@exodus/xqa 1.0.0 → 1.1.0

package/dist/index.cjs

@@ -1194,7 +1194,7 @@ var require_command = __commonJS({
   "../../node_modules/.pnpm/commander@14.0.3/node_modules/commander/lib/command.js"(exports2) {
     var EventEmitter = require("node:events").EventEmitter;
     var childProcess = require("node:child_process");
-    var path14 = require("node:path");
+    var path16 = require("node:path");
     var fs = require("node:fs");
     var process6 = require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
@@ -1621,9 +1621,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (fn) {
           this._exitCallback = fn;
         } else {
-          this._exitCallback = (err13) => {
-            if (err13.code !== "commander.executeSubCommandAsync") {
-              throw err13;
+          this._exitCallback = (err14) => {
+            if (err14.code !== "commander.executeSubCommandAsync") {
+              throw err14;
             } else {
             }
           };
@@ -1699,12 +1699,12 @@ Expecting one of '${allowedValues.join("', '")}'`);
       _callParseArg(target, value, previous, invalidArgumentMessage) {
         try {
           return target.parseArg(value, previous);
-        } catch (err13) {
-          if (err13.code === "commander.invalidArgument") {
-            const message = `${invalidArgumentMessage} ${err13.message}`;
-            this.error(message, { exitCode: err13.exitCode, code: err13.code });
+        } catch (err14) {
+          if (err14.code === "commander.invalidArgument") {
+            const message = `${invalidArgumentMessage} ${err14.message}`;
+            this.error(message, { exitCode: err14.exitCode, code: err14.code });
           }
-          throw err13;
+          throw err14;
         }
       }
       /**
@@ -2207,9 +2207,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path14.resolve(baseDir, baseName);
+          const localBin = path16.resolve(baseDir, baseName);
           if (fs.existsSync(localBin)) return localBin;
-          if (sourceExt.includes(path14.extname(baseName))) return void 0;
+          if (sourceExt.includes(path16.extname(baseName))) return void 0;
           const foundExt = sourceExt.find(
             (ext) => fs.existsSync(`${localBin}${ext}`)
           );
@@ -2227,17 +2227,17 @@ Expecting one of '${allowedValues.join("', '")}'`);
           } catch {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path14.resolve(
-            path14.dirname(resolvedScriptPath),
+          executableDir = path16.resolve(
+            path16.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path14.basename(
+            const legacyName = path16.basename(
               this._scriptPath,
-              path14.extname(this._scriptPath)
+              path16.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -2248,7 +2248,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path14.extname(executableFile));
+        launchWithNode = sourceExt.includes(path16.extname(executableFile));
         let proc;
         if (process6.platform !== "win32") {
           if (launchWithNode) {
@@ -2293,14 +2293,14 @@ Expecting one of '${allowedValues.join("', '")}'`);
             );
           }
         });
-        proc.on("error", (err13) => {
-          if (err13.code === "ENOENT") {
+        proc.on("error", (err14) => {
+          if (err14.code === "ENOENT") {
             this._checkForMissingExecutable(
               executableFile,
               executableDir,
               subcommand._name
             );
-          } else if (err13.code === "EACCES") {
+          } else if (err14.code === "EACCES") {
             throw new Error(`'${executableFile}' not executable`);
           }
           if (!exitCallback) {
@@ -2311,7 +2311,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
               "commander.executeSubCommandAsync",
               "(error)"
             );
-            wrappedError.nestedError = err13;
+            wrappedError.nestedError = err14;
             exitCallback(wrappedError);
           }
         });
@@ -3163,7 +3163,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path14.basename(filename, path14.extname(filename));
+        this._name = path16.basename(filename, path16.extname(filename));
         return this;
       }
       /**
@@ -3177,9 +3177,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path15) {
-        if (path15 === void 0) return this._executableDir;
-        this._executableDir = path15;
+      executableDir(path17) {
+        if (path17 === void 0) return this._executableDir;
+        this._executableDir = path17;
         return this;
       }
       /**
@@ -3688,8 +3688,8 @@ var require_index_cjs = __commonJS({
           return new Ok(res.value);
         })));
       }
-      match(ok14, _err) {
-        return this._promise.then((res) => res.match(ok14, _err));
+      match(ok15, _err) {
+        return this._promise.then((res) => res.match(ok15, _err));
       }
       unwrapOr(t) {
         return this._promise.then((res) => res.unwrapOr(t));
@@ -3728,17 +3728,17 @@ var require_index_cjs = __commonJS({
     function okAsync8(value) {
       return new ResultAsync7(Promise.resolve(new Ok(value)));
     }
-    function errAsync8(err14) {
-      return new ResultAsync7(Promise.resolve(new Err(err14)));
+    function errAsync8(err15) {
+      return new ResultAsync7(Promise.resolve(new Err(err15)));
     }
     var fromPromise = ResultAsync7.fromPromise;
     var fromSafePromise2 = ResultAsync7.fromSafePromise;
     var fromAsyncThrowable9 = ResultAsync7.fromThrowable;
     var combineResultList = (resultList) => {
-      let acc = ok13([]);
+      let acc = ok14([]);
       for (const result of resultList) {
         if (result.isErr()) {
-          acc = err13(result.error);
+          acc = err14(result.error);
           break;
         } else {
           acc.map((list) => list.push(result.value));
@@ -3748,12 +3748,12 @@ var require_index_cjs = __commonJS({
     };
     var combineResultAsyncList = (asyncResultList) => ResultAsync7.fromSafePromise(Promise.all(asyncResultList)).andThen(combineResultList);
     var combineResultListWithAllErrors = (resultList) => {
-      let acc = ok13([]);
+      let acc = ok14([]);
       for (const result of resultList) {
         if (result.isErr() && acc.isErr()) {
           acc.error.push(result.error);
         } else if (result.isErr() && acc.isOk()) {
-          acc = err13([result.error]);
+          acc = err14([result.error]);
         } else if (result.isOk() && acc.isOk()) {
           acc.value.push(result.value);
         }
@@ -3767,9 +3767,9 @@ var require_index_cjs = __commonJS({
         return (...args) => {
           try {
             const result = fn(...args);
-            return ok13(result);
+            return ok14(result);
           } catch (e3) {
-            return err13(errorFn ? errorFn(e3) : e3);
+            return err14(errorFn ? errorFn(e3) : e3);
           }
         };
       }
@@ -3783,11 +3783,11 @@ var require_index_cjs = __commonJS({
       }
       Result.combineWithAllErrors = combineWithAllErrors;
     })(exports2.Result || (exports2.Result = {}));
-    function ok13(value) {
+    function ok14(value) {
       return new Ok(value);
     }
-    function err13(err14) {
-      return new Err(err14);
+    function err14(err15) {
+      return new Err(err15);
     }
     function safeTry(body) {
       const n3 = body().next();
@@ -3807,11 +3807,11 @@ var require_index_cjs = __commonJS({
         return !this.isOk();
       }
       map(f6) {
-        return ok13(f6(this.value));
+        return ok14(f6(this.value));
       }
       // eslint-disable-next-line @typescript-eslint/no-unused-vars
       mapErr(_f) {
-        return ok13(this.value);
+        return ok14(this.value);
       }
       // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/explicit-module-boundary-types
       andThen(f6) {
@@ -3826,14 +3826,14 @@ var require_index_cjs = __commonJS({
           f6(this.value);
         } catch (e3) {
         }
-        return ok13(this.value);
+        return ok14(this.value);
       }
       orTee(_f) {
-        return ok13(this.value);
+        return ok14(this.value);
       }
       // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/explicit-module-boundary-types
       orElse(_f) {
-        return ok13(this.value);
+        return ok14(this.value);
       }
       asyncAndThen(f6) {
         return f6(this.value);
@@ -3850,8 +3850,8 @@ var require_index_cjs = __commonJS({
         return this.value;
       }
       // eslint-disable-next-line @typescript-eslint/no-unused-vars
-      match(ok14, _err) {
-        return ok14(this.value);
+      match(ok15, _err) {
+        return ok15(this.value);
       }
       safeUnwrap() {
         const value = this.value;
@@ -3882,27 +3882,27 @@ var require_index_cjs = __commonJS({
       }
       // eslint-disable-next-line @typescript-eslint/no-unused-vars
       map(_f) {
-        return err13(this.error);
+        return err14(this.error);
       }
       mapErr(f6) {
-        return err13(f6(this.error));
+        return err14(f6(this.error));
       }
       andThrough(_f) {
-        return err13(this.error);
+        return err14(this.error);
       }
       andTee(_f) {
-        return err13(this.error);
+        return err14(this.error);
       }
       orTee(f6) {
         try {
           f6(this.error);
         } catch (e3) {
         }
-        return err13(this.error);
+        return err14(this.error);
       }
       // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/explicit-module-boundary-types
       andThen(_f) {
-        return err13(this.error);
+        return err14(this.error);
       }
       // eslint-disable-next-line @typescript-eslint/no-explicit-any, @typescript-eslint/explicit-module-boundary-types
       orElse(f6) {
@@ -3922,13 +3922,13 @@ var require_index_cjs = __commonJS({
       unwrapOr(v2) {
         return v2;
       }
-      match(_ok, err14) {
-        return err14(this.error);
+      match(_ok, err15) {
+        return err15(this.error);
       }
       safeUnwrap() {
         const error48 = this.error;
         return (function* () {
-          yield err13(error48);
+          yield err14(error48);
           throw new Error("Do not use this generator out of `safeTry`");
         })();
       }
@@ -3948,13 +3948,13 @@ var require_index_cjs = __commonJS({
     exports2.Err = Err;
     exports2.Ok = Ok;
     exports2.ResultAsync = ResultAsync7;
-    exports2.err = err13;
+    exports2.err = err14;
     exports2.errAsync = errAsync8;
     exports2.fromAsyncThrowable = fromAsyncThrowable9;
     exports2.fromPromise = fromPromise;
     exports2.fromSafePromise = fromSafePromise2;
     exports2.fromThrowable = fromThrowable10;
-    exports2.ok = ok13;
+    exports2.ok = ok14;
     exports2.okAsync = okAsync8;
     exports2.safeTry = safeTry;
   }
@@ -5052,15 +5052,15 @@ var require_route = __commonJS({
       };
     }
     function wrapConversion(toModel, graph) {
-      const path14 = [graph[toModel].parent, toModel];
+      const path16 = [graph[toModel].parent, toModel];
       let fn = conversions[graph[toModel].parent][toModel];
       let cur = graph[toModel].parent;
       while (graph[cur].parent) {
-        path14.unshift(graph[cur].parent);
+        path16.unshift(graph[cur].parent);
         fn = link(conversions[graph[cur].parent][cur], fn);
         cur = graph[cur].parent;
       }
-      fn.conversion = path14;
+      fn.conversion = path16;
       return fn;
     }
     module2.exports = function(fromModel) {
@@ -11117,12 +11117,12 @@ var require_lib2 = __commonJS({
     var detectFile = (filepath, opts = {}) => new Promise((resolve, reject) => {
       let fd;
       const fs = (0, node_1.default)();
-      const handler = (err13, buffer) => {
+      const handler = (err14, buffer) => {
         if (fd) {
           fs.closeSync(fd);
         }
-        if (err13) {
-          reject(err13);
+        if (err14) {
+          reject(err14);
         } else if (buffer) {
           resolve((0, exports2.detect)(buffer));
         } else {
@@ -11133,9 +11133,9 @@ var require_lib2 = __commonJS({
       if (sampleSize > 0) {
         fd = fs.openSync(filepath, "r");
         let sample = Buffer.allocUnsafe(sampleSize);
-        fs.read(fd, sample, 0, sampleSize, opts.offset, (err13, bytesRead) => {
-          if (err13) {
-            handler(err13, null);
+        fs.read(fd, sample, 0, sampleSize, opts.offset, (err14, bytesRead) => {
+          if (err14) {
+            handler(err14, null);
           } else {
             if (bytesRead < sampleSize) {
               sample = sample.subarray(0, bytesRead);
@@ -15026,7 +15026,7 @@ var require_package = __commonJS({
 var require_main = __commonJS({
   "../../node_modules/.pnpm/dotenv@16.6.1/node_modules/dotenv/lib/main.js"(exports2, module2) {
     var fs = require("fs");
-    var path14 = require("path");
+    var path16 = require("path");
     var os3 = require("os");
     var crypto = require("crypto");
     var packageJson = require_package();
@@ -15057,9 +15057,9 @@ var require_main = __commonJS({
       options.path = vaultPath;
       const result = DotenvModule.configDotenv(options);
       if (!result.parsed) {
-        const err13 = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
-        err13.code = "MISSING_DATA";
-        throw err13;
+        const err14 = new Error(`MISSING_DATA: Cannot parse ${vaultPath} for an unknown reason`);
+        err14.code = "MISSING_DATA";
+        throw err14;
       }
