@holdyourvoice/hyv 2.8.8 → 2.8.10

package/dist/index.js

@@ -973,8 +973,8 @@ var require_command = __commonJS({
   "node_modules/commander/lib/command.js"(exports2) {
     var EventEmitter = require("node:events").EventEmitter;
     var childProcess = require("node:child_process");
-    var path23 = require("node:path");
-    var fs24 = require("node:fs");
+    var path24 = require("node:path");
+    var fs25 = require("node:fs");
     var process2 = require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -1916,13 +1916,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path23.resolve(baseDir, baseName);
-          if (fs24.existsSync(localBin))
+          const localBin = path24.resolve(baseDir, baseName);
+          if (fs25.existsSync(localBin))
             return localBin;
-          if (sourceExt.includes(path23.extname(baseName)))
+          if (sourceExt.includes(path24.extname(baseName)))
             return void 0;
           const foundExt = sourceExt.find(
-            (ext) => fs24.existsSync(`${localBin}${ext}`)
+            (ext) => fs25.existsSync(`${localBin}${ext}`)
           );
           if (foundExt)
             return `${localBin}${foundExt}`;
@@ -1935,21 +1935,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs24.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs25.realpathSync(this._scriptPath);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path23.resolve(
-            path23.dirname(resolvedScriptPath),
+          executableDir = path24.resolve(
+            path24.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path23.basename(
+            const legacyName = path24.basename(
               this._scriptPath,
-              path23.extname(this._scriptPath)
+              path24.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1960,7 +1960,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path23.extname(executableFile));
+        launchWithNode = sourceExt.includes(path24.extname(executableFile));
         let proc;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -2817,7 +2817,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path23.basename(filename, path23.extname(filename));
+        this._name = path24.basename(filename, path24.extname(filename));
         return this;
       }
       /**
@@ -2831,10 +2831,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path24) {
-        if (path24 === void 0)
+      executableDir(path25) {
+        if (path25 === void 0)
           return this._executableDir;
-        this._executableDir = path24;
+        this._executableDir = path25;
         return this;
       }
       /**
@@ -3934,15 +3934,15 @@ var require_route = __commonJS({
       };
     }
     function wrapConversion(toModel, graph) {
-      const path23 = [graph[toModel].parent, toModel];
+      const path24 = [graph[toModel].parent, toModel];
       let fn = conversions[graph[toModel].parent][toModel];
       let cur = graph[toModel].parent;
       while (graph[cur].parent) {
-        path23.unshift(graph[cur].parent);
+        path24.unshift(graph[cur].parent);
         fn = link(conversions[graph[cur].parent][cur], fn);
         cur = graph[cur].parent;
       }
-      fn.conversion = path23;
+      fn.conversion = path24;
       return fn;
     }
     module2.exports = function(fromModel) {
@@ -4381,14 +4381,14 @@ var require_templates = __commonJS({
       }
       return results;
     }
-    function buildStyle(chalk31, styles) {
+    function buildStyle(chalk32, styles) {
       const enabled = {};
       for (const layer of styles) {
         for (const style of layer.styles) {
           enabled[style[0]] = layer.inverse ? null : style.slice(1);
         }
       }
-      let current = chalk31;
+      let current = chalk32;
       for (const [styleName, styles2] of Object.entries(enabled)) {
         if (!Array.isArray(styles2)) {
           continue;
@@ -4400,7 +4400,7 @@ var require_templates = __commonJS({
       }
       return current;
     }
-    module2.exports = (chalk31, temporary) => {
+    module2.exports = (chalk32, temporary) => {
       const styles = [];
       const chunks = [];
       let chunk = [];
@@ -4410,13 +4410,13 @@ var require_templates = __commonJS({
         } else if (style) {
           const string = chunk.join("");
           chunk = [];
-          chunks.push(styles.length === 0 ? string : buildStyle(chalk31, styles)(string));
+          chunks.push(styles.length === 0 ? string : buildStyle(chalk32, styles)(string));
           styles.push({ inverse, styles: parseStyle(style) });
         } else if (close) {
           if (styles.length === 0) {
             throw new Error("Found extraneous } in Chalk template literal");
           }
-          chunks.push(buildStyle(chalk31, styles)(chunk.join("")));
+          chunks.push(buildStyle(chalk32, styles)(chunk.join("")));
           chunk = [];
           styles.pop();
         } else {
@@ -4464,16 +4464,16 @@ var require_source = __commonJS({
       }
     };
     var chalkFactory = (options) => {
-      const chalk32 = {};
-      applyOptions(chalk32, options);
-      chalk32.template = (...arguments_) => chalkTag(chalk32.template, ...arguments_);
-      Object.setPrototypeOf(chalk32, Chalk.prototype);
-      Object.setPrototypeOf(chalk32.template, chalk32);
-      chalk32.template.constructor = () => {
+      const chalk33 = {};
+      applyOptions(chalk33, options);
+      chalk33.template = (...arguments_) => chalkTag(chalk33.template, ...arguments_);
+      Object.setPrototypeOf(chalk33, Chalk.prototype);
+      Object.setPrototypeOf(chalk33.template, chalk33);
+      chalk33.template.constructor = () => {
         throw new Error("`chalk.constructor()` is deprecated. Use `new chalk.Instance()` instead.");
       };
-      chalk32.template.Instance = ChalkClass;
-      return chalk32.template;
+      chalk33.template.Instance = ChalkClass;
+      return chalk33.template;
     };
     function Chalk(options) {
       return chalkFactory(options);
@@ -4584,7 +4584,7 @@ var require_source = __commonJS({
       return openAll + string + closeAll;
     };
     var template;
-    var chalkTag = (chalk32, ...strings) => {
+    var chalkTag = (chalk33, ...strings) => {
       const [firstString] = strings;
       if (!isArray(firstString) || !isArray(firstString.raw)) {
         return strings.join(" ");
@@ -4600,14 +4600,14 @@ var require_source = __commonJS({
       if (template === void 0) {
         template = require_templates();
       }
-      return template(chalk32, parts.join(""));
+      return template(chalk33, parts.join(""));
     };
     Object.defineProperties(Chalk.prototype, styles);
-    var chalk31 = Chalk();
-    chalk31.supportsColor = stdoutColor;
-    chalk31.stderr = Chalk({ level: stderrColor ? stderrColor.level : 0 });
-    chalk31.stderr.supportsColor = stderrColor;
-    module2.exports = chalk31;
+    var chalk32 = Chalk();
+    chalk32.supportsColor = stdoutColor;
+    chalk32.stderr = Chalk({ level: stderrColor ? stderrColor.level : 0 });
+    chalk32.stderr.supportsColor = stderrColor;
+    module2.exports = chalk32;
   }
 });
 
@@ -4647,6 +4647,27 @@ function assertSafeOpenUrl(url) {
   }
   return url;
 }
+function assertSafeOAuthUrl(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw new Error("Invalid URL");
+  }
+  if (parsed.protocol !== "https:") {
+    throw new Error("Only https:// URLs can be opened");
+  }
+  if (ALLOWED_API_HOSTS.has(parsed.hostname)) {
+    return url;
+  }
+  if (ALLOWED_OAUTH_HOSTS.has(parsed.hostname)) {
+    if (parsed.hostname === "accounts.google.com" && !parsed.pathname.startsWith("/o/oauth2/")) {
+      throw new Error(`Unexpected OAuth path: ${parsed.pathname}`);
+    }
+    return url;
+  }
+  throw new Error(`URL host not allowed: ${parsed.hostname}`);
+}
 function assertSafeProfileName(name) {
   const normalized = String(name || "").trim();
   if (!normalized)
@@ -4804,7 +4825,7 @@ function readLastEditSession() {
     return null;
   }
 }
-var fs, path, os, HYV_DIR, AUTH_FILE, CONFIG_FILE, PROFILES_DIR, CACHE_DIR, QUEUE_DIR, LAST_SESSION_FILE, ALLOWED_API_HOSTS, API_BASE, PROFILE_NAME_RE;
+var fs, path, os, HYV_DIR, AUTH_FILE, CONFIG_FILE, PROFILES_DIR, CACHE_DIR, QUEUE_DIR, LAST_SESSION_FILE, ALLOWED_API_HOSTS, ALLOWED_OAUTH_HOSTS, API_BASE, PROFILE_NAME_RE;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
@@ -4825,6 +4846,7 @@ var init_config = __esm({
       "localhost",
       "127.0.0.1"
     ]);
+    ALLOWED_OAUTH_HOSTS = /* @__PURE__ */ new Set(["accounts.google.com"]);
     API_BASE = validateApiBase(process.env.HYV_API_URL || "https://holdyourvoice.com");
     PROFILE_NAME_RE = /^[a-z0-9][a-z0-9._-]{0,62}$/i;
   }
@@ -4834,11 +4856,11 @@ var init_config = __esm({
 var require_is_docker = __commonJS({
   "node_modules/is-docker/index.js"(exports2, module2) {
     "use strict";
-    var fs24 = require("fs");
+    var fs25 = require("fs");
     var isDocker;
     function hasDockerEnv() {
       try {
-        fs24.statSync("/.dockerenv");
+        fs25.statSync("/.dockerenv");
         return true;
       } catch (_) {
         return false;
@@ -4846,7 +4868,7 @@ var require_is_docker = __commonJS({
     }
     function hasDockerCGroup() {
       try {
-        return fs24.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+        return fs25.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
       } catch (_) {
         return false;
       }
@@ -4865,7 +4887,7 @@ var require_is_wsl = __commonJS({
   "node_modules/is-wsl/index.js"(exports2, module2) {
     "use strict";
     var os9 = require("os");
-    var fs24 = require("fs");
+    var fs25 = require("fs");
     var isDocker = require_is_docker();
     var isWsl = () => {
       if (process.platform !== "linux") {
@@ -4878,7 +4900,7 @@ var require_is_wsl = __commonJS({
         return true;
       }
       try {
-        return fs24.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
+        return fs25.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
       } catch (_) {
         return false;
       }
@@ -4917,17 +4939,17 @@ var require_define_lazy_prop = __commonJS({
 // node_modules/open/index.js
 var require_open = __commonJS({
   "node_modules/open/index.js"(exports2, module2) {
-    var path23 = require("path");
+    var path24 = require("path");
     var childProcess = require("child_process");
-    var { promises: fs24, constants: fsConstants } = require("fs");
+    var { promises: fs25, constants: fsConstants } = require("fs");
     var isWsl = require_is_wsl();
     var isDocker = require_is_docker();
     var defineLazyProperty = require_define_lazy_prop();
-    var localXdgOpenPath = path23.join(__dirname, "xdg-open");
+    var localXdgOpenPath = path24.join(__dirname, "xdg-open");
     var { platform, arch } = process;
     var hasContainerEnv = () => {
       try {
-        fs24.statSync("/run/.containerenv");
+        fs25.statSync("/run/.containerenv");
         return true;
       } catch {
         return false;
@@ -4950,14 +4972,14 @@ var require_open = __commonJS({
         const configFilePath = "/etc/wsl.conf";
         let isConfigFileExists = false;
         try {
-          await fs24.access(configFilePath, fsConstants.F_OK);
+          await fs25.access(configFilePath, fsConstants.F_OK);
           isConfigFileExists = true;
         } catch {
         }
         if (!isConfigFileExists) {
           return defaultMountPoint;
         }
-        const configContent = await fs24.readFile(configFilePath, { encoding: "utf8" });
+        const configContent = await fs25.readFile(configFilePath, { encoding: "utf8" });
         const configMountPoint = /(?<!#.*)root\s*=\s*(?<mountPoint>.*)/g.exec(configContent);
         if (!configMountPoint) {
           return defaultMountPoint;
@@ -5057,7 +5079,7 @@ var require_open = __commonJS({
           const isBundled = !__dirname || __dirname === "/";
           let exeLocalXdgOpen = false;
           try {
-            await fs24.access(localXdgOpenPath, fsConstants.X_OK);
+            await fs25.access(localXdgOpenPath, fsConstants.X_OK);
             exeLocalXdgOpen = true;
           } catch {
           }
@@ -5244,6 +5266,33 @@ var init_version = __esm({
   }
 });
 
