@elnora-ai/cli 1.3.5 → 1.5.0

package/dist/cli.js

@@ -25,7 +25,7 @@ var VERSION, PRODUCTION_BASE_URL, BASE_URL, AI_SERVER_URL, ENDPOINTS, DEFAULT_HE
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
-    VERSION = true ? "1.3.5" : process.env.npm_package_version ?? "0.0.0-dev";
+    VERSION = true ? "1.5.0" : process.env.npm_package_version ?? "0.0.0-dev";
     PRODUCTION_BASE_URL = "https://platform.elnora.ai/api/v1";
     BASE_URL = process.env.ELNORA_API_URL ?? PRODUCTION_BASE_URL;
     AI_SERVER_URL = process.env.ELNORA_AI_SERVER_URL ?? "https://platform.elnora.ai/ai-server";
@@ -1132,257 +1132,1065 @@ function buildProgram(registry2) {
   return program2;
 }
 
-// src/commands/account/accept-terms.ts
-import { z } from "zod";
-var inputSchema = z.object({
-  documentVersionId: z.string().describe("Document version ID to accept")
-});
-var accountAcceptTerms = {
-  name: "account.acceptTerms",
-  group: "account",
-  description: "Accept a user agreement / terms of service",
-  inputSchema,
-  outputSchema: z.any(),
-  async execute(input, ctx) {
-    return ctx.client.post("user_agreement", {
-      documentVersionId: input.documentVersionId
+// src/commands/completion.ts
+function extractCommandTree(cmd) {
+  return {
+    name: cmd.name(),
+    description: cmd.description(),
+    subcommands: cmd.commands.map(extractCommandTree),
+    options: cmd.options.map((o) => ({
+      flags: o.long ?? o.short ?? "",
+      description: o.description
+    }))
+  };
+}
+function generateBash(root) {
+  const lines = [
+    "# Bash completion for elnora",
+    "# Install: elnora completion bash > ~/.local/share/bash-completion/completions/elnora",
+    "",
+    "_elnora() {",
+    '  local cur="${COMP_WORDS[COMP_CWORD]}"',
+    '  local prev="${COMP_WORDS[COMP_CWORD-1]}"',
+    ""
+  ];
+  const topCmds = root.subcommands.map((c) => c.name).join(" ");
+  lines.push(`  if [ "$COMP_CWORD" -eq 1 ]; then`);
+  lines.push(`    COMPREPLY=( $(compgen -W "${topCmds}" -- "$cur") )`);
+  lines.push("    return");
+  lines.push("  fi");
+  lines.push("");
+  lines.push('  case "${COMP_WORDS[1]}" in');
+  for (const group of root.subcommands) {
+    if (group.subcommands.length > 0) {
+      const subs = group.subcommands.map((s) => s.name).join(" ");
+      lines.push(`    ${group.name})`);
+      lines.push(`      COMPREPLY=( $(compgen -W "${subs}" -- "$cur") )`);
+      lines.push("      ;;");
+    }
+  }
+  lines.push("  esac");
+  lines.push("}");
+  lines.push("");
+  lines.push("complete -F _elnora elnora");
+  return lines.join("\n");
+}
+function generateZsh(root) {
+  const lines = [
+    "#compdef elnora",
+    "# Zsh completion for elnora",
+    "# Install: elnora completion zsh > ~/.zfunc/_elnora",
+    "",
+    "_elnora() {",
+    "  local -a commands",
+    ""
+  ];
+  lines.push("  if (( CURRENT == 2 )); then");
+  lines.push("    commands=(");
+  for (const cmd of root.subcommands) {
+    lines.push(`      '${cmd.name}:${cmd.description.replace(/\\/g, "\\\\").replace(/'/g, "")}'`);
+  }
+  lines.push("    )");
+  lines.push("    _describe 'command' commands");
+  lines.push("    return");
+  lines.push("  fi");
+  lines.push("");
+  lines.push("  case $words[2] in");
+  for (const group of root.subcommands) {
+    if (group.subcommands.length > 0) {
+      lines.push(`    ${group.name})`);
+      lines.push("      local -a subcommands");
+      lines.push("      subcommands=(");
+      for (const sub of group.subcommands) {
+        lines.push(`        '${sub.name}:${sub.description.replace(/\\/g, "\\\\").replace(/'/g, "")}'`);
+      }
+      lines.push("      )");
+      lines.push("      _describe 'subcommand' subcommands");
+      lines.push("      ;;");
+    }
+  }
+  lines.push("  esac");
+  lines.push("}");
+  lines.push("");
+  lines.push("_elnora");
+  return lines.join("\n");
+}
+function generateFish(root) {
+  const lines = [
+    "# Fish completion for elnora",
+    "# Install: elnora completion fish > ~/.config/fish/completions/elnora.fish",
+    ""
+  ];
+  for (const cmd of root.subcommands) {
+    lines.push(
+      `complete -c elnora -n "__fish_use_subcommand" -a "${cmd.name}" -d "${cmd.description.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`
+    );
+  }
+  lines.push("");
+  for (const group of root.subcommands) {
+    for (const sub of group.subcommands) {
+      lines.push(
+        `complete -c elnora -n "__fish_seen_subcommand_from ${group.name}" -a "${sub.name}" -d "${sub.description.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`
+      );
+    }
+  }
+  return lines.join("\n");
+}
+function addCompletionCommand(program2) {
+  program2.command("completion").argument("<shell>", "Shell type: bash, zsh, fish").description("Generate shell completion script").action((shell) => {
+    const tree = extractCommandTree(program2);
+    switch (shell) {
+      case "bash":
+        console.log(generateBash(tree));
+        break;
+      case "zsh":
+        console.log(generateZsh(tree));
+        break;
+      case "fish":
+        console.log(generateFish(tree));
+        break;
+      default:
+        console.error(`Unsupported shell: ${shell}. Use bash, zsh, or fish.`);
+        process.exit(1);
+    }
+  });
+}
+
+// src/commands/doctor.ts
+init_client();
+init_config();
+init_profiles();
+import { existsSync as existsSync4, readFileSync as readFileSync4, statSync } from "node:fs";
+import { homedir as homedir4 } from "node:os";
+import { delimiter, join as join4 } from "node:path";
+import pc3 from "picocolors";
+
+// src/lib/setup/common.ts
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
+import { homedir as homedir2 } from "node:os";
+import { join as join2 } from "node:path";
+import pc from "picocolors";
+
+// src/lib/tty.ts
+function isTTY() {
+  return Boolean(process.stdout.isTTY);
+}
+function isColorEnabled() {
+  if (process.env.NO_COLOR !== void 0) return false;
+  if (process.env.FORCE_COLOR !== void 0) return true;
+  return isTTY();
+}
+
+// src/lib/setup/common.ts
+var HOME = homedir2();
+var ELNORA_DIR = join2(HOME, ".elnora");
+var CLAUDE_DIR = join2(HOME, ".claude");
+var CLAUDE_MARKETPLACES_FILE = join2(CLAUDE_DIR, "plugins", "known_marketplaces.json");
+var CLAUDE_SETTINGS_FILE = join2(CLAUDE_DIR, "settings.json");
+var CURSOR_DIR = join2(HOME, ".cursor");
+var CURSOR_MCP_GLOBAL = join2(HOME, ".cursor", "mcp.json");
+var VSCODE_DIR = join2(HOME, ".vscode");
+var CODEX_DIR = join2(HOME, ".codex");
+var MARKETPLACE_NAME = "elnora-plugins";
+var MARKETPLACE_REPO = "Elnora-AI/elnora-plugins";
+var PLUGIN_ID = `elnora@${MARKETPLACE_NAME}`;
+var LEGACY_PLUGIN_IDS = ["elnora@elnora-local", "elnora@elnora-ai"];
+var LEGACY_MARKETPLACE_NAMES = ["elnora-local", "elnora-ai"];
+function readJsonFile(path) {
+  try {
+    return JSON.parse(readFileSync2(path, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function writeJsonFile(path, data) {
+  mkdirSync2(join2(path, ".."), { recursive: true });
+  writeFileSync2(path, `${JSON.stringify(data, null, 2)}
+`, "utf-8");
+}
+var color = isColorEnabled();
+function ok(msg) {
+  return color ? `  ${pc.green("\u2713")} ${msg}` : `  \u2713 ${msg}`;
+}
+function fail(msg) {
+  return color ? `  ${pc.red("\u2717")} ${msg}` : `  \u2717 ${msg}`;
+}
+function info(msg) {
+  return color ? `  ${pc.dim(msg)}` : `  ${msg}`;
+}
+function detectPlatforms() {
+  return [
+    { name: "claude", label: "Claude Code", installed: existsSync2(CLAUDE_DIR) },
+    { name: "cursor", label: "Cursor", installed: existsSync2(CURSOR_DIR) },
+    { name: "vscode", label: "VS Code", installed: existsSync2(VSCODE_DIR) },
+    { name: "codex", label: "OpenAI Codex", installed: existsSync2(CODEX_DIR) }
+  ];
+}
+
+// src/lib/update-check.ts
+init_config();
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+import { join as join3 } from "node:path";
+import pc2 from "picocolors";
+var NPM_REGISTRY_URL = "https://registry.npmjs.org/@elnora-ai/cli/latest";
+var CACHE_DIR = join3(homedir3(), ".elnora");
+var CACHE_FILE = join3(CACHE_DIR, ".update-check");
+var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
+var FETCH_TIMEOUT_MS = 3e3;
+var SEMVER_RE = /^\d+\.\d+\.\d+(?:-[\w.]+)?(?:\+[\w.]+)?$/;
+function shouldSkipEntirely() {
+  if (process.env.CI || process.env.GITHUB_ACTIONS) return true;
+  if (process.env.ELNORA_NO_UPDATE_CHECK) return true;
+  return false;
+}
+function readCache() {
+  try {
+    if (!existsSync3(CACHE_FILE)) return null;
+    const raw = readFileSync3(CACHE_FILE, "utf-8");
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function writeCache(entry) {
+  try {
+    mkdirSync3(CACHE_DIR, { recursive: true });
+    writeFileSync3(CACHE_FILE, JSON.stringify(entry), "utf-8");
+  } catch {
+  }
+}
+function showUpdateNotice(latest) {
+  if (!process.stderr.isTTY) return;
+  const color2 = isColorEnabled();
+  const msg = color2 ? `
+${pc2.yellow(`Update available: v${VERSION} \u2192 v${latest}`)}
+Run: elnora update
+` : `
+Update available: v${VERSION} \u2192 v${latest}
+Run: elnora update
+`;
+  process.stderr.write(msg);
+}
+function isNewerVersion(a, b) {
+  const pa = a.split(".").map(Number);
+  const pb = b.split(".").map(Number);
+  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
+    const na = pa[i] ?? 0;
+    const nb = pb[i] ?? 0;
+    if (na > nb) return true;
+    if (na < nb) return false;
+  }
+  return false;
+}
+function registerUpdateCheck() {
+  if (shouldSkipEntirely()) return;
+  const cached = readCache();
+  if (cached) {
+    const elapsed = Date.now() - new Date(cached.checkedAt).getTime();
+    if (elapsed < CHECK_INTERVAL_MS) {
+      if (cached.latest && cached.latest !== VERSION && cached.latest !== "unknown") {
+        if (isNewerVersion(cached.latest, VERSION)) {
+          showUpdateNotice(cached.latest);
+        }
+      }
+      return;
+    }
+  }
+  const keepAlive = setInterval(() => {
+  }, 6e4);
+  (async () => {
+    try {
+      const response = await fetch(NPM_REGISTRY_URL, {
+        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
+      });
+      if (!response.ok) return;
+      const data = await response.json();
+      const latest = data.version ?? "unknown";
+      if (latest !== "unknown" && !SEMVER_RE.test(latest)) return;
+      writeCache({ checkedAt: (/* @__PURE__ */ new Date()).toISOString(), latest });
+      if (latest !== VERSION && latest !== "unknown" && isNewerVersion(latest, VERSION)) {
+        showUpdateNotice(latest);
+      }
+    } catch {
+    } finally {
+      clearInterval(keepAlive);
+    }
+  })();
+}
+
+// src/commands/doctor.ts
+var EXPECTED_SKILLS = [
+  "elnora-admin",
+  "elnora-agent",
+  "elnora-files",
+  "elnora-folders",
+  "elnora-orgs",
+  "elnora-platform",
+  "elnora-projects",
+  "elnora-search",
+  "elnora-tasks"
+];
+async function runCheck(fn) {
+  try {
+    return await fn();
+  } catch (e) {
+    return { status: "fail", msg: `${e instanceof Error ? e.message : String(e)}` };
+  }
+}
+async function checkApiReachable() {
+  const start = Date.now();
+  const res = await fetch("https://platform.elnora.ai/health", { signal: AbortSignal.timeout(5e3) });
+  const ms = Date.now() - start;
+  if (res.ok) return { status: "pass", msg: `API reachable         platform.elnora.ai (${res.status} OK, ${ms}ms)` };
+  return { status: "fail", msg: `API unreachable       platform.elnora.ai (HTTP ${res.status})` };
+}
+async function checkAuthenticated() {
+  const key = resolveApiKey();
+  const client = new ElnoraApiClient(key);
+  const result = await client.get("projects", {
+    queryParams: { page: 1, pageSize: 1 }
+  });
+  const count = result?.totalCount ?? result?.items?.length ?? 0;
+  return { status: "pass", msg: `Authenticated         profile: default (${count} projects accessible)` };
+}
+async function checkVersionCurrent() {
+  try {
+    const res = await fetch("https://registry.npmjs.org/@elnora-ai/cli/latest", {
+      signal: AbortSignal.timeout(3e3)
     });
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
+    if (!res.ok) return { status: "pass", msg: `Version               v${VERSION} (registry check failed)` };
+    const data = await res.json();
+    const latest = data.version ?? "unknown";
+    if (latest === VERSION || latest === "unknown" || !isNewerVersion(latest, VERSION)) {
+      return { status: "pass", msg: `Version current       v${VERSION} (latest: v${latest})` };
+    }
+    return { status: "warn", msg: `Update available      v${VERSION} \u2192 v${latest}` };
+  } catch {
+    return { status: "pass", msg: `Version               v${VERSION} (registry unreachable)` };
+  }
+}
+function checkConfigPermissions() {
+  if (process.platform === "win32") {
+    return { status: "pass", msg: "Config permissions    (skipped on Windows)" };
+  }
+  if (!existsSync4(PROFILES_FILE)) {
+    return { status: "warn", msg: "Config permissions    ~/.elnora/profiles.toml not found" };
+  }
+  const mode = statSync(PROFILES_FILE).mode & 511;
+  if (mode === 384) {
+    return { status: "pass", msg: `Config permissions    ${PROFILES_FILE} (0600)` };
+  }
+  return { status: "warn", msg: `Config permissions    ${PROFILES_FILE} (0${mode.toString(8)}) \u2014 should be 0600` };
+}
+async function checkAiServerReachable() {
+  const start = Date.now();
+  const res = await fetch(`${AI_SERVER_URL}/health`, { signal: AbortSignal.timeout(5e3) });
+  const ms = Date.now() - start;
+  const host = new URL(AI_SERVER_URL).hostname;
+  if (res.ok) return { status: "pass", msg: `AI Server reachable   ${host} (${res.status} OK, ${ms}ms)` };
+  return { status: "fail", msg: `AI Server unreachable ${host} (HTTP ${res.status})` };
+}
+function checkPathConfigured() {
+  const installDirs = [join4(homedir4(), ".local", "bin"), join4(homedir4(), ".elnora", "bin")];
+  const pathVar = process.env.PATH ?? "";
+  const entries = pathVar.split(delimiter).filter(Boolean);
+  const matched = installDirs.find((d) => entries.includes(d));
+  if (matched) {
+    return { status: "pass", msg: `PATH configured       ${matched}` };
+  }
+  return {
+    status: "warn",
+    msg: "PATH configured       standard install dirs not in PATH (OK if installed via npm/brew)"
+  };
+}
+function checkClaudePlugin() {
+  if (!existsSync4(CLAUDE_DIR)) {
+    return { status: "skip", msg: "Plugin enabled         (Claude Code not installed)" };
+  }
+  if (!existsSync4(CLAUDE_SETTINGS_FILE)) {
+    return { status: "fail", msg: "Plugin enabled         settings.json not found \u2014 run 'elnora setup claude'" };
+  }
+  let settings;
+  try {
+    settings = JSON.parse(readFileSync4(CLAUDE_SETTINGS_FILE, "utf-8"));
+  } catch (e) {
+    return {
+      status: "fail",
+      msg: `Plugin enabled         settings.json unreadable (${e instanceof Error ? e.message : "parse error"})`
+    };
+  }
+  const raw = settings.enabledPlugins;
+  const enabledPlugins = typeof raw === "object" && raw !== null && !Array.isArray(raw) ? raw : {};
+  const isEnabled = enabledPlugins[PLUGIN_ID] === true;
+  const legacyKeys = Object.keys(enabledPlugins).filter((k) => k.startsWith("elnora@") && k !== PLUGIN_ID);
+  if (isEnabled && legacyKeys.length === 0) {
+    return { status: "pass", msg: `Plugin enabled         ${PLUGIN_ID}` };
+  }
+  if (isEnabled && legacyKeys.length > 0) {
+    return {
+      status: "warn",
+      msg: `Plugin enabled         ${PLUGIN_ID} \u2014 but stale legacy entries also present: ${legacyKeys.join(", ")}`
+    };
+  }
+  if (legacyKeys.length > 0) {
+    return {
+      status: "fail",
+      msg: `Plugin enabled         found legacy entries ${legacyKeys.join(", ")} but not ${PLUGIN_ID} \u2014 run 'elnora setup claude'`
+    };
+  }
+  return { status: "fail", msg: "Plugin enabled         not found \u2014 run 'elnora setup claude'" };
+}
