@elevasis/sdk 0.5.14 → 0.5.15

package/dist/cli.cjs

@@ -40164,6 +40164,12 @@ var DOMAIN_MAP = {
   [DOMAINS.DIAGNOSTIC]: DIAGNOSTIC_DOMAIN
 };
 
+// ../core/src/platform/registry/reserved.ts
+var RESERVED_RESOURCE_IDS = /* @__PURE__ */ new Set(["command-center-assistant"]);
+function isReservedResourceId(resourceId) {
+  return RESERVED_RESOURCE_IDS.has(resourceId);
+}
+
 // ../core/src/execution/engine/base/errors.ts
 var ExecutionError = class extends Error {
   /**
@@ -43363,6 +43369,13 @@ var ResourceRegistry = class {
       }
       seen.add(id);
     }
+    for (const id of incomingIds) {
+      if (isReservedResourceId(id)) {
+        throw new Error(
+          `Resource ID '${id}' is reserved for platform use. External deployments cannot use reserved resource IDs.`
+        );
+      }
+    }
     if (this.isRemote(orgName)) {
       this.unregisterOrganization(orgName);
     }
@@ -43395,6 +43408,46 @@ var ResourceRegistry = class {
     }
     this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
   }
+  /**
+   * Register built-in platform resources (static, local execution)
+   *
+   * Unlike registerOrganization(), these resources:
+   * - Do NOT have remote config (execute in-process, not in worker threads)
+   * - Are NOT removed by unregisterOrganization() (persist across redeployments)
+   * - Use reserved resource IDs that external deployments cannot claim
+   *
+   * @param orgName - Organization name
+   * @param org - Resource definitions with real handlers (not stubs)
+   */
+  registerStaticResources(orgName, org) {
+    const incomingWorkflowIds = (org.workflows ?? []).map((w) => w.config.resourceId);
+    const incomingAgentIds = (org.agents ?? []).map((a) => a.config.resourceId);
+    const incomingIds = [...incomingWorkflowIds, ...incomingAgentIds];
+    const seen = /* @__PURE__ */ new Set();
+    for (const id of incomingIds) {
+      if (seen.has(id)) {
+        throw new Error(`Duplicate resource ID '${id}' in static resources.`);
+      }
+      seen.add(id);
+    }
+    const existingOrg = this.registry[orgName];
+    if (existingOrg) {
+      const existingWorkflowIds = new Set((existingOrg.workflows ?? []).map((w) => w.config.resourceId));
+      const existingAgentIds = new Set((existingOrg.agents ?? []).map((a) => a.config.resourceId));
+      for (const id of incomingIds) {
+        if (existingWorkflowIds.has(id) || existingAgentIds.has(id)) {
+          throw new Error(`Static resource '${id}' conflicts with existing resource in '${orgName}'.`);
+        }
+      }
+    }
+    if (existingOrg) {
+      existingOrg.workflows = [...existingOrg.workflows ?? [], ...org.workflows ?? []];
+      existingOrg.agents = [...existingOrg.agents ?? [], ...org.agents ?? []];
+    } else {
+      this.registry[orgName] = org;
+    }
+    this.serializedCache.set(orgName, serializeOrganization(this.registry[orgName]));
+  }
   /**
    * Unregister runtime-registered resources for an organization
    *
@@ -43798,7 +43851,7 @@ async function apiDelete(endpoint, apiUrl = resolveApiUrl()) {
 // package.json
 var package_default = {
   name: "@elevasis/sdk",
-  version: "0.5.14",
+  version: "0.5.15",
   description: "SDK for building Elevasis organization resources",
   type: "module",
   bin: {
@@ -43884,9 +43937,7 @@ async function scanDocumentation() {
         const raw = await (0, import_promises.readFile)(fullPath, "utf-8");
         const fileSize = Buffer.byteLength(raw, "utf-8");
         if (fileSize > 100 * 1024) {
-          throw new Error(
-            `Documentation file exceeds 100KB: docs/${relPath} (${Math.round(fileSize / 1024)}KB)`
-          );
+          throw new Error(`Documentation file exceeds 100KB: docs/${relPath} (${Math.round(fileSize / 1024)}KB)`);
         }
         totalSize += fileSize;
         if (totalSize > 1024 * 1024) {
@@ -43939,7 +43990,9 @@ async function generateResourceMap(org) {
     );
     for (const w of workflows) {
       const desc = escapeMdx(w.config.description);
-      lines.push(`| \`${w.config.resourceId}\` | ${escapeMdx(w.config.name)} | ${w.config.version} | ${w.config.status} | ${desc} |`);
+      lines.push(
+        `| \`${w.config.resourceId}\` | ${escapeMdx(w.config.name)} | ${w.config.version} | ${w.config.status} | ${desc} |`
+      );
     }
     lines.push("");
   }
@@ -43952,11 +44005,16 @@ async function generateResourceMap(org) {
     );
     for (const a of agents) {
       const desc = escapeMdx(a.config.description);
-      lines.push(`| \`${a.config.resourceId}\` | ${escapeMdx(a.config.name)} | ${a.config.version} | ${a.config.status} | ${desc} |`);
+      lines.push(
+        `| \`${a.config.resourceId}\` | ${escapeMdx(a.config.name)} | ${a.config.version} | ${a.config.status} | ${desc} |`
+      );
     }
     lines.push("");
   }
-  lines.push(`**Total:** ${workflows.length + agents.length} resources (${workflows.length} workflows, ${agents.length} agents)`, "");
+  lines.push(
+    `**Total:** ${workflows.length + agents.length} resources (${workflows.length} workflows, ${agents.length} agents)`,
+    ""
+  );
   await (0, import_promises.mkdir)((0, import_path.resolve)("docs"), { recursive: true });
   await (0, import_promises.writeFile)((0, import_path.resolve)("docs/resource-map.mdx"), lines.join("\n"), "utf-8");
 }
@@ -44020,8 +44078,12 @@ async function generateProjectMap(org) {
         if (resourceCount === 0) {
           types = "(utilities)";
         } else {
-          const wCount = workflows.filter((w) => Array.isArray(w.config.domains) && w.config.domains.includes(domainName)).length;
-          const aCount = agents.filter((a) => Array.isArray(a.config.domains) && a.config.domains.includes(domainName)).length;
+          const wCount = workflows.filter(
+            (w) => Array.isArray(w.config.domains) && w.config.domains.includes(domainName)
+          ).length;
+          const aCount = agents.filter(
+            (a) => Array.isArray(a.config.domains) && a.config.domains.includes(domainName)
+          ).length;
           const parts = [];
           if (wCount > 0) parts.push(`${wCount} workflow${wCount !== 1 ? "s" : ""}`);
           if (aCount > 0) parts.push(`${aCount} agent${aCount !== 1 ? "s" : ""}`);
@@ -44133,10 +44195,7 @@ async function generateProjectMap(org) {
     if (categories.length === 0) {
       lines.push("SDK reference found but no categories parsed.", "");
     } else {
-      lines.push(
-        "| Category | Files | Covers |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Category | Files | Covers |", "| --- | --- | --- |");
       for (const cat of categories) {
         const covers = cat.titles.slice(0, 5).join(", ") + (cat.titles.length > 5 ? ", ..." : "");
