@delorenj/pjangler 1.2.1 → 1.2.3

package/dist/mcp-server.js

@@ -1,9 +1,8 @@
 #!/usr/bin/env node
 
 // src/mcp-server.ts
-import { spawnSync as spawnSync5 } from "node:child_process";
-import { existsSync as existsSync8, mkdirSync as mkdirSync6, statSync } from "node:fs";
-import { basename as basename2, dirname as dirname7, join as join10, resolve as resolve2 } from "node:path";
+import { existsSync as existsSync9, statSync as statSync2 } from "node:fs";
+import { basename as basename4, dirname as dirname8, join as join12, resolve as resolve3 } from "node:path";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
@@ -45,6 +44,63 @@ var Command = class {
   }
 };
 
+// src/utils/style.ts
+var env = process.env;
+function detectColor() {
+  if ("NO_COLOR" in env && env.NO_COLOR !== "") return false;
+  const force = env.FORCE_COLOR;
+  if (force === "0" || force === "false") return false;
+  if (force !== void 0 && force !== "") return true;
+  if (env.TERM === "dumb") return false;
+  return Boolean(process.stdout.isTTY);
+}
+var colorEnabled = detectColor();
+function sgr(open, close) {
+  const prefix = `\x1B[${open}m`;
+  const suffix = `\x1B[${close}m`;
+  return (value) => colorEnabled ? `${prefix}${value}${suffix}` : String(value);
+}
+var bold = sgr(1, 22);
+var dim = sgr(2, 22);
+var italic = sgr(3, 23);
+var underline = sgr(4, 24);
+var red = sgr(31, 39);
+var green = sgr(32, 39);
+var yellow = sgr(33, 39);
+var blue = sgr(34, 39);
+var magenta = sgr(35, 39);
+var cyan = sgr(36, 39);
+var gray = sgr(90, 39);
+var glyph = {
+  pass: "\u2714",
+  fail: "\u2716",
+  warn: "\u26A0",
+  skip: "\u25CB",
+  info: "\u2139",
+  arrow: "\u21B3",
+  bullet: "\u2022",
+  dot: "\xB7",
+  add: "+",
+  chevron: "\u25B8",
+  pointer: "\u276F"
+};
+var STATUS_STYLES = {
+  pass: { glyph: glyph.pass, color: green, label: "pass" },
+  fail: { glyph: glyph.fail, color: red, label: "fail" },
+  warn: { glyph: glyph.warn, color: yellow, label: "warn" },
+  skip: { glyph: glyph.skip, color: gray, label: "skip" },
+  applied: { glyph: glyph.pass, color: green, label: "applied" },
+  noop: { glyph: glyph.skip, color: gray, label: "noop" },
+  blocked: { glyph: glyph.fail, color: red, label: "blocked" },
+  skipped: { glyph: glyph.skip, color: gray, label: "skipped" }
+};
+function statusStyle(status) {
+  return STATUS_STYLES[status] ?? { glyph: glyph.dot, color: dim, label: status };
+}
+function joinDot(fragments) {
+  return fragments.join(dim(` ${glyph.dot} `));
+}
+
 // src/recipes/Recipe.ts
 var Recipe = class {
   context;
@@ -57,26 +113,22 @@ var Recipe = class {
     return this;
   }
   async execute() {
-    const dryRunPrefix = this.context.dryRun ? "[DRY RUN] " : "";
-    console.log(`${dryRunPrefix}\u{1F680} Initializing ${this.constructor.name.replace("Recipe", "").toLowerCase()} subsystem...`);
-    if (this.context.dryRun) {
-      console.log("\u26A0\uFE0F  Dry-run mode: No files will be modified");
-      console.log("");
-    }
+    const subsystem = this.constructor.name.replace("Recipe", "").toLowerCase();
+    const dryRun = this.context.dryRun;
+    console.log("");
+    console.log(`  ${cyan(bold(glyph.chevron))} ${bold(`Initializing ${subsystem} subsystem`)}${dryRun ? `  ${dim(glyph.dot)}  ${yellow("dry run")}` : ""}`);
+    console.log("");
     for (const command of this.ingredients) {
       const result = await command.invoke();
-      if (result.success) {
-        console.log(result.message);
-      } else {
-        console.log(result.message);
-      }
+      console.log(result.message.split("\n").map((line) => line ? `  ${line}` : line).join("\n"));
     }
-    if (!this.context.dryRun) {
+    if (!dryRun) {
       this.printNextSteps();
     } else {
       console.log("");
-      console.log("\u2713 Dry-run complete - no files were modified");
-      console.log("  Remove --dry-run flag to apply changes");
+      console.log(`  ${green(glyph.pass)} ${dim("Dry-run complete \u2014 no files were modified.")}`);
+      console.log(`  ${dim("Remove --dry-run to apply changes.")}`);
+      console.log("");
     }
   }
 };
@@ -219,11 +271,111 @@ if __name__ == "__main__":
   }
 };
 
+// src/commands/AddMiseCodegraphScript.ts
+import { chmodSync } from "fs";
+import { join as join2 } from "path";
+var AddMiseCodegraphScript = class extends Command {
+  async invoke() {
+    const filePath = ".mise/scripts/codegraph.sh";
+    if (this.fileExists(filePath) && !this.context.force) {
+      return {
+        success: false,
+        message: this.formatMessage("\u26A0\uFE0F  .mise/scripts/codegraph.sh already exists"),
+        filePath
+      };
+    }
+    const content = `#!/usr/bin/env bash
+# Mise enter hook: ensure the CodeGraph CLI is available and initialize the
+# project index. If \`codegraph\` is not installed, this script installs it
+# non-interactively into the project-local .mise/bin directory and retries.
+#
+# This is intended to run from a mise enter hook so onboarding a new host is
+# fully automatic.
+
+set -euo pipefail
+
+REPO_ROOT="\${MISE_PROJECT_ROOT:-$(cd "$(dirname "$0")/../.." && pwd)}"
+PROJECT_BIN_DIR="$REPO_ROOT/.mise/bin"
+mkdir -p "$PROJECT_BIN_DIR"
+
+# Install the CodeGraph CLI into the project-local bin directory.
+install_codegraph() {
+  echo "[mise] codegraph not found. Installing non-interactively..."
+  export CODEGRAPH_BIN_DIR="$PROJECT_BIN_DIR"
+  curl -fsSL https://raw.githubusercontent.com/colbymchenry/codegraph/main/install.sh | sh
+
+  if [ -x "$PROJECT_BIN_DIR/codegraph" ]; then
+    export PATH="$PROJECT_BIN_DIR:$PATH"
+  else
+    echo "[mise] codegraph install did not place a binary at $PROJECT_BIN_DIR/codegraph" >&2
+    return 1
+  fi
+}
+
+# Ensure a codegraph binary is available on PATH.
+ensure_codegraph() {
+  if command -v codegraph >/dev/null 2>&1; then
+    return 0
+  fi
+
+  # Check the project-local bin dir first (previous install from this hook).
+  if [ -x "$PROJECT_BIN_DIR/codegraph" ]; then
+    export PATH="$PROJECT_BIN_DIR:$PATH"
+    return 0
+  fi
+
+  # Check typical user-level install locations before fetching anything.
+  for d in "$HOME/.local/bin" "$HOME/.codegraph/current/bin"; do
+    if [ -x "$d/codegraph" ]; then
+      export PATH="$d:$PATH"
+      return 0
+    fi
+  done
+
+  install_codegraph
+}
+
+# Attempt to initialize the project graph. If the command is missing, install
+# it and retry once.
+init_project() {
+  local err_file
+  err_file="$(mktemp)"
+  trap 'rm -f "$err_file"' RETURN
+
+  if codegraph init -i "$REPO_ROOT" 2>"$err_file"; then
+    return 0
+  fi
+
+  # If the failure looks like a missing binary, install and retry.
+  if grep -qiE 'command not found|not installed|No such file|executable file not found' "$err_file" 2>/dev/null; then
+    ensure_codegraph
+    codegraph init -i "$REPO_ROOT"
+    return 0
+  fi
+
+  cat "$err_file" >&2
+  return 1
+}
+
+init_project
+`;
+    this.writeFile(filePath, content);
+    if (!this.context.dryRun) {
+      chmodSync(join2(this.context.targetDir, filePath), 493);
+    }
+    return {
+      success: true,
+      message: this.formatMessage(this.context.dryRun ? "Would create .mise/scripts/codegraph.sh" : "\u2705 Created .mise/scripts/codegraph.sh"),
+      filePath
+    };
+  }
+};
+
 // src/recipes/MiseRecipe.ts
 var MiseRecipe = class extends Recipe {
   constructor(context) {
     super(context);
-    this.addIngredient(AddMiseToml).addIngredient(AddDotenv).addIngredient(AddMiseTasksStructure).addIngredient(AddMiseBaseToml).addIngredient(AddMiseBaseScript);
+    this.addIngredient(AddMiseToml).addIngredient(AddDotenv).addIngredient(AddMiseTasksStructure).addIngredient(AddMiseBaseToml).addIngredient(AddMiseBaseScript).addIngredient(AddMiseCodegraphScript);
   }
   printNextSteps() {
     console.log("\u{1F389} Mise subsystem initialized successfully!");
@@ -453,19 +605,19 @@ var NodeRecipe = class extends Recipe {
 // src/commands/hermes/EnsureTemplateConfig.ts
 import { homedir, platform } from "node:os";
 import { existsSync as existsSync2, mkdirSync as mkdirSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join2, dirname as dirname2 } from "node:path";
+import { join as join3, dirname as dirname2 } from "node:path";
 function resolveTemplateConfigPath() {
   const fromEnv = process.env.HERMES_TEMPLATE_CONFIG;
   if (fromEnv && fromEnv.trim()) return fromEnv.trim();
   const xdg = process.env.XDG_CONFIG_HOME?.trim();
-  const base = xdg && xdg.length ? xdg : join2(homedir(), ".config");
-  return join2(base, "hermes-agent-template", "config.toml");
+  const base = xdg && xdg.length ? xdg : join3(homedir(), ".config");
+  return join3(base, "hermes-agent-template", "config.toml");
 }
 function detectHermesBin(home) {
   const candidates = [
-    join2(home, "code", "hermes-agent", "venv", "bin", "hermes"),
-    join2(home, "code", "hermes-agent", ".venv", "bin", "hermes"),
-    join2(home, ".local", "bin", "hermes")
+    join3(home, "code", "hermes-agent", "venv", "bin", "hermes"),
+    join3(home, "code", "hermes-agent", ".venv", "bin", "hermes"),
+    join3(home, ".local", "bin", "hermes")
   ];
   for (const c of candidates) {
     if (existsSync2(c)) return c;
@@ -475,9 +627,9 @@ function detectHermesBin(home) {
 function renderHostConfig() {
   const home = homedir();
   const hermesBin = detectHermesBin(home);
-  const hermesRepo = join2(home, "code", "hermes-agent");
-  const scaffoldDir = join2(home, "code", "hermes-agent-template", "runtime-scaffold");
-  const skillsDir = join2(home, ".agents", "skills");
+  const hermesRepo = join3(home, "code", "hermes-agent");
+  const scaffoldDir = join3(home, "code", "hermes-agent-template", "runtime-scaffold");
+  const skillsDir = join3(home, ".agents", "skills");
   return `# hermes-agent-template \u2014 host configuration
 # Bootstrapped by \`pjangler config bootstrap\` for $HOME=${home} (platform=${platform()}).
 #
@@ -544,7 +696,7 @@ var EnsureTemplateConfig = class extends Command {
 };
 
 // src/commands/hermes/PromptForAgentConfig.ts
-import { basename, join as join3 } from "node:path";
+import { basename, join as join4 } from "node:path";
 import { readFileSync } from "node:fs";
 import * as p from "@clack/prompts";
 
