@fml-inc/fml 0.2.0 → 0.4.0

package/dist/chunk-YH5ROR7G.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/bin-utils.ts","../src/daemon-utils.ts"],"sourcesContent":["import fs from \"node:fs\";\nimport path from \"node:path\";\nimport { execFileSync, execSync } from \"node:child_process\";\n\nconst IS_WIN = process.platform === \"win32\";\nconst DEFAULT_PATHEXT = \".COM;.EXE;.BAT;.CMD\";\n\n/**\n * Resolve a CLI binary by walking process.env.PATH. On Windows, probe each\n * process.env.PATHEXT extension. Returns an absolute path or null.\n *\n * Pass the bare command name (e.g. \"npm\", not \"npm.cmd\"); the extension is\n * applied via PATHEXT on Windows. If the caller does include an extension,\n * it's used as-is.\n *\n * Replaces `which`/`where`: avoids spawning a child process and works the\n * same on macOS, Linux, and Windows.\n */\nexport function resolveBin(name: string): string | null {\n  const pathDirs = (process.env.PATH ?? \"\").split(path.delimiter).filter(Boolean);\n  const hasExt = path.extname(name) !== \"\";\n  const exts = !IS_WIN || hasExt\n    ? [\"\"]\n    : (process.env.PATHEXT ?? DEFAULT_PATHEXT).split(\";\").filter(Boolean);\n\n  for (const dir of pathDirs) {\n    for (const ext of exts) {\n      const candidate = path.join(dir, name + ext);\n      try {\n        if (fs.statSync(candidate).isFile()) return candidate;\n      } catch {}\n    }\n  }\n  return null;\n}\n\n/** True for Windows shell shims that execFile cannot run directly. */\nfunction isWinShim(bin: string): boolean {\n  return IS_WIN && /\\.(cmd|bat)$/i.test(bin);\n}\n\n/**\n * Quote a single argument for safe inclusion in a Windows command line that\n * will be parsed by cmd.exe and then re-parsed by a CRT program.\n *\n * Two layers:\n *   1. CRT (CommandLineToArgvW): wrap in `\"`, escape internal `\"` as `\\\"`,\n *      double any backslashes that precede a quote.\n *   2. cmd.exe: escape its metacharacters with `^` so they aren't expanded\n *      before the CRT layer sees them. `%` and `!` (delayed expansion) are\n *      the dangerous ones inside quotes; the rest are safest belt-and-braces.\n */\nexport function quoteWinArg(arg: string): string {\n  if (arg.length === 0) return '\"\"';\n\n  // Fast path: bare-word args that need no quoting at all.\n  // Backslash is intentionally excluded so `path\\` and similar still go\n  // through the trailing-backslash doubling logic below.\n  if (/^[A-Za-z0-9@\\-_+=:/.,]+$/.test(arg)) return arg;\n\n  // CRT layer: double backslashes before quotes, escape quotes, double trailing backslashes.\n  const crt = arg\n    .replace(/(\\\\*)\"/g, '$1$1\\\\\"')\n    .replace(/(\\\\+)$/, \"$1$1\");\n  const quoted = `\"${crt}\"`;\n\n  // cmd.exe layer: escape metacharacters (including the surrounding quotes)\n  // so cmd's first pass passes them through verbatim.\n  return quoted.replace(/([()%!^<>&|\"])/g, \"^$1\");\n}\n\nexport interface ExecBinOptions {\n  timeout?: number;\n  encoding?: BufferEncoding;\n  stdio?: \"pipe\" | \"inherit\" | \"ignore\";\n}\n\n/**\n * Run a resolved binary path with the given args, handling Windows .cmd/.bat\n * shims correctly. Throws on non-zero exit (matching execFileSync).