@etalon/cli 1.0.4 → 1.1.0

package/dist/index.js

@@ -5,13 +5,13 @@ import {
 
 // src/index.ts
 import { Command } from "commander";
-import ora from "ora";
-import chalk4 from "chalk";
-import { writeFileSync as writeFileSync2 } from "fs";
+import ora2 from "ora";
+import chalk6 from "chalk";
+import { writeFileSync as writeFileSync3 } from "fs";
 import {
   normalizeUrl,
   VendorRegistry,
-  auditProject,
+  auditProject as auditProject2,
   formatAuditSarif,
   generateBadgeSvg,
   calculateScore,
@@ -22,7 +22,7 @@ import {
   toTextSummary,
   generatePolicy,
   AutoFixEngine,
-  applyContextScoring,
+  applyContextScoring as applyContextScoring2,
   reportFalsePositive,
   getFeedbackSummary,
   isTelemetryEnabled,
@@ -116,13 +116,13 @@ function formatVendorEntry(dv, compact = false) {
   const lines = [];
   const riskColor = vendor.risk_score >= 6 ? chalk.red : vendor.risk_score >= 3 ? chalk.yellow : chalk.green;
   lines.push(
-    `${riskColor(vendor.domains[0].padEnd(35))} ${chalk.bold(vendor.name)}`
+    `${riskColor((vendor.domains?.[0] ?? "unknown").padEnd(35))} ${chalk.bold(vendor.name)}`
   );
   lines.push(`\u251C\u2500 ${chalk.dim("Category:")}   ${vendor.category}`);
   if (!compact) {
     const gdprStatus = vendor.gdpr_compliant ? chalk.green("Compliant") + (vendor.dpa_url ? chalk.dim(" (with DPA)") : "") : chalk.red("Non-compliant");
     lines.push(`\u251C\u2500 ${chalk.dim("GDPR:")}       ${gdprStatus}`);
-    if (vendor.data_collected.length > 0) {
+    if (vendor.data_collected && vendor.data_collected.length > 0) {
       lines.push(`\u251C\u2500 ${chalk.dim("Data:")}       ${vendor.data_collected.join(", ")}`);
     }
     if (vendor.dpa_url) {
@@ -767,12 +767,281 @@ async function runInit(dir, options = {}) {
   console.log("");
 }
 
+// src/commands/cloud.ts
+import { writeFileSync as writeFileSync2, readFileSync as readFileSync2, existsSync as existsSync3, mkdirSync as mkdirSync2, unlinkSync } from "fs";
+import { homedir } from "os";
+import { join as join3 } from "path";
+import chalk4 from "chalk";
+var CONFIG_DIR = join3(homedir(), ".etalon");
+var CONFIG_FILE = join3(CONFIG_DIR, "config.json");
+var DEFAULT_API_URL = "https://etalon.nma.vc/api";
+function saveCloudConfig(config) {
+  if (!existsSync3(CONFIG_DIR)) {
+    mkdirSync2(CONFIG_DIR, { recursive: true });
+  }
+  writeFileSync2(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 });
+}
+function loadCloudConfig() {
+  if (!existsSync3(CONFIG_FILE)) {
+    return null;
+  }
+  try {
+    return JSON.parse(readFileSync2(CONFIG_FILE, "utf-8"));
+  } catch {
+    return null;
+  }
+}
+function removeCloudConfig() {
+  if (existsSync3(CONFIG_FILE)) {
+    unlinkSync(CONFIG_FILE);
+  }
+}
+async function verifyApiKey(apiKey, apiUrl = DEFAULT_API_URL) {
+  try {
+    const response = await fetch(`${apiUrl}/auth/verify`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${apiKey}`
+      }
+    });
+    return response.ok;
+  } catch {
+    return false;
+  }
+}
+async function uploadScan(config, siteId, url, results, cliVersion) {
+  try {
+    const response = await fetch(`${config.apiUrl}/ingest`, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Authorization: `Bearer ${config.apiKey}`
+      },
+      body: JSON.stringify({
+        siteId,
+        url,
+        results,
+        cliVersion
+      })
+    });
+    const data = await response.json();
+    if (!response.ok) {
+      return { success: false, error: data.error || response.statusText };
+    }
+    return {
+      success: true,
+      scanId: data.scanId,
+      score: data.score,
+      grade: data.grade,
+      dashboardUrl: data.dashboardUrl
+    };
+  } catch (err) {
+    return { success: false, error: err instanceof Error ? err.message : "Network error" };
+  }
+}
+async function runLogin() {
+  console.log("");
+  console.log(chalk4.bold("\u{1F510} Login to ETALON Cloud"));
+  console.log(chalk4.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+  console.log("");
+  console.log(chalk4.gray("Get your API key from: https://etalon.nma.vc/dashboard/api-keys"));
+  console.log("");
+  const apiKey = await readLine("Enter your API key: ");
+  if (!apiKey || apiKey.length < 10) {
+    console.log(chalk4.red("\u274C Invalid API key"));
+    process.exit(1);
+  }
+  const spinner = (await import("ora")).default;
+  const s = spinner("Verifying API key...").start();
+  const isValid = await verifyApiKey(apiKey);
+  if (!isValid) {
+    s.fail("API key verification failed");
+    console.log(chalk4.gray("\nMake sure you copied the full key from the dashboard."));
+    process.exit(1);
+  }
+  saveCloudConfig({ apiKey, apiUrl: DEFAULT_API_URL });
+  s.succeed("Successfully logged in!");
+  console.log("");
+  console.log(chalk4.gray("You can now use:"));
+  console.log(`  ${chalk4.cyan("etalon scan <url> --upload --site <id>")}  Upload scan results`);
+  console.log(`  ${chalk4.cyan("etalon auth status")}                      Check login status`);
+  console.log(`  ${chalk4.cyan("etalon auth logout")}                      Remove stored key`);
+  console.log("");
+}
+function runLogout() {
+  removeCloudConfig();
+  console.log(chalk4.green("\u2713 Logged out successfully"));
+}
+async function runStatus() {
+  const config = loadCloudConfig();
+  if (!config) {
+    console.log(chalk4.yellow("\u274C Not logged in"));
+    console.log(chalk4.gray("\nRun: etalon auth login"));
+    return;
+  }
+  const spinner = (await import("ora")).default;
+  const s = spinner("Checking API key...").start();
+  const isValid = await verifyApiKey(config.apiKey, config.apiUrl);
+  if (isValid) {
+    s.succeed("Logged in");
