@holdyourvoice/hyv 2.9.9 → 2.9.11

package/dist/index.js

@@ -973,8 +973,8 @@ var require_command = __commonJS({
   "node_modules/commander/lib/command.js"(exports2) {
     var EventEmitter = require("node:events").EventEmitter;
     var childProcess = require("node:child_process");
-    var path26 = require("node:path");
-    var fs28 = require("node:fs");
+    var path27 = require("node:path");
+    var fs30 = require("node:fs");
     var process2 = require("node:process");
     var { Argument: Argument2, humanReadableArgName } = require_argument();
     var { CommanderError: CommanderError2 } = require_error();
@@ -1916,13 +1916,13 @@ Expecting one of '${allowedValues.join("', '")}'`);
         let launchWithNode = false;
         const sourceExt = [".js", ".ts", ".tsx", ".mjs", ".cjs"];
         function findFile(baseDir, baseName) {
-          const localBin = path26.resolve(baseDir, baseName);
-          if (fs28.existsSync(localBin))
+          const localBin = path27.resolve(baseDir, baseName);
+          if (fs30.existsSync(localBin))
             return localBin;
-          if (sourceExt.includes(path26.extname(baseName)))
+          if (sourceExt.includes(path27.extname(baseName)))
             return void 0;
           const foundExt = sourceExt.find(
-            (ext) => fs28.existsSync(`${localBin}${ext}`)
+            (ext) => fs30.existsSync(`${localBin}${ext}`)
           );
           if (foundExt)
             return `${localBin}${foundExt}`;
@@ -1935,21 +1935,21 @@ Expecting one of '${allowedValues.join("', '")}'`);
         if (this._scriptPath) {
           let resolvedScriptPath;
           try {
-            resolvedScriptPath = fs28.realpathSync(this._scriptPath);
+            resolvedScriptPath = fs30.realpathSync(this._scriptPath);
           } catch (err) {
             resolvedScriptPath = this._scriptPath;
           }
-          executableDir = path26.resolve(
-            path26.dirname(resolvedScriptPath),
+          executableDir = path27.resolve(
+            path27.dirname(resolvedScriptPath),
             executableDir
           );
         }
         if (executableDir) {
           let localFile = findFile(executableDir, executableFile);
           if (!localFile && !subcommand._executableFile && this._scriptPath) {
-            const legacyName = path26.basename(
+            const legacyName = path27.basename(
               this._scriptPath,
-              path26.extname(this._scriptPath)
+              path27.extname(this._scriptPath)
             );
             if (legacyName !== this._name) {
               localFile = findFile(
@@ -1960,7 +1960,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
           }
           executableFile = localFile || executableFile;
         }
-        launchWithNode = sourceExt.includes(path26.extname(executableFile));
+        launchWithNode = sourceExt.includes(path27.extname(executableFile));
         let proc;
         if (process2.platform !== "win32") {
           if (launchWithNode) {
@@ -2817,7 +2817,7 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @return {Command}
        */
       nameFromFilename(filename) {
-        this._name = path26.basename(filename, path26.extname(filename));
+        this._name = path27.basename(filename, path27.extname(filename));
         return this;
       }
       /**
@@ -2831,10 +2831,10 @@ Expecting one of '${allowedValues.join("', '")}'`);
        * @param {string} [path]
        * @return {(string|null|Command)}
        */
-      executableDir(path27) {
-        if (path27 === void 0)
+      executableDir(path28) {
+        if (path28 === void 0)
           return this._executableDir;
-        this._executableDir = path27;
+        this._executableDir = path28;
         return this;
       }
       /**
@@ -3934,15 +3934,15 @@ var require_route = __commonJS({
       };
     }
     function wrapConversion(toModel, graph) {
-      const path26 = [graph[toModel].parent, toModel];
+      const path27 = [graph[toModel].parent, toModel];
       let fn = conversions[graph[toModel].parent][toModel];
       let cur = graph[toModel].parent;
       while (graph[cur].parent) {
-        path26.unshift(graph[cur].parent);
+        path27.unshift(graph[cur].parent);
         fn = link(conversions[graph[cur].parent][cur], fn);
         cur = graph[cur].parent;
       }
-      fn.conversion = path26;
+      fn.conversion = path27;
       return fn;
     }
     module2.exports = function(fromModel) {
@@ -4182,7 +4182,7 @@ var require_has_flag = __commonJS({
 var require_supports_color = __commonJS({
   "node_modules/supports-color/index.js"(exports2, module2) {
     "use strict";
-    var os12 = require("os");
+    var os13 = require("os");
     var tty = require("tty");
     var hasFlag = require_has_flag();
     var { env } = process;
@@ -4230,7 +4230,7 @@ var require_supports_color = __commonJS({
         return min;
       }
       if (process.platform === "win32") {
-        const osRelease = os12.release().split(".");
+        const osRelease = os13.release().split(".");
         if (Number(osRelease[0]) >= 10 && Number(osRelease[2]) >= 10586) {
           return Number(osRelease[2]) >= 14931 ? 3 : 2;
         }
@@ -4611,6 +4611,121 @@ var require_source = __commonJS({
   }
 });
 