@@ -573,7 +725,7 @@ function deriveProfileName(repo, role) {
 // src/commands/hermes/PromptForAgentConfig.ts
 function detectTicketProvider(targetDir) {
   try {
-    const t = JSON.parse(readFileSync(join3(targetDir, ".project.json"), "utf8"))?.ticket_provider?.type;
+    const t = JSON.parse(readFileSync(join4(targetDir, ".project.json"), "utf8"))?.ticket_provider?.type;
     return t === "plane" || t === "linear" || t === "trello" ? t : void 0;
   } catch {
     return void 0;
@@ -709,7 +861,7 @@ var PromptForAgentConfig = class extends Command {
 // src/commands/hermes/RunCopierTemplate.ts
 import { spawnSync } from "node:child_process";
 import { homedir as homedir2 } from "node:os";
-import { join as join4, dirname as dirname3 } from "node:path";
+import { join as join5, dirname as dirname3 } from "node:path";
 import { existsSync as existsSync3, mkdirSync as mkdirSync3 } from "node:fs";
 import { fileURLToPath } from "node:url";
 import * as p2 from "@clack/prompts";
@@ -721,8 +873,8 @@ function resolveVendoredTemplate(name) {
     return void 0;
   }
   for (let i = 0; i < 8; i++) {
-    const candidate = join4(dir, "templates", name);
-    if (existsSync3(join4(candidate, "copier.yml"))) return candidate;
+    const candidate = join5(dir, "templates", name);
+    if (existsSync3(join5(candidate, "copier.yml"))) return candidate;
     const parent = dirname3(dir);
     if (parent === dir) break;
     dir = parent;
@@ -741,7 +893,7 @@ var RunCopierTemplate = class extends Command {
         message: "PromptForAgentConfig must run before RunCopierTemplate (targetRepo/role unset)"
       };
     }
-    const roleDir = join4(ctx.targetDir, "agents", "hermes", role);
+    const roleDir = join5(ctx.targetDir, "agents", "hermes", role);
     ctx.roleDir = roleDir;
     ctx.runtimeRepo = `delorenj/agent-hm-${targetRepo}-${role}`;
     const which = spawnSync("which", ["copier"], { encoding: "utf8" });
@@ -751,7 +903,7 @@ var RunCopierTemplate = class extends Command {
         message: "\u2717 copier not found on PATH.  Install with: `uv tool install copier` or `pip install copier`"
       };
     }
-    if (existsSync3(join4(roleDir, "role.yaml")) && !ctx.force) {
+    if (existsSync3(join5(roleDir, "role.yaml")) && !ctx.force) {
       if (ctx.yes) {
         ctx.force = true;
       } else {
@@ -768,7 +920,7 @@ var RunCopierTemplate = class extends Command {
         ctx.force = true;
       }
     }
-    const env = {
+    const env2 = {
       ...process.env,
       SKIP_TELEGRAM: "1",
       SKIP_EMAIL: "1",
@@ -778,9 +930,9 @@ var RunCopierTemplate = class extends Command {
       SKIP_BLOODBANK: ctx.skipBloodbank ? "1" : "0",
       SKIP_SYSTEMD: ctx.skipSystemd ? "1" : "0"
     };
-    const LOCAL_TEMPLATE = join4(homedir2(), "code", "hermes-agent-template");
+    const LOCAL_TEMPLATE = join5(homedir2(), "code", "hermes-agent-template");
     const vendored = resolveVendoredTemplate("hermes-agent");
-    const templateSrc = process.env.PJANGLER_HERMES_TEMPLATE || vendored || (existsSync3(join4(LOCAL_TEMPLATE, "copier.yml")) ? LOCAL_TEMPLATE : HERMES_AGENT_TEMPLATE);
+    const templateSrc = process.env.PJANGLER_HERMES_TEMPLATE || vendored || (existsSync3(join5(LOCAL_TEMPLATE, "copier.yml")) ? LOCAL_TEMPLATE : HERMES_AGENT_TEMPLATE);
     const args = [
       "copy",
       templateSrc,
@@ -811,13 +963,13 @@ var RunCopierTemplate = class extends Command {
         message: this.formatMessage(`Would run: copier ${args.join(" ")}`)
       };
     }
-    mkdirSync3(join4(ctx.targetDir, "agents", "hermes"), { recursive: true });
+    mkdirSync3(join5(ctx.targetDir, "agents", "hermes"), { recursive: true });
     const spinner4 = p2.spinner();
     spinner4.start(`Running copier copy  (target: agents/hermes/${role})`);
     const result = spawnSync("copier", args, {
       stdio: "inherit",
       // pass the interactive output through; copier prints its own progress
-      env,
+      env: env2,
       cwd: ctx.targetDir
     });
     spinner4.stop(result.status === 0 ? "\u2713 copier run complete" : "\u2717 copier failed");
@@ -836,7 +988,7 @@ var RunCopierTemplate = class extends Command {
 
 // src/commands/hermes/WireTelegram.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { join as join5 } from "node:path";
+import { join as join6 } from "node:path";
 import { existsSync as existsSync4, unlinkSync } from "node:fs";
 import * as p3 from "@clack/prompts";
 var WireTelegram = class extends Command {
@@ -925,14 +1077,14 @@ var WireTelegram = class extends Command {
     if (p3.isCancel(allowedAnswer)) {
       return { success: false, message: "\u2717 Aborted; Telegram step deferred." };
     }
-    const script = join5(roleDir, ".scripts", "30-telegram.sh");
+    const script = join6(roleDir, ".scripts", "30-telegram.sh");
     if (!existsSync4(script)) {
       return {
         success: false,
         message: `\u2717 ${script} not found.  Did copier finish?  Re-run with --skip-runtime-repo=0 if you skipped it.`
       };
     }
-    const marker = join5(roleDir, ".scripts", ".done-30-telegram");
+    const marker = join6(roleDir, ".scripts", ".done-30-telegram");
     if (existsSync4(marker)) unlinkSync(marker);
     const spinner4 = p3.spinner();
     spinner4.start("Verifying token + wiring profile");
@@ -960,7 +1112,7 @@ function cap(s) {
 
 // src/commands/hermes/WireEmail.ts
 import { spawnSync as spawnSync3 } from "node:child_process";
-import { join as join6 } from "node:path";
+import { join as join7 } from "node:path";
 import { existsSync as existsSync5, unlinkSync as unlinkSync2 } from "node:fs";
 import * as p4 from "@clack/prompts";
 var WireEmail = class extends Command {
@@ -976,7 +1128,7 @@ var WireEmail = class extends Command {
     if (!targetRepo || !role || !roleDir) {
       return { success: false, message: "Cannot wire email: missing target_repo/role/roleDir" };
     }
-    const script = join6(roleDir, ".scripts", "50-email.sh");
+    const script = join7(roleDir, ".scripts", "50-email.sh");
     if (!existsSync5(script)) {
       return { success: false, message: `\u2717 ${script} not found` };
     }
@@ -1039,7 +1191,7 @@ var WireEmail = class extends Command {
         }
       }
     }
-    const marker = join6(roleDir, ".scripts", ".done-50-email");
+    const marker = join7(roleDir, ".scripts", ".done-50-email");
     if (existsSync5(marker)) unlinkSync2(marker);
     const spinner4 = p4.spinner();
     spinner4.start("Creating Cloudflare Email Routing rule");
@@ -1128,7 +1280,7 @@ var HermesAgentRecipe = class extends Recipe {
 
 // src/commands/AgentHooksCommands.ts
 import { homedir as homedir3 } from "node:os";
-import { join as join7, dirname as dirname4 } from "node:path";
+import { join as join8, dirname as dirname4 } from "node:path";
 import { existsSync as existsSync6, cpSync, mkdirSync as mkdirSync4, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
 import { fileURLToPath as fileURLToPath2 } from "node:url";
 function resolveTemplateRoot() {
@@ -1139,16 +1291,16 @@ function resolveTemplateRoot() {
   try {
     let dir = dirname4(fileURLToPath2(import.meta.url));
     for (let i = 0; i < 8; i++) {
-      candidates.push(join7(dir, "templates", "commonproject", "template"));
+      candidates.push(join8(dir, "templates", "commonproject", "template"));
       const parent = dirname4(dir);
       if (parent === dir) break;
       dir = parent;
     }
   } catch {
   }
-  candidates.push(join7(homedir3(), "code", "pjangler", "templates", "commonproject", "template"));
+  candidates.push(join8(homedir3(), "code", "pjangler", "templates", "commonproject", "template"));
   for (const c of candidates) {
-    if (existsSync6(join7(c, ".agents", "hooks", "hooks.master.json"))) return c;
+    if (existsSync6(join8(c, ".agents", "hooks", "hooks.master.json"))) return c;
   }
   throw new Error(
     "Could not locate the CommonProject template. Set PJANGLER_COMMONPROJECT_TEMPLATE to <repo>/templates/commonproject/template."
@@ -1172,8 +1324,8 @@ var CopyAgentHooksTree = class extends Command {
     const created = [];
     const skipped = [];
     for (const { rel, dir } of items) {
-      const src = join7(templateRoot, rel);
-      const dest = join7(this.context.targetDir, rel);
+      const src = join8(templateRoot, rel);
+      const dest = join8(this.context.targetDir, rel);
       if (!existsSync6(src)) continue;
       if (existsSync6(dest) && !this.context.force) {
         skipped.push(rel);
@@ -1198,7 +1350,7 @@ var WireMiseAgentHooks = class _WireMiseAgentHooks extends Command {
   static CR = "{{config_root}}";
   // mise's own runtime var — emitted literally
   async invoke() {
-    const misePath = join7(this.context.targetDir, "mise.toml");
+    const misePath = join8(this.context.targetDir, "mise.toml");
     if (!existsSync6(misePath)) {
       return {
         success: false,
@@ -1319,7 +1471,7 @@ var RECIPE_REGISTRY = {
     name: "mise",
     description: "Mise task runner and environment setup",
     class: MiseRecipe,
-    commands: ["AddMiseToml", "AddDotenv", "AddMiseTasksStructure", "AddMiseBaseToml", "AddMiseBaseScript"]
+    commands: ["AddMiseToml", "AddDotenv", "AddMiseTasksStructure", "AddMiseBaseToml", "AddMiseBaseScript", "AddMiseCodegraphScript"]
   },
   docker: {
     name: "docker",
@@ -1409,6 +1561,12 @@ var COMMAND_REGISTRY = {
     group: "mise",
     class: AddMiseBaseScript
   },
+  AddMiseCodegraphScript: {
+    name: "AddMiseCodegraphScript",
+    description: "Create .mise/scripts/codegraph.sh enter hook",
+    group: "mise",
+    class: AddMiseCodegraphScript
+  },
   AddDotenv: {
     name: "AddDotenv",
     description: "Create .env.example file",
@@ -1430,14 +1588,14 @@ function createRecipe(name, context) {
 
 // src/utils/version.ts
 import { readFileSync as readFileSync3 } from "node:fs";
-import { dirname as dirname5, join as join8 } from "node:path";
+import { dirname as dirname5, join as join9 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 var PJANGLER_VERSION = (() => {
   try {
     let dir = dirname5(fileURLToPath3(import.meta.url));
     for (let i = 0; i < 4; i++) {
       try {
-        const raw = readFileSync3(join8(dir, "package.json"), "utf8");
+        const raw = readFileSync3(join9(dir, "package.json"), "utf8");
         return JSON.parse(raw).version ?? "0.0.0";
       } catch {
         const parent = dirname5(dir);
@@ -1451,8 +1609,8 @@ var PJANGLER_VERSION = (() => {
 })();
 
 // src/parity/index.ts
-import { existsSync as existsSync7, lstatSync, mkdirSync as mkdirSync5, readFileSync as readFileSync4, readlinkSync, readdirSync, renameSync, symlinkSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4, chmodSync, copyFileSync } from "node:fs";
-import { dirname as dirname6, join as join9, relative, resolve } from "node:path";
+import { existsSync as existsSync7, lstatSync, mkdirSync as mkdirSync5, readFileSync as readFileSync4, readlinkSync, readdirSync, renameSync, symlinkSync, unlinkSync as unlinkSync3, writeFileSync as writeFileSync4, chmodSync as chmodSync2, copyFileSync } from "node:fs";
+import { basename as basename2, dirname as dirname6, join as join10, relative, resolve } from "node:path";
 import { fileURLToPath as fileURLToPath4 } from "node:url";
 import { homedir as homedir4 } from "node:os";
 import { spawnSync as spawnSync4 } from "node:child_process";
@@ -1472,6 +1630,28 @@ enter = [
 patterns = ["AGENTS.md"]
 task = "link-agentfiles"
 