+// src/lib/auth-refresh.ts
+function tokenExpiresAtMs(expiresAt) {
+  if (!expiresAt)
+    return null;
+  const ms = new Date(expiresAt).getTime();
+  return Number.isFinite(ms) ? ms : null;
+}
+function shouldRefreshToken(expiresAt, now = Date.now()) {
+  const expiresMs = tokenExpiresAtMs(expiresAt);
+  if (expiresMs === null)
+    return false;
+  return expiresMs <= now + REFRESH_LEAD_MS;
+}
+function isTokenExpired(expiresAt, now = Date.now()) {
+  const expiresMs = tokenExpiresAtMs(expiresAt);
+  if (expiresMs === null)
+    return false;
+  return expiresMs < now;
+}
+var REFRESH_LEAD_MS;
+var init_auth_refresh = __esm({
+  "src/lib/auth-refresh.ts"() {
+    "use strict";
+    REFRESH_LEAD_MS = 5 * 60 * 1e3;
+  }
+});
+
 // src/lib/auth.ts
 var auth_exports = {};
 __export(auth_exports, {
@@ -5252,8 +5301,14 @@ __export(auth_exports, {
   authenticatedRequest: () => authenticatedRequest,
   checkSession: () => checkSession,
   getValidToken: () => getValidToken,
-  refreshToken: () => refreshToken
+  refreshToken: () => refreshToken,
+  verifyOAuthState: () => verifyOAuthState
 });
+function verifyOAuthState(received, expected) {
+  if (!received || !expected || received !== expected) {
+    throw new Error("OAuth state mismatch \u2014 possible CSRF attempt");
+  }
+}
 function escapeHtml(value) {
   return value.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
@@ -5300,16 +5355,12 @@ async function getValidToken() {
   const auth = readAuth();
   if (!auth?.token)
     return null;
-  if (auth.expires_at) {
-    const expires = new Date(auth.expires_at);
-    const refreshBy = Date.now() + 5 * 60 * 1e3;
-    if (expires.getTime() <= refreshBy) {
-      const ok = await refreshToken(auth.token);
-      if (ok)
-        return getToken();
-      if (expires.getTime() < Date.now())
-        return null;
-    }
+  if (shouldRefreshToken(auth.expires_at)) {
+    const ok = await refreshToken(auth.token);
+    if (ok)
+      return getToken();
+    if (isTokenExpired(auth.expires_at))
+      return null;
   }
   return auth.token;
 }
@@ -5363,7 +5414,7 @@ async function authenticateWithBrowser() {
     throw new Error("Authentication server did not return OAuth state");
   }
   console.log(import_chalk.default.cyan("\nOpening browser for authentication..."));
-  await (0, import_open.default)(assertSafeOpenUrl(auth_url));
+  await (0, import_open.default)(assertSafeOAuthUrl(auth_url));
   const authData = await new Promise((resolve14, reject) => {
     const timeout = setTimeout(() => {
       server.close();
@@ -5382,12 +5433,14 @@ async function authenticateWithBrowser() {
           reject(new Error("Invalid callback parameters"));
           return;
         }
-        if (state !== expectedState) {
+        try {
+          verifyOAuthState(state, expectedState);
+        } catch (stateErr) {
           res.writeHead(400, { "Content-Type": "text/html" });
           res.end("<h1>Authentication failed</h1><p>Invalid OAuth state.</p>");
           clearTimeout(timeout);
           server.close();
-          reject(new Error("OAuth state mismatch \u2014 possible CSRF attempt"));
+          reject(stateErr);
           return;
         }
         try {
@@ -5481,6 +5534,7 @@ var init_auth = __esm({
     import_open = __toESM(require_open());
     init_config();
     init_version();
+    init_auth_refresh();
   }
 });
 
@@ -5641,11 +5695,11 @@ __export(api_exports, {
   apiPost: () => apiPost,
   requireSubscription: () => requireSubscription
 });
-async function request2(method, path23, body) {
+async function request2(method, path24, body) {
   const token = await getValidToken();
   if (!token)
     throw new Error("you're not signed in yet. run: hyv init");
-  const url = `${API_BASE}${path23}`;
+  const url = `${API_BASE}${path24}`;
   const opts = {
     method,
     headers: {
@@ -5670,11 +5724,11 @@ async function request2(method, path23, body) {
   }
   return res.json();
 }
-function apiGet(path23) {
-  return request2("GET", path23);
+function apiGet(path24) {
+  return request2("GET", path24);
 }
-function apiPost(path23, body) {
-  return request2("POST", path23, body);
+function apiPost(path24, body) {
+  return request2("POST", path24, body);
 }
 async function requireSubscription() {
   const { requirePaidFeature: requirePaidFeature2 } = await Promise.resolve().then(() => (init_access(), access_exports));
@@ -7246,26 +7300,26 @@ function runPipeline(text, profile, applyFixes = false) {
   };
 }
 function readText(source) {
-  const fs24 = require("fs");
-  const path23 = require("path");
+  const fs25 = require("fs");
+  const path24 = require("path");
   if (source === "-") {
     if (process.stdin.isTTY) {
       console.error("No input provided. Pipe content or specify a file.");
       process.exit(1);
     }
-    return { text: fs24.readFileSync(0, "utf-8"), path: "stdin" };
+    return { text: fs25.readFileSync(0, "utf-8"), path: "stdin" };
   }
-  const resolved = path23.resolve(source);
-  if (!fs24.existsSync(resolved)) {
+  const resolved = path24.resolve(source);
+  if (!fs25.existsSync(resolved)) {
     console.error(`File not found: ${resolved}`);
     process.exit(1);
   }
-  const stat = fs24.statSync(resolved);
+  const stat = fs25.statSync(resolved);
   if (stat.isDirectory()) {
     console.error(`${resolved} is a directory, not a file.`);
     process.exit(1);
   }
-  return { text: fs24.readFileSync(resolved, "utf-8"), path: resolved };
+  return { text: fs25.readFileSync(resolved, "utf-8"), path: resolved };
 }
 var init_pipeline = __esm({
   "src/lib/pipeline.ts"() {
@@ -8273,7 +8327,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s))
       g.minimatch.escape = vi.escape;
       g.minimatch.unescape = Ei.unescape;
     });
-    var fs24 = R((Wt) => {
+    var fs25 = R((Wt) => {
       "use strict";
       Object.defineProperty(Wt, "__esModule", { value: true });
       Wt.LRUCache = void 0;
@@ -9242,7 +9296,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s))
       };
       Object.defineProperty(_, "__esModule", { value: true });
       _.PathScurry = _.Path = _.PathScurryDarwin = _.PathScurryPosix = _.PathScurryWin32 = _.PathScurryBase = _.PathPosix = _.PathWin32 = _.PathBase = _.ChildrenCache = _.ResolveCache = void 0;
-      var Qt = fs24(), Yt = require("node:path"), yr = require("node:url"), pt = require("fs"), Sr = br(require("node:fs")), vr = pt.realpathSync.native, Ht = require("node:fs/promises"), bs = Oe(), mt = { lstatSync: pt.lstatSync, readdir: pt.readdir, readdirSync: pt.readdirSync, readlinkSync: pt.readlinkSync, realpathSync: vr, promises: { lstat: Ht.lstat, readdir: Ht.readdir, readlink: Ht.readlink, realpath: Ht.realpath } }, _s = (n) => !n || n === mt || n === Sr ? mt : { ...mt, ...n, promises: { ...mt.promises, ...n.promises || {} } }, Os = /^\\\\\?\\([a-z]:)\\?$/i, Er = (n) => n.replace(/\//g, "\\").replace(Os, "$1\\"), _r = /[\\\/]/, N = 0, xs = 1, Ts = 2, G = 4, Cs = 6, Rs = 8, Q = 10, As = 12, j = 15, dt = ~j, xe = 16, ys = 32, gt = 64, W = 128, Vt = 256, Xt = 512, Ss = gt | W | Xt, Or = 1023, Te = (n) => n.isFile() ? Rs : n.isDirectory() ? G : n.isSymbolicLink() ? Q : n.isCharacterDevice() ? Ts : n.isBlockDevice() ? Cs : n.isSocket() ? As : n.isFIFO() ? xs : N, vs = new Qt.LRUCache({ max: 2 ** 12 }), wt = (n) => {
+      var Qt = fs25(), Yt = require("node:path"), yr = require("node:url"), pt = require("fs"), Sr = br(require("node:fs")), vr = pt.realpathSync.native, Ht = require("node:fs/promises"), bs = Oe(), mt = { lstatSync: pt.lstatSync, readdir: pt.readdir, readdirSync: pt.readdirSync, readlinkSync: pt.readlinkSync, realpathSync: vr, promises: { lstat: Ht.lstat, readdir: Ht.readdir, readlink: Ht.readlink, realpath: Ht.realpath } }, _s = (n) => !n || n === mt || n === Sr ? mt : { ...mt, ...n, promises: { ...mt.promises, ...n.promises || {} } }, Os = /^\\\\\?\\([a-z]:)\\?$/i, Er = (n) => n.replace(/\//g, "\\").replace(Os, "$1\\"), _r = /[\\\/]/, N = 0, xs = 1, Ts = 2, G = 4, Cs = 6, Rs = 8, Q = 10, As = 12, j = 15, dt = ~j, xe = 16, ys = 32, gt = 64, W = 128, Vt = 256, Xt = 512, Ss = gt | W | Xt, Or = 1023, Te = (n) => n.isFile() ? Rs : n.isDirectory() ? G : n.isSymbolicLink() ? Q : n.isCharacterDevice() ? Ts : n.isBlockDevice() ? Cs : n.isSocket() ? As : n.isFIFO() ? xs : N, vs = new Qt.LRUCache({ max: 2 ** 12 }), wt = (n) => {
         let t = vs.get(n);
         if (t)
           return t;
@@ -10761,7 +10815,7 @@ var {
 } = import_index.default;
 
 // src/index.ts
-var import_chalk30 = __toESM(require_source());
+var import_chalk31 = __toESM(require_source());
 
 // src/commands/init.ts
 var import_chalk4 = __toESM(require_source());
@@ -12454,8 +12508,8 @@ function registerImportCommand(program3) {
 }
 function askQuestion(question) {
   return new Promise((resolve14) => {
-    const readline = require("readline");
-    const rl = readline.createInterface({
+    const readline2 = require("readline");
+    const rl = readline2.createInterface({
       input: process.stdin,
       output: process.stdout
     });
@@ -13040,28 +13094,137 @@ hyv scan ${filePath}`));
 
