@rigstate/cli 0.6.3 → 0.6.7

package/dist/index.cjs

@@ -41,6 +41,17 @@ var init_cjs_shims = __esm({
 });
 
 // src/utils/config.ts
+var config_exports = {};
+__export(config_exports, {
+  clearConfig: () => clearConfig,
+  config: () => config,
+  getApiKey: () => getApiKey,
+  getApiUrl: () => getApiUrl,
+  getProjectId: () => getProjectId,
+  setApiKey: () => setApiKey,
+  setApiUrl: () => setApiUrl,
+  setProjectId: () => setProjectId
+});
 function getApiKey() {
   const apiKey = config.get("apiKey");
   if (!apiKey) {
@@ -69,6 +80,12 @@ function getApiUrl() {
   }
   return "https://app.rigstate.com";
 }
+function setApiUrl(url) {
+  config.set("apiUrl", url);
+}
+function clearConfig() {
+  config.clear();
+}
 var import_conf, config;
 var init_config = __esm({
   "src/utils/config.ts"() {
@@ -84,6 +101,362 @@ var init_config = __esm({
   }
 });
 
+// src/commands/env.ts
+var env_exports = {};
+__export(env_exports, {
+  createEnvPullCommand: () => createEnvPullCommand,
+  syncEnv: () => syncEnv
+});
+async function syncEnv(projectId, apiKey, apiUrl, silent = false) {
+  if (!silent) {
+    console.log("");
+    console.log(import_chalk2.default.bold.yellow("\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
+    console.log(import_chalk2.default.bold.yellow("\u2551") + import_chalk2.default.bold.white("  \u{1F6E1}\uFE0F  RIGSTATE SOVEREIGN VAULT SYNC  \u{1F6E1}\uFE0F   ") + import_chalk2.default.bold.yellow("\u2551"));
+    console.log(import_chalk2.default.bold.yellow("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D"));
+    console.log("");
+  }
+  const spinner = (0, import_ora.default)("Fetching secrets from Vault...").start();
+  try {
+    const response = await import_axios.default.post(`${apiUrl}/api/v1/vault/sync`, {
+      project_id: projectId
+    }, {
+      headers: { Authorization: `Bearer ${apiKey}` }
+    });
+    if (!response.data.success) {
+      throw new Error(response.data.error || "Failed to fetch secrets");
+    }
+    const vaultContent = response.data.data.content || "";
+    const secretCount = response.data.data.count || 0;
+    if (secretCount === 0) {
+      spinner.info("No secrets found in Vault for this project.");
+      if (!silent) console.log(import_chalk2.default.dim("  Add secrets via the Rigstate web interface."));
+      return true;
+    }
+    spinner.succeed(`Retrieved ${import_chalk2.default.bold(secretCount)} secret(s)`);
+    const envFile = import_path.default.resolve(process.cwd(), ".env.local");
+    let existingContent = "";
+    let existingKeys = /* @__PURE__ */ new Set();
+    try {
+      existingContent = await import_promises.default.readFile(envFile, "utf-8");
+      existingContent.split("\n").forEach((line) => {
+        const match = line.match(/^([A-Z_][A-Z0-9_]*)=/);
+        if (match) existingKeys.add(match[1]);
+      });
+    } catch (e) {
+    }
+    const vaultKeys = /* @__PURE__ */ new Set();
+    vaultContent.split("\n").forEach((line) => {
+      const match = line.match(/^([A-Z_][A-Z0-9_]*)=/);
+      if (match) vaultKeys.add(match[1]);
+    });
+    let newCount = 0;
+    let updatedCount = 0;
+    vaultKeys.forEach((key) => {
+      if (!existingKeys.has(key)) {
+        newCount++;
+      } else {
+        updatedCount++;
+      }
+    });
+    const unchangedCount = existingKeys.size - updatedCount;
+    spinner.start("Writing .env.local...");
+    const header = [
+      "# ==========================================",
+      "# RIGSTATE SOVEREIGN FOUNDATION",
+      "# Authenticated Environment Configuration",
+      `# Synced at: ${(/* @__PURE__ */ new Date()).toISOString()}`,
+      `# Project: ${projectId}`,
+      "# ==========================================",
+      ""
+    ].join("\n");
+    await import_promises.default.writeFile(envFile, header + vaultContent + "\n");
+    spinner.succeed("Written to .env.local");
+    if (!silent) {
+      console.log("");
+      console.log(import_chalk2.default.bold.green("\u2705 Environment synchronized successfully"));
+      console.log("");
+      console.log(import_chalk2.default.dim("   Summary:"));
+      console.log(import_chalk2.default.green(`   + ${newCount} new`));
+      console.log(import_chalk2.default.yellow(`   ~ ${updatedCount} updated`));
+      console.log(import_chalk2.default.dim(`   = ${unchangedCount} unchanged`));
+      console.log("");
+      console.log(import_chalk2.default.bold.yellow("\u26A0\uFE0F  Security Reminder:"));
+      console.log(import_chalk2.default.dim("   - Never commit .env.local to version control."));
+      console.log(import_chalk2.default.dim("   - Ensure .gitignore includes .env.local"));
+      console.log("");
+    }
+    return true;
+  } catch (e) {
+    spinner.fail(import_chalk2.default.red(`Failed to fetch secrets: ${e.message}`));
+    return false;
+  }
+}
+function createEnvPullCommand() {
+  const envPull = new import_commander2.Command("env");
+  envPull.command("pull").description("Pull environment variables from project vault").action(async () => {
+    let apiKey;
+    let projectId;
+    try {
+      apiKey = getApiKey();
+    } catch (e) {
+      console.error(import_chalk2.default.red('Not authenticated. Run "rigstate login" first.'));
+      return;
+    }
+    projectId = getProjectId();
+    if (!projectId) {
+      try {
+        const manifestPath = import_path.default.join(process.cwd(), ".rigstate");
+        const content = await import_promises.default.readFile(manifestPath, "utf-8");
+        const manifest = JSON.parse(content);
+        projectId = manifest.project_id;
+      } catch (e) {
+      }
+    }
+    if (!projectId) {
+      console.error(import_chalk2.default.red('No project context. Run "rigstate link" first.'));
+      return;
+    }
+    const apiUrl = getApiUrl();
+    await syncEnv(projectId, apiKey, apiUrl);
+  });
+  return envPull;
+}
+var import_commander2, import_chalk2, import_ora, import_promises, import_path, import_axios;
+var init_env = __esm({
+  "src/commands/env.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_commander2 = require("commander");
+    import_chalk2 = __toESM(require("chalk"), 1);
+    import_ora = __toESM(require("ora"), 1);
+    import_promises = __toESM(require("fs/promises"), 1);
+    import_path = __toESM(require("path"), 1);
+    init_config();
+    import_axios = __toESM(require("axios"), 1);
+  }
+});
+
+// src/commands/sync-rules.ts
+var sync_rules_exports = {};
+__export(sync_rules_exports, {
+  createSyncRulesCommand: () => createSyncRulesCommand,
+  syncProjectRules: () => syncProjectRules
+});
+async function syncProjectRules(projectId, apiKey, apiUrl, dryRun = false) {
+  const spinner = (0, import_ora2.default)("\u{1F6E1}\uFE0F Frank Protocol: Initializing retroactive sync...").start();
+  let success = true;
+  try {
+    spinner.text = "Fetching project info...";
+    const projectRes = await import_axios2.default.get(`${apiUrl}/api/v1/projects`, {
+      params: { project_id: projectId },
+      headers: { Authorization: `Bearer ${apiKey}` }
+    });
+    if (!projectRes.data.success || !projectRes.data.data.projects?.length) {
+      throw new Error("Project not found");
+    }
+    const project = projectRes.data.data.projects[0];
+    spinner.text = `Syncing rules for ${project.name}...`;
+    if (dryRun) {
+      spinner.succeed(import_chalk3.default.yellow(`  [DRY-RUN] Would sync: ${project.name}`));
+      return true;
+    }
+    const syncResponse = await import_axios2.default.post(`${apiUrl}/api/v1/rules/sync`, {
+      project_id: project.id
+    }, {
+      headers: { Authorization: `Bearer ${apiKey}` }
+    });
+    if (syncResponse.data.success) {
+      if (syncResponse.data.data.github_synced) {
+        spinner.succeed(import_chalk3.default.green(`  \u2705 ${project.name} [${project.id}] \u2192 GitHub synced`));
+      } else {
+        spinner.info(import_chalk3.default.blue(`  \u2139\uFE0F ${project.name} [${project.id}] \u2192 Rules generated (no GitHub)`));
+      }
+      const files = syncResponse.data.data.files;
+      if (files && Array.isArray(files)) {
+        const fs23 = await import("fs/promises");
+        const path23 = await import("path");
+        for (const file of files) {
+          const filePath = path23.join(process.cwd(), file.path);
+          await fs23.mkdir(path23.dirname(filePath), { recursive: true });
+          await fs23.writeFile(filePath, file.content, "utf-8");
+        }
+        console.log(import_chalk3.default.dim(`      \u{1F4BE} Wrote ${files.length} rule files to local .cursor/rules/`));
+      }
+      console.log("");
+      console.log(import_chalk3.default.cyan("\u{1F6E1}\uFE0F Frank Protocol v1.0 has been injected into the rules engine."));
+      console.log(import_chalk3.default.dim("   All new chats will now boot with mandatory governance checks."));
+    } else {
+      spinner.warn(import_chalk3.default.yellow(`  \u26A0\uFE0F ${project.name} \u2192 ${syncResponse.data.error || "Unknown error"}`));
+      success = false;
+    }
+  } catch (e) {
+    spinner.fail(import_chalk3.default.red(`Sync failed: ${e.message}`));
+    success = false;
+  }
+  return success;
+}
+function createSyncRulesCommand() {
+  const syncRules = new import_commander3.Command("sync-rules");
+  syncRules.description("\u{1F6E1}\uFE0F Push Frank Protocol v1.0 to all existing projects").option("--dry-run", "Preview changes without pushing to GitHub").option("--project <id>", "Sync a specific project only").action(async (options) => {
+    let apiKey;
+    try {
+      apiKey = getApiKey();
+    } catch (e) {
+      console.error(import_chalk3.default.red('Not authenticated. Run "rigstate login" first.'));
+      return;
+    }
+    const apiUrl = getApiUrl();
+    if (options.project) {
+      await syncProjectRules(options.project, apiKey, apiUrl, options.dryRun);
+    } else {
+      console.log(import_chalk3.default.yellow("Use --project <id> for now. (Mass sync logic awaiting migration)"));
+    }
+  });
+  return syncRules;
+}
+var import_commander3, import_chalk3, import_ora2, import_axios2;
+var init_sync_rules = __esm({
+  "src/commands/sync-rules.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_commander3 = require("commander");
+    import_chalk3 = __toESM(require("chalk"), 1);
+    import_ora2 = __toESM(require("ora"), 1);
+    init_config();
+    import_axios2 = __toESM(require("axios"), 1);
+  }
+});
+
+// src/commands/hooks.ts
+var hooks_exports = {};
+__export(hooks_exports, {
+  createHooksCommand: () => createHooksCommand
+});
+function createHooksCommand() {
+  const hooks = new import_commander4.Command("hooks").description("Manage git hooks for Guardian integration");
+  hooks.command("install").description("Install pre-commit hook to run Guardian checks").option("--strict [level]", 'Strict level: "all" or "critical" (default)', "critical").action(async (options) => {
+    try {
+      const gitDir = import_path2.default.join(process.cwd(), ".git");
+      try {
+        await import_promises2.default.access(gitDir);
+      } catch {
+        console.log(import_chalk4.default.red("\u274C Not a git repository."));
+        console.log(import_chalk4.default.dim('   Initialize with "git init" first.'));
+        process.exit(1);
+      }
+      const hooksDir = import_path2.default.join(gitDir, "hooks");
+      await import_promises2.default.mkdir(hooksDir, { recursive: true });
+      const preCommitPath = import_path2.default.join(hooksDir, "pre-commit");
+      let existingContent = "";
+      try {
+        existingContent = await import_promises2.default.readFile(preCommitPath, "utf-8");
+        if (existingContent.includes("rigstate")) {
+          console.log(import_chalk4.default.yellow("\u26A0 Rigstate pre-commit hook already installed."));
+          console.log(import_chalk4.default.dim('   Use "rigstate hooks uninstall" to remove first.'));
+          return;
+        }
+      } catch {
+      }
+      let script = PRE_COMMIT_SCRIPT;
+      if (options.strict === "all") {
+        script = script.replace("--strict=critical", "--strict");
+      }
+      if (existingContent && !existingContent.includes("rigstate")) {
+        const combinedScript = existingContent + "\n\n" + script.replace("#!/bin/sh\n", "");
+        await import_promises2.default.writeFile(preCommitPath, combinedScript, { mode: 493 });
+        console.log(import_chalk4.default.green("\u2705 Rigstate hook appended to existing pre-commit."));
+      } else {
+        await import_promises2.default.writeFile(preCommitPath, script, { mode: 493 });
+        console.log(import_chalk4.default.green("\u2705 Pre-commit hook installed!"));
+      }
+      console.log(import_chalk4.default.dim(`   Path: ${preCommitPath}`));
+      console.log(import_chalk4.default.dim(`   Strict level: ${options.strict}`));
+      console.log("");
+      console.log(import_chalk4.default.cyan("Guardian will now check your code before each commit."));
+      console.log(import_chalk4.default.dim('Use "rigstate hooks uninstall" to remove the hook.'));
+    } catch (error) {
+      console.error(import_chalk4.default.red("Failed to install hook:"), error.message);
+      process.exit(1);
+    }
+  });
+  hooks.command("uninstall").description("Remove Rigstate pre-commit hook").action(async () => {
+    try {
+      const preCommitPath = import_path2.default.join(process.cwd(), ".git", "hooks", "pre-commit");
+      try {
+        const content = await import_promises2.default.readFile(preCommitPath, "utf-8");
+        if (!content.includes("rigstate")) {
+          console.log(import_chalk4.default.yellow("\u26A0 No Rigstate hook found in pre-commit."));
+          return;
+        }
+        if (content.includes("# Rigstate Guardian Pre-commit Hook") && content.trim().split("\n").filter((l) => l && !l.startsWith("#")).length <= 4) {
+          await import_promises2.default.unlink(preCommitPath);
+          console.log(import_chalk4.default.green("\u2705 Pre-commit hook removed."));
+        } else {
+          const lines = content.split("\n");
+          const filteredLines = [];
+          let inRigstateSection = false;
+          for (const line of lines) {
+            if (line.includes("Rigstate Guardian Pre-commit Hook")) {
+              inRigstateSection = true;
+              continue;
+            }
+            if (inRigstateSection && line.includes("exit $?")) {
+              inRigstateSection = false;
+              continue;
+            }
+            if (!inRigstateSection && !line.includes("rigstate check")) {
+              filteredLines.push(line);
+            }
+          }
+          await import_promises2.default.writeFile(preCommitPath, filteredLines.join("\n"), { mode: 493 });
+          console.log(import_chalk4.default.green("\u2705 Rigstate section removed from pre-commit hook."));
+        }
+      } catch {
+        console.log(import_chalk4.default.yellow("\u26A0 No pre-commit hook found."));
+      }
+    } catch (error) {
+      console.error(import_chalk4.default.red("Failed to uninstall hook:"), error.message);
+      process.exit(1);
+    }
+  });
+  return hooks;
+}
+var import_commander4, import_chalk4, import_promises2, import_path2, PRE_COMMIT_SCRIPT;
+var init_hooks = __esm({
+  "src/commands/hooks.ts"() {
+    "use strict";
+    init_cjs_shims();
+    import_commander4 = require("commander");
+    import_chalk4 = __toESM(require("chalk"), 1);
+    import_promises2 = __toESM(require("fs/promises"), 1);
+    import_path2 = __toESM(require("path"), 1);
+    PRE_COMMIT_SCRIPT = `#!/bin/sh
+# Rigstate Guardian Pre-commit Hook
+# Installed by: rigstate hooks install
+
+# 1. Silent Sentinel Check (Phase 5)
+if [ -f .rigstate/guardian.lock ]; then
+    echo "\u{1F6D1} INTERVENTION ACTIVE: Commit blocked by Silent Sentinel."
+    echo "   A critical violation ('HARD_LOCK') was detected by the Guardian Daemon."
+    echo "   Please fix the violation to unlock the repo."
+    echo ""
+    if grep -q "HARD_LOCK_ACTIVE" .rigstate/guardian.lock; then
+        cat .rigstate/guardian.lock
+    fi
+    exit 1
+fi
+
+echo "\u{1F6E1}\uFE0F  Running Guardian checks..."
+
+# Run check with strict mode for critical violations
+rigstate check --staged --strict=critical
+
+# Exit with the same code as rigstate check
+exit $?
+`;
+  }
+});
+
 // src/utils/skills-provisioner.ts
 var skills_provisioner_exports = {};
 __export(skills_provisioner_exports, {
@@ -94,7 +467,7 @@ __export(skills_provisioner_exports, {
 async function provisionSkills(apiUrl, apiKey, projectId, rootDir) {
   const skills = [];
   try {
-    const response = await import_axios3.default.get(`${apiUrl}/api/v1/skills`, {
+    const response = await import_axios5.default.get(`${apiUrl}/api/v1/skills`, {
       params: { project_id: projectId },
       headers: { Authorization: `Bearer ${apiKey}` }
     });
@@ -112,18 +485,18 @@ async function provisionSkills(apiUrl, apiKey, projectId, rootDir) {
     }
   } catch (e) {
     const msg = e.response?.data?.error || e.message;
-    console.log(import_chalk5.default.dim(`  (Skills API not available: ${msg}, using core library)`));
+    console.log(import_chalk8.default.dim(`  (Skills API not available: ${msg}, using core library)`));
   }
   if (skills.length === 0) {
     const { getRigstateStandardSkills } = await import("@rigstate/rules-engine");
     const coreSkills = getRigstateStandardSkills();
     skills.push(...coreSkills);
   }
-  const skillsDir = import_path5.default.join(rootDir, ".agent", "skills");
-  await import_promises5.default.mkdir(skillsDir, { recursive: true });
+  const skillsDir = import_path7.default.join(rootDir, ".agent", "skills");
+  await import_promises7.default.mkdir(skillsDir, { recursive: true });
   for (const skill of skills) {
-    const skillDir = import_path5.default.join(skillsDir, skill.name);
-    await import_promises5.default.mkdir(skillDir, { recursive: true });
+    const skillDir = import_path7.default.join(skillsDir, skill.name);
+    await import_promises7.default.mkdir(skillDir, { recursive: true });
     const skillContent = `---
 name: ${skill.name}
 description: ${skill.description}
@@ -136,10 +509,10 @@ ${skill.content}
 
 ---
 *Provisioned by Rigstate CLI. Do not modify manually.*`;
-    const skillPath = import_path5.default.join(skillDir, "SKILL.md");
-    await import_promises5.default.writeFile(skillPath, skillContent, "utf-8");
+    const skillPath = import_path7.default.join(skillDir, "SKILL.md");
+    await import_promises7.default.writeFile(skillPath, skillContent, "utf-8");
   }
-  console.log(import_chalk5.default.green(`  \u2705 Provisioned ${skills.length} skill(s) to .agent/skills/`));
+  console.log(import_chalk8.default.green(`  \u2705 Provisioned ${skills.length} skill(s) to .agent/skills/`));
   return skills;
 }
 function generateSkillsDiscoveryBlock(skills) {
@@ -154,16 +527,16 @@ ${skillBlocks}
 </available_skills>`;
 }
 async function jitProvisionSkill(skillId, apiUrl, apiKey, projectId, rootDir) {
-  const rulesPath = import_path5.default.join(rootDir, ".cursorrules");
+  const rulesPath = import_path7.default.join(rootDir, ".cursorrules");
   let rulesContent = "";
   try {
-    rulesContent = await import_promises5.default.readFile(rulesPath, "utf-8");
+    rulesContent = await import_promises7.default.readFile(rulesPath, "utf-8");
   } catch (e) {
     return false;
   }
   const isProvisioned = rulesContent.includes(`<name>${skillId}</name>`) || rulesContent.includes(`.agent/skills/${skillId}`);
   if (isProvisioned) return false;
-  console.log(import_chalk5.default.yellow(`  \u26A1 JIT PROVISIONING: Injecting ${skillId}...`));
+  console.log(import_chalk8.default.yellow(`  \u26A1 JIT PROVISIONING: Injecting ${skillId}...`));
   try {
     const skills = await provisionSkills(apiUrl, apiKey, projectId, rootDir);
     const skillsBlock = generateSkillsDiscoveryBlock(skills);
@@ -178,22 +551,22 @@ async function jitProvisionSkill(skillId, apiUrl, apiKey, projectId, rootDir) {
         rulesContent = rulesContent.slice(0, insertPoint + 3) + "\n\n" + skillsBlock + "\n" + rulesContent.slice(insertPoint + 3);
       }
     }
-    await import_promises5.default.writeFile(rulesPath, rulesContent, "utf-8");
+    await import_promises7.default.writeFile(rulesPath, rulesContent, "utf-8");
     return true;
   } catch (e) {
-    console.log(import_chalk5.default.red(`  Failed to provision skill: ${e.message}`));
+    console.log(import_chalk8.default.red(`  Failed to provision skill: ${e.message}`));
     return false;
   }
 }
-var import_axios3, import_promises5, import_path5, import_chalk5;
+var import_axios5, import_promises7, import_path7, import_chalk8;
 var init_skills_provisioner = __esm({
   "src/utils/skills-provisioner.ts"() {
     "use strict";
     init_cjs_shims();
-    import_axios3 = __toESM(require("axios"), 1);
-    import_promises5 = __toESM(require("fs/promises"), 1);
-    import_path5 = __toESM(require("path"), 1);
-    import_chalk5 = __toESM(require("chalk"), 1);
+    import_axios5 = __toESM(require("axios"), 1);
+    import_promises7 = __toESM(require("fs/promises"), 1);
+    import_path7 = __toESM(require("path"), 1);
+    import_chalk8 = __toESM(require("chalk"), 1);
   }
 });
 
