@oriro/orirocli 0.1.4 → 0.1.5

package/dist/cli.js

@@ -6,7 +6,7 @@ import { Command } from "commander";
 
 // src/repl.ts
 import { createInterface as createInterface4 } from "readline/promises";
-import { stdin as stdin4, stdout as stdout4 } from "process";
+import { stdin as stdin4, stdout as stdout5 } from "process";
 
 // src/ui/theme.ts
 var PALETTE = {
@@ -72,7 +72,7 @@ ${tagline}
 
 // src/onboarding/wrapper.ts
 import { createInterface as createInterface3 } from "readline/promises";
-import { stdin as stdin3, stdout as stdout3 } from "process";
+import { stdin as stdin3, stdout as stdout4 } from "process";
 
 // src/language/languages.ts
 var LANGUAGES = [
@@ -268,7 +268,24 @@ async function translateForUser(english, toLang) {
 
 // src/language/onboarding.ts
 import { createInterface } from "readline/promises";
-import { stdin, stdout } from "process";
+import { stdin, stdout as stdout2 } from "process";
+
+// src/onboarding/prompt.ts
+import { stdout } from "process";
+async function ask(rl, question) {
+  try {
+    return await rl.question(question);
+  } catch {
+    try {
+      rl.close();
+    } catch {
+    }
+    stdout.write(dim("\nBye.\n"));
+    process.exit(0);
+  }
+}
+
+// src/language/onboarding.ts
 var C = {
   teal: "\x1B[38;2;45;212;191m",
   purple: "\x1B[38;2;128;96;222m",
@@ -277,12 +294,12 @@ var C = {
   reset: "\x1B[0m"
 };
 function header() {
-  stdout.write(`
+  stdout2.write(`
   ${C.teal}\u25EF${C.reset} ${C.bold}ORIRO${C.reset} ${C.dim}\u2014 your terminal, your language${C.reset}
 `);
-  stdout.write(`  ${C.dim}You type and read in your language; the AI works in English for you.${C.reset}
+  stdout2.write(`  ${C.dim}You type and read in your language; the AI works in English for you.${C.reset}
 `);
-  stdout.write(`  ${C.dim}${LANGUAGES.length} languages \xB7 ${NEURAL_VOICE_COUNT} with a built-in voice (${C.purple}\u2605${C.dim}).${C.reset}
+  stdout2.write(`  ${C.dim}${LANGUAGES.length} languages \xB7 ${NEURAL_VOICE_COUNT} with a built-in voice (${C.purple}\u2605${C.dim}).${C.reset}
 
 `);
 }
@@ -290,38 +307,39 @@ function renderList(list) {
   const shown = list.slice(0, 15);
   shown.forEach((l, i) => {
     const star = l.neuralVoice ? `${C.purple}\u2605${C.reset}` : " ";
-    stdout.write(`  ${C.teal}${String(i + 1).padStart(2)}${C.reset}  ${star} ${l.name} ${C.dim}(${l.code})${C.reset}
+    stdout2.write(`  ${C.teal}${String(i + 1).padStart(2)}${C.reset}  ${star} ${l.name} ${C.dim}(${l.code})${C.reset}
 `);
   });
   if (list.length > shown.length) {
-    stdout.write(`  ${C.dim}\u2026 ${list.length - shown.length} more \u2014 keep typing to narrow.${C.reset}
+    stdout2.write(`  ${C.dim}\u2026 ${list.length - shown.length} more \u2014 keep typing to narrow.${C.reset}
 `);
   }
 }
 async function selectLanguageInteractive() {
   header();
-  const rl = createInterface({ input: stdin, output: stdout });
+  const rl = createInterface({ input: stdin, output: stdout2 });
   try {
     let list = searchLanguages("");
     renderList(list);
     for (; ; ) {
-      const ans = (await rl.question(`
+      const ans = (await ask(rl, `
   ${C.teal}\u203A${C.reset} Type a language, or a number to pick: `)).trim();
       const n = Number(ans);
-      const byNumber = ans && Number.isInteger(n) && n >= 1 && n <= list.length ? list[n - 1] : void 0;
+      const shown = Math.min(15, list.length);
+      const byNumber = ans && Number.isInteger(n) && n >= 1 && n <= shown ? list[n - 1] : void 0;
       if (byNumber) return byNumber;
       const direct = languageByCode(ans);
       if (direct) return direct;
       list = searchLanguages(ans);
       if (list.length === 0) {
-        stdout.write(`  ${C.dim}No match \u2014 try the English name or ISO code.${C.reset}
+        stdout2.write(`  ${C.dim}No match \u2014 try the English name or ISO code.${C.reset}
 `);
         list = searchLanguages("");
       } else {
         const only = list.length === 1 ? list[0] : void 0;
         if (only) return only;
       }
-      stdout.write("\n");
+      stdout2.write("\n");
       renderList(list);
     }
   } finally {
@@ -336,7 +354,7 @@ async function runLanguageOnboarding() {
   }
   const lang = await selectLanguageInteractive();
   setTerminalLanguage(lang);
-  stdout.write(
+  stdout2.write(
     `
   ${C.teal}\u25EF${C.reset} ${C.bold}${lang.name}${C.reset} is now your terminal language. ${C.dim}Change it anytime with ${C.reset}${C.teal}oriro language${C.reset}
 
@@ -354,11 +372,11 @@ var INJECTION_PATTERNS = [
   /\[INST\]|<<SYS>>/
 ];
 var IOC_PATTERNS = [
-  ["ioc:secret_read", /\bread\b[^\n]*(\.ssh|\.env\b|id_rsa)/i],
+  ["ioc:secret_read", /\bread\b[^\n]*(\.ssh(?![-.\w])|\.env\b|id_rsa)/i],
   ["ioc:exfil_post", /\bsend\b[^\n]*\bto\s+https?:\/\//i],
   ["ioc:env_exfil", /process\.env[^\n]{0,40}https?:\/\//i],
   ["ioc:pipe_shell", /(curl|wget)[^\n]*\|\s*(sh|bash|node)\b/i],
-  ["ioc:pipe_exfil", /(cat|type|read)[^\n]*(\.ssh|id_rsa|\.env\b)[^\n]*\|\s*(curl|wget|nc)\b/i],
+  ["ioc:pipe_exfil", /(cat|type|read)[^\n]*(\.ssh(?![-.\w])|id_rsa|\.env\b)[^\n]*\|\s*(curl|wget|nc)\b/i],
   ["ioc:exfiltrate", /exfiltrat/i],
   ["ioc:obf_loader", /eval\(\s*(atob|Buffer\.from)\(/i],
   ["ioc:cp_loader", /child_process[\s\S]{0,40}(atob|fromCharCode)/i]
@@ -404,6 +422,12 @@ ${typeof params === "string" ? params : JSON.stringify(params ?? "")}`;
   if (hasHiddenUnicode(blob)) return { safe: false, threat: "hidden_unicode" };
   return { safe: true };
 }
+function scanExecCommand(text) {
+  const ioc = firstIOC(text);
+  if (ioc) return { safe: false, threat: ioc };
+  if (hasHiddenUnicode(text)) return { safe: false, threat: "hidden_unicode" };
+  return { safe: true };
+}
 