+// src/lib/data-safety.ts
+function shouldReplaceCachedContent(existing, incoming) {
+  const next = incoming.trim();
+  if (!next) {
+    return !existing?.trim();
+  }
+  return true;
+}
+function backupFileIfExists(filePath) {
+  if (!fs.existsSync(filePath)) {
+    return false;
+  }
+  try {
+    fs.copyFileSync(filePath, `${filePath}.hyv.bak`);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function safeWriteProfileFile(profilePath, content, existing) {
+  if (!shouldReplaceCachedContent(existing, content)) {
+    return { written: false, backedUp: false, reason: "empty-would-erase" };
+  }
+  if (existing !== null && existing === content) {
+    return { written: false, backedUp: false, reason: "unchanged" };
+  }
+  const backedUp = backupFileIfExists(profilePath);
+  fs.writeFileSync(profilePath, content, { mode: 384 });
+  return { written: true, backedUp };
+}
+function safeWriteJsonFile(filePath, content, existing) {
+  if (!shouldReplaceCachedContent(existing, content)) {
+    return { written: false, backedUp: false, reason: "empty-would-erase" };
+  }
+  if (existing !== null && existing === content) {
+    return { written: false, backedUp: false, reason: "unchanged" };
+  }
+  const backedUp = backupFileIfExists(filePath);
+  fs.writeFileSync(filePath, content, { mode: 384 });
+  return { written: true, backedUp };
+}
+var fs;
+var init_data_safety = __esm({
+  "src/lib/data-safety.ts"() {
+    "use strict";
+    fs = __toESM(require("fs"));
+  }
+});
+
+// src/lib/profile-meta.ts
+function ensureCacheDir() {
+  if (!fs2.existsSync(CACHE_DIR)) {
+    fs2.mkdirSync(CACHE_DIR, { recursive: true, mode: 448 });
+  }
+}
+function readStore() {
+  try {
+    if (!fs2.existsSync(META_FILE))
+      return {};
+    return JSON.parse(fs2.readFileSync(META_FILE, "utf-8"));
+  } catch {
+    return {};
+  }
+}
+function writeStore(store) {
+  ensureCacheDir();
+  fs2.writeFileSync(META_FILE, JSON.stringify(store, null, 2), { mode: 384 });
+}
+function getProfileMeta(cacheKey) {
+  return readStore()[cacheKey];
+}
+function setProfileMeta(cacheKey, entry) {
+  const store = readStore();
+  store[cacheKey] = {
+    ...store[cacheKey],
+    ...entry,
+    local_saved_at: entry.local_saved_at || (/* @__PURE__ */ new Date()).toISOString()
+  };
+  writeStore(store);
+}
+function parseIsoMs(iso) {
+  if (!iso)
+    return 0;
+  const t = Date.parse(iso);
+  return Number.isNaN(t) ? 0 : t;
+}
+function shouldApplyServerProfileUpdate(serverUpdatedAt, cacheKey, force = false) {
+  if (force)
+    return true;
+  const meta = getProfileMeta(cacheKey);
+  if (!meta)
+    return true;
+  const serverMs = parseIsoMs(serverUpdatedAt);
+  const knownServerMs = parseIsoMs(meta.server_updated_at);
+  const localMs = parseIsoMs(meta.local_saved_at);
+  if (localMs > serverMs && localMs >= knownServerMs) {
+    return false;
+  }
+  if (knownServerMs > serverMs) {
+    return false;
+  }
+  return true;
+}
+var fs2, os, path, CACHE_DIR, META_FILE;
+var init_profile_meta = __esm({
+  "src/lib/profile-meta.ts"() {
+    "use strict";
+    fs2 = __toESM(require("fs"));
+    os = __toESM(require("os"));
+    path = __toESM(require("path"));
+    CACHE_DIR = path.join(os.homedir(), ".hyv", "cache");
+    META_FILE = path.join(CACHE_DIR, "profile-meta.json");
+  }
+});
+
 // src/lib/config.ts
 function validateApiBase(raw) {
   const trimmed = raw.replace(/\/$/, "");
@@ -4687,21 +4802,21 @@ function toSafeProfileCacheKey(name) {
 function profilePathForName(name) {
   const safe = assertSafeProfileName(name);
   ensureHyvDir();
-  const profilePath = path.resolve(PROFILES_DIR, `${safe}.md`);
-  const profilesRoot = path.resolve(PROFILES_DIR) + path.sep;
+  const profilePath = path2.resolve(PROFILES_DIR, `${safe}.md`);
+  const profilesRoot = path2.resolve(PROFILES_DIR) + path2.sep;
   if (!profilePath.startsWith(profilesRoot)) {
     throw new Error("Invalid profile name");
   }
   return profilePath;
 }
 function ensureHyvDir() {
-  const dirs = [HYV_DIR, PROFILES_DIR, CACHE_DIR, QUEUE_DIR];
+  const dirs = [HYV_DIR, PROFILES_DIR, CACHE_DIR2, QUEUE_DIR];
   for (const dir of dirs) {
-    if (!fs.existsSync(dir)) {
-      fs.mkdirSync(dir, { recursive: true, mode: 448 });
+    if (!fs3.existsSync(dir)) {
+      fs3.mkdirSync(dir, { recursive: true, mode: 448 });
     } else {
       try {
-        fs.chmodSync(dir, 448);
+        fs3.chmodSync(dir, 448);
       } catch {
       }
     }
@@ -4709,33 +4824,33 @@ function ensureHyvDir() {
 }
 function appendSecureLine(filePath, line, dir) {
   if (dir) {
-    if (!fs.existsSync(dir))
-      fs.mkdirSync(dir, { recursive: true, mode: 448 });
+    if (!fs3.existsSync(dir))
+      fs3.mkdirSync(dir, { recursive: true, mode: 448 });
     else {
       try {
-        fs.chmodSync(dir, 448);
+        fs3.chmodSync(dir, 448);
       } catch {
       }
     }
   }
-  if (!fs.existsSync(filePath)) {
-    fs.writeFileSync(filePath, line, { mode: 384 });
+  if (!fs3.existsSync(filePath)) {
+    fs3.writeFileSync(filePath, line, { mode: 384 });
     return;
   }
   try {
-    fs.chmodSync(filePath, 384);
+    fs3.chmodSync(filePath, 384);
   } catch {
   }
-  fs.appendFileSync(filePath, line);
+  fs3.appendFileSync(filePath, line);
 }
 function isInitialized() {
-  return fs.existsSync(AUTH_FILE);
+  return fs3.existsSync(AUTH_FILE);
 }
 function readAuth() {
   try {
-    if (!fs.existsSync(AUTH_FILE))
+    if (!fs3.existsSync(AUTH_FILE))
       return null;
-    const data = fs.readFileSync(AUTH_FILE, "utf-8");
+    const data = fs3.readFileSync(AUTH_FILE, "utf-8");
     return JSON.parse(data);
   } catch {
     return null;
@@ -4743,13 +4858,19 @@ function readAuth() {
 }
 function writeAuth(auth) {
   ensureHyvDir();
-  fs.writeFileSync(AUTH_FILE, JSON.stringify(auth, null, 2), { mode: 384 });
+  if (fs3.existsSync(AUTH_FILE)) {
+    try {
+      fs3.copyFileSync(AUTH_FILE, `${AUTH_FILE}.hyv.bak`);
+    } catch {
+    }
+  }
+  fs3.writeFileSync(AUTH_FILE, JSON.stringify(auth, null, 2), { mode: 384 });
 }
 function readConfig() {
   try {
-    if (!fs.existsSync(CONFIG_FILE))
+    if (!fs3.existsSync(CONFIG_FILE))
       return {};
-    const data = fs.readFileSync(CONFIG_FILE, "utf-8");
+    const data = fs3.readFileSync(CONFIG_FILE, "utf-8");
     return JSON.parse(data);
   } catch {
     return {};
@@ -4757,7 +4878,7 @@ function readConfig() {
 }
 function writeConfig(config) {
   ensureHyvDir();
-  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 });
+  fs3.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), { mode: 384 });
 }
 function getToken() {
   const auth = readAuth();
@@ -4773,9 +4894,9 @@ function getToken() {
 }
 function listCachedProfiles() {
   try {
-    if (!fs.existsSync(PROFILES_DIR))
+    if (!fs3.existsSync(PROFILES_DIR))
       return [];
-    return fs.readdirSync(PROFILES_DIR).filter((f) => f.endsWith(".md")).map((f) => f.replace(".md", ""));
+    return fs3.readdirSync(PROFILES_DIR).filter((f) => f.endsWith(".md")).map((f) => f.replace(".md", ""));
   } catch {
     return [];
   }
@@ -4783,9 +4904,9 @@ function listCachedProfiles() {
 function readCachedProfile(name) {
   const profilePath = profilePathForName(name);
   try {
-    if (!fs.existsSync(profilePath))
+    if (!fs3.existsSync(profilePath))
       return null;
-    return fs.readFileSync(profilePath, "utf-8");
+    return fs3.readFileSync(profilePath, "utf-8");
   } catch (err) {
     if (err.message?.includes("Invalid profile name"))
       throw err;
@@ -4794,15 +4915,22 @@ function readCachedProfile(name) {
 }
 function writeCachedProfile(name, content) {
   const profilePath = profilePathForName(name);
-  fs.writeFileSync(profilePath, content, { mode: 384 });
+  const existing = fs3.existsSync(profilePath) ? fs3.readFileSync(profilePath, "utf-8") : null;
+  const result = safeWriteProfileFile(profilePath, content, existing);
+  if (!result.written && result.reason === "empty-would-erase") {
+    throw new Error("Refusing to replace profile with empty content");
+  }
+  if (result.written) {
+    setProfileMeta(name, { local_saved_at: (/* @__PURE__ */ new Date()).toISOString() });
+  }
 }
 function getQueuedSignals() {
   try {
-    if (!fs.existsSync(QUEUE_DIR))
+    if (!fs3.existsSync(QUEUE_DIR))
       return [];
-    const files = fs.readdirSync(QUEUE_DIR).filter((f) => f.endsWith(".json"));
+    const files = fs3.readdirSync(QUEUE_DIR).filter((f) => f.endsWith(".json"));
     return files.map((f) => {
-      const data = fs.readFileSync(path.join(QUEUE_DIR, f), "utf-8");
+      const data = fs3.readFileSync(path2.join(QUEUE_DIR, f), "utf-8");
       return JSON.parse(data);
     });
   } catch {
@@ -4812,37 +4940,39 @@ function getQueuedSignals() {
 function queueSignal(signal) {
   ensureHyvDir();
   const id = Date.now().toString(36) + Math.random().toString(36).slice(2, 8);
-  const filePath = path.join(QUEUE_DIR, `${id}.json`);
-  fs.writeFileSync(filePath, JSON.stringify(signal, null, 2), { mode: 384 });
+  const filePath = path2.join(QUEUE_DIR, `${id}.json`);
+  fs3.writeFileSync(filePath, JSON.stringify(signal, null, 2), { mode: 384 });
 }
 function saveLastEditSession(session) {
   ensureHyvDir();
   const data = { ...session, saved_at: (/* @__PURE__ */ new Date()).toISOString() };
-  fs.writeFileSync(LAST_SESSION_FILE, JSON.stringify(data, null, 2), { mode: 384 });
+  fs3.writeFileSync(LAST_SESSION_FILE, JSON.stringify(data, null, 2), { mode: 384 });
 }
 function readLastEditSession() {
   try {
-    if (!fs.existsSync(LAST_SESSION_FILE))
+    if (!fs3.existsSync(LAST_SESSION_FILE))
       return null;
-    return JSON.parse(fs.readFileSync(LAST_SESSION_FILE, "utf-8"));
+    return JSON.parse(fs3.readFileSync(LAST_SESSION_FILE, "utf-8"));
   } catch {
     return null;
   }
 }
-var fs, path, os, HYV_DIR, AUTH_FILE, CONFIG_FILE, PROFILES_DIR, CACHE_DIR, QUEUE_DIR, LAST_SESSION_FILE, ALLOWED_API_HOSTS, ALLOWED_OAUTH_HOSTS, API_BASE, PROFILE_NAME_RE;
+var fs3, path2, os2, HYV_DIR, AUTH_FILE, CONFIG_FILE, PROFILES_DIR, CACHE_DIR2, QUEUE_DIR, LAST_SESSION_FILE, ALLOWED_API_HOSTS, ALLOWED_OAUTH_HOSTS, API_BASE, PROFILE_NAME_RE;
 var init_config = __esm({
   "src/lib/config.ts"() {
     "use strict";
-    fs = __toESM(require("fs"));
-    path = __toESM(require("path"));
-    os = __toESM(require("os"));
-    HYV_DIR = path.join(os.homedir(), ".hyv");
-    AUTH_FILE = path.join(HYV_DIR, "auth.json");
-    CONFIG_FILE = path.join(HYV_DIR, "config.json");
-    PROFILES_DIR = path.join(HYV_DIR, "profiles");
-    CACHE_DIR = path.join(HYV_DIR, "cache");
-    QUEUE_DIR = path.join(HYV_DIR, "queue");
-    LAST_SESSION_FILE = path.join(HYV_DIR, "last-session.json");
+    fs3 = __toESM(require("fs"));
+    path2 = __toESM(require("path"));
+    os2 = __toESM(require("os"));
+    init_data_safety();
+    init_profile_meta();
+    HYV_DIR = path2.join(os2.homedir(), ".hyv");
+    AUTH_FILE = path2.join(HYV_DIR, "auth.json");
+    CONFIG_FILE = path2.join(HYV_DIR, "config.json");
+    PROFILES_DIR = path2.join(HYV_DIR, "profiles");
+    CACHE_DIR2 = path2.join(HYV_DIR, "cache");
+    QUEUE_DIR = path2.join(HYV_DIR, "queue");
+    LAST_SESSION_FILE = path2.join(HYV_DIR, "last-session.json");
     ALLOWED_API_HOSTS = /* @__PURE__ */ new Set([
       "holdyourvoice.com",
       "www.holdyourvoice.com",
@@ -4860,11 +4990,11 @@ var init_config = __esm({
 var require_is_docker = __commonJS({
   "node_modules/is-docker/index.js"(exports2, module2) {
     "use strict";
-    var fs28 = require("fs");
+    var fs30 = require("fs");
     var isDocker;
     function hasDockerEnv() {
       try {
-        fs28.statSync("/.dockerenv");
+        fs30.statSync("/.dockerenv");
         return true;
       } catch (_2) {
         return false;
@@ -4872,7 +5002,7 @@ var require_is_docker = __commonJS({
     }
     function hasDockerCGroup() {
       try {
-        return fs28.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
+        return fs30.readFileSync("/proc/self/cgroup", "utf8").includes("docker");
       } catch (_2) {
         return false;
       }
@@ -4890,21 +5020,21 @@ var require_is_docker = __commonJS({
 var require_is_wsl = __commonJS({
   "node_modules/is-wsl/index.js"(exports2, module2) {
     "use strict";
-    var os12 = require("os");
-    var fs28 = require("fs");
+    var os13 = require("os");
+    var fs30 = require("fs");
     var isDocker = require_is_docker();
     var isWsl = () => {
       if (process.platform !== "linux") {
         return false;
       }
-      if (os12.release().toLowerCase().includes("microsoft")) {
+      if (os13.release().toLowerCase().includes("microsoft")) {
         if (isDocker()) {
           return false;
         }
         return true;
       }
       try {
-        return fs28.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
+        return fs30.readFileSync("/proc/version", "utf8").toLowerCase().includes("microsoft") ? !isDocker() : false;
       } catch (_2) {
         return false;
       }
@@ -4943,17 +5073,17 @@ var require_define_lazy_prop = __commonJS({
 // node_modules/open/index.js
 var require_open = __commonJS({
   "node_modules/open/index.js"(exports2, module2) {
-    var path26 = require("path");
+    var path27 = require("path");
     var childProcess = require("child_process");
-    var { promises: fs28, constants: fsConstants } = require("fs");
+    var { promises: fs30, constants: fsConstants } = require("fs");
     var isWsl = require_is_wsl();
     var isDocker = require_is_docker();
     var defineLazyProperty = require_define_lazy_prop();
-    var localXdgOpenPath = path26.join(__dirname, "xdg-open");
+    var localXdgOpenPath = path27.join(__dirname, "xdg-open");
     var { platform, arch } = process;
     var hasContainerEnv = () => {
       try {
-        fs28.statSync("/run/.containerenv");
+        fs30.statSync("/run/.containerenv");
         return true;
       } catch {
         return false;
@@ -4976,14 +5106,14 @@ var require_open = __commonJS({
         const configFilePath = "/etc/wsl.conf";
         let isConfigFileExists = false;
         try {
-          await fs28.access(configFilePath, fsConstants.F_OK);
+          await fs30.access(configFilePath, fsConstants.F_OK);
           isConfigFileExists = true;
         } catch {
         }
         if (!isConfigFileExists) {
           return defaultMountPoint;
         }
-        const configContent = await fs28.readFile(configFilePath, { encoding: "utf8" });
+        const configContent = await fs30.readFile(configFilePath, { encoding: "utf8" });
         const configMountPoint = /(?<!#.*)root\s*=\s*(?<mountPoint>.*)/g.exec(configContent);
         if (!configMountPoint) {
           return defaultMountPoint;
@@ -5083,7 +5213,7 @@ var require_open = __commonJS({
           const isBundled = !__dirname || __dirname === "/";
           let exeLocalXdgOpen = false;
           try {
-            await fs28.access(localXdgOpenPath, fsConstants.X_OK);
+            await fs30.access(localXdgOpenPath, fsConstants.X_OK);
             exeLocalXdgOpen = true;
           } catch {
           }
@@ -5283,20 +5413,20 @@ var init_free_paid = __esm({
 // src/lib/version.ts
 function pkgRoot() {
   const candidates = [
-    path2.resolve(__dirname, ".."),
+    path3.resolve(__dirname, ".."),
     // dist/ or src/lib/ → cli/
-    path2.resolve(__dirname, "..", "..")
+    path3.resolve(__dirname, "..", "..")
     // src/lib/ → cli/
   ];
   for (const root of candidates) {
-    if (fs2.existsSync(path2.join(root, "package.json")))
+    if (fs4.existsSync(path3.join(root, "package.json")))
       return root;
   }
-  return path2.resolve(__dirname, "..");
+  return path3.resolve(__dirname, "..");
 }
 function getCliVersion() {
   try {
-    const pkg = JSON.parse(fs2.readFileSync(path2.join(PKG_ROOT, "package.json"), "utf-8"));
+    const pkg = JSON.parse(fs4.readFileSync(path3.join(PKG_ROOT, "package.json"), "utf-8"));
     return pkg.version || "unknown";
   } catch {
     return "unknown";
@@ -5304,8 +5434,8 @@ function getCliVersion() {
 }
 function getRulesVersion() {
   try {
-    if (fs2.existsSync(RULES_MANIFEST)) {
-      return JSON.parse(fs2.readFileSync(RULES_MANIFEST, "utf-8")).version || "unknown";
+    if (fs4.existsSync(RULES_MANIFEST)) {
+      return JSON.parse(fs4.readFileSync(RULES_MANIFEST, "utf-8")).version || "unknown";
     }
   } catch {
   }
@@ -5343,15 +5473,15 @@ function fetchLatestNpmVersion(timeoutMs = 8e3) {
     );
   });
 }
-var fs2, path2, import_child_process, PKG_ROOT, RULES_MANIFEST;
+var fs4, path3, import_child_process, PKG_ROOT, RULES_MANIFEST;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    fs2 = __toESM(require("fs"));
-    path2 = __toESM(require("path"));
+    fs4 = __toESM(require("fs"));
+    path3 = __toESM(require("path"));
     import_child_process = require("child_process");
     PKG_ROOT = pkgRoot();
-    RULES_MANIFEST = path2.join(PKG_ROOT, "assets", "detection-rules.json");
+    RULES_MANIFEST = path3.join(PKG_ROOT, "assets", "detection-rules.json");
   }
 });
 
