@scheduler-systems/gal-run 0.0.469 → 0.0.471

package/dist/index.cjs

@@ -3159,7 +3159,7 @@ var require_main = __commonJS({
       return supportsAnsi() ? `\x1B[2m${text}\x1B[0m` : text;
     }
     var LINE = /(?:^|^)\s*(?:export\s+)?([\w.-]+)(?:\s*=\s*?|:\s+?)(\s*'(?:\\'|[^'])*'|\s*"(?:\\"|[^"])*"|\s*`(?:\\`|[^`])*`|[^#\r\n]+)?\s*(?:#.*)?(?:$|$)/mg;
-    function parse4(src) {
+    function parse5(src) {
       const obj = {};
       let lines = src.toString();
       lines = lines.replace(/\r\n?/mg, "\n");
@@ -3431,7 +3431,7 @@ var require_main = __commonJS({
       _parseVault,
       config: config2,
       decrypt,
-      parse: parse4,
+      parse: parse5,
       populate
     };
     module2.exports.configDotenv = DotenvModule.configDotenv;
@@ -3970,7 +3970,7 @@ var cliVersion, defaultApiUrl, BUILD_CONSTANTS, constants_default;
 var init_constants = __esm({
   "src/constants.ts"() {
     "use strict";
-    cliVersion = true ? "0.0.469" : "0.0.0-dev";
+    cliVersion = true ? "0.0.471" : "0.0.0-dev";
     defaultApiUrl = true ? "https://api.gal.run" : "http://localhost:3000";
     BUILD_CONSTANTS = Object.freeze([cliVersion, defaultApiUrl]);
     constants_default = BUILD_CONSTANTS;
@@ -11678,7 +11678,7 @@ var require_public_api = __commonJS({
       }
       return doc;
     }
-    function parse4(src, reviver, options) {
+    function parse5(src, reviver, options) {
       let _reviver = void 0;
       if (typeof reviver === "function") {
         _reviver = reviver;
@@ -11719,7 +11719,7 @@ var require_public_api = __commonJS({
         return value.toString(options);
       return new Document.Document(value, _replacer, options).toString(options);
     }
-    exports2.parse = parse4;
+    exports2.parse = parse5;
     exports2.parseAllDocuments = parseAllDocuments;
     exports2.parseDocument = parseDocument;
     exports2.stringify = stringify;
@@ -11803,7 +11803,7 @@ function detectEnvironment() {
     return "dev";
   }
   try {
-    const version2 = true ? "0.0.469" : void 0;
+    const version2 = true ? "0.0.471" : void 0;
     if (version2 && version2.includes("-local")) {
       return "dev";
     }
@@ -14511,7 +14511,7 @@ function getId() {
 }
 function getCliVersion() {
   try {
-    return true ? "0.0.469" : "0.0.0-dev";
+    return true ? "0.0.471" : "0.0.0-dev";
   } catch {
     return "0.0.0-dev";
   }
@@ -15821,6 +15821,13 @@ var init_secrets = __esm({
   }
 });
 
+// ../../packages/types/dist/environments.js
+var init_environments = __esm({
+  "../../packages/types/dist/environments.js"() {
+    "use strict";
+  }
+});
+
 // ../../packages/types/dist/learning.js
 var init_learning = __esm({
   "../../packages/types/dist/learning.js"() {
@@ -16196,6 +16203,7 @@ var init_dist2 = __esm({
     init_sso();
     init_memory();
     init_secrets();
+    init_environments();
     init_learning();
     init_enforcement_mode();
     init_sdlc_evaluation();
@@ -17796,11 +17804,11 @@ function getFeatureFlags() {
   let isPartnerFromApi = false;
   if (!isInternalEnv) {
     try {
-      const { readFileSync: readFileSync45, existsSync: existsSync50 } = require("fs");
-      const { join: join54 } = require("path");
+      const { readFileSync: readFileSync45, existsSync: existsSync51 } = require("fs");
+      const { join: join55 } = require("path");
       const { homedir: homedir30 } = require("os");
-      const configPath = join54(homedir30(), ".gal", "config.json");
-      if (existsSync50(configPath)) {
+      const configPath = join55(homedir30(), ".gal", "config.json");
+      if (existsSync51(configPath)) {
         const config2 = JSON.parse(readFileSync45(configPath, "utf-8"));
         const cacheAge = Date.now() - (config2.flagsCachedAt || config2.internalOrgsCheckedAt || 0);
         if (cacheAge < CACHE_MAX_AGE_MS) {
@@ -27462,7 +27470,7 @@ var require_thread_stream = __commonJS({
     var { version: version2 } = require_package2();
     var { EventEmitter: EventEmitter3 } = require("events");
     var { Worker } = require("worker_threads");
-    var { join: join54 } = require("path");
+    var { join: join55 } = require("path");
     var { pathToFileURL } = require("url");
     var { wait } = require_wait();
     var {
@@ -27498,7 +27506,7 @@ var require_thread_stream = __commonJS({
     function createWorker(stream, opts) {
       const { filename, workerData } = opts;
       const bundlerOverrides = "__bundlerPathsOverrides" in globalThis ? globalThis.__bundlerPathsOverrides : {};
-      const toExecute = bundlerOverrides["thread-stream-worker"] || join54(__dirname, "lib", "worker.js");
+      const toExecute = bundlerOverrides["thread-stream-worker"] || join55(__dirname, "lib", "worker.js");
       const worker = new Worker(toExecute, {
         ...opts.workerOpts,
         trackUnmanagedFds: false,
@@ -27884,7 +27892,7 @@ var require_transport = __commonJS({
     "use strict";
     var { createRequire: createRequire3 } = require("module");
     var getCallers = require_caller();
-    var { join: join54, isAbsolute, sep } = require("node:path");
+    var { join: join55, isAbsolute, sep } = require("node:path");
     var sleep2 = require_atomic_sleep();
     var onExit2 = require_on_exit_leak_free();
     var ThreadStream = require_thread_stream();
@@ -27947,7 +27955,7 @@ var require_transport = __commonJS({
         throw new Error("only one of target or targets can be specified");
       }
       if (targets) {
-        target = bundlerOverrides["pino-worker"] || join54(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join55(__dirname, "worker.js");
         options.targets = targets.filter((dest) => dest.target).map((dest) => {
           return {
             ...dest,
@@ -27965,7 +27973,7 @@ var require_transport = __commonJS({
           });
         });
       } else if (pipeline) {
-        target = bundlerOverrides["pino-worker"] || join54(__dirname, "worker.js");
+        target = bundlerOverrides["pino-worker"] || join55(__dirname, "worker.js");
         options.pipelines = [pipeline.map((dest) => {
           return {
             ...dest,
@@ -27987,7 +27995,7 @@ var require_transport = __commonJS({
           return origin;
         }
         if (origin === "pino/file") {
-          return join54(__dirname, "..", "file.js");
+          return join55(__dirname, "..", "file.js");
         }
         let fixTarget2;
         for (const filePath of callers) {
@@ -28976,7 +28984,7 @@ var require_safe_stable_stringify = __commonJS({
               return circularValue;
             }
             let res = "";
-            let join54 = ",";
+            let join55 = ",";
             const originalIndentation = indentation;
             if (Array.isArray(value)) {
               if (value.length === 0) {
@@ -28990,7 +28998,7 @@ var require_safe_stable_stringify = __commonJS({
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join54 = `,
+                join55 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -28998,13 +29006,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join54;
+                res += join55;
               }
               const tmp = stringifyFnReplacer(String(i), value, stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join54}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join55}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -29025,7 +29033,7 @@ ${originalIndentation}`;
             let separator = "";
             if (spacer !== "") {
               indentation += spacer;
-              join54 = `,
+              join55 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -29039,13 +29047,13 @@ ${indentation}`;
               const tmp = stringifyFnReplacer(key2, value, stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join54;
+                separator = join55;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...":${whitespace}"${getItemCount(removedKeys)} not stringified"`;
-              separator = join54;
+              separator = join55;
             }
             if (spacer !== "" && separator.length > 1) {
               res = `
@@ -29086,7 +29094,7 @@ ${originalIndentation}`;
             }
             const originalIndentation = indentation;
             let res = "";
-            let join54 = ",";
+            let join55 = ",";
             if (Array.isArray(value)) {
               if (value.length === 0) {
                 return "[]";
@@ -29099,7 +29107,7 @@ ${originalIndentation}`;
                 indentation += spacer;
                 res += `
 ${indentation}`;
-                join54 = `,
+                join55 = `,
 ${indentation}`;
               }
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
@@ -29107,13 +29115,13 @@ ${indentation}`;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
                 res += tmp2 !== void 0 ? tmp2 : "null";
-                res += join54;
+                res += join55;
               }
               const tmp = stringifyArrayReplacer(String(i), value[i], stack, replacer, spacer, indentation);
               res += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res += `${join54}"... ${getItemCount(removedKeys)} not stringified"`;
+                res += `${join55}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               if (spacer !== "") {
                 res += `
@@ -29126,7 +29134,7 @@ ${originalIndentation}`;
             let whitespace = "";
             if (spacer !== "") {
               indentation += spacer;
-              join54 = `,
+              join55 = `,
 ${indentation}`;
               whitespace = " ";
             }
@@ -29135,7 +29143,7 @@ ${indentation}`;
               const tmp = stringifyArrayReplacer(key2, value[key2], stack, replacer, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}:${whitespace}${tmp}`;
-                separator = join54;
+                separator = join55;
               }
             }
             if (spacer !== "" && separator.length > 1) {
@@ -29193,20 +29201,20 @@ ${originalIndentation}`;
               indentation += spacer;
               let res2 = `
 ${indentation}`;
-              const join55 = `,
+              const join56 = `,
 ${indentation}`;
               const maximumValuesToStringify = Math.min(value.length, maximumBreadth);
               let i = 0;
               for (; i < maximumValuesToStringify - 1; i++) {
                 const tmp2 = stringifyIndent(String(i), value[i], stack, spacer, indentation);
                 res2 += tmp2 !== void 0 ? tmp2 : "null";
-                res2 += join55;
+                res2 += join56;
               }
               const tmp = stringifyIndent(String(i), value[i], stack, spacer, indentation);
               res2 += tmp !== void 0 ? tmp : "null";
               if (value.length - 1 > maximumBreadth) {
                 const removedKeys = value.length - maximumBreadth - 1;
-                res2 += `${join55}"... ${getItemCount(removedKeys)} not stringified"`;
+                res2 += `${join56}"... ${getItemCount(removedKeys)} not stringified"`;
               }
               res2 += `
 ${originalIndentation}`;
@@ -29222,16 +29230,16 @@ ${originalIndentation}`;
               return '"[Object]"';
             }
             indentation += spacer;
-            const join54 = `,
+            const join55 = `,
 ${indentation}`;
             let res = "";
             let separator = "";
             let maximumPropertiesToStringify = Math.min(keyLength, maximumBreadth);
             if (isTypedArrayWithEntries(value)) {
-              res += stringifyTypedArray(value, join54, maximumBreadth);
+              res += stringifyTypedArray(value, join55, maximumBreadth);
               keys = keys.slice(value.length);
               maximumPropertiesToStringify -= value.length;
-              separator = join54;
+              separator = join55;
             }
             if (deterministic) {
               keys = sort(keys, comparator);
@@ -29242,13 +29250,13 @@ ${indentation}`;
               const tmp = stringifyIndent(key2, value[key2], stack, spacer, indentation);
               if (tmp !== void 0) {
                 res += `${separator}${strEscape(key2)}: ${tmp}`;
-                separator = join54;
+                separator = join55;
               }
             }
             if (keyLength > maximumBreadth) {
               const removedKeys = keyLength - maximumBreadth;
               res += `${separator}"...": "${getItemCount(removedKeys)} not stringified"`;
-              separator = join54;
+              separator = join55;
             }
             if (separator !== "") {
               res = `
@@ -41744,24 +41752,24 @@ var require_fast_uri = __commonJS({
     function normalize(uri, options) {
       if (typeof uri === "string") {
         uri = /** @type {T} */
-        serialize(parse4(uri, options), options);
+        serialize(parse5(uri, options), options);
       } else if (typeof uri === "object") {
         uri = /** @type {T} */
-        parse4(serialize(uri, options), options);
+        parse5(serialize(uri, options), options);
       }
       return uri;
     }
     function resolve11(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
-      const resolved = resolveComponent(parse4(baseURI, schemelessOptions), parse4(relativeURI, schemelessOptions), schemelessOptions, true);
+      const resolved = resolveComponent(parse5(baseURI, schemelessOptions), parse5(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
       return serialize(resolved, schemelessOptions);
     }
     function resolveComponent(base, relative10, options, skipNormalization) {
       const target = {};
       if (!skipNormalization) {
-        base = parse4(serialize(base, options), options);
-        relative10 = parse4(serialize(relative10, options), options);
+        base = parse5(serialize(base, options), options);
+        relative10 = parse5(serialize(relative10, options), options);
       }
       options = options || {};
       if (!options.tolerant && relative10.scheme) {
@@ -41813,13 +41821,13 @@ var require_fast_uri = __commonJS({
     function equal(uriA, uriB, options) {
       if (typeof uriA === "string") {
         uriA = unescape(uriA);
-        uriA = serialize(normalizeComponentEncoding(parse4(uriA, options), true), { ...options, skipEscape: true });
+        uriA = serialize(normalizeComponentEncoding(parse5(uriA, options), true), { ...options, skipEscape: true });
       } else if (typeof uriA === "object") {
         uriA = serialize(normalizeComponentEncoding(uriA, true), { ...options, skipEscape: true });
       }
       if (typeof uriB === "string") {
         uriB = unescape(uriB);
-        uriB = serialize(normalizeComponentEncoding(parse4(uriB, options), true), { ...options, skipEscape: true });
+        uriB = serialize(normalizeComponentEncoding(parse5(uriB, options), true), { ...options, skipEscape: true });
       } else if (typeof uriB === "object") {
         uriB = serialize(normalizeComponentEncoding(uriB, true), { ...options, skipEscape: true });
       }
@@ -41888,7 +41896,7 @@ var require_fast_uri = __commonJS({
       return uriTokens.join("");
     }
     var URI_PARSE = /^(?:([^#/:?]+):)?(?:\/\/((?:([^#/?@]*)@)?(\[[^#/?\]]+\]|[^#/:?]*)(?::(\d*))?))?([^#?]*)(?:\?([^#]*))?(?:#((?:.|[\n\r])*))?/u;
-    function parse4(uri, opts) {
+    function parse5(uri, opts) {
       const options = Object.assign({}, opts);
       const parsed = {
         scheme: void 0,
@@ -41982,7 +41990,7 @@ var require_fast_uri = __commonJS({
       resolveComponent,
       equal,
       serialize,
-      parse: parse4
+      parse: parse5
     };
     module2.exports = fastUri;
     module2.exports.default = fastUri;
@@ -46519,11 +46527,11 @@ function createApprovedConfigCommand() {
     const spinner = options.json ? null : ora(`Fetching approved config for "${org}"...`).start();
     try {
       let findMdFiles2 = function(dir) {
-        if (!existsSync50(dir)) return [];
+        if (!existsSync51(dir)) return [];
         const entries = readdirSync19(dir, { withFileTypes: true });
         const files = [];
         for (const entry of entries) {
-          const fullPath = join54(dir, entry.name);
+          const fullPath = join55(dir, entry.name);
           if (entry.isDirectory()) files.push(...findMdFiles2(fullPath));
           else if (entry.name.endsWith(".md")) files.push(fullPath);
         }
@@ -46541,11 +46549,11 @@ function createApprovedConfigCommand() {
         }
         return;
       }
-      const { existsSync: existsSync50, readdirSync: readdirSync19, readFileSync: readFileSync45 } = await import("fs");
-      const { join: join54, relative: relative10, basename: basename9 } = await import("path");
+      const { existsSync: existsSync51, readdirSync: readdirSync19, readFileSync: readFileSync45 } = await import("fs");
+      const { join: join55, relative: relative10, basename: basename9 } = await import("path");
       const baseDir = options.dir || process.cwd();
-      const commandsDir = join54(baseDir, ".claude", "commands");
-      const agentsDir = join54(baseDir, ".claude", "agents");
+      const commandsDir = join55(baseDir, ".claude", "commands");
+      const agentsDir = join55(baseDir, ".claude", "agents");
       const localCommandNames = findMdFiles2(commandsDir).map(
         (f) => relative10(commandsDir, f).replace(/\.md$/, "").replace(/\//g, ":")
       );
@@ -49712,6 +49720,69 @@ var init_sync_initialization = __esm({
   }
 });
 
+// src/utils/git-utils.ts
+function isGitInstalled() {
+  if (cachedGitInstalled !== null) {
+    return cachedGitInstalled;
+  }
+  try {
+    (0, import_child_process8.execSync)("git --version", { stdio: "ignore", timeout: 5e3 });
+    cachedGitInstalled = true;
+  } catch {
+    cachedGitInstalled = false;
+  }
+  return cachedGitInstalled;
+}
+function findGitRepoRoot(startPath = process.cwd()) {
+  let currentPath = startPath;
+  const root = (0, import_path23.parse)(currentPath).root;
+  while (currentPath !== root) {
+    const gitPath = (0, import_path23.join)(currentPath, ".git");
+    if ((0, import_fs24.existsSync)(gitPath)) {
+      return currentPath;
+    }
+    currentPath = (0, import_path23.dirname)(currentPath);
+  }
+  if ((0, import_fs24.existsSync)((0, import_path23.join)(root, ".git"))) {
+    return root;
+  }
+  return null;
+}
+function checkGitConflict(filePath, repoRoot) {
+  if (!repoRoot || !isGitInstalled()) {
+    return "no-git";
+  }
+  try {
+    (0, import_child_process8.execFileSync)("git", ["ls-files", "--error-unmatch", filePath], {
+      cwd: repoRoot,
+      stdio: "pipe",
+      timeout: 5e3
+    });
+    try {
+      (0, import_child_process8.execFileSync)("git", ["diff", "--quiet", "HEAD", "--", filePath], {
+        cwd: repoRoot,
+        stdio: "pipe",
+        timeout: 5e3
+      });
+      return "tracked-clean";
+    } catch {
+      return "tracked-modified";
+    }
+  } catch {
+    return "untracked";
+  }
+}
+var import_child_process8, import_fs24, import_path23, cachedGitInstalled;
+var init_git_utils = __esm({
+  "src/utils/git-utils.ts"() {
+    "use strict";
+    import_child_process8 = require("child_process");
+    import_fs24 = require("fs");
+    import_path23 = require("path");
+    cachedGitInstalled = null;
+  }
+});
+
 // src/utils/drift-check.ts
 var drift_check_exports = {};
 __export(drift_check_exports, {
@@ -49725,12 +49796,12 @@ function hashContent(content) {
   return (0, import_crypto5.createHash)("sha256").update(content).digest("hex").substring(0, 16);
 }
 function getUserSettingsPath() {
-  return (0, import_path23.join)((0, import_os18.homedir)(), ".claude", "settings.json");
+  return (0, import_path24.join)((0, import_os18.homedir)(), ".claude", "settings.json");
 }
 function readLocalSettings(settingsPath) {
-  if (!(0, import_fs24.existsSync)(settingsPath)) return null;
+  if (!(0, import_fs25.existsSync)(settingsPath)) return null;
   try {
-    return (0, import_fs24.readFileSync)(settingsPath, "utf-8");
+    return (0, import_fs25.readFileSync)(settingsPath, "utf-8");
   } catch {
     return null;
   }
@@ -49790,10 +49861,10 @@ function printDriftWarning(result) {
   console.log();
 }
 async function runSessionDriftCheck(projectRoot) {
-  const syncStatePath = (0, import_path23.join)(projectRoot, ".gal", "sync-state.json");
-  if (!(0, import_fs24.existsSync)(syncStatePath)) return null;
+  const syncStatePath = (0, import_path24.join)(projectRoot, ".gal", "sync-state.json");
+  if (!(0, import_fs25.existsSync)(syncStatePath)) return null;
   try {
-    const stateContent = (0, import_fs24.readFileSync)(syncStatePath, "utf-8");
+    const stateContent = (0, import_fs25.readFileSync)(syncStatePath, "utf-8");
     const state = JSON.parse(stateContent);
     const claudeState = state.platforms?.claude;
     const orgHash = claudeState?.lastSyncHash || state.lastSyncHash || null;
@@ -49823,12 +49894,12 @@ async function runSessionDriftCheck(projectRoot) {
     return null;
   }
 }
-var import_fs24, import_path23, import_os18, import_crypto5;
+var import_fs25, import_path24, import_os18, import_crypto5;
 var init_drift_check = __esm({
   "src/utils/drift-check.ts"() {
     "use strict";
-    import_fs24 = require("fs");
-    import_path23 = require("path");
+    import_fs25 = require("fs");
+    import_path24 = require("path");
     import_os18 = require("os");
     import_crypto5 = require("crypto");
     init_source();
@@ -49841,30 +49912,30 @@ function countEnabledDispatchCategories(categories) {
   return getValidDispatchCategories(categories).filter((category) => category.enabled).length;
 }
 function installCursorGalCliRules(directory) {
-  const cursorRulesDir = (0, import_path24.join)(directory, ".cursor", "rules", "gal-cli");
-  const rulesPath = (0, import_path24.join)(cursorRulesDir, "RULE.md");
+  const cursorRulesDir = (0, import_path25.join)(directory, ".cursor", "rules", "gal-cli");
+  const rulesPath = (0, import_path25.join)(cursorRulesDir, "RULE.md");
   try {
-    if ((0, import_fs25.existsSync)(rulesPath)) {
-      const existingContent = (0, import_fs25.readFileSync)(rulesPath, "utf-8");
+    if ((0, import_fs26.existsSync)(rulesPath)) {
+      const existingContent = (0, import_fs26.readFileSync)(rulesPath, "utf-8");
       const versionMatch = existingContent.match(/GAL_CURSOR_RULES_VERSION = "([^"]+)"/);
       if (versionMatch && versionMatch[1] === GAL_CLI_CURSOR_RULES_VERSION) {
         return true;
       }
     }
-    if (!(0, import_fs25.existsSync)(cursorRulesDir)) {
-      (0, import_fs25.mkdirSync)(cursorRulesDir, { recursive: true });
+    if (!(0, import_fs26.existsSync)(cursorRulesDir)) {
+      (0, import_fs26.mkdirSync)(cursorRulesDir, { recursive: true });
     }
-    (0, import_fs25.writeFileSync)(rulesPath, GAL_CLI_CURSOR_RULES, "utf-8");
+    (0, import_fs26.writeFileSync)(rulesPath, GAL_CLI_CURSOR_RULES, "utf-8");
     return true;
   } catch {
     return false;
   }
 }
 function writeSyncStateV2(orgName, platformStates, hookSettings) {
-  const galDir = (0, import_path24.join)(process.cwd(), ".gal");
-  const statePath = (0, import_path24.join)(galDir, "sync-state.json");
-  if (!(0, import_fs25.existsSync)(galDir)) {
-    (0, import_fs25.mkdirSync)(galDir, { recursive: true });
+  const galDir = (0, import_path25.join)(process.cwd(), ".gal");
+  const statePath = (0, import_path25.join)(galDir, "sync-state.json");
+  if (!(0, import_fs26.existsSync)(galDir)) {
+    (0, import_fs26.mkdirSync)(galDir, { recursive: true });
   }
   const platforms = {};
   for (const [platform5, state2] of platformStates) {
@@ -49885,7 +49956,7 @@ function writeSyncStateV2(orgName, platformStates, hookSettings) {
     // After a successful sync, approved hash matches local hash
     approvedConfigHash: primaryState?.lastSyncHash
   };
-  (0, import_fs25.writeFileSync)(statePath, JSON.stringify(state, null, 2), "utf-8");
+  (0, import_fs26.writeFileSync)(statePath, JSON.stringify(state, null, 2), "utf-8");
 }
 function writeSyncState(orgName, localHash, approvedHash, version2, syncedFiles = [], policyName, hookSettings) {
   const platformStates = /* @__PURE__ */ new Map();
@@ -49941,16 +50012,16 @@ function findChangedKeys(existing, incoming, prefix = "") {
 }
 function readSyncState() {
   const projectRoot = findProjectRoot();
-  const statePath = (0, import_path24.join)(projectRoot, ".gal", "sync-state.json");
-  if (!(0, import_fs25.existsSync)(statePath)) {
+  const statePath = (0, import_path25.join)(projectRoot, ".gal", "sync-state.json");
+  if (!(0, import_fs26.existsSync)(statePath)) {
     return null;
   }
   try {
-    const content = (0, import_fs25.readFileSync)(statePath, "utf-8");
+    const content = (0, import_fs26.readFileSync)(statePath, "utf-8");
     const rawState = JSON.parse(content);
     if (!rawState.schemaVersion) {
       const migratedState = migrateSyncStateV1ToV2(rawState);
-      (0, import_fs25.writeFileSync)(statePath, JSON.stringify(migratedState, null, 2), "utf-8");
+      (0, import_fs26.writeFileSync)(statePath, JSON.stringify(migratedState, null, 2), "utf-8");
       return migratedState;
     }
     return rawState;
@@ -50123,8 +50194,8 @@ async function pushLearnings(directory, orgName, apiUrl, headers, options) {
     let repoSlug;
     let sessionId = process.env.CLAUDE_SESSION_ID || `cli-${Date.now()}`;
     try {
-      const { execSync: execSync14 } = await import("child_process");
-      const remoteUrl = execSync14("git remote get-url origin", { cwd: directory, encoding: "utf-8" }).trim();
+      const { execSync: execSync15 } = await import("child_process");
+      const remoteUrl = execSync15("git remote get-url origin", { cwd: directory, encoding: "utf-8" }).trim();
       const match = remoteUrl.match(/github\.com[:/]([^/]+\/[^/]+?)(\.git)?$/);
       if (match) {
         repoSlug = match[1];
@@ -50132,32 +50203,32 @@ async function pushLearnings(directory, orgName, apiUrl, headers, options) {
     } catch {
     }
     const learningFiles = [];
-    const claudeMdPath = (0, import_path24.join)(directory, ".claude", "CLAUDE.md");
-    if ((0, import_fs25.existsSync)(claudeMdPath)) {
+    const claudeMdPath = (0, import_path25.join)(directory, ".claude", "CLAUDE.md");
+    if ((0, import_fs26.existsSync)(claudeMdPath)) {
       learningFiles.push({ path: claudeMdPath, type: "instruction" });
     }
-    const rootClaudeMdPath = (0, import_path24.join)(directory, "CLAUDE.md");
-    if ((0, import_fs25.existsSync)(rootClaudeMdPath)) {
+    const rootClaudeMdPath = (0, import_path25.join)(directory, "CLAUDE.md");
+    if ((0, import_fs26.existsSync)(rootClaudeMdPath)) {
       learningFiles.push({ path: rootClaudeMdPath, type: "memory" });
     }
-    const rulesDir = (0, import_path24.join)(directory, ".claude", "rules");
-    if ((0, import_fs25.existsSync)(rulesDir)) {
-      const ruleFiles = (0, import_fs25.readdirSync)(rulesDir).filter((f) => f.endsWith(".md"));
+    const rulesDir = (0, import_path25.join)(directory, ".claude", "rules");
+    if ((0, import_fs26.existsSync)(rulesDir)) {
+      const ruleFiles = (0, import_fs26.readdirSync)(rulesDir).filter((f) => f.endsWith(".md"));
       for (const file of ruleFiles) {
-        learningFiles.push({ path: (0, import_path24.join)(rulesDir, file), type: "instruction" });
+        learningFiles.push({ path: (0, import_path25.join)(rulesDir, file), type: "instruction" });
       }
     }
-    const commandsDir = (0, import_path24.join)(directory, ".claude", "commands");
-    if ((0, import_fs25.existsSync)(commandsDir)) {
-      const cmdFiles = (0, import_fs25.readdirSync)(commandsDir).filter((f) => f.endsWith(".md"));
+    const commandsDir = (0, import_path25.join)(directory, ".claude", "commands");
+    if ((0, import_fs26.existsSync)(commandsDir)) {
+      const cmdFiles = (0, import_fs26.readdirSync)(commandsDir).filter((f) => f.endsWith(".md"));
       for (const file of cmdFiles) {
-        learningFiles.push({ path: (0, import_path24.join)(commandsDir, file), type: "command" });
+        learningFiles.push({ path: (0, import_path25.join)(commandsDir, file), type: "command" });
       }
     }
     spinner.text = `Found ${learningFiles.length} source files, extracting learnings...`;
     const learnings = [];
     for (const { path: path8, type } of learningFiles) {
-      const content = (0, import_fs25.readFileSync)(path8, "utf-8");
+      const content = (0, import_fs26.readFileSync)(path8, "utf-8");
       const relPath = path8.replace(directory + "/", "");
       const learningPattern = /^##\s+(.*(?:Learning|Anti-pattern|Best Practice|CRITICAL).*?)$/i;
       const hasLearnings = content.match(new RegExp(learningPattern.source, "im"));
@@ -50403,7 +50474,7 @@ function createSyncCommand() {
     }
     console.log();
   });
-  command.argument("[orgName]", "Organization name (uses default if not specified)").option("-d, --directory <path>", "Local config directory (auto-detects project root)", process.cwd()).option("-p, --platform <platform>", "Filter by platform (claude, cursor, etc.)").option("--pull", "Download CISO-approved config to local directory").option("--push", "Push session learnings to organization (capture learning pipeline)").option("--repo <name>", "Personal repo to sync from (for users without org)").option("--check", "Check if local files match approved config (for hooks)").option("--regenerate", "Regenerate native configs from canonical .gal/ directory (offline)").option("--auto", "Non-interactive mode for hooks/scripts (no prompts, exit cleanly)").option("--output-json", "Output as JSON").option("--dry-run", "Preview what would be pushed without making API calls").option("--target <target>", "Sync specific target: configs (default), domains (domain allowlist)").action(async (orgName, options) => {
+  command.argument("[orgName]", "Organization name (uses default if not specified)").option("-d, --directory <path>", "Local config directory (auto-detects project root)", process.cwd()).option("-p, --platform <platform>", "Filter by platform (claude, cursor, etc.)").option("--pull", "Download CISO-approved config to local directory").option("--push", "Push session learnings to organization (capture learning pipeline)").option("--repo <name>", "Personal repo to sync from (for users without org)").option("--check", "Check if local files match approved config (for hooks)").option("--regenerate", "Regenerate native configs from canonical .gal/ directory (offline)").option("--auto", "Non-interactive mode for hooks/scripts (no prompts, exit cleanly)").option("--output-json", "Output as JSON").option("--dry-run", "Preview what would be pushed without making API calls").option("--force", "Overwrite git-tracked files even if they have local modifications (#5068)").option("--target <target>", "Sync specific target: configs (default), domains (domain allowlist)").action(async (orgName, options) => {
     try {
       const directory = findProjectRoot(options.directory);
       if (options.pull && options.auto && !shouldRunAutoSync(directory, options.directory || process.cwd())) {
@@ -50452,30 +50523,30 @@ function createSyncCommand() {
           }
           const allowlist = await res.json();
           spinner2.succeed(source_default.green("Domain allowlist fetched"));
-          const galDir = (0, import_path24.join)(directory, ".gal");
-          if (!(0, import_fs25.existsSync)(galDir)) {
-            (0, import_fs25.mkdirSync)(galDir, { recursive: true });
+          const galDir = (0, import_path25.join)(directory, ".gal");
+          if (!(0, import_fs26.existsSync)(galDir)) {
+            (0, import_fs26.mkdirSync)(galDir, { recursive: true });
           }
-          const allowlistPath = (0, import_path24.join)(galDir, "domain-allowlist.json");
-          (0, import_fs25.writeFileSync)(allowlistPath, JSON.stringify(allowlist, null, 2) + "\n", "utf-8");
+          const allowlistPath = (0, import_path25.join)(galDir, "domain-allowlist.json");
+          (0, import_fs26.writeFileSync)(allowlistPath, JSON.stringify(allowlist, null, 2) + "\n", "utf-8");
           console.log(source_default.green(`
   Synced domain allowlist to .gal/domain-allowlist.json`));
           console.log(source_default.dim(`  Domains: ${allowlist.allowedDomains?.length || 0}`));
           console.log(source_default.dim(`  MCP endpoints: ${allowlist.allowedMcpEndpoints?.length || 0}`));
           console.log(source_default.dim(`  Enforced: ${allowlist.enforced ? "yes" : "no (audit-only)"}`));
-          const policiesDir = (0, import_path24.join)(directory, ".github", "policies");
-          if ((0, import_fs25.existsSync)((0, import_path24.join)(directory, ".github"))) {
-            if (!(0, import_fs25.existsSync)(policiesDir)) {
-              (0, import_fs25.mkdirSync)(policiesDir, { recursive: true });
+          const policiesDir = (0, import_path25.join)(directory, ".github", "policies");
+          if ((0, import_fs26.existsSync)((0, import_path25.join)(directory, ".github"))) {
+            if (!(0, import_fs26.existsSync)(policiesDir)) {
+              (0, import_fs26.mkdirSync)(policiesDir, { recursive: true });
             }
-            const policyPath = (0, import_path24.join)(policiesDir, "domain-allowlist.json");
+            const policyPath = (0, import_path25.join)(policiesDir, "domain-allowlist.json");
             const policyContent = {
               version: allowlist.version || 1,
               approvedDomains: allowlist.allowedDomains || [],
               approvedMcpEndpoints: allowlist.allowedMcpEndpoints || [],
               description: "Domains approved for AI agent WebFetch/WebSearch access. Managed by GAL org-level policy."