         lines.push(`| ${escapeMdx(cat.name)} | ${cat.count} | ${escapeMdx(covers)} |`);
@@ -44154,10 +44213,7 @@ async function generateProjectMap(org) {
     if (cmdFiles.length === 0) {
       lines.push("No commands found.", "");
     } else {
-      lines.push(
-        "| Command | File | Purpose |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Command | File | Purpose |", "| --- | --- | --- |");
       for (const f of cmdFiles) {
         const cmdName = f.name.replace(/\.md$/, "");
         let purpose = "";
@@ -44186,10 +44242,7 @@ async function generateProjectMap(org) {
     if (ruleFiles.length === 0) {
       lines.push("No rules found.", "");
     } else {
-      lines.push(
-        "| Rule | File | Scope |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Rule | File | Scope |", "| --- | --- | --- |");
       for (const f of ruleFiles) {
         const ruleName = f.name.replace(/\.md$/, "").replace(/-/g, " ").replace(/\b\w/g, (c) => c.toUpperCase());
         let scope = "";
@@ -44220,10 +44273,7 @@ async function generateProjectMap(org) {
     if (skillDirs.length === 0) {
       lines.push("No skills found.", "");
     } else {
-      lines.push(
-        "| Skill | File | Trigger |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| Skill | File | Trigger |", "| --- | --- | --- |");
       for (const d of skillDirs) {
         const skillFile = (0, import_path.resolve)(".claude/skills", d.name, "SKILL.md");
         let trigger = "";
@@ -44279,10 +44329,7 @@ async function generateProjectMap(org) {
     if (memoryFiles.length === 0) {
       lines.push("No memory files found.", "");
     } else {
-      lines.push(
-        "| File | Purpose | Last Modified |",
-        "| --- | --- | --- |"
-      );
+      lines.push("| File | Purpose | Last Modified |", "| --- | --- | --- |");
       for (const m of memoryFiles) {
         lines.push(`| .claude/memory/${m.rel} | ${escapeMdx(m.purpose)} | ${m.mtime} |`);
       }
@@ -44314,250 +44361,293 @@ async function generateProjectMap(org) {
   await (0, import_promises.mkdir)((0, import_path.resolve)("docs"), { recursive: true });
   await (0, import_promises.writeFile)((0, import_path.resolve)("docs/project-map.mdx"), lines.join("\n"), "utf-8");
 }
+async function generateNavigationMap(docs) {
+  const excludedFiles = /* @__PURE__ */ new Set(["docs/navigation-map.mdx", "docs/project-map.mdx", "docs/resource-map.mdx"]);
+  const filtered = docs.filter((doc) => !excludedFiles.has(doc.path)).sort((a, b) => {
+    const orderA = a.frontmatter.order ?? 9999;
+    const orderB = b.frontmatter.order ?? 9999;
+    if (orderA !== orderB) return orderA - orderB;
+    return a.frontmatter.title.localeCompare(b.frontmatter.title);
+  });
+  const lines = [
+    "---",
+    "title: Navigation Map",
+    "description: Auto-generated table of contents for all documentation (updated on each deploy)",
+    "order: 997",
+    "---",
+    "",
+    "# Navigation Map",
+    "",
+    "> Auto-generated by `elevasis-sdk deploy`. Do not edit manually.",
+    "",
+    "| Title | Description | Path |",
+    "| --- | --- | --- |"
+  ];
+  for (const doc of filtered) {
+    lines.push(`| ${escapeMdx(doc.frontmatter.title)} | ${escapeMdx(doc.frontmatter.description)} | ${doc.path} |`);
+  }
+  lines.push("");
+  await (0, import_promises.mkdir)((0, import_path.resolve)("docs"), { recursive: true });
+  await (0, import_promises.writeFile)((0, import_path.resolve)("docs/navigation-map.mdx"), lines.join("\n"), "utf-8");
+}
 function registerDeployCommand(program3) {
-  program3.command("deploy").description("Validate, bundle, upload, and deploy project resources\n  Example: elevasis-sdk deploy --api-url http://localhost:5170").option("--api-url <url>", "API URL").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").option("--prod", "Deploy to production (overrides NODE_ENV=development)").action(wrapAction("deploy", async (options2) => {
-    const startTime = Date.now();
-    const apiUrl = resolveApiUrl(options2.apiUrl, options2.prod);
-    const env2 = resolveEnvironment(options2.prod);
-    const entryPath = options2.entry ?? "./src/index.ts";
-    const authSpinner = ora("Authenticating...").start();
-    let orgName;
-    try {
-      const me = await apiGet("/api/external/me", apiUrl);
-      orgName = me.organizationName;
-      authSpinner.succeed(
-        source_default.green("Authenticating...") + source_default.white("          done") + source_default.gray(` (${orgName})`)
-      );
-    } catch (error46) {
-      authSpinner.fail(source_default.red("Authentication failed"));
-      const errMsg = error46 instanceof Error ? error46.message : String(error46);
-      if (errMsg.includes("401") || errMsg.toLowerCase().includes("unauthorized")) {
-        const keyVar = !options2.prod && process.env.NODE_ENV === "development" && process.env.ELEVASIS_PLATFORM_KEY_DEV ? "ELEVASIS_PLATFORM_KEY_DEV" : "ELEVASIS_PLATFORM_KEY";
-        console.error(source_default.red("  Invalid API key."));
-        console.error(source_default.gray(`  Your ${keyVar} was rejected by the server.`));
-        console.error(source_default.gray("  Check your .env file and verify the key in the Elevasis dashboard."));
-      } else {
-        console.error(source_default.gray("  Check your API key and API URL."));
+  program3.command("deploy").description(
+    "Validate, bundle, upload, and deploy project resources\n  Example: elevasis-sdk deploy --api-url http://localhost:5170"
+  ).option("--api-url <url>", "API URL").option("--entry <path>", "Path to entry file (default: ./src/index.ts)").option("--prod", "Deploy to production (overrides NODE_ENV=development)").action(
+    wrapAction("deploy", async (options2) => {
+      const startTime = Date.now();
+      const apiUrl = resolveApiUrl(options2.apiUrl, options2.prod);
+      const env2 = resolveEnvironment(options2.prod);
+      const entryPath = options2.entry ?? "./src/index.ts";
+      const authSpinner = ora("Authenticating...").start();
+      let orgName;
+      try {
+        const me = await apiGet("/api/external/me", apiUrl);
+        orgName = me.organizationName;
+        authSpinner.succeed(
+          source_default.green("Authenticating...") + source_default.white("          done") + source_default.gray(` (${orgName})`)
+        );
+      } catch (error46) {
+        authSpinner.fail(source_default.red("Authentication failed"));
+        const errMsg = error46 instanceof Error ? error46.message : String(error46);
+        if (errMsg.includes("401") || errMsg.toLowerCase().includes("unauthorized")) {
+          const keyVar = !options2.prod && process.env.NODE_ENV === "development" && process.env.ELEVASIS_PLATFORM_KEY_DEV ? "ELEVASIS_PLATFORM_KEY_DEV" : "ELEVASIS_PLATFORM_KEY";