+    console.log(chalk4.gray(`  API: ${config.apiUrl}`));
+    console.log(chalk4.gray(`  Key: ${config.apiKey.slice(0, 12)}...`));
+  } else {
+    s.fail("API key expired or invalid");
+    console.log(chalk4.gray("\nRun: etalon auth login"));
+  }
+}
+function readLine(prompt) {
+  return new Promise((resolve) => {
+    process.stdout.write(prompt);
+    let data = "";
+    process.stdin.setEncoding("utf-8");
+    process.stdin.resume();
+    process.stdin.on("data", (chunk) => {
+      data += chunk;
+      if (data.includes("\n")) {
+        process.stdin.pause();
+        resolve(data.trim());
+      }
+    });
+  });
+}
+async function listSites(config) {
+  try {
+    const response = await fetch(`${config.apiUrl}/sites`, {
+      headers: {
+        Authorization: `Bearer ${config.apiKey}`
+      }
+    });
+    const data = await response.json();
+    if (!response.ok) {
+      return { success: false, error: data.error || response.statusText };
+    }
+    return { success: true, sites: data.sites };
+  } catch (err) {
+    return { success: false, error: err instanceof Error ? err.message : "Network error" };
+  }
+}
+async function runListSites() {
+  const config = loadCloudConfig();
+  if (!config) {
+    console.log(chalk4.yellow("\u274C Not logged in"));
+    console.log(chalk4.gray("\nRun: etalon auth login"));
+    return;
+  }
+  const spinner = (await import("ora")).default;
+  const s = spinner("Fetching sites...").start();
+  const result = await listSites(config);
+  if (!result.success || !result.sites) {
+    s.fail(`Failed: ${result.error}`);
+    return;
+  }
+  s.stop();
+  if (result.sites.length === 0) {
+    console.log(chalk4.yellow("No sites found."));
+    console.log(chalk4.gray("Add a site at: https://etalon.nma.vc/dashboard/sites"));
+    return;
+  }
+  console.log("");
+  console.log(chalk4.bold("\u{1F4CB} Your Sites"));
+  console.log(chalk4.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+  console.log("");
+  for (const site of result.sites) {
+    const name = site.name || new URL(site.url).hostname;
+    const lastScan = site.last_scanned_at ? chalk4.gray(`Last scan: ${new Date(site.last_scanned_at).toLocaleDateString()}`) : chalk4.gray("Never scanned");
+    console.log(`  ${chalk4.cyan(site.id)}  ${chalk4.bold(name)}`);
+    console.log(`  ${chalk4.dim(site.url)}  ${lastScan}`);
+    console.log("");
+  }
+  console.log(chalk4.dim("Use the ID with: etalon scan <url> --upload --site <id>"));
+  console.log("");
+}
+
+// src/commands/push.ts
+import chalk5 from "chalk";
+import ora from "ora";
+import { auditProject, applyContextScoring } from "@etalon/core";
+var VERSION = "1.1.0";
+async function runPush(url, dir, options) {
+  const siteId = options.site;
+  if (!siteId) {
+    console.log("");
+    console.log(chalk5.red("\u274C --site <id> is required"));
+    console.log(chalk5.gray("   Get your site ID from: https://etalon.nma.vc/dashboard/sites"));
+    console.log(chalk5.gray("   Or run: etalon sites"));
+    process.exit(1);
+  }
+  const config = loadCloudConfig();
+  if (!config) {
+    console.log("");
+    console.log(chalk5.red("\u274C Not logged in. Run: etalon auth login"));
+    process.exit(1);
+  }
+  console.log("");
+  console.log(chalk5.bold("\u{1F680} ETALON Push"));
+  console.log(chalk5.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+  console.log("");
+  const scanSpinner = ora(`Scanning ${url}...`).start();
+  let scanReport;
+  try {
+    const normalizedUrl2 = url.startsWith("http") ? url : `https://${url}`;
+    const scanOptions = {
+      deep: options.deep ?? false,
+      timeout: parseInt(options.timeout ?? "30000", 10),
+      waitForNetworkIdle: false
+    };
+    scanReport = await scanSite(normalizedUrl2, scanOptions);
+    scanSpinner.succeed(`Scan complete \u2014 ${scanReport.summary.total} vendor(s) detected`);
+  } catch (err) {
+    scanSpinner.fail("Scan failed");
+    console.error(chalk5.red(`  ${err instanceof Error ? err.message : String(err)}`));
+    process.exit(2);
+  }
+  let auditReport;
+  const auditSpinner = ora(`Auditing ${dir}...`).start();
+  try {
+    auditReport = await auditProject(dir, {});
+    const scoring = applyContextScoring(auditReport.findings, dir);
+    auditReport.findings = scoring.adjustedFindings;
+    auditSpinner.succeed(`Audit complete \u2014 ${auditReport.findings.length} finding(s)`);
+  } catch {
+    auditSpinner.warn("Audit skipped (no project found or not a codebase)");
+    auditReport = null;
+  }
+  const uploadSpinner = ora("Uploading to ETALON Cloud...").start();
+  const normalizedUrl = url.startsWith("http") ? url : `https://${url}`;
+  const result = await uploadScan(config, siteId, normalizedUrl, scanReport, VERSION);
+  if (result.success) {
+    uploadSpinner.succeed(`Uploaded! Grade: ${chalk5.bold(result.grade)} (${result.score}/100)`);
+  } else {
+    uploadSpinner.fail(`Upload failed: ${result.error}`);
+  }
+  console.log("");
+  console.log(chalk5.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+  if (result.success) {
+    console.log(chalk5.green("\u2713 Push complete"));
+    console.log(chalk5.gray(`  Dashboard: ${result.dashboardUrl}`));
+  }
+  if (scanReport.summary.highRisk > 0) {
+    console.log(chalk5.yellow(`  \u26A0 ${scanReport.summary.highRisk} high-risk tracker(s) detected`));
+  }
+  if (auditReport && auditReport.findings.length > 0) {
+    const critical = auditReport.findings.filter((f) => f.severity === "critical").length;
+    const high = auditReport.findings.filter((f) => f.severity === "high").length;
+    if (critical + high > 0) {
+      console.log(chalk5.yellow(`  \u26A0 ${critical} critical, ${high} high severity code findings`));