+[tasks.link-agentfiles]
+description = "Symlink all agent files to AGENTS.md"
+run = "{{config_root}}/.mise/scripts/link-agentfiles.sh"`;
+var LINK_AGENTFILES_HOOK_ENTRIES = [
+  "{{config_root}}/.mise/scripts/link-agentfiles.sh",
+  "op inject -i .env.op > .env"
+];
+var LINK_AGENTFILES_HOOKS_BLOCK = `# This block will handle the linking of
+# agent files to the main AGENTS.md file.
+#
+# TODO: Ensure this works for all levels of nesting.
+# i.e. All linked agent files MUST be siblings at
+# any given level of nesting.
+[hooks]
+enter = [
+  "{{config_root}}/.mise/scripts/link-agentfiles.sh",
+  "op inject -i .env.op > .env",
+]`;
+var LINK_AGENTFILES_WATCH_TASK_BLOCK = `[[watch_files]]
+patterns = ["AGENTS.md"]
+task = "link-agentfiles"
+
 [tasks.link-agentfiles]
 description = "Symlink all agent files to AGENTS.md"
 run = "{{config_root}}/.mise/scripts/link-agentfiles.sh"`;
@@ -1504,7 +1684,7 @@ run = "{{config_root}}/.mise/scripts/versioning.sh sync"
 function resolvePjanglerRoot() {
   let dir = dirname6(fileURLToPath4(import.meta.url));
   while (dir !== dirname6(dir)) {
-    if (existsSync7(join9(dir, "package.json")) && existsSync7(join9(dir, "templates", "commonproject", "copier.yml"))) {
+    if (existsSync7(join10(dir, "package.json")) && existsSync7(join10(dir, "templates", "commonproject", "copier.yml"))) {
       return dir;
     }
     dir = dirname6(dir);
@@ -1567,10 +1747,10 @@ function ensureSymlink(path, target, dryRun) {
   return { changed: true };
 }
 function bootstrapAgentsFile(repoRoot, dryRun) {
-  const agentsPath = join9(repoRoot, "AGENTS.md");
+  const agentsPath = join10(repoRoot, "AGENTS.md");
   if (existsSync7(agentsPath)) return { changedFiles: [], details: [] };
   for (const file of ["CLAUDE.md", "GEMINI.md"]) {
-    const source = join9(repoRoot, file);
+    const source = join10(repoRoot, file);
     if (!existsSync7(source)) continue;
     const stat = lstatSync(source);
     if (stat.isSymbolicLink()) continue;
@@ -1580,7 +1760,7 @@ function bootstrapAgentsFile(repoRoot, dryRun) {
     }
     return { changedFiles: [], details: [], blocked: `${file} exists but is not a regular file; cannot promote to AGENTS.md` };
   }
-  const readmePath = join9(repoRoot, "README.md");
+  const readmePath = join10(repoRoot, "README.md");
   if (existsSync7(readmePath)) {
     const stat = lstatSync(readmePath);
     if (!stat.isFile()) return { changedFiles: [], details: [], blocked: "README.md exists but is not a regular file; cannot copy to AGENTS.md" };
@@ -1620,11 +1800,11 @@ function yamlGet(text3, keyPath) {
   return "";
 }
 function discoverRoles(repoRoot) {
-  const rolesDir = join9(repoRoot, "agents", "hermes");
+  const rolesDir = join10(repoRoot, "agents", "hermes");
   if (!existsSync7(rolesDir)) return [];
   return readdirSync(rolesDir, { withFileTypes: true }).filter((entry) => entry.isDirectory()).map((entry) => {
-    const roleDir = join9(rolesDir, entry.name);
-    const roleYamlPath = join9(roleDir, "role.yaml");
+    const roleDir = join10(rolesDir, entry.name);
+    const roleYamlPath = join10(roleDir, "role.yaml");
     if (!existsSync7(roleYamlPath)) return null;
     const text3 = readText(roleYamlPath);
     const runtimeRepoRaw = yamlGet(text3, "runtime.github_repo");
@@ -1649,7 +1829,7 @@ function discoverRoles(repoRoot) {
   }).filter((value) => Boolean(value));
 }
 function registryPath(homeDir) {
-  return join9(homeDir, ".hermes", "agents-registry.yaml");
+  return join10(homeDir, ".hermes", "agents-registry.yaml");
 }
 function systemctlUser(args) {
   const result = spawnSync4("systemctl", ["--user", ...args], { encoding: "utf8" });
@@ -1660,7 +1840,7 @@ function systemctlUser(args) {
   };
 }
 function templateScript(ctx, name) {
-  const source = join9(ctx.pjanglerRoot, ".mise", "scripts", name);
+  const source = join10(ctx.pjanglerRoot, ".mise", "scripts", name);
   return existsSync7(source) ? readText(source) : void 0;
 }
 function templateVersioningScript(ctx) {
@@ -1669,8 +1849,24 @@ function templateVersioningScript(ctx) {
 function templateLinkAgentfilesScript(ctx) {
   return templateScript(ctx, "link-agentfiles.sh");
 }
+function renderGeneratedProjectMiseToml(ctx, template) {
+  const project = readProjectJson(ctx);
+  const projectName = String(project?.project_name ?? basename2(ctx.repoRoot) ?? "project");
+  return template.replace(/\{%\s*raw\s*%\}([\s\S]*?)\{%\s*endraw\s*%\}/g, "$1").replace(/\{\{\s*project_name\s*\}\}/g, projectName);
+}
+function ensureMiseTomlFromTemplate(ctx, changedFiles) {
+  const targetPath = join10(ctx.repoRoot, "mise.toml");
+  if (existsSync7(targetPath)) return false;
+  const sourcePath = join10(ctx.pjanglerRoot, "templates", "commonproject", "template", "mise.toml.jinja");
+  if (!existsSync7(sourcePath)) return false;
+  changedFiles.push(targetPath);
+  if (!ctx.dryRun) {
+    writeText(targetPath, renderGeneratedProjectMiseToml(ctx, readText(sourcePath)));
+  }
+  return true;
+}
 function templateVersionFilesConf(ctx, repoRoot) {
-  const packageJson = join9(repoRoot, "package.json");
+  const packageJson = join10(repoRoot, "package.json");
   return existsSync7(packageJson) ? "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag\njson package.json\ngittag .\n" : "# mise-versioning manifest: <type> <path>\n# types: json toml cargo csproj gradle plain gittag\ngittag .\n";
 }
 function replaceOrAppendManagedBlock(text3, startMarker, block, beforePattern) {
@@ -1695,7 +1891,7 @@ var CONDITIONAL_HERMES_PATHS = ["agents/hermes/pm/hermes", "agent/hermes/pm/herm
 function requiredMisePathEntries(ctx) {
   const required = [...BASE_MISE_PATH_ENTRIES];
   for (const candidate of CONDITIONAL_HERMES_PATHS) {
-    if (existsSync7(join9(ctx.repoRoot, candidate)) && !required.includes(candidate)) required.push(candidate);
+    if (existsSync7(join10(ctx.repoRoot, candidate)) && !required.includes(candidate)) required.push(candidate);
   }
   return required;
 }
@@ -1724,25 +1920,127 @@ ${text3.replace(/^\s+/, "")}`;
   if (pathLine[0] === nextLine) return text3;
   return `${prefix}${section.replace(pathLine[0], nextLine)}${suffix}`;
 }
-function upsertLinkAgentfilesBlock(text3, ctx) {
-  const withPath = upsertMisePath(text3, requiredMisePathEntries(ctx));
-  const existing = /# This block will handle the linking of[\s\S]*?\[tasks\.link-agentfiles\][\s\S]*?run = "\{\{config_root\}\}\/\.mise\/scripts\/link-agentfiles\.sh"/;
-  if (existing.test(withPath)) {
-    return withPath.replace(existing, LINK_AGENTFILES_BLOCK);
+function removeTomlSection(text3, headerPattern, marker, options) {
+  const lines = text3.split("\n");
+  let start = -1;
+  let end = -1;
+  for (let i = 0; i < lines.length; i++) {
+    if (!headerPattern.test(lines[i])) continue;
+    if (marker) {
+      let hasMarker = false;
+      for (let j = i + 1; j < lines.length && !/^\[[^\]]+\]/.test(lines[j]); j++) {
+        if (marker.test(lines[j])) {
+          hasMarker = true;
+          break;
+        }
+      }
+      if (!hasMarker) continue;
+    }
+    start = i;
+    for (let j = i + 1; j < lines.length; j++) {
+      if (/^\[[^\]]+\]/.test(lines[j])) {
+        end = j;
+        break;
+      }
+    }
+    if (end === -1) end = lines.length;
+    break;
   }
-  const versioningIndex = withPath.indexOf("# >>> mise-versioning >>>");
+  if (start === -1) return text3;
+  if (options?.includePrecedingComments) {
+    while (start > 0 && lines[start - 1].trim().startsWith("#")) {
+      start--;
+    }
+  }
+  const result = lines.slice(0, start).concat(lines.slice(end)).join("\n");
+  return result.replace(/\n{3,}/g, "\n\n").replace(/\n+$/, "\n");
+}
+function insertTomlBlockBeforeVersioning(text3, block) {
+  const versioningIndex = text3.indexOf("# >>> mise-versioning >>>");
   if (versioningIndex >= 0) {
-    return `${withPath.slice(0, versioningIndex).replace(/\s*$/, "\n\n")}${LINK_AGENTFILES_BLOCK}
+    return `${text3.slice(0, versioningIndex).replace(/\s*$/, "\n\n")}${block}
 
-${withPath.slice(versioningIndex)}`;
+${text3.slice(versioningIndex)}`;
   }
-  return `${withPath.replace(/\s*$/, "")}
+  return `${text3.replace(/\s*$/, "")}
 