       const keys = _dotenvKey(options).split(",");
       const length = keys.length;
@@ -15102,30 +15102,30 @@ var require_main = __commonJS({
         uri = new URL(dotenvKey);
       } catch (error48) {
         if (error48.code === "ERR_INVALID_URL") {
-          const err13 = new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
-          err13.code = "INVALID_DOTENV_KEY";
-          throw err13;
+          const err14 = new Error("INVALID_DOTENV_KEY: Wrong format. Must be in valid uri format like dotenv://:key_1234@dotenvx.com/vault/.env.vault?environment=development");
+          err14.code = "INVALID_DOTENV_KEY";
+          throw err14;
         }
         throw error48;
       }
       const key = uri.password;
       if (!key) {
-        const err13 = new Error("INVALID_DOTENV_KEY: Missing key part");
-        err13.code = "INVALID_DOTENV_KEY";
-        throw err13;
+        const err14 = new Error("INVALID_DOTENV_KEY: Missing key part");
+        err14.code = "INVALID_DOTENV_KEY";
+        throw err14;
       }
       const environment = uri.searchParams.get("environment");
       if (!environment) {
-        const err13 = new Error("INVALID_DOTENV_KEY: Missing environment part");
-        err13.code = "INVALID_DOTENV_KEY";
-        throw err13;
+        const err14 = new Error("INVALID_DOTENV_KEY: Missing environment part");
+        err14.code = "INVALID_DOTENV_KEY";
+        throw err14;
       }
       const environmentKey = `DOTENV_VAULT_${environment.toUpperCase()}`;
       const ciphertext = result.parsed[environmentKey];
       if (!ciphertext) {
-        const err13 = new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
-        err13.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
-        throw err13;
+        const err14 = new Error(`NOT_FOUND_DOTENV_ENVIRONMENT: Cannot locate environment ${environmentKey} in your .env.vault file.`);
+        err14.code = "NOT_FOUND_DOTENV_ENVIRONMENT";
+        throw err14;
       }
       return { ciphertext, key };
     }
@@ -15142,7 +15142,7 @@ var require_main = __commonJS({
           possibleVaultPath = options.path.endsWith(".vault") ? options.path : `${options.path}.vault`;
         }
       } else {
-        possibleVaultPath = path14.resolve(process.cwd(), ".env.vault");
+        possibleVaultPath = path16.resolve(process.cwd(), ".env.vault");
       }
       if (fs.existsSync(possibleVaultPath)) {
         return possibleVaultPath;
@@ -15150,7 +15150,7 @@ var require_main = __commonJS({
       return null;
     }
     function _resolveHome(envPath) {
-      return envPath[0] === "~" ? path14.join(os3.homedir(), envPath.slice(1)) : envPath;
+      return envPath[0] === "~" ? path16.join(os3.homedir(), envPath.slice(1)) : envPath;
     }
     function _configVault(options) {
       const debug = Boolean(options && options.debug);
@@ -15167,7 +15167,7 @@ var require_main = __commonJS({
       return { parsed };
     }
     function configDotenv(options) {
-      const dotenvPath = path14.resolve(process.cwd(), ".env");
+      const dotenvPath = path16.resolve(process.cwd(), ".env");
       let encoding = "utf8";
       const debug = Boolean(options && options.debug);
       const quiet = options && "quiet" in options ? options.quiet : true;
@@ -15191,13 +15191,13 @@ var require_main = __commonJS({
       }
       let lastError;
       const parsedAll = {};
-      for (const path15 of optionPaths) {
+      for (const path17 of optionPaths) {
         try {
-          const parsed = DotenvModule.parse(fs.readFileSync(path15, { encoding }));
+          const parsed = DotenvModule.parse(fs.readFileSync(path17, { encoding }));
           DotenvModule.populate(parsedAll, parsed, options);
         } catch (e3) {
           if (debug) {
-            _debug(`Failed to load ${path15} ${e3.message}`);
+            _debug(`Failed to load ${path17} ${e3.message}`);
           }
           lastError = e3;
         }
@@ -15212,7 +15212,7 @@ var require_main = __commonJS({
         const shortPaths = [];
         for (const filePath of optionPaths) {
           try {
-            const relative = path14.relative(process.cwd(), filePath);
+            const relative = path16.relative(process.cwd(), filePath);
             shortPaths.push(relative);
           } catch (e3) {
             if (debug) {
@@ -15255,13 +15255,13 @@ var require_main = __commonJS({
         const invalidKeyLength = error48.message === "Invalid key length";
         const decryptionFailed = error48.message === "Unsupported state or unable to authenticate data";
         if (isRange || invalidKeyLength) {
-          const err13 = new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
-          err13.code = "INVALID_DOTENV_KEY";
-          throw err13;
+          const err14 = new Error("INVALID_DOTENV_KEY: It must be 64 characters long (or more)");
+          err14.code = "INVALID_DOTENV_KEY";
+          throw err14;
         } else if (decryptionFailed) {
-          const err13 = new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
-          err13.code = "DECRYPTION_FAILED";
-          throw err13;
+          const err14 = new Error("DECRYPTION_FAILED: Please check your DOTENV_KEY");
+          err14.code = "DECRYPTION_FAILED";
+          throw err14;
         } else {
           throw error48;
         }
@@ -15271,9 +15271,9 @@ var require_main = __commonJS({
       const debug = Boolean(options && options.debug);
       const override = Boolean(options && options.override);
       if (typeof parsed !== "object") {
-        const err13 = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
-        err13.code = "OBJECT_REQUIRED";
-        throw err13;
+        const err14 = new Error("OBJECT_REQUIRED: Please check the processEnv argument being passed to populate");
+        err14.code = "OBJECT_REQUIRED";
+        throw err14;
       }
       for (const key of Object.keys(parsed)) {
         if (Object.prototype.hasOwnProperty.call(processEnv, key)) {
@@ -16355,12 +16355,22 @@ var StepOrderBuffer = class {
     this.onFlush = onFlush;
   }
   enqueue(event) {
+    if (this.phase === "cleanup") {
+      this.onFlush(event, this.phase);
+      return;
+    }
     this.pending.set(event.stepIndex, event);
     this.flush();
   }
   setCleanupPhase() {
     this.phase = "cleanup";
-    this.flush();
+    const sorted = [...this.pending.values()].toSorted(
+      (event1, event2) => event1.stepIndex - event2.stepIndex
+    );
+    for (const event of sorted) {
+      this.onFlush(event, this.phase);
+    }
+    this.pending.clear();
   }
   flush() {
     for (; ; ) {
@@ -17436,10 +17446,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema2) {
   return mergeDefs(schema2._zod.def);
 }
-function getElementAtPath(obj, path14) {
-  if (!path14)
+function getElementAtPath(obj, path16) {
+  if (!path16)
     return obj;
-  return path14.reduce((acc, key) => acc?.[key], obj);
+  return path16.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -17822,11 +17832,11 @@ function aborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path14, issues) {
+function prefixIssues(path16, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path14);
+    iss.path.unshift(path16);
     return iss;
   });
 }
@@ -18009,7 +18019,7 @@ function formatError(error48, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error48, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error49, path14 = []) => {
+  const processError = (error49, path16 = []) => {
     var _a3, _b2;
     for (const issue2 of error49.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
@@ -18019,7 +18029,7 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
       } else if (issue2.code === "invalid_element") {
         processError({ issues: issue2.issues }, issue2.path);
       } else {
-        const fullpath = [...path14, ...issue2.path];
+        const fullpath = [...path16, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -18051,8 +18061,8 @@ function treeifyError(error48, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path14 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path14) {
+  const path16 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path16) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -30029,13 +30039,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path14 = ref.slice(1).split("/").filter(Boolean);
-  if (path14.length === 0) {
+  const path16 = ref.slice(1).split("/").filter(Boolean);
+  if (path16.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path14[0] === defsKey) {
-    const key = path14[1];
+  if (path16[0] === defsKey) {
+    const key = path16[1];
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -33786,9 +33796,9 @@ var tq = k((oq) => {
 });
 var sq = k((aq) => {
   Object.defineProperty(aq, "__esModule", { value: true });
-  var ok13 = Q$(), tk = { keyword: "not", schemaType: ["object", "boolean"], trackErrors: true, code($) {
+  var ok14 = Q$(), tk = { keyword: "not", schemaType: ["object", "boolean"], trackErrors: true, code($) {
     let { gen: X, schema: J, it: Q } = $;
-    if ((0, ok13.alwaysValidSchema)(Q, J)) {
+    if ((0, ok14.alwaysValidSchema)(Q, J)) {
       $.fail();
       return;
     }
@@ -48584,6 +48594,17 @@ async function resolveDisallowedTools(allowedTools) {
   const allowedSet = new Set(allowedTools);
   return allTools.filter((tool2) => !allowedSet.has(tool2));
 }
+function buildLinkedController(signal) {
+  const controller2 = new AbortController();
+  signal.addEventListener(
+    "abort",
+    () => {
+      controller2.abort(signal.reason);
+    },
+    { once: true }
+  );
+  return controller2;
+}
 function buildQueryOptions({
   config: config3,
   outputTools,
@@ -48591,7 +48612,7 @@ function buildQueryOptions({
   allowedTools,
   disallowedTools
 }) {
-  return {
+  const base = {
     mcpServers: {
       ...config3.mcpServers,
       output: outputTools.server,
@@ -48602,6 +48623,10 @@ function buildQueryOptions({
     settingSources: ["user"],
     spawnClaudeCodeProcess: spawnDetached
   };
+  if (!config3.signal) {
+    return base;
+  }
+  return { ...base, abortController: buildLinkedController(config3.signal) };
 }
 function buildSendMessageFunction(inputQueue) {
   return (content) => {
@@ -49374,15 +49399,15 @@ async function makeRequest(url2, fetchOptions, fetchFn = fetch) {
   return response;
 }
 function handleResponseError(e3, url2) {
-  let err13 = e3;
-  if (err13.name === "AbortError") {
-    err13 = new GoogleGenerativeAIAbortError(`Request aborted when fetching ${url2.toString()}: ${e3.message}`);
-    err13.stack = e3.stack;
+  let err14 = e3;
+  if (err14.name === "AbortError") {
+    err14 = new GoogleGenerativeAIAbortError(`Request aborted when fetching ${url2.toString()}: ${e3.message}`);
+    err14.stack = e3.stack;
   } else if (!(e3 instanceof GoogleGenerativeAIFetchError || e3 instanceof GoogleGenerativeAIRequestInputError)) {
-    err13 = new GoogleGenerativeAIError(`Error fetching from ${url2.toString()}: ${e3.message}`);
-    err13.stack = e3.stack;
+    err14 = new GoogleGenerativeAIError(`Error fetching from ${url2.toString()}: ${e3.message}`);
+    err14.stack = e3.stack;
   }
-  throw err13;
+  throw err14;
 }
 async function handleResponseNotOk(response, url2) {
   let message = "";
@@ -49629,14 +49654,14 @@ function getResponseStream(inputStream) {
           }
           return pump();
         }).catch((e3) => {
-          let err13 = e3;
-          err13.stack = e3.stack;
-          if (err13.name === "AbortError") {
-            err13 = new GoogleGenerativeAIAbortError("Request aborted when reading from the stream");
+          let err14 = e3;
+          err14.stack = e3.stack;
+          if (err14.name === "AbortError") {
+            err14 = new GoogleGenerativeAIAbortError("Request aborted when reading from the stream");
           } else {
-            err13 = new GoogleGenerativeAIError("Error reading from the stream");
+            err14 = new GoogleGenerativeAIError("Error reading from the stream");
           }
-          throw err13;
+          throw err14;
         });
       }
     }
@@ -50232,15 +50257,15 @@ async function makeRequest2(url2, fetchOptions, fetchFn = fetch) {
   return response;
 }
 function handleResponseError2(e3, url2) {
-  let err13 = e3;
-  if (err13.name === "AbortError") {
-    err13 = new GoogleGenerativeAIAbortError2(`Request aborted when fetching ${url2.toString()}: ${e3.message}`);
-    err13.stack = e3.stack;
+  let err14 = e3;
+  if (err14.name === "AbortError") {
+    err14 = new GoogleGenerativeAIAbortError2(`Request aborted when fetching ${url2.toString()}: ${e3.message}`);
+    err14.stack = e3.stack;
   } else if (!(e3 instanceof GoogleGenerativeAIFetchError2 || e3 instanceof GoogleGenerativeAIRequestInputError2)) {
-    err13 = new GoogleGenerativeAIError2(`Error fetching from ${url2.toString()}: ${e3.message}`);
-    err13.stack = e3.stack;
+    err14 = new GoogleGenerativeAIError2(`Error fetching from ${url2.toString()}: ${e3.message}`);
+    err14.stack = e3.stack;
   }
-  throw err13;
+  throw err14;
 }
 async function handleResponseNotOk2(response, url2) {
   let message = "";
@@ -50279,8 +50304,8 @@ var ServerRequestUrl = class {
     this.apiKey = apiKey;
     this.requestOptions = requestOptions;
   }
-  appendPath(path14) {
-    this._url.pathname = this._url.pathname + `/${path14}`;
+  appendPath(path16) {
+    this._url.pathname = this._url.pathname + `/${path16}`;
   }
   appendParam(key, value) {
     this._url.searchParams.append(key, value);
@@ -50836,34 +50861,34 @@ var uuid42 = function() {
 };
 