 // src/guardian/rules.ts
 var block = (rule, reason, severity = "critical") => ({
@@ -412,7 +436,7 @@ var block = (rule, reason, severity = "critical") => ({
   rule,
   reason
 });
-var ask = (rule, reason, severity = "warning") => ({
+var ask2 = (rule, reason, severity = "warning") => ({
   decision: "ask",
   severity,
   rule,
@@ -420,162 +444,220 @@ var ask = (rule, reason, severity = "warning") => ({
 });
 var cmdOf = (c) => (c.command ?? "").toLowerCase();
 var norm = (s) => s.replace(/\s+/g, " ").trim();
-function isDangerousRm(cmd) {
-  if (!/\brm\b/i.test(cmd)) return false;
-  const hasRecursive = /(?:^|\s)-[a-z]*r/i.test(cmd) || /--recursive\b/i.test(cmd);
-  const hasForce = /(?:^|\s)-[a-z]*f/i.test(cmd) || /--force\b/i.test(cmd);
-  if (!hasRecursive || !hasForce) return false;
-  if (/--no-preserve-root\b/i.test(cmd)) return true;
-  if (/(?:\s|^)(\/|~|\.|\*|\$home)(?:\s|$)/i.test(cmd)) return true;
-  return /(?:\s|^)\/(etc|usr|bin|sbin|var|boot|lib|lib64|sys|proc|dev|root|home|opt|windows|system32)(?:[\\/]|\s|$)/i.test(
-    cmd
-  );
+var anyMatch = (patterns, text) => patterns.some((re) => re.test(text));
+var stripQuotes = (t) => t.replace(/^['"]+/, "").replace(/['"]+$/, "");
+function statements(cmd) {
+  return cmd.split(/(?:&&|\|\||[;|&\n])+/g).map((s) => s.trim()).filter(Boolean);
+}
+function words(stmt) {
+  return stmt.split(/\s+/).map(stripQuotes).filter(Boolean);
 }
+function commandWord(stmt) {
+  const w = words(stmt);
+  let i = 0;
+  while (i < w.length && /^(sudo|nohup|nice|time|exec|command|builtin|then|do|else)$/i.test(w[i] ?? "")) i++;
+  if (i < w.length && /^env$/i.test(w[i] ?? "")) {
+    i++;
+    while (i < w.length && /^[\w.]+=/.test(w[i] ?? "")) i++;
+  }
+  while (i < w.length && /^[\w.]+=/.test(w[i] ?? "")) i++;
+  return (w[i] ?? "").replace(/^.*[\\/]/, "").toLowerCase();
+}
+var SYS_DIR = "(etc|usr|bin|sbin|var|boot|lib|lib64|sys|proc|dev|root|opt|windows|system32|programdata|library|applications|system|private|cores|volumes|network)";
+function classifyRmTarget(raw) {
+  let t = stripQuotes(raw).trim();
+  if (!t || t.startsWith("-")) return "safe";
+  t = t.replace(/\$\{?home\}?/gi, "~");
+  if (/^(\/|\/\*|~|~\/|~\/\*|\.|\.\/|\.\/\*|\*|\.\*)$/.test(t)) return "danger";
+  if (new RegExp(`^/${SYS_DIR}(/\\*?)?$`, "i").test(t)) return "danger";
+  if (/^\/home(\/[^/]+)?\/?\*?$/i.test(t)) return "danger";
+  if (new RegExp(`^/${SYS_DIR}/.+`, "i").test(t)) return "system-sub";
+  return "safe";
+}
+function rmVerdict(stmt) {
+  const cw = commandWord(stmt);
+  if (cw !== "rm") return null;
+  const w = words(stmt);
+  const flags = w.filter((x) => x.startsWith("-")).join(" ");
+  const recursive = /(^|[^-])-[a-z]*r/i.test(" " + flags) || /--recursive\b/i.test(flags);
+  const force = /(^|[^-])-[a-z]*f/i.test(" " + flags) || /--force\b/i.test(flags);
+  const noPreserve = /--no-preserve-root\b/i.test(flags);
+  if (!recursive || !force) return null;
+  if (noPreserve) return block("fs-destruction", "Recursive force-delete with --no-preserve-root");
+  const targets = w.slice(1).filter((x) => !x.startsWith("-")).map(classifyRmTarget);
+  if (targets.includes("danger")) return block("fs-destruction", "Recursive force-delete of root/home/cwd/system path");
+  if (targets.includes("system-sub")) return ask2("fs-destruction", "Recursive force-delete inside a system directory");
+  return null;
+}
+var DISK = "(sd|nvme|disk|hd|vd|xvd|mmcblk|loop)";
 var FS_DESTRUCTION = [
-  /\bmkfs\.?\w*\s+\/dev\//i,
+  new RegExp(`\\bmkfs\\.?\\w*\\s+/dev/${DISK}`, "i"),
   // reformat a disk
-  /\bdd\s+.*\bof=\/dev\/(sd|nvme|disk|hd)/i,
+  new RegExp(`\\bdd\\b[^\\n]*\\bof=/dev/${DISK}`, "i"),
   // overwrite raw disk
-  /\b(shutdown|reboot|halt|poweroff)\b/i,
-  // host disruption
+  new RegExp(`>\\s*/dev/${DISK}\\w`, "i"),
+  // redirect over raw disk
   /:\s*\(\s*\)\s*\{\s*:\s*\|\s*:\s*&\s*\}\s*;\s*:/,
-  // fork bomb :(){ :|:& };:
-  /\bremove-item\b.*-recurse.*-force.*[\\\/](windows|system32|users)\b/i,
+  // fork bomb
+  /\bremove-item\b.*-recurse.*-force.*[\\/](windows|system32|users)\b/i,
   // PS recursive wipe
   /\b(format|cipher\s+\/w)\b.*[a-z]:\\?/i,
   // windows format / wipe-free-space
-  />\s*\/dev\/(sd|nvme|disk|hd)\w/i
-  // redirect over raw disk
+  /\bfind\b[^\n]*\s(-delete\b|-exec\s+rm\b)/i,
+  // find … -delete / -exec rm
+  /\bshred\b\s+(-|\S*\/dev\/)/i,
+  // shred a device/file destructively
+  new RegExp(`\\btruncate\\b[^\\n]*\\s/dev/${DISK}`, "i"),
+  // truncate a device
+  /\bmv\b[^\n]*\s\/dev\/null\b/i,
+  // mv important → /dev/null
+  /\bchmod\b\s+-[a-z]*r[a-z]*\s+0{3,4}\b/i,
+  // chmod -R 000 (strip all perms recursively)
+  /\bwipefs\b/i
 ];
+var HOST_DISRUPT = /* @__PURE__ */ new Set(["shutdown", "reboot", "halt", "poweroff"]);
+var FETCH = "(curl|wget|fetch|httpie)";
+var SHELL = "(sh|bash|zsh|dash|ksh|sudo\\s+sh|sudo\\s+bash|python\\d?|node|perl|ruby|php)";
 var REMOTE_EXEC = [
-  /\b(curl|wget|fetch)\b[^\n|]*\|\s*(sudo\s+)?(sh|bash|zsh|python\d?|node|perl|ruby)\b/i,
+  new RegExp(`\\b${FETCH}\\b[^\\n|]*\\|\\s*(sudo\\s+)?${SHELL}\\b`, "i"),
   // curl … | sh
+  new RegExp(`(?:^|[\\s;&|(])(bash|sh|zsh|ksh|source|\\.)\\s*<\\s*\\(\\s*${FETCH}`, "i"),
+  // sh <(curl) / bash<(curl) / . <(curl)
+  new RegExp(`\\b(bash|sh|zsh|ksh|eval)\\b[^\\n]*\\$\\(\\s*${FETCH}\\b`, "i"),
+  // bash -c "$(curl)"
+  new RegExp(`\\$\\(\\s*${FETCH}\\b[^)]*\\)`, "i"),
+  // bare $(curl …) substitution
+  /`\s*(curl|wget|fetch)\b/i,
+  // backtick `curl`
   /\b(irm|iwr|invoke-webrequest|invoke-restmethod)\b[^\n|]*\|\s*(iex|invoke-expression)/i,
   // PS download|iex
   /\biex\b\s*\(\s*(new-object\s+net\.webclient|.*downloadstring)/i,
   // iex(New-Object Net.WebClient…)
-  /\bbash\s+<\s*\(\s*(curl|wget)/i,
-  // bash <(curl …)
-  /\beval\b[^\n]*\$\(\s*(curl|wget|fetch)\b/i,
-  // eval "$(curl …)"
-  /\bpython\d?\s+-c\b[^\n]*urllib|requests\.get[^\n]*exec\(/i
-  // python one-liner fetch+exec
+  /\bpython\d?\s+-c\b[^\n]*(urllib|requests|httpx|socket|os\.system|subprocess|exec\(|eval\()/i,
+  // python -c fetch/exec
+  /\b(perl|ruby|node|php)\s+-(e|r)\b[^\n]*(http|socket|system|exec|eval|fsockopen|downloadstring)/i,
+  // perl/ruby/node/php -e RCE
+  /\b(base64\s+(-d|--decode)|xxd\s+-r|openssl\s+enc\s+-d)\b[^\n|]*\|\s*(sudo\s+)?(sh|bash|zsh|python\d?|node|perl|ruby)\b/i,
+  // decode|sh
+  new RegExp(`\\b${FETCH}\\b[^\\n]*\\s-[a-z]*[oO]\\b[^\\n]*&&[^\\n]*(chmod\\s+\\+x|\\./|\\bsh\\b|\\bbash\\b)`, "i")
+  // download then exec
 ];
 var REVERSE_SHELL = [
-  /\bnc\b\s+(-[a-z]*e|.*-e\s+\/bin\/(sh|bash))/i,
-  // nc -e /bin/sh
+  /\b(nc|ncat|netcat)\b[^\n]*\s-[a-z]*e\b/i,
+  // nc/ncat -e
   /\b(ncat|socat)\b[^\n]*exec[: ]/i,
   // socat … exec:
-  /\b(bash|sh)\s+-i\b[^\n]*>&?\s*\/dev\/tcp\//i,
+  /\bsocat\b[^\n]*tcp[:-][^\n]*exec/i,
+  // socat tcp … exec
+  /\b(bash|sh|zsh)\s+-i\b[^\n]*>&?\s*\/dev\/tcp\//i,
   // bash -i >& /dev/tcp/…
-  /\/dev\/(tcp|udp)\/\d{1,3}(\.\d{1,3}){3}\//,
-  // /dev/tcp/<ip>/
-  /\bpython\d?\b[^\n]*socket\.socket[^\n]*subprocess|pty\.spawn/i
+  /\/dev\/(tcp|udp)\/[\w.\-]+\/\d+/i,
+  // /dev/tcp/<host-or-ip>/<port>
+  /\bpython\d?\b[^\n]*socket\.socket[^\n]*(subprocess|pty\.spawn|exec)/i,
   // python reverse shell
+  /\b(perl|php|ruby)\b[^\n]*(fsockopen|socket)[^\n]*(exec|system|\/bin\/(sh|bash))/i,
+  // perl/php/ruby reverse shell
+  /\bmkfifo\b[^\n]*(\bnc\b|\bncat\b)/i
+  // mkfifo backpipe
 ];
-var SECRET_PATHS = /(\.ssh\/id_|\.ssh\/.*_rsa|\.aws\/credentials|\.oriro\/credentials|\.config\/gcloud|\.env(\.|\b)|\.netrc|id_ed25519|\.kube\/config|wallet\.dat|\.gnupg\/)/i;
-var NET_SINK = /\b(curl|wget|nc|ncat|socat|scp|rsync|ftp|tftp|invoke-webrequest|invoke-restmethod)\b/i;
+var SECRET_PATHS = /(\.ssh(?![-.\w])|authorized_keys|id_rsa|id_ed25519|id_ecdsa|\.aws(?![-.\w])|\.oriro[\\/]credentials|\.config[\\/]gcloud|\.env(\.|\b)|\.netrc|\.npmrc|\.pypirc|\.docker(?![-.\w])|\.git-credentials|\.kube(?![-.\w])|wallet\.dat|\.gnupg(?![-.\w])|cookies(\.sqlite)?|login\s*data)/i;
+var NET_SINK = /\b(curl|wget|nc|ncat|netcat|socat|scp|rsync|ftp|tftp|invoke-webrequest|invoke-restmethod)\b/i;
 var ENV_EXFIL = [
   /\$\(\s*(printenv|env)\b/i,
+  // $(printenv X) / $(env)
+  /\bprintenv\b/i,
+  // printenv … (paired with a net sink below = exfil)
+  /\benv\s*\|/i,
+  // env | …
   /\$\(\s*cat\b[^)]*(\.ssh|\.aws|\.env|\.netrc|credential|secret|token|id_rsa|id_ed25519)/i
+  // $(cat <secret>)
 ];
+var ENV_VAR_IN_BODY = /\s--?(d|data|data-binary|data-raw|form|post|body|upload-file)\b[^\n]*\$\{?\w*(secret|token|api[_-]?key|password|passwd|credential|aws_)\w*\}?/i;
 var PERSISTENCE = [
   /\bcrontab\b\s+(-|\S+)/i,
-  // crontab install
   />>?\s*~?\/?\.(bashrc|zshrc|bash_profile|profile|zprofile)\b/i,
-  // append to shell rc
+  />>?[^\n]*\.ssh[\\/]authorized_keys/i,
+  // implant an SSH key (backdoor)
   /\b(launchctl\s+load|systemctl\s+enable|sc\s+create|new-service)\b/i,
-  // service install
   /\bregistry::|reg\s+add\b.*\\run\b/i,
-  // windows Run key persistence
-  /[\\\/]start menu[\\\/]programs[\\\/]startup[\\\/]/i,
-  // windows startup folder
+  /[\\/]start menu[\\/]programs[\\/]startup[\\/]/i,
   /\bschtasks\b\s+\/create/i
-  // scheduled task
 ];
 var GUARDIAN_TAMPER = [
   /\boriro\b.*\bguardian\b.*\b(disable|off|stop|uninstall)\b/i,
-  // disable Guardian via command
-  /[\\\/]\.oriro[\\\/]guardian/i
-  // direct write to Guardian's own config/state
+  /[\\/]\.oriro[\\/]guardian/i,
+  // direct path to Guardian's config/state
+  /\bguardian\.json\b/i
+  // any write referencing guardian.json (cd … && > guardian.json)
 ];
 var TAMPER = [
   /\bchmod\s+-?\s*0?777\b/i,
-  // world-writable
   /\b(ufw|firewall-cmd|iptables)\b.*\b(disable|stop|flush|-f)\b/i,
-  // firewall down
   /\bset-mppreference\b.*-disable/i,
-  // disable Defender
   /\bhistory\s+-c\b|\bunset\s+histfile\b|>\s*~?\/?\.bash_history/i
-  // wipe history
 ];
 var MALWARE = [
   /\b(xmrig|minerd|cgminer|cpuminer|stratum\+tcp)\b/i,
   /\b(nanopool|minexmr|supportxmr|pool\.minexmr)\b/i
 ];
-function anyMatch(patterns, text) {
-  return patterns.some((re) => re.test(text));
-}
 var DEFAULT_RULES = [
   {
     id: "fs-destruction",
-    description: "Block recursive deletes of root/home, disk reformats, fork bombs, host shutdown.",
+    description: "Block recursive deletes of root/home/system paths, disk reformats, fork bombs, host shutdown.",
     match: (c) => {
-      const cmd = norm(cmdOf(c));
-      return isDangerousRm(cmd) || anyMatch(FS_DESTRUCTION, cmd) ? block("fs-destruction", "Destructive filesystem/system operation") : null;
+      const raw = cmdOf(c);
+      const cmd = norm(raw);
+      for (const stmt of statements(cmd)) {
+        const v = rmVerdict(stmt);
+        if (v) return v;
+        if (HOST_DISRUPT.has(commandWord(stmt))) return block("fs-destruction", "Host shutdown/reboot");
+      }
+      return anyMatch(FS_DESTRUCTION, cmd) ? block("fs-destruction", "Destructive filesystem/system operation") : null;
     }
   },
   {
     id: "remote-code-exec",
-    description: "Block pull-and-run of remote code (curl|sh, iex(downloadString), bash <(curl)).",
+    description: "Block pull-and-run of remote code (curl|sh, $(curl), sh <(curl), bash -c $(curl), decode|sh).",
     match: (c) => anyMatch(REMOTE_EXEC, norm(cmdOf(c))) ? block("remote-code-exec", "Downloading and executing remote code") : null
   },
   {
     id: "reverse-shell",
-    description: "Block reverse shells / remote backdoors (nc -e, /dev/tcp, socat exec).",
+    description: "Block reverse shells / remote backdoors (nc -e, /dev/tcp/<host>, socat exec, mkfifo backpipe).",
     match: (c) => anyMatch(REVERSE_SHELL, norm(cmdOf(c))) ? block("reverse-shell", "Opening a reverse shell / remote backdoor") : null
   },
   {
     id: "secret-exfiltration",
-    description: "Block reading a credential/key file and piping it off the machine.",
+    description: "Block reading a credential/key file or env secret and sending it off the machine.",
     match: (c) => {
       const cmd = norm(cmdOf(c));
-      if (cmd && SECRET_PATHS.test(cmd) && NET_SINK.test(cmd)) {
-        return block("secret-exfiltration", "Reading secrets and sending them off the machine");
-      }
+      if (!cmd || !NET_SINK.test(cmd)) return null;
+      if (SECRET_PATHS.test(cmd)) return block("secret-exfiltration", "Reading secrets and sending them off the machine");
+      if (anyMatch(ENV_EXFIL, cmd) || ENV_VAR_IN_BODY.test(cmd)) return block("secret-exfiltration", "Sending environment variables / secrets off the machine");
       return null;
     }
   },
   {
-    id: "env-exfiltration",
-    description: "Block dumping env vars / secret files into a network request (curl \u2026$(printenv SECRET)).",
+    id: "persistence",
+    description: "Block SSH-key implants; flag cron/rc/startup/service edits used for Trojan persistence.",
     match: (c) => {
       const cmd = norm(cmdOf(c));
-      return cmd && NET_SINK.test(cmd) && anyMatch(ENV_EXFIL, cmd) ? block("env-exfiltration", "Sending environment variables / secret files off the machine") : null;
+      if (/>>?[^\n]*\.ssh[\\/]authorized_keys/i.test(cmd)) return block("persistence", "Implanting an SSH key (backdoor)");
+      return anyMatch(PERSISTENCE, cmd) ? ask2("persistence", "Installing a persistent foothold (cron/startup/service)") : null;
     }
   },
-  {
-    id: "persistence",
-    description: "Flag cron/rc/startup/service edits used for Trojan persistence.",
-    match: (c) => anyMatch(PERSISTENCE, norm(cmdOf(c))) ? ask("persistence", "Installing a persistent foothold (cron/startup/service)") : null
-  },
   {
     id: "guardian-self-defense",
     description: "Block any attempt to disable, uninstall, or rewrite Guardian's own config/state.",
     match: (c) => {
-      if (anyMatch(GUARDIAN_TAMPER, norm(cmdOf(c)))) {
-        return block("guardian-self-defense", "Attempt to disable or tamper with Guardian itself");
-      }
-      if (c.paths?.some((p) => /[\\/]\.oriro[\\/]guardian/i.test(p))) {
-        return block("guardian-self-defense", "Direct write to Guardian's own config/state");
-      }
+      if (anyMatch(GUARDIAN_TAMPER, norm(cmdOf(c)))) return block("guardian-self-defense", "Attempt to disable or tamper with Guardian itself");
+      if (c.paths?.some((p) => /[\\/]\.oriro[\\/]guardian/i.test(p))) return block("guardian-self-defense", "Direct write to Guardian's own config/state");
       return null;
     }
   },
   {
     id: "security-tamper",
     description: "Flag disabling firewall/Defender or wiping history.",
-    match: (c) => anyMatch(TAMPER, norm(cmdOf(c))) ? ask("security-tamper", "Disabling security controls or covering tracks") : null
+    match: (c) => anyMatch(TAMPER, norm(cmdOf(c))) ? ask2("security-tamper", "Disabling security controls or covering tracks") : null
   },
   {
     id: "malware-signature",
@@ -584,9 +666,10 @@ var DEFAULT_RULES = [
   },
   {
     id: "v3lite",
-    description: "Guardian V3 Lite: prompt-injection + IOC catalog (exfil/dropper/obfuscated-loader/RCE-pipe) + hidden-unicode scan on the tool call.",
+    description: "Guardian V3 Lite on the tool call: IOC catalog + hidden-unicode (exec); + injection scan for untrusted MCP params.",
     match: (c) => {
-      const r = scanToolCall(c.toolName, c.command ?? "", c.params);
+      const r = c.kind === "mcp" ? scanToolCall(c.toolName, c.command ?? "", c.params) : scanExecCommand(`${c.toolName}
+${c.command ?? ""}`);
       return r.safe ? null : block("v3lite", `Guardian V3 Lite flagged ${r.threat}`);
     }
   },
@@ -596,10 +679,9 @@ var DEFAULT_RULES = [
     match: (c) => {
       if (c.kind !== "fs" || !c.paths?.length) return null;
       const hit = c.paths.find(
-        (p) => SECRET_PATHS.test(p) || /[\\\/]\.ssh[\\\/]/i.test(p) || // any write into ~/.ssh (e.g. authorized_keys = backdoor)
-        /[\\\/](etc|boot|sys|windows[\\\/]system32)[\\\/]/i.test(p)
+        (p) => SECRET_PATHS.test(p) || /[\\/]\.ssh[\\/]/i.test(p) || /[\\/](etc|boot|sys|windows[\\/]system32)[\\/]/i.test(p)
       );
-      return hit ? ask("sensitive-path-write", `Writing to a sensitive location: ${hit}`) : null;
+      return hit ? ask2("sensitive-path-write", `Writing to a sensitive location: ${hit}`) : null;
     }
   }
 ];
@@ -1046,7 +1128,7 @@ async function speak(text, opts = {}) {
 }
 
 // src/avatar/onboarding.ts
-import { stdin as stdin2, stdout as stdout2 } from "process";
+import { stdin as stdin2, stdout as stdout3 } from "process";
 import { createInterface as createInterface2 } from "readline/promises";
 
 // src/avatar/system-voice.ts
@@ -1120,7 +1202,7 @@ var C3 = {
   reset: "\x1B[0m"
 };
 async function previewAvatar(avatar) {
-  stdout2.write(
+  stdout3.write(
     `
   ${C3.teal}\u25EF${C3.reset} ${C3.bold}${avatar.slug}${C3.reset} is now your terminal face. ${C3.dim}Change anytime with ${C3.reset}${C3.teal}oriro avatar${C3.reset}
 `
@@ -1131,19 +1213,19 @@ async function previewAvatar(avatar) {
     png = readCachedAvatar(avatar.slug);
   } catch {
   }
-  stdout2.write("\n" + renderAvatar(avatar, png) + "\n");
+  stdout3.write("\n" + renderAvatar(avatar, png) + "\n");
   setupSystemVoice();
   const spoke = await speak(`Hi, I'm ${avatar.slug}, your ORIRO terminal face. I'll speak your replies.`, {
     voiceId: avatar.slug,
     lang: "en-US"
   });
-  if (spoke) stdout2.write(`  ${C3.dim}(spoken aloud in your terminal's voice)${C3.reset}
+  if (spoke) stdout3.write(`  ${C3.dim}(spoken aloud in your terminal's voice)${C3.reset}
 `);
 }
 async function selectAvatarInteractive() {
-  const rl = createInterface2({ input: stdin2, output: stdout2 });
+  const rl = createInterface2({ input: stdin2, output: stdout3 });
   try {
-    stdout2.write(
+    stdout3.write(
       `
   ${C3.teal}\u25EF${C3.reset} ${C3.bold}Choose your ORIRO avatar${C3.reset} ${C3.dim}\u2014 ${AVATAR_COUNT} faces, it floats in your terminal and speaks.${C3.reset}
 