+          console.error(source_default.red("  Invalid API key."));
+          console.error(source_default.gray(`  Your ${keyVar} was rejected by the server.`));
+          console.error(source_default.gray("  Check your .env file and verify the key in the Elevasis dashboard."));
+        } else {
+          console.error(source_default.gray("  Check your API key and API URL."));
+        }
+        throw error46;
       }
-      throw error46;
-    }
-    const validateSpinner = ora("Validating...").start();
-    let org;
-    try {
-      const jiti = (0, import_jiti.createJiti)(import_meta.url);
-      const entryModule = await jiti.import((0, import_path.resolve)(entryPath));
-      org = entryModule.default;
-      if (!org) {
-        validateSpinner.fail("Invalid entry: no default export found");
-        console.error(source_default.gray(`  Entry file: ${(0, import_path.resolve)(entryPath)}`));
-        throw new Error("Invalid entry: no default export found");
+      const validateSpinner = ora("Validating...").start();
+      let org;
+      try {
+        const jiti = (0, import_jiti.createJiti)(import_meta.url);
+        const entryModule = await jiti.import((0, import_path.resolve)(entryPath));
+        org = entryModule.default;
+        if (!org) {
+          validateSpinner.fail("Invalid entry: no default export found");
+          console.error(source_default.gray(`  Entry file: ${(0, import_path.resolve)(entryPath)}`));
+          throw new Error("Invalid entry: no default export found");
+        }
+        new ResourceRegistry({ [orgName]: org });
+        const workflowCount = org.workflows?.length ?? 0;
+        const agentCount = org.agents?.length ?? 0;
+        const totalCount = workflowCount + agentCount;
+        validateSpinner.succeed(
+          source_default.green("Validating...") + source_default.white("              done") + source_default.gray(` (${totalCount} resource${totalCount !== 1 ? "s" : ""}, 0 errors)`)
+        );
+        console.log("");
+        console.log(source_default.gray(`  Org:    ${orgName}`));
+        console.log(source_default.gray(`  Target: ${apiUrl} (${env2})`));
+        console.log("");
+        for (const w of org.workflows ?? []) {
+          console.log(source_default.gray(`  workflow  ${source_default.white(w.config.resourceId)}  v${w.config.version}`));
+        }
+        for (const a of org.agents ?? []) {
+          console.log(source_default.gray(`  agent     ${source_default.white(a.config.resourceId)}  v${a.config.version}`));
+        }
+        console.log("");
+      } catch (error46) {
+        if (error46 instanceof RegistryValidationError) {
+          validateSpinner.fail(source_default.red("Validation failed"));
+          console.error("");
+          console.error(source_default.red(`  ERROR  ${error46.message}`));
+          if (error46.resourceId) {
+            console.error(source_default.gray(`  Resource: ${error46.resourceId}`));
+          }
+          console.error("");
+          console.error(source_default.gray("  Deploy aborted."));
+        }
+        throw error46;
       }
-      new ResourceRegistry({ [orgName]: org });
-      const workflowCount = org.workflows?.length ?? 0;
-      const agentCount = org.agents?.length ?? 0;
-      const totalCount = workflowCount + agentCount;
-      validateSpinner.succeed(
-        source_default.green("Validating...") + source_default.white("              done") + source_default.gray(` (${totalCount} resource${totalCount !== 1 ? "s" : ""}, 0 errors)`)
-      );
-      console.log("");
-      console.log(source_default.gray(`  Org:    ${orgName}`));
-      console.log(source_default.gray(`  Target: ${apiUrl} (${env2})`));
-      console.log("");
-      for (const w of org.workflows ?? []) {
-        console.log(source_default.gray(`  workflow  ${source_default.white(w.config.resourceId)}  v${w.config.version}`));
+      await generateResourceMap(org);
+      await generateProjectMap(org);
+      let documentation = await scanDocumentation();
+      if (documentation) {
+        await generateNavigationMap(documentation);
+        documentation = await scanDocumentation();
+        console.log(
+          source_default.gray(
+            `  docs    ${source_default.white(String(documentation.length))} file${documentation.length !== 1 ? "s" : ""}`
+          )
+        );
       }
-      for (const a of org.agents ?? []) {
-        console.log(source_default.gray(`  agent     ${source_default.white(a.config.resourceId)}  v${a.config.version}`));
+      const triggerCount = org.triggers?.length ?? 0;
+      const integrationCount = org.integrations?.length ?? 0;
+      const checkpointCount = org.humanCheckpoints?.length ?? 0;
+      if (triggerCount > 0) console.log(source_default.gray(`  triggers  ${source_default.white(String(triggerCount))}`));
+      if (integrationCount > 0) console.log(source_default.gray(`  integrations  ${source_default.white(String(integrationCount))}`));
+      if (checkpointCount > 0) console.log(source_default.gray(`  checkpoints  ${source_default.white(String(checkpointCount))}`));
+      const relationshipCount = org.relationships ? Object.keys(org.relationships).length : 0;
+      if (relationshipCount > 0) {
+        console.log(
+          source_default.gray(
+            `  rels    ${source_default.white(String(relationshipCount))} resource${relationshipCount !== 1 ? "s" : ""}`
+          )
+        );
       }
-      console.log("");
-    } catch (error46) {
-      if (error46 instanceof RegistryValidationError) {
-        validateSpinner.fail(source_default.red("Validation failed"));
-        console.error("");
-        console.error(source_default.red(`  ERROR  ${error46.message}`));
-        if (error46.resourceId) {
-          console.error(source_default.gray(`  Resource: ${error46.resourceId}`));
+      const schemaWarnings = [];
+      const workflows = (org.workflows ?? []).map((w) => {
+        const meta = {
+          resourceId: w.config.resourceId,
+          name: w.config.name,
+          version: w.config.version,
+          status: w.config.status,
+          description: w.config.description,
+          domains: w.config.domains
+        };
+        if (w.contract.inputSchema) {
+          try {
+            meta.inputSchema = external_exports.toJSONSchema(w.contract.inputSchema);
+          } catch {
+            schemaWarnings.push(`${w.config.resourceId}: inputSchema could not be serialized`);
+          }
         }
-        console.error("");
-        console.error(source_default.gray("  Deploy aborted."));
-      }
-      throw error46;
-    }
-    await generateResourceMap(org);
-    await generateProjectMap(org);
-    const documentation = await scanDocumentation();