-${LINK_AGENTFILES_BLOCK}
+${block}
 `;
 }
+function extractTomlStrings(text3) {
+  const values = [];
+  const stringPattern = /"((?:\\.|[^"\\])*)"|'([^']*)'/g;
+  for (const match of text3.matchAll(stringPattern)) {
+    if (match[1] !== void 0) {
+      try {
+        values.push(JSON.parse(`"${match[1]}"`));
+      } catch {
+        values.push(match[1]);
+      }
+    } else if (match[2] !== void 0) {
+      values.push(match[2]);
+    }
+  }
+  return values;
+}
+function isManagedHookEntry(value) {
+  const trimmed = value.trim();
+  return trimmed === "op inject -i .env.op > .env" || /(^|\/)link-agentfiles\.sh$/.test(trimmed);
+}
+function renderHookEntries(entries, indent = "") {
+  return [
+    `${indent}enter = [`,
+    ...entries.map((entry) => `${indent}  ${JSON.stringify(entry)},`),
+    `${indent}]`
+  ];
+}
+function upsertLinkAgentfilesHooks(text3) {
+  const lines = text3.split("\n");
+  const hooksStart = lines.findIndex((line) => /^\[hooks\]$/.test(line.trim()));
+  if (hooksStart === -1) return insertTomlBlockBeforeVersioning(text3, LINK_AGENTFILES_HOOKS_BLOCK);
+  let hooksEnd = lines.length;
+  for (let i = hooksStart + 1; i < lines.length; i++) {
+    if (/^\[[^\]]+\]/.test(lines[i].trim())) {
+      hooksEnd = i;
+      break;
+    }
+  }
+  let enterStart = -1;
+  let enterEnd = -1;
+  for (let i = hooksStart + 1; i < hooksEnd; i++) {
+    if (!/^\s*enter\s*=/.test(lines[i])) continue;
+    enterStart = i;
+    enterEnd = i + 1;
+    const afterEquals = lines[i].slice(lines[i].indexOf("=") + 1);
+    if (afterEquals.includes("[") && !afterEquals.includes("]")) {
+      while (enterEnd < hooksEnd && !lines[enterEnd].includes("]")) enterEnd++;
+      if (enterEnd < hooksEnd) enterEnd++;
+    }
+    break;
+  }
+  const existingBlock = enterStart >= 0 ? lines.slice(enterStart, enterEnd).join("\n") : "";
+  const preserved = extractTomlStrings(existingBlock).filter((entry) => !isManagedHookEntry(entry));
+  const merged = [...LINK_AGENTFILES_HOOK_ENTRIES];
+  for (const entry of preserved) {
+    if (!merged.includes(entry)) merged.push(entry);
+  }
+  const indent = enterStart >= 0 ? lines[enterStart].match(/^\s*/)?.[0] ?? "" : "";
+  const rendered = renderHookEntries(merged, indent);
+  if (enterStart >= 0) {
+    return lines.slice(0, enterStart).concat(rendered, lines.slice(enterEnd)).join("\n").replace(/\n{3,}/g, "\n\n").replace(/\n+$/, "\n");
+  }
+  return lines.slice(0, hooksStart + 1).concat(rendered, lines.slice(hooksStart + 1)).join("\n").replace(/\n{3,}/g, "\n\n").replace(/\n+$/, "\n");
+}
+function upsertLinkAgentfilesBlock(text3, ctx) {
+  const withPath = upsertMisePath(text3, requiredMisePathEntries(ctx));
+  if (withPath.includes(LINK_AGENTFILES_BLOCK)) return withPath;
+  let cleaned = removeTomlSection(withPath, /^\[tasks\.link-agentfiles\]$/, /link-agentfiles/, { includePrecedingComments: false });
+  cleaned = removeTomlSection(cleaned, /^\[\[watch_files\]\]$/, /AGENTS\.md/, { includePrecedingComments: false });
+  cleaned = upsertLinkAgentfilesHooks(cleaned);
+  return insertTomlBlockBeforeVersioning(cleaned, LINK_AGENTFILES_WATCH_TASK_BLOCK);
+}
 function readProjectJson(ctx) {
-  return tryParseJson(safeReadText(join9(ctx.repoRoot, ".project.json")));
+  return tryParseJson(safeReadText(join10(ctx.repoRoot, ".project.json")));
 }
 function canonicalProjectJson(ctx) {
   const roles = discoverRoles(ctx.repoRoot);
@@ -1754,28 +2052,40 @@ function canonicalProjectJson(ctx) {
     workspace: String((existing.ticket_provider?.workspace ?? firstRole?.planeWorkspace ?? "") || ""),
     identifier: String((existing.ticket_provider?.identifier ?? firstRole?.ticketProviderIdentifier ?? "") || ""),
     board_id: String((existing.ticket_provider?.board_id ?? firstRole?.ticketProviderBoardId ?? "") || ""),
-    board_url: String((existing.ticket_provider?.board_url ?? firstRole?.ticketProviderBoardUrl ?? "") || "")
+    board_url: String((existing.ticket_provider?.board_url ?? firstRole?.ticketProviderBoardUrl ?? "") || ""),
+    state: String((existing.ticket_provider?.state ?? "planned") || "planned")
   };
+  const existingAgents = existing.agents ?? {};
+  const discoveredAgents = Object.fromEntries(
+    roles.map((role) => [
+      role.agentId || `${slug}-${role.role}`,
+      {
+        role: role.role,
+        role_dir: relative(ctx.repoRoot, role.roleDir)
+      }
+    ])
+  );
+  const agents = { ...existingAgents };
+  for (const [agentId, discovered] of Object.entries(discoveredAgents)) {
+    const existingAgent = existingAgents[agentId] ?? {};
+    agents[agentId] = {
+      role: discovered.role,
+      role_dir: discovered.role_dir,
+      provisioning_state: existingAgent.provisioning_state
+    };
+  }
   return {
     project_name: String(existing.project_name ?? titleCaseSlug(slug)),
     project_description: String(existing.project_description ?? ""),
     project_slug: slug,
     repo_path: ctx.repoRoot,
     ticket_provider: ticketProvider,
-    agents: Object.fromEntries(
-      roles.map((role) => [
-        role.agentId || `${slug}-${role.role}`,
-        {
-          role: role.role,
-          role_dir: relative(ctx.repoRoot, role.roleDir)
-        }
-      ])
-    )
+    agents
   };
 }
 function projectJsonFinding(ctx) {
-  const projectPath = join9(ctx.repoRoot, ".project.json");
-  const planeJsonPath = join9(ctx.repoRoot, ".plane.json");
+  const projectPath = join10(ctx.repoRoot, ".project.json");
+  const planeJsonPath = join10(ctx.repoRoot, ".plane.json");
   const details = [];
   const data = readProjectJson(ctx);
   const roles = discoverRoles(ctx.repoRoot);
@@ -1802,7 +2112,7 @@ function projectJsonFinding(ctx) {
     }
   }
   const ticketProvider = data.ticket_provider ?? {};
-  for (const key of ["type", "workspace", "identifier", "board_id", "board_url"]) {
+  for (const key of ["type", "workspace", "identifier", "board_id", "board_url", "state"]) {
     if (!(key in ticketProvider)) details.push(`ticket_provider.${key} missing`);
   }
   if (existsSync7(planeJsonPath)) details.push(".plane.json should not exist once .project.json is canonical");
@@ -1889,9 +2199,9 @@ function copyMissingRecursive(sourceDir, targetDir, changedFiles, dryRun, skip)
   if (!existsSync7(sourceDir)) return;
   mkdirSync5(targetDir, { recursive: true });
   for (const entry of readdirSync(sourceDir, { withFileTypes: true })) {
-    const sourcePath = join9(sourceDir, entry.name);
+    const sourcePath = join10(sourceDir, entry.name);
     if (skip?.(sourcePath)) continue;
-    const targetPath = join9(targetDir, entry.name);
+    const targetPath = join10(targetDir, entry.name);
     if (entry.isDirectory()) {
       copyMissingRecursive(sourcePath, targetPath, changedFiles, dryRun, skip);
       continue;
@@ -1905,7 +2215,7 @@ function copyMissingRecursive(sourceDir, targetDir, changedFiles, dryRun, skip)
   }
 }
 function upsertSubmodule(repoRoot, role, changedFiles, dryRun) {
-  const gitmodulesPath = join9(repoRoot, ".gitmodules");
+  const gitmodulesPath = join10(repoRoot, ".gitmodules");
   const repoName = role.runtimeRepo || `agent-hm-${role.repo}-${role.role}`;
   const owner = role.runtimeOwner || "delorenj";
   const block = `[submodule "agents/hermes/${role.role}/runtime"]
@@ -2005,13 +2315,13 @@ var RULES = [
     id: "mise.config-root",
     title: "mise config_root + AGENTS link hooks",
     audit: (ctx) => {
-      const misePath = join9(ctx.repoRoot, "mise.toml");
+      const misePath = join10(ctx.repoRoot, "mise.toml");
       if (!existsSync7(misePath)) {
         return { id: "mise.config-root", title: "mise config_root + AGENTS link hooks", status: "fail", summary: "mise.toml missing", details: [], fixable: true };
       }
       const text3 = readText(misePath);
       const details = [];
-      const linkAgentfilesPath = join9(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
+      const linkAgentfilesPath = join10(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
       if (!existsSync7(linkAgentfilesPath)) details.push(".mise/scripts/link-agentfiles.sh missing");
       const pathValues = [...(text3.match(/^_\.path\s*=\s*\[([^\]]*)\]/m)?.[1] ?? "").matchAll(/"([^"]+)"/g)].map((match) => match[1]);
       const missingPathValues = requiredMisePathEntries(ctx).filter((value) => !pathValues.includes(value));
@@ -2030,19 +2340,26 @@ var RULES = [
       };
     },
     migrate: (ctx, finding) => {
-      const path = join9(ctx.repoRoot, "mise.toml");
+      const path = join10(ctx.repoRoot, "mise.toml");
       const changedFiles = [];
+      const details = [];
       if (!existsSync7(path)) {
-        return { id: finding.id, title: finding.title, status: "blocked", summary: "mise.toml missing; initialize mise first", changedFiles, details: [] };
+        if (!ensureMiseTomlFromTemplate(ctx, changedFiles)) {
+          return { id: finding.id, title: finding.title, status: "blocked", summary: "mise.toml missing and no generated-project mise template available to initialize from", changedFiles, details: [] };
+        }
+        details.push("Initialized mise.toml from generated-project template");
+        if (ctx.dryRun) {
+          return { id: finding.id, title: finding.title, status: "applied", summary: "Would initialize mise.toml from generated-project template", changedFiles, details };
+        }
       }
       let text3 = readText(path);
       const next = upsertLinkAgentfilesBlock(text3, ctx);
       if (next !== text3) {
-        changedFiles.push(path);
+        if (!changedFiles.includes(path)) changedFiles.push(path);
         if (!ctx.dryRun) writeText(path, next);
         text3 = next;
       }
-      const linkAgentfilesPath = join9(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
+      const linkAgentfilesPath = join10(ctx.repoRoot, ".mise", "scripts", "link-agentfiles.sh");
       const expectedScript = templateLinkAgentfilesScript(ctx);
       if (expectedScript === void 0) {
         return { id: finding.id, title: finding.title, status: "blocked", summary: "pjangler install is missing .mise/scripts/link-agentfiles.sh \u2014 update @delorenj/pjangler (broken package)", changedFiles, details: [] };
@@ -2051,7 +2368,7 @@ var RULES = [
         changedFiles.push(linkAgentfilesPath);
         if (!ctx.dryRun) {
           writeText(linkAgentfilesPath, expectedScript);
-          chmodSync(linkAgentfilesPath, 493);
+          chmodSync2(linkAgentfilesPath, 493);
         }
       }
       return {
@@ -2069,9 +2386,9 @@ var RULES = [
     title: "managed mise versioning block",
     audit: (ctx) => {
       const details = [];
-      const misePath = join9(ctx.repoRoot, "mise.toml");
-      const versioningPath = join9(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
-      const manifestPath = join9(ctx.repoRoot, ".mise", "version-files.conf");
+      const misePath = join10(ctx.repoRoot, "mise.toml");
+      const versioningPath = join10(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
+      const manifestPath = join10(ctx.repoRoot, ".mise", "version-files.conf");
       const text3 = safeReadText(misePath);
       if (!text3?.includes("# >>> mise-versioning >>>")) details.push("mise versioning managed block missing");
       if (!existsSync7(versioningPath)) details.push(".mise/scripts/versioning.sh missing");
@@ -2087,17 +2404,24 @@ var RULES = [
     },
     migrate: (ctx, finding) => {
       const changedFiles = [];
-      const misePath = join9(ctx.repoRoot, "mise.toml");
+      const details = [];
+      const misePath = join10(ctx.repoRoot, "mise.toml");