@@ -5711,15 +5841,15 @@ function recordEvent(event, meta) {
   } catch {
   }
 }
-var path3, os2, TELEMETRY_DIR, TELEMETRY_FILE;
+var path4, os3, TELEMETRY_DIR, TELEMETRY_FILE;
 var init_telemetry = __esm({
   "src/lib/telemetry.ts"() {
     "use strict";
-    path3 = __toESM(require("path"));
-    os2 = __toESM(require("os"));
+    path4 = __toESM(require("path"));
+    os3 = __toESM(require("os"));
     init_config();
-    TELEMETRY_DIR = path3.join(os2.homedir(), ".hyv", "telemetry");
-    TELEMETRY_FILE = path3.join(TELEMETRY_DIR, "events.jsonl");
+    TELEMETRY_DIR = path4.join(os3.homedir(), ".hyv", "telemetry");
+    TELEMETRY_FILE = path4.join(TELEMETRY_DIR, "events.jsonl");
   }
 });
 
@@ -5730,11 +5860,11 @@ __export(api_exports, {
   apiPost: () => apiPost,
   requireSubscription: () => requireSubscription
 });
-async function request2(method, path26, body) {
+async function request2(method, path27, body) {
   const token = await getValidToken();
   if (!token)
     throw new Error("you're not signed in yet. run: hyv init");
-  const url = `${API_BASE}${path26}`;
+  const url = `${API_BASE}${path27}`;
   const opts = {
     method,
     headers: {
@@ -5759,11 +5889,11 @@ async function request2(method, path26, body) {
   }
   return res.json();
 }
-function apiGet(path26) {
-  return request2("GET", path26);
+function apiGet(path27) {
+  return request2("GET", path27);
 }
-function apiPost(path26, body) {
-  return request2("POST", path26, body);
+function apiPost(path27, body) {
+  return request2("POST", path27, body);
 }
 async function requireSubscription() {
   const { requirePaidFeature: requirePaidFeature2 } = await Promise.resolve().then(() => (init_access(), access_exports));
@@ -5947,7 +6077,7 @@ async function fetchAndCache(slug) {
     };
     const entry = { data: profile, timestamp: Date.now(), version: 1 };
     memoryCache.set(slug, entry);
-    saveToDiskCache(slug, entry);
+    saveToDiskCache(slug, entry, profile.updated_at);
     return profile;
   } catch (err) {
     const fallback = loadFromDiskCache(slug);
@@ -5968,14 +6098,14 @@ async function refreshInBackground(slug) {
   }
 }
 function getDiskCachePath(slug) {
-  return path4.join(DISK_CACHE_DIR, `${slug.replace(/[^a-z0-9-]/gi, "_")}.json`);
+  return path5.join(DISK_CACHE_DIR, `${slug.replace(/[^a-z0-9-]/gi, "_")}.json`);
 }
 function loadFromDiskCache(slug) {
   try {
     const cachePath = getDiskCachePath(slug);
-    if (!fs3.existsSync(cachePath))
+    if (!fs5.existsSync(cachePath))
       return null;
-    const content = fs3.readFileSync(cachePath, "utf-8");
+    const content = fs5.readFileSync(cachePath, "utf-8");
     const entry = JSON.parse(content);
     if (!entry.data || !entry.timestamp)
       return null;
@@ -5984,12 +6114,24 @@ function loadFromDiskCache(slug) {
     return null;
   }
 }
-function saveToDiskCache(slug, entry) {
+function saveToDiskCache(slug, entry, serverUpdatedAt) {
   try {
-    if (!fs3.existsSync(DISK_CACHE_DIR)) {
-      fs3.mkdirSync(DISK_CACHE_DIR, { recursive: true });
+    if (!fs5.existsSync(DISK_CACHE_DIR)) {
+      fs5.mkdirSync(DISK_CACHE_DIR, { recursive: true });
+    }
+    const cachePath = getDiskCachePath(slug);
+    const existing = fs5.existsSync(cachePath) ? fs5.readFileSync(cachePath, "utf-8") : null;
+    const incoming = JSON.stringify(entry);
+    const localUpdated = getProfileMeta(slug)?.server_updated_at;
+    const serverMs = parseIsoMs(serverUpdatedAt || entry.data.updated_at);
+    const localMs = parseIsoMs(localUpdated);
+    if (existing && localMs > serverMs && serverMs > 0) {
+      return;
+    }
+    const result = safeWriteJsonFile(cachePath, incoming, existing);
+    if (result.written && serverUpdatedAt) {
+      setProfileMeta(slug, { server_updated_at: serverUpdatedAt });
     }
-    fs3.writeFileSync(getDiskCachePath(slug), JSON.stringify(entry), "utf-8");
   } catch {
   }
 }
@@ -6007,18 +6149,20 @@ function buildMinimalProfile(slug, body) {
     cadence: {}
   };
 }
-var fs3, path4, os3, CACHE_TTL, memoryCache, DISK_CACHE_DIR;
+var fs5, path5, os4, CACHE_TTL, memoryCache, DISK_CACHE_DIR;
 var init_profile = __esm({
   "src/lib/profile.ts"() {
     "use strict";
     init_api();
     init_config();
-    fs3 = __toESM(require("fs"));
-    path4 = __toESM(require("path"));
-    os3 = __toESM(require("os"));
+    init_data_safety();
+    init_profile_meta();
+    fs5 = __toESM(require("fs"));
+    path5 = __toESM(require("path"));
+    os4 = __toESM(require("os"));
     CACHE_TTL = 5 * 60 * 1e3;
     memoryCache = /* @__PURE__ */ new Map();
-    DISK_CACHE_DIR = path4.join(os3.homedir(), ".hyv", "cache", "profiles");
+    DISK_CACHE_DIR = path5.join(os4.homedir(), ".hyv", "cache", "profiles");
   }
 });
 
@@ -6033,14 +6177,14 @@ __export(local_profile_exports, {
   loadProfileFromDiskCache: () => loadProfileFromDiskCache
 });
 function cachePathForSlug(slug) {
-  return path5.join(DISK_CACHE_DIR2, `${slug.replace(/[^a-z0-9-]/gi, "_")}.json`);
+  return path6.join(DISK_CACHE_DIR2, `${slug.replace(/[^a-z0-9-]/gi, "_")}.json`);
 }
 function loadProfileFromDiskCache(slug) {
   try {
     const cachePath = cachePathForSlug(slug);
-    if (!fs4.existsSync(cachePath))
+    if (!fs6.existsSync(cachePath))
       return void 0;
-    const entry = JSON.parse(fs4.readFileSync(cachePath, "utf-8"));
+    const entry = JSON.parse(fs6.readFileSync(cachePath, "utf-8"));
     if (entry?.data?.body)
       return entry.data;
   } catch {
@@ -6064,9 +6208,9 @@ function profileFromMarkdown(slug, body) {
 function getProfileCacheAge(slug) {
   try {
     const cachePath = cachePathForSlug(slug);
-    if (!fs4.existsSync(cachePath))
+    if (!fs6.existsSync(cachePath))
       return null;
-    const entry = JSON.parse(fs4.readFileSync(cachePath, "utf-8"));
+    const entry = JSON.parse(fs6.readFileSync(cachePath, "utf-8"));
     return entry.timestamp || null;
   } catch {
     return null;
@@ -6074,9 +6218,9 @@ function getProfileCacheAge(slug) {
 }
 function listDiskCachedProfiles() {
   try {
-    if (!fs4.existsSync(DISK_CACHE_DIR2))
+    if (!fs6.existsSync(DISK_CACHE_DIR2))
       return [];
-    return fs4.readdirSync(DISK_CACHE_DIR2).filter((f) => f.endsWith(".json")).map((f) => f.replace(".json", ""));
+    return fs6.readdirSync(DISK_CACHE_DIR2).filter((f) => f.endsWith(".json")).map((f) => f.replace(".json", ""));
   } catch {
     return [];
   }
@@ -6133,17 +6277,17 @@ function hasRichProfile(profile) {
     return false;
   return (profile.never_list?.length || 0) > 0 || (profile.learned_patterns?.length || 0) > 0 || (profile.drift_snapshot?.length || 0) > 0 || (profile.voice_rules?.length || 0) > 0;
 }
-var fs4, path5, os4, DISK_CACHE_DIR2;
+var fs6, path6, os5, DISK_CACHE_DIR2;
 var init_local_profile = __esm({
   "src/lib/local-profile.ts"() {
     "use strict";
-    fs4 = __toESM(require("fs"));
-    path5 = __toESM(require("path"));
-    os4 = __toESM(require("os"));
+    fs6 = __toESM(require("fs"));
+    path6 = __toESM(require("path"));
+    os5 = __toESM(require("os"));
     init_config();
     init_config();
     init_profile();
-    DISK_CACHE_DIR2 = path5.join(os4.homedir(), ".hyv", "cache", "profiles");
+    DISK_CACHE_DIR2 = path6.join(os5.homedir(), ".hyv", "cache", "profiles");
   }
 });
 
@@ -6233,24 +6377,24 @@ var init_profile_parse = __esm({
 
 // src/lib/rules-loader.ts
 function loadSupplementalPatterns() {
-  const p = path8.join(CACHE_DIR, "supplemental-rules.json");
+  const p = path9.join(CACHE_DIR2, "supplemental-rules.json");
   try {
-    if (!fs7.existsSync(p))
+    if (!fs9.existsSync(p))
       return [];
-    const data = JSON.parse(fs7.readFileSync(p, "utf-8"));
+    const data = JSON.parse(fs9.readFileSync(p, "utf-8"));
     return Array.isArray(data.patterns) ? data.patterns : [];
   } catch {
     return [];
   }
 }
-var fs7, path8, BUNDLED_MANIFEST;
+var fs9, path9, BUNDLED_MANIFEST;
 var init_rules_loader = __esm({
   "src/lib/rules-loader.ts"() {
     "use strict";
-    fs7 = __toESM(require("fs"));
-    path8 = __toESM(require("path"));
+    fs9 = __toESM(require("fs"));
+    path9 = __toESM(require("path"));
     init_config();
-    BUNDLED_MANIFEST = path8.resolve(__dirname, "..", "..", "assets", "detection-rules.json");
+    BUNDLED_MANIFEST = path9.resolve(__dirname, "..", "..", "assets", "detection-rules.json");
   }
 });
 