-    if (documentation) {
-      console.log(source_default.gray(`  docs    ${source_default.white(String(documentation.length))} file${documentation.length !== 1 ? "s" : ""}`));
-    }
-    const triggerCount = org.triggers?.length ?? 0;
-    const integrationCount = org.integrations?.length ?? 0;
-    const checkpointCount = org.humanCheckpoints?.length ?? 0;
-    if (triggerCount > 0) console.log(source_default.gray(`  triggers  ${source_default.white(String(triggerCount))}`));
-    if (integrationCount > 0) console.log(source_default.gray(`  integrations  ${source_default.white(String(integrationCount))}`));
-    if (checkpointCount > 0) console.log(source_default.gray(`  checkpoints  ${source_default.white(String(checkpointCount))}`));
-    const relationshipCount = org.relationships ? Object.keys(org.relationships).length : 0;
-    if (relationshipCount > 0) {
-      console.log(source_default.gray(`  rels    ${source_default.white(String(relationshipCount))} resource${relationshipCount !== 1 ? "s" : ""}`));
-    }
-    const schemaWarnings = [];
-    const workflows = (org.workflows ?? []).map((w) => {
-      const meta = {
-        resourceId: w.config.resourceId,
-        name: w.config.name,
-        version: w.config.version,
-        status: w.config.status,
-        description: w.config.description,
-        domains: w.config.domains
-      };
-      if (w.contract.inputSchema) {
-        try {
-          meta.inputSchema = external_exports.toJSONSchema(w.contract.inputSchema);
-        } catch {
-          schemaWarnings.push(`${w.config.resourceId}: inputSchema could not be serialized`);
+        if (w.contract.outputSchema) {
+          try {
+            meta.outputSchema = external_exports.toJSONSchema(w.contract.outputSchema);
+          } catch {
+            schemaWarnings.push(`${w.config.resourceId}: outputSchema could not be serialized`);
+          }
         }
-      }
-      if (w.contract.outputSchema) {
-        try {
-          meta.outputSchema = external_exports.toJSONSchema(w.contract.outputSchema);
-        } catch {
-          schemaWarnings.push(`${w.config.resourceId}: outputSchema could not be serialized`);
+        return meta;
+      });
+      const agents = (org.agents ?? []).map((a) => {
+        const meta = {
+          resourceId: a.config.resourceId,
+          name: a.config.name,
+          version: a.config.version,
+          status: a.config.status,
+          description: a.config.description,
+          domains: a.config.domains
+        };
+        if (a.contract.inputSchema) {
+          try {
+            meta.inputSchema = external_exports.toJSONSchema(a.contract.inputSchema);
+          } catch {
+            schemaWarnings.push(`${a.config.resourceId}: inputSchema could not be serialized`);
+          }
         }
-      }
-      return meta;
-    });
-    const agents = (org.agents ?? []).map((a) => {
-      const meta = {
-        resourceId: a.config.resourceId,
-        name: a.config.name,
-        version: a.config.version,
-        status: a.config.status,
-        description: a.config.description,
-        domains: a.config.domains
-      };
-      if (a.contract.inputSchema) {
-        try {
-          meta.inputSchema = external_exports.toJSONSchema(a.contract.inputSchema);
-        } catch {
-          schemaWarnings.push(`${a.config.resourceId}: inputSchema could not be serialized`);
+        if (a.contract.outputSchema) {
+          try {
+            meta.outputSchema = external_exports.toJSONSchema(a.contract.outputSchema);
+          } catch {
+            schemaWarnings.push(`${a.config.resourceId}: outputSchema could not be serialized`);
+          }
         }
-      }
-      if (a.contract.outputSchema) {
-        try {
-          meta.outputSchema = external_exports.toJSONSchema(a.contract.outputSchema);
-        } catch {
-          schemaWarnings.push(`${a.config.resourceId}: outputSchema could not be serialized`);
+        return meta;
+      });
+      if (schemaWarnings.length > 0) {
+        for (const warning of schemaWarnings) {
+          console.log(source_default.yellow(`  warn  ${warning}`));
         }
+        console.log(source_default.gray("  Schemas will be unavailable on the platform for these resources."));
+        console.log("");
       }
-      return meta;
-    });
-    if (schemaWarnings.length > 0) {
-      for (const warning of schemaWarnings) {
-        console.log(source_default.yellow(`  warn  ${warning}`));
-      }
-      console.log(source_default.gray("  Schemas will be unavailable on the platform for these resources."));
-      console.log("");
-    }
-    const bundleSpinner = ora("Bundling...").start();
-    const wrapperPath = (0, import_path.resolve)("__elevasis_worker.ts");
-    const bundleOutfile = (0, import_path.resolve)("dist/bundle.js");
-    try {
-      const entryImport = entryPath.replace(/\.ts$/, ".js");
-      const wrapperContent = `import org from ${JSON.stringify(entryImport)}
+      const bundleSpinner = ora("Bundling...").start();
+      const wrapperPath = (0, import_path.resolve)("__elevasis_worker.ts");
+      const bundleOutfile = (0, import_path.resolve)("dist/bundle.js");
+      try {
+        const entryImport = entryPath.replace(/\.ts$/, ".js");
+        const wrapperContent = `import org from ${JSON.stringify(entryImport)}
 import { startWorker } from '@elevasis/sdk/worker'
 startWorker(org)
 `;
-      await (0, import_promises.writeFile)(wrapperPath, wrapperContent, "utf-8");
-      await (0, import_promises.mkdir)((0, import_path.resolve)("dist"), { recursive: true });
-      await esbuild.build({
-        entryPoints: [wrapperPath],
-        bundle: true,
-        platform: "node",
-        format: "cjs",
-        outfile: bundleOutfile
-      });
-      await (0, import_promises.unlink)(wrapperPath);
-      const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
-      const bundleSizeKB = Math.round(bundleBuffer.length / 1024);
-      bundleSpinner.succeed(
-        source_default.green("Bundling...") + source_default.white("                done") + source_default.gray(` (${bundleSizeKB} KB)`)
-      );
-    } catch (error46) {
-      try {
+        await (0, import_promises.writeFile)(wrapperPath, wrapperContent, "utf-8");
+        await (0, import_promises.mkdir)((0, import_path.resolve)("dist"), { recursive: true });
+        await esbuild.build({
+          entryPoints: [wrapperPath],
+          bundle: true,
+          platform: "node",
+          format: "cjs",
+          outfile: bundleOutfile
+        });
         await (0, import_promises.unlink)(wrapperPath);
-      } catch {
+        const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