+    }
+  }
+  console.log("");
+}
+
 // src/index.ts
-var VERSION = "1.0.0";
+var VERSION2 = "1.1.0";
 function showBanner() {
-  const blue = chalk4.hex("#3B82F6");
-  const dim = chalk4.hex("#64748B");
-  const cyan = chalk4.hex("#06B6D4");
+  const blue = chalk6.hex("#3B82F6");
+  const dim = chalk6.hex("#64748B");
+  const cyan = chalk6.hex("#06B6D4");
   console.log("");
   console.log(blue.bold("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2557      \u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2557   \u2588\u2588\u2557"));
   console.log(blue.bold("  \u2588\u2588\u2554\u2550\u2550\u2550\u2550\u255D\u255A\u2550\u2550\u2588\u2588\u2554\u2550\u2550\u255D\u2588\u2588\u2554\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2551     \u2588\u2588\u2554\u2550\u2550\u2550\u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2557  \u2588\u2588\u2551"));
@@ -781,15 +1050,15 @@ function showBanner() {
   console.log(blue.bold("  \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557   \u2588\u2588\u2551   \u2588\u2588\u2551  \u2588\u2588\u2551\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557\u255A\u2588\u2588\u2588\u2588\u2588\u2588\u2554\u255D\u2588\u2588\u2551 \u255A\u2588\u2588\u2588\u2588\u2551"));
   console.log(blue.bold("  \u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D   \u255A\u2550\u255D   \u255A\u2550\u255D  \u255A\u2550\u255D\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u2550\u2550\u2550\u2550\u255D \u255A\u2550\u255D  \u255A\u2550\u2550\u2550\u255D"));
   console.log("");
-  console.log(dim(`  v${VERSION}  `) + chalk4.white("Privacy audit tool for AI coding agents"));
+  console.log(dim(`  v${VERSION2}  `) + chalk6.white("Privacy audit tool for AI coding agents"));
   console.log(dim("  Open-source GDPR compliance scanner  ") + cyan("etalon.nma.vc"));
   console.log("");
 }
 var program = new Command();
-program.name("etalon").description("ETALON \u2014 Open-source privacy auditor. Scan websites for trackers and GDPR compliance.").version(VERSION).hook("preAction", () => {
+program.name("etalon").description("ETALON \u2014 Open-source privacy auditor. Scan websites for trackers and GDPR compliance.").version(VERSION2).hook("preAction", () => {
   showBanner();
 });
-program.command("scan").description("Scan a website for third-party trackers").argument("<url>", "URL to scan").option("-f, --format <format>", "Output format: text, json, sarif", "text").option("-d, --deep", "Deep scan: scroll page, interact with consent dialogs", false).option("-t, --timeout <ms>", "Navigation timeout in milliseconds", "30000").option("--idle", "Wait for network idle (slower but more thorough)").option("--config <path>", "Path to etalon.yaml config file").action(async (url, options) => {
+program.command("scan").description("Scan a website for third-party trackers").argument("<url>", "URL to scan").option("-f, --format <format>", "Output format: text, json, sarif", "text").option("-d, --deep", "Deep scan: scroll page, interact with consent dialogs", false).option("-t, --timeout <ms>", "Navigation timeout in milliseconds", "30000").option("--idle", "Wait for network idle (slower but more thorough)").option("--config <path>", "Path to etalon.yaml config file").option("--upload", "Upload results to ETALON Cloud").option("--site <id>", "Site ID for cloud upload (from dashboard)").action(async (url, options) => {
   const normalizedUrl = normalizeUrl(url);
   const format = options.format ?? "text";
   const config = loadConfig(options.config);
@@ -807,7 +1076,7 @@ program.command("scan").description("Scan a website for third-party trackers").a
     }
   }
   const showSpinner = format === "text";
-  const spinner = showSpinner ? ora(`Scanning ${normalizedUrl}...`).start() : null;
+  const spinner = showSpinner ? ora2(`Scanning ${normalizedUrl}...`).start() : null;
   try {
     const report = await scanSite(normalizedUrl, scanOptions);
     spinner?.stop();
@@ -823,6 +1092,30 @@ program.command("scan").description("Scan a website for third-party trackers").a
         console.log(formatText(report));
         break;
     }
+    if (options.upload) {
+      const siteId = options.site;
+      if (!siteId) {
+        console.log("");
+        console.log(chalk6.red("\u274C --site <id> is required when using --upload"));
+        console.log(chalk6.gray("   Get your site ID from: https://etalon.nma.vc/dashboard/sites"));
+        process.exit(1);
+      }
+      const cloudConfig = loadCloudConfig();
+      if (!cloudConfig) {
+        console.log("");
+        console.log(chalk6.red("\u274C Not logged in. Run: etalon auth login"));
+        process.exit(1);
+      }
+      const uploadSpinner = ora2("Uploading to ETALON Cloud...").start();
+      const result = await uploadScan(cloudConfig, siteId, normalizedUrl, report, VERSION2);
+      if (result.success) {
+        uploadSpinner.succeed(`Uploaded! Grade: ${chalk6.bold(result.grade)} (${result.score}/100)`);
+        console.log(chalk6.gray(`  View: ${result.dashboardUrl}`));
+        console.log("");
+      } else {
+        uploadSpinner.fail(`Upload failed: ${result.error}`);
+      }
+    }
     if (report.summary.highRisk > 0) {
       process.exit(1);
     }
@@ -846,39 +1139,39 @@ program.command("audit").description("Scan a codebase for GDPR compliance (track
   const includeBlame = options.includeBlame;
   const autoFix = options.fix;
   const showSpinner = format === "text";
-  const spinner = showSpinner ? ora(`Auditing ${dir}...`).start() : null;
+  const spinner = showSpinner ? ora2(`Auditing ${dir}...`).start() : null;
   try {