@@ -209,8 +582,8 @@ __export(governance_exports, {
 });
 async function getGovernanceConfig(rootDir = process.cwd()) {
   try {
-    const configPath = import_path6.default.join(rootDir, "rigstate.config.json");
-    const content = await import_promises6.default.readFile(configPath, "utf-8");
+    const configPath = import_path8.default.join(rootDir, "rigstate.config.json");
+    const content = await import_promises8.default.readFile(configPath, "utf-8");
     const userConfig = JSON.parse(content);
     return {
       governance: {
@@ -224,50 +597,50 @@ async function getGovernanceConfig(rootDir = process.cwd()) {
 }
 async function getSessionState(rootDir = process.cwd()) {
   try {
-    const sessionPath = import_path6.default.join(rootDir, ".rigstate", "session.json");
-    const content = await import_promises6.default.readFile(sessionPath, "utf-8");
+    const sessionPath = import_path8.default.join(rootDir, ".rigstate", "session.json");
+    const content = await import_promises8.default.readFile(sessionPath, "utf-8");
     return JSON.parse(content);
   } catch (e) {
     return DEFAULT_SESSION;
   }
 }
 async function setSoftLock(reason, violationId, rootDir = process.cwd()) {
-  const sessionPath = import_path6.default.join(rootDir, ".rigstate", "session.json");
+  const sessionPath = import_path8.default.join(rootDir, ".rigstate", "session.json");
   const state = {
     status: "SOFT_LOCK",
     active_violation: violationId,
     lock_reason: reason,
     last_updated: (/* @__PURE__ */ new Date()).toISOString()
   };
-  await import_promises6.default.mkdir(import_path6.default.dirname(sessionPath), { recursive: true });
-  await import_promises6.default.writeFile(sessionPath, JSON.stringify(state, null, 2), "utf-8");
+  await import_promises8.default.mkdir(import_path8.default.dirname(sessionPath), { recursive: true });
+  await import_promises8.default.writeFile(sessionPath, JSON.stringify(state, null, 2), "utf-8");
 }
 async function clearSoftLock(rootDir = process.cwd()) {
-  const sessionPath = import_path6.default.join(rootDir, ".rigstate", "session.json");
+  const sessionPath = import_path8.default.join(rootDir, ".rigstate", "session.json");
   const state = {
     ...DEFAULT_SESSION,
     last_updated: (/* @__PURE__ */ new Date()).toISOString()
   };
-  await import_promises6.default.mkdir(import_path6.default.dirname(sessionPath), { recursive: true });
-  await import_promises6.default.writeFile(sessionPath, JSON.stringify(state, null, 2), "utf-8");
+  await import_promises8.default.mkdir(import_path8.default.dirname(sessionPath), { recursive: true });
+  await import_promises8.default.writeFile(sessionPath, JSON.stringify(state, null, 2), "utf-8");
 }
 async function performOverride(violationId, reason, rootDir = process.cwd()) {
   const config2 = await getGovernanceConfig(rootDir);
   if (!config2.governance.allow_overrides) {
-    console.log(import_chalk6.default.red("\u274C Overrides are disabled for this project."));
+    console.log(import_chalk9.default.red("\u274C Overrides are disabled for this project."));
     return false;
   }
   await clearSoftLock(rootDir);
   return true;
 }
-var import_promises6, import_path6, import_chalk6, InterventionLevel, DEFAULT_CONFIG, DEFAULT_SESSION;
+var import_promises8, import_path8, import_chalk9, InterventionLevel, DEFAULT_CONFIG, DEFAULT_SESSION;
 var init_governance = __esm({
   "src/utils/governance.ts"() {
     "use strict";
     init_cjs_shims();
-    import_promises6 = __toESM(require("fs/promises"), 1);
-    import_path6 = __toESM(require("path"), 1);
-    import_chalk6 = __toESM(require("chalk"), 1);
+    import_promises8 = __toESM(require("fs/promises"), 1);
+    import_path8 = __toESM(require("path"), 1);
+    import_chalk9 = __toESM(require("chalk"), 1);
     InterventionLevel = /* @__PURE__ */ ((InterventionLevel2) => {
       InterventionLevel2[InterventionLevel2["GHOST"] = 0] = "GHOST";
       InterventionLevel2[InterventionLevel2["NUDGE"] = 1] = "NUDGE";
@@ -296,16 +669,16 @@ __export(watchdog_exports, {
 });
 async function countLines(filePath) {
   try {
-    const content = await import_promises7.default.readFile(filePath, "utf-8");
+    const content = await import_promises9.default.readFile(filePath, "utf-8");
     return content.split("\n").length;
   } catch (e) {
     return 0;
   }
 }
 async function getFiles(dir, extension) {
-  const entries = await import_promises7.default.readdir(dir, { withFileTypes: true });
+  const entries = await import_promises9.default.readdir(dir, { withFileTypes: true });
   const files = await Promise.all(entries.map(async (entry) => {
-    const res = import_path7.default.resolve(dir, entry.name);
+    const res = import_path9.default.resolve(dir, entry.name);
     if (entry.isDirectory()) {
       if (entry.name === "node_modules" || entry.name === ".git" || entry.name === ".next" || entry.name === "dist") return [];
       return getFiles(res, extension);
@@ -319,7 +692,7 @@ async function fetchRulesFromApi(projectId) {
   try {
     const apiUrl = getApiUrl();
     const apiKey = getApiKey();
-    const response = await import_axios4.default.get(`${apiUrl}/api/v1/guardian/rules`, {
+    const response = await import_axios6.default.get(`${apiUrl}/api/v1/guardian/rules`, {
       params: { project_id: projectId },
       headers: { Authorization: `Bearer ${apiKey}` },
       timeout: 1e4
@@ -333,8 +706,8 @@ async function fetchRulesFromApi(projectId) {
     }
   } catch (error) {
     try {
-      const cachePath = import_path7.default.join(process.cwd(), CACHE_FILE);
-      const content = await import_promises7.default.readFile(cachePath, "utf-8");
+      const cachePath = import_path9.default.join(process.cwd(), CACHE_FILE);
+      const content = await import_promises9.default.readFile(cachePath, "utf-8");
       const cached = JSON.parse(content);
       if (cached.settings) {
         return {
@@ -353,7 +726,7 @@ async function fetchRulesFromApi(projectId) {
   };
 }
 async function runGuardianWatchdog(rootPath, settings = {}, projectId) {
-  console.log(import_chalk7.default.bold("\n\u{1F6E1}\uFE0F  Active Guardian Watchdog Initiated..."));
+  console.log(import_chalk10.default.bold("\n\u{1F6E1}\uFE0F  Active Guardian Watchdog Initiated..."));
   let lmax = settings.lmax || DEFAULT_LMAX;
   let lmaxWarning = settings.lmax_warning || DEFAULT_LMAX_WARNING;
   let ruleSource = settings.lmax ? "Settings (Passed)" : "Default";
@@ -363,47 +736,47 @@ async function runGuardianWatchdog(rootPath, settings = {}, projectId) {
     lmaxWarning = apiRules.lmaxWarning;
     ruleSource = apiRules.source;
   }
-  console.log(import_chalk7.default.dim(`Governance Rules: L_max=${lmax}, L_max_warning=${lmaxWarning}, Source: ${ruleSource}`));
+  console.log(import_chalk10.default.dim(`Governance Rules: L_max=${lmax}, L_max_warning=${lmaxWarning}, Source: ${ruleSource}`));
   const targetExtensions = [".ts", ".tsx"];
   let scanTarget = rootPath;
-  const webSrc = import_path7.default.join(rootPath, "apps", "web", "src");
+  const webSrc = import_path9.default.join(rootPath, "apps", "web", "src");
   try {
-    await import_promises7.default.access(webSrc);
+    await import_promises9.default.access(webSrc);
     scanTarget = webSrc;
   } catch {
   }
-  console.log(import_chalk7.default.dim(`Scanning target: ${import_path7.default.relative(process.cwd(), scanTarget)}`));
+  console.log(import_chalk10.default.dim(`Scanning target: ${import_path9.default.relative(process.cwd(), scanTarget)}`));
   const files = await getFiles(scanTarget, targetExtensions);
   let violations = 0;
   let warnings = 0;
   const results = [];
   for (const file of files) {
     const lines = await countLines(file);
-    const relPath = import_path7.default.relative(rootPath, file);
+    const relPath = import_path9.default.relative(rootPath, file);
     if (lines > lmax) {
       results.push({ file: relPath, lines, status: "VIOLATION" });
       violations++;
-      console.log(import_chalk7.default.red(`[VIOLATION] ${relPath}: ${lines} lines (Limit: ${lmax})`));
+      console.log(import_chalk10.default.red(`[VIOLATION] ${relPath}: ${lines} lines (Limit: ${lmax})`));
     } else if (lines > lmaxWarning) {
       results.push({ file: relPath, lines, status: "WARNING" });
       warnings++;
-      console.log(import_chalk7.default.yellow(`[WARNING]   ${relPath}: ${lines} lines (Threshold: ${lmaxWarning})`));
+      console.log(import_chalk10.default.yellow(`[WARNING]   ${relPath}: ${lines} lines (Threshold: ${lmaxWarning})`));
     }
   }
   if (violations === 0 && warnings === 0) {
-    console.log(import_chalk7.default.green(`\u2714 All ${files.length} files are within governance limits.`));
+    console.log(import_chalk10.default.green(`\u2714 All ${files.length} files are within governance limits.`));
   } else {
-    console.log("\n" + import_chalk7.default.bold("Summary:"));
-    console.log(import_chalk7.default.red(`Violations: ${violations}`));
-    console.log(import_chalk7.default.yellow(`Warnings:   ${warnings}`));
+    console.log("\n" + import_chalk10.default.bold("Summary:"));
+    console.log(import_chalk10.default.red(`Violations: ${violations}`));
+    console.log(import_chalk10.default.yellow(`Warnings:   ${warnings}`));
     const { getGovernanceConfig: getGovernanceConfig2, setSoftLock: setSoftLock2, InterventionLevel: InterventionLevel2 } = await Promise.resolve().then(() => (init_governance(), governance_exports));
     const { governance } = await getGovernanceConfig2(rootPath);
-    console.log(import_chalk7.default.dim(`Intervention Level: ${InterventionLevel2[governance.intervention_level] || "UNKNOWN"} (${governance.intervention_level})`));
+    console.log(import_chalk10.default.dim(`Intervention Level: ${InterventionLevel2[governance.intervention_level] || "UNKNOWN"} (${governance.intervention_level})`));
     if (violations > 0) {
-      console.log(import_chalk7.default.red.bold("\nCRITICAL: Governance violations detected. Immediate refactoring required."));
+      console.log(import_chalk10.default.red.bold("\nCRITICAL: Governance violations detected. Immediate refactoring required."));
       if (governance.intervention_level >= InterventionLevel2.SENTINEL) {
-        console.log(import_chalk7.default.red.bold("\u{1F6D1} SENTINEL MODE: Session SOFT_LOCKED until resolved."));
-        console.log(import_chalk7.default.red('   Run "rigstate override <id> --reason \\"...\\"" if this is an emergency.'));
+        console.log(import_chalk10.default.red.bold("\u{1F6D1} SENTINEL MODE: Session SOFT_LOCKED until resolved."));
+        console.log(import_chalk10.default.red('   Run "rigstate override <id> --reason \\"...\\"" if this is an emergency.'));
         await setSoftLock2("Sentinel Mode: Governance Violations Detected", "ARC-VIOLATION", rootPath);
       }
     }
@@ -419,28 +792,28 @@ async function runGuardianWatchdog(rootPath, settings = {}, projectId) {
         limitValue: lmax,
         severity: "CRITICAL"
       }));
-      await import_axios4.default.post(`${apiUrl}/api/v1/guardian/sync`, {
+      await import_axios6.default.post(`${apiUrl}/api/v1/guardian/sync`, {
         projectId,
         violations: payloadViolations,
         warnings
       }, {
         headers: { Authorization: `Bearer ${apiKey}` }
       });
-      console.log(import_chalk7.default.dim("\u2714 Violations synced to Rigstate Cloud."));
+      console.log(import_chalk10.default.dim("\u2714 Violations synced to Rigstate Cloud."));
     } catch (e) {
-      console.log(import_chalk7.default.dim("\u26A0 Cloud sync skipped: " + (e.message || "Unknown")));
+      console.log(import_chalk10.default.dim("\u26A0 Cloud sync skipped: " + (e.message || "Unknown")));
     }
   }
 }
-var import_promises7, import_path7, import_chalk7, import_axios4, DEFAULT_LMAX, DEFAULT_LMAX_WARNING, CACHE_FILE;
+var import_promises9, import_path9, import_chalk10, import_axios6, DEFAULT_LMAX, DEFAULT_LMAX_WARNING, CACHE_FILE;
 var init_watchdog = __esm({
   "src/utils/watchdog.ts"() {
     "use strict";
     init_cjs_shims();
-    import_promises7 = __toESM(require("fs/promises"), 1);
-    import_path7 = __toESM(require("path"), 1);
-    import_chalk7 = __toESM(require("chalk"), 1);
-    import_axios4 = __toESM(require("axios"), 1);
+    import_promises9 = __toESM(require("fs/promises"), 1);
+    import_path9 = __toESM(require("path"), 1);
+    import_chalk10 = __toESM(require("chalk"), 1);
+    import_axios6 = __toESM(require("axios"), 1);
     init_config();
     DEFAULT_LMAX = 400;
     DEFAULT_LMAX_WARNING = 350;
@@ -474,6 +847,23 @@ function createLoginCommand() {
 Your API key has been securely stored. You can now use "rigstate scan" to audit your code.`
         )
       );
+      console.log(import_chalk.default.bold("\n\u{1F916} Cursor MCP Configuration"));
+      console.log(import_chalk.default.dim("Copy and paste this into Cursor Settings -> Features -> MCP:"));
+      console.log(import_chalk.default.cyan(`
+{
+  "mcpServers": {
+    "rigstate": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "@rigstate/mcp@latest"
+      ],
+      "env": {
+        "RIGSTATE_API_KEY": "${apiKey}"
+      }
+    }
+  }
+}`));
     } catch (error) {
       console.error(
         import_chalk.default.red("\u274C Login failed:"),
@@ -486,64 +876,108 @@ Your API key has been securely stored. You can now use "rigstate scan" to audit
 
 // src/commands/link.ts
 init_cjs_shims();
-var import_commander2 = require("commander");
-var import_promises = __toESM(require("fs/promises"), 1);
-var import_path = __toESM(require("path"), 1);
-var import_chalk2 = __toESM(require("chalk"), 1);
+var import_commander5 = require("commander");
+var import_promises3 = __toESM(require("fs/promises"), 1);
+var import_path3 = __toESM(require("path"), 1);
+var import_chalk5 = __toESM(require("chalk"), 1);
 var import_os = __toESM(require("os"), 1);
 function createLinkCommand() {
-  return new import_commander2.Command("link").description("Link current directory to a Rigstate project").argument("<projectId>", "Project ID to link").action(async (projectId) => {
+  return new import_commander5.Command("link").description("Link current directory to a Rigstate project").argument("<projectId>", "Project ID to link").action(async (projectId) => {
     try {
-      const globalPath = import_path.default.join(import_os.default.homedir(), ".rigstate", "config.json");
-      const globalData = await import_promises.default.readFile(globalPath, "utf-8").catch(() => null);
+      const globalPath = import_path3.default.join(import_os.default.homedir(), ".rigstate", "config.json");
+      const globalData = await import_promises3.default.readFile(globalPath, "utf-8").catch(() => null);
       if (globalData) {
         const config2 = JSON.parse(globalData);
         const cwd = process.cwd();
         if (config2.overrides && config2.overrides[cwd]) {
           const overrideId = config2.overrides[cwd];
           if (overrideId !== projectId) {
-            console.warn(import_chalk2.default.yellow(`Global override detected. Enforcing project ID: ${overrideId}`));
+            console.warn(import_chalk5.default.yellow(`Global override detected. Enforcing project ID: ${overrideId}`));
             projectId = overrideId;
           }
         }
       }
     } catch (e) {
     }
-    const manifestPath = import_path.default.join(process.cwd(), ".rigstate");
+    const manifestPath = import_path3.default.join(process.cwd(), ".rigstate");
     const content = {
       project_id: projectId,
       api_url: process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000",
       linked_at: (/* @__PURE__ */ new Date()).toISOString()
     };
     try {
-      await import_promises.default.writeFile(manifestPath, JSON.stringify(content, null, 2), "utf-8");
-      console.log(import_chalk2.default.green(`\u2714 Linked to project ID: ${projectId}`));
-      console.log(import_chalk2.default.dim(`Created local context manifest at .rigstate`));
+      await import_promises3.default.writeFile(manifestPath, JSON.stringify(content, null, 2), "utf-8");
+      console.log(import_chalk5.default.green(`\u2714 Linked to project ID: ${projectId}`));
+      console.log(import_chalk5.default.dim(`Created local context manifest at .rigstate`));
+      console.log("");
+      console.log(import_chalk5.default.bold("\u{1F916} Rigstate Automation Detected"));
+      console.log("");
+      const { getApiKey: getApiKey2, getApiUrl: getApiUrl2 } = await Promise.resolve().then(() => (init_config(), config_exports));
+      const apiKey = getApiKey2();
+      const apiUrl = getApiUrl2();
+      if (apiKey) {
+        console.log(import_chalk5.default.blue("\u{1F510} Checking Vault for secrets..."));
+        const { syncEnv: syncEnv2 } = await Promise.resolve().then(() => (init_env(), env_exports));
+        await syncEnv2(projectId, apiKey, apiUrl, true);
+        console.log(import_chalk5.default.blue("\u{1F9E0} Syncing neural instructions..."));
+        const { syncProjectRules: syncProjectRules2 } = await Promise.resolve().then(() => (init_sync_rules(), sync_rules_exports));
+        await syncProjectRules2(projectId, apiKey, apiUrl);
+        console.log(import_chalk5.default.blue("\u{1F6E1}\uFE0F  Checking immunity system..."));
+        await installHooks(process.cwd());
+      }
+      console.log("");
+      console.log(import_chalk5.default.bold.green("\u{1F680} Link Complete! Your environment is ready."));
     } catch (error) {
-      console.error(import_chalk2.default.red(`Failed to link project: ${error.message}`));
+      if (error.message.includes("Not authenticated")) {
+        console.warn(import_chalk5.default.yellow('\u26A0\uFE0F  Not authenticated. Run "rigstate login" to enable automation features.'));
+      } else {
+        console.error(import_chalk5.default.red(`Failed to link project: ${error.message}`));
+      }
     }
   });
 }
+async function installHooks(cwd) {
+  const fs23 = await import("fs/promises");
+  const path23 = await import("path");
+  try {
+    await fs23.access(path23.join(cwd, ".git"));
+  } catch {
+    console.log(import_chalk5.default.dim("   (Not a git repository, skipping hooks)"));
+    return;
+  }
+  const hooksDir = path23.join(cwd, ".husky");
+  try {
+    const { installHooks: runInstall } = await Promise.resolve().then(() => (init_hooks(), hooks_exports));
+    const preCommitPath = path23.join(cwd, ".git/hooks/pre-commit");
+    try {
+      await fs23.access(preCommitPath);
+      console.log(import_chalk5.default.green("   \u2714 Git hooks already active"));
+    } catch {
+      console.log(import_chalk5.default.yellow('   \u26A0\uFE0F  Git hooks missing. Run "rigstate hooks install" to secure repo.'));
+    }
+  } catch (e) {
+  }
+}
 
 // src/commands/scan.ts
 init_cjs_shims();
-var import_commander3 = require("commander");
-var import_chalk3 = __toESM(require("chalk"), 1);
-var import_ora = __toESM(require("ora"), 1);
-var import_axios = __toESM(require("axios"), 1);
+var import_commander6 = require("commander");
+var import_chalk6 = __toESM(require("chalk"), 1);
+var import_ora3 = __toESM(require("ora"), 1);
+var import_axios3 = __toESM(require("axios"), 1);
 var import_glob = require("glob");
-var import_promises3 = __toESM(require("fs/promises"), 1);
-var import_path3 = __toESM(require("path"), 1);
+var import_promises5 = __toESM(require("fs/promises"), 1);
+var import_path5 = __toESM(require("path"), 1);
 init_config();
 
 // src/utils/files.ts
 init_cjs_shims();
-var import_promises2 = __toESM(require("fs/promises"), 1);
-var import_path2 = __toESM(require("path"), 1);
+var import_promises4 = __toESM(require("fs/promises"), 1);
+var import_path4 = __toESM(require("path"), 1);
 async function readGitignore(dir) {
-  const gitignorePath = import_path2.default.join(dir, ".gitignore");
+  const gitignorePath = import_path4.default.join(dir, ".gitignore");
   try {
-    const content = await import_promises2.default.readFile(gitignorePath, "utf-8");
+    const content = await import_promises4.default.readFile(gitignorePath, "utf-8");
     return content.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#"));
   } catch (error) {
     return [];
@@ -605,40 +1039,40 @@ function isCodeFile(filePath) {
     ".vue",
     ".svelte"
   ];
-  const ext = import_path2.default.extname(filePath).toLowerCase();
+  const ext = import_path4.default.extname(filePath).toLowerCase();
   return codeExtensions.includes(ext);
 }
 
 // src/commands/scan.ts
 function createScanCommand() {
-  return new import_commander3.Command("scan").description("Scan code files for security and quality issues").argument("[path]", "Directory or file to scan", ".").option("--json", "Output results as JSON").option("--project <id>", "Project ID to associate with this scan").action(async (targetPath, options) => {
-    const spinner = (0, import_ora.default)();
+  return new import_commander6.Command("scan").description("Scan code files for security and quality issues").argument("[path]", "Directory or file to scan", ".").option("--json", "Output results as JSON").option("--project <id>", "Project ID to associate with this scan").action(async (targetPath, options) => {
+    const spinner = (0, import_ora3.default)();
     try {
       const apiKey = getApiKey();
       const apiUrl = getApiUrl();
       const projectId = options.project || getProjectId();
       if (!projectId) {
         console.warn(
-          import_chalk3.default.yellow(
+          import_chalk6.default.yellow(
             "\u26A0\uFE0F  No project ID specified. Use --project <id> or set a default."
           )
         );
       }
-      const scanPath = import_path3.default.resolve(process.cwd(), targetPath);
-      spinner.start(`Scanning ${import_chalk3.default.cyan(scanPath)}...`);
+      const scanPath = import_path5.default.resolve(process.cwd(), targetPath);
+      spinner.start(`Scanning ${import_chalk6.default.cyan(scanPath)}...`);
       const gitignorePatterns = await readGitignore(scanPath);
-      const pattern = import_path3.default.join(scanPath, "**/*");
+      const pattern = import_path5.default.join(scanPath, "**/*");
       const allFiles = await (0, import_glob.glob)(pattern, {
         nodir: true,
         dot: false,
         ignore: ["**/node_modules/**", "**/.git/**", "**/dist/**", "**/build/**"]
       });
       const codeFiles = allFiles.filter((file) => {
-        const relativePath = import_path3.default.relative(scanPath, file);
+        const relativePath = import_path5.default.relative(scanPath, file);
         return isCodeFile(file) && !shouldIgnore(relativePath, gitignorePatterns);
       });
       if (codeFiles.length === 0) {
-        spinner.warn(import_chalk3.default.yellow("No code files found to scan."));
+        spinner.warn(import_chalk6.default.yellow("No code files found to scan."));
         return;
       }
       spinner.text = `Found ${codeFiles.length} files. Scanning...`;
@@ -647,11 +1081,11 @@ function createScanCommand() {
       const severityCounts = {};
       for (let i = 0; i < codeFiles.length; i++) {
         const filePath = codeFiles[i];
-        const relativePath = import_path3.default.relative(scanPath, filePath);
+        const relativePath = import_path5.default.relative(scanPath, filePath);
         spinner.text = `Scanning ${i + 1}/${codeFiles.length}: ${relativePath}`;
         try {
-          const content = await import_promises3.default.readFile(filePath, "utf-8");
-          const response = await import_axios.default.post(
+          const content = await import_promises5.default.readFile(filePath, "utf-8");
+          const response = await import_axios3.default.post(
             `${apiUrl}/api/v1/audit`,
             {
               content,
@@ -685,16 +1119,16 @@ function createScanCommand() {
             });
           }
         } catch (fileError) {
-          if (import_axios.default.isAxiosError(fileError)) {
-            console.warn(import_chalk3.default.yellow(`
+          if (import_axios3.default.isAxiosError(fileError)) {
+            console.warn(import_chalk6.default.yellow(`
 \u26A0\uFE0F  Skipping ${relativePath}: ${fileError.message}`));
           } else {
-            console.warn(import_chalk3.default.yellow(`
+            console.warn(import_chalk6.default.yellow(`
 \u26A0\uFE0F  Error reading ${relativePath}`));
           }
         }
       }
-      spinner.succeed(import_chalk3.default.green("\u2705 Scan completed!"));
+      spinner.succeed(import_chalk6.default.green("\u2705 Scan completed!"));
       const aggregatedResponse = {
         results,
         summary: {
@@ -709,21 +1143,21 @@ function createScanCommand() {
         printPrettyResults(aggregatedResponse);
       }
     } catch (error) {
-      spinner.fail(import_chalk3.default.red("\u274C Scan failed"));
-      if (import_axios.default.isAxiosError(error)) {
+      spinner.fail(import_chalk6.default.red("\u274C Scan failed"));
+      if (import_axios3.default.isAxiosError(error)) {
         if (error.response) {
-          console.error(import_chalk3.default.red("API Error:"), error.response.data);
+          console.error(import_chalk6.default.red("API Error:"), error.response.data);
         } else if (error.request) {
           console.error(
-            import_chalk3.default.red("Network Error:"),
+            import_chalk6.default.red("Network Error:"),
             "Could not reach the API. Is the server running?"
           );
         } else {
-          console.error(import_chalk3.default.red("Error:"), error.message);
+          console.error(import_chalk6.default.red("Error:"), error.message);
         }
       } else {
         console.error(
-          import_chalk3.default.red("Error:"),
+          import_chalk6.default.red("Error:"),
           error instanceof Error ? error.message : "Unknown error"
         );
       }
@@ -733,10 +1167,10 @@ function createScanCommand() {
 }
 function printPrettyResults(data) {
   const { results, summary } = data;
-  console.log("\n" + import_chalk3.default.bold("\u{1F4CA} Scan Summary"));
-  console.log(import_chalk3.default.dim("\u2500".repeat(60)));
-  console.log(`Total Files Scanned: ${import_chalk3.default.cyan(summary.total_files)}`);
-  console.log(`Total Issues Found: ${import_chalk3.default.yellow(summary.total_issues)}`);
+  console.log("\n" + import_chalk6.default.bold("\u{1F4CA} Scan Summary"));
+  console.log(import_chalk6.default.dim("\u2500".repeat(60)));
+  console.log(`Total Files Scanned: ${import_chalk6.default.cyan(summary.total_files)}`);
+  console.log(`Total Issues Found: ${import_chalk6.default.yellow(summary.total_issues)}`);
   if (summary.by_severity) {
     console.log("\nIssues by Severity:");
     Object.entries(summary.by_severity).forEach(([severity, count]) => {
@@ -745,88 +1179,88 @@ function printPrettyResults(data) {
     });
   }
   if (results && results.length > 0) {
-    console.log("\n" + import_chalk3.default.bold("\u{1F50D} Detailed Results"));
-    console.log(import_chalk3.default.dim("\u2500".repeat(60)));
+    console.log("\n" + import_chalk6.default.bold("\u{1F50D} Detailed Results"));
+    console.log(import_chalk6.default.dim("\u2500".repeat(60)));
     results.forEach((result) => {
       if (result.issues && result.issues.length > 0) {
         console.log(`
-${import_chalk3.default.bold(result.file_path)}`);
+${import_chalk6.default.bold(result.file_path)}`);
         result.issues.forEach((issue) => {
           const severityColor = getSeverityColor(issue.severity);
-          const lineInfo = issue.line ? import_chalk3.default.dim(`:${issue.line}`) : "";
+          const lineInfo = issue.line ? import_chalk6.default.dim(`:${issue.line}`) : "";
           console.log(
             `  ${severityColor(`[${issue.severity.toUpperCase()}]`)} ${issue.type}${lineInfo}`
           );
-          console.log(`  ${import_chalk3.default.dim(issue.message)}`);
+          console.log(`  ${import_chalk6.default.dim(issue.message)}`);
         });
       }
     });
   }
-  console.log("\n" + import_chalk3.default.dim("\u2500".repeat(60)));
+  console.log("\n" + import_chalk6.default.dim("\u2500".repeat(60)));
 }
 function getSeverityColor(severity) {
   switch (severity.toLowerCase()) {
     case "critical":
-      return import_chalk3.default.red.bold;
+      return import_chalk6.default.red.bold;
     case "high":
-      return import_chalk3.default.red;
+      return import_chalk6.default.red;
     case "medium":
-      return import_chalk3.default.yellow;
+      return import_chalk6.default.yellow;
     case "low":
-      return import_chalk3.default.blue;
+      return import_chalk6.default.blue;
     case "info":
-      return import_chalk3.default.gray;
+      return import_chalk6.default.gray;
     default:
-      return import_chalk3.default.white;
+      return import_chalk6.default.white;
   }
 }
 