\n */\nexport function execBinSync(\n  bin: string,\n  args: string[],\n  opts: ExecBinOptions = {},\n): string {\n  const { timeout = 10_000, encoding = \"utf-8\", stdio = \"pipe\" } = opts;\n\n  if (isWinShim(bin)) {\n    // CVE-2024-27980: Node refuses to spawn .cmd/.bat without shell: true.\n    // Build the command string ourselves so we control the quoting.\n    const command = [bin, ...args].map(quoteWinArg).join(\" \");\n    return execSync(command, { timeout, encoding, stdio });\n  }\n\n  return execFileSync(bin, args, { timeout, encoding, stdio });\n}\n","import { execBinSync, resolveBin } from \"./bin-utils.js\";\n\n/** Resolve the panopticon CLI binary from PATH (globally installed). */\nexport function resolvePanopticonBin(): string | null {\n  return resolveBin(\"panopticon\");\n}\n\n/** Run a panopticon CLI command and return stdout. */\nexport function panopticonExec(...args: string[]): {\n  ok: boolean;\n  stdout: string;\n};\nexport function panopticonExec(\n  ...argsAndOpts: [...string[], { timeout?: number }]\n): { ok: boolean; stdout: string };\nexport function panopticonExec(\n  ...argsAndOpts: Array<string | { timeout?: number }>\n): {\n  ok: boolean;\n  stdout: string;\n} {\n  let timeout = 10_000;\n  const args: string[] = [];\n  for (const a of argsAndOpts) {\n    if (typeof a === \"string\") args.push(a);\n    else timeout = a.timeout ?? timeout;\n  }\n  const bin = resolvePanopticonBin();\n  if (!bin) return { ok: false, stdout: \"panopticon binary not found\" };\n  try {\n    const stdout = execBinSync(bin, args, { timeout });\n    return { ok: true, stdout };\n  } catch (err: unknown) {\n    const e = err as { stdout?: string; stderr?: string; status?: number };\n    return { ok: false, stdout: (e.stdout ?? \"\") + (e.stderr ?? \"\") };\n  }\n}\n"],"mappings":";AAAA,OAAO,QAAQ;AACf,OAAO,UAAU;AACjB,SAAS,cAAc,gBAAgB;AAEvC,IAAM,SAAS,QAAQ,aAAa;AACpC,IAAM,kBAAkB;AAajB,SAAS,WAAW,MAA6B;AACtD,QAAM,YAAY,QAAQ,IAAI,QAAQ,IAAI,MAAM,KAAK,SAAS,EAAE,OAAO,OAAO;AAC9E,QAAM,SAAS,KAAK,QAAQ,IAAI,MAAM;AACtC,QAAM,OAAO,CAAC,UAAU,SACpB,CAAC,EAAE,KACF,QAAQ,IAAI,WAAW,iBAAiB,MAAM,GAAG,EAAE,OAAO,OAAO;AAEtE,aAAW,OAAO,UAAU;AAC1B,eAAW,OAAO,MAAM;AACtB,YAAM,YAAY,KAAK,KAAK,KAAK,OAAO,GAAG;AAC3C,UAAI;AACF,YAAI,GAAG,SAAS,SAAS,EAAE,OAAO,EAAG,QAAO;AAAA,MAC9C,QAAQ;AAAA,MAAC;AAAA,IACX;AAAA,EACF;AACA,SAAO;AACT;AAGA,SAAS,UAAU,KAAsB;AACvC,SAAO,UAAU,gBAAgB,KAAK,GAAG;AAC3C;AAaO,SAAS,YAAY,KAAqB;AAC/C,MAAI,IAAI,WAAW,EAAG,QAAO;AAK7B,MAAI,2BAA2B,KAAK,GAAG,EAAG,QAAO;AAGjD,QAAM,MAAM,IACT,QAAQ,WAAW,SAAS,EAC5B,QAAQ,UAAU,MAAM;AAC3B,QAAM,SAAS,IAAI,GAAG;AAItB,SAAO,OAAO,QAAQ,mBAAmB,KAAK;AAChD;AAYO,SAAS,YACd,KACA,MACA,OAAuB,CAAC,GAChB;AACR,QAAM,EAAE,UAAU,KAAQ,WAAW,SAAS,QAAQ,OAAO,IAAI;AAEjE,MAAI,UAAU,GAAG,GAAG;AAGlB,UAAM,UAAU,CAAC,KAAK,GAAG,IAAI,EAAE,IAAI,WAAW,EAAE,KAAK,GAAG;AACxD,WAAO,SAAS,SAAS,EAAE,SAAS,UAAU,MAAM,CAAC;AAAA,EACvD;AAEA,SAAO,aAAa,KAAK,MAAM,EAAE,SAAS,UAAU,MAAM,CAAC;AAC7D;;;AC7FO,SAAS,uBAAsC;AACpD,SAAO,WAAW,YAAY;AAChC;AAUO,SAAS,kBACX,aAIH;AACA,MAAI,UAAU;AACd,QAAM,OAAiB,CAAC;AACxB,aAAW,KAAK,aAAa;AAC3B,QAAI,OAAO,MAAM,SAAU,MAAK,KAAK,CAAC;AAAA,QACjC,WAAU,EAAE,WAAW;AAAA,EAC9B;AACA,QAAM,MAAM,qBAAqB;AACjC,MAAI,CAAC,IAAK,QAAO,EAAE,IAAI,OAAO,QAAQ,8BAA8B;AACpE,MAAI;AACF,UAAM,SAAS,YAAY,KAAK,MAAM,EAAE,QAAQ,CAAC;AACjD,WAAO,EAAE,IAAI,MAAM,OAAO;AAAA,EAC5B,SAAS,KAAc;AACrB,UAAM,IAAI;AACV,WAAO,EAAE,IAAI,OAAO,SAAS,EAAE,UAAU,OAAO,EAAE,UAAU,IAAI;AAAA,EAClE;AACF;","names":[]}