-    const report = await auditProject(dir, {
+    const report = await auditProject2(dir, {
       severity: options.severity,
       includeBlame
     });
-    const scoring = applyContextScoring(report.findings, dir);
+    const scoring = applyContextScoring2(report.findings, dir);
     report.findings = scoring.adjustedFindings;
     if (scoring.adjustments.length > 0 && format === "text") {
       spinner?.stop();
-      console.log(chalk4.bold(`
+      console.log(chalk6.bold(`
 \u{1F3AF} Context: ${scoring.projectContext.industry} / ${scoring.projectContext.region}`));
-      console.log(chalk4.dim(`   ${scoring.adjustments.length} finding(s) had severity adjusted based on context`));
+      console.log(chalk6.dim(`   ${scoring.adjustments.length} finding(s) had severity adjusted based on context`));
       for (const adj of scoring.adjustments.slice(0, 5)) {
-        console.log(`   ${chalk4.dim(adj.finding_rule)}: ${adj.original_severity} \u2192 ${chalk4.yellow(adj.adjusted_severity)} (${adj.reason})`);
+        console.log(`   ${chalk6.dim(adj.finding_rule)}: ${adj.original_severity} \u2192 ${chalk6.yellow(adj.adjusted_severity)} (${adj.reason})`);
       }
       if (scoring.adjustments.length > 5) {
-        console.log(chalk4.dim(`   ... and ${scoring.adjustments.length - 5} more`));
+        console.log(chalk6.dim(`   ... and ${scoring.adjustments.length - 5} more`));
       }
     }
     spinner?.stop();
     if (autoFix) {
       const patches = generatePatches(report.findings, dir);
       if (patches.length > 0) {
-        console.log(chalk4.bold(`
+        console.log(chalk6.bold(`
 \u{1F527} ${patches.length} config fix(es):`));
         for (const p of patches) {
-          console.log(`  ${chalk4.dim(p.file)}:${p.line} \u2014 ${p.description}`);
-          console.log(`    ${chalk4.red("- " + p.oldContent.trim())}`);
-          console.log(`    ${chalk4.green("+ " + p.newContent.trim())}`);
+          console.log(`  ${chalk6.dim(p.file)}:${p.line} \u2014 ${p.description}`);
+          console.log(`    ${chalk6.red("- " + p.oldContent.trim())}`);
+          console.log(`    ${chalk6.green("+ " + p.newContent.trim())}`);
         }
         const applied = applyPatches(patches, dir);
-        console.log(chalk4.green(`
+        console.log(chalk6.green(`
 \u2713 Applied ${applied} config fix(es).`));
       }
       const engine = new AutoFixEngine();
@@ -903,23 +1196,23 @@ program.command("audit").description("Scan a codebase for GDPR compliance (track
       collectCodeFiles(dir);
       const suggestions = engine.scanFiles(codeFiles);
       if (suggestions.length > 0) {
-        console.log(chalk4.bold(`
+        console.log(chalk6.bold(`
 \u{1F6E1}\uFE0F  ${suggestions.length} tracker consent fix(es) available:`));
         for (const s of suggestions) {
-          console.log(`  ${chalk4.cyan(s.tracker_name)} in ${chalk4.dim(s.location.file)}:${s.location.line}`);
-          console.log(`    ${chalk4.dim(s.description)}`);
+          console.log(`  ${chalk6.cyan(s.tracker_name)} in ${chalk6.dim(s.location.file)}:${s.location.line}`);
+          console.log(`    ${chalk6.dim(s.description)}`);
         }
         const hookPath = engine.generateConsentHook(dir);
-        console.log(chalk4.green(`
-\u2713 Generated consent hook: ${chalk4.cyan(hookPath)}`));
+        console.log(chalk6.green(`
+\u2713 Generated consent hook: ${chalk6.cyan(hookPath)}`));
         const result = engine.applyAllFixes(suggestions);
-        console.log(chalk4.green(`\u2713 Applied ${result.applied} tracker consent fix(es).`));
+        console.log(chalk6.green(`\u2713 Applied ${result.applied} tracker consent fix(es).`));
         if (result.failed > 0) {
-          console.log(chalk4.yellow(`\u26A0 ${result.failed} fix(es) could not be applied.`));
+          console.log(chalk6.yellow(`\u26A0 ${result.failed} fix(es) could not be applied.`));
         }
       }
       if (patches.length === 0 && suggestions.length === 0) {
-        console.log(chalk4.yellow("\nNo auto-fixable issues found."));
+        console.log(chalk6.yellow("\nNo auto-fixable issues found."));
       }
     }
     recordAuditEvent({
@@ -941,8 +1234,8 @@ program.command("audit").description("Scan a codebase for GDPR compliance (track
       case "html": {
         const html = generateHtmlReport(report);
         const outPath = "etalon-report.html";
-        writeFileSync2(outPath, html, "utf-8");
-        console.log(chalk4.green(`\u2713 Report written to ${chalk4.cyan(outPath)}`));
+        writeFileSync3(outPath, html, "utf-8");
+        console.log(chalk6.green(`\u2713 Report written to ${chalk6.cyan(outPath)}`));
         break;
       }
       case "text":
@@ -993,7 +1286,7 @@ program.command("init").description("Set up ETALON in your project (config, CI,
 program.command("consent-check").description("Test if trackers fire before/after rejecting cookies on a website").argument("<url>", "URL to check").option("-f, --format <format>", "Output format: text, json", "text").option("-t, --timeout <ms>", "Navigation timeout", "15000").action(async (url, options) => {
   const normalizedUrl = normalizeUrl(url);
   const format = options.format ?? "text";
-  const spinner = format === "text" ? ora(`Checking consent on ${normalizedUrl}...`).start() : null;
+  const spinner = format === "text" ? ora2(`Checking consent on ${normalizedUrl}...`).start() : null;
   try {
     const { checkConsent } = await import("./consent-checker-QRPTMQWN.js");
     const result = await checkConsent(normalizedUrl, {
@@ -1004,33 +1297,33 @@ program.command("consent-check").description("Test if trackers fire before/after