       if (!existsSync7(misePath)) {
-        return { id: finding.id, title: finding.title, status: "blocked", summary: "mise.toml missing; cannot inject versioning block", changedFiles, details: [] };
+        if (!ensureMiseTomlFromTemplate(ctx, changedFiles)) {
+          return { id: finding.id, title: finding.title, status: "blocked", summary: "mise.toml missing and no generated-project mise template available to initialize from", changedFiles, details: [] };
+        }
+        details.push("Initialized mise.toml from generated-project template");
+        if (ctx.dryRun) {
+          return { id: finding.id, title: finding.title, status: "applied", summary: "Would initialize mise.toml from generated-project template", changedFiles, details };
+        }
       }
       const currentMise = readText(misePath);
       const nextMise = replaceOrAppendManagedBlock(currentMise, /# >>> mise-versioning >>>/, VERSIONING_BLOCK, /^\[tasks\.build\]/m);
       if (nextMise !== currentMise) {
-        changedFiles.push(misePath);
+        if (!changedFiles.includes(misePath)) changedFiles.push(misePath);
         if (!ctx.dryRun) writeText(misePath, nextMise);
       }
-      const versioningPath = join9(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
+      const versioningPath = join10(ctx.repoRoot, ".mise", "scripts", "versioning.sh");
       const expectedScript = templateVersioningScript(ctx);
       if (expectedScript === void 0) {
         return { id: finding.id, title: finding.title, status: "blocked", summary: "pjangler install is missing .mise/scripts/versioning.sh \u2014 update @delorenj/pjangler (broken package)", changedFiles, details: [] };
@@ -2106,10 +2430,10 @@ var RULES = [
         changedFiles.push(versioningPath);
         if (!ctx.dryRun) {
           writeText(versioningPath, expectedScript);
-          chmodSync(versioningPath, 493);
+          chmodSync2(versioningPath, 493);
         }
       }
-      const manifestPath = join9(ctx.repoRoot, ".mise", "version-files.conf");
+      const manifestPath = join10(ctx.repoRoot, ".mise", "version-files.conf");
       const expectedManifest = templateVersionFilesConf(ctx, ctx.repoRoot);
       if (safeReadText(manifestPath) !== expectedManifest) {
         changedFiles.push(manifestPath);
@@ -2129,9 +2453,9 @@ var RULES = [
     id: "sot.agent-symlinks",
     title: "AGENTS/CLAUDE/GEMINI symlink contract",
     audit: (ctx) => {
-      const agentsPath = join9(ctx.repoRoot, "AGENTS.md");
+      const agentsPath = join10(ctx.repoRoot, "AGENTS.md");
       if (!existsSync7(agentsPath)) {
-        const fallbackSources = ["CLAUDE.md", "GEMINI.md", "README.md"].filter((file) => existsSync7(join9(ctx.repoRoot, file)));
+        const fallbackSources = ["CLAUDE.md", "GEMINI.md", "README.md"].filter((file) => existsSync7(join10(ctx.repoRoot, file)));
         if (fallbackSources.length === 0) {
           return { id: "sot.agent-symlinks", title: "AGENTS/CLAUDE/GEMINI symlink contract", status: "skip", summary: "AGENTS.md missing; symlink contract not applicable", details: [], fixable: false };
         }
@@ -2146,7 +2470,7 @@ var RULES = [
       }
       const details = [];
       for (const file of ["CLAUDE.md", "GEMINI.md"]) {
-        const full = join9(ctx.repoRoot, file);
+        const full = join10(ctx.repoRoot, file);
         const target = readSymlinkTarget(full);
         if (target !== "AGENTS.md") details.push(`${file} should be a symlink to AGENTS.md`);
       }
@@ -2170,7 +2494,7 @@ var RULES = [
         return { id: finding.id, title: finding.title, status: "blocked", summary: "AGENTS.md missing; cannot derive canonical agent file", changedFiles, details: [bootstrap.blocked] };
       }
       for (const file of ["CLAUDE.md", "GEMINI.md"]) {
-        const full = join9(ctx.repoRoot, file);
+        const full = join10(ctx.repoRoot, file);
         const result = ensureSymlink(full, "AGENTS.md", ctx.dryRun);
         if (result.blocked) blockedDetails.push(result.blocked);
         if (result.changed) changedFiles.push(full);
@@ -2192,7 +2516,7 @@ var RULES = [
     migrate: (ctx, finding) => {
       const changedFiles = [];
       const details = [];
-      const path = join9(ctx.repoRoot, ".project.json");
+      const path = join10(ctx.repoRoot, ".project.json");
       const existing = readProjectJson(ctx) ?? {};
       const canonical = canonicalProjectJson(ctx);
       const merged = { ...existing, ...canonical };
@@ -2202,7 +2526,7 @@ var RULES = [
         changedFiles.push(path);
         if (!ctx.dryRun) writeText(path, expected);
       }
-      const planeJson = join9(ctx.repoRoot, ".plane.json");
+      const planeJson = join10(ctx.repoRoot, ".plane.json");
       if (existsSync7(planeJson)) {
         const backup = `${planeJson}.migrated-backup`;
         if (existsSync7(backup)) {
@@ -2227,14 +2551,15 @@ var RULES = [
     title: ".env.op + gitignore secrets contract",
     audit: (ctx) => {
       const details = [];
-      const envOp = safeReadText(join9(ctx.repoRoot, ".env.op"));
-      const gitignore = safeReadText(join9(ctx.repoRoot, ".gitignore"));
+      const envOp = safeReadText(join10(ctx.repoRoot, ".env.op"));
+      const gitignore = safeReadText(join10(ctx.repoRoot, ".gitignore"));
       if (!envOp) {
         details.push(".env.op missing");
       } else {
         const invalidLines = envOp.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#") && line.includes("=")).filter((line) => {
           const value = line.slice(line.indexOf("=") + 1).trim();
-          return !value.startsWith("op://") && !/^https?:\/\//.test(value) && !/^[A-Za-z0-9_.:-]+$/.test(value);
+          const quotedLiteral = /^"[^"\r\n]*"$/.test(value) || /^'[^'\r\n]*'$/.test(value);
+          return !value.startsWith("op://") && !/^https?:\/\//.test(value) && !/^[A-Za-z0-9_.:-]+$/.test(value) && !quotedLiteral;
         });
         if (invalidLines.length) details.push(`.env.op has non-reference values that do not look like safe literals: ${invalidLines.join(", ")}`);
       }
@@ -2253,12 +2578,12 @@ var RULES = [
     migrate: (ctx, finding) => {
       const changedFiles = [];
       const details = [];
-      const envOpPath = join9(ctx.repoRoot, ".env.op");
+      const envOpPath = join10(ctx.repoRoot, ".env.op");
       if (!existsSync7(envOpPath)) {
         changedFiles.push(envOpPath);
-        if (!ctx.dryRun) writeText(envOpPath, readText(join9(ctx.pjanglerRoot, "templates", "commonproject", "template", ".env.op")));
+        if (!ctx.dryRun) writeText(envOpPath, readText(join10(ctx.pjanglerRoot, "templates", "commonproject", "template", ".env.op")));
       }
-      const gitignorePath = join9(ctx.repoRoot, ".gitignore");
+      const gitignorePath = join10(ctx.repoRoot, ".gitignore");
       const gitignore = safeReadText(gitignorePath) ?? "";
       const requiredBlock = `# Secrets \u2014 .env is materialized by \`op inject -i .env.op > .env\` on mise enter.
 # NEVER commit it. .env.op holds only 1Password references or safe literals and IS committed.
@@ -2285,7 +2610,7 @@ var RULES = [
     title: ".copier-answers.yml provenance + drift report",
     audit: (ctx) => {
       const details = [];
-      const path = join9(ctx.repoRoot, ".copier-answers.yml");
+      const path = join10(ctx.repoRoot, ".copier-answers.yml");
       const text3 = safeReadText(path);
       const project = readProjectJson(ctx);
       if (!text3) {
@@ -2316,12 +2641,12 @@ var RULES = [
       const changedFiles = [];
       const project = canonicalProjectJson(ctx);
       const text3 = `# Changes here will be overwritten by Copier; NEVER EDIT MANUALLY
-_src_path: ${join9(ctx.pjanglerRoot, "templates", "commonproject")}
+_src_path: ${join10(ctx.pjanglerRoot, "templates", "commonproject")}
 project_description: ${String(project.project_description)}
 project_name: ${String(project.project_name)}
 ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
 `;
-      const path = join9(ctx.repoRoot, ".copier-answers.yml");
+      const path = join10(ctx.repoRoot, ".copier-answers.yml");
       if (safeReadText(path) !== text3) {
         changedFiles.push(path);
         if (!ctx.dryRun) writeText(path, text3);
@@ -2340,15 +2665,15 @@ ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
     id: "bmad.scaffold",
     title: "BMAD modules/docs scaffold",
     audit: (ctx) => {
-      const sourceRoot = join9(ctx.pjanglerRoot, "templates", "commonproject", "_bmad");
-      const targetRoot = join9(ctx.repoRoot, "_bmad");
+      const sourceRoot = join10(ctx.pjanglerRoot, "templates", "commonproject", "_bmad");
+      const targetRoot = join10(ctx.repoRoot, "_bmad");
       const sentinels = [
-        join9("core", "config.yaml"),
-        join9("custom", "config.yaml"),
-        join9("custom", "workflows", "ticket-lifecycle", "workflow.yaml"),
-        join9("bmm", "workflows", "workflow-status", "workflow.yaml")
+        join10("core", "config.yaml"),
+        join10("custom", "config.yaml"),
+        join10("custom", "workflows", "ticket-lifecycle", "workflow.yaml"),
+        join10("bmm", "workflows", "workflow-status", "workflow.yaml")
       ];
-      const missing = sentinels.filter((file) => existsSync7(join9(sourceRoot, file)) && !existsSync7(join9(targetRoot, file)));
+      const missing = sentinels.filter((file) => existsSync7(join10(sourceRoot, file)) && !existsSync7(join10(targetRoot, file)));
       return {
         id: "bmad.scaffold",
         title: "BMAD modules/docs scaffold",
@@ -2360,7 +2685,7 @@ ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
     },
     migrate: (ctx, finding) => {
       const changedFiles = [];
-      copyMissingRecursive(join9(ctx.pjanglerRoot, "templates", "commonproject", "_bmad"), join9(ctx.repoRoot, "_bmad"), changedFiles, ctx.dryRun);
+      copyMissingRecursive(join10(ctx.pjanglerRoot, "templates", "commonproject", "_bmad"), join10(ctx.repoRoot, "_bmad"), changedFiles, ctx.dryRun);
       return {
         id: finding.id,
         title: finding.title,
@@ -2382,11 +2707,11 @@ ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
       }
       const details = [];
       for (const rel of ["role.yaml", "SOUL.md", "hermes", ".gitignore", ".scripts/70-systemd.sh", ".scripts/heartbeat.sh", ".scripts/checkpoint.sh", ".runtime-scaffold/README.md", "runtime/memories/MEMORY.md", "runtime/bloodbank-consumer.py"]) {
-        if (!existsSync7(join9(role.roleDir, rel))) details.push(`missing ${relative(ctx.repoRoot, join9(role.roleDir, rel))}`);
+        if (!existsSync7(join10(role.roleDir, rel))) details.push(`missing ${relative(ctx.repoRoot, join10(role.roleDir, rel))}`);
       }
-      const gitmodules = safeReadText(join9(ctx.repoRoot, ".gitmodules")) ?? "";
+      const gitmodules = safeReadText(join10(ctx.repoRoot, ".gitmodules")) ?? "";
       if (!gitmodules.includes(`agents/hermes/${role.role}/runtime`)) details.push(".gitmodules missing pm runtime submodule entry");
-      if (!profileMetaInheritsDefault(join9(role.roleDir, "runtime", "profile.yaml"))) {
+      if (!profileMetaInheritsDefault(join10(role.roleDir, "runtime", "profile.yaml"))) {
         details.push("runtime/profile.yaml missing inherited default config metadata");
       }
       const registry = safeReadText(registryPath(ctx.homeDir));
@@ -2407,21 +2732,21 @@ ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
       if (!role) {
         return { id: finding.id, title: finding.title, status: "blocked", summary: "No pm role present", changedFiles, details: [] };
       }
