}`);
     }
   } else {
-    console.log(`  ${YELLOW11}No .decantr/project.json found${RESET16}`);
+    console.log(`  ${YELLOW12}No .decantr/project.json found${RESET16}`);
     console.log(dim3('  Run "decantr init" to create project files.'));
   }
 }
@@ -9709,12 +9815,12 @@ async function cmdSync() {
     console.log(success3("Sync completed successfully."));
     console.log(`  Synced: ${result.synced.join(", ")}`);
     if (result.failed.length > 0) {
-      console.log(`  ${YELLOW11}Failed: ${result.failed.join(", ")}${RESET16}`);
+      console.log(`  ${YELLOW12}Failed: ${result.failed.join(", ")}${RESET16}`);
     }
   } else {
-    console.log(`${YELLOW11}Could not sync: API unavailable${RESET16}`);
+    console.log(`${YELLOW12}Could not sync: API unavailable${RESET16}`);
     if (result.failed.length > 0) {
-      console.log(`  ${YELLOW11}Failed: ${result.failed.join(", ")}${RESET16}`);
+      console.log(`  ${YELLOW12}Failed: ${result.failed.join(", ")}${RESET16}`);
     }
   }
 }
@@ -9724,7 +9830,7 @@ function printVerificationFindings(findings) {
     return;
   }
   for (const finding of findings) {
-    const color = finding.severity === "error" ? RED12 : finding.severity === "warn" ? YELLOW11 : CYAN9;
+    const color = finding.severity === "error" ? RED12 : finding.severity === "warn" ? YELLOW12 : CYAN9;
     console.log(
       `  ${color}[${finding.severity.toUpperCase()}]${RESET16} ${finding.category}: ${finding.message}`
     );
@@ -10231,16 +10337,21 @@ async function cmdSetupWorkflow(args) {
   console.log(`  Detected: ${formatDetection(detected)}`);
   console.log("");
   if (detected.existingEssence) {
+    const hasLocalPatterns = existsSync29(localPatternsPath(workspaceInfo.appRoot));
+    const hasLocalRules = existsSync29(localRulesPath(workspaceInfo.appRoot));
+    const verifyCommand = hasLocalPatterns || hasLocalRules ? "decantr verify --brownfield --local-patterns" : "decantr verify --brownfield";
     console.log(`${BOLD9}Recommended path:${RESET16} maintain an attached Decantr project`);
     console.log(
       `  ${cyan3(withProject('decantr task <route> "<change>"', projectArg))}  Prepare LLM context before edits`
     );
     console.log(
-      `  ${cyan3(withProject("decantr verify --brownfield", projectArg))}     Run local health and drift checks`
-    );
-    console.log(
-      `  ${cyan3(withProject("decantr codify --from-audit", projectArg))}     Propose project-owned local law`
+      `  ${cyan3(withProject(verifyCommand, projectArg))}     Run local health and drift checks`
     );
+    if (!hasLocalPatterns || !hasLocalRules) {
+      console.log(
+        `  ${cyan3(withProject("decantr codify --from-audit", projectArg))}     Propose project-owned local law`
+      );
+    }
     return;
   }
   if (hasFootprint) {
@@ -10337,8 +10448,10 @@ async function cmdAdoptWorkflow(args) {
       return;
     }
   }
-  await cmdAnalyze(projectRoot, workspaceInfo);
+  await cmdAnalyze(projectRoot, workspaceInfo, { printNextStep: false });
   if (process.exitCode && process.exitCode !== 0) return;
+  const initCommand = projectArg ? `decantr init --project ${projectArg} --existing ${proposalFlag}` : `decantr init --existing ${proposalFlag}`;
+  console.log(dim3(`Analysis artifacts written; continuing with ${initCommand}.`));
   await cmdInit({
     existing: true,
     yes: true,