+function checkSkillsInstalled() {
+  if (!existsSync4(CLAUDE_DIR)) {
+    return { status: "skip", msg: "Skills installed       (Claude Code not installed)" };
+  }
+  const skillsDir = join4(CLAUDE_DIR, "plugins", "marketplaces", MARKETPLACE_NAME, "elnora", "skills");
+  if (!existsSync4(skillsDir)) {
+    return {
+      status: "warn",
+      msg: "Skills installed       marketplace not cloned yet \u2014 restart Claude Code to trigger clone"
+    };
+  }
+  const found = EXPECTED_SKILLS.filter((s) => existsSync4(join4(skillsDir, s, "SKILL.md")));
+  if (found.length === EXPECTED_SKILLS.length) {
+    return { status: "pass", msg: `Skills installed       ${found.length} skills` };
+  }
+  const missing = EXPECTED_SKILLS.filter((s) => !found.includes(s));
+  return {
+    status: "fail",
+    msg: `Skills installed       ${found.length}/${EXPECTED_SKILLS.length} \u2014 missing: ${missing.join(", ")}`
+  };
+}
+function checkPluginVersion() {
+  if (!existsSync4(CLAUDE_DIR)) {
+    return { status: "skip", msg: "Plugin version         (Claude Code not installed)" };
+  }
+  const pluginJsonPath = join4(
+    CLAUDE_DIR,
+    "plugins",
+    "marketplaces",
+    MARKETPLACE_NAME,
+    "elnora",
+    ".claude-plugin",
+    "plugin.json"
+  );
+  if (!existsSync4(pluginJsonPath)) {
+    return { status: "skip", msg: "Plugin version         (plugin not cloned yet)" };
+  }
+  try {
+    const pj = JSON.parse(readFileSync4(pluginJsonPath, "utf-8"));
+    const pluginVersion = pj.version ?? "unknown";
+    if (pluginVersion === VERSION) {
+      return { status: "pass", msg: `Plugin version         v${pluginVersion} (matches CLI)` };
+    }
+    return {
+      status: "warn",
+      msg: `Plugin version         v${pluginVersion} (CLI is v${VERSION}) \u2014 restart Claude Code to refresh`
+    };
+  } catch (e) {
+    return {
+      status: "fail",
+      msg: `Plugin version         plugin.json unreadable (${e instanceof Error ? e.message : "parse error"})`
+    };
+  }
+}
+async function checkMcpReachable() {
+  const start = Date.now();
+  try {
+    const res = await fetch("https://mcp.elnora.ai/mcp", {
+      method: "HEAD",
+      signal: AbortSignal.timeout(5e3)
+    });
+    const ms = Date.now() - start;
+    if (res.status < 500) {
+      return { status: "pass", msg: `Server reachable       mcp.elnora.ai (${res.status}, ${ms}ms)` };
+    }
+    return { status: "fail", msg: `Server unreachable     mcp.elnora.ai (HTTP ${res.status})` };
+  } catch (e) {
+    return {
+      status: "fail",
+      msg: `Server unreachable     mcp.elnora.ai (${e instanceof Error ? e.message : "network error"})`
+    };
+  }
+}
+function addDoctorCommand(program2) {
+  program2.command("doctor").description("Check Elnora CLI configuration and connectivity").action(async () => {
+    const color2 = isColorEnabled();
+    const ok2 = (msg) => color2 ? `  ${pc3.green("\u2713")} ${msg}` : `  \u2713 ${msg}`;
+    const fail2 = (msg) => color2 ? `  ${pc3.red("\u2717")} ${msg}` : `  \u2717 ${msg}`;
+    const warn = (msg) => color2 ? `  ${pc3.yellow("!")} ${msg}` : `  ! ${msg}`;
+    const skip = (msg) => color2 ? `  ${pc3.dim("\u25CB")} ${msg}` : `  \u25CB ${msg}`;
+    const section = (name) => color2 ? pc3.bold(`  ${name}`) : `  ${name}`;
+    const render = (r) => {
+      switch (r.status) {
+        case "pass":
+          return ok2(r.msg);
+        case "fail":
+          return fail2(r.msg);
+        case "warn":
+          return warn(r.msg);
+        case "skip":
+          return skip(r.msg);
+      }
+    };
+    console.error(`
+Elnora CLI v${VERSION}
+`);
+    let passed = 0;
+    let failed = 0;
+    let warnings = 0;
+    let total = 0;
+    const tally = (r) => {
+      total++;
+      if (r.status === "pass" || r.status === "skip") passed++;
+      else if (r.status === "warn") {
+        passed++;
+        warnings++;
+      } else failed++;
+    };
+    console.error(section("CLI"));
+    const cliChecks = [
+      await runCheck(() => checkApiReachable()),
+      await runCheck(() => checkAuthenticated()),
+      await runCheck(() => checkVersionCurrent()),
+      await runCheck(() => checkConfigPermissions()),
+      await runCheck(() => checkAiServerReachable()),
+      await runCheck(() => checkPathConfigured())
+    ];
+    for (const r of cliChecks) {
+      console.error(render(r));
+      tally(r);
+    }
+    console.error("");
+    console.error(section("Claude Code"));
+    const claudeChecks = [
+      await runCheck(() => checkClaudePlugin()),
+      await runCheck(() => checkSkillsInstalled()),
+      await runCheck(() => checkPluginVersion())
+    ];
+    for (const r of claudeChecks) {
+      console.error(render(r));
+      tally(r);
+    }
+    console.error("");
+    console.error(section("MCP"));
+    const mcpChecks = [await runCheck(() => checkMcpReachable())];
+    for (const r of mcpChecks) {
+      console.error(render(r));
+      tally(r);
+    }
+    console.error("");
+    if (failed === 0 && warnings === 0) {
+      console.error("All checks passed.");
+    } else if (failed === 0) {
+      console.error(`${passed}/${total} checks passed (${warnings} warning${warnings === 1 ? "" : "s"}).`);
+    } else {
+      const warnSuffix = warnings > 0 ? ` (${warnings} warning${warnings === 1 ? "" : "s"})` : "";
+      console.error(`${passed}/${total} checks passed \u2014 ${failed} failed${warnSuffix}.`);
+      if (!existsSync4(PROFILES_FILE)) console.error("\nRun: elnora auth login");
+    }
+  });
+}
+
+// src/commands/mcp/serve.ts
+function requireEnv(name) {
+  const value = process.env[name];
+  if (!value) {
+    throw new Error(`Required environment variable ${name} is not set`);
+  }
+  return value;
+}
+function addMcpCommands(program2, registry2) {
+  const mcp = program2.command("mcp").description("MCP server management");
+  mcp.command("serve").description("Start MCP server exposing all CLI commands as tools").option("--http", "HTTP transport (default, for deployment)").option("--stdio", "stdio transport (for local MCP clients)").option("--port <port>", "HTTP port", process.env.PORT ?? "3000").option("--host <host>", "HTTP bind address", process.env.HOST ?? "0.0.0.0").action(async (opts) => {
+    if (opts.stdio) {
+      const { startStdioServer: startStdioServer2 } = await Promise.resolve().then(() => (init_stdio_server(), stdio_server_exports));
+      await startStdioServer2(registry2);
+    } else {
+      const { startHttpServer: startHttpServer2 } = await Promise.resolve().then(() => (init_http_server(), http_server_exports));
+      await startHttpServer2(registry2, {
+        port: Number.parseInt(opts.port, 10),
+        host: opts.host,
+        tokenValidationUrl: requireEnv("ELNORA_TOKEN_VALIDATION_URL"),
+        mcpServiceKey: requireEnv("ELNORA_MCP_SERVICE_KEY")
+      });
+    }
+  });
+}
+
+// src/commands/open.ts
+import { exec } from "node:child_process";
+var URLS = {
+  "": "https://platform.elnora.ai",
+  platform: "https://platform.elnora.ai",
+  docs: "https://docs.elnora.ai",
+  keys: "https://platform.elnora.ai/settings/api-keys",
+  billing: "https://platform.elnora.ai/settings/billing",
+  github: "https://github.com/Elnora-AI/elnora-cli"
+};
+function openUrl(url) {
+  const cmd = process.platform === "darwin" ? `open "${url}"` : process.platform === "win32" ? `start "" "${url}"` : `xdg-open "${url}"`;
+  exec(cmd, (err) => {
+    if (err) {
+      console.error(`Failed to open browser: ${err.message}`);
+      console.log(url);
+    }
+  });
+}
+function addOpenCommand(program2) {
+  program2.command("open").argument("[page]", "Page to open: platform, docs, keys, billing, github").description("Open Elnora platform in the browser").action((page) => {
+    const key = page ?? "";
+    const url = URLS[key];
+    if (!url) {
+      console.error(`Unknown page: ${page}`);
+      console.error(`Available: ${Object.keys(URLS).filter(Boolean).join(", ")}`);
+      process.exit(1);
+    }
+    openUrl(url);
+    console.log(`Opening ${url}...`);
+  });
+}
+
+// src/commands/setup.ts
+init_profiles();
+
+// src/lib/setup/claude.ts
+import { existsSync as existsSync5 } from "node:fs";
+function setupClaude() {
+  if (!existsSync5(CLAUDE_DIR)) {
+    console.error(fail("Claude Code not found (~/.claude/ does not exist)"));
+    console.error("");
+    console.error("  Install Claude Code first: https://claude.ai/code");
+    return false;
+  }
+  console.error(ok("Claude Code found"));
+  const marketplaces = readJsonFile(CLAUDE_MARKETPLACES_FILE);
+  for (const old of LEGACY_MARKETPLACE_NAMES) {
+    delete marketplaces[old];
+  }
+  marketplaces[MARKETPLACE_NAME] = {
+    source: {
+      source: "github",
+      repo: MARKETPLACE_REPO
+    }
+  };
+  writeJsonFile(CLAUDE_MARKETPLACES_FILE, marketplaces);
+  console.error(ok(`Marketplace registered (GitHub: ${MARKETPLACE_REPO})`));
+  const settings = readJsonFile(CLAUDE_SETTINGS_FILE);
+  if (!settings.enabledPlugins || typeof settings.enabledPlugins !== "object") {
+    settings.enabledPlugins = {};
+  }
+  const plugins = settings.enabledPlugins;
+  for (const old of LEGACY_PLUGIN_IDS) {
+    delete plugins[old];
+  }
+  plugins[PLUGIN_ID] = true;
+  writeJsonFile(CLAUDE_SETTINGS_FILE, settings);
+  console.error(ok(`Plugin enabled (${PLUGIN_ID})`));
+  console.error("");
+  console.error("  Elnora skills are now available in Claude Code.");
+  console.error("  Restart Claude Code if it's currently running.");
+  return true;
+}
+
+// src/lib/setup/codex.ts
+import { existsSync as existsSync6 } from "node:fs";
+import { join as join5 } from "node:path";
+var CODEX_MCP_FILE = join5(CODEX_DIR, "mcp.json");
+function setupCodex(apiKey) {
+  if (!existsSync6(CODEX_DIR)) {
+    console.error(fail("Codex CLI not found (~/.codex/ does not exist)"));
+    console.error("");
+    console.error("  Install Codex first: https://github.com/openai/codex");
+    return false;
+  }
+  console.error(ok("Codex CLI found"));
+  const config = readJsonFile(CODEX_MCP_FILE);
+  if (!config.mcpServers || typeof config.mcpServers !== "object") {
+    config.mcpServers = {};
+  }
+  config.mcpServers.elnora = {
+    url: "https://mcp.elnora.ai/mcp",
+    headers: {
+      "X-API-Key": apiKey
+    }
+  };
+  writeJsonFile(CODEX_MCP_FILE, config);
+  console.error(ok("MCP server configured in ~/.codex/mcp.json"));
+  console.error("");
+  console.error("  Elnora MCP server is now available in Codex.");
+  return true;
+}
+
+// src/lib/setup/cursor.ts
+import { existsSync as existsSync7 } from "node:fs";
+function setupCursor(apiKey) {
+  if (!existsSync7(CURSOR_DIR)) {
+    console.error(fail("Cursor not found (~/.cursor/ does not exist)"));
+    console.error("");
+    console.error("  Install Cursor first: https://cursor.com");
+    return false;
+  }
+  console.error(ok("Cursor found"));
+  const config = readJsonFile(CURSOR_MCP_GLOBAL);
+  if (!config.mcpServers || typeof config.mcpServers !== "object") {
+    config.mcpServers = {};
+  }
+  config.mcpServers.elnora = {
+    url: "https://mcp.elnora.ai/mcp",
+    headers: {
+      "X-API-Key": apiKey
+    }
+  };
+  writeJsonFile(CURSOR_MCP_GLOBAL, config);
+  console.error(ok("MCP server configured in ~/.cursor/mcp.json"));
+  console.error("");
+  console.error("  Elnora MCP server is now available in Cursor.");
+  console.error("  Restart Cursor if it's currently running.");
+  return true;
+}
+
+// src/lib/setup/vscode.ts
+import { existsSync as existsSync8 } from "node:fs";
+import { join as join6 } from "node:path";
+var VSCODE_MCP_GLOBAL = join6(HOME, ".vscode", "mcp.json");
+function setupVscode(apiKey) {
+  if (!existsSync8(VSCODE_DIR)) {
+    console.error(fail("VS Code not found (~/.vscode/ does not exist)"));
+    console.error("");
+    console.error("  Install VS Code first: https://code.visualstudio.com");
+    return false;
+  }
+  console.error(ok("VS Code found"));
+  const config = readJsonFile(VSCODE_MCP_GLOBAL);
+  if (!config.servers || typeof config.servers !== "object") {
+    config.servers = {};
   }
+  config.servers.elnora = {
+    type: "http",
+    url: "https://mcp.elnora.ai/mcp",
+    headers: {
+      "X-API-Key": apiKey
+    }
+  };
+  writeJsonFile(VSCODE_MCP_GLOBAL, config);
+  console.error(ok("MCP server configured in ~/.vscode/mcp.json"));
+  console.error("");
+  console.error("  Elnora MCP server is now available in VS Code Copilot.");
+  console.error("  Restart VS Code if it's currently running.");
+  return true;
+}
+
+// src/commands/setup.ts
+var PLATFORM_SETUP = {
+  claude: () => setupClaude(),
+  cursor: (key) => setupCursor(key),
+  vscode: (key) => setupVscode(key),
+  codex: (key) => setupCodex(key)
 };
+function runSetup(platforms, profileName) {
+  let apiKey;
+  const needsKey = platforms.some((p) => p !== "claude");
+  if (needsKey) {
+    try {
+      apiKey = resolveApiKey(profileName);
+    } catch {
+      if (platforms.every((p) => p !== "claude")) {
+        console.error(fail("No API key found. Run 'elnora auth login' first."));
+        process.exitCode = 1;
+        return;
+      }
+    }
+  }
+  let anyFailed = false;
+  for (const platform of platforms) {
+    const setupFn = PLATFORM_SETUP[platform];
+    const success = setupFn(apiKey ?? "");
+    if (!success) anyFailed = true;
+    console.error("");
+  }
+  if (anyFailed) {
+    process.exitCode = 1;
+  }
+}
+function addSetupCommand(program2) {
+  const setup = program2.command("setup").description("Configure AI coding tools to use Elnora").option("--profile <name>", "API key profile to use", "default");
+  setup.command("claude").description("Set up Claude Code (skills + MCP server)").action(() => {
+    const opts = setup.opts();
+    console.error("");
+    runSetup(["claude"], opts.profile);
+  });
+  setup.command("cursor").description("Set up Cursor (MCP server)").action(() => {
+    const opts = setup.opts();
+    console.error("");
+    runSetup(["cursor"], opts.profile);
+  });
+  setup.command("vscode").description("Set up VS Code Copilot (MCP server)").action(() => {
+    const opts = setup.opts();
+    console.error("");
+    runSetup(["vscode"], opts.profile);
+  });
+  setup.command("codex").description("Set up OpenAI Codex (MCP server)").action(() => {
+    const opts = setup.opts();
+    console.error("");
+    runSetup(["codex"], opts.profile);
+  });
+  setup.action(() => {
+    const opts = setup.opts();
+    console.error("");
+    const detected = detectPlatforms();
+    const installed = detected.filter((p) => p.installed);
+    if (installed.length === 0) {
+      console.error(fail("No supported AI coding tools detected."));
+      console.error("");
+      console.error("  Supported: Claude Code, Cursor, VS Code, OpenAI Codex");
+      console.error("  Install one first, then run 'elnora setup' again.");
+      process.exitCode = 1;
+      return;
+    }
+    console.error(ok(`Detected ${installed.length} platform(s):`));
+    for (const p of installed) {
+      console.error(info(`${p.label}`));
+    }
+    console.error("");
+    const platforms = installed.map((p) => p.name);
+    runSetup(platforms, opts.profile);
+  });
+  program2.command("setup-claude").description("Set up Claude Code (alias for 'setup claude')").option("--profile <name>", "API key profile to use", "default").action((opts) => {
+    console.error("");
+    runSetup(["claude"], opts.profile);
+  });
+}
+
+// src/commands/update.ts
+init_config();
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { chmodSync as chmodSync2, copyFileSync, createWriteStream, mkdirSync as mkdirSync4, readFileSync as readFileSync5, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join as join7 } from "node:path";
+import { Readable } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import pc4 from "picocolors";
 