 // src/commands/doctor.ts
 var import_chalk16 = __toESM(require_source());
-var fs13 = __toESM(require("fs"));
-var path14 = __toESM(require("path"));
+var fs14 = __toESM(require("fs"));
+var path15 = __toESM(require("path"));
 var os5 = __toESM(require("os"));
 init_config();
 init_auth();
 init_access();
 init_local_profile();
 init_version();
+
+// src/lib/mcp-stdio-test.ts
+var import_child_process2 = require("child_process");
+
+// src/lib/cli-entry.ts
+var fs13 = __toESM(require("fs"));
+var path14 = __toESM(require("path"));
+function resolveCliEntry() {
+  const candidates = [
+    path14.resolve(process.argv[1] || ""),
+    path14.resolve(__dirname, "index.js"),
+    path14.resolve(__dirname, "..", "dist", "index.js")
+  ];
+  return candidates.find((p) => p && fs13.existsSync(p)) || null;
+}
+function mcpServerCommand() {
+  const entry = resolveCliEntry();
+  if (entry) {
+    return { command: process.execPath, args: [entry, "mcp"] };
+  }
+  return { command: "hyv", args: ["mcp"] };
+}
+function mcpServerSnippet() {
+  const { command, args: args2 } = mcpServerCommand();
+  return JSON.stringify({ command, args: args2 }, null, 2);
+}
+
+// src/lib/mcp-stdio-test.ts
+async function testMcpStdioSubprocess() {
+  const entry = resolveCliEntry();
+  if (!entry)
+    return { ok: false };
+  return new Promise((resolve14) => {
+    const child = (0, import_child_process2.spawn)(process.execPath, [entry, "mcp"], {
+      stdio: ["pipe", "pipe", "pipe"],
+      env: { ...process.env, HYV_POSTINSTALL_QUIET: "1" }
+    });
+    let buffer = "";
+    let settled = false;
+    const finish = (ok, toolCount) => {
+      if (settled)
+        return;
+      settled = true;
+      clearTimeout(timeout);
+      try {
+        child.kill();
+      } catch {
+      }
+      resolve14({ ok, toolCount });
+    };
+    const timeout = setTimeout(() => finish(false), 1e4);
+    const handleLine = (line) => {
+      const trimmed = line.trim();
+      if (!trimmed.startsWith("{"))
+        return;
+      try {
+        const msg = JSON.parse(trimmed);
+        if (msg.id === 2 && Array.isArray(msg.result?.tools) && msg.result.tools.length > 0) {
+          finish(true, msg.result.tools.length);
+        }
+      } catch {
+      }
+    };
+    child.stdout.on("data", (chunk) => {
+      buffer += chunk.toString();
+      const lines = buffer.split("\n");
+      buffer = lines.pop() || "";
+      for (const line of lines)
+        handleLine(line);
+    });
+    child.on("error", () => finish(false));
+    child.on("exit", () => {
+      if (!settled) {
+        handleLine(buffer);
+        finish(buffer.includes("hyv_scan"));
+      }
+    });
+    setTimeout(() => {
+      const send2 = (payload) => {
+        child.stdin.write(`${JSON.stringify(payload)}
+`);
+      };
+      send2({
+        jsonrpc: "2.0",
+        id: 1,
+        method: "initialize",
+        params: {
+          protocolVersion: "2024-11-05",
+          capabilities: {},
+          clientInfo: { name: "hyv-self-test", version: "1.0" }
+        }
+      });
+      send2({ jsonrpc: "2.0", method: "notifications/initialized" });
+      send2({ jsonrpc: "2.0", id: 2, method: "tools/list", params: {} });
+    }, 500);
+  });
+}
+
+// src/commands/doctor.ts
 var HOME = os5.homedir();
 var IS_WIN = process.platform === "win32";
 function claudeDesktopDir() {
   if (IS_WIN)
-    return path14.join(HOME, "AppData", "Roaming", "Claude");
+    return path15.join(HOME, "AppData", "Roaming", "Claude");
   if (process.platform === "linux")
-    return path14.join(HOME, ".config", "Claude");
-  return path14.join(HOME, "Library", "Application Support", "Claude");
+    return path15.join(HOME, ".config", "Claude");
+  return path15.join(HOME, "Library", "Application Support", "Claude");
+}
+function isOwnerOnlyFile(filePath) {
+  try {
+    if (!fs14.existsSync(filePath))
+      return true;
+    const mode = fs14.statSync(filePath).mode & 511;
+    return (mode & 63) === 0;
+  } catch {
+    return false;
+  }
 }
 function readMcpHyv(configFile) {
   try {
-    if (!fs13.existsSync(configFile))
+    if (!fs14.existsSync(configFile))
       return false;
-    const cfg = JSON.parse(fs13.readFileSync(configFile, "utf-8"));
+    const cfg = JSON.parse(fs14.readFileSync(configFile, "utf-8"));
     return Boolean(cfg.mcpServers?.hyv);
   } catch {
     return false;
@@ -13082,28 +13245,28 @@ function registerDoctorCommand(program3) {
     console.log(import_chalk16.default.dim("tip: run hyv welcome for free capabilities\n"));
     console.log(import_chalk16.default.dim("checking cli installation..."));
     const cliPath = process.argv[1];
-    if (cliPath && fs13.existsSync(cliPath)) {
+    if (cliPath && fs14.existsSync(cliPath)) {
       console.log(import_chalk16.default.green("  \u2713 cli installed"));
     } else {
       console.log(import_chalk16.default.red("  \u2717 cli not found"));
       issues++;
     }
     console.log(import_chalk16.default.dim("checking .hyv directory..."));
-    if (fs13.existsSync(HYV_DIR)) {
+    if (fs14.existsSync(HYV_DIR)) {
       console.log(import_chalk16.default.green("  \u2713 .hyv directory exists"));
     } else {
       console.log(import_chalk16.default.yellow("  ! .hyv directory missing \u2014 creating..."));
-      fs13.mkdirSync(HYV_DIR, { recursive: true, mode: 448 });
+      fs14.mkdirSync(HYV_DIR, { recursive: true, mode: 448 });
       fixed++;
     }
     console.log(import_chalk16.default.dim("checking cache..."));
     const diskProfiles = listDiskCachedProfiles();
-    const syncMeta = path14.join(CACHE_DIR, "sync-meta.json");
-    if (diskProfiles.length > 0 || fs13.existsSync(syncMeta)) {
+    const syncMeta = path15.join(CACHE_DIR, "sync-meta.json");
+    if (diskProfiles.length > 0 || fs14.existsSync(syncMeta)) {
       console.log(import_chalk16.default.green(`  \u2713 profile cache (${diskProfiles.length} full profile(s))`));
-      if (fs13.existsSync(syncMeta)) {
+      if (fs14.existsSync(syncMeta)) {
         try {
-          const meta = JSON.parse(fs13.readFileSync(syncMeta, "utf-8"));
+          const meta = JSON.parse(fs14.readFileSync(syncMeta, "utf-8"));
           console.log(import_chalk16.default.dim(`    last sync: ${meta.synced_at || "unknown"}`));
         } catch {
         }
@@ -13111,6 +13274,26 @@ function registerDoctorCommand(program3) {
     } else {
       console.log(import_chalk16.default.dim("  - no full profile cache (free local engine still works)"));
     }
+    console.log(import_chalk16.default.dim("checking file permissions..."));
+    if (fs14.existsSync(HYV_DIR)) {
+      const hyvMode = fs14.statSync(HYV_DIR).mode & 511;
+      if ((hyvMode & 63) === 0) {
+        console.log(import_chalk16.default.green("  \u2713 .hyv directory permissions"));
+      } else {
+        console.log(import_chalk16.default.yellow("  ! .hyv directory is world/group accessible"));
+        console.log(import_chalk16.default.dim("    run: chmod 700 ~/.hyv"));
+        issues++;
+      }
+    }
+    if (fs14.existsSync(AUTH_FILE)) {
+      if (isOwnerOnlyFile(AUTH_FILE)) {
+        console.log(import_chalk16.default.green("  \u2713 auth.json permissions"));
+      } else {
+        console.log(import_chalk16.default.yellow("  ! auth.json is world/group readable"));
+        console.log(import_chalk16.default.dim("    run: chmod 600 ~/.hyv/auth.json"));
+        issues++;
+      }
+    }
     console.log(import_chalk16.default.dim("checking authentication..."));
     if (isInitialized()) {
       const auth = readAuth();
@@ -13135,9 +13318,9 @@ function registerDoctorCommand(program3) {
       console.log(import_chalk16.default.dim("    run: hyv init for profiles + learning"));
     }
     console.log(import_chalk16.default.dim("checking voice profile..."));
-    const voiceMd = path14.join(HYV_DIR, "voice.md");
-    const hasVoiceMd = fs13.existsSync(voiceMd) && fs13.readFileSync(voiceMd, "utf-8").trim().length > 50;
-    const profileFiles = fs13.existsSync(PROFILES_DIR) ? fs13.readdirSync(PROFILES_DIR).filter((f) => f.endsWith(".md") && f !== "voice.md") : [];
+    const voiceMd = path15.join(HYV_DIR, "voice.md");
+    const hasVoiceMd = fs14.existsSync(voiceMd) && fs14.readFileSync(voiceMd, "utf-8").trim().length > 50;
+    const profileFiles = fs14.existsSync(PROFILES_DIR) ? fs14.readdirSync(PROFILES_DIR).filter((f) => f.endsWith(".md") && f !== "voice.md") : [];
     if (hasVoiceMd || profileFiles.length > 0 || diskProfiles.length > 0) {
       if (hasVoiceMd)
         console.log(import_chalk16.default.green("  \u2713 voice.md exists"));
@@ -13150,14 +13333,21 @@ function registerDoctorCommand(program3) {
       console.log(import_chalk16.default.dim("    run: hyv new <name> or hyv init"));
     }
     console.log(import_chalk16.default.dim("checking agent configurations..."));
+    const cursorLegacyRule = path15.join(HOME, ".cursor", "rules", "hyv.md");
+    const cursorRule = path15.join(HOME, ".cursor", "rules", "hyv.mdc");
+    if (fs14.existsSync(cursorLegacyRule) && fs14.existsSync(cursorRule)) {
+      console.log(import_chalk16.default.yellow("  ! stale cursor rule ~/.cursor/rules/hyv.md (use hyv.mdc)"));
+      console.log(import_chalk16.default.dim("    run: rm ~/.cursor/rules/hyv.md  (or hyv doctor --fix-agents)"));
+      issues++;
+    }
     const agentChecks = [
-      { name: "claude desktop mcp", ok: readMcpHyv(path14.join(claudeDesktopDir(), "claude_desktop_config.json")) },
-      { name: "cursor mcp", ok: readMcpHyv(path14.join(HOME, ".cursor", "mcp.json")) },
-      { name: "cursor rule", ok: fs13.existsSync(path14.join(HOME, ".cursor", "rules", "hyv.mdc")) },
-      { name: "claude code command", ok: fs13.existsSync(path14.join(HOME, ".claude", "commands", "hyv.md")) },
-      { name: "claude code skill", ok: fs13.existsSync(path14.join(HOME, ".claude", "skills", "hold-your-voice", "SKILL.md")) },
-      { name: "codex agents", ok: fs13.existsSync(path14.join(HOME, ".codex", "AGENTS.md")) && fs13.readFileSync(path14.join(HOME, ".codex", "AGENTS.md"), "utf-8").includes("hyv") },
-      { name: "command code skill", ok: fs13.existsSync(path14.join(HOME, ".commandcode", "skills", "hyv", "SKILL.md")) }
+      { name: "claude desktop mcp", ok: readMcpHyv(path15.join(claudeDesktopDir(), "claude_desktop_config.json")) },
+      { name: "cursor mcp", ok: readMcpHyv(path15.join(HOME, ".cursor", "mcp.json")) },
+      { name: "cursor rule", ok: fs14.existsSync(cursorRule) },
+      { name: "claude code command", ok: fs14.existsSync(path15.join(HOME, ".claude", "commands", "hyv.md")) },
+      { name: "claude code skill", ok: fs14.existsSync(path15.join(HOME, ".claude", "skills", "hold-your-voice", "SKILL.md")) },
+      { name: "codex agents", ok: fs14.existsSync(path15.join(HOME, ".codex", "AGENTS.md")) && fs14.readFileSync(path15.join(HOME, ".codex", "AGENTS.md"), "utf-8").includes("hyv") },
+      { name: "command code skill", ok: fs14.existsSync(path15.join(HOME, ".commandcode", "skills", "hyv", "SKILL.md")) }
     ];
     for (const agent of agentChecks) {
       if (agent.ok) {
@@ -13168,8 +13358,8 @@ function registerDoctorCommand(program3) {
     }
     if (opts.fixAgents) {
       try {
-        const pkgDir = path14.resolve(__dirname, "..");
-        const { setupAgents } = require(path14.join(pkgDir, "scripts", "postinstall-lib.js"));
+        const pkgDir = path15.resolve(__dirname, "..");
+        const { setupAgents } = require(path15.join(pkgDir, "scripts", "postinstall-lib.js"));
         const result = setupAgents({ pkgDir, quiet: true });
         console.log(import_chalk16.default.green(`  \u2713 re-ran agent setup (${result.configured.join(", ") || "no changes"})`));
         if (result.warnings.length) {
@@ -13181,8 +13371,8 @@ function registerDoctorCommand(program3) {
       }
     }
     console.log(import_chalk16.default.dim("checking mcp server..."));
-    const claudeMcp = readMcpHyv(path14.join(claudeDesktopDir(), "claude_desktop_config.json"));
-    const cursorMcp = readMcpHyv(path14.join(HOME, ".cursor", "mcp.json"));
+    const claudeMcp = readMcpHyv(path15.join(claudeDesktopDir(), "claude_desktop_config.json"));
+    const cursorMcp = readMcpHyv(path15.join(HOME, ".cursor", "mcp.json"));
     if (claudeMcp || cursorMcp) {
       if (claudeMcp)
         console.log(import_chalk16.default.green("  \u2713 mcp configured for claude desktop"));
@@ -13192,6 +13382,22 @@ function registerDoctorCommand(program3) {
       console.log(import_chalk16.default.yellow("  ! mcp not configured \u2014 run: hyv doctor --fix-agents or hyv mcp --setup"));
       issues++;
     }
+    try {
+      const stdio = await testMcpStdioSubprocess();
+      if (stdio.ok && (stdio.toolCount || 0) >= 10) {
+        console.log(import_chalk16.default.green(`  \u2713 mcp stdio subprocess healthy (${stdio.toolCount} tools)`));
+      } else if (stdio.ok) {
+        console.log(import_chalk16.default.yellow(`  ! mcp stdio ok but only ${stdio.toolCount || 0} tools`));
+        issues++;
+      } else {
+        console.log(import_chalk16.default.red("  \u2717 mcp stdio subprocess failed"));
+        console.log(import_chalk16.default.dim("    run: hyv mcp --test"));
+        issues++;
+      }
+    } catch (err) {
+      console.log(import_chalk16.default.red(`  \u2717 mcp stdio probe failed: ${err.message}`));
+      issues++;
+    }
     console.log("");
     if (issues === 0 && fixed === 0) {
       console.log(import_chalk16.default.green("\u2713 everything looks good!"));
@@ -13268,15 +13474,51 @@ error: ${error.message}
 }
 