@@ -7282,10 +7426,10 @@ function Ht(n7) {
   return isNaN(n7) ? n7.charCodeAt(0) : parseInt(n7, 10);
 }
 function ps(n7) {
-  return n7.replace(as, fe).replace(ls, ue).replace(cs, qt).replace(fs8, de).replace(us, pe);
+  return n7.replace(as, fe).replace(ls, ue).replace(cs, qt).replace(fs10, de).replace(us, pe);
 }
 function ms(n7) {
-  return n7.replace(is, "\\").replace(rs, "{").replace(ns, "}").replace(os5, ",").replace(hs, ".");
+  return n7.replace(is, "\\").replace(rs, "{").replace(ns, "}").replace(os6, ",").replace(hs, ".");
 }
 function me(n7) {
   if (!n7)
@@ -7385,7 +7529,7 @@ function Ut(n7, t = {}) {
 function es(n7, t = {}) {
   return new I(n7, t).iterate();
 }
-var import_node_url, import_node_path, import_node_url2, import_fs, xi, import_promises, import_node_events, import_node_stream, import_node_string_decoder, Gt, ce, ss, fe, ue, qt, de, pe, is, rs, ns, os5, hs, as, ls, cs, fs8, us, ds, at, Ss, lt, Es, we, ye, W, xs, be, vs, Ct, Cs, Ts, As, ks, Kt, Se, Ee, Q, tt, O, Rs, Os, Fs, Ds, Ms, Ns, _s, Ls, Ws, Ps, js, Is, zs, Bs, Us, $s, Gs, Hs, Ce, Te, Ae, xe, qs, A, Ks, Vs, Ys, Xs, Js, N, Zs, ke, Qs, ti, ve, ei, D, si, Oe, Vt, Fe, At, Re, ii, q, De, Tt, ri, ft, Ne, oi, hi, ai, G, H, K, kt, ut, Rt, _e, Ot, Le, P, et, v, dt, st, C, F, T, Yt, Ft, k, x, Xt, Jt, We, Zt, B, Qt, Dt, pt, Y, M, mt, li, ci, fi, ui, Mt, te, di, pi, V, vi, wt, Ue, $e, Ri, Oi, L, Ge, He, U, qe, Ke, X, Ve, _, gt, se, je, yt, j, Nt, Lt, Ie, Fi, ie, ze, bt, Be, _t, Wt, ne, Ye, R, Pt, jt, It, it, rt, St, Cr, Xe, Di, Mi, Ni, nt, _i, ot, oe, he, ae, Et, Li, zt, xt, vt, Pi, I, le, ji, Ii, zi, Bi, Ui, Ze;
+var import_node_url, import_node_path, import_node_url2, import_fs, xi, import_promises, import_node_events, import_node_stream, import_node_string_decoder, Gt, ce, ss, fe, ue, qt, de, pe, is, rs, ns, os6, hs, as, ls, cs, fs10, us, ds, at, Ss, lt, Es, we, ye, W, xs, be, vs, Ct, Cs, Ts, As, ks, Kt, Se, Ee, Q, tt, O, Rs, Os, Fs, Ds, Ms, Ns, _s, Ls, Ws, Ps, js, Is, zs, Bs, Us, $s, Gs, Hs, Ce, Te, Ae, xe, qs, A, Ks, Vs, Ys, Xs, Js, N, Zs, ke, Qs, ti, ve, ei, D, si, Oe, Vt, Fe, At, Re, ii, q, De, Tt, ri, ft, Ne, oi, hi, ai, G, H, K, kt, ut, Rt, _e, Ot, Le, P, et, v, dt, st, C, F, T, Yt, Ft, k, x, Xt, Jt, We, Zt, B, Qt, Dt, pt, Y, M, mt, li, ci, fi, ui, Mt, te, di, pi, V, vi, wt, Ue, $e, Ri, Oi, L, Ge, He, U, qe, Ke, X, Ve, _, gt, se, je, yt, j, Nt, Lt, Ie, Fi, ie, ze, bt, Be, _t, Wt, ne, Ye, R, Pt, jt, It, it, rt, St, Cr, Xe, Di, Mi, Ni, nt, _i, ot, oe, he, ae, Et, Li, zt, xt, vt, Pi, I, le, ji, Ii, zi, Bi, Ui, Ze;
 var init_index_min = __esm({
   "node_modules/glob/dist/esm/index.min.js"() {
     import_node_url = require("node:url");
@@ -7432,12 +7576,12 @@ var init_index_min = __esm({
     is = new RegExp(fe, "g");
     rs = new RegExp(ue, "g");
     ns = new RegExp(qt, "g");
-    os5 = new RegExp(de, "g");
+    os6 = new RegExp(de, "g");
     hs = new RegExp(pe, "g");
     as = /\\\\/g;
     ls = /\\{/g;
     cs = /\\}/g;
-    fs8 = /\\,/g;
+    fs10 = /\\,/g;
     us = /\\./g;
     ds = 1e5;
     at = (n7) => {
@@ -10583,7 +10727,7 @@ globstar while`, t, d, e, f, m), this.matchOne(t.slice(d), e.slice(f), s))
 
 // src/lib/document-text.ts
 function isSupportedDocument(filePath) {
-  return SUPPORTED_EXTENSIONS.has(path9.extname(filePath).toLowerCase());
+  return SUPPORTED_EXTENSIONS.has(path10.extname(filePath).toLowerCase());
 }
 function stripHtml(html) {
   return html.replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<br\s*\/?>/gi, "\n").replace(/<\/p>/gi, "\n").replace(/<[^>]+>/g, " ").replace(/&nbsp;/gi, " ").replace(/&amp;/gi, "&").replace(/&lt;/gi, "<").replace(/&gt;/gi, ">").replace(/&quot;/gi, '"').replace(/&#39;/gi, "'").replace(/\s+\n/g, "\n").replace(/[ \t]+/g, " ").replace(/\n{3,}/g, "\n\n").trim();
@@ -10672,7 +10816,7 @@ function extractPdf(filePath) {
     if (out.trim())
       return out.trim();
   }
-  const raw = extractPdfRaw(fs9.readFileSync(filePath));
+  const raw = extractPdfRaw(fs11.readFileSync(filePath));
   if (raw.trim().length > 20)
     return raw;
   throw new Error("could not extract text from .pdf \u2014 try pasting the draft instead");
@@ -10694,23 +10838,23 @@ function extractSkillArchive(filePath) {
   return parts.join("\n\n");
 }
 function extractTextFromFile(filePath) {
-  const resolved = path9.resolve(filePath);
-  if (!fs9.existsSync(resolved)) {
+  const resolved = path10.resolve(filePath);
+  if (!fs11.existsSync(resolved)) {
     throw new Error(`file not found: ${resolved}`);
   }
-  const stat = fs9.statSync(resolved);
+  const stat = fs11.statSync(resolved);
   if (!stat.isFile()) {
     throw new Error(`not a file: ${resolved}`);
   }
-  const ext = path9.extname(resolved).toLowerCase();
+  const ext = path10.extname(resolved).toLowerCase();
   switch (ext) {
     case ".md":
     case ".txt":
     case ".markdown":
-      return fs9.readFileSync(resolved, "utf-8");
+      return fs11.readFileSync(resolved, "utf-8");
     case ".html":
     case ".htm":
-      return stripHtml(fs9.readFileSync(resolved, "utf-8"));
+      return stripHtml(fs11.readFileSync(resolved, "utf-8"));
     case ".docx":
       return extractDocx(resolved);
     case ".pdf":
@@ -10730,11 +10874,11 @@ function listDocumentsInDir(dirPath) {
   }).filter(isSupportedDocument);
 }
 function collectDocumentsFromPath(inputPath) {
-  const resolved = path9.resolve(inputPath.trim().replace(/^~(?=$|\/)/, os6.homedir()));
-  if (!fs9.existsSync(resolved)) {
+  const resolved = path10.resolve(inputPath.trim().replace(/^~(?=$|\/)/, os7.homedir()));
+  if (!fs11.existsSync(resolved)) {
     throw new Error(`path not found: ${resolved}`);
   }
-  const stat = fs9.statSync(resolved);
+  const stat = fs11.statSync(resolved);
   const files = stat.isFile() ? [resolved] : listDocumentsInDir(resolved);
   if (!files.length) {
     throw new Error(
@@ -10761,20 +10905,20 @@ function readDraftInput(input) {
   const trimmed = input.trim();
   if (!trimmed)
     throw new Error("empty draft");
-  const maybePath = path9.resolve(trimmed.replace(/^~(?=$|\/)/, os6.homedir()));
-  if (fs9.existsSync(maybePath) && fs9.statSync(maybePath).isFile()) {
+  const maybePath = path10.resolve(trimmed.replace(/^~(?=$|\/)/, os7.homedir()));
+  if (fs11.existsSync(maybePath) && fs11.statSync(maybePath).isFile()) {
     return { text: extractTextFromFile(maybePath), source: maybePath };
   }
   return { text: trimmed, source: "paste" };
 }
-var import_child_process2, fs9, os6, path9, SUPPORTED_EXTENSIONS, SAMPLE_GLOB, GLOB_IGNORE;
+var import_child_process2, fs11, os7, path10, SUPPORTED_EXTENSIONS, SAMPLE_GLOB, GLOB_IGNORE;
 var init_document_text = __esm({
   "src/lib/document-text.ts"() {
     "use strict";
     import_child_process2 = require("child_process");
-    fs9 = __toESM(require("fs"));
-    os6 = __toESM(require("os"));
-    path9 = __toESM(require("path"));
+    fs11 = __toESM(require("fs"));
+    os7 = __toESM(require("os"));
+    path10 = __toESM(require("path"));
     init_index_min();
     SUPPORTED_EXTENSIONS = /* @__PURE__ */ new Set([
       ".md",
@@ -10849,21 +10993,21 @@ function runPipeline(text, profile, applyFixes = false) {
   };
 }
 function readText(source) {
-  const fs28 = require("fs");
-  const path26 = require("path");
+  const fs30 = require("fs");
+  const path27 = require("path");
   if (source === "-") {
     if (process.stdin.isTTY) {
       console.error("No input provided. Pipe content or specify a file.");
       process.exit(1);
     }
-    return { text: fs28.readFileSync(0, "utf-8"), path: "stdin" };
+    return { text: fs30.readFileSync(0, "utf-8"), path: "stdin" };
   }
-  const resolved = path26.resolve(source);
-  if (!fs28.existsSync(resolved)) {
+  const resolved = path27.resolve(source);
+  if (!fs30.existsSync(resolved)) {
     console.error(`File not found: ${resolved}`);
     process.exit(1);
   }
-  const stat = fs28.statSync(resolved);
+  const stat = fs30.statSync(resolved);
   if (stat.isDirectory()) {
     console.error(`${resolved} is a directory, not a file.`);
     process.exit(1);
@@ -11315,10 +11459,10 @@ var init_terminal_ui = __esm({
 // src/lib/welcome-flow.ts
 function readWelcomeState() {
   try {
-    if (!fs13.existsSync(STATE_FILE)) {
+    if (!fs15.existsSync(STATE_FILE)) {
       return { completed_steps: [], updated_at: (/* @__PURE__ */ new Date()).toISOString() };
     }
-    return JSON.parse(fs13.readFileSync(STATE_FILE, "utf-8"));
+    return JSON.parse(fs15.readFileSync(STATE_FILE, "utf-8"));
   } catch {
     return { completed_steps: [], updated_at: (/* @__PURE__ */ new Date()).toISOString() };
   }
@@ -11330,7 +11474,7 @@ function writeWelcomeState(patch) {
     ...patch,
     updated_at: (/* @__PURE__ */ new Date()).toISOString()
   };
-  fs13.writeFileSync(STATE_FILE, JSON.stringify(next, null, 2), { mode: 384 });
+  fs15.writeFileSync(STATE_FILE, JSON.stringify(next, null, 2), { mode: 384 });
   return next;
 }
 function markStepComplete(step) {
@@ -11559,7 +11703,7 @@ function saveLocalProfile(name, content) {
   writeWelcomeState({ profile_name: safe });
   markStepComplete("name");
   markStepComplete("samples");
-  return path13.join(os7.homedir(), ".hyv", "profiles", `${safe}.md`);
+  return path14.join(os8.homedir(), ".hyv", "profiles", `${safe}.md`);
 }
 function fetchUrlText(url) {
   return new Promise((resolve15, reject) => {
@@ -11781,8 +11925,8 @@ async function stepSignup(profileName) {
   } else {
     console.log(import_chalk12.default.dim("\n  already signed in \u2014 syncing profile..."));
   }
-  const content = fs13.readFileSync(
-    path13.join(os7.homedir(), ".hyv", "profiles", `${profileName}.md`),
+  const content = fs15.readFileSync(
+    path14.join(os8.homedir(), ".hyv", "profiles", `${profileName}.md`),
     "utf-8"
   );
   try {
@@ -11794,7 +11938,12 @@ async function stepSignup(profileName) {
       })
     );
     if (response.status === 200) {
-      console.log(import_chalk12.default.green("  \u2713 profile synced to your account"));
+      const body = response.data;
+      if (body.preserved) {
+        console.log(import_chalk12.default.green("  \u2713 account linked \u2014 kept your existing server profile"));
+      } else {
+        console.log(import_chalk12.default.green("  \u2713 profile synced to your account"));
+      }
     } else {
       const detail = response.data?.error;
       console.log(import_chalk12.default.yellow(
@@ -11842,16 +11991,16 @@ function getMcpWelcomeResponse(args2) {
   }
   return buildWelcomeGuide({ profileName: args2.profile, forLlm: true });
 }
-var import_chalk12, fs13, http2, https2, os7, path13, readline, WELCOME_TAGLINE, FLOW_STEPS, STATE_FILE;
+var import_chalk12, fs15, http2, https2, os8, path14, readline, WELCOME_TAGLINE, FLOW_STEPS, STATE_FILE;
 var init_welcome_flow = __esm({
   "src/lib/welcome-flow.ts"() {
     "use strict";
     import_chalk12 = __toESM(require_source());
-    fs13 = __toESM(require("fs"));
+    fs15 = __toESM(require("fs"));
     http2 = __toESM(require("http"));
     https2 = __toESM(require("https"));
-    os7 = __toESM(require("os"));
-    path13 = __toESM(require("path"));
+    os8 = __toESM(require("os"));
+    path14 = __toESM(require("path"));
     readline = __toESM(require("readline"));
     init_pipeline();
     init_document_text();
@@ -11870,7 +12019,7 @@ var init_welcome_flow = __esm({
       { n: 3, key: "test", title: "test on a draft", hint: "optional \u2014 scan or rewrite a draft" },
       { n: 4, key: "signup", title: "save & unlock", hint: "signup syncs your profile and unlocks learning" }
     ];
-    STATE_FILE = path13.join(os7.homedir(), ".hyv", "welcome-state.json");
+    STATE_FILE = path14.join(os8.homedir(), ".hyv", "welcome-state.json");
   }
 });
 