-// src/commands/account/add-legal-doc.ts
-import { z as z2 } from "zod";
-var inputSchema2 = z2.object({
-  documentType: z2.string().min(1).describe("Document type"),
-  version: z2.string().min(1).describe("Document version string"),
-  content: z2.string().min(1).describe("Document content"),
-  effectiveDate: z2.string().optional().describe("Effective date (ISO 8601)")
-});
-var accountAddLegalDoc = {
-  name: "account.addLegalDoc",
-  group: "account",
-  description: "Add a legal document version (SystemAdmin only)",
-  inputSchema: inputSchema2,
-  outputSchema: z2.any(),
-  async execute(input, ctx) {
-    const body = {
-      documentType: input.documentType,
-      version: input.version,
-      content: input.content
-    };
-    if (input.effectiveDate) body.effectiveDate = input.effectiveDate;
-    return ctx.client.post("legal_doc_version", body);
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
+// src/lib/install-method.ts
+function detectInstallMethod() {
+  const execPath = process.argv[1] ?? "";
+  if (execPath.includes("node_modules")) {
+    return "npm";
   }
-};
-
-// src/commands/account/agreements.ts
-import { z as z3 } from "zod";
-var inputSchema3 = z3.object({});
-var accountAgreements = {
-  name: "account.agreements",
-  group: "account",
-  description: "List user agreements",
-  inputSchema: inputSchema3,
-  outputSchema: z3.any(),
-  annotations: { readOnlyHint: true },
-  async execute(_input, ctx) {
-    return ctx.client.get("user_agreements");
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
+  if (execPath.includes("/Cellar/") || execPath.includes("/homebrew/")) {
+    return "homebrew";
   }
-};
-
-// src/commands/account/delete.ts
-import { z as z4 } from "zod";
-
-// src/commands/_shared/confirm.ts
-import { createInterface } from "node:readline/promises";
-async function confirmDestructive(prompt, requiredInput) {
-  if (!process.stdin.isTTY) return false;
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  try {
-    const answer = await rl.question(prompt);
-    if (requiredInput) return answer.trim() === requiredInput;
-    return answer.trim().toLowerCase() === "y" || answer.trim().toLowerCase() === "yes";
-  } finally {
-    rl.close();
+  return "binary";
+}
+function getUpdateInstruction(method) {
+  switch (method) {
+    case "npm":
+      return "npm install -g @elnora-ai/cli@latest";
+    case "homebrew":
+      return "brew upgrade elnora";
+    case "binary":
+      return "elnora update --install";
   }
 }
 
-// src/commands/account/delete.ts
-var inputSchema4 = z4.object({
-  yes: z4.boolean().optional().default(false).describe("Skip confirmation prompt")
-});
-var accountDelete = {
-  name: "account.delete",
-  group: "account",
-  description: "Delete your own account",
-  inputSchema: inputSchema4,
-  outputSchema: z4.any(),
-  annotations: { destructiveHint: true },
-  async execute(input, ctx) {
-    if (!input.yes) {
-      const confirmed = await confirmDestructive("Type DELETE to confirm account deletion: ", "DELETE");
-      if (!confirmed) {
-        return { deleted: false };
-      }
-    }
-    await ctx.client.del("account_delete");
-    return { deleted: true };
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return String(output.deleted);
-    return JSON.stringify(output, null, 2);
+// src/commands/update.ts
+var NPM_REGISTRY_URL2 = "https://registry.npmjs.org/@elnora-ai/cli/latest";
+var GITHUB_REPO = "Elnora-AI/elnora-cli";
+function getPlatformTarget() {
+  const arch = process.arch === "arm64" ? "arm64" : "x64";
+  switch (process.platform) {
+    case "darwin":
+      return { target: `elnora-macos-${arch}`, ext: "tar.gz" };
+    case "linux":
+      return { target: `elnora-linux-${arch}`, ext: "tar.gz" };
+    case "win32":
+      return { target: `elnora-win-${arch}.exe`, ext: "zip" };
+    default:
+      return null;
   }
-};
-
-// src/commands/account/delete-legal-doc.ts
-import { z as z5 } from "zod";
-var inputSchema5 = z5.object({
-  versionId: z5.string().describe("Legal document version ID"),
-  yes: z5.boolean().optional().default(false).describe("Skip confirmation prompt")
-});
-var accountDeleteLegalDoc = {
-  name: "account.deleteLegalDoc",
-  group: "account",
-  description: "Delete a legal document version (SystemAdmin only)",
-  inputSchema: inputSchema5,
-  outputSchema: z5.any(),
-  annotations: { destructiveHint: true },
-  async execute(input, ctx) {
-    if (!input.yes) {
-      const confirmed = await confirmDestructive(
-        `Are you sure you want to delete legal document version ${input.versionId}? [y/N] `
-      );
-      if (!confirmed) {
-        return { deleted: false, versionId: input.versionId };
+}
+async function fetchLatestVersion() {
+  const res = await fetch(NPM_REGISTRY_URL2, { signal: AbortSignal.timeout(5e3) });
+  if (!res.ok) throw new Error(`Registry returned HTTP ${res.status}`);
+  const data = await res.json();
+  return data.version ?? "unknown";
+}
+async function downloadToFile(url, dest) {
+  const res = await fetch(url, { signal: AbortSignal.timeout(12e4), redirect: "follow" });
+  if (!res.ok || !res.body) throw new Error(`HTTP ${res.status}`);
+  const nodeStream = Readable.fromWeb(res.body);
+  await pipeline(nodeStream, createWriteStream(dest));
+}
+async function installBinaryUpdate(latest) {
+  const color2 = isColorEnabled();
+  const platformInfo = getPlatformTarget();
+  if (!platformInfo) {
+    console.error(`Unsupported platform: ${process.platform}.`);
+    console.error("Try: npm install -g @elnora-ai/cli@latest");
+    process.exitCode = 1;
+    return;
+  }
+  const { target, ext } = platformInfo;
+  const binaryUrl = `https://github.com/${GITHUB_REPO}/releases/download/v${latest}/${target}.${ext}`;
+  const checksumUrl = `https://github.com/${GITHUB_REPO}/releases/download/v${latest}/${target}.sha256`;
+  const tmp = join7(tmpdir(), `elnora-update-${Date.now()}`);
+  mkdirSync4(tmp, { recursive: true });
+  const archivePath = join7(tmp, `${target}.${ext}`);
+  try {
+    console.error("Downloading...");
+    await downloadToFile(binaryUrl, archivePath);
+    let checksumVerified = false;
+    try {
+      const checksumRes = await fetch(checksumUrl, { signal: AbortSignal.timeout(15e3) });
+      if (checksumRes.ok) {
+        const checksumText = await checksumRes.text();
+        const expected = checksumText.split(/\s/)[0].trim();
+        if (expected.length === 64) {
+          const actual = createHash("sha256").update(readFileSync5(archivePath)).digest("hex");
+          if (actual.toLowerCase() !== expected.toLowerCase()) {
+            console.error("Checksum verification failed. The download may be corrupted.");
+            process.exitCode = 1;
+            return;
+          }
+          checksumVerified = true;
+        }
       }
+    } catch {
     }
-    await ctx.client.del("legal_doc_version_id", {
-      pathParams: { id: input.versionId }
-    });
-    return { deleted: true, versionId: input.versionId };
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.versionId;
-    return JSON.stringify(output, null, 2);
-  }
-};
-
-// src/commands/account/get.ts
-import { z as z6 } from "zod";
-var inputSchema6 = z6.object({
-  userId: z6.string().describe("User ID")
-});
-var accountGet = {
-  name: "account.get",
-  group: "account",
-  description: "Get account details for a user",
-  inputSchema: inputSchema6,
-  outputSchema: z6.any(),
-  annotations: { readOnlyHint: true },
-  async execute(input, ctx) {
-    return ctx.client.get("account_user", {
-      pathParams: { id: input.userId }
-    });
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
-  }
-};
-
-// src/commands/account/update.ts
-init_errors();
-import { z as z7 } from "zod";
-var inputSchema7 = z7.object({
-  userId: z7.string().describe("User ID"),
-  firstName: z7.string().optional().describe("First name"),
-  lastName: z7.string().optional().describe("Last name")
-});
-var accountUpdate = {
-  name: "account.update",
-  group: "account",
-  description: "Update account details for a user",
-  inputSchema: inputSchema7,
-  outputSchema: z7.any(),
-  async execute(input, ctx) {
-    const body = {};
-    if (input.firstName !== void 0) body.firstName = input.firstName;
-    if (input.lastName !== void 0) body.lastName = input.lastName;
-    if (Object.keys(body).length === 0) {
-      throw new ValidationError("At least one of --firstName or --lastName is required");
+    if (!checksumVerified) {
+      console.error("Warning: Could not verify download checksum. Proceeding anyway.");
+    }
+    if (process.platform === "win32") {
+      const extractDir = join7(tmp, "extracted");
+      execFileSync("powershell", [
+        "-NoProfile",
+        "-Command",
+        `Expand-Archive -Path '${archivePath}' -DestinationPath '${extractDir}' -Force`
+      ]);
+      const installDir = join7(process.env.USERPROFILE ?? process.env.HOME ?? "", ".elnora", "bin");
+      mkdirSync4(installDir, { recursive: true });
+      copyFileSync(join7(extractDir, target), join7(installDir, "elnora.exe"));
+    } else {
+      execFileSync("tar", ["-xzf", archivePath, "-C", tmp]);
+      const installDir = process.env.ELNORA_INSTALL_DIR ?? join7(process.env.HOME ?? "", ".local", "bin");
+      mkdirSync4(installDir, { recursive: true });
+      const dest = join7(installDir, "elnora");
+      copyFileSync(join7(tmp, target), dest);
+      chmodSync2(dest, 493);
+    }
+    const done = color2 ? `${pc4.green("\u2713")} Updated to v${latest}` : `\u2713 Updated to v${latest}`;
+    console.error(done);
+  } finally {
+    try {
+      rmSync(tmp, { recursive: true, force: true });
+    } catch {
     }
-    return ctx.client.patch("account_user", body, {
-      pathParams: { id: input.userId }
-    });
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
   }
-};
+}
+function addUpdateCommand(program2) {
+  program2.command("update").description("Check for updates (use --install to apply)").option("--install", "Download and install the update").action(async (opts) => {
+    const color2 = isColorEnabled();
+    const method = detectInstallMethod();
+    let latest;
+    try {
+      latest = await fetchLatestVersion();
+    } catch {
+      console.error("Failed to check for updates.");
+      process.exitCode = 1;
+      return;
+    }
+    if (latest === "unknown") {
+      console.error("Could not determine latest version.");
+      process.exitCode = 1;
+      return;
+    }
+    if (latest === VERSION || !isNewerVersion(latest, VERSION)) {
+      const msg2 = color2 ? `${pc4.green("\u2713")} Already on the latest version (v${VERSION})` : `\u2713 Already on the latest version (v${VERSION})`;
+      console.error(msg2);
+      return;
+    }
+    const instruction = getUpdateInstruction(method);
+    if (!opts.install) {
+      const msg2 = color2 ? `${pc4.yellow("Update available:")} v${VERSION} \u2192 v${latest}` : `Update available: v${VERSION} \u2192 v${latest}`;
+      console.error(msg2);
+      console.error(`Run: ${instruction}`);
+      return;
+    }
+    const msg = color2 ? `Updating Elnora CLI ${pc4.dim(`v${VERSION}`)} \u2192 ${pc4.green(`v${latest}`)}...` : `Updating Elnora CLI v${VERSION} \u2192 v${latest}...`;
+    console.error(msg);
+    if (method === "npm") {
+      console.error("Installed via npm. Run:");
+      console.error(`  npm install -g @elnora-ai/cli@latest`);
+      return;
+    }
+    if (method === "homebrew") {
+      console.error("Installed via Homebrew. Run:");
+      console.error(`  brew upgrade elnora`);
+      return;
+    }
+    try {
+      await installBinaryUpdate(latest);
+    } catch {
+      console.error("Update failed. Try manually:");
+      console.error(
+        process.platform === "win32" ? "  irm https://cli.elnora.ai/install.ps1 | iex" : "  curl -fsSL https://cli.elnora.ai/install.sh | bash"
+      );
+      process.exitCode = 1;
+    }
+  });
+}
 
-// src/commands/account/update-legal-doc.ts
-init_errors();
-import { z as z8 } from "zod";
-var inputSchema8 = z8.object({
-  versionId: z8.string().describe("Legal document version ID"),
-  content: z8.string().optional().describe("Updated content"),
-  effectiveDate: z8.string().optional().describe("Updated effective date (ISO 8601)")
-});
-var accountUpdateLegalDoc = {
-  name: "account.updateLegalDoc",
-  group: "account",
-  description: "Update a legal document version (SystemAdmin only)",
-  inputSchema: inputSchema8,
-  outputSchema: z8.any(),
-  async execute(input, ctx) {
-    const body = {};
-    if (input.content !== void 0) body.content = input.content;
-    if (input.effectiveDate !== void 0) body.effectiveDate = input.effectiveDate;
-    if (Object.keys(body).length === 0) {
-      throw new ValidationError("At least one of --content or --effectiveDate is required");
+// src/commands/whoami.ts
+init_client();
+init_profiles();
+function addWhoamiCommand(program2) {
+  program2.command("whoami").description("Show current authentication context").action(async () => {
+    const parentOpts = program2.opts();
+    const profileName = parentOpts.profile ?? "default";
+    try {
+      const hint = resolveCredentialHint(profileName);
+      let orgName = "unknown";
+      try {
+        const client = new ElnoraApiClient(resolveApiKey(profileName));
+        const orgs = await client.get("organizations");
+        const orgList = Array.isArray(orgs) ? orgs : orgs?.items ?? [];
+        if (orgList.length > 0) orgName = orgList[0]?.name ?? "unknown";
+      } catch {
+      }
+      if (parentOpts.json) {
+        console.log(JSON.stringify({ profile: profileName, credential: hint, orgName }, null, 2));
+      } else {
+        console.log(`
+Profile:     ${profileName}`);
+        console.log(`Credential:  ${hint}`);
+        console.log(`Org:      ${orgName}`);
+        console.log("");
+      }
+    } catch (e) {
+      console.error(e instanceof Error ? e.message : "Not authenticated");
+      console.error("Run: elnora auth login");
+      process.exit(3);
     }
-    return ctx.client.patch("legal_doc_version_id", body, {
-      pathParams: { id: input.versionId }
-    });
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
-  }
-};
+  });
+}
 
-// src/commands/account/users.ts
-import { z as z9 } from "zod";
-var inputSchema9 = z9.object({
-  state: z9.enum(["Active", "Pending", "Deleted"]).optional().describe("Filter by user state"),
-  refCode: z9.string().optional().describe("Filter by referral code")
+// src/commands/account/accept-terms.ts
+import { z } from "zod";
+var inputSchema = z.object({
+  documentVersionId: z.string().describe("Document version ID to accept")
 });
-var accountUsers = {
-  name: "account.users",
+var accountAcceptTerms = {
+  name: "account.acceptTerms",
   group: "account",
-  description: "List all users (admin)",
-  inputSchema: inputSchema9,
-  outputSchema: z9.any(),
-  annotations: { readOnlyHint: true },
+  description: "Accept a user agreement / terms of service",
+  inputSchema,
+  outputSchema: z.any(),
   async execute(input, ctx) {
-    const queryParams = {};
-    if (input.state) queryParams.state = input.state;
-    if (input.refCode) queryParams.refCode = input.refCode;
-    return ctx.client.get("account_users", {
-      queryParams: Object.keys(queryParams).length > 0 ? queryParams : void 0
+    return ctx.client.post("user_agreement", {
+      documentVersionId: input.documentVersionId
     });
   },
   formatOutput(output, format) {
@@ -1391,118 +2199,28 @@ var accountUsers = {
   }
 };
 