 // src/commands/fix.ts
-var import_chalk18 = __toESM(require_source());
-var fs14 = __toESM(require("fs"));
-var path15 = __toESM(require("path"));
+var import_chalk19 = __toESM(require_source());
 init_pipeline();
 init_local_profile();
 init_access();
 init_config();
+
+// src/lib/destructive-write.ts
+var fs15 = __toESM(require("fs"));
+var path16 = __toESM(require("path"));
+var readline = __toESM(require("readline"));
+var import_chalk18 = __toESM(require_source());
+async function confirmDestructiveWrite(options) {
+  if (options.yes)
+    return true;
+  const label = options.target ? `${options.action} (${options.target})` : options.action;
+  if (!process.stdin.isTTY) {
+    console.error(import_chalk18.default.red("\nRefusing destructive write without confirmation (non-interactive)."));
+    console.error(import_chalk18.default.dim("  Re-run with --yes to create .bak backups and proceed.\n"));
+    return false;
+  }
+  const question = `
+${label}
+A .bak backup will be created. Proceed? [y/N] `;
+  const answer = await new Promise((resolve14) => {
+    const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+    rl.question(question, (value) => {
+      rl.close();
+      resolve14(value.trim().toLowerCase());
+    });
+  });
+  return answer === "y" || answer === "yes";
+}
+function writeInPlaceWithBackup(filePath, content) {
+  const backupPath = filePath + ".bak";
+  fs15.copyFileSync(filePath, backupPath);
+  fs15.writeFileSync(filePath, content);
+  return backupPath;
+}
+function backupBasename(filePath) {
+  return path16.basename(filePath) + ".bak";
+}
+
+// src/commands/fix.ts
 function registerFixCommand(program3) {
-  program3.command("fix").description("Apply auto-fixes (word swaps, connector removals) without an LLM").argument("<file>", "File to fix (or - for stdin)").option("--dry-run", "Show changes without writing").option("-i, --in-place", "Write fixes back to the file").option("--profile <name>", "Voice profile for never-list checks").option("--ignore <rules>", "Comma-separated rule IDs to skip").option("--format <type>", "Output format (text or json)", "text").action(async (file, options) => {
+  program3.command("fix").description("Apply auto-fixes (word swaps, connector removals) without an LLM").argument("<file>", "File to fix (or - for stdin)").option("--dry-run", "Show changes without writing").option("-i, --in-place", "Write fixes back to the file").option("-y, --yes", "Confirm in-place write without prompting (creates .bak backup)").option("--profile <name>", "Voice profile for never-list checks").option("--ignore <rules>", "Comma-separated rule IDs to skip").option("--format <type>", "Output format (text or json)", "text").action(async (file, options) => {
     try {
       const profile = await loadProfileForCommand(options.profile);
       const { text, path: filePath } = readText(file);
@@ -13285,9 +13527,9 @@ function registerFixCommand(program3) {
         if (options.format === "json") {
           console.log(JSON.stringify({ file: filePath, autoFixes: 0, llmIssues: result.stats.needsLLM, changes: [] }));
         } else {
-          console.log(import_chalk18.default.green("\n\u2713 No auto-fixable issues found."));
+          console.log(import_chalk19.default.green("\n\u2713 No auto-fixable issues found."));
           if (result.stats.needsLLM > 0) {
-            console.log(import_chalk18.default.dim(`  ${result.stats.needsLLM} issues need LLM rewrite \u2014 run: hyv rewrite ${file}`));
+            console.log(import_chalk19.default.dim(`  ${result.stats.needsLLM} issues need LLM rewrite \u2014 run: hyv rewrite ${file}`));
           }
         }
         return;
@@ -13301,24 +13543,30 @@ function registerFixCommand(program3) {
           fixed: options.dryRun ? void 0 : result.fixed
         }, null, 2));
       } else {
-        console.log(import_chalk18.default.dim(`
+        console.log(import_chalk19.default.dim(`
 hyv fix ${filePath}
 `));
         for (const change of result.changes) {
-          console.log(import_chalk18.default.dim(`  Line ${change.line}: `) + import_chalk18.default.red(change.before) + import_chalk18.default.dim(" \u2192 ") + import_chalk18.default.green(change.after));
+          console.log(import_chalk19.default.dim(`  Line ${change.line}: `) + import_chalk19.default.red(change.before) + import_chalk19.default.dim(" \u2192 ") + import_chalk19.default.green(change.after));
         }
-        console.log(import_chalk18.default.green(`
+        console.log(import_chalk19.default.green(`
   \u2713 ${result.changes.length} auto-fix${result.changes.length === 1 ? "" : "es"} applied`));
         if (result.stats.needsLLM > 0) {
-          console.log(import_chalk18.default.dim(`  ${result.stats.needsLLM} issues need LLM rewrite \u2014 run: hyv rewrite ${file}`));
+          console.log(import_chalk19.default.dim(`  ${result.stats.needsLLM} issues need LLM rewrite \u2014 run: hyv rewrite ${file}`));
         }
       }
       if (!options.dryRun) {
         if (options.inPlace && filePath !== "stdin") {
-          const backupPath = filePath + ".bak";
-          fs14.copyFileSync(filePath, backupPath);
-          fs14.writeFileSync(filePath, result.fixed);
-          console.log(import_chalk18.default.dim(`  Written to ${filePath} (backup: ${path15.basename(backupPath)})`));
+          const confirmed = await confirmDestructiveWrite({
+            yes: options.yes,
+            action: "Apply auto-fixes in-place",
+            target: filePath
+          });
+          if (!confirmed) {
+            process.exit(1);
+          }
+          const backupPath = writeInPlaceWithBackup(filePath, result.fixed);
+          console.log(import_chalk19.default.dim(`  Written to ${filePath} (backup: ${backupBasename(filePath)})`));
           saveLastEditSession({
             original_path: filePath,
             edited_path: filePath,
@@ -13326,7 +13574,7 @@ hyv fix ${filePath}
             edited_text: result.fixed,
             profile: options.profile
           });
-          console.log(import_chalk18.default.dim("  Tip: hyv reinforce --last to teach your profile from this edit"));
+          console.log(import_chalk19.default.dim("  Tip: hyv reinforce --last to teach your profile from this edit"));
         } else if (filePath === "stdin" || !options.inPlace) {
           process.stdout.write("\n" + result.fixed + "\n");
           if (filePath !== "stdin") {
@@ -13342,14 +13590,14 @@ hyv fix ${filePath}
       }
       await maybeShowLimitedModeHint(!!profile);
     } catch (error) {
-      console.error(import_chalk18.default.red(`Error: ${error.message}`));
+      console.error(import_chalk19.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/check.ts
-var import_chalk19 = __toESM(require_source());
+var import_chalk20 = __toESM(require_source());
 init_pipeline();
 init_local_profile();
 init_access();
@@ -13359,20 +13607,20 @@ function registerCheckCommand(program3) {
       const profile = await loadProfileForCommand(options.profile);
       let inputText = text;
       if (text === "-") {
-        const fs25 = require("fs");
+        const fs26 = require("fs");
         if (process.stdin.isTTY) {
-          console.error(import_chalk19.default.red("No input provided. Pipe content or pass text as argument."));
+          console.error(import_chalk20.default.red("No input provided. Pipe content or pass text as argument."));
           process.exit(1);
         }
-        inputText = fs25.readFileSync(0, "utf-8");
+        inputText = fs26.readFileSync(0, "utf-8");
       }
       if (!inputText.trim()) {
-        console.error(import_chalk19.default.red("No text provided."));
+        console.error(import_chalk20.default.red("No text provided."));
         process.exit(1);
       }
-      const fs24 = require("fs");
-      if (text !== "-" && fs24.existsSync(text)) {
-        console.log(import_chalk19.default.yellow(`"${text}" looks like a file. Did you mean: hyv scan ${text}`));
+      const fs25 = require("fs");
+      if (text !== "-" && fs25.existsSync(text)) {
+        console.log(import_chalk20.default.yellow(`"${text}" looks like a file. Did you mean: hyv scan ${text}`));
         process.exit(1);
       }
       const result = runPipeline(inputText, profile, false);
@@ -13396,30 +13644,30 @@ function registerCheckCommand(program3) {
         }, null, 2));
       } else {
         if (result.stats.totalSignals === 0) {
-          console.log(import_chalk19.default.green("\n\u2713 Clean \u2014 no AI patterns found."));
-          console.log(import_chalk19.default.dim(`  score: ${result.score}/100`));
+          console.log(import_chalk20.default.green("\n\u2713 Clean \u2014 no AI patterns found."));
+          console.log(import_chalk20.default.dim(`  score: ${result.score}/100`));
         } else {
           console.log("");
           printGroupedSignals(result.signalMap.signals.slice(0, 15), profile);
           if (result.signalMap.signals.length > 15) {
-            console.log(import_chalk19.default.dim(`  ... and ${result.signalMap.signals.length - 15} more`));
+            console.log(import_chalk20.default.dim(`  ... and ${result.signalMap.signals.length - 15} more`));
           }
-          console.log(import_chalk19.default.yellow(`
+          console.log(import_chalk20.default.yellow(`
   ${result.stats.totalSignals} issues (${result.stats.red} red, ${result.stats.yellow} yellow)`));
-          console.log(import_chalk19.default.dim(`  score: ${result.score}/100`));
+          console.log(import_chalk20.default.dim(`  score: ${result.score}/100`));
         }
         await maybeShowLimitedModeHint(!!profile);
       }
       process.exit(result.stats.totalSignals > 0 ? 1 : 0);
     } catch (error) {
-      console.error(import_chalk19.default.red(`Error: ${error.message}`));
+      console.error(import_chalk20.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/score.ts
-var import_chalk20 = __toESM(require_source());
+var import_chalk21 = __toESM(require_source());
 init_pipeline();
 init_local_profile();
 function registerScoreCommand(program3) {
@@ -13444,14 +13692,14 @@ function registerScoreCommand(program3) {
         process.exit(1);
       }
     } catch (error) {
-      console.error(import_chalk20.default.red(`Error: ${error.message}`));
+      console.error(import_chalk21.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/diff.ts
-var import_chalk21 = __toESM(require_source());
+var import_chalk22 = __toESM(require_source());
 init_pipeline();
 init_local_profile();
 function registerDiffCommand(program3) {
@@ -13461,9 +13709,9 @@ function registerDiffCommand(program3) {
       const { text, path: filePath } = readText(file);
       const result = runPipeline(text, profile, true);
       if (result.changes.length === 0) {
-        console.log(import_chalk21.default.green("\n\u2713 No auto-fixable changes."));
+        console.log(import_chalk22.default.green("\n\u2713 No auto-fixable changes."));
         if (result.stats.needsLLM > 0) {
-          console.log(import_chalk21.default.dim(`  ${result.stats.needsLLM} issues need LLM rewrite`));
+          console.log(import_chalk22.default.dim(`  ${result.stats.needsLLM} issues need LLM rewrite`));
         }
         return;
       }
@@ -13478,42 +13726,42 @@ function registerDiffCommand(program3) {
       const originalLines = text.split("\n");
       const fixedLines = result.fixed.split("\n");
       const contextN = parseInt(options.context, 10);
-      console.log(import_chalk21.default.dim(`--- ${filePath}`));
-      console.log(import_chalk21.default.dim(`+++ ${filePath} (fixed)`));
+      console.log(import_chalk22.default.dim(`--- ${filePath}`));
+      console.log(import_chalk22.default.dim(`+++ ${filePath} (fixed)`));
       for (const change of result.changes) {
         const lineIdx = change.line - 1;
         const start = Math.max(0, lineIdx - contextN);
         const end = Math.min(originalLines.length, lineIdx + contextN + 1);
-        console.log(import_chalk21.default.dim(`@@ -${start + 1},${end - start} +${start + 1},${end - start} @@`));
+        console.log(import_chalk22.default.dim(`@@ -${start + 1},${end - start} +${start + 1},${end - start} @@`));
         for (let i = start; i < end; i++) {
           if (i === lineIdx) {
-            console.log(import_chalk21.default.red(`-${originalLines[i]}`));
-            console.log(import_chalk21.default.green(`+${fixedLines[i]}`));
+            console.log(import_chalk22.default.red(`-${originalLines[i]}`));
+            console.log(import_chalk22.default.green(`+${fixedLines[i]}`));
           } else {
-            console.log(import_chalk21.default.dim(` ${originalLines[i]}`));
+            console.log(import_chalk22.default.dim(` ${originalLines[i]}`));
           }
         }
       }
-      console.log(import_chalk21.default.green(`
+      console.log(import_chalk22.default.green(`
   ${result.changes.length} auto-fix${result.changes.length === 1 ? "" : "es"} available`));
-      console.log(import_chalk21.default.dim(`  run: hyv fix ${file} -i  to apply`));
+      console.log(import_chalk22.default.dim(`  run: hyv fix ${file} -i  to apply`));
       if (options.apply && filePath !== "stdin") {
-        const fs24 = require("fs");
-        const path23 = require("path");
+        const fs25 = require("fs");
+        const path24 = require("path");
         const backupPath = filePath + ".bak";
-        fs24.copyFileSync(filePath, backupPath);
-        fs24.writeFileSync(filePath, result.fixed);
-        console.log(import_chalk21.default.green(`  \u2713 Applied. Backup: ${path23.basename(backupPath)}`));
+        fs25.copyFileSync(filePath, backupPath);
+        fs25.writeFileSync(filePath, result.fixed);
+        console.log(import_chalk22.default.green(`  \u2713 Applied. Backup: ${path24.basename(backupPath)}`));
       }
     } catch (error) {
-      console.error(import_chalk21.default.red(`Error: ${error.message}`));
+      console.error(import_chalk22.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/rules.ts
-var import_chalk22 = __toESM(require_source());
+var import_chalk23 = __toESM(require_source());
 init_config();
 var RULE_CATALOG = [
   // AI Overused Words
@@ -13607,7 +13855,7 @@ function registerRulesCommand(program3) {
         for (const id of ids)
           disabledRules.delete(id);
         writeConfig({ ...config, disabled_rules: [...disabledRules] });
-        console.log(import_chalk22.default.green(`
+        console.log(import_chalk23.default.green(`
 \u2713 Enabled: ${ids.join(", ")}`));
         return;
       }
@@ -13616,13 +13864,13 @@ function registerRulesCommand(program3) {
         for (const id of ids)
           disabledRules.add(id);
         writeConfig({ ...config, disabled_rules: [...disabledRules] });
-        console.log(import_chalk22.default.green(`
+        console.log(import_chalk23.default.green(`
 \u2713 Disabled: ${ids.join(", ")}`));
         return;
       }
       if (options.reset) {
         writeConfig({ ...config, disabled_rules: [] });
-        console.log(import_chalk22.default.green("\n\u2713 All rules reset to default (enabled)"));
+        console.log(import_chalk23.default.green("\n\u2713 All rules reset to default (enabled)"));
         return;
       }
       let rules = [...RULE_CATALOG];
@@ -13650,40 +13898,40 @@ function registerRulesCommand(program3) {
       }
       console.log("");
       for (const [cat, catRules] of categories) {
-        console.log(import_chalk22.default.bold(`  ${cat} rules (${catRules.length})
+        console.log(import_chalk23.default.bold(`  ${cat} rules (${catRules.length})
 `));
-        console.log(import_chalk22.default.dim("  ID                      Sev   AutoFix  Status"));
-        console.log(import_chalk22.default.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
+        console.log(import_chalk23.default.dim("  ID                      Sev   AutoFix  Status"));
+        console.log(import_chalk23.default.dim("  \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500"));
         for (const rule of catRules) {
-          const sev = rule.severity === "red" ? import_chalk22.default.red("red") : import_chalk22.default.yellow("yel");
-          const fix = rule.autoFixable ? import_chalk22.default.green("  \u2713") : import_chalk22.default.dim("  \u2717");
-          const enabled2 = disabledRules.has(rule.id) ? import_chalk22.default.red("  \u2717 disabled") : import_chalk22.default.green("  \u2713 enabled");
+          const sev = rule.severity === "red" ? import_chalk23.default.red("red") : import_chalk23.default.yellow("yel");
+          const fix = rule.autoFixable ? import_chalk23.default.green("  \u2713") : import_chalk23.default.dim("  \u2717");
+          const enabled2 = disabledRules.has(rule.id) ? import_chalk23.default.red("  \u2717 disabled") : import_chalk23.default.green("  \u2713 enabled");
           const id = rule.id.padEnd(24);
-          console.log(`  ${import_chalk22.default.dim(id)} ${sev} ${fix}  ${enabled2}`);
+          console.log(`  ${import_chalk23.default.dim(id)} ${sev} ${fix}  ${enabled2}`);
         }
         console.log("");
       }
       const enabled = rules.filter((r) => !disabledRules.has(r.id)).length;
       const disabled = rules.length - enabled;
-      console.log(import_chalk22.default.dim(`  ${rules.length} rules, ${enabled} enabled, ${disabled} disabled`));
-      console.log(import_chalk22.default.dim(`  toggle: hyv rules --disable <id>`));
-      console.log(import_chalk22.default.dim(`  reset:  hyv rules --reset
+      console.log(import_chalk23.default.dim(`  ${rules.length} rules, ${enabled} enabled, ${disabled} disabled`));
+      console.log(import_chalk23.default.dim(`  toggle: hyv rules --disable <id>`));