-      const templateRoleDir = join9(ctx.pjanglerRoot, "templates", "hermes-agent", "template");
-      writeIfDifferent(join9(role.roleDir, "SOUL.md"), renderSoul(role), ctx.dryRun, changedFiles);
-      writeIfDifferent(join9(role.roleDir, "hermes"), renderHermesWrapper(role), ctx.dryRun, changedFiles, 493);
-      writeIfDifferent(join9(role.roleDir, ".gitignore"), readText(join9(templateRoleDir, ".gitignore.jinja")).replace(/\{\{ role \}\}/g, role.role), ctx.dryRun, changedFiles);
-      copyMissingRecursive(join9(templateRoleDir, ".runtime-scaffold"), join9(role.roleDir, ".runtime-scaffold"), changedFiles, ctx.dryRun);
-      copyMissingRecursive(join9(templateRoleDir, ".runtime-scaffold"), join9(role.roleDir, "runtime"), changedFiles, ctx.dryRun);
-      copyMissingRecursive(join9(templateRoleDir, ".scripts"), join9(role.roleDir, ".scripts"), changedFiles, ctx.dryRun, (source) => source.endsWith("sentinel.prompt.md.jinja"));
-      const promptSource = join9(templateRoleDir, ".scripts", "sentinel.prompt.md.jinja");
-      const promptTarget = join9(role.roleDir, ".scripts", "sentinel.prompt.md");
+      const templateRoleDir = join10(ctx.pjanglerRoot, "templates", "hermes-agent", "template");
+      writeIfDifferent(join10(role.roleDir, "SOUL.md"), renderSoul(role), ctx.dryRun, changedFiles);
+      writeIfDifferent(join10(role.roleDir, "hermes"), renderHermesWrapper(role), ctx.dryRun, changedFiles, 493);
+      writeIfDifferent(join10(role.roleDir, ".gitignore"), readText(join10(templateRoleDir, ".gitignore.jinja")).replace(/\{\{ role \}\}/g, role.role), ctx.dryRun, changedFiles);
+      copyMissingRecursive(join10(templateRoleDir, ".runtime-scaffold"), join10(role.roleDir, ".runtime-scaffold"), changedFiles, ctx.dryRun);
+      copyMissingRecursive(join10(templateRoleDir, ".runtime-scaffold"), join10(role.roleDir, "runtime"), changedFiles, ctx.dryRun);
+      copyMissingRecursive(join10(templateRoleDir, ".scripts"), join10(role.roleDir, ".scripts"), changedFiles, ctx.dryRun, (source) => source.endsWith("sentinel.prompt.md.jinja"));
+      const promptSource = join10(templateRoleDir, ".scripts", "sentinel.prompt.md.jinja");
+      const promptTarget = join10(role.roleDir, ".scripts", "sentinel.prompt.md");
       if (existsSync7(promptSource) && !existsSync7(promptTarget)) {
         const prompt = readText(promptSource).replace(/\{\{ agent_id \}\}/g, role.agentId).replace(/\{\{ role \}\}/g, role.role).replace(/\{\{ target_repo \}\}/g, role.repo).replace(/\{\{ display_name \}\}/g, role.displayName || role.agentId);
         writeIfDifferent(promptTarget, prompt, ctx.dryRun, changedFiles);
       }
       upsertSubmodule(ctx.repoRoot, role, changedFiles, ctx.dryRun);
-      const profileMetaUpdated = upsertInheritedProfileMeta(join9(role.roleDir, "runtime", "profile.yaml"), changedFiles, ctx.dryRun);
+      const profileMetaUpdated = upsertInheritedProfileMeta(join10(role.roleDir, "runtime", "profile.yaml"), changedFiles, ctx.dryRun);
       if (profileMetaUpdated) details.push(`updated ${profileMetaUpdated}`);
       const registryUpdated = upsertRegistryEntry(role, ctx.homeDir, changedFiles, ctx.dryRun);
       if (registryUpdated) details.push(`updated ${registryUpdated}`);
@@ -2475,9 +2800,9 @@ ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
         return { id: finding.id, title: finding.title, status: "blocked", summary: "systemd --user unavailable on this host", changedFiles, details };
       }
       for (const role of roles) {
-        const sysDir = join9(ctx.homeDir, ".config", "systemd", "user");
+        const sysDir = join10(ctx.homeDir, ".config", "systemd", "user");
         const units = [`hermes-${role.agentId}-gateway.service`, `hermes-${role.agentId}-consumer.service`, `hermes-${role.agentId}-heartbeat.timer`];
-        const allUnitsPresent = units.every((unit) => existsSync7(join9(sysDir, unit)));
+        const allUnitsPresent = units.every((unit) => existsSync7(join10(sysDir, unit)));
         if (allUnitsPresent) {
           if (ctx.dryRun) {
             details.push(`would run: systemctl --user enable --now ${units.join(" ")}`);
@@ -2489,7 +2814,7 @@ ticket_provider: ${String(project.ticket_provider?.type ?? "plane")}
           }
           continue;
         }
-        for (const script of [join9(role.roleDir, ".scripts", "70-systemd.sh")]) {
+        for (const script of [join10(role.roleDir, ".scripts", "70-systemd.sh")]) {
           if (!script || !existsSync7(script)) continue;
           if (ctx.dryRun) {
             details.push(`would run: bash ${script}`);
@@ -2517,7 +2842,7 @@ function writeIfDifferent(path, content, dryRun, changedFiles, mode) {
   changedFiles.push(path);
   if (!dryRun) {
     writeText(path, normalized);
-    if (mode) chmodSync(path, mode);
+    if (mode) chmodSync2(path, mode);
   }
 }
 function getParityRuleIds() {
@@ -2539,7 +2864,7 @@ function runAudit(repoArg) {
     rules
   };
 }
-function runMigration(selector, repoArg, dryRun, all) {
+function runMigrationForRules(ruleIds, repoArg, dryRun) {
   const pjanglerRoot = resolvePjanglerRoot();
   const ctx = {
     repoRoot: resolve(repoArg ?? process.cwd()),
@@ -2547,9 +2872,9 @@ function runMigration(selector, repoArg, dryRun, all) {
     pjanglerRoot,
     homeDir: homedir4()
   };
-  const selected = all ? RULES : RULES.filter((rule) => rule.id === selector);
+  const selected = RULES.filter((rule) => ruleIds.includes(rule.id));
   if (!selected.length) {
-    throw new Error(`Unknown parity rule: ${selector}`);
+    throw new Error(`Unknown parity rules: ${ruleIds.join(", ")}`);
   }
   const results = selected.map((rule) => {
     try {
@@ -2575,14 +2900,391 @@ function runMigration(selector, repoArg, dryRun, all) {
     changedFiles
   };
 }
+function runMigration(selector, repoArg, dryRun, all) {
+  const ruleIds = all ? RULES.map((rule) => rule.id) : selector ? [selector] : [];
+  return runMigrationForRules(ruleIds, repoArg, dryRun);
+}
+function prettyTimestamp(iso) {
+  const match = /^(\d{4}-\d{2}-\d{2})T(\d{2}:\d{2}:\d{2})/.exec(iso);
+  return match ? `${match[1]} ${match[2]} UTC` : iso;
+}
 function formatAuditReport(report) {
-  const lines = [`repo: ${report.repo}`, `ok: ${report.ok}`, `audited_at: ${report.auditedAt}`, "rules:"];
+  const counts = {};
+  for (const rule of report.rules) counts[rule.status] = (counts[rule.status] ?? 0) + 1;
+  const idWidth = report.rules.reduce((width, rule) => Math.max(width, rule.id.length), 0);
+  const tally = [];
+  if (counts.pass) tally.push(green(`${counts.pass} passed`));
+  if (counts.fail) tally.push(red(`${counts.fail} failed`));
+  if (counts.warn) tally.push(yellow(`${counts.warn} warning${counts.warn === 1 ? "" : "s"}`));
+  if (counts.skip) tally.push(gray(`${counts.skip} skipped`));
+  const overall = report.ok ? `${green(glyph.pass)} ${bold("Parity audit passed")}` : `${red(glyph.fail)} ${bold("Parity audit failed")}`;
+  const lines = [""];
+  lines.push(`  ${overall}${tally.length ? `  ${dim(glyph.dot)}  ${joinDot(tally)}` : ""}`);
+  lines.push(`  ${dim(report.repo)}  ${dim(glyph.dot)}  ${dim(prettyTimestamp(report.auditedAt))}`);
+  lines.push("");
   for (const rule of report.rules) {
-    lines.push(`- ${rule.id} [${rule.status}] ${rule.summary}`);
-    for (const detail of rule.details) lines.push(`    - ${detail}`);
+    const style = statusStyle(rule.status);
+    lines.push(`  ${style.color(style.glyph)}  ${style.color(rule.id.padEnd(idWidth))}  ${rule.summary}`);
+    for (const detail of rule.details) lines.push(`     ${dim(glyph.arrow)} ${dim(detail)}`);
+  }
+  lines.push("");
+  return lines.join("\n");
+}
+
+// src/project/index.ts
+import { spawnSync as spawnSync5 } from "node:child_process";
+import { existsSync as existsSync8, mkdirSync as mkdirSync6, readFileSync as readFileSync5, renameSync as renameSync2, statSync, writeFileSync as writeFileSync5 } from "node:fs";
+import { homedir as homedir5 } from "node:os";
+import { basename as basename3, dirname as dirname7, join as join11, resolve as resolve2 } from "node:path";
+import YAML from "yaml";
+var PROJECT_REGISTRY_ENV = "PJ_PROJECT_REGISTRY";
+var PROJECT_REGISTRY_SCHEMA_VERSION = 1;
+var KNOWN_SKILL_ROOTS = [
+  "/home/delorenj/code/skillex/all-skills",
+  "/home/delorenj/code/CoachingAgentFramework/.agents/skills",
+  "/home/delorenj/code/pjangler/.agents/skills",
+  join11(homedir5(), ".codex", "skills")
+];
+function projectRegistryPath(env2 = process.env) {
+  return expandHome(env2[PROJECT_REGISTRY_ENV] || join11(homedir5(), ".config", "pjangler", "projects.yaml"));
+}
+function emptyProjectRegistry() {
+  return { schema_version: PROJECT_REGISTRY_SCHEMA_VERSION, projects: {} };
+}
+function loadProjectRegistry(path = projectRegistryPath()) {
+  if (!existsSync8(path)) return emptyProjectRegistry();
+  const raw = YAML.parse(readFileSync5(path, "utf8"));
+  if (raw == null) return emptyProjectRegistry();
+  if (!isRecord(raw)) throw new Error(`Project registry must be a mapping: ${path}`);
+  const registry = raw;
+  const normalized = {
+    schema_version: Number(registry.schema_version ?? PROJECT_REGISTRY_SCHEMA_VERSION),
+    projects: isRecord(registry.projects) ? registry.projects : {}
+  };
+  validateProjectRegistry(normalized);
+  return normalized;
+}
+function saveProjectRegistry(registry, path = projectRegistryPath()) {
+  validateProjectRegistry(registry);
+  mkdirSync6(dirname7(path), { recursive: true });
+  const temp = `${path}.${process.pid}.${Date.now()}.tmp`;
+  writeFileSync5(temp, YAML.stringify(registry, { lineWidth: 0 }), "utf8");
+  renameSync2(temp, path);
+}
+function validateProjectRegistry(registry) {
+  if (registry.schema_version !== PROJECT_REGISTRY_SCHEMA_VERSION) {
+    throw new Error(`Unsupported project registry schema_version: ${registry.schema_version}`);
+  }
+  if (!isRecord(registry.projects)) throw new Error("Project registry projects must be a mapping");
+  const slugs = /* @__PURE__ */ new Set();
+  const repoPaths = /* @__PURE__ */ new Map();
+  const identifiers = /* @__PURE__ */ new Map();
+  for (const [slug, project] of Object.entries(registry.projects)) {
+    validateProjectRecord(project, slug);
+    if (slugs.has(project.slug)) throw new Error(`Duplicate project slug: ${project.slug}`);
+    slugs.add(project.slug);
+    const repoKey = resolve2(project.repo_path);
+    const existingRepoSlug = repoPaths.get(repoKey);
+    if (existingRepoSlug && existingRepoSlug !== slug) {
+      throw new Error(`Duplicate project repo_path: ${project.repo_path} used by ${existingRepoSlug} and ${slug}`);
+    }
+    repoPaths.set(repoKey, slug);
+    const identifier = project.ticket_provider.identifier?.toUpperCase();
+    if (identifier) {
+      const existingIdentifierSlug = identifiers.get(identifier);
+      if (existingIdentifierSlug && existingIdentifierSlug !== slug) {
+        throw new Error(`Duplicate project identifier: ${identifier} used by ${existingIdentifierSlug} and ${slug}`);
+      }
+      identifiers.set(identifier, slug);
+    }
   }
-  return `${lines.join("\n")}
+}
+function slugifyProjectName(value) {
+  return value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "project";
+}
+function deriveProjectIdentifier(value) {
+  const compact = value.replace(/[^A-Za-z0-9]/g, "").toUpperCase();
+  const identifier = compact.slice(0, 4) || "PROJ";
+  return identifier.length >= 2 ? identifier : `${identifier}XX`.slice(0, 4);
+}
+function normalizeAgentRole(value) {
+  return value?.trim() || "pm";
+}
+function jsonStable(value) {
+  return JSON.stringify(value);
+}