@@ -12858,15 +13007,15 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s))
       g.minimatch.escape = vi2.escape;
       g.minimatch.unescape = Ei2.unescape;
     });
-    var fs28 = R2((Wt2) => {
+    var fs30 = R2((Wt2) => {
       "use strict";
       Object.defineProperty(Wt2, "__esModule", { value: true });
       Wt2.LRUCache = void 0;
       var er = typeof performance == "object" && performance && typeof performance.now == "function" ? performance : Date, as2 = /* @__PURE__ */ new Set(), ge2 = typeof process == "object" && process ? process : {}, ls2 = (n7, t, e, s) => {
         typeof ge2.emitWarning == "function" ? ge2.emitWarning(n7, t, e, s) : console.error(`[${e}] ${t}: ${n7}`);
-      }, Lt2 = globalThis.AbortController, os12 = globalThis.AbortSignal;
+      }, Lt2 = globalThis.AbortController, os13 = globalThis.AbortSignal;
       if (typeof Lt2 > "u") {
-        os12 = class {
+        os13 = class {
           onabort;
           _onabort = [];
           reason;
@@ -12878,7 +13027,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s))
           constructor() {
             t();
           }
-          signal = new os12();
+          signal = new os13();
           abort(e) {
             if (!this.signal.aborted) {
               this.signal.reason = e, this.signal.aborted = true;
@@ -13827,7 +13976,7 @@ globstar while`, t, d, e, u, m), this.matchOne(t.slice(d), e.slice(u), s))
       };
       Object.defineProperty(_2, "__esModule", { value: true });
       _2.PathScurry = _2.Path = _2.PathScurryDarwin = _2.PathScurryPosix = _2.PathScurryWin32 = _2.PathScurryBase = _2.PathPosix = _2.PathWin32 = _2.PathBase = _2.ChildrenCache = _2.ResolveCache = void 0;
-      var Qt2 = fs28(), Yt2 = require("node:path"), yr = require("node:url"), pt2 = require("fs"), Sr = br(require("node:fs")), vr = pt2.realpathSync.native, Ht2 = require("node:fs/promises"), bs2 = Oe2(), mt2 = { lstatSync: pt2.lstatSync, readdir: pt2.readdir, readdirSync: pt2.readdirSync, readlinkSync: pt2.readlinkSync, realpathSync: vr, promises: { lstat: Ht2.lstat, readdir: Ht2.readdir, readlink: Ht2.readlink, realpath: Ht2.realpath } }, _s2 = (n7) => !n7 || n7 === mt2 || n7 === Sr ? mt2 : { ...mt2, ...n7, promises: { ...mt2.promises, ...n7.promises || {} } }, Os2 = /^\\\\\?\\([a-z]:)\\?$/i, Er = (n7) => n7.replace(/\//g, "\\").replace(Os2, "$1\\"), _r = /[\\\/]/, N2 = 0, xs2 = 1, Ts2 = 2, G2 = 4, Cs2 = 6, Rs2 = 8, Q2 = 10, As2 = 12, j2 = 15, dt2 = ~j2, xe2 = 16, ys2 = 32, gt2 = 64, W2 = 128, Vt2 = 256, Xt2 = 512, Ss2 = gt2 | W2 | Xt2, Or = 1023, Te2 = (n7) => n7.isFile() ? Rs2 : n7.isDirectory() ? G2 : n7.isSymbolicLink() ? Q2 : n7.isCharacterDevice() ? Ts2 : n7.isBlockDevice() ? Cs2 : n7.isSocket() ? As2 : n7.isFIFO() ? xs2 : N2, vs2 = new Qt2.LRUCache({ max: 2 ** 12 }), wt2 = (n7) => {
+      var Qt2 = fs30(), Yt2 = require("node:path"), yr = require("node:url"), pt2 = require("fs"), Sr = br(require("node:fs")), vr = pt2.realpathSync.native, Ht2 = require("node:fs/promises"), bs2 = Oe2(), mt2 = { lstatSync: pt2.lstatSync, readdir: pt2.readdir, readdirSync: pt2.readdirSync, readlinkSync: pt2.readlinkSync, realpathSync: vr, promises: { lstat: Ht2.lstat, readdir: Ht2.readdir, readlink: Ht2.readlink, realpath: Ht2.realpath } }, _s2 = (n7) => !n7 || n7 === mt2 || n7 === Sr ? mt2 : { ...mt2, ...n7, promises: { ...mt2.promises, ...n7.promises || {} } }, Os2 = /^\\\\\?\\([a-z]:)\\?$/i, Er = (n7) => n7.replace(/\//g, "\\").replace(Os2, "$1\\"), _r = /[\\\/]/, N2 = 0, xs2 = 1, Ts2 = 2, G2 = 4, Cs2 = 6, Rs2 = 8, Q2 = 10, As2 = 12, j2 = 15, dt2 = ~j2, xe2 = 16, ys2 = 32, gt2 = 64, W2 = 128, Vt2 = 256, Xt2 = 512, Ss2 = gt2 | W2 | Xt2, Or = 1023, Te2 = (n7) => n7.isFile() ? Rs2 : n7.isDirectory() ? G2 : n7.isSymbolicLink() ? Q2 : n7.isCharacterDevice() ? Ts2 : n7.isBlockDevice() ? Cs2 : n7.isSocket() ? As2 : n7.isFIFO() ? xs2 : N2, vs2 = new Qt2.LRUCache({ max: 2 ** 12 }), wt2 = (n7) => {
         let t = vs2.get(n7);
         if (t)
           return t;
@@ -15522,8 +15671,8 @@ init_version();
 
 // src/lib/queue-sync.ts
 var import_chalk6 = __toESM(require_source());
-var fs5 = __toESM(require("fs"));
-var path6 = __toESM(require("path"));
+var fs7 = __toESM(require("fs"));
+var path7 = __toESM(require("path"));
 init_config();
 init_auth();
 async function flushQueuedSignals() {
@@ -15532,13 +15681,13 @@ async function flushQueuedSignals() {
     return { sent: 0, failed: 0 };
   let sent = 0;
   let failed = 0;
-  if (!fs5.existsSync(QUEUE_DIR))
+  if (!fs7.existsSync(QUEUE_DIR))
     return { sent: 0, failed: 0 };
-  const files = fs5.readdirSync(QUEUE_DIR).filter((f) => f.endsWith(".json"));
+  const files = fs7.readdirSync(QUEUE_DIR).filter((f) => f.endsWith(".json"));
   for (const file of files) {
-    const filePath = path6.join(QUEUE_DIR, file);
+    const filePath = path7.join(QUEUE_DIR, file);
     try {
-      const signal = JSON.parse(fs5.readFileSync(filePath, "utf-8"));
+      const signal = JSON.parse(fs7.readFileSync(filePath, "utf-8"));
       let ok = false;
       if (signal.type === "reinforce") {
         const res = await authenticatedRequest(cliApiUrl("/cli/learning/reinforce"), {
@@ -15559,7 +15708,7 @@ async function flushQueuedSignals() {
         ok = res.status === 200;
       }
       if (ok) {
-        fs5.unlinkSync(filePath);
+        fs7.unlinkSync(filePath);
         sent++;
       } else {
         failed++;
@@ -15716,8 +15865,9 @@ init_config();
 init_auth();
 init_access();
 init_profile();
-var fs6 = __toESM(require("fs"));
-var path7 = __toESM(require("path"));
+init_profile_meta();
+var fs8 = __toESM(require("fs"));
+var path8 = __toESM(require("path"));
 function registerSyncCommand(program3) {
   program3.command("sync").description("Sync profiles and rules from server").option("--force", "Force re-download even if cache is fresh").action(async (options) => {
     try {
@@ -15735,23 +15885,40 @@ function registerSyncCommand(program3) {
       const data = response.data;
       ensureHyvDir();
       let profileCount = 0;
+      let skippedNewer = 0;
       for (const profile of data.profiles) {
+        if (!profile.content?.trim()) {
+          console.log(import_chalk8.default.yellow(`  ! skipped empty profile cache: ${profile.name}`));
+          continue;
+        }
         const cacheKey = toSafeProfileCacheKey(profile.slug || profile.name);
+        if (!shouldApplyServerProfileUpdate(profile.updated_at, cacheKey, options.force)) {
+          skippedNewer++;
+          console.log(import_chalk8.default.yellow(`  ! kept newer local profile: ${profile.name}`));
+          continue;
+        }
         writeCachedProfile(cacheKey, profile.content);
+        setProfileMeta(cacheKey, { server_updated_at: profile.updated_at });
         profileCount++;
       }
-      const rulesPath = path7.join(CACHE_DIR, "rules.md");
-      fs6.writeFileSync(rulesPath, data.rules, { mode: 384 });
-      const promptPath = path7.join(CACHE_DIR, "prompt-template.md");
-      fs6.writeFileSync(promptPath, data.prompt_template, { mode: 384 });
+      const rulesPath = path8.join(CACHE_DIR2, "rules.md");
+      fs8.writeFileSync(rulesPath, data.rules, { mode: 384 });
+      const promptPath = path8.join(CACHE_DIR2, "prompt-template.md");
+      fs8.writeFileSync(promptPath, data.prompt_template, { mode: 384 });
       if (data.detection_rules) {
-        const rulesJson = path7.join(CACHE_DIR, "detection-rules.json");
-        fs6.writeFileSync(rulesJson, JSON.stringify(data.detection_rules, null, 2), { mode: 384 });
+        const rulesJson = path8.join(CACHE_DIR2, "detection-rules.json");
+        fs8.writeFileSync(rulesJson, JSON.stringify(data.detection_rules, null, 2), { mode: 384 });
       }
       for (const profile of data.profiles) {
         try {
           const cacheKey = toSafeProfileCacheKey(profile.slug || profile.name);
-          await loadFullProfile(cacheKey, { forceRefresh: true });
+          if (!shouldApplyServerProfileUpdate(profile.updated_at, cacheKey, options.force)) {
+            continue;
+          }
+          await loadFullProfile(cacheKey, {
+            forceRefresh: true,
+            serverUpdatedAt: profile.updated_at
+          });
         } catch {
         }
       }
@@ -15762,8 +15929,8 @@ function registerSyncCommand(program3) {
       if (queueResult.failed > 0) {
         console.log(import_chalk8.default.yellow(`  ! ${queueResult.failed} queued signal(s) could not send`));
       }
-      const metaPath = path7.join(CACHE_DIR, "sync-meta.json");
-      fs6.writeFileSync(metaPath, JSON.stringify({
+      const metaPath = path8.join(CACHE_DIR2, "sync-meta.json");
+      fs8.writeFileSync(metaPath, JSON.stringify({
         synced_at: data.synced_at,
         profile_count: profileCount,
         plan: data.plan
@@ -15771,6 +15938,9 @@ function registerSyncCommand(program3) {
       console.log(import_chalk8.default.green(`
 \u2713 Synced successfully!`));
       console.log(import_chalk8.default.dim(`  Profiles: ${profileCount}`));
+      if (skippedNewer > 0) {
+        console.log(import_chalk8.default.dim(`  Kept local (newer): ${skippedNewer} \u2014 use --force to overwrite`));
+      }
       console.log(import_chalk8.default.dim(`  Rules: cached`));
       console.log(import_chalk8.default.dim(`  Prompt template: cached`));
       console.log(import_chalk8.default.dim(`  Plan: ${data.plan}`));
@@ -15868,21 +16038,21 @@ Profile evolution: ${slug}
 