 // ../../node_modules/.pnpm/@anthropic-ai+sdk@0.87.0_zod@4.3.6/node_modules/@anthropic-ai/sdk/internal/errors.mjs
-function isAbortError(err13) {
-  return typeof err13 === "object" && err13 !== null && // Spec-compliant fetch implementations
-  ("name" in err13 && err13.name === "AbortError" || // Expo fetch
-  "message" in err13 && String(err13.message).includes("FetchRequestCanceledException"));
-}
-var castToError = (err13) => {
-  if (err13 instanceof Error)
-    return err13;
-  if (typeof err13 === "object" && err13 !== null) {
+function isAbortError(err14) {
+  return typeof err14 === "object" && err14 !== null && // Spec-compliant fetch implementations
+  ("name" in err14 && err14.name === "AbortError" || // Expo fetch
+  "message" in err14 && String(err14.message).includes("FetchRequestCanceledException"));
+}
+var castToError = (err14) => {
+  if (err14 instanceof Error)
+    return err14;
+  if (typeof err14 === "object" && err14 !== null) {
     try {
-      if (Object.prototype.toString.call(err13) === "[object Error]") {
-        const error48 = new Error(err13.message, err13.cause ? { cause: err13.cause } : {});
-        if (err13.stack)
-          error48.stack = err13.stack;
-        if (err13.cause && !error48.cause)
-          error48.cause = err13.cause;
-        if (err13.name)
-          error48.name = err13.name;
+      if (Object.prototype.toString.call(err14) === "[object Error]") {
+        const error48 = new Error(err14.message, err14.cause ? { cause: err14.cause } : {});
+        if (err14.stack)
+          error48.stack = err14.stack;
+        if (err14.cause && !error48.cause)
+          error48.cause = err14.cause;
+        if (err14.name)
+          error48.name = err14.name;
         return error48;
       }
     } catch {
     }
     try {
-      return new Error(JSON.stringify(err13));
+      return new Error(JSON.stringify(err14));
     } catch {
     }
   }
-  return new Error(err13);
+  return new Error(err14);
 };
 