+function projectRecordEquivalent(a, b) {
+  if (!a) return false;
+  const { created_at: _aCreated, updated_at: _aUpdated, ...aComparable } = a;
+  const { created_at: _bCreated, updated_at: _bUpdated, ...bComparable } = b;
+  return jsonStable(aComparable) === jsonStable(bComparable);
+}
+function defaultProjectTargetDir(name, cwd = process.cwd()) {
+  const compactName = name.replace(/[^A-Za-z0-9._-]/g, "") || slugifyProjectName(name);
+  return resolve2(dirname7(resolve2(cwd)), compactName);
+}
+function resolveSourceSkillPath(sourceSkill) {
+  if (!sourceSkill) return void 0;
+  const expanded = expandHome(sourceSkill);
+  const direct = resolve2(expanded);
+  if (existsSync8(direct)) return direct;
+  const name = basename3(sourceSkill);
+  for (const root of KNOWN_SKILL_ROOTS) {
+    const candidate = join11(root, name);
+    if (existsSync8(candidate)) return candidate;
+  }
+  const civilWarLetterifier = "/home/delorenj/code/skillex/all-skills/civilwar-letterifier";
+  const hint = existsSync8(civilWarLetterifier) ? ` Did you mean ${civilWarLetterifier}?` : "";
+  throw new Error(`Source skill not found: ${sourceSkill}.${hint}`);
+}
+function planProjectInit(input) {
+  if (!input.name.trim()) throw new Error("Project name is required");
+  const registryPath2 = resolve2(projectRegistryPath({ ...process.env, [PROJECT_REGISTRY_ENV]: input.registryPath || process.env[PROJECT_REGISTRY_ENV] }));
+  const registry = loadProjectRegistry(registryPath2);
+  const now = (input.now ?? /* @__PURE__ */ new Date()).toISOString();
+  const slug = input.projectSlug ?? slugifyProjectName(input.name);
+  const targetDir = resolve2(input.targetDir ?? defaultProjectTargetDir(input.name, input.cwd));
+  const identifier = (input.projectIdentifier ?? deriveProjectIdentifier(input.name)).toUpperCase();
+  const existing = registry.projects[slug];
+  const sourceSkillPath = resolveSourceSkillPath(input.sourceSkill);
+  const overwrite = input.overwrite ?? input.force ?? false;
+  const agentRole = normalizeAgentRole(input.agentRole);
+  const agents = input.provisionAgent ? {
+    ...existing?.agents ?? {},
+    [agentRole]: {
+      role: agentRole,
+      provisioning_state: "planned"
+    }
+  } : existing?.agents ?? {};
+  const scaffold = input.scaffold ?? true;
+  const candidateProject = {
+    name: input.name,
+    slug,
+    repo_path: targetDir,
+    description: input.description ?? "",
+    status: "planned",
+    source_artifacts: sourceSkillPath ? [{ kind: "skill", path: sourceSkillPath, package_name: input.packageName ?? slug }] : [],
+    template: {
+      commonproject: {
+        enabled: true,
+        primary_language: input.primaryLanguage ?? "python"
+      }
+    },
+    ticket_provider: {
+      type: input.ticketProvider ?? "plane",
+      workspace: input.planeWorkspace ?? "33god",
+      identifier,
+      board_id: input.planeProjectId ?? "",
+      board_url: input.planeProjectId ? `https://plane.delo.sh/${input.planeWorkspace ?? "33god"}/projects/${input.planeProjectId}/issues/` : "",
+      state: input.live ? "planned" : "planned"
+    },
+    agents,
+    created_at: existing?.created_at ?? now,
+    updated_at: now
+  };
+  const project = {
+    ...candidateProject,
+    updated_at: projectRecordEquivalent(existing, candidateProject) ? existing.updated_at : now
+  };
+  validateNoDuplicateProject(registry, project, overwrite);
+  const pjanglerRoot = resolve2(input.pjanglerRoot ?? resolvePjanglerRoot2());
+  const manifest = projectManifestFromRegistryProject(project);
+  const apply = input.apply ?? false;
+  const live = input.live ?? false;
+  const actions = [
+    { kind: "registry.upsert", registryPath: registryPath2, slug, project }
+  ];
+  if (scaffold) {
+    actions.push(buildCommonProjectCopierAction({
+      pjanglerRoot,
+      targetDir,
+      projectName: project.name,
+      projectDescription: project.description,
+      projectSlug: project.slug,
+      ticketProvider: project.ticket_provider.type,
+      planeWorkspace: project.ticket_provider.workspace ?? "33god",
+      planeProjectId: project.ticket_provider.board_id ?? "",
+      projectIdentifier: identifier,
+      primaryLanguage: project.template.commonproject.primary_language,
+      overwrite
+    }));
+  }
+  actions.push(
+    { kind: "project.write-manifest", path: join11(targetDir, ".project.json"), manifest },
+    {
+      kind: "plane.create-or-link",
+      enabled: live,
+      live,
+      workspace: project.ticket_provider.workspace ?? "33god",
+      identifier,
+      state: live ? "planned" : "planned",
+      reason: live ? void 0 : "network/cloud actions require --live"
+    },
+    {
+      kind: "hermes.provision-agent",
+      enabled: input.provisionAgent ?? false,
+      local: !live,
+      targetDir,
+      targetRepo: slug,
+      role: agentRole,
+      context: {
+        skipRuntimeRepo: !live,
+        skipPlane: !live,
+        skipBloodbank: !live,
+        skipSystemd: !live || process.platform === "darwin"
+      }
+    }
+  );
+  return { ok: true, apply, dryRun: !apply, live, registryPath: registryPath2, project, manifest, actions };
+}
+function executeProjectInitPlan(plan) {
+  const logs = [];
+  const errors = [];
+  const changedFiles = [];
+  if (!plan.apply) return { ok: true, plan, logs, errors, changedFiles };
+  const registry = loadProjectRegistry(plan.registryPath);
+  let pendingRegistryAction;
+  for (const action of plan.actions) {
+    if (action.kind === "copier.copy.commonproject") {
+      mkdirSync6(dirname7(action.targetDir), { recursive: true });
+      const result = spawnSync5(action.command[0], action.command.slice(1), { encoding: "utf8", cwd: action.cwd });
+      if (result.stdout?.trim()) logs.push(result.stdout.trim());
+      if (result.stderr?.trim()) logs.push(result.stderr.trim());
+      if (result.error) {
+        const code = result.error.code;
+        errors.push(
+          code === "ENOENT" ? "copier not found on PATH. Install with: uv tool install copier or pip install copier" : `copier failed: ${result.error.message}`
+        );
+        break;
+      }
+      if (result.status !== 0) {
+        errors.push(`copier exited with status ${result.status ?? "unknown"}`);
+        if (existsSync8(action.targetDir)) changedFiles.push(action.targetDir);
+        break;
+      }
+      changedFiles.push(action.targetDir);
+    } else if (action.kind === "project.write-manifest") {
+      mkdirSync6(dirname7(action.path), { recursive: true });
+      const next = `${JSON.stringify(action.manifest, null, 2)}
 `;
+      const current = existsSync8(action.path) ? readFileSync5(action.path, "utf8") : void 0;
+      if (current !== next) {
+        writeFileSync5(action.path, next, "utf8");
+        changedFiles.push(action.path);
+      }
+    } else if (action.kind === "registry.upsert") {
+      pendingRegistryAction = action;
+    } else if (action.kind === "plane.create-or-link") {
+      logs.push(action.enabled ? "plane.create-or-link requires a live provider integration" : "plane.create-or-link skipped (requires --live)");
+    } else if (action.kind === "hermes.provision-agent") {
+      logs.push(action.enabled ? "hermes.provision-agent planned for the caller to execute" : "hermes.provision-agent skipped");
+    }
+  }
+  if (pendingRegistryAction && errors.length === 0) {
+    if (!projectRecordEquivalent(registry.projects[pendingRegistryAction.slug], pendingRegistryAction.project)) {
+      registry.projects[pendingRegistryAction.slug] = pendingRegistryAction.project;
+      saveProjectRegistry(registry, pendingRegistryAction.registryPath);
+      changedFiles.push(pendingRegistryAction.registryPath);
+    }
+  }
+  return { ok: errors.length === 0, plan, logs, errors, changedFiles };
+}
+function projectManifestFromRegistryProject(project) {
+  const agents = Object.fromEntries(
+    Object.entries(project.agents).map(([name, agent]) => [
+      `${project.slug}-${name}`,
+      {
+        role: agent.role,
+        role_dir: agent.role_dir,
+        provisioning_state: agent.provisioning_state
+      }
+    ])
+  );
+  return {
+    project_name: project.name,
+    project_description: project.description,
+    project_slug: project.slug,
+    repo_path: project.repo_path,
+    ticket_provider: {
+      type: project.ticket_provider.type,
+      workspace: project.ticket_provider.workspace ?? "",
+      identifier: project.ticket_provider.identifier ?? "",
+      board_id: project.ticket_provider.board_id ?? "",
+      board_url: project.ticket_provider.board_url ?? "",
+      state: project.ticket_provider.state
+    },
+    agents
+  };
+}
+function getProject(registry, slug) {
+  const project = registry.projects[slug];
+  if (!project) throw new Error(`Project not found in registry: ${slug}`);
+  return project;
+}
+function buildCommonProjectCopierAction(input) {
+  const templateDir = join11(input.pjanglerRoot, "templates", "commonproject");
+  const data = {
+    project_name: input.projectName,
+    project_description: input.projectDescription ?? "",
+    project_slug: input.projectSlug,
+    ticket_provider: input.ticketProvider,
+    plane_workspace: input.planeWorkspace,
+    plane_project_id: input.planeProjectId ?? "",
+    project_identifier: input.projectIdentifier,
+    primary_language: input.primaryLanguage
+  };
+  const command = ["copier", "copy", "--trust", templateDir, input.targetDir, "--defaults"];
+  for (const [key, value] of Object.entries(data)) command.push("--data", `${key}=${value}`);
+  if (input.overwrite) command.push("--overwrite");
+  return {
+    kind: "copier.copy.commonproject",
+    cwd: input.pjanglerRoot,
+    command,
+    targetDir: input.targetDir,
+    data,
+    overwrite: input.overwrite
+  };
+}
+function resolvePjanglerRoot2() {
+  let dir = dirname7(new URL(import.meta.url).pathname);
+  while (dir !== dirname7(dir)) {
+    if (existsSync8(join11(dir, "package.json")) && existsSync8(join11(dir, "templates", "commonproject", "copier.yml"))) return dir;
+    dir = dirname7(dir);
+  }
+  return resolve2(process.cwd());
+}
+function validateNoDuplicateProject(registry, project, overwrite) {
+  const existingSameSlug = registry.projects[project.slug];
+  if (existingSameSlug && !overwrite && resolve2(existingSameSlug.repo_path) !== resolve2(project.repo_path)) {
+    throw new Error(`Project slug already exists in registry: ${project.slug}`);
+  }
+  for (const [slug, existing] of Object.entries(registry.projects)) {
+    if (slug === project.slug) continue;
+    if (resolve2(existing.repo_path) === resolve2(project.repo_path)) {
+      throw new Error(`Project repo_path already registered by ${slug}: ${project.repo_path}`);
+    }
+    if (existing.ticket_provider.identifier && existing.ticket_provider.identifier.toUpperCase() === project.ticket_provider.identifier?.toUpperCase()) {
+      throw new Error(`Project identifier already registered by ${slug}: ${project.ticket_provider.identifier}`);
+    }
+  }
+}
+function validateProjectRecord(project, key) {
+  if (!isRecord(project)) throw new Error(`Project ${key} must be a mapping`);
+  if (!project.name) throw new Error(`Project ${key} missing name`);
+  if (!project.slug) throw new Error(`Project ${key} missing slug`);
+  if (project.slug !== key) throw new Error(`Project key ${key} does not match slug ${project.slug}`);
+  if (!project.repo_path) throw new Error(`Project ${key} missing repo_path`);
+  if (!Array.isArray(project.source_artifacts)) throw new Error(`Project ${key} source_artifacts must be a list`);