-// src/commands/account/index.ts
-function registerAccountCommands() {
-  return [
-    accountGet,
-    accountUpdate,
-    accountAgreements,
-    accountAcceptTerms,
-    accountDelete,
-    accountUsers,
-    accountAddLegalDoc,
-    accountUpdateLegalDoc,
-    accountDeleteLegalDoc
-  ];
-}
-
-// src/commands/api-keys/create.ts
-import { z as z10 } from "zod";
-var inputSchema10 = z10.object({
-  name: z10.string().min(1).describe("API key name"),
-  scopes: z10.string().optional().describe("Comma-separated list of scopes")
-});
-var apiKeysCreate = {
-  name: "api-keys.create",
-  group: "api-keys",
-  description: "Create a new API key",
-  inputSchema: inputSchema10,
-  outputSchema: z10.any(),
-  async execute(input, ctx) {
-    const parsedScopes = input.scopes ? input.scopes.split(",").map((s) => s.trim()).filter((s) => s.length > 0) : void 0;
-    return ctx.client.post("api_keys", { name: input.name, scopes: parsedScopes });
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
-  }
-};
-
-// src/commands/api-keys/get-policy.ts
-import { z as z11 } from "zod";
-var inputSchema11 = z11.object({});
-var apiKeysGetPolicy = {
-  name: "api-keys.getPolicy",
-  group: "api-keys",
-  description: "Get the API key creation policy",
-  inputSchema: inputSchema11,
-  outputSchema: z11.any(),
-  annotations: { readOnlyHint: true },
-  async execute(_input, ctx) {
-    return ctx.client.get("api_key_policy");
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
-  }
-};
-
-// src/commands/api-keys/list.ts
-import { z as z12 } from "zod";
-var inputSchema12 = z12.object({});
-var apiKeysList = {
-  name: "api-keys.list",
-  group: "api-keys",
-  description: "List all API keys",
-  inputSchema: inputSchema12,
-  outputSchema: z12.any(),
-  annotations: { readOnlyHint: true },
-  async execute(_input, ctx) {
-    return ctx.client.get("api_keys");
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.id ?? JSON.stringify(output);
-    return JSON.stringify(output, null, 2);
-  }
-};
-
-// src/commands/api-keys/revoke.ts
-import { z as z13 } from "zod";
-var inputSchema13 = z13.object({
-  keyId: z13.string().uuid().describe("API key ID to revoke")
-});
-var apiKeysRevoke = {
-  name: "api-keys.revoke",
-  group: "api-keys",
-  description: "Revoke an API key",
-  inputSchema: inputSchema13,
-  outputSchema: z13.any(),
-  annotations: { destructiveHint: true },
-  async execute(input, ctx) {
-    await ctx.client.del("api_key", {
-      pathParams: { id: input.keyId }
-    });
-    return { revoked: true, keyId: input.keyId };
-  },
-  formatOutput(output, format) {
-    if (format === "compact") return output.keyId;
-    return JSON.stringify(output, null, 2);
-  }
-};
-
-// src/commands/api-keys/set-policy.ts
-import { z as z14 } from "zod";
-var inputSchema14 = z14.object({
-  policy: z14.enum(["all_members", "admins_only"]).describe("API key creation policy")
+// src/commands/account/add-legal-doc.ts
+import { z as z2 } from "zod";
+var inputSchema2 = z2.object({
+  documentType: z2.string().min(1).describe("Document type"),
+  version: z2.string().min(1).describe("Document version string"),
+  content: z2.string().min(1).describe("Document content"),
+  effectiveDate: z2.string().optional().describe("Effective date (ISO 8601)")
 });
-var apiKeysSetPolicy = {
-  name: "api-keys.setPolicy",
-  group: "api-keys",
-  description: "Set the API key creation policy",
-  inputSchema: inputSchema14,
-  outputSchema: z14.any(),
+var accountAddLegalDoc = {
+  name: "account.addLegalDoc",
+  group: "account",
+  description: "Add a legal document version (SystemAdmin only)",
+  inputSchema: inputSchema2,
+  outputSchema: z2.any(),
   async execute(input, ctx) {
-    return ctx.client.put("api_key_policy", { policy: input.policy });
+    const body = {
+      documentType: input.documentType,
+      version: input.version,
+      content: input.content
+    };
+    if (input.effectiveDate) body.effectiveDate = input.effectiveDate;
+    return ctx.client.post("legal_doc_version", body);
   },
   formatOutput(output, format) {
     if (format === "compact") return output.id ?? JSON.stringify(output);
@@ -1510,46 +2228,18 @@ var apiKeysSetPolicy = {
   }
 };
 
-// src/commands/api-keys/index.ts
-function registerApiKeyCommands() {
-  return [apiKeysCreate, apiKeysList, apiKeysRevoke, apiKeysGetPolicy, apiKeysSetPolicy];
-}
-
-// src/commands/audit/list.ts
-import { z as z16 } from "zod";
-
-// src/commands/_shared/pagination.ts
-import { z as z15 } from "zod";
-var paginationInput = {
-  page: z15.number().int().min(1).default(1).describe("Page number"),
-  pageSize: z15.number().int().min(1).max(100).default(25).describe("Results per page")
-};
-
-// src/commands/audit/list.ts
-var inputSchema15 = z16.object({
-  orgId: z16.string().uuid().describe("Organization ID"),
-  ...paginationInput,
-  action: z16.string().optional().describe("Filter by action type"),
-  userId: z16.string().optional().describe("Filter by user ID")
-});
-var auditList = {
-  name: "audit.list",
-  group: "audit",
-  description: "List audit log entries for an organization",
-  inputSchema: inputSchema15,
-  outputSchema: z16.any(),
+// src/commands/account/agreements.ts
+import { z as z3 } from "zod";
+var inputSchema3 = z3.object({});
+var accountAgreements = {
+  name: "account.agreements",
+  group: "account",
+  description: "List user agreements",
+  inputSchema: inputSchema3,
+  outputSchema: z3.any(),
   annotations: { readOnlyHint: true },
-  async execute(input, ctx) {
-    const queryParams = {
-      page: input.page,
-      pageSize: input.pageSize
-    };
-    if (input.action) queryParams.action = input.action;
-    if (input.userId) queryParams.userId = input.userId;
-    return ctx.client.get("audit_log", {
-      pathParams: { orgId: input.orgId },
-      queryParams
-    });
+  async execute(_input, ctx) {
+    return ctx.client.get("user_agreements");
   },
   formatOutput(output, format) {
     if (format === "compact") return output.id ?? JSON.stringify(output);
@@ -1557,645 +2247,671 @@ var auditList = {
   }
 };
 
-// src/commands/audit/index.ts
-function registerAuditCommands() {
-  return [auditList];
-}
-
-// src/commands/auth/login.ts
-init_client();
-init_errors();
-init_profiles();
-import { z as z17 } from "zod";
-
-// src/lib/prompt.ts
-import { createInterface as createInterface2 } from "node:readline";
-function promptSecret(message) {
-  return new Promise((resolve, reject) => {
-    const { stdin, stdout } = process;
-    if (!stdin.isTTY) {
-      const rl = createInterface2({ input: stdin, output: stdout });
-      rl.question(message, (answer) => {
-        rl.close();
-        resolve(answer.trim());
-      });
-      return;
-    }
-    stdout.write(message);
-    let input = "";
-    const wasRaw = stdin.isRaw;
-    stdin.setRawMode(true);
-    stdin.resume();
-    stdin.setEncoding("utf8");
-    const onData = (char) => {
-      switch (char) {
-        case "\n":
-        case "\r":
-        case "": {
-          stdin.setRawMode(wasRaw);
-          stdin.pause();
-          stdin.removeListener("data", onData);
-          stdout.write("\n");
-          resolve(input.trim());
-          break;
-        }
-        case "":
-        // Ctrl+C
-        case "\x1B": {
-          stdin.setRawMode(wasRaw);
-          stdin.pause();
-          stdin.removeListener("data", onData);
-          stdout.write("\n");
-          reject(new Error("Cancelled"));
-          break;
-        }
-        case "\x7F":
-        case "\b": {
-          if (input.length > 0) {
-            input = input.slice(0, -1);
-            stdout.write("\b \b");
-          }
-          break;
-        }
-        default: {
-          input += char;
-          stdout.write("*");
-          break;
-        }
-      }
-    };
-    stdin.on("data", onData);
-  });
-}
-
-// src/lib/tty.ts
-function isTTY() {
-  return Boolean(process.stdout.isTTY);
-}
-function isColorEnabled() {
-  if (process.env.NO_COLOR !== void 0) return false;
-  if (process.env.FORCE_COLOR !== void 0) return true;
-  return isTTY();
-}
-
-// src/commands/auth/login.ts
-var inputSchema16 = z17.object({
-  apiKey: z17.string().optional().describe("Elnora API key (elnora_live_...)"),
-  profile: z17.string().default("default").describe("Profile name to save key under")
-});
-var authLogin = {
-  name: "auth.login",
-  group: "auth",
-  description: "Set up authentication by saving an API key to a profile",
-  inputSchema: inputSchema16,
-  outputSchema: z17.any(),
-  async execute(input, _ctx) {
-    let apiKey = input.apiKey;
-    const profileName = input.profile;
-    validateProfileName(profileName);
-    const existing = listProfileNames();
-    const profileExists = existing.includes(profileName);
-    if (!apiKey) {
-      if (profileExists) {
-        let savedKey;
-        try {
-          savedKey = getApiKey(profileName);
-        } catch {
-        }
-        if (savedKey && isTTY()) {
-          process.stderr.write(`
-  Checking profile "${profileName}"...`);
-          try {
-            const client = new ElnoraApiClient(savedKey);
-            const result = await client.get("projects", {
-              queryParams: { page: 1, pageSize: 1 }
-            });
-            const projectCount = result?.totalCount ?? result?.items?.length ?? 0;
-            process.stderr.write(` authenticated (${projectCount} project${projectCount !== 1 ? "s" : ""}).
-
-`);
-            process.stderr.write("  To update your API key, run:\n");
-            process.stderr.write(
-              `    elnora auth login --api-key <new-key>${profileName !== "default" ? ` --profile ${profileName}` : ""}
+// src/commands/account/delete.ts
+import { z as z4 } from "zod";
 
-`
-            );
-            return null;
-          } catch {
-            process.stderr.write(" key is invalid or expired.\n\n");
-          }
-        }
-      }
-      if (isTTY()) {
-        if (profileExists) {
-          process.stderr.write(`  Enter a new API key for profile "${profileName}"
-`);
-        } else {
-          process.stderr.write("\n  Set up Elnora CLI authentication\n");
-        }
-        process.stderr.write("  Get your API key at: https://platform.elnora.ai > Settings > API Keys\n\n");
-        try {
-          apiKey = await promptSecret("  API key (Ctrl+C to cancel): ");
-        } catch {
-          process.stderr.write("\n  Login cancelled.\n\n");
-          process.exit(0);
-        }
-        process.stderr.write("\n");
-      }
-    }
-    if (!apiKey) {
-      throw new ValidationError(
-        "API key is required. Use --api-key flag or run interactively in a terminal.",
-        "Get your API key from: https://platform.elnora.ai > Settings > API Keys"
-      );
-    }
-    const key = apiKey.trim();
-    if (!key.startsWith("elnora_live_")) {
-      throw new AuthError("API key must start with 'elnora_live_'. Check that you copied the full key.", {
-        suggestion: "Get your API key from: https://platform.elnora.ai > Settings > API Keys"
-      });
-    }
-    if (key.length < 20) {
-      throw new AuthError("API key looks too short. Make sure you copied the full key.", {
-        suggestion: "Get your API key from: https://platform.elnora.ai > Settings > API Keys"
-      });
-    }
-    if (isTTY()) {
-      process.stderr.write("  Verifying...");
-    }
-    try {
-      const tempClient = new ElnoraApiClient(key);
-      const result = await tempClient.get("projects", {
-        queryParams: { page: 1, pageSize: 1 }
-      });
-      const projectCount = result?.totalCount ?? result?.items?.length ?? 0;
-      const configPath = saveProfile(profileName, key);
-      if (isTTY()) {
-        process.stderr.write(` Done! ${projectCount} project${projectCount !== 1 ? "s" : ""} accessible.
-`);
-        process.stderr.write(`  Saved to profile "${profileName}" at ${configPath}
+// src/commands/_shared/confirm.ts
+import { createInterface } from "node:readline/promises";
+async function confirmDestructive(prompt, requiredInput) {
+  if (!process.stdin.isTTY) return false;
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  try {
+    const answer = await rl.question(prompt);
+    if (requiredInput) return answer.trim() === requiredInput;
+    return answer.trim().toLowerCase() === "y" || answer.trim().toLowerCase() === "yes";
+  } finally {
+    rl.close();
+  }
+}
 
-`);
-      }
-      return { profile: profileName, verified: true, configPath };
-    } catch (err) {
-      if (isTTY()) {
-        process.stderr.write("\n");
-      }
-      if (err instanceof AuthError) {
-        throw new AuthError("API key is invalid or has been revoked. Please check your key and try again.", {
-          suggestion: "Get a new key from: https://platform.elnora.ai > Settings > API Keys"
-        });
+// src/commands/account/delete.ts
+var inputSchema4 = z4.object({
+  yes: z4.boolean().optional().default(false).describe("Skip confirmation prompt")
+});
+var accountDelete = {
+  name: "account.delete",
+  group: "account",
+  description: "Delete your own account",
+  inputSchema: inputSchema4,
+  outputSchema: z4.any(),
+  annotations: { destructiveHint: true },
+  async execute(input, ctx) {
+    if (!input.yes) {
+      const confirmed = await confirmDestructive("Type DELETE to confirm account deletion: ", "DELETE");
+      if (!confirmed) {
+        return { deleted: false };
       }
-      throw err;
     }
+    await ctx.client.del("account_delete");
+    return { deleted: true };
   },
   formatOutput(output, format) {
-    const data = output;
-    if (format === "compact") return data.profile ?? JSON.stringify(output);
-    const lines = [
-      `\u2713 Authenticated! API key saved to profile "${data.profile}".`,
-      "",
-      "Next steps:",
-      "  elnora projects list                         See your projects",
-      "  elnora tasks create --project <ID> --stream  Start a conversation",
-      "  elnora doctor                                Verify your setup"
-    ];
-    return lines.join("\n");
+    if (format === "compact") return String(output.deleted);
+    return JSON.stringify(output, null, 2);
   }
 };
 
-// src/commands/auth/logout.ts
-init_profiles();
-import { z as z18 } from "zod";
-var inputSchema17 = z18.object({
-  profile: z18.string().optional().describe("Profile name to remove (default: 'default')"),
-  all: z18.boolean().default(false).describe("Remove all profiles")
+// src/commands/account/delete-legal-doc.ts
+import { z as z5 } from "zod";
+var inputSchema5 = z5.object({
+  versionId: z5.string().describe("Legal document version ID"),
+  yes: z5.boolean().optional().default(false).describe("Skip confirmation prompt")
 });
-var authLogout = {
-  name: "auth.logout",
-  group: "auth",
-  description: "Remove saved credentials",
-  inputSchema: inputSchema17,
-  outputSchema: z18.any(),
+var accountDeleteLegalDoc = {
+  name: "account.deleteLegalDoc",
+  group: "account",
+  description: "Delete a legal document version (SystemAdmin only)",
+  inputSchema: inputSchema5,
+  outputSchema: z5.any(),
   annotations: { destructiveHint: true },
-  async execute(input, _ctx) {
-    if (input.all) {
-      const names = listProfileNames();
-      for (const name of names) {
-        removeProfile(name);
+  async execute(input, ctx) {
+    if (!input.yes) {
+      const confirmed = await confirmDestructive(
+        `Are you sure you want to delete legal document version ${input.versionId}? [y/N] `
+      );
+      if (!confirmed) {
+        return { deleted: false, versionId: input.versionId };
       }
-      return { loggedOut: true, profile: "all", removedCount: names.length };
     }
-    const profileName = input.profile ?? "default";
-    const removed = removeProfile(profileName);
-    return { loggedOut: true, profile: profileName, removed };
+    await ctx.client.del("legal_doc_version_id", {
+      pathParams: { id: input.versionId }
+    });
+    return { deleted: true, versionId: input.versionId };
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.versionId;
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/account/get.ts
+import { z as z6 } from "zod";
+var inputSchema6 = z6.object({
+  userId: z6.string().describe("User ID")
+});
+var accountGet = {
+  name: "account.get",
+  group: "account",
+  description: "Get account details for a user",
+  inputSchema: inputSchema6,
+  outputSchema: z6.any(),
+  annotations: { readOnlyHint: true },
+  async execute(input, ctx) {
+    return ctx.client.get("account_user", {
+      pathParams: { id: input.userId }
+    });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.id ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/account/update.ts
+init_errors();
+import { z as z7 } from "zod";
+var inputSchema7 = z7.object({
+  userId: z7.string().describe("User ID"),
+  firstName: z7.string().optional().describe("First name"),
+  lastName: z7.string().optional().describe("Last name")
+});
+var accountUpdate = {
+  name: "account.update",
+  group: "account",
+  description: "Update account details for a user",
+  inputSchema: inputSchema7,
+  outputSchema: z7.any(),
+  async execute(input, ctx) {
+    const body = {};
+    if (input.firstName !== void 0) body.firstName = input.firstName;
+    if (input.lastName !== void 0) body.lastName = input.lastName;
+    if (Object.keys(body).length === 0) {
+      throw new ValidationError("At least one of --firstName or --lastName is required");
+    }
+    return ctx.client.patch("account_user", body, {
+      pathParams: { id: input.userId }
+    });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.id ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/account/update-legal-doc.ts
+init_errors();
+import { z as z8 } from "zod";
+var inputSchema8 = z8.object({
+  versionId: z8.string().describe("Legal document version ID"),
+  content: z8.string().optional().describe("Updated content"),
+  effectiveDate: z8.string().optional().describe("Updated effective date (ISO 8601)")
+});
+var accountUpdateLegalDoc = {
+  name: "account.updateLegalDoc",
+  group: "account",
+  description: "Update a legal document version (SystemAdmin only)",
+  inputSchema: inputSchema8,
+  outputSchema: z8.any(),
+  async execute(input, ctx) {
+    const body = {};
+    if (input.content !== void 0) body.content = input.content;
+    if (input.effectiveDate !== void 0) body.effectiveDate = input.effectiveDate;
+    if (Object.keys(body).length === 0) {
+      throw new ValidationError("At least one of --content or --effectiveDate is required");
+    }
+    return ctx.client.patch("legal_doc_version_id", body, {
+      pathParams: { id: input.versionId }
+    });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.id ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/account/users.ts
+import { z as z9 } from "zod";
+var inputSchema9 = z9.object({
+  state: z9.enum(["Active", "Pending", "Deleted"]).optional().describe("Filter by user state"),
+  refCode: z9.string().optional().describe("Filter by referral code")
+});
+var accountUsers = {
+  name: "account.users",
+  group: "account",
+  description: "List all users (admin)",
+  inputSchema: inputSchema9,
+  outputSchema: z9.any(),
+  annotations: { readOnlyHint: true },
+  async execute(input, ctx) {
+    const queryParams = {};
+    if (input.state) queryParams.state = input.state;
+    if (input.refCode) queryParams.refCode = input.refCode;
+    return ctx.client.get("account_users", {
+      queryParams: Object.keys(queryParams).length > 0 ? queryParams : void 0
+    });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.id ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/account/index.ts
+function registerAccountCommands() {
+  return [
+    accountGet,
+    accountUpdate,
+    accountAgreements,
+    accountAcceptTerms,
+    accountDelete,
+    accountUsers,
+    accountAddLegalDoc,
+    accountUpdateLegalDoc,
+    accountDeleteLegalDoc
+  ];
+}
+
+// src/commands/api-keys/create.ts
+import { z as z10 } from "zod";
+var inputSchema10 = z10.object({
+  name: z10.string().min(1).describe("API key name"),
+  scopes: z10.string().optional().describe("Comma-separated list of scopes")
+});
+var keysCreate = {
+  name: "api-keys.create",
+  group: "api-keys",
+  description: "Create a new API key",
+  inputSchema: inputSchema10,
+  outputSchema: z10.any(),
+  async execute(input, ctx) {
+    const parsedScopes = input.scopes ? input.scopes.split(",").map((s) => s.trim()).filter((s) => s.length > 0) : void 0;
+    return ctx.client.post("api_keys", { name: input.name, scopes: parsedScopes });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.id ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/api-keys/get-policy.ts
+import { z as z11 } from "zod";
+var inputSchema11 = z11.object({});
+var keysGetPolicy = {
+  name: "api-keys.getPolicy",
+  group: "api-keys",
+  description: "Get the API key creation policy",
+  inputSchema: inputSchema11,
+  outputSchema: z11.any(),
+  annotations: { readOnlyHint: true },
+  async execute(_input, ctx) {
+    return ctx.client.get("api_key_policy");
   },
   formatOutput(output, format) {
-    if (format === "compact") return output.profile ?? JSON.stringify(output);
+    if (format === "compact") return output.id ?? JSON.stringify(output);
     return JSON.stringify(output, null, 2);
   }
 };
 