             };
-            (0, import_fs25.writeFileSync)(policyPath, JSON.stringify(policyContent, null, 2) + "\n", "utf-8");
+            (0, import_fs26.writeFileSync)(policyPath, JSON.stringify(policyContent, null, 2) + "\n", "utf-8");
             console.log(source_default.dim(`  Also updated .github/policies/domain-allowlist.json`));
           }
           console.log();
@@ -50690,7 +50761,9 @@ function createSyncCommand() {
         process.exit(1);
       }
       if (options.pull) {
-        await pullApprovedConfig(configRepo, authRepo, org, directory, options.platform, apiUrl);
+        await pullApprovedConfig(configRepo, authRepo, org, directory, options.platform, apiUrl, {
+          force: options.force ?? false
+        });
         process.exit(0);
       }
       if (options.check) {
@@ -50822,11 +50895,11 @@ function createSyncCommand() {
         process.exit(0);
       }
       const directory = findProjectRoot(settingsOpts.directory || process.cwd());
-      const settingsPath = (0, import_path24.join)(directory, ".claude", "settings.json");
+      const settingsPath = (0, import_path25.join)(directory, ".claude", "settings.json");
       let existingSettings = {};
-      if ((0, import_fs25.existsSync)(settingsPath)) {
+      if ((0, import_fs26.existsSync)(settingsPath)) {
         try {
-          existingSettings = JSON.parse((0, import_fs25.readFileSync)(settingsPath, "utf-8"));
+          existingSettings = JSON.parse((0, import_fs26.readFileSync)(settingsPath, "utf-8"));
         } catch {
           console.error(source_default.red("Error: Could not parse existing .claude/settings.json"));
           process.exit(1);
@@ -50862,11 +50935,11 @@ function createSyncCommand() {
           deny: mergedDeny
         }
       };
-      const claudeDir = (0, import_path24.join)(directory, ".claude");
-      if (!(0, import_fs25.existsSync)(claudeDir)) {
-        (0, import_fs25.mkdirSync)(claudeDir, { recursive: true });
+      const claudeDir = (0, import_path25.join)(directory, ".claude");
+      if (!(0, import_fs26.existsSync)(claudeDir)) {
+        (0, import_fs26.mkdirSync)(claudeDir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(settingsPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
+      (0, import_fs26.writeFileSync)(settingsPath, JSON.stringify(merged, null, 2) + "\n", "utf-8");
       console.log(source_default.green(`
 \u2714 Added ${added.length} deny rule(s) to ${settingsPath}`));
       for (const rule of added) {
@@ -50885,67 +50958,67 @@ function scanLocalConfigs(directory, platformFilter) {
   for (const platform5 of platforms) {
     if (platformFilter && platform5 !== platformFilter) continue;
     const platformDir = getPlatformDirectory(platform5);
-    const fullPath = (0, import_path24.join)(directory, platformDir);
-    if (!(0, import_fs25.existsSync)(fullPath)) continue;
+    const fullPath = (0, import_path25.join)(directory, platformDir);
+    if (!(0, import_fs26.existsSync)(fullPath)) continue;
     const files = [];
-    const settingsPath = (0, import_path24.join)(fullPath, "settings.json");
-    if ((0, import_fs25.existsSync)(settingsPath)) {
+    const settingsPath = (0, import_path25.join)(fullPath, "settings.json");
+    if ((0, import_fs26.existsSync)(settingsPath)) {
       files.push({
         path: settingsPath,
         type: "settings",
-        content: (0, import_fs25.readFileSync)(settingsPath, "utf-8")
+        content: (0, import_fs26.readFileSync)(settingsPath, "utf-8")
       });
     }
-    const rulesDir = (0, import_path24.join)(fullPath, "rules");
-    if ((0, import_fs25.existsSync)(rulesDir)) {
-      const ruleFiles = (0, import_fs25.readdirSync)(rulesDir).filter(
+    const rulesDir = (0, import_path25.join)(fullPath, "rules");
+    if ((0, import_fs26.existsSync)(rulesDir)) {
+      const ruleFiles = (0, import_fs26.readdirSync)(rulesDir).filter(
         (f) => f.endsWith(".md") || f.endsWith(".mdc")
       );
       for (const file of ruleFiles) {
-        const filePath = (0, import_path24.join)(rulesDir, file);
+        const filePath = (0, import_path25.join)(rulesDir, file);
         files.push({
           path: filePath,
           type: "rule",
-          content: (0, import_fs25.readFileSync)(filePath, "utf-8")
+          content: (0, import_fs26.readFileSync)(filePath, "utf-8")
         });
       }
     }
     if (platform5 === "cursor") {
-      const cursorRulesPath = (0, import_path24.join)(directory, ".cursorrules");
-      if ((0, import_fs25.existsSync)(cursorRulesPath)) {
+      const cursorRulesPath = (0, import_path25.join)(directory, ".cursorrules");
+      if ((0, import_fs26.existsSync)(cursorRulesPath)) {
         files.push({
           path: cursorRulesPath,
           type: "rule",
-          content: (0, import_fs25.readFileSync)(cursorRulesPath, "utf-8")
+          content: (0, import_fs26.readFileSync)(cursorRulesPath, "utf-8")
         });
       }
     }
     if (platform5 === "claude") {
-      const commandsDir = (0, import_path24.join)(fullPath, "commands");
-      if ((0, import_fs25.existsSync)(commandsDir)) {
-        const commandFiles = (0, import_fs25.readdirSync)(commandsDir).filter(
+      const commandsDir = (0, import_path25.join)(fullPath, "commands");
+      if ((0, import_fs26.existsSync)(commandsDir)) {
+        const commandFiles = (0, import_fs26.readdirSync)(commandsDir).filter(
           (f) => f.endsWith(".md")
         );
         for (const file of commandFiles) {
-          const filePath = (0, import_path24.join)(commandsDir, file);
+          const filePath = (0, import_path25.join)(commandsDir, file);
           files.push({
             path: filePath,
             type: "command",
-            content: (0, import_fs25.readFileSync)(filePath, "utf-8")
+            content: (0, import_fs26.readFileSync)(filePath, "utf-8")
           });
         }
       }
-      const hooksDir = (0, import_path24.join)(fullPath, "hooks");
-      if ((0, import_fs25.existsSync)(hooksDir)) {
-        const hookFiles = (0, import_fs25.readdirSync)(hooksDir).filter(
+      const hooksDir = (0, import_path25.join)(fullPath, "hooks");
+      if ((0, import_fs26.existsSync)(hooksDir)) {
+        const hookFiles = (0, import_fs26.readdirSync)(hooksDir).filter(
           (f) => f.endsWith(".py") || f.endsWith(".sh")
         );
         for (const file of hookFiles) {
-          const filePath = (0, import_path24.join)(hooksDir, file);
+          const filePath = (0, import_path25.join)(hooksDir, file);
           files.push({
             path: filePath,
             type: "hook",
-            content: (0, import_fs25.readFileSync)(filePath, "utf-8")
+            content: (0, import_fs26.readFileSync)(filePath, "utf-8")
           });
         }
       }
@@ -51058,16 +51131,16 @@ Sync Status for ${orgName}:
   }
 }
 function writeCursorConfig(directory, configData, syncedFiles, syncedItems) {
-  const cursorDir = (0, import_path24.join)(directory, ".cursor");
+  const cursorDir = (0, import_path25.join)(directory, ".cursor");
   if (configData.rules && configData.rules.length > 0) {
-    const rulesDir = (0, import_path24.join)(cursorDir, "rules");
-    if (!(0, import_fs25.existsSync)(rulesDir)) {
-      (0, import_fs25.mkdirSync)(rulesDir, { recursive: true });
+    const rulesDir = (0, import_path25.join)(cursorDir, "rules");
+    if (!(0, import_fs26.existsSync)(rulesDir)) {
+      (0, import_fs26.mkdirSync)(rulesDir, { recursive: true });
     }
     for (const rule of configData.rules) {
       const fileName = rule.name.endsWith(".mdc") || rule.name.endsWith(".md") ? rule.name : `${rule.name}.mdc`;
-      const filePath = (0, import_path24.join)(rulesDir, fileName);
-      (0, import_fs25.writeFileSync)(filePath, rule.content, "utf-8");
+      const filePath = (0, import_path25.join)(rulesDir, fileName);
+      (0, import_fs26.writeFileSync)(filePath, rule.content, "utf-8");
       const relativePath = `.cursor/rules/${fileName}`;
       syncedFiles.push(relativePath);
       syncedItems.push({
@@ -51079,8 +51152,8 @@ function writeCursorConfig(directory, configData, syncedFiles, syncedItems) {
     }
   }
   if (configData.cursorRules?.content) {
-    const cursorRulesPath = (0, import_path24.join)(directory, ".cursorrules");
-    (0, import_fs25.writeFileSync)(cursorRulesPath, configData.cursorRules.content, "utf-8");
+    const cursorRulesPath = (0, import_path25.join)(directory, ".cursorrules");
+    (0, import_fs26.writeFileSync)(cursorRulesPath, configData.cursorRules.content, "utf-8");
     syncedFiles.push(".cursorrules");
     syncedItems.push({
       path: ".cursorrules",
@@ -51090,11 +51163,11 @@ function writeCursorConfig(directory, configData, syncedFiles, syncedItems) {
     });
   }
   if (configData.settings?.content) {
-    if (!(0, import_fs25.existsSync)(cursorDir)) {
-      (0, import_fs25.mkdirSync)(cursorDir, { recursive: true });
+    if (!(0, import_fs26.existsSync)(cursorDir)) {
+      (0, import_fs26.mkdirSync)(cursorDir, { recursive: true });
     }
-    const settingsPath = (0, import_path24.join)(cursorDir, "settings.json");
-    (0, import_fs25.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
+    const settingsPath = (0, import_path25.join)(cursorDir, "settings.json");
+    (0, import_fs26.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
     syncedFiles.push(".cursor/settings.json");
     syncedItems.push({
       path: ".cursor/settings.json",
@@ -51104,77 +51177,108 @@ function writeCursorConfig(directory, configData, syncedFiles, syncedItems) {
     });
   }
 }
-function writeClaudeConfig(directory, configData, syncedFiles, syncedItems, orgName) {
-  const claudeDir = (0, import_path24.join)(directory, ".claude");
+function writeClaudeConfig(directory, configData, syncedFiles, syncedItems, orgName, gitRepoRoot, force, conflictFiles) {
+  const claudeDir = (0, import_path25.join)(directory, ".claude");
+  function isSafeToWrite(filePath, relativePath) {
+    if (force) return true;
+    const repoRoot = gitRepoRoot ?? null;
+    const status = checkGitConflict(filePath, repoRoot);
+    if (status === "tracked-modified") {
+      console.log(
+        source_default.yellow(
+          `  \u26A0 Skipped (git-tracked, local changes): ${relativePath}`
+        )
+      );
+      console.log(
+        source_default.dim(
+          `    Use --force to overwrite. Your local changes were preserved.`
+        )
+      );
+      conflictFiles?.push(relativePath);
+      return false;
+    }
+    if (status === "tracked-clean") {
+      console.log(
+        source_default.dim(`  \u2139 Overwriting git-tracked (unmodified) file: ${relativePath}`)
+      );
+    }
+    return true;
+  }
   if (configData.instructions?.content) {
-    const claudeMdPath = (0, import_path24.join)(directory, "CLAUDE.md");
-    (0, import_fs25.writeFileSync)(claudeMdPath, configData.instructions.content, "utf-8");
-    syncedFiles.push("CLAUDE.md");
-    syncedItems.push({
-      path: "CLAUDE.md",
-      type: "unknown",
-      name: "CLAUDE.md",
-      platform: "claude"
-    });
+    const claudeMdPath = (0, import_path25.join)(directory, "CLAUDE.md");
+    if (isSafeToWrite(claudeMdPath, "CLAUDE.md")) {
+      (0, import_fs26.writeFileSync)(claudeMdPath, configData.instructions.content, "utf-8");
+      syncedFiles.push("CLAUDE.md");
+      syncedItems.push({
+        path: "CLAUDE.md",
+        type: "unknown",
+        name: "CLAUDE.md",
+        platform: "claude"
+      });
+    }
   }
   if (configData.commands && configData.commands.length > 0) {
-    const commandsDir = (0, import_path24.join)(claudeDir, "commands");
-    if (!(0, import_fs25.existsSync)(commandsDir)) {
-      (0, import_fs25.mkdirSync)(commandsDir, { recursive: true });
+    const commandsDir = (0, import_path25.join)(claudeDir, "commands");
+    if (!(0, import_fs26.existsSync)(commandsDir)) {
+      (0, import_fs26.mkdirSync)(commandsDir, { recursive: true });
     }
     for (const cmd of configData.commands) {
       const pathFromName = cmd.name.replace(/:/g, "/");
       const fileName = pathFromName.endsWith(".md") ? pathFromName : `${pathFromName}.md`;
-      const filePath = (0, import_path24.join)(commandsDir, fileName);
-      const fileDir = (0, import_path24.dirname)(filePath);
-      if (!(0, import_fs25.existsSync)(fileDir)) {
-        (0, import_fs25.mkdirSync)(fileDir, { recursive: true });
+      const filePath = (0, import_path25.join)(commandsDir, fileName);
+      const fileDir = (0, import_path25.dirname)(filePath);
+      if (!(0, import_fs26.existsSync)(fileDir)) {
+        (0, import_fs26.mkdirSync)(fileDir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(filePath, cmd.content, "utf-8");
       const relativePath = `.claude/commands/${fileName}`;
-      syncedFiles.push(relativePath);
-      const { description, allowedTools } = parseCommandFrontmatter(cmd.content);
-      syncedItems.push({
-        path: relativePath,
-        type: "commands",
-        name: cmd.name.replace(/\.md$/, ""),
-        description,
-        allowedTools,
-        platform: "claude"
-      });
+      if (isSafeToWrite(filePath, relativePath)) {
+        (0, import_fs26.writeFileSync)(filePath, cmd.content, "utf-8");
+        syncedFiles.push(relativePath);
+        const { description, allowedTools } = parseCommandFrontmatter(cmd.content);
+        syncedItems.push({
+          path: relativePath,
+          type: "commands",
+          name: cmd.name.replace(/\.md$/, ""),
+          description,
+          allowedTools,
+          platform: "claude"
+        });
+      }
     }
   }
   if (configData.hooks && configData.hooks.length > 0) {
-    const hooksDir = (0, import_path24.join)(claudeDir, "hooks");
-    if (!(0, import_fs25.existsSync)(hooksDir)) {
-      (0, import_fs25.mkdirSync)(hooksDir, { recursive: true });
+    const hooksDir = (0, import_path25.join)(claudeDir, "hooks");
+    if (!(0, import_fs26.existsSync)(hooksDir)) {
+      (0, import_fs26.mkdirSync)(hooksDir, { recursive: true });
     }
     for (const hook of configData.hooks) {
-      const filePath = (0, import_path24.join)(hooksDir, hook.name);
-      (0, import_fs25.writeFileSync)(filePath, hook.content, "utf-8");
+      const filePath = (0, import_path25.join)(hooksDir, hook.name);
       const relativePath = `.claude/hooks/${hook.name}`;
-      syncedFiles.push(relativePath);
-      syncedItems.push({
-        path: relativePath,
-        type: "hooks",
-        name: hook.name,
-        platform: "claude"
-      });
+      if (isSafeToWrite(filePath, relativePath)) {
+        (0, import_fs26.writeFileSync)(filePath, hook.content, "utf-8");
+        syncedFiles.push(relativePath);
+        syncedItems.push({
+          path: relativePath,
+          type: "hooks",
+          name: hook.name,
+          platform: "claude"
+        });
+      }
     }
   }
   if (configData.settings?.content) {
-    if (!(0, import_fs25.existsSync)(claudeDir)) {
-      (0, import_fs25.mkdirSync)(claudeDir, { recursive: true });
+    if (!(0, import_fs26.existsSync)(claudeDir)) {
+      (0, import_fs26.mkdirSync)(claudeDir, { recursive: true });
     }
-    const settingsPath = (0, import_path24.join)(claudeDir, "settings.json");
-    if ((0, import_fs25.existsSync)(settingsPath)) {
-      const existingContent = (0, import_fs25.readFileSync)(settingsPath, "utf-8");
+    const settingsPath = (0, import_path25.join)(claudeDir, "settings.json");
+    if ((0, import_fs26.existsSync)(settingsPath)) {
+      const existingContent = (0, import_fs26.readFileSync)(settingsPath, "utf-8");
       const newContent = configData.settings.content;
       const existingHash = calculateConfigHash(existingContent);
       const newHash = calculateConfigHash(newContent);
       if (existingHash !== newHash) {
         const backupPath = `${settingsPath}.bak`;
-        (0, import_fs25.writeFileSync)(backupPath, existingContent, "utf-8");
+        (0, import_fs26.writeFileSync)(backupPath, existingContent, "utf-8");
         console.log(source_default.yellow("\n  Settings changes detected:"));
         try {
           const existingParsed = JSON.parse(existingContent);
@@ -51195,115 +51299,123 @@ function writeClaudeConfig(directory, configData, syncedFiles, syncedItems, orgN
         console.log();
       }
     }
-    const userSettingsPath = (0, import_path24.join)((0, import_os19.homedir)(), ".claude", "settings.json");
-    if ((0, import_fs25.existsSync)(userSettingsPath)) {
-      const userContent = (0, import_fs25.readFileSync)(userSettingsPath, "utf-8");
+    const userSettingsPath = (0, import_path25.join)((0, import_os19.homedir)(), ".claude", "settings.json");
+    if ((0, import_fs26.existsSync)(userSettingsPath)) {
+      const userContent = (0, import_fs26.readFileSync)(userSettingsPath, "utf-8");
       const userHash = calculateConfigHash(userContent);
       const orgHash = calculateConfigHash(configData.settings.content);
       if (userHash !== orgHash) {
         const userBackupPath = `${userSettingsPath}.bak`;
-        (0, import_fs25.writeFileSync)(userBackupPath, userContent, "utf-8");
+        (0, import_fs26.writeFileSync)(userBackupPath, userContent, "utf-8");
         console.log(source_default.yellow("  User-level settings differ from org baseline."));
         console.log(source_default.dim(`  Backup: ${userBackupPath}`));
         console.log();
       }
     }
-    (0, import_fs25.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
-    syncedFiles.push(".claude/settings.json");
-    syncedItems.push({
-      path: ".claude/settings.json",
-      type: "settings",
-      name: "settings.json",
-      platform: "claude"
-    });
+    if (isSafeToWrite(settingsPath, ".claude/settings.json")) {
+      (0, import_fs26.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
+      syncedFiles.push(".claude/settings.json");
+      syncedItems.push({
+        path: ".claude/settings.json",
+        type: "settings",
+        name: "settings.json",
+        platform: "claude"
+      });
+    }
   }
   if (configData.subagents && configData.subagents.length > 0) {
-    const agentsDir = (0, import_path24.join)(claudeDir, "agents");
-    if (!(0, import_fs25.existsSync)(agentsDir)) {
-      (0, import_fs25.mkdirSync)(agentsDir, { recursive: true });
+    const agentsDir = (0, import_path25.join)(claudeDir, "agents");
+    if (!(0, import_fs26.existsSync)(agentsDir)) {
+      (0, import_fs26.mkdirSync)(agentsDir, { recursive: true });
     }
     for (const agent of configData.subagents) {
       const pathFromName = agent.name.replace(/:/g, "/");
       const fileName = pathFromName.endsWith(".md") ? pathFromName : `${pathFromName}.md`;
-      const filePath = (0, import_path24.join)(agentsDir, fileName);
-      const fileDir = (0, import_path24.dirname)(filePath);
-      if (!(0, import_fs25.existsSync)(fileDir)) {
-        (0, import_fs25.mkdirSync)(fileDir, { recursive: true });
+      const filePath = (0, import_path25.join)(agentsDir, fileName);
+      const fileDir = (0, import_path25.dirname)(filePath);
+      if (!(0, import_fs26.existsSync)(fileDir)) {
+        (0, import_fs26.mkdirSync)(fileDir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(filePath, agent.content, "utf-8");
       const relativePath = `.claude/agents/${fileName}`;
-      syncedFiles.push(relativePath);
-      const { description } = parseCommandFrontmatter(agent.content);
-      syncedItems.push({
-        path: relativePath,
-        type: "agents",
-        name: agent.name.replace(/\.md$/, ""),
-        description,
-        platform: "claude"
-      });
+      if (isSafeToWrite(filePath, relativePath)) {
+        (0, import_fs26.writeFileSync)(filePath, agent.content, "utf-8");
+        syncedFiles.push(relativePath);
+        const { description } = parseCommandFrontmatter(agent.content);
+        syncedItems.push({
+          path: relativePath,
+          type: "agents",
+          name: agent.name.replace(/\.md$/, ""),
+          description,
+          platform: "claude"
+        });
+      }
     }
   }
   if (configData.skills && configData.skills.length > 0) {
-    const skillsDir = (0, import_path24.join)(claudeDir, "skills");
-    if (!(0, import_fs25.existsSync)(skillsDir)) {
-      (0, import_fs25.mkdirSync)(skillsDir, { recursive: true });
+    const skillsDir = (0, import_path25.join)(claudeDir, "skills");
+    if (!(0, import_fs26.existsSync)(skillsDir)) {
+      (0, import_fs26.mkdirSync)(skillsDir, { recursive: true });
     }
     for (const skill of configData.skills) {
-      const skillDir = (0, import_path24.join)(skillsDir, skill.name);
-      if (!(0, import_fs25.existsSync)(skillDir)) {
-        (0, import_fs25.mkdirSync)(skillDir, { recursive: true });
+      const skillDir = (0, import_path25.join)(skillsDir, skill.name);
+      if (!(0, import_fs26.existsSync)(skillDir)) {
+        (0, import_fs26.mkdirSync)(skillDir, { recursive: true });
       }
-      const skillPath = (0, import_path24.join)(skillDir, "SKILL.md");
-      (0, import_fs25.writeFileSync)(skillPath, skill.content, "utf-8");
+      const skillPath = (0, import_path25.join)(skillDir, "SKILL.md");
       const relativePath = `.claude/skills/${skill.name}/SKILL.md`;
-      syncedFiles.push(relativePath);
-      syncedItems.push({
-        path: relativePath,
-        type: "skills",
-        name: skill.name,
-        description: skill.description,
-        platform: "claude"
-      });
+      if (isSafeToWrite(skillPath, relativePath)) {
+        (0, import_fs26.writeFileSync)(skillPath, skill.content, "utf-8");
+        syncedFiles.push(relativePath);
+        syncedItems.push({
+          path: relativePath,
+          type: "skills",
+          name: skill.name,
+          description: skill.description,
+          platform: "claude"
+        });
+      }
     }
   }
   if (configData.rules && configData.rules.length > 0) {
-    const rulesDir = (0, import_path24.join)(claudeDir, "rules");
-    if (!(0, import_fs25.existsSync)(rulesDir)) {
-      (0, import_fs25.mkdirSync)(rulesDir, { recursive: true });
+    const rulesDir = (0, import_path25.join)(claudeDir, "rules");
+    if (!(0, import_fs26.existsSync)(rulesDir)) {
+      (0, import_fs26.mkdirSync)(rulesDir, { recursive: true });
     }
     for (const rule of configData.rules) {
       const fileName = rule.name.endsWith(".md") ? rule.name : `${rule.name}.md`;
-      const filePath = (0, import_path24.join)(rulesDir, fileName);
-      (0, import_fs25.writeFileSync)(filePath, rule.content, "utf-8");
+      const filePath = (0, import_path25.join)(rulesDir, fileName);
       const relativePath = `.claude/rules/${fileName}`;
-      syncedFiles.push(relativePath);
-      syncedItems.push({
-        path: relativePath,
-        type: "rules",
-        name: rule.name.replace(/\.md$/, ""),
-        platform: "claude"
-      });
+      if (isSafeToWrite(filePath, relativePath)) {
+        (0, import_fs26.writeFileSync)(filePath, rule.content, "utf-8");
+        syncedFiles.push(relativePath);
+        syncedItems.push({
+          path: relativePath,
+          type: "rules",
+          name: rule.name.replace(/\.md$/, ""),
+          platform: "claude"
+        });
+      }
     }
   }
 }
 function writeCodexConfig(directory, configData, syncedFiles, syncedItems) {
-  const codexDir = (0, import_path24.join)(directory, ".codex");
-  const codexDirExists = (0, import_fs25.existsSync)(codexDir);
+  const codexDir = (0, import_path25.join)(directory, ".codex");
+  const codexDirExists = (0, import_fs26.existsSync)(codexDir);
   if (!codexDirExists) {
     return;
   }
   if (configData.skills && configData.skills.length > 0) {
-    const skillsDir = (0, import_path24.join)(codexDir, "skills");
-    if (!(0, import_fs25.existsSync)(skillsDir)) {
-      (0, import_fs25.mkdirSync)(skillsDir, { recursive: true });
+    const skillsDir = (0, import_path25.join)(codexDir, "skills");
+    if (!(0, import_fs26.existsSync)(skillsDir)) {
+      (0, import_fs26.mkdirSync)(skillsDir, { recursive: true });
     }
     for (const skill of configData.skills) {
-      const skillDir = (0, import_path24.join)(skillsDir, skill.name);
-      if (!(0, import_fs25.existsSync)(skillDir)) {
-        (0, import_fs25.mkdirSync)(skillDir, { recursive: true });
+      const skillDir = (0, import_path25.join)(skillsDir, skill.name);
+      if (!(0, import_fs26.existsSync)(skillDir)) {
+        (0, import_fs26.mkdirSync)(skillDir, { recursive: true });
       }
-      const skillPath = (0, import_path24.join)(skillDir, "SKILL.md");
-      (0, import_fs25.writeFileSync)(skillPath, skill.content, "utf-8");
+      const skillPath = (0, import_path25.join)(skillDir, "SKILL.md");
+      (0, import_fs26.writeFileSync)(skillPath, skill.content, "utf-8");
       const relativePath = `.codex/skills/${skill.name}/SKILL.md`;
       syncedFiles.push(relativePath);
       syncedItems.push({
@@ -51315,8 +51427,8 @@ function writeCodexConfig(directory, configData, syncedFiles, syncedItems) {
     }
   }
   if (configData.settings?.content) {
-    const settingsPath = (0, import_path24.join)(codexDir, "settings.json");
-    (0, import_fs25.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
+    const settingsPath = (0, import_path25.join)(codexDir, "settings.json");
+    (0, import_fs26.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
     syncedFiles.push(".codex/settings.json");
     syncedItems.push({
       path: ".codex/settings.json",
@@ -51332,15 +51444,15 @@ function codexPromptFileNameFromCommand(commandName) {
 }
 function writeCodexPrompts(commands) {
   if (!commands || commands.length === 0) return 0;
-  const promptsDir = (0, import_path24.join)((0, import_os19.homedir)(), ".codex", "prompts");
-  if (!(0, import_fs25.existsSync)(promptsDir)) {
-    (0, import_fs25.mkdirSync)(promptsDir, { recursive: true });
+  const promptsDir = (0, import_path25.join)((0, import_os19.homedir)(), ".codex", "prompts");
+  if (!(0, import_fs26.existsSync)(promptsDir)) {
+    (0, import_fs26.mkdirSync)(promptsDir, { recursive: true });
   }
   let written = 0;
   for (const command of commands) {
     const fileName = codexPromptFileNameFromCommand(command.name);
-    const filePath = (0, import_path24.join)(promptsDir, fileName);
-    (0, import_fs25.writeFileSync)(filePath, command.content, "utf-8");
+    const filePath = (0, import_path25.join)(promptsDir, fileName);
+    (0, import_fs26.writeFileSync)(filePath, command.content, "utf-8");
     written += 1;
   }
   return written;
@@ -51372,119 +51484,119 @@ function writeGeminiCommandsAndSkills(directory, configData) {
   let commandsWritten = 0;
   let skillsWritten = 0;
   if (configData.commands && configData.commands.length > 0) {
-    const commandsDir = (0, import_path24.join)(directory, GEMINI_COMMANDS_DIR);
-    if (!(0, import_fs25.existsSync)(commandsDir)) {
-      (0, import_fs25.mkdirSync)(commandsDir, { recursive: true });
+    const commandsDir = (0, import_path25.join)(directory, GEMINI_COMMANDS_DIR);
+    if (!(0, import_fs26.existsSync)(commandsDir)) {
+      (0, import_fs26.mkdirSync)(commandsDir, { recursive: true });
     }
     for (const cmd of configData.commands) {