@@ -1151,36 +1233,46 @@ async function selectAvatarInteractive() {
     );
     const cats = avatarCategories();
     cats.forEach(
-      (cat2, i) => stdout2.write(
+      (cat2, i) => stdout3.write(
         `  ${C3.teal}${String(i + 1).padStart(2)}${C3.reset}  ${cat2} ${C3.dim}(${avatarsInCategory(cat2).length})${C3.reset}
 `
       )
     );
-    const cn = Number(
-      (await rl.question(`
-  ${C3.teal}\u203A${C3.reset} Pick a category number: `)).trim()
-    );
-    const cat = cats[cn - 1];
-    if (!cat) {
-      stdout2.write("  No category chosen.\n");
-      return null;
+    let cat;
+    for (; ; ) {
+      const ans = (await ask(rl, `
+  ${C3.teal}\u203A${C3.reset} Pick a category number ${C3.dim}(or Enter to skip)${C3.reset}: `)).trim();
+      if (!ans) {
+        stdout3.write(`  ${C3.dim}Skipped \u2014 no avatar.${C3.reset}
+`);
+        return null;
+      }
+      const n = Number(ans);
+      cat = Number.isInteger(n) ? cats[n - 1] : void 0;
+      if (cat) break;
+      stdout3.write(`  ${C3.dim}Please enter a number from the list.${C3.reset}
+`);
     }
     const list = avatarsInCategory(cat);
-    stdout2.write("\n");
+    stdout3.write("\n");
     list.forEach(
-      (a, i) => stdout2.write(`  ${C3.teal}${String(i + 1).padStart(2)}${C3.reset}  ${a.slug}
+      (a, i) => stdout3.write(`  ${C3.teal}${String(i + 1).padStart(2)}${C3.reset}  ${a.slug}
 `)
     );
-    const an = Number(
-      (await rl.question(`
-  ${C3.teal}\u203A${C3.reset} Pick an avatar number: `)).trim()
-    );
-    const chosen = list[an - 1];
-    if (!chosen) {
-      stdout2.write("  No avatar chosen.\n");
-      return null;
+    for (; ; ) {
+      const ans = (await ask(rl, `
+  ${C3.teal}\u203A${C3.reset} Pick an avatar number ${C3.dim}(or Enter to skip)${C3.reset}: `)).trim();
+      if (!ans) {
+        stdout3.write(`  ${C3.dim}Skipped \u2014 no avatar.${C3.reset}
+`);
+        return null;
+      }
+      const n = Number(ans);
+      const chosen = Number.isInteger(n) ? list[n - 1] : void 0;
+      if (chosen) return chosen;
+      stdout3.write(`  ${C3.dim}Please enter a number from the list.${C3.reset}
+`);
     }
-    return chosen;
   } finally {
     rl.close();
   }
@@ -1237,22 +1329,22 @@ function hasScribeChoice() {
 
 // src/onboarding/wrapper.ts
 function isFirstRun() {
-  return !isLanguageConfigured();
+  return !isLanguageConfigured() || !hasScribeChoice();
 }
 async function askYesNo(question) {
-  const rl = createInterface3({ input: stdin3, output: stdout3 });
+  const rl = createInterface3({ input: stdin3, output: stdout4 });
   try {
-    const a = (await rl.question(`${question} ${dim("[Y/n]")} `)).trim().toLowerCase();
+    const a = (await ask(rl, `${question} ${dim("[Y/n]")} `)).trim().toLowerCase();
     return a === "" || a === "y" || a === "yes";
   } finally {
     rl.close();
   }
 }
 async function runOnboarding() {
-  stdout3.write(banner());
+  stdout4.write(banner());
   await runLanguageOnboarding();
   await activateGuardian();
-  stdout3.write(`  ${accent("\u{1F6E1} Guardian V3")} is on by default. ${accent("\u{1F9ED} Head")} is ready.
+  stdout4.write(`  ${accent("\u{1F6E1} Guardian V3")} is on by default. ${accent("\u{1F9ED} Head")} is ready.
 
 `);
   if (!isAvatarConfigured()) await runAvatarOnboarding();
@@ -1261,11 +1353,11 @@ async function runOnboarding() {
       "Remember with me? The Scriber keeps your work in context on THIS machine only \u2014 it never leaves it."
     );
     setScribeConsent(yes);
-    stdout3.write(yes ? `  ${accent("\u{1F4D3} Scriber")} on.
+    stdout4.write(yes ? `  ${accent("\u{1F4D3} Scriber")} on.
 ` : `  ${dim("Scriber off \u2014 `oriro scribe on` anytime.")}
 `);
   }
-  stdout3.write(`
+  stdout4.write(`
   ${accent("ORIRO is ready.")} ${dim("Type to chat \xB7 /exit to leave")}
 
 `);
@@ -1357,6 +1449,24 @@ var RouterMux = class {
     for (const s of stats) if (this.stats.has(s.id)) this.stats.set(s.id, { ...s });
   }
 };
+function healthStatePath(dir) {
+  return join10(dir, "routers", "health.json");
+}
+function saveMuxState(dir, stats) {
+  const p = healthStatePath(dir);
+  mkdirSync5(join10(dir, "routers"), { recursive: true });
+  writeFileSync7(p, JSON.stringify(stats, null, 2), "utf8");
+}
+function loadMuxState(dir) {
+  const p = healthStatePath(dir);
+  if (!existsSync3(p)) return [];
+  try {
+    const stats = JSON.parse(readFileSync8(p, "utf8"));
+    return stats.map((s) => ({ ...s, latencyMs: Number.isFinite(s.latencyMs) ? s.latencyMs : Number.POSITIVE_INFINITY }));
+  } catch {
+    return [];
+  }
+}
 
 // src/routers/floor.ts
 var KEYLESS_FLOOR = [
@@ -1425,7 +1535,7 @@ async function validateRouter(entry, key, modelId) {
   try {
     let res;
     if (entry.api === "google-generative-ai") {
-      const url = `${entry.baseUrl.replace(/\/$/, "")}/models/${model}:generateContent${key ? `?key=${key}` : ""}`;
+      const url = `${entry.baseUrl.replace(/\/$/, "")}/models/${model}:generateContent${key ? `?key=${encodeURIComponent(key)}` : ""}`;
       res = await fetch(url, {
         method: "POST",
         headers: { "content-type": "application/json" },
@@ -1484,6 +1594,9 @@ async function addRouter(entry, opts) {
   if (entry.comingSoon) {
     return { ok: false, validation: { ok: false, latencyMs: 0, model: "", error: "coming soon" } };
   }
+  if (entry.kind && entry.kind !== "chat") {
+    return { ok: false, validation: { ok: false, latencyMs: 0, model: "", error: `'${entry.id}' is a ${entry.kind} router, not a chat router` } };
+  }
   const key = opts?.key ?? (entry.keyless ? KEYLESS_SENTINEL : void 0);
   const v = await validateRouter(entry, key, opts?.modelId);
   if (!v.ok) return { ok: false, validation: v };
@@ -1501,7 +1614,11 @@ async function addRouter(entry, opts) {
   return { ok: true, validation: v };
 }
 function useRouters(ids) {
-  savePool(oriroDir(), ids);
+  const reg = readReg();
+  const applied = ids.filter((id) => reg[id]);
+  const unknown = ids.filter((id) => !reg[id]);
+  if (applied.length > 0) savePool(oriroDir(), applied);
+  return { applied, unknown };
 }
 function resolvePool() {
   const reg = readReg();
@@ -1581,955 +1698,1040 @@ function sanitizeEventToolCalls(ev) {
   return next;
 }
 
-// src/routers/mux-provider.ts
-var MUX_PROVIDER = "oriro-mux";
-var MUX_MODEL = "oriro-free";
-function errToCallError(msg) {
-  const text = msg.errorMessage ?? "";
-  return /\b429\b|rate.?limit|too many requests/i.test(text) ? { status: 429 } : {};
+// src/scribe/scribe-pi.ts
+import { existsSync as existsSync9, readFileSync as readFileSync16 } from "fs";
+import { Type } from "typebox";
+
+// src/scribe/capture.ts
+import { closeSync as closeSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync10, openSync as openSync2, writeSync as writeSync2 } from "fs";
+import { join as join14 } from "path";
+
+// src/scribe/digest.ts
+import { existsSync as existsSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync10 } from "fs";
+
+// src/scribe/paths.ts
+import { join as join13 } from "path";
+function scribeDir() {
+  const override = process.env.ORIRO_SCRIBE_DIR?.trim();
+  return override && override.length > 0 ? override : join13(CONFIG_DIR, "scribe");
 }
-function buildErrorMessage(message) {
-  return {
-    role: "assistant",
-    content: [],
-    api: "openai-completions",
-    provider: MUX_PROVIDER,
-    model: MUX_MODEL,
-    usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
-    stopReason: "error",
-    timestamp: Date.now(),
-    errorMessage: message
-  };
+function journalFile(date) {
+  return join13(scribeDir(), `${date}.md`);
 }
-async function driveMux(out, mux, byId, context, options) {
-  let lastError;
-  for (const id of mux.ranked()) {
-    const router = byId.get(id);
-    if (!router) continue;
-    const t0 = Date.now();
-    let committed = false;
-    let lastPartial;
-    try {
-      const inner = piStreamSimple(routerModel(router), context, {
-        ...options ?? {},
-        apiKey: router.apiKey
-      });
-      let failedBeforeContent = false;
-      for await (const ev of inner) {
-        if (ev.type === "error") {
-          mux.recordFailure(id, errToCallError(ev.error));
-          if (!committed) {
-            lastError = ev.error;
-            failedBeforeContent = true;
-            break;
-          }
-          out.push(ev);
-          out.end(ev.error);
-          return;
-        }
-        committed = true;
-        if (ev.type === "done") {
-          mux.recordSuccess(id, Date.now() - t0);
-          const clean = sanitizeMessageToolCalls(scrubMessageIdentity(ev.message));
-          out.push({ type: "done", reason: ev.reason, message: clean });
-          out.end(clean);
-          return;
-        }
-        lastPartial = ev.partial;
-        out.push(sanitizeEventToolCalls(ev));
-      }
-      if (failedBeforeContent) continue;
-      mux.recordSuccess(id, Date.now() - t0);
-      out.end(lastPartial ? sanitizeMessageToolCalls(scrubMessageIdentity(lastPartial)) : void 0);
-      return;
-    } catch (e) {
-      mux.recordFailure(id, e);
-    }
-  }
-  const msg = lastError ?? buildErrorMessage(
-    "All keyless routers are unavailable. Add a BYOK key, select more free routers, or retry shortly."
-  );
-  out.push({ type: "error", reason: "error", error: msg });
-  out.end(msg);
+function digestFile() {
+  return join13(scribeDir(), "_digest.md");
 }
-function registerOriroMux(registry, opts = {}) {
-  registerOpenAICompletions();
-  const pooled = resolvePool();
-  const routers = opts.routers ?? (pooled.length > 0 ? pooled : KEYLESS_FLOOR);
-  const byId = new Map(routers.map((r) => [r.id, r]));
-  const mux = new RouterMux(routers.map((r) => r.id));
-  registry.registerProvider(MUX_PROVIDER, {
-    name: "ORIRO Free (keyless Mux)",
-    api: "openai-completions",
-    apiKey: "oriro-keyless",
-    // Placeholder — required by registry validation but never used: our custom streamSimple
-    // routes to the real keyless floor endpoints itself (see driveMux).
-    baseUrl: "http://oriro-mux.local",
-    models: [
-      {
-        id: MUX_MODEL,
-        name: "ORIRO Free (best-router)",
-        api: "openai-completions",
-        baseUrl: "http://oriro-mux.local",
-        reasoning: false,
-        input: ["text"],
-        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-        contextWindow: 128e3,
-        maxTokens: 4096
-      }
-    ],
-    streamSimple: (_model, context, options) => {
-      const out = createAssistantMessageEventStream();
-      void driveMux(out, mux, byId, applyIdentity(context), options);
-      return out;
-    }
-  });
-  return registry.find(MUX_PROVIDER, MUX_MODEL);
+function timelineFile() {
+  return join13(scribeDir(), "_timeline.md");
+}
+function artifactsDir() {
+  return join13(scribeDir(), "artifacts");
 }
 
-// src/head/pi-tool.ts
-import { Type } from "typebox";
+// src/scribe/digest.ts
+var DIGEST_CAP = 8192;
+var TIMELINE_DAY_CAP = 400;
+function read(file4) {
+  return existsSync5(file4) ? readFileSync11(file4, "utf8") : "";
+}
+function updateDigest(summary, context) {
+  mkdirSync8(scribeDir(), { recursive: true });
+  const existing = read(digestFile());
+  let contextBlock = context?.trim();
+  if (!contextBlock) {
+    const m = existing.match(/## Context\n([\s\S]*?)\n## /);
+    contextBlock = m?.[1]?.trim() ?? "_(not set yet)_";
+  }
+  const recentMatch = existing.match(/## Recent activity[^\n]*\n([\s\S]*)$/);
+  const priorRecent = recentMatch?.[1]?.trim() ?? "";
+  let recent = summary.trim() ? `- ${summary.trim()}
+${priorRecent}` : priorRecent;
+  const header2 = `# ORIRO Scribe \u2014 Digest
 