-// src/commands/auth/profiles.ts
-init_profiles();
-import { z as z19 } from "zod";
-var inputSchema18 = z19.object({});
-var authProfiles = {
-  name: "auth.profiles",
-  group: "auth",
-  description: "List all configured profiles",
-  inputSchema: inputSchema18,
-  outputSchema: z19.any(),
+// src/commands/api-keys/list.ts
+import { z as z12 } from "zod";
+var inputSchema12 = z12.object({});
+var keysList = {
+  name: "api-keys.list",
+  group: "api-keys",
+  description: "List all API keys",
+  inputSchema: inputSchema12,
+  outputSchema: z12.any(),
   annotations: { readOnlyHint: true },
-  async execute(_input, _ctx) {
-    const profiles = loadProfiles();
-    const items = [];
-    for (const [name, data] of Object.entries(profiles)) {
-      const key = data.api_key ?? "";
-      const masked = key.length > 16 ? `${key.slice(0, 12)}...${key.slice(-4)}` : "[invalid]";
-      items.push({ name, apiKey: masked });
-    }
-    return { profiles: items };
+  async execute(_input, ctx) {
+    return ctx.client.get("api_keys");
   },
   formatOutput(output, format) {
-    if (format === "compact") {
-      const profiles = output.profiles ?? [];
-      return profiles.map((p) => p.name).join(", ");
-    }
+    if (format === "compact") return output.id ?? JSON.stringify(output);
     return JSON.stringify(output, null, 2);
   }
 };
 
-// src/commands/auth/status.ts
-import { z as z20 } from "zod";
-var inputSchema19 = z20.object({});
-var authStatus = {
-  name: "auth.status",
-  group: "auth",
-  description: "Verify API key and show connection info",
-  inputSchema: inputSchema19,
-  outputSchema: z20.any(),
-  annotations: { readOnlyHint: true },
-  async execute(_input, ctx) {
-    const result = await ctx.client.get("projects", {
-      queryParams: { page: 1, pageSize: 1 }
+// src/commands/api-keys/revoke.ts
+import { z as z13 } from "zod";
+var inputSchema13 = z13.object({
+  keyId: z13.string().uuid().describe("API key ID to revoke")
+});
+var keysRevoke = {
+  name: "api-keys.revoke",
+  group: "api-keys",
+  description: "Revoke an API key",
+  inputSchema: inputSchema13,
+  outputSchema: z13.any(),
+  annotations: { destructiveHint: true },
+  async execute(input, ctx) {
+    await ctx.client.del("api_key", {
+      pathParams: { id: input.keyId }
     });
-    const projectCount = result.totalCount ?? result.items?.length ?? 0;
-    return { profile: ctx.profileName, authenticated: true, projectCount };
+    return { revoked: true, keyId: input.keyId };
   },
   formatOutput(output, format) {
-    if (format === "compact") return String(output.authenticated ?? "");
+    if (format === "compact") return output.keyId;
     return JSON.stringify(output, null, 2);
   }
 };
 
-// src/commands/auth/validate.ts
-init_profiles();
-import { z as z21 } from "zod";
-var inputSchema20 = z21.object({
-  token: z21.string().optional().describe("Token to validate (defaults to current API key)")
+// src/commands/api-keys/set-policy.ts
+import { z as z14 } from "zod";
+var inputSchema14 = z14.object({
+  policy: z14.enum(["all_members", "admins_only"]).describe("API key creation policy")
 });
-var authValidate = {
-  name: "auth.validate",
-  group: "auth",
-  description: "Validate a JWT or API key token",
-  inputSchema: inputSchema20,
-  outputSchema: z21.any(),
+var keysSetPolicy = {
+  name: "api-keys.setPolicy",
+  group: "api-keys",
+  description: "Set the API key creation policy",
+  inputSchema: inputSchema14,
+  outputSchema: z14.any(),
   async execute(input, ctx) {
-    const tokenToValidate = input.token ?? resolveApiKey();
-    return ctx.client.post("auth_validate", { token: tokenToValidate });
+    return ctx.client.put("api_key_policy", { policy: input.policy });
   },
   formatOutput(output, format) {
-    if (format === "compact") return JSON.stringify(output);
+    if (format === "compact") return output.id ?? JSON.stringify(output);
     return JSON.stringify(output, null, 2);
   }
 };
 
-// src/commands/auth/index.ts
-function registerAuthCommands() {
-  return [authLogin, authStatus, authLogout, authProfiles, authValidate];
+// src/commands/api-keys/index.ts
+function registerApiKeyCommands() {
+  return [keysCreate, keysList, keysRevoke, keysGetPolicy, keysSetPolicy];
 }
 
-// src/commands/completion.ts
-function extractCommandTree(cmd) {
-  return {
-    name: cmd.name(),
-    description: cmd.description(),
-    subcommands: cmd.commands.map(extractCommandTree),
-    options: cmd.options.map((o) => ({
-      flags: o.long ?? o.short ?? "",
-      description: o.description
-    }))
-  };
-}
-function generateBash(root) {
-  const lines = [
-    "# Bash completion for elnora",
-    "# Install: elnora completion bash > ~/.local/share/bash-completion/completions/elnora",
-    "",
-    "_elnora() {",
-    '  local cur="${COMP_WORDS[COMP_CWORD]}"',
-    '  local prev="${COMP_WORDS[COMP_CWORD-1]}"',
-    ""
-  ];
-  const topCmds = root.subcommands.map((c) => c.name).join(" ");
-  lines.push(`  if [ "$COMP_CWORD" -eq 1 ]; then`);
-  lines.push(`    COMPREPLY=( $(compgen -W "${topCmds}" -- "$cur") )`);
-  lines.push("    return");
-  lines.push("  fi");
-  lines.push("");
-  lines.push('  case "${COMP_WORDS[1]}" in');
-  for (const group of root.subcommands) {
-    if (group.subcommands.length > 0) {
-      const subs = group.subcommands.map((s) => s.name).join(" ");
-      lines.push(`    ${group.name})`);
-      lines.push(`      COMPREPLY=( $(compgen -W "${subs}" -- "$cur") )`);
-      lines.push("      ;;");
-    }
-  }
-  lines.push("  esac");
-  lines.push("}");
-  lines.push("");
-  lines.push("complete -F _elnora elnora");
-  return lines.join("\n");
-}
-function generateZsh(root) {
-  const lines = [
-    "#compdef elnora",
-    "# Zsh completion for elnora",
-    "# Install: elnora completion zsh > ~/.zfunc/_elnora",
-    "",
-    "_elnora() {",
-    "  local -a commands",
-    ""
-  ];
-  lines.push("  if (( CURRENT == 2 )); then");
-  lines.push("    commands=(");
-  for (const cmd of root.subcommands) {
-    lines.push(`      '${cmd.name}:${cmd.description.replace(/\\/g, "\\\\").replace(/'/g, "")}'`);
-  }
-  lines.push("    )");
-  lines.push("    _describe 'command' commands");
-  lines.push("    return");
-  lines.push("  fi");
-  lines.push("");
-  lines.push("  case $words[2] in");
-  for (const group of root.subcommands) {
-    if (group.subcommands.length > 0) {
-      lines.push(`    ${group.name})`);
-      lines.push("      local -a subcommands");
-      lines.push("      subcommands=(");
-      for (const sub of group.subcommands) {
-        lines.push(`        '${sub.name}:${sub.description.replace(/\\/g, "\\\\").replace(/'/g, "")}'`);
-      }
-      lines.push("      )");
-      lines.push("      _describe 'subcommand' subcommands");
-      lines.push("      ;;");
-    }
-  }
-  lines.push("  esac");
-  lines.push("}");
-  lines.push("");
-  lines.push("_elnora");
-  return lines.join("\n");
-}
-function generateFish(root) {
-  const lines = [
-    "# Fish completion for elnora",
-    "# Install: elnora completion fish > ~/.config/fish/completions/elnora.fish",
-    ""
-  ];
-  for (const cmd of root.subcommands) {
-    lines.push(
-      `complete -c elnora -n "__fish_use_subcommand" -a "${cmd.name}" -d "${cmd.description.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`
-    );
-  }
-  lines.push("");
-  for (const group of root.subcommands) {
-    for (const sub of group.subcommands) {
-      lines.push(
-        `complete -c elnora -n "__fish_seen_subcommand_from ${group.name}" -a "${sub.name}" -d "${sub.description.replace(/\\/g, "\\\\").replace(/"/g, '\\"')}"`
-      );
-    }
-  }
-  return lines.join("\n");
-}
-function addCompletionCommand(program2) {
-  program2.command("completion").argument("<shell>", "Shell type: bash, zsh, fish").description("Generate shell completion script").action((shell) => {
-    const tree = extractCommandTree(program2);
-    switch (shell) {
-      case "bash":
-        console.log(generateBash(tree));
-        break;
-      case "zsh":
-        console.log(generateZsh(tree));
-        break;
-      case "fish":
-        console.log(generateFish(tree));
-        break;
-      default:
-        console.error(`Unsupported shell: ${shell}. Use bash, zsh, or fish.`);
-        process.exit(1);
-    }
-  });
+// src/commands/audit/list.ts
+import { z as z16 } from "zod";
+
+// src/commands/_shared/pagination.ts
+import { z as z15 } from "zod";
+var paginationInput = {
+  page: z15.number().int().min(1).default(1).describe("Page number"),
+  pageSize: z15.number().int().min(1).max(100).default(25).describe("Results per page")
+};
+
+// src/commands/audit/list.ts
+var inputSchema15 = z16.object({
+  orgId: z16.string().uuid().describe("Organization ID"),
+  ...paginationInput,
+  action: z16.string().optional().describe("Filter by action type"),
+  userId: z16.string().optional().describe("Filter by user ID")
+});
+var auditList = {
+  name: "audit.list",
+  group: "audit",
+  description: "List audit log entries for an organization",
+  inputSchema: inputSchema15,
+  outputSchema: z16.any(),
+  annotations: { readOnlyHint: true },
+  async execute(input, ctx) {
+    const queryParams = {
+      page: input.page,
+      pageSize: input.pageSize
+    };
+    if (input.action) queryParams.action = input.action;
+    if (input.userId) queryParams.userId = input.userId;
+    return ctx.client.get("audit_log", {
+      pathParams: { orgId: input.orgId },
+      queryParams
+    });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.id ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/audit/index.ts
+function registerAuditCommands() {
+  return [auditList];
 }
 
-// src/commands/doctor.ts
+// src/commands/auth/login.ts
 init_client();
-init_config();
+init_errors();
 init_profiles();
-import { existsSync as existsSync3, statSync } from "node:fs";
-import pc2 from "picocolors";
+import { z as z17 } from "zod";
 
-// src/lib/update-check.ts
-init_config();
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
-import { homedir as homedir2 } from "node:os";
-import { join as join2 } from "node:path";
-import pc from "picocolors";
-var NPM_REGISTRY_URL = "https://registry.npmjs.org/@elnora-ai/cli/latest";
-var CACHE_DIR = join2(homedir2(), ".elnora");
-var CACHE_FILE = join2(CACHE_DIR, ".update-check");
-var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1e3;
-var FETCH_TIMEOUT_MS = 3e3;
-var SEMVER_RE = /^\d+\.\d+\.\d+(?:-[\w.]+)?(?:\+[\w.]+)?$/;
-function shouldSkipEntirely() {
-  if (process.env.CI || process.env.GITHUB_ACTIONS) return true;
-  if (process.env.ELNORA_NO_UPDATE_CHECK) return true;
-  return false;
-}
-function readCache() {
-  try {
-    if (!existsSync2(CACHE_FILE)) return null;
-    const raw = readFileSync2(CACHE_FILE, "utf-8");
-    return JSON.parse(raw);
-  } catch {
-    return null;
-  }
-}
-function writeCache(entry) {
-  try {
-    mkdirSync2(CACHE_DIR, { recursive: true });
-    writeFileSync2(CACHE_FILE, JSON.stringify(entry), "utf-8");
-  } catch {
-  }
-}
-function showUpdateNotice(latest) {
-  if (!process.stderr.isTTY) return;
-  const color2 = isColorEnabled();
-  const msg = color2 ? `
-${pc.yellow(`Update available: v${VERSION} \u2192 v${latest}`)}
-Run: elnora update
-` : `
-Update available: v${VERSION} \u2192 v${latest}
-Run: elnora update
-`;
-  process.stderr.write(msg);
-}
-function isNewerVersion(a, b) {
-  const pa = a.split(".").map(Number);
-  const pb = b.split(".").map(Number);
-  for (let i = 0; i < Math.max(pa.length, pb.length); i++) {
-    const na = pa[i] ?? 0;
-    const nb = pb[i] ?? 0;
-    if (na > nb) return true;
-    if (na < nb) return false;
-  }
-  return false;
-}
-function registerUpdateCheck() {
-  if (shouldSkipEntirely()) return;
-  const cached = readCache();
-  if (cached) {
-    const elapsed = Date.now() - new Date(cached.checkedAt).getTime();
-    if (elapsed < CHECK_INTERVAL_MS) {
-      if (cached.latest && cached.latest !== VERSION && cached.latest !== "unknown") {
-        if (isNewerVersion(cached.latest, VERSION)) {
-          showUpdateNotice(cached.latest);
-        }
-      }
+// src/lib/prompt.ts
+import { createInterface as createInterface2 } from "node:readline";
+function promptSecret(message) {
+  return new Promise((resolve, reject) => {
+    const { stdin, stdout } = process;
+    if (!stdin.isTTY) {
+      const rl = createInterface2({ input: stdin, output: stdout });
+      rl.question(message, (answer) => {
+        rl.close();
+        resolve(answer.trim());
+      });
       return;
     }
-  }
-  const keepAlive = setInterval(() => {
-  }, 6e4);
-  (async () => {
-    try {
-      const response = await fetch(NPM_REGISTRY_URL, {
-        signal: AbortSignal.timeout(FETCH_TIMEOUT_MS)
-      });
-      if (!response.ok) return;
-      const data = await response.json();
-      const latest = data.version ?? "unknown";
-      if (latest !== "unknown" && !SEMVER_RE.test(latest)) return;
-      writeCache({ checkedAt: (/* @__PURE__ */ new Date()).toISOString(), latest });
-      if (latest !== VERSION && latest !== "unknown" && isNewerVersion(latest, VERSION)) {
-        showUpdateNotice(latest);
+    stdout.write(message);
+    let input = "";
+    const wasRaw = stdin.isRaw;
+    stdin.setRawMode(true);
+    stdin.resume();
+    stdin.setEncoding("utf8");
+    const onData = (char) => {
+      switch (char) {
+        case "\n":
+        case "\r":
+        case "": {
+          stdin.setRawMode(wasRaw);
+          stdin.pause();
+          stdin.removeListener("data", onData);
+          stdout.write("\n");
+          resolve(input.trim());
+          break;
+        }
+        case "":
+        // Ctrl+C
+        case "\x1B": {
+          stdin.setRawMode(wasRaw);
+          stdin.pause();
+          stdin.removeListener("data", onData);
+          stdout.write("\n");
+          reject(new Error("Cancelled"));
+          break;
+        }
+        case "\x7F":
+        case "\b": {
+          if (input.length > 0) {
+            input = input.slice(0, -1);
+            stdout.write("\b \b");
+          }
+          break;
+        }
+        default: {
+          input += char;
+          stdout.write("*");
+          break;
+        }
       }
-    } catch {
-    } finally {
-      clearInterval(keepAlive);
-    }
-  })();
+    };
+    stdin.on("data", onData);
+  });
 }
 