+      console.log(import_chalk23.default.dim(`  reset:  hyv rules --reset
 `));
     } catch (error) {
-      console.error(import_chalk22.default.red(`Error: ${error.message}`));
+      console.error(import_chalk23.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/batch.ts
-var import_chalk23 = __toESM(require_source());
-var fs15 = __toESM(require("fs"));
-var path16 = __toESM(require("path"));
+var import_chalk24 = __toESM(require_source());
+var fs16 = __toESM(require("fs"));
+var path17 = __toESM(require("path"));
 init_pipeline();
 init_local_profile();
 function registerBatchCommand(program3) {
-  program3.command("batch").description("Scan or fix multiple files matching a glob").argument("<pattern>", 'Glob pattern (e.g., "posts/**/*.md")').option("--fix", "Apply auto-fixes (default: scan only)").option("-i, --in-place", "Write fixes back to files").option("-y, --yes", "Confirm destructive in-place fixes without prompting").option("--threshold <n>", "Fail if any file score < threshold").option("--fail-on-hit", "Exit non-zero if any file has issues").option("--sort <field>", "Sort by: issues, score, name", "issues").option("--format <type>", "Output format (text, json, csv)", "text").option("--profile <name>", "Voice profile").option("--ignore <patterns>", "Comma-separated glob ignores").action(async (pattern, options) => {
+  program3.command("batch").description("Scan or fix multiple files matching a glob").argument("<pattern>", 'Glob pattern (e.g., "posts/**/*.md")').option("--fix", "Apply auto-fixes (default: scan only)").option("-i, --in-place", "Write fixes back to files").option("-y, --yes", "Confirm destructive in-place fixes without prompting").option("--threshold <n>", "Fail if any file score < threshold").option("--fail-on-hit", "Exit with code 2 if any file has issues").option("--sort <field>", "Sort by: issues, score, name", "issues").option("--format <type>", "Output format (text, json, csv)", "text").option("--profile <name>", "Voice profile").option("--ignore <patterns>", "Comma-separated glob ignores").action(async (pattern, options) => {
     try {
       const profile = await loadProfileForCommand(options.profile);
       const glob = require_index_min();
@@ -13692,26 +13940,30 @@ function registerBatchCommand(program3) {
         nodir: true
       });
       if (files.length === 0) {
-        console.log(import_chalk23.default.yellow(`
+        console.log(import_chalk24.default.yellow(`
 No files matching: ${pattern}`));
         return;
       }
-      if (options.fix && options.inPlace && !options.yes) {
-        console.error(import_chalk23.default.red("\nRefusing to write fixes in-place without confirmation."));
-        console.error(import_chalk23.default.dim("  Re-run with --yes to create .bak backups and apply fixes.\n"));
-        process.exit(1);
+      if (options.fix && options.inPlace) {
+        const confirmed = await confirmDestructiveWrite({
+          yes: options.yes,
+          action: `Apply auto-fixes in-place to ${files.length} file(s)`,
+          target: pattern
+        });
+        if (!confirmed)
+          process.exit(1);
       }
       if (options.format === "text") {
-        console.log(import_chalk23.default.dim(`
+        console.log(import_chalk24.default.dim(`
   scanning ${files.length} file${files.length === 1 ? "" : "s"}...
 `));
       }
       const results = [];
       for (const file of files) {
-        const absPath = path16.resolve(file);
-        if (!fs15.existsSync(absPath))
+        const absPath = path17.resolve(file);
+        if (!fs16.existsSync(absPath))
           continue;
-        const text = fs15.readFileSync(absPath, "utf-8");
+        const text = fs16.readFileSync(absPath, "utf-8");
         const result = runPipeline(text, profile, options.fix || false);
         results.push({
           file,
@@ -13722,9 +13974,7 @@ No files matching: ${pattern}`));
           autoFixes: result.changes.length
         });
         if (options.fix && options.inPlace && result.changes.length > 0) {
-          const backupPath = absPath + ".bak";
-          fs15.copyFileSync(absPath, backupPath);
-          fs15.writeFileSync(absPath, result.fixed);
+          writeInPlaceWithBackup(absPath, result.fixed);
         }
       }
       if (options.sort === "score") {
@@ -13743,23 +13993,23 @@ No files matching: ${pattern}`));
         }
       } else {
         for (const r of results) {
-          const icon = r.issues > 0 ? import_chalk23.default.red("\u25CF") : import_chalk23.default.green("\u25CB");
-          const score = r.score < 60 ? import_chalk23.default.red(r.score) : r.score < 80 ? import_chalk23.default.yellow(r.score) : import_chalk23.default.green(r.score);
-          const issueStr = r.issues > 0 ? import_chalk23.default.red(`${r.issues} issues`) : import_chalk23.default.green("clean");
+          const icon = r.issues > 0 ? import_chalk24.default.red("\u25CF") : import_chalk24.default.green("\u25CB");
+          const score = r.score < 60 ? import_chalk24.default.red(r.score) : r.score < 80 ? import_chalk24.default.yellow(r.score) : import_chalk24.default.green(r.score);
+          const issueStr = r.issues > 0 ? import_chalk24.default.red(`${r.issues} issues`) : import_chalk24.default.green("clean");
           console.log(`  ${icon} ${r.file.padEnd(40)} ${issueStr.padEnd(20)} score: ${score}`);
         }
         const withIssues = results.filter((r) => r.issues > 0).length;
         const totalIssues = results.reduce((sum, r) => sum + r.issues, 0);
         const worst = results.reduce((min, r) => r.score < min.score ? r : min, results[0]);
-        console.log(import_chalk23.default.dim(`
+        console.log(import_chalk24.default.dim(`
   \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500`));
-        console.log(import_chalk23.default.dim(`  ${results.length} files, ${withIssues} with issues, ${totalIssues} total issues`));
+        console.log(import_chalk24.default.dim(`  ${results.length} files, ${withIssues} with issues, ${totalIssues} total issues`));
         if (withIssues > 0) {
-          console.log(import_chalk23.default.dim(`  worst: ${worst.file} (${worst.score}/100)`));
+          console.log(import_chalk24.default.dim(`  worst: ${worst.file} (${worst.score}/100)`));
         }
         if (options.fix && options.inPlace) {
           const fixed = results.filter((r) => r.autoFixes > 0);
-          console.log(import_chalk23.default.green(`
+          console.log(import_chalk24.default.green(`
   \u2713 ${fixed.reduce((sum, r) => sum + r.autoFixes, 0)} auto-fixes applied across ${fixed.length} files`));
         }
       }
@@ -13771,108 +14021,114 @@ No files matching: ${pattern}`));
       if (belowThreshold)
         process.exit(1);
     } catch (error) {
-      console.error(import_chalk23.default.red(`Error: ${error.message}`));
+      console.error(import_chalk24.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/watch.ts
-var import_chalk24 = __toESM(require_source());
-var fs16 = __toESM(require("fs"));
-var path17 = __toESM(require("path"));
+var import_chalk25 = __toESM(require_source());
+var fs17 = __toESM(require("fs"));
+var path18 = __toESM(require("path"));
 init_pipeline();
 init_local_profile();
 function registerWatchCommand(program3) {
   program3.command("watch").description("Watch a file and re-scan on every save").argument("<file>", "File to watch").option("--command <cmd>", "What to run on change: scan, score, fix", "scan").option("--debounce <ms>", "Delay after save before scanning", "300").option("--notify", "OS notification when issues found").option("-y, --yes", "Confirm destructive auto-fix writes without prompting").option("--profile <name>", "Voice profile").action(async (file, options) => {
     try {
       const profile = await loadProfileForCommand(options.profile);
-      const absPath = path17.resolve(file);
-      if (!fs16.existsSync(absPath)) {
-        console.error(import_chalk24.default.red(`File not found: ${absPath}`));
+      const absPath = path18.resolve(file);
+      if (!fs17.existsSync(absPath)) {
+        console.error(import_chalk25.default.red(`File not found: ${absPath}`));
         process.exit(1);
       }
-      if (options.command === "fix" && !options.yes) {
-        console.error(import_chalk24.default.red("\nRefusing to auto-fix on save without confirmation."));
-        console.error(import_chalk24.default.dim("  Re-run with --yes to create .bak backups before each fix.\n"));
-        process.exit(1);
+      if (options.command === "fix") {
+        const confirmed = await confirmDestructiveWrite({
+          yes: options.yes,
+          action: "Auto-fix on every save",
+          target: absPath
+        });
+        if (!confirmed)
+          process.exit(1);
       }
-      console.log(import_chalk24.default.dim(`
+      console.log(import_chalk25.default.dim(`
 watching ${absPath}`));
-      console.log(import_chalk24.default.dim(`command: ${options.command}  debounce: ${options.debounce}ms`));
-      console.log(import_chalk24.default.dim("ctrl+c to stop\n"));
+      console.log(import_chalk25.default.dim(`command: ${options.command}  debounce: ${options.debounce}ms`));
+      console.log(import_chalk25.default.dim("ctrl+c to stop\n"));
       let debounceTimer = null;
       const debounceMs = parseInt(options.debounce, 10);
       let scanCount = 0;
       let lastScore = 0;
+      let ignoreWatchUntil = 0;
       const runScan = () => {
-        const text = fs16.readFileSync(absPath, "utf-8");
+        const text = fs17.readFileSync(absPath, "utf-8");
         const result = runPipeline(text, profile, options.command === "fix");
         scanCount++;
         const now = (/* @__PURE__ */ new Date()).toLocaleTimeString("en-US", { hour12: false });
-        console.log(import_chalk24.default.dim(`[${now}] saved \u2014 ${options.command}ing...`));
+        console.log(import_chalk25.default.dim(`[${now}] saved \u2014 ${options.command}ing...`));
         if (options.command === "score") {
           const score = result.score;
-          const color = score < 60 ? import_chalk24.default.red : score < 80 ? import_chalk24.default.yellow : import_chalk24.default.green;
+          const color = score < 60 ? import_chalk25.default.red : score < 80 ? import_chalk25.default.yellow : import_chalk25.default.green;
           console.log(`  ${color(score + "/100")}`);
           if (lastScore > 0 && score !== lastScore) {
             const delta = score - lastScore;
-            console.log(import_chalk24.default.dim(`  ${delta > 0 ? "\u2191" : "\u2193"} ${Math.abs(delta)} from last scan`));
+            console.log(import_chalk25.default.dim(`  ${delta > 0 ? "\u2191" : "\u2193"} ${Math.abs(delta)} from last scan`));
           }
           lastScore = score;
         } else if (options.command === "fix") {
           if (result.changes.length > 0) {
             for (const change of result.changes) {
-              console.log(import_chalk24.default.dim(`  Line ${change.line}: `) + import_chalk24.default.red(change.before) + import_chalk24.default.dim(" \u2192 ") + import_chalk24.default.green(change.after));
+              console.log(import_chalk25.default.dim(`  Line ${change.line}: `) + import_chalk25.default.red(change.before) + import_chalk25.default.dim(" \u2192 ") + import_chalk25.default.green(change.after));
             }
-            const backupPath = absPath + ".bak";
-            fs16.copyFileSync(absPath, backupPath);
-            fs16.writeFileSync(absPath, result.fixed);
-            console.log(import_chalk24.default.green(`  \u2713 ${result.changes.length} auto-fixes applied`));
+            ignoreWatchUntil = Date.now() + debounceMs + 200;
+            writeInPlaceWithBackup(absPath, result.fixed);
+            console.log(import_chalk25.default.green(`  \u2713 ${result.changes.length} auto-fixes applied`));
           } else {
-            console.log(import_chalk24.default.green("  \u2713 no auto-fixable issues"));
+            console.log(import_chalk25.default.green("  \u2713 no auto-fixable issues"));
           }
         } else {
           if (result.stats.totalSignals === 0) {
-            console.log(import_chalk24.default.green(`  \u2713 clean \u2014 score: ${result.score}/100`));
+            console.log(import_chalk25.default.green(`  \u2713 clean \u2014 score: ${result.score}/100`));
           } else {
-            console.log(import_chalk24.default.yellow(`  ${result.stats.totalSignals} issues (${result.stats.red} red, ${result.stats.yellow} yellow)  score: ${result.score}/100`));
+            console.log(import_chalk25.default.yellow(`  ${result.stats.totalSignals} issues (${result.stats.red} red, ${result.stats.yellow} yellow)  score: ${result.score}/100`));
             for (const signal of result.signalMap.signals.slice(0, 3)) {
-              const sev = signal.severity === "red" ? import_chalk24.default.red("\u25CF") : import_chalk24.default.yellow("\u25CB");
+              const sev = signal.severity === "red" ? import_chalk25.default.red("\u25CF") : import_chalk25.default.yellow("\u25CB");
               console.log(`  ${sev} line ${signal.line}: ${signal.id} \u2014 ${signal.suggestion}`);
             }
             if (result.signalMap.signals.length > 3) {
-              console.log(import_chalk24.default.dim(`  ... and ${result.signalMap.signals.length - 3} more`));
+              console.log(import_chalk25.default.dim(`  ... and ${result.signalMap.signals.length - 3} more`));
             }
           }
         }
         console.log("");
       };
       runScan();
-      fs16.watch(absPath, (eventType) => {
+      fs17.watch(absPath, (eventType) => {
         if (eventType !== "change")
           return;
+        if (Date.now() < ignoreWatchUntil)
+          return;
         if (debounceTimer)
           clearTimeout(debounceTimer);
         debounceTimer = setTimeout(runScan, debounceMs);
       });
       process.on("SIGINT", () => {
-        console.log(import_chalk24.default.dim(`
+        console.log(import_chalk25.default.dim(`
   ${scanCount} scans completed. exiting.`));
         process.exit(0);
       });
       await new Promise(() => {
       });
     } catch (error) {
-      console.error(import_chalk24.default.red(`Error: ${error.message}`));
+      console.error(import_chalk25.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/demo.ts
-var import_chalk25 = __toESM(require_source());
-var fs17 = __toESM(require("fs"));
+var import_chalk26 = __toESM(require_source());
+var fs18 = __toESM(require("fs"));
 var SAMPLES = {
   linkedin: {
     text: `In today's fast-paced digital landscape, it's important to note that leveraging the right tools is not just nice to have, but essential for success. Let's delve into the holistic approach that will transform your workflow.
@@ -13962,46 +14218,46 @@ function registerDemoCommand(program3) {
       const style = options.clean ? "clean" : options.style;
       const sample = SAMPLES[style];
       if (!sample) {
-        console.error(import_chalk25.default.red(`Unknown style: ${options.style}. Valid: ${Object.keys(SAMPLES).filter((k) => k !== "clean").join(", ")}`));
+        console.error(import_chalk26.default.red(`Unknown style: ${options.style}. Valid: ${Object.keys(SAMPLES).filter((k) => k !== "clean").join(", ")}`));
         process.exit(1);
       }
       if (options.output) {
         const outputPath = require("path").resolve(options.output);
-        fs17.writeFileSync(outputPath, sample.text);
-        console.log(import_chalk25.default.green(`
+        fs18.writeFileSync(outputPath, sample.text);
+        console.log(import_chalk26.default.green(`
 \u2713 Sample written to ${outputPath}`));
         if (sample.patterns.length > 0) {
-          console.log(import_chalk25.default.dim(`  Contains ${sample.patterns.length} AI patterns: ${sample.patterns.slice(0, 5).join(", ")}...`));
+          console.log(import_chalk26.default.dim(`  Contains ${sample.patterns.length} AI patterns: ${sample.patterns.slice(0, 5).join(", ")}...`));
         }
-        console.log(import_chalk25.default.dim(`
+        console.log(import_chalk26.default.dim(`
   Scan it:  hyv scan ${options.output}`));
-        console.log(import_chalk25.default.dim(`  Fix it:   hyv fix ${options.output}`));
+        console.log(import_chalk26.default.dim(`  Fix it:   hyv fix ${options.output}`));
       } else {
-        console.log(import_chalk25.default.bold(`
+        console.log(import_chalk26.default.bold(`
   \u2500\u2500\u2500 sample (${style}) \u2500\u2500\u2500
 `));
         console.log(sample.text);
-        console.log(import_chalk25.default.dim(`
+        console.log(import_chalk26.default.dim(`
   \u2500\u2500\u2500 end \u2500\u2500\u2500`));
         if (sample.patterns.length > 0) {
-          console.log(import_chalk25.default.dim(`
+          console.log(import_chalk26.default.dim(`
   ${sample.patterns.length} AI patterns embedded: ${sample.patterns.slice(0, 8).join(", ")}...`));
         }
-        console.log(import_chalk25.default.dim(`
+        console.log(import_chalk26.default.dim(`
   Save to file: hyv demo --output demo.md`));
-        console.log(import_chalk25.default.dim(`  Scan it:      hyv scan demo.md`));
-        console.log(import_chalk25.default.dim(`  Fix it:       hyv fix demo.md
+        console.log(import_chalk26.default.dim(`  Scan it:      hyv scan demo.md`));
+        console.log(import_chalk26.default.dim(`  Fix it:       hyv fix demo.md
 `));
       }
     } catch (error) {
-      console.error(import_chalk25.default.red(`Error: ${error.message}`));
+      console.error(import_chalk26.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
 }
 