-// src/head/comparison-engine.ts
-var SECTION_RULES = [
-  {
-    type: "hero",
-    label: "Hero",
-    priority: "CRITICAL",
-    markup: [/<h1[\s>]/],
-    recommend: "Add a clear above-the-fold hero \u2014 one headline that states the value + one primary CTA."
-  },
-  {
-    type: "navigation",
-    label: "Navigation",
-    priority: "CRITICAL",
-    markup: [/<nav[\s>]/, /role=["']navigation["']/],
-    recommend: "Add a top navigation so visitors can reach key sections."
-  },
-  {
-    type: "features",
-    label: "Features",
-    priority: "CRITICAL",
-    text: [/\bfeatures?\b/, /\bwhat you (?:can|get)\b/, /\bcapabilit/],
-    recommend: "Add a features section that spells out concrete capabilities, not adjectives."
-  },
-  {
-    type: "pricing",
-    label: "Pricing",
-    priority: "CRITICAL",
-    text: [/\bpricing\b/, /\bper month\b/, /\b\/mo\b/, /\bfree plan\b/, /\$\d/, /₹\d/, /€\d/],
-    recommend: 'Add transparent pricing \u2014 a critical conversion element; even a single "Free" tier helps.'
-  },
-  {
-    type: "cta",
-    label: "Call-to-Action",
-    priority: "CRITICAL",
-    text: [/\bget started\b/, /\bsign up\b/, /\bstart (?:free|now|building)\b/, /\btry (?:it|now|free)\b/, /\bbook a demo\b/, /\bget a demo\b/],
-    recommend: 'Add a strong, repeated primary CTA ("Get started") so the next step is obvious.'
-  },
-  {
-    type: "testimonials",
-    label: "Testimonials",
-    priority: "HIGH",
-    text: [/\btestimonial/, /\bwhat (?:our )?(?:customers|users) say\b/, /\bloved by\b/, /\breview(?:s|ed)\b/],
-    recommend: "Add 2\u20133 customer testimonials with names/photos to build trust."
-  },
-  {
-    type: "stats",
-    label: "Stats / Metrics",
-    priority: "HIGH",
-    text: [/\b\d[\d,.]*\s*[kkmm]\+?\s*(?:users|customers|developers|downloads|teams)\b/, /\b9\d(?:\.\d+)?%\b/, /\buptime\b/],
-    recommend: 'Add impressive metrics ("10K+ users", "99.9% uptime") as social proof.'
-  },
-  {
-    type: "video",
-    label: "Video",
-    priority: "HIGH",
-    markup: [/<video[\s>]/, /youtube\.com\/embed/, /player\.vimeo\.com/, /<iframe[^>]+(?:youtube|vimeo)/],
-    text: [/\bwatch the (?:video|demo)\b/],
-    recommend: "Add a short explainer/demo video \u2014 it lifts conversion on landing pages."
-  },
-  {
-    type: "demo",
-    label: "Live Demo",
-    priority: "HIGH",
-    text: [/\btry it (?:now|live|free)\b/, /\bplayground\b/, /\binteractive demo\b/, /\blive demo\b/],
-    recommend: 'Add a "try it" live demo or playground so visitors experience the product immediately.'
-  },
-  {
-    type: "socialProof",
-    label: "Social Proof",
-    priority: "HIGH",
-    text: [/\btrusted by\b/, /\bbacked by\b/, /\bused by\b/, /\bas seen (?:in|on)\b/, /\bcustomers include\b/],
-    recommend: 'Add social proof (customer/investor logos, "trusted by \u2026") near the hero.'
-  },
-  {
-    type: "faq",
-    label: "FAQ",
-    priority: "MEDIUM",
-    text: [/\bfaq\b/, /\bfrequently asked\b/],
-    markup: [/<details[\s>]/],
-    recommend: "Add an FAQ that answers the top objections before they become exits."
-  },
-  {
-    type: "integrations",
-    label: "Integrations",
-    priority: "MEDIUM",
-    text: [/\bintegrations?\b/, /\bworks with\b/, /\bconnect your\b/],
-    recommend: "Add an integrations section showing what the product connects to."
-  },
-  {
-    type: "newsletter",
-    label: "Newsletter / Capture",
-    priority: "MEDIUM",
-    text: [/\bsubscribe\b/, /\bnewsletter\b/, /\bjoin (?:the )?waitlist\b/],
-    markup: [/type=["']email["']/],
-    recommend: "Add an email capture (newsletter/waitlist) so non-converting visitors are not lost."
-  },
-  {
-    type: "comparison",
-    label: "Comparison",
-    priority: "MEDIUM",
-    text: [/\bcompare\b/, /\bcomparison\b/, /\b vs\.? \b/, /\bwhy choose\b/],
-    recommend: 'Add a comparison ("us vs alternatives") to win evaluators who are shopping around.'
-  },
-  {
-    type: "team",
-    label: "Team / About",
-    priority: "LOW",
-    text: [/\bour team\b/, /\bmeet the team\b/, /\bfounders?\b/, /\babout us\b/],
-    recommend: "Add a brief team/about section to humanize the brand."
+## Context
+${contextBlock}
+
+## Recent activity (newest first)
+`;
+  let out = header2 + recent;
+  while (Buffer.byteLength(out, "utf8") > DIGEST_CAP && recent.includes("\n")) {
+    recent = recent.slice(0, recent.lastIndexOf("\n")).trimEnd();
+    out = header2 + recent;
   }
-];
-var PRIORITY_RANK = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3 };
-var PRIORITY_EFFORT = { CRITICAL: "L", HIGH: "M", MEDIUM: "M", LOW: "S" };
-var FETCH_TIMEOUT_MS = 12e3;
-var UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 ORIRO-Inspector";
-async function fetchPage(url) {
-  const controller = new AbortController();
-  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
-  const start = Date.now();
+  writeFileSync10(digestFile(), out, "utf8");
+}
+function updateTimeline(date, topic) {
+  mkdirSync8(scribeDir(), { recursive: true });
+  const clean = topic.replace(/\s+/g, " ").trim();
+  if (!clean) return;
+  const lines = read(timelineFile()).split("\n").filter(Boolean);
+  const header2 = "# ORIRO Scribe \u2014 Timeline";
+  const body = lines.filter((l) => l !== header2);
+  const idx = body.findIndex((l) => l.startsWith(`- ${date} \xB7`));
+  if (idx === -1) {
+    body.push(`- ${date} \xB7 ${clean}`.slice(0, TIMELINE_DAY_CAP + date.length + 6));
+  } else {
+    let merged = `${body[idx]}; ${clean}`;
+    if (merged.length > TIMELINE_DAY_CAP) merged = `${merged.slice(0, TIMELINE_DAY_CAP)}\u2026`;
+    body[idx] = merged;
+  }
+  body.sort();
+  writeFileSync10(timelineFile(), `${header2}
+${body.join("\n")}
+`, "utf8");
+}
+function readDigest() {
+  return read(digestFile());
+}
+
+// src/scribe/journal.ts
+import {
+  closeSync,
+  existsSync as existsSync6,
+  fsyncSync,
+  mkdirSync as mkdirSync9,
+  openSync,
+  readFileSync as readFileSync12,
+  writeSync
+} from "fs";
+function appendJournal(date, content) {
+  mkdirSync9(scribeDir(), { recursive: true });
+  const fd = openSync(journalFile(date), "a");
   try {
-    const res = await fetch(url, {
-      signal: controller.signal,
-      redirect: "follow",
-      headers: { "user-agent": UA, accept: "text/html,application/xhtml+xml" }
-    });
-    const html = await res.text();
-    return { html, ms: Date.now() - start, status: res.status, ok: res.ok, error: "" };
-  } catch (err) {
-    return { html: "", ms: Date.now() - start, status: 0, ok: false, error: err instanceof Error ? err.message : "fetch failed" };
+    writeSync(fd, content.endsWith("\n") ? content : `${content}
+`);
+    fsyncSync(fd);
   } finally {
-    clearTimeout(timer);
+    closeSync(fd);
   }
 }
-function toText(html) {
-  return html.replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<[^>]+>/g, " ").replace(/&nbsp;/gi, " ").replace(/\s+/g, " ").toLowerCase().trim();
+function readJournal(date) {
+  const f = journalFile(date);
+  return existsSync6(f) ? readFileSync12(f, "utf8") : "";
 }
-function firstMatch(re, hay) {
-  const m = re.exec(hay);
-  if (!m) return "";
-  const slice = (m[0] ?? "").trim();
-  return slice.length > 80 ? `${slice.slice(0, 77)}\u2026` : slice;
+
+// src/scribe/redact.ts
+var RULES = [
+  {
+    label: "private-key",
+    re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
+  },
+  // Lone PEM markers — a key SPLIT across fields/turns leaves only a BEGIN-head or an END-tail in
+  // one field. A field carrying either marker is key material: redact the marker + its adjacent body
+  // (forward from BEGIN, backward to END) so no sub-threshold fragment can ever sit on disk.
+  { label: "private-key", re: /-----BEGIN[A-Z ]*PRIVATE KEY-----[\s\S]*/g },
+  { label: "private-key", re: /[\s\S]*-----END[A-Z ]*PRIVATE KEY-----/g },
+  { label: "anthropic-key", re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
+  { label: "openrouter-key", re: /sk-or-v1-[A-Za-z0-9]{20,}/g },
+  // Stripe-style keys (sk_live_/pk_live_/rk_test_/…), underscore segments.
+  { label: "stripe-key", re: /\b[srp]k_(?:live|test)_[A-Za-z0-9]{16,}/g },
+  // Generic sk- secret keys — allow hyphenated segments (sk-live-…, sk-proj-…) so a second
+  // hyphen no longer breaks the match (the gap the Scriber spike caught).
+  { label: "secret-key-sk", re: /sk[-_][A-Za-z0-9][A-Za-z0-9-]{14,}/g },
+  { label: "google-key", re: /AIza[0-9A-Za-z_-]{30,}/g },
+  { label: "groq-key", re: /gsk_[A-Za-z0-9]{20,}/g },
+  { label: "github-pat", re: /github_pat_[A-Za-z0-9_]{20,}/g },
+  { label: "github-token", re: /gh[posr]_[A-Za-z0-9]{30,}/g },
+  { label: "xai-key", re: /xai-[A-Za-z0-9]{20,}/g },
+  { label: "aws-key", re: /AKIA[0-9A-Z]{16}/g },
+  { label: "jwt", re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}/g },
+  { label: "telegram-token", re: /\b\d{8,10}:[A-Za-z0-9_-]{30,}\b/g },
+  // Auth headers / inline credentials (any provider) — the audit found these leaked.
+  { label: "bearer-token", re: /\bbearer\s+[A-Za-z0-9._~+/=-]{12,}/gi },
+  { label: "basic-auth", re: /\bbasic\s+[A-Za-z0-9+/=]{12,}/gi },
+  // key: value / key=value secrets (password, token, secret, api_key, access_key, …).
+  { label: "secret-kv", re: /\b(?:pass(?:word|wd)?|pwd|secret|token|api[_-]?key|access[_-]?key|auth)\s*[:=]\s*\S{3,}/gi },
+  // Credentials embedded in a URL: scheme://user:PASSWORD@host  → redact the password.
+  { label: "url-credential", re: /\b([a-z][a-z0-9+.-]*:\/\/[^/\s:@]+:)[^/\s@]+(@)/gi },
+  { label: "email", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g },
+  { label: "phone", re: /(?:\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]\d{3}[-.\s]\d{4}/g }
+];
+function marker(label) {
+  return `\u27E8REDACTED:${label}\u27E9`;
 }
-function detectSections(rawHtmlLower, text) {
-  const found = [];
-  for (const rule of SECTION_RULES) {
-    let evidence = "";
-    for (const re of rule.markup ?? []) {
-      const hit = firstMatch(re, rawHtmlLower);
-      if (hit) {
-        evidence = hit;
-        break;
-      }
-    }
-    if (!evidence) {
-      for (const re of rule.text ?? []) {
-        const hit = firstMatch(re, text);
-        if (hit) {
-          evidence = hit;
-          break;
-        }
-      }
-    }
-    if (evidence) found.push({ type: rule.type, label: rule.label, priority: rule.priority, evidence });
+function entropy(s) {
+  const freq = /* @__PURE__ */ new Map();
+  for (const ch of s) freq.set(ch, (freq.get(ch) ?? 0) + 1);
+  let h = 0;
+  for (const n of freq.values()) {
+    const p = n / s.length;
+    h -= p * Math.log2(p);
   }
-  return found;
+  return h;
 }
-function extractMatches(re, html, max) {
-  const out = [];
-  for (const m of html.matchAll(re)) {
-    const inner = (m[1] ?? "").replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
-    if (inner && !out.includes(inner)) out.push(inner);
-    if (out.length >= max) break;
+function looksLikeUnknownSecret(token) {
+  if (token.length < 32) return false;
+  if (token.includes("\u27E8REDACTED:")) return false;
+  if (/^[0-9a-f]+$/i.test(token)) return false;
+  const classes = (/[a-z]/.test(token) ? 1 : 0) + (/[A-Z]/.test(token) ? 1 : 0) + (/[0-9]/.test(token) ? 1 : 0);
+  if (classes < 2) return false;
+  return entropy(token) >= 4.2;
+}
+function redact(input) {
+  const counts = /* @__PURE__ */ new Map();
+  let text = input;
+  for (const rule of RULES) {
+    text = text.replace(rule.re, () => {
+      counts.set(rule.label, (counts.get(rule.label) ?? 0) + 1);
+      return marker(rule.label);
+    });
   }
-  return out;
+  text = text.split(/(\s+)/).map((tok) => {
+    if (looksLikeUnknownSecret(tok)) {
+      counts.set("high-entropy", (counts.get("high-entropy") ?? 0) + 1);
+      return marker("high-entropy");
+    }
+    return tok;
+  }).join("");
+  const redactions = [...counts.entries()].map(([label, count]) => ({
+    label,
+    count
+  }));
+  return { text, redactions };
 }
-var CTA_WORDS = /\b(get started|sign up|start free|start now|start building|try (?:it|now|free)|book a demo|get a demo|request access|join (?:the )?waitlist|download)\b/i;
-function extractStructure(url, fr) {
-  const html = fr.html;
-  const lowerHtml = html.toLowerCase();
-  const text = toText(html);
-  const titleM = /<title[^>]*>([\s\S]*?)<\/title>/i.exec(html);
-  const title = (titleM?.[1] ?? "").replace(/\s+/g, " ").trim();
-  const descM = /<meta[^>]+name=["']description["'][^>]+content=["']([^"']*)["']/i.exec(html) ?? /<meta[^>]+content=["']([^"']*)["'][^>]+name=["']description["']/i.exec(html);
-  const description = (descM?.[1] ?? "").replace(/\s+/g, " ").trim();
-  const headings = extractMatches(/<h[1-3][^>]*>([\s\S]*?)<\/h[1-3]>/gi, html, 12);
-  const ctaAll = extractMatches(/<(?:a|button)[^>]*>([\s\S]*?)<\/(?:a|button)>/gi, html, 80);
-  const ctas = [];
-  for (const c of ctaAll) {
-    if (CTA_WORDS.test(c) && !ctas.includes(c)) ctas.push(c);
-    if (ctas.length >= 10) break;
+function containsSecret(text) {
+  for (const rule of RULES) {
+    rule.re.lastIndex = 0;
+    if (rule.re.test(text)) return true;
   }
-  const forms = (lowerHtml.match(/<form[\s>]/g) ?? []).length;
-  const links = (lowerHtml.match(/<a[\s>]/g) ?? []).length;
-  const images = (lowerHtml.match(/<img[\s>]/g) ?? []).length;
-  const hasVideo = /<video[\s>]/.test(lowerHtml) || /(?:youtube\.com\/embed|player\.vimeo\.com)/.test(lowerHtml);
-  const domNodes = (html.match(/<[a-z!\/]/gi) ?? []).length;
-  let note = "";
-  if (fr.ok && text.length < 400 && domNodes < 60) {
-    note = "Sparse HTML \u2014 likely a client-rendered (SPA) page; structure may be under-detected without a JS render.";
+  for (const tok of text.split(/\s+/)) {
+    if (looksLikeUnknownSecret(tok)) return true;
   }
-  return {
-    url,
-    title,
-    description,
-    sections: detectSections(lowerHtml, text),
-    headings,
-    ctas,
-    forms,
-    links,
-    images,
-    hasVideo,
-    metrics: { htmlBytes: html.length, domNodes, fetchMs: fr.ms, status: fr.status },
-    ok: fr.ok && html.length > 0,
-    note: fr.ok ? note : `Could not load: ${fr.error || `HTTP ${fr.status}`}`
-  };
-}
-function ruleFor(type) {
-  return SECTION_RULES.find((r) => r.type === type) ?? SECTION_RULES[0];
-}
-function analyzeGaps(target, competitors) {
-  const targetTypes = new Set(target.sections.map((s) => s.type));
-  const compPresence = /* @__PURE__ */ new Map();
-  for (const comp of competitors) {
-    if (!comp.ok) continue;
-    for (const s of comp.sections) {
-      const list = compPresence.get(s.type) ?? [];
-      if (!list.includes(comp.url)) list.push(comp.url);
-      compPresence.set(s.type, list);
-    }
-  }
-  const missing = [];
-  const parity = [];
-  for (const [type, presentOn] of compPresence) {
-    if (targetTypes.has(type)) {
-      parity.push(type);
-    } else {
-      const rule = ruleFor(type);
-      missing.push({ section: type, label: rule.label, priority: rule.priority, presentOn, recommendation: rule.recommend });
-    }
-  }
-  missing.sort((a, b) => PRIORITY_RANK[a.priority] - PRIORITY_RANK[b.priority] || b.presentOn.length - a.presentOn.length);
-  const advantages = target.sections.filter((s) => !compPresence.has(s.type));
-  return { missing, advantages, parity };
-}
-function generateActionItems(missing) {
-  return missing.map((g) => ({
-    title: `Add a ${g.label} section`,
-    priority: g.priority,
-    effort: PRIORITY_EFFORT[g.priority],
-    rationale: `${g.presentOn.length} of the compared page(s) have it; you don't. ${g.recommendation}`
-  }));
+  return false;
 }
-function hostOf(url) {
+
+// src/scribe/capture.ts
+var INLINE_CAP = 4e3;
+function sideFile(date, ts, kind, full) {
+  mkdirSync10(artifactsDir(), { recursive: true });
+  const name = `${date}_${ts.replace(/[:.]/g, "-")}_${kind}.md`;
+  const p = join14(artifactsDir(), name);
+  const fd = openSync2(p, "w");
   try {
-    return new URL(url).host.replace(/^www\./, "");
-  } catch {
-    return url;
+    writeSync2(fd, full);
+    fsyncSync2(fd);
+  } finally {
+    closeSync2(fd);
   }
+  return p;
 }
-function generateSummary(target, competitors, gaps) {
-  const okComps = competitors.filter((c) => c.ok);
-  const tName = hostOf(target.url);
-  if (!target.ok) return `Could not load ${tName} (${target.note}). Nothing to compare against yet.`;
-  if (okComps.length === 0) return `Loaded ${tName} (${target.sections.length} sections) but none of the comparison URLs could be loaded.`;
-  const crit = gaps.missing.filter((m) => m.priority === "CRITICAL").map((m) => m.label);
-  const high = gaps.missing.filter((m) => m.priority === "HIGH").map((m) => m.label);
-  const parts = [];
-  parts.push(`${tName} has ${target.sections.length} detectable sections; compared against ${okComps.length} page(s).`);
-  if (gaps.missing.length === 0) {
-    parts.push("No structural gaps found \u2014 you cover everything they do.");
-  } else {
-    parts.push(`${gaps.missing.length} gap(s) found.`);
-    if (crit.length) parts.push(`Critical: ${crit.join(", ")}.`);
-    if (high.length) parts.push(`High: ${high.join(", ")}.`);
+function field(date, ts, label, value) {
+  if (!value || !value.trim()) return "";
+  if (value.length > INLINE_CAP) {
+    const ref = sideFile(date, ts, label.toLowerCase().replace(/\s+/g, "-"), value);
+    return `**${label}** (full \u2192 ${ref}):
+${value.slice(0, INLINE_CAP)}
+\u2026(truncated; full content in artifact)
+
+`;
   }
-  if (gaps.advantages.length) parts.push(`Your edge: ${gaps.advantages.map((a) => a.label).join(", ")}.`);
-  return parts.join(" ");
+  return `**${label}:**
+${value}
+
+`;
 }
-function normalizeUrl(u) {
-  const t = (u || "").trim();
-  if (!t) return t;
-  return /^https?:\/\//i.test(t) ? t : `https://${t}`;
+function renderTurn(rec) {
+  let md = `## ${rec.ts}
+
+`;
+  md += field(rec.date, rec.ts, "User", rec.user);
+  md += field(rec.date, rec.ts, "Router", rec.router);
+  if (rec.tools?.length) md += `**Tools:** ${rec.tools.join(", ")}
+
+`;
+  if (rec.files?.length) md += `**Files:** ${rec.files.join(", ")}
+
+`;
+  md += field(rec.date, rec.ts, "Note", rec.note);
+  return `${md}---
+`;
 }
-async function comparePages(opts) {
-  const targetUrl = normalizeUrl(opts.targetUrl);
-  const competitorUrls = (opts.competitorUrls ?? []).map(normalizeUrl).filter((u) => u.length > 0).slice(0, 30);
-  const [targetFetch, ...compFetches] = await Promise.all([
-    fetchPage(targetUrl),
-    ...competitorUrls.map((u) => fetchPage(u))
-  ]);
-  const target = extractStructure(targetUrl, targetFetch ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" });
-  const competitors = competitorUrls.map(
-    (u, i) => extractStructure(u, compFetches[i] ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" })
-  );
-  const gaps = analyzeGaps(target, competitors);
+function oneLineSummary(rec) {
+  const bits = [];
+  if (rec.user) bits.push(rec.user.replace(/\s+/g, " ").slice(0, 80));
+  if (rec.files?.length) bits.push(`files: ${rec.files.slice(0, 3).join(", ")}`);
+  if (rec.note) bits.push(rec.note.replace(/\s+/g, " ").slice(0, 60));
+  return bits.join(" \xB7 ") || "(activity)";
+}
+function redactRecord(rec) {
+  const tally = /* @__PURE__ */ new Map();
+  const rd = (s) => {
+    if (!s) return s;
+    const r = redact(s);
+    for (const x of r.redactions) tally.set(x.label, (tally.get(x.label) ?? 0) + x.count);
+    return r.text;
+  };
+  const safeRec = {
+    ...rec,
+    user: rd(rec.user),
+    note: rd(rec.note),
+    router: rd(rec.router),
+    context: rd(rec.context),
+    files: rec.files?.map((f) => rd(f) ?? f)
+  };
+  return { rec: safeRec, redactions: [...tally.entries()].map(([label, count]) => ({ label, count })) };
+}
+function captureTurn(rec) {
+  const { rec: safeRec, redactions } = redactRecord(rec);
+  const journal = renderTurn(safeRec);
+  appendJournal(rec.date, `${journal}
+`);
+  updateDigest(`${safeRec.ts} \xB7 ${oneLineSummary(safeRec)}`, safeRec.context);
+  updateTimeline(safeRec.date, oneLineSummary(safeRec));
+  const auditClean = !containsSecret(readJournal(rec.date)) && !containsSecret(readDigest() ?? "");
   return {
-    target,
-    competitors,
-    missing: gaps.missing,
-    advantages: gaps.advantages,
-    parity: gaps.parity,
-    actionItems: generateActionItems(gaps.missing),
-    summary: generateSummary(target, competitors, gaps)
+    journalDate: rec.date,
+    redactions,
+    bytes: Buffer.byteLength(journal, "utf8"),
+    auditClean
   };
 }
 