       console.log(JSON.stringify(result, null, 2));
     } else {
       console.log("");
-      console.log(chalk4.bold("ETALON Consent Verification"));
-      console.log(chalk4.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
-      console.log(`URL:       ${chalk4.cyan(result.url)}`);
-      console.log(`Banner:    ${result.bannerDetected ? chalk4.green("\u2713 Detected") : chalk4.red("\u2717 Not found")}${result.bannerType ? ` (${result.bannerType})` : ""}`);
-      console.log(`Reject:    ${result.rejectClicked ? chalk4.green("\u2713 Clicked") : chalk4.yellow("\u2717 Could not reject")}`);
+      console.log(chalk6.bold("ETALON Consent Verification"));
+      console.log(chalk6.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+      console.log(`URL:       ${chalk6.cyan(result.url)}`);
+      console.log(`Banner:    ${result.bannerDetected ? chalk6.green("\u2713 Detected") : chalk6.red("\u2717 Not found")}${result.bannerType ? ` (${result.bannerType})` : ""}`);
+      console.log(`Reject:    ${result.rejectClicked ? chalk6.green("\u2713 Clicked") : chalk6.yellow("\u2717 Could not reject")}`);
       console.log("");
       if (result.preConsentTrackers.length > 0) {
-        console.log(chalk4.bold("\u{1F50D} Trackers before consent:"));
+        console.log(chalk6.bold("\u{1F50D} Trackers before consent:"));
         for (const t of result.preConsentTrackers) {
-          console.log(`  \u2022 ${t.name} (${chalk4.dim(t.matchedDomain)})`);
+          console.log(`  \u2022 ${t.name} (${chalk6.dim(t.matchedDomain)})`);
         }
         console.log("");
       }
       if (result.postRejectTrackers.length > 0) {
-        console.log(chalk4.bold("\u26A0\uFE0F  Trackers after rejection:"));
+        console.log(chalk6.bold("\u26A0\uFE0F  Trackers after rejection:"));
         for (const t of result.postRejectTrackers) {
-          console.log(`  \u2022 ${chalk4.red(t.name)} (${chalk4.dim(t.matchedDomain)})`);
+          console.log(`  \u2022 ${chalk6.red(t.name)} (${chalk6.dim(t.matchedDomain)})`);
         }
         console.log("");
       }
       if (result.violations.length > 0) {
-        console.log(chalk4.red.bold(`\u{1F534} ${result.violations.length} consent violation(s)`));
+        console.log(chalk6.red.bold(`\u{1F534} ${result.violations.length} consent violation(s)`));
         for (const v of result.violations) {
           console.log(`  ${v.phase === "before-interaction" ? "\u23F1" : "\u{1F534}"} ${v.message}`);
         }
       } else {
-        console.log(chalk4.green.bold("\u2713 No consent violations detected"));
+        console.log(chalk6.green.bold("\u2713 No consent violations detected"));
       }
       console.log("");
     }
@@ -1047,7 +1340,7 @@ Error: ${error.message}`);
 program.command("policy-check").description("Cross-reference privacy policy text against actual detected trackers").argument("<url>", "URL to check").option("-f, --format <format>", "Output format: text, json", "text").option("-t, --timeout <ms>", "Navigation timeout", "30000").option("--policy-url <url>", "Directly specify the privacy policy URL").action(async (url, options) => {
   const normalizedUrl = normalizeUrl(url);
   const format = options.format ?? "text";
-  const spinner = format === "text" ? ora(`Analyzing privacy policy for ${normalizedUrl}...`).start() : null;
+  const spinner = format === "text" ? ora2(`Analyzing privacy policy for ${normalizedUrl}...`).start() : null;
   try {
     const { checkPolicy } = await import("./policy-checker-ONMTI7X2.js");
     const result = await checkPolicy(normalizedUrl, {
@@ -1059,60 +1352,60 @@ program.command("policy-check").description("Cross-reference privacy policy text
       console.log(JSON.stringify(result, null, 2));
     } else {
       console.log("");
-      console.log(chalk4.bold("ETALON Policy vs. Reality Audit"));
-      console.log(chalk4.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
-      console.log(`URL:           ${chalk4.cyan(result.url)}`);
-      console.log(`Policy page:   ${result.policyFound ? chalk4.green(result.policyUrl) : chalk4.red("\u2717 Not found")}`);
+      console.log(chalk6.bold("ETALON Policy vs. Reality Audit"));
+      console.log(chalk6.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+      console.log(`URL:           ${chalk6.cyan(result.url)}`);
+      console.log(`Policy page:   ${result.policyFound ? chalk6.green(result.policyUrl) : chalk6.red("\u2717 Not found")}`);
       console.log("");
-      console.log(`\u{1F4CB} Vendors mentioned in policy:  ${chalk4.bold(String(result.mentionedVendors.length))}`);
-      console.log(`\u{1F50D} Vendors detected by scan:     ${chalk4.bold(String(result.detectedVendors.length))}`);
+      console.log(`\u{1F4CB} Vendors mentioned in policy:  ${chalk6.bold(String(result.mentionedVendors.length))}`);
+      console.log(`\u{1F50D} Vendors detected by scan:     ${chalk6.bold(String(result.detectedVendors.length))}`);
       console.log("");
       if (!result.policyFound) {
-        console.log(chalk4.red.bold("\u26A0  No privacy policy page found \u2014 all detected trackers are undisclosed"));
+        console.log(chalk6.red.bold("\u26A0  No privacy policy page found \u2014 all detected trackers are undisclosed"));
         console.log("");
       }
       if (result.undisclosed.length > 0) {
-        console.log(chalk4.red.bold(`\u{1F534} ${result.undisclosed.length} UNDISCLOSED (detected on site, not in policy):`));
+        console.log(chalk6.red.bold(`\u{1F534} ${result.undisclosed.length} UNDISCLOSED (detected on site, not in policy):`));
         for (const m of result.undisclosed) {