       const pathFromName = cmd.name.replace(/:/g, "/");
-      const filePath = (0, import_path24.join)(commandsDir, `${pathFromName}.toml`);
-      const fileDir = (0, import_path24.dirname)(filePath);
-      if (!(0, import_fs25.existsSync)(fileDir)) {
-        (0, import_fs25.mkdirSync)(fileDir, { recursive: true });
+      const filePath = (0, import_path25.join)(commandsDir, `${pathFromName}.toml`);
+      const fileDir = (0, import_path25.dirname)(filePath);
+      if (!(0, import_fs26.existsSync)(fileDir)) {
+        (0, import_fs26.mkdirSync)(fileDir, { recursive: true });
       }
       const description = extractDescription2(cmd.content);
       const toml = buildGeminiCommandToml(cmd.name, description, cmd.content);
-      (0, import_fs25.writeFileSync)(filePath, toml, "utf-8");
+      (0, import_fs26.writeFileSync)(filePath, toml, "utf-8");
       commandsWritten += 1;
     }
   }
   if (configData.skills && configData.skills.length > 0) {
-    const skillsDir = (0, import_path24.join)(directory, GEMINI_SKILLS_DIR);
-    if (!(0, import_fs25.existsSync)(skillsDir)) {
-      (0, import_fs25.mkdirSync)(skillsDir, { recursive: true });
+    const skillsDir = (0, import_path25.join)(directory, GEMINI_SKILLS_DIR);
+    if (!(0, import_fs26.existsSync)(skillsDir)) {
+      (0, import_fs26.mkdirSync)(skillsDir, { recursive: true });
     }
     for (const skill of configData.skills) {
-      const skillDir = (0, import_path24.join)(skillsDir, skill.name);
-      if (!(0, import_fs25.existsSync)(skillDir)) {
-        (0, import_fs25.mkdirSync)(skillDir, { recursive: true });
+      const skillDir = (0, import_path25.join)(skillsDir, skill.name);
+      if (!(0, import_fs26.existsSync)(skillDir)) {
+        (0, import_fs26.mkdirSync)(skillDir, { recursive: true });
       }
-      const skillPath = (0, import_path24.join)(skillDir, "SKILL.md");
-      (0, import_fs25.writeFileSync)(skillPath, skill.content, "utf-8");
+      const skillPath = (0, import_path25.join)(skillDir, "SKILL.md");
+      (0, import_fs26.writeFileSync)(skillPath, skill.content, "utf-8");
       skillsWritten += 1;
     }
   }
   return { commandsWritten, skillsWritten };
 }
 function writeApprovedClaudeConfig(directory, configData) {
-  const approvedRoot = (0, import_path24.join)(directory, ".gal", "approved", "claude");
-  const approvedClaudeDir = (0, import_path24.join)(approvedRoot, ".claude");
-  if (!(0, import_fs25.existsSync)(approvedClaudeDir)) {
-    (0, import_fs25.mkdirSync)(approvedClaudeDir, { recursive: true });
+  const approvedRoot = (0, import_path25.join)(directory, ".gal", "approved", "claude");
+  const approvedClaudeDir = (0, import_path25.join)(approvedRoot, ".claude");
+  if (!(0, import_fs26.existsSync)(approvedClaudeDir)) {
+    (0, import_fs26.mkdirSync)(approvedClaudeDir, { recursive: true });
   }
   if (configData.instructions?.content) {
-    const claudeMdPath = (0, import_path24.join)(approvedRoot, "CLAUDE.md");
-    (0, import_fs25.writeFileSync)(claudeMdPath, configData.instructions.content, "utf-8");
+    const claudeMdPath = (0, import_path25.join)(approvedRoot, "CLAUDE.md");
+    (0, import_fs26.writeFileSync)(claudeMdPath, configData.instructions.content, "utf-8");
   }
   if (configData.commands && configData.commands.length > 0) {
-    const commandsDir = (0, import_path24.join)(approvedClaudeDir, "commands");
-    if (!(0, import_fs25.existsSync)(commandsDir)) {
-      (0, import_fs25.mkdirSync)(commandsDir, { recursive: true });
+    const commandsDir = (0, import_path25.join)(approvedClaudeDir, "commands");
+    if (!(0, import_fs26.existsSync)(commandsDir)) {
+      (0, import_fs26.mkdirSync)(commandsDir, { recursive: true });
     }
     for (const cmd of configData.commands) {
       const pathFromName = cmd.name.replace(/:/g, "/");
       const fileName = pathFromName.endsWith(".md") ? pathFromName : `${pathFromName}.md`;
-      const filePath = (0, import_path24.join)(commandsDir, fileName);
-      const fileDir = (0, import_path24.dirname)(filePath);
-      if (!(0, import_fs25.existsSync)(fileDir)) {
-        (0, import_fs25.mkdirSync)(fileDir, { recursive: true });
+      const filePath = (0, import_path25.join)(commandsDir, fileName);
+      const fileDir = (0, import_path25.dirname)(filePath);
+      if (!(0, import_fs26.existsSync)(fileDir)) {
+        (0, import_fs26.mkdirSync)(fileDir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(filePath, cmd.content, "utf-8");
+      (0, import_fs26.writeFileSync)(filePath, cmd.content, "utf-8");
     }
   }
   if (configData.hooks && configData.hooks.length > 0) {
-    const hooksDir = (0, import_path24.join)(approvedClaudeDir, "hooks");
-    if (!(0, import_fs25.existsSync)(hooksDir)) {
-      (0, import_fs25.mkdirSync)(hooksDir, { recursive: true });
+    const hooksDir = (0, import_path25.join)(approvedClaudeDir, "hooks");
+    if (!(0, import_fs26.existsSync)(hooksDir)) {
+      (0, import_fs26.mkdirSync)(hooksDir, { recursive: true });
     }
     for (const hook of configData.hooks) {
-      const filePath = (0, import_path24.join)(hooksDir, hook.name);
-      (0, import_fs25.writeFileSync)(filePath, hook.content, "utf-8");
+      const filePath = (0, import_path25.join)(hooksDir, hook.name);
+      (0, import_fs26.writeFileSync)(filePath, hook.content, "utf-8");
     }
   }
   if (configData.settings?.content) {
-    const settingsPath = (0, import_path24.join)(approvedClaudeDir, "settings.json");
-    (0, import_fs25.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
+    const settingsPath = (0, import_path25.join)(approvedClaudeDir, "settings.json");
+    (0, import_fs26.writeFileSync)(settingsPath, configData.settings.content, "utf-8");
   }
   if (configData.subagents && configData.subagents.length > 0) {
-    const agentsDir = (0, import_path24.join)(approvedClaudeDir, "agents");
-    if (!(0, import_fs25.existsSync)(agentsDir)) {
-      (0, import_fs25.mkdirSync)(agentsDir, { recursive: true });
+    const agentsDir = (0, import_path25.join)(approvedClaudeDir, "agents");
+    if (!(0, import_fs26.existsSync)(agentsDir)) {
+      (0, import_fs26.mkdirSync)(agentsDir, { recursive: true });
     }
     for (const agent of configData.subagents) {
       const pathFromName = agent.name.replace(/:/g, "/");
       const fileName = pathFromName.endsWith(".md") ? pathFromName : `${pathFromName}.md`;
-      const filePath = (0, import_path24.join)(agentsDir, fileName);
-      const fileDir = (0, import_path24.dirname)(filePath);
-      if (!(0, import_fs25.existsSync)(fileDir)) {
-        (0, import_fs25.mkdirSync)(fileDir, { recursive: true });
+      const filePath = (0, import_path25.join)(agentsDir, fileName);
+      const fileDir = (0, import_path25.dirname)(filePath);
+      if (!(0, import_fs26.existsSync)(fileDir)) {
+        (0, import_fs26.mkdirSync)(fileDir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(filePath, agent.content, "utf-8");
+      (0, import_fs26.writeFileSync)(filePath, agent.content, "utf-8");
     }
   }
   if (configData.skills && configData.skills.length > 0) {
-    const skillsDir = (0, import_path24.join)(approvedClaudeDir, "skills");
-    if (!(0, import_fs25.existsSync)(skillsDir)) {
-      (0, import_fs25.mkdirSync)(skillsDir, { recursive: true });
+    const skillsDir = (0, import_path25.join)(approvedClaudeDir, "skills");
+    if (!(0, import_fs26.existsSync)(skillsDir)) {
+      (0, import_fs26.mkdirSync)(skillsDir, { recursive: true });
     }
     for (const skill of configData.skills) {
-      const skillDir = (0, import_path24.join)(skillsDir, skill.name);
-      if (!(0, import_fs25.existsSync)(skillDir)) {
-        (0, import_fs25.mkdirSync)(skillDir, { recursive: true });
+      const skillDir = (0, import_path25.join)(skillsDir, skill.name);
+      if (!(0, import_fs26.existsSync)(skillDir)) {
+        (0, import_fs26.mkdirSync)(skillDir, { recursive: true });
       }
-      const skillPath = (0, import_path24.join)(skillDir, "SKILL.md");
-      (0, import_fs25.writeFileSync)(skillPath, skill.content, "utf-8");
+      const skillPath = (0, import_path25.join)(skillDir, "SKILL.md");
+      (0, import_fs26.writeFileSync)(skillPath, skill.content, "utf-8");
     }
   }
   if (configData.rules && configData.rules.length > 0) {
-    const rulesDir = (0, import_path24.join)(approvedClaudeDir, "rules");
-    if (!(0, import_fs25.existsSync)(rulesDir)) {
-      (0, import_fs25.mkdirSync)(rulesDir, { recursive: true });
+    const rulesDir = (0, import_path25.join)(approvedClaudeDir, "rules");
+    if (!(0, import_fs26.existsSync)(rulesDir)) {
+      (0, import_fs26.mkdirSync)(rulesDir, { recursive: true });
     }
     for (const rule of configData.rules) {
       const fileName = rule.name.endsWith(".md") ? rule.name : `${rule.name}.md`;
-      const filePath = (0, import_path24.join)(rulesDir, fileName);
-      (0, import_fs25.writeFileSync)(filePath, rule.content, "utf-8");
+      const filePath = (0, import_path25.join)(rulesDir, fileName);
+      (0, import_fs26.writeFileSync)(filePath, rule.content, "utf-8");
     }
   }
 }
@@ -51626,6 +51738,9 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
       message: platformFilter ? `No approved config found for platform '${platformFilter}'.` : `No approved configs found for organization '${orgName}'.`
     };
   }
+  const gitRepoRoot = findGitRepoRoot(directory);
+  const isForce = options?.force ?? false;
+  const allConflictFiles = [];
   const platformStates = /* @__PURE__ */ new Map();
   const allSyncedFiles = [];
   const allSyncedItems = [];
@@ -51681,7 +51796,16 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
       if (platform5 === "cursor") {
         writeCursorConfig(directory, configData, platformFiles, platformItems);
       } else if (platform5 === "claude") {
-        writeClaudeConfig(directory, configData, platformFiles, platformItems, orgName);
+        writeClaudeConfig(
+          directory,
+          configData,
+          platformFiles,
+          platformItems,
+          orgName,
+          gitRepoRoot,
+          isForce,
+          allConflictFiles
+        );
         writeApprovedClaudeConfig(directory, configData);
       } else if (platform5 === "codex") {
         writeCodexConfig(directory, configData, platformFiles, platformItems);
@@ -51761,20 +51885,20 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
       } else {
         if (configData.configContent) {
           const platformDir = getPlatformDirectory(platform5);
-          const configPath = (0, import_path24.join)(directory, platformDir);
-          if (!(0, import_fs25.existsSync)(configPath)) {
-            (0, import_fs25.mkdirSync)(configPath, { recursive: true });
+          const configPath = (0, import_path25.join)(directory, platformDir);
+          if (!(0, import_fs26.existsSync)(configPath)) {
+            (0, import_fs26.mkdirSync)(configPath, { recursive: true });
           }
           try {
             const parsedContent = JSON.parse(configData.configContent);
             for (const [filePath, content] of Object.entries(parsedContent)) {
-              const fullPath = (0, import_path24.join)(configPath, filePath);
-              const dir = (0, import_path24.dirname)(fullPath);
-              if (!(0, import_fs25.existsSync)(dir)) {
-                (0, import_fs25.mkdirSync)(dir, { recursive: true });
+              const fullPath = (0, import_path25.join)(configPath, filePath);
+              const dir = (0, import_path25.dirname)(fullPath);
+              if (!(0, import_fs26.existsSync)(dir)) {
+                (0, import_fs26.mkdirSync)(dir, { recursive: true });
               }
-              (0, import_fs25.writeFileSync)(fullPath, content);
-              platformFiles.push((0, import_path24.join)(platformDir, filePath));
+              (0, import_fs26.writeFileSync)(fullPath, content);
+              platformFiles.push((0, import_path25.join)(platformDir, filePath));
               platformItems.push({
                 path: filePath,
                 type: getItemType(filePath),
@@ -51783,9 +51907,9 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
               });
             }
           } catch {
-            const singlePath = (0, import_path24.join)(configPath, "approved-config.json");
-            (0, import_fs25.writeFileSync)(singlePath, configData.configContent);
-            platformFiles.push((0, import_path24.join)(platformDir, "approved-config.json"));
+            const singlePath = (0, import_path25.join)(configPath, "approved-config.json");
+            (0, import_fs26.writeFileSync)(singlePath, configData.configContent);
+            platformFiles.push((0, import_path25.join)(platformDir, "approved-config.json"));
           }
         }
       }
@@ -51942,16 +52066,16 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
     }
   } catch {
   }
-  const existingAgentsMdPath = (0, import_path24.join)(directory, "AGENTS.md");
+  const existingAgentsMdPath = (0, import_path25.join)(directory, "AGENTS.md");
   let existingDocsIndex;
-  if ((0, import_fs25.existsSync)(existingAgentsMdPath)) {
-    const existingContent = (0, import_fs25.readFileSync)(existingAgentsMdPath, "utf-8");
+  if ((0, import_fs26.existsSync)(existingAgentsMdPath)) {
+    const existingContent = (0, import_fs26.readFileSync)(existingAgentsMdPath, "utf-8");
     const dispatchMarker = "|@section:background-dispatch";
     const markerIndex = existingContent.indexOf(dispatchMarker);
     existingDocsIndex = markerIndex >= 0 ? existingContent.substring(0, markerIndex).trim() : existingContent.trim();
   }
   const agentsMdContent = generateAgentsMd(existingDocsIndex, dispatchRules);
-  (0, import_fs25.writeFileSync)(existingAgentsMdPath, agentsMdContent, "utf-8");
+  (0, import_fs26.writeFileSync)(existingAgentsMdPath, agentsMdContent, "utf-8");
   allSyncedFiles.push("AGENTS.md");
   allSyncedItems.push({
     path: "AGENTS.md",
@@ -51965,11 +52089,11 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
     console.log(source_default.dim(`  Written: AGENTS.md (universal cross-platform)`));
   }
   if (dispatchRules) {
-    const galDir = (0, import_path24.join)(directory, ".gal");
-    if (!(0, import_fs25.existsSync)(galDir)) {
-      (0, import_fs25.mkdirSync)(galDir, { recursive: true });
+    const galDir = (0, import_path25.join)(directory, ".gal");
+    if (!(0, import_fs26.existsSync)(galDir)) {
+      (0, import_fs26.mkdirSync)(galDir, { recursive: true });
     }
-    (0, import_fs25.writeFileSync)((0, import_path24.join)(galDir, "dispatch-rules.json"), JSON.stringify(dispatchRules), "utf-8");
+    (0, import_fs26.writeFileSync)((0, import_path25.join)(galDir, "dispatch-rules.json"), JSON.stringify(dispatchRules), "utf-8");
     if (isFullOutput) {
       console.log(source_default.dim(`  Written: .gal/dispatch-rules.json (hook cache)`));
     }
@@ -52084,6 +52208,14 @@ async function pullApprovedConfig(configRepo, authRepo, orgName, directory, plat
     });
   } catch {
   }
+  if (isFullOutput && allConflictFiles.length > 0) {
+    console.log(source_default.yellow(`
+  \u26A0 ${allConflictFiles.length} file(s) skipped \u2014 git-tracked with local changes:`));
+    for (const f of allConflictFiles) {
+      console.log(source_default.dim(`    \u2022 ${f}`));
+    }
+    console.log(source_default.dim(`  To overwrite these files, rerun with: gal sync --pull --force`));
+  }
   if (isFullOutput) {
     console.log(source_default.green("\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550"));
     console.log(source_default.green("  \u2713 Sync complete! Your configs match org standard."));
@@ -52172,12 +52304,12 @@ async function pullPersonalRepoConfig(authRepo, repoName, directory) {
     const syncedItems = [];
     for (const config2 of configs) {
       const relativePath = config2.path.replace(/^\/+/, "");
-      const fullPath = (0, import_path24.join)(directory, relativePath);
-      const dir = (0, import_path24.dirname)(fullPath);
-      if (!(0, import_fs25.existsSync)(dir)) {
-        (0, import_fs25.mkdirSync)(dir, { recursive: true });
+      const fullPath = (0, import_path25.join)(directory, relativePath);
+      const dir = (0, import_path25.dirname)(fullPath);
+      if (!(0, import_fs26.existsSync)(dir)) {
+        (0, import_fs26.mkdirSync)(dir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(fullPath, config2.content);
+      (0, import_fs26.writeFileSync)(fullPath, config2.content);
       syncedFiles.push(relativePath);
       const itemType = getItemType(relativePath);
       const itemName = getItemName(relativePath);
@@ -52227,20 +52359,20 @@ async function pullPersonalApprovedConfig(authRepo, approvedConfig, directory) {
     }
     const configData = JSON.parse(approvedConfig.configContent);
     const platformDir = ".claude";
-    const configPath = (0, import_path24.join)(directory, platformDir);
-    if (!(0, import_fs25.existsSync)(configPath)) {
-      (0, import_fs25.mkdirSync)(configPath, { recursive: true });
+    const configPath = (0, import_path25.join)(directory, platformDir);
+    if (!(0, import_fs26.existsSync)(configPath)) {
+      (0, import_fs26.mkdirSync)(configPath, { recursive: true });
     }
     const syncedFiles = [];
     const syncedItems = [];
     for (const [filePath, content] of Object.entries(configData)) {
-      const fullPath = (0, import_path24.join)(configPath, filePath);
-      const dir = (0, import_path24.dirname)(fullPath);
-      if (!(0, import_fs25.existsSync)(dir)) {
-        (0, import_fs25.mkdirSync)(dir, { recursive: true });
+      const fullPath = (0, import_path25.join)(configPath, filePath);
+      const dir = (0, import_path25.dirname)(fullPath);
+      if (!(0, import_fs26.existsSync)(dir)) {
+        (0, import_fs26.mkdirSync)(dir, { recursive: true });
       }
-      (0, import_fs25.writeFileSync)(fullPath, content);
-      const relativePath = (0, import_path24.join)(platformDir, filePath);
+      (0, import_fs26.writeFileSync)(fullPath, content);
+      const relativePath = (0, import_path25.join)(platformDir, filePath);
       syncedFiles.push(relativePath);
       const itemType = getItemType(filePath);
       const itemName = getItemName(filePath);
@@ -52300,18 +52432,18 @@ async function checkApprovedConfig(configRepo, orgName, directory, platformFilte
       const platformDir = getPlatformDirectory(platform5);
       if (approvedConfig.instructions?.content) {
         const relativePath = "CLAUDE.md";
-        const fullPath = (0, import_path24.join)(directory, relativePath);
+        const fullPath = (0, import_path25.join)(directory, relativePath);
         result.expectedFiles.push(relativePath);
-        if (!(0, import_fs25.existsSync)(fullPath)) {
+        if (!(0, import_fs26.existsSync)(fullPath)) {
           result.missingFiles.push(relativePath);
           result.inSync = false;
         }
       }
       if (approvedConfig.settings?.content) {
-        const relativePath = (0, import_path24.join)(platformDir, "settings.json");
-        const fullPath = (0, import_path24.join)(directory, relativePath);
+        const relativePath = (0, import_path25.join)(platformDir, "settings.json");
+        const fullPath = (0, import_path25.join)(directory, relativePath);
         result.expectedFiles.push(relativePath);
-        if (!(0, import_fs25.existsSync)(fullPath)) {
+        if (!(0, import_fs26.existsSync)(fullPath)) {
           result.missingFiles.push(relativePath);
           result.inSync = false;
         }
@@ -52320,10 +52452,10 @@ async function checkApprovedConfig(configRepo, orgName, directory, platformFilte
         for (const cmd of approvedConfig.commands) {
           const pathFromName = cmd.name.replace(/:/g, "/");
           const fileName = pathFromName.endsWith(".md") ? pathFromName : `${pathFromName}.md`;
-          const relativePath = (0, import_path24.join)(platformDir, "commands", fileName);
-          const fullPath = (0, import_path24.join)(directory, relativePath);
+          const relativePath = (0, import_path25.join)(platformDir, "commands", fileName);
+          const fullPath = (0, import_path25.join)(directory, relativePath);
           result.expectedFiles.push(relativePath);
-          if (!(0, import_fs25.existsSync)(fullPath)) {
+          if (!(0, import_fs26.existsSync)(fullPath)) {
             result.missingFiles.push(relativePath);
             result.inSync = false;
           }
@@ -52332,10 +52464,10 @@ async function checkApprovedConfig(configRepo, orgName, directory, platformFilte
       if (approvedConfig.rules && approvedConfig.rules.length > 0) {
         for (const rule of approvedConfig.rules) {
           const fileName = rule.name.endsWith(".md") ? rule.name : `${rule.name}.md`;
-          const relativePath = (0, import_path24.join)(platformDir, "rules", fileName);
-          const fullPath = (0, import_path24.join)(directory, relativePath);
+          const relativePath = (0, import_path25.join)(platformDir, "rules", fileName);
+          const fullPath = (0, import_path25.join)(directory, relativePath);
           result.expectedFiles.push(relativePath);
-          if (!(0, import_fs25.existsSync)(fullPath)) {
+          if (!(0, import_fs26.existsSync)(fullPath)) {
             result.missingFiles.push(relativePath);
             result.inSync = false;
           }
@@ -52346,7 +52478,7 @@ async function checkApprovedConfig(configRepo, orgName, directory, platformFilte
   }
   console.log(JSON.stringify(result));
 }
-var import_fs25, import_path24, import_os19, import_crypto6, cliVersion4, defaultApiUrl4, GAL_CLI_CURSOR_RULES_VERSION, GAL_CLI_CURSOR_RULES, CODEX_PROMPT_PREFIX, GEMINI_COMMANDS_DIR, GEMINI_SKILLS_DIR;
+var import_fs26, import_path25, import_os19, import_crypto6, cliVersion4, defaultApiUrl4, GAL_CLI_CURSOR_RULES_VERSION, GAL_CLI_CURSOR_RULES, CODEX_PROMPT_PREFIX, GEMINI_COMMANDS_DIR, GEMINI_SKILLS_DIR;
 var init_sync = __esm({
   "src/commands/sync.ts"() {
     "use strict";
@@ -52356,8 +52488,8 @@ var init_sync = __esm({
     init_constants();
     init_config_manager();
     init_telemetry();
-    import_fs25 = require("fs");
-    import_path24 = require("path");
+    import_fs26 = require("fs");
+    import_path25 = require("path");
     import_os19 = require("os");
     init_project_detection();
     import_crypto6 = require("crypto");
@@ -52371,6 +52503,7 @@ var init_sync = __esm({
     init_mcp_config_writer();
     init_browser_profile_sync();
     init_sync_initialization();
+    init_git_utils();
     cliVersion4 = constants_default[0];
     defaultApiUrl4 = constants_default[1];
     GAL_CLI_CURSOR_RULES_VERSION = "1.0.0";
@@ -52427,11 +52560,11 @@ function openBrowser(url) {
   const platform5 = process.platform;
   try {
     if (platform5 === "darwin") {
-      (0, import_child_process8.execSync)(`open "${url}"`);
+      (0, import_child_process9.execSync)(`open "${url}"`);
     } else if (platform5 === "win32") {
-      (0, import_child_process8.execSync)(`start "" "${url}"`);
+      (0, import_child_process9.execSync)(`start "" "${url}"`);
     } else {
-      (0, import_child_process8.execSync)(`xdg-open "${url}"`);
+      (0, import_child_process9.execSync)(`xdg-open "${url}"`);
     }
   } catch {
     console.log(source_default.yellow(`
@@ -52935,7 +53068,7 @@ Review status: ${source_default.cyan("gal auth status")}
       let accessToken;
       let refreshToken;
       let expiresAt;
-      const claudeDir = (0, import_path25.join)((0, import_os20.homedir)(), ".claude");
+      const claudeDir = (0, import_path26.join)((0, import_os20.homedir)(), ".claude");
       let credentialSource2 = "";
       const isSetupTokenMode2 = !!options.setupToken;
       if (options.setupToken) {
@@ -52951,7 +53084,7 @@ Review status: ${source_default.cyan("gal auth status")}
           if (verbose) {
             spinner.info(source_default.dim('  Trying macOS Keychain (service: "Claude Code-credentials")...'));
           }
-          const keychainResult = (0, import_child_process8.execSync)(
+          const keychainResult = (0, import_child_process9.execSync)(
             'security find-generic-password -s "Claude Code-credentials" -w',
             { encoding: "utf-8", timeout: 1e4, stdio: ["pipe", "pipe", "pipe"] }
           ).trim();
@@ -53016,13 +53149,13 @@ Review status: ${source_default.cyan("gal auth status")}
         }
       }
       if (!isSetupTokenMode2 && (!accessToken || !refreshToken)) {
-        const legacyCredentialsPath = (0, import_path25.join)(claudeDir, ".credentials.json");
+        const legacyCredentialsPath = (0, import_path26.join)(claudeDir, ".credentials.json");
         if (verbose) {
           spinner.info(source_default.dim(`  Trying ${legacyCredentialsPath}...`));
         }
-        if ((0, import_fs26.existsSync)(legacyCredentialsPath)) {
+        if ((0, import_fs27.existsSync)(legacyCredentialsPath)) {
           try {
-            const content = (0, import_fs26.readFileSync)(legacyCredentialsPath, "utf-8");
+            const content = (0, import_fs27.readFileSync)(legacyCredentialsPath, "utf-8");
             const credentials = JSON.parse(content);
             accessToken = credentials.claudeAiOauth?.accessToken;
             refreshToken = credentials.claudeAiOauth?.refreshToken;
@@ -53046,13 +53179,13 @@ Review status: ${source_default.cyan("gal auth status")}
         }
       }
       if (!isSetupTokenMode2 && (!accessToken || !refreshToken)) {
-        const configPath = (0, import_path25.join)(claudeDir, ".claude.json");
+        const configPath = (0, import_path26.join)(claudeDir, ".claude.json");
         if (verbose) {
           spinner.info(source_default.dim(`  Trying ${configPath} (oauthCredentials field)...`));
         }
-        if ((0, import_fs26.existsSync)(configPath)) {
+        if ((0, import_fs27.existsSync)(configPath)) {
           try {
-            const content = (0, import_fs26.readFileSync)(configPath, "utf-8");
+            const content = (0, import_fs27.readFileSync)(configPath, "utf-8");
             const claudeConfig = JSON.parse(content);
             accessToken = claudeConfig.oauthCredentials?.claudeAiOauth?.accessToken;
             refreshToken = claudeConfig.oauthCredentials?.claudeAiOauth?.refreshToken;
@@ -53182,13 +53315,13 @@ Review status: ${source_default.cyan("gal auth status")}
           spinner.info(source_default.dim("  Using API key from command line"));
         }
       } else {
-        const codexAuthPath = (0, import_path25.join)((0, import_os20.homedir)(), ".codex", "auth.json");
+        const codexAuthPath = (0, import_path26.join)((0, import_os20.homedir)(), ".codex", "auth.json");
         if (verbose) {
           spinner.info(source_default.dim(`  Trying ${codexAuthPath}...`));
         }
-        if ((0, import_fs26.existsSync)(codexAuthPath)) {
+        if ((0, import_fs27.existsSync)(codexAuthPath)) {
           try {
-            const content = (0, import_fs26.readFileSync)(codexAuthPath, "utf-8");
+            const content = (0, import_fs27.readFileSync)(codexAuthPath, "utf-8");
             const authData = JSON.parse(content);
             if (verbose) {