package/dist/{chunk-NFC24I3N.js → chunk-ZFUJ5ZQP.js}

@@ -1,8 +1,6 @@
 import {
-  SYNC_PID_FILE,
-  isDaemonRunning,
   panopticonExec
-} from "./chunk-ZKHH6EYQ.js";
+} from "./chunk-YH5ROR7G.js";
 
 // src/commands/daemon.ts
 function parsePanopticonRunning() {
@@ -10,9 +8,6 @@ function parsePanopticonRunning() {
   const serverLine = result.stdout.split("\n").find((l) => l.startsWith("Server:"));
   return result.ok && /running/i.test(serverLine ?? "");
 }
-function isSyncRunning() {
-  return isDaemonRunning(SYNC_PID_FILE);
-}
 async function handleStart() {
   const startResult = panopticonExec("start");
   console.log(
@@ -23,11 +18,24 @@ function handleStop() {
   const stopResult = panopticonExec("stop");
   console.log(stopResult.stdout.trim() || "Panopticon stopped");
 }
+function handleSyncStart() {
+  const result = panopticonExec("sync", "enable");
+  console.log(
+    result.stdout.trim() || (result.ok ? "Sync enabled" : "Failed to enable sync")
+  );
+}
+function handleSyncStop() {
+  const result = panopticonExec("sync", "disable");
+  console.log(
+    result.stdout.trim() || (result.ok ? "Sync disabled" : "Failed to disable sync")
+  );
+}
 
 export {
   parsePanopticonRunning,
-  isSyncRunning,
   handleStart,
-  handleStop
+  handleStop,
+  handleSyncStart,
+  handleSyncStop
 };
-//# sourceMappingURL=chunk-NFC24I3N.js.map
+//# sourceMappingURL=chunk-ZFUJ5ZQP.js.map

package/dist/chunk-ZFUJ5ZQP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/commands/daemon.ts"],"sourcesContent":["import { panopticonExec } from \"../daemon-utils.js\";\n\n// ── Status helpers (used by doctor, status) ─────────────────────────────────\n\nexport function parsePanopticonRunning(): boolean {\n  const result = panopticonExec(\"status\");\n  const serverLine = result.stdout\n    .split(\"\\n\")\n    .find((l) => l.startsWith(\"Server:\"));\n  return result.ok && /running/i.test(serverLine ?? \"\");\n}\n\n// ── Panopticon server start / stop (used by CLI, env restart, install, MCP) ──\n\nexport async function handleStart(): Promise<void> {\n  const startResult = panopticonExec(\"start\");\n  console.log(\n    startResult.stdout.trim() ||\n      (startResult.ok ? \"Panopticon started\" : \"Failed to start panopticon\"),\n  );\n}\n\nexport function handleStop(): void {\n  const stopResult = panopticonExec(\"stop\");\n  console.log(stopResult.stdout.trim() || \"Panopticon stopped\");\n}\n\n// ── Sync start / stop (used by `fml sync start|stop`) ───────────────────────\n// Sync runs inside the panopticon server; these toggle the persisted\n// sync-enabled flag via panopticon, independent of the server lifecycle.