 // src/commands/fix.ts
 init_cjs_shims();
-var import_commander4 = require("commander");
-var import_chalk4 = __toESM(require("chalk"), 1);
-var import_ora2 = __toESM(require("ora"), 1);
-var import_axios2 = __toESM(require("axios"), 1);
+var import_commander7 = require("commander");
+var import_chalk7 = __toESM(require("chalk"), 1);
+var import_ora4 = __toESM(require("ora"), 1);
+var import_axios4 = __toESM(require("axios"), 1);
 var import_glob2 = require("glob");
-var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_path4 = __toESM(require("path"), 1);
+var import_promises6 = __toESM(require("fs/promises"), 1);
+var import_path6 = __toESM(require("path"), 1);
 var import_inquirer = __toESM(require("inquirer"), 1);
 var Diff = __toESM(require("diff"), 1);
 init_config();
 function createFixCommand() {
-  return new import_commander4.Command("fix").description("Scan and interactively FIX detected issues using Rigstate AI").argument("[path]", "Directory or file to scan", ".").option("--project <id>", "Project ID to context-aware audit").action(async (targetPath, options) => {
-    const spinner = (0, import_ora2.default)();
+  return new import_commander7.Command("fix").description("Scan and interactively FIX detected issues using Rigstate AI").argument("[path]", "Directory or file to scan", ".").option("--project <id>", "Project ID to context-aware audit").action(async (targetPath, options) => {
+    const spinner = (0, import_ora4.default)();
     try {
       const apiKey = getApiKey();
       const apiUrl = getApiUrl();
       const projectId = options.project || getProjectId();
       if (!projectId) {
-        console.log(import_chalk4.default.yellow("\u26A0\uFE0F  Project ID is required for fixing. Using default or pass --project <id>"));
+        console.log(import_chalk7.default.yellow("\u26A0\uFE0F  Project ID is required for fixing. Using default or pass --project <id>"));
       }
-      const scanPath = import_path4.default.resolve(process.cwd(), targetPath);
+      const scanPath = import_path6.default.resolve(process.cwd(), targetPath);
       const gitignorePatterns = await readGitignore(scanPath);
-      const pattern = import_path4.default.join(scanPath, "**/*");
+      const pattern = import_path6.default.join(scanPath, "**/*");
       const allFiles = await (0, import_glob2.glob)(pattern, { nodir: true, dot: false, ignore: ["**/node_modules/**", "**/.git/**"] });
       const codeFiles = allFiles.filter((file) => {
-        const relativePath = import_path4.default.relative(scanPath, file);
+        const relativePath = import_path6.default.relative(scanPath, file);
         return isCodeFile(file) && !shouldIgnore(relativePath, gitignorePatterns);
       });
       if (codeFiles.length === 0) {
-        console.log(import_chalk4.default.yellow("No code files found."));
+        console.log(import_chalk7.default.yellow("No code files found."));
         return;
       }
-      console.log(import_chalk4.default.bold(`
+      console.log(import_chalk7.default.bold(`
 \u{1F9E0} Rigstate Fix Mode`));
-      console.log(import_chalk4.default.dim(`Scanning ${codeFiles.length} files with Project Context...
+      console.log(import_chalk7.default.dim(`Scanning ${codeFiles.length} files with Project Context...
 `));
       let fixedCount = 0;
       for (let i = 0; i < codeFiles.length; i++) {
         const filePath = codeFiles[i];
-        const relativePath = import_path4.default.relative(scanPath, filePath);
+        const relativePath = import_path6.default.relative(scanPath, filePath);
         spinner.start(`Analyzing ${relativePath}...`);
         try {
-          const content = await import_promises4.default.readFile(filePath, "utf-8");
-          const response = await import_axios2.default.post(
+          const content = await import_promises6.default.readFile(filePath, "utf-8");
+          const response = await import_axios4.default.post(
             `${apiUrl}/api/v1/audit`,
             { content, file_path: relativePath, project_id: projectId },
             { headers: { "Authorization": `Bearer ${apiKey}` }, timeout: 12e4 }
@@ -836,22 +1270,22 @@ function createFixCommand() {
           if (fixableIssues.length > 0) {
             spinner.stop();
             console.log(`
-${import_chalk4.default.bold(relativePath)}: Found ${fixableIssues.length} fixable issues.`);
+${import_chalk7.default.bold(relativePath)}: Found ${fixableIssues.length} fixable issues.`);
             for (const issue of fixableIssues) {
-              console.log(import_chalk4.default.red(`
+              console.log(import_chalk7.default.red(`
 [${issue.type}] ${issue.title}`));
-              console.log(import_chalk4.default.dim(issue.suggestion || issue.message));
+              console.log(import_chalk7.default.dim(issue.suggestion || issue.message));
               const diff = Diff.createTwoFilesPatch(relativePath, relativePath, content, issue.fixed_content, "Current", "Fixed");
               console.log("\n" + diff.split("\n").slice(0, 15).join("\n") + (diff.split("\n").length > 15 ? "\n..." : ""));
               const { apply } = await import_inquirer.default.prompt([{
                 type: "confirm",
                 name: "apply",
-                message: `Apply this fix to ${import_chalk4.default.cyan(relativePath)}?`,
+                message: `Apply this fix to ${import_chalk7.default.cyan(relativePath)}?`,
                 default: true
               }]);
               if (apply) {
-                await import_promises4.default.writeFile(filePath, issue.fixed_content);
-                console.log(import_chalk4.default.green(`\u2705 Fixed applied!`));
+                await import_promises6.default.writeFile(filePath, issue.fixed_content);
+                console.log(import_chalk7.default.green(`\u2705 Fixed applied!`));
                 fixedCount++;
                 if (issue.related_step_id) {
                   const { completeStep } = await import_inquirer.default.prompt([{
@@ -862,20 +1296,20 @@ ${import_chalk4.default.bold(relativePath)}: Found ${fixableIssues.length} fixab
                   }]);
                   if (completeStep) {
                     try {
-                      await import_axios2.default.post(
+                      await import_axios4.default.post(
                         `${apiUrl}/api/v1/roadmap/update-status`,
                         { step_id: issue.related_step_id, status: "COMPLETED", project_id: projectId },
                         { headers: { "Authorization": `Bearer ${apiKey}` } }
                       );
-                      console.log(import_chalk4.default.green(`\u{1F680} Roadmap updated! Mission Control is in sync.`));
+                      console.log(import_chalk7.default.green(`\u{1F680} Roadmap updated! Mission Control is in sync.`));
                     } catch (err) {
-                      console.error(import_chalk4.default.yellow(`Failed to update roadmap: ${err.message}`));
+                      console.error(import_chalk7.default.yellow(`Failed to update roadmap: ${err.message}`));
                     }
                   }
                 }
                 break;
               } else {
-                console.log(import_chalk4.default.dim("Skipped."));
+                console.log(import_chalk7.default.dim("Skipped."));
               }
             }
           } else {
@@ -885,11 +1319,11 @@ ${import_chalk4.default.bold(relativePath)}: Found ${fixableIssues.length} fixab
         }
       }
       spinner.stop();
-      console.log(import_chalk4.default.bold.green(`
+      console.log(import_chalk7.default.bold.green(`
 
 \u{1F680} Fix session complete!`));
       console.log(`Frank fixed ${fixedCount} detected issues.`);
-      console.log(import_chalk4.default.dim(`Run 'rigstate scan' to verify remaining issues.`));
+      console.log(import_chalk7.default.dim(`Run 'rigstate scan' to verify remaining issues.`));
     } catch (error) {
       spinner.fail("Fix session failed");
       console.error(error.message);
@@ -899,17 +1333,17 @@ ${import_chalk4.default.bold(relativePath)}: Found ${fixableIssues.length} fixab
 
 // src/commands/sync.ts
 init_cjs_shims();
-var import_commander5 = require("commander");
-var import_chalk8 = __toESM(require("chalk"), 1);
-var import_ora3 = __toESM(require("ora"), 1);
+var import_commander8 = require("commander");
+var import_chalk11 = __toESM(require("chalk"), 1);
+var import_ora5 = __toESM(require("ora"), 1);
 init_config();
-var import_axios5 = __toESM(require("axios"), 1);
-var import_promises8 = __toESM(require("fs/promises"), 1);
-var import_path8 = __toESM(require("path"), 1);
+var import_axios7 = __toESM(require("axios"), 1);
+var import_promises10 = __toESM(require("fs/promises"), 1);
+var import_path10 = __toESM(require("path"), 1);
 function createSyncCommand() {
-  const sync = new import_commander5.Command("sync");
+  const sync = new import_commander8.Command("sync");
   sync.description("Synchronize local state with Rigstate Cloud").option("-p, --project <id>", "Specify Project ID (saves to config automatically)").action(async (options) => {
-    const spinner = (0, import_ora3.default)("Synchronizing project state...").start();
+    const spinner = (0, import_ora5.default)("Synchronizing project state...").start();
     try {
       let apiKey;
       try {
@@ -921,8 +1355,8 @@ function createSyncCommand() {
       let projectId = options.project;
       if (!projectId) {
         try {
-          const manifestPath = import_path8.default.join(process.cwd(), ".rigstate");
-          const manifestContent = await import_promises8.default.readFile(manifestPath, "utf-8");
+          const manifestPath = import_path10.default.join(process.cwd(), ".rigstate");
+          const manifestContent = await import_promises10.default.readFile(manifestPath, "utf-8");
           const manifest = JSON.parse(manifestContent);
           if (manifest.project_id) projectId = manifest.project_id;
         } catch (e) {
@@ -937,7 +1371,7 @@ function createSyncCommand() {
         return;
       }
       const apiUrl = getApiUrl();
-      const response = await import_axios5.default.get(`${apiUrl}/api/v1/roadmap`, {
+      const response = await import_axios7.default.get(`${apiUrl}/api/v1/roadmap`, {
         params: { project_id: projectId },
         headers: { Authorization: `Bearer ${apiKey}` }
       });
@@ -946,31 +1380,31 @@ function createSyncCommand() {
       }
       const { roadmap, project } = response.data.data;
       const timestamp = response.data.timestamp;
-      const targetPath = import_path8.default.join(process.cwd(), "roadmap.json");
+      const targetPath = import_path10.default.join(process.cwd(), "roadmap.json");
       const fileContent = JSON.stringify({
         project,
         last_synced: timestamp,
         roadmap
       }, null, 2);
-      await import_promises8.default.writeFile(targetPath, fileContent, "utf-8");
+      await import_promises10.default.writeFile(targetPath, fileContent, "utf-8");
       try {
-        const manifestPath = import_path8.default.join(process.cwd(), ".rigstate");
+        const manifestPath = import_path10.default.join(process.cwd(), ".rigstate");
         const manifestContent = {
           project_id: projectId,
           project_name: project,
           last_synced: timestamp,
           api_url: apiUrl
         };
-        await import_promises8.default.writeFile(manifestPath, JSON.stringify(manifestContent, null, 2), "utf-8");
+        await import_promises10.default.writeFile(manifestPath, JSON.stringify(manifestContent, null, 2), "utf-8");
       } catch (e) {
       }
-      console.log(import_chalk8.default.bold("\n\u{1F9E0} Agent Skills Provisioning..."));
+      console.log(import_chalk11.default.bold("\n\u{1F9E0} Agent Skills Provisioning..."));
       try {
         const { provisionSkills: provisionSkills2, generateSkillsDiscoveryBlock: generateSkillsDiscoveryBlock2 } = await Promise.resolve().then(() => (init_skills_provisioner(), skills_provisioner_exports));
         const skills = await provisionSkills2(apiUrl, apiKey, projectId, process.cwd());
-        const cursorRulesPath = import_path8.default.join(process.cwd(), ".cursorrules");
+        const cursorRulesPath = import_path10.default.join(process.cwd(), ".cursorrules");
         try {
-          let rulesContent = await import_promises8.default.readFile(cursorRulesPath, "utf-8");
+          let rulesContent = await import_promises10.default.readFile(cursorRulesPath, "utf-8");
           const skillsBlock = generateSkillsDiscoveryBlock2(skills);
           if (rulesContent.includes("<available_skills>")) {
             rulesContent = rulesContent.replace(
@@ -983,28 +1417,28 @@ function createSyncCommand() {
               rulesContent = rulesContent.slice(0, insertPoint + 3) + "\n\n" + skillsBlock + "\n" + rulesContent.slice(insertPoint + 3);
             }
           }
-          await import_promises8.default.writeFile(cursorRulesPath, rulesContent, "utf-8");
-          console.log(import_chalk8.default.dim(`  Updated .cursorrules with skills discovery block`));
+          await import_promises10.default.writeFile(cursorRulesPath, rulesContent, "utf-8");
+          console.log(import_chalk11.default.dim(`  Updated .cursorrules with skills discovery block`));
         } catch (e) {
         }
       } catch (e) {
-        console.log(import_chalk8.default.yellow(`  \u26A0 Skills provisioning skipped: ${e.message}`));
+        console.log(import_chalk11.default.yellow(`  \u26A0 Skills provisioning skipped: ${e.message}`));
       }
       try {
-        const logPath = import_path8.default.join(process.cwd(), ".rigstate", "logs", "last_execution.json");
+        const logPath = import_path10.default.join(process.cwd(), ".rigstate", "logs", "last_execution.json");
         try {
-          const logContent = await import_promises8.default.readFile(logPath, "utf-8");
+          const logContent = await import_promises10.default.readFile(logPath, "utf-8");
           const logData = JSON.parse(logContent);
           if (logData.task_summary) {
-            await import_axios5.default.post(`${apiUrl}/api/v1/execution-logs`, {
+            await import_axios7.default.post(`${apiUrl}/api/v1/execution-logs`, {
               project_id: projectId,
               ...logData,
               agent_role: process.env.RIGSTATE_MODE === "SUPERVISOR" ? "SUPERVISOR" : "WORKER"
             }, {
               headers: { Authorization: `Bearer ${apiKey}` }
             });
-            await import_promises8.default.unlink(logPath);
-            console.log(import_chalk8.default.dim(`\u2714 Mission Report uploaded.`));
+            await import_promises10.default.unlink(logPath);
+            console.log(import_chalk11.default.dim(`\u2714 Mission Report uploaded.`));
           }
         } catch (e) {
           if (e.code !== "ENOENT") {
@@ -1012,14 +1446,14 @@ function createSyncCommand() {
         }
       } catch (e) {
       }
-      spinner.succeed(import_chalk8.default.green(`Synced ${roadmap.length} roadmap steps for project "${project}"`));
-      console.log(import_chalk8.default.dim(`Local files updated: roadmap.json`));
+      spinner.succeed(import_chalk11.default.green(`Synced ${roadmap.length} roadmap steps for project "${project}"`));
+      console.log(import_chalk11.default.dim(`Local files updated: roadmap.json`));
       const { runGuardianWatchdog: runGuardianWatchdog2 } = await Promise.resolve().then(() => (init_watchdog(), watchdog_exports));
       const settings = response.data.data.settings || {};
       await runGuardianWatchdog2(process.cwd(), settings, projectId);
-      console.log(import_chalk8.default.bold("\n\u{1F4E1} Agent Bridge Heartbeat..."));
+      console.log(import_chalk11.default.bold("\n\u{1F4E1} Agent Bridge Heartbeat..."));
       try {
-        const bridgeResponse = await import_axios5.default.get(`${apiUrl}/api/v1/agent/bridge`, {
+        const bridgeResponse = await import_axios7.default.get(`${apiUrl}/api/v1/agent/bridge`, {
           params: { project_id: projectId },
           headers: { Authorization: `Bearer ${apiKey}` }
         });
@@ -1028,59 +1462,59 @@ function createSyncCommand() {
           const pending = tasks.filter((t) => t.status === "PENDING");
           const approved = tasks.filter((t) => t.status === "APPROVED");
           if (pending.length > 0 || approved.length > 0) {
-            console.log(import_chalk8.default.yellow(`\u26A0 Bridge Alert: ${pending.length} pending, ${approved.length} approved tasks found.`));
-            console.log(import_chalk8.default.dim('Run "rigstate fix" to process these tasks or ensure your IDE MCP server is active.'));
+            console.log(import_chalk11.default.yellow(`\u26A0 Bridge Alert: ${pending.length} pending, ${approved.length} approved tasks found.`));
+            console.log(import_chalk11.default.dim('Run "rigstate fix" to process these tasks or ensure your IDE MCP server is active.'));
           } else {
-            console.log(import_chalk8.default.green("\u2714 Heartbeat healthy. No pending bridge tasks."));
+            console.log(import_chalk11.default.green("\u2714 Heartbeat healthy. No pending bridge tasks."));
           }
           const pings = pending.filter((t) => t.proposal?.startsWith("ping"));
           for (const ping of pings) {
-            await import_axios5.default.post(`${apiUrl}/api/v1/agent/bridge`, {
+            await import_axios7.default.post(`${apiUrl}/api/v1/agent/bridge`, {
               bridge_id: ping.id,
               status: "COMPLETED",
               summary: "Pong! CLI Sync Heartbeat confirmed."
             }, {
               headers: { Authorization: `Bearer ${apiKey}` }
             });
-            console.log(import_chalk8.default.cyan(`\u{1F3D3} Pong! Acknowledged heartbeat signal [${ping.id}]`));
+            console.log(import_chalk11.default.cyan(`\u{1F3D3} Pong! Acknowledged heartbeat signal [${ping.id}]`));
           }
         }
       } catch (e) {
-        console.log(import_chalk8.default.yellow(`\u26A0 Could not verify Bridge status: ${e.message}`));
+        console.log(import_chalk11.default.yellow(`\u26A0 Could not verify Bridge status: ${e.message}`));
       }
       if (options.project) {
-        console.log(import_chalk8.default.blue(`Project context saved. Future commands will use this project.`));
+        console.log(import_chalk11.default.blue(`Project context saved. Future commands will use this project.`));
       }
       try {
-        const migrationDir = import_path8.default.join(process.cwd(), "supabase", "migrations");
-        const files = await import_promises8.default.readdir(migrationDir);
+        const migrationDir = import_path10.default.join(process.cwd(), "supabase", "migrations");
+        const files = await import_promises10.default.readdir(migrationDir);
         const sqlFiles = files.filter((f) => f.endsWith(".sql")).sort();
         if (sqlFiles.length > 0) {
           const latestMigration = sqlFiles[sqlFiles.length - 1];
-          console.log(import_chalk8.default.dim(`
+          console.log(import_chalk11.default.dim(`
 \u{1F6E1}  Migration Guard:`));
-          console.log(import_chalk8.default.dim(`   Latest Local: ${latestMigration}`));
-          console.log(import_chalk8.default.yellow(`   \u26A0  Ensure DB schema matches this version. CLI cannot verify Remote RLS policies directly.`));
+          console.log(import_chalk11.default.dim(`   Latest Local: ${latestMigration}`));
+          console.log(import_chalk11.default.yellow(`   \u26A0  Ensure DB schema matches this version. CLI cannot verify Remote RLS policies directly.`));
         }
       } catch (e) {
       }
       try {
-        const vaultResponse = await import_axios5.default.post(
+        const vaultResponse = await import_axios7.default.post(
           `${apiUrl}/api/v1/vault/sync`,
           { project_id: projectId },
           { headers: { Authorization: `Bearer ${apiKey}` } }
         );
         if (vaultResponse.data.success) {
           const vaultContent = vaultResponse.data.data.content || "";
-          const localEnvPath = import_path8.default.join(process.cwd(), ".env.local");
+          const localEnvPath = import_path10.default.join(process.cwd(), ".env.local");
           let localContent = "";
           try {
-            localContent = await import_promises8.default.readFile(localEnvPath, "utf-8");
+            localContent = await import_promises10.default.readFile(localEnvPath, "utf-8");
           } catch (e) {
           }
           if (vaultContent.trim() !== localContent.trim()) {
-            console.log(import_chalk8.default.bold("\n\u{1F510} Sovereign Foundation (Vault):"));
-            console.log(import_chalk8.default.yellow("   Status: Drift Detected / Update Available"));
+            console.log(import_chalk11.default.bold("\n\u{1F510} Sovereign Foundation (Vault):"));
+            console.log(import_chalk11.default.yellow("   Status: Drift Detected / Update Available"));
             const { syncVault } = await import("inquirer").then((m) => m.default.prompt([{
               type: "confirm",
               name: "syncVault",
@@ -1088,25 +1522,25 @@ function createSyncCommand() {
               default: false
             }]));
             if (syncVault) {
-              await import_promises8.default.writeFile(localEnvPath, vaultContent, "utf-8");
-              console.log(import_chalk8.default.green("   \u2705 .env.local synchronized with Vault."));
+              await import_promises10.default.writeFile(localEnvPath, vaultContent, "utf-8");
+              console.log(import_chalk11.default.green("   \u2705 .env.local synchronized with Vault."));
             } else {
-              console.log(import_chalk8.default.dim("   Skipped vault sync."));
+              console.log(import_chalk11.default.dim("   Skipped vault sync."));
             }
           } else {
-            console.log(import_chalk8.default.dim("\n\u{1F510} Sovereign Foundation: Synced."));
+            console.log(import_chalk11.default.dim("\n\u{1F510} Sovereign Foundation: Synced."));
           }
         }
       } catch (e) {
       }
-      console.log(import_chalk8.default.dim("\n\u{1F6E1}\uFE0F System Integrity Check..."));
+      console.log(import_chalk11.default.dim("\n\u{1F6E1}\uFE0F System Integrity Check..."));
       await checkSystemIntegrity(apiUrl, apiKey, projectId);
     } catch (error) {
-      if (import_axios5.default.isAxiosError(error)) {
+      if (import_axios7.default.isAxiosError(error)) {
         const message = error.response?.data?.error || error.message;
-        spinner.fail(import_chalk8.default.red(`Sync failed: ${message}`));
+        spinner.fail(import_chalk11.default.red(`Sync failed: ${message}`));
       } else {
-        spinner.fail(import_chalk8.default.red("Sync failed: " + (error.message || "Unknown error")));
+        spinner.fail(import_chalk11.default.red("Sync failed: " + (error.message || "Unknown error")));
       }
     }
   });
@@ -1114,7 +1548,7 @@ function createSyncCommand() {
 }
 async function checkSystemIntegrity(apiUrl, apiKey, projectId) {
   try {
-    const response = await import_axios5.default.get(`${apiUrl}/api/v1/system/integrity`, {
+    const response = await import_axios7.default.get(`${apiUrl}/api/v1/system/integrity`, {
       params: { project_id: projectId },
       headers: { Authorization: `Bearer ${apiKey}` }
     });
@@ -1122,57 +1556,57 @@ async function checkSystemIntegrity(apiUrl, apiKey, projectId) {
       const { migrations, rls, guardian_violations } = response.data.data;
       if (migrations) {
         if (migrations.in_sync) {
-          console.log(import_chalk8.default.green(`   \u2705 Migrations synced (${migrations.count} versions)`));
+          console.log(import_chalk11.default.green(`   \u2705 Migrations synced (${migrations.count} versions)`));
         } else {
-          console.log(import_chalk8.default.red(`   \u{1F6D1} CRITICAL: DB Schema out of sync! ${migrations.missing?.length || 0} migrations not applied.`));
+          console.log(import_chalk11.default.red(`   \u{1F6D1} CRITICAL: DB Schema out of sync! ${migrations.missing?.length || 0} migrations not applied.`));
           if (migrations.missing?.length > 0) {
-            console.log(import_chalk8.default.dim(`      Missing: ${migrations.missing.slice(0, 3).join(", ")}${migrations.missing.length > 3 ? "..." : ""}`));
+            console.log(import_chalk11.default.dim(`      Missing: ${migrations.missing.slice(0, 3).join(", ")}${migrations.missing.length > 3 ? "..." : ""}`));
           }
-          console.log(import_chalk8.default.yellow(`      Run 'supabase db push' or apply migrations immediately.`));
+          console.log(import_chalk11.default.yellow(`      Run 'supabase db push' or apply migrations immediately.`));
         }
       }
       if (rls) {
         if (rls.all_secured) {
-          console.log(import_chalk8.default.green(`   \u2705 RLS Audit Passed (${rls.table_count} tables secured)`));
+          console.log(import_chalk11.default.green(`   \u2705 RLS Audit Passed (${rls.table_count} tables secured)`));
         } else {
-          console.log(import_chalk8.default.red(`   \u{1F6D1} CRITICAL: Security Vulnerability! ${rls.unsecured?.length || 0} tables have RLS disabled.`));
+          console.log(import_chalk11.default.red(`   \u{1F6D1} CRITICAL: Security Vulnerability! ${rls.unsecured?.length || 0} tables have RLS disabled.`));
           rls.unsecured?.forEach((table) => {
-            console.log(import_chalk8.default.red(`      - ${table}`));
+            console.log(import_chalk11.default.red(`      - ${table}`));
           });
-          console.log(import_chalk8.default.yellow('      Enable RLS immediately: ALTER TABLE "table" ENABLE ROW LEVEL SECURITY;'));
+          console.log(import_chalk11.default.yellow('      Enable RLS immediately: ALTER TABLE "table" ENABLE ROW LEVEL SECURITY;'));
         }
       }
       if (guardian_violations) {
         if (guardian_violations.count === 0) {
-          console.log(import_chalk8.default.green("   \u2705 Guardian: No active violations"));
+          console.log(import_chalk11.default.green("   \u2705 Guardian: No active violations"));
         } else {
-          console.log(import_chalk8.default.yellow(`   \u26A0\uFE0F Guardian: ${guardian_violations.count} active violations`));
-          console.log(import_chalk8.default.dim('      Run "rigstate check" for details.'));
+          console.log(import_chalk11.default.yellow(`   \u26A0\uFE0F Guardian: ${guardian_violations.count} active violations`));
+          console.log(import_chalk11.default.dim('      Run "rigstate check" for details.'));
         }
       }
     }
   } catch (e) {
-    console.log(import_chalk8.default.dim("   (System integrity check skipped - API endpoint not available)"));
+    console.log(import_chalk11.default.dim("   (System integrity check skipped - API endpoint not available)"));
   }
 }
 