-// src/head/pi-tool.ts
-function summarizeForCoder(report) {
-  const lines = [report.summary];
-  const page = (p) => `  \u2022 ${p.url} \u2014 ${p.ok ? `${p.sections.length} sections: ${p.sections.map((s) => s.type).join(", ")}` : `not readable (${p.note})`}`;
-  lines.push("Pages seen:");
-  lines.push(page(report.target));
-  for (const c of report.competitors) if (c.url !== report.target.url) lines.push(page(c));
-  if (report.missing.length) {
-    lines.push("Missing on the target (gaps to build):");
-    for (const g of report.missing.slice(0, 12)) lines.push(`  \u2022 ${g.label} (${g.priority}) \u2014 ${g.recommendation}`);
-  }
-  if (report.actionItems.length) {
-    lines.push("Suggested action items:");
-    for (const a of report.actionItems.slice(0, 12)) lines.push(`  \u2192 ${a.title} [${a.priority}/${a.effort}] \u2014 ${a.rationale}`);
-  }
-  return lines.join("\n");
-}
-var InspectSiteParams = Type.Object({
-  url: Type.String({ description: "The target website URL to inspect or rebuild from." }),
-  competitors: Type.Optional(
-    Type.Array(Type.String(), { description: "Optional competitor/reference URLs to compare the target against." })
-  )
-});
-function registerHead(pi) {
-  pi.registerTool({
-    name: "inspect_site",
-    label: "ORIRO Head",
-    description: "Go out to a live website and SEE it: its sections, CTAs, structure, and any gaps versus competitor URLs. Returns a structured report to build from. Call this whenever the user wants to look at, compare against, or rebuild a website/page.",
-    parameters: InspectSiteParams,
-    async execute(_toolCallId, params) {
-      const target = params.url;
-      const competitors = params.competitors?.length ? params.competitors : [target];
-      const report = await comparePages({ targetUrl: target, competitorUrls: competitors });
-      return { content: [{ type: "text", text: summarizeForCoder(report) }], details: report };
-    }
-  });
+// src/scribe/health.ts
+import {
+  closeSync as closeSync3,
+  fsyncSync as fsyncSync3,
+  mkdirSync as mkdirSync11,
+  openSync as openSync3,
+  readFileSync as readFileSync13,
+  writeFileSync as writeFileSync11,
+  writeSync as writeSync3
+} from "fs";
+import { join as join15 } from "path";
+function healthFile() {
+  return join15(scribeDir(), "_health.json");
 }
-
-// src/scribe/scribe-pi.ts
-import { existsSync as existsSync9, readFileSync as readFileSync16 } from "fs";
-import { Type as Type2 } from "typebox";
-
-// src/scribe/capture.ts
-import { closeSync as closeSync2, fsyncSync as fsyncSync2, mkdirSync as mkdirSync10, openSync as openSync2, writeSync as writeSync2 } from "fs";
-import { join as join14 } from "path";
-
-// src/scribe/digest.ts
-import { existsSync as existsSync5, mkdirSync as mkdirSync8, readFileSync as readFileSync11, writeFileSync as writeFileSync10 } from "fs";
-
-// src/scribe/paths.ts
-import { join as join13 } from "path";
-function scribeDir() {
-  const override = process.env.ORIRO_SCRIBE_DIR?.trim();
-  return override && override.length > 0 ? override : join13(CONFIG_DIR, "scribe");
+function faultLogFile() {
+  return join15(scribeDir(), "_faults.log");
 }
-function journalFile(date) {
-  return join13(scribeDir(), `${date}.md`);
+function read2() {
+  try {
+    return JSON.parse(readFileSync13(healthFile(), "utf8"));
+  } catch {
+    return { faultCount: 0 };
+  }
 }
-function digestFile() {
-  return join13(scribeDir(), "_digest.md");
+function write(h) {
+  mkdirSync11(scribeDir(), { recursive: true });
+  writeFileSync11(healthFile(), `${JSON.stringify(h, null, 2)}
+`, "utf8");
 }
-function timelineFile() {
-  return join13(scribeDir(), "_timeline.md");
+function recordHealth() {
+  const h = read2();
+  h.lastWriteAt = (/* @__PURE__ */ new Date()).toISOString();
+  write(h);
 }
-function artifactsDir() {
-  return join13(scribeDir(), "artifacts");
+function recordFault(role, err) {
+  try {
+    mkdirSync11(scribeDir(), { recursive: true });
+    const msg = `${(/* @__PURE__ */ new Date()).toISOString()} [${role}] ${err instanceof Error ? err.message : String(err)}`;
+    const fd = openSync3(faultLogFile(), "a");
+    try {
+      writeSync3(fd, `${msg}
+`);
+      fsyncSync3(fd);
+    } finally {
+      closeSync3(fd);
+    }
+    const h = read2();
+    h.faultCount = (h.faultCount ?? 0) + 1;
+    h.lastFault = msg;
+    write(h);
+  } catch {
+  }
 }
 
-// src/scribe/digest.ts
-var DIGEST_CAP = 8192;
-var TIMELINE_DAY_CAP = 400;
-function read(file4) {
-  return existsSync5(file4) ? readFileSync11(file4, "utf8") : "";
+// src/scribe/wal.ts
+import {
+  closeSync as closeSync4,
+  existsSync as existsSync7,
+  fsyncSync as fsyncSync4,
+  mkdirSync as mkdirSync12,
+  openSync as openSync4,
+  readFileSync as readFileSync14,
+  writeFileSync as writeFileSync12,
+  writeSync as writeSync4
+} from "fs";
+import { join as join16 } from "path";
+function walFile() {
+  return join16(scribeDir(), "_wal.jsonl");
 }
-function updateDigest(summary, context) {
-  mkdirSync8(scribeDir(), { recursive: true });
-  const existing = read(digestFile());
-  let contextBlock = context?.trim();
-  if (!contextBlock) {
-    const m = existing.match(/## Context\n([\s\S]*?)\n## /);
-    contextBlock = m?.[1]?.trim() ?? "_(not set yet)_";
-  }
-  const recentMatch = existing.match(/## Recent activity[^\n]*\n([\s\S]*)$/);
-  const priorRecent = recentMatch?.[1]?.trim() ?? "";
-  let recent = summary.trim() ? `- ${summary.trim()}
-${priorRecent}` : priorRecent;
-  const header2 = `# ORIRO Scribe \u2014 Digest
-
-## Context
-${contextBlock}
-
-## Recent activity (newest first)
-`;
-  let out = header2 + recent;
-  while (Buffer.byteLength(out, "utf8") > DIGEST_CAP && recent.includes("\n")) {
-    recent = recent.slice(0, recent.lastIndexOf("\n")).trimEnd();
-    out = header2 + recent;
+function appendLine(obj) {
+  mkdirSync12(scribeDir(), { recursive: true });
+  const fd = openSync4(walFile(), "a");
+  try {
+    writeSync4(fd, `${JSON.stringify(obj)}
+`);
+    fsyncSync4(fd);
+  } finally {
+    closeSync4(fd);
   }
-  writeFileSync10(digestFile(), out, "utf8");
 }
-function updateTimeline(date, topic) {
-  mkdirSync8(scribeDir(), { recursive: true });
-  const clean = topic.replace(/\s+/g, " ").trim();
-  if (!clean) return;
-  const lines = read(timelineFile()).split("\n").filter(Boolean);
-  const header2 = "# ORIRO Scribe \u2014 Timeline";
-  const body = lines.filter((l) => l !== header2);
-  const idx = body.findIndex((l) => l.startsWith(`- ${date} \xB7`));
-  if (idx === -1) {
-    body.push(`- ${date} \xB7 ${clean}`.slice(0, TIMELINE_DAY_CAP + date.length + 6));
-  } else {
-    let merged = `${body[idx]}; ${clean}`;
-    if (merged.length > TIMELINE_DAY_CAP) merged = `${merged.slice(0, TIMELINE_DAY_CAP)}\u2026`;
-    body[idx] = merged;
+function walAppend(id, rec) {
+  appendLine({ t: "add", id, rec });
+}
+function walCommit(id) {
+  appendLine({ t: "commit", id });
+}
+function walPending() {
+  if (!existsSync7(walFile())) return [];
+  const committed = /* @__PURE__ */ new Set();
+  const adds = /* @__PURE__ */ new Map();
+  for (const line of readFileSync14(walFile(), "utf8").split("\n")) {
+    if (!line.trim()) continue;
+    try {
+      const e = JSON.parse(line);
+      if (e.t === "commit") committed.add(e.id);
+      else if (e.t === "add" && e.rec) adds.set(e.id, e.rec);
+    } catch {
+    }
   }
-  body.sort();
-  writeFileSync10(timelineFile(), `${header2}
-${body.join("\n")}
-`, "utf8");
+  const out = [];
+  for (const [id, rec] of adds) {
+    if (!committed.has(id)) out.push({ id, rec });
+  }
+  return out;
+}
+function walCompact() {
+  if (!existsSync7(walFile())) return;
+  const pending = walPending();
+  const body = pending.map((p) => JSON.stringify({ t: "add", id: p.id, rec: p.rec })).join("\n");
+  writeFileSync12(walFile(), body ? `${body}
+` : "", "utf8");
 }
 
-// src/scribe/journal.ts
-import {
-  closeSync,
-  existsSync as existsSync6,
-  fsyncSync,
-  mkdirSync as mkdirSync9,
-  openSync,
-  readFileSync as readFileSync12,
-  writeSync
-} from "fs";
-function appendJournal(date, content) {
-  mkdirSync9(scribeDir(), { recursive: true });
-  const fd = openSync(journalFile(date), "a");
+// src/scribe/supervisor.ts
+var draining = false;
+function uid(ts) {
+  return `${ts}-${Math.random().toString(36).slice(2, 9)}`;
+}
+function drainBacklog() {
+  if (draining) return;
+  draining = true;
   try {
-    writeSync(fd, content.endsWith("\n") ? content : `${content}
-`);
-    fsyncSync(fd);
+    let drained = 0;
+    for (const e of walPending()) {
+      try {
+        captureTurn(e.rec);
+        walCommit(e.id);
+        drained++;
+      } catch (err) {
+        recordFault("standby-replay", err);
+        break;
+      }
+    }
+    if (drained > 0) walCompact();
   } finally {
-    closeSync(fd);
+    draining = false;
   }
 }
-function readJournal(date) {
-  const f = journalFile(date);
-  return existsSync6(f) ? readFileSync12(f, "utf8") : "";
+function supervisedCapture(rec) {
+  try {
+    drainBacklog();
+    const id = uid(rec.ts);
+    const safe = redactRecord(rec).rec;
+    walAppend(id, safe);
+    try {
+      const res = captureTurn(safe);
+      walCommit(id);
+      walCompact();
+      recordHealth();
+      return res;
+    } catch (primaryErr) {
+      recordFault("primary", primaryErr);
+      try {
+        const res = captureTurn(safe);
+        walCommit(id);
+        walCompact();
+        recordHealth();
+        return res;
+      } catch (standbyErr) {
+        recordFault("standby", standbyErr);
+        return null;
+      }
+    }
+  } catch (fatal) {
+    recordFault("supervisor", fatal);
+    return null;
+  }
 }
 