 // ../../node_modules/.pnpm/@anthropic-ai+sdk@0.87.0_zod@4.3.6/node_modules/@anthropic-ai/sdk/core/error.mjs
@@ -50993,7 +51018,7 @@ var validatePositiveInteger = (name, n3) => {
 var safeJSON = (text) => {
   try {
     return JSON.parse(text);
-  } catch (err13) {
+  } catch (err14) {
     return void 0;
   }
 };
@@ -51557,8 +51582,8 @@ var Stream = class _Stream {
             return ctrl.close();
           const bytes = encodeUTF8(JSON.stringify(value) + "\n");
           ctrl.enqueue(bytes);
-        } catch (err13) {
-          ctrl.error(err13);
+        } catch (err14) {
+          ctrl.error(err14);
         }
       },
       async cancel() {
@@ -52106,12 +52131,12 @@ function encodeURIPath(str2) {
   return str2.replace(/[^A-Za-z0-9\-._~!$&'()*+,;=:@]+/g, encodeURIComponent);
 }
 var EMPTY = /* @__PURE__ */ Object.freeze(/* @__PURE__ */ Object.create(null));
-var createPathTagFunction = (pathEncoder = encodeURIPath) => function path14(statics, ...params) {
+var createPathTagFunction = (pathEncoder = encodeURIPath) => function path16(statics, ...params) {
   if (statics.length === 1)
     return statics[0];
   let postPath = false;
   const invalidSegments = [];
-  const path15 = statics.reduce((previousValue, currentValue, index) => {
+  const path17 = statics.reduce((previousValue, currentValue, index) => {
     if (/[?#]/.test(currentValue)) {
       postPath = true;
     }
@@ -52128,7 +52153,7 @@ var createPathTagFunction = (pathEncoder = encodeURIPath) => function path14(sta
     }
     return previousValue + currentValue + (index === params.length ? "" : encoded);
   }, "");
-  const pathOnly = path15.split(/[?#]/, 1)[0];
+  const pathOnly = path17.split(/[?#]/, 1)[0];
   const invalidSegmentPattern = /(?<=^|\/)(?:\.|%2e){1,2}(?=\/|$)/gi;
   let match;
   while ((match = invalidSegmentPattern.exec(pathOnly)) !== null) {
@@ -52149,10 +52174,10 @@ var createPathTagFunction = (pathEncoder = encodeURIPath) => function path14(sta
     }, "");
     throw new AnthropicError(`Path parameters result in path with invalid segments:
 ${invalidSegments.map((e3) => e3.error).join("\n")}
-${path15}
+${path17}
 ${underline}`);
   }
-  return path15;
+  return path17;
 };
 var path5 = /* @__PURE__ */ createPathTagFunction(encodeURIPath);
 