\n\nexport function handleSyncStart(): void {\n  const result = panopticonExec(\"sync\", \"enable\");\n  console.log(\n    result.stdout.trim() ||\n      (result.ok ? \"Sync enabled\" : \"Failed to enable sync\"),\n  );\n}\n\nexport function handleSyncStop(): void {\n  const result = panopticonExec(\"sync\", \"disable\");\n  console.log(\n    result.stdout.trim() ||\n      (result.ok ? \"Sync disabled\" : \"Failed to disable sync\"),\n  );\n}\n"],"mappings":";;;;;AAIO,SAAS,yBAAkC;AAChD,QAAM,SAAS,eAAe,QAAQ;AACtC,QAAM,aAAa,OAAO,OACvB,MAAM,IAAI,EACV,KAAK,CAAC,MAAM,EAAE,WAAW,SAAS,CAAC;AACtC,SAAO,OAAO,MAAM,WAAW,KAAK,cAAc,EAAE;AACtD;AAIA,eAAsB,cAA6B;AACjD,QAAM,cAAc,eAAe,OAAO;AAC1C,UAAQ;AAAA,IACN,YAAY,OAAO,KAAK,MACrB,YAAY,KAAK,uBAAuB;AAAA,EAC7C;AACF;AAEO,SAAS,aAAmB;AACjC,QAAM,aAAa,eAAe,MAAM;AACxC,UAAQ,IAAI,WAAW,OAAO,KAAK,KAAK,oBAAoB;AAC9D;AAMO,SAAS,kBAAwB;AACtC,QAAM,SAAS,eAAe,QAAQ,QAAQ;AAC9C,UAAQ;AAAA,IACN,OAAO,OAAO,KAAK,MAChB,OAAO,KAAK,iBAAiB;AAAA,EAClC;AACF;AAEO,SAAS,iBAAuB;AACrC,QAAM,SAAS,eAAe,QAAQ,SAAS;AAC/C,UAAQ;AAAA,IACN,OAAO,OAAO,KAAK,MAChB,OAAO,KAAK,kBAAkB;AAAA,EACnC;AACF;","names":[]}

package/dist/cli.js

@@ -1,17 +1,19 @@
 #!/usr/bin/env node
 import {
-  createApiClient,
-  ensureNativeModules,
+  createFmlClient,
   getAuthenticatedClient
-} from "./chunk-BOREGHA6.js";
+} from "./chunk-H2VOISTZ.js";
 import {
   CONVEX_URL,
   DEFAULT_SYNC_URL,
   DEFAULT_TARGET_NAME,
+  FML_DATA_DIR,
+  FML_LOG_DIR,
   Sentry,
   WORKOS_API_URL,
   WORKOS_AUTH_URL,
   authStorePath,
+  envConfigExists,
   getActiveEnv,
   getSelectedOrg,
   getSiteUrl,
@@ -22,19 +24,19 @@ import {
   setSelectedOrg,
   writeEnvConfig,
   writeTokens
-} from "./chunk-CUBBYHH7.js";
+} from "./chunk-5BHBYQ2F.js";
 import {
   handleStart,
   handleStop,
+  handleSyncStart,
+  handleSyncStop,
   parsePanopticonRunning
-} from "./chunk-NFC24I3N.js";
-import {
-  panopticonExec
-} from "./chunk-ZKHH6EYQ.js";
+} from "./chunk-ZFUJ5ZQP.js";
 import {
-  FML_DATA_DIR,
-  FML_LOG_DIR
-} from "./chunk-4YEAQJPF.js";
+  execBinSync,
+  panopticonExec,
+  resolveBin
+} from "./chunk-YH5ROR7G.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/cli.ts
@@ -218,7 +220,7 @@ async function handleDoctor(opts) {
     const spinner = startSpinner("API");
     if (token) {
       try {
-        const result = await createApiClient(token).callBackend("ping", {});
+        const result = await createFmlClient(token).callBackend("ping", {});
         if (result.ok) {
           pushAndReport(
             {
@@ -273,7 +275,6 @@ async function handleDoctor(opts) {
 }
 
 // src/commands/install.ts
-import { execFileSync } from "child_process";
 import fs from "fs";
 import os from "os";
 import path from "path";
@@ -365,15 +366,17 @@ function writeJsonFile(filePath, data) {
   fs.writeFileSync(filePath, `${JSON.stringify(data, null, 2)}
 `);
 }
-async function handleInstall() {
+async function handleInstall(opts = {}) {
+  const force = opts.force ?? false;
   const pluginRoot = getPluginRoot();
-  console.log("Installing fml...\n");
+  console.log(`Installing fml${force ? " (--force)" : ""}...