               spinner.info(source_default.dim(`  Found auth.json, checking tokens...`));
@@ -53300,13 +53433,13 @@ Source: ${credentialSource2}`));
           spinner.info(source_default.dim("  Using API key from command line"));
         }
       } else {
-        const geminiAuthPath = (0, import_path25.join)((0, import_os20.homedir)(), ".gemini", "oauth_creds.json");
+        const geminiAuthPath = (0, import_path26.join)((0, import_os20.homedir)(), ".gemini", "oauth_creds.json");
         if (verbose) {
           spinner.info(source_default.dim(`  Trying ${geminiAuthPath}...`));
         }
-        if ((0, import_fs26.existsSync)(geminiAuthPath)) {
+        if ((0, import_fs27.existsSync)(geminiAuthPath)) {
           try {
-            const content = (0, import_fs26.readFileSync)(geminiAuthPath, "utf-8");
+            const content = (0, import_fs27.readFileSync)(geminiAuthPath, "utf-8");
             const authData = JSON.parse(content);
             if (verbose) {
               spinner.info(source_default.dim(`  Found oauth_creds.json, checking tokens...`));
@@ -53407,13 +53540,13 @@ Source: ${credentialSource2}`));
       let refreshToken;
       let idToken;
       let scope;
-      const firebaseAuthPath = (0, import_path25.join)((0, import_os20.homedir)(), ".config", "configstore", "firebase-tools.json");
+      const firebaseAuthPath = (0, import_path26.join)((0, import_os20.homedir)(), ".config", "configstore", "firebase-tools.json");
       if (verbose) {
         spinner.info(source_default.dim(`  Trying ${firebaseAuthPath}...`));
       }
-      if ((0, import_fs26.existsSync)(firebaseAuthPath)) {
+      if ((0, import_fs27.existsSync)(firebaseAuthPath)) {
         try {
-          const content = (0, import_fs26.readFileSync)(firebaseAuthPath, "utf-8");
+          const content = (0, import_fs27.readFileSync)(firebaseAuthPath, "utf-8");
           const data = JSON.parse(content);
           if (verbose) {
             spinner.info(source_default.dim(`  Found firebase-tools.json, checking tokens...`));
@@ -53513,13 +53646,13 @@ Source: ${credentialSource2}`));
           spinner.info(source_default.dim("  Using access token from command line"));
         }
       } else {
-        const cursorAuthPath = (0, import_path25.join)((0, import_os20.homedir)(), ".cursor", "auth.json");
+        const cursorAuthPath = (0, import_path26.join)((0, import_os20.homedir)(), ".cursor", "auth.json");
         if (verbose) {
           spinner.info(source_default.dim(`  Trying ${cursorAuthPath}...`));
         }
-        if ((0, import_fs26.existsSync)(cursorAuthPath)) {
+        if ((0, import_fs27.existsSync)(cursorAuthPath)) {
           try {
-            const content = (0, import_fs26.readFileSync)(cursorAuthPath, "utf-8");
+            const content = (0, import_fs27.readFileSync)(cursorAuthPath, "utf-8");
             const authData = JSON.parse(content);
             if (verbose) {
               spinner.info(source_default.dim(`  Found auth.json, checking tokens...`));
@@ -53792,7 +53925,7 @@ Source: ${credentialSource2}`));
   Running: gal auth ${providerId}
 `));
         try {
-          (0, import_child_process8.execSync)(`node ${process.argv[1]} auth ${providerId}`, {
+          (0, import_child_process9.execSync)(`node ${process.argv[1]} auth ${providerId}`, {
             stdio: "inherit",
             encoding: "utf-8",
             timeout: 3e4,
@@ -53829,7 +53962,7 @@ Source: ${credentialSource2}`));
   });
   return auth;
 }
-var import_http, import_child_process8, import_os20, import_fs26, import_path25, import_readline3, CLI_CALLBACK_PORT, CLI_CALLBACK_PATH, cliVersion5, defaultApiUrl5;
+var import_http, import_child_process9, import_os20, import_fs27, import_path26, import_readline3, CLI_CALLBACK_PORT, CLI_CALLBACK_PATH, cliVersion5, defaultApiUrl5;
 var init_auth2 = __esm({
   "src/commands/auth.ts"() {
     "use strict";
@@ -53837,14 +53970,14 @@ var init_auth2 = __esm({
     init_source();
     init_ora();
     import_http = require("http");
-    import_child_process8 = require("child_process");
+    import_child_process9 = require("child_process");
     init_config_manager();
     init_constants();
     init_CoreServiceProvider();
     init_telemetry();
     import_os20 = require("os");
-    import_fs26 = require("fs");
-    import_path25 = require("path");
+    import_fs27 = require("fs");
+    import_path26 = require("path");
     init_hooks();
     init_sync();
     import_readline3 = require("readline");
@@ -53859,13 +53992,13 @@ var init_auth2 = __esm({
 // src/commands/check.ts
 function createCheckCommand() {
   const command = new Command("check").description("Pre-enforcement check - see what issues will block your commit").option("--fix", "Auto-fix issues where possible").option("--interactive", "Interactive mode to review issues").option("--report", "Generate detailed JSON report").option("--path <path>", "Project path to check", process.cwd()).action(async (options) => {
-    if (!(0, import_fs27.existsSync)(options.path)) {
+    if (!(0, import_fs28.existsSync)(options.path)) {
       console.error(source_default.red(`
 Error: Path does not exist: ${options.path}
 `));
       process.exit(1);
     }
-    if (!(0, import_fs27.statSync)(options.path).isDirectory()) {
+    if (!(0, import_fs28.statSync)(options.path).isDirectory()) {
       console.error(source_default.red(`
 Error: Path is not a directory: ${options.path}
 `));
@@ -53877,8 +54010,8 @@ Error: Path is not a directory: ${options.path}
     });
     const report = await checker.runAllChecks();
     if (options.report) {
-      const reportPath = (0, import_path26.join)(options.path, "gal-check-report.json");
-      (0, import_fs27.writeFileSync)(reportPath, JSON.stringify(report, null, 2));
+      const reportPath = (0, import_path27.join)(options.path, "gal-check-report.json");
+      (0, import_fs28.writeFileSync)(reportPath, JSON.stringify(report, null, 2));
       console.log(source_default.blue(`Report saved to: ${reportPath}`));
     }
     if (report.summary.blocked) {
@@ -53887,15 +54020,15 @@ Error: Path is not a directory: ${options.path}
   });
   return command;
 }
-var import_fs27, import_path26, import_child_process9, SECRET_PATTERNS, DANGEROUS_PATTERNS, FORBIDDEN_FILES, PreEnforcementChecker;
+var import_fs28, import_path27, import_child_process10, SECRET_PATTERNS, DANGEROUS_PATTERNS, FORBIDDEN_FILES, PreEnforcementChecker;
 var init_check = __esm({
   "src/commands/check.ts"() {
     "use strict";
     init_esm();
     init_source();
-    import_fs27 = require("fs");
-    import_path26 = require("path");
-    import_child_process9 = require("child_process");
+    import_fs28 = require("fs");
+    import_path27 = require("path");
+    import_child_process10 = require("child_process");
     SECRET_PATTERNS = [
       {
         name: "AWS Access Key",
@@ -54021,14 +54154,14 @@ var init_check = __esm({
        */
       getFilesToCheck() {
         try {
-          const staged = (0, import_child_process9.execSync)("git diff --cached --name-only", {
+          const staged = (0, import_child_process10.execSync)("git diff --cached --name-only", {
             cwd: this.projectPath,
             encoding: "utf-8"
           }).trim();
           if (staged) {
             return staged.split("\n").filter((f) => f.trim());
           }
-          const tracked = (0, import_child_process9.execSync)("git ls-files", {
+          const tracked = (0, import_child_process10.execSync)("git ls-files", {
             cwd: this.projectPath,
             encoding: "utf-8"
           }).trim();
@@ -54046,10 +54179,10 @@ var init_check = __esm({
         const scan = (currentDir, depth) => {
           if (depth > maxDepth) return;
           try {
-            const entries = (0, import_fs27.readdirSync)(currentDir, { withFileTypes: true });
+            const entries = (0, import_fs28.readdirSync)(currentDir, { withFileTypes: true });
             for (const entry of entries) {
-              const fullPath = (0, import_path26.join)(currentDir, entry.name);
-              const relativePath = (0, import_path26.relative)(this.projectPath, fullPath);
+              const fullPath = (0, import_path27.join)(currentDir, entry.name);
+              const relativePath = (0, import_path27.relative)(this.projectPath, fullPath);
               if (entry.isDirectory()) {
                 if (!ignoreDirs.includes(entry.name)) {
                   scan(fullPath, depth + 1);
@@ -54069,10 +54202,10 @@ var init_check = __esm({
        */
       async checkForSecrets(files) {
         for (const file of files) {
-          const fullPath = (0, import_path26.join)(this.projectPath, file);
-          if (!(0, import_fs27.existsSync)(fullPath) || !this.isTextFile(fullPath)) continue;
+          const fullPath = (0, import_path27.join)(this.projectPath, file);
+          if (!(0, import_fs28.existsSync)(fullPath) || !this.isTextFile(fullPath)) continue;
           try {
-            const content = (0, import_fs27.readFileSync)(fullPath, "utf-8");
+            const content = (0, import_fs28.readFileSync)(fullPath, "utf-8");
             const lines = content.split("\n");
             for (const { name, pattern, severity, suggestion } of SECRET_PATTERNS) {
               pattern.lastIndex = 0;
@@ -54104,13 +54237,13 @@ var init_check = __esm({
       async checkForDangerousCommands(files) {
         const scriptExtensions = [".sh", ".bash", ".zsh", ".ps1", ".bat", ".cmd"];
         for (const file of files) {
-          const fullPath = (0, import_path26.join)(this.projectPath, file);
-          if (!(0, import_fs27.existsSync)(fullPath)) continue;
+          const fullPath = (0, import_path27.join)(this.projectPath, file);
+          if (!(0, import_fs28.existsSync)(fullPath)) continue;
           const isScript = scriptExtensions.some((ext) => file.endsWith(ext));
           const isConfig = file.includes("hook") || file.includes("command");
           if (!isScript && !isConfig) continue;
           try {
-            const content = (0, import_fs27.readFileSync)(fullPath, "utf-8");
+            const content = (0, import_fs28.readFileSync)(fullPath, "utf-8");
             for (const { name, pattern, severity, suggestion } of DANGEROUS_PATTERNS) {
               pattern.lastIndex = 0;
               let match;
@@ -54148,7 +54281,7 @@ var init_check = __esm({
                 autoFixable: true,
                 autoFix: () => {
                   try {
-                    (0, import_child_process9.execSync)(`git reset HEAD "${file}"`, { cwd: this.projectPath });
+                    (0, import_child_process10.execSync)(`git reset HEAD "${file}"`, { cwd: this.projectPath });
                   } catch {
                   }
                 }
@@ -54163,14 +54296,14 @@ var init_check = __esm({
       async checkAgentConfigs() {
         const configDirs = [".claude", ".cursor", ".gemini", ".codex", ".windsurf"];
         for (const dir of configDirs) {
-          const dirPath = (0, import_path26.join)(this.projectPath, dir);
-          if (!(0, import_fs27.existsSync)(dirPath)) continue;
+          const dirPath = (0, import_path27.join)(this.projectPath, dir);
+          if (!(0, import_fs28.existsSync)(dirPath)) continue;
           const files = this.scanDirectory(dirPath, 2);
           for (const file of files) {
-            const fullPath = (0, import_path26.join)(this.projectPath, file);
-            if (!(0, import_fs27.existsSync)(fullPath)) continue;
+            const fullPath = (0, import_path27.join)(this.projectPath, file);
+            if (!(0, import_fs28.existsSync)(fullPath)) continue;
             try {
-              const content = (0, import_fs27.readFileSync)(fullPath, "utf-8");
+              const content = (0, import_fs28.readFileSync)(fullPath, "utf-8");
               if (content.includes('"allowAll": true') || content.includes("allowAll: true")) {
                 this.issues.push({
                   severity: "high",
@@ -54210,7 +54343,7 @@ var init_check = __esm({
             file.replace("src/", "src/__tests__/").replace(/\.(ts|tsx|js|jsx)$/, ".test.$1")
           ];
           const hasTest = testVariants.some(
-            (testFile) => (0, import_fs27.existsSync)((0, import_path26.join)(this.projectPath, testFile))
+            (testFile) => (0, import_fs28.existsSync)((0, import_path27.join)(this.projectPath, testFile))
           );
           if (!hasTest) {
             this.issues.push({
@@ -59851,13 +59984,21 @@ Installing hooks for: ${platforms.join(", ")}`));
       process.exit(1);
     }
   });
-  sdlcCommand.command("set <level>").description("Set native SDLC enforcement mode (off, warn, block)").option("--reason <reason>", "Reason to include in the audit trail").option("--json", "Output as JSON").action(async (level, options) => {
+  sdlcCommand.command("set <level>").description("Set native SDLC enforcement mode (off, warn, block)").option("--reason <reason>", "Reason to include in the audit trail").option("--warn-duration-days <days>", "Days in warn mode before auto-escalating to block (0 = no auto-escalation)").option("--json", "Output as JSON").action(async (level, options) => {
     if (!["off", "warn", "block"].includes(level)) {
       console.error(source_default.red("Invalid level. Use one of: off, warn, block"));
       process.exit(1);
     }
     const { authToken, orgName, apiUrl } = getAuthAndOrg2();
     const spinner = options.json ? null : ora(`Setting SDLC enforcement mode to ${level}...`).start();
+    let warnDurationDays;
+    if (options.warnDurationDays !== void 0) {
+      warnDurationDays = parseInt(options.warnDurationDays, 10);
+      if (isNaN(warnDurationDays) || warnDurationDays < 0) {
+        console.error(source_default.red("--warn-duration-days must be a non-negative integer"));
+        process.exit(1);
+      }
+    }
     try {
       const res = await fetchApi3(
         `${apiUrl}/organizations/${encodeURIComponent(orgName)}/enforcement/sdlc`,
@@ -59866,7 +60007,8 @@ Installing hooks for: ${platforms.join(", ")}`));
         {
           level,
           enabled: level !== "off",
-          ...options.reason ? { reason: options.reason } : {}
+          ...options.reason ? { reason: options.reason } : {},
+          ...warnDurationDays !== void 0 ? { warnDurationDays } : {}
         }
       );
       if (!res.ok) {
@@ -59880,8 +60022,11 @@ Installing hooks for: ${platforms.join(", ")}`));
         return;
       }
       console.log(source_default.green(`
-Native SDLC enforcement updated to ${level} for ${orgName}.
-`));
+Native SDLC enforcement updated to ${level} for ${orgName}.`));
+      if (level === "warn" && warnDurationDays && warnDurationDays > 0) {
+        console.log(source_default.dim(`  Warn period: ${warnDurationDays} day(s) before auto-escalating to block.`));
+      }
+      console.log();
     } catch (error3) {
       spinner?.stop();
       const msg = error3 instanceof Error ? error3.message : String(error3);
@@ -59893,6 +60038,86 @@ Native SDLC enforcement updated to ${level} for ${orgName}.
       process.exit(1);
     }
   });
+  sdlcCommand.command("check").description("Check effective enforcement mode and warn or block accordingly").option("--login <login>", "Developer GitHub login (defaults to authenticated user)").option("--context <context>", "Description of the action being checked (shown in messages)").option("--json", "Output as JSON").action(async (options) => {
+    const { authToken, orgName, apiUrl } = getAuthAndOrg2();
+    try {
+      const loginParam = options.login ? `?login=${encodeURIComponent(options.login)}` : "";
+      const res = await fetchApi3(
+        `${apiUrl}/organizations/${encodeURIComponent(orgName)}/enforcement/sdlc/mode${loginParam}`,
+        authToken
+      );
+      if (!res.ok) {
+        if (options.json) {
+          console.log(JSON.stringify({ allowed: true, level: "off", reason: "API unavailable \u2014 fail open" }));
+        }
+        process.exit(0);
+        return;
+      }
+      const data = await res.json();
+      const { level, reason, isDeveloperOverride, isAutoEscalated } = data.resolved;
+      const actionCtx = options.context ? ` (${options.context})` : "";
+      if (options.json) {
+        console.log(JSON.stringify({
+          allowed: level !== "block",
+          level,
+          reason,
+          isDeveloperOverride,
+          isAutoEscalated,
+          orgName,
+          developerLogin: data.developerLogin
+        }, null, 2));
+        if (level === "block") {
+          process.exit(1);
+        }
+        return;
+      }
+      if (level === "off") {
+        process.exit(0);
+        return;
+      }
+      if (level === "warn") {
+        console.warn(source_default.yellow(`
+\u26A0  GAL SDLC Warning${actionCtx}`));
+        console.warn(source_default.yellow("   You are working outside the SDLC workflow."));
+        console.warn(source_default.dim(`   You should be using the appropriate SDLC command (e.g., /sdlc:4-implement:run <issue>).`));
+        console.warn(source_default.dim(`   Organization: ${orgName}`));
+        if (isDeveloperOverride) {
+          console.warn(source_default.dim(`   Note: A per-developer override is active.`));
+        }
+        if (isAutoEscalated) {
+          console.warn(source_default.dim(`   Note: The org warn period has elapsed \u2014 this will soon switch to block mode.`));
+        }
+        console.warn(source_default.dim(`   You can continue, but your activity has been noted.
+`));
+        process.exit(0);
+        return;
+      }
+      if (level === "block") {
+        console.error(source_default.red(`
+\u2717  GAL SDLC Enforcement \u2014 Operation Blocked${actionCtx}`));
+        console.error(source_default.red(`   You must use the SDLC workflow command for this type of work.`));
+        console.error(source_default.dim(`   Example: /sdlc:4-implement:run <issue-number>`));
+        console.error(source_default.dim(`   Organization: ${orgName}`));
+        if (isDeveloperOverride) {
+          console.error(source_default.dim(`   Note: A per-developer override is active.`));
+        }
+        if (isAutoEscalated) {
+          console.error(source_default.dim(`   Note: The org warn period elapsed \u2014 enforcement has escalated to block.`));
+        }
+        console.error(source_default.dim(`   Contact your org admin if you believe this is a mistake.
+`));
+        process.exit(1);
+        return;
+      }
+      process.exit(0);
+    } catch (error3) {
+      const msg = error3 instanceof Error ? error3.message : String(error3);
+      if (options.json) {
+        console.log(JSON.stringify({ allowed: true, level: "off", reason: `Error \u2014 fail open: ${msg}` }));
+      }
+      process.exit(0);
+    }
+  });
   enforce.addCommand(sdlcCommand);
   const workflowCommand = new Command("workflow").description("Manage workflow enforcement mode (background agents only)");
   workflowCommand.command("status").description("Show the current workflow enforcement mode").option("--json", "Output as JSON").action(async (options) => {
@@ -60240,8 +60465,8 @@ async function fetchWithAuth(url, authToken) {
 }
 async function resolveOrgFromGit(basePath) {
   try {
-    const { execSync: execSync14 } = await import("node:child_process");
-    const remote = execSync14("git remote get-url origin", { cwd: basePath, encoding: "utf-8" }).trim();
+    const { execSync: execSync15 } = await import("node:child_process");
+    const remote = execSync15("git remote get-url origin", { cwd: basePath, encoding: "utf-8" }).trim();
     const sshMatch = remote.match(/:([^/]+)\//);
     const httpsMatch = remote.match(/github\.com\/([^/]+)\//);
     return sshMatch?.[1] || httpsMatch?.[1] || null;
@@ -60748,18 +60973,18 @@ Writing configs to ${outputDir}:
         if (!fileName.includes(".")) {
           fileName = `${fileName}${extension}`;
         }
-        const relativePath = categoryDir ? (0, import_path27.join)(platformDir, categoryDir, fileName) : (0, import_path27.join)(platformDir, fileName);
-        const fullPath = (0, import_path27.join)(outputDir, relativePath);
+        const relativePath = categoryDir ? (0, import_path28.join)(platformDir, categoryDir, fileName) : (0, import_path28.join)(platformDir, fileName);
+        const fullPath = (0, import_path28.join)(outputDir, relativePath);
         if (options.dryRun) {
           console.log(source_default.cyan("  [dry-run]"), relativePath);
           writtenFiles.push(relativePath);
           continue;
         }
-        const dir = (0, import_path27.dirname)(fullPath);
-        if (!(0, import_fs28.existsSync)(dir)) {
-          (0, import_fs28.mkdirSync)(dir, { recursive: true });
+        const dir = (0, import_path28.dirname)(fullPath);
+        if (!(0, import_fs29.existsSync)(dir)) {
+          (0, import_fs29.mkdirSync)(dir, { recursive: true });
         }
-        (0, import_fs28.writeFileSync)(fullPath, file.content, "utf-8");
+        (0, import_fs29.writeFileSync)(fullPath, file.content, "utf-8");
         writtenFiles.push(relativePath);
         console.log(source_default.green("  \u2713"), relativePath);
       }
@@ -60820,7 +61045,7 @@ Files written to ${outputDir}`));
   });
   return command;
 }
-var import_fs28, import_path27, PLATFORM_DIRS4, CATEGORY_DIRS, FILE_EXTENSIONS;
+var import_fs29, import_path28, PLATFORM_DIRS4, CATEGORY_DIRS, FILE_EXTENSIONS;
 var init_fetch = __esm({
   "src/commands/fetch.ts"() {
     "use strict";
@@ -60829,8 +61054,8 @@ var init_fetch = __esm({
     init_ora();
     init_config_manager();
     init_CoreServiceProvider();
-    import_fs28 = require("fs");
-    import_path27 = require("path");
+    import_fs29 = require("fs");
+    import_path28 = require("path");
     init_capability_checker();
     init_dist2();
     PLATFORM_DIRS4 = { ...PLATFORM_DIRECTORY_MAP };
@@ -61092,13 +61317,13 @@ function getGitEmail() {
 }
 async function getLocalEnforcementStatus() {
   const { stat: stat5, readFile: readFile4 } = await import("node:fs/promises");
-  const { join: join54 } = await import("node:path");
+  const { join: join55 } = await import("node:path");
   const platforms = [];
   let version2 = "0.0.0";
   let policyVersion = "0.0.0";
   const platformDirs = [".claude", ".cursor", ".gemini", ".codex", ".windsurf"];
   for (const dir of platformDirs) {
-    const hookPath = join54(process.cwd(), dir, "hooks", "gal-safety-hook.py");
+    const hookPath = join55(process.cwd(), dir, "hooks", "gal-safety-hook.py");
     try {
       await stat5(hookPath);
       platforms.push(dir.replace(".", ""));
@@ -61111,7 +61336,7 @@ async function getLocalEnforcementStatus() {
     }
   }
   try {
-    const pkgPath = join54(import_meta2.url.replace("file://", ""), "..", "..", "..", "package.json");
+    const pkgPath = join55(import_meta2.url.replace("file://", ""), "..", "..", "..", "package.json");
     const pkg = JSON.parse(await readFile4(pkgPath, "utf-8"));
     version2 = pkg.version || "0.1.0";
   } catch {
@@ -61571,15 +61796,15 @@ Task not running: ${taskId}
   });
   return command;
 }
-var import_child_process10, import_fs29, import_path28, DEFAULT_CONFIG, TASK_TEMPLATES, HeadlessRunner;
+var import_child_process11, import_fs30, import_path29, DEFAULT_CONFIG, TASK_TEMPLATES, HeadlessRunner;
 var init_headless = __esm({
   "src/commands/headless.ts"() {
     "use strict";
     init_esm();
     init_source();
-    import_child_process10 = require("child_process");
-    import_fs29 = require("fs");
-    import_path28 = require("path");
+    import_child_process11 = require("child_process");
+    import_fs30 = require("fs");
+    import_path29 = require("path");
     DEFAULT_CONFIG = {
       dataDir: ".gal/headless",
       logDir: ".gal/headless/logs",
@@ -61633,23 +61858,23 @@ var init_headless = __esm({
        * Ensure required directories exist
        */
       ensureDirectories() {
-        const dataDir = (0, import_path28.join)(this.projectPath, this.config.dataDir);
-        const logDir = (0, import_path28.join)(this.projectPath, this.config.logDir);
-        if (!(0, import_fs29.existsSync)(dataDir)) {
-          (0, import_fs29.mkdirSync)(dataDir, { recursive: true });
+        const dataDir = (0, import_path29.join)(this.projectPath, this.config.dataDir);
+        const logDir = (0, import_path29.join)(this.projectPath, this.config.logDir);
+        if (!(0, import_fs30.existsSync)(dataDir)) {
+          (0, import_fs30.mkdirSync)(dataDir, { recursive: true });
         }
-        if (!(0, import_fs29.existsSync)(logDir)) {
-          (0, import_fs29.mkdirSync)(logDir, { recursive: true });
+        if (!(0, import_fs30.existsSync)(logDir)) {
+          (0, import_fs30.mkdirSync)(logDir, { recursive: true });
         }
       }
       /**
        * Load tasks from disk
        */
       loadTasks() {
-        const tasksFile = (0, import_path28.join)(this.projectPath, this.config.dataDir, "tasks.json");
-        if ((0, import_fs29.existsSync)(tasksFile)) {
+        const tasksFile = (0, import_path29.join)(this.projectPath, this.config.dataDir, "tasks.json");
+        if ((0, import_fs30.existsSync)(tasksFile)) {
           try {
-            const data = JSON.parse((0, import_fs29.readFileSync)(tasksFile, "utf-8"));
+            const data = JSON.parse((0, import_fs30.readFileSync)(tasksFile, "utf-8"));
             for (const task of data.tasks || []) {
               this.tasks.set(task.id, {
                 ...task,
@@ -61666,12 +61891,12 @@ var init_headless = __esm({
        * Save tasks to disk
        */
       saveTasks() {
-        const tasksFile = (0, import_path28.join)(this.projectPath, this.config.dataDir, "tasks.json");
+        const tasksFile = (0, import_path29.join)(this.projectPath, this.config.dataDir, "tasks.json");
         const data = {
           tasks: Array.from(this.tasks.values()),
           updatedAt: (/* @__PURE__ */ new Date()).toISOString()
         };
-        (0, import_fs29.writeFileSync)(tasksFile, JSON.stringify(data, null, 2));
+        (0, import_fs30.writeFileSync)(tasksFile, JSON.stringify(data, null, 2));
       }
       /**
        * Create a new task
@@ -61722,7 +61947,7 @@ var init_headless = __esm({
         task.status = "running";
         task.startedAt = /* @__PURE__ */ new Date();
         this.saveTasks();
-        const logFile = (0, import_path28.join)(
+        const logFile = (0, import_path29.join)(
           this.projectPath,
           this.config.logDir,
           `${task.id}_${Date.now()}.log`
@@ -61735,7 +61960,7 @@ var init_headless = __esm({
         console.log(source_default.gray(`   Log file: ${logFile}
 `));
         return new Promise((resolve11) => {
-          const child = (0, import_child_process10.spawn)("sh", ["-c", task.command], {
+          const child = (0, import_child_process11.spawn)("sh", ["-c", task.command], {
             cwd: this.projectPath,
             env: {
               ...process.env,
@@ -61748,7 +61973,7 @@ var init_headless = __esm({
           const logStream = (data, isError = false) => {
             const text = data.toString();
             const prefix = isError ? "[ERROR] " : "";