@@ -53465,8 +53490,8 @@ var BetaMessageStream = class _BetaMessageStream {
               if (jsonBuf) {
                 try {
                   newContent.input = partialParse(jsonBuf);
-                } catch (err13) {
-                  const error48 = new AnthropicError(`Unable to parse tool parameter JSON from model. Please retry your request or adjust your prompt. Error: ${err13}. JSON: ${jsonBuf}`);
+                } catch (err14) {
+                  const error48 = new AnthropicError(`Unable to parse tool parameter JSON from model. Please retry your request or adjust your prompt. Error: ${err14}. JSON: ${jsonBuf}`);
                   __classPrivateFieldGet(this, _BetaMessageStream_handleError, "f").call(this, error48);
                 }
               }
@@ -53528,17 +53553,17 @@ var BetaMessageStream = class _BetaMessageStream {
       }
       readQueue.length = 0;
     });
-    this.on("abort", (err13) => {
+    this.on("abort", (err14) => {
       done = true;
       for (const reader of readQueue) {
-        reader.reject(err13);
+        reader.reject(err14);
       }
       readQueue.length = 0;
     });
-    this.on("error", (err13) => {
+    this.on("error", (err14) => {
       done = true;
       for (const reader of readQueue) {
-        reader.reject(err13);
+        reader.reject(err14);
       }
       readQueue.length = 0;
     });
@@ -55781,17 +55806,17 @@ var MessageStream = class _MessageStream {
       }
       readQueue.length = 0;
     });
-    this.on("abort", (err13) => {
+    this.on("abort", (err14) => {
       done = true;
       for (const reader of readQueue) {
-        reader.reject(err13);
+        reader.reject(err14);
       }
       readQueue.length = 0;
     });
-    this.on("error", (err13) => {
+    this.on("error", (err14) => {
       done = true;
       for (const reader of readQueue) {
-        reader.reject(err13);
+        reader.reject(err14);
       }
       readQueue.length = 0;
     });
@@ -56240,9 +56265,9 @@ var BaseAnthropic = class {
   makeStatusError(status, error48, message, headers) {
     return APIError.generate(status, error48, message, headers);
   }
-  buildURL(path14, query, defaultBaseURL) {
+  buildURL(path16, query, defaultBaseURL) {
     const baseURL = !__classPrivateFieldGet(this, _BaseAnthropic_instances, "m", _BaseAnthropic_baseURLOverridden).call(this) && defaultBaseURL || this.baseURL;
-    const url2 = isAbsoluteURL(path14) ? new URL(path14) : new URL(baseURL + (baseURL.endsWith("/") && path14.startsWith("/") ? path14.slice(1) : path14));
+    const url2 = isAbsoluteURL(path16) ? new URL(path16) : new URL(baseURL + (baseURL.endsWith("/") && path16.startsWith("/") ? path16.slice(1) : path16));
     const defaultQuery = this.defaultQuery();
     const pathQuery = Object.fromEntries(url2.searchParams);
     if (!isEmptyObj(defaultQuery) || !isEmptyObj(pathQuery)) {
@@ -56274,24 +56299,24 @@ var BaseAnthropic = class {
    */
   async prepareRequest(request, { url: url2, options }) {
   }
-  get(path14, opts) {
-    return this.methodRequest("get", path14, opts);
+  get(path16, opts) {
+    return this.methodRequest("get", path16, opts);
   }
-  post(path14, opts) {
-    return this.methodRequest("post", path14, opts);
+  post(path16, opts) {
+    return this.methodRequest("post", path16, opts);
   }
-  patch(path14, opts) {
-    return this.methodRequest("patch", path14, opts);
+  patch(path16, opts) {
+    return this.methodRequest("patch", path16, opts);
   }
-  put(path14, opts) {
-    return this.methodRequest("put", path14, opts);
+  put(path16, opts) {
+    return this.methodRequest("put", path16, opts);
   }
-  delete(path14, opts) {
-    return this.methodRequest("delete", path14, opts);
+  delete(path16, opts) {
+    return this.methodRequest("delete", path16, opts);
   }
-  methodRequest(method, path14, opts) {
+  methodRequest(method, path16, opts) {
     return this.request(Promise.resolve(opts).then((opts2) => {
-      return { method, path: path14, ...opts2 };
+      return { method, path: path16, ...opts2 };
     }));
   }
   request(options, remainingRetries = null) {
@@ -56371,7 +56396,7 @@ var BaseAnthropic = class {
       }
       const retryMessage = shouldRetry ? `error; no more retries left` : `error; not retryable`;
       loggerFor(this).info(`${responseInfo} - ${retryMessage}`);
-      const errText = await response.text().catch((err14) => castToError(err14).message);
+      const errText = await response.text().catch((err15) => castToError(err15).message);
       const errJSON = safeJSON(errText);
       const errMessage = errJSON ? void 0 : errText;
       loggerFor(this).debug(`[${requestLogID}] response error (${retryMessage})`, formatRequestDetails({
@@ -56382,8 +56407,8 @@ var BaseAnthropic = class {
         message: errMessage,
         durationMs: Date.now() - startTime
       }));
-      const err13 = this.makeStatusError(response.status, errJSON, errMessage, response.headers);
-      throw err13;
+      const err14 = this.makeStatusError(response.status, errJSON, errMessage, response.headers);
+      throw err14;
     }
     loggerFor(this).info(responseInfo);
     loggerFor(this).debug(`[${requestLogID}] response start`, formatRequestDetails({
@@ -56395,8 +56420,8 @@ var BaseAnthropic = class {
     }));
     return { response, options, controller: controller2, requestLogID, retryOfRequestLogID, startTime };
   }
-  getAPIList(path14, Page2, opts) {
-    return this.requestAPIList(Page2, opts && "then" in opts ? opts.then((opts2) => ({ method: "get", path: path14, ...opts2 })) : { method: "get", path: path14, ...opts });
+  getAPIList(path16, Page2, opts) {
+    return this.requestAPIList(Page2, opts && "then" in opts ? opts.then((opts2) => ({ method: "get", path: path16, ...opts2 })) : { method: "get", path: path16, ...opts });
   }
   requestAPIList(Page2, options) {
     const request = this.makeRequest(options, null, void 0);
@@ -56484,8 +56509,8 @@ var BaseAnthropic = class {
   }
   async buildRequest(inputOptions, { retryCount = 0 } = {}) {
     const options = { ...inputOptions };
-    const { method, path: path14, query, defaultBaseURL } = options;
-    const url2 = this.buildURL(path14, query, defaultBaseURL);
+    const { method, path: path16, query, defaultBaseURL } = options;
+    const url2 = this.buildURL(path16, query, defaultBaseURL);
     if ("timeout" in options)
       validatePositiveInteger("timeout", options.timeout);
     options.timeout = options.timeout ?? this.timeout;
@@ -57720,7 +57745,7 @@ var directiveHandlers = {
     }
     try {
       prefix = decodeURIComponent(prefix);
-    } catch (err13) {
+    } catch (err14) {
       throwError(state, "tag prefix is malformed: " + prefix);
     }
     state.tagMap[handle] = prefix;
@@ -58401,7 +58426,7 @@ function readTagProperty(state) {
   }
   try {
     tagName = decodeURIComponent(tagName);
-  } catch (err13) {
+  } catch (err14) {
     throwError(state, "tag name is malformed: " + tagName);
   }
   if (isVerbatim) {
@@ -60740,9 +60765,8 @@ function resolveLastPath(argument, stateContent) {
 function lastPathFilePath(xqaDirectoryectory) {
   return import_node_path8.default.join(xqaDirectoryectory, "last-findings-path");
 }
-function writeLastPath(xqaDirectory2, findingsPath) {
-  (0, import_node_fs4.mkdirSync)(xqaDirectory2, { recursive: true });
-  (0, import_node_fs4.writeFileSync)(lastPathFilePath(xqaDirectory2), findingsPath);
+function writeLastPath(xqaDirectory, findingsPath) {
+  (0, import_node_fs4.writeFileSync)(lastPathFilePath(xqaDirectory), findingsPath);
 }
 