 // src/commands/init.ts
 init_cjs_shims();
-var import_commander6 = require("commander");
-var import_chalk9 = __toESM(require("chalk"), 1);
-var import_promises10 = __toESM(require("fs/promises"), 1);
-var import_path10 = __toESM(require("path"), 1);
-var import_ora4 = __toESM(require("ora"), 1);
+var import_commander9 = require("commander");
+var import_chalk12 = __toESM(require("chalk"), 1);
+var import_promises12 = __toESM(require("fs/promises"), 1);
+var import_path12 = __toESM(require("path"), 1);
+var import_ora6 = __toESM(require("ora"), 1);
 var import_child_process = require("child_process");
 
 // src/utils/manifest.ts
 init_cjs_shims();
-var import_promises9 = __toESM(require("fs/promises"), 1);
-var import_path9 = __toESM(require("path"), 1);
+var import_promises11 = __toESM(require("fs/promises"), 1);
+var import_path11 = __toESM(require("path"), 1);
 async function loadManifest() {
   try {
-    const manifestPath = import_path9.default.join(process.cwd(), ".rigstate");
-    const content = await import_promises9.default.readFile(manifestPath, "utf-8");
+    const manifestPath = import_path11.default.join(process.cwd(), ".rigstate");
+    const content = await import_promises11.default.readFile(manifestPath, "utf-8");
     return JSON.parse(content);
   } catch {
     return null;
@@ -1181,15 +1615,15 @@ async function loadManifest() {
 
 // src/commands/init.ts
 init_config();
-var import_axios6 = __toESM(require("axios"), 1);
+var import_axios8 = __toESM(require("axios"), 1);
 function createInitCommand() {
-  return new import_commander6.Command("init").description("Initialize or link a Rigstate project (interactive mode available)").argument("[project-id]", "ID of the project to link (optional, prompts if not provided)").option("-f, --force", "Overwrite existing .cursorrules file").option("--rules-only", "Only regenerate .cursorrules without interactive setup").action(async (projectIdArg, options) => {
-    const spinner = (0, import_ora4.default)("Initializing Rigstate project...").start();
+  return new import_commander9.Command("init").description("Initialize or link a Rigstate project (interactive mode available)").argument("[project-id]", "ID of the project to link (optional, prompts if not provided)").option("-f, --force", "Overwrite existing .cursorrules file").option("--rules-only", "Only regenerate .cursorrules without interactive setup").action(async (projectIdArg, options) => {
+    const spinner = (0, import_ora6.default)("Initializing Rigstate project...").start();
     let apiKey;
     try {
       apiKey = getApiKey();
     } catch (e) {
-      spinner.fail(import_chalk9.default.red('Not authenticated. Run "rigstate login" first.'));
+      spinner.fail(import_chalk12.default.red('Not authenticated. Run "rigstate login" first.'));
       return;
     }
     const apiUrl = getApiUrl();
@@ -1211,7 +1645,7 @@ function createInitCommand() {
         spinner.start("Fetching your projects...");
         let projects = [];
         try {
-          const projectsResponse = await import_axios6.default.get(`${apiUrl}/api/v1/projects`, {
+          const projectsResponse = await import_axios8.default.get(`${apiUrl}/api/v1/projects`, {
             headers: { Authorization: `Bearer ${apiKey}` }
           });
           if (projectsResponse.data.success) {
@@ -1263,7 +1697,7 @@ function createInitCommand() {
             spinner.start("Fetching organizations...");
             let orgs = [];
             try {
-              const orgsResponse = await import_axios6.default.get(`${apiUrl}/api/v1/organizations`, {
+              const orgsResponse = await import_axios8.default.get(`${apiUrl}/api/v1/organizations`, {
                 headers: { Authorization: `Bearer ${apiKey}` }
               });
               orgs = orgsResponse.data.data?.organizations || [];
@@ -1286,25 +1720,25 @@ function createInitCommand() {
               selectedOrgId = orgId;
             }
             if (!selectedOrgId) {
-              console.log(import_chalk9.default.yellow("No organization available. Please create the project via the Rigstate dashboard."));
+              console.log(import_chalk12.default.yellow("No organization available. Please create the project via the Rigstate dashboard."));
               return;
             }
             spinner.start("Creating new project...");
             try {
-              const createResponse = await import_axios6.default.post(`${apiUrl}/api/v1/projects`, {
+              const createResponse = await import_axios8.default.post(`${apiUrl}/api/v1/projects`, {
                 name: newName,
                 organization_id: selectedOrgId
               }, {
                 headers: { Authorization: `Bearer ${apiKey}` }
               });
               if (!createResponse.data.success) {
-                spinner.fail(import_chalk9.default.red("Failed to create project: " + createResponse.data.error));
+                spinner.fail(import_chalk12.default.red("Failed to create project: " + createResponse.data.error));
                 return;
               }
               projectId = createResponse.data.data.project.id;
-              spinner.succeed(import_chalk9.default.green(`Created new project: ${newName}`));
+              spinner.succeed(import_chalk12.default.green(`Created new project: ${newName}`));
             } catch (e) {
-              spinner.fail(import_chalk9.default.red("Project creation API not available. Please create via dashboard."));
+              spinner.fail(import_chalk12.default.red("Project creation API not available. Please create via dashboard."));
               return;
             }
           } else {
@@ -1314,35 +1748,35 @@ function createInitCommand() {
         spinner.start(`Linking to project ID: ${projectId}...`);
       }
       setProjectId(projectId);
-      const manifestPath = import_path10.default.join(process.cwd(), ".rigstate");
+      const manifestPath = import_path12.default.join(process.cwd(), ".rigstate");
       const manifestContent = {
         project_id: projectId,
         last_linked: (/* @__PURE__ */ new Date()).toISOString(),
         api_url: apiUrl
       };
-      await import_promises10.default.writeFile(manifestPath, JSON.stringify(manifestContent, null, 2), "utf-8");
+      await import_promises12.default.writeFile(manifestPath, JSON.stringify(manifestContent, null, 2), "utf-8");
       try {
-        await import_promises10.default.access(".git");
+        await import_promises12.default.access(".git");
       } catch {
         spinner.text = "Initializing git repository...";
         (0, import_child_process.execSync)("git init", { stdio: "ignore" });
       }
-      spinner.succeed(import_chalk9.default.green(`\u2705 Linked to project: ${projectId}`));
+      spinner.succeed(import_chalk12.default.green(`\u2705 Linked to project: ${projectId}`));
       await generateRules(apiUrl, apiKey, projectId, options.force, spinner);
       console.log("");
-      console.log(import_chalk9.default.blue("Next steps:"));
-      console.log(import_chalk9.default.dim("  rigstate sync     - Sync roadmap and context"));
-      console.log(import_chalk9.default.dim("  rigstate watch    - Start development loop"));
-      console.log(import_chalk9.default.dim("  rigstate focus    - Get current task"));
+      console.log(import_chalk12.default.blue("Next steps:"));
+      console.log(import_chalk12.default.dim("  rigstate sync     - Sync roadmap and context"));
+      console.log(import_chalk12.default.dim("  rigstate watch    - Start development loop"));
+      console.log(import_chalk12.default.dim("  rigstate focus    - Get current task"));
     } catch (e) {
-      spinner.fail(import_chalk9.default.red("Initialization failed: " + e.message));
+      spinner.fail(import_chalk12.default.red("Initialization failed: " + e.message));
     }
   });
 }
 async function generateRules(apiUrl, apiKey, projectId, force, spinner) {
   spinner.start("Generating AI rules (MDC + AGENTS.md)...");
   try {
-    const response = await import_axios6.default.post(`${apiUrl}/api/v1/rules/generate`, {
+    const response = await import_axios8.default.post(`${apiUrl}/api/v1/rules/generate`, {
       project_id: projectId
     }, {
       headers: { Authorization: `Bearer ${apiKey}` }
@@ -1350,67 +1784,67 @@ async function generateRules(apiUrl, apiKey, projectId, force, spinner) {
     if (response.data.success || response.data.files) {
       const files = response.data.files || [];
       if (files.length === 0 && response.data.rules) {
-        const rulesPath = import_path10.default.join(process.cwd(), ".cursorrules");
-        await import_promises10.default.writeFile(rulesPath, response.data.rules, "utf-8");
-        spinner.succeed(import_chalk9.default.green("\u2714 Generated .cursorrules (legacy mode)"));
+        const rulesPath = import_path12.default.join(process.cwd(), ".cursorrules");
+        await import_promises12.default.writeFile(rulesPath, response.data.rules, "utf-8");
+        spinner.succeed(import_chalk12.default.green("\u2714 Generated .cursorrules (legacy mode)"));
         return;
       }
       for (const file of files) {
-        const targetPath = import_path10.default.join(process.cwd(), file.path);
-        const targetDir = import_path10.default.dirname(targetPath);
-        await import_promises10.default.mkdir(targetDir, { recursive: true });
+        const targetPath = import_path12.default.join(process.cwd(), file.path);
+        const targetDir = import_path12.default.dirname(targetPath);
+        await import_promises12.default.mkdir(targetDir, { recursive: true });
         try {
-          await import_promises10.default.access(targetPath);
+          await import_promises12.default.access(targetPath);
           if (!force && !file.path.startsWith(".cursor/rules/")) {
-            console.log(import_chalk9.default.dim(`  ${file.path} already exists. Skipping.`));
+            console.log(import_chalk12.default.dim(`  ${file.path} already exists. Skipping.`));
             continue;
           }
         } catch {
         }
-        await import_promises10.default.writeFile(targetPath, file.content, "utf-8");
+        await import_promises12.default.writeFile(targetPath, file.content, "utf-8");
       }
       if (files.length > 0) {
-        const legacyPath = import_path10.default.join(process.cwd(), ".cursorrules");
+        const legacyPath = import_path12.default.join(process.cwd(), ".cursorrules");
         try {
-          const stats = await import_promises10.default.stat(legacyPath);
+          const stats = await import_promises12.default.stat(legacyPath);
           if (stats.isFile()) {
-            await import_promises10.default.rename(legacyPath, `${legacyPath}.bak`);
-            console.log(import_chalk9.default.dim("  Moved legacy .cursorrules to .cursorrules.bak"));
+            await import_promises12.default.rename(legacyPath, `${legacyPath}.bak`);
+            console.log(import_chalk12.default.dim("  Moved legacy .cursorrules to .cursorrules.bak"));
           }
         } catch (e) {
         }
       }
-      spinner.succeed(import_chalk9.default.green(`\u2714 Generated ${files.length} rule files (v${response.data.version || "3.0"})`));
+      spinner.succeed(import_chalk12.default.green(`\u2714 Generated ${files.length} rule files (v${response.data.version || "3.0"})`));
     } else {
-      spinner.info(import_chalk9.default.dim("  Rules generation skipped (API response invalid)"));
+      spinner.info(import_chalk12.default.dim("  Rules generation skipped (API response invalid)"));
     }
   } catch (e) {
-    spinner.info(import_chalk9.default.dim(`  Rules generation failed: ${e.message}`));
+    spinner.info(import_chalk12.default.dim(`  Rules generation failed: ${e.message}`));
   }
 }
 
 // src/commands/check.ts
 init_cjs_shims();
-var import_commander7 = require("commander");
-var import_chalk11 = __toESM(require("chalk"), 1);
-var import_ora5 = __toESM(require("ora"), 1);
-var import_axios7 = __toESM(require("axios"), 1);
+var import_commander10 = require("commander");
+var import_chalk14 = __toESM(require("chalk"), 1);
+var import_ora7 = __toESM(require("ora"), 1);
+var import_axios9 = __toESM(require("axios"), 1);
 var import_glob3 = require("glob");
-var import_promises12 = __toESM(require("fs/promises"), 1);
-var import_path12 = __toESM(require("path"), 1);
+var import_promises14 = __toESM(require("fs/promises"), 1);
+var import_path14 = __toESM(require("path"), 1);
 var import_child_process2 = require("child_process");
 init_config();
 