+`);
   console.log("[1/5] Setting up panopticon...");
-  const { resolvePanopticonBin } = await import("./daemon-utils-EUOTVCKL.js");
+  const { resolvePanopticonBin } = await import("./daemon-utils-OODBIYB7.js");
   let freshInstall = false;
   const bin = resolvePanopticonBin();
-  let needsInstall = !bin;
-  if (bin) {
+  let needsInstall = !bin || force;
+  if (bin && !force) {
     const MIN_PANOPTICON = "0.2.2";
     const vResult = panopticonExec("--version", { timeout: 5e3 });
     const installed = vResult.ok ? vResult.stdout.trim().split("+")[0] : "0.0.0";
@@ -386,18 +389,22 @@ async function handleInstall() {
     console.log(
       bin ? "      Upgrading @fml-inc/panopticon..." : "      Installing @fml-inc/panopticon globally..."
     );
-    try {
-      execFileSync("npm", ["install", "-g", "@fml-inc/panopticon@latest"], {
-        encoding: "utf-8",
-        timeout: 12e4,
-        stdio: "pipe"
-      });
-      freshInstall = true;
-      console.log("      Installed @fml-inc/panopticon");
-    } catch (err) {
-      const msg = err instanceof Error ? err.message : String(err);
-      console.error(`      Failed to install panopticon: ${msg}`);
+    const npmBin = resolveBin("npm");
+    if (!npmBin) {
+      console.error("      Failed to install panopticon: npm not found on PATH");
       console.error("      Install manually: npm install -g @fml-inc/panopticon@latest");
+    } else {
+      try {
+        execBinSync(npmBin, ["install", "-g", "@fml-inc/panopticon@latest"], {
+          timeout: 12e4
+        });
+        freshInstall = true;
+        console.log("      Installed @fml-inc/panopticon");
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        console.error(`      Failed to install panopticon: ${msg}`);
+        console.error("      Install manually: npm install -g @fml-inc/panopticon@latest");
+      }
     }
   }
   if (!freshInstall) {
@@ -481,21 +488,26 @@ async function handleInstall() {
   settings.enabledPlugins["fml@local-plugins"] = true;
   writeJsonFile(CLAUDE_SETTINGS_PATH, settings);
   console.log(`      Claude settings: ${CLAUDE_SETTINGS_PATH}`);
-  try {
+  const claudeBin = resolveBin("claude");
+  if (!claudeBin) {
+    console.log("      warn: claude CLI not found, run 'claude plugin install fml@local-plugins' manually");
+  } else {
     try {
-      execFileSync("claude", ["plugin", "install", "fml@local-plugins"], {
-        stdio: "pipe",
-        timeout: 15e3
-      });
-    } catch {
-      execFileSync("claude", ["plugin", "update", "fml@local-plugins"], {
-        stdio: "pipe",
-        timeout: 15e3
-      });
+      try {
+        execBinSync(claudeBin, ["plugin", "install", "fml@local-plugins"], {
+          timeout: 15e3
+        });
+      } catch {
+        execBinSync(claudeBin, ["plugin", "update", "fml@local-plugins"], {
+          timeout: 15e3
+        });
+      }
+      console.log("      Plugin registered via Claude Code CLI");
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err);
+      console.log(`      warn: claude plugin install/update failed: ${msg}`);
+      console.log("      Run 'claude plugin install fml@local-plugins' manually");
     }
-    console.log("      Plugin registered via Claude Code CLI");
-  } catch {
-    console.log("      warn: claude CLI not found, run 'claude plugin install fml@local-plugins' manually");
   }
   console.log();
   console.log("[5/5] Configuring sync target...");
@@ -519,7 +531,9 @@ async function handleInstall() {
       );
     }
   }
-  writeEnvConfig({ active: DEFAULT_TARGET_NAME });
+  if (!envConfigExists()) {