 // src/hints/exodus-navigation.ts
@@ -60820,13 +60844,18 @@ function buildExplorerConfig2(input, config3) {
     buildEnv: config3.QA_BUILD_ENV
   };
 }
-function buildPipelineConfig({ input, config: config3, explorer }) {
+function buildPipelineConfig({
+  input,
+  config: config3,
+  xqaDirectory,
+  explorer
+}) {
   const base = {
-    outputDir: config3.QA_OUTPUT_DIR,
+    outputDir: import_node_path9.default.join(xqaDirectory, "output"),
     runId: config3.QA_RUN_ID,
     onEvent: createConsoleObserver(input.verbose ? { verbose: true } : void 0),
     signal: input.signal,
-    inspector: { designsDirectory: config3.QA_DESIGNS_DIR },
+    inspector: { designsDirectory: import_node_path9.default.join(xqaDirectory, "designs") },
     explorer
   };
   if (!config3.GOOGLE_GENERATIVE_AI_API_KEY) {
@@ -60843,35 +60872,58 @@ function buildSuccessMessage(output) {
   return `${base}${String(output.findings.length)} finding${output.findings.length === 1 ? "" : "s"} \u2014 run \`xqa review\` to triage.
 `;
 }
-function runExploreCommand(input, config3) {
-  const explorerConfig = buildExplorerConfig2(input, config3);
-  if (explorerConfig === void 0) {
-    process.stderr.write("QA_STARTUP_STATE is restore-wallet but QA_WALLET_MNEMONIC is not set.\n");
-    process.exit(1);
-    return;
-  }
-  void runPipeline2(buildPipelineConfig({ input, config: config3, explorer: explorerConfig })).match(
-    (output) => {
-      writeLastPath(import_node_path9.default.join(process.cwd(), ".xqa"), output.findingsPath);
+function handlePipelineResult(input, xqaDirectory) {
+  return {
+    onSuccess: (output) => {
+      writeLastPath(xqaDirectory, output.findingsPath);
       process.stdout.write(buildSuccessMessage(output));
       if (output.aborted) {
         process.exit(input.signal?.reason ?? DEFAULT_ABORT_EXIT_CODE);
       }
       process.exit(0);
     },
-    (error48) => {
+    onError: (error48) => {
       const cause = error48.cause instanceof Error ? error48.cause.message : JSON.stringify(error48.cause);
       process.stderr.write(`Pipeline failed: ${error48.type}
 ${cause}
 `);
       process.exit(1);
     }
-  );
+  };
+}
+function runExploreCommand(input, options) {
+  const { config: config3, xqaDirectory } = options;
+  const explorerConfig = buildExplorerConfig2(input, config3);
+  if (explorerConfig === void 0) {
+    process.stderr.write("QA_STARTUP_STATE is restore-wallet but QA_WALLET_MNEMONIC is not set.\n");
+    process.exit(1);
+    return;
+  }
+  const { onSuccess, onError } = handlePipelineResult(input, xqaDirectory);
+  void runPipeline2(
+    buildPipelineConfig({ input, config: config3, xqaDirectory, explorer: explorerConfig })
+  ).match(onSuccess, onError);
 }
 
-// src/commands/review-command.ts
+// src/commands/init-command.ts
 var import_node_fs5 = require("node:fs");
-var import_node_path11 = __toESM(require("node:path"), 1);
+var import_node_path10 = __toESM(require("node:path"), 1);
+function runInitCommand() {
+  const xqaDirectory = import_node_path10.default.join(process.cwd(), ".xqa");
+  if ((0, import_node_fs5.existsSync)(xqaDirectory)) {
+    process.stderr.write(`xqa already initialized: ${xqaDirectory}
+`);
+    process.exit(1);
+    return;
+  }
+  (0, import_node_fs5.mkdirSync)(xqaDirectory);
+  process.stdout.write(`Initialized xqa project: ${xqaDirectory}
+`);
+}
+
+// src/commands/review-command.ts
+var import_node_fs6 = require("node:fs");
+var import_node_path12 = __toESM(require("node:path"), 1);
 var import_neverthrow34 = __toESM(require_index_cjs(), 1);
 
 // ../../node_modules/.pnpm/@inquirer+core@10.3.2_@types+node@22.19.15/node_modules/@inquirer/core/dist/esm/lib/key.js
@@ -62210,7 +62262,7 @@ var esm_default2 = createPrompt((config3, done) => {
 var import_chardet = __toESM(require_lib2(), 1);
 var import_child_process3 = require("child_process");
 var import_fs3 = require("fs");
-var import_node_path10 = __toESM(require("node:path"), 1);
+var import_node_path11 = __toESM(require("node:path"), 1);
 var import_node_os3 = __toESM(require("node:os"), 1);
 var import_node_crypto2 = require("node:crypto");
 var import_iconv_lite = __toESM(require_lib3(), 1);
@@ -62254,9 +62306,9 @@ var RemoveFileError = class extends Error {
 // ../../node_modules/.pnpm/@inquirer+external-editor@1.0.3_@types+node@22.19.15/node_modules/@inquirer/external-editor/dist/esm/index.js
 function editAsync(text = "", callback, fileOptions) {
   const editor = new ExternalEditor(text, fileOptions);
-  editor.runAsync((err13, result) => {
-    if (err13) {
-      setImmediate(callback, err13, void 0);
+  editor.runAsync((err14, result) => {
+    if (err14) {
+      setImmediate(callback, err14, void 0);
     } else {
       try {
         editor.cleanup();
@@ -62346,8 +62398,8 @@ var ExternalEditor = class {
       const prefix = sanitizeAffix(this.fileOptions.prefix);
       const postfix = sanitizeAffix(this.fileOptions.postfix);
       const filename = `${prefix}${id}${postfix}`;
-      const candidate = import_node_path10.default.resolve(baseDir, filename);
-      const baseResolved = import_node_path10.default.resolve(baseDir) + import_node_path10.default.sep;
+      const candidate = import_node_path11.default.resolve(baseDir, filename);
+      const baseResolved = import_node_path11.default.resolve(baseDir) + import_node_path11.default.sep;
       if (!candidate.startsWith(baseResolved)) {
         throw new Error("Resolved temporary file escaped the base directory");
       }
@@ -63436,16 +63488,13 @@ var safeRunInteractiveLoop = (0, import_neverthrow33.fromAsyncThrowable)(
 );
 