-// src/scribe/redact.ts
-var RULES = [
-  {
-    label: "private-key",
-    re: /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g
-  },
-  { label: "anthropic-key", re: /sk-ant-[A-Za-z0-9_-]{20,}/g },
-  { label: "openrouter-key", re: /sk-or-v1-[A-Za-z0-9]{20,}/g },
-  // Stripe-style keys (sk_live_/pk_live_/rk_test_/…), underscore segments.
-  { label: "stripe-key", re: /\b[srp]k_(?:live|test)_[A-Za-z0-9]{16,}/g },
-  // Generic sk- secret keys — allow hyphenated segments (sk-live-…, sk-proj-…) so a second
-  // hyphen no longer breaks the match (the gap the Scriber spike caught).
-  { label: "secret-key-sk", re: /sk[-_][A-Za-z0-9][A-Za-z0-9-]{14,}/g },
-  { label: "google-key", re: /AIza[0-9A-Za-z_-]{30,}/g },
-  { label: "groq-key", re: /gsk_[A-Za-z0-9]{20,}/g },
-  { label: "github-pat", re: /github_pat_[A-Za-z0-9_]{20,}/g },
-  { label: "github-token", re: /gh[posr]_[A-Za-z0-9]{30,}/g },
-  { label: "xai-key", re: /xai-[A-Za-z0-9]{20,}/g },
-  { label: "aws-key", re: /AKIA[0-9A-Z]{16}/g },
-  { label: "jwt", re: /eyJ[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{10,}\.[A-Za-z0-9_-]{6,}/g },
-  { label: "telegram-token", re: /\b\d{8,10}:[A-Za-z0-9_-]{30,}\b/g },
-  { label: "email", re: /[A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,}/g },
-  { label: "phone", re: /(?:\+?\d{1,3}[-.\s]?)?\(?\d{3}\)?[-.\s]\d{3}[-.\s]\d{4}/g }
-];
-function marker(label) {
-  return `\u27E8REDACTED:${label}\u27E9`;
+// src/scribe/retrieval.ts
+import { existsSync as existsSync8, readFileSync as readFileSync15, readdirSync } from "fs";
+function listDays() {
+  const dir = scribeDir();
+  if (!existsSync8(dir)) return [];
+  return readdirSync(dir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).map((f) => f.replace(/\.md$/, "")).sort();
 }
-function entropy(s) {
-  const freq = /* @__PURE__ */ new Map();
-  for (const ch of s) freq.set(ch, (freq.get(ch) ?? 0) + 1);
-  let h = 0;
-  for (const n of freq.values()) {
-    const p = n / s.length;
-    h -= p * Math.log2(p);
+function readDay(date) {
+  const f = journalFile(date);
+  return existsSync8(f) ? readFileSync15(f, "utf8") : "";
+}
+function searchScribe(query, limit = 100) {
+  const q = query.toLowerCase().trim();
+  if (!q) return [];
+  const hits = [];
+  for (const date of listDays().reverse()) {
+    const lines = readDay(date).split("\n");
+    for (let i = 0; i < lines.length; i++) {
+      const ln = lines[i];
+      if (ln && ln.toLowerCase().includes(q)) {
+        hits.push({ date, line: i + 1, text: ln.trim().slice(0, 200) });
+        if (hits.length >= limit) return hits;
+      }
+    }
   }
-  return h;
+  return hits;
 }
-function looksLikeUnknownSecret(token) {
-  if (token.length < 40) return false;
-  if (token.includes("\u27E8REDACTED:")) return false;
-  if (/^[0-9a-f]+$/i.test(token)) return false;
-  const classes = (/[a-z]/.test(token) ? 1 : 0) + (/[A-Z]/.test(token) ? 1 : 0) + (/[0-9]/.test(token) ? 1 : 0);
-  if (classes < 2) return false;
-  return entropy(token) >= 4.2;
+
+// src/scribe/scribe-pi.ts
+function scribeTurn(input) {
+  if (!isScribeEnabled()) return;
+  const ts = (/* @__PURE__ */ new Date()).toISOString();
+  supervisedCapture({ ts, date: ts.slice(0, 10), ...input });
 }
-function redact(input) {
-  const counts = /* @__PURE__ */ new Map();
-  let text = input;
-  for (const rule of RULES) {
-    text = text.replace(rule.re, () => {
-      counts.set(rule.label, (counts.get(rule.label) ?? 0) + 1);
-      return marker(rule.label);
-    });
-  }
-  text = text.split(/(\s+)/).map((tok) => {
-    if (looksLikeUnknownSecret(tok)) {
-      counts.set("high-entropy", (counts.get("high-entropy") ?? 0) + 1);
-      return marker("high-entropy");
-    }
-    return tok;
-  }).join("");
-  const redactions = [...counts.entries()].map(([label, count]) => ({
-    label,
-    count
-  }));
-  return { text, redactions };
+var pendingUserInput = "";
+function noteUserInput(text) {
+  pendingUserInput = text;
 }
-function containsSecret(text) {
-  for (const rule of RULES) {
-    rule.re.lastIndex = 0;
-    if (rule.re.test(text)) return true;
+function takePendingUserInput() {
+  const u = pendingUserInput;
+  pendingUserInput = "";
+  return u;
+}
+function buildScribeContext() {
+  if (!isScribeEnabled()) return "";
+  const parts = [];
+  try {
+    const t = timelineFile();
+    if (existsSync9(t)) parts.push(`# Work history \u2014 every day so far
+${readFileSync16(t, "utf8").trim()}`);
+  } catch {
   }
-  for (const tok of text.split(/\s+/)) {
-    if (looksLikeUnknownSecret(tok)) return true;
+  try {
+    const d = readDigest();
+    if (d?.trim()) parts.push(`# Current context (recent)
+${d.trim()}`);
+  } catch {
+  }
+  if (!parts.length) return "";
+  return `${parts.join("\n\n")}
+
+(Call scribe_recall to fetch the full text of any past day or topic.)`;
+}
+function registerScribe(pi) {
+  pi.registerTool({
+    name: "scribe_recall",
+    label: "ORIRO Scribe",
+    description: "Recall the user's past work from the on-device journal: search by keyword, or read a specific day (YYYY-MM-DD). Use to recover decisions, code, files, and context from earlier sessions.",
+    parameters: Type.Object({
+      query: Type.Optional(Type.String({ description: "Keyword/topic to search across all journals." })),
+      day: Type.Optional(Type.String({ description: "A specific day YYYY-MM-DD to read in full." }))
+    }),
+    async execute(_id, params) {
+      let text;
+      const details = {};
+      if (!isScribeEnabled()) {
+        text = "Scribe is off (the user has not enabled it).";
+      } else if (params.day) {
+        text = readDay(params.day) || `No journal for ${params.day}. Days: ${listDays().join(", ") || "none"}`;
+        details.day = params.day;
+      } else {
+        const hits = params.query ? searchScribe(params.query) : [];
+        details.hits = hits;
+        text = hits.length ? hits.map((h) => `${h.date}:${h.line}  ${h.text}`).join("\n") : `No matches${params.query ? ` for "${params.query}"` : ""}. Days recorded: ${listDays().join(", ") || "none"}`;
+      }
+      return { content: [{ type: "text", text }], details };
+    }
+  });
+}
+function attachScribe(session) {
+  let user = "";
+  let assistant = "";
+  const tools = /* @__PURE__ */ new Set();
+  session.subscribe((e) => {
+    if (!isScribeEnabled()) return;
+    if (e?.type === "user_message" || e?.type === "session_user_message") user = String(e.text ?? e.message ?? user);
+    if (e?.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") assistant += e.assistantMessageEvent.delta ?? "";
+    if ((e?.type === "tool_call" || e?.type === "tool_execution_start") && e.toolName) tools.add(String(e.toolName));
+    if (e?.type === "agent_end") {
+      const userText = takePendingUserInput() || user;
+      scribeTurn({ user: userText || void 0, router: "oriro-free", tools: [...tools], note: assistant.slice(0, 4e3) || void 0 });
+      user = "";
+      assistant = "";
+      tools.clear();
+    }
+  });
+}
+
+// src/routers/mux-provider.ts
+var MUX_PROVIDER = "oriro-mux";
+var MUX_MODEL = "oriro-free";
+function errToCallError(msg) {
+  const text = msg.errorMessage ?? "";
+  return /\b429\b|rate.?limit|too many requests/i.test(text) ? { status: 429 } : {};
+}
+function buildErrorMessage(message) {
+  return {
+    role: "assistant",
+    content: [],
+    api: "openai-completions",
+    provider: MUX_PROVIDER,
+    model: MUX_MODEL,
+    usage: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, totalTokens: 0, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 } },
+    stopReason: "error",
+    timestamp: Date.now(),
+    errorMessage: message
+  };
+}
+async function driveMux(out, mux, byId, context, options) {
+  let lastError;
+  for (const id of mux.ranked()) {
+    const router = byId.get(id);
+    if (!router) continue;
+    const t0 = Date.now();
+    let committed = false;
+    let lastPartial;
+    try {
+      const inner = piStreamSimple(routerModel(router), context, {
+        ...options ?? {},
+        apiKey: router.apiKey
+      });
+      let failedBeforeContent = false;
+      for await (const ev of inner) {
+        if (ev.type === "error") {
+          mux.recordFailure(id, errToCallError(ev.error));
+          if (!committed) {
+            lastError = ev.error;
+            failedBeforeContent = true;
+            break;
+          }
+          out.push(ev);
+          out.end(ev.error);
+          return;
+        }
+        committed = true;
+        if (ev.type === "done") {
+          mux.recordSuccess(id, Date.now() - t0);
+          const clean = sanitizeMessageToolCalls(scrubMessageIdentity(ev.message));
+          out.push({ type: "done", reason: ev.reason, message: clean });
+          out.end(clean);
+          return;
+        }
+        lastPartial = ev.partial;
+        out.push(sanitizeEventToolCalls(ev));
+      }
+      if (failedBeforeContent) continue;
+      if (!committed) {
+        mux.recordFailure(id, {});
+        lastError ??= buildErrorMessage("Router returned no output.");
+        continue;
+      }
+      mux.recordSuccess(id, Date.now() - t0);
+      out.end(lastPartial ? sanitizeMessageToolCalls(scrubMessageIdentity(lastPartial)) : void 0);
+      return;
+    } catch (e) {
+      mux.recordFailure(id, e);
+    }
+  }
+  const msg = lastError ?? buildErrorMessage(
+    "All keyless routers are unavailable. Add a BYOK key, select more free routers, or retry shortly."
+  );
+  out.push({ type: "error", reason: "error", error: msg });
+  out.end(msg);
+}
+function registerOriroMux(registry, opts = {}) {
+  registerOpenAICompletions();
+  const pooled = resolvePool();
+  const routers = opts.routers ?? (pooled.length > 0 ? pooled : KEYLESS_FLOOR);
+  const byId = new Map(routers.map((r) => [r.id, r]));
+  const mux = new RouterMux(routers.map((r) => r.id));
+  try {
+    mux.load(loadMuxState(oriroDir()));
+  } catch {
+  }
+  registry.registerProvider(MUX_PROVIDER, {
+    name: "ORIRO Free (keyless Mux)",
+    api: "openai-completions",
+    apiKey: "oriro-keyless",
+    // Placeholder — required by registry validation but never used: our custom streamSimple
+    // routes to the real keyless floor endpoints itself (see driveMux).
+    baseUrl: "http://oriro-mux.local",
+    models: [
+      {
+        id: MUX_MODEL,
+        name: "ORIRO Free (best-router)",
+        api: "openai-completions",
+        baseUrl: "http://oriro-mux.local",
+        reasoning: false,
+        input: ["text"],
+        cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+        contextWindow: 128e3,
+        maxTokens: 4096
+      }
+    ],
+    streamSimple: (_model, context, options) => {
+      const out = createAssistantMessageEventStream();
+      const ctx = applyIdentity(context);
+      const memory = buildScribeContext();
+      const withMemory = memory ? { ...ctx, systemPrompt: `${ctx.systemPrompt}
+
+${memory}` } : ctx;
+      void driveMux(out, mux, byId, withMemory, options).finally(() => {
+        try {
+          saveMuxState(oriroDir(), mux.snapshot());
+        } catch {
+        }
+      });
+      return out;
+    }
+  });
+  return registry.find(MUX_PROVIDER, MUX_MODEL);
+}
+
+// src/head/pi-tool.ts
+import { Type as Type2 } from "typebox";
+
+// src/head/comparison-engine.ts
+var SECTION_RULES = [
+  {
+    type: "hero",
+    label: "Hero",
+    priority: "CRITICAL",
+    markup: [/<h1[\s>]/],
+    recommend: "Add a clear above-the-fold hero \u2014 one headline that states the value + one primary CTA."
+  },
+  {
+    type: "navigation",
+    label: "Navigation",
+    priority: "CRITICAL",
+    markup: [/<nav[\s>]/, /role=["']navigation["']/],
+    recommend: "Add a top navigation so visitors can reach key sections."
+  },
+  {
+    type: "features",
+    label: "Features",
+    priority: "CRITICAL",
+    text: [/\bfeatures?\b/, /\bwhat you (?:can|get)\b/, /\bcapabilit/],
+    recommend: "Add a features section that spells out concrete capabilities, not adjectives."
+  },
+  {
+    type: "pricing",
+    label: "Pricing",
+    priority: "CRITICAL",
+    text: [/\bpricing\b/, /\bper month\b/, /\b\/mo\b/, /\bfree plan\b/, /\$\d/, /₹\d/, /€\d/],
+    recommend: 'Add transparent pricing \u2014 a critical conversion element; even a single "Free" tier helps.'
+  },
+  {
+    type: "cta",
+    label: "Call-to-Action",
+    priority: "CRITICAL",
+    text: [/\bget started\b/, /\bsign up\b/, /\bstart (?:free|now|building)\b/, /\btry (?:it|now|free)\b/, /\bbook a demo\b/, /\bget a demo\b/],
+    recommend: 'Add a strong, repeated primary CTA ("Get started") so the next step is obvious.'
+  },
+  {
+    type: "testimonials",
+    label: "Testimonials",
+    priority: "HIGH",
+    text: [/\btestimonial/, /\bwhat (?:our )?(?:customers|users) say\b/, /\bloved by\b/, /\breview(?:s|ed)\b/],
+    recommend: "Add 2\u20133 customer testimonials with names/photos to build trust."
+  },
+  {
+    type: "stats",
+    label: "Stats / Metrics",
+    priority: "HIGH",
+    text: [/\b\d[\d,.]*\s*[kkmm]\+?\s*(?:users|customers|developers|downloads|teams)\b/, /\b9\d(?:\.\d+)?%\b/, /\buptime\b/],
+    recommend: 'Add impressive metrics ("10K+ users", "99.9% uptime") as social proof.'
+  },
+  {
+    type: "video",
+    label: "Video",
+    priority: "HIGH",
+    markup: [/<video[\s>]/, /youtube\.com\/embed/, /player\.vimeo\.com/, /<iframe[^>]+(?:youtube|vimeo)/],
+    text: [/\bwatch the (?:video|demo)\b/],
+    recommend: "Add a short explainer/demo video \u2014 it lifts conversion on landing pages."
+  },
+  {
+    type: "demo",
+    label: "Live Demo",
+    priority: "HIGH",
+    text: [/\btry it (?:now|live|free)\b/, /\bplayground\b/, /\binteractive demo\b/, /\blive demo\b/],
+    recommend: 'Add a "try it" live demo or playground so visitors experience the product immediately.'
+  },
+  {
+    type: "socialProof",
+    label: "Social Proof",
+    priority: "HIGH",
+    text: [/\btrusted by\b/, /\bbacked by\b/, /\bused by\b/, /\bas seen (?:in|on)\b/, /\bcustomers include\b/],
+    recommend: 'Add social proof (customer/investor logos, "trusted by \u2026") near the hero.'
+  },
+  {
+    type: "faq",
+    label: "FAQ",
+    priority: "MEDIUM",
+    text: [/\bfaq\b/, /\bfrequently asked\b/],
+    markup: [/<details[\s>]/],
+    recommend: "Add an FAQ that answers the top objections before they become exits."
+  },
+  {
+    type: "integrations",
+    label: "Integrations",
+    priority: "MEDIUM",
+    text: [/\bintegrations?\b/, /\bworks with\b/, /\bconnect your\b/],
+    recommend: "Add an integrations section showing what the product connects to."
+  },
+  {
+    type: "newsletter",
+    label: "Newsletter / Capture",
+    priority: "MEDIUM",
+    text: [/\bsubscribe\b/, /\bnewsletter\b/, /\bjoin (?:the )?waitlist\b/],
+    markup: [/type=["']email["']/],
+    recommend: "Add an email capture (newsletter/waitlist) so non-converting visitors are not lost."
+  },
+  {
+    type: "comparison",
+    label: "Comparison",
+    priority: "MEDIUM",
+    text: [/\bcompare\b/, /\bcomparison\b/, /\b vs\.? \b/, /\bwhy choose\b/],
+    recommend: 'Add a comparison ("us vs alternatives") to win evaluators who are shopping around.'
+  },
+  {
+    type: "team",
+    label: "Team / About",
+    priority: "LOW",
+    text: [/\bour team\b/, /\bmeet the team\b/, /\bfounders?\b/, /\babout us\b/],
+    recommend: "Add a brief team/about section to humanize the brand."
   }
-  return false;
-}
-
-// src/scribe/capture.ts
-var INLINE_CAP = 4e3;
-function sideFile(date, ts, kind, full) {
-  mkdirSync10(artifactsDir(), { recursive: true });
-  const name = `${date}_${ts.replace(/[:.]/g, "-")}_${kind}.md`;
-  const p = join14(artifactsDir(), name);
-  const fd = openSync2(p, "w");
+];
+var PRIORITY_RANK = { CRITICAL: 0, HIGH: 1, MEDIUM: 2, LOW: 3 };
+var PRIORITY_EFFORT = { CRITICAL: "L", HIGH: "M", MEDIUM: "M", LOW: "S" };
+var FETCH_TIMEOUT_MS = 12e3;
+var UA = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0 Safari/537.36 ORIRO-Inspector";
+async function fetchPage(url) {
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), FETCH_TIMEOUT_MS);
+  const start = Date.now();
   try {
-    writeSync2(fd, full);
-    fsyncSync2(fd);
+    const res = await fetch(url, {
+      signal: controller.signal,
+      redirect: "follow",
+      headers: { "user-agent": UA, accept: "text/html,application/xhtml+xml" }
+    });
+    const html = await res.text();
+    return { html, ms: Date.now() - start, status: res.status, ok: res.ok, error: "" };
+  } catch (err) {
+    return { html: "", ms: Date.now() - start, status: 0, ok: false, error: err instanceof Error ? err.message : "fetch failed" };
   } finally {
-    closeSync2(fd);
-  }
-  return p;
-}
-function field(date, ts, label, value) {
-  if (!value || !value.trim()) return "";
-  if (value.length > INLINE_CAP) {
-    const ref = sideFile(date, ts, label.toLowerCase().replace(/\s+/g, "-"), value);
-    return `**${label}** (full \u2192 ${ref}):
-${value.slice(0, INLINE_CAP)}
-\u2026(truncated; full content in artifact)
-
-`;
-  }
-  return `**${label}:**
-${value}
-
-`;
-}
-function renderTurn(rec) {
-  let md = `## ${rec.ts}
-
-`;
-  md += field(rec.date, rec.ts, "User", rec.user);
-  md += field(rec.date, rec.ts, "Router", rec.router);
-  if (rec.tools?.length) md += `**Tools:** ${rec.tools.join(", ")}
-
-`;
-  if (rec.files?.length) md += `**Files:** ${rec.files.join(", ")}
-
-`;
-  md += field(rec.date, rec.ts, "Note", rec.note);
-  return `${md}---
-`;
-}
-function oneLineSummary(rec) {
-  const bits = [];
-  if (rec.user) bits.push(rec.user.replace(/\s+/g, " ").slice(0, 80));
-  if (rec.files?.length) bits.push(`files: ${rec.files.slice(0, 3).join(", ")}`);
-  if (rec.note) bits.push(rec.note.replace(/\s+/g, " ").slice(0, 60));
-  return bits.join(" \xB7 ") || "(activity)";
-}
-function captureTurn(rec) {
-  const safe = redact(renderTurn(rec));
-  appendJournal(rec.date, `${safe.text}
-`);
-  const summary = redact(`${rec.ts} \xB7 ${oneLineSummary(rec)}`).text;
-  updateDigest(summary, rec.context ? redact(rec.context).text : void 0);
-  updateTimeline(rec.date, redact(oneLineSummary(rec)).text);
-  const auditClean = !containsSecret(readJournal(rec.date));
-  return {
-    journalDate: rec.date,
-    redactions: safe.redactions,
-    bytes: Buffer.byteLength(safe.text, "utf8"),
-    auditClean
-  };
-}
-
-// src/scribe/health.ts
-import {
-  closeSync as closeSync3,
-  fsyncSync as fsyncSync3,
-  mkdirSync as mkdirSync11,
-  openSync as openSync3,
-  readFileSync as readFileSync13,
-  writeFileSync as writeFileSync11,
-  writeSync as writeSync3
-} from "fs";
-import { join as join15 } from "path";
-function healthFile() {
-  return join15(scribeDir(), "_health.json");
-}
-function faultLogFile() {
-  return join15(scribeDir(), "_faults.log");
-}
-function read2() {
-  try {
-    return JSON.parse(readFileSync13(healthFile(), "utf8"));
-  } catch {
-    return { faultCount: 0 };
+    clearTimeout(timer);
   }
 }
-function write(h) {
-  mkdirSync11(scribeDir(), { recursive: true });
-  writeFileSync11(healthFile(), `${JSON.stringify(h, null, 2)}
-`, "utf8");
+function toText(html) {
+  return html.replace(/<script[\s\S]*?<\/script>/gi, " ").replace(/<style[\s\S]*?<\/style>/gi, " ").replace(/<[^>]+>/g, " ").replace(/&nbsp;/gi, " ").replace(/\s+/g, " ").toLowerCase().trim();
 }
-function recordHealth() {
-  const h = read2();
-  h.lastWriteAt = (/* @__PURE__ */ new Date()).toISOString();
-  write(h);
+function firstMatch(re, hay) {
+  const m = re.exec(hay);
+  if (!m) return "";
+  const slice = (m[0] ?? "").trim();
+  return slice.length > 80 ? `${slice.slice(0, 77)}\u2026` : slice;
 }
-function recordFault(role, err) {
-  try {
-    mkdirSync11(scribeDir(), { recursive: true });
-    const msg = `${(/* @__PURE__ */ new Date()).toISOString()} [${role}] ${err instanceof Error ? err.message : String(err)}`;
-    const fd = openSync3(faultLogFile(), "a");
-    try {
-      writeSync3(fd, `${msg}
-`);
-      fsyncSync3(fd);
-    } finally {
-      closeSync3(fd);
+function detectSections(rawHtmlLower, text) {
+  const found = [];
+  for (const rule of SECTION_RULES) {
+    let evidence = "";
+    for (const re of rule.markup ?? []) {
+      const hit = firstMatch(re, rawHtmlLower);
+      if (hit) {
+        evidence = hit;
+        break;
+      }
     }
-    const h = read2();
-    h.faultCount = (h.faultCount ?? 0) + 1;
-    h.lastFault = msg;
-    write(h);
-  } catch {
+    if (!evidence) {
+      for (const re of rule.text ?? []) {
+        const hit = firstMatch(re, text);
+        if (hit) {
+          evidence = hit;
+          break;
+        }
+      }
+    }
+    if (evidence) found.push({ type: rule.type, label: rule.label, priority: rule.priority, evidence });
   }
+  return found;
 }
-
-// src/scribe/wal.ts
-import {
-  closeSync as closeSync4,
-  existsSync as existsSync7,
-  fsyncSync as fsyncSync4,
-  mkdirSync as mkdirSync12,
-  openSync as openSync4,
-  readFileSync as readFileSync14,
-  writeFileSync as writeFileSync12,
-  writeSync as writeSync4
-} from "fs";
-import { join as join16 } from "path";
-function walFile() {
-  return join16(scribeDir(), "_wal.jsonl");
-}
-function appendLine(obj) {
-  mkdirSync12(scribeDir(), { recursive: true });
-  const fd = openSync4(walFile(), "a");
-  try {
-    writeSync4(fd, `${JSON.stringify(obj)}
-`);
-    fsyncSync4(fd);
-  } finally {
-    closeSync4(fd);
+function extractMatches(re, html, max) {
+  const out = [];
+  for (const m of html.matchAll(re)) {
+    const inner = (m[1] ?? "").replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+    if (inner && !out.includes(inner)) out.push(inner);
+    if (out.length >= max) break;
   }
+  return out;
 }
-function walAppend(id, rec) {
-  appendLine({ t: "add", id, rec });
-}
-function walCommit(id) {
-  appendLine({ t: "commit", id });
+var CTA_WORDS = /\b(get started|sign up|start free|start now|start building|try (?:it|now|free)|book a demo|get a demo|request access|join (?:the )?waitlist|download)\b/i;
+function extractStructure(url, fr) {
+  const html = fr.html;
+  const lowerHtml = html.toLowerCase();
+  const text = toText(html);
+  const titleM = /<title[^>]*>([\s\S]*?)<\/title>/i.exec(html);
+  const title = (titleM?.[1] ?? "").replace(/\s+/g, " ").trim();
+  const descM = /<meta[^>]+name=["']description["'][^>]+content=["']([^"']*)["']/i.exec(html) ?? /<meta[^>]+content=["']([^"']*)["'][^>]+name=["']description["']/i.exec(html);
+  const description = (descM?.[1] ?? "").replace(/\s+/g, " ").trim();
+  const headings = extractMatches(/<h[1-3][^>]*>([\s\S]*?)<\/h[1-3]>/gi, html, 12);
+  const ctaAll = extractMatches(/<(?:a|button)[^>]*>([\s\S]*?)<\/(?:a|button)>/gi, html, 80);
+  const ctas = [];
+  for (const c of ctaAll) {
+    if (CTA_WORDS.test(c) && !ctas.includes(c)) ctas.push(c);
+    if (ctas.length >= 10) break;
+  }
+  const forms = (lowerHtml.match(/<form[\s>]/g) ?? []).length;
+  const links = (lowerHtml.match(/<a[\s>]/g) ?? []).length;
+  const images = (lowerHtml.match(/<img[\s>]/g) ?? []).length;
+  const hasVideo = /<video[\s>]/.test(lowerHtml) || /(?:youtube\.com\/embed|player\.vimeo\.com)/.test(lowerHtml);
+  const domNodes = (html.match(/<[a-z!\/]/gi) ?? []).length;
+  let note = "";
+  if (fr.ok && text.length < 400 && domNodes < 60) {
+    note = "Sparse HTML \u2014 likely a client-rendered (SPA) page; structure may be under-detected without a JS render.";
+  }
+  return {
+    url,
+    title,
+    description,
+    sections: detectSections(lowerHtml, text),
+    headings,
+    ctas,
+    forms,
+    links,
+    images,
+    hasVideo,
+    metrics: { htmlBytes: html.length, domNodes, fetchMs: fr.ms, status: fr.status },
+    ok: fr.ok && html.length > 0,
+    note: fr.ok ? note : `Could not load: ${fr.error || `HTTP ${fr.status}`}`
+  };
 }
-function walPending() {
-  if (!existsSync7(walFile())) return [];
-  const committed = /* @__PURE__ */ new Set();
-  const adds = /* @__PURE__ */ new Map();
-  for (const line of readFileSync14(walFile(), "utf8").split("\n")) {
-    if (!line.trim()) continue;
-    try {
-      const e = JSON.parse(line);
-      if (e.t === "commit") committed.add(e.id);
-      else if (e.t === "add" && e.rec) adds.set(e.id, e.rec);
-    } catch {
+function ruleFor(type) {
+  return SECTION_RULES.find((r) => r.type === type) ?? SECTION_RULES[0];
+}
+function analyzeGaps(target, competitors) {
+  const targetTypes = new Set(target.sections.map((s) => s.type));
+  const compPresence = /* @__PURE__ */ new Map();
+  for (const comp of competitors) {
+    if (!comp.ok) continue;
+    for (const s of comp.sections) {
+      const list = compPresence.get(s.type) ?? [];
+      if (!list.includes(comp.url)) list.push(comp.url);
+      compPresence.set(s.type, list);
     }
   }
-  const out = [];
-  for (const [id, rec] of adds) {
-    if (!committed.has(id)) out.push({ id, rec });
+  const missing = [];
+  const parity = [];
+  for (const [type, presentOn] of compPresence) {
+    if (targetTypes.has(type)) {
+      parity.push(type);
+    } else {
+      const rule = ruleFor(type);
+      missing.push({ section: type, label: rule.label, priority: rule.priority, presentOn, recommendation: rule.recommend });
+    }
   }
-  return out;
-}
-function walCompact() {
-  if (!existsSync7(walFile())) return;
-  const pending = walPending();
-  const body = pending.map((p) => JSON.stringify({ t: "add", id: p.id, rec: p.rec })).join("\n");
-  writeFileSync12(walFile(), body ? `${body}
-` : "", "utf8");
+  missing.sort((a, b) => PRIORITY_RANK[a.priority] - PRIORITY_RANK[b.priority] || b.presentOn.length - a.presentOn.length);
+  const advantages = target.sections.filter((s) => !compPresence.has(s.type));
+  return { missing, advantages, parity };
 }
-
-// src/scribe/supervisor.ts
-var draining = false;
-function uid(ts) {
-  return `${ts}-${Math.random().toString(36).slice(2, 9)}`;
+function generateActionItems(missing) {
+  return missing.map((g) => ({
+    title: `Add a ${g.label} section`,
+    priority: g.priority,
+    effort: PRIORITY_EFFORT[g.priority],
+    rationale: `${g.presentOn.length} of the compared page(s) have it; you don't. ${g.recommendation}`
+  }));
 }
-function drainBacklog() {
-  if (draining) return;
-  draining = true;
+function hostOf(url) {
   try {
-    let drained = 0;
-    for (const e of walPending()) {
-      try {
-        captureTurn(e.rec);
-        walCommit(e.id);
-        drained++;
-      } catch (err) {
-        recordFault("standby-replay", err);
-        break;
-      }
-    }
-    if (drained > 0) walCompact();
-  } finally {
-    draining = false;
+    return new URL(url).host.replace(/^www\./, "");
+  } catch {
+    return url;
   }
 }
-function supervisedCapture(rec) {
-  try {
-    drainBacklog();
-    const id = uid(rec.ts);
-    walAppend(id, rec);
-    try {
-      const res = captureTurn(rec);
-      walCommit(id);
-      recordHealth();
-      return res;
-    } catch (primaryErr) {
-      recordFault("primary", primaryErr);
-      try {
-        const res = captureTurn(rec);
-        walCommit(id);
-        recordHealth();
-        return res;
-      } catch (standbyErr) {
-        recordFault("standby", standbyErr);
-        return null;
-      }
-    }
-  } catch (fatal) {
-    recordFault("supervisor", fatal);
-    return null;
+function generateSummary(target, competitors, gaps) {
+  const okComps = competitors.filter((c) => c.ok);
+  const tName = hostOf(target.url);
+  if (!target.ok) return `Could not load ${tName} (${target.note}). Nothing to compare against yet.`;
+  if (okComps.length === 0) return `Loaded ${tName} (${target.sections.length} sections) but none of the comparison URLs could be loaded.`;
+  const crit = gaps.missing.filter((m) => m.priority === "CRITICAL").map((m) => m.label);
+  const high = gaps.missing.filter((m) => m.priority === "HIGH").map((m) => m.label);
+  const parts = [];
+  parts.push(`${tName} has ${target.sections.length} detectable sections; compared against ${okComps.length} page(s).`);
+  if (gaps.missing.length === 0) {
+    parts.push("No structural gaps found \u2014 you cover everything they do.");
+  } else {
+    parts.push(`${gaps.missing.length} gap(s) found.`);
+    if (crit.length) parts.push(`Critical: ${crit.join(", ")}.`);
+    if (high.length) parts.push(`High: ${high.join(", ")}.`);
   }
+  if (gaps.advantages.length) parts.push(`Your edge: ${gaps.advantages.map((a) => a.label).join(", ")}.`);
+  return parts.join(" ");
 }
-
-// src/scribe/retrieval.ts
-import { existsSync as existsSync8, readFileSync as readFileSync15, readdirSync } from "fs";
-function listDays() {
-  const dir = scribeDir();
-  if (!existsSync8(dir)) return [];
-  return readdirSync(dir).filter((f) => /^\d{4}-\d{2}-\d{2}\.md$/.test(f)).map((f) => f.replace(/\.md$/, "")).sort();
-}
-function readDay(date) {
-  const f = journalFile(date);
-  return existsSync8(f) ? readFileSync15(f, "utf8") : "";
+function normalizeUrl(u) {
+  const t = (u || "").trim();
+  if (!t) return t;
+  return /^https?:\/\//i.test(t) ? t : `https://${t}`;
 }
-function searchScribe(query, limit = 100) {
-  const q = query.toLowerCase().trim();
-  if (!q) return [];
-  const hits = [];
-  for (const date of listDays().reverse()) {
-    const lines = readDay(date).split("\n");
-    for (let i = 0; i < lines.length; i++) {
-      const ln = lines[i];
-      if (ln && ln.toLowerCase().includes(q)) {
-        hits.push({ date, line: i + 1, text: ln.trim().slice(0, 200) });
-        if (hits.length >= limit) return hits;
-      }
-    }
-  }
-  return hits;
+async function comparePages(opts) {
+  const targetUrl = normalizeUrl(opts.targetUrl);
+  const competitorUrls = (opts.competitorUrls ?? []).map(normalizeUrl).filter((u) => u.length > 0).slice(0, 30);
+  const [targetFetch, ...compFetches] = await Promise.all([
+    fetchPage(targetUrl),
+    ...competitorUrls.map((u) => fetchPage(u))
+  ]);
+  const target = extractStructure(targetUrl, targetFetch ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" });
+  const competitors = competitorUrls.map(
+    (u, i) => extractStructure(u, compFetches[i] ?? { html: "", ms: 0, status: 0, ok: false, error: "no fetch" })
+  );
+  const gaps = analyzeGaps(target, competitors);
+  return {
+    target,
+    competitors,
+    missing: gaps.missing,
+    advantages: gaps.advantages,
+    parity: gaps.parity,
+    actionItems: generateActionItems(gaps.missing),
+    summary: generateSummary(target, competitors, gaps)
+  };
 }
 