 // src/utils/rule-engine.ts
 init_cjs_shims();
-var import_promises11 = __toESM(require("fs/promises"), 1);
-var import_path11 = __toESM(require("path"), 1);
-var import_chalk10 = __toESM(require("chalk"), 1);
+var import_promises13 = __toESM(require("fs/promises"), 1);
+var import_path13 = __toESM(require("path"), 1);
+var import_chalk13 = __toESM(require("chalk"), 1);
 async function checkFile(filePath, rules, rootPath) {
   const violations = [];
-  const relativePath = import_path11.default.relative(rootPath, filePath);
+  const relativePath = import_path13.default.relative(rootPath, filePath);
   try {
-    const content = await import_promises11.default.readFile(filePath, "utf-8");
+    const content = await import_promises13.default.readFile(filePath, "utf-8");
     const lines = content.split("\n");
     for (const rule of rules) {
       const ruleViolations = await evaluateRule(rule, content, lines, relativePath);
@@ -1501,7 +1935,7 @@ async function evaluateRule(rule, content, lines, filePath) {
     case "NAMING_CONVENTION": {
       const value = rule.value;
       const pattern = new RegExp(value.pattern);
-      const fileName = import_path11.default.basename(filePath);
+      const fileName = import_path13.default.basename(filePath);
       if (filePath.includes(value.context) && !pattern.test(fileName)) {
         violations.push({
           file: filePath,
@@ -1560,12 +1994,12 @@ function checkFunctionLines(content, lines, filePath, rule, limit) {
 }
 function formatViolations(violations) {
   for (const v of violations) {
-    const severityColor = v.severity === "critical" ? import_chalk10.default.red : v.severity === "warning" ? import_chalk10.default.yellow : import_chalk10.default.blue;
-    const lineInfo = v.line ? import_chalk10.default.dim(`:${v.line}`) : "";
+    const severityColor = v.severity === "critical" ? import_chalk13.default.red : v.severity === "warning" ? import_chalk13.default.yellow : import_chalk13.default.blue;
+    const lineInfo = v.line ? import_chalk13.default.dim(`:${v.line}`) : "";
     console.log(`  ${severityColor(`[${v.severity.toUpperCase()}]`)} ${v.file}${lineInfo}`);
     console.log(`    ${v.message}`);
     if (v.details) {
-      console.log(`    ${import_chalk10.default.dim(v.details)}`);
+      console.log(`    ${import_chalk13.default.dim(v.details)}`);
     }
   }
 }
@@ -1594,8 +2028,8 @@ var CACHE_FILE2 = ".rigstate/rules-cache.json";
 var CACHE_TTL_MS = 5 * 60 * 1e3;
 var CACHE_MAX_AGE_MS = 24 * 60 * 60 * 1e3;
 function createCheckCommand() {
-  return new import_commander7.Command("check").description("Validate code against Guardian architectural rules").argument("[path]", "Directory or file to check", ".").option("--project <id>", "Project ID (or use .rigstate manifest)").option("--strict [level]", 'Exit 1 on violations. Level: "all" (default) or "critical"').option("--staged", "Only check git staged files (for pre-commit hooks)").option("--json", "Output results as JSON").option("--no-cache", "Skip rule cache and fetch fresh from API").action(async (targetPath, options) => {
-    const spinner = (0, import_ora5.default)();
+  return new import_commander10.Command("check").description("Validate code against Guardian architectural rules").argument("[path]", "Directory or file to check", ".").option("--project <id>", "Project ID (or use .rigstate manifest)").option("--strict [level]", 'Exit 1 on violations. Level: "all" (default) or "critical"').option("--staged", "Only check git staged files (for pre-commit hooks)").option("--json", "Output results as JSON").option("--no-cache", "Skip rule cache and fetch fresh from API").action(async (targetPath, options) => {
+    const spinner = (0, import_ora7.default)();
     try {
       let projectId = options.project;
       let apiUrl = getApiUrl();
@@ -1610,15 +2044,15 @@ function createCheckCommand() {
         projectId = getProjectId();
       }
       if (!projectId) {
-        console.log(import_chalk11.default.red("\u274C No project context found."));
-        console.log(import_chalk11.default.dim('   Run "rigstate link" or pass --project <id>'));
+        console.log(import_chalk14.default.red("\u274C No project context found."));
+        console.log(import_chalk14.default.dim('   Run "rigstate link" or pass --project <id>'));
         process.exit(2);
       }
       let apiKey;
       try {
         apiKey = getApiKey();
       } catch {
-        console.log(import_chalk11.default.red('\u274C Not authenticated. Run "rigstate login" first.'));
+        console.log(import_chalk14.default.red('\u274C Not authenticated. Run "rigstate login" first.'));
         process.exit(2);
       }
       spinner.start("Fetching Guardian rules...");
@@ -1631,7 +2065,7 @@ function createCheckCommand() {
           settings = cached.settings;
           spinner.text = "Using cached rules...";
         } else {
-          const response = await import_axios7.default.get(`${apiUrl}/api/v1/guardian/rules`, {
+          const response = await import_axios9.default.get(`${apiUrl}/api/v1/guardian/rules`, {
             params: { project_id: projectId },
             headers: { Authorization: `Bearer ${apiKey}` },
             timeout: 1e4
@@ -1646,17 +2080,17 @@ function createCheckCommand() {
       } catch (apiError) {
         const cached = await loadCachedRules(projectId);
         if (cached && !isStale(cached.timestamp, CACHE_MAX_AGE_MS)) {
-          spinner.warn(import_chalk11.default.yellow("Using cached rules (API unavailable)"));
+          spinner.warn(import_chalk14.default.yellow("Using cached rules (API unavailable)"));
           rules = cached.rules;
           settings = cached.settings;
         } else {
-          spinner.fail(import_chalk11.default.red("Failed to fetch rules and no valid cache"));
-          console.log(import_chalk11.default.dim(`   Error: ${apiError.message}`));
+          spinner.fail(import_chalk14.default.red("Failed to fetch rules and no valid cache"));
+          console.log(import_chalk14.default.dim(`   Error: ${apiError.message}`));
           process.exit(2);
         }
       }
       spinner.succeed(`Loaded ${rules.length} Guardian rules`);
-      const scanPath = import_path12.default.resolve(process.cwd(), targetPath);
+      const scanPath = import_path14.default.resolve(process.cwd(), targetPath);
       let filesToCheck;
       if (options.staged) {
         spinner.start("Getting staged files...");
@@ -1665,14 +2099,14 @@ function createCheckCommand() {
             encoding: "utf-8",
             cwd: process.cwd()
           });
-          filesToCheck = stagedOutput.split("\n").filter((f) => f.trim()).filter((f) => isCodeFile2(f)).map((f) => import_path12.default.resolve(process.cwd(), f));
+          filesToCheck = stagedOutput.split("\n").filter((f) => f.trim()).filter((f) => isCodeFile2(f)).map((f) => import_path14.default.resolve(process.cwd(), f));
         } catch {
           spinner.fail("Not a git repository or no staged files");
           process.exit(2);
         }
       } else {
-        spinner.start(`Scanning ${import_chalk11.default.cyan(targetPath)}...`);
-        const pattern = import_path12.default.join(scanPath, "**/*");
+        spinner.start(`Scanning ${import_chalk14.default.cyan(targetPath)}...`);
+        const pattern = import_path14.default.join(scanPath, "**/*");
         const allFiles = await (0, import_glob3.glob)(pattern, {
           nodir: true,
           dot: false,
@@ -1688,7 +2122,7 @@ function createCheckCommand() {
         filesToCheck = allFiles.filter((f) => isCodeFile2(f));
       }
       if (filesToCheck.length === 0) {
-        spinner.warn(import_chalk11.default.yellow("No code files found to check."));
+        spinner.warn(import_chalk14.default.yellow("No code files found to check."));
         outputResults([], !!options.json);
         process.exit(0);
       }
@@ -1697,7 +2131,7 @@ function createCheckCommand() {
       const results = [];
       for (let i = 0; i < filesToCheck.length; i++) {
         const file = filesToCheck[i];
-        spinner.text = `Checking ${i + 1}/${filesToCheck.length}: ${import_path12.default.basename(file)}`;
+        spinner.text = `Checking ${i + 1}/${filesToCheck.length}: ${import_path14.default.basename(file)}`;
         const result = await checkFile(file, rules, process.cwd());
         results.push(result);
       }
@@ -1707,47 +2141,47 @@ function createCheckCommand() {
         outputResults(results, true);
       } else {
         outputResults(results, false);
-        console.log("\n" + import_chalk11.default.bold("\u{1F4CA} Summary"));
-        console.log(import_chalk11.default.dim("\u2500".repeat(50)));
-        console.log(`Files checked: ${import_chalk11.default.cyan(summary.totalFiles)}`);
-        console.log(`Total violations: ${summary.totalViolations > 0 ? import_chalk11.default.red(summary.totalViolations) : import_chalk11.default.green(0)}`);
+        console.log("\n" + import_chalk14.default.bold("\u{1F4CA} Summary"));
+        console.log(import_chalk14.default.dim("\u2500".repeat(50)));
+        console.log(`Files checked: ${import_chalk14.default.cyan(summary.totalFiles)}`);
+        console.log(`Total violations: ${summary.totalViolations > 0 ? import_chalk14.default.red(summary.totalViolations) : import_chalk14.default.green(0)}`);
         if (summary.totalViolations > 0) {
-          console.log(`  ${import_chalk11.default.red("Critical:")} ${summary.criticalCount}`);
-          console.log(`  ${import_chalk11.default.yellow("Warning:")} ${summary.warningCount}`);
-          console.log(`  ${import_chalk11.default.blue("Info:")} ${summary.infoCount}`);
+          console.log(`  ${import_chalk14.default.red("Critical:")} ${summary.criticalCount}`);
+          console.log(`  ${import_chalk14.default.yellow("Warning:")} ${summary.warningCount}`);
+          console.log(`  ${import_chalk14.default.blue("Info:")} ${summary.infoCount}`);
         }
-        console.log(import_chalk11.default.dim("\u2500".repeat(50)));
+        console.log(import_chalk14.default.dim("\u2500".repeat(50)));
       }
       if (options.strict !== void 0) {
         const strictLevel = typeof options.strict === "string" ? options.strict : "all";
         if (strictLevel === "critical" && summary.criticalCount > 0) {
-          console.log(import_chalk11.default.red("\n\u274C Check failed: Critical violations found"));
+          console.log(import_chalk14.default.red("\n\u274C Check failed: Critical violations found"));
           process.exit(1);
         } else if (strictLevel === "all" && summary.totalViolations > 0) {
-          console.log(import_chalk11.default.red("\n\u274C Check failed: Violations found"));
+          console.log(import_chalk14.default.red("\n\u274C Check failed: Violations found"));
           process.exit(1);
         }
       }
       if (summary.totalViolations === 0) {
-        console.log(import_chalk11.default.green("\n\u2705 All checks passed!"));
+        console.log(import_chalk14.default.green("\n\u2705 All checks passed!"));
       }
       process.exit(0);
     } catch (error) {
-      spinner.fail(import_chalk11.default.red("Check failed"));
-      console.error(import_chalk11.default.red("Error:"), error.message);
+      spinner.fail(import_chalk14.default.red("Check failed"));
+      console.error(import_chalk14.default.red("Error:"), error.message);
       process.exit(2);
     }
   });
 }
 function isCodeFile2(filePath) {
   const codeExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
-  const ext = import_path12.default.extname(filePath).toLowerCase();
+  const ext = import_path14.default.extname(filePath).toLowerCase();
   return codeExtensions.includes(ext);
 }
 async function loadCachedRules(projectId) {
   try {
-    const cachePath = import_path12.default.join(process.cwd(), CACHE_FILE2);
-    const content = await import_promises12.default.readFile(cachePath, "utf-8");
+    const cachePath = import_path14.default.join(process.cwd(), CACHE_FILE2);
+    const content = await import_promises14.default.readFile(cachePath, "utf-8");
     const cached = JSON.parse(content);
     if (cached.projectId !== projectId) {
       return null;
@@ -1759,16 +2193,16 @@ async function loadCachedRules(projectId) {
 }
 async function saveCachedRules(projectId, rules, settings) {
   try {
-    const cacheDir = import_path12.default.join(process.cwd(), ".rigstate");
-    await import_promises12.default.mkdir(cacheDir, { recursive: true });
+    const cacheDir = import_path14.default.join(process.cwd(), ".rigstate");
+    await import_promises14.default.mkdir(cacheDir, { recursive: true });
     const cached = {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       projectId,
       rules,
       settings
     };
-    await import_promises12.default.writeFile(
-      import_path12.default.join(cacheDir, "rules-cache.json"),
+    await import_promises14.default.writeFile(
+      import_path14.default.join(cacheDir, "rules-cache.json"),
       JSON.stringify(cached, null, 2)
     );
   } catch {
@@ -1781,212 +2215,111 @@ function isStale(timestamp, maxAge) {
 function outputResults(results, json) {
   if (json) {
     console.log(JSON.stringify({
-      results,
-      summary: summarizeResults(results)
-    }, null, 2));
-    return;
-  }
-  const hasViolations = results.some((r) => r.violations.length > 0);
-  if (!hasViolations) {
-    return;
-  }
-  console.log("\n" + import_chalk11.default.bold("\u{1F50D} Violations Found"));
-  console.log(import_chalk11.default.dim("\u2500".repeat(50)));
-  for (const result of results) {
-    if (result.violations.length > 0) {
-      formatViolations(result.violations);
-    }
-  }
-}
-
-// src/commands/hooks.ts
-init_cjs_shims();
-var import_commander8 = require("commander");
-var import_chalk12 = __toESM(require("chalk"), 1);
-var import_promises13 = __toESM(require("fs/promises"), 1);
-var import_path13 = __toESM(require("path"), 1);
-var PRE_COMMIT_SCRIPT = `#!/bin/sh
-# Rigstate Guardian Pre-commit Hook
-# Installed by: rigstate hooks install
-
-# 1. Silent Sentinel Check (Phase 5)
-if [ -f .rigstate/guardian.lock ]; then
-    echo "\u{1F6D1} INTERVENTION ACTIVE: Commit blocked by Silent Sentinel."
-    echo "   A critical violation ('HARD_LOCK') was detected by the Guardian Daemon."
-    echo "   Please fix the violation to unlock the repo."
-    echo ""
-    if grep -q "HARD_LOCK_ACTIVE" .rigstate/guardian.lock; then
-        cat .rigstate/guardian.lock
-    fi
-    exit 1
-fi
-
-echo "\u{1F6E1}\uFE0F  Running Guardian checks..."
-
-# Run check with strict mode for critical violations
-rigstate check --staged --strict=critical
-
-# Exit with the same code as rigstate check
-exit $?
-`;
-function createHooksCommand() {
-  const hooks = new import_commander8.Command("hooks").description("Manage git hooks for Guardian integration");
-  hooks.command("install").description("Install pre-commit hook to run Guardian checks").option("--strict [level]", 'Strict level: "all" or "critical" (default)', "critical").action(async (options) => {
-    try {
-      const gitDir = import_path13.default.join(process.cwd(), ".git");
-      try {
-        await import_promises13.default.access(gitDir);
-      } catch {
-        console.log(import_chalk12.default.red("\u274C Not a git repository."));
-        console.log(import_chalk12.default.dim('   Initialize with "git init" first.'));
-        process.exit(1);
-      }
-      const hooksDir = import_path13.default.join(gitDir, "hooks");
-      await import_promises13.default.mkdir(hooksDir, { recursive: true });
-      const preCommitPath = import_path13.default.join(hooksDir, "pre-commit");
-      let existingContent = "";
-      try {
-        existingContent = await import_promises13.default.readFile(preCommitPath, "utf-8");
-        if (existingContent.includes("rigstate")) {
-          console.log(import_chalk12.default.yellow("\u26A0 Rigstate pre-commit hook already installed."));
-          console.log(import_chalk12.default.dim('   Use "rigstate hooks uninstall" to remove first.'));
-          return;
-        }
-      } catch {
-      }
-      let script = PRE_COMMIT_SCRIPT;
-      if (options.strict === "all") {
-        script = script.replace("--strict=critical", "--strict");
-      }
-      if (existingContent && !existingContent.includes("rigstate")) {
-        const combinedScript = existingContent + "\n\n" + script.replace("#!/bin/sh\n", "");
-        await import_promises13.default.writeFile(preCommitPath, combinedScript, { mode: 493 });
-        console.log(import_chalk12.default.green("\u2705 Rigstate hook appended to existing pre-commit."));
-      } else {
-        await import_promises13.default.writeFile(preCommitPath, script, { mode: 493 });
-        console.log(import_chalk12.default.green("\u2705 Pre-commit hook installed!"));
-      }
-      console.log(import_chalk12.default.dim(`   Path: ${preCommitPath}`));
-      console.log(import_chalk12.default.dim(`   Strict level: ${options.strict}`));
-      console.log("");
-      console.log(import_chalk12.default.cyan("Guardian will now check your code before each commit."));
-      console.log(import_chalk12.default.dim('Use "rigstate hooks uninstall" to remove the hook.'));
-    } catch (error) {
-      console.error(import_chalk12.default.red("Failed to install hook:"), error.message);
-      process.exit(1);
-    }
-  });
-  hooks.command("uninstall").description("Remove Rigstate pre-commit hook").action(async () => {
-    try {
-      const preCommitPath = import_path13.default.join(process.cwd(), ".git", "hooks", "pre-commit");
-      try {
-        const content = await import_promises13.default.readFile(preCommitPath, "utf-8");
-        if (!content.includes("rigstate")) {
-          console.log(import_chalk12.default.yellow("\u26A0 No Rigstate hook found in pre-commit."));
-          return;
-        }
-        if (content.includes("# Rigstate Guardian Pre-commit Hook") && content.trim().split("\n").filter((l) => l && !l.startsWith("#")).length <= 4) {
-          await import_promises13.default.unlink(preCommitPath);
-          console.log(import_chalk12.default.green("\u2705 Pre-commit hook removed."));
-        } else {
-          const lines = content.split("\n");
-          const filteredLines = [];
-          let inRigstateSection = false;
-          for (const line of lines) {
-            if (line.includes("Rigstate Guardian Pre-commit Hook")) {
-              inRigstateSection = true;
-              continue;
-            }
-            if (inRigstateSection && line.includes("exit $?")) {
-              inRigstateSection = false;
-              continue;
-            }
-            if (!inRigstateSection && !line.includes("rigstate check")) {
-              filteredLines.push(line);
-            }
-          }
-          await import_promises13.default.writeFile(preCommitPath, filteredLines.join("\n"), { mode: 493 });
-          console.log(import_chalk12.default.green("\u2705 Rigstate section removed from pre-commit hook."));
-        }
-      } catch {
-        console.log(import_chalk12.default.yellow("\u26A0 No pre-commit hook found."));
-      }
-    } catch (error) {
-      console.error(import_chalk12.default.red("Failed to uninstall hook:"), error.message);
-      process.exit(1);
+      results,
+      summary: summarizeResults(results)
+    }, null, 2));
+    return;
+  }
+  const hasViolations = results.some((r) => r.violations.length > 0);
+  if (!hasViolations) {
+    return;
+  }
+  console.log("\n" + import_chalk14.default.bold("\u{1F50D} Violations Found"));
+  console.log(import_chalk14.default.dim("\u2500".repeat(50)));
+  for (const result of results) {
+    if (result.violations.length > 0) {
+      formatViolations(result.violations);
     }
-  });
-  return hooks;
+  }
 }
 
+// src/index.ts
+init_hooks();
+
 // src/commands/daemon.ts
 init_cjs_shims();
-var import_commander9 = require("commander");
-var import_chalk15 = __toESM(require("chalk"), 1);
-var import_ora6 = __toESM(require("ora"), 1);
-var import_promises16 = __toESM(require("fs/promises"), 1);
-var import_path18 = __toESM(require("path"), 1);
+var import_commander11 = require("commander");
+var import_chalk17 = __toESM(require("chalk"), 1);
+var import_ora8 = __toESM(require("ora"), 1);
+var import_promises17 = __toESM(require("fs/promises"), 1);
+var import_path19 = __toESM(require("path"), 1);
 
 // src/daemon/factory.ts
 init_cjs_shims();
 
 // src/daemon/core.ts
 init_cjs_shims();
-var import_chalk14 = __toESM(require("chalk"), 1);
-var fs16 = __toESM(require("fs/promises"), 1);
+var import_chalk16 = __toESM(require("chalk"), 1);
+var fs17 = __toESM(require("fs/promises"), 1);
 var import_events3 = require("events");
 
 // src/daemon/file-watcher.ts
 init_cjs_shims();
 var chokidar = __toESM(require("chokidar"), 1);
-var import_path14 = __toESM(require("path"), 1);
+var import_path15 = __toESM(require("path"), 1);
 var import_events = require("events");
 var CODE_EXTENSIONS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
 function isCodeFile3(filePath) {
-  const ext = import_path14.default.extname(filePath).toLowerCase();
+  const ext = import_path15.default.extname(filePath).toLowerCase();
   return CODE_EXTENSIONS.includes(ext);
 }
 function createFileWatcher(watchPath) {
   const emitter = new import_events.EventEmitter();
   let watcher = null;
   emitter.start = () => {
-    const absolutePath = import_path14.default.resolve(process.cwd(), watchPath);
+    const absolutePath = import_path15.default.resolve(process.cwd(), watchPath);
     watcher = chokidar.watch(absolutePath, {
-      ignored: (path23) => {
-        if (path23.includes("node_modules")) return true;
-        if (path23.includes(".git")) return true;
-        if (path23.includes(".next")) return true;
-        if (path23.includes("dist")) return true;
-        if (path23.includes("build")) return true;
-        if (path23.includes(".rigstate")) return true;
-        if (path23.includes("coverage")) return true;
+      ignored: (absolutePath2) => {
+        const relPath = import_path15.default.relative(process.cwd(), absolutePath2);
+        const ignoredDirs = /* @__PURE__ */ new Set([
+          "node_modules",
+          ".git",
+          ".next",
+          ".turbo",
+          "dist",
+          "build",
+          ".rigstate",
+          "coverage",
+          ".DS_Store",
+          "tmp",
+          "temp",
+          "vendor",
+          ".cache",
+          "public"
+          // Usually static assets, not code
+        ]);
+        const segments = relPath.split(import_path15.default.sep);
+        if (segments.some((s) => ignoredDirs.has(s))) {
+          return true;
+        }
         return false;
       },
       persistent: true,
       ignoreInitial: true,
-      depth: 15,
+      ignorePermissionErrors: true,
+      // Don't crash on EPERM
+      depth: 20,
       awaitWriteFinish: {
-        stabilityThreshold: 200,
+        stabilityThreshold: 300,
         pollInterval: 100
       },
       usePolling: false,
-      // Use native events when possible
-      interval: 300,
-      binaryInterval: 1e3
+      atomic: true
+      // Handle atomic writes (like vim/saving) better
     });
     watcher.on("change", (filePath) => {
       if (isCodeFile3(filePath)) {
-        emitter.emit("change", import_path14.default.relative(process.cwd(), filePath));
+        emitter.emit("change", import_path15.default.relative(process.cwd(), filePath));
       }
     });
     watcher.on("add", (filePath) => {
       if (isCodeFile3(filePath)) {
-        emitter.emit("add", import_path14.default.relative(process.cwd(), filePath));
+        emitter.emit("add", import_path15.default.relative(process.cwd(), filePath));
       }
     });
     watcher.on("unlink", (filePath) => {
       if (isCodeFile3(filePath)) {
-        emitter.emit("unlink", import_path14.default.relative(process.cwd(), filePath));
+        emitter.emit("unlink", import_path15.default.relative(process.cwd(), filePath));
       }
     });
     watcher.on("error", (error) => {
@@ -2007,10 +2340,10 @@ function createFileWatcher(watchPath) {
 
 // src/daemon/heuristic-engine.ts
 init_cjs_shims();
-var import_promises14 = require("fs/promises");
-var import_path15 = require("path");
-var import_path16 = __toESM(require("path"), 1);
-var import_axios8 = __toESM(require("axios"), 1);
+var import_promises15 = require("fs/promises");
+var import_path16 = require("path");
+var import_path17 = __toESM(require("path"), 1);
+var import_axios10 = __toESM(require("axios"), 1);
 var GLOBAL_HEURISTICS = [
   {
     skillId: "payment-expert",
@@ -2041,12 +2374,12 @@ var HeuristicEngine = class {
   rules = [];
   cachePath;
   constructor() {
-    this.cachePath = import_path16.default.join(process.cwd(), ".rigstate", "cache", "heuristics.json");
+    this.cachePath = import_path17.default.join(process.cwd(), ".rigstate", "cache", "heuristics.json");
     this.loadRules();
   }
   async loadRules() {
     try {
-      const cached = await (0, import_promises14.readFile)(this.cachePath, "utf-8");
+      const cached = await (0, import_promises15.readFile)(this.cachePath, "utf-8");
       const data = JSON.parse(cached);
       if (Array.isArray(data) && data.length > 0) {
         this.rules = data;
@@ -2058,9 +2391,9 @@ var HeuristicEngine = class {
   }
   async refreshRules(projectId, apiUrl, apiKey) {
     try {
-      await (0, import_promises14.mkdir)((0, import_path15.dirname)(this.cachePath), { recursive: true });
+      await (0, import_promises15.mkdir)((0, import_path16.dirname)(this.cachePath), { recursive: true });
       const endpoint = `${apiUrl}/api/v1/skills/triggers`;
-      const response = await import_axios8.default.get(endpoint, {
+      const response = await import_axios10.default.get(endpoint, {
         headers: {
           "x-api-key": apiKey,
           "Content-Type": "application/json"
@@ -2068,7 +2401,7 @@ var HeuristicEngine = class {
       });
       if (response.data && Array.isArray(response.data.triggers)) {
         const cloudRules = response.data.triggers;
-        await (0, import_promises14.writeFile)(this.cachePath, JSON.stringify(cloudRules, null, 2));
+        await (0, import_promises15.writeFile)(this.cachePath, JSON.stringify(cloudRules, null, 2));
         this.rules = cloudRules;
         return true;
       }
@@ -2078,7 +2411,7 @@ var HeuristicEngine = class {
   }
   async analyzeFile(filePath, metrics) {
     try {
-      const content = await (0, import_promises14.readFile)(filePath, "utf-8");
+      const content = await (0, import_promises15.readFile)(filePath, "utf-8");
       const matches = [];
       const activeRules = this.rules.length > 0 ? this.rules : GLOBAL_HEURISTICS;
       for (const heuristic of activeRules) {
@@ -2156,9 +2489,9 @@ function createHeuristicEngine() {
 
 // src/daemon/intervention-protocol.ts
 init_cjs_shims();
-var import_chalk13 = __toESM(require("chalk"), 1);
-var fs14 = __toESM(require("fs"), 1);
-var path16 = __toESM(require("path"), 1);
+var import_chalk15 = __toESM(require("chalk"), 1);
+var fs15 = __toESM(require("fs"), 1);
+var path17 = __toESM(require("path"), 1);
 var InterventionProtocol = class {
   activeViolators = /* @__PURE__ */ new Set();
   /**
@@ -2181,18 +2514,18 @@ var InterventionProtocol = class {
   }
   syncLockFile() {
     try {
-      const lockDir = path16.join(process.cwd(), ".rigstate");
-      if (!fs14.existsSync(lockDir)) fs14.mkdirSync(lockDir, { recursive: true });
-      const lockPath = path16.join(lockDir, "guardian.lock");
+      const lockDir = path17.join(process.cwd(), ".rigstate");
+      if (!fs15.existsSync(lockDir)) fs15.mkdirSync(lockDir, { recursive: true });
+      const lockPath = path17.join(lockDir, "guardian.lock");
       if (this.activeViolators.size > 0) {
         const content = `HARD_LOCK_ACTIVE
 Timestamp: ${(/* @__PURE__ */ new Date()).toISOString()}
 
 Blocking Files:
 ${Array.from(this.activeViolators).join("\n")}`;
-        fs14.writeFileSync(lockPath, content, "utf-8");
+        fs15.writeFileSync(lockPath, content, "utf-8");
       } else {
-        if (fs14.existsSync(lockPath)) fs14.unlinkSync(lockPath);
+        if (fs15.existsSync(lockPath)) fs15.unlinkSync(lockPath);
       }
     } catch (e) {
       console.error("Failed to sync guardian lock file:", e);
@@ -2246,11 +2579,11 @@ ${Array.from(this.activeViolators).join("\n")}`;
   enforce(decision) {
     if (decision.mode === "OPEN") return;
     const icon = decision.mode === "HARD_LOCK" ? "\u{1F6AB}" : "\u26A0\uFE0F";
-    const color = decision.mode === "HARD_LOCK" ? import_chalk13.default.bgRed.white.bold : import_chalk13.default.yellow.bold;
+    const color = decision.mode === "HARD_LOCK" ? import_chalk15.default.bgRed.white.bold : import_chalk15.default.yellow.bold;
     console.log("\n" + color(` ${icon} [${decision.mode}] INTERVENTION `));
-    console.log(import_chalk13.default.redBright(` ${decision.message}`));
+    console.log(import_chalk15.default.redBright(` ${decision.message}`));
     if (decision.blockCommit) {
-      console.log(import_chalk13.default.dim(" \u{1F512} Commit functionality is logically suspended until fixed."));
+      console.log(import_chalk15.default.dim(" \u{1F512} Commit functionality is logically suspended until fixed."));
     }
   }
 };
@@ -2260,9 +2593,9 @@ function createInterventionProtocol() {
 
 // src/daemon/guardian-monitor.ts
 init_cjs_shims();
-var import_axios9 = __toESM(require("axios"), 1);
-var import_promises15 = __toESM(require("fs/promises"), 1);
-var import_path17 = __toESM(require("path"), 1);
+var import_axios11 = __toESM(require("axios"), 1);
+var import_promises16 = __toESM(require("fs/promises"), 1);
+var import_path18 = __toESM(require("path"), 1);
 var CACHE_FILE3 = ".rigstate/rules-cache.json";
 var CACHE_TTL_MS2 = 5 * 60 * 1e3;
 function createGuardianMonitor(projectId, apiUrl, apiKey) {
@@ -2273,7 +2606,7 @@ function createGuardianMonitor(projectId, apiUrl, apiKey) {
       return;
     }
     try {
-      const response = await import_axios9.default.get(`${apiUrl}/api/v1/guardian/rules`, {
+      const response = await import_axios11.default.get(`${apiUrl}/api/v1/guardian/rules`, {
         params: { project_id: projectId },
         headers: { Authorization: `Bearer ${apiKey}` },
         timeout: 1e4
@@ -2303,7 +2636,7 @@ function createGuardianMonitor(projectId, apiUrl, apiKey) {
         passed: true
       };
     }
-    const absolutePath = import_path17.default.resolve(process.cwd(), filePath);
+    const absolutePath = import_path18.default.resolve(process.cwd(), filePath);
     return checkFile(absolutePath, rules, process.cwd());
   };
   const getRuleCount = () => rules.length;
@@ -2317,8 +2650,8 @@ function createGuardianMonitor(projectId, apiUrl, apiKey) {
 }
 async function loadCachedRules2(projectId) {
   try {
-    const cachePath = import_path17.default.join(process.cwd(), CACHE_FILE3);
-    const content = await import_promises15.default.readFile(cachePath, "utf-8");
+    const cachePath = import_path18.default.join(process.cwd(), CACHE_FILE3);
+    const content = await import_promises16.default.readFile(cachePath, "utf-8");
     const cached = JSON.parse(content);
     if (cached.projectId !== projectId) {
       return null;
@@ -2330,16 +2663,16 @@ async function loadCachedRules2(projectId) {
 }
 async function saveCachedRules2(projectId, rules) {
   try {
-    const cacheDir = import_path17.default.join(process.cwd(), ".rigstate");
-    await import_promises15.default.mkdir(cacheDir, { recursive: true });
+    const cacheDir = import_path18.default.join(process.cwd(), ".rigstate");
+    await import_promises16.default.mkdir(cacheDir, { recursive: true });
     const cached = {
       timestamp: (/* @__PURE__ */ new Date()).toISOString(),
       projectId,
       rules,
       settings: { lmax: 400, lmax_warning: 350 }
     };
-    await import_promises15.default.writeFile(
-      import_path17.default.join(cacheDir, "rules-cache.json"),
+    await import_promises16.default.writeFile(
+      import_path18.default.join(cacheDir, "rules-cache.json"),
       JSON.stringify(cached, null, 2)
     );
   } catch {
@@ -2348,7 +2681,7 @@ async function saveCachedRules2(projectId, rules) {
 