 // src/commands/review-command.ts
-var safeReadFile2 = (0, import_neverthrow34.fromThrowable)((filePath) => (0, import_node_fs5.readFileSync)(filePath, "utf8"));
+var safeReadFile2 = (0, import_neverthrow34.fromThrowable)((filePath) => (0, import_node_fs6.readFileSync)(filePath, "utf8"));
 var safeParseJson2 = (0, import_neverthrow34.fromThrowable)(JSON.parse);
 var safeWrite = (0, import_neverthrow34.fromThrowable)((filePath, content) => {
-  (0, import_node_fs5.writeFileSync)(filePath, content);
+  (0, import_node_fs6.writeFileSync)(filePath, content);
 });
-function xqaDirectory() {
-  return import_node_path11.default.join(process.cwd(), ".xqa");
-}
-function readLastPath() {
-  const result = safeReadFile2(lastPathFilePath(xqaDirectory()));
+function readLastPath(xqaDirectory) {
+  const result = safeReadFile2(lastPathFilePath(xqaDirectory));
   return result.isOk() ? result.value : void 0;
 }
 function isPipelineOutput(data) {
@@ -63530,8 +63579,8 @@ function applyLoopResult({ result, findings, existing, dismissalsFilePath }) {
     totalFindings: findings.length
   });
 }
-function resolveAndReadFindings(findingsPath) {
-  const resolvedPathResult = resolveLastPath(findingsPath, readLastPath());
+function resolveAndReadFindings(findingsPath, xqaDirectory) {
+  const resolvedPathResult = resolveLastPath(findingsPath, readLastPath(xqaDirectory));
   if (resolvedPathResult.isErr()) {
     process.stderr.write(
       "No findings path provided and no last path found. Run: xqa review <findings-path>\n"
@@ -63567,35 +63616,44 @@ async function runReviewLoop({
   }
   applyLoopResult({ result: loopResult.value, findings, existing, dismissalsFilePath });
 }
-async function runReviewCommand(findingsPath) {
-  if (!process.stdout.isTTY || !process.stdin.isTTY) {
-    process.stdout.write("Review requires an interactive terminal. Run locally after a CI run.\n");
-    process.exit(0);
-    return;
-  }
-  const readResult = resolveAndReadFindings(findingsPath);
-  if (readResult.isErr()) {
-    return;
-  }
-  const { resolvedPath, output } = readResult.value;
-  writeLastPath(xqaDirectory(), resolvedPath);
+async function executeReview({
+  xqaDirectory,
+  resolvedPath,
+  output
+}) {
+  writeLastPath(xqaDirectory, resolvedPath);
   const { findings } = output;
   if (findings.length === 0) {
     process.stdout.write("No findings to review.\n");
     process.exit(0);
     return;
   }
-  const dismissalsFilePath = dismissalsPath(process.cwd(), process.env.QA_DISMISSALS_PATH);
+  const dismissalsFilePath = dismissalsPath(
+    import_node_path12.default.dirname(xqaDirectory),
+    process.env.QA_DISMISSALS_PATH
+  );
   await runReviewLoop({
     findings,
     dismissalsFilePath,
     existing: loadExistingDismissals(dismissalsFilePath)
   });
 }
+async function runReviewCommand(findingsPath, xqaDirectory) {
+  if (!process.stdout.isTTY || !process.stdin.isTTY) {
+    process.stdout.write("Review requires an interactive terminal. Run locally after a CI run.\n");
+    process.exit(0);
+    return;
+  }
+  const readResult = resolveAndReadFindings(findingsPath, xqaDirectory);
+  if (readResult.isErr()) {
+    return;
+  }
+  await executeReview({ xqaDirectory, ...readResult.value });
+}
 
 // src/commands/spec-command.ts
-var import_node_fs6 = require("node:fs");
-var import_node_path13 = __toESM(require("node:path"), 1);
+var import_node_fs7 = require("node:fs");
+var import_node_path14 = __toESM(require("node:path"), 1);
 var import_neverthrow36 = __toESM(require_index_cjs(), 1);
 
 // src/spec-frontmatter.ts
@@ -63655,10 +63713,10 @@ function parseYamlFields(block) {
 }
 
 // src/spec-slug.ts
-var import_node_path12 = __toESM(require("node:path"), 1);
+var import_node_path13 = __toESM(require("node:path"), 1);
 var SPECS_DIR = "specs";
 function deriveSpecSlug(specFilePath) {
-  const parts = specFilePath.split(import_node_path12.default.sep);
+  const parts = specFilePath.split(import_node_path13.default.sep);
   const specsIndex = parts.lastIndexOf(SPECS_DIR);
   if (specsIndex !== -1) {
     const relativeParts = parts.slice(specsIndex + 1);
@@ -63666,14 +63724,14 @@ function deriveSpecSlug(specFilePath) {
     relativeParts[relativeParts.length - 1] = stripExtensions(last);
     return relativeParts.join("__");
   }
-  return stripExtensions(import_node_path12.default.basename(specFilePath));
+  return stripExtensions(import_node_path13.default.basename(specFilePath));
 }
 function stripExtensions(filename) {
   return filename.replace(/\.test\.md$/, "").replace(/\.[^.]+$/, "");
 }
 
 // src/commands/spec-command.ts
-var safeReadFile3 = (0, import_neverthrow36.fromThrowable)((filePath) => (0, import_node_fs6.readFileSync)(filePath, "utf8"));
+var safeReadFile3 = (0, import_neverthrow36.fromThrowable)((filePath) => (0, import_node_fs7.readFileSync)(filePath, "utf8"));
 function buildSpecExplorer(input, context) {
   return {
     mode: "spec",
@@ -63686,10 +63744,10 @@ function buildSpecExplorer(input, context) {
 }
 function buildPipelineConfig2(input, context) {
   return {
-    outputDir: import_node_path13.default.join(context.config.QA_OUTPUT_DIR, context.slug),
+    outputDir: import_node_path14.default.join(context.xqaDirectory, "output", context.slug),
     signal: input.signal,
     onEvent: createConsoleObserver(input.verbose ? { verbose: true } : void 0),
-    inspector: { designsDirectory: context.config.QA_DESIGNS_DIR },
+    inspector: { designsDirectory: import_node_path14.default.join(context.xqaDirectory, "designs") },
     explorer: buildSpecExplorer(input, context)
   };
 }
@@ -63721,34 +63779,42 @@ function buildSuccessMessage2(output) {
   return `${base}${String(output.findings.length)} finding${output.findings.length === 1 ? "" : "s"} \u2014 run \`xqa review\` to triage.
 `;
 }
-async function runSpecCommand(input, config3) {
-  const absolutePath = import_node_path13.default.resolve(input.specFile);
+function handleSpecSuccess(xqaDirectory, output) {
+  writeLastPath(xqaDirectory, output.findingsPath);
+  process.stdout.write(buildSuccessMessage2(output));
+  process.exit(0);
+}
+function handleSpecError(error48) {
+  const cause = error48.cause instanceof Error ? error48.cause.message : JSON.stringify(error48.cause);
+  process.stderr.write(`Pipeline failed: ${error48.type}
+${cause}
+`);
+  process.exit(1);
+}
+async function runSpecCommand(input, options) {
+  const { config: config3, xqaDirectory } = options;
+  const absolutePath = import_node_path14.default.resolve(input.specFile);
   const frontmatter = readAndParseSpec(absolutePath);
   if (frontmatter === void 0) {
     return;
   }
   const slug = deriveSpecSlug(absolutePath);
   const result = await runPipeline2(
-    buildPipelineConfig2(input, { config: config3, absolutePath, entry: frontmatter.entry, slug })
-  );
-  result.match(
-    (output) => {
-      writeLastPath(import_node_path13.default.join(process.cwd(), ".xqa"), output.findingsPath);
-      process.stdout.write(buildSuccessMessage2(output));
-      process.exit(0);
-    },
-    (error48) => {
-      const cause = error48.cause instanceof Error ? error48.cause.message : JSON.stringify(error48.cause);
-      process.stderr.write(`Pipeline failed: ${error48.type}
-${cause}
-`);
-      process.exit(1);
-    }
+    buildPipelineConfig2(input, {
+      config: config3,
+      xqaDirectory,
+      absolutePath,
+      entry: frontmatter.entry,
+      slug
+    })
   );
+  result.match((output) => {
+    handleSpecSuccess(xqaDirectory, output);
+  }, handleSpecError);
 }
 
 // src/config.ts
-var import_node_path14 = __toESM(require("node:path"), 1);
+var import_node_path15 = __toESM(require("node:path"), 1);
 var import_node_url = require("node:url");
 var import_dotenv = __toESM(require_main(), 1);
 var import_neverthrow37 = __toESM(require_index_cjs(), 1);
@@ -64231,8 +64297,8 @@ function getErrorMap2() {
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/helpers/parseUtil.js
 var makeIssue = (params) => {
-  const { data, path: path14, errorMaps, issueData } = params;
-  const fullPath = [...path14, ...issueData.path || []];
+  const { data, path: path16, errorMaps, issueData } = params;
+  const fullPath = [...path16, ...issueData.path || []];
   const fullIssue = {
     ...issueData,
     path: fullPath
@@ -64348,11 +64414,11 @@ var errorUtil;
 