-            (0, import_fs29.appendFileSync)(logFile, `${(/* @__PURE__ */ new Date()).toISOString()} ${prefix}${text}`);
+            (0, import_fs30.appendFileSync)(logFile, `${(/* @__PURE__ */ new Date()).toISOString()} ${prefix}${text}`);
             if (!task.output) task.output = "";
             task.output += text;
           };
@@ -61951,7 +62176,7 @@ var init_headless = __esm({
 // src/commands/init.ts
 function createInitCommand() {
   return new Command("init").description("Initialize current directory for GAL auto-sync").option("-d, --directory <path>", "Directory to initialize", process.cwd()).option("--remove", "Remove GAL auto-sync initialization for this directory").action((options) => {
-    const targetDirectory = (0, import_path29.resolve)(options.directory || process.cwd());
+    const targetDirectory = (0, import_path30.resolve)(options.directory || process.cwd());
     if (options.remove) {
       const result2 = removeInitializedDirectory(targetDirectory);
       if (result2.removed) {
@@ -61979,13 +62204,13 @@ function createInitCommand() {
     console.log(source_default.dim(`Registry: ${getSyncInitializationRegistryPath()}`));
   });
 }
-var import_path29;
+var import_path30;
 var init_init = __esm({
   "src/commands/init.ts"() {
     "use strict";
     init_esm();
     init_source();
-    import_path29 = require("path");
+    import_path30 = require("path");
     init_sync_initialization();
   }
 });
@@ -61993,18 +62218,18 @@ var init_init = __esm({
 // src/commands/install.ts
 function readClaudeSettings() {
   try {
-    if ((0, import_fs30.existsSync)(SETTINGS_PATH2)) {
-      return JSON.parse((0, import_fs30.readFileSync)(SETTINGS_PATH2, "utf-8"));
+    if ((0, import_fs31.existsSync)(SETTINGS_PATH2)) {
+      return JSON.parse((0, import_fs31.readFileSync)(SETTINGS_PATH2, "utf-8"));
     }
   } catch {
   }
   return {};
 }
 function writeClaudeSettings(settings) {
-  if (!(0, import_fs30.existsSync)(CLAUDE_DIR2)) {
-    (0, import_fs30.mkdirSync)(CLAUDE_DIR2, { recursive: true });
+  if (!(0, import_fs31.existsSync)(CLAUDE_DIR2)) {
+    (0, import_fs31.mkdirSync)(CLAUDE_DIR2, { recursive: true });
   }
-  (0, import_fs30.writeFileSync)(SETTINGS_PATH2, JSON.stringify(settings, null, 2), "utf-8");
+  (0, import_fs31.writeFileSync)(SETTINGS_PATH2, JSON.stringify(settings, null, 2), "utf-8");
 }
 function hasMemorySyncHooks(settings) {
   const preToolUse = settings.hooks?.PreToolUse || [];
@@ -62069,10 +62294,10 @@ function installMemorySyncHooks(upgrade) {
   };
 }
 function injectClaudeMdTemplate(projectDir, upgrade) {
-  const claudeMdPath = (0, import_path30.join)(projectDir, "CLAUDE.md");
+  const claudeMdPath = (0, import_path31.join)(projectDir, "CLAUDE.md");
   const result = { injected: false, upgraded: false, path: claudeMdPath };
-  if ((0, import_fs30.existsSync)(claudeMdPath)) {
-    const content = (0, import_fs30.readFileSync)(claudeMdPath, "utf-8");
+  if ((0, import_fs31.existsSync)(claudeMdPath)) {
+    const content = (0, import_fs31.readFileSync)(claudeMdPath, "utf-8");
     if (content.includes(CLAUDE_MD_MARKER_START)) {
       if (!upgrade) {
         return result;
@@ -62081,16 +62306,16 @@ function injectClaudeMdTemplate(projectDir, upgrade) {
         `${escapeRegex2(CLAUDE_MD_MARKER_START)}[\\s\\S]*?${escapeRegex2(CLAUDE_MD_MARKER_END)}`
       );
       const newContent2 = content.replace(regex2, CLAUDE_MD_TEMPLATE);
-      (0, import_fs30.writeFileSync)(claudeMdPath, newContent2, "utf-8");
+      (0, import_fs31.writeFileSync)(claudeMdPath, newContent2, "utf-8");
       result.upgraded = true;
       return result;
     }
     const newContent = content.trimEnd() + "\n\n" + CLAUDE_MD_TEMPLATE + "\n";
-    (0, import_fs30.writeFileSync)(claudeMdPath, newContent, "utf-8");
+    (0, import_fs31.writeFileSync)(claudeMdPath, newContent, "utf-8");
     result.injected = true;
     return result;
   }
-  (0, import_fs30.writeFileSync)(claudeMdPath, CLAUDE_MD_TEMPLATE + "\n", "utf-8");
+  (0, import_fs31.writeFileSync)(claudeMdPath, CLAUDE_MD_TEMPLATE + "\n", "utf-8");
   result.injected = true;
   return result;
 }
@@ -62222,15 +62447,15 @@ function createInstallCommand() {
     }
   });
 }
-var import_fs30, import_path30, import_os21, INSTALL_METHODS, CLAUDE_DIR2, SETTINGS_PATH2, MEMORY_HOOK_VERSION, MEMORY_HOOK_MARKER, CLAUDE_MD_MARKER_START, CLAUDE_MD_MARKER_END, CLAUDE_MD_TEMPLATE;
+var import_fs31, import_path31, import_os21, INSTALL_METHODS, CLAUDE_DIR2, SETTINGS_PATH2, MEMORY_HOOK_VERSION, MEMORY_HOOK_MARKER, CLAUDE_MD_MARKER_START, CLAUDE_MD_MARKER_END, CLAUDE_MD_TEMPLATE;
 var init_install2 = __esm({
   "src/commands/install.ts"() {
     "use strict";
     init_esm();
     init_source();
     init_ora();
-    import_fs30 = require("fs");
-    import_path30 = require("path");
+    import_fs31 = require("fs");
+    import_path31 = require("path");
     import_os21 = require("os");
     init_install();
     init_org_config_upgrade();
@@ -62242,8 +62467,8 @@ var init_install2 = __esm({
       "native",
       "unknown"
     ];
-    CLAUDE_DIR2 = (0, import_path30.join)((0, import_os21.homedir)(), ".claude");
-    SETTINGS_PATH2 = (0, import_path30.join)(CLAUDE_DIR2, "settings.json");
+    CLAUDE_DIR2 = (0, import_path31.join)((0, import_os21.homedir)(), ".claude");
+    SETTINGS_PATH2 = (0, import_path31.join)(CLAUDE_DIR2, "settings.json");
     MEMORY_HOOK_VERSION = "1.0.0";
     MEMORY_HOOK_MARKER = "gal-memory-sync";
     CLAUDE_MD_MARKER_START = "<!-- GAL_SHARED_MEMORY_START -->";
@@ -62422,7 +62647,7 @@ if __name__ == '__main__':
 `;
 }
 function createJoinCommand() {
-  const join54 = new Command("join").description("Join an organization using an invite code (GAL-100)").option("-c, --code <code>", "Invite code (e.g., GAL-XXXX-XXXX)").option("-e, --email <email>", "Developer email (defaults to git config)").option("--skip-hooks", "Skip enforcement hook installation").option("--dry-run", "Validate invite without joining").action(async (options) => {
+  const join55 = new Command("join").description("Join an organization using an invite code (GAL-100)").option("-c, --code <code>", "Invite code (e.g., GAL-XXXX-XXXX)").option("-e, --email <email>", "Developer email (defaults to git config)").option("--skip-hooks", "Skip enforcement hook installation").option("--dry-run", "Validate invite without joining").action(async (options) => {
     const spinner = ora();
     if (!options.code) {
       console.log(source_default.bold("\nGAL Developer Onboarding\n"));
@@ -62538,7 +62763,7 @@ Error: ${useResult.error || "Unknown error"}`));
       process.exit(1);
     }
   });
-  return join54;
+  return join55;
 }
 var import_node_os5, import_node_child_process2, import_node_crypto3, import_promises6, import_node_path4, defaultApiUrl9;
 var init_join = __esm({
@@ -62833,8 +63058,8 @@ var init_maintain = __esm({
 // src/commands/sync-memory.ts
 function readSyncState2() {
   try {
-    if ((0, import_fs31.existsSync)(SYNC_STATE_FILE)) {
-      return JSON.parse((0, import_fs31.readFileSync)(SYNC_STATE_FILE, "utf-8"));
+    if ((0, import_fs32.existsSync)(SYNC_STATE_FILE)) {
+      return JSON.parse((0, import_fs32.readFileSync)(SYNC_STATE_FILE, "utf-8"));
     }
   } catch {
   }
@@ -62842,10 +63067,10 @@ function readSyncState2() {
 }
 function writeSyncState2(state) {
   try {
-    if (!(0, import_fs31.existsSync)(SYNC_STATE_DIR)) {
-      (0, import_fs31.mkdirSync)(SYNC_STATE_DIR, { recursive: true });
+    if (!(0, import_fs32.existsSync)(SYNC_STATE_DIR)) {
+      (0, import_fs32.mkdirSync)(SYNC_STATE_DIR, { recursive: true });
     }
-    (0, import_fs31.writeFileSync)(SYNC_STATE_FILE, JSON.stringify(state, null, 2), "utf-8");
+    (0, import_fs32.writeFileSync)(SYNC_STATE_FILE, JSON.stringify(state, null, 2), "utf-8");
   } catch {
   }
 }
@@ -62876,13 +63101,13 @@ function resolveAuthToken() {
 }
 function getLocalMemoryPath() {
   const cwd = process.cwd();
-  const claudeMemoryDir = (0, import_path31.join)(cwd, ".claude", "memory");
-  return (0, import_path31.join)(claudeMemoryDir, "MEMORY.md");
+  const claudeMemoryDir = (0, import_path32.join)(cwd, ".claude", "memory");
+  return (0, import_path32.join)(claudeMemoryDir, "MEMORY.md");
 }
 function readMemoryEntries(filePath) {
-  if (!(0, import_fs31.existsSync)(filePath)) return [];
+  if (!(0, import_fs32.existsSync)(filePath)) return [];
   try {
-    const content = (0, import_fs31.readFileSync)(filePath, "utf-8");
+    const content = (0, import_fs32.readFileSync)(filePath, "utf-8");
     return content.split(/\n\n+/).map((e) => e.trim()).filter((e) => e.length > 0);
   } catch {
     return [];
@@ -62924,11 +63149,11 @@ async function pullMemory(org, repo) {
       writeSyncState2(state);
       return;
     }
-    const memoryDir = (0, import_path31.join)(process.cwd(), ".claude", "memory");
-    if (!(0, import_fs31.existsSync)(memoryDir)) {
-      (0, import_fs31.mkdirSync)(memoryDir, { recursive: true });
+    const memoryDir = (0, import_path32.join)(process.cwd(), ".claude", "memory");
+    if (!(0, import_fs32.existsSync)(memoryDir)) {
+      (0, import_fs32.mkdirSync)(memoryDir, { recursive: true });
     }
-    const existingContent = (0, import_fs31.existsSync)(memoryPath) ? (0, import_fs31.readFileSync)(memoryPath, "utf-8").trimEnd() : "";
+    const existingContent = (0, import_fs32.existsSync)(memoryPath) ? (0, import_fs32.readFileSync)(memoryPath, "utf-8").trimEnd() : "";
     const newContent = newEntries.map((entry) => {
       const source = entry.source ? ` (from ${entry.source})` : "";
       return `${entry.content}${source} ${GAL_SYNC_MARKER}`;
@@ -62938,7 +63163,7 @@ async function pullMemory(org, repo) {
 ${newContent}
 ` : `${newContent}
 `;
-    (0, import_fs31.writeFileSync)(memoryPath, finalContent, "utf-8");
+    (0, import_fs32.writeFileSync)(memoryPath, finalContent, "utf-8");
     state.lastPullTimestamp = (/* @__PURE__ */ new Date()).toISOString();
     writeSyncState2(state);
   } catch {
@@ -62968,8 +63193,8 @@ async function pushMemory(org, repo, files) {
   if (files && files.length > 0) {
     for (const file of files) {
       try {
-        if (!(0, import_fs31.existsSync)(file)) continue;
-        const stat5 = (0, import_fs31.statSync)(file);
+        if (!(0, import_fs32.existsSync)(file)) continue;
+        const stat5 = (0, import_fs32.statSync)(file);
         const fiveMinAgo = Date.now() - 5 * 60 * 1e3;
         if (stat5.mtimeMs < fiveMinAgo) continue;
         if (stat5.size > 5e4) continue;
@@ -63040,20 +63265,20 @@ function createSyncMemoryCommand() {
     process.exit(0);
   });
 }
-var import_fs31, import_path31, import_os22, SYNC_TIMEOUT_MS, GAL_SYNC_MARKER, SYNC_STATE_DIR, SYNC_STATE_FILE, defaultApiUrl10;
+var import_fs32, import_path32, import_os22, SYNC_TIMEOUT_MS, GAL_SYNC_MARKER, SYNC_STATE_DIR, SYNC_STATE_FILE, defaultApiUrl10;
 var init_sync_memory = __esm({
   "src/commands/sync-memory.ts"() {
     "use strict";
     init_esm();
-    import_fs31 = require("fs");
-    import_path31 = require("path");
+    import_fs32 = require("fs");
+    import_path32 = require("path");
     import_os22 = require("os");
     init_config_manager();
     init_constants();
     SYNC_TIMEOUT_MS = 150;
     GAL_SYNC_MARKER = "<!-- gal-synced -->";
-    SYNC_STATE_DIR = (0, import_path31.join)((0, import_os22.homedir)(), ".gal", "memory-sync");
-    SYNC_STATE_FILE = (0, import_path31.join)(SYNC_STATE_DIR, "last-sync.json");
+    SYNC_STATE_DIR = (0, import_path32.join)((0, import_os22.homedir)(), ".gal", "memory-sync");
+    SYNC_STATE_FILE = (0, import_path32.join)(SYNC_STATE_DIR, "last-sync.json");
     defaultApiUrl10 = constants_default[1];
   }
 });
@@ -63093,10 +63318,10 @@ function parseMcpJsonRpcBody(body) {
   return null;
 }
 function readMcpConfig(mcpPath) {
-  if (!(0, import_fs32.existsSync)(mcpPath)) {
+  if (!(0, import_fs33.existsSync)(mcpPath)) {
     return { mcpServers: {} };
   }
-  const raw = (0, import_fs32.readFileSync)(mcpPath, "utf-8");
+  const raw = (0, import_fs33.readFileSync)(mcpPath, "utf-8");
   const parsed = JSON.parse(raw);
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
     throw new Error(`${mcpPath} must be a JSON object`);
@@ -63152,11 +63377,11 @@ async function postMcpJsonRpc(endpoint, authToken, method, params, timeoutMs) {
 }
 async function runMcpDoctor(options = {}) {
   const config2 = ConfigManager.load();
-  const directory = (0, import_path32.resolve)(options.directory || process.cwd());
+  const directory = (0, import_path33.resolve)(options.directory || process.cwd());
   const serverName = options.serverName || DEFAULT_SERVER_NAME;
   const fallbackApiUrl = resolveApiUrl2(options.apiUrl || config2.apiUrl || defaultApiUrl11);
   let endpoint = buildMcpUrl(fallbackApiUrl);
-  const mcpPath = (0, import_path32.join)(directory, ".mcp.json");
+  const mcpPath = (0, import_path33.join)(directory, ".mcp.json");
   const authToken = options.authToken ?? config2.authToken;
   const timeoutMs = options.timeoutMs ?? 1e4;
   const result = {
@@ -63307,11 +63532,11 @@ MCP is healthy. ${result.toolsCount} GAL tools are available.
 }
 function createSetupCommand() {
   return new Command("setup").description("Create or update .mcp.json with hosted GAL MCP server").option("--dir <path>", "Target directory (default: current directory)").option("--api-url <url>", "GAL API URL (default: config/default)").option("--server-name <name>", `MCP server key (default: ${DEFAULT_SERVER_NAME})`).option("--skip-doctor", "Skip running MCP diagnostics after setup").action(async (options) => {
-    const directory = (0, import_path32.resolve)(options.dir || process.cwd());
+    const directory = (0, import_path33.resolve)(options.dir || process.cwd());
     const serverName = options.serverName || DEFAULT_SERVER_NAME;
     const config2 = ConfigManager.load();
     const apiUrl = resolveApiUrl2(options.apiUrl || config2.apiUrl || defaultApiUrl11);
-    const mcpPath = (0, import_path32.join)(directory, ".mcp.json");
+    const mcpPath = (0, import_path33.join)(directory, ".mcp.json");
     let existing = { mcpServers: {} };
     try {
       existing = readMcpConfig(mcpPath);
@@ -63320,8 +63545,8 @@ function createSetupCommand() {
       process.exit(1);
     }
     const next = upsertHostedGalServer(existing, serverName, apiUrl);
-    (0, import_fs32.mkdirSync)(directory, { recursive: true });
-    (0, import_fs32.writeFileSync)(mcpPath, JSON.stringify(next, null, 2) + "\n", "utf-8");
+    (0, import_fs33.mkdirSync)(directory, { recursive: true });
+    (0, import_fs33.writeFileSync)(mcpPath, JSON.stringify(next, null, 2) + "\n", "utf-8");
     console.log(source_default.green(`\u2713 Updated ${mcpPath}`));
     console.log(source_default.dim(`  mcpServers.${serverName}.url = ${buildMcpUrl(apiUrl)}
 `));
@@ -63370,15 +63595,15 @@ function createDoctorCommand() {
 function createMcpCommand() {
   return new Command("mcp").description("Set up and validate GAL hosted MCP connectivity").addCommand(createSetupCommand()).addCommand(createDoctorCommand()).addCommand(createSyncMemoryCommand());
 }
-var import_fs32, import_path32, DEFAULT_SERVER_NAME, defaultApiUrl11;
+var import_fs33, import_path33, DEFAULT_SERVER_NAME, defaultApiUrl11;
 var init_mcp = __esm({
   "src/commands/mcp.ts"() {
     "use strict";
     init_esm();
     init_source();
     init_ora();
-    import_fs32 = require("fs");
-    import_path32 = require("path");
+    import_fs33 = require("fs");
+    import_path33 = require("path");
     init_config_manager();
     init_constants();
     init_sync_memory();
@@ -63390,12 +63615,12 @@ var init_mcp = __esm({
 // src/commands/memory.ts
 function parseClaudeMemoryFile(filePath) {
   try {
-    const raw = (0, import_fs33.readFileSync)(filePath, "utf-8");
+    const raw = (0, import_fs34.readFileSync)(filePath, "utf-8");
     const frontmatterMatch = raw.match(/^---\n([\s\S]*?)\n---\n([\s\S]*)$/);
     if (!frontmatterMatch) {
       return {
-        name: (0, import_path33.basename)(filePath, ".md"),
-        description: (0, import_path33.basename)(filePath, ".md").replace(/[-_]/g, " "),
+        name: (0, import_path34.basename)(filePath, ".md"),
+        description: (0, import_path34.basename)(filePath, ".md").replace(/[-_]/g, " "),
         type: "project",
         content: raw.trim(),
         source: "claude"
@@ -63409,8 +63634,8 @@ function parseClaudeMemoryFile(filePath) {
     const memType = getType?.[1]?.trim();
     const validTypes = ["user", "feedback", "project", "reference"];
     return {
-      name: getName?.[1]?.trim() || (0, import_path33.basename)(filePath, ".md"),
-      description: getDesc?.[1]?.trim() || (0, import_path33.basename)(filePath, ".md").replace(/[-_]/g, " "),
+      name: getName?.[1]?.trim() || (0, import_path34.basename)(filePath, ".md"),
+      description: getDesc?.[1]?.trim() || (0, import_path34.basename)(filePath, ".md").replace(/[-_]/g, " "),
       type: validTypes.includes(memType) ? memType : "project",
       content: body,
       source: "claude",
@@ -63424,22 +63649,22 @@ function discoverMemoryFiles(projectRoot, platform5, includeGlobal) {
   const files = [];
   const pattern = PLATFORM_PATTERNS[platform5];
   if (pattern.memoryDir) {
-    const memDir = (0, import_path33.join)(projectRoot, pattern.directory, pattern.memoryDir);
-    if ((0, import_fs33.existsSync)(memDir) && (0, import_fs33.statSync)(memDir).isDirectory()) {
+    const memDir = (0, import_path34.join)(projectRoot, pattern.directory, pattern.memoryDir);
+    if ((0, import_fs34.existsSync)(memDir) && (0, import_fs34.statSync)(memDir).isDirectory()) {
       scanMemoryDir(memDir, projectRoot, files, false);
     }
   }
   if (includeGlobal) {
     const home = (0, import_os23.homedir)();
     if (platform5 === "claude") {
-      const projectsDir = (0, import_path33.join)(home, ".claude", "projects");
-      if ((0, import_fs33.existsSync)(projectsDir)) {
+      const projectsDir = (0, import_path34.join)(home, ".claude", "projects");
+      if ((0, import_fs34.existsSync)(projectsDir)) {
         try {
-          const projectDirs = (0, import_fs33.readdirSync)(projectsDir, { withFileTypes: true });
+          const projectDirs = (0, import_fs34.readdirSync)(projectsDir, { withFileTypes: true });
           for (const projDir of projectDirs) {
             if (!projDir.isDirectory()) continue;
-            const memDir = (0, import_path33.join)(projectsDir, projDir.name, "memory");
-            if ((0, import_fs33.existsSync)(memDir) && (0, import_fs33.statSync)(memDir).isDirectory()) {
+            const memDir = (0, import_path34.join)(projectsDir, projDir.name, "memory");
+            if ((0, import_fs34.existsSync)(memDir) && (0, import_fs34.statSync)(memDir).isDirectory()) {
               scanMemoryDir(memDir, home, files, true);
             }
           }
@@ -63447,8 +63672,8 @@ function discoverMemoryFiles(projectRoot, platform5, includeGlobal) {
         }
       }
     } else if (platform5 === "windsurf") {
-      const memoriesDir = (0, import_path33.join)(home, ".codeium", "windsurf", "memories");
-      if ((0, import_fs33.existsSync)(memoriesDir)) {
+      const memoriesDir = (0, import_path34.join)(home, ".codeium", "windsurf", "memories");
+      if ((0, import_fs34.existsSync)(memoriesDir)) {
         scanMemoryDir(memoriesDir, home, files, true);
       }
     }
@@ -63457,16 +63682,16 @@ function discoverMemoryFiles(projectRoot, platform5, includeGlobal) {
 }
 function scanMemoryDir(dir, rootDir, files, isGlobal) {
   try {
-    const entries = (0, import_fs33.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_fs34.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_path33.join)(dir, entry.name);
+      const fullPath = (0, import_path34.join)(dir, entry.name);
       if (entry.isDirectory()) {
         scanMemoryDir(fullPath, rootDir, files, isGlobal);
       } else if (entry.isFile() && (entry.name.endsWith(".md") || entry.name.endsWith(".json"))) {
         if (entry.name === "MEMORY.md") continue;
         files.push({
           path: fullPath,
-          relativePath: (0, import_path33.relative)(rootDir, fullPath),
+          relativePath: (0, import_path34.relative)(rootDir, fullPath),
           isGlobal
         });
       }
@@ -63551,9 +63776,9 @@ Notes:
         mem = parseClaudeMemoryFile(file.path);
       } else {
         try {
-          const content = (0, import_fs33.readFileSync)(file.path, "utf-8");
+          const content = (0, import_fs34.readFileSync)(file.path, "utf-8");
           mem = {
-            name: (0, import_path33.basename)(file.path, ".md").replace(/[-_]/g, "-"),
+            name: (0, import_path34.basename)(file.path, ".md").replace(/[-_]/g, "-"),
             description: `Imported from ${source}: ${file.relativePath}`,
             type: "project",
             content: content.trim(),
@@ -63670,14 +63895,14 @@ Notes:
   });
   return command;
 }
-var import_fs33, import_path33, import_os23;
+var import_fs34, import_path34, import_os23;
 var init_memory2 = __esm({
   "src/commands/memory.ts"() {
     "use strict";
     init_esm();
     init_source();
-    import_fs33 = require("fs");
-    import_path33 = require("path");
+    import_fs34 = require("fs");
+    import_path34 = require("path");
     import_os23 = require("os");
     init_dist2();
     init_project_detection();
@@ -64204,21 +64429,21 @@ var init_policy = __esm({
 async function readLocalConfig() {
   const projectRoot = findProjectRoot();
   const canonicalSources = [
-    { path: (0, import_path34.join)(projectRoot, ".gal", "config.yaml"), label: ".gal/config.yaml" },
-    { path: (0, import_path34.join)((0, import_os24.homedir)(), ".gal", "config.yaml"), label: "~/.gal/config.yaml" }
+    { path: (0, import_path35.join)(projectRoot, ".gal", "config.yaml"), label: ".gal/config.yaml" },
+    { path: (0, import_path35.join)((0, import_os24.homedir)(), ".gal", "config.yaml"), label: "~/.gal/config.yaml" }
   ];
   for (const source of canonicalSources) {
-    if (!(0, import_fs34.existsSync)(source.path)) continue;
+    if (!(0, import_fs35.existsSync)(source.path)) continue;
     try {
-      const content = (0, import_fs34.readFileSync)(source.path, "utf-8");
+      const content = (0, import_fs35.readFileSync)(source.path, "utf-8");
       const config2 = (0, import_yaml3.parse)(content);
       return config2;
     } catch (error3) {
       console.warn(`Failed to parse ${source.label}:`, error3);
     }
   }
-  const claudeDir = (0, import_path34.join)(projectRoot, ".claude");
-  if (!(0, import_fs34.existsSync)(claudeDir)) {
+  const claudeDir = (0, import_path35.join)(projectRoot, ".claude");
+  if (!(0, import_fs35.existsSync)(claudeDir)) {
     return null;
   }
   return constructConfigFromClaudeDir(claudeDir);
@@ -64231,10 +64456,10 @@ function constructConfigFromClaudeDir(claudeDir) {
     hash: "",
     syncedAt: (/* @__PURE__ */ new Date()).toISOString()
   };
-  const settingsPath = (0, import_path34.join)(claudeDir, "settings.json");
-  if ((0, import_fs34.existsSync)(settingsPath)) {
+  const settingsPath = (0, import_path35.join)(claudeDir, "settings.json");
+  if ((0, import_fs35.existsSync)(settingsPath)) {
     try {
-      const settingsContent = (0, import_fs34.readFileSync)(settingsPath, "utf-8");
+      const settingsContent = (0, import_fs35.readFileSync)(settingsPath, "utf-8");
       let claudeSettings;
       try {
         claudeSettings = JSON.parse(settingsContent);
@@ -64250,24 +64475,24 @@ function constructConfigFromClaudeDir(claudeDir) {
       console.warn("Failed to read .claude/settings.json:", error3);
     }
   }
-  const claudeMdPath = (0, import_path34.join)(claudeDir, "..", "CLAUDE.md");
-  if ((0, import_fs34.existsSync)(claudeMdPath)) {
+  const claudeMdPath = (0, import_path35.join)(claudeDir, "..", "CLAUDE.md");
+  if ((0, import_fs35.existsSync)(claudeMdPath)) {
     try {
-      const claudeMdContent = (0, import_fs34.readFileSync)(claudeMdPath, "utf-8");
+      const claudeMdContent = (0, import_fs35.readFileSync)(claudeMdPath, "utf-8");
       config2.instructions = { content: claudeMdContent };
     } catch (error3) {
       console.warn("Failed to read CLAUDE.md:", error3);
     }
   }
-  const commandsDir = (0, import_path34.join)(claudeDir, "commands");
-  if ((0, import_fs34.existsSync)(commandsDir)) {
+  const commandsDir = (0, import_path35.join)(claudeDir, "commands");
+  if ((0, import_fs35.existsSync)(commandsDir)) {
     config2.commands = [];
     try {
       const commandFiles = readDirRecursive(commandsDir, ".md");
       for (const file of commandFiles) {
         const relativePath = file.replace(commandsDir + "/", "");
         const commandName = relativePath.replace(/\.md$/, "").replace(/\//g, ":");
-        const content = (0, import_fs34.readFileSync)(file, "utf-8");
+        const content = (0, import_fs35.readFileSync)(file, "utf-8");
         config2.commands.push({
           name: commandName,
           content
@@ -64277,14 +64502,14 @@ function constructConfigFromClaudeDir(claudeDir) {
       console.warn("Failed to read .claude/commands/:", error3);
     }
   }
-  const rulesDir = (0, import_path34.join)(claudeDir, "rules");
-  if ((0, import_fs34.existsSync)(rulesDir)) {
+  const rulesDir = (0, import_path35.join)(claudeDir, "rules");
+  if ((0, import_fs35.existsSync)(rulesDir)) {
     config2.rules = [];
     try {
-      const ruleFiles = (0, import_fs34.readdirSync)(rulesDir).filter((f) => f.endsWith(".md"));
+      const ruleFiles = (0, import_fs35.readdirSync)(rulesDir).filter((f) => f.endsWith(".md"));
       for (const file of ruleFiles) {
         const ruleName = file.replace(/\.md$/, "");
-        const content = (0, import_fs34.readFileSync)((0, import_path34.join)(rulesDir, file), "utf-8");
+        const content = (0, import_fs35.readFileSync)((0, import_path35.join)(rulesDir, file), "utf-8");
         config2.rules.push({
           name: ruleName,
           content
@@ -64294,13 +64519,13 @@ function constructConfigFromClaudeDir(claudeDir) {
       console.warn("Failed to read .claude/rules/:", error3);
     }
   }
-  const hooksDir = (0, import_path34.join)(claudeDir, "hooks");
-  if ((0, import_fs34.existsSync)(hooksDir)) {
+  const hooksDir = (0, import_path35.join)(claudeDir, "hooks");
+  if ((0, import_fs35.existsSync)(hooksDir)) {
     config2.hooks = [];
     try {
-      const hookFiles = (0, import_fs34.readdirSync)(hooksDir).filter((f) => f.endsWith(".js") || f.endsWith(".py") || f.endsWith(".sh"));
+      const hookFiles = (0, import_fs35.readdirSync)(hooksDir).filter((f) => f.endsWith(".js") || f.endsWith(".py") || f.endsWith(".sh"));
       for (const file of hookFiles) {
-        const content = (0, import_fs34.readFileSync)((0, import_path34.join)(hooksDir, file), "utf-8");
+        const content = (0, import_fs35.readFileSync)((0, import_path35.join)(hooksDir, file), "utf-8");
         config2.hooks.push({
           name: file,
           event: "PreToolUse",
@@ -64312,15 +64537,15 @@ function constructConfigFromClaudeDir(claudeDir) {
       console.warn("Failed to read .claude/hooks/:", error3);
     }
   }
-  const agentsDir = (0, import_path34.join)(claudeDir, "agents");
-  if ((0, import_fs34.existsSync)(agentsDir)) {