+        const bundleSizeKB = Math.round(bundleBuffer.length / 1024);
+        bundleSpinner.succeed(
+          source_default.green("Bundling...") + source_default.white("                done") + source_default.gray(` (${bundleSizeKB} KB)`)
+        );
+      } catch (error46) {
+        try {
+          await (0, import_promises.unlink)(wrapperPath);
+        } catch {
+        }
+        bundleSpinner.fail(source_default.red("Bundling failed"));
+        throw error46;
       }
-      bundleSpinner.fail(source_default.red("Bundling failed"));
-      throw error46;
-    }
-    const uploadSpinner = ora("Uploading...").start();
-    try {
-      const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
-      const apiKey = resolveApiKey(options2.prod);
-      if (!apiKey) {
-        uploadSpinner.fail(source_default.red("Missing API key environment variable"));
-        console.error(source_default.gray("  Set it in your .env file or shell environment:"));
-        if (!options2.prod && process.env.NODE_ENV === "development") {
-          console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY_DEV=sk_...  (or ELEVASIS_PLATFORM_KEY as fallback)"));
-        } else {
-          console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY=sk_..."));
-        }
-        throw new Error("Missing API key environment variable");
-      }
-      const metadata = {
-        sdkVersion: SDK_VERSION,
-        mode: env2,
-        resources: { workflows, agents },
-        ...documentation ? { documentation } : {},
-        ...org.relationships ? { relationships: org.relationships } : {}
-      };
-      const form = new FormData();
-      form.append("bundle", new Blob([bundleBuffer]), "bundle.js");
-      form.append("metadata", JSON.stringify(metadata));
-      const response = await fetch(`${apiUrl}/api/external/deploy`, {
-        method: "POST",
-        headers: { Authorization: `Bearer ${apiKey}` },
-        body: form
-      });
-      if (!response.ok) {
-        const errorText = await response.text();
-        uploadSpinner.fail(source_default.red("Upload failed"));
-        console.error(source_default.red(`  ${response.status}: ${errorText}`));
-        throw new Error(`Deploy upload failed (${response.status}): ${errorText}`);
-      }
-      const result = await response.json();
-      uploadSpinner.succeed(
-        source_default.green("Uploading...") + source_default.white("               done")
-      );
-      const totalResources = (org.workflows?.length ?? 0) + (org.agents?.length ?? 0);
-      const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
-      if (result.status === "active") {
-        console.log("");
-        console.log(source_default.green.bold(`  Deployed! ${totalResources} resource${totalResources !== 1 ? "s" : ""} live.`));
-        if (result.deployId) {
-          console.log(source_default.gray(`  Version:  ${result.deployId}`));
+      const uploadSpinner = ora("Uploading...").start();
+      try {
+        const bundleBuffer = await (0, import_promises.readFile)(bundleOutfile);
+        const apiKey = resolveApiKey(options2.prod);
+        if (!apiKey) {
+          uploadSpinner.fail(source_default.red("Missing API key environment variable"));
+          console.error(source_default.gray("  Set it in your .env file or shell environment:"));
+          if (!options2.prod && process.env.NODE_ENV === "development") {
+            console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY_DEV=sk_...  (or ELEVASIS_PLATFORM_KEY as fallback)"));
+          } else {
+            console.error(source_default.gray("    ELEVASIS_PLATFORM_KEY=sk_..."));
+          }
+          throw new Error("Missing API key environment variable");
         }
-        console.log(source_default.gray(`  Duration: ${elapsed}s`));
-      } else if (result.status === "failed") {
-        console.log("");
-        console.log(source_default.red.bold("  Deploy failed."));
-        if (result.error) {
-          console.error(source_default.red(`  ${result.error}`));
+        const metadata = {
+          sdkVersion: SDK_VERSION,
+          mode: env2,
+          resources: { workflows, agents },
+          ...documentation ? { documentation } : {},
+          ...org.relationships ? { relationships: org.relationships } : {}
+        };
+        const form = new FormData();
+        form.append("bundle", new Blob([bundleBuffer]), "bundle.js");
+        form.append("metadata", JSON.stringify(metadata));
+        const response = await fetch(`${apiUrl}/api/external/deploy`, {
+          method: "POST",
+          headers: { Authorization: `Bearer ${apiKey}` },
+          body: form
+        });
+        if (!response.ok) {
+          const errorText = await response.text();
+          uploadSpinner.fail(source_default.red("Upload failed"));
+          console.error(source_default.red(`  ${response.status}: ${errorText}`));
+          throw new Error(`Deploy upload failed (${response.status}): ${errorText}`);
+        }
+        const result = await response.json();
+        uploadSpinner.succeed(source_default.green("Uploading...") + source_default.white("               done"));
+        const totalResources = (org.workflows?.length ?? 0) + (org.agents?.length ?? 0);
+        const elapsed = ((Date.now() - startTime) / 1e3).toFixed(1);
+        if (result.status === "active") {
+          console.log("");
+          console.log(
+            source_default.green.bold(`  Deployed! ${totalResources} resource${totalResources !== 1 ? "s" : ""} live.`)
+          );
+          if (result.deployId) {
+            console.log(source_default.gray(`  Version:  ${result.deployId}`));
+          }
+          console.log(source_default.gray(`  Duration: ${elapsed}s`));
+        } else if (result.status === "failed") {
+          console.log("");
+          console.log(source_default.red.bold("  Deploy failed."));
+          if (result.error) {
+            console.error(source_default.red(`  ${result.error}`));
+          }
+          throw new Error(`Deploy failed: ${result.error ?? "unknown error"}`);
+        } else {
+          console.log("");
+          console.log(source_default.yellow(`  Deploy status: ${result.status ?? "unknown"}`));
+          if (result.deployId) {
+            console.log(source_default.gray(`  Version: ${result.deployId}`));
+          }
         }
-        throw new Error(`Deploy failed: ${result.error ?? "unknown error"}`);
-      } else {
-        console.log("");
-        console.log(source_default.yellow(`  Deploy status: ${result.status ?? "unknown"}`));
-        if (result.deployId) {
-          console.log(source_default.gray(`  Version: ${result.deployId}`));
+      } catch (error46) {
+        if (uploadSpinner.isSpinning) {