 // src/commands/open.ts
-var import_chalk26 = __toESM(require_source());
+var import_chalk27 = __toESM(require_source());
 var PAGES = {
   dashboard: "https://holdyourvoice.com/dashboard",
   profiles: "https://holdyourvoice.com/dashboard",
@@ -14018,12 +14274,12 @@ function registerOpenCommand(program3) {
         return;
       }
       const open3 = (await Promise.resolve().then(() => __toESM(require_open()))).default;
-      console.log(import_chalk26.default.dim(`
+      console.log(import_chalk27.default.dim(`
   Opening ${url}...`));
       await open3(url);
-      console.log(import_chalk26.default.green("  \u2713 Opened in browser\n"));
+      console.log(import_chalk27.default.green("  \u2713 Opened in browser\n"));
     } catch (error) {
-      console.error(import_chalk26.default.red(`Error: ${error.message}`));
+      console.error(import_chalk27.default.red(`Error: ${error.message}`));
       process.exit(1);
     }
   });
@@ -14033,35 +14289,35 @@ function registerOpenCommand(program3) {
 init_welcome();
 
 // src/lib/onboarding.ts
-var fs18 = __toESM(require("fs"));
-var path18 = __toESM(require("path"));
+var fs19 = __toESM(require("fs"));
+var path19 = __toESM(require("path"));
 var os6 = __toESM(require("os"));
-var hyvDir = path18.join(os6.homedir(), ".hyv");
-var onboardingFile = path18.join(hyvDir, "onboarding-complete.json");
+var hyvDir = path19.join(os6.homedir(), ".hyv");
+var onboardingFile = path19.join(hyvDir, "onboarding-complete.json");
 function hasCompletedOnboarding() {
   try {
-    return fs18.existsSync(onboardingFile);
+    return fs19.existsSync(onboardingFile);
   } catch {
     return false;
   }
 }
 function markOnboardingComplete(version) {
-  if (!fs18.existsSync(hyvDir))
-    fs18.mkdirSync(hyvDir, { recursive: true });
-  fs18.writeFileSync(
+  if (!fs19.existsSync(hyvDir))
+    fs19.mkdirSync(hyvDir, { recursive: true });
+  fs19.writeFileSync(
     onboardingFile,
     JSON.stringify({ version, completed_at: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)
   );
 }
 
 // src/commands/welcome.ts
-var fs19 = __toESM(require("fs"));
-var path19 = __toESM(require("path"));
+var fs20 = __toESM(require("fs"));
+var path20 = __toESM(require("path"));
 function registerWelcomeCommand(program3) {
   const pkgVersion3 = (() => {
     try {
-      const pkgPath3 = path19.resolve(__dirname, "..", "package.json");
-      return JSON.parse(fs19.readFileSync(pkgPath3, "utf-8")).version;
+      const pkgPath3 = path20.resolve(__dirname, "..", "package.json");
+      return JSON.parse(fs20.readFileSync(pkgPath3, "utf-8")).version;
     } catch {
       return "0.0.0";
     }
@@ -14085,7 +14341,7 @@ function getWelcomeText() {
 }
 
 // src/commands/content.ts
-var import_chalk27 = __toESM(require_source());
+var import_chalk28 = __toESM(require_source());
 init_free_paid();
 var TEMPLATES = {
   cursor: {
@@ -14159,68 +14415,68 @@ ${COMMUNITY_URL}`
 function registerContentCommand(program3) {
   program3.command("content").description("Blog outlines, CI snippets, and share templates").argument("[topic]", "cursor | agents | ci | share", "cursor").option("--list", "List available templates").action((topic, opts) => {
     if (opts.list) {
-      console.log(import_chalk27.default.bold("\nhyv content templates\n"));
+      console.log(import_chalk28.default.bold("\nhyv content templates\n"));
       for (const [key, t2] of Object.entries(TEMPLATES)) {
-        console.log(import_chalk27.default.dim(`  ${key}`) + ` \u2014 ${t2.title}`);
+        console.log(import_chalk28.default.dim(`  ${key}`) + ` \u2014 ${t2.title}`);
       }
       console.log("");
       return;
     }
     const t = TEMPLATES[topic] || TEMPLATES.cursor;
-    console.log(import_chalk27.default.bold(`
+    console.log(import_chalk28.default.bold(`
 ${t.title}
 `));
     console.log(t.body);
-    console.log(import_chalk27.default.dim("\nBlog: https://holdyourvoice.com/blog\n"));
+    console.log(import_chalk28.default.dim("\nBlog: https://holdyourvoice.com/blog\n"));
   });
 }
 