-// src/commands/doctor.ts
-function addDoctorCommand(program2) {
-  program2.command("doctor").description("Check Elnora CLI configuration and connectivity").action(async () => {
-    const color2 = isColorEnabled();
-    const ok2 = (msg) => color2 ? `  ${pc2.green("\u2713")} ${msg}` : `  \u2713 ${msg}`;
-    const fail2 = (msg) => color2 ? `  ${pc2.red("\u2717")} ${msg}` : `  \u2717 ${msg}`;
-    const warn = (msg) => color2 ? `  ${pc2.yellow("!")} ${msg}` : `  ! ${msg}`;
-    console.error(`
-Elnora CLI v${VERSION}
+// src/commands/auth/login.ts
+var inputSchema16 = z17.object({
+  apiKey: z17.string().optional().describe("Elnora API key (elnora_live_...)"),
+  profile: z17.string().default("default").describe("Profile name to save key under")
+});
+var authLogin = {
+  name: "auth.login",
+  group: "auth",
+  description: "Set up authentication by saving an API key to a profile",
+  inputSchema: inputSchema16,
+  outputSchema: z17.any(),
+  annotations: { exposeInMcp: false },
+  async execute(input, _ctx) {
+    let apiKey = input.apiKey;
+    const profileName = input.profile;
+    validateProfileName(profileName);
+    const existing = listProfileNames();
+    const profileExists = existing.includes(profileName);
+    if (!apiKey) {
+      if (profileExists) {
+        let savedKey;
+        try {
+          savedKey = getApiKey(profileName);
+        } catch {
+        }
+        if (savedKey && isTTY()) {
+          process.stderr.write(`
+  Checking profile "${profileName}"...`);
+          try {
+            const client = new ElnoraApiClient(savedKey);
+            const result = await client.get("projects", {
+              queryParams: { page: 1, pageSize: 1 }
+            });
+            const projectCount = result?.totalCount ?? result?.items?.length ?? 0;
+            process.stderr.write(` authenticated (${projectCount} project${projectCount !== 1 ? "s" : ""}).
+
 `);
-    let passed = 0;
-    let total = 0;
-    total++;
-    try {
-      const start = Date.now();
-      const res = await fetch("https://platform.elnora.ai/health", { signal: AbortSignal.timeout(5e3) });
-      const ms = Date.now() - start;
-      if (res.ok) {
-        console.error(ok2(`API reachable         platform.elnora.ai (${res.status} OK, ${ms}ms)`));
-        passed++;
-      } else console.error(fail2(`API unreachable       platform.elnora.ai (HTTP ${res.status})`));
-    } catch (e) {
-      console.error(
-        fail2(`API unreachable       platform.elnora.ai (${e instanceof Error ? e.message : "network error"})`)
+            process.stderr.write("  To update your API key, run:\n");
+            process.stderr.write(
+              `    elnora auth login --api-key <new-key>${profileName !== "default" ? ` --profile ${profileName}` : ""}
+
+`
+            );
+            return null;
+          } catch {
+            process.stderr.write(" key is invalid or expired.\n\n");
+          }
+        }
+      }
+      if (isTTY()) {
+        if (profileExists) {
+          process.stderr.write(`  Enter a new API key for profile "${profileName}"
+`);
+        } else {
+          process.stderr.write("\n  Set up Elnora CLI authentication\n");
+        }
+        process.stderr.write("  Get your API key at: https://platform.elnora.ai > Settings > API Keys\n\n");
+        try {
+          apiKey = await promptSecret("  API key (Ctrl+C to cancel): ");
+        } catch {
+          process.stderr.write("\n  Login cancelled.\n\n");
+          process.exit(0);
+        }
+        process.stderr.write("\n");
+      }
+    }
+    if (!apiKey) {
+      throw new ValidationError(
+        "API key is required. Use --api-key flag or run interactively in a terminal.",
+        "Get your API key from: https://platform.elnora.ai > Settings > API Keys"
       );
     }
-    total++;
-    try {
-      const key = resolveApiKey();
-      const client = new ElnoraApiClient(key);
-      const result = await client.get("projects", {
-        queryParams: { page: 1, pageSize: 1 }
+    const key = apiKey.trim();
+    if (!key.startsWith("elnora_live_")) {
+      throw new AuthError("API key must start with 'elnora_live_'. Check that you copied the full key.", {
+        suggestion: "Get your API key from: https://platform.elnora.ai > Settings > API Keys"
       });
-      const count = result?.totalCount ?? result?.items?.length ?? 0;
-      console.error(ok2(`Authenticated         profile: default (${count} projects accessible)`));
-      passed++;
-    } catch (e) {
-      console.error(fail2(`Authentication failed ${e instanceof Error ? e.message : "no API key"}`));
     }
-    total++;
+    if (key.length < 20) {
+      throw new AuthError("API key looks too short. Make sure you copied the full key.", {
+        suggestion: "Get your API key from: https://platform.elnora.ai > Settings > API Keys"
+      });
+    }
+    if (isTTY()) {
+      process.stderr.write("  Verifying...");
+    }
     try {
-      const res = await fetch("https://registry.npmjs.org/@elnora-ai/cli/latest", {
-        signal: AbortSignal.timeout(3e3)
+      const tempClient = new ElnoraApiClient(key);
+      const result = await tempClient.get("projects", {
+        queryParams: { page: 1, pageSize: 1 }
       });
-      if (res.ok) {
-        const data = await res.json();
-        const latest = data.version ?? "unknown";
-        if (latest === VERSION || latest === "unknown" || !isNewerVersion(latest, VERSION)) {
-          console.error(ok2(`Version current       v${VERSION} (latest: v${latest})`));
-        } else {
-          console.error(warn(`Update available      v${VERSION} \u2192 v${latest}`));
-        }
-        passed++;
-      } else {
-        console.error(ok2(`Version               v${VERSION} (registry check failed)`));
-        passed++;
+      const projectCount = result?.totalCount ?? result?.items?.length ?? 0;
+      const configPath = saveProfile(profileName, key);
+      if (isTTY()) {
+        process.stderr.write(` Done! ${projectCount} project${projectCount !== 1 ? "s" : ""} accessible.
+`);
+        process.stderr.write(`  Saved to profile "${profileName}" at ${configPath}
+
+`);
       }
-    } catch {
-      console.error(ok2(`Version               v${VERSION} (registry unreachable)`));
-      passed++;
+      return { profile: profileName, verified: true, configPath };
+    } catch (err) {
+      if (isTTY()) {
+        process.stderr.write("\n");
+      }
+      if (err instanceof AuthError) {
+        throw new AuthError("API key is invalid or has been revoked. Please check your key and try again.", {
+          suggestion: "Get a new key from: https://platform.elnora.ai > Settings > API Keys"
+        });
+      }
+      throw err;
     }
-    total++;
-    if (process.platform === "win32") {
-      console.error(ok2("Config permissions    (skipped on Windows)"));
-      passed++;
-    } else if (!existsSync3(PROFILES_FILE)) {
-      console.error(warn("Config permissions    ~/.elnora/profiles.toml not found"));
-    } else {
-      const mode = statSync(PROFILES_FILE).mode & 511;
-      if (mode === 384) {
-        console.error(ok2(`Config permissions    ${PROFILES_FILE} (0600)`));
-        passed++;
-      } else {
-        console.error(warn(`Config permissions    ${PROFILES_FILE} (0${mode.toString(8)}) \u2014 should be 0600`));
+  },
+  formatOutput(output, format) {
+    const data = output;
+    if (format === "compact") return data.profile ?? JSON.stringify(output);
+    const lines = [
+      `\u2713 Authenticated! API key saved to profile "${data.profile}".`,
+      "",
+      "Next steps:",
+      "  elnora projects list                         See your projects",
+      "  elnora tasks create --project <ID> --stream  Start a conversation",
+      "  elnora doctor                                Verify your setup"
+    ];
+    return lines.join("\n");
+  }
+};
+
+// src/commands/auth/logout.ts
+init_profiles();
+import { z as z18 } from "zod";
+var inputSchema17 = z18.object({
+  profile: z18.string().optional().describe("Profile name to remove (default: 'default')"),
+  all: z18.boolean().default(false).describe("Remove all profiles")
+});
+var authLogout = {
+  name: "auth.logout",
+  group: "auth",
+  description: "Remove saved credentials",
+  inputSchema: inputSchema17,
+  outputSchema: z18.any(),
+  annotations: { destructiveHint: true, exposeInMcp: false },
+  async execute(input, _ctx) {
+    if (input.all) {
+      const names = listProfileNames();
+      for (const name of names) {
+        removeProfile(name);
       }
+      return { loggedOut: true, profile: "all", removedCount: names.length };
     }
-    total++;
-    try {
-      const start = Date.now();
-      const res = await fetch(`${AI_SERVER_URL}/health`, { signal: AbortSignal.timeout(5e3) });
-      const ms = Date.now() - start;
-      if (res.ok) {
-        console.error(ok2(`AI Server reachable   ${new URL(AI_SERVER_URL).hostname} (${res.status} OK, ${ms}ms)`));
-        passed++;
-      } else console.error(fail2(`AI Server unreachable ${new URL(AI_SERVER_URL).hostname} (HTTP ${res.status})`));
-    } catch {
-      console.error(fail2(`AI Server unreachable ${AI_SERVER_URL}`));
+    const profileName = input.profile ?? "default";
+    const removed = removeProfile(profileName);
+    return { loggedOut: true, profile: profileName, removed };
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.profile ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/auth/profiles.ts
+init_profiles();
+import { z as z19 } from "zod";
+var inputSchema18 = z19.object({});
+var authProfiles = {
+  name: "auth.profiles",
+  group: "auth",
+  description: "List all configured profiles",
+  inputSchema: inputSchema18,
+  outputSchema: z19.any(),
+  annotations: { readOnlyHint: true, exposeInMcp: false },
+  async execute(_input, _ctx) {
+    const profiles = loadProfiles();
+    const items = [];
+    for (const [name, data] of Object.entries(profiles)) {
+      const key = data.api_key ?? "";
+      const masked = key.length > 16 ? `${key.slice(0, 12)}...${key.slice(-4)}` : "[invalid]";
+      items.push({ name, apiKey: masked });
     }
-    console.error("");
-    if (passed === total) {
-      console.error("All checks passed.");
-    } else {
-      console.error(`${passed}/${total} checks passed.`);
-      if (!existsSync3(PROFILES_FILE)) console.error("\nRun: elnora auth login");
+    return { profiles: items };
+  },
+  formatOutput(output, format) {
+    if (format === "compact") {
+      const profiles = output.profiles ?? [];
+      return profiles.map((p) => p.name).join(", ");
     }
-  });
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/auth/status.ts
+import { z as z20 } from "zod";
+var inputSchema19 = z20.object({});
+var authStatus = {
+  name: "auth.status",
+  group: "auth",
+  description: "Verify API key and show connection info",
+  inputSchema: inputSchema19,
+  outputSchema: z20.any(),
+  annotations: { readOnlyHint: true, exposeInMcp: false },
+  async execute(_input, ctx) {
+    const result = await ctx.client.get("projects", {
+      queryParams: { page: 1, pageSize: 1 }
+    });
+    const projectCount = result.totalCount ?? result.items?.length ?? 0;
+    return { profile: ctx.profileName, authenticated: true, projectCount };
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return String(output.authenticated ?? "");
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/auth/validate.ts
+init_profiles();
+import { z as z21 } from "zod";
+var inputSchema20 = z21.object({
+  token: z21.string().optional().describe("Token to validate (defaults to current API key)")
+});
+var authValidate = {
+  name: "auth.validate",
+  group: "auth",
+  description: "Validate a JWT or API key token",
+  inputSchema: inputSchema20,
+  outputSchema: z21.any(),
+  annotations: { exposeInMcp: false },
+  async execute(input, ctx) {
+    const tokenToValidate = input.token ?? resolveApiKey();
+    return ctx.client.post("auth_validate", { token: tokenToValidate });
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/auth/index.ts
+function registerAuthCommands() {
+  return [authLogin, authStatus, authLogout, authProfiles, authValidate];
 }
 
 // src/commands/feedback/submit.ts
@@ -2586,7 +3302,7 @@ var filesUpdate = {
 
 // src/commands/files/upload.ts
 init_client();
-import { readFileSync as readFileSync3, statSync as statSync2 } from "node:fs";
+import { readFileSync as readFileSync6, statSync as statSync2 } from "node:fs";
 import { basename } from "node:path";
 import { z as z37 } from "zod";
 var inputSchema36 = z37.object({
@@ -2602,7 +3318,7 @@ var filesUpload = {
   inputSchema: inputSchema36,
   outputSchema: z37.any(),
   async execute(input, ctx) {
-    const fileBuffer = readFileSync3(input.filePath);
+    const fileBuffer = readFileSync6(input.filePath);
     const fileName = input.fileName ?? basename(input.filePath);
     const contentType = input.contentType ?? "application/octet-stream";
     const fileSize = statSync2(input.filePath).size;
@@ -2633,7 +3349,7 @@ var filesUpload = {
 // src/commands/files/upload-batch.ts
 init_client();
 init_errors();
-import { readFileSync as readFileSync4, statSync as statSync3 } from "node:fs";
+import { readFileSync as readFileSync7, statSync as statSync3 } from "node:fs";
 import { basename as basename2 } from "node:path";
 import { z as z38 } from "zod";
 var inputSchema37 = z38.object({
@@ -2662,7 +3378,7 @@ var filesUploadBatch = {
     for (const filePath of paths) {
       const fileName = basename2(filePath);
       try {
-        const fileBuffer = readFileSync4(filePath);
+        const fileBuffer = readFileSync7(filePath);
         const contentType = "application/octet-stream";
         const fileSize = statSync3(filePath).size;
         const uploadInfo = await ctx.client.post("file_upload", {
@@ -3196,65 +3912,6 @@ function registerLibraryCommands() {
   return [libraryFiles, libraryFolders, libraryCreateFolder, libraryRenameFolder, libraryDeleteFolder];
 }
 
-// src/commands/mcp/serve.ts
-function requireEnv(name) {
-  const value = process.env[name];
-  if (!value) {
-    throw new Error(`Required environment variable ${name} is not set`);
-  }
-  return value;
-}
-function addMcpCommands(program2, registry2) {
-  const mcp = program2.command("mcp").description("MCP server management");
-  mcp.command("serve").description("Start MCP server exposing all CLI commands as tools").option("--http", "HTTP transport (default, for deployment)").option("--stdio", "stdio transport (for local MCP clients)").option("--port <port>", "HTTP port", process.env.PORT ?? "3000").option("--host <host>", "HTTP bind address", process.env.HOST ?? "0.0.0.0").action(async (opts) => {
-    if (opts.stdio) {
-      const { startStdioServer: startStdioServer2 } = await Promise.resolve().then(() => (init_stdio_server(), stdio_server_exports));
-      await startStdioServer2(registry2);
-    } else {
-      const { startHttpServer: startHttpServer2 } = await Promise.resolve().then(() => (init_http_server(), http_server_exports));
-      await startHttpServer2(registry2, {
-        port: Number.parseInt(opts.port, 10),
-        host: opts.host,
-        tokenValidationUrl: requireEnv("ELNORA_TOKEN_VALIDATION_URL"),
-        mcpServiceKey: requireEnv("ELNORA_MCP_SERVICE_KEY")
-      });
-    }
-  });
-}
-
-// src/commands/open.ts
-import { exec } from "node:child_process";
-var URLS = {
-  "": "https://platform.elnora.ai",
-  platform: "https://platform.elnora.ai",
-  docs: "https://docs.elnora.ai",
-  keys: "https://platform.elnora.ai/settings/api-keys",
-  billing: "https://platform.elnora.ai/settings/billing",
-  github: "https://github.com/Elnora-AI/elnora-cli"
-};
-function openUrl(url) {
-  const cmd = process.platform === "darwin" ? `open "${url}"` : process.platform === "win32" ? `start "" "${url}"` : `xdg-open "${url}"`;
-  exec(cmd, (err) => {
-    if (err) {
-      console.error(`Failed to open browser: ${err.message}`);
-      console.log(url);
-    }
-  });
-}
-function addOpenCommand(program2) {
-  program2.command("open").argument("[page]", "Page to open: platform, docs, keys, billing, github").description("Open Elnora platform in the browser").action((page) => {
-    const key = page ?? "";
-    const url = URLS[key];
-    if (!url) {
-      console.error(`Unknown page: ${page}`);
-      console.error(`Available: ${Object.keys(URLS).filter(Boolean).join(", ")}`);
-      process.exit(1);
-    }
-    openUrl(url);
-    console.log(`Opening ${url}...`);
-  });
-}
-
 // src/commands/orgs/accept-invite.ts
 import { z as z56 } from "zod";
 var inputSchema54 = z56.object({
@@ -4021,18 +4678,63 @@ function registerProjectCommands() {
   ];
 }
 