 // src/daemon/bridge-listener.ts
 init_cjs_shims();
-var import_axios10 = __toESM(require("axios"), 1);
+var import_axios12 = __toESM(require("axios"), 1);
 var import_events2 = require("events");
 var POLL_INTERVAL_MS = 5e3;
 function createBridgeListener(projectId, apiUrl, apiKey) {
@@ -2358,7 +2691,7 @@ function createBridgeListener(projectId, apiUrl, apiKey) {
   let lastCheckedId = null;
   const checkBridge = async () => {
     try {
-      const response = await import_axios10.default.get(`${apiUrl}/api/v1/agent/bridge`, {
+      const response = await import_axios12.default.get(`${apiUrl}/api/v1/agent/bridge`, {
         params: {
           project_id: projectId,
           action: "check"
@@ -2386,7 +2719,7 @@ function createBridgeListener(projectId, apiUrl, apiKey) {
   };
   const acknowledgePing = async (taskId) => {
     try {
-      await import_axios10.default.post(`${apiUrl}/api/v1/agent/bridge`, {
+      await import_axios12.default.post(`${apiUrl}/api/v1/agent/bridge`, {
         project_id: projectId,
         action: "update",
         bridge_id: taskId,
@@ -2419,10 +2752,10 @@ function createBridgeListener(projectId, apiUrl, apiKey) {
 
 // src/daemon/telemetry.ts
 init_cjs_shims();
-var import_axios11 = __toESM(require("axios"), 1);
+var import_axios13 = __toESM(require("axios"), 1);
 async function trackSkillUsage(apiUrl, apiKey, projectId, skillId) {
   try {
-    await import_axios11.default.post(`${apiUrl}/api/v1/skills/usage`, {
+    await import_axios13.default.post(`${apiUrl}/api/v1/skills/usage`, {
       projectId,
       skillName: skillId,
       status: "ACTIVATED"
@@ -2457,7 +2790,7 @@ var GuardianDaemon = class extends import_events3.EventEmitter {
   }
   async start() {
     if (this.state.isRunning) {
-      console.log(import_chalk14.default.yellow("Daemon is already running."));
+      console.log(import_chalk16.default.yellow("Daemon is already running."));
       return;
     }
     this.printWelcome();
@@ -2467,7 +2800,7 @@ var GuardianDaemon = class extends import_events3.EventEmitter {
     this.interventionProtocol = createInterventionProtocol();
     this.guardianMonitor = createGuardianMonitor(this.config.projectId, this.config.apiUrl, this.config.apiKey);
     await this.guardianMonitor.loadRules();
-    console.log(import_chalk14.default.green(`  \u2713 Loaded ${this.guardianMonitor.getRuleCount()} rules`));
+    console.log(import_chalk16.default.green(`  \u2713 Loaded ${this.guardianMonitor.getRuleCount()} rules`));
     await this.syncHeuristics();
     if (this.config.checkOnChange) {
       this.setupFileWatcher();
@@ -2479,34 +2812,34 @@ var GuardianDaemon = class extends import_events3.EventEmitter {
     this.emit("started", this.state);
   }
   printWelcome() {
-    console.log(import_chalk14.default.bold.blue("\n\u{1F6E1}\uFE0F  Guardian Daemon Starting..."));
-    console.log(import_chalk14.default.dim(`Project: ${this.config.projectId}`));
-    console.log(import_chalk14.default.dim(`Watch Path: ${this.config.watchPath}`));
-    console.log(import_chalk14.default.dim("\u2500".repeat(50)));
+    console.log(import_chalk16.default.bold.blue("\n\u{1F6E1}\uFE0F  Guardian Daemon Starting..."));
+    console.log(import_chalk16.default.dim(`Project: ${this.config.projectId}`));
+    console.log(import_chalk16.default.dim(`Watch Path: ${this.config.watchPath}`));
+    console.log(import_chalk16.default.dim("\u2500".repeat(50)));
   }
   printActive() {
-    console.log(import_chalk14.default.dim("\u2500".repeat(50)));
-    console.log(import_chalk14.default.green.bold("\u2705 Guardian Daemon is now active"));
-    console.log(import_chalk14.default.dim("Press Ctrl+C to stop\n"));
+    console.log(import_chalk16.default.dim("\u2500".repeat(50)));
+    console.log(import_chalk16.default.green.bold("\u2705 Guardian Daemon is now active"));
+    console.log(import_chalk16.default.dim("Press Ctrl+C to stop\n"));
   }
   async syncHeuristics() {
     if (!this.heuristicEngine) return;
     const synced = await this.heuristicEngine.refreshRules(this.config.projectId, this.config.apiUrl, this.config.apiKey);
-    if (synced) console.log(import_chalk14.default.green("  \u2713 Synced heuristic rules"));
+    if (synced) console.log(import_chalk16.default.green("  \u2713 Synced heuristic rules"));
   }
   setupFileWatcher() {
-    console.log(import_chalk14.default.dim("\u{1F4C2} Starting file watcher..."));
+    console.log(import_chalk16.default.dim("\u{1F4C2} Starting file watcher..."));
     this.fileWatcher = createFileWatcher(this.config.watchPath);
     this.fileWatcher.on("change", (path23) => this.handleFileChange(path23));
     this.fileWatcher.start();
-    console.log(import_chalk14.default.green("  \u2713 File watcher active"));
+    console.log(import_chalk16.default.green("  \u2713 File watcher active"));
   }
   async handleFileChange(filePath) {
     this.state.lastActivity = (/* @__PURE__ */ new Date()).toISOString();
-    if (this.config.verbose) console.log(import_chalk14.default.dim(`  \u{1F4DD} File changed: ${filePath}`));
+    if (this.config.verbose) console.log(import_chalk16.default.dim(`  \u{1F4DD} File changed: ${filePath}`));
     let lineCount = 0;
     try {
-      const content = await fs16.readFile(filePath, "utf-8");
+      const content = await fs17.readFile(filePath, "utf-8");
       lineCount = content.split("\n").length;
     } catch (e) {
     }
@@ -2516,8 +2849,8 @@ var GuardianDaemon = class extends import_events3.EventEmitter {
         rules: this.guardianMonitor.getRules()
       });
       for (const match of matches) {
-        console.log(import_chalk14.default.magenta(`  \u{1F4A1} PREDICTIVE ACTIVATION: ${match.skillId}`));
-        console.log(import_chalk14.default.dim(`     Reason: ${match.reason}`));
+        console.log(import_chalk16.default.magenta(`  \u{1F4A1} PREDICTIVE ACTIVATION: ${match.skillId}`));
+        console.log(import_chalk16.default.dim(`     Reason: ${match.reason}`));
         const decision = this.interventionProtocol.evaluateTrigger(match.skillId, match.confidence);
         this.interventionProtocol.enforce(decision);
         await jitProvisionSkill(match.skillId, this.config.apiUrl, this.config.apiKey, this.config.projectId, process.cwd());
@@ -2533,7 +2866,7 @@ var GuardianDaemon = class extends import_events3.EventEmitter {
         this.state.violationsFound += result.violations.length;
         this.emit("violation", { file: filePath, violations: result.violations });
         for (const v of result.violations) {
-          const color = v.severity === "critical" ? import_chalk14.default.red : v.severity === "warning" ? import_chalk14.default.yellow : import_chalk14.default.blue;
+          const color = v.severity === "critical" ? import_chalk16.default.red : v.severity === "warning" ? import_chalk16.default.yellow : import_chalk16.default.blue;
           console.log(color(`  [${v.severity.toUpperCase()}] ${filePath}: ${v.message}`));
           if (this.interventionProtocol) {
             const decision = this.interventionProtocol.evaluateViolation(v.message, v.severity);
@@ -2545,25 +2878,25 @@ var GuardianDaemon = class extends import_events3.EventEmitter {
     }
   }
   async setupBridge() {
-    console.log(import_chalk14.default.dim("\u{1F309} Connecting to Agent Bridge..."));
+    console.log(import_chalk16.default.dim("\u{1F309} Connecting to Agent Bridge..."));
     this.bridgeListener = createBridgeListener(this.config.projectId, this.config.apiUrl, this.config.apiKey);
     this.bridgeListener.on("task", (task) => {
       this.state.lastActivity = (/* @__PURE__ */ new Date()).toISOString();
       this.state.tasksProcessed++;
-      console.log(import_chalk14.default.cyan(`
+      console.log(import_chalk16.default.cyan(`
 \u{1F4E5} New task received: ${task.id}`));
       this.emit("task", task);
     });
     await this.bridgeListener.connect();
-    console.log(import_chalk14.default.green("  \u2713 Agent Bridge connected"));
+    console.log(import_chalk16.default.green("  \u2713 Agent Bridge connected"));
   }
   async stop() {
     if (!this.state.isRunning) return;
-    console.log(import_chalk14.default.dim("\n\u{1F6D1} Stopping Guardian Daemon..."));
+    console.log(import_chalk16.default.dim("\n\u{1F6D1} Stopping Guardian Daemon..."));
     if (this.fileWatcher) await this.fileWatcher.stop();
     if (this.bridgeListener) await this.bridgeListener.disconnect();
     this.state.isRunning = false;
-    console.log(import_chalk14.default.green("\u2713 Daemon stopped."));
+    console.log(import_chalk16.default.green("\u2713 Daemon stopped."));
     this.emit("stopped", this.state);
   }
   getState() {
@@ -2604,18 +2937,26 @@ async function createDaemon(options) {
 var PID_FILE = ".rigstate/daemon.pid";
 var STATE_FILE = ".rigstate/daemon.state.json";
 function createDaemonCommand() {
-  const daemon = new import_commander9.Command("daemon").description("Start the Guardian daemon for continuous monitoring");
+  const daemon = new import_commander11.Command("daemon").description("Start the Guardian daemon for continuous monitoring");
   daemon.argument("[action]", "Action: start (default) or status", "start").option("--project <id>", "Project ID (or use .rigstate manifest)").option("--path <path>", "Path to watch", ".").option("--no-bridge", "Disable Agent Bridge connection").option("--verbose", "Enable verbose output").action(async (action, options) => {
     if (action === "status") {
       await showStatus();
       return;
     }
-    const spinner = (0, import_ora6.default)();
+    if (action === "enable") {
+      await enableDaemon();
+      return;
+    }
+    if (action === "disable") {
+      await disableDaemon();
+      return;
+    }
+    const spinner = (0, import_ora8.default)();
     try {
       if (await isRunning()) {
-        console.log(import_chalk15.default.yellow("\u26A0 Another daemon instance may be running."));
-        console.log(import_chalk15.default.dim(`   Check ${PID_FILE} or run "rigstate daemon status"`));
-        console.log(import_chalk15.default.dim("   Use Ctrl+C to stop the running daemon first.\n"));
+        console.log(import_chalk17.default.yellow("\u26A0 Another daemon instance may be running."));
+        console.log(import_chalk17.default.dim(`   Check ${PID_FILE} or run "rigstate daemon status"`));
+        console.log(import_chalk17.default.dim("   Use Ctrl+C to stop the running daemon first.\n"));
       }
       spinner.start("Initializing Guardian Daemon...");
       const daemonInstance = await createDaemon({
@@ -2627,7 +2968,7 @@ function createDaemonCommand() {
       spinner.stop();
       await writePidFile();
       process.on("SIGINT", async () => {
-        console.log(import_chalk15.default.dim("\n\nShutting down..."));
+        console.log(import_chalk17.default.dim("\n\nShutting down..."));
         await daemonInstance.stop();
         await cleanupPidFile();
         process.exit(0);
@@ -2647,8 +2988,8 @@ function createDaemonCommand() {
       await new Promise(() => {
       });
     } catch (error) {
-      spinner.fail(import_chalk15.default.red("Failed to start daemon"));
-      console.error(import_chalk15.default.red("Error:"), error.message);
+      spinner.fail(import_chalk17.default.red("Failed to start daemon"));
+      console.error(import_chalk17.default.red("Error:"), error.message);
       process.exit(1);
     }
   });
@@ -2656,14 +2997,14 @@ function createDaemonCommand() {
 }
 async function isRunning() {
   try {
-    const pidPath = import_path18.default.join(process.cwd(), PID_FILE);
-    const content = await import_promises16.default.readFile(pidPath, "utf-8");
+    const pidPath = import_path19.default.join(process.cwd(), PID_FILE);
+    const content = await import_promises17.default.readFile(pidPath, "utf-8");
     const pid = parseInt(content.trim(), 10);
     try {
       process.kill(pid, 0);
       return true;
     } catch {
-      await import_promises16.default.unlink(pidPath);
+      await import_promises17.default.unlink(pidPath);
       return false;
     }
   } catch {
@@ -2672,86 +3013,176 @@ async function isRunning() {
 }
 async function writePidFile() {
   try {
-    const dir = import_path18.default.join(process.cwd(), ".rigstate");
-    await import_promises16.default.mkdir(dir, { recursive: true });
-    await import_promises16.default.writeFile(import_path18.default.join(dir, "daemon.pid"), process.pid.toString());
+    const dir = import_path19.default.join(process.cwd(), ".rigstate");
+    await import_promises17.default.mkdir(dir, { recursive: true });
+    await import_promises17.default.writeFile(import_path19.default.join(dir, "daemon.pid"), process.pid.toString());
   } catch {
   }
 }
 async function cleanupPidFile() {
   try {
-    await import_promises16.default.unlink(import_path18.default.join(process.cwd(), PID_FILE));
-    await import_promises16.default.unlink(import_path18.default.join(process.cwd(), STATE_FILE));
+    await import_promises17.default.unlink(import_path19.default.join(process.cwd(), PID_FILE));
+    await import_promises17.default.unlink(import_path19.default.join(process.cwd(), STATE_FILE));
   } catch {
   }
 }
 async function writeStateFile(state) {
   try {
-    const dir = import_path18.default.join(process.cwd(), ".rigstate");
-    await import_promises16.default.mkdir(dir, { recursive: true });
-    await import_promises16.default.writeFile(
-      import_path18.default.join(dir, "daemon.state.json"),
+    const dir = import_path19.default.join(process.cwd(), ".rigstate");
+    await import_promises17.default.mkdir(dir, { recursive: true });
+    await import_promises17.default.writeFile(
+      import_path19.default.join(dir, "daemon.state.json"),
       JSON.stringify(state, null, 2)
     );
   } catch {
   }
 }
 async function showStatus() {
-  console.log(import_chalk15.default.bold("\n\u{1F6E1}\uFE0F  Guardian Daemon Status\n"));
+  console.log(import_chalk17.default.bold("\n\u{1F6E1}\uFE0F  Guardian Daemon Status\n"));
   const running = await isRunning();
   if (!running) {
-    console.log(import_chalk15.default.yellow("Status: Not running"));
-    console.log(import_chalk15.default.dim('Use "rigstate daemon" to start.\n'));
+    console.log(import_chalk17.default.yellow("Status: Not running"));
+    console.log(import_chalk17.default.dim('Use "rigstate daemon" to start.\n'));
     return;
   }
-  console.log(import_chalk15.default.green("Status: Running"));
+  console.log(import_chalk17.default.green("Status: Running"));
   try {
-    const statePath = import_path18.default.join(process.cwd(), STATE_FILE);
-    const content = await import_promises16.default.readFile(statePath, "utf-8");
+    const statePath = import_path19.default.join(process.cwd(), STATE_FILE);
+    const content = await import_promises17.default.readFile(statePath, "utf-8");
     const state = JSON.parse(content);
-    console.log(import_chalk15.default.dim("\u2500".repeat(40)));
+    console.log(import_chalk17.default.dim("\u2500".repeat(40)));
     console.log(`Started at:      ${state.startedAt || "Unknown"}`);
     console.log(`Files checked:   ${state.filesChecked || 0}`);
     console.log(`Violations:      ${state.violationsFound || 0}`);
     console.log(`Tasks processed: ${state.tasksProcessed || 0}`);
     console.log(`Last activity:   ${state.lastActivity || "None"}`);
-    console.log(import_chalk15.default.dim("\u2500".repeat(40)));
+    console.log(import_chalk17.default.dim("\u2500".repeat(40)));
   } catch {
-    console.log(import_chalk15.default.dim("(State file not found)"));
+    console.log(import_chalk17.default.dim("(State file not found)"));
   }
   try {
-    const pidPath = import_path18.default.join(process.cwd(), PID_FILE);
-    const pid = await import_promises16.default.readFile(pidPath, "utf-8");
-    console.log(import_chalk15.default.dim(`PID: ${pid.trim()}`));
+    const pidPath = import_path19.default.join(process.cwd(), PID_FILE);
+    const pid = await import_promises17.default.readFile(pidPath, "utf-8");
+    console.log(import_chalk17.default.dim(`PID: ${pid.trim()}`));
   } catch {
   }
   console.log("");
 }
+async function enableDaemon() {
+  console.log(import_chalk17.default.bold("\n\u2699\uFE0F  Enabling Rigstate Background Service (macOS)\n"));
+  if (process.platform !== "darwin") {
+    console.error(import_chalk17.default.red("\u274C Currently only macOS is supported for auto-start."));
+    console.error(import_chalk17.default.yellow("PRs welcome for Linux/Windows support!"));
+    return;
+  }
+  const homeDir = process.env.HOME || "";
+  if (!homeDir) {
+    console.error(import_chalk17.default.red("\u274C Could not determine HOME directory."));
+    return;
+  }
+  const agentsDir = import_path19.default.join(homeDir, "Library/LaunchAgents");
+  const logDir = import_path19.default.join(homeDir, ".rigstate/logs");
+  const plistPath = import_path19.default.join(agentsDir, "com.rigstate.daemon.plist");
+  await import_promises17.default.mkdir(agentsDir, { recursive: true });
+  await import_promises17.default.mkdir(logDir, { recursive: true });
+  const scriptPath = import_path19.default.resolve(__dirname, "../index.js");
+  const nodePath = process.execPath;
+  const plistContent = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>com.rigstate.daemon</string>
+    <key>ProgramArguments</key>
+    <array>
+        <string>${nodePath}</string>
+        <string>${scriptPath}</string>
+        <string>daemon</string>
+        <string>--no-bridge</string> 
+    </array>
+    <key>WorkingDirectory</key>
+    <string>${process.cwd()}</string>
+    <key>StandardOutPath</key>
+    <string>${import_path19.default.join(logDir, "daemon.out.log")}</string>
+    <key>StandardErrorPath</key>
+    <string>${import_path19.default.join(logDir, "daemon.err.log")}</string>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+    <key>EnvironmentVariables</key>
+    <dict>
+        <key>PATH</key>
+        <string>/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:${process.env.PATH}</string>
+    </dict>
+</dict>
+</plist>`;
+  try {
+    await import_promises17.default.writeFile(plistPath, plistContent);
+    console.log(import_chalk17.default.dim(`Created plist at: ${plistPath}`));
+    try {
+      await execShellCommand(`launchctl unload ${plistPath}`);
+    } catch (e) {
+    }
+    await execShellCommand(`launchctl load ${plistPath}`);
+    console.log(import_chalk17.default.green("\u2705 Successfully enabled background daemon!"));
+    console.log(import_chalk17.default.dim(`Logs: ${logDir}`));
+    console.log(import_chalk17.default.dim("The daemon will now restart automatically if it crashes or on reboot."));
+  } catch (error) {
+    console.error(import_chalk17.default.red("\u274C Failed to enable daemon:"), error.message);
+  }
+}
+async function disableDaemon() {
+  console.log(import_chalk17.default.bold("\n\u2699\uFE0F  Disabling Rigstate Background Service\n"));
+  const homeDir = process.env.HOME || "";
+  const plistPath = import_path19.default.join(homeDir, "Library/LaunchAgents/com.rigstate.daemon.plist");
+  try {
+    await execShellCommand(`launchctl unload ${plistPath}`);
+    await import_promises17.default.unlink(plistPath);
+    console.log(import_chalk17.default.green("\u2705 Successfully disabled background daemon."));
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      console.log(import_chalk17.default.green("\u2705 Daemon was not enabled."));
+    } else {
+      console.error(import_chalk17.default.red("\u274C Failed to disable daemon:"), error.message);
+    }
+  }
+}
+function execShellCommand(cmd) {
+  const exec = require("child_process").exec;
+  return new Promise((resolve, reject) => {
+    exec(cmd, (error, stdout, stderr) => {
+      if (error) {
+      }
+      resolve(stdout ? stdout : stderr);
+    });
+  });
+}
 