+          uploadSpinner.fail(source_default.red("Deploy failed"));
         }
+        throw error46;
       }
-    } catch (error46) {
-      if (uploadSpinner.isSpinning) {
-        uploadSpinner.fail(source_default.red("Deploy failed"));
-      }
-      throw error46;
-    }
-  }));
+    })
+  );
 }
 
 // src/cli/commands/check.ts
@@ -45090,7 +45180,7 @@ var import_path3 = require("path");
 var import_promises2 = require("fs/promises");
 
 // src/cli/commands/templates/core/workspace.ts
-var TEMPLATE_VERSION = 27;
+var TEMPLATE_VERSION = 28;
 function configTemplate() {
   return `import type { ElevasConfig } from '@elevasis/sdk'
 
@@ -45102,44 +45192,52 @@ export default {
 `;
 }
 function packageJsonTemplate(organization) {
-  return JSON.stringify({
-    name: organization,
-    private: true,
-    type: "module",
-    scripts: {
-      "check-types": "tsc --noEmit",
-      check: "elevasis-sdk check",
-      deploy: "elevasis-sdk deploy"
-    },
-    dependencies: {
-      "@elevasis/sdk": `^${SDK_VERSION}`
+  return JSON.stringify(
+    {
+      name: organization,
+      private: true,
+      type: "module",
+      scripts: {
+        "check-types": "tsc --noEmit",
+        check: "elevasis-sdk check",
+        deploy: "elevasis-sdk deploy"
+      },
+      dependencies: {
+        "@elevasis/sdk": `^${SDK_VERSION}`
+      },
+      devDependencies: {
+        typescript: "5.9.2",
+        zod: "4.1.12"
+      }
     },
-    devDependencies: {
-      typescript: "5.9.2",
-      zod: "4.1.12"
-    }
-  }, null, 2) + "\n";
+    null,
+    2
+  ) + "\n";
 }
 function pnpmWorkspaceTemplate() {
   return `packages: []
 `;
 }
 function tsconfigTemplate() {
-  return JSON.stringify({
-    compilerOptions: {
-      target: "ES2022",
-      module: "ESNext",
-      moduleResolution: "Bundler",
-      strict: true,
-      esModuleInterop: true,
-      skipLibCheck: true,
-      forceConsistentCasingInFileNames: true,
-      isolatedModules: true,
-      outDir: "./dist"
+  return JSON.stringify(
+    {
+      compilerOptions: {
+        target: "ES2022",
+        module: "ESNext",
+        moduleResolution: "Bundler",
+        strict: true,
+        esModuleInterop: true,
+        skipLibCheck: true,
+        forceConsistentCasingInFileNames: true,
+        isolatedModules: true,
+        outDir: "./dist"
+      },
+      include: ["src"],
+      exclude: ["node_modules", "dist"]
     },
-    include: ["src"],
-    exclude: ["node_modules", "dist"]
-  }, null, 2) + "\n";
+    null,
+    2
+  ) + "\n";
 }
 function envTemplate() {
   return `ELEVASIS_PLATFORM_KEY=
@@ -45257,6 +45355,28 @@ function claudeSettingsTemplate() {
               }
             ]
           }
+        ],
+        PostToolUse: [
+          {
+            matcher: "Write|Edit|MultiEdit",
+            hooks: [
+              {
+                type: "command",
+                command: "node .claude/hooks/post-edit-validate.mjs"
+              }
+            ]
+          }
+        ],
+        PostToolUseFailure: [
+          {
+            matcher: "Bash",
+            hooks: [
+              {
+                type: "command",
+                command: "node .claude/hooks/tool-failure-recovery.mjs"
+              }
+            ]
+          }
         ]
       }
     },
@@ -46969,6 +47089,199 @@ When all plan steps are marked COMPLETE, suggest \`/work complete\` to finalize
 - Completed tasks move OUT of \`docs/in-progress/\` to \`docs/<relevant-dir>/\`
 `;
 }
+function claudePostEditValidateHookTemplate() {
+  return `#!/usr/bin/env node
+// post-edit-validate.mjs
+// PostToolUse hook \u2014 auto-formats with prettier, type-checks .ts/.tsx files.
+// Fires after Edit|Write|MultiEdit succeeds.
+
+import { existsSync } from 'node:fs'
+import { resolve, normalize, extname, join, dirname } from 'node:path'
+import { execSync } from 'node:child_process'
+
+const ROOT = process.env.CLAUDE_PROJECT_DIR ?? process.cwd()
+
+// Extensions prettier should format
+const PRETTIER_EXTENSIONS = new Set([
+  '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.json', '.css', '.md', '.mdx'
+])
+
+// Extensions that trigger type-checking
+const TS_EXTENSIONS = new Set(['.ts', '.tsx'])
+
+function findNearestTsconfig(startDir) {
+  let dir = startDir
+  const root = normalize(ROOT)
+  while (dir.length >= root.length) {
+    const candidate = join(dir, 'tsconfig.json')
+    if (existsSync(candidate)) return candidate
+    const parent = dirname(dir)
+    if (parent === dir) break
+    dir = parent
+  }
+  return null
+}
+
+try {
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const input = JSON.parse(Buffer.concat(chunks).toString())
+
+  const filePath = input.tool_input?.file_path
+  if (!filePath) process.exit(0)
+
+  const ext = extname(filePath).toLowerCase()
+  const absPath = normalize(resolve(filePath))
+  if (!existsSync(absPath)) process.exit(0)
+
+  const results = []
+
+  // 1. Prettier
+  if (PRETTIER_EXTENSIONS.has(ext)) {
+    try {
+      execSync('pnpm exec prettier --write "' + absPath + '"', {
+        cwd: ROOT,
+        stdio: ['pipe', 'pipe', 'pipe'],
+        timeout: 10_000
+      })
+    } catch (err) {
+      const stderr = err.stderr?.toString().trim() || ''
+      if (stderr && !/ignored/i.test(stderr)) {
+        results.push('Prettier error: ' + stderr.slice(0, 300))
+      }
+    }
+  }
+
+  // 2. Type-check for .ts/.tsx
+  if (TS_EXTENSIONS.has(ext)) {
+    const tsconfig = findNearestTsconfig(dirname(absPath))
+    if (tsconfig) {
+      try {
+        execSync('pnpm exec tsc --noEmit -p "' + tsconfig + '"', {
+          cwd: ROOT,
+          stdio: ['pipe', 'pipe', 'pipe'],
+          timeout: 30_000,
+          env: { ...process.env, NODE_OPTIONS: '--max-old-space-size=4096' }
+        })
+      } catch (err) {
+        if (err.killed) process.exit(0) // Don't block on timeout
+        const stdout = err.stdout?.toString() || ''
+        if (stdout.includes('error TS')) {
+          const errorLines = stdout
+            .split('\\n')
+            .filter(l => l.includes('error TS'))
+            .slice(0, 10)
+          results.push('Type errors after editing ' + filePath + ':\\n' + errorLines.join('\\n'))
+        }
+      }
+    }
+  }
+
+  // Output errors to Claude's context (silence = success)
+  if (results.length > 0) {
+    process.stderr.write(results.join('\\n\\n'))
+    process.exit(2) // Exit 2 = send stderr as feedback to Claude
+  }
+} catch {}
+
+process.exit(0)
+`;
+}
+function claudeToolFailureRecoveryHookTemplate() {
+  return `#!/usr/bin/env node
+// tool-failure-recovery.mjs
+// PostToolUseFailure hook \u2014 pattern-matches known Bash errors and returns
+// recovery advice via stderr + exit 2 (feedback to Claude).