-// src/commands/search/all.ts
+// src/commands/protocols/generate.ts
 import { z as z85 } from "zod";
 var inputSchema83 = z85.object({
-  query: z85.string().min(1).describe("Search query"),
+  description: z85.string().min(10).max(5e3).describe("Protocol description"),
+  title: z85.string().max(200).optional().describe("Task title (defaults to first 100 chars of description)"),
+  project: z85.string().uuid().optional().describe("Project UUID to associate with")
+});
+var protocolsGenerate = {
+  name: "protocols.generate",
+  group: "protocols",
+  description: "Generate a bioprotocol \u2014 creates a task and sends the description in one call",
+  inputSchema: inputSchema83,
+  outputSchema: z85.any(),
+  annotations: { mcpScopes: ["tasks:write", "messages:write"] },
+  async execute(input, ctx) {
+    const body = { title: input.title || input.description.slice(0, 100) };
+    if (input.project) body.projectId = input.project;
+    const task = await ctx.client.post("tasks", body);
+    if (!task?.id) {
+      throw new Error("Task creation returned no ID");
+    }
+    try {
+      const response = await ctx.client.post(`tasks/${task.id}/messages`, { content: input.description });
+      return { taskId: task.id, response };
+    } catch (err) {
+      const message = err instanceof Error ? err.message : String(err);
+      throw Object.assign(
+        new Error(
+          `Task ${task.id} created but message send failed: ${message}. Retry with 'elnora tasks send --task-id ${task.id}'.`
+        ),
+        { taskId: task.id }
+      );
+    }
+  },
+  formatOutput(output, format) {
+    if (format === "compact") return output.taskId ?? JSON.stringify(output);
+    return JSON.stringify(output, null, 2);
+  }
+};
+
+// src/commands/protocols/index.ts
+function registerProtocolCommands() {
+  return [protocolsGenerate];
+}
+
+// src/commands/search/all.ts
+import { z as z86 } from "zod";
+var inputSchema84 = z86.object({
+  query: z86.string().min(1).describe("Search query"),
   ...paginationInput
 });
 var searchAll = {
   name: "search.all",
   group: "search",
   description: "Search across all entities",
-  inputSchema: inputSchema83,
-  outputSchema: z85.any(),
+  inputSchema: inputSchema84,
+  outputSchema: z86.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     return ctx.client.get("search_all", {
@@ -4046,18 +4748,18 @@ var searchAll = {
 };
 
 // src/commands/search/file-content.ts
-import { z as z86 } from "zod";
-var inputSchema84 = z86.object({
-  query: z86.string().min(1).describe("Search query"),
-  projectId: z86.string().uuid().optional().describe("Filter by project ID"),
+import { z as z87 } from "zod";
+var inputSchema85 = z87.object({
+  query: z87.string().min(1).describe("Search query"),
+  projectId: z87.string().uuid().optional().describe("Filter by project ID"),
   ...paginationInput
 });
 var searchFileContent = {
   name: "search.fileContent",
   group: "search",
   description: "Search within file contents",
-  inputSchema: inputSchema84,
-  outputSchema: z86.any(),
+  inputSchema: inputSchema85,
+  outputSchema: z87.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     const queryParams = {
@@ -4075,17 +4777,17 @@ var searchFileContent = {
 };
 
 // src/commands/search/files.ts
-import { z as z87 } from "zod";
-var inputSchema85 = z87.object({
-  query: z87.string().min(1).describe("Search query"),
+import { z as z88 } from "zod";
+var inputSchema86 = z88.object({
+  query: z88.string().min(1).describe("Search query"),
   ...paginationInput
 });
 var searchFiles = {
   name: "search.files",
   group: "search",
   description: "Search files by query",
-  inputSchema: inputSchema85,
-  outputSchema: z87.any(),
+  inputSchema: inputSchema86,
+  outputSchema: z88.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     return ctx.client.get("search_files", {
@@ -4099,17 +4801,17 @@ var searchFiles = {
 };
 
 // src/commands/search/tasks.ts
-import { z as z88 } from "zod";
-var inputSchema86 = z88.object({
-  query: z88.string().min(1).describe("Search query"),
+import { z as z89 } from "zod";
+var inputSchema87 = z89.object({
+  query: z89.string().min(1).describe("Search query"),
   ...paginationInput
 });
 var searchTasks = {
   name: "search.tasks",
   group: "search",
   description: "Search tasks by query",
-  inputSchema: inputSchema86,
-  outputSchema: z88.any(),
+  inputSchema: inputSchema87,
+  outputSchema: z89.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     return ctx.client.get("search_tasks", {
@@ -4127,280 +4829,17 @@ function registerSearchCommands() {
   return [searchTasks, searchFiles, searchAll, searchFileContent];
 }
 
-// src/commands/setup.ts
-init_profiles();
-
-// src/lib/setup/claude.ts
-import { existsSync as existsSync5 } from "node:fs";
-
-// src/lib/setup/common.ts
-import { existsSync as existsSync4, mkdirSync as mkdirSync3, readFileSync as readFileSync5, writeFileSync as writeFileSync3 } from "node:fs";
-import { homedir as homedir3 } from "node:os";
-import { join as join3 } from "node:path";
-import pc3 from "picocolors";
-var HOME = homedir3();
-var ELNORA_DIR = join3(HOME, ".elnora");
-var CLAUDE_DIR = join3(HOME, ".claude");
-var CLAUDE_MARKETPLACES_FILE = join3(CLAUDE_DIR, "plugins", "known_marketplaces.json");
-var CLAUDE_SETTINGS_FILE = join3(CLAUDE_DIR, "settings.json");
-var CURSOR_DIR = join3(HOME, ".cursor");
-var CURSOR_MCP_GLOBAL = join3(HOME, ".cursor", "mcp.json");
-var VSCODE_DIR = join3(HOME, ".vscode");
-var CODEX_DIR = join3(HOME, ".codex");
-var MARKETPLACE_NAME = "elnora-plugins";
-var MARKETPLACE_REPO = "Elnora-AI/elnora-plugins";
-var PLUGIN_ID = `elnora@${MARKETPLACE_NAME}`;
-var LEGACY_PLUGIN_IDS = ["elnora@elnora-local", "elnora@elnora-ai"];
-var LEGACY_MARKETPLACE_NAMES = ["elnora-local", "elnora-ai"];
-function readJsonFile(path) {
-  try {
-    return JSON.parse(readFileSync5(path, "utf-8"));
-  } catch {
-    return {};
-  }
-}
-function writeJsonFile(path, data) {
-  mkdirSync3(join3(path, ".."), { recursive: true });
-  writeFileSync3(path, `${JSON.stringify(data, null, 2)}
-`, "utf-8");
-}
-var color = isColorEnabled();
-function ok(msg) {
-  return color ? `  ${pc3.green("\u2713")} ${msg}` : `  \u2713 ${msg}`;
-}
-function fail(msg) {
-  return color ? `  ${pc3.red("\u2717")} ${msg}` : `  \u2717 ${msg}`;
-}
-function info(msg) {
-  return color ? `  ${pc3.dim(msg)}` : `  ${msg}`;
-}
-function detectPlatforms() {
-  return [
-    { name: "claude", label: "Claude Code", installed: existsSync4(CLAUDE_DIR) },
-    { name: "cursor", label: "Cursor", installed: existsSync4(CURSOR_DIR) },
-    { name: "vscode", label: "VS Code", installed: existsSync4(VSCODE_DIR) },
-    { name: "codex", label: "OpenAI Codex", installed: existsSync4(CODEX_DIR) }
-  ];
-}
-
-// src/lib/setup/claude.ts
-function setupClaude() {
-  if (!existsSync5(CLAUDE_DIR)) {
-    console.error(fail("Claude Code not found (~/.claude/ does not exist)"));
-    console.error("");
-    console.error("  Install Claude Code first: https://claude.ai/code");
-    return false;
-  }
-  console.error(ok("Claude Code found"));
-  const marketplaces = readJsonFile(CLAUDE_MARKETPLACES_FILE);
-  for (const old of LEGACY_MARKETPLACE_NAMES) {
-    delete marketplaces[old];
-  }
-  marketplaces[MARKETPLACE_NAME] = {
-    source: {
-      source: "github",
-      repo: MARKETPLACE_REPO
-    }
-  };
-  writeJsonFile(CLAUDE_MARKETPLACES_FILE, marketplaces);
-  console.error(ok(`Marketplace registered (GitHub: ${MARKETPLACE_REPO})`));
-  const settings = readJsonFile(CLAUDE_SETTINGS_FILE);
-  if (!settings.enabledPlugins || typeof settings.enabledPlugins !== "object") {
-    settings.enabledPlugins = {};
-  }
-  const plugins = settings.enabledPlugins;
-  for (const old of LEGACY_PLUGIN_IDS) {
-    delete plugins[old];
-  }
-  plugins[PLUGIN_ID] = true;
-  writeJsonFile(CLAUDE_SETTINGS_FILE, settings);
-  console.error(ok(`Plugin enabled (${PLUGIN_ID})`));
-  console.error("");
-  console.error("  Elnora skills are now available in Claude Code.");
-  console.error("  Restart Claude Code if it's currently running.");
-  return true;
-}
-
-// src/lib/setup/codex.ts
-import { existsSync as existsSync6 } from "node:fs";
-import { join as join4 } from "node:path";
-var CODEX_MCP_FILE = join4(CODEX_DIR, "mcp.json");
-function setupCodex(apiKey) {
-  if (!existsSync6(CODEX_DIR)) {
-    console.error(fail("Codex CLI not found (~/.codex/ does not exist)"));
-    console.error("");
-    console.error("  Install Codex first: https://github.com/openai/codex");
-    return false;
-  }
-  console.error(ok("Codex CLI found"));
-  const config = readJsonFile(CODEX_MCP_FILE);
-  if (!config.mcpServers || typeof config.mcpServers !== "object") {
-    config.mcpServers = {};
-  }
-  config.mcpServers.elnora = {
-    url: "https://mcp.elnora.ai/mcp",
-    headers: {
-      "X-API-Key": apiKey
-    }
-  };
-  writeJsonFile(CODEX_MCP_FILE, config);
-  console.error(ok("MCP server configured in ~/.codex/mcp.json"));
-  console.error("");
-  console.error("  Elnora MCP server is now available in Codex.");
-  return true;
-}
-
-// src/lib/setup/cursor.ts
-import { existsSync as existsSync7 } from "node:fs";
-function setupCursor(apiKey) {
-  if (!existsSync7(CURSOR_DIR)) {
-    console.error(fail("Cursor not found (~/.cursor/ does not exist)"));
-    console.error("");
-    console.error("  Install Cursor first: https://cursor.com");
-    return false;
-  }
-  console.error(ok("Cursor found"));
-  const config = readJsonFile(CURSOR_MCP_GLOBAL);
-  if (!config.mcpServers || typeof config.mcpServers !== "object") {
-    config.mcpServers = {};
-  }
-  config.mcpServers.elnora = {
-    url: "https://mcp.elnora.ai/mcp",
-    headers: {
-      "X-API-Key": apiKey
-    }
-  };
-  writeJsonFile(CURSOR_MCP_GLOBAL, config);
-  console.error(ok("MCP server configured in ~/.cursor/mcp.json"));
-  console.error("");
-  console.error("  Elnora MCP server is now available in Cursor.");
-  console.error("  Restart Cursor if it's currently running.");
-  return true;
-}
-
-// src/lib/setup/vscode.ts
-import { existsSync as existsSync8 } from "node:fs";
-import { join as join5 } from "node:path";
-var VSCODE_MCP_GLOBAL = join5(HOME, ".vscode", "mcp.json");
-function setupVscode(apiKey) {
-  if (!existsSync8(VSCODE_DIR)) {
-    console.error(fail("VS Code not found (~/.vscode/ does not exist)"));
-    console.error("");
-    console.error("  Install VS Code first: https://code.visualstudio.com");
-    return false;
-  }
-  console.error(ok("VS Code found"));
-  const config = readJsonFile(VSCODE_MCP_GLOBAL);
-  if (!config.servers || typeof config.servers !== "object") {
-    config.servers = {};
-  }
-  config.servers.elnora = {
-    type: "http",
-    url: "https://mcp.elnora.ai/mcp",
-    headers: {
-      "X-API-Key": apiKey
-    }
-  };
-  writeJsonFile(VSCODE_MCP_GLOBAL, config);
-  console.error(ok("MCP server configured in ~/.vscode/mcp.json"));
-  console.error("");
-  console.error("  Elnora MCP server is now available in VS Code Copilot.");
-  console.error("  Restart VS Code if it's currently running.");
-  return true;
-}
-
-// src/commands/setup.ts
-var PLATFORM_SETUP = {
-  claude: () => setupClaude(),
-  cursor: (key) => setupCursor(key),
-  vscode: (key) => setupVscode(key),
-  codex: (key) => setupCodex(key)
-};
-function runSetup(platforms, profileName) {
-  let apiKey;
-  const needsKey = platforms.some((p) => p !== "claude");
-  if (needsKey) {
-    try {
-      apiKey = resolveApiKey(profileName);
-    } catch {
-      if (platforms.every((p) => p !== "claude")) {
-        console.error(fail("No API key found. Run 'elnora auth login' first."));
-        process.exitCode = 1;
-        return;
-      }
-    }
-  }
-  let anyFailed = false;
-  for (const platform of platforms) {
-    const setupFn = PLATFORM_SETUP[platform];
-    const success = setupFn(apiKey ?? "");
-    if (!success) anyFailed = true;
-    console.error("");
-  }
-  if (anyFailed) {
-    process.exitCode = 1;
-  }
-}
-function addSetupCommand(program2) {
-  const setup = program2.command("setup").description("Configure AI coding tools to use Elnora").option("--profile <name>", "API key profile to use", "default");
-  setup.command("claude").description("Set up Claude Code (skills + MCP server)").action(() => {
-    const opts = setup.opts();
-    console.error("");
-    runSetup(["claude"], opts.profile);
-  });
-  setup.command("cursor").description("Set up Cursor (MCP server)").action(() => {
-    const opts = setup.opts();
-    console.error("");
-    runSetup(["cursor"], opts.profile);
-  });
-  setup.command("vscode").description("Set up VS Code Copilot (MCP server)").action(() => {
-    const opts = setup.opts();
-    console.error("");
-    runSetup(["vscode"], opts.profile);
-  });
-  setup.command("codex").description("Set up OpenAI Codex (MCP server)").action(() => {
-    const opts = setup.opts();
-    console.error("");
-    runSetup(["codex"], opts.profile);
-  });
-  setup.action(() => {
-    const opts = setup.opts();
-    console.error("");
-    const detected = detectPlatforms();
-    const installed = detected.filter((p) => p.installed);
-    if (installed.length === 0) {
-      console.error(fail("No supported AI coding tools detected."));
-      console.error("");
-      console.error("  Supported: Claude Code, Cursor, VS Code, OpenAI Codex");
-      console.error("  Install one first, then run 'elnora setup' again.");
-      process.exitCode = 1;
-      return;
-    }
-    console.error(ok(`Detected ${installed.length} platform(s):`));
-    for (const p of installed) {
-      console.error(info(`${p.label}`));
-    }
-    console.error("");
-    const platforms = installed.map((p) => p.name);
-    runSetup(platforms, opts.profile);
-  });
-  program2.command("setup-claude").description("Set up Claude Code (alias for 'setup claude')").option("--profile <name>", "API key profile to use", "default").action((opts) => {
-    console.error("");
-    runSetup(["claude"], opts.profile);
-  });
-}
-
 // src/commands/tasks/archive.ts
-import { z as z89 } from "zod";
-var inputSchema87 = z89.object({
-  taskId: z89.string().uuid().describe("Task ID to archive")
+import { z as z90 } from "zod";
+var inputSchema88 = z90.object({
+  taskId: z90.string().uuid().describe("Task ID to archive")
 });
 var tasksArchive = {
   name: "tasks.archive",
   group: "tasks",
   description: "Archive (delete) a task",
-  inputSchema: inputSchema87,
-  outputSchema: z89.any(),
+  inputSchema: inputSchema88,
+  outputSchema: z90.any(),
   annotations: { destructiveHint: true },
   async execute(input, ctx) {
     await ctx.client.del("task", {
@@ -4415,7 +4854,7 @@ var tasksArchive = {
 };
 
 // src/commands/tasks/create.ts
-import { z as z90 } from "zod";
+import { z as z91 } from "zod";
 
 // src/lib/poll.ts
 init_errors();
@@ -4537,7 +4976,7 @@ async function collectStreamResponse(taskId, apiKey, options) {
 }
 
 // src/lib/stream-renderer.ts
-import pc4 from "picocolors";
+import pc5 from "picocolors";
 var SPINNER_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var SPINNER_INTERVAL_MS = 80;
 var StreamRenderer = class {
@@ -4574,14 +5013,14 @@ var StreamRenderer = class {
         this.stopSpinner();
         process.stderr.write(
           `
-${this.useColor ? pc4.red("Error:") : "Error:"} ${event.content}
+${this.useColor ? pc5.red("Error:") : "Error:"} ${event.content}
 `
         );
         break;
       case "timeout":
         this.stopSpinner();
         process.stderr.write(`
-${this.useColor ? pc4.yellow("Stream timed out.") : "Stream timed out."}
+${this.useColor ? pc5.yellow("Stream timed out.") : "Stream timed out."}
 `);
         break;
     }
@@ -4603,7 +5042,7 @@ ${this.useColor ? pc4.yellow("Stream timed out.") : "Stream timed out."}
   }
   writeSpinnerFrame() {
     const frame = SPINNER_FRAMES[this.spinnerFrame];
-    const text = this.useColor ? pc4.dim(`${frame} ${this.currentLabel}`) : `${frame} ${this.currentLabel}`;
+    const text = this.useColor ? pc5.dim(`${frame} ${this.currentLabel}`) : `${frame} ${this.currentLabel}`;
     process.stderr.write(`\r  ${text}`);
   }
   stopSpinner() {
@@ -4618,19 +5057,19 @@ ${this.useColor ? pc4.yellow("Stream timed out.") : "Stream timed out."}
 };
 