 // src/commands/work.ts
 init_cjs_shims();
-var import_commander10 = require("commander");
-var import_chalk16 = __toESM(require("chalk"), 1);
-var import_ora7 = __toESM(require("ora"), 1);
-var import_axios12 = __toESM(require("axios"), 1);
+var import_commander12 = require("commander");
+var import_chalk18 = __toESM(require("chalk"), 1);
+var import_ora9 = __toESM(require("ora"), 1);
+var import_axios14 = __toESM(require("axios"), 1);
 var import_inquirer2 = __toESM(require("inquirer"), 1);
-var import_promises17 = __toESM(require("fs/promises"), 1);
+var import_promises18 = __toESM(require("fs/promises"), 1);
 init_config();
 function createWorkCommand() {
-  return new import_commander10.Command("work").alias("start").description("Select and execute a Roadmap Task (fetches IDE Prompt)").argument("[taskId]", "Optional Task ID (e.g., T-1021) to start immediately").option("--project <id>", "Project ID").action(async (taskId, options) => {
-    const spinner = (0, import_ora7.default)();
+  return new import_commander12.Command("work").alias("start").description("Select and execute a Roadmap Task (fetches IDE Prompt)").argument("[taskId]", "Optional Task ID (e.g., T-1021) to start immediately").option("--project <id>", "Project ID").action(async (taskId, options) => {
+    const spinner = (0, import_ora9.default)();
     try {
       const apiKey = getApiKey();
       const apiUrl = getApiUrl();
       const projectId = options.project || getProjectId();
       if (!projectId) {
-        console.log(import_chalk16.default.red("\u274C Project ID is required. Run `rigstate link` or pass --project <id>"));
+        console.log(import_chalk18.default.red("\u274C Project ID is required. Run `rigstate link` or pass --project <id>"));
         process.exit(1);
       }
       if (!taskId) {
         spinner.start("Fetching active roadmap tasks...");
       }
-      const response = await import_axios12.default.get(
+      const response = await import_axios14.default.get(
         `${apiUrl}/api/v1/roadmap?project_id=${projectId}`,
         { headers: { "Authorization": `Bearer ${apiKey}` }, timeout: 1e4 }
       );
@@ -2771,20 +3202,20 @@ function createWorkCommand() {
           (t) => t.id === taskId || `T-${t.step_number}` === taskId || t.step_number.toString() === taskId
         );
         if (!selectedTask) {
-          console.log(import_chalk16.default.red(`\u274C Task '${taskId}' not found in roadmap.`));
+          console.log(import_chalk18.default.red(`\u274C Task '${taskId}' not found in roadmap.`));
           return;
         }
       } else {
         if (actionableTasks.length === 0) {
-          console.log(import_chalk16.default.yellow("No active or locked tasks found. The Roadmap is clear! \u{1F389}"));
+          console.log(import_chalk18.default.yellow("No active or locked tasks found. The Roadmap is clear! \u{1F389}"));
           return;
         }
         const choices = actionableTasks.map((t) => {
           const id = `T-${t.step_number}`;
           const statusIcon = t.status === "ACTIVE" ? "\u25B6\uFE0F" : "\u{1F512}";
-          const priority = t.priority === "MVP" ? import_chalk16.default.magenta("[MVP]") : import_chalk16.default.blue(`[${t.priority}]`);
+          const priority = t.priority === "MVP" ? import_chalk18.default.magenta("[MVP]") : import_chalk18.default.blue(`[${t.priority}]`);
           return {
-            name: `${statusIcon}  ${import_chalk16.default.bold(id)}: ${t.title} ${priority}`,
+            name: `${statusIcon}  ${import_chalk18.default.bold(id)}: ${t.title} ${priority}`,
             value: t,
             short: `${id}: ${t.title}`
           };
@@ -2798,13 +3229,13 @@ function createWorkCommand() {
         }]);
         selectedTask = answer.task;
       }
-      console.log("\n" + import_chalk16.default.bold.underline(`\u{1F680} WORK MODE: ${selectedTask.title}`));
-      console.log(import_chalk16.default.dim(`ID: T-${selectedTask.step_number} | Status: ${selectedTask.status}`));
+      console.log("\n" + import_chalk18.default.bold.underline(`\u{1F680} WORK MODE: ${selectedTask.title}`));
+      console.log(import_chalk18.default.dim(`ID: T-${selectedTask.step_number} | Status: ${selectedTask.status}`));
       if (selectedTask.prompt_content) {
-        console.log(import_chalk16.default.yellow.bold("\n\u{1F4CB} IDE EXECUTION SIGNAL (Prompt):"));
-        console.log(import_chalk16.default.gray("--------------------------------------------------"));
+        console.log(import_chalk18.default.yellow.bold("\n\u{1F4CB} IDE EXECUTION SIGNAL (Prompt):"));
+        console.log(import_chalk18.default.gray("--------------------------------------------------"));
         console.log(selectedTask.prompt_content);
-        console.log(import_chalk16.default.gray("--------------------------------------------------"));
+        console.log(import_chalk18.default.gray("--------------------------------------------------"));
         const { action } = await import_inquirer2.default.prompt([{
           type: "list",
           name: "action",
@@ -2818,41 +3249,41 @@ function createWorkCommand() {
           ]
         }]);
         if (action === "cursorrules") {
-          await import_promises17.default.writeFile(".rigstate-prompt.md", selectedTask.prompt_content);
-          console.log(import_chalk16.default.green(`\u2705 Prompt saved to ${import_chalk16.default.bold(".rigstate-prompt.md")}`));
-          console.log(import_chalk16.default.dim("You can now reference this file in your IDE chat (@.rigstate-prompt.md)"));
+          await import_promises18.default.writeFile(".rigstate-prompt.md", selectedTask.prompt_content);
+          console.log(import_chalk18.default.green(`\u2705 Prompt saved to ${import_chalk18.default.bold(".rigstate-prompt.md")}`));
+          console.log(import_chalk18.default.dim("You can now reference this file in your IDE chat (@.rigstate-prompt.md)"));
         } else if (action === "print") {
           console.log("\n" + selectedTask.prompt_content + "\n");
         } else if (action === "activate" && selectedTask.status !== "ACTIVE") {
           try {
-            await import_axios12.default.post(
+            await import_axios14.default.post(
               `${apiUrl}/api/v1/roadmap/update-status`,
               { step_id: selectedTask.id, status: "ACTIVE", project_id: projectId },
               { headers: { "Authorization": `Bearer ${apiKey}` } }
             );
-            console.log(import_chalk16.default.green(`\u2705 Task marked as ACTIVE.`));
+            console.log(import_chalk18.default.green(`\u2705 Task marked as ACTIVE.`));
           } catch (e) {
-            console.error(import_chalk16.default.red(`Failed to update status: ${e.message}`));
+            console.error(import_chalk18.default.red(`Failed to update status: ${e.message}`));
           }
         } else if (action === "complete") {
           try {
-            await import_axios12.default.post(
+            await import_axios14.default.post(
               `${apiUrl}/api/v1/roadmap/update-status`,
               { step_id: selectedTask.id, status: "COMPLETED", project_id: projectId },
               { headers: { "Authorization": `Bearer ${apiKey}` } }
             );
-            console.log(import_chalk16.default.green(`\u2705 Task marked as COMPLETED. Great job!`));
+            console.log(import_chalk18.default.green(`\u2705 Task marked as COMPLETED. Great job!`));
           } catch (e) {
-            console.error(import_chalk16.default.red(`Failed to update status: ${e.message}`));
+            console.error(import_chalk18.default.red(`Failed to update status: ${e.message}`));
           }
         }
       } else {
-        console.log(import_chalk16.default.yellow("\n\u26A0\uFE0F  No specific IDE Prompt found for this task (Legacy Task?)."));
-        console.log(import_chalk16.default.dim("Objective: " + (selectedTask.summary || selectedTask.description || "Check web UI for details.")));
+        console.log(import_chalk18.default.yellow("\n\u26A0\uFE0F  No specific IDE Prompt found for this task (Legacy Task?)."));
+        console.log(import_chalk18.default.dim("Objective: " + (selectedTask.summary || selectedTask.description || "Check web UI for details.")));
       }
     } catch (error) {
       spinner.stop();
-      console.error(import_chalk16.default.red(`
+      console.error(import_chalk18.default.red(`
 Command failed: ${error.message}`));
     }
   });
@@ -2860,41 +3291,41 @@ Command failed: ${error.message}`));
 
 // src/commands/watch.ts
 init_cjs_shims();
-var import_commander11 = require("commander");
-var import_chalk17 = __toESM(require("chalk"), 1);
-var import_ora8 = __toESM(require("ora"), 1);
+var import_commander13 = require("commander");
+var import_chalk19 = __toESM(require("chalk"), 1);
+var import_ora10 = __toESM(require("ora"), 1);
 var import_chokidar = __toESM(require("chokidar"), 1);
-var import_promises18 = __toESM(require("fs/promises"), 1);
-var import_path19 = __toESM(require("path"), 1);
+var import_promises19 = __toESM(require("fs/promises"), 1);
+var import_path20 = __toESM(require("path"), 1);
 var import_child_process3 = require("child_process");
 init_config();
-var import_axios13 = __toESM(require("axios"), 1);
+var import_axios15 = __toESM(require("axios"), 1);
 function createWatchCommand() {
-  const watch2 = new import_commander11.Command("watch");
+  const watch2 = new import_commander13.Command("watch");
   watch2.description("Watch for changes and auto-verify roadmap tasks").option("--no-auto-commit", "Disable auto-commit on verification").option("--no-auto-push", "Disable auto-push after commit").option("--run-tests", "Run tests before committing").option("--test-command <cmd>", "Custom test command (default: npm test)").action(async (options) => {
-    console.log(import_chalk17.default.bold.blue("\u{1F52D} Rigstate Watch Mode"));
-    console.log(import_chalk17.default.dim("Monitoring for task completion..."));
+    console.log(import_chalk19.default.bold.blue("\u{1F52D} Rigstate Watch Mode"));
+    console.log(import_chalk19.default.dim("Monitoring for task completion..."));
     console.log("");
     let apiKey;
     let projectId;
     try {
       apiKey = getApiKey();
     } catch (e) {
-      console.log(import_chalk17.default.red('Not authenticated. Run "rigstate login" first.'));
+      console.log(import_chalk19.default.red('Not authenticated. Run "rigstate login" first.'));
       return;
     }
     projectId = getProjectId();
     if (!projectId) {
       try {
-        const manifestPath = import_path19.default.join(process.cwd(), ".rigstate");
-        const content = await import_promises18.default.readFile(manifestPath, "utf-8");
+        const manifestPath = import_path20.default.join(process.cwd(), ".rigstate");
+        const content = await import_promises19.default.readFile(manifestPath, "utf-8");
         const manifest = JSON.parse(content);
         projectId = manifest.project_id;
       } catch (e) {
       }
     }
     if (!projectId) {
-      console.log(import_chalk17.default.red('No project context. Run "rigstate link" or "rigstate sync --project <id>" first.'));
+      console.log(import_chalk19.default.red('No project context. Run "rigstate link" or "rigstate sync --project <id>" first.'));
       return;
     }
     const apiUrl = getApiUrl();
@@ -2904,12 +3335,12 @@ function createWatchCommand() {
       runTests: options.runTests || false,
       testCommand: options.testCommand || "npm test"
     };
-    console.log(import_chalk17.default.dim(`Auto-commit: ${config2.autoCommit ? "ON" : "OFF"}`));
-    console.log(import_chalk17.default.dim(`Auto-push: ${config2.autoPush ? "ON" : "OFF"}`));
+    console.log(import_chalk19.default.dim(`Auto-commit: ${config2.autoCommit ? "ON" : "OFF"}`));
+    console.log(import_chalk19.default.dim(`Auto-push: ${config2.autoPush ? "ON" : "OFF"}`));
     console.log("");
     const fetchActiveTask = async () => {
       try {
-        const response = await import_axios13.default.get(`${apiUrl}/api/v1/roadmap`, {
+        const response = await import_axios15.default.get(`${apiUrl}/api/v1/roadmap`, {
           params: { project_id: projectId },
           headers: { Authorization: `Bearer ${apiKey}` }
         });
@@ -2933,17 +3364,17 @@ function createWatchCommand() {
     };
     const checkCriteria = async (criteria) => {
       try {
-        const fullPath = import_path19.default.resolve(process.cwd(), criteria.path);
+        const fullPath = import_path20.default.resolve(process.cwd(), criteria.path);
         switch (criteria.type) {
           case "file_exists":
-            await import_promises18.default.access(fullPath);
+            await import_promises19.default.access(fullPath);
             return true;
           case "file_content":
-            const content = await import_promises18.default.readFile(fullPath, "utf-8");
+            const content = await import_promises19.default.readFile(fullPath, "utf-8");
             return content.length > 0;
           case "content_match":
             if (!criteria.match) return false;
-            const fileContent = await import_promises18.default.readFile(fullPath, "utf-8");
+            const fileContent = await import_promises19.default.readFile(fullPath, "utf-8");
             return fileContent.includes(criteria.match);
           default:
             return false;
@@ -2953,7 +3384,7 @@ function createWatchCommand() {
       }
     };
     const completeTask = async (taskId, task) => {
-      const spinner = (0, import_ora8.default)("Completing task...").start();
+      const spinner = (0, import_ora10.default)("Completing task...").start();
       try {
         if (config2.runTests) {
           spinner.text = "Running tests...";
@@ -2965,14 +3396,14 @@ function createWatchCommand() {
             return;
           }
         }
-        await import_axios13.default.post(`${apiUrl}/api/v1/roadmap/update-status`, {
+        await import_axios15.default.post(`${apiUrl}/api/v1/roadmap/update-status`, {
           project_id: projectId,
           chunk_id: taskId,
           status: "COMPLETED"
         }, {
           headers: { Authorization: `Bearer ${apiKey}` }
         });
-        spinner.succeed(import_chalk17.default.green(`\u2705 Task #${task.step_number} completed: ${task.title}`));
+        spinner.succeed(import_chalk19.default.green(`\u2705 Task #${task.step_number} completed: ${task.title}`));
         if (config2.autoCommit) {
           spinner.start("Committing changes...");
           try {
@@ -2994,7 +3425,7 @@ function createWatchCommand() {
           }
         }
         console.log("");
-        console.log(import_chalk17.default.blue("Watching for next task..."));
+        console.log(import_chalk19.default.blue("Watching for next task..."));
       } catch (e) {
         spinner.fail(`Failed to complete task: ${e.message}`);
       }
@@ -3007,7 +3438,7 @@ function createWatchCommand() {
       const task = await fetchActiveTask();
       if (!task) {
         if (currentTask) {
-          console.log(import_chalk17.default.green("\u{1F389} All tasks completed! Watching for new tasks..."));
+          console.log(import_chalk19.default.green("\u{1F389} All tasks completed! Watching for new tasks..."));
           currentTask = null;
         }
         isProcessing = false;
@@ -3016,10 +3447,10 @@ function createWatchCommand() {
       if (!currentTask || currentTask.id !== task.id) {
         currentTask = task;
         console.log("");
-        console.log(import_chalk17.default.bold.yellow(`\u{1F4CC} Active Task #${task.step_number}: ${task.title}`));
-        console.log(import_chalk17.default.dim(`Status: ${task.status}`));
+        console.log(import_chalk19.default.bold.yellow(`\u{1F4CC} Active Task #${task.step_number}: ${task.title}`));
+        console.log(import_chalk19.default.dim(`Status: ${task.status}`));
         if (task.verification_criteria) {
-          console.log(import_chalk17.default.dim("Verification: Auto-checking criteria..."));
+          console.log(import_chalk19.default.dim("Verification: Auto-checking criteria..."));
         }
       }
       if (task.verification_criteria && Array.isArray(task.verification_criteria)) {
@@ -3032,7 +3463,7 @@ function createWatchCommand() {
           }
         }
         if (allPassed) {
-          console.log(import_chalk17.default.green("\u2713 All verification criteria passed!"));
+          console.log(import_chalk19.default.green("\u2713 All verification criteria passed!"));
           await completeTask(task.id, task);
           currentTask = null;
         }
@@ -3057,11 +3488,11 @@ function createWatchCommand() {
         setTimeout(() => processActiveTask(), 500);
       }
     });
-    console.log(import_chalk17.default.dim("Watching for file changes... (Ctrl+C to exit)"));
+    console.log(import_chalk19.default.dim("Watching for file changes... (Ctrl+C to exit)"));
     setInterval(() => processActiveTask(), 3e4);
     process.on("SIGINT", () => {
       console.log("");
-      console.log(import_chalk17.default.dim("Watch mode stopped."));
+      console.log(import_chalk19.default.dim("Watch mode stopped."));
       watcher.close();
       process.exit(0);
     });
@@ -3071,43 +3502,43 @@ function createWatchCommand() {
 
 // src/commands/focus.ts
 init_cjs_shims();
-var import_commander12 = require("commander");
-var import_chalk18 = __toESM(require("chalk"), 1);
-var import_ora9 = __toESM(require("ora"), 1);
+var import_commander14 = require("commander");
+var import_chalk20 = __toESM(require("chalk"), 1);
+var import_ora11 = __toESM(require("ora"), 1);
 init_config();
-var import_axios14 = __toESM(require("axios"), 1);
+var import_axios16 = __toESM(require("axios"), 1);
 var import_child_process4 = require("child_process");
-var import_promises19 = __toESM(require("fs/promises"), 1);
-var import_path20 = __toESM(require("path"), 1);
+var import_promises20 = __toESM(require("fs/promises"), 1);
+var import_path21 = __toESM(require("path"), 1);
 function createFocusCommand() {
-  const focus = new import_commander12.Command("focus");
+  const focus = new import_commander14.Command("focus");
   focus.alias("task").description("Get the next active roadmap task and copy its prompt to clipboard").option("--no-copy", "Do not copy to clipboard").action(async (options) => {
-    const spinner = (0, import_ora9.default)("Fetching next objective...").start();
+    const spinner = (0, import_ora11.default)("Fetching next objective...").start();
     let apiKey;
     let projectId;
     try {
       apiKey = getApiKey();
     } catch (e) {
-      spinner.fail(import_chalk18.default.red('Not authenticated. Run "rigstate login" first.'));
+      spinner.fail(import_chalk20.default.red('Not authenticated. Run "rigstate login" first.'));
       return;
     }
     projectId = getProjectId();
     if (!projectId) {
       try {
-        const manifestPath = import_path20.default.join(process.cwd(), ".rigstate");
-        const content = await import_promises19.default.readFile(manifestPath, "utf-8");
+        const manifestPath = import_path21.default.join(process.cwd(), ".rigstate");
+        const content = await import_promises20.default.readFile(manifestPath, "utf-8");
         const manifest = JSON.parse(content);
         projectId = manifest.project_id;
       } catch (e) {
       }
     }
     if (!projectId) {
-      spinner.fail(import_chalk18.default.red('No project context. Run "rigstate link" first.'));
+      spinner.fail(import_chalk20.default.red('No project context. Run "rigstate link" first.'));
       return;
     }
     const apiUrl = getApiUrl();
     try {
-      const response = await import_axios14.default.get(`${apiUrl}/api/v1/roadmap`, {
+      const response = await import_axios16.default.get(`${apiUrl}/api/v1/roadmap`, {
         params: { project_id: projectId },
         headers: { Authorization: `Bearer ${apiKey}` }
       });
@@ -3133,188 +3564,72 @@ function createFocusCommand() {
       const nextTask = activeTasks[0];
       spinner.stop();
       console.log("");
-      console.log(import_chalk18.default.bold.blue(`\u{1F4CC} Task #${nextTask.step_number || "?"}: ${nextTask.title}`));
-      const statusColor = nextTask.status === "IN_PROGRESS" ? import_chalk18.default.yellow : nextTask.status === "ACTIVE" ? import_chalk18.default.green : import_chalk18.default.dim;
-      console.log(import_chalk18.default.dim("Status: ") + statusColor(nextTask.status));
-      console.log(import_chalk18.default.dim("\u2500".repeat(60)));
+      console.log(import_chalk20.default.bold.blue(`\u{1F4CC} Task #${nextTask.step_number || "?"}: ${nextTask.title}`));
+      const statusColor = nextTask.status === "IN_PROGRESS" ? import_chalk20.default.yellow : nextTask.status === "ACTIVE" ? import_chalk20.default.green : import_chalk20.default.dim;
+      console.log(import_chalk20.default.dim("Status: ") + statusColor(nextTask.status));
+      console.log(import_chalk20.default.dim("\u2500".repeat(60)));
       if (nextTask.prompt_content) {
-        console.log(import_chalk18.default.white(nextTask.prompt_content));
-        console.log(import_chalk18.default.dim("\u2500".repeat(60)));
+        console.log(import_chalk20.default.white(nextTask.prompt_content));
+        console.log(import_chalk20.default.dim("\u2500".repeat(60)));
         if (options.copy !== false) {
           try {
             if (process.platform === "darwin") {
               (0, import_child_process4.execSync)("pbcopy", { input: nextTask.prompt_content });
-              console.log(import_chalk18.default.green("\u2705 Prompt copied to clipboard! Ready to paste (Cmd+V)."));
+              console.log(import_chalk20.default.green("\u2705 Prompt copied to clipboard! Ready to paste (Cmd+V)."));
             } else if (process.platform === "linux") {
               try {
                 (0, import_child_process4.execSync)("xclip -selection clipboard", { input: nextTask.prompt_content });
-                console.log(import_chalk18.default.green("\u2705 Prompt copied to clipboard!"));
+                console.log(import_chalk20.default.green("\u2705 Prompt copied to clipboard!"));
               } catch (e) {
-                console.log(import_chalk18.default.yellow("\u2139\uFE0F  Copy prompt manually (xclip not available)"));
+                console.log(import_chalk20.default.yellow("\u2139\uFE0F  Copy prompt manually (xclip not available)"));
               }
             } else {
-              console.log(import_chalk18.default.yellow("\u2139\uFE0F  Copy prompt manually (Auto-copy not supported on this OS)"));
+              console.log(import_chalk20.default.yellow("\u2139\uFE0F  Copy prompt manually (Auto-copy not supported on this OS)"));
             }
           } catch (e) {
           }
         }
       } else {
-        console.log(import_chalk18.default.yellow("No prompt instructions available."));
+        console.log(import_chalk20.default.yellow("No prompt instructions available."));
         if (nextTask.architectural_brief) {
-          console.log(import_chalk18.default.bold("Brief:"));
+          console.log(import_chalk20.default.bold("Brief:"));
           console.log(nextTask.architectural_brief);
         }
       }
       console.log("");
     } catch (e) {
-      spinner.fail(import_chalk18.default.red(`Failed to fetch task: ${e.message}`));
+      spinner.fail(import_chalk20.default.red(`Failed to fetch task: ${e.message}`));
     }
   });
   return focus;
 }
 
-// src/commands/env.ts
-init_cjs_shims();
-var import_commander13 = require("commander");
-var import_chalk19 = __toESM(require("chalk"), 1);
-var import_ora10 = __toESM(require("ora"), 1);
-var import_promises20 = __toESM(require("fs/promises"), 1);
-var import_path21 = __toESM(require("path"), 1);
-init_config();
-var import_axios15 = __toESM(require("axios"), 1);
-function createEnvPullCommand() {
-  const envPull = new import_commander13.Command("env");
-  envPull.command("pull").description("Pull environment variables from project vault").action(async () => {
-    console.log("");
-    console.log(import_chalk19.default.bold.yellow("\u2554\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2557"));
-    console.log(import_chalk19.default.bold.yellow("\u2551") + import_chalk19.default.bold.white("  \u{1F6E1}\uFE0F  RIGSTATE SOVEREIGN VAULT SYNC  \u{1F6E1}\uFE0F   ") + import_chalk19.default.bold.yellow("\u2551"));
-    console.log(import_chalk19.default.bold.yellow("\u255A\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u255D"));
-    console.log("");
-    const spinner = (0, import_ora10.default)("Authenticating with Vault...").start();
-    let apiKey;
-    let projectId;
-    try {
-      apiKey = getApiKey();
-    } catch (e) {
-      spinner.fail(import_chalk19.default.red('Not authenticated. Run "rigstate login" first.'));
-      return;
-    }
-    spinner.succeed("Authenticated");
-    spinner.start("Reading project configuration...");
-    projectId = getProjectId();
-    if (!projectId) {
-      try {
-        const manifestPath = import_path21.default.join(process.cwd(), ".rigstate");
-        const content = await import_promises20.default.readFile(manifestPath, "utf-8");
-        const manifest = JSON.parse(content);
-        projectId = manifest.project_id;
-      } catch (e) {
-      }
-    }
-    if (!projectId) {
-      spinner.fail(import_chalk19.default.red('No project context. Run "rigstate link" first.'));
-      return;
-    }
-    spinner.succeed(`Project: ${import_chalk19.default.cyan(projectId.substring(0, 8))}...`);
-    const apiUrl = getApiUrl();
-    spinner.start("Fetching secrets from Vault...");
-    try {
-      const response = await import_axios15.default.post(`${apiUrl}/api/v1/vault/sync`, {
-        project_id: projectId
-      }, {
-        headers: { Authorization: `Bearer ${apiKey}` }
-      });
-      if (!response.data.success) {
-        throw new Error(response.data.error || "Failed to fetch secrets");
-      }
-      const vaultContent = response.data.data.content || "";
-      const secretCount = response.data.data.count || 0;
-      if (secretCount === 0) {
-        spinner.info("No secrets found in Vault for this project.");
-        console.log(import_chalk19.default.dim("  Add secrets via the Rigstate web interface."));
-        return;
-      }
-      spinner.succeed(`Retrieved ${import_chalk19.default.bold(secretCount)} secret(s)`);
-      const envFile = import_path21.default.resolve(process.cwd(), ".env.local");
-      let existingContent = "";
-      let existingKeys = /* @__PURE__ */ new Set();
-      try {
-        existingContent = await import_promises20.default.readFile(envFile, "utf-8");
-        existingContent.split("\n").forEach((line) => {
-          const match = line.match(/^([A-Z_][A-Z0-9_]*)=/);
-          if (match) existingKeys.add(match[1]);
-        });
-      } catch (e) {
-      }
-      const vaultKeys = /* @__PURE__ */ new Set();
-      vaultContent.split("\n").forEach((line) => {
-        const match = line.match(/^([A-Z_][A-Z0-9_]*)=/);
-        if (match) vaultKeys.add(match[1]);
-      });
-      let newCount = 0;
-      let updatedCount = 0;
-      vaultKeys.forEach((key) => {
-        if (!existingKeys.has(key)) {
-          newCount++;
-        } else {
-          updatedCount++;
-        }
-      });
-      const unchangedCount = existingKeys.size - updatedCount;
-      spinner.start("Writing .env.local...");
-      const header = [
-        "# ==========================================",
-        "# RIGSTATE SOVEREIGN FOUNDATION",
-        "# Authenticated Environment Configuration",
-        `# Synced at: ${(/* @__PURE__ */ new Date()).toISOString()}`,
-        `# Project: ${projectId}`,
-        "# ==========================================",
-        ""
-      ].join("\n");
-      await import_promises20.default.writeFile(envFile, header + vaultContent + "\n");
-      spinner.succeed("Written to .env.local");
-      console.log("");
-      console.log(import_chalk19.default.bold.green("\u2705 Environment synchronized successfully"));
-      console.log("");
-      console.log(import_chalk19.default.dim("   Summary:"));
-      console.log(import_chalk19.default.green(`   + ${newCount} new`));
-      console.log(import_chalk19.default.yellow(`   ~ ${updatedCount} updated`));
-      console.log(import_chalk19.default.dim(`   = ${unchangedCount} unchanged`));
-      console.log("");
-      console.log(import_chalk19.default.bold.yellow("\u26A0\uFE0F  Security Reminder:"));
-      console.log(import_chalk19.default.dim("   - Never commit .env.local to version control."));
-      console.log(import_chalk19.default.dim("   - Ensure .gitignore includes .env.local"));
-      console.log("");
-    } catch (e) {
-      spinner.fail(import_chalk19.default.red(`Failed to fetch secrets: ${e.message}`));
-    }
-  });
-  return envPull;
-}
+// src/index.ts
+init_env();
 