+
+const RECOVERY_TABLE = [
+  {
+    test: r => /JavaScript heap out of memory/i.test(r),
+    advice: 'Out of memory.',
+    fix: 'Run the command with NODE_OPTIONS="--max-old-space-size=4096".',
+    why: 'Large TypeScript projects can exceed Node default heap limit.',
+  },
+  {
+    test: r => /boundary hook/i.test(r) && /block|denied/i.test(r),
+    advice: 'Command blocked by SDK boundary hook.',
+    fix: 'Ask the user to run this command manually.',
+    why: 'The boundary hook blocks gh CLI, destructive git operations, and file writes outside the project.',
+    see: 'CLAUDE.md',
+  },
+  {
+    test: r => /ENOENT/.test(r) && /node_modules/.test(r),
+    advice: 'Missing node_modules dependency.',
+    fix: 'Run: pnpm install',
+    why: 'Dependencies are not installed or were cleared.',
+  },
+  {
+    test: r => /ERR_MODULE_NOT_FOUND/.test(r) && /@elevasis\\/sdk/.test(r),
+    advice: '@elevasis/sdk module not found.',
+    fix: 'Run: pnpm install \u2014 then verify @elevasis/sdk is in package.json dependencies.',
+    why: 'The SDK package is not installed or the version is mismatched.',
+  },
+  {
+    test: r => /ERR_MODULE_NOT_FOUND/.test(r),
+    advice: 'Module not found at import path.',
+    fix: 'Check the import path and verify the package is installed (pnpm install).',
+    why: 'The import path does not match any installed package or local file.',
+  },
+  {
+    test: r => /TS2307/.test(r) || (/cannot find/i.test(r) && /declaration/i.test(r)),
+    advice: 'TypeScript cannot resolve module or declaration file.',
+    fix: 'Check that the package is installed and tsconfig paths are correct.',
+    why: 'Missing dependency or incorrect TypeScript configuration.',
+  },
+  {
+    test: r => /EPERM/.test(r) || /permission denied/i.test(r),
+    advice: 'Permission denied (EPERM).',
+    fix: 'Close the file in any other process (editor, terminal, or dev server) and retry.',
+    why: 'On Windows, files locked by another process cannot be written to.',
+  },
+  {
+    test: r => /lockfile/i.test(r) && /conflict|outdated|ERR_PNPM/i.test(r),
+    advice: 'pnpm lockfile conflict or outdated.',
+    fix: 'Run: pnpm install to regenerate the lockfile.',
+    why: 'The lockfile is out of sync with package.json changes.',
+  },
+  {
+    test: r => /elevasis-sdk check/.test(r) || /elevasis-sdk deploy/.test(r),
+    advice: 'elevasis-sdk CLI command failed.',
+    fix: 'Check the error output above. Common causes: missing .env ELEVASIS_API_KEY, invalid resource schemas, or network issues.',
+    why: 'The SDK CLI validates resources and communicates with the platform API.',
+  },
+  {
+    test: r => /EADDRINUSE/.test(r),
+    advice: 'Port already in use.',
+    fix: 'Find and kill the process using the port, or use a different port.',
+    why: 'A previous dev server or process is still holding the port.',
+  },
+]
+
+function formatRecovery(entry) {
+  let msg = 'FAILED: ' + entry.advice + '\\nFIX: ' + entry.fix
+  if (entry.why) msg += '\\nWHY: ' + entry.why
+  if (entry.see) msg += '\\nSEE: ' + entry.see
+  return msg
+}
+
+try {
+  const chunks = []
+  for await (const chunk of process.stdin) chunks.push(chunk)
+  const input = JSON.parse(Buffer.concat(chunks).toString())
+
+  const response = input.tool_response ?? ''
+
+  for (const entry of RECOVERY_TABLE) {
+    if (entry.test(response)) {
+      process.stderr.write(formatRecovery(entry))
+      process.exit(2)
+    }
+  }
+} catch {}
+
+process.exit(0)
+`;
+}
 
 // src/cli/commands/templates/core/resources.ts
 function starterTemplate() {
@@ -47144,6 +47457,8 @@ function getManagedTemplates(ctx = {}) {
     ".claude/settings.json": claudeSettingsTemplate,
     ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate,
     ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate,
+    ".claude/hooks/post-edit-validate.mjs": claudePostEditValidateHookTemplate,
+    ".claude/hooks/tool-failure-recovery.mjs": claudeToolFailureRecoveryHookTemplate,
     ".claude/commands/tutorial.md": claudeTutorialCommandTemplate,
     ".claude/commands/meta.md": claudeMetaCommandTemplate,
     ".claude/commands/work.md": claudeWorkCommandTemplate,
@@ -47356,6 +47671,8 @@ var MANAGED_FILES = [
   "CLAUDE.md",
   ".claude/settings.json",
   ".claude/hooks/enforce-sdk-boundary.mjs",
+  ".claude/hooks/post-edit-validate.mjs",
+  ".claude/hooks/tool-failure-recovery.mjs",
   ".claude/commands/tutorial.md",
   ".claude/commands/meta.md",
   ".claude/commands/work.md",
@@ -47370,96 +47687,100 @@ var MANAGED_FILES = [
 ];
 var SCAFFOLD_FILES = [...INIT_ONLY_FILES, ...MANAGED_FILES];
 function registerInitCommand(program3) {
-  program3.command("init [directory]").description("Scaffold a new Elevasis workspace\n  Example: elevasis-sdk init my-workspace").option("--force", "Overwrite existing files").option("--ui", "Include a Vite + React UI app in ui/").action(wrapAction("init", async (directory, options2) => {
-    const targetDir = directory ? (0, import_path3.resolve)(directory) : process.cwd();
-    const orgSlug = toSlug((0, import_path3.basename)(targetDir));
-    if (!options2.force) {
-      const filesToCheck = options2.ui ? [...SCAFFOLD_FILES, ...UI_INIT_FILES] : SCAFFOLD_FILES;
-      const conflicts = [];
-      for (const file2 of filesToCheck) {
-        try {
-          await (0, import_promises2.access)((0, import_path3.resolve)(targetDir, file2));
-          conflicts.push(file2);
-        } catch {
-        }
-      }
-      if (conflicts.length > 0) {
-        console.error(source_default.red("Files already exist:"));
-        for (const f of conflicts) {
-          console.error(source_default.gray(`  ${f}`));
+  program3.command("init [directory]").description("Scaffold a new Elevasis workspace\n  Example: elevasis-sdk init my-workspace").option("--force", "Overwrite existing files").option("--ui", "Include a Vite + React UI app in ui/").action(
+    wrapAction("init", async (directory, options2) => {
+      const targetDir = directory ? (0, import_path3.resolve)(directory) : process.cwd();
+      const orgSlug = toSlug((0, import_path3.basename)(targetDir));
+      if (!options2.force) {
+        const filesToCheck = options2.ui ? [...SCAFFOLD_FILES, ...UI_INIT_FILES] : SCAFFOLD_FILES;
+        const conflicts = [];
+        for (const file2 of filesToCheck) {
+          try {
+            await (0, import_promises2.access)((0, import_path3.resolve)(targetDir, file2));
+            conflicts.push(file2);
+          } catch {
+          }
         }
-        console.error(source_default.gray("\n  Use --force to overwrite."));
-        throw new Error("Scaffold conflict");
-      }
-    }
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/operations"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/example"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/shared"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "docs/in-progress"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/hooks"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/scripts"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/commands"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/skills/creds"), { recursive: true });
-    await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/rules"), { recursive: true });
-    if (options2.ui) {
-      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "ui/src"), { recursive: true });
-    }