 // src/commands/rewrite.ts
 var import_chalk9 = __toESM(require_source());
-var fs11 = __toESM(require("fs"));
-var path11 = __toESM(require("path"));
+var fs13 = __toESM(require("fs"));
+var path12 = __toESM(require("path"));
 init_pipeline();
 
 // src/lib/prompt.ts
-var fs10 = __toESM(require("fs"));
-var path10 = __toESM(require("path"));
+var fs12 = __toESM(require("fs"));
+var path11 = __toESM(require("path"));
 init_config();
 init_signals();
 init_profile_parse();
 function loadPromptTemplate() {
-  const templatePath = path10.join(CACHE_DIR, "prompt-template.md");
+  const templatePath = path11.join(CACHE_DIR2, "prompt-template.md");
   try {
-    if (fs10.existsSync(templatePath)) {
-      return fs10.readFileSync(templatePath, "utf-8");
+    if (fs12.existsSync(templatePath)) {
+      return fs12.readFileSync(templatePath, "utf-8");
     }
   } catch {
   }
@@ -16069,8 +16239,8 @@ Draft: ${draftPath}`));
   ${result.stats.autoFixed} issues can be auto-fixed \u2014 run: hyv fix ${file}`));
       }
       if (options.output) {
-        const outputPath = path11.resolve(options.output);
-        fs11.writeFileSync(outputPath, promptResult.prompt);
+        const outputPath = path12.resolve(options.output);
+        fs13.writeFileSync(outputPath, promptResult.prompt);
         console.log(import_chalk9.default.green(`
 \u2713 Prompt written to ${outputPath}`));
       } else {
@@ -16090,8 +16260,8 @@ Draft: ${draftPath}`));
 
 // src/commands/learning.ts
 var import_chalk10 = __toESM(require_source());
-var fs12 = __toESM(require("fs"));
-var path12 = __toESM(require("path"));
+var fs14 = __toESM(require("fs"));
+var path13 = __toESM(require("path"));
 
 // src/lib/diff.ts
 init_scan();
@@ -16235,18 +16405,18 @@ function registerLearningCommands(program3) {
           console.error(import_chalk10.default.red("Provide <original> <edited> or use --last"));
           process.exit(1);
         }
-        origPath = path12.resolve(original);
-        editPath = path12.resolve(edited);
-        if (!fs12.existsSync(origPath)) {
+        origPath = path13.resolve(original);
+        editPath = path13.resolve(edited);
+        if (!fs14.existsSync(origPath)) {
           console.error(import_chalk10.default.red(`Original file not found: ${origPath}`));
           process.exit(1);
         }
-        if (!fs12.existsSync(editPath)) {
+        if (!fs14.existsSync(editPath)) {
           console.error(import_chalk10.default.red(`Edited file not found: ${editPath}`));
           process.exit(1);
         }
-        origText = fs12.readFileSync(origPath, "utf-8");
-        editText = fs12.readFileSync(editPath, "utf-8");
+        origText = fs14.readFileSync(origPath, "utf-8");
+        editText = fs14.readFileSync(editPath, "utf-8");
         saveLastEditSession({
           original_path: origPath,
           edited_path: editPath,
@@ -16413,8 +16583,8 @@ function printProfileImpact(impact, data) {
 
 // src/commands/onboarding.ts
 var import_chalk13 = __toESM(require_source());
-var fs14 = __toESM(require("fs"));
-var path14 = __toESM(require("path"));
+var fs16 = __toESM(require("fs"));
+var path15 = __toESM(require("path"));
 init_config();
 init_auth();
 init_scan();
@@ -16565,24 +16735,24 @@ Industry: ${industry}
   }
 }
 async function createFromSamples(name, sampleDir, token) {
-  const dirPath = path14.resolve(sampleDir);
-  if (!fs14.existsSync(dirPath)) {
+  const dirPath = path15.resolve(sampleDir);
+  if (!fs16.existsSync(dirPath)) {
     throw new Error(`Directory not found: ${dirPath}`);
   }
   console.log(import_chalk13.default.bold(`
 Creating voice profile: ${name}`));
   console.log(import_chalk13.default.dim(`Reading samples from: ${dirPath}
 `));
-  const files = fs14.readdirSync(dirPath).filter((f) => f.endsWith(".md") || f.endsWith(".txt")).map((f) => path14.join(dirPath, f));
+  const files = fs16.readdirSync(dirPath).filter((f) => f.endsWith(".md") || f.endsWith(".txt")).map((f) => path15.join(dirPath, f));
   if (files.length === 0) {
     throw new Error("No .md or .txt files found in directory");
   }
   const samples = [];
   for (const file of files) {
-    const text = fs14.readFileSync(file, "utf-8");
+    const text = fs16.readFileSync(file, "utf-8");
     if (text.trim().length > 0) {
       samples.push({ path: file, text });
-      console.log(import_chalk13.default.dim(`  \u2022 ${path14.basename(file)} (${words(text).length} words)`));
+      console.log(import_chalk13.default.dim(`  \u2022 ${path15.basename(file)} (${words(text).length} words)`));
     }
   }
   if (samples.length === 0) {
@@ -16653,12 +16823,12 @@ function registerImportCommand(program3) {
   program3.command("import").description("Import a voice profile from file").argument("<name>", "Profile name").argument("<file>", "Profile markdown file").action(async (name, file) => {
     try {
       assertSafeProfileName(name);
-      const filePath = path14.resolve(file);
-      if (!fs14.existsSync(filePath)) {
+      const filePath = path15.resolve(file);
+      if (!fs16.existsSync(filePath)) {
         console.error(import_chalk13.default.red(`File not found: ${filePath}`));
         process.exit(1);
       }
-      const content = fs14.readFileSync(filePath, "utf-8");
+      const content = fs16.readFileSync(filePath, "utf-8");
       ensureHyvDir();
       writeCachedProfile(name, content);
       console.log(import_chalk13.default.green(`
@@ -17029,11 +17199,11 @@ async function runHybridAnalysis(text, profile, opts = {}) {
 
 // src/commands/history.ts
 var import_chalk16 = __toESM(require_source());
-var fs15 = __toESM(require("fs"));
-var path15 = __toESM(require("path"));
+var fs17 = __toESM(require("fs"));
+var path16 = __toESM(require("path"));
 init_config();
-var HISTORY_DIR = path15.join(HYV_DIR, "history");
-var HISTORY_FILE = path15.join(HISTORY_DIR, "scans.jsonl");
+var HISTORY_DIR = path16.join(HYV_DIR, "history");
+var HISTORY_FILE = path16.join(HISTORY_DIR, "scans.jsonl");
 function logScan(entry) {
   try {
     ensureHyvDir();
@@ -17043,9 +17213,9 @@ function logScan(entry) {
 }
 function readHistory() {
   try {
-    if (!fs15.existsSync(HISTORY_FILE))
+    if (!fs17.existsSync(HISTORY_FILE))
       return [];
-    const lines = fs15.readFileSync(HISTORY_FILE, "utf-8").trim().split("\n").filter(Boolean);
+    const lines = fs17.readFileSync(HISTORY_FILE, "utf-8").trim().split("\n").filter(Boolean);
     return lines.map((l) => JSON.parse(l));
   } catch {
     return [];
@@ -17077,8 +17247,8 @@ function registerHistoryCommand(program3) {
   program3.command("history").description("Show past scan scores and track improvement").option("--limit <n>", "Number of entries to show", "20").option("--file <path>", "Filter by file path").option("--since <date>", "Show entries since (e.g., 7d, 1m, 2024-01-01)").option("--chart", "Show ASCII sparkline chart").option("--clear", "Clear history").option("--format <type>", "Output format (text, json)", "text").action(async (options) => {
     try {
       if (options.clear) {
-        if (fs15.existsSync(HISTORY_FILE)) {
-          fs15.unlinkSync(HISTORY_FILE);
+        if (fs17.existsSync(HISTORY_FILE)) {
+          fs17.unlinkSync(HISTORY_FILE);
         }
         console.log(import_chalk16.default.green("\n\u2713 History cleared"));
         return;
@@ -17136,7 +17306,7 @@ function registerHistoryCommand(program3) {
         const icon = entry.issues === 0 ? import_chalk16.default.green("\u2713") : import_chalk16.default.red("\u25CF");
         const score = entry.score < 60 ? import_chalk16.default.red(`${entry.score}/100`) : entry.score < 80 ? import_chalk16.default.yellow(`${entry.score}/100`) : import_chalk16.default.green(`${entry.score}/100`);
         const issues = entry.issues > 0 ? import_chalk16.default.red(`${entry.issues} issues`) : import_chalk16.default.dim("clean");
-        const file = path15.basename(entry.file).slice(0, 25).padEnd(25);
+        const file = path16.basename(entry.file).slice(0, 25).padEnd(25);
         console.log(`  ${import_chalk16.default.dim(time)}  ${icon} ${file} ${score}  ${issues}`);
       }
       console.log("");
@@ -17244,9 +17414,9 @@ hyv scan ${filePath}`));
 
 // src/commands/doctor.ts
 var import_chalk18 = __toESM(require_source());
-var fs17 = __toESM(require("fs"));
-var path17 = __toESM(require("path"));
-var os8 = __toESM(require("os"));
+var fs19 = __toESM(require("fs"));
+var path18 = __toESM(require("path"));
+var os9 = __toESM(require("os"));
 init_config();
 init_auth();
 init_access();
@@ -17257,15 +17427,15 @@ init_version();
 var import_child_process3 = require("child_process");
 
 // src/lib/cli-entry.ts
-var fs16 = __toESM(require("fs"));
-var path16 = __toESM(require("path"));
+var fs18 = __toESM(require("fs"));
+var path17 = __toESM(require("path"));
 function resolveCliEntry() {
   const candidates = [
-    path16.resolve(process.argv[1] || ""),
-    path16.resolve(__dirname, "index.js"),
-    path16.resolve(__dirname, "..", "dist", "index.js")
+    path17.resolve(process.argv[1] || ""),
+    path17.resolve(__dirname, "index.js"),
+    path17.resolve(__dirname, "..", "dist", "index.js")
   ];
-  return candidates.find((p) => p && fs16.existsSync(p)) || null;
+  return candidates.find((p) => p && fs18.existsSync(p)) || null;
 }
 function mcpServerCommand() {
   const entry = resolveCliEntry();
@@ -17351,20 +17521,20 @@ async function testMcpStdioSubprocess() {
 }
 