 // src/commands/config.ts
 init_cjs_shims();
-var import_commander14 = require("commander");
-var import_chalk20 = __toESM(require("chalk"), 1);
+var import_commander15 = require("commander");
+var import_chalk21 = __toESM(require("chalk"), 1);
 init_config();
 function createConfigCommand() {
-  const config2 = new import_commander14.Command("config");
+  const config2 = new import_commander15.Command("config");
   config2.description("View or modify Rigstate configuration").argument("[key]", "Configuration key to view/set (api_key, project_id, api_url)").argument("[value]", "Value to set").action(async (key, value) => {
     if (!key) {
-      console.log(import_chalk20.default.bold("Rigstate Configuration"));
-      console.log(import_chalk20.default.dim("\u2500".repeat(40)));
+      console.log(import_chalk21.default.bold("Rigstate Configuration"));
+      console.log(import_chalk21.default.dim("\u2500".repeat(40)));
       try {
         const apiKey = getApiKey();
-        console.log(`${import_chalk20.default.cyan("api_key")}: ${apiKey.substring(0, 20)}...`);
+        console.log(`${import_chalk21.default.cyan("api_key")}: ${apiKey.substring(0, 20)}...`);
       } catch (e) {
-        console.log(`${import_chalk20.default.cyan("api_key")}: ${import_chalk20.default.dim("(not set)")}`);
+        console.log(`${import_chalk21.default.cyan("api_key")}: ${import_chalk21.default.dim("(not set)")}`);
       }
       const projectId = getProjectId();
-      console.log(`${import_chalk20.default.cyan("project_id")}: ${projectId || import_chalk20.default.dim("(not set)")}`);
+      console.log(`${import_chalk21.default.cyan("project_id")}: ${projectId || import_chalk21.default.dim("(not set)")}`);
       const apiUrl = getApiUrl();
-      console.log(`${import_chalk20.default.cyan("api_url")}: ${apiUrl}`);
+      console.log(`${import_chalk21.default.cyan("api_url")}: ${apiUrl}`);
       console.log("");
-      console.log(import_chalk20.default.dim('Use "rigstate config <key> <value>" to set a value.'));
+      console.log(import_chalk21.default.dim('Use "rigstate config <key> <value>" to set a value.'));
       return;
     }
     if (!value) {
@@ -3324,36 +3639,36 @@ function createConfigCommand() {
             const apiKey = getApiKey();
             console.log(apiKey);
           } catch (e) {
-            console.log(import_chalk20.default.dim("(not set)"));
+            console.log(import_chalk21.default.dim("(not set)"));
           }
           break;
         case "project_id":
-          console.log(getProjectId() || import_chalk20.default.dim("(not set)"));
+          console.log(getProjectId() || import_chalk21.default.dim("(not set)"));
           break;
         case "api_url":
           console.log(getApiUrl());
           break;
         default:
-          console.log(import_chalk20.default.red(`Unknown config key: ${key}`));
-          console.log(import_chalk20.default.dim("Valid keys: api_key, project_id, api_url"));
+          console.log(import_chalk21.default.red(`Unknown config key: ${key}`));
+          console.log(import_chalk21.default.dim("Valid keys: api_key, project_id, api_url"));
       }
       return;
     }
     switch (key) {
       case "api_key":
         setApiKey(value);
-        console.log(import_chalk20.default.green(`\u2705 api_key updated`));
+        console.log(import_chalk21.default.green(`\u2705 api_key updated`));
         break;
       case "project_id":
         setProjectId(value);
-        console.log(import_chalk20.default.green(`\u2705 project_id updated`));
+        console.log(import_chalk21.default.green(`\u2705 project_id updated`));
         break;
       case "api_url":
-        console.log(import_chalk20.default.yellow("api_url is set via RIGSTATE_API_URL environment variable"));
+        console.log(import_chalk21.default.yellow("api_url is set via RIGSTATE_API_URL environment variable"));
         break;
       default:
-        console.log(import_chalk20.default.red(`Unknown config key: ${key}`));
-        console.log(import_chalk20.default.dim("Valid keys: api_key, project_id"));
+        console.log(import_chalk21.default.red(`Unknown config key: ${key}`));
+        console.log(import_chalk21.default.dim("Valid keys: api_key, project_id"));
     }
   });
   return config2;
@@ -3361,24 +3676,24 @@ function createConfigCommand() {
 
 // src/commands/mcp.ts
 init_cjs_shims();
-var import_commander15 = require("commander");
-var import_chalk21 = __toESM(require("chalk"), 1);
+var import_commander16 = require("commander");
+var import_chalk22 = __toESM(require("chalk"), 1);
 var import_child_process5 = require("child_process");
 var import_path22 = __toESM(require("path"), 1);
 var import_fs = __toESM(require("fs"), 1);
 var import_url = require("url");
 var __filename2 = (0, import_url.fileURLToPath)(importMetaUrl);
-var __dirname = import_path22.default.dirname(__filename2);
+var __dirname2 = import_path22.default.dirname(__filename2);
 function createMcpCommand() {
-  const mcp = new import_commander15.Command("mcp");
+  const mcp = new import_commander16.Command("mcp");
   mcp.description("Run the Rigstate MCP server for AI editors").action(async () => {
     const possiblePaths = [
       // From packages/cli -> packages/mcp (sibling package)
-      import_path22.default.resolve(__dirname, "../../mcp/dist/index.js"),
+      import_path22.default.resolve(__dirname2, "../../mcp/dist/index.js"),
       // If installed globally or via npm
-      import_path22.default.resolve(__dirname, "../../../mcp/dist/index.js"),
+      import_path22.default.resolve(__dirname2, "../../../mcp/dist/index.js"),
       // Development path from packages/cli/dist
-      import_path22.default.resolve(__dirname, "../../../packages/mcp/dist/index.js")
+      import_path22.default.resolve(__dirname2, "../../../packages/mcp/dist/index.js")
     ];
     let serverPath = "";
     for (const p of possiblePaths) {
@@ -3388,15 +3703,15 @@ function createMcpCommand() {
       }
     }
     if (!serverPath) {
-      console.error(import_chalk21.default.red("\u274C Error: Rigstate MCP Server binary not found."));
-      console.error(import_chalk21.default.yellow("Please ensure that the mcp package is built:"));
-      console.error(import_chalk21.default.white("   cd packages/mcp && npm run build"));
+      console.error(import_chalk22.default.red("\u274C Error: Rigstate MCP Server binary not found."));
+      console.error(import_chalk22.default.yellow("Please ensure that the mcp package is built:"));
+      console.error(import_chalk22.default.white("   cd packages/mcp && npm run build"));
       console.error("");
-      console.error(import_chalk21.default.dim("Or run directly with:"));
-      console.error(import_chalk21.default.white("   npx @rigstate/mcp"));
+      console.error(import_chalk22.default.dim("Or run directly with:"));
+      console.error(import_chalk22.default.white("   npx @rigstate/mcp"));
       process.exit(1);
     }
-    console.log(import_chalk21.default.dim(`Starting MCP server from: ${serverPath}`));
+    console.log(import_chalk22.default.dim(`Starting MCP server from: ${serverPath}`));
     if (process.env.VIBE_API_KEY && !process.env.RIGSTATE_API_KEY) {
       process.env.RIGSTATE_API_KEY = process.env.VIBE_API_KEY;
     }
@@ -3405,7 +3720,7 @@ function createMcpCommand() {
       stdio: ["inherit", "inherit", "inherit"]
     });
     worker.on("error", (err) => {
-      console.error(import_chalk21.default.red(`\u274C Failed to start MCP server: ${err.message}`));
+      console.error(import_chalk22.default.red(`\u274C Failed to start MCP server: ${err.message}`));
       process.exit(1);
     });
     worker.on("exit", (code) => {
@@ -3419,8 +3734,8 @@ function createMcpCommand() {
 
 // src/commands/nexus.ts
 init_cjs_shims();
-var import_commander16 = require("commander");
-var import_chalk24 = __toESM(require("chalk"), 1);
+var import_commander17 = require("commander");
+var import_chalk25 = __toESM(require("chalk"), 1);
 
 // src/nexus/dispatcher.ts
 init_cjs_shims();
@@ -3429,7 +3744,7 @@ var import_uuid = require("uuid");
 
 // src/hive/gateway.ts
 init_cjs_shims();
-var import_axios16 = __toESM(require("axios"), 1);
+var import_axios17 = __toESM(require("axios"), 1);
 
 // src/hive/scrubber.ts
 init_cjs_shims();
@@ -3488,7 +3803,7 @@ var HiveScrubber = class {
 };
 
 // src/hive/gateway.ts
-var import_chalk22 = __toESM(require("chalk"), 1);
+var import_chalk23 = __toESM(require("chalk"), 1);
 var HiveGateway = class {
   client;
   enabled;
@@ -3498,9 +3813,9 @@ var HiveGateway = class {
   constructor(baseUrl, token) {
     this.enabled = !!token;
     if (!this.enabled) {
-      console.log(import_chalk22.default.dim("\u26A0\uFE0F Hive Gateway disabled (No Token provided). Running in localized mode."));
+      console.log(import_chalk23.default.dim("\u26A0\uFE0F Hive Gateway disabled (No Token provided). Running in localized mode."));
     }
-    this.client = import_axios16.default.create({
+    this.client = import_axios17.default.create({
       baseURL: baseUrl,
       headers: {
         "Authorization": `Bearer ${token}`,
@@ -3518,23 +3833,23 @@ var HiveGateway = class {
     if (!this.enabled) return false;
     const now = Date.now();
     if (now - this.lastSignalTime < this.MIN_INTERVAL_MS) {
-      console.warn(import_chalk22.default.yellow("\u23F3 Hive Gateway Throttled. Signal dropped to preventing spam."));
+      console.warn(import_chalk23.default.yellow("\u23F3 Hive Gateway Throttled. Signal dropped to preventing spam."));
       return false;
     }
     const scrubResult = HiveScrubber.scrub(signal.ruleContent);
     if (scrubResult.riskScore > 20) {
-      console.error(import_chalk22.default.red(`\u{1F6D1} HIVE BLOCKED: Signal contains sensitive data (Risk: ${scrubResult.riskScore})`));
+      console.error(import_chalk23.default.red(`\u{1F6D1} HIVE BLOCKED: Signal contains sensitive data (Risk: ${scrubResult.riskScore})`));
       return false;
     }
     try {
-      console.log(import_chalk22.default.blue(`\u{1F4E1} Uplinking to Hive... [${signal.vector}]`));
+      console.log(import_chalk23.default.blue(`\u{1F4E1} Uplinking to Hive... [${signal.vector}]`));
       const payload = { ...signal, ruleContent: scrubResult.sanitizedContent };
       await this.client.post("/signal", payload);
       this.lastSignalTime = now;
-      console.log(import_chalk22.default.green("\u2705 Signal Received by Hive Core. Knowledge Shared."));
+      console.log(import_chalk23.default.green("\u2705 Signal Received by Hive Core. Knowledge Shared."));
       return true;
     } catch (error) {
-      console.error(import_chalk22.default.red(`\u274C Hive Transmission Failed: ${error.message}`));
+      console.error(import_chalk23.default.red(`\u274C Hive Transmission Failed: ${error.message}`));
       return false;
     }
   }
@@ -3542,37 +3857,37 @@ var HiveGateway = class {
 
 // src/utils/logger.ts
 init_cjs_shims();
-var import_chalk23 = __toESM(require("chalk"), 1);
+var import_chalk24 = __toESM(require("chalk"), 1);
 var Logger = class {
   static formatMessage(level, message, context) {
     const timestamp = (/* @__PURE__ */ new Date()).toISOString();
     let prefix = "";
     switch (level) {
       case "INFO" /* INFO */:
-        prefix = import_chalk23.default.blue(`[${"INFO" /* INFO */}]`);
+        prefix = import_chalk24.default.blue(`[${"INFO" /* INFO */}]`);
         break;
       case "WARN" /* WARN */:
-        prefix = import_chalk23.default.yellow(`[${"WARN" /* WARN */}]`);
+        prefix = import_chalk24.default.yellow(`[${"WARN" /* WARN */}]`);
         break;
       case "ERROR" /* ERROR */:
-        prefix = import_chalk23.default.red(`[${"ERROR" /* ERROR */}]`);
+        prefix = import_chalk24.default.red(`[${"ERROR" /* ERROR */}]`);
         break;
       case "DEBUG" /* DEBUG */:
-        prefix = import_chalk23.default.gray(`[${"DEBUG" /* DEBUG */}]`);
+        prefix = import_chalk24.default.gray(`[${"DEBUG" /* DEBUG */}]`);
         break;
     }
-    let output = `${import_chalk23.default.gray(timestamp)} ${prefix} ${message}`;
+    let output = `${import_chalk24.default.gray(timestamp)} ${prefix} ${message}`;
     if (context) {
       if (context instanceof Error) {
         output += `
-${import_chalk23.default.red(context.stack || context.message)}`;
+${import_chalk24.default.red(context.stack || context.message)}`;
       } else if (typeof context === "object") {
         try {
           output += `
-${import_chalk23.default.gray(JSON.stringify(context, null, 2))}`;
+${import_chalk24.default.gray(JSON.stringify(context, null, 2))}`;
         } catch (e) {
           output += `
-${import_chalk23.default.gray("[Circular or invalid object]")}`;
+${import_chalk24.default.gray("[Circular or invalid object]")}`;
         }
       } else {
         output += ` ${String(context)}`;
@@ -3690,12 +4005,12 @@ var NexusDispatcher = class extends import_events4.default {
 // src/commands/nexus.ts
 var import_inquirer3 = __toESM(require("inquirer"), 1);
 function createNexusCommand() {
-  const command = new import_commander16.Command("nexus");
+  const command = new import_commander17.Command("nexus");
   command.description("Interact with The Multi-Agent Nexus (Phase 8)").argument("<intent>", "The natural language instruction for the swarm").option("--dry-run", "Enable Dry-Run mode (Kill-Switch Active)", true).option("--force", "Disable Dry-Run mode (DANGEROUS)", false).action(async (intent, options) => {
-    console.log(import_chalk24.default.bold.magenta("\n\u{1F981} Welcome to The Nexus (Phase 8)\n"));
+    console.log(import_chalk25.default.bold.magenta("\n\u{1F981} Welcome to The Nexus (Phase 8)\n"));
     const dryRun = !options.force;
     if (!dryRun) {
-      console.log(import_chalk24.default.black.bgYellow(" WARNING ") + import_chalk24.default.yellow(" Dry-Run disabled! Eitri is authorized to write code."));
+      console.log(import_chalk25.default.black.bgYellow(" WARNING ") + import_chalk25.default.yellow(" Dry-Run disabled! Eitri is authorized to write code."));
       const { confirm } = await import_inquirer3.default.prompt([{
         type: "confirm",
         name: "confirm",
@@ -3716,169 +4031,33 @@ function createNexusCommand() {
     };
     const dispatcher = new NexusDispatcher(context);
     dispatcher.on("order:created", (o) => {
-      console.log(import_chalk24.default.blue(`\u{1F195} [${o.id.slice(0, 6)}] Order Created: `) + o.intent);
+      console.log(import_chalk25.default.blue(`\u{1F195} [${o.id.slice(0, 6)}] Order Created: `) + o.intent);
     });
     dispatcher.on("order:started", (o) => {
-      console.log(import_chalk24.default.yellow(`\u23F3 [${o.id.slice(0, 6)}] Processing...`));
+      console.log(import_chalk25.default.yellow(`\u23F3 [${o.id.slice(0, 6)}] Processing...`));
     });
     dispatcher.on("order:blocked", (o) => {
-      console.log(import_chalk24.default.red(`\u{1F6D1} [${o.id.slice(0, 6)}] BLOCKED by Kill-Switch`));
-      console.log(import_chalk24.default.dim(`   Target: ${o.targetAgent} | Action: ${o.action}`));
-      console.log(import_chalk24.default.dim("   Run with --force to execute automatically (NOT RECOMMENDED)."));
+      console.log(import_chalk25.default.red(`\u{1F6D1} [${o.id.slice(0, 6)}] BLOCKED by Kill-Switch`));
+      console.log(import_chalk25.default.dim(`   Target: ${o.targetAgent} | Action: ${o.action}`));
+      console.log(import_chalk25.default.dim("   Run with --force to execute automatically (NOT RECOMMENDED)."));
     });
-    dispatcher.on("agent:SINDRE", (o) => console.log(import_chalk24.default.cyan(`\u{1F916} Sindre (Vault): I'm on it! (${o.action})`)));
-    dispatcher.on("agent:EITRI", (o) => console.log(import_chalk24.default.green(`\u{1F477} Eitri (Smith): Ready to build! (${o.action})`)));
-    console.log(import_chalk24.default.dim("\u{1F9E0} Frank is analyzing your intent..."));
+    dispatcher.on("agent:SINDRE", (o) => console.log(import_chalk25.default.cyan(`\u{1F916} Sindre (Vault): I'm on it! (${o.action})`)));
+    dispatcher.on("agent:EITRI", (o) => console.log(import_chalk25.default.green(`\u{1F477} Eitri (Smith): Ready to build! (${o.action})`)));
+    console.log(import_chalk25.default.dim("\u{1F9E0} Frank is analyzing your intent..."));
     await new Promise((r) => setTimeout(r, 800));
     if (intent.toLowerCase().includes("db") || intent.toLowerCase().includes("database")) {
       await dispatcher.dispatch("FRANK", "SINDRE", intent, "db.analyze", { raw: intent });
     } else if (intent.toLowerCase().includes("create") || intent.toLowerCase().includes("code")) {
       await dispatcher.dispatch("FRANK", "EITRI", intent, "fs.write", { path: "src/demo.ts", content: "// demo" });
     } else {
-      console.log(import_chalk24.default.gray("Frank didn't understand. Try 'create file' or 'check database'."));
+      console.log(import_chalk25.default.gray("Frank didn't understand. Try 'create file' or 'check database'."));
     }
   });
   return command;
 }
 
-// src/commands/sync-rules.ts
-init_cjs_shims();
-var import_commander17 = require("commander");
-var import_chalk25 = __toESM(require("chalk"), 1);
-var import_ora11 = __toESM(require("ora"), 1);
-init_config();
-var import_axios17 = __toESM(require("axios"), 1);
-function createSyncRulesCommand() {
-  const syncRules = new import_commander17.Command("sync-rules");
-  syncRules.description("\u{1F6E1}\uFE0F Push Frank Protocol v1.0 to all existing projects").option("--dry-run", "Preview changes without pushing to GitHub").option("--project <id>", "Sync a specific project only").action(async (options) => {
-    const spinner = (0, import_ora11.default)("\u{1F6E1}\uFE0F Frank Protocol: Initializing retroactive sync...").start();
-    const results = [];
-    let apiKey;
-    try {
-      apiKey = getApiKey();
-    } catch (e) {
-      spinner.fail(import_chalk25.default.red('Not authenticated. Run "rigstate login" first.'));
-      return;
-    }
-    const apiUrl = getApiUrl();
-    try {
-      spinner.text = "Fetching projects...";
-      const projectsResponse = await import_axios17.default.get(`${apiUrl}/api/v1/projects`, {
-        params: options.project ? { project_id: options.project } : {},
-        headers: { Authorization: `Bearer ${apiKey}` }
-      });
-      if (!projectsResponse.data.success) {
-        throw new Error(projectsResponse.data.error || "Failed to fetch projects");
-      }
-      let projects = projectsResponse.data.data.projects || [];
-      if (projects.length === 0) {
-        spinner.fail(import_chalk25.default.red("No projects found."));
-        return;
-      }
-      if (projects.length > 1 && !options.project) {
-        spinner.stop();
-        const inquirer4 = (await import("inquirer")).default;
-        const { selectedProjectId } = await inquirer4.prompt([{
-          type: "list",
-          name: "selectedProjectId",
-          message: "Multiple projects found. Which one do you want to sync?",
-          choices: projects.map((p) => ({
-            name: `${p.name} [${p.id}]`,
-            value: p.id
-          }))
-        }]);
-        projects = projects.filter((p) => p.id === selectedProjectId);
-        options.project = selectedProjectId;
-        try {
-          const fs23 = await import("fs/promises");
-          const path23 = await import("path");
-          const envPath = path23.join(process.cwd(), ".env");
-          const envLocalPath = path23.join(process.cwd(), ".env.local");
-          let targetEnv = envLocalPath;
-          try {
-            await fs23.access(envLocalPath);
-          } catch {
-            try {
-              await fs23.access(envPath);
-              targetEnv = envPath;
-            } catch {
-              targetEnv = envPath;
-            }
-          }
-          let content = "";
-          try {
-            content = await fs23.readFile(targetEnv, "utf-8");
-          } catch {
-          }
-          if (!content.includes("RIGSTATE_PROJECT_ID")) {
-            const newContent = content.endsWith("\n") || content === "" ? `${content}RIGSTATE_PROJECT_ID=${selectedProjectId}
-` : `${content}
-RIGSTATE_PROJECT_ID=${selectedProjectId}
-`;
-            await fs23.writeFile(targetEnv, newContent, "utf-8");
-            console.log(import_chalk25.default.dim(`   \u{1F4BE} Saved default project to ${path23.basename(targetEnv)}`));
-          }
-        } catch (e) {
-        }
-      }
-      spinner.succeed(`Syncing project: ${projects[0].name}`);
-      for (const project of projects) {
-        const projectSpinner = (0, import_ora11.default)(`  Syncing: ${project.name}...`).start();
-        try {
-          if (options.dryRun) {
-            projectSpinner.succeed(import_chalk25.default.yellow(`  [DRY-RUN] Would sync: ${project.name}`));
-            results.push({ projectId: project.id, projectName: project.name, status: "success" });
-            continue;
-          }
-          const syncResponse = await import_axios17.default.post(`${apiUrl}/api/v1/rules/sync`, {
-            project_id: project.id
-          }, {
-            headers: { Authorization: `Bearer ${apiKey}` }
-          });
-          if (syncResponse.data.success) {
-            if (syncResponse.data.data.github_synced) {
-              projectSpinner.succeed(import_chalk25.default.green(`  \u2705 ${project.name} [${project.id}] \u2192 GitHub synced`));
-            } else {
-              projectSpinner.info(import_chalk25.default.blue(`  \u2139\uFE0F ${project.name} [${project.id}] \u2192 Rules generated (no GitHub)`));
-            }
-            const files = syncResponse.data.data.files;
-            if (files && Array.isArray(files) && (projects.length === 1 || options.project)) {
-              const fs23 = await import("fs/promises");
-              const path23 = await import("path");
-              for (const file of files) {
-                const filePath = path23.join(process.cwd(), file.path);
-                await fs23.mkdir(path23.dirname(filePath), { recursive: true });
-                await fs23.writeFile(filePath, file.content, "utf-8");
-              }
-              console.log(import_chalk25.default.dim(`      \u{1F4BE} Wrote ${files.length} rule files to local .cursor/rules/`));
-            }
-            results.push({ projectId: project.id, projectName: project.name, status: "success" });
-          } else {
-            projectSpinner.warn(import_chalk25.default.yellow(`  \u26A0\uFE0F ${project.name} \u2192 ${syncResponse.data.error || "Unknown error"}`));
-            results.push({ projectId: project.id, projectName: project.name, status: "failed", error: syncResponse.data.error });
-          }
-        } catch (e) {
-          projectSpinner.fail(import_chalk25.default.red(`  \u274C ${project.name}: ${e.message}`));
-          results.push({ projectId: project.id, projectName: project.name, status: "failed", error: e.message });
-        }
-      }
-      console.log("");
-      console.log(import_chalk25.default.bold("\u{1F4CA} Sync Summary:"));
-      const successful = results.filter((r) => r.status === "success").length;
-      const failed = results.filter((r) => r.status === "failed").length;
-      console.log(import_chalk25.default.green(`  \u2705 Successful: ${successful}`));
-      if (failed > 0) {
-        console.log(import_chalk25.default.red(`  \u274C Failed: ${failed}`));
-      }
-      console.log("");
-      console.log(import_chalk25.default.cyan("\u{1F6E1}\uFE0F Frank Protocol v1.0 has been injected into the rules engine."));
-      console.log(import_chalk25.default.dim("   All new chats will now boot with mandatory governance checks."));
-    } catch (e) {
-      spinner.fail(import_chalk25.default.red("Sync failed: " + e.message));
-    }
-  });
-  return syncRules;
-}
+// src/index.ts
+init_sync_rules();
 
 // src/commands/override.ts
 init_cjs_shims();