+    writeEnvConfig({ active: DEFAULT_TARGET_NAME });
+  }
   console.log("");
   printBanner();
   console.log("Done! Start a new coding session to activate.\n");
@@ -531,7 +545,6 @@ async function handleInstall() {
 }
 
 // src/commands/uninstall.ts
-import { execFileSync as execFileSync2 } from "child_process";
 import fs2 from "fs";
 import os2 from "os";
 import path2 from "path";
@@ -568,14 +581,17 @@ function handleUninstall(opts) {
     console.log("[1/5] Skipping plugin uninstall (target-specific uninstall)");
   } else {
     console.log("[1/5] Uninstalling MCP plugin...");
-    try {
-      execFileSync2(
-        "claude",
-        ["plugin", "uninstall", "fml@local-plugins", "--scope", "user"],
-        { stdio: "pipe", timeout: 1e4 }
-      );
-      console.log("      Uninstalled (user scope)");
-    } catch {
+    const claudeBin = resolveBin("claude");
+    if (claudeBin) {
+      try {
+        execBinSync(
+          claudeBin,
+          ["plugin", "uninstall", "fml@local-plugins", "--scope", "user"],
+          { timeout: 1e4 }
+        );
+        console.log("      Uninstalled (user scope)");
+      } catch {
+      }
     }
     const installedPluginsPath = path2.join(
       CLAUDE_DIR2,
@@ -689,7 +705,7 @@ function handleUninstall(opts) {
 // src/commands/update.ts
 import { execSync as execSync2 } from "child_process";
 async function handleUpdate() {
-  const currentVersion = true ? "0.2.0+beaba19" : "unknown";
+  const currentVersion = true ? "0.4.0+ef00cc0" : "unknown";
   console.log(`Current: ${currentVersion}`);
   console.log("Updating via npm...\n");
   try {
@@ -700,7 +716,7 @@ async function handleUpdate() {
       timeout: 12e4,
       env
     });
-    console.log("\nUpdated. Run `fml install --skip-build` to reconfigure.");
+    console.log("\nUpdated. Run `fml install --force` to reconfigure.");
   } catch (err) {
     Sentry.captureException(err);
     const msg = err instanceof Error ? err.stderr?.toString() ?? err.message : String(err);
@@ -1036,10 +1052,11 @@ async function selectOrg() {
   try {
     const token = await getValidToken();
     if (!token) return;
-    const api = createApiClient(token);
+    const api = createFmlClient(token);
     const orgs = await api.queryOrgs();
     if (orgs.length === 0) return;
-    const org = orgs[0];
+    const current = getSelectedOrg();
+    const org = current && orgs.find((o) => (o.slug ?? o.name) === current) || orgs[0];
     const slug = org.slug ?? org.name;
     setSelectedOrg(slug);
     console.log(`Selected org: ${org.name} (${slug})`);
@@ -1050,7 +1067,7 @@ async function handleLogin(opts) {
   const { name: envName } = getActiveEnv();
   const existingToken = await getValidToken();
   if (existingToken) {
-    const { readTokens: readTokens2 } = await import("./token-store-HOFFHNNN.js");
+    const { readTokens: readTokens2 } = await import("./token-store-T2RNLXRM.js");
     const stored = readTokens2();
     console.log(
       `Already logged in as ${stored?.user.name} (${stored?.user.email}) on ${envName}.`
@@ -1102,7 +1119,7 @@ async function handleOrg(slug) {
     console.error("Not logged in. Run `fml login` first.");
     process.exit(1);
   }
-  const api = createApiClient(token);
+  const api = createFmlClient(token);
   const orgs = await api.queryOrgs();
   if (orgs.length === 0) {
     console.error("No organizations found.");
@@ -1934,7 +1951,7 @@ async function handleConfigDetail(opts) {
 // src/commands/tools.ts
 import { readFileSync } from "fs";
 import path3 from "path";
-var pluginVersion = true ? "0.2.0+beaba19" : void 0;