+  const agentsDir = (0, import_path35.join)(claudeDir, "agents");
+  if ((0, import_fs35.existsSync)(agentsDir)) {
     config2.agents = [];
     try {
       const agentFiles = readDirRecursive(agentsDir, ".md");
       for (const file of agentFiles) {
         const relativePath = file.replace(agentsDir + "/", "");
         const agentName = relativePath.replace(/\.md$/, "").replace(/\//g, ":");
-        const content = (0, import_fs34.readFileSync)(file, "utf-8");
+        const content = (0, import_fs35.readFileSync)(file, "utf-8");
         config2.agents.push({
           name: agentName,
           content
@@ -64339,10 +64564,10 @@ function constructConfigFromClaudeDir(claudeDir) {
 function readDirRecursive(dir, extension) {
   const results = [];
   try {
-    const files = (0, import_fs34.readdirSync)(dir);
+    const files = (0, import_fs35.readdirSync)(dir);
     for (const file of files) {
-      const filePath = (0, import_path34.join)(dir, file);
-      const stat5 = (0, import_fs34.statSync)(filePath);
+      const filePath = (0, import_path35.join)(dir, file);
+      const stat5 = (0, import_fs35.statSync)(filePath);
       if (stat5.isDirectory()) {
         results.push(...readDirRecursive(filePath, extension));
       } else if (file.endsWith(extension)) {
@@ -64353,12 +64578,12 @@ function readDirRecursive(dir, extension) {
   }
   return results;
 }
-var import_fs34, import_path34, import_os24, import_yaml3;
+var import_fs35, import_path35, import_os24, import_yaml3;
 var init_config_reader = __esm({
   "src/utils/config-reader.ts"() {
     "use strict";
-    import_fs34 = require("fs");
-    import_path34 = require("path");
+    import_fs35 = require("fs");
+    import_path35 = require("path");
     import_os24 = require("os");
     init_project_detection();
     import_yaml3 = __toESM(require_dist(), 1);
@@ -64369,11 +64594,11 @@ var init_config_reader = __esm({
 function getGitRepoInfo() {
   try {
     const projectRoot = findProjectRoot();
-    const gitDir = (0, import_path35.join)(projectRoot, ".git");
-    if (!(0, import_fs35.existsSync)(gitDir)) {
+    const gitDir = (0, import_path36.join)(projectRoot, ".git");
+    if (!(0, import_fs36.existsSync)(gitDir)) {
       return { isRepo: false };
     }
-    const remoteUrl = (0, import_child_process11.execSync)("git remote get-url origin", {
+    const remoteUrl = (0, import_child_process12.execSync)("git remote get-url origin", {
       cwd: projectRoot,
       encoding: "utf-8"
     }).trim();
@@ -64503,7 +64728,7 @@ function createProposeCommand() {
   });
   return command;
 }
-var import_fs35, import_path35, import_child_process11;
+var import_fs36, import_path36, import_child_process12;
 var init_propose = __esm({
   "src/commands/propose.ts"() {
     "use strict";
@@ -64514,9 +64739,9 @@ var init_propose = __esm({
     init_CoreServiceProvider();
     init_config_reader();
     init_project_detection();
-    import_fs35 = require("fs");
-    import_path35 = require("path");
-    import_child_process11 = require("child_process");
+    import_fs36 = require("fs");
+    import_path36 = require("path");
+    import_child_process12 = require("child_process");
   }
 });
 
@@ -65200,7 +65425,7 @@ function createAddCommand() {
     let prompt2 = promptArg;
     if (options.promptFile) {
       try {
-        prompt2 = (0, import_fs36.readFileSync)(options.promptFile, "utf-8").trim();
+        prompt2 = (0, import_fs37.readFileSync)(options.promptFile, "utf-8").trim();
       } catch (err) {
         console.error(source_default.red(`Error reading prompt file: ${err instanceof Error ? err.message : String(err)}`));
         process.exit(1);
@@ -65447,14 +65672,14 @@ function createCancelCommand() {
     }
   });
 }
-var import_fs36, defaultApiUrl13, PRIORITY_LABELS, PRIORITY_COLORS, STATUS_COLORS;
+var import_fs37, defaultApiUrl13, PRIORITY_LABELS, PRIORITY_COLORS, STATUS_COLORS;
 var init_queue_mgmt = __esm({
   "src/commands/queue-mgmt.ts"() {
     "use strict";
     init_esm();
     init_source();
     init_ora();
-    import_fs36 = require("fs");
+    import_fs37 = require("fs");
     init_constants();
     init_config_manager();
     init_client();
@@ -65698,11 +65923,11 @@ function createSeedCommand() {
     }
     let template = options.template;
     if (options.templateFile) {
-      if (!(0, import_fs37.existsSync)(options.templateFile)) {
+      if (!(0, import_fs38.existsSync)(options.templateFile)) {
         console.error(source_default.red(`Error: Template file not found: ${options.templateFile}`));
         process.exit(1);
       }
-      template = (0, import_fs37.readFileSync)(options.templateFile, "utf-8").trim();
+      template = (0, import_fs38.readFileSync)(options.templateFile, "utf-8").trim();
     }
     const config2 = ConfigManager.load();
     const apiUrl = config2.apiUrl ?? process.env.GAL_API_URL ?? defaultApiUrl14;
@@ -65718,13 +65943,13 @@ function createSeedCommand() {
     });
     if (options.file) {
       const filePath = options.file;
-      if (!(0, import_fs37.existsSync)(filePath)) {
+      if (!(0, import_fs38.existsSync)(filePath)) {
         console.error(source_default.red(`Error: File not found: ${filePath}`));
         process.exit(1);
       }
       let items = [];
       try {
-        const raw = (0, import_fs37.readFileSync)(filePath, "utf-8");
+        const raw = (0, import_fs38.readFileSync)(filePath, "utf-8");
         const parsed = JSON.parse(raw);
         if (!Array.isArray(parsed)) {
           console.error(source_default.red("Error: JSON file must contain an array of work items."));
@@ -65889,14 +66114,14 @@ function createQueueCommand() {
   cmd.addCommand(createSeedCommand());
   return cmd;
 }
-var import_fs37, defaultApiUrl14, GH_API_BASE, DEFAULT_TEMPLATE_BY_LABEL, DEFAULT_TEMPLATE;
+var import_fs38, defaultApiUrl14, GH_API_BASE, DEFAULT_TEMPLATE_BY_LABEL, DEFAULT_TEMPLATE;
 var init_queue_seed = __esm({
   "src/commands/queue-seed.ts"() {
     "use strict";
     init_esm();
     init_source();
     init_ora();
-    import_fs37 = require("fs");
+    import_fs38 = require("fs");
     init_config_manager();
     init_constants();
     init_client();
@@ -66087,10 +66312,10 @@ function parseFrontmatter(content) {
   };
 }
 function parseCommandFile(filePath) {
-  const content = (0, import_fs38.readFileSync)(filePath, "utf-8");
+  const content = (0, import_fs39.readFileSync)(filePath, "utf-8");
   const { metadata, body } = parseFrontmatter(content);
-  const fileName = (0, import_path36.basename)(filePath);
-  const name = (0, import_path36.basename)(filePath, (0, import_path36.extname)(filePath));
+  const fileName = (0, import_path37.basename)(filePath);
+  const name = (0, import_path37.basename)(filePath, (0, import_path37.extname)(filePath));
   return {
     name,
     fileName,
@@ -66103,10 +66328,10 @@ function parseCommandFile(filePath) {
 function findCommandFiles(dir, recursive = true) {
   const files = [];
   try {
-    const entries = (0, import_fs38.readdirSync)(dir);
+    const entries = (0, import_fs39.readdirSync)(dir);
     for (const entry of entries) {
-      const fullPath = (0, import_path36.join)(dir, entry);
-      const stats = (0, import_fs38.statSync)(fullPath);
+      const fullPath = (0, import_path37.join)(dir, entry);
+      const stats = (0, import_fs39.statSync)(fullPath);
       if (stats.isDirectory()) {
         if (entry.startsWith(".") || entry === "node_modules" || entry === ".templates") {
           continue;
@@ -66181,12 +66406,12 @@ function substituteArguments(commandBody, args2) {
   }
   return result;
 }
-var import_fs38, import_path36;
+var import_fs39, import_path37;
 var init_command_parser = __esm({
   "src/parser/command-parser.ts"() {
     "use strict";
-    import_fs38 = require("fs");
-    import_path36 = require("path");
+    import_fs39 = require("fs");
+    import_path37 = require("path");
   }
 });
 
@@ -66427,12 +66652,12 @@ var init_headless_executor = __esm({
 
 // src/commands/run.ts
 function findCommandsDirectory() {
-  const localCommandsDir = (0, import_path37.join)(process.cwd(), ".claude", "commands");
-  if ((0, import_fs39.existsSync)(localCommandsDir)) {
+  const localCommandsDir = (0, import_path38.join)(process.cwd(), ".claude", "commands");
+  if ((0, import_fs40.existsSync)(localCommandsDir)) {
     return localCommandsDir;
   }
-  const homeCommandsDir = (0, import_path37.join)((0, import_os25.homedir)(), ".claude", "commands");
-  if ((0, import_fs39.existsSync)(homeCommandsDir)) {
+  const homeCommandsDir = (0, import_path38.join)((0, import_os25.homedir)(), ".claude", "commands");
+  if ((0, import_fs40.existsSync)(homeCommandsDir)) {
     return homeCommandsDir;
   }
   return null;
@@ -66520,7 +66745,7 @@ async function handleRunCommand(commandName, args2, options) {
     let commandsDir = options.dir || findCommandsDirectory();
     let command;
     if (options.file) {
-      if (!(0, import_fs39.existsSync)(options.file)) {
+      if (!(0, import_fs40.existsSync)(options.file)) {
         console.error(source_default.red(`Error: Command file not found: ${options.file}`));
         process.exit(1);
       }
@@ -66602,7 +66827,7 @@ Executing command: ${command.name}`));
     throw error3;
   }
 }
-var import_os25, import_path37, import_fs39;
+var import_os25, import_path38, import_fs40;
 var init_run = __esm({
   "src/commands/run.ts"() {
     "use strict";
@@ -66610,8 +66835,8 @@ var init_run = __esm({
     init_source();
     init_ora();
     import_os25 = require("os");
-    import_path37 = require("path");
-    import_fs39 = require("fs");
+    import_path38 = require("path");
+    import_fs40 = require("fs");
     init_command_parser();
     init_headless_executor();
   }
@@ -66619,30 +66844,30 @@ var init_run = __esm({
 
 // src/commands/run-design.ts
 function ensureDir() {
-  if (!(0, import_fs40.existsSync)(DESIGN_PROJECTS_DIR)) {
-    (0, import_fs40.mkdirSync)(DESIGN_PROJECTS_DIR, { recursive: true });
+  if (!(0, import_fs41.existsSync)(DESIGN_PROJECTS_DIR)) {
+    (0, import_fs41.mkdirSync)(DESIGN_PROJECTS_DIR, { recursive: true });
   }
 }
 function projectPath(id) {
-  return (0, import_path38.join)(DESIGN_PROJECTS_DIR, `${id}.json`);
+  return (0, import_path39.join)(DESIGN_PROJECTS_DIR, `${id}.json`);
 }
 function saveProject(project) {
   ensureDir();
-  (0, import_fs40.writeFileSync)(projectPath(project.id), JSON.stringify(project, null, 2));
+  (0, import_fs41.writeFileSync)(projectPath(project.id), JSON.stringify(project, null, 2));
 }
 function loadProject(id) {
   const p = projectPath(id);
-  if (!(0, import_fs40.existsSync)(p)) return null;
+  if (!(0, import_fs41.existsSync)(p)) return null;
   try {
-    return JSON.parse((0, import_fs40.readFileSync)(p, "utf-8"));
+    return JSON.parse((0, import_fs41.readFileSync)(p, "utf-8"));
   } catch {
     return null;
   }
 }
 function getActiveId() {
-  if (!(0, import_fs40.existsSync)(ACTIVE_FILE)) return null;
+  if (!(0, import_fs41.existsSync)(ACTIVE_FILE)) return null;
   try {
-    const data = JSON.parse((0, import_fs40.readFileSync)(ACTIVE_FILE, "utf-8"));
+    const data = JSON.parse((0, import_fs41.readFileSync)(ACTIVE_FILE, "utf-8"));
     return data.id ?? null;
   } catch {
     return null;
@@ -66650,7 +66875,7 @@ function getActiveId() {
 }
 function setActiveId(id) {
   ensureDir();
-  (0, import_fs40.writeFileSync)(ACTIVE_FILE, JSON.stringify({ id }, null, 2));
+  (0, import_fs41.writeFileSync)(ACTIVE_FILE, JSON.stringify({ id }, null, 2));
 }
 function getActiveProject() {
   const id = getActiveId();
@@ -66771,7 +66996,7 @@ function handleStatus(options) {
     project = getActiveProject();
     if (!project) {
       ensureDir();
-      const files = (0, import_fs40.readdirSync)(DESIGN_PROJECTS_DIR).filter(
+      const files = (0, import_fs41.readdirSync)(DESIGN_PROJECTS_DIR).filter(
         (f) => f.endsWith(".json") && f !== "active.json"
       );
       if (files.length === 0) {
@@ -66886,8 +67111,8 @@ function handleSync() {
   const project = getActiveProject();
   if (!project) {
     ensureDir();
-    (0, import_fs40.writeFileSync)(
-      (0, import_path38.join)(DESIGN_PROJECTS_DIR, "extension-sync.json"),
+    (0, import_fs41.writeFileSync)(
+      (0, import_path39.join)(DESIGN_PROJECTS_DIR, "extension-sync.json"),
       JSON.stringify(null, null, 2)
     );
     console.log(source_default.yellow("No active project. Extension card cleared."));
@@ -66904,8 +67129,8 @@ function handleSync() {
     completedScenes: done
   };
   ensureDir();
-  (0, import_fs40.writeFileSync)(
-    (0, import_path38.join)(DESIGN_PROJECTS_DIR, "extension-sync.json"),
+  (0, import_fs41.writeFileSync)(
+    (0, import_path39.join)(DESIGN_PROJECTS_DIR, "extension-sync.json"),
     JSON.stringify(summary, null, 2)
   );
   console.log(source_default.green("\nSynced active project to extension:\n"));
@@ -66949,17 +67174,17 @@ function createRunDesignCommand() {
   runDesign.addCommand(syncCmd);
   return runDesign;
 }
-var import_os26, import_path38, import_fs40, DESIGN_PROJECTS_DIR, ACTIVE_FILE, IMAGE_STATUS_ICON, VIDEO_STATUS_ICON;
+var import_os26, import_path39, import_fs41, DESIGN_PROJECTS_DIR, ACTIVE_FILE, IMAGE_STATUS_ICON, VIDEO_STATUS_ICON;
 var init_run_design = __esm({
   "src/commands/run-design.ts"() {
     "use strict";
     init_esm();
     init_source();
     import_os26 = require("os");
-    import_path38 = require("path");
-    import_fs40 = require("fs");
-    DESIGN_PROJECTS_DIR = (0, import_path38.join)((0, import_os26.homedir)(), ".gal", "design-projects");
-    ACTIVE_FILE = (0, import_path38.join)(DESIGN_PROJECTS_DIR, "active.json");
+    import_path39 = require("path");
+    import_fs41 = require("fs");
+    DESIGN_PROJECTS_DIR = (0, import_path39.join)((0, import_os26.homedir)(), ".gal", "design-projects");
+    ACTIVE_FILE = (0, import_path39.join)(DESIGN_PROJECTS_DIR, "active.json");
     IMAGE_STATUS_ICON = {
       pending: "  ",
       generating: "  ",
@@ -66980,104 +67205,104 @@ var init_run_design = __esm({
 function scanPlatform(rootDir, pattern) {
   const configs = [];
   const platform5 = pattern.platform;
-  const platformDir = (0, import_path39.join)(rootDir, pattern.directory);
+  const platformDir = (0, import_path40.join)(rootDir, pattern.directory);
   if (pattern.settingsFile) {
-    const settingsPath = (0, import_path39.join)(platformDir, pattern.settingsFile);
-    if ((0, import_fs41.existsSync)(settingsPath)) {
+    const settingsPath = (0, import_path40.join)(platformDir, pattern.settingsFile);
+    if ((0, import_fs42.existsSync)(settingsPath)) {
       configs.push({
         platform: platform5,
         type: "settings",
         name: pattern.settingsFile,
         path: settingsPath,
-        relativePath: (0, import_path39.relative)(rootDir, settingsPath),
-        sizeBytes: (0, import_fs41.statSync)(settingsPath).size
+        relativePath: (0, import_path40.relative)(rootDir, settingsPath),
+        sizeBytes: (0, import_fs42.statSync)(settingsPath).size
       });
     }
   }
   if (pattern.configFile) {
-    const configPath = (0, import_path39.join)(platformDir, pattern.configFile);
-    if ((0, import_fs41.existsSync)(configPath)) {
+    const configPath = (0, import_path40.join)(platformDir, pattern.configFile);
+    if ((0, import_fs42.existsSync)(configPath)) {
       configs.push({
         platform: platform5,
         type: "settings",
         name: pattern.configFile,
         path: configPath,
-        relativePath: (0, import_path39.relative)(rootDir, configPath),
-        sizeBytes: (0, import_fs41.statSync)(configPath).size
+        relativePath: (0, import_path40.relative)(rootDir, configPath),
+        sizeBytes: (0, import_fs42.statSync)(configPath).size
       });
     }
   }
   if (pattern.rulesDir) {
-    const rulesDir = (0, import_path39.join)(platformDir, pattern.rulesDir);
-    if ((0, import_fs41.existsSync)(rulesDir) && (0, import_fs41.statSync)(rulesDir).isDirectory()) {
+    const rulesDir = (0, import_path40.join)(platformDir, pattern.rulesDir);
+    if ((0, import_fs42.existsSync)(rulesDir) && (0, import_fs42.statSync)(rulesDir).isDirectory()) {
       scanDir(rulesDir, rootDir, platform5, "rules", pattern.ruleExtensions, configs);
     }
   }
   if (pattern.rulesFile) {
-    const rulesPath = (0, import_path39.join)(platformDir, pattern.rulesFile);
-    if ((0, import_fs41.existsSync)(rulesPath)) {
+    const rulesPath = (0, import_path40.join)(platformDir, pattern.rulesFile);
+    if ((0, import_fs42.existsSync)(rulesPath)) {
       configs.push({
         platform: platform5,
         type: "rules",
         name: pattern.rulesFile,
         path: rulesPath,
-        relativePath: (0, import_path39.relative)(rootDir, rulesPath),
-        sizeBytes: (0, import_fs41.statSync)(rulesPath).size
+        relativePath: (0, import_path40.relative)(rootDir, rulesPath),
+        sizeBytes: (0, import_fs42.statSync)(rulesPath).size
       });
     }
   }
   if (pattern.commandsDir) {
-    const commandsDir = (0, import_path39.join)(platformDir, pattern.commandsDir);
-    if ((0, import_fs41.existsSync)(commandsDir) && (0, import_fs41.statSync)(commandsDir).isDirectory()) {
+    const commandsDir = (0, import_path40.join)(platformDir, pattern.commandsDir);
+    if ((0, import_fs42.existsSync)(commandsDir) && (0, import_fs42.statSync)(commandsDir).isDirectory()) {
       scanDir(commandsDir, rootDir, platform5, "commands", [".md", ".toml"], configs);
     }
   }
   if (pattern.hooksDir) {
-    const hooksDir = (0, import_path39.join)(platformDir, pattern.hooksDir);
-    if ((0, import_fs41.existsSync)(hooksDir) && (0, import_fs41.statSync)(hooksDir).isDirectory()) {
+    const hooksDir = (0, import_path40.join)(platformDir, pattern.hooksDir);
+    if ((0, import_fs42.existsSync)(hooksDir) && (0, import_fs42.statSync)(hooksDir).isDirectory()) {
       scanDir(hooksDir, rootDir, platform5, "hooks", [".md", ".json", ".sh", ".ts", ".js"], configs);
     }
   }
   if (pattern.hooksConfigFile) {
-    const hooksConfigPath = (0, import_path39.join)(platformDir, pattern.hooksConfigFile);
-    if ((0, import_fs41.existsSync)(hooksConfigPath)) {
+    const hooksConfigPath = (0, import_path40.join)(platformDir, pattern.hooksConfigFile);
+    if ((0, import_fs42.existsSync)(hooksConfigPath)) {
       configs.push({
         platform: platform5,
         type: "hooks",
         name: pattern.hooksConfigFile,
         path: hooksConfigPath,
-        relativePath: (0, import_path39.relative)(rootDir, hooksConfigPath),
-        sizeBytes: (0, import_fs41.statSync)(hooksConfigPath).size
+        relativePath: (0, import_path40.relative)(rootDir, hooksConfigPath),
+        sizeBytes: (0, import_fs42.statSync)(hooksConfigPath).size
       });
     }
   }
   if (pattern.agentsDir) {
-    const agentsDir = (0, import_path39.join)(platformDir, pattern.agentsDir);
-    if ((0, import_fs41.existsSync)(agentsDir) && (0, import_fs41.statSync)(agentsDir).isDirectory()) {
+    const agentsDir = (0, import_path40.join)(platformDir, pattern.agentsDir);
+    if ((0, import_fs42.existsSync)(agentsDir) && (0, import_fs42.statSync)(agentsDir).isDirectory()) {
       scanDir(agentsDir, rootDir, platform5, "agents", [".md", ".toml", ".agent.md"], configs);
     }
   }
   if (pattern.skillsDir) {
-    const skillsDir = (0, import_path39.join)(platformDir, pattern.skillsDir);
-    if ((0, import_fs41.existsSync)(skillsDir) && (0, import_fs41.statSync)(skillsDir).isDirectory()) {
+    const skillsDir = (0, import_path40.join)(platformDir, pattern.skillsDir);
+    if ((0, import_fs42.existsSync)(skillsDir) && (0, import_fs42.statSync)(skillsDir).isDirectory()) {
       scanDir(skillsDir, rootDir, platform5, "skills", [".md"], configs);
     }
   }
   if (pattern.policiesDir) {
-    const policiesDir = (0, import_path39.join)(platformDir, pattern.policiesDir);
-    if ((0, import_fs41.existsSync)(policiesDir) && (0, import_fs41.statSync)(policiesDir).isDirectory()) {
+    const policiesDir = (0, import_path40.join)(platformDir, pattern.policiesDir);
+    if ((0, import_fs42.existsSync)(policiesDir) && (0, import_fs42.statSync)(policiesDir).isDirectory()) {
       scanDir(policiesDir, rootDir, platform5, "policies", [".toml", ".md"], configs);
     }
   }
   if (pattern.workflowsDir) {
-    const workflowsDir = (0, import_path39.join)(platformDir, pattern.workflowsDir);
-    if ((0, import_fs41.existsSync)(workflowsDir) && (0, import_fs41.statSync)(workflowsDir).isDirectory()) {
+    const workflowsDir = (0, import_path40.join)(platformDir, pattern.workflowsDir);
+    if ((0, import_fs42.existsSync)(workflowsDir) && (0, import_fs42.statSync)(workflowsDir).isDirectory()) {
       scanDir(workflowsDir, rootDir, platform5, "workflows", [".md"], configs);
     }
   }
   if (pattern.promptsDir) {
-    const promptsDir = (0, import_path39.join)(platformDir, pattern.promptsDir);
-    if ((0, import_fs41.existsSync)(promptsDir) && (0, import_fs41.statSync)(promptsDir).isDirectory()) {
+    const promptsDir = (0, import_path40.join)(platformDir, pattern.promptsDir);
+    if ((0, import_fs42.existsSync)(promptsDir) && (0, import_fs42.statSync)(promptsDir).isDirectory()) {
       scanDir(promptsDir, rootDir, platform5, "prompts", [".prompt.md", ".md"], configs);
     }
   }
@@ -67096,59 +67321,59 @@ function scanPlatform(rootDir, pattern) {
   for (const { key, type } of rootInstructionFiles) {
     const fileName = pattern[key];
     if (fileName) {
-      const rootPath = (0, import_path39.join)(rootDir, fileName);
-      const platformPath = (0, import_path39.join)(platformDir, fileName);
-      if ((0, import_fs41.existsSync)(rootPath)) {
+      const rootPath = (0, import_path40.join)(rootDir, fileName);
+      const platformPath = (0, import_path40.join)(platformDir, fileName);
+      if ((0, import_fs42.existsSync)(rootPath)) {
         configs.push({
           platform: platform5,
           type,
           name: fileName,
           path: rootPath,
-          relativePath: (0, import_path39.relative)(rootDir, rootPath),
-          sizeBytes: (0, import_fs41.statSync)(rootPath).size
+          relativePath: (0, import_path40.relative)(rootDir, rootPath),
+          sizeBytes: (0, import_fs42.statSync)(rootPath).size
         });
-      } else if ((0, import_fs41.existsSync)(platformPath) && platformPath !== rootPath) {
+      } else if ((0, import_fs42.existsSync)(platformPath) && platformPath !== rootPath) {
         configs.push({
           platform: platform5,
           type,
           name: fileName,
           path: platformPath,
-          relativePath: (0, import_path39.relative)(rootDir, platformPath),
-          sizeBytes: (0, import_fs41.statSync)(platformPath).size
+          relativePath: (0, import_path40.relative)(rootDir, platformPath),
+          sizeBytes: (0, import_fs42.statSync)(platformPath).size
         });
       }
     }
   }
   if (pattern.mcpFile) {
-    const mcpPath = (0, import_path39.join)(rootDir, pattern.mcpFile);
-    if ((0, import_fs41.existsSync)(mcpPath)) {
+    const mcpPath = (0, import_path40.join)(rootDir, pattern.mcpFile);
+    if ((0, import_fs42.existsSync)(mcpPath)) {
       configs.push({
         platform: platform5,
         type: "mcp",
         name: pattern.mcpFile,
         path: mcpPath,
-        relativePath: (0, import_path39.relative)(rootDir, mcpPath),
-        sizeBytes: (0, import_fs41.statSync)(mcpPath).size
+        relativePath: (0, import_path40.relative)(rootDir, mcpPath),
+        sizeBytes: (0, import_fs42.statSync)(mcpPath).size
       });
     }
   }
   if (pattern.memoryDir) {
-    const memDir = (0, import_path39.join)(platformDir, pattern.memoryDir);
-    if ((0, import_fs41.existsSync)(memDir) && (0, import_fs41.statSync)(memDir).isDirectory()) {
+    const memDir = (0, import_path40.join)(platformDir, pattern.memoryDir);
+    if ((0, import_fs42.existsSync)(memDir) && (0, import_fs42.statSync)(memDir).isDirectory()) {
       const exts = pattern.memoryExtensions || [".md"];
       scanDir(memDir, rootDir, platform5, "memory", exts, configs);
     }
   }
   if (pattern.cliConfigFile) {
-    const cliPath = (0, import_path39.join)(platformDir, pattern.cliConfigFile);
-    if ((0, import_fs41.existsSync)(cliPath)) {
+    const cliPath = (0, import_path40.join)(platformDir, pattern.cliConfigFile);
+    if ((0, import_fs42.existsSync)(cliPath)) {
       configs.push({
         platform: platform5,
         type: "settings",
         name: pattern.cliConfigFile,
         path: cliPath,
-        relativePath: (0, import_path39.relative)(rootDir, cliPath),
-        sizeBytes: (0, import_fs41.statSync)(cliPath).size
+        relativePath: (0, import_path40.relative)(rootDir, cliPath),
+        sizeBytes: (0, import_fs42.statSync)(cliPath).size
       });
     }
   }
@@ -67156,9 +67381,9 @@ function scanPlatform(rootDir, pattern) {
 }
 function scanDir(dir, rootDir, platform5, type, extensions, configs) {
   try {
-    const entries = (0, import_fs41.readdirSync)(dir, { withFileTypes: true });
+    const entries = (0, import_fs42.readdirSync)(dir, { withFileTypes: true });
     for (const entry of entries) {
-      const fullPath = (0, import_path39.join)(dir, entry.name);
+      const fullPath = (0, import_path40.join)(dir, entry.name);
       if (entry.isDirectory()) {
         scanDir(fullPath, rootDir, platform5, type, extensions, configs);
       } else if (entry.isFile()) {
@@ -67169,8 +67394,8 @@ function scanDir(dir, rootDir, platform5, type, extensions, configs) {
             type,
             name: entry.name,
             path: fullPath,
-            relativePath: (0, import_path39.relative)(rootDir, fullPath),
-            sizeBytes: (0, import_fs41.statSync)(fullPath).size
+            relativePath: (0, import_path40.relative)(rootDir, fullPath),
+            sizeBytes: (0, import_fs42.statSync)(fullPath).size
           });
         }
       }
@@ -67187,7 +67412,7 @@ function createScanCommand() {
   const command = new Command("scan");
   command.description("Scan local directory for AI agent configurations (no auth required)").option("--path <path>", "Directory to scan (default: current directory or project root)").option("-p, --platform <platform>", `Filter by platform (${ALL_PLATFORM_IDS.join(", ")})`).option("--format <format>", "Output format: table (default) or json", "table").option("-r, --recursive", "Scan subdirectories for additional projects").option("--include-global", "Include global/home-directory memory locations").action(async (options) => {
     const targetDir = options.path ? options.path : findProjectRoot(process.cwd());
-    if (!(0, import_fs41.existsSync)(targetDir)) {
+    if (!(0, import_fs42.existsSync)(targetDir)) {
       console.error(source_default.red(`Directory not found: ${targetDir}`));
       process.exit(1);
     }
@@ -67222,8 +67447,8 @@ function createScanCommand() {
       for (const loc of GLOBAL_MEMORY_LOCATIONS) {
         if (platformFilter && loc.platform !== platformFilter) continue;
         for (const relPath of loc.paths) {
-          const globalDir = (0, import_path39.join)(home, relPath);
-          if (!(0, import_fs41.existsSync)(globalDir) || !(0, import_fs41.statSync)(globalDir).isDirectory()) continue;