@@ -10365,7 +10478,7 @@ async function cmdAdoptWorkflow(args) {
         )
       );
     } catch (e) {
-      console.log(`${YELLOW11}Pack hydration skipped:${RESET16} ${e.message}`);
+      console.log(`${YELLOW12}Pack hydration skipped:${RESET16} ${e.message}`);
       console.log(
         dim3(
           `Run ${compilePacksCommandForProject(projectArg)} after adoption if you want hosted page/review packs.`
@@ -10376,7 +10489,7 @@ async function cmdAdoptWorkflow(args) {
     console.log(dim3("Skipping hosted pack hydration in offline mode."));
   }
   if (runVerify) {
-    const { cmdHealth } = await import("./health-R7AV5G4V.js");
+    const { cmdHealth } = await import("./health-VAYRQVTF.js");
     await cmdHealth(projectRoot, {
       browser: runBrowser,
       browserBaseUrl: baseUrl,
@@ -10447,7 +10560,7 @@ async function cmdVerifyWorkflow(args) {
     return;
   }
   if (workspaceMode) {
-    const { cmdWorkspace } = await import("./workspace-DRHTQ2NG.js");
+    const { cmdWorkspace } = await import("./workspace-PBO3BJRL.js");
     await cmdWorkspace(process.cwd(), ["workspace", "health", ...withoutWorkflowOnlyFlags(args)]);
     return;
   }
@@ -10480,7 +10593,7 @@ async function cmdVerifyWorkflow(args) {
   }
   let guardExitCode;
   if (brownfield) {
-    const { cmdHeal, collectCheckIssues } = await import("./heal-ZQHEHBUJ.js");
+    const { cmdHeal, collectCheckIssues } = await import("./heal-2UCSPRTK.js");
     if (quietOutput) {
       const result = collectCheckIssues(workspaceInfo.appRoot, { brownfield: true });
       guardExitCode = result.issues.some((issue) => issue.type === "error") ? 1 : void 0;
@@ -10490,7 +10603,7 @@ async function cmdVerifyWorkflow(args) {
       process.exitCode = void 0;
     }
   }
-  const { cmdHealth, parseHealthArgs } = await import("./health-R7AV5G4V.js");
+  const { cmdHealth, parseHealthArgs } = await import("./health-VAYRQVTF.js");
   await cmdHealth(workspaceInfo.appRoot, parseHealthArgs(healthArgs));
   if (localPatterns) {
     const validation = validateLocalLaw(workspaceInfo.appRoot);
@@ -10498,7 +10611,7 @@ async function cmdVerifyWorkflow(args) {
       if (!quietOutput) {
         console.log("");
         console.log(
-          `${YELLOW11}Local pattern pack missing.${RESET16} Run ${cyan3(withProject("decantr codify --from-audit", projectArg))}, review the proposal, then run ${cyan3(withProject("decantr codify --accept", projectArg))}.`
+          `${YELLOW12}Local pattern pack missing.${RESET16} Run ${cyan3(withProject("decantr codify --from-audit", projectArg))}, review the proposal, then run ${cyan3(withProject("decantr codify --accept", projectArg))}.`
         );
       }
       process.exitCode = process.exitCode || 1;
@@ -10514,11 +10627,11 @@ async function cmdVerifyWorkflow(args) {
           console.log(`${GREEN16}Local rule manifest found:${RESET16} ${validation.rulesPath}`);
         } else {
           console.log(
-            `${YELLOW11}Local rule manifest missing.${RESET16} Run ${cyan3("decantr codify --from-audit")} to propose .decantr/rules.json.`
+            `${YELLOW12}Local rule manifest missing.${RESET16} Run ${cyan3("decantr codify --from-audit")} to propose .decantr/rules.json.`
           );
         }
         for (const warning of validation.warnings.slice(0, 8)) {
-          console.log(`${YELLOW11}warn${RESET16} ${warning}`);