-    const files = {
-      "elevasis.config.ts": configTemplate(),
-      "package.json": packageJsonTemplate(orgSlug),
-      "pnpm-workspace.yaml": pnpmWorkspaceTemplate(),
-      "tsconfig.json": tsconfigTemplate(),
-      ".env": envTemplate(),
-      ".npmrc": npmrcTemplate(),
-      ".gitignore": gitignoreTemplate({ hasUI: options2.ui }),
-      "src/index.ts": starterTemplate(),
-      "src/operations/platform-status.ts": platformStatusTemplate(),
-      "src/operations/index.ts": operationsBarrelTemplate(),
-      "src/example/echo.ts": starterWorkflowTemplate(),
-      "src/example/index.ts": exampleBarrelTemplate(),
-      "src/shared/.gitkeep": "",
-      "docs/index.mdx": docsIndexTemplate(orgSlug),
-      "docs/in-progress/.gitkeep": "",
-      "CLAUDE.md": claudeMdTemplate({ hasUI: options2.ui }),
-      ".claude/settings.json": claudeSettingsTemplate(),
-      ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate(),
-      ".claude/commands/tutorial.md": claudeTutorialCommandTemplate(),
-      ".claude/commands/meta.md": claudeMetaCommandTemplate(),
-      ".claude/commands/work.md": claudeWorkCommandTemplate(),
-      ".claude/commands/docs.md": claudeDocsCommandTemplate(),
-      ".claude/skills/creds/SKILL.md": claudeCredsSkillTemplate(),
-      ".claude/rules/sdk-patterns.md": claudeSdkPatternsRuleTemplate(),
-      ".claude/rules/workspace-patterns.md": claudeWorkspaceRulesTemplate(),
-      ".claude/rules/docs-authoring.md": claudeDocsAuthoringRuleTemplate(),
-      ".claude/rules/memory-conventions.md": claudeMemoryConventionsRuleTemplate(),
-      ".claude/rules/project-map.md": claudeProjectMapRuleTemplate(),
-      ".claude/rules/task-tracking.md": claudeTaskTrackingRuleTemplate(),
-      ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate()
-    };
-    if (options2.ui) {
-      Object.assign(files, getUIFiles(orgSlug));
-    }
-    for (const [filePath, content] of Object.entries(files)) {
-      await (0, import_promises2.writeFile)((0, import_path3.resolve)(targetDir, filePath), content, "utf-8");
-    }
-    console.log(source_default.green.bold("  Workspace created!"));
-    console.log("");
-    console.log(source_default.gray("  Next steps:"));
-    if (directory) {
-      console.log(source_default.gray(`    cd ${directory}`));
-    }
-    console.log(source_default.gray("    pnpm install"));
-    console.log(source_default.gray("    # Add your API key to .env"));
-    console.log(source_default.gray("    elevasis-sdk check"));
-    console.log(source_default.gray("    elevasis-sdk deploy"));
-    if (options2.ui) {
+        if (conflicts.length > 0) {
+          console.error(source_default.red("Files already exist:"));
+          for (const f of conflicts) {
+            console.error(source_default.gray(`  ${f}`));
+          }
+          console.error(source_default.gray("\n  Use --force to overwrite."));
+          throw new Error("Scaffold conflict");
+        }
+      }
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/operations"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/example"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "src/shared"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "docs/in-progress"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/hooks"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/scripts"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/commands"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/skills/creds"), { recursive: true });
+      await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, ".claude/rules"), { recursive: true });
+      if (options2.ui) {
+        await (0, import_promises2.mkdir)((0, import_path3.resolve)(targetDir, "ui/src"), { recursive: true });
+      }
+      const files = {
+        "elevasis.config.ts": configTemplate(),
+        "package.json": packageJsonTemplate(orgSlug),
+        "pnpm-workspace.yaml": pnpmWorkspaceTemplate(),
+        "tsconfig.json": tsconfigTemplate(),
+        ".env": envTemplate(),
+        ".npmrc": npmrcTemplate(),
+        ".gitignore": gitignoreTemplate({ hasUI: options2.ui }),
+        "src/index.ts": starterTemplate(),
+        "src/operations/platform-status.ts": platformStatusTemplate(),
+        "src/operations/index.ts": operationsBarrelTemplate(),
+        "src/example/echo.ts": starterWorkflowTemplate(),
+        "src/example/index.ts": exampleBarrelTemplate(),
+        "src/shared/.gitkeep": "",
+        "docs/index.mdx": docsIndexTemplate(orgSlug),
+        "docs/in-progress/.gitkeep": "",
+        "CLAUDE.md": claudeMdTemplate({ hasUI: options2.ui }),
+        ".claude/settings.json": claudeSettingsTemplate(),
+        ".claude/hooks/enforce-sdk-boundary.mjs": claudeSdkBoundaryHookTemplate(),
+        ".claude/hooks/post-edit-validate.mjs": claudePostEditValidateHookTemplate(),
+        ".claude/hooks/tool-failure-recovery.mjs": claudeToolFailureRecoveryHookTemplate(),
+        ".claude/commands/tutorial.md": claudeTutorialCommandTemplate(),
+        ".claude/commands/meta.md": claudeMetaCommandTemplate(),
+        ".claude/commands/work.md": claudeWorkCommandTemplate(),
+        ".claude/commands/docs.md": claudeDocsCommandTemplate(),
+        ".claude/skills/creds/SKILL.md": claudeCredsSkillTemplate(),
+        ".claude/rules/sdk-patterns.md": claudeSdkPatternsRuleTemplate(),
+        ".claude/rules/workspace-patterns.md": claudeWorkspaceRulesTemplate(),
+        ".claude/rules/docs-authoring.md": claudeDocsAuthoringRuleTemplate(),
+        ".claude/rules/memory-conventions.md": claudeMemoryConventionsRuleTemplate(),
+        ".claude/rules/project-map.md": claudeProjectMapRuleTemplate(),
+        ".claude/rules/task-tracking.md": claudeTaskTrackingRuleTemplate(),
+        ".claude/scripts/statusline-command.js": claudeStatuslineScriptTemplate()
+      };
+      if (options2.ui) {
+        Object.assign(files, getUIFiles(orgSlug));
+      }
+      for (const [filePath, content] of Object.entries(files)) {
+        await (0, import_promises2.writeFile)((0, import_path3.resolve)(targetDir, filePath), content, "utf-8");
+      }
+      console.log(source_default.green.bold("  Workspace created!"));
       console.log("");
-      console.log(source_default.gray("  UI app:"));
-      console.log(source_default.gray("    cd ui && pnpm install"));
-      console.log(source_default.gray("    # Set VITE_WORKOS_CLIENT_ID in ui/.env"));
-      console.log(source_default.gray("    pnpm dev"));
-    }
-  }));
+      console.log(source_default.gray("  Next steps:"));
+      if (directory) {
+        console.log(source_default.gray(`    cd ${directory}`));
+      }
+      console.log(source_default.gray("    pnpm install"));
+      console.log(source_default.gray("    # Add your API key to .env"));
+      console.log(source_default.gray("    elevasis-sdk check"));
+      console.log(source_default.gray("    elevasis-sdk deploy"));
+      if (options2.ui) {
+        console.log("");
+        console.log(source_default.gray("  UI app:"));
+        console.log(source_default.gray("    cd ui && pnpm install"));
+        console.log(source_default.gray("    # Set VITE_WORKOS_CLIENT_ID in ui/.env"));
+        console.log(source_default.gray("    pnpm dev"));
+      }
+    })
+  );
 }
 function toSlug(name) {
   const slug = name.toLowerCase().replace(/[^a-z0-9-]/g, "-").replace(/^[^a-z]+/, "").replace(/-+/g, "-").replace(/-$/, "");