 // src/commands/doctor.ts
-var HOME = os8.homedir();
+var HOME = os9.homedir();
 var IS_WIN = process.platform === "win32";
 function claudeDesktopDir() {
   if (IS_WIN)
-    return path17.join(HOME, "AppData", "Roaming", "Claude");
+    return path18.join(HOME, "AppData", "Roaming", "Claude");
   if (process.platform === "linux")
-    return path17.join(HOME, ".config", "Claude");
-  return path17.join(HOME, "Library", "Application Support", "Claude");
+    return path18.join(HOME, ".config", "Claude");
+  return path18.join(HOME, "Library", "Application Support", "Claude");
 }
 function isOwnerOnlyFile(filePath) {
   try {
-    if (!fs17.existsSync(filePath))
+    if (!fs19.existsSync(filePath))
       return true;
-    const mode = fs17.statSync(filePath).mode & 511;
+    const mode = fs19.statSync(filePath).mode & 511;
     return (mode & 63) === 0;
   } catch {
     return false;
@@ -17372,9 +17542,9 @@ function isOwnerOnlyFile(filePath) {
 }
 function readMcpHyv(configFile) {
   try {
-    if (!fs17.existsSync(configFile))
+    if (!fs19.existsSync(configFile))
       return false;
-    const cfg = JSON.parse(fs17.readFileSync(configFile, "utf-8"));
+    const cfg = JSON.parse(fs19.readFileSync(configFile, "utf-8"));
     return Boolean(cfg.mcpServers?.hyv);
   } catch {
     return false;
@@ -17395,28 +17565,28 @@ function registerDoctorCommand(program3) {
     console.log(import_chalk18.default.dim("tip: run hyv welcome for free capabilities\n"));
     console.log(import_chalk18.default.dim("checking cli installation..."));
     const cliPath = process.argv[1];
-    if (cliPath && fs17.existsSync(cliPath)) {
+    if (cliPath && fs19.existsSync(cliPath)) {
       console.log(import_chalk18.default.green("  \u2713 cli installed"));
     } else {
       console.log(import_chalk18.default.red("  \u2717 cli not found"));
       issues++;
     }
     console.log(import_chalk18.default.dim("checking .hyv directory..."));
-    if (fs17.existsSync(HYV_DIR)) {
+    if (fs19.existsSync(HYV_DIR)) {
       console.log(import_chalk18.default.green("  \u2713 .hyv directory exists"));
     } else {
       console.log(import_chalk18.default.yellow("  ! .hyv directory missing \u2014 creating..."));
-      fs17.mkdirSync(HYV_DIR, { recursive: true, mode: 448 });
+      fs19.mkdirSync(HYV_DIR, { recursive: true, mode: 448 });
       fixed++;
     }
     console.log(import_chalk18.default.dim("checking cache..."));
     const diskProfiles = listDiskCachedProfiles();
-    const syncMeta = path17.join(CACHE_DIR, "sync-meta.json");
-    if (diskProfiles.length > 0 || fs17.existsSync(syncMeta)) {
+    const syncMeta = path18.join(CACHE_DIR2, "sync-meta.json");
+    if (diskProfiles.length > 0 || fs19.existsSync(syncMeta)) {
       console.log(import_chalk18.default.green(`  \u2713 profile cache (${diskProfiles.length} full profile(s))`));
-      if (fs17.existsSync(syncMeta)) {
+      if (fs19.existsSync(syncMeta)) {
         try {
-          const meta = JSON.parse(fs17.readFileSync(syncMeta, "utf-8"));
+          const meta = JSON.parse(fs19.readFileSync(syncMeta, "utf-8"));
           console.log(import_chalk18.default.dim(`    last sync: ${meta.synced_at || "unknown"}`));
         } catch {
         }
@@ -17425,8 +17595,8 @@ function registerDoctorCommand(program3) {
       console.log(import_chalk18.default.dim("  - no full profile cache (free local engine still works)"));
     }
     console.log(import_chalk18.default.dim("checking file permissions..."));
-    if (fs17.existsSync(HYV_DIR)) {
-      const hyvMode = fs17.statSync(HYV_DIR).mode & 511;
+    if (fs19.existsSync(HYV_DIR)) {
+      const hyvMode = fs19.statSync(HYV_DIR).mode & 511;
       if ((hyvMode & 63) === 0) {
         console.log(import_chalk18.default.green("  \u2713 .hyv directory permissions"));
       } else {
@@ -17435,7 +17605,7 @@ function registerDoctorCommand(program3) {
         issues++;
       }
     }
-    if (fs17.existsSync(AUTH_FILE)) {
+    if (fs19.existsSync(AUTH_FILE)) {
       if (isOwnerOnlyFile(AUTH_FILE)) {
         console.log(import_chalk18.default.green("  \u2713 auth.json permissions"));
       } else {
@@ -17468,9 +17638,9 @@ function registerDoctorCommand(program3) {
       console.log(import_chalk18.default.dim("    run: hyv init for profiles + learning"));
     }
     console.log(import_chalk18.default.dim("checking voice profile..."));
-    const voiceMd = path17.join(HYV_DIR, "voice.md");
-    const hasVoiceMd = fs17.existsSync(voiceMd) && fs17.readFileSync(voiceMd, "utf-8").trim().length > 50;
-    const profileFiles = fs17.existsSync(PROFILES_DIR) ? fs17.readdirSync(PROFILES_DIR).filter((f) => f.endsWith(".md") && f !== "voice.md") : [];
+    const voiceMd = path18.join(HYV_DIR, "voice.md");
+    const hasVoiceMd = fs19.existsSync(voiceMd) && fs19.readFileSync(voiceMd, "utf-8").trim().length > 50;
+    const profileFiles = fs19.existsSync(PROFILES_DIR) ? fs19.readdirSync(PROFILES_DIR).filter((f) => f.endsWith(".md") && f !== "voice.md") : [];
     if (hasVoiceMd || profileFiles.length > 0 || diskProfiles.length > 0) {
       if (hasVoiceMd)
         console.log(import_chalk18.default.green("  \u2713 voice.md exists"));
@@ -17483,21 +17653,21 @@ function registerDoctorCommand(program3) {
       console.log(import_chalk18.default.dim("    run: hyv new <name> or hyv init"));
     }
     console.log(import_chalk18.default.dim("checking agent configurations..."));
-    const cursorLegacyRule = path17.join(HOME, ".cursor", "rules", "hyv.md");
-    const cursorRule = path17.join(HOME, ".cursor", "rules", "hyv.mdc");
-    if (fs17.existsSync(cursorLegacyRule) && fs17.existsSync(cursorRule)) {
+    const cursorLegacyRule = path18.join(HOME, ".cursor", "rules", "hyv.md");
+    const cursorRule = path18.join(HOME, ".cursor", "rules", "hyv.mdc");
+    if (fs19.existsSync(cursorLegacyRule) && fs19.existsSync(cursorRule)) {
       console.log(import_chalk18.default.yellow("  ! stale cursor rule ~/.cursor/rules/hyv.md (use hyv.mdc)"));
       console.log(import_chalk18.default.dim("    run: rm ~/.cursor/rules/hyv.md  (or hyv doctor --fix-agents)"));
       issues++;
     }
     const agentChecks = [
-      { name: "claude desktop mcp", ok: readMcpHyv(path17.join(claudeDesktopDir(), "claude_desktop_config.json")) },
-      { name: "cursor mcp", ok: readMcpHyv(path17.join(HOME, ".cursor", "mcp.json")) },
-      { name: "cursor rule", ok: fs17.existsSync(cursorRule) },
-      { name: "claude code command", ok: fs17.existsSync(path17.join(HOME, ".claude", "commands", "hyv.md")) },
-      { name: "claude code skill", ok: fs17.existsSync(path17.join(HOME, ".claude", "skills", "hold-your-voice", "SKILL.md")) },
-      { name: "codex agents", ok: fs17.existsSync(path17.join(HOME, ".codex", "AGENTS.md")) && fs17.readFileSync(path17.join(HOME, ".codex", "AGENTS.md"), "utf-8").includes("hyv") },
-      { name: "command code skill", ok: fs17.existsSync(path17.join(HOME, ".commandcode", "skills", "hyv", "SKILL.md")) }
+      { name: "claude desktop mcp", ok: readMcpHyv(path18.join(claudeDesktopDir(), "claude_desktop_config.json")) },
+      { name: "cursor mcp", ok: readMcpHyv(path18.join(HOME, ".cursor", "mcp.json")) },
+      { name: "cursor rule", ok: fs19.existsSync(cursorRule) },
+      { name: "claude code command", ok: fs19.existsSync(path18.join(HOME, ".claude", "commands", "hyv.md")) },
+      { name: "claude code skill", ok: fs19.existsSync(path18.join(HOME, ".claude", "skills", "hold-your-voice", "SKILL.md")) },
+      { name: "codex agents", ok: fs19.existsSync(path18.join(HOME, ".codex", "AGENTS.md")) && fs19.readFileSync(path18.join(HOME, ".codex", "AGENTS.md"), "utf-8").includes("hyv") },
+      { name: "command code skill", ok: fs19.existsSync(path18.join(HOME, ".commandcode", "skills", "hyv", "SKILL.md")) }
     ];
     for (const agent of agentChecks) {
       if (agent.ok) {
@@ -17508,8 +17678,8 @@ function registerDoctorCommand(program3) {
     }
     if (opts.fixAgents) {
       try {
-        const pkgDir = path17.resolve(__dirname, "..");
-        const { setupAgents } = require(path17.join(pkgDir, "scripts", "postinstall-lib.js"));
+        const pkgDir = path18.resolve(__dirname, "..");
+        const { setupAgents } = require(path18.join(pkgDir, "scripts", "postinstall-lib.js"));
         const result = setupAgents({ pkgDir, quiet: true });
         console.log(import_chalk18.default.green(`  \u2713 re-ran agent setup (${result.configured.join(", ") || "no changes"})`));
         if (result.warnings.length) {
@@ -17521,8 +17691,8 @@ function registerDoctorCommand(program3) {
       }
     }
     console.log(import_chalk18.default.dim("checking mcp server..."));
-    const claudeMcp = readMcpHyv(path17.join(claudeDesktopDir(), "claude_desktop_config.json"));
-    const cursorMcp = readMcpHyv(path17.join(HOME, ".cursor", "mcp.json"));
+    const claudeMcp = readMcpHyv(path18.join(claudeDesktopDir(), "claude_desktop_config.json"));
+    const cursorMcp = readMcpHyv(path18.join(HOME, ".cursor", "mcp.json"));
     if (claudeMcp || cursorMcp) {
       if (claudeMcp)
         console.log(import_chalk18.default.green("  \u2713 mcp configured for claude desktop"));
@@ -17631,8 +17801,8 @@ init_access();
 init_config();
 
 // src/lib/destructive-write.ts
-var fs18 = __toESM(require("fs"));
-var path18 = __toESM(require("path"));
+var fs20 = __toESM(require("fs"));
+var path19 = __toESM(require("path"));
 var readline2 = __toESM(require("readline"));
 var import_chalk20 = __toESM(require_source());
 async function confirmDestructiveWrite(options) {
@@ -17658,12 +17828,12 @@ A .bak backup will be created. Proceed? [y/N] `;
 }
 function writeInPlaceWithBackup(filePath, content) {
   const backupPath = filePath + ".bak";
-  fs18.copyFileSync(filePath, backupPath);
-  fs18.writeFileSync(filePath, content);
+  fs20.copyFileSync(filePath, backupPath);
+  fs20.writeFileSync(filePath, content);
   return backupPath;
 }
 function backupBasename(filePath) {
-  return path18.basename(filePath) + ".bak";
+  return path19.basename(filePath) + ".bak";
 }
 
 // src/commands/fix.ts
@@ -17757,19 +17927,19 @@ function registerCheckCommand(program3) {
       const profile = await loadProfileForCommand(options.profile);
       let inputText = text;
       if (text === "-") {
-        const fs29 = require("fs");
+        const fs31 = require("fs");
         if (process.stdin.isTTY) {
           console.error(import_chalk22.default.red("No input provided. Pipe content or pass text as argument."));
           process.exit(1);
         }
-        inputText = fs29.readFileSync(0, "utf-8");
+        inputText = fs31.readFileSync(0, "utf-8");
       }
       if (!inputText.trim()) {
         console.error(import_chalk22.default.red("No text provided."));
         process.exit(1);
       }
-      const fs28 = require("fs");
-      if (text !== "-" && fs28.existsSync(text)) {
+      const fs30 = require("fs");
+      if (text !== "-" && fs30.existsSync(text)) {
         console.log(import_chalk22.default.yellow(`"${text}" looks like a file. Did you mean: hyv scan ${text}`));
         process.exit(1);
       }
@@ -17896,12 +18066,12 @@ function registerDiffCommand(program3) {
   ${result.changes.length} auto-fix${result.changes.length === 1 ? "" : "es"} available`));
       console.log(import_chalk24.default.dim(`  run: hyv fix ${file} -i  to apply`));
       if (options.apply && filePath !== "stdin") {
-        const fs28 = require("fs");
-        const path26 = require("path");
+        const fs30 = require("fs");
+        const path27 = require("path");
         const backupPath = filePath + ".bak";
-        fs28.copyFileSync(filePath, backupPath);
-        fs28.writeFileSync(filePath, result.fixed);
-        console.log(import_chalk24.default.green(`  \u2713 Applied. Backup: ${path26.basename(backupPath)}`));
+        fs30.copyFileSync(filePath, backupPath);
+        fs30.writeFileSync(filePath, result.fixed);
+        console.log(import_chalk24.default.green(`  \u2713 Applied. Backup: ${path27.basename(backupPath)}`));
       }
     } catch (error) {
       console.error(import_chalk24.default.red(`Error: ${error.message}`));
@@ -18076,8 +18246,8 @@ function registerRulesCommand(program3) {
 