+          const globalDir = (0, import_path40.join)(home, relPath);
+          if (!(0, import_fs42.existsSync)(globalDir) || !(0, import_fs42.statSync)(globalDir).isDirectory()) continue;
           const globalConfigs = [];
           scanDir(globalDir, home, loc.platform, "memory", loc.extensions, globalConfigs);
           if (globalConfigs.length > 0) {
@@ -67299,14 +67524,14 @@ function createScanCommand() {
   });
   return command;
 }
-var import_fs41, import_path39, import_os27, GLOBAL_MEMORY_LOCATIONS, PLATFORM_LABELS, PLATFORM_COLORS;
+var import_fs42, import_path40, import_os27, GLOBAL_MEMORY_LOCATIONS, PLATFORM_LABELS, PLATFORM_COLORS;
 var init_scan = __esm({
   "src/commands/scan.ts"() {
     "use strict";
     init_esm();
     init_source();
-    import_fs41 = require("fs");
-    import_path39 = require("path");
+    import_fs42 = require("fs");
+    import_path40 = require("path");
     import_os27 = require("os");
     init_dist2();
     init_project_detection();
@@ -67979,8 +68204,8 @@ function createSandboxCommand() {
   return sandboxCmd;
 }
 async function validateConfigFile(sandbox, options) {
-  const configPath = import_path40.default.resolve(options.config);
-  const fileName = import_path40.default.basename(configPath);
+  const configPath = import_path41.default.resolve(options.config);
+  const fileName = import_path41.default.basename(configPath);
   const spinner = ora(`Loading configuration: ${fileName}`).start();
   try {
     const configContent = await import_promises8.default.readFile(configPath, "utf-8");
@@ -68095,7 +68320,7 @@ async function startInteractiveSession(sandbox) {
     rl.on("close", resolve11);
   });
 }
-var import_promises8, import_path40;
+var import_promises8, import_path41;
 var init_sandbox = __esm({
   "src/commands/sandbox.ts"() {
     "use strict";
@@ -68104,7 +68329,7 @@ var init_sandbox = __esm({
     init_ora();
     init_e2b_sandbox();
     import_promises8 = __toESM(require("fs/promises"), 1);
-    import_path40 = __toESM(require("path"), 1);
+    import_path41 = __toESM(require("path"), 1);
   }
 });
 
@@ -68113,7 +68338,7 @@ function isTestFile(filename) {
   return /\.(test|spec)\.(ts|tsx|js|jsx)$/.test(filename);
 }
 function isImplFile(filename) {
-  const ext = (0, import_path41.extname)(filename);
+  const ext = (0, import_path42.extname)(filename);
   if (!IMPL_EXTENSIONS.has(ext)) return false;
   if (isTestFile(filename)) return false;
   if (IGNORE_FILES.has(filename)) return false;
@@ -68128,16 +68353,16 @@ function scanDirectory(dir, maxDepth = 6) {
     if (depth > maxDepth) return;
     let entries;
     try {
-      entries = (0, import_fs42.readdirSync)(currentDir);
+      entries = (0, import_fs43.readdirSync)(currentDir);
     } catch {
       return;
     }
     for (const entry of entries) {
       if (IGNORE_DIRS.has(entry)) continue;
-      const fullPath = (0, import_path41.join)(currentDir, entry);
+      const fullPath = (0, import_path42.join)(currentDir, entry);
       let stat5;
       try {
-        stat5 = (0, import_fs42.statSync)(fullPath);
+        stat5 = (0, import_fs43.statSync)(fullPath);
       } catch {
         continue;
       }
@@ -68147,7 +68372,7 @@ function scanDirectory(dir, maxDepth = 6) {
         }
         walk(fullPath, depth + 1);
       } else if (stat5.isFile()) {
-        const relPath = (0, import_path41.relative)(dir, fullPath);
+        const relPath = (0, import_path42.relative)(dir, fullPath);
         if (isTestFile(entry)) {
           testFiles.push(relPath);
         } else if (isImplFile(entry)) {
@@ -68167,15 +68392,15 @@ function findSpecFiles(dir) {
     if (depth > 4) return;
     let entries;
     try {
-      entries = (0, import_fs42.readdirSync)(currentDir);
+      entries = (0, import_fs43.readdirSync)(currentDir);
     } catch {
       return;
     }
     for (const entry of entries) {
-      const fullPath = (0, import_path41.join)(currentDir, entry);
+      const fullPath = (0, import_path42.join)(currentDir, entry);
       let stat5;
       try {
-        stat5 = (0, import_fs42.statSync)(fullPath);
+        stat5 = (0, import_fs43.statSync)(fullPath);
       } catch {
         continue;
       }
@@ -68191,10 +68416,10 @@ function findSpecFiles(dir) {
 }
 function findImplFilesWithoutTests(implFiles, testFiles) {
   const testBasenames = new Set(
-    testFiles.map((f) => (0, import_path41.basename)(f).replace(/\.(test|spec)\.(ts|tsx|js|jsx)$/, ""))
+    testFiles.map((f) => (0, import_path42.basename)(f).replace(/\.(test|spec)\.(ts|tsx|js|jsx)$/, ""))
   );
   return implFiles.filter((f) => {
-    const base = (0, import_path41.basename)(f).replace(/\.(ts|tsx|js|jsx)$/, "");
+    const base = (0, import_path42.basename)(f).replace(/\.(ts|tsx|js|jsx)$/, "");
     return !testBasenames.has(base);
   });
 }
@@ -68224,8 +68449,8 @@ function runChecks(basePath) {
   const weight2 = 25;
   maxScore += weight2;
   const hasSpecs = specFiles.length > 0;
-  const hasClaudeDir = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".claude"));
-  const hasSpecsDir = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "specs"));
+  const hasClaudeDir = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".claude"));
+  const hasSpecsDir = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "specs"));
   let specScore = 0;
   if (hasSpecs) specScore += 15;
   if (hasClaudeDir) specScore += 5;
@@ -68244,8 +68469,8 @@ function runChecks(basePath) {
   }
   const weight3 = 15;
   maxScore += weight3;
-  const hasClaudeMd = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "CLAUDE.md"));
-  const hasClaudeSettings = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".claude", "settings.json"));
+  const hasClaudeMd = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "CLAUDE.md"));
+  const hasClaudeSettings = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".claude", "settings.json"));
   let claudeScore = 0;
   if (hasClaudeMd) claudeScore += 10;
   if (hasClaudeSettings) claudeScore += 5;
@@ -68263,9 +68488,9 @@ function runChecks(basePath) {
   }
   const weight4 = 15;
   maxScore += weight4;
-  const hasPackageJson = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "package.json"));
-  const hasReadme = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "README.md"));
-  const hasTsConfig = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "tsconfig.json"));
+  const hasPackageJson = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "package.json"));
+  const hasReadme = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "README.md"));
+  const hasTsConfig = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "tsconfig.json"));
   let structureScore = 0;
   if (hasPackageJson) structureScore += 5;
   if (hasReadme) structureScore += 5;
@@ -68285,9 +68510,9 @@ function runChecks(basePath) {
   });
   const weight5 = 15;
   maxScore += weight5;
-  const hasGitDir = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".git"));
-  const hasGithubDir = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".github"));
-  const hasWorkflows = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".github", "workflows"));
+  const hasGitDir = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".git"));
+  const hasGithubDir = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".github"));
+  const hasWorkflows = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".github", "workflows"));
   let gitScore = 0;
   if (hasGitDir) gitScore += 5;
   if (hasGithubDir) gitScore += 5;
@@ -68420,7 +68645,7 @@ function createSdlcCommand() {
       }
       let branchName;
       try {
-        branchName = (0, import_child_process12.execSync)("git branch --show-current", { encoding: "utf-8" }).trim();
+        branchName = (0, import_child_process13.execSync)("git branch --show-current", { encoding: "utf-8" }).trim();
       } catch {
         console.error(source_default.red("\n  Not inside a git repository.\n"));
         process.exit(1);
@@ -68523,7 +68748,7 @@ function createSdlcCommand() {
       }
       let branchName;
       try {
-        branchName = (0, import_child_process12.execSync)("git branch --show-current", { encoding: "utf-8" }).trim();
+        branchName = (0, import_child_process13.execSync)("git branch --show-current", { encoding: "utf-8" }).trim();
       } catch {
         console.error(source_default.red("\n  Not inside a git repository.\n"));
         process.exit(1);
@@ -68614,7 +68839,7 @@ function createSdlcCommand() {
     try {
       let branchName;
       try {
-        branchName = (0, import_child_process12.execSync)("git branch --show-current", { encoding: "utf-8" }).trim();
+        branchName = (0, import_child_process13.execSync)("git branch --show-current", { encoding: "utf-8" }).trim();
       } catch {
         console.error(source_default.red("\n  Not inside a git repository.\n"));
         process.exit(1);
@@ -68626,8 +68851,8 @@ function createSdlcCommand() {
       spinner.start("Scanning git history and local artifacts...");
       const basePath = process.cwd();
       const SDLC_PHASES_ORDERED = ["specify", "design", "test", "implement", "deploy-verify", "review", "merge"];
-      const hasSpec = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "spec.md")) || (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "specs")) || (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".claude", "spec.md"));
-      const hasPlan = (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "plan.md")) || (0, import_fs42.existsSync)((0, import_path41.join)(basePath, ".claude", "plan.md")) || (0, import_fs42.existsSync)((0, import_path41.join)(basePath, "tasks.md"));
+      const hasSpec = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "spec.md")) || (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "specs")) || (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".claude", "spec.md"));
+      const hasPlan = (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "plan.md")) || (0, import_fs43.existsSync)((0, import_path42.join)(basePath, ".claude", "plan.md")) || (0, import_fs43.existsSync)((0, import_path42.join)(basePath, "tasks.md"));
       const scanResult = scanDirectory(basePath);
       const hasTests = scanResult.testFiles.length > 0;
       const hasImpl = scanResult.implFiles.length > 0;
@@ -68638,7 +68863,7 @@ function createSdlcCommand() {
       const now = (/* @__PURE__ */ new Date()).toISOString();
       let firstCommitDate = now;
       try {
-        firstCommitDate = (0, import_child_process12.execSync)(
+        firstCommitDate = (0, import_child_process13.execSync)(
           `git log --reverse --format=%aI origin/main..HEAD 2>/dev/null | head -1`,
           { encoding: "utf-8" }
         ).trim() || now;
@@ -68770,16 +68995,16 @@ function createSdlcCommand() {
   });
   return cmd;
 }
-var import_fs42, import_path41, import_child_process12, IMPL_EXTENSIONS, IGNORE_DIRS, IGNORE_FILES;
+var import_fs43, import_path42, import_child_process13, IMPL_EXTENSIONS, IGNORE_DIRS, IGNORE_FILES;
 var init_sdlc = __esm({
   "src/commands/sdlc.ts"() {
     "use strict";
     init_esm();
     init_source();
     init_ora();
-    import_fs42 = require("fs");
-    import_path41 = require("path");
-    import_child_process12 = require("child_process");
+    import_fs43 = require("fs");
+    import_path42 = require("path");
+    import_child_process13 = require("child_process");
     init_config_manager();
     IMPL_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx"]);
     IGNORE_DIRS = /* @__PURE__ */ new Set([
@@ -68897,10 +69122,10 @@ var init_security = __esm({
 
 // src/commands/status.ts
 function readTermsAcceptance() {
-  const configFile = (0, import_path42.join)((0, import_os28.homedir)(), ".gal", "config.json");
+  const configFile = (0, import_path43.join)((0, import_os28.homedir)(), ".gal", "config.json");
   try {
-    if ((0, import_fs43.existsSync)(configFile)) {
-      const raw = JSON.parse((0, import_fs43.readFileSync)(configFile, "utf-8"));
+    if ((0, import_fs44.existsSync)(configFile)) {
+      const raw = JSON.parse((0, import_fs44.readFileSync)(configFile, "utf-8"));
       if (typeof raw.termsAcceptedAt === "string" && raw.termsAcceptedAt.length > 0) {
         return { accepted: true, acceptedAt: raw.termsAcceptedAt };
       }
@@ -69103,7 +69328,7 @@ function displayStatusJson(result, health) {
 }
 function isRateLimited(projectId) {
   try {
-    const raw = (0, import_fs43.readFileSync)(DRIFT_REPORT_CACHE_PATH, "utf-8");
+    const raw = (0, import_fs44.readFileSync)(DRIFT_REPORT_CACHE_PATH, "utf-8");
     const cache = JSON.parse(raw);
     const lastReport = cache[projectId];
     if (lastReport && Date.now() - lastReport < RATE_LIMIT_MS) {
@@ -69117,13 +69342,13 @@ function recordReport(projectId) {
   try {
     let cache = {};
     try {
-      const raw = (0, import_fs43.readFileSync)(DRIFT_REPORT_CACHE_PATH, "utf-8");
+      const raw = (0, import_fs44.readFileSync)(DRIFT_REPORT_CACHE_PATH, "utf-8");
       cache = JSON.parse(raw);
     } catch {
     }
     cache[projectId] = Date.now();
-    (0, import_fs43.mkdirSync)((0, import_path42.join)((0, import_os28.homedir)(), ".gal"), { recursive: true });
-    (0, import_fs43.writeFileSync)(DRIFT_REPORT_CACHE_PATH, JSON.stringify(cache));
+    (0, import_fs44.mkdirSync)((0, import_path43.join)((0, import_os28.homedir)(), ".gal"), { recursive: true });
+    (0, import_fs44.writeFileSync)(DRIFT_REPORT_CACHE_PATH, JSON.stringify(cache));
   } catch {
   }
 }
@@ -69269,16 +69494,16 @@ function createStatusCommand3() {
   });
   return command;
 }
-var import_path42, import_os28, import_fs43, cliVersion6, defaultApiUrl17, PLATFORM_LABELS2, RATE_LIMIT_MS, DRIFT_REPORT_CACHE_PATH;
+var import_path43, import_os28, import_fs44, cliVersion6, defaultApiUrl17, PLATFORM_LABELS2, RATE_LIMIT_MS, DRIFT_REPORT_CACHE_PATH;
 var init_status = __esm({
   "src/commands/status.ts"() {
     "use strict";
     init_esm();
     init_source();
     init_ora();
-    import_path42 = require("path");
+    import_path43 = require("path");
     import_os28 = require("os");
-    import_fs43 = require("fs");
+    import_fs44 = require("fs");
     init_gal_config_service();
     init_config_manager();
     init_CoreServiceProvider();
@@ -69295,7 +69520,7 @@ var init_status = __esm({
       ])
     );
     RATE_LIMIT_MS = 5 * 60 * 1e3;
-    DRIFT_REPORT_CACHE_PATH = (0, import_path42.join)((0, import_os28.homedir)(), ".gal", "drift-report-cache.json");
+    DRIFT_REPORT_CACHE_PATH = (0, import_path43.join)((0, import_os28.homedir)(), ".gal", "drift-report-cache.json");
   }
 });
 
@@ -70623,13 +70848,13 @@ function getGitHookManager() {
   }
   return defaultManager;
 }
-var import_child_process13, import_fs44, import_path43, DEFAULT_GIT_HOOK_CONFIG, GitHookManager, defaultManager;
+var import_child_process14, import_fs45, import_path44, DEFAULT_GIT_HOOK_CONFIG, GitHookManager, defaultManager;
 var init_git_hooks = __esm({
   "src/triggers/git-hooks.ts"() {
     "use strict";
-    import_child_process13 = require("child_process");
-    import_fs44 = require("fs");
-    import_path43 = require("path");
+    import_child_process14 = require("child_process");
+    import_fs45 = require("fs");
+    import_path44 = require("path");
     init_source();
     init_triggers();
     DEFAULT_GIT_HOOK_CONFIG = {
@@ -70672,12 +70897,12 @@ var init_git_hooks = __esm({
         if (this.gitDir) return this.gitDir;
         let currentPath = startPath;
         while (currentPath !== "/") {
-          const gitPath = (0, import_path43.join)(currentPath, ".git");
-          if ((0, import_fs44.existsSync)(gitPath)) {
+          const gitPath = (0, import_path44.join)(currentPath, ".git");
+          if ((0, import_fs45.existsSync)(gitPath)) {
             this.gitDir = gitPath;
             return gitPath;
           }
-          currentPath = (0, import_path43.dirname)(currentPath);
+          currentPath = (0, import_path44.dirname)(currentPath);
         }
         return null;
       }
@@ -70699,29 +70924,29 @@ var init_git_hooks = __esm({
             ]
           };
         }
-        const hooksDir = (0, import_path43.join)(gitDir, "hooks");
-        if (!(0, import_fs44.existsSync)(hooksDir)) {
-          (0, import_fs44.mkdirSync)(hooksDir, { recursive: true });
+        const hooksDir = (0, import_path44.join)(gitDir, "hooks");
+        if (!(0, import_fs45.existsSync)(hooksDir)) {
+          (0, import_fs45.mkdirSync)(hooksDir, { recursive: true });
         }
         const installed = [];
         const skipped = [];
         const warnings = [];
         for (const hookType of this.config.hooks) {
-          const hookPath = (0, import_path43.join)(hooksDir, hookType);
+          const hookPath = (0, import_path44.join)(hooksDir, hookType);
           const hookScript = this.generateHookScript(hookType);
-          if ((0, import_fs44.existsSync)(hookPath)) {
-            const existing = (0, import_fs44.readFileSync)(hookPath, "utf-8");
+          if ((0, import_fs45.existsSync)(hookPath)) {
+            const existing = (0, import_fs45.readFileSync)(hookPath, "utf-8");
             if (existing.includes("GAL_HOOK_MARKER")) {
-              (0, import_fs44.writeFileSync)(hookPath, hookScript);
-              (0, import_fs44.chmodSync)(hookPath, "755");
+              (0, import_fs45.writeFileSync)(hookPath, hookScript);
+              (0, import_fs45.chmodSync)(hookPath, "755");
               installed.push(hookType);
             } else {
               console.log(source_default.yellow(`Skipping ${hookType}: existing hook found`));
               skipped.push(hookType);
             }
           } else {
-            (0, import_fs44.writeFileSync)(hookPath, hookScript);
-            (0, import_fs44.chmodSync)(hookPath, "755");
+            (0, import_fs45.writeFileSync)(hookPath, hookScript);
+            (0, import_fs45.chmodSync)(hookPath, "755");
             installed.push(hookType);
           }
         }
@@ -70738,12 +70963,12 @@ var init_git_hooks = __esm({
         if (!gitDir) {
           return [];
         }
-        const hooksDir = (0, import_path43.join)(gitDir, "hooks");
+        const hooksDir = (0, import_path44.join)(gitDir, "hooks");
         const removed = [];
         for (const hookType of this.config.hooks) {
-          const hookPath = (0, import_path43.join)(hooksDir, hookType);
-          if ((0, import_fs44.existsSync)(hookPath)) {
-            const content = (0, import_fs44.readFileSync)(hookPath, "utf-8");
+          const hookPath = (0, import_path44.join)(hooksDir, hookType);
+          if ((0, import_fs45.existsSync)(hookPath)) {
+            const content = (0, import_fs45.readFileSync)(hookPath, "utf-8");
             if (content.includes("GAL_HOOK_MARKER")) {
               const { unlinkSync: unlinkSync9 } = require("fs");
               unlinkSync9(hookPath);
@@ -70813,15 +71038,15 @@ exit 0
           hookType
         };
         try {
-          payload.branch = (0, import_child_process13.execSync)("git rev-parse --abbrev-ref HEAD", { encoding: "utf-8" }).trim();
+          payload.branch = (0, import_child_process14.execSync)("git rev-parse --abbrev-ref HEAD", { encoding: "utf-8" }).trim();
           if (hookType === "pre-commit" && this.config.scanStagedOnly) {
-            const stagedFiles = (0, import_child_process13.execSync)("git diff --cached --name-only", { encoding: "utf-8" });
+            const stagedFiles = (0, import_child_process14.execSync)("git diff --cached --name-only", { encoding: "utf-8" });
             payload.files = stagedFiles.split("\n").filter((f) => f.trim());
           }
           if (hookType === "post-commit" || hookType === "commit-msg") {
-            payload.commit = (0, import_child_process13.execSync)("git rev-parse HEAD", { encoding: "utf-8" }).trim();
-            payload.message = (0, import_child_process13.execSync)("git log -1 --pretty=%B", { encoding: "utf-8" }).trim();
-            payload.author = (0, import_child_process13.execSync)("git log -1 --pretty=%an", { encoding: "utf-8" }).trim();
+            payload.commit = (0, import_child_process14.execSync)("git rev-parse HEAD", { encoding: "utf-8" }).trim();
+            payload.message = (0, import_child_process14.execSync)("git log -1 --pretty=%B", { encoding: "utf-8" }).trim();
+            payload.author = (0, import_child_process14.execSync)("git log -1 --pretty=%an", { encoding: "utf-8" }).trim();
           }
         } catch {
         }
@@ -70893,7 +71118,7 @@ exit 0
         const findings = [];
         for (const file of files) {
           try {
-            const content = (0, import_child_process13.execSync)(`git show :${file}`, { encoding: "utf-8" });
+            const content = (0, import_child_process14.execSync)(`git show :${file}`, { encoding: "utf-8" });
             for (const { pattern, severity } of securityPatterns) {
               if (pattern.test(content)) {
                 findings.push({ file, pattern: pattern.source, severity });
@@ -70966,13 +71191,13 @@ exit 0
         if (!gitDir) {
           return { installed: [], missing: this.config.hooks };
         }
-        const hooksDir = (0, import_path43.join)(gitDir, "hooks");
+        const hooksDir = (0, import_path44.join)(gitDir, "hooks");
         const installed = [];
         const missing = [];
         for (const hookType of this.config.hooks) {
-          const hookPath = (0, import_path43.join)(hooksDir, hookType);
-          if ((0, import_fs44.existsSync)(hookPath)) {
-            const content = (0, import_fs44.readFileSync)(hookPath, "utf-8");
+          const hookPath = (0, import_path44.join)(hooksDir, hookType);
+          if ((0, import_fs45.existsSync)(hookPath)) {
+            const content = (0, import_fs45.readFileSync)(hookPath, "utf-8");
             if (content.includes("GAL_HOOK_MARKER")) {
               installed.push(hookType);
             } else {
@@ -70996,12 +71221,12 @@ function getFileWatcher() {
   }
   return defaultWatcher;
 }
-var import_fs45, import_path44, DEFAULT_FILE_WATCHER_CONFIG, AGENT_CONFIG_PATTERNS, FileWatcher, defaultWatcher;
+var import_fs46, import_path45, DEFAULT_FILE_WATCHER_CONFIG, AGENT_CONFIG_PATTERNS, FileWatcher, defaultWatcher;
 var init_file_watcher = __esm({
   "src/triggers/file-watcher.ts"() {
     "use strict";
-    import_fs45 = require("fs");
-    import_path44 = require("path");
+    import_fs46 = require("fs");
+    import_path45 = require("path");
     init_source();
     init_triggers();
     DEFAULT_FILE_WATCHER_CONFIG = {
@@ -71057,13 +71282,13 @@ var init_file_watcher = __esm({
         const watching = [];
         const notFound = [];
         for (const watchPath of this.config.watchPaths) {
-          const fullPath = (0, import_path44.join)(basePath, watchPath);
-          if (!(0, import_fs45.existsSync)(fullPath)) {
+          const fullPath = (0, import_path45.join)(basePath, watchPath);
+          if (!(0, import_fs46.existsSync)(fullPath)) {
             notFound.push(watchPath);
             continue;
           }
           try {
-            const watcher = (0, import_fs45.watch)(
+            const watcher = (0, import_fs46.watch)(
               fullPath,
               { recursive: this.config.recursive },
               (eventType, filename) => {
@@ -71110,7 +71335,7 @@ var init_file_watcher = __esm({
        * @returns True if the file matches any ignore pattern and should be skipped
        */
       shouldIgnore(filename) {
-        const name = (0, import_path44.basename)(filename);
+        const name = (0, import_path45.basename)(filename);
         for (const pattern of this.config.ignorePatterns) {
           if (pattern.startsWith("*")) {
             if (name.endsWith(pattern.slice(1))) {
@@ -71136,7 +71361,7 @@ var init_file_watcher = __esm({
        * @param filename - The name of the file that changed
        */
       handleFileEvent(eventType, watchPath, filename) {
-        const fullPath = (0, import_path44.join)(watchPath, filename);
+        const fullPath = (0, import_path45.join)(watchPath, filename);
         const debounceKey = `${eventType}:${fullPath}`;
         const existingTimer = this.debounceTimers.get(debounceKey);
         if (existingTimer) {
@@ -71156,13 +71381,13 @@ var init_file_watcher = __esm({
        * @param filename - The name of the file that changed
        */
       async processFileEvent(eventType, watchPath, filename) {
-        const fullPath = (0, import_path44.join)(watchPath, filename);
+        const fullPath = (0, import_path45.join)(watchPath, filename);
         let fsEventType;
         let isDirectory = false;
         let size;
         try {
-          if ((0, import_fs45.existsSync)(fullPath)) {
-            const stats = (0, import_fs45.statSync)(fullPath);
+          if ((0, import_fs46.existsSync)(fullPath)) {
+            const stats = (0, import_fs46.statSync)(fullPath);
             isDirectory = stats.isDirectory();
             size = stats.size;
             fsEventType = eventType === "rename" ? "create" : "modify";
@@ -71307,12 +71532,12 @@ var init_file_watcher = __esm({
           this.config.watchPaths.push(path8);
           return true;
         }
-        const fullPath = (0, import_path44.join)(basePath, path8);
-        if (!(0, import_fs45.existsSync)(fullPath)) {
+        const fullPath = (0, import_path45.join)(basePath, path8);
+        if (!(0, import_fs46.existsSync)(fullPath)) {
           return false;
         }
         try {
-          const watcher = (0, import_fs45.watch)(
+          const watcher = (0, import_fs46.watch)(
             fullPath,
             { recursive: this.config.recursive },
             (eventType, filename) => {
@@ -71625,9 +71850,9 @@ async function confirm(message) {
   });
 }
 function isGalCreatedFile(filePath) {
-  if (!(0, import_fs46.existsSync)(filePath)) return false;
+  if (!(0, import_fs47.existsSync)(filePath)) return false;
   try {
-    const content = (0, import_fs46.readFileSync)(filePath, "utf-8");
+    const content = (0, import_fs47.readFileSync)(filePath, "utf-8");
     const galMarkers = [
       "GAL Config",
       "GAL CLI",
@@ -71647,9 +71872,9 @@ function isGalCreatedFile(filePath) {
   }
 }
 function isNpmInstalledFile(filePath) {
-  if (!(0, import_fs46.existsSync)(filePath)) return false;
+  if (!(0, import_fs47.existsSync)(filePath)) return false;
   try {
-    const content = (0, import_fs46.readFileSync)(filePath, "utf-8");
+    const content = (0, import_fs47.readFileSync)(filePath, "utf-8");
     return content.includes("CURRENT_VERSION =") || content.includes("const CURRENT_VERSION");
   } catch {
     return false;
@@ -71666,15 +71891,15 @@ function detectFileSource(filePath) {
 }
 function detectUserLevelItems(options) {
   const items = [];
-  const claudeDir = (0, import_path45.join)((0, import_os29.homedir)(), ".claude");
-  const claudeHooksDir = (0, import_path45.join)(claudeDir, "hooks");
-  const statusLinesDir = (0, import_path45.join)(claudeDir, "status_lines");
+  const claudeDir = (0, import_path46.join)((0, import_os29.homedir)(), ".claude");