-// src/scribe/scribe-pi.ts
-function scribeTurn(input) {
-  if (!isScribeEnabled()) return;
-  const ts = (/* @__PURE__ */ new Date()).toISOString();
-  supervisedCapture({ ts, date: ts.slice(0, 10), ...input });
+// src/head/pi-tool.ts
+function summarizeForCoder(report) {
+  const lines = [report.summary];
+  const page = (p) => `  \u2022 ${p.url} \u2014 ${p.ok ? `${p.sections.length} sections: ${p.sections.map((s) => s.type).join(", ")}` : `not readable (${p.note})`}`;
+  lines.push("Pages seen:");
+  lines.push(page(report.target));
+  for (const c of report.competitors) if (c.url !== report.target.url) lines.push(page(c));
+  if (report.missing.length) {
+    lines.push("Missing on the target (gaps to build):");
+    for (const g of report.missing.slice(0, 12)) lines.push(`  \u2022 ${g.label} (${g.priority}) \u2014 ${g.recommendation}`);
+  }
+  if (report.actionItems.length) {
+    lines.push("Suggested action items:");
+    for (const a of report.actionItems.slice(0, 12)) lines.push(`  \u2192 ${a.title} [${a.priority}/${a.effort}] \u2014 ${a.rationale}`);
+  }
+  return lines.join("\n");
 }
-function registerScribe(pi) {
+var InspectSiteParams = Type2.Object({
+  url: Type2.String({ description: "The target website URL to inspect or rebuild from." }),
+  competitors: Type2.Optional(
+    Type2.Array(Type2.String(), { description: "Optional competitor/reference URLs to compare the target against." })
+  )
+});
+function registerHead(pi) {
   pi.registerTool({
-    name: "scribe_recall",
-    label: "ORIRO Scribe",
-    description: "Recall the user's past work from the on-device journal: search by keyword, or read a specific day (YYYY-MM-DD). Use to recover decisions, code, files, and context from earlier sessions.",
-    parameters: Type2.Object({
-      query: Type2.Optional(Type2.String({ description: "Keyword/topic to search across all journals." })),
-      day: Type2.Optional(Type2.String({ description: "A specific day YYYY-MM-DD to read in full." }))
-    }),
-    async execute(_id, params) {
-      let text;
-      const details = {};
-      if (!isScribeEnabled()) {
-        text = "Scribe is off (the user has not enabled it).";
-      } else if (params.day) {
-        text = readDay(params.day) || `No journal for ${params.day}. Days: ${listDays().join(", ") || "none"}`;
-        details.day = params.day;
-      } else {
-        const hits = params.query ? searchScribe(params.query) : [];
-        details.hits = hits;
-        text = hits.length ? hits.map((h) => `${h.date}:${h.line}  ${h.text}`).join("\n") : `No matches${params.query ? ` for "${params.query}"` : ""}. Days recorded: ${listDays().join(", ") || "none"}`;
-      }
-      return { content: [{ type: "text", text }], details };
-    }
-  });
-}
-function attachScribe(session) {
-  let user = "";
-  let assistant = "";
-  const tools = /* @__PURE__ */ new Set();
-  session.subscribe((e) => {
-    if (!isScribeEnabled()) return;
-    if (e?.type === "user_message" || e?.type === "session_user_message") user = String(e.text ?? e.message ?? user);
-    if (e?.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") assistant += e.assistantMessageEvent.delta ?? "";
-    if ((e?.type === "tool_call" || e?.type === "tool_execution_start") && e.toolName) tools.add(String(e.toolName));
-    if (e?.type === "agent_end") {
-      scribeTurn({ user: user || void 0, router: "oriro-free", tools: [...tools], note: assistant.slice(0, 4e3) || void 0 });
-      user = "";
-      assistant = "";
-      tools.clear();
+    name: "inspect_site",
+    label: "ORIRO Head",
+    description: "Go out to a live website and SEE it: its sections, CTAs, structure, and any gaps versus competitor URLs. Returns a structured report to build from. Call this whenever the user wants to look at, compare against, or rebuild a website/page.",
+    parameters: InspectSiteParams,
+    async execute(_toolCallId, params) {
+      const target = params.url;
+      const competitors = params.competitors?.length ? params.competitors : [target];
+      const report = await comparePages({ targetUrl: target, competitorUrls: competitors });
+      return { content: [{ type: "text", text: summarizeForCoder(report) }], details: report };
     }
   });
 }
@@ -2824,6 +3026,28 @@ function setupNllbTranslator(opts) {
   return instance;
 }
 