 // src/commands/tasks/create.ts
-var inputSchema88 = z90.object({
-  project: z90.string().uuid().describe("Project ID"),
-  title: z90.string().optional().describe("Task title"),
-  message: z90.string().optional().describe("Initial message"),
-  wait: z90.boolean().default(false).describe("Wait for agent response (polling)"),
-  stream: z90.boolean().default(false).describe("Stream agent response in real-time (SSE)")
+var inputSchema89 = z91.object({
+  project: z91.string().uuid().describe("Project ID"),
+  title: z91.string().optional().describe("Task title"),
+  message: z91.string().optional().describe("Initial message"),
+  wait: z91.boolean().default(false).describe("Wait for agent response (polling)"),
+  stream: z91.boolean().default(false).describe("Stream agent response in real-time (SSE)")
 });
 var tasksCreate = {
   name: "tasks.create",
   group: "tasks",
   description: "Create a new task in a project",
-  inputSchema: inputSchema88,
-  outputSchema: z90.any(),
+  inputSchema: inputSchema89,
+  outputSchema: z91.any(),
   async execute(input, ctx) {
     const result = await ctx.client.post("tasks", {
       projectId: input.project,
@@ -4680,16 +5119,16 @@ var tasksCreate = {
 };
 
 // src/commands/tasks/get.ts
-import { z as z91 } from "zod";
-var inputSchema89 = z91.object({
-  taskId: z91.string().uuid().describe("Task ID")
+import { z as z92 } from "zod";
+var inputSchema90 = z92.object({
+  taskId: z92.string().uuid().describe("Task ID")
 });
 var tasksGet = {
   name: "tasks.get",
   group: "tasks",
   description: "Get details of a specific task",
-  inputSchema: inputSchema89,
-  outputSchema: z91.any(),
+  inputSchema: inputSchema90,
+  outputSchema: z92.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     return ctx.client.get("task", {
@@ -4703,17 +5142,17 @@ var tasksGet = {
 };
 
 // src/commands/tasks/list.ts
-import { z as z92 } from "zod";
-var inputSchema90 = z92.object({
-  project: z92.string().uuid().optional().describe("Project ID to filter by"),
+import { z as z93 } from "zod";
+var inputSchema91 = z93.object({
+  project: z93.string().uuid().optional().describe("Project ID to filter by"),
   ...paginationInput
 });
 var tasksList = {
   name: "tasks.list",
   group: "tasks",
   description: "List tasks, optionally filtered by project",
-  inputSchema: inputSchema90,
-  outputSchema: z92.any(),
+  inputSchema: inputSchema91,
+  outputSchema: z93.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     if (input.project) {
@@ -4733,18 +5172,18 @@ var tasksList = {
 };
 
 // src/commands/tasks/messages.ts
-import { z as z93 } from "zod";
-var inputSchema91 = z93.object({
-  taskId: z93.string().uuid().describe("Task ID"),
-  cursor: z93.string().optional().describe("Pagination cursor"),
-  limit: z93.number().int().min(1).max(100).default(50).describe("Results per page")
+import { z as z94 } from "zod";
+var inputSchema92 = z94.object({
+  taskId: z94.string().uuid().describe("Task ID"),
+  cursor: z94.string().optional().describe("Pagination cursor"),
+  limit: z94.number().int().min(1).max(100).default(50).describe("Results per page")
 });
 var tasksMessages = {
   name: "tasks.messages",
   group: "tasks",
   description: "List messages for a task",
-  inputSchema: inputSchema91,
-  outputSchema: z93.any(),
+  inputSchema: inputSchema92,
+  outputSchema: z94.any(),
   annotations: { readOnlyHint: true },
   async execute(input, ctx) {
     const queryParams = { limit: input.limit };
@@ -4763,22 +5202,22 @@ var tasksMessages = {
 };
 
 // src/commands/tasks/send.ts
-import { z as z94 } from "zod";
+import { z as z95 } from "zod";
 init_profiles();
 var UUID_RE2 = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var inputSchema92 = z94.object({
-  taskId: z94.string().uuid().describe("Task ID"),
-  message: z94.string().min(1).describe("Message content"),
-  fileRefs: z94.string().optional().describe("Comma-separated file reference UUIDs"),
-  wait: z94.boolean().default(false).describe("Wait for agent response (polling)"),
-  stream: z94.boolean().default(false).describe("Stream agent response in real-time (SSE)")
+var inputSchema93 = z95.object({
+  taskId: z95.string().uuid().describe("Task ID"),
+  message: z95.string().min(1).describe("Message content"),
+  fileRefs: z95.string().optional().describe("Comma-separated file reference UUIDs"),
+  wait: z95.boolean().default(false).describe("Wait for agent response (polling)"),
+  stream: z95.boolean().default(false).describe("Stream agent response in real-time (SSE)")
 });
 var tasksSend = {
   name: "tasks.send",
   group: "tasks",
   description: "Send a message to a task",
-  inputSchema: inputSchema92,
-  outputSchema: z94.any(),
+  inputSchema: inputSchema93,
+  outputSchema: z95.any(),
   async execute(input, ctx) {
     let referencedFileIds;
     if (input.fileRefs) {
@@ -4835,18 +5274,18 @@ var tasksSend = {
 
 // src/commands/tasks/update.ts
 init_errors();
-import { z as z95 } from "zod";
-var inputSchema93 = z95.object({
-  taskId: z95.string().uuid().describe("Task ID"),
-  title: z95.string().min(1).optional().describe("New task title"),
-  status: z95.string().optional().describe("New task status")
+import { z as z96 } from "zod";
+var inputSchema94 = z96.object({
+  taskId: z96.string().uuid().describe("Task ID"),
+  title: z96.string().min(1).optional().describe("New task title"),
+  status: z96.string().optional().describe("New task status")
 });
 var tasksUpdate = {
   name: "tasks.update",
   group: "tasks",
   description: "Update an existing task",
-  inputSchema: inputSchema93,
-  outputSchema: z95.any(),
+  inputSchema: inputSchema94,
+  outputSchema: z96.any(),
   annotations: { idempotentHint: true },
   async execute(input, ctx) {
     const { taskId, ...fields } = input;
@@ -4871,220 +5310,6 @@ function registerTaskCommands() {
   return [tasksList, tasksGet, tasksCreate, tasksSend, tasksMessages, tasksUpdate, tasksArchive];
 }
 
-// src/commands/update.ts
-init_config();
-import { execFileSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import { chmodSync as chmodSync2, copyFileSync, createWriteStream, mkdirSync as mkdirSync4, readFileSync as readFileSync6, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join as join6 } from "node:path";
-import { Readable } from "node:stream";
-import { pipeline } from "node:stream/promises";
-import pc5 from "picocolors";
-
-// src/lib/install-method.ts
-function detectInstallMethod() {
-  const execPath = process.argv[1] ?? "";
-  if (execPath.includes("node_modules")) {
-    return "npm";
-  }
-  if (execPath.includes("/Cellar/") || execPath.includes("/homebrew/")) {
-    return "homebrew";
-  }
-  return "binary";
-}
-function getUpdateInstruction(method) {
-  switch (method) {
-    case "npm":
-      return "npm install -g @elnora-ai/cli@latest";
-    case "homebrew":
-      return "brew upgrade elnora";
-    case "binary":
-      return "elnora update --install";
-  }
-}
-
-// src/commands/update.ts
-var NPM_REGISTRY_URL2 = "https://registry.npmjs.org/@elnora-ai/cli/latest";
-var GITHUB_REPO = "Elnora-AI/elnora-cli";
-function getPlatformTarget() {
-  const arch = process.arch === "arm64" ? "arm64" : "x64";
-  switch (process.platform) {
-    case "darwin":
-      return { target: `elnora-macos-${arch}`, ext: "tar.gz" };
-    case "linux":
-      return { target: `elnora-linux-${arch}`, ext: "tar.gz" };
-    case "win32":
-      return { target: `elnora-win-${arch}.exe`, ext: "zip" };
-    default:
-      return null;
-  }
-}
-async function fetchLatestVersion() {
-  const res = await fetch(NPM_REGISTRY_URL2, { signal: AbortSignal.timeout(5e3) });
-  if (!res.ok) throw new Error(`Registry returned HTTP ${res.status}`);
-  const data = await res.json();
-  return data.version ?? "unknown";
-}
-async function downloadToFile(url, dest) {
-  const res = await fetch(url, { signal: AbortSignal.timeout(12e4), redirect: "follow" });
-  if (!res.ok || !res.body) throw new Error(`HTTP ${res.status}`);
-  const nodeStream = Readable.fromWeb(res.body);
-  await pipeline(nodeStream, createWriteStream(dest));
-}
-async function installBinaryUpdate(latest) {
-  const color2 = isColorEnabled();
-  const platformInfo = getPlatformTarget();
-  if (!platformInfo) {
-    console.error(`Unsupported platform: ${process.platform}.`);
-    console.error("Try: npm install -g @elnora-ai/cli@latest");
-    process.exitCode = 1;
-    return;
-  }
-  const { target, ext } = platformInfo;
-  const binaryUrl = `https://github.com/${GITHUB_REPO}/releases/download/v${latest}/${target}.${ext}`;
-  const checksumUrl = `https://github.com/${GITHUB_REPO}/releases/download/v${latest}/${target}.sha256`;
-  const tmp = join6(tmpdir(), `elnora-update-${Date.now()}`);
-  mkdirSync4(tmp, { recursive: true });
-  const archivePath = join6(tmp, `${target}.${ext}`);
-  try {
-    console.error("Downloading...");
-    await downloadToFile(binaryUrl, archivePath);
-    let checksumVerified = false;
-    try {
-      const checksumRes = await fetch(checksumUrl, { signal: AbortSignal.timeout(15e3) });
-      if (checksumRes.ok) {
-        const checksumText = await checksumRes.text();
-        const expected = checksumText.split(/\s/)[0].trim();
-        if (expected.length === 64) {
-          const actual = createHash("sha256").update(readFileSync6(archivePath)).digest("hex");
-          if (actual.toLowerCase() !== expected.toLowerCase()) {
-            console.error("Checksum verification failed. The download may be corrupted.");
-            process.exitCode = 1;
-            return;
-          }
-          checksumVerified = true;
-        }
-      }
-    } catch {
-    }
-    if (!checksumVerified) {
-      console.error("Warning: Could not verify download checksum. Proceeding anyway.");
-    }
-    if (process.platform === "win32") {
-      const extractDir = join6(tmp, "extracted");
-      execFileSync("powershell", [
-        "-NoProfile",
-        "-Command",
-        `Expand-Archive -Path '${archivePath}' -DestinationPath '${extractDir}' -Force`
-      ]);
-      const installDir = join6(process.env.USERPROFILE ?? process.env.HOME ?? "", ".elnora", "bin");
-      mkdirSync4(installDir, { recursive: true });
-      copyFileSync(join6(extractDir, target), join6(installDir, "elnora.exe"));
-    } else {
-      execFileSync("tar", ["-xzf", archivePath, "-C", tmp]);
-      const installDir = process.env.ELNORA_INSTALL_DIR ?? join6(process.env.HOME ?? "", ".local", "bin");
-      mkdirSync4(installDir, { recursive: true });
-      const dest = join6(installDir, "elnora");
-      copyFileSync(join6(tmp, target), dest);
-      chmodSync2(dest, 493);
-    }
-    const done = color2 ? `${pc5.green("\u2713")} Updated to v${latest}` : `\u2713 Updated to v${latest}`;
-    console.error(done);
-  } finally {
-    try {
-      rmSync(tmp, { recursive: true, force: true });
-    } catch {
-    }
-  }
-}
-function addUpdateCommand(program2) {
-  program2.command("update").description("Check for updates (use --install to apply)").option("--install", "Download and install the update").action(async (opts) => {
-    const color2 = isColorEnabled();
-    const method = detectInstallMethod();
-    let latest;
-    try {
-      latest = await fetchLatestVersion();
-    } catch {
-      console.error("Failed to check for updates.");
-      process.exitCode = 1;
-      return;
-    }
-    if (latest === "unknown") {
-      console.error("Could not determine latest version.");
-      process.exitCode = 1;
-      return;
-    }
-    if (latest === VERSION || !isNewerVersion(latest, VERSION)) {
-      const msg2 = color2 ? `${pc5.green("\u2713")} Already on the latest version (v${VERSION})` : `\u2713 Already on the latest version (v${VERSION})`;
-      console.error(msg2);
-      return;
-    }
-    const instruction = getUpdateInstruction(method);
-    if (!opts.install) {
-      const msg2 = color2 ? `${pc5.yellow("Update available:")} v${VERSION} \u2192 v${latest}` : `Update available: v${VERSION} \u2192 v${latest}`;
-      console.error(msg2);
-      console.error(`Run: ${instruction}`);
-      return;
-    }
-    const msg = color2 ? `Updating Elnora CLI ${pc5.dim(`v${VERSION}`)} \u2192 ${pc5.green(`v${latest}`)}...` : `Updating Elnora CLI v${VERSION} \u2192 v${latest}...`;
-    console.error(msg);
-    if (method === "npm") {
-      console.error("Installed via npm. Run:");
-      console.error(`  npm install -g @elnora-ai/cli@latest`);
-      return;
-    }
-    if (method === "homebrew") {
-      console.error("Installed via Homebrew. Run:");
-      console.error(`  brew upgrade elnora`);
-      return;
-    }
-    try {
-      await installBinaryUpdate(latest);
-    } catch {
-      console.error("Update failed. Try manually:");
-      console.error(
-        process.platform === "win32" ? "  irm https://cli.elnora.ai/install.ps1 | iex" : "  curl -fsSL https://cli.elnora.ai/install.sh | bash"
-      );
-      process.exitCode = 1;
-    }
-  });
-}
-
-// src/commands/whoami.ts
-init_client();
-init_profiles();
-function addWhoamiCommand(program2) {
-  program2.command("whoami").description("Show current authentication context").action(async () => {
-    const parentOpts = program2.opts();
-    const profileName = parentOpts.profile ?? "default";
-    try {
-      const hint = resolveCredentialHint(profileName);
-      let orgName = "unknown";
-      try {
-        const client = new ElnoraApiClient(resolveApiKey(profileName));
-        const orgs = await client.get("organizations");
-        const orgList = Array.isArray(orgs) ? orgs : orgs?.items ?? [];
-        if (orgList.length > 0) orgName = orgList[0]?.name ?? "unknown";
-      } catch {
-      }
-      if (parentOpts.json) {
-        console.log(JSON.stringify({ profile: profileName, credential: hint, orgName }, null, 2));
-      } else {
-        console.log(`
-Profile:     ${profileName}`);
-        console.log(`Credential:  ${hint}`);
-        console.log(`Org:      ${orgName}`);
-        console.log("");
-      }
-    } catch (e) {
-      console.error(e instanceof Error ? e.message : "Not authenticated");
-      console.error("Run: elnora auth login");
-      process.exit(3);
-    }
-  });
-}
-
 // src/core/registry.ts
 var CommandRegistry = class {
   commands = /* @__PURE__ */ new Map();
@@ -5112,6 +5337,34 @@ var CommandRegistry = class {
   }
 };
 
+// src/core/build-registry.ts
+function buildRegistry() {
+  const registry2 = new CommandRegistry();
+  const commandGroups = [
+    [healthCheck],
+    registerAuthCommands(),
+    registerProjectCommands(),
+    registerTaskCommands(),
+    registerFileCommands(),
+    registerOrgCommands(),
+    registerFolderCommands(),
+    registerSearchCommands(),
+    registerProtocolCommands(),
+    registerLibraryCommands(),
+    registerAccountCommands(),
+    registerApiKeyCommands(),
+    registerAuditCommands(),
+    registerFeedbackCommands(),
+    registerFlagCommands()
+  ];
+  for (const commands of commandGroups) {
+    for (const cmd of commands) {
+      registry2.register(cmd);
+    }
+  }
+  return registry2;
+}
+
 // src/cli.ts
 init_errors();
 process.on("uncaughtException", (err) => {
@@ -5135,28 +5388,7 @@ process.on("unhandledRejection", (reason) => {
   }
   process.exitCode = 1;
 });
-var registry = new CommandRegistry();
-var commandGroups = [
-  [healthCheck],
-  registerAuthCommands(),
-  registerProjectCommands(),
-  registerTaskCommands(),
-  registerFileCommands(),
-  registerOrgCommands(),
-  registerFolderCommands(),
-  registerSearchCommands(),
-  registerLibraryCommands(),
-  registerAccountCommands(),
-  registerApiKeyCommands(),
-  registerAuditCommands(),
-  registerFeedbackCommands(),
-  registerFlagCommands()
-];
-for (const commands of commandGroups) {
-  for (const cmd of commands) {
-    registry.register(cmd);
-  }
-}
+var registry = buildRegistry();
 var program = buildProgram(registry);
 addMcpCommands(program, registry);
 addDoctorCommand(program);