+          console.log(`${YELLOW12}warn${RESET16} ${warning}`);
         }
         if (validation.findings.length > 0) {
           console.log("");
@@ -10671,7 +10784,7 @@ async function cmdTaskWorkflow(args) {
     console.log("");
     console.log(`${BOLD9}Project-owned local law:${RESET16}`);
     console.log(
-      `  ${YELLOW11}Not codified yet.${RESET16} Run ${cyan3(withProject("decantr codify --from-audit", projectArg))} after adoption.`
+      `  ${YELLOW12}Not codified yet.${RESET16} Run ${cyan3(withProject("decantr codify --from-audit", projectArg))} after adoption.`
     );
   }
   if (context.changedFiles.length > 0) {
@@ -11316,7 +11429,7 @@ async function main() {
   }
   if (command === "--version" || command === "-v" || command === "version") {
     try {
-      const here = dirname5(fileURLToPath3(import.meta.url));
+      const here = dirname6(fileURLToPath3(import.meta.url));
       const candidates = [join31(here, "..", "package.json"), join31(here, "..", "..", "package.json")];
       for (const candidate of candidates) {
         if (existsSync29(candidate)) {
@@ -11458,7 +11571,7 @@ async function main() {
       break;
     }
     case "upgrade": {
-      const { cmdUpgrade } = await import("./upgrade-VON7Y3LG.js");
+      const { cmdUpgrade } = await import("./upgrade-7ZYWR2GH.js");
       const { flags } = parseLooseArgs(args);
       const workspaceInfo = resolveWorkflowProject(flags, "upgrade");
       if (!workspaceInfo) break;
@@ -11470,10 +11583,10 @@ async function main() {
     case "heal": {
       if (command === "heal") {
         console.log(
-          `${YELLOW11}Note: \`decantr heal\` is deprecated. Use \`decantr check\` instead.${RESET16}`
+          `${YELLOW12}Note: \`decantr heal\` is deprecated. Use \`decantr check\` instead.${RESET16}`
         );
       }
-      const { cmdHeal } = await import("./heal-ZQHEHBUJ.js");
+      const { cmdHeal } = await import("./heal-2UCSPRTK.js");
       const { flags } = parseLooseArgs(args);
       const workspaceInfo = resolveWorkflowProject(flags, "check");
       if (!workspaceInfo) break;
@@ -11498,7 +11611,7 @@ async function main() {
         const { flags } = parseLooseArgs(args);
         const workspaceInfo = resolveWorkflowProject(flags, "health");
         if (!workspaceInfo) break;
-        const { cmdHealth, parseHealthArgs } = await import("./health-R7AV5G4V.js");
+        const { cmdHealth, parseHealthArgs } = await import("./health-VAYRQVTF.js");
         await cmdHealth(workspaceInfo.appRoot, parseHealthArgs(stripProjectArgs(args)));
       } catch (e) {
         console.error(error2(e.message));
@@ -11526,7 +11639,7 @@ async function main() {
           cmdStudioHelp();
           break;
         }
-        const { cmdStudio, parseStudioArgs } = await import("./studio-2734P63C.js");
+        const { cmdStudio, parseStudioArgs } = await import("./studio-WPETOZRW.js");
         await cmdStudio(process.cwd(), parseStudioArgs(args));
       } catch (e) {
         console.error(error2(e.message));
@@ -11540,7 +11653,7 @@ async function main() {
           cmdWorkspaceHelp();
           break;
         }
-        const { cmdWorkspace } = await import("./workspace-DRHTQ2NG.js");
+        const { cmdWorkspace } = await import("./workspace-PBO3BJRL.js");
         await cmdWorkspace(process.cwd(), args);
       } catch (e) {
         console.error(error2(e.message));