-          const icon = m.severity === "critical" ? chalk4.red("\u2717 CRITICAL") : m.severity === "high" ? chalk4.yellow("\u2717 HIGH") : m.severity === "medium" ? chalk4.yellow("\u2717 MEDIUM") : chalk4.dim("\u2717 LOW");
+          const icon = m.severity === "critical" ? chalk6.red("\u2717 CRITICAL") : m.severity === "high" ? chalk6.yellow("\u2717 HIGH") : m.severity === "medium" ? chalk6.yellow("\u2717 MEDIUM") : chalk6.dim("\u2717 LOW");
           console.log(`  ${icon}  ${m.vendorName} \u2014 ${m.message}`);
         }
         console.log("");
       }
       if (result.disclosed.length > 0) {
-        console.log(chalk4.green.bold(`\u2713 ${result.disclosed.length} DISCLOSED (in both policy and scan):`));
+        console.log(chalk6.green.bold(`\u2713 ${result.disclosed.length} DISCLOSED (in both policy and scan):`));
         for (const m of result.disclosed) {
-          console.log(`  ${chalk4.green("\u2713")} ${m.vendorName}`);
+          console.log(`  ${chalk6.green("\u2713")} ${m.vendorName}`);
         }
         console.log("");
       }
       if (result.overclaimed.length > 0) {
-        console.log(chalk4.dim(`\u2139  ${result.overclaimed.length} OVERCLAIMED (in policy, not detected):`));
+        console.log(chalk6.dim(`\u2139  ${result.overclaimed.length} OVERCLAIMED (in policy, not detected):`));
         for (const m of result.overclaimed) {
-          console.log(`  ${chalk4.dim("\u2013")} ${m.vendorName}`);
+          console.log(`  ${chalk6.dim("\u2013")} ${m.vendorName}`);
         }
         console.log("");
       }
       if (result.pass) {
-        console.log(chalk4.green.bold("\u2713 All detected trackers are disclosed in the privacy policy"));
+        console.log(chalk6.green.bold("\u2713 All detected trackers are disclosed in the privacy policy"));
       } else {
-        console.log(chalk4.red.bold(`\u2717 ${result.undisclosed.length} tracker(s) not disclosed in privacy policy`));
+        console.log(chalk6.red.bold(`\u2717 ${result.undisclosed.length} tracker(s) not disclosed in privacy policy`));
       }
       console.log("");
       if (result.disclosures.length > 0) {
-        console.log(chalk4.bold.cyan("\u{1F4DD} Add this to your privacy policy:"));
-        console.log(chalk4.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+        console.log(chalk6.bold.cyan("\u{1F4DD} Add this to your privacy policy:"));
+        console.log(chalk6.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
         for (const d of result.disclosures) {
           console.log("");
-          console.log(chalk4.bold(`  ${d.vendorName}`));
+          console.log(chalk6.bold(`  ${d.vendorName}`));
           console.log(`  ${d.snippet}`);
           if (d.dpaUrl) {
-            console.log(chalk4.dim(`  DPA: ${d.dpaUrl}`));
+            console.log(chalk6.dim(`  DPA: ${d.dpaUrl}`));
           }
         }
         console.log("");
-        console.log(chalk4.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
-        console.log(chalk4.dim("Copy the text above into your privacy policy or CMS."));
+        console.log(chalk6.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+        console.log(chalk6.dim("Copy the text above into your privacy policy or CMS."));
         console.log("");
       }
     }
@@ -1127,10 +1420,10 @@ Error: ${error.message}`);
   }
 });
 program.command("generate-policy").description("Generate a GDPR privacy policy from code audit + network scan").argument("[dir]", "Project directory to audit", "./").requiredOption("--company <name>", "Your company/organization name").requiredOption("--email <email>", "Privacy contact / DPO email").option("--url <url>", "Also scan a live URL for network trackers").option("--country <country>", 'Jurisdiction (e.g. "EU", "Germany")').option("-o, --output <file>", "Output file", "privacy-policy.md").option("-f, --format <format>", "Output format: md, html, txt", "md").action(async (dir, options) => {
-  const spinner = ora("Generating privacy policy...").start();
+  const spinner = ora2("Generating privacy policy...").start();
   try {
     spinner.text = "Running code audit...";
-    const audit = await auditProject(dir);
+    const audit = await auditProject2(dir);
     spinner.text = "Analyzing data flows...";
     const { collectFiles } = await import("@etalon/core");
     let dataFlow;
@@ -1161,32 +1454,32 @@ program.command("generate-policy").description("Generate a GDPR privacy policy f
       dataFlow
     });
     const outputFile = options.output ?? "privacy-policy.md";
-    writeFileSync2(outputFile, policy.fullText, "utf-8");
+    writeFileSync3(outputFile, policy.fullText, "utf-8");
     spinner.succeed(`Privacy policy generated!`);
     console.log("");
-    console.log(chalk4.bold("ETALON Privacy Policy Generator"));
-    console.log(chalk4.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
-    console.log(`Company:       ${chalk4.cyan(options.company)}`);
-    console.log(`Contact:       ${chalk4.cyan(options.email)}`);
+    console.log(chalk6.bold("ETALON Privacy Policy Generator"));
+    console.log(chalk6.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+    console.log(`Company:       ${chalk6.cyan(options.company)}`);
+    console.log(`Contact:       ${chalk6.cyan(options.email)}`);
     if (options.url) {
-      console.log(`Site scanned:  ${chalk4.cyan(options.url)}`);
+      console.log(`Site scanned:  ${chalk6.cyan(options.url)}`);
     }
-    console.log(`Sources:       ${chalk4.dim(policy.meta.sources.join(", "))}`);
+    console.log(`Sources:       ${chalk6.dim(policy.meta.sources.join(", "))}`);
     console.log("");
-    console.log(`\u{1F4CB} Sections:   ${chalk4.bold(String(policy.sections.length))}`);