+var pluginVersion = true ? "0.4.0+ef00cc0" : void 0;
 async function getApi() {
   const api = await getAuthenticatedClient();
   if (!api) {
@@ -2060,13 +2077,12 @@ async function handleToolsCall(name, opts) {
 }
 
 // src/cli.ts
-ensureNativeModules();
 await initSentry();
 if (process.argv.length <= 2 || process.argv.includes("--help") || process.argv.includes("-h")) {
   printBanner();
 }
 var program = new Command().name("fml").description("FML agent tools for Claude Code").version(
-  true ? "0.2.0+beaba19" : "dev"
+  true ? "0.4.0+ef00cc0" : "dev"
 );
 var tools = program.command("tools", { hidden: true }).description("List all available CLI commands (including hidden agent tools)").action(() => {
   function formatCmd(cmd, prefix = "") {
@@ -2090,7 +2106,10 @@ var tools = program.command("tools", { hidden: true }).description("List all ava
 tools.command("list").description("List backend tools available via the dynamic catalog").option("--category <category>", "Filter by category").option("--json", "Output as JSON").action((opts) => handleToolsList(opts));
 tools.command("describe").description("Show description and input schema for a backend tool").argument("<name>", "Tool name (e.g. integration-github)").option("--json", "Output as JSON").action((name, opts) => handleToolsDescribe(name, opts));
 tools.command("call").description("Invoke a backend tool by name with JSON args").argument("<name>", "Tool name").option("--args <json>", "Args as a JSON string (defaults to {})").option("--file <path>", "Path to a JSON file containing args").action((name, opts) => handleToolsCall(name, opts));
-program.command("install").description("Register plugin, hooks, and daemons").action(() => handleInstall());
+program.command("install").description("Register plugin, hooks, and daemons").option(
+  "--force",
+  "Reinstall even if already set up (upgrades panopticon, re-registers plugin)"
+).action((opts) => handleInstall(opts));
 program.command("uninstall").description("Remove fml plugin, hooks, and optionally all data").option(
   "--target <target>",
   "Target CLI: claude, gemini, codex, claude-desktop, all"
@@ -2106,9 +2125,12 @@ program.command("env").description("Show or switch environment (dev/prod)").argu
   if (target) handleEnvSwitch(target);
   else handleEnvShow();
 });
-program.command("start").description("Start panopticon server and sync").action(() => handleStart());
-program.command("stop").description("Stop panopticon server and sync").action(() => handleStop());
+var panopticon = program.command("panopticon").description("Start or stop the panopticon server");
+panopticon.command("start").description("Start the panopticon server").action(() => handleStart());
+panopticon.command("stop").description("Stop the panopticon server").action(() => handleStop());
 var sync = program.command("sync").description("Manage sync configuration");
+sync.command("start").description("Start syncing to configured targets (enable sync)").action(() => handleSyncStart());
+sync.command("stop").description("Stop syncing (disable sync; leaves targets configured)").action(() => handleSyncStop());
 sync.command("setup").description("Configure sync targets (convenience shortcut)").action(() => handleSyncSetup());
 sync.command("list").description("List all sync targets").action(() => handleSyncList());
 sync.command("add").description("Add a sync target").argument("<name>", "Unique target name").argument("<url>", "OTLP HTTP endpoint URL").option("--token-cmd <cmd>", "Shell command that returns a bearer token").option("--token <token>", "Static bearer token").action(