 // src/commands/upgrade.ts
-var import_chalk28 = __toESM(require_source());
-var import_child_process2 = require("child_process");
+var import_chalk29 = __toESM(require_source());
+var import_child_process3 = require("child_process");
 init_version();
 function registerUpgradeCommand(program3) {
   program3.command("upgrade").description("Upgrade to the latest @holdyourvoice/hyv").option("--check", "Only check if an update is available").action(async (opts) => {
     const current = getCliVersion();
-    console.log(import_chalk28.default.dim(`
+    console.log(import_chalk29.default.dim(`
 Current: ${getEngineLabel()}
 `));
     let latest = current;
     try {
-      const out = (0, import_child_process2.execSync)("npm view @holdyourvoice/hyv version", { encoding: "utf-8", timeout: 15e3 });
+      const out = (0, import_child_process3.execSync)("npm view @holdyourvoice/hyv version", { encoding: "utf-8", timeout: 15e3 });
       latest = out.trim();
     } catch {
-      console.log(import_chalk28.default.yellow("Could not reach npm registry. Try: npm i -g @holdyourvoice/hyv@latest"));
+      console.log(import_chalk29.default.yellow("Could not reach npm registry. Try: npm i -g @holdyourvoice/hyv@latest"));
       return;
     }
     const cmp = compareSemver(current, latest);
     if (cmp === 0) {
-      console.log(import_chalk28.default.green("\u2713 You are on the latest version."));
+      console.log(import_chalk29.default.green("\u2713 You are on the latest version."));
       return;
     }
     if (cmp > 0) {
-      console.log(import_chalk28.default.green(`\u2713 You are ahead of npm (published: ${latest}).`));
+      console.log(import_chalk29.default.green(`\u2713 You are ahead of npm (published: ${latest}).`));
       return;
     }
-    console.log(import_chalk28.default.cyan(`Update available: ${current} \u2192 ${latest}`));
+    console.log(import_chalk29.default.cyan(`Update available: ${current} \u2192 ${latest}`));
     if (opts.check) {
-      console.log(import_chalk28.default.dim("\nRun: hyv upgrade  or  npm i -g @holdyourvoice/hyv@latest\n"));
+      console.log(import_chalk29.default.dim("\nRun: hyv upgrade  or  npm i -g @holdyourvoice/hyv@latest\n"));
       return;
     }
-    console.log(import_chalk28.default.dim("Installing..."));
+    console.log(import_chalk29.default.dim("Installing..."));
     try {
-      (0, import_child_process2.execSync)("npm i -g @holdyourvoice/hyv@latest", { stdio: "inherit" });
-      console.log(import_chalk28.default.green("\n\u2713 Upgraded successfully. Restart your terminal.\n"));
+      (0, import_child_process3.execSync)("npm i -g @holdyourvoice/hyv@latest", { stdio: "inherit" });
+      console.log(import_chalk29.default.green("\n\u2713 Upgraded successfully. Restart your terminal.\n"));
     } catch {
-      console.log(import_chalk28.default.red("\nUpgrade failed. Run manually: npm i -g @holdyourvoice/hyv@latest\n"));
+      console.log(import_chalk29.default.red("\nUpgrade failed. Run manually: npm i -g @holdyourvoice/hyv@latest\n"));
       process.exit(1);
     }
   });
 }
 
 // src/mcp.ts
-var fs20 = __toESM(require("fs"));
-var path20 = __toESM(require("path"));
+var fs21 = __toESM(require("fs"));
+var path21 = __toESM(require("path"));
 var os7 = __toESM(require("os"));
 init_classifier();
 init_autofix();
@@ -14232,20 +14488,20 @@ init_welcome();
 init_config();
 init_telemetry();
 init_access();
-var VOICE_MD = path20.join(os7.homedir(), ".hyv", "voice.md");
+var VOICE_MD = path21.join(os7.homedir(), ".hyv", "voice.md");
 var MAX_RESPONSE_CHARS = 12e4;
 var MAX_SCAN_FILE_BYTES = 2 * 1024 * 1024;
 function readScanFile(filePath) {
-  const cwdReal = fs20.realpathSync(process.cwd());
-  const resolved = fs20.realpathSync(path20.resolve(filePath));
-  if (!resolved.startsWith(cwdReal + path20.sep) && resolved !== cwdReal) {
+  const cwdReal = fs21.realpathSync(process.cwd());
+  const resolved = fs21.realpathSync(path21.resolve(filePath));
+  if (!resolved.startsWith(cwdReal + path21.sep) && resolved !== cwdReal) {
     throw new Error(`file must be in the current working directory (${cwdReal})`);
   }
-  const stat = fs20.statSync(resolved);
+  const stat = fs21.statSync(resolved);
   if (stat.size > MAX_SCAN_FILE_BYTES) {
     throw new Error(`file too large (max ${MAX_SCAN_FILE_BYTES} bytes)`);
   }
-  return fs20.readFileSync(resolved, "utf-8");
+  return fs21.readFileSync(resolved, "utf-8");
 }
 function toolResultPayload(result) {
   const isError = result.startsWith("Error:") || result.startsWith("Unknown tool:");
@@ -14254,10 +14510,10 @@ function toolResultPayload(result) {
     ...isError ? { isError: true } : {}
   };
 }
-var pkgPath = path20.resolve(__dirname, "..", "package.json");
+var pkgPath = path21.resolve(__dirname, "..", "package.json");
 var pkgVersion = (() => {
   try {
-    return JSON.parse(fs20.readFileSync(pkgPath, "utf-8")).version;
+    return JSON.parse(fs21.readFileSync(pkgPath, "utf-8")).version;
   } catch {
     return "2.7.1";
   }
@@ -14831,7 +15087,7 @@ async function handleRequest(line) {
 }
 async function startMcpServer() {
   const access = await getAccessState().catch(() => null);
-  if (fs20.existsSync(VOICE_MD)) {
+  if (fs21.existsSync(VOICE_MD)) {
     mcpLog("info", `voice profile: ${VOICE_MD}`);
   } else {
     mcpLog("info", "free local engine ready \u2014 no voice profile yet");
@@ -14863,228 +15119,142 @@ async function startMcpServer() {
 }
 