+// src/language/gateway.ts
+var isEnglish2 = (code) => !code || code.toLowerCase().startsWith("en");
+var isCommand = (text) => text.trimStart().startsWith("/");
+async function ensureReady() {
+  try {
+    await setupNllbTranslator().load();
+  } catch {
+  }
+}
+async function translateIncoming(message) {
+  const lang = getTerminalLanguage().code;
+  if (isEnglish2(lang) || !message.trim() || isCommand(message)) return message;
+  await ensureReady();
+  return translateForCoder(message, lang);
+}
+async function translateOutgoing(text) {
+  const lang = getTerminalLanguage().code;
+  if (isEnglish2(lang) || !text.trim()) return text;
+  await ensureReady();
+  return translateForUser(text, lang);
+}
+
 // src/repl.ts
 function replHelp() {
   return `
@@ -2838,12 +3062,26 @@ function replHelp() {
 }
 async function runRepl() {
   if (isFirstRun()) await runOnboarding();
-  else stdout4.write(banner());
-  const lang = getTerminalLanguage().code;
-  const isEnglish2 = lang.toLowerCase().startsWith("en");
-  if (!isEnglish2) setupNllbTranslator();
+  else stdout5.write(banner());
+  const isEnglish3 = getTerminalLanguage().code.toLowerCase().startsWith("en");
   const { session } = await assembleOriroSession();
-  const rl = createInterface4({ input: stdin4, output: stdout4 });
+  const rl = createInterface4({ input: stdin4, output: stdout5 });
+  let closing = false;
+  const onSigint = () => {
+    if (closing) return;
+    closing = true;
+    stdout5.write(dim("\nBye.\n"));
+    try {
+      rl.close();
+    } catch {
+    }
+    try {
+      session.dispose();
+    } catch {
+    }
+    process.exit(0);
+  };
+  process.on("SIGINT", onSigint);
   try {
     for (; ; ) {
       let line;
@@ -2853,18 +3091,20 @@ async function runRepl() {
         break;
       }
       if (!line) continue;
-      if (line === "/exit" || line === "/quit") break;
-      if (line === "/help" || line === "/?") {
-        stdout4.write(replHelp());
+      const slash = line.toLowerCase();
+      if (slash === "/exit" || slash === "/quit") break;
+      if (slash === "/help" || slash === "/?") {
+        stdout5.write(replHelp());
         continue;
       }
-      const english = await translateForCoder(line, lang);
+      const english = await translateIncoming(line);
+      noteUserInput(line);
       let out = "";
       const unsub = session.subscribe((e) => {
         if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") {
           const d = e.assistantMessageEvent.delta ?? "";
           out += d;
-          if (isEnglish2) stdout4.write(d);
+          if (isEnglish3) stdout5.write(d);
         }
       });
       try {
@@ -2872,15 +3112,18 @@ async function runRepl() {
       } finally {
         unsub();
       }
-      if (isEnglish2) stdout4.write("\n\n");
-      else stdout4.write(`${await translateForUser(out.trim(), lang)}
+      if (isEnglish3) stdout5.write("\n\n");
+      else stdout5.write(`${await translateOutgoing(out.trim())}
 
 `);
     }
   } finally {
-    rl.close();
-    session.dispose();
-    stdout4.write(dim("\nBye.\n"));
+    process.removeListener("SIGINT", onSigint);
+    if (!closing) {
+      rl.close();
+      session.dispose();
+      stdout5.write(dim("\nBye.\n"));
+    }
   }
 }
 
@@ -3247,9 +3490,12 @@ var heading = (s) => {
 ${bold(accent(s))}
 `);
 };
+var DieError = class extends Error {
+};
 function die(msg) {
   fail(msg);
-  process.exit(1);
+  process.exitCode = 1;
+  throw new DieError(msg);
 }
 
 // src/commands/routers.ts
@@ -3278,11 +3524,12 @@ function registerRoutersCommand(program2) {
     ok(`added ${accent(slug)} (${res.validation.latencyMs}ms, model ${res.validation.model}) \u2192 active pool`);
   });
   routers.command("use <slugs...>").description("set the active router pool (ids must be added first)").action((slugs) => {
-    useRouters(slugs);
-    const pool = resolvePool();
-    const missing = slugs.filter((s) => !pool.some((p) => p.id === s));
-    ok(`pool set: ${pool.map((p) => p.id).join(", ") || "(empty)"}`);
-    if (missing.length) info(`not yet added (run \`oriro routers add\`): ${missing.join(", ")}`);
+    const { applied, unknown } = useRouters(slugs);
+    if (!applied.length) {
+      die(`none of those are added yet: ${unknown.join(", ")} \u2014 run \`oriro routers add <slug>\` first`);
+    }
+    ok(`pool set: ${applied.join(", ")}`);
+    if (unknown.length) info(`skipped (not added yet \u2014 run \`oriro routers add\`): ${unknown.join(", ")}`);
   });
 }
 
@@ -4314,6 +4561,9 @@ function listConnectors(category) {
 function connectorCategories() {
   return [...new Set(CONNECTOR_CATALOG.map((c) => c.category))].sort();
 }
+function isConnectorAdded(slug) {
+  return readAdded().includes(slug);
+}
 function addConnector(slug) {
   const entry = connectorBySlug(slug);
   if (!entry) return { ok: false, error: `unknown connector '${slug}' \u2014 run \`oriro connectors list\`` };
@@ -4338,23 +4588,30 @@ function registerConnectorsCommand(program2) {
   const connectors = program2.command("connectors").description("MCP connectors \u2014 add external tools/services (inert until used)");
   connectors.command("list [category]").description("list the connector catalog (optionally filtered by category)").action((category) => {
     if (category && !connectorCategories().includes(category)) {
-      info(`unknown category '${category}' \u2014 categories: ${connectorCategories().join(", ")}`);
-      return;
+      die(`unknown category '${category}' \u2014 categories: ${connectorCategories().join(", ")}`);
     }
     const entries = listConnectors(category);
     const added = new Set(addedConnectors().map((c) => c.slug));
     heading(category ? `Connectors \xB7 ${category}` : "Connectors");
+    let addable = 0;
     for (const c of entries) {
-      const mark = added.has(c.slug) ? accent("\u25CF") : dim("\u25CB");
-      process.stdout.write(`  ${mark} ${accent(c.slug.padEnd(20))} ${c.name.padEnd(22)} ${dim(c.category)}
+      const canAdd = !!c.mcpUrl;
+      if (canAdd) addable++;
+      const mark = !canAdd ? dim("\xB7") : added.has(c.slug) ? accent("\u25CF") : dim("\u25CB");
+      const name = canAdd ? c.name.padEnd(22) : dim(`${c.name} (coming soon)`.padEnd(22));
+      process.stdout.write(`  ${mark} ${(canAdd ? accent : dim)(c.slug.padEnd(20))} ${name} ${dim(c.category)}
 `);
     }
-    info(`${entries.length} connectors${category ? ` in '${category}'` : ""} \xB7 ${added.size} added`);
+    info(`${addable} addable${category ? ` in '${category}'` : ""} \xB7 ${added.size} added \xB7 ${entries.length - addable} coming soon`);
   });
   connectors.command("add <slug>").description("add a connector (validate + record; connects only when used)").action((slug) => {
+    if (isConnectorAdded(slug)) {
+      info(`${slug} is already added`);
+      return;
+    }
     const res = addConnector(slug);
     if (!res.ok) die(res.error ?? `could not add '${slug}'`);
-    ok(`added ${accent(slug)} \u2014 inert until a session uses it`);
+    ok(`added ${accent(slug)} \u2014 recorded locally`);
   });
   connectors.command("remove <slug>").description("remove a connector").action((slug) => {
     if (removeConnector(slug)) ok(`removed ${accent(slug)}`);
@@ -4411,6 +4668,7 @@ var OriroChannelHost = class {
         if (e.type === "message_update" && e.assistantMessageEvent?.type === "text_delta") out += e.assistantMessageEvent.delta ?? "";
       });
       try {
+        noteUserInput(text);
         await session.prompt(text);
       } finally {
         unsub();
@@ -4591,7 +4849,7 @@ function registerChannelsCommand(program2) {
     if (!isKind(kind)) die(`unknown channel '${kind}' \u2014 one of: ${KINDS.join(", ")}`);
     if (kind === "whatsapp") {
       if (!opts.acceptRisk) {
-        fail("WhatsApp uses Baileys, which pairs a REAL WhatsApp account and may violate WhatsApp's ToS (ban risk).");
+        info("WhatsApp uses Baileys, which pairs a REAL WhatsApp account and may violate WhatsApp's ToS (ban risk).");
         info("If you accept that risk, re-run: `oriro channels start whatsapp --accept-risk`");
         return;
       }
@@ -4709,7 +4967,12 @@ var version = createRequire(import.meta.url)("../package.json").version;
 var program = new Command();
 program.name("oriro").description("ORIRO \u2014 a free, on-device-friendly terminal AI agent.").version(version, "-v, --version").action(async (_options, command) => {
   if (command.args.length > 0) {
-    process.stderr.write(`error: unknown command '${command.args[0]}'
+    const arg = command.args[0];
+    if (arg === "help") {
+      command.outputHelp();
+      return;
+    }
+    process.stderr.write(`error: unknown command '${arg}'
 Run 'oriro --help' to see available commands.
 `);
     process.exitCode = 1;
@@ -4725,6 +4988,7 @@ registerSkillsCommand(program);
 registerLanguageCommand(program);
 registerAvatarCommand(program);
 program.parseAsync().catch((e) => {
+  if (e instanceof DieError) return;
   process.stderr.write(`
 ORIRO error: ${e instanceof Error ? e.stack ?? e.message : String(e)}
 `);