package/dist/{chunk-VCUFZB45.js → chunk-QDMXZSVK.js}

@@ -1,7 +1,7 @@
 import {
   createProjectHealthReport,
   listWorkspaceAppCandidates
-} from "./chunk-FACL3NXU.js";
+} from "./chunk-WPP3JEMC.js";
 
 // src/commands/workspace.ts
 import { execFileSync } from "child_process";

package/dist/{chunk-FACL3NXU.js → chunk-WPP3JEMC.js}

@@ -3,7 +3,7 @@ import {
   sendProjectHealthCiFailedTelemetry,
   sendProjectHealthPromptTelemetry,
   sendProjectHealthReportTelemetry
-} from "./chunk-WONPNSSI.js";
+} from "./chunk-4SZ4SEKT.js";
 
 // src/commands/health.ts
 import { execFileSync } from "child_process";

package/dist/{heal-ZQHEHBUJ.js → heal-2UCSPRTK.js}

@@ -1,7 +1,7 @@
 import {
   cmdHeal,
   collectCheckIssues
-} from "./chunk-WONPNSSI.js";
+} from "./chunk-4SZ4SEKT.js";
 export {
   cmdHeal,
   collectCheckIssues

package/dist/{health-R7AV5G4V.js → health-VAYRQVTF.js}

@@ -10,8 +10,8 @@ import {
   renderProjectHealthCiWorkflow,
   shouldFailHealth,
   writeProjectHealthCiWorkflow
-} from "./chunk-FACL3NXU.js";
-import "./chunk-WONPNSSI.js";
+} from "./chunk-WPP3JEMC.js";
+import "./chunk-4SZ4SEKT.js";
 export {
   cmdHealth,
   collectDesignTokenEvidence,

package/dist/index.js

@@ -1,5 +1,5 @@
-import "./chunk-32H5SFKV.js";
-import "./chunk-RXF7ZYGK.js";
-import "./chunk-VCUFZB45.js";
-import "./chunk-FACL3NXU.js";
-import "./chunk-WONPNSSI.js";
+import "./chunk-JSILTE5V.js";
+import "./chunk-IQZCIMQJ.js";
+import "./chunk-QDMXZSVK.js";
+import "./chunk-WPP3JEMC.js";
+import "./chunk-4SZ4SEKT.js";

package/dist/{studio-2734P63C.js → studio-WPETOZRW.js}

@@ -1,13 +1,13 @@
 import {
   createWorkspaceHealthReport
-} from "./chunk-VCUFZB45.js";
+} from "./chunk-QDMXZSVK.js";
 import {
   createProjectHealthReport
-} from "./chunk-FACL3NXU.js";
+} from "./chunk-WPP3JEMC.js";
 import {
   sendStudioHealthRefreshedTelemetry,
   sendStudioStartedTelemetry
-} from "./chunk-WONPNSSI.js";
+} from "./chunk-4SZ4SEKT.js";
 
 // src/commands/studio.ts
 import { readFileSync } from "fs";

package/dist/{upgrade-VON7Y3LG.js → upgrade-7ZYWR2GH.js}

@@ -1,7 +1,7 @@
 import {
   RegistryClient,
   refreshDerivedFiles
-} from "./chunk-RXF7ZYGK.js";
+} from "./chunk-IQZCIMQJ.js";
 
 // src/commands/upgrade.ts
 import { existsSync, readFileSync, writeFileSync } from "fs";

package/dist/{workspace-DRHTQ2NG.js → workspace-PBO3BJRL.js}

@@ -7,9 +7,9 @@ import {
   listWorkspaceProjects,
   parseWorkspaceArgs,
   shouldFailWorkspaceHealth
-} from "./chunk-VCUFZB45.js";
-import "./chunk-FACL3NXU.js";
-import "./chunk-WONPNSSI.js";
+} from "./chunk-QDMXZSVK.js";
+import "./chunk-WPP3JEMC.js";
+import "./chunk-4SZ4SEKT.js";
 export {
   cmdWorkspace,
   createWorkspaceHealthReport,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@decantr/cli",
-  "version": "2.9.6",
+  "version": "2.9.8",
   "description": "Decantr CLI - scaffold, audit, inspect Project Health, and maintain Decantr projects from the terminal",
   "keywords": [
     "decantr",
@@ -49,10 +49,10 @@
   "dependencies": {
     "ajv": "^8.20.0",
     "@decantr/core": "2.1.0",
-    "@decantr/registry": "2.2.0",
-    "@decantr/essence-spec": "2.0.1",
     "@decantr/verifier": "2.3.3",
-    "@decantr/telemetry": "2.2.1"
+    "@decantr/telemetry": "2.2.1",
+    "@decantr/essence-spec": "2.0.1",
+    "@decantr/registry": "2.2.0"
   },
   "scripts": {
     "build": "tsup",