-    console.log(`\u{1F50D} Vendors:    ${chalk4.bold(String(policy.vendors.length))}`);
-    console.log(`\u{1F6E1}\uFE0F  PII types:  ${chalk4.bold(String(policy.piiTypes.length))}`);
+    console.log(`\u{1F4CB} Sections:   ${chalk6.bold(String(policy.sections.length))}`);
+    console.log(`\u{1F50D} Vendors:    ${chalk6.bold(String(policy.vendors.length))}`);
+    console.log(`\u{1F6E1}\uFE0F  PII types:  ${chalk6.bold(String(policy.piiTypes.length))}`);
     console.log("");
     if (policy.vendors.length > 0) {
-      console.log(chalk4.dim("Third-party vendors included:"));
+      console.log(chalk6.dim("Third-party vendors included:"));
       for (const v of policy.vendors) {
-        const src = v.source === "both" ? chalk4.magenta("code+network") : v.source === "code" ? chalk4.blue("code") : chalk4.green("network");
-        console.log(`  ${chalk4.bold(v.vendorName)} ${chalk4.dim(`(${v.category})`)} \u2014 ${src}`);
+        const src = v.source === "both" ? chalk6.magenta("code+network") : v.source === "code" ? chalk6.blue("code") : chalk6.green("network");
+        console.log(`  ${chalk6.bold(v.vendorName)} ${chalk6.dim(`(${v.category})`)} \u2014 ${src}`);
       }
       console.log("");
     }
-    console.log(chalk4.green(`\u2713 Written to ${chalk4.bold(outputFile)}`));
-    console.log(chalk4.dim("\u26A0 Review with a legal professional before publishing."));
+    console.log(chalk6.green(`\u2713 Written to ${chalk6.bold(outputFile)}`));
+    console.log(chalk6.dim("\u26A0 Review with a legal professional before publishing."));
     console.log("");
   } catch (error) {
     spinner.fail("Policy generation failed");
@@ -1198,16 +1491,16 @@ Error: ${error.message}`);
   }
 });
 program.command("badge").description("Generate a compliance badge SVG for your README").argument("[dir]", "Directory to audit", "./").option("-o, --output <file>", "Output file", "etalon-badge.svg").action(async (dir, options) => {
-  const spinner = ora("Generating badge...").start();
+  const spinner = ora2("Generating badge...").start();
   try {
-    const report = await auditProject(dir);
+    const report = await auditProject2(dir);
     const score = report.score ?? calculateScore(report);
     const svg = generateBadgeSvg(score);
-    writeFileSync2(options.output, svg, "utf-8");
-    spinner.succeed(`Badge written to ${chalk4.cyan(options.output)} \u2014 Grade: ${score.grade} (${score.score}/100)`);
+    writeFileSync3(options.output, svg, "utf-8");
+    spinner.succeed(`Badge written to ${chalk6.cyan(options.output)} \u2014 Grade: ${score.grade} (${score.score}/100)`);
     console.log("");
-    console.log(chalk4.bold("Shields.io badge for your README:"));
-    console.log(chalk4.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+    console.log(chalk6.bold("Shields.io badge for your README:"));
+    console.log(chalk6.dim("\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
     const { badgeMarkdown: toBadgeMd } = await import("@etalon/core");
     console.log(toBadgeMd(score.grade, score.score));
     console.log("");
@@ -1219,14 +1512,14 @@ Error: ${error.message}`);
   }
 });
 program.command("data-flow").description("Map PII data flows through your codebase").argument("[dir]", "Directory to analyze", "./").option("-f, --format <format>", "Output format: text, mermaid, json", "text").action(async (dir, options) => {
-  const spinner = ora("Analyzing data flows...").start();
+  const spinner = ora2("Analyzing data flows...").start();
   try {
     const { readdirSync } = await import("fs");
-    const { join: join3, relative } = await import("path");
+    const { join: join4, relative } = await import("path");
     const files = [];
     const walk = (d) => {
       for (const entry of readdirSync(d, { withFileTypes: true })) {
-        const full = join3(d, entry.name);
+        const full = join4(d, entry.name);
         if (entry.isDirectory()) {
           if (!["node_modules", ".git", "dist", "build", ".next", "__pycache__"].includes(entry.name)) {
             walk(full);
@@ -1266,76 +1559,96 @@ program.command("report-fp").description("Report a false positive finding").requ
     reason: options.reason ?? "Not a tracker",
     suggested_action: "whitelist_domain"
   });
-  console.log(chalk4.green(`\u2713 False positive reported: ${chalk4.bold(report.id)}`));
-  console.log(chalk4.dim(`  Domain: ${report.domain}`));
-  console.log(chalk4.dim(`  Rule:   ${report.rule}`));
-  console.log(chalk4.dim(`  Reason: ${report.reason}`));
+  console.log(chalk6.green(`\u2713 False positive reported: ${chalk6.bold(report.id)}`));
+  console.log(chalk6.dim(`  Domain: ${report.domain}`));
+  console.log(chalk6.dim(`  Rule:   ${report.rule}`));
+  console.log(chalk6.dim(`  Reason: ${report.reason}`));
   console.log("");
-  console.log(chalk4.dim("Reports help ETALON learn and reduce false positives over time."));
+  console.log(chalk6.dim("Reports help ETALON learn and reduce false positives over time."));
 });
 program.command("telemetry").description("Manage anonymous usage telemetry").argument("<action>", "enable, disable, or status").action((action) => {
   switch (action) {
     case "enable":
       enableTelemetry();
-      console.log(chalk4.green("\u2713 Telemetry enabled."));
-      console.log(chalk4.dim("  Anonymous usage data helps improve ETALON for everyone."));
-      console.log(chalk4.dim("  No PII is ever collected. Set DO_NOT_TRACK=1 to override."));
+      console.log(chalk6.green("\u2713 Telemetry enabled."));
+      console.log(chalk6.dim("  Anonymous usage data helps improve ETALON for everyone."));