+  if (!isRecord(project.ticket_provider)) throw new Error(`Project ${key} ticket_provider must be a mapping`);
+  if (!isRecord(project.agents)) throw new Error(`Project ${key} agents must be a mapping`);
+}
+function expandHome(path) {
+  if (path === "~") return homedir5();
+  if (path.startsWith("~/")) return join11(homedir5(), path.slice(2));
+  return path;
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
 // src/mcp-server.ts
@@ -2592,22 +3294,22 @@ var server = new McpServer({
 });
 var TICKET_PROVIDER_SCHEMA = z.enum(["plane", "linear", "trello"]);
 function resolveTargetDir(targetDir) {
-  const dir = resolve2(targetDir ?? process.cwd());
-  if (!existsSync8(dir)) {
+  const dir = resolve3(targetDir ?? process.cwd());
+  if (!existsSync9(dir)) {
     throw new Error(`Target directory does not exist: ${dir}`);
   }
-  if (!statSync(dir).isDirectory()) {
+  if (!statSync2(dir).isDirectory()) {
     throw new Error(`Target path is not a directory: ${dir}`);
   }
   return dir;
 }
-function resolvePjanglerRoot2() {
-  let dir = dirname7(fileURLToPath5(import.meta.url));
-  while (dir !== dirname7(dir)) {
-    if (existsSync8(join10(dir, "package.json")) && existsSync8(join10(dir, "templates", "commonproject", "copier.yml"))) {
+function resolvePjanglerRoot3() {
+  let dir = dirname8(fileURLToPath5(import.meta.url));
+  while (dir !== dirname8(dir)) {
+    if (existsSync9(join12(dir, "package.json")) && existsSync9(join12(dir, "templates", "commonproject", "copier.yml"))) {
       return dir;
     }
-    dir = dirname7(dir);
+    dir = dirname8(dir);
   }
   throw new Error("Unable to resolve pjangler root");
 }
@@ -2676,26 +3378,6 @@ async function runRecipeWithCapture(recipeName, context) {
     console.error = origError;
   }
 }
-function buildCommonProjectCopierAction(input) {
-  const data = {
-    project_name: input.projectName,
-    project_description: input.projectDescription ?? "",
-    project_slug: input.projectSlug,
-    ticket_provider: input.ticketProvider,
-    plane_workspace: input.planeWorkspace,
-    plane_project_id: input.planeProjectId ?? "",
-    project_identifier: input.projectIdentifier,
-    primary_language: input.primaryLanguage
-  };
-  const args = ["copy", "--trust", input.templateDir, input.targetDir, "--defaults"];
-  for (const [key, value] of Object.entries(data)) args.push("--data", `${key}=${value}`);
-  if (input.overwrite) args.push("--overwrite");
-  return {
-    kind: "copier.copy.commonproject",
-    command: ["copier", ...args],
-    data
-  };
-}
 server.registerTool(
   "pjangler_list_capabilities",
   {
@@ -2718,7 +3400,7 @@ server.registerTool(
       parityRules: getParityRuleIds(),
       recommendedWorkflows: {
         existingProject: ["pjangler_audit_project", "pjangler_migrate_project"],
-        new33godProject: ["pjangler_bootstrap_33god_project", "pjangler_audit_project"],
+        new33godProject: ["pjangler_project_init", "pjangler_bootstrap_33god_project", "pjangler_audit_project"],
         hermesAgentProvisioning: ["pjangler_deploy_hermes_agent", "pjangler_audit_project"]
       },
       skillSynergy: parityGuidance()
@@ -2812,16 +3494,19 @@ server.registerTool(
       local: z.boolean().optional(),
       force: z.boolean().optional(),
       overwrite: z.boolean().optional(),
-      dryRun: z.boolean().optional()
+      dryRun: z.boolean().optional(),
+      registryPath: z.string().optional(),
+      sourceSkill: z.string().optional(),
+      live: z.boolean().optional()
     }
   },
   async (input) => {
     try {
-      const pjanglerRoot = resolvePjanglerRoot2();
+      const pjanglerRoot = resolvePjanglerRoot3();
       const projectSlug = input.projectSlug ?? slugify(input.projectName);
-      const parentDir = resolve2(input.parentDir ?? process.cwd());
-      if (!existsSync8(parentDir) || !statSync(parentDir).isDirectory()) throw new Error(`Parent directory does not exist: ${parentDir}`);
-      const targetDir = resolve2(input.targetDir ?? join10(parentDir, projectSlug));
+      const parentDir = resolve3(input.parentDir ?? process.cwd());
+      if (!existsSync9(parentDir) || !statSync2(parentDir).isDirectory()) throw new Error(`Parent directory does not exist: ${parentDir}`);
+      const targetDir = resolve3(input.targetDir ?? join12(parentDir, projectSlug));
       const overwrite = input.overwrite ?? input.force ?? false;
       const dryRun = input.dryRun ?? true;
       const local = input.local ?? true;
@@ -2830,57 +3515,31 @@ server.registerTool(
       if (!skipPlane && !planeProjectId) {
         throw new Error("planeProjectId is required when skipPlane=false; keep skipPlane=true for safe local bootstrap");
       }
-      if (existsSync8(targetDir) && !overwrite) throw new Error(`Target already exists: ${targetDir} (set force/overwrite=true to re-render)`);
-      const templateDir = join10(pjanglerRoot, "templates", "commonproject");
-      const copierAction = buildCommonProjectCopierAction({
-        templateDir,
+      if (!dryRun && existsSync9(targetDir) && !overwrite) throw new Error(`Target already exists: ${targetDir} (set force/overwrite=true to re-render)`);
+      const plan = planProjectInit({
+        name: input.projectName,
+        description: input.projectDescription,
         targetDir,
-        projectName: input.projectName,
-        projectDescription: input.projectDescription,
         projectSlug,
+        sourceSkill: input.sourceSkill,
+        primaryLanguage: input.primaryLanguage ?? "python",
+        provisionAgent: input.provisionAgent ?? false,
+        agentRole: input.agentRole ?? "pm",
+        apply: !dryRun,
+        live: input.live ?? false,
+        registryPath: input.registryPath,
+        projectIdentifier: input.projectIdentifier ?? projectSlug.slice(0, 4).toUpperCase(),
         ticketProvider: input.ticketProvider ?? "plane",
         planeWorkspace: input.planeWorkspace ?? "33god",
         planeProjectId,
-        projectIdentifier: input.projectIdentifier ?? projectSlug.slice(0, 4).toUpperCase(),
-        primaryLanguage: input.primaryLanguage ?? "python",
+        pjanglerRoot,
         overwrite
       });
-      const actions = [
-        { kind: "ensure.parent", path: dirname7(targetDir) },
-        copierAction
-      ];
-      if (input.provisionAgent) {
-        actions.push({
-          kind: "pjangler.recipe.hermes-agent",
-          targetDir,
-          context: {
-            targetRepo: projectSlug,
-            role: input.agentRole ?? "pm",
-            agentPurpose: input.agentPurpose ?? `Project manager for ${input.projectName}`,
-            local,
-            dryRun,
-            force: overwrite,
-            skipTelegram: true,
-            skipEmail: true,
-            skipRuntimeRepo: local,
-            skipPlane: skipPlane || local,
-            skipBloodbank: local,
-            skipSystemd: local || process.platform === "darwin"
-          }
-        });
-      }
       if (dryRun) {
-        return asText({ ok: true, dryRun, targetDir, projectSlug, actions, guidance: parityGuidance() });
-      }
-      const which = spawnSync5("which", ["copier"], { encoding: "utf8" });
-      if (which.status !== 0) throw new Error("copier not found on PATH. Install with: uv tool install copier or pip install copier");
-      mkdirSync6(dirname7(targetDir), { recursive: true });
-      const result = spawnSync5(copierAction.command[0], copierAction.command.slice(1), { encoding: "utf8", cwd: pjanglerRoot });
-      const logs = [result.stdout.trim()].filter(Boolean);
-      const errors = [result.stderr.trim()].filter(Boolean);
-      if (result.status !== 0) {
-        return asText({ ok: false, dryRun, targetDir, actions, logs, errors, exitCode: result.status });
+        return asText({ ...plan, guidance: parityGuidance() });
       }
+      const result = executeProjectInitPlan(plan);
+      if (!result.ok) return asText({ ...result, guidance: parityGuidance() });
       let agentResult;
       if (input.provisionAgent) {
         const context = {
@@ -2901,7 +3560,82 @@ server.registerTool(
         };
         agentResult = await runRecipeWithCapture("hermes-agent", context);
       }
-      return asText({ ok: !agentResult || agentResult.success, dryRun, targetDir, projectSlug, actions, logs, errors, agentResult });
+      return asText({ ...result, ok: result.ok && (!agentResult || agentResult.success), agentResult, guidance: parityGuidance() });
+    } catch (err) {
+      return { isError: true, content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }] };
+    }
+  }
+);
+server.registerTool(
+  "pjangler_project_init",
+  {
+    title: "Initialize a pjangler project",
+    description: "Plan or apply a registry-backed CommonProject project init. Dry-run is the default; writes require apply=true and live actions require live=true.",
+    inputSchema: {
+      name: z.string(),
+      description: z.string().optional(),
+      targetDir: z.string().optional(),
+      sourceSkill: z.string().optional(),
+      primaryLanguage: z.string().optional(),
+      provisionAgent: z.boolean().optional(),
+      agentRole: z.string().optional(),
+      apply: z.boolean().optional(),
+      live: z.boolean().optional(),
+      slug: z.string().optional(),
+      identifier: z.string().optional(),
+      registryPath: z.string().optional(),
+      force: z.boolean().optional()
+    }
+  },
+  async (input) => {
+    try {
+      const plan = planProjectInit({
+        name: input.name,
+        description: input.description,
+        targetDir: input.targetDir,
+        sourceSkill: input.sourceSkill,
+        primaryLanguage: input.primaryLanguage,
+        provisionAgent: input.provisionAgent ?? false,
+        agentRole: input.agentRole,
+        apply: input.apply ?? false,
+        live: input.live ?? false,
+        projectSlug: input.slug,
+        projectIdentifier: input.identifier,
+        registryPath: input.registryPath,
+        force: input.force ?? false,
+        overwrite: input.force ?? false
+      });
+      if (!input.apply) return asText(plan);
+      return asText(executeProjectInitPlan(plan));
+    } catch (err) {
+      return { isError: true, content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }] };
+    }
+  }
+);
+server.registerTool(
+  "pjangler_project_list",
+  {
+    title: "List pjangler registry projects",
+    description: "Return projects from the pjangler central registry.",
+    inputSchema: {
+      registryPath: z.string().optional()
+    }
+  },
+  async ({ registryPath: registryPath2 }) => asText(loadProjectRegistry(registryPath2 ?? projectRegistryPath()))
+);
+server.registerTool(
+  "pjangler_project_show",
+  {
+    title: "Show a pjangler registry project",
+    description: "Return one project by slug from the pjangler central registry.",
+    inputSchema: {
+      slug: z.string(),
+      registryPath: z.string().optional()
+    }
+  },
+  async ({ slug, registryPath: registryPath2 }) => {
+    try {
+      return asText(getProject(loadProjectRegistry(registryPath2 ?? projectRegistryPath()), slug));
     } catch (err) {
       return { isError: true, content: [{ type: "text", text: err instanceof Error ? err.message : String(err) }] };
     }
@@ -3003,7 +3737,7 @@ server.registerTool(
         targetDir: resolvedTarget,
         yes: true,
         local,
-        targetRepo: input.targetRepo ?? basename2(resolvedTarget),
+        targetRepo: input.targetRepo ?? basename4(resolvedTarget),
         role: input.role,
         agentPurpose: input.agentPurpose,
         soulTone: input.soulTone,