 // src/commands/batch.ts
 var import_chalk26 = __toESM(require_source());
-var fs19 = __toESM(require("fs"));
-var path19 = __toESM(require("path"));
+var fs21 = __toESM(require("fs"));
+var path20 = __toESM(require("path"));
 init_pipeline();
 init_local_profile();
 function registerBatchCommand(program3) {
@@ -18110,10 +18280,10 @@ No files matching: ${pattern}`));
       }
       const results = [];
       for (const file of files) {
-        const absPath = path19.resolve(file);
-        if (!fs19.existsSync(absPath))
+        const absPath = path20.resolve(file);
+        if (!fs21.existsSync(absPath))
           continue;
-        const text = fs19.readFileSync(absPath, "utf-8");
+        const text = fs21.readFileSync(absPath, "utf-8");
         const result = runPipeline(text, profile, options.fix || false);
         results.push({
           file,
@@ -18179,16 +18349,16 @@ No files matching: ${pattern}`));
 
 // src/commands/watch.ts
 var import_chalk27 = __toESM(require_source());
-var fs20 = __toESM(require("fs"));
-var path20 = __toESM(require("path"));
+var fs22 = __toESM(require("fs"));
+var path21 = __toESM(require("path"));
 init_pipeline();
 init_local_profile();
 function registerWatchCommand(program3) {
   program3.command("watch").description("Watch a file and re-scan on every save").argument("<file>", "File to watch").option("--command <cmd>", "What to run on change: scan, score, fix", "scan").option("--debounce <ms>", "Delay after save before scanning", "300").option("--notify", "OS notification when issues found").option("-y, --yes", "Confirm destructive auto-fix writes without prompting").option("--profile <name>", "Voice profile").action(async (file, options) => {
     try {
       const profile = await loadProfileForCommand(options.profile);
-      const absPath = path20.resolve(file);
-      if (!fs20.existsSync(absPath)) {
+      const absPath = path21.resolve(file);
+      if (!fs22.existsSync(absPath)) {
         console.error(import_chalk27.default.red(`File not found: ${absPath}`));
         process.exit(1);
       }
@@ -18211,7 +18381,7 @@ watching ${absPath}`));
       let lastScore = 0;
       let ignoreWatchUntil = 0;
       const runScan = () => {
-        const text = fs20.readFileSync(absPath, "utf-8");
+        const text = fs22.readFileSync(absPath, "utf-8");
         const result = runPipeline(text, profile, options.command === "fix");
         scanCount++;
         const now = (/* @__PURE__ */ new Date()).toLocaleTimeString("en-US", { hour12: false });
@@ -18253,7 +18423,7 @@ watching ${absPath}`));
         console.log("");
       };
       runScan();
-      fs20.watch(absPath, (eventType) => {
+      fs22.watch(absPath, (eventType) => {
         if (eventType !== "change")
           return;
         if (Date.now() < ignoreWatchUntil)
@@ -18278,7 +18448,7 @@ watching ${absPath}`));
 
 // src/commands/demo.ts
 var import_chalk28 = __toESM(require_source());
-var fs21 = __toESM(require("fs"));
+var fs23 = __toESM(require("fs"));
 var SAMPLES = {
   linkedin: {
     text: `In today's fast-paced digital landscape, it's important to note that leveraging the right tools is not just nice to have, but essential for success. Let's delve into the holistic approach that will transform your workflow.
@@ -18373,7 +18543,7 @@ function registerDemoCommand(program3) {
       }
       if (options.output) {
         const outputPath = require("path").resolve(options.output);
-        fs21.writeFileSync(outputPath, sample.text);
+        fs23.writeFileSync(outputPath, sample.text);
         console.log(import_chalk28.default.green(`
 \u2713 Sample written to ${outputPath}`));
         if (sample.patterns.length > 0) {
@@ -18440,22 +18610,22 @@ function registerOpenCommand(program3) {
 init_welcome();
 
 // src/lib/onboarding.ts
-var fs22 = __toESM(require("fs"));
-var path21 = __toESM(require("path"));
-var os9 = __toESM(require("os"));
-var hyvDir = path21.join(os9.homedir(), ".hyv");
-var onboardingFile = path21.join(hyvDir, "onboarding-complete.json");
+var fs24 = __toESM(require("fs"));
+var path22 = __toESM(require("path"));
+var os10 = __toESM(require("os"));
+var hyvDir = path22.join(os10.homedir(), ".hyv");
+var onboardingFile = path22.join(hyvDir, "onboarding-complete.json");
 function hasCompletedOnboarding() {
   try {
-    return fs22.existsSync(onboardingFile);
+    return fs24.existsSync(onboardingFile);
   } catch {
     return false;
   }
 }
 function markOnboardingComplete(version) {
-  if (!fs22.existsSync(hyvDir))
-    fs22.mkdirSync(hyvDir, { recursive: true });
-  fs22.writeFileSync(
+  if (!fs24.existsSync(hyvDir))
+    fs24.mkdirSync(hyvDir, { recursive: true });
+  fs24.writeFileSync(
     onboardingFile,
     JSON.stringify({ version, completed_at: (/* @__PURE__ */ new Date()).toISOString() }, null, 2)
   );
@@ -18463,13 +18633,13 @@ function markOnboardingComplete(version) {
 
 // src/commands/welcome.ts
 init_welcome_flow();
-var fs23 = __toESM(require("fs"));
-var path22 = __toESM(require("path"));
+var fs25 = __toESM(require("fs"));
+var path23 = __toESM(require("path"));
 function registerWelcomeCommand(program3) {
   const pkgVersion3 = (() => {
     try {
-      const pkgPath3 = path22.resolve(__dirname, "..", "package.json");
-      return JSON.parse(fs23.readFileSync(pkgPath3, "utf-8")).version;
+      const pkgPath3 = path23.resolve(__dirname, "..", "package.json");
+      return JSON.parse(fs25.readFileSync(pkgPath3, "utf-8")).version;
     } catch {
       return "0.0.0";
     }
@@ -18650,9 +18820,9 @@ Current: ${getEngineLabel()}
 }
 
 // src/mcp.ts
-var fs24 = __toESM(require("fs"));
-var path23 = __toESM(require("path"));
-var os10 = __toESM(require("os"));
+var fs26 = __toESM(require("fs"));
+var path24 = __toESM(require("path"));
+var os11 = __toESM(require("os"));
 init_classifier();
 init_autofix();
 init_validator();
@@ -18663,20 +18833,20 @@ init_welcome();
 init_config();
 init_telemetry();
 init_access();
-var VOICE_MD = path23.join(os10.homedir(), ".hyv", "voice.md");
+var VOICE_MD = path24.join(os11.homedir(), ".hyv", "voice.md");
 var MAX_RESPONSE_CHARS = 12e4;
 var MAX_SCAN_FILE_BYTES = 2 * 1024 * 1024;
 function readScanFile(filePath) {
-  const cwdReal = fs24.realpathSync(process.cwd());
-  const resolved = fs24.realpathSync(path23.resolve(filePath));
-  if (!resolved.startsWith(cwdReal + path23.sep) && resolved !== cwdReal) {
+  const cwdReal = fs26.realpathSync(process.cwd());
+  const resolved = fs26.realpathSync(path24.resolve(filePath));
+  if (!resolved.startsWith(cwdReal + path24.sep) && resolved !== cwdReal) {
     throw new Error(`file must be in the current working directory (${cwdReal})`);
   }
-  const stat = fs24.statSync(resolved);
+  const stat = fs26.statSync(resolved);
   if (stat.size > MAX_SCAN_FILE_BYTES) {
     throw new Error(`file too large (max ${MAX_SCAN_FILE_BYTES} bytes)`);
   }
-  return fs24.readFileSync(resolved, "utf-8");
+  return fs26.readFileSync(resolved, "utf-8");
 }
 function toolResultPayload(result) {
   const isError = result.startsWith("Error:") || result.startsWith("Unknown tool:");
@@ -18685,10 +18855,10 @@ function toolResultPayload(result) {
     ...isError ? { isError: true } : {}
   };
 }
-var pkgPath = path23.resolve(__dirname, "..", "package.json");
+var pkgPath = path24.resolve(__dirname, "..", "package.json");
 var pkgVersion = (() => {
   try {
-    return JSON.parse(fs24.readFileSync(pkgPath, "utf-8")).version;
+    return JSON.parse(fs26.readFileSync(pkgPath, "utf-8")).version;
   } catch {
     return "2.7.1";
   }
@@ -19269,7 +19439,7 @@ async function handleRequest(line) {
 }
 async function startMcpServer() {
   const access = await getAccessState().catch(() => null);
-  if (fs24.existsSync(VOICE_MD)) {
+  if (fs26.existsSync(VOICE_MD)) {
     mcpLog("info", `voice profile: ${VOICE_MD}`);
   } else {
     mcpLog("info", "free local engine ready \u2014 no voice profile yet");
@@ -19302,18 +19472,18 @@ async function startMcpServer() {
 
 // src/lib/mcp-setup.ts
 var import_chalk32 = __toESM(require_source());
-var fs25 = __toESM(require("fs"));
-var path24 = __toESM(require("path"));
-var os11 = __toESM(require("os"));
+var fs27 = __toESM(require("fs"));
+var path25 = __toESM(require("path"));
+var os12 = __toESM(require("os"));
 init_version();
-var HOME2 = os11.homedir();
+var HOME2 = os12.homedir();
 var IS_WIN2 = process.platform === "win32";
 function claudeDesktopConfigPath() {
   if (IS_WIN2)
-    return path24.join(HOME2, "AppData", "Roaming", "Claude", "claude_desktop_config.json");
+    return path25.join(HOME2, "AppData", "Roaming", "Claude", "claude_desktop_config.json");
   if (process.platform === "linux")
-    return path24.join(HOME2, ".config", "Claude", "claude_desktop_config.json");
-  return path24.join(HOME2, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+    return path25.join(HOME2, ".config", "Claude", "claude_desktop_config.json");
+  return path25.join(HOME2, "Library", "Application Support", "Claude", "claude_desktop_config.json");
 }
 function printMcpSetup() {
   console.log(import_chalk32.default.bold("\nhold your voice \u2014 mcp setup\n"));
@@ -19395,8 +19565,8 @@ async function runMcpSelfTest() {
     console.log(import_chalk32.default.red(`  \u2717 hyv_demo failed: ${e.message}`));
     failed++;
   }
-  const voiceMd = path24.join(HOME2, ".hyv", "voice.md");
-  if (fs25.existsSync(voiceMd)) {
+  const voiceMd = path25.join(HOME2, ".hyv", "voice.md");
+  if (fs27.existsSync(voiceMd)) {
     console.log(import_chalk32.default.green("  \u2713 voice profile found"));
     passed++;
   } else {
@@ -19436,7 +19606,7 @@ async function runMcpSelfTest() {
 }
 
 // src/commands/export.ts
-var fs26 = __toESM(require("fs"));
+var fs28 = __toESM(require("fs"));
 init_api();
 var FORMATS = {
   claude: {
@@ -19523,7 +19693,7 @@ async function exportCommand(format, opts) {
       const prompt = fmt.wrap(detail.profile, detail.body);
       if (opts.output) {
         const outFile = opts.output.replace("{name}", profile.slug || profile.name);
-        fs26.writeFileSync(outFile, prompt);
+        fs28.writeFileSync(outFile, prompt);
         results.push({ profile: profile.name, file: outFile });
       } else {
         results.push({ profile: profile.name, prompt });
@@ -19560,13 +19730,13 @@ async function exportCommand(format, opts) {
 // src/index.ts
 init_access();
 init_welcome();
-var fs27 = __toESM(require("fs"));
-var path25 = __toESM(require("path"));
+var fs29 = __toESM(require("fs"));
+var path26 = __toESM(require("path"));
 var program2 = new Command();
-var pkgPath2 = path25.resolve(__dirname, "..", "package.json");
+var pkgPath2 = path26.resolve(__dirname, "..", "package.json");
 var pkgVersion2 = (() => {
   try {
-    return JSON.parse(fs27.readFileSync(pkgPath2, "utf-8")).version;
+    return JSON.parse(fs29.readFileSync(pkgPath2, "utf-8")).version;
   } catch {
     return "2.7.1";
   }