+  const claudeHooksDir = (0, import_path46.join)(claudeDir, "hooks");
+  const statusLinesDir = (0, import_path46.join)(claudeDir, "status_lines");
   const includeNpm = options?.includeNpmInstalled ?? true;
-  if ((0, import_fs46.existsSync)(claudeHooksDir)) {
-    const files = (0, import_fs46.readdirSync)(claudeHooksDir);
+  if ((0, import_fs47.existsSync)(claudeHooksDir)) {
+    const files = (0, import_fs47.readdirSync)(claudeHooksDir);
     for (const file of files) {
       if (file.startsWith("gal-")) {
-        const filePath = (0, import_path45.join)(claudeHooksDir, file);
+        const filePath = (0, import_path46.join)(claudeHooksDir, file);
         const source = detectFileSource(filePath);
         if (!includeNpm && source === "npm") {
           continue;
@@ -71689,11 +71914,11 @@ function detectUserLevelItems(options) {
       }
     }
   }
-  if ((0, import_fs46.existsSync)(statusLinesDir)) {
-    const files = (0, import_fs46.readdirSync)(statusLinesDir);
+  if ((0, import_fs47.existsSync)(statusLinesDir)) {
+    const files = (0, import_fs47.readdirSync)(statusLinesDir);
     for (const file of files) {
       if (file.startsWith("gal-")) {
-        const filePath = (0, import_path45.join)(statusLinesDir, file);
+        const filePath = (0, import_path46.join)(statusLinesDir, file);
         const source = detectFileSource(filePath);
         if (!includeNpm && source === "npm") {
           continue;
@@ -71708,10 +71933,10 @@ function detectUserLevelItems(options) {
       }
     }
   }
-  const claudeSettingsPath = (0, import_path45.join)(claudeDir, "settings.json");
-  if ((0, import_fs46.existsSync)(claudeSettingsPath)) {
+  const claudeSettingsPath = (0, import_path46.join)(claudeDir, "settings.json");
+  if ((0, import_fs47.existsSync)(claudeSettingsPath)) {
     try {
-      const settings = JSON.parse((0, import_fs46.readFileSync)(claudeSettingsPath, "utf-8"));
+      const settings = JSON.parse((0, import_fs47.readFileSync)(claudeSettingsPath, "utf-8"));
       if (settings.hooks?.SessionStart) {
         const hasGalHooks = settings.hooks.SessionStart.some(
           (entry) => entry.hooks?.some(
@@ -71758,14 +71983,14 @@ function detectUserLevelItems(options) {
     } catch {
     }
   }
-  const cursorDir = (0, import_path45.join)((0, import_os29.homedir)(), ".cursor");
-  const cursorHooksDir = (0, import_path45.join)(cursorDir, "hooks");
-  if ((0, import_fs46.existsSync)(cursorHooksDir)) {
-    const files = (0, import_fs46.readdirSync)(cursorHooksDir);
+  const cursorDir = (0, import_path46.join)((0, import_os29.homedir)(), ".cursor");
+  const cursorHooksDir = (0, import_path46.join)(cursorDir, "hooks");
+  if ((0, import_fs47.existsSync)(cursorHooksDir)) {
+    const files = (0, import_fs47.readdirSync)(cursorHooksDir);
     for (const file of files) {
       if (file.startsWith("gal-")) {
         items.push({
-          path: (0, import_path45.join)(cursorHooksDir, file),
+          path: (0, import_path46.join)(cursorHooksDir, file),
           type: "file",
           reason: "GAL hook file for Cursor IDE",
           isGalOwned: true
@@ -71773,10 +71998,10 @@ function detectUserLevelItems(options) {
       }
     }
   }
-  const cursorHooksJsonPath = (0, import_path45.join)(cursorDir, "hooks.json");
-  if ((0, import_fs46.existsSync)(cursorHooksJsonPath)) {
+  const cursorHooksJsonPath = (0, import_path46.join)(cursorDir, "hooks.json");
+  if ((0, import_fs47.existsSync)(cursorHooksJsonPath)) {
     try {
-      const hooksConfig = JSON.parse((0, import_fs46.readFileSync)(cursorHooksJsonPath, "utf-8"));
+      const hooksConfig = JSON.parse((0, import_fs47.readFileSync)(cursorHooksJsonPath, "utf-8"));
       const hookTypes = ["beforeShellExecution", "beforeSubmitPrompt"];
       for (const hookType of hookTypes) {
         if (hooksConfig.hooks?.[hookType]) {
@@ -71802,8 +72027,8 @@ function detectUserLevelItems(options) {
 }
 function detectProjectLevelItems(directory) {
   const items = [];
-  const galDir = (0, import_path45.join)(directory, ".gal");
-  if ((0, import_fs46.existsSync)(galDir)) {
+  const galDir = (0, import_path46.join)(directory, ".gal");
+  if ((0, import_fs47.existsSync)(galDir)) {
     items.push({
       path: galDir,
       type: "directory",
@@ -71811,8 +72036,8 @@ function detectProjectLevelItems(directory) {
       isGalOwned: true
     });
   }
-  const galConfig = (0, import_path45.join)(directory, "gal.config.json");
-  if ((0, import_fs46.existsSync)(galConfig)) {
+  const galConfig = (0, import_path46.join)(directory, "gal.config.json");
+  if ((0, import_fs47.existsSync)(galConfig)) {
     items.push({
       path: galConfig,
       type: "file",
@@ -71821,11 +72046,11 @@ function detectProjectLevelItems(directory) {
     });
   }
   const gitHookPaths = [
-    (0, import_path45.join)(directory, ".git", "hooks", "pre-commit"),
-    (0, import_path45.join)(directory, ".husky", "pre-commit")
+    (0, import_path46.join)(directory, ".git", "hooks", "pre-commit"),
+    (0, import_path46.join)(directory, ".husky", "pre-commit")
   ];
   for (const hookPath of gitHookPaths) {
-    if ((0, import_fs46.existsSync)(hookPath) && isGalCreatedFile(hookPath)) {
+    if ((0, import_fs47.existsSync)(hookPath) && isGalCreatedFile(hookPath)) {
       items.push({
         path: hookPath,
         type: "file",
@@ -71835,18 +72060,18 @@ function detectProjectLevelItems(directory) {
     }
   }
   const setupFiles = [
-    { path: (0, import_path45.join)(directory, "CLAUDE.md"), reason: "GAL-generated CLAUDE.md" },
-    { path: (0, import_path45.join)(directory, ".claude", "settings.json"), reason: "GAL-generated settings" },
-    { path: (0, import_path45.join)(directory, ".claude", "commands", "review.md"), reason: "GAL-generated command" },
-    { path: (0, import_path45.join)(directory, ".claude", "commands", "check.md"), reason: "GAL-generated command" },
-    { path: (0, import_path45.join)(directory, ".github", "workflows", "ci.yml"), reason: "GAL-generated workflow" },
-    { path: (0, import_path45.join)(directory, ".github", "workflows", "pr-governance.yml"), reason: "GAL-generated workflow" },
-    { path: (0, import_path45.join)(directory, ".gitleaks.toml"), reason: "GAL-generated security config" },
-    { path: (0, import_path45.join)(directory, "SECURITY.md"), reason: "GAL-generated security docs" },
-    { path: (0, import_path45.join)(directory, ".env.example"), reason: "GAL-generated env template" }
+    { path: (0, import_path46.join)(directory, "CLAUDE.md"), reason: "GAL-generated CLAUDE.md" },
+    { path: (0, import_path46.join)(directory, ".claude", "settings.json"), reason: "GAL-generated settings" },
+    { path: (0, import_path46.join)(directory, ".claude", "commands", "review.md"), reason: "GAL-generated command" },
+    { path: (0, import_path46.join)(directory, ".claude", "commands", "check.md"), reason: "GAL-generated command" },
+    { path: (0, import_path46.join)(directory, ".github", "workflows", "ci.yml"), reason: "GAL-generated workflow" },
+    { path: (0, import_path46.join)(directory, ".github", "workflows", "pr-governance.yml"), reason: "GAL-generated workflow" },
+    { path: (0, import_path46.join)(directory, ".gitleaks.toml"), reason: "GAL-generated security config" },
+    { path: (0, import_path46.join)(directory, "SECURITY.md"), reason: "GAL-generated security docs" },
+    { path: (0, import_path46.join)(directory, ".env.example"), reason: "GAL-generated env template" }
   ];
   for (const { path: path8, reason } of setupFiles) {
-    if ((0, import_fs46.existsSync)(path8) && isGalCreatedFile(path8)) {
+    if ((0, import_fs47.existsSync)(path8) && isGalCreatedFile(path8)) {
       items.push({
         path: path8,
         type: "file",
@@ -71859,12 +72084,12 @@ function detectProjectLevelItems(directory) {
 }
 function removeGalStatusLineEntry(settingsPath) {
   try {
-    const settings = JSON.parse((0, import_fs46.readFileSync)(settingsPath, "utf-8"));
+    const settings = JSON.parse((0, import_fs47.readFileSync)(settingsPath, "utf-8"));
     if (!settings.statusLine?.command?.includes("gal-")) {
       return false;
     }
     delete settings.statusLine;
-    (0, import_fs46.writeFileSync)(settingsPath, JSON.stringify(settings, null, 2));
+    (0, import_fs47.writeFileSync)(settingsPath, JSON.stringify(settings, null, 2));
     return true;
   } catch {
     return false;
@@ -71872,7 +72097,7 @@ function removeGalStatusLineEntry(settingsPath) {
 }
 function removeGalHookEntries(settingsPath) {
   try {
-    const settings = JSON.parse((0, import_fs46.readFileSync)(settingsPath, "utf-8"));
+    const settings = JSON.parse((0, import_fs47.readFileSync)(settingsPath, "utf-8"));
     let modified = false;
     for (const hookEvent of ["SessionStart", "UserPromptSubmit"]) {
       if (!settings.hooks?.[hookEvent]) continue;
@@ -71895,7 +72120,7 @@ function removeGalHookEntries(settingsPath) {
       delete settings.hooks;
     }
     if (modified) {
-      (0, import_fs46.writeFileSync)(settingsPath, JSON.stringify(settings, null, 2));
+      (0, import_fs47.writeFileSync)(settingsPath, JSON.stringify(settings, null, 2));
       return true;
     }
     return false;
@@ -71905,7 +72130,7 @@ function removeGalHookEntries(settingsPath) {
 }
 function removeGalCursorHookEntries(hooksJsonPath) {
   try {
-    const hooksConfig = JSON.parse((0, import_fs46.readFileSync)(hooksJsonPath, "utf-8"));
+    const hooksConfig = JSON.parse((0, import_fs47.readFileSync)(hooksJsonPath, "utf-8"));
     if (!hooksConfig.hooks) {
       return false;
     }
@@ -71929,7 +72154,7 @@ function removeGalCursorHookEntries(hooksJsonPath) {
       delete hooksConfig.hooks;
     }
     if (modified) {
-      (0, import_fs46.writeFileSync)(hooksJsonPath, JSON.stringify(hooksConfig, null, 2));
+      (0, import_fs47.writeFileSync)(hooksJsonPath, JSON.stringify(hooksConfig, null, 2));
       return true;
     }
     return false;
@@ -71964,10 +72189,10 @@ function performUninstall(items, dryRun) {
           result.skipped.push(`${item.path} (no GAL statusLine found)`);
         }
       } else if (item.type === "directory") {
-        (0, import_fs46.rmSync)(item.path, { recursive: true, force: true });
+        (0, import_fs47.rmSync)(item.path, { recursive: true, force: true });
         result.removed.push(item.path);
       } else {
-        (0, import_fs46.unlinkSync)(item.path);
+        (0, import_fs47.unlinkSync)(item.path);
         result.removed.push(item.path);
       }
     } catch (error3) {
@@ -72063,14 +72288,14 @@ function createUninstallCommand() {
   });
   return command;
 }
-var import_fs46, import_path45, import_os29, import_readline5;
+var import_fs47, import_path46, import_os29, import_readline5;
 var init_uninstall = __esm({
   "src/commands/uninstall.ts"() {
     "use strict";
     init_esm();
     init_source();
-    import_fs46 = require("fs");
-    import_path45 = require("path");
+    import_fs47 = require("fs");
+    import_path46 = require("path");
     import_os29 = require("os");
     import_readline5 = require("readline");
   }
@@ -72489,27 +72714,27 @@ function compareVersions2(v1, v2) {
 }
 function acquireLock() {
   try {
-    const galDir = (0, import_path46.join)((0, import_os30.homedir)(), ".gal");
-    if (!(0, import_fs47.existsSync)(galDir)) {
-      (0, import_fs47.mkdirSync)(galDir, { recursive: true });
+    const galDir = (0, import_path47.join)((0, import_os30.homedir)(), ".gal");
+    if (!(0, import_fs48.existsSync)(galDir)) {
+      (0, import_fs48.mkdirSync)(galDir, { recursive: true });
     }
-    if ((0, import_fs47.existsSync)(UPDATE_LOCK_FILE)) {
+    if ((0, import_fs48.existsSync)(UPDATE_LOCK_FILE)) {
       try {
-        const lockContent = (0, import_fs47.readFileSync)(UPDATE_LOCK_FILE, "utf-8");
+        const lockContent = (0, import_fs48.readFileSync)(UPDATE_LOCK_FILE, "utf-8");
         const lockTime = parseInt(lockContent, 10);
         if (Number.isNaN(lockTime) || Date.now() - lockTime > 5 * 60 * 1e3) {
-          (0, import_fs47.unlinkSync)(UPDATE_LOCK_FILE);
+          (0, import_fs48.unlinkSync)(UPDATE_LOCK_FILE);
         } else {
           return false;
         }
       } catch {
         try {
-          (0, import_fs47.unlinkSync)(UPDATE_LOCK_FILE);
+          (0, import_fs48.unlinkSync)(UPDATE_LOCK_FILE);
         } catch {
         }
       }
     }
-    (0, import_fs47.writeFileSync)(UPDATE_LOCK_FILE, String(Date.now()), { flag: "wx" });
+    (0, import_fs48.writeFileSync)(UPDATE_LOCK_FILE, String(Date.now()), { flag: "wx" });
     return true;
   } catch {
     return false;
@@ -72517,15 +72742,15 @@ function acquireLock() {
 }
 function releaseLock() {
   try {
-    if ((0, import_fs47.existsSync)(UPDATE_LOCK_FILE)) {
-      (0, import_fs47.unlinkSync)(UPDATE_LOCK_FILE);
+    if ((0, import_fs48.existsSync)(UPDATE_LOCK_FILE)) {
+      (0, import_fs48.unlinkSync)(UPDATE_LOCK_FILE);
     }
   } catch {
   }
 }
 async function runPostUpdateInstallUpgrade() {
   await new Promise((resolve11) => {
-    const child = (0, import_child_process14.spawn)("gal", ["install", "--upgrade", "--quiet"], {
+    const child = (0, import_child_process15.spawn)("gal", ["install", "--upgrade", "--quiet"], {
       stdio: "ignore",
       env: {
         ...process.env,
@@ -72623,7 +72848,7 @@ function createUpdateCommand() {
         console.log(source_default.dim("\nRestarting with new version...\n"));
         const args2 = process.argv.slice(2).filter((a) => a !== "update" && a !== "upgrade");
         if (args2.length > 0) {
-          const child = (0, import_child_process14.spawn)("gal", args2, { stdio: "inherit" });
+          const child = (0, import_child_process15.spawn)("gal", args2, { stdio: "inherit" });
           child.on("exit", (code) => process.exit(code || 0));
         } else {
           process.exit(0);
@@ -72656,7 +72881,7 @@ Retry manually with: ${source_default.cyan(installCommand)}`);
   });
   return command;
 }
-var import_https, import_child_process14, import_fs47, import_path46, import_os30, UPDATE_LOCK_FILE, cliVersion7, REGISTRY_URL;
+var import_https, import_child_process15, import_fs48, import_path47, import_os30, UPDATE_LOCK_FILE, cliVersion7, REGISTRY_URL;
 var init_update = __esm({
   "src/commands/update.ts"() {
     "use strict";
@@ -72664,15 +72889,15 @@ var init_update = __esm({
     init_source();
     init_ora();
     import_https = __toESM(require("https"), 1);
-    import_child_process14 = require("child_process");
-    import_fs47 = require("fs");
-    import_path46 = require("path");
+    import_child_process15 = require("child_process");
+    import_fs48 = require("fs");
+    import_path47 = require("path");
     import_os30 = require("os");
     init_constants();
     init_path_conflict();
     init_install();
     init_telemetry();
-    UPDATE_LOCK_FILE = (0, import_path46.join)((0, import_os30.homedir)(), ".gal", "update.lock");
+    UPDATE_LOCK_FILE = (0, import_path47.join)((0, import_os30.homedir)(), ".gal", "update.lock");
     cliVersion7 = constants_default[0];
     REGISTRY_URL = getRegistryUrl();
   }
@@ -73180,9 +73405,9 @@ function createWorkflowCommand() {
     const apiUrl = process.env.GAL_API_URL || defaultApiUrl19;
     try {
       const spinner = ora(`Reading ${filePath}...`).start();
-      const absolutePath = import_path47.default.resolve(filePath);
+      const absolutePath = import_path48.default.resolve(filePath);
       const content = await import_promises9.default.readFile(absolutePath, "utf-8");
-      const fileName = import_path47.default.basename(filePath);
+      const fileName = import_path48.default.basename(filePath);
       let type = options.type;
       if (!type) {
         if (fileName.endsWith(".md")) {
@@ -73238,7 +73463,7 @@ function createWorkflowCommand() {
         spinner.fail(source_default.red("No organization found. Please connect GitHub via dashboard or use --org flag"));
         process.exit(1);
       }
-      const dirPath = import_path47.default.resolve(directory);
+      const dirPath = import_path48.default.resolve(directory);
       const files = await import_promises9.default.readdir(dirPath);
       const workflowFiles = files.filter(
         (f) => f.endsWith(".md") || f.includes("hook") && (f.endsWith(".json") || f.endsWith(".py") || f.endsWith(".js"))
@@ -73250,7 +73475,7 @@ function createWorkflowCommand() {
       spinner.text = `Found ${workflowFiles.length} workflow files. Preparing batch test...`;
       const requests = [];
       for (const file of workflowFiles) {
-        const filePath = import_path47.default.join(dirPath, file);
+        const filePath = import_path48.default.join(dirPath, file);
         const content = await import_promises9.default.readFile(filePath, "utf-8");
         const type = file.endsWith(".md") ? "command" : "hook";
         requests.push({
@@ -73348,7 +73573,7 @@ function displayTestResult(result) {
   }
   console.log();
 }
-var import_promises9, import_path47, defaultApiUrl19;
+var import_promises9, import_path48, defaultApiUrl19;
 var init_workflow2 = __esm({
   "src/commands/workflow.ts"() {
     "use strict";
@@ -73356,7 +73581,7 @@ var init_workflow2 = __esm({
     init_source();
     init_ora();
     import_promises9 = __toESM(require("fs/promises"), 1);
-    import_path47 = __toESM(require("path"), 1);
+    import_path48 = __toESM(require("path"), 1);
     init_constants();
     init_client();
     defaultApiUrl19 = constants_default[1];
@@ -73690,11 +73915,11 @@ function getRegistryAuthToken2() {
     return void 0;
   }
   try {
-    const npmrcPath = (0, import_path48.join)((0, import_os31.homedir)(), ".npmrc");
-    if (!(0, import_fs48.existsSync)(npmrcPath)) {
+    const npmrcPath = (0, import_path49.join)((0, import_os31.homedir)(), ".npmrc");
+    if (!(0, import_fs49.existsSync)(npmrcPath)) {
       return void 0;
     }
-    const npmrc = (0, import_fs48.readFileSync)(npmrcPath, "utf-8");
+    const npmrc = (0, import_fs49.readFileSync)(npmrcPath, "utf-8");
     const escapedHost = REGISTRY_HOST.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
     const match = npmrc.match(
       new RegExp(`^//${escapedHost}/:_authToken=(.+)$`, "m")
@@ -73714,8 +73939,8 @@ function getRegistryAuthToken2() {
 }
 function readUpdateCache() {
   try {
-    if ((0, import_fs48.existsSync)(UPDATE_CACHE_FILE)) {
-      return JSON.parse((0, import_fs48.readFileSync)(UPDATE_CACHE_FILE, "utf-8"));
+    if ((0, import_fs49.existsSync)(UPDATE_CACHE_FILE)) {
+      return JSON.parse((0, import_fs49.readFileSync)(UPDATE_CACHE_FILE, "utf-8"));
     }
   } catch {
   }
@@ -73723,10 +73948,10 @@ function readUpdateCache() {
 }
 function writeUpdateCache(cache) {
   try {
-    if (!(0, import_fs48.existsSync)(UPDATE_CACHE_DIR)) {
-      (0, import_fs48.mkdirSync)(UPDATE_CACHE_DIR, { recursive: true });
+    if (!(0, import_fs49.existsSync)(UPDATE_CACHE_DIR)) {
+      (0, import_fs49.mkdirSync)(UPDATE_CACHE_DIR, { recursive: true });
     }
-    (0, import_fs48.writeFileSync)(UPDATE_CACHE_FILE, JSON.stringify(cache));
+    (0, import_fs49.writeFileSync)(UPDATE_CACHE_FILE, JSON.stringify(cache));
   } catch {
   }
 }
@@ -73776,7 +74001,7 @@ async function promptUpdateInteractive(currentVersion, latestVersion) {
 }
 async function runInlineUpdate() {
   return new Promise((resolve11, reject) => {
-    const child = (0, import_child_process15.spawn)("gal", ["update"], {
+    const child = (0, import_child_process16.spawn)("gal", ["update"], {
       stdio: "inherit",
       env: { ...process.env, GAL_AUTO_UPDATE: "0" }
     });
@@ -73835,7 +74060,7 @@ async function checkForUpdates() {
           const args2 = process.argv.slice(2).filter((a) => a !== "update");
           console.log(source_default.dim("\nRestarting with new version...\n"));
           if (args2.length > 0) {
-            const child = (0, import_child_process15.spawn)("gal", args2, { stdio: "inherit" });
+            const child = (0, import_child_process16.spawn)("gal", args2, { stdio: "inherit" });
             child.on("exit", (code) => process.exit(code || 0));
           } else {
             process.exit(0);
@@ -73864,9 +74089,9 @@ async function checkForUpdates() {
     });
     if (!isUpdateCommand && !isCI && !isAutoUpdateDisabled) {
       try {
-        const lockFile = (0, import_path48.join)((0, import_os31.homedir)(), ".gal", "update.lock");
-        if (!(0, import_fs48.existsSync)(lockFile)) {
-          const child = (0, import_child_process15.spawn)("gal", ["update"], {
+        const lockFile = (0, import_path49.join)((0, import_os31.homedir)(), ".gal", "update.lock");
+        if (!(0, import_fs49.existsSync)(lockFile)) {
+          const child = (0, import_child_process16.spawn)("gal", ["update"], {
             detached: true,
             stdio: "ignore",
             env: { ...process.env, GAL_AUTO_UPDATE: "1" }
@@ -73914,9 +74139,9 @@ async function checkForUpdates() {
 function checkPathConflicts() {
   try {
     if (process.env.CI === "true" || process.argv.includes("--json")) return;
-    const CONFLICT_CACHE = (0, import_path48.join)(UPDATE_CACHE_DIR, "path-conflict-cache.json");
-    if ((0, import_fs48.existsSync)(CONFLICT_CACHE)) {
-      const cached2 = JSON.parse((0, import_fs48.readFileSync)(CONFLICT_CACHE, "utf-8"));
+    const CONFLICT_CACHE = (0, import_path49.join)(UPDATE_CACHE_DIR, "path-conflict-cache.json");
+    if ((0, import_fs49.existsSync)(CONFLICT_CACHE)) {
+      const cached2 = JSON.parse((0, import_fs49.readFileSync)(CONFLICT_CACHE, "utf-8"));
       if (Date.now() - (cached2.lastCheck || 0) < ONE_DAY) {
         if (cached2.hasConflict) {
           process.on("exit", () => {
@@ -73930,10 +74155,10 @@ function checkPathConflicts() {
     const conflict = detectPathConflict(cliVersion9);
     const cacheData = { lastCheck: Date.now(), hasConflict: !!conflict };
     try {
-      if (!(0, import_fs48.existsSync)(UPDATE_CACHE_DIR)) {
-        (0, import_fs48.mkdirSync)(UPDATE_CACHE_DIR, { recursive: true });
+      if (!(0, import_fs49.existsSync)(UPDATE_CACHE_DIR)) {
+        (0, import_fs49.mkdirSync)(UPDATE_CACHE_DIR, { recursive: true });
       }
-      (0, import_fs48.writeFileSync)(CONFLICT_CACHE, JSON.stringify(cacheData));
+      (0, import_fs49.writeFileSync)(CONFLICT_CACHE, JSON.stringify(cacheData));
     } catch {
     }
     if (conflict) {
@@ -73946,9 +74171,9 @@ function checkPathConflicts() {
 }
 function refreshOrgMemberships() {
   try {
-    const configPath = (0, import_path48.join)((0, import_os31.homedir)(), ".gal", "config.json");
-    if (!(0, import_fs48.existsSync)(configPath)) return;
-    const config2 = JSON.parse((0, import_fs48.readFileSync)(configPath, "utf-8"));
+    const configPath = (0, import_path49.join)((0, import_os31.homedir)(), ".gal", "config.json");
+    if (!(0, import_fs49.existsSync)(configPath)) return;
+    const config2 = JSON.parse((0, import_fs49.readFileSync)(configPath, "utf-8"));
     if (!config2.authToken) return;
     const checkedAt = config2.orgMembershipsCheckedAt || 0;
     if (Date.now() - checkedAt < ONE_DAY) return;
@@ -73980,10 +74205,10 @@ function refreshOrgMemberships() {
                 config2.capabilities = user.capabilities;
                 config2.capabilitiesCachedAt = Date.now();
               }
-              if (!(0, import_fs48.existsSync)(UPDATE_CACHE_DIR)) {
-                (0, import_fs48.mkdirSync)(UPDATE_CACHE_DIR, { recursive: true });
+              if (!(0, import_fs49.existsSync)(UPDATE_CACHE_DIR)) {
+                (0, import_fs49.mkdirSync)(UPDATE_CACHE_DIR, { recursive: true });
               }
-              (0, import_fs48.writeFileSync)(configPath, JSON.stringify(config2, null, 2));
+              (0, import_fs49.writeFileSync)(configPath, JSON.stringify(config2, null, 2));
             }
           } catch {
           }
@@ -74010,11 +74235,11 @@ function refreshOrgMemberships() {
             if (res.statusCode !== 200) return;
             const flags = JSON.parse(data);
             if (flags.orgAudienceTierMap) {
-              const freshConfig = JSON.parse((0, import_fs48.readFileSync)(configPath, "utf-8"));
+              const freshConfig = JSON.parse((0, import_fs49.readFileSync)(configPath, "utf-8"));
               freshConfig.orgAudienceTierMap = flags.orgAudienceTierMap;
               freshConfig.orgPlanMap = flags.orgPlanMap || freshConfig.orgPlanMap || {};
               freshConfig.flagsCachedAt = Date.now();
-              (0, import_fs48.writeFileSync)(configPath, JSON.stringify(freshConfig, null, 2));
+              (0, import_fs49.writeFileSync)(configPath, JSON.stringify(freshConfig, null, 2));
             }
           } catch {
           }
@@ -74033,7 +74258,7 @@ function refreshOrgMemberships() {
   } catch {
   }
 }
-var import_dotenv, import_https2, import_readline6, import_child_process15, import_fs48, import_path48, import_os31, originalEmit, GLOBAL_TIMEOUT_MS, globalTimeout, cliVersion9, UPDATE_CACHE_DIR, UPDATE_CACHE_FILE, ONE_DAY, REGISTRY_URL2, REGISTRY_HOST, sessionStartTime, isReadOnlyStatusCommand, isMachineMode, exitHooksRan, featureFlags, knownCommands, isKnownCommand, program2, allInternalFlags;
+var import_dotenv, import_https2, import_readline6, import_child_process16, import_fs49, import_path49, import_os31, originalEmit, GLOBAL_TIMEOUT_MS, globalTimeout, cliVersion9, UPDATE_CACHE_DIR, UPDATE_CACHE_FILE, ONE_DAY, REGISTRY_URL2, REGISTRY_HOST, sessionStartTime, isReadOnlyStatusCommand, isMachineMode, exitHooksRan, featureFlags, knownCommands, isKnownCommand, program2, allInternalFlags;
 var init_index = __esm({
   "src/index.ts"() {
     "use strict";
@@ -74041,9 +74266,9 @@ var init_index = __esm({
     import_dotenv = __toESM(require_main(), 1);
     import_https2 = __toESM(require("https"), 1);
     import_readline6 = __toESM(require("readline"), 1);
-    import_child_process15 = require("child_process");
-    import_fs48 = require("fs");
-    import_path48 = require("path");
+    import_child_process16 = require("child_process");
+    import_fs49 = require("fs");
+    import_path49 = require("path");
     import_os31 = require("os");
     init_source();
     init_constants();
@@ -74075,8 +74300,8 @@ var init_index = __esm({
     }, GLOBAL_TIMEOUT_MS);
     globalTimeout.unref();
     cliVersion9 = constants_default[0];
-    UPDATE_CACHE_DIR = (0, import_path48.join)((0, import_os31.homedir)(), ".gal");
-    UPDATE_CACHE_FILE = (0, import_path48.join)(UPDATE_CACHE_DIR, "update-cache.json");
+    UPDATE_CACHE_DIR = (0, import_path49.join)((0, import_os31.homedir)(), ".gal");
+    UPDATE_CACHE_FILE = (0, import_path49.join)(UPDATE_CACHE_DIR, "update-cache.json");
     ONE_DAY = 24 * 60 * 60 * 1e3;
     REGISTRY_URL2 = (() => {
       const raw = process.env.GAL_REGISTRY_URL || "https://registry.npmjs.org";
@@ -74224,7 +74449,7 @@ var init_index = __esm({
 });
 
 // src/bootstrap.ts
-var cliVersion10 = true ? "0.0.469" : "0.0.0-dev";
+var cliVersion10 = true ? "0.0.471" : "0.0.0-dev";
 var args = process.argv.slice(2);
 var requestedGlobalHelp = args.length === 1 && (args[0] === "--help" || args[0] === "-h");
 var requestedVersion = args.length === 1 && (args[0] === "--version" || args[0] === "-V");