+      console.log(chalk6.dim("  No PII is ever collected. Set DO_NOT_TRACK=1 to override."));
       break;
     case "disable":
       disableTelemetry();
-      console.log(chalk4.yellow("\u2713 Telemetry disabled."));
+      console.log(chalk6.yellow("\u2713 Telemetry disabled."));
       break;
     case "status":
-      console.log(`Telemetry: ${isTelemetryEnabled() ? chalk4.green("enabled") : chalk4.yellow("disabled")}`);
+      console.log(`Telemetry: ${isTelemetryEnabled() ? chalk6.green("enabled") : chalk6.yellow("disabled")}`);
       break;
     default:
-      console.error(chalk4.red(`Unknown action: ${action}. Use enable, disable, or status.`));
+      console.error(chalk6.red(`Unknown action: ${action}. Use enable, disable, or status.`));
       process.exit(1);
   }
 });
 program.command("intelligence").description("Show intelligence engine status and learned patterns").argument("[dir]", "Project directory for context detection", "./").action((dir) => {
-  console.log(chalk4.bold("ETALON Intelligence Engine"));
-  console.log(chalk4.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
+  console.log(chalk6.bold("ETALON Intelligence Engine"));
+  console.log(chalk6.dim("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
   console.log("");
   const ctx = detectProjectContext(dir);
-  console.log(chalk4.bold("\u{1F3AF} Project Context"));
-  console.log(`  Industry:         ${chalk4.cyan(ctx.industry)}`);
-  console.log(`  Region:           ${chalk4.cyan(ctx.region)}`);
-  console.log(`  Data Sensitivity:  ${chalk4.cyan(ctx.data_sensitivity)}`);
+  console.log(chalk6.bold("\u{1F3AF} Project Context"));
+  console.log(`  Industry:         ${chalk6.cyan(ctx.industry)}`);
+  console.log(`  Region:           ${chalk6.cyan(ctx.region)}`);
+  console.log(`  Data Sensitivity:  ${chalk6.cyan(ctx.data_sensitivity)}`);
   if (ctx.detected_signals.length > 0) {
-    console.log(chalk4.dim("  Signals:"));
+    console.log(chalk6.dim("  Signals:"));
     for (const s of ctx.detected_signals) {
-      console.log(chalk4.dim(`    \u2022 ${s}`));
+      console.log(chalk6.dim(`    \u2022 ${s}`));
     }
   }
   console.log("");
   const stats = getLearningStats();
-  console.log(chalk4.bold("\u{1F9E0} Learning Engine"));
-  console.log(`  Patterns learned:   ${chalk4.cyan(String(stats.patterns_learned))}`);
-  console.log(`  Feedback processed: ${chalk4.cyan(String(stats.feedback_processed))}`);
-  console.log(`  Impact:             ${chalk4.cyan(stats.accuracy_improvement)}`);
+  console.log(chalk6.bold("\u{1F9E0} Learning Engine"));
+  console.log(`  Patterns learned:   ${chalk6.cyan(String(stats.patterns_learned))}`);
+  console.log(`  Feedback processed: ${chalk6.cyan(String(stats.feedback_processed))}`);
+  console.log(`  Impact:             ${chalk6.cyan(stats.accuracy_improvement)}`);
   console.log("");
   const feedback = getFeedbackSummary();
   if (feedback.total_reports > 0) {
-    console.log(chalk4.bold("\u{1F4CA} False Positive Reports"));
+    console.log(chalk6.bold("\u{1F4CA} False Positive Reports"));
     console.log(`  Total reports:   ${feedback.total_reports}`);
     if (feedback.suggested_whitelists.length > 0) {
-      console.log(chalk4.dim("  Suggested whitelists (3+ reports):"));
+      console.log(chalk6.dim("  Suggested whitelists (3+ reports):"));
       for (const d of feedback.suggested_whitelists) {
-        console.log(chalk4.dim(`    \u2022 ${d}`));
+        console.log(chalk6.dim(`    \u2022 ${d}`));
       }
     }
     console.log("");
   }
   const learned = analyzePatterns();
   if (learned.length > 0) {
-    console.log(chalk4.bold("\u{1F4DD} Learned Patterns"));
+    console.log(chalk6.bold("\u{1F4DD} Learned Patterns"));
     for (const p of learned) {
-      console.log(`  ${chalk4.cyan(p.domain)} \u2014 ${p.suggested_action} (confidence: ${(p.confidence * 100).toFixed(0)}%)`);
+      console.log(`  ${chalk6.cyan(p.domain)} \u2014 ${p.suggested_action} (confidence: ${(p.confidence * 100).toFixed(0)}%)`);
     }
     console.log("");
   }
-  console.log(chalk4.dim("Telemetry: ") + (isTelemetryEnabled() ? chalk4.green("enabled") : chalk4.yellow("disabled")));
+  console.log(chalk6.dim("Telemetry: ") + (isTelemetryEnabled() ? chalk6.green("enabled") : chalk6.yellow("disabled")));
   console.log("");
 });
+var authCmd = program.command("auth").description("Manage ETALON Cloud authentication");
+authCmd.command("login").description("Login with API key from dashboard").action(async () => {
+  await runLogin();
+});
+authCmd.command("logout").description("Logout and remove stored API key").action(() => {
+  runLogout();
+});
+authCmd.command("status").description("Show current authentication status").action(async () => {
+  await runStatus();
+});
+program.command("push").description("Scan a website, audit codebase, and upload results to ETALON Cloud").argument("<url>", "URL to scan").argument("[dir]", "Directory to audit", "./").option("--site <id>", "Site ID (from dashboard or `etalon sites`)").option("-t, --timeout <ms>", "Navigation timeout in milliseconds", "30000").option("-d, --deep", "Deep scan mode", false).action(async (url, dir, options) => {
+  await runPush(url, dir, {
+    site: options.site,
+    timeout: options.timeout,
+    deep: options.deep
+  });
+});
+program.command("sites").description("List your cloud sites and their IDs").action(async () => {
+  await runListSites();
+});
 program.parse();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@etalon/cli",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "ETALON — Privacy audit tool for websites. Scan any site for trackers and GDPR compliance.",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",