 // src/lib/mcp-setup.ts
-var import_chalk29 = __toESM(require_source());
-var fs21 = __toESM(require("fs"));
-var path21 = __toESM(require("path"));
+var import_chalk30 = __toESM(require_source());
+var fs22 = __toESM(require("fs"));
+var path22 = __toESM(require("path"));
 var os8 = __toESM(require("os"));
-var import_child_process3 = require("child_process");
 init_version();
 var HOME2 = os8.homedir();
 var IS_WIN2 = process.platform === "win32";
 function claudeDesktopConfigPath() {
   if (IS_WIN2)
-    return path21.join(HOME2, "AppData", "Roaming", "Claude", "claude_desktop_config.json");
+    return path22.join(HOME2, "AppData", "Roaming", "Claude", "claude_desktop_config.json");
   if (process.platform === "linux")
-    return path21.join(HOME2, ".config", "Claude", "claude_desktop_config.json");
-  return path21.join(HOME2, "Library", "Application Support", "Claude", "claude_desktop_config.json");
-}
-function mcpSnippet() {
-  const entry = [
-    path21.resolve(process.argv[1] || ""),
-    path21.resolve(__dirname, "index.js"),
-    path21.resolve(__dirname, "..", "dist", "index.js")
-  ].find((p) => p && fs21.existsSync(p));
-  if (entry) {
-    return JSON.stringify({ command: process.execPath, args: [entry, "mcp"] }, null, 2);
-  }
-  return JSON.stringify({ command: "hyv", args: ["mcp"] }, null, 2);
+    return path22.join(HOME2, ".config", "Claude", "claude_desktop_config.json");
+  return path22.join(HOME2, "Library", "Application Support", "Claude", "claude_desktop_config.json");
 }
 function printMcpSetup() {
-  console.log(import_chalk29.default.bold("\nhold your voice \u2014 mcp setup\n"));
-  console.log(import_chalk29.default.dim(`  ${getEngineLabel()}
+  console.log(import_chalk30.default.bold("\nhold your voice \u2014 mcp setup\n"));
+  console.log(import_chalk30.default.dim(`  ${getEngineLabel()}
 `));
-  console.log(import_chalk29.default.bold("Claude Desktop"));
-  console.log(import_chalk29.default.dim("  Add to claude_desktop_config.json \u2192 mcpServers.hyv:"));
-  console.log(import_chalk29.default.cyan(`  ${mcpSnippet().split("\n").join("\n  ")}`));
-  console.log(import_chalk29.default.dim(`  Config: ${claudeDesktopConfigPath()}
+  console.log(import_chalk30.default.bold("Claude Desktop"));
+  console.log(import_chalk30.default.dim("  Add to claude_desktop_config.json \u2192 mcpServers.hyv:"));
+  console.log(import_chalk30.default.cyan(`  ${mcpServerSnippet().split("\n").join("\n  ")}`));
+  console.log(import_chalk30.default.dim(`  Config: ${claudeDesktopConfigPath()}
 `));
-  console.log(import_chalk29.default.bold("Cursor"));
-  console.log(import_chalk29.default.dim("  MCP: ~/.cursor/mcp.json \u2192 mcpServers.hyv (same JSON as above)"));
-  console.log(import_chalk29.default.dim("  Rule: ~/.cursor/rules/hyv.mdc (alwaysApply \u2014 auto via postinstall)\n"));
-  console.log(import_chalk29.default.bold("Claude Code"));
-  console.log(import_chalk29.default.dim("  Command: ~/.claude/commands/hyv.md"));
-  console.log(import_chalk29.default.dim("  Skill: ~/.claude/skills/hold-your-voice/SKILL.md\n"));
-  console.log(import_chalk29.default.bold("Windsurf"));
-  console.log(import_chalk29.default.dim("  Rule: ~/.windsurf/rules/hyv.md (trigger: always_on)\n"));
-  console.log(import_chalk29.default.bold("Codex"));
-  console.log(import_chalk29.default.dim("  Instructions: ~/.codex/AGENTS.md (merged on install)\n"));
-  console.log(import_chalk29.default.bold("Command Code"));
-  console.log(import_chalk29.default.dim("  Skill: ~/.commandcode/skills/hyv/SKILL.md\n"));
-  console.log(import_chalk29.default.bold("ChatGPT"));
-  console.log(import_chalk29.default.dim("  hyv mcp --setup-chatgpt\n"));
-  console.log(import_chalk29.default.bold("Auto-configure"));
-  console.log(import_chalk29.default.dim("  hyv doctor --fix-agents"));
-  console.log(import_chalk29.default.dim("  HYV_AUTO_CONFIGURE_AGENTS=0 npm i -g @holdyourvoice/hyv  (skip)\n"));
-  console.log(import_chalk29.default.bold("Verify"));
-  console.log(import_chalk29.default.dim("  hyv mcp --test"));
-  console.log(import_chalk29.default.dim("  HYV_TELEMETRY=1 hyv mcp  (optional usage logging to ~/.hyv/telemetry/)\n"));
-}
-async function testMcpStdioSubprocess() {
-  const candidates = [
-    path21.resolve(process.argv[1] || ""),
-    path21.resolve(__dirname, "index.js"),
-    path21.resolve(__dirname, "..", "dist", "index.js")
-  ];
-  const entry = candidates.find((p) => p && fs21.existsSync(p));
-  if (!entry)
-    return { ok: false };
-  return new Promise((resolve14) => {
-    const child = (0, import_child_process3.spawn)(process.execPath, [entry, "mcp"], {
-      stdio: ["pipe", "pipe", "pipe"],
-      env: { ...process.env, HYV_POSTINSTALL_QUIET: "1" }
-    });
-    let buffer = "";
-    let settled = false;
-    const finish = (ok, toolCount) => {
-      if (settled)
-        return;
-      settled = true;
-      clearTimeout(timeout);
-      try {
-        child.kill();
-      } catch {
-      }
-      resolve14({ ok, toolCount });
-    };
-    const timeout = setTimeout(() => finish(false), 1e4);
-    const handleLine = (line) => {
-      const trimmed = line.trim();
-      if (!trimmed.startsWith("{"))
-        return;
-      try {
-        const msg = JSON.parse(trimmed);
-        if (msg.id === 2 && Array.isArray(msg.result?.tools) && msg.result.tools.length > 0) {
-          finish(true, msg.result.tools.length);
-        }
-      } catch {
-      }
-    };
-    child.stdout.on("data", (chunk) => {
-      buffer += chunk.toString();
-      const lines = buffer.split("\n");
-      buffer = lines.pop() || "";
-      for (const line of lines)
-        handleLine(line);
-    });
-    child.on("error", () => finish(false));
-    child.on("exit", () => {
-      if (!settled) {
-        handleLine(buffer);
-        finish(buffer.includes("hyv_scan"));
-      }
-    });
-    setTimeout(() => {
-      const send2 = (payload) => {
-        child.stdin.write(`${JSON.stringify(payload)}
-`);
-      };
-      send2({
-        jsonrpc: "2.0",
-        id: 1,
-        method: "initialize",
-        params: {
-          protocolVersion: "2024-11-05",
-          capabilities: {},
-          clientInfo: { name: "hyv-self-test", version: "1.0" }
-        }
-      });
-      send2({ jsonrpc: "2.0", method: "notifications/initialized" });
-      send2({ jsonrpc: "2.0", id: 2, method: "tools/list", params: {} });
-    }, 500);
-  });
+  console.log(import_chalk30.default.bold("Cursor"));
+  console.log(import_chalk30.default.dim("  MCP: ~/.cursor/mcp.json \u2192 mcpServers.hyv (same JSON as above)"));
+  console.log(import_chalk30.default.dim("  Rule: ~/.cursor/rules/hyv.mdc (alwaysApply \u2014 auto via postinstall)\n"));
+  console.log(import_chalk30.default.bold("Claude Code"));
+  console.log(import_chalk30.default.dim("  Command: ~/.claude/commands/hyv.md"));
+  console.log(import_chalk30.default.dim("  Skill: ~/.claude/skills/hold-your-voice/SKILL.md\n"));
+  console.log(import_chalk30.default.bold("Windsurf"));
+  console.log(import_chalk30.default.dim("  Rule: ~/.windsurf/rules/hyv.md (trigger: always_on)\n"));
+  console.log(import_chalk30.default.bold("Codex"));
+  console.log(import_chalk30.default.dim("  Instructions: ~/.codex/AGENTS.md (merged on install)\n"));
+  console.log(import_chalk30.default.bold("Command Code"));
+  console.log(import_chalk30.default.dim("  Skill: ~/.commandcode/skills/hyv/SKILL.md\n"));
+  console.log(import_chalk30.default.bold("ChatGPT"));
+  console.log(import_chalk30.default.dim("  hyv mcp --setup-chatgpt\n"));
+  console.log(import_chalk30.default.bold("Auto-configure"));
+  console.log(import_chalk30.default.dim("  hyv doctor --fix-agents"));
+  console.log(import_chalk30.default.dim("  HYV_AUTO_CONFIGURE_AGENTS=0 npm i -g @holdyourvoice/hyv  (skip)\n"));
+  console.log(import_chalk30.default.bold("Verify"));
+  console.log(import_chalk30.default.dim("  hyv mcp --test"));
+  console.log(import_chalk30.default.dim("  HYV_TELEMETRY=1 hyv mcp  (optional usage logging to ~/.hyv/telemetry/)\n"));
 }
 async function runMcpSelfTest() {
-  console.log(import_chalk29.default.bold("\nhold your voice \u2014 mcp self-test\n"));
-  console.log(import_chalk29.default.dim(`  ${getEngineLabel()}
+  console.log(import_chalk30.default.bold("\nhold your voice \u2014 mcp self-test\n"));
+  console.log(import_chalk30.default.dim(`  ${getEngineLabel()}
 `));
   let passed = 0;
   let failed = 0;
   const tools = getMcpToolNames();
   if (tools.length >= 10) {
-    console.log(import_chalk29.default.green(`  \u2713 ${tools.length} MCP tools registered`));
+    console.log(import_chalk30.default.green(`  \u2713 ${tools.length} MCP tools registered`));
     passed++;
   } else {
-    console.log(import_chalk29.default.red(`  \u2717 expected 10+ tools, got ${tools.length}`));
+    console.log(import_chalk30.default.red(`  \u2717 expected 10+ tools, got ${tools.length}`));
     failed++;
   }
   const required = ["hyv_welcome", "hyv_scan", "hyv_analyze", "hyv_clean", "hyv_validate", "hyv_list_free_tools"];
   for (const name of required) {
     if (tools.includes(name)) {
-      console.log(import_chalk29.default.green(`  \u2713 tool: ${name}`));
+      console.log(import_chalk30.default.green(`  \u2713 tool: ${name}`));
       passed++;
     } else {
-      console.log(import_chalk29.default.red(`  \u2717 missing tool: ${name}`));
+      console.log(import_chalk30.default.red(`  \u2717 missing tool: ${name}`));
       failed++;
     }
   }
   try {
     const welcome = await invokeMcpTool("hyv_welcome", {});
     if (welcome.includes("Hold Your Voice") || welcome.includes("hold your voice")) {
-      console.log(import_chalk29.default.green("  \u2713 hyv_welcome responds"));
+      console.log(import_chalk30.default.green("  \u2713 hyv_welcome responds"));
       passed++;
     } else {
-      console.log(import_chalk29.default.red("  \u2717 hyv_welcome unexpected output"));
+      console.log(import_chalk30.default.red("  \u2717 hyv_welcome unexpected output"));
       failed++;
     }
   } catch (e) {
-    console.log(import_chalk29.default.red(`  \u2717 hyv_welcome failed: ${e.message}`));
+    console.log(import_chalk30.default.red(`  \u2717 hyv_welcome failed: ${e.message}`));
     failed++;
   }
   try {
     const demo = await invokeMcpTool("hyv_demo", {});
     if (demo.includes("Score") || demo.includes("issues")) {
-      console.log(import_chalk29.default.green("  \u2713 hyv_demo pipeline works"));
+      console.log(import_chalk30.default.green("  \u2713 hyv_demo pipeline works"));
       passed++;
     } else {
-      console.log(import_chalk29.default.red("  \u2717 hyv_demo unexpected output"));
+      console.log(import_chalk30.default.red("  \u2717 hyv_demo unexpected output"));
       failed++;
     }
   } catch (e) {
-    console.log(import_chalk29.default.red(`  \u2717 hyv_demo failed: ${e.message}`));
+    console.log(import_chalk30.default.red(`  \u2717 hyv_demo failed: ${e.message}`));
     failed++;
   }
-  const voiceMd = path21.join(HOME2, ".hyv", "voice.md");
-  if (fs21.existsSync(voiceMd)) {
-    console.log(import_chalk29.default.green("  \u2713 voice profile found"));
+  const voiceMd = path22.join(HOME2, ".hyv", "voice.md");
+  if (fs22.existsSync(voiceMd)) {
+    console.log(import_chalk30.default.green("  \u2713 voice profile found"));
     passed++;
   } else {
-    console.log(import_chalk29.default.dim("  - no voice.md (free local engine still works)"));
+    console.log(import_chalk30.default.dim("  - no voice.md (free local engine still works)"));
   }
   if (getDemoText().length > 100) {
-    console.log(import_chalk29.default.green("  \u2713 demo content available"));
+    console.log(import_chalk30.default.green("  \u2713 demo content available"));
     passed++;
   } else {
-    console.log(import_chalk29.default.red("  \u2717 demo content missing"));
+    console.log(import_chalk30.default.red("  \u2717 demo content missing"));
     failed++;
   }
   try {
     const stdio = await testMcpStdioSubprocess();
     if (stdio.ok && (stdio.toolCount || 0) >= 10) {
-      console.log(import_chalk29.default.green(`  \u2713 stdio MCP subprocess responds (${stdio.toolCount} tools)`));
+      console.log(import_chalk30.default.green(`  \u2713 stdio MCP subprocess responds (${stdio.toolCount} tools)`));
       passed++;
     } else if (stdio.ok) {
-      console.log(import_chalk29.default.yellow(`  ! stdio MCP subprocess ok but only ${stdio.toolCount || 0} tools`));
+      console.log(import_chalk30.default.yellow(`  ! stdio MCP subprocess ok but only ${stdio.toolCount || 0} tools`));
       failed++;
     } else {
-      console.log(import_chalk29.default.red("  \u2717 stdio MCP subprocess failed"));
+      console.log(import_chalk30.default.red("  \u2717 stdio MCP subprocess failed"));
       failed++;
     }
   } catch (e) {
-    console.log(import_chalk29.default.red(`  \u2717 stdio MCP subprocess failed: ${e.message}`));
+    console.log(import_chalk30.default.red(`  \u2717 stdio MCP subprocess failed: ${e.message}`));
     failed++;
   }
   console.log("");
   if (failed === 0) {
-    console.log(import_chalk29.default.green(`\u2713 all checks passed (${passed})`));
-    console.log(import_chalk29.default.dim("\nStart server: hyv mcp\n"));
+    console.log(import_chalk30.default.green(`\u2713 all checks passed (${passed})`));
+    console.log(import_chalk30.default.dim("\nStart server: hyv mcp\n"));
     return true;
   }
-  console.log(import_chalk29.default.yellow(`! ${failed} check(s) failed, ${passed} passed`));
+  console.log(import_chalk30.default.yellow(`! ${failed} check(s) failed, ${passed} passed`));
   return false;
 }
 
 // src/commands/export.ts
-var fs22 = __toESM(require("fs"));
+var fs23 = __toESM(require("fs"));
 init_api();
 var FORMATS = {
   claude: {
@@ -15171,7 +15341,7 @@ async function exportCommand(format, opts) {
       const prompt = fmt.wrap(detail.profile, detail.body);
       if (opts.output) {
         const outFile = opts.output.replace("{name}", profile.slug || profile.name);
-        fs22.writeFileSync(outFile, prompt);
+        fs23.writeFileSync(outFile, prompt);
         results.push({ profile: profile.name, file: outFile });
       } else {
         results.push({ profile: profile.name, prompt });
@@ -15208,13 +15378,13 @@ async function exportCommand(format, opts) {
 // src/index.ts
 init_access();
 init_welcome();
-var fs23 = __toESM(require("fs"));
-var path22 = __toESM(require("path"));
+var fs24 = __toESM(require("fs"));
+var path23 = __toESM(require("path"));
 var program2 = new Command();
-var pkgPath2 = path22.resolve(__dirname, "..", "package.json");
+var pkgPath2 = path23.resolve(__dirname, "..", "package.json");
 var pkgVersion2 = (() => {
   try {
-    return JSON.parse(fs23.readFileSync(pkgPath2, "utf-8")).version;
+    return JSON.parse(fs24.readFileSync(pkgPath2, "utf-8")).version;
   } catch {
     return "2.7.1";
   }
@@ -15258,15 +15428,15 @@ program2.command("mcp").description("Start MCP server (for Claude Desktop and ot
     return;
   }
   if (opts.setupChatgpt) {
-    console.log(import_chalk30.default.bold("\nhold your voice \u2014 chatgpt setup\n"));
+    console.log(import_chalk31.default.bold("\nhold your voice \u2014 chatgpt setup\n"));
     console.log("To connect HYV to ChatGPT:");
-    console.log(import_chalk30.default.dim("  1. Go to ") + import_chalk30.default.cyan("https://chatgpt.com/#settings/Connectors"));
-    console.log(import_chalk30.default.dim("  2. Add a new connector"));
-    console.log(import_chalk30.default.dim("  3. For local MCP, use: ") + import_chalk30.default.cyan("hyv mcp"));
-    console.log(import_chalk30.default.dim("  4. ChatGPT Desktop supports stdio MCP servers"));
+    console.log(import_chalk31.default.dim("  1. Go to ") + import_chalk31.default.cyan("https://chatgpt.com/#settings/Connectors"));
+    console.log(import_chalk31.default.dim("  2. Add a new connector"));
+    console.log(import_chalk31.default.dim("  3. For local MCP, use: ") + import_chalk31.default.cyan("hyv mcp"));
+    console.log(import_chalk31.default.dim("  4. ChatGPT Desktop supports stdio MCP servers"));
     console.log("");
-    console.log(import_chalk30.default.dim("Note: The remote HTTP MCP endpoint is not yet available."));
-    console.log(import_chalk30.default.dim("Use the local stdio MCP server with Claude Desktop or Claude Code instead."));
+    console.log(import_chalk31.default.dim("Note: The remote HTTP MCP endpoint is not yet available."));
+    console.log(import_chalk31.default.dim("Use the local stdio MCP server with Claude Desktop or Claude Code instead."));
     return;
   }
   startMcpServer();