 // ../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/types.js
 var ParseInputLazyPath = class {
-  constructor(parent, value, path14, key) {
+  constructor(parent, value, path16, key) {
     this._cachedPath = [];
     this.parent = parent;
     this.data = value;
-    this._path = path14;
+    this._path = path16;
     this._key = key;
   }
   get path() {
@@ -64491,8 +64557,8 @@ var ZodType2 = class {
         } : {
           issues: ctx.common.issues
         };
-      } catch (err13) {
-        if (err13?.message?.toLowerCase()?.includes("encountered")) {
+      } catch (err14) {
+        if (err14?.message?.toLowerCase()?.includes("encountered")) {
           this["~standard"].async = true;
         }
         ctx.common = {
@@ -67796,21 +67862,19 @@ var NEVER2 = INVALID;
 
 // src/config-schema.ts
 var configSchema = external_exports2.object({
-  ANTHROPIC_API_KEY: external_exports2.string().optional(),
+  ANTHROPIC_API_KEY: external_exports2.string().min(1),
   GOOGLE_GENERATIVE_AI_API_KEY: external_exports2.string().optional(),
-  QA_OUTPUT_DIR: external_exports2.string().default("./.xqa/output"),
   QA_RUN_ID: external_exports2.string().optional(),
   QA_EXPLORE_TIMEOUT_SECONDS: external_exports2.coerce.number().int().positive().optional(),
   QA_WALLET_MNEMONIC: external_exports2.string().optional(),
   QA_BUILD_ENV: external_exports2.enum(["dev", "prod"]).default("prod"),
-  QA_STARTUP_STATE: external_exports2.enum(["portfolio", "new-wallet", "restore-wallet"]).optional(),
-  QA_DESIGNS_DIR: external_exports2.string().default("./.xqa/designs")
+  QA_STARTUP_STATE: external_exports2.enum(["portfolio", "new-wallet", "restore-wallet"]).optional()
 });
 
 // src/config.ts
-var packageDirectory = import_node_path14.default.dirname((0, import_node_url.fileURLToPath)(__importMetaUrl));
+var packageDirectory = import_node_path15.default.dirname((0, import_node_url.fileURLToPath)(__importMetaUrl));
 function loadConfig() {
-  (0, import_dotenv.config)({ path: import_node_path14.default.resolve(packageDirectory, "..", ".env.local") });
+  (0, import_dotenv.config)({ path: import_node_path15.default.resolve(packageDirectory, "..", ".env.local") });
   const result = configSchema.safeParse(process.env);
   if (!result.success) {
     const messages = result.error.issues.map(
@@ -67823,7 +67887,7 @@ ${messages.join("\n")}` });
 }
 
 // src/pid-lock.ts
-var import_node_fs7 = require("node:fs");
+var import_node_fs8 = require("node:fs");
 var import_neverthrow38 = __toESM(require_index_cjs(), 1);
 var PID_FILE = "/tmp/xqa.pid";
 var SIGINT_EXIT_CODE = 130;
@@ -67831,7 +67895,7 @@ var SIGTERM_EXIT_CODE = 143;
 var SIGHUP_EXIT_CODE = 129;
 var HARD_TIMEOUT_MS = 1e4;
 var cleanup = () => {
-  (0, import_node_fs7.rmSync)(PID_FILE, { force: true });
+  (0, import_node_fs8.rmSync)(PID_FILE, { force: true });
 };
 var checkProcessRunning = (0, import_neverthrow38.fromThrowable)(
   (pid) => {
@@ -67841,10 +67905,10 @@ var checkProcessRunning = (0, import_neverthrow38.fromThrowable)(
   (cause) => cause
 );
 function checkExistingLock() {
-  if (!(0, import_node_fs7.existsSync)(PID_FILE)) {
+  if (!(0, import_node_fs8.existsSync)(PID_FILE)) {
     return;
   }
-  const existingPid = Number.parseInt((0, import_node_fs7.readFileSync)(PID_FILE, "utf8").trim(), 10);
+  const existingPid = Number.parseInt((0, import_node_fs8.readFileSync)(PID_FILE, "utf8").trim(), 10);
   const running = checkProcessRunning(existingPid);
   if (running.isOk() || running.error.code !== "ESRCH") {
     process.stderr.write(
@@ -67890,12 +67954,31 @@ function registerSignalHandlers(controller2) {
 }
 function acquireLock() {
   checkExistingLock();
-  (0, import_node_fs7.writeFileSync)(PID_FILE, String(process.pid));
+  (0, import_node_fs8.writeFileSync)(PID_FILE, String(process.pid));
   const controller2 = new AbortController();
   registerSignalHandlers(controller2);
   return controller2;
 }
 
+// src/shell/xqa-directory.ts
+var import_node_fs9 = require("node:fs");
+var import_node_path16 = __toESM(require("node:path"), 1);
+var import_neverthrow39 = __toESM(require_index_cjs(), 1);
+function findXqaDirectory(startDirectory) {
+  let current = startDirectory;
+  for (; ; ) {
+    const candidate = import_node_path16.default.join(current, ".xqa");
+    if ((0, import_node_fs9.existsSync)(candidate)) {
+      return (0, import_neverthrow39.ok)(candidate);
+    }
+    const parent = import_node_path16.default.dirname(current);
+    if (parent === current) {
+      return (0, import_neverthrow39.err)({ type: "XQA_NOT_INITIALIZED" });
+    }
+    current = parent;
+  }
+}
+
 // src/index.ts
 process.title = "xqa";
 var controller = acquireLock();
@@ -67905,10 +67988,25 @@ if (configResult.isErr()) {
   process.exit(1);
 }
 var config2 = configResult.value;
+function resolveXqaDirectory() {
+  const result = findXqaDirectory(process.cwd());
+  if (result.isErr()) {
+    process.stderr.write("Not in an xqa project. Run `xqa init` to initialize.\n");
+    process.exit(1);
+  }
+  return result.value;
+}
 var program2 = new Command();
 program2.name("xqa").description("AI-powered QA agent CLI");
+program2.command("init").description("Initialize a new xqa project in the current directory").action(() => {
+  runInitCommand();
+});
 program2.command("explore").description("Run the explorer agent; omit prompt for a full breadth-first sweep").argument("[prompt]", "Optional focus hint for the explorer; omit for a full breadth-first sweep").option("--verbose", "Log tool call results").action((prompt, options) => {
-  runExploreCommand({ prompt, verbose: options.verbose, signal: controller.signal }, config2);
+  const xqaDirectory = resolveXqaDirectory();
+  runExploreCommand(
+    { prompt, verbose: options.verbose, signal: controller.signal },
+    { config: config2, xqaDirectory }
+  );
 });
 program2.command("analyse").description("Analyse a session recording with Gemini").argument("[video-path]", "Path to video file").action((videoPath) => {
   void runAnalyseCommand(videoPath, config2);
@@ -67917,12 +68015,14 @@ program2.command("completion").description("Output shell completion script").arg
   runCompletionCommand(program2, shell);
 });
 program2.command("review").description("Review findings and mark false positives").argument("[findings-path]", "Path to the findings JSON file; defaults to last used path").action((findingsPath) => {
-  void runReviewCommand(findingsPath);
+  const xqaDirectory = resolveXqaDirectory();
+  void runReviewCommand(findingsPath, xqaDirectory);
 });
 program2.command("spec").description("Run the explorer agent against a spec file").argument("<spec-file>", "Path to the spec markdown file").option("--verbose", "Log tool call results").action((specFile, options) => {
+  const xqaDirectory = resolveXqaDirectory();
   void runSpecCommand(
     { specFile, verbose: options.verbose ?? false, signal: controller.signal },
-    config2
+    { config: config2, xqaDirectory }
   );
 });
 void program2